pi-forge 0.0.0 → 1.1.4

package/dist/server/attachment-converters.js

@@ -0,0 +1,96 @@
+import { Worker } from "node:worker_threads";
+/**
+ * Office-format → text converter dispatcher.
+ *
+ * Conversion runs in a `worker_threads` worker (see
+ * `conversion-worker.mjs`) because pdfjs-dist and ExcelJS do heavy
+ * synchronous JS work that blocks Node's event loop for seconds on
+ * real-world files. While the loop is blocked, the SSE bridge's
+ * heartbeat can't fire and the underlying TCP socket stalls long
+ * enough for Node's HTTP machinery (or any L7 proxy) to drop the
+ * stream — producing a "Reconnecting…" banner in chat right after the
+ * user submits a prompt with an attachment.
+ *
+ * One-shot worker per conversion call (no pool). Conversion is rare
+ * relative to other server activity; pool startup overhead would
+ * outweigh the savings until you're processing many files per minute.
+ *
+ * Errors (corrupt file, encrypted PDF, unparseable office doc, worker
+ * crash) come back as `ConversionError` so the route can surface a
+ * clean upload-time message instead of a generic 500.
+ */
+export class ConversionError extends Error {
+    filename;
+    format;
+    constructor(filename, format, cause) {
+        super(`failed to convert ${format.toUpperCase()} "${filename}": ${describe(cause)}`);
+        this.filename = filename;
+        this.format = format;
+        this.name = "ConversionError";
+    }
+}
+function describe(err) {
+    if (err instanceof Error)
+        return err.message;
+    return String(err);
+}
+/**
+ * Match the upload to a converter. Dispatch is by lowercased
+ * extension first, then MIME — extensions are more reliable in
+ * practice because browsers send `application/octet-stream` for these
+ * formats more often than the canonical MIME types.
+ */
+export function pickConverter(filename, mime) {
+    const ext = filename.includes(".") ? filename.split(".").pop()?.toLowerCase() : undefined;
+    if (ext === "pdf" || mime === "application/pdf")
+        return "pdf";
+    if (ext === "docx" ||
+        mime === "application/vnd.openxmlformats-officedocument.wordprocessingml.document") {
+        return "docx";
+    }
+    if (ext === "xlsx" ||
+        mime === "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet") {
+        return "xlsx";
+    }
+    return undefined;
+}
+// Resolve the worker file relative to THIS module. Works in both
+// `tsx` dev (this file is TS in src/) and compiled prod (this file is
+// JS in dist/) because the build step copies the .mjs alongside.
+const WORKER_URL = new URL("./conversion-worker.mjs", import.meta.url);
+let nextRequestId = 0;
+export async function convertAttachment(format, filename, buf) {
+    const id = ++nextRequestId;
+    // Transfer the buffer's underlying ArrayBuffer to the worker — zero
+    // copy. We slice() first because Node Buffers share their pool's
+    // ArrayBuffer with other buffers; transferring the whole pool would
+    // detach unrelated buffers.
+    const ab = buf.buffer.slice(buf.byteOffset, buf.byteOffset + buf.byteLength);
+    const worker = new Worker(WORKER_URL);
+    return new Promise((resolve, reject) => {
+        worker.once("message", (msg) => {
+            if (msg.ok && typeof msg.text === "string") {
+                resolve(msg.text);
+            }
+            else {
+                reject(new ConversionError(filename, format, msg.error ?? "worker returned no text"));
+            }
+        });
+        worker.once("error", (err) => {
+            reject(new ConversionError(filename, format, err));
+        });
+        worker.once("exit", (code) => {
+            if (code !== 0) {
+                // `error` will have already rejected; this is a safety net for
+                // an exit without a prior error event.
+                reject(new ConversionError(filename, format, `worker exited with code ${code}`));
+            }
+        });
+        worker.postMessage({ id, format, buf: ab }, [ab]);
+    }).finally(() => {
+        // Worker is one-shot — terminate so the thread exits cleanly even
+        // if the postMessage handler didn't trigger an organic exit.
