trainbud 0.5.0

package/dist/history/store.d.ts

@@ -0,0 +1,112 @@
+import Database from "better-sqlite3";
+import type { ActivitySummary } from "../garmin/types.js";
+import { type IngestOutcome, type IngestSource, type MetricKind } from "./schema.js";
+export interface MetricPoint {
+    date: string;
+    value: number;
+}
+export interface StoredActivity {
+    activityId: number;
+    date: string;
+    startTimeLocal: string;
+    name: string;
+    type: string;
+    distanceMeters: number | null;
+    durationSeconds: number | null;
+    avgHr: number | null;
+    maxHr: number | null;
+    elevationGainMeters: number | null;
+    calories: number | null;
+    averageSpeedMps: number | null;
+}
+export interface HistoryStats {
+    metricRows: number;
+    rawRows: number;
+    activityRows: number;
+    oldestDate: string | null;
+    newestDate: string | null;
+    /** Days asked about that Garmin had nothing for -- usually pre-purchase. */
+    emptyDays: number;
+}
+export declare function openHistoryDb(databasePath?: string): Database.Database;
+/** The same handle, for the sibling modules that share this database. */
+export declare function getHistoryDb(): Database.Database;
+export declare function closeHistoryDb(): void;
+export declare function putMetrics(date: string, metrics: Array<{
+    kind: MetricKind;
+    value: number;
+}>, fetchedAt?: number): void;
+/**
+ * Every measurement recorded for one day, by kind.
+ *
+ * The thin half of the store fallback: `raw_payload` is bounded to 180 days,
+ * these rows are never pruned, so this is what can still answer for a day
+ * older than the archive. It carries the numbers the detectors need and none of
+ * the detail behind them, which is the honest trade -- the alternative was
+ * having nothing to say at all.
+ */
+export declare function getMetricsOn(date: string): Map<MetricKind, number>;
+/**
+ * The most recent dates the store holds anything for, newest first.
+ *
+ * Needed because every tool's window is anchored to today. With the record
+ * ending 2026-08-21 and Garmin unreachable on 2026-09-03, "the last 7 nights"
+ * selects seven days the store has never had a row for, and the answer comes
+ * back empty while seventy nights sit in the table. The window has to be able
+ * to move to where the data is, and then say that it did.
+ *
+ * Union of both halves of the store: `raw_payload` is per-source and bounded to
+ * 180 days, `daily_metric` is shared and never pruned. A date that turns out to
+ * hold nothing for the source asked about is dropped by the caller's mapper.
+ */
+export declare function newestStoredDates(source: IngestSource, limit: number): string[];
+export declare function getMetricSeries(kind: MetricKind, startDate: string, endDate: string): MetricPoint[];
+export declare function appendRawPayload(date: string, source: IngestSource, payload: unknown, fetchedAt?: number): void;
+/**
+ * How many revisions of one (date, source) are worth keeping.
+ *
+ * The archive exists because Garmin restates data -- a sleep score finalises
+ * hours after waking, VO2 max is recomputed after a qualifying activity -- and
+ * an archive that overwrote would hide the revision worth seeing. But the table
+ * was append-only with no ceiling at all, and every backfill re-writes every day
+ * it touches: a nightly catch-up over a year of history adds a row per day per
+ * source per run, forever. Three revisions keep the restatement visible; the
+ * fourth only records that a scheduler ran.
+ */
+export declare const RAW_REVISIONS_KEPT = 3;
+/**
+ * Age past which a raw payload is dropped entirely. The derived rows --
+ * daily_metric, activity, ingest_day -- are never touched by pruning, so
+ * history and every baseline computed from it survive intact. What is lost is
+ * only the ability to re-derive a day older than this from the original JSON.
+ */
+export declare const RAW_RETENTION_DAYS = 180;
+export interface RawPruneResult {
+    /** Rows dropped for being older than the retention window. */
+    agedOut: number;
+    /** Rows dropped for being the fourth or later revision of one day. */
+    supersededRevisions: number;
+}
+/**
+ * Bound the raw archive. Safe to call repeatedly; it is a no-op once the table
+ * is already within both limits.
