@overlordai/server 1.0.1

package/dist/common/logger.service.js

@@ -0,0 +1,48 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LoggerService = void 0;
+const common_1 = require("@nestjs/common");
+const pino_1 = __importDefault(require("pino"));
+const sensitive_filter_1 = require("./sensitive-filter");
+let LoggerService = class LoggerService {
+    logger;
+    constructor() {
+        this.logger = (0, pino_1.default)({
+            level: process.env.LOG_LEVEL || 'info',
+            timestamp: pino_1.default.stdTimeFunctions.isoTime,
+        });
+    }
+    log(message, context) {
+        this.logger.info({ context }, (0, sensitive_filter_1.sanitize)(String(message)));
+    }
+    error(message, trace, context) {
+        this.logger.error({ context, trace: trace ? (0, sensitive_filter_1.sanitize)(trace) : undefined }, (0, sensitive_filter_1.sanitize)(String(message)));
+    }
+    warn(message, context) {
+        this.logger.warn({ context }, (0, sensitive_filter_1.sanitize)(String(message)));
+    }
+    debug(message, context) {
+        this.logger.debug({ context }, (0, sensitive_filter_1.sanitize)(String(message)));
+    }
+    verbose(message, context) {
+        this.logger.trace({ context }, (0, sensitive_filter_1.sanitize)(String(message)));
+    }
+};
+exports.LoggerService = LoggerService;
+exports.LoggerService = LoggerService = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [])
+], LoggerService);
+//# sourceMappingURL=logger.service.js.map

package/dist/common/logger.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.service.js","sourceRoot":"","sources":["../../src/common/logger.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAgF;AAChF,gDAAwB;AACxB,yDAA8C;AAGvC,IAAM,aAAa,GAAnB,MAAM,aAAa;IACP,MAAM,CAAc;IAErC;QACE,IAAI,CAAC,MAAM,GAAG,IAAA,cAAI,EAAC;YACjB,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,MAAM;YACtC,SAAS,EAAE,cAAI,CAAC,gBAAgB,CAAC,OAAO;SACzC,CAAC,CAAC;IACL,CAAC;IAED,GAAG,CAAC,OAAgB,EAAE,OAAgB;QACpC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,EAAE,IAAA,2BAAQ,EAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3D,CAAC;IAED,KAAK,CAAC,OAAgB,EAAE,KAAc,EAAE,OAAgB;QACtD,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,IAAA,2BAAQ,EAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,EACvD,IAAA,2BAAQ,EAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAC1B,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,OAAgB,EAAE,OAAgB;QACrC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,EAAE,IAAA,2BAAQ,EAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3D,CAAC;IAED,KAAK,CAAC,OAAgB,EAAE,OAAgB;QACtC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,EAAE,IAAA,2BAAQ,EAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC5D,CAAC;IAED,OAAO,CAAC,OAAgB,EAAE,OAAgB;QACxC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,EAAE,IAAA,2BAAQ,EAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC5D,CAAC;CACF,CAAA;AAhCY,sCAAa;wBAAb,aAAa;IADzB,IAAA,mBAAU,GAAE;;GACA,aAAa,CAgCzB"}

package/dist/common/pagination.d.ts

@@ -0,0 +1,18 @@
+import type { PaginatedResult } from '@overlordai/protocol';
+/**
+ * Encode an integer id as a base64 cursor string.
+ */
+export declare function encodeCursor(id: number): string;
+/**
+ * Decode a base64 cursor string back to an integer id.
+ */
+export declare function decodeCursor(cursor: string): number;
+/**
+ * Paginate an array of items using cursor-based pagination.
+ *
+ * If the number of items exceeds `limit`, the result is sliced to `limit`
+ * and `nextCursor` is set from the last included item's id.
+ * Otherwise all items are returned with `nextCursor: null`.
+ */
+export declare function paginate<T>(items: T[], limit: number, getId: (item: T) => number): PaginatedResult<T>;
+//# sourceMappingURL=pagination.d.ts.map

package/dist/common/pagination.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pagination.d.ts","sourceRoot":"","sources":["../../src/common/pagination.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAE5D;;GAEG;AACH,wBAAgB,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAE/C;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAEnD;AAED;;;;;;GAMG;AACH,wBAAgB,QAAQ,CAAC,CAAC,EACxB,KAAK,EAAE,CAAC,EAAE,EACV,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,MAAM,GACzB,eAAe,CAAC,CAAC,CAAC,CAapB"}