+        void worker.terminate();
+    });
+}
+//# sourceMappingURL=attachment-converters.js.map

package/dist/server/attachment-converters.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attachment-converters.js","sourceRoot":"","sources":["../src/attachment-converters.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAE7C;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,MAAM,OAAO,eAAgB,SAAQ,KAAK;IAEtB;IACA;IAFlB,YACkB,QAAgB,EAChB,MAA+B,EAC/C,KAAc;QAEd,KAAK,CAAC,qBAAqB,MAAM,CAAC,WAAW,EAAE,KAAK,QAAQ,MAAM,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAJrE,aAAQ,GAAR,QAAQ,CAAQ;QAChB,WAAM,GAAN,MAAM,CAAyB;QAI/C,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AAED,SAAS,QAAQ,CAAC,GAAY;IAC5B,IAAI,GAAG,YAAY,KAAK;QAAE,OAAO,GAAG,CAAC,OAAO,CAAC;IAC7C,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;AACrB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,QAAgB,EAAE,IAAY;IAC1D,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1F,IAAI,GAAG,KAAK,KAAK,IAAI,IAAI,KAAK,iBAAiB;QAAE,OAAO,KAAK,CAAC;IAC9D,IACE,GAAG,KAAK,MAAM;QACd,IAAI,KAAK,yEAAyE,EAClF,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IACE,GAAG,KAAK,MAAM;QACd,IAAI,KAAK,mEAAmE,EAC5E,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,iEAAiE;AACjE,sEAAsE;AACtE,iEAAiE;AACjE,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,yBAAyB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AASvE,IAAI,aAAa,GAAG,CAAC,CAAC;AAEtB,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAA+B,EAC/B,QAAgB,EAChB,GAAW;IAEX,MAAM,EAAE,GAAG,EAAE,aAAa,CAAC;IAC3B,oEAAoE;IACpE,iEAAiE;IACjE,oEAAoE;IACpE,4BAA4B;IAC5B,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC,UAAU,CAAgB,CAAC;IAC5F,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,UAAU,CAAC,CAAC;IACtC,OAAO,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC7C,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,GAAmB,EAAE,EAAE;YAC7C,IAAI,GAAG,CAAC,EAAE,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC3C,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACpB,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,KAAK,IAAI,yBAAyB,CAAC,CAAC,CAAC;YACxF,CAAC;QACH,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YAC3B,MAAM,CAAC,IAAI,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;QACrD,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YAC3B,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;gBACf,+DAA+D;gBAC/D,uCAAuC;gBACvC,MAAM,CAAC,IAAI,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,2BAA2B,IAAI,EAAE,CAAC,CAAC,CAAC;YACnF,CAAC;QACH,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,WAAW,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;QACd,kEAAkE;QAClE,6DAA6D;QAC7D,KAAK,MAAM,CAAC,SAAS,EAAE,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/server/auth.js

@@ -0,0 +1,209 @@
+import { Buffer } from "node:buffer";
+import { chmodSync, existsSync, readFileSync, renameSync, writeFileSync } from "node:fs";
+import { randomBytes, scrypt as scryptCb, timingSafeEqual } from "node:crypto";
+import { promisify } from "node:util";
+import jwt from "jsonwebtoken";
+import { config } from "./config.js";
+const scrypt = promisify(scryptCb);
+/**
+ * scrypt cost params. N=16384 (2^14) targets ~50–100 ms per verify on
+ * modern hardware — slow enough to make brute-forcing expensive,
+ * fast enough that an interactive login feels instant. r/p left at
+ * the recommended defaults. Bump N when verifies start feeling fast.
+ */
+const SCRYPT_N = 16384;
+const SCRYPT_R = 8;
+const SCRYPT_P = 1;
+const SCRYPT_KEYLEN = 64;
+const SCRYPT_SALT_BYTES = 16;
+const HASH_PREFIX = "scrypt";
+/**
+ * Constant-time string comparison. Pads the shorter buffer so timingSafeEqual
+ * can run on equal-length inputs, then enforces the length check after-the-fact
+ * so length isn't leaked through early-return timing.
+ */
+export function constantTimeStringEqual(presented, expected) {
+    const a = Buffer.from(presented, "utf8");
+    const b = Buffer.from(expected, "utf8");
+    const len = Math.max(a.length, b.length);
+    const aPadded = Buffer.alloc(len);
+    const bPadded = Buffer.alloc(len);
+    a.copy(aPadded);
+    b.copy(bPadded);
+    return timingSafeEqual(aPadded, bPadded) && a.length === b.length;
+}
+export function generateToken(opts) {
+    if (config.auth.jwtSecret === undefined) {
+        throw new Error("auth: cannot generate token — JWT_SECRET not configured");
+    }
+    const expiresIn = config.auth.jwtExpiresInSeconds;
+    const token = jwt.sign({
+        sub: "ui-user",
+        mustChangePassword: opts.mustChangePassword,
+    }, config.auth.jwtSecret, {
+        algorithm: "HS256",
+        expiresIn,
+    });
+    const expiresAt = new Date(Date.now() + expiresIn * 1000).toISOString();
+    return { token, expiresAt };
+}
+/**
+ * Verify a JWT and return the typed payload, or undefined on any failure
+ * (bad signature, expired, missing JWT_SECRET, wrong subject).
