@aion0/bastion 0.1.7

package/dist/proxy/router.js

@@ -0,0 +1,26 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveRoute = resolveRoute;
+exports.sendError = sendError;
+const index_js_1 = require("./providers/index.js");
+const logger_js_1 = require("../utils/logger.js");
+const log = (0, logger_js_1.createLogger)('router');
+function resolveRoute(req, opts) {
+    const path = req.url ?? '/';
+    const match = (0, index_js_1.getProvider)(path, opts);
+    if (!match) {
+        log.warn('No provider matched', { path });
+        return null;
+    }
+    const upstreamUrl = match.provider.baseUrl + path;
+    return {
+        provider: match.provider,
+        pathPrefix: match.pathPrefix,
+        upstreamUrl,
+    };
+}
+function sendError(res, statusCode, message) {
+    res.writeHead(statusCode, { 'content-type': 'application/json' });
+    res.end(JSON.stringify({ error: { message, type: 'gateway_error' } }));
+}
+//# sourceMappingURL=router.js.map

package/dist/proxy/router.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"router.js","sourceRoot":"","sources":["../../src/proxy/router.ts"],"names":[],"mappings":";;AAYA,oCAeC;AAED,8BAGC;AA/BD,mDAAwE;AACxE,kDAAkD;AAElD,MAAM,GAAG,GAAG,IAAA,wBAAY,EAAC,QAAQ,CAAC,CAAC;AAQnC,SAAgB,YAAY,CAAC,GAAoB,EAAE,IAAqC;IACtF,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC;IAC5B,MAAM,KAAK,GAAG,IAAA,sBAAW,EAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAEtC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,GAAG,CAAC,IAAI,CAAC,qBAAqB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,WAAW,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,GAAG,IAAI,CAAC;IAClD,OAAO;QACL,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,WAAW;KACZ,CAAC;AACJ,CAAC;AAED,SAAgB,SAAS,CAAC,GAAmB,EAAE,UAAkB,EAAE,OAAe;IAChF,GAAG,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;IAClE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,CAAC,CAAC,CAAC;AACzE,CAAC"}

package/dist/proxy/safety.d.ts

@@ -0,0 +1,13 @@
+import type { Server } from 'node:http';
+import type { ServerResponse, IncomingMessage } from 'node:http';
+/**
+ * Five-layer safety net:
+ * 1. Health check endpoint
+ * 2. Graceful shutdown
+ * 3. Uncaught exception handler
+ * 4. Unhandled rejection handler
+ * 5. Process signal handlers
+ */
+export declare function handleHealthCheck(req: IncomingMessage, res: ServerResponse): boolean;
+export declare function setupGracefulShutdown(server: Server, cleanup: () => void): void;
+//# sourceMappingURL=safety.d.ts.map

package/dist/proxy/safety.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"safety.d.ts","sourceRoot":"","sources":["../../src/proxy/safety.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,KAAK,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAKjE;;;;;;;GAOG;AAEH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO,CAYpF;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,IAAI,GAAG,IAAI,CAkC/E"}

package/dist/proxy/safety.js

@@ -0,0 +1,58 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.handleHealthCheck = handleHealthCheck;
+exports.setupGracefulShutdown = setupGracefulShutdown;
+const logger_js_1 = require("../utils/logger.js");
+const log = (0, logger_js_1.createLogger)('safety');
+/**
+ * Five-layer safety net:
+ * 1. Health check endpoint
+ * 2. Graceful shutdown
+ * 3. Uncaught exception handler
+ * 4. Unhandled rejection handler
+ * 5. Process signal handlers
+ */
+function handleHealthCheck(req, res) {
+    if (req.url === '/health' && req.method === 'GET') {
+        res.writeHead(200, { 'content-type': 'application/json' });
+        res.end(JSON.stringify({
+            status: 'ok',
+            uptime: process.uptime(),
+            memory: process.memoryUsage().rss,
+            pid: process.pid,
+        }));
+        return true;
+    }
+    return false;
+}
+function setupGracefulShutdown(server, cleanup) {
+    let isShuttingDown = false;
+    const shutdown = (signal) => {
+        if (isShuttingDown)
+            return;
+        isShuttingDown = true;
+        log.info('Received shutdown signal', { signal });
+        server.close(() => {
+            log.info('Server closed');
+            cleanup();
+            process.exit(0);
+        });
+        // Force exit after 10 seconds
+        setTimeout(() => {
+            log.error('Forced shutdown after timeout');
+            cleanup();
+            process.exit(1);
+        }, 10000).unref();
+    };
+    process.on('SIGTERM', () => shutdown('SIGTERM'));
+    process.on('SIGINT', () => shutdown('SIGINT'));
+    process.on('uncaughtException', (err) => {
+        log.error('Uncaught exception', { error: err.message, stack: err.stack });
+        // Continue running — fail-open philosophy
+    });
+    process.on('unhandledRejection', (reason) => {
+        log.error('Unhandled rejection', { reason: String(reason) });
+        // Continue running — fail-open philosophy
+    });
+}
+//# sourceMappingURL=safety.js.map

