tinybeeai 0.0.0-stage → 0.16.1

package/dist/routes/connections.js

@@ -0,0 +1,177 @@
+import { config } from '../config.js';
+import { list, update } from '../db.js';
+import { disconnect, refreshConnection } from '../connections/manager.js';
+import { createConnection, deleteConnection, getConnection, listConnections, publicView, updateConnection, } from '../connections/store.js';
+const ENV_NAME = /^[A-Za-z_][A-Za-z0-9_]{0,127}$/;
+function isLoopback(ip) {
+    return ip === '127.0.0.1' || ip === '::1' || ip === '::ffff:127.0.0.1';
+}
+/**
+ * A stdio connection runs a command on this host. Allow it only when the API is behind LOCALDOST_TOKEN,
+ * the request comes from this machine, or LOCALDOST_ALLOW_STDIO=1 says so.
+ */
+function stdioAllowed(req) {
+    return Boolean(config.token) || isLoopback(req.ip) || process.env.LOCALDOST_ALLOW_STDIO === '1';
+}
+function str(v) {
+    return typeof v === 'string' && v.trim() ? v.trim() : undefined;
+}
+/** Validates config fields. Returns the clean patch or an error message. */
+function parseFields(body, partial) {
+    const f = {};
+    if (body.name !== undefined || !partial) {
+        const name = str(body.name);
+        if (!name)
+            return { fields: f, error: 'name is required' };
+        if (name.length > 60)
+            return { fields: f, error: 'name must be 60 characters or fewer' };
+        f.name = name;
+    }
+    if (body.transport !== undefined || !partial) {
+        if (body.transport !== 'stdio' && body.transport !== 'http')
+            return { fields: f, error: "transport must be 'stdio' or 'http'" };
+        f.transport = body.transport;
+    }
+    if (body.command !== undefined)
+        f.command = body.command === null ? null : str(body.command);
+    if (body.args !== undefined) {
+        if (body.args === null)
+            f.args = null;
+        else if (!Array.isArray(body.args) || body.args.some((a) => typeof a !== 'string'))
+            return { fields: f, error: 'args must be an array of strings' };
+        else
+            f.args = body.args;
+    }
+    if (body.url !== undefined) {
+        if (body.url === null)
+            f.url = null;
+        else {
+            const u = str(body.url);
+            let ok = false;
+            try {
+                ok = Boolean(u) && ['http:', 'https:'].includes(new URL(u).protocol);
+            }
+            catch {
+                ok = false;
+            }
+            if (!ok)
+                return { fields: f, error: 'url must be an http or https URL' };
+            f.url = u;
+        }
+    }
+    if (body.headersSecretRef !== undefined) {
+        if (body.headersSecretRef === null || body.headersSecretRef === '')
+            f.headersSecretRef = null;
+        else if (typeof body.headersSecretRef !== 'string' || !ENV_NAME.test(body.headersSecretRef))
+            return { fields: f, error: 'headersSecretRef must be the name of an env var (letters, digits, underscore), never the secret itself' };
+        else
+            f.headersSecretRef = body.headersSecretRef;
+    }
+    if (body.enabled !== undefined) {
+        if (typeof body.enabled !== 'boolean')
+            return { fields: f, error: 'enabled must be a boolean' };
+        f.enabled = body.enabled;
+    }
+    return { fields: f };
+}
+function checkTransport(merged) {
+    if (merged.transport === 'stdio' && !merged.command)
+        return 'a stdio connection needs a command';
+    if (merged.transport === 'http' && !merged.url)
+        return 'an http connection needs a url';
+    return undefined;
+}
+const CONFIG_KEYS = ['transport', 'command', 'args', 'url', 'headersSecretRef'];
+export async function register(app) {
+    app.get('/api/connections', async (req) => {
