@cleocode/cleo 2026.3.56 → 2026.3.58

package/dist/dispatch/lib/security.js

@@ -0,0 +1,10 @@
+/**
+ * Security Hardening and Input Sanitization (Backward-Compat Re-export)
+ *
+ * Thin wrapper that re-exports from the canonical location at
+ * src/core/security/input-sanitization.ts.
+ *
+ * @task T5706
+ */
+export { ALL_VALID_STATUSES, DEFAULT_RATE_LIMITS, ensureArray, RateLimiter, SecurityError, sanitizeContent, sanitizeParams, sanitizePath, sanitizeTaskId, VALID_DOMAINS, VALID_GATEWAYS, VALID_LIFECYCLE_STAGE_STATUSES, VALID_MANIFEST_STATUSES, VALID_PRIORITIES, validateEnum, } from '@cleocode/core/internal';
+//# sourceMappingURL=security.js.map

package/dist/dispatch/lib/security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.js","sourceRoot":"","sources":["../../../src/dispatch/lib/security.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,WAAW,EACX,WAAW,EACX,aAAa,EACb,eAAe,EACf,cAAc,EACd,YAAY,EACZ,cAAc,EACd,aAAa,EACb,cAAc,EACd,8BAA8B,EAC9B,uBAAuB,EACvB,gBAAgB,EAChB,YAAY,GACb,MAAM,yBAAyB,CAAC"}

package/dist/dispatch/middleware/audit.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Audit Trail Middleware for CQRS Dispatch Layer.
+ *
+ * Dual-writes every audited operation to:
+ *   1. Pino structured log (subsystem: 'audit') -> .cleo/logs/cleo.log
+ *   2. SQLite audit_log table -> .cleo/tasks.db
+ *
+ * Legacy JSON file logging (.cleo/audit-log.json + rotated audit-log-*.json)
+ * has been removed per ADR-019.
+ *
+ * @task T2920
+ * @task T2929
+ * @task T4844
+ */
+import type { Middleware } from '../types.js';
+export type { AuditEntry } from '@cleocode/core/internal';
+/**
+ * Creates an audit middleware that logs all mutate operations
+ * (and query operations during grade sessions) to Pino + SQLite.
+ */
+export declare function createAudit(): Middleware;
+export { queryAudit } from '@cleocode/core/internal';
+//# sourceMappingURL=audit.d.ts.map

package/dist/dispatch/middleware/audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../../src/dispatch/middleware/audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAIH,OAAO,KAAK,EAAmD,UAAU,EAAE,MAAM,aAAa,CAAC;AAkB/F,YAAY,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAqF1D;;;GAGG;AACH,wBAAgB,WAAW,IAAI,UAAU,CAkExC;AAGD,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC"}

