@proofhound/core 0.1.6

package/dist/shared/health/health.service.js

@@ -0,0 +1,74 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HealthService = void 0;
+const common_1 = require("@nestjs/common");
+const drizzle_orm_1 = require("drizzle-orm");
+const database_constants_1 = require("../database/database.constants");
+const redis_constants_1 = require("../redis/redis.constants");
+const CHECK_TIMEOUT_MS = 1_000;
+let HealthService = class HealthService {
+    constructor(db, redis) {
+        this.db = db;
+        this.redis = redis;
+    }
+    liveness() {
+        return { status: 'ok' };
+    }
+    async readiness() {
+        const [database, redis] = await Promise.all([
+            this.checkDependency('database', () => this.db.execute((0, drizzle_orm_1.sql) `SELECT 1`)),
+            this.checkDependency('redis', () => this.redis.ping()),
+        ]);
+        return {
+            status: database.status === 'ok' && redis.status === 'ok' ? 'ok' : 'error',
+            checks: { database, redis },
+        };
+    }
+    async checkDependency(name, operation) {
+        const startedAt = Date.now();
+        try {
+            await withTimeout(operation(), CHECK_TIMEOUT_MS, name);
+            return { status: 'ok', latencyMs: Date.now() - startedAt };
+        }
+        catch (error) {
+            return {
+                status: 'error',
+                latencyMs: Date.now() - startedAt,
+                errorClass: error instanceof Error ? error.name : 'UnknownError',
+            };
+        }
+    }
+};
+exports.HealthService = HealthService;
+exports.HealthService = HealthService = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, common_1.Inject)(database_constants_1.DATABASE_CLIENT)),
+    __param(1, (0, common_1.Inject)(redis_constants_1.REDIS_CLIENT)),
+    __metadata("design:paramtypes", [Object, Function])
+], HealthService);
+async function withTimeout(promise, timeoutMs, name) {
+    let timer;
+    const timeout = new Promise((_resolve, reject) => {
+        timer = setTimeout(() => reject(new Error(`${name}_health_check_timeout`)), timeoutMs);
+    });
+    try {
+        return await Promise.race([promise, timeout]);
+    }
+    finally {
+        if (timer)
+            clearTimeout(timer);
+    }
+}
+//# sourceMappingURL=health.service.js.map

package/dist/shared/health/health.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"health.service.js","sourceRoot":"","sources":["../../../src/shared/health/health.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAoD;AAEpD,6CAAkC;AAElC,uEAAiE;AACjE,8DAAwD;AAExD,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAiBxB,IAAM,aAAa,GAAnB,MAAM,aAAa;IACxB,YAC4C,EAAY,EACf,KAAY;QADT,OAAE,GAAF,EAAE,CAAU;QACf,UAAK,GAAL,KAAK,CAAO;IAClD,CAAC;IAEJ,QAAQ;QACN,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,SAAS;QACb,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC1C,IAAI,CAAC,eAAe,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,IAAA,iBAAG,EAAA,UAAU,CAAC,CAAC;YACtE,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;SACvD,CAAC,CAAC;QAEH,OAAO;YACL,MAAM,EAAE,QAAQ,CAAC,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO;YAC1E,MAAM,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE;SAC5B,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,eAAe,CAAC,IAAe,EAAE,SAAiC;QAC9E,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,IAAI,CAAC;YACH,MAAM,WAAW,CAAC,SAAS,EAAE,EAAE,gBAAgB,EAAE,IAAI,CAAC,CAAC;YACvD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,CAAC;QAC7D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO;gBACL,MAAM,EAAE,OAAO;gBACf,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;gBACjC,UAAU,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc;aACjE,CAAC;QACJ,CAAC;IACH,CAAC;CACF,CAAA;AApCY,sCAAa;wBAAb,aAAa;IADzB,IAAA,mBAAU,GAAE;IAGR,WAAA,IAAA,eAAM,EAAC,oCAAe,CAAC,CAAA;IACvB,WAAA,IAAA,eAAM,EAAC,8BAAY,CAAC,CAAA;;GAHZ,aAAa,CAoCzB;AAED,KAAK,UAAU,WAAW,CAAI,OAAmB,EAAE,SAAiB,EAAE,IAAY;IAChF,IAAI,KAAgD,CAAC;IACrD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE;QACtD,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,IAAI,uBAAuB,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IACzF,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IAChD,CAAC;YAAS,CAAC;QACT,IAAI,KAAK;YAAE,YAAY,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;AACH,CAAC"}

