@orion-agents/orion-code 0.1.7 → 0.1.9

package/dist/services/project-instructions.js

@@ -4,16 +4,16 @@ exports.findProjectRoot = findProjectRoot;
 exports.loadProjectInstructionFiles = loadProjectInstructionFiles;
 exports.renderProjectInstructions = renderProjectInstructions;
 exports.loadProjectInstructions = loadProjectInstructions;
+exports.clearProjectInstructionsCache = clearProjectInstructionsCache;
+exports.getProjectInstructionsCacheStats = getProjectInstructionsCacheStats;
 const fs_1 = require("fs");
 const path_1 = require("path");
+const safe_project_reader_1 = require("./safe-project-reader");
 const DEFAULT_MAX_FILE_BYTES = 32 * 1024;
 const DEFAULT_MAX_TOTAL_CHARS = 96000;
-const DIRECT_FILES = [
-    'AGENTS.md',
-    'CLAUDE.md',
-    '.orion-code/instructions.md',
-    '.cursorrules',
-];
+const DEFAULT_MAX_TOTAL_READ_BYTES = 256 * 1024;
+const DEFAULT_MAX_FILES = 128;
+const DIRECT_FILES = ['AGENTS.md', 'CLAUDE.md', '.orion-code/instructions.md', '.cursorrules'];
 function parent(path) {
     const next = (0, path_1.dirname)(path);
     return next === path ? path : next;
@@ -45,62 +45,71 @@ function directoriesFromRoot(root, cwd) {
     }
     return dirs.filter(dir => dir === resolvedRoot || !(0, path_1.relative)(resolvedRoot, dir).startsWith('..'));
 }
-function readTextPrefix(path, maxBytes) {
-    try {
-        const stat = (0, fs_1.statSync)(path);
-        if (!stat.isFile())
-            return null;
-        const content = (0, fs_1.readFileSync)(path).subarray(0, maxBytes).toString('utf8');
-        return {
-            content,
-            truncated: stat.size > maxBytes,
-        };
-    }
-    catch {
+function readTextPrefix(path, root, maxBytes) {
+    const read = (0, safe_project_reader_1.readSafeProjectFilePrefix)(path, root, maxBytes);
+    if (!read.ok || read.bytes.includes(0))
         return null;
-    }
+    return { content: read.bytes.toString('utf8'), truncated: read.truncated };
 }
-function candidateFiles(dir) {
-    const files = DIRECT_FILES.map(file => (0, path_1.join)(dir, file));
-    const cursorRulesDir = (0, path_1.join)(dir, '.cursor', 'rules');
-    if ((0, fs_1.existsSync)(cursorRulesDir)) {
+function discoverProjectInstructionFiles(root, cwd, maxFiles) {
+    const candidates = [];
+    const watchPaths = new Set([(0, path_1.join)(root, '.git')]);
+    const addCandidate = (path) => {
+        watchPaths.add(path);
+        if (candidates.length < maxFiles && (0, fs_1.existsSync)(path))
+            candidates.push(path);
+    };
+    for (const dir of directoriesFromRoot(root, cwd)) {
+        DIRECT_FILES.forEach(file => addCandidate((0, path_1.join)(dir, file)));
+        const cursorRulesDir = (0, path_1.join)(dir, '.cursor', 'rules');
+        watchPaths.add(cursorRulesDir);
+        const inspectedRulesDir = (0, safe_project_reader_1.inspectSafeProjectPath)(cursorRulesDir, root);
+        if (!inspectedRulesDir.ok || !inspectedRulesDir.stats.isDirectory())
+            continue;
         try {
-            const ruleFiles = (0, fs_1.readdirSync)(cursorRulesDir)
+            for (const file of (0, fs_1.readdirSync)(inspectedRulesDir.canonicalPath)
                 .filter(file => file.endsWith('.md') || file.endsWith('.mdc'))
-                .sort((a, b) => a.localeCompare(b))
-                .map(file => (0, path_1.join)(cursorRulesDir, file));
-            files.push(...ruleFiles);
+                .sort((a, b) => a.localeCompare(b))) {
+                addCandidate((0, path_1.join)(cursorRulesDir, file));
+            }
         }
         catch {
             // Ignore unreadable rule directories.
         }
     }
-    return files;
+    return { candidates, watchPaths: [...watchPaths] };
 }
-function loadProjectInstructionFiles(cwd, options = {}) {
-    const root = (0, path_1.resolve)(options.root ?? findProjectRoot(cwd));
+function loadDiscoveredFiles(root, discovery, options) {
     const maxFileBytes = options.maxFileBytes ?? DEFAULT_MAX_FILE_BYTES;
+    let remainingReadBytes = options.maxTotalReadBytes ?? DEFAULT_MAX_TOTAL_READ_BYTES;
     const files = [];
     const seen = new Set();
-    for (const dir of directoriesFromRoot(root, cwd)) {
-        for (const filePath of candidateFiles(dir)) {
-            const absolutePath = (0, path_1.resolve)(filePath);
-            if (seen.has(absolutePath) || !(0, fs_1.existsSync)(absolutePath))
-                continue;
-            seen.add(absolutePath);
-            const read = readTextPrefix(absolutePath, maxFileBytes);
-            if (!read || !read.content.trim())
-                continue;
-            files.push({
-                path: (0, path_1.relative)(root, absolutePath) || absolutePath,
-                absolutePath,
-                content: read.content.trimEnd(),
-                truncated: read.truncated,
-            });
-        }
+    for (const filePath of discovery.candidates) {
+        const absolutePath = (0, path_1.resolve)(filePath);
+        if (seen.has(absolutePath) || remainingReadBytes <= 0)
+            continue;
+        seen.add(absolutePath);
+        const readLimit = Math.min(maxFileBytes, remainingReadBytes);
+        const read = readTextPrefix(absolutePath, root, readLimit);
+        if (!read)
+            continue;
+        remainingReadBytes -= Buffer.byteLength(read.content, 'utf8');
+        if (!read.content.trim())
+            continue;
+        files.push({
+            path: (0, path_1.relative)(root, absolutePath) || absolutePath,
+            absolutePath,
+            content: read.content.trimEnd(),
+            truncated: read.truncated,
+        });
     }
     return files;
 }
+function loadProjectInstructionFiles(cwd, options = {}) {
+    const root = (0, path_1.resolve)(options.root ?? findProjectRoot(cwd));
+    const discovery = discoverProjectInstructionFiles(root, cwd, options.maxFiles ?? DEFAULT_MAX_FILES);
+    return loadDiscoveredFiles(root, discovery, options);
+}
 function renderProjectInstructions(files, options = {}) {
     if (files.length === 0)
         return '';
@@ -109,10 +118,7 @@ function renderProjectInstructions(files, options = {}) {
     for (const file of files) {
         if (remaining <= 0)
             break;
-        let block = [
-            `## ${file.path}${file.truncated ? ' (truncated)' : ''}`,
-            file.content,
-        ].join('\n\n');
+        let block = [`## ${file.path}${file.truncated ? ' (truncated)' : ''}`, file.content].join('\n\n');
         if (block.length > remaining) {
             block = `${block.slice(0, Math.max(0, remaining - 32))}\n[truncated by instruction budget]`;
             remaining = 0;
@@ -130,6 +136,50 @@ function renderProjectInstructions(files, options = {}) {
     ].join('\n');
 }
 function loadProjectInstructions(cwd, options = {}) {
-    return renderProjectInstructions(loadProjectInstructionFiles(cwd, options), options);
+    const cacheKey = [
+        (0, path_1.resolve)(cwd),
+        options.root ? (0, path_1.resolve)(options.root) : 'auto',
+        options.maxFileBytes ?? DEFAULT_MAX_FILE_BYTES,
+        options.maxTotalChars ?? DEFAULT_MAX_TOTAL_CHARS,
+        options.maxTotalReadBytes ?? DEFAULT_MAX_TOTAL_READ_BYTES,
+        options.maxFiles ?? DEFAULT_MAX_FILES,
+    ].join('|');
+    const cached = projectInstructionCache.get(cacheKey);
+    if (cached && watchFingerprint(cached.watchPaths) === cached.fingerprint) {
+        return cached.content;
+    }
+    const root = (0, path_1.resolve)(options.root ?? findProjectRoot(cwd));
+    const discovery = discoverProjectInstructionFiles(root, cwd, options.maxFiles ?? DEFAULT_MAX_FILES);
+    const content = renderProjectInstructions(loadDiscoveredFiles(root, discovery, options), options);
+    projectInstructionReloads += 1;
+    projectInstructionCache.set(cacheKey, {
+        content,
+        watchPaths: discovery.watchPaths,
+        fingerprint: watchFingerprint(discovery.watchPaths),
+    });
+    return content;
+}
+const projectInstructionCache = new Map();
+let projectInstructionReloads = 0;
+function watchFingerprint(paths) {
+    return paths
+        .map(path => {
+        try {
+            const stat = (0, fs_1.lstatSync)(path);
+            return `${path}:${stat.ino}:${stat.size}:${stat.mtimeMs}:${stat.ctimeMs}`;
+        }
+        catch {
+            return `${path}:missing`;
+        }
+    })
+        .join('|');
+}
+function clearProjectInstructionsCache() {
+    projectInstructionCache.clear();
+    projectInstructionReloads = 0;
+}
+/** Lightweight diagnostics used by doctor/tests without exposing cached content. */
+function getProjectInstructionsCacheStats() {
+    return { entries: projectInstructionCache.size, reloads: projectInstructionReloads };
 }
 //# sourceMappingURL=project-instructions.js.map

