@overlordai/server 1.0.53 → 1.0.55

package/dist/web/event.gateway.js

@@ -0,0 +1,168 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var EventGateway_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EventGateway = void 0;
+const websockets_1 = require("@nestjs/websockets");
+const common_1 = require("@nestjs/common");
+const ws_1 = require("ws");
+const protocol_1 = require("@overlordai/protocol");
+const auth_service_1 = require("../auth/auth.service");
+const developer_repository_1 = require("../database/repositories/developer.repository");
+const redis_service_1 = require("../redis/redis.service");
+const web_event_service_1 = require("./web-event.service");
+/**
+ * WebSocket gateway for broadcasting real-time events to web clients.
+ *
+ * Protocol:
+ * 1. Client connects to /ws/events
+ * 2. Client sends { type: "auth", token: "<JWT>" } as first message
+ * 3. Server validates JWT and responds with { type: "auth_ok" }
+ * 4. Server pushes events as { type: "event", event: "<event_type>", ... }
+ */
+let EventGateway = EventGateway_1 = class EventGateway {
+    authService;
+    developerRepo;
+    redis;
+    webEventService;
+    logger = new common_1.Logger(EventGateway_1.name);
+    authedSockets = new Map();
+    pendingAuth = new Map();
+    AUTH_TIMEOUT_MS = 10_000;
+    constructor(authService, developerRepo, redis, webEventService) {
+        this.authService = authService;
+        this.developerRepo = developerRepo;
+        this.redis = redis;
+        this.webEventService = webEventService;
+    }
+    handleConnection(client, _req) {
+        let authCompleted = false;
+        const authTimeout = setTimeout(() => {
+            if (!authCompleted && !this.authedSockets.has(client)) {
+                this.logger.warn('Event WS auth timeout');
+                this.pendingAuth.delete(client);
+                client.close(4001, 'Auth timeout');
+            }
+        }, this.AUTH_TIMEOUT_MS);
+        this.pendingAuth.set(client, { authTimeout });
+        const initialHandler = (rawData) => {
+            if (this.authedSockets.has(client))
+                return;
+            let frame;
+            try {
+                const str = typeof rawData === 'string' ? rawData : rawData.toString('utf8');
+                frame = JSON.parse(str);
+            }
+            catch {
+                client.close(4002, 'Invalid JSON');
+                return;
+            }
+            if (frame.type !== 'auth' || !frame.token) {
+                client.close(4003, 'Expected auth frame');
+                return;
+            }
+            clearTimeout(authTimeout);
+            authCompleted = true;
+            this.pendingAuth.delete(client);
+            client.removeListener('message', initialHandler);
+            this.handleAuth(client, frame);
+        };
+        client.on('message', initialHandler);
+    }
+    handleDisconnect(client) {
+        // Clear pending auth timeout if client disconnected before authenticating
+        const pending = this.pendingAuth.get(client);
+        if (pending) {
+            clearTimeout(pending.authTimeout);
+            this.pendingAuth.delete(client);
+        }
+        const authed = this.authedSockets.get(client);
+        if (authed) {
+            if (authed.revalidationTimer) {
+                clearInterval(authed.revalidationTimer);
+            }
+            this.webEventService.unregister(client);
+            this.authedSockets.delete(client);
+            this.logger.debug(`Event WS client disconnected (developer ${authed.developerId})`);
+        }
+    }
+    handleAuth(client, frame) {
+        let payload;
+        try {
+            payload = this.authService.verifyUserJwt(frame.token);
+        }
+        catch {
+            this.logger.warn('Event WS auth failed: invalid JWT');
+            if (client.readyState === ws_1.WebSocket.OPEN) {
+                client.send(JSON.stringify({ type: 'auth_error', message: 'Invalid token' }));
+            }
+            client.close(4004, 'Invalid token');
+            return;
+        }
+        // Verify developer exists and is active
+        const developer = this.developerRepo.findById(payload.sub);
+        if (!developer || developer.status !== protocol_1.DeveloperStatus.ACTIVE) {
+            this.logger.warn(`Event WS auth failed: developer ${payload.sub} inactive/not found`);
+            client.close(4005, 'User inactive');
+            return;
+        }
+        // Set up periodic revalidation
+        const revalidationTimer = setInterval(() => {
+            this.revalidate(client, payload.sub, payload.jti, payload.exp).catch((err) => this.logger.error(`Event WS revalidation error for developer ${payload.sub}`, err));
+        }, protocol_1.TOKEN_REVALIDATION_INTERVAL_MS);
+        const authed = {
+            ws: client,
+            developerId: payload.sub,
+            revalidationTimer,
+            jti: payload.jti,
+            tokenExp: payload.exp,
+        };
+        this.authedSockets.set(client, authed);
+        this.webEventService.register(client);
+        if (client.readyState === ws_1.WebSocket.OPEN) {
+            client.send(JSON.stringify({ type: 'auth_ok' }));
+        }
+        this.logger.log(`Event WS client authenticated (developer ${payload.sub})`);
+    }
+    async revalidate(client, developerId, jti, tokenExp) {
+        // Check JWT expiry
+        if (tokenExp && Math.floor(Date.now() / 1000) >= tokenExp) {
+            this.logger.warn(`Event WS: JWT expired for developer ${developerId}`);
+            client.close(4021, 'Token expired');
+            return;
+        }
+        // Check logout timestamp
+        const logoutTs = await this.redis.get(`logout:${developerId}`);
+        if (logoutTs && tokenExp) {
+            const tokenIat = tokenExp - 900;
+            if (Number(logoutTs) >= tokenIat) {
+                this.logger.warn(`Event WS: developer ${developerId} logged out after token issued`);
+                client.close(4022, 'Session revoked');
+                return;
+            }
+        }
+        // Check user still active
+        const developer = this.developerRepo.findById(developerId);
+        if (!developer || developer.status !== protocol_1.DeveloperStatus.ACTIVE) {
+            this.logger.warn(`Event WS: developer ${developerId} inactive/not found`);
+            client.close(4020, 'User inactive');
+        }
+    }
+};
+exports.EventGateway = EventGateway;
+exports.EventGateway = EventGateway = EventGateway_1 = __decorate([
+    (0, websockets_1.WebSocketGateway)({ path: '/ws/events' }),
+    __metadata("design:paramtypes", [auth_service_1.AuthService,
+        developer_repository_1.DeveloperRepository,
+        redis_service_1.RedisService,
+        web_event_service_1.WebEventService])
+], EventGateway);
+//# sourceMappingURL=event.gateway.js.map

