@xopcai/xopc 0.0.416 → 0.0.418

package/dist/src/gateway/service/run-gateway-agent.js

@@ -5,10 +5,10 @@ import { parseTurnOutcome } from "../../../packages/gateway-contract/src/turn-ou
 import { init_src } from "../../../packages/gateway-contract/src/index.js";
 import { findSessionInputByRunId, init_session_input_repository, listTaskUpdateTriggers } from "../../storage/sqlite/session-input-repository.js";
 import { TaskRunRepository, init_task_run_repository } from "../../tasks/task-run-repository.js";
-import { init_clarification_wait_repository, isClarificationSuspended } from "../../storage/sqlite/clarification-wait-repository.js";
+import { isClarificationSuspended } from "../../storage/sqlite/clarification-wait-repository.js";
 import { updateInteractionStateFromMessage } from "../../storage/sqlite/interaction-state-repository.js";
 import { getConnectionResumeInput, init_connection_wait_repository, isConnectionSuspended } from "../../storage/sqlite/connection-wait-repository.js";
-import { init_sqlite } from "../../storage/sqlite/index.js";
+import "../../storage/sqlite/index.js";
 import { getConversationRouting } from "../../storage/sqlite/conversation-repository.js";
 import { init_session_key } from "../../routing/session-key.js";
 import { resolveAgentTurnTimeoutMs } from "../../agent/orchestration/run-agent-turn-with-timeout.js";
@@ -28,12 +28,10 @@ import { describeActiveExecution } from "./active-execution.js";
 import crypto from "crypto";
 //#region src/gateway/service/run-gateway-agent.ts
 init_connection_wait_repository();
-init_clarification_wait_repository();
 init_src();
 init_logger();
 init_session_key();
 init_task_run_repository();
-init_sqlite();
 init_session_input_repository();
 const log = createLogger("Gateway:Service");
 /**

package/dist/src/gateway/service/session-input-coordinator.js

@@ -4,11 +4,11 @@ import { getSqliteDatabase, init_transaction, runSqliteWriteTransaction } from "
 import { init_session_instance_repository, readCurrentTranscriptId } from "../../storage/sqlite/session-instance-repository.js";
 import { SessionInstanceChangedError, cancelQueuedSessionInput, claimNextSessionInput, findSessionInput, findSessionInputByRunId, finishSessionInputRun, getSessionInputById, getSessionInputState, init_session_input_repository, insertSessionInput, mutateQueuedSessionInput, recoverSessionInputState, setSessionInputStatus } from "../../storage/sqlite/session-input-repository.js";
 import { TaskRunRepository, init_task_run_repository } from "../../tasks/task-run-repository.js";
-import { consumeClarificationResume, getActiveClarification, init_clarification_wait_repository, supersedeActiveClarification } from "../../storage/sqlite/clarification-wait-repository.js";
+import { consumeClarificationResume, getActiveClarification, supersedeActiveClarification } from "../../storage/sqlite/clarification-wait-repository.js";
 import { replaceLatestSessionTurnAndQueueInput, validateLatestSessionTurnTarget } from "../../storage/sqlite/session-turn-replace-repository.js";
 import { cancelConnectionObjective, consumeConnectionResume, getActiveConnectionWait, getConnectionWait, hasPendingConnectionMessages, init_connection_wait_repository, interruptedConnectionMessage, publishConnectionWait, reconcileConnectionWaits } from "../../storage/sqlite/connection-wait-repository.js";
-import { appendTranscriptEntry, init_transcript_repository } from "../../storage/sqlite/transcript-repository.js";
-import { init_sqlite } from "../../storage/sqlite/index.js";
+import { appendTranscriptEntry } from "../../storage/sqlite/transcript-repository.js";
+import "../../storage/sqlite/index.js";
 import { emitSessionTranscriptUpdate } from "../../session/transcript-events.js";
 import { summarizeSourceContext } from "../../agent/source-context/types.js";
 import { TaskApplicationService } from "../../tasks/task-application-service.js";
@@ -21,10 +21,7 @@ import { isDeepStrictEqual } from "node:util";
 init_session_input_repository();
 init_connection_wait_repository();
 init_transaction();
-init_transcript_repository();
 init_session_instance_repository();
-init_clarification_wait_repository();
-init_sqlite();
 init_logger();
 init_task_run_repository();
 const log = createLogger("SessionInputCoordinator");