package/dist/services/project-instructions.js.map

@@ -1 +1 @@
-{"version":3,"file":"project-instructions.js","sourceRoot":"","sources":["../../src/services/project-instructions.ts"],"names":[],"mappings":";;AA+BA,0CAWC;AAmDD,kEAwBC;AAED,8DA4BC;AAED,0DAEC;AAvJD,2BAAqE;AACrE,+BAAwD;AAexD,MAAM,sBAAsB,GAAG,EAAE,GAAG,IAAI,CAAC;AACzC,MAAM,uBAAuB,GAAG,KAAM,CAAC;AAEvC,MAAM,YAAY,GAAG;IACnB,WAAW;IACX,WAAW;IACX,6BAA6B;IAC7B,cAAc;CACf,CAAC;AAEF,SAAS,MAAM,CAAC,IAAY;IAC1B,MAAM,IAAI,GAAG,IAAA,cAAO,EAAC,IAAI,CAAC,CAAC;IAC3B,OAAO,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AACrC,CAAC;AAED,SAAgB,eAAe,CAAC,GAAW;IACzC,IAAI,OAAO,GAAG,IAAA,cAAO,EAAC,GAAG,CAAC,CAAC;IAE3B,OAAO,IAAI,EAAE,CAAC;QACZ,IAAI,IAAA,eAAU,EAAC,IAAA,WAAI,EAAC,OAAO,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;YACtC,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;QAC7B,IAAI,IAAI,KAAK,OAAO;YAAE,OAAO,IAAA,cAAO,EAAC,GAAG,CAAC,CAAC;QAC1C,OAAO,GAAG,IAAI,CAAC;IACjB,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAY,EAAE,GAAW;IACpD,MAAM,YAAY,GAAG,IAAA,cAAO,EAAC,IAAI,CAAC,CAAC;IACnC,IAAI,OAAO,GAAG,IAAA,cAAO,EAAC,GAAG,CAAC,CAAC;IAC3B,MAAM,IAAI,GAAa,EAAE,CAAC;IAE1B,OAAO,IAAI,EAAE,CAAC;QACZ,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACtB,IAAI,OAAO,KAAK,YAAY;YAAE,MAAM;QACpC,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;QAC7B,IAAI,IAAI,KAAK,OAAO;YAAE,MAAM;QAC5B,OAAO,GAAG,IAAI,CAAC;IACjB,CAAC;IAED,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,YAAY,IAAI,CAAC,IAAA,eAAQ,EAAC,YAAY,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;AACnG,CAAC;AAED,SAAS,cAAc,CAAC,IAAY,EAAE,QAAgB;IACpD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAA,aAAQ,EAAC,IAAI,CAAC,CAAC;QAC5B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;YAAE,OAAO,IAAI,CAAC;QAChC,MAAM,OAAO,GAAG,IAAA,iBAAY,EAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC1E,OAAO;YACL,OAAO;YACP,SAAS,EAAE,IAAI,CAAC,IAAI,GAAG,QAAQ;SAChC,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,GAAW;IACjC,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAA,WAAI,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;IACxD,MAAM,cAAc,GAAG,IAAA,WAAI,EAAC,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IAErD,IAAI,IAAA,eAAU,EAAC,cAAc,CAAC,EAAE,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,IAAA,gBAAW,EAAC,cAAc,CAAC;iBAC1C,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;iBAC7D,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;iBAClC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAA,WAAI,EAAC,cAAc,EAAE,IAAI,CAAC,CAAC,CAAC;YAC3C,KAAK,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,sCAAsC;QACxC,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAgB,2BAA2B,CAAC,GAAW,EAAE,UAAqC,EAAE;IAC9F,MAAM,IAAI,GAAG,IAAA,cAAO,EAAC,OAAO,CAAC,IAAI,IAAI,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3D,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,sBAAsB,CAAC;IACpE,MAAM,KAAK,GAA6B,EAAE,CAAC;IAC3C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAE/B,KAAK,MAAM,GAAG,IAAI,mBAAmB,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;QACjD,KAAK,MAAM,QAAQ,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3C,MAAM,YAAY,GAAG,IAAA,cAAO,EAAC,QAAQ,CAAC,CAAC;YACvC,IAAI,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,IAAA,eAAU,EAAC,YAAY,CAAC;gBAAE,SAAS;YAClE,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YAEvB,MAAM,IAAI,GAAG,cAAc,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;YACxD,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE;gBAAE,SAAS;YAC5C,KAAK,CAAC,IAAI,CAAC;gBACT,IAAI,EAAE,IAAA,eAAQ,EAAC,IAAI,EAAE,YAAY,CAAC,IAAI,YAAY;gBAClD,YAAY;gBACZ,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE;gBAC/B,SAAS,EAAE,IAAI,CAAC,SAAS;aAC1B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAgB,yBAAyB,CAAC,KAA+B,EAAE,UAAqC,EAAE;IAChH,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAElC,IAAI,SAAS,GAAG,OAAO,CAAC,aAAa,IAAI,uBAAuB,CAAC;IACjE,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,SAAS,IAAI,CAAC;YAAE,MAAM;QAC1B,IAAI,KAAK,GAAG;YACV,MAAM,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,EAAE;YACxD,IAAI,CAAC,OAAO;SACb,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAEf,IAAI,KAAK,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;YAC7B,KAAK,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,GAAG,EAAE,CAAC,CAAC,qCAAqC,CAAC;YAC5F,SAAS,GAAG,CAAC,CAAC;QAChB,CAAC;aAAM,CAAC;YACN,SAAS,IAAI,KAAK,CAAC,MAAM,CAAC;QAC5B,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;IAED,OAAO;QACL,6DAA6D;QAC7D,gJAAgJ;QAChJ,EAAE;QACF,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC;KAC3B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,SAAgB,uBAAuB,CAAC,GAAW,EAAE,UAAqC,EAAE;IAC1F,OAAO,yBAAyB,CAAC,2BAA2B,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;AACvF,CAAC"}
+{"version":3,"file":"project-instructions.js","sourceRoot":"","sources":["../../src/services/project-instructions.ts"],"names":[],"mappings":";;AA+BA,0CAWC;AA6FD,kEAWC;AAED,8DA8BC;AAED,0DA+BC;AAwBD,sEAGC;AAGD,4EAEC;AAnPD,2BAAwD;AACxD,+BAAwD;AACxD,+DAA0F;AAiB1F,MAAM,sBAAsB,GAAG,EAAE,GAAG,IAAI,CAAC;AACzC,MAAM,uBAAuB,GAAG,KAAM,CAAC;AACvC,MAAM,4BAA4B,GAAG,GAAG,GAAG,IAAI,CAAC;AAChD,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAE9B,MAAM,YAAY,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,6BAA6B,EAAE,cAAc,CAAC,CAAC;AAE/F,SAAS,MAAM,CAAC,IAAY;IAC1B,MAAM,IAAI,GAAG,IAAA,cAAO,EAAC,IAAI,CAAC,CAAC;IAC3B,OAAO,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AACrC,CAAC;AAED,SAAgB,eAAe,CAAC,GAAW;IACzC,IAAI,OAAO,GAAG,IAAA,cAAO,EAAC,GAAG,CAAC,CAAC;IAE3B,OAAO,IAAI,EAAE,CAAC;QACZ,IAAI,IAAA,eAAU,EAAC,IAAA,WAAI,EAAC,OAAO,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;YACtC,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;QAC7B,IAAI,IAAI,KAAK,OAAO;YAAE,OAAO,IAAA,cAAO,EAAC,GAAG,CAAC,CAAC;QAC1C,OAAO,GAAG,IAAI,CAAC;IACjB,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAY,EAAE,GAAW;IACpD,MAAM,YAAY,GAAG,IAAA,cAAO,EAAC,IAAI,CAAC,CAAC;IACnC,IAAI,OAAO,GAAG,IAAA,cAAO,EAAC,GAAG,CAAC,CAAC;IAC3B,MAAM,IAAI,GAAa,EAAE,CAAC;IAE1B,OAAO,IAAI,EAAE,CAAC;QACZ,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACtB,IAAI,OAAO,KAAK,YAAY;YAAE,MAAM;QACpC,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;QAC7B,IAAI,IAAI,KAAK,OAAO;YAAE,MAAM;QAC5B,OAAO,GAAG,IAAI,CAAC;IACjB,CAAC;IAED,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,YAAY,IAAI,CAAC,IAAA,eAAQ,EAAC,YAAY,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;AACnG,CAAC;AAED,SAAS,cAAc,CACrB,IAAY,EACZ,IAAY,EACZ,QAAgB;IAEhB,MAAM,IAAI,GAAG,IAAA,+CAAyB,EAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC7D,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpD,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;AAC7E,CAAC;AAOD,SAAS,+BAA+B,CACtC,IAAY,EACZ,GAAW,EACX,QAAgB;IAEhB,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,MAAM,UAAU,GAAG,IAAI,GAAG,CAAS,CAAC,IAAA,WAAI,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IACzD,MAAM,YAAY,GAAG,CAAC,IAAY,EAAQ,EAAE;QAC1C,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrB,IAAI,UAAU,CAAC,MAAM,GAAG,QAAQ,IAAI,IAAA,eAAU,EAAC,IAAI,CAAC;YAAE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9E,CAAC,CAAC;IAEF,KAAK,MAAM,GAAG,IAAI,mBAAmB,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;QACjD,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,IAAA,WAAI,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5D,MAAM,cAAc,GAAG,IAAA,WAAI,EAAC,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QACrD,UAAU,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAC/B,MAAM,iBAAiB,GAAG,IAAA,4CAAsB,EAAC,cAAc,EAAE,IAAI,CAAC,CAAC;QACvE,IAAI,CAAC,iBAAiB,CAAC,EAAE,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,WAAW,EAAE;YAAE,SAAS;QAC9E,IAAI,CAAC;YACH,KAAK,MAAM,IAAI,IAAI,IAAA,gBAAW,EAAC,iBAAiB,CAAC,aAAa,CAAC;iBAC5D,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;iBAC7D,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtC,YAAY,CAAC,IAAA,WAAI,EAAC,cAAc,EAAE,IAAI,CAAC,CAAC,CAAC;YAC3C,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,sCAAsC;QACxC,CAAC;IACH,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,GAAG,UAAU,CAAC,EAAE,CAAC;AACrD,CAAC;AAED,SAAS,mBAAmB,CAC1B,IAAY,EACZ,SAAsC,EACtC,OAAkC;IAElC,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,sBAAsB,CAAC;IACpE,IAAI,kBAAkB,GAAG,OAAO,CAAC,iBAAiB,IAAI,4BAA4B,CAAC;IACnF,MAAM,KAAK,GAA6B,EAAE,CAAC;IAC3C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAE/B,KAAK,MAAM,QAAQ,IAAI,SAAS,CAAC,UAAU,EAAE,CAAC;QAC5C,MAAM,YAAY,GAAG,IAAA,cAAO,EAAC,QAAQ,CAAC,CAAC;QACvC,IAAI,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,kBAAkB,IAAI,CAAC;YAAE,SAAS;QAChE,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACvB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,kBAAkB,CAAC,CAAC;QAC7D,MAAM,IAAI,GAAG,cAAc,CAAC,YAAY,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;QAC3D,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,kBAAkB,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC9D,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE;YAAE,SAAS;QACnC,KAAK,CAAC,IAAI,CAAC;YACT,IAAI,EAAE,IAAA,eAAQ,EAAC,IAAI,EAAE,YAAY,CAAC,IAAI,YAAY;YAClD,YAAY;YACZ,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE;YAC/B,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAgB,2BAA2B,CACzC,GAAW,EACX,UAAqC,EAAE;IAEvC,MAAM,IAAI,GAAG,IAAA,cAAO,EAAC,OAAO,CAAC,IAAI,IAAI,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3D,MAAM,SAAS,GAAG,+BAA+B,CAC/C,IAAI,EACJ,GAAG,EACH,OAAO,CAAC,QAAQ,IAAI,iBAAiB,CACtC,CAAC;IACF,OAAO,mBAAmB,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;AACvD,CAAC;AAED,SAAgB,yBAAyB,CACvC,KAA+B,EAC/B,UAAqC,EAAE;IAEvC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAElC,IAAI,SAAS,GAAG,OAAO,CAAC,aAAa,IAAI,uBAAuB,CAAC;IACjE,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,SAAS,IAAI,CAAC;YAAE,MAAM;QAC1B,IAAI,KAAK,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CACvF,MAAM,CACP,CAAC;QAEF,IAAI,KAAK,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;YAC7B,KAAK,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,GAAG,EAAE,CAAC,CAAC,qCAAqC,CAAC;YAC5F,SAAS,GAAG,CAAC,CAAC;QAChB,CAAC;aAAM,CAAC;YACN,SAAS,IAAI,KAAK,CAAC,MAAM,CAAC;QAC5B,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;IAED,OAAO;QACL,6DAA6D;QAC7D,gJAAgJ;QAChJ,EAAE;QACF,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC;KAC3B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,SAAgB,uBAAuB,CACrC,GAAW,EACX,UAAqC,EAAE;IAEvC,MAAM,QAAQ,GAAG;QACf,IAAA,cAAO,EAAC,GAAG,CAAC;QACZ,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAA,cAAO,EAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM;QAC7C,OAAO,CAAC,YAAY,IAAI,sBAAsB;QAC9C,OAAO,CAAC,aAAa,IAAI,uBAAuB;QAChD,OAAO,CAAC,iBAAiB,IAAI,4BAA4B;QACzD,OAAO,CAAC,QAAQ,IAAI,iBAAiB;KACtC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACZ,MAAM,MAAM,GAAG,uBAAuB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACrD,IAAI,MAAM,IAAI,gBAAgB,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,MAAM,CAAC,WAAW,EAAE,CAAC;QACzE,OAAO,MAAM,CAAC,OAAO,CAAC;IACxB,CAAC;IAED,MAAM,IAAI,GAAG,IAAA,cAAO,EAAC,OAAO,CAAC,IAAI,IAAI,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3D,MAAM,SAAS,GAAG,+BAA+B,CAC/C,IAAI,EACJ,GAAG,EACH,OAAO,CAAC,QAAQ,IAAI,iBAAiB,CACtC,CAAC;IACF,MAAM,OAAO,GAAG,yBAAyB,CAAC,mBAAmB,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;IAClG,yBAAyB,IAAI,CAAC,CAAC;IAC/B,uBAAuB,CAAC,GAAG,CAAC,QAAQ,EAAE;QACpC,OAAO;QACP,UAAU,EAAE,SAAS,CAAC,UAAU;QAChC,WAAW,EAAE,gBAAgB,CAAC,SAAS,CAAC,UAAU,CAAC;KACpD,CAAC,CAAC;IACH,OAAO,OAAO,CAAC;AACjB,CAAC;AAQD,MAAM,uBAAuB,GAAG,IAAI,GAAG,EAAqC,CAAC;AAC7E,IAAI,yBAAyB,GAAG,CAAC,CAAC;AAElC,SAAS,gBAAgB,CAAC,KAAe;IACvC,OAAO,KAAK;SACT,GAAG,CAAC,IAAI,CAAC,EAAE;QACV,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAA,cAAS,EAAC,IAAI,CAAC,CAAC;YAC7B,OAAO,GAAG,IAAI,IAAI,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QAC5E,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,GAAG,IAAI,UAAU,CAAC;QAC3B,CAAC;IACH,CAAC,CAAC;SACD,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAED,SAAgB,6BAA6B;IAC3C,uBAAuB,CAAC,KAAK,EAAE,CAAC;IAChC,yBAAyB,GAAG,CAAC,CAAC;AAChC,CAAC;AAED,oFAAoF;AACpF,SAAgB,gCAAgC;IAC9C,OAAO,EAAE,OAAO,EAAE,uBAAuB,CAAC,IAAI,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC;AACvF,CAAC"}

