@agent-beam/beam 0.2.33 → 0.2.35

package/dist/monitor-config.js

@@ -9,8 +9,9 @@
 //             committed with the app, so keys are refused there.
 //   environment variables, then command-line flags.
 //
-// Each top-level setting (files, app, maxCpuPercent, llm) comes whole from the highest layer that
-// sets it, so a project can't half-override a managed LLM setup. `beam monitor configure` shows
+// Each top-level setting (files, app, maxCpuPercent, llm, pause) comes whole from the highest layer
+// that sets it, so a project can't half-override a managed LLM setup. Pausing (deny lists and the
+// command that reloads the web server) can't come from a project file: it runs a command. `beam monitor configure` shows
 // where every effective value came from.
 //
 // It's created the first time a monitor command runs after an upgrade, carrying over older
@@ -22,9 +23,11 @@ import { constants } from "node:fs";
 import { mkdir, open, rename, rm } from "node:fs/promises";
 import { join, resolve } from "node:path";
 import { getBeamHome } from "./config.js";
+import { DENY_FORMATS } from "./monitor-deny.js";
 export const monitorConfigPath = () => join(getBeamHome(), "monitor.json");
 export const DEFAULT_MONITOR_CONFIG = {
     version: 1, files: [], app: null, maxCpuPercent: 25, llm: { provider: "beam", model: null, baseUrl: null, apiKeyEnv: null },
+    pause: { denyFile: null, authDenyFile: null, llmDenyFile: null, format: "nginx", reload: null },
 };
 const invalid = (why) => new Error(`${monitorConfigPath()} is invalid (${why}). Fix it, or run 'beam monitor configure' to rewrite it.`);
 const isRecord = (v) => !!v && typeof v === "object" && !Array.isArray(v);
@@ -50,6 +53,16 @@ export function validateMonitorConfig(value) {
         throw invalid("llm.apiKeyEnv must be a variable name");
     if (llm.apiKey !== undefined && (typeof llm.apiKey !== "string" || !llm.apiKey.trim() || /\s/.test(llm.apiKey) || llm.apiKey.length > 4096))
         throw invalid("llm.apiKey must be a single key");
+    const pause = isRecord(value.pause) ? value.pause : {};
+    if (value.pause !== undefined && value.pause !== null && !isRecord(value.pause))
+        throw invalid("pause must be an object");
+    for (const field of ["denyFile", "authDenyFile", "llmDenyFile"])
+        if (!optionalString(pause[field], 4096) || pause[field] === "")
+            throw invalid(`pause.${field} must be a path`);
+    if (pause.format !== undefined && !DENY_FORMATS.includes(pause.format))
+        throw invalid(`pause.format must be ${DENY_FORMATS.join(" or ")}`);
+    if (!optionalString(pause.reload, 1000) || pause.reload === "")
+        throw invalid("pause.reload must be a command");
     return {
         version: 1,
         files: [...(value.files ?? [])],
@@ -62,6 +75,13 @@ export function validateMonitorConfig(value) {
             apiKeyEnv: llm.apiKeyEnv ?? null,
             ...(typeof llm.apiKey === "string" ? { apiKey: llm.apiKey } : {}),
         },
+        pause: {
+            denyFile: pause.denyFile ?? null,
+            authDenyFile: pause.authDenyFile ?? null,
+            llmDenyFile: pause.llmDenyFile ?? null,
+            format: pause.format ?? "nginx",
+            reload: pause.reload ?? null,
+        },
     };
 }
 /** The file's settings, or null when there's no file yet. Throws when it exists but is invalid. */
@@ -142,7 +162,7 @@ export function describeMonitorConfig(config) {
     const { apiKey, ...llm } = config.llm;
     return { ...config, llm: { ...llm, ...(apiKey ? { apiKey: "(stored)" } : {}) } };
 }
-const SETTING_KEYS = ["files", "app", "maxCpuPercent", "llm"];
+const SETTING_KEYS = ["files", "app", "maxCpuPercent", "llm", "pause"];
 export function managedConfigPath(env = process.env) {
     if (env.BEAM_MANAGED_CONFIG)
         return resolve(env.BEAM_MANAGED_CONFIG);
@@ -163,6 +183,8 @@ export function validateLayer(value, kind, path) {
         throw bad("unsupported version");
     if (isRecord(value.llm) && value.llm.apiKey !== undefined)
         throw bad("keys don't belong in a shared file: name the variable that holds it with llm.apiKeyEnv");
+    if (kind === "project" && value.pause !== undefined)
+        throw bad("pause runs a reload command on this server, so it can't come from a project file: set it with 'beam monitor configure' or in the managed config");
     const locked = value.locked ?? [];
     if (!Array.isArray(locked) || !locked.every(k => SETTING_KEYS.includes(k)))
         throw bad(`locked must list settings: ${SETTING_KEYS.join(", ")}`);

package/dist/monitor-config.js.map

@@ -1 +1 @@
-{"version":3,"file":"monitor-config.js","sourceRoot":"","sources":["../src/monitor-config.ts"],"names":[],"mappings":"AAAA,mGAAmG;AACnG,4DAA4D;AAC5D,EAAE;AACF,4GAA4G;AAC5G,8FAA8F;AAC9F,qCAAqC;AACrC,8FAA8F;AAC9F,8FAA8F;AAC9F,iEAAiE;AACjE,oDAAoD;AACpD,EAAE;AACF,kGAAkG;AAClG,gGAAgG;AAChG,yCAAyC;AACzC,EAAE;AACF,2FAA2F;AAC3F,gGAAgG;AAChG,gGAAgG;AAChG,4DAA4D;AAC5D,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAuB1C,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,cAAc,CAAC,CAAC;AAC3E,MAAM,CAAC,MAAM,sBAAsB,GAAsB;IACvD,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE;CAC5H,CAAC;AAEF,MAAM,OAAO,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC,GAAG,iBAAiB,EAAE,gBAAgB,GAAG,2DAA2D,CAAC,CAAC;AACjJ,MAAM,QAAQ,GAAG,CAAC,CAAU,EAAgC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AACjH,MAAM,cAAc,GAAG,CAAC,CAAU,EAAE,GAAW,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC;AAEhI,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC;QAAE,MAAM,OAAO,CAAC,qBAAqB,CAAC,CAAC;IAClF,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACjD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,KAAkB,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC;QAAE,MAAM,OAAO