@lenne.tech/nest-server 11.32.3 → 11.33.0

package/dist/core/common/services/rate-limit-store.js

@@ -0,0 +1,235 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RedisRateLimitStore = exports.InMemoryRateLimitStore = void 0;
+exports.rateLimitKey = rateLimitKey;
+exports.rateLimitKeyPrefix = rateLimitKeyPrefix;
+const common_1 = require("@nestjs/common");
+function escapeGlob(value) {
+    return value.replace(/[?[\]*\\^]/g, (char) => `\\${char}`);
+}
+function rateLimitKey(...parts) {
+    return parts.map((part) => part.replace(/\\/g, '\\\\').replace(/:/g, '\\:')).join(':');
+}
+function rateLimitKeyPrefix(...parts) {
+    return `${rateLimitKey(...parts)}:`;
+}
+function namespaceLabel(namespace) {
+    return `namespace ${namespace}`;
+}
+const OVERFLOW_BUCKETS = 64;
+function overflowSlot(key) {
+    let hash = 0;
+    for (let i = 0; i < key.length; i++) {
+        hash = (hash * 31 + key.charCodeAt(i)) | 0;
+    }
+    return Math.abs(hash) % OVERFLOW_BUCKETS;
+}
+class InMemoryRateLimitStore {
+    maxEntries;
+    store = new Map();
+    cleanupInterval = null;
+    atCapacity = false;
+    capacityWarned = false;
+    overflow = new Map();
+    constructor(maxEntries = 10000) {
+        this.maxEntries = maxEntries;
+        this.cleanupInterval = setInterval(() => this.removeExpired(), 5 * 60 * 1000);
+        this.cleanupInterval.unref?.();
+    }
+    async clear() {
+        this.store.clear();
+        this.overflow.clear();
+        this.atCapacity = false;
+        this.capacityWarned = false;
+    }
+    async hit(key, windowSeconds) {
+        const now = Date.now();
+        let entry = this.store.get(key);
+        if (!entry || now >= entry.resetTime) {
+            if (!entry && this.store.size >= this.maxEntries) {
+                this.atCapacity = false;
+                this.evictOldest();
+                if (this.atCapacity) {
+                    if (!this.capacityWarned) {
+                        this.capacityWarned = true;
+                        console.warn(`Rate limit store is at capacity (${this.maxEntries} live counters). New clients now share ` +
+                            `${OVERFLOW_BUCKETS} coarse counters until entries expire, so they may be limited earlier than ` +
+                            'their own traffic warrants. Existing limits are unaffected.');
+                    }
+                    return this.hitOverflow(key, windowSeconds, now);
+                }
+            }
+            entry = { count: 1, resetTime: now + windowSeconds * 1000 };
+            this.store.set(key, entry);
+            return { count: 1, resetIn: windowSeconds };
+        }
+        entry.count++;
+        return { count: entry.count, resetIn: Math.ceil((entry.resetTime - now) / 1000) };
+    }
+    async resetByPrefix(prefix) {
+        for (const key of this.store.keys()) {
+            if (key.startsWith(prefix)) {
+                this.store.delete(key);
+            }
+        }
+    }
+    hitOverflow(key, windowSeconds, now) {
+        const slot = overflowSlot(key);
+        const entry = this.overflow.get(slot);
+        if (!entry || now >= entry.resetTime) {
+            this.overflow.set(slot, { count: 1, resetTime: now + windowSeconds * 1000 });
+            return { count: 1, resetIn: windowSeconds };
+        }
+        entry.count++;
+        return { count: entry.count, resetIn: Math.ceil((entry.resetTime - now) / 1000) };
+    }
+    size() {
+        return this.store.size;
+    }
+    destroy() {
+        if (this.cleanupInterval) {
+            clearInterval(this.cleanupInterval);
+            this.cleanupInterval = null;
+        }
+    }
+    removeExpired() {
+        const now = Date.now();
+        let removed = 0;
+        for (const [key, entry] of this.store.entries()) {
+            if (now >= entry.resetTime) {
+                this.store.delete(key);
+                removed++;
+            }
+        }
+        return removed;
+    }
+    evictOldest() {
+        const removed = this.removeExpired();
+        if (removed > 0 || this.store.size < this.maxEntries) {
+            return;
+        }
+        this.atCapacity = true;
+    }
+}
+exports.InMemoryRateLimitStore = InMemoryRateLimitStore;
+const HIT_SCRIPT = `
+local window = tonumber(ARGV[1])
+local target = KEYS[1]
+local overflow = 0
+if redis.call('EXISTS', KEYS[1]) == 0 then
+  local seen = redis.call('INCR', KEYS[2])
+  if seen == 1 then
+    redis.call('EXPIRE', KEYS[2], window)
+  end
+  if seen > tonumber(ARGV[2]) then
+    target = KEYS[3]
+    overflow = 1
+  end
+end
+local c = redis.call('INCR', target)
+if c == 1 then
+  redis.call('EXPIRE', target, window)
+end
+local ttl = redis.call('TTL', target)
+if ttl < 0 then
+  redis.call('EXPIRE', target, window)
+  ttl = window
+end
+return {c, ttl, overflow}
+`;
+const HIT_COMMAND = 'ltRateLimitHit';
+class RedisRateLimitStore {
+    redisService;
+    namespace;
+    maxKeys;
+    fallback = new InMemoryRateLimitStore();
+    degraded = false;
+    logger = new common_1.Logger(RedisRateLimitStore.name);
+    capacityWarned = false;
+    prepared = new WeakSet();
+    constructor(redisService, namespace, maxKeys = 10000) {
+        this.redisService = redisService;
+        this.namespace = namespace;
+        this.maxKeys = maxKeys;
+    }
+    async clear() {
+        await this.fallback.clear();
+        this.capacityWarned = false;
+        await this.guard(() => this.deleteByPattern(this.redisKeyPattern('')), undefined);
+    }
+    async hit(key, windowSeconds) {
+        return this.guard(async () => {
+            const [count, ttl, overflow] = await this.runHit(key, windowSeconds);
+            if (this.degraded) {
+                this.degraded = false;
+                this.logger.log('Redis rate limiting recovered — limits are shared across replicas again');
+            }
+            if (overflow && !this.capacityWarned) {
+                this.capacityWarned = true;