package/dist/services/provider-resilience/request-gate.d.ts

@@ -26,9 +26,11 @@ export interface ProviderRequestGateOptions {
 export declare class ProviderRequestGate {
     private readonly maxConcurrent;
     private activeCount;
+    private readonly activeByProvider;
     private waiters;
-    private cooldownUntil;
-    private cooldownReason;
+    private readonly cooldowns;
+    private cooldownTimer;
+    private cooldownTimerDue;
     constructor(options?: ProviderRequestGateOptions);
     /**
      * Acquire a gate lease. If cooldown is active, waits until it expires.
@@ -36,12 +38,14 @@ export declare class ProviderRequestGate {
      */
     acquire(request: GateRequest): Promise<GateLease>;
     /**
-     * Enter cooldown for a provider key. All new requests wait until
-     * the cooldown expires. Existing requests are not aborted.
+     * Enter cooldown for one provider key. Other providers may continue to use
+     * the shared concurrency budget. Existing requests are not aborted.
      */
     enterCooldown(providerKey: string, until: number, reason: string): void;
     /** Snapshot for diagnostics / UI. */
-    snapshot(): GateSnapshot;
+    snapshot(providerKey?: string): GateSnapshot;
     private tryDispatch;
+    private clearExpiredCooldowns;
+    private scheduleCooldownWake;
 }
 //# sourceMappingURL=request-gate.d.ts.map

package/dist/services/provider-resilience/request-gate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"request-gate.d.ts","sourceRoot":"","sources":["../../../src/services/provider-resilience/request-gate.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,WAAW,CAAC;CAC3B;AAED,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,MAAM,IAAI,CAAC;CACrB;AAED,MAAM,WAAW,YAAY;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAED,MAAM,WAAW,0BAA0B;IACzC,qDAAqD;IACrD,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AASD,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC,OAAO,CAAC,WAAW,CAAK;IACxB,OAAO,CAAC,OAAO,CAAoB;IACnC,OAAO,CAAC,aAAa,CAAK;IAC1B,OAAO,CAAC,cAAc,CAAM;gBAEhB,OAAO,GAAE,0BAA+B;IAOpD;;;OAGG;IACH,OAAO,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,SAAS,CAAC;IA2BjD;;;OAGG;IACH,aAAa,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;IAOvE,qCAAqC;IACrC,QAAQ,IAAI,YAAY;IASxB,OAAO,CAAC,WAAW;CA0BpB"}
+{"version":3,"file":"request-gate.d.ts","sourceRoot":"","sources":["../../../src/services/provider-resilience/request-gate.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,WAAW,CAAC;CAC3B;AAED,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,MAAM,IAAI,CAAC;CACrB;AAED,MAAM,WAAW,YAAY;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAED,MAAM,WAAW,0BAA0B;IACzC,qDAAqD;IACrD,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAcD,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC,OAAO,CAAC,WAAW,CAAK;IACxB,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAA6B;IAC9D,OAAO,CAAC,OAAO,CAAoB;IACnC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAuC;IACjE,OAAO,CAAC,aAAa,CAA8C;IACnE,OAAO,CAAC,gBAAgB,CAAK;gBAEjB,OAAO,GAAE,0BAA+B;IAMpD;;;OAGG;IACH,OAAO,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,SAAS,CAAC;IA4BjD;;;OAGG;IACH,aAAa,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;IAQvE,qCAAqC;IACrC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,YAAY;IAe5C,OAAO,CAAC,WAAW;IA8BnB,OAAO,CAAC,qBAAqB;IAO7B,OAAO,CAAC,oBAAoB;CA6B7B"}

