@omnitron-dev/omnitron 0.1.1

package/dist/services/alert.rpc-service.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Alert RPC Service
+ *
+ * Netron RPC endpoints for alert management from webapp.
+ */
+import type { AlertService, AlertRule, AlertEvent, AlertSummary } from './alert.service.js';
+export declare class AlertRpcService {
+    private readonly alertService;
+    constructor(alertService: AlertService);
+    getRules(): Promise<AlertRule[]>;
+    createRule(data: {
+        name: string;
+        expression: string;
+        type: string;
+        severity: string;
+        forDuration?: number;
+        enabled?: boolean;
+    }): Promise<AlertRule>;
+    updateRule(data: {
+        id: string;
+        updates: Partial<AlertRule>;
+    }): Promise<AlertRule>;
+    deleteRule(data: {
+        id: string;
+    }): Promise<{
+        success: boolean;
+    }>;
+    getEvents(data?: {
+        ruleId?: string;
+        status?: string;
+        limit?: number;
+    }): Promise<AlertEvent[]>;
+    acknowledgeAlert(data: {
+        alertId: string;
+        acknowledgedBy: string;
+    }): Promise<{
+        success: boolean;
+    }>;
+    getSummary(): Promise<AlertSummary>;
+}
+//# sourceMappingURL=alert.rpc-service.d.ts.map

package/dist/services/alert.rpc-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"alert.rpc-service.d.ts","sourceRoot":"","sources":["../../src/services/alert.rpc-service.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAE5F,qBACa,eAAe;IACd,OAAO,CAAC,QAAQ,CAAC,YAAY;gBAAZ,YAAY,EAAE,YAAY;IAGjD,QAAQ,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;IAKhC,UAAU,CAAC,IAAI,EAAE;QACrB,IAAI,EAAE,MAAM,CAAC;QACb,UAAU,EAAE,MAAM,CAAC;QACnB,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,EAAE,MAAM,CAAC;QACjB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,OAAO,CAAC,EAAE,OAAO,CAAC;KACnB,GAAG,OAAO,CAAC,SAAS,CAAC;IAchB,UAAU,CAAC,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC;IAKjF,UAAU,CAAC,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC;IAM/D,SAAS,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;IAK7F,gBAAgB,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC;IAMlG,UAAU,IAAI,OAAO,CAAC,YAAY,CAAC;CAG1C"}

package/dist/services/alert.rpc-service.js

@@ -0,0 +1,102 @@
+/**
+ * Alert RPC Service
+ *
+ * Netron RPC endpoints for alert management from webapp.
+ */
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import { Service, Public } from '@omnitron-dev/titan/decorators';
+import { VIEWER_ROLES, OPERATOR_ROLES } from '../shared/roles.js';
+let AlertRpcService = class AlertRpcService {
+    alertService;
+    constructor(alertService) {
+        this.alertService = alertService;
+    }
+    async getRules() {
+        return this.alertService.getRules();
+    }
+    async createRule(data) {
+        return this.alertService.createRule({
+            name: data.name,
+            expression: data.expression,
+            type: data.type,
+            severity: data.severity,
+            forDuration: data.forDuration ?? null,
+            annotations: null,
+            labels: null,
+            enabled: data.enabled ?? true,
+        });
+    }
+    async updateRule(data) {
+        return this.alertService.updateRule(data.id, data.updates);
+    }
+    async deleteRule(data) {
+        await this.alertService.deleteRule(data.id);
+        return { success: true };
+    }
+    async getEvents(data) {
+        return this.alertService.getEvents(data);
+    }
+    async acknowledgeAlert(data) {
+        await this.alertService.acknowledgeAlert(data.alertId, data.acknowledgedBy);
+        return { success: true };
+    }
+    async getSummary() {
+        return this.alertService.getSummary();
+    }
+};
+__decorate([
+    Public({ auth: { roles: VIEWER_ROLES } }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Promise)
+], AlertRpcService.prototype, "getRules", null);
+__decorate([
+    Public({ auth: { roles: OPERATOR_ROLES } }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], AlertRpcService.prototype, "createRule", null);
+__decorate([
+    Public({ auth: { roles: OPERATOR_ROLES } }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], AlertRpcService.prototype, "updateRule", null);
+__decorate([
+    Public({ auth: { roles: OPERATOR_ROLES } }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], AlertRpcService.prototype, "deleteRule", null);
+__decorate([
+    Public({ auth: { roles: VIEWER_ROLES } }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], AlertRpcService.prototype, "getEvents", null);
+__decorate([
+    Public({ auth: { roles: OPERATOR_ROLES } }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], AlertRpcService.prototype, "acknowledgeAlert", null);
+__decorate([
+    Public({ auth: { roles: VIEWER_ROLES } }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Promise)
+], AlertRpcService.prototype, "getSummary", null);
+AlertRpcService = __decorate([
+    Service({ name: 'OmnitronAlerts' }),
+    __metadata("design:paramtypes", [Function])
+], AlertRpcService);
+export { AlertRpcService };
+//# sourceMappingURL=alert.rpc-service.js.map

