@dani-builder/strapi-plugin-agent 0.2.0

package/README.md

@@ -0,0 +1,59 @@
+# @dani-builder/strapi-plugin-agent
+
+Strapi 5 server plugin for Daniworks Agent. It exposes the locale-scoped
+knowledge-base retrieval services plus `POST /api/agent/chat`, an SSE endpoint
+that emits the public `@dani-builder/agent-contract` event wire format.
+
+Provider and control-plane integrations are opt-in. A missing provider produces
+the terminal `provider_unconfigured` SSE error before retrieval or any external
+request; a missing control-plane URL or token is inert and never attempts a
+network request.
+
+Builder calls the serializer registration point only when this optional plugin
+is installed.
+
+## Chat rate limit
+
+`POST /api/agent/chat` is limited by the in-memory
+`plugin::agent.rate-limit` policy. The defaults allow five requests per minute
+for each IP address reported by Strapi. Strapi returns `403 PolicyError` for a
+request over the limit; the response is not `429` and has no `Retry-After`
+header.
+
+Configure the policy in the agent plugin settings:
+
+```ts
+agent: {
+  enabled: true,
+  config: {
+    rateLimit: { enabled: true, windowMs: 60_000, max: 5 },
+  },
+},
+```
+
+Set `rateLimit.enabled` to `false` to disable the policy, or adjust
+`windowMs` and `max` for the deployment. Counters are local to each Node
+process and reset on restart, so multi-instance deployments enforce the limit
+independently per instance.
+
+When Strapi runs behind a proxy or CDN, set
+`server: { proxy: { koa: true } }` so `ctx.request.ip` resolves the forwarded
+client address. Without that trusted-proxy setting, all traffic through the
+same upstream can share one rate-limit bucket.
+
+## Knowledge-base revision contract
+
+`knowledge-source.serializerRevision` is the persisted integer used when
+indexing vectors and filtering Qdrant retrieval. Bump it and force a full
+source reindex whenever serializer output semantics change.
+
+`serializer.getSerializerFingerprint()` (and the retained
+`getSerializerRevision()` alias) returns a checksum of registered override
+implementations for diagnostics only. It is not stored in Qdrant and must not
+be used as a search revision: JavaScript function source cannot include values
+captured from an override closure. If closure state changes output, explicitly
+bump the affected source's integer `serializerRevision` and reindex.
+
+Malformed Qdrant search hits are excluded and emit a structured
+`agent.qdrant.search_hit_excluded` warning. Pass a `logger` to
+`createQdrantStore()` to route these warnings to the host observability stack.

package/dist/server/src/config/index.d.ts

@@ -0,0 +1,12 @@
+declare const config: {
+    default(): {
+        rateLimit: {
+            enabled: boolean;
+            windowMs: number;
+            max: number;
+        };
+    };
+    validator(value: unknown): void;
+};
+export default config;
+//# sourceMappingURL=index.d.ts.map

package/dist/server/src/config/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../server/src/config/index.ts"],"names":[],"mappings":"AAAA,QAAA,MAAM,MAAM;;;;;;;;qBAUO,OAAO,GAAG,IAAI;CA2BhC,CAAC;AAEF,eAAe,MAAM,CAAC"}

package/dist/server/src/config/index.js

@@ -0,0 +1,36 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const config = {
+    default() {
+        return {
+            rateLimit: {
+                enabled: true,
+                windowMs: 60_000,
+                max: 5,
+            },
+        };
+    },
+    validator(value) {
+        if (typeof value !== "object" || value === null || Array.isArray(value)) {
+            throw new Error("[agent] config must be an object");
+        }
+        const rateLimit = value.rateLimit;
+        if (typeof rateLimit !== "object" ||
+            rateLimit === null ||
+            Array.isArray(rateLimit)) {
+            throw new Error("[agent] config.rateLimit must be an object");
+        }
+        const { enabled, windowMs, max } = rateLimit;
+        if (typeof enabled !== "boolean") {
+            throw new Error("[agent] config.rateLimit.enabled must be a boolean");
+        }
+        if (typeof windowMs !== "number" || windowMs <= 0) {
+            throw new Error("[agent] config.rateLimit.windowMs must be positive");
+        }
+        if (typeof max !== "number" || !Number.isInteger(max) || max <= 0) {
+            throw new Error("[agent] config.rateLimit.max must be a positive integer");
+        }
+    },
+};
+exports.default = config;
+//# sourceMappingURL=index.js.map

