@pellux/goodvibes-sdk 0.30.2 → 0.33.0

package/dist/platform/scheduler/scheduler.js

@@ -1,6 +1,78 @@
 import { PersistentStore } from '../state/persistent-store.js';
 import { logger } from '../utils/logger.js';
 import { summarizeError } from '../utils/error-display.js';
+const TASK_RUN_STATUSES = new Set(['running', 'completed', 'failed']);
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function isFiniteNumber(value) {
+    return typeof value === 'number' && Number.isFinite(value);
+}
+function throwInvalidSchedulerStore() {
+    throw new Error('TaskScheduler store snapshot is invalid.');
+}
+function validateOptionalString(value) {
+    if (value !== undefined && typeof value !== 'string')
+        throwInvalidSchedulerStore();
+}
+function validateOptionalNumber(value) {
+    if (value !== undefined && !isFiniteNumber(value))
+        throwInvalidSchedulerStore();
+}
+function validateScheduledTaskRecord(value) {
+    if (!isRecord(value))
+        throwInvalidSchedulerStore();
+    const task = value;
+    if (typeof task.id !== 'string'
+        || typeof task.name !== 'string'
+        || typeof task.cron !== 'string'
+        || typeof task.prompt !== 'string'
+        || typeof task.enabled !== 'boolean'
+        || !isFiniteNumber(task.runCount)
+        || !isFiniteNumber(task.createdAt)) {
+        throwInvalidSchedulerStore();
+    }
+    try {
+        parseCron(task.cron);
+        if (task.timezone !== undefined) {
+            if (typeof task.timezone !== 'string')
+                throwInvalidSchedulerStore();
+            validateTimezone(task.timezone);
+        }
+    }
+    catch {
+        throwInvalidSchedulerStore();
+    }
+    validateOptionalString(task.model);
+    validateOptionalString(task.template);
+    validateOptionalNumber(task.lastRun);
+    validateOptionalNumber(task.nextRun);
+    validateOptionalNumber(task.missedRuns);
+}
+function validateTaskRunRecord(value) {
+    if (!isRecord(value))
+        throwInvalidSchedulerStore();
+    const record = value;
+    if (typeof record.taskId !== 'string'
+        || !isFiniteNumber(record.startedAt)
+        || typeof record.agentId !== 'string'
+        || typeof record.status !== 'string'
+        || !TASK_RUN_STATUSES.has(record.status)) {
+        throwInvalidSchedulerStore();
+    }
+    validateOptionalString(record.error);
+}
+function validateSchedulerStoreData(data) {
+    if (!data)
+        return null;
+    if (!isRecord(data) || !Array.isArray(data.tasks) || !Array.isArray(data.history))
+        throwInvalidSchedulerStore();
+    for (const task of data.tasks)
+        validateScheduledTaskRecord(task);
+    for (const record of data.history)
+        validateTaskRunRecord(record);
+    return data;
+}
 // ---------------------------------------------------------------------------
 // Constants
 // ---------------------------------------------------------------------------
@@ -161,8 +233,8 @@ function fieldMatches(field, value) {
 }
 /**
  * Extract calendar components (minute, hour, dom, month, dow) from a UTC
- * timestamp as seen in the given IANA timezone.  Falls back to local time
- * when `timezone` is undefined or the timezone is not recognised.
+ * timestamp as seen in the given IANA timezone. Uses local time only when
+ * `timezone` is undefined.
  */
 function getCalendarParts(ts, timezone) {
     if (!timezone) {
@@ -197,20 +269,8 @@ function getCalendarParts(ts, timezone) {
             dow: ['Sun', 'Mon', 'Tue', 'Wed', 'Thu', 'Fri', 'Sat'].indexOf(parts['weekday'] ?? 'Sun'),
         };
     }
-    catch (err) {
-        // OBS-11: Unknown timezone — fall back to local time; log at debug so misconfigured schedules surface
-        logger.debug('[Scheduler] timezone decomposition failed, falling back to local time', {
-            error: String(err),
-        });
-        // fall back to local time
-        const d = new Date(ts);
-        return {
-            minute: d.getMinutes(),
-            hour: d.getHours(),
-            dom: d.getDate(),
-            month: d.getMonth() + 1,
-            dow: d.getDay(),
-        };
+    catch {
+        throw new Error(`Invalid timezone: "${timezone}". Use an IANA name like "America/New_York" or "Europe/London".`);
     }
 }
 /**
@@ -330,13 +390,13 @@ export class TaskScheduler {
     timers = new Map();
     /**
      * Per-task run history indexed by taskId — O(1) push + trim per task run.
-     * The flat `history` array is derived from this on persist (PERF-03).
+     * The flat `history` array is derived from this on persist.
      */
     historyByTask = new Map();
     store;
     spawnTask;
     running = false;
-    /** Debounce handle for coalescing rapid successive save() calls (PERF-03). */
+    /** Debounce handle for coalescing rapid successive save() calls. */
     _saveDebounceTimer = null;
     constructor(config) {
         const resolvedConfig = typeof config === 'string'
@@ -355,8 +415,8 @@ export class TaskScheduler {
     async start() {
         if (this.running)
             return;
-        this.running = true;
         await this.load();
+        this.running = true;
         for (const task of this.tasks.values()) {
             if (task.enabled) {
                 this.scheduleNext(task);
@@ -472,9 +532,6 @@ export class TaskScheduler {
         }
         return result;
     }
-    // -------------------------------------------------------------------------
-    // Internal scheduling
-    // -------------------------------------------------------------------------
     scheduleNext(task) {
         this.cancelTimer(task.id);
         let nextDate;
@@ -562,7 +619,7 @@ export class TaskScheduler {
         return agentId;
     }
     /**
-     * O(1) per-task history push + trim (PERF-03).
+     * O(1) per-task history push + trim.
      * The Map index makes both the push and the cap check O(1) instead of O(n) global filter.
      */
     pushHistory(record) {
@@ -595,7 +652,7 @@ export class TaskScheduler {
     }
     /**
      * Debounced save: coalesces multiple rapid calls into a single disk write
-     * that fires SAVE_DEBOUNCE_MS after the last call (PERF-03).
+     * that fires SAVE_DEBOUNCE_MS after the last call.
      */
     scheduleSave() {
         if (this._saveDebounceTimer !== null)
@@ -607,7 +664,7 @@ export class TaskScheduler {
         this._saveDebounceTimer.unref?.();
     }
     async load() {
-        const data = await this.store.load();
+        const data = validateSchedulerStoreData(await this.store.load());
         if (!data)
             return;
         const now = Date.now();
@@ -630,12 +687,12 @@ export class TaskScheduler {
                         });
                     }
                 }
-                // Recompute nextRun on load so stale values are replaced
+                // Recompute nextRun on load so stale values are replaced.
                 try {
                     t.nextRun = computeNextRun(t.cron, new Date(), t.timezone).getTime();
                 }
-                catch {
-                    t.enabled = false; // Disable tasks with invalid cron
+                catch (err) {
+                    throw new Error(`TaskScheduler store snapshot is invalid: task '${t.id}' schedule cannot be restored: ${summarizeError(err)}`);
                 }
                 // Detect if a run was missed during the gap (lastRun → now)
                 if (t.lastRun) {
@@ -659,7 +716,7 @@ export class TaskScheduler {
             for (const record of data.history) {
                 const bucket = this.historyByTask.get(record.taskId) ?? [];
                 bucket.push(record);
-                // Maintain cap on restore (PERF-03).
+                // Maintain cap on restore.
                 if (bucket.length > MAX_HISTORY_PER_TASK) {
                     bucket.splice(0, bucket.length - MAX_HISTORY_PER_TASK);
                 }

