@getrift/rift 0.0.0 → 0.1.0-beta.1

package/dist/src/security/paths.js

@@ -0,0 +1,67 @@
+/**
+ * Path canonicalization and security validation.
+ *
+ * Every file path entering the indexing pipeline must pass through
+ * validatePath() to prevent directory traversal, symlink escapes,
+ * and access to files outside configured source roots.
+ */
+import fs from "node:fs";
+import path from "node:path";
+/**
+ * Validate and canonicalize a file path against allowed source roots.
+ *
+ * 1. Resolves the path to absolute.
+ * 2. Resolves symlinks via realpath.
+ * 3. Confirms the canonical path falls under at least one allowed root.
+ *
+ * @returns The canonical (symlink-resolved) absolute path.
+ * @throws If the path is outside all allowed roots, unresolvable, or inaccessible.
+ */
+export function validatePath(filePath, allowedRoots) {
+    if (allowedRoots.length === 0) {
+        throw new Error("No allowed roots configured");
+    }
+    const absolute = path.resolve(filePath);
+    let real;
+    try {
+        real = fs.realpathSync(absolute);
+    }
+    catch {
+        throw new Error(`Path does not exist or is inaccessible: ${filePath}`);
+    }
+    for (const root of allowedRoots) {
+        let realRoot;
+        try {
+            realRoot = fs.realpathSync(root);
+        }
+        catch {
+            continue; // Root itself doesn't exist — skip
+        }
+        if (real === realRoot || real.startsWith(realRoot + path.sep)) {
+            return real;
+        }
+    }
+    throw new Error(`Path outside allowed roots: ${filePath}`);
+}
+/**
+ * Validate a path for an unlink event (file already deleted).
+ *
+ * Since the file no longer exists, we cannot resolve symlinks.
+ * We fall back to path.resolve() and prefix-check only.
+ * This is safe because: the path was validated on add/change,
+ * and unlink only removes existing rows — it cannot insert data.
+ */
+export function validateUnlinkPath(filePath, allowedRoots) {
+    if (allowedRoots.length === 0) {
+        throw new Error("No allowed roots configured");
+    }
+    const absolute = path.resolve(filePath);
+    for (const root of allowedRoots) {
+        const absoluteRoot = path.resolve(root);
+        if (absolute === absoluteRoot || absolute.startsWith(absoluteRoot + path.sep)) {
+            return absolute;
+        }
+    }
+    throw new Error(`Path outside allowed roots: ${filePath}`);
+}
+//# sourceMappingURL=paths.js.map

package/dist/src/security/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../../src/security/paths.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B;;;;;;;;;GASG;AACH,MAAM,UAAU,YAAY,CAAC,QAAgB,EAAE,YAA+B;IAC5E,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACjD,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAExC,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,2CAA2C,QAAQ,EAAE,CAAC,CAAC;IACzE,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;QAChC,IAAI,QAAgB,CAAC;QACrB,IAAI,CAAC;YACH,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,CAAC,mCAAmC;QAC/C,CAAC;QAED,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9D,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,+BAA+B,QAAQ,EAAE,CAAC,CAAC;AAC7D,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAAC,QAAgB,EAAE,YAA+B;IAClF,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACjD,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAExC,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;QAChC,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,QAAQ,KAAK,YAAY,IAAI,QAAQ,CAAC,UAAU,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9E,OAAO,QAAQ,CAAC;QAClB,CAAC;IACH,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,+BAA+B,QAAQ,EAAE,CAAC,CAAC;AAC7D,CAAC"}

package/dist/src/server/app.d.ts

@@ -0,0 +1,29 @@
+import { type FastifyInstance } from "fastify";
+import type { Config } from "../config/schema.js";
+import type { TokenManager } from "../auth/rotation.js";
+import type { JobQueue } from "../jobs/queue.js";
+import type { EmbeddingProvider } from "../providers/types.js";
+import type { DigestSummarizer, MetadataExtractor } from "../providers/types.js";
+import type { Watcher } from "../ingestion/watcher.js";
+import type { Scanner } from "../ingestion/scanner.js";
+export interface App {
+    server: FastifyInstance;
+    markReady: () => void;
+    isReady: () => boolean;
+}
+/**
+ * Build a Fastify instance from validated config.
+ *
+ * Returns the server plus per-instance readiness controls.
+ * Does NOT call `listen()` — the caller is responsible for that
+ * so tests can use `inject()` without binding a port.
+ *
+ * As of Slice 19, job handlers are registered externally (main.ts)
+ * via worker-wrapped handlers. buildApp only registers HTTP routes.
+ *
+ * If `tokenManager` is provided, bearer auth validates against it.
+ * If omitted (e.g. in non-auth tests), only the test_token bypass
+ * works for authenticated routes; all other tokens are rejected.
+ */
+export declare function buildApp(config: Config, tokenManager?: TokenManager, jobQueue?: JobQueue, embeddingProvider?: EmbeddingProvider, watchers?: Watcher[], scanner?: Scanner | null, digestSummarizer?: DigestSummarizer, metadataExtractor?: MetadataExtractor, localEmbeddingProvider?: EmbeddingProvider): Promise<App>;
+//# sourceMappingURL=app.d.ts.map

