londai 0.1.0-alpha.0

package/dist/server/agent-builder.js

@@ -0,0 +1,107 @@
+/**
+ * Build a per-request `Agent` from an {@link AgentSpec}.
+ *
+ * Londai is stateless-by-default (DESIGN §18): each request rebuilds the agent
+ * from the spec + conversation context. The agent's streamFn comes from the
+ * resolved `Models` registry (set by `@londai/providers`' side-effect import),
+ * or an explicit `streamFn` override.
+ *
+ * The agent's system prompt is composed at build time: base prompt (static or
+ * dynamic function result) + the skills `<available_skills>` block.
+ *
+ * Approval hook injection: when `approval` is enabled, a `beforeToolCall` hook
+ * is layered in front of any user-supplied hook: for tools whose `risk` meets
+ * the configured threshold, it emits an `approval_required` event (via a
+ * caller-supplied `emitApproval` callback) and awaits a decision from the
+ * registry's pending-approval machinery.
+ */
+import { Agent, } from "@londai/core";
+import { registerPendingApproval, resolvePendingApproval } from "../registry.js";
+import { formatSkillsForSystemPrompt } from "../skills-loader.js";
+const RISK_RANK = { safe: 0, moderate: 1, destructive: 2 };
+const DEFAULT_APPROVAL_TIMEOUT_MS = 5 * 60_000;
+function shouldGate(risk, threshold) {
+    const rank = RISK_RANK[risk ?? "safe"] ?? 0;
+    return rank >= RISK_RANK[threshold];
+}
+/**
+ * Build a per-request `Agent` from the spec.
+ *
+ * `models` resolves the model by `(spec.provider, spec.model)`. The agent's
+ * `streamFn` defaults via `setDefaultStreamFn` (installed by `@londai/providers`).
+ */
+export async function buildAgent(spec, ctx, models, approval) {
+    const model = models.getModel(spec.provider, spec.model);
+    if (!model) {
+        throw new Error(`londai: model "${spec.model}" not found for provider "${spec.provider}". Available: ${models
+            .getModels(spec.provider)
+            .map((m) => m.id)
+            .join(", ") || "(none)"}`);
+    }
+    // Compose system prompt: base (static or dynamic) + skills block.
+    const skillsBlock = formatSkillsForSystemPrompt(spec.skills);
+    const basePromptFn = spec.systemPrompt;
+    const systemPrompt = typeof basePromptFn === "function"
+        ? await Promise.resolve(basePromptFn({ messages: ctx.messages ?? [], userId: ctx.userId })).then((base) => (skillsBlock ? `${base}${skillsBlock}` : base))
+        : skillsBlock
+            ? `${basePromptFn}${skillsBlock}`
+            : basePromptFn;
+    // Layer approval hook before the user-supplied beforeToolCall.
+    let beforeToolCall = spec.hooks.beforeToolCall;
+    if (approval?.approvalConfig !== false && approval?.approvalConfig) {
+        const config = approval.approvalConfig;
+        const threshold = config.riskLevel ?? "destructive";
+        const timeoutMs = config.timeoutMs ?? DEFAULT_APPROVAL_TIMEOUT_MS;
+        const userHook = spec.hooks.beforeToolCall;
+        beforeToolCall = async (context, signal) => {
+            const userResult = await userHook?.(context, signal);
+            if (userResult?.block)
+                return userResult;
+            const tool = spec.tools.find((t) => t.name === context.toolCall.name);
+            if (!shouldGate(tool?.risk, threshold))
+                return userResult;
+            // Pause loop: await approval decision via registry.
+            const decision = await new Promise((resolve) => {
+                const pending = {
+                    conversationId: ctx.conversationId,
+                    callId: context.toolCall.id,
+                    toolName: context.toolCall.name,
+                    args: context.args,
+                    resolve: (d) => resolve(d.approved),
+                    timer: setTimeout(() => {
+                        resolvePendingApproval(ctx.conversationId, { approved: false, reason: "approval timed out" });
+                    }, timeoutMs),
+                };
+                registerPendingApproval(pending);
+                approval.emitApprovalRequired({
+                    conversationId: ctx.conversationId,
+                    callId: context.toolCall.id,
+                    toolName: context.toolCall.name,
+                    args: context.args,
+                    timeoutMs,
+                });
+            });
+            if (!decision) {
+                return { block: true, reason: "Tool execution denied by operator" };
+            }
+            return undefined;
+        };
+    }
+    const agent = new Agent({
+        initialState: {
+            systemPrompt,
+            model: model,
+            thinkingLevel: spec.thinkingLevel ?? "off",
+            tools: spec.tools,
+            messages: ctx.messages ?? [],
+        },
+        beforeToolCall,
+        afterToolCall: spec.hooks.afterToolCall,
+        prepareNextTurnWithContext: spec.hooks.prepareNextTurn,
+        transformContext: spec.hooks.transformContext,
+        onPayload: spec.hooks.onPayload,
+        onResponse: spec.hooks.onResponse,
+    });
+    return agent;
+}
+//# sourceMappingURL=agent-builder.js.map