+ */
+export function verifyToken(token) {
+    if (config.auth.jwtSecret === undefined)
+        return undefined;
+    try {
+        const decoded = jwt.verify(token, config.auth.jwtSecret, {
+            algorithms: ["HS256"],
+        });
+        if (typeof decoded !== "object" || decoded === null)
+            return undefined;
+        if (decoded.sub !== "ui-user")
+            return undefined;
+        if (typeof decoded.iat !== "number" || typeof decoded.exp !== "number")
+            return undefined;
+        // mustChangePassword may be absent on tokens issued before this
+        // field existed; treat absence as `false` so existing sessions
+        // don't get force-rerouted to the change-password screen.
+        const mustChangePassword = typeof decoded.mustChangePassword === "boolean"
+            ? decoded.mustChangePassword
+            : false;
+        return { sub: "ui-user", iat: decoded.iat, exp: decoded.exp, mustChangePassword };
+    }
+    catch {
+        // jsonwebtoken throws on malformed/expired/wrong-secret tokens.
+        // Caller treats undefined as "no valid token" without
+        // distinguishing why — clients can't act on the distinction
+        // (and we don't want to leak which case applies to a brute-forcer).
+        return undefined;
+    }
+}
+export function verifyApiKey(presented) {
+    const expected = config.auth.apiKey;
+    if (expected === undefined)
+        return false;
+    return constantTimeStringEqual(presented, expected);
+}
+/**
+ * Verify a presented password against either the on-disk hash (if
+ * present) or the env UI_PASSWORD (fallback). The returned `source`
+ * lets the caller decide whether to set `mustChangePassword` on the
+ * issued token: `env` means the user is logging in with the
+ * deployment-baked credential and (if `requirePasswordChange` is on)
+ * must change it before doing anything else.
+ *
+ * Once a hash exists on disk, the env password is IGNORED — that
+ * file is the canonical credential and should survive env-rotation
+ * just like jwt-secret does.
+ */
+export async function verifyPasswordWithSource(presented) {
+    const stored = readStoredHash();
+    if (stored !== undefined) {
+        const ok = await verifyAgainstStoredHash(presented, stored);
+        return { ok, source: "stored" };
+    }
+    const envPw = config.auth.uiPassword;
+    if (envPw !== undefined) {
+        return { ok: constantTimeStringEqual(presented, envPw), source: "env" };
+    }
+    return { ok: false, source: "none" };
+}
+export function passwordConfigured() {
+    return readStoredHash() !== undefined || config.auth.uiPassword !== undefined;
+}
+/**
+ * Hash the new password and atomically replace the on-disk file.
+ * Mode 0600 — only the pi-forge process owner should be able to
+ * read it. Atomic replace via tmp + rename so a crash mid-write
+ * doesn't leave a half-written hash that locks the user out.