package/dist/proxy/safety.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"safety.js","sourceRoot":"","sources":["../../src/proxy/safety.ts"],"names":[],"mappings":";;AAeA,8CAYC;AAED,sDAkCC;AA7DD,kDAAkD;AAElD,MAAM,GAAG,GAAG,IAAA,wBAAY,EAAC,QAAQ,CAAC,CAAC;AAEnC;;;;;;;GAOG;AAEH,SAAgB,iBAAiB,CAAC,GAAoB,EAAE,GAAmB;IACzE,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QAClD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;YACrB,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE;YACxB,MAAM,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,GAAG;YACjC,GAAG,EAAE,OAAO,CAAC,GAAG;SACjB,CAAC,CAAC,CAAC;QACJ,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAgB,qBAAqB,CAAC,MAAc,EAAE,OAAmB;IACvE,IAAI,cAAc,GAAG,KAAK,CAAC;IAE3B,MAAM,QAAQ,GAAG,CAAC,MAAc,EAAE,EAAE;QAClC,IAAI,cAAc;YAAE,OAAO;QAC3B,cAAc,GAAG,IAAI,CAAC;QACtB,GAAG,CAAC,IAAI,CAAC,0BAA0B,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QAEjD,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE;YAChB,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YAC1B,OAAO,EAAE,CAAC;YACV,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC,CAAC,CAAC;QAEH,8BAA8B;QAC9B,UAAU,CAAC,GAAG,EAAE;YACd,GAAG,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;YAC3C,OAAO,EAAE,CAAC;YACV,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC,EAAE,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC;IACpB,CAAC,CAAC;IAEF,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;IACjD,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IAE/C,OAAO,CAAC,EAAE,CAAC,mBAAmB,EAAE,CAAC,GAAG,EAAE,EAAE;QACtC,GAAG,CAAC,KAAK,CAAC,oBAAoB,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;QAC1E,0CAA0C;IAC5C,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,EAAE,CAAC,oBAAoB,EAAE,CAAC,MAAM,EAAE,EAAE;QAC1C,GAAG,CAAC,KAAK,CAAC,qBAAqB,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC7D,0CAA0C;IAC5C,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/proxy/server.d.ts

@@ -0,0 +1,8 @@
+import { type Server } from 'node:http';
+import type Database from 'better-sqlite3';
+import type { BastionConfig } from '../config/schema.js';
+import type { PluginManager } from '../plugins/index.js';
+import type { ConfigManager } from '../config/manager.js';
+export declare function createProxyServer(config: BastionConfig, pluginManager: PluginManager, cleanup: () => void, db?: Database.Database, configManager?: ConfigManager, getPluginState?: (pluginName: string, key: string) => unknown | undefined): Server;
+export declare function startServer(server: Server, config: BastionConfig): Promise<void>;
+//# sourceMappingURL=server.d.ts.map

package/dist/proxy/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/proxy/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,KAAK,MAAM,EAAE,MAAM,WAAW,CAAC;AACtD,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAC3C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAa1D,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,aAAa,EACrB,aAAa,EAAE,aAAa,EAC5B,OAAO,EAAE,MAAM,IAAI,EACnB,EAAE,CAAC,EAAE,QAAQ,CAAC,QAAQ,EACtB,aAAa,CAAC,EAAE,aAAa,EAC7B,cAAc,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,OAAO,GAAG,SAAS,GACxE,MAAM,CA4GR;AAED,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAUhF"}

