@cleocode/cleo 2026.4.9 → 2026.4.11

package/dist/dispatch/middleware/field-filter.d.ts

@@ -0,0 +1,24 @@
+/**
+ * LAFS Field Filter Middleware
+ *
+ * Implements LAFS _fields parameter (field selection) and _mvi envelope verbosity.
+ * Extracts _fields and _mvi from params (for callers that pass them as params),
+ * stores them on the request, and post-processes the response via the canonical
+ * SDK utilities from @cleocode/lafs v1.5.0.
+ *
+ * @epic T4820
+ * @task T4979
+ */
+import type { Middleware } from '../types.js';
+/**
+ * Create the LAFS field-filter middleware.
+ *
+ * Handles:
+ * - _fields: filter response data to specified fields (delegates to SDK applyFieldFilter)
+ * - _mvi: envelope verbosity — stored on request for downstream use
+ *
+ * _fields and _mvi are extracted from req.params (for callers that pass
+ * them as params) and stored on the DispatchRequest before the domain handler runs.
+ */
+export declare function createFieldFilter(): Middleware;
+//# sourceMappingURL=field-filter.d.ts.map

package/dist/dispatch/middleware/field-filter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"field-filter.d.ts","sourceRoot":"","sources":["../../../src/dispatch/middleware/field-filter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH,OAAO,KAAK,EAAqC,UAAU,EAAE,MAAM,aAAa,CAAC;AAEjF;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,IAAI,UAAU,CA+C9C"}

package/dist/dispatch/middleware/field-filter.js

@@ -0,0 +1,65 @@
+/**
+ * LAFS Field Filter Middleware
+ *
+ * Implements LAFS _fields parameter (field selection) and _mvi envelope verbosity.
+ * Extracts _fields and _mvi from params (for callers that pass them as params),
+ * stores them on the request, and post-processes the response via the canonical
+ * SDK utilities from @cleocode/lafs v1.5.0.
+ *
+ * @epic T4820
+ * @task T4979
+ */
+import { isMVILevel, applyFieldFilter as sdkApplyFieldFilter } from '@cleocode/lafs';
+/**
+ * Create the LAFS field-filter middleware.
+ *
+ * Handles:
+ * - _fields: filter response data to specified fields (delegates to SDK applyFieldFilter)
+ * - _mvi: envelope verbosity — stored on request for downstream use
+ *
+ * _fields and _mvi are extracted from req.params (for callers that pass
+ * them as params) and stored on the DispatchRequest before the domain handler runs.
+ */
+export function createFieldFilter() {
+    return async (req, next) => {
+        // Extract control params from req.params (callers may pass them here)
+        const _fields = req._fields ?? req.params?._fields;
+        const rawMvi = req._mvi ?? req.params?._mvi;
+        const _mvi = isMVILevel(rawMvi) ? rawMvi : undefined;
+        // Remove from params so domain handlers don't see them
+        if (req.params) {
+            delete req.params['_fields'];
+            delete req.params['_mvi'];
+        }
+        // Store on request for potential downstream use
+        if (_fields)
+            req._fields = _fields;
+        if (_mvi)
+            req._mvi = _mvi;
+        const response = await next();
+        // Apply _fields filter via SDK — handles all four result shapes,
+        // preserves envelope structure, sets _meta.mvi = 'custom' per §9.1
+        if (_fields?.length && response.success && response.data !== undefined) {
+            const stub = {
+                $schema: 'https://lafs.dev/schemas/v1/envelope.schema.json',
+                _meta: {
+                    specVersion: '',
+                    schemaVersion: '',
+                    timestamp: response._meta.timestamp,
+                    operation: response._meta.operation,
+                    requestId: response._meta.requestId,
+                    transport: 'sdk',
+                    strict: true,
+                    mvi: 'minimal',
+                    contextVersion: 0,
+                },
+                success: true,
+                result: response.data,
+            };
+            const filtered = sdkApplyFieldFilter(stub, _fields);
+            response.data = filtered.result;
+        }
+        return response;
+    };
+}
+//# sourceMappingURL=field-filter.js.map

