@qodalis/cli-server-node 1.0.0-beta.4 → 1.0.0-beta.6

package/dist/src/services/index.d.ts

@@ -2,6 +2,7 @@ export { ICliCommandRegistry, CliCommandRegistry } from './cli-command-registry'
 export { ICliResponseBuilder, CliResponseBuilder } from './cli-response-builder';
 export { ICliCommandExecutorService, CliCommandExecutorService } from './cli-command-executor-service';
 export { CliEventSocketManager, CliWebSocketClientInfo } from './cli-event-socket-manager';
-export { CliShellSessionManager } from './cli-shell-session-manager';
+export { CliShellSessionManager, CliShellSessionInfo } from './cli-shell-session-manager';
+export { CliShellOptions, CliShellEnvOptions, CliShellAuthMode, CliShellAuthorizeContext, ShellCloseCodes, resolveShellAuthMode, buildShellEnv, } from './cli-shell-options';
 export { CliLogSocketManager, CliLogWebSocketClientInfo } from './cli-log-socket-manager';
 //# sourceMappingURL=index.d.ts.map

package/dist/src/services/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/services/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AACjF,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AACjF,OAAO,EAAE,0BAA0B,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AACvG,OAAO,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AAC3F,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,EAAE,mBAAmB,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/services/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AACjF,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AACjF,OAAO,EAAE,0BAA0B,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AACvG,OAAO,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AAC3F,OAAO,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAC1F,OAAO,EACH,eAAe,EACf,kBAAkB,EAClB,gBAAgB,EAChB,wBAAwB,EACxB,eAAe,EACf,oBAAoB,EACpB,aAAa,GAChB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,mBAAmB,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC"}

package/dist/src/services/index.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.CliLogSocketManager = exports.CliShellSessionManager = exports.CliEventSocketManager = exports.CliCommandExecutorService = exports.CliResponseBuilder = exports.CliCommandRegistry = void 0;
+exports.CliLogSocketManager = exports.buildShellEnv = exports.resolveShellAuthMode = exports.ShellCloseCodes = exports.CliShellSessionManager = exports.CliEventSocketManager = exports.CliCommandExecutorService = exports.CliResponseBuilder = exports.CliCommandRegistry = void 0;
 var cli_command_registry_1 = require("./cli-command-registry");
 Object.defineProperty(exports, "CliCommandRegistry", { enumerable: true, get: function () { return cli_command_registry_1.CliCommandRegistry; } });
 var cli_response_builder_1 = require("./cli-response-builder");
@@ -11,6 +11,10 @@ var cli_event_socket_manager_1 = require("./cli-event-socket-manager");
 Object.defineProperty(exports, "CliEventSocketManager", { enumerable: true, get: function () { return cli_event_socket_manager_1.CliEventSocketManager; } });
 var cli_shell_session_manager_1 = require("./cli-shell-session-manager");
 Object.defineProperty(exports, "CliShellSessionManager", { enumerable: true, get: function () { return cli_shell_session_manager_1.CliShellSessionManager; } });
+var cli_shell_options_1 = require("./cli-shell-options");
+Object.defineProperty(exports, "ShellCloseCodes", { enumerable: true, get: function () { return cli_shell_options_1.ShellCloseCodes; } });
+Object.defineProperty(exports, "resolveShellAuthMode", { enumerable: true, get: function () { return cli_shell_options_1.resolveShellAuthMode; } });
+Object.defineProperty(exports, "buildShellEnv", { enumerable: true, get: function () { return cli_shell_options_1.buildShellEnv; } });
 var cli_log_socket_manager_1 = require("./cli-log-socket-manager");
 Object.defineProperty(exports, "CliLogSocketManager", { enumerable: true, get: function () { return cli_log_socket_manager_1.CliLogSocketManager; } });
 //# sourceMappingURL=index.js.map

package/dist/src/services/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/services/index.ts"],"names":[],"mappings":";;;AAAA,+DAAiF;AAAnD,0HAAA,kBAAkB,OAAA;AAChD,+DAAiF;AAAnD,0HAAA,kBAAkB,OAAA;AAChD,+EAAuG;AAAlE,yIAAA,yBAAyB,OAAA;AAC9D,uEAA2F;AAAlF,iIAAA,qBAAqB,OAAA;AAC9B,yEAAqE;AAA5D,mIAAA,sBAAsB,OAAA;AAC/B,mEAA0F;AAAjF,6HAAA,mBAAmB,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/services/index.ts"],"names":[],"mappings":";;;AAAA,+DAAiF;AAAnD,0HAAA,kBAAkB,OAAA;AAChD,+DAAiF;AAAnD,0HAAA,kBAAkB,OAAA;AAChD,+EAAuG;AAAlE,yIAAA,yBAAyB,OAAA;AAC9D,uEAA2F;AAAlF,iIAAA,qBAAqB,OAAA;AAC9B,yEAA0F;AAAjF,mIAAA,sBAAsB,OAAA;AAC/B,yDAQ6B;AAHzB,oHAAA,eAAe,OAAA;AACf,yHAAA,oBAAoB,OAAA;AACpB,kHAAA,aAAa,OAAA;AAEjB,mEAA0F;AAAjF,6HAAA,mBAAmB,OAAA"}

