skillscript-runtime 0.2.4

package/dist/connectors/types.d.ts

@@ -0,0 +1,188 @@
+/** The five connector kinds. */
+export type ConnectorType = "skill_store" | "memory_store" | "local_model" | "mcp_connector" | "agent_connector";
+/**
+ * Static capabilities — declared by the connector class, consumed by the
+ * linter offline. `features` is a string→boolean map of feature flags;
+ * skill `# Requires:` clauses match against the names. See per-contract
+ * feature-flag namespaces below.
+ */
+export interface StaticCapabilities {
+    connector_type: ConnectorType;
+    /** Implementation class name; appears in conformance test output + dashboard. */
+    implementation: string;
+    /** Contract version this implementation targets (e.g. "1.0.0"). Lets the runtime refuse incompatible impls. */
+    contract_version: string;
+    features: Record<string, boolean>;
+}
+/**
+ * Dynamic manifest — instance state. Runtime caches per `capabilities_version`;
+ * connectors bump version on schema/structural changes only.
+ */
+export interface ManifestInfo {
+    capabilities_version: string;
+    manifest: Record<string, unknown>;
+}
+export type SkillStatus = "Draft" | "Approved" | "Disabled";
+/**
+ * The source bytes of a skill plus its identity metadata. Returned by
+ * `SkillStore.load()`. `version` is opaque-substrate-declared (equality
+ * comparison only); `content_hash` is substrate-independent SHA-256 of
+ * canonicalized source. Use `content_hash` for staleness / dependency
+ * walking; use `version` for display + substrate-specific pinning.
+ */
+export interface SkillSource {
+    name: string;
+    version: string;
+    content_hash: string;
+    source: string;
+    metadata: SkillMeta;
+}
+/**
+ * Skill metadata — everything you can know about a skill without loading
+ * its body. Returned by `query()` / `metadata()`. `created_at` /
+ * `updated_at` / `status_changed_at` are Unix seconds.
+ */
+export interface SkillMeta {
+    name: string;
+    version: string;
+    content_hash: string;
+    status: SkillStatus;
+    description?: string;
+    vars?: string[];
+    requires?: string[];
+    triggers?: Array<{
+        source: string;
+        name: string;
+        agent_id?: string;
+    }>;
+    outputs?: string[];
+    type?: "procedural" | "data";
+    created_at: number;
+    updated_at: number;
+    status_changed_at?: number;
+    author?: string;
+    metadata_bag?: Record<string, unknown>;
+}
+/**
+ * Records a write or status transition. `previous_status` is populated
+ * on every `update_status()` call so audit traces can reconstruct the
+ * lifecycle without reading the full version list. `changed_at` is
+ * Unix seconds.
+ */
+export interface VersionInfo {
+    name: string;
+    version: string;
+    content_hash: string;
+    status: SkillStatus;
+    previous_status?: SkillStatus;
+    changed_at: number;
+    changed_by?: string;
+}
+/**
+ * Filter shape for `SkillStore.query()`. Extensible — substrates honor what
+ * they support and ignore the rest. `name_pattern` is a substrate-specific
+ * glob/regex string; substrates declare support via the
+ * `supports_tag_filter` / `supports_versioning` feature flags.
+ */
+export interface SkillFilter {
+    status?: SkillStatus | SkillStatus[];
+    type?: "procedural" | "data";
+    tag?: string | string[];
+    author?: string;
+    since?: number;
+    name_pattern?: string;
+    limit?: number;
+    offset?: number;
+    [key: string]: unknown;
+}
+export interface SkillStore {
+    /** Throws `SkillNotFoundError` if `name` (+ optional `version`) is missing. */
+    load(name: string, version?: string): Promise<SkillSource>;
