toolhome 0.5.0

package/dist/server/config/harness-import.js

@@ -0,0 +1,166 @@
+import { z } from 'zod';
+import { AppError } from '../domain/errors.js';
+import { marketCatalog } from '../market/catalog.js';
+/**
+ * Translates a harness MCP config (Claude Desktop / Cursor `mcpServers` JSON)
+ * into ToolHome servers + credentials.
+ *
+ * Parsing rules:
+ * - `url` (+ `headers`)      -> remote streamable-http; `Authorization: Bearer X`
+ *   becomes a bearer credential, other headers become a headers credential.
+ * - `command` + `args` + `env` -> home stdio server; env keys whose names look
+ *   secret (password/token/secret/key/authorization) go into an encrypted env
+ *   credential, everything else into `transport.env`.
+ * - npx/uvx/bunx stdio entries that match a curated Market package are flagged
+ *   with a suggestion to install via the Market instead.
+ */
+const harnessServerSchema = z.object({
+    command: z.string().min(1).optional(),
+    args: z.array(z.string()).optional(),
+    env: z.record(z.string(), z.string()).optional(),
+    url: z.string().min(1).optional(),
+    headers: z.record(z.string(), z.string()).optional(),
+});
+export const harnessConfigSchema = z.object({
+    mcpServers: z.record(z.string(), harnessServerSchema),
+});
+const SECRET_KEY_RE = /password|token|secret|key|authorization/i;
+const PACKAGE_RUNNERS = new Set(['npx', 'npm', 'bunx', 'uvx', 'pnpm', 'yarn']);
+export function toSlug(name) {
+    const slug = name
+        .trim()
+        .toLowerCase()
+        .replace(/[^a-z0-9]+/g, '-')
+        .replace(/^-+|-+$/g, '');
+    return slug || 'mcp';
+}
+export function parseHarnessConfig(value) {
+    const config = harnessConfigSchema.parse(value);
+    return Object.entries(config.mcpServers).map(([name, spec]) => {
+        const slug = toSlug(name);
+        const url = spec.url;
+        if (url !== undefined) {
+            return parseRemote(name, slug, { url, headers: spec.headers });
+        }
+        const command = spec.command;
+        if (command === undefined) {
+            throw new AppError('invalid_input', `MCP entry "${name}" must have a "url" (remote) or a "command" (stdio)`, 400);
+        }
+        return parseStdio(name, slug, { command, args: spec.args, env: spec.env });
+    });
+}
+function parseRemote(name, slug, spec) {
+    const headers = spec.headers ?? {};
+    const warnings = [];
+    const authorization = headers.Authorization ?? headers.authorization;
+    let credential = null;
+    // Credential-bound headers must NOT also sit in the plaintext transport
+    // config — strip them so the token only lives in the encrypted credential.
+    const transportHeaders = { ...headers };
+    if (typeof authorization === 'string' && /^Bearer\s+(.+)/i.test(authorization)) {
+        const token = authorization.replace(/^Bearer\s+/i, '').trim();
+        credential = {
+            name,
+            payload: { type: 'bearer', token },
+        };
+        delete transportHeaders.Authorization;
+        delete transportHeaders.authorization;
+        warnings.push('Bearer token detected — stored as an encrypted bearer credential');
+    }
+    else if (Object.keys(headers).length > 0) {
+        credential = {
+            name,
+            payload: { type: 'headers', headers },
+        };
+        for (const key of Object.keys(transportHeaders))