package/dist/common/pagination.js

@@ -0,0 +1,39 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.encodeCursor = encodeCursor;
+exports.decodeCursor = decodeCursor;
+exports.paginate = paginate;
+/**
+ * Encode an integer id as a base64 cursor string.
+ */
+function encodeCursor(id) {
+    return Buffer.from(String(id)).toString('base64');
+}
+/**
+ * Decode a base64 cursor string back to an integer id.
+ */
+function decodeCursor(cursor) {
+    return parseInt(Buffer.from(cursor, 'base64').toString(), 10);
+}
+/**
+ * Paginate an array of items using cursor-based pagination.
+ *
+ * If the number of items exceeds `limit`, the result is sliced to `limit`
+ * and `nextCursor` is set from the last included item's id.
+ * Otherwise all items are returned with `nextCursor: null`.
+ */
+function paginate(items, limit, getId) {
+    if (items.length > limit) {
+        const sliced = items.slice(0, limit);
+        const lastItem = sliced[sliced.length - 1];
+        return {
+            data: sliced,
+            nextCursor: encodeCursor(getId(lastItem)),
+        };
+    }
+    return {
+        data: items,
+        nextCursor: null,
+    };
+}
+//# sourceMappingURL=pagination.js.map

package/dist/common/pagination.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pagination.js","sourceRoot":"","sources":["../../src/common/pagination.ts"],"names":[],"mappings":";;AAKA,oCAEC;AAKD,oCAEC;AASD,4BAiBC;AAtCD;;GAEG;AACH,SAAgB,YAAY,CAAC,EAAU;IACrC,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AACpD,CAAC;AAED;;GAEG;AACH,SAAgB,YAAY,CAAC,MAAc;IACzC,OAAO,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;AAChE,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,QAAQ,CACtB,KAAU,EACV,KAAa,EACb,KAA0B;IAE1B,IAAI,KAAK,CAAC,MAAM,GAAG,KAAK,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QACrC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC3C,OAAO;YACL,IAAI,EAAE,MAAM;YACZ,UAAU,EAAE,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;SAC1C,CAAC;IACJ,CAAC;IACD,OAAO;QACL,IAAI,EAAE,KAAK;QACX,UAAU,EAAE,IAAI;KACjB,CAAC;AACJ,CAAC"}

package/dist/common/rate-limit.guard.d.ts

@@ -0,0 +1,48 @@
+import { CanActivate, ExecutionContext } from '@nestjs/common';
+import { Reflector } from '@nestjs/core';
+/**
+ * Metadata key for rate limit configuration.
+ */
+export declare const RATE_LIMIT_KEY = "rateLimit";
+/**
+ * Rate limit configuration for a route or controller.
+ */
+export interface RateLimitConfig {
+    /** Maximum number of requests allowed in the window. */
+    limit: number;
+    /** Window duration in milliseconds. */
+    windowMs: number;
+    /** If true, rate limit by IP address instead of user ID. */
+    byIp?: boolean;
+}
+/**
+ * Decorator to set rate limit configuration on a route or controller.
+ *
+ * @example
+ *   @RateLimit({ limit: 5, windowMs: 60_000 })
+ *   @Post('login')
+ *   async login() { ... }
+ */
+export declare const RateLimit: (config: RateLimitConfig) => import("@nestjs/common").CustomDecorator<string>;
+/**
+ * In-memory sliding-window rate limiter guard.
+ *
+ * Uses a Map<string, BucketEntry> to track request counts per key.
+ * Expired entries are lazily cleaned on access and periodically reaped.
+ *
+ * Apply to individual routes with @RateLimit({ limit, windowMs }) decorator,
+ * or let the default (100/min) apply.
+ */
+export declare class RateLimitGuard implements CanActivate {
+    private readonly reflector;
+    private readonly buckets;
+    private readonly CLEANUP_INTERVAL_MS;
+    private cleanupTimer;
+    private cleanupCounter;
+    constructor(reflector: Reflector);
+    canActivate(context: ExecutionContext): boolean;
+    private resolveConfig;
+    private buildKey;
+    private cleanup;
+}
+//# sourceMappingURL=rate-limit.guard.d.ts.map

