@xopcai/xopc 0.0.415 → 0.0.417

package/dist/src/gateway/service/run-gateway-agent.js

@@ -5,10 +5,10 @@ import { parseTurnOutcome } from "../../../packages/gateway-contract/src/turn-ou
 import { init_src } from "../../../packages/gateway-contract/src/index.js";
 import { findSessionInputByRunId, init_session_input_repository, listTaskUpdateTriggers } from "../../storage/sqlite/session-input-repository.js";
 import { TaskRunRepository, init_task_run_repository } from "../../tasks/task-run-repository.js";
-import { init_clarification_wait_repository, isClarificationSuspended } from "../../storage/sqlite/clarification-wait-repository.js";
+import { isClarificationSuspended } from "../../storage/sqlite/clarification-wait-repository.js";
 import { updateInteractionStateFromMessage } from "../../storage/sqlite/interaction-state-repository.js";
 import { getConnectionResumeInput, init_connection_wait_repository, isConnectionSuspended } from "../../storage/sqlite/connection-wait-repository.js";
-import { init_sqlite } from "../../storage/sqlite/index.js";
+import "../../storage/sqlite/index.js";
 import { getConversationRouting } from "../../storage/sqlite/conversation-repository.js";
 import { init_session_key } from "../../routing/session-key.js";
 import { resolveAgentTurnTimeoutMs } from "../../agent/orchestration/run-agent-turn-with-timeout.js";
@@ -28,12 +28,10 @@ import { describeActiveExecution } from "./active-execution.js";
 import crypto from "crypto";
 //#region src/gateway/service/run-gateway-agent.ts
 init_connection_wait_repository();
-init_clarification_wait_repository();
 init_src();
 init_logger();
 init_session_key();
 init_task_run_repository();
-init_sqlite();
 init_session_input_repository();
 const log = createLogger("Gateway:Service");
 /**

package/dist/src/gateway/service/session-input-coordinator.js

@@ -4,11 +4,11 @@ import { getSqliteDatabase, init_transaction, runSqliteWriteTransaction } from "
 import { init_session_instance_repository, readCurrentTranscriptId } from "../../storage/sqlite/session-instance-repository.js";
 import { SessionInstanceChangedError, cancelQueuedSessionInput, claimNextSessionInput, findSessionInput, findSessionInputByRunId, finishSessionInputRun, getSessionInputById, getSessionInputState, init_session_input_repository, insertSessionInput, mutateQueuedSessionInput, recoverSessionInputState, setSessionInputStatus } from "../../storage/sqlite/session-input-repository.js";
 import { TaskRunRepository, init_task_run_repository } from "../../tasks/task-run-repository.js";
-import { consumeClarificationResume, getActiveClarification, init_clarification_wait_repository, supersedeActiveClarification } from "../../storage/sqlite/clarification-wait-repository.js";
+import { consumeClarificationResume, getActiveClarification, supersedeActiveClarification } from "../../storage/sqlite/clarification-wait-repository.js";
 import { replaceLatestSessionTurnAndQueueInput, validateLatestSessionTurnTarget } from "../../storage/sqlite/session-turn-replace-repository.js";
 import { cancelConnectionObjective, consumeConnectionResume, getActiveConnectionWait, getConnectionWait, hasPendingConnectionMessages, init_connection_wait_repository, interruptedConnectionMessage, publishConnectionWait, reconcileConnectionWaits } from "../../storage/sqlite/connection-wait-repository.js";
-import { appendTranscriptEntry, init_transcript_repository } from "../../storage/sqlite/transcript-repository.js";
-import { init_sqlite } from "../../storage/sqlite/index.js";
+import { appendTranscriptEntry } from "../../storage/sqlite/transcript-repository.js";
+import "../../storage/sqlite/index.js";
 import { emitSessionTranscriptUpdate } from "../../session/transcript-events.js";
 import { summarizeSourceContext } from "../../agent/source-context/types.js";
 import { TaskApplicationService } from "../../tasks/task-application-service.js";
@@ -21,10 +21,7 @@ import { isDeepStrictEqual } from "node:util";
 init_session_input_repository();
 init_connection_wait_repository();
 init_transaction();
-init_transcript_repository();
 init_session_instance_repository();
-init_clarification_wait_repository();
-init_sqlite();
 init_logger();
 init_task_run_repository();
 const log = createLogger("SessionInputCoordinator");