+            delete transportHeaders[key];
+        warnings.push('Request headers stored as an encrypted headers credential');
+    }
+    return {
+        name,
+        slug,
+        kind: 'remote',
+        transport: {
+            type: 'streamable-http',
+            url: spec.url,
+            protocolMode: 'auto',
+            allowSseFallback: true,
+            headers: transportHeaders,
+        },
+        credential,
+        warnings,
+    };
+}
+function parseStdio(name, slug, spec) {
+    const command = spec.command;
+    const args = spec.args ?? [];
+    const env = spec.env ?? {};
+    const secretEnv = {};
+    const plainEnv = {};
+    for (const [key, value] of Object.entries(env)) {
+        if (SECRET_KEY_RE.test(key))
+            secretEnv[key] = value;
+        else
+            plainEnv[key] = value;
+    }
+    const warnings = [];
+    const packageName = resolvePackageName(args);
+    if (packageName !== null && PACKAGE_RUNNERS.has(command)) {
+        const known = marketCatalog.find((entry) => entry.package === packageName);
+        if (known !== undefined) {
+            warnings.push(`Matches the curated Market entry "${known.id}" — installing via Market is more reliable (version-pinned, tracked).`);
+        }
+        else {
+            warnings.push(`"${command} ${packageName}" must be resolvable inside the gateway container; the first call may be slow while it downloads.`);
+        }
+    }
+    const secretNames = Object.keys(secretEnv);
+    return {
+        name,
+        slug,
+        kind: 'home',
+        transport: { type: 'stdio', command, args, env: plainEnv, protocolMode: 'auto' },
+        credential: secretNames.length === 0
+            ? null
+            : { name, payload: { type: 'env', variables: secretEnv } },
+        warnings,
+    };
+}
+function resolvePackageName(args) {
+    const first = args[0] ?? '';
+    if (first === '' || first.startsWith('http'))
+        return null;
+    // `npx -y package`, `npx package`, `npm exec package`, `uvx package`
+    const candidate = first.startsWith('-') ? args.find((arg) => !arg.startsWith('-')) : first;
+    if (candidate === undefined || candidate === '')
+        return null;
+    return candidate.split('@')[0] ?? null;
+}
+/** Masked view for previews — never contains secret values. */
+export function toPreview(entry) {
+    const transportSummary = entry.transport.type === 'stdio'
+        ? `${entry.transport.command} ${entry.transport.args.join(' ')}`.trim()
+        : entry.transport.url;
+    let credential = null;
+    if (entry.credential !== null) {
+        const payload = entry.credential.payload;
+        const type = payload.type;
+        const fields = type === 'bearer'
+            ? [{ name: 'token', masked: true }]
+            : type === 'headers'
+                ? Object.keys(payload.headers).map((name) => ({ name, masked: true }))
+                : payload.type === 'env'
+                    ? Object.keys(payload.variables).map((name) => ({ name, masked: true }))
+                    : [];
+        credential = { name: entry.credential.name, type, fields };
+    }
+    return {
+        name: entry.name,
+        slug: entry.slug,
+        kind: entry.kind,
+        transportSummary,
+        credential,
+        warnings: entry.warnings,
+    };
+}
+//# sourceMappingURL=harness-import.js.map