package/dist/web/event.gateway.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"event.gateway.js","sourceRoot":"","sources":["../../src/web/event.gateway.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,mDAI4B;AAC5B,2CAAwC;AAExC,2BAA+B;AAE/B,mDAAuF;AAGvF,uDAAmD;AACnD,wFAAoF;AACpF,0DAAsD;AACtD,2DAAsD;AActD;;;;;;;;GAQG;AAEI,IAAM,YAAY,oBAAlB,MAAM,YAAY;IAOJ;IACA;IACA;IACA;IATF,MAAM,GAAG,IAAI,eAAM,CAAC,cAAY,CAAC,IAAI,CAAC,CAAC;IACvC,aAAa,GAAG,IAAI,GAAG,EAAuC,CAAC;IAC/D,WAAW,GAAG,IAAI,GAAG,EAAgC,CAAC;IACtD,eAAe,GAAG,MAAM,CAAC;IAE1C,YACmB,WAAwB,EACxB,aAAkC,EAClC,KAAmB,EACnB,eAAgC;QAHhC,gBAAW,GAAX,WAAW,CAAa;QACxB,kBAAa,GAAb,aAAa,CAAqB;QAClC,UAAK,GAAL,KAAK,CAAc;QACnB,oBAAe,GAAf,eAAe,CAAiB;IAChD,CAAC;IAEJ,gBAAgB,CAAC,MAAiB,EAAE,IAAqB;QACvD,IAAI,aAAa,GAAG,KAAK,CAAC;QAE1B,MAAM,WAAW,GAAG,UAAU,CAAC,GAAG,EAAE;YAClC,IAAI,CAAC,aAAa,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBACtD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;gBAC1C,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBAChC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;YACrC,CAAC;QACH,CAAC,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;QAEzB,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;QAE9C,MAAM,cAAc,GAAG,CAAC,OAAwB,EAAE,EAAE;YAClD,IAAI,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC;gBAAE,OAAO;YAE3C,IAAI,KAAuC,CAAC;YAC5C,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAC7E,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC1B,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;gBACnC,OAAO;YACT,CAAC;YAED,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;gBAC1C,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAC;gBAC1C,OAAO;YACT,CAAC;YAED,YAAY,CAAC,WAAW,CAAC,CAAC;YAC1B,aAAa,GAAG,IAAI,CAAC;YACrB,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAChC,MAAM,CAAC,cAAc,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;YAEjD,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,KAA0B,CAAC,CAAC;QACtD,CAAC,CAAC;QAEF,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;IACvC,CAAC;IAED,gBAAgB,CAAC,MAAiB;QAChC,0EAA0E;QAC1E,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC7C,IAAI,OAAO,EAAE,CAAC;YACZ,YAAY,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;YAClC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAClC,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC9C,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC;gBAC7B,aAAa,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;YAC1C,CAAC;YACD,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YACxC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAClC,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,2CAA2C,MAAM,CAAC,WAAW,GAAG,CACjE,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,UAAU,CAAC,MAAiB,EAAE,KAAwB;QAC5D,IAAI,OAA+E,CAAC;QACpF,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,KAAK,CAAC,KAAK,CAMnD,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;YACtD,IAAI,MAAM,CAAC,UAAU,KAAK,cAAS,CAAC,IAAI,EAAE,CAAC;gBACzC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC;YAChF,CAAC;YACD,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;YACpC,OAAO;QACT,CAAC;QAED,wCAAwC;QACxC,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC3D,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,MAAM,KAAK,0BAAe,CAAC,MAAM,EAAE,CAAC;YAC9D,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,mCAAmC,OAAO,CAAC,GAAG,qBAAqB,CACpE,CAAC;YACF,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;YACpC,OAAO;QACT,CAAC;QAED,+BAA+B;QAC/B,MAAM,iBAAiB,GAAG,WAAW,CAAC,GAAG,EAAE;YACzC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,CAClE,CAAC,GAAG,EAAE,EAAE,CACN,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,6CAA6C,OAAO,CAAC,GAAG,EAAE,EAC1D,GAAG,CACJ,CACJ,CAAC;QACJ,CAAC,EAAE,yCAA8B,CAAC,CAAC;QAEnC,MAAM,MAAM,GAA6B;YACvC,EAAE,EAAE,MAAM;YACV,WAAW,EAAE,OAAO,CAAC,GAAG;YACxB,iBAAiB;YACjB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,QAAQ,EAAE,OAAO,CAAC,GAAG;SACtB,CAAC;QAEF,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACvC,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAEtC,IAAI,MAAM,CAAC,UAAU,KAAK,cAAS,CAAC,IAAI,EAAE,CAAC;YACzC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;QACnD,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,4CAA4C,OAAO,CAAC,GAAG,GAAG,CAC3D,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,UAAU,CACtB,MAAiB,EACjB,WAAmB,EACnB,GAAY,EACZ,QAAiB;QAEjB,mBAAmB;QACnB,IAAI,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,IAAI,QAAQ,EAAE,CAAC;YAC1D,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,uCAAuC,WAAW,EAAE,CACrD,CAAC;YACF,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;YACpC,OAAO;QACT,CAAC;QAED,yBAAyB;QACzB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,WAAW,EAAE,CAAC,CAAC;QAC/D,IAAI,QAAQ,IAAI,QAAQ,EAAE,CAAC;YACzB,MAAM,QAAQ,GAAG,QAAQ,GAAG,GAAG,CAAC;YAChC,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,QAAQ,EAAE,CAAC;gBACjC,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,uBAAuB,WAAW,gCAAgC,CACnE,CAAC;gBACF,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;gBACtC,OAAO;YACT,CAAC;QACH,CAAC;QAED,0BAA0B;QAC1B,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC3D,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,MAAM,KAAK,0BAAe,CAAC,MAAM,EAAE,CAAC;YAC9D,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,uBAAuB,WAAW,qBAAqB,CACxD,CAAC;YACF,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;CACF,CAAA;AA5KY,oCAAY;uBAAZ,YAAY;IADxB,IAAA,6BAAgB,EAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;qCAQP,0BAAW;QACT,0CAAmB;QAC3B,4BAAY;QACF,mCAAe;GAVxC,YAAY,CA4KxB"}

