visionclaw 0.1.206-beta.21 → 0.1.206-beta.22

package/dist/webapp/server.js

@@ -0,0 +1,375 @@
+import fs from "node:fs";
+import http from "node:http";
+import { URL } from "node:url";
+import { logger } from "../logger.js";
+import { getAgentState } from "../agent/state.js";
+import { probeLocalTunnelCredential } from "../agent/runtime-credentials.js";
+import { ensureIngressRule, resolveTunnelId } from "../obs/cloudflared-config.js";
+import { OBS_AUTH_COOKIE, resolveOwnerAuth, renderOwnerLoginHtml, readOwnerEmailFromForm, } from "../obs/auth.js";
+import { resolveFinancialToolApiKey, resolveFinancialToolBaseUrl } from "../financial-tool-credentials.js";
+import { loadWorkspace, getDashboardHtmlPath, } from "./storage.js";
+import { renderWorkspaceHtml } from "./ui.js";
+function json(res, status, data) {
+    res.statusCode = status;
+    res.setHeader("content-type", "application/json; charset=utf-8");
+    res.setHeader("cache-control", "no-store");
+    res.end(JSON.stringify(data));
+}
+function readJsonBody(req) {
+    return new Promise((resolve, reject) => {
+        let body = "";
+        let size = 0;
+        req.on("data", (chunk) => {
+            size += chunk.length;
+            if (size > 65536) {
+                reject(new Error("Body too large"));
+                req.destroy();
+                return;
+            }
+            body += chunk.toString();
+        });
+        req.on("end", () => {
+            try {
+                resolve(body ? JSON.parse(body) : {});
+            }
+            catch (err) {
+                reject(err instanceof Error ? err : new Error(String(err)));
+            }
+        });
+        req.on("error", reject);
+    });
+}
+function getWebAdapter() {
+    try {
+        return getAgentState().channelManager.getAdapter("web");
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * Register an ingress rule so the existing cloudflared connector routes
+ * `tunnelHostname` (e.g. ws.agent.visionclawobs.com) to this local port.
+ *
+ * Mirrors the obs server's `resolveTunnelOpts` logic: prefer the
+ * runtime-credential config.yml when present, otherwise fall back to the
+ * cert.pem-resolved tunnel UUID. The `ws.` hostname is covered by the agent's
+ * existing `*.<agentname>` wildcard DNS, so no DNS mutation is needed here —
+ * only the ingress rule. Best-effort: failures are logged, not fatal.
+ */
+export function registerWorkspaceIngress(opts, port) {
+    const hostname = opts.tunnelHostname?.trim();
+    if (!hostname)
+        return;
+    const service = `http://localhost:${port}`;
+    try {
+        const runtime = probeLocalTunnelCredential();
+        if (runtime) {
+            ensureIngressRule(runtime.tunnelId, hostname, service, { configPath: runtime.configFile });
+            logger.system(`[webapp] Ingress registered (runtime): ${hostname} -> ${service}`);
+            return;
+        }
+        const isoOpts = opts.tunnelOriginCert
+            ? { originCert: opts.tunnelOriginCert, configPath: opts.tunnelConfigPath }
+            : undefined;
+        const tunnelId = opts.tunnelName ? resolveTunnelId(opts.tunnelName, isoOpts) : undefined;
+        if (tunnelId) {
+            ensureIngressRule(tunnelId, hostname, service, isoOpts);
+            logger.system(`[webapp] Ingress registered (legacy): ${hostname} -> ${service}`);
+        }
+        else {
+            logger.warn(`[webapp] Could not resolve tunnel UUID; ${hostname} ingress not registered.`);
+        }
+    }
+    catch (err) {
+        logger.warn(`[webapp] Failed to register ingress for ${hostname}: ${err instanceof Error ? err.message : String(err)}`);
+    }
+}
+/**
+ * Forward dashboard quote requests to the financial-tool REST endpoint so
+ * dashboard HTML can fetch live data same-origin without seeing the service
+ * API key.
+ *
+ * Query params:
+ *   - `symbols` (comma-separated) or `symbol` (single symbol) is required.
+ *   - optional `market` is forwarded to the financial-tool service.