,CAAC,+BAA+B,CAAC,CAAC;IACjL,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC;QAAE,MAAM,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAC1E,MAAM,GAAG,GAAG,KAAK,CAAC,aAAa,IAAI,EAAE,CAAC;IACtC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,GAAG,IAAI,GAAG,CAAC;QAAE,MAAM,OAAO,CAAC,8CAA8C,CAAC,CAAC;IACxH,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,MAAM,CAAC,KAAK,QAAQ,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,IAAI,MAAM,CAAC,CAAC;QAAE,MAAM,OAAO,CAAC,sCAAsC,CAAC,CAAC;IACjK,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAAE,MAAM,OAAO,CAAC,gCAAgC,CAAC,CAAC;IAC3J,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC;QAAE,MAAM,OAAO,CAAC,2BAA2B,CAAC,CAAC;IACnF,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAAE,MAAM,OAAO,CAAC,uCAAuC,CAAC,CAAC;IAC1L,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC;QAAE,MAAM,OAAO,CAAC,iCAAiC,CAAC,CAAC;IAC9L,OAAO;QACL,OAAO,EAAE,CAAC;QACV,KAAK,EAAE,CAAC,GAAG,CAAE,KAAK,CAAC,KAA8B,IAAI,EAAE,CAAC,CAAC;QACzD,GAAG,EAAG,KAAK,CAAC,GAAiC,IAAI,IAAI;QACrD,aAAa,EAAE,GAAG;QAClB,GAAG,EAAE;YACH,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,IAAI,MAAM,CAAC;YACxC,KAAK,EAAG,GAAG,CAAC,KAAmC,IAAI,IAAI;YACvD,OAAO,EAAG,GAAG,CAAC,OAAqC,IAAI,IAAI;YAC3D,SAAS,EAAG,GAAG,CAAC,SAAuC,IAAI,IAAI;YAC/D,GAAG,CAAC,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClE;KACF,CAAC;AACJ,CAAC;AAED,mGAAmG;AACnG,MAAM,CAAC,KAAK,UAAU,iBAAiB;IACrC,IAAI,IAAI,CAAC;IACT,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,IAAI,CAAC,iBAAiB,EAAE,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;IAC3G,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACpE,MAAM,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACpC,CAAC;IACD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAChC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,IAAI,GAAG,EAAE,GAAG,IAAI;YAAE,MAAM,OAAO,CAAC,0BAA0B,CAAC,CAAC;QACzF,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,MAAM,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAAC,CAAC;QACpG,OAAO,qBAAqB,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC;YAAS,CAAC;QACT,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,MAAyB;IAChE,MAAM,IAAI,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;IAC3C,MAAM,KAAK,CAAC,WAAW,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7D,MAAM,GAAG,GAAG,GAAG,iBAAiB,EAAE,IAAI,UAAU,EAAE,MAAM,CAAC;IACzD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAC1C,IAAI,CAAC;YAAC,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;gBAAS,CAAC;YAAC,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QAAC,CAAC;QACnG,MAAM,MAAM,CAAC,GAAG,EAAE,iBAAiB,EAAE,CAAC,CAAC;IACzC,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACjC,CAAC;AACH,CAAC;AAED,qGAAqG;AACrG,MAAM,UAAU,eAAe,CAAC,GAAsB;IACpD,MAAM,OAAO,GAAG,GAAG,CAAC,iBAAiB,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC;IACtD,MAAM,KAAK,GAAG,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC;IACjD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAG,GAAG,CAAC,iBAAiB,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE;WACvD,CAAC,OAAO,IAAI,CAAC,qCAAqC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,IAAI,KAAK,IAAI,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACnI,OAAO,EAAE,GAAG,sBAAsB,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;AACzH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC5E,MAAM,QAAQ,GAAG,MAAM,iBAAiB,EAAE,CAAC;IAC3C,IAAI,QAAQ;QAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC1D,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,kBAAkB,CAAC,MAAM,CAAC,CAAC;QACjC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACpC,CAAC;AACH,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,qBAAqB,CAAC,MAAyB;IAC7D,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC;IACtC,OAAO,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,EAAE,GAAG,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;AACnF,CAAC;AAID,MAAM,YAAY,GAAiB,CAAC,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,CAAC,CAAC;AAG5E,MAAM,UAAU,iBAAiB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACpE,IAAI,GAAG,CAAC,mBAAmB;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IACrE,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,gDAAgD,CAAC;IAC3F,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC,GAAG,CAAC,WAAW,IAAI,iBAAiB,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC;IAC5G,OAAO,wBAAwB,CAAC;AAClC,CAAC;AACD,MAAM,CAAC,MAAM,mBAAmB,GAAG,mBAAmB,CAAC;AAEvD;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,KAAc,EAAE,IAA2B,EAAE,IAAY;IACrF,MAAM,GAAG,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC,GAAG,IAAI,gBAAgB,GAAG,IAAI,CAAC,CAAC;IACvE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC,CAAC;QAAE,MAAM,GAAG,CAAC,qBAAqB,CAAC,CAAC;IAC/G,IAAI,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,KAAK,SAAS;QACvD,MAAM,GAAG,CAAC,wFAAwF,CAAC,CAAC;IACtG,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC;IAClC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAe,CAAC,CAAC;QAAE,MAAM,GAAG,CAAC,8BAA8B,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC7J,IAAI,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM;QAAE,MAAM,GAAG,CAAC,2CAA2C,CAAC,CAAC;IAChG,gFAAgF;IAChF,MAAM,IAAI,GAAG,qBAAqB,CAAC,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;IACjH,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,KAAK,MAAM,GAAG,IAAI,YAAY;QAAE,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,SAAS;YAAG,QAAoC,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IACrH,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAsB,EAAE,CAAC;AACtD,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAAY;IACtC,IAAI,IAAI,CAAC;IACT,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;IAC5F,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACpE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,iBAAiB,CAAC,CAAC;IAC5C,CAAC;IACD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAChC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,IAAI,GAAG,EAAE,GAAG,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,yCAAyC,CAAC,CAAC;QACjH,IAAI,CAAC;YAAC,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,+BAA+B,CAAC,CAAC;QAAC,CAAC;IAC5H,CAAC;YAAS,CAAC;QACT,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;AACH,CAAC;AAcD,0GAA0G;AAC1G,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,UAA0E,EAAE;IACvH,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,MAAM,QAAQ,GAAsB,EAAE,GAAG,sBAAsB,EAAE,GAAG,EAAE,EAAE,GAAG,sBAAsB,CAAC,GAAG,EAAE,EAAE,CAAC;IAC1G,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAA8B,CAAC;IACvG,MAAM,MAAM,GAAG,IAAI,GAAG,EAAc,CAAC;IACrC,MAAM,OAAO,GAAgC,EAAE,CAAC;IAChD,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,KAAK,GAAG,CAAC,KAAgC,EAAE,IAAqB,EAAE,EAAE;QACxE,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;YAC/B,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,SAAS;YACxD,QAA+C,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;YAClE,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACvB,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,WAAW,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,CAAC;IAChD,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;SAC5F,CAAC;QACJ,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;QAC7D,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QACjC,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,MAAM;YAAE,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,SAAS;gBAAE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACvF,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IACxE,CAAC;IAED,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,MAAM,mBAAmB,CAAC,GAAG,CAAC,CAAC;IACjE,MAAM,OAAO,GAAoB,EAAE,CAAC;IACpC,KAAK,MAAM,GAAG,IAAI,YAAY;QAAE,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC;YAAG,OAAmC,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IACrK,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvB,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IAC5G,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACpD,IAAI,CAAC;YACH,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;YAClD,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;gBAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,iBAAiB,EAAE,6DAA6D,iBAAiB,EAAE,EAAE,CAAC,CAAC;QACtL,CAAC;QAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;IAC/B,CAAC;IAED,MAAM,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,EAAE,mBAAmB,CAAC,CAAC;IAC/H,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,CAAC;IAChD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,IAAI,OAAO,CAAC,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,WAAW,iBAAiB,CAAC,CAAC;QACzE,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;IAC7E,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,SAAS,EAAE,aAAa,CAAC,OAAO,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC1E,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,MAAM;QAAE,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,SAAS;YAAE,OAAO,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC;IACnF,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;AACnE,CAAC"}
+{"version":3,"file":"monitor-config.js","sourceRoot":"","sources":["../src/monitor-config.ts"],"names":[],"mappings":"AAAA,mGAAmG;AACnG,4DAA4D;AAC5D,EAAE;AACF,4GAA4G;AAC5G,8FAA8F;AAC9F,qCAAqC;AACrC,8FAA8F;AAC9F,8FAA8F;AAC9F,iEAAiE;AACjE,oDAAoD;AACpD,EAAE;AACF,oGAAoG;AACpG,kGAAkG;AAClG,yHAAyH;AACzH,yCAAyC;AACzC,EAAE;AACF,2FAA2F;AAC3F,gGAAgG;AAChG,gGAAgG;AAChG,4DAA4D;AAC5D,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,YAAY,EAA0C,MAAM,mBAAmB,CAAC;AAyBzF,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,cAAc,CAAC,CAAC;AAC3E,MAAM,CAAC,MAAM,sBAAsB,GAAsB;IACvD,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE;IAC3H,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE;CAChG,CAAC;AAEF,MAAM,OAAO,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC,GAAG,iBAAiB,EAAE,gBAAgB,GAAG,2DAA2D,CAAC,CAAC;AACjJ,MAAM,QAAQ,GAAG,CAAC,CAAU,EAAgC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AACjH,MAAM,cAAc,GAAG,CAAC,CAAU,EAAE,GAAW,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC;AAEhI,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC;QAAE,MAAM,OAAO,CAAC,qBAAqB,CAAC,CAAC;IAClF,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACjD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,KAAkB,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC;QAAE,MAAM,OAAO,CAAC,+BAA+B,CAAC,CAAC;IACjL,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC;QAAE,MAAM,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAC1E,MAAM,GAAG,GAAG,KAAK,CAAC,aAAa,IAAI,EAAE,CAAC;IACtC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,GAAG,IAAI,GAAG,CAAC;QAAE,MAAM,OAAO,CAAC,8CAA8C,CAAC,CAAC;IACxH,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,MAAM,CAAC,KAAK,QAAQ,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,IAAI,MAAM,CAAC,CAAC;QAAE,MAAM,OAAO,CAAC,sCAAsC,CAAC,CAAC;IACjK,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAAE,MAAM,OAAO,CAAC,gCAAgC,CAAC,CAAC;IAC3J,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC;QAAE,MAAM,OAAO,CAAC,2BAA2B,CAAC,CAAC;IACnF,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAAE,MAAM,OAAO,CAAC,uCAAuC,CAAC,CAAC;IAC1L,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC;QAAE,MAAM,OAAO,CAAC,iCAAiC,CAAC,CAAC;IAC9L,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IACvD,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC;QAAE,MAAM,OAAO,CAAC,yBAAyB,CAAC,CAAC;IAC1H,KAAK,MAAM,KAAK,IAAI,CAAC,UAAU,EAAE,cAAc,EAAE,aAAa,CAAU;QACtE,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE;YAAE,MAAM,OAAO,CAAC,SAAS,KAAK,iBAAiB,CAAC,CAAC;IACjH,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAoB,CAAC;QAAE,MAAM,OAAO,CAAC,wBAAwB,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACzJ,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE;QAAE,MAAM,OAAO,CAAC,gCAAgC,CAAC,CAAC;IAChH,OAAO;QACL,OAAO,EAAE,CAAC;QACV,KAAK,EAAE,CAAC,GAAG,CAAE,KAAK,CAAC,KAA8B,IAAI,EAAE,CAAC,CAAC;QACzD,GAAG,EAAG,KAAK,CAAC,GAAiC,IAAI,IAAI;QACrD,aAAa,EAAE,GAAG;QAClB,GAAG,EAAE;YACH,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,IAAI,MAAM,CAAC;YACxC,KAAK,EAAG,GAAG,CAAC,KAAmC,IAAI,IAAI;YACvD,OAAO,EAAG,GAAG,CAAC,OAAqC,IAAI,IAAI;YAC3D,SAAS,EAAG,GAAG,CAAC,SAAuC,IAAI,IAAI;YAC/D,GAAG,CAAC,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClE;QACD,KAAK,EAAE;YACL,QAAQ,EAAG,KAAK,CAAC,QAAsC,IAAI,IAAI;YAC/D,YAAY,EAAG,KAAK,CAAC,YAA0C,IAAI,IAAI;YACvE,WAAW,EAAG,KAAK,CAAC,WAAyC,IAAI,IAAI;YACrE,MAAM,EAAG,KAAK,CAAC,MAAiC,IAAI,OAAO;YAC3D,MAAM,EAAG,KAAK,CAAC,MAAoC,IAAI,IAAI;SAC5D;KACF,CAAC;AACJ,CAAC;AAED,mGAAmG;AACnG,MAAM,CAAC,KAAK,UAAU,iBAAiB;IACrC,IAAI,IAAI,CAAC;IACT,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,IAAI,CAAC,iBAAiB,EAAE,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;IAC3G,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACpE,MAAM,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACpC,CAAC;IACD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAChC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,IAAI,GAAG,EAAE,GAAG,IAAI;YAAE,MAAM,OAAO,CAAC,0BAA0B,CAAC,CAAC;QACzF,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,MAAM,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAAC,CAAC;QACpG,OAAO,qBAAqB,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC;YAAS,CAAC;QACT,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,MAAyB;IAChE,MAAM,IAAI,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;IAC3C,MAAM,KAAK,CAAC,WAAW,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7D,MAAM,GAAG,GAAG,GAAG,iBAAiB,EAAE,IAAI,UAAU,EAAE,MAAM,CAAC;IACzD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAC1C,IAAI,CAAC;YAAC,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;gBAAS,CAAC;YAAC,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QAAC,CAAC;QACnG,MAAM,MAAM,CAAC,GAAG,EAAE,iBAAiB,EAAE,CAAC,CAAC;IACzC,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACjC,CAAC;AACH,CAAC;AAED,qGAAqG;AACrG,MAAM,UAAU,eAAe,CAAC,GAAsB;IACpD,MAAM,OAAO,GAAG,GAAG,CAAC,iBAAiB,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC;IACtD,MAAM,KAAK,GAAG,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC;IACjD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAG,GAAG,CAAC,iBAAiB,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE;WACvD,CAAC,OAAO,IAAI,CAAC,qCAAqC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,IAAI,KAAK,IAAI,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACnI,OAAO,EAAE,GAAG,sBAAsB,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;AACzH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC5E,MAAM,QAAQ,GAAG,MAAM,iBAAiB,EAAE,CAAC;IAC3C,IAAI,QAAQ;QAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC1D,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,kBAAkB,CAAC,MAAM,CAAC,CAAC;QACjC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACpC,CAAC;AACH,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,qBAAqB,CAAC,MAAyB;IAC7D,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC;IACtC,OAAO,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,EAAE,GAAG,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;AACnF,CAAC;AAID,MAAM,YAAY,GAAiB,CAAC,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;AAGrF,MAAM,UAAU,iBAAiB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACpE,IAAI,GAAG,CAAC,mBAAmB;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IACrE,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,gDAAgD,CAAC;IAC3F,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC,GAAG,CAAC,WAAW,IAAI,iBAAiB,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC;IAC5G,OAAO,wBAAwB,CAAC;AAClC,CAAC;AACD,MAAM,CAAC,MAAM,mBAAmB,GAAG,mBAAmB,CAAC;AAEvD;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,KAAc,EAAE,IAA2B,EAAE,IAAY;IACrF,MAAM,GAAG,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC,GAAG,IAAI,gBAAgB,GAAG,IAAI,CAAC,CAAC;IACvE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC,CAAC;QAAE,MAAM,GAAG,CAAC,qBAAqB,CAAC,CAAC;IAC/G,IAAI,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,KAAK,SAAS;QACvD,MAAM,GAAG,CAAC,wFAAwF,CAAC,CAAC;IACtG,IAAI,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;QACjD,MAAM,GAAG,CAAC,iJAAiJ,CAAC,CAAC;IAC/J,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC;IAClC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAe,CAAC,CAAC;QAAE,MAAM,GAAG,CAAC,8BAA8B,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC7J,IAAI,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM;QAAE,MAAM,GAAG,CAAC,2CAA2C,CAAC,CAAC;IAChG,gFAAgF;IAChF,MAAM,IAAI,GAAG,qBAAqB,CAAC,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;IACjH,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,KAAK,MAAM,GAAG,IAAI,YAAY;QAAE,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,SAAS;YAAG,QAAoC,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IACrH,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAsB,EAAE,CAAC;AACtD,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAAY;IACtC,IAAI,IAAI,CAAC;IACT,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;IAC5F,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACpE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,iBAAiB,CAAC,CAAC;IAC5C,CAAC;IACD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAChC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,IAAI,GAAG,EAAE,GAAG,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,yCAAyC,CAAC,CAAC;QACjH,IAAI,CAAC;YAAC,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,+BAA+B,CAAC,CAAC;QAAC,CAAC;IAC5H,CAAC;YAAS,CAAC;QACT,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;AACH,