package/dist/server/src/config/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../server/src/config/index.ts"],"names":[],"mappings":";;AAAA,MAAM,MAAM,GAAG;IACb,OAAO;QACL,OAAO;YACL,SAAS,EAAE;gBACT,OAAO,EAAE,IAAI;gBACb,QAAQ,EAAE,MAAM;gBAChB,GAAG,EAAE,CAAC;aACP;SACF,CAAC;IACJ,CAAC;IACD,SAAS,CAAC,KAAc;QACtB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACxE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACtD,CAAC;QAED,MAAM,SAAS,GAAI,KAAiC,CAAC,SAAS,CAAC;QAC/D,IACE,OAAO,SAAS,KAAK,QAAQ;YAC7B,SAAS,KAAK,IAAI;YAClB,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EACxB,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAChE,CAAC;QAED,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,SAAoC,CAAC;QACxE,IAAI,OAAO,OAAO,KAAK,SAAS,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACxE,CAAC;QACD,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,IAAI,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACxE,CAAC;QACD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC;YAClE,MAAM,IAAI,KAAK,CACb,yDAAyD,CAC1D,CAAC;QACJ,CAAC;IACH,CAAC;CACF,CAAC;AAEF,kBAAe,MAAM,CAAC"}

package/dist/server/src/content-types/index.d.ts

@@ -0,0 +1,76 @@
+declare const contentTypes: {
+    "knowledge-source": {
+        schema: {
+            kind: string;
+            collectionName: string;
+            info: {
+                singularName: string;
+                pluralName: string;
+                displayName: string;
+                description: string;
+            };
+            options: {
+                draftAndPublish: boolean;
+            };
+            attributes: {
+                sourceUid: {
+                    type: string;
+                    required: boolean;
+                    unique: boolean;
+                };
+                titleField: {
+                    type: string;
+                    required: boolean;
+                };
+                descriptionField: {
+                    type: string;
+                };
+                bodyFields: {
+                    type: string;
+                    required: boolean;
+                };
+                extractionMode: {
+                    type: string;
+                    enum: string[];
+                    default: string;
+                    required: boolean;
+                };
+                excludedFields: {
+                    type: string;
+                };
+                slugField: {
+                    type: string;
+                };
+                urlPattern: {
+                    type: string;
+                };
+                locales: {
+                    type: string;
+                    required: boolean;
+                };
+                configRevision: {
+                    type: string;
+                    default: number;
+                    required: boolean;
+                };
+                indexedConfigRevision: {
+                    type: string;
+                    default: number;
+                    required: boolean;
+                };
+                serializerRevision: {
+                    type: string;
+                    default: number;
+                    required: boolean;
+                };
+                indexedSerializerRevision: {
+                    type: string;
+                    default: number;
+                    required: boolean;
+                };
+            };
+        };
+    };
+};
+export default contentTypes;
+//# sourceMappingURL=index.d.ts.map

package/dist/server/src/content-types/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../server/src/content-types/index.ts"],"names":[],"mappings":"AAEA,QAAA,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAEjB,CAAC;AAEF,eAAe,YAAY,CAAC"}

package/dist/server/src/content-types/index.js

@@ -0,0 +1,11 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const knowledge_source_1 = __importDefault(require("./knowledge-source"));
+const contentTypes = {
+    "knowledge-source": { schema: knowledge_source_1.default },
+};
+exports.default = contentTypes;
+//# sourceMappingURL=index.js.map

package/dist/server/src/content-types/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../server/src/content-types/index.ts"],"names":[],"mappings":";;;;;AAAA,0EAAiD;AAEjD,MAAM,YAAY,GAAG;IACnB,kBAAkB,EAAE,EAAE,MAAM,EAAE,0BAAe,EAAE;CAChD,CAAC;AAEF,kBAAe,YAAY,CAAC"}

package/dist/server/src/content-types/knowledge-source/index.d.ts

@@ -0,0 +1,3 @@
+import schema from "./schema.json";
+export default schema;
+//# sourceMappingURL=index.d.ts.map

package/dist/server/src/content-types/knowledge-source/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../server/src/content-types/knowledge-source/index.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,eAAe,CAAC;AAEnC,eAAe,MAAM,CAAC"}

