crewly 1.13.0 → 1.14.0

package/dist/backend/backend/src/services/agent/crewly-agent/prompt-guard.service.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"prompt-guard.service.d.ts","sourceRoot":"","sources":["../../../../../../../backend/src/services/agent/crewly-agent/prompt-guard.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAmB,MAAM,YAAY,CAAC;AAE9D;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,qDAAqD;IACrD,OAAO,EAAE,MAAM,CAAC;IAChB,yCAAyC;IACzC,MAAM,EAAE,MAAM,CAAC;IACf,iCAAiC;IACjC,QAAQ,EAAE,gBAAgB,GAAG,UAAU,GAAG,kBAAkB,GAAG,mBAAmB,CAAC;CACpF;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,6CAA6C;IAC7C,OAAO,EAAE,OAAO,CAAC;IACjB,iDAAiD;IACjD,MAAM,EAAE,MAAM,CAAC;IACf,wDAAwD;IACxD,QAAQ,CAAC,EAAE,YAAY,CAAC,UAAU,CAAC,CAAC;IACpC,qDAAqD;IACrD,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;GAEG;AACH,eAAO,MAAM,uBAAuB,EAAE,SAAS,YAAY,EA2FjD,CAAC;AAEX;;GAEG;AACH,eAAO,MAAM,yBAAyB,EAAE,SAAS,YAAY,EAqBnD,CAAC;AAEX;;;GAGG;AACH,eAAO,MAAM,+BAA+B,EAAE,MAAM,EAQnD,CAAC;AAEF;;GAEG;AACH,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA0B;IAC1D,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA0B;IAEzD;;;;;OAKG;gBAED,yBAAyB,CAAC,EAAE,YAAY,EAAE,EAC1C,wBAAwB,CAAC,EAAE,YAAY,EAAE;IAU3C;;;;;OAKG;IACH,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,gBAAgB;IAmB/C;;;;;OAKG;IACH,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,gBAAgB;IAmB7C;;;;;;OAMG;IACH,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,gBAAgB;IAMrC;;;;;;;;OAQG;IACH,gBAAgB,CACd,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,gBAAgB,GAC5B,UAAU;CAiBd"}

package/dist/backend/backend/src/services/agent/crewly-agent/prompt-guard.service.js

@@ -1,256 +0,0 @@
-/**
- * Prompt Guard Service — Prompt Injection Protection
- *
- * Detects and blocks prompt injection attempts that try to extract API keys,
- * secrets, or sensitive environment variables through agent commands.
- *
- * Integrates with the tool registry to block dangerous bash commands and
- * logs blocked attempts to the audit trail.
- *
- * @module services/agent/crewly-agent/prompt-guard.service
- *
- * @example
- * ```typescript
- * const guard = new PromptGuardService();
- * const result = guard.checkCommand('echo $ANTHROPIC_API_KEY');
- * // { blocked: true, reason: 'Key extraction attempt: echo env var', pattern: '...' }
- * ```
- */
-/**
- * Patterns that detect attempts to extract API keys or secrets via bash commands.