+        const watchId = req.query.watchId || req.query.dotId;
+        let rows = listConnections();
+        if (watchId) {
+            const w = list('watches', { id: watchId })[0];
+            const ids = new Set(w?.connections ?? []);
+            rows = rows.filter((c) => ids.has(c.id));
+        }
+        return rows.map(publicView);
+    });
+    app.post('/api/connections', async (req, reply) => {
+        const body = req.body ?? {};
+        const { fields, error } = parseFields(body, false);
+        if (error)
+            return reply.code(400).send({ error });
+        const bad = checkTransport(fields);
+        if (bad)
+            return reply.code(400).send({ error: bad });
+        if (fields.transport === 'stdio' && !stdioAllowed(req))
+            return reply.code(403).send({ error: 'stdio connections run a command on the server. Set LOCALDOST_TOKEN or LOCALDOST_ALLOW_STDIO=1 first.' });
+        const input = { enabled: true, ...fields };
+        for (const k of Object.keys(input))
+            if (input[k] === null)
+                delete input[k];
+        let conn = createConnection(input);
+        if (conn.enabled)
+            conn = await refreshConnection(conn.id);
+        return reply.code(201).send(publicView(conn));
+    });
+    app.patch('/api/connections/:id', async (req, reply) => {
+        const cur = getConnection(req.params.id);
+        if (!cur)
+            return reply.code(404).send({ error: 'connection not found' });
+        const body = req.body ?? {};
+        const { fields, error } = parseFields(body, true);
+        if (error)
+            return reply.code(400).send({ error });
+        const merged = { ...cur, ...fields };
+        for (const k of Object.keys(merged))
+            if (merged[k] === null)
+                delete merged[k];
+        const bad = checkTransport(merged);
+        if (bad)
+            return reply.code(400).send({ error: bad });
+        const configChanged = CONFIG_KEYS.some((k) => k in fields);
+        if (merged.transport === 'stdio' && configChanged && !stdioAllowed(req))
+            return reply.code(403).send({ error: 'stdio connections run a command on the server. Set LOCALDOST_TOKEN or LOCALDOST_ALLOW_STDIO=1 first.' });
+        const patch = { ...fields };
+        if (body.tools !== undefined) {
+            if (!Array.isArray(body.tools))
+                return reply.code(400).send({ error: 'tools must be an array of { name, enabled }' });
+            const toggles = new Map();
+            for (const t of body.tools) {
+                const item = t;
+                if (typeof item?.name !== 'string' || typeof item.enabled !== 'boolean')
+                    return reply.code(400).send({ error: 'tools must be an array of { name, enabled }' });
+                toggles.set(item.name, item.enabled);
+            }
+            patch.tools = cur.tools.map((t) => (toggles.has(t.name) ? { ...t, enabled: toggles.get(t.name) } : t));
+        }
+        if (fields.enabled === false)
+            patch.status = 'disabled';
+        let conn = updateConnection(cur.id, patch);
+        const turnedOn = fields.enabled === true && !cur.enabled;
+        if (configChanged || fields.enabled === false)
+            await disconnect(cur.id);
+        if (conn.enabled && (configChanged || turnedOn))
+            conn = await refreshConnection(cur.id);
+        return publicView(conn);
+    });
+    app.delete('/api/connections/:id', async (req, reply) => {
+        const id = req.params.id;
+        if (!getConnection(id))
+            return reply.code(404).send({ error: 'connection not found' });
+        await disconnect(id);
+        deleteConnection(id);
+        // Detach from every dot so no chat offers tools of a deleted server.
