@jungjaehoon/mama-os 0.53.0 → 0.57.0

package/dist/cli/runtime/scheduler-init.js

@@ -1,173 +0,0 @@
-"use strict";
-/**
- * Scheduler initialization for MAMA OS.
- *
- * Extracted from cli/commands/start.ts to keep the orchestrator thin.
- * All logic and function signatures are unchanged.
- *
- * Responsibilities:
- *   initCronScheduler:
- *     1. Creates CronWorker + EventEmitter (for gateway routing)
- *     2. Creates CronScheduler and wires executeCallback to CronWorker
- *     3. Loads cron jobs from config.scheduling.jobs
- *
- *   initHeartbeat:
- *     1. Creates HeartbeatScheduler (interval, quiet hours, Discord notify)
- *     2. Wires scheduler + heartbeat into HealthCheckService
- *     3. Starts periodic health-warning interval (every 5 minutes)
- *     4. Creates TokenKeepAlive and starts it
- */
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.shouldStartClaudeTokenKeepAlive = shouldStartClaudeTokenKeepAlive;
-exports.initCronScheduler = initCronScheduler;
-exports.initHeartbeat = initHeartbeat;
-const node_events_1 = require("node:events");
-const index_js_1 = require("../../scheduler/index.js");
-const heartbeat_js_1 = require("../../scheduler/heartbeat.js");
-const debugLogger = __importStar(require("@jungjaehoon/mama-core/debug-logger"));
-const { DebugLogger } = debugLogger;
-const schedulerLogger = new DebugLogger('scheduler-init');
-function shouldStartClaudeTokenKeepAlive(config) {
-    return config.agent.backend === 'claude';
-}
-/**
- * Initialize cron scheduler with a dedicated CronWorker and EventEmitter.
- *
- * Creates the scheduler, wires the execute callback to CronWorker,
- * and loads cron jobs from config.scheduling.jobs.
- */
-function initCronScheduler(config, runnerFactory) {
-    // CronWorker owns timing/events only. Production supplies an adapter to the
-    // standing owner runtime instead of creating another model identity.
-    const cronEmitter = new node_events_1.EventEmitter();
-    const cronWorker = new index_js_1.CronWorker({
-        emitter: cronEmitter,
-        runnerFactory,
-    });
-    const scheduler = new index_js_1.CronScheduler();
-    scheduler.setExecuteCallback(async (prompt, job) => {
-        console.log(`[Cron] Executing: ${prompt.substring(0, 50)}...`);
-        const result = await cronWorker.execute(prompt, {
-            jobId: job.id,
-            jobName: job.name,
-            channel: job.channel,
-        });
-        console.log(`[Cron] Completed: ${result.substring(0, 100)}...`);
-        return result;
-    });
-    // Load cron jobs from config.yaml scheduling.jobs
-    const schedulingConfig = config.scheduling;
-    if (schedulingConfig?.jobs?.length) {
-        let loaded = 0;
-        for (const job of schedulingConfig.jobs) {
-            try {
-                scheduler.addJob({
-                    id: job.id,
-                    name: job.name,
-                    cronExpr: job.cron,
-                    prompt: job.prompt,
-                    enabled: job.enabled ?? true,
-                    channel: job.channel,
-                });
-                loaded++;
-            }
-            catch (err) {
-                console.warn(`[Cron] Failed to load job "${job.id}": ${err instanceof Error ? err.message : String(err)}`);
-            }
-        }
-        if (loaded > 0) {
-            console.log(`✓ Loaded ${loaded} cron job(s) from config`);
-        }
-    }
-    return { scheduler, cronWorker, cronEmitter };
-}
-/**
- * Initialize heartbeat scheduler, health warning interval, and token keep-alive.
- *
- * Wires the heartbeat and cron scheduler into HealthCheckService,
- * starts a periodic health-warning log every 5 minutes,
- * and starts the OAuth token keep-alive timer.