package/dist/src/services/process-tree.d.ts

@@ -0,0 +1,38 @@
+/** Delay between SIGHUP/SIGTERM and the final SIGKILL. */
+export declare const PROCESS_TREE_KILL_GRACE_MS = 1000;
+/**
+ * Environment variable that tags every process a shell starts. Children inherit
+ * it, so processes that escaped the tree (re-parented to init, new session) are
+ * still found on cleanup unless they deliberately unset it.
+ */
+export declare const SHELL_ID_ENV = "QCLI_SHELL_ID";
+/** A fresh, unguessable shell marker value (128-bit hex). */
+export declare function newShellId(): string;
+/** Linux: does a NUL-separated `/proc/<pid>/environ` contain exactly `QCLI_SHELL_ID=<id>`? */
+export declare function environHasShellId(environ: string, shellId: string): boolean;
+/**
+ * macOS / BSD: does a `ps -E -o command=` line (command line followed by the
+ * environment, space separated) contain `QCLI_SHELL_ID=<id>` as a whole token?
+ */
+export declare function psLineHasShellId(line: string, shellId: string): boolean;
+/** PIDs of every process whose environment carries `QCLI_SHELL_ID=<shellId>`. */
+export declare function findMarkedProcesses(shellId: string): number[];
+/**
+ * PIDs of everything a shell started: its process group, (Linux) its session,
+ * every descendant of those — including background jobs that interactive
+ * shells move to their own process groups and `setsid`/`nohup` children — and,
+ * when `shellId` is given, every process carrying the shell's
+ * `QCLI_SHELL_ID` marker (and their descendants), which also catches processes
+ * re-parented to init in a new session. Never includes `rootPid` itself, the
+ * server process or the server's process group.
+ */
+export declare function collectProcessTree(rootPid: number, shellId?: string, extraSeeds?: number[]): number[];
+/**
+ * Terminates a shell and everything it started (Unix): collects the targets
+ * first (the shell's death re-parents its children), then sends SIGHUP and
+ * SIGTERM to the shell's process group, the shell and every collected process,
+ * and SIGKILL after `graceMs`. The final pass re-collects so that children
+ * forked meanwhile by the collected processes die too.
+ */
+export declare function terminateProcessTree(rootPid: number, graceMs?: number, shellId?: string): void;
+//# sourceMappingURL=process-tree.d.ts.map

package/dist/src/services/process-tree.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-tree.d.ts","sourceRoot":"","sources":["../../../src/services/process-tree.ts"],"names":[],"mappings":"AAaA,0DAA0D;AAC1D,eAAO,MAAM,0BAA0B,OAAO,CAAC;AAE/C;;;;GAIG;AACH,eAAO,MAAM,YAAY,kBAAkB,CAAC;AAE5C,6DAA6D;AAC7D,wBAAgB,UAAU,IAAI,MAAM,CAEnC;AAID,8FAA8F;AAC9F,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAG3E;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAUvE;AA+BD,iFAAiF;AACjF,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,CAO7D;AA4ED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,UAAU,GAAE,MAAM,EAAO,GAAG,MAAM,EAAE,CAMzG;AAUD;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,SAA6B,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAYlH"}