+        for (const w of list('watches')) {
+            if (w.connections?.includes(id))
+                update('watches', w.id, { connections: w.connections.filter((c) => c !== id) });
+        }
+        return { ok: true };
+    });
+    app.post('/api/connections/:id/refresh', async (req, reply) => {
+        if (!getConnection(req.params.id))
+            return reply.code(404).send({ error: 'connection not found' });
+        const conn = await refreshConnection(req.params.id);
+        return publicView(conn);
+    });
+}
+export default register;
+//# sourceMappingURL=connections.js.map

package/dist/routes/connections.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connections.js","sourceRoot":"","sources":["../../src/routes/connections.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAExC,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC1E,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,aAAa,EACb,eAAe,EACf,UAAU,EACV,gBAAgB,GAEjB,MAAM,yBAAyB,CAAC;AAEjC,MAAM,QAAQ,GAAG,gCAAgC,CAAC;AAIlD,SAAS,UAAU,CAAC,EAAsB;IACxC,OAAO,EAAE,KAAK,WAAW,IAAI,EAAE,KAAK,KAAK,IAAI,EAAE,KAAK,kBAAkB,CAAC;AACzE,CAAC;AAED;;;GAGG;AACH,SAAS,YAAY,CAAC,GAAmB;IACvC,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,qBAAqB,KAAK,GAAG,CAAC;AAClG,CAAC;AAED,SAAS,GAAG,CAAC,CAAU;IACrB,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAClE,CAAC;AAED,4EAA4E;AAC5E,SAAS,WAAW,CAAC,IAAU,EAAE,OAAgB;IAC/C,MAAM,CAAC,GAAS,EAAE,CAAC;IACnB,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,OAAO,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5B,IAAI,CAAC,IAAI;YAAE,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC;QAC3D,IAAI,IAAI,CAAC,MAAM,GAAG,EAAE;YAAE,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,qCAAqC,EAAE,CAAC;QACzF,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC;IAChB,CAAC;IACD,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,OAAO,EAAE,CAAC;QAC7C,IAAI,IAAI,CAAC,SAAS,KAAK,OAAO,IAAI,IAAI,CAAC,SAAS,KAAK,MAAM;YAAE,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,qCAAqC,EAAE,CAAC;QAChI,CAAC,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;IAC/B,CAAC;IACD,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;QAAE,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7F,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC5B,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI;YAAE,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC;aACjC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;YAAE,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,kCAAkC,EAAE,CAAC;;YAC/I,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IAC1B,CAAC;IACD,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAC3B,IAAI,IAAI,CAAC,GAAG,KAAK,IAAI;YAAE,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC;aAC/B,CAAC;YACJ,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACxB,IAAI,EAAE,GAAG,KAAK,CAAC;YACf,IAAI,CAAC;gBACH,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAE,CAAC,CAAC,QAAQ,CAAC,CAAC;YACxE,CAAC;YAAC,MAAM,CAAC;gBACP,EAAE,GAAG,KAAK,CAAC;YACb,CAAC;YACD,IAAI,CAAC,EAAE;gBAAE,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,kCAAkC,EAAE,CAAC;YACzE,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC;QACZ,CAAC;IACH,CAAC;IACD,IAAI,IAAI,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;QACxC,IAAI,IAAI,CAAC,gBAAgB,KAAK,IAAI,IAAI,IAAI,CAAC,gBAAgB,KAAK,EAAE;YAAE,CAAC,CAAC,gBAAgB,GAAG,IAAI,CAAC;aACzF,IAAI,OAAO,IAAI,CAAC,gBAAgB,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC;YACzF,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,wGAAwG,EAAE,CAAC;;YACnI,CAAC,CAAC,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,CAAC;IAClD,CAAC;IACD,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAC/B,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,SAAS;YAAE,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC;QAChG,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;IAC3B,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;AACvB,CAAC;AAED,SAAS,cAAc,CAAC,MAA2B;IACjD,IAAI,MAAM,CAAC,SAAS,KAAK,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,oCAAoC,CAAC;IACjG,IAAI,MAAM,CAAC,SAAS,KAAK,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG;QAAE,OAAO,gCAAgC,CAAC;IACxF,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,WAAW,GAAG,CAAC,WAAW,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,kBAAkB,CAAC,CAAC;AAEhF,