+    /** Returns empty array on no matches; never throws for "not found". */
+    query(filter?: SkillFilter): Promise<SkillMeta[]>;
+    /** Throws `SkillNotFoundError` if missing. */
+    metadata(name: string): Promise<SkillMeta>;
+    /** Throws `SkillNotFoundError` if missing. Empty array is valid for new skills. */
+    versions(name: string): Promise<VersionInfo[]>;
+    /** Creates or updates. Throws `LintFailureError` if tier-1 lint rejects. */
+    store(name: string, source: string, metadata?: Partial<SkillMeta>): Promise<VersionInfo>;
+    /** Substrate-only delete. Referential integrity is the runtime's concern (T2 Phase 2.1). */
+    delete(name: string): Promise<void>;
+    /** Returns a `VersionInfo` with `previous_status` populated. */
+    update_status(name: string, status: SkillStatus): Promise<VersionInfo>;
+    manifest(): Promise<ManifestInfo>;
+}
+export interface SkillStoreClass {
+    new (...args: never[]): SkillStore;
+    staticCapabilities(): StaticCapabilities;
+}
+/**
+ * Portable memory shape. Field-access semantics (4-tier resolution):
+ *   1. Core fields — id, summary, detail, score
+ *   2. Curated substrate subset — top-level fields whose concept is portable
+ *   3. Substrate-specific — accessed via metadata.X
+ *   4. Ambient passthrough — literal $(MEMORY.field) for unknowns
+ *
+ * Connector duplication discipline: a curated-subset field must be at
+ * top-level only, never also in metadata. Silent divergence otherwise.
+ */
+export interface PortableMemory {
+    id: string;
+    summary: string;
+    detail?: string;
+    score?: number;
+    thread_status?: string;
+    pinned?: boolean;
+    confidence?: number;
+    domain_tags?: string[];
+    payload_type?: string;
+    knowledge_type?: string;
+    recipients?: string[];
+    expires_at?: number;
+    created_at?: number;
+    agent_id?: string;
+    vault?: string;
+    metadata?: Record<string, unknown>;
+}
+export interface QueryFilters {
+    query: string;
+    limit: number;
+    mode: "fts" | "semantic" | "rerank" | string;
+    [key: string]: unknown;
+}
+export interface MemoryStore {
+    query(filters: QueryFilters): Promise<PortableMemory[]>;
+    manifest(): Promise<ManifestInfo>;
+}
+export interface MemoryStoreClass {
+    new (...args: never[]): MemoryStore;
+    staticCapabilities(): StaticCapabilities;
+}
+export interface LocalModel {
+    run(prompt: string, opts: {
+        maxTokens?: number;
+        model?: string;
+    }): Promise<string>;
+    manifest(): Promise<ManifestInfo>;
+}
+export interface LocalModelClass {
+    new (...args: never[]): LocalModel;
+    staticCapabilities(): StaticCapabilities;
+}
+/** Identity overrides threaded through `$` op dispatch. Per-call > registry > intrinsic. */
+export interface McpDispatchCtx {
+    agentId?: string;
+    isAdmin?: boolean;
+}
+export interface McpConnector {
+    call(toolName: string, args: Record<string, unknown>, ctxOverrides?: McpDispatchCtx): Promise<unknown>;
+    manifest(): Promise<ManifestInfo>;
+}
+export interface McpConnectorClass {
+    new (...args: never[]): McpConnector;
+    staticCapabilities(): StaticCapabilities;
+}
+/** Eleven curated substrate fields. Connectors route equivalents here at top level; everything else flows into metadata. */
+export declare const CURATED_MEMORY_FIELDS: readonly ["thread_status", "pinned", "confidence", "domain_tags", "payload_type", "knowledge_type", "recipients", "expires_at", "created_at", "agent_id", "vault"];
+export type CuratedMemoryField = (typeof CURATED_MEMORY_FIELDS)[number];
+//# sourceMappingURL=types.d.ts.map

