import { createServer, type IncomingMessage, type Server, type ServerResponse, } from 'node:http'; import { URL } from 'node:url'; import { extractResumeSlug, readJsonBody, sendHtml, sendJson } from './helpers'; import type { InterviewAnswer, InterviewFileItem, InterviewListItem, InterviewState, } from './types'; import { renderDashboardPage, renderInterviewPage } from './ui'; function getSubmissionStatus(error: unknown): number { if (error instanceof SyntaxError) { return 400; } const message = error instanceof Error ? error.message : ''; if (message === 'Interview not found') { return 404; } if (message.includes('busy')) { return 409; } if ( message.includes('waiting for a valid agent update') || message.includes('There are no active interview questions') || message.includes('Answer every active interview question') || message.includes('Answers do not match') || message.includes('Request body too large') || message.includes('Invalid answers payload') || message.includes('no longer active') ) { return 400; } return 500; } function parseAnswersPayload(value: unknown): { answers: InterviewAnswer[] } { if (!value || typeof value !== 'object') { throw new Error('Invalid answers payload.'); } const answersRaw = (value as { answers?: unknown }).answers; if (!Array.isArray(answersRaw)) { throw new Error('Invalid answers payload.'); } return { answers: answersRaw.map((answer) => { if (!answer || typeof answer !== 'object') { throw new Error('Invalid answers payload.'); } const record = answer as { questionId?: unknown; answer?: unknown }; if ( typeof record.questionId !== 'string' || typeof record.answer !== 'string' ) { throw new Error('Invalid answers payload.'); } return { questionId: record.questionId.trim(), answer: record.answer.trim(), }; }), }; } export function createInterviewServer(deps: { getState: (interviewId: string) => Promise; listInterviewFiles: () => Promise; listInterviews: () => InterviewListItem[]; submitAnswers: ( interviewId: string, answers: InterviewAnswer[], ) => Promise; submitBlockComment: ( interviewId: string, section: string, comment: string, ) => Promise; submitChat: (interviewId: string, message: string) => Promise; handleNudgeAction: ( interviewId: string, action: 'more-questions' | 'confirm-complete', ) => Promise; outputFolder: string; port: number; }): { ensureStarted: () => Promise; close: () => void; } { let baseUrl: string | null = null; let startPromise: Promise | null = null; let activeServer: Server | null = null; async function loadDashboardData() { const interviews = deps.listInterviews().map((item) => { const resumeSlug = extractResumeSlug(item.id); return { ...item, url: `/interview/${item.id}`, mode: 'active', resumeSlug, }; }); const files = await deps.listInterviewFiles(); return { interviews, files }; } async function handle( request: IncomingMessage, response: ServerResponse, ): Promise { let url: URL; try { url = new URL(request.url ?? '/', 'http://127.0.0.1'); } catch { sendJson(response, 400, { error: 'Invalid request URL' }); return; } const pathname = url.pathname; // Dashboard: root page listing all interviews if (request.method === 'GET' && pathname === '/') { try { const { interviews, files } = await loadDashboardData(); sendHtml( response, renderDashboardPage(interviews, files, deps.outputFolder), ); } catch { sendJson(response, 500, { error: 'Failed to load interviews' }); } return; } // API: list all interviews as JSON if (request.method === 'GET' && pathname === '/api/interviews') { try { const { interviews, files } = await loadDashboardData(); sendJson(response, 200, { active: interviews, files }); } catch { sendJson(response, 500, { error: 'Failed to load interviews' }); } return; } if (request.method === 'GET' && pathname.startsWith('/interview/')) { const rawId = decodeURIComponent(pathname.split('/').pop() ?? 'unknown'); sendHtml(response, renderInterviewPage(rawId, extractResumeSlug(rawId))); return; } const stateMatch = pathname.match(/^\/api\/interviews\/([^/]+)\/state$/); if (request.method === 'GET' && stateMatch) { try { const state = await deps.getState(decodeURIComponent(stateMatch[1])); sendJson(response, 200, state); } catch (error) { const message = error instanceof Error ? error.message : 'Interview not found'; const status = message === 'Interview not found' ? 