patchwork-os 0.2.0-alpha.9 → 0.2.0-beta.1

package/dist/server.d.ts

@@ -1,20 +1,16 @@
 import { EventEmitter } from "node:events";
 import http from "node:http";
 import { WebSocket } from "ws";
+import type { ActivityListener } from "./activityTypes.js";
 import type { Logger } from "./logger.js";
 import type { OAuthServer } from "./oauth.js";
-import type { ActivityListener } from "./activityTypes.js";
 import type { RecipeDraft } from "./recipesHttp.js";
 interface ServerEvents {
     connection: [ws: WebSocket];
     extension: [ws: WebSocket];
 }
-/**
- * Return the CORS origin to reflect, or null if the origin is untrusted.
- * Loopback origins are always allowed. Additional origins can be passed via
- * --cors-origin (e.g. https://claude.ai for remote deployments).
- */
-export declare function corsOrigin(requestOrigin: string | undefined, extraOrigins?: string[]): string | null;
+import { corsOrigin } from "./cors.js";
+export { corsOrigin };
 export interface SessionSummary {
     id: string;
     connectedAt: string;
@@ -38,6 +34,8 @@ export declare class Server extends EventEmitter<ServerEvents> {
     private oauthServer;
     private oauthIssuerUrl;
     private sseSubscriberCount;
+    /** Cache for CC permission rules (30s TTL) to avoid filesystem walks on each dashboard poll */
+    private _explainRulesCache;
     private static readonly MAX_SSE_SUBSCRIBERS;
     /** Set by bridge to provide health data */
     healthDataFn: (() => Record<string, unknown>) | null;
@@ -57,8 +55,69 @@ export declare class Server extends EventEmitter<ServerEvents> {
     tasksFn: (() => {
         tasks: Record<string, unknown>[];
     }) | null;
+    /** Set by bridge to cancel a running/pending task by id. Returns true if found. */
+    cancelTaskFn: ((id: string) => boolean) | null;
+    /** Patchwork: set by bridge to set the trust level for a recipe by name. */
+    setRecipeTrustFn: ((name: string, level: string) => {
+        ok: boolean;
+        error?: string;
+    }) | null;
+    /** Patchwork: set by bridge to generate a recipe YAML draft from a natural-language prompt. */
+    generateRecipeFn: ((prompt: string) => Promise<{
+        ok: boolean;
+        yaml?: string;
+        warnings?: string[];
+        error?: string;
+        unavailable?: boolean;
+    }>) | null;
     /** Patchwork: set by bridge to list installed recipes for the dashboard. */
     recipesFn: (() => Record<string, unknown>) | null;
+    /** Patchwork: set by bridge to load raw recipe source content by name. */
+    loadRecipeContentFn: ((name: string) => {
+        content: string;
+        path: string;
+    } | null) | null;
+    /** Patchwork: set by bridge to save raw recipe source content by name. */
+    saveRecipeContentFn: ((name: string, content: string) => {
+        ok: boolean;
+        path?: string;
+        error?: string;
+        warnings?: string[];
+    }) | null;
+    /** Patchwork: set by bridge to delete a recipe by name. */
+    deleteRecipeContentFn: ((name: string) => {
+        ok: boolean;
+        path?: string;
+        error?: string;
+    }) | null;
+    /** Patchwork: set by bridge to archive a recipe (move to .archive/). */
+    archiveRecipeFn: ((name: string) => {
+        ok: boolean;
+        path?: string;
+        error?: string;
+    }) | null;
+    /** Patchwork: set by bridge to promote a variant recipe to the canonical name. */
+    promoteRecipeVariantFn: ((variantName: string, targetName: string, options?: {
+        force?: boolean;
+    }) => Promise<{
+        ok: boolean;
+        path?: string;
+        error?: string;
+        targetExists?: boolean;
+    }>) | null;
+    /** Patchwork: set by bridge to duplicate a recipe as a variant. */
+    duplicateRecipeFn: ((name: string) => {
+        ok: boolean;
+        variantName?: string;
+        path?: string;
+        error?: string;
+    }) | null;
+    /** Patchwork: set by bridge to lint raw recipe content without saving. */
+    lintRecipeContentFn: ((content: string) => {
+        ok: boolean;
+        errors: string[];
+        warnings: string[];
+    }) | null;
     /** Patchwork: set by bridge to save a new recipe draft to disk. */
     saveRecipeFn: ((draft: RecipeDraft) => {
         ok: boolean;
@@ -73,6 +132,18 @@ export declare class Server extends EventEmitter<ServerEvents> {
         recipe?: string;
         after?: number;
     }) => Record<string, unknown>[]) | null;
+    /** Patchwork: set by bridge to fetch a single run by seq for the detail page. */
+    runDetailFn: ((seq: number) => Record<string, unknown> | null) | null;
+    /** Patchwork: set by bridge to generate a dry-run plan for a recipe by name. */