package/dist/src/gateway/service.js

@@ -7,19 +7,19 @@ import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
 import { closeXopcDatabase } from "../storage/sqlite/connection.js";
 import { getSqliteDatabase, init_transaction } from "../storage/sqlite/transaction.js";
-import { getBrowserTabBindingById, init_browser_tab_binding_repository } from "../storage/sqlite/browser-tab-binding-repository.js";
+import { getBrowserTabBindingById } from "../storage/sqlite/browser-tab-binding-repository.js";
 import { buckets } from "./rate-limit/buckets.js";
-import { init_host, resolveEffectiveGatewayPort } from "./host.js";
+import { resolveEffectiveGatewayPort } from "./host.js";
 import { isGatewayStrictSecurityEnabled } from "./rate-limit/env-flags.js";
-import { init_rate_limit } from "./rate-limit/index.js";
+import "./rate-limit/index.js";
 import { bumpSessionInputRevision, findSessionInput, init_session_input_repository, insertSessionInput } from "../storage/sqlite/session-input-repository.js";
 import { TaskRepository } from "../tasks/task-repository.js";
 import { TaskRunRepository, init_task_run_repository } from "../tasks/task-run-repository.js";
 import { init_changes, notifyUserContextChange } from "../user-context/changes.js";
 import { getSessionMetadata } from "../storage/sqlite/session-read-repository.js";
 import { init_session_repository, listSessionMetadata, patchSessionMetadata } from "../storage/sqlite/session-repository.js";
-import { getSessionConfig, init_config_repository } from "../storage/sqlite/config-repository.js";
-import { init_sqlite } from "../storage/sqlite/index.js";
+import { getSessionConfig } from "../storage/sqlite/config-repository.js";
+import "../storage/sqlite/index.js";
 import { init_agent_scope, listAgentEntries, resolveAgentWorkspaceDir, resolveDefaultAgentId } from "../agent/agent-scope.js";
 import { init_paths, resolveConfigPath, resolveExtensionsDir } from "../config/paths.js";
 import { init_config, resolveKnowledgeReadPolicy } from "../user-context/config.js";
@@ -83,10 +83,15 @@ import { bootstrapApplicationStateSync } from "../bootstrap/application-state.js
 import { setPairingBroadcastSink } from "../channels/pairing/pairing-events.js";
 import { registerClarificationChannelRuntime } from "./clarify-runtime.js";
 import { ChannelManager } from "../channels/manager.js";
-import { ChatPreviewService } from "../chat-previews/service.js";
-import "../chat-previews/index.js";
 import { configureGatewayHttpProxy } from "../infra/http-proxy-env.js";
 import "../config/index.js";
+import { ManagedComposioEventPoller } from "../connectors/composio-managed-events.js";
+import { startConnectedKnowledgeCoordinator } from "../knowledge/coordinator.js";
+import "../knowledge/index.js";
+import { PersonalReplyComposer } from "../personal-agent/reply-composer.js";
+import { ConnectionRecoveryService } from "../connectors/connection-recovery-service.js";
+import { startConnectorLearningCoordinator } from "../connectors/learning-coordinator.js";
+import { startConnectorSupervisor } from "../connectors/supervisor.js";
 import { DiscussionService } from "../discussions/service.js";
 import { DiscussionOrganizer } from "../discussions/organizer.js";
 import { DiscussionLiveWorker } from "../discussions/live-worker.js";
@@ -95,13 +100,6 @@ import { DiscussionSealer } from "../discussions/sealer.js";
 import "../discussions/index.js";
 import { EndpointToolRuntime } from "../endpoint-tools/runtime.js";
 import "../endpoint-tools/index.js";
-import { ManagedComposioEventPoller } from "../connectors/composio-managed-events.js";
-import { startConnectedKnowledgeCoordinator } from "../knowledge/coordinator.js";
-import "../knowledge/index.js";
-import { PersonalReplyComposer } from "../personal-agent/reply-composer.js";
-import { ConnectionRecoveryService } from "../connectors/connection-recovery-service.js";
-import { startConnectorLearningCoordinator } from "../connectors/learning-coordinator.js";
-import { startConnectorSupervisor } from "../connectors/supervisor.js";
 import { assertGatewayAuthConfigured, extractToken, resolveGatewayAuth, validateToken } from "./auth.js";
 import { prepareAutomationAgentSession } from "./automation-agent-session.js";
 import { stopTailscaleExposure } from "./tailscale-lifecycle.js";
@@ -135,6 +133,8 @@ import { getXopcCloudCatalogCoordinator } from "../providers/xopc-cloud-catalog-
 import { ModelCatalogSyncService } from "../providers/model-catalog-sync-service.js";
 import { NotificationService } from "../notifications/service.js";
 import "../local-apps/index.js";
+import { ChatPreviewService } from "../chat-previews/service.js";
+import "../chat-previews/index.js";
 import { TaskAllocationDispatcher } from "../tasks/task-allocation-service.js";
 import { TaskResultDeliveryService } from "../tasks/task-result-delivery-service.js";
 import { createRuntimeBrowserAutomationService } from "../browser/automations/runtime-service.js";
@@ -170,14 +170,10 @@ import crypto from "node:crypto";
 //#region src/gateway/service.ts
 init_session_repository();
 init_agent_session_key();
-init_browser_tab_binding_repository();
 init_session_input_repository();
-init_config_repository();
 init_changes();
 init_agent_scope();
 init_schema();
-init_host();
-init_rate_limit();
 init_providers();
 init_logger();
 init_log_stream();
@@ -186,7 +182,6 @@ init_package_version();
 init_task_run_repository();
 init_resolve_route();
 init_session_key();
-init_sqlite();
 init_transaction();
 init_config();
 const log = createLogger("Gateway:Service");
@@ -312,6 +307,7 @@ var GatewayService = class {
 	_browserSetup;
 	get browserSetup() {
 		return this._browserSetup ??= new BrowserSetupService({
+			verificationOrigin: () => `http://127.0.0.1:${this.getEffectiveListenPort()}`,
 			getConfig: () => this.currentConfig,
 			saveConfig: (next, expected) => this.saveConfig(next, expected),
 			endpoints: this.endpointTools,
@@ -727,6 +723,7 @@ var GatewayService = class {
 			getBrowserAutomationService: () => this.browserAutomations,
 			getBrowserSetupService: () => this.browserSetup,
 			getPhoneSetupService: () => this.phoneSetup,
+			canConfigureEndpoint: (endpointId) => this.realtime.canConfigureEndpoint(endpointId),
 			emitBrowserEvent: (type, payload) => this.emit(type, payload),
 			getNotesService: () => this.notesService,
 			getProjectService: () => this.projects,

