@hiliosai/sdk 0.1.16 → 0.1.17

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-import { Context, ServiceBroker, ServiceSchema as ServiceSchema$1, ServiceSettingSchema, Service, BrokerOptions, ActionSchema, ServiceEvents, ServiceMethods, ServiceHooks, Middleware } from 'moleculer';
+import { Context, ServiceBroker, ServiceSchema as ServiceSchema$1, ServiceSettingSchema, Service, ActionSchema, ServiceEvents, ServiceMethods, ServiceHooks, Middleware, BrokerOptions } from 'moleculer';
 import env from '@ltv/env';
 export { default as env } from '@ltv/env';
 
@@ -466,8 +466,6 @@ declare const PERMISSIONS: {
 };
 declare const ROLE_PERMISSIONS: Record<string, string[]>;
 
-declare const configs: BrokerOptions;
-
 declare enum IntegrationPlatform {
     WHATSAPP = "whatsapp",
     TELEGRAM = "telegram",
@@ -860,6 +858,8 @@ declare function defineService<TSettings = unknown, TDatasourceConstructors exte
 
 declare function defineIntegration<TSettings = unknown, TDatasourceConstructors extends DatasourceConstructorRegistry = DatasourceConstructorRegistry>(config: IntegrationServiceConfig<TSettings, TDatasourceConstructors>): IntegrationServiceSchema<TSettings>;
 
+declare const configs: BrokerOptions;
+
 declare const nodeEnv: string;
 declare const isDev: boolean;
 declare const isTest: boolean;

package/dist/index.js

@@ -1,8 +1,8 @@
-import env3 from '@ltv/env';
+import env4 from '@ltv/env';
 import http from 'http';
+import crypto from 'crypto';
 import os from 'os';
 import { Middleware } from '@moleculer/channels';
-import crypto from 'crypto';
 
 // src/middlewares/datasource.middleware.ts
 function initializeDatasources(constructorRegistry) {
@@ -52,12 +52,12 @@ function MemoizeMixin(options) {
     }
   };
 }
-var HEALTH_CHECK_PORT = env3.int("HEALTH_CHECK_PORT", 3301);
-var HEALTH_CHECK_READINESS_PATH = env3.string(
+var HEALTH_CHECK_PORT = env4.int("HEALTH_CHECK_PORT", 3301);
+var HEALTH_CHECK_READINESS_PATH = env4.string(
   "HEALTH_CHECK_READINESS_PATH",
   "/readyz"
 );
-var HEALTH_CHECK_LIVENESS_PATH = env3.string(
+var HEALTH_CHECK_LIVENESS_PATH = env4.string(
   "HEALTH_CHECK_LIVENESS_PATH",
   "/livez"
 );
@@ -244,6 +244,12 @@ var ROLE_PERMISSIONS = {
     PERMISSIONS["config.read"]
   ]
 };
+var nodeEnv = env4.string("NODE_ENV", "development");
+var isDev = nodeEnv === "development";
+var isTest = nodeEnv === "test";
+var isProd = nodeEnv === "production";
+var REDIS_URL = env4.string("REDIS_URL");
+var env_default = env4;
 
 // src/errors/permission.error.ts
 var PermissionError = class _PermissionError extends Error {
@@ -285,6 +291,98 @@ var TenantError = class _TenantError extends Error {
   }
 };
 
+// src/middlewares/permissions.middleware.ts
+var permissionHandlers = {
+  [PERMISSIONS.AUTHENTICATED]: async (ctx) => !!ctx.meta.user?.id,
+  [PERMISSIONS.TENANT_OWNER]: async (ctx) => ctx.meta.user?.roles.includes(PERMISSIONS.OWNER) ?? false,
+  [PERMISSIONS.TENANT_MEMBER]: async (ctx) => !!(ctx.meta.user?.tenantId && ctx.meta.tenantId && ctx.meta.user.tenantId === ctx.meta.tenantId)
+};
+var PermissionsMiddleware = {
+  // Wrap local action handlers
+  localAction(handler, action) {
+    if (!action.permissions) {
+      return handler;
+    }
+    const permissions = Array.isArray(action.permissions) ? action.permissions : [action.permissions];
+    const permissionNames = [];
+    const permissionFunctions = [];
+    permissions.forEach((permission) => {
+      if (typeof permission === "function") {
+        permissionFunctions.push(permission);
+        return;
+      }
+      if (typeof permission === "string") {
+        if (permission in permissionHandlers) {
+          const handler2 = permissionHandlers[permission];
+          permissionFunctions.push(handler2);
+          return;
+        }
+        permissionNames.push(permission);
+        return;
+      }
+    });
+    return async function CheckPermissionsMiddleware(ctx) {
+      let hasAccess = false;
+      if (ctx.meta.user?.roles.includes(PERMISSIONS.OWNER)) {
+        hasAccess = true;
+      }
+      if (!hasAccess && permissionFunctions.length > 0) {
+        const results = await Promise.allSettled(
+          permissionFunctions.map((fn) => fn(ctx, action))
+        );