package/dist/server/config/harness-import.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"harness-import.js","sourceRoot":"","sources":["../../../src/config/harness-import.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAE/C,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAErD;;;;;;;;;;;;GAYG;AAEH,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACrC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACpC,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAChD,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACjC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CACrD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,mBAAmB,CAAC;CACtD,CAAC,CAAC;AAGH,MAAM,aAAa,GAAG,0CAA0C,CAAC;AACjE,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAyB/E,MAAM,UAAU,MAAM,CAAC,IAAY;IACjC,MAAM,IAAI,GAAG,IAAI;SACd,IAAI,EAAE;SACN,WAAW,EAAE;SACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC3B,OAAO,IAAI,IAAI,KAAK,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAC/C,MAAM,MAAM,GAAG,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAChD,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE;QAC5D,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;QACrB,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,OAAO,WAAW,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QACjE,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC7B,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,MAAM,IAAI,QAAQ,CAChB,eAAe,EACf,cAAc,IAAI,qDAAqD,EACvE,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,OAAO,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,WAAW,CAClB,IAAY,EACZ,IAAY,EACZ,IAAuD;IAEvD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;IACnC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,OAAO,CAAC,aAAa,CAAC;IACrE,IAAI,UAAU,GAAqC,IAAI,CAAC;IACxD,wEAAwE;IACxE,2EAA2E;IAC3E,MAAM,gBAAgB,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC;IACxC,IAAI,OAAO,aAAa,KAAK,QAAQ,IAAI,iBAAiB,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;QAC/E,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9D,UAAU,GAAG;YACX,IAAI;YACJ,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;SACnC,CAAC;QACF,OAAO,gBAAgB,CAAC,aAAa,CAAC;QACtC,OAAO,gBAAgB,CAAC,aAAa,CAAC;QACtC,QAAQ,CAAC,IAAI,CAAC,kEAAkE,CAAC,CAAC;IACpF,CAAC;SAAM,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3C,UAAU,GAAG;YACX,IAAI;YACJ,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE;SACtC,CAAC;QACF,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC;YAAE,OAAO,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAC9E,QAAQ,CAAC,IAAI,CAAC,2DAA2D,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO;QACL,IAAI;QACJ,IAAI;QACJ,IAAI,EAAE,QAAQ;QACd,SAAS,EAAE;YACT,IAAI,EAAE,iBAAiB;YACvB,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,YAAY,EAAE,MAAM;YACpB,gBAAgB,EAAE,IAAI;YACtB,OAAO,EAAE,gBAAgB;SAC1B;QACD,UAAU;QACV,QAAQ;KACT,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CACjB,IAAY,EACZ,IAAY,EACZ,IAAwE;IAExE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;IAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;IAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC;IAC3B,MAAM,SAAS,GAA2B,EAAE,CAAC;IAC7C,MAAM,QAAQ,GAA2B,EAAE,CAAC;IAC5C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,IAAI,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,SAAS,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;;YAC/C,QAAQ,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IAC7B,CAAC;IACD,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,WAAW,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAC7C,IAAI,WAAW,KAAK,IAAI,IAAI,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QACzD,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,WAAW,CAAC,CAAC;QAC3E,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,QAAQ,CAAC,IAAI,CACX,qCAAqC,KAAK,CAAC,EAAE,uEAAuE,CACrH,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,IAAI,CACX,IAAI,OAAO,IAAI,WAAW,mGAAmG,CAC9H,CAAC;QACJ,CAAC;IACH,CAAC;IACD,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC3C,OAAO;QACL,IAAI;QACJ,IAAI;QACJ,IAAI,EAAE,MAAM;QACZ,SAAS,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE;QAChF,UAAU,EACR,WAAW,CAAC,MAAM,KAAK,CAAC;YACtB,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE;QAC9D,QAAQ;KACT,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAc;IACxC,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,KAAK,KAAK,EAAE,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1D,qEAAqE;IACrE,MAAM,SAAS,GAAG,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAC3F,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IAC7D,OAAO,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AACzC,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,SAAS,CAAC,KAA2B;IACnD,MAAM,gBAAgB,GACpB,KAAK,CAAC,SAAS,CAAC,IAAI,KAAK,OAAO;QAC9B,CAAC,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC,OAAO,IAAI,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE;QACvE,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC;IAC1B,IAAI,UAAU,GAAuC,IAAI,CAAC;IAC1D,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC;QACzC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QAC1B,MAAM,MAAM,GACV,IAAI,KAAK,QAAQ;YACf,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;YACnC,CAAC,CAAC,IAAI,KAAK,SAAS;gBAClB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;gBACtE,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,KAAK;oBACtB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;oBACxE,CAAC,CAAC,EAAE,CAAC;QACb,UAAU,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC7D,CAAC;IACD,OAAO;QACL,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,gBAAgB;QAChB,UAAU;QACV,QAAQ,EAAE,KAAK,CAAC,QAAQ;KACzB,CAAC;AACJ,CAAC"}