package/dist/proxy/server.js

@@ -0,0 +1,126 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createProxyServer = createProxyServer;
+exports.startServer = startServer;
+const node_http_1 = require("node:http");
+const router_js_1 = require("./router.js");
+const forwarder_js_1 = require("./forwarder.js");
+const passthrough_js_1 = require("./passthrough.js");
+const safety_js_1 = require("./safety.js");
+const page_js_1 = require("../dashboard/page.js");
+const api_routes_js_1 = require("../dashboard/api-routes.js");
+const connect_js_1 = require("./connect.js");
+const logger_js_1 = require("../utils/logger.js");
+const log = (0, logger_js_1.createLogger)('server');
+function createProxyServer(config, pluginManager, cleanup, db, configManager, getPluginState) {
+    // Set up API router if we have both db and configManager
+    const apiRouter = db && configManager
+        ? (0, api_routes_js_1.createApiRouter)(db, configManager, pluginManager, getPluginState)
+        : null;
+    const server = (0, node_http_1.createServer)(async (req, res) => {
+        // Layer 1: Health check
+        if ((0, safety_js_1.handleHealthCheck)(req, res))
+            return;
+        // Dashboard
+        const dashPath = (req.url ?? '').split('?')[0];
+        if (req.method === 'GET' && (dashPath === '/dashboard' || dashPath === '/dashboard/')) {
+            (0, page_js_1.serveDashboard)(res);
+            return;
+        }
+        // Auth check for /api/* routes
+        if (req.url?.startsWith('/api/') && configManager) {
+            const authCfg = configManager.get().server.auth;
+            if (authCfg?.enabled !== false && authCfg?.token) {
+                const excluded = (authCfg.excludePaths ?? []).some(p => req.url.startsWith(p));
+                if (!excluded) {
+                    const authHeader = req.headers['authorization'];
+                    const token = authHeader?.startsWith('Bearer ') ? authHeader.slice(7) : null;
+                    if (token !== authCfg.token) {
+                        res.writeHead(401, { 'content-type': 'application/json' });
+                        res.end(JSON.stringify({ error: 'Unauthorized' }));
+                        return;
+                    }
+                }
+            }
+        }
+        // API routes (GET, PUT)
+        if (apiRouter && (req.url?.startsWith('/api/') ?? false)) {
+            if (apiRouter(req, res))
+                return;
+        }
+        // Route to known provider path (exclude messaging providers in direct HTTP mode)
+        const route = (0, router_js_1.resolveRoute)(req, { excludeMessaging: true });
+        // If scanMethods is configured and non-empty, only scan listed methods
+        const scanMethods = config.server.scanMethods ?? [];
+        if (scanMethods.length > 0 && !scanMethods.includes(req.method ?? '')) {
+            (0, passthrough_js_1.passthroughRequest)(req, res, config.timeouts.upstream);
+            return;
+        }
+        // For direct HTTP mode, read session from X-Bastion-Session header
+        const sessionId = req.headers['x-bastion-session'];
+        // Determine provider and upstream URL — use route if matched,
+        // otherwise create fallback provider so unmatched paths (e.g. GET /v1/models)
+        // still go through the plugin pipeline for audit/DLP scanning
+        let provider;
+        let upstreamUrl;
+        if (route) {
+            provider = route.provider;
+            upstreamUrl = route.upstreamUrl;
+        }
+        else {
+            const upstream = (0, passthrough_js_1.detectUpstream)(req.headers);
+            upstreamUrl = upstream + (req.url ?? '/');
+            const hostname = new URL(upstream).hostname;
+            provider = {
+                name: hostname.replace(/\./g, '-'),
+                baseUrl: upstream,
+                authHeader: '',
+                transformHeaders(headers) {
+                    const result = {};
+                    for (const [key, value] of Object.entries(headers)) {
+                        const lower = key.toLowerCase();
+                        if (lower !== 'host' && lower !== 'connection' && lower !== 'transfer-encoding') {
+                            result[key] = value;
+                        }
+                    }
+                    return result;
+                },
+                extractModel() { return hostname; },
+                extractUsage() {
+                    return { inputTokens: 0, outputTokens: 0 };
+                },
+            };
+        }
+        try {
+            await (0, forwarder_js_1.forwardRequest)(req, res, {
+                provider,
+                upstreamUrl,
+                upstreamTimeout: config.timeouts.upstream,
+                pluginManager,
+                sessionId,
+            });
+        }
+        catch (err) {
+            log.error('Request handling failed', { error: err.message });
+            if (!res.headersSent) {
+                (0, router_js_1.sendError)(res, 500, 'Internal gateway error');
+            }
+        }
+    });
+    (0, safety_js_1.setupGracefulShutdown)(server, cleanup);
+    // Enable HTTPS_PROXY mode (CONNECT handler for MITM on API domains)
+    (0, connect_js_1.setupConnectHandler)(server, config, pluginManager);
+    return server;
+}
+function startServer(server, config) {
+    return new Promise((resolve) => {
+        server.listen(config.server.port, config.server.host, () => {
+            log.info('Bastion AI Gateway started', {
+                host: config.server.host,
+                port: config.server.port,
+            });
+            resolve();
+        });
+    });
+}
+//# sourceMappingURL=server.js.map