+        hasAccess = results.some(
+          (result) => result.status === "fulfilled" && !!result.value
+        );
+        const failures = results.filter((r) => r.status === "rejected");
+        if (failures.length > 0) {
+          ctx.broker.logger.warn(
+            `${failures.length} permission functions failed`,
+            {
+              action: action.name,
+              userId: ctx.meta.user?.id
+            }
+          );
+        }
+      }
+      if (!hasAccess && permissionNames.length > 0) {
+        const userRoles = ctx.meta.user?.roles ?? [];
+        hasAccess = userRoles.some((role) => {
+          const rolePermissions = ROLE_PERMISSIONS[role] ?? [];
+          return permissionNames.some(
+            (permName) => rolePermissions.includes(permName)
+          );
+        });
+      }
+      if (!hasAccess) {
+        const user = ctx.meta.user;
+        ctx.broker.logger.warn("Access denied:", {
+          action: action.name,
+          userId: user?.id,
+          userRoles: user?.roles,
+          tenantId: ctx.meta.tenantId,
+          requiredPermissions: permissions
+        });
+        const errorDetails = isDev ? {
+          action: action.name,
+          requiredPermissions: permissions.map(
+            (p) => typeof p === "function" ? "[Function]" : String(p)
+          ),
+          userRoles: user?.roles ?? [],
+          userId: user?.id,
+          tenantId: ctx.meta.tenantId
+        } : {
+          action: action.name
+        };
+        throw new PermissionError(
+          "You do not have permission to perform this action",
+          errorDetails
+        );
+      }
+      return handler.call(this, ctx);
+    };
+  }
+};
+
 // src/utils/context-cache.ts
 var ContextCache = class _ContextCache {
   constructor() {
@@ -489,16 +587,91 @@ var ContextHelpersMiddleware = {
   }
 };
 
-// src/configs/moleculer/bulkhead.ts
-var bulkheadConfig = {
-  // Enable feature.
-  enabled: false,
-  // Maximum concurrent executions.
-  concurrency: 10,
-  // Maximum size of queue
-  maxQueueSize: 100
-};
-var NAMESPACE = env3.string("NAMESPACE", "hios").toLowerCase();
+// src/mixins/datasource.mixin.ts
+function DatasourceMixin(datasourceConstructors = {}) {
+  const datasourceInstances = {};
+  for (const [key, DatasourceClass] of Object.entries(datasourceConstructors)) {
+    datasourceInstances[key] = new DatasourceClass();
+  }
+  return {
+    /**
+     * Service created lifecycle hook
+     * Initialize datasources and store on service
+     */
+    async created() {
+      for (const [, datasource] of Object.entries(datasourceInstances)) {
+        datasource.broker = this.broker;
+      }
+      for (const [, datasource] of Object.entries(datasourceInstances)) {
+        if (typeof datasource.init === "function") {
+          await datasource.init();
+        }
+      }
+      this.$datasources = datasourceInstances;
+    },
+    /**
+     * Service started lifecycle hook
+     * Connect datasources that have connect method
+     */
+    async started() {
+      for (const [, datasource] of Object.entries(datasourceInstances)) {
+        if (typeof datasource.connect === "function") {
+          await datasource.connect();
+        }
+      }
+    },
+    /**
+     * Service stopped lifecycle hook
+     * Disconnect datasources that have disconnect method
+     */
+    async stopped() {
+      for (const [, datasource] of Object.entries(datasourceInstances)) {
+        if (typeof datasource.disconnect === "function") {
+          await datasource.disconnect();
+        }
+      }
+    },
+    /**
+     * Hooks to inject datasources into context
+     */
+    hooks: {
+      before: {
+        "*": function injectDatasources(ctx) {
+          const datasources = this.$datasources ?? {};
+          for (const [, datasource] of Object.entries(datasources)) {
+            datasource.context = ctx;
+          }
+          ctx.datasources = datasources;
+        }
+      }
+    }
+  };
+}
+
+// src/utils/index.ts
+function omit(obj, keys) {
+  const result = { ...obj };
+  keys.forEach((key) => delete result[key]);
+  return result;
+}
+
+// src/service/define-service.ts
+function defineService(config) {
