@cleocode/cleo 2026.3.73 → 2026.3.76

package/dist/dispatch/lib/security.js

@@ -1,10 +0,0 @@
-/**
- * Security Hardening and Input Sanitization (Backward-Compat Re-export)
- *
- * Thin wrapper that re-exports from the canonical location at
- * src/core/security/input-sanitization.ts.
- *
- * @task T5706
- */
-export { ALL_VALID_STATUSES, DEFAULT_RATE_LIMITS, ensureArray, RateLimiter, SecurityError, sanitizeContent, sanitizeParams, sanitizePath, sanitizeTaskId, VALID_DOMAINS, VALID_GATEWAYS, VALID_LIFECYCLE_STAGE_STATUSES, VALID_MANIFEST_STATUSES, VALID_PRIORITIES, validateEnum, } from '@cleocode/core/internal';
-//# sourceMappingURL=security.js.map

package/dist/dispatch/lib/security.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"security.js","sourceRoot":"","sources":["../../../src/dispatch/lib/security.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,WAAW,EACX,WAAW,EACX,aAAa,EACb,eAAe,EACf,cAAc,EACd,YAAY,EACZ,cAAc,EACd,aAAa,EACb,cAAc,EACd,8BAA8B,EAC9B,uBAAuB,EACvB,gBAAgB,EAChB,YAAY,GACb,MAAM,yBAAyB,CAAC"}

package/dist/dispatch/middleware/audit.d.ts

@@ -1,23 +0,0 @@
-/**
- * Audit Trail Middleware for CQRS Dispatch Layer.
- *
- * Dual-writes every audited operation to:
- *   1. Pino structured log (subsystem: 'audit') -> .cleo/logs/cleo.log
- *   2. SQLite audit_log table -> .cleo/tasks.db
- *
- * Legacy JSON file logging (.cleo/audit-log.json + rotated audit-log-*.json)
- * has been removed per ADR-019.
- *
- * @task T2920
- * @task T2929
- * @task T4844
- */
-import type { Middleware } from '../types.js';
-export type { AuditEntry } from '@cleocode/core/internal';
-/**
- * Creates an audit middleware that logs all mutate operations
- * (and query operations during grade sessions) to Pino + SQLite.
- */
-export declare function createAudit(): Middleware;
-export { queryAudit } from '@cleocode/core/internal';
-//# sourceMappingURL=audit.d.ts.map

package/dist/dispatch/middleware/audit.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../../src/dispatch/middleware/audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAIH,OAAO,KAAK,EAAmD,UAAU,EAAE,MAAM,aAAa,CAAC;AAkB/F,YAAY,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAqF1D;;;GAGG;AACH,wBAAgB,WAAW,IAAI,UAAU,CAkExC;AAGD,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC"}