+                this.logger.warn(`Rate limit keyspace for ${namespaceLabel(this.namespace)} reached ${this.maxKeys} distinct counters ` +
+                    `within one window. New clients now share ${OVERFLOW_BUCKETS} coarse counters until the window rolls ` +
+                    'over, so they may be limited earlier than their own traffic warrants. Existing limits are unaffected.');
+            }
+            return { count, resetIn: ttl };
+        }, () => this.fallback.hit(key, windowSeconds));
+    }
+    async runHit(key, windowSeconds) {
+        const client = this.redisService.getClient();
+        const args = [this.redisKey(key), this.cardinalityKey(), this.overflowKey(key), windowSeconds, this.maxKeys];
+        if (typeof client.defineCommand === 'function') {
+            if (!this.prepared.has(client)) {
+                client.defineCommand(HIT_COMMAND, { lua: HIT_SCRIPT, numberOfKeys: 3 });
+                this.prepared.add(client);
+            }
+            return (await client[HIT_COMMAND](...args));
+        }
+        return (await client.eval(HIT_SCRIPT, 3, ...args));
+    }
+    async resetByPrefix(prefix) {
+        await this.fallback.resetByPrefix(prefix);
+        await this.guard(() => this.deleteByPattern(this.redisKeyPattern(prefix)), undefined);
+    }
+    size() {
+        return -1;
+    }
+    destroy() {
+        this.fallback.destroy();
+    }
+    async guard(operation, onFailure) {
+        try {
+            return await operation();
+        }
+        catch (error) {
+            if (!this.degraded) {
+                this.degraded = true;
+                this.logger.error(`Redis rate limiting unavailable (${namespaceLabel(this.namespace)}): ${error instanceof Error ? error.message : 'Unknown error'}. Falling back to per-replica in-memory limits until Redis recovers.`);
+            }
+            return onFailure ? await onFailure() : undefined;
+        }
+    }
+    redisKey(key) {
+        return this.redisService.key('rate-limit', this.namespace, key);
+    }
+    redisKeyPattern(prefix) {
+        return `${escapeGlob(this.redisKey(prefix))}*`;
+    }
+    cardinalityKey() {
+        return this.redisService.key('rate-limit', this.namespace, '#meta', 'cardinality');
+    }
+    overflowKey(key) {
+        return this.redisService.key('rate-limit', this.namespace, '#overflow', String(overflowSlot(key)));
+    }
+    async deleteByPattern(pattern) {
+        const client = this.redisService.getClient();
+        let cursor = '0';
+        do {
+            const [nextCursor, keys] = await client.scan(cursor, 'MATCH', pattern, 'COUNT', 200);
+            if (keys.length) {
+                await client.del(...keys);
+            }
+            cursor = nextCursor;
+        } while (cursor !== '0');
+    }
+}
+exports.RedisRateLimitStore = RedisRateLimitStore;
+//# sourceMappingURL=rate-limit-store.js.map

package/dist/core/common/services/rate-limit-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit-store.js","sourceRoot":"","sources":["../../../../src/core/common/services/rate-limit-store.ts"],"names":[],"mappings":";;;AAiCA,oCAEC;AAOD,gDAEC;AA5CD,2CAAwC;AAgBxC,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,KAAK,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;AAC7D,CAAC;AAeD,SAAgB,YAAY,CAAC,GAAG,KAAe;IAC7C,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACzF,CAAC;AAOD,SAAgB,kBAAkB,CAAC,GAAG,KAAe;IACnD,OAAO,GAAG,YAAY,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC;AACtC,CAAC;AAKD,SAAS,cAAc,CAAC,SAAiB;IACvC,OAAO,aAAa,SAAS,EAAE,CAAC;AAClC,CAAC;AA2CD,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAG5B,SAAS,YAAY,CAAC,GAAW;IAC/B,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,IAAI,GAAG,CAAC,IAAI,GAAG,EAAE,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC;AAC3C,CAAC;AAMD,MAAa,sBAAsB;IA0BF;IAzBZ,KAAK,GAAG,IAAI,GAAG,EAAgD,CAAC;IACzE,eAAe,GAA0B,IAAI,CAAC;IAG9C,UAAU,GAAG,KAAK,CAAC;IAGnB,cAAc,GAAG,KAAK,CAAC;IAgBd,QAAQ,GAAG,IAAI,GAAG,EAAgD,CAAC;IAEtF,YAA+B,aAAa,KAAK;QAAlB,eAAU,GAAV,UAAU,CAAQ;QAE/C,IAAI,CAAC,eAAe,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC9E,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,EAAE,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QAInB,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC;QACxB,IAAI,CAAC,cAAc,GAAG,KAAK,CAAC;IAC9B,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,GAAW,EAAE,aAAqB;QAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,CAAC,KAAK,IAAI,GAAG,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;YACrC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;gBACjD,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC;gBACxB,IAAI,CAAC,WAAW,EAAE,CAAC;gBACnB,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;oBACpB,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;wBACzB,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;wBAC3B,OAAO,CAAC,IAAI,CACV,oCAAoC,IAAI,CAAC,UAAU,yCAAyC;4BAC1F,GAAG,gBAAgB,6EAA6E;4BAChG,6DAA6D,CAChE,CAAC;oBACJ,CAAC;oBACD,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,aAAa,EAAE,GAAG,CAAC,CAAC;gBACnD,CAAC;YACH,CAAC;YACD,KAAK,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,GAAG,aAAa,GAAG,IAAI,EAAE,CAAC;YAC5D,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC3B,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;QAC9C,CAAC;QACD,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,SAAS,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC;IACpF,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,MAAc;QAChC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;YACpC,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC3B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;IACH,CAAC;IAOS,WAAW,CAAC,GAAW,EAAE,aAAqB,EAAE,GAAW;QACnE,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAEtC,IAAI,CAAC,KAAK,IAAI,GAAG,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;YACrC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,GAAG,aAAa,GAAG,IAAI,EAAE,CAAC,CAAC;YAC7E,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;QAC9C,CAAC;QAED,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