+ */
+async function handleDashboardDataProxy(config, url, res) {
+    const apiKey = resolveFinancialToolApiKey(config);
+    if (!apiKey) {
+        json(res, 503, { error: "Financial tool is not configured for this agent." });
+        return;
+    }
+    const rawSymbols = url.searchParams.get("symbols") ?? url.searchParams.get("symbol") ?? "";
+    const symbols = rawSymbols
+        .split(",")
+        .map((symbol) => symbol.trim())
+        .filter((symbol) => symbol.length > 0)
+        .slice(0, 100);
+    if (symbols.length === 0) {
+        json(res, 400, { error: "symbols or symbol query parameter is required" });
+        return;
+    }
+    const upstreamUrl = new URL(`/internal/quotes/${encodeURIComponent(apiKey)}`, resolveFinancialToolBaseUrl(config));
+    upstreamUrl.searchParams.set("symbols", symbols.join(","));
+    const market = url.searchParams.get("market")?.trim();
+    if (market)
+        upstreamUrl.searchParams.set("market", market);
+    const ac = new AbortController();
+    const timer = setTimeout(() => { ac.abort(); }, 15_000);
+    try {
+        const upstream = await fetch(upstreamUrl, {
+            method: "GET",
+            headers: { accept: "application/json" },
+            signal: ac.signal,
+        });
+        const text = await upstream.text();
+        res.statusCode = upstream.ok ? 200 : 502;
+        res.setHeader("content-type", "application/json; charset=utf-8");
+        res.setHeader("cache-control", "no-store");
+        res.end(text || JSON.stringify({ error: "Empty response from financial tool" }));
+    }
+    catch (err) {
+        json(res, 502, { error: `Financial tool request failed: ${err instanceof Error ? err.message : String(err)}` });
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+export function startWebappServer(options) {
+    const host = options.host ?? "0.0.0.0";
+    const requestedPort = options.port ?? 3102;
+    const agentName = options.config.agentName;
+    const server = http.createServer((req, res) => {
+        try {
+            handleRequest(req, res);
+        }
+        catch (err) {
+            logger.warn(`[webapp] Unhandled request error: ${err instanceof Error ? err.message : String(err)}`);
+            if (!res.headersSent) {
+                res.statusCode = 500;
+                res.end("Internal Server Error");
+            }
+        }
+    });
+    function handleRequest(req, res) {
+        const url = new URL(req.url ?? "/", `http://${req.headers.host ?? "localhost"}`);
+        const pathname = url.pathname;
+        if (pathname === "/healthz") {
+            json(res, 200, { ok: true });
+            return;
+        }
+        const auth = resolveOwnerAuth(req);
+        // ── Login (owner-email cookie gate, scoped to the whole workspace) ──
+        if (pathname === "/login" && req.method === "GET") {
+            if (auth.hasSession) {
+                res.statusCode = 302;
+                res.setHeader("location", "/");
+                res.end();
+                return;
+            }
+            res.statusCode = 200;
+            res.setHeader("content-type", "text/html; charset=utf-8");
+            res.setHeader("cache-control", "no-store");
+            res.end(renderOwnerLoginHtml("/login"));
+            return;
+        }
+        if (pathname === "/login" && req.method === "POST") {
+            void readOwnerEmailFromForm(req, res).then((submitted) => {
+                if (submitted === null)
+                    return; // response already sent (oversize)
+                if (auth.ownerEmail && auth.expectedHash && submitted === auth.ownerEmail) {
+                    res.statusCode = 302;
+                    res.setHeader("location", "/");
+                    res.setHeader("set-cookie", `${OBS_AUTH_COOKIE}=${auth.expectedHash}; Path=/; HttpOnly; SameSite=Strict`);
+                    res.end();
+                    return;
+                }
+                res.statusCode = 401;
+                res.setHeader("content-type", "text/html; charset=utf-8");
+                res.setHeader("cache-control", "no-store");
+                res.end(renderOwnerLoginHtml("/login", "That email does not match the configured owner."));
+            });
+            return;
+        }
+        if (pathname === "/logout" && req.method === "POST") {
+            res.statusCode = 302;
+            res.setHeader("location", "/login");
+            res.setHeader("set-cookie", `${OBS_AUTH_COOKIE}=; Path=/; HttpOnly; SameSite=Strict; Max-Age=0`);
+            res.end();
+            return;
+        }
+        // Everything below requires an authenticated owner session.
+        const requireAuth = () => {
+            if (auth.hasSession)
+                return true;
+            // For HTML navigations show the login page; for API calls return 401 JSON.