package/dist/dispatch/middleware/audit.js

@@ -1,169 +0,0 @@
-/**
- * Audit Trail Middleware for CQRS Dispatch Layer.
- *
- * Dual-writes every audited operation to:
- *   1. Pino structured log (subsystem: 'audit') -> .cleo/logs/cleo.log
- *   2. SQLite audit_log table -> .cleo/tasks.db
- *
- * Legacy JSON file logging (.cleo/audit-log.json + rotated audit-log-*.json)
- * has been removed per ADR-019.
- *
- * @task T2920
- * @task T2929
- * @task T4844
- */
-import { getLogger, getProjectInfoSync } from '@cleocode/core/internal';
-import { getConfig } from '../lib/config.js';
-const log = getLogger('audit');
-/** Cached project hash — read once from project-info.json (immutable at runtime). */
-let cachedProjectHash;
-function resolveProjectHash() {
-    if (cachedProjectHash !== undefined)
-        return cachedProjectHash;
-    try {
-        const info = getProjectInfoSync();
-        cachedProjectHash = info?.projectHash ?? null;
-    }
-    catch {
-        cachedProjectHash = null;
-    }
-    return cachedProjectHash;
-}
-/**
- * Check if the current context is a grade session.
- *
- * Now simplified: session-resolver middleware (T4959) populates request.sessionId
- * before audit runs, so we only need to check grade mode flags.
- */
-function isGradeMode() {
-    return process.env.CLEO_SESSION_GRADE === 'true';
-}
-/**
- * Get active session info from SQLite or env vars.
- *
- * Session-resolver middleware (T4959) now populates request.sessionId.
- * This function is retained as a fallback for edge cases where
- * session-resolver is not in the pipeline (e.g., tests, legacy callers).
- */
-async function getActiveSessionInfo() {
-    const gradeId = process.env.CLEO_SESSION_GRADE_ID;
-    if (gradeId && process.env.CLEO_SESSION_GRADE === 'true') {
-        return { id: gradeId, gradeMode: true };
-    }
-    const envId = process.env.CLEO_SESSION_ID;
-    if (envId) {
-        return { id: envId, gradeMode: false };
-    }
-    return null;
-}
-/**
- * Write audit entry to SQLite audit_log table.
- * Validates the payload with Zod before inserting.
- * Fire-and-forget — errors are logged to Pino but never thrown.
- *
- * @task T4848
- */
-async function writeToSqlite(entry, requestId) {
-    try {
-        const { getDb } = await import('@cleocode/core/internal');
-        const { auditLog } = await import('@cleocode/core/internal');
-        const { AuditLogInsertSchema } = await import('@cleocode/core/internal');
-        const { randomUUID } = await import('node:crypto');
-        const payload = {
-            id: randomUUID(),
-            timestamp: entry.timestamp,
-            action: entry.operation,
-            taskId: entry.metadata.taskId ?? 'system',
-            actor: entry.metadata.userId ?? 'agent',
-            detailsJson: JSON.stringify(entry.params),
-            // Dispatch-level columns (ADR-019)
-            domain: entry.domain,
-            operation: entry.operation,
-            sessionId: entry.sessionId,
-            requestId: requestId ?? null,
-            durationMs: entry.result.duration,
-            success: entry.result.success ? 1 : 0,
-            source: entry.metadata.source,
-            gateway: entry.metadata.gateway ?? null,
-            errorMessage: entry.error ?? null,
-            // Project correlation (T5337)
-            projectHash: resolveProjectHash(),
-        };
-        // Validate payload before insert (T4848)
-        const parsed = AuditLogInsertSchema.safeParse(payload);
-        if (!parsed.success) {
-            log.warn({ issues: parsed.error.issues }, 'Audit payload failed Zod validation; skipping insert');
-            return;
-        }
-        const db = await getDb(process.cwd());
-        await db.insert(auditLog).values(parsed.data).run();
-    }
-    catch (err) {
-        log.warn({ err }, 'Failed to write audit entry to SQLite');
-    }
-}
-/**
- * Creates an audit middleware that logs all mutate operations
- * (and query operations during grade sessions) to Pino + SQLite.
- */
-export function createAudit() {
-    return async (req, next) => {
-        const startTime = Date.now();
-        // T4959: session-resolver middleware now populates req.sessionId before
-        // audit runs. Fall back to legacy lookup only if resolver missed it.
-        const currentSessionId = req.sessionId ?? (await getActiveSessionInfo())?.id ?? null;
-        const isGradeSession = isGradeMode();
-        const response = await next();
-        // Audit mutations always; audit queries only during grade sessions
-        const shouldAudit = req.gateway === 'mutate' || (req.gateway === 'query' && isGradeSession);
-        if (!shouldAudit)
-            return response;
-        // Check if audit logging is enabled
-        const config = getConfig();
-        if (!config.auditLog)
-            return response;
-        const entry = {
-            timestamp: new Date().toISOString(),
-            sessionId: currentSessionId,
-            domain: req.domain,
-            operation: req.operation,
-            params: req.params || {},
-            result: {
-                success: response.success,
-                exitCode: response.error?.exitCode || 0,
-                duration: Date.now() - startTime,
-            },
-            metadata: {
-                taskId: req.params?.taskId || req.params?.parent,
-                source: req.source,
-                gateway: req.gateway,
-            },
-            error: response.error?.message,
-        };
-        // Pino structured log (immediate, non-blocking)
-        log.info({
-            domain: entry.domain,
-            operation: entry.operation,
-            sessionId: entry.sessionId,
-            taskId: entry.metadata.taskId,
-            gateway: entry.metadata.gateway,
-            success: entry.result.success,
-            exitCode: entry.result.exitCode,
-            durationMs: entry.result.duration,
-        }, `${entry.metadata.gateway ?? 'dispatch'} ${entry.domain}.${entry.operation}`);
-        // SQLite write — await in grade mode to avoid race with grading query;
-        // fire-and-forget otherwise for performance.
-        if (isGradeSession) {
-            await writeToSqlite(entry, req.requestId);
-        }
-        else {
-            writeToSqlite(entry, req.requestId).catch((err) => {
-                log.error({ err }, 'Failed to persist audit entry to SQLite');
-            });
-        }
-        return response;
-    };
-}
-// queryAudit re-exported from core (canonical location)
-export { queryAudit } from '@cleocode/core/internal';
-//# sourceMappingURL=audit.js.map