package/dist/src/services/process-tree.js

@@ -0,0 +1,249 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SHELL_ID_ENV = exports.PROCESS_TREE_KILL_GRACE_MS = void 0;
+exports.newShellId = newShellId;
+exports.environHasShellId = environHasShellId;
+exports.psLineHasShellId = psLineHasShellId;
+exports.findMarkedProcesses = findMarkedProcesses;
+exports.collectProcessTree = collectProcessTree;
+exports.terminateProcessTree = terminateProcessTree;
+const child_process_1 = require("child_process");
+const crypto_1 = require("crypto");
+const fs = __importStar(require("fs"));
+const os = __importStar(require("os"));
+/** Delay between SIGHUP/SIGTERM and the final SIGKILL. */
+exports.PROCESS_TREE_KILL_GRACE_MS = 1000;
+/**
+ * Environment variable that tags every process a shell starts. Children inherit
+ * it, so processes that escaped the tree (re-parented to init, new session) are
+ * still found on cleanup unless they deliberately unset it.
+ */
+exports.SHELL_ID_ENV = 'QCLI_SHELL_ID';
+/** A fresh, unguessable shell marker value (128-bit hex). */
+function newShellId() {
+    return (0, crypto_1.randomBytes)(16).toString('hex');
+}
+const SHELL_ID_RE = /^[0-9a-f]{32}$/;
+/** Linux: does a NUL-separated `/proc/<pid>/environ` contain exactly `QCLI_SHELL_ID=<id>`? */
+function environHasShellId(environ, shellId) {
+    const wanted = `${exports.SHELL_ID_ENV}=${shellId}`;
+    return environ.split('\0').some((entry) => entry === wanted);
+}
+/**
+ * macOS / BSD: does a `ps -E -o command=` line (command line followed by the
+ * environment, space separated) contain `QCLI_SHELL_ID=<id>` as a whole token?
+ */
+function psLineHasShellId(line, shellId) {
+    const wanted = ` ${exports.SHELL_ID_ENV}=${shellId}`;
+    let from = 0;
+    for (;;) {
+        const at = line.indexOf(wanted, from);
+        if (at < 0)
+            return false;
+        const end = at + wanted.length;
+        if (end === line.length || /\s/.test(line[end]))
+            return true;
+        from = at + 1;
+    }
+}
+/** Linux: PIDs whose `/proc/<pid>/environ` carries the marker (unreadable entries are skipped). */
+function markedFromProc(shellId) {
+    const found = [];
+    for (const name of fs.readdirSync('/proc')) {
+        if (!/^\d+$/.test(name))
+            continue;
+        try {
+            if (environHasShellId(fs.readFileSync(`/proc/${name}/environ`, 'latin1'), shellId))
+                found.push(Number(name));
+        }
+        catch {
+            // exited, or another user's process
+        }
+    }
+    return found;
+}
+/** macOS / BSD: `ps -A -E -ww -o pid=,command=` shows the environment of the same user's processes. */
+function markedFromPs(shellId) {
+    const out = (0, child_process_1.execFileSync)('ps', ['-A', '-E', '-ww', '-o', 'pid=,command='], {
+        encoding: 'utf8',
+        timeout: 5000,
+        maxBuffer: 64 * 1024 * 1024,
+    });
+    const found = [];
+    for (const line of out.split('\n')) {
+        const m = /^\s*(\d+)\s/.exec(line);
+        if (m && psLineHasShellId(line, shellId))
+            found.push(Number(m[1]));
+    }
+    return found;
+}
+/** PIDs of every process whose environment carries `QCLI_SHELL_ID=<shellId>`. */
+function findMarkedProcesses(shellId) {
+    if (!SHELL_ID_RE.test(shellId))
+        return [];
+    try {
+        return isProcLinux() ? markedFromProc(shellId) : markedFromPs(shellId);
+    }
+    catch {
+        return [];
+    }
+}
+function isProcLinux() {
+    return os.platform() === 'linux' && fs.existsSync('/proc/self/stat');
+}
+/** Linux: `/proc/<pid>/stat` (no `ps` needed, works in slim containers). */
+function readProcTable() {
+    const entries = [];
+    for (const name of fs.readdirSync('/proc')) {
+        if (!/^\d+$/.test(name))
+            continue;
+        try {
+            const stat = fs.readFileSync(`/proc/${name}/stat`, 'utf8');
+            // "pid (comm) state ppid pgrp session ..." — comm may contain spaces and parentheses
+            const fields = stat.slice(stat.lastIndexOf(')') + 2).split(' ');
+            entries.push({ pid: Number(name), ppid: Number(fields[1]), pgid: Number(fields[2]), sid: Number(fields[3]) });
+        }
+        catch {
+            // exited while listing
+        }
+    }
+    return entries;
+}
+/** macOS / BSD: `ps -A -o pid=,ppid=,pgid=`. */
+function readPsTable() {
+    const out = (0, child_process_1.execFileSync)('ps', ['-A', '-o', 'pid=,ppid=,pgid='], { encoding: 'utf8', timeout: 5000 });
+    const entries = [];
+    for (const line of out.split('\n')) {
+        const m = /^\s*(\d+)\s+(\d+)\s+(\d+)\s*$/.exec(line);
+        if (m)
+            entries.push({ pid: Number(m[1]), ppid: Number(m[2]), pgid: Number(m[3]) });
+    }
+    return entries;
+}
+function readProcessTable() {
+    try {
+        return isProcLinux() ? readProcTable() : readPsTable();
+    }
+    catch {
+        return [];
+    }
+}
+/** `seeds` (except `rootPid`) and all their descendants, by parent PID. */
+function descendants(table, rootPid, seeds) {
+    const children = new Map();
+    for (const p of table) {
+        const list = children.get(p.ppid);
+        if (list)
+            list.push(p.pid);
+        else
+            children.set(p.ppid, [p.pid]);
+    }
+    const found = new Set();
+    const queue = [...seeds];
+    while (queue.length) {
+        const pid = queue.pop();
+        if (pid !== rootPid) {
+            if (found.has(pid))
+                continue;
+            found.add(pid);
+        }
+        for (const child of children.get(pid) ?? []) {
+            if (child !== rootPid && !found.has(child))
+                queue.push(child);
+        }
+    }
+    found.delete(process.pid);
+    const ownPgid = table.find((p) => p.pid === process.pid)?.pgid;
+    if (ownPgid !== undefined)
+        for (const p of table)
+            if (p.pgid === ownPgid)
+                found.delete(p.pid);
+    return found;
+}
+function treeSeeds(table, rootPid) {
+    const seeds = [rootPid];
+    for (const p of table) {
+        if (p.pgid === rootPid || p.sid === rootPid)
+            seeds.push(p.pid);
+    }
+    return seeds;
+}
+/**
+ * PIDs of everything a shell started: its process group, (Linux) its session,
+ * every descendant of those — including background jobs that interactive
+ * shells move to their own process groups and `setsid`/`nohup` children — and,
+ * when `shellId` is given, every process carrying the shell's
+ * `QCLI_SHELL_ID` marker (and their descendants), which also catches processes
+ * re-parented to init in a new session. Never includes `rootPid` itself, the
+ * server process or the server's process group.
+ */
+function collectProcessTree(rootPid, shellId, extraSeeds = []) {
+    const table = readProcessTable();
+    const marked = shellId ? findMarkedProcesses(shellId) : [];
+    const alive = new Set(table.map((p) => p.pid));
+    const seeds = [...treeSeeds(table, rootPid), ...marked, ...extraSeeds.filter((pid) => alive.has(pid))];
+    return [...descendants(table, rootPid, seeds)];
+}
+function signal(pid, sig) {
+    try {
+        process.kill(pid, sig);
+    }
+    catch {
+        // already gone
+    }
+}
+/**
+ * Terminates a shell and everything it started (Unix): collects the targets
+ * first (the shell's death re-parents its children), then sends SIGHUP and
+ * SIGTERM to the shell's process group, the shell and every collected process,
+ * and SIGKILL after `graceMs`. The final pass re-collects so that children
+ * forked meanwhile by the collected processes die too.
+ */
+function terminateProcessTree(rootPid, graceMs = exports.PROCESS_TREE_KILL_GRACE_MS, shellId) {
+    const pids = collectProcessTree(rootPid, shellId);
+    const send = (targets, sig) => {
+        if (rootPid !== process.pid) {
+            signal(-rootPid, sig);
+            signal(rootPid, sig);
+        }
+        for (const pid of targets)
+            signal(pid, sig);
+    };
+    send(pids, 'SIGHUP');
+    send(pids, 'SIGTERM');
+    setTimeout(() => send(collectProcessTree(rootPid, shellId, pids), 'SIGKILL'), graceMs);
+}
+//# sourceMappingURL=process-tree.js.map