+  const propsToOmit = ["datasources"];
+  const serviceSchema = omit(
+    config,
+    propsToOmit
+  );
+  return {
+    ...serviceSchema,
+    mixins: [
+      DatasourceMixin(config.datasources),
+      MemoizeMixin(),
+      ...serviceSchema.mixins ?? []
+    ]
+  };
+}
+var NAMESPACE = env4.string("NAMESPACE", "hios").toLowerCase();
 var CHANNELS = {
   // Webhook processing channels
   WEBHOOK: {
@@ -589,437 +762,7 @@ var SUBJECTS = {
   // All DLQ subjects
   DLQ_ALL: `${NAMESPACE}.dlq.>`};
 
-// src/configs/moleculer/channels.ts
-var NAMESPACE2 = NAMESPACE.toUpperCase();
-var middleware = Middleware({
-  adapter: {
-    type: "NATS",
-    options: {
-      nats: {
-        url: env3.string("NATS_URL", "nats://localhost:4222"),
-        /** Connection options for reliability */
-        connectionOptions: {
-          name: "hios",
-          timeout: 1e4,
-          reconnect: true,
-          maxReconnectAttempts: 10,
-          reconnectTimeWait: 2e3,
-          maxReconnectTimeWait: 3e4,
-          pingInterval: 2e4,
-          maxPingOut: 2
-        },
-        /**
-         * Stream configuration for multi-tenant messaging
-         *
-         * Environment variables for production:
-         * - NATS_MAX_MESSAGES: Default 100K (dev) -> 10M+ (prod)
-         * - NATS_MAX_BYTES_GB: Default 1GB (dev) -> 100GB+ (prod)
-         * - NATS_MAX_AGE_DAYS: Default 7 (dev) -> 30+ (prod)
-         * - NATS_MAX_MSG_SIZE_MB: Default 1MB (dev) -> 5MB (prod)
-         * - NATS_REPLICAS: Default 1 (dev) -> 3 (prod)
-         */
-        streamConfig: {
-          name: `${NAMESPACE2}_MESSAGES`,
-          subjects: [
-            SUBJECTS.WEBHOOK_ALL,
-            SUBJECTS.PROCESSING_ALL,
-            SUBJECTS.RESPONSE_ALL,
-            SUBJECTS.SYSTEM_ALL,
-            SUBJECTS.DLQ_ALL
-          ],
-          retention: "limits",
-          max_msgs: env3.int("NATS_MAX_MESSAGES", 1e5),
-          // 100K for dev, 10M+ for prod
-          max_bytes: env3.int("NATS_MAX_BYTES_GB", 1) * 1024 * 1024 * 1024,
-          // 1GB for dev, 100GB+ for prod
-          max_age: env3.int("NATS_MAX_AGE_DAYS", 7) * 24 * 60 * 60 * 1e9,
-          // 7 days dev, 30+ days prod
-          max_msg_size: env3.int("NATS_MAX_MSG_SIZE_MB", 1) * 1024 * 1024,
-          // 1MB dev, 5MB prod
-          storage: "file",
-          // Persistent storage
-          num_replicas: env3.int("NATS_REPLICAS", 1),
-          // 1 for dev, 3 for prod
-          discard: "old",
-          // Remove old messages when limits hit
-          duplicate_window: 2 * 60 * 1e9
-          // 2 minutes dedup window
-        },
-        /** Consumer options optimized for LLM processing */
-        consumerOptions: {
-          config: {
-            // Start with new messages (don't replay old ones on restart)
-            deliver_policy: "new",
-            // Explicit acknowledgment required (critical for LLM processing)
-            ack_policy: "explicit",
-            // Allow 5 unacknowledged messages per consumer (rate limiting)
-            max_ack_pending: 5,
-            // Acknowledgment timeout for LLM processing (2 minutes)
-            ack_wait: 120 * 1e9,
-            // 2 minutes in nanoseconds
-            // Maximum delivery attempts before dead letter
-            max_deliver: 3,
-            // Backoff for failed message retries
-            backoff: [
-              1e9,
-              // 1 second
-              5e9,
-              // 5 seconds
-              3e10
-              // 30 seconds
-            ]
-          }
-        }
-      },
-      /** Application-level flow control */
-      maxInFlight: 5,
-      // Limit concurrent LLM requests per service
-      maxRetries: 2,
-      // App-level retries (NATS handles delivery retries)
-      /** Dead letter queue for failed messages */
-      deadLettering: {
-        enabled: true,
-        queueName: "FAILED_MESSAGES"
-        // Send to dead letter after NATS max_deliver attempts
-      }
-    }
-  }
-});
-var ChannelsMiddleware = {
-  ...middleware
-};
-
-// src/configs/moleculer/circuit-breaker.ts
-var circuitBreakerConfig = {
-  // Enable feature
-  enabled: false,
-  // Threshold value. 0.5 means that 50% should be failed for tripping.
