claude-flow-novice 2.15.3 → 2.15.4

package/dist/lib/multi-system-query.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/lib/multi-system-query.ts"],"sourcesContent":["/**\r\n * Multi-System Query Engine\r\n *\r\n * Provides fluent interface for cross-database queries with priority-ordered execution.\r\n * Part of Task 3.3: Query Correlation Key Layer\r\n *\r\n * @example\r\n * ```typescript\r\n * const query = new MultiSystemQuery(dbService);\r\n * const results = await query\r\n *   .forTask('task-001')\r\n *   .includingEntities(['agent', 'skill', 'artifact'])\r\n *   .fromSystems(['redis', 'sqlite', 'postgres'])\r\n *   .withCache(true)\r\n *   .execute();\r\n * // Returns: { agents: [...], skills: [...], artifacts: [...] }\r\n * ```\r\n */\r\n\r\nimport { DatabaseService } from './database-service.js';\r\nimport {\r\n  CorrelationKey,\r\n  DatabaseError,\r\n  DatabaseErrorCode,\r\n  QueryFilter,\r\n  QueryOptions,\r\n} from './database-service/types.js';\r\nimport {\r\n  buildCorrelationKey,\r\n  buildWildcardPattern,\r\n  getEntityTypes,\r\n  WildcardPattern,\r\n} from './database-service/correlation.js';\r\nimport { CorrelationCache } from './correlation-cache.js';\r\nimport { createLogger, Logger } from './logging.js';\r\nimport { createDatabaseError } from './database-service/errors.js';\r\nimport {\r\n  ErrorAggregator,\r\n  createErrorAggregator,\r\n  ErrorSeverity,\r\n} from './error-aggregator.js';\r\n\r\n/**\r\n * Database system type\r\n */\r\nexport type DatabaseSystem = 'redis' | 'sqlite' | 'postgres';\r\n\r\n/**\r\n * Query execution priority\r\n */\r\nexport type ExecutionPriority = 'fastest' | 'balanced' | 'comprehensive';\r\n\r\n/**\r\n * Multi-system query result\r\n */\r\nexport interface MultiSystemResult<T = any> {\r\n  /** Correlation key used for query */\r\n  correlationKey: string;\r\n  /** Results from Redis */\r\n  redis?: T[];\r\n  /** Results from SQLite */\r\n  sqlite?: T[];\r\n  /** Results from PostgreSQL */\r\n  postgres?: T[];\r\n  /** Merged and deduplicated results */\r\n  merged: T[];\r\n  /** Query execution time in milliseconds */\r\n  executionTime: number;\r\n  /** Timestamp of query execution */\r\n  timestamp: Date;\r\n  /** Cache hit status */\r\n  cacheHit?: boolean;\r\n  /** Errors encountered during query */\r\n  errors?: DatabaseError[];\r\n}\r\n\r\n/**\r\n * Query builder configuration\r\n */\r\nexport interface QueryBuilderConfig {\r\n  /** Database service instance */\r\n  dbService: DatabaseService;\r\n  /** Correlation cache instance (optional) */\r\n  cache?: CorrelationCache;\r\n  /** Enable caching (default: false) */\r\n  enableCache?: boolean;\r\n  /** Default timeout in milliseconds (default: 2000) */\r\n  defaultTimeout?: number;\r\n  /** Logger instance (optional) */\r\n  logger?: Logger;\r\n}\r\n\r\n/**\r\n * Multi-system query builder\r\n *\r\n * Provides fluent interface for building and executing cross-database queries.\r\n */\r\nexport class MultiSystemQuery {\r\n  private dbService: DatabaseService;\r\n  private cache?: CorrelationCache;\r\n  private logger: Logger;\r\n  private errorAggregator?: ErrorAggregator;\r\n\r\n  // Query configuration\r\n  private correlationKey?: CorrelationKey;\r\n  private wildcardPattern?: WildcardPattern;\r\n  private entities: string[] = [];\r\n  private systems: DatabaseSystem[] = ['redis', 'sqlite', 'postgres'];\r\n  private priority: ExecutionPriority = 'balanced';\r\n  private useCache: boolean = false;\r\n  private timeout: number = 2000; // 2 seconds\r\n  private filters: QueryFilter[] = [];\r\n  private strictMode: boolean = false; // Fail operation if any system fails\r\n\r\n  constructor(config: QueryBuilderConfig) {\r\n    this.dbService = config.dbService;\r\n    this.cache = config.cache;\r\n    this.useCache = config.enableCache || false;\r\n    this.timeout = config.defaultTimeout || 2000;\r\n    this.logger = config.logger || createLogger('multi-system-query');\r\n  }\r\n\r\n  /**\r\n   * Query for specific task\r\n   *\r\n   * @param taskId - Task ID to query\r\n   * @returns Query builder (fluent)\r\n   */\r\n  forTask(taskId: string): this {\r\n    this.correlationKey = {\r\n      type: 'task',\r\n      id: taskId,\r\n    };\r\n    return this;\r\n  }\r\n\r\n  /**\r\n   * Query for specific agent\r\n   *\r\n   * @param agentId - Agent ID to query\r\n   * @returns Query builder (fluent)\r\n   */\r\n  forAgent(agentId: string): this {\r\n    this.correlationKey = {\r\n      type: 'agent',\r\n      id: agentId,\r\n    };\r\n    return this;\r\n  }\r\n\r\n  /**\r\n   * Query for specific skill\r\n   *\r\n   * @param skillId - Skill ID to query\r\n   * @returns Query builder (fluent)\r\n   */\r\n  forSkill(skillId: string): this {\r\n    this.correlationKey = {\r\n      type: 'skill',\r\n      id: skillId,\r\n    };\r\n    return this;\r\n  }\r\n\r\n  /**\r\n   * Query for specific execution\r\n   *\r\n   * @param executionId - Execution ID to query\r\n   * @returns Query builder (fluent)\r\n   */\r\n  forExecution(executionId: string): this {\r\n    this.correlationKey = {\r\n      type: 'execution',\r\n      id: executionId,\r\n    };\r\n    return this;\r\n  }\r\n\r\n  /**\r\n   * Query with custom correlation key\r\n   *\r\n   * @param key - Correlation key\r\n   * @returns Query builder (fluent)\r\n   */\r\n  withKey(key: CorrelationKey): this {\r\n    this.correlationKey = key;\r\n    return this;\r\n  }\r\n\r\n  /**\r\n   * Query with wildcard pattern\r\n   *\r\n   * @param pattern - Wildcard pattern\r\n   * @returns Query builder (fluent)\r\n   */\r\n  withPattern(pattern: WildcardPattern): this {\r\n    this.wildcardPattern = pattern;\r\n    return this;\r\n  }\r\n\r\n  /**\r\n   * Include specific entity types\r\n   *\r\n   * @param entities - Entity types to include\r\n   * @returns Query builder (fluent)\r\n   */\r\n  includingEntities(entities: string[]): this {\r\n    this.entities = entities;\r\n    return this;\r\n  }\r\n\r\n  /**\r\n   * Query from specific database systems\r\n   *\r\n   * @param systems - Database systems to query\r\n   * @returns Query builder (fluent)\r\n   */\r\n  fromSystems(systems: DatabaseSystem[]): this {\r\n    this.systems = systems;\r\n    return this;\r\n  }\r\n\r\n  /**\r\n   * Set execution priority\r\n   *\r\n   * @param priority - Execution priority\r\n   * @returns Query builder (fluent)\r\n   */\r\n  withPriority(priority: ExecutionPriority): this {\r\n    this.priority = priority;\r\n    return this;\r\n  }\r\n\r\n  /**\r\n   * Enable or disable caching\r\n   *\r\n   * @param enabled - Enable cache\r\n   * @returns Query builder (fluent)\r\n   */\r\n  withCache(enabled: boolean): this {\r\n    this.useCache = enabled;\r\n    return this;\r\n  }\r\n\r\n  /**\r\n   * Set query timeout\r\n   *\r\n   * @param timeout - Timeout in milliseconds\r\n   * @returns Query builder (fluent)\r\n   */\r\n  withTimeout(timeout: number): this {\r\n    this.timeout = timeout;\r\n    return this;\r\n  }\r\n\r\n  /**\r\n   * Add query filter\r\n   *\r\n   * @param filter - Query filter\r\n   * @returns Query builder (fluent)\r\n   */\r\n  addFilter(filter: QueryFilter): this {\r\n    this.filters.push(filter);\r\n    return this;\r\n  }\r\n\r\n  /**\r\n   * Set whether to fail on partial errors\r\n   *\r\n   * @param fail - Fail if any system fails\r\n   * @returns Query builder (fluent)\r\n   */\r\n  failOnPartialError(fail: boolean = true): this {\r\n    this.strictMode = fail;\r\n    return this;\r\n  }\r\n\r\n  /**\r\n   * Execute multi-system query\r\n   *\r\n   * @returns Multi-system query results\r\n   * @throws {DatabaseError} If all systems fail or critical error occurs\r\n   */\r\n  async execute<T = any>(): Promise<MultiSystemResult<T>> {\r\n    const startTime = Date.now();\r\n\r\n    // Validate query configuration\r\n    this.validateQuery();\r\n\r\n    // Initialize error aggregator with correlation ID\r\n    this.errorAggregator = createErrorAggregator();\r\n    const correlationId = this.errorAggregator.getCorrelationId();\r\n\r\n    this.logger.info('Starting multi-system query', {\r\n      correlationId,\r\n      systems: this.systems,\r\n      priority: this.priority,\r\n    });\r\n\r\n    // Build cache key\r\n    const cacheKey = this.buildCacheKey();\r\n\r\n    // Check cache first\r\n    if (this.useCache && this.cache) {\r\n      const cached = this.cache.get<MultiSystemResult<T>>(cacheKey);\r\n      if (cached) {\r\n        this.logger.debug('Cache hit', { cacheKey, correlationId });\r\n        return {\r\n          ...cached,\r\n          cacheHit: true,\r\n        };\r\n      }\r\n    }\r\n\r\n    // Execute query based on priority\r\n    let result: MultiSystemResult<T>;\r\n    try {\r\n      result = await this.executeByPriority<T>();\r\n    } catch (error) {\r\n      // Critical error during execution\r\n      this.logger.error(\r\n        'Critical error during query execution',\r\n        error instanceof Error ? error : undefined,\r\n        {\r\n          correlationId,\r\n          errorMessage: error instanceof Error ? error.message : String(error),\r\n        }\r\n      );\r\n\r\n      throw createDatabaseError(\r\n        DatabaseErrorCode.QUERY_FAILED,\r\n        'Multi-system query failed with critical error',\r\n        error instanceof Error ? error : undefined,\r\n        { correlationId, systems: this.systems }\r\n      );\r\n    }\r\n\r\n    // Check if we should fail based on errors\r\n    if (this.errorAggregator.shouldFailOperation(this.systems)) {\r\n      const errorReport = this.errorAggregator.createReport();\r\n      this.logger.error(\r\n        'Multi-system query failed',\r\n        undefined,\r\n        {\r\n          correlationId,\r\n          errorReport,\r\n        }\r\n      );\r\n\r\n      const aggregationResult = this.errorAggregator.getResult(this.systems);\r\n\r\n      throw createDatabaseError(\r\n        aggregationResult.hasCriticalErrors\r\n          ? DatabaseErrorCode.QUERY_FAILED\r\n          : DatabaseErrorCode.QUERY_FAILED,\r\n        aggregationResult.allSystemsFailed\r\n          ? 