package/dist/src/server/app.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../../../src/server/app.ts"],"names":[],"mappings":"AAAA,OAAgB,EAAE,KAAK,eAAe,EAAE,MAAM,SAAS,CAAC;AACxD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAElD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAExD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAuB/D,OAAO,KAAK,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AACjF,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAKvD,MAAM,WAAW,GAAG;IAClB,MAAM,EAAE,eAAe,CAAC;IACxB,SAAS,EAAE,MAAM,IAAI,CAAC;IACtB,OAAO,EAAE,MAAM,OAAO,CAAC;CACxB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,QAAQ,CAC5B,MAAM,EAAE,MAAM,EACd,YAAY,CAAC,EAAE,YAAY,EAC3B,QAAQ,CAAC,EAAE,QAAQ,EACnB,iBAAiB,CAAC,EAAE,iBAAiB,EACrC,QAAQ,CAAC,EAAE,OAAO,EAAE,EACpB,OAAO,CAAC,EAAE,OAAO,GAAG,IAAI,EACxB,gBAAgB,CAAC,EAAE,gBAAgB,EACnC,iBAAiB,CAAC,EAAE,iBAAiB,EACrC,sBAAsB,CAAC,EAAE,iBAAiB,GACzC,OAAO,CAAC,GAAG,CAAC,CA6Od"}

