@xopcai/xopc 0.0.82 → 0.0.83

package/dist/src/gateway/auth-rate-limit.js

@@ -1,192 +0,0 @@
-import { isLoopbackHost } from "./host.js";
-//#region src/gateway/auth-rate-limit.ts
-/**
-* Rate limiting for failed gateway token authentication attempts (per client IP).
-*/
-const DEFAULT_CONFIG = {
-	enabled: true,
-	maxAttempts: 5,
-	windowMs: 900 * 1e3,
-	blockDurationMs: 300 * 1e3,
-	exemptLoopback: true
-};
-function resolveAuthRateLimitConfig(input) {
-	if (!input) return { ...DEFAULT_CONFIG };
-	const blockDurationMs = input.blockDurationMs ?? input.lockoutMs ?? DEFAULT_CONFIG.blockDurationMs;
-	return {
-		enabled: input.enabled ?? DEFAULT_CONFIG.enabled,
-		maxAttempts: Math.max(1, Math.floor(input.maxAttempts ?? DEFAULT_CONFIG.maxAttempts)),
-		windowMs: Math.max(1e3, Math.floor(input.windowMs ?? DEFAULT_CONFIG.windowMs)),
-		blockDurationMs: Math.max(1e3, Math.floor(blockDurationMs)),
-		exemptLoopback: input.exemptLoopback ?? DEFAULT_CONFIG.exemptLoopback
-	};
-}
-function isAuthRateLimitGloballyDisabled() {
-	return process.env.XOPC_AUTH_RATE_LIMIT === "false";
-}
-function isGatewayStrictSecurityEnabled(cfg) {
-	return cfg?.gateway?.security?.strict === true || process.env.XOPC_GATEWAY_STRICT_SECURITY === "1";
-}
-function isLoopbackClientIp(clientIp) {
-	if (!clientIp || clientIp === "unknown") return false;
-	const trimmed = clientIp.trim();
-	if (trimmed.includes(":") && !trimmed.includes(".")) return isLoopbackHost(trimmed.replace(/^\[/, "").replace(/\]$/, ""));
-	return isLoopbackHost(trimmed.split(":")[0]);
-}
-/** True when a browser Origin header targets the local gateway console (Electron / loopback SPA). */
-function isLoopbackBrowserOrigin(origin) {
-	const trimmed = origin?.trim();
-	if (!trimmed || trimmed === "null") return false;
-	try {
-		return isLoopbackHost(new URL(trimmed).hostname);
-	} catch {
-		return false;
-	}
-}
-/** Loopback gateway console in a same-machine browser (Electron embedded UI, local dev). */
-function isLoopbackEmbeddedBrowserClient(origin, clientIp) {
-	if (!isLoopbackBrowserOrigin(origin)) return false;
-	if (clientIp === "unknown") return true;
-	return isLoopbackClientIp(clientIp);
-}
-function parseBrowserOriginRateLimitKey(clientKey) {
-	if (!clientKey.startsWith("browser-origin:")) return null;
-	const pipeIdx = clientKey.indexOf("|");
-	if (pipeIdx === -1) return null;
-	return {
-		origin: clientKey.slice(15, pipeIdx),
-		clientIp: clientKey.slice(pipeIdx + 1)
-	};
-}
-function isLocalBrowserAuthClient(clientKey) {
-	const parsed = parseBrowserOriginRateLimitKey(clientKey);
-	if (!parsed) return false;
-	return isLoopbackEmbeddedBrowserClient(parsed.origin, parsed.clientIp);
-}
-/** Browser-origin auth failures are tracked independently from CLI/server clients. */
-function buildBrowserOriginRateLimitKey(origin, clientIp) {
-	return `browser-origin:${origin.trim().toLowerCase()}|${clientIp.trim()}`;
-}
-function shouldSkipRateLimit(clientKey, cfg) {
-	if (!cfg.exemptLoopback) return false;
-	if (clientKey.startsWith("browser-origin:")) return isLocalBrowserAuthClient(clientKey);
-	return isLoopbackClientIp(clientKey);
-}
-/**
-* Tracks failed auth attempts per IP; blocks further attempts after the threshold.
-*/
-var AuthFailureRateLimiter = class {
-	store = /* @__PURE__ */ new Map();
-	cleanupTimer;
-	constructor() {
-		const interval = 600 * 1e3;
-		this.cleanupTimer = setInterval(() => this.cleanupStale(), interval);
-		this.cleanupTimer.unref?.();
-	}
-	destroy() {
-		if (this.cleanupTimer) {
-			clearInterval(this.cleanupTimer);
-			this.cleanupTimer = void 0;
-		}
-		this.store.clear();
-	}
-	cleanupStale() {
-		const now = Date.now();
-		const maxAge = 1440 * 60 * 1e3;
-		for (const [ip, state] of this.store.entries()) if (now - (state.blockedUntil ?? state.windowStart) > maxAge) this.store.delete(ip);
-	}
-	checkBlocked(clientKey, cfg, nowMs = Date.now()) {
-		if (shouldSkipRateLimit(clientKey, cfg)) return { blocked: false };
-		const state = this.store.get(clientKey);
-		if (!state?.blockedUntil) return { blocked: false };
-		if (nowMs >= state.blockedUntil) {
-			state.blockedUntil = void 0;
-			state.count = 0;
-			state.windowStart = nowMs;
-			return { blocked: false };
-		}
-		return {
-			blocked: true,
-			retryAfterSec: Math.max(1, Math.ceil((state.blockedUntil - nowMs) / 1e3))
-		};
-	}
-	recordFailure(clientKey, cfg, nowMs = Date.now()) {
-		if (shouldSkipRateLimit(clientKey, cfg)) return;
-		let state = this.store.get(clientKey);
-		if (!state) {
-			state = {
-				windowStart: nowMs,
-				count: 0
-			};
-			this.store.set(clientKey, state);
-		}
-		if (state.blockedUntil && nowMs < state.blockedUntil) return;
-		if (state.blockedUntil && nowMs >= state.blockedUntil) {
-			state.blockedUntil = void 0;
-			state.count = 0;
-			state.windowStart = nowMs;
-		}
-		if (nowMs - state.windowStart > cfg.windowMs) {
-			state.count = 0;
-			state.windowStart = nowMs;
-		}
-		state.count += 1;
-		if (state.count >= cfg.maxAttempts) state.blockedUntil = nowMs + cfg.blockDurationMs;
-	}
-	recordSuccess(clientKey) {
-		this.store.delete(clientKey);
-	}
-	resetForTests() {
-		this.store.clear();
-	}
-};
-let singleton = null;
-let browserOriginSingleton = null;
-function getAuthFailureRateLimiter() {
-	if (!singleton) singleton = new AuthFailureRateLimiter();
-	return singleton;
-}
-/** Browser-origin limiter: never exempts loopback (defense-in-depth). */
-function getBrowserOriginAuthFailureRateLimiter() {
-	if (!browserOriginSingleton) browserOriginSingleton = new AuthFailureRateLimiter();
-	return browserOriginSingleton;
-}
-function resetAuthRateLimitersForTests() {
-	getAuthFailureRateLimiter().resetForTests();
-	getBrowserOriginAuthFailureRateLimiter().resetForTests();
-}
-function getClientIpFromHeaders(headers) {
-	const xff = headers.get("x-forwarded-for");
-	if (xff) {
-		const first = xff.split(",")[0]?.trim();
-		if (first) return first;
-	}
-	const real = headers.get("x-real-ip")?.trim();
-	if (real) return real;
-	const cf = headers.get("cf-connecting-ip")?.trim();
-	if (cf) return cf;
-	return "unknown";
-}
-function resolveAuthRateLimitTracking(params) {
-	const origin = params.origin?.trim();
-	if (origin) {
-		const localBrowserClient = isLoopbackEmbeddedBrowserClient(origin, params.clientIp);
-		return {
-			limiter: getBrowserOriginAuthFailureRateLimiter(),
-			key: buildBrowserOriginRateLimitKey(origin, params.clientIp),
-			cfg: {
-				...params.cfg,
-				exemptLoopback: localBrowserClient ? params.cfg.exemptLoopback : false
-			}
-		};
-	}
-	return {
-		limiter: getAuthFailureRateLimiter(),
-		key: params.clientIp,
-		cfg: params.cfg
-	};
-}
-//#endregion
-export { AuthFailureRateLimiter, buildBrowserOriginRateLimitKey, getAuthFailureRateLimiter, getBrowserOriginAuthFailureRateLimiter, getClientIpFromHeaders, isAuthRateLimitGloballyDisabled, isGatewayStrictSecurityEnabled, isLoopbackBrowserOrigin, isLoopbackClientIp, isLoopbackEmbeddedBrowserClient, resetAuthRateLimitersForTests, resolveAuthRateLimitConfig, resolveAuthRateLimitTracking };
-
-//# sourceMappingURL=auth-rate-limit.js.map