package/dist/common/rate-limit.guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit.guard.d.ts","sourceRoot":"","sources":["../../src/common/rate-limit.guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,WAAW,EACX,gBAAgB,EAIjB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAGzC;;GAEG;AACH,eAAO,MAAM,cAAc,cAAc,CAAC;AAE1C;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,wDAAwD;IACxD,KAAK,EAAE,MAAM,CAAC;IACd,uCAAuC;IACvC,QAAQ,EAAE,MAAM,CAAC;IACjB,4DAA4D;IAC5D,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,SAAS,GAAI,QAAQ,eAAe,qDACZ,CAAC;AAatC;;;;;;;;GAQG;AACH,qBACa,cAAe,YAAW,WAAW;IAMpC,OAAO,CAAC,QAAQ,CAAC,SAAS;IALtC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAkC;IAC1D,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAU;IAC9C,OAAO,CAAC,YAAY,CAAiC;IACrD,OAAO,CAAC,cAAc,CAAK;gBAEE,SAAS,EAAE,SAAS;IASjD,WAAW,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO;IAuC/C,OAAO,CAAC,aAAa;IAiBrB,OAAO,CAAC,QAAQ;IA6BhB,OAAO,CAAC,OAAO;CAQhB"}

package/dist/common/rate-limit.guard.js

@@ -0,0 +1,129 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RateLimitGuard = exports.RateLimit = exports.RATE_LIMIT_KEY = void 0;
+const common_1 = require("@nestjs/common");
+const core_1 = require("@nestjs/core");
+/**
+ * Metadata key for rate limit configuration.
+ */
+exports.RATE_LIMIT_KEY = 'rateLimit';
+/**
+ * Decorator to set rate limit configuration on a route or controller.
+ *
+ * @example
+ *   @RateLimit({ limit: 5, windowMs: 60_000 })
+ *   @Post('login')
+ *   async login() { ... }
+ */
+const RateLimit = (config) => (0, common_1.SetMetadata)(exports.RATE_LIMIT_KEY, config);
+exports.RateLimit = RateLimit;
+/** Default rate limit: 100 requests per minute. */
+const DEFAULT_RATE_LIMIT = {
+    limit: 100,
+    windowMs: 60_000,
+};
+/**
+ * In-memory sliding-window rate limiter guard.
+ *
+ * Uses a Map<string, BucketEntry> to track request counts per key.
+ * Expired entries are lazily cleaned on access and periodically reaped.
+ *
+ * Apply to individual routes with @RateLimit({ limit, windowMs }) decorator,
+ * or let the default (100/min) apply.
+ */
+let RateLimitGuard = class RateLimitGuard {
+    reflector;
+    buckets = new Map();
+    CLEANUP_INTERVAL_MS = 60_000;
+    cleanupTimer;
+    cleanupCounter = 0;
+    constructor(reflector) {
+        this.reflector = reflector;
+        // Periodic cleanup of expired entries to prevent memory growth
+        this.cleanupTimer = setInterval(() => this.cleanup(), this.CLEANUP_INTERVAL_MS);
+        // Allow the timer to be unreferenced so it doesn't keep the process alive
+        if (this.cleanupTimer.unref) {
+            this.cleanupTimer.unref();
+        }
+    }
+    canActivate(context) {
+        // Disable rate limiting in test environment
+        if (process.env.NODE_ENV === 'test')
+            return true;
+        const config = this.resolveConfig(context);
+        const request = context.switchToHttp().getRequest();
+        const key = this.buildKey(context, request, config);
+        const now = Date.now();
+        const entry = this.buckets.get(key);
+        if (!entry || now >= entry.resetAt) {
+            // New window
+            this.buckets.set(key, { count: 1, resetAt: now + config.windowMs });
+            return true;
+        }
+        entry.count++;
+        if (entry.count > config.limit) {
+            const retryAfterSec = Math.ceil((entry.resetAt - now) / 1000);
+            throw new common_1.HttpException({
+                statusCode: common_1.HttpStatus.TOO_MANY_REQUESTS,
+                message: 'Too many requests',
+                retryAfter: retryAfterSec,
+            }, common_1.HttpStatus.TOO_MANY_REQUESTS);
+        }
+        // Periodic inline cleanup to guard against unbounded memory growth
+        if (++this.cleanupCounter % 100 === 0) {
+            this.cleanup();
+        }
+        return true;
+    }
+    resolveConfig(context) {
+        // Check handler-level first, then class-level, then default
+        const handlerConfig = this.reflector.get(exports.RATE_LIMIT_KEY, context.getHandler());
+        if (handlerConfig)
+            return handlerConfig;
+        const classConfig = this.reflector.get(exports.RATE_LIMIT_KEY, context.getClass());
+        if (classConfig)
+            return classConfig;
+        return DEFAULT_RATE_LIMIT;
+    }
+    buildKey(context, request, config) {
+        const route = `${request.method}:${request.route?.path ?? request.path}`;
+        if (config.byIp) {
+            const ip = request.ip ?? 'unknown';
+            return `rl:ip:${ip}:${route}`;
+        }
+        // Rate limit by authenticated user ID if available, otherwise by IP.
+        // NOTE: Since RateLimitGuard runs as APP_GUARD before JwtAuthGuard,
+        // request.user is often not yet populated. We intentionally fall back
+        // to IP-based limiting rather than attempting to decode an unverified
+        // JWT payload, which would be trivially spoofable.
+        const user = request.user;
+        if (user?.sub) {
+            return `rl:user:${user.sub}:${route}`;
+        }
+        const ip = request.ip ?? 'unknown';
+        return `rl:ip:${ip}:${route}`;
+    }
+    cleanup() {
+        const now = Date.now();
+        for (const [key, entry] of this.buckets) {
+            if (now >= entry.resetAt) {
+                this.buckets.delete(key);
+            }
+        }
+    }
+};
+exports.RateLimitGuard = RateLimitGuard;
+exports.RateLimitGuard = RateLimitGuard = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [core_1.Reflector])
+], RateLimitGuard);
+//# sourceMappingURL=rate-limit.guard.js.map

