palmier 0.9.6 → 0.9.7

package/palmier-server/server/src/index.ts

@@ -1,688 +0,0 @@
-import "dotenv/config";
-import fs from "fs";
-import path from "path";
-import express from "express";
-import helmet from "helmet";
-import { pool, initDb } from "./db.js";
-import { connectNats, getNatsConnection } from "./nats.js";
-import { StringCodec } from "nats";
-
-import hostsRoutes from "./routes/hosts.js";
-import pushRoutes from "./routes/push.js";
-import fcmRoutes from "./routes/fcm.js";
-import deviceRoutes from "./routes/device.js";
-import { notifyClients } from "./notify.js";
-import { sendFcmToClients, sendFcmToDevice } from "./fcm.js";
-import { createPairingCredentials, createPwaCredentials } from "./nats-jwt.js";
-
-const PORT = parseInt(process.env.PORT || "3000", 10);
-
-async function main(): Promise<void> {
-  // Initialize database tables
-  await initDb();
-
-  // Connect to NATS
-  await connectNats();
-  const sc = StringCodec();
-
-  // Subscribe to unified host-event pub/sub for push notifications
-  (async () => {
-    try {
-      const conn = await getNatsConnection();
-      const sub = conn.subscribe("host-event.>");
-      console.log("Listening for host-event notifications");
-
-      for await (const msg of sub) {
-        try {
-          // Subject: host-event.<host_id>.<task_id>
-          const tokens = msg.subject.split(".");
-          if (tokens.length < 3) continue;
-          const hostId = tokens[1];
-          const taskId = tokens.slice(2).join(".");
-
-          const data = JSON.parse(sc.decode(msg.data)) as {
-            event_type: string;
-            running_state?: string;
-            name?: string;
-            run_id?: string;
-            session_id?: string;
-            description?: string;
-            agent_name?: string;
-            required_permissions?: Array<{ name: string; description: string }>;
-            input_questions?: string[];
-            result_file?: string;
-          };
-
-          if (data.event_type === "confirm-request") {
-            await notifyClients(hostId, {
-              type: "confirm",
-              title: "Confirmation Required",
-              body: data.description || "A task requires confirmation to run.",
-              host_id: hostId,
-              session_id: data.session_id,
-              agent_name: data.agent_name,
-            });
-          } else if (data.event_type === "confirm-resolved") {
-            await notifyClients(hostId, {
-              type: "confirm-dismiss",
-              host_id: hostId,
-              session_id: data.session_id,
-            });
-          } else if (data.event_type === "permission-request") {
-            const taskLabel = data.name
-              ? data.name.length > 60 ? data.name.slice(0, 60) + "…" : data.name
-              : "A task";
-            await notifyClients(hostId, {
-              type: "permission",
-              title: "Permission Required",
-              body: `${taskLabel} needs additional permissions to continue.`,
-              task_id: taskId,
-              host_id: hostId,
-            });
-          } else if (data.event_type === "permission-resolved") {
-            await notifyClients(hostId, {
-              type: "permission-dismiss",
-              task_id: taskId,
-              host_id: hostId,
-            });
-          } else if (data.event_type === "input-request") {
-            await notifyClients(hostId, {
-              type: "input",
-              title: "Input Required",
-              body: "A task needs your input to continue.",
-              host_id: hostId,
-              session_id: data.session_id,
-              agent_name: data.agent_name,
-            });
-          } else if (data.event_type === "input-resolved") {
-            await notifyClients(hostId, {
-              type: "input-dismiss",
-              host_id: hostId,
-              session_id: data.session_id,
-            });
-          } else if (data.event_type === "report-generated" || (data.event_type === "running-state" && data.running_state === "failed")) {
-            const label = data.name;
-            const taskLabel = label
-              ? label.length > 60 ? label.slice(0, 60) + "…" : label
-              : "Task";
-            const isFailure = data.running_state === "failed";
-            const body = isFailure ? `${taskLabel} — failed` : `${taskLabel} — report ready`;
-            await notifyClients(hostId, {
-              type: isFailure ? "fail" : "complete",
-              title: "Palmier",
-              body,
-              task_id: taskId,
-              host_id: hostId,
-              run_id: data.run_id,
-              result_file: data.result_file,