package/dist/dispatch/middleware/field-filter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"field-filter.js","sourceRoot":"","sources":["../../../src/dispatch/middleware/field-filter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,EAAE,UAAU,EAAE,gBAAgB,IAAI,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAGrF;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB;IAC/B,OAAO,KAAK,EACV,GAAoB,EACpB,IAAqC,EACV,EAAE;QAC7B,sEAAsE;QACtE,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,IAAK,GAAG,CAAC,MAAM,EAAE,OAAgC,CAAC;QAC7E,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,IAAK,GAAG,CAAC,MAAM,EAAE,IAA2B,CAAC;QACpE,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QAErD,uDAAuD;QACvD,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YACf,OAAO,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC7B,OAAO,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;QAED,gDAAgD;QAChD,IAAI,OAAO;YAAE,GAAG,CAAC,OAAO,GAAG,OAAO,CAAC;QACnC,IAAI,IAAI;YAAE,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;QAE1B,MAAM,QAAQ,GAAG,MAAM,IAAI,EAAE,CAAC;QAE9B,iEAAiE;QACjE,mEAAmE;QACnE,IAAI,OAAO,EAAE,MAAM,IAAI,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACvE,MAAM,IAAI,GAAiB;gBACzB,OAAO,EAAE,kDAAkD;gBAC3D,KAAK,EAAE;oBACL,WAAW,EAAE,EAAE;oBACf,aAAa,EAAE,EAAE;oBACjB,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,SAAS;oBACnC,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,SAAS;oBACnC,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,SAAS;oBACnC,SAAS,EAAE,KAAK;oBAChB,MAAM,EAAE,IAAI;oBACZ,GAAG,EAAE,SAAS;oBACd,cAAc,EAAE,CAAC;iBAClB;gBACD,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,QAAQ,CAAC,IAA8B;aAChD,CAAC;YACF,MAAM,QAAQ,GAAG,mBAAmB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YACpD,QAAQ,CAAC,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC;QAClC,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC;AACJ,CAAC"}

package/dist/dispatch/middleware/pipeline.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Unified CQRS Dispatch Layer -- Middleware Pipeline
+ *
+ * Provides compose() to chain multiple Middleware functions together
+ * into a single executable pipeline.
+ *
+ * @epic T4820
+ * @task T4815
+ */
+import type { Middleware } from '../types.js';
+/**
+ * Composes an array of Middleware functions into a single Middleware function.
+ * Execution flows through the array from first to last, and returns bubble
+ * back up from last to first.
+ *
+ * @remarks
+ * Uses an index-tracked dispatch function to prevent `next()` from being
+ * called multiple times within a single middleware. If the array is empty,
+ * a passthrough middleware that immediately calls `next()` is returned.
+ *
+ * @param middlewares - Array of middleware functions to chain
+ * @returns A single composed Middleware function
+ *
+ * @example
+ * ```typescript
+ * import { compose } from './pipeline.js';
+ *
+ * const pipeline = compose([sanitizer, rateLimiter, protocolEnforcement]);
+ * const response = await pipeline(request, handler);
+ * ```
+ */
+export declare function compose(middlewares: Middleware[]): Middleware;
+//# sourceMappingURL=pipeline.d.ts.map

package/dist/dispatch/middleware/pipeline.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pipeline.d.ts","sourceRoot":"","sources":["../../../src/dispatch/middleware/pipeline.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAmD,UAAU,EAAE,MAAM,aAAa,CAAC;AAE/F;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,OAAO,CAAC,WAAW,EAAE,UAAU,EAAE,GAAG,UAAU,CAkC7D"}

