heyio 1.13.0 → 3.0.0

package/dist/api/middleware/auth.d.ts

@@ -0,0 +1,14 @@
+import type { NextFunction, Request, Response } from 'express';
+import type { IOConfig } from '../../config.js';
+/**
+ * Express middleware that verifies Supabase JWT tokens.
+ * If Supabase is not configured (no jwtSecret), all requests pass through.
+ * Exempt routes always pass through regardless of config.
+ */
+export declare function authMiddleware(config: IOConfig): (req: Request, res: Response, next: NextFunction) => void;
+/**
+ * Verify a JWT token for WebSocket connections.
+ * Returns true if valid or if auth is not configured.
+ */
+export declare function verifyWsToken(config: IOConfig, token: string | null): boolean;
+//# sourceMappingURL=auth.d.ts.map

package/dist/api/middleware/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../src/api/middleware/auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAE/D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAehD;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,QAAQ,IACtC,KAAK,OAAO,EAAE,KAAK,QAAQ,EAAE,MAAM,YAAY,KAAG,IAAI,CA+B9D;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAe7E"}

package/dist/api/middleware/auth.js

@@ -0,0 +1,66 @@
+import jwt from 'jsonwebtoken';
+import { createChildLogger } from '../../logging/logger.js';
+const logger = () => createChildLogger('auth');
+// Routes that don't require authentication
+const EXEMPT_ROUTES = [
+    { method: 'GET', path: '/api/health' },
+    { method: 'GET', path: '/api/config' },
+];
+function isExempt(method, path) {
+    return EXEMPT_ROUTES.some((r) => r.method === method.toUpperCase() && path.startsWith(r.path));
+}
+/**
+ * Express middleware that verifies Supabase JWT tokens.
+ * If Supabase is not configured (no jwtSecret), all requests pass through.
+ * Exempt routes always pass through regardless of config.
+ */
+export function authMiddleware(config) {
+    return (req, res, next) => {
+        // If no Supabase JWT secret configured, skip auth entirely (local-only mode)
+        if (!config.supabase.jwtSecret) {
+            next();
+            return;
+        }
+        // Exempt routes don't require auth
+        if (isExempt(req.method, req.path)) {
+            next();
+            return;
+        }
+        const authHeader = req.headers.authorization;
+        if (!authHeader?.startsWith('Bearer ')) {
+            res.status(401).json({ error: 'Missing or invalid Authorization header' });
+            return;
+        }
+        const token = authHeader.slice(7);
+        try {
+            jwt.verify(token, config.supabase.jwtSecret, {
+                algorithms: ['HS256'],
+            });
+            next();
+        }
+        catch (err) {
+            logger().debug({ err }, 'JWT verification failed');
+            res.status(401).json({ error: 'Invalid or expired token' });
+        }
+    };
+}
+/**
+ * Verify a JWT token for WebSocket connections.
+ * Returns true if valid or if auth is not configured.
+ */
+export function verifyWsToken(config, token) {
+    if (!config.supabase.jwtSecret) {
+        return true; // No auth configured — allow
+    }
+    if (!token) {
+        return false;
+    }
+    try {
+        jwt.verify(token, config.supabase.jwtSecret, { algorithms: ['HS256'] });
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=auth.js.map

package/dist/api/middleware/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../src/api/middleware/auth.ts"],"names":[],"mappings":"AACA,OAAO,GAAG,MAAM,cAAc,CAAC;AAE/B,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAE5D,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;AAE/C,2CAA2C;AAC3C,MAAM,aAAa,GAA4C;IAC9D,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE;IACtC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE;CACtC,CAAC;AAEF,SAAS,QAAQ,CAAC,MAAc,EAAE,IAAY;IAC7C,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AAChG,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,MAAgB;IAC9C,OAAO,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAQ,EAAE;QAChE,6EAA6E;QAC7E,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;YAChC,IAAI,EAAE,CAAC;YACP,OAAO;QACR,CAAC;QAED,mCAAmC;QACnC,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACpC,IAAI,EAAE,CAAC;YACP,OAAO;QACR,CAAC;QAED,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC;QAC7C,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACxC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yCAAyC,EAAE,CAAC,CAAC;YAC3E,OAAO;QACR,CAAC;QAED,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAElC,IAAI,CAAC;YACJ,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,SAAS,EAAE;gBAC5C,UAAU,EAAE,CAAC,OAAO,CAAC;aACrB,CAAC,CAAC;YACH,IAAI,EAAE,CAAC;QACR,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,MAAM,EAAE,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,yBAAyB,CAAC,CAAC;YACnD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC,CAAC;QAC7D,CAAC;IACF,CAAC,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,MAAgB,EAAE,KAAoB;IACnE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;QAChC,OAAO,IAAI,CAAC,CAAC,6BAA6B;IAC3C,CAAC;IAED,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,OAAO,KAAK,CAAC;IACd,CAAC;IAED,IAAI,CAAC;QACJ,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,SAAS,EAAE,EAAE,UAAU,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACxE,OAAO,IAAI,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,KAAK,CAAC;IACd,CAAC;AACF,CAAC"}