package/dist/shared/llm/runtime-limits.d.ts

@@ -0,0 +1,4 @@
+import type { ModelInvocationConfig } from '@proofhound/llm-client';
+import type { RuntimeLimits } from '@proofhound/orchestration-shared';
+export declare function applyRuntimeLimits(model: ModelInvocationConfig, limits: RuntimeLimits | undefined): ModelInvocationConfig;
+//# sourceMappingURL=runtime-limits.d.ts.map

package/dist/shared/llm/runtime-limits.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-limits.d.ts","sourceRoot":"","sources":["../../../src/shared/llm/runtime-limits.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AACpE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAC;AAEtE,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,qBAAqB,EAC5B,MAAM,EAAE,aAAa,GAAG,SAAS,GAChC,qBAAqB,CAWvB"}

package/dist/shared/llm/runtime-limits.js

@@ -0,0 +1,23 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.applyRuntimeLimits = applyRuntimeLimits;
+function applyRuntimeLimits(model, limits) {
+    if (!limits)
+        return model;
+    return {
+        ...model,
+        rpmLimit: mergeTokenBucketLimit(model.rpmLimit, limits.rpmLimit),
+        tpmLimit: mergeTokenBucketLimit(model.tpmLimit, limits.tpmLimit),
+        concurrencyLimit: typeof limits.concurrency === 'number'
+            ? Math.min(model.concurrencyLimit, limits.concurrency)
+            : model.concurrencyLimit,
+    };
+}
+function mergeTokenBucketLimit(modelLimit, runtimeLimit) {
+    if (typeof runtimeLimit !== 'number' || runtimeLimit <= 0)
+        return modelLimit;
+    if (modelLimit <= 0)
+        return runtimeLimit;
+    return Math.min(modelLimit, runtimeLimit);
+}
+//# sourceMappingURL=runtime-limits.js.map

package/dist/shared/llm/runtime-limits.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-limits.js","sourceRoot":"","sources":["../../../src/shared/llm/runtime-limits.ts"],"names":[],"mappings":";;AAGA,gDAcC;AAdD,SAAgB,kBAAkB,CAChC,KAA4B,EAC5B,MAAiC;IAEjC,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1B,OAAO;QACL,GAAG,KAAK;QACR,QAAQ,EAAE,qBAAqB,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC;QAChE,QAAQ,EAAE,qBAAqB,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC;QAChE,gBAAgB,EACd,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ;YACpC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,gBAAgB,EAAE,MAAM,CAAC,WAAW,CAAC;YACtD,CAAC,CAAC,KAAK,CAAC,gBAAgB;KAC7B,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAAC,UAAkB,EAAE,YAAgC;IACjF,IAAI,OAAO,YAAY,KAAK,QAAQ,IAAI,YAAY,IAAI,CAAC;QAAE,OAAO,UAAU,CAAC;IAC7E,IAAI,UAAU,IAAI,CAAC;QAAE,OAAO,YAAY,CAAC;IACzC,OAAO,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;AAC5C,CAAC"}

package/dist/shared/redis/redis-mutex.service.d.ts

@@ -0,0 +1,20 @@
+import type Redis from 'ioredis';
+export interface RedisMutexAcquireInput {
+    key: string;
+    ttlMs: number;
+}
+export declare class RedisMutexLease {
+    private readonly redis;
+    readonly key: string;
+    readonly token: string;
+    readonly ttlMs: number;
+    constructor(redis: Redis, key: string, token: string, ttlMs: number);
+    renew(): Promise<boolean>;
+    release(): Promise<boolean>;
+}
+export declare class RedisMutexService {
+    private readonly redis;
+    constructor(redis: Redis);
+    acquire(input: RedisMutexAcquireInput): Promise<RedisMutexLease | null>;
+}
+//# sourceMappingURL=redis-mutex.service.d.ts.map