package/dist/server/agent-builder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-builder.js","sourceRoot":"","sources":["../../src/server/agent-builder.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EACN,KAAK,GAKL,MAAM,cAAc,CAAC;AAEtB,OAAO,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AACjF,OAAO,EAAE,2BAA2B,EAAE,MAAM,qBAAqB,CAAC;AAGlE,MAAM,SAAS,GAA2B,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC;AAyBnF,MAAM,2BAA2B,GAAG,CAAC,GAAG,MAAM,CAAC;AAE/C,SAAS,UAAU,CAAC,IAAwB,EAAE,SAA4B;IACzE,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC;IAC5C,OAAO,IAAI,IAAI,SAAS,CAAC,SAAS,CAAC,CAAC;AACrC,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC/B,IAAe,EACf,GAAsB,EACtB,MAAqB,EACrB,QAA8B;IAE9B,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IACzD,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACd,kBAAkB,IAAI,CAAC,KAAK,6BAA6B,IAAI,CAAC,QAAQ,iBACrE,MAAM;aACJ,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC;aACxB,GAAG,CAAC,CAAC,CAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACvB,IAAI,CAAC,IAAI,CAAC,IAAI,QACjB,EAAE,CACF,CAAC;IACH,CAAC;IAED,kEAAkE;IAClE,MAAM,WAAW,GAAG,2BAA2B,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC7D,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;IACvC,MAAM,YAAY,GACjB,OAAO,YAAY,KAAK,UAAU;QACjC,CAAC,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAC9F,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAChE;QACF,CAAC,CAAC,WAAW;YACZ,CAAC,CAAC,GAAG,YAAY,GAAG,WAAW,EAAE;YACjC,CAAC,CAAC,YAAY,CAAC;IAElB,+DAA+D;IAC/D,IAAI,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC;IAC/C,IAAI,QAAQ,EAAE,cAAc,KAAK,KAAK,IAAI,QAAQ,EAAE,cAAc,EAAE,CAAC;QACpE,MAAM,MAAM,GAAG,QAAQ,CAAC,cAAc,CAAC;QACvC,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,aAAa,CAAC;QACpD,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,2BAA2B,CAAC;QAClE,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC;QAC3C,cAAc,GAAG,KAAK,EACrB,OAA8B,EAC9B,MAAoB,EACwB,EAAE;YAC9C,MAAM,UAAU,GAAG,MAAM,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACrD,IAAI,UAAU,EAAE,KAAK;gBAAE,OAAO,UAAU,CAAC;YACzC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACtE,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC;gBAAE,OAAO,UAAU,CAAC;YAE1D,oDAAoD;YACpD,MAAM,QAAQ,GAAG,MAAM,IAAI,OAAO,CAAU,CAAC,OAAO,EAAE,EAAE;gBACvD,MAAM,OAAO,GAAG;oBACf,cAAc,EAAE,GAAG,CAAC,cAAc;oBAClC,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE;oBAC3B,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI;oBAC/B,IAAI,EAAE,OAAO,CAAC,IAAI;oBAClB,OAAO,EAAE,CAAC,CAAyC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;oBAC3E,KAAK,EAAE,UAAU,CAAC,GAAG,EAAE;wBACtB,sBAAsB,CAAC,GAAG,CAAC,cAAc,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC,CAAC;oBAC/F,CAAC,EAAE,SAAS,CAAC;iBACb,CAAC;gBACF,uBAAuB,CAAC,OAAO,CAAC,CAAC;gBACjC,QAAQ,CAAC,oBAAoB,CAAC;oBAC7B,cAAc,EAAE,GAAG,CAAC,cAAc;oBAClC,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE;oBAC3B,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI;oBAC/B,IAAI,EAAE,OAAO,CAAC,IAAI;oBAClB,SAAS;iBACT,CAAC,CAAC;YACJ,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACf,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,mCAAmC,EAAE,CAAC;YACrE,CAAC;YACD,OAAO,SAAS,CAAC;QAClB,CAAC,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC;QACvB,YAAY,EAAE;YACb,YAAY;YACZ,KAAK,EAAE,KAAmB;YAC1B,aAAa,EAAE,IAAI,CAAC,aAAa,IAAI,KAAK;YAC1C,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,EAAE;SAC5B;QACD,cAAc;QACd,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC,aAAa;QACvC,0BAA0B,EAAE,IAAI,CAAC,KAAK,CAAC,eAAe;QACtD,gBAAgB,EAAE,IAAI,CAAC,KAAK,CAAC,gBAAgB;QAC7C,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS;QAC/B,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU;KACjC,CAAC,CAAC;IAEH,OAAO,KAAK,CAAC;AACd,CAAC"}

package/dist/server/app.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Internal Hono app factory.
+ *
+ * Builds the Hono app with middleware (error → auth → rate-limit) and mounts the
+ * chat-stream / chat-completion / (optional) approve / session routes. User code
+ * never holds this app — `londai.run()` returns only a server handle (DESIGN §19).
+ */
+import { Hono } from "hono";
+import type { AgentSpec, ApprovalConfig, LondaiRunOptions } from "../types.ts";
+export type HonoContext = Hono<{
+    Variables: {
+        userId?: string;
+    };
+}>;
+export interface BuildAppOptions {
+    spec: AgentSpec;
+    approval?: ApprovalConfig | false;
+    onEvent?: LondaiRunOptions["onEvent"];
+}
+export declare function buildApp(opts: BuildAppOptions): HonoContext;
+//# sourceMappingURL=app.d.ts.map