package/dist/web/frame-handlers/frame-handler.interface.d.ts

@@ -0,0 +1,24 @@
+import type { WorkerUpFrame } from '@overlordai/protocol';
+import type { WebSocket } from 'ws';
+/**
+ * Context passed to every frame handler so handlers
+ * can reference the authenticated worker without needing
+ * direct access to the socket map.
+ */
+export interface FrameHandlerContext {
+    workerId: string;
+    ws: WebSocket;
+}
+/**
+ * Strategy interface for processing authenticated worker frames.
+ */
+export interface FrameHandler {
+    /** Frame type(s) this handler is responsible for. */
+    readonly frameTypes: string[];
+    /**
+     * Process a single frame.
+     * May return void or a Promise<void> for async work.
+     */
+    handle(frame: WorkerUpFrame, ctx: FrameHandlerContext): void | Promise<void>;
+}
+//# sourceMappingURL=frame-handler.interface.d.ts.map

package/dist/web/frame-handlers/frame-handler.interface.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"frame-handler.interface.d.ts","sourceRoot":"","sources":["../../../src/web/frame-handlers/frame-handler.interface.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AAEpC;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,EAAE,EAAE,SAAS,CAAC;CACf;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,qDAAqD;IACrD,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC;IAE9B;;;OAGG;IACH,MAAM,CAAC,KAAK,EAAE,aAAa,EAAE,GAAG,EAAE,mBAAmB,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9E"}

package/dist/web/frame-handlers/frame-handler.interface.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=frame-handler.interface.js.map

package/dist/web/frame-handlers/frame-handler.interface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"frame-handler.interface.js","sourceRoot":"","sources":["../../../src/web/frame-handlers/frame-handler.interface.ts"],"names":[],"mappings":""}

package/dist/web/frame-handlers/frame-handler.registry.d.ts

@@ -0,0 +1,16 @@
+import type { WorkerUpFrame } from '@overlordai/protocol';
+import type { FrameHandler, FrameHandlerContext } from './frame-handler.interface';
+/**
+ * Maps frame types to their handlers and dispatches incoming frames.
+ */
+export declare class FrameHandlerRegistry {
+    private readonly logger;
+    private readonly handlerMap;
+    constructor(handlers: FrameHandler[]);
+    /**
+     * Dispatch a frame to the appropriate handler.
+     * Returns true if a handler was found, false otherwise.
+     */
+    dispatch(frame: WorkerUpFrame, ctx: FrameHandlerContext): boolean;
+}
+//# sourceMappingURL=frame-handler.registry.d.ts.map

package/dist/web/frame-handlers/frame-handler.registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"frame-handler.registry.d.ts","sourceRoot":"","sources":["../../../src/web/frame-handlers/frame-handler.registry.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,KAAK,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAEnF;;GAEG;AACH,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAyC;IAChE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAmC;gBAElD,QAAQ,EAAE,YAAY,EAAE;IAQpC;;;OAGG;IACH,QAAQ,CAAC,KAAK,EAAE,aAAa,EAAE,GAAG,EAAE,mBAAmB,GAAG,OAAO;CAoBlE"}

package/dist/web/frame-handlers/frame-handler.registry.js

@@ -0,0 +1,39 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FrameHandlerRegistry = void 0;
+const common_1 = require("@nestjs/common");
+/**
+ * Maps frame types to their handlers and dispatches incoming frames.
+ */
+class FrameHandlerRegistry {
+    logger = new common_1.Logger(FrameHandlerRegistry.name);
+    handlerMap = new Map();
+    constructor(handlers) {
+        for (const handler of handlers) {
+            for (const frameType of handler.frameTypes) {
+                this.handlerMap.set(frameType, handler);
+            }
+        }
+    }
+    /**
+     * Dispatch a frame to the appropriate handler.
+     * Returns true if a handler was found, false otherwise.
+     */
+    dispatch(frame, ctx) {
+        const handler = this.handlerMap.get(frame.type);
+        if (!handler) {
+            this.logger.debug(`No handler for frame type: ${frame.type}`);
+            return false;
+        }
+        const result = handler.handle(frame, ctx);
+        // If the handler returns a promise, catch errors to avoid unhandled rejections
+        if (result instanceof Promise) {
+            result.catch((err) => {
+                this.logger.error(`Error handling frame type '${frame.type}': ${err.message}`, err.stack);
+            });
+        }
+        return true;
+    }
+}
+exports.FrameHandlerRegistry = FrameHandlerRegistry;
+//# sourceMappingURL=frame-handler.registry.js.map

package/dist/web/frame-handlers/frame-handler.registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"frame-handler.registry.js","sourceRoot":"","sources":["../../../src/web/frame-handlers/frame-handler.registry.ts"],"names":[],"mappings":";;;AAAA,2CAAwC;AAIxC;;GAEG;AACH,MAAa,oBAAoB;IACd,MAAM,GAAG,IAAI,eAAM,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAC/C,UAAU,GAAG,IAAI,GAAG,EAAwB,CAAC;IAE9D,YAAY,QAAwB;QAClC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,KAAK,MAAM,SAAS,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;gBAC3C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,QAAQ,CAAC,KAAoB,EAAE,GAAwB;QACrD,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,8BAA8B,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YAC9D,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC1C,+EAA+E;QAC/E,IAAI,MAAM,YAAY,OAAO,EAAE,CAAC;YAC9B,MAAM,CAAC,KAAK,CAAC,CAAC,GAAU,EAAE,EAAE;gBAC1B,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,8BAA8B,KAAK,CAAC,IAAI,MAAM,GAAG,CAAC,OAAO,EAAE,EAC3D,GAAG,CAAC,KAAK,CACV,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AApCD,oDAoCC"}