-            });
-          }
-        } catch (err) {
-          console.error("[host-event→Push] Error:", err);
-        }
-      }
-    } catch (err) {
-      console.error("Failed to subscribe to host-event:", err);
-    }
-  })();
-
-  // Subscribe to push notification requests from hosts
-  (async () => {
-    try {
-      const conn = await getNatsConnection();
-      const sub = conn.subscribe("host.*.push.send");
-      console.log("Listening for push notification requests");
-
-      for await (const msg of sub) {
-        try {
-          const data = JSON.parse(sc.decode(msg.data)) as {
-            hostId: string;
-            title: string;
-            body: string;
-            session_id?: string;
-            agent_name?: string;
-          };
-
-          // Validate hostId in subject matches payload
-          const subjectHostId = msg.subject.split(".")[1];
-          if (data.hostId !== subjectHostId) {
-            if (msg.reply) {
-              msg.respond(sc.encode(JSON.stringify({ error: "hostId mismatch" })));
-            }
-            continue;
-          }
-
-          // If no agent_name, session_id is a taskId — include as task_id for deep-linking
-          const isTask = data.session_id && !data.agent_name;
-
-          console.log(`[Push] Sending notification for host ${data.hostId}`);
-          await notifyClients(data.hostId, {
-            type: "notification",
-            host_id: data.hostId,
-            title: data.title,
-            body: data.body,
-            ...(isTask ? { task_id: data.session_id } : {}),
-            agent_name: data.agent_name,
-          });
-
-          if (msg.reply) {
-            msg.respond(sc.encode(JSON.stringify({ ok: true })));
-          }
-        } catch (err) {
-          console.error("[Push] Error sending notification:", err);
-          if (msg.reply) {
-            msg.respond(sc.encode(JSON.stringify({ error: String(err) })));
-          }
-        }
-      }
-    } catch (err) {
-      console.error("Failed to subscribe to push requests:", err);
-    }
-  })();
-
-  // Subscribe to FCM geolocation requests from hosts
-  (async () => {
-    try {
-      const conn = await getNatsConnection();
-      const sub = conn.subscribe("host.*.fcm.geolocation");
-      console.log("Listening for FCM geolocation requests");
-
-      for await (const msg of sub) {
-        try {
-          const data = JSON.parse(sc.decode(msg.data)) as {
-            hostId: string;
-            requestId: string;
-            fcmToken?: string;
-          };
-
-          const subjectHostId = msg.subject.split(".")[1];
-          if (data.hostId !== subjectHostId) {
-            if (msg.reply) {
-              msg.respond(sc.encode(JSON.stringify({ error: "hostId mismatch" })));
-            }
-            continue;
-          }
-
-          const fcmPayload = {
-            type: "geolocation-request",
-            requestId: data.requestId,
-            hostId: data.hostId,
-          };
-
-          console.log(`[FCM] Sending geolocation request for host ${data.hostId}`);
-          if (data.fcmToken) {
-            await sendFcmToDevice(data.fcmToken, fcmPayload);
-          } else {
-            await sendFcmToClients(data.hostId, fcmPayload);
-          }
-
-          if (msg.reply) {
-            msg.respond(sc.encode(JSON.stringify({ ok: true })));
-          }
-        } catch (err) {
-          console.error("[FCM] Error handling geolocation request:", err);
-          if (msg.reply) {
-            msg.respond(sc.encode(JSON.stringify({ error: String(err) })));
-          }
-        }
-      }
-    } catch (err) {
-      console.error("Failed to subscribe to FCM geolocation requests:", err);
-    }
-  })();
-
-  // Subscribe to contacts requests from hosts
-  (async () => {
-    try {
-      const conn = await getNatsConnection();
-      const sub = conn.subscribe("host.*.fcm.contacts");
-      console.log("Listening for FCM contacts requests");
-
-      for await (const msg of sub) {
-        try {
-          const data = JSON.parse(sc.decode(msg.data)) as {
-            hostId: string;
-            requestId: string;
-            fcmToken?: string;
-            action: string;
-            name?: string;
-            phone?: string;
-            email?: string;
-          };
-
-          const subjectHostId = msg.subject.split(".")[1];
-          if (data.hostId !== subjectHostId) {
-            if (msg.reply) {
-              msg.respond(sc.encode(JSON.stringify({ error: "hostId mismatch" })));
-            }
-            continue;
-          }
-
-          const fcmPayload: Record<string, string> = {