package/dist/services/alert.rpc-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"alert.rpc-service.js","sourceRoot":"","sources":["../../src/services/alert.rpc-service.ts"],"names":[],"mappings":"AAAA;;;;GAIG;;;;;;;;;;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,gCAAgC,CAAC;AACjE,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAI3D,IAAM,eAAe,GAArB,MAAM,eAAe;IACG;IAA7B,YAA6B,YAA0B;QAA1B,iBAAY,GAAZ,YAAY,CAAc;IAAG,CAAC;IAGrD,AAAN,KAAK,CAAC,QAAQ;QACZ,OAAO,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC;IACtC,CAAC;IAGK,AAAN,KAAK,CAAC,UAAU,CAAC,IAOhB;QACC,OAAO,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC;YAClC,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,IAAI,EAAE,IAAI,CAAC,IAAW;YACtB,QAAQ,EAAE,IAAI,CAAC,QAAe;YAC9B,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI;YACrC,WAAW,EAAE,IAAI;YACjB,MAAM,EAAE,IAAI;YACZ,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,IAAI;SAC9B,CAAC,CAAC;IACL,CAAC;IAGK,AAAN,KAAK,CAAC,UAAU,CAAC,IAAiD;QAChE,OAAO,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7D,CAAC;IAGK,AAAN,KAAK,CAAC,UAAU,CAAC,IAAoB;QACnC,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC5C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAGK,AAAN,KAAK,CAAC,SAAS,CAAC,IAA2D;QACzE,OAAO,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC3C,CAAC;IAGK,AAAN,KAAK,CAAC,gBAAgB,CAAC,IAAiD;QACtE,MAAM,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;QAC5E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAGK,AAAN,KAAK,CAAC,UAAU;QACd,OAAO,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,CAAC;IACxC,CAAC;CACF,CAAA;AAnDO;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,CAAC;;;;+CAGzC;AAGK;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,CAAC;;;;iDAmB3C;AAGK;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,CAAC;;;;iDAG3C;AAGK;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,CAAC;;;;iDAI3C;AAGK;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,CAAC;;;;gDAGzC;AAGK;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,CAAC;;;;uDAI3C;AAGK;IADL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,CAAC;;;;iDAGzC;AAtDU,eAAe;IAD3B,OAAO,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC;;GACvB,eAAe,CAuD3B"}

package/dist/services/alert.service.d.ts

@@ -0,0 +1,83 @@
+/**
+ * Alert Service — Rule-based alerting engine
+ *
+ * Evaluates alert rules at configurable intervals and fires/resolves alerts.
+ * Supports three rule types:
+ *   - metric: threshold-based (e.g., CPU > 80%)
+ *   - log: pattern matching (e.g., level=error AND app=main count > 10/5min)
+ *   - health: health status changes (e.g., app goes unhealthy)
+ *
+ * Alert lifecycle: pending → firing → resolved (or silenced/acknowledged)
+ *
+ * Stores alert rules and events in omnitron-pg.
+ */
+import type { Kysely } from 'kysely';
+import type { OmnitronDatabase } from '../database/schema.js';
+import type { OrchestratorService } from '../orchestrator/orchestrator.service.js';
+export type AlertSeverity = 'critical' | 'warning' | 'info';
+export type AlertRuleType = 'metric' | 'log' | 'health';
+export type AlertEventStatus = 'firing' | 'resolved' | 'silenced' | 'acknowledged';
+export interface AlertRule {
+    id: string;
+    name: string;
+    expression: string;
+    type: AlertRuleType;
+    severity: AlertSeverity;
+    forDuration: number | null;
+    annotations: Record<string, unknown> | null;
+    labels: Record<string, unknown> | null;
+    enabled: boolean;
+    lastEvaluatedAt: string | null;
+    createdAt: string;
+    updatedAt: string;
+}
+export interface AlertEvent {
+    id: string;
+    ruleId: string;
+    status: AlertEventStatus;
+    value: string | null;
+    annotations: Record<string, unknown> | null;
+    firedAt: string;
+    resolvedAt: string | null;
+    acknowledgedAt: string | null;
+    acknowledgedBy: string | null;
+}
+export interface AlertSummary {
+    firing: number;
+    resolved: number;
+    silenced: number;
+    total: number;
+    bySeverity: Record<string, number>;
+}
+export declare class AlertService {
+    private readonly db;
+    private readonly orchestrator;
+    private readonly infraState;
+    private evaluationTimer;
+    constructor(db: Kysely<OmnitronDatabase>, orchestrator: OrchestratorService, infraState: () => Record<string, {
+        status: string;
+        health: string;
+    }>);
+    /**
+     * Start the alert evaluation loop.
+     * Runs every `intervalMs` (default 15s).
+     */
+    start(intervalMs?: number): void;
+    stop(): void;
+    /**
+     * Evaluate all enabled alert rules.
+     */
+    evaluate(): Promise<void>;
+    getRules(): Promise<AlertRule[]>;
+    createRule(rule: Omit<AlertRule, 'id' | 'createdAt' | 'updatedAt' | 'lastEvaluatedAt'>): Promise<AlertRule>;
+    updateRule(id: string, updates: Partial<Omit<AlertRule, 'id' | 'createdAt' | 'updatedAt'>>): Promise<AlertRule>;
+    deleteRule(id: string): Promise<void>;
+    getEvents(options?: {
+        ruleId?: string;
+        status?: string;
+        limit?: number;
+    }): Promise<AlertEvent[]>;
+    acknowledgeAlert(alertId: string, acknowledgedBy: string): Promise<void>;
+    getSummary(): Promise<AlertSummary>;
+}
+//# sourceMappingURL=alert.service.d.ts.map

