langflower 0.1.0 → 0.1.2

package/vendor/server/dist/crawl/ssrf-guard.test.js

@@ -1,46 +0,0 @@
-import { describe, expect, it } from 'vitest';
-import { assertUrlSafeForFetch, isBlockedIpAddress } from './ssrf-guard.js';
-describe('isBlockedIpAddress', () => {
-    it.each([
-        '127.0.0.1',
-        '10.0.0.1',
-        '192.168.1.1',
-        '172.16.0.1',
-        '169.254.169.254',
-        '0.0.0.0',
-        '::1',
-        'fe80::1',
-        'fc00::1',
-    ])('blocks %s', (ip) => {
-        expect(isBlockedIpAddress(ip)).toBe(true);
-    });
-    it.each(['8.8.8.8', '1.1.1.1', '2001:4860:4860::8888'])('allows public %s', (ip) => {
-        expect(isBlockedIpAddress(ip)).toBe(false);
-    });
-});
-describe('assertUrlSafeForFetch', () => {
-    it('rejects non-http protocols', async () => {
-        await expect(assertUrlSafeForFetch('file:///etc/passwd', { skipDns: true })).rejects.toThrow(/protocol/i);
-    });
-    it('rejects localhost hostnames without DNS', async () => {
-        await expect(assertUrlSafeForFetch('http://localhost/secret', { skipDns: true })).rejects.toThrow(/hostname/i);
-        await expect(assertUrlSafeForFetch('http://127.0.0.1/', { skipDns: true })).rejects.toThrow(/IP/i);
-    });
-    it('enforces allowedHosts allowlist', async () => {
-        await expect(assertUrlSafeForFetch('https://evil.example/x', {
-            skipDns: true,
-            allowedHosts: ['docs.example'],
-        })).rejects.toThrow(/allowedHosts/i);
-        await expect(assertUrlSafeForFetch('https://docs.example/x', {
-            skipDns: true,
-            allowedHosts: ['docs.example'],
-        })).resolves.toMatchObject({ hostname: 'docs.example' });
-    });
-    it('allows public hostnames when DNS skipped', async () => {
-        const url = await assertUrlSafeForFetch('https://example.com/path', {
-            skipDns: true,
-        });
-        expect(url.toString()).toBe('https://example.com/path');
-    });
-});
-//# sourceMappingURL=ssrf-guard.test.js.map

package/vendor/server/dist/create-server.d.ts

@@ -1,10 +0,0 @@
-import { type TerminalExecutionProgressStatus } from '@langflower/shared/langflower.js';
-import http from 'node:http';
-export type CreateServerOptions = {
-    readonly projectDir: string;
-    readonly port?: number;
-    readonly uiDistPath?: string;
-    /** Fired once when a run settles naturally (`runner.done`). */
-    readonly onRunSettled?: (status: TerminalExecutionProgressStatus) => void;
-};
-export declare function createServer(options: CreateServerOptions): Promise<http.Server>;

package/vendor/server/dist/create-server.js

@@ -1,60 +0,0 @@
-import { hasCustomNodePacks } from '@langflower/compiler/compile-project-nodes';
-import { langflowerWsConfig, resolveServerLogsEnabled, } from '@langflower/shared/langflower.js';
-import { createServer as createWsBridge } from '@langflower/websocket-bridge/create-server';
-import express from 'express';
-import http from 'node:http';
-import path from 'node:path';
-import { attachLangflowerBridge } from './bridge/attach-langflower-bridge.js';
-import { listenHttpServer } from './listen-http-server.js';
-import { createServerContext } from './server-context.js';
-/** Warm custom-node registry before accepting clients / opening the browser. */
-const warmCustomPalette = async (context) => {
-    if (!(await hasCustomNodePacks(context.projectDir))) {
-        context.customPaletteService.applyEmptyOk();
-        return;
-    }
-    process.stdout.write('Compiling custom nodes ...');
-    const snapshot = await context.customPaletteService.update(context.projectDir);
-    console.log(' done');
-    if (snapshot.status === 'error' || snapshot.status === 'partial') {
-        const count = String(snapshot.errors.length);
-        console.warn(`Custom nodes compile ${snapshot.status}: ${count} pack error(s)`);
-    }
-};
-export async function createServer(options) {
-    const context = await createServerContext(options.projectDir);
-    await warmCustomPalette(context);
-    const app = express();
-    if (options.uiDistPath !== undefined) {
-        const uiRoot = path.resolve(options.uiDistPath);
-        app.use(express.static(uiRoot));
-        app.get('*', (_request, response) => {
-            response.sendFile(path.join(uiRoot, 'index.html'));
-        });
-    }
-    const toolConfig = await context.configService.read();
-    const langflowerConfig = await context.langflowerConfigService.read();
-    const port = options.port ?? toolConfig.port;
-    const httpServer = http.createServer(app);
-    const bridge = createWsBridge(langflowerWsConfig, { httpServer });
-    const detachBridge = attachLangflowerBridge(bridge, context, {
-        serverLogsEnabled: resolveServerLogsEnabled(langflowerConfig),
-        ...(options.onRunSettled !== undefined
-            ? { onRunSettled: options.onRunSettled }
-            : {}),
-    });
-    httpServer.on('close', () => {
-        void detachBridge();
-        bridge.close();
-    });
-    try {
-        await listenHttpServer(httpServer, port, '127.0.0.1');
-    }
-    catch (error) {
-        await detachBridge();
-        bridge.close();
-        httpServer.close();
-        throw error;
-    }
-    return httpServer;
-}