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,GAAoB;IACjD,GAAG,CAAC,GAAG,CAAwD,kBAAkB,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAC/F,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC;QACrD,IAAI,IAAI,GAAG,eAAe,EAAE,CAAC;QAC7B,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,CAAC,GAAG,IAAI,CAAQ,SAAS,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YACrD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC;YAC1C,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC3C,CAAC;QACD,OAAO,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAiB,kBAAkB,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QAChE,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;QAC5B,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACnD,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAClD,MAAM,GAAG,GAAG,cAAc,CAAC,MAA6B,CAAC,CAAC;QAC1D,IAAI,GAAG;YAAE,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QACrD,IAAI,MAAM,CAAC,SAAS,KAAK,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC;YACpD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sGAAsG,EAAE,CAAC,CAAC;QACjJ,MAAM,KAAK,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,MAAM,EAAqB,CAAC;QAC9D,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAA8B;YAAE,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;gBAAE,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;QACxG,IAAI,IAAI,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACnC,IAAI,IAAI,CAAC,OAAO;YAAE,IAAI,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC1D,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,KAAK,CAAyC,sBAAsB,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QAC7F,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACzC,IAAI,CAAC,GAAG;YAAE,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC;QACzE,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;QAC5B,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAClD,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG,EAAE,GAAG,GAAG,EAAE,GAAG,MAAM,EAAyB,CAAC;QAC5D,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAyB;YAAE,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI;gBAAE,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;QACtG,MAAM,GAAG,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;QACnC,IAAI,GAAG;YAAE,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QACrD,MAAM,aAAa,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC;QAC3D,IAAI,MAAM,CAAC,SAAS,KAAK,OAAO,IAAI,aAAa,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC;YACrE,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sGAAsG,EAAE,CAAC,CAAC;QAEjJ,MAAM,KAAK,GAAS,EAAE,GAAG,MAAM,EAAE,CAAC;QAClC,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC7B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,6CAA6C,EAAE,CAAC,CAAC;YACtH,MAAM,OAAO,GAAG,IAAI,GAAG,EAAmB,CAAC;YAC3C,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAkB,EAAE,CAAC;gBACxC,MAAM,IAAI,GAAG,CAA0C,CAAC;gBACxD,IAAI,OAAO,IAAI,EAAE,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,SAAS;oBACrE,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,6CAA6C,EAAE,CAAC,CAAC;gBACxF,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YACvC,CAAC;YACD,KAAK,CAAC,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1G,CAAC;QACD,IAAI,MAAM,CAAC,OAAO,KAAK,KAAK;YAAE,KAAK,CAAC,MAAM,GAAG,UAAU,CAAC;QACxD,IAAI,IAAI,GAAG,gBAAgB,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAE,CAAC;QAC5C,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;QACzD,IAAI,aAAa,IAAI,MAAM,CAAC,OAAO,KAAK,KAAK;YAAE,MAAM,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACxE,IAAI,IAAI,CAAC,OAAO,IAAI,CAAC,aAAa,IAAI,QAAQ,CAAC;YAAE,IAAI,GAAG,MAAM,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACxF,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,MAAM,CAA6B,sBAAsB,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QAClF,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QACzB,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;YAAE,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC;QACvF,MAAM,UAAU,CAAC,EAAE,CAAC,CAAC;QACrB,gBAAgB,CAAC,EAAE,CAAC,CAAC;QACrB,qEAAqE;QACrE,KAAK,MAAM,CAAC,IAAI,IAAI,CAAQ,SAAS,CAAC,EAAE,CAAC;YACvC,IAAI,CAAC,CAAC,WAAW,EAAE,QAAQ,CAAC,EAAE,CAAC;gBAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QACnH,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAA6B,8BAA8B,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACxF,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAAE,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC;QAClG,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACpD,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,eAAe,QAAQ,CAAC"}