package/dist/src/gateway/auth-rate-limit.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth-rate-limit.js","names":[],"sources":["../../../src/gateway/auth-rate-limit.ts"],"sourcesContent":["/**\n * Rate limiting for failed gateway token authentication attempts (per client IP).\n */\n\nimport { isLoopbackHost } from './host.js';\n\nexport type AuthRateLimitConfig = {\n  enabled: boolean;\n  maxAttempts: number;\n  windowMs: number;\n  blockDurationMs: number;\n  /** When true, loopback client IPs skip rate limiting (default). */\n  exemptLoopback: boolean;\n};\n\nconst DEFAULT_CONFIG: AuthRateLimitConfig = {\n  enabled: true,\n  maxAttempts: 5,\n  windowMs: 15 * 60 * 1000,\n  blockDurationMs: 5 * 60 * 1000,\n  exemptLoopback: true,\n};\n\nexport type GatewayAuthRateLimitInput = {\n  enabled?: boolean;\n  maxAttempts?: number;\n  windowMs?: number;\n  blockDurationMs?: number;\n  /** OpenClaw alias for blockDurationMs. */\n  lockoutMs?: number;\n  exemptLoopback?: boolean;\n} | undefined;\n\nexport function resolveAuthRateLimitConfig(\n  input: GatewayAuthRateLimitInput,\n): AuthRateLimitConfig {\n  if (!input) {\n    return { ...DEFAULT_CONFIG };\n  }\n  const blockDurationMs = input.blockDurationMs ?? input.lockoutMs ?? DEFAULT_CONFIG.blockDurationMs;\n  return {\n    enabled: input.enabled ?? DEFAULT_CONFIG.enabled,\n    maxAttempts: Math.max(1, Math.floor(input.maxAttempts ?? DEFAULT_CONFIG.maxAttempts)),\n    windowMs: Math.max(1000, Math.floor(input.windowMs ?? DEFAULT_CONFIG.windowMs)),\n    blockDurationMs: Math.max(1000, Math.floor(blockDurationMs)),\n    exemptLoopback: input.exemptLoopback ?? DEFAULT_CONFIG.exemptLoopback,\n  };\n}\n\nexport function isAuthRateLimitGloballyDisabled(): boolean {\n  return process.env.XOPC_AUTH_RATE_LIMIT === 'false';\n}\n\nexport function isGatewayStrictSecurityEnabled(cfg?: {\n  gateway?: { security?: { strict?: boolean } };\n}): boolean {\n  return (\n    cfg?.gateway?.security?.strict === true ||\n    process.env.XOPC_GATEWAY_STRICT_SECURITY === '1'\n  );\n}\n\nexport function isLoopbackClientIp(clientIp: string | undefined): boolean {\n  if (!clientIp || clientIp === 'unknown') {\n    return false;\n  }\n  const trimmed = clientIp.trim();\n  if (trimmed.includes(':') && !trimmed.includes('.')) {\n    return isLoopbackHost(trimmed.replace(/^\\[/, '').replace(/\\]$/, ''));\n  }\n  return isLoopbackHost(trimmed.split(':')[0]);\n}\n\n/** True when a browser Origin header targets the local gateway console (Electron / loopback SPA). */\nexport function isLoopbackBrowserOrigin(origin: string | undefined): boolean {\n  const trimmed = origin?.trim();\n  if (!trimmed || trimmed === 'null') {\n    return false;\n  }\n  try {\n    return isLoopbackHost(new URL(trimmed).hostname);\n  } catch {\n    return false;\n  }\n}\n\n/** Loopback gateway console in a same-machine browser (Electron embedded UI, local dev). */\nexport function isLoopbackEmbeddedBrowserClient(\n  origin: string | undefined,\n  clientIp: string,\n): boolean {\n  if (!isLoopbackBrowserOrigin(origin)) {\n    return false;\n  }\n  if (clientIp === 'unknown') {\n    return true;\n  }\n  return isLoopbackClientIp(clientIp);\n}\n\nfunction parseBrowserOriginRateLimitKey(clientKey: string): { origin: string; clientIp: string } | null {\n  if (!clientKey.startsWith('browser-origin:')) {\n    return null;\n  }\n  const pipeIdx = clientKey.indexOf('|');\n  if (pipeIdx === -1) {\n    return null;\n  }\n  return {\n    origin: clientKey.slice('browser-origin:'.length, pipeIdx),\n    clientIp: clientKey.slice(pipeIdx + 1),\n  };\n}\n\nfunction isLocalBrowserAuthClient(clientKey: string): boolean {\n  const parsed = parseBrowserOriginRateLimitKey(clientKey);\n  if (!parsed) {\n    return false;\n  }\n  return isLoopbackEmbeddedBrowserClient(parsed.origin, parsed.clientIp);\n}\n\n/** Browser-origin auth failures are tracked independently from CLI/server clients. */\nexport function buildBrowserOriginRateLimitKey(origin: string, clientIp: string): string {\n  const normalizedOrigin = origin.trim().toLowerCase();\n  return `browser-origin:${normalizedOrigin}|${clientIp.trim()}`;\n}\n\nfunction shouldSkipRateLimit(clientKey: string, cfg: AuthRateLimitConfig): boolean {\n  if (!cfg.exemptLoopback) {\n    return false;\n  }\n  if (clientKey.startsWith('browser-origin:')) {\n    return isLocalBrowserAuthClient(clientKey);\n  }\n  return isLoopbackClientIp(clientKey);\n}\n\ntype IpState = {\n  windowStart: number;\n  count: number;\n  blockedUntil?: number;\n};\n\n/**\n * Tracks failed auth attempts per IP; blocks further attempts after the threshold.