package/dist/platform/security/http-auth.d.ts

@@ -12,15 +12,15 @@ export type AuthenticatedOperatorRequest = {
 interface SessionCookieOptions {
     readonly req: Request;
     readonly expiresAt: number;
-    readonly trustProxy?: boolean;
+    readonly trustProxy?: boolean | undefined;
 }
 export declare function extractOperatorAuthToken(req: Request): string;
 export declare function authenticateOperatorToken(token: string, context: {
-    readonly sharedToken?: string | null;
+    readonly sharedToken?: string | null | undefined;
     readonly userAuth: Pick<UserAuthManager, 'validateSession' | 'getUser'>;
 }): AuthenticatedOperatorRequest | null;
 export declare function authenticateOperatorRequest(req: Request, context: {
-    readonly sharedToken?: string | null;
+    readonly sharedToken?: string | null | undefined;
     readonly userAuth: Pick<UserAuthManager, 'validateSession' | 'getUser'>;
 }): AuthenticatedOperatorRequest | null;
 export declare function isOperatorAdmin(authenticated: AuthenticatedOperatorRequest | null): boolean;

package/dist/platform/security/http-auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"http-auth.d.ts","sourceRoot":"","sources":["../../../src/platform/security/http-auth.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAEtD,eAAO,MAAM,4BAA4B,sBAAsB,CAAC;AAEhE,MAAM,MAAM,4BAA4B,GACpC;IACE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;CACnC,CAAC;AAEN,UAAU,oBAAoB;IAC5B,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC;CAC/B;AAmCD,wBAAgB,wBAAwB,CACtC,GAAG,EAAE,OAAO,GACX,MAAM,CAQR;AAOD,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,MAAM,EACb,OAAO,EAAE;IACP,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,eAAe,EAAE,iBAAiB,GAAG,SAAS,CAAC,CAAC;CACzE,GACA,4BAA4B,GAAG,IAAI,CAuBrC;AAED,wBAAgB,2BAA2B,CACzC,GAAG,EAAE,OAAO,EACZ,OAAO,EAAE;IACP,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,eAAe,EAAE,iBAAiB,GAAG,SAAS,CAAC,CAAC;CACzE,GACA,4BAA4B,GAAG,IAAI,CAErC;AAED,wBAAgB,eAAe,CAAC,aAAa,EAAE,4BAA4B,GAAG,IAAI,GAAG,OAAO,CAG3F;AAED,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,oBAAoB,GAAG,MAAM,CAa/F;AAED,wBAAgB,iCAAiC,CAAC,GAAG,EAAE,OAAO,EAAE,UAAU,UAAQ,GAAG,MAAM,CAW1F"}
+{"version":3,"file":"http-auth.d.ts","sourceRoot":"","sources":["../../../src/platform/security/http-auth.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAEtD,eAAO,MAAM,4BAA4B,sBAAsB,CAAC;AAEhE,MAAM,MAAM,4BAA4B,GACpC;IACE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;CACnC,CAAC;AAEN,UAAU,oBAAoB;IAC5B,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CAC3C;AAmCD,wBAAgB,wBAAwB,CACtC,GAAG,EAAE,OAAO,GACX,MAAM,CAQR;AAOD,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,MAAM,EACb,OAAO,EAAE;IACP,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IACjD,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,eAAe,EAAE,iBAAiB,GAAG,SAAS,CAAC,CAAC;CACzE,GACA,4BAA4B,GAAG,IAAI,CAqBrC;AAED,wBAAgB,2BAA2B,CACzC,GAAG,EAAE,OAAO,EACZ,OAAO,EAAE;IACP,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IACjD,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,eAAe,EAAE,iBAAiB,GAAG,SAAS,CAAC,CAAC;CACzE,GACA,4BAA4B,GAAG,IAAI,CAErC;AAED,wBAAgB,eAAe,CAAC,aAAa,EAAE,4BAA4B,GAAG,IAAI,GAAG,OAAO,CAG3F;AAED,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,oBAAoB,GAAG,MAAM,CAa/F;AAED,wBAAgB,iCAAiC,CAAC,GAAG,EAAE,OAAO,EAAE,UAAU,UAAQ,GAAG,MAAM,CAW1F"}