package/dist/dispatch/middleware/audit.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../../src/dispatch/middleware/audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,SAAS,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AACxE,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAG7C,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;AAE/B,qFAAqF;AACrF,IAAI,iBAA4C,CAAC;AACjD,SAAS,kBAAkB;IACzB,IAAI,iBAAiB,KAAK,SAAS;QAAE,OAAO,iBAAiB,CAAC;IAC9D,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,kBAAkB,EAAE,CAAC;QAClC,iBAAiB,GAAG,IAAI,EAAE,WAAW,IAAI,IAAI,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,iBAAiB,GAAG,IAAI,CAAC;IAC3B,CAAC;IACD,OAAO,iBAAiB,CAAC;AAC3B,CAAC;AAOD;;;;;GAKG;AACH,SAAS,WAAW;IAClB,OAAO,OAAO,CAAC,GAAG,CAAC,kBAAkB,KAAK,MAAM,CAAC;AACnD,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,oBAAoB;IACjC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;IAClD,IAAI,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,KAAK,MAAM,EAAE,CAAC;QACzD,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAC1C,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;IAC1C,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACzC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,aAAa,CAAC,KAAiB,EAAE,SAAkB;IAChE,IAAI,CAAC;QACH,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;QAC1D,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;QAC7D,MAAM,EAAE,oBAAoB,EAAE,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;QACzE,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;QAEnD,MAAM,OAAO,GAAG;YACd,EAAE,EAAE,UAAU,EAAE;YAChB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,MAAM,EAAE,KAAK,CAAC,SAAS;YACvB,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM,IAAI,QAAQ;YACzC,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM,IAAI,OAAO;YACvC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC;YACzC,mCAAmC;YACnC,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,SAAS,EAAE,SAAS,IAAI,IAAI;YAC5B,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ;YACjC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACrC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM;YAC7B,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,OAAO,IAAI,IAAI;YACvC,YAAY,EAAE,KAAK,CAAC,KAAK,IAAI,IAAI;YACjC,8BAA8B;YAC9B,WAAW,EAAE,kBAAkB,EAAE;SAClC,CAAC;QAEF,yCAAyC;QACzC,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACvD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,GAAG,CAAC,IAAI,CACN,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,EAC/B,sDAAsD,CACvD,CAAC;YACF,OAAO;QACT,CAAC;QAED,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QACtC,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC;IACtD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,uCAAuC,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW;IACzB,OAAO,KAAK,EAAE,GAAoB,EAAE,IAAkB,EAA6B,EAAE;QACnF,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,wEAAwE;QACxE,qEAAqE;QACrE,MAAM,gBAAgB,GACpB,GAAG,CAAC,SAAS,IAAI,CAAC,MAAM,oBAAoB,EAAE,CAAC,EAAE,EAAE,IAAI,IAAI,CAAC;QAC9D,MAAM,cAAc,GAAG,WAAW,EAAE,CAAC;QAErC,MAAM,QAAQ,GAAG,MAAM,IAAI,EAAE,CAAC;QAE9B,mEAAmE;QACnE,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,OAAO,KAAK,OAAO,IAAI,cAAc,CAAC,CAAC;QAC5F,IAAI,CAAC,WAAW;YAAE,OAAO,QAAQ,CAAC;QAElC,oCAAoC;QACpC,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,IAAI,CAAC,MAAM,CAAC,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAEtC,MAAM,KAAK,GAAe;YACxB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,SAAS,EAAE,gBAAgB;YAC3B,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE;YACxB,MAAM,EAAE;gBACN,OAAO,EAAE,QAAQ,CAAC,OAAO;gBACzB,QAAQ,EAAE,QAAQ,CAAC,KAAK,EAAE,QAAQ,IAAI,CAAC;gBACvC,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;aACjC;YACD,QAAQ,EAAE;gBACR,MAAM,EAAG,GAAG,CAAC,MAAM,EAAE,MAAiB,IAAK,GAAG,CAAC,MAAM,EAAE,MAAiB;gBACxE,MAAM,EAAE,GAAG,CAAC,MAAuB;gBACnC,OAAO,EAAE,GAAG,CAAC,OAA6B;aAC3C;YACD,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,OAAO;SAC/B,CAAC;QAEF,gDAAgD;QAChD,GAAG,CAAC,IAAI,CACN;YACE,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM;YAC7B,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,OAAO;YAC/B,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO;YAC7B,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ;YAC/B,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ;SAClC,EACD,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,IAAI,UAAU,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,SAAS,EAAE,CAC7E,CAAC;QAEF,uEAAuE;QACvE,6CAA6C;QAC7C,IAAI,cAAc,EAAE,CAAC;YACnB,MAAM,aAAa,CAAC,KAAK,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;QAC5C,CAAC;aAAM,CAAC;YACN,aAAa,CAAC,KAAK,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;gBAChD,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,yCAAyC,CAAC,CAAC;YAChE,CAAC,CAAC,CAAC;QACL,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC;AACJ,CAAC;AAED,wDAAwD;AACxD,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC"}