+ */
+export async function persistPassword(plain) {
+    const encoded = await hashPassword(plain);
+    const path = config.auth.passwordHashFile;
+    const tmp = `${path}.tmp`;
+    writeFileSync(tmp, `${encoded}\n`, { mode: 0o600 });
+    chmodSync(tmp, 0o600);
+    renameSync(tmp, path);
+}
+async function hashPassword(plain) {
+    const salt = randomBytes(SCRYPT_SALT_BYTES);
+    const hash = await scrypt(plain, salt, SCRYPT_KEYLEN);
+    return [
+        HASH_PREFIX,
+        String(SCRYPT_N),
+        String(SCRYPT_R),
+        String(SCRYPT_P),
+        salt.toString("base64"),
+        hash.toString("base64"),
+    ].join("$");
+}
+function parseHash(encoded) {
+    const parts = encoded.split("$");
+    if (parts.length !== 6)
+        return undefined;
+    if (parts[0] !== HASH_PREFIX)
+        return undefined;
+    const n = Number.parseInt(parts[1] ?? "", 10);
+    const r = Number.parseInt(parts[2] ?? "", 10);
+    const p = Number.parseInt(parts[3] ?? "", 10);
+    if (!Number.isFinite(n) || !Number.isFinite(r) || !Number.isFinite(p))
+        return undefined;
+    try {
+        const salt = Buffer.from(parts[4] ?? "", "base64");
+        const hash = Buffer.from(parts[5] ?? "", "base64");
+        if (salt.length === 0 || hash.length === 0)
+            return undefined;
+        return { n, r, p, salt, hash };
+    }
+    catch {
+        return undefined;
+    }
+}
+function readStoredHash() {
+    const path = config.auth.passwordHashFile;
+    if (!existsSync(path))
+        return undefined;
+    try {
+        const v = readFileSync(path, "utf8").trim();
+        return v.length > 0 ? v : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+function scryptWithOptions(password, salt, keylen, options) {
+    return new Promise((resolve, reject) => {
+        scryptCb(password, salt, keylen, options, (err, derived) => {
+            if (err !== null) {
+                reject(err);
+                return;
+            }
+            resolve(derived);
+        });
+    });
+}
+async function verifyAgainstStoredHash(presented, encoded) {
+    const parsed = parseHash(encoded);
+    if (parsed === undefined)
+        return false;
+    // Honour the stored params (not our current constants) so older
+    // hashes with different cost parameters still verify after a
+    // params bump. New hashes always use the current SCRYPT_* values.
+    const candidate = await scryptWithOptions(presented, parsed.salt, parsed.hash.length, {
+        N: parsed.n,
+        r: parsed.r,
+        p: parsed.p,
+    });
+    if (candidate.length !== parsed.hash.length)
+        return false;
+    return timingSafeEqual(candidate, parsed.hash);
+}
+export function extractBearer(headerValue) {
+    if (!headerValue)
+        return undefined;
+    const m = /^Bearer\s+(\S+)$/i.exec(headerValue);
+    return m?.[1];
+}
+//# sourceMappingURL=auth.js.map

package/dist/server/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACzF,OAAO,EAAE,WAAW,EAAE,MAAM,IAAI,QAAQ,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC/E,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,GAAG,MAAM,cAAc,CAAC;AAC/B,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,CAIb,CAAC;AAErB;;;;;GAKG;AACH,MAAM,QAAQ,GAAG,KAAK,CAAC;AACvB,MAAM,QAAQ,GAAG,CAAC,CAAC;AACnB,MAAM,QAAQ,GAAG,CAAC,CAAC;AACnB,MAAM,aAAa,GAAG,EAAE,CAAC;AACzB,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAE7B,MAAM,WAAW,GAAG,QAAQ,CAAC;AAiB7B;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,SAAiB,EAAE,QAAgB;IACzE,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IACzC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACxC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAClC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAChB,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAChB,OAAO,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,CAAC;AACpE,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAqC;IACjE,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC;IAClD,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CACpB;QACE,GAAG,EAAE,SAAS;QACd,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;KACa,EAC1D,MAAM,CAAC,IAAI,CAAC,SAAS,EACrB;QACE,SAAS,EAAE,OAAO;QAClB,SAAS;KACV,CACF,CAAC;IACF,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IACxE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;AAC9B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1D,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE;YACvD,UAAU,EAAE,CAAC,OAAO,CAAC;SACtB,CAAC,CAAC;QACH,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI;YAAE,OAAO,SAAS,CAAC;QACtE,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAChD,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QACzF,gEAAgE;QAChE,+DAA+D;QAC/D,0DAA0D;QAC1D,MAAM,kBAAkB,GACtB,OAAQ,OAA4C,CAAC,kBAAkB,KAAK,SAAS;YACnF,CAAC,CAAE,OAA2C,CAAC,kBAAkB;YACjE,CAAC,CAAC,KAAK,CAAC;QACZ,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,kBAAkB,EAAE,CAAC;IACpF,CAAC;IAAC,MAAM,CAAC;QACP,gEAAgE;QAChE,sDAAsD;QACtD,4DAA4D;QAC5D,oEAAoE;QACpE,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,SAAiB;IAC5C,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;IACpC,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACzC,OAAO,uBAAuB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;AACtD,