package/dist/shared/redis/redis-mutex.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redis-mutex.service.d.ts","sourceRoot":"","sources":["../../../src/shared/redis/redis-mutex.service.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,KAAK,MAAM,SAAS,CAAC;AAiBjC,MAAM,WAAW,sBAAsB;IACrC,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;CACf;AAED,qBAAa,eAAe;IAExB,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM;gBAHL,KAAK,EAAE,KAAK,EACpB,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM;IAGlB,KAAK,IAAI,OAAO,CAAC,OAAO,CAAC;IAKzB,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC;CAIlC;AAED,qBACa,iBAAiB;IACM,OAAO,CAAC,QAAQ,CAAC,KAAK;gBAAL,KAAK,EAAE,KAAK;IAEzD,OAAO,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;CAW9E"}

package/dist/shared/redis/redis-mutex.service.js

@@ -0,0 +1,75 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RedisMutexService = exports.RedisMutexLease = void 0;
+const node_crypto_1 = require("node:crypto");
+const common_1 = require("@nestjs/common");
+const redis_constants_1 = require("./redis.constants");
+const RELEASE_IF_OWNER_SCRIPT = `
+if redis.call('GET', KEYS[1]) == ARGV[1] then
+  return redis.call('DEL', KEYS[1])
+end
+return 0
+`;
+const RENEW_IF_OWNER_SCRIPT = `
+if redis.call('GET', KEYS[1]) == ARGV[1] then
+  return redis.call('PEXPIRE', KEYS[1], ARGV[2])
+end
+return 0
+`;
+class RedisMutexLease {
+    constructor(redis, key, token, ttlMs) {
+        this.redis = redis;
+        this.key = key;
+        this.token = token;
+        this.ttlMs = ttlMs;
+    }
+    async renew() {
+        const result = await this.redis.eval(RENEW_IF_OWNER_SCRIPT, 1, this.key, this.token, this.ttlMs);
+        return isRedisTruthy(result);
+    }
+    async release() {
+        const result = await this.redis.eval(RELEASE_IF_OWNER_SCRIPT, 1, this.key, this.token);
+        return isRedisTruthy(result);
+    }
+}
+exports.RedisMutexLease = RedisMutexLease;
+let RedisMutexService = class RedisMutexService {
+    constructor(redis) {
+        this.redis = redis;
+    }
+    async acquire(input) {
+        const key = input.key.trim();
+        const ttlMs = Math.floor(input.ttlMs);
+        if (key.length === 0)
+            throw new Error('redis_mutex_key_required');
+        if (!Number.isFinite(ttlMs) || ttlMs <= 0)
+            throw new Error('redis_mutex_invalid_ttl');
+        const token = (0, node_crypto_1.randomUUID)();
+        const result = await this.redis.set(key, token, 'PX', ttlMs, 'NX');
+        if (result !== 'OK')
+            return null;
+        return new RedisMutexLease(this.redis, key, token, ttlMs);
+    }
+};
+exports.RedisMutexService = RedisMutexService;
+exports.RedisMutexService = RedisMutexService = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, common_1.Inject)(redis_constants_1.REDIS_CLIENT)),
+    __metadata("design:paramtypes", [Function])
+], RedisMutexService);
+function isRedisTruthy(result) {
+    return result === 1 || result === '1';
+}
+//# sourceMappingURL=redis-mutex.service.js.map

package/dist/shared/redis/redis-mutex.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redis-mutex.service.js","sourceRoot":"","sources":["../../../src/shared/redis/redis-mutex.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,6CAAyC;AACzC,2CAAoD;AAEpD,uDAAiD;AAEjD,MAAM,uBAAuB,GAAG;;;;;CAK/B,CAAC;AAEF,MAAM,qBAAqB,GAAG;;;;;CAK7B,CAAC;AAOF,MAAa,eAAe;IAC1B,YACmB,KAAY,EACpB,GAAW,EACX,KAAa,EACb,KAAa;QAHL,UAAK,GAAL,KAAK,CAAO;QACpB,QAAG,GAAH,GAAG,CAAQ;QACX,UAAK,GAAL,KAAK,CAAQ;QACb,UAAK,GAAL,KAAK,CAAQ;IACrB,CAAC;IAEJ,KAAK,CAAC,KAAK;QACT,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,qBAAqB,EAAE,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QACjG,OAAO,aAAa,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,OAAO;QACX,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,uBAAuB,EAAE,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QACvF,OAAO,aAAa,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;CACF;AAjBD,0CAiBC;AAGM,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;IAC5B,YAAmD,KAAY;QAAZ,UAAK,GAAL,KAAK,CAAO;IAAG,CAAC;IAEnE,KAAK,CAAC,OAAO,CAAC,KAA6B;QACzC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAClE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QAEtF,MAAM,KAAK,GAAG,IAAA,wBAAU,GAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QACnE,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QACjC,OAAO,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IAC5D,CAAC;CACF,CAAA;AAdY,8CAAiB;4BAAjB,iBAAiB;IAD7B,IAAA,mBAAU,GAAE;IAEE,WAAA,IAAA,eAAM,EAAC,8BAAY,CAAC,CAAA;;GADtB,iBAAiB,CAc7B;AAED,SAAS,aAAa,CAAC,MAAe;IACpC,OAAO,MAAM,KAAK,CAAC,IAAI,MAAM,KAAK,GAAG,CAAC;AACxC,CAAC"}