package/dist/src/services/process-tree.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-tree.js","sourceRoot":"","sources":["../../../src/services/process-tree.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAwBA,gCAEC;AAKD,8CAGC;AAMD,4CAUC;AAgCD,kDAOC;AAqFD,gDAMC;AAiBD,oDAYC;AAjND,iDAA6C;AAC7C,mCAAqC;AACrC,uCAAyB;AACzB,uCAAyB;AAUzB,0DAA0D;AAC7C,QAAA,0BAA0B,GAAG,IAAI,CAAC;AAE/C;;;;GAIG;AACU,QAAA,YAAY,GAAG,eAAe,CAAC;AAE5C,6DAA6D;AAC7D,SAAgB,UAAU;IACtB,OAAO,IAAA,oBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,WAAW,GAAG,gBAAgB,CAAC;AAErC,8FAA8F;AAC9F,SAAgB,iBAAiB,CAAC,OAAe,EAAE,OAAe;IAC9D,MAAM,MAAM,GAAG,GAAG,oBAAY,IAAI,OAAO,EAAE,CAAC;IAC5C,OAAO,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC;AACjE,CAAC;AAED;;;GAGG;AACH,SAAgB,gBAAgB,CAAC,IAAY,EAAE,OAAe;IAC1D,MAAM,MAAM,GAAG,IAAI,oBAAY,IAAI,OAAO,EAAE,CAAC;IAC7C,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,SAAS,CAAC;QACN,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACtC,IAAI,EAAE,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QACzB,MAAM,GAAG,GAAG,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC;QAC/B,IAAI,GAAG,KAAK,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAC7D,IAAI,GAAG,EAAE,GAAG,CAAC,CAAC;IAClB,CAAC;AACL,CAAC;AAED,mGAAmG;AACnG,SAAS,cAAc,CAAC,OAAe;IACnC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,IAAI,IAAI,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;QACzC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS;QAClC,IAAI,CAAC;YACD,IAAI,iBAAiB,CAAC,EAAE,CAAC,YAAY,CAAC,SAAS,IAAI,UAAU,EAAE,QAAQ,CAAC,EAAE,OAAO,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QACjH,CAAC;QAAC,MAAM,CAAC;YACL,oCAAoC;QACxC,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AAED,uGAAuG;AACvG,SAAS,YAAY,CAAC,OAAe;IACjC,MAAM,GAAG,GAAG,IAAA,4BAAY,EAAC,IAAI,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,eAAe,CAAC,EAAE;QACvE,QAAQ,EAAE,MAAM;QAChB,OAAO,EAAE,IAAI;QACb,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;KAC9B,CAAC,CAAC;IACH,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACjC,MAAM,CAAC,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,CAAC,IAAI,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AAED,iFAAiF;AACjF,SAAgB,mBAAmB,CAAC,OAAe;IAC/C,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,CAAC;IAC1C,IAAI,CAAC;QACD,OAAO,WAAW,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;IAC3E,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,EAAE,CAAC;IACd,CAAC;AACL,CAAC;AAED,SAAS,WAAW;IAChB,OAAO,EAAE,CAAC,QAAQ,EAAE,KAAK,OAAO,IAAI,EAAE,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;AACzE,CAAC;AAED,4EAA4E;AAC5E,SAAS,aAAa;IAClB,MAAM,OAAO,GAAmB,EAAE,CAAC;IACnC,KAAK,MAAM,IAAI,IAAI,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;QACzC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS;QAClC,IAAI,CAAC;YACD,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,IAAI,OAAO,EAAE,MAAM,CAAC,CAAC;YAC3D,qFAAqF;YACrF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAChE,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAClH,CAAC;QAAC,MAAM,CAAC;YACL,uBAAuB;QAC3B,CAAC;IACL,CAAC;IACD,OAAO,OAAO,CAAC;AACnB,CAAC;AAED,gDAAgD;AAChD,SAAS,WAAW;IAChB,MAAM,GAAG,GAAG,IAAA,4BAAY,EAAC,IAAI,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,kBAAkB,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IACtG,MAAM,OAAO,GAAmB,EAAE,CAAC;IACnC,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACjC,MAAM,CAAC,GAAG,+BAA+B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrD,IAAI,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACvF,CAAC;IACD,OAAO,OAAO,CAAC;AACnB,CAAC;AAED,SAAS,gBAAgB;IACrB,IAAI,CAAC;QACD,OAAO,WAAW,EAAE,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IAC3D,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,EAAE,CAAC;IACd,CAAC;AACL,CAAC;AAED,2EAA2E;AAC3E,SAAS,WAAW,CAAC,KAAqB,EAAE,OAAe,EAAE,KAAe;IACxE,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC7C,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACpB,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,IAAI;YAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;;YACtB,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACvC,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,MAAM,KAAK,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC;IACzB,OAAO,KAAK,CAAC,MAAM,EAAE,CAAC;QAClB,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,EAAG,CAAC;QACzB,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;YAClB,IAAI,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,SAAS;YAC7B,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;YAC1C,IAAI,KAAK,KAAK,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClE,CAAC;IACL,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,OAAO,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC;IAC/D,IAAI,OAAO,KAAK,SAAS;QAAE,KAAK,MAAM,CAAC,IAAI,KAAK;YAAE,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO;gBAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC9F,OAAO,KAAK,CAAC;AACjB,CAAC;AAED,SAAS,SAAS,CAAC,KAAqB,EAAE,OAAe;IACrD,MAAM,KAAK,GAAG,CAAC,OAAO,CAAC,CAAC;IACxB,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACpB,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,CAAC,GAAG,KAAK,OAAO;YAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AAED;;;;;;;;GAQG;AACH,SAAgB,kBAAkB,CAAC,OAAe,EAAE,OAAgB,EAAE,aAAuB,EAAE;IAC3F,MAAM,KAAK,GAAG,gBAAgB,EAAE,CAAC;IACjC,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3D,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,CAAC,GAAG,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,GAAG,MAAM,EAAE,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACvG,OAAO,CAAC,GAAG,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,MAAM,CAAC,GAAW,EAAE,GAAmB;IAC5C,IAAI,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACL,eAAe;IACnB,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,oBAAoB,CAAC,OAAe,EAAE,OAAO,GAAG,kCAA0B,EAAE,OAAgB;IACxG,MAAM,IAAI,GAAG,kBAAkB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAClD,MAAM,IAAI,GAAG,CAAC,OAAyB,EAAE,GAAmB,EAAE,EAAE;QAC5D,IAAI,OAAO,KAAK,OAAO,CAAC,GAAG,EAAE,CAAC;YAC1B,MAAM,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YACtB,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACzB,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,OAAO;YAAE,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAChD,CAAC,CAAC;IACF,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACrB,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACtB,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS,CAAC,EAAE,OAAO,CAAC,CAAC;AAC3F,CAAC"}