,SAAS,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC;IACpF,CAAC;IAED,IAAI;QACF,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;IACzB,CAAC;IAGD,OAAO;QACL,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACzB,aAAa,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YACpC,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;QAC9B,CAAC;IACH,CAAC;IAES,aAAa;QACrB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;YAChD,IAAI,GAAG,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;gBAC3B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACvB,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAMS,WAAW;QACnB,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACrC,IAAI,OAAO,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;YACrD,OAAO;QACT,CAAC;QAMD,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;IACzB,CAAC;CACF;AAvID,wDAuIC;AAkBD,MAAM,UAAU,GAAG;;;;;;;;;;;;;;;;;;;;;;;;CAwBlB,CAAC;AAGF,MAAM,WAAW,GAAG,gBAAgB,CAAC;AAWrC,MAAa,mBAAmB;IAmCT;IACA;IACA;IA1BF,QAAQ,GAAG,IAAI,sBAAsB,EAAE,CAAC;IAGjD,QAAQ,GAAG,KAAK,CAAC;IAER,MAAM,GAAG,IAAI,eAAM,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAGvD,cAAc,GAAG,KAAK,CAAC;IASd,QAAQ,GAAG,IAAI,OAAO,EAAU,CAAC;IAMpD,YACqB,YAA8B,EAC9B,SAAiB,EACjB,UAAU,KAAK;QAFf,iBAAY,GAAZ,YAAY,CAAkB;QAC9B,cAAS,GAAT,SAAS,CAAQ;QACjB,YAAO,GAAP,OAAO,CAAQ;IACjC,CAAC;IAEJ,KAAK,CAAC,KAAK;QACT,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QAC5B,IAAI,CAAC,cAAc,GAAG,KAAK,CAAC;QAI5B,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IACpF,CAAC;IAkBD,KAAK,CAAC,GAAG,CAAC,GAAW,EAAE,aAAqB;QAC1C,OAAO,IAAI,CAAC,KAAK,CACf,KAAK,IAAI,EAAE;YACT,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;YACrE,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAClB,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;gBACtB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,yEAAyE,CAAC,CAAC;YAC7F,CAAC;YACD,IAAI,QAAQ,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;gBACrC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC3B,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,2BAA2B,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,IAAI,CAAC,OAAO,qBAAqB;oBACpG,4CAA4C,gBAAgB,0CAA0C;oBACtG,uGAAuG,CAC1G,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;QACjC,CAAC,EACD,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,aAAa,CAAC,CAC5C,CAAC;IACJ,CAAC;IAUS,KAAK,CAAC,MAAM,CAAC,GAAW,EAAE,aAAqB;QACvD,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,SAAS,EAAS,CAAC;QACpD,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,cAAc,EAAE,EAAE,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAE7G,IAAI,OAAO,MAAM,CAAC,aAAa,KAAK,UAAU,EAAE,CAAC;YAC/C,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC/B,MAAM,CAAC,aAAa,CAAC,WAAW,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC,CAAC;gBACxE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC5B,CAAC;YACD,OAAO,CAAC,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC,GAAG,IAAI,CAAC,CAA6B,CAAC;QAC1E,CAAC;QACD,OAAO,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,EAAE,GAAG,IAAI,CAAC,CAA6B,CAAC;IACjF,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,MAAc;QAChC,MAAM,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IACxF,CAAC;IAED,IAAI;QACF,OAAO,CAAC,CAAC,CAAC;IACZ,CAAC;IAGD,OAAO;QACL,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;IAC1B,CAAC;IAKS,KAAK,CAAC,KAAK,CAAI,SAA2B,EAAE,SAA6C;QACjG,IAAI,CAAC;YACH,OAAO,MAAM,SAAS,EAAE,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACnB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;gBACrB,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,oCAAoC,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,MAChE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAC3C,sEAAsE,CACvE,CAAC;YACJ,CAAC;YACD,OAAO,SAAS,CAAC,CAAC,CAAC,MAAM,SAAS,EAAE,CAAC,CAAC,CAAE,SAAe,CAAC;QAC1D,CAAC;IACH,CAAC;IAGS,QAAQ,CAAC,GAAW;QAC5B,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IAClE,CAAC;IASS,eAAe,CAAC,MAAc;QACtC,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC;IACjD,CAAC;IAeS,cAAc;QACtB,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC;IACrF,CAAC;IAGS,WAAW,CAAC,GAAW;QAC/B,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,EAAE,WAAW,EAAE,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACrG,CAAC;IAES,KAAK,CAAC,eAAe,CAAC,OAAe;QAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,CAAC;QAC7C,IAAI,MAAM,GAAG,GAAG,CAAC;QACjB,GAAG,CAAC;YACF,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;YACrF,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBAChB,MAAM,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;YAC5B,CAAC;YACD,MAAM,GAAG,UAAU,CAAC;QACtB,CAAC,QAAQ,MAAM,KAAK,GAAG,EAAE;IAC3B,CAAC;CACF;AA/LD,kDA+LC"}

package/dist/core/modules/ai/core-ai-mcp.controller.d.ts

@@ -1,21 +1,37 @@
-import { Logger } from '@nestjs/common';
+import { Logger, OnModuleDestroy } from '@nestjs/common';
 import { Request, Response } from 'express';
+import { CoreRedisService } from '../../common/services/core-redis.service';
 import { CoreAiMcpOAuthService } from './services/core-ai-mcp-oauth.service';
 import { CoreAiMcpService } from './services/core-ai-mcp.service';
-export declare class CoreAiMcpController {
+export declare class CoreAiMcpController implements OnModuleDestroy {
     private readonly mcpService;
     private readonly oauthService;
+    protected readonly redisService?: CoreRedisService;
     protected readonly logger: Logger;
     private readonly transports;
+    private readonly maxSessionsPerUser;
     private readonly maxSessions;
-    constructor(mcpService: CoreAiMcpService, oauthService: CoreAiMcpOAuthService);
+    protected readonly instanceId: string;
+    protected readonly sessionTtlSeconds = 3600;
+    constructor(mcpService: CoreAiMcpService, oauthService: CoreAiMcpOAuthService, redisService?: CoreRedisService);
     handlePost(req: Request, res: Response): Promise<void>;
     handleGet(req: Request, res: Response): Promise<void>;
     handleDelete(req: Request, res: Response): Promise<void>;
     protected resolveUser(req: Request): Promise<any | null>;