package/dist/src/gateway/service.d.ts

@@ -1,3 +1,4 @@
+import { BrowserSetupService } from '../browser/setup/service.js';
 import type { ClarificationSubmission } from '@xopcai/gateway-contract';
 import { PhoneStreamGateway } from '../phone/stream-gateway.js';
 import { WorkDiscoveryService } from '../work-discovery/service.js';
@@ -60,6 +61,10 @@ export declare class GatewayService {
     readonly voiceRealtime: VoiceRealtimeRuntime;
     getConfig(): Config;
     getModelCatalogSync(): ModelCatalogSyncService;
+    private _phoneSetup?;
+    get phoneSetup(): import("../phone/setup/service.js").PhoneSetupService;
+    private _browserSetup?;
+    get browserSetup(): BrowserSetupService;
     get browserAutomations(): BrowserAutomationService;
     private stopGatewayUpdateCheck;
     /** When set (e.g. by `GatewayServer`), `triggerGatewayProcessRestart` can stop HTTP then exit. */

package/dist/src/gateway/service.js

@@ -7,19 +7,19 @@ import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
 import { closeXopcDatabase } from "../storage/sqlite/connection.js";
 import { getSqliteDatabase, init_transaction } from "../storage/sqlite/transaction.js";
-import { getBrowserTabBindingById, init_browser_tab_binding_repository } from "../storage/sqlite/browser-tab-binding-repository.js";
+import { getBrowserTabBindingById } from "../storage/sqlite/browser-tab-binding-repository.js";
 import { buckets } from "./rate-limit/buckets.js";
-import { init_host, resolveEffectiveGatewayPort } from "./host.js";
+import { resolveEffectiveGatewayPort } from "./host.js";
 import { isGatewayStrictSecurityEnabled } from "./rate-limit/env-flags.js";
-import { init_rate_limit } from "./rate-limit/index.js";
+import "./rate-limit/index.js";
 import { bumpSessionInputRevision, findSessionInput, init_session_input_repository, insertSessionInput } from "../storage/sqlite/session-input-repository.js";
 import { TaskRepository } from "../tasks/task-repository.js";
 import { TaskRunRepository, init_task_run_repository } from "../tasks/task-run-repository.js";
 import { init_changes, notifyUserContextChange } from "../user-context/changes.js";
 import { getSessionMetadata } from "../storage/sqlite/session-read-repository.js";
 import { init_session_repository, listSessionMetadata, patchSessionMetadata } from "../storage/sqlite/session-repository.js";
-import { getSessionConfig, init_config_repository } from "../storage/sqlite/config-repository.js";
-import { init_sqlite } from "../storage/sqlite/index.js";
+import { getSessionConfig } from "../storage/sqlite/config-repository.js";
+import "../storage/sqlite/index.js";
 import { init_agent_scope, listAgentEntries, resolveAgentWorkspaceDir, resolveDefaultAgentId } from "../agent/agent-scope.js";
 import { init_paths, resolveConfigPath, resolveExtensionsDir } from "../config/paths.js";
 import { init_config, resolveKnowledgeReadPolicy } from "../user-context/config.js";
@@ -29,7 +29,7 @@ import { init_session_key, resolveConversationId, sanitizeSegment } from "../rou
 import { listKnowledgeItems } from "../knowledge-memory/repository.js";
 import "../knowledge-memory/index.js";
 import { getDefaultAgentId, init_resolve_route } from "../routing/resolve-route.js";
-import { resolveEffectiveAgentProfileForSession } from "../config/agent-profile.js";
+import { resolveEffectiveAgentConfigForAgent, resolveEffectiveAgentProfileForSession } from "../config/agent-profile.js";
 import { prewarmModelRegistry } from "../providers/model-registry.js";
 import { init_providers, providers_exports } from "../providers/index.js";
 import { AI_USAGE_RETENTION_MS, markStaleAiUsageEventsUnknown, pruneAiUsageEvents } from "../storage/sqlite/ai-usage-repository.js";
@@ -87,6 +87,13 @@ import { ChatPreviewService } from "../chat-previews/service.js";
 import "../chat-previews/index.js";
 import { configureGatewayHttpProxy } from "../infra/http-proxy-env.js";
 import "../config/index.js";
+import { ManagedComposioEventPoller } from "../connectors/composio-managed-events.js";