package/dist/src/services/session-bound-sockets.d.ts

@@ -0,0 +1,45 @@
+import { WebSocket } from 'ws';
+import { CliServerAuthContext, ICliServerAuth } from '../auth/cli-server-auth';
+/** Close code and reason of a socket whose session ended. */
+export declare const SESSION_ENDED_CLOSE_CODE = 4401;
+export declare const SESSION_ENDED_REASON = "session ended";
+export interface SessionBoundSocketsOptions {
+    /**
+     * Sockets that receive `session-kicked` (the events socket): a revocation
+     * closes them only after that event was sent ({@link kicked}), or after a
+     * short grace period when it never comes.
+     */
+    awaitKick?: boolean;
+}
+/**
+ * Binds authenticated events/logs WebSockets to the stored session behind
+ * their ticket: when it ends (logout, revoke, user disabled/deleted, expiry)
+ * the socket is closed with 4401 `session ended`. The auth provider's session
+ * events drive it: `session-ended` closes the session's sockets, any other
+ * event (users/groups changes, the expiry sweep) re-checks every bound socket.
+ * Identities without a stored session (external adapter) are not bound.
+ */
+export declare class SessionBoundSockets {
+    private readonly _options;
+    private readonly _bound;
+    private _auth?;
+    private _unsubscribe?;
+    constructor(_options?: SessionBoundSocketsOptions);
+    /** Installs the auth provider and subscribes to its session events. */
+    setAuth(auth: ICliServerAuth | undefined): void;
+    /** Tracks `ws` when `ctx` comes from a stored session. */
+    bind(ws: WebSocket, ctx: CliServerAuthContext | undefined): void;
+    unbind(ws: WebSocket): void;
+    /** True once the socket's session ended (it must not receive server-wide events any more). */
+    isEnding(ws: WebSocket): boolean;
+    /** `session-kicked` was delivered to `ws` for its own session: close it now. */
+    kicked(ws: WebSocket): void;
+    /** Re-checks every bound socket (optionally only `userId`'s) and closes those whose session ended. */
+    recheck(userId?: string): Promise<void>;
+    dispose(): void;
+    private onSessionEvent;
+    /** The session behind `ws` ended; `mayBeKicked`: a `session-kicked` event may still follow. */
+    private ended;
+    private close;
+}
+//# sourceMappingURL=session-bound-sockets.d.ts.map