'All database systems failed'\r\n          : 'Critical errors occurred during query execution',\r\n        undefined,\r\n        {\r\n          correlationId,\r\n          errorCount: aggregationResult.totalErrors,\r\n          failedSystems: Object.keys(aggregationResult.errorsBySystem),\r\n          errors: aggregationResult.allErrors.map(e => ({\r\n            system: e.system,\r\n            code: e.error.code,\r\n            message: e.error.message,\r\n            severity: e.severity,\r\n          })),\r\n        }\r\n      );\r\n    }\r\n\r\n    // Check for partial errors\r\n    if (this.strictMode && result.errors && result.errors.length > 0) {\r\n      const errorReport = this.errorAggregator.createReport();\r\n      this.logger.error(\r\n        'Query failed due to partial errors',\r\n        undefined,\r\n        {\r\n          correlationId,\r\n          errorCount: result.errors.length,\r\n          errorReport,\r\n        }\r\n      );\r\n\r\n      throw createDatabaseError(\r\n        DatabaseErrorCode.QUERY_FAILED,\r\n        `Query failed with ${result.errors.length} error(s)`,\r\n        undefined,\r\n        {\r\n          correlationId,\r\n          errors: result.errors,\r\n        }\r\n      );\r\n    }\r\n\r\n    // Merge and deduplicate results\r\n    result.merged = this.mergeResults(result);\r\n\r\n    // Calculate execution time\r\n    result.executionTime = Date.now() - startTime;\r\n    result.timestamp = new Date();\r\n    result.cacheHit = false;\r\n\r\n    // Validate performance requirement (<2s)\r\n    if (result.executionTime >= this.timeout) {\r\n      this.logger.warn('Query exceeded timeout', {\r\n        correlationId,\r\n        executionTime: result.executionTime,\r\n        timeout: this.timeout,\r\n      });\r\n    }\r\n\r\n    // Log success\r\n    this.logger.info('Multi-system query completed', {\r\n      correlationId,\r\n      executionTime: result.executionTime,\r\n      resultCount: result.merged.length,\r\n      errorCount: result.errors?.length || 0,\r\n    });\r\n\r\n    // Store in cache\r\n    if (this.useCache && this.cache) {\r\n      this.cache.set(cacheKey, result);\r\n    }\r\n\r\n    return result;\r\n  }\r\n\r\n  /**\r\n   * Execute query based on priority strategy\r\n   */\r\n  private async executeByPriority<T>(): Promise<MultiSystemResult<T>> {\r\n    const result: MultiSystemResult<T> = {\r\n      correlationKey: this.buildCorrelationKeyString(),\r\n      merged: [],\r\n      executionTime: 0,\r\n      timestamp: new Date(),\r\n      errors: [],\r\n    };\r\n\r\n    switch (this.priority) {\r\n      case 'fastest':\r\n        return this.executeFastest<T>(result);\r\n\r\n      case 'balanced':\r\n        return this.executeBalanced<T>(result);\r\n\r\n      case 'comprehensive':\r\n        return this.executeComprehensive<T>(result);\r\n\r\n      default:\r\n        return this.executeBalanced<T>(result);\r\n    }\r\n  }\r\n\r\n  /**\r\n   * Execute fastest strategy (stop on first result)\r\n   */\r\n  private async executeFastest<T>(result: MultiSystemResult<T>): Promise<MultiSystemResult<T>> {\r\n    if (!this.errorAggregator) {\r\n      throw new Error('Error aggregator not initialized');\r\n    }\r\n\r\n    // Query in priority order: Redis → SQLite → PostgreSQL\r\n    const orderedSystems = this.getOrderedSystems();\r\n\r\n    for (const system of orderedSystems) {\r\n      // Check circuit breaker\r\n      if (this.errorAggregator.isCircuitOpen(system)) {\r\n        this.logger.warn(`Circuit breaker open for ${system}, skipping`, {\r\n          correlationId: this.errorAggregator.getCorrelationId(),\r\n        });\r\n        const error = this.createError(system, new Error('Circuit breaker open'));\r\n        result.errors?.push(error);\r\n        this.errorAggregator.addError(system, error, { strategy: 'fastest' });\r\n        continue;\r\n      }\r\n\r\n      try {\r\n        const data = await this.querySystem<T>(system);\r\n        this.errorAggregator.recordSuccess(system);\r\n\r\n        if (data && data.length > 0) {\r\n          result[system] = data;\r\n          return result; // Stop on first non-empty result\r\n        }\r\n      } catch (error) {\r\n        const dbError = this.createError(system, error);\r\n        this.logger.warn(`Query failed for ${system}`, {\r\n          error: dbError,\r\n          correlationId: this.errorAggregator.getCorrelationId(),\r\n        });\r\n        result.errors?.push(dbError);\r\n        this.errorAggregator.addError(system, dbError, { strategy: 'fastest' });\r\n      }\r\n    }\r\n\r\n    return result;\r\n  }\r\n\r\n  /**\r\n   * Execute balanced strategy (priority-ordered parallel)\r\n   */\r\n  private async executeBalanced<T>(result: MultiSystemResult<T>): Promise<MultiSystemResult<T>> {\r\n    if (!this.errorAggregator) {\r\n      throw new Error('Error aggregator not initialized');\r\n    }\r\n\r\n    const orderedSystems = this.getOrderedSystems();\r\n    const promises = orderedSystems.map(async (system) => {\r\n      // Check circuit breaker\r\n      if (this.errorAggregator!.isCircuitOpen(system)) {\r\n        this.logger.warn(`Circuit breaker open for ${system}, skipping`, {\r\n          correlationId: this.errorAggregator!.getCorrelationId(),\r\n        });\r\n        const error = this.createError(system, new Error('Circuit breaker open'));\r\n        result.errors?.push(error);\r\n        this.errorAggregator!.addError(system, error, { strategy: 'balanced' });\r\n        return;\r\n      }\r\n\r\n      try {\r\n        const data = await this.querySystem<T>(system);\r\n        this.errorAggregator!.recordSuccess(system);\r\n\r\n        if (data && data.length > 0) {\r\n          result[system] = data;\r\n        }\r\n      } catch (error) {\r\n        const dbError = this.createError(system, error);\r\n        this.logger.warn(`Query failed for ${system}`, {\r\n          error: dbError,\r\n          correlationId: this.errorAggregator!.getCorrelationId(),\r\n        });\r\n        result.errors?.push(dbError);\r\n        this.errorAggregator!.addError(system, dbError, { strategy: 'balanced' });\r\n      }\r\n    });\r\n\r\n    await Promise.all(promises);\r\n    return result;\r\n  }\r\n\r\n  /**\r\n   * Execute comprehensive strategy (all systems in parallel)\r\n   */\r\n  private async executeComprehensive<T>(result: MultiSystemResult<T>): Promise<MultiSystemResult<T>> {\r\n    if (!this.errorAggregator) {\r\n      throw new Error('Error aggregator not initialized');\r\n    }\r\n\r\n    const promises = this.systems.map(async (system) => {\r\n      // Check circuit breaker\r\n      if (this.errorAggregator!.isCircuitOpen(system)) {\r\n        this.logger.warn(`Circuit breaker open for ${system}, skipping`, {\r\n          correlationId: this.errorAggregator!.getCorrelationId(),\r\n        });\r\n        const error = this.createError(system, new Error('Circuit breaker open'));\r\n        result.errors?.push(error);\r\n        this.errorAggregator!.addError(system, error, { strategy: 'comprehensive' });\r\n        result[system] = [];\r\n        return;\r\n      }\r\n\r\n      try {\r\n        const data = await this.querySystem<T>(system);\r\n        this.errorAggregator!.recordSuccess(system);\r\n        result[system] = data || [];\r\n      } catch (error) {\r\n        const dbError = this.createError(system, error);\r\n        this.logger.warn(`Query failed for ${system}`, {\r\n          error: dbError,\r\n          correlationId: this.errorAggregator!.getCorrelationId(),\r\n        });\r\n        result.errors?.push(dbError);\r\n        this.errorAggregator!.addError(system, dbError, { strategy: 'comprehensive' });\r\n        result[system] = [];\r\n      }\r\n    });\r\n\r\n    await Promise.all(promises);\r\n    return result;\r\n  }\r\n\r\n  /**\r\n   * Query specific database system\r\n   */\r\n  private async querySystem<T>(system: DatabaseSystem): Promise<T[]> {\r\n    const adapter = this.dbService.getAdapter(system);\r\n    const results: T[] = [];\r\n\r\n    // If wildcard pattern, use pattern matching\r\n    if (this.wildcardPattern) {\r\n      const pattern = buildWildcardPattern(this.wildcardPattern);\r\n      // For Redis, use SCAN with pattern\r\n      if (system === 'redis') {\r\n        const keys = await this.scanRedisKeys(pattern);\r\n        for (const key of keys) {\r\n          const data = await adapter.get<T>(key);\r\n          if (data) results.push(data);\r\n        }\r\n      } else {\r\n        // For SQLite/PostgreSQL, use raw query with LIKE\r\n        const data = await adapter.raw<T>(\r\n          'SELECT * FROM correlation_data WHERE key LIKE ?',\r\n          [pattern.replace('*', '%')]\r\n        );\r\n        results.push(...