package/dist/platform/security/http-auth.js

@@ -56,11 +56,9 @@ export function authenticateOperatorToken(token, context) {
     const normalized = token.trim();
     if (!normalized)
         return null;
-    // Try shared-token first. If present AND it matches, grant shared-token access.
-    // Critically: do NOT return null here if it doesn't match — fall through to
-    // session validation so that session cookies remain valid even when a shared
-    // token is also configured (e.g. when the daemon is enabled with a bearer token
-    // for operator tooling but the companion app uses session-cookie auth).
+    // Try shared-token first. If present and it matches, grant shared-token access.
+    // A non-match must still be checked as a user session so session cookies
+    // remain valid when operator tooling also uses a bearer token.
     if (context.sharedToken && matchesSharedToken(normalized, context.sharedToken)) {
         return { kind: 'shared-token', token: normalized };
     }

package/dist/platform/security/index.d.ts

@@ -2,6 +2,7 @@ export { SpawnTokenManager } from './spawn-tokens.js';
 export type { SpawnToken, OrchestrationPolicyConfig } from './spawn-tokens.js';
 export { UserAuthManager } from './user-auth.js';
 export type { AuthUser, AuthSession, LocalAuthSnapshot } from './user-auth.js';
+export { OPERATOR_SESSION_COOKIE_NAME, authenticateOperatorRequest, authenticateOperatorToken, extractOperatorAuthToken, isOperatorAdmin, } from './http-auth.js';
 export { ApiTokenAuditor } from './token-audit.js';
 export type { ApiTokenMetadata, TokenScopePolicy, TokenScopeAuditResult, TokenRotationAuditResult, TokenAuditResult, TokenAuditReport, TokenAuditorConfig, ScopeAuditOutcome, RotationAuditOutcome, } from './token-audit.js';
 export { DEFAULT_ROTATION_CADENCE_MS, DEFAULT_ROTATION_WARNING_THRESHOLD_MS } from './token-audit.js';

package/dist/platform/security/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/platform/security/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,YAAY,EAAE,UAAU,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AAC/E,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,YAAY,EAAE,QAAQ,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAC/E,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,YAAY,EACV,gBAAgB,EAChB,gBAAgB,EAChB,qBAAqB,EACrB,wBAAwB,EACxB,gBAAgB,EAChB,gBAAgB,EAChB,kBAAkB,EAClB,iBAAiB,EACjB,oBAAoB,GACrB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,2BAA2B,EAAE,qCAAqC,EAAE,MAAM,kBAAkB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/platform/security/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,YAAY,EAAE,UAAU,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AAC/E,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,YAAY,EAAE,QAAQ,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAC/E,OAAO,EACL,4BAA4B,EAC5B,2BAA2B,EAC3B,yBAAyB,EACzB,wBAAwB,EACxB,eAAe,GAChB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,YAAY,EACV,gBAAgB,EAChB,gBAAgB,EAChB,qBAAqB,EACrB,wBAAwB,EACxB,gBAAgB,EAChB,gBAAgB,EAChB,kBAAkB,EAClB,iBAAiB,EACjB,oBAAoB,GACrB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,2BAA2B,EAAE,qCAAqC,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/platform/security/index.js

@@ -1,4 +1,5 @@
 export { SpawnTokenManager } from './spawn-tokens.js';
 export { UserAuthManager } from './user-auth.js';
+export { OPERATOR_SESSION_COOKIE_NAME, authenticateOperatorRequest, authenticateOperatorToken, extractOperatorAuthToken, isOperatorAdmin, } from './http-auth.js';
 export { ApiTokenAuditor } from './token-audit.js';
 export { DEFAULT_ROTATION_CADENCE_MS, DEFAULT_ROTATION_WARNING_THRESHOLD_MS } from './token-audit.js';

package/dist/platform/security/spawn-tokens.d.ts

@@ -16,11 +16,11 @@ export interface OrchestrationPolicyConfig {
 }
 interface ValidateResult {
     valid: boolean;
-    reason?: string;
+    reason?: string | undefined;
 }
 interface CanSpawnResult {
     allowed: boolean;
-    reason?: string;
+    reason?: string | undefined;
 }
 /**
  * Manages spawn tokens for the bounded recursive orchestration security model.