package/dist/src/server/app.js

@@ -0,0 +1,226 @@
+import Fastify from "fastify";
+import { registerAuth } from "../auth/middleware.js";
+import { RateLimiter } from "../auth/rate-limit.js";
+import { registerJobRoutes } from "./routes/jobs.js";
+import { registerSearchRoute } from "./routes/search.js";
+import { registerConversationSearchRoute } from "./routes/conversations-search.js";
+import { registerSaveRoute } from "./routes/save.js";
+import { registerReconcileRoute } from "./routes/reconcile.js";
+import { registerCompactRoute } from "./routes/compact.js";
+import { registerReindexRoute } from "./routes/reindex.js";
+import { registerStatsRoute } from "./routes/stats.js";
+import { registerStatusRoute } from "./routes/status.js";
+import { registerFriendStatusRoute } from "./routes/friend-status.js";
+import { registerMcpUsageRoute } from "./routes/mcp-usage.js";
+import { registerIngestRoute } from "./routes/ingest.js";
+import { registerTriageRoute } from "./routes/triage.js";
+import { registerContextRoute } from "./routes/context.js";
+import { registerMultipart } from "./middleware/multipart.js";
+import { createSaveHandler } from "../jobs/handlers/save.js";
+import { createReconcileHandler } from "../jobs/handlers/reconcile.js";
+import { createCompactHandler } from "../jobs/handlers/compact.js";
+import { createReindexHandler } from "../jobs/handlers/reindex.js";
+import { createIngestHandler } from "../jobs/handlers/ingest.js";
+import { createTriageHandler } from "../jobs/handlers/triage.js";
+import { createHistoricalBackfillCapability } from "../providers/operator-overrides.js";
+import { getBuildInfo } from "./build-info.js";
+/**
+ * Build a Fastify instance from validated config.
+ *
+ * Returns the server plus per-instance readiness controls.
+ * Does NOT call `listen()` — the caller is responsible for that
+ * so tests can use `inject()` without binding a port.
+ *
+ * As of Slice 19, job handlers are registered externally (main.ts)
+ * via worker-wrapped handlers. buildApp only registers HTTP routes.
+ *
+ * If `tokenManager` is provided, bearer auth validates against it.
+ * If omitted (e.g. in non-auth tests), only the test_token bypass
+ * works for authenticated routes; all other tokens are rejected.
+ */
+export async function buildApp(config, tokenManager, jobQueue, embeddingProvider, watchers, scanner, digestSummarizer, metadataExtractor, localEmbeddingProvider) {
+    const startTime = Date.now();
+    let ready = false;
+    const server = Fastify({
+        logger: false,
+        bodyLimit: config.request_limits.json_body_limit_bytes,
+        requestTimeout: config.request_limits.read_timeout_ms,
+    });
+    // --- Auth + rate limiting ---
+    const rateLimiter = new RateLimiter(config.rate_limit.window_ms, config.rate_limit.max_requests);
+    registerAuth(server, config, tokenManager ?? null, rateLimiter);
+    // --- Health endpoint (no auth, always available) ---
+    // `voyage_key_present` mirrors whether the daemon process loaded a
+    // VOYAGE_API_KEY at startup. Used by `rift onboard` to confirm a
+    // post-kickstart respawn picked up the key without paying the cost
+    // of a /save round-trip that would land in LanceDB.
+    server.get("/health", async (_request, _reply) => {
+        const voyageKey = process.env["VOYAGE_API_KEY"];
+        return {
+            status: "ok",
+            uptime_seconds: Math.floor((Date.now() - startTime) / 1000),
+            voyage_key_present: typeof voyageKey === "string" && voyageKey.length > 0,
+        };
+    });
+    // --- Version endpoint (no auth) ---
+    // Unauthenticated on purpose: operators need to confirm which build is
+    // live before they have a token in hand, and the payload leaks nothing
+    // sensitive.
+    server.get("/version", async (_request, _reply) => {
+        return getBuildInfo();
+    });
+    // --- Readiness probe (no auth) ---
+    server.get("/ready", async (_request, reply) => {
+        if (!ready) {
+            return reply.code(503).send({ status: "not_ready" });
+        }
+        return { status: "ready" };
+    });
+    // --- Capability tracking for observability ---
+    const supportedSources = new Set();
+    if (jobQueue) {
+        createHistoricalBackfillCapability(config.data_paths.data_dir);
+    }
+    // --- Job routes (authenticated) ---
+    if (jobQueue) {
+        registerJobRoutes(server, jobQueue);
+    }
+    // --- Save route (authenticated, requires queue + embedding) ---
+    // In production, main.ts pre-registers worker-wrapped handlers.
+    // Fallback in-process handlers are registered here for tests.
+    if (jobQueue && embeddingProvider) {
+        registerSaveRoute(server, jobQueue);
+        if (!jobQueue.hasHandler("save")) {
+            jobQueue.registerHandler("save", createSaveHandler({
+                embeddingProvider,
+                dataDir: config.data_paths.data_dir,
+                queue: jobQueue,
+            }));
+        }
+        supportedSources.add("claude_code");
+        supportedSources.add("gemini_cli");
+        supportedSources.add("codex_cli");
+    }
+    // --- Reconcile route (authenticated, requires queue + embedding + config) ---