package/dist/dispatch/middleware/pipeline.js

@@ -0,0 +1,60 @@
+/**
+ * Unified CQRS Dispatch Layer -- Middleware Pipeline
+ *
+ * Provides compose() to chain multiple Middleware functions together
+ * into a single executable pipeline.
+ *
+ * @epic T4820
+ * @task T4815
+ */
+/**
+ * Composes an array of Middleware functions into a single Middleware function.
+ * Execution flows through the array from first to last, and returns bubble
+ * back up from last to first.
+ *
+ * @remarks
+ * Uses an index-tracked dispatch function to prevent `next()` from being
+ * called multiple times within a single middleware. If the array is empty,
+ * a passthrough middleware that immediately calls `next()` is returned.
+ *
+ * @param middlewares - Array of middleware functions to chain
+ * @returns A single composed Middleware function
+ *
+ * @example
+ * ```typescript
+ * import { compose } from './pipeline.js';
+ *
+ * const pipeline = compose([sanitizer, rateLimiter, protocolEnforcement]);
+ * const response = await pipeline(request, handler);
+ * ```
+ */
+export function compose(middlewares) {
+    if (middlewares.length === 0) {
+        return async (_req, next) => next();
+    }
+    return async (request, next) => {
+        let index = -1;
+        async function dispatch(i) {
+            if (i <= index) {
+                throw new Error('next() called multiple times in middleware');
+            }
+            index = i;
+            let fn = middlewares[i];
+            if (i === middlewares.length) {
+                // We've reached the end of the middleware chain; call the final handler
+                fn = async (_req, nxt) => nxt();
+            }
+            if (!fn) {
+                return next();
+            }
+            return fn(request, async () => {
+                if (i === middlewares.length) {
+                    return next();
+                }
+                return dispatch(i + 1);
+            });
+        }
+        return dispatch(0);
+    };
+}
+//# sourceMappingURL=pipeline.js.map

package/dist/dispatch/middleware/pipeline.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pipeline.js","sourceRoot":"","sources":["../../../src/dispatch/middleware/pipeline.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,OAAO,CAAC,WAAyB;IAC/C,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,KAAK,EAAE,IAAqB,EAAE,IAAkB,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;IACrE,CAAC;IAED,OAAO,KAAK,EAAE,OAAwB,EAAE,IAAkB,EAA6B,EAAE;QACvF,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC;QAEf,KAAK,UAAU,QAAQ,CAAC,CAAS;YAC/B,IAAI,CAAC,IAAI,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;YAChE,CAAC;YACD,KAAK,GAAG,CAAC,CAAC;YAEV,IAAI,EAAE,GAA2B,WAAW,CAAC,CAAC,CAAC,CAAC;YAChD,IAAI,CAAC,KAAK,WAAW,CAAC,MAAM,EAAE,CAAC;gBAC7B,wEAAwE;gBACxE,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,CAAC;YAClC,CAAC;YAED,IAAI,CAAC,EAAE,EAAE,CAAC;gBACR,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,OAAO,EAAE,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE;gBAC5B,IAAI,CAAC,KAAK,WAAW,CAAC,MAAM,EAAE,CAAC;oBAC7B,OAAO,IAAI,EAAE,CAAC;gBAChB,CAAC;gBACD,OAAO,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACzB,CAAC,CAAC,CAAC;QACL,CAAC;QAED,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC;IACrB,CAAC,CAAC;AACJ,CAAC"}

package/dist/dispatch/middleware/projection.d.ts

@@ -0,0 +1,35 @@
+/**
+ * MVI projection middleware.
+ * Reads _mviTier from request params and filters response fields accordingly.
+ * If the domain is not allowed at the resolved tier, short-circuits with an error.
+ *
+ * @epic T4820
+ * @task T5096
+ */
+import { type MviTier, type ProjectionConfig } from '../lib/projections.js';
+import type { Middleware } from '../types.js';
+export interface ProjectionContext {
+    tier: MviTier;
+    config: ProjectionConfig;
+}
+/**
+ * Check if a domain is allowed at the given tier.
+ */
+export declare function isOperationAllowed(domain: string, tier: MviTier): boolean;
+/**
+ * Apply field projection to a result object.
+ * Removes fields that are excluded at the given tier and prunes depth.
+ */
+export declare function applyProjection<T>(data: T, config: ProjectionConfig): T;
+/**
+ * Create projection context from request params.
+ */
+export declare function createProjectionContext(params?: Record<string, unknown>): ProjectionContext;
+/**
+ * Create the MVI projection middleware.
+ *
+ * Extracts _mviTier from params, checks domain access, and applies
+ * field exclusions to the response.
+ */
+export declare function createProjectionMiddleware(): Middleware;
+//# sourceMappingURL=projection.d.ts.map