package/dist/platform/security/spawn-tokens.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"spawn-tokens.d.ts","sourceRoot":"","sources":["../../../src/platform/security/spawn-tokens.ts"],"names":[],"mappings":"AAcA,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,OAAO,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,yBAAyB;IACxC,gBAAgB,EAAE,OAAO,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,UAAU,cAAc;IACtB,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,UAAU,cAAc;IACtB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAMD;;;;;;;GAOG;AACH,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,MAAM,CAAiC;gBAEnC,SAAS,EAAE,MAAM;IAS7B,OAAO,CAAC,IAAI;IAcZ,OAAO,CAAC,eAAe;IAYvB;;;OAGG;IACH,uBAAuB,CAAC,KAAK,GAAE,MAA6B,GAAG,UAAU;IAgBzE;;;OAGG;IACH,kBAAkB,CAChB,iBAAiB,EAAE,UAAU,EAC7B,OAAO,EAAE,MAAM,EACf,KAAK,GAAE,MAA6B,GACnC,UAAU,GAAG,IAAI;IA8BpB;;OAEG;IACH,QAAQ,CAAC,KAAK,EAAE,UAAU,GAAG,cAAc;IAmB3C;;;OAGG;IACH,QAAQ,CACN,KAAK,EAAE,UAAU,EACjB,MAAM,EAAE,yBAAyB,EACjC,iBAAiB,EAAE,MAAM,GACxB,cAAc;IA6BjB;;;OAGG;IACH,MAAM,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO;CAGxC"}
+{"version":3,"file":"spawn-tokens.d.ts","sourceRoot":"","sources":["../../../src/platform/security/spawn-tokens.ts"],"names":[],"mappings":"AAcA,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,OAAO,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,yBAAyB;IACxC,gBAAgB,EAAE,OAAO,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,UAAU,cAAc;IACtB,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC7B;AAED,UAAU,cAAc;IACtB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC7B;AAMD;;;;;;;GAOG;AACH,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,MAAM,CAAiC;gBAEnC,SAAS,EAAE,MAAM;IAS7B,OAAO,CAAC,IAAI;IAcZ,OAAO,CAAC,eAAe;IAYvB;;;OAGG;IACH,uBAAuB,CAAC,KAAK,GAAE,MAA6B,GAAG,UAAU;IAgBzE;;;OAGG;IACH,kBAAkB,CAChB,iBAAiB,EAAE,UAAU,EAC7B,OAAO,EAAE,MAAM,EACf,KAAK,GAAE,MAA6B,GACnC,UAAU,GAAG,IAAI;IA8BpB;;OAEG;IACH,QAAQ,CAAC,KAAK,EAAE,UAAU,GAAG,cAAc;IAmB3C;;;OAGG;IACH,QAAQ,CACN,KAAK,EAAE,UAAU,EACjB,MAAM,EAAE,yBAAyB,EACjC,iBAAiB,EAAE,MAAM,GACxB,cAAc;IA6BjB;;;OAGG;IACH,MAAM,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO;CAGxC"}

package/dist/platform/security/token-audit.d.ts

@@ -51,12 +51,12 @@ export interface TokenScopePolicy {
      * Rotation cadence in ms. Tokens older than this value are overdue.
      * Defaults to DEFAULT_ROTATION_CADENCE_MS when not specified.
      */
-    rotationCadenceMs?: number;
+    rotationCadenceMs?: number | undefined;
     /**
      * Warning threshold in ms before the rotation deadline.
      * Defaults to DEFAULT_ROTATION_WARNING_THRESHOLD_MS when not specified.
      */
-    rotationWarningThresholdMs?: number;
+    rotationWarningThresholdMs?: number | undefined;
 }
 /** Outcome of a single scope audit check. */
 export type ScopeAuditOutcome = 'ok' | 'violation';
@@ -75,7 +75,7 @@ export interface TokenScopeAuditResult {
 export interface TokenRotationAuditResult {
     tokenId: string;
     outcome: RotationAuditOutcome;
-    /** How old the token is in ms. */
+    /** Token age in ms. */
     ageMs: number;
     /** The configured rotation cadence in ms. */
     cadenceMs: number;
@@ -121,7 +121,7 @@ export interface TokenAuditorConfig {
      * Feature flags gate managed blocking when supplied by SDK runtime services.
      * Audits still report violations while disabled.
      */
-    featureFlags?: FeatureFlagReader;
+    featureFlags?: FeatureFlagReader | undefined;
 }
 /**
  * Callback invoked after each token is audited in `auditAll()`.
@@ -171,7 +171,7 @@ export declare class ApiTokenAuditor {
      */
     registerToken(metadata: ApiTokenMetadata): void;
     /**
-     * Deregister a token (e.g. on rotation — remove the old registration,
+     * Deregister a token (e.g. on rotation - remove the previous registration,
      * then registerToken with the new metadata).
      */
     deregisterToken(tokenId: string): boolean;