package/dist/server/config.d.ts

@@ -0,0 +1,20 @@
+export interface RuntimeConfig {
+    host: string;
+    port: number;
+    publicUrl: URL;
+    dataDir: string;
+    databasePath: string;
+    masterKey: string;
+    bootstrapControlKey?: string;
+    allowedHosts: string[];
+    logLevel: 'debug' | 'info' | 'warn' | 'error';
+    oauthUrlClientId: boolean;
+    webDir?: string;
+    marketDir: string;
+    uvIndexUrl?: string;
+    callsRetentionDays: number;
+    /** Seconds between automatic sweeps that refresh expiring OAuth credentials. */
+    oauthRefreshIntervalSeconds: number;
+}
+export declare function loadConfig(env?: NodeJS.ProcessEnv): RuntimeConfig;
+//# sourceMappingURL=config.d.ts.map

package/dist/server/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/config.ts"],"names":[],"mappings":"AAuDA,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,GAAG,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,QAAQ,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;IAC9C,gBAAgB,EAAE,OAAO,CAAC;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,gFAAgF;IAChF,2BAA2B,EAAE,MAAM,CAAC;CACrC;AAED,wBAAgB,UAAU,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,aAAa,CA8B9E"}

package/dist/server/config.js

@@ -0,0 +1,80 @@
+import { chmodSync, mkdirSync } from 'node:fs';
+import { resolve, join } from 'node:path';
+import { z } from 'zod';
+const publicUrlSchema = z.url().superRefine((value, context) => {
+    const url = new URL(value);
+    if (!['http:', 'https:'].includes(url.protocol)) {
+        context.addIssue({ code: 'custom', message: 'Public URL must use HTTP or HTTPS' });
+    }
+    if (url.pathname !== '/' || url.search !== '' || url.hash !== '') {
+        context.addIssue({
+            code: 'custom',
+            message: 'Public URL must be an origin without a path, query, or fragment',
+        });
+    }
+    if (url.username !== '' || url.password !== '') {
+        context.addIssue({ code: 'custom', message: 'Public URL must not contain credentials' });
+    }
+});
+const envSchema = z
+    .object({
+    TOOLHOME_HOST: z.string().default('127.0.0.1'),
+    TOOLHOME_PORT: z.coerce.number().int().min(1).max(65_535).default(3344),
+    TOOLHOME_PUBLIC_URL: publicUrlSchema.default('http://127.0.0.1:3344'),
+    TOOLHOME_DATA_DIR: z.string().default('./data'),
+    TOOLHOME_MASTER_KEY: z.string().min(32),
+    TOOLHOME_BOOTSTRAP_CONTROL_KEY: z.string().min(32).optional(),
+    TOOLHOME_ALLOWED_HOSTS: z.string().optional(),
+    TOOLHOME_LOG_LEVEL: z.enum(['debug', 'info', 'warn', 'error']).default('info'),
+    TOOLHOME_OAUTH_URL_CLIENT_ID: z.enum(['true', 'false']).default('true'),
+    TOOLHOME_WEB_DIR: z.string().optional(),
+    TOOLHOME_MARKET_DIR: z.string().optional(),
+    TOOLHOME_UV_INDEX_URL: z.preprocess((value) => (value === '' ? undefined : value), z.url().optional()),
+    TOOLHOME_CALLS_RETENTION_DAYS: z.coerce.number().int().min(0).default(30),
+    TOOLHOME_OAUTH_REFRESH_INTERVAL_SECONDS: z.coerce
+        .number()
+        .int()
+        .min(1)
+        .max(86_400)
+        .default(300),
+})
+    .superRefine((value, context) => {
+    if (value.TOOLHOME_BOOTSTRAP_CONTROL_KEY === value.TOOLHOME_MASTER_KEY) {
+        context.addIssue({
+            code: 'custom',
+            path: ['TOOLHOME_BOOTSTRAP_CONTROL_KEY'],
+            message: 'Bootstrap Control Key must differ from the master key',
+        });
+    }
+});
+export function loadConfig(env = process.env) {
+    const parsed = envSchema.parse(env);
+    const dataDir = resolve(parsed.TOOLHOME_DATA_DIR);
+    mkdirSync(dataDir, { recursive: true, mode: 0o700 });
+    chmodSync(dataDir, 0o700);
+    const bootstrap = parsed.TOOLHOME_BOOTSTRAP_CONTROL_KEY;
+    const publicUrl = new URL(parsed.TOOLHOME_PUBLIC_URL);
+    const configuredHosts = parsed.TOOLHOME_ALLOWED_HOSTS?.split(',')
+        .map((host) => host.trim())
+        .filter(Boolean) ?? [];
+    return {
+        host: parsed.TOOLHOME_HOST,
+        port: parsed.TOOLHOME_PORT,
+        publicUrl,
+        dataDir,
+        databasePath: resolve(dataDir, 'toolhome.sqlite'),
+        masterKey: parsed.TOOLHOME_MASTER_KEY,
+        ...(bootstrap === undefined ? {} : { bootstrapControlKey: bootstrap }),
+        allowedHosts: configuredHosts.length === 0 ? [publicUrl.hostname] : configuredHosts,
+        logLevel: parsed.TOOLHOME_LOG_LEVEL,
+        oauthUrlClientId: parsed.TOOLHOME_OAUTH_URL_CLIENT_ID === 'true',
+        ...(parsed.TOOLHOME_WEB_DIR === undefined ? {} : { webDir: resolve(parsed.TOOLHOME_WEB_DIR) }),
+        marketDir: resolve(parsed.TOOLHOME_MARKET_DIR ?? join(dataDir, 'market')),
+        ...(parsed.TOOLHOME_UV_INDEX_URL === undefined
+            ? {}
+            : { uvIndexUrl: parsed.TOOLHOME_UV_INDEX_URL.toString() }),
+        callsRetentionDays: parsed.TOOLHOME_CALLS_RETENTION_DAYS,
+        oauthRefreshIntervalSeconds: parsed.TOOLHOME_OAUTH_REFRESH_INTERVAL_SECONDS,
+    };
+}
+//# sourceMappingURL=config.js.map

