@lobu/core 2.8.0

package/dist/utils/env.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Get required environment variable
+ * Throws ConfigError if not set
+ */
+export declare function getRequiredEnv(name: string): string;
+/**
+ * Get optional environment variable with default
+ */
+export declare function getOptionalEnv(name: string, defaultValue: string): string;
+/**
+ * Get optional number environment variable with default
+ * Throws ConfigError if value is not a valid number
+ */
+export declare function getOptionalNumber(name: string, defaultValue: number): number;
+/**
+ * Get optional boolean environment variable with default
+ * Accepts "true", "1", "yes" as truthy values
+ */
+export declare function getOptionalBoolean(name: string, defaultValue: boolean): boolean;
+//# sourceMappingURL=env.d.ts.map

package/dist/utils/env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../src/utils/env.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAMnD;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM,CAEzE;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM,CAU5E;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,MAAM,EACZ,YAAY,EAAE,OAAO,GACpB,OAAO,CAKT"}

package/dist/utils/env.js

@@ -0,0 +1,50 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getRequiredEnv = getRequiredEnv;
+exports.getOptionalEnv = getOptionalEnv;
+exports.getOptionalNumber = getOptionalNumber;
+exports.getOptionalBoolean = getOptionalBoolean;
+const errors_1 = require("../errors");
+/**
+ * Get required environment variable
+ * Throws ConfigError if not set
+ */
+function getRequiredEnv(name) {
+    const value = process.env[name];
+    if (!value) {
+        throw new errors_1.ConfigError(`Missing required environment variable: ${name}`);
+    }
+    return value;
+}
+/**
+ * Get optional environment variable with default
+ */
+function getOptionalEnv(name, defaultValue) {
+    return process.env[name] || defaultValue;
+}
+/**
+ * Get optional number environment variable with default
+ * Throws ConfigError if value is not a valid number
+ */
+function getOptionalNumber(name, defaultValue) {
+    const value = process.env[name];
+    if (!value)
+        return defaultValue;
+    const parsed = parseInt(value, 10);
+    if (Number.isNaN(parsed)) {
+        throw new errors_1.ConfigError(`Invalid number for ${name}: ${value} (expected integer)`);
+    }
+    return parsed;
+}
+/**
+ * Get optional boolean environment variable with default
+ * Accepts "true", "1", "yes" as truthy values
+ */
+function getOptionalBoolean(name, defaultValue) {
+    const value = process.env[name];
+    if (!value)
+        return defaultValue;
+    const lower = value.toLowerCase();
+    return lower === "true" || lower === "1" || lower === "yes";
+}
+//# sourceMappingURL=env.js.map

package/dist/utils/env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.js","sourceRoot":"","sources":["../../src/utils/env.ts"],"names":[],"mappings":";;AAMA,wCAMC;AAKD,wCAEC;AAMD,8CAUC;AAMD,gDAQC;AAjDD,sCAAwC;AAExC;;;GAGG;AACH,SAAgB,cAAc,CAAC,IAAY;IACzC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,oBAAW,CAAC,0CAA0C,IAAI,EAAE,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,SAAgB,cAAc,CAAC,IAAY,EAAE,YAAoB;IAC/D,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,YAAY,CAAC;AAC3C,CAAC;AAED;;;GAGG;AACH,SAAgB,iBAAiB,CAAC,IAAY,EAAE,YAAoB;IAClE,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,CAAC,KAAK;QAAE,OAAO,YAAY,CAAC;IAChC,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACnC,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,oBAAW,CACnB,sBAAsB,IAAI,KAAK,KAAK,qBAAqB,CAC1D,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,SAAgB,kBAAkB,CAChC,IAAY,EACZ,YAAqB;IAErB,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,CAAC,KAAK;QAAE,OAAO,YAAY,CAAC;IAChC,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;IAClC,OAAO,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,KAAK,CAAC;AAC9D,CAAC"}

package/dist/utils/json.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Safely parse JSON string
+ * Returns null on parse failure instead of throwing
+ */
+export declare function safeJsonParse<T = unknown>(data: string, fallback?: T | null): T | null;
+/**
+ * Safely stringify value to JSON
+ * Returns null on stringify failure instead of throwing
+ */
+export declare function safeJsonStringify(value: unknown): string | null;
+//# sourceMappingURL=json.d.ts.map