package/dist/platform/security/token-audit.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"token-audit.d.ts","sourceRoot":"","sources":["../../../src/platform/security/token-audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAC9D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAC;AAO3E,+CAA+C;AAC/C,eAAO,MAAM,2BAA2B,QAA2B,CAAC;AAEpE,mEAAmE;AACnE,eAAO,MAAM,qCAAqC,QAA2B,CAAC;AAM9E;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,iEAAiE;IACjE,EAAE,EAAE,MAAM,CAAC;IACX,uEAAuE;IACvE,KAAK,EAAE,MAAM,CAAC;IACd,0DAA0D;IAC1D,QAAQ,EAAE,MAAM,CAAC;IACjB,gEAAgE;IAChE,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,+EAA+E;IAC/E,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,gCAAgC;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,2BAA2B;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb;;;OAGG;IACH,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC;;;OAGG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B;;;OAGG;IACH,0BAA0B,CAAC,EAAE,MAAM,CAAC;CACrC;AAED,6CAA6C;AAC7C,MAAM,MAAM,iBAAiB,GAAG,IAAI,GAAG,WAAW,CAAC;AAEnD,gDAAgD;AAChD,MAAM,MAAM,oBAAoB,GAAG,IAAI,GAAG,SAAS,GAAG,SAAS,CAAC;AAEhE,6CAA6C;AAC7C,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,iBAAiB,CAAC;IAC3B,8EAA8E;IAC9E,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,oCAAoC;IACpC,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,gDAAgD;AAChD,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,oBAAoB,CAAC;IAC9B,kCAAkC;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,6CAA6C;IAC7C,SAAS,EAAE,MAAM,CAAC;IAClB,+DAA+D;IAC/D,UAAU,EAAE,MAAM,CAAC;IACnB,2CAA2C;IAC3C,KAAK,EAAE,MAAM,CAAC;CACf;AAED,gDAAgD;AAChD,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,qBAAqB,CAAC;IAC7B,QAAQ,EAAE,wBAAwB,CAAC;IACnC;;;OAGG;IACH,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,sDAAsD;AACtD,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,gBAAgB,EAAE,CAAC;IAC5B,sCAAsC;IACtC,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,oCAAoC;IACpC,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,4DAA4D;IAC5D,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,oCAAoC;IACpC,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,8CAA8C;IAC9C,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,6CAA6C;AAC7C,MAAM,WAAW,kBAAkB;IACjC;;;OAGG;IACH,OAAO,EAAE,OAAO,CAAC;IACjB;;;OAGG;IACH,YAAY,CAAC,EAAE,iBAAiB,CAAC;CAClC;AAED;;;;GAIG;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,KAAK,EAAE,aAAa,KAAK,IAAI,CAAC;AAMlE;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,qBAAa,eAAe;IAC1B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAuC;IACjE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAuC;IAC/D,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqB;IAC7C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAuB;gBAG9C,MAAM,GAAE,kBAAuC,EAC/C,OAAO,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,oBAAoB,CAAA;KAAE;IAM9C,OAAO,CAAC,uBAAuB;IAQ/B;;;OAGG;IACH,cAAc,CAAC,MAAM,EAAE,gBAAgB,GAAG,IAAI;IAK9C;;;OAGG;IACH,aAAa,CAAC,QAAQ,EAAE,gBAAgB,GAAG,IAAI;IAU/C;;;OAGG;IACH,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO;IAQzC;;;OAGG;IACH,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,qBAAqB,GAAG,IAAI;IAQzD;;;OAGG;IACH,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,GAAE,MAAmB,GAAG,wBAAwB,GAAG,IAAI;IAYzF,OAAO,CAAC,cAAc;IAoBtB,OAAO,CAAC,iBAAiB;IA0CzB;;;;;;OAMG;IACH,QAAQ,CAAC,GAAG,GAAE,MAAmB,GAAG,gBAAgB;IA2FpD;;;OAGG;IACH,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,GAAE,MAAmB,GAAG,OAAO;IAa7D,sCAAsC;IACtC,IAAI,SAAS,IAAI,OAAO,CAEvB;IAED,mCAAmC;IACnC,IAAI,UAAU,IAAI,MAAM,CAEvB;IAED,qCAAqC;IACrC,IAAI,WAAW,IAAI,MAAM,CAExB;IAED,gEAAgE;IAChE,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS;IAInD,sEAAsE;IACtE,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS;CAG3D"}
+{"version":3,"file":"token-audit.d.ts","sourceRoot":"","sources":["../../../src/platform/security/token-audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAC9D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAC;AAO3E,+CAA+C;AAC/C,eAAO,MAAM,2BAA2B,QAA2B,CAAC;AAEpE,mEAAmE;AACnE,eAAO,MAAM,qCAAqC,QAA2B,CAAC;AAM9E;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,iEAAiE;IACjE,EAAE,EAAE,MAAM,CAAC;IACX,uEAAuE;IACvE,KAAK,EAAE,MAAM,CAAC;IACd,0DAA0D;IAC1D,QAAQ,EAAE,MAAM,CAAC;IACjB,gEAAgE;IAChE,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,+EAA+E;IAC/E,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,gCAAgC;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,2BAA2B;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb;;;OAGG;IACH,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC;;;OAGG;IACH,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC;;;OAGG;IACH,0BAA0B,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACjD;AAED,6CAA6C;AAC7C,MAAM,MAAM,iBAAiB,GAAG,IAAI,GAAG,WAAW,CAAC;AAEnD,gDAAgD;AAChD,MAAM,MAAM,oBAAoB,GAAG,IAAI,GAAG,SAAS,GAAG,SAAS,CAAC;AAEhE,6CAA6C;AAC7C,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,iBAAiB,CAAC;IAC3B,8EAA8E;IAC9E,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,oCAAoC;IACpC,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,gDAAgD;AAChD,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,oBAAoB,CAAC;IAC9B,uBAAuB;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,6CAA6C;IAC7C,SAAS,EAAE,MAAM,CAAC;IAClB,+DAA+D;IAC/D,UAAU,EAAE,MAAM,CAAC;IACnB,2CAA2C;IAC3C,KAAK,EAAE,MAAM,CAAC;CACf;AAED,gDAAgD;AAChD,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,qBAAqB,CAAC;IAC7B,QAAQ,EAAE,wBAAwB,CAAC;IACnC;;;OAGG;IACH,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,sDAAsD;AACtD,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,gBAAgB,EAAE,CAAC;IAC5B,sCAAsC;IACtC,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,oCAAoC;IACpC,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,4DAA4D;IAC5D,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,oCAAoC;IACpC,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,8CAA8C;IAC9C,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,6CAA6C;AAC7C,MAAM,WAAW,kBAAkB;IACjC;;;OAGG;IACH,OAAO,EAAE,OAAO,CAAC;IACjB;;;OAGG;IACH,YAAY,CAAC,EAAE,iBAAiB,GAAG,SAAS,CAAC;CAC9C;AAED;;;;GAIG;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,KAAK,EAAE,aAAa,KAAK,IAAI,CAAC;AAMlE;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,qBAAa,eAAe;IAC1B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAuC;IACjE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAuC;IAC/D,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqB;IAC7C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAuB;gBAG9C,MAAM,GAAE,kBAAuC,EAC/C,OAAO,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,oBAAoB,CAAA;KAAE;IAM9C,OAAO,CAAC,uBAAuB;IAQ/B;;;OAGG;IACH,cAAc,CAAC,MAAM,EAAE,gBAAgB,GAAG,IAAI;IAK9C;;;OAGG;IACH,aAAa,CAAC,QAAQ,EAAE,gBAAgB,GAAG,IAAI;IAU/C;;;OAGG;IACH,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO;IAQzC;;;OAGG;IACH,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,qBAAqB,GAAG,IAAI;IAQzD;;;OAGG;IACH,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,GAAE,MAAmB,GAAG,wBAAwB,GAAG,IAAI;IAQzF,OAAO,CAAC,cAAc;IAoBtB,OAAO,CAAC,iBAAiB;IA0CzB;;;;;;OAMG;IACH,QAAQ,CAAC,GAAG,GAAE,MAAmB,GAAG,gBAAgB;IA2FpD;;;OAGG;IACH,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,GAAE,MAAmB,GAAG,OAAO;IAa7D,sCAAsC;IACtC,IAAI,SAAS,IAAI,OAAO,CAEvB;IAED,mCAAmC;IACnC,IAAI,UAAU,IAAI,MAAM,CAEvB;IAED,qCAAqC;IACrC,IAAI,WAAW,IAAI,MAAM,CAExB;IAED,gEAAgE;IAChE,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS;IAInD,sEAAsE;IACtE,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS;CAG3D"}