package/dist/shared/redis/redis.constants.d.ts

@@ -0,0 +1,3 @@
+export declare const REDIS_CLIENT: unique symbol;
+export declare const REDIS_LIMITER: unique symbol;
+//# sourceMappingURL=redis.constants.d.ts.map

package/dist/shared/redis/redis.constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redis.constants.d.ts","sourceRoot":"","sources":["../../../src/shared/redis/redis.constants.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,YAAY,eAAyB,CAAC;AACnD,eAAO,MAAM,aAAa,eAA0B,CAAC"}

package/dist/shared/redis/redis.constants.js

@@ -0,0 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.REDIS_LIMITER = exports.REDIS_CLIENT = void 0;
+exports.REDIS_CLIENT = Symbol('REDIS_CLIENT');
+exports.REDIS_LIMITER = Symbol('REDIS_LIMITER');
+//# sourceMappingURL=redis.constants.js.map

package/dist/shared/redis/redis.constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redis.constants.js","sourceRoot":"","sources":["../../../src/shared/redis/redis.constants.ts"],"names":[],"mappings":";;;AAAa,QAAA,YAAY,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC;AACtC,QAAA,aAAa,GAAG,MAAM,CAAC,eAAe,CAAC,CAAC"}

package/dist/shared/redis/redis.module.d.ts

@@ -0,0 +1,8 @@
+import { type OnModuleDestroy } from '@nestjs/common';
+import { ModuleRef } from '@nestjs/core';
+export declare class RedisModule implements OnModuleDestroy {
+    private readonly moduleRef;
+    constructor(moduleRef: ModuleRef);
+    onModuleDestroy(): Promise<void>;
+}
+//# sourceMappingURL=redis.module.d.ts.map

package/dist/shared/redis/redis.module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redis.module.d.ts","sourceRoot":"","sources":["../../../src/shared/redis/redis.module.ts"],"names":[],"mappings":"AAAA,OAAO,EAAkB,KAAK,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACtE,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAMzC,qBAea,WAAY,YAAW,eAAe;IAClB,OAAO,CAAC,QAAQ,CAAC,SAAS;gBAAT,SAAS,EAAE,SAAS;IAE9D,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC;CAIvC"}

package/dist/shared/redis/redis.module.js

@@ -0,0 +1,54 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RedisModule = void 0;
+const common_1 = require("@nestjs/common");
+const core_1 = require("@nestjs/core");
+const limiter_1 = require("@proofhound/limiter");
+const ioredis_1 = __importDefault(require("ioredis"));
+const redis_constants_1 = require("./redis.constants");
+const redis_mutex_service_1 = require("./redis-mutex.service");
+let RedisModule = class RedisModule {
+    constructor(moduleRef) {
+        this.moduleRef = moduleRef;
+    }
+    async onModuleDestroy() {
+        const redis = this.moduleRef.get(redis_constants_1.REDIS_CLIENT, { strict: false });
+        await redis?.quit();
+    }
+};
+exports.RedisModule = RedisModule;
+exports.RedisModule = RedisModule = __decorate([
+    (0, common_1.Module)({
+        providers: [
+            {
+                provide: redis_constants_1.REDIS_CLIENT,
+                useFactory: () => new ioredis_1.default(process.env['REDIS_URL'] ?? 'redis://localhost:6379', { maxRetriesPerRequest: null }),
+            },
+            {
+                provide: redis_constants_1.REDIS_LIMITER,
+                inject: [redis_constants_1.REDIS_CLIENT],
+                useFactory: (redis) => new limiter_1.RedisLimiter(redis),
+            },
+            redis_mutex_service_1.RedisMutexService,
+        ],
+        exports: [redis_constants_1.REDIS_CLIENT, redis_constants_1.REDIS_LIMITER, redis_mutex_service_1.RedisMutexService],
+    }),
+    __param(0, (0, common_1.Inject)(core_1.ModuleRef)),
+    __metadata("design:paramtypes", [core_1.ModuleRef])
+], RedisModule);
+//# sourceMappingURL=redis.module.js.map