package/dist/dispatch/middleware/audit.js

@@ -0,0 +1,169 @@
+/**
+ * Audit Trail Middleware for CQRS Dispatch Layer.
+ *
+ * Dual-writes every audited operation to:
+ *   1. Pino structured log (subsystem: 'audit') -> .cleo/logs/cleo.log
+ *   2. SQLite audit_log table -> .cleo/tasks.db
+ *
+ * Legacy JSON file logging (.cleo/audit-log.json + rotated audit-log-*.json)
+ * has been removed per ADR-019.
+ *
+ * @task T2920
+ * @task T2929
+ * @task T4844
+ */
+import { getLogger, getProjectInfoSync } from '@cleocode/core/internal';
+import { getConfig } from '../lib/config.js';
+const log = getLogger('audit');
+/** Cached project hash — read once from project-info.json (immutable at runtime). */
+let cachedProjectHash;
+function resolveProjectHash() {
+    if (cachedProjectHash !== undefined)
+        return cachedProjectHash;
+    try {
+        const info = getProjectInfoSync();
+        cachedProjectHash = info?.projectHash ?? null;
+    }
+    catch {
+        cachedProjectHash = null;
+    }
+    return cachedProjectHash;
+}
+/**
+ * Check if the current context is a grade session.
+ *
+ * Now simplified: session-resolver middleware (T4959) populates request.sessionId
+ * before audit runs, so we only need to check grade mode flags.
+ */
+function isGradeMode() {
+    return process.env.CLEO_SESSION_GRADE === 'true';
+}
+/**
+ * Get active session info from SQLite or env vars.
+ *
+ * Session-resolver middleware (T4959) now populates request.sessionId.
+ * This function is retained as a fallback for edge cases where
+ * session-resolver is not in the pipeline (e.g., tests, legacy callers).
+ */
+async function getActiveSessionInfo() {
+    const gradeId = process.env.CLEO_SESSION_GRADE_ID;
+    if (gradeId && process.env.CLEO_SESSION_GRADE === 'true') {
+        return { id: gradeId, gradeMode: true };
+    }
+    const envId = process.env.CLEO_SESSION_ID;
+    if (envId) {
+        return { id: envId, gradeMode: false };
+    }
+    return null;
+}
+/**
+ * Write audit entry to SQLite audit_log table.
+ * Validates the payload with Zod before inserting.
+ * Fire-and-forget — errors are logged to Pino but never thrown.
+ *
+ * @task T4848
+ */
+async function writeToSqlite(entry, requestId) {
+    try {
+        const { getDb } = await import('@cleocode/core/internal');
+        const { auditLog } = await import('@cleocode/core/internal');
+        const { AuditLogInsertSchema } = await import('@cleocode/core/internal');
+        const { randomUUID } = await import('node:crypto');
+        const payload = {
+            id: randomUUID(),
+            timestamp: entry.timestamp,
+            action: entry.operation,
+            taskId: entry.metadata.taskId ?? 'system',
+            actor: entry.metadata.userId ?? 'agent',
+            detailsJson: JSON.stringify(entry.params),
+            // Dispatch-level columns (ADR-019)
+            domain: entry.domain,
+            operation: entry.operation,
+            sessionId: entry.sessionId,
+            requestId: requestId ?? null,
+            durationMs: entry.result.duration,
+            success: entry.result.success ? 1 : 0,
+            source: entry.metadata.source,
+            gateway: entry.metadata.gateway ?? null,
+            errorMessage: entry.error ?? null,
+            // Project correlation (T5337)
+            projectHash: resolveProjectHash(),
+        };
+        // Validate payload before insert (T4848)
+        const parsed = AuditLogInsertSchema.safeParse(payload);
+        if (!parsed.success) {
+            log.warn({ issues: parsed.error.issues }, 'Audit payload failed Zod validation; skipping insert');
+            return;
+        }
+        const db = await getDb(process.cwd());
+        await db.insert(auditLog).values(parsed.data).run();
+    }
+    catch (err) {
+        log.warn({ err }, 'Failed to write audit entry to SQLite');
+    }
+}
+/**
+ * Creates an audit middleware that logs all mutate operations
+ * (and query operations during grade sessions) to Pino + SQLite.
+ */
+export function createAudit() {
+    return async (req, next) => {
+        const startTime = Date.now();
+        // T4959: session-resolver middleware now populates req.sessionId before
+        // audit runs. Fall back to legacy lookup only if resolver missed it.
+        const currentSessionId = req.sessionId ?? (await getActiveSessionInfo())?.id ?? null;
+        const isGradeSession = isGradeMode();
+        const response = await next();
+        // Audit mutations always; audit queries only during grade sessions
+        const shouldAudit = req.gateway === 'mutate' || (req.gateway === 'query' && isGradeSession);
+        if (!shouldAudit)
+            return response;
+        // Check if audit logging is enabled
+        const config = getConfig();
+        if (!config.auditLog)
+            return response;
+        const entry = {
+            timestamp: new Date().toISOString(),
+            sessionId: currentSessionId,
+            domain: req.domain,
+            operation: req.operation,
+            params: req.params || {},
+            result: {
+                success: response.success,
+                exitCode: response.error?.exitCode || 0,
+                duration: Date.now() - startTime,
+            },
+            metadata: {
+                taskId: req.params?.taskId || req.params?.parent,
+                source: req.source,
+                gateway: req.gateway,
+            },
+            error: response.error?.message,
+        };
+        // Pino structured log (immediate, non-blocking)
+        log.info({
+            domain: entry.domain,
+            operation: entry.operation,
+            sessionId: entry.sessionId,
+            taskId: entry.metadata.taskId,
+            gateway: entry.metadata.gateway,
+            success: entry.result.success,
+            exitCode: entry.result.exitCode,
+            durationMs: entry.result.duration,
+        }, `${entry.metadata.gateway ?? 'dispatch'} ${entry.domain}.${entry.operation}`);
+        // SQLite write — await in grade mode to avoid race with grading query;
+        // fire-and-forget otherwise for performance.
+        if (isGradeSession) {
+            await writeToSqlite(entry, req.requestId);
+        }
+        else {
+            writeToSqlite(entry, req.requestId).catch((err) => {
+                log.error({ err }, 'Failed to persist audit entry to SQLite');
+            });
+        }
+        return response;
+    };
+}
+// queryAudit re-exported from core (canonical location)
+export { queryAudit } from '@cleocode/core/internal';
+//# sourceMappingURL=audit.js.map