+            if (pathname.startsWith("/api/")) {
+                json(res, 401, { error: "Unauthorized" });
+            }
+            else {
+                res.statusCode = 401;
+                res.setHeader("content-type", "text/html; charset=utf-8");
+                res.setHeader("cache-control", "no-store");
+                res.end(renderOwnerLoginHtml("/login"));
+            }
+            return false;
+        };
+        // ── IDE shell ──────────────────────────────────────────────────────
+        if (pathname === "/" || pathname === "/index.html") {
+            if (!requireAuth())
+                return;
+            res.statusCode = 200;
+            res.setHeader("content-type", "text/html; charset=utf-8");
+            res.setHeader("cache-control", "no-store");
+            res.end(renderWorkspaceHtml(agentName));
+            return;
+        }
+        // ── Workspace layout ───────────────────────────────────────────────
+        if (pathname === "/api/workspace") {
+            if (!requireAuth())
+                return;
+            json(res, 200, loadWorkspace());
+            return;
+        }
+        // ── Dashboard HTML files ───────────────────────────────────────────
+        const dashMatch = /^\/dashboards\/([a-z0-9-]+)\.html$/.exec(pathname);
+        if (dashMatch) {
+            if (!requireAuth())
+                return;
+            let filePath;
+            try {
+                filePath = getDashboardHtmlPath(dashMatch[1]);
+            }
+            catch {
+                res.statusCode = 404;
+                res.end("Not found");
+                return;
+            }
+            if (!fs.existsSync(filePath)) {
+                res.statusCode = 404;
+                res.setHeader("content-type", "text/plain; charset=utf-8");
+                res.end("Dashboard not found");
+                return;
+            }
+            res.statusCode = 200;
+            res.setHeader("content-type", "text/html; charset=utf-8");
+            res.setHeader("cache-control", "no-store");
+            fs.createReadStream(filePath).pipe(res);
+            return;
+        }
+        // ── Chat: SSE stream of agent replies ──────────────────────────────
+        if (pathname === "/api/events") {
+            if (!requireAuth())
+                return;
+            const senderId = url.searchParams.get("sender") ?? `web-anon-${Date.now()}`;
+            const web = getWebAdapter();
+            if (!web) {
+                json(res, 503, { error: "Web channel not available" });
+                return;
+            }
+            web.addSseClient(res, senderId);
+            return;
+        }
+        // ── Chat: inject a user message into the shared agent session ──────
+        if (pathname === "/api/chat" && req.method === "POST") {
+            if (!requireAuth())
+                return;
+            void (async () => {
+                try {
+                    const body = (await readJsonBody(req));
+                    const text = typeof body.text === "string" ? body.text.trim() : "";
+                    if (!text) {
+                        json(res, 400, { error: "Missing 'text' field" });
+                        return;
+                    }
+                    const sender = typeof body.sender === "string" && body.sender ? body.sender : `web-${process.pid}`;
+                    const state = getAgentState();
+                    const msg = {
+                        id: `web-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`,
+                        channel: "web",
+                        sender,
+                        text,
+                        attachments: [],
+                        timestamp: new Date().toISOString(),
+                        meta: { source: "web" },
+                    };
+                    state.replyMap.set(`web::${sender}`, {
+                        sender,
+                        channel: "web",
+                        replyContext: { messageId: msg.id },
+                    });
+                    const web = getWebAdapter();
+                    if (web) {
+                        web.injectMessage(msg);
+                        web.pushEvent({ type: "ack", timestamp: new Date().toISOString(), commandId: msg.id, commandState: "queued" }, sender);
+                    }
+                    else {
+                        state.messageQueue.enqueue(msg);
+                        state.channelManager.emit("message", msg);
+                    }
+                    json(res, 200, { ok: true, messageId: msg.id });
+                }
+                catch (err) {
+                    json(res, 500, { error: err instanceof Error ? err.message : String(err) });
+                }
+            })();
+            return;
+        }
+        // ── Optional: live financial data proxy for dashboards ─────────────
+        if (pathname === "/api/dashboard-data") {
+            if (!requireAuth())
+                return;
+            void handleDashboardDataProxy(options.config, url, res);
+            return;
+        }
+        res.statusCode = 404;
+        res.setHeader("content-type", "text/plain; charset=utf-8");
+        res.end("Not found");
+    }
+    server.on("error", (err) => {
+        logger.warn(`[webapp] Server failed to start: ${err instanceof Error ? err.message : String(err)}`);
+    });
+    let boundPort = 0;
+    let publicUrl = null;
+    server.listen(requestedPort, host, () => {
+        const address = server.address();
+        boundPort = typeof address === "object" && address ? address.port : requestedPort;
+        logger.system(`Web workspace: http://${host}:${boundPort}/`);
+        registerWorkspaceIngress(options, boundPort);
+        if (options.tunnelHostname) {
+            publicUrl = `https://${options.tunnelHostname}`;
+            logger.system(`[webapp] Public URL: ${publicUrl} (via Cloudflare tunnel)`);
+            // Best-effort: surface the URL in /status once agent state exists.
+            // The agent loop initializes state after this server binds, so retry
+            // briefly until the singleton is available.
+            const setUrl = () => {
+                try {
+                    getAgentState().workspaceUrl = publicUrl ?? undefined;
+                    return true;
+                }
+                catch {
+                    return false;
+                }
+            };
+            if (!setUrl()) {
+                let attempts = 0;
+                const t = setInterval(() => {
+                    if (setUrl() || ++attempts > 60)
+                        clearInterval(t);
+                }, 1000);
+                t.unref();
+            }
+        }
+    });
+    return {
+        get port() { return boundPort; },
+        get publicUrl() { return publicUrl; },
+        close: async () => {
+            await new Promise((resolve) => {
+                server.close(() => { resolve(); });
+            });
+        },
+    };
+}
+//# sourceMappingURL=server.js.map

package/dist/webapp/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../src/webapp/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAC/B,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAC7E,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAClF,OAAO,EACL,eAAe,EACf,gBAAgB,EAChB,oBAAoB,EACpB,sBAAsB,GACvB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,0BAA0B,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAC;AAI3G,OAAO,EACL,aAAa,EACb,oBAAoB,GACrB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAC;AAsB9C,SAAS,IAAI,CAAC,GAAwB,EAAE,MAAc,EAAE,IAAa;IACnE,GAAG,CAAC,UAAU,GAAG,MAAM,CAAC;IACxB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,iCAAiC,CAAC,CAAC;IACjE,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;IAC3C,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,YAAY,CAAC,GAAyB;IAC7C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAC/B,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC;YACrB,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;gBAAC,MAAM,CAAC,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC;gBAAC,GAAG,CAAC,OAAO,EAAE,CAAC;gBAAC,OAAO;YAAC,CAAC;YACjF,IAAI,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC3B,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACjB,IAAI,CAAC;gBAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAAC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBAAC,MAAM,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAAC,CAAC;QAC7H,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,aAAa;IACpB,IAAI,CAAC;QACH,OAAO,aAAa,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC,KAAK,CAAkC,CAAC;IAC3F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAAyB,EAAE,IAAY;IAC9E,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC;IAC7C,IAAI,CAAC,QAAQ;QAAE,OAAO;IACtB,MAAM,OAAO,GAAG,oBAAoB,IAAI,EAAE,CAAC;IAC3C,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,0BAA0B,EAAE,CAAC;QAC7C,IAAI,OAAO,EAAE,CAAC;YACZ,iBAAiB,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;YAC3F,MAAM,CAAC,MAAM,CAAC,0CAA0C,QAAQ,OAAO,OAAO,EAAE,CAAC,CAAC;YAClF,OAAO;QACT,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB;YACnC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,gBAAgB,EAAE,UAAU,EAAE,IAAI,CAAC,gBAAgB,EAAE;YAC1E,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACzF,IAAI,QAAQ,EAAE,CAAC;YACb,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;YACxD,MAAM,CAAC,MAAM,CAAC,yCAAyC,QAAQ,OAAO,OAAO,EAAE,CAAC,CAAC;QACnF,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,2CAA2C,QAAQ,0BAA0B,CAAC,CAAC;QAC7F,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,2CAA2C,QAAQ,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC1H,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,wBAAwB,CACrC,MAAwB,EACxB,GAAQ,EACR,GAAwB;IAExB,MAAM,MAAM,GAAG,0BAA0B,CAAC,MAAM,CAAC,CAAC;IAClD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,kDAAkD,EAAE,CAAC,CAAC;QAC9E,OAAO;IACT,CAAC;IAED,MAAM,UAAU,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC3F,MAAM,OAAO,GAAG,UAAU;SACvB,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;SAC9B,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;SACrC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACjB,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,+CAA+C,EAAE,CAAC,CAAC;QAC3E,OAAO;IACT,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,oBAAoB,kBAAkB,CAAC,MAAM,CAAC,EAAE,EAAE,2BAA2B,CAAC,MAAM,CAAC,CAAC,CAAC;IACnH,WAAW,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC;IACtD,IAAI,MAAM;QAAE,WAAW,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAE3D,MAAM,EAAE,GAAG,IAAI,eAAe,EAAE,CAAC;IACjC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IACxD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,WAAW,EAAE;YACxC,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;YACvC,MAAM,EAAE,EAAE,CAAC,MAAM;SAClB,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,GAAG,CAAC,UAAU,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;QACzC,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,iCAAiC,CAAC,CAAC;QACjE,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;QAC3C,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,oCAAoC,EAAE,CAAC,CAAC,CAAC;IACnF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,kCAAkC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;IAClH,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,OAA4B;IAC5D,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,SAAS,CAAC;IACvC,MAAM,aAAa,GAAG,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC;IAC3C,