package/dist/api/notifications.d.ts

@@ -0,0 +1,14 @@
+import type { WebSocket } from 'ws';
+/**
+ * Register a WebSocket client for event notifications.
+ */
+export declare function subscribeClient(connectionId: string, ws: WebSocket): void;
+/**
+ * Unregister a WebSocket client.
+ */
+export declare function unsubscribeClient(connectionId: string): void;
+/**
+ * Initialize the notification system — subscribes to event bus and broadcasts to clients.
+ */
+export declare function initNotifications(): void;
+//# sourceMappingURL=notifications.d.ts.map

package/dist/api/notifications.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"notifications.d.ts","sourceRoot":"","sources":["../../src/api/notifications.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AASpC;;GAEG;AACH,wBAAgB,eAAe,CAAC,YAAY,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,GAAG,IAAI,CAEzE;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAE5D;AA8DD;;GAEG;AACH,wBAAgB,iBAAiB,IAAI,IAAI,CAkCxC"}

package/dist/api/notifications.js

@@ -0,0 +1,112 @@
+import { createChildLogger } from '../logging/logger.js';
+import { getEventBus } from '../squad/event-bus.js';
+const logger = () => createChildLogger('notifications');
+// Connected clients that want event notifications
+const subscribers = new Map();
+/**
+ * Register a WebSocket client for event notifications.
+ */
+export function subscribeClient(connectionId, ws) {
+    subscribers.set(connectionId, ws);
+}
+/**
+ * Unregister a WebSocket client.
+ */
+export function unsubscribeClient(connectionId) {
+    subscribers.delete(connectionId);
+}
+/**
+ * Render an event to a human-readable notification string.
+ */
+function renderNotification(event) {
+    switch (event.type) {
+        case 'squad:created':
+            return `🆕 Squad "${event.squadName}" has been hired`;
+        case 'squad:disbanded':
+            return `🗑️ Squad "${event.squadName}" has been disbanded`;
+        case 'squad:member_added':
+            return `👋 New member added to "${event.squadName}"`;
+        case 'squad:member_retired':
+            return `👤 Member retired from "${event.squadName}"`;
+        case 'instance:created':
+            return '🚀 New work instance started';
+        case 'instance:meeting_started':
+            return '🤝 Round-table meeting in progress';
+        case 'instance:meeting_complete':
+            return '✅ Meeting complete — consensus reached';
+        case 'instance:work_started':
+            return '⚡ Squad is working on tasks';
+        case 'instance:pr_created':
+            return `📬 PR created: ${event.data?.prUrl ?? ''}`;
+        case 'instance:complete':
+            return '🎉 Work instance completed successfully';
+        case 'instance:failed':
+            return '❌ Work instance failed';
+        case 'agent:task_started':
+            return `🔧 ${event.agentRole} started a task`;
+        case 'agent:task_completed':
+            return `✔️ ${event.agentRole} completed a task`;
+        case 'agent:error':
+            return `⚠️ ${event.agentRole} encountered an error`;
+        case 'agent:permission_denied':
+            return `🚫 ${event.agentRole} was denied permission`;
+        case 'agent:tool_call':
+            return `🛠️ ${event.agentRole} used a tool`;
+        case 'meeting:contribution':
+            return `💬 ${event.agentRole}: "${event.content.slice(0, 80)}"`;
+        case 'meeting:consensus_reached':
+            return '🤝 Consensus reached in meeting';
+        case 'meeting:veto':
+            return `🛑 ${event.agentRole} vetoed the proposal`;
+        case 'inbox:new':
+            return event.kind === 'question'
+                ? `❓ Squad has a question: "${event.title}"`
+                : `📋 Squad delivered: "${event.title}"`;
+        case 'inbox:resolved':
+            return `✅ Inbox item resolved: "${event.title}"`;
+        case 'schedule:fired':
+            return `⏰ Schedule fired: "${event.data?.name ?? 'unknown'}"`;
+        case 'schedule:completed':
+            return `✅ Schedule completed: "${event.data?.name ?? 'unknown'}"`;
+        case 'schedule:failed':
+            return `❌ Schedule failed: "${event.data?.name ?? 'unknown'}"`;
+        default:
+            return `📣 Event: ${event.type}`;
+    }
+}
+/**
+ * Initialize the notification system — subscribes to event bus and broadcasts to clients.
+ */
+export function initNotifications() {
+    const log = logger();
+    getEventBus().onAny((event) => {
+        const notification = renderNotification(event);
+        const payload = JSON.stringify({
+            type: 'event',
+            notification,
+            event: {
+                id: event.id,
+                type: event.type,
+                timestamp: event.timestamp.toISOString(),
+                squadId: event.squadId,
+                instanceId: event.instanceId,
+                data: 'data' in event ? event.data : undefined,
+            },
+        });
+        let delivered = 0;
+        for (const [connId, ws] of subscribers) {
+            if (ws.readyState === ws.OPEN) {
+                ws.send(payload);
+                delivered++;
+            }
+            else {
+                subscribers.delete(connId);
+            }
+        }
+        if (delivered > 0) {
+            log.debug({ eventType: event.type, delivered }, 'Event broadcast');
+        }
+    });
+    log.info('Notification system initialized');
+}
+//# sourceMappingURL=notifications.js.map

