@phuetz/code-buddy 0.3.0 → 1.0.0-rc.8

package/dist/gateway/server.js

@@ -6,6 +6,7 @@
  */
 import { EventEmitter } from 'events';
 import { DEFAULT_GATEWAY_CONFIG } from './types.js';
+import { negotiateGatewayProtocol, buildHelloOkPayload, gatewayServerVersion, } from './protocol.js';
 // ============================================================================
 // Message Helpers
 // ============================================================================
@@ -124,6 +125,8 @@ export class GatewayServer extends EventEmitter {
     sessions = new SessionManager();
     handlers = new Map();
     running = false;
+    startedAt = null;
+    stateVersion = 0;
     pingInterval = null;
     constructor(config = {}) {
         super();
@@ -138,18 +141,104 @@ export class GatewayServer extends EventEmitter {
         this.registerHandler('ping', async (clientId, _message, send) => {
             send(createMessage('pong', { clientId }));
         });
+        // Connect handshake handler (must be first frame)
+        this.registerHandler('connect', async (clientId, message, send) => {
+            const payload = message.payload;
+            const client = this.clients.get(clientId);
+            // TLS local pairing skip (Native Engine v2026.3.11)
+            const clientIp = client?.metadata?.remoteAddress || '';
+            const isLocal = clientIp === '127.0.0.1' || clientIp === '::1' || clientIp === '';
+            const skipPairing = Boolean(this.config.tlsEnabled && this.config.skipLocalPairing && isLocal);
+            // Build hello-ok response with presence snapshot
+            const presence = Array.from(this.clients.values())
+                .filter(c => c.authenticated)
+                .map(c => ({
+                deviceId: c.metadata?.deviceId || c.id,
+                role: c.metadata?.role || 'control',
+                connectedAt: c.connectedAt,
+            }));
+            // Negotiate the protocol version against this gateway's supported range and
+            // advertise the registered handlers so clients can discover capabilities
+            // (OpenClaw `features.methods` / Hermes capability discovery).
+            const negotiation = negotiateGatewayProtocol({
+                protocolVersion: payload.protocolVersion,
+                ...(typeof payload.minProtocolVersion === 'number'
+                    ? { minProtocolVersion: payload.minProtocolVersion }
+                    : {}),
+                ...(typeof payload.maxProtocolVersion === 'number'
+                    ? { maxProtocolVersion: payload.maxProtocolVersion }
+                    : {}),
+            });
+            const helloOk = buildHelloOkPayload({
+                // Honest pairing: permissive unless requirePairing is on (then deferred to
+                // isPairedDevice), with the local-TLS skip preserved.
+                paired: skipPairing || this.isPairedDevice(payload.deviceId, client),
+                uptime: this.running ? Date.now() - (this.startedAt || Date.now()) : 0,
+                stateVersion: this.stateVersion,
+                presence,
+                health: { status: 'ok', checkedAt: Date.now() },
+                authRequired: this.config.authEnabled && this.config.authMode !== 'none',
+                negotiation,
+                serverVersion: gatewayServerVersion(),
+                connId: clientId,
+                methods: Array.from(this.handlers.keys()),
+            });
+            if (client) {
+                client.metadata = {
+                    ...client.metadata,
+                    deviceId: payload.deviceId,
+                    deviceName: payload.deviceName,
+                    role: payload.role,
+                    protocolVersion: negotiation.protocolVersion,
+                };
+            }
+            this.emit('client:connect', clientId);
+            send(createMessage('hello_ok', helloOk));
+        });
+        // Session patch handler (per-session config updates)
+        this.registerHandler('session_patch', async (clientId, message, send) => {
+            const payload = message.payload;
+            const session = this.sessions.getSession(payload.sessionKey);
+            if (!session) {
+                send(createErrorMessage('SESSION_NOT_FOUND', `Session ${payload.sessionKey} not found`));
+                return;
+            }
+            session.metadata = { ...session.metadata, ...payload.patch };
+            send(createMessage('session_info', {
+                sessionId: payload.sessionKey,
+                status: 'patched',
+                metadata: session.metadata,
+            }, payload.sessionKey));
+        });
+        // Presence handler
+        this.registerHandler('presence', async (clientId, message, _send) => {
+            const payload = message.payload;
+            // Broadcast presence to all clients in the session
+            this.emit('presence', { clientId, ...payload });
+        });
         // Auth handler
         this.registerHandler('auth', async (clientId, message, send) => {
             const payload = message.payload;
-            if (this.config.authEnabled && !payload.token) {
-                send(createErrorMessage('AUTH_REQUIRED', 'Authentication token required'));
-                return;
+            if (!this.config.authEnabled || this.config.authMode === 'none') {
+                // Auth disabled — auto-approve
             }
-            // Validate token (implement your own validation)
-            const isValid = await this.validateToken(payload.token);
-            if (!isValid) {
-                send(createErrorMessage('AUTH_FAILED', 'Invalid authentication token'));
-                return;
+            else if (this.config.authMode === 'password') {
+                if (!payload.password || payload.password !== this.config.authPassword) {
+                    send(createErrorMessage('AUTH_FAILED', 'Invalid password'));
+                    return;
+                }
+            }
+            else {
+                // Token auth (default)
+                if (!payload.token) {
+                    send(createErrorMessage('AUTH_REQUIRED', 'Authentication token required'));
+                    return;
+                }
+                const isValid = await this.validateToken(payload.token);
+                if (!isValid) {
+                    send(createErrorMessage('AUTH_FAILED', 'Invalid authentication token'));
+                    return;
+                }
             }
             // Update client state
             const client = this.clients.get(clientId);
@@ -221,6 +310,16 @@ export class GatewayServer extends EventEmitter {
         // Implement your own validation logic
         return true;
     }
+    /**
+     * Whether a device is considered paired for the `hello_ok` response.