package/dist/common/rate-limit.guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit.guard.js","sourceRoot":"","sources":["../../src/common/rate-limit.guard.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAOwB;AACxB,uCAAyC;AAGzC;;GAEG;AACU,QAAA,cAAc,GAAG,WAAW,CAAC;AAc1C;;;;;;;GAOG;AACI,MAAM,SAAS,GAAG,CAAC,MAAuB,EAAE,EAAE,CACnD,IAAA,oBAAW,EAAC,sBAAc,EAAE,MAAM,CAAC,CAAC;AADzB,QAAA,SAAS,aACgB;AAEtC,mDAAmD;AACnD,MAAM,kBAAkB,GAAoB;IAC1C,KAAK,EAAE,GAAG;IACV,QAAQ,EAAE,MAAM;CACjB,CAAC;AAOF;;;;;;;;GAQG;AAEI,IAAM,cAAc,GAApB,MAAM,cAAc;IAMI;IALZ,OAAO,GAAG,IAAI,GAAG,EAAuB,CAAC;IACzC,mBAAmB,GAAG,MAAM,CAAC;IACtC,YAAY,CAAiC;IAC7C,cAAc,GAAG,CAAC,CAAC;IAE3B,YAA6B,SAAoB;QAApB,cAAS,GAAT,SAAS,CAAW;QAC/C,+DAA+D;QAC/D,IAAI,CAAC,YAAY,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAChF,0EAA0E;QAC1E,IAAI,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;YAC5B,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;QAC5B,CAAC;IACH,CAAC;IAED,WAAW,CAAC,OAAyB;QACnC,4CAA4C;QAC5C,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC;QAEjD,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAC3C,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAAW,CAAC;QAC7D,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAEpD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEpC,IAAI,CAAC,KAAK,IAAI,GAAG,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YACnC,aAAa;YACb,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;YACpE,OAAO,IAAI,CAAC;QACd,CAAC;QAED,KAAK,CAAC,KAAK,EAAE,CAAC;QAEd,IAAI,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC;YAC/B,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;YAC9D,MAAM,IAAI,sBAAa,CACrB;gBACE,UAAU,EAAE,mBAAU,CAAC,iBAAiB;gBACxC,OAAO,EAAE,mBAAmB;gBAC5B,UAAU,EAAE,aAAa;aAC1B,EACD,mBAAU,CAAC,iBAAiB,CAC7B,CAAC;QACJ,CAAC;QAED,mEAAmE;QACnE,IAAI,EAAE,IAAI,CAAC,cAAc,GAAG,GAAG,KAAK,CAAC,EAAE,CAAC;YACtC,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,aAAa,CAAC,OAAyB;QAC7C,4DAA4D;QAC5D,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CACtC,sBAAc,EACd,OAAO,CAAC,UAAU,EAAE,CACrB,CAAC;QACF,IAAI,aAAa;YAAE,OAAO,aAAa,CAAC;QAExC,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CACpC,sBAAc,EACd,OAAO,CAAC,QAAQ,EAAE,CACnB,CAAC;QACF,IAAI,WAAW;YAAE,OAAO,WAAW,CAAC;QAEpC,OAAO,kBAAkB,CAAC;IAC5B,CAAC;IAEO,QAAQ,CACd,OAAyB,EACzB,OAAgB,EAChB,MAAuB;QAEvB,MAAM,KAAK,GAAG,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,KAAK,EAAE,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QAEzE,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;YAChB,MAAM,EAAE,GAAG,OAAO,CAAC,EAAE,IAAI,SAAS,CAAC;YACnC,OAAO,SAAS,EAAE,IAAI,KAAK,EAAE,CAAC;QAChC,CAAC;QAED,qEAAqE;QACrE,oEAAoE;QACpE,sEAAsE;QACtE,sEAAsE;QACtE,mDAAmD;QACnD,MAAM,IAAI,GAAI,OAA8C,CAAC,IAEhD,CAAC;QAEd,IAAI,IAAI,EAAE,GAAG,EAAE,CAAC;YACd,OAAO,WAAW,IAAI,CAAC,GAAG,IAAI,KAAK,EAAE,CAAC;QACxC,CAAC;QAED,MAAM,EAAE,GAAG,OAAO,CAAC,EAAE,IAAI,SAAS,CAAC;QACnC,OAAO,SAAS,EAAE,IAAI,KAAK,EAAE,CAAC;IAChC,CAAC;IAEO,OAAO;QACb,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACxC,IAAI,GAAG,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;gBACzB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC;IACH,CAAC;CACF,CAAA;AA5GY,wCAAc;yBAAd,cAAc;IAD1B,IAAA,mBAAU,GAAE;qCAO6B,gBAAS;GANtC,cAAc,CA4G1B"}