package/dist/api/notifications.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"notifications.js","sourceRoot":"","sources":["../../src/api/notifications.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAEpD,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,iBAAiB,CAAC,eAAe,CAAC,CAAC;AAExD,kDAAkD;AAClD,MAAM,WAAW,GAAG,IAAI,GAAG,EAAqB,CAAC;AAEjD;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,YAAoB,EAAE,EAAa;IAClE,WAAW,CAAC,GAAG,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;AACnC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,YAAoB;IACrD,WAAW,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;AAClC,CAAC;AAED;;GAEG;AACH,SAAS,kBAAkB,CAAC,KAAc;IACzC,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,eAAe;YACnB,OAAO,aAAa,KAAK,CAAC,SAAS,kBAAkB,CAAC;QACvD,KAAK,iBAAiB;YACrB,OAAO,cAAc,KAAK,CAAC,SAAS,sBAAsB,CAAC;QAC5D,KAAK,oBAAoB;YACxB,OAAO,2BAA2B,KAAK,CAAC,SAAS,GAAG,CAAC;QACtD,KAAK,sBAAsB;YAC1B,OAAO,2BAA2B,KAAK,CAAC,SAAS,GAAG,CAAC;QACtD,KAAK,kBAAkB;YACtB,OAAO,8BAA8B,CAAC;QACvC,KAAK,0BAA0B;YAC9B,OAAO,oCAAoC,CAAC;QAC7C,KAAK,2BAA2B;YAC/B,OAAO,wCAAwC,CAAC;QACjD,KAAK,uBAAuB;YAC3B,OAAO,6BAA6B,CAAC;QACtC,KAAK,qBAAqB;YACzB,OAAO,kBAAmB,KAAK,CAAC,IAA2B,EAAE,KAAK,IAAI,EAAE,EAAE,CAAC;QAC5E,KAAK,mBAAmB;YACvB,OAAO,yCAAyC,CAAC;QAClD,KAAK,iBAAiB;YACrB,OAAO,wBAAwB,CAAC;QACjC,KAAK,oBAAoB;YACxB,OAAO,MAAM,KAAK,CAAC,SAAS,iBAAiB,CAAC;QAC/C,KAAK,sBAAsB;YAC1B,OAAO,MAAM,KAAK,CAAC,SAAS,mBAAmB,CAAC;QACjD,KAAK,aAAa;YACjB,OAAO,MAAM,KAAK,CAAC,SAAS,uBAAuB,CAAC;QACrD,KAAK,yBAAyB;YAC7B,OAAO,MAAM,KAAK,CAAC,SAAS,wBAAwB,CAAC;QACtD,KAAK,iBAAiB;YACrB,OAAO,OAAO,KAAK,CAAC,SAAS,cAAc,CAAC;QAC7C,KAAK,sBAAsB;YAC1B,OAAO,MAAM,KAAK,CAAC,SAAS,MAAM,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC;QACjE,KAAK,2BAA2B;YAC/B,OAAO,iCAAiC,CAAC;QAC1C,KAAK,cAAc;YAClB,OAAO,MAAM,KAAK,CAAC,SAAS,sBAAsB,CAAC;QACpD,KAAK,WAAW;YACf,OAAO,KAAK,CAAC,IAAI,KAAK,UAAU;gBAC/B,CAAC,CAAC,4BAA4B,KAAK,CAAC,KAAK,GAAG;gBAC5C,CAAC,CAAC,wBAAwB,KAAK,CAAC,KAAK,GAAG,CAAC;QAC3C,KAAK,gBAAgB;YACpB,OAAO,2BAA2B,KAAK,CAAC,KAAK,GAAG,CAAC;QAClD,KAAK,gBAAgB;YACpB,OAAO,sBAAuB,KAAK,CAAC,IAA0B,EAAE,IAAI,IAAI,SAAS,GAAG,CAAC;QACtF,KAAK,oBAAoB;YACxB,OAAO,0BAA2B,KAAK,CAAC,IAA0B,EAAE,IAAI,IAAI,SAAS,GAAG,CAAC;QAC1F,KAAK,iBAAiB;YACrB,OAAO,uBAAwB,KAAK,CAAC,IAA0B,EAAE,IAAI,IAAI,SAAS,GAAG,CAAC;QACvF;YACC,OAAO,aAAc,KAA0B,CAAC,IAAI,EAAE,CAAC;IACzD,CAAC;AACF,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB;IAChC,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;IAErB,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;QACtC,MAAM,YAAY,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC;YAC9B,IAAI,EAAE,OAAO;YACb,YAAY;YACZ,KAAK,EAAE;gBACN,EAAE,EAAE,KAAK,CAAC,EAAE;gBACZ,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE;gBACxC,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,IAAI,EAAE,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;aAC9C;SACD,CAAC,CAAC;QAEH,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,KAAK,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,WAAW,EAAE,CAAC;YACxC,IAAI,EAAE,CAAC,UAAU,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC;gBAC/B,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACjB,SAAS,EAAE,CAAC;YACb,CAAC;iBAAM,CAAC;gBACP,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC5B,CAAC;QACF,CAAC;QAED,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;YACnB,GAAG,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE,iBAAiB,CAAC,CAAC;QACpE,CAAC;IACF,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;AAC7C,CAAC"}