package/dist/src/services/session-bound-sockets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-bound-sockets.d.ts","sourceRoot":"","sources":["../../../src/services/session-bound-sockets.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AAE/B,OAAO,EAAE,oBAAoB,EAAyB,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAItG,6DAA6D;AAC7D,eAAO,MAAM,wBAAwB,OAAO,CAAC;AAC7C,eAAO,MAAM,oBAAoB,kBAAkB,CAAC;AAQpD,MAAM,WAAW,0BAA0B;IACvC;;;;OAIG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;CACvB;AASD;;;;;;;GAOG;AACH,qBAAa,mBAAmB;IAKhB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAJrC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA+B;IACtD,OAAO,CAAC,KAAK,CAAC,CAAiB;IAC/B,OAAO,CAAC,YAAY,CAAC,CAAa;gBAEL,QAAQ,GAAE,0BAA+B;IAEtE,uEAAuE;IACvE,OAAO,CAAC,IAAI,EAAE,cAAc,GAAG,SAAS,GAAG,IAAI;IAS/C,0DAA0D;IAC1D,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,oBAAoB,GAAG,SAAS,GAAG,IAAI;IAIhE,MAAM,CAAC,EAAE,EAAE,SAAS,GAAG,IAAI;IAM3B,8FAA8F;IAC9F,QAAQ,CAAC,EAAE,EAAE,SAAS,GAAG,OAAO;IAIhC,gFAAgF;IAChF,MAAM,CAAC,EAAE,EAAE,SAAS,GAAG,IAAI;IAI3B,sGAAsG;IAChG,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAwB7C,OAAO,IAAI,IAAI;IASf,OAAO,CAAC,cAAc;IAUtB,+FAA+F;IAC/F,OAAO,CAAC,KAAK;IAUb,OAAO,CAAC,KAAK;CAUhB"}

package/dist/src/services/session-bound-sockets.js

@@ -0,0 +1,129 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SessionBoundSockets = exports.SESSION_ENDED_REASON = exports.SESSION_ENDED_CLOSE_CODE = void 0;
+const ws_1 = require("ws");
+const logger_1 = require("../utils/logger");
+const logger = (0, logger_1.createLogger)('SessionBoundSockets');
+/** Close code and reason of a socket whose session ended. */
+exports.SESSION_ENDED_CLOSE_CODE = 4401;
+exports.SESSION_ENDED_REASON = 'session ended';
+/**
+ * How long a socket waits for its `session-kicked` event once its session
+ * ended by a revocation (or a re-check found it dead) before it is closed anyway.
+ */
+const KICK_GRACE_MS = 1000;
+/**
+ * Binds authenticated events/logs WebSockets to the stored session behind
+ * their ticket: when it ends (logout, revoke, user disabled/deleted, expiry)
+ * the socket is closed with 4401 `session ended`. The auth provider's session
+ * events drive it: `session-ended` closes the session's sockets, any other
+ * event (users/groups changes, the expiry sweep) re-checks every bound socket.
+ * Identities without a stored session (external adapter) are not bound.
+ */
+class SessionBoundSockets {
+    _options;
+    _bound = new Map();
+    _auth;
+    _unsubscribe;
+    constructor(_options = {}) {
+        this._options = _options;
+    }
+    /** Installs the auth provider and subscribes to its session events. */
+    setAuth(auth) {
+        this._unsubscribe?.();
+        this._unsubscribe = undefined;
+        this._auth = auth;
+        if (auth?.onSessionEvent) {
+            this._unsubscribe = auth.onSessionEvent((event) => this.onSessionEvent(event));
+        }
+    }
+    /** Tracks `ws` when `ctx` comes from a stored session. */
+    bind(ws, ctx) {
+        if (ctx?.sessionId)
+            this._bound.set(ws, { ctx });
+    }
+    unbind(ws) {
+        const entry = this._bound.get(ws);
+        if (entry?.ending)
+            clearTimeout(entry.ending);
+        this._bound.delete(ws);
+    }
+    /** True once the socket's session ended (it must not receive server-wide events any more). */
+    isEnding(ws) {
+        return !!this._bound.get(ws)?.ending;
+    }
+    /** `session-kicked` was delivered to `ws` for its own session: close it now. */
+    kicked(ws) {
+        this.close(ws);
+    }
+    /** Re-checks every bound socket (optionally only `userId`'s) and closes those whose session ended. */
+    async recheck(userId) {
+        const auth = this._auth;
+        if (!auth?.revalidate)
+            return;
+        const checks = [];
+        for (const [ws, entry] of this._bound) {
+            if (entry.ending || entry.checking || (userId && entry.ctx.userId !== userId))
+                continue;
+            entry.checking = true;
+            checks.push((async () => {
+                let alive;
+                try {
+                    alive = !!(await auth.revalidate(entry.ctx));
+                }
+                catch (err) {
+                    logger.warn('Socket session check failed; closing the socket: %s', err?.message ?? err);
+                    alive = false;
+                }
+                entry.checking = false;
+                if (!alive && this._bound.get(ws) === entry)
+                    this.ended(ws, entry, true);
+            })());
+        }
+        await Promise.all(checks);
+    }
+    dispose() {
+        this._unsubscribe?.();
+        this._unsubscribe = undefined;
+        for (const entry of this._bound.values()) {
+            if (entry.ending)
+                clearTimeout(entry.ending);
+        }
+        this._bound.clear();
+    }
+    onSessionEvent(event) {
+        if (event.type === 'session-ended') {
+            for (const [ws, entry] of [...this._bound]) {
+                if (entry.ctx.sessionId === event.sessionId)
+                    this.ended(ws, entry, !!event.revoked);
+            }
+        }
+        else {
+            void this.recheck(event.userId);
+        }
+    }
+    /** The session behind `ws` ended; `mayBeKicked`: a `session-kicked` event may still follow. */
+    ended(ws, entry, mayBeKicked) {
+        if (!this._options.awaitKick || !mayBeKicked) {
+            this.close(ws);
+            return;
+        }
+        if (entry.ending)
+            return;
+        entry.ending = setTimeout(() => this.close(ws), KICK_GRACE_MS);
+        entry.ending.unref?.();
+    }
+    close(ws) {
+        this.unbind(ws);
+        if (ws.readyState === ws_1.WebSocket.OPEN || ws.readyState === ws_1.WebSocket.CONNECTING) {
+            try {
+                ws.close(exports.SESSION_ENDED_CLOSE_CODE, exports.SESSION_ENDED_REASON);
+            }
+            catch {
+                ws.terminate();
+            }
+        }
+    }
+}
+exports.SessionBoundSockets = SessionBoundSockets;
+//# sourceMappingURL=session-bound-sockets.js.map