package/dist/shared/redis/redis.module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redis.module.js","sourceRoot":"","sources":["../../../src/shared/redis/redis.module.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAAA,2CAAsE;AACtE,uCAAyC;AACzC,iDAAmD;AACnD,sDAA4B;AAC5B,uDAAgE;AAChE,+DAA0D;AAiBnD,IAAM,WAAW,GAAjB,MAAM,WAAW;IACtB,YAAgD,SAAoB;QAApB,cAAS,GAAT,SAAS,CAAW;IAAG,CAAC;IAExE,KAAK,CAAC,eAAe;QACnB,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAQ,8BAAY,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QACzE,MAAM,KAAK,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;CACF,CAAA;AAPY,kCAAW;sBAAX,WAAW;IAfvB,IAAA,eAAM,EAAC;QACN,SAAS,EAAE;YACT;gBACE,OAAO,EAAE,8BAAY;gBACrB,UAAU,EAAE,GAAG,EAAE,CAAC,IAAI,iBAAK,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,wBAAwB,EAAE,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAC;aAClH;YACD;gBACE,OAAO,EAAE,+BAAa;gBACtB,MAAM,EAAE,CAAC,8BAAY,CAAC;gBACtB,UAAU,EAAE,CAAC,KAAY,EAAE,EAAE,CAAC,IAAI,sBAAY,CAAC,KAAK,CAAC;aACtD;YACD,uCAAiB;SAClB;QACD,OAAO,EAAE,CAAC,8BAAY,EAAE,+BAAa,EAAE,uCAAiB,CAAC;KAC1D,CAAC;IAEa,WAAA,IAAA,eAAM,EAAC,gBAAS,CAAC,CAAA;qCAA6B,gBAAS;GADzD,WAAW,CAOvB"}

package/dist/shared/runtime-module-options.d.ts

@@ -0,0 +1,5 @@
+import type { DynamicModule, Type } from '@nestjs/common';
+export interface ProofHoundRuntimeModuleOptions {
+    contracts: Type<unknown> | DynamicModule;
+}
+//# sourceMappingURL=runtime-module-options.d.ts.map

package/dist/shared/runtime-module-options.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-module-options.d.ts","sourceRoot":"","sources":["../../src/shared/runtime-module-options.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAE1D,MAAM,WAAW,8BAA8B;IAG7C,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,aAAa,CAAC;CAC1C"}

package/dist/shared/runtime-module-options.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=runtime-module-options.js.map

package/dist/shared/runtime-module-options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-module-options.js","sourceRoot":"","sources":["../../src/shared/runtime-module-options.ts"],"names":[],"mappings":""}

package/dist/webhook/channels/webhook/local-connector-context.resolver.d.ts

@@ -0,0 +1,8 @@
+import { ConnectorContextResolver, type ConnectorResolveResult } from '../../../server/common/contracts/connector-context.resolver';
+import { WebhookRepository } from './webhook.repository';
+export declare class LocalConnectorContextResolver extends ConnectorContextResolver {
+    private readonly repo;
+    constructor(repo: WebhookRepository);
+    resolveFromWebhookToken(webhookSlug: string, pathName: string, token: string): Promise<ConnectorResolveResult>;
+}
+//# sourceMappingURL=local-connector-context.resolver.d.ts.map

package/dist/webhook/channels/webhook/local-connector-context.resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-connector-context.resolver.d.ts","sourceRoot":"","sources":["../../../../src/webhook/channels/webhook/local-connector-context.resolver.ts"],"names":[],"mappings":"AAgBA,OAAO,EACL,wBAAwB,EACxB,KAAK,sBAAsB,EAC5B,MAAM,6DAA6D,CAAC;AACrE,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAGzD,qBACa,6BAA8B,SAAQ,wBAAwB;IAClC,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,iBAAiB;IAIzE,uBAAuB,CAC3B,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,sBAAsB,CAAC;CAsBnC"}