+ */
+export declare function pruneRawPayloads(now?: number, retentionDays?: number, revisionsKept?: number): RawPruneResult;
+export declare function rawPayloadRevisions(date: string, source: IngestSource): Array<{
+    fetchedAt: number;
+    json: string;
+}>;
+export declare function markIngested(date: string, source: IngestSource, outcome: IngestOutcome, fetchedAt?: number): void;
+export declare function getIngestCheckpoint(date: string, source: IngestSource): {
+    fetchedAt: number;
+    outcome: IngestOutcome;
+} | null;
+/** Every checkpointed date for a source, for the ingest planner. */
+export declare function listIngestedDates(source: IngestSource): Map<string, {
+    fetchedAt: number;
+    outcome: IngestOutcome;
+}>;
+export declare function putActivities(activities: ActivitySummary[], fetchedAt?: number): void;
+export declare function getActivitiesBetween(startDate: string, endDate: string): StoredActivity[];
+export declare function historyStats(): HistoryStats;
+//# sourceMappingURL=store.d.ts.map

package/dist/history/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/history/store.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AAItC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAG1D,OAAO,EAEL,KAAK,aAAa,EAClB,KAAK,YAAY,EACjB,KAAK,UAAU,EAChB,MAAM,aAAa,CAAC;AASrB,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC;AAED,MAAM,WAAW,YAAY;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,4EAA4E;IAC5E,SAAS,EAAE,MAAM,CAAC;CACnB;AAQD,wBAAgB,aAAa,CAAC,YAAY,SAAuB,GAAG,QAAQ,CAAC,QAAQ,CAepF;AAMD,yEAAyE;AACzE,wBAAgB,YAAY,IAAI,QAAQ,CAAC,QAAQ,CAEhD;AAED,wBAAgB,cAAc,IAAI,IAAI,CAKrC;AAQD,wBAAgB,UAAU,CACxB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,KAAK,CAAC;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,EACnD,SAAS,SAAe,GACvB,IAAI,CA2BN;AAED;;;;;;;;GAQG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,CAMlE;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAc/E;AAED,wBAAgB,eAAe,CAC7B,IAAI,EAAE,UAAU,EAChB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,GACd,WAAW,EAAE,CAQf;AAID,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,YAAY,EACpB,OAAO,EAAE,OAAO,EAChB,SAAS,SAAe,GACvB,IAAI,CAMN;AAED;;;;;;;;;;GAUG;AACH,eAAO,MAAM,kBAAkB,IAAI,CAAC;AAEpC;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,MAAM,CAAC;AAEtC,MAAM,WAAW,cAAc;IAC7B,8DAA8D;IAC9D,OAAO,EAAE,MAAM,CAAC;IAChB,sEAAsE;IACtE,mBAAmB,EAAE,MAAM,CAAC;CAC7B;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAC9B,GAAG,SAAe,EAClB,aAAa,SAAqB,EAClC,aAAa,SAAqB,GACjC,cAAc,CA6BhB;AAED,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,YAAY,GACnB,KAAK,CAAC;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAQ5C;AAID,wBAAgB,YAAY,CAC1B,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,YAAY,EACpB,OAAO,EAAE,aAAa,EACtB,SAAS,SAAe,GACvB,IAAI,CAUN;AAED,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,YAAY,GACnB;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,aAAa,CAAA;CAAE,GAAG,IAAI,CAQtD;AAED,oEAAoE;AACpE,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,YAAY,GAAG,GAAG,CAAC,MAAM,EAAE;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,aAAa,CAAA;CAAE,CAAC,CAQlH;AAWD,wBAAgB,aAAa,CAC3B,UAAU,EAAE,eAAe,EAAE,EAC7B,SAAS,SAAe,GACvB,IAAI,CA+CN;AAED,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,cAAc,EAAE,CAqBzF;AAID,wBAAgB,YAAY,IAAI,YAAY,CAwC3C"}

package/dist/history/store.js

@@ -0,0 +1,282 @@
+import Database from "better-sqlite3";
+import fs from "node:fs";
+import path from "node:path";
+import { appConfig } from "../config.js";
+import { parseActivityLocalDateTime } from "../utils/helpers.js";
+import { restrictExistingFile } from "../utils/secretFile.js";
+import { HISTORY_SCHEMA, } from "./schema.js";
+let db = null;
+function defaultHistoryPath() {
+    return path.resolve(path.dirname(appConfig.cachePath), "history.db");
+}
+export function openHistoryDb(databasePath = defaultHistoryPath()) {
+    if (db) {
+        return db;
+    }
+    fs.mkdirSync(path.dirname(databasePath), { recursive: true });
+    db = new Database(databasePath);
+    // A year of the user's sleep, heart rate and HRV, plus every raw Connect
+    // response behind it. `app.db` was hardened for holding an API key and this
+    // was left at better-sqlite3's default 0644 -- readable by every account on
+    // the machine. It is the most personal file the app writes.