package/dist/server/src/content-types/knowledge-source/index.js

@@ -0,0 +1,8 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const schema_json_1 = __importDefault(require("./schema.json"));
+exports.default = schema_json_1.default;
+//# sourceMappingURL=index.js.map

package/dist/server/src/content-types/knowledge-source/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../server/src/content-types/knowledge-source/index.ts"],"names":[],"mappings":";;;;;AAAA,gEAAmC;AAEnC,kBAAe,qBAAM,CAAC"}

package/dist/server/src/content-types/knowledge-source/schema.json

@@ -0,0 +1,39 @@
+{
+    "kind": "collectionType",
+    "collectionName": "agent_knowledge_sources",
+    "info": {
+        "singularName": "knowledge-source",
+        "pluralName": "knowledge-sources",
+        "displayName": "Knowledge Source",
+        "description": "A content type and extraction mapping indexed by Daniworks Agent"
+    },
+    "options": { "draftAndPublish": false },
+    "attributes": {
+        "sourceUid": { "type": "string", "required": true, "unique": true },
+        "titleField": { "type": "string", "required": true },
+        "descriptionField": { "type": "string" },
+        "bodyFields": { "type": "json", "required": true },
+        "extractionMode": {
+            "type": "enumeration",
+            "enum": ["flat", "schema"],
+            "default": "flat",
+            "required": true
+        },
+        "excludedFields": { "type": "json" },
+        "slugField": { "type": "string" },
+        "urlPattern": { "type": "string" },
+        "locales": { "type": "json", "required": true },
+        "configRevision": { "type": "integer", "default": 1, "required": true },
+        "indexedConfigRevision": {
+            "type": "integer",
+            "default": 0,
+            "required": true
+        },
+        "serializerRevision": { "type": "integer", "default": 1, "required": true },
+        "indexedSerializerRevision": {
+            "type": "integer",
+            "default": 0,
+            "required": true
+        }
+    }
+}

package/dist/server/src/controllers/chat.d.ts

@@ -0,0 +1,18 @@
+import type { ServerResponse } from "node:http";
+import type { Core } from "@strapi/strapi";
+export interface ChatContext {
+    request: {
+        body: unknown;
+    };
+    res: Pick<ServerResponse, "once" | "removeListener">;
+    set(name: string, value: string): void;
+    status: number;
+    body: unknown;
+}
+declare const chat: ({ strapi }: {
+    strapi: Core.Strapi;
+}) => {
+    stream(ctx: ChatContext): Promise<void>;
+};
+export default chat;
+//# sourceMappingURL=chat.d.ts.map

package/dist/server/src/controllers/chat.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat.d.ts","sourceRoot":"","sources":["../../../../server/src/controllers/chat.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAI3C,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE;QAAE,IAAI,EAAE,OAAO,CAAA;KAAE,CAAC;IAC3B,GAAG,EAAE,IAAI,CAAC,cAAc,EAAE,MAAM,GAAG,gBAAgB,CAAC,CAAC;IACrD,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,OAAO,CAAC;CACf;AAmCD,QAAA,MAAM,IAAI,GAAI,YAAY;IAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAA;CAAE;gBAC7B,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;CA+B7C,CAAC;AAEH,eAAe,IAAI,CAAC"}