404 : 500; sendJson(response, status, { error: message }); } return; } // CSRF note: This endpoint intentionally sends no CORS headers. // The browser's same-origin policy blocks cross-origin POST with // Content-Type: application/json (it triggers a preflight, which // 404s here). Do NOT add Access-Control-Allow-Origin without also // adding an Origin check or CSRF token. const answersMatch = pathname.match( /^\/api\/interviews\/([^/]+)\/answers$/, ); if (request.method === 'POST' && answersMatch) { try { const body = parseAnswersPayload(await readJsonBody(request)); await deps.submitAnswers( decodeURIComponent(answersMatch[1]), body.answers, ); sendJson(response, 200, { ok: true, message: 'Answers submitted to the OpenCode session.', }); } catch (error) { const message = error instanceof Error ? error.message : 'Failed to submit answers.'; const status = getSubmissionStatus(error); sendJson(response, status, { ok: false, message, }); } return; } const blockCommentMatch = pathname.match( /^\/api\/interviews\/([^/]+)\/block-comment$/, ); if (request.method === 'POST' && blockCommentMatch) { try { const body = (await readJsonBody(request)) as { section?: string; comment?: string; }; if ( typeof body.section !== 'string' || typeof body.comment !== 'string' ) { sendJson(response, 400, { error: 'section and comment must be strings', }); return; } await deps.submitBlockComment( decodeURIComponent(blockCommentMatch[1]), body.section, body.comment, ); sendJson(response, 200, { ok: true, message: 'Block feedback forwarded.', }); } catch (error) { const message = error instanceof Error ? error.message : 'Failed to submit block comment.'; const status = getSubmissionStatus(error); sendJson(response, status, { ok: false, message }); } return; } // ── Chat: freeform message to agent ───────────────────────────── const chatMatch = pathname.match(/^\/api\/interviews\/([^/]+)\/chat$/); if (request.method === 'POST' && chatMatch) { try { const body = (await readJsonBody(request)) as { message?: string; }; if (typeof body.message !== 'string' || !body.message.trim()) { sendJson(response, 400, { error: 'message must be a non-empty string', }); return; } await deps.submitChat( decodeURIComponent(chatMatch[1]), body.message.trim(), ); sendJson(response, 200, { ok: true, message: 'Chat message forwarded to agent.', }); } catch (error) { const message = error instanceof Error ? error.message : 'Failed to submit chat message.'; const status = getSubmissionStatus(error); sendJson(response, status, { ok: false, message }); } return; } // Nudge: ask more questions or confirm complete const nudgeMatch = pathname.match(/^\/api\/interviews\/([^/]+)\/nudge$/); if (request.method === 'POST' && nudgeMatch) { try { const body = (await readJsonBody(request)) as { action?: string; }; if ( body.action !== 'more-questions' && body.action !== 'confirm-complete' ) { sendJson(response, 400, { error: 'action must be "more-questions" or "confirm-complete"', }); return; } await deps.handleNudgeAction( decodeURIComponent(nudgeMatch[1]), body.action, ); sendJson(response, 200, { ok: true, message: 'Nudge sent.' }); } catch (error) { const message = error instanceof Error ? error.message : 'Failed to nudge.'; const status = message === 'Interview not found' ? 404 : 500; sendJson(response, status, { ok: false, message }); } return; } sendJson(response, 404, { error: 'Not found' }); } async function ensureStarted(): Promise { if (baseUrl) { return baseUrl; } if (startPromise) { return startPromise; } startPromise = new Promise((resolve, reject) => { const server = createServer((request, response) => { handle(request, response).catch((error) => { sendJson(response, 500, { error: error instanceof Error ? error.message : 'Internal server error', }); }); }); server.requestTimeout = 30_000; server.headersTimeout = 10_000; activeServer = server; server.on('error', (error: NodeJS.ErrnoException) => { server.close(); activeServer = null; startPromise = null; if (error.code === 'EADDRINUSE') { reject( new Error( `Interview server port ${deps.port} is already in use. Choose a different port or set port to 0 for an OS-assigned port.`, ), ); } else { reject(error); } }); server.listen(deps.port, '127.0.0.1', () => { const address = server.address(); if (!address || typeof address === 'string') { startPromise = null; reject(new Error('Failed to start interview server')); return; } baseUrl = `http://127.0.0.1:${address.port}`; resolve(baseUrl); }); }); return startPromise; } return { ensureStarted, close: () => { if (activeServer) { activeServer.closeAllConnections(); activeServer.close(); activeServer = null; } baseUrl = null; startPromise = null; }, }; }