-  threshold: 0.5,
-  // Minimum request count. Below it, CB does not trip.
-  minRequestCount: 20,
-  // Number of seconds for time window.
-  windowTime: 60,
-  // Number of milliseconds to switch from open to half-open state
-  halfOpenTime: 10 * 1e3,
-  // A function to check failed requests.
-  check: (err) => err.code >= 500
-};
-
-// src/configs/moleculer/logger.ts
-var loggerConfig = {
-  type: "Console",
-  options: {
-    // Using colors on the output
-    colors: true,
-    // Print module names with different colors (like docker-compose for containers)
-    moduleColors: false,
-    // Line formatter. It can be "json", "short", "simple", "full", a `Function` or a template string like "{timestamp} {level} {nodeID}/{mod}: {msg}"
-    formatter: "full",
-    // Custom object printer. If not defined, it uses the `util.inspect` method.
-    objectPrinter: null,
-    // Auto-padding the module name in order to messages begin at the same column.
-    autoPadding: false
-  }
-};
-var logger_default = loggerConfig;
-
-// src/configs/moleculer/metrics.ts
-var metricsConfig = {
-  enabled: false,
-  // Available built-in reporters: "Console", "CSV", "Event", "Prometheus", "Datadog", "StatsD"
-  reporter: {
-    type: "Prometheus",
-    options: {
-      // HTTP port
-      port: 3030,
-      // HTTP URL path
-      path: "/metrics",
-      // Default labels which are appended to all metrics labels
-      defaultLabels: (registry) => ({
-        namespace: registry.broker.namespace,
-        nodeID: registry.broker.nodeID
-      })
-    }
-  }
-};
-
-// src/configs/moleculer/registry.ts
-var registryConfig = {
-  // Define balancing strategy. More info: https://moleculer.services/docs/0.14/balancing.html
-  // Available values: "RoundRobin", "Random", "CpuUsage", "Latency", "Shard"
-  strategy: "RoundRobin",
-  // Enable local action call preferring. Always call the local action instance if available.
-  preferLocal: true
-};
-
-// src/configs/moleculer/retry-policy.ts
-var retryPolicyConfig = {
-  // Enable feature
-  enabled: false,
-  // Count of retries
-  retries: 5,
-  // First delay in milliseconds.
-  delay: 100,
-  // Maximum delay in milliseconds.
-  maxDelay: 1e3,
-  // Backoff factor for delay. 2 means exponential backoff.
-  factor: 2,
-  // A function to check failed requests.
-  check: (err) => !!err.retryable
-};
-
-// src/configs/moleculer/tracing.ts
-var tracingConfig = {
-  enabled: true,
-  exporter: "Console",
-  events: true,
-  stackTrace: true
-};
-
-// src/configs/moleculer/tracking.ts
-var trackingConfig = {
-  // Enable feature
-  enabled: false,
-  // Number of milliseconds to wait before shuting down the process.
-  shutdownTimeout: 5e3
-};
-
-// src/configs/moleculer/index.ts
-var pkgNm = env3.string("NAMESPACE", "hios");
-var nodeID = env3.string("NODE_ID") ?? `${pkgNm}-${os.hostname()}-${process.pid}`;
-var configs = {
-  namespace: pkgNm,
-  nodeID,
-  metadata: {},
-  logger: logger_default,
-  // Default log level for built-in console logger. It can be overwritten in logger options above.
-  // Available values: trace, debug, info, warn, error, fatal
-  logLevel: "info",
-  cacher: env3.string("REDIS_URL", "Memory"),
-  // Define a serializer.
-  // Available values: "JSON", "Avro", "ProtoBuf", "MsgPack", "Notepack", "Thrift".
-  // More info: https://moleculer.services/docs/0.14/networking.html#Serialization
-  serializer: "JSON",
-  // Number of milliseconds to wait before reject a request with a RequestTimeout error. Disabled: 0
-  requestTimeout: 10 * 1e3,
-  // Retry policy settings. More info: https://moleculer.services/docs/0.14/fault-tolerance.html#Retry
-  retryPolicy: retryPolicyConfig,
-  // Limit of calling level. If it reaches the limit, broker will throw an MaxCallLevelError error. (Infinite loop protection)
-  maxCallLevel: 100,
-  // Number of seconds to send heartbeat packet to other nodes.
-  heartbeatInterval: 10,
-  // Number of seconds to wait before setting node to unavailable status.
-  heartbeatTimeout: 30,
-  // Cloning the params of context if enabled. High performance impact, use it with caution!