+import { startConnectedKnowledgeCoordinator } from "../knowledge/coordinator.js";
+import "../knowledge/index.js";
+import { PersonalReplyComposer } from "../personal-agent/reply-composer.js";
+import { ConnectionRecoveryService } from "../connectors/connection-recovery-service.js";
+import { startConnectorLearningCoordinator } from "../connectors/learning-coordinator.js";
+import { startConnectorSupervisor } from "../connectors/supervisor.js";
 import { DiscussionService } from "../discussions/service.js";
 import { DiscussionOrganizer } from "../discussions/organizer.js";
 import { DiscussionLiveWorker } from "../discussions/live-worker.js";
@@ -95,15 +102,13 @@ import { DiscussionSealer } from "../discussions/sealer.js";
 import "../discussions/index.js";
 import { EndpointToolRuntime } from "../endpoint-tools/runtime.js";
 import "../endpoint-tools/index.js";
-import { HomeCapabilityPreflightService } from "../home-intelligence/capability-preflight.js";
-import { HomeAdviceGenerator } from "../home-intelligence/generator.js";
-import { HomeIntelligenceHost } from "../home-intelligence/host.js";
-import { HomeSnapshotBuilder } from "../home-intelligence/snapshot.js";
 import { assertGatewayAuthConfigured, extractToken, resolveGatewayAuth, validateToken } from "./auth.js";
 import { prepareAutomationAgentSession } from "./automation-agent-session.js";
 import { stopTailscaleExposure } from "./tailscale-lifecycle.js";
 import { getGatewayFileSpaceService } from "./file-space-service.js";
 import { reconcileHomeIntelligenceAutomation } from "./home-intelligence-automation-reconciler.js";
+import { createPhoneSetupService } from "./hono/routes/phone-setup.js";
+import { BrowserSetupService } from "../browser/setup/service.js";
 import { PhoneStreamGateway } from "../phone/stream-gateway.js";
 import { PersonalProactivityService } from "../personal-agent/proactivity/service.js";
 import { reconcilePersonalProactivityAutomation } from "../personal-agent/proactivity/automation.js";
@@ -112,8 +117,6 @@ import { buildFileAgentContext } from "../agent/source-context/file-context.js";
 import { buildSessionAgentContext } from "../agent/source-context/session-context.js";
 import { buildBrowserTabAgentContext } from "../agent/source-context/browser-tab.js";
 import { WorkDiscoveryService } from "../work-discovery/service.js";
-import { PersonalReplyComposer } from "../personal-agent/reply-composer.js";
-import { ConnectionRecoveryService } from "../connectors/connection-recovery-service.js";
 import { buildVoiceMemoryContext } from "../voice/realtime/memory-context.js";
 import { buildVoicePersonaContext } from "../voice/realtime/persona-context.js";
 import { voiceMemoryBudget, voicePersonaBudget } from "../voice/realtime/conversation-context.js";
@@ -151,10 +154,6 @@ import { DurableVoiceAgentBroker } from "../voice/realtime/agentBroker.js";
 import { reconcileMemoryMaintenanceAutomations } from "./memory-maintenance-automation-reconciler.js";
 import { GatewayReadiness } from "./startup-readiness.js";
 import { createGatewayStartupTrace } from "./startup-trace.js";
-import { startConnectorSupervisor } from "../connectors/supervisor.js";
-import { startConnectedKnowledgeCoordinator } from "../knowledge/coordinator.js";
-import "../knowledge/index.js";
-import { startConnectorLearningCoordinator } from "../connectors/learning-coordinator.js";
 import { TaskCollaborationDelivery } from "../tasks/task-collaboration-delivery.js";
 import { TaskMainUpdateExhaustedError } from "../tasks/task-main-update-retry.js";
 import { TaskMainUpdateDelivery } from "../tasks/task-main-update-delivery.js";
@@ -162,20 +161,19 @@ import { allowsPersonalTaskNotification, personalReplyNotification, personalRunD
 import { TaskMainUpdateDecisionService } from "../tasks/task-main-update-decision-service.js";
 import { selectTaskMainUpdateAttempt, submitAndConfirmTaskMainUpdate } from "../tasks/task-main-update-input.js";