+    if (jobQueue && embeddingProvider) {
+        registerReconcileRoute(server, jobQueue);
+        if (!jobQueue.hasHandler("reconcile")) {
+            jobQueue.registerHandler("reconcile", createReconcileHandler({
+                config,
+                embeddingProvider,
+                dataDir: config.data_paths.data_dir,
+                watchers: watchers ?? [],
+                scanner: scanner ?? null,
+                ...(localEmbeddingProvider ? { localEmbeddingProvider } : {}),
+            }));
+        }
+    }
+    // --- Compact route (authenticated, requires queue + embedding + digest summarizer) ---
+    if (jobQueue && embeddingProvider && digestSummarizer) {
+        registerCompactRoute(server, jobQueue, config.data_paths.data_dir);
+        if (!jobQueue.hasHandler("compact")) {
+            jobQueue.registerHandler("compact", createCompactHandler({
+                embeddingProvider,
+                digestSummarizer,
+                dataDir: config.data_paths.data_dir,
+                ageThresholdDays: config.compaction.age_threshold_days,
+                watchers: watchers ?? [],
+                scanner: scanner ?? null,
+            }));
+        }
+    }
+    // --- Reindex route (authenticated, requires queue + embedding + config) ---
+    if (jobQueue && embeddingProvider) {
+        registerReindexRoute(server, jobQueue);
+        if (!jobQueue.hasHandler("reindex")) {
+            jobQueue.registerHandler("reindex", createReindexHandler({
+                config,
+                embeddingProvider,
+                dataDir: config.data_paths.data_dir,
+                watchers: watchers ?? [],
+                scanner: scanner ?? null,
+                ...(localEmbeddingProvider ? { localEmbeddingProvider } : {}),
+            }));
+        }
+    }
+    // --- Ingest route (authenticated, requires queue for job creation) ---
+    if (jobQueue) {
+        await registerMultipart(server, config);
+        registerIngestRoute(server, jobQueue, config.request_limits.multipart_limit_bytes, !!(embeddingProvider && metadataExtractor), config.data_paths.data_dir);
+        if (embeddingProvider && metadataExtractor && !jobQueue.hasHandler("ingest")) {
+            jobQueue.registerHandler("ingest", createIngestHandler({
+                embeddingProvider,
+                metadataExtractor,
+                dataDir: config.data_paths.data_dir,
+                queue: jobQueue,
+            }));
+        }
+    }
+    // --- Triage route + handler ---
+    // Route is always registered when a queue is present.
+    // In production, main.ts pre-registers the worker-wrapped handler.
+    // The fallback in-process handler is used when main hasn't run (tests,
+    // app.ts standalone). Triage doesn't need embedding/metadata providers.
+    if (jobQueue) {
+        registerTriageRoute(server, jobQueue, config.data_paths.data_dir);
+        if (!jobQueue.hasHandler("triage")) {
+            jobQueue.registerHandler("triage", createTriageHandler({
+                dataDir: config.data_paths.data_dir,
+                openai: config.openai,
+            }));
+        }
+    }
+    // --- Search routes (authenticated) ---
+    if (embeddingProvider || localEmbeddingProvider) {
+        registerSearchRoute(server, embeddingProvider, localEmbeddingProvider, config.sources);
+    }
+    if (embeddingProvider) {
+        registerConversationSearchRoute(server, embeddingProvider);
+    }
+    if (embeddingProvider || localEmbeddingProvider) {
+        registerContextRoute(server, embeddingProvider ?? localEmbeddingProvider, config.sources);
+    }
+    // --- Observability deps ---
+    const obsDeps = {
+        config,
+        scanner: scanner ?? null,
+        watchers: watchers ?? [],
+        capabilities: {
+            watchEnabled: config.sources.some((s) => s.mode === "watch"),
+            scanEnabled: config.sources.some((s) => s.mode === "scheduled_scan"),
+            supportedSources,
+            inboxEnabled: !!(embeddingProvider && metadataExtractor),
+        },
+        getMaintenanceState: () => {
+            const job = jobQueue?.getRunningExclusiveJob() ?? null;
+            return {
+                active: job !== null,
+                startedAt: job ? new Date(job.updated_at) : null,
+            };
+        },
+    };
+    // --- Stats route (authenticated) ---
+    registerStatsRoute(server, obsDeps);
+    // --- Status route (authenticated) ---
+    registerStatusRoute(server, obsDeps);
+    // --- Friend-status route (authenticated, structured) ---
+    registerFriendStatusRoute(server, { config, startTime });
+    // --- MCP usage telemetry (unauthenticated; SwiftBar polls every 10s) ---
+    registerMcpUsageRoute(server, obsDeps);
+    // --- Token revocation (authenticated) ---
+    server.delete("/auth/token", async (_request, reply) => {
+        if (!tokenManager) {
+            return reply.code(501).send({ error: "not_configured" });
+        }
+        await tokenManager.revokeAll();
+        return reply.code(204).send();
+    });
+    return {
+        server,
+        markReady: () => {
+            ready = true;
+        },
+        isReady: () => ready,
+    };
+}
+//# sourceMappingURL=app.js.map