package/dist/dispatch/middleware/projection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"projection.d.ts","sourceRoot":"","sources":["../../../src/dispatch/middleware/projection.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EACL,KAAK,OAAO,EAEZ,KAAK,gBAAgB,EAEtB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAqC,UAAU,EAAE,MAAM,aAAa,CAAC;AAEjF,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,EAAE,gBAAgB,CAAC;CAC1B;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAEzE;AAiCD;;;GAGG;AACH,wBAAgB,eAAe,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,gBAAgB,GAAG,CAAC,CAuCvE;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,iBAAiB,CAG3F;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,IAAI,UAAU,CAsDvD"}

package/dist/dispatch/middleware/projection.js

@@ -0,0 +1,146 @@
+/**
+ * MVI projection middleware.
+ * Reads _mviTier from request params and filters response fields accordingly.
+ * If the domain is not allowed at the resolved tier, short-circuits with an error.
+ *
+ * @epic T4820
+ * @task T5096
+ */
+import { getBoundSession } from '../context/session-context.js';
+import { PROJECTIONS, resolveTier, } from '../lib/projections.js';
+/**
+ * Check if a domain is allowed at the given tier.
+ */
+export function isOperationAllowed(domain, tier) {
+    return PROJECTIONS[tier].allowedDomains.includes(domain);
+}
+/**
+ * Recursively prune data beyond maxDepth.
+ * At maxDepth, objects become '[Object]' and arrays become '[Array(N)]'.
+ */
+function pruneDepth(data, maxDepth, currentDepth = 0) {
+    // Primitives pass through at any depth
+    if (data === null || data === undefined || typeof data !== 'object') {
+        return data;
+    }
+    // At max depth, replace with placeholder
+    if (currentDepth >= maxDepth) {
+        if (Array.isArray(data)) {
+            return `[Array(${data.length})]`;
+        }
+        return '[Object]';
+    }
+    // Recurse into arrays
+    if (Array.isArray(data)) {
+        return data.map((item) => pruneDepth(item, maxDepth, currentDepth + 1));
+    }
+    // Recurse into objects
+    const result = {};
+    for (const [key, value] of Object.entries(data)) {
+        result[key] = pruneDepth(value, maxDepth, currentDepth + 1);
+    }
+    return result;
+}
+/**
+ * Apply field projection to a result object.
+ * Removes fields that are excluded at the given tier and prunes depth.
+ */
+export function applyProjection(data, config) {
+    if (!data || typeof data !== 'object')
+        return data;
+    let result = data;
+    // Apply field exclusions
+    if (config.excludeFields?.length) {
+        const obj = { ...data };
+        for (const field of config.excludeFields) {
+            const parts = field.split('.');
+            if (parts.length === 1) {
+                delete obj[parts[0]];
+            }
+            else {
+                // Handle nested fields like 'metadata._internal'
+                let current = obj;
+                for (let i = 0; i < parts.length - 1; i++) {
+                    const val = current?.[parts[i]];
+                    if (val && typeof val === 'object') {
+                        current[parts[i]] = { ...val };
+                        current = current[parts[i]];
+                    }
+                    else {
+                        current = undefined;
+                        break;
+                    }
+                }
+                if (current) {
+                    delete current[parts[parts.length - 1]];
+                }
+            }
+        }
+        result = obj;
+    }
+    // Apply depth pruning
+    if (config.maxDepth !== undefined) {
+        result = pruneDepth(result, config.maxDepth);
+    }
+    return result;
+}
+/**
+ * Create projection context from request params.
+ */
+export function createProjectionContext(params) {
+    const tier = resolveTier(params);
+    return { tier, config: PROJECTIONS[tier] };
+}
+/**
+ * Create the MVI projection middleware.
+ *
+ * Extracts _mviTier from params, checks domain access, and applies
+ * field exclusions to the response.
+ */
+export function createProjectionMiddleware() {
+    return async (req, next) => {
+        const session = getBoundSession();
+        const tier = resolveTier(req.params, session?.scope ?? null);
+        const config = PROJECTIONS[tier];
+        // Remove control param so domain handlers don't see it
+        if (req.params) {
+            delete req.params['_mviTier'];
+        }
+        // Smart defaults: tasks.list defaults to compact mode for non-CLI sources.
+        // CLI is the only source — compact injection applies to non-CLI callers.
+        if (req.domain === 'tasks' && req.operation === 'list' && req.source !== 'cli') {
+            req.params ??= {};
+            if (req.params['compact'] === undefined) {
+                req.params['compact'] = true;
+            }
+        }
+        // Check domain access at this tier
+        if (!config.allowedDomains.includes(req.domain)) {
+            return {
+                _meta: {
+                    gateway: req.gateway,
+                    domain: req.domain,
+                    operation: req.operation,
+                    version: '1.0.0',
+                    timestamp: new Date().toISOString(),
+                    duration_ms: 0,
+                    source: req.source,
+                    requestId: req.requestId,
+                },
+                success: false,
+                error: {
+                    code: 'E_INVALID_OPERATION',
+                    exitCode: 2,
+                    message: `Operation not available at '${tier}' tier. Domain '${req.domain}' requires a higher tier.`,
+                },
+            };
+        }
+        const response = await next();
+        // Apply field exclusions to successful responses
+        if (response.success && response.data !== undefined) {
+            response.data = applyProjection(response.data, config);
+        }
+        return response;
+    };
+}
+//# sourceMappingURL=projection.js.map