package/dist/web/frame-handlers/heartbeat.handler.d.ts

@@ -0,0 +1,13 @@
+import type { WorkerUpFrame } from '@overlordai/protocol';
+import type { FrameHandler, FrameHandlerContext } from './frame-handler.interface';
+import type { HeartbeatService } from '../../dispatcher/heartbeat.service';
+import type { TunnelService } from '../tunnel.service';
+export declare class HeartbeatHandler implements FrameHandler {
+    private readonly heartbeatService;
+    private readonly tunnelService;
+    readonly frameTypes: string[];
+    private readonly logger;
+    constructor(heartbeatService: HeartbeatService, tunnelService: TunnelService);
+    handle(frame: WorkerUpFrame, ctx: FrameHandlerContext): void;
+}
+//# sourceMappingURL=heartbeat.handler.d.ts.map

package/dist/web/frame-handlers/heartbeat.handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"heartbeat.handler.d.ts","sourceRoot":"","sources":["../../../src/web/frame-handlers/heartbeat.handler.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,aAAa,EAGd,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AACnF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oCAAoC,CAAC;AAC3E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAEvD,qBAAa,gBAAiB,YAAW,YAAY;IAKjD,OAAO,CAAC,QAAQ,CAAC,gBAAgB;IACjC,OAAO,CAAC,QAAQ,CAAC,aAAa;IALhC,QAAQ,CAAC,UAAU,WAAiB;IACpC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAqC;gBAGzC,gBAAgB,EAAE,gBAAgB,EAClC,aAAa,EAAE,aAAa;IAG/C,MAAM,CAAC,KAAK,EAAE,aAAa,EAAE,GAAG,EAAE,mBAAmB,GAAG,IAAI;CAiC7D"}

package/dist/web/frame-handlers/heartbeat.handler.js

@@ -0,0 +1,35 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HeartbeatHandler = void 0;
+const common_1 = require("@nestjs/common");
+const ws_1 = require("ws");
+class HeartbeatHandler {
+    heartbeatService;
+    tunnelService;
+    frameTypes = ['heartbeat'];
+    logger = new common_1.Logger(HeartbeatHandler.name);
+    constructor(heartbeatService, tunnelService) {
+        this.heartbeatService = heartbeatService;
+        this.tunnelService = tunnelService;
+    }
+    handle(frame, ctx) {
+        const hb = frame;
+        this.heartbeatService.processHeartbeat(ctx.workerId, hb.metrics, hb.capabilities, hb.workerVersion, hb.cpuModel, hb.maxSlots, hb.activeTunnels);
+        // Reconcile tunnel state from heartbeat (always call, even with empty
+        // array, so stale tunnels are cleaned up when a worker has none active)
+        if (hb.activeTunnels) {
+            this.tunnelService.reconcileTunnels(ctx.workerId, hb.activeTunnels);
+        }
+        // Send heartbeat_ack
+        const ack = {
+            type: 'heartbeat_ack',
+            timestamp: hb.timestamp,
+            serverTime: new Date().toISOString(),
+        };
+        if (ctx.ws.readyState === ws_1.WebSocket.OPEN) {
+            ctx.ws.send(JSON.stringify(ack));
+        }
+    }
+}
+exports.HeartbeatHandler = HeartbeatHandler;
+//# sourceMappingURL=heartbeat.handler.js.map

package/dist/web/frame-handlers/heartbeat.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"heartbeat.handler.js","sourceRoot":"","sources":["../../../src/web/frame-handlers/heartbeat.handler.ts"],"names":[],"mappings":";;;AAAA,2CAAwC;AACxC,2BAA+B;AAU/B,MAAa,gBAAgB;IAKR;IACA;IALV,UAAU,GAAG,CAAC,WAAW,CAAC,CAAC;IACnB,MAAM,GAAG,IAAI,eAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAE5D,YACmB,gBAAkC,EAClC,aAA4B;QAD5B,qBAAgB,GAAhB,gBAAgB,CAAkB;QAClC,kBAAa,GAAb,aAAa,CAAe;IAC5C,CAAC;IAEJ,MAAM,CAAC,KAAoB,EAAE,GAAwB;QACnD,MAAM,EAAE,GAAG,KAA6B,CAAC;QAEzC,IAAI,CAAC,gBAAgB,CAAC,gBAAgB,CACpC,GAAG,CAAC,QAAQ,EACZ,EAAE,CAAC,OAAO,EACV,EAAE,CAAC,YAAY,EACf,EAAE,CAAC,aAAa,EAChB,EAAE,CAAC,QAAQ,EACX,EAAE,CAAC,QAAQ,EACX,EAAE,CAAC,aAAa,CACjB,CAAC;QAEF,sEAAsE;QACtE,wEAAwE;QACxE,IAAI,EAAE,CAAC,aAAa,EAAE,CAAC;YACrB,IAAI,CAAC,aAAa,CAAC,gBAAgB,CACjC,GAAG,CAAC,QAAQ,EACZ,EAAE,CAAC,aAAa,CACjB,CAAC;QACJ,CAAC;QAED,qBAAqB;QACrB,MAAM,GAAG,GAAsB;YAC7B,IAAI,EAAE,eAAe;YACrB,SAAS,EAAE,EAAE,CAAC,SAAS;YACvB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACrC,CAAC;QAEF,IAAI,GAAG,CAAC,EAAE,CAAC,UAAU,KAAK,cAAS,CAAC,IAAI,EAAE,CAAC;YACzC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;CACF;AA1CD,4CA0CC"}

package/dist/web/frame-handlers/index.d.ts

@@ -0,0 +1,7 @@
+export type { FrameHandler, FrameHandlerContext } from './frame-handler.interface';
+export { FrameHandlerRegistry } from './frame-handler.registry';
+export { HeartbeatHandler } from './heartbeat.handler';
+export { ProgressHandler } from './progress.handler';
+export { StageConfirmHandler } from './stage-confirm.handler';
+export { TunnelHandler } from './tunnel.handler';
+//# sourceMappingURL=index.d.ts.map

package/dist/web/frame-handlers/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/web/frame-handlers/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AACnF,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/web/frame-handlers/index.js