     protected oauthEnabled(): boolean;
     private handleSessionRequest;
+    protected foreignSessionOwner(sessionId: string, userId: string): Promise<string | undefined>;
+    protected parseSessionEntry(raw: null | string): undefined | {
+        instanceId: string;
+        userId: string;
+    };
+    protected registerSession(sessionId: string, userId: string): void;
+    protected releaseSession(sessionId: string): Promise<void>;
+    onModuleDestroy(): Promise<void>;
+    protected sessionKey(sessionId: string): string;
+    protected foreignSession(res: Response, owner: string): void;
     private mcpUnavailable;
     private unauthorized;
     private evictIfNeeded;
+    private evictOldestOf;
 }

package/dist/core/modules/ai/core-ai-mcp.controller.js

@@ -16,9 +16,11 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.CoreAiMcpController = void 0;
 const common_1 = require("@nestjs/common");
 const swagger_1 = require("@nestjs/swagger");
+const node_os_1 = require("node:os");
 const roles_decorator_1 = require("../../common/decorators/roles.decorator");
 const role_enum_1 = require("../../common/enums/role.enum");
 const config_service_1 = require("../../common/services/config.service");
+const core_redis_service_1 = require("../../common/services/core-redis.service");
 const core_better_auth_module_1 = require("../better-auth/core-better-auth.module");
 const error_codes_1 = require("../error-code/error-codes");
 const core_ai_mcp_oauth_service_1 = require("./services/core-ai-mcp-oauth.service");
@@ -26,12 +28,17 @@ const core_ai_mcp_service_1 = require("./services/core-ai-mcp.service");
 let CoreAiMcpController = CoreAiMcpController_1 = class CoreAiMcpController {
     mcpService;
     oauthService;
+    redisService;
     logger = new common_1.Logger(CoreAiMcpController_1.name);
     transports = new Map();
+    maxSessionsPerUser = 25;
     maxSessions = 500;
-    constructor(mcpService, oauthService) {
+    instanceId = `${(0, node_os_1.hostname)()}:${process.pid}`;
+    sessionTtlSeconds = 3600;
+    constructor(mcpService, oauthService, redisService) {
         this.mcpService = mcpService;
         this.oauthService = oauthService;
+        this.redisService = redisService;
     }
     async handlePost(req, res) {
         const user = await this.resolveUser(req);
@@ -41,6 +48,18 @@ let CoreAiMcpController = CoreAiMcpController_1 = class CoreAiMcpController {
         }
         const sessionId = req.headers['mcp-session-id'];
         let entry = sessionId ? this.transports.get(sessionId) : undefined;
+        if (entry && entry.ownerId !== user.id) {
+            entry = undefined;
+            res.status(404).json({ error: 'Unknown or expired MCP session' });
+            return;
+        }
+        if (!entry && sessionId) {
+            const owner = await this.foreignSessionOwner(sessionId, user.id);
+            if (owner) {
+                this.foreignSession(res, owner);
+                return;
+            }
+        }
         if (!entry) {
             let StreamableHTTPServerTransport;
             try {
@@ -56,15 +75,19 @@ let CoreAiMcpController = CoreAiMcpController_1 = class CoreAiMcpController {
             transport.onclose = () => {
                 if (transport.sessionId) {
                     this.transports.delete(transport.sessionId);
+                    this.releaseSession(transport.sessionId);
                 }
             };
-            entry = { lastUsed: Date.now(), transport };
+            entry = { lastUsed: Date.now(), ownerId: user.id, transport };
         }
         entry.lastUsed = Date.now();
         await entry.transport.handleRequest(req, res, req.body);
-        if (entry.transport.sessionId && !this.transports.has(entry.transport.sessionId)) {
-            this.evictIfNeeded();
-            this.transports.set(entry.transport.sessionId, entry);
+        if (entry.transport.sessionId) {
+            if (!this.transports.has(entry.transport.sessionId)) {
+                this.evictIfNeeded(user.id);
+                this.transports.set(entry.transport.sessionId, entry);
+            }
+            this.registerSession(entry.transport.sessionId, user.id);
         }
     }
     async handleGet(req, res) {
@@ -110,14 +133,93 @@ let CoreAiMcpController = CoreAiMcpController_1 = class CoreAiMcpController {
             return;
         }
         const sessionId = req.headers['mcp-session-id'];
-        const entry = sessionId ? this.transports.get(sessionId) : undefined;
+        const held = sessionId ? this.transports.get(sessionId) : undefined;
+        const entry = held && held.ownerId === user.id ? held : undefined;
         if (!entry) {
+            const owner = sessionId ? await this.foreignSessionOwner(sessionId, user.id) : undefined;
+            if (owner) {
+                this.foreignSession(res, owner);
+                return;
+            }
             res.status(404).json({ error: 'Unknown or expired MCP session' });
             return;
         }
         entry.lastUsed = Date.now();
+        this.registerSession(sessionId, user.id);
         await entry.transport.handleRequest(req, res, req.body);
     }
+    async foreignSessionOwner(sessionId, userId) {
+        if (!this.redisService?.enabled) {
+            return undefined;
+        }
+        try {
+            const raw = await this.redisService.getClient().get(this.sessionKey(sessionId));
+            const entry = this.parseSessionEntry(raw);
+            if (!entry || entry.userId !== userId || entry.instanceId === this.instanceId) {
+                return undefined;
+            }
+            return entry.instanceId;
+        }
+        catch (err) {
+            this.logger.debug(`MCP session registry lookup failed: ${err.message}`);
+            return undefined;
+        }
+    }
+    parseSessionEntry(raw) {
+        if (!raw) {
+            return undefined;
+        }
+        try {
+            const parsed = JSON.parse(raw);