package/dist/src/server/app.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.js","sourceRoot":"","sources":["../../../src/server/app.ts"],"names":[],"mappings":"AAAA,OAAO,OAAiC,MAAM,SAAS,CAAC;AAExD,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAErD,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAIpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,+BAA+B,EAAE,MAAM,kCAAkC,CAAC;AACnF,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AACvE,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAKjE,OAAO,EAAE,kCAAkC,EAAE,MAAM,oCAAoC,CAAC;AACxF,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAQ/C;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,MAAc,EACd,YAA2B,EAC3B,QAAmB,EACnB,iBAAqC,EACrC,QAAoB,EACpB,OAAwB,EACxB,gBAAmC,EACnC,iBAAqC,EACrC,sBAA0C;IAE1C,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,IAAI,KAAK,GAAG,KAAK,CAAC;IAElB,MAAM,MAAM,GAAG,OAAO,CAAC;QACrB,MAAM,EAAE,KAAK;QACb,SAAS,EAAE,MAAM,CAAC,cAAc,CAAC,qBAAqB;QACtD,cAAc,EAAE,MAAM,CAAC,cAAc,CAAC,eAAe;KACtD,CAAC,CAAC;IAEH,+BAA+B;IAC/B,MAAM,WAAW,GAAG,IAAI,WAAW,CACjC,MAAM,CAAC,UAAU,CAAC,SAAS,EAC3B,MAAM,CAAC,UAAU,CAAC,YAAY,CAC/B,CAAC;IACF,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,IAAI,IAAI,EAAE,WAAW,CAAC,CAAC;IAEhE,sDAAsD;IACtD,mEAAmE;IACnE,iEAAiE;IACjE,mEAAmE;IACnE,oDAAoD;IACpD,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;QAC/C,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QAChD,OAAO;YACL,MAAM,EAAE,IAAa;YACrB,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,GAAG,IAAI,CAAC;YAC3D,kBAAkB,EAAE,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC;SAC1E,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,qCAAqC;IACrC,uEAAuE;IACvE,uEAAuE;IACvE,aAAa;IACb,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;QAChD,OAAO,YAAY,EAAE,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,oCAAoC;IACpC,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE;QAC7C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;QACvD,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,gDAAgD;IAChD,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAsB,CAAC;IAEvD,IAAI,QAAQ,EAAE,CAAC;QACb,kCAAkC,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IACjE,CAAC;IAED,qCAAqC;IACrC,IAAI,QAAQ,EAAE,CAAC;QACb,iBAAiB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACtC,CAAC;IAED,iEAAiE;IACjE,gEAAgE;IAChE,8DAA8D;IAC9D,IAAI,QAAQ,IAAI,iBAAiB,EAAE,CAAC;QAClC,iBAAiB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACpC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YACjC,QAAQ,CAAC,eAAe,CACtB,MAAM,EACN,iBAAiB,CAAC;gBAChB,iBAAiB;gBACjB,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ;gBACnC,KAAK,EAAE,QAAQ;aAChB,CAAC,CACH,CAAC;QACJ,CAAC;QACD,gBAAgB,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QACpC,gBAAgB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACnC,gBAAgB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACpC,CAAC;IAED,+EAA+E;IAC/E,IAAI,QAAQ,IAAI,iBAAiB,EAAE,CAAC;QAClC,sBAAsB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACzC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YACtC,QAAQ,CAAC,eAAe,CACtB,WAAW,EACX,sBAAsB,CAAC;gBACrB,MAAM;gBACN,iBAAiB;gBACjB,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ;gBACnC,QAAQ,EAAE,QAAQ,IAAI,EAAE;gBACxB,OAAO,EAAE,OAAO,IAAI,IAAI;gBACxB,GAAG,CAAC,sBAAsB,CAAC,CAAC,CAAC,EAAE,sBAAsB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC9D,CAAC,CACH,CAAC;QACJ,CAAC;IACH,CAAC;IAED,wFAAwF;IACxF,IAAI,QAAQ,IAAI,iBAAiB,IAAI,gBAAgB,EAAE,CAAC;QACtD,oBAAoB,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QACnE,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACpC,QAAQ,CAAC,eAAe,CACtB,SAAS,EACT,oBAAoB,CAAC;gBACnB,iBAAiB;gBACjB,gBAAgB;gBAChB,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ;gBACnC,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,kBAAkB;gBACtD,QAAQ,EAAE,QAAQ,IAAI,EAAE;gBACxB,OAAO,EAAE,OAAO,IAAI,IAAI;aACzB,CAAC,CACH,CAAC;QACJ,CAAC;IACH,CAAC;IAED,6EAA6E;IAC7E,IAAI,QAAQ,IAAI,iBAAiB,EAAE,CAAC;QAClC,oBAAoB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACvC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACpC,QAAQ,CAAC,eAAe,CACtB,SAAS,EACT,oBAAoB,CAAC;gBACnB,MAAM;gBACN,iBAAiB;gBACjB,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ;gBACnC,QAAQ,EAAE,QAAQ,IAAI,EAAE;gBACxB,OAAO,EAAE,OAAO,IAAI,IAAI;gBACxB,GAAG,CAAC,sBAAsB,CAAC,CAAC,CAAC,EAAE,sBAAsB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC9D,CAAC,CACH,CAAC;QACJ,CAAC;IACH,CAAC;IAED,wEAAwE;IACxE,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,iBAAiB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACxC,mBAAmB,CACjB,MAAM,EACN,QAAQ,EACR,MAAM,CAAC,cAAc,CAAC,qBAAqB,EAC3C,CAAC,CAAC,CAAC,iBAAiB,IAAI,iBAAiB,CAAC,EAC1C,MAAM,CAAC,UAAU,CAAC,QAAQ,CAC3B,CAAC;QACF,IAAI,iBAAiB,IAAI,iBAAiB,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7E,QAAQ,CAAC,eAAe,CACtB,QAAQ,EACR,mBAAmB,CAAC;gBAClB,iBAAiB;gBACjB,iBAAiB;gBACjB,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ;gBACnC,KAAK,EAAE,QAAQ;aAChB,CAAC,CACH,CAAC;QACJ,CAAC;IACH,CAAC;IAED,iCAAiC;IACjC,sDAAsD;IACtD,mEAAmE;IACnE,uEAAuE;IACvE,wEAAwE;IACxE,IAAI,QAAQ,EAAE,CAAC;QACb,mBAAmB,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAClE,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACnC,QAAQ,CAAC,eAAe,CACtB,QAAQ,EACR,mBAAmB,CAAC;gBAClB,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ;gBACnC,MAAM,EAAE,MAAM,CAAC,MAAM;aACtB,CAAC,CACH,CAAC;QACJ,CAAC;IACH,CAAC;IAED,wCAAwC;IACxC,IAAI,iBAAiB,IAAI,sBAAsB,EAAE,CAAC;QAChD,mBAAmB,CAAC,MAAM,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IACzF,CAAC;IACD,IAAI,iBAAiB,EAAE,CAAC;QACtB,+BAA+B,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,iBAAiB,IAAI,sBAAsB,EAAE,CAAC;QAChD,oBAAoB,CAClB,MAAM,EACN,iBAAiB,IAAI,sBAAuB,EAC5C,MAAM,CAAC,OAAO,CACf,CAAC;IACJ,CAAC;IAED,6BAA6B;IAC7B,MAAM,OAAO,GAAsB;QACjC,MAAM;QACN,OAAO,EAAE,OAAO,IAAI,IAAI;QACxB,QAAQ,EAAE,QAAQ,IAAI,EAAE;QACxB,YAAY,EAAE;YACZ,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC;YAC5D,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,gBAAgB,CAAC;YACpE,gBAAgB;YAChB,YAAY,EAAE,CAAC,CAAC,CAAC,iBAAiB,IAAI,iBAAiB,CAAC;SACzD;QACD,mBAAmB,EAAE,GAAG,EAAE;YACxB,MAAM,GAAG,GAAG,QAAQ,EAAE,sBAAsB,EAAE,IAAI,IAAI,CAAC;YACvD,OAAO;gBACL,MAAM,EAAE,GAAG,KAAK,IAAI;gBACpB,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI;aACjD,CAAC;QACJ,CAAC;KACF,CAAC;IAEF,sCAAsC;IACtC,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAEpC,uCAAuC;IACvC,mBAAmB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAErC,0DAA0D;IAC1D,yBAAyB,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IAEzD,0EAA0E;IAC1E,qBAAqB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAEvC,2CAA2C;IAC3C,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE;QACrD,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAC3D,CAAC;QACD,MAAM,YAAY,CAAC,SAAS,EAAE,CAAC;QAC/B,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,MAAM;QACN,SAAS,EAAE,GAAG,EAAE;YACd,KAAK,GAAG,IAAI,CAAC;QACf,CAAC;QACD,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK;KACrB,CAAC;AACJ,CAAC"}