CAAC;AAcD,0GAA0G;AAC1G,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,UAA0E,EAAE;IACvH,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,MAAM,QAAQ,GAAsB,EAAE,GAAG,sBAAsB,EAAE,GAAG,EAAE,EAAE,GAAG,sBAAsB,CAAC,GAAG,EAAE,EAAE,CAAC;IAC1G,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAA8B,CAAC;IACvG,MAAM,MAAM,GAAG,IAAI,GAAG,EAAc,CAAC;IACrC,MAAM,OAAO,GAAgC,EAAE,CAAC;IAChD,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,KAAK,GAAG,CAAC,KAAgC,EAAE,IAAqB,EAAE,EAAE;QACxE,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;YAC/B,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,SAAS;YACxD,QAA+C,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;YAClE,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACvB,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,WAAW,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,CAAC;IAChD,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;SAC5F,CAAC;QACJ,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;QAC7D,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QACjC,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,MAAM;YAAE,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,SAAS;gBAAE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACvF,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IACxE,CAAC;IAED,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,MAAM,mBAAmB,CAAC,GAAG,CAAC,CAAC;IACjE,MAAM,OAAO,GAAoB,EAAE,CAAC;IACpC,KAAK,MAAM,GAAG,IAAI,YAAY;QAAE,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC;YAAG,OAAmC,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IACrK,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvB,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IAC5G,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACpD,IAAI,CAAC;YACH,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;YAClD,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;gBAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,iBAAiB,EAAE,6DAA6D,iBAAiB,EAAE,EAAE,CAAC,CAAC;QACtL,CAAC;QAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;IAC/B,CAAC;IAED,MAAM,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,EAAE,mBAAmB,CAAC,CAAC;IAC/H,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,CAAC;IAChD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,IAAI,OAAO,CAAC,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,WAAW,iBAAiB,CAAC,CAAC;QACzE,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;IAC7E,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,SAAS,EAAE,aAAa,CAAC,OAAO,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC1E,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,MAAM;QAAE,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,SAAS;YAAE,OAAO,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC;IACnF,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;AACnE,CAAC"}

package/dist/monitor-deny.d.ts

@@ -0,0 +1,35 @@
+import type { Pause, PauseScope } from "./monitor-pause.js";
+export type DenyFormat = "nginx" | "plain";
+export declare const DENY_FORMATS: DenyFormat[];
+export interface DenyListSettings {
+    /** Pauses on the whole app. */
+    denyFile: string | null;
+    /** Pauses on sign-in routes only (password guessing). */
+    authDenyFile: string | null;
+    /** Pauses on LLM routes only (model abuse). */
+    llmDenyFile: string | null;
+    format: DenyFormat;
+    /** Run after a list changes, e.g. "nginx -s reload". Through the shell, with a 30-second limit. */
+    reload: string | null;
+}
+/** One scope's list, sorted so an unchanged set writes an identical file. */
+export declare function renderDenyList(pauses: Pause[], scope: PauseScope, format: DenyFormat, now?: number): string;
+/** Keeps the deny files in step with the pauses, reloading the web server after a change. */
+export declare class DenyListWriter {
+    private readonly settings;
+    private readonly log;
+    private written;
+    private reloadTimer;
+    private lastReload;
+    private inflight;
+    private pendingReload;
+    constructor(settings: DenyListSettings, log: (message: string) => void);
+    get enabled(): boolean;
+    private files;
+    /** Writes each list that changed; returns whether any did. Errors are logged, never thrown. */
+    update(pauses: Pause[]): Promise<boolean>;
+    /** Empties every list (on shutdown: pauses shouldn't outlive the process that keeps them current). */
+    clear(): Promise<void>;
+    private scheduleReload;
+    private reload;
+}

package/dist/monitor-deny.js

@@ -0,0 +1,141 @@
+// `beam monitor --deny-file`: the pauses in force as a web server deny list, so a server that
+// only has its logs watched can still refuse a paused sender. beam monitor reads logs after the
+// fact and can't answer requests itself; the web server in front of the app can. The list is
+// rewritten as pauses start and end, and an optional reload command (`nginx -s reload`) runs
+// after each change.
+//
+//   nginx   deny 203.0.113.9;   (include it in a server or location block)
+//   plain   203.0.113.9         (one per line: HAProxy `-f`, ipset restore scripts, anything else)
+//
+// Pauses scoped to sign-in or LLM routes go to their own files (--auth-deny-file, --llm-deny-file),
+// to include only in those locations. User pauses (user:<id>) can't be expressed as addresses and
+// are left to the SDK. Files are replaced atomically, so the server never reads half a list.
+import { spawn } from "node:child_process";
+import { randomUUID } from "node:crypto";
+import { open, rename, rm } from "node:fs/promises";
+import { dirname, join } from "node:path";
+export const DENY_FORMATS = ["nginx", "plain"];
+const RELOAD_TIMEOUT_MS = 30_000;
+const RELOAD_EVERY_MS = 5_000;
+// What a reason may show in a comment: no newlines, nothing a config parser could read as syntax.