package/dist/routes/disk.js

@@ -0,0 +1,19 @@
+import { count } from '../db.js';
+import { DISK_PAUSED_KINDS, diskStatus } from '../disk.js';
+export function diskView() {
+    const status = diskStatus();
+    let waitingJobs = 0;
+    if (status.paused) {
+        try {
+            waitingJobs = count('jobs', { status: 'queued', kind: [...DISK_PAUSED_KINDS] });
+        }
+        catch {
+            /* the count is a nicety; the banner still shows */
+        }
+    }
+    return { ...status, waitingJobs };
+}
+export async function register(app) {
+    app.get('/api/disk', async () => diskView());
+}
+//# sourceMappingURL=disk.js.map

package/dist/routes/disk.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"disk.js","sourceRoot":"","sources":["../../src/routes/disk.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,KAAK,EAAE,MAAM,UAAU,CAAC;AACjC,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAG3D,MAAM,UAAU,QAAQ;IACtB,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,IAAI,CAAC;YACH,WAAW,GAAG,KAAK,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,GAAG,iBAAiB,CAAC,EAAE,CAAC,CAAC;QAClF,CAAC;QAAC,MAAM,CAAC;YACP,mDAAmD;QACrD,CAAC;IACH,CAAC;IACD,OAAO,EAAE,GAAG,MAAM,EAAE,WAAW,EAAE,CAAC;AACpC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,GAAoB;IACjD,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC;AAC/C,CAAC"}

package/dist/routes/docs.js

@@ -0,0 +1,71 @@
+// In-app docs: serves README.md and the guides in docs/ as Markdown, read-only. The Setup page links
+// here, so a private repo or an offline server still has working guide links.
+//
+// Only the names in DOCS resolve. A request name never becomes part of a file path, so `..`,
+// absolute paths, and other files in the checkout are unreachable.
+import { readFile, stat } from 'node:fs/promises';
+import path from 'node:path';
+import { ROOT } from '../config.js';
+/** The allowlist, in the order the app lists it. */
+export const DOCS = [
+    { name: 'setup', title: 'Setup', group: 'guide', file: 'docs/SETUP.md' },
+    { name: 'github', title: 'GitHub', group: 'guide', file: 'docs/GITHUB.md' },
+    { name: 'trackers', title: 'Trackers', group: 'guide', file: 'docs/TRACKERS.md' },
+    { name: 'slack', title: 'Slack', group: 'guide', file: 'docs/SLACK.md' },
+    { name: 'voice', title: 'Voice', group: 'guide', file: 'docs/VOICE.md' },
+    { name: 'sandbox', title: 'Test runners', group: 'guide', file: 'docs/SANDBOX.md' },
+    { name: 'connections', title: 'MCP connections', group: 'guide', file: 'docs/CONNECTIONS.md' },
+    { name: 'deploy', title: 'Deploy', group: 'guide', file: 'docs/DEPLOY.md' },
+    { name: 'readme', title: 'Overview', group: 'reference', file: 'README.md' },
+    { name: 'pr-review', title: 'PR review', group: 'reference', file: 'docs/PR-REVIEW.md' },
+    { name: 'api-v2', title: 'HTTP API', group: 'reference', file: 'docs/API-V2.md' },
+    { name: 'pr-review-qa', title: 'PR review design', group: 'reference', file: 'docs/PR-REVIEW-QA.md' },
+    { name: 'multi-repo', title: 'Multiple repos design', group: 'reference', file: 'docs/MULTI-REPO.md' },
+    { name: 'parity', title: 'OpenDots parity', group: 'reference', file: 'docs/PARITY.md' },
+];
+const BY_NAME = new Map(DOCS.map((d) => [d.name, d]));
+const MAX_BYTES = 2 * 1024 * 1024;
+/** `SETUP`, `setup.md`, and `docs/SETUP.md` all mean `setup`. Returns undefined for anything off the list. */
+export function findDoc(raw) {
+    const name = raw
+        .trim()
+        .toLowerCase()
+        .replace(/^docs\//, '')
+        .replace(/\.md$/, '');
+    if (!/^[a-z0-9-]{1,40}$/.test(name))
+        return undefined;
+    return BY_NAME.get(name);
+}
+async function present(file, root) {
+    try {
+        const s = await stat(path.join(root, file));
+        return s.isFile() ? { size: s.size, mtime: s.mtime } : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+export async function register(app, opts = {}) {
+    const root = opts.root ?? ROOT;
+    app.get('/api/docs', async (_req, reply) => {
+        reply.header('Cache-Control', 'no-cache');