package/dist/common/sensitive-filter.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Sanitize text by replacing all sensitive patterns with a redaction marker.
+ * Each pattern from SENSITIVE_PATTERNS is applied in order.
+ * Because the patterns use the global flag, we reset lastIndex before each use.
+ */
+export declare function sanitize(text: string): string;
+//# sourceMappingURL=sensitive-filter.d.ts.map

package/dist/common/sensitive-filter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sensitive-filter.d.ts","sourceRoot":"","sources":["../../src/common/sensitive-filter.ts"],"names":[],"mappings":"AAIA;;;;GAIG;AACH,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAQ7C"}

package/dist/common/sensitive-filter.js

@@ -0,0 +1,20 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.sanitize = sanitize;
+const protocol_1 = require("@overlordai/protocol");
+const REDACTED = '***REDACTED***';
+/**
+ * Sanitize text by replacing all sensitive patterns with a redaction marker.
+ * Each pattern from SENSITIVE_PATTERNS is applied in order.
+ * Because the patterns use the global flag, we reset lastIndex before each use.
+ */
+function sanitize(text) {
+    let result = text;
+    for (const pattern of protocol_1.SENSITIVE_PATTERNS) {
+        // Reset lastIndex in case a previous call left it non-zero
+        pattern.lastIndex = 0;
+        result = result.replace(pattern, REDACTED);
+    }
+    return result;
+}
+//# sourceMappingURL=sensitive-filter.js.map

package/dist/common/sensitive-filter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sensitive-filter.js","sourceRoot":"","sources":["../../src/common/sensitive-filter.ts"],"names":[],"mappings":";;AASA,4BAQC;AAjBD,mDAA0D;AAE1D,MAAM,QAAQ,GAAG,gBAAgB,CAAC;AAElC;;;;GAIG;AACH,SAAgB,QAAQ,CAAC,IAAY;IACnC,IAAI,MAAM,GAAG,IAAI,CAAC;IAClB,KAAK,MAAM,OAAO,IAAI,6BAAkB,EAAE,CAAC;QACzC,2DAA2D;QAC3D,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;QACtB,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/database/database.module.d.ts