package/dist/proxy/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../src/proxy/server.ts"],"names":[],"mappings":";;AAiBA,8CAmHC;AAED,kCAUC;AAhJD,yCAAsD;AAKtD,2CAAsD;AACtD,iDAAgD;AAChD,qDAAsE;AAEtE,2CAAuE;AACvE,kDAAsD;AACtD,8DAA6D;AAC7D,6CAAmD;AACnD,kDAAkD;AAElD,MAAM,GAAG,GAAG,IAAA,wBAAY,EAAC,QAAQ,CAAC,CAAC;AAEnC,SAAgB,iBAAiB,CAC/B,MAAqB,EACrB,aAA4B,EAC5B,OAAmB,EACnB,EAAsB,EACtB,aAA6B,EAC7B,cAAyE;IAEzE,yDAAyD;IACzD,MAAM,SAAS,GAAG,EAAE,IAAI,aAAa;QACnC,CAAC,CAAC,IAAA,+BAAe,EAAC,EAAE,EAAE,aAAa,EAAE,aAAa,EAAE,cAAc,CAAC;QACnE,CAAC,CAAC,IAAI,CAAC;IAET,MAAM,MAAM,GAAG,IAAA,wBAAY,EAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC7C,wBAAwB;QACxB,IAAI,IAAA,6BAAiB,EAAC,GAAG,EAAE,GAAG,CAAC;YAAE,OAAO;QAExC,YAAY;QACZ,MAAM,QAAQ,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/C,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,CAAC,QAAQ,KAAK,YAAY,IAAI,QAAQ,KAAK,aAAa,CAAC,EAAE,CAAC;YACtF,IAAA,wBAAc,EAAC,GAAG,CAAC,CAAC;YACpB,OAAO;QACT,CAAC;QAED,+BAA+B;QAC/B,IAAI,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,OAAO,CAAC,IAAI,aAAa,EAAE,CAAC;YAClD,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC;YAChD,IAAI,OAAO,EAAE,OAAO,KAAK,KAAK,IAAI,OAAO,EAAE,KAAK,EAAE,CAAC;gBACjD,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,GAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;gBAChF,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,CAAuB,CAAC;oBACtE,MAAM,KAAK,GAAG,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;oBAC7E,IAAI,KAAK,KAAK,OAAO,CAAC,KAAK,EAAE,CAAC;wBAC5B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;wBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;wBACnD,OAAO;oBACT,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,wBAAwB;QACxB,IAAI,SAAS,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACzD,IAAI,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC;gBAAE,OAAO;QAClC,CAAC;QAED,iFAAiF;QACjF,MAAM,KAAK,GAAG,IAAA,wBAAY,EAAC,GAAG,EAAE,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC;QAE5D,uEAAuE;QACvE,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC;QACpD,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC;YACtE,IAAA,mCAAkB,EAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACvD,OAAO;QACT,CAAC;QAED,mEAAmE;QACnE,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAuB,CAAC;QAEzE,8DAA8D;QAC9D,8EAA8E;QAC9E,8DAA8D;QAC9D,IAAI,QAAwB,CAAC;QAC7B,IAAI,WAAmB,CAAC;QAExB,IAAI,KAAK,EAAE,CAAC;YACV,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;YAC1B,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;QAClC,CAAC;aAAM,CAAC;YACN,MAAM,QAAQ,GAAG,IAAA,+BAAc,EAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAC7C,WAAW,GAAG,QAAQ,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC;YAC1C,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC;YAC5C,QAAQ,GAAG;gBACT,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;gBAClC,OAAO,EAAE,QAAQ;gBACjB,UAAU,EAAE,EAAE;gBACd,gBAAgB,CAAC,OAA+B;oBAC9C,MAAM,MAAM,GAA2B,EAAE,CAAC;oBAC1C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;wBACnD,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;wBAChC,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,YAAY,IAAI,KAAK,KAAK,mBAAmB,EAAE,CAAC;4BAChF,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;wBACtB,CAAC;oBACH,CAAC;oBACD,OAAO,MAAM,CAAC;gBAChB,CAAC;gBACD,YAAY,KAAa,OAAO,QAAQ,CAAC,CAAC,CAAC;gBAC3C,YAAY;oBACV,OAAO,EAAE,WAAW,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC;gBAC7C,CAAC;aACF,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAA,6BAAc,EAAC,GAAG,EAAE,GAAG,EAAE;gBAC7B,QAAQ;gBACR,WAAW;gBACX,eAAe,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ;gBACzC,aAAa;gBACb,SAAS;aACV,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,KAAK,CAAC,yBAAyB,EAAE,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YACxE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBACrB,IAAA,qBAAS,EAAC,GAAG,EAAE,GAAG,EAAE,wBAAwB,CAAC,CAAC;YAChD,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,IAAA,iCAAqB,EAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAEvC,oEAAoE;IACpE,IAAA,gCAAmB,EAAC,MAAM,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;IAEnD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAgB,WAAW,CAAC,MAAc,EAAE,MAAqB;IAC/D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE;YACzD,GAAG,CAAC,IAAI,CAAC,4BAA4B,EAAE;gBACrC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI;gBACxB,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI;aACzB,CAAC,CAAC;YACH,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/proxy/streaming.d.ts