package/dist/server/app.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../../src/server/app.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,KAAK,EAAE,SAAS,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAS/E,MAAM,MAAM,WAAW,GAAG,IAAI,CAAC;IAAE,SAAS,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,CAAC,CAAC;AAEnE,MAAM,WAAW,eAAe;IAC/B,IAAI,EAAE,SAAS,CAAC;IAChB,QAAQ,CAAC,EAAE,cAAc,GAAG,KAAK,CAAC;IAClC,OAAO,CAAC,EAAE,gBAAgB,CAAC,SAAS,CAAC,CAAC;CACtC;AAED,wBAAgB,QAAQ,CAAC,IAAI,EAAE,eAAe,GAAG,WAAW,CAqB3D"}

package/dist/server/app.js

@@ -0,0 +1,34 @@
+/**
+ * Internal Hono app factory.
+ *
+ * Builds the Hono app with middleware (error → auth → rate-limit) and mounts the
+ * chat-stream / chat-completion / (optional) approve / session routes. User code
+ * never holds this app — `londai.run()` returns only a server handle (DESIGN §19).
+ */
+import { Hono } from "hono";
+import { getRateLimitConfig, getSessionRepo } from "../registry.js";
+import { authMiddleware } from "./middleware/auth.js";
+import { errorMiddleware } from "./middleware/error.js";
+import { rateLimitMiddleware } from "./middleware/rate-limit.js";
+import { registerApproveRoute } from "./routes/approve.js";
+import { registerChatCompletionRoute } from "./routes/chat-completion.js";
+import { registerChatStreamRoute } from "./routes/chat-stream.js";
+import { registerSessionRoutes } from "./routes/session.js";
+export function buildApp(opts) {
+    const app = new Hono();
+    app.onError(errorMiddleware);
+    app.use("*", authMiddleware());
+    app.use("*", rateLimitMiddleware(getRateLimitConfig()));
+    registerChatStreamRoute(app, { spec: opts.spec, approval: opts.approval, onEvent: opts.onEvent });
+    registerChatCompletionRoute(app, { spec: opts.spec, onEvent: opts.onEvent });
+    if (opts.approval !== false && opts.approval) {
+        registerApproveRoute(app);
+    }
+    // Mount session routes if a session repo is configured.
+    if (getSessionRepo()) {
+        registerSessionRoutes(app, { spec: opts.spec, approval: opts.approval, onEvent: opts.onEvent });
+    }
+    app.get("/health", (c) => c.json({ ok: true }));
+    return app;
+}
+//# sourceMappingURL=app.js.map

package/dist/server/app.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.js","sourceRoot":"","sources":["../../src/server/app.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAEpE,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,2BAA2B,EAAE,MAAM,6BAA6B,CAAC;AAC1E,OAAO,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAClE,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAU5D,MAAM,UAAU,QAAQ,CAAC,IAAqB;IAC7C,MAAM,GAAG,GAAG,IAAI,IAAI,EAAsC,CAAC;IAE3D,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IAC7B,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,cAAc,EAAE,CAAC,CAAC;IAC/B,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,mBAAmB,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC;IAExD,uBAAuB,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IAClG,2BAA2B,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IAC7E,IAAI,IAAI,CAAC,QAAQ,KAAK,KAAK,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC9C,oBAAoB,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAED,wDAAwD;IACxD,IAAI,cAAc,EAAE,EAAE,CAAC;QACtB,qBAAqB,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IACjG,CAAC;IAED,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAEhD,OAAO,GAAG,CAAC;AACZ,CAAC"}

package/dist/server/middleware/auth.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Auth middleware.
+ *
+ * Four modes from `AuthConfig`:
+ * - `false` → no auth (dev/internal). In `NODE_ENV=production` with `auth` unset,
+ *   `londai.run()` rejects at boot; this middleware is only mounted when auth is
+ *   truthy or explicitly `false`.
+ * - `{ type: "jwt", secret }` → verify HS256 Bearer token via `node:crypto`.
+ * - `{ type: "api-key", ... }` → header check, constant-time compare for literal validate.
+ * - `{ verify }` → custom hook returning userId | null | true.
+ *
+ * On success: `c.set("userId", string | undefined)`. On failure: throw a
+ * `FrameworkError("auth", ...)` that the error middleware maps to 401.
+ */
+import type { MiddlewareHandler } from "hono";
+type Vars = {
+    userId?: string;
+};
+export declare function authMiddleware(): MiddlewareHandler<{
+    Variables: Vars;
+}>;
+export {};
+//# sourceMappingURL=auth.d.ts.map

package/dist/server/middleware/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../src/server/middleware/auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,KAAK,EAAW,iBAAiB,EAAE,MAAM,MAAM,CAAC;AAKvD,KAAK,IAAI,GAAG;IAAE,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AA0ChC,wBAAgB,cAAc,IAAI,iBAAiB,CAAC;IAAE,SAAS,EAAE,IAAI,CAAA;CAAE,CAAC,CAevE"}