package/dist/src/server/build-info.d.ts

@@ -0,0 +1,8 @@
+export interface BuildInfo {
+    name: string;
+    version: string;
+    commit: string;
+    node: string;
+}
+export declare function getBuildInfo(): BuildInfo;
+//# sourceMappingURL=build-info.d.ts.map

package/dist/src/server/build-info.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-info.d.ts","sourceRoot":"","sources":["../../../src/server/build-info.ts"],"names":[],"mappings":"AAaA,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;CACd;AAID,wBAAgB,YAAY,IAAI,SAAS,CA+BxC"}

package/dist/src/server/build-info.js

@@ -0,0 +1,61 @@
+/**
+ * Build/version info surfaced via GET /version and the daemon boot log.
+ *
+ * Kept deliberately minimal: name + version read from package.json, commit
+ * read once from `RIFT_COMMIT` or a best-effort `git rev-parse HEAD`,
+ * plus the running Node version. No timestamps — reading mtime is racy and
+ * the commit already pins the build.
+ */
+import fs from "node:fs";
+import path from "node:path";
+import { execSync } from "node:child_process";
+import { fileURLToPath } from "node:url";
+let cached;
+export function getBuildInfo() {
+    if (cached)
+        return cached;
+    const here = path.dirname(fileURLToPath(import.meta.url));
+    // src/server/build-info.ts → up two levels to repo root in dev,
+    // dist/src/server/build-info.js → up three to repo root when built.
+    const candidates = [
+        path.resolve(here, "../../package.json"),
+        path.resolve(here, "../../../package.json"),
+    ];
+    let name = "rift";
+    let version = "0.0.0";
+    for (const candidate of candidates) {
+        try {
+            const pkg = JSON.parse(fs.readFileSync(candidate, "utf8"));
+            if (pkg.name)
+                name = pkg.name;
+            if (pkg.version)
+                version = pkg.version;
+            break;
+        }
+        catch {
+            // try next candidate
+        }
+    }
+    const commit = resolveCommit();
+    cached = { name, version, commit, node: process.version };
+    return cached;
+}
+function resolveCommit() {
+    const fromEnv = process.env["RIFT_COMMIT"];
+    if (fromEnv && fromEnv.trim())
+        return fromEnv.trim();
+    try {
+        const sha = execSync("git rev-parse HEAD", {
+            stdio: ["ignore", "pipe", "ignore"],
+        })
+            .toString()
+            .trim();
+        if (sha)
+            return sha;
+    }
+    catch {
+        // not in a git checkout, or git not installed
+    }
+    return "unknown";
+}
+//# sourceMappingURL=build-info.js.map