package/dist/connectors/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/connectors/types.ts"],"names":[],"mappings":"AAoBA,gCAAgC;AAChC,MAAM,MAAM,aAAa,GAAG,aAAa,GAAG,cAAc,GAAG,aAAa,GAAG,eAAe,GAAG,iBAAiB,CAAC;AAEjH;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IACjC,cAAc,EAAE,aAAa,CAAC;IAC9B,iFAAiF;IACjF,cAAc,EAAE,MAAM,CAAC;IACvB,+GAA+G;IAC/G,gBAAgB,EAAE,MAAM,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAID,MAAM,MAAM,WAAW,GAAG,OAAO,GAAG,UAAU,GAAG,UAAU,CAAC;AAE5D;;;;;;GAMG;AACH,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,SAAS,CAAC;CACrB;AAED;;;;GAIG;AACH,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,WAAW,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,QAAQ,CAAC,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACtE,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,IAAI,CAAC,EAAE,YAAY,GAAG,MAAM,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACxC;AAED;;;;;GAKG;AACH,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,WAAW,CAAC;IACpB,eAAe,CAAC,EAAE,WAAW,CAAC;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;;GAKG;AACH,MAAM,WAAW,WAAW;IAC1B,MAAM,CAAC,EAAE,WAAW,GAAG,WAAW,EAAE,CAAC;IACrC,IAAI,CAAC,EAAE,YAAY,GAAG,MAAM,CAAC;IAC7B,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,UAAU;IACzB,+EAA+E;IAC/E,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAC3D,uEAAuE;IACvE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;IAClD,8CAA8C;IAC9C,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAC3C,mFAAmF;IACnF,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IAC/C,4EAA4E;IAC5E,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACzF,4FAA4F;IAC5F,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACpC,gEAAgE;IAChE,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACvE,QAAQ,IAAI,OAAO,CAAC,YAAY,CAAC,CAAC;CACnC;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,GAAG,IAAI,EAAE,KAAK,EAAE,GAAG,UAAU,CAAC;IACnC,kBAAkB,IAAI,kBAAkB,CAAC;CAC1C;AAID;;;;;;;;;GASG;AACH,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IAGf,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,KAAK,GAAG,UAAU,GAAG,QAAQ,GAAG,MAAM,CAAC;IAC7C,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;IACxD,QAAQ,IAAI,OAAO,CAAC,YAAY,CAAC,CAAC;CACnC;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,GAAG,IAAI,EAAE,KAAK,EAAE,GAAG,WAAW,CAAC;IACpC,kBAAkB,IAAI,kBAAkB,CAAC;CAC1C;AAID,MAAM,WAAW,UAAU;IACzB,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACnF,QAAQ,IAAI,OAAO,CAAC,YAAY,CAAC,CAAC;CACnC;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,GAAG,IAAI,EAAE,KAAK,EAAE,GAAG,UAAU,CAAC;IACnC,kBAAkB,IAAI,kBAAkB,CAAC;CAC1C;AAID,4FAA4F;AAC5F,MAAM,WAAW,cAAc;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,CACF,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,YAAY,CAAC,EAAE,cAAc,GAC5B,OAAO,CAAC,OAAO,CAAC,CAAC;IACpB,QAAQ,IAAI,OAAO,CAAC,YAAY,CAAC,CAAC;CACnC;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,GAAG,IAAI,EAAE,KAAK,EAAE,GAAG,YAAY,CAAC;IACrC,kBAAkB,IAAI,kBAAkB,CAAC;CAC1C;AAID,4HAA4H;AAC5H,eAAO,MAAM,qBAAqB,oKAYxB,CAAC;AAEX,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC"}