- */
-function initHeartbeat(config, agentLoop, discordGateway, scheduler, healthCheckService, runOptionsFactory) {
-    // Initialize heartbeat scheduler
-    const heartbeatConfig = config.heartbeat || {};
-    const heartbeatScheduler = new heartbeat_js_1.HeartbeatScheduler(agentLoop, {
-        interval: heartbeatConfig.interval || 30 * 60 * 1000, // 30 minutes default
-        quietStart: heartbeatConfig.quiet_start || 23,
-        quietEnd: heartbeatConfig.quiet_end || 8,
-        notifyChannelId: heartbeatConfig.notify_channel_id || config.discord?.default_channel_id,
-    }, discordGateway
-        ? async (channelId, message) => {
-            await discordGateway.sendMessage(channelId, message);
-        }
-        : undefined, runOptionsFactory);
-    // Wire scheduler and heartbeat into health check service
-    healthCheckService.setCronScheduler(scheduler);
-    healthCheckService.setHeartbeat(heartbeatScheduler);
-    const tokenKeepAlive = new index_js_1.TokenKeepAlive({
-        intervalMs: 6 * 60 * 60 * 1000, // 6 hours
-        onRefresh: () => {
-            console.log('✓ OAuth token kept alive');
-        },
-        onError: (error) => {
-            console.warn(`⚠️ Token refresh warning: ${error.message}`);
-        },
-    });
-    if (heartbeatConfig.enabled !== false) {
-        heartbeatScheduler.start();
-        console.log('✓ Heartbeat scheduler started');
-    }
-    // Periodic health check warning log (every 5 minutes)
-    const healthWarningInterval = setInterval(async () => {
-        try {
-            const report = await healthCheckService.check();
-            const criticalFails = report.checks.filter((c) => c.severity === 'critical' && c.status === 'fail');
-            if (criticalFails.length > 0) {
-                schedulerLogger.warn(`[Health] ⚠ ${criticalFails.length} critical issue(s): ${criticalFails.map((c) => c.name).join(', ')}`);
-            }
-        }
-        catch {
-            /* ignore */
-        }
-    }, 5 * 60 * 1000);
-    // Claude CLI benefits from periodic OAuth refresh. Other backends own their
-    // credentials and must not execute `claude --version` as a hidden dependency.
-    if (shouldStartClaudeTokenKeepAlive(config)) {
-        tokenKeepAlive.start();
-    }
-    return { heartbeatScheduler, tokenKeepAlive, healthWarningInterval };
-}
-//# sourceMappingURL=scheduler-init.js.map

package/dist/cli/runtime/scheduler-init.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"scheduler-init.js","sourceRoot":"","sources":["../../../src/cli/runtime/scheduler-init.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;GAiBG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA2CH,0EAEC;AAQD,8CA+DC;AASD,sCAwEC;AAnMD,6CAA2C;AAG3C,uDAAqF;AACrF,+DAAkE;AAOlE,iFAAmE;AAEnE,MAAM,EAAE,WAAW,EAAE,GAAG,WAOvB,CAAC;AACF,MAAM,eAAe,GAAG,IAAI,WAAW,CAAC,gBAAgB,CAAC,CAAC;AAoB1D,SAAgB,+BAA+B,CAAC,MAAkB;IAChE,OAAO,MAAM,CAAC,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC;AAC3C,CAAC;AAED;;;;;GAKG;AACH,SAAgB,iBAAiB,CAC/B,MAAkB,EAClB,aAAiC;IAEjC,4EAA4E;IAC5E,qEAAqE;IACrE,MAAM,WAAW,GAAG,IAAI,0BAAY,EAAE,CAAC;IACvC,MAAM,UAAU,GAAG,IAAI,qBAAU,CAAC;QAChC,OAAO,EAAE,WAAW;QACpB,aAAa;KACd,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,IAAI,wBAAa,EAAE,CAAC;IAEtC,SAAS,CAAC,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;QACjD,OAAO,CAAC,GAAG,CAAC,qBAAqB,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE;YAC9C,KAAK,EAAE,GAAG,CAAC,EAAE;YACb,OAAO,EAAE,GAAG,CAAC,IAAI;YACjB,OAAO,EAAE,GAAG,CAAC,OAAO;SACrB,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,qBAAqB,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;QAChE,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC,CAAC;IAEH,kDAAkD;IAClD,MAAM,gBAAgB,GAAI,MAAkC,CAAC,UAYhD,CAAC;IACd,IAAI,gBAAgB,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QACnC,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,KAAK,MAAM,GAAG,IAAI,gBAAgB,CAAC,IAAI,EAAE,CAAC;YACxC,IAAI,CAAC;gBACH,SAAS,CAAC,MAAM,CAAC;oBACf,EAAE,EAAE,GAAG,CAAC,EAAE;oBACV,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,QAAQ,EAAE,GAAG,CAAC,IAAI;oBAClB,MAAM,EAAE,GAAG,CAAC,MAAM;oBAClB,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,IAAI;oBAC5B,OAAO,EAAE,GAAG,CAAC,OAAO;iBACrB,CAAC,CAAC;gBACH,MAAM,EAAE,CAAC;YACX,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,IAAI,CACV,8BAA8B,GAAG,CAAC,EAAE,MAAM,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC7F,CAAC;YACJ,CAAC;QACH,CAAC;QACD,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;YACf,OAAO,CAAC,GAAG,CAAC,YAAY,MAAM,0BAA0B,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC;AAChD,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,aAAa,CAC3B,MAAkB,EAClB,SAAoB,EACpB,cAAqC,EACrC,SAAwB,EACxB,kBAAsC,EACtC,iBAAsE;IAEtE,iCAAiC;IACjC,MAAM,eAAe,GAAG,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC;IAC/C,MAAM,kBAAkB,GAAG,IAAI,iCAAkB,CAC/C,SAAS,EACT;QACE,QAAQ,EAAE,eAAe,CAAC,QAAQ,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,qBAAqB;QAC3E,UAAU,EAAE,eAAe,CAAC,WAAW,IAAI,EAAE;QAC7C,QAAQ,EAAE,eAAe,CAAC,SAAS,IAAI,CAAC;QACxC,eAAe,EAAE,eAAe,CAAC,iBAAiB,IAAI,MAAM,CAAC,OAAO,EAAE,kBAAkB;KACzF,EACD,cAAc;QACZ,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE;YAC3B,MAAM,cAAe,CAAC,WAAW,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACxD,CAAC;QACH,CAAC,CAAC,SAAS,EACb,iBAAiB,CAClB,CAAC;IAEF,yDAAyD;IACzD,kBAAkB,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;IAC/C,kBAAkB,CAAC,YAAY,CAAC,kBAAkB,CAAC,CAAC;IAEpD,MAAM,cAAc,GAAG,IAAI,yBAAc,CAAC;QACxC,UAAU,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,UAAU;QAC1C,SAAS,EAAE,GAAG,EAAE;YACd,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;QAC1C,CAAC;QACD,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YACjB,OAAO,CAAC,IAAI,CAAC,6BAA6B,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC7D,CAAC;KACF,CAAC,CAAC;IAEH,IAAI,eAAe,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;QACtC,kBAAkB,CAAC,KAAK,EAAE,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;IAC/C,CAAC;IAED,sDAAsD;IACtD,MAAM,qBAAqB,GAAG,WAAW,CACvC,KAAK,IAAI,EAAE;QACT,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,KAAK,EAAE,CAAC;YAChD,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CACxC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,CACxD,CAAC;YACF,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC7B,eAAe,CAAC,IAAI,CAClB,cAAc,aAAa,CAAC,MAAM,uBAAuB,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACvG,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,YAAY;QACd,CAAC;IACH,CAAC,EACD,CAAC,GAAG,EAAE,GAAG,IAAI,CACd,CAAC;IAEF,4EAA4E;IAC5E,8EAA8E;IAC9E,IAAI,+BAA+B,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5C,cAAc,CAAC,KAAK,EAAE,CAAC;IACzB,CAAC;IAED,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,qBAAqB,EAAE,CAAC;AACvE,CAAC"}

package/dist/cli/runtime/server-start.d.ts

@@ -1,23 +0,0 @@
-/**
- * API server start and WebSocket upgrade handler.