\n */\nexport class AuthFailureRateLimiter {\n  private readonly store = new Map<string, IpState>();\n  private cleanupTimer?: NodeJS.Timeout;\n\n  constructor() {\n    const interval = 10 * 60 * 1000;\n    this.cleanupTimer = setInterval(() => this.cleanupStale(), interval);\n    this.cleanupTimer.unref?.();\n  }\n\n  destroy(): void {\n    if (this.cleanupTimer) {\n      clearInterval(this.cleanupTimer);\n      this.cleanupTimer = undefined;\n    }\n    this.store.clear();\n  }\n\n  private cleanupStale(): void {\n    const now = Date.now();\n    const maxAge = 24 * 60 * 60 * 1000;\n    for (const [ip, state] of this.store.entries()) {\n      const last = state.blockedUntil ?? state.windowStart;\n      if (now - last > maxAge) {\n        this.store.delete(ip);\n      }\n    }\n  }\n\n  checkBlocked(\n    clientKey: string,\n    cfg: AuthRateLimitConfig,\n    nowMs: number = Date.now(),\n  ): { blocked: false } | { blocked: true; retryAfterSec: number } {\n    if (shouldSkipRateLimit(clientKey, cfg)) {\n      return { blocked: false };\n    }\n\n    const state = this.store.get(clientKey);\n    if (!state?.blockedUntil) {\n      return { blocked: false };\n    }\n    if (nowMs >= state.blockedUntil) {\n      state.blockedUntil = undefined;\n      state.count = 0;\n      state.windowStart = nowMs;\n      return { blocked: false };\n    }\n    return {\n      blocked: true,\n      retryAfterSec: Math.max(1, Math.ceil((state.blockedUntil - nowMs) / 1000)),\n    };\n  }\n\n  recordFailure(clientKey: string, cfg: AuthRateLimitConfig, nowMs: number = Date.now()): void {\n    if (shouldSkipRateLimit(clientKey, cfg)) {\n      return;\n    }\n\n    let state = this.store.get(clientKey);\n    if (!state) {\n      state = { windowStart: nowMs, count: 0 };\n      this.store.set(clientKey, state);\n    }\n\n    if (state.blockedUntil && nowMs < state.blockedUntil) {\n      return;\n    }\n    if (state.blockedUntil && nowMs >= state.blockedUntil) {\n      state.blockedUntil = undefined;\n      state.count = 0;\n      state.windowStart = nowMs;\n    }\n\n    if (nowMs - state.windowStart > cfg.windowMs) {\n      state.count = 0;\n      state.windowStart = nowMs;\n    }\n\n    state.count += 1;\n    if (state.count >= cfg.maxAttempts) {\n      state.blockedUntil = nowMs + cfg.blockDurationMs;\n    }\n  }\n\n  recordSuccess(clientKey: string): void {\n    this.store.delete(clientKey);\n  }\n\n  resetForTests(): void {\n    this.store.clear();\n  }\n}\n\nlet singleton: AuthFailureRateLimiter | null = null;\nlet browserOriginSingleton: AuthFailureRateLimiter | null = null;\n\nexport function getAuthFailureRateLimiter(): AuthFailureRateLimiter {\n  if (!singleton) {\n    singleton = new AuthFailureRateLimiter();\n  }\n  return singleton;\n}\n\n/** Browser-origin limiter: never exempts loopback (defense-in-depth). */\nexport function getBrowserOriginAuthFailureRateLimiter(): AuthFailureRateLimiter {\n  if (!browserOriginSingleton) {\n    browserOriginSingleton = new AuthFailureRateLimiter();\n  }\n  return browserOriginSingleton;\n}\n\nexport function resetAuthRateLimitersForTests(): void {\n  getAuthFailureRateLimiter().resetForTests();\n  getBrowserOriginAuthFailureRateLimiter().resetForTests();\n}\n\nexport function getClientIpFromHeaders(headers: {\n  get(name: string): string | undefined;\n}): string {\n  const xff = headers.get('x-forwarded-for');\n  if (xff) {\n    const first = xff.split(',')[0]?.trim();\n    if (first) return first;\n  }\n  const real = headers.get('x-real-ip')?.trim();\n  if (real) return real;\n  const cf = headers.get('cf-connecting-ip')?.trim();\n  if (cf) return cf;\n  return 'unknown';\n}\n\nexport function resolveAuthRateLimitTracking(params: {\n  clientIp: string;\n  origin?: string | null;\n  cfg: AuthRateLimitConfig;\n}): { limiter: AuthFailureRateLimiter; key: string; cfg: AuthRateLimitConfig } {\n  const origin = params.origin?.trim();\n  if (origin) {\n    const