(Array.isArray(data) ? data : []));\r\n      }\r\n    } else if (this.correlationKey) {\r\n      // Query specific entities for correlation key\r\n      if (this.entities.length > 0) {\r\n        for (const entity of this.entities) {\r\n          const key = buildCorrelationKey({\r\n            ...this.correlationKey,\r\n            entity,\r\n          });\r\n          const data = await adapter.get<T>(key);\r\n          if (data) results.push(data);\r\n        }\r\n      } else {\r\n        // Query just the correlation key\r\n        const key = buildCorrelationKey(this.correlationKey);\r\n        const data = await adapter.get<T>(key);\r\n        if (data) results.push(data);\r\n      }\r\n    }\r\n\r\n    return results;\r\n  }\r\n\r\n  /**\r\n   * Scan Redis keys with pattern\r\n   */\r\n  private async scanRedisKeys(pattern: string): Promise<string[]> {\r\n    const adapter = this.dbService.getAdapter('redis');\r\n    const keys: string[] = [];\r\n\r\n    // Use SCAN command for efficient key iteration\r\n    let cursor = '0';\r\n    do {\r\n      const result = await adapter.raw<any>('SCAN', [cursor, 'MATCH', pattern, 'COUNT', '100']);\r\n      cursor = result[0];\r\n      keys.push(...result[1]);\r\n    } while (cursor !== '0');\r\n\r\n    return keys;\r\n  }\r\n\r\n  /**\r\n   * Merge results from multiple databases\r\n   */\r\n  private mergeResults<T>(result: MultiSystemResult<T>): T[] {\r\n    const allResults: T[] = [];\r\n    const seen = new Set<string>();\r\n\r\n    // Merge in priority order: Redis → SQLite → PostgreSQL\r\n    const orderedSystems = this.getOrderedSystems();\r\n\r\n    for (const system of orderedSystems) {\r\n      const systemResults = result[system];\r\n      if (!systemResults) continue;\r\n\r\n      for (const item of systemResults) {\r\n        const key = this.getDeduplicationKey(item);\r\n        if (!seen.has(key)) {\r\n          seen.add(key);\r\n          allResults.push(item);\r\n        }\r\n      }\r\n    }\r\n\r\n    return allResults;\r\n  }\r\n\r\n  /**\r\n   * Get deduplication key for result item\r\n   */\r\n  private getDeduplicationKey(item: any): string {\r\n    if (item && typeof item === 'object') {\r\n      // Try common ID fields\r\n      if (item.id) return `id:${item.id}`;\r\n      if (item._id) return `_id:${item._id}`;\r\n      if (item.key) return `key:${item.key}`;\r\n      // Fallback to JSON stringify\r\n      return JSON.stringify(item);\r\n    }\r\n    return String(item);\r\n  }\r\n\r\n  /**\r\n   * Get ordered systems based on priority\r\n   */\r\n  private getOrderedSystems(): DatabaseSystem[] {\r\n    // Priority order: Redis (fastest) → SQLite → PostgreSQL\r\n    const order: DatabaseSystem[] = ['redis', 'sqlite', 'postgres'];\r\n    return order.filter(system => this.systems.includes(system));\r\n  }\r\n\r\n  /**\r\n   * Validate query configuration\r\n   */\r\n  private validateQuery(): void {\r\n    if (!this.correlationKey && !this.wildcardPattern) {\r\n      throw createDatabaseError(\r\n        DatabaseErrorCode.VALIDATION_FAILED,\r\n        'Query must specify either correlationKey or wildcardPattern',\r\n        undefined,\r\n        { query: this }\r\n      );\r\n    }\r\n\r\n    if (this.systems.length === 0) {\r\n      throw createDatabaseError(\r\n        DatabaseErrorCode.VALIDATION_FAILED,\r\n        'Query must specify at least one database system',\r\n        undefined,\r\n        { query: this }\r\n      );\r\n    }\r\n  }\r\n\r\n  /**\r\n   * Build cache key for query\r\n   */\r\n  private buildCacheKey(): string {\r\n    const parts: string[] = ['msq']; // multi-system-query\r\n\r\n    if (this.correlationKey) {\r\n      parts.push(buildCorrelationKey(this.correlationKey));\r\n    } else if (this.wildcardPattern) {\r\n      parts.push(buildWildcardPattern(this.wildcardPattern));\r\n    }\r\n\r\n    if (this.entities.length > 0) {\r\n      parts.push(`entities:${this.entities.join(',')}`);\r\n    }\r\n\r\n    parts.push(`systems:${this.systems.join(',')}`);\r\n    parts.push(`priority:${this.priority}`);\r\n\r\n    return parts.join(':');\r\n  }\r\n\r\n  /**\r\n   * Build correlation key string\r\n   */\r\n  private buildCorrelationKeyString(): string {\r\n    if (this.correlationKey) {\r\n      return buildCorrelationKey(this.correlationKey);\r\n    } else if (this.wildcardPattern) {\r\n      return buildWildcardPattern(this.wildcardPattern);\r\n    }\r\n    return 'unknown';\r\n  }\r\n\r\n  /**\r\n   * Create database error\r\n   */\r\n  private createError(system: DatabaseSystem, error: any): DatabaseError {\r\n    return {\r\n      code: DatabaseErrorCode.QUERY_FAILED,\r\n      message: `Query failed for ${system}: ${error.message || error}`,\r\n      originalError: error instanceof Error ? error : undefined,\r\n      context: { system },\r\n    };\r\n  }\r\n}\r\n\r\n/**\r\n * Create multi-system query builder\r\n *\r\n * @param config - Query builder configuration\r\n * @returns Multi-system query builder instance\r\n */\r\nexport function createMultiSystemQuery(config: QueryBuilderConfig): MultiSystemQuery {\r\n  return new MultiSystemQuery(config);\r\n}\r\n"],"names":["DatabaseErrorCode","buildCorrelationKey","buildWildcardPattern","createLogger","createDatabaseError","createErrorAggregator","MultiSystemQuery","dbService","cache","logger","errorAggregator","correlationKey","wildcardPattern","entities","systems","priority","useCache","timeout","filters","strictMode","config","enableCache","defaultTimeout","forTask","taskId","type","id","forAgent","agentId","forSkill","skillId","forExecution","executionId","withKey","key","withPattern","pattern","includingEntities","fromSystems","withPriority","withCache","enabled","withTimeout","addFilter","filter","push","failOnPartialError","fail","execute","startTime","Date","now","validateQuery","correlationId","getCorrelationId","info","cacheKey","buildCacheKey","cached","get","debug","cacheHit","result","executeByPriority","error","Error","undefined","errorMessage","message","String","QUERY_FAILED","shouldFailOperation","errorReport","createReport","aggregationResult","getResult","hasCriticalErrors","allSystemsFailed","errorCount","totalErrors","failedSystems","Object","keys","errorsBySystem","errors","allErrors","map","e","system","code","severity","length","merged","mergeResults","executionTime","timestamp","warn","resultCount","set","buildCorrelationKeyString","executeFastest","executeBalanced","executeComprehensive","orderedSystems","getOrderedSystems","isCircuitOpen","createError","addError","strategy","data","querySystem","recordSuccess","dbError","promises","Promise","all","adapter","getAdapter","results","scanRedisKeys","raw","replace","Array","isArray","entity","cursor","allResults","seen","Set","systemResults","item","getDeduplicationKey","has","add","_id","JSON","stringify","order","includes","VALIDATION_FAILED","query","parts","join","originalError","context","createMultiSystemQuery"],"mappings":"AAAA;;;;;;;;;;;;;;;;;CAiBC,GAGD,SAGEA,iBAAiB,QAGZ,8BAA8B;AACrC,SACEC,mBAAmB,EACnBC,oBAAoB,QAGf,oCAAoC;AAE3C,SAASC,YAAY,QAAgB,eAAe;AACpD,SAASC,mBAAmB,QAAQ,+BAA+B;AACnE,SAEEC,qBAAqB,QAEhB,wBAAwB;AAoD/B;;;;CAIC,GACD,OAAO,MAAMC;IACHC,UAA2B;IAC3BC,MAAyB;IACzBC,OAAe;IACfC,gBAAkC;IAE1C,sBAAsB;IACdC,eAAgC;IAChCC,gBAAkC;IAClCC,WAAqB,EAAE,CAAC;IACxBC,UAA4B;QAAC;QAAS;QAAU;KAAW,CAAC;IAC5DC,WAA8B,WAAW;IACzCC,WAAoB,MAAM;IAC1BC,UAAkB,KAAK;IACvBC,UAAyB,EAAE,CAAC;IAC5BC,aAAsB,MAAM;IAEpC,YAAYC,MAA0B,CAAE;QACtC,IAAI,CAACb,SAAS,GAAGa,OAAOb,SAAS;QACjC,IAAI,CAACC,KAAK,GAAGY,OAAOZ,KAAK;QACzB,IAAI,CAACQ,QAAQ,GAAGI,OAAOC,WAAW,IAAI;QACtC,IAAI,CAACJ,OAAO,GAAGG,OAAOE,cAAc,IAAI;QACxC,IAAI,CAACb,MAAM,GAAGW,OAAOX,MAAM,IAAIN,aAAa;IAC9C;IAEA;;;;;GAKC,GACDoB,QAAQC,MAAc,EAAQ;QAC5B,IAAI,CAACb,cAAc,GAAG;YACpBc,MAAM;YACNC,IAAIF;QACN;QACA,OAAO,IAAI;IACb;IAEA;;;;;GAKC,GACDG,SAASC,OAAe,EAAQ;QAC9B,IAAI,CAACjB,cAAc,GAAG;YACpBc,MAAM;YACNC,IAAIE;QACN;QACA,OAAO,IAAI;IACb;IAEA;;;;;GAKC,GACDC,SAASC,OAAe,EAAQ;QAC9B,IAAI,CAACnB,cAAc,GAAG;YACpBc,MAAM;YACNC,IAAII;QACN;QACA,OAAO,IAAI;IACb;IAEA;;;;;GAKC,GACDC,aAAaC,WAAmB,EAAQ;QACtC,IAAI,CAACrB,cAAc,GAAG;YACpBc,MAAM;YACNC,IAAIM;QACN;QACA,OAAO,IAAI;IACb;IAEA;;;;;GAKC,GACDC,QAAQC,GAAmB,EAAQ;QACjC,IAAI,CAACvB,cAAc,GAAGuB;QACtB,OAAO,IAAI;IACb;IAEA;;;;;GAKC,GACDC,YAAYC,OAAwB,EAAQ;QAC1C,IAAI,CAACxB,eAAe,GAAGwB;QACvB,OAAO,IAAI;IACb;IAEA;;;;;GAKC,GACDC,kBAAkBxB,QAAkB,EAAQ;QAC1C,IAAI,CAACA,QAAQ,GAAGA;QAChB,OAAO,IAAI;IACb;IAEA;;;;;GAKC,GACDyB,YAAYxB,OAAyB,EAAQ;QAC3C,IAAI,CAACA,OAAO,GAAGA;QACf,OAAO,IAAI;IACb;IAEA;;;;;GAKC,GACDyB,aAAaxB,QAA2B,EAAQ;QAC9C,IAAI,CAACA,QAAQ,GAAGA;QAChB,OAAO,IAAI;IACb;IAEA;;;;;GAKC,GACDyB,UAAUC,OAAgB,EAAQ;QAChC,IAAI,CAACzB,QAAQ,GAAGyB;QAChB,OAAO,IAAI;IACb;IAEA;;;;;GAKC,GACDC,YAAYzB,OAAe,EAAQ;QACjC,IAAI,CAACA,OAAO,GAAGA;QACf,OAAO,IAAI;IACb;IAEA;;;;;GAKC,GACD0B,UAAUC,MAAmB,EAAQ;QACnC,IAAI,CAAC1B,OAAO,CAAC2B,IAAI,CAACD;QAClB,OAAO,IAAI;IACb;IAEA;;;;;GAKC,GACDE,mBAAmBC,OAAgB,IAAI,EAAQ;QAC7C,IAAI,CAAC5B,UAAU,GAAG4B;QAClB,OAAO,IAAI;IACb;IAEA;;;;;GAKC,GACD,MAAMC,UAAkD;QACtD,MAAMC,YAAYC,KAAKC,GAAG;QAE1B,+BAA+B;QAC/B,IAAI,CAACC,aAAa;QAElB,kDAAkD;QAClD,IAAI,CAAC1C,eAAe,GAAGL;QACvB,MAAMgD,gBAAgB,IAAI,CAAC3C,eAAe,CAAC4C,gBAAgB;QAE3D,IAAI,CAAC7C,MAAM,CAAC8C,IAAI,CAAC,+BAA+B;YAC9CF;YACAvC,SAAS,IAAI,CAACA,OAAO;YACrBC,UAAU,IAAI,CAACA,QAAQ;QACzB;QAEA,kBAAkB;QAClB,MAAMyC,WAAW,IAAI,CAACC,aAAa;QAEnC,oBAAoB;QACpB,IAAI,IAAI,CAACzC,QAAQ,IAAI,IAAI,CAACR,KAAK,EAAE;YAC/B,MAAMkD,SAAS,IAAI,CAAClD,KAAK,CAACmD,GAAG,CAAuBH;YACpD,IAAIE,QAAQ;gBACV,IAAI,CAACjD,MAAM,CAACmD,KAAK,CAAC,aAAa;oBAAEJ;oBAAUH;gBAAc;gBACzD,OAAO;oBACL,GAAGK,MAAM;oBACTG,UAAU;gBACZ;YACF;QACF;QAEA,kCAAkC;QAClC,IAAIC;QACJ,IAAI;YACFA,SAAS,MAAM,IAAI,CAACC,iBAAiB;QACvC,EAAE,OAAOC,OAAO;YACd,kCAAkC;YAClC,IAAI,CAACvD,MAAM,CAACuD,KAAK,CACf,yCACAA,iBAAiBC,QAAQD,QAAQE,WACjC;gBACEb;gBACAc,cAAcH,iBAAiBC,QAAQD,MAAMI,OAAO,GAAGC,OAAOL;YAChE;YAGF,MAAM5D,oBACJJ,kBAAkBsE,YAAY,EAC9B,iDACAN,iBAAiBC,QAAQD,QAAQE,WACjC;gBAAEb;gBAAevC,SAAS,IAAI,CAACA,OAAO;YAAC;QAE3C;QAEA,0CAA0C;QAC1C,IAAI,IAAI,CAACJ,eAAe,CAAC6D,mBAAmB,CAAC,IAAI,CAACzD,OAAO,GAAG;YAC1D,MAAM0D,cAAc,IAAI,CAAC9D,eAAe,CAAC+D,YAAY;YACrD,IAAI,CAAChE,MAAM,CAACuD,KAAK,CACf,6BACAE,WACA;gBACEb;gBACAmB;YACF;YAGF,MAAME,oBAAoB,IAAI,CAAChE,eAAe,CAACiE,SAAS,CAAC,IAAI,CAAC7D,OAAO;YAErE,MAAMV,oBACJsE,kBAAkBE,iBAAiB,GAC/B5E,kBAAkBsE,YAAY,GAC9BtE,kBAAkBsE,YAAY,EAClCI,kBAAkBG,gBAAgB,GAC9B,gCACA,mDACJX,WACA;gBACEb;gBACAyB,YAAYJ,kBAAkBK,WAAW;gBACzCC,eAAeC,OAAOC,IAAI,CAACR,kBAAkBS,cAAc;gBAC3DC,QAAQV,kBAAkBW,SAAS,CAACC,GAAG,CAACC,CAAAA,IAAM,CAAA;wBAC5CC,QAAQD,EAAEC,MAAM;wBAChBC,MAAMF,EAAEvB,KAAK,CAACyB,IAAI;wBAClBrB,SAASmB,EAAEvB,KAAK,CAACI,OAAO;wBACxBsB,UAAUH,EAAEG,QAAQ;oBACtB,CAAA;YACF;QAEJ;QAEA,2BAA2B;QAC3B,IAAI,IAAI,CAACvE,UAAU,IAAI2C,OAAOsB,MAAM,IAAItB,OAAOsB,MAAM,CAACO,MAAM,GAAG,GAAG;YAChE,MAAMnB,cAAc,IAAI,CAAC9D,eAAe,CAAC+D,YAAY;YACrD,IAAI,CAAChE,MAAM,CAACuD,KAAK,CACf,sCACAE,WACA;gBACEb;gBACAyB,YAAYhB,OAAOsB,MAAM,CAACO,MAAM;gBAChCnB;YACF;YAGF,MAAMpE,oBACJJ,kBAAkBsE,YAAY,EAC9B,CAAC,kBAAkB,EAAER,OAAOsB,MAAM,CAACO,MAAM,CAAC,SAAS,CAAC,EACpDzB,WACA;gBACEb;gBACA+B,QAAQtB,OAAOsB,MAAM;YACvB;QAEJ;QAEA,gCAAgC;QAChCtB,OAAO8B,MAAM,GAAG,IAAI,CAACC,YAAY,CAAC/B;QAElC,2BAA2B;QAC3BA,OAAOgC,aAAa,GAAG5C,KAAKC,GAAG,KAAKF;QACpCa,OAAOiC,SAAS,GAAG,IAAI7C;QACvBY,OAAOD,QAAQ,GAAG;QAElB,yCAAyC;QACzC,IAAIC,OAAOgC,aAAa,IAAI,IAAI,CAAC7E,OAAO,EAAE;YACxC,IAAI,CAACR,MAAM,CAACuF,IAAI,CAAC,0BAA0B;gBACzC3C;gBACAyC,eAAehC,OAAOgC,aAAa;gBACnC7E,SAAS,IAAI,CAACA,OAAO;YACvB;QACF;QAEA,cAAc;QACd,IAAI,CAACR,MAAM,CAAC8C,IAAI,CAAC,gCAAgC;YAC/CF;YACAyC,eAAehC,OAAOgC,aAAa;YACnCG,aAAanC,OAAO8B,MAAM,CAACD,MAAM;YACjCb,YAAYhB,OAAOsB,MAAM,EAAEO,UAAU;QACvC;QAEA,iBAAiB;QACjB,IAAI,IAAI,CAAC3E,QAAQ,IAAI,IAAI,CAACR,KAAK,EAAE;YAC/B,IAAI,CAACA,KAAK,CAAC0F,GAAG,CAAC1C,UAAUM;QAC3B;QAEA,OAAOA;IACT;IAEA;;GAEC,GACD,MAAcC,oBAAsD;QAClE,MAAMD,SAA+B;YACnCnD,gBAAgB,IAAI,CAACwF,yBAAyB;YAC9CP,QAAQ,EAAE;YACVE,eAAe;YACfC,WAAW,IAAI7C;YACfkC,QAAQ,EAAE;QACZ;QAEA,OAAQ,IAAI,CAACrE,QAAQ;YACnB,KAAK;gBACH,OAAO,IAAI,CAACqF,cAAc,CAAItC;YAEhC,KAAK;gBACH,OAAO,IAAI,CAACuC,eAAe,CAAIvC;YAEjC,KAAK;gBACH,OAAO,IAAI,CAACwC,oBAAoB,CAAIxC;YAEtC;gBACE,OAAO,IAAI,CAACuC,eAAe,CAAIvC;QACnC;IACF;IAEA;;GAEC,GACD,MAAcsC,eAAkBtC,MAA4B,EAAiC;QAC3F,IAAI,CAAC,IAAI,CAACpD,eAAe,EAAE;YACzB,MAAM,IAAIuD,MAAM;QAClB;QAEA,uDAAuD;QACvD,MAAMsC,iBAAiB,IAAI,CAACC,iBAAiB;QAE7C,KAAK,MAAMhB,UAAUe,eAAgB;YACnC,wBAAwB;YACxB,IAAI,IAAI,CAAC7F,eAAe,CAAC+F,aAAa,CAACjB,SAAS;gBAC9C,IAAI,CAAC/E,MAAM,CAACuF,IAAI,CAAC,CAAC,yBAAyB,EAAER,OAAO,UAAU,CAAC,EAAE;oBAC/DnC,eAAe,IAAI,CAAC3C,eAAe,CAAC4C,gBAAgB;gBACtD;gBACA,MAAMU,QAAQ,IAAI,CAAC0C,WAAW,CAAClB,QAAQ,IAAIvB,MAAM;gBACjDH,OAAOsB,MAAM,EAAEvC,KAAKmB;gBACpB,IAAI,CAACtD,eAAe,CAACiG,QAAQ,CAACnB,QAAQxB,OAAO;oBAAE4C,UAAU;gBAAU;gBACnE;YACF;YAEA,IAAI;gBACF,MAAMC,OAAO,MAAM,IAAI,CAACC,WAAW,CAAItB;gBACvC,IAAI,CAAC9E,eAAe,CAACqG,aAAa,CAACvB;gBAEnC,IAAIqB,QAAQA,KAAKlB,MAAM,GAAG,GAAG;oBAC3B7B,MAAM,CAAC0B,OAAO,GAAGqB;oBACjB,OAAO/C,QAAQ,iCAAiC;gBAClD;YACF,EAAE,OAAOE,OAAO;gBACd,MAAMgD,UAAU,IAAI,CAACN,WAAW,CAAClB,QAAQxB;gBACzC,IAAI,CAACvD,MAAM,CAACuF,IAAI,CAAC,CAAC,iBAAiB,EAAER,QAAQ,EAAE;oBAC7CxB,OAAOgD;oBACP3D,eAAe,IAAI,CAAC3C,eAAe,CAAC4C,gBAAgB;gBACtD;gBACAQ,OAAOsB,MAAM,EAAEvC,KAAKmE;gBACpB,IAAI,CAACtG,eAAe,CAACiG,QAAQ,CAACnB,QAAQwB,SAAS;oBAAEJ,UAAU;gBAAU;YACvE;QACF;QAEA,OAAO9C;IACT;IAEA;;GAEC,GACD,MAAcuC,gBAAmBvC,MAA4B,EAAiC;QAC5F,IAAI,CAAC,IAAI,CAACpD,eAAe,EAAE;YACzB,MAAM,IAAIuD,MAAM;QAClB;QAEA,MAAMsC,iBAAiB,IAAI,CAACC,iBAAiB;QAC7C,MAAMS,WAAWV,eAAejB,GAAG,CAAC,OAAOE;YACzC,wBAAwB;YACxB,IAAI,IAAI,CAAC9E,eAAe,CAAE+F,aAAa,CAACjB,SAAS;gBAC/C,IAAI,CAAC/E,MAAM,CAACuF,IAAI,CAAC,CAAC,yBAAyB,EAAER,OAAO,UAAU,CAAC,EAAE;oBAC/DnC,eAAe,IAAI,CAAC3C,eAAe,CAAE4C,gBAAgB;gBACvD;gBACA,MAAMU,QAAQ,IAAI,CAAC0C,WAAW,CAAClB,QAAQ,IAAIvB,MAAM;gBACjDH,OAAOsB,MAAM,EAAEvC,KAAKmB;gBACpB,IAAI,CAACtD,eAAe,CAAEiG,QAAQ,CAACnB,QAAQxB,OAAO;oBAAE4C,UAAU;gBAAW;gBACrE;YACF;YAEA,IAAI;gBACF,MAAMC,OAAO,MAAM,IAAI,CAACC,WAAW,CAAItB;gBACvC,IAAI,CAAC9E,eAAe,CAAEqG,aAAa,CAACvB;gBAEpC,IAAIqB,QAAQA,KAAKlB,MAAM,GAAG,GAAG;oBAC3B7B,MAAM,CAAC0B,OAAO,GAAGqB;gBACnB;YACF,EAAE,OAAO7C,OAAO;gBACd,MAAMgD,UAAU,IAAI,CAACN,WAAW,CAAClB,QAAQxB;gBACzC,IAAI,CAACvD,MAAM,CAACuF,IAAI,CAAC,CAAC,iBAAiB,EAAER,QAAQ,EAAE;oBAC7CxB,OAAOgD;oBACP3D,eAAe,IAAI,CAAC3C,eAAe,CAAE4C,gBAAgB;gBACvD;gBACAQ,OAAOsB,MAAM,EAAEvC,KAAKmE;gBACpB,IAAI,CAACtG,eAAe,CAAEiG,QAAQ,CAACnB,QAAQwB,SAAS;oBAAEJ,UAAU;gBAAW;YACzE;QACF;QAEA,MAAMM,QAAQC,GAAG,CAACF;QAClB,OAAOnD;IACT;IAEA;;GAEC,GACD,MAAcwC,qBAAwBxC,MAA4B,EAAiC;QACjG,IAAI,CAAC,IAAI,CAACpD,eAAe,EAAE;YACzB,MAAM,IAAIuD,MAAM;QAClB;QAEA,MAAMgD,WAAW,IAAI,CAACnG,OAAO,CAACwE,GAAG,CAAC,OAAOE;YACvC,wBAAwB;YACxB,IAAI,IAAI,CAAC9E,eAAe,CAAE+F,aAAa,CAACjB,SAAS;gBAC/C,IAAI,CAAC/E,MAAM,CAACuF,IAAI,CAAC,CAAC,yBAAyB,EAAER,OAAO,UAAU,CAAC,EAAE;oBAC/DnC,eAAe,IAAI,CAAC3C,eAAe,CAAE4C,gBAAgB;gBACvD;gBACA,MAAMU,QAAQ,IAAI,CAAC0C,WAAW,CAAClB,QAAQ,IAAIvB,MAAM;gBACjDH,OAAOsB,MAAM,EAAEvC,KAAKmB;gBACpB,IAAI,CAACtD,eAAe,CAAEiG,QAAQ,CAACnB,QAAQxB,OAAO;oBAAE4C,UAAU;gBAAgB;gBAC1E9C,MAAM,CAAC0B,OAAO,GAAG,EAAE;gBACnB;YACF;YAEA,IAAI;gBACF,MAAMqB,OAAO,MAAM,IAAI,CAACC,WAAW,CAAItB;gBACvC,IAAI,CAAC9E,eAAe,CAAEqG,aAAa,CAACvB;gBACpC1B,MAAM,CAAC0B,OAAO,GAAGqB,QAAQ,EAAE;YAC7B,EAAE,OAAO7C,OAAO;gBACd,MAAMgD,UAAU,IAAI,CAACN,WAAW,CAAClB,QAAQxB;gBACzC,IAAI,CAACvD,MAAM,CAACuF,IAAI,CAAC,CAAC,iBAAiB,EAAER,QAAQ,EAAE;oBAC7CxB,OAAOgD;oBACP3D,eAAe,IAAI,CAAC3C,eAAe,CAAE4C,gBAAgB;gBACvD;gBACAQ,OAAOsB,MAAM,EAAEvC,KAAKmE;gBACpB,IAAI,CAACtG,eAAe,CAAEiG,QAAQ,CAACnB,QAAQwB,SAAS;oBAAEJ,UAAU;gBAAgB;gBAC5E9C,MAAM,CAAC0B,OAAO,GAAG,EAAE;YACrB;QACF;QAEA,MAAM0B,QAAQC,GAAG,CAACF;QAClB,OAAOnD;IACT;IAEA;;GAEC,GACD,MAAcgD,YAAetB,MAAsB,EAAgB;QACjE,MAAM4B,UAAU,IAAI,CAAC7G,SAAS,CAAC8G,UAAU,CAAC7B;QAC1C,MAAM8B,UAAe,EAAE;QAEvB,4CAA4C;QAC5C,IAAI,IAAI,CAAC1G,eAAe,EAAE;YACxB,MAAMwB,UAAUlC,qBAAqB,IAAI,CAACU,eAAe;YACzD,mCAAmC;YACnC,IAAI4E,WAAW,SAAS;gBACtB,MAAMN,OAAO,MAAM,IAAI,CAACqC,aAAa,CAACnF;gBACtC,KAAK,MAAMF,OAAOgD,KAAM;oBACtB,MAAM2B,OAAO,MAAMO,QAAQzD,GAAG,CAAIzB;oBAClC,IAAI2E,MAAMS,QAAQzE,IAAI,CAACgE;gBACzB;YACF,OAAO;gBACL,iDAAiD;gBACjD,MAAMA,OAAO,MAAMO,QAAQI,GAAG,CAC5B,mDACA;oBAACpF,QAAQqF,OAAO,CAAC,KAAK;iBAAK;gBAE7BH,QAAQzE,IAAI,IAAK6E,MAAMC,OAAO,CAACd,QAAQA,OAAO,EAAE;YAClD;QACF,OAAO,IAAI,IAAI,CAAClG,cAAc,EAAE;YAC9B,8CAA8C;YAC9C,IAAI,IAAI,CAACE,QAAQ,CAAC8E,MAAM,GAAG,GAAG;gBAC5B,KAAK,MAAMiC,UAAU,IAAI,CAAC/G,QAAQ,CAAE;oBAClC,MAAMqB,MAAMjC,oBAAoB;wBAC9B,GAAG,IAAI,CAACU,cAAc;wBACtBiH;oBACF;oBACA,MAAMf,OAAO,MAAMO,QAAQzD,GAAG,CAAIzB;oBAClC,IAAI2E,MAAMS,QAAQzE,IAAI,CAACgE;gBACzB;YACF,OAAO;gBACL,iCAAiC;gBACjC,MAAM3E,MAAMjC,oBAAoB,IAAI,CAACU,cAAc;gBACnD,MAAMkG,OAAO,MAAMO,QAAQzD,GAAG,CAAIzB;gBAClC,IAAI2E,MAAMS,QAAQzE,IAAI,CAACgE;YACzB;QACF;QAEA,OAAOS;IACT;IAEA;;GAEC,GACD,MAAcC,cAAcnF,OAAe,EAAqB;QAC9D,MAAMgF,UAAU,IAAI,CAAC7G,SAAS,CAAC8G,UAAU,CAAC;QAC1C,MAAMnC,OAAiB,EAAE;QAEzB,+CAA+C;QAC/C,IAAI2C,SAAS;QACb,GAAG;YACD,MAAM/D,SAAS,MAAMsD,QAAQI,GAAG,CAAM,QAAQ;gBAACK;gBAAQ;gBAASzF;gBAAS;gBAAS;aAAM;YACxFyF,SAAS/D,MAAM,CAAC,EAAE;YAClBoB,KAAKrC,IAAI,IAAIiB,MAAM,CAAC,EAAE;QACxB,QAAS+D,WAAW,IAAK;QAEzB,OAAO3C;IACT;IAEA;;GAEC,GACD,AAAQW,aAAgB/B,MAA4B,EAAO;QACzD,MAAMgE,aAAkB,EAAE;QAC1B,MAAMC,OAAO,IAAIC;QAEjB,uDAAuD;QACvD,MAAMzB,iBAAiB,IAAI,CAACC,iBAAiB;QAE7C,KAAK,MAAMhB,UAAUe,eAAgB;YACnC,MAAM0B,gBAAgBnE,MAAM,CAAC0B,OAAO;YACpC,IAAI,CAACyC,eAAe;YAEpB,KAAK,MAAMC,QAAQD,cAAe;gBAChC,MAAM/F,MAAM,IAAI,CAACiG,mBAAmB,CAACD;gBACrC,IAAI,CAACH,KAAKK,GAAG,CAAClG,MAAM;oBAClB6F,KAAKM,GAAG,CAACnG;oBACT4F,WAAWjF,IAAI,CAACqF;gBAClB;YACF;QACF;QAEA,OAAOJ;IACT;IAEA;;GAEC,GACD,AAAQK,oBAAoBD,IAAS,EAAU;QAC7C,IAAIA,QAAQ,OAAOA,SAAS,UAAU;YACpC,uBAAuB;YACvB,IAAIA,KAAKxG,EAAE,EAAE,OAAO,CAAC,GAAG,EAAEwG,KAAKxG,EAAE,EAAE;YACnC,IAAIwG,KAAKI,GAAG,EAAE,OAAO,CAAC,IAAI,EAAEJ,KAAKI,GAAG,EAAE;YACtC,IAAIJ,KAAKhG,GAAG,EAAE,OAAO,CAAC,IAAI,EAAEgG,KAAKhG,GAAG,EAAE;YACtC,6BAA6B;YAC7B,OAAOqG,KAAKC,SAAS,CAACN;QACxB;QACA,OAAO7D,OAAO6D;IAChB;IAEA;;GAEC,GACD,AAAQ1B,oBAAsC;QAC5C,wDAAwD;QACxD,MAAMiC,QAA0B;YAAC;YAAS;YAAU;SAAW;QAC/D,OAAOA,MAAM7F,MAAM,CAAC4C,CAAAA,SAAU,IAAI,CAAC1E,OAAO,CAAC4H,QAAQ,CAAClD;IACtD;IAEA;;GAEC,GACD,AAAQpC,gBAAsB;QAC5B,IAAI,CAAC,IAAI,CAACzC,cAAc,IAAI,CAAC,IAAI,CAACC,eAAe,EAAE;YACjD,MAAMR,oBACJJ,kBAAkB2I,iBAAiB,EACnC,+DACAzE,WACA;gBAAE0E,OAAO,IAAI;YAAC;QAElB;QAEA,IAAI,IAAI,CAAC9H,OAAO,CAAC6E,MAAM,KAAK,GAAG;YAC7B,MAAMvF,oBACJJ,kBAAkB2I,iBAAiB,EACnC,mDACAzE,WACA;gBAAE0E,OAAO,IAAI;YAAC;QAElB;IACF;IAEA;;GAEC,GACD,AAAQnF,gBAAwB;QAC9B,MAAMoF,QAAkB;YAAC;SAAM,EAAE,qBAAqB;QAEtD,IAAI,IAAI,CAAClI,cAAc,EAAE;YACvBkI,MAAMhG,IAAI,CAAC5C,oBAAoB,IAAI,CAACU,cAAc;QACpD,OAAO,IAAI,IAAI,CAACC,eAAe,EAAE;YAC/BiI,MAAMhG,IAAI,CAAC3C,qBAAqB,IAAI,CAACU,eAAe;QACtD;QAEA,IAAI,IAAI,CAACC,QAAQ,CAAC8E,MAAM,GAAG,GAAG;YAC5BkD,MAAMhG,IAAI,CAAC,CAAC,SAAS,EAAE,IAAI,CAAChC,QAAQ,CAACiI,IAAI,CAAC,MAAM;QAClD;QAEAD,MAAMhG,IAAI,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC/B,OAAO,CAACgI,IAAI,CAAC,MAAM;QAC9CD,MAAMhG,IAAI,CAAC,CAAC,SAAS,EAAE,IAAI,CAAC9B,QAAQ,EAAE;QAEtC,OAAO8H,MAAMC,IAAI,CAAC;IACpB;IAEA;;GAEC,GACD,AAAQ3C,4BAAoC;QAC1C,IAAI,IAAI,CAACxF,cAAc,EAAE;YACvB,OAAOV,oBAAoB,IAAI,CAACU,cAAc;QAChD,OAAO,IAAI,IAAI,CAACC,eAAe,EAAE;YAC/B,OAAOV,qBAAqB,IAAI,CAACU,eAAe;QAClD;QACA,OAAO;IACT;IAEA;;GAEC,GACD,AAAQ8F,YAAYlB,MAAsB,EAAExB,KAAU,EAAiB;QACrE,OAAO;YACLyB,MAAMzF,kBAAkBsE,YAAY;YACpCF,SAAS,CAAC,iBAAiB,EAAEoB,OAAO,EAAE,EAAExB,MAAMI,OAAO,IAAIJ,OAAO;YAChE+E,eAAe/E,iBAAiBC,QAAQD,QAAQE;YAChD8E,SAAS;gBAAExD;YAAO;QACpB;IACF;AACF;AAEA;;;;;CAKC,GACD,OAAO,SAASyD,uBAAuB7H,MAA0B;IAC/D,OAAO,IAAId,iBAAiBc;AAC9B"}

package/dist/lib/orphan-detector.js

@@ -0,0 +1,332 @@
+/**
+ * Orphan Workspace Detector
+ *