@@ -0,0 +1,21 @@
+/**
+ * SSE parser — inspects streaming events for metrics/DLP without modifying the stream.
+ * Raw bytes are always forwarded unmodified to clients.
+ */
+export interface SSEEvent {
+    event?: string;
+    data: string;
+}
+export type SSEEventHandler = (event: SSEEvent) => void;
+export declare class SSEParser {
+    private buffer;
+    private currentEvent;
+    private currentData;
+    private onEvent;
+    constructor(onEvent: SSEEventHandler);
+    feed(chunk: string): void;
+    flush(): void;
+}
+/** Extract JSON data from an SSE event, returns null if not valid JSON */
+export declare function parseSSEData(event: SSEEvent): Record<string, unknown> | null;
+//# sourceMappingURL=streaming.d.ts.map

package/dist/proxy/streaming.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"streaming.d.ts","sourceRoot":"","sources":["../../src/proxy/streaming.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,WAAW,QAAQ;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,MAAM,eAAe,GAAG,CAAC,KAAK,EAAE,QAAQ,KAAK,IAAI,CAAC;AAExD,qBAAa,SAAS;IACpB,OAAO,CAAC,MAAM,CAAM;IACpB,OAAO,CAAC,YAAY,CAAqB;IACzC,OAAO,CAAC,WAAW,CAAgB;IACnC,OAAO,CAAC,OAAO,CAAkB;gBAErB,OAAO,EAAE,eAAe;IAIpC,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAwBzB,KAAK,IAAI,IAAI;CAiBd;AAED,0EAA0E;AAC1E,wBAAgB,YAAY,CAAC,KAAK,EAAE,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAO5E"}

package/dist/proxy/streaming.js

@@ -0,0 +1,70 @@
+"use strict";
+/**
+ * SSE parser — inspects streaming events for metrics/DLP without modifying the stream.
+ * Raw bytes are always forwarded unmodified to clients.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SSEParser = void 0;
+exports.parseSSEData = parseSSEData;
+class SSEParser {
+    buffer = '';
+    currentEvent;
+    currentData = [];
+    onEvent;
+    constructor(onEvent) {
+        this.onEvent = onEvent;
+    }
+    feed(chunk) {
+        this.buffer += chunk;
+        const lines = this.buffer.split('\n');
+        // Keep the last incomplete line in the buffer
+        this.buffer = lines.pop() ?? '';
+        for (const rawLine of lines) {
+            // Strip trailing \r to handle both \n and \r\n line endings
+            const line = rawLine.endsWith('\r') ? rawLine.slice(0, -1) : rawLine;
+            if (line.startsWith('event: ')) {
+                this.currentEvent = line.slice(7).trim();
+            }
+            else if (line.startsWith('data: ')) {
+                this.currentData.push(line.slice(6));
+            }
+            else if (line === '') {
+                // Empty line = end of event
+                if (this.currentData.length > 0) {
+                    this.onEvent({ event: this.currentEvent, data: this.currentData.join('\n') });
+                }
+                this.currentEvent = undefined;
+                this.currentData = [];
+            }
+        }
+    }
+    flush() {
+        // Emit any pending event
+        if (this.currentData.length > 0) {
+            this.onEvent({ event: this.currentEvent, data: this.currentData.join('\n') });
+            this.currentEvent = undefined;
+            this.currentData = [];
+        }
+        // Check remaining buffer for a final data line
+        if (this.buffer.trim()) {
+            const line = this.buffer.trim();
+            if (line.startsWith('data: ')) {
+                this.onEvent({ event: undefined, data: line.slice(6) });
+            }
+        }
+        this.buffer = '';
+    }
+}
+exports.SSEParser = SSEParser;
+/** Extract JSON data from an SSE event, returns null if not valid JSON */
+function parseSSEData(event) {
+    if (event.data === '[DONE]')
+        return null;
+    try {
+        return JSON.parse(event.data);
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=streaming.js.map