package/dist/server/middleware/auth.js

@@ -0,0 +1,102 @@
+/**
+ * Auth middleware.
+ *
+ * Four modes from `AuthConfig`:
+ * - `false` → no auth (dev/internal). In `NODE_ENV=production` with `auth` unset,
+ *   `londai.run()` rejects at boot; this middleware is only mounted when auth is
+ *   truthy or explicitly `false`.
+ * - `{ type: "jwt", secret }` → verify HS256 Bearer token via `node:crypto`.
+ * - `{ type: "api-key", ... }` → header check, constant-time compare for literal validate.
+ * - `{ verify }` → custom hook returning userId | null | true.
+ *
+ * On success: `c.set("userId", string | undefined)`. On failure: throw a
+ * `FrameworkError("auth", ...)` that the error middleware maps to 401.
+ */
+import { createHmac, timingSafeEqual } from "node:crypto";
+import { FrameworkError } from "../../errors.js";
+import { getAuthConfig } from "../../registry.js";
+function readBearer(authHeader) {
+    if (!authHeader)
+        return undefined;
+    const match = /^Bearer\s+(.+)$/i.exec(authHeader.trim());
+    return match?.[1];
+}
+function timingSafeEqualString(a, b) {
+    const aBuf = Buffer.from(a);
+    const bBuf = Buffer.from(b);
+    if (aBuf.length !== bBuf.length)
+        return false;
+    return timingSafeEqual(aBuf, bBuf);
+}
+function verifyJwtHS256(token, secret) {
+    const parts = token.split(".");
+    if (parts.length !== 3)
+        throw new FrameworkError("auth", "Malformed JWT (expected 3 segments).");
+    const [headerB64, payloadB64, signatureB64] = parts;
+    const signingInput = `${headerB64}.${payloadB64}`;
+    const signature = Buffer.from(base64UrlDecode(signatureB64));
+    const expected = createHmac("sha256", secret).update(Buffer.from(signingInput)).digest();
+    if (signature.length !== expected.length || !timingSafeEqual(signature, expected)) {
+        throw new FrameworkError("auth", "Invalid JWT signature.");
+    }
+    const payload = JSON.parse(Buffer.from(base64UrlDecode(payloadB64)).toString("utf8"));
+    if (typeof payload.exp === "number" && Date.now() / 1000 >= payload.exp) {
+        throw new FrameworkError("auth", "JWT expired.");
+    }
+    const sub = payload.sub;
+    return typeof sub === "string" ? sub : "jwt-user";
+}
+function base64UrlDecode(input) {
+    const pad = input.length % 4 === 0 ? "" : "=".repeat(4 - (input.length % 4));
+    const normalized = input.replace(/-/g, "+").replace(/_/g, "/") + pad;
+    return Buffer.from(normalized, "base64");
+}
+export function authMiddleware() {
+    const config = getAuthConfig();
+    // No auth configured (undefined or explicit false) → noop.
+    if (config === undefined || config === false) {
+        return async (_c, next) => {
+            await next();
+        };
+    }
+    return async (c, next) => {
+        const userId = await authenticate(c.req.raw, config);
+        c.set("userId", userId ?? undefined);
+        await next();
+    };
+}
+async function authenticate(req, config) {
+    if ("verify" in config) {
+        const result = await config.verify(req);
+        if (result === null)
+            throw new FrameworkError("auth", "Authentication rejected by verify hook.");
+        return result === true ? undefined : result;
+    }
+    if (config.type === "jwt") {
+        const header = config.header ?? "authorization";
+        const token = readBearer(req.headers.get(header) ?? undefined);
+        if (!token)
+            throw new FrameworkError("auth", "Missing Bearer token.");
+        return verifyJwtHS256(token, config.secret);
+    }
+    if (config.type === "api-key") {
+        const header = config.header ?? "x-api-key";
+        const key = req.headers.get(header);
+        if (!key)
+            throw new FrameworkError("auth", "Missing API key.");
+        if (typeof config.validate === "string") {
+            if (!timingSafeEqualString(key, config.validate)) {
+                throw new FrameworkError("auth", "Invalid API key.");
+            }
+        }
+        else {
+            const ok = await config.validate(key);
+            if (!ok)
+                throw new FrameworkError("auth", "Invalid API key.");
+        }
+        return undefined;
+    }
+    // Exhaustive fallback.
+    throw new FrameworkError("auth", "Unsupported auth configuration.");
+}
+//# sourceMappingURL=auth.js.map

package/dist/server/middleware/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../src/server/middleware/auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE1D,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAKlD,SAAS,UAAU,CAAC,UAA8B;IACjD,IAAI,CAAC,UAAU;QAAE,OAAO,SAAS,CAAC;IAClC,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC;IACzD,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;AACnB,CAAC;AAED,SAAS,qBAAqB,CAAC,CAAS,EAAE,CAAS;IAClD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5B,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC9C,OAAO,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,cAAc,CAAC,KAAa,EAAE,MAAc;IACpD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,cAAc,CAAC,MAAM,EAAE,sCAAsC,CAAC,CAAC;IACjG,MAAM,CAAC,SAAS,EAAE,UAAU,EAAE,YAAY,CAAC,GAAG,KAAK,CAAC;IACpD,MAAM,YAAY,GAAG,GAAG,SAAS,IAAI,UAAU,EAAE,CAAC;IAClD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC,CAAC;IAC7D,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACzF,IAAI,SAAS,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,CAAC;QACnF,MAAM,IAAI,cAAc,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAGnF,CAAC;IACF,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QACzE,MAAM,IAAI,cAAc,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAClD,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IACxB,OAAO,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC;AACnD,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACrC,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;IAC7E,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,GAAG,CAAC;IACrE,OAAO,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,cAAc;IAC7B,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;IAE/B,2DAA2D;IAC3D,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QAC9C,OAAO,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE;YACzB,MAAM,IAAI,EAAE,CAAC;QACd,CAAC,CAAC;IACH,CAAC;IAED,OAAO,KAAK,EAAE,CAA+B,EAAE,IAAI,EAAE,EAAE;QACtD,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACrD,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,IAAI,SAAS,CAAC,CAAC;QACrC,MAAM,IAAI,EAAE,CAAC;IACd,CAAC,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,GAAY,EAAE,MAA8C;IACvF,IAAI,QAAQ,IAAI,MAAM,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,MAAM,KAAK,IAAI;YAAE,MAAM,IAAI,cAAc,CAAC,MAAM,EAAE,yCAAyC,CAAC,CAAC;QACjG,OAAO,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC;IAC7C,CAAC;IAED,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,eAAe,CAAC;QAChD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,SAAS,CAAC,CAAC;QAC/D,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,cAAc,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC;QACtE,OAAO,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAC7C,CAAC;IAED,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,WAAW,CAAC;QAC5C,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,cAAc,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;QAC/D,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACzC,IAAI,CAAC,qBAAqB,CAAC,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAClD,MAAM,IAAI,cAAc,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;YACtD,CAAC;QACF,CAAC;aAAM,CAAC;YACP,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YACtC,IAAI,CAAC,EAAE;gBAAE,MAAM,IAAI,cAAc,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;QAC/D,CAAC;QACD,OAAO,SAAS,CAAC;IAClB,CAAC;IAED,uBAAuB;IACvB,MAAM,IAAI,cAAc,CAAC,MAAM,EAAE,iCAAiC,CAAC,CAAC;AACrE,CAAC"}