+const safe = (text) => text.replace(/[^\w .:/()@+-]/g, "").slice(0, 120);
+/** One scope's list, sorted so an unchanged set writes an identical file. */
+export function renderDenyList(pauses, scope, format, now = Date.now()) {
+    const entries = pauses
+        .filter(p => p.scope === scope && !p.dryRun && p.until > now && !p.target.startsWith("user:"))
+        .sort((a, b) => a.target.localeCompare(b.target));
+    const where = scope === "all" ? "the whole app" : scope === "auth" ? "sign-in routes" : "LLM routes";
+    const header = [
+        `# Written by beam monitor: addresses AgentBeam paused from ${where}. Rewritten as pauses start and end; don't edit.`,
+        `# ${entries.length} paused.`,
+    ];
+    if (format === "plain")
+        return `${[...header, ...entries.map(p => p.target)].join("\n")}\n`;
+    return `${[...header, ...entries.map(p => `deny ${p.target};  # until ${new Date(p.until).toISOString().slice(0, 16)}Z: ${safe(p.reason)}`)].join("\n")}\n`;
+}
+/** Keeps the deny files in step with the pauses, reloading the web server after a change. */
+export class DenyListWriter {
+    settings;
+    log;
+    written = new Map();
+    reloadTimer;
+    lastReload = 0;
+    inflight = null;
+    pendingReload = false;
+    constructor(settings, log) {
+        this.settings = settings;
+        this.log = log;
+    }
+    get enabled() { return Boolean(this.settings.denyFile || this.settings.authDenyFile || this.settings.llmDenyFile); }
+    files() {
+        return [["all", this.settings.denyFile], ["auth", this.settings.authDenyFile], ["llm", this.settings.llmDenyFile]]
+            .filter((f) => Boolean(f[1]));
+    }
+    /** Writes each list that changed; returns whether any did. Errors are logged, never thrown. */
+    async update(pauses) {
+        let changed = false;
+        for (const [scope, path] of this.files()) {
+            const text = renderDenyList(pauses, scope, this.settings.format);
+            const body = text.split("\n").filter(l => !l.startsWith("#")).join("\n");
+            if (this.written.get(path) === body)
+                continue;
+            try {
+                await writeAtomically(path, text);
+                this.written.set(path, body);
+                changed = true;
+            }
+            catch (error) {
+                this.log(`Couldn't write ${path}: ${error.message}. Pauses for ${scope === "all" ? "the whole app" : `${scope} routes`} aren't enforced until it can be.`);
+            }
+        }
+        if (changed)
+            this.scheduleReload();
+        return changed;
+    }
+    /** Empties every list (on shutdown: pauses shouldn't outlive the process that keeps them current). */
+    async clear() {
+        await this.update([]);
+        // Now rather than after the debounce (the process is exiting), once any reload in flight is done.
+        await this.inflight;
+        if (this.reloadTimer) {
+            clearTimeout(this.reloadTimer);
+            this.reloadTimer = undefined;
+        }
+        await this.reload();
+    }
+    scheduleReload() {
+        if (!this.settings.reload)
+            return;
+        this.pendingReload = true;
+        if (this.reloadTimer)
+            return;
+        const wait = Math.max(0, this.lastReload + RELOAD_EVERY_MS - Date.now());
+        this.reloadTimer = setTimeout(() => { this.reloadTimer = undefined; void this.reload(); }, wait);
+        this.reloadTimer.unref?.();
+    }
+    reload() {
+        const command = this.settings.reload;
+        if (!command || this.inflight || !this.pendingReload)
+            return this.inflight ?? Promise.resolve();
+        this.pendingReload = false;
+        this.lastReload = Date.now();
+        this.inflight = run(command).then(({ code, output }) => {
+            if (code !== 0)
+                this.log(`The reload command (${command}) failed with exit code ${code}${output ? `: ${output}` : ""}. The deny list is written; the web server may still be using the old one.`);
+        }).finally(() => {
+            this.inflight = null;
+            if (this.pendingReload)
+                this.scheduleReload();
+        });
+        return this.inflight;
+    }
+}
+async function writeAtomically(path, text) {
+    const tmp = join(dirname(path), `.${randomUUID()}.beam-deny.tmp`);
+    try {
+        const file = await open(tmp, "wx", 0o644);
+        try {
+            await file.writeFile(text);
+        }
+        finally {
+            await file.close();
+        }
+        await rename(tmp, path);
+    }
+    finally {
+        await rm(tmp, { force: true });
+    }
+}
+function run(command) {
+    return new Promise(resolve => {
+        let output = "";
+        const child = spawn(command, { shell: true, stdio: ["ignore", "pipe", "pipe"] });
+        const keep = (chunk) => { output = (output + chunk.toString("utf8")).slice(-400); };
+        child.stdout?.on("data", keep);
+        child.stderr?.on("data", keep);
+        const timer = setTimeout(() => child.kill("SIGKILL"), RELOAD_TIMEOUT_MS);
+        child.on("error", error => { clearTimeout(timer); resolve({ code: -1, output: error.message }); });
+        child.on("close", code => { clearTimeout(timer); resolve({ code: code ?? -1, output: output.trim().replace(/\s+/g, " ") }); });
+    });
+}
+//# sourceMappingURL=monitor-deny.js.map

package/dist/monitor-deny.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"monitor-deny.js","sourceRoot":"","sources":["../src/monitor-deny.