pi-kot 0.1.0

package/dist/server/routes/auth.js

@@ -0,0 +1,126 @@
+import { randomBytes, timingSafeEqual, createHash } from "node:crypto";
+import { config } from "../config.js";
+/**
+ * Minimal JWT-like token for auth. Uses HMAC-SHA256 with a server-generated
+ * secret (rotated on restart since sessions are ephemeral).
+ *
+ * Simplified from pi-forge's auth.ts — Phase 1a uses a basic API key or
+ * JWT pattern. In production, pi-forge uses proper jsonwebtoken + scrypt.
+ */
+const TOKEN_SECRET = randomBytes(32).toString("hex");
+function signHmac(payload) {
+    const hmac = createHash("sha256")
+        .update(payload + TOKEN_SECRET)
+        .digest("hex");
+    return `${Buffer.from(payload).toString("base64url")}.${hmac}`;
+}
+export function verifyHmac(token) {
+    const dot = token.lastIndexOf(".");
+    if (dot === -1)
+        return undefined;
+    const payloadB64 = token.slice(0, dot);
+    const sig = token.slice(dot + 1);
+    const payload = Buffer.from(payloadB64, "base64url").toString("utf8");
+    const expected = createHash("sha256")
+        .update(payload + TOKEN_SECRET)
+        .digest("hex");
+    if (sig.length !== expected.length)
+        return undefined;
+    try {
+        if (!timingSafeEqual(Buffer.from(sig), Buffer.from(expected)))
+            return undefined;
+    }
+    catch {
+        return undefined;
+    }
+    return payload;
+}
+export function extractBearer(header) {
+    if (header === undefined)
+        return undefined;
+    const match = header.match(/^Bearer\s+(.+)$/i);
+    return match?.[1];
+}
+export function authEnabled() {
+    return config.uiPassword !== undefined || config.apiKey !== undefined;
+}
+export const healthRoutes = async (fastify) => {
+    // GET /api/v1/health — public, no auth
+    fastify.get("/health", {
+        config: { public: true },
+        schema: {
+            description: "Health check — no auth required.",
+            tags: ["health"],
+            security: [],
+            response: {
+                200: {
+                    type: "object",
+                    required: ["status"],
+                    properties: {
+                        status: { type: "string", enum: ["ok"] },
+                        activeSessions: { type: "integer", minimum: 0 },
+                    },
+                },
+            },
+        },
+    }, async () => {
+        const { sessionCount } = await import("../session-registry.js");
+        return { status: "ok", activeSessions: sessionCount() };
+    });
+};
+export const authRoutes = async (fastify) => {
+    // GET /api/v1/auth/status — public
+    fastify.get("/auth/status", {
+        config: { public: true },
+        schema: {
+            description: "Whether auth is enabled.",
+            tags: ["auth"],
+            security: [],
+            response: {
+                200: {
+                    type: "object",
+                    required: ["authEnabled"],
+                    properties: { authEnabled: { type: "boolean" } },
+                },
+            },
+        },
+    }, async () => ({ authEnabled: authEnabled() }));
+    // POST /api/v1/auth/login — public (rate-limited)
+    fastify.post("/auth/login", {
+        config: { public: true },
+        schema: {
+            description: "Login with password → JWT token.",
+            tags: ["auth"],
+            security: [],
+            body: {
+                type: "object",
+                required: ["password"],
+                properties: { password: { type: "string" } },
+            },
+            response: {
+                200: {
+                    type: "object",
+                    required: ["token"],
+                    properties: { token: { type: "string" } },
+                },
+                401: {
+                    type: "object",
+                    properties: { error: { type: "string" } },
+                },
+            },
+        },
+    }, async (req, reply) => {
+        if (!authEnabled()) {
+            return reply.code(401).send({ error: "auth_not_configured" });
+        }
+        const { password } = req.body;
+        const valid = (config.uiPassword !== undefined && password === config.uiPassword) ||
+            (config.apiKey !== undefined && password === config.apiKey);
+        if (!valid) {
+            return reply.code(401).send({ error: "invalid_credentials" });
+        }
+        const token = signHmac(`user:${Date.now()}`);
+        return { token };
+    });
+};
+//# sourceMappingURL=auth.js.map