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,SAAiB;IAEjB,MAAM,MAAM,GAAG,cAAc,EAAE,CAAC;IAChC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,EAAE,GAAG,MAAM,uBAAuB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC5D,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAClC,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;IACrC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,EAAE,EAAE,EAAE,uBAAuB,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAC1E,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,kBAAkB;IAChC,OAAO,cAAc,EAAE,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC;AAChF,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,KAAa;IACjD,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC;IAC1C,MAAM,GAAG,GAAG,GAAG,IAAI,MAAM,CAAC;IAC1B,aAAa,CAAC,GAAG,EAAE,GAAG,OAAO,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACpD,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACtB,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AACxB,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,KAAa;IACvC,MAAM,IAAI,GAAG,WAAW,CAAC,iBAAiB,CAAC,CAAC;IAC5C,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;IACtD,OAAO;QACL,WAAW;QACX,MAAM,CAAC,QAAQ,CAAC;QAChB,MAAM,CAAC,QAAQ,CAAC;QAChB,MAAM,CAAC,QAAQ,CAAC;QAChB,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACvB,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;KACxB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACd,CAAC;AAUD,SAAS,SAAS,CAAC,OAAe;IAChC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACzC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,WAAW;QAAE,OAAO,SAAS,CAAC;IAC/C,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IAC9C,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IAC9C,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IAC9C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACxF,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,QAAQ,CAAC,CAAC;QACnD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,QAAQ,CAAC,CAAC;QACnD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAC7D,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,cAAc;IACrB,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC;IAC1C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACxC,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5C,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CACxB,QAAgB,EAChB,IAAY,EACZ,MAAc,EACd,OAA4C;IAE5C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,QAAQ,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE;YACzD,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;gBACjB,MAAM,CAAC,GAAG,CAAC,CAAC;gBACZ,OAAO;YACT,CAAC;YACD,OAAO,CAAC,OAAO,CAAC,CAAC;QACnB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,uBAAuB,CAAC,SAAiB,EAAE,OAAe;IACvE,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAClC,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACvC,gEAAgE;IAChE,6DAA6D;IAC7D,kEAAkE;IAClE,MAAM,SAAS,GAAG,MAAM,iBAAiB,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE;QACpF,CAAC,EAAE,MAAM,CAAC,CAAC;QACX,CAAC,EAAE,MAAM,CAAC,CAAC;QACX,CAAC,EAAE,MAAM,CAAC,CAAC;KACZ,CAAC,CAAC;IACH,IAAI,SAAS,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1D,OAAO,eAAe,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,WAA+B;IAC3D,IAAI,CAAC,WAAW;QAAE,OAAO,SAAS,CAAC;IACnC,MAAM,CAAC,GAAG,mBAAmB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAChD,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AAChB,CAAC"}

package/dist/server/compaction-history.js

@@ -0,0 +1,106 @@
+function isCompactionEntry(e) {
+    return e.type === "compaction";
+}
+function isMessageEntry(e) {
+    return e.type === "message";
+}
+/**
+ * Walk `session.sessionManager.getEntries()` once and produce one
+ * CompactionEvent per CompactionEntry. The mapping back to a position
+ * in `session.messages` is the tricky part: the post-compaction
+ * messages array is rebuilt from the entries that come AT or AFTER
+ * the latest compaction's `firstKeptEntryId`, with the compaction
+ * summary itself synthesised in. We compute `insertBeforeIndex` by
+ * counting how many "kept" message entries appear in `messages`
+ * before the position where this compaction's first-kept entry lands.
+ */
+export function buildCompactionHistory(session) {
+    const entries = session.sessionManager.getEntries();
+    const compactions = [];
+    for (const e of entries)
+        if (isCompactionEntry(e))
+            compactions.push(e);
+    if (compactions.length === 0)
+        return [];
+    // Walk entries in order; for each compaction event, capture the
+    // message entries between the previous compaction (or session start)
+    // and this one. Those are the "archived" messages — the ones that
+    // were summarised and dropped.
+    const events = [];
+    let archiveBuffer = [];
+    for (const entry of entries) {
+        if (isMessageEntry(entry)) {
+            archiveBuffer.push(entry.message);
+            continue;
+        }
+        if (isCompactionEntry(entry)) {
+            events.push({
+                id: entry.id,
+                timestamp: entry.timestamp,
+                summary: entry.summary,
+                tokensBefore: entry.tokensBefore,
+                // Filled in below — depends on the index of `firstKeptEntryId`
+                // within the *kept* portion of the messages stream.