package/dist/src/gateway/session-context-summary.js

@@ -1,11 +1,11 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
 import { getSqliteDatabase, init_transaction } from "../storage/sqlite/transaction.js";
-import { hasGatewayScope, init_gateway_scopes } from "./security/gateway-scopes.js";
+import { hasGatewayScope } from "./security/gateway-scopes.js";
 import { TaskRepository, init_task_repository } from "../tasks/task-repository.js";
 import { getSessionMetadata } from "../storage/sqlite/session-read-repository.js";
 import { getCurrentTranscriptId, init_session_repository } from "../storage/sqlite/session-repository.js";
-import { getSessionConfig, init_config_repository } from "../storage/sqlite/config-repository.js";
+import { getSessionConfig } from "../storage/sqlite/config-repository.js";
 import { runExec } from "../infra/exec.js";
 import { getExecutionEnvironmentForSession } from "../execution-environments/subject.js";
 import { effectiveWorkspacePathForSession } from "../session/session-workspace.js";
@@ -16,12 +16,10 @@ import { TaskCollaborationRepository } from "../tasks/task-collaboration-reposit
 import { isSessionSourceBinding } from "../agent/source-context/types.js";
 import { realpath, stat } from "node:fs/promises";
 //#region src/gateway/session-context-summary.ts
-init_config_repository();
 init_session_repository();
 init_transaction();
 init_task_repository();
 init_logger();
-init_gateway_scopes();
 const log = createLogger("SessionContextSummary");
 const SOURCE_LIMIT = 20;
 const RECENT_SOURCE_KINDS = new Set([

package/dist/src/gateway/tailscale-auth.js

@@ -1,7 +1,6 @@
-import { init_host, isLoopbackHost } from "./host.js";
+import { isLoopbackHost } from "./host.js";
 import { readTailscaleWhoisIdentity } from "../infra/tailscale.js";
 //#region src/gateway/tailscale-auth.ts
-init_host();
 function parseTailscaleAuthHeaders(headers) {
 	return {
 		forwardedFor: headers["x-forwarded-for"]?.split(",")[0]?.trim(),