package/dist/server/src/controllers/chat.js

@@ -0,0 +1,74 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const node_stream_1 = require("node:stream");
+const sse_1 = require("../services/sse");
+function chatRequest(value) {
+    if (!value || typeof value !== "object")
+        return null;
+    const body = value;
+    if (typeof body.message !== "string")
+        return null;
+    return {
+        message: body.message,
+        ...(typeof body.agentId === "string" ? { agentId: body.agentId } : {}),
+        ...(typeof body.sessionId === "string"
+            ? { sessionId: body.sessionId }
+            : {}),
+        ...(typeof body.locale === "string" ? { locale: body.locale } : {}),
+        ...(body.context &&
+            typeof body.context === "object" &&
+            typeof body.context.sourceUid === "string" &&
+            typeof body.context.documentId === "string"
+            ? { context: body.context }
+            : {}),
+    };
+}
+async function* nodeChunks(readable) {
+    const reader = readable.getReader();
+    try {
+        for (;;) {
+            const next = await reader.read();
+            if (next.done)
+                return;
+            yield next.value;
+        }
+    }
+    finally {
+        reader.releaseLock();
+    }
+}
+const chat = ({ strapi }) => ({
+    async stream(ctx) {
+        const input = chatRequest(ctx.request.body);
+        if (!input) {
+            ctx.status = 400;
+            ctx.body = { error: "message is required" };
+            return;
+        }
+        const sse = (0, sse_1.createSseStream)();
+        ctx.set("Content-Type", "text/event-stream; charset=utf-8");
+        ctx.set("Cache-Control", "no-cache, no-transform");
+        ctx.set("Connection", "keep-alive");
+        ctx.status = 200;
+        ctx.body = node_stream_1.Readable.from(nodeChunks(sse.readable));
+        const abortController = new AbortController();
+        const abort = () => abortController.abort();
+        ctx.res.once("close", abort);
+        void strapi
+            .plugin("agent")
+            .service("chat")
+            .stream(input, sse.write, abortController.signal)
+            .catch(() => {
+            sse.write({
+                event: "error",
+                data: { code: "internal_error", message: "" },
+            });
+        })
+            .finally(() => {
+            ctx.res.removeListener("close", abort);
+            sse.close();
+        });
+    },
+});
+exports.default = chat;
+//# sourceMappingURL=chat.js.map

package/dist/server/src/controllers/chat.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat.js","sourceRoot":"","sources":["../../../../server/src/controllers/chat.ts"],"names":[],"mappings":";;AAAA,6CAAuC;AAIvC,yCAAkD;AAUlD,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACrD,MAAM,IAAI,GAAG,KAAgC,CAAC;IAC9C,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAClD,OAAO;QACL,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,GAAG,CAAC,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,GAAG,CAAC,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ;YACpC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE;YAC/B,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,GAAG,CAAC,IAAI,CAAC,OAAO;YAChB,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ;YAChC,OAAQ,IAAI,CAAC,OAAmC,CAAC,SAAS,KAAK,QAAQ;YACvE,OAAQ,IAAI,CAAC,OAAmC,CAAC,UAAU,KAAK,QAAQ;YACtE,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAiC,EAAE;YACrD,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED,KAAK,SAAS,CAAC,CAAC,UAAU,CAAC,QAAoC;IAC7D,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,EAAE,CAAC;IACpC,IAAI,CAAC;QACH,SAAS,CAAC;YACR,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YACjC,IAAI,IAAI,CAAC,IAAI;gBAAE,OAAO;YACtB,MAAM,IAAI,CAAC,KAAK,CAAC;QACnB,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,WAAW,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAED,MAAM,IAAI,GAAG,CAAC,EAAE,MAAM,EAA2B,EAAE,EAAE,CAAC,CAAC;IACrD,KAAK,CAAC,MAAM,CAAC,GAAgB;QAC3B,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC;YACjB,GAAG,CAAC,IAAI,GAAG,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC;YAC5C,OAAO;QACT,CAAC;QACD,MAAM,GAAG,GAAG,IAAA,qBAAe,GAAE,CAAC;QAC9B,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,kCAAkC,CAAC,CAAC;QAC5D,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,wBAAwB,CAAC,CAAC;QACnD,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;QACpC,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC;QACjB,GAAG,CAAC,IAAI,GAAG,sBAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;QACnD,MAAM,eAAe,GAAG,IAAI,eAAe,EAAE,CAAC;QAC9C,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;QAC5C,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC7B,KAAK,MAAM;aACR,MAAM,CAAC,OAAO,CAAC;aACf,OAAO,CAAC,MAAM,CAAC;aACf,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,eAAe,CAAC,MAAM,CAAC;aAChD,KAAK,CAAC,GAAG,EAAE;YACV,GAAG,CAAC,KAAK,CAAC;gBACR,KAAK,EAAE,OAAO;gBACd,IAAI,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,EAAE,EAAE;aAC9C,CAAC,CAAC;QACL,CAAC,CAAC;aACD,OAAO,CAAC,GAAG,EAAE;YACZ,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACvC,GAAG,CAAC,KAAK,EAAE,CAAC;QACd,CAAC,CAAC,CAAC;IACP,CAAC;CACF,CAAC,CAAC;AAEH,kBAAe,IAAI,CAAC"}

package/dist/server/src/controllers/index.d.ts

@@ -0,0 +1,3 @@
+declare const controllers: Record<string, unknown>;
+export default controllers;
+//# sourceMappingURL=index.d.ts.map