package/dist/proxy/streaming.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"streaming.js","sourceRoot":"","sources":["../../src/proxy/streaming.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;AA+DH,oCAOC;AA7DD,MAAa,SAAS;IACZ,MAAM,GAAG,EAAE,CAAC;IACZ,YAAY,CAAqB;IACjC,WAAW,GAAa,EAAE,CAAC;IAC3B,OAAO,CAAkB;IAEjC,YAAY,OAAwB;QAClC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED,IAAI,CAAC,KAAa;QAChB,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC;QACrB,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACtC,8CAA8C;QAC9C,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;QAEhC,KAAK,MAAM,OAAO,IAAI,KAAK,EAAE,CAAC;YAC5B,4DAA4D;YAC5D,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YACrE,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC/B,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC3C,CAAC;iBAAM,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACrC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YACvC,CAAC;iBAAM,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;gBACvB,4BAA4B;gBAC5B,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAChC,IAAI,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBAChF,CAAC;gBACD,IAAI,CAAC,YAAY,GAAG,SAAS,CAAC;gBAC9B,IAAI,CAAC,WAAW,GAAG,EAAE,CAAC;YACxB,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK;QACH,yBAAyB;QACzB,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,IAAI,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC9E,IAAI,CAAC,YAAY,GAAG,SAAS,CAAC;YAC9B,IAAI,CAAC,WAAW,GAAG,EAAE,CAAC;QACxB,CAAC;QAED,+CAA+C;QAC/C,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;YACvB,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YAChC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC9B,IAAI,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC;IACnB,CAAC;CACF;AAnDD,8BAmDC;AAED,0EAA0E;AAC1E,SAAgB,YAAY,CAAC,KAAe;IAC1C,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACzC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAA4B,CAAC;IAC3D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/storage/database.d.ts

@@ -0,0 +1,6 @@
+import Database from 'better-sqlite3';
+export declare function getDatabase(dbPath?: string): Database.Database;
+export declare function closeDatabase(): void;
+/** Create an in-memory database for testing */
+export declare function createTestDatabase(): Database.Database;
+//# sourceMappingURL=database.d.ts.map

package/dist/storage/database.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"database.d.ts","sourceRoot":"","sources":["../../src/storage/database.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AAWtC,wBAAgB,WAAW,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAe9D;AAED,wBAAgB,aAAa,IAAI,IAAI,CAKpC;AAED,+CAA+C;AAC/C,wBAAgB,kBAAkB,IAAI,QAAQ,CAAC,QAAQ,CAMtD"}

package/dist/storage/database.js

@@ -0,0 +1,44 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getDatabase = getDatabase;
+exports.closeDatabase = closeDatabase;
+exports.createTestDatabase = createTestDatabase;
+const better_sqlite3_1 = __importDefault(require("better-sqlite3"));
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+const paths_js_1 = require("../config/paths.js");
+const logger_js_1 = require("../utils/logger.js");
+const migrations_js_1 = require("./migrations.js");
+const log = (0, logger_js_1.createLogger)('database');
+let db = null;
+function getDatabase(dbPath) {
+    if (db)
+        return db;
+    const resolvedPath = dbPath ?? paths_js_1.paths.databaseFile;
+    (0, node_fs_1.mkdirSync)((0, node_path_1.dirname)(resolvedPath), { recursive: true });
+    db = new better_sqlite3_1.default(resolvedPath);
+    db.pragma('journal_mode = WAL');
+    db.pragma('foreign_keys = ON');
+    db.pragma('busy_timeout = 5000');
+    (0, migrations_js_1.runMigrations)(db);
+    log.info('Database initialized', { path: resolvedPath });
+    return db;
+}
+function closeDatabase() {
+    if (db) {
+        db.close();
+        db = null;
+    }
+}
+/** Create an in-memory database for testing */
+function createTestDatabase() {
+    const testDb = new better_sqlite3_1.default(':memory:');
+    testDb.pragma('journal_mode = WAL');
+    testDb.pragma('foreign_keys = ON');
+    (0, migrations_js_1.runMigrations)(testDb);
+    return testDb;
+}
+//# sourceMappingURL=database.js.map