package/dist/api/routes/activity.d.ts

@@ -0,0 +1,3 @@
+import { Router } from 'express';
+export declare function activityRouter(): Router;
+//# sourceMappingURL=activity.d.ts.map

package/dist/api/routes/activity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"activity.d.ts","sourceRoot":"","sources":["../../../src/api/routes/activity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAGjC,wBAAgB,cAAc,IAAI,MAAM,CAyBvC"}

package/dist/api/routes/activity.js

@@ -0,0 +1,28 @@
+import { Router } from 'express';
+import { queryActivity } from '../../store/activity.js';
+export function activityRouter() {
+    const router = Router();
+    /**
+     * GET /api/activity
+     * Query agent activity log with optional filters.
+     * Query params: squad, instance, agent, type, limit, offset
+     */
+    router.get('/activity', async (req, res) => {
+        try {
+            const entries = await queryActivity({
+                squadId: req.query.squad,
+                instanceId: req.query.instance,
+                agentRole: req.query.agent,
+                activityType: req.query.type,
+                limit: req.query.limit ? Number.parseInt(req.query.limit, 10) : undefined,
+                offset: req.query.offset ? Number.parseInt(req.query.offset, 10) : undefined,
+            });
+            res.json({ entries });
+        }
+        catch (err) {
+            res.status(500).json({ error: 'Failed to query activity' });
+        }
+    });
+    return router;
+}
+//# sourceMappingURL=activity.js.map

package/dist/api/routes/activity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"activity.js","sourceRoot":"","sources":["../../../src/api/routes/activity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAqB,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAE3E,MAAM,UAAU,cAAc;IAC7B,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;IAExB;;;;OAIG;IACH,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC1C,IAAI,CAAC;YACJ,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC;gBACnC,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,KAA2B;gBAC9C,UAAU,EAAE,GAAG,CAAC,KAAK,CAAC,QAA8B;gBACpD,SAAS,EAAE,GAAG,CAAC,KAAK,CAAC,KAA2B;gBAChD,YAAY,EAAE,GAAG,CAAC,KAAK,CAAC,IAAgC;gBACxD,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,KAAe,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;gBACnF,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,MAAgB,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;aACtF,CAAC,CAAC;YACH,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QACvB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC,CAAC;QAC7D,CAAC;IACF,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AACf,CAAC"}

package/dist/api/routes/attachments.d.ts

@@ -0,0 +1,3 @@
+import { Router } from 'express';
+export declare function attachmentsRouter(dataDir: string): Router;
+//# sourceMappingURL=attachments.d.ts.map

package/dist/api/routes/attachments.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attachments.d.ts","sourceRoot":"","sources":["../../../src/api/routes/attachments.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAIjC,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAqFzD"}