package/dist/dispatch/middleware/audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../../src/dispatch/middleware/audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,SAAS,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AACxE,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAG7C,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;AAE/B,qFAAqF;AACrF,IAAI,iBAA4C,CAAC;AACjD,SAAS,kBAAkB;IACzB,IAAI,iBAAiB,KAAK,SAAS;QAAE,OAAO,iBAAiB,CAAC;IAC9D,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,kBAAkB,EAAE,CAAC;QAClC,iBAAiB,GAAG,IAAI,EAAE,WAAW,IAAI,IAAI,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,iBAAiB,GAAG,IAAI,CAAC;IAC3B,CAAC;IACD,OAAO,iBAAiB,CAAC;AAC3B,CAAC;AAOD;;;;;GAKG;AACH,SAAS,WAAW;IAClB,OAAO,OAAO,CAAC,GAAG,CAAC,kBAAkB,KAAK,MAAM,CAAC;AACnD,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,oBAAoB;IACjC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;IAClD,IAAI,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,KAAK,MAAM,EAAE,CAAC;QACzD,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAC1C,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;IAC1C,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACzC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,aAAa,CAAC,KAAiB,EAAE,SAAkB;IAChE,IAAI,CAAC;QACH,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;QAC1D,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;QAC7D,MAAM,EAAE,oBAAoB,EAAE,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;QACzE,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;QAEnD,MAAM,OAAO,GAAG;YACd,EAAE,EAAE,UAAU,EAAE;YAChB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,MAAM,EAAE,KAAK,CAAC,SAAS;YACvB,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM,IAAI,QAAQ;YACzC,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM,IAAI,OAAO;YACvC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC;YACzC,mCAAmC;YACnC,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,SAAS,EAAE,SAAS,IAAI,IAAI;YAC5B,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ;YACjC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACrC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM;YAC7B,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,OAAO,IAAI,IAAI;YACvC,YAAY,EAAE,KAAK,CAAC,KAAK,IAAI,IAAI;YACjC,8BAA8B;YAC9B,WAAW,EAAE,kBAAkB,EAAE;SAClC,CAAC;QAEF,yCAAyC;QACzC,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACvD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,GAAG,CAAC,IAAI,CACN,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,EAC/B,sDAAsD,CACvD,CAAC;YACF,OAAO;QACT,CAAC;QAED,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QACtC,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC;IACtD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,uCAAuC,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW;IACzB,OAAO,KAAK,EAAE,GAAoB,EAAE,IAAkB,EAA6B,EAAE;QACnF,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,wEAAwE;QACxE,qEAAqE;QACrE,MAAM,gBAAgB,GACpB,GAAG,CAAC,SAAS,IAAI,CAAC,MAAM,oBAAoB,EAAE,CAAC,EAAE,EAAE,IAAI,IAAI,CAAC;QAC9D,MAAM,cAAc,GAAG,WAAW,EAAE,CAAC;QAErC,MAAM,QAAQ,GAAG,MAAM,IAAI,EAAE,CAAC;QAE9B,mEAAmE;QACnE,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,OAAO,KAAK,OAAO,IAAI,cAAc,CAAC,CAAC;QAC5F,IAAI,CAAC,WAAW;YAAE,OAAO,QAAQ,CAAC;QAElC,oCAAoC;QACpC,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,IAAI,CAAC,MAAM,CAAC,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAEtC,MAAM,KAAK,GAAe;YACxB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,SAAS,EAAE,gBAAgB;YAC3B,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE;YACxB,MAAM,EAAE;gBACN,OAAO,EAAE,QAAQ,CAAC,OAAO;gBACzB,QAAQ,EAAE,QAAQ,CAAC,KAAK,EAAE,QAAQ,IAAI,CAAC;gBACvC,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;aACjC;YACD,QAAQ,EAAE;gBACR,MAAM,EAAG,GAAG,CAAC,MAAM,EAAE,MAAiB,IAAK,GAAG,CAAC,MAAM,EAAE,MAAiB;gBACxE,MAAM,EAAE,GAAG,CAAC,MAAuB;gBACnC,OAAO,EAAE,GAAG,CAAC,OAA6B;aAC3C;YACD,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,OAAO;SAC/B,CAAC;QAEF,gDAAgD;QAChD,GAAG,CAAC,IAAI,CACN;YACE,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM;YAC7B,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,OAAO;YAC/B,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO;YAC7B,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ;YAC/B,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ;SAClC,EACD,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,IAAI,UAAU,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,SAAS,EAAE,CAC7E,CAAC;QAEF,uEAAuE;QACvE,6CAA6C;QAC7C,IAAI,cAAc,EAAE,CAAC;YACnB,MAAM,aAAa,CAAC,KAAK,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;QAC5C,CAAC;aAAM,CAAC;YACN,aAAa,CAAC,KAAK,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;gBAChD,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,yCAAyC,CAAC,CAAC;YAChE,CAAC,CAAC,CAAC;QACL,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC;AACJ,CAAC;AAED,wDAAwD;AACxD,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC"}