package/dist/server/routes/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/routes/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEvE,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAEtC;;;;;;GAMG;AACH,MAAM,YAAY,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAErD,SAAS,QAAQ,CAAC,OAAe;IAC/B,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC;SAC9B,MAAM,CAAC,OAAO,GAAG,YAAY,CAAC;SAC9B,MAAM,CAAC,KAAK,CAAC,CAAC;IACjB,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,IAAI,EAAE,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAa;IACtC,MAAM,GAAG,GAAG,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,GAAG,KAAK,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACjC,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACvC,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;IACjC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACtE,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;SAClC,MAAM,CAAC,OAAO,GAAG,YAAY,CAAC;SAC9B,MAAM,CAAC,KAAK,CAAC,CAAC;IACjB,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IACrD,IAAI,CAAC;QACH,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAAE,OAAO,SAAS,CAAC;IAClF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,MAA0B;IACtD,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC3C,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;IAC/C,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,WAAW;IACzB,OAAO,MAAM,CAAC,UAAU,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC;AACxE,CAAC;AAED,MAAM,CAAC,MAAM,YAAY,GAAuB,KAAK,EAAE,OAAO,EAAE,EAAE;IAChE,uCAAuC;IACvC,OAAO,CAAC,GAAG,CACT,SAAS,EACT;QACE,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;QACxB,MAAM,EAAE;YACN,WAAW,EAAE,kCAAkC;YAC/C,IAAI,EAAE,CAAC,QAAQ,CAAC;YAChB,QAAQ,EAAE,EAAE;YACZ,QAAQ,EAAE;gBACR,GAAG,EAAE;oBACH,IAAI,EAAE,QAAQ;oBACd,QAAQ,EAAE,CAAC,QAAQ,CAAC;oBACpB,UAAU,EAAE;wBACV,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE;wBACxC,cAAc,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE;qBAChD;iBACF;aACF;SACF;KACF,EACD,KAAK,IAAI,EAAE;QACT,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;QAChE,OAAO,EAAE,MAAM,EAAE,IAAa,EAAE,cAAc,EAAE,YAAY,EAAE,EAAE,CAAC;IACnE,CAAC,CACF,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,UAAU,GAAuB,KAAK,EAAE,OAAO,EAAE,EAAE;IAC9D,mCAAmC;IACnC,OAAO,CAAC,GAAG,CACT,cAAc,EACd;QACE,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;QACxB,MAAM,EAAE;YACN,WAAW,EAAE,0BAA0B;YACvC,IAAI,EAAE,CAAC,MAAM,CAAC;YACd,QAAQ,EAAE,EAAE;YACZ,QAAQ,EAAE;gBACR,GAAG,EAAE;oBACH,IAAI,EAAE,QAAQ;oBACd,QAAQ,EAAE,CAAC,aAAa,CAAC;oBACzB,UAAU,EAAE,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE;iBACjD;aACF;SACF;KACF,EACD,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,WAAW,EAAE,EAAE,CAAC,CAC7C,CAAC;IAEF,kDAAkD;IAClD,OAAO,CAAC,IAAI,CACV,aAAa,EACb;QACE,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;QACxB,MAAM,EAAE;YACN,WAAW,EAAE,kCAAkC;YAC/C,IAAI,EAAE,CAAC,MAAM,CAAC;YACd,QAAQ,EAAE,EAAE;YACZ,IAAI,EAAE;gBACJ,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,CAAC,UAAU,CAAC;gBACtB,UAAU,EAAE,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;aAC7C;YACD,QAAQ,EAAE;gBACR,GAAG,EAAE;oBACH,IAAI,EAAE,QAAQ;oBACd,QAAQ,EAAE,CAAC,OAAO,CAAC;oBACnB,UAAU,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;iBAC1C;gBACD,GAAG,EAAE;oBACH,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;iBAC1C;aACF;SACF;KACF,EACD,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YACnB,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC;QAChE,CAAC;QACD,MAAM,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC,IAA4B,CAAC;QACtD,MAAM,KAAK,GACT,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,IAAI,QAAQ,KAAK,MAAM,CAAC,UAAU,CAAC;YACnE,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,QAAQ,KAAK,MAAM,CAAC,MAAM,CAAC,CAAC;QAC9D,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC;QAChE,CAAC;QACD,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAC7C,OAAO,EAAE,KAAK,EAAE,CAAC;IACnB,CAAC,CACF,CAAC;AACJ,CAAC,CAAC"}

package/dist/server/routes/config.d.ts

@@ -0,0 +1,3 @@
+import { type FastifyPluginAsync } from "fastify";
+export declare const configRoutes: FastifyPluginAsync;
+//# sourceMappingURL=config.d.ts.map

package/dist/server/routes/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/routes/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAyDlD,eAAO,MAAM,YAAY,EAAE,kBAqM1B,CAAC"}