package/dist/storage/database.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"database.js","sourceRoot":"","sources":["../../src/storage/database.ts"],"names":[],"mappings":";;;;;AAWA,kCAeC;AAED,sCAKC;AAGD,gDAMC;AA1CD,oEAAsC;AACtC,qCAAoC;AACpC,yCAAoC;AACpC,iDAA2C;AAC3C,kDAAkD;AAClD,mDAAgD;AAEhD,MAAM,GAAG,GAAG,IAAA,wBAAY,EAAC,UAAU,CAAC,CAAC;AAErC,IAAI,EAAE,GAA6B,IAAI,CAAC;AAExC,SAAgB,WAAW,CAAC,MAAe;IACzC,IAAI,EAAE;QAAE,OAAO,EAAE,CAAC;IAElB,MAAM,YAAY,GAAG,MAAM,IAAI,gBAAK,CAAC,YAAY,CAAC;IAClD,IAAA,mBAAS,EAAC,IAAA,mBAAO,EAAC,YAAY,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEtD,EAAE,GAAG,IAAI,wBAAQ,CAAC,YAAY,CAAC,CAAC;IAChC,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAChC,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;IAC/B,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;IAEjC,IAAA,6BAAa,EAAC,EAAE,CAAC,CAAC;IAClB,GAAG,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;IAEzD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAgB,aAAa;IAC3B,IAAI,EAAE,EAAE,CAAC;QACP,EAAE,CAAC,KAAK,EAAE,CAAC;QACX,EAAE,GAAG,IAAI,CAAC;IACZ,CAAC;AACH,CAAC;AAED,+CAA+C;AAC/C,SAAgB,kBAAkB;IAChC,MAAM,MAAM,GAAG,IAAI,wBAAQ,CAAC,UAAU,CAAC,CAAC;IACxC,MAAM,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;IACpC,MAAM,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;IACnC,IAAA,6BAAa,EAAC,MAAM,CAAC,CAAC;IACtB,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/storage/encryption.d.ts

@@ -0,0 +1,11 @@
+export declare function getEncryptionKey(keyPath?: string): Buffer;
+export interface EncryptedData {
+    encrypted: Buffer;
+    iv: Buffer;
+    authTag: Buffer;
+}
+export declare function encrypt(plaintext: string, key?: Buffer): EncryptedData;
+export declare function decrypt(data: EncryptedData, key?: Buffer): string;
+/** Reset the cached key (for testing) */
+export declare function resetEncryptionKey(): void;
+//# sourceMappingURL=encryption.d.ts.map

package/dist/storage/encryption.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"encryption.d.ts","sourceRoot":"","sources":["../../src/storage/encryption.ts"],"names":[],"mappings":"AAWA,wBAAgB,gBAAgB,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAczD;AAED,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,wBAAgB,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,aAAa,CAStE;AAED,wBAAgB,OAAO,CAAC,IAAI,EAAE,aAAa,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,CAMjE;AAED,yCAAyC;AACzC,wBAAgB,kBAAkB,IAAI,IAAI,CAEzC"}