package/dist/utils/json.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"json.d.ts","sourceRoot":"","sources":["../../src/utils/json.ts"],"names":[],"mappings":"AAIA;;;GAGG;AACH,wBAAgB,aAAa,CAAC,CAAC,GAAG,OAAO,EACvC,IAAI,EAAE,MAAM,EACZ,QAAQ,GAAE,CAAC,GAAG,IAAW,GACxB,CAAC,GAAG,IAAI,CAUV;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAS/D"}

package/dist/utils/json.js

@@ -0,0 +1,38 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.safeJsonParse = safeJsonParse;
+exports.safeJsonStringify = safeJsonStringify;
+const logger_1 = require("../logger");
+const logger = (0, logger_1.createLogger)("json-utils");
+/**
+ * Safely parse JSON string
+ * Returns null on parse failure instead of throwing
+ */
+function safeJsonParse(data, fallback = null) {
+    try {
+        return JSON.parse(data);
+    }
+    catch (error) {
+        logger.debug("JSON parse failed", {
+            error: error instanceof Error ? error.message : String(error),
+            dataPreview: data.substring(0, 100),
+        });
+        return fallback;
+    }
+}
+/**
+ * Safely stringify value to JSON
+ * Returns null on stringify failure instead of throwing
+ */
+function safeJsonStringify(value) {
+    try {
+        return JSON.stringify(value);
+    }
+    catch (error) {
+        logger.error("JSON stringify failed", {
+            error: error instanceof Error ? error.message : String(error),
+        });
+        return null;
+    }
+}
+//# sourceMappingURL=json.js.map

package/dist/utils/json.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"json.js","sourceRoot":"","sources":["../../src/utils/json.ts"],"names":[],"mappings":";;AAQA,sCAaC;AAMD,8CASC;AApCD,sCAAyC;AAEzC,MAAM,MAAM,GAAG,IAAA,qBAAY,EAAC,YAAY,CAAC,CAAC;AAE1C;;;GAGG;AACH,SAAgB,aAAa,CAC3B,IAAY,EACZ,WAAqB,IAAI;IAEzB,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAM,CAAC;IAC/B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,mBAAmB,EAAE;YAChC,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;YAC7D,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC;SACpC,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC;IAClB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAgB,iBAAiB,CAAC,KAAc;IAC9C,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,uBAAuB,EAAE;YACpC,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC9D,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/utils/lock.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Async lock for serializing concurrent operations
+ * Prevents race conditions in async code by ensuring only one operation runs at a time
+ *
+ * @example
+ * ```typescript
+ * class StreamSession {
+ *   private streamLock = new AsyncLock();
+ *
+ *   async appendDelta(delta: string) {
+ *     return this.streamLock.acquire(() => this.appendDeltaUnsafe(delta));
+ *   }
+ *
+ *   private async appendDeltaUnsafe(delta: string) {
+ *     // Critical section - only one execution at a time
+ *   }
+ * }
+ * ```
+ */
+export declare class AsyncLock {
+    private lock;
+    private lockContext;
+    constructor(context?: string);
+    /**
+     * Acquire lock and execute function exclusively
+     *
+     * @param fn - The async function to execute with exclusive access
+     * @param timeoutMs - Maximum time to wait for lock acquisition (default: 30s)
+     * @returns The result of the function
+     * @throws Error if lock acquisition times out
+     */
+    acquire<T>(fn: () => Promise<T>, timeoutMs?: number): Promise<T>;
+}
+//# sourceMappingURL=lock.d.ts.map

package/dist/utils/lock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lock.d.ts","sourceRoot":"","sources":["../../src/utils/lock.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,qBAAa,SAAS;IACpB,OAAO,CAAC,IAAI,CAAoC;IAChD,OAAO,CAAC,WAAW,CAAS;gBAEhB,OAAO,GAAE,MAAkB;IAIvC;;;;;;;OAOG;IACG,OAAO,CAAC,CAAC,EACb,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EACpB,SAAS,GAAE,MAAc,GACxB,OAAO,CAAC,CAAC,CAAC;CAoCd"}