@@ -0,0 +1,3 @@
+export declare class DatabaseModule {
+}
+//# sourceMappingURL=database.module.d.ts.map

package/dist/database/database.module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"database.module.d.ts","sourceRoot":"","sources":["../../src/database/database.module.ts"],"names":[],"mappings":"AAGA,qBAKa,cAAc;CAAG"}

package/dist/database/database.module.js

@@ -0,0 +1,22 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DatabaseModule = void 0;
+const common_1 = require("@nestjs/common");
+const database_service_1 = require("./database.service");
+let DatabaseModule = class DatabaseModule {
+};
+exports.DatabaseModule = DatabaseModule;
+exports.DatabaseModule = DatabaseModule = __decorate([
+    (0, common_1.Global)(),
+    (0, common_1.Module)({
+        providers: [database_service_1.DatabaseService],
+        exports: [database_service_1.DatabaseService],
+    })
+], DatabaseModule);
+//# sourceMappingURL=database.module.js.map

package/dist/database/database.module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"database.module.js","sourceRoot":"","sources":["../../src/database/database.module.ts"],"names":[],"mappings":";;;;;;;;;AAAA,2CAAgD;AAChD,yDAAqD;AAO9C,IAAM,cAAc,GAApB,MAAM,cAAc;CAAG,CAAA;AAAjB,wCAAc;yBAAd,cAAc;IAL1B,IAAA,eAAM,GAAE;IACR,IAAA,eAAM,EAAC;QACN,SAAS,EAAE,CAAC,kCAAe,CAAC;QAC5B,OAAO,EAAE,CAAC,kCAAe,CAAC;KAC3B,CAAC;GACW,cAAc,CAAG"}

package/dist/database/database.service.d.ts

@@ -0,0 +1,13 @@
+import { OnModuleDestroy, OnModuleInit } from '@nestjs/common';
+import Database from 'better-sqlite3';
+export declare class DatabaseService implements OnModuleInit, OnModuleDestroy {
+    private readonly logger;
+    private db;
+    private checkpointInterval;
+    onModuleInit(): void;
+    getDb(): Database.Database;
+    walCheckpoint(): void;
+    close(): void;
+    onModuleDestroy(): void;
+}
+//# sourceMappingURL=database.service.d.ts.map

package/dist/database/database.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"database.service.d.ts","sourceRoot":"","sources":["../../src/database/database.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,eAAe,EACf,YAAY,EACb,MAAM,gBAAgB,CAAC;AAIxB,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AAGtC,qBACa,eAAgB,YAAW,YAAY,EAAE,eAAe;IACnE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAoC;IAC3D,OAAO,CAAC,EAAE,CAAqB;IAC/B,OAAO,CAAC,kBAAkB,CAAkC;IAE5D,YAAY,IAAI,IAAI;IA4BpB,KAAK,IAAI,QAAQ,CAAC,QAAQ;IAI1B,aAAa,IAAI,IAAI;IAarB,KAAK,IAAI,IAAI;IAOb,eAAe,IAAI,IAAI;CAKxB"}

package/dist/database/database.service.js

@@ -0,0 +1,107 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+var DatabaseService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DatabaseService = void 0;
+const common_1 = require("@nestjs/common");
+const fs = __importStar(require("node:fs"));
+const os = __importStar(require("node:os"));
+const path = __importStar(require("node:path"));
+const better_sqlite3_1 = __importDefault(require("better-sqlite3"));
+const migration_runner_1 = require("./migration-runner");
+let DatabaseService = DatabaseService_1 = class DatabaseService {
+    logger = new common_1.Logger(DatabaseService_1.name);
+    db;
+    checkpointInterval;
+    onModuleInit() {
+        // Default DB path: ~/.overlord/data/overlord.db (works for both monorepo and global install)
+        const defaultDbPath = path.join(os.homedir(), '.overlord', 'data', 'overlord.db');
+        const dbPath = process.env.DB_PATH || defaultDbPath;
+        const dbDir = path.dirname(dbPath);
+        if (!fs.existsSync(dbDir)) {
+            fs.mkdirSync(dbDir, { recursive: true });
+        }
+        this.logger.log(`Opening database at ${dbPath}`);
+        this.db = new better_sqlite3_1.default(dbPath);
+        this.db.pragma('foreign_keys = ON');
+        this.db.pragma('journal_mode = WAL');
+        this.db.pragma('busy_timeout = 5000');
+        this.db.pragma('synchronous = NORMAL');
+        const runner = new migration_runner_1.MigrationRunner();
+        runner.run(this.db);
+        this.logger.log('Database migrations complete');
+        // WAL checkpoint every hour
+        this.checkpointInterval = setInterval(() => this.walCheckpoint(), 60 * 60 * 1000);
+    }
+    getDb() {
+        return this.db;
+    }
+    walCheckpoint() {
+        if (!this.db?.open)
+            return;
+        try {
+            this.db.pragma('wal_checkpoint(TRUNCATE)');
+            this.logger.log('WAL checkpoint complete');
+        }
+        catch (err) {
+            this.logger.error('WAL checkpoint failed', err instanceof Error ? err.stack : String(err));
+        }
+    }
+    close() {
+        if (this.db && this.db.open) {
+            this.db.close();
+            this.logger.log('Database connection closed');
+        }
+    }
+    onModuleDestroy() {
+        clearInterval(this.checkpointInterval);
+        this.walCheckpoint();
+        this.close();
+    }
+};
+exports.DatabaseService = DatabaseService;
+exports.DatabaseService = DatabaseService = DatabaseService_1 = __decorate([
+    (0, common_1.Injectable)()
+], DatabaseService);
+//# sourceMappingURL=database.service.js.map