package/dist/services/provider-resilience/request-gate.js

@@ -11,13 +11,14 @@ exports.ProviderRequestGate = void 0;
 class ProviderRequestGate {
     constructor(options = {}) {
         this.activeCount = 0;
+        this.activeByProvider = new Map();
         this.waiters = [];
-        this.cooldownUntil = 0;
-        this.cooldownReason = '';
+        this.cooldowns = new Map();
+        this.cooldownTimer = null;
+        this.cooldownTimerDue = 0;
         const configured = Number(options.maxConcurrent ?? 6);
-        this.maxConcurrent = Number.isFinite(configured) && configured >= 1
-            ? Math.floor(configured)
-            : 1;
+        this.maxConcurrent =
+            Number.isFinite(configured) && configured >= 1 ? Math.floor(configured) : 1;
     }
     /**
      * Acquire a gate lease. If cooldown is active, waits until it expires.
@@ -35,6 +36,7 @@ class ProviderRequestGate {
                     if (idx >= 0) {
                         this.waiters.splice(idx, 1);
                         reject(new Error('aborted'));
+                        this.tryDispatch();
                     }
                     request.abortSignal?.removeEventListener('abort', onAbort);
                 };
@@ -48,38 +50,44 @@ class ProviderRequestGate {
         });
     }
     /**
-     * Enter cooldown for a provider key. All new requests wait until
-     * the cooldown expires. Existing requests are not aborted.
+     * Enter cooldown for one provider key. Other providers may continue to use
+     * the shared concurrency budget. Existing requests are not aborted.
      */
     enterCooldown(providerKey, until, reason) {
-        if (until > this.cooldownUntil) {
-            this.cooldownUntil = until;
-            this.cooldownReason = reason;
+        const current = this.cooldowns.get(providerKey);
+        if (!current || until > current.until) {
+            this.cooldowns.set(providerKey, { until, reason });
+            this.tryDispatch();
         }
     }
     /** Snapshot for diagnostics / UI. */
-    snapshot() {
+    snapshot(providerKey) {
+        this.clearExpiredCooldowns();
+        const cooldown = providerKey
+            ? this.cooldowns.get(providerKey)
+            : [...this.cooldowns.values()].sort((a, b) => b.until - a.until)[0];
         return {
-            activeCount: this.activeCount,
-            waitingCount: this.waiters.length,
-            cooldownUntil: this.cooldownUntil > Date.now() ? this.cooldownUntil : null,
-            cooldownReason: this.cooldownUntil > Date.now() ? this.cooldownReason : null,
+            activeCount: providerKey ? (this.activeByProvider.get(providerKey) ?? 0) : this.activeCount,
+            waitingCount: providerKey
+                ? this.waiters.filter(waiter => waiter.request.providerKey === providerKey).length
+                : this.waiters.length,
+            cooldownUntil: cooldown?.until ?? null,
+            cooldownReason: cooldown?.reason ?? null,
         };
     }
     tryDispatch() {
+        this.clearExpiredCooldowns();
         while (this.waiters.length > 0 && this.activeCount < this.maxConcurrent) {
-            // Check cooldown.
-            if (Date.now() < this.cooldownUntil) {
-                // Still in cooldown — dispatch after cooldown expires.
-                const remaining = this.cooldownUntil - Date.now();
-                setTimeout(() => this.tryDispatch(), remaining + 50);
-                return;
-            }
-            const next = this.waiters.shift();
+            const nextIndex = this.waiters.findIndex(waiter => !this.cooldowns.has(waiter.request.providerKey));
+            if (nextIndex < 0)
+                break;
+            const [next] = this.waiters.splice(nextIndex, 1);
             if (next.request.abortSignal && next.onAbort) {
                 next.request.abortSignal.removeEventListener('abort', next.onAbort);
             }
             this.activeCount++;
+            const providerKey = next.request.providerKey;
+            this.activeByProvider.set(providerKey, (this.activeByProvider.get(providerKey) ?? 0) + 1);
             let released = false;
             next.resolve({
                 release: () => {
@@ -87,10 +95,50 @@ class ProviderRequestGate {
                         return;
                     released = true;
                     this.activeCount = Math.max(0, this.activeCount - 1);
+                    const providerActive = Math.max(0, (this.activeByProvider.get(providerKey) ?? 1) - 1);
+                    if (providerActive === 0)
+                        this.activeByProvider.delete(providerKey);
+                    else
+                        this.activeByProvider.set(providerKey, providerActive);
                     this.tryDispatch();
                 },
             });
         }
+        this.scheduleCooldownWake();
+    }
+    clearExpiredCooldowns() {
+        const now = Date.now();
+        for (const [key, cooldown] of this.cooldowns) {
+            if (cooldown.until <= now)
+                this.cooldowns.delete(key);
+        }
+    }
+    scheduleCooldownWake() {
+        const waitingKeys = new Set(this.waiters.map(waiter => waiter.request.providerKey));
+        const earliest = [...waitingKeys]
+            .map(key => this.cooldowns.get(key)?.until)
+            .filter((until) => until !== undefined)
+            .sort((a, b) => a - b)[0];
+        if (earliest === undefined || this.activeCount >= this.maxConcurrent) {
+            if (this.cooldownTimer && earliest === undefined) {
+                clearTimeout(this.cooldownTimer);
+                this.cooldownTimer = null;
+                this.cooldownTimerDue = 0;
+            }
+            return;
+        }
+        if (this.cooldownTimer && this.cooldownTimerDue <= earliest)
+            return;
+        if (this.cooldownTimer)
+            clearTimeout(this.cooldownTimer);
+        this.cooldownTimerDue = earliest;
+        this.cooldownTimer = setTimeout(() => {
+            this.cooldownTimer = null;
+            this.cooldownTimerDue = 0;
+            this.tryDispatch();
+        }, Math.max(0, earliest - Date.now()) + 1);
+        const timer = this.cooldownTimer;
+        timer.unref?.();
     }
 }
 exports.ProviderRequestGate = ProviderRequestGate;