package/dist/src/gateway/ws-security.js

@@ -1,10 +1,9 @@
-import { init_host, isLoopbackHost } from "./host.js";
+import { isLoopbackHost } from "./host.js";
 import net from "node:net";
 //#region src/gateway/ws-security.ts
 /**
 * WebSocket / gateway URL transport security (OpenClaw-aligned).
 */
-init_host();
 function isPrivateOrLoopbackHost(hostname) {
 	const host = hostname.trim().toLowerCase();
 	if (isLoopbackHost(host)) return true;

package/dist/src/infra/rate-limit/failure-limiter.js

@@ -1,86 +1,98 @@
-import { __esmMin } from "../../../_virtual/_rolldown/runtime.js";
-import { KeyedStore, init_keyed_store } from "./keyed-store.js";
+import { KeyedStore } from "./keyed-store.js";
 //#region src/infra/rate-limit/failure-limiter.ts
-var DEFAULT_BURST_COALESCE_MS, FailureLimiter;
-var init_failure_limiter = __esmMin((() => {
-	init_keyed_store();
-	DEFAULT_BURST_COALESCE_MS = 1e3;
-	FailureLimiter = class {
-		store;
-		clock;
-		maxFailures;
-		windowMs;
-		blockDurationMs;
-		burstCoalesceMs;
-		constructor(cfg) {
-			this.maxFailures = Math.max(1, Math.floor(cfg.maxFailures));
-			this.windowMs = Math.max(1e3, Math.floor(cfg.windowMs));
-			this.blockDurationMs = Math.max(1e3, Math.floor(cfg.blockDurationMs));
-			this.burstCoalesceMs = Math.max(0, Math.floor(cfg.burstCoalesceMs ?? DEFAULT_BURST_COALESCE_MS));
-			this.clock = cfg.clock ?? Date.now;
-			this.store = new KeyedStore({
-				staleAfterMs: cfg.staleAfterMs ?? this.windowMs + this.blockDurationMs,
-				clock: this.clock
-			});
+/**
+* Per-key brute-force protection limiter.
+*
+* Semantics:
+*   - `fail(key)` records a failed attempt; reaching `maxFailures` within
+*     `windowMs` triggers a `blockDurationMs` lockout.
+*   - `succeed(key)` clears all state for the key (a successful auth wipes the
+*     bucket so legitimate users aren't punished for prior typos).
+*   - `check(key)` is read-only — returns the current block status.
+*   - Failures from the same key within `burstCoalesceMs` collapse to a single
+*     attempt. This absorbs SPA fan-out / SDK auto-retry storms without
+*     weakening protection: a deliberate attacker is rate-limited to ~1
+*     attempt/s per key, still astronomically slow against any token of
+*     meaningful entropy.
+*
+* Pure counter — no policy knowledge (loopback exemption, key formatting,
+* etc. all live in the policy layer that calls into this limiter).
+*/
+const DEFAULT_BURST_COALESCE_MS = 1e3;
+var FailureLimiter = class {
+	store;
+	clock;
+	maxFailures;
+	windowMs;
+	blockDurationMs;
+	burstCoalesceMs;
+	constructor(cfg) {
+		this.maxFailures = Math.max(1, Math.floor(cfg.maxFailures));
+		this.windowMs = Math.max(1e3, Math.floor(cfg.windowMs));
+		this.blockDurationMs = Math.max(1e3, Math.floor(cfg.blockDurationMs));
+		this.burstCoalesceMs = Math.max(0, Math.floor(cfg.burstCoalesceMs ?? DEFAULT_BURST_COALESCE_MS));
+		this.clock = cfg.clock ?? Date.now;
+		this.store = new KeyedStore({
+			staleAfterMs: cfg.staleAfterMs ?? this.windowMs + this.blockDurationMs,
+			clock: this.clock
+		});
+	}