package/dist/database/database.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"database.service.js","sourceRoot":"","sources":["../../src/database/database.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,2CAKwB;AACxB,4CAA8B;AAC9B,4CAA8B;AAC9B,gDAAkC;AAClC,oEAAsC;AACtC,yDAAqD;AAG9C,IAAM,eAAe,uBAArB,MAAM,eAAe;IACT,MAAM,GAAG,IAAI,eAAM,CAAC,iBAAe,CAAC,IAAI,CAAC,CAAC;IACnD,EAAE,CAAqB;IACvB,kBAAkB,CAAkC;IAE5D,YAAY;QACV,6FAA6F;QAC7F,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;QAClF,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,aAAa,CAAC;QACpD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACnC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,uBAAuB,MAAM,EAAE,CAAC,CAAC;QAEjD,IAAI,CAAC,EAAE,GAAG,IAAI,wBAAQ,CAAC,MAAM,CAAC,CAAC;QAE/B,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;QACpC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;QACrC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;QACtC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC;QAEvC,MAAM,MAAM,GAAG,IAAI,kCAAe,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACpB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;QAEhD,4BAA4B;QAC5B,IAAI,CAAC,kBAAkB,GAAG,WAAW,CACnC,GAAG,EAAE,CAAC,IAAI,CAAC,aAAa,EAAE,EAC1B,EAAE,GAAG,EAAE,GAAG,IAAI,CACf,CAAC;IACJ,CAAC;IAED,KAAK;QACH,OAAO,IAAI,CAAC,EAAE,CAAC;IACjB,CAAC;IAED,aAAa;QACX,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI;YAAE,OAAO;QAC3B,IAAI,CAAC;YACH,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC;YAC3C,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;QAC7C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,uBAAuB,EACvB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAC/C,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK;QACH,IAAI,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;YAC5B,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAED,eAAe;QACb,aAAa,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACvC,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,IAAI,CAAC,KAAK,EAAE,CAAC;IACf,CAAC;CACF,CAAA;AA9DY,0CAAe;0BAAf,eAAe;IAD3B,IAAA,mBAAU,GAAE;GACA,eAAe,CA8D3B"}

package/dist/database/migration-runner.d.ts

@@ -0,0 +1,5 @@
+import Database from 'better-sqlite3';
+export declare class MigrationRunner {
+    run(db: Database.Database): void;
+}
+//# sourceMappingURL=migration-runner.d.ts.map

package/dist/database/migration-runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"migration-runner.d.ts","sourceRoot":"","sources":["../../src/database/migration-runner.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AAItC,qBAAa,eAAe;IAC1B,GAAG,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,GAAG,IAAI;CA2DjC"}