package/vendor/server/dist/harness/pending-permission-asks.d.ts

@@ -1,14 +0,0 @@
-import type { RunnerPermissionAskPayload, RunnerPermissionReplyPayload } from '@langflower/shared/langflower.js';
-import type { PermissionAskRequest } from '@langflower/tools/permission';
-/**
- * Run-scoped registry for feed `permission.ask` pause/resume.
- * `harness.invoke` awaits {@link requestPermission}; UI replies resolve it.
- */
-export declare class PendingPermissionAsks {
-    private readonly pending;
-    list(): readonly RunnerPermissionAskPayload[];
-    requestPermission: (runId: string, nodeId: string, request: PermissionAskRequest, emitAsk: (payload: RunnerPermissionAskPayload) => void) => Promise<"allow" | "deny">;
-    reply: (payload: RunnerPermissionReplyPayload) => boolean;
-    /** Fail closed all outstanding asks (interrupt / run end). */
-    denyAll: (runId?: string) => void;
-}

package/vendor/server/dist/harness/pending-permission-asks.js

@@ -1,45 +0,0 @@
-/**
- * Run-scoped registry for feed `permission.ask` pause/resume.
- * `harness.invoke` awaits {@link requestPermission}; UI replies resolve it.
- */
-export class PendingPermissionAsks {
-    pending = new Map();
-    list() {
-        return [...this.pending.values()].map((entry) => entry.payload);
-    }
-    requestPermission = (runId, nodeId, request, emitAsk) => {
-        const askId = crypto.randomUUID();
-        const payload = {
-            runId,
-            askId,
-            nodeId,
-            toolId: request.toolId,
-            detail: request.detail,
-            summary: request.summary,
-        };
-        return new Promise((resolve) => {
-            this.pending.set(askId, { payload, resolve });
-            emitAsk(payload);
-        });
-    };
-    reply = (payload) => {
-        const entry = this.pending.get(payload.askId);
-        if (entry === undefined) {
-            return false;
-        }
-        if (entry.payload.runId !== payload.runId) {
-            return false;
-        }
-        this.pending.delete(payload.askId);
-        entry.resolve(payload.decision === 'allow' ? 'allow' : 'deny');
-        return true;
-    };
-    /** Fail closed all outstanding asks (interrupt / run end). */
-    denyAll = (runId) => {
-        const entries = [...this.pending.entries()].filter(([, entry]) => runId === undefined || entry.payload.runId === runId);
-        for (const [askId, entry] of entries) {
-            this.pending.delete(askId);
-            entry.resolve('deny');
-        }
-    };
-}

package/vendor/server/dist/harness/permission.d.ts

@@ -1,23 +0,0 @@
-/**
- * Thin server adapter for OpenCode-style harness permissions.
- *
- * Resolution logic lives in `@langflower/tools/permission`. This module wires
- * project config into `createProjectHarness` and documents the injection point
- * referenced by docs/CONFIG.md.
- */
-import type { LangflowerHarnessConfig, LangflowerPermissionConfig } from '@langflower/shared/langflower.js';
-import { type Harness, type PermissionAskRequest } from '@langflower/tools/create-project-harness';
-import { resolvePermission, type PermissionDecision } from '@langflower/tools/permission';
-export { resolvePermission };
-export type CreatePermissionHarnessOptions = {
-    readonly projectRoot: string;
-    readonly permission?: LangflowerPermissionConfig;
-    readonly harness?: LangflowerHarnessConfig;
-    readonly requestPermission?: (request: PermissionAskRequest) => Promise<PermissionDecision>;
-};
-/**
- * Build a project harness with runtime permission gating.
- * Bash is enabled at the handler level; allow/ask/deny comes from policy.
- */
-export declare const createPermissionAwareHarness: (options: CreatePermissionHarnessOptions) => Harness;
-//# sourceMappingURL=permission.d.ts.map