package/dist/services/provider-resilience/request-gate.js.map

@@ -1 +1 @@
-{"version":3,"file":"request-gate.js","sourceRoot":"","sources":["../../../src/services/provider-resilience/request-gate.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;;AA+BH,MAAa,mBAAmB;IAO9B,YAAY,UAAsC,EAAE;QAL5C,gBAAW,GAAG,CAAC,CAAC;QAChB,YAAO,GAAiB,EAAE,CAAC;QAC3B,kBAAa,GAAG,CAAC,CAAC;QAClB,mBAAc,GAAG,EAAE,CAAC;QAG1B,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,aAAa,IAAI,CAAC,CAAC,CAAC;QACtD,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,UAAU,IAAI,CAAC;YACjE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;YACxB,CAAC,CAAC,CAAC,CAAC;IACR,CAAC;IAED;;;OAGG;IACH,OAAO,CAAC,OAAoB;QAC1B,IAAI,OAAO,CAAC,WAAW,EAAE,OAAO,EAAE,CAAC;YACjC,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;QAC9C,CAAC;QAED,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,MAAM,GAAe,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;YACxD,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;gBACxB,MAAM,OAAO,GAAG,GAAS,EAAE;oBACzB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;oBACzC,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC;wBACb,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;wBAC5B,MAAM,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;oBAC/B,CAAC;oBACD,OAAO,CAAC,WAAW,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBAC7D,CAAC,CAAC;gBACF,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC;gBACzB,OAAO,CAAC,WAAW,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACzE,CAAC;YAED,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC1B,8CAA8C;YAC9C,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACrE,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACH,aAAa,CAAC,WAAmB,EAAE,KAAa,EAAE,MAAc;QAC9D,IAAI,KAAK,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;YAC/B,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC;YAC3B,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,qCAAqC;IACrC,QAAQ;QACN,OAAO;YACL,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;YACjC,aAAa,EAAE,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI;YAC1E,cAAc,EAAE,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI;SAC7E,CAAC;IACJ,CAAC;IAEO,WAAW;QACjB,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;YACxE,kBAAkB;YAClB,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;gBACpC,uDAAuD;gBACvD,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBAClD,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,SAAS,GAAG,EAAE,CAAC,CAAC;gBACrD,OAAO;YACT,CAAC;YAED,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAG,CAAC;YACnC,IAAI,IAAI,CAAC,OAAO,CAAC,WAAW,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBAC7C,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,mBAAmB,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YACtE,CAAC;YACD,IAAI,CAAC,WAAW,EAAE,CAAC;YACnB,IAAI,QAAQ,GAAG,KAAK,CAAC;YACrB,IAAI,CAAC,OAAO,CAAC;gBACX,OAAO,EAAE,GAAG,EAAE;oBACZ,IAAI,QAAQ;wBAAE,OAAO;oBACrB,QAAQ,GAAG,IAAI,CAAC;oBAChB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC;oBACrD,IAAI,CAAC,WAAW,EAAE,CAAC;gBACrB,CAAC;aACF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF;AA5FD,kDA4FC"}
+{"version":3,"file":"request-gate.js","sourceRoot":"","sources":["../../../src/services/provider-resilience/request-gate.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;;AAoCH,MAAa,mBAAmB;IAS9B,YAAY,UAAsC,EAAE;QAP5C,gBAAW,GAAG,CAAC,CAAC;QACP,qBAAgB,GAAG,IAAI,GAAG,EAAkB,CAAC;QACtD,YAAO,GAAiB,EAAE,CAAC;QAClB,cAAS,GAAG,IAAI,GAAG,EAA4B,CAAC;QACzD,kBAAa,GAAyC,IAAI,CAAC;QAC3D,qBAAgB,GAAG,CAAC,CAAC;QAG3B,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,aAAa,IAAI,CAAC,CAAC,CAAC;QACtD,IAAI,CAAC,aAAa;YAChB,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAChF,CAAC;IAED;;;OAGG;IACH,OAAO,CAAC,OAAoB;QAC1B,IAAI,OAAO,CAAC,WAAW,EAAE,OAAO,EAAE,CAAC;YACjC,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;QAC9C,CAAC;QAED,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,MAAM,GAAe,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;YACxD,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;gBACxB,MAAM,OAAO,GAAG,GAAS,EAAE;oBACzB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;oBACzC,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC;wBACb,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;wBAC5B,MAAM,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;wBAC7B,IAAI,CAAC,WAAW,EAAE,CAAC;oBACrB,CAAC;oBACD,OAAO,CAAC,WAAW,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBAC7D,CAAC,CAAC;gBACF,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC;gBACzB,OAAO,CAAC,WAAW,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACzE,CAAC;YAED,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC1B,8CAA8C;YAC9C,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACrE,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACH,aAAa,CAAC,WAAmB,EAAE,KAAa,EAAE,MAAc;QAC9D,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAChD,IAAI,CAAC,OAAO,IAAI,KAAK,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC;YACtC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;YACnD,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,CAAC;IACH,CAAC;IAED,qCAAqC;IACrC,QAAQ,CAAC,WAAoB;QAC3B,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,WAAW;YAC1B,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC;YACjC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACtE,OAAO;YACL,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW;YAC3F,YAAY,EAAE,WAAW;gBACvB,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,KAAK,WAAW,CAAC,CAAC,MAAM;gBAClF,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM;YACvB,aAAa,EAAE,QAAQ,EAAE,KAAK,IAAI,IAAI;YACtC,cAAc,EAAE,QAAQ,EAAE,MAAM,IAAI,IAAI;SACzC,CAAC;IACJ,CAAC;IAEO,WAAW;QACjB,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;YACxE,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CACtC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAC1D,CAAC;YACF,IAAI,SAAS,GAAG,CAAC;gBAAE,MAAM;YACzB,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;YACjD,IAAI,IAAI,CAAC,OAAO,CAAC,WAAW,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBAC7C,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,mBAAmB,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YACtE,CAAC;YACD,IAAI,CAAC,WAAW,EAAE,CAAC;YACnB,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;YAC7C,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC1F,IAAI,QAAQ,GAAG,KAAK,CAAC;YACrB,IAAI,CAAC,OAAO,CAAC;gBACX,OAAO,EAAE,GAAG,EAAE;oBACZ,IAAI,QAAQ;wBAAE,OAAO;oBACrB,QAAQ,GAAG,IAAI,CAAC;oBAChB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC;oBACrD,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;oBACtF,IAAI,cAAc,KAAK,CAAC;wBAAE,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;;wBAC/D,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;oBAC5D,IAAI,CAAC,WAAW,EAAE,CAAC;gBACrB,CAAC;aACF,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,oBAAoB,EAAE,CAAC;IAC9B,CAAC;IAEO,qBAAqB;QAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YAC7C,IAAI,QAAQ,CAAC,KAAK,IAAI,GAAG;gBAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAEO,oBAAoB;QAC1B,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;QACpF,MAAM,QAAQ,GAAG,CAAC,GAAG,WAAW,CAAC;aAC9B,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC;aAC1C,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC;aACvD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAE5B,IAAI,QAAQ,KAAK,SAAS,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACrE,IAAI,IAAI,CAAC,aAAa,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBACjD,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;gBACjC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;gBAC1B,IAAI,CAAC,gBAAgB,GAAG,CAAC,CAAC;YAC5B,CAAC;YACD,OAAO;QACT,CAAC;QACD,IAAI,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,gBAAgB,IAAI,QAAQ;YAAE,OAAO;QACpE,IAAI,IAAI,CAAC,aAAa;YAAE,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACzD,IAAI,CAAC,gBAAgB,GAAG,QAAQ,CAAC;QACjC,IAAI,CAAC,aAAa,GAAG,UAAU,CAC7B,GAAG,EAAE;YACH,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;YAC1B,IAAI,CAAC,gBAAgB,GAAG,CAAC,CAAC;YAC1B,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,CAAC,EACD,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CACvC,CAAC;QACF,MAAM,KAAK,GAAG,IAAI,CAAC,aAAuC,CAAC;QAC3D,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IAClB,CAAC;CACF;AA7ID,kDA6IC"}

package/dist/services/safe-project-reader.d.ts

@@ -0,0 +1,30 @@
+import { type Stats } from 'fs';
+export type SafeProjectPathFailureReason = 'missing' | 'outside' | 'symlink' | 'non_regular' | 'unreadable';
+export interface SafeProjectPathFailure {
+    ok: false;
+    reason: SafeProjectPathFailureReason;
+    error: string;
+}
+export interface SafeProjectPathSuccess {
+    ok: true;
+    canonicalPath: string;
+    canonicalRoot: string;
+    stats: Stats;
+}
+export type SafeProjectPathResult = SafeProjectPathFailure | SafeProjectPathSuccess;
+export interface SafeProjectFileSuccess extends SafeProjectPathSuccess {
+    bytes: Buffer;
+    sizeBytes: number;
+    truncated: boolean;
+}
+export type SafeProjectFileResult = SafeProjectPathFailure | SafeProjectFileSuccess;
+/**
+ * Resolve an existing path beneath a trusted root without crossing a symbolic
+ * link. The root itself may be reached through a platform alias such as
+ * `/tmp -> /private/tmp`; descendants must still map one-to-one below its
+ * canonical path.
+ */
+export declare function inspectSafeProjectPath(path: string, root: string): SafeProjectPathResult;
+/** Open and read a bounded prefix while re-checking the opened inode. */
+export declare function readSafeProjectFilePrefix(path: string, root: string, maxBytes: number): SafeProjectFileResult;
+//# sourceMappingURL=safe-project-reader.d.ts.map