- *
- * Extracted from cli/commands/start.ts (Task 12 Part A).
- * Waits for port availability, starts the API server, sets up
- * the /ws proxy to the embedding port, and enforces auth on
- * non-localhost connections.
- */
-import type { ApiServer } from '../../api/index.js';
-/** Anything that can be stopped during shutdown. */
-export type Stoppable = {
-    stop: () => Promise<void> | void;
-};
-export interface StartServerParams {
-    apiServer: ApiServer;
-    gateways: Stoppable[];
-}
-/**
- * Wait for the API port, start the server, set up WebSocket
- * upgrade handling, and push the server into the gateways array.
- */
-export declare function startServer(params: StartServerParams): Promise<void>;
-//# sourceMappingURL=server-start.d.ts.map

package/dist/cli/runtime/server-start.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"server-start.d.ts","sourceRoot":"","sources":["../../../src/cli/runtime/server-start.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAsBpD,oDAAoD;AACpD,MAAM,MAAM,SAAS,GAAG;IAAE,IAAI,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAA;CAAE,CAAC;AAE7D,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,SAAS,CAAC;IACrB,QAAQ,EAAE,SAAS,EAAE,CAAC;CACvB;AAED;;;GAGG;AACH,wBAAsB,WAAW,CAAC,MAAM,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAgI1E"}

package/dist/cli/runtime/server-start.js

@@ -1,174 +0,0 @@
-"use strict";
-/**
- * API server start and WebSocket upgrade handler.
- *
- * Extracted from cli/commands/start.ts (Task 12 Part A).
- * Waits for port availability, starts the API server, sets up
- * the /ws proxy to the embedding port, and enforces auth on
- * non-localhost connections.
- */
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.startServer = startServer;
-const node_http_1 = __importDefault(require("node:http"));
-const auth_middleware_js_1 = require("../../api/auth-middleware.js");
-const security_monitor_js_1 = require("../../security/security-monitor.js");
-const utilities_js_1 = require("./utilities.js");
-const debugLogger = __importStar(require("@jungjaehoon/mama-core/debug-logger"));
-const { DebugLogger } = debugLogger;
-const startLogger = new DebugLogger('server-start');
-/**
- * Wait for the API port, start the server, set up WebSocket
- * upgrade handling, and push the server into the gateways array.
- */
-async function startServer(params) {
-    const { apiServer, gateways } = params;
-    // Wait for API port to become available (previous daemon may still be shutting down).
-    // DO NOT kill processes on this port — that causes restart loops when Watchdog spawns
-    // a new daemon while the old one is still releasing the port. Port cleanup is the
-    // responsibility of `mama stop`, not daemon startup.