 import { checkAppContextAccess, prepareAppContext } from "./service/app-context-access.js";
-import { ManagedComposioEventPoller } from "../connectors/composio-managed-events.js";
 import { applyAutomaticVoiceLanguage, inferProductLanguageFromEnvironment, initializeVoiceDefaults } from "../voice/language-profile.js";
+import { HomeAdviceGenerator } from "../home-intelligence/generator.js";
+import { HomeIntelligenceHost } from "../home-intelligence/host.js";
+import { HomeSnapshotBuilder } from "../home-intelligence/snapshot.js";
+import { HomeCapabilityPreflightService } from "../home-intelligence/capability-preflight.js";
 import crypto from "node:crypto";
 //#region src/gateway/service.ts
 init_session_repository();
 init_agent_session_key();
-init_browser_tab_binding_repository();
 init_session_input_repository();
-init_config_repository();
 init_changes();
 init_agent_scope();
 init_schema();
-init_host();
-init_rate_limit();
 init_providers();
 init_logger();
 init_log_stream();
@@ -184,7 +182,6 @@ init_package_version();
 init_task_run_repository();
 init_resolve_route();
 init_session_key();
-init_sqlite();
 init_transaction();
 init_config();
 const log = createLogger("Gateway:Service");
@@ -303,6 +300,48 @@ var GatewayService = class {
 	getModelCatalogSync() {
 		return this.modelCatalogSync;
 	}
+	_phoneSetup;
+	get phoneSetup() {
+		return this._phoneSetup ??= createPhoneSetupService(this);
+	}
+	_browserSetup;
+	get browserSetup() {
+		return this._browserSetup ??= new BrowserSetupService({
+			verificationOrigin: () => `http://127.0.0.1:${this.getEffectiveListenPort()}`,
+			getConfig: () => this.currentConfig,
+			saveConfig: (next, expected) => this.saveConfig(next, expected),
+			endpoints: this.endpointTools,
+			canSwitchDriver: (conversationId) => !this._agentService?.hasBrowserSessions() && !this.agentRunner.listActiveRuns().some((run) => run.conversationId !== conversationId),
+			policyRevision: (agentId) => {
+				const effective = resolveEffectiveAgentConfigForAgent(agentId).config;
+				return crypto.createHash("sha256").update(JSON.stringify({
+					policy: effective.tools.browser_use,
+					allowlist: effective.toolAllowlist
+				})).digest("hex");
+			},
+			canUseBrowser: (agentId) => {
+				const effective = resolveEffectiveAgentConfigForAgent(agentId).config;
+				return effective.tools.browser_use?.mode !== "deny" && (!effective.toolAllowlist || effective.toolAllowlist.includes("browser_use"));
+			},
+			release: async (endpointId, sessionId) => (await new RealtimeExtensionBrowserProvider(this.endpointTools).send({
+				action: "close",
+				sessionId,
+				target: {
+					kind: "endpoint",
+					endpointId
+				}
+			})).result,
+			doctor: async () => (await import("../browser/providers/browser-ext-install.js")).browserExtDoctor(),
+			prepare: async () => {
+				const installer = await import("../browser/providers/browser-ext-install.js");
+				return {
+					files: await installer.ensureBrowserExtensionArtifacts(),
+					nativeHost: await installer.installBrowserNativeMessagingHost({ configPath: this.getHealth().configPath })
+				};
+			},
+			open: async (action) => (await import("../browser/providers/browser-ext-install.js")).openBrowserExtensionInstallUi({ action })
+		});
+	}
 	get browserAutomations() {
 		if (!this.browserAutomationService) this.browserAutomationService = createRuntimeBrowserAutomationService({
 			getConfig: () => this.config,
@@ -682,6 +721,9 @@ var GatewayService = class {
 			endpointTools: this.endpointTools,
 			getAutomationService: () => this.automationService,
 			getBrowserAutomationService: () => this.browserAutomations,
+			getBrowserSetupService: () => this.browserSetup,
+			getPhoneSetupService: () => this.phoneSetup,
+			canConfigureEndpoint: (endpointId) => this.realtime.canConfigureEndpoint(endpointId),
 			emitBrowserEvent: (type, payload) => this.emit(type, payload),
 			getNotesService: () => this.notesService,
 			getProjectService: () => this.projects,