+                insertBeforeIndex: 0,
+                archivedMessages: archiveBuffer,
+            });
+            // Reset for the next archive window. Anything between this
+            // compaction and the next one (or end of session) belongs to
+            // the next event's archive — but only if there IS a next
+            // compaction. If not, those messages live in `session.messages`
+            // and don't need archiving.
+            archiveBuffer = [];
+        }
+    }
+    // Compute insertBeforeIndex for each event. Given a compaction whose
+    // firstKeptEntryId points at message-entry M, the number of message
+    // entries BEFORE M (within the post-this-compaction kept portion of
+    // the entries array) tells us where to splice the card.
+    //
+    // For the LAST compaction, the kept portion lines up with what
+    // session.messages actually contains, so we can count message
+    // entries from `firstKeptEntryId` forward up to the compaction's
+    // own position. Earlier compactions' kept portions were re-archived
+    // by later compactions — those events sit at the TOP of the
+    // (current) display, so insertBeforeIndex = 0 for all but the last.
+    // (Once a compaction's kept window has itself been archived, no
+    // post-compaction message in `session.messages` corresponds to it,
+    // so the only sensible position is "before everything else".)
+    for (let i = 0; i < events.length - 1; i++) {
+        const ev = events[i];
+        if (ev !== undefined)
+            ev.insertBeforeIndex = 0;
+    }
+    const last = events[events.length - 1];
+    if (last !== undefined) {
+        const lastCompaction = compactions[compactions.length - 1];
+        if (lastCompaction !== undefined) {
+            last.insertBeforeIndex = countMessagesBetween(entries, lastCompaction.firstKeptEntryId, lastCompaction.id);
+        }
+    }
+    return events;
+}
+/**
+ * Count message-typed entries between two entry ids (exclusive of the
+ * end id). Returns the position where the compaction card should
+ * splice into `session.messages`. When `firstKeptEntryId` doesn't
+ * resolve (legacy session, manual JSONL edit), returns 0 — the card
+ * lands at the top of the chat, which is the safe fallback.
+ */
+function countMessagesBetween(entries, firstKeptEntryId, endEntryId) {
+    const startIdx = entries.findIndex((e) => e.id === firstKeptEntryId);
+    if (startIdx === -1)
+        return 0;
+    let count = 0;
+    for (let i = startIdx; i < entries.length; i++) {
+        const e = entries[i];
+        if (e === undefined)
+            break;
+        if (e.id === endEntryId)
+            break;
+        if (isMessageEntry(e))
+            count++;
+    }
+    return count;
+}
+//# sourceMappingURL=compaction-history.js.map

package/dist/server/compaction-history.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compaction-history.js","sourceRoot":"","sources":["../src/compaction-history.ts"],"names":[],"mappings":"AA8DA,SAAS,iBAAiB,CAAC,CAAe;IACxC,OAAO,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC;AACjC,CAAC;AAED,SAAS,cAAc,CAAC,CAAe;IACrC,OAAO,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC;AAC9B,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAAqB;IAC1D,MAAM,OAAO,GAAG,OAAO,CAAC,cAAc,CAAC,UAAU,EAAE,CAAC;IACpD,MAAM,WAAW,GAA4C,EAAE,CAAC;IAChE,KAAK,MAAM,CAAC,IAAI,OAAO;QAAE,IAAI,iBAAiB,CAAC,CAAC,CAAC;YAAE,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACvE,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAExC,gEAAgE;IAChE,qEAAqE;IACrE,kEAAkE;IAClE,+BAA+B;IAC/B,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,IAAI,aAAa,GAAmB,EAAE,CAAC;IACvC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAClC,SAAS;QACX,CAAC;QACD,IAAI,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7B,MAAM,CAAC,IAAI,CAAC;gBACV,EAAE,EAAE,KAAK,CAAC,EAAE;gBACZ,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,+DAA+D;gBAC/D,oDAAoD;gBACpD,iBAAiB,EAAE,CAAC;gBACpB,gBAAgB,EAAE,aAAa;aAChC,CAAC,CAAC;YACH,2DAA2D;YAC3D,6DAA6D;YAC7D,yDAAyD;YACzD,gEAAgE;YAChE,4BAA4B;YAC5B,aAAa,GAAG,EAAE,CAAC;QACrB,CAAC;IACH,CAAC;IAED,qEAAqE;IACrE,oEAAoE;IACpE,oEAAoE;IACpE,wDAAwD;IACxD,EAAE;IACF,+DAA+D;IAC/D,8DAA8D;IAC9D,iEAAiE;IACjE,oEAAoE;IACpE,4DAA4D;IAC5D,oEAAoE;IACpE,gEAAgE;IAChE,mEAAmE;IACnE,8DAA8D;IAC9D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3C,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACrB,IAAI,EAAE,KAAK,SAAS;YAAE,EAAE,CAAC,iBAAiB,GAAG,CAAC,CAAC;IACjD,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACvC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,MAAM,cAAc,GAAG,WAAW,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC3D,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;YACjC,IAAI,CAAC,iBAAiB,GAAG,oBAAoB,CAC3C,OAAO,EACP,cAAc,CAAC,gBAAgB,EAC/B,cAAc,CAAC,EAAE,CAClB,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;GAMG;AACH,SAAS,oBAAoB,CAC3B,OAAuB,EACvB,gBAAwB,EACxB,UAAkB;IAElB,MAAM,QAAQ,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,gBAAgB,CAAC,CAAC;IACrE,IAAI,QAAQ,KAAK,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC;IAC9B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,IAAI,CAAC,GAAG,QAAQ,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC/C,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACrB,IAAI,CAAC,KAAK,SAAS;YAAE,MAAM;QAC3B,IAAI,CAAC,CAAC,EAAE,KAAK,UAAU;YAAE,MAAM;QAC/B,IAAI,cAAc,CAAC,CAAC,CAAC;YAAE,KAAK,EAAE,CAAC;IACjC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/server/concurrency.js

@@ -0,0 +1,49 @@
+/**
+ * Single-process concurrency helpers. The pi-forge is single-tenant and
+ * single-process by design, so these are intentionally in-memory only —
+ * cross-process coordination is out of scope.
+ */
+/**
+ * Build a serialised-lock primitive. Each call to the returned function
+ * waits for the previous to settle (success or failure) before running.
+ * Failures don't propagate to subsequent waiters; the caller owns its own
+ * error handling.
+ *
+ * Use when a read-modify-write sequence on a single shared resource must
+ * be serialised — e.g. config files mutated by multiple routes.
+ */
+export function makeLock() {
+    let chain = Promise.resolve();
+    return (fn) => {
+        const next = chain.then(fn, fn);
+        chain = next.catch(() => undefined);
+        return next;
+    };
+}
+/**
+ * Build an in-flight Promise dedupe primitive keyed by some lookup key.
+ * If a call for `key` is already in flight, subsequent callers receive the
+ * SAME promise instead of starting a duplicate operation. The entry is
+ * removed when the in-flight promise settles.
+ *
+ * Use when two routes can independently lazy-load the same resource and
+ * both ending up with their own copy is harmful — e.g. resumeSession
+ * creating two AgentSession instances backing the same JSONL file.
+ */
+export function makeDedupe() {
+    const inflight = new Map();
+    return (key, fn) => {
+        const existing = inflight.get(key);
+        if (existing !== undefined)
+            return existing;
+        const promise = fn().finally(() => {
+            // Only remove if WE are still the entry — defensive against
+            // re-entrant code paths that might somehow overwrite it.
+            if (inflight.get(key) === promise)
+                inflight.delete(key);
+        });
+        inflight.set(key, promise);
+        return promise;
+    };
+}
+//# sourceMappingURL=concurrency.js.map

package/dist/server/concurrency.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"concurrency.js","sourceRoot":"","sources":["../src/concurrency.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;;;;;;;GAQG;AACH,MAAM,UAAU,QAAQ;IACtB,IAAI,KAAK,GAAqB,OAAO,CAAC,OAAO,EAAE,CAAC;IAChD,OAAO,CAAI,EAAoB,EAAc,EAAE;QAC7C,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QAChC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACpC,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,UAAU;IACxB,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAiB,CAAC;IAC1C,OAAO,CAAC,GAAM,EAAE,EAAoB,EAAc,EAAE;QAClD,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,QAAQ,CAAC;QAC5C,MAAM,OAAO,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;YAChC,4DAA4D;YAC5D,yDAAyD;YACzD,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,OAAO;gBAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC1D,CAAC,CAAC,CAAC;QACH,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC3B,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC;AACJ,CAAC"}