-            type: data.action === "create" ? "create-contact" : "read-contacts",
-            requestId: data.requestId,
-            hostId: data.hostId,
-          };
-          if (data.name) fcmPayload.name = data.name;
-          if (data.phone) fcmPayload.phone = data.phone;
-          if (data.email) fcmPayload.email = data.email;
-
-          console.log(`[FCM] Sending contacts ${data.action} request for host ${data.hostId}`);
-          if (data.fcmToken) {
-            await sendFcmToDevice(data.fcmToken, fcmPayload);
-          } else {
-            await sendFcmToClients(data.hostId, fcmPayload);
-          }
-
-          if (msg.reply) {
-            msg.respond(sc.encode(JSON.stringify({ ok: true })));
-          }
-        } catch (err) {
-          console.error("[FCM] Error handling contacts request:", err);
-          if (msg.reply) {
-            msg.respond(sc.encode(JSON.stringify({ error: String(err) })));
-          }
-        }
-      }
-    } catch (err) {
-      console.error("Failed to subscribe to FCM contacts requests:", err);
-    }
-  })();
-
-  // Subscribe to calendar requests from hosts
-  (async () => {
-    try {
-      const conn = await getNatsConnection();
-      const sub = conn.subscribe("host.*.fcm.calendar");
-      console.log("Listening for FCM calendar requests");
-
-      for await (const msg of sub) {
-        try {
-          const data = JSON.parse(sc.decode(msg.data)) as {
-            hostId: string;
-            requestId: string;
-            action: string;
-            [key: string]: string;
-          };
-
-          const subjectHostId = msg.subject.split(".")[1];
-          if (data.hostId !== subjectHostId) {
-            if (msg.reply) {
-              msg.respond(sc.encode(JSON.stringify({ error: "hostId mismatch" })));
-            }
-            continue;
-          }
-
-          const fcmPayload: Record<string, string> = {
-            type: data.action === "create" ? "create-calendar-event" : "read-calendar",
-            requestId: data.requestId,
-            hostId: data.hostId,
-          };
-          // Forward optional fields
-          for (const key of ["startDate", "endDate", "title", "startTime", "endTime", "location", "description"]) {
-            if (data[key]) fcmPayload[key] = data[key];
-          }
-
-          console.log(`[FCM] Sending calendar ${data.action} request for host ${data.hostId}`);
-          await sendFcmToClients(data.hostId, fcmPayload);
-
-          if (msg.reply) {
-            msg.respond(sc.encode(JSON.stringify({ ok: true })));
-          }
-        } catch (err) {
-          console.error("[FCM] Error handling calendar request:", err);
-          if (msg.reply) {
-            msg.respond(sc.encode(JSON.stringify({ error: String(err) })));
-          }
-        }
-      }
-    } catch (err) {
-      console.error("Failed to subscribe to FCM calendar requests:", err);
-    }
-  })();
-
-  // Subscribe to send-SMS requests from hosts
-  (async () => {
-    try {
-      const conn = await getNatsConnection();
-      const sub = conn.subscribe("host.*.fcm.sms");
-      console.log("Listening for FCM SMS requests");
-
-      for await (const msg of sub) {
-        try {
-          const data = JSON.parse(sc.decode(msg.data)) as {
-            hostId: string;
-            requestId: string;
-            action: string;
-            to?: string;
-            body?: string;
-          };
-
-          const subjectHostId = msg.subject.split(".")[1];
-          if (data.hostId !== subjectHostId) {
-            if (msg.reply) {
-              msg.respond(sc.encode(JSON.stringify({ error: "hostId mismatch" })));
-            }
-            continue;
-          }
-
-          const fcmPayload: Record<string, string> = {
-            type: "send-sms",
-            requestId: data.requestId,
-            hostId: data.hostId,
-          };
-          if (data.to) fcmPayload.to = data.to;
-          if (data.body) fcmPayload.body = data.body;
-
-          console.log(`[FCM] Sending SMS request for host ${data.hostId}`);
-          await sendFcmToClients(data.hostId, fcmPayload);
-
-          if (msg.reply) {
-            msg.respond(sc.encode(JSON.stringify({ ok: true })));
-          }
-        } catch (err) {
-          console.error("[FCM] Error handling SMS request:", err);
-          if (msg.reply) {
-            msg.respond(sc.encode(JSON.stringify({ error: String(err) })));
-          }
-        }
-      }
-    } catch (err) {
-      console.error("Failed to subscribe to FCM SMS requests:", err);
-    }
-  })();
-
-  // Subscribe to alarm requests from hosts
-  (async () => {
-    try {
-      const conn = await getNatsConnection();