package/dist/server/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,eAAe,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IAC7D,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3B,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QAChD,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,mCAAmC,EAAE,CAAC,CAAC;IACrF,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE,IAAI,GAAG,CAAC,IAAI,KAAK,EAAE,EAAE,CAAC;QACjE,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,iEAAiE;SAC3E,CAAC,CAAC;IACL,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,EAAE,CAAC;QAC/C,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,yCAAyC,EAAE,CAAC,CAAC;IAC3F,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,MAAM,SAAS,GAAG,CAAC;KAChB,MAAM,CAAC;IACN,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC;IAC9C,aAAa,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IACvE,mBAAmB,EAAE,eAAe,CAAC,OAAO,CAAC,uBAAuB,CAAC;IACrE,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC;IAC/C,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;IACvC,8BAA8B,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC7D,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7C,kBAAkB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IAC9E,4BAA4B,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACvE,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACvC,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1C,qBAAqB,EAAE,CAAC,CAAC,UAAU,CACjC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,EAC7C,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CACnB;IACD,6BAA6B,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACzE,uCAAuC,EAAE,CAAC,CAAC,MAAM;SAC9C,MAAM,EAAE;SACR,GAAG,EAAE;SACL,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,MAAM,CAAC;SACX,OAAO,CAAC,GAAG,CAAC;CAChB,CAAC;KACD,WAAW,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IAC9B,IAAI,KAAK,CAAC,8BAA8B,KAAK,KAAK,CAAC,mBAAmB,EAAE,CAAC;QACvE,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,gCAAgC,CAAC;YACxC,OAAO,EAAE,uDAAuD;SACjE,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAqBL,MAAM,UAAU,UAAU,CAAC,GAAG,GAAsB,OAAO,CAAC,GAAG;IAC7D,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;IAClD,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACrD,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC1B,MAAM,SAAS,GAAG,MAAM,CAAC,8BAA8B,CAAC;IACxD,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;IACtD,MAAM,eAAe,GACnB,MAAM,CAAC,sBAAsB,EAAE,KAAK,CAAC,GAAG,CAAC;SACtC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IAC3B,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,aAAa;QAC1B,IAAI,EAAE,MAAM,CAAC,aAAa;QAC1B,SAAS;QACT,OAAO;QACP,YAAY,EAAE,OAAO,CAAC,OAAO,EAAE,iBAAiB,CAAC;QACjD,SAAS,EAAE,MAAM,CAAC,mBAAmB;QACrC,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,SAAS,EAAE,CAAC;QACtE,YAAY,EAAE,eAAe,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,eAAe;QACnF,QAAQ,EAAE,MAAM,CAAC,kBAAkB;QACnC,gBAAgB,EAAE,MAAM,CAAC,4BAA4B,KAAK,MAAM;QAChE,GAAG,CAAC,MAAM,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC9F,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,mBAAmB,IAAI,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACzE,GAAG,CAAC,MAAM,CAAC,qBAAqB,KAAK,SAAS;YAC5C,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,qBAAqB,CAAC,QAAQ,EAAE,EAAE,CAAC;QAC5D,kBAAkB,EAAE,MAAM,CAAC,6BAA6B;QACxD,2BAA2B,EAAE,MAAM,CAAC,uCAAuC;KAC5E,CAAC;AACJ,CAAC"}

package/dist/server/control/client.d.ts

@@ -0,0 +1,24 @@
+import { type CliExecFrame } from '../cli-plane/frames.js';
+export interface ExecOutcomeSummary {
+    code: number | null;
+    durationMs: number;
+    result: 'ok' | 'error' | 'timeout';
+    truncated?: boolean;
+}
+export declare class ControlClient {
+    #private;
+    constructor(baseUrl: URL, apiKey: string);
+    /**
+     * Run a hosted CLI and stream its NDJSON frames to `onFrame`. Resolves with
+     * the final exit frame; rejects if the server errors or the stream ends
+     * without one. Aborting `signal` cancels the remote process.
+     */
+    execStream(slug: string, input: {
+        argv: string[];
+        stdin?: string | null;
+        timeoutMs?: number;
+        maxOutputBytes?: number;
+    }, onFrame: (frame: CliExecFrame) => void, signal?: AbortSignal): Promise<ExecOutcomeSummary>;
+    request(method: string, path: string, body?: unknown, timeoutMs?: number): Promise<unknown>;
+}
+//# sourceMappingURL=client.d.ts.map