package/dist/webhook/channels/webhook/local-connector-context.resolver.js

@@ -0,0 +1,63 @@
+"use strict";
+// LocalConnectorContextResolver — OSS default for ConnectorContextResolver (§3.4)
+// See docs/specs/08-saas-adapter-boundary.md §3.4 and docs/specs/09-mcp-server.md is unrelated.
+//
+// Extracted from the previously-inline WebhookService.authorizeConnector. Validates inbound webhook
+// credentials and produces { connector, projectContext, actorContext, webhookTokenId } in one shot —
+// the webhook entry does NOT go through ProjectContextResolver (§3.1).
+//
+// Lives in the webhook runtime because it depends on WebhookRepository. The abstract
+// ConnectorContextResolver lives in server/common/contracts (the shared adapter seam); importing it
+// here is acyclic (the abstract never imports the webhook runtime).
+//
+// expired-vs-invalid distinction: the repo query deliberately omits the `expires_at > now()` filter so
+// a missing row → `invalid_webhook_token`, while a present-but-expired row → `expired_webhook_token`.
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LocalConnectorContextResolver = void 0;
+const node_crypto_1 = require("node:crypto");
+const common_1 = require("@nestjs/common");
+const connector_context_resolver_1 = require("../../../server/common/contracts/connector-context.resolver");
+const webhook_repository_1 = require("./webhook.repository");
+const webhook_token_util_1 = require("./webhook-token.util");
+let LocalConnectorContextResolver = class LocalConnectorContextResolver extends connector_context_resolver_1.ConnectorContextResolver {
+    constructor(repo) {
+        super();
+        this.repo = repo;
+    }
+    async resolveFromWebhookToken(webhookSlug, pathName, token) {
+        const tokenHash = (0, node_crypto_1.createHash)('sha256').update(token).digest('hex');
+        const result = await this.repo.findConnectorWithValidToken((0, webhook_token_util_1.normalizeSlug)(webhookSlug), (0, webhook_token_util_1.normalizePathName)(pathName), tokenHash);
+        if (!result)
+            throw new common_1.UnauthorizedException('invalid_webhook_token');
+        const expiresAt = result.tokenExpiresAt ? new Date(result.tokenExpiresAt).getTime() : null;
+        if (expiresAt !== null && expiresAt <= Date.now()) {
+            throw new common_1.UnauthorizedException('expired_webhook_token');
+        }
+        await this.repo.touchTokenLastUsed(result.tokenId);
+        return {
+            connector: result.connector,
+            projectContext: { projectId: result.connector.projectId, source: 'local' },
+            actorContext: { actorId: result.connector.id, actorKind: 'system_webhook' },
+            webhookTokenId: result.tokenId,
+        };
+    }
+};
+exports.LocalConnectorContextResolver = LocalConnectorContextResolver;
+exports.LocalConnectorContextResolver = LocalConnectorContextResolver = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, common_1.Inject)(webhook_repository_1.WebhookRepository)),
+    __metadata("design:paramtypes", [webhook_repository_1.WebhookRepository])
+], LocalConnectorContextResolver);
+//# sourceMappingURL=local-connector-context.resolver.js.map