package/dist/services/alert.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"alert.service.d.ts","sourceRoot":"","sources":["../../src/services/alert.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AACrC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,yCAAyC,CAAC;AAMnF,MAAM,MAAM,aAAa,GAAG,UAAU,GAAG,SAAS,GAAG,MAAM,CAAC;AAC5D,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,KAAK,GAAG,QAAQ,CAAC;AACxD,MAAM,MAAM,gBAAgB,GAAG,QAAQ,GAAG,UAAU,GAAG,UAAU,GAAG,cAAc,CAAC;AAEnF,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,aAAa,CAAC;IACpB,QAAQ,EAAE,aAAa,CAAC;IACxB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC5C,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACvC,OAAO,EAAE,OAAO,CAAC;IACjB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,gBAAgB,CAAC;IACzB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC5C,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACpC;AA+ED,qBAAa,YAAY;IAIrB,OAAO,CAAC,QAAQ,CAAC,EAAE;IACnB,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAL7B,OAAO,CAAC,eAAe,CAA+B;gBAGnC,EAAE,EAAE,MAAM,CAAC,gBAAgB,CAAC,EAC5B,YAAY,EAAE,mBAAmB,EACjC,UAAU,EAAE,MAAM,MAAM,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAGvF;;;OAGG;IACH,KAAK,CAAC,UAAU,SAAS,GAAG,IAAI;IAQhC,IAAI,IAAI,IAAI;IAOZ;;OAEG;IACG,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IA4DzB,QAAQ,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;IAKhC,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,GAAG,WAAW,GAAG,WAAW,GAAG,iBAAiB,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC;IAc3G,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,GAAG,WAAW,GAAG,WAAW,CAAC,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC;IAY/G,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIrC,SAAS,CAAC,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;IAQhG,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAOxE,UAAU,IAAI,OAAO,CAAC,YAAY,CAAC;CA0C1C"}