-    const apiPortAvailable = await (0, utilities_js_1.waitForPortAvailable)(utilities_js_1.API_PORT, 20000);
-    if (!apiPortAvailable) {
-        console.error(`[API] Port ${utilities_js_1.API_PORT} still in use after 20s. Previous daemon may still be shutting down. ` +
-            `Exiting — ${process.env.MAMA_DAEMON ? 'Watchdog will retry automatically.' : 'Run "mama stop" first, then retry.'}`);
-        process.exit(1);
-    }
-    await apiServer.start();
-    console.log(`API server started: http://localhost:${apiServer.port}`);
-    if (apiServer.server) {
-        // Handle ALL WebSocket upgrades manually
-        // eslint-disable-next-line @typescript-eslint/no-explicit-any
-        apiServer.server.on('upgrade', (request, socket, _head) => {
-            let url;
-            try {
-                url = new URL(request.url || '', `http://${request.headers.host || 'localhost'}`);
-            }
-            catch (error) {
-                startLogger.warn('[SECURITY] Malformed WebSocket upgrade URL rejected', {
-                    rawUrl: request.url || null,
-                    error: error instanceof Error ? error.message : String(error),
-                });
-                socket.destroy();
-                return;
-            }
-            // WebSocket auth: require token for non-localhost connections.
-            // Browsers cannot set Authorization headers on WebSocket upgrades,
-            // so we allow query-string token auth for this path only.
-            const adminToken = process.env.MAMA_AUTH_TOKEN || process.env.MAMA_SERVER_TOKEN;
-            const context = (0, auth_middleware_js_1.getSecurityLogContext)(request);
-            const isTrustedLocalUpgrade = (0, auth_middleware_js_1.isLocalRequest)(request) && !context.viaTunnel;
-            const isTrustedCloudflareUpgrade = (0, auth_middleware_js_1.isTrustedCloudflareAccessRequest)(request);
-            if (adminToken &&
-                !(0, auth_middleware_js_1.isAuthenticated)(request, { allowQueryToken: true }) &&
-                !isTrustedCloudflareUpgrade) {
-                const details = { hasQueryToken: url.searchParams.has('token') };
-                startLogger.warn('[SECURITY] Unauthorized WebSocket upgrade blocked', {
-                    ...context,
-                    ...details,
-                    path: url.pathname,
-                });
-                (0, security_monitor_js_1.recordSecurityEvent)({
-                    type: 'unauthorized_websocket_upgrade',
-                    severity: 'warn',
-                    message: 'Unauthorized WebSocket upgrade blocked',
-                    ...context,
-                    path: url.pathname,
-                    details,
-                });
-                socket.write('HTTP/1.1 401 Unauthorized\r\n\r\n');
-                socket.destroy();
-                return;
-            }
-            if (!adminToken && !isTrustedLocalUpgrade && !isTrustedCloudflareUpgrade) {
-                const details = { hasQueryToken: url.searchParams.has('token') };
-                startLogger.warn('[SECURITY] Blocking non-localhost WebSocket upgrade without auth token configured', {
-                    ...context,
-                    ...details,
-                    path: url.pathname,
-                });
-                (0, security_monitor_js_1.recordSecurityEvent)({
-                    type: 'unprotected_websocket_upgrade',