+ * Detects and cleans up orphaned workspaces (no active agent process).
+ * Implements grace period logic to prevent premature cleanup during restarts.
+ *
+ * Part of Task P2-1.3: Supervised Workspace Cleanup (Phase 2)
+ *
+ * Features:
+ * - Detect orphaned workspaces (no active process)
+ * - Process monitoring (PID tracking)
+ * - Cleanup stale workspaces
+ * - Grace period (10 minutes default before cleanup)
+ * - Automatic background scanning
+ * - Audit trail for orphan cleanup
+ *
+ * Usage:
+ *   const detector = new OrphanDetector({
+ *     workspaceRoot: '/tmp/cfn-workspaces',
+ *     gracePeriodMinutes: 10
+ *   });
+ *
+ *   const orphans = await detector.detectOrphans();
+ *   console.log(`Found ${orphans.length} orphaned workspaces`);
+ *
+ *   const stats = await detector.cleanupOrphans();
+ *   console.log(`Cleaned up ${stats.cleanedCount} workspaces`);
+ */ import * as fs from 'fs/promises';
+import * as path from 'path';
+import { createLogger } from './logging.js';
+import { createError, ErrorCode } from './errors.js';
+const logger = createLogger('orphan-detector');
+/**
+ * OrphanDetector: Detects and cleans up orphaned workspaces
+ */ export class OrphanDetector {
+    config;
+    scanInterval = null;
+    constructor(config){
+        this.config = {
+            gracePeriodMinutes: 10,
+            scanIntervalMinutes: 30,
+            ...config
+        };
+    }
+    /**
+   * Start background orphan detection scanner
+   */ start() {
+        if (this.scanInterval) {
+            return; // Already running
+        }
+        const intervalMs = (this.config.scanIntervalMinutes || 30) * 60 * 1000;
+        this.scanInterval = setInterval(async ()=>{
+            try {
+                const stats = await this.cleanupOrphans();
+                if (stats.cleanedCount > 0) {
+                    logger.info('Background orphan cleanup completed', {
+                        cleanedCount: stats.cleanedCount,
+                        totalFreed: stats.totalSizeFreed
+                    });
+                }
+            } catch (error) {
+                logger.error('Error in orphan detection scan', {
+                    error: String(error)
+                });
+            }
+        }, intervalMs);
+        logger.info('Orphan detector started', {
+            gracePeriodMinutes: this.config.gracePeriodMinutes,
+            scanIntervalMinutes: this.config.scanIntervalMinutes
+        });
+    }
+    /**
+   * Stop background scanner
+   */ stop() {
+        if (this.scanInterval) {
+            clearInterval(this.scanInterval);
+            this.scanInterval = null;
+            logger.info('Orphan detector stopped');
+        }
+    }
+    /**
+   * Detect orphaned workspaces
+   */ async detectOrphans() {
+        const orphans = [];
+        const gracePeriodMs = (this.config.gracePeriodMinutes || 10) * 60 * 1000;
+        const now = Date.now();
+        try {
+            const entries = await fs.readdir(this.config.workspaceRoot, {
+                withFileTypes: true
+            });
+            for (const entry of entries){
+                if (!entry.isDirectory()) continue;
+                try {
+                    const workspaceInfo = await this.analyzeWorkspace(entry.path);
+                    if (!workspaceInfo) continue;
+                    // Check if process is still active
+                    const isProcessActive = this.isProcessActive(workspaceInfo.processId);
+                    if (!isProcessActive) {
+                        // Check grace period
+                        const timeSinceLastAccess = now - workspaceInfo.lastAccessedAt.getTime();
+                        if (timeSinceLastAccess > gracePeriodMs) {
+                            orphans.push(workspaceInfo);
+                        }
+                    }
+                } catch (error) {
+                    logger.warn('Error analyzing workspace', {
+                        path: entry.path,
+                        error: String(error)
+                    });
+                }
+            }
+            logger.info('Orphan detection scan completed', {
+                found: orphans.length,
+                gracePeriodMs
+            });
+        } catch (error) {
+            logger.error('Error scanning for orphans', {
+                error: String(error)
+            });
+        }
+        return orphans;
+    }
+    /**
+   * Clean up detected orphaned workspaces
+   */ async cleanupOrphans() {
+        const orphans = await this.detectOrphans();
+        let cleanedCount = 0;
+        let totalSizeFreed = 0;
+        let totalFilesRemoved = 0;
+        let gracePeriodCount = 0;
+        const gracePeriodMs = (this.config.gracePeriodMinutes || 10) * 60 * 1000;
+        const now = Date.now();
+        for (const orphan of orphans){
+            try {
+                // Double-check if in grace period
+                const timeSinceAccess = now - orphan.lastAccessedAt.getTime();
+                if (timeSinceAccess <= gracePeriodMs) {
+                    gracePeriodCount++;
+                    continue;
+                }
+                // Clean up workspace
+                const sizeFreed = await this.removeWorkspace(orphan.path);
+                cleanedCount++;
+                totalSizeFreed += sizeFreed;
+                totalFilesRemoved += orphan.fileCount;
+                logger.info('Cleaned orphaned workspace', {
+                    id: orphan.id,
+                    agentId: orphan.agentId,
+                    sizeFreed
+                });
+            } catch (error) {
+                logger.error('Error cleaning up orphan workspace', {
+                    id: orphan.id,
+                    error: String(error)
+                });
+            }
+        }
+        return {
+            cleanedCount,
+            totalSizeFreed,
+            filesRemoved: totalFilesRemoved,
+            gracePeriodCount
+        };
+    }
+    /**
+   * Force cleanup of specific orphan (skip grace period)
+   */ async forceCleanupOrphan(workspacePath) {
+        try {
+            const size = await this.removeWorkspace(workspacePath);
+            logger.info('Force cleaned orphan workspace', {
+                path: workspacePath,
+                size
+            });
+            return size;
+        } catch (error) {
+            logger.error('Error force cleaning orphan', {
+                path: workspacePath,
+                error: String(error)
+            });
+            throw createError(ErrorCode.FILE_WRITE_FAILED, 'Failed to cleanup orphan workspace', {
+                cause: String(error)
+            });
+        }
+    }
+    // ============================================================================
+    // Private Helper Methods
+    // ============================================================================
+    /**
+   * Analyze workspace to extract metadata
+   */ async analyzeWorkspace(workspacePath) {
+        try {
+            const stats = await fs.stat(workspacePath);
+            const name = path.basename(workspacePath);
+            // Parse workspace name: sanitizedAgentId-sanitizedTaskId-uuid
+            // UUID format: 8hex-4hex-4hex-4hex-12hex (36 chars total)
+            // We need to find where the UUID starts
+            const uuidRegex = /[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/i;
+            const uuidMatch = name.match(uuidRegex);
+            if (!uuidMatch) {
+                return null;
+            }
+            const id = uuidMatch[0];
+            const prefix = name.substring(0, name.length - id.length - 1); // -1 for the dash before UUID
+            // Parse agent and task IDs from prefix
+            // Format: sanitizedAgentId-sanitizedTaskId
+            // Since both can contain characters, we use a simple heuristic:
+            // Find "task" in the prefix and assume that's where taskId starts
+            let agentId = '';
+            let taskId = '';
+            const taskStartIndex = prefix.indexOf('task-');
+            if (taskStartIndex > 0) {
+                agentId = prefix.substring(0, taskStartIndex - 1); // -1 to remove trailing dash
+                taskId = prefix.substring(taskStartIndex);
+            } else {
+                // Fallback: just use the whole prefix as agentId
+                agentId = prefix;
+                taskId = 'unknown';
+            }
+            // Get workspace metadata if it exists
+            let processId;
+            let lastAccessedAt = stats.mtime;
+            try {
+                const metadataPath = path.join(workspacePath, '.metadata.json');
+                const metadata = await fs.readFile(metadataPath, 'utf-8');
+                const parsed = JSON.parse(metadata);
+                processId = parsed.processId;
+                if (parsed.lastAccessedAt) {
+                    lastAccessedAt = new Date(parsed.lastAccessedAt);
+                }
+            } catch (e) {
+            // Metadata file doesn't exist - use current mtime
+            }
+            const size = await this.getDirectorySize(workspacePath);
+            const fileCount = await this.countFiles(workspacePath);
+            return {
+                id,
+                agentId,
+                taskId,
+                path: workspacePath,
+                createdAt: stats.birthtime || stats.mtime,
+                lastAccessedAt,
+                processId,
+                sizeBytes: size,