+        const rows = await Promise.all(DOCS.map(async (d) => ((await present(d.file, root)) ? d : undefined)));
+        return {
+            docs: rows.filter((d) => Boolean(d)).map(({ name, title, group }) => ({ name, title, group })),
+        };
+    });
+    app.get('/api/docs/:name', async (req, reply) => {
+        const doc = findDoc(req.params.name);
+        if (!doc)
+            return reply.code(404).send({ error: `No doc named "${req.params.name.slice(0, 60)}"` });
+        const info = await present(doc.file, root);
+        if (!info)
+            return reply.code(404).send({ error: `${doc.file} is not in this install` });
+        if (info.size > MAX_BYTES)
+            return reply.code(413).send({ error: `${doc.file} is too large to show` });
+        const markdown = await readFile(path.join(root, doc.file), 'utf8');
+        reply.header('Cache-Control', 'no-cache');
+        return { name: doc.name, title: doc.title, group: doc.group, markdown, updatedAt: info.mtime.toISOString() };
+    });
+}
+//# sourceMappingURL=docs.js.map

package/dist/routes/docs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"docs.js","sourceRoot":"","sources":["../../src/routes/docs.ts"],"names":[],"mappings":"AAAA,qGAAqG;AACrG,8EAA8E;AAC9E,EAAE;AACF,6FAA6F;AAC7F,mEAAmE;AAEnE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AAapC,oDAAoD;AACpD,MAAM,CAAC,MAAM,IAAI,GAAwB;IACvC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE;IACxE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE;IAC3E,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,kBAAkB,EAAE;IACjF,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE;IACxE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE;IACxE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE;IACnF,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,iBAAiB,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,qBAAqB,EAAE;IAC9F,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE;IAC3E,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,EAAE;IAC5E,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,mBAAmB,EAAE;IACxF,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,gBAAgB,EAAE;IACjF,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,kBAAkB,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,sBAAsB,EAAE;IACrG,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,uBAAuB,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,oBAAoB,EAAE;IACtG,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,iBAAiB,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,gBAAgB,EAAE;CACzF,CAAC;AAEF,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AACtD,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAElC,8GAA8G;AAC9G,MAAM,UAAU,OAAO,CAAC,GAAW;IACjC,MAAM,IAAI,GAAG,GAAG;SACb,IAAI,EAAE;SACN,WAAW,EAAE;SACb,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;SACtB,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACxB,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACtD,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAC3B,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,IAAY,EAAE,IAAY;IAC/C,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QAC5C,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAOD,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,GAAoB,EAAE,OAAoB,EAAE;IACzE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC;IAE/B,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;QACzC,KAAK,CAAC,MAAM,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QACvG,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAiB,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;SAC9G,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAA+B,iBAAiB,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QAC5E,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,CAAC,GAAG;YAAE,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC;QACnG,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC3C,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC,IAAI,yBAAyB,EAAE,CAAC,CAAC;QACxF,IAAI,IAAI,CAAC,IAAI,GAAG,SAAS;YAAE,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC,IAAI,uBAAuB,EAAE,CAAC,CAAC;QACtG,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;QACnE,KAAK,CAAC,MAAM,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;QAC1C,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;IAC/G,CAAC,CAAC,CAAC;AACL,CAAC"}