+            return parsed?.instanceId && parsed?.userId ? parsed : undefined;
+        }
+        catch {
+            return undefined;
+        }
+    }
+    registerSession(sessionId, userId) {
+        if (!this.redisService?.enabled) {
+            return;
+        }
+        this.redisService
+            .getClient()
+            .set(this.sessionKey(sessionId), JSON.stringify({ instanceId: this.instanceId, userId }), 'EX', this.sessionTtlSeconds)
+            .catch((err) => this.logger.debug(`MCP session registry write failed: ${err.message}`));
+    }
+    releaseSession(sessionId) {
+        if (!this.redisService?.enabled) {
+            return Promise.resolve();
+        }
+        return this.redisService
+            .getClient()
+            .del(this.sessionKey(sessionId))
+            .then(() => undefined)
+            .catch((err) => this.logger.debug(`MCP session registry delete failed: ${err.message}`));
+    }
+    async onModuleDestroy() {
+        const sessions = [...this.transports.keys()];
+        for (const [, entry] of this.transports) {
+            try {
+                await entry.transport?.close?.();
+            }
+            catch (error) {
+                this.logger.debug(`MCP transport close failed: ${error instanceof Error ? error.message : 'unknown'}`);
+            }
+        }
+        this.transports.clear();
+        await Promise.allSettled(sessions.map((sessionId) => this.releaseSession(sessionId)));
+    }
+    sessionKey(sessionId) {
+        return this.redisService.key('ai-mcp-session', sessionId);
+    }
+    foreignSession(res, owner) {
+        res.status(409).json({
+            error: `MCP session belongs to another server instance (${owner}); this instance is ${this.instanceId}. ` +
+                'The MCP transport is held in process memory and cannot be shared, so /ai/mcp requires sticky ' +
+                'sessions — route every request of one MCP session to the same replica.',
+            statusCode: 409,
+        });
+    }
     mcpUnavailable(res, err) {
         this.logger.error(`MCP SDK not available: ${err.message}`);
         res.status(503).json({
@@ -135,26 +237,52 @@ let CoreAiMcpController = CoreAiMcpController_1 = class CoreAiMcpController {
             .set({ 'WWW-Authenticate': `Bearer resource_metadata="${baseUrl}/ai/mcp"` })
             .json({ error: 'Unauthorized: a valid Bearer token is required' });
     }
-    evictIfNeeded() {
+    evictIfNeeded(ownerId) {
+        const perUser = new Map();
+        for (const [key, value] of this.transports) {
+            const owned = perUser.get(value.ownerId);
+            if (owned) {
+                owned.push(key);
+            }
+            else {
+                perUser.set(value.ownerId, [key]);
+            }
+        }
+        if ((perUser.get(ownerId)?.length ?? 0) >= this.maxSessionsPerUser) {
+            this.evictOldestOf(perUser.get(ownerId));
+            return;
+        }
         if (this.transports.size < this.maxSessions) {
             return;
         }
+        let largest;
+        for (const owned of perUser.values()) {
+            if (!largest || owned.length > largest.length) {
+                largest = owned;
+            }
+        }
+        this.evictOldestOf(largest);
+    }
+    evictOldestOf(sessionIds) {
         let oldestKey;
         let oldest = Infinity;
-        for (const [key, value] of this.transports) {
-            if (value.lastUsed < oldest) {
+        for (const key of sessionIds ?? []) {
+            const value = this.transports.get(key);
+            if (value && value.lastUsed < oldest) {
                 oldest = value.lastUsed;
                 oldestKey = key;
             }
         }
-        if (oldestKey) {
-            const evicted = this.transports.get(oldestKey);
-            this.transports.delete(oldestKey);
-            try {
-                evicted?.transport.close?.();
-            }
-            catch {
-            }
+        if (!oldestKey) {
+            return;
+        }
+        const evicted = this.transports.get(oldestKey);
+        this.transports.delete(oldestKey);
+        this.releaseSession(oldestKey);
+        try {
+            evicted?.transport.close?.();
+        }
+        catch {
         }
     }
 };
@@ -187,7 +315,9 @@ exports.CoreAiMcpController = CoreAiMcpController = CoreAiMcpController_1 = __de
     (0, swagger_1.ApiExcludeController)(),
     (0, common_1.Controller)('ai/mcp'),
     (0, roles_decorator_1.Roles)(role_enum_1.RoleEnum.S_EVERYONE),
+    __param(2, (0, common_1.Optional)()),
     __metadata("design:paramtypes", [core_ai_mcp_service_1.CoreAiMcpService,
-        core_ai_mcp_oauth_service_1.CoreAiMcpOAuthService])
+        core_ai_mcp_oauth_service_1.CoreAiMcpOAuthService,
+        core_redis_service_1.CoreRedisService])
 ], CoreAiMcpController);
 //# sourceMappingURL=core-ai-mcp.controller.js.map

package/dist/core/modules/ai/core-ai-mcp.controller.js.map

@@ -1 +1 @@
-{"version":3,"file":"core-ai-mcp.controller.js","sourceRoot":"","sources":["../../../../src/core/modules/ai/core-ai-mcp.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAAiF;AACjF,6CAAuD;AAGvD,6EAAgE;AAChE,4DAAwD;AACxD,yEAAqE;AACrE,oFAA8E;AAC9E,2DAAsD;AACtD,oFAA6E;AAC7E,wEAAkE;AAsB3D,IAAM,mBAAmB,2BAAzB,MAAM,mBAAmB;IAUX;IACA;IAVA,MAAM,GAAG,IAAI,eAAM,CAAC,qBAAmB,CAAC,IAAI,CAAC,CAAC;IAGhD,UAAU,GAAG,IAAI,GAAG,EAAgD,CAAC;IAGrE,WAAW,GAAG,GAAG,CAAC;IAEnC,YACmB,UAA4B,EAC5B,YAAmC;QADnC,eAAU,GAAV,UAAU,CAAkB;QAC5B,iBAAY,GAAZ,YAAY,CAAuB;IACnD,CAAC;IAGE,AAAN,KAAK,CAAC,UAAU,CAAQ,GAAY,EAAS,GAAa;QACxD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC;YACd,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAC5B,OAAO;QACT,CAAC;QAED,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAuB,CAAC;QACtE,IAAI,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAEnE,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,IAAI,6BAAkC,CAAC;YACvC,IAAI,CAAC;gBACH,CAAC,EAAE,6BAA6B,EAAE,GAAG,2CAAa,oDAAoD,EAAC,CAAC,CAAC;YAC3G,