package/dist/platform/security/token-audit.js

@@ -80,7 +80,7 @@ export class ApiTokenAuditor {
         logger.debug('ApiTokenAuditor: registered token', { tokenId: metadata.id, label: metadata.label });
     }
     /**
-     * Deregister a token (e.g. on rotation — remove the old registration,
+     * Deregister a token (e.g. on rotation - remove the previous registration,
      * then registerToken with the new metadata).
      */
     deregisterToken(tokenId) {
@@ -115,9 +115,6 @@ export class ApiTokenAuditor {
             return null;
         return this._auditRotationFor(token, policy, now);
     }
-    // -------------------------------------------------------------------------
-    // Internal audit helpers (avoid map lookups + non-null assertions in auditAll)
-    // -------------------------------------------------------------------------
     _auditScopeFor(token, policy) {
         const allowedSet = new Set(policy.allowedScopes);
         const excessScopes = token.grantedScopes.filter((s) => !allowedSet.has(s));

package/dist/platform/security/user-auth.d.ts

@@ -1,7 +1,7 @@
 export interface AuthUser {
     username: string;
     passwordHash: string;
-    roles?: string[];
+    roles?: string[] | undefined;
 }
 export interface AuthSession {
     token: string;
@@ -9,8 +9,9 @@ export interface AuthSession {
     expiresAt: number;
 }
 interface UserAuthConfig {
-    sessionTtlMs?: number;
-    users?: AuthUser[];
+    sessionTtlMs?: number | undefined;
+    maxSessions?: number | undefined;
+    users?: AuthUser[] | undefined;
     bootstrapFilePath: string;
     bootstrapCredentialPath: string;
 }
@@ -37,6 +38,7 @@ export declare class UserAuthManager {
     private users;
     private sessions;
     private sessionTtlMs;
+    private readonly maxSessions;
     private readonly userStorePath;
     private readonly bootstrapCredentialPath;
     private readonly persistUsers;