package/dist/server/src/controllers/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../server/src/controllers/index.ts"],"names":[],"mappings":"AAEA,QAAA,MAAM,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAY,CAAC;AAEtD,eAAe,WAAW,CAAC"}

package/dist/server/src/controllers/index.js

@@ -0,0 +1,9 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const chat_1 = __importDefault(require("./chat"));
+const controllers = { chat: chat_1.default };
+exports.default = controllers;
+//# sourceMappingURL=index.js.map

package/dist/server/src/controllers/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../server/src/controllers/index.ts"],"names":[],"mappings":";;;;;AAAA,kDAA0B;AAE1B,MAAM,WAAW,GAA4B,EAAE,IAAI,EAAJ,cAAI,EAAE,CAAC;AAEtD,kBAAe,WAAW,CAAC"}

package/dist/server/src/index.d.ts

@@ -0,0 +1,13 @@
+import register from "./register";
+interface PluginServer {
+    config: unknown;
+    contentTypes: Record<string, unknown>;
+    controllers: Record<string, unknown>;
+    policies: Record<string, unknown>;
+    register: typeof register;
+    routes: Record<string, unknown>;
+    services: Record<string, unknown>;
+}
+declare const plugin: PluginServer;
+export default plugin;
+//# sourceMappingURL=index.d.ts.map

package/dist/server/src/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../server/src/index.ts"],"names":[],"mappings":"AAIA,OAAO,QAAQ,MAAM,YAAY,CAAC;AAIlC,UAAU,YAAY;IACpB,MAAM,EAAE,OAAO,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,QAAQ,EAAE,OAAO,QAAQ,CAAC;IAC1B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED,QAAA,MAAM,MAAM,EAAE,YAQb,CAAC;AAEF,eAAe,MAAM,CAAC"}

package/dist/server/src/index.js

@@ -0,0 +1,23 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const config_1 = __importDefault(require("./config"));
+const controllers_1 = __importDefault(require("./controllers"));
+const content_types_1 = __importDefault(require("./content-types"));
+const policies_1 = __importDefault(require("./policies"));
+const register_1 = __importDefault(require("./register"));
+const routes_1 = __importDefault(require("./routes"));
+const services_1 = __importDefault(require("./services"));
+const plugin = {
+    config: config_1.default,
+    controllers: controllers_1.default,
+    contentTypes: content_types_1.default,
+    policies: policies_1.default,
+    register: register_1.default,
+    routes: routes_1.default,
+    services: services_1.default,
+};
+exports.default = plugin;
+//# sourceMappingURL=index.js.map

package/dist/server/src/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../server/src/index.ts"],"names":[],"mappings":";;;;;AAAA,sDAA8B;AAC9B,gEAAwC;AACxC,oEAA2C;AAC3C,0DAAkC;AAClC,0DAAkC;AAClC,sDAA8B;AAC9B,0DAAkC;AAYlC,MAAM,MAAM,GAAiB;IAC3B,MAAM,EAAN,gBAAM;IACN,WAAW,EAAX,qBAAW;IACX,YAAY,EAAZ,uBAAY;IACZ,QAAQ,EAAR,kBAAQ;IACR,QAAQ,EAAR,kBAAQ;IACR,MAAM,EAAN,gBAAM;IACN,QAAQ,EAAR,kBAAQ;CACT,CAAC;AAEF,kBAAe,MAAM,CAAC"}

package/dist/server/src/plugin-id.d.ts

@@ -0,0 +1,2 @@
+export declare const PLUGIN_ID = "agent";
+//# sourceMappingURL=plugin-id.d.ts.map

package/dist/server/src/plugin-id.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-id.d.ts","sourceRoot":"","sources":["../../../server/src/plugin-id.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,SAAS,UAAU,CAAC"}

package/dist/server/src/plugin-id.js

@@ -0,0 +1,5 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PLUGIN_ID = void 0;
+exports.PLUGIN_ID = "agent";
+//# sourceMappingURL=plugin-id.js.map

package/dist/server/src/plugin-id.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-id.js","sourceRoot":"","sources":["../../../server/src/plugin-id.ts"],"names":[],"mappings":";;;AAAa,QAAA,SAAS,GAAG,OAAO,CAAC"}

package/dist/server/src/policies/index.d.ts

@@ -0,0 +1,3 @@
+declare const policies: Record<string, unknown>;
+export default policies;
+//# sourceMappingURL=index.d.ts.map