package/dist/connectors/types.js

@@ -0,0 +1,35 @@
+// Connector contracts — the integration boundary between the runtime and
+// external state. Five kinds: SkillStore (where skills live), MemoryStore
+// (queryable knowledge), LocalModel (local LLM inference), McpConnector
+// (MCP tool dispatch), AgentConnector (deliver to / wake a frontier agent;
+// T7.1).
+//
+// Capabilities are split into two surfaces:
+//
+//   - `staticCapabilities()` — class-level static method. Pure, synchronous,
+//     no instance, no network. The linter calls this offline to validate
+//     `# Requires:` clauses against the configured connector set without
+//     needing the substrate to be reachable.
+//
+//   - `manifest()` — instance method. Returns substrate-specific dynamic
+//     state (which models a specific Ollama instance serves, which tools
+//     a specific MCP server exposes). Runtime caches the result per
+//     `(connector_instance, capabilities_version)`; connectors bump the
+//     version when manifest *content* changes (new tool wired, new model
+//     loaded), NOT on every dispatch.
+// ─── Curated memory fields ────────────────────────────────────────────────
+/** Eleven curated substrate fields. Connectors route equivalents here at top level; everything else flows into metadata. */
+export const CURATED_MEMORY_FIELDS = [
+    "thread_status",
+    "pinned",
+    "confidence",
+    "domain_tags",
+    "payload_type",
+    "knowledge_type",
+    "recipients",
+    "expires_at",
+    "created_at",
+    "agent_id",
+    "vault",
+];
+//# sourceMappingURL=types.js.map

package/dist/connectors/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/connectors/types.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,0EAA0E;AAC1E,wEAAwE;AACxE,2EAA2E;AAC3E,SAAS;AACT,EAAE;AACF,4CAA4C;AAC5C,EAAE;AACF,6EAA6E;AAC7E,yEAAyE;AACzE,yEAAyE;AACzE,6CAA6C;AAC7C,EAAE;AACF,yEAAyE;AACzE,yEAAyE;AACzE,oEAAoE;AACpE,wEAAwE;AACxE,yEAAyE;AACzE,sCAAsC;AAqNtC,6EAA6E;AAE7E,4HAA4H;AAC5H,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,eAAe;IACf,QAAQ;IACR,YAAY;IACZ,aAAa;IACb,cAAc;IACd,gBAAgB;IAChB,YAAY;IACZ,YAAY;IACZ,YAAY;IACZ,UAAU;IACV,OAAO;CACC,CAAC"}

package/dist/dashboard/server.d.ts

@@ -0,0 +1,40 @@
+import type { IncomingMessage, ServerResponse } from "node:http";
+import type { McpServer } from "../mcp-server.js";
+/**
+ * Dashboard HTTP server (T6b Phase 2). Bundles the SPA assets + a
+ * /rpc endpoint that forwards JSON-RPC requests to the runtime's
+ * McpServer. Single-process colocation with the runtime — no stdio
+ * child process needed.
+ *
+ * SPA: GET / and GET /index.html serve index.html; GET /app.js and
+ * /styles.css serve the assets. Anything else 404s.
+ *
+ * RPC: POST /rpc with JSON-RPC 2.0 body; routes to McpServer.handle();
+ * responds with JSON-RPC 2.0 result/error.
+ *
+ * Binds to 127.0.0.1 by default (per kickoff criterion #12 — localhost-
+ * only, no multi-user auth in v1). Operators in shared environments
+ * configure a reverse proxy with auth.
+ */
+export interface DashboardServerConfig {
+    mcpServer: McpServer;
+    port?: number;
+    bindAddress?: string;
+    /** Absolute path to the directory containing index.html + app.js + styles.css. Auto-detected when omitted. */
+    assetsDir?: string;
+}
+export declare class DashboardServer {
+    private readonly mcpServer;
+    private readonly port;
+    private readonly bindAddress;
+    private readonly assetsDir;
+    private httpServer;
+    constructor(config: DashboardServerConfig);
+    start(): Promise<void>;
+    stop(): Promise<void>;
+    /** Exposed for direct testing — doesn't go through the network stack. */
+    handle(req: IncomingMessage, res: ServerResponse): Promise<void>;
+    private handleRpc;
+    private handleStatic;
+}
+//# sourceMappingURL=server.d.ts.map

package/dist/dashboard/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/dashboard/server.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAU,MAAM,WAAW,CAAC;AAKzE,OAAO,KAAK,EAAE,SAAS,EAAkB,MAAM,kBAAkB,CAAC;AAElE;;;;;;;;;;;;;;;GAeG;AAEH,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,SAAS,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,8GAA8G;IAC9G,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AASD,qBAAa,eAAe;IAC1B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAY;IACtC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAS;IAC9B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,UAAU,CAAuB;gBAE7B,MAAM,EAAE,qBAAqB;IAOnC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAStB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAO3B,yEAAyE;IACnE,MAAM,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;YA2BxD,SAAS;YAmBT,YAAY;CAkB3B"}