package/dist/services/alert.service.js

@@ -0,0 +1,277 @@
+/**
+ * Alert Service — Rule-based alerting engine
+ *
+ * Evaluates alert rules at configurable intervals and fires/resolves alerts.
+ * Supports three rule types:
+ *   - metric: threshold-based (e.g., CPU > 80%)
+ *   - log: pattern matching (e.g., level=error AND app=main count > 10/5min)
+ *   - health: health status changes (e.g., app goes unhealthy)
+ *
+ * Alert lifecycle: pending → firing → resolved (or silenced/acknowledged)
+ *
+ * Stores alert rules and events in omnitron-pg.
+ */
+function evaluateExpression(expr, ctx) {
+    const trimmed = expr.trim();
+    // app.<name>.status != online
+    const appStatusMatch = trimmed.match(/^app\.(\*|[\w-]+)\.status\s*(!=|==)\s*(\w+)$/);
+    if (appStatusMatch) {
+        const [, appName, op, expected] = appStatusMatch;
+        const targets = appName === '*' ? ctx.apps : ctx.apps.filter((a) => a.name === appName);
+        const violations = targets.filter((a) => (op === '!=' ? a.status !== expected : a.status === expected));
+        return {
+            firing: violations.length > 0,
+            value: violations.map((a) => `${a.name}=${a.status}`).join(', '),
+        };
+    }
+    // app.<name>.cpu > N
+    const appMetricMatch = trimmed.match(/^app\.(\*|[\w-]+)\.(cpu|memory)\s*(>|<|>=|<=)\s*(\d+)$/);
+    if (appMetricMatch) {
+        const [, appName, metric, op, thresholdStr] = appMetricMatch;
+        const threshold = Number(thresholdStr);
+        const targets = appName === '*' ? ctx.apps : ctx.apps.filter((a) => a.name === appName);
+        const violations = targets.filter((a) => {
+            const val = metric === 'cpu' ? a.cpu : a.memory;
+            switch (op) {
+                case '>': return val > threshold;
+                case '<': return val < threshold;
+                case '>=': return val >= threshold;
+                case '<=': return val <= threshold;
+                default: return false;
+            }
+        });
+        return {
+            firing: violations.length > 0,
+            value: violations.map((a) => `${a.name}=${metric === 'cpu' ? a.cpu.toFixed(1) : a.memory}`).join(', '),
+        };
+    }
+    // infra.<service>.health != healthy
+    const infraMatch = trimmed.match(/^infra\.(\*|[\w-]+)\.health\s*(!=|==)\s*(\w+)$/);
+    if (infraMatch) {
+        const [, svcName = '*', op = '!=', expected = 'healthy'] = infraMatch;
+        const entries = svcName === '*'
+            ? Object.entries(ctx.infra)
+            : Object.entries(ctx.infra).filter(([k]) => k === svcName || k.includes(svcName));
+        const violations = entries.filter(([, v]) => (op === '!=' ? v.health !== expected : v.health === expected));
+        return {
+            firing: violations.length > 0,
+            value: violations.map(([k, v]) => `${k}=${v.health}`).join(', '),
+        };
+    }
+    // Fallback: always false for unparseable expressions
+    return { firing: false, value: 'unparseable expression' };
+}
+// =============================================================================
+// Service
+// =============================================================================
+export class AlertService {
+    db;
+    orchestrator;
+    infraState;
+    evaluationTimer = null;
+    constructor(db, orchestrator, infraState) {
+        this.db = db;
+        this.orchestrator = orchestrator;
+        this.infraState = infraState;
+    }
+    /**
+     * Start the alert evaluation loop.
+     * Runs every `intervalMs` (default 15s).
+     */
+    start(intervalMs = 15_000) {
+        if (this.evaluationTimer)
+            return;
+        this.evaluationTimer = setInterval(() => {
+            this.evaluate().catch(() => { });
+        }, intervalMs);
+        this.evaluationTimer.unref();
+    }
+    stop() {
+        if (this.evaluationTimer) {
+            clearInterval(this.evaluationTimer);
+            this.evaluationTimer = null;
+        }
+    }
+    /**
+     * Evaluate all enabled alert rules.
+     */
+    async evaluate() {
+        const rules = await this.db
+            .selectFrom('alert_rules')
+            .selectAll()
+            .where('enabled', '=', true)
+            .execute();
+        if (rules.length === 0)
+            return;
+        // Build evaluation context
+        const apps = this.orchestrator.list();
+        const infra = this.infraState();
+        const ctx = {
+            apps: apps.map((a) => ({ name: a.name, status: a.status, cpu: a.cpu, memory: a.memory })),
+            infra,
+        };
+        for (const rule of rules) {
+            const { firing, value } = evaluateExpression(rule.expression, ctx);
+            // Get current firing alert for this rule (if any)
+            const currentAlert = await this.db
+                .selectFrom('alert_events')
+                .selectAll()
+                .where('ruleId', '=', rule.id)
+                .where('status', '=', 'firing')
+                .executeTakeFirst();
+            if (firing && !currentAlert) {
+                // New alert — create firing event
+                await this.db.insertInto('alert_events').values({
+                    ruleId: rule.id,
+                    status: 'firing',
+                    value,
+                    annotations: rule.annotations ? JSON.stringify(rule.annotations) : null,
+                    firedAt: new Date(),
+                }).execute();
+            }
+            else if (!firing && currentAlert) {
+                // Alert resolved
+                await this.db
+                    .updateTable('alert_events')
+                    .set({ status: 'resolved', resolvedAt: new Date() })
+                    .where('id', '=', currentAlert.id)
+                    .execute();
+            }
+            // Update last evaluated timestamp
+            await this.db
+                .updateTable('alert_rules')
+                .set({ lastEvaluatedAt: new Date() })
+                .where('id', '=', rule.id)