package/dist/dispatch/middleware/field-filter.d.ts

@@ -1,24 +0,0 @@
-/**
- * LAFS Field Filter Middleware
- *
- * Implements LAFS _fields parameter (field selection) and _mvi envelope verbosity.
- * Extracts _fields and _mvi from params (for MCP agents that pass them as params),
- * stores them on the request, and post-processes the response via the canonical
- * SDK utilities from @cleocode/lafs-protocol v1.5.0.
- *
- * @epic T4820
- * @task T4979
- */
-import type { Middleware } from '../types.js';
-/**
- * Create the LAFS field-filter middleware.
- *
- * Handles:
- * - _fields: filter response data to specified fields (delegates to SDK applyFieldFilter)
- * - _mvi: envelope verbosity — stored on request for downstream use
- *
- * _fields and _mvi are extracted from req.params (for MCP callers that pass
- * them as params) and stored on the DispatchRequest before the domain handler runs.
- */
-export declare function createFieldFilter(): Middleware;
-//# sourceMappingURL=field-filter.d.ts.map

package/dist/dispatch/middleware/field-filter.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"field-filter.d.ts","sourceRoot":"","sources":["../../../src/dispatch/middleware/field-filter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH,OAAO,KAAK,EAAqC,UAAU,EAAE,MAAM,aAAa,CAAC;AAEjF;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,IAAI,UAAU,CA+C9C"}

package/dist/dispatch/middleware/field-filter.js

@@ -1,65 +0,0 @@
-/**
- * LAFS Field Filter Middleware
- *
- * Implements LAFS _fields parameter (field selection) and _mvi envelope verbosity.
- * Extracts _fields and _mvi from params (for MCP agents that pass them as params),
- * stores them on the request, and post-processes the response via the canonical
- * SDK utilities from @cleocode/lafs-protocol v1.5.0.
- *
- * @epic T4820
- * @task T4979
- */
-import { isMVILevel, applyFieldFilter as sdkApplyFieldFilter } from '@cleocode/lafs-protocol';
-/**
- * Create the LAFS field-filter middleware.
- *
- * Handles:
- * - _fields: filter response data to specified fields (delegates to SDK applyFieldFilter)
- * - _mvi: envelope verbosity — stored on request for downstream use
- *
- * _fields and _mvi are extracted from req.params (for MCP callers that pass
- * them as params) and stored on the DispatchRequest before the domain handler runs.
- */
-export function createFieldFilter() {
-    return async (req, next) => {
-        // Extract control params from req.params (MCP agents pass them here)
-        const _fields = req._fields ?? req.params?._fields;
-        const rawMvi = req._mvi ?? req.params?._mvi;
-        const _mvi = isMVILevel(rawMvi) ? rawMvi : undefined;
-        // Remove from params so domain handlers don't see them
-        if (req.params) {
-            delete req.params['_fields'];
-            delete req.params['_mvi'];
-        }
-        // Store on request for potential downstream use
-        if (_fields)
-            req._fields = _fields;
-        if (_mvi)
-            req._mvi = _mvi;
-        const response = await next();
-        // Apply _fields filter via SDK — handles all four result shapes,
-        // preserves envelope structure, sets _meta.mvi = 'custom' per §9.1
-        if (_fields?.length && response.success && response.data !== undefined) {
-            const stub = {
-                $schema: 'https://lafs.dev/schemas/v1/envelope.schema.json',
-                _meta: {
-                    specVersion: '',
-                    schemaVersion: '',
-                    timestamp: response._meta.timestamp,
-                    operation: response._meta.operation,
-                    requestId: response._meta.requestId,
-                    transport: 'sdk',
-                    strict: true,
-                    mvi: 'standard',
-                    contextVersion: 0,
-                },
-                success: true,
-                result: response.data,
-            };
-            const filtered = sdkApplyFieldFilter(stub, _fields);
-            response.data = filtered.result;
-        }
-        return response;
-    };
-}
-//# sourceMappingURL=field-filter.js.map

package/dist/dispatch/middleware/field-filter.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"field-filter.js","sourceRoot":"","sources":["../../../src/dispatch/middleware/field-filter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,EAAE,UAAU,EAAE,gBAAgB,IAAI,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAG9F;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB;IAC/B,OAAO,KAAK,EACV,GAAoB,EACpB,IAAqC,EACV,EAAE;QAC7B,qEAAqE;QACrE,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,IAAK,GAAG,CAAC,MAAM,EAAE,OAAgC,CAAC;QAC7E,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,IAAK,GAAG,CAAC,MAAM,EAAE,IAA2B,CAAC;QACpE,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QAErD,uDAAuD;QACvD,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YACf,OAAO,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC7B,OAAO,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;QAED,gDAAgD;QAChD,IAAI,OAAO;YAAE,GAAG,CAAC,OAAO,GAAG,OAAO,CAAC;QACnC,IAAI,IAAI;YAAE,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;QAE1B,MAAM,QAAQ,GAAG,MAAM,IAAI,EAAE,CAAC;QAE9B,iEAAiE;QACjE,mEAAmE;QACnE,IAAI,OAAO,EAAE,MAAM,IAAI,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACvE,MAAM,IAAI,GAAiB;gBACzB,OAAO,EAAE,kDAAkD;gBAC3D,KAAK,EAAE;oBACL,WAAW,EAAE,EAAE;oBACf,aAAa,EAAE,EAAE;oBACjB,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,SAAS;oBACnC,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,SAAS;oBACnC,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,SAAS;oBACnC,SAAS,EAAE,KAAK;oBAChB,MAAM,EAAE,IAAI;oBACZ,GAAG,EAAE,UAAU;oBACf,cAAc,EAAE,CAAC;iBAClB;gBACD,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,QAAQ,CAAC,IAA8B;aAChD,CAAC;YACF,MAAM,QAAQ,GAAG,mBAAmB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YACpD,QAAQ,CAAC,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC;QAClC,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC;AACJ,CAAC"}