package/dist/dispatch/middleware/projection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"projection.js","sourceRoot":"","sources":["../../../src/dispatch/middleware/projection.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,EAEL,WAAW,EAEX,WAAW,GACZ,MAAM,uBAAuB,CAAC;AAQ/B;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAc,EAAE,IAAa;IAC9D,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAC3D,CAAC;AAED;;;GAGG;AACH,SAAS,UAAU,CAAC,IAAa,EAAE,QAAgB,EAAE,eAAuB,CAAC;IAC3E,uCAAuC;IACvC,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,SAAS,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACpE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,yCAAyC;IACzC,IAAI,YAAY,IAAI,QAAQ,EAAE,CAAC;QAC7B,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,OAAO,UAAU,IAAI,CAAC,MAAM,IAAI,CAAC;QACnC,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,sBAAsB;IACtB,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,QAAQ,EAAE,YAAY,GAAG,CAAC,CAAC,CAAC,CAAC;IAC1E,CAAC;IAED,uBAAuB;IACvB,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,MAAM,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,KAAK,EAAE,QAAQ,EAAE,YAAY,GAAG,CAAC,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAI,IAAO,EAAE,MAAwB;IAClE,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAEnD,IAAI,MAAM,GAAY,IAAI,CAAC;IAE3B,yBAAyB;IACzB,IAAI,MAAM,CAAC,aAAa,EAAE,MAAM,EAAE,CAAC;QACjC,MAAM,GAAG,GAAG,EAAE,GAAG,IAAI,EAA6B,CAAC;QACnD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;YACzC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvB,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YACvB,CAAC;iBAAM,CAAC;gBACN,iDAAiD;gBACjD,IAAI,OAAO,GAAwC,GAAG,CAAC;gBACvD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;oBAC1C,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;oBAChC,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;wBACnC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,GAAI,GAA+B,EAAE,CAAC;wBAC5D,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAA4B,CAAC;oBACzD,CAAC;yBAAM,CAAC;wBACN,OAAO,GAAG,SAAS,CAAC;wBACpB,MAAM;oBACR,CAAC;gBACH,CAAC;gBACD,IAAI,OAAO,EAAE,CAAC;oBACZ,OAAO,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;gBAC1C,CAAC;YACH,CAAC;QACH,CAAC;QACD,MAAM,GAAG,GAAG,CAAC;IACf,CAAC;IAED,sBAAsB;IACtB,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAClC,MAAM,GAAG,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC/C,CAAC;IAED,OAAO,MAAW,CAAC;AACrB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB,CAAC,MAAgC;IACtE,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IACjC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;AAC7C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B;IACxC,OAAO,KAAK,EACV,GAAoB,EACpB,IAAqC,EACV,EAAE;QAC7B,MAAM,OAAO,GAAG,eAAe,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QAEjC,uDAAuD;QACvD,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YACf,OAAO,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAChC,CAAC;QAED,2EAA2E;QAC3E,yEAAyE;QACzE,IAAI,GAAG,CAAC,MAAM,KAAK,OAAO,IAAI,GAAG,CAAC,SAAS,KAAK,MAAM,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YAC/E,GAAG,CAAC,MAAM,KAAK,EAAE,CAAC;YAClB,IAAI,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,SAAS,EAAE,CAAC;gBACxC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC;YAC/B,CAAC;QACH,CAAC;QAED,mCAAmC;QACnC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAChD,OAAO;gBACL,KAAK,EAAE;oBACL,OAAO,EAAE,GAAG,CAAC,OAAO;oBACpB,MAAM,EAAE,GAAG,CAAC,MAAM;oBAClB,SAAS,EAAE,GAAG,CAAC,SAAS;oBACxB,OAAO,EAAE,OAAO;oBAChB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;oBACnC,WAAW,EAAE,CAAC;oBACd,MAAM,EAAE,GAAG,CAAC,MAAM;oBAClB,SAAS,EAAE,GAAG,CAAC,SAAS;iBACzB;gBACD,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE;oBACL,IAAI,EAAE,qBAAqB;oBAC3B,QAAQ,EAAE,CAAC;oBACX,OAAO,EAAE,+BAA+B,IAAI,mBAAmB,GAAG,CAAC,MAAM,2BAA2B;iBACrG;aACF,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,EAAE,CAAC;QAE9B,iDAAiD;QACjD,IAAI,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACpD,QAAQ,CAAC,IAAI,GAAG,eAAe,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACzD,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC;AACJ,CAAC"}