localBrowserClient = isLoopbackEmbeddedBrowserClient(origin, params.clientIp);\n    return {\n      limiter: getBrowserOriginAuthFailureRateLimiter(),\n      key: buildBrowserOriginRateLimitKey(origin, params.clientIp),\n      cfg: {\n        ...params.cfg,\n        exemptLoopback: localBrowserClient ? params.cfg.exemptLoopback : false,\n      },\n    };\n  }\n  return {\n    limiter: getAuthFailureRateLimiter(),\n    key: params.clientIp,\n    cfg: params.cfg,\n  };\n}\n"],"mappings":";;;;;AAeA,MAAM,iBAAsC;CAC1C,SAAS;CACT,aAAa;CACb,UAAU,MAAU;CACpB,iBAAiB,MAAS;CAC1B,gBAAgB;CACjB;AAYD,SAAgB,2BACd,OACqB;AACrB,KAAI,CAAC,MACH,QAAO,EAAE,GAAG,gBAAgB;CAE9B,MAAM,kBAAkB,MAAM,mBAAmB,MAAM,aAAa,eAAe;AACnF,QAAO;EACL,SAAS,MAAM,WAAW,eAAe;EACzC,aAAa,KAAK,IAAI,GAAG,KAAK,MAAM,MAAM,eAAe,eAAe,YAAY,CAAC;EACrF,UAAU,KAAK,IAAI,KAAM,KAAK,MAAM,MAAM,YAAY,eAAe,SAAS,CAAC;EAC/E,iBAAiB,KAAK,IAAI,KAAM,KAAK,MAAM,gBAAgB,CAAC;EAC5D,gBAAgB,MAAM,kBAAkB,eAAe;EACxD;;AAGH,SAAgB,kCAA2C;AACzD,QAAO,QAAQ,IAAI,yBAAyB;;AAG9C,SAAgB,+BAA+B,KAEnC;AACV,QACE,KAAK,SAAS,UAAU,WAAW,QACnC,QAAQ,IAAI,iCAAiC;;AAIjD,SAAgB,mBAAmB,UAAuC;AACxE,KAAI,CAAC,YAAY,aAAa,UAC5B,QAAO;CAET,MAAM,UAAU,SAAS,MAAM;AAC/B,KAAI,QAAQ,SAAS,IAAI,IAAI,CAAC,QAAQ,SAAS,IAAI,CACjD,QAAO,eAAe,QAAQ,QAAQ,OAAO,GAAG,CAAC,QAAQ,OAAO,GAAG,CAAC;AAEtE,QAAO,eAAe,QAAQ,MAAM,IAAI,CAAC,GAAG;;;AAI9C,SAAgB,wBAAwB,QAAqC;CAC3E,MAAM,UAAU,QAAQ,MAAM;AAC9B,KAAI,CAAC,WAAW,YAAY,OAC1B,QAAO;AAET,KAAI;AACF,SAAO,eAAe,IAAI,IAAI,QAAQ,CAAC,SAAS;SAC1C;AACN,SAAO;;;;AAKX,SAAgB,gCACd,QACA,UACS;AACT,KAAI,CAAC,wBAAwB,OAAO,CAClC,QAAO;AAET,KAAI,aAAa,UACf,QAAO;AAET,QAAO,mBAAmB,SAAS;;AAGrC,SAAS,+BAA+B,WAAgE;AACtG,KAAI,CAAC,UAAU,WAAW,kBAAkB,CAC1C,QAAO;CAET,MAAM,UAAU,UAAU,QAAQ,IAAI;AACtC,KAAI,YAAY,GACd,QAAO;AAET,QAAO;EACL,QAAQ,UAAU,MAAM,IAA0B,QAAQ;EAC1D,UAAU,UAAU,MAAM,UAAU,EAAE;EACvC;;AAGH,SAAS,yBAAyB,WAA4B;CAC5D,MAAM,SAAS,+BAA+B,UAAU;AACxD,KAAI,CAAC,OACH,QAAO;AAET,QAAO,gCAAgC,OAAO,QAAQ,OAAO,SAAS;;;AAIxE,SAAgB,+BAA+B,QAAgB,UAA0B;AAEvF,QAAO,kBADkB,OAAO,MAAM,CAAC,aACE,CAAC,GAAG,SAAS,MAAM;;AAG9D,SAAS,oBAAoB,WAAmB,KAAmC;AACjF,KAAI,CAAC,IAAI,eACP,QAAO;AAET,KAAI,UAAU,WAAW,kBAAkB,CACzC,QAAO,yBAAyB,UAAU;AAE5C,QAAO,mBAAmB,UAAU;;;;;AAYtC,IAAa,yBAAb,MAAoC;CAClC,wBAAyB,IAAI,KAAsB;CACnD;CAEA,cAAc;EACZ,MAAM,WAAW,MAAU;AAC3B,OAAK,eAAe,kBAAkB,KAAK,cAAc,EAAE,SAAS;AACpE,OAAK,aAAa,SAAS;;CAG7B,UAAgB;AACd,MAAI,KAAK,cAAc;AACrB,iBAAc,KAAK,aAAa;AAChC,QAAK,eAAe,KAAA;;AAEtB,OAAK,MAAM,OAAO;;CAGpB,eAA6B;EAC3B,MAAM,MAAM,KAAK,KAAK;EACtB,MAAM,SAAS,OAAU,KAAK;AAC9B,OAAK,MAAM,CAAC,IAAI,UAAU,KAAK,MAAM,SAAS,CAE5C,KAAI,OADS,MAAM,gBAAgB,MAAM,eACxB,OACf,MAAK,MAAM,OAAO,GAAG;;CAK3B,aACE,WACA,KACA,QAAgB,KAAK,KAAK,EACqC;AAC/D,MAAI,oBAAoB,WAAW,IAAI,CACrC,QAAO,EAAE,SAAS,OAAO;EAG3B,MAAM,QAAQ,KAAK,MAAM,IAAI,UAAU;AACvC,MAAI,CAAC,OAAO,aACV,QAAO,EAAE,SAAS,OAAO;AAE3B,MAAI,SAAS,MAAM,cAAc;AAC/B,SAAM,eAAe,KAAA;AACrB,SAAM,QAAQ;AACd,SAAM,cAAc;AACpB,UAAO,EAAE,SAAS,OAAO;;AAE3B,SAAO;GACL,SAAS;GACT,eAAe,KAAK,IAAI,GAAG,KAAK,MAAM,MAAM,eAAe,SAAS,IAAK,CAAC;GAC3E;;CAGH,cAAc,WAAmB,KAA0B,QAAgB,KAAK,KAAK,EAAQ;AAC3F,MAAI,oBAAoB,WAAW,IAAI,CACrC;EAGF,IAAI,QAAQ,KAAK,MAAM,IAAI,UAAU;AACrC,MAAI,CAAC,OAAO;AACV,WAAQ;IAAE,aAAa;IAAO,OAAO;IAAG;AACxC,QAAK,MAAM,IAAI,WAAW,MAAM;;AAGlC,MAAI,MAAM,gBAAgB,QAAQ,MAAM,aACtC;AAEF,MAAI,MAAM,gBAAgB,SAAS,MAAM,cAAc;AACrD,SAAM,eAAe,KAAA;AACrB,SAAM,QAAQ;AACd,SAAM,cAAc;;AAGtB,MAAI,QAAQ,MAAM,cAAc,IAAI,UAAU;AAC5C,SAAM,QAAQ;AACd,SAAM,cAAc;;AAGtB,QAAM,SAAS;AACf,MAAI,MAAM,SAAS,IAAI,YACrB,OAAM,eAAe,QAAQ,IAAI;;CAIrC,cAAc,WAAyB;AACrC,OAAK,MAAM,OAAO,UAAU;;CAG9B,gBAAsB;AACpB,OAAK,MAAM,OAAO;;;AAItB,IAAI,YAA2C;AAC/C,IAAI,yBAAwD;AAE5D,SAAgB,4BAAoD;AAClE,KAAI,CAAC,UACH,aAAY,IAAI,wBAAwB;AAE1C,QAAO;;;AAIT,SAAgB,yCAAiE;AAC/E,KAAI,CAAC,uBACH,0BAAyB,IAAI,wBAAwB;AAEvD,QAAO;;AAGT,SAAgB,gCAAsC;AACpD,4BAA2B,CAAC,eAAe;AAC3C,yCAAwC,CAAC,eAAe;;AAG1D,SAAgB,uBAAuB,SAE5B;CACT,MAAM,MAAM,QAAQ,IAAI,kBAAkB;AAC1C,KAAI,KAAK;EACP,MAAM,QAAQ,IAAI,MAAM,IAAI,CAAC,IAAI,MAAM;AACvC,MAAI,MAAO,QAAO;;CAEpB,MAAM,OAAO,QAAQ,IAAI,YAAY,EAAE,MAAM;AAC7C,KAAI,KAAM,QAAO;CACjB,MAAM,KAAK,QAAQ,IAAI,mBAAmB,EAAE,MAAM;AAClD,KAAI,GAAI,QAAO;AACf,QAAO;;AAGT,SAAgB,6BAA6B,QAIkC;CAC7E,MAAM,SAAS,OAAO,QAAQ,MAAM;AACpC,KAAI,QAAQ;EACV,MAAM,qBAAqB,gCAAgC,QAAQ,OAAO,SAAS;AACnF,SAAO;GACL,SAAS,wCAAwC;GACjD,KAAK,+BAA+B,QAAQ,OAAO,SAAS;GAC5D,KAAK;IACH,GAAG,OAAO;IACV,gBAAgB,qBAAqB,OAAO,IAAI,iBAAiB;IAClE;GACF;;AAEH,QAAO;EACL,SAAS,2BAA2B;EACpC,KAAK,OAAO;EACZ,KAAK,OAAO;EACb"}