-      const sub = conn.subscribe("host.*.fcm.alarm");
-      console.log("Listening for FCM alarm requests");
-
-      for await (const msg of sub) {
-        try {
-          const data = JSON.parse(sc.decode(msg.data)) as {
-            hostId: string;
-            requestId: string;
-            fcmToken?: string;
-            title?: string;
-            description?: string;
-          };
-
-          const subjectHostId = msg.subject.split(".")[1];
-          if (data.hostId !== subjectHostId) {
-            if (msg.reply) {
-              msg.respond(sc.encode(JSON.stringify({ error: "hostId mismatch" })));
-            }
-            continue;
-          }
-
-          const fcmPayload: Record<string, string> = {
-            type: "send-alarm",
-            requestId: data.requestId,
-            hostId: data.hostId,
-          };
-          if (data.title) fcmPayload.title = data.title;
-          if (data.description) fcmPayload.description = data.description;
-
-          console.log(`[FCM] Sending alarm request for host ${data.hostId}`);
-          if (data.fcmToken) {
-            await sendFcmToDevice(data.fcmToken, fcmPayload);
-          } else {
-            await sendFcmToClients(data.hostId, fcmPayload);
-          }
-
-          if (msg.reply) {
-            msg.respond(sc.encode(JSON.stringify({ ok: true })));
-          }
-        } catch (err) {
-          console.error("[FCM] Error handling alarm request:", err);
-          if (msg.reply) {
-            msg.respond(sc.encode(JSON.stringify({ error: String(err) })));
-          }
-        }
-      }
-    } catch (err) {
-      console.error("Failed to subscribe to FCM alarm requests:", err);
-    }
-  })();
-
-  // Subscribe to email requests from hosts
-  (async () => {
-    try {
-      const conn = await getNatsConnection();
-      const sub = conn.subscribe("host.*.fcm.email");
-      console.log("Listening for FCM email requests");
-
-      for await (const msg of sub) {
-        try {
-          const data = JSON.parse(sc.decode(msg.data)) as {
-            hostId: string;
-            requestId: string;
-            fcmToken?: string;
-            [key: string]: string | undefined;
-          };
-
-          const subjectHostId = msg.subject.split(".")[1];
-          if (data.hostId !== subjectHostId) {
-            if (msg.reply) {
-              msg.respond(sc.encode(JSON.stringify({ error: "hostId mismatch" })));
-            }
-            continue;
-          }
-
-          const fcmPayload: Record<string, string> = {
-            type: "send-email",
-            requestId: data.requestId,
-            hostId: data.hostId,
-          };
-          for (const key of ["to", "subject", "body", "cc", "bcc"]) {
-            if (data[key]) fcmPayload[key] = data[key]!;
-          }
-
-          console.log(`[FCM] Sending email request for host ${data.hostId}`);
-          if (data.fcmToken) {
-            await sendFcmToDevice(data.fcmToken, fcmPayload);
-          } else {
-            await sendFcmToClients(data.hostId, fcmPayload);
-          }
-
-          if (msg.reply) {
-            msg.respond(sc.encode(JSON.stringify({ ok: true })));
-          }
-        } catch (err) {
-          console.error("[FCM] Error handling email request:", err);
-          if (msg.reply) {
-            msg.respond(sc.encode(JSON.stringify({ error: String(err) })));
-          }
-        }
-      }
-    } catch (err) {
-      console.error("Failed to subscribe to FCM email requests:", err);
-    }
-  })();
-
-  // Subscribe to battery requests from hosts
-  (async () => {
-    try {
-      const conn = await getNatsConnection();
-      const sub = conn.subscribe("host.*.fcm.battery");
-      console.log("Listening for FCM battery requests");
-
-      for await (const msg of sub) {
-        try {
-          const data = JSON.parse(sc.decode(msg.data)) as {
-            hostId: string;
-            requestId: string;
-          };
-
-          const subjectHostId = msg.subject.split(".")[1];
-          if (data.hostId !== subjectHostId) {
-            if (msg.reply) {
-              msg.respond(sc.encode(JSON.stringify({ error: "hostId mismatch" })));
-            }
-            continue;
-          }
-
-          console.log(`[FCM] Sending battery request for host ${data.hostId}`);
-          await sendFcmToClients(data.hostId, {
-            type: "read-battery",
-            requestId: data.requestId,
-            hostId: data.hostId,
-          });
-
-          if (msg.reply) {
-            msg.respond(sc.encode(JSON.stringify({ ok: true })));
-          }
-        } catch (err) {
-          console.error("[FCM] Error handling battery request:", err);
-          if (msg.reply) {