package/dist/platform/security/user-auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"user-auth.d.ts","sourceRoot":"","sources":["../../../src/platform/security/user-auth.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,QAAQ;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,UAAU,cAAc;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,QAAQ,EAAE,CAAC;IACnB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,uBAAuB,EAAE,MAAM,CAAC;CACjC;AAUD,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;CACnC;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,uBAAuB,EAAE,MAAM,CAAC;IACzC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,0BAA0B,EAAE,OAAO,CAAC;IAC7C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,SAAS,cAAc,EAAE,CAAC;IAC1C,QAAQ,CAAC,QAAQ,EAAE,SAAS,iBAAiB,EAAE,CAAC;CACjD;AA4KD,qBAAa,eAAe;IAC1B,OAAO,CAAC,KAAK,CAA+B;IAC5C,OAAO,CAAC,QAAQ,CAAkC;IAClD,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAS;IACjD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAU;gBAE3B,MAAM,EAAE,cAAc;IAqBlC,MAAM,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM;IAI7C,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,QAAQ,GAAG,IAAI;IAMjE,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI;IAShD,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,WAAW;IAY5C,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI;IAUlD,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;IAWrC,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM;IAW/C,SAAS,IAAI,cAAc,EAAE;IAS7B,YAAY,IAAI,iBAAiB,EAAE;IAWnC,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,GAAE,SAAS,MAAM,EAAc,GAAG,cAAc;IAejG,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAarC,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,IAAI;IAgB5D,OAAO,IAAI,iBAAiB;IAc5B,4BAA4B,IAAI,OAAO;IAMvC,0BAA0B,IAAI,MAAM;IAIpC,OAAO,CAAC,oBAAoB;IAS5B,OAAO,CAAC,OAAO;CAIhB"}
+{"version":3,"file":"user-auth.d.ts","sourceRoot":"","sources":["../../../src/platform/security/user-auth.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,QAAQ;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;CAC9B;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,UAAU,cAAc;IACtB,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,KAAK,CAAC,EAAE,QAAQ,EAAE,GAAG,SAAS,CAAC;IAC/B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,uBAAuB,EAAE,MAAM,CAAC;CACjC;AAWD,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;CACnC;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,uBAAuB,EAAE,MAAM,CAAC;IACzC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,0BAA0B,EAAE,OAAO,CAAC;IAC7C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,SAAS,cAAc,EAAE,CAAC;IAC1C,QAAQ,CAAC,QAAQ,EAAE,SAAS,iBAAiB,EAAE,CAAC;CACjD;AA4KD,qBAAa,eAAe;IAC1B,OAAO,CAAC,KAAK,CAA+B;IAC5C,OAAO,CAAC,QAAQ,CAAkC;IAClD,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAS;IACjD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAU;gBAE3B,MAAM,EAAE,cAAc;IAsBlC,MAAM,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM;IAI7C,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,QAAQ,GAAG,IAAI;IAMjE,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI;IAShD,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,WAAW;IA0B5C,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI;IAUlD,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;IAWrC,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM;IAW/C,SAAS,IAAI,cAAc,EAAE;IAS7B,YAAY,IAAI,iBAAiB,EAAE;IAWnC,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,GAAE,SAAS,MAAM,EAAc,GAAG,cAAc;IAejG,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAarC,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,IAAI;IAgB5D,OAAO,IAAI,iBAAiB;IAc5B,4BAA4B,IAAI,OAAO;IAMvC,0BAA0B,IAAI,MAAM;IAIpC,OAAO,CAAC,oBAAoB;IAS5B,OAAO,CAAC,OAAO;CAIhB"}

package/dist/platform/security/user-auth.js

@@ -3,6 +3,7 @@ import { chmodSync, existsSync, mkdirSync, readFileSync, renameSync, rmSync, wri
 import { dirname, join } from 'node:path';
 import { logger } from '../utils/logger.js';
 const DEFAULT_SESSION_TTL_MS = 3_600_000;
+const DEFAULT_MAX_SESSIONS = 1000;
 const SCRYPT_KEY_LENGTH = 64;
 function toBase64(value) {
     return value.toString('base64');
@@ -76,7 +77,7 @@ function atomicWriteSecretFile(filePath, content) {
     }
 }
 function writeBootstrapUsers(filePath, users) {
-    // SEC-01: auth-user store contains scrypt password hashes — must be 0600.
+    // auth-user store contains scrypt password hashes — must be 0600.
     const payload = { version: 1, users };
     atomicWriteSecretFile(filePath, `${JSON.stringify(payload, null, 2)}\n`);
 }
@@ -158,6 +159,7 @@ export class UserAuthManager {
     users = new Map();
     sessions = new Map();
     sessionTtlMs;
+    maxSessions;
     userStorePath;
     bootstrapCredentialPath;
     persistUsers;
@@ -167,6 +169,7 @@ export class UserAuthManager {
         if (!config.bootstrapCredentialPath)
             throw new Error('UserAuthManager requires an explicit bootstrapCredentialPath.');
         this.sessionTtlMs = config.sessionTtlMs ?? DEFAULT_SESSION_TTL_MS;
+        this.maxSessions = config.maxSessions ?? DEFAULT_MAX_SESSIONS;
         this.userStorePath = config.bootstrapFilePath;
         this.bootstrapCredentialPath = config.bootstrapCredentialPath;
         this.persistUsers = config.users === undefined;
@@ -201,6 +204,20 @@ export class UserAuthManager {
     }
     createSession(username) {
         this.pruneExpiredSessions();
+        if (this.sessions.size >= this.maxSessions) {
+            // Evict the session with the earliest expiry to make room.
+            let oldestToken;
+            let oldestExpiry = Infinity;
+            for (const [token, session] of this.sessions.entries()) {
+                if (session.expiresAt < oldestExpiry) {
+                    oldestExpiry = session.expiresAt;
+                    oldestToken = token;
+                }
+            }
+            if (oldestToken !== undefined) {
+                this.sessions.delete(oldestToken);
+            }
+        }
         const token = randomBytes(32).toString('hex');
         const session = {
             token,