+                .execute();
+        }
+    }
+    // ===========================================================================
+    // CRUD
+    // ===========================================================================
+    async getRules() {
+        const rows = await this.db.selectFrom('alert_rules').selectAll().orderBy('createdAt', 'desc').execute();
+        return rows.map(mapRule);
+    }
+    async createRule(rule) {
+        const row = await this.db.insertInto('alert_rules').values({
+            name: rule.name,
+            expression: rule.expression,
+            type: rule.type,
+            severity: rule.severity,
+            forDuration: rule.forDuration ?? null,
+            annotations: rule.annotations ? JSON.stringify(rule.annotations) : null,
+            labels: rule.labels ? JSON.stringify(rule.labels) : null,
+            enabled: rule.enabled,
+        }).returningAll().executeTakeFirstOrThrow();
+        return mapRule(row);
+    }
+    async updateRule(id, updates) {
+        const set = { updatedAt: new Date() };
+        if (updates.name !== undefined)
+            set['name'] = updates.name;
+        if (updates.expression !== undefined)
+            set['expression'] = updates.expression;
+        if (updates.severity !== undefined)
+            set['severity'] = updates.severity;
+        if (updates.enabled !== undefined)
+            set['enabled'] = updates.enabled;
+        if (updates.forDuration !== undefined)
+            set['forDuration'] = updates.forDuration;
+        const row = await this.db.updateTable('alert_rules').set(set).where('id', '=', id).returningAll().executeTakeFirstOrThrow();
+        return mapRule(row);
+    }
+    async deleteRule(id) {
+        await this.db.deleteFrom('alert_rules').where('id', '=', id).execute();
+    }
+    async getEvents(options) {
+        let query = this.db.selectFrom('alert_events').selectAll().orderBy('firedAt', 'desc').limit(options?.limit ?? 50);
+        if (options?.ruleId)
+            query = query.where('ruleId', '=', options.ruleId);
+        if (options?.status)
+            query = query.where('status', '=', options.status);
+        const rows = await query.execute();
+        return rows.map(mapEvent);
+    }
+    async acknowledgeAlert(alertId, acknowledgedBy) {
+        await this.db.updateTable('alert_events').set({
+            acknowledgedAt: new Date(),
+            acknowledgedBy,
+        }).where('id', '=', alertId).execute();
+    }
+    async getSummary() {
+        // Count events by status using SQL GROUP BY (avoids loading all rows)
+        const statusCounts = await this.db
+            .selectFrom('alert_events')
+            .select(['status'])
+            .select((eb) => eb.fn.count('id').as('count'))
+            .groupBy('status')
+            .execute();
+        let firing = 0;
+        let resolved = 0;
+        let silenced = 0;
+        let total = 0;
+        for (const row of statusCounts) {
+            const count = Number(row.count);
+            total += count;
+            switch (row.status) {
+                case 'firing':
+                    firing = count;
+                    break;
+                case 'resolved':
+                    resolved = count;
+                    break;
+                case 'silenced':
+                    silenced = count;
+                    break;
+                default: break;
+            }
+        }
+        // Count firing alerts by severity using SQL GROUP BY + JOIN
+        const bySeverity = {};
+        const severityCounts = await this.db
+            .selectFrom('alert_events')
+            .innerJoin('alert_rules', 'alert_rules.id', 'alert_events.ruleId')
+            .select(['alert_rules.severity'])
+            .select((eb) => eb.fn.count('alert_events.id').as('count'))
+            .where('alert_events.status', '=', 'firing')
+            .groupBy('alert_rules.severity')
+            .execute();
+        for (const row of severityCounts) {
+            bySeverity[row.severity] = Number(row.count);
+        }
+        return { firing, resolved, silenced, total, bySeverity };
+    }
+}
+// =============================================================================
+// Mappers
+// =============================================================================
+function mapRule(row) {
+    return {
+        id: row.id,
+        name: row.name,
+        expression: row.expression,
+        type: row.type,
+        severity: row.severity,
+        forDuration: row.forDuration ?? null,
+        annotations: row.annotations ? (typeof row.annotations === 'string' ? JSON.parse(row.annotations) : row.annotations) : null,
+        labels: row.labels ? (typeof row.labels === 'string' ? JSON.parse(row.labels) : row.labels) : null,
+        enabled: row.enabled,
+        lastEvaluatedAt: row.lastEvaluatedAt ? (row.lastEvaluatedAt instanceof Date ? row.lastEvaluatedAt.toISOString() : String(row.lastEvaluatedAt)) : null,
+        createdAt: row.createdAt instanceof Date ? row.createdAt.toISOString() : String(row.createdAt),
+        updatedAt: row.updatedAt instanceof Date ? row.updatedAt.toISOString() : String(row.updatedAt),
+    };
+}
+function mapEvent(row) {
+    return {
+        id: row.id,
+        ruleId: row.ruleId,
+        status: row.status,
+        value: row.value ?? null,
+        annotations: row.annotations ? (typeof row.annotations === 'string' ? JSON.parse(row.annotations) : row.annotations) : null,
+        firedAt: row.firedAt instanceof Date ? row.firedAt.toISOString() : String(row.firedAt),
+        resolvedAt: row.resolvedAt ? (row.resolvedAt instanceof Date ? row.resolvedAt.toISOString() : String(row.resolvedAt)) : null,
+        acknowledgedAt: row.acknowledgedAt ? (row.acknowledgedAt instanceof Date ? row.acknowledgedAt.toISOString() : String(row.acknowledgedAt)) : null,
+        acknowledgedBy: row.acknowledgedBy ?? null,
+    };
+}
+//# sourceMappingURL=alert.service.js.map