package/dist/server/routes/config.js

@@ -0,0 +1,203 @@
+import { liveProvidersListing, readAuthSummary, writeApiKey, removeApiKey, readSettings, updateSettings, readModelsJsonRedacted, writeModelsJson, AuthProviderNotFoundError, } from "../config-manager.js";
+// ── Schema ────────────────────────────────────────────────────────────────
+const errorSchema = {
+    type: "object",
+    required: ["error"],
+    properties: { error: { type: "string" } },
+};
+const authSummarySchema = {
+    type: "object",
+    required: ["providers"],
+    properties: {
+        providers: {
+            type: "object",
+            additionalProperties: {
+                type: "object",
+                required: ["configured"],
+                properties: {
+                    configured: { type: "boolean" },
+                    source: { type: "string" },
+                    label: { type: "string" },
+                },
+            },
+        },
+    },
+};
+const settingsSchema = {
+    type: "object",
+    additionalProperties: true,
+};
+const modelsJsonSchema = {
+    type: "object",
+    required: ["providers"],
+    additionalProperties: true,
+    properties: {
+        providers: { type: "object", additionalProperties: true },
+    },
+};
+// ── Routes ────────────────────────────────────────────────────────────────
+export const configRoutes = async (fastify) => {
+    // ── Providers (live listing) ──────────────────────────────────────────
+    fastify.get("/config/providers", {
+        schema: {
+            description: "Live provider + model listing assembled from the SDK's ModelRegistry.",
+            tags: ["config"],
+            response: { 200: { type: "object", required: ["providers"], properties: { providers: { type: "array" } } }, 500: errorSchema },
+        },
+    }, async (_req, reply) => {
+        try {
+            return liveProvidersListing();
+        }
+        catch (err) {
+            fastify.log.error(err);
+            return reply.code(500).send({ error: "internal_error" });
+        }
+    });
+    // ── Auth presence ─────────────────────────────────────────────────────
+    fastify.get("/config/auth", {
+        schema: {
+            description: "Provider credential presence map. Never includes actual key values.",
+            tags: ["config"],
+            response: { 200: authSummarySchema, 500: errorSchema },
+        },
+    }, async (_req, reply) => {
+        try {
+            return readAuthSummary();
+        }
+        catch (err) {
+            fastify.log.error(err);
+            return reply.code(500).send({ error: "internal_error" });
+        }
+    });
+    // ── Set API key ───────────────────────────────────────────────────────
+    fastify.put("/config/auth/:provider", {
+        schema: {
+            description: "Store an API key for a provider.",
+            tags: ["config"],
+            params: {
+                type: "object",
+                required: ["provider"],
+                properties: { provider: { type: "string", minLength: 1 } },
+            },
+            body: {
+                type: "object",
+                required: ["apiKey"],
+                additionalProperties: false,
+                properties: { apiKey: { type: "string", minLength: 1 } },
+            },
+            response: {
+                200: {
+                    type: "object",
+                    required: ["provider", "configured"],
+                    properties: {
+                        provider: { type: "string" },
+                        configured: { type: "boolean", const: true },
+                    },
+                },
+                500: errorSchema,
+            },
+        },
+    }, async (req, reply) => {
+        try {
+            writeApiKey(req.params.provider, req.body.apiKey);
+            return { provider: req.params.provider, configured: true };
+        }
+        catch (err) {
+            fastify.log.error(err);
+            return reply.code(500).send({ error: "internal_error" });
+        }
+    });
+    // ── Remove API key ────────────────────────────────────────────────────
+    fastify.delete("/config/auth/:provider", {
+        schema: {
+            description: "Remove credentials for a provider.",
+            tags: ["config"],
+            params: {
+                type: "object",
+                required: ["provider"],
+                properties: { provider: { type: "string", minLength: 1 } },
+            },
+            response: { 204: { type: "null" }, 404: errorSchema, 500: errorSchema },
+        },
+    }, async (req, reply) => {
+        try {
+            removeApiKey(req.params.provider);
+            return reply.code(204).send();
+        }
+        catch (err) {
+            if (err instanceof AuthProviderNotFoundError) {
+                return reply.code(404).send({ error: "auth_provider_not_found" });
+            }
+            fastify.log.error(err);
+            return reply.code(500).send({ error: "internal_error" });
+        }
+    });
+    // ── Read settings ─────────────────────────────────────────────────────
+    fastify.get("/config/settings", {
+        schema: {
+            description: "Read settings.json (default provider/model, modes, etc).",
+            tags: ["config"],
+            response: { 200: settingsSchema, 500: errorSchema },
+        },
+    }, async (_req, reply) => {
+        try {
+            return readSettings();
+        }
+        catch (err) {
+            fastify.log.error(err);
+            return reply.code(500).send({ error: "internal_error" });
+        }
+    });
+    // ── Update settings ───────────────────────────────────────────────────
+    fastify.put("/config/settings", {
+        schema: {
+            description: "Partial-merge update for settings.json. Sending null for any key deletes it.",
+            tags: ["config"],
+            body: settingsSchema,
+            response: { 200: settingsSchema, 500: errorSchema },
+        },
+    }, async (req, reply) => {
+        try {
+            return updateSettings(req.body);
+        }
+        catch (err) {
+            fastify.log.error(err);
+            return reply.code(500).send({ error: "internal_error" });
+        }
+    });
+    // ── Read models.json (redacted) ───────────────────────────────────────
+    fastify.get("/config/models", {
+        schema: {
+            description: "Read models.json with API keys redacted.",
+            tags: ["config"],
+            response: { 200: modelsJsonSchema, 500: errorSchema },
+        },
+    }, async (_req, reply) => {
+        try {
+            return await readModelsJsonRedacted();
+        }
+        catch (err) {
+            fastify.log.error(err);
+            return reply.code(500).send({ error: "internal_error" });
+        }
+    });
+    // ── Write models.json ─────────────────────────────────────────────────
+    fastify.put("/config/models", {
+        schema: {
+            description: "Replace models.json atomically.",
+            tags: ["config"],
+            body: modelsJsonSchema,
+            response: { 200: modelsJsonSchema, 500: errorSchema },
+        },
+    }, async (req, reply) => {
+        try {
+            await writeModelsJson(req.body);
+            return req.body;
+        }
+        catch (err) {
+            fastify.log.error(err);
+            return reply.code(500).send({ error: "internal_error" });
+        }
+    });
+};
+//# sourceMappingURL=config.js.map