@@ -0,0 +1,14 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TunnelHandler = exports.StageConfirmHandler = exports.ProgressHandler = exports.HeartbeatHandler = exports.FrameHandlerRegistry = void 0;
+var frame_handler_registry_1 = require("./frame-handler.registry");
+Object.defineProperty(exports, "FrameHandlerRegistry", { enumerable: true, get: function () { return frame_handler_registry_1.FrameHandlerRegistry; } });
+var heartbeat_handler_1 = require("./heartbeat.handler");
+Object.defineProperty(exports, "HeartbeatHandler", { enumerable: true, get: function () { return heartbeat_handler_1.HeartbeatHandler; } });
+var progress_handler_1 = require("./progress.handler");
+Object.defineProperty(exports, "ProgressHandler", { enumerable: true, get: function () { return progress_handler_1.ProgressHandler; } });
+var stage_confirm_handler_1 = require("./stage-confirm.handler");
+Object.defineProperty(exports, "StageConfirmHandler", { enumerable: true, get: function () { return stage_confirm_handler_1.StageConfirmHandler; } });
+var tunnel_handler_1 = require("./tunnel.handler");
+Object.defineProperty(exports, "TunnelHandler", { enumerable: true, get: function () { return tunnel_handler_1.TunnelHandler; } });
+//# sourceMappingURL=index.js.map

package/dist/web/frame-handlers/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/web/frame-handlers/index.ts"],"names":[],"mappings":";;;AACA,mEAAgE;AAAvD,8HAAA,oBAAoB,OAAA;AAC7B,yDAAuD;AAA9C,qHAAA,gBAAgB,OAAA;AACzB,uDAAqD;AAA5C,mHAAA,eAAe,OAAA;AACxB,iEAA8D;AAArD,4HAAA,mBAAmB,OAAA;AAC5B,mDAAiD;AAAxC,+GAAA,aAAa,OAAA"}

package/dist/web/frame-handlers/progress.handler.d.ts

@@ -0,0 +1,25 @@
+import type { WorkerUpFrame } from '@overlordai/protocol';
+import type { FrameHandler, FrameHandlerContext } from './frame-handler.interface';
+import type { WorkerConnectionManager } from '../../dispatcher/worker-connection.manager';
+import type { Reconciler } from '../../dispatcher/reconciler';
+import type { TaskLifecycleService } from '../../dispatcher/task-lifecycle.service';
+import type { TaskLogBatcher } from '../../dispatcher/task-log-batcher';
+import type { WorkerRepository } from '../../database/repositories/worker.repository';
+import type { TaskRepository } from '../../database/repositories/task.repository';
+export declare class ProgressHandler implements FrameHandler {
+    private readonly workerConnectionManager;
+    private readonly reconciler;
+    private readonly taskLifecycleService;
+    private readonly taskLogBatcher;
+    private readonly workerRepo;
+    private readonly taskRepo;
+    readonly frameTypes: string[];
+    private readonly logger;
+    constructor(workerConnectionManager: WorkerConnectionManager, reconciler: Reconciler, taskLifecycleService: TaskLifecycleService, taskLogBatcher: TaskLogBatcher, workerRepo: WorkerRepository, taskRepo: TaskRepository);
+    handle(frame: WorkerUpFrame, ctx: FrameHandlerContext): void | Promise<void>;
+    private handleAck;
+    private handleProgress;
+    private handleReconnect;
+    private handleRecoverySecretAck;
+}
+//# sourceMappingURL=progress.handler.d.ts.map

package/dist/web/frame-handlers/progress.handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"progress.handler.d.ts","sourceRoot":"","sources":["../../../src/web/frame-handlers/progress.handler.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,aAAa,EAKd,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AACnF,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,4CAA4C,CAAC;AAC1F,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,yCAAyC,CAAC;AACpF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AACxE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,+CAA+C,CAAC;AACtF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6CAA6C,CAAC;AAElF,qBAAa,eAAgB,YAAW,YAAY;IAKhD,OAAO,CAAC,QAAQ,CAAC,uBAAuB;IACxC,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,oBAAoB;IACrC,OAAO,CAAC,QAAQ,CAAC,cAAc;IAC/B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAT3B,QAAQ,CAAC,UAAU,WAA2D;IAC9E,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAoC;gBAGxC,uBAAuB,EAAE,uBAAuB,EAChD,UAAU,EAAE,UAAU,EACtB,oBAAoB,EAAE,oBAAoB,EAC1C,cAAc,EAAE,cAAc,EAC9B,UAAU,EAAE,gBAAgB,EAC5B,QAAQ,EAAE,cAAc;IAG3C,MAAM,CAAC,KAAK,EAAE,aAAa,EAAE,GAAG,EAAE,mBAAmB,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAa5E,OAAO,CAAC,SAAS;IAIjB,OAAO,CAAC,cAAc;YAmCR,eAAe;IAe7B,OAAO,CAAC,uBAAuB;CAQhC"}