+    restrictExistingFile(databasePath);
+    db.exec(HISTORY_SCHEMA);
+    return db;
+}
+function getDb() {
+    return db ?? openHistoryDb();
+}
+/** The same handle, for the sibling modules that share this database. */
+export function getHistoryDb() {
+    return getDb();
+}
+export function closeHistoryDb() {
+    if (db) {
+        db.close();
+        db = null;
+    }
+}
+function nowSeconds() {
+    return Math.floor(Date.now() / 1000);
+}
+// SECTION: Metrics
+export function putMetrics(date, metrics, fetchedAt = nowSeconds()) {
+    if (metrics.length === 0) {
+        return;
+    }
+    const statement = getDb().prepare(`INSERT INTO daily_metric (date, kind, value, fetched_at)
+     VALUES (?, ?, ?, ?)
+     ON CONFLICT(date, kind) DO UPDATE SET
+       value = excluded.value,
+       fetched_at = excluded.fetched_at`);
+    const writeAll = getDb().transaction((rows) => {
+        for (const row of rows) {
+            // A non-finite value is not a measurement. NaN reaching a store is how
+            // the recovery score spent months rendering as "null/100" -- guard at
+            // the boundary rather than discovering it three layers up.
+            if (Number.isFinite(row.value)) {
+                statement.run(date, row.kind, row.value, fetchedAt);
+            }
+        }
+    });
+    writeAll(metrics);
+}
+/**
+ * Every measurement recorded for one day, by kind.
+ *
+ * The thin half of the store fallback: `raw_payload` is bounded to 180 days,
+ * these rows are never pruned, so this is what can still answer for a day
+ * older than the archive. It carries the numbers the detectors need and none of
+ * the detail behind them, which is the honest trade -- the alternative was
+ * having nothing to say at all.
+ */
+export function getMetricsOn(date) {
+    const rows = getDb()
+        .prepare("SELECT kind, value FROM daily_metric WHERE date = ?")
+        .all(date);
+    return new Map(rows.map((row) => [row.kind, row.value]));
+}
+/**
+ * The most recent dates the store holds anything for, newest first.
+ *
+ * Needed because every tool's window is anchored to today. With the record
+ * ending 2026-08-21 and Garmin unreachable on 2026-09-03, "the last 7 nights"
+ * selects seven days the store has never had a row for, and the answer comes
+ * back empty while seventy nights sit in the table. The window has to be able
+ * to move to where the data is, and then say that it did.
+ *
+ * Union of both halves of the store: `raw_payload` is per-source and bounded to
+ * 180 days, `daily_metric` is shared and never pruned. A date that turns out to
+ * hold nothing for the source asked about is dropped by the caller's mapper.
+ */
+export function newestStoredDates(source, limit) {
+    const rows = getDb()
+        .prepare(`SELECT date FROM (
+         SELECT DISTINCT date FROM raw_payload WHERE source = ?
+         UNION
+         SELECT DISTINCT date FROM daily_metric
+       )
+       ORDER BY date DESC
+       LIMIT ?`)
+        .all(source, limit);
+    return rows.map((row) => row.date);
+}
+export function getMetricSeries(kind, startDate, endDate) {
+    return getDb()
+        .prepare(`SELECT date, value FROM daily_metric
+       WHERE kind = ? AND date >= ? AND date <= ?