package/dist/src/gateway/restart-handler.d.ts

@@ -1,14 +0,0 @@
-/**
- * Gateway Restart Handler - SIGUSR1 signal handler for graceful restart
- *
- * Reads restart intent from disk to determine restart behavior:
- * - force=true: exit immediately (KeepAlive will restart)
- * - force=false/unset: wait for active agent turns to complete, then exit
- */
-/**
- * Register the SIGUSR1 handler for gateway restart.
- * Call once during gateway startup.
- */
-export declare function registerGatewayRestartHandler(params?: {
-    getActiveAgentTurnCount?: () => number;
-}): void;

package/dist/src/gateway/restart-handler.js

@@ -1,64 +0,0 @@
-import { createLogger } from "../utils/logger/index.js";
-import { init_logger } from "../utils/logger.js";
-import { clearGatewayRestartIntentSync, readGatewayRestartIntentSync } from "../infra/restart-intent.js";
-//#region src/gateway/restart-handler.ts
-init_logger();
-const log = createLogger("RestartHandler");
-const DEFAULT_GRACEFUL_WAIT_MS = 3e4;
-let restartHandlerRegistered = false;
-let activeAgentTurnCounter = null;
-/**
-* Register the SIGUSR1 handler for gateway restart.
-* Call once during gateway startup.
-*/
-function registerGatewayRestartHandler(params) {
-	if (restartHandlerRegistered) return;
-	restartHandlerRegistered = true;
-	if (params?.getActiveAgentTurnCount) activeAgentTurnCounter = params.getActiveAgentTurnCount;
-	process.on("SIGUSR1", handleSigusr1);
-	log.info("SIGUSR1 restart handler registered");
-}
-async function handleSigusr1() {
-	log.info("Received SIGUSR1 restart signal");
-	const intent = readGatewayRestartIntentSync();
-	clearGatewayRestartIntentSync();
-	if (intent?.force) {
-		log.info("Force restart requested, exiting immediately");
-		process.exit(0);
-	}
-	const waitMs = intent?.waitMs ?? DEFAULT_GRACEFUL_WAIT_MS;
-	if (!activeAgentTurnCounter) {
-		log.info("No active turn counter registered, exiting");
-		process.exit(0);
-	}
-	const activeTurns = activeAgentTurnCounter();
-	if (activeTurns <= 0) {
-		log.info("No active agent turns, exiting immediately");
-		process.exit(0);
-	}
-	log.info({
-		activeTurns,
-		waitMs
-	}, "Waiting for active agent turns to complete");
-	await waitForActiveAgentTurnsToComplete(waitMs);
-	log.info("Active turns completed, exiting for restart");
-	process.exit(0);
-}
-async function waitForActiveAgentTurnsToComplete(maxWaitMs) {
-	const startedAt = Date.now();
-	const pollIntervalMs = 500;
-	while (Date.now() - startedAt < maxWaitMs) {
-		if (!activeAgentTurnCounter) break;
-		if (activeAgentTurnCounter() <= 0) return;
-		await new Promise((resolve) => setTimeout(resolve, pollIntervalMs));
-	}
-	const remaining = activeAgentTurnCounter?.() ?? 0;
-	if (remaining > 0) log.warn({
-		remaining,
-		maxWaitMs
-	}, "Graceful wait timed out, forcing exit");
-}
-//#endregion
-export { registerGatewayRestartHandler };
-
-//# sourceMappingURL=restart-handler.js.map

package/dist/src/gateway/restart-handler.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"restart-handler.js","names":[],"sources":["../../../src/gateway/restart-handler.ts"],"sourcesContent":["/**\n * Gateway Restart Handler - SIGUSR1 signal handler for graceful restart\n *\n * Reads restart intent from disk to determine restart behavior:\n * - force=true: exit immediately (KeepAlive will restart)\n * - force=false/unset: wait for active agent turns to complete, then exit\n */\n\nimport { createLogger } from '../utils/logger.js';\nimport {\n  readGatewayRestartIntentSync,\n  clearGatewayRestartIntentSync,\n} from '../infra/restart-intent.js';\n\nconst log = createLogger('RestartHandler');\n\nconst DEFAULT_GRACEFUL_WAIT_MS = 30_000;\n\nlet restartHandlerRegistered = false;\nlet activeAgentTurnCounter: (() => number) | null = null;\n\n/**\n * Register the SIGUSR1 handler for gateway restart.\n * Call once during gateway startup.\n */\nexport function registerGatewayRestartHandler(params?: {\n  getActiveAgentTurnCount?: () => number;\n}): void {\n  if (restartHandlerRegistered) return;\n  restartHandlerRegistered = true;\n\n  if (params?.getActiveAgentTurnCount) {\n    activeAgentTurnCounter = params.getActiveAgentTurnCount;\n  }\n\n  process.on('SIGUSR1', handleSigusr1);\n  log.info('SIGUSR1 restart handler registered');\n}\n\nasync function handleSigusr1(): Promise<void> {\n  log.info('Received SIGUSR1 restart signal');\n\n  const intent = readGatewayRestartIntentSync();\n  clearGatewayRestartIntentSync();\n\n  if (intent?.force) {\n    log.info('Force restart requested, exiting immediately');\n    process.exit(0);\n  }\n\n  // Graceful restart: wait for active agent turns to complete\n  const waitMs = intent?.waitMs ?? DEFAULT_GRACEFUL_WAIT_MS;\n\n  if (!activeAgentTurnCounter) {\n    log.info('No active turn counter registered, exiting');\n    process.exit(0);\n  }\n\n  const activeTurns = activeAgentTurnCounter();\n  if (activeTurns <= 0) {\n    log.info('No active agent turns, exiting immediately');\n    process.exit(0);\n  }\n\n  log.info({ activeTurns, waitMs }, 'Waiting for active agent turns to complete');\n\n  await waitForActiveAgentTurnsToComplete(waitMs);\n  log.info('Active turns completed, exiting for restart');\n  process.exit(0);\n}\n\nasync function waitForActiveAgentTurnsToComplete(maxWaitMs: number): Promise<void> {\n  const startedAt = Date.now();\n  const pollIntervalMs = 500;\n\n  while (Date.now() - startedAt < maxWaitMs) {\n    if (!activeAgentTurnCounter) break;\n\n    const activeTurns = activeAgentTurnCounter();\n    if (activeTurns <= 0) {\n      return;\n    }\n\n    await new Promise((resolve) => setTimeout(resolve, pollIntervalMs));\n  }\n\n  // Timeout reached, exit anyway\n  const remaining = activeAgentTurnCounter?.() ?? 0;\n  if (remaining > 0) {\n    log.warn({ remaining, maxWaitMs }, 'Graceful wait timed out, forcing exit');\n  }\n}\n"],"mappings":";;;;aAQkD;AAMlD,MAAM,MAAM,aAAa,iBAAiB;AAE1C,MAAM,2BAA2B;AAEjC,IAAI,2BAA2B;AAC/B,IAAI,yBAAgD;;;;;AAMpD,SAAgB,8BAA8B,QAErC;AACP,KAAI,yBAA0B;AAC9B,4BAA2B;AAE3B,KAAI,QAAQ,wBACV,0BAAyB,OAAO;AAGlC,SAAQ,GAAG,WAAW,cAAc;AACpC,KAAI,KAAK,qCAAqC;;AAGhD,eAAe,gBAA+B;AAC5C,KAAI,KAAK,kCAAkC;CAE3C,MAAM,SAAS,8BAA8B;AAC7C,gCAA+B;AAE/B,KAAI,QAAQ,OAAO;AACjB,MAAI,KAAK,+CAA+C;AACxD,UAAQ,KAAK,EAAE;;CAIjB,MAAM,SAAS,QAAQ,UAAU;AAEjC,KAAI,CAAC,wBAAwB;AAC3B,MAAI,KAAK,6CAA6C;AACtD,UAAQ,KAAK,EAAE;;CAGjB,MAAM,cAAc,wBAAwB;AAC5C,KAAI,eAAe,GAAG;AACpB,MAAI,KAAK,6CAA6C;AACtD,UAAQ,KAAK,EAAE;;AAGjB,KAAI,KAAK;EAAE;EAAa;EAAQ,EAAE,6CAA6C;AAE/E,OAAM,kCAAkC,OAAO;AAC/C,KAAI,KAAK,8CAA8C;AACvD,SAAQ,KAAK,EAAE;;AAGjB,eAAe,kCAAkC,WAAkC;CACjF,MAAM,YAAY,KAAK,KAAK;CAC5B,MAAM,iBAAiB;AAEvB,QAAO,KAAK,KAAK,GAAG,YAAY,WAAW;AACzC,MAAI,CAAC,uBAAwB;AAG7B,MADoB,wBACL,IAAI,EACjB;AAGF,QAAM,IAAI,SAAS,YAAY,WAAW,SAAS,eAAe,CAAC;;CAIrE,MAAM,YAAY,0BAA0B,IAAI;AAChD,KAAI,YAAY,EACd,KAAI,KAAK;EAAE;EAAW;EAAW,EAAE,wCAAwC"}