- */
-export const KEY_EXTRACTION_PATTERNS = [
-    // Direct env var echo/print
-    {
-        pattern: /\becho\s+\$[A-Z_]*(?:KEY|SECRET|TOKEN|PASSWORD|CREDENTIAL|AUTH)/i,
-        reason: 'Attempt to echo sensitive environment variable',
-        category: 'env_extraction',
-    },
-    {
-        pattern: /\bprintf\s+.*\$[A-Z_]*(?:KEY|SECRET|TOKEN|PASSWORD|CREDENTIAL|AUTH)/i,
-        reason: 'Attempt to printf sensitive environment variable',
-        category: 'env_extraction',
-    },
-    // env/printenv with grep for secrets
-    {
-        pattern: /\benv\b.*\|\s*grep\s+.*(?:KEY|SECRET|TOKEN|PASSWORD|API|AUTH)/i,
-        reason: 'Attempt to grep env for secrets',
-        category: 'env_extraction',
-    },
-    {
-        pattern: /\bprintenv\b.*(?:KEY|SECRET|TOKEN|PASSWORD|API|AUTH)/i,
-        reason: 'Attempt to printenv sensitive variable',
-        category: 'env_extraction',
-    },
-    // set | grep (bash set command dumps all vars)
-    {
-        pattern: /\bset\b\s*\|\s*grep\s+.*(?:KEY|SECRET|TOKEN|PASSWORD|API|AUTH)/i,
-        reason: 'Attempt to dump shell variables and grep for secrets',
-        category: 'env_extraction',
-    },
-    // Reading sensitive config files (must come before bare env/printenv to avoid early match on "cat .env")
-    {
-        pattern: /\bcat\s+.*\.env\b/i,
-        reason: 'Attempt to read .env file',
-        category: 'file_exfiltration',
-    },
-    {
-        pattern: /\bcat\s+.*(?:credentials|secrets|\.aws\/credentials|\.npmrc|\.netrc|\.pgpass)/i,
-        reason: 'Attempt to read credentials file',
-        category: 'file_exfiltration',
-    },
-    {
-        pattern: /\bcat\s+.*\/etc\/shadow\b/i,
-        reason: 'Attempt to read system password file',
-        category: 'file_exfiltration',
-    },
-    // Direct env dump
-    {
-        pattern: /\benv\s*$/i,
-        reason: 'Attempt to dump all environment variables',
-        category: 'key_dump',
-    },
-    {
-        pattern: /\bprintenv\s*$/i,
-        reason: 'Attempt to dump all environment variables',
-        category: 'key_dump',
-    },
-    // compgen dumps shell vars/functions
-    {
-        pattern: /\bcompgen\s+-[ev]/i,
-        reason: 'Attempt to dump shell variables via compgen',
-        category: 'key_dump',
-    },
-    // base64 encoding secrets for exfiltration
-    {
-        pattern: /\bbase64\b.*\$[A-Z_]*(?:KEY|SECRET|TOKEN)/i,
-        reason: 'Attempt to base64 encode secret for exfiltration',
-        category: 'file_exfiltration',
-    },
-    // curl/wget exfiltration of env vars
-    {
-        pattern: /\b(?:curl|wget)\b.*\$[A-Z_]*(?:KEY|SECRET|TOKEN)/i,
-        reason: 'Attempt to exfiltrate secret via HTTP request',
-        category: 'file_exfiltration',
-    },
-    // Python/Node one-liners to access env
-    {
-        pattern: /\bpython[23]?\s+-c\s+.*os\.environ/i,
-        reason: 'Attempt to access env via Python subprocess',
-        category: 'env_extraction',
-    },
-    {
-        pattern: /\bnode\s+-e\s+.*process\.env/i,
-        reason: 'Attempt to access env via Node subprocess',
-        category: 'env_extraction',
-    },
-    // Specific key variable names in $() or backtick subshells
-    {
-        pattern: /\$\(.*(?:ANTHROPIC_API_KEY|OPENAI_API_KEY|GOOGLE_API_KEY|AWS_SECRET|STRIPE_SECRET)/i,
-        reason: 'Attempt to expand sensitive env var in subshell',
-        category: 'env_extraction',
-    },
-];
-/**
- * Prompt-level injection patterns (detected in natural language prompts, not just commands).
- */
-export const PROMPT_INJECTION_PATTERNS = [
-    {
-        pattern: /(?:print|show|reveal|tell\s+me|display|output|give\s+me|share)\s+(?:(?:your|the|my|me\s+the)\s+)?(?:api[_ ]?key|secret|token|password|credentials)/i,
-        reason: 'Prompt injection: request to reveal API key/secret',
-        category: 'prompt_injection',
-    },
-    {
-        pattern: /(?:what\s+is|what's)\s+(?:your|the|my)\s+(?:api[_ ]?key|secret[_ ]?key|auth[_ ]?token|password)/i,
-        reason: 'Prompt injection: question about API key/secret',
-        category: 'prompt_injection',
-    },
-    {
-        pattern: /ignore\s+(?:previous|all|your)\s+(?:instructions|rules|safety)/i,
-        reason: 'Prompt injection: instruction override attempt',
-        category: 'prompt_injection',
-    },
-    {
-        pattern: /(?:override|bypass|disable|turn\s+off)\s+(?:security|safety|filter|guardrail|redaction)/i,
-        reason: 'Prompt injection: attempt to disable security filters',
-        category: 'prompt_injection',
-    },
-];
-/**
- * Additional blocked command patterns for tool-registry.ts integration.