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC;IAE3C,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC5C,IAAI,CAAC;YACH,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC1B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,qCAAqC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACrG,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBACrB,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;gBACrB,GAAG,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;YACnC,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,SAAS,aAAa,CAAC,GAAyB,EAAE,GAAwB;QACxE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,UAAU,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,EAAE,CAAC,CAAC;QACjF,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;QAE9B,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;YAC5B,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YAC7B,OAAO;QACT,CAAC;QAED,MAAM,IAAI,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAEnC,uEAAuE;QACvE,IAAI,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YAClD,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;gBACpB,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;gBACrB,GAAG,CAAC,SAAS,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;gBAC/B,GAAG,CAAC,GAAG,EAAE,CAAC;gBACV,OAAO;YACT,CAAC;YACD,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;YACrB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,0BAA0B,CAAC,CAAC;YAC1D,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;YAC3C,GAAG,CAAC,GAAG,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC,CAAC;YACxC,OAAO;QACT,CAAC;QAED,IAAI,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YACnD,KAAK,sBAAsB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE;gBACvD,IAAI,SAAS,KAAK,IAAI;oBAAE,OAAO,CAAC,mCAAmC;gBACnE,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,YAAY,IAAI,SAAS,KAAK,IAAI,CAAC,UAAU,EAAE,CAAC;oBAC1E,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;oBACrB,GAAG,CAAC,SAAS,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;oBAC/B,GAAG,CAAC,SAAS,CACX,YAAY,EACZ,GAAG,eAAe,IAAI,IAAI,CAAC,YAAY,qCAAqC,CAC7E,CAAC;oBACF,GAAG,CAAC,GAAG,EAAE,CAAC;oBACV,OAAO;gBACT,CAAC;gBACD,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;gBACrB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,0BAA0B,CAAC,CAAC;gBAC1D,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;gBAC3C,GAAG,CAAC,GAAG,CAAC,oBAAoB,CAAC,QAAQ,EAAE,iDAAiD,CAAC,CAAC,CAAC;YAC7F,CAAC,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,IAAI,QAAQ,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YACpD,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;YACrB,GAAG,CAAC,SAAS,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;YACpC,GAAG,CAAC,SAAS,CACX,YAAY,EACZ,GAAG,eAAe,iDAAiD,CACpE,CAAC;YACF,GAAG,CAAC,GAAG,EAAE,CAAC;YACV,OAAO;QACT,CAAC;QAED,4DAA4D;QAC5D,MAAM,WAAW,GAAG,GAAY,EAAE;YAChC,IAAI,IAAI,CAAC,UAAU;gBAAE,OAAO,IAAI,CAAC;YACjC,2EAA2E;YAC3E,IAAI,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBACjC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;YAC5C,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;gBACrB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,0BAA0B,CAAC,CAAC;gBAC1D,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;gBAC3C,GAAG,CAAC,GAAG,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC1C,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC,CAAC;QAEF,sEAAsE;QACtE,IAAI,QAAQ,KAAK,GAAG,IAAI,QAAQ,KAAK,aAAa,EAAE,CAAC;YACnD,IAAI,CAAC,WAAW,EAAE;gBAAE,OAAO;YAC3B,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;YACrB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,0BAA0B,CAAC,CAAC;YAC1D,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;YAC3C,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC,CAAC;YACxC,OAAO;QACT,CAAC;QAED,sEAAsE;QACtE,IAAI,QAAQ,KAAK,gBAAgB,EAAE,CAAC;YAClC,IAAI,CAAC,WAAW,EAAE;gBAAE,OAAO;YAC3B,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,aAAa,EAAE,CAAC,CAAC;YAChC,OAAO;QACT,CAAC;QAED,sEAAsE;QACtE,MAAM,SAAS,GAAG,oCAAoC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACtE,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,CAAC,WAAW,EAAE;gBAAE,OAAO;YAC3B,IAAI,QAAgB,CAAC;YACrB,IAAI,CAAC;gBACH,QAAQ,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;YAChD,CAAC;YAAC,MAAM,CAAC;gBACP,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;gBACrB,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;gBACrB,OAAO;YACT,CAAC;YACD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC7B,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;gBACrB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,2BAA2B,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;gBAC/B,OAAO;YACT,CAAC;YACD,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;YACrB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,0BAA0B,CAAC,CAAC;YAC1D,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;YAC3C,EAAE,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACxC,OAAO;QACT,CAAC;QAED,sEAAsE;QACtE,IAAI,QAAQ,KAAK,aAAa,EAAE,CAAC;YAC/B,IAAI,CAAC,WAAW,EAAE;gBAAE,OAAO;YAC3B,MAAM,QAAQ,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,YAAY,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YAC5E,MAAM,GAAG,GAAG,aAAa,EAAE,CAAC;YAC5B,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC,CAAC;gBACvD,OAAO;YACT,CAAC;YACD,GAAG,CAAC,YAAY,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YAChC,OAAO;QACT,CAAC;QAED,sEAAsE;QACtE,IAAI,QAAQ,KAAK,WAAW,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YACtD,IAAI,CAAC,WAAW,EAAE;gBAAE,OAAO;YAC3B,KAAK,CAAC,KAAK,IAAI,EAAE;gBACf,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,CAAC,MAAM,YAAY,CAAC,GAAG,CAAC,CAAyC,CAAC;oBAC/E,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACnE,IAAI,CAAC,IAAI,EAAE,CAAC;wBACV,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC;wBAClD,OAAO;oBACT,CAAC;oBACD,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,OAAO,CAAC,GAAG,EAAE,CAAC;oBACnG,MAAM,KAAK,GAAG,aAAa,EAAE,CAAC;oBAC9B,MAAM,GAAG,GAAmB;wBAC1B,EAAE,EAAE,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;wBACjE,OAAO,EAAE,KAAK;wBACd,MAAM;wBACN,IAAI;wBACJ,WAAW,EAAE,EAAE;wBACf,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;wBACnC,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE;qBACxB,CAAC;oBAEF,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,MAAM,EAAE,EAAE;wBACnC,MAAM;wBACN,OAAO,EAAE,KAAK;wBACd,YAAY,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,EAAE,EAAE;qBACpC,CAAC,CAAC;oBAEH,MAAM,GAAG,GAAG,aAAa,EAAE,CAAC;oBAC5B,IAAI,GAAG,EAAE,CAAC;wBACR,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;wBACvB,GAAG,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,EAAE,EAAE,YAAY,EAAE,QAAQ,EAAE,EAAE,MAAM,CAAC,CAAC;oBACzH,CAAC;yBAAM,CAAC;wBACN,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;wBAChC,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;oBAC5C,CAAC;oBAED,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;gBAClD,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAC9E,CAAC;YACH,CAAC,CAAC,EAAE,CAAC;YACL,OAAO;QACT,CAAC;QAED,sEAAsE;QACtE,IAAI,QAAQ,KAAK,qBAAqB,EAAE,CAAC;YACvC,IAAI,CAAC,WAAW,EAAE;gBAAE,OAAO;YAC3B,KAAK,wBAAwB,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;YACxD,OAAO;QACT,CAAC;QAED,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;QACrB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,2BAA2B,CAAC,CAAC;QAC3D,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACvB,CAAC;IAED,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;QACzB,MAAM,CAAC,IAAI,CAAC,oCAAoC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACtG,CAAC,CAAC,CAAC;IAEH,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,SAAS,GAAkB,IAAI,CAAC;IAEpC,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,IAAI,EAAE,GAAG,EAAE;QACtC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;QACjC,SAAS,GAAG,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC;QAClF,MAAM,CAAC,MAAM,CAAC,yBAAyB,IAAI,IAAI,SAAS,GAAG,CAAC,CAAC;QAC7D,wBAAwB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC7C,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;YAC3B,SAAS,GAAG,WAAW,OAAO,CAAC,cAAc,EAAE,CAAC;YAChD,MAAM,CAAC,MAAM,CAAC,wBAAwB,SAAS,0BAA0B,CAAC,CAAC;YAC3E,mEAAmE;YACnE,qEAAqE;YACrE,4CAA4C;YAC5C,MAAM,MAAM,GAAG,GAAY,EAAE;gBAC3B,IAAI,CAAC;oBAAC,aAAa,EAAE,CAAC,YAAY,GAAG,SAAS,IAAI,SAAS,CAAC;oBAAC,OAAO,IAAI,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC;oBAAC,OAAO,KAAK,CAAC;gBAAC,CAAC;YACrG,CAAC,CAAC;YACF,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;gBACd,IAAI,QAAQ,GAAG,CAAC,CAAC;gBACjB,MAAM,CAAC,GAAG,WAAW,CAAC,GAAG,EAAE;oBACzB,IAAI,MAAM,EAAE,IAAI,EAAE,QAAQ,GAAG,EAAE;wBAAE,aAAa,CAAC,CAAC,CAAC,CAAC;gBACpD,CAAC,EAAE,IAAI,CAAC,CAAC;gBACT,CAAC,CAAC,KAAK,EAAE,CAAC;YACZ,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,IAAI,KAAK,OAAO,SAAS,CAAC,CAAC,CAAC;QAChC,IAAI,SAAS,KAAK,OAAO,SAAS,CAAC,CAAC,CAAC;QACrC,KAAK,EAAE,KAAK,IAAI,EAAE;YAChB,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;gBAClC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YACrC,CAAC,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/webapp/storage.d.ts

@@ -0,0 +1,64 @@
+/**
+ * Shared storage model for the web workspace.
+ *
+ * Dashboards are agent-authored self-contained HTML files stored under the
+ * active profile's `dashboards/` directory. The IDE-style layout (sidebar
+ * groups, open tabs, temp views) is described by `workspace.json` in the same
+ * profile directory. Both the workspace HTTP server (reads) and the `webapp`
+ * MCP tool (writes) go through these helpers so the on-disk shape stays
+ * consistent.
+ */
+/** A dashboard tab shown in the main area. */
+export interface DashboardTab {
+    /** Slug (also the HTML filename without extension). */
+    name: string;
+    /** Human-friendly tab label. */
+    title: string;
+    /** Optional sidebar group this dashboard belongs to. */
+    group?: string;
+    /** Marks a transient/scratch view (rendered under "Temp Views"). */
+    temp?: boolean;
+    /** ISO timestamp of the last write. */
+    updatedAt: string;
+}
+/** A free-form sidebar group with a label and ordered dashboard slugs. */
+export interface SidebarGroup {
+    label: string;
+    items: string[];
+}
+export interface Workspace {
+    /** Ordered list of dashboards/tabs. */
+    tabs: DashboardTab[];
+    /** Sidebar grouping (purely presentational). */
+    sidebar: SidebarGroup[];
+    /** Free-text focus notes shown at the bottom of the sidebar. */
+    focus: string[];
+    /** ISO timestamp of the last workspace mutation. */
+    updatedAt: string;
+}
+export declare function getDashboardsDir(): string;
+export declare function getWorkspaceFile(): string;
+/**
+ * Validate + normalize a dashboard slug. Allows lowercase letters, digits,
+ * and hyphens only (DNS-label-ish) so it is safe to use as a filename and in
+ * URLs. Throws on invalid input.