package/dist/server/routes/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/routes/config.ts"],"names":[],"mappings":"AACA,OAAO,EACL,oBAAoB,EACpB,eAAe,EACf,WAAW,EACX,YAAY,EACZ,YAAY,EACZ,cAAc,EACd,sBAAsB,EACtB,eAAe,EACf,yBAAyB,GAE1B,MAAM,sBAAsB,CAAC;AAE9B,6EAA6E;AAE7E,MAAM,WAAW,GAAG;IAClB,IAAI,EAAE,QAAQ;IACd,QAAQ,EAAE,CAAC,OAAO,CAAC;IACnB,UAAU,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;CACjC,CAAC;AAEX,MAAM,iBAAiB,GAAG;IACxB,IAAI,EAAE,QAAQ;IACd,QAAQ,EAAE,CAAC,WAAW,CAAC;IACvB,UAAU,EAAE;QACV,SAAS,EAAE;YACT,IAAI,EAAE,QAAQ;YACd,oBAAoB,EAAE;gBACpB,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,CAAC,YAAY,CAAC;gBACxB,UAAU,EAAE;oBACV,UAAU,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;oBAC/B,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBAC1B,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;iBAC1B;aACF;SACF;KACF;CACO,CAAC;AAEX,MAAM,cAAc,GAAG;IACrB,IAAI,EAAE,QAAQ;IACd,oBAAoB,EAAE,IAAI;CAClB,CAAC;AAEX,MAAM,gBAAgB,GAAG;IACvB,IAAI,EAAE,QAAQ;IACd,QAAQ,EAAE,CAAC,WAAW,CAAC;IACvB,oBAAoB,EAAE,IAAI;IAC1B,UAAU,EAAE;QACV,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,oBAAoB,EAAE,IAAI,EAAE;KAC1D;CACO,CAAC;AAEX,6EAA6E;AAE7E,MAAM,CAAC,MAAM,YAAY,GAAuB,KAAK,EAAE,OAAO,EAAE,EAAE;IAChE,yEAAyE;IACzE,OAAO,CAAC,GAAG,CACT,mBAAmB,EACnB;QACE,MAAM,EAAE;YACN,WAAW,EACT,uEAAuE;YACzE,IAAI,EAAE,CAAC,QAAQ,CAAC;YAChB,QAAQ,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,WAAW,CAAC,EAAE,UAAU,EAAE,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE;SAC/H;KACF,EACD,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;QACpB,IAAI,CAAC;YACH,OAAO,oBAAoB,EAAE,CAAC;QAChC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACvB,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC,CACF,CAAC;IAEF,yEAAyE;IACzE,OAAO,CAAC,GAAG,CACT,cAAc,EACd;QACE,MAAM,EAAE;YACN,WAAW,EAAE,qEAAqE;YAClF,IAAI,EAAE,CAAC,QAAQ,CAAC;YAChB,QAAQ,EAAE,EAAE,GAAG,EAAE,iBAAiB,EAAE,GAAG,EAAE,WAAW,EAAE;SACvD;KACF,EACD,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;QACpB,IAAI,CAAC;YACH,OAAO,eAAe,EAAE,CAAC;QAC3B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACvB,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC,CACF,CAAC;IAEF,yEAAyE;IACzE,OAAO,CAAC,GAAG,CACT,wBAAwB,EACxB;QACE,MAAM,EAAE;YACN,WAAW,EAAE,kCAAkC;YAC/C,IAAI,EAAE,CAAC,QAAQ,CAAC;YAChB,MAAM,EAAE;gBACN,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,CAAC,UAAU,CAAC;gBACtB,UAAU,EAAE,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE;aAC3D;YACD,IAAI,EAAE;gBACJ,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,CAAC,QAAQ,CAAC;gBACpB,oBAAoB,EAAE,KAAK;gBAC3B,UAAU,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE;aACzD;YACD,QAAQ,EAAE;gBACR,GAAG,EAAE;oBACH,IAAI,EAAE,QAAQ;oBACd,QAAQ,EAAE,CAAC,UAAU,EAAE,YAAY,CAAC;oBACpC,UAAU,EAAE;wBACV,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;wBAC5B,UAAU,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE;qBAC7C;iBACF;gBACD,GAAG,EAAE,WAAW;aACjB;SACF;KACF,EACD,