- * These extend the existing BLOCKED_COMMAND_PATTERNS with key extraction blocks.
- */
-export const KEY_EXTRACTION_BLOCKED_COMMANDS = [
-    /\benv\s*$/i,
-    /\bprintenv\s*$/i,
-    /\benv\b.*\|\s*grep\s+.*(?:KEY|SECRET|TOKEN|PASSWORD|API)/i,
-    /\bset\b\s*\|\s*grep\s+.*(?:KEY|SECRET|TOKEN|PASSWORD|API)/i,
-    /\bcompgen\s+-[ev]/i,
-    /\bcat\s+.*\.env\b/i,
-    /\bcat\s+.*(?:credentials|secrets|\.aws\/credentials|\.npmrc|\.netrc|\.pgpass)/i,
-];
-/**
- * Service that detects and blocks prompt injection and key extraction attempts.
- */
-export class PromptGuardService {
-    commandPatterns;
-    promptPatterns;
-    /**
-     * Creates a new PromptGuardService.
-     *
-     * @param additionalCommandPatterns - Extra command-level patterns
-     * @param additionalPromptPatterns - Extra prompt-level patterns
-     */
-    constructor(additionalCommandPatterns, additionalPromptPatterns) {
-        this.commandPatterns = additionalCommandPatterns
-            ? [...KEY_EXTRACTION_PATTERNS, ...additionalCommandPatterns]
-            : KEY_EXTRACTION_PATTERNS;
-        this.promptPatterns = additionalPromptPatterns
-            ? [...PROMPT_INJECTION_PATTERNS, ...additionalPromptPatterns]
-            : PROMPT_INJECTION_PATTERNS;
-    }
-    /**
-     * Checks a bash command for key extraction attempts.
-     *
-     * @param command - Raw bash command string
-     * @returns Guard check result
-     */
-    checkCommand(command) {
-        if (!command) {
-            return { blocked: false, reason: '' };
-        }
-        for (const guard of this.commandPatterns) {
-            if (guard.pattern.test(command)) {
-                return {
-                    blocked: true,
-                    reason: guard.reason,
-                    category: guard.category,
-                    matchedPattern: guard.pattern.source,
-                };
-            }
-        }
-        return { blocked: false, reason: '' };
-    }
-    /**
-     * Checks a user/agent prompt for injection attempts targeting secrets.
-     *
-     * @param prompt - The text prompt or message
-     * @returns Guard check result
-     */
-    checkPrompt(prompt) {
-        if (!prompt) {
-            return { blocked: false, reason: '' };
-        }
-        for (const guard of this.promptPatterns) {
-            if (guard.pattern.test(prompt)) {
-                return {
-                    blocked: true,
-                    reason: guard.reason,
-                    category: guard.category,
-                    matchedPattern: guard.pattern.source,
-                };
-            }
-        }
-        return { blocked: false, reason: '' };
-    }
-    /**
-     * Checks both command and prompt patterns.
-     * Use this for comprehensive scanning of any agent input.
-     *
-     * @param text - Text to check (command or prompt)
-     * @returns Guard check result
-     */
-    check(text) {
-        const cmdResult = this.checkCommand(text);
-        if (cmdResult.blocked)
-            return cmdResult;
-        return this.checkPrompt(text);
-    }
-    /**
-     * Creates an audit entry for a blocked attempt.