package/dist/webhook/channels/webhook/local-connector-context.resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-connector-context.resolver.js","sourceRoot":"","sources":["../../../../src/webhook/channels/webhook/local-connector-context.resolver.ts"],"names":[],"mappings":";AAAA,kFAAkF;AAClF,gGAAgG;AAChG,EAAE;AACF,oGAAoG;AACpG,qGAAqG;AACrG,uEAAuE;AACvE,EAAE;AACF,qFAAqF;AACrF,oGAAoG;AACpG,oEAAoE;AACpE,EAAE;AACF,uGAAuG;AACvG,sGAAsG;;;;;;;;;;;;;;;AAEtG,6CAAyC;AACzC,2CAA2E;AAC3E,4GAGqE;AACrE,6DAAyD;AACzD,6DAAwE;AAGjE,IAAM,6BAA6B,GAAnC,MAAM,6BAA8B,SAAQ,qDAAwB;IACzE,YAAwD,IAAuB;QAC7E,KAAK,EAAE,CAAC;QAD8C,SAAI,GAAJ,IAAI,CAAmB;IAE/E,CAAC;IAED,KAAK,CAAC,uBAAuB,CAC3B,WAAmB,EACnB,QAAgB,EAChB,KAAa;QAEb,MAAM,SAAS,GAAG,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,2BAA2B,CACxD,IAAA,kCAAa,EAAC,WAAW,CAAC,EAC1B,IAAA,sCAAiB,EAAC,QAAQ,CAAC,EAC3B,SAAS,CACV,CAAC;QACF,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,8BAAqB,CAAC,uBAAuB,CAAC,CAAC;QAEtE,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAC3F,IAAI,SAAS,KAAK,IAAI,IAAI,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YAClD,MAAM,IAAI,8BAAqB,CAAC,uBAAuB,CAAC,CAAC;QAC3D,CAAC;QACD,MAAM,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAEnD,OAAO;YACL,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,cAAc,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE;YAC1E,YAAY,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,gBAAgB,EAAE;YAC3E,cAAc,EAAE,MAAM,CAAC,OAAO;SAC/B,CAAC;IACJ,CAAC;CACF,CAAA;AA/BY,sEAA6B;wCAA7B,6BAA6B;IADzC,IAAA,mBAAU,GAAE;IAEE,WAAA,IAAA,eAAM,EAAC,sCAAiB,CAAC,CAAA;qCAAwB,sCAAiB;GADpE,6BAA6B,CA+BzC"}

package/dist/webhook/channels/webhook/webhook-token.util.d.ts

@@ -0,0 +1,4 @@
+export declare function parseBearerToken(header: string | null): string;
+export declare function normalizeSlug(value: string): string;
+export declare function normalizePathName(value: string): string;
+//# sourceMappingURL=webhook-token.util.d.ts.map

package/dist/webhook/channels/webhook/webhook-token.util.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-token.util.d.ts","sourceRoot":"","sources":["../../../../src/webhook/channels/webhook/webhook-token.util.ts"],"names":[],"mappings":"AAMA,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAI9D;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEnD;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAMvD"}

package/dist/webhook/channels/webhook/webhook-token.util.js

@@ -0,0 +1,26 @@
+"use strict";
+// Shared webhook inbound-credential helpers.
+// Extracted from webhook.service.ts so both the service (bearer parsing at the call site) and
+// LocalConnectorContextResolver (slug / path normalization) can use them without a circular import.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.parseBearerToken = parseBearerToken;
+exports.normalizeSlug = normalizeSlug;
+exports.normalizePathName = normalizePathName;
+const common_1 = require("@nestjs/common");
+function parseBearerToken(header) {
+    const match = /^Bearer\s+(.+)$/iu.exec(header ?? '');
+    if (!match?.[1])
+        throw new common_1.UnauthorizedException('missing_api_token');
+    return match[1].trim();
+}
+function normalizeSlug(value) {
+    return value.trim().toLowerCase();
+}
+function normalizePathName(value) {
+    return value
+        .split('/')
+        .map((part) => part.trim())
+        .filter(Boolean)
+        .join('/');
+}
+//# sourceMappingURL=webhook-token.util.js.map

package/dist/webhook/channels/webhook/webhook-token.util.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-token.util.js","sourceRoot":"","sources":["../../../../src/webhook/channels/webhook/webhook-token.util.ts"],"names":[],"mappings":";AAAA,6CAA6C;AAC7C,8FAA8F;AAC9F,oGAAoG;;AAIpG,4CAIC;AAED,sCAEC;AAED,8CAMC;AAlBD,2CAAuD;AAEvD,SAAgB,gBAAgB,CAAC,MAAqB;IACpD,MAAM,KAAK,GAAG,mBAAmB,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;IACrD,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,8BAAqB,CAAC,mBAAmB,CAAC,CAAC;IACtE,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AACzB,CAAC;AAED,SAAgB,aAAa,CAAC,KAAa;IACzC,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AACpC,CAAC;AAED,SAAgB,iBAAiB,CAAC,KAAa;IAC7C,OAAO,KAAK;SACT,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,OAAO,CAAC;SACf,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC"}