+                fileCount
+            };
+        } catch (error) {
+            logger.debug('Error analyzing workspace', {
+                path: workspacePath,
+                error: String(error)
+            });
+            return null;
+        }
+    }
+    /**
+   * Check if process is still active
+   */ isProcessActive(processId) {
+        if (!processId) {
+            return false; // No process ID = definitely orphaned
+        }
+        try {
+            // Send signal 0 (check if process exists without sending signal)
+            // Returns true if process is still running
+            process.kill(processId, 0);
+            return true;
+        } catch (error) {
+            // Process does not exist
+            return false;
+        }
+    }
+    /**
+   * Remove workspace directory and return freed size
+   */ async removeWorkspace(workspacePath) {
+        const size = await this.getDirectorySize(workspacePath);
+        try {
+            await fs.rm(workspacePath, {
+                recursive: true,
+                force: true
+            });
+            logger.debug('Removed workspace directory', {
+                path: workspacePath
+            });
+            return size;
+        } catch (error) {
+            logger.error('Error removing workspace', {
+                path: workspacePath,
+                error: String(error)
+            });
+            throw error;
+        }
+    }
+    /**
+   * Get directory size in bytes
+   */ async getDirectorySize(dir) {
+        try {
+            const entries = await fs.readdir(dir, {
+                recursive: true,
+                withFileTypes: false
+            });
+            let totalSize = 0;
+            for (const file of entries){
+                try {
+                    const filePath = path.join(dir, file);
+                    const stats = await fs.stat(filePath).catch(()=>null);
+                    if (stats?.isFile()) {
+                        totalSize += stats.size;
+                    }
+                } catch (e) {
+                // Ignore inaccessible files
+                }
+            }
+            return totalSize;
+        } catch (error) {
+            return 0;
+        }
+    }
+    /**
+   * Count files in directory
+   */ async countFiles(dir) {
+        try {
+            const entries = await fs.readdir(dir, {
+                recursive: true,
+                withFileTypes: false
+            });
+            return Array.isArray(entries) ? entries.length : 0;
+        } catch (error) {
+            return 0;
+        }
+    }
+}
+export default OrphanDetector;
+
+//# sourceMappingURL=orphan-detector.js.map

package/dist/lib/orphan-detector.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/lib/orphan-detector.ts"],"sourcesContent":["/**\r\n * Orphan Workspace Detector\r\n *\r\n * Detects and cleans up orphaned workspaces (no active agent process).\r\n * Implements grace period logic to prevent premature cleanup during restarts.\r\n *\r\n * Part of Task P2-1.3: Supervised Workspace Cleanup (Phase 2)\r\n *\r\n * Features:\r\n * - Detect orphaned workspaces (no active process)\r\n * - Process monitoring (PID tracking)\r\n * - Cleanup stale workspaces\r\n * - Grace period (10 minutes default before cleanup)\r\n * - Automatic background scanning\r\n * - Audit trail for orphan cleanup\r\n *\r\n * Usage:\r\n *   const detector = new OrphanDetector({\r\n *     workspaceRoot: '/tmp/cfn-workspaces',\r\n *     gracePeriodMinutes: 10\r\n *   });\r\n *\r\n *   const orphans = await detector.detectOrphans();\r\n *   console.log(`Found ${orphans.length} orphaned workspaces`);\r\n *\r\n *   const stats = await detector.cleanupOrphans();\r\n *   console.log(`Cleaned up ${stats.cleanedCount} workspaces`);\r\n */\r\n\r\nimport * as fs from 'fs/promises';\r\nimport * as path from 'path';\r\nimport { createLogger } from './logging.js';\r\nimport { createError, ErrorCode, StandardError } from './errors.js';\r\n\r\nconst logger = createLogger('orphan-detector');\r\n\r\n/**\r\n * Orphan workspace metadata\r\n */\r\nexport interface OrphanWorkspace {\r\n  id: string;\r\n  agentId: string;\r\n  taskId: string;\r\n  path: string;\r\n  createdAt: Date;\r\n  lastAccessedAt: Date;\r\n  processId?: number;\r\n  sizeBytes: number;\r\n  fileCount: number;\r\n}\r\n\r\n/**\r\n * Cleanup statistics\r\n */\r\nexport interface OrphanCleanupStats {\r\n  /** Number of workspaces cleaned */\r\n  cleanedCount: number;\r\n  /** Total size freed in bytes */\r\n  totalSizeFreed: number;\r\n  /** Number of files removed */\r\n  filesRemoved: number;\r\n  /** Number of workspaces still in grace period */\r\n  gracePeriodCount: number;\r\n}\r\n\r\n/**\r\n * Detector configuration\r\n */\r\nexport interface OrphanDetectorConfig {\r\n  /** Root directory for workspaces */\r\n  workspaceRoot: string;\r\n  /** Grace period in minutes (default: 10) */\r\n  gracePeriodMinutes?: number;\r\n  /** Scan interval in minutes (default: 30) */\r\n  scanIntervalMinutes?: number;\r\n}\r\n\r\n/**\r\n * OrphanDetector: Detects and cleans up orphaned workspaces\r\n */\r\nexport class OrphanDetector {\r\n  private config: OrphanDetectorConfig;\r\n  private scanInterval: NodeJS.Timer | null = null;\r\n\r\n  constructor(config: OrphanDetectorConfig) {\r\n    this.config = {\r\n      gracePeriodMinutes: 10,\r\n      scanIntervalMinutes: 30,\r\n      ...config,\r\n    };\r\n  }\r\n\r\n  /**\r\n   * Start background orphan detection scanner\r\n   */\r\n  start(): void {\r\n    if (this.scanInterval) {\r\n      return; // Already running\r\n    }\r\n\r\n    const intervalMs = (this.config.scanIntervalMinutes || 30) * 60 * 1000;\r\n\r\n    this.scanInterval = setInterval(async () => {\r\n      try {\r\n        const stats = await this.cleanupOrphans();\r\n        if (stats.cleanedCount > 0) {\r\n          logger.info('Background orphan cleanup completed', {\r\n            cleanedCount: stats.cleanedCount,\r\n            totalFreed: stats.totalSizeFreed,\r\n          });\r\n        }\r\n      } catch (error) {\r\n        logger.error('Error in orphan detection scan', { error: String(error) });\r\n      }\r\n    }, intervalMs);\r\n\r\n    logger.info('Orphan detector started', {\r\n      gracePeriodMinutes: this.config.gracePeriodMinutes,\r\n      scanIntervalMinutes: this.config.scanIntervalMinutes,\r\n    });\r\n  }\r\n\r\n  /**\r\n   * Stop background scanner\r\n   */\r\n  stop(): void {\r\n    if (this.scanInterval) {\r\n      clearInterval(this.scanInterval);\r\n      this.scanInterval = null;\r\n      logger.info('Orphan detector stopped');\r\n    }\r\n  }\r\n\r\n  /**\r\n   * Detect orphaned workspaces\r\n   */\r\n  async detectOrphans(): Promise<OrphanWorkspace[]> {\r\n    const orphans: OrphanWorkspace[] = [];\r\n    const gracePeriodMs = (this.config.gracePeriodMinutes || 10) * 60 * 1000;\r\n    const now = Date.now();\r\n\r\n    try {\r\n      const entries = await fs.readdir(this.config.workspaceRoot, { withFileTypes: true });\r\n\r\n      for (const entry of entries) {\r\n        if (!entry.isDirectory()) continue;\r\n\r\n        try {\r\n          const workspaceInfo = await this.analyzeWorkspace(entry.path);\r\n          if (!workspaceInfo) continue;\r\n\r\n          // Check if process is still active\r\n          const isProcessActive = this.isProcessActive(workspaceInfo.processId);\r\n\r\n          if (!isProcessActive) {\r\n            // Check grace period\r\n            const timeSinceLastAccess = now - workspaceInfo.lastAccessedAt.getTime();\r\n\r\n            if (timeSinceLastAccess > gracePeriodMs) {\r\n              orphans.push(workspaceInfo);\r\n            }\r\n          }\r\n        } catch (error) {\r\n          logger.warn('Error analyzing workspace', { path: entry.path, error: String(error) });\r\n        }\r\n      }\r\n\r\n      logger.info('Orphan detection scan completed', {\r\n        found: orphans.length,\r\n        gracePeriodMs,\r\n      });\r\n    } catch (error) {\r\n      logger.error('Error scanning for orphans', { error: String(error) });\r\n    }\r\n\r\n    return orphans;\r\n  }\r\n\r\n  /**\r\n   * Clean up detected orphaned workspaces\r\n   */\r\n  async cleanupOrphans(): Promise<OrphanCleanupStats> {\r\n    const orphans = await this.detectOrphans();\r\n    let cleanedCount = 0;\r\n    let totalSizeFreed = 0;\r\n    let totalFilesRemoved = 0;\r\n    let gracePeriodCount = 0;\r\n\r\n    const gracePeriodMs = (this.config.gracePeriodMinutes || 10) * 60 * 1000;\r\n    const now = Date.now();\r\n\r\n    for (const orphan of orphans) {\r\n      try {\r\n        // Double-check if in grace period\r\n        const timeSinceAccess = now - orphan.lastAccessedAt.getTime();\r\n        if (timeSinceAccess <= gracePeriodMs) {\r\n          gracePeriodCount++;\r\n          continue;\r\n        }\r\n\r\n        // Clean up workspace\r\n        const sizeFreed = await this.removeWorkspace(orphan.path);\r\n        cleanedCount++;\r\n        totalSizeFreed += sizeFreed;\r\n        totalFilesRemoved += orphan.fileCount;\r\n\r\n        logger.info('Cleaned orphaned workspace', {\r\n          id: orphan.id,\r\n          agentId: orphan.agentId,\r\n          sizeFreed,\r\n        });\r\n      } catch (error) {\r\n        logger.error('Error cleaning up orphan workspace', {\r\n          id: orphan.id,\r\n          error: String(error),\r\n        });\r\n      }\r\n    }\r\n\r\n    return {\r\n      cleanedCount,\r\n      totalSizeFreed,\r\n      filesRemoved: totalFilesRemoved,\r\n      gracePeriodCount,\r\n    };\r\n  }\r\n\r\n  /**\r\n   * Force cleanup of specific orphan (skip grace period)\r\n   */\r\n  async forceCleanupOrphan(workspacePath: string): Promise<number> {\r\n    try {\r\n      const size = await this.removeWorkspace(workspacePath);\r\n      logger.info('Force cleaned orphan workspace', { path: workspacePath, size });\r\n      return size;\r\n    } catch (error) {\r\n      logger.error('Error force cleaning orphan', { path: workspacePath, error: String(error) });\r\n      throw createError(ErrorCode.FILE_WRITE_FAILED, 'Failed to cleanup orphan workspace', {\r\n        cause: String(error),\r\n      });\r\n    }\r\n  }\r\n\r\n  // ============================================================================\r\n  // Private Helper Methods\r\n  // ============================================================================\r\n\r\n  /**\r\n   * Analyze workspace to extract metadata\r\n   */\r\n  private async analyzeWorkspace(workspacePath: string): Promise<OrphanWorkspace | null> {\r\n    try {\r\n      const stats = await fs.stat(workspacePath);\r\n      const name = path.basename(workspacePath);\r\n\r\n      // Parse workspace name: sanitizedAgentId-sanitizedTaskId-uuid\r\n      // UUID format: 8hex-4hex-4hex-4hex-12hex (36 chars total)\r\n      // We need to find where the UUID starts\r\n      const uuidRegex = /[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/i;\r\n      const uuidMatch = name.match(uuidRegex);\r\n\r\n      if (!uuidMatch) {\r\n        return null;\r\n      }\r\n\r\n      const id = uuidMatch[0];\r\n      const prefix = name.substring(0, name.length - id.length - 1); // -1 for the dash before UUID\r\n\r\n      // Parse agent and task IDs from prefix\r\n      // Format: sanitizedAgentId-sanitizedTaskId\r\n      // Since both can contain characters, we use a simple heuristic:\r\n      // Find \"task\" in the prefix and assume that's where taskId starts\r\n      let agentId = '';\r\n      let taskId = '';\r\n\r\n      const taskStartIndex = prefix.indexOf('task-');\r\n      if (taskStartIndex > 0) {\r\n        agentId = prefix.substring(0, taskStartIndex - 1); // -1 to remove trailing dash\r\n        taskId = prefix.substring(taskStartIndex);\r\n      } else {\r\n        // Fallback: just use the whole prefix as agentId\r\n        agentId = prefix;\r\n        taskId = 'unknown';\r\n      }\r\n\r\n      // Get workspace metadata if it exists\r\n      let processId: number | undefined;\r\n      let lastAccessedAt = stats.mtime;\r\n\r\n      try {\r\n        const metadataPath = path.join(workspacePath, '.metadata.json');\r\n        const metadata = await fs.readFile(metadataPath, 'utf-8');\r\n        const parsed = JSON.parse(metadata);\r\n        processId = parsed.processId;\r\n        if (parsed.lastAccessedAt) {\r\n          lastAccessedAt = new Date(parsed.lastAccessedAt);\r\n        }\r\n      } catch (e) {\r\n        // Metadata file doesn't exist - use current mtime\r\n      }\r\n\r\n      const size = await this.getDirectorySize(workspacePath);\r\n      const fileCount = await this.countFiles(workspacePath);\r\n\r\n      return {\r\n        id,\r\n        agentId,\r\n        taskId,\r\n        path: workspacePath,\r\n        createdAt: stats.birthtime || stats.mtime,\r\n        lastAccessedAt,\r\n        processId,\r\n        sizeBytes: size,\r\n        fileCount,\r\n      };\r\n    } catch (error) {\r\n      logger.debug('Error analyzing workspace', { path: workspacePath, error: String(error) });\r\n      return null;\r\n    }\r\n  }\r\n\r\n  /**\r\n   * Check if process is still active\r\n   */\r\n  private isProcessActive(processId?: number): boolean {\r\n    if (!processId) {\r\n      return false; // No process ID = definitely orphaned\r\n    }\r\n\r\n    try {\r\n      // Send signal 0 (check if process exists without sending signal)\r\n      // Returns true if process is still running\r\n      process.kill(processId, 0);\r\n      return true;\r\n    } catch (error) {\r\n      // Process does not exist\r\n      return false;\r\n    }\r\n  }\r\n\r\n  /**\r\n   * Remove workspace directory and return freed size\r\n   */\r\n  private async removeWorkspace(workspacePath: string): Promise<number> {\r\n    const size = await this.getDirectorySize(workspacePath);\r\n\r\n    try {\r\n      await fs.rm(workspacePath, { recursive: true, force: true });\r\n      logger.debug('Removed workspace directory', { path: workspacePath });\r\n      return size;\r\n    } catch (error) {\r\n      logger.error('Error removing workspace', { path: workspacePath, error: String(error) });\r\n      throw error;\r\n    }\r\n  }\r\n\r\n  /**\r\n   * Get directory size in bytes\r\n   */\r\n  private async getDirectorySize(dir: string): Promise<number> {\r\n    try {\r\n      const entries = await fs.readdir(dir, { recursive: true, withFileTypes: false });\r\n      let totalSize = 0;\r\n\r\n      for (const file of entries as string[]) {\r\n        try {\r\n          const filePath = path.join(dir, file);\r\n          const stats = await fs.stat(filePath).catch(() => null);\r\n          if (stats?.isFile()) {\r\n            totalSize += stats.size;\r\n          }\r\n        } catch (e) {\r\n          // Ignore inaccessible files\r\n        }\r\n      }\r\n\r\n      return totalSize;\r\n    } catch (error) {\r\n      return 0;\r\n    }\r\n  }\r\n\r\n  /**\r\n   * Count files in directory\r\n   */\r\n  private async countFiles(dir: string): Promise<number> {\r\n    try {\r\n      const entries = await fs.readdir(dir, { recursive: true, withFileTypes: false });\r\n      return Array.isArray(entries) ? entries.length : 0;\r\n    } catch (error) {\r\n      return 0;\r\n    }\r\n  }\r\n}\r\n\r\nexport default OrphanDetector;\r\n"],"names":["fs","path","createLogger","createError","ErrorCode","logger","OrphanDetector","config","scanInterval","gracePeriodMinutes","scanIntervalMinutes","start","intervalMs","setInterval","stats","cleanupOrphans","cleanedCount","info","totalFreed","totalSizeFreed","error","String","stop","clearInterval","detectOrphans","orphans","gracePeriodMs","now","Date","entries","readdir","workspaceRoot","withFileTypes","entry","isDirectory","workspaceInfo","analyzeWorkspace","isProcessActive","processId","timeSinceLastAccess","lastAccessedAt","getTime","push","warn","found","length","totalFilesRemoved","gracePeriodCount","orphan","timeSinceAccess","sizeFreed","removeWorkspace","fileCount","id","agentId","filesRemoved","forceCleanupOrphan","workspacePath","size","FILE_WRITE_FAILED","cause","stat","name","basename","uuidRegex","uuidMatch","match","prefix","substring","taskId","taskStartIndex","indexOf","mtime","metadataPath","join","metadata","readFile","parsed","JSON","parse","e","getDirectorySize","countFiles","createdAt","birthtime","sizeBytes","debug","process","kill","rm","recursive","force","dir","totalSize","file","filePath","catch","isFile","Array","isArray"],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;CA2BC,GAED,YAAYA,QAAQ,cAAc;AAClC,YAAYC,UAAU,OAAO;AAC7B,SAASC,YAAY,QAAQ,eAAe;AAC5C,SAASC,WAAW,EAAEC,SAAS,QAAuB,cAAc;AAEpE,MAAMC,SAASH,aAAa;AA2C5B;;CAEC,GACD,OAAO,MAAMI;IACHC,OAA6B;IAC7BC,eAAoC,KAAK;IAEjD,YAAYD,MAA4B,CAAE;QACxC,IAAI,CAACA,MAAM,GAAG;YACZE,oBAAoB;YACpBC,qBAAqB;YACrB,GAAGH,MAAM;QACX;IACF;IAEA;;GAEC,GACDI,QAAc;QACZ,IAAI,IAAI,CAACH,YAAY,EAAE;YACrB,QAAQ,kBAAkB;QAC5B;QAEA,MAAMI,aAAa,AAAC,CAAA,IAAI,CAACL,MAAM,CAACG,mBAAmB,IAAI,EAAC,IAAK,KAAK;QAElE,IAAI,CAACF,YAAY,GAAGK,YAAY;YAC9B,IAAI;gBACF,MAAMC,QAAQ,MAAM,IAAI,CAACC,cAAc;gBACvC,IAAID,MAAME,YAAY,GAAG,GAAG;oBAC1BX,OAAOY,IAAI,CAAC,uCAAuC;wBACjDD,cAAcF,MAAME,YAAY;wBAChCE,YAAYJ,MAAMK,cAAc;oBAClC;gBACF;YACF,EAAE,OAAOC,OAAO;gBACdf,OAAOe,KAAK,CAAC,kCAAkC;oBAAEA,OAAOC,OAAOD;gBAAO;YACxE;QACF,GAAGR;QAEHP,OAAOY,IAAI,CAAC,2BAA2B;YACrCR,oBAAoB,IAAI,CAACF,MAAM,CAACE,kBAAkB;YAClDC,qBAAqB,IAAI,CAACH,MAAM,CAACG,mBAAmB;QACtD;IACF;IAEA;;GAEC,GACDY,OAAa;QACX,IAAI,IAAI,CAACd,YAAY,EAAE;YACrBe,cAAc,IAAI,CAACf,YAAY;YAC/B,IAAI,CAACA,YAAY,GAAG;YACpBH,OAAOY,IAAI,CAAC;QACd;IACF;IAEA;;GAEC,GACD,MAAMO,gBAA4C;QAChD,MAAMC,UAA6B,EAAE;QACrC,MAAMC,gBAAgB,AAAC,CAAA,IAAI,CAACnB,MAAM,CAACE,kBAAkB,IAAI,EAAC,IAAK,KAAK;QACpE,MAAMkB,MAAMC,KAAKD,GAAG;QAEpB,IAAI;YACF,MAAME,UAAU,MAAM7B,GAAG8B,OAAO,CAAC,IAAI,CAACvB,MAAM,CAACwB,aAAa,EAAE;gBAAEC,eAAe;YAAK;YAElF,KAAK,MAAMC,SAASJ,QAAS;gBAC3B,IAAI,CAACI,MAAMC,WAAW,IAAI;gBAE1B,IAAI;oBACF,MAAMC,gBAAgB,MAAM,IAAI,CAACC,gBAAgB,CAACH,MAAMhC,IAAI;oBAC5D,IAAI,CAACkC,eAAe;oBAEpB,mCAAmC;oBACnC,MAAME,kBAAkB,IAAI,CAACA,eAAe,CAACF,cAAcG,SAAS;oBAEpE,IAAI,CAACD,iBAAiB;wBACpB,qBAAqB;wBACrB,MAAME,sBAAsBZ,MAAMQ,cAAcK,cAAc,CAACC,OAAO;wBAEtE,IAAIF,sBAAsBb,eAAe;4BACvCD,QAAQiB,IAAI,CAACP;wBACf;oBACF;gBACF,EAAE,OAAOf,OAAO;oBACdf,OAAOsC,IAAI,CAAC,6BAA6B;wBAAE1C,MAAMgC,MAAMhC,IAAI;wBAAEmB,OAAOC,OAAOD;oBAAO;gBACpF;YACF;YAEAf,OAAOY,IAAI,CAAC,mCAAmC;gBAC7C2B,OAAOnB,QAAQoB,MAAM;gBACrBnB;YACF;QACF,EAAE,OAAON,OAAO;YACdf,OAAOe,KAAK,CAAC,8BAA8B;gBAAEA,OAAOC,OAAOD;YAAO;QACpE;QAEA,OAAOK;IACT;IAEA;;GAEC,GACD,MAAMV,iBAA8C;QAClD,MAAMU,UAAU,MAAM,IAAI,CAACD,aAAa;QACxC,IAAIR,eAAe;QACnB,IAAIG,iBAAiB;QACrB,IAAI2B,oBAAoB;QACxB,IAAIC,mBAAmB;QAEvB,MAAMrB,gBAAgB,AAAC,CAAA,IAAI,CAACnB,MAAM,CAACE,kBAAkB,IAAI,EAAC,IAAK,KAAK;QACpE,MAAMkB,MAAMC,KAAKD,GAAG;QAEpB,KAAK,MAAMqB,UAAUvB,QAAS;YAC5B,IAAI;gBACF,kCAAkC;gBAClC,MAAMwB,kBAAkBtB,MAAMqB,OAAOR,cAAc,CAACC,OAAO;gBAC3D,IAAIQ,mBAAmBvB,eAAe;oBACpCqB;oBACA;gBACF;gBAEA,qBAAqB;gBACrB,MAAMG,YAAY,MAAM,IAAI,CAACC,eAAe,CAACH,OAAO/C,IAAI;gBACxDe;gBACAG,kBAAkB+B;gBAClBJ,qBAAqBE,OAAOI,SAAS;gBAErC/C,OAAOY,IAAI,CAAC,8BAA8B;oBACxCoC