package/dist/dispatch/middleware/pipeline.d.ts

@@ -1,20 +0,0 @@
-/**
- * Unified CQRS Dispatch Layer -- Middleware Pipeline
- *
- * Provides compose() to chain multiple Middleware functions together
- * into a single executable pipeline.
- *
- * @epic T4820
- * @task T4815
- */
-import type { Middleware } from '../types.js';
-/**
- * Composes an array of Middleware functions into a single Middleware function.
- * Execution flows through the array from first to last, and returns bubble
- * back up from last to first.
- *
- * @param middlewares Array of middleware functions to chain
- * @returns A single composed Middleware function
- */
-export declare function compose(middlewares: Middleware[]): Middleware;
-//# sourceMappingURL=pipeline.d.ts.map

package/dist/dispatch/middleware/pipeline.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"pipeline.d.ts","sourceRoot":"","sources":["../../../src/dispatch/middleware/pipeline.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAmD,UAAU,EAAE,MAAM,aAAa,CAAC;AAE/F;;;;;;;GAOG;AACH,wBAAgB,OAAO,CAAC,WAAW,EAAE,UAAU,EAAE,GAAG,UAAU,CAkC7D"}

package/dist/dispatch/middleware/pipeline.js

@@ -1,47 +0,0 @@
-/**
- * Unified CQRS Dispatch Layer -- Middleware Pipeline
- *
- * Provides compose() to chain multiple Middleware functions together
- * into a single executable pipeline.
- *
- * @epic T4820
- * @task T4815
- */
-/**
- * Composes an array of Middleware functions into a single Middleware function.
- * Execution flows through the array from first to last, and returns bubble
- * back up from last to first.
- *
- * @param middlewares Array of middleware functions to chain
- * @returns A single composed Middleware function
- */
-export function compose(middlewares) {
-    if (middlewares.length === 0) {
-        return async (_req, next) => next();
-    }
-    return async (request, next) => {
-        let index = -1;
-        async function dispatch(i) {
-            if (i <= index) {
-                throw new Error('next() called multiple times in middleware');
-            }
-            index = i;
-            let fn = middlewares[i];
-            if (i === middlewares.length) {
-                // We've reached the end of the middleware chain; call the final handler
-                fn = async (_req, nxt) => nxt();
-            }
-            if (!fn) {
-                return next();
-            }
-            return fn(request, async () => {
-                if (i === middlewares.length) {
-                    return next();
-                }
-                return dispatch(i + 1);
-            });
-        }
-        return dispatch(0);
-    };
-}
-//# sourceMappingURL=pipeline.js.map

package/dist/dispatch/middleware/pipeline.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"pipeline.js","sourceRoot":"","sources":["../../../src/dispatch/middleware/pipeline.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH;;;;;;;GAOG;AACH,MAAM,UAAU,OAAO,CAAC,WAAyB;IAC/C,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,KAAK,EAAE,IAAqB,EAAE,IAAkB,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;IACrE,CAAC;IAED,OAAO,KAAK,EAAE,OAAwB,EAAE,IAAkB,EAA6B,EAAE;QACvF,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC;QAEf,KAAK,UAAU,QAAQ,CAAC,CAAS;YAC/B,IAAI,CAAC,IAAI,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;YAChE,CAAC;YACD,KAAK,GAAG,CAAC,CAAC;YAEV,IAAI,EAAE,GAA2B,WAAW,CAAC,CAAC,CAAC,CAAC;YAChD,IAAI,CAAC,KAAK,WAAW,CAAC,MAAM,EAAE,CAAC;gBAC7B,wEAAwE;gBACxE,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,CAAC;YAClC,CAAC;YAED,IAAI,CAAC,EAAE,EAAE,CAAC;gBACR,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,OAAO,EAAE,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE;gBAC5B,IAAI,CAAC,KAAK,WAAW,CAAC,MAAM,EAAE,CAAC;oBAC7B,OAAO,IAAI,EAAE,CAAC;gBAChB,CAAC;gBACD,OAAO,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACzB,CAAC,CAAC,CAAC;QACL,CAAC;QAED,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC;IACrB,CAAC,CAAC;AACJ,CAAC"}