-  contextParamsCloning: false,
-  // Tracking requests and waiting for running requests before shuting down. More info: https://moleculer.services/docs/0.14/context.html#Context-tracking
-  tracking: trackingConfig,
-  // Disable built-in request & emit balancer. (Transporter must support it, as well.). More info: https://moleculer.services/docs/0.14/networking.html#Disabled-balancer
-  disableBalancer: false,
-  // Settings of Service Registry. More info: https://moleculer.services/docs/0.14/registry.html
-  registry: registryConfig,
-  // Settings of Circuit Breaker. More info: https://moleculer.services/docs/0.14/fault-tolerance.html#Circuit-Breaker
-  circuitBreaker: circuitBreakerConfig,
-  // Settings of bulkhead feature. More info: https://moleculer.services/docs/0.14/fault-tolerance.html#Bulkhead
-  bulkhead: bulkheadConfig,
-  // Enable action & event parameter validation. More info: https://moleculer.services/docs/0.14/validating.html
-  validator: "Fastest",
-  // errorHandler: null,
-  transporter: env3.string("TRANSPORTER_URL"),
-  // Enable/disable built-in metrics function. More info: https://moleculer.services/docs/0.14/metrics.html
-  metrics: metricsConfig,
-  // Enable built-in tracing function. More info: https://moleculer.services/docs/0.14/tracing.html
-  tracing: tracingConfig,
-  middlewares: [
-    ChannelsMiddleware,
-    PermissionsMiddleware,
-    ContextHelpersMiddleware
-  ]
-};
-var moleculer_default = configs;
-var nodeEnv = env3.string("NODE_ENV", "development");
-var isDev = nodeEnv === "development";
-var isTest = nodeEnv === "test";
-var isProd = nodeEnv === "production";
-var REDIS_URL = env3.string("REDIS_URL");
-var env_default = env3;
-
-// src/middlewares/permissions.middleware.ts
-var permissionHandlers = {
-  [PERMISSIONS.AUTHENTICATED]: async (ctx) => !!ctx.meta.user?.id,
-  [PERMISSIONS.TENANT_OWNER]: async (ctx) => ctx.meta.user?.roles.includes(PERMISSIONS.OWNER) ?? false,
-  [PERMISSIONS.TENANT_MEMBER]: async (ctx) => !!(ctx.meta.user?.tenantId && ctx.meta.tenantId && ctx.meta.user.tenantId === ctx.meta.tenantId)
-};
-var PermissionsMiddleware = {
-  // Wrap local action handlers
-  localAction(handler, action) {
-    if (!action.permissions) {
-      return handler;
-    }
-    const permissions = Array.isArray(action.permissions) ? action.permissions : [action.permissions];
-    const permissionNames = [];
-    const permissionFunctions = [];
-    permissions.forEach((permission) => {
-      if (typeof permission === "function") {
-        permissionFunctions.push(permission);
-        return;
-      }
-      if (typeof permission === "string") {
-        if (permission in permissionHandlers) {
-          const handler2 = permissionHandlers[permission];
-          permissionFunctions.push(handler2);
-          return;
-        }
-        permissionNames.push(permission);
-        return;
-      }
-    });
-    return async function CheckPermissionsMiddleware(ctx) {
-      let hasAccess = false;
-      if (ctx.meta.user?.roles.includes(PERMISSIONS.OWNER)) {
-        hasAccess = true;
-      }
-      if (!hasAccess && permissionFunctions.length > 0) {
-        const results = await Promise.allSettled(
-          permissionFunctions.map((fn) => fn(ctx, action))
-        );
-        hasAccess = results.some(
-          (result) => result.status === "fulfilled" && !!result.value
-        );
-        const failures = results.filter((r) => r.status === "rejected");
-        if (failures.length > 0) {
-          ctx.broker.logger.warn(
-            `${failures.length} permission functions failed`,
-            {
-              action: action.name,
-              userId: ctx.meta.user?.id
-            }
-          );
-        }
-      }
-      if (!hasAccess && permissionNames.length > 0) {
-        const userRoles = ctx.meta.user?.roles ?? [];