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBAQb,OAAO,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,GAAY,CAAC,CAAC;YAChD,CAAC;YACD,MAAM,EAAE,UAAU,EAAE,GAAG,2CAAa,aAAa,EAAC,CAAC;YACnD,MAAM,SAAS,GAAQ,IAAI,6BAA6B,CAAC,EAAE,kBAAkB,EAAE,GAAG,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;YACrG,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;YACxD,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAIhC,SAAS,CAAC,OAAO,GAAG,GAAG,EAAE;gBACvB,IAAI,SAAS,CAAC,SAAS,EAAE,CAAC;oBACxB,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;gBAC9C,CAAC;YACH,CAAC,CAAC;YACF,KAAK,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,CAAC;QAC9C,CAAC;QAED,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC5B,MAAM,KAAK,CAAC,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QAGxD,IAAI,KAAK,CAAC,SAAS,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC;YACjF,IAAI,CAAC,aAAa,EAAE,CAAC;YACrB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAGK,AAAN,KAAK,CAAC,SAAS,CAAQ,GAAY,EAAS,GAAa;QACvD,MAAM,IAAI,CAAC,oBAAoB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC5C,CAAC;IAGK,AAAN,KAAK,CAAC,YAAY,CAAQ,GAAY,EAAS,GAAa;QAC1D,MAAM,IAAI,CAAC,oBAAoB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC5C,CAAC;IAQS,KAAK,CAAC,WAAW,CAAC,GAAY;QACtC,MAAM,WAAW,GAAI,GAAW,CAAC,IAAI,CAAC;QACtC,IAAI,WAAW,EAAE,EAAE,EAAE,CAAC;YACpB,OAAO,WAAW,CAAC;QACrB,CAAC;QAED,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,aAAa,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAGpF,MAAM,YAAY,GAAG,8CAAoB,CAAC,uBAAuB,EAAE,CAAC;QACpE,IAAI,YAAY,EAAE,CAAC;YACjB,IAAI,CAAC;gBACH,MAAM,EAAE,KAAK,EAAE,GAAG,YAAY,CAAC,uBAAuB,CAAC,GAAG,CAAC,CAAC;gBAC5D,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,MAAM,YAAY,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;gBACxE,IAAI,IAAI,EAAE,EAAE,EAAE,CAAC;oBACb,OAAO,IAAI,CAAC;gBACd,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;YAET,CAAC;QACH,CAAC;QAGD,IAAI,MAAM,IAAI,IAAI,CAAC,YAAY,EAAE,EAAE,CAAC;YAClC,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;YAC5D,IAAI,OAAO,EAAE,GAAG,EAAE,CAAC;gBACjB,OAAO,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACjD,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAKS,YAAY;QACpB,MAAM,GAAG,GAAG,8BAAa,CAAC,GAAG,CAAsB,QAAQ,CAAC,CAAC;QAC7D,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,EAAE,KAAK,KAAK,IAAI,CAAC;IACxD,CAAC;IAKO,KAAK,CAAC,oBAAoB,CAAC,GAAY,EAAE,GAAa;QAC5D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC;YACd,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAC5B,OAAO;QACT,CAAC;QACD,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAuB,CAAC;QACtE,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACrE,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAC,CAAC;YAClE,OAAO;QACT,CAAC;QACD,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC5B,MAAM,KAAK,CAAC,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAG,GAAW,CAAC,IAAI,CAAC,CAAC;IACnE,CAAC;IAoBO,cAAc,CAAC,GAAa,EAAE,GAAU;QAC9C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,0BAA0B,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACnB,KAAK,EACH,GAAG,uBAAS,CAAC,mBAAmB,6BAA6B;gBAC7D,6EAA6E;gBAC7E,kFAAkF;gBAClF,8EAA8E;YAChF,UAAU,EAAE,GAAG;SAChB,CAAC,CAAC;IACL,CAAC;IAKO,YAAY,CAAC,GAAY,EAAE,GAAa;QAC9C,MAAM,OAAO,GAAG,GAAG,GAAG,CAAC,QAAQ,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QACvD,GAAG;aACA,MAAM,CAAC,GAAG,CAAC;aACX,GAAG,CAAC,EAAE,kBAAkB,EAAE,6BAA6B,OAAO,UAAU,EAAE,CAAC;aAC3E,IAAI,CAAC,EAAE,KAAK,EAAE,gDAAgD,EAAE,CAAC,CAAC;IACvE,CAAC;IAKO,aAAa;QACnB,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;YAC5C,OAAO;QACT,CAAC;QACD,IAAI,SAA6B,CAAC;QAClC,IAAI,MAAM,GAAG,QAAQ,CAAC;QACtB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YAC3C,IAAI,KAAK,CAAC,QAAQ,GAAG,MAAM,EAAE,CAAC;gBAC5B,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC;gBACxB,SAAS,GAAG,GAAG,CAAC;YAClB,CAAC;QACH,CAAC;QACD,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAC/C,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAClC,IAAI,CAAC;gBACH,OAAO,EAAE,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC;YAC/B,CAAC;YAAC,MAAM,CAAC;YAET,CAAC;QACH,CAAC;IACH,CAAC;CACF,CAAA;AA9MY,kDAAmB;AAexB;IADL,IAAA,aAAI,GAAE;IACW,WAAA,IAAA,YAAG,GAAE,CAAA;IAAgB,WAAA,IAAA,YAAG,GAAE,CAAA;;;;qDA+C3C;AAGK;IADL,IAAA,YAAG,GAAE;IACW,WAAA,IAAA,YAAG,GAAE,CAAA;IAAgB,WAAA,IAAA,YAAG,GAAE,CAAA;;;;oDAE1C;AAGK;IADL,IAAA,eAAM,GAAE;IACW,WAAA,IAAA,YAAG,GAAE,CAAA;IAAgB,WAAA,IAAA,YAAG,GAAE,CAAA;;;;uDAE7C;8BAxEU,mBAAmB;IAH/B,IAAA,8BAAoB,GAAE;IACtB,IAAA,mBAAU,EAAC,QAAQ,CAAC;IACpB,IAAA,uBAAK,EAAC,oBAAQ,CAAC,UAAU,CAAC;qCAWM,sCAAgB;QACd,iDAAqB;GAX3C,mBAAmB,CA8M/B"}
+{"version":3,"file":"core-ai-mcp.controller.js","sourceRoot":"","sources":["../../../../src/core/modules/ai/core-ai-mcp.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAA4G;AAC5G,6CAAuD;AAEvD,qCAAmC;AAEnC,6EAAgE;AAChE,4DAAwD;AACxD,yEAAqE;AACrE,iFAA4E;AAC5E,oFAA8E;AAC9E,2DAAsD;AACtD,oFAA6E;AAC7E,wEAAkE;AAoC3D,IAAM,mBAAmB,2BAAzB,MAAM,mBAAmB;IAsCX;IACA;IACc;IAvCd,MAAM,GAAG,IAAI,eAAM,CAAC,qBAAmB,CAAC,IAAI,CAAC,CAAC;IAYhD,UAAU,GAAG,IAAI,GAAG,EAAiE,CAAC;IAStF,kBAAkB,GAAG,EAAE,CAAC;IAGxB,WAAW,GAAG,GAAG,CAAC;IAGhB,UAAU,GAAG,GAAG,IAAA,kBAAQ,GAAE,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAO5C,iBAAiB,GAAG,IAAI,CAAC;IAE5C,YACmB,UAA4B,EAC5B,YAAmC,EACrB,YAA+B;QAF7C,eAAU,GAAV,UAAU,CAAkB;QAC5B,iBAAY,GAAZ,YAAY,CAAuB;QACrB,iBAAY,GAAZ,YAAY,CAAmB;IAC7D,CAAC;IAGE,AAAN,KAAK,CAAC,UAAU,CAAQ,GAAY,EAAS,GAAa;QACxD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC;YACd,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAC5B,OAAO;QACT,CAAC;QAED,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAuB,CAAC;QACtE,IAAI,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAKnE,IAAI,KAAK,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI,CAAC,EAAE,EAAE,CAAC;YACvC,KAAK,GAAG,SAAS,CAAC;YAClB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAC,CAAC;YAClE,OAAO;QACT,CAAC;QAED,IAAI,CAAC,KAAK,IAAI,SAAS,EAAE,CAAC;YACxB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;YACjE,IAAI,KAAK,EAAE,CAAC;gBACV,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;gBAChC,OAAO;YACT,CAAC;QACH