package/dist/server/control/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../../src/control/client.ts"],"names":[],"mappings":"AACA,OAAO,EAAwB,KAAK,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAEjF,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,IAAI,GAAG,OAAO,GAAG,SAAS,CAAC;IACnC,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED,qBAAa,aAAa;;IAIxB,YAAY,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAGvC;IAED;;;;OAIG;IACG,UAAU,CACd,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE;QACL,IAAI,EAAE,MAAM,EAAE,CAAC;QACf,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACtB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,cAAc,CAAC,EAAE,MAAM,CAAC;KACzB,EACD,OAAO,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,IAAI,EACtC,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,kBAAkB,CAAC,CAoE7B;IAEK,OAAO,CACX,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE,OAAO,EACd,SAAS,SAAS,GACjB,OAAO,CAAC,OAAO,CAAC,CA+BlB;CACF"}

package/dist/server/control/client.js

@@ -0,0 +1,115 @@
+import { AppError } from '../domain/errors.js';
+import { cliNdjsonContentType } from '../cli-plane/frames.js';
+export class ControlClient {
+    #baseUrl;
+    #apiKey;
+    constructor(baseUrl, apiKey) {
+        this.#baseUrl = baseUrl;
+        this.#apiKey = apiKey;
+    }
+    /**
+     * Run a hosted CLI and stream its NDJSON frames to `onFrame`. Resolves with
+     * the final exit frame; rejects if the server errors or the stream ends
+     * without one. Aborting `signal` cancels the remote process.
+     */
+    async execStream(slug, input, onFrame, signal) {
+        const target = new URL(`/cli/${encodeURIComponent(slug)}/exec`, this.#baseUrl);
+        if (target.origin !== this.#baseUrl.origin) {
+            throw new AppError('invalid_control_path', 'CLI exec path must stay on the server origin', 400);
+        }
+        const response = await fetch(target, {
+            method: 'POST',
+            redirect: 'error',
+            signal: signal ?? AbortSignal.timeout(3_600_000),
+            headers: {
+                accept: cliNdjsonContentType,
+                authorization: `Bearer ${this.#apiKey}`,
+                'content-type': 'application/json',
+            },
+            body: JSON.stringify(input),
+        });
+        if (!response.ok || response.body === null) {
+            const value = await response.json().catch(() => null);
+            const message = value !== null && typeof value === 'object' && Reflect.get(value, 'error') !== undefined
+                ? (errorMessage(value) ?? `CLI exec returned ${response.status}`)
+                : `CLI exec returned ${response.status}`;
+            throw new AppError('control_api_error', message, response.status, { response: value });
+        }
+        const reader = response.body.getReader();
+        const decoder = new TextDecoder();
+        let buffer = '';
+        let outcome = null;
+        const consume = async () => {
+            for (;;) {
+                const { done, value } = await reader.read();
+                if (done)
+                    break;
+                buffer += decoder.decode(value, { stream: true });
+                let newline = buffer.indexOf('\n');
+                while (newline !== -1) {
+                    const line = buffer.slice(0, newline).trim();
+                    buffer = buffer.slice(newline + 1);
+                    if (line !== '') {
+                        const frame = JSON.parse(line);
+                        onFrame(frame);
+                        if (frame.type === 'exit') {
+                            outcome = {
+                                code: frame.code,
+                                durationMs: frame.durationMs,
+                                result: frame.result,
+                                ...(frame.truncated ? { truncated: true } : {}),
+                            };
+                        }
+                    }
+                    newline = buffer.indexOf('\n');
+                }
+            }
+        };
+        try {
+            await consume();
+        }
+        finally {
+            reader.releaseLock();
+        }
+        if (outcome === null) {
+            throw new AppError('cli_exec_no_exit', 'CLI exec stream ended without an exit frame', 502);
+        }
+        return outcome;
+    }
+    async request(method, path, body, timeoutMs = 30_000) {
+        const target = new URL(path, this.#baseUrl);
+        if (target.origin !== this.#baseUrl.origin ||
+            !(target.pathname.startsWith('/api/v1/') || target.pathname.startsWith('/cli/'))) {
+            throw new AppError('invalid_control_path', 'Control API path must stay under /api/v1/ or /cli/', 400);
+        }
+        const response = await fetch(target, {
+            method,
+            redirect: 'error',
+            signal: AbortSignal.timeout(timeoutMs),
+            headers: {
+                accept: 'application/json',
+                authorization: `Bearer ${this.#apiKey}`,
+                ...(body === undefined ? {} : { 'content-type': 'application/json' }),
+            },
+            ...(body === undefined ? {} : { body: JSON.stringify(body) }),
+        });
+        const value = await response
+            .json()
+            .catch(() => ({ error: { message: response.statusText } }));
+        if (!response.ok) {
+            const message = errorMessage(value) ?? `Control API returned ${response.status}`;
+            throw new AppError('control_api_error', message, response.status, { response: value });
+        }
+        return value;
+    }
+}
+function errorMessage(value) {
+    if (value === null || typeof value !== 'object')
+        return null;
+    const error = Reflect.get(value, 'error');
+    if (error === null || typeof error !== 'object')
+        return null;
+    const message = Reflect.get(error, 'message');
+    return typeof message === 'string' ? message : null;
+}
+//# sourceMappingURL=client.js.map