package/dist/api/routes/attachments.js

@@ -0,0 +1,83 @@
+import { createReadStream, existsSync, mkdirSync } from 'node:fs';
+import { writeFile } from 'node:fs/promises';
+import { join } from 'node:path';
+import { Router } from 'express';
+import multer from 'multer';
+import { getDatabase } from '../../store/db.js';
+export function attachmentsRouter(dataDir) {
+    const router = Router();
+    const attachmentsDir = join(dataDir, 'attachments');
+    mkdirSync(attachmentsDir, { recursive: true });
+    // Use memory storage — we'll write to disk ourselves with proper naming
+    const upload = multer({
+        storage: multer.memoryStorage(),
+        limits: { fileSize: 50 * 1024 * 1024 },
+    });
+    /**
+     * POST /api/attachments
+     * Upload a file attachment. Returns the attachment metadata.
+     */
+    router.post('/attachments', upload.single('file'), async (req, res) => {
+        try {
+            const file = req.file;
+            if (!file) {
+                res.status(400).json({ error: 'No file uploaded' });
+                return;
+            }
+            const id = crypto.randomUUID();
+            const messageId = req.body?.messageId ?? null;
+            const fileDir = join(attachmentsDir, id);
+            mkdirSync(fileDir, { recursive: true });
+            const diskPath = join(fileDir, file.originalname);
+            await writeFile(diskPath, file.buffer);
+            const db = getDatabase();
+            await db.execute({
+                sql: `INSERT INTO attachments (id, message_id, filename, mime_type, size_bytes, disk_path)
+				      VALUES (?, ?, ?, ?, ?, ?)`,
+                args: [id, messageId, file.originalname, file.mimetype, file.size, diskPath],
+            });
+            res.status(201).json({
+                id,
+                filename: file.originalname,
+                mimeType: file.mimetype,
+                sizeBytes: file.size,
+            });
+        }
+        catch (err) {
+            res.status(500).json({ error: 'Failed to upload attachment' });
+        }
+    });
+    /**
+     * GET /api/attachments/:id
+     * Download an attachment by ID.
+     */
+    router.get('/attachments/:id', async (req, res) => {
+        try {
+            const db = getDatabase();
+            const result = await db.execute({
+                sql: 'SELECT filename, mime_type, disk_path FROM attachments WHERE id = ?',
+                args: [req.params.id],
+            });
+            if (result.rows.length === 0) {
+                res.status(404).json({ error: 'Attachment not found' });
+                return;
+            }
+            const row = result.rows[0];
+            const diskPath = row.disk_path;
+            const filename = row.filename;
+            const mimeType = row.mime_type ?? 'application/octet-stream';
+            if (!existsSync(diskPath)) {
+                res.status(404).json({ error: 'Attachment file missing from disk' });
+                return;
+            }
+            res.setHeader('Content-Type', mimeType);
+            res.setHeader('Content-Disposition', `attachment; filename="${filename}"`);
+            createReadStream(diskPath).pipe(res);
+        }
+        catch (err) {
+            res.status(500).json({ error: 'Failed to retrieve attachment' });
+        }
+    });
+    return router;
+}
+//# sourceMappingURL=attachments.js.map

package/dist/api/routes/attachments.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attachments.js","sourceRoot":"","sources":["../../../src/api/routes/attachments.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAClE,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhD,MAAM,UAAU,iBAAiB,CAAC,OAAe;IAChD,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;IACxB,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IACpD,SAAS,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE/C,wEAAwE;IACxE,MAAM,MAAM,GAAG,MAAM,CAAC;QACrB,OAAO,EAAE,MAAM,CAAC,aAAa,EAAE;QAC/B,MAAM,EAAE,EAAE,QAAQ,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE;KACtC,CAAC,CAAC;IAEH;;;OAGG;IACH,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACrE,IAAI,CAAC;YACJ,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;YACtB,IAAI,CAAC,IAAI,EAAE,CAAC;gBACX,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBACpD,OAAO;YACR,CAAC;YAED,MAAM,EAAE,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;YAC/B,MAAM,SAAS,GAAI,GAAG,CAAC,IAAI,EAAE,SAAoB,IAAI,IAAI,CAAC;YAC1D,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;YACzC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;YAElD,MAAM,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YAEvC,MAAM,EAAE,GAAG,WAAW,EAAE,CAAC;YACzB,MAAM,EAAE,CAAC,OAAO,CAAC;gBAChB,GAAG,EAAE;oCAC2B;gBAChC,IAAI,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC;aAC5E,CAAC,CAAC;YAEH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACpB,EAAE;gBACF,QAAQ,EAAE,IAAI,CAAC,YAAY;gBAC3B,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,SAAS,EAAE,IAAI,CAAC,IAAI;aACpB,CAAC,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC,CAAC;QAChE,CAAC;IACF,CAAC,CAAC,CAAC;IAEH;;;OAGG;IACH,MAAM,CAAC,GAAG,CAAC,kBAAkB,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACjD,IAAI,CAAC;YACJ,MAAM,EAAE,GAAG,WAAW,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC;gBAC/B,GAAG,EAAE,qEAAqE;gBAC1E,IAAI,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;aACrB,CAAC,CAAC;YAEH,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC9B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC;gBACxD,OAAO;YACR,CAAC;YAED,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC3B,MAAM,QAAQ,GAAG,GAAG,CAAC,SAAmB,CAAC;YACzC,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAkB,CAAC;YACxC,MAAM,QAAQ,GAAI,GAAG,CAAC,SAAoB,IAAI,0BAA0B,CAAC;YAEzE,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC3B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC,CAAC;gBACrE,OAAO;YACR,CAAC;YAED,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;YACxC,GAAG,CAAC,SAAS,CAAC,qBAAqB,EAAE,yBAAyB,QAAQ,GAAG,CAAC,CAAC;YAC3E,gBAAgB,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAC,CAAC;QAClE,CAAC;IACF,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AACf,CAAC"}