+	check(key) {
+		const now = this.clock();
+		const state = this.store.get(key);
+		if (!state?.blockedUntil) return { blocked: false };
+		if (now >= state.blockedUntil) {
+			state.blockedUntil = void 0;
+			state.count = 0;
+			state.windowStart = now;
+			state.lastTouchedMs = now;
+			return { blocked: false };
 		}
-		check(key) {
-			const now = this.clock();
-			const state = this.store.get(key);
-			if (!state?.blockedUntil) return { blocked: false };
-			if (now >= state.blockedUntil) {
-				state.blockedUntil = void 0;
-				state.count = 0;
-				state.windowStart = now;
-				state.lastTouchedMs = now;
-				return { blocked: false };
-			}
-			return {
-				blocked: true,
-				retryAfterSec: Math.max(1, Math.ceil((state.blockedUntil - now) / 1e3))
+		return {
+			blocked: true,
+			retryAfterSec: Math.max(1, Math.ceil((state.blockedUntil - now) / 1e3))
+		};
+	}
+	fail(key) {
+		const now = this.clock();
+		let state = this.store.get(key);
+		if (!state) {
+			state = {
+				windowStart: now,
+				count: 0,
+				lastTouchedMs: now
 			};
+			this.store.set(key, state);
 		}
-		fail(key) {
-			const now = this.clock();
-			let state = this.store.get(key);
-			if (!state) {
-				state = {
-					windowStart: now,
-					count: 0,
-					lastTouchedMs: now
-				};
-				this.store.set(key, state);
-			}
-			state.lastTouchedMs = now;
-			if (state.blockedUntil && now < state.blockedUntil) return;
-			if (state.blockedUntil && now >= state.blockedUntil) {
-				state.blockedUntil = void 0;
-				state.count = 0;
-				state.windowStart = now;
-			}
-			if (now - state.windowStart > this.windowMs) {
-				state.count = 0;
-				state.windowStart = now;
-			}
-			if (state.lastFailureAtMs !== void 0 && now - state.lastFailureAtMs < this.burstCoalesceMs) {
-				state.lastFailureAtMs = now;
-				return;
-			}
-			state.lastFailureAtMs = now;
-			state.count += 1;
-			if (state.count >= this.maxFailures) state.blockedUntil = now + this.blockDurationMs;
+		state.lastTouchedMs = now;
+		if (state.blockedUntil && now < state.blockedUntil) return;
+		if (state.blockedUntil && now >= state.blockedUntil) {
+			state.blockedUntil = void 0;
+			state.count = 0;
+			state.windowStart = now;
 		}
-		succeed(key) {
-			this.store.delete(key);
+		if (now - state.windowStart > this.windowMs) {
+			state.count = 0;
+			state.windowStart = now;
 		}
-		/** @internal Test hook. */
-		resetForTests() {
-			this.store.clear();
-		}
-		destroy() {
-			this.store.destroy();
+		if (state.lastFailureAtMs !== void 0 && now - state.lastFailureAtMs < this.burstCoalesceMs) {
+			state.lastFailureAtMs = now;
+			return;
 		}
-	};
-}));
+		state.lastFailureAtMs = now;
+		state.count += 1;
+		if (state.count >= this.maxFailures) state.blockedUntil = now + this.blockDurationMs;
+	}
+	succeed(key) {
+		this.store.delete(key);
+	}
+	/** @internal Test hook. */
+	resetForTests() {
+		this.store.clear();
+	}
+	destroy() {
+		this.store.destroy();
+	}
+};
 //#endregion
-init_failure_limiter();
-export { FailureLimiter, init_failure_limiter };
+export { FailureLimiter };