package/dist/dispatch/middleware/field-filter.d.ts

@@ -0,0 +1,24 @@
+/**
+ * LAFS Field Filter Middleware
+ *
+ * Implements LAFS _fields parameter (field selection) and _mvi envelope verbosity.
+ * Extracts _fields and _mvi from params (for MCP agents that pass them as params),
+ * stores them on the request, and post-processes the response via the canonical
+ * SDK utilities from @cleocode/lafs-protocol v1.5.0.
+ *
+ * @epic T4820
+ * @task T4979
+ */
+import type { Middleware } from '../types.js';
+/**
+ * Create the LAFS field-filter middleware.
+ *
+ * Handles:
+ * - _fields: filter response data to specified fields (delegates to SDK applyFieldFilter)
+ * - _mvi: envelope verbosity — stored on request for downstream use
+ *
+ * _fields and _mvi are extracted from req.params (for MCP callers that pass
+ * them as params) and stored on the DispatchRequest before the domain handler runs.
+ */
+export declare function createFieldFilter(): Middleware;
+//# sourceMappingURL=field-filter.d.ts.map

package/dist/dispatch/middleware/field-filter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"field-filter.d.ts","sourceRoot":"","sources":["../../../src/dispatch/middleware/field-filter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH,OAAO,KAAK,EAAqC,UAAU,EAAE,MAAM,aAAa,CAAC;AAEjF;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,IAAI,UAAU,CA+C9C"}

package/dist/dispatch/middleware/field-filter.js

@@ -0,0 +1,65 @@
+/**
+ * LAFS Field Filter Middleware
+ *
+ * Implements LAFS _fields parameter (field selection) and _mvi envelope verbosity.
+ * Extracts _fields and _mvi from params (for MCP agents that pass them as params),
+ * stores them on the request, and post-processes the response via the canonical
+ * SDK utilities from @cleocode/lafs-protocol v1.5.0.
+ *
+ * @epic T4820
+ * @task T4979
+ */
+import { isMVILevel, applyFieldFilter as sdkApplyFieldFilter } from '@cleocode/lafs-protocol';
+/**
+ * Create the LAFS field-filter middleware.
+ *
+ * Handles:
+ * - _fields: filter response data to specified fields (delegates to SDK applyFieldFilter)
+ * - _mvi: envelope verbosity — stored on request for downstream use
+ *
+ * _fields and _mvi are extracted from req.params (for MCP callers that pass
+ * them as params) and stored on the DispatchRequest before the domain handler runs.
+ */
+export function createFieldFilter() {
+    return async (req, next) => {
+        // Extract control params from req.params (MCP agents pass them here)
+        const _fields = req._fields ?? req.params?._fields;
+        const rawMvi = req._mvi ?? req.params?._mvi;
+        const _mvi = isMVILevel(rawMvi) ? rawMvi : undefined;
+        // Remove from params so domain handlers don't see them
+        if (req.params) {
+            delete req.params['_fields'];
+            delete req.params['_mvi'];
+        }
+        // Store on request for potential downstream use
+        if (_fields)
+            req._fields = _fields;
+        if (_mvi)
+            req._mvi = _mvi;
+        const response = await next();
+        // Apply _fields filter via SDK — handles all four result shapes,
+        // preserves envelope structure, sets _meta.mvi = 'custom' per §9.1
+        if (_fields?.length && response.success && response.data !== undefined) {
+            const stub = {
+                $schema: 'https://lafs.dev/schemas/v1/envelope.schema.json',
+                _meta: {
+                    specVersion: '',
+                    schemaVersion: '',
+                    timestamp: response._meta.timestamp,
+                    operation: response._meta.operation,
+                    requestId: response._meta.requestId,
+                    transport: 'sdk',
+                    strict: true,
+                    mvi: 'standard',
+                    contextVersion: 0,
+                },
+                success: true,
+                result: response.data,
+            };
+            const filtered = sdkApplyFieldFilter(stub, _fields);
+            response.data = filtered.result;
+        }
+        return response;
+    };
+}
+//# sourceMappingURL=field-filter.js.map

package/dist/dispatch/middleware/field-filter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"field-filter.js","sourceRoot":"","sources":["../../../src/dispatch/middleware/field-filter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,EAAE,UAAU,EAAE,gBAAgB,IAAI,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAG9F;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB;IAC/B,OAAO,KAAK,EACV,GAAoB,EACpB,IAAqC,EACV,EAAE;QAC7B,qEAAqE;QACrE,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,IAAK,GAAG,CAAC,MAAM,EAAE,OAAgC,CAAC;QAC7E,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,IAAK,GAAG,CAAC,MAAM,EAAE,IAA2B,CAAC;QACpE,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QAErD,uDAAuD;QACvD,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YACf,OAAO,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC7B,OAAO,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;QAED,gDAAgD;QAChD,IAAI,OAAO;YAAE,GAAG,CAAC,OAAO,GAAG,OAAO,CAAC;QACnC,IAAI,IAAI;YAAE,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;QAE1B,MAAM,QAAQ,GAAG,MAAM,IAAI,EAAE,CAAC;QAE9B,iEAAiE;QACjE,mEAAmE;QACnE,IAAI,OAAO,EAAE,MAAM,IAAI,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACvE,MAAM,IAAI,GAAiB;gBACzB,OAAO,EAAE,kDAAkD;gBAC3D,KAAK,EAAE;oBACL,WAAW,EAAE,EAAE;oBACf,aAAa,EAAE,EAAE;oBACjB,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,SAAS;oBACnC,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,SAAS;oBACnC,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,SAAS;oBACnC,SAAS,EAAE,KAAK;oBAChB,MAAM,EAAE,IAAI;oBACZ,GAAG,EAAE,UAAU;oBACf,cAAc,EAAE,CAAC;iBAClB;gBACD,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,QAAQ,CAAC,IAA8B;aAChD,CAAC;YACF,MAAM,QAAQ,GAAG,mBAAmB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YACpD,QAAQ,CAAC,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC;QAClC,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC;AACJ,CAAC"}