-     *
-     * @param sessionName - Agent session that triggered the block
-     * @param toolName - Tool that was used (e.g. 'bash_exec')
-     * @param command - The blocked command
-     * @param guardResult - The guard check result
-     * @returns AuditEntry suitable for the audit log
-     */
-    createAuditEntry(sessionName, toolName, command, guardResult) {
-        return {
-            timestamp: new Date().toISOString(),
-            sessionName,
-            toolName,
-            sensitivity: 'destructive',
-            args: {
-                command,
-                blockedReason: guardResult.reason,
-                category: guardResult.category || 'unknown',
-                matchedPattern: guardResult.matchedPattern || '',
-            },
-            success: false,
-            error: `Blocked by prompt guard: ${guardResult.reason}`,
-            durationMs: 0,
-        };
-    }
-}
-//# sourceMappingURL=prompt-guard.service.js.map

package/dist/backend/backend/src/services/agent/crewly-agent/prompt-guard.service.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"prompt-guard.service.js","sourceRoot":"","sources":["../../../../../../../backend/src/services/agent/crewly-agent/prompt-guard.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AA8BH;;GAEG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAA4B;IAC9D,4BAA4B;IAC5B;QACE,OAAO,EAAE,kEAAkE;QAC3E,MAAM,EAAE,gDAAgD;QACxD,QAAQ,EAAE,gBAAgB;KAC3B;IACD;QACE,OAAO,EAAE,sEAAsE;QAC/E,MAAM,EAAE,kDAAkD;QAC1D,QAAQ,EAAE,gBAAgB;KAC3B;IACD,qCAAqC;IACrC;QACE,OAAO,EAAE,gEAAgE;QACzE,MAAM,EAAE,iCAAiC;QACzC,QAAQ,EAAE,gBAAgB;KAC3B;IACD;QACE,OAAO,EAAE,uDAAuD;QAChE,MAAM,EAAE,wCAAwC;QAChD,QAAQ,EAAE,gBAAgB;KAC3B;IACD,+CAA+C;IAC/C;QACE,OAAO,EAAE,iEAAiE;QAC1E,MAAM,EAAE,sDAAsD;QAC9D,QAAQ,EAAE,gBAAgB;KAC3B;IACD,yGAAyG;IACzG;QACE,OAAO,EAAE,oBAAoB;QAC7B,MAAM,EAAE,2BAA2B;QACnC,QAAQ,EAAE,mBAAmB;KAC9B;IACD;QACE,OAAO,EAAE,gFAAgF;QACzF,MAAM,EAAE,kCAAkC;QAC1C,QAAQ,EAAE,mBAAmB;KAC9B;IACD;QACE,OAAO,EAAE,4BAA4B;QACrC,MAAM,EAAE,sCAAsC;QAC9C,QAAQ,EAAE,mBAAmB;KAC9B;IACD,kBAAkB;IAClB;QACE,OAAO,EAAE,YAAY;QACrB,MAAM,EAAE,2CAA2C;QACnD,QAAQ,EAAE,UAAU;KACrB;IACD;QACE,OAAO,EAAE,iBAAiB;QAC1B,MAAM,EAAE,2CAA2C;QACnD,QAAQ,EAAE,UAAU;KACrB;IACD,qCAAqC;IACrC;QACE,OAAO,EAAE,oBAAoB;QAC7B,MAAM,EAAE,6CAA6C;QACrD,QAAQ,EAAE,UAAU;KACrB;IACD,2CAA2C;IAC3C;QACE,OAAO,EAAE,4CAA4C;QACrD,MAAM,EAAE,kDAAkD;QAC1D,QAAQ,EAAE,mBAAmB;KAC9B;IACD,qCAAqC;IACrC;QACE,OAAO,EAAE,mDAAmD;QAC5D,MAAM,EAAE,+CAA+C;QACvD,QAAQ,EAAE,mBAAmB;KAC9B;IACD,uCAAuC;IACvC;QACE,OAAO,EAAE,qCAAqC;QAC9C,MAAM,EAAE,6CAA6C;QACrD,QAAQ,EAAE,gBAAgB;KAC3B;IACD;QACE,OAAO,EAAE,+BAA+B;QACxC,MAAM,EAAE,2CAA2C;QACnD,QAAQ,EAAE,gBAAgB;KAC3B;IACD,2DAA2D;IAC3D;QACE,OAAO,EAAE,qFAAqF;QAC9F,MAAM,EAAE,iDAAiD;QACzD,QAAQ,EAAE,gBAAgB;KAC3B;CACO,CAAC;AAEX;;GAEG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAA4B;IAChE;QACE,OAAO,EAAE,qJAAqJ;QAC9J,MAAM,EAAE,oDAAoD;QAC5D,QAAQ,EAAE,kBAAkB;KAC7B;IACD;QACE,OAAO,EAAE,kGAAkG;QAC3G,MAAM,EAAE,iDAAiD;QACzD,QAAQ,EAAE,kBAAkB;KAC7B;IACD;QACE,OAAO,EAAE,iEAAiE;QAC1E,MAAM,EAAE,gDAAgD;QACxD,QAAQ,EAAE,kBAAkB;KAC7B;IACD;QACE,OAAO,EAAE,0FAA0F;QACnG,MAAM,EAAE,uDAAuD;QAC/D,QAAQ,EAAE,kBAAkB;KAC7B;CACO,CAAC;AAEX;;;GAGG