package/dist/services/safe-project-reader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"safe-project-reader.d.ts","sourceRoot":"","sources":["../../src/services/safe-project-reader.ts"],"names":[],"mappings":"AAAA,OAAO,EASL,KAAK,KAAK,EACX,MAAM,IAAI,CAAC;AAGZ,MAAM,MAAM,4BAA4B,GACpC,SAAS,GACT,SAAS,GACT,SAAS,GACT,aAAa,GACb,YAAY,CAAC;AAEjB,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,KAAK,CAAC;IACV,MAAM,EAAE,4BAA4B,CAAC;IACrC,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,IAAI,CAAC;IACT,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,KAAK,CAAC;CACd;AAED,MAAM,MAAM,qBAAqB,GAAG,sBAAsB,GAAG,sBAAsB,CAAC;AAEpF,MAAM,WAAW,sBAAuB,SAAQ,sBAAsB;IACpE,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,MAAM,qBAAqB,GAAG,sBAAsB,GAAG,sBAAsB,CAAC;AA0BpF;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,qBAAqB,CAqDxF;AAED,yEAAyE;AACzE,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,GACf,qBAAqB,CA2DvB"}

package/dist/services/safe-project-reader.js

@@ -0,0 +1,141 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.inspectSafeProjectPath = inspectSafeProjectPath;
+exports.readSafeProjectFilePrefix = readSafeProjectFilePrefix;
+const fs_1 = require("fs");
+const path_1 = require("path");
+function isWithin(root, target) {
+    const rel = (0, path_1.relative)(root, target);
+    return rel === '' || (!rel.startsWith('..') && !(0, path_1.isAbsolute)(rel));
+}
+function failure(reason, error) {
+    return { ok: false, reason, error };
+}
+function errorCode(error) {
+    if (!error || typeof error !== 'object' || !('code' in error))
+        return undefined;
+    return typeof error.code === 'string' && /^[A-Z0-9_]+$/u.test(error.code)
+        ? error.code
+        : undefined;
+}
+function unreadable(operation, error) {
+    const code = errorCode(error);
+    return failure('unreadable', `${operation} failed inside the allowed project boundary${code ? ` (${code})` : ''}.`);
+}
+/**
+ * Resolve an existing path beneath a trusted root without crossing a symbolic
+ * link. The root itself may be reached through a platform alias such as
+ * `/tmp -> /private/tmp`; descendants must still map one-to-one below its
+ * canonical path.
+ */
+function inspectSafeProjectPath(path, root) {
+    const resolvedRoot = (0, path_1.resolve)(root);
+    const resolvedPath = (0, path_1.resolve)(path);
+    const lexicalRelative = (0, path_1.relative)(resolvedRoot, resolvedPath);
+    if (lexicalRelative.startsWith('..') || (0, path_1.isAbsolute)(lexicalRelative)) {
+        return failure('outside', 'Path is outside the allowed project root.');
+    }
+    let canonicalRoot;
+    try {
+        canonicalRoot = (0, fs_1.realpathSync)(resolvedRoot);
+    }
+    catch (error) {
+        return unreadable('Allowed project root resolution', error);
+    }
+    let linkStats;
+    try {
+        linkStats = (0, fs_1.lstatSync)(resolvedPath);
+    }
+    catch (error) {
+        const code = errorCode(error);
+        return code === 'ENOENT'
+            ? failure('missing', 'Path does not exist.')
+            : unreadable('Path metadata inspection', error);
+    }
+    if (linkStats.isSymbolicLink()) {
+        return failure('symlink', 'Symbolic links are not loaded across the project trust boundary.');
+    }
+    let canonicalPath;
+    try {
+        canonicalPath = (0, fs_1.realpathSync)(resolvedPath);
+    }
+    catch (error) {
+        return unreadable('Canonical path resolution', error);
+    }
+    const expectedCanonicalPath = (0, path_1.resolve)(canonicalRoot, lexicalRelative);
+    if (canonicalPath !== expectedCanonicalPath) {
+        return failure('symlink', 'Path traverses a symbolic link and was not loaded.');
+    }
+    if (!isWithin(canonicalRoot, canonicalPath)) {
+        return failure('outside', 'Canonical path is outside the allowed project root.');
+    }
+    let stats;
+    try {
+        stats = (0, fs_1.statSync)(canonicalPath);
+    }
+    catch (error) {
+        return unreadable('Canonical path metadata inspection', error);
+    }
+    if (!stats.isFile() && !stats.isDirectory()) {
+        return failure('non_regular', 'Path is not a regular file or directory.');
+    }
+    return { ok: true, canonicalPath, canonicalRoot, stats };
+}
+/** Open and read a bounded prefix while re-checking the opened inode. */
+function readSafeProjectFilePrefix(path, root, maxBytes) {
+    const inspected = inspectSafeProjectPath(path, root);
+    if (!inspected.ok)
+        return inspected;
+    if (!inspected.stats.isFile()) {
+        return failure('non_regular', 'Path is not a regular file.');
+    }
+    const limit = Number.isSafeInteger(maxBytes) && maxBytes >= 0 ? maxBytes : 0;
+    const noFollow = typeof fs_1.constants.O_NOFOLLOW === 'number' ? fs_1.constants.O_NOFOLLOW : 0;
+    let descriptor;
+    try {
+        descriptor = (0, fs_1.openSync)(inspected.canonicalPath, fs_1.constants.O_RDONLY | noFollow);
+    }
+    catch (error) {
+        return errorCode(error) === 'ELOOP'
+            ? failure('symlink', 'Path changed to a symbolic link while it was being opened.')
+            : unreadable('File open', error);
+    }
+    try {
+        const openedStats = (0, fs_1.fstatSync)(descriptor);
+        if (!openedStats.isFile()) {
+            return failure('non_regular', 'Opened path is not a regular file.');
+        }
+        // Re-resolve after open and compare the descriptor inode with the current
+        // canonical target. A replacement between validation and open fails closed.
+        const currentCanonicalPath = (0, fs_1.realpathSync)(inspected.canonicalPath);
+        if (currentCanonicalPath !== inspected.canonicalPath ||
+            !isWithin(inspected.canonicalRoot, currentCanonicalPath)) {
+            return failure('symlink', 'Path changed while it was being opened.');
+        }
+        // lstat the final path instead of following a replacement symlink with
+        // stat. The pathname must still resolve to the descriptor's exact inode.
+        const currentStats = (0, fs_1.lstatSync)(inspected.canonicalPath);
+        if (currentStats.isSymbolicLink() ||
+            currentStats.dev !== openedStats.dev ||
+            currentStats.ino !== openedStats.ino) {
+            return failure('symlink', 'Path changed while it was being opened.');
+        }
+        const bytesToRead = Math.min(openedStats.size, limit);
+        const buffer = Buffer.alloc(bytesToRead);
+        const bytesRead = bytesToRead > 0 ? (0, fs_1.readSync)(descriptor, buffer, 0, bytesToRead, 0) : 0;
+        return {
+            ...inspected,
+            stats: openedStats,
+            bytes: buffer.subarray(0, bytesRead),
+            sizeBytes: openedStats.size,
+            truncated: openedStats.size > limit,
+        };
+    }
+    catch (error) {
+        return unreadable('Opened file validation or read', error);
+    }
+    finally {
+        (0, fs_1.closeSync)(descriptor);
+    }
+}
+//# sourceMappingURL=safe-project-reader.js.map