package/dist/utils/lock.js

@@ -0,0 +1,66 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AsyncLock = void 0;
+/**
+ * Async lock for serializing concurrent operations
+ * Prevents race conditions in async code by ensuring only one operation runs at a time
+ *
+ * @example
+ * ```typescript
+ * class StreamSession {
+ *   private streamLock = new AsyncLock();
+ *
+ *   async appendDelta(delta: string) {
+ *     return this.streamLock.acquire(() => this.appendDeltaUnsafe(delta));
+ *   }
+ *
+ *   private async appendDeltaUnsafe(delta: string) {
+ *     // Critical section - only one execution at a time
+ *   }
+ * }
+ * ```
+ */
+class AsyncLock {
+    constructor(context = "unknown") {
+        this.lock = Promise.resolve();
+        this.lockContext = context;
+    }
+    /**
+     * Acquire lock and execute function exclusively
+     *
+     * @param fn - The async function to execute with exclusive access
+     * @param timeoutMs - Maximum time to wait for lock acquisition (default: 30s)
+     * @returns The result of the function
+     * @throws Error if lock acquisition times out
+     */
+    async acquire(fn, timeoutMs = 30000) {
+        const currentLock = this.lock;
+        let releaseLock;
+        // Create new lock that will be released when fn completes
+        this.lock = new Promise((resolve) => {
+            releaseLock = resolve;
+        });
+        let timeoutId;
+        try {
+            // Wait for previous operation with timeout to prevent deadlock
+            const lockTimeout = new Promise((_, reject) => {
+                timeoutId = setTimeout(() => {
+                    reject(new Error(`Lock acquisition timeout after ${timeoutMs}ms - possible deadlock in ${this.lockContext}`));
+                }, timeoutMs);
+            });
+            await Promise.race([currentLock, lockTimeout]);
+            // Execute function with exclusive access
+            return await fn();
+        }
+        finally {
+            // Clear the timeout to prevent leak
+            if (timeoutId !== undefined) {
+                clearTimeout(timeoutId);
+            }
+            // Always release lock, even on error
+            releaseLock?.();
+        }
+    }
+}
+exports.AsyncLock = AsyncLock;
+//# sourceMappingURL=lock.js.map

package/dist/utils/lock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lock.js","sourceRoot":"","sources":["../../src/utils/lock.ts"],"names":[],"mappings":";;;AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAa,SAAS;IAIpB,YAAY,UAAkB,SAAS;QAH/B,SAAI,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;QAI9C,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC;IAC7B,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,OAAO,CACX,EAAoB,EACpB,YAAoB,KAAK;QAEzB,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC;QAC9B,IAAI,WAAqC,CAAC;QAE1C,0DAA0D;QAC1D,IAAI,CAAC,IAAI,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YACxC,WAAW,GAAG,OAAO,CAAC;QACxB,CAAC,CAAC,CAAC;QAEH,IAAI,SAAoD,CAAC;QAEzD,IAAI,CAAC;YACH,+DAA+D;YAC/D,MAAM,WAAW,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;gBACnD,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;oBAC1B,MAAM,CACJ,IAAI,KAAK,CACP,kCAAkC,SAAS,6BAA6B,IAAI,CAAC,WAAW,EAAE,CAC3F,CACF,CAAC;gBACJ,CAAC,EAAE,SAAS,CAAC,CAAC;YAChB,CAAC,CAAC,CAAC;YAEH,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC;YAE/C,yCAAyC;YACzC,OAAO,MAAM,EAAE,EAAE,CAAC;QACpB,CAAC;gBAAS,CAAC;YACT,oCAAoC;YACpC,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,YAAY,CAAC,SAAS,CAAC,CAAC;YAC1B,CAAC;YACD,qCAAqC;YACrC,WAAW,EAAE,EAAE,CAAC;QAClB,CAAC;IACH,CAAC;CACF;AAvDD,8BAuDC"}

package/dist/utils/mcp-tool-instructions.d.ts

@@ -0,0 +1,6 @@
+export interface McpToolDef {
+    name: string;
+    description?: string;
+    inputSchema?: Record<string, unknown>;
+}
+//# sourceMappingURL=mcp-tool-instructions.d.ts.map

package/dist/utils/mcp-tool-instructions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-tool-instructions.d.ts","sourceRoot":"","sources":["../../src/utils/mcp-tool-instructions.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACvC"}

package/dist/utils/mcp-tool-instructions.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=mcp-tool-instructions.js.map

package/dist/utils/mcp-tool-instructions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-tool-instructions.js","sourceRoot":"","sources":["../../src/utils/mcp-tool-instructions.ts"],"names":[],"mappings":""}