package/dist/server/middleware/error.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Error middleware — convert thrown errors to JSON HTTP responses.
+ *
+ * `AgentError` (core), `FrameworkError`, and plain `Error` are mapped via
+ * `errorToStatus`. LLM-level failures (stopReason "error"/"aborted") never reach
+ * here — those are emitted as SSE `event: error` inside the chat-stream route.
+ */
+import type { ErrorHandler } from "hono";
+export declare const errorMiddleware: ErrorHandler;
+//# sourceMappingURL=error.d.ts.map

package/dist/server/middleware/error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"error.d.ts","sourceRoot":"","sources":["../../../src/server/middleware/error.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,MAAM,CAAC;AAGzC,eAAO,MAAM,eAAe,EAAE,YAO7B,CAAC"}

package/dist/server/middleware/error.js

@@ -0,0 +1,17 @@
+/**
+ * Error middleware — convert thrown errors to JSON HTTP responses.
+ *
+ * `AgentError` (core), `FrameworkError`, and plain `Error` are mapped via
+ * `errorToStatus`. LLM-level failures (stopReason "error"/"aborted") never reach
+ * here — those are emitted as SSE `event: error` inside the chat-stream route.
+ */
+import { errorBody, errorToStatus } from "../../errors.js";
+export const errorMiddleware = (err, c) => {
+    const status = errorToStatus(err);
+    const body = errorBody(err);
+    if (status >= 500) {
+        console.error("[londai] internal error:", err);
+    }
+    return c.json(body, status);
+};
+//# sourceMappingURL=error.js.map

package/dist/server/middleware/error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"error.js","sourceRoot":"","sources":["../../../src/server/middleware/error.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAE3D,MAAM,CAAC,MAAM,eAAe,GAAiB,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE;IACvD,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;QACnB,OAAO,CAAC,KAAK,CAAC,0BAA0B,EAAE,GAAG,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,MAAa,CAAC,CAAC;AACpC,CAAC,CAAC"}

package/dist/server/middleware/rate-limit.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Rate-limit middleware.
+ *
+ * Simple in-memory token-bucket per client IP. Defaults: 60 requests per minute.
+ * A custom hook (`(req) => boolean`) bypasses the bucket entirely. Multi-instance
+ * fairness is a roadmap item (Redis-backed) — flagged in DESIGN §22.
+ *
+ * On rejection: throw `FrameworkError("forbidden")` → mapped to 429 by the error
+ * middleware? No: 429 is the conventional status. We expose it via a custom
+ * `errorToStatus` branch: code "rate_limited".
+ *
+ * For MVP simplicity we map to 429 directly here (return a Response) instead of
+ * routing through the error middleware.
+ */
+import type { MiddlewareHandler } from "hono";
+import type { RateLimitConfig } from "../../types.ts";
+export declare function rateLimitMiddleware(config: RateLimitConfig | undefined): MiddlewareHandler;
+//# sourceMappingURL=rate-limit.d.ts.map

package/dist/server/middleware/rate-limit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit.d.ts","sourceRoot":"","sources":["../../../src/server/middleware/rate-limit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,MAAM,CAAC;AAC9C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAStD,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,eAAe,GAAG,SAAS,GAAG,iBAAiB,CAkC1F"}