package/dist/src/services/session-bound-sockets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-bound-sockets.js","sourceRoot":"","sources":["../../../src/services/session-bound-sockets.ts"],"names":[],"mappings":";;;AAAA,2BAA+B;AAC/B,4CAA+C;AAG/C,MAAM,MAAM,GAAG,IAAA,qBAAY,EAAC,qBAAqB,CAAC,CAAC;AAEnD,6DAA6D;AAChD,QAAA,wBAAwB,GAAG,IAAI,CAAC;AAChC,QAAA,oBAAoB,GAAG,eAAe,CAAC;AAEpD;;;GAGG;AACH,MAAM,aAAa,GAAG,IAAI,CAAC;AAkB3B;;;;;;;GAOG;AACH,MAAa,mBAAmB;IAKC;IAJZ,MAAM,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC9C,KAAK,CAAkB;IACvB,YAAY,CAAc;IAElC,YAA6B,WAAuC,EAAE;QAAzC,aAAQ,GAAR,QAAQ,CAAiC;IAAG,CAAC;IAE1E,uEAAuE;IACvE,OAAO,CAAC,IAAgC;QACpC,IAAI,CAAC,YAAY,EAAE,EAAE,CAAC;QACtB,IAAI,CAAC,YAAY,GAAG,SAAS,CAAC;QAC9B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,IAAI,EAAE,cAAc,EAAE,CAAC;YACvB,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;QACnF,CAAC;IACL,CAAC;IAED,0DAA0D;IAC1D,IAAI,CAAC,EAAa,EAAE,GAAqC;QACrD,IAAI,GAAG,EAAE,SAAS;YAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IACrD,CAAC;IAED,MAAM,CAAC,EAAa;QAChB,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClC,IAAI,KAAK,EAAE,MAAM;YAAE,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC3B,CAAC;IAED,8FAA8F;IAC9F,QAAQ,CAAC,EAAa;QAClB,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC;IACzC,CAAC;IAED,gFAAgF;IAChF,MAAM,CAAC,EAAa;QAChB,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACnB,CAAC;IAED,sGAAsG;IACtG,KAAK,CAAC,OAAO,CAAC,MAAe;QACzB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC;QACxB,IAAI,CAAC,IAAI,EAAE,UAAU;YAAE,OAAO;QAC9B,MAAM,MAAM,GAAoB,EAAE,CAAC;QACnC,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YACpC,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,QAAQ,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC;gBAAE,SAAS;YACxF,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC;YACtB,MAAM,CAAC,IAAI,CACP,CAAC,KAAK,IAAI,EAAE;gBACR,IAAI,KAAc,CAAC;gBACnB,IAAI,CAAC;oBACD,KAAK,GAAG,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,UAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;gBAClD,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACX,MAAM,CAAC,IAAI,CAAC,qDAAqD,EAAG,GAAa,EAAE,OAAO,IAAI,GAAG,CAAC,CAAC;oBACnG,KAAK,GAAG,KAAK,CAAC;gBAClB,CAAC;gBACD,KAAK,CAAC,QAAQ,GAAG,KAAK,CAAC;gBACvB,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,KAAK;oBAAE,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;YAC7E,CAAC,CAAC,EAAE,CACP,CAAC;QACN,CAAC;QACD,MAAM,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;IAED,OAAO;QACH,IAAI,CAAC,YAAY,EAAE,EAAE,CAAC;QACtB,IAAI,CAAC,YAAY,GAAG,SAAS,CAAC;QAC9B,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;YACvC,IAAI,KAAK,CAAC,MAAM;gBAAE,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACjD,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;IAEO,cAAc,CAAC,KAA4B;QAC/C,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YACjC,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBACzC,IAAI,KAAK,CAAC,GAAG,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;oBAAE,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACxF,CAAC;QACL,CAAC;aAAM,CAAC;YACJ,KAAK,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACpC,CAAC;IACL,CAAC;IAED,+FAA+F;IACvF,KAAK,CAAC,EAAa,EAAE,KAAY,EAAE,WAAoB;QAC3D,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,IAAI,CAAC,WAAW,EAAE,CAAC;YAC3C,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACf,OAAO;QACX,CAAC;QACD,IAAI,KAAK,CAAC,MAAM;YAAE,OAAO;QACzB,KAAK,CAAC,MAAM,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,aAAa,CAAC,CAAC;QAC/D,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC;IAC3B,CAAC;IAEO,KAAK,CAAC,EAAa;QACvB,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAChB,IAAI,EAAE,CAAC,UAAU,KAAK,cAAS,CAAC,IAAI,IAAI,EAAE,CAAC,UAAU,KAAK,cAAS,CAAC,UAAU,EAAE,CAAC;YAC7E,IAAI,CAAC;gBACD,EAAE,CAAC,KAAK,CAAC,gCAAwB,EAAE,4BAAoB,CAAC,CAAC;YAC7D,CAAC;YAAC,MAAM,CAAC;gBACL,EAAE,CAAC,SAAS,EAAE,CAAC;YACnB,CAAC;QACL,CAAC;IACL,CAAC;CACJ;AAvGD,kDAuGC"}