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAa;IACvD,YAAY;IACZ,iBAAiB;IACjB,2DAA2D;IAC3D,4DAA4D;IAC5D,oBAAoB;IACpB,oBAAoB;IACpB,gFAAgF;CACjF,CAAC;AAEF;;GAEG;AACH,MAAM,OAAO,kBAAkB;IACZ,eAAe,CAA0B;IACzC,cAAc,CAA0B;IAEzD;;;;;OAKG;IACH,YACE,yBAA0C,EAC1C,wBAAyC;QAEzC,IAAI,CAAC,eAAe,GAAG,yBAAyB;YAC9C,CAAC,CAAC,CAAC,GAAG,uBAAuB,EAAE,GAAG,yBAAyB,CAAC;YAC5D,CAAC,CAAC,uBAAuB,CAAC;QAC5B,IAAI,CAAC,cAAc,GAAG,wBAAwB;YAC5C,CAAC,CAAC,CAAC,GAAG,yBAAyB,EAAE,GAAG,wBAAwB,CAAC;YAC7D,CAAC,CAAC,yBAAyB,CAAC;IAChC,CAAC;IAED;;;;;OAKG;IACH,YAAY,CAAC,OAAe;QAC1B,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QACxC,CAAC;QAED,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACzC,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAChC,OAAO;oBACL,OAAO,EAAE,IAAI;oBACb,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,cAAc,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM;iBACrC,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACxC,CAAC;IAED;;;;;OAKG;IACH,WAAW,CAAC,MAAc;QACxB,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QACxC,CAAC;QAED,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxC,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC/B,OAAO;oBACL,OAAO,EAAE,IAAI;oBACb,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,cAAc,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM;iBACrC,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACxC,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,IAAY;QAChB,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,SAAS,CAAC,OAAO;YAAE,OAAO,SAAS,CAAC;QACxC,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;IAED;;;;;;;;OAQG;IACH,gBAAgB,CACd,WAAmB,EACnB,QAAgB,EAChB,OAAe,EACf,WAA6B;QAE7B,OAAO;YACL,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,WAAW;YACX,QAAQ;YACR,WAAW,EAAE,aAAgC;YAC7C,IAAI,EAAE;gBACJ,OAAO;gBACP,aAAa,EAAE,WAAW,CAAC,MAAM;gBACjC,QAAQ,EAAE,WAAW,CAAC,QAAQ,IAAI,SAAS;gBAC3C,cAAc,EAAE,WAAW,CAAC,cAAc,IAAI,EAAE;aACjD;YACD,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,4BAA4B,WAAW,CAAC,MAAM,EAAE;YACvD,UAAU,EAAE,CAAC;SACd,CAAC;IACJ,CAAC;CACF"}

package/dist/backend/backend/src/services/agent/crewly-agent/rate-limiter.d.ts

@@ -1,143 +0,0 @@
-/**
- * Rate Limiter for Crewly Agent API Calls
- *
- * Provides token-bucket rate limiting, message coalescing, and 429 retry
- * logic to prevent Gemini API quota exhaustion when multiple agents are
- * actively generating messages.
- *
- * @module services/agent/crewly-agent/rate-limiter
- */
-/**
- * Configuration for the rate limiter.
- */
-export interface RateLimiterConfig {
-    /** Maximum requests allowed per window */
-    maxRequestsPerWindow: number;
-    /** Time window in milliseconds */
-    windowMs: number;
-    /** Maximum retry attempts for 429 errors */
-    maxRetries: number;
-    /** Initial backoff delay in milliseconds for 429 retries */
-    initialBackoffMs: number;
-    /** Backoff multiplier for exponential retry */
-    backoffMultiplier: number;
-    /** Maximum backoff delay in milliseconds */
-    maxBackoffMs: number;
-    /** Coalescing window — how long to wait for additional messages before processing (ms) */
-    coalesceWindowMs: number;
-}
-/**
- * Default rate limiter configuration.