package/dist/src/infra/rate-limit/index.js

@@ -1,11 +1,3 @@
-import { __esmMin } from "../../../_virtual/_rolldown/runtime.js";
-import { RateLimiter, init_rate_limiter } from "./rate-limiter.js";
-import { FailureLimiter, init_failure_limiter } from "./failure-limiter.js";
-//#region src/infra/rate-limit/index.ts
-var init_rate_limit = __esmMin((() => {
-	init_rate_limiter();
-	init_failure_limiter();
-}));
-//#endregion
-init_rate_limit();
-export { FailureLimiter, RateLimiter, init_rate_limit };
+import { RateLimiter } from "./rate-limiter.js";
+import { FailureLimiter } from "./failure-limiter.js";
+export { FailureLimiter, RateLimiter };

package/dist/src/infra/rate-limit/keyed-store.js

@@ -1,54 +1,49 @@
-import { __esmMin } from "../../../_virtual/_rolldown/runtime.js";
 //#region src/infra/rate-limit/keyed-store.ts
-var KeyedStore;
-var init_keyed_store = __esmMin((() => {
-	KeyedStore = class {
-		map = /* @__PURE__ */ new Map();
-		maxEntries;
-		overflow;
-		clock;
-		staleAfterMs;
-		cleanupTimer;
-		constructor(opts) {
-			this.maxEntries = Math.max(1, opts.maxEntries ?? 1e4);
-			this.clock = opts.clock ?? Date.now;
-			this.staleAfterMs = Math.max(1e3, opts.staleAfterMs);
-			const interval = Math.min(600 * 1e3, Math.max(1e3, opts.cleanupIntervalMs ?? Math.floor(this.staleAfterMs / 4)));
-			this.cleanupTimer = setInterval(() => this.sweep(), interval);
-			this.cleanupTimer.unref?.();
-		}
-		get(key) {
-			return this.map.get(key) ?? (this.map.size >= this.maxEntries ? this.overflow : void 0);
-		}
-		set(key, value) {
-			if (this.map.has(key) || this.map.size < this.maxEntries) this.map.set(key, value);
-			else this.overflow ??= value;
-		}
-		delete(key) {
-			this.map.delete(key);
-		}
-		size() {
-			return this.map.size;
-		}
-		clear() {
-			this.map.clear();
-			this.overflow = void 0;
-		}
-		destroy() {
-			if (this.cleanupTimer) {
-				clearInterval(this.cleanupTimer);
-				this.cleanupTimer = void 0;
-			}
-			this.map.clear();
-			this.overflow = void 0;
-		}
-		sweep() {
-			const now = this.clock();
-			if (this.overflow && now - this.overflow.lastTouchedMs > this.staleAfterMs) this.overflow = void 0;
-			for (const [k, v] of this.map.entries()) if (now - v.lastTouchedMs > this.staleAfterMs) this.map.delete(k);
-		}
-	};
-}));
+var KeyedStore = class {
+	map = /* @__PURE__ */ new Map();
+	maxEntries;
+	overflow;
+	clock;
+	staleAfterMs;
+	cleanupTimer;
+	constructor(opts) {
+		this.maxEntries = Math.max(1, opts.maxEntries ?? 1e4);
+		this.clock = opts.clock ?? Date.now;
+		this.staleAfterMs = Math.max(1e3, opts.staleAfterMs);
+		const interval = Math.min(600 * 1e3, Math.max(1e3, opts.cleanupIntervalMs ?? Math.floor(this.staleAfterMs / 4)));
+		this.cleanupTimer = setInterval(() => this.sweep(), interval);
+		this.cleanupTimer.unref?.();
+	}
+	get(key) {
+		return this.map.get(key) ?? (this.map.size >= this.maxEntries ? this.overflow : void 0);
+	}
+	set(key, value) {
+		if (this.map.has(key) || this.map.size < this.maxEntries) this.map.set(key, value);
+		else this.overflow ??= value;
+	}
+	delete(key) {
+		this.map.delete(key);
+	}
+	size() {
+		return this.map.size;
+	}
+	clear() {
+		this.map.clear();
+		this.overflow = void 0;
+	}
+	destroy() {
+		if (this.cleanupTimer) {
+			clearInterval(this.cleanupTimer);
+			this.cleanupTimer = void 0;
+		}
+		this.map.clear();
+		this.overflow = void 0;
+	}
+	sweep() {
+		const now = this.clock();
+		if (this.overflow && now - this.overflow.lastTouchedMs > this.staleAfterMs) this.overflow = void 0;
+		for (const [k, v] of this.map.entries()) if (now - v.lastTouchedMs > this.staleAfterMs) this.map.delete(k);
+	}
+};
 //#endregion
-init_keyed_store();
-export { KeyedStore, init_keyed_store };
+export { KeyedStore };