package/dist/api/routes/config.d.ts

@@ -0,0 +1,3 @@
+import { Router } from 'express';
+export declare function configRouter(): Router;
+//# sourceMappingURL=config.d.ts.map

package/dist/api/routes/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../src/api/routes/config.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAGjC,wBAAgB,YAAY,IAAI,MAAM,CA4GrC"}

package/dist/api/routes/config.js

@@ -0,0 +1,106 @@
+import { existsSync, readFileSync, writeFileSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+import { Router } from 'express';
+import { loadConfig } from '../../config.js';
+export function configRouter() {
+    const router = Router();
+    function getConfigPath() {
+        const dataDir = process.env.IO_DATA_DIR ?? join(homedir(), '.io');
+        const resolved = dataDir.startsWith('~') ? join(homedir(), dataDir.slice(1)) : dataDir;
+        return join(resolved, 'config.json');
+    }
+    /**
+     * GET /api/config
+     * Return current config with sensitive fields redacted.
+     */
+    router.get('/config', (_req, res) => {
+        try {
+            const config = loadConfig();
+            // Redact sensitive fields
+            const redacted = {
+                apiPort: config.apiPort,
+                logLevel: config.logLevel,
+                defaultModel: config.defaultModel,
+                maxInstancesPerSquad: config.maxInstancesPerSquad,
+                dataDir: config.dataDir,
+                pricing: config.pricing,
+                telegram: {
+                    botToken: config.telegram.botToken ? '••••••••' : null,
+                    allowedChatIds: config.telegram.allowedChatIds,
+                },
+                supabase: {
+                    projectUrl: config.supabase.projectUrl,
+                    anonKey: config.supabase.anonKey,
+                    jwtSecret: config.supabase.jwtSecret ? '••••••••' : null,
+                },
+            };
+            res.json({ config: redacted });
+        }
+        catch (err) {
+            res.status(500).json({ error: 'Failed to load config' });
+        }
+    });
+    /**
+     * PATCH /api/config
+     * Merge partial config into config.json on disk.
+     * Does NOT accept dataDir changes (immutable).
+     * Body: partial config object
+     */
+    router.patch('/config', (req, res) => {
+        try {
+            const updates = req.body;
+            if (!updates || typeof updates !== 'object') {
+                res.status(400).json({ error: 'Body must be a JSON object' });
+                return;
+            }
+            // Disallow changing dataDir (would break running daemon)
+            delete updates.dataDir;
+            const configPath = getConfigPath();
+            let existing = {};
+            if (existsSync(configPath)) {
+                existing = JSON.parse(readFileSync(configPath, 'utf-8'));
+            }
+            // Deep merge one level (telegram, pricing)
+            const merged = { ...existing };
+            for (const [key, value] of Object.entries(updates)) {
+                if (value !== null &&
+                    typeof value === 'object' &&
+                    !Array.isArray(value) &&
+                    typeof merged[key] === 'object') {
+                    merged[key] = { ...merged[key], ...value };
+                }
+                else {
+                    merged[key] = value;
+                }
+            }
+            writeFileSync(configPath, JSON.stringify(merged, null, 2), 'utf-8');
+            // Reload and return redacted
+            const config = loadConfig();
+            res.json({
+                config: {
+                    apiPort: config.apiPort,
+                    logLevel: config.logLevel,
+                    defaultModel: config.defaultModel,
+                    maxInstancesPerSquad: config.maxInstancesPerSquad,
+                    dataDir: config.dataDir,
+                    pricing: config.pricing,
+                    telegram: {
+                        botToken: config.telegram.botToken ? '••••••••' : null,
+                        allowedChatIds: config.telegram.allowedChatIds,
+                    },
+                    supabase: {
+                        projectUrl: config.supabase.projectUrl,
+                        anonKey: config.supabase.anonKey,
+                        jwtSecret: config.supabase.jwtSecret ? '••••••••' : null,
+                    },
+                },
+            });
+        }
+        catch (err) {
+            res.status(500).json({ error: 'Failed to update config' });
+        }
+    });
+    return router;
+}
+//# sourceMappingURL=config.js.map