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,IAAI,CAAC;YACH,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAClD,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;QAC7D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACvB,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC,CACF,CAAC;IAEF,yEAAyE;IACzE,OAAO,CAAC,MAAM,CACZ,wBAAwB,EACxB;QACE,MAAM,EAAE;YACN,WAAW,EAAE,oCAAoC;YACjD,IAAI,EAAE,CAAC,QAAQ,CAAC;YAChB,MAAM,EAAE;gBACN,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,CAAC,UAAU,CAAC;gBACtB,UAAU,EAAE,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE;aAC3D;YACD,QAAQ,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,WAAW,EAAE;SACxE;KACF,EACD,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,IAAI,CAAC;YACH,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAClC,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QAChC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,yBAAyB,EAAE,CAAC;gBAC7C,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC;YACpE,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACvB,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC,CACF,CAAC;IAEF,yEAAyE;IACzE,OAAO,CAAC,GAAG,CACT,kBAAkB,EAClB;QACE,MAAM,EAAE;YACN,WAAW,EAAE,0DAA0D;YACvE,IAAI,EAAE,CAAC,QAAQ,CAAC;YAChB,QAAQ,EAAE,EAAE,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE,WAAW,EAAE;SACpD;KACF,EACD,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;QACpB,IAAI,CAAC;YACH,OAAO,YAAY,EAAE,CAAC;QACxB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACvB,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC,CACF,CAAC;IAEF,yEAAyE;IACzE,OAAO,CAAC,GAAG,CACT,kBAAkB,EAClB;QACE,MAAM,EAAE;YACN,WAAW,EACT,8EAA8E;YAChF,IAAI,EAAE,CAAC,QAAQ,CAAC;YAChB,IAAI,EAAE,cAAc;YACpB,QAAQ,EAAE,EAAE,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE,WAAW,EAAE;SACpD;KACF,EACD,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,IAAI,CAAC;YACH,OAAO,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACvB,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC,CACF,CAAC;IAEF,yEAAyE;IACzE,OAAO,CAAC,GAAG,CACT,gBAAgB,EAChB;QACE,MAAM,EAAE;YACN,WAAW,EACT,0CAA0C;YAC5C,IAAI,EAAE,CAAC,QAAQ,CAAC;YAChB,QAAQ,EAAE,EAAE,GAAG,EAAE,gBAAgB,EAAE,GAAG,EAAE,WAAW,EAAE;SACtD;KACF,EACD,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;QACpB,IAAI,CAAC;YACH,OAAO,MAAM,sBAAsB,EAAE,CAAC;QACxC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACvB,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC,CACF,CAAC;IAEF,yEAAyE;IACzE,OAAO,CAAC,GAAG,CACT,gBAAgB,EAChB;QACE,MAAM,EAAE;YACN,WAAW,EAAE,iCAAiC;YAC9C,IAAI,EAAE,CAAC,QAAQ,CAAC;YAChB,IAAI,EAAE,gBAAgB;YACtB,QAAQ,EAAE,EAAE,GAAG,EAAE,gBAAgB,EAAE,GAAG,EAAE,WAAW,EAAE;SACtD;KACF,EACD,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,IAAI,CAAC;YACH,MAAM,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAChC,OAAO,GAAG,CAAC,IAAI,CAAC;QAClB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACvB,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC,CAAC"}