+ */
+export declare function normalizeDashboardName(raw: string): string;
+export declare function loadWorkspace(): Workspace;
+export declare function saveWorkspace(ws: Workspace): void;
+/** Resolve a dashboard HTML path, guarding against path traversal. */
+export declare function getDashboardHtmlPath(name: string): string;
+/**
+ * Write a dashboard's HTML file and upsert its tab entry in workspace.json.
+ * Returns the normalized slug.
+ */
+export declare function writeDashboard(opts: {
+    name: string;
+    html: string;
+    title?: string;
+    group?: string;
+    temp?: boolean;
+}): string;
+/** Delete a dashboard HTML file and remove it from workspace.json. */
+export declare function deleteDashboard(rawName: string): void;
+//# sourceMappingURL=storage.d.ts.map

package/dist/webapp/storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../../src/webapp/storage.ts"],"names":[],"mappings":"AAKA;;;;;;;;;GASG;AAEH,8CAA8C;AAC9C,MAAM,WAAW,YAAY;IAC3B,uDAAuD;IACvD,IAAI,EAAE,MAAM,CAAC;IACb,gCAAgC;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,wDAAwD;IACxD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,oEAAoE;IACpE,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,uCAAuC;IACvC,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,0EAA0E;AAC1E,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,MAAM,WAAW,SAAS;IACxB,uCAAuC;IACvC,IAAI,EAAE,YAAY,EAAE,CAAC;IACrB,gDAAgD;IAChD,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB,gEAAgE;IAChE,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,oDAAoD;IACpD,SAAS,EAAE,MAAM,CAAC;CACnB;AAKD,wBAAgB,gBAAgB,IAAI,MAAM,CAEzC;AAED,wBAAgB,gBAAgB,IAAI,MAAM,CAEzC;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAK1D;AAMD,wBAAgB,aAAa,IAAI,SAAS,CAezC;AAED,wBAAgB,aAAa,CAAC,EAAE,EAAE,SAAS,GAAG,IAAI,CAKjD;AAED,sEAAsE;AACtE,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAGzD;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB,GAAG,MAAM,CAyBT;AAED,sEAAsE;AACtE,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAWrD"}

package/dist/webapp/storage.js

@@ -0,0 +1,103 @@
+import fs from "node:fs";
+import path from "node:path";
+import { getConfigDir } from "../config/index.js";
+import { logger } from "../logger.js";
+const DASHBOARDS_DIRNAME = "dashboards";
+const WORKSPACE_FILENAME = "workspace.json";
+export function getDashboardsDir() {
+    return path.join(getConfigDir(), DASHBOARDS_DIRNAME);
+}
+export function getWorkspaceFile() {
+    return path.join(getConfigDir(), WORKSPACE_FILENAME);
+}
+/**
+ * Validate + normalize a dashboard slug. Allows lowercase letters, digits,
+ * and hyphens only (DNS-label-ish) so it is safe to use as a filename and in
+ * URLs. Throws on invalid input.
+ */
+export function normalizeDashboardName(raw) {
+    const name = raw.trim().toLowerCase().replace(/[^a-z0-9-]/g, "-").replace(/-+/g, "-").replace(/^-|-$/g, "");
+    if (!name)
+        throw new Error(`Invalid dashboard name: "${raw}"`);
+    if (name.length > 64)
+        throw new Error(`Dashboard name too long (max 64 chars): "${raw}"`);
+    return name;
+}
+function emptyWorkspace() {
+    return { tabs: [], sidebar: [], focus: [], updatedAt: new Date().toISOString() };
+}
+export function loadWorkspace() {
+    const file = getWorkspaceFile();
+    if (!fs.existsSync(file))
+        return emptyWorkspace();
+    try {
+        const parsed = JSON.parse(fs.readFileSync(file, "utf-8"));
+        return {
+            tabs: Array.isArray(parsed.tabs) ? parsed.tabs : [],
+            sidebar: Array.isArray(parsed.sidebar) ? parsed.sidebar : [],
+            focus: Array.isArray(parsed.focus) ? parsed.focus : [],
+            updatedAt: typeof parsed.updatedAt === "string" ? parsed.updatedAt : new Date().toISOString(),
+        };
+    }
+    catch (err) {
+        logger.warn(`[webapp] Failed to parse workspace.json: ${err instanceof Error ? err.message : String(err)}`);
+        return emptyWorkspace();
+    }
+}
+export function saveWorkspace(ws) {
+    ws.updatedAt = new Date().toISOString();
+    const file = getWorkspaceFile();
+    fs.mkdirSync(path.dirname(file), { recursive: true });
+    fs.writeFileSync(file, JSON.stringify(ws, null, 2), "utf-8");
+}
+/** Resolve a dashboard HTML path, guarding against path traversal. */
+export function getDashboardHtmlPath(name) {
+    const safe = normalizeDashboardName(name);
+    return path.join(getDashboardsDir(), `${safe}.html`);
+}
+/**
+ * Write a dashboard's HTML file and upsert its tab entry in workspace.json.