package/dist/src/gateway/security/flood-guard.d.ts

@@ -1,28 +0,0 @@
-/**
- * Unauthorized flood guard for WebSocket connections.
- *
- * Tracks repeated unauthorized message attempts on a single WS connection
- * and decides when to forcibly close it. Prevents a rogue client from
- * holding a socket open and spamming unauthorized requests.
- */
-export type FloodGuardOptions = {
-    /** Close the connection after this many unauthorized messages. @default 10 */
-    closeAfter?: number;
-    /** Log every N unauthorized messages to prevent log spam. @default 100 */
-    logEvery?: number;
-};
-export type FloodGuardDecision = {
-    shouldClose: boolean;
-    shouldLog: boolean;
-    count: number;
-    suppressedSinceLastLog: number;
-};
-export declare class UnauthorizedFloodGuard {
-    private readonly closeAfter;
-    private readonly logEvery;
-    private count;
-    private suppressedSinceLastLog;
-    constructor(options?: FloodGuardOptions);
-    registerUnauthorized(): FloodGuardDecision;
-    reset(): void;
-}

package/dist/src/gateway/security/flood-guard.js

@@ -1,42 +0,0 @@
-//#region src/gateway/security/flood-guard.ts
-const DEFAULT_CLOSE_AFTER = 10;
-const DEFAULT_LOG_EVERY = 100;
-var UnauthorizedFloodGuard = class {
-	closeAfter;
-	logEvery;
-	count = 0;
-	suppressedSinceLastLog = 0;
-	constructor(options) {
-		this.closeAfter = Math.max(1, Math.floor(options?.closeAfter ?? DEFAULT_CLOSE_AFTER));
-		this.logEvery = Math.max(1, Math.floor(options?.logEvery ?? DEFAULT_LOG_EVERY));
-	}
-	registerUnauthorized() {
-		this.count += 1;
-		const shouldClose = this.count > this.closeAfter;
-		if (!(this.count === 1 || this.count % this.logEvery === 0 || shouldClose)) {
-			this.suppressedSinceLastLog += 1;
-			return {
-				shouldClose,
-				shouldLog: false,
-				count: this.count,
-				suppressedSinceLastLog: 0
-			};
-		}
-		const suppressedSinceLastLog = this.suppressedSinceLastLog;
-		this.suppressedSinceLastLog = 0;
-		return {
-			shouldClose,
-			shouldLog: true,
-			count: this.count,
-			suppressedSinceLastLog
-		};
-	}
-	reset() {
-		this.count = 0;
-		this.suppressedSinceLastLog = 0;
-	}
-};
-//#endregion
-export { UnauthorizedFloodGuard };
-
-//# sourceMappingURL=flood-guard.js.map

package/dist/src/gateway/security/flood-guard.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"flood-guard.js","names":[],"sources":["../../../../src/gateway/security/flood-guard.ts"],"sourcesContent":["/**\n * Unauthorized flood guard for WebSocket connections.\n *\n * Tracks repeated unauthorized message attempts on a single WS connection\n * and decides when to forcibly close it. Prevents a rogue client from\n * holding a socket open and spamming unauthorized requests.\n */\n\nexport type FloodGuardOptions = {\n  /** Close the connection after this many unauthorized messages. @default 10 */\n  closeAfter?: number;\n  /** Log every N unauthorized messages to prevent log spam. @default 100 */\n  logEvery?: number;\n};\n\nexport type FloodGuardDecision = {\n  shouldClose: boolean;\n  shouldLog: boolean;\n  count: number;\n  suppressedSinceLastLog: number;\n};\n\nconst DEFAULT_CLOSE_AFTER = 10;\nconst DEFAULT_LOG_EVERY = 100;\n\nexport class UnauthorizedFloodGuard {\n  private readonly closeAfter: number;\n  private readonly logEvery: number;\n  private count = 0;\n  private suppressedSinceLastLog = 0;\n\n  constructor(options?: FloodGuardOptions) {\n    this.closeAfter = Math.max(1, Math.floor(options?.closeAfter ?? DEFAULT_CLOSE_AFTER));\n    this.logEvery = Math.max(1, Math.floor(options?.logEvery ?? DEFAULT_LOG_EVERY));\n  }\n\n  registerUnauthorized(): FloodGuardDecision {\n    this.count += 1;\n    const shouldClose = this.count > this.closeAfter;\n    const shouldLog = this.count === 1 || this.count % this.logEvery === 0 || shouldClose;\n\n    if (!shouldLog) {\n      this.suppressedSinceLastLog += 1;\n      return {\n        shouldClose,\n        shouldLog: false,\n        count: this.count,\n        suppressedSinceLastLog: 0,\n      };\n    }\n\n    const suppressedSinceLastLog = this.suppressedSinceLastLog;\n    this.suppressedSinceLastLog = 0;\n    return {\n      shouldClose,\n      shouldLog: true,\n      count: this.count,\n      suppressedSinceLastLog,\n    };\n  }\n\n  reset(): void {\n    this.count = 0;\n    this.suppressedSinceLastLog = 0;\n  }\n}\n"],"mappings":";AAsBA,MAAM,sBAAsB;AAC5B,MAAM,oBAAoB;AAE1B,IAAa,yBAAb,MAAoC;CAClC;CACA;CACA,QAAgB;CAChB,yBAAiC;CAEjC,YAAY,SAA6B;AACvC,OAAK,aAAa,KAAK,IAAI,GAAG,KAAK,MAAM,SAAS,cAAc,oBAAoB,CAAC;AACrF,OAAK,WAAW,KAAK,IAAI,GAAG,KAAK,MAAM,SAAS,YAAY,kBAAkB,CAAC;;CAGjF,uBAA2C;AACzC,OAAK,SAAS;EACd,MAAM,cAAc,KAAK,QAAQ,KAAK;AAGtC,MAAI,EAFc,KAAK,UAAU,KAAK,KAAK,QAAQ,KAAK,aAAa,KAAK,cAE1D;AACd,QAAK,0BAA0B;AAC/B,UAAO;IACL;IACA,WAAW;IACX,OAAO,KAAK;IACZ,wBAAwB;IACzB;;EAGH,MAAM,yBAAyB,KAAK;AACpC,OAAK,yBAAyB;AAC9B,SAAO;GACL;GACA,WAAW;GACX,OAAO,KAAK;GACZ;GACD;;CAGH,QAAc;AACZ,OAAK,QAAQ;AACb,OAAK,yBAAyB"}

package/dist/src/infra/rate-limit.d.ts

@@ -1,38 +0,0 @@
-/**
- * Fixed Window Rate Limiter
- *
- * Simple rate limiting using fixed window algorithm.
- * Prevents abuse by limiting requests within a time window.
- */
-export type RateLimitResult = {
-    /** Whether the request is allowed */
-    allowed: boolean;
-    /** Time to wait before retry (ms) */
-    retryAfterMs: number;
-    /** Remaining requests in current window */
-    remaining: number;
-};
-export type FixedWindowRateLimiter = {
-    consume: () => RateLimitResult;
-    reset: () => void;
-};
-export declare function createFixedWindowRateLimiter(params: {
-    maxRequests: number;
-    windowMs: number;
-    now?: () => number;
-}): FixedWindowRateLimiter;
-/** Per-session rate limiter cache */
-export declare class SessionRateLimiter {
-    private readonly config;
-    private readonly limiters;
-    constructor(config: {
-        maxRequests: number;
-        windowMs: number;
-    });
-    /** Consume a request for the given session */
-    consume(sessionKey: string): RateLimitResult;
-    /** Reset rate limiter for a session */
-    reset(sessionKey: string): void;
-    /** Clear all limiters */
-    clear(): void;
-}