package/dist/services/alert.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"alert.service.js","sourceRoot":"","sources":["../../src/services/alert.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAmEH,SAAS,kBAAkB,CAAC,IAAY,EAAE,GAAgB;IACxD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAE5B,8BAA8B;IAC9B,MAAM,cAAc,GAAG,OAAO,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;IACrF,IAAI,cAAc,EAAE,CAAC;QACnB,MAAM,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,CAAC,GAAG,cAAc,CAAC;QACjD,MAAM,OAAO,GAAG,OAAO,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC;QACxF,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC;QACxG,OAAO;YACL,MAAM,EAAE,UAAU,CAAC,MAAM,GAAG,CAAC;YAC7B,KAAK,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;SACjE,CAAC;IACJ,CAAC;IAED,qBAAqB;IACrB,MAAM,cAAc,GAAG,OAAO,CAAC,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC/F,IAAI,cAAc,EAAE,CAAC;QACnB,MAAM,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,YAAY,CAAC,GAAG,cAAc,CAAC;QAC7D,MAAM,SAAS,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC;QACvC,MAAM,OAAO,GAAG,OAAO,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC;QACxF,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;YACtC,MAAM,GAAG,GAAG,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;YAChD,QAAQ,EAAE,EAAE,CAAC;gBACX,KAAK,GAAG,CAAC,CAAC,OAAO,GAAG,GAAG,SAAS,CAAC;gBACjC,KAAK,GAAG,CAAC,CAAC,OAAO,GAAG,GAAG,SAAS,CAAC;gBACjC,KAAK,IAAI,CAAC,CAAC,OAAO,GAAG,IAAI,SAAS,CAAC;gBACnC,KAAK,IAAI,CAAC,CAAC,OAAO,GAAG,IAAI,SAAS,CAAC;gBACnC,OAAO,CAAC,CAAC,OAAO,KAAK,CAAC;YACxB,CAAC;QACH,CAAC,CAAC,CAAC;QACH,OAAO;YACL,MAAM,EAAE,UAAU,CAAC,MAAM,GAAG,CAAC;YAC7B,KAAK,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;SACvG,CAAC;IACJ,CAAC;IAED,oCAAoC;IACpC,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACnF,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,CAAC,EAAE,OAAO,GAAG,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,QAAQ,GAAG,SAAS,CAAC,GAAG,UAAU,CAAC;QACtE,MAAM,OAAO,GAAG,OAAO,KAAK,GAAG;YAC7B,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC;YAC3B,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,OAAO,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;QACpF,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC;QAC5G,OAAO;YACL,MAAM,EAAE,UAAU,CAAC,MAAM,GAAG,CAAC;YAC7B,KAAK,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;SACjE,CAAC;IACJ,CAAC;IAED,qDAAqD;IACrD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC;AAC5D,CAAC;AAED,gFAAgF;AAChF,UAAU;AACV,gFAAgF;AAEhF,MAAM,OAAO,YAAY;IAIJ;IACA;IACA;IALX,eAAe,GAA0B,IAAI,CAAC;IAEtD,YACmB,EAA4B,EAC5B,YAAiC,EACjC,UAAoE;QAFpE,OAAE,GAAF,EAAE,CAA0B;QAC5B,iBAAY,GAAZ,YAAY,CAAqB;QACjC,eAAU,GAAV,UAAU,CAA0D;IACpF,CAAC;IAEJ;;;OAGG;IACH,KAAK,CAAC,UAAU,GAAG,MAAM;QACvB,IAAI,IAAI,CAAC,eAAe;YAAE,OAAO;QACjC,IAAI,CAAC,eAAe,GAAG,WAAW,CAAC,GAAG,EAAE;YACtC,IAAI,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAClC,CAAC,EAAE,UAAU,CAAC,CAAC;QACf,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;IAC/B,CAAC;IAED,IAAI;QACF,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACzB,aAAa,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YACpC,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;QAC9B,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,QAAQ;QACZ,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,EAAE;aACxB,UAAU,CAAC,aAAa,CAAC;aACzB,SAAS,EAAE;aACX,KAAK,CAAC,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC;aAC3B,OAAO,EAAE,CAAC;QAEb,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAE/B,2BAA2B;QAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;QAEhC,MAAM,GAAG,GAAgB;YACvB,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;YACzF,KAAK;SACN,CAAC;QAEF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,kBAAkB,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;YAEnE,kDAAkD;YAClD,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,EAAE;iBAC/B,UAAU,CAAC,cAAc,CAAC;iBAC1B,SAAS,EAAE;iBACX,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC;iBAC7B,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,QAAQ,CAAC;iBAC9B,gBAAgB,EAAE,CAAC;YAEtB,IAAI,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;gBAC5B,kCAAkC;gBAClC,MAAM,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC;oBAC9C,MAAM,EAAE,IAAI,CAAC,EAAE;oBACf,MAAM,EAAE,QAAQ;oBAChB,KAAK;oBACL,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,CAAS,CAAC,CAAC,CAAC,IAAI;oBAChF,OAAO,EAAE,IAAI,IAAI,EAAE;iBACb,CAAC,CAAC,OAAO,EAAE,CAAC;YACtB,CAAC;iBAAM,IAAI,CAAC,MAAM,IAAI,YAAY,EAAE,CAAC;gBACnC,iBAAiB;gBACjB,MAAM,IAAI,CAAC,EAAE;qBACV,WAAW,CAAC,cAAc,CAAC;qBAC3B,GAAG,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,EAAS,CAAC;qBAC1D,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,YAAY,CAAC,EAAE,CAAC;qBACjC,OAAO,EAAE,CAAC;YACf,CAAC;YAED,kCAAkC;YAClC,MAAM,IAAI,CAAC,EAAE;iBACV,WAAW,CAAC,aAAa,CAAC;iBAC1B,GAAG,CAAC,EAAE,eAAe,EAAE,IAAI,IAAI,EAAE,EAAS,CAAC;iBAC3C,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC;iBACzB,OAAO,EAAE,CAAC;QACf,CAAC;IACH,CAAC;IAED,8EAA8E;IAC9E,OAAO;IACP,8EAA8E;IAE9E,KAAK,CAAC,QAAQ;QACZ,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,SAAS,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC;QACxG,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,IAA2E;QAC1F,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC;YACzD,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI;YACrC,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,CAAS,CAAC,CAAC,CAAC,IAAI;YAChF,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAS,CAAC,CAAC,CAAC,IAAI;YACjE,OAAO,EAAE,IAAI,CAAC,OAAO;SACf,CAAC,CAAC,YAAY,EAAE,CAAC,uBAAuB,EAAE,CAAC;QACnD,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC;IACtB,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,EAAU,EAAE,OAAmE;QAC9F,MAAM,GAAG,GAA4B,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;QAC/D,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS;YAAE,GAAG,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;QAC3D,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS;YAAE,GAAG,CAAC,YAAY,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC;QAC7E,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS;YAAE,GAAG,CAAC,UAAU,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC;QACvE,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS;YAAE,GAAG,CAAC,SAAS,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;QACpE,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS;YAAE,GAAG,CAAC,aAAa,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC;QAEhF,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,GAAU,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,YAAY,EAAE,CAAC,uBAAuB,EAAE,CAAC;QACnI,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC;IACtB,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,EAAU;QACzB,MAAM,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;IACzE,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,OAA8D;QAC5E,IAAI,KAAK,GAAG,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,SAAS,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;QAClH,IAAI,OAAO,EAAE,MAAM;YAAE,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QACxE,IAAI,OAAO,EAAE,MAAM;YAAE,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QACxE,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC;QACnC,OAAO,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,OAAe,EAAE,cAAsB;QAC5D,MAAM,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC;YAC5C,cAAc,EAAE,IAAI,IAAI,EAAE;YAC1B,cAAc;SACR,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,UAAU;QACd,sEAAsE;QACtE,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,EAAE;aAC/B,UAAU,CAAC,cAAc,CAAC;aAC1B,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC;aAClB,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAS,IAAI,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;aACrD,OAAO,CAAC,QAAQ,CAAC;aACjB,OAAO,EAAE,CAAC;QAEb,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,IAAI,QAAQ,GAAG,CAAC,CAAC;QACjB,IAAI,QAAQ,GAAG,CAAC,CAAC;QACjB,IAAI,KAAK,GAAG,CAAC,CAAC;QAEd,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;YAC/B,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAChC,KAAK,IAAI,KAAK,CAAC;YACf,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;gBACnB,KAAK,QAAQ;oBAAE,MAAM,GAAG,KAAK,CAAC;oBAAC,MAAM;gBACrC,KAAK,UAAU;oBAAE,QAAQ,GAAG,KAAK,CAAC;oBAAC,MAAM;gBACzC,KAAK,UAAU;oBAAE,QAAQ,GAAG,KAAK,CAAC;oBAAC,MAAM;gBACzC,OAAO,CAAC,CAAC,MAAM;YACjB,CAAC;QACH,CAAC;QAED,4DAA4D;QAC5D,MAAM,UAAU,GAA2B,EAAE,CAAC;QAC9C,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,EAAE;aACjC,UAAU,CAAC,cAAc,CAAC;aAC1B,SAAS,CAAC,aAAa,EAAE,gBAAgB,EAAE,qBAAqB,CAAC;aACjE,MAAM,CAAC,CAAC,sBAAsB,CAAC,CAAC;aAChC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAS,iBAAiB,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;aAClE,KAAK,CAAC,qBAAqB,EAAE,GAAG,EAAE,QAAQ,CAAC;aAC3C,OAAO,CAAC,sBAAsB,CAAC;aAC/B,OAAO,EAAE,CAAC;QAEb,KAAK,MAAM,GAAG,IAAI,cAAc,EAAE,CAAC;YACjC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC/C,CAAC;QAED,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;IAC3D,CAAC;CACF;AAED,gFAAgF;AAChF,UAAU;AACV,gFAAgF;AAEhF,SAAS,OAAO,CAAC,GAAQ;IACvB,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,IAAI;QACpC,WAAW,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI;QAC3H,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI;QAClG,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,eAAe,EAAE,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,eAAe,YAAY,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI;QACrJ,SAAS,EAAE,GAAG,CAAC,SAAS,YAAY,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC;QAC9F,SAAS,EAAE,GAAG,CAAC,SAAS,YAAY,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC;KAC/F,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,GAAQ;IACxB,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,IAAI;QACxB,WAAW,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI;QAC3H,OAAO,EAAE,GAAG,CAAC,OAAO,YAAY,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC;QACtF,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,YAAY,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI;QAC5H,cAAc,EAAE,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc,YAAY,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI;QAChJ,cAAc,EAAE,GAAG,CAAC,cAAc,IAAI,IAAI;KAC3C,CAAC;AACJ,CAAC"}