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,gGAAgG;AAChG,6FAA6F;AAC7F,6FAA6F;AAC7F,qBAAqB;AACrB,EAAE;AACF,2EAA2E;AAC3E,mGAAmG;AACnG,EAAE;AACF,oGAAoG;AACpG,kGAAkG;AAClG,6FAA6F;AAC7F,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAI1C,MAAM,CAAC,MAAM,YAAY,GAAiB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;AAc7D,MAAM,iBAAiB,GAAG,MAAM,CAAC;AACjC,MAAM,eAAe,GAAG,KAAK,CAAC;AAC9B,kGAAkG;AAClG,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAEjF,6EAA6E;AAC7E,MAAM,UAAU,cAAc,CAAC,MAAe,EAAE,KAAiB,EAAE,MAAkB,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IACrG,MAAM,OAAO,GAAG,MAAM;SACnB,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;SAC7F,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IACpD,MAAM,KAAK,GAAG,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,YAAY,CAAC;IACrG,MAAM,MAAM,GAAG;QACb,8DAA8D,KAAK,kDAAkD;QACrH,KAAK,OAAO,CAAC,MAAM,UAAU;KAC9B,CAAC;IACF,IAAI,MAAM,KAAK,OAAO;QAAE,OAAO,GAAG,CAAC,GAAG,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;IAC5F,OAAO,GAAG,CAAC,GAAG,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,MAAM,cAAc,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AAC9J,CAAC;AAED,6FAA6F;AAC7F,MAAM,OAAO,cAAc;IAOI;IAA6C;IANlE,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IACpC,WAAW,CAA6B;IACxC,UAAU,GAAG,CAAC,CAAC;IACf,QAAQ,GAAyB,IAAI,CAAC;IACtC,aAAa,GAAG,KAAK,CAAC;IAE9B,YAA6B,QAA0B,EAAmB,GAA8B;QAA3E,aAAQ,GAAR,QAAQ,CAAkB;QAAmB,QAAG,GAAH,GAAG,CAA2B;IAAG,CAAC;IAE5G,IAAI,OAAO,KAAc,OAAO,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IAErH,KAAK;QACX,OAAQ,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAmC;aAClJ,MAAM,CAAC,CAAC,CAAC,EAA6B,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7D,CAAC;IAED,+FAA+F;IAC/F,KAAK,CAAC,MAAM,CAAC,MAAe;QAC1B,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;YACzC,MAAM,IAAI,GAAG,cAAc,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACjE,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACzE,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI;gBAAE,SAAS;YAC9C,IAAI,CAAC;gBACH,MAAM,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBAClC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBAC7B,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,GAAG,CAAC,kBAAkB,IAAI,KAAM,KAAe,CAAC,OAAO,gBAAgB,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,GAAG,KAAK,SAAS,mCAAmC,CAAC,CAAC;YACxK,CAAC;QACH,CAAC;QACD,IAAI,OAAO;YAAE,IAAI,CAAC,cAAc,EAAE,CAAC;QACnC,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,sGAAsG;IACtG,KAAK,CAAC,KAAK;QACT,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACtB,kGAAkG;QAClG,MAAM,IAAI,CAAC,QAAQ,CAAC;QACpB,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YAAC,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAAC,IAAI,CAAC,WAAW,GAAG,SAAS,CAAC;QAAC,CAAC;QACvF,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;IACtB,CAAC;IAEO,cAAc;QACpB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM;YAAE,OAAO;QAClC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;QAC1B,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO;QAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,UAAU,GAAG,eAAe,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QACzE,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,WAAW,GAAG,SAAS,CAAC,CAAC,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QACjG,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,CAAC;IAC7B,CAAC;IAEO,MAAM;QACZ,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QACrC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,aAAa;YAAE,OAAO,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QAChG,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC;QAC3B,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,IAAI,CAAC,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE;YACrD,IAAI,IAAI,KAAK,CAAC;gBAAE,IAAI,CAAC,GAAG,CAAC,uBAAuB,OAAO,2BAA2B,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,4EAA4E,CAAC,CAAC;QACpM,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;YACd,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;YACrB,IAAI,IAAI,CAAC,aAAa;gBAAE,IAAI,CAAC,cAAc,EAAE,CAAC;QAChD,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;CACF;AAED,KAAK,UAAU,eAAe,CAAC,IAAY,EAAE,IAAY;IACvD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,UAAU,EAAE,gBAAgB,CAAC,CAAC;IAClE,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAC1C,IAAI,CAAC;YAAC,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;gBAAS,CAAC;YAAC,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QAAC,CAAC;QACnE,MAAM,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC1B,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACjC,CAAC;AACH,CAAC;AAED,SAAS,GAAG,CAAC,OAAe;IAC1B,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE;QAC3B,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QACjF,MAAM,IAAI,GAAG,CAAC,KAAa,EAAE,EAAE,GAAG,MAAM,GAAG,CAAC,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5F,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC/B,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC/B,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,iBAAiB,CAAC,CAAC;QACzE,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACnG,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACjI,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/monitor-pause.d.ts

@@ -0,0 +1,171 @@
+import type { MonitorFinding } from "./monitor-client.js";
+export type PauseScope = "all" | "auth" | "llm";
+export type PauseMode = "off" | "dry_run" | "auto";
+export declare const PAUSE_SCOPES: PauseScope[];
+export declare const PAUSE_MODES: PauseMode[];
+export interface Pause {
+    /** "203.0.113.9", "2001:db8:1:2::/64" (an IPv6 sender's /64) or "user:<id>". */
+    target: string;
+    scope: PauseScope;
+    /** Epoch ms. */
+    until: number;
+    reason: string;
+    ruleId?: string;
+    source: "auto" | "manual";
+    /** Dry run: recorded and reported, never enforced. */
+    dryRun?: boolean;
+}
+/** A pause this instance made, as sent to the workspace (POST /v1/monitor/pauses). */
+export interface PauseReport {
+    target: string;
+    scope: PauseScope;
+    until: string;
+    reason: string;
+    ruleId?: string;
+    findingId?: string;
+    source: "auto";
+    dryRun: boolean;
+    strike: number;
+}
+/** The workspace's pausing settings, from the config. */
+export interface PauseSettings {
+    mode: PauseMode;
+    /** Addresses, CIDR ranges and user:<id> targets that are never paused. */
+    allowlist: string[];
+    /** Automatic pauses active at once, at most. */
+    maxActive: number;
+    /** New automatic pauses within 10 minutes before the breaker stops pausing for 30 minutes. */
+    burst: number;
+}
+export declare const DEFAULT_PAUSE_SETTINGS: PauseSettings;
+/** What to do with one request or sender. */
+export interface Verdict {
+    paused: boolean;
+    /** Dry run: this would have been paused. */
+    wouldPause?: boolean;
+    scope?: PauseScope;
+    reason?: string;
+    /** ISO time the pause ends. */
+    until?: string;
+    /** Seconds until the pause ends, for a Retry-After header. */
+    retryAfter?: number;
+    target?: string;
+}
+export declare const MAX_AUTO_PAUSE_MS: number;
+/**
+ * Detections that pause their sender automatically, and for how long the first time. A repeat
+ * within a day pauses for four times as long, up to a day. Detections from a single request are
+ * left alone unless they're critical exploits that weren't refused: one odd request is rarely
+ * worth refusing someone, a pattern is.