+ * Returns the normalized slug.
+ */
+export function writeDashboard(opts) {
+    const name = normalizeDashboardName(opts.name);
+    const dir = getDashboardsDir();
+    fs.mkdirSync(dir, { recursive: true });
+    fs.writeFileSync(path.join(dir, `${name}.html`), opts.html, "utf-8");
+    const ws = loadWorkspace();
+    const now = new Date().toISOString();
+    const existing = ws.tabs.find((t) => t.name === name);
+    if (existing) {
+        existing.title = opts.title ?? existing.title;
+        if (opts.group !== undefined)
+            existing.group = opts.group;
+        if (opts.temp !== undefined)
+            existing.temp = opts.temp;
+        existing.updatedAt = now;
+    }
+    else {
+        ws.tabs.push({
+            name,
+            title: opts.title ?? name,
+            group: opts.group,
+            temp: opts.temp,
+            updatedAt: now,
+        });
+    }
+    saveWorkspace(ws);
+    return name;
+}
+/** Delete a dashboard HTML file and remove it from workspace.json. */
+export function deleteDashboard(rawName) {
+    const name = normalizeDashboardName(rawName);
+    const file = path.join(getDashboardsDir(), `${name}.html`);
+    if (fs.existsSync(file))
+        fs.unlinkSync(file);
+    const ws = loadWorkspace();
+    ws.tabs = ws.tabs.filter((t) => t.name !== name);
+    for (const group of ws.sidebar) {
+        group.items = group.items.filter((i) => i !== name);
+    }
+    saveWorkspace(ws);
+}
+//# sourceMappingURL=storage.js.map

package/dist/webapp/storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.js","sourceRoot":"","sources":["../../src/webapp/storage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AA4CtC,MAAM,kBAAkB,GAAG,YAAY,CAAC;AACxC,MAAM,kBAAkB,GAAG,gBAAgB,CAAC;AAE5C,MAAM,UAAU,gBAAgB;IAC9B,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,kBAAkB,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC9B,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,kBAAkB,CAAC,CAAC;AACvD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,GAAW;IAChD,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC5G,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,GAAG,GAAG,CAAC,CAAC;IAC/D,IAAI,IAAI,CAAC,MAAM,GAAG,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,GAAG,GAAG,CAAC,CAAC;IAC1F,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,cAAc;IACrB,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;AACnF,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,MAAM,IAAI,GAAG,gBAAgB,EAAE,CAAC;IAChC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,cAAc,EAAE,CAAC;IAClD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAuB,CAAC;QAChF,OAAO;YACL,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;YACnD,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;YAC5D,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;YACtD,SAAS,EAAE,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SAC9F,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,4CAA4C,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC5G,OAAO,cAAc,EAAE,CAAC;IAC1B,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,EAAa;IACzC,EAAE,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACxC,MAAM,IAAI,GAAG,gBAAgB,EAAE,CAAC;IAChC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;AAC/D,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,MAAM,IAAI,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAC1C,OAAO,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,GAAG,IAAI,OAAO,CAAC,CAAC;AACvD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,IAM9B;IACC,MAAM,IAAI,GAAG,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/C,MAAM,GAAG,GAAG,gBAAgB,EAAE,CAAC;IAC/B,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,OAAO,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAErE,MAAM,EAAE,GAAG,aAAa,EAAE,CAAC;IAC3B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,QAAQ,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IACtD,IAAI,QAAQ,EAAE,CAAC;QACb,QAAQ,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,QAAQ,CAAC,KAAK,CAAC;QAC9C,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;YAAE,QAAQ,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QAC1D,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;YAAE,QAAQ,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACvD,QAAQ,CAAC,SAAS,GAAG,GAAG,CAAC;IAC3B,CAAC;SAAM,CAAC;QACN,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;YACX,IAAI;YACJ,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,IAAI;YACzB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,SAAS,EAAE,GAAG;SACf,CAAC,CAAC;IACL,CAAC;IACD,aAAa,CAAC,EAAE,CAAC,CAAC;IAClB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,eAAe,CAAC,OAAe;IAC7C,MAAM,IAAI,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,GAAG,IAAI,OAAO,CAAC,CAAC;IAC3D,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IAE7C,MAAM,EAAE,GAAG,aAAa,EAAE,CAAC;IAC3B,EAAE,CAAC,IAAI,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IACjD,KAAK,MAAM,KAAK,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;QAC/B,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;IACtD,CAAC;IACD,aAAa,CAAC,EAAE,CAAC,CAAC;AACpB,CAAC"}

package/dist/webapp/ui.d.ts

@@ -0,0 +1,2 @@
+export declare function renderWorkspaceHtml(agentName: string): string;
+//# sourceMappingURL=ui.d.ts.map

package/dist/webapp/ui.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ui.d.ts","sourceRoot":"","sources":["../../src/webapp/ui.ts"],"names":[],"mappings":"AAOA,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAuT7D"}