package/dist/src/utils/logger.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Simple structured logger with category prefixes.
+ */
+export interface Logger {
+    debug(message: string, ...args: unknown[]): void;
+    info(message: string, ...args: unknown[]): void;
+    warn(message: string, ...args: unknown[]): void;
+    error(message: string, ...args: unknown[]): void;
+}
+export declare function createLogger(category: string): Logger;
+//# sourceMappingURL=logger.d.ts.map

package/dist/src/utils/logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../../src/utils/logger.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,WAAW,MAAM;IACnB,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IACjD,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAChD,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAChD,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;CACpD;AAED,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAQrD"}

package/dist/src/utils/logger.js

@@ -0,0 +1,13 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createLogger = createLogger;
+function createLogger(category) {
+    const prefix = `[${category}]`;
+    return {
+        debug: (msg, ...args) => console.debug(`${prefix} ${msg}`, ...args),
+        info: (msg, ...args) => console.log(`${prefix} ${msg}`, ...args),
+        warn: (msg, ...args) => console.warn(`${prefix} ${msg}`, ...args),
+        error: (msg, ...args) => console.error(`${prefix} ${msg}`, ...args),
+    };
+}
+//# sourceMappingURL=logger.js.map

package/dist/src/utils/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../../src/utils/logger.ts"],"names":[],"mappings":";;AAUA,oCAQC;AARD,SAAgB,YAAY,CAAC,QAAgB;IACzC,MAAM,MAAM,GAAG,IAAI,QAAQ,GAAG,CAAC;IAC/B,OAAO;QACH,KAAK,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,MAAM,IAAI,GAAG,EAAE,EAAE,GAAG,IAAI,CAAC;QACnE,IAAI,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,GAAG,EAAE,EAAE,GAAG,IAAI,CAAC;QAChE,IAAI,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,GAAG,EAAE,EAAE,GAAG,IAAI,CAAC;QACjE,KAAK,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,MAAM,IAAI,GAAG,EAAE,EAAE,GAAG,IAAI,CAAC;KACtE,CAAC;AACN,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@qodalis/cli-server-node",
-    "version": "1.0.0-beta.4",
+    "version": "1.0.0-beta.6",
     "description": "Node.js CLI server for Qodalis CLI ecosystem — use as a library in existing Express apps or run standalone",
     "main": "dist/src/index.js",
     "types": "dist/src/index.d.ts",
@@ -38,6 +38,7 @@
     "homepage": "https://qodalis.com/",
     "dependencies": {
         "@qodalis/cli-server-abstractions": "file:packages/abstractions",
+        "@qodalis/cli-server-plugin-data-explorer": "file:plugins/data-explorer",
         "@qodalis/cli-server-plugin-filesystem": "file:plugins/filesystem",
         "@qodalis/cli-server-plugin-jobs": "file:plugins/jobs",
         "cors": "^2.8.5",
@@ -47,17 +48,25 @@
         "ws": "^8.18.0"
     },
     "optionalDependencies": {
+        "@elastic/elasticsearch": "^8.16.0",
         "@qodalis/cli-server-plugin-filesystem-json": "file:plugins/filesystem-json",
         "@qodalis/cli-server-plugin-filesystem-s3": "file:plugins/filesystem-s3",
         "@qodalis/cli-server-plugin-filesystem-sqlite": "file:plugins/filesystem-sqlite",
-        "better-sqlite3": "^11.0.0"
+        "better-sqlite3": "^11.10.0",
+        "ioredis": "^5.4.0",
+        "mongodb": "^6.0.0",
+        "mssql": "^11.0.0",
+        "mysql2": "^3.11.0",
+        "pg": "^8.13.0"
     },
     "devDependencies": {
-        "@types/better-sqlite3": "^7.6.0",
+        "@types/better-sqlite3": "^7.6.13",
         "@types/cors": "^2.8.17",
         "@types/express": "^4.17.21",
+        "@types/mssql": "^9.1.9",
         "@types/multer": "^2.0.0",
         "@types/node": "^22.0.0",
+        "@types/pg": "^8.0.0",
         "@types/supertest": "^7.2.0",
         "@types/ws": "^8.5.13",
         "supertest": "^7.2.2",

package/dist/src/controllers/cli-controller-v2.d.ts

@@ -1,4 +0,0 @@
-import { Router } from 'express';
-import { ICliCommandRegistry, ICliCommandExecutorService } from '../services';
-export declare function createCliControllerV2(registry: ICliCommandRegistry, executor: ICliCommandExecutorService): Router;
-//# sourceMappingURL=cli-controller-v2.d.ts.map

package/dist/src/controllers/cli-controller-v2.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"cli-controller-v2.d.ts","sourceRoot":"","sources":["../../../src/controllers/cli-controller-v2.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAGjC,OAAO,EAAE,mBAAmB,EAAE,0BAA0B,EAAE,MAAM,aAAa,CAAC;AAI9E,wBAAgB,qBAAqB,CACjC,QAAQ,EAAE,mBAAmB,EAC7B,QAAQ,EAAE,0BAA0B,GACrC,MAAM,CAqBR"}