package/dist/dispatch/middleware/protocol-enforcement.d.ts

@@ -0,0 +1,27 @@
+import type { Middleware } from '../types.js';
+/**
+ * Creates a middleware that enforces protocol compliance.
+ *
+ * Delegates to ProtocolEnforcer.enforceProtocol() which:
+ * - Passes through query operations untouched
+ * - Passes through mutate operations that don't require validation
+ * - Validates protocol compliance on validated mutate operations after execution
+ * - In strict mode, blocks operations with protocol violations (exit codes 60-70)
+ *
+ * @remarks
+ * The middleware ensures that DispatchResponse `_meta` fields (source, requestId)
+ * are always populated, even when ProtocolEnforcer returns a DomainResponse that
+ * lacks them. This prevents downstream consumers from encountering undefined values.
+ *
+ * @param strictMode - When true, blocks operations that violate protocol rules
+ * @returns Middleware function that enforces protocol compliance
+ *
+ * @example
+ * ```typescript
+ * import { createProtocolEnforcement } from './protocol-enforcement.js';
+ *
+ * const enforcement = createProtocolEnforcement(true);
+ * ```
+ */
+export declare function createProtocolEnforcement(strictMode?: boolean): Middleware;
+//# sourceMappingURL=protocol-enforcement.d.ts.map