+     *
+     * Default: permissive — every device is paired unless `requirePairing` is on.
+     * Override (or pair a `requirePairing` gateway with a device registry) to
+     * enforce OpenClaw/Hermes-style pairing approval (pending -> approve -> token).
+     */
+    isPairedDevice(_deviceId, _client) {
+        return !this.config.requirePairing;
+    }
     /**
      * Register a message handler
      */
@@ -339,6 +438,17 @@ export class GatewayServer extends EventEmitter {
             this.pingInterval = null;
         }
     }
+    /**
+     * Resolve the bind address from the bind mode config.
+     */
+    getBindAddress() {
+        switch (this.config.bind) {
+            case 'loopback': return '127.0.0.1';
+            case 'all': return '0.0.0.0';
+            case 'tailscale': return '127.0.0.1'; // Tailscale Serve handles exposure
+            default: return this.config.host;
+        }
+    }
     /**
      * Start the server
      * Override in transport-specific subclass
@@ -347,6 +457,7 @@ export class GatewayServer extends EventEmitter {
         if (this.running)
             return;
         this.running = true;
+        this.startedAt = Date.now();
         this.startPingInterval();
     }
     /**

package/dist/gateway/server.js.map

@@ -1 +1 @@
-{"version":3,"file":"server.js","sourceRoot":"","sources":["../../src/gateway/server.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAWtC,OAAO,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAEpD,+EAA+E;AAC/E,kBAAkB;AAClB,+EAA+E;AAE/E,IAAI,gBAAgB,GAAG,CAAC,CAAC;AAEzB;;GAEG;AACH,MAAM,UAAU,aAAa,CAC3B,IAAwB,EACxB,OAAU,EACV,SAAkB;IAElB,OAAO;QACL,IAAI;QACJ,EAAE,EAAE,OAAO,EAAE,gBAAgB,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE;QAC7C,SAAS;QACT,OAAO;QACP,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;KACtB,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAChC,IAAY,EACZ,OAAe,EACf,OAAiC;IAEjC,OAAO,aAAa,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;AAC5D,CAAC;AAED,+EAA+E;AAC/E,0BAA0B;AAC1B,+EAA+E;AAE/E;;GAEG;AACH,MAAM,OAAO,cAAc;IACjB,QAAQ,GAMX,IAAI,GAAG,EAAE,CAAC;IAEf;;OAEG;IACH,aAAa,CACX,SAAiB,EACjB,UAAiE,EAAE;QAEnE,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YACjC,OAAO;QACT,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE;YAC3B,EAAE,EAAE,SAAS;YACb,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,OAAO,EAAE,IAAI,GAAG,EAAE;YAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ;SAC3B,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,SAAiB;QAC1B,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,SAAiB;QAC1B,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,SAAiB,EAAE,QAAgB;QAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QAC3B,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC9B,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,SAAiB,EAAE,QAAgB;QAC9C,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QAC3B,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC1C,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,SAAiB;QAC1B,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,OAAO,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACpD,CAAC;IAED;;OAEG;IACH,OAAO;QACL,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,KAAK,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACjD,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBAC/B,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBAChC,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACH,cAAc;QACZ,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAC5C,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;CACF;AAeD;;GAEG;AACH,MAAM,OAAO,aAAc,SAAQ,YAAY;IACnC,MAAM,CAAgB;IACtB,OAAO,GAA6B,IAAI,GAAG,EAAE,CAAC;IAC9C,QAAQ,GAAmB,IAAI,cAAc,EAAE,CAAC;IAChD,QAAQ,GAA4C,IAAI,GAAG,EAAE,CAAC;IAC9D,OAAO,GAAG,KAAK,CAAC;IAClB,YAAY,GAA0B,IAAI,CAAC;IAEnD,YAAY,SAAiC,EAAE;QAC7C,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,sBAAsB,EAAE,GAAG,MAAM,EAAE,CAAC;QACvD,IAAI,CAAC,oBAAoB,EAAE,CAAC;IAC9B,CAAC;IAED;;OAEG;IACK,oBAAoB;QAC1B,eAAe;QACf,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE;YAC9D,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;QAEH,eAAe;QACf,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;YAC7D,MAAM,OAAO,GAAG,OAAO,CAAC,OAAsB,CAAC;YAE/C,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;gBAC9C,IAAI,CAAC,kBAAkB,CAAC,eAAe,EAAE,+BAA+B,CAAC,CAAC,CAAC;gBAC3E,OAAO;YACT,CAAC;YAED,iDAAiD;YACjD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAExD,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,IAAI,CAAC,kBAAkB,CAAC,aAAa,EAAE,8BAA8B,CAAC,CAAC,CAAC;gBACxE,OAAO;YACT,CAAC;YAED,sBAAsB;YACtB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC1C,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,CAAC,aAAa,GAAG,IAAI,CAAC;gBAC5B,MAAM,CAAC,MAAM,GAAG,OAAO,CAAC,QAAQ,IAAI,WAAW,CAAC;gBAChD,MAAM,CAAC,QAAQ,GAAG,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC;YACvD,CAAC;YAED,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;YACnD,IAAI,CAAC,aAAa,CAAC,cAAc,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;QAC5E,CAAC,CAAC,CAAC;QAEH,mBAAmB;QACnB,IAAI,CAAC,eAAe,CAAC,gBAAgB,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;YACvE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAyB,CAAC;YAClD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,WAAW,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YAE/D,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,SAAS,EAAE;gBACrC,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ;aAC3B,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YAE7C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC1C,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACjC,CAAC;YAED,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;YACjD,IAAI,CAAC,aAAa,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC;QACnF,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,eAAe,CAAC,cAAc,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;YACrE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAyB,CAAC;YAClD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;YAEpC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBACzC,IAAI,CAAC,kBAAkB,CAAC,mBAAmB,EAAE,WAAW,SAAS,YAAY,CAAC,CAAC,CAAC;gBAChF,OAAO;YACT,CAAC;YAED,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;YACpD,IAAI,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,oBAAoB,EAAE,CAAC;gBACvD,IAAI,CAAC,kBAAkB,CAAC,cAAc,EAAE,qCAAqC,CAAC,CAAC,CAAC;gBAChF,OAAO;YACT,CAAC;YAED,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YAE7C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC1C,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACjC,CAAC;YAED,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;YAC/C,IAAI,CAAC,aAAa,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC;QAClF,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,eAAe,CAAC,eAAe,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;YACtE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAyB,CAAC;YAClD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;YAEpC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YAEhD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC1C,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACpC,CAAC;YAED,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;YAChD,IAAI,CAAC,aAAa,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC;QAChF,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACO,KAAK,CAAC,aAAa,CAAC,MAAc;QAC1C,mDAAmD;QACnD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YAC7B,OAAO,IAAI,CAAC;QACd,CAAC;QACD,sCAAsC;QACtC,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,IAAwB,EAAE,OAAuB;QAC/D,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACnC,CAAC;IAED;;OAEG;IACH,iBAAiB,CAAC,IAAwB;QACxC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IAED;;OAEG;IACO,SAAS,CAAC,QAAgB;QAClC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE;YACzB,EAAE,EAAE,QAAQ;YACZ,aAAa,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW;YACvC,QAAQ,EAAE,IAAI,GAAG,EAAE;YACnB,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE;YACvB,cAAc,EAAE,IAAI,CAAC,GAAG,EAAE;SAC3B,CAAC,CAAC;QAEH,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC;IACxC,CAAC;IAED;;OAEG;IACO,YAAY,CAAC,QAAgB;QACrC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAE1C,IAAI,MAAM,EAAE,CAAC;YACX,2BAA2B;YAC3B,KAAK,MAAM,SAAS,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACxC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;gBAChD,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC9B,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,QAAQ,CAAC,CAAC;IAC3C,CAAC;IAED;;OAEG;IACO,KAAK,CAAC,SAAS,CACvB,QAAgB,EAChB,OAAuB,EACvB,IAAmC;QAEnC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAE1C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,IAAI,CAAC,kBAAkB,CAAC,kBAAkB,EAAE,uBAAuB,CAAC,CAAC,CAAC;YACtE,OAAO;QACT,CAAC;QAED,kBAAkB;QAClB,MAAM,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEnC,6CAA6C;QAC7C,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;YAChF,IAAI,CAAC,kBAAkB,CAAC,eAAe,EAAE,yBAAyB,CAAC,CAAC,CAAC;YACrE,OAAO;QACT,CAAC;QAED,2BAA2B;QAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAEhD,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;YACzC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAc,CAAC,CAAC;gBAC7C,IAAI,CAAC,kBAAkB,CACrB,eAAe,EACf,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CACzD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;aAAM,CAAC;YACN,gCAAgC;YAChC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;IAED;;OAEG;IACH,kBAAkB,CAChB,SAAiB,EACjB,OAAuB,EACvB,gBAAyB;QAEzB,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAEpD,KAAK,MAAM,QAAQ,IAAI,OAAO,EAAE,CAAC;YAC/B,IAAI,QAAQ,KAAK,gBAAgB,EAAE,CAAC;gBAClC,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACvC,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;OAGG;IACO,YAAY,CAAC,SAAiB,EAAE,QAAwB;QAChE,mDAAmD;QACnD,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IAED;;OAEG;IACO,iBAAiB;QACzB,IAAI,IAAI,CAAC,YAAY;YAAE,OAAO;QAE9B,IAAI,CAAC,YAAY,GAAG,WAAW,CAAC,GAAG,EAAE;YACnC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAEvB,KAAK,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBAC9C,6BAA6B;gBAC7B,IAAI,GAAG,GAAG,MAAM,CAAC,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;oBAClE,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;gBAC9B,CAAC;YACH,CAAC;YAED,yBAAyB;YACzB,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QAC1B,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IACjC,CAAC;IAED;;OAEG;IACO,gBAAgB;QACxB,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACjC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QAC3B,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,iBAAiB,EAAE,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO;QAC1B,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QACrB,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACxB,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrB,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;IAED;;OAEG;IACH,SAAS;QACP,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED;;OAEG;IACH,cAAc;QACZ,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,eAAe;QACb,OAAO,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC,MAAM,CAAC;IAC/C,CAAC;IAED;;OAEG;IACH,QAAQ;QAMN,IAAI,oBAAoB,GAAG,CAAC,CAAC;QAC7B,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YAC3C,IAAI,MAAM,CAAC,aAAa;gBAAE,oBAAoB,EAAE,CAAC;QACnD,CAAC;QAED,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI;YAC1B,QAAQ,EAAE,IAAI,CAAC,eAAe,EAAE;YAChC,oBAAoB;SACrB,CAAC;IACJ,CAAC;CACF;AAED,+EAA+E;AAC/E,YAAY;AACZ,+EAA+E;AAE/E,IAAI,eAAe,GAAyB,IAAI,CAAC;AAEjD;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAA+B;IAC9D,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,eAAe,GAAG,IAAI,aAAa,CAAC,MAAM,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,eAAe,CAAC;AACzB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB;IACtC,IAAI,eAAe,EAAE,CAAC;QACpB,MAAM,eAAe,CAAC,IAAI,EAAE,CAAC;QAC7B,eAAe,GAAG,IAAI,CAAC;IACzB,CAAC;AACH,CAAC"}
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../src/gateway/server.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAetC,OAAO,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AACpD,OAAO,EACL,wBAAwB,EACxB,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,eAAe,CAAC;AAEvB,+EAA+E;AAC/E,kBAAkB;AAClB,+EAA+E;AAE/E,IAAI,gBAAgB,GAAG,CAAC,CAAC;AAEzB;;GAEG;AACH,MAAM,UAAU,aAAa,CAC3B,IAAwB,EACxB,OAAU,EACV,SAAkB;IAElB,OAAO;QACL,IAAI;QACJ,EAAE,EAAE,OAAO,EAAE,gBAAgB,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE;QAC7C,SAAS;QACT,OAAO;QACP,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;KACtB,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAChC,IAAY,EACZ,OAAe,EACf,OAAiC;IAEjC,OAAO,aAAa,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;AAC5D,CAAC;AAED,+EAA+E;AAC/E,0BAA0B;AAC1B,+EAA+E;AAE/E;;GAEG;AACH,MAAM,OAAO,cAAc;IACjB,QAAQ,GAMX,IAAI,GAAG,EAAE,CAAC;IAEf;;OAEG;IACH,aAAa,CACX,SAAiB,EACjB,UAAiE,EAAE;QAEnE,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YACjC,OAAO;QACT,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE;YAC3B,EAAE,EAAE,SAAS;YACb,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,OAAO,EAAE,IAAI,GAAG,EAAE;YAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ;SAC3B,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,SAAiB;QAC1B,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,SAAiB;QAC1B,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,SAAiB,EAAE,QAAgB;QAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QAC3B,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC9B,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,SAAiB,EAAE,QAAgB;QAC9C,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QAC3B,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC1C,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,SAAiB;QAC1B,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,OAAO,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACpD,CAAC;IAED;;OAEG;IACH,OAAO;QACL,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,KAAK,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACjD,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBAC/B,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBAChC,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACH,cAAc;QACZ,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAC5C,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;CACF;AAeD;;GAEG;AACH,MAAM,OAAO,aAAc,SAAQ,YAAY;IACnC,MAAM,CAAgB;IACtB,OAAO,GAA6B,IAAI,GAAG,EAAE,CAAC;IAC9C,QAAQ,GAAmB,IAAI,cAAc,EAAE,CAAC;IAChD,QAAQ,GAA4C,IAAI,GAAG,EAAE,CAAC;IAC9D,OAAO,GAAG,KAAK,CAAC;IAChB,SAAS,GAAkB,IAAI,CAAC;IAChC,YAAY,GAAG,CAAC,CAAC;IACnB,YAAY,GAA0B,IAAI,CAAC;IAEnD,YAAY,SAAiC,EAAE;QAC7C,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,sBAAsB,EAAE,GAAG,MAAM,EAAE,CAAC;QACvD,IAAI,CAAC,oBAAoB,EAAE,CAAC;IAC9B,CAAC;IAED;;OAEG;IACK,oBAAoB;QAC1B,eAAe;QACf,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE;YAC9D,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;QAEH,kDAAkD;QAClD,IAAI,CAAC,eAAe,CAAC,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;YAChE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAyB,CAAC;YAClD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAE1C,oDAAoD;YACpD,MAAM,QAAQ,GAAG,MAAM,EAAE,QAAQ,EAAE,aAAuB,IAAI,EAAE,CAAC;YACjE,MAAM,OAAO,GAAG,QAAQ,KAAK,WAAW,IAAI,QAAQ,KAAK,KAAK,IAAI,QAAQ,KAAK,EAAE,CAAC;YAClF,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,IAAI,CAAC,MAAM,CAAC,gBAAgB,IAAI,OAAO,CAAC,CAAC;YAE/F,iDAAiD;YACjD,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;iBAC/C,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC;iBAC5B,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACT,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,QAAkB,IAAI,CAAC,CAAC,EAAE;gBAChD,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,IAAc,IAAI,SAAS;gBAC7C,WAAW,EAAE,CAAC,CAAC,WAAW;aAC3B,CAAC,CAAC,CAAC;YAEN,4EAA4E;YAC5E,yEAAyE;YACzE,+DAA+D;YAC/D,MAAM,WAAW,GAAG,wBAAwB,CAAC;gBAC3C,eAAe,EAAE,OAAO,CAAC,eAAe;gBACxC,GAAG,CAAC,OAAO,OAAO,CAAC,kBAAkB,KAAK,QAAQ;oBAChD,CAAC,CAAC,EAAE,kBAAkB,EAAE,OAAO,CAAC,kBAAkB,EAAE;oBACpD,CAAC,CAAC,EAAE,CAAC;gBACP,GAAG,CAAC,OAAO,OAAO,CAAC,kBAAkB,KAAK,QAAQ;oBAChD,CAAC,CAAC,EAAE,kBAAkB,EAAE,OAAO,CAAC,kBAAkB,EAAE;oBACpD,CAAC,CAAC,EAAE,CAAC;aACR,CAAC,CAAC;YAEH,MAAM,OAAO,GAAmB,mBAAmB,CAAC;gBAClD,2EAA2E;gBAC