package/dist/storage/encryption.js

@@ -0,0 +1,47 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getEncryptionKey = getEncryptionKey;
+exports.encrypt = encrypt;
+exports.decrypt = decrypt;
+exports.resetEncryptionKey = resetEncryptionKey;
+const node_crypto_1 = require("node:crypto");
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+const paths_js_1 = require("../config/paths.js");
+const ALGORITHM = 'aes-256-gcm';
+const IV_LENGTH = 12;
+const AUTH_TAG_LENGTH = 16;
+let encryptionKey = null;
+function getEncryptionKey(keyPath) {
+    if (encryptionKey)
+        return encryptionKey;
+    const resolvedPath = keyPath ?? paths_js_1.paths.encryptionKeyFile;
+    if ((0, node_fs_1.existsSync)(resolvedPath)) {
+        encryptionKey = (0, node_fs_1.readFileSync)(resolvedPath);
+    }
+    else {
+        (0, node_fs_1.mkdirSync)((0, node_path_1.dirname)(resolvedPath), { recursive: true });
+        encryptionKey = (0, node_crypto_1.randomBytes)(32);
+        (0, node_fs_1.writeFileSync)(resolvedPath, encryptionKey, { mode: 0o600 });
+    }
+    return encryptionKey;
+}
+function encrypt(plaintext, key) {
+    const k = key ?? getEncryptionKey();
+    const iv = (0, node_crypto_1.randomBytes)(IV_LENGTH);
+    const cipher = (0, node_crypto_1.createCipheriv)(ALGORITHM, k, iv, { authTagLength: AUTH_TAG_LENGTH });
+    const encrypted = Buffer.concat([cipher.update(plaintext, 'utf-8'), cipher.final()]);
+    const authTag = cipher.getAuthTag();
+    return { encrypted, iv, authTag };
+}
+function decrypt(data, key) {
+    const k = key ?? getEncryptionKey();
+    const decipher = (0, node_crypto_1.createDecipheriv)(ALGORITHM, k, data.iv, { authTagLength: AUTH_TAG_LENGTH });
+    decipher.setAuthTag(data.authTag);
+    return decipher.update(data.encrypted) + decipher.final('utf-8');
+}
+/** Reset the cached key (for testing) */
+function resetEncryptionKey() {
+    encryptionKey = null;
+}
+//# sourceMappingURL=encryption.js.map

package/dist/storage/encryption.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"encryption.js","sourceRoot":"","sources":["../../src/storage/encryption.ts"],"names":[],"mappings":";;AAWA,4CAcC;AAQD,0BASC;AAED,0BAMC;AAGD,gDAEC;AAvDD,6CAA4E;AAC5E,qCAA6E;AAC7E,yCAAoC;AACpC,iDAA2C;AAE3C,MAAM,SAAS,GAAG,aAAa,CAAC;AAChC,MAAM,SAAS,GAAG,EAAE,CAAC;AACrB,MAAM,eAAe,GAAG,EAAE,CAAC;AAE3B,IAAI,aAAa,GAAkB,IAAI,CAAC;AAExC,SAAgB,gBAAgB,CAAC,OAAgB;IAC/C,IAAI,aAAa;QAAE,OAAO,aAAa,CAAC;IAExC,MAAM,YAAY,GAAG,OAAO,IAAI,gBAAK,CAAC,iBAAiB,CAAC;IAExD,IAAI,IAAA,oBAAU,EAAC,YAAY,CAAC,EAAE,CAAC;QAC7B,aAAa,GAAG,IAAA,sBAAY,EAAC,YAAY,CAAC,CAAC;IAC7C,CAAC;SAAM,CAAC;QACN,IAAA,mBAAS,EAAC,IAAA,mBAAO,EAAC,YAAY,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,aAAa,GAAG,IAAA,yBAAW,EAAC,EAAE,CAAC,CAAC;QAChC,IAAA,uBAAa,EAAC,YAAY,EAAE,aAAa,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED,OAAO,aAAa,CAAC;AACvB,CAAC;AAQD,SAAgB,OAAO,CAAC,SAAiB,EAAE,GAAY;IACrD,MAAM,CAAC,GAAG,GAAG,IAAI,gBAAgB,EAAE,CAAC;IACpC,MAAM,EAAE,GAAG,IAAA,yBAAW,EAAC,SAAS,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,IAAA,4BAAc,EAAC,SAAS,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,aAAa,EAAE,eAAe,EAAE,CAAC,CAAC;IAEpF,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACrF,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IAEpC,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC;AACpC,CAAC;AAED,SAAgB,OAAO,CAAC,IAAmB,EAAE,GAAY;IACvD,MAAM,CAAC,GAAG,GAAG,IAAI,gBAAgB,EAAE,CAAC;IACpC,MAAM,QAAQ,GAAG,IAAA,8BAAgB,EAAC,SAAS,EAAE,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,aAAa,EAAE,eAAe,EAAE,CAAC,CAAC;IAC7F,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAElC,OAAO,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;AACnE,CAAC;AAED,yCAAyC;AACzC,SAAgB,kBAAkB;IAChC,aAAa,GAAG,IAAI,CAAC;AACvB,CAAC"}

package/dist/storage/migrations.d.ts

@@ -0,0 +1,3 @@
+import type Database from 'better-sqlite3';
+export declare function runMigrations(db: Database.Database): void;
+//# sourceMappingURL=migrations.d.ts.map

package/dist/storage/migrations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrations.d.ts","sourceRoot":"","sources":["../../src/storage/migrations.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAkP3C,wBAAgB,aAAa,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,GAAG,IAAI,CAqCzD"}