package/dist/dispatch/middleware/protocol-enforcement.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol-enforcement.d.ts","sourceRoot":"","sources":["../../../src/dispatch/middleware/protocol-enforcement.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAmD,UAAU,EAAE,MAAM,aAAa,CAAC;AAE/F;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,yBAAyB,CAAC,UAAU,GAAE,OAAc,GAAG,UAAU,CAqBhF"}

package/dist/dispatch/middleware/protocol-enforcement.js

@@ -0,0 +1,45 @@
+import { ProtocolEnforcer } from '@cleocode/core/internal';
+/**
+ * Creates a middleware that enforces protocol compliance.
+ *
+ * Delegates to ProtocolEnforcer.enforceProtocol() which:
+ * - Passes through query operations untouched
+ * - Passes through mutate operations that don't require validation
+ * - Validates protocol compliance on validated mutate operations after execution
+ * - In strict mode, blocks operations with protocol violations (exit codes 60-70)
+ *
+ * @remarks
+ * The middleware ensures that DispatchResponse `_meta` fields (source, requestId)
+ * are always populated, even when ProtocolEnforcer returns a DomainResponse that
+ * lacks them. This prevents downstream consumers from encountering undefined values.
+ *
+ * @param strictMode - When true, blocks operations that violate protocol rules
+ * @returns Middleware function that enforces protocol compliance
+ *
+ * @example
+ * ```typescript
+ * import { createProtocolEnforcement } from './protocol-enforcement.js';
+ *
+ * const enforcement = createProtocolEnforcement(true);
+ * ```
+ */
+export function createProtocolEnforcement(strictMode = true) {
+    const enforcer = new ProtocolEnforcer(strictMode);
+    return async (req, next) => {
+        const result = await enforcer.enforceProtocol(req, next);
+        // enforceProtocol may return a DomainResponse (missing source/requestId on _meta)
+        // when it constructs an error response. Ensure _meta has required DispatchResponse fields.
+        if (!result._meta.source || !result._meta.requestId) {
+            return {
+                ...result,
+                _meta: {
+                    ...result._meta,
+                    source: result._meta.source ?? req.source,
+                    requestId: result._meta.requestId ?? req.requestId,
+                },
+            };
+        }
+        return result;
+    };
+}
+//# sourceMappingURL=protocol-enforcement.js.map

package/dist/dispatch/middleware/protocol-enforcement.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol-enforcement.js","sourceRoot":"","sources":["../../../src/dispatch/middleware/protocol-enforcement.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAG3D;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,UAAU,yBAAyB,CAAC,aAAsB,IAAI;IAClE,MAAM,QAAQ,GAAG,IAAI,gBAAgB,CAAC,UAAU,CAAC,CAAC;IAElD,OAAO,KAAK,EAAE,GAAoB,EAAE,IAAkB,EAA6B,EAAE;QACnF,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,eAAe,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAEzD,kFAAkF;QAClF,2FAA2F;QAC3F,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;YACpD,OAAO;gBACL,GAAG,MAAM;gBACT,KAAK,EAAE;oBACL,GAAG,MAAM,CAAC,KAAK;oBACf,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM;oBACzC,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS,IAAI,GAAG,CAAC,SAAS;iBACnD;aACkB,CAAC;QACxB,CAAC;QAED,OAAO,MAA0B,CAAC;IACpC,CAAC,CAAC;AACJ,CAAC"}