package/dist/dispatch/middleware/projection.d.ts

@@ -1,35 +0,0 @@
-/**
- * MVI projection middleware.
- * Reads _mviTier from request params and filters response fields accordingly.
- * If the domain is not allowed at the resolved tier, short-circuits with an error.
- *
- * @epic T4820
- * @task T5096
- */
-import { type MviTier, type ProjectionConfig } from '../lib/projections.js';
-import type { Middleware } from '../types.js';
-export interface ProjectionContext {
-    tier: MviTier;
-    config: ProjectionConfig;
-}
-/**
- * Check if a domain is allowed at the given tier.
- */
-export declare function isOperationAllowed(domain: string, tier: MviTier): boolean;
-/**
- * Apply field projection to a result object.
- * Removes fields that are excluded at the given tier and prunes depth.
- */
-export declare function applyProjection<T>(data: T, config: ProjectionConfig): T;
-/**
- * Create projection context from request params.
- */
-export declare function createProjectionContext(params?: Record<string, unknown>): ProjectionContext;
-/**
- * Create the MVI projection middleware.
- *
- * Extracts _mviTier from params, checks domain access, and applies
- * field exclusions to the response.
- */
-export declare function createProjectionMiddleware(): Middleware;
-//# sourceMappingURL=projection.d.ts.map

package/dist/dispatch/middleware/projection.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"projection.d.ts","sourceRoot":"","sources":["../../../src/dispatch/middleware/projection.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EACL,KAAK,OAAO,EAEZ,KAAK,gBAAgB,EAEtB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAqC,UAAU,EAAE,MAAM,aAAa,CAAC;AAEjF,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,EAAE,gBAAgB,CAAC;CAC1B;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAEzE;AAiCD;;;GAGG;AACH,wBAAgB,eAAe,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,gBAAgB,GAAG,CAAC,CAuCvE;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,iBAAiB,CAG3F;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,IAAI,UAAU,CAqDvD"}

package/dist/dispatch/middleware/projection.js

@@ -1,145 +0,0 @@
-/**
- * MVI projection middleware.
- * Reads _mviTier from request params and filters response fields accordingly.
- * If the domain is not allowed at the resolved tier, short-circuits with an error.
- *
- * @epic T4820
- * @task T5096
- */
-import { getBoundSession } from '../context/session-context.js';
-import { PROJECTIONS, resolveTier, } from '../lib/projections.js';
-/**
- * Check if a domain is allowed at the given tier.
- */
-export function isOperationAllowed(domain, tier) {
-    return PROJECTIONS[tier].allowedDomains.includes(domain);
-}
-/**
- * Recursively prune data beyond maxDepth.
- * At maxDepth, objects become '[Object]' and arrays become '[Array(N)]'.
- */
-function pruneDepth(data, maxDepth, currentDepth = 0) {
-    // Primitives pass through at any depth
-    if (data === null || data === undefined || typeof data !== 'object') {
-        return data;
-    }
-    // At max depth, replace with placeholder
-    if (currentDepth >= maxDepth) {
-        if (Array.isArray(data)) {
-            return `[Array(${data.length})]`;
-        }
-        return '[Object]';
-    }
-    // Recurse into arrays
-    if (Array.isArray(data)) {
-        return data.map((item) => pruneDepth(item, maxDepth, currentDepth + 1));
-    }
-    // Recurse into objects
-    const result = {};
-    for (const [key, value] of Object.entries(data)) {
-        result[key] = pruneDepth(value, maxDepth, currentDepth + 1);
-    }
-    return result;
-}
-/**
- * Apply field projection to a result object.
- * Removes fields that are excluded at the given tier and prunes depth.
- */
-export function applyProjection(data, config) {
-    if (!data || typeof data !== 'object')
-        return data;
-    let result = data;
-    // Apply field exclusions
-    if (config.excludeFields?.length) {
-        const obj = { ...data };
-        for (const field of config.excludeFields) {
-            const parts = field.split('.');
-            if (parts.length === 1) {
-                delete obj[parts[0]];
-            }
-            else {
-                // Handle nested fields like 'metadata._internal'
-                let current = obj;
-                for (let i = 0; i < parts.length - 1; i++) {
-                    const val = current?.[parts[i]];
-                    if (val && typeof val === 'object') {
-                        current[parts[i]] = { ...val };
-                        current = current[parts[i]];
-                    }
-                    else {
-                        current = undefined;
-                        break;
-                    }
-                }
-                if (current) {
-                    delete current[parts[parts.length - 1]];
-                }
-            }
-        }
-        result = obj;
-    }
-    // Apply depth pruning
-    if (config.maxDepth !== undefined) {
-        result = pruneDepth(result, config.maxDepth);
-    }
-    return result;
-}
-/**
- * Create projection context from request params.
- */
-export function createProjectionContext(params) {
-    const tier = resolveTier(params);
-    return { tier, config: PROJECTIONS[tier] };
-}
-/**
- * Create the MVI projection middleware.
- *
- * Extracts _mviTier from params, checks domain access, and applies
- * field exclusions to the response.
- */
-export function createProjectionMiddleware() {
-    return async (req, next) => {
-        const session = getBoundSession();
-        const tier = resolveTier(req.params, session?.scope ?? null);
-        const config = PROJECTIONS[tier];
-        // Remove control param so domain handlers don't see it
-        if (req.params) {
-            delete req.params['_mviTier'];
-        }
-        // MCP smart defaults: tasks.list defaults to compact mode
-        if (req.source === 'mcp' && req.domain === 'tasks' && req.operation === 'list') {
-            req.params ??= {};
-            if (req.params['compact'] === undefined) {
-                req.params['compact'] = true;
-            }
-        }
-        // Check domain access at this tier
-        if (!config.allowedDomains.includes(req.domain)) {
-            return {
-                _meta: {
-                    gateway: req.gateway,
-                    domain: req.domain,
-                    operation: req.operation,
-                    version: '1.0.0',
-                    timestamp: new Date().toISOString(),
-                    duration_ms: 0,
-                    source: req.source,
-                    requestId: req.requestId,
-                },
-                success: false,
-                error: {
-                    code: 'E_INVALID_OPERATION',
-                    exitCode: 2,
-                    message: `Operation not available at '${tier}' tier. Domain '${req.domain}' requires a higher tier.`,
-                },
-            };
-        }
-        const response = await next();
-        // Apply field exclusions to successful responses
-        if (response.success && response.data !== undefined) {
-            response.data = applyProjection(response.data, config);
-        }
-        return response;
-    };
-}
-//# sourceMappingURL=projection.js.map