package/dist/services/auth-context.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Auth Context — AsyncLocalStorage-based auth context for daemon RPC services
+ *
+ * The Netron auth middleware validates JWT and sets authContext in metadata.
+ * The invocationWrapper bridges metadata → AsyncLocalStorage so service
+ * methods can access the authenticated user via getCurrentAuth().
+ *
+ * Same pattern as main/storage/messaging backends (RLS context bridge),
+ * but simplified — daemon doesn't need full RLS, just auth identity.
+ */
+import type { AuthContext } from '@omnitron-dev/titan/netron/auth';
+/**
+ * Get the current auth context from AsyncLocalStorage.
+ * Returns null if no auth context is set (anonymous request).
+ */
+export declare function getCurrentAuth(): AuthContext | null;
+/**
+ * Get the current auth context, throwing if not authenticated.
+ */
+export declare function requireAuth(): AuthContext;
+/**
+ * Get the current user ID, throwing if not authenticated.
+ */
+export declare function requireUserId(): string;
+/**
+ * Run a function within an auth context.
+ * Used by the invocationWrapper to bridge metadata → AsyncLocalStorage.
+ */
+export declare function runWithAuth<T>(authContext: AuthContext, fn: () => T | Promise<T>): T | Promise<T>;
+/**
+ * Creates an invocationWrapper for Netron HTTP transport.
+ *
+ * Bridges the authContext from metadata (set by Netron auth middleware)
+ * into AsyncLocalStorage so service methods can use getCurrentAuth().
+ *
+ * This is the standard Titan pattern — same as apps/main bootstrap.
+ */
+export declare function createAuthContextWrapper(): (metadata: Map<string, unknown>, fn: () => Promise<unknown>) => Promise<unknown>;
+//# sourceMappingURL=auth-context.d.ts.map