package/dist/server/src/policies/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../server/src/policies/index.ts"],"names":[],"mappings":"AAEA,QAAA,MAAM,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAErC,CAAC;AAEF,eAAe,QAAQ,CAAC"}

package/dist/server/src/policies/index.js

@@ -0,0 +1,11 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const rate_limit_1 = __importDefault(require("./rate-limit"));
+const policies = {
+    "rate-limit": rate_limit_1.default,
+};
+exports.default = policies;
+//# sourceMappingURL=index.js.map

package/dist/server/src/policies/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../server/src/policies/index.ts"],"names":[],"mappings":";;;;;AAAA,8DAAqC;AAErC,MAAM,QAAQ,GAA4B;IACxC,YAAY,EAAE,oBAAS;CACxB,CAAC;AAEF,kBAAe,QAAQ,CAAC"}

package/dist/server/src/policies/rate-limit.d.ts

@@ -0,0 +1,23 @@
+interface PolicyContext {
+    request?: {
+        ip?: string;
+    };
+}
+interface RateLimitConfig {
+    enabled: boolean;
+    windowMs: number;
+    max: number;
+}
+interface StrapiLike {
+    log: {
+        warn: (message: string) => void;
+    };
+    plugin(name: string): {
+        config(key: "rateLimit"): RateLimitConfig;
+    };
+}
+declare const rateLimit: (policyContext: PolicyContext, _policyConfig: unknown, { strapi }: {
+    strapi: StrapiLike;
+}) => boolean;
+export default rateLimit;
+//# sourceMappingURL=rate-limit.d.ts.map

package/dist/server/src/policies/rate-limit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit.d.ts","sourceRoot":"","sources":["../../../../server/src/policies/rate-limit.ts"],"names":[],"mappings":"AAgBA,UAAU,aAAa;IACrB,OAAO,CAAC,EAAE;QAAE,EAAE,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAC3B;AAED,UAAU,eAAe;IACvB,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;CACb;AAED,UAAU,UAAU;IAClB,GAAG,EAAE;QAAE,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAA;KAAE,CAAC;IACzC,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG;QACpB,MAAM,CAAC,GAAG,EAAE,WAAW,GAAG,eAAe,CAAC;KAC3C,CAAC;CACH;AAED,QAAA,MAAM,SAAS,GACb,eAAe,aAAa,EAC5B,eAAe,OAAO,EACtB,YAAY;IAAE,MAAM,EAAE,UAAU,CAAA;CAAE,KACjC,OAqBF,CAAC;AAEF,eAAe,SAAS,CAAC"}

package/dist/server/src/policies/rate-limit.js

@@ -0,0 +1,37 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+/**
+ * Fixed-window in-memory IP rate limit for the public agent chat route.
+ *
+ * Single-instance only — a shared store is needed for multi-instance deploys.
+ */
+const hits = new Map();
+// Drop expired entries so one-off IPs don't leak memory.
+function sweep(now) {
+    for (const [ip, entry] of hits) {
+        if (now > entry.resetAt)
+            hits.delete(ip);
+    }
+}
+const rateLimit = (policyContext, _policyConfig, { strapi }) => {
+    const config = strapi.plugin("agent").config("rateLimit");
+    if (!config.enabled)
+        return true;
+    const ip = policyContext.request?.ip || "unknown";
+    const now = Date.now();
+    if (hits.size > 500)
+        sweep(now);
+    const entry = hits.get(ip);
+    if (!entry || now > entry.resetAt) {
+        hits.set(ip, { count: 1, resetAt: now + config.windowMs });
+        return true;
+    }
+    entry.count += 1;
+    if (entry.count > config.max) {
+        strapi.log.warn(`[agent] chat rate limit hit for ip=${ip}`);
+        return false; // Strapi surfaces a false policy result as 403 PolicyError.
+    }
+    return true;
+};
+exports.default = rateLimit;
+//# sourceMappingURL=rate-limit.js.map