package/dist/src/gateway/session-context-summary.js

@@ -1,11 +1,11 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
 import { getSqliteDatabase, init_transaction } from "../storage/sqlite/transaction.js";
-import { hasGatewayScope, init_gateway_scopes } from "./security/gateway-scopes.js";
+import { hasGatewayScope } from "./security/gateway-scopes.js";
 import { TaskRepository, init_task_repository } from "../tasks/task-repository.js";
 import { getSessionMetadata } from "../storage/sqlite/session-read-repository.js";
 import { getCurrentTranscriptId, init_session_repository } from "../storage/sqlite/session-repository.js";
-import { getSessionConfig, init_config_repository } from "../storage/sqlite/config-repository.js";
+import { getSessionConfig } from "../storage/sqlite/config-repository.js";
 import { runExec } from "../infra/exec.js";
 import { getExecutionEnvironmentForSession } from "../execution-environments/subject.js";
 import { effectiveWorkspacePathForSession } from "../session/session-workspace.js";
@@ -16,12 +16,10 @@ import { TaskCollaborationRepository } from "../tasks/task-collaboration-reposit
 import { isSessionSourceBinding } from "../agent/source-context/types.js";
 import { realpath, stat } from "node:fs/promises";
 //#region src/gateway/session-context-summary.ts
-init_config_repository();
 init_session_repository();
 init_transaction();
 init_task_repository();
 init_logger();
-init_gateway_scopes();
 const log = createLogger("SessionContextSummary");
 const SOURCE_LIMIT = 20;
 const RECENT_SOURCE_KINDS = new Set([

package/dist/src/gateway/tailscale-auth.js

@@ -1,7 +1,6 @@
-import { init_host, isLoopbackHost } from "./host.js";
+import { isLoopbackHost } from "./host.js";
 import { readTailscaleWhoisIdentity } from "../infra/tailscale.js";
 //#region src/gateway/tailscale-auth.ts
-init_host();
 function parseTailscaleAuthHeaders(headers) {
 	return {
 		forwardedFor: headers["x-forwarded-for"]?.split(",")[0]?.trim(),

package/dist/src/gateway/ws-security.js

@@ -1,10 +1,9 @@
-import { init_host, isLoopbackHost } from "./host.js";
+import { isLoopbackHost } from "./host.js";
 import net from "node:net";
 //#region src/gateway/ws-security.ts
 /**
 * WebSocket / gateway URL transport security (OpenClaw-aligned).
 */
-init_host();
 function isPrivateOrLoopbackHost(hostname) {
 	const host = hostname.trim().toLowerCase();
 	if (isLoopbackHost(host)) return true;