package/dist/utils/retry.d.ts

@@ -0,0 +1,40 @@
+export interface RetryOptions {
+    maxRetries?: number;
+    baseDelay?: number;
+    strategy?: "exponential" | "linear";
+    jitter?: boolean;
+    onRetry?: (attempt: number, error: Error) => void;
+}
+/**
+ * Retry a function with configurable backoff strategy
+ *
+ * @param fn - The async function to retry
+ * @param options - Retry configuration
+ * @returns The result of the function
+ * @throws The last error if all retries fail
+ *
+ * @example
+ * ```typescript
+ * // Exponential backoff (default)
+ * const result = await retryWithBackoff(
+ *   () => fetch('https://api.example.com'),
+ *   { maxRetries: 3, baseDelay: 1000 }
+ * );
+ *
+ * // Linear backoff with jitter
+ * const result = await retryWithBackoff(
+ *   () => createDeployment(),
+ *   {
+ *     maxRetries: 3,
+ *     strategy: 'linear',
+ *     jitter: true,
+ *     baseDelay: 2000,
+ *     onRetry: (attempt, error) => {
+ *       logger.warn(`Attempt ${attempt} failed: ${error.message}`);
+ *     }
+ *   }
+ * );
+ * ```
+ */
+export declare function retryWithBackoff<T>(fn: () => Promise<T>, options?: RetryOptions): Promise<T>;
+//# sourceMappingURL=retry.d.ts.map

package/dist/utils/retry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"retry.d.ts","sourceRoot":"","sources":["../../src/utils/retry.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,YAAY;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,aAAa,GAAG,QAAQ,CAAC;IACpC,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;CACnD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,wBAAsB,gBAAgB,CAAC,CAAC,EACtC,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EACpB,OAAO,GAAE,YAAiB,GACzB,OAAO,CAAC,CAAC,CAAC,CA4CZ"}

package/dist/utils/retry.js

@@ -0,0 +1,67 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.retryWithBackoff = retryWithBackoff;
+const logger_1 = require("../logger");
+const logger = (0, logger_1.createLogger)("retry");
+/**
+ * Retry a function with configurable backoff strategy
+ *
+ * @param fn - The async function to retry
+ * @param options - Retry configuration
+ * @returns The result of the function
+ * @throws The last error if all retries fail
+ *
+ * @example
+ * ```typescript
+ * // Exponential backoff (default)
+ * const result = await retryWithBackoff(
+ *   () => fetch('https://api.example.com'),
+ *   { maxRetries: 3, baseDelay: 1000 }
+ * );
+ *
+ * // Linear backoff with jitter
+ * const result = await retryWithBackoff(
+ *   () => createDeployment(),
+ *   {
+ *     maxRetries: 3,
+ *     strategy: 'linear',
+ *     jitter: true,
+ *     baseDelay: 2000,
+ *     onRetry: (attempt, error) => {
+ *       logger.warn(`Attempt ${attempt} failed: ${error.message}`);
+ *     }
+ *   }
+ * );
+ * ```
+ */
+async function retryWithBackoff(fn, options = {}) {
+    const { maxRetries = 3, baseDelay = 1000, strategy = "exponential", jitter = false, onRetry, } = options;
+    let lastError;
+    for (let attempt = 0; attempt <= maxRetries; attempt++) {
+        try {
+            return await fn();
+        }
+        catch (error) {
+            lastError = error;
+            if (attempt < maxRetries) {
+                // Calculate delay based on strategy
+                const delay = strategy === "exponential"
+                    ? baseDelay * 2 ** attempt
+                    : baseDelay * (attempt + 1);
+                // Add jitter if requested (0-1000ms random)
+                const jitterMs = jitter ? Math.random() * 1000 : 0;
+                const finalDelay = delay + jitterMs;
+                // Notify caller of retry
+                if (onRetry) {
+                    onRetry(attempt + 1, lastError);
+                }
+                else {
+                    logger.warn(`Retry attempt ${attempt + 1}/${maxRetries} after ${Math.round(finalDelay)}ms`, { error: lastError.message });
+                }
+                await new Promise((resolve) => setTimeout(resolve, finalDelay));
+            }
+        }
+    }
+    throw lastError;
+}
+//# sourceMappingURL=retry.js.map