package/dist/src/server/build-info.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-info.js","sourceRoot":"","sources":["../../../src/server/build-info.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AASzC,IAAI,MAA6B,CAAC;AAElC,MAAM,UAAU,YAAY;IAC1B,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAE1B,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1D,gEAAgE;IAChE,oEAAoE;IACpE,MAAM,UAAU,GAAG;QACjB,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,oBAAoB,CAAC;QACxC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,uBAAuB,CAAC;KAC5C,CAAC;IAEF,IAAI,IAAI,GAAG,MAAM,CAAC;IAClB,IAAI,OAAO,GAAG,OAAO,CAAC;IACtB,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAGxD,CAAC;YACF,IAAI,GAAG,CAAC,IAAI;gBAAE,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;YAC9B,IAAI,GAAG,CAAC,OAAO;gBAAE,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;YACvC,MAAM;QACR,CAAC;QAAC,MAAM,CAAC;YACP,qBAAqB;QACvB,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;IAE/B,MAAM,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;IAC1D,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,aAAa;IACpB,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAC3C,IAAI,OAAO,IAAI,OAAO,CAAC,IAAI,EAAE;QAAE,OAAO,OAAO,CAAC,IAAI,EAAE,CAAC;IACrD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,QAAQ,CAAC,oBAAoB,EAAE;YACzC,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;SACpC,CAAC;aACC,QAAQ,EAAE;aACV,IAAI,EAAE,CAAC;QACV,IAAI,GAAG;YAAE,OAAO,GAAG,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,8CAA8C;IAChD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/src/server/lifecycle.d.ts

@@ -0,0 +1,30 @@
+import type { FastifyInstance } from "fastify";
+export interface ShutdownDeps {
+    exit: (code: number) => void;
+    stderr: (msg: string) => void;
+}
+/**
+ * Create a shutdown handler that closes the server, enforces a hard
+ * timeout, and calls `deps.exit` with the appropriate code.
+ *
+ * - close() resolves  → clearTimeout, exit(0)
+ * - close() rejects   → clearTimeout, exit(1)
+ * - close() hangs     → timeout fires, exit(1)
+ *
+ * The timer is NOT unref'd — it is the hard safety net.
+ *
+ * Exported for direct testing; production code uses `registerShutdownHandlers`.
+ */
+export declare function createShutdown(closeFn: () => Promise<void>, timeoutMs: number, deps: ShutdownDeps): (signal: string) => void;
+/**
+ * Register SIGTERM and SIGINT handlers for graceful shutdown.
+ *
+ * On signal: run optional pre-close hook (e.g., kill worker children),
+ * close the Fastify server (drains in-flight requests), then exit 0.
+ * If everything takes longer than `timeoutMs`, force-exit 1.
+ */
+export declare function registerShutdownHandlers(app: FastifyInstance, opts?: {
+    timeoutMs?: number;
+    onShutdown?: () => void | Promise<void>;
+}): void;
+//# sourceMappingURL=lifecycle.d.ts.map

package/dist/src/server/lifecycle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lifecycle.d.ts","sourceRoot":"","sources":["../../../src/server/lifecycle.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAE/C,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B,MAAM,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CAC/B;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,cAAc,CAC5B,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,EAC5B,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,YAAY,GACjB,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,CA0B1B;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CACtC,GAAG,EAAE,eAAe,EACpB,IAAI,CAAC,EAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,GACrE,IAAI,CAoBN"}

package/dist/src/server/lifecycle.js

@@ -0,0 +1,59 @@
+/**
+ * Create a shutdown handler that closes the server, enforces a hard
+ * timeout, and calls `deps.exit` with the appropriate code.
+ *
+ * - close() resolves  → clearTimeout, exit(0)
+ * - close() rejects   → clearTimeout, exit(1)
+ * - close() hangs     → timeout fires, exit(1)
+ *
+ * The timer is NOT unref'd — it is the hard safety net.
+ *
+ * Exported for direct testing; production code uses `registerShutdownHandlers`.
+ */
+export function createShutdown(closeFn, timeoutMs, deps) {
+    let shutting = false;
+    return (signal) => {
+        if (shutting)
+            return;
+        shutting = true;
+        deps.stderr(`Received ${signal}, shutting down...\n`);
+        const timer = setTimeout(() => {
+            deps.stderr("Shutdown timed out, forcing exit.\n");
+            deps.exit(1);
+        }, timeoutMs);
+        closeFn()
+            .then(() => {
+            clearTimeout(timer);
+            deps.exit(0);
+        })
+            .catch((err) => {
+            clearTimeout(timer);
+            deps.stderr(`Error during shutdown: ${err instanceof Error ? err.message : String(err)}\n`);
+            deps.exit(1);
+        });
+    };
+}
+/**
+ * Register SIGTERM and SIGINT handlers for graceful shutdown.
+ *
+ * On signal: run optional pre-close hook (e.g., kill worker children),
+ * close the Fastify server (drains in-flight requests), then exit 0.
+ * If everything takes longer than `timeoutMs`, force-exit 1.
+ */
+export function registerShutdownHandlers(app, opts) {
+    const timeoutMs = opts?.timeoutMs ?? 10_000;
+    const onShutdown = opts?.onShutdown;
+    const shutdown = createShutdown(async () => {
+        if (onShutdown)
+            await onShutdown();
+        await app.close();
+    }, timeoutMs, {
+        exit: (code) => process.exit(code),
+        stderr: (msg) => {
+            process.stderr.write(msg);
+        },
+    });
+    process.on("SIGTERM", () => shutdown("SIGTERM"));
+    process.on("SIGINT", () => shutdown("SIGINT"));
+}
+//# sourceMappingURL=lifecycle.js.map