-                    severity: 'critical',
-                    message: 'Non-localhost WebSocket upgrade blocked without auth token configured',
-                    ...context,
-                    path: url.pathname,
-                    details,
-                });
-                socket.write('HTTP/1.1 403 Forbidden\r\n\r\n');
-                socket.destroy();
-                return;
-            }
-            if (url.pathname === '/ws') {
-                // Proxy chat WebSocket to embedding server
-                const options = {
-                    hostname: '127.0.0.1',
-                    port: utilities_js_1.EMBEDDING_PORT,
-                    path: request.url,
-                    method: 'GET',
-                    headers: {
-                        ...request.headers,
-                        host: `127.0.0.1:${utilities_js_1.EMBEDDING_PORT}`,
-                    },
-                };
-                const proxyReq = node_http_1.default.request(options);
-                // eslint-disable-next-line @typescript-eslint/no-explicit-any
-                proxyReq.on('upgrade', (proxyRes, proxySocket, _proxyHead) => {
-                    socket.write(`HTTP/1.1 101 Switching Protocols\r\n` +
-                        `Upgrade: websocket\r\n` +
-                        `Connection: Upgrade\r\n` +
-                        `Sec-WebSocket-Accept: ${proxyRes.headers['sec-websocket-accept']}\r\n` +
-                        `\r\n`);
-                    proxySocket.pipe(socket);
-                    socket.pipe(proxySocket);
-                });
-                proxyReq.on('error', (err) => {
-                    console.error('[WS Proxy] Error:', err.message);
-                    socket.destroy();
-                });
-                proxyReq.end();
-            }
-            else {
-                // Unknown WebSocket path - close connection
-                socket.destroy();
-            }
-        });
-        startLogger.info(`✓ WebSocket upgrade handler registered (/ws → ${utilities_js_1.EMBEDDING_PORT})`);
-    }
-    gateways.push(apiServer);
-}
-//# sourceMappingURL=server-start.js.map

package/dist/cli/runtime/server-start.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"server-start.js","sourceRoot":"","sources":["../../../src/cli/runtime/server-start.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsCH,kCAgIC;AApKD,0DAA6B;AAG7B,qEAKsC;AACtC,4EAAyE;AACzE,iDAAgF;AAEhF,iFAAmE;AAEnE,MAAM,EAAE,WAAW,EAAE,GAAG,WAOvB,CAAC;AACF,MAAM,WAAW,GAAG,IAAI,WAAW,CAAC,cAAc,CAAC,CAAC;AAUpD;;;GAGG;AACI,KAAK,UAAU,WAAW,CAAC,MAAyB;IACzD,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;IAEvC,sFAAsF;IACtF,sFAAsF;IACtF,kFAAkF;IAClF,qDAAqD;IACrD,MAAM,gBAAgB,GAAG,MAAM,IAAA,mCAAoB,EAAC,uBAAQ,EAAE,KAAK,CAAC,CAAC;IACrE,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,OAAO,CAAC,KAAK,CACX,cAAc,uBAAQ,uEAAuE;YAC3F,aAAa,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,oCAAoC,CAAC,CAAC,CAAC,oCAAoC,EAAE,CACvH,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC;IACxB,OAAO,CAAC,GAAG,CAAC,wCAAwC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;IAEtE,IAAI,SAAS,CAAC,MAAM,EAAE,CAAC;QACrB,yCAAyC;QACzC,8DAA8D;QAC9D,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,OAAY,EAAE,MAAW,EAAE,KAAU,EAAE,EAAE;YACvE,IAAI,GAAQ,CAAC;YACb,IAAI,CAAC;gBACH,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,EAAE,UAAU,OAAO,