package/dist/server/middleware/rate-limit.js

@@ -0,0 +1,55 @@
+/**
+ * Rate-limit middleware.
+ *
+ * Simple in-memory token-bucket per client IP. Defaults: 60 requests per minute.
+ * A custom hook (`(req) => boolean`) bypasses the bucket entirely. Multi-instance
+ * fairness is a roadmap item (Redis-backed) — flagged in DESIGN §22.
+ *
+ * On rejection: throw `FrameworkError("forbidden")` → mapped to 429 by the error
+ * middleware? No: 429 is the conventional status. We expose it via a custom
+ * `errorToStatus` branch: code "rate_limited".
+ *
+ * For MVP simplicity we map to 429 directly here (return a Response) instead of
+ * routing through the error middleware.
+ */
+const buckets = new Map();
+export function rateLimitMiddleware(config) {
+    if (!config) {
+        return async (_c, next) => {
+            await next();
+        };
+    }
+    if (typeof config === "function") {
+        return async (c, next) => {
+            const ok = await config(c.req.raw);
+            if (!ok) {
+                return c.json({ error: { code: "rate_limited", message: "Rate limit exceeded." } }, 429);
+            }
+            await next();
+        };
+    }
+    const { limit, windowMs } = config;
+    return async (c, next) => {
+        const ip = clientIp(c.req.raw);
+        const now = Date.now();
+        let bucket = buckets.get(ip);
+        if (!bucket || bucket.resetAt <= now) {
+            bucket = { count: 0, resetAt: now + windowMs };
+            buckets.set(ip, bucket);
+        }
+        bucket.count++;
+        if (bucket.count > limit) {
+            const retryAfter = Math.ceil((bucket.resetAt - now) / 1000);
+            c.header("Retry-After", String(retryAfter));
+            return c.json({ error: { code: "rate_limited", message: "Rate limit exceeded." } }, 429);
+        }
+        await next();
+    };
+}
+function clientIp(req) {
+    const fwd = req.headers.get("x-forwarded-for");
+    if (fwd)
+        return fwd.split(",")[0].trim();
+    return req.headers.get("x-real-ip") ?? "unknown";
+}
+//# sourceMappingURL=rate-limit.js.map

package/dist/server/middleware/rate-limit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit.js","sourceRoot":"","sources":["../../../src/server/middleware/rate-limit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAUH,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;AAE1C,MAAM,UAAU,mBAAmB,CAAC,MAAmC;IACtE,IAAI,CAAC,MAAM,EAAE,CAAC;QACb,OAAO,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE;YACzB,MAAM,IAAI,EAAE,CAAC;QACd,CAAC,CAAC;IACH,CAAC;IAED,IAAI,OAAO,MAAM,KAAK,UAAU,EAAE,CAAC;QAClC,OAAO,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;YACxB,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACnC,IAAI,CAAC,EAAE,EAAE,CAAC;gBACT,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,sBAAsB,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;YAC1F,CAAC;YACD,MAAM,IAAI,EAAE,CAAC;QACd,CAAC,CAAC;IACH,CAAC;IAED,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;IACnC,OAAO,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACxB,MAAM,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC7B,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,IAAI,GAAG,EAAE,CAAC;YACtC,MAAM,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,GAAG,QAAQ,EAAE,CAAC;YAC/C,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACzB,CAAC;QACD,MAAM,CAAC,KAAK,EAAE,CAAC;QACf,IAAI,MAAM,CAAC,KAAK,GAAG,KAAK,EAAE,CAAC;YAC1B,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;YAC5D,CAAC,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;YAC5C,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,sBAAsB,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;QAC1F,CAAC;QACD,MAAM,IAAI,EAAE,CAAC;IACd,CAAC,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,GAAY;IAC7B,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IAC/C,IAAI,GAAG;QAAE,OAAO,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACzC,OAAO,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,SAAS,CAAC;AAClD,CAAC"}

package/dist/server/routes/approve.d.ts

@@ -0,0 +1,11 @@
+/**
+ * `POST /approve` — opt-in approval endpoint (mounted only when `approval` is set).
+ *
+ * Body: `{ conversationId, callId, decision: "approve" | "deny", reason? }`.
+ * Resolves the pending `beforeToolCall` promise in `agent-builder`, which either
+ * unblocks the tool call or returns `{ block: true, reason }` so the loop encodes
+ * an error tool result.
+ */
+import type { HonoContext } from "../app.ts";
+export declare function registerApproveRoute(app: HonoContext): void;
+//# sourceMappingURL=approve.d.ts.map

package/dist/server/routes/approve.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approve.d.ts","sourceRoot":"","sources":["../../../src/server/routes/approve.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAE7C,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,WAAW,GAAG,IAAI,CA8B3D"}

package/dist/server/routes/approve.js

@@ -0,0 +1,38 @@
+/**
+ * `POST /approve` — opt-in approval endpoint (mounted only when `approval` is set).
+ *
+ * Body: `{ conversationId, callId, decision: "approve" | "deny", reason? }`.
+ * Resolves the pending `beforeToolCall` promise in `agent-builder`, which either
+ * unblocks the tool call or returns `{ block: true, reason }` so the loop encodes
+ * an error tool result.
+ */
+import { FrameworkError } from "../../errors.js";
+import { resolvePendingApproval } from "../../registry.js";
+export function registerApproveRoute(app) {
+    app.post("/approve", async (c) => {
+        let body;
+        try {
+            body = await c.req.json();
+        }
+        catch {
+            throw new FrameworkError("validation", "Request body must be JSON.");
+        }
+        const { conversationId, callId, decision, reason } = (body ?? {});
+        if (typeof conversationId !== "string" || typeof callId !== "string") {
+            throw new FrameworkError("validation", "`conversationId` and `callId` are required strings.");
+        }
+        if (decision !== "approve" && decision !== "deny") {
+            throw new FrameworkError("validation", '`decision` must be "approve" or "deny".');
+        }
+        const reasonStr = typeof reason === "string" ? reason : undefined;
+        const resolved = resolvePendingApproval(conversationId, {
+            approved: decision === "approve",
+            reason: reasonStr,
+        });
+        if (!resolved) {
+            return c.json({ ok: false, message: "No pending approval for this conversation." }, 404);
+        }
+        return c.json({ ok: true, decision });
+    });
+}
+//# sourceMappingURL=approve.js.map