package/dist/dispatch/middleware/pipeline.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Unified CQRS Dispatch Layer -- Middleware Pipeline
+ *
+ * Provides compose() to chain multiple Middleware functions together
+ * into a single executable pipeline.
+ *
+ * @epic T4820
+ * @task T4815
+ */
+import type { Middleware } from '../types.js';
+/**
+ * Composes an array of Middleware functions into a single Middleware function.
+ * Execution flows through the array from first to last, and returns bubble
+ * back up from last to first.
+ *
+ * @param middlewares Array of middleware functions to chain
+ * @returns A single composed Middleware function
+ */
+export declare function compose(middlewares: Middleware[]): Middleware;
+//# sourceMappingURL=pipeline.d.ts.map

package/dist/dispatch/middleware/pipeline.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pipeline.d.ts","sourceRoot":"","sources":["../../../src/dispatch/middleware/pipeline.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAmD,UAAU,EAAE,MAAM,aAAa,CAAC;AAE/F;;;;;;;GAOG;AACH,wBAAgB,OAAO,CAAC,WAAW,EAAE,UAAU,EAAE,GAAG,UAAU,CAkC7D"}

package/dist/dispatch/middleware/pipeline.js

@@ -0,0 +1,47 @@
+/**
+ * Unified CQRS Dispatch Layer -- Middleware Pipeline
+ *
+ * Provides compose() to chain multiple Middleware functions together
+ * into a single executable pipeline.
+ *
+ * @epic T4820
+ * @task T4815
+ */
+/**
+ * Composes an array of Middleware functions into a single Middleware function.
+ * Execution flows through the array from first to last, and returns bubble
+ * back up from last to first.
+ *
+ * @param middlewares Array of middleware functions to chain
+ * @returns A single composed Middleware function
+ */
+export function compose(middlewares) {
+    if (middlewares.length === 0) {
+        return async (_req, next) => next();
+    }
+    return async (request, next) => {
+        let index = -1;
+        async function dispatch(i) {
+            if (i <= index) {
+                throw new Error('next() called multiple times in middleware');
+            }
+            index = i;
+            let fn = middlewares[i];
+            if (i === middlewares.length) {
+                // We've reached the end of the middleware chain; call the final handler
+                fn = async (_req, nxt) => nxt();
+            }
+            if (!fn) {
+                return next();
+            }
+            return fn(request, async () => {
+                if (i === middlewares.length) {
+                    return next();
+                }
+                return dispatch(i + 1);
+            });
+        }
+        return dispatch(0);
+    };
+}
+//# sourceMappingURL=pipeline.js.map

package/dist/dispatch/middleware/pipeline.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pipeline.js","sourceRoot":"","sources":["../../../src/dispatch/middleware/pipeline.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH;;;;;;;GAOG;AACH,MAAM,UAAU,OAAO,CAAC,WAAyB;IAC/C,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,KAAK,EAAE,IAAqB,EAAE,IAAkB,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;IACrE,CAAC;IAED,OAAO,KAAK,EAAE,OAAwB,EAAE,IAAkB,EAA6B,EAAE;QACvF,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC;QAEf,KAAK,UAAU,QAAQ,CAAC,CAAS;YAC/B,IAAI,CAAC,IAAI,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;YAChE,CAAC;YACD,KAAK,GAAG,CAAC,CAAC;YAEV,IAAI,EAAE,GAA2B,WAAW,CAAC,CAAC,CAAC,CAAC;YAChD,IAAI,CAAC,KAAK,WAAW,CAAC,MAAM,EAAE,CAAC;gBAC7B,wEAAwE;gBACxE,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,CAAC;YAClC,CAAC;YAED,IAAI,CAAC,EAAE,EAAE,CAAC;gBACR,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,OAAO,EAAE,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE;gBAC5B,IAAI,CAAC,KAAK,WAAW,CAAC,MAAM,EAAE,CAAC;oBAC7B,OAAO,IAAI,EAAE,CAAC;gBAChB,CAAC;gBACD,OAAO,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACzB,CAAC,CAAC,CAAC;QACL,CAAC;QAED,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC;IACrB,CAAC,CAAC;AACJ,CAAC"}