package/dist/src/infra/rate-limit.js

@@ -1,60 +0,0 @@
-//#region src/infra/rate-limit.ts
-function createFixedWindowRateLimiter(params) {
-	const maxRequests = Math.max(1, Math.floor(params.maxRequests));
-	const windowMs = Math.max(1, Math.floor(params.windowMs));
-	const now = params.now ?? Date.now;
-	let count = 0;
-	let windowStartMs = 0;
-	return {
-		consume() {
-			const nowMs = now();
-			if (nowMs - windowStartMs >= windowMs) {
-				windowStartMs = nowMs;
-				count = 0;
-			}
-			if (count >= maxRequests) return {
-				allowed: false,
-				retryAfterMs: Math.max(0, windowStartMs + windowMs - nowMs),
-				remaining: 0
-			};
-			count += 1;
-			return {
-				allowed: true,
-				retryAfterMs: 0,
-				remaining: Math.max(0, maxRequests - count)
-			};
-		},
-		reset() {
-			count = 0;
-			windowStartMs = 0;
-		}
-	};
-}
-/** Per-session rate limiter cache */
-var SessionRateLimiter = class {
-	limiters = /* @__PURE__ */ new Map();
-	constructor(config) {
-		this.config = config;
-	}
-	/** Consume a request for the given session */
-	consume(sessionKey) {
-		let limiter = this.limiters.get(sessionKey);
-		if (!limiter) {
-			limiter = createFixedWindowRateLimiter(this.config);
-			this.limiters.set(sessionKey, limiter);
-		}
-		return limiter.consume();
-	}
-	/** Reset rate limiter for a session */
-	reset(sessionKey) {
-		this.limiters.delete(sessionKey);
-	}
-	/** Clear all limiters */
-	clear() {
-		this.limiters.clear();
-	}
-};
-//#endregion
-export { SessionRateLimiter, createFixedWindowRateLimiter };
-
-//# sourceMappingURL=rate-limit.js.map

package/dist/src/infra/rate-limit.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"rate-limit.js","names":[],"sources":["../../../src/infra/rate-limit.ts"],"sourcesContent":["/**\n * Fixed Window Rate Limiter\n *\n * Simple rate limiting using fixed window algorithm.\n * Prevents abuse by limiting requests within a time window.\n */\n\nexport type RateLimitResult = {\n  /** Whether the request is allowed */\n  allowed: boolean;\n  /** Time to wait before retry (ms) */\n  retryAfterMs: number;\n  /** Remaining requests in current window */\n  remaining: number;\n};\n\nexport type FixedWindowRateLimiter = {\n  consume: () => RateLimitResult;\n  reset: () => void;\n};\n\nexport function createFixedWindowRateLimiter(params: {\n  maxRequests: number;\n  windowMs: number;\n  now?: () => number;\n}): FixedWindowRateLimiter {\n  const maxRequests = Math.max(1, Math.floor(params.maxRequests));\n  const windowMs = Math.max(1, Math.floor(params.windowMs));\n  const now = params.now ?? Date.now;\n\n  let count = 0;\n  let windowStartMs = 0;\n\n  return {\n    consume(): RateLimitResult {\n      const nowMs = now();\n      \n      // Reset window if expired\n      if (nowMs - windowStartMs >= windowMs) {\n        windowStartMs = nowMs;\n        count = 0;\n      }\n\n      // Check limit\n      if (count >= maxRequests) {\n        return {\n          allowed: false,\n          retryAfterMs: Math.max(0, windowStartMs + windowMs - nowMs),\n          remaining: 0,\n        };\n      }\n\n      count += 1;\n      return {\n        allowed: true,\n        retryAfterMs: 0,\n        remaining: Math.max(0, maxRequests - count),\n      };\n    },\n\n    reset(): void {\n      count = 0;\n      windowStartMs = 0;\n    },\n  };\n}\n\n/** Per-session rate limiter cache */\nexport class SessionRateLimiter {\n  private readonly limiters = new Map<string, FixedWindowRateLimiter>();\n\n  constructor(\n    private readonly config: {\n      maxRequests: number;\n      windowMs: number;\n    }\n  ) {}\n\n  /** Consume a request for the given session */\n  consume(sessionKey: string): RateLimitResult {\n    let limiter = this.limiters.get(sessionKey);\n    if (!limiter) {\n      limiter = createFixedWindowRateLimiter(this.config);\n      this.limiters.set(sessionKey, limiter);\n    }\n    return limiter.consume();\n  }\n\n  /** Reset rate limiter for a session */\n  reset(sessionKey: string): void {\n    this.limiters.delete(sessionKey);\n  }\n\n  /** Clear all limiters */\n  clear(): void {\n    this.limiters.clear();\n  }\n}\n"],"mappings":";AAqBA,SAAgB,6BAA6B,QAIlB;CACzB,MAAM,cAAc,KAAK,IAAI,GAAG,KAAK,MAAM,OAAO,YAAY,CAAC;CAC/D,MAAM,WAAW,KAAK,IAAI,GAAG,KAAK,MAAM,OAAO,SAAS,CAAC;CACzD,MAAM,MAAM,OAAO,OAAO,KAAK;CAE/B,IAAI,QAAQ;CACZ,IAAI,gBAAgB;AAEpB,QAAO;EACL,UAA2B;GACzB,MAAM,QAAQ,KAAK;AAGnB,OAAI,QAAQ,iBAAiB,UAAU;AACrC,oBAAgB;AAChB,YAAQ;;AAIV,OAAI,SAAS,YACX,QAAO;IACL,SAAS;IACT,cAAc,KAAK,IAAI,GAAG,gBAAgB,WAAW,MAAM;IAC3D,WAAW;IACZ;AAGH,YAAS;AACT,UAAO;IACL,SAAS;IACT,cAAc;IACd,WAAW,KAAK,IAAI,GAAG,cAAc,MAAM;IAC5C;;EAGH,QAAc;AACZ,WAAQ;AACR,mBAAgB;;EAEnB;;;AAIH,IAAa,qBAAb,MAAgC;CAC9B,2BAA4B,IAAI,KAAqC;CAErE,YACE,QAIA;AAJiB,OAAA,SAAA;;;CAOnB,QAAQ,YAAqC;EAC3C,IAAI,UAAU,KAAK,SAAS,IAAI,WAAW;AAC3C,MAAI,CAAC,SAAS;AACZ,aAAU,6BAA6B,KAAK,OAAO;AACnD,QAAK,SAAS,IAAI,YAAY,QAAQ;;AAExC,SAAO,QAAQ,SAAS;;;CAI1B,MAAM,YAA0B;AAC9B,OAAK,SAAS,OAAO,WAAW;;;CAIlC,QAAc;AACZ,OAAK,SAAS,OAAO"}

package/dist/src/infra/restart-intent.d.ts

@@ -1,13 +0,0 @@
-/**
- * Restart Intent - File-based coordination between CLI and gateway
- *
- * CLI writes an intent file before sending restart signal.
- * Gateway reads it in SIGUSR1 handler to determine restart behavior.
- */
-import type { GatewayRestartIntent } from '../daemon/types.js';
-/** Write restart intent (CLI side, before sending restart signal) */
-export declare function writeGatewayRestartIntentSync(intent: GatewayRestartIntent): void;
-/** Read restart intent (gateway side, in SIGUSR1 handler) */
-export declare function readGatewayRestartIntentSync(): GatewayRestartIntent | null;
-/** Clear restart intent (after consumption) */
-export declare function clearGatewayRestartIntentSync(): void;