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,EAAE,CAAC,CAAC;YACpF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,WAAW,CAAC,IAAI,CAAC,qDAAqD,EAAE;oBACtE,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,IAAI;oBAC3B,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;iBAC9D,CAAC,CAAC;gBACH,MAAM,CAAC,OAAO,EAAE,CAAC;gBACjB,OAAO;YACT,CAAC;YAED,+DAA+D;YAC/D,mEAAmE;YACnE,0DAA0D;YAC1D,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;YAChF,MAAM,OAAO,GAAG,IAAA,0CAAqB,EAAC,OAAO,CAAC,CAAC;YAC/C,MAAM,qBAAqB,GAAG,IAAA,mCAAc,EAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;YAC5E,MAAM,0BAA0B,GAAG,IAAA,qDAAgC,EAAC,OAAO,CAAC,CAAC;YAC7E,IACE,UAAU;gBACV,CAAC,IAAA,oCAAe,EAAC,OAAO,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;gBACpD,CAAC,0BAA0B,EAC3B,CAAC;gBACD,MAAM,OAAO,GAAG,EAAE,aAAa,EAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBACjE,WAAW,CAAC,IAAI,CAAC,mDAAmD,EAAE;oBACpE,GAAG,OAAO;oBACV,GAAG,OAAO;oBACV,IAAI,EAAE,GAAG,CAAC,QAAQ;iBACnB,CAAC,CAAC;gBACH,IAAA,yCAAmB,EAAC;oBAClB,IAAI,EAAE,gCAAgC;oBACtC,QAAQ,EAAE,MAAM;oBAChB,OAAO,EAAE,wCAAwC;oBACjD,GAAG,OAAO;oBACV,IAAI,EAAE,GAAG,CAAC,QAAQ;oBAClB,OAAO;iBACR,CAAC,CAAC;gBACH,MAAM,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC;gBAClD,MAAM,CAAC,OAAO,EAAE,CAAC;gBACjB,OAAO;YACT,CAAC;YACD,IAAI,CAAC,UAAU,IAAI,CAAC,qBAAqB,IAAI,CAAC,0BAA0B,EAAE,CAAC;gBACzE,MAAM,OAAO,GAAG,EAAE,aAAa,EAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBACjE,WAAW,CAAC,IAAI,CACd,mFAAmF,EACnF;oBACE,GAAG,OAAO;oBACV,GAAG,OAAO;oBACV,IAAI,EAAE,GAAG,CAAC,QAAQ;iBACnB,CACF,CAAC;gBACF,IAAA,yCAAmB,EAAC;oBAClB,IAAI,EAAE,+BAA+B;oBACrC,QAAQ,EAAE,UAAU;oBACpB,OAAO,EAAE,uEAAuE;oBAChF,GAAG,OAAO;oBACV,IAAI,EAAE,GAAG,CAAC,QAAQ;oBAClB,OAAO;iBACR,CAAC,CAAC;gBACH,MAAM,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;gBAC/C,MAAM,CAAC,OAAO,EAAE,CAAC;gBACjB,OAAO;YACT,CAAC;YAED,IAAI,GAAG,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;gBAC3B,2CAA2C;gBAC3C,MAAM,OAAO,GAAG;oBACd,QAAQ,EAAE,WAAW;oBACrB,IAAI,EAAE,6BAAc;oBACpB,IAAI,EAAE,OAAO,CAAC,GAAG;oBACjB,MAAM,EAAE,KAAK;oBACb,OAAO,EAAE;wBACP,GAAG,OAAO,CAAC,OAAO;wBAClB,IAAI,EAAE,aAAa,6BAAc,EAAE;qBACpC;iBACF,CAAC;gBAEF,MAAM,QAAQ,GAAG,mBAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;gBACvC,8DAA8D;gBAC9D,QAAQ,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,QAAa,EAAE,WAAgB,EAAE,UAAe,EAAE,EAAE;oBAC1E,MAAM,CAAC,KAAK,CACV,sCAAsC;wBACpC,wBAAwB;wBACxB,yBAAyB;wBACzB,yBAAyB,QAAQ,CAAC,OAAO,CAAC,sBAAsB,CAAC,MAAM;wBACvE,MAAM,CACT,CAAC;oBACF,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;oBACzB,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBAC3B,CAAC,CAAC,CAAC;gBACH,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAU,EAAE,EAAE;oBAClC,OAAO,CAAC,KAAK,CAAC,mBAAmB,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;oBAChD,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,CAAC,CAAC,CAAC;gBACH,QAAQ,CAAC,GAAG,EAAE,CAAC;YACjB,CAAC;iBAAM,CAAC;gBACN,4CAA4C;gBAC5C,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,CAAC;QACH,CAAC,CAAC,CAAC;QACH,WAAW,CAAC,IAAI,CAAC,iDAAiD,6BAAc,GAAG,CAAC,CAAC;IACvF,CAAC;IAED,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;AAC3B,CAAC"}

package/dist/cli/runtime/shutdown.d.ts

@@ -1,46 +0,0 @@
-/**
- * Graceful shutdown handler for MAMA OS.
- *
- * Extracted from cli/commands/start.ts (Task 12 Part B).
- * Contains the ordered teardown logic, signal handlers,
- * uncaught error handlers, keep-alive interval, and force
- * exit timer.