package/dist/src/gateway/xopc-cloud-capability-setup.js

@@ -1,13 +1,14 @@
 import "../agent-config/schema.js";
 import { init_agent_config } from "../agent-config/index.js";
 import { AgentCatalogRepository, init_repository } from "../agent-catalog/repository.js";
-import { AgentCatalogService } from "../agent-catalog/service.js";
 import { ConfigSchema, init_schema } from "../config/schema.js";
 import { init_model_policy, isComputerModel, isDedicatedComputerProfile } from "../computer/model-policy.js";
 import { voiceSupportsMode } from "../../packages/realtime-protocol/src/voice-catalog.js";
 import { init_voice } from "../../packages/realtime-protocol/src/voice.js";
 import { getModelCatalogStore, init_model_catalog_store } from "../providers/model-catalog-store.js";
+import { phoneModelProfile } from "../phone/model-adapter.js";
 import { compareCatalogModels } from "../providers/model-catalog-ranking.js";
+import { AgentCatalogService } from "../agent-catalog/service.js";
 import { prepareUpdateGlobalDefaults } from "./global-defaults-admin.js";
 //#region src/gateway/xopc-cloud-capability-setup.ts
 init_voice();
@@ -17,7 +18,7 @@ init_agent_config();
 init_repository();
 init_model_catalog_store();
 function supportsCapability(model, capability) {
-	if (model.availability !== "available" || isDedicatedComputerProfile(model.computerUse?.profile)) return false;
+	if (model.availability !== "available" || model.phoneUse || isDedicatedComputerProfile(model.computerUse?.profile)) return false;
 	if (capability === "chat") return model.kind === "language" && (model.operations.includes("chat.completions") || model.operations.includes("responses"));
 	if (capability === "vision") return model.kind === "language" && model.input.includes("image");
 	if (capability === "image-generation") return model.kind === "image" && model.operations.includes("images.generate");
@@ -100,6 +101,11 @@ function completeXopcCloudModelRoutes(models, source) {
 		api: source.api
 	})).sort((left, right) => compareCatalogModels(left, right))[0];
 	if (computer) next.computerUse ??= route(computer);
+	const phone = source.models.filter((model) => model.availability === "available" && phoneModelProfile({
+		...model,
+		api: source.api
+	})).sort((left, right) => compareCatalogModels(left, right, "phone"))[0];
+	if (phone) next.phoneUse ??= route(phone);
 	return next;
 }
 /** Build one atomic config update for the managed XOPC Cloud chat and media capabilities. */

package/dist/src/home-intelligence/host.js

@@ -1,10 +1,10 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
+import { HomeAdviceBudgetExceededError, isHomeProseLocalized } from "./generator.js";
 import { homePatternKey } from "./strategy.js";
+import { HomeAdvicePolicy } from "./policy.js";
 import { HomeIntelligenceRepository } from "./repository.js";
 import { HomeOpportunityApplicationService } from "./application-service.js";
-import { HomeAdvicePolicy } from "./policy.js";
-import { HomeAdviceBudgetExceededError, isHomeProseLocalized } from "./generator.js";
 import { buildHomeOpportunityNotification } from "./notification.js";
 import { createHash } from "node:crypto";
 //#region src/home-intelligence/host.ts

package/dist/src/imports/importService.js

@@ -11,8 +11,8 @@ import { scanLocal } from "./scanner.js";
 import { dirname, join } from "node:path";
 import { existsSync, lstatSync, mkdirSync, readFileSync, renameSync, rmSync, writeFileSync } from "node:fs";
 import { randomUUID } from "node:crypto";
-import yaml from "js-yaml";
 import lockfile from "proper-lockfile";
+import yaml from "js-yaml";
 //#region src/imports/importService.ts
 init_write_file_atomic();
 init_logger();