package/dist/server/control/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../../src/control/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC/C,OAAO,EAAE,oBAAoB,EAAqB,MAAM,wBAAwB,CAAC;AASjF,MAAM,OAAO,aAAa;IACf,QAAQ,CAAM;IACd,OAAO,CAAS;IAEzB,YAAY,OAAY,EAAE,MAAc;QACtC,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;QACxB,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;IACxB,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,UAAU,CACd,IAAY,EACZ,KAKC,EACD,OAAsC,EACtC,MAAoB;QAEpB,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,QAAQ,kBAAkB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC/E,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;YAC3C,MAAM,IAAI,QAAQ,CAChB,sBAAsB,EACtB,8CAA8C,EAC9C,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE;YACnC,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,OAAO;YACjB,MAAM,EAAE,MAAM,IAAI,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC;YAChD,OAAO,EAAE;gBACP,MAAM,EAAE,oBAAoB;gBAC5B,aAAa,EAAE,UAAU,IAAI,CAAC,OAAO,EAAE;gBACvC,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;SAC5B,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YAC3C,MAAM,KAAK,GAAY,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YAC/D,MAAM,OAAO,GACX,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,SAAS;gBACtF,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,qBAAqB,QAAQ,CAAC,MAAM,EAAE,CAAC;gBACjE,CAAC,CAAC,qBAAqB,QAAQ,CAAC,MAAM,EAAE,CAAC;YAC7C,MAAM,IAAI,QAAQ,CAAC,mBAAmB,EAAE,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QACzF,CAAC;QAED,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;QAClC,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,OAAO,GAA8B,IAAI,CAAC;QAC9C,MAAM,OAAO,GAAG,KAAK,IAAmB,EAAE;YACxC,SAAS,CAAC;gBACR,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;gBAC5C,IAAI,IAAI;oBAAE,MAAM;gBAChB,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;gBAClD,IAAI,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBACnC,OAAO,OAAO,KAAK,CAAC,CAAC,EAAE,CAAC;oBACtB,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;oBAC7C,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;oBACnC,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;wBAChB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAiB,CAAC;wBAC/C,OAAO,CAAC,KAAK,CAAC,CAAC;wBACf,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;4BAC1B,OAAO,GAAG;gCACR,IAAI,EAAE,KAAK,CAAC,IAAI;gCAChB,UAAU,EAAE,KAAK,CAAC,UAAU;gCAC5B,MAAM,EAAE,KAAK,CAAC,MAAM;gCACpB,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;6BAChD,CAAC;wBACJ,CAAC;oBACH,CAAC;oBACD,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBACjC,CAAC;YACH,CAAC;QACH,CAAC,CAAC;QAEF,IAAI,CAAC;YACH,MAAM,OAAO,EAAE,CAAC;QAClB,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,WAAW,EAAE,CAAC;QACvB,CAAC;QACD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,MAAM,IAAI,QAAQ,CAAC,kBAAkB,EAAE,6CAA6C,EAAE,GAAG,CAAC,CAAC;QAC7F,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,OAAO,CACX,MAAc,EACd,IAAY,EACZ,IAAc,EACd,SAAS,GAAG,MAAM;QAElB,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC5C,IACE,MAAM,CAAC,MAAM,KAAK,IAAI,CAAC,QAAQ,CAAC,MAAM;YACtC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,EAChF,CAAC;YACD,MAAM,IAAI,QAAQ,CAChB,sBAAsB,EACtB,oDAAoD,EACpD,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE;YACnC,MAAM;YACN,QAAQ,EAAE,OAAO;YACjB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC;YACtC,OAAO,EAAE;gBACP,MAAM,EAAE,kBAAkB;gBAC1B,aAAa,EAAE,UAAU,IAAI,CAAC,OAAO,EAAE;gBACvC,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;aACtE;YACD,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;SAC9D,CAAC,CAAC;QACH,MAAM,KAAK,GAAY,MAAM,QAAQ;aAClC,IAAI,EAAE;aACN,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,QAAQ,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC;QAC9D,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,wBAAwB,QAAQ,CAAC,MAAM,EAAE,CAAC;YACjF,MAAM,IAAI,QAAQ,CAAC,mBAAmB,EAAE,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QACzF,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;CACF;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC7D,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC1C,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC7D,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IAC9C,OAAO,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;AACtD,CAAC"}