package/dist/dashboard/server.js

@@ -0,0 +1,122 @@
+import { createServer } from "node:http";
+import { readFile } from "node:fs/promises";
+import { existsSync } from "node:fs";
+import { extname, join, resolve, dirname } from "node:path";
+import { fileURLToPath } from "node:url";
+const MIME = {
+    ".html": "text/html; charset=utf-8",
+    ".js": "application/javascript; charset=utf-8",
+    ".css": "text/css; charset=utf-8",
+    ".json": "application/json; charset=utf-8",
+};
+export class DashboardServer {
+    mcpServer;
+    port;
+    bindAddress;
+    assetsDir;
+    httpServer = null;
+    constructor(config) {
+        this.mcpServer = config.mcpServer;
+        this.port = config.port ?? 7878;
+        this.bindAddress = config.bindAddress ?? "127.0.0.1";
+        this.assetsDir = config.assetsDir ?? locateAssetsDir();
+    }
+    async start() {
+        this.httpServer = createServer((req, res) => {
+            void this.handle(req, res);
+        });
+        return new Promise((resolve) => {
+            this.httpServer.listen(this.port, this.bindAddress, () => resolve());
+        });
+    }
+    async stop() {
+        if (this.httpServer === null)
+            return;
+        return new Promise((resolve, reject) => {
+            this.httpServer.close((err) => (err ? reject(err) : resolve()));
+        });
+    }
+    /** Exposed for direct testing — doesn't go through the network stack. */
+    async handle(req, res) {
+        try {
+            const url = new URL(req.url ?? "/", `http://${this.bindAddress}:${this.port}`);
+            // /rpc is POST-only — any other method on /rpc is 405 (not falling
+            // through to the static handler, which would 404 with misleading
+            // semantics).
+            if (url.pathname === "/rpc") {
+                if (req.method !== "POST") {
+                    res.statusCode = 405;
+                    res.end("Method Not Allowed");
+                    return;
+                }
+                await this.handleRpc(req, res);
+                return;
+            }
+            if (req.method === "GET") {
+                await this.handleStatic(url.pathname, res);
+                return;
+            }
+            res.statusCode = 405;
+            res.end("Method Not Allowed");
+        }
+        catch (err) {
+            res.statusCode = 500;
+            res.end(`Internal server error: ${err.message}`);
+        }
+    }
+    async handleRpc(req, res) {
+        const chunks = [];
+        for await (const chunk of req)
+            chunks.push(chunk);
+        const body = Buffer.concat(chunks).toString("utf8");
+        let rpcReq;
+        try {
+            rpcReq = JSON.parse(body);
+        }
+        catch {
+            res.statusCode = 400;
+            res.setHeader("content-type", MIME[".json"]);
+            res.end(JSON.stringify({ jsonrpc: "2.0", id: null, error: { code: -32700, message: "Parse error" } }));
+            return;
+        }
+        const response = await this.mcpServer.handle(rpcReq);
+        res.statusCode = 200;
+        res.setHeader("content-type", MIME[".json"]);
+        res.end(JSON.stringify(response));
+    }
+    async handleStatic(pathname, res) {
+        const requested = pathname === "/" ? "/index.html" : pathname;
+        const file = join(this.assetsDir, requested);
+        if (!file.startsWith(this.assetsDir)) {
+            res.statusCode = 403;
+            res.end("Forbidden");
+            return;
+        }
+        if (!existsSync(file)) {
+            res.statusCode = 404;
+            res.end("Not Found");
+            return;
+        }
+        const body = await readFile(file);
+        res.statusCode = 200;
+        res.setHeader("content-type", MIME[extname(file)] ?? "application/octet-stream");
+        res.end(body);
+    }
+}
+/** Locate the dashboard SPA assets directory (compiled output, runs from dist/). */
+function locateAssetsDir() {
+    const here = dirname(fileURLToPath(import.meta.url));
+    // Built dist runs from dist/dashboard/server.js; spa/ is sibling.
+    // Source dev (vitest) runs from src/dashboard/server.ts; spa/ is sibling.
+    const candidates = [
+        resolve(here, "spa"),
+        resolve(here, "..", "..", "src", "dashboard", "spa"),
+    ];
+    for (const c of candidates) {
+        if (existsSync(c))
+            return c;
+    }
+    // Fall back to src/ even if missing — error surfaces at request time.
+    return candidates[0];
+}
+//# sourceMappingURL=server.js.map