package/dist/utils/retry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"retry.js","sourceRoot":"","sources":["../../src/utils/retry.ts"],"names":[],"mappings":";;AA2CA,4CA+CC;AA1FD,sCAAyC;AAEzC,MAAM,MAAM,GAAG,IAAA,qBAAY,EAAC,OAAO,CAAC,CAAC;AAUrC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACI,KAAK,UAAU,gBAAgB,CACpC,EAAoB,EACpB,UAAwB,EAAE;IAE1B,MAAM,EACJ,UAAU,GAAG,CAAC,EACd,SAAS,GAAG,IAAI,EAChB,QAAQ,GAAG,aAAa,EACxB,MAAM,GAAG,KAAK,EACd,OAAO,GACR,GAAG,OAAO,CAAC;IAEZ,IAAI,SAA4B,CAAC;IAEjC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,UAAU,EAAE,OAAO,EAAE,EAAE,CAAC;QACvD,IAAI,CAAC;YACH,OAAO,MAAM,EAAE,EAAE,CAAC;QACpB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,SAAS,GAAG,KAAc,CAAC;YAE3B,IAAI,OAAO,GAAG,UAAU,EAAE,CAAC;gBACzB,oCAAoC;gBACpC,MAAM,KAAK,GACT,QAAQ,KAAK,aAAa;oBACxB,CAAC,CAAC,SAAS,GAAG,CAAC,IAAI,OAAO;oBAC1B,CAAC,CAAC,SAAS,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;gBAEhC,4CAA4C;gBAC5C,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;gBACnD,MAAM,UAAU,GAAG,KAAK,GAAG,QAAQ,CAAC;gBAEpC,yBAAyB;gBACzB,IAAI,OAAO,EAAE,CAAC;oBACZ,OAAO,CAAC,OAAO,GAAG,CAAC,EAAE,SAAS,CAAC,CAAC;gBAClC,CAAC;qBAAM,CAAC;oBACN,MAAM,CAAC,IAAI,CACT,iBAAiB,OAAO,GAAG,CAAC,IAAI,UAAU,UAAU,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,EAC9E,EAAE,KAAK,EAAE,SAAS,CAAC,OAAO,EAAE,CAC7B,CAAC;gBACJ,CAAC;gBAED,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC;YAClE,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,SAAS,CAAC;AAClB,CAAC"}

package/dist/utils/sanitize.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Sanitize filename to prevent path traversal attacks
+ * Removes directory separators and dangerous characters
+ *
+ * @param filename - The filename to sanitize
+ * @param maxLength - Maximum filename length (default: 255)
+ * @returns Safe filename
+ *
+ * @example
+ * ```typescript
+ * sanitizeFilename("../../etc/passwd") // "etc_passwd"
+ * sanitizeFilename("file<>|name.txt") // "file___name.txt"
+ * ```
+ */
+export declare function sanitizeFilename(filename: string, maxLength?: number): string;
+/**
+ * Sanitize conversation ID for filesystem usage
+ * Removes any characters that aren't safe for directory names
+ *
+ * @param conversationId - The conversation ID to sanitize
+ * @returns Safe conversation ID
+ *
+ * @example
+ * ```typescript
+ * sanitizeConversationId("1756766056.836119") // "1756766056.836119"
+ * sanitizeConversationId("thread/123/../456") // "thread_123___456"
+ * ```
+ */
+export declare function sanitizeConversationId(conversationId: string): string;
+/**
+ * Sanitize sensitive data from objects before logging
+ * Redacts API keys, tokens, and other credentials
+ *
+ * @param obj - Object to sanitize
+ * @param sensitiveKeys - Additional sensitive key names to redact
+ * @returns Sanitized object safe for logging
+ *
+ * @example
+ * ```typescript
+ * const config = {
+ *   apiKey: "secret-key-123",
+ *   timeout: 5000,
+ *   env: { TOKEN: "bearer-xyz" }
+ * };
+ *
+ * sanitizeForLogging(config)
+ * // {
+ * //   apiKey: "[REDACTED:14]",
+ * //   timeout: 5000,
+ * //   env: { TOKEN: "[REDACTED:10]" }
+ * // }
+ * ```
+ */
+export declare function sanitizeForLogging(obj: any, additionalSensitiveKeys?: string[]): any;
+//# sourceMappingURL=sanitize.d.ts.map