package/dist/server/routes/approve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approve.js","sourceRoot":"","sources":["../../../src/server/routes/approve.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAG3D,MAAM,UAAU,oBAAoB,CAAC,GAAgB;IACpD,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAChC,IAAI,IAAa,CAAC;QAClB,IAAI,CAAC;YACJ,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACR,MAAM,IAAI,cAAc,CAAC,YAAY,EAAE,4BAA4B,CAAC,CAAC;QACtE,CAAC;QACD,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,IAAI,EAAE,CAK/D,CAAC;QACF,IAAI,OAAO,cAAc,KAAK,QAAQ,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YACtE,MAAM,IAAI,cAAc,CAAC,YAAY,EAAE,qDAAqD,CAAC,CAAC;QAC/F,CAAC;QACD,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;YACnD,MAAM,IAAI,cAAc,CAAC,YAAY,EAAE,yCAAyC,CAAC,CAAC;QACnF,CAAC;QACD,MAAM,SAAS,GAAG,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QAClE,MAAM,QAAQ,GAAG,sBAAsB,CAAC,cAAc,EAAE;YACvD,QAAQ,EAAE,QAAQ,KAAK,SAAS;YAChC,MAAM,EAAE,SAAS;SACjB,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,EAAE,CAAC;YACf,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,4CAA4C,EAAE,EAAE,GAAG,CAAC,CAAC;QAC1F,CAAC;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;AACJ,CAAC"}

package/dist/server/routes/chat-completion.d.ts

@@ -0,0 +1,14 @@
+/**
+ * `POST /chat/completion` — non-streaming: await the final messages, return JSON.
+ *
+ * Same agent wiring as `/chat/stream` but consumes events synchronously and
+ * responds with `{ messages, stopReason, usage }` after `agent.prompt()` settles.
+ */
+import type { AgentSpec, LondaiRunOptions } from "../../types.ts";
+import type { HonoContext } from "../app.ts";
+export interface ChatCompletionDeps {
+    spec: AgentSpec;
+    onEvent?: LondaiRunOptions["onEvent"];
+}
+export declare function registerChatCompletionRoute(app: HonoContext, deps: ChatCompletionDeps): void;
+//# sourceMappingURL=chat-completion.d.ts.map

package/dist/server/routes/chat-completion.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat-completion.d.ts","sourceRoot":"","sources":["../../../src/server/routes/chat-completion.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,KAAK,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAGlE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAG7C,MAAM,WAAW,kBAAkB;IAClC,IAAI,EAAE,SAAS,CAAC;IAChB,OAAO,CAAC,EAAE,gBAAgB,CAAC,SAAS,CAAC,CAAC;CACtC;AAED,wBAAgB,2BAA2B,CAAC,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,kBAAkB,GAAG,IAAI,CAwE5F"}

package/dist/server/routes/chat-completion.js

@@ -0,0 +1,70 @@
+/**
+ * `POST /chat/completion` — non-streaming: await the final messages, return JSON.
+ *
+ * Same agent wiring as `/chat/stream` but consumes events synchronously and
+ * responds with `{ messages, stopReason, usage }` after `agent.prompt()` settles.
+ */
+import { requireModels } from "../../registry.js";
+import { finishRun, trackRequest } from "../abort.js";
+import { buildAgent } from "../agent-builder.js";
+import { parseChatBody, persistNewMessages, resolveConversationContext } from "./common.js";
+export function registerChatCompletionRoute(app, deps) {
+    const { spec } = deps;
+    app.post("/chat/completion", async (c) => {
+        const models = requireModels();
+        const body = await parseChatBody(c);
+        const sessionCtx = await resolveConversationContext(body.conversationId, c, {
+            explicitConversationId: body.conversationIdProvided,
+        });
+        const conversationId = sessionCtx?.conversationId ?? body.conversationId;
+        const sessionLoadedCount = sessionCtx?.loadedCount ?? 0;
+        const seedMessages = sessionCtx?.messages ?? body.messages;
+        const tracked = trackRequest(conversationId, { requestSignal: c.req.raw.signal });
+        if (!tracked) {
+            return c.json({ error: { code: "conflict", message: `A run is already active for conversation ${conversationId}.` } }, 409);
+        }
+        const { signal } = tracked;
+        const agent = await buildAgent(spec, {
+            conversationId,
+            messages: seedMessages,
+            userId: c.get("userId"),
+            signal,
+        }, models);
+        const collected = [];
+        const unsubscribe = agent.subscribe((event) => {
+            deps.onEvent?.(event);
+            if ((event.type === "message_end" || event.type === "turn_end") && event.type === "message_end") {
+                collected.push(event.message);
+            }
+            if (event.type === "agent_end") {
+                collected.push(...event.messages);
+            }
+        });
+        try {
+            if (typeof body.message === "string") {
+                await agent.prompt(body.message);
+            }
+            else {
+                await agent.prompt(body.message);
+            }
+            // Persist new messages after prompt settles.
+            await persistNewMessages(conversationId, agent.state.messages, sessionLoadedCount);
+        }
+        finally {
+            unsubscribe();
+            finishRun(conversationId);
+        }
+        const finalMessages = agent.state.messages;
+        const lastAssistant = [...finalMessages].reverse().find((m) => m.role === "assistant");
+        const stopReason = lastAssistant && "stopReason" in lastAssistant ? lastAssistant.stopReason : "stop";
+        const usage = lastAssistant && "usage" in lastAssistant ? lastAssistant.usage : undefined;
+        return c.json({
+            conversationId,
+            messages: finalMessages,
+            collected,
+            stopReason,
+            usage,
+        });
+    });
+}
+//# sourceMappingURL=chat-completion.js.map