package/dist/web/frame-handlers/progress.handler.js

@@ -0,0 +1,69 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ProgressHandler = void 0;
+const common_1 = require("@nestjs/common");
+const protocol_1 = require("@overlordai/protocol");
+class ProgressHandler {
+    workerConnectionManager;
+    reconciler;
+    taskLifecycleService;
+    taskLogBatcher;
+    workerRepo;
+    taskRepo;
+    frameTypes = ['ack', 'progress', 'reconnect', 'recovery_secret_ack'];
+    logger = new common_1.Logger(ProgressHandler.name);
+    constructor(workerConnectionManager, reconciler, taskLifecycleService, taskLogBatcher, workerRepo, taskRepo) {
+        this.workerConnectionManager = workerConnectionManager;
+        this.reconciler = reconciler;
+        this.taskLifecycleService = taskLifecycleService;
+        this.taskLogBatcher = taskLogBatcher;
+        this.workerRepo = workerRepo;
+        this.taskRepo = taskRepo;
+    }
+    handle(frame, ctx) {
+        switch (frame.type) {
+            case 'ack':
+                return this.handleAck(frame);
+            case 'progress':
+                return this.handleProgress(frame);
+            case 'reconnect':
+                return this.handleReconnect(ctx, frame);
+            case 'recovery_secret_ack':
+                return this.handleRecoverySecretAck(ctx, frame);
+        }
+    }
+    handleAck(frame) {
+        this.workerConnectionManager.handleAck(frame.msgId, frame.payload);
+    }
+    handleProgress(frame) {
+        this.taskLogBatcher.add(frame.taskId, protocol_1.TaskLogType.STAGE_CHANGE, `Stage: ${frame.stage} - ${frame.status}${frame.message ? `: ${frame.message}` : ''}`);
+        // Persist current stage so the web UI can show pipeline progress
+        this.taskRepo.updateStage(frame.taskId, frame.stage);
+        // Transition ASSIGNED → RUNNING on first 'running' progress
+        if (frame.status === 'running') {
+            if (this.taskLifecycleService.markTaskRunning(frame.taskId)) {
+                this.logger.log(`Task #${frame.taskId} marked RUNNING via progress frame`);
+            }
+        }
+        // Transition task status when worker reports terminal states
+        if (frame.status === 'failed' || frame.status === 'cancelled') {
+            const targetStatus = frame.status === 'failed' ? protocol_1.TaskStatus.FAILED : protocol_1.TaskStatus.CANCELLED;
+            const updated = this.taskLifecycleService.markTaskTerminalFromWorker(frame.taskId, targetStatus, frame.message);
+            if (updated) {
+                this.logger.log(`Task #${frame.taskId} marked ${frame.status} via progress frame`);
+            }
+        }
+    }
+    async handleReconnect(ctx, frame) {
+        this.logger.log(`Worker ${ctx.workerId} reconnecting with ${frame.tasks.length} task(s)`);
+        // Update worker status to online
+        this.workerRepo.updateStatus(ctx.workerId, protocol_1.WorkerStatus.ONLINE);
+        // Forward to reconciler
+        await this.reconciler.handleReconnect(ctx.workerId, frame.tasks);
+    }
+    handleRecoverySecretAck(ctx, _frame) {
+        this.logger.log(`Worker ${ctx.workerId} acknowledged recovery secret bootstrap`);
+    }
+}
+exports.ProgressHandler = ProgressHandler;
+//# sourceMappingURL=progress.handler.js.map

package/dist/web/frame-handlers/progress.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"progress.handler.js","sourceRoot":"","sources":["../../../src/web/frame-handlers/progress.handler.ts"],"names":[],"mappings":";;;AAAA,2CAAwC;AACxC,mDAA6E;AAgB7E,MAAa,eAAe;IAKP;IACA;IACA;IACA;IACA;IACA;IATV,UAAU,GAAG,CAAC,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,qBAAqB,CAAC,CAAC;IAC7D,MAAM,GAAG,IAAI,eAAM,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;IAE3D,YACmB,uBAAgD,EAChD,UAAsB,EACtB,oBAA0C,EAC1C,cAA8B,EAC9B,UAA4B,EAC5B,QAAwB;QALxB,4BAAuB,GAAvB,uBAAuB,CAAyB;QAChD,eAAU,GAAV,UAAU,CAAY;QACtB,yBAAoB,GAApB,oBAAoB,CAAsB;QAC1C,mBAAc,GAAd,cAAc,CAAgB;QAC9B,eAAU,GAAV,UAAU,CAAkB;QAC5B,aAAQ,GAAR,QAAQ,CAAgB;IACxC,CAAC;IAEJ,MAAM,CAAC,KAAoB,EAAE,GAAwB;QACnD,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;YACnB,KAAK,KAAK;gBACR,OAAO,IAAI,CAAC,SAAS,CAAC,KAAuB,CAAC,CAAC;YACjD,KAAK,UAAU;gBACb,OAAO,IAAI,CAAC,cAAc,CAAC,KAA4B,CAAC,CAAC;YAC3D,KAAK,WAAW;gBACd,OAAO,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,KAA6B,CAAC,CAAC;YAClE,KAAK,qBAAqB;gBACxB,OAAO,IAAI,CAAC,uBAAuB,CAAC,GAAG,EAAE,KAAqC,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;IAEO,SAAS,CAAC,KAAqB;QACrC,IAAI,CAAC,uBAAuB,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IACrE,CAAC;IAEO,cAAc,CAAC,KAA0B;QAC/C,IAAI,CAAC,cAAc,CAAC,GAAG,CACrB,KAAK,CAAC,MAAM,EACZ,sBAAW,CAAC,YAAY,EACxB,UAAU,KAAK,CAAC,KAAK,MAAM,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CACtF,CAAC;QAEF,iEAAiE;QACjE,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QAErD,4DAA4D;QAC5D,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC/B,IAAI,IAAI,CAAC,oBAAoB,CAAC,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC5D,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,SAAS,KAAK,CAAC,MAAM,oCAAoC,CAC1D,CAAC;YACJ,CAAC;QACH,CAAC;QAED,6DAA6D;QAC7D,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YAC9D,MAAM,YAAY,GAAG,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,qBAAU,CAAC,MAAM,CAAC,CAAC,CAAC,qBAAU,CAAC,SAAS,CAAC;YAC1F,MAAM,OAAO,GAAG,IAAI,CAAC,oBAAoB,CAAC,0BAA0B,CAClE,KAAK,CAAC,MAAM,EACZ,YAAY,EACZ,KAAK,CAAC,OAAO,CACd,CAAC;YACF,IAAI,OAAO,EAAE,CAAC;gBACZ,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,SAAS,KAAK,CAAC,MAAM,WAAW,KAAK,CAAC,MAAM,qBAAqB,CAClE,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,eAAe,CAC3B,GAAwB,EACxB,KAA2B;QAE3B,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,UAAU,GAAG,CAAC,QAAQ,sBAAsB,KAAK,CAAC,KAAK,CAAC,MAAM,UAAU,CACzE,CAAC;QAEF,iCAAiC;QACjC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,uBAAY,CAAC,MAAM,CAAC,CAAC;QAEhE,wBAAwB;QACxB,MAAM,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IACnE,CAAC;IAEO,uBAAuB,CAC7B,GAAwB,EACxB,MAAoC;QAEpC,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,UAAU,GAAG,CAAC,QAAQ,yCAAyC,CAChE,CAAC;IACJ,CAAC;CACF;AAxFD,0CAwFC"}