package/dist/src/server/lifecycle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lifecycle.js","sourceRoot":"","sources":["../../../src/server/lifecycle.ts"],"names":[],"mappings":"AAOA;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,cAAc,CAC5B,OAA4B,EAC5B,SAAiB,EACjB,IAAkB;IAElB,IAAI,QAAQ,GAAG,KAAK,CAAC;IAErB,OAAO,CAAC,MAAc,EAAE,EAAE;QACxB,IAAI,QAAQ;YAAE,OAAO;QACrB,QAAQ,GAAG,IAAI,CAAC;QAChB,IAAI,CAAC,MAAM,CAAC,YAAY,MAAM,sBAAsB,CAAC,CAAC;QAEtD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,IAAI,CAAC,MAAM,CAAC,qCAAqC,CAAC,CAAC;YACnD,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACf,CAAC,EAAE,SAAS,CAAC,CAAC;QAEd,OAAO,EAAE;aACN,IAAI,CAAC,GAAG,EAAE;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACf,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;YACtB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,CAAC,MAAM,CACT,0BAA0B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAC/E,CAAC;YACF,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACf,CAAC,CAAC,CAAC;IACP,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CACtC,GAAoB,EACpB,IAAsE;IAEtE,MAAM,SAAS,GAAG,IAAI,EAAE,SAAS,IAAI,MAAM,CAAC;IAC5C,MAAM,UAAU,GAAG,IAAI,EAAE,UAAU,CAAC;IAEpC,MAAM,QAAQ,GAAG,cAAc,CAC7B,KAAK,IAAI,EAAE;QACT,IAAI,UAAU;YAAE,MAAM,UAAU,EAAE,CAAC;QACnC,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;IACpB,CAAC,EACD,SAAS,EACT;QACE,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;QAClC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE;YACd,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC5B,CAAC;KACF,CACF,CAAC;IAEF,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;IACjD,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;AACjD,CAAC"}

package/dist/src/server/middleware/multipart.d.ts

@@ -0,0 +1,51 @@
+/**
+ * Multipart upload middleware — Slice 12.
+ *
+ * Registers @fastify/multipart on the Fastify instance with a file
+ * size limit derived from config (default 100 MB per PRD Section 3.4).
+ *
+ * Provides `consumeMultipartFile()` — the ONLY sanctioned way to read
+ * an uploaded file.  It drains the stream, detects truncation, and
+ * throws a Fastify error that maps to 413 Payload Too Large.  Route
+ * handlers never inspect `file.truncated` themselves.
+ */
+import type { FastifyInstance, FastifyRequest } from "fastify";
+import type { Config } from "../../config/schema.js";
+export interface UploadedFile {
+    filename: string;
+    mimetype: string;
+    data: Buffer;
+}
+export declare function registerMultipart(server: FastifyInstance, config: Config): Promise<void>;
+/**
+ * Central multipart file consumer.
+ *
+ * Every route that accepts a file upload MUST call this function
+ * instead of accessing `request.file()` directly.  It enforces the
+ * size limit centrally so individual routes cannot forget.
+ *
+ * @throws Fastify error with statusCode 413 when the file is truncated
+ * @throws Fastify error with statusCode 400 when no file is present
+ */
+export interface UploadedFileWithFields {
+    file: UploadedFile;
+    fields: Record<string, string>;
+}
+/**
+ * Central multipart consumer that returns both the file and form fields.
+ *
+ * Used by routes that accept a file plus metadata fields (e.g. POST /ingest).
+ */
+export declare function consumeMultipartUpload(request: FastifyRequest, limitBytes: number): Promise<UploadedFileWithFields>;
+/**
+ * Central multipart file consumer.
+ *
+ * Every route that accepts a file upload MUST call this function
+ * instead of accessing `request.file()` directly.  It enforces the
+ * size limit centrally so individual routes cannot forget.
+ *
+ * @throws Fastify error with statusCode 413 when the file is truncated
+ * @throws Fastify error with statusCode 400 when no file is present
+ */
+export declare function consumeMultipartFile(request: FastifyRequest, limitBytes: number): Promise<UploadedFile>;
+//# sourceMappingURL=multipart.d.ts.map

package/dist/src/server/middleware/multipart.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"multipart.d.ts","sourceRoot":"","sources":["../../../../src/server/middleware/multipart.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAE/D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAErD,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,eAAe,EACvB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,IAAI,CAAC,CAUf;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,YAAY,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAChC;AAED;;;;GAIG;AACH,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,cAAc,EACvB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,sBAAsB,CAAC,CA4CjC;AAED;;;;;;;;;GASG;AACH,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,cAAc,EACvB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,YAAY,CAAC,CA0BvB"}