package/dist/src/infra/restart-intent.js

@@ -1,40 +0,0 @@
-import { init_paths_state, resolveStateDir } from "../config/paths-state.js";
-import path from "node:path";
-import { mkdirSync, readFileSync, rmSync, writeFileSync } from "node:fs";
-//#region src/infra/restart-intent.ts
-/**
-* Restart Intent - File-based coordination between CLI and gateway
-*
-* CLI writes an intent file before sending restart signal.
-* Gateway reads it in SIGUSR1 handler to determine restart behavior.
-*/
-init_paths_state();
-const INTENT_FILENAME = "restart-intent.json";
-function resolveIntentPath() {
-	return path.join(resolveStateDir(), INTENT_FILENAME);
-}
-/** Write restart intent (CLI side, before sending restart signal) */
-function writeGatewayRestartIntentSync(intent) {
-	const intentPath = resolveIntentPath();
-	mkdirSync(path.dirname(intentPath), { recursive: true });
-	writeFileSync(intentPath, JSON.stringify(intent, null, 2), "utf8");
-}
-/** Read restart intent (gateway side, in SIGUSR1 handler) */
-function readGatewayRestartIntentSync() {
-	try {
-		const raw = readFileSync(resolveIntentPath(), "utf8");
-		return JSON.parse(raw);
-	} catch {
-		return null;
-	}
-}
-/** Clear restart intent (after consumption) */
-function clearGatewayRestartIntentSync() {
-	try {
-		rmSync(resolveIntentPath());
-	} catch {}
-}
-//#endregion
-export { clearGatewayRestartIntentSync, readGatewayRestartIntentSync, writeGatewayRestartIntentSync };
-
-//# sourceMappingURL=restart-intent.js.map

package/dist/src/infra/restart-intent.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"restart-intent.js","names":[],"sources":["../../../src/infra/restart-intent.ts"],"sourcesContent":["/**\n * Restart Intent - File-based coordination between CLI and gateway\n *\n * CLI writes an intent file before sending restart signal.\n * Gateway reads it in SIGUSR1 handler to determine restart behavior.\n */\n\nimport { mkdirSync, readFileSync, writeFileSync, rmSync } from 'node:fs';\nimport path from 'node:path';\nimport { resolveStateDir } from '../config/paths-state.js';\nimport type { GatewayRestartIntent } from '../daemon/types.js';\n\nconst INTENT_FILENAME = 'restart-intent.json';\n\nfunction resolveIntentPath(): string {\n  return path.join(resolveStateDir(), INTENT_FILENAME);\n}\n\n/** Write restart intent (CLI side, before sending restart signal) */\nexport function writeGatewayRestartIntentSync(intent: GatewayRestartIntent): void {\n  const intentPath = resolveIntentPath();\n  mkdirSync(path.dirname(intentPath), { recursive: true });\n  writeFileSync(intentPath, JSON.stringify(intent, null, 2), 'utf8');\n}\n\n/** Read restart intent (gateway side, in SIGUSR1 handler) */\nexport function readGatewayRestartIntentSync(): GatewayRestartIntent | null {\n  try {\n    const raw = readFileSync(resolveIntentPath(), 'utf8');\n    return JSON.parse(raw) as GatewayRestartIntent;\n  } catch {\n    return null;\n  }\n}\n\n/** Clear restart intent (after consumption) */\nexport function clearGatewayRestartIntentSync(): void {\n  try {\n    rmSync(resolveIntentPath());\n  } catch {\n    // File may not exist\n  }\n}\n"],"mappings":";;;;;;;;;;kBAS2D;AAG3D,MAAM,kBAAkB;AAExB,SAAS,oBAA4B;AACnC,QAAO,KAAK,KAAK,iBAAiB,EAAE,gBAAgB;;;AAItD,SAAgB,8BAA8B,QAAoC;CAChF,MAAM,aAAa,mBAAmB;AACtC,WAAU,KAAK,QAAQ,WAAW,EAAE,EAAE,WAAW,MAAM,CAAC;AACxD,eAAc,YAAY,KAAK,UAAU,QAAQ,MAAM,EAAE,EAAE,OAAO;;;AAIpE,SAAgB,+BAA4D;AAC1E,KAAI;EACF,MAAM,MAAM,aAAa,mBAAmB,EAAE,OAAO;AACrD,SAAO,KAAK,MAAM,IAAI;SAChB;AACN,SAAO;;;;AAKX,SAAgB,gCAAsC;AACpD,KAAI;AACF,SAAO,mBAAmB,CAAC;SACrB"}

package/dist/src/infra/restart-sentinel.d.ts

@@ -1,23 +0,0 @@
-/**
- * Restart Sentinel - Upgrade recovery coordination
- *
- * After an auto-update completes, the update runner writes a sentinel file.
- * On next gateway startup, the sentinel is consumed to:
- * 1. Log the version transition
- * 2. Restore active session context
- * 3. Broadcast update-complete via SSE
- */
-export interface RestartSentinel {
-    previousVersion: string;
-    newVersion: string;
-    restartedAt: string;
-    sessionKeys?: string[];
-    reason?: string;
-}
-export declare function writeRestartSentinel(sentinel: RestartSentinel): void;
-/** Read and delete the sentinel file atomically. Returns null if not present. */
-export declare function consumeRestartSentinel(): RestartSentinel | null;
-/** Read without consuming (for inspection) */
-export declare function readRestartSentinel(): RestartSentinel | null;
-/** Check if a sentinel file exists */
-export declare function hasRestartSentinel(): boolean;

package/dist/src/infra/restart-sentinel.js

@@ -1,75 +0,0 @@
-import { init_paths_state, resolveStateDir } from "../config/paths-state.js";
-import { createLogger } from "../utils/logger/index.js";
-import { init_logger } from "../utils/logger.js";
-import path from "node:path";
-import { mkdirSync, readFileSync, rmSync, writeFileSync } from "node:fs";
-//#region src/infra/restart-sentinel.ts
-/**
-* Restart Sentinel - Upgrade recovery coordination
-*
-* After an auto-update completes, the update runner writes a sentinel file.
-* On next gateway startup, the sentinel is consumed to:
-* 1. Log the version transition
-* 2. Restore active session context
-* 3. Broadcast update-complete via SSE
-*/
-init_paths_state();
-init_logger();
-const log = createLogger("RestartSentinel");
-const SENTINEL_FILENAME = "restart-sentinel.json";
-function resolveSentinelPath() {
-	return path.join(resolveStateDir(), SENTINEL_FILENAME);
-}
-function writeRestartSentinel(sentinel) {
-	const sentinelPath = resolveSentinelPath();
-	mkdirSync(path.dirname(sentinelPath), { recursive: true });
-	writeFileSync(sentinelPath, JSON.stringify(sentinel, null, 2), "utf8");
-	log.info({
-		previousVersion: sentinel.previousVersion,
-		newVersion: sentinel.newVersion
-	}, "Restart sentinel written");
-}
-/** Read and delete the sentinel file atomically. Returns null if not present. */
-function consumeRestartSentinel() {
-	const sentinelPath = resolveSentinelPath();
-	try {
-		const raw = readFileSync(sentinelPath, "utf8");
-		const parsed = JSON.parse(raw);
-		if (!parsed.previousVersion || !parsed.newVersion || !parsed.restartedAt) {
-			rmSync(sentinelPath, { force: true });
-			return null;
-		}
-		rmSync(sentinelPath, { force: true });
-		log.info({
-			previousVersion: parsed.previousVersion,
-			newVersion: parsed.newVersion
-		}, "Restart sentinel consumed");
-		return parsed;
-	} catch {
-		return null;
-	}
-}
-/** Read without consuming (for inspection) */
-function readRestartSentinel() {
-	try {
-		const raw = readFileSync(resolveSentinelPath(), "utf8");
-		const parsed = JSON.parse(raw);
-		if (!parsed.previousVersion || !parsed.newVersion) return null;
-		return parsed;
-	} catch {
-		return null;
-	}
-}
-/** Check if a sentinel file exists */
-function hasRestartSentinel() {
-	try {
-		readFileSync(resolveSentinelPath());
-		return true;
-	} catch {
-		return false;
-	}
-}
-//#endregion
-export { consumeRestartSentinel, hasRestartSentinel, readRestartSentinel, writeRestartSentinel };
-
-//# sourceMappingURL=restart-sentinel.js.map