-            msg.respond(sc.encode(JSON.stringify({ error: String(err) })));
-          }
-        }
-      }
-    } catch (err) {
-      console.error("Failed to subscribe to FCM battery requests:", err);
-    }
-  })();
-
-  // Subscribe to ringer mode requests from hosts
-  (async () => {
-    try {
-      const conn = await getNatsConnection();
-      const sub = conn.subscribe("host.*.fcm.ringer");
-      console.log("Listening for FCM ringer requests");
-
-      for await (const msg of sub) {
-        try {
-          const data = JSON.parse(sc.decode(msg.data)) as {
-            hostId: string;
-            requestId: string;
-            mode: string;
-          };
-
-          const subjectHostId = msg.subject.split(".")[1];
-          if (data.hostId !== subjectHostId) {
-            if (msg.reply) {
-              msg.respond(sc.encode(JSON.stringify({ error: "hostId mismatch" })));
-            }
-            continue;
-          }
-
-          console.log(`[FCM] Sending ringer mode request for host ${data.hostId}`);
-          await sendFcmToClients(data.hostId, {
-            type: "set-ringer-mode",
-            requestId: data.requestId,
-            hostId: data.hostId,
-            mode: data.mode,
-          });
-
-          if (msg.reply) {
-            msg.respond(sc.encode(JSON.stringify({ ok: true })));
-          }
-        } catch (err) {
-          console.error("[FCM] Error handling ringer request:", err);
-          if (msg.reply) {
-            msg.respond(sc.encode(JSON.stringify({ error: String(err) })));
-          }
-        }
-      }
-    } catch (err) {
-      console.error("Failed to subscribe to FCM ringer requests:", err);
-    }
-  })();
-
-  // Create Express app
-  const app = express();
-
-  app.use(
-    helmet({
-      contentSecurityPolicy: false,
-      crossOriginResourcePolicy: false,
-    })
-  );
-
-  // CORS for Capacitor Android app (requests from capacitor://localhost)
-  app.use((req, res, next) => {
-    const origin = req.headers.origin;
-    if (origin && (origin.startsWith("capacitor://") || origin === "https://localhost" || origin.startsWith("http://localhost"))) {
-      res.setHeader("Access-Control-Allow-Origin", origin);
-      res.setHeader("Access-Control-Allow-Methods", "GET, POST, PUT, PATCH, DELETE, OPTIONS");
-      res.setHeader("Access-Control-Allow-Headers", "Content-Type, Authorization");
-    }
-    if (req.method === "OPTIONS") {
-      res.sendStatus(204);
-      return;
-    }
-    next();
-  });
-
-  app.use(express.json());
-
-  // Mount routes
-  app.use("/api/hosts", hostsRoutes);
-  app.use("/api/push", pushRoutes);
-  app.use("/api/fcm", fcmRoutes);
-  app.use("/api/device", deviceRoutes);
-
-  // Public NATS config endpoint — returns pairing-only credentials.
-  // These can only publish to pair.* subjects (no RPC, no event subscriptions).
-  app.get("/api/config", (_req, res) => {
-    const accountSeed = process.env.NATS_ACCOUNT_SEED;
-    if (!accountSeed) {
-      res.status(500).json({ error: "Server NATS auth not configured" });
-      return;
-    }
-    const creds = createPairingCredentials(accountSeed);
-    res.json({
-      natsWsUrl: process.env.NATS_WS_URL || "",
-      natsJwt: creds.jwt,
-      natsNkeySeed: creds.nkeySeed,
-    });
-  });
-
-  // Host-scoped NATS credentials — returns JWT scoped to a single host's subjects.
-  // Called by the PWA after pairing to get credentials for RPC + event subscriptions.
-  app.get("/api/nats-credentials/:hostId", (req, res) => {
-    const accountSeed = process.env.NATS_ACCOUNT_SEED;
-    if (!accountSeed) {
-      res.status(500).json({ error: "Server NATS auth not configured" });
-      return;
-    }
-    const { hostId } = req.params;
-    const creds = createPwaCredentials(accountSeed, hostId);
-    res.json({
-      natsWsUrl: process.env.NATS_WS_URL || "",
-      natsJwt: creds.jwt,
-      natsNkeySeed: creds.nkeySeed,
-    });
-  });
-
-  // Health check
-  app.get("/health", async (_req, res) => {
-    try {
-      await pool.query("SELECT 1");
-      res.json({ status: "ok" });
-    } catch {
-      res.status(503).json({ status: "unhealthy" });
-    }
-  });
-
-  // Serve built PWA static files (production only)
-  const pwaDistPath = path.resolve(process.cwd(), "../pwa/dist");
-  if (fs.existsSync(pwaDistPath)) {
-    app.use(express.static(pwaDistPath));
-    app.get("*", (_req, res) => {
-      res.sendFile(path.join(pwaDistPath, "index.html"));
-    });
-  }
-
-  app.listen(PORT, () => {
-    console.log(`Palmier server listening on port ${PORT}`);
-  });
-}
-
-main().catch((err) => {
-  console.error("Failed to start server:", err);
-  process.exit(1);
-});