package/dist/dispatch/middleware/rate-limiter.d.ts

@@ -0,0 +1,72 @@
+import type { DispatchRequest, Middleware, RateLimitMeta } from '../types.js';
+/**
+ * Per-category rate limit thresholds.
+ *
+ * @remarks
+ * Each category (query, mutate, spawn) uses a sliding window algorithm.
+ * Requests older than `windowMs` are pruned before checking the count.
+ */
+export interface RateLimitConfig {
+    /** Maximum number of requests allowed within the window. */
+    maxRequests: number;
+    /** Sliding window duration in milliseconds. */
+    windowMs: number;
+}
+/**
+ * Full rate limiting configuration across all categories.
+ *
+ * @remarks
+ * When `enabled` is false, all requests pass through without limit checks.
+ */
+export interface RateLimitingConfig {
+    /** Whether rate limiting is active. */
+    enabled: boolean;
+    /** Limits for read-only query operations. */
+    query: RateLimitConfig;
+    /** Limits for mutate (write) operations. */
+    mutate: RateLimitConfig;
+    /** Limits for spawn (subagent launch) operations. */
+    spawn: RateLimitConfig;
+}
+export declare const DEFAULT_RATE_LIMITING: RateLimitingConfig;
+/**
+ * Sliding-window rate limiter for the dispatch pipeline.
+ *
+ * @remarks
+ * Tracks request timestamps per category (query, mutate, spawn) using
+ * in-memory sliding window buckets. The `check` method prunes stale
+ * timestamps, evaluates the current count, and returns whether the
+ * request is allowed along with limit metadata.
+ */
+export declare class RateLimiter {
+    /** Per-category sliding window buckets. */
+    private buckets;
+    /** Merged configuration with defaults. */
+    private config;
+    constructor(config?: Partial<RateLimitingConfig>);
+    check(req: DispatchRequest): RateLimitMeta & {
+        allowed: boolean;
+    };
+    private resolveCategory;
+    private getLimitConfig;
+}
+/**
+ * Creates a rate limiting middleware for the dispatch pipeline.
+ *
+ * @remarks
+ * Attaches rate limit metadata to every response `_meta.rateLimit` field.
+ * When the limit is exceeded, returns an error response with code
+ * `E_RATE_LIMIT_EXCEEDED` and HTTP-style exit code 429.
+ *
+ * @param config - Optional partial config to override defaults
+ * @returns Middleware function that enforces rate limits
+ *
+ * @example
+ * ```typescript
+ * import { createRateLimiter } from './rate-limiter.js';
+ *
+ * const limiter = createRateLimiter({ query: { maxRequests: 50, windowMs: 30_000 } });
+ * ```
+ */
+export declare function createRateLimiter(config?: Partial<RateLimitingConfig>): Middleware;
+//# sourceMappingURL=rate-limiter.d.ts.map

package/dist/dispatch/middleware/rate-limiter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limiter.d.ts","sourceRoot":"","sources":["../../../src/dispatch/middleware/rate-limiter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,eAAe,EAEf,UAAU,EACV,aAAa,EACd,MAAM,aAAa,CAAC;AAErB;;;;;;GAMG;AACH,MAAM,WAAW,eAAe;IAC9B,4DAA4D;IAC5D,WAAW,EAAE,MAAM,CAAC;IACpB,+CAA+C;IAC/C,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IACjC,uCAAuC;IACvC,OAAO,EAAE,OAAO,CAAC;IACjB,6CAA6C;IAC7C,KAAK,EAAE,eAAe,CAAC;IACvB,4CAA4C;IAC5C,MAAM,EAAE,eAAe,CAAC;IACxB,qDAAqD;IACrD,KAAK,EAAE,eAAe,CAAC;CACxB;AAED,eAAO,MAAM,qBAAqB,EAAE,kBAKnC,CAAC;AASF;;;;;;;;GAQG;AACH,qBAAa,WAAW;IACtB,2CAA2C;IAC3C,OAAO,CAAC,OAAO,CAA+C;IAC9D,0CAA0C;IAC1C,OAAO,CAAC,MAAM,CAAqB;gBAEvB,MAAM,CAAC,EAAE,OAAO,CAAC,kBAAkB,CAAC;IAUhD,KAAK,CAAC,GAAG,EAAE,eAAe,GAAG,aAAa,GAAG;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE;IA2CjE,OAAO,CAAC,eAAe;IAWvB,OAAO,CAAC,cAAc;CAGvB;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,kBAAkB,CAAC,GAAG,UAAU,CAqClF"}