package/dist/api/routes/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../../src/api/routes/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAClE,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAE7C,MAAM,UAAU,YAAY;IAC3B,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;IAExB,SAAS,aAAa;QACrB,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,KAAK,CAAC,CAAC;QAClE,MAAM,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QACvF,OAAO,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;IACtC,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QACnC,IAAI,CAAC;YACJ,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;YAC5B,0BAA0B;YAC1B,MAAM,QAAQ,GAAG;gBAChB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,oBAAoB,EAAE,MAAM,CAAC,oBAAoB;gBACjD,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,QAAQ,EAAE;oBACT,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI;oBACtD,cAAc,EAAE,MAAM,CAAC,QAAQ,CAAC,cAAc;iBAC9C;gBACD,QAAQ,EAAE;oBACT,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,UAAU;oBACtC,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO;oBAChC,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI;iBACxD;aACD,CAAC;YACF,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QAChC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;QAC1D,CAAC;IACF,CAAC,CAAC,CAAC;IAEH;;;;;OAKG;IACH,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACpC,IAAI,CAAC;YACJ,MAAM,OAAO,GAAG,GAAG,CAAC,IAA2B,CAAC;YAEhD,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;gBAC7C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC,CAAC;gBAC9D,OAAO;YACR,CAAC;YAED,yDAAyD;YACzD,OAAO,OAAO,CAAC,OAAO,CAAC;YAEvB,MAAM,UAAU,GAAG,aAAa,EAAE,CAAC;YACnC,IAAI,QAAQ,GAAwB,EAAE,CAAC;YACvC,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC5B,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;YAC1D,CAAC;YAED,2CAA2C;YAC3C,MAAM,MAAM,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;YAC/B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBACpD,IACC,KAAK,KAAK,IAAI;oBACd,OAAO,KAAK,KAAK,QAAQ;oBACzB,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;oBACrB,OAAO,MAAM,CAAC,GAAG,CAAC,KAAK,QAAQ,EAC9B,CAAC;oBACF,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC;gBAC5C,CAAC;qBAAM,CAAC;oBACP,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;gBACrB,CAAC;YACF,CAAC;YAED,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;YAEpE,6BAA6B;YAC7B,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;YAC5B,GAAG,CAAC,IAAI,CAAC;gBACR,MAAM,EAAE;oBACP,OAAO,EAAE,MAAM,CAAC,OAAO;oBACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,YAAY,EAAE,MAAM,CAAC,YAAY;oBACjC,oBAAoB,EAAE,MAAM,CAAC,oBAAoB;oBACjD,OAAO,EAAE,MAAM,CAAC,OAAO;oBACvB,OAAO,EAAE,MAAM,CAAC,OAAO;oBACvB,QAAQ,EAAE;wBACT,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI;wBACtD,cAAc,EAAE,MAAM,CAAC,QAAQ,CAAC,cAAc;qBAC9C;oBACD,QAAQ,EAAE;wBACT,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,UAAU;wBACtC,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO;wBAChC,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI;qBACxD;iBACD;aACD,CAAC,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC;QAC5D,CAAC;IACF,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AACf,CAAC"}

package/dist/api/routes/conversations.d.ts

@@ -0,0 +1,3 @@
+import { Router } from 'express';
+export declare function conversationsRouter(): Router;
+//# sourceMappingURL=conversations.d.ts.map

package/dist/api/routes/conversations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"conversations.d.ts","sourceRoot":"","sources":["../../../src/api/routes/conversations.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAGjC,wBAAgB,mBAAmB,IAAI,MAAM,CAmF5C"}

package/dist/api/routes/conversations.js

@@ -0,0 +1,69 @@
+import { Router } from 'express';
+import { getDatabase } from '../../store/db.js';
+export function conversationsRouter() {
+    const router = Router();
+    /**
+     * GET /api/conversations
+     * Load chat history with cursor-based pagination.
+     * Query params: limit (default 50), before (message id for pagination)
+     */
+    router.get('/conversations', async (req, res) => {
+        try {
+            const limit = Math.min(Number.parseInt(req.query.limit, 10) || 50, 200);
+            const before = req.query.before;
+            const db = getDatabase();
+            let rows;
+            if (before) {
+                // Get the timestamp of the cursor message
+                const cursorResult = await db.execute({
+                    sql: 'SELECT created_at FROM conversations WHERE id = ?',
+                    args: [before],
+                });
+                if (cursorResult.rows.length === 0) {
+                    res.status(400).json({ error: 'Invalid cursor: message not found' });
+                    return;
+                }
+                const cursorTime = cursorResult.rows[0].created_at;
+                const result = await db.execute({
+                    sql: `SELECT id, role, content, source, attachments, created_at
+						FROM conversations
+						WHERE created_at < ? OR (created_at = ? AND id < ?)
+						ORDER BY created_at DESC, id DESC
+						LIMIT ?`,
+                    args: [cursorTime, cursorTime, before, limit],
+                });
+                rows = result.rows;
+            }
+            else {
+                const result = await db.execute({
+                    sql: `SELECT id, role, content, source, attachments, created_at
+						FROM conversations
+						ORDER BY created_at DESC, id DESC
+						LIMIT ?`,
+                    args: [limit],
+                });
+                rows = result.rows;
+            }
+            // Reverse so messages are in chronological order
+            const messages = rows.reverse().map((row) => ({
+                id: row.id,
+                role: row.role,
+                content: row.content,
+                source: row.source,
+                attachments: row.attachments ? JSON.parse(row.attachments) : null,
+                timestamp: row.created_at,
+            }));
+            const cursor = rows.length > 0 ? rows[0].id : null;
+            res.json({
+                messages,
+                cursor,
+                hasMore: rows.length === limit,
+            });
+        }
+        catch (err) {
+            res.status(500).json({ error: 'Failed to load conversations' });
+        }
+    });
+    return router;
+}
+//# sourceMappingURL=conversations.js.map