package/dist/dispatch/middleware/projection.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"projection.js","sourceRoot":"","sources":["../../../src/dispatch/middleware/projection.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,EAEL,WAAW,EAEX,WAAW,GACZ,MAAM,uBAAuB,CAAC;AAQ/B;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAc,EAAE,IAAa;IAC9D,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAC3D,CAAC;AAED;;;GAGG;AACH,SAAS,UAAU,CAAC,IAAa,EAAE,QAAgB,EAAE,eAAuB,CAAC;IAC3E,uCAAuC;IACvC,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,SAAS,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACpE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,yCAAyC;IACzC,IAAI,YAAY,IAAI,QAAQ,EAAE,CAAC;QAC7B,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,OAAO,UAAU,IAAI,CAAC,MAAM,IAAI,CAAC;QACnC,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,sBAAsB;IACtB,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,QAAQ,EAAE,YAAY,GAAG,CAAC,CAAC,CAAC,CAAC;IAC1E,CAAC;IAED,uBAAuB;IACvB,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,MAAM,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,KAAK,EAAE,QAAQ,EAAE,YAAY,GAAG,CAAC,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAI,IAAO,EAAE,MAAwB;IAClE,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAEnD,IAAI,MAAM,GAAY,IAAI,CAAC;IAE3B,yBAAyB;IACzB,IAAI,MAAM,CAAC,aAAa,EAAE,MAAM,EAAE,CAAC;QACjC,MAAM,GAAG,GAAG,EAAE,GAAG,IAAI,EAA6B,CAAC;QACnD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;YACzC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvB,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YACvB,CAAC;iBAAM,CAAC;gBACN,iDAAiD;gBACjD,IAAI,OAAO,GAAwC,GAAG,CAAC;gBACvD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;oBAC1C,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;oBAChC,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;wBACnC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,GAAI,GAA+B,EAAE,CAAC;wBAC5D,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAA4B,CAAC;oBACzD,CAAC;yBAAM,CAAC;wBACN,OAAO,GAAG,SAAS,CAAC;wBACpB,MAAM;oBACR,CAAC;gBACH,CAAC;gBACD,IAAI,OAAO,EAAE,CAAC;oBACZ,OAAO,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;gBAC1C,CAAC;YACH,CAAC;QACH,CAAC;QACD,MAAM,GAAG,GAAG,CAAC;IACf,CAAC;IAED,sBAAsB;IACtB,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAClC,MAAM,GAAG,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC/C,CAAC;IAED,OAAO,MAAW,CAAC;AACrB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB,CAAC,MAAgC;IACtE,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IACjC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;AAC7C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B;IACxC,OAAO,KAAK,EACV,GAAoB,EACpB,IAAqC,EACV,EAAE;QAC7B,MAAM,OAAO,GAAG,eAAe,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QAEjC,uDAAuD;QACvD,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YACf,OAAO,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAChC,CAAC;QAED,0DAA0D;QAC1D,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,MAAM,KAAK,OAAO,IAAI,GAAG,CAAC,SAAS,KAAK,MAAM,EAAE,CAAC;YAC/E,GAAG,CAAC,MAAM,KAAK,EAAE,CAAC;YAClB,IAAI,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,SAAS,EAAE,CAAC;gBACxC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC;YAC/B,CAAC;QACH,CAAC;QAED,mCAAmC;QACnC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAChD,OAAO;gBACL,KAAK,EAAE;oBACL,OAAO,EAAE,GAAG,CAAC,OAAO;oBACpB,MAAM,EAAE,GAAG,CAAC,MAAM;oBAClB,SAAS,EAAE,GAAG,CAAC,SAAS;oBACxB,OAAO,EAAE,OAAO;oBAChB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;oBACnC,WAAW,EAAE,CAAC;oBACd,MAAM,EAAE,GAAG,CAAC,MAAM;oBAClB,SAAS,EAAE,GAAG,CAAC,SAAS;iBACzB;gBACD,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE;oBACL,IAAI,EAAE,qBAAqB;oBAC3B,QAAQ,EAAE,CAAC;oBACX,OAAO,EAAE,+BAA+B,IAAI,mBAAmB,GAAG,CAAC,MAAM,2BAA2B;iBACrG;aACF,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,EAAE,CAAC;QAE9B,iDAAiD;QACjD,IAAI,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACpD,QAAQ,CAAC,IAAI,GAAG,eAAe,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACzD,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC;AACJ,CAAC"}