-        hasAccess = userRoles.some((role) => {
-          const rolePermissions = ROLE_PERMISSIONS[role] ?? [];
-          return permissionNames.some(
-            (permName) => rolePermissions.includes(permName)
-          );
-        });
-      }
-      if (!hasAccess) {
-        const user = ctx.meta.user;
-        ctx.broker.logger.warn("Access denied:", {
-          action: action.name,
-          userId: user?.id,
-          userRoles: user?.roles,
-          tenantId: ctx.meta.tenantId,
-          requiredPermissions: permissions
-        });
-        const errorDetails = isDev ? {
-          action: action.name,
-          requiredPermissions: permissions.map(
-            (p) => typeof p === "function" ? "[Function]" : String(p)
-          ),
-          userRoles: user?.roles ?? [],
-          userId: user?.id,
-          tenantId: ctx.meta.tenantId
-        } : {
-          action: action.name
-        };
-        throw new PermissionError(
-          "You do not have permission to perform this action",
-          errorDetails
-        );
-      }
-      return handler.call(this, ctx);
-    };
-  }
-};
-
-// src/mixins/datasource.mixin.ts
-function DatasourceMixin(datasourceConstructors = {}) {
-  const datasourceInstances = {};
-  for (const [key, DatasourceClass] of Object.entries(datasourceConstructors)) {
-    datasourceInstances[key] = new DatasourceClass();
-  }
-  return {
-    /**
-     * Service created lifecycle hook
-     * Initialize datasources and store on service
-     */
-    async created() {
-      for (const [, datasource] of Object.entries(datasourceInstances)) {
-        datasource.broker = this.broker;
-      }
-      for (const [, datasource] of Object.entries(datasourceInstances)) {
-        if (typeof datasource.init === "function") {
-          await datasource.init();
-        }
-      }
-      this.$datasources = datasourceInstances;
-    },
-    /**
-     * Service started lifecycle hook
-     * Connect datasources that have connect method
-     */
-    async started() {
-      for (const [, datasource] of Object.entries(datasourceInstances)) {
-        if (typeof datasource.connect === "function") {
-          await datasource.connect();
-        }
-      }
-    },
-    /**
-     * Service stopped lifecycle hook
-     * Disconnect datasources that have disconnect method
-     */
-    async stopped() {
-      for (const [, datasource] of Object.entries(datasourceInstances)) {
-        if (typeof datasource.disconnect === "function") {
-          await datasource.disconnect();
-        }
-      }
-    },
-    /**
-     * Hooks to inject datasources into context
-     */
-    hooks: {
-      before: {
-        "*": function injectDatasources(ctx) {
-          const datasources = this.$datasources ?? {};
-          for (const [, datasource] of Object.entries(datasources)) {
-            datasource.context = ctx;
-          }
-          ctx.datasources = datasources;
-        }
-      }
-    }
-  };
-}
-
-// src/utils/index.ts
-function omit(obj, keys) {
-  const result = { ...obj };
-  keys.forEach((key) => delete result[key]);
-  return result;
-}
-
-// src/service/define-service.ts
-function defineService(config) {
-  const propsToOmit = ["datasources"];
-  const serviceSchema = omit(
-    config,
-    propsToOmit
-  );
-  return {
-    ...serviceSchema,
-    mixins: [
-      DatasourceMixin(config.datasources),
-      MemoizeMixin(),
-      ...serviceSchema.mixins ?? []
-    ]
-  };
-}
+// src/service/define-integration.ts
 var SecurityHelpers = {
   /**
    * Secure comparison using Node.js crypto.timingSafeEqual
@@ -1373,6 +1116,263 @@ var UserRole = {
   VIEWER: "VIEWER"
 };
 
+// src/configs/moleculer/bulkhead.ts
+var bulkheadConfig = {
+  // Enable feature.
+  enabled: false,
+  // Maximum concurrent executions.