package/dist/services/auth-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-context.d.ts","sourceRoot":"","sources":["../../src/services/auth-context.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAC;AAYnE;;;GAGG;AACH,wBAAgB,cAAc,IAAI,WAAW,GAAG,IAAI,CAEnD;AAED;;GAEG;AACH,wBAAgB,WAAW,IAAI,WAAW,CAMzC;AAED;;GAEG;AACH,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,CAAC,EAAE,WAAW,EAAE,WAAW,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAEjG;AAED;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,KACxB,UAAU,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,MAAM,OAAO,CAAC,OAAO,CAAC,KAAG,OAAO,CAAC,OAAO,CAAC,CAO5F"}

package/dist/services/auth-context.js

@@ -0,0 +1,66 @@
+/**
+ * Auth Context — AsyncLocalStorage-based auth context for daemon RPC services
+ *
+ * The Netron auth middleware validates JWT and sets authContext in metadata.
+ * The invocationWrapper bridges metadata → AsyncLocalStorage so service
+ * methods can access the authenticated user via getCurrentAuth().
+ *
+ * Same pattern as main/storage/messaging backends (RLS context bridge),
+ * but simplified — daemon doesn't need full RLS, just auth identity.
+ */
+import { AsyncLocalStorage } from 'node:async_hooks';
+// ---------------------------------------------------------------------------
+// AsyncLocalStorage instance (singleton)
+// ---------------------------------------------------------------------------
+const authContextStorage = new AsyncLocalStorage();
+// ---------------------------------------------------------------------------
+// Public API
+// ---------------------------------------------------------------------------
+/**
+ * Get the current auth context from AsyncLocalStorage.
+ * Returns null if no auth context is set (anonymous request).
+ */
+export function getCurrentAuth() {
+    return authContextStorage.getStore() ?? null;
+}
+/**
+ * Get the current auth context, throwing if not authenticated.
+ */
+export function requireAuth() {
+    const ctx = getCurrentAuth();
+    if (!ctx) {
+        throw new Error('Authentication required');
+    }
+    return ctx;
+}
+/**
+ * Get the current user ID, throwing if not authenticated.
+ */
+export function requireUserId() {
+    return requireAuth().userId;
+}
+/**
+ * Run a function within an auth context.
+ * Used by the invocationWrapper to bridge metadata → AsyncLocalStorage.
+ */
+export function runWithAuth(authContext, fn) {
+    return authContextStorage.run(authContext, fn);
+}
+/**
+ * Creates an invocationWrapper for Netron HTTP transport.
+ *
+ * Bridges the authContext from metadata (set by Netron auth middleware)
+ * into AsyncLocalStorage so service methods can use getCurrentAuth().
+ *
+ * This is the standard Titan pattern — same as apps/main bootstrap.
+ */
+export function createAuthContextWrapper() {
+    return async (metadata, fn) => {
+        const authCtx = metadata.get('authContext');
+        if (authCtx) {
+            return runWithAuth(authCtx, fn);
+        }
+        return fn();
+    };
+}
+//# sourceMappingURL=auth-context.js.map

package/dist/services/auth-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-context.js","sourceRoot":"","sources":["../../src/services/auth-context.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAGrD,8EAA8E;AAC9E,yCAAyC;AACzC,8EAA8E;AAE9E,MAAM,kBAAkB,GAAG,IAAI,iBAAiB,EAAe,CAAC;AAEhE,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,UAAU,cAAc;IAC5B,OAAO,kBAAkB,CAAC,QAAQ,EAAE,IAAI,IAAI,CAAC;AAC/C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW;IACzB,MAAM,GAAG,GAAG,cAAc,EAAE,CAAC;IAC7B,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa;IAC3B,OAAO,WAAW,EAAE,CAAC,MAAM,CAAC;AAC9B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAI,WAAwB,EAAE,EAAwB;IAC/E,OAAO,kBAAkB,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;AACjD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,wBAAwB;IACtC,OAAO,KAAK,EAAE,QAA8B,EAAE,EAA0B,EAAoB,EAAE;QAC5F,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,aAAa,CAA4B,CAAC;QACvE,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,WAAW,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAClC,CAAC;QACD,OAAO,EAAE,EAAE,CAAC;IACd,CAAC,CAAC;AACJ,CAAC"}