package/dist/database/migration-runner.js

@@ -0,0 +1,86 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MigrationRunner = void 0;
+const fs = __importStar(require("node:fs"));
+const path = __importStar(require("node:path"));
+class MigrationRunner {
+    run(db) {
+        db.exec(`
+      CREATE TABLE IF NOT EXISTS schema_version (
+        version INTEGER PRIMARY KEY,
+        filename TEXT NOT NULL,
+        applied_at TEXT NOT NULL DEFAULT (datetime('now'))
+      )
+    `);
+        // Resolve relative to compiled JS: dist/database/ → ../../database/migrations (package root)
+        const migrationsDir = process.env.MIGRATIONS_DIR ||
+            path.resolve(__dirname, '..', '..', 'database', 'migrations');
+        if (!fs.existsSync(migrationsDir)) {
+            throw new Error(`Migrations directory not found: ${migrationsDir}`);
+        }
+        const files = fs
+            .readdirSync(migrationsDir)
+            .filter((f) => f.endsWith('.sql'))
+            .sort((a, b) => {
+            const numA = parseInt(a.split('-')[0], 10);
+            const numB = parseInt(b.split('-')[0], 10);
+            return numA - numB;
+        });
+        const applied = new Set(db
+            .prepare('SELECT version FROM schema_version')
+            .all()
+            .map((row) => row.version));
+        for (const file of files) {
+            const version = parseInt(file.split('-')[0], 10);
+            if (applied.has(version)) {
+                continue;
+            }
+            const sql = fs.readFileSync(path.join(migrationsDir, file), 'utf-8');
+            const runMigration = db.transaction(() => {
+                db.exec(sql);
+                db.prepare('INSERT INTO schema_version (version, filename) VALUES (?, ?)').run(version, file);
+            });
+            try {
+                runMigration();
+            }
+            catch (err) {
+                throw new Error(`Migration ${file} failed: ${err instanceof Error ? err.message : String(err)}`);
+            }
+        }
+    }
+}
+exports.MigrationRunner = MigrationRunner;
+//# sourceMappingURL=migration-runner.js.map

package/dist/database/migration-runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"migration-runner.js","sourceRoot":"","sources":["../../src/database/migration-runner.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AACA,4CAA8B;AAC9B,gDAAkC;AAElC,MAAa,eAAe;IAC1B,GAAG,CAAC,EAAqB;QACvB,EAAE,CAAC,IAAI,CAAC;;;;;;KAMP,CAAC,CAAC;QAEH,6FAA6F;QAC7F,MAAM,aAAa,GACjB,OAAO,CAAC,GAAG,CAAC,cAAc;YAC1B,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;QAEhE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,mCAAmC,aAAa,EAAE,CAAC,CAAC;QACtE,CAAC;QAED,MAAM,KAAK,GAAG,EAAE;aACb,WAAW,CAAC,aAAa,CAAC;aAC1B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;aACjC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YACb,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC3C,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC3C,OAAO,IAAI,GAAG,IAAI,CAAC;QACrB,CAAC,CAAC,CAAC;QAEL,MAAM,OAAO,GAAG,IAAI,GAAG,CACrB,EAAE;aACC,OAAO,CAAC,oCAAoC,CAAC;aAC7C,GAAG,EAAE;aACL,GAAG,CAAC,CAAC,GAAQ,EAAE,EAAE,CAAC,GAAG,CAAC,OAAiB,CAAC,CAC5C,CAAC;QAEF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAEjD,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBACzB,SAAS;YACX,CAAC;YAED,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;YAErE,MAAM,YAAY,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;gBACvC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACb,EAAE,CAAC,OAAO,CACR,8DAA8D,CAC/D,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YACvB,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC;gBACH,YAAY,EAAE,CAAC;YACjB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,IAAI,KAAK,CACb,aAAa,IAAI,YAAY,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAChF,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;CACF;AA5DD,0CA4DC"}

package/dist/database/repositories/audit-log.repository.d.ts

@@ -0,0 +1,29 @@
+import type { PaginatedResult } from '@overlordai/protocol';
+import { DatabaseService } from '../database.service';
+export interface AuditLogEntry {
+    id: number;
+    userId: number | null;
+    action: string;
+    resource: string;
+    detail: string | null;
+    ip: string | null;
+    createdAt: string;
+}
+export declare class AuditLogRepository {
+    private readonly database;
+    constructor(database: DatabaseService);
+    create(data: {
+        userId?: number;
+        action: string;
+        resource: string;
+        detail?: string;
+        ip?: string;
+    }): AuditLogEntry;
+    listPaginated(query: {
+        limit?: number;
+        cursor?: string;
+        userId?: number;
+        action?: string;
+    }): PaginatedResult<AuditLogEntry>;
+}
+//# sourceMappingURL=audit-log.repository.d.ts.map