- */
-export declare const RATE_LIMITER_DEFAULTS: RateLimiterConfig;
-/**
- * Token-bucket rate limiter with message coalescing and 429 retry.
- *
- * Features:
- * - **Rate limiting**: Enforces max requests per time window using a sliding window.
- * - **Message coalescing**: Groups messages arriving within a short window into one.
- * - **429 retry**: Wraps API calls with exponential backoff on quota errors.
- *
- * @example
- * ```typescript
- * const limiter = new RateLimiter<AgentRunResult>();
- * const result = await limiter.enqueue('Check status', undefined, async (msg) => {
- *   return agentRunner.run(msg);
- * });
- * ```
- */
-export declare class RateLimiter<T> {
-    private config;
-    private requestTimestamps;
-    private queue;
-    private processing;
-    private coalesceTimer;
-    /**
-     * Create a new RateLimiter instance.
-     *
-     * @param config - Optional partial config overrides
-     */
-    constructor(config?: Partial<RateLimiterConfig>);
-    /**
-     * Enqueue a message for rate-limited processing.
-     *
-     * If multiple messages arrive within the coalescing window, they are
-     * merged into a single request to reduce API call count.
-     *
-     * @param message - Message to process
-     * @param metadata - Optional metadata
-     * @param handler - Async function that performs the actual API call
-     * @returns Result from the handler
-     */
-    enqueue(message: string, metadata: Record<string, string> | undefined, handler: (message: string, metadata?: Record<string, string>) => Promise<T>): Promise<T>;
-    /**
-     * Get the current number of messages in the queue.
-     *
-     * @returns Queue length
-     */
-    getQueueLength(): number;
-    /**
-     * Check if the rate limiter is currently processing.
-     *
-     * @returns True if processing
-     */
-    isProcessing(): boolean;
-    /**
-     * Get the number of requests made in the current window.
-     *
-     * @returns Request count in current window
-     */
-    getRequestCountInWindow(): number;
-    /**
-     * Get the current configuration.
-     *
-     * @returns Rate limiter configuration
-     */
-    getConfig(): RateLimiterConfig;
-    /**
-     * Reset internal state (for testing).
-     */
-    reset(): void;
-    /**
-     * Process the queue: coalesce messages, enforce rate limit, execute with retry.
-     *
-     * @param handler - The actual API call handler
-     */
-    private processQueue;
-    /**
-     * Wait until we have capacity in the rate limit window.
-     */
-    private waitForCapacity;
-    /**
-     * Remove timestamps older than the current window.
-     */
-    private pruneOldTimestamps;
-    /**
-     * Coalesce multiple queued messages into a single message.
-     *
-     * If there's only one message, it passes through unchanged.
-     * Multiple messages are joined with a separator and a header.
-     *
-     * @param batch - Array of queued messages to coalesce
-     * @returns Single coalesced message and metadata from the most recent item
-     */
-    private coalesceMessages;
-    /**
-     * Execute the handler with exponential backoff retry on 429/quota errors.
-     *
-     * @param message - Message to send
-     * @param metadata - Optional metadata
-     * @param handler - The API call handler
-     * @returns Handler result
-     * @throws Error after max retries exhausted
-     */
-    private executeWithRetry;
-    /**
-     * Check if an error is retryable (429 or quota-related).