+  concurrency: 10,
+  // Maximum size of queue
+  maxQueueSize: 100
+};
+var NAMESPACE2 = NAMESPACE.toUpperCase();
+var middleware = Middleware({
+  adapter: {
+    type: "NATS",
+    options: {
+      nats: {
+        url: env4.string("NATS_URL", "nats://localhost:4222"),
+        /** Connection options for reliability */
+        connectionOptions: {
+          name: "hios",
+          timeout: 1e4,
+          reconnect: true,
+          maxReconnectAttempts: 10,
+          reconnectTimeWait: 2e3,
+          maxReconnectTimeWait: 3e4,
+          pingInterval: 2e4,
+          maxPingOut: 2
+        },
+        /**
+         * Stream configuration for multi-tenant messaging
+         *
+         * Environment variables for production:
+         * - NATS_MAX_MESSAGES: Default 100K (dev) -> 10M+ (prod)
+         * - NATS_MAX_BYTES_GB: Default 1GB (dev) -> 100GB+ (prod)
+         * - NATS_MAX_AGE_DAYS: Default 7 (dev) -> 30+ (prod)
+         * - NATS_MAX_MSG_SIZE_MB: Default 1MB (dev) -> 5MB (prod)
+         * - NATS_REPLICAS: Default 1 (dev) -> 3 (prod)
+         */
+        streamConfig: {
+          name: `${NAMESPACE2}_MESSAGES`,
+          subjects: [
+            SUBJECTS.WEBHOOK_ALL,
+            SUBJECTS.PROCESSING_ALL,
+            SUBJECTS.RESPONSE_ALL,
+            SUBJECTS.SYSTEM_ALL,
+            SUBJECTS.DLQ_ALL
+          ],
+          retention: "limits",
+          max_msgs: env4.int("NATS_MAX_MESSAGES", 1e5),
+          // 100K for dev, 10M+ for prod
+          max_bytes: env4.int("NATS_MAX_BYTES_GB", 1) * 1024 * 1024 * 1024,
+          // 1GB for dev, 100GB+ for prod
+          max_age: env4.int("NATS_MAX_AGE_DAYS", 7) * 24 * 60 * 60 * 1e9,
+          // 7 days dev, 30+ days prod
+          max_msg_size: env4.int("NATS_MAX_MSG_SIZE_MB", 1) * 1024 * 1024,
+          // 1MB dev, 5MB prod
+          storage: "file",
+          // Persistent storage
+          num_replicas: env4.int("NATS_REPLICAS", 1),
+          // 1 for dev, 3 for prod
+          discard: "old",
+          // Remove old messages when limits hit
+          duplicate_window: 2 * 60 * 1e9
+          // 2 minutes dedup window
+        },
+        /** Consumer options optimized for LLM processing */
+        consumerOptions: {
+          config: {
+            // Start with new messages (don't replay old ones on restart)
+            deliver_policy: "new",
+            // Explicit acknowledgment required (critical for LLM processing)
+            ack_policy: "explicit",
+            // Allow 5 unacknowledged messages per consumer (rate limiting)
+            max_ack_pending: 5,
+            // Acknowledgment timeout for LLM processing (2 minutes)
+            ack_wait: 120 * 1e9,
+            // 2 minutes in nanoseconds
+            // Maximum delivery attempts before dead letter
+            max_deliver: 3,
+            // Backoff for failed message retries
+            backoff: [
+              1e9,
+              // 1 second
+              5e9,
+              // 5 seconds
+              3e10
+              // 30 seconds
+            ]
+          }
+        }
+      },
+      /** Application-level flow control */
+      maxInFlight: 5,
+      // Limit concurrent LLM requests per service
+      maxRetries: 2,
+      // App-level retries (NATS handles delivery retries)
+      /** Dead letter queue for failed messages */
+      deadLettering: {
+        enabled: true,
+        queueName: "FAILED_MESSAGES"
+        // Send to dead letter after NATS max_deliver attempts
+      }
+    }
+  }
+});
+var ChannelsMiddleware = {
+  ...middleware
+};
+
+// src/configs/moleculer/circuit-breaker.ts
+var circuitBreakerConfig = {
+  // Enable feature
+  enabled: false,
+  // Threshold value. 0.5 means that 50% should be failed for tripping.
+  threshold: 0.5,
+  // Minimum request count. Below it, CB does not trip.
+  minRequestCount: 20,
+  // Number of seconds for time window.
+  windowTime: 60,
+  // Number of milliseconds to switch from open to half-open state
+  halfOpenTime: 10 * 1e3,
+  // A function to check failed requests.
+  check: (err) => err.code >= 500
+};
+
+// src/configs/moleculer/logger.ts
+var loggerConfig = {
+  type: "Console",
+  options: {
+    // Using colors on the output
+    colors: true,
+    // Print module names with different colors (like docker-compose for containers)
+    moduleColors: false,
+    // Line formatter. It can be "json", "short", "simple", "full", a `Function` or a template string like "{timestamp} {level} {nodeID}/{mod}: {msg}"
+    formatter: "full",
+    // Custom object printer. If not defined, it uses the `util.inspect` method.
+    objectPrinter: null,
+    // Auto-padding the module name in order to messages begin at the same column.
+    autoPadding: false
+  }
+};
+var logger_default = loggerConfig;
+
+// src/configs/moleculer/metrics.ts
+var metricsConfig = {
+  enabled: false,
+  // Available built-in reporters: "Console", "CSV", "Event", "Prometheus", "Datadog", "StatsD"
+  reporter: {
+    type: "Prometheus",
+    options: {
+      // HTTP port
+      port: 3030,
+      // HTTP URL path
+      path: "/metrics",
+      // Default labels which are appended to all metrics labels
+      defaultLabels: (registry) => ({
+        namespace: registry.broker.namespace,
+        nodeID: registry.broker.nodeID
+      })
+    }
+  }
+};
+
+// src/configs/moleculer/registry.ts
+var registryConfig = {
+  // Define balancing strategy. More info: https://moleculer.services/docs/0.14/balancing.html
+  // Available values: "RoundRobin", "Random", "CpuUsage", "Latency", "Shard"
+  strategy: "RoundRobin",
+  // Enable local action call preferring. Always call the local action instance if available.