,IAAIL,OAAOK,EAAE;oBACbC,SAASN,OAAOM,OAAO;oBACvBJ;gBACF;YACF,EAAE,OAAO9B,OAAO;gBACdf,OAAOe,KAAK,CAAC,sCAAsC;oBACjDiC,IAAIL,OAAOK,EAAE;oBACbjC,OAAOC,OAAOD;gBAChB;YACF;QACF;QAEA,OAAO;YACLJ;YACAG;YACAoC,cAAcT;YACdC;QACF;IACF;IAEA;;GAEC,GACD,MAAMS,mBAAmBC,aAAqB,EAAmB;QAC/D,IAAI;YACF,MAAMC,OAAO,MAAM,IAAI,CAACP,eAAe,CAACM;YACxCpD,OAAOY,IAAI,CAAC,kCAAkC;gBAAEhB,MAAMwD;gBAAeC;YAAK;YAC1E,OAAOA;QACT,EAAE,OAAOtC,OAAO;YACdf,OAAOe,KAAK,CAAC,+BAA+B;gBAAEnB,MAAMwD;gBAAerC,OAAOC,OAAOD;YAAO;YACxF,MAAMjB,YAAYC,UAAUuD,iBAAiB,EAAE,sCAAsC;gBACnFC,OAAOvC,OAAOD;YAChB;QACF;IACF;IAEA,+EAA+E;IAC/E,yBAAyB;IACzB,+EAA+E;IAE/E;;GAEC,GACD,MAAcgB,iBAAiBqB,aAAqB,EAAmC;QACrF,IAAI;YACF,MAAM3C,QAAQ,MAAMd,GAAG6D,IAAI,CAACJ;YAC5B,MAAMK,OAAO7D,KAAK8D,QAAQ,CAACN;YAE3B,8DAA8D;YAC9D,0DAA0D;YAC1D,wCAAwC;YACxC,MAAMO,YAAY;YAClB,MAAMC,YAAYH,KAAKI,KAAK,CAACF;YAE7B,IAAI,CAACC,WAAW;gBACd,OAAO;YACT;YAEA,MAAMZ,KAAKY,SAAS,CAAC,EAAE;YACvB,MAAME,SAASL,KAAKM,SAAS,CAAC,GAAGN,KAAKjB,MAAM,GAAGQ,GAAGR,MAAM,GAAG,IAAI,8BAA8B;YAE7F,uCAAuC;YACvC,2CAA2C;YAC3C,gEAAgE;YAChE,kEAAkE;YAClE,IAAIS,UAAU;YACd,IAAIe,SAAS;YAEb,MAAMC,iBAAiBH,OAAOI,OAAO,CAAC;YACtC,IAAID,iBAAiB,GAAG;gBACtBhB,UAAUa,OAAOC,SAAS,CAAC,GAAGE,iBAAiB,IAAI,6BAA6B;gBAChFD,SAASF,OAAOC,SAAS,CAACE;YAC5B,OAAO;gBACL,iDAAiD;gBACjDhB,UAAUa;gBACVE,SAAS;YACX;YAEA,sCAAsC;YACtC,IAAI/B;YACJ,IAAIE,iBAAiB1B,MAAM0D,KAAK;YAEhC,IAAI;gBACF,MAAMC,eAAexE,KAAKyE,IAAI,CAACjB,eAAe;gBAC9C,MAAMkB,WAAW,MAAM3E,GAAG4E,QAAQ,CAACH,cAAc;gBACjD,MAAMI,SAASC,KAAKC,KAAK,CAACJ;gBAC1BrC,YAAYuC,OAAOvC,SAAS;gBAC5B,IAAIuC,OAAOrC,cAAc,EAAE;oBACzBA,iBAAiB,IAAIZ,KAAKiD,OAAOrC,cAAc;gBACjD;YACF,EAAE,OAAOwC,GAAG;YACV,kDAAkD;YACpD;YAEA,MAAMtB,OAAO,MAAM,IAAI,CAACuB,gBAAgB,CAACxB;YACzC,MAAML,YAAY,MAAM,IAAI,CAAC8B,UAAU,CAACzB;YAExC,OAAO;gBACLJ;gBACAC;gBACAe;gBACApE,MAAMwD;gBACN0B,WAAWrE,MAAMsE,SAAS,IAAItE,MAAM0D,KAAK;gBACzChC;gBACAF;gBACA+C,WAAW3B;gBACXN;YACF;QACF,EAAE,OAAOhC,OAAO;YACdf,OAAOiF,KAAK,CAAC,6BAA6B;gBAAErF,MAAMwD;gBAAerC,OAAOC,OAAOD;YAAO;YACtF,OAAO;QACT;IACF;IAEA;;GAEC,GACD,AAAQiB,gBAAgBC,SAAkB,EAAW;QACnD,IAAI,CAACA,WAAW;YACd,OAAO,OAAO,sCAAsC;QACtD;QAEA,IAAI;YACF,iEAAiE;YACjE,2CAA2C;YAC3CiD,QAAQC,IAAI,CAAClD,WAAW;YACxB,OAAO;QACT,EAAE,OAAOlB,OAAO;YACd,yBAAyB;YACzB,OAAO;QACT;IACF;IAEA;;GAEC,GACD,MAAc+B,gBAAgBM,aAAqB,EAAmB;QACpE,MAAMC,OAAO,MAAM,IAAI,CAACuB,gBAAgB,CAACxB;QAEzC,IAAI;YACF,MAAMzD,GAAGyF,EAAE,CAAChC,eAAe;gBAAEiC,WAAW;gBAAMC,OAAO;YAAK;YAC1DtF,OAAOiF,KAAK,CAAC,+BAA+B;gBAAErF,MAAMwD;YAAc;YAClE,OAAOC;QACT,EAAE,OAAOtC,OAAO;YACdf,OAAOe,KAAK,CAAC,4BAA4B;gBAAEnB,MAAMwD;gBAAerC,OAAOC,OAAOD;YAAO;YACrF,MAAMA;QACR;IACF;IAEA;;GAEC,GACD,MAAc6D,iBAAiBW,GAAW,EAAmB;QAC3D,IAAI;YACF,MAAM/D,UAAU,MAAM7B,GAAG8B,OAAO,CAAC8D,KAAK;gBAAEF,WAAW;gBAAM1D,eAAe;YAAM;YAC9E,IAAI6D,YAAY;YAEhB,KAAK,MAAMC,QAAQjE,QAAqB;gBACtC,IAAI;oBACF,MAAMkE,WAAW9F,KAAKyE,IAAI,CAACkB,KAAKE;oBAChC,MAAMhF,QAAQ,MAAMd,GAAG6D,IAAI,CAACkC,UAAUC,KAAK,CAAC,IAAM;oBAClD,IAAIlF,OAAOmF,UAAU;wBACnBJ,aAAa/E,MAAM4C,IAAI;oBACzB;gBACF,EAAE,OAAOsB,GAAG;gBACV,4BAA4B;gBAC9B;YACF;YAEA,OAAOa;QACT,EAAE,OAAOzE,OAAO;YACd,OAAO;QACT;IACF;IAEA;;GAEC,GACD,MAAc8D,WAAWU,GAAW,EAAmB;QACrD,IAAI;YACF,MAAM/D,UAAU,MAAM7B,GAAG8B,OAAO,CAAC8D,KAAK;gBAAEF,WAAW;gBAAM1D,eAAe;YAAM;YAC9E,OAAOkE,MAAMC,OAAO,CAACtE,WAAWA,QAAQgB,MAAM,GAAG;QACnD,EAAE,OAAOzB,OAAO;YACd,OAAO;QACT;IACF;AACF;AAEA,eAAed,eAAe"}

package/dist/lib/password-generator.js

@@ -0,0 +1,166 @@
+/**
+ * Secure Password Generator
+ *
+ * Generates cryptographically secure passwords for database authentication
+ * with configurable complexity requirements and validation.
+ *
+ * Security Standards:
+ * - Uses crypto.randomBytes() for cryptographic randomness
+ * - Default minimum 32 characters for high entropy
+ * - Requires mixed character types (uppercase, lowercase, digits, special)
+ * - No ambiguous characters (0/O, 1/l, etc.)
+ * - Suitable for Redis requirepass and PostgreSQL authentication
+ */ import { randomBytes } from 'crypto';
+/**
+ * Default character sets for password generation
+ */ const CHAR_SETS = {
+    uppercase: 'ABCDEFGHIJKLMNOPQRSTUVWXYZ',
+    uppercaseNoAmbiguous: 'ABCDEFGHJKMNPQRSTUVWXYZ',
+    lowercase: 'abcdefghijklmnopqrstuvwxyz',
+    lowercaseNoAmbiguous: 'abcdefghjkmnpqrstuvwxyz',
+    digits: '0123456789',
+    digitsNoAmbiguous: '23456789',
+    special: '!@#$%^&*()_+-=[]{}|;:,.<>?',
+    specialSafe: '!@#%^&*_+-='
+};
+/**
+ * Generate a cryptographically secure random password
+ */ export function generatePassword(options = {}) {
+    const { length = 32, uppercase = true, lowercase = true, digits = true, special = true, excludeAmbiguous = true } = options;
+    if (length < 16) {
+        throw new Error('Password length must be at least 16 characters');
+    }
+    // Build character pool
+    let charPool = '';
+    const selectedSets = [];
+    if (uppercase) {
+        const chars = excludeAmbiguous ? CHAR_SETS.uppercaseNoAmbiguous : CHAR_SETS.uppercase;
+        charPool += chars;
+        selectedSets.push('uppercase');
+    }
+    if (lowercase) {
+        const chars = excludeAmbiguous ? CHAR_SETS.lowercaseNoAmbiguous : CHAR_SETS.lowercase;
+        charPool += chars;
+        selectedSets.push('lowercase');
+    }
+    if (digits) {
+        const chars = excludeAmbiguous ? CHAR_SETS.digitsNoAmbiguous : CHAR_SETS.digits;
+        charPool += chars;
+        selectedSets.push('digits');
+    }
+    if (special) {
+        charPool += CHAR_SETS.specialSafe;
+        selectedSets.push('special');
+    }
+    if (charPool.length === 0) {
+        throw new Error('At least one character type must be enabled');
+    }
+    // Ensure password contains at least one character from each required type
+    const password = new Array(length);
+    let generated = 0;
+    // First, place one character from each required set
+    for (const setName of selectedSets){
+        let setChars;
+        switch(setName){
+            case 'uppercase':
+                setChars = uppercase ? excludeAmbiguous ? CHAR_SETS.uppercaseNoAmbiguous : CHAR_SETS.uppercase : '';
+                break;
+            case 'lowercase':
+                setChars = lowercase ? excludeAmbiguous ? CHAR_SETS.lowercaseNoAmbiguous : CHAR_SETS.lowercase : '';
+                break;
+            case 'digits':
+                setChars = digits ? excludeAmbiguous ? CHAR_SETS.digitsNoAmbiguous : CHAR_SETS.digits : '';
+                break;
+            case 'special':
+                setChars = special ? CHAR_SETS.specialSafe : '';
+                break;
+            default:
+                setChars = '';
+        }
+        if (setChars.length > 0 && generated < length) {
+            const index = cryptoRandom(0, setChars.length - 1);
+            password[generated] = setChars[index];
+            generated++;
+        }
+    }
+    // Fill remaining positions with random characters from pool
+    while(generated < length){
+        const index = cryptoRandom(0, charPool.length - 1);
+        password[generated] = charPool[index];
+        generated++;
+    }
+    // Shuffle password to avoid predictable patterns
+    return shuffleArray(password).join('');
+}
+/**
+ * Validate password meets security requirements
+ */ export function validatePassword(password, minLength = 32) {
+    const errors = [];
+    const hasUppercase = /[A-Z]/.test(password);
+    const hasLowercase = /[a-z]/.test(password);
+    const hasDigits = /\d/.test(password);
+    const hasSpecial = /[!@#$%^&*()_+\-=\[\]{}|;:,.<>?]/.test(password);
+    if (password.length < minLength) {
+        errors.push(`Password must be at least ${minLength} characters long (current: ${password.length})`);
+    }
+    if (!hasUppercase) {
+        errors.push('Password must contain at least one uppercase letter');
+    }
+    if (!hasLowercase) {
+        errors.push('Password must contain at least one lowercase letter');
+    }
+    if (!hasDigits) {
+        errors.push('Password must contain at least one digit');
+    }
+    if (!hasSpecial) {
+        errors.push('Password must contain at least one special character');
+    }
+    return {
+        valid: errors.length === 0,
+        length: password.length,
+        hasUppercase,
+        hasLowercase,
+        hasDigits,
+        hasSpecial,
+        errors
+    };
+}
+/**
+ * Generate a cryptographically secure random integer in range [min, max]
+ */ function cryptoRandom(min, max) {
+    if (min < 0 || max < 0 || min > max) {
+        throw new Error('Invalid range: min must be >= 0 and min must be <= max');
+    }
+    const range = max - min + 1;
+    const bytesNeeded = Math.ceil(Math.log2(range) / 8);
+    const randomBytes_ = randomBytes(bytesNeeded);
+    // Convert bytes to integer and apply modulo to ensure uniform distribution
+    let randomValue = 0;
+    for(let i = 0; i < bytesNeeded; i++){
+        randomValue = randomValue << 8 | randomBytes_[i];
+    }
+    // Use rejection sampling to ensure uniform distribution
+    const limit = Math.floor(256 ** bytesNeeded / range) * range;
+    if (randomValue < limit) {
+        return min + randomValue % range;
+    }
+    // Recursively try again if we exceeded the limit (very rare)
+    return cryptoRandom(min, max);
+}
+/**
+ * Shuffle array in-place using Fisher-Yates algorithm
+ */ function shuffleArray(array) {
+    const shuffled = [
+        ...array
+    ];
+    for(let i = shuffled.length - 1; i > 0; i--){
+        const j = cryptoRandom(0, i);
+        [shuffled[i], shuffled[j]] = [
+            shuffled[j],
+            shuffled[i]
+        ];
+    }
+    return shuffled;
+}
+
+//# sourceMappingURL=password-generator.js.map