package/dist/server/control/control-api.d.ts

@@ -0,0 +1,39 @@
+import type { Logger } from '../observability/logger.js';
+import type { AuthService } from '../security/auth-service.js';
+import { ControlSessionService } from '../security/control-session.js';
+import type { Store } from '../storage/store.js';
+import type { ControlService } from './control-service.js';
+import type { MarketService } from '../market/market-service.js';
+import type { CliService } from '../cli-plane/cli-service.js';
+interface HonoLike {
+    use(path: string, handler: (context: HonoContext, next: () => Promise<void>) => Promise<Response | void>): void;
+    get(path: string, handler: (context: HonoContext) => Response | Promise<Response>): void;
+    post(path: string, handler: (context: HonoContext) => Response | Promise<Response>): void;
+    patch(path: string, handler: (context: HonoContext) => Response | Promise<Response>): void;
+    delete(path: string, handler: (context: HonoContext) => Response | Promise<Response>): void;
+}
+interface HonoContext {
+    req: {
+        raw: Request;
+        path: string;
+        param(name: string): string;
+        query(name: string): string | undefined;
+        json(): Promise<unknown>;
+    };
+    set(key: string, value: unknown): void;
+    get<T>(key: string): T | undefined;
+}
+export declare function mountControlApi(app: HonoLike, options: {
+    service: ControlService;
+    auth: AuthService;
+    sessions: ControlSessionService;
+    store: Store;
+    publicUrl: URL;
+    secureCookies: boolean;
+    logger: Logger;
+    market?: MarketService;
+    cli?: CliService;
+}): void;
+export declare function errorResponse(error: unknown, logger: Logger): Response;
+export {};
+//# sourceMappingURL=control-api.d.ts.map

package/dist/server/control/control-api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"control-api.d.ts","sourceRoot":"","sources":["../../../src/control/control-api.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAE/D,OAAO,EAAE,qBAAqB,EAAe,MAAM,gCAAgC,CAAC;AACpF,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AACjE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAS9D,UAAU,QAAQ;IAChB,GAAG,CACD,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,CAAC,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,GACrF,IAAI,CAAC;IACR,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,OAAO,EAAE,WAAW,KAAK,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC;IACzF,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,OAAO,EAAE,WAAW,KAAK,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC;IAC1F,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,OAAO,EAAE,WAAW,KAAK,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC;IAC3F,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,OAAO,EAAE,WAAW,KAAK,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC;CAC7F;AAED,UAAU,WAAW;IACnB,GAAG,EAAE;QACH,GAAG,EAAE,OAAO,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;QAC5B,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;QACxC,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;KAC1B,CAAC;IACF,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,IAAI,CAAC;IACvC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,CAAC,GAAG,SAAS,CAAC;CACpC;AAED,wBAAgB,eAAe,CAC7B,GAAG,EAAE,QAAQ,EACb,OAAO,EAAE;IACP,OAAO,EAAE,cAAc,CAAC;IACxB,IAAI,EAAE,WAAW,CAAC;IAClB,QAAQ,EAAE,qBAAqB,CAAC;IAChC,KAAK,EAAE,KAAK,CAAC;IACb,SAAS,EAAE,GAAG,CAAC;IACf,aAAa,EAAE,OAAO,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB,GAAG,CAAC,EAAE,UAAU,CAAC;CAClB,GACA,IAAI,CAgZN;AAyDD,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,QAAQ,CAiCtE"}