Function createApp

apps/vis/server/src/app.ts:80–170

(options: CreateAppOptions = {})

/** Build a Hono app mounting /api/* routes, plus SPA static fallback. */
export async function createApp(options: CreateAppOptions = {}): Promise<Hono> {
  const app = new Hono();

  // /api/* handlers.
  const api = new Hono();
  const authToken = options.authToken;
  const home = options.homeDir ?? KIMI_CODE_HOME;
  if (authToken !== undefined && authToken.length > 0) {
    api.use('*', async (c, next) => {
      const token = bearerToken(c.req.header('authorization'));
      if (token !== null && tokenMatches(token, authToken)) {
        await next();
        return;
      }
      c.header('www-authenticate', 'Bearer realm="kimi-vis"');
      return c.json({ error: 'unauthorized', code: 'UNAUTHORIZED' }, 401);
    });
  }
  api.route('/sessions', sessionsRoute(home));
  api.route('/sessions', sessionDetailRoute(home));
  api.route('/sessions', wireRoute(home));
  api.route('/sessions', subagentsRoute(home));
  api.route('/sessions', blobsRoute(home));
  api.route('/sessions', tasksRoute(home));
  api.route('/sessions', cronRoute(home));
  api.route('/sessions', logsRoute(home));
  api.route('/imports', importsRoute(home));
  // Mount contextRoute last because it currently uses a catch-all stub
  // (Phase C scope) that would otherwise shadow more specific routes
  // registered below it.
  api.route('/sessions', contextRoute(home));

  app.route('/api', api);

  // Static + SPA fallback.
  if (options.webAsset !== undefined) {
    // Serve the embedded single-file SPA from memory for any non-/api GET.
    const asset = options.webAsset;
    app.get('*', (c) => {
      const pathname = new URL(c.req.url).pathname;
      if (pathname.startsWith('/api')) {
        // Should have been routed above; 404 here.
        return c.json({ error: `api route not found: ${pathname}`, code: 'NOT_FOUND' }, 404);
      }
      return serveWebAsset(asset);
    });
  } else {
    // Filesystem static serving (production standalone only).
    const publicDir = await resolvePublicDir();
    if (publicDir !== null) {
      app.get('*', async (c) => {
        const url = new URL(c.req.url);
        let pathname = decodeURIComponent(url.pathname);
        if (pathname.startsWith('/api')) {
          // Should have been routed above; 404 here.
          return c.json({ error: `api route not found: ${pathname}`, code: 'NOT_FOUND' }, 404);
        }
        if (pathname === '/' || pathname === '') pathname = '/index.html';