package/dist/web/frame-handlers/stage-confirm.handler.d.ts

@@ -0,0 +1,15 @@
+import type { WorkerUpFrame } from '@overlordai/protocol';
+import type { FrameHandler, FrameHandlerContext } from './frame-handler.interface';
+import type { DedupService } from '../../dispatcher/dedup.service';
+import type { TaskRepository } from '../../database/repositories/task.repository';
+import type { NotifierService } from '../../notifier/notifier.service';
+export declare class StageConfirmHandler implements FrameHandler {
+    private readonly dedupService;
+    private readonly taskRepo;
+    private readonly notifierService;
+    readonly frameTypes: string[];
+    private readonly logger;
+    constructor(dedupService: DedupService, taskRepo: TaskRepository, notifierService: NotifierService);
+    handle(frame: WorkerUpFrame, _ctx: FrameHandlerContext): Promise<void>;
+}
+//# sourceMappingURL=stage-confirm.handler.d.ts.map

package/dist/web/frame-handlers/stage-confirm.handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stage-confirm.handler.d.ts","sourceRoot":"","sources":["../../../src/web/frame-handlers/stage-confirm.handler.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,aAAa,EAEd,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AACnF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6CAA6C,CAAC;AAClF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAEvE,qBAAa,mBAAoB,YAAW,YAAY;IAKpD,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,eAAe;IANlC,QAAQ,CAAC,UAAU,WAA6B;IAChD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAwC;gBAG5C,YAAY,EAAE,YAAY,EAC1B,QAAQ,EAAE,cAAc,EACxB,eAAe,EAAE,eAAe;IAG7C,MAAM,CAAC,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC;CA8B7E"}

package/dist/web/frame-handlers/stage-confirm.handler.js

@@ -0,0 +1,39 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.StageConfirmHandler = void 0;
+const common_1 = require("@nestjs/common");
+class StageConfirmHandler {
+    dedupService;
+    taskRepo;
+    notifierService;
+    frameTypes = ['stage_confirm_request'];
+    logger = new common_1.Logger(StageConfirmHandler.name);
+    constructor(dedupService, taskRepo, notifierService) {
+        this.dedupService = dedupService;
+        this.taskRepo = taskRepo;
+        this.notifierService = notifierService;
+    }
+    async handle(frame, _ctx) {
+        const { taskId, stageName, prompt, timeout } = frame;
+        this.logger.log(`Stage confirm request for task #${taskId}, stage ${stageName}`);
+        // Store pending confirm in Redis via DedupService
+        const confirmKey = `stage:${taskId}:${stageName}`;
+        await this.dedupService.storePendingConfirm(confirmKey, {
+            taskId,
+            stageName,
+            prompt,
+            timeout,
+            createdAt: new Date().toISOString(),
+        });
+        // Notify web clients via the notification channel
+        const task = this.taskRepo.findById(taskId);
+        if (task) {
+            await this.notifierService.notifyStageConfirmRequired(task, stageName);
+        }
+        else {
+            this.logger.warn(`Task #${taskId} not found when processing stage confirm request`);
+        }
+    }
+}
+exports.StageConfirmHandler = StageConfirmHandler;
+//# sourceMappingURL=stage-confirm.handler.js.map

package/dist/web/frame-handlers/stage-confirm.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stage-confirm.handler.js","sourceRoot":"","sources":["../../../src/web/frame-handlers/stage-confirm.handler.ts"],"names":[],"mappings":";;;AAAA,2CAAwC;AAUxC,MAAa,mBAAmB;IAKX;IACA;IACA;IANV,UAAU,GAAG,CAAC,uBAAuB,CAAC,CAAC;IAC/B,MAAM,GAAG,IAAI,eAAM,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAE/D,YACmB,YAA0B,EAC1B,QAAwB,EACxB,eAAgC;QAFhC,iBAAY,GAAZ,YAAY,CAAc;QAC1B,aAAQ,GAAR,QAAQ,CAAgB;QACxB,oBAAe,GAAf,eAAe,CAAiB;IAChD,CAAC;IAEJ,KAAK,CAAC,MAAM,CAAC,KAAoB,EAAE,IAAyB;QAC1D,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,KAAiC,CAAC;QAEjF,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,mCAAmC,MAAM,WAAW,SAAS,EAAE,CAChE,CAAC;QAEF,kDAAkD;QAClD,MAAM,UAAU,GAAG,SAAS,MAAM,IAAI,SAAS,EAAE,CAAC;QAClD,MAAM,IAAI,CAAC,YAAY,CAAC,mBAAmB,CAAC,UAAU,EAAE;YACtD,MAAM;YACN,SAAS;YACT,MAAM;YACN,OAAO;YACP,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC,CAAC;QAEH,kDAAkD;QAClD,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAI,IAAI,EAAE,CAAC;YACT,MAAM,IAAI,CAAC,eAAe,CAAC,0BAA0B,CACnD,IAAI,EACJ,SAAS,CACV,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,SAAS,MAAM,kDAAkD,CAClE,CAAC;QACJ,CAAC;IACH,CAAC;CACF;AAxCD,kDAwCC"}