3E,sDAAsD;gBACtD,MAAM,EAAE,WAAW,IAAI,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC;gBACpE,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;gBACtE,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,QAAQ;gBACR,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE;gBAC/C,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,KAAK,MAAM;gBACxE,WAAW;gBACX,aAAa,EAAE,oBAAoB,EAAE;gBACrC,MAAM,EAAE,QAAQ;gBAChB,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;aAC1C,CAAC,CAAC;YAEH,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,CAAC,QAAQ,GAAG;oBAChB,GAAG,MAAM,CAAC,QAAQ;oBAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ;oBAC1B,UAAU,EAAE,OAAO,CAAC,UAAU;oBAC9B,IAAI,EAAE,OAAO,CAAC,IAAI;oBAClB,eAAe,EAAE,WAAW,CAAC,eAAe;iBAC7C,CAAC;YACJ,CAAC;YAED,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC;YACtC,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;QAC3C,CAAC,CAAC,CAAC;QAEH,qDAAqD;QACrD,IAAI,CAAC,eAAe,CAAC,eAAe,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;YACtE,MAAM,OAAO,GAAG,OAAO,CAAC,OAA8B,CAAC;YACvD,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YAC7D,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,IAAI,CAAC,kBAAkB,CAAC,mBAAmB,EAAE,WAAW,OAAO,CAAC,UAAU,YAAY,CAAC,CAAC,CAAC;gBACzF,OAAO;YACT,CAAC;YACD,OAAO,CAAC,QAAQ,GAAG,EAAE,GAAG,OAAO,CAAC,QAAQ,EAAE,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC;YAC7D,IAAI,CAAC,aAAa,CAAC,cAAc,EAAE;gBACjC,SAAS,EAAE,OAAO,CAAC,UAAU;gBAC7B,MAAM,EAAE,SAAS;gBACjB,QAAQ,EAAE,OAAO,CAAC,QAAQ;aAC3B,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;QAC1B,CAAC,CAAC,CAAC;QAEH,mBAAmB;QACnB,IAAI,CAAC,eAAe,CAAC,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;YAClE,MAAM,OAAO,GAAG,OAAO,CAAC,OAA0B,CAAC;YACnD,mDAAmD;YACnD,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,QAAQ,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;QAClD,CAAC,CAAC,CAAC;QAEH,eAAe;QACf,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;YAC7D,MAAM,OAAO,GAAG,OAAO,CAAC,OAAsB,CAAC;YAE/C,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;gBAChE,+BAA+B;YACjC,CAAC;iBAAM,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;gBAC/C,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,KAAK,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;oBACvE,IAAI,CAAC,kBAAkB,CAAC,aAAa,EAAE,kBAAkB,CAAC,CAAC,CAAC;oBAC5D,OAAO;gBACT,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,uBAAuB;gBACvB,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;oBACnB,IAAI,CAAC,kBAAkB,CAAC,eAAe,EAAE,+BAA+B,CAAC,CAAC,CAAC;oBAC3E,OAAO;gBACT,CAAC;gBACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBACxD,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,IAAI,CAAC,kBAAkB,CAAC,aAAa,EAAE,8BAA8B,CAAC,CAAC,CAAC;oBACxE,OAAO;gBACT,CAAC;YACH,CAAC;YAED,sBAAsB;YACtB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC1C,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,CAAC,aAAa,GAAG,IAAI,CAAC;gBAC5B,MAAM,CAAC,MAAM,GAAG,OAAO,CAAC,QAAQ,IAAI,WAAW,CAAC;gBAChD,MAAM,CAAC,QAAQ,GAAG,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC;YACvD,CAAC;YAED,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;YACnD,IAAI,CAAC,aAAa,CAAC,cAAc,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;QAC5E,CAAC,CAAC,CAAC;QAEH,mBAAmB;QACnB,IAAI,CAAC,eAAe,CAAC,gBAAgB,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;YACvE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAyB,CAAC;YAClD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,WAAW,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YAE/D,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,SAAS,EAAE;gBACrC,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ;aAC3B,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YAE7C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC1C,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACjC,CAAC;YAED,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;YACjD,IAAI,CAAC,aAAa,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC;QACnF,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,eAAe,CAAC,cAAc,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;YACrE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAyB,CAAC;YAClD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;YAEpC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBACzC,IAAI,CAAC,kBAAkB,CAAC,mBAAmB,EAAE,WAAW,SAAS,YAAY,CAAC,CAAC,CAAC;gBAChF,OAAO;YACT,CAAC;YAED,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;YACpD,IAAI,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,oBAAoB,EAAE,CAAC;gBACvD,IAAI,CAAC,kBAAkB,CAAC,cAAc,EAAE,qCAAqC,CAAC,CAAC,CAAC;gBAChF,OAAO;YACT,CAAC;YAED,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YAE7C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC1C,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACjC,CAAC;YAED,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;YAC/C,IAAI,CAAC,aAAa,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC;QAClF,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,eAAe,CAAC,eAAe,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;YACtE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAyB,CAAC;YAClD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;YAEpC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YAEhD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC1C,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACpC,CAAC;YAED,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;YAChD,IAAI,CAAC,aAAa,