+       ORDER BY date ASC`)
+        .all(kind, startDate, endDate);
+}
+// SECTION: Raw archive
+export function appendRawPayload(date, source, payload, fetchedAt = nowSeconds()) {
+    getDb()
+        .prepare("INSERT INTO raw_payload (date, source, fetched_at, json) VALUES (?, ?, ?, ?)")
+        .run(date, source, fetchedAt, JSON.stringify(payload ?? null));
+}
+/**
+ * How many revisions of one (date, source) are worth keeping.
+ *
+ * The archive exists because Garmin restates data -- a sleep score finalises
+ * hours after waking, VO2 max is recomputed after a qualifying activity -- and
+ * an archive that overwrote would hide the revision worth seeing. But the table
+ * was append-only with no ceiling at all, and every backfill re-writes every day
+ * it touches: a nightly catch-up over a year of history adds a row per day per
+ * source per run, forever. Three revisions keep the restatement visible; the
+ * fourth only records that a scheduler ran.
+ */
+export const RAW_REVISIONS_KEPT = 3;
+/**
+ * Age past which a raw payload is dropped entirely. The derived rows --
+ * daily_metric, activity, ingest_day -- are never touched by pruning, so
+ * history and every baseline computed from it survive intact. What is lost is
+ * only the ability to re-derive a day older than this from the original JSON.
+ */
+export const RAW_RETENTION_DAYS = 180;
+/**
+ * Bound the raw archive. Safe to call repeatedly; it is a no-op once the table
+ * is already within both limits.
+ */
+export function pruneRawPayloads(now = nowSeconds(), retentionDays = RAW_RETENTION_DAYS, revisionsKept = RAW_REVISIONS_KEPT) {
+    const database = getDb();
+    const cutoff = now - retentionDays * 86_400;
+    return database.transaction(() => {
+        const agedOut = database
+            .prepare("DELETE FROM raw_payload WHERE fetched_at < ?")
+            .run(cutoff).changes;
+        // Rank within each (date, source) newest-first and drop everything past the
+        // cut. Ordering by id as well as fetched_at keeps this deterministic when
+        // two writes land in the same second, which a batched backfill does often.
+        const supersededRevisions = database
+            .prepare(`DELETE FROM raw_payload
+         WHERE id IN (
+           SELECT id FROM (
+             SELECT id, ROW_NUMBER() OVER (
+               PARTITION BY date, source ORDER BY fetched_at DESC, id DESC
+             ) AS rank
+             FROM raw_payload
+           )
+           WHERE rank > ?
+         )`)
+            .run(revisionsKept).changes;
+        return { agedOut, supersededRevisions };
+    })();
+}
+export function rawPayloadRevisions(date, source) {
+    return getDb()
+        .prepare(`SELECT fetched_at AS fetchedAt, json FROM raw_payload
+       WHERE date = ? AND source = ?
+       ORDER BY fetched_at ASC, id ASC`)
+        .all(date, source);
+}
+// SECTION: Ingest checkpoints
+export function markIngested(date, source, outcome, fetchedAt = nowSeconds()) {
+    getDb()
+        .prepare(`INSERT INTO ingest_day (date, source, fetched_at, outcome)
+       VALUES (?, ?, ?, ?)
+       ON CONFLICT(date, source) DO UPDATE SET
+         fetched_at = excluded.fetched_at,
+         outcome = excluded.outcome`)
+        .run(date, source, fetchedAt, outcome);
+}
+export function getIngestCheckpoint(date, source) {
+    const row = getDb()
+        .prepare("SELECT fetched_at AS fetchedAt, outcome FROM ingest_day WHERE date = ? AND source = ?")
+        .get(date, source);
+    return row ?? null;
+}
+/** Every checkpointed date for a source, for the ingest planner. */
+export function listIngestedDates(source) {
+    const rows = getDb()
+        .prepare("SELECT date, fetched_at AS fetchedAt, outcome FROM ingest_day WHERE source = ?")
+        .all(source);
+    return new Map(rows.map((row) => [row.date, { fetchedAt: row.fetchedAt, outcome: row.outcome }]));
+}
+// SECTION: Activities
+function activityDate(activity) {
+    return (parseActivityLocalDateTime(activity.startTimeLocal).toISODate() ??