package/dist/dispatch/middleware/projection.d.ts

@@ -0,0 +1,35 @@
+/**
+ * MVI projection middleware.
+ * Reads _mviTier from request params and filters response fields accordingly.
+ * If the domain is not allowed at the resolved tier, short-circuits with an error.
+ *
+ * @epic T4820
+ * @task T5096
+ */
+import { type MviTier, type ProjectionConfig } from '../lib/projections.js';
+import type { Middleware } from '../types.js';
+export interface ProjectionContext {
+    tier: MviTier;
+    config: ProjectionConfig;
+}
+/**
+ * Check if a domain is allowed at the given tier.
+ */
+export declare function isOperationAllowed(domain: string, tier: MviTier): boolean;
+/**
+ * Apply field projection to a result object.
+ * Removes fields that are excluded at the given tier and prunes depth.
+ */
+export declare function applyProjection<T>(data: T, config: ProjectionConfig): T;
+/**
+ * Create projection context from request params.
+ */
+export declare function createProjectionContext(params?: Record<string, unknown>): ProjectionContext;
+/**
+ * Create the MVI projection middleware.
+ *
+ * Extracts _mviTier from params, checks domain access, and applies
+ * field exclusions to the response.
+ */
+export declare function createProjectionMiddleware(): Middleware;
+//# sourceMappingURL=projection.d.ts.map

package/dist/dispatch/middleware/projection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"projection.d.ts","sourceRoot":"","sources":["../../../src/dispatch/middleware/projection.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EACL,KAAK,OAAO,EAEZ,KAAK,gBAAgB,EAEtB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAqC,UAAU,EAAE,MAAM,aAAa,CAAC;AAEjF,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,EAAE,gBAAgB,CAAC;CAC1B;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAEzE;AAiCD;;;GAGG;AACH,wBAAgB,eAAe,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,gBAAgB,GAAG,CAAC,CAuCvE;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,iBAAiB,CAG3F;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,IAAI,UAAU,CAqDvD"}

package/dist/dispatch/middleware/projection.js

@@ -0,0 +1,145 @@
+/**
+ * MVI projection middleware.
+ * Reads _mviTier from request params and filters response fields accordingly.
+ * If the domain is not allowed at the resolved tier, short-circuits with an error.
+ *
+ * @epic T4820
+ * @task T5096
+ */
+import { getBoundSession } from '../context/session-context.js';
+import { PROJECTIONS, resolveTier, } from '../lib/projections.js';
+/**
+ * Check if a domain is allowed at the given tier.
+ */
+export function isOperationAllowed(domain, tier) {
+    return PROJECTIONS[tier].allowedDomains.includes(domain);
+}
+/**
+ * Recursively prune data beyond maxDepth.
+ * At maxDepth, objects become '[Object]' and arrays become '[Array(N)]'.
+ */
+function pruneDepth(data, maxDepth, currentDepth = 0) {
+    // Primitives pass through at any depth
+    if (data === null || data === undefined || typeof data !== 'object') {
+        return data;
+    }
+    // At max depth, replace with placeholder
+    if (currentDepth >= maxDepth) {
+        if (Array.isArray(data)) {
+            return `[Array(${data.length})]`;
+        }
+        return '[Object]';
+    }
+    // Recurse into arrays
+    if (Array.isArray(data)) {
+        return data.map((item) => pruneDepth(item, maxDepth, currentDepth + 1));
+    }
+    // Recurse into objects
+    const result = {};
+    for (const [key, value] of Object.entries(data)) {
+        result[key] = pruneDepth(value, maxDepth, currentDepth + 1);
+    }
+    return result;
+}
+/**
+ * Apply field projection to a result object.
+ * Removes fields that are excluded at the given tier and prunes depth.
+ */
+export function applyProjection(data, config) {
+    if (!data || typeof data !== 'object')
+        return data;
+    let result = data;
+    // Apply field exclusions
+    if (config.excludeFields?.length) {
+        const obj = { ...data };
+        for (const field of config.excludeFields) {
+            const parts = field.split('.');
+            if (parts.length === 1) {
+                delete obj[parts[0]];
+            }
+            else {
+                // Handle nested fields like 'metadata._internal'
+                let current = obj;
+                for (let i = 0; i < parts.length - 1; i++) {
+                    const val = current?.[parts[i]];
+                    if (val && typeof val === 'object') {
+                        current[parts[i]] = { ...val };
+                        current = current[parts[i]];
+                    }
+                    else {
+                        current = undefined;
+                        break;
+                    }
+                }
+                if (current) {
+                    delete current[parts[parts.length - 1]];
+                }
+            }
+        }
+        result = obj;
+    }
+    // Apply depth pruning
+    if (config.maxDepth !== undefined) {
+        result = pruneDepth(result, config.maxDepth);
+    }
+    return result;
+}
+/**
+ * Create projection context from request params.
+ */
+export function createProjectionContext(params) {
+    const tier = resolveTier(params);
+    return { tier, config: PROJECTIONS[tier] };
+}
+/**
+ * Create the MVI projection middleware.
+ *
+ * Extracts _mviTier from params, checks domain access, and applies
+ * field exclusions to the response.
+ */
+export function createProjectionMiddleware() {
+    return async (req, next) => {
+        const session = getBoundSession();
+        const tier = resolveTier(req.params, session?.scope ?? null);
+        const config = PROJECTIONS[tier];
+        // Remove control param so domain handlers don't see it
+        if (req.params) {
+            delete req.params['_mviTier'];
+        }
+        // MCP smart defaults: tasks.list defaults to compact mode
+        if (req.source === 'mcp' && req.domain === 'tasks' && req.operation === 'list') {
+            req.params ??= {};
+            if (req.params['compact'] === undefined) {
+                req.params['compact'] = true;
+            }
+        }
+        // Check domain access at this tier
+        if (!config.allowedDomains.includes(req.domain)) {
+            return {
+                _meta: {
+                    gateway: req.gateway,
+                    domain: req.domain,
+                    operation: req.operation,
+                    version: '1.0.0',
+                    timestamp: new Date().toISOString(),
+                    duration_ms: 0,
+                    source: req.source,
+                    requestId: req.requestId,
+                },
+                success: false,
+                error: {
+                    code: 'E_INVALID_OPERATION',
+                    exitCode: 2,
+                    message: `Operation not available at '${tier}' tier. Domain '${req.domain}' requires a higher tier.`,
+                },
+            };
+        }
+        const response = await next();
+        // Apply field exclusions to successful responses
+        if (response.success && response.data !== undefined) {
+            response.data = applyProjection(response.data, config);
+        }
+        return response;
+    };
+}
+//# sourceMappingURL=projection.js.map