package/vendor/server/dist/harness/permission.js

@@ -1,31 +0,0 @@
-/**
- * Thin server adapter for OpenCode-style harness permissions.
- *
- * Resolution logic lives in `@langflower/tools/permission`. This module wires
- * project config into `createProjectHarness` and documents the injection point
- * referenced by docs/CONFIG.md.
- */
-import { createProjectHarness, } from '@langflower/tools/create-project-harness';
-import { resolvePermission, } from '@langflower/tools/permission';
-export { resolvePermission };
-/**
- * Build a project harness with runtime permission gating.
- * Bash is enabled at the handler level; allow/ask/deny comes from policy.
- */
-export const createPermissionAwareHarness = (options) => createProjectHarness({
-    projectRoot: options.projectRoot,
-    bashEnabled: true,
-    ...(options.harness?.denyPaths !== undefined
-        ? { denyPaths: options.harness.denyPaths }
-        : {}),
-    ...(options.harness?.allowedRoots !== undefined
-        ? { allowedRoots: options.harness.allowedRoots }
-        : {}),
-    ...(options.permission !== undefined
-        ? { permission: options.permission }
-        : {}),
-    ...(options.requestPermission !== undefined
-        ? { requestPermission: options.requestPermission }
-        : {}),
-});
-//# sourceMappingURL=permission.js.map

package/vendor/server/dist/harness/permission.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=permission.test.d.ts.map

package/vendor/server/dist/harness/permission.test.js

@@ -1,50 +0,0 @@
-import { describe, expect, it } from 'vitest';
-import { createPermissionAwareHarness, resolvePermission, } from './permission.js';
-import { PendingPermissionAsks } from './pending-permission-asks.js';
-import fs from 'node:fs/promises';
-import os from 'node:os';
-import path from 'node:path';
-import { afterEach, beforeEach } from 'vitest';
-describe('server harness permission adapter', () => {
-    let projectRoot;
-    beforeEach(async () => {
-        projectRoot = await fs.mkdtemp(path.join(os.tmpdir(), 'lf-perm-'));
-    });
-    afterEach(async () => {
-        await fs.rm(projectRoot, { recursive: true, force: true });
-    });
-    it('re-exports resolvePermission for CONFIG.md injection point', () => {
-        expect(resolvePermission(undefined, 'bash', 'rm -rf /')).toBe('deny');
-    });
-    it('write ask → allow completes; deny fails closed', async () => {
-        const pending = new PendingPermissionAsks();
-        const emitted = [];
-        let autoReply = 'deny';
-        const harness = createPermissionAwareHarness({
-            projectRoot,
-            permission: { write: { '*': 'ask' }, bash: { '*': 'ask' } },
-            requestPermission: (request) => pending.requestPermission('run-1', 'llm-1', request, (payload) => {
-                emitted.push(payload.summary);
-                pending.reply({
-                    runId: payload.runId,
-                    askId: payload.askId,
-                    decision: autoReply,
-                });
-            }),
-        });
-        const denied = await harness.invoke({
-            toolId: 'write',
-            args: { path: 'a.txt', content: 'x' },
-        });
-        expect(denied.ok).toBe(false);
-        expect(emitted).toHaveLength(1);
-        autoReply = 'allow';
-        const allowed = await harness.invoke({
-            toolId: 'write',
-            args: { path: 'a.txt', content: 'ok' },
-        });
-        expect(allowed.ok).toBe(true);
-        expect(await fs.readFile(path.join(projectRoot, 'a.txt'), 'utf8')).toBe('ok');
-    });
-});
-//# sourceMappingURL=permission.test.js.map

package/vendor/server/dist/index.d.ts

@@ -1,4 +0,0 @@
-export { createServer, type CreateServerOptions } from './create-server.js';
-export { bootstrapProject } from './bootstrap/project-bootstrap.service.js';
-export { createServerContext, type ServerContext } from './server-context.js';
-//# sourceMappingURL=index.d.ts.map

package/vendor/server/dist/index.js

@@ -1,4 +0,0 @@
-export { createServer } from './create-server.js';
-export { bootstrapProject } from './bootstrap/project-bootstrap.service.js';
-export { createServerContext } from './server-context.js';
-//# sourceMappingURL=index.js.map