package/dist/dashboard/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../src/dashboard/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AA4BzC,MAAM,IAAI,GAA2B;IACnC,OAAO,EAAE,0BAA0B;IACnC,KAAK,EAAE,uCAAuC;IAC9C,MAAM,EAAE,yBAAyB;IACjC,OAAO,EAAE,iCAAiC;CAC3C,CAAC;AAEF,MAAM,OAAO,eAAe;IACT,SAAS,CAAY;IACrB,IAAI,CAAS;IACb,WAAW,CAAS;IACpB,SAAS,CAAS;IAC3B,UAAU,GAAkB,IAAI,CAAC;IAEzC,YAAY,MAA6B;QACvC,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;QAClC,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC;QAChC,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,IAAI,WAAW,CAAC;QACrD,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,eAAe,EAAE,CAAC;IACzD,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,UAAU,GAAG,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YAC1C,KAAK,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YACnC,IAAI,CAAC,UAAW,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QACxE,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,IAAI,CAAC,UAAU,KAAK,IAAI;YAAE,OAAO;QACrC,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC3C,IAAI,CAAC,UAAW,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACnE,CAAC,CAAC,CAAC;IACL,CAAC;IAED,yEAAyE;IACzE,KAAK,CAAC,MAAM,CAAC,GAAoB,EAAE,GAAmB;QACpD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,UAAU,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YAC/E,mEAAmE;YACnE,iEAAiE;YACjE,cAAc;YACd,IAAI,GAAG,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;gBAC5B,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;oBAC1B,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;oBACrB,GAAG,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;oBAC9B,OAAO;gBACT,CAAC;gBACD,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;gBAC/B,OAAO;YACT,CAAC;YACD,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;gBACzB,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;gBAC3C,OAAO;YACT,CAAC;YACD,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;YACrB,GAAG,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;QAChC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;YACrB,GAAG,CAAC,GAAG,CAAC,0BAA2B,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,GAAoB,EAAE,GAAmB;QAC/D,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG;YAAE,MAAM,CAAC,IAAI,CAAC,KAAe,CAAC,CAAC;QAC5D,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACpD,IAAI,MAAsB,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAmB,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;YACrB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,IAAI,CAAC,OAAO,CAAE,CAAC,CAAC;YAC9C,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,EAAE,CAAC,CAAC,CAAC;YACvG,OAAO;QACT,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACrD,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;QACrB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,IAAI,CAAC,OAAO,CAAE,CAAC,CAAC;QAC9C,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;IACpC,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,QAAgB,EAAE,GAAmB;QAC9D,MAAM,SAAS,GAAG,QAAQ,KAAK,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC9D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAC7C,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YACrC,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;YACrB,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACtB,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;YACrB,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;QAClC,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;QACrB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,0BAA0B,CAAC,CAAC;QACjF,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAChB,CAAC;CACF;AAED,oFAAoF;AACpF,SAAS,eAAe;IACtB,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACrD,kEAAkE;IAClE,0EAA0E;IAC1E,MAAM,UAAU,GAAG;QACjB,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC;QACpB,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,CAAC;KACrD,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,IAAI,UAAU,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC;IAC9B,CAAC;IACD,sEAAsE;IACtE,OAAO,UAAU,CAAC,CAAC,CAAE,CAAC;AACxB,CAAC"}