+        activity.startTimeLocal.slice(0, 10));
+}
+export function putActivities(activities, fetchedAt = nowSeconds()) {
+    if (activities.length === 0) {
+        return;
+    }
+    const statement = getDb().prepare(`INSERT INTO activity (
+       activity_id, date, start_time_local, name, type,
+       distance_m, duration_s, avg_hr, max_hr,
+       elevation_gain_m, calories, avg_speed_mps, fetched_at
+     ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+     ON CONFLICT(activity_id) DO UPDATE SET
+       date = excluded.date,
+       start_time_local = excluded.start_time_local,
+       name = excluded.name,
+       type = excluded.type,
+       distance_m = excluded.distance_m,
+       duration_s = excluded.duration_s,
+       avg_hr = excluded.avg_hr,
+       max_hr = excluded.max_hr,
+       elevation_gain_m = excluded.elevation_gain_m,
+       calories = excluded.calories,
+       avg_speed_mps = excluded.avg_speed_mps,
+       fetched_at = excluded.fetched_at`);
+    const writeAll = getDb().transaction((rows) => {
+        for (const activity of rows) {
+            statement.run(activity.activityId, activityDate(activity), activity.startTimeLocal, activity.name, activity.type, activity.distanceMeters, activity.durationSeconds, activity.averageHeartRate, activity.maxHeartRate, activity.elevationGainMeters, activity.calories, activity.averageSpeedMps, fetchedAt);
+        }
+    });
+    writeAll(activities);
+}
+export function getActivitiesBetween(startDate, endDate) {
+    return getDb()
+        .prepare(`SELECT
+         activity_id       AS activityId,
+         date,
+         start_time_local  AS startTimeLocal,
+         name,
+         type,
+         distance_m        AS distanceMeters,
+         duration_s        AS durationSeconds,
+         avg_hr            AS avgHr,
+         max_hr            AS maxHr,
+         elevation_gain_m  AS elevationGainMeters,
+         calories,
+         avg_speed_mps     AS averageSpeedMps
+       FROM activity
+       WHERE date >= ? AND date <= ?
+       ORDER BY start_time_local ASC`)
+        .all(startDate, endDate);
+}
+// SECTION: Stats
+export function historyStats() {
+    const database = getDb();
+    const count = (table) => database.prepare(`SELECT COUNT(*) AS count FROM ${table}`).get().count;
+    const span = database
+        .prepare("SELECT MIN(date) AS oldest, MAX(date) AS newest FROM daily_metric")
+        .get();
+    // Days, not rows. `ingest_day` is keyed (date, source) across six sources, so
+    // counting rows reported "Days Garmin had no data for: 1590" on a store
+    // covering 366 dates -- four and a half years' worth, from a line whose whole
+    // job is to reassure someone that a short span is Garmin's fault rather than a
+    // broken backfill. A number that cannot be a number of days does the opposite.
+    //
+    // A day Garmin had no data for is a date where no source returned data AND at
+    // least one said so. A date whose only checkpoints are errors is a day nobody
+    // managed to ask about, which is a different fact and stays out of this count.