package/dist/platform/sessions/manager.d.ts

@@ -9,8 +9,8 @@ export interface SessionMeta {
     model: string;
     provider: string;
     timestamp: number;
-    titleSource?: ConversationTitleSource;
-    returnContext?: SessionReturnContextSummary;
+    titleSource?: ConversationTitleSource | undefined;
+    returnContext?: SessionReturnContextSummary | undefined;
 }
 /**
  * Summary info for listing saved sessions.
@@ -23,8 +23,8 @@ export interface SessionInfo {
     timestamp: number;
     messageCount: number;
     filePath: string;
-    titleSource?: ConversationTitleSource;
-    returnContext?: SessionReturnContextSummary;
+    titleSource?: ConversationTitleSource | undefined;
+    returnContext?: SessionReturnContextSummary | undefined;
 }
 /**
  * SessionManager - Handles saving and loading named conversation sessions
@@ -37,17 +37,17 @@ export interface SessionInfo {
 export declare class SessionManager {
     private sessionsDir;
     constructor(baseDir: string, options?: {
-        readonly surfaceRoot?: string;
-        readonly sessionsDir?: string;
+        readonly surfaceRoot?: string | undefined;
+        readonly sessionsDir?: string | undefined;
     });
     /**
      * Remove any `.tmp-*` files left behind by a crashed write.
-     * Non-fatal: errors are logged and ignored.
+     * Cleanup errors are logged and startup continues.
      */
     private _cleanupOrphanTempFiles;
     /**
      * Atomically write content to filePath via a temp file + fsync + rename.
-     * Protects against partial writes on crash (C4 fix).
+     * Protects against partial writes on crash.
      */
     private _atomicWrite;
     /**

package/dist/platform/sessions/manager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"manager.d.ts","sourceRoot":"","sources":["../../../src/platform/sessions/manager.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,sCAAsC,CAAC;AACxF,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAIvE;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,uBAAuB,CAAC;IACtC,aAAa,CAAC,EAAE,2BAA2B,CAAC;CAC7C;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,uBAAuB,CAAC;IACtC,aAAa,CAAC,EAAE,2BAA2B,CAAC;CAC7C;AAED;;;;;;;GAOG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,WAAW,CAAS;gBAEhB,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE;IAMvG;;;OAGG;IACH,OAAO,CAAC,uBAAuB;IAuB/B;;;OAGG;IACH,OAAO,CAAC,YAAY;IAapB;;;;OAIG;IACH,IAAI,CACF,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAAE,EAClB,IAAI,EAAE,WAAW,EACjB,YAAY,CAAC,EAAE,WAAW,EAAE,GAC3B;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE;IAuC9C;;;OAGG;IACH,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG;QAAE,IAAI,EAAE,WAAW,CAAC;QAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;QAAC,YAAY,EAAE,WAAW,EAAE,CAAA;KAAE;IAwD1F;;OAEG;IACH,IAAI,IAAI,WAAW,EAAE;IAoFrB;;;OAGG;IACH,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI;IA4BzC;;;;;OAKG;IACH,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI;IAoB5C;;;OAGG;IACH,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAY1B;;;OAGG;IACH,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,CAAC;QAAE,OAAO,EAAE,WAAW,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAiD9F;;;;OAIG;IACH,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;CASnC"}
+{"version":3,"file":"manager.d.ts","sourceRoot":"","sources":["../../../src/platform/sessions/manager.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,sCAAsC,CAAC;AACxF,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAIvE;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,uBAAuB,GAAG,SAAS,CAAC;IAClD,aAAa,CAAC,EAAE,2BAA2B,GAAG,SAAS,CAAC;CACzD;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,uBAAuB,GAAG,SAAS,CAAC;IAClD,aAAa,CAAC,EAAE,2BAA2B,GAAG,SAAS,CAAC;CACzD;AAED;;;;;;;GAOG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,WAAW,CAAS;gBAEhB,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE;IAM/H;;;OAGG;IACH,OAAO,CAAC,uBAAuB;IA0B/B;;;OAGG;IACH,OAAO,CAAC,YAAY;IAapB;;;;OAIG;IACH,IAAI,CACF,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAAE,EAClB,IAAI,EAAE,WAAW,EACjB,YAAY,CAAC,EAAE,WAAW,EAAE,GAC3B;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE;IAuC9C;;;OAGG;IACH,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG;QAAE,IAAI,EAAE,WAAW,CAAC;QAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;QAAC,YAAY,EAAE,WAAW,EAAE,CAAA;KAAE;IAuD1F;;OAEG;IACH,IAAI,IAAI,WAAW,EAAE;IA6FrB;;;OAGG;IACH,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI;IA+BzC;;;;;OAKG;IACH,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI;IAoB5C;;;OAGG;IACH,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAY1B;;;OAGG;IACH,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,CAAC;QAAE,OAAO,EAAE,WAAW,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAuD9F;;;;OAIG;IACH,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;CASnC"}