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC;QAChF,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACO,KAAK,CAAC,aAAa,CAAC,MAAc;QAC1C,mDAAmD;QACnD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YAC7B,OAAO,IAAI,CAAC;QACd,CAAC;QACD,sCAAsC;QACtC,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;OAMG;IACO,cAAc,CAAC,SAAiB,EAAE,OAAqB;QAC/D,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC;IACrC,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,IAAwB,EAAE,OAAuB;QAC/D,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACnC,CAAC;IAED;;OAEG;IACH,iBAAiB,CAAC,IAAwB;QACxC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IAED;;OAEG;IACO,SAAS,CAAC,QAAgB;QAClC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE;YACzB,EAAE,EAAE,QAAQ;YACZ,aAAa,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW;YACvC,QAAQ,EAAE,IAAI,GAAG,EAAE;YACnB,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE;YACvB,cAAc,EAAE,IAAI,CAAC,GAAG,EAAE;SAC3B,CAAC,CAAC;QAEH,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC;IACxC,CAAC;IAED;;OAEG;IACO,YAAY,CAAC,QAAgB;QACrC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAE1C,IAAI,MAAM,EAAE,CAAC;YACX,2BAA2B;YAC3B,KAAK,MAAM,SAAS,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACxC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;gBAChD,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC9B,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,QAAQ,CAAC,CAAC;IAC3C,CAAC;IAED;;OAEG;IACO,KAAK,CAAC,SAAS,CACvB,QAAgB,EAChB,OAAuB,EACvB,IAAmC;QAEnC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAE1C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,IAAI,CAAC,kBAAkB,CAAC,kBAAkB,EAAE,uBAAuB,CAAC,CAAC,CAAC;YACtE,OAAO;QACT,CAAC;QAED,kBAAkB;QAClB,MAAM,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEnC,6CAA6C;QAC7C,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;YAChF,IAAI,CAAC,kBAAkB,CAAC,eAAe,EAAE,yBAAyB,CAAC,CAAC,CAAC;YACrE,OAAO;QACT,CAAC;QAED,2BAA2B;QAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAEhD,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;YACzC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAc,CAAC,CAAC;gBAC7C,IAAI,CAAC,kBAAkB,CACrB,eAAe,EACf,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CACzD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;aAAM,CAAC;YACN,gCAAgC;YAChC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;IAED;;OAEG;IACH,kBAAkB,CAChB,SAAiB,EACjB,OAAuB,EACvB,gBAAyB;QAEzB,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAEpD,KAAK,MAAM,QAAQ,IAAI,OAAO,EAAE,CAAC;YAC/B,IAAI,QAAQ,KAAK,gBAAgB,EAAE,CAAC;gBAClC,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACvC,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;OAGG;IACO,YAAY,CAAC,SAAiB,EAAE,QAAwB;QAChE,mDAAmD;QACnD,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IAED;;OAEG;IACO,iBAAiB;QACzB,IAAI,IAAI,CAAC,YAAY;YAAE,OAAO;QAE9B,IAAI,CAAC,YAAY,GAAG,WAAW,CAAC,GAAG,EAAE;YACnC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAEvB,KAAK,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBAC9C,6BAA6B;gBAC7B,IAAI,GAAG,GAAG,MAAM,CAAC,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;oBAClE,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;gBAC9B,CAAC;YACH,CAAC;YAED,yBAAyB;YACzB,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QAC1B,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IACjC,CAAC;IAED;;OAEG;IACO,gBAAgB;QACxB,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACjC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QAC3B,CAAC;IACH,CAAC;IAED;;OAEG;IACH,cAAc;QACZ,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACzB,KAAK,UAAU,CAAC,CAAC,OAAO,WAAW,CAAC;YACpC,KAAK,KAAK,CAAC,CAAC,OAAO,SAAS,CAAC;YAC7B,KAAK,WAAW,CAAC,CAAC,OAAO,WAAW,CAAC,CAAC,mCAAmC;YACzE,OAAO,CAAC,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;QACnC,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC5B,IAAI,CAAC,iBAAiB,EAAE,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO;QAC1B,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QACrB,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACxB,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrB,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;IAED;;OAEG;IACH,SAAS;QACP,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED;;OAEG;IACH,cAAc;QACZ,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,eAAe;QACb,OAAO,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC,MAAM,CAAC;IAC/C,CAAC;IAED;;OAEG;IACH,QAAQ;QAMN,IAAI,oBAAoB,GAAG,CAAC,CAAC;QAC7B,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YAC3C,IAAI,MAAM,CAAC,aAAa;gBAAE,oBAAoB,EAAE,CAAC;QACnD,CAAC;QAED,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI;YAC1B,QAAQ,EAAE,IAAI,CAAC,eAAe,EAAE;YAChC,oBAAoB;SACrB,CAAC;IACJ,CAAC;CACF;AAED,+EAA+E;AAC/E,YAAY;AACZ,+EAA+E;AAE/E,IAAI,eAAe,GAAyB,IAAI,CAAC;AAEjD;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAA+B;IAC9D,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,eAAe,GAAG,IAAI,aAAa,CAAC,MAAM,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,eAAe,CAAC;AACzB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB;IACtC,IAAI,eAAe,EAAE,CAAC;QACpB,MAAM,eAAe,CAAC,IAAI,EAAE,CAAC;QAC7B,eAAe,GAAG,IAAI,CAAC;IACzB,CAAC;AACH,CAAC"}

package/dist/gateway/types.d.ts

@@ -6,7 +6,7 @@
 /**
  * Gateway message types
  */
-export type GatewayMessageType = 'auth' | 'auth_success' | 'auth_error' | 'chat' | 'chat_stream' | 'chat_complete' | 'tool_start' | 'tool_update' | 'tool_result' | 'session_create' | 'session_join' | 'session_leave' | 'session_info' | 'ping' | 'pong' | 'error';