,CAAC;QAED,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,IAAI,6BAAkC,CAAC;YACvC,IAAI,CAAC;gBACH,CAAC,EAAE,6BAA6B,EAAE,GAAG,2CAAa,oDAAoD,EAAC,CAAC,CAAC;YAC3G,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBAQb,OAAO,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,GAAY,CAAC,CAAC;YAChD,CAAC;YACD,MAAM,EAAE,UAAU,EAAE,GAAG,2CAAa,aAAa,EAAC,CAAC;YACnD,MAAM,SAAS,GAAQ,IAAI,6BAA6B,CAAC,EAAE,kBAAkB,EAAE,GAAG,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;YACrG,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;YACxD,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAIhC,SAAS,CAAC,OAAO,GAAG,GAAG,EAAE;gBACvB,IAAI,SAAS,CAAC,SAAS,EAAE,CAAC;oBACxB,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;oBAC5C,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;gBAC3C,CAAC;YACH,CAAC,CAAC;YACF,KAAK,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,CAAC;QAChE,CAAC;QAED,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC5B,MAAM,KAAK,CAAC,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QAGxD,IAAI,KAAK,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC;YAC9B,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC;gBACpD,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBAC5B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YACxD,CAAC;YAED,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAGK,AAAN,KAAK,CAAC,SAAS,CAAQ,GAAY,EAAS,GAAa;QACvD,MAAM,IAAI,CAAC,oBAAoB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC5C,CAAC;IAGK,AAAN,KAAK,CAAC,YAAY,CAAQ,GAAY,EAAS,GAAa;QAC1D,MAAM,IAAI,CAAC,oBAAoB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC5C,CAAC;IAQS,KAAK,CAAC,WAAW,CAAC,GAAY;QACtC,MAAM,WAAW,GAAI,GAAW,CAAC,IAAI,CAAC;QACtC,IAAI,WAAW,EAAE,EAAE,EAAE,CAAC;YACpB,OAAO,WAAW,CAAC;QACrB,CAAC;QAED,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,aAAa,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAGpF,MAAM,YAAY,GAAG,8CAAoB,CAAC,uBAAuB,EAAE,CAAC;QACpE,IAAI,YAAY,EAAE,CAAC;YACjB,IAAI,CAAC;gBACH,MAAM,EAAE,KAAK,EAAE,GAAG,YAAY,CAAC,uBAAuB,CAAC,GAAG,CAAC,CAAC;gBAC5D,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,MAAM,YAAY,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;gBACxE,IAAI,IAAI,EAAE,EAAE,EAAE,CAAC;oBACb,OAAO,IAAI,CAAC;gBACd,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;YAET,CAAC;QACH,CAAC;QAGD,IAAI,MAAM,IAAI,IAAI,CAAC,YAAY,EAAE,EAAE,CAAC;YAClC,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;YAC5D,IAAI,OAAO,EAAE,GAAG,EAAE,CAAC;gBACjB,OAAO,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACjD,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAKS,YAAY;QACpB,MAAM,GAAG,GAAG,8BAAa,CAAC,GAAG,CAAsB,QAAQ,CAAC,CAAC;QAC7D,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,EAAE,KAAK,KAAK,IAAI,CAAC;IACxD,CAAC;IAKO,KAAK,CAAC,oBAAoB,CAAC,GAAY,EAAE,GAAa;QAC5D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC;YACd,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAC5B,OAAO;QACT,CAAC;QACD,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAuB,CAAC;QACtE,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAEpE,MAAM,KAAK,GAAG,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QAClE,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,mBAAmB,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACzF,IAAI,KAAK,EAAE,CAAC;gBACV,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;gBAChC,OAAO;YACT,CAAC;YACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAC,CAAC;YAClE,OAAO;QACT,CAAC;QACD,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC5B,IAAI,CAAC,eAAe,CAAC,SAAmB,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QACnD,MAAM,KAAK,CAAC,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAG,GAAW,CAAC,IAAI,CAAC,CAAC;IACnE,CAAC;IAeS,KAAK,CAAC,mBAAmB,CAAC,SAAiB,EAAE,MAAc;QACnE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,OAAO,EAAE,CAAC;YAChC,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;YAChF,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;YAC1C,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,CAAC,UAAU,EAAE,CAAC;gBAC9E,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,OAAO,KAAK,CAAC,UAAU,CAAC;QAC1B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,uCAAwC,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YACnF,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IASS,iBAAiB,CAAC,GAAkB;QAC5C,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC/B,OAAO,MAAM,EAAE,UAAU,IAAI,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QACnE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAGS,eAAe,CAAC,SAAiB,EAAE,MAAc;QACzD,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,OAAO,EAAE,CAAC;YAChC,OAAO;QACT,CAAC;QACD,IAAI,CAAC,YAAY;aACd,SAAS,EAAE;aACX,GAAG,CACF,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAC1B,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC,EACvD,IAAI,EACJ,IAAI,CAAC,iBAAiB,CACvB;aACA,KAAK,CAAC,CAAC,GAAU,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sCAAsC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACnG,CAAC;IAGS,cAAc,CAAC,SAAiB;QACxC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,OAAO,EAAE,CAAC;YAChC,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QAC3B,CAAC;QACD,OAAO,IAAI,CAAC,YAAY;aACrB,SAAS,EAAE;aACX,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;aAC/B,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC;aACrB,KAAK,CAAC,CAAC,GAAU,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,uCAAuC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACpG,CAAC;IAWD,KAAK,CAAC,eAAe;QACnB,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC;QAC7C,KAAK,MAAM,CAAC,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACxC,IAAI,CAAC;gBACH,MAAM,KAAK,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,CAAC;YACnC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,+BAA+B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;YACzG,CAAC;QACH,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACxB,MAAM,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IACxF,CAAC;IAES,UAAU,CAAC,SAAiB;QACpC,OAAO,IAAI,CAAC,YAAa,CAAC,GAAG,CAAC,gBAAgB,EAAE,SAAS,CAAC,CAAC;IAC7D,CAAC;IAOS,cAAc,