package/dist/services/safe-project-reader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"safe-project-reader.js","sourceRoot":"","sources":["../../src/services/safe-project-reader.ts"],"names":[],"mappings":";;AAyEA,wDAqDC;AAGD,8DA+DC;AAhMD,2BAUY;AACZ,+BAAqD;AAgCrD,SAAS,QAAQ,CAAC,IAAY,EAAE,MAAc;IAC5C,MAAM,GAAG,GAAG,IAAA,eAAQ,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACnC,OAAO,GAAG,KAAK,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAA,iBAAU,EAAC,GAAG,CAAC,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,OAAO,CAAC,MAAoC,EAAE,KAAa;IAClE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AACtC,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAChF,OAAO,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;QACvE,CAAC,CAAC,KAAK,CAAC,IAAI;QACZ,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,SAAS,UAAU,CAAC,SAAiB,EAAE,KAAe;IACpD,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAC9B,OAAO,OAAO,CACZ,YAAY,EACZ,GAAG,SAAS,8CAA8C,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,CACtF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAgB,sBAAsB,CAAC,IAAY,EAAE,IAAY;IAC/D,MAAM,YAAY,GAAG,IAAA,cAAO,EAAC,IAAI,CAAC,CAAC;IACnC,MAAM,YAAY,GAAG,IAAA,cAAO,EAAC,IAAI,CAAC,CAAC;IACnC,MAAM,eAAe,GAAG,IAAA,eAAQ,EAAC,YAAY,EAAE,YAAY,CAAC,CAAC;IAC7D,IAAI,eAAe,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAA,iBAAU,EAAC,eAAe,CAAC,EAAE,CAAC;QACpE,OAAO,OAAO,CAAC,SAAS,EAAE,2CAA2C,CAAC,CAAC;IACzE,CAAC;IAED,IAAI,aAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,aAAa,GAAG,IAAA,iBAAY,EAAC,YAAY,CAAC,CAAC;IAC7C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,UAAU,CAAC,iCAAiC,EAAE,KAAK,CAAC,CAAC;IAC9D,CAAC;IAED,IAAI,SAAgB,CAAC;IACrB,IAAI,CAAC;QACH,SAAS,GAAG,IAAA,cAAS,EAAC,YAAY,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QAC9B,OAAO,IAAI,KAAK,QAAQ;YACtB,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,sBAAsB,CAAC;YAC5C,CAAC,CAAC,UAAU,CAAC,0BAA0B,EAAE,KAAK,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,SAAS,CAAC,cAAc,EAAE,EAAE,CAAC;QAC/B,OAAO,OAAO,CAAC,SAAS,EAAE,kEAAkE,CAAC,CAAC;IAChG,CAAC;IAED,IAAI,aAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,aAAa,GAAG,IAAA,iBAAY,EAAC,YAAY,CAAC,CAAC;IAC7C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,UAAU,CAAC,2BAA2B,EAAE,KAAK,CAAC,CAAC;IACxD,CAAC;IAED,MAAM,qBAAqB,GAAG,IAAA,cAAO,EAAC,aAAa,EAAE,eAAe,CAAC,CAAC;IACtE,IAAI,aAAa,KAAK,qBAAqB,EAAE,CAAC;QAC5C,OAAO,OAAO,CAAC,SAAS,EAAE,oDAAoD,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC,EAAE,CAAC;QAC5C,OAAO,OAAO,CAAC,SAAS,EAAE,qDAAqD,CAAC,CAAC;IACnF,CAAC;IAED,IAAI,KAAY,CAAC;IACjB,IAAI,CAAC;QACH,KAAK,GAAG,IAAA,aAAQ,EAAC,aAAa,CAAC,CAAC;IAClC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,UAAU,CAAC,oCAAoC,EAAE,KAAK,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;QAC5C,OAAO,OAAO,CAAC,aAAa,EAAE,0CAA0C,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;AAC3D,CAAC;AAED,yEAAyE;AACzE,SAAgB,yBAAyB,CACvC,IAAY,EACZ,IAAY,EACZ,QAAgB;IAEhB,MAAM,SAAS,GAAG,sBAAsB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACrD,IAAI,CAAC,SAAS,CAAC,EAAE;QAAE,OAAO,SAAS,CAAC;IACpC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;QAC9B,OAAO,OAAO,CAAC,aAAa,EAAE,6BAA6B,CAAC,CAAC;IAC/D,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7E,MAAM,QAAQ,GAAG,OAAO,cAAS,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,cAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IACrF,IAAI,UAAkB,CAAC;IACvB,IAAI,CAAC;QACH,UAAU,GAAG,IAAA,aAAQ,EAAC,SAAS,CAAC,aAAa,EAAE,cAAS,CAAC,QAAQ,GAAG,QAAQ,CAAC,CAAC;IAChF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,SAAS,CAAC,KAAK,CAAC,KAAK,OAAO;YACjC,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,4DAA4D,CAAC;YAClF,CAAC,CAAC,UAAU,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IACrC,CAAC;IAED,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,IAAA,cAAS,EAAC,UAAU,CAAC,CAAC;QAC1C,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC;YAC1B,OAAO,OAAO,CAAC,aAAa,EAAE,oCAAoC,CAAC,CAAC;QACtE,CAAC;QAED,0EAA0E;QAC1E,4EAA4E;QAC5E,MAAM,oBAAoB,GAAG,IAAA,iBAAY,EAAC,SAAS,CAAC,aAAa,CAAC,CAAC;QACnE,IACE,oBAAoB,KAAK,SAAS,CAAC,aAAa;YAChD,CAAC,QAAQ,CAAC,SAAS,CAAC,aAAa,EAAE,oBAAoB,CAAC,EACxD,CAAC;YACD,OAAO,OAAO,CAAC,SAAS,EAAE,yCAAyC,CAAC,CAAC;QACvE,CAAC;QACD,uEAAuE;QACvE,yEAAyE;QACzE,MAAM,YAAY,GAAG,IAAA,cAAS,EAAC,SAAS,CAAC,aAAa,CAAC,CAAC;QACxD,IACE,YAAY,CAAC,cAAc,EAAE;YAC7B,YAAY,CAAC,GAAG,KAAK,WAAW,CAAC,GAAG;YACpC,YAAY,CAAC,GAAG,KAAK,WAAW,CAAC,GAAG,EACpC,CAAC;YACD,OAAO,OAAO,CAAC,SAAS,EAAE,yCAAyC,CAAC,CAAC;QACvE,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACtD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACzC,MAAM,SAAS,GAAG,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC,IAAA,aAAQ,EAAC,UAAU,EAAE,MAAM,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACxF,OAAO;YACL,GAAG,SAAS;YACZ,KAAK,EAAE,WAAW;YAClB,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC;YACpC,SAAS,EAAE,WAAW,CAAC,IAAI;YAC3B,SAAS,EAAE,WAAW,CAAC,IAAI,GAAG,KAAK;SACpC,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,UAAU,CAAC,gCAAgC,EAAE,KAAK,CAAC,CAAC;IAC7D,CAAC;YAAS,CAAC;QACT,IAAA,cAAS,EAAC,UAAU,CAAC,CAAC;IACxB,CAAC;AACH,CAAC"}