package/dist/server/routes/control.d.ts

@@ -0,0 +1,3 @@
+import { type FastifyPluginAsync } from "fastify";
+export declare const controlRoutes: FastifyPluginAsync;
+//# sourceMappingURL=control.d.ts.map

package/dist/server/routes/control.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"control.d.ts","sourceRoot":"","sources":["../../src/routes/control.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAqBlD,eAAO,MAAM,aAAa,EAAE,kBA2M3B,CAAC"}

package/dist/server/routes/control.js

@@ -0,0 +1,180 @@
+import { join } from "node:path";
+import { AuthStorage, ModelRegistry, } from "@earendil-works/pi-coding-agent";
+import { getSession } from "../session-registry.js";
+import { config } from "../config.js";
+import { readSettings, writeSettings } from "../config-manager.js";
+/**
+ * Auth storage backed by ~/.pi/agent/auth.json.
+ * ⚠️ AuthStorage.create() expects a FILE path, not a directory.
+ *    Passing a directory causes the ReadFileSync to fail silently,
+ *    leaving authStorage.data empty and hasAuth() always returning false.
+ *    This was the root cause of the "No API key configured" error.
+ *    Pattern from pi-forge's config-manager.ts: AUTH_FILE path.
+ */
+function authStorage() {
+    return AuthStorage.create(join(config.piConfigDir, "auth.json"));
+}
+export const controlRoutes = async (fastify) => {
+    // POST /sessions/:id/model — set per-session model override
+    fastify.post("/sessions/:id/model", {
+        schema: {
+            description: "Set the model for a session. Provider + modelId are validated " +
+                "against the SDK's ModelRegistry. Returns an error if the provider " +
+                "or model is unknown, or if no API key is configured for the provider.",
+            tags: ["sessions"],
+            params: {
+                type: "object",
+                required: ["id"],
+                properties: { id: { type: "string" } },
+            },
+            body: {
+                type: "object",
+                required: ["provider", "modelId"],
+                properties: {
+                    provider: { type: "string" },
+                    modelId: { type: "string" },
+                },
+            },
+            response: {
+                200: {
+                    type: "object",
+                    required: ["provider", "modelId"],
+                    properties: {
+                        provider: { type: "string" },
+                        modelId: { type: "string" },
+                    },
+                },
+                400: {
+                    type: "object",
+                    required: ["error"],
+                    properties: {
+                        error: { type: "string" },
+                        message: { type: "string" },
+                    },
+                },
+                404: {
+                    type: "object",
+                    properties: { error: { type: "string" } },
+                },
+            },
+        },
+    }, async (req, reply) => {
+        const live = getSession(req.params.id);
+        if (live === undefined) {
+            return reply.code(404).send({ error: "session_not_found" });
+        }
+        const { provider, modelId } = req.body;
+        // Build fresh ModelRegistry (reads latest auth.json + models.json)
+        const store = authStorage();
+        const modelsFile = `${config.piConfigDir}/models.json`;
+        const registry = ModelRegistry.create(store, modelsFile);
+        // Check provider exists
+        const providerKnown = registry.getAll().some((m) => m.provider === provider);
+        if (!providerKnown) {
+            return reply.code(400).send({
+                error: "unknown_provider",
+                message: `Provider "${provider}" not found. Check available providers via GET /config/providers.`,
+            });
+        }
+        // Check model exists under that provider
+        const model = registry.find(provider, modelId);
+        if (model === undefined) {
+            return reply.code(400).send({
+                error: "unknown_model",
+                message: `Model "${modelId}" not found under provider "${provider}".`,
+            });
+        }
+        // Check auth is configured for this model
+        const hasAuth = registry.hasConfiguredAuth(model);
+        if (!hasAuth) {
+            return reply.code(400).send({
+                error: "auth_not_configured",
+                message: `No API key configured for provider "${provider}". Add one via PUT /api/v1/config/auth/${provider}.`,
+            });
+        }
+        const result = await (async () => {
+            let priorSettings;
+            try {
+                priorSettings = readSettings();
+            }
+            catch {
+                // settings.json missing / unreadable — skip restore
+            }
+            try {
+                // Refresh the session's internal ModelRegistry so it picks up
+                // any API keys added after session creation.
+                live.session.modelRegistry.authStorage.reload();
+                live.session.modelRegistry.refresh();
+                // Pass the full model object from the registry, not a {provider, id} stub.
+                // ⚠️ The SDK's setModel() stores the model object in agent.state.model, and
+                //    the agent later reads fields like `api`, `baseUrl`, `contextWindow`,
+                //    `maxTokens` from it to route LLM requests. Passing a stub with only
+                //    `provider` + `id` leaves those fields as undefined, which silently
+                //    breaks every subsequent prompt — the session appears "dead."
+                //    Pattern from pi-forge: pass the full model from registry.find().
+                await live.session.setModel(model);
+            }
+            catch (err) {
+                return {
+                    ok: false,
+                    status: 400,
+                    body: {
+                        error: "set_model_failed",
+                        message: err instanceof Error ? err.message : String(err),
+                    },
+                };
+            }
+            // Restore prior settings to undo setModel's side effect
+            if (priorSettings !== undefined) {
+                try {
+                    await writeSettings(priorSettings);
+                }
+                catch (err) {
+                    req.log.warn({ err }, "failed to restore settings after per-session setModel");
+                }
+            }
+            return { ok: true };
+        })();
+        if (!result.ok) {
+            return reply.code(result.status).send(result.body);
+        }
+        return { provider, modelId };
+    });
+    // GET /sessions/:id/model — get current model info
+    fastify.get("/sessions/:id/model", {
+        schema: {
+            description: "Get the currently configured model for a session.",
+            tags: ["sessions"],
+            params: {
+                type: "object",
+                required: ["id"],
+                properties: { id: { type: "string" } },
+            },
+            response: {
+                200: {
+                    type: "object",
+                    required: ["provider", "modelId"],
+                    properties: {
+                        provider: { type: "string" },
+                        modelId: { type: "string" },
+                    },
+                },
+                404: {
+                    type: "object",
+                    properties: { error: { type: "string" } },
+                },
+            },
+        },
+    }, async (req, reply) => {
+        const live = getSession(req.params.id);
+        if (live === undefined) {
+            return reply.code(404).send({ error: "session_not_found" });
+        }
+        const model = live.session.model;
+        if (model === undefined) {
+            return reply.code(200).send({ provider: "", modelId: "" });
+        }
+        return { provider: model.provider, modelId: model.id };
+    });
+};
+//# sourceMappingURL=control.js.map