-     *
-     * @param error - The error to check
-     * @returns True if the error should be retried
-     */
-    private isRetryableError;
-}
-//# sourceMappingURL=rate-limiter.d.ts.map

package/dist/backend/backend/src/services/agent/crewly-agent/rate-limiter.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"rate-limiter.d.ts","sourceRoot":"","sources":["../../../../../../../backend/src/services/agent/crewly-agent/rate-limiter.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,0CAA0C;IAC1C,oBAAoB,EAAE,MAAM,CAAC;IAC7B,kCAAkC;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,4CAA4C;IAC5C,UAAU,EAAE,MAAM,CAAC;IACnB,4DAA4D;IAC5D,gBAAgB,EAAE,MAAM,CAAC;IACzB,+CAA+C;IAC/C,iBAAiB,EAAE,MAAM,CAAC;IAC1B,4CAA4C;IAC5C,YAAY,EAAE,MAAM,CAAC;IACrB,0FAA0F;IAC1F,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED;;GAEG;AACH,eAAO,MAAM,qBAAqB,EAAE,iBAQnC,CAAC;AAkBF;;;;;;;;;;;;;;;GAeG;AACH,qBAAa,WAAW,CAAC,CAAC;IACxB,OAAO,CAAC,MAAM,CAAoB;IAClC,OAAO,CAAC,iBAAiB,CAAgB;IACzC,OAAO,CAAC,KAAK,CAA0B;IACvC,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,aAAa,CAA8C;IAEnE;;;;OAIG;gBACS,MAAM,CAAC,EAAE,OAAO,CAAC,iBAAiB,CAAC;IAI/C;;;;;;;;;;OAUG;IACH,OAAO,CACL,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,EAC5C,OAAO,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,GAC1E,OAAO,CAAC,CAAC,CAAC;IA0Bb;;;;OAIG;IACH,cAAc,IAAI,MAAM;IAIxB;;;;OAIG;IACH,YAAY,IAAI,OAAO;IAIvB;;;;OAIG;IACH,uBAAuB,IAAI,MAAM;IAKjC;;;;OAIG;IACH,SAAS,IAAI,iBAAiB;IAI9B;;OAEG;IACH,KAAK,IAAI,IAAI;IAUb;;;;OAIG;YACW,YAAY;IAiD1B;;OAEG;YACW,eAAe;IAgB7B;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAK1B;;;;;;;;OAQG;IACH,OAAO,CAAC,gBAAgB;IAkBxB;;;;;;;;OAQG;YACW,gBAAgB;IAqC9B;;;;;OAKG;IACH,OAAO,CAAC,gBAAgB;CAUzB"}

package/dist/backend/backend/src/services/agent/crewly-agent/rate-limiter.js

@@ -1,264 +0,0 @@
-/**
- * Rate Limiter for Crewly Agent API Calls
- *
- * Provides token-bucket rate limiting, message coalescing, and 429 retry
- * logic to prevent Gemini API quota exhaustion when multiple agents are
- * actively generating messages.
- *
- * @module services/agent/crewly-agent/rate-limiter
- */
-/**
- * Default rate limiter configuration.
- */
-export const RATE_LIMITER_DEFAULTS = {
-    maxRequestsPerWindow: 10,
-    windowMs: 60_000,
-    maxRetries: 3,
-    initialBackoffMs: 5_000,
-    backoffMultiplier: 2,
-    maxBackoffMs: 60_000,
-    coalesceWindowMs: 2_000,
-};
-/**
- * Token-bucket rate limiter with message coalescing and 429 retry.
- *
- * Features:
- * - **Rate limiting**: Enforces max requests per time window using a sliding window.
- * - **Message coalescing**: Groups messages arriving within a short window into one.
- * - **429 retry**: Wraps API calls with exponential backoff on quota errors.
- *
- * @example
- * ```typescript
- * const limiter = new RateLimiter<AgentRunResult>();
- * const result = await limiter.enqueue('Check status', undefined, async (msg) => {
- *   return agentRunner.run(msg);
- * });
- * ```
- */
-export class RateLimiter {
-    config;
-    requestTimestamps = [];
-    queue = [];
-    processing = false;
-    coalesceTimer = null;
-    /**
-     * Create a new RateLimiter instance.
-     *
-     * @param config - Optional partial config overrides
-     */
-    constructor(config) {
-        this.config = { ...RATE_LIMITER_DEFAULTS, ...config };
-    }
-    /**
-     * Enqueue a message for rate-limited processing.
-     *
-     * If multiple messages arrive within the coalescing window, they are
-     * merged into a single request to reduce API call count.