package/dist/web/frame-handlers/tunnel.handler.d.ts

@@ -0,0 +1,10 @@
+import type { WorkerUpFrame } from '@overlordai/protocol';
+import type { FrameHandler, FrameHandlerContext } from './frame-handler.interface';
+import type { TunnelService } from '../tunnel.service';
+export declare class TunnelHandler implements FrameHandler {
+    private readonly tunnelService;
+    readonly frameTypes: string[];
+    constructor(tunnelService: TunnelService);
+    handle(frame: WorkerUpFrame, _ctx: FrameHandlerContext): void;
+}
+//# sourceMappingURL=tunnel.handler.d.ts.map

package/dist/web/frame-handlers/tunnel.handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tunnel.handler.d.ts","sourceRoot":"","sources":["../../../src/web/frame-handlers/tunnel.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,aAAa,EAId,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AACnF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAEvD,qBAAa,aAAc,YAAW,YAAY;IAI9C,OAAO,CAAC,QAAQ,CAAC,aAAa;IAHhC,QAAQ,CAAC,UAAU,WAAyD;gBAGzD,aAAa,EAAE,aAAa;IAG/C,MAAM,CAAC,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,mBAAmB,GAAG,IAAI;CAmB9D"}

package/dist/web/frame-handlers/tunnel.handler.js

@@ -0,0 +1,31 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TunnelHandler = void 0;
+class TunnelHandler {
+    tunnelService;
+    frameTypes = ['tunnel_started', 'tunnel_closed', 'tunnel_crashed'];
+    constructor(tunnelService) {
+        this.tunnelService = tunnelService;
+    }
+    handle(frame, _ctx) {
+        switch (frame.type) {
+            case 'tunnel_started': {
+                const f = frame;
+                this.tunnelService.handleTunnelStarted(f.taskId, f.tunnelUrl);
+                break;
+            }
+            case 'tunnel_closed': {
+                const f = frame;
+                this.tunnelService.handleTunnelClosed(f.taskId, f.reason);
+                break;
+            }
+            case 'tunnel_crashed': {
+                const f = frame;
+                this.tunnelService.handleTunnelCrashed(f.taskId, f.error, f.willRetry);
+                break;
+            }
+        }
+    }
+}
+exports.TunnelHandler = TunnelHandler;
+//# sourceMappingURL=tunnel.handler.js.map

package/dist/web/frame-handlers/tunnel.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tunnel.handler.js","sourceRoot":"","sources":["../../../src/web/frame-handlers/tunnel.handler.ts"],"names":[],"mappings":";;;AASA,MAAa,aAAa;IAIL;IAHV,UAAU,GAAG,CAAC,gBAAgB,EAAE,eAAe,EAAE,gBAAgB,CAAC,CAAC;IAE5E,YACmB,aAA4B;QAA5B,kBAAa,GAAb,aAAa,CAAe;IAC5C,CAAC;IAEJ,MAAM,CAAC,KAAoB,EAAE,IAAyB;QACpD,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;YACnB,KAAK,gBAAgB,CAAC,CAAC,CAAC;gBACtB,MAAM,CAAC,GAAG,KAA2B,CAAC;gBACtC,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC;gBAC9D,MAAM;YACR,CAAC;YACD,KAAK,eAAe,CAAC,CAAC,CAAC;gBACrB,MAAM,CAAC,GAAG,KAA0B,CAAC;gBACrC,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;gBAC1D,MAAM;YACR,CAAC;YACD,KAAK,gBAAgB,CAAC,CAAC,CAAC;gBACtB,MAAM,CAAC,GAAG,KAA2B,CAAC;gBACtC,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC;gBACvE,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;CACF;AA1BD,sCA0BC"}

package/dist/web/interaction.service.d.ts

@@ -13,10 +13,6 @@ export declare class InteractionService {
      * Returns 'granted' or 'denied' based on the Worker's CAS result.
      */
     requestTakeover(taskId: number, sessionId: string): Promise<'granted' | 'denied'>;
-    /**
-     * Release a takeover by clearing the writer role for a task.
-     */
-    releaseTakeover(taskId: number): Promise<void>;
     /**
      * Write stdin to a PTY session via the relay service.
      * Enforces writer check and rate limiting through PtyRelayService.

package/dist/web/interaction.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"interaction.service.d.ts","sourceRoot":"","sources":["../../src/web/interaction.service.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAClE,OAAO,EAAE,uBAAuB,EAAE,MAAM,yCAAyC,CAAC;AAElF,qBACa,kBAAkB;IAI3B,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,eAAe;IAChC,OAAO,CAAC,QAAQ,CAAC,uBAAuB;IAL1C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAuC;gBAG3C,WAAW,EAAE,WAAW,EACxB,eAAe,EAAE,eAAe,EAChC,uBAAuB,EAAE,uBAAuB;IAGnE;;;;OAIG;IACG,eAAe,CACnB,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,SAAS,GAAG,QAAQ,CAAC;IAqBhC;;OAEG;IACG,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQpD;;;OAGG;IACH,UAAU,CACR,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,YAAY,EAAE,MAAM,GACnB;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE;IAmBvC;;OAEG;IACH,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,GAAG,KAAK,GAAG,MAAM;IAI5D;;OAEG;IACH,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAIpD;;;OAGG;IACH,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,GAAG,OAAO;CAYhE"}
+{"version":3,"file":"interaction.service.d.ts","sourceRoot":"","sources":["../../src/web/interaction.service.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAClE,OAAO,EAAE,uBAAuB,EAAE,MAAM,yCAAyC,CAAC;AAElF,qBACa,kBAAkB;IAI3B,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,eAAe;IAChC,OAAO,CAAC,QAAQ,CAAC,uBAAuB;IAL1C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAuC;gBAG3C,WAAW,EAAE,WAAW,EACxB,eAAe,EAAE,eAAe,EAChC,uBAAuB,EAAE,uBAAuB;IAGnE;;;;OAIG;IACG,eAAe,CACnB,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,SAAS,GAAG,QAAQ,CAAC;IAqBhC;;;OAGG;IACH,UAAU,CACR,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,YAAY,EAAE,MAAM,GACnB;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE;IAmBvC;;OAEG;IACH,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,GAAG,KAAK,GAAG,MAAM;IAI5D;;OAEG;IACH,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAIpD;;;OAGG;IACH,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,GAAG,OAAO;CAYhE"}