+    const emptyDays = database
+        .prepare(`SELECT COUNT(*) AS count FROM (
+           SELECT date
+           FROM ingest_day
+           GROUP BY date
+           HAVING SUM(outcome = 'data') = 0 AND SUM(outcome = 'empty') > 0
+         )`)
+        .get().count;
+    return {
+        metricRows: count("daily_metric"),
+        rawRows: count("raw_payload"),
+        activityRows: count("activity"),
+        oldestDate: span.oldest,
+        newestDate: span.newest,
+        emptyDays,
+    };
+}
+//# sourceMappingURL=store.js.map

package/dist/history/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/history/store.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AACtC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAEzC,OAAO,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAC;AACjE,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EACL,cAAc,GAIf,MAAM,aAAa,CAAC;AAuCrB,IAAI,EAAE,GAA6B,IAAI,CAAC;AAExC,SAAS,kBAAkB;IACzB,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,YAAY,CAAC,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,YAAY,GAAG,kBAAkB,EAAE;IAC/D,IAAI,EAAE,EAAE,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9D,EAAE,GAAG,IAAI,QAAQ,CAAC,YAAY,CAAC,CAAC;IAEhC,yEAAyE;IACzE,4EAA4E;IAC5E,4EAA4E;IAC5E,4DAA4D;IAC5D,oBAAoB,CAAC,YAAY,CAAC,CAAC;IACnC,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IACxB,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,KAAK;IACZ,OAAO,EAAE,IAAI,aAAa,EAAE,CAAC;AAC/B,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,YAAY;IAC1B,OAAO,KAAK,EAAE,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,IAAI,EAAE,EAAE,CAAC;QACP,EAAE,CAAC,KAAK,EAAE,CAAC;QACX,EAAE,GAAG,IAAI,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,UAAU;IACjB,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;AACvC,CAAC;AAED,mBAAmB;AAEnB,MAAM,UAAU,UAAU,CACxB,IAAY,EACZ,OAAmD,EACnD,SAAS,GAAG,UAAU,EAAE;IAExB,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO;IACT,CAAC;IAED,MAAM,SAAS,GAAG,KAAK,EAAE,CAAC,OAAO,CAC/B;;;;wCAIoC,CACrC,CAAC;IAEF,MAAM,QAAQ,GAAG,KAAK,EAAE,CAAC,WAAW,CAClC,CAAC,IAAgD,EAAE,EAAE;QACnD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,uEAAuE;YACvE,sEAAsE;YACtE,2DAA2D;YAC3D,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC/B,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;YACtD,CAAC;QACH,CAAC;IACH,CAAC,CACF,CAAC;IAEF,QAAQ,CAAC,OAAO,CAAC,CAAC;AACpB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,MAAM,IAAI,GAAG,KAAK,EAAE;SACjB,OAAO,CAAC,qDAAqD,CAAC;SAC9D,GAAG,CAAC,IAAI,CAA+C,CAAC;IAE3D,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAoB,EAAE,KAAa;IACnE,MAAM,IAAI,GAAG,KAAK,EAAE;SACjB,OAAO,CACN;;;;;;eAMS,CACV;SACA,GAAG,CAAC,MAAM,EAAE,KAAK,CAA4B,CAAC;IAEjD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,IAAgB,EAChB,SAAiB,EACjB,OAAe;IAEf,OAAO,KAAK,EAAE;SACX,OAAO,CACN;;yBAEmB,CACpB;SACA,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,CAAkB,CAAC;AACpD,CAAC;AAED,uBAAuB;AAEvB,MAAM,UAAU,gBAAgB,CAC9B,IAAY,EACZ,MAAoB,EACpB,OAAgB,EAChB,SAAS,GAAG,UAAU,EAAE;IAExB,KAAK,EAAE;SACJ,OAAO,CACN,8EAA8E,CAC/E;SACA,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC;AACnE,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC;AAEpC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAStC;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAC9B,GAAG,GAAG,UAAU,EAAE,EAClB,aAAa,GAAG,kBAAkB,EAClC,aAAa,GAAG,kBAAkB;IAElC,MAAM,QAAQ,GAAG,KAAK,EAAE,CAAC;IACzB,MAAM,MAAM,GAAG,GAAG,GAAG,aAAa,GAAG,MAAM,CAAC;IAE5C,OAAO,QAAQ,CAAC,WAAW,CAAC,GAAmB,EAAE;QAC/C,MAAM,OAAO,GAAG,QAAQ;aACrB,OAAO,CAAC,8CAA8C,CAAC;aACvD,GAAG,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;QAEvB,4EAA4E;QAC5E,0EAA0E;QAC1E,2EAA2E;QAC3E,MAAM,mBAAmB,GAAG,QAAQ;aACjC,OAAO,CACN;;;;;;;;;WASG,CACJ;aACA,GAAG,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC;QAE9B,OAAO,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC;IAC1C,CAAC,CAAC,EAAE,CAAC;AACP,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,IAAY,EACZ,MAAoB;IAEpB,OAAO,KAAK,EAAE;SACX,OAAO,CACN;;uCAEiC,CAClC;SACA,GAAG,CAAC,IAAI,EAAE,MAAM,CAA+C,CAAC;AACrE,CAAC;AAED,8BAA8B;AAE9B,MAAM,UAAU,YAAY,CAC1B,IAAY,EACZ,MAAoB,EACpB,OAAsB,EACtB,SAAS,GAAG,UAAU,EAAE;IAExB,KAAK,EAAE;SACJ,OAAO,CACN;;;;oCAI8B,CAC/B;SACA,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,IAAY,EACZ,MAAoB;IAEpB,MAAM,GAAG,GAAG,KAAK,EAAE;SAChB,OAAO,CACN,uFAAuF,CACxF;SACA,GAAG,CAAC,IAAI,EAAE,MAAM,CAA8D,CAAC;IAElF,OAAO,GAAG,IAAI,IAAI,CAAC;AACrB,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,iBAAiB,CAAC,MAAoB;IACpD,MAAM,IAAI,GAAG,KAAK,EAAE;SACjB,OAAO,CACN,gFAAgF,CACjF;SACA,GAAG,CAAC,MAAM,CAAuE,CAAC;IAErF,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;AACpG,CAAC;AAED,sBAAsB;AAEtB,SAAS,YAAY,CAAC,QAAyB;IAC7C,OAAO,CACL,0BAA0B,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,SAAS,EAAE;QAC/D,QAAQ,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CACrC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,UAA6B,EAC7B,SAAS,GAAG,UAAU,EAAE;IAExB,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO;IACT,CAAC;IAED,MAAM,SAAS,GAAG,KAAK,EAAE,CAAC,OAAO,CAC/B;;;;;;;;;;;;;;;;;wCAiBoC,CACrC,CAAC;IAEF,MAAM,QAAQ,GAAG,KAAK,EAAE,CAAC,WAAW,CAAC,CAAC,IAAuB,EAAE,EAAE;QAC/D,KAAK,MAAM,QAAQ,IAAI,IAAI,EAAE,CAAC;YAC5B,SAAS,CAAC,GAAG,CACX,QAAQ,CAAC,UAAU,EACnB,YAAY,CAAC,QAAQ,CAAC,EACtB,QAAQ,CAAC,cAAc,EACvB,QAAQ,CAAC,IAAI,EACb,QAAQ,CAAC,IAAI,EACb,QAAQ,CAAC,cAAc,EACvB,QAAQ,CAAC,eAAe,EACxB,QAAQ,CAAC,gBAAgB,EACzB,QAAQ,CAAC,YAAY,EACrB,QAAQ,CAAC,mBAAmB,EAC5B,QAAQ,CAAC,QAAQ,EACjB,QAAQ,CAAC,eAAe,EACxB,SAAS,CACV,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,UAAU,CAAC,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,SAAiB,EAAE,OAAe;IACrE,OAAO,KAAK,EAAE;SACX,OAAO,CACN;;;;;;;;;;;;;;;qCAe+B,CAChC;SACA,GAAG,CAAC,SAAS,EAAE,OAAO,CAAqB,CAAC;AACjD,CAAC;AAED,iBAAiB;AAEjB,MAAM,UAAU,YAAY;IAC1B,MAAM,QAAQ,GAAG,KAAK,EAAE,CAAC;IAEzB,MAAM,KAAK,GAAG,CAAC,KAAa,EAAU,EAAE,CACrC,QAAQ,CAAC,OAAO,CAAC,iCAAiC,KAAK,EAAE,CAAC,CAAC,GAAG,EAAwB,CAAC,KAAK,CAAC;IAEhG,MAAM,IAAI,GAAG,QAAQ;SAClB,OAAO,CAAC,mEAAmE,CAAC;SAC5E,GAAG,EAAsD,CAAC;IAE7D,8EAA8E;IAC9E,wEAAwE;IACxE,8EAA8E;IAC9E,+EAA+E;IAC/E,+EAA+E;IAC/E,EAAE;IACF,8EAA8E;IAC9E,8EAA8E;IAC9E,+EAA+E;IAC/E,MAAM,SAAS,GACb,QAAQ;SACL,OAAO,CACN;;;;;WAKG,CACJ;SACA,GAAG,EACP,CAAC,KAAK,CAAC;IAER,OAAO;QACL,UAAU,EAAE,KAAK,CAAC,cAAc,CAAC;QACjC,OAAO,EAAE,KAAK,CAAC,aAAa,CAAC;QAC7B,YAAY,EAAE,KAAK,CAAC,UAAU,CAAC;QAC/B,UAAU,EAAE,IAAI,CAAC,MAAM;QACvB,UAAU,EAAE,IAAI,CAAC,MAAM;QACvB,SAAS;KACV,CAAC;AACJ,CAAC"}

package/dist/httpServer.d.ts

@@ -0,0 +1,55 @@
+import http from "node:http";
+export declare function liveMcpSessionCount(): number;
+export interface HttpMcpServer {
+    start: () => Promise<void>;
+    close: () => Promise<void>;
+}
+/** Exposed for tests: drops every session, as a restart would. */
+export declare function clearDashboardSessions(): void;
+/**
+ * Pull a field from a body that may be JSON or URL-encoded, without re-reading
+ * the stream. The dashboard posts URL-encoded; API clients post JSON.