package/dist/utils/sanitize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitize.d.ts","sourceRoot":"","sources":["../../src/utils/sanitize.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,MAAM,EAChB,SAAS,GAAE,MAAY,GACtB,MAAM,CAiBR;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,sBAAsB,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,CAErE;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,GAAG,EACR,uBAAuB,GAAE,MAAM,EAAO,GACrC,GAAG,CA8CL"}

package/dist/utils/sanitize.js

@@ -0,0 +1,111 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.sanitizeFilename = sanitizeFilename;
+exports.sanitizeConversationId = sanitizeConversationId;
+exports.sanitizeForLogging = sanitizeForLogging;
+/**
+ * Sanitize filename to prevent path traversal attacks
+ * Removes directory separators and dangerous characters
+ *
+ * @param filename - The filename to sanitize
+ * @param maxLength - Maximum filename length (default: 255)
+ * @returns Safe filename
+ *
+ * @example
+ * ```typescript
+ * sanitizeFilename("../../etc/passwd") // "etc_passwd"
+ * sanitizeFilename("file<>|name.txt") // "file___name.txt"
+ * ```
+ */
+function sanitizeFilename(filename, maxLength = 255) {
+    // Remove any directory path components
+    const basename = filename.replace(/^.*[\\/]/, "");
+    // Remove null bytes and other dangerous characters
+    const sanitized = basename.replace(/[^\w\s.-]/g, "_");
+    // Prevent hidden files and parent directory references
+    const safe = sanitized.replace(/^\.+/, "").replace(/\.{2,}/g, ".");
+    // Ensure filename is not empty after sanitization
+    if (!safe || safe.length === 0) {
+        return "unnamed_file";
+    }
+    // Limit filename length
+    return safe.length > maxLength ? safe.substring(0, maxLength) : safe;
+}
+/**
+ * Sanitize conversation ID for filesystem usage
+ * Removes any characters that aren't safe for directory names
+ *
+ * @param conversationId - The conversation ID to sanitize
+ * @returns Safe conversation ID
+ *
+ * @example
+ * ```typescript
+ * sanitizeConversationId("1756766056.836119") // "1756766056.836119"
+ * sanitizeConversationId("thread/123/../456") // "thread_123___456"
+ * ```
+ */
+function sanitizeConversationId(conversationId) {
+    return conversationId.replace(/[^a-zA-Z0-9.-]/g, "_");
+}
+/**
+ * Sanitize sensitive data from objects before logging
+ * Redacts API keys, tokens, and other credentials
+ *
+ * @param obj - Object to sanitize
+ * @param sensitiveKeys - Additional sensitive key names to redact
+ * @returns Sanitized object safe for logging
+ *
+ * @example
+ * ```typescript
+ * const config = {
+ *   apiKey: "secret-key-123",
+ *   timeout: 5000,
+ *   env: { TOKEN: "bearer-xyz" }
+ * };
+ *
+ * sanitizeForLogging(config)
+ * // {
+ * //   apiKey: "[REDACTED:14]",
+ * //   timeout: 5000,
+ * //   env: { TOKEN: "[REDACTED:10]" }
+ * // }
+ * ```
+ */
+function sanitizeForLogging(obj, additionalSensitiveKeys = []) {
+    if (!obj || typeof obj !== "object") {
+        return obj;
+    }
+    const defaultSensitiveKeys = [
+        "anthropic_api_key",
+        "api_key",
+        "apiKey",
+        "token",
+        "password",
+        "secret",
+        "authorization",
+        "bearer",
+        "credentials",
+        "privateKey",
+        "private_key",
+    ];
+    const sensitiveKeys = [...defaultSensitiveKeys, ...additionalSensitiveKeys];
+    const sanitized = Array.isArray(obj) ? [...obj] : { ...obj };
+    for (const key in sanitized) {
+        const lowerKey = key.toLowerCase();
+        const isSensitive = sensitiveKeys.some((k) => lowerKey.includes(k));
+        if (isSensitive && typeof sanitized[key] === "string") {
+            // Redact but show length for debugging
+            sanitized[key] = `[REDACTED:${sanitized[key].length}]`;
+        }
+        else if (key === "env" && typeof sanitized[key] === "object") {
+            // Recursively sanitize env object
+            sanitized[key] = sanitizeForLogging(sanitized[key], additionalSensitiveKeys);
+        }
+        else if (typeof sanitized[key] === "object") {
+            // Recursively sanitize nested objects
+            sanitized[key] = sanitizeForLogging(sanitized[key], additionalSensitiveKeys);
+        }
+    }
+    return sanitized;
+}
+//# sourceMappingURL=sanitize.js.map