CAAC,GAAa,EAAE,KAAa;QACnD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACnB,KAAK,EACH,mDAAmD,KAAK,uBAAuB,IAAI,CAAC,UAAU,IAAI;gBAClG,+FAA+F;gBAC/F,wEAAwE;YAC1E,UAAU,EAAE,GAAG;SAChB,CAAC,CAAC;IACL,CAAC;IAoBO,cAAc,CAAC,GAAa,EAAE,GAAU;QAC9C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,0BAA0B,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACnB,KAAK,EACH,GAAG,uBAAS,CAAC,mBAAmB,6BAA6B;gBAC7D,6EAA6E;gBAC7E,kFAAkF;gBAClF,8EAA8E;YAChF,UAAU,EAAE,GAAG;SAChB,CAAC,CAAC;IACL,CAAC;IAKO,YAAY,CAAC,GAAY,EAAE,GAAa;QAC9C,MAAM,OAAO,GAAG,GAAG,GAAG,CAAC,QAAQ,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QACvD,GAAG;aACA,MAAM,CAAC,GAAG,CAAC;aACX,GAAG,CAAC,EAAE,kBAAkB,EAAE,6BAA6B,OAAO,UAAU,EAAE,CAAC;aAC3E,IAAI,CAAC,EAAE,KAAK,EAAE,gDAAgD,EAAE,CAAC,CAAC;IACvE,CAAC;IAWO,aAAa,CAAC,OAAe;QACnC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAoB,CAAC;QAC5C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YAC3C,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACzC,IAAI,KAAK,EAAE,CAAC;gBACV,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAClB,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YACpC,CAAC;QACH,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACnE,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;YACzC,OAAO;QACT,CAAC;QAED,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;YAC5C,OAAO;QACT,CAAC;QAED,IAAI,OAA6B,CAAC;QAClC,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YACrC,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;gBAC9C,OAAO,GAAG,KAAK,CAAC;YAClB,CAAC;QACH,CAAC;QACD,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;IAC9B,CAAC;IAKO,aAAa,CAAC,UAAgC;QACpD,IAAI,SAA6B,CAAC;QAClC,IAAI,MAAM,GAAG,QAAQ,CAAC;QACtB,KAAK,MAAM,GAAG,IAAI,UAAU,IAAI,EAAE,EAAE,CAAC;YACnC,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACvC,IAAI,KAAK,IAAI,KAAK,CAAC,QAAQ,GAAG,MAAM,EAAE,CAAC;gBACrC,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC;gBACxB,SAAS,GAAG,GAAG,CAAC;YAClB,CAAC;QACH,CAAC;QACD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO;QACT,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC/C,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAClC,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;QAC/B,IAAI,CAAC;YACH,OAAO,EAAE,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;QAET,CAAC;IACH,CAAC;CACF,CAAA;AAraY,kDAAmB;AA4CxB;IADL,IAAA,aAAI,GAAE;IACW,WAAA,IAAA,YAAG,GAAE,CAAA;IAAgB,WAAA,IAAA,YAAG,GAAE,CAAA;;;;qDAqE3C;AAGK;IADL,IAAA,YAAG,GAAE;IACW,WAAA,IAAA,YAAG,GAAE,CAAA;IAAgB,WAAA,IAAA,YAAG,GAAE,CAAA;;;;oDAE1C;AAGK;IADL,IAAA,eAAM,GAAE;IACW,WAAA,IAAA,YAAG,GAAE,CAAA;IAAgB,WAAA,IAAA,YAAG,GAAE,CAAA;;;;uDAE7C;8BA3HU,mBAAmB;IAH/B,IAAA,8BAAoB,GAAE;IACtB,IAAA,mBAAU,EAAC,QAAQ,CAAC;IACpB,IAAA,uBAAK,EAAC,oBAAQ,CAAC,UAAU,CAAC;IAyCtB,WAAA,IAAA,iBAAQ,GAAE,CAAA;qCAFkB,sCAAgB;QACd,iDAAqB;QACN,qCAAgB;GAxCrD,mBAAmB,CAqa/B"}

package/dist/core/modules/ai/services/core-ai.service.d.ts

@@ -1,5 +1,7 @@
 import { Logger } from '@nestjs/common';
 import { ServiceOptions } from '../../../common/interfaces/service-options.interface';
+import { CoreRedisService } from '../../../common/services/core-redis.service';
+import { RateLimitStore } from '../../../common/services/rate-limit-store';
 import { AiToolAuthorization, AiToolContext, IAiTool } from '../interfaces/ai-tool.interface';
 import { LlmMessage, LlmResponse, LlmToolCall } from '../interfaces/llm-provider.interface';
 import { ResolvedAiConnection } from '../interfaces/resolved-ai-connection.interface';
@@ -63,9 +65,10 @@ export declare class CoreAiService {
     protected readonly toolPolicyService?: CoreAiToolPolicyService;
     protected readonly modeService?: CoreAiModeService;
     protected readonly placeholderRegistry?: CoreAiPlaceholderRegistry;
+    protected readonly coreRedisService?: CoreRedisService;
     protected readonly logger: Logger;
-    private readonly rateBuckets;
-    constructor(connectionService: CoreAiConnectionService, providerFactory: LlmProviderFactory, toolRegistry: AiToolRegistry, promptBuilder: CoreAiPromptBuilderService, interactionService?: CoreAiInteractionService, conversationService?: CoreAiConversationService, budgetService?: CoreAiBudgetService, connectionResolver?: CoreAiConnectionResolverService, hintService?: CoreAiPromptHintService, toolGrantService?: CoreAiToolGrantService, hookRegistry?: AiHookRegistry, toolPolicyService?: CoreAiToolPolicyService, modeService?: CoreAiModeService, placeholderRegistry?: CoreAiPlaceholderRegistry);
+    protected rateLimitStore?: RateLimitStore;
+    constructor(connectionService: CoreAiConnectionService, providerFactory: LlmProviderFactory, toolRegistry: AiToolRegistry, promptBuilder: CoreAiPromptBuilderService, interactionService?: CoreAiInteractionService, conversationService?: CoreAiConversationService, budgetService?: CoreAiBudgetService, connectionResolver?: CoreAiConnectionResolverService, hintService?: CoreAiPromptHintService, toolGrantService?: CoreAiToolGrantService, hookRegistry?: AiHookRegistry, toolPolicyService?: CoreAiToolPolicyService, modeService?: CoreAiModeService, placeholderRegistry?: CoreAiPlaceholderRegistry, coreRedisService?: CoreRedisService);
     prompt(input: CoreAiPromptInput, serviceOptions: ServiceOptions): Promise<CoreAiResponse>;
     protected resolvePromptPlaceholders(input: CoreAiPromptInput, serviceOptions: ServiceOptions): Promise<CoreAiPromptInput>;
     protected unavailableResponse(input: CoreAiPromptInput, language?: string): CoreAiResponse;
@@ -100,6 +103,8 @@ export declare class CoreAiService {
     }): AiInteractionRecord;
     protected audit(record: AiInteractionRecord): Promise<void>;
     protected checkRateLimit(userId?: string): Promise<void>;
+    protected getRateLimitStore(): RateLimitStore;
+    onModuleDestroy(): void;
     protected executeToolCall(call: LlmToolCall, availableTools: IAiTool[], context: AiToolContext, input?: CoreAiPromptInput): Promise<CoreAiAction>;
     protected extractToolCalls(text: string): LlmToolCall[] | undefined;
     protected extractJsonObject(text: string): any | null;