+ */
+export declare function readFormOrJsonField(raw: string, field: string): string | null;
+/**
+ * Deliberately separate from readFormOrJsonField, which returns null for any
+ * non-string JSON value. That is not an oversight there: a pair code is a
+ * zero-padded six-digit string, `000042` is not valid JSON as a number, and
+ * silently coercing 42 would turn "you sent this in a form that cannot
+ * represent it" into a failed lookup.
+ *
+ * A row id has no such problem, and a JSON client naturally sends {"id": 5}.
+ */
+export declare function readNumericField(raw: string, field: string): number | null;
+export declare function redactQuery(search: string | null | undefined): string;
+/**
+ * Redact a live pairing code out of a request path.
+ *
+ * The query string was redacted and the path was not, so every status poll wrote
+ * `/api/pair/418902/status` into the log -- a code that is, for the next five
+ * minutes, a bearer credential: `/api/pair/<code>/status` hands out the API key
+ * the moment it is approved. The log file sits next to the database and, until
+ * the fix above, was as readable as it was.
+ *
+ * The code is the thing worth hiding; the shape of the path is worth keeping,
+ * because "did the watch poll at all" is the question this log exists to answer.
+ */
+export declare function redactPath(pathname: string): string;
+/**
+ * Both redactions, applied to a RAW `req.url`.
+ *
+ * The request-logging line was fixed to redact and the unhandled-error handler
+ * was not, so a 500 wrote `?token=<the live API key>` into `.trainbud/mcp.log`
+ * in plaintext. Same file, same log, same key, one fix short.
+ *
+ * `req.url` is an origin-form path, not an absolute URL, so it cannot go
+ * through `new URL()` without a base -- and this runs inside the handler whose
+ * entire purpose is that nothing in it may take the process down, so it must
+ * not throw on a malformed one either. Split by hand, and fall back to naming
+ * the shape rather than printing the value.
+ */
+export declare function redactRequestUrl(rawUrl: string | undefined): string;
+export declare function resolvePublicUrl(req: http.IncomingMessage): string;
+export declare function createHttpMcpServer(): HttpMcpServer;
+export declare function getRemoteConnectorInstructions(publicUrl: string): string;
+//# sourceMappingURL=httpServer.d.ts.map

package/dist/httpServer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"httpServer.d.ts","sourceRoot":"","sources":["../src/httpServer.ts"],"names":[],"mappings":"AACA,OAAO,IAAI,MAAM,WAAW,CAAC;AAgE7B,wBAAgB,mBAAmB,IAAI,MAAM,CAE5C;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5B;AA2JD,kEAAkE;AAClE,wBAAgB,sBAAsB,IAAI,IAAI,CAE7C;AAkFD;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAiB7E;AAED;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAwB1E;AAwGD,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,CAYrE;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAEnD;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAanE;AAWD,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,IAAI,CAAC,eAAe,GAAG,MAAM,CAYlE;AAgBD,wBAAgB,mBAAmB,IAAI,aAAa,CA8kBnD;AAED,wBAAgB,8BAA8B,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAqBxE"}