Headless Koa v3 server exposing REST + SSE around the brain-dump skill:
- AgentBackend adapter seam with two implementations: Claude Agent SDK
(skill loading, session resume via sdk_session_id) and a hand-rolled
OpenAI-compatible tool-calling loop (vault-scoped file tools, SKILL.md
injected into the system prompt, history persisted in SQLite)
- session CRUD + one-turn-at-a-time SSE streaming (text deltas, file_write
events, turn_complete), per-session lock, abort on disconnect
- node:sqlite storage (sessions, messages, turn_events) with migrations
- vault allow-list + symlink-aware path-escape prevention (incl. dangling
symlink defense), read-only git status/diff endpoints, configurable CORS
- deterministic mock chat-completions server (scripts/mock-openai.ts) for
end-to-end testing without a real model
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