package/dist/src/infra/rate-limit/failure-limiter.js

@@ -1,86 +1,98 @@
-import { __esmMin } from "../../../_virtual/_rolldown/runtime.js";
-import { KeyedStore, init_keyed_store } from "./keyed-store.js";
+import { KeyedStore } from "./keyed-store.js";
 //#region src/infra/rate-limit/failure-limiter.ts
-var DEFAULT_BURST_COALESCE_MS, FailureLimiter;
-var init_failure_limiter = __esmMin((() => {
-	init_keyed_store();
-	DEFAULT_BURST_COALESCE_MS = 1e3;
-	FailureLimiter = class {
-		store;
-		clock;
-		maxFailures;
-		windowMs;
-		blockDurationMs;
-		burstCoalesceMs;
-		constructor(cfg) {
-			this.maxFailures = Math.max(1, Math.floor(cfg.maxFailures));
-			this.windowMs = Math.max(1e3, Math.floor(cfg.windowMs));
-			this.blockDurationMs = Math.max(1e3, Math.floor(cfg.blockDurationMs));
-			this.burstCoalesceMs = Math.max(0, Math.floor(cfg.burstCoalesceMs ?? DEFAULT_BURST_COALESCE_MS));
-			this.clock = cfg.clock ?? Date.now;
-			this.store = new KeyedStore({
-				staleAfterMs: cfg.staleAfterMs ?? this.windowMs + this.blockDurationMs,
-				clock: this.clock
-			});
+/**
+* Per-key brute-force protection limiter.
+*
+* Semantics:
+*   - `fail(key)` records a failed attempt; reaching `maxFailures` within
+*     `windowMs` triggers a `blockDurationMs` lockout.
+*   - `succeed(key)` clears all state for the key (a successful auth wipes the
+*     bucket so legitimate users aren't punished for prior typos).
+*   - `check(key)` is read-only — returns the current block status.
+*   - Failures from the same key within `burstCoalesceMs` collapse to a single
+*     attempt. This absorbs SPA fan-out / SDK auto-retry storms without
+*     weakening protection: a deliberate attacker is rate-limited to ~1
+*     attempt/s per key, still astronomically slow against any token of
+*     meaningful entropy.
+*
+* Pure counter — no policy knowledge (loopback exemption, key formatting,
+* etc. all live in the policy layer that calls into this limiter).
+*/
+const DEFAULT_BURST_COALESCE_MS = 1e3;
+var FailureLimiter = class {
+	store;
+	clock;
+	maxFailures;
+	windowMs;
+	blockDurationMs;
+	burstCoalesceMs;
+	constructor(cfg) {
+		this.maxFailures = Math.max(1, Math.floor(cfg.maxFailures));
+		this.windowMs = Math.max(1e3, Math.floor(cfg.windowMs));
+		this.blockDurationMs = Math.max(1e3, Math.floor(cfg.blockDurationMs));
+		this.burstCoalesceMs = Math.max(0, Math.floor(cfg.burstCoalesceMs ?? DEFAULT_BURST_COALESCE_MS));
+		this.clock = cfg.clock ?? Date.now;
+		this.store = new KeyedStore({
+			staleAfterMs: cfg.staleAfterMs ?? this.windowMs + this.blockDurationMs,
+			clock: this.clock
+		});
+	}
+	check(key) {
+		const now = this.clock();
+		const state = this.store.get(key);
+		if (!state?.blockedUntil) return { blocked: false };
+		if (now >= state.blockedUntil) {
+			state.blockedUntil = void 0;
+			state.count = 0;
+			state.windowStart = now;
+			state.lastTouchedMs = now;
+			return { blocked: false };
 		}
-		check(key) {
-			const now = this.clock();
-			const state = this.store.get(key);
-			if (!state?.blockedUntil) return { blocked: false };
-			if (now >= state.blockedUntil) {
-				state.blockedUntil = void 0;
-				state.count = 0;