package/dist/server/routes/control.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"control.js","sourceRoot":"","sources":["../../src/routes/control.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EACL,WAAW,EACX,aAAa,GACd,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAEnE;;;;;;;GAOG;AACH,SAAS,WAAW;IAClB,OAAO,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,CAAC,MAAM,aAAa,GAAuB,KAAK,EAAE,OAAO,EAAE,EAAE;IACjE,4DAA4D;IAC5D,OAAO,CAAC,IAAI,CAIV,qBAAqB,EACrB;QACE,MAAM,EAAE;YACN,WAAW,EACT,gEAAgE;gBAChE,oEAAoE;gBACpE,uEAAuE;YACzE,IAAI,EAAE,CAAC,UAAU,CAAC;YAClB,MAAM,EAAE;gBACN,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,CAAC,IAAI,CAAC;gBAChB,UAAU,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;aACvC;YACD,IAAI,EAAE;gBACJ,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,CAAC,UAAU,EAAE,SAAS,CAAC;gBACjC,UAAU,EAAE;oBACV,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBAC5B,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;iBAC5B;aACF;YACD,QAAQ,EAAE;gBACR,GAAG,EAAE;oBACH,IAAI,EAAE,QAAQ;oBACd,QAAQ,EAAE,CAAC,UAAU,EAAE,SAAS,CAAC;oBACjC,UAAU,EAAE;wBACV,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;wBAC5B,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;qBAC5B;iBACF;gBACD,GAAG,EAAE;oBACH,IAAI,EAAE,QAAQ;oBACd,QAAQ,EAAE,CAAC,OAAO,CAAC;oBACnB,UAAU,EAAE;wBACV,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;wBACzB,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;qBAC5B;iBACF;gBACD,GAAG,EAAE;oBACH,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;iBAC1C;aACF;SACF;KACF,EACD,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACvC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;QAC9D,CAAC;QAED,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;QAEvC,mEAAmE;QACnE,MAAM,KAAK,GAAG,WAAW,EAAE,CAAC;QAC5B,MAAM,UAAU,GAAG,GAAG,MAAM,CAAC,WAAW,cAAc,CAAC;QACvD,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;QAEzD,wBAAwB;QACxB,MAAM,aAAa,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;QAC7E,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBAC1B,KAAK,EAAE,kBAAkB;gBACzB,OAAO,EAAE,aAAa,QAAQ,mEAAmE;aAClG,CAAC,CAAC;QACL,CAAC;QAED,yCAAyC;QACzC,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC/C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBAC1B,KAAK,EAAE,eAAe;gBACtB,OAAO,EAAE,UAAU,OAAO,+BAA+B,QAAQ,IAAI;aACtE,CAAC,CAAC;QACL,CAAC;QAED,0CAA0C;QAC1C,MAAM,OAAO,GAAG,QAAQ,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAClD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBAC1B,KAAK,EAAE,qBAAqB;gBAC5B,OAAO,EAAE,uCAAuC,QAAQ,0CAA0C,QAAQ,GAAG;aAC9G,CAAC,CAAC;QACL,CAAC;QAmBD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,IAA6B,EAAE;YACxD,IAAI,aAAkD,CAAC;YACvD,IAAI,CAAC;gBACH,aAAa,GAAG,YAAY,EAAE,CAAC;YACjC,CAAC;YAAC,MAAM,CAAC;gBACP,oDAAoD;YACtD,CAAC;YAED,IAAI,CAAC;gBACH,8DAA8D;gBAC9D,6CAA6C;gBAC7C,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC;gBAChD,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;gBAErC,2EAA2E;gBAC3E,4EAA4E;gBAC5E,0EAA0E;gBAC1E,yEAAyE;gBACzE,wEAAwE;gBACxE,kEAAkE;gBAClE,sEAAsE;gBACtE,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAoD,CAAC,CAAC;YACpF,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,MAAM,EAAE,GAAG;oBACX,IAAI,EAAE;wBACJ,KAAK,EAAE,kBAAkB;wBACzB,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;qBAC1D;iBACF,CAAC;YACJ,CAAC;YAED,wDAAwD;YACxD,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;gBAChC,IAAI,CAAC;oBACH,MAAM,aAAa,CAAC,aAAa,CAAC,CAAC;gBACrC,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,uDAAuD,CAAC,CAAC;gBACjF,CAAC;YACH,CAAC;YAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACtB,CAAC,CAAC,EAAE,CAAC;QAEL,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACrD,CAAC;QAED,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;IAC/B,CAAC,CACF,CAAC;IAEF,mDAAmD;IACnD,OAAO,CAAC,GAAG,CAGT,qBAAqB,EACrB;QACE,MAAM,EAAE;YACN,WAAW,EAAE,mDAAmD;YAChE,IAAI,EAAE,CAAC,UAAU,CAAC;YAClB,MAAM,EAAE;gBACN,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,CAAC,IAAI,CAAC;gBAChB,UAAU,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;aACvC;YACD,QAAQ,EAAE;gBACR,GAAG,EAAE;oBACH,IAAI,EAAE,QAAQ;oBACd,QAAQ,EAAE,CAAC,UAAU,EAAE,SAAS,CAAC;oBACjC,UAAU,EAAE;wBACV,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;wBAC5B,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;qBAC5B;iBACF;gBACD,GAAG,EAAE;oBACH,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;iBAC1C;aACF;SACF;KACF,EACD,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACvC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;QAC9D,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;QACjC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;QAC7D,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;IACzD,CAAC,CACF,CAAC;AACJ,CAAC,CAAC"}