package/dist/server/src/policies/rate-limit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit.js","sourceRoot":"","sources":["../../../../server/src/policies/rate-limit.ts"],"names":[],"mappings":";;AAAA;;;;GAIG;AACH,MAAM,IAAI,GAAG,IAAI,GAAG,EAA8C,CAAC;AAEnE,yDAAyD;AACzD,SAAS,KAAK,CAAC,GAAW;IACxB,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC;QAC/B,IAAI,GAAG,GAAG,KAAK,CAAC,OAAO;YAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC3C,CAAC;AACH,CAAC;AAqBD,MAAM,SAAS,GAAG,CAChB,aAA4B,EAC5B,aAAsB,EACtB,EAAE,MAAM,EAA0B,EACzB,EAAE;IACX,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAC1D,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAEjC,MAAM,EAAE,GAAG,aAAa,CAAC,OAAO,EAAE,EAAE,IAAI,SAAS,CAAC;IAClD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,IAAI,IAAI,CAAC,IAAI,GAAG,GAAG;QAAE,KAAK,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAE3B,IAAI,CAAC,KAAK,IAAI,GAAG,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;QAClC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC3D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC;IACjB,IAAI,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,sCAAsC,EAAE,EAAE,CAAC,CAAC;QAC5D,OAAO,KAAK,CAAC,CAAC,4DAA4D;IAC5E,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAEF,kBAAe,SAAS,CAAC"}

package/dist/server/src/register.d.ts

@@ -0,0 +1,16 @@
+interface StrapiLike {
+    config: {
+        get(key: string): unknown;
+    };
+    log: {
+        warn(message: string): void;
+    };
+    plugin(name: "agent"): {
+        config(key: "rateLimit.enabled"): boolean;
+    };
+}
+declare const register: ({ strapi }: {
+    strapi: StrapiLike;
+}) => void;
+export default register;
+//# sourceMappingURL=register.d.ts.map

package/dist/server/src/register.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"register.d.ts","sourceRoot":"","sources":["../../../server/src/register.ts"],"names":[],"mappings":"AAKA,UAAU,UAAU;IAClB,MAAM,EAAE;QAAE,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC;IACtC,GAAG,EAAE;QAAE,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IACrC,MAAM,CAAC,IAAI,EAAE,OAAO,GAAG;QACrB,MAAM,CAAC,GAAG,EAAE,mBAAmB,GAAG,OAAO,CAAC;KAC3C,CAAC;CACH;AAED,QAAA,MAAM,QAAQ,GAAI,YAAY;IAAE,MAAM,EAAE,UAAU,CAAA;CAAE,KAAG,IAOtD,CAAC;AAEF,eAAe,QAAQ,CAAC"}

package/dist/server/src/register.js

@@ -0,0 +1,13 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const PROXY_RATE_LIMIT_WARNING = "Rate limiting uses request.ip, but server.proxy.koa is not enabled. " +
+    "When running behind a proxy or CDN, set server: { proxy: { koa: true } } " +
+    "to prevent all clients from sharing one rate-limit bucket.";
+const register = ({ strapi }) => {
+    if (strapi.plugin("agent").config("rateLimit.enabled") &&
+        !strapi.config.get("server.proxy.koa")) {
+        strapi.log.warn(PROXY_RATE_LIMIT_WARNING);
+    }
+};
+exports.default = register;
+//# sourceMappingURL=register.js.map

package/dist/server/src/register.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"register.js","sourceRoot":"","sources":["../../../server/src/register.ts"],"names":[],"mappings":";;AAAA,MAAM,wBAAwB,GAC5B,sEAAsE;IACtE,2EAA2E;IAC3E,4DAA4D,CAAC;AAU/D,MAAM,QAAQ,GAAG,CAAC,EAAE,MAAM,EAA0B,EAAQ,EAAE;IAC5D,IACE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC;QAClD,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,kBAAkB,CAAC,EACtC,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IAC5C,CAAC;AACH,CAAC,CAAC;AAEF,kBAAe,QAAQ,CAAC"}

package/dist/server/src/routes/content-api.d.ts

@@ -0,0 +1,13 @@
+declare const contentApi: {
+    type: "content-api";
+    routes: {
+        method: string;
+        path: string;
+        handler: string;
+        config: {
+            policies: string[];
+        };
+    }[];
+};
+export default contentApi;
+//# sourceMappingURL=content-api.d.ts.map

package/dist/server/src/routes/content-api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"content-api.d.ts","sourceRoot":"","sources":["../../../../server/src/routes/content-api.ts"],"names":[],"mappings":"AAAA,QAAA,MAAM,UAAU;;;;;;;;;;CAUf,CAAC;AAEF,eAAe,UAAU,CAAC"}