package/vendor/server/dist/kb/chunk-text.d.ts

@@ -1,8 +0,0 @@
-/**
- * Split text into overlapping character windows (paragraph-aware when possible).
- */
-export declare const chunkText: (text: string, options?: {
-    readonly maxChars?: number;
-    readonly overlap?: number;
-}) => readonly string[];
-//# sourceMappingURL=chunk-text.d.ts.map

package/vendor/server/dist/kb/chunk-text.js

@@ -1,52 +0,0 @@
-const DEFAULT_CHUNK_CHARS = 480;
-const DEFAULT_OVERLAP = 64;
-/**
- * Split text into overlapping character windows (paragraph-aware when possible).
- */
-export const chunkText = (text, options) => {
-    const maxChars = options?.maxChars ?? DEFAULT_CHUNK_CHARS;
-    const overlap = options?.overlap ?? DEFAULT_OVERLAP;
-    const normalized = text.replace(/\r\n/g, '\n').trim();
-    if (normalized.length === 0) {
-        return [];
-    }
-    if (normalized.length <= maxChars) {
-        return [normalized];
-    }
-    const paragraphs = normalized
-        .split(/\n{2,}/)
-        .map((part) => part.trim())
-        .filter((part) => part.length > 0);
-    const windows = [];
-    let buffer = '';
-    const flushBuffer = () => {
-        if (buffer.length === 0) {
-            return;
-        }
-        let start = 0;
-        while (start < buffer.length) {
-            const end = Math.min(start + maxChars, buffer.length);
-            windows.push(buffer.slice(start, end).trim());
-            if (end >= buffer.length) {
-                break;
-            }
-            start = Math.max(0, end - overlap);
-        }
-        buffer = '';
-    };
-    for (const paragraph of paragraphs) {
-        if (buffer.length === 0) {
-            buffer = paragraph;
-            continue;
-        }
-        if (buffer.length + 2 + paragraph.length <= maxChars) {
-            buffer = `${buffer}\n\n${paragraph}`;
-            continue;
-        }
-        flushBuffer();
-        buffer = paragraph;
-    }
-    flushBuffer();
-    return windows.filter((chunk) => chunk.length > 0);
-};
-//# sourceMappingURL=chunk-text.js.map

package/vendor/server/dist/kb/cosine.d.ts

@@ -1,3 +0,0 @@
-/** Cosine similarity for equal-length float vectors. */
-export declare const cosineSimilarity: (a: Float32Array, b: Float32Array) => number;
-//# sourceMappingURL=cosine.d.ts.map

package/vendor/server/dist/kb/cosine.js

@@ -1,21 +0,0 @@
-/** Cosine similarity for equal-length float vectors. */
-export const cosineSimilarity = (a, b) => {
-    if (a.length !== b.length || a.length === 0) {
-        return 0;
-    }
-    let dot = 0;
-    let normA = 0;
-    let normB = 0;
-    for (let i = 0; i < a.length; i += 1) {
-        const av = a[i];
-        const bv = b[i];
-        dot += av * bv;
-        normA += av * av;
-        normB += bv * bv;
-    }
-    if (normA <= 0 || normB <= 0) {
-        return 0;
-    }
-    return dot / (Math.sqrt(normA) * Math.sqrt(normB));
-};
-//# sourceMappingURL=cosine.js.map

package/vendor/server/dist/kb/create-kb-context.d.ts

@@ -1,6 +0,0 @@
-import type { KbContext } from '@langflower/node-definitions';
-/**
- * Project KB under `<project>/.langflower/kb/`.
- */
-export declare const createKbContext: (projectDir: string) => KbContext;
-//# sourceMappingURL=create-kb-context.d.ts.map