+  preferLocal: true
+};
+
+// src/configs/moleculer/retry-policy.ts
+var retryPolicyConfig = {
+  // Enable feature
+  enabled: false,
+  // Count of retries
+  retries: 5,
+  // First delay in milliseconds.
+  delay: 100,
+  // Maximum delay in milliseconds.
+  maxDelay: 1e3,
+  // Backoff factor for delay. 2 means exponential backoff.
+  factor: 2,
+  // A function to check failed requests.
+  check: (err) => !!err.retryable
+};
+
+// src/configs/moleculer/tracing.ts
+var tracingConfig = {
+  enabled: true,
+  exporter: "Console",
+  events: true,
+  stackTrace: true
+};
+
+// src/configs/moleculer/tracking.ts
+var trackingConfig = {
+  // Enable feature
+  enabled: false,
+  // Number of milliseconds to wait before shuting down the process.
+  shutdownTimeout: 5e3
+};
+
+// src/configs/moleculer/index.ts
+var pkgNm = env4.string("NAMESPACE", "hios");
+var nodeID = env4.string("NODE_ID") ?? `${pkgNm}-${os.hostname()}-${process.pid}`;
+var configs = {
+  namespace: pkgNm,
+  nodeID,
+  metadata: {},
+  logger: logger_default,
+  // Default log level for built-in console logger. It can be overwritten in logger options above.
+  // Available values: trace, debug, info, warn, error, fatal
+  logLevel: "info",
+  cacher: env4.string("REDIS_URL", "Memory"),
+  // Define a serializer.
+  // Available values: "JSON", "Avro", "ProtoBuf", "MsgPack", "Notepack", "Thrift".
+  // More info: https://moleculer.services/docs/0.14/networking.html#Serialization
+  serializer: "JSON",
+  // Number of milliseconds to wait before reject a request with a RequestTimeout error. Disabled: 0
+  requestTimeout: 10 * 1e3,
+  // Retry policy settings. More info: https://moleculer.services/docs/0.14/fault-tolerance.html#Retry
+  retryPolicy: retryPolicyConfig,
+  // Limit of calling level. If it reaches the limit, broker will throw an MaxCallLevelError error. (Infinite loop protection)
+  maxCallLevel: 100,
+  // Number of seconds to send heartbeat packet to other nodes.
+  heartbeatInterval: 10,
+  // Number of seconds to wait before setting node to unavailable status.
+  heartbeatTimeout: 30,
+  // Cloning the params of context if enabled. High performance impact, use it with caution!
+  contextParamsCloning: false,
+  // Tracking requests and waiting for running requests before shuting down. More info: https://moleculer.services/docs/0.14/context.html#Context-tracking
+  tracking: trackingConfig,
+  // Disable built-in request & emit balancer. (Transporter must support it, as well.). More info: https://moleculer.services/docs/0.14/networking.html#Disabled-balancer
+  disableBalancer: false,
+  // Settings of Service Registry. More info: https://moleculer.services/docs/0.14/registry.html
+  registry: registryConfig,
+  // Settings of Circuit Breaker. More info: https://moleculer.services/docs/0.14/fault-tolerance.html#Circuit-Breaker
+  circuitBreaker: circuitBreakerConfig,
+  // Settings of bulkhead feature. More info: https://moleculer.services/docs/0.14/fault-tolerance.html#Bulkhead
+  bulkhead: bulkheadConfig,
+  // Enable action & event parameter validation. More info: https://moleculer.services/docs/0.14/validating.html
+  validator: "Fastest",
+  // errorHandler: null,
+  transporter: env4.string("TRANSPORTER_URL"),
+  // Enable/disable built-in metrics function. More info: https://moleculer.services/docs/0.14/metrics.html
+  metrics: metricsConfig,
+  // Enable built-in tracing function. More info: https://moleculer.services/docs/0.14/tracing.html
+  tracing: tracingConfig,
+  middlewares: [
+    ChannelsMiddleware,
+    PermissionsMiddleware,
+    ContextHelpersMiddleware
+  ]
+};
+var moleculer_default = configs;
+
 // src/datasources/base.datasource.ts
 var AbstractDatasource = class {
   /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hiliosai/sdk",
-  "version": "0.1.16",
+  "version": "0.1.17",
   "type": "module",
   "license": "UNLICENSED",
   "main": "./dist/index.js",