package/dist/dispatch/middleware/protocol-enforcement.d.ts

@@ -1,12 +0,0 @@
-import type { Middleware } from '../types.js';
-/**
- * Creates a middleware that enforces protocol compliance.
- *
- * Delegates to ProtocolEnforcer.enforceProtocol() which:
- * - Passes through query operations untouched
- * - Passes through mutate operations that don't require validation
- * - Validates protocol compliance on validated mutate operations after execution
- * - In strict mode, blocks operations with protocol violations (exit codes 60-70)
- */
-export declare function createProtocolEnforcement(strictMode?: boolean): Middleware;
-//# sourceMappingURL=protocol-enforcement.d.ts.map

package/dist/dispatch/middleware/protocol-enforcement.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"protocol-enforcement.d.ts","sourceRoot":"","sources":["../../../src/dispatch/middleware/protocol-enforcement.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAmD,UAAU,EAAE,MAAM,aAAa,CAAC;AAE/F;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB,CAAC,UAAU,GAAE,OAAc,GAAG,UAAU,CAqBhF"}

package/dist/dispatch/middleware/protocol-enforcement.js

@@ -1,30 +0,0 @@
-import { ProtocolEnforcer } from '@cleocode/core/internal';
-/**
- * Creates a middleware that enforces protocol compliance.
- *
- * Delegates to ProtocolEnforcer.enforceProtocol() which:
- * - Passes through query operations untouched
- * - Passes through mutate operations that don't require validation
- * - Validates protocol compliance on validated mutate operations after execution
- * - In strict mode, blocks operations with protocol violations (exit codes 60-70)
- */
-export function createProtocolEnforcement(strictMode = true) {
-    const enforcer = new ProtocolEnforcer(strictMode);
-    return async (req, next) => {
-        const result = await enforcer.enforceProtocol(req, next);
-        // enforceProtocol may return a DomainResponse (missing source/requestId on _meta)
-        // when it constructs an error response. Ensure _meta has required DispatchResponse fields.
-        if (!result._meta.source || !result._meta.requestId) {
-            return {
-                ...result,
-                _meta: {
-                    ...result._meta,
-                    source: result._meta.source ?? req.source,
-                    requestId: result._meta.requestId ?? req.requestId,
-                },
-            };
-        }
-        return result;
-    };
-}
-//# sourceMappingURL=protocol-enforcement.js.map

package/dist/dispatch/middleware/protocol-enforcement.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"protocol-enforcement.js","sourceRoot":"","sources":["../../../src/dispatch/middleware/protocol-enforcement.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAG3D;;;;;;;;GAQG;AACH,MAAM,UAAU,yBAAyB,CAAC,aAAsB,IAAI;IAClE,MAAM,QAAQ,GAAG,IAAI,gBAAgB,CAAC,UAAU,CAAC,CAAC;IAElD,OAAO,KAAK,EAAE,GAAoB,EAAE,IAAkB,EAA6B,EAAE;QACnF,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,eAAe,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAEzD,kFAAkF;QAClF,2FAA2F;QAC3F,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;YACpD,OAAO;gBACL,GAAG,MAAM;gBACT,KAAK,EAAE;oBACL,GAAG,MAAM,CAAC,KAAK;oBACf,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM;oBACzC,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS,IAAI,GAAG,CAAC,SAAS;iBACnD;aACkB,CAAC;QACxB,CAAC;QAED,OAAO,MAA0B,CAAC;IACpC,CAAC,CAAC;AACJ,CAAC"}