-				state.windowStart = now;
-				state.lastTouchedMs = now;
-				return { blocked: false };
-			}
-			return {
-				blocked: true,
-				retryAfterSec: Math.max(1, Math.ceil((state.blockedUntil - now) / 1e3))
+		return {
+			blocked: true,
+			retryAfterSec: Math.max(1, Math.ceil((state.blockedUntil - now) / 1e3))
+		};
+	}
+	fail(key) {
+		const now = this.clock();
+		let state = this.store.get(key);
+		if (!state) {
+			state = {
+				windowStart: now,
+				count: 0,
+				lastTouchedMs: now
 			};
+			this.store.set(key, state);
 		}
-		fail(key) {
-			const now = this.clock();
-			let state = this.store.get(key);
-			if (!state) {
-				state = {
-					windowStart: now,
-					count: 0,
-					lastTouchedMs: now
-				};
-				this.store.set(key, state);
-			}
-			state.lastTouchedMs = now;
-			if (state.blockedUntil && now < state.blockedUntil) return;
-			if (state.blockedUntil && now >= state.blockedUntil) {
-				state.blockedUntil = void 0;
-				state.count = 0;
-				state.windowStart = now;
-			}
-			if (now - state.windowStart > this.windowMs) {
-				state.count = 0;
-				state.windowStart = now;
-			}
-			if (state.lastFailureAtMs !== void 0 && now - state.lastFailureAtMs < this.burstCoalesceMs) {
-				state.lastFailureAtMs = now;
-				return;
-			}
-			state.lastFailureAtMs = now;
-			state.count += 1;
-			if (state.count >= this.maxFailures) state.blockedUntil = now + this.blockDurationMs;
+		state.lastTouchedMs = now;
+		if (state.blockedUntil && now < state.blockedUntil) return;
+		if (state.blockedUntil && now >= state.blockedUntil) {
+			state.blockedUntil = void 0;
+			state.count = 0;
+			state.windowStart = now;
 		}
-		succeed(key) {
-			this.store.delete(key);
+		if (now - state.windowStart > this.windowMs) {
+			state.count = 0;
+			state.windowStart = now;
 		}
-		/** @internal Test hook. */
-		resetForTests() {
-			this.store.clear();
-		}
-		destroy() {
-			this.store.destroy();
+		if (state.lastFailureAtMs !== void 0 && now - state.lastFailureAtMs < this.burstCoalesceMs) {
+			state.lastFailureAtMs = now;
+			return;
 		}
-	};
-}));
+		state.lastFailureAtMs = now;
+		state.count += 1;
+		if (state.count >= this.maxFailures) state.blockedUntil = now + this.blockDurationMs;
+	}
+	succeed(key) {
+		this.store.delete(key);
+	}
+	/** @internal Test hook. */
+	resetForTests() {
+		this.store.clear();
+	}
+	destroy() {
+		this.store.destroy();
+	}
+};
 //#endregion
-init_failure_limiter();
-export { FailureLimiter, init_failure_limiter };
+export { FailureLimiter };

package/dist/src/infra/rate-limit/index.js

@@ -1,11 +1,3 @@
-import { __esmMin } from "../../../_virtual/_rolldown/runtime.js";
-import { RateLimiter, init_rate_limiter } from "./rate-limiter.js";
-import { FailureLimiter, init_failure_limiter } from "./failure-limiter.js";
-//#region src/infra/rate-limit/index.ts
-var init_rate_limit = __esmMin((() => {
-	init_rate_limiter();
-	init_failure_limiter();
-}));
-//#endregion
-init_rate_limit();
-export { FailureLimiter, RateLimiter, init_rate_limit };
+import { RateLimiter } from "./rate-limiter.js";
+import { FailureLimiter } from "./failure-limiter.js";
+export { FailureLimiter, RateLimiter };