+    runPlanFn: ((recipeName: string) => Promise<Record<string, unknown>>) | null;
+    /** Patchwork (VD-4): mocked replay of an existing run. Returns the new
+     *  run's seq plus any unmocked steps the caller may want to surface. */
+    runReplayFn: ((seq: number) => Promise<{
+        ok: boolean;
+        newSeq?: number;
+        unmockedSteps?: string[];
+        error?: string;
+    }>) | null;
     /** Patchwork: set by bridge to launch a named recipe via the orchestrator. */
     runRecipeFn: ((name: string, vars?: Record<string, string>) => Promise<{
         ok: boolean;
@@ -81,12 +152,40 @@ export declare class Server extends EventEmitter<ServerEvents> {
     }>) | null;
     /** Patchwork: admin-controlled managed settings path (highest rule precedence). */
     managedSettingsPath: string | undefined;
+    /** Effective bridge config path to update when dashboard saves driver changes. */
+    bridgeConfigPath: string | undefined;
     /** Patchwork: live approval gate level — mutated by POST /settings, read by bridge per-session setup. */
     approvalGate: "off" | "high" | "all";
     /** Patchwork: outbound webhook URL for approval notifications (from dashboard.webhookUrl in config). */
     approvalWebhookUrl: string | undefined;
+    /** Patchwork: push relay service URL — when set, per-callId approval tokens are generated. */
+    pushServiceUrl: string | undefined;
+    /** Patchwork: bearer token for the push relay service. */
+    pushServiceToken: string | undefined;
+    /** Patchwork: public base URL of this bridge, embedded in push payloads as callback base. */
+    pushServiceBaseUrl: string | undefined;
     /** Patchwork: approval decision audit callback wired to activityLog.recordEvent. */
     onApprovalDecision: ((event: string, meta: Record<string, unknown>) => void) | undefined;
+    /**
+     * Patchwork: activity log handle, used by approvalHttp to compute
+     * passive risk personalization signals (`src/approvalSignals.ts`).
+     * When unset, personalSignals are simply omitted from queue entries.
+     */
+    activityLog: import("./activityLog.js").ActivityLog | undefined;
+    /**
+     * Patchwork: recipe-run log handle, used by approvalHttp for the
+     * "recipe-step trust" heuristic (h6 in src/approvalSignals.ts). When
+     * unset, h6 is silently skipped; the other personalSignals heuristics
+     * still compute as long as `activityLog` is wired.
+     */
+    recipeRunLog: import("./runLog.js").RecipeRunLog | undefined;
+    /**
+     * Patchwork: opt-in switch for personalSignals heuristic 10
+     * (time-of-day anomaly). Off by default — see config.ts. Threaded into
+     * routeApprovalRequest deps so the personalSignals computation honors
+     * the user's preference.
+     */
+    enableTimeOfDayAnomaly: boolean;
     /** Patchwork: set by bridge to match + fire webhook-triggered recipes. */
     webhookFn: ((path: string, payload: unknown) => Promise<{
         ok: boolean;
@@ -94,6 +193,23 @@ export declare class Server extends EventEmitter<ServerEvents> {
         name?: string;
         error?: string;
     }>) | null;
+    /**
+     * Patchwork: ring buffer of recent webhook payloads, keyed by path
+     * (e.g. "/incident-war-room"). The last MAX_WEBHOOK_PAYLOADS entries are
+     * retained per path so the dashboard can show what the recipe most
+     * recently received — answers "did the trigger fire? what did it send?"
+     * without forcing the user to dig through bridge logs. In-memory only;
+     * cleared on restart.
+     */
+    webhookPayloads: Map<string, {
+        receivedAt: number;
+        payload: unknown;
+        ok: boolean;
+        error?: string;
+        taskId?: string;
+        recipeName?: string;
+    }[]>;
+    static readonly MAX_WEBHOOK_PAYLOADS = 5;
     /** Set by bridge to handle MCP Streamable HTTP sessions (POST/GET/DELETE /mcp) */
     httpMcpHandler: ((req: http.IncomingMessage, res: http.ServerResponse) => Promise<void>) | null;
     /** Set by bridge to subscribe a caller to real-time activity events. Returns unsubscribe fn. */
@@ -141,6 +257,10 @@ export declare class Server extends EventEmitter<ServerEvents> {
         error?: string;
         code?: string;
     }>) | null;
+    setRecipeEnabledFn: ((name: string, enabled: boolean) => {
+        ok: boolean;
+        error?: string;
+    }) | null;
     /**
      * Attach an OAuth 2.0 Authorization Server.
      * When set, the bridge exposes:
@@ -159,4 +279,3 @@ export declare class Server extends EventEmitter<ServerEvents> {
     findAndListen(preferredPort: number | null, bindAddress?: string): Promise<number>;
     close(): Promise<void>;
 }
-export {};