package/dist/utils/sanitize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitize.js","sourceRoot":"","sources":["../../src/utils/sanitize.ts"],"names":[],"mappings":";;AAcA,4CAoBC;AAeD,wDAEC;AA0BD,gDAiDC;AA9HD;;;;;;;;;;;;;GAaG;AACH,SAAgB,gBAAgB,CAC9B,QAAgB,EAChB,YAAoB,GAAG;IAEvB,uCAAuC;IACvC,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAElD,mDAAmD;IACnD,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;IAEtD,uDAAuD;IACvD,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IAEnE,kDAAkD;IAClD,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,cAAc,CAAC;IACxB,CAAC;IAED,wBAAwB;IACxB,OAAO,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACvE,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAgB,sBAAsB,CAAC,cAAsB;IAC3D,OAAO,cAAc,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC;AACxD,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,SAAgB,kBAAkB,CAChC,GAAQ,EACR,0BAAoC,EAAE;IAEtC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACpC,OAAO,GAAG,CAAC;IACb,CAAC;IAED,MAAM,oBAAoB,GAAG;QAC3B,mBAAmB;QACnB,SAAS;QACT,QAAQ;QACR,OAAO;QACP,UAAU;QACV,QAAQ;QACR,eAAe;QACf,QAAQ;QACR,aAAa;QACb,YAAY;QACZ,aAAa;KACd,CAAC;IAEF,MAAM,aAAa,GAAG,CAAC,GAAG,oBAAoB,EAAE,GAAG,uBAAuB,CAAC,CAAC;IAE5E,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,CAAC;IAE7D,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;QACnC,MAAM,WAAW,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QAEpE,IAAI,WAAW,IAAI,OAAO,SAAS,CAAC,GAAG,CAAC,KAAK,QAAQ,EAAE,CAAC;YACtD,uCAAuC;YACvC,SAAS,CAAC,GAAG,CAAC,GAAG,aAAa,SAAS,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC;QACzD,CAAC;aAAM,IAAI,GAAG,KAAK,KAAK,IAAI,OAAO,SAAS,CAAC,GAAG,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC/D,kCAAkC;YAClC,SAAS,CAAC,GAAG,CAAC,GAAG,kBAAkB,CACjC,SAAS,CAAC,GAAG,CAAC,EACd,uBAAuB,CACxB,CAAC;QACJ,CAAC;aAAM,IAAI,OAAO,SAAS,CAAC,GAAG,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC9C,sCAAsC;YACtC,SAAS,CAAC,GAAG,CAAC,GAAG,kBAAkB,CACjC,SAAS,CAAC,GAAG,CAAC,EACd,uBAAuB,CACxB,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/worker/auth.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Worker authentication using encrypted conversation ID
+ * Token format: encrypted(userId:conversationId:deploymentName:timestamp)
+ */
+export interface WorkerTokenData {
+    userId: string;
+    conversationId: string;
+    channelId: string;
+    teamId?: string;
+    agentId?: string;
+    connectionId?: string;
+    deploymentName: string;
+    timestamp: number;
+    platform?: string;
+    sessionKey?: string;
+    traceId?: string;
+}
+/**
+ * Generate a worker authentication token by encrypting thread metadata
+ */
+export declare function generateWorkerToken(userId: string, conversationId: string, deploymentName: string, options: {
+    channelId: string;
+    teamId?: string;
+    agentId?: string;
+    connectionId?: string;
+    platform?: string;
+    sessionKey?: string;
+    traceId?: string;
+}): string;
+/**
+ * Verify and decrypt a worker authentication token
+ */
+export declare function verifyWorkerToken(token: string): WorkerTokenData | null;
+//# sourceMappingURL=auth.d.ts.map

package/dist/worker/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/worker/auth.ts"],"names":[],"mappings":"AAKA;;;GAGG;AAEH,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,MAAM,EACd,cAAc,EAAE,MAAM,EACtB,cAAc,EAAE,MAAM,EACtB,OAAO,EAAE;IACP,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,GACA,MAAM,CAwBR;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,eAAe,GAAG,IAAI,CA8BvE"}