+ */
+export declare const AUTO_PAUSES: Record<string, {
+    scope: PauseScope;
+    minutes: number;
+    label: string;
+    by: "ip" | "sender";
+}>;
+/** How a finding pauses its sender, or null when it doesn't. */
+export declare function autoPauseFor(finding: Pick<MonitorFinding, "ruleId" | "severity" | "category" | "source" | "rollup" | "request">): {
+    scope: PauseScope;
+    minutes: number;
+    label: string;
+    by: "ip" | "sender";
+} | null;
+interface Ip {
+    v: 4 | 6;
+    bytes: number[];
+}
+/** An IPv4 or IPv6 address as bytes (IPv4-mapped IPv6 is read as IPv4), or null. */
+export declare function parseIp(text: string | null | undefined): Ip | null;
+export declare function isProtectedIp(ip: string): boolean;
+/**
+ * What a pause on this address is keyed by: the address itself for IPv4, the /64 for IPv6 (one
+ * customer's network: rotating within it is free), or null when it isn't an address.
+ */
+export declare function pauseTarget(ip: string | null | undefined): string | null;
+/** user:<id> for a user id, or null. */
+export declare function userTarget(user: string | null | undefined): string | null;
+/** A target as typed by a person (an address, a CIDR range, or user:<id>), normalized; or null. */
+export declare function normalizeTarget(text: string): string | null;
+/**
+ * The client address of a request, when it can be trusted enough to pause: one the client can't
+ * forge. Platforms that set or overwrite the header (Cloudflare, Vercel, Fly.io) are read
+ * directly. Otherwise the address the app passed is checked against X-Forwarded-For: the first
+ * entry of a list is whatever the client sent, so it's never trusted, while the last entry (added
+ * by the app's own proxy), the only entry, or an address not in the header (the socket's, or
+ * Express's req.ip with trust proxy) is. Returns null when the address can't be trusted.
+ */
+export declare function trustedRequestIp(ip: string | null | undefined, header: (name: string) => string | undefined, platform: {
+    cloudflare?: boolean;
+    vercel?: boolean;
+    fly?: boolean;
+    trustGiven?: boolean;
+}): string | null;
+export interface PauseBookOptions {
+    now?: () => number;
+    /** Something a person should know: the breaker tripped, the cap was reached. */
+    onNotice?: (message: string, kind: "breaker" | "cap") => void;
+}
+/**
+ * The pauses one app instance knows about: those it made itself (local) and those from the
+ * workspace (remote: admins' pauses, and other instances' when pausing is on). Bounded.
+ */
+export declare class PauseBook {
+    private readonly opts;
+    private local;
+    private remote;
+    private remoteRanges;
+    private lifted;
+    private strikes;
+    private recent;
+    private breakerUntil;
+    private capNoticeAt;
+    private reports;
+    private allow;
+    private maintainedMinute;
+    private changes;
+    settings: PauseSettings;
+    /** Goes up whenever a pause is made here, so a caller can skip re-checking when nothing changed. */
+    get version(): number;
+    constructor(opts?: PauseBookOptions);
+    private now;
+    get size(): {
+        local: number;
+        remote: number;
+        strikes: number;
+        reports: number;
+    };
+    /** The workspace's settings, its active pauses, and pauses an admin lifted (from the config). */
+    configure(settings: Partial<PauseSettings> | null | undefined, pauses: unknown, lifted: unknown): void;
+    /** Whether the sender (address and/or user) is paused for this request. Never throws. */
+    check(who: {
+        ip?: string | null;
+        user?: string | null;
+    }, where?: {
+        path?: string;
+        llm?: boolean;
+    }): Verdict;
+    private find;
+    private allowedIp;
+    /**
+     * A finding was raised (or repeated) about a sender. Pauses the sender when the finding calls
+     * for it and the mode allows. `who` holds only what can be trusted: an address from
+     * trustedRequestIp, or the app's own user id. Returns the new pause, or null.
+     */
+    consider(finding: MonitorFinding, who: {
+        ip?: string | null;
+        user?: string | null;
+    }): Pause | null;
+    /** New pauses to send to the workspace; taken once. */
+    takeReports(): PauseReport[];
+    /** Puts reports back after a failed send (newest kept when over the cap). */
+    returnReports(reports: PauseReport[]): void;
+    /** Every pause in force now (not dry runs), local and remote, for a deny list. */
+    active(): Pause[];
+    private isAllowlistedTarget;
+    /** Once a minute: forget expired pauses, old strikes and lifted grace periods. */
+    private maintain;
+}
+/** The body an app returns to a paused sender: generic, so it tells an attacker nothing about why. */
+export declare function pausedBody(): string;
+export {};