+export type GatewayMessageType = 'connect' | 'hello_ok' | 'auth' | 'auth_success' | 'auth_error' | 'chat' | 'chat_stream' | 'chat_complete' | 'tool_start' | 'tool_update' | 'tool_result' | 'session_create' | 'session_join' | 'session_leave' | 'session_info' | 'session_patch' | 'presence' | 'health' | 'ping' | 'pong' | 'error';
 /**
  * Base gateway message
  */
@@ -22,16 +22,99 @@ export interface GatewayMessage<T = unknown> {
     /** Timestamp */
     timestamp: number;
 }
+/**
+ * Connect handshake payload (first frame from client)
+ */
+export interface ConnectPayload {
+    /** Device identity (persistent across connections) */
+    deviceId: string;
+    /** Device name */
+    deviceName?: string;
+    /** Client role */
+    role: 'control' | 'node' | 'webchat';
+    /** Protocol version (preferred; legacy single-value field) */
+    protocolVersion: number;
+    /** Minimum protocol version the client accepts (enables range negotiation) */
+    minProtocolVersion?: number;
+    /** Maximum protocol version the client accepts (enables range negotiation) */
+    maxProtocolVersion?: number;
+    /** Challenge nonce response (for device verification) */
+    challengeResponse?: string;
+}
+/**
+ * Hello-OK payload (gateway response to connect)
+ */
+export interface HelloOkPayload {
+    /** Whether device is recognized/paired */
+    paired: boolean;
+    /** Challenge nonce for device verification */
+    challengeNonce?: string;
+    /** Gateway uptime in ms */
+    uptime: number;
+    /** State version for event sequencing */
+    stateVersion: number;
+    /** Presence snapshot */
+    presence: Array<{
+        deviceId: string;
+        role: string;
+        connectedAt: number;
+    }>;
+    /** Health snapshot */
+    health: {
+        status: 'ok' | 'degraded' | 'error';
+        checkedAt: number;
+    };
+    /** Whether auth is required after handshake */
+    authRequired: boolean;
+    /** Negotiated protocol version the gateway will speak on this connection */
+    protocolVersion: number;
+    /** Whether the client's requested protocol range overlapped the gateway's */
+    protocolCompatible: boolean;
+    /** Server identity (mirrors OpenClaw's server.{version,connId}) */
+    server: {
+        version: string;
+        connId: string;
+    };
+    /** Advertised capabilities for client-side discovery (method/handler names) */
+    capabilities: {
+        methods: string[];
+    };
+}
 /**
  * Authentication message payload
  */
 export interface AuthPayload {
     /** API key or JWT token */
     token: string;
+    /** Password (for password auth mode) */
+    password?: string;
     /** Client identifier */
     clientId?: string;
     /** Client type */
-    clientType?: 'terminal' | 'web' | 'ide' | 'api';
+    clientType?: 'terminal' | 'web' | 'ide' | 'api' | 'node';
+}
+/**
+ * Session patch payload (per-session config changes)
+ */
+export interface SessionPatchPayload {
+    sessionKey: string;
+    patch: {
+        thinkingLevel?: string;
+        verbose?: boolean;
+        model?: string;
+        elevated?: boolean;
+        activation?: 'mention' | 'always';
+        sendPolicy?: 'on' | 'off' | 'inherit';
+    };
+}
+/**
+ * Presence payload
+ */
+export interface PresencePayload {
+    deviceId: string;
+    status: 'online' | 'offline' | 'away' | 'typing';
+    sessionKey?: string;
+    timestamp: number;
 }
 /**
  * Chat message payload
@@ -119,6 +202,21 @@ export interface ClientState {
     /** Client metadata */
     metadata?: Record<string, unknown>;
 }
+/**
+ * Gateway authentication mode
+ */
+export type GatewayAuthMode = 'token' | 'password' | 'none';
+/**
+ * Gateway bind mode
+ */
+export type GatewayBindMode = 'loopback' | 'all' | 'tailscale';
+/**
+ * Tailscale gateway settings
+ */
+export interface GatewayTailscaleConfig {
+    mode: 'off' | 'serve' | 'funnel';
+    resetOnExit?: boolean;
+}
 /**
  * Gateway configuration
  */
@@ -127,8 +225,16 @@ export interface GatewayConfig {
     port: number;
     /** Server host */
     host: string;
+    /** Bind mode: loopback (127.0.0.1), all (0.0.0.0), or tailscale */
+    bind: GatewayBindMode;
     /** Enable authentication */
     authEnabled: boolean;
+    /** Authentication mode */
+    authMode: GatewayAuthMode;
+    /** Password for password auth mode */
+    authPassword?: string;
+    /** Tailscale integration config */
+    tailscale: GatewayTailscaleConfig;
     /** Ping interval in ms */
     pingIntervalMs: number;
     /** Connection timeout in ms */
@@ -137,6 +243,24 @@ export interface GatewayConfig {
     maxMessageSize: number;
     /** Maximum clients per session */
     maxClientsPerSession: number;
+    /** Enable TLS (Native Engine v2026.3.11) */
+    tlsEnabled?: boolean;
+    /** TLS certificate path */
+    tlsCert?: string;
+    /** TLS private key path */
+    tlsKey?: string;
+    /** TLS CA certificate path */
+    tlsCa?: string;
+    /** Skip device pairing for localhost TLS connections (Native Engine v2026.3.11) */
+    skipLocalPairing?: boolean;
+    /**
+     * Require devices to be paired before `hello_ok` reports `paired: true`.
+     * Default false keeps the permissive dev behaviour; enable with an
+     * `isPairedDevice` override for OpenClaw/Hermes-style pairing approval.