package/dist/server/routes/extension-commands.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Extension Command Routes — invoke registered extension commands
+ * (`/rewind`, etc.) through the extension runner's command system, with
+ * `ctx.ui` bridged to the browser GUI via SSE events + REST callbacks.
+ *
+ * This is the generic mechanism: any extension that registers a command
+ * with `pi.registerCommand()` automatically becomes available through
+ * the web GUI without pi-kot-specific integration code.
+ *
+ * Flow:
+ *   1. GUI sends `POST /sessions/:id/command { command: "rewind" }`
+ *   2. Server looks up the command in the extension runner
+ *   3. Server installs a bridge `ExtensionUIContext` that sends
+ *      `extension_ui_select` / `extension_ui_confirm` / etc. over SSE
+ *   4. Extension calls `ctx.ui.select()` → bridge creates a pending
+ *      promise, sends SSE event → GUI renders selector → user responds
+ *      via `POST /extension-ui/respond` → promise resolves
+ *   5. Extension completes → `extension_ui_done` SSE event sent
+ */
+import type { FastifyPluginAsync } from "fastify";
+export declare const extensionCommandRoutes: FastifyPluginAsync;
+//# sourceMappingURL=extension-commands.d.ts.map

package/dist/server/routes/extension-commands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"extension-commands.d.ts","sourceRoot":"","sources":["../../src/routes/extension-commands.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AASlD,eAAO,MAAM,sBAAsB,EAAE,kBA8KpC,CAAC"}