package/dist/api/routes/conversations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"conversations.js","sourceRoot":"","sources":["../../../src/api/routes/conversations.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhD,MAAM,UAAU,mBAAmB;IAClC,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;IAExB;;;;OAIG;IACH,MAAM,CAAC,GAAG,CAAC,gBAAgB,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC/C,IAAI,CAAC;YACJ,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,KAAe,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;YAClF,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,MAA4B,CAAC;YAEtD,MAAM,EAAE,GAAG,WAAW,EAAE,CAAC;YAEzB,IAAI,IAOF,CAAC;YAEH,IAAI,MAAM,EAAE,CAAC;gBACZ,0CAA0C;gBAC1C,MAAM,YAAY,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC;oBACrC,GAAG,EAAE,mDAAmD;oBACxD,IAAI,EAAE,CAAC,MAAM,CAAC;iBACd,CAAC,CAAC;gBAEH,IAAI,YAAY,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACpC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC,CAAC;oBACrE,OAAO;gBACR,CAAC;gBAED,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,UAAoB,CAAC;gBAE7D,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC;oBAC/B,GAAG,EAAE;;;;cAII;oBACT,IAAI,EAAE,CAAC,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,CAAC;iBAC7C,CAAC,CAAC;gBAEH,IAAI,GAAG,MAAM,CAAC,IAAW,CAAC;YAC3B,CAAC;iBAAM,CAAC;gBACP,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC;oBAC/B,GAAG,EAAE;;;cAGI;oBACT,IAAI,EAAE,CAAC,KAAK,CAAC;iBACb,CAAC,CAAC;gBAEH,IAAI,GAAG,MAAM,CAAC,IAAW,CAAC;YAC3B,CAAC;YAED,iDAAiD;YACjD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBAC7C,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,WAAW,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI;gBACjE,SAAS,EAAE,GAAG,CAAC,UAAU;aACzB,CAAC,CAAC,CAAC;YAEJ,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YAEnD,GAAG,CAAC,IAAI,CAAC;gBACR,QAAQ;gBACR,MAAM;gBACN,OAAO,EAAE,IAAI,CAAC,MAAM,KAAK,KAAK;aAC9B,CAAC,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,8BAA8B,EAAE,CAAC,CAAC;QACjE,CAAC;IACF,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AACf,CAAC"}

package/dist/api/routes/health.d.ts

@@ -0,0 +1,3 @@
+import { Router } from 'express';
+export declare function healthRouter(): Router;
+//# sourceMappingURL=health.d.ts.map

package/dist/api/routes/health.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"health.d.ts","sourceRoot":"","sources":["../../../src/api/routes/health.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAGjC,wBAAgB,YAAY,IAAI,MAAM,CAcrC"}

package/dist/api/routes/health.js

@@ -0,0 +1,16 @@
+import { Router } from 'express';
+import { getHealthStatus } from '../../copilot/health-monitor.js';
+export function healthRouter() {
+    const router = Router();
+    router.get('/health', (_req, res) => {
+        const health = getHealthStatus();
+        res.json({
+            status: health.status,
+            uptime: health.uptime,
+            copilotConnected: health.copilotConnected,
+            lastCheck: health.lastCheck.toISOString(),
+        });
+    });
+    return router;
+}
+//# sourceMappingURL=health.js.map

package/dist/api/routes/health.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"health.js","sourceRoot":"","sources":["../../../src/api/routes/health.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAElE,MAAM,UAAU,YAAY;IAC3B,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;IAExB,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QACnC,MAAM,MAAM,GAAG,eAAe,EAAE,CAAC;QACjC,GAAG,CAAC,IAAI,CAAC;YACR,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,WAAW,EAAE;SACzC,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AACf,CAAC"}

package/dist/api/routes/inbox.d.ts

@@ -0,0 +1,3 @@
+import { Router } from 'express';
+export declare function inboxRouter(): Router;
+//# sourceMappingURL=inbox.d.ts.map

package/dist/api/routes/inbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inbox.d.ts","sourceRoot":"","sources":["../../../src/api/routes/inbox.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAWjC,wBAAgB,WAAW,IAAI,MAAM,CAsFpC"}