+     */
+    requirePairing?: boolean;
+    /** Trusted proxy IPs allowed to set x-forwarded-* headers (Native Engine v2026.3.14, GHSA-5wcw-8jjv-m286) */
+    trustedProxies?: string[];
 }
 /**
  * Default gateway configuration

package/dist/gateway/types.js

@@ -9,10 +9,15 @@
 export const DEFAULT_GATEWAY_CONFIG = {
     port: 3001,
     host: '0.0.0.0',
+    bind: 'loopback',
     authEnabled: true,
+    authMode: 'token',
+    tailscale: { mode: 'off' },
     pingIntervalMs: 30000,
     connectionTimeoutMs: 60000,
     maxMessageSize: 1024 * 1024, // 1MB
     maxClientsPerSession: 10,
+    tlsEnabled: false,
+    skipLocalPairing: false,
 };
 //# sourceMappingURL=types.js.map

package/dist/gateway/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/gateway/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAmKH;;GAEG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAkB;IACnD,IAAI,EAAE,IAAI;IACV,IAAI,EAAE,SAAS;IACf,WAAW,EAAE,IAAI;IACjB,cAAc,EAAE,KAAK;IACrB,mBAAmB,EAAE,KAAK;IAC1B,cAAc,EAAE,IAAI,GAAG,IAAI,EAAE,MAAM;IACnC,oBAAoB,EAAE,EAAE;CACzB,CAAC"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/gateway/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AA+RH;;GAEG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAkB;IACnD,IAAI,EAAE,IAAI;IACV,IAAI,EAAE,SAAS;IACf,IAAI,EAAE,UAAU;IAChB,WAAW,EAAE,IAAI;IACjB,QAAQ,EAAE,OAAO;IACjB,SAAS,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;IAC1B,cAAc,EAAE,KAAK;IACrB,mBAAmB,EAAE,KAAK;IAC1B,cAAc,EAAE,IAAI,GAAG,IAAI,EAAE,MAAM;IACnC,oBAAoB,EAAE,EAAE;IACxB,UAAU,EAAE,KAAK;IACjB,gBAAgB,EAAE,KAAK;CACxB,CAAC"}

package/dist/gateway/ws-transport.d.ts

@@ -4,7 +4,7 @@
  * Implements WebSocket-based transport for the Gateway server.
  * Provides real-time bidirectional communication for agents, tools, and sessions.
  *
- * Inspired by OpenClaw's WebSocket gateway (ws://127.0.0.1:18789)
+ * Advanced enterprise architecture for WebSocket gateway (ws://127.0.0.1:18789)
  */
 import WebSocket from 'ws';
 import { EventEmitter } from 'events';
@@ -43,7 +43,19 @@ interface WebSocketClient {
     isAlive: boolean;
     ip?: string;
     userAgent?: string;
+    /**
+     * Phase (d).8 — count of broadcast() / broadcastToSession() calls
+     * skipped for this client because socket.bufferedAmount exceeded the
+     * configured ceiling. Surfaced via getBroadcastDropStats(). Mirror of
+     * the per-client counter in src/server/websocket/handler.ts (Phase (d).7).
+     */
+    droppedMessages: number;
 }
+/**
+ * Check if an origin is allowed by a list of allowed origin patterns.
+ * Supports wildcard patterns like `http://localhost:*`.
+ */
+export declare function isOriginAllowed(origin: string, allowedOrigins: string[]): boolean;
 /**
  * WebSocket-based Gateway Server
  *
@@ -81,13 +93,66 @@ export declare class WebSocketGateway extends GatewayServer {
      */
     protected sendToClient(clientId: string, message: GatewayMessage): void;
     /**
-     * Broadcast to all connected clients
+     * Phase (d).8 — read the broadcast buffer ceiling. Env override resolved
+     * per call so tests can adjust without restarting the module. Shared
+     * env var with src/server/websocket/handler.ts (the other broadcast
+     * surface) — both protect against the same slow-consumer class of bug.
+     */
+    private getBroadcastBufferLimit;
+    /**
+     * Phase (d).8 — deliver one message to one client with backpressure
+     * protection. Returns true on send, false if skipped (closed socket
+     * OR slow consumer). Logs a debug line once per 100 drops/client to
+     * keep logs informative without spam under sustained backpressure.
+     *
+     * Inline check rather than refactoring sendToClient: the parent
+     * GatewayServer.sendToClient (server.ts:493) is `protected` with
+     * signature `(_clientId, _message): void`. Changing it to return a
+     * boolean would propagate to the base class, broaden the diff, and
+     * is unnecessary for unidirectional fan-out which is the only place
+     * backpressure matters here. Direct sendToClient calls in this class
+     * (session_info, errors) are 1:1 request/response and stay untouched.
+     */
+    private tryDeliverWithBackpressure;
+    /**
+     * Broadcast to all connected clients.
+     *
+     * Phase (d).8 — drop-on-overflow: clients whose ws.bufferedAmount has
+     * grown past WS_BROADCAST_BUFFER_LIMIT (default 2 MiB, env-overridable
+     * via CODEBUDDY_FLEET_BROADCAST_BUFFER_LIMIT) are skipped and their
+     * `droppedMessages` counter incremented. Other clients still receive.
+     * The optional `filter` short-circuits BEFORE the backpressure check,
+     * so a filtered-out client never counts as a drop.
      */
     broadcast(message: GatewayMessage, filter?: (client: WebSocketClient) => boolean): void;
     /**
-     * Broadcast to session (override with WebSocket-specific impl)
+     * Broadcast to session (override with WebSocket-specific impl).
+     *
+     * Phase (d).8 — same drop-on-overflow protection as broadcast().
      */
     broadcastToSession(sessionId: string, message: GatewayMessage, excludeClientId?: string): void;
+    /**
+     * Phase (d).8 — broadcast drop telemetry. Per-client + cross-client
+     * total. Surfaces operational visibility for slow-consumer pressure.
+     */
+    getBroadcastDropStats(): {
+        totalDropped: number;
+        perClient: Array<{
+            clientId: string;
+            dropped: number;
+        }>;
+    };
+    /**
+     * Test-only: register a pre-built client so unit tests can exercise
+     * broadcast() / broadcastToSession() / getBroadcastDropStats() without
+     * spinning up a real WS server. Pair with `_resetClientsForTests()`.
+     */
+    _registerClientForTests(client: WebSocketClient): void;
+    /**
+     * Test-only: clear the wsClients map without invoking close() on the
+     * held instances (some tests use stubs without a close method).
+     */
+    _resetClientsForTests(): void;
     /**
      * Start heartbeat interval
      */