- */
-import type { AgentLoop } from '../../agent/index.js';
-import type { SessionStore } from '../../gateways/session-store.js';
-import type { Stoppable } from './server-start.js';
-import type { PluginLoader } from '../../gateways/plugin-loader.js';
-import type { MetricsStore } from '../../observability/metrics-store.js';
-import type { CronScheduler, CronWorker, TokenKeepAlive } from '../../scheduler/index.js';
-import type { HeartbeatScheduler } from '../../scheduler/heartbeat.js';
-import type { SQLiteDatabase } from '../../sqlite.js';
-export interface ShutdownDeps {
-    metricsInterval: ReturnType<typeof setInterval> | null;
-    healthWarningInterval: ReturnType<typeof setInterval> | null;
-    scheduler: CronScheduler;
-    cronWorker: CronWorker;
-    heartbeatScheduler: HeartbeatScheduler;
-    tokenKeepAlive: TokenKeepAlive;
-    gateways: Stoppable[];
-    pluginLoader: PluginLoader;
-    agentLoop: AgentLoop;
-    stopExtraction: () => Promise<void>;
-    sessionStore: SessionStore;
-    db: SQLiteDatabase;
-    metricsStore: MetricsStore | null;
-    metricsCleanup: {
-        stop: () => void;
-    } | null;
-}
-type DataStoreShutdownDeps = Pick<ShutdownDeps, 'stopExtraction' | 'sessionStore' | 'metricsCleanup' | 'metricsStore' | 'db'>;
-export declare function closeRuntimeDataStores(deps: DataStoreShutdownDeps): Promise<void>;
-/**
- * Install graceful shutdown handlers and keep-alive interval.
- *
- * Registers SIGINT, SIGTERM, SIGHUP, uncaughtException, and
- * unhandledRejection handlers, plus the keep-alive setInterval
- * that keeps the Node.js event loop active.
- */
-export declare function installShutdownHandlers(deps: ShutdownDeps): void;
-export {};
-//# sourceMappingURL=shutdown.d.ts.map

package/dist/cli/runtime/shutdown.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"shutdown.d.ts","sourceRoot":"","sources":["../../../src/cli/runtime/shutdown.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sCAAsC,CAAC;AACzE,OAAO,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1F,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AACvE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAuBtD,MAAM,WAAW,YAAY;IAE3B,eAAe,EAAE,UAAU,CAAC,OAAO,WAAW,CAAC,GAAG,IAAI,CAAC;IACvD,qBAAqB,EAAE,UAAU,CAAC,OAAO,WAAW,CAAC,GAAG,IAAI,CAAC;IAG7D,SAAS,EAAE,aAAa,CAAC;IACzB,UAAU,EAAE,UAAU,CAAC;IACvB,kBAAkB,EAAE,kBAAkB,CAAC;IACvC,cAAc,EAAE,cAAc,CAAC;IAG/B,QAAQ,EAAE,SAAS,EAAE,CAAC;IACtB,YAAY,EAAE,YAAY,CAAC;IAG3B,SAAS,EAAE,SAAS,CAAC;IACrB,cAAc,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAGpC,YAAY,EAAE,YAAY,CAAC;IAC3B,EAAE,EAAE,cAAc,CAAC;IAGnB,YAAY,EAAE,YAAY,GAAG,IAAI,CAAC;IAClC,cAAc,EAAE;QAAE,IAAI,EAAE,MAAM,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;CAC7C;AAED,KAAK,qBAAqB,GAAG,IAAI,CAC/B,YAAY,EACZ,gBAAgB,GAAG,cAAc,GAAG,gBAAgB,GAAG,cAAc,GAAG,IAAI,CAC7E,CAAC;AAEF,wBAAsB,sBAAsB,CAAC,IAAI,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,CAyBvF;AAqCD;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,YAAY,GAAG,IAAI,CA4JhE"}