package/dist/src/infra/rate-limit/rate-limiter.js

@@ -1,60 +1,63 @@
-import { __esmMin } from "../../../_virtual/_rolldown/runtime.js";
-import { KeyedStore, init_keyed_store } from "./keyed-store.js";
+import { KeyedStore } from "./keyed-store.js";
 //#region src/infra/rate-limit/rate-limiter.ts
-var RateLimiter;
-var init_rate_limiter = __esmMin((() => {
-	init_keyed_store();
-	RateLimiter = class {
-		store;
-		clock;
-		maxRequests;
-		windowMs;
-		constructor(cfg) {
-			this.maxRequests = Math.max(1, Math.floor(cfg.maxRequests));
-			this.windowMs = Math.max(1, Math.floor(cfg.windowMs));
-			this.clock = cfg.clock ?? Date.now;
-			this.store = new KeyedStore({
-				staleAfterMs: cfg.staleAfterMs ?? this.windowMs * 4,
-				clock: this.clock
-			});
-		}
-		consume(key) {
-			const now = this.clock();
-			let state = this.store.get(key);
-			if (!state) {
-				state = {
-					windowStart: now,
-					count: 0,
-					lastTouchedMs: now
-				};
-				this.store.set(key, state);
-			}
-			if (now - state.windowStart >= this.windowMs) {
-				state.windowStart = now;
-				state.count = 0;
-			}
-			state.lastTouchedMs = now;
-			if (state.count >= this.maxRequests) return {
-				allowed: false,
-				remaining: 0,
-				retryAfterMs: Math.max(0, state.windowStart + this.windowMs - now)
-			};
-			state.count += 1;
-			return {
-				allowed: true,
-				remaining: this.maxRequests - state.count,
-				retryAfterMs: 0
+/**
+* Per-key fixed-window request-rate limiter. Every `consume()` counts toward
+* the limit; once the window's count hits `maxRequests`, subsequent consumes
+* return `allowed: false` until the window rolls over.
+*
+* Use this for *throughput* limiting (e.g. "15 req/min on /admin"). For
+* *failure-rate* limiting with lockout (e.g. brute-force protection), use
+* {@link FailureLimiter} instead.
+*/
+var RateLimiter = class {
+	store;
+	clock;
+	maxRequests;
+	windowMs;
+	constructor(cfg) {
+		this.maxRequests = Math.max(1, Math.floor(cfg.maxRequests));
+		this.windowMs = Math.max(1, Math.floor(cfg.windowMs));
+		this.clock = cfg.clock ?? Date.now;
+		this.store = new KeyedStore({
+			staleAfterMs: cfg.staleAfterMs ?? this.windowMs * 4,
+			clock: this.clock
+		});
+	}
+	consume(key) {
+		const now = this.clock();
+		let state = this.store.get(key);
+		if (!state) {
+			state = {
+				windowStart: now,
+				count: 0,
+				lastTouchedMs: now
 			};
+			this.store.set(key, state);
 		}
-		/** @internal Test hook. */
-		resetForTests() {
-			this.store.clear();
-		}
-		destroy() {
-			this.store.destroy();
+		if (now - state.windowStart >= this.windowMs) {
+			state.windowStart = now;
+			state.count = 0;
 		}
-	};
-}));
+		state.lastTouchedMs = now;
+		if (state.count >= this.maxRequests) return {
+			allowed: false,
+			remaining: 0,
+			retryAfterMs: Math.max(0, state.windowStart + this.windowMs - now)
+		};
+		state.count += 1;
+		return {
+			allowed: true,
+			remaining: this.maxRequests - state.count,
+			retryAfterMs: 0
+		};
+	}
+	/** @internal Test hook. */
+	resetForTests() {
+		this.store.clear();
+	}
+	destroy() {
+		this.store.destroy();
+	}
+};
 //#endregion
-init_rate_limiter();
-export { RateLimiter, init_rate_limiter };
+export { RateLimiter };

package/dist/src/infra/update-service-refresh.js

@@ -1,10 +1,9 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
-import { SERVICE_VERSION_ENV_KEY, formatGatewayServiceDescription, init_constants } from "../daemon/constants.js";
+import { SERVICE_VERSION_ENV_KEY, formatGatewayServiceDescription } from "../daemon/constants.js";
 import path from "node:path";
 import fs from "node:fs/promises";
 //#region src/infra/update-service-refresh.ts
-init_constants();
 init_logger();
 const log = createLogger("UpdateServiceRefresh");
 function resolveBinPath(bin) {

package/dist/src/knowledge/chunks.js

@@ -1,4 +1,3 @@
-import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
 import { createHash } from "node:crypto";
 //#region src/knowledge/chunks.ts
 /** Index the retained source text; source deletion removes chunks through the FK. */
@@ -22,7 +21,5 @@ function replaceKnowledgeChunks(db, item) {
 		offset = end - 150;
 	}
 }
-var init_chunks = __esmMin((() => {}));
 //#endregion
-init_chunks();
-export { init_chunks, replaceKnowledgeChunks };
+export { replaceKnowledgeChunks };