package/dist/dispatch/middleware/projection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"projection.js","sourceRoot":"","sources":["../../../src/dispatch/middleware/projection.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,EAEL,WAAW,EAEX,WAAW,GACZ,MAAM,uBAAuB,CAAC;AAQ/B;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAc,EAAE,IAAa;IAC9D,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAC3D,CAAC;AAED;;;GAGG;AACH,SAAS,UAAU,CAAC,IAAa,EAAE,QAAgB,EAAE,eAAuB,CAAC;IAC3E,uCAAuC;IACvC,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,SAAS,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACpE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,yCAAyC;IACzC,IAAI,YAAY,IAAI,QAAQ,EAAE,CAAC;QAC7B,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,OAAO,UAAU,IAAI,CAAC,MAAM,IAAI,CAAC;QACnC,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,sBAAsB;IACtB,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,QAAQ,EAAE,YAAY,GAAG,CAAC,CAAC,CAAC,CAAC;IAC1E,CAAC;IAED,uBAAuB;IACvB,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,MAAM,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,KAAK,EAAE,QAAQ,EAAE,YAAY,GAAG,CAAC,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAI,IAAO,EAAE,MAAwB;IAClE,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAEnD,IAAI,MAAM,GAAY,IAAI,CAAC;IAE3B,yBAAyB;IACzB,IAAI,MAAM,CAAC,aAAa,EAAE,MAAM,EAAE,CAAC;QACjC,MAAM,GAAG,GAAG,EAAE,GAAG,IAAI,EAA6B,CAAC;QACnD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;YACzC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvB,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YACvB,CAAC;iBAAM,CAAC;gBACN,iDAAiD;gBACjD,IAAI,OAAO,GAAwC,GAAG,CAAC;gBACvD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;oBAC1C,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;oBAChC,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;wBACnC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,GAAI,GAA+B,EAAE,CAAC;wBAC5D,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAA4B,CAAC;oBACzD,CAAC;yBAAM,CAAC;wBACN,OAAO,GAAG,SAAS,CAAC;wBACpB,MAAM;oBACR,CAAC;gBACH,CAAC;gBACD,IAAI,OAAO,EAAE,CAAC;oBACZ,OAAO,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;gBAC1C,CAAC;YACH,CAAC;QACH,CAAC;QACD,MAAM,GAAG,GAAG,CAAC;IACf,CAAC;IAED,sBAAsB;IACtB,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAClC,MAAM,GAAG,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC/C,CAAC;IAED,OAAO,MAAW,CAAC;AACrB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB,CAAC,MAAgC;IACtE,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IACjC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;AAC7C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B;IACxC,OAAO,KAAK,EACV,GAAoB,EACpB,IAAqC,EACV,EAAE;QAC7B,MAAM,OAAO,GAAG,eAAe,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QAEjC,uDAAuD;QACvD,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YACf,OAAO,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAChC,CAAC;QAED,0DAA0D;QAC1D,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,MAAM,KAAK,OAAO,IAAI,GAAG,CAAC,SAAS,KAAK,MAAM,EAAE,CAAC;YAC/E,GAAG,CAAC,MAAM,KAAK,EAAE,CAAC;YAClB,IAAI,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,SAAS,EAAE,CAAC;gBACxC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC;YAC/B,CAAC;QACH,CAAC;QAED,mCAAmC;QACnC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAChD,OAAO;gBACL,KAAK,EAAE;oBACL,OAAO,EAAE,GAAG,CAAC,OAAO;oBACpB,MAAM,EAAE,GAAG,CAAC,MAAM;oBAClB,SAAS,EAAE,GAAG,CAAC,SAAS;oBACxB,OAAO,EAAE,OAAO;oBAChB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;oBACnC,WAAW,EAAE,CAAC;oBACd,MAAM,EAAE,GAAG,CAAC,MAAM;oBAClB,SAAS,EAAE,GAAG,CAAC,SAAS;iBACzB;gBACD,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE;oBACL,IAAI,EAAE,qBAAqB;oBAC3B,QAAQ,EAAE,CAAC;oBACX,OAAO,EAAE,+BAA+B,IAAI,mBAAmB,GAAG,CAAC,MAAM,2BAA2B;iBACrG;aACF,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,EAAE,CAAC;QAE9B,iDAAiD;QACjD,IAAI,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACpD,QAAQ,CAAC,IAAI,GAAG,eAAe,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACzD,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC;AACJ,CAAC"}

package/dist/dispatch/middleware/protocol-enforcement.d.ts

@@ -0,0 +1,12 @@
+import type { Middleware } from '../types.js';
+/**
+ * Creates a middleware that enforces protocol compliance.
+ *
+ * Delegates to ProtocolEnforcer.enforceProtocol() which:
+ * - Passes through query operations untouched
+ * - Passes through mutate operations that don't require validation
+ * - Validates protocol compliance on validated mutate operations after execution
+ * - In strict mode, blocks operations with protocol violations (exit codes 60-70)
+ */
+export declare function createProtocolEnforcement(strictMode?: boolean): Middleware;
+//# sourceMappingURL=protocol-enforcement.d.ts.map

package/dist/dispatch/middleware/protocol-enforcement.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol-enforcement.d.ts","sourceRoot":"","sources":["../../../src/dispatch/middleware/protocol-enforcement.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAmD,UAAU,EAAE,MAAM,aAAa,CAAC;AAE/F;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB,CAAC,UAAU,GAAE,OAAc,GAAG,UAAU,CAqBhF"}

package/dist/dispatch/middleware/protocol-enforcement.js

@@ -0,0 +1,30 @@
+import { ProtocolEnforcer } from '@cleocode/core/internal';
+/**
+ * Creates a middleware that enforces protocol compliance.
+ *
+ * Delegates to ProtocolEnforcer.enforceProtocol() which:
+ * - Passes through query operations untouched
+ * - Passes through mutate operations that don't require validation
+ * - Validates protocol compliance on validated mutate operations after execution
+ * - In strict mode, blocks operations with protocol violations (exit codes 60-70)
+ */
+export function createProtocolEnforcement(strictMode = true) {
+    const enforcer = new ProtocolEnforcer(strictMode);
+    return async (req, next) => {
+        const result = await enforcer.enforceProtocol(req, next);
+        // enforceProtocol may return a DomainResponse (missing source/requestId on _meta)
+        // when it constructs an error response. Ensure _meta has required DispatchResponse fields.
+        if (!result._meta.source || !result._meta.requestId) {
+            return {
+                ...result,
+                _meta: {
+                    ...result._meta,
+                    source: result._meta.source ?? req.source,
+                    requestId: result._meta.requestId ?? req.requestId,
+                },
+            };
+        }
+        return result;
+    };
+}
+//# sourceMappingURL=protocol-enforcement.js.map

package/dist/dispatch/middleware/protocol-enforcement.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol-enforcement.js","sourceRoot":"","sources":["../../../src/dispatch/middleware/protocol-enforcement.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAG3D;;;;;;;;GAQG;AACH,MAAM,UAAU,yBAAyB,CAAC,aAAsB,IAAI;IAClE,MAAM,QAAQ,GAAG,IAAI,gBAAgB,CAAC,UAAU,CAAC,CAAC;IAElD,OAAO,KAAK,EAAE,GAAoB,EAAE,IAAkB,EAA6B,EAAE;QACnF,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,eAAe,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAEzD,kFAAkF;QAClF,2FAA2F;QAC3F,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;YACpD,OAAO;gBACL,GAAG,MAAM;gBACT,KAAK,EAAE;oBACL,GAAG,MAAM,CAAC,KAAK;oBACf,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM;oBACzC,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS,IAAI,GAAG,CAAC,SAAS;iBACnD;aACkB,CAAC;QACxB,CAAC;QAED,OAAO,MAA0B,CAAC;IACpC,CAAC,CAAC;AACJ,CAAC"}