package/dist/server/routes/chat-completion.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat-completion.js","sourceRoot":"","sources":["../../../src/server/routes/chat-completion.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAElD,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAEjD,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,0BAA0B,EAAE,MAAM,aAAa,CAAC;AAO5F,MAAM,UAAU,2BAA2B,CAAC,GAAgB,EAAE,IAAwB;IACrF,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;IAEtB,GAAG,CAAC,IAAI,CAAC,kBAAkB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACxC,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,CAAC,CAAC,CAAC;QACpC,MAAM,UAAU,GAAG,MAAM,0BAA0B,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,EAAE;YAC3E,sBAAsB,EAAE,IAAI,CAAC,sBAAsB;SACnD,CAAC,CAAC;QAEH,MAAM,cAAc,GAAG,UAAU,EAAE,cAAc,IAAI,IAAI,CAAC,cAAc,CAAC;QACzE,MAAM,kBAAkB,GAAG,UAAU,EAAE,WAAW,IAAI,CAAC,CAAC;QACxD,MAAM,YAAY,GAAG,UAAU,EAAE,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC;QAE3D,MAAM,OAAO,GAAG,YAAY,CAAC,cAAc,EAAE,EAAE,aAAa,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QAClF,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,OAAO,CAAC,CAAC,IAAI,CACZ,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,4CAA4C,cAAc,GAAG,EAAE,EAAE,EACvG,GAAG,CACH,CAAC;QACH,CAAC;QACD,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;QAE3B,MAAM,KAAK,GAAG,MAAM,UAAU,CAC7B,IAAI,EACJ;YACC,cAAc;YACd,QAAQ,EAAE,YAAY;YACtB,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,QAAiB,CAAuB;YACtD,MAAM;SACN,EACD,MAAM,CACN,CAAC;QAEF,MAAM,SAAS,GAAmB,EAAE,CAAC;QACrC,MAAM,WAAW,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,KAAiB,EAAE,EAAE;YACzD,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC;YACtB,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,aAAa,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;gBACjG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC/B,CAAC;YACD,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;gBAChC,SAAS,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;YACnC,CAAC;QACF,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC;YACJ,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;gBACtC,MAAM,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAClC,CAAC;iBAAM,CAAC;gBACP,MAAM,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAClC,CAAC;YAED,6CAA6C;YAC7C,MAAM,kBAAkB,CAAC,cAAc,EAAE,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;QACpF,CAAC;gBAAS,CAAC;YACV,WAAW,EAAE,CAAC;YACd,SAAS,CAAC,cAAc,CAAC,CAAC;QAC3B,CAAC;QAED,MAAM,aAAa,GAAG,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC;QAC3C,MAAM,aAAa,GAAG,CAAC,GAAG,aAAa,CAAC,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC;QACvF,MAAM,UAAU,GAAG,aAAa,IAAI,YAAY,IAAI,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC;QACtG,MAAM,KAAK,GAAG,aAAa,IAAI,OAAO,IAAI,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;QAE1F,OAAO,CAAC,CAAC,IAAI,CAAC;YACb,cAAc;YACd,QAAQ,EAAE,aAAa;YACvB,SAAS;YACT,UAAU;YACV,KAAK;SACL,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;AACJ,CAAC"}

package/dist/server/routes/chat-stream.d.ts

@@ -0,0 +1,29 @@
+/**
+ * `POST /chat/stream` — SSE route mapping `AgentEvent` → wire events.
+ *
+ * Wire format:
+ * - `event: delta`              data: "text chunk"
+ * - `event: tool_start`         data: {callId, name, args}
+ * - `event: tool_end`           data: {callId, isError, details?}
+ * - `event: approval_required`  data: {conversationId, callId, toolName, args}
+ * - `event: error`              data: {code, message}
+ * - `event: done`               data: ""
+ *
+ * Abort: `c.req.raw.signal` is plowed into the agent via `trackRequest`. Client
+ * disconnect → `agent.abort()` → loop encodes stopReason "aborted" → we emit
+ * `event: error` (aborted) and close.
+ *
+ * Session integration (milestone 04):
+ * - If a `SessionRepo` is configured, loads conversation history and persists new
+ *   messages after the prompt settles.
+ * - Sends `x-londai-conversation` header with the conversation id.
+ */
+import type { AgentSpec, ApprovalConfig, LondaiRunOptions } from "../../types.ts";
+import type { HonoContext } from "../app.ts";
+export interface ChatStreamDeps {
+    spec: AgentSpec;
+    approval?: ApprovalConfig | false;
+    onEvent?: LondaiRunOptions["onEvent"];
+}
+export declare function registerChatStreamRoute(app: HonoContext, deps: ChatStreamDeps): void;
+//# sourceMappingURL=chat-stream.d.ts.map

package/dist/server/routes/chat-stream.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat-stream.d.ts","sourceRoot":"","sources":["../../../src/server/routes/chat-stream.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAKH,OAAO,KAAK,EAAE,SAAS,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAGlF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAG7C,MAAM,WAAW,cAAc;IAC9B,IAAI,EAAE,SAAS,CAAC;IAChB,QAAQ,CAAC,EAAE,cAAc,GAAG,KAAK,CAAC;IAClC,OAAO,CAAC,EAAE,gBAAgB,CAAC,SAAS,CAAC,CAAC;CACtC;AAED,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,cAAc,GAAG,IAAI,CAkIpF"}