package/vendor/server/dist/kb/create-kb-context.js

@@ -1,46 +0,0 @@
-import { deleteFromKb, embedCollection, ingestText, listKb, searchCollection, } from './kb-store.js';
-/**
- * Project KB under `<project>/.langflower/kb/`.
- */
-export const createKbContext = (projectDir) => ({
-    ingest: (args) => ingestText({
-        projectDir,
-        collectionId: args.collectionId,
-        text: args.text,
-        ...(args.documentId !== undefined
-            ? { documentId: args.documentId }
-            : {}),
-        ...(args.source !== undefined ? { source: args.source } : {}),
-    }),
-    embed: (args) => embedCollection({
-        projectDir,
-        collectionId: args.collectionId,
-        ...(args.embedTexts !== undefined
-            ? { embedTexts: args.embedTexts }
-            : {}),
-    }),
-    search: (args) => searchCollection({
-        projectDir,
-        collectionId: args.collectionId,
-        query: args.query,
-        ...(args.topK !== undefined ? { topK: args.topK } : {}),
-        ...(args.embedTexts !== undefined
-            ? { embedTexts: args.embedTexts }
-            : {}),
-    }),
-    list: (args) => listKb({
-        projectDir,
-        ...(args.collectionId !== undefined
-            ? { collectionId: args.collectionId }
-            : {}),
-    }),
-    delete: (args) => deleteFromKb({
-        projectDir,
-        collectionId: args.collectionId,
-        ...(args.documentId !== undefined
-            ? { documentId: args.documentId }
-            : {}),
-        ...(args.chunkIds !== undefined ? { chunkIds: args.chunkIds } : {}),
-    }),
-});
-//# sourceMappingURL=create-kb-context.js.map

package/vendor/server/dist/kb/kb-paths.d.ts

@@ -1,8 +0,0 @@
-/** Sanitize a collection id for use as a single path segment. */
-export declare const sanitizeCollectionId: (raw: string) => string;
-export declare const kbRootDir: (projectDir: string) => string;
-export declare const kbManifestPath: (projectDir: string) => string;
-export declare const kbCollectionDir: (projectDir: string, collectionId: string) => string;
-export declare const kbChunksPath: (projectDir: string, collectionId: string) => string;
-export declare const kbVectorsPath: (projectDir: string, collectionId: string) => string;
-//# sourceMappingURL=kb-paths.d.ts.map

package/vendor/server/dist/kb/kb-paths.js

@@ -1,19 +0,0 @@
-import path from 'node:path';
-/** Sanitize a collection id for use as a single path segment. */
-export const sanitizeCollectionId = (raw) => {
-    const trimmed = raw.trim();
-    if (trimmed.length === 0) {
-        throw new Error('collection id is required');
-    }
-    const safe = trimmed.replace(/[^a-zA-Z0-9._-]+/g, '_');
-    if (safe.length === 0 || safe === '.' || safe === '..') {
-        throw new Error(`invalid collection id: ${raw}`);
-    }
-    return safe;
-};
-export const kbRootDir = (projectDir) => path.join(projectDir, '.langflower', 'kb');
-export const kbManifestPath = (projectDir) => path.join(kbRootDir(projectDir), 'manifest.json');
-export const kbCollectionDir = (projectDir, collectionId) => path.join(kbRootDir(projectDir), 'collections', sanitizeCollectionId(collectionId));
-export const kbChunksPath = (projectDir, collectionId) => path.join(kbCollectionDir(projectDir, collectionId), 'chunks.jsonl');
-export const kbVectorsPath = (projectDir, collectionId) => path.join(kbCollectionDir(projectDir, collectionId), 'vectors.bin');
-//# sourceMappingURL=kb-paths.js.map

package/vendor/server/dist/kb/kb-store.d.ts

@@ -1,41 +0,0 @@
-export type KbSearchHit = {
-    readonly id: string;
-    readonly text: string;
-    readonly score: number;
-    readonly meta: Readonly<Record<string, unknown>>;
-};
-export type EmbedTexts = (texts: readonly string[]) => Promise<readonly Float32Array[]>;
-export declare const ingestText: (args: {
-    readonly projectDir: string;
-    readonly collectionId: string;
-    readonly text: string;
-    readonly documentId?: string;
-    readonly source?: string;
-}) => Promise<readonly string[]>;
-export declare const embedCollection: (args: {
-    readonly projectDir: string;
-    readonly collectionId: string;
-    readonly embedTexts?: EmbedTexts;
-}) => Promise<number>;
-export declare const searchCollection: (args: {
-    readonly projectDir: string;
-    readonly collectionId: string;
-    readonly query: string;
-    readonly topK?: number;
-    readonly embedTexts?: EmbedTexts;
-}) => Promise<readonly KbSearchHit[]>;
-export declare const listKb: (args: {
-    readonly projectDir: string;
-    readonly collectionId?: string;
-}) => Promise<readonly {
-    readonly kind: "collection" | "document" | "chunk";
-    readonly id: string;
-    readonly detail?: string;
-}[]>;
-export declare const deleteFromKb: (args: {
-    readonly projectDir: string;
-    readonly collectionId: string;
-    readonly documentId?: string;
-    readonly chunkIds?: readonly string[];
-}) => Promise<number>;
-//# sourceMappingURL=kb-store.d.ts.map