-     *
-     * @param message - Message to process
-     * @param metadata - Optional metadata
-     * @param handler - Async function that performs the actual API call
-     * @returns Result from the handler
-     */
-    enqueue(message, metadata, handler) {
-        return new Promise((resolve, reject) => {
-            this.queue.push({
-                message,
-                metadata,
-                resolve,
-                reject,
-                enqueuedAt: Date.now(),
-            });
-            // Reset coalesce timer — wait for more messages before processing
-            if (this.coalesceTimer) {
-                clearTimeout(this.coalesceTimer);
-            }
-            this.coalesceTimer = setTimeout(() => {
-                this.coalesceTimer = null;
-                if (!this.processing) {
-                    this.processQueue(handler).catch(() => {
-                        // Errors are already routed to individual promise reject callbacks
-                    });
-                }
-            }, this.config.coalesceWindowMs);
-        });
-    }
-    /**
-     * Get the current number of messages in the queue.
-     *
-     * @returns Queue length
-     */
-    getQueueLength() {
-        return this.queue.length;
-    }
-    /**
-     * Check if the rate limiter is currently processing.
-     *
-     * @returns True if processing
-     */
-    isProcessing() {
-        return this.processing;
-    }
-    /**
-     * Get the number of requests made in the current window.
-     *
-     * @returns Request count in current window
-     */
-    getRequestCountInWindow() {
-        this.pruneOldTimestamps();
-        return this.requestTimestamps.length;
-    }
-    /**
-     * Get the current configuration.
-     *
-     * @returns Rate limiter configuration
-     */
-    getConfig() {
-        return { ...this.config };
-    }
-    /**
-     * Reset internal state (for testing).
-     */
-    reset() {
-        this.requestTimestamps = [];
-        this.queue = [];
-        this.processing = false;
-        if (this.coalesceTimer) {
-            clearTimeout(this.coalesceTimer);
-            this.coalesceTimer = null;
-        }
-    }
-    /**
-     * Process the queue: coalesce messages, enforce rate limit, execute with retry.
-     *
-     * @param handler - The actual API call handler
-     */
-    async processQueue(handler) {
-        this.processing = true;
-        try {
-            while (this.queue.length > 0) {
-                // Wait for rate limit window if needed
-                await this.waitForCapacity();
-                // Coalesce all pending messages into one
-                const batch = this.queue.splice(0, this.queue.length);
-                const coalesced = this.coalesceMessages(batch);
-                // Record this request timestamp
-                this.requestTimestamps.push(Date.now());
-                // Execute with 429 retry
-                try {
-                    const result = await this.executeWithRetry(coalesced.message, coalesced.metadata, handler);
-                    // Resolve all promises in the batch with the same result
-                    for (const item of batch) {
-                        item.resolve(result);
-                    }
-                }
-                catch (error) {
-                    // Reject all promises in the batch
-                    const err = error instanceof Error ? error : new Error(String(error));
-                    for (const item of batch) {
-                        item.reject(err);
-                    }
-                }
-            }
-        }
-        finally {
-            this.processing = false;
-            // Check if more messages arrived while processing
-            if (this.queue.length > 0) {
-                this.processQueue(handler).catch(() => {
-                    // Errors are already routed to individual promise reject callbacks
-                });
-            }
-        }
-    }
-    /**
-     * Wait until we have capacity in the rate limit window.
-     */
-    async waitForCapacity() {
-        this.pruneOldTimestamps();
-        while (this.requestTimestamps.length >= this.config.maxRequestsPerWindow) {
-            // Calculate how long to wait until the oldest request falls out of the window
-            const oldestTimestamp = this.requestTimestamps[0];
-            const waitMs = (oldestTimestamp + this.config.windowMs) - Date.now() + 100; // +100ms buffer
-            if (waitMs > 0) {
-                await new Promise((resolve) => setTimeout(resolve, waitMs));
-            }
-            this.pruneOldTimestamps();
-        }
-    }
-    /**
-     * Remove timestamps older than the current window.
-     */
-    pruneOldTimestamps() {
-        const cutoff = Date.now() - this.config.windowMs;
-        this.requestTimestamps = this.requestTimestamps.filter((ts) => ts > cutoff);
-    }
-    /**
-     * Coalesce multiple queued messages into a single message.
-     *
-     * If there's only one message, it passes through unchanged.
-     * Multiple messages are joined with a separator and a header.
-     *
-     * @param batch - Array of queued messages to coalesce
-     * @returns Single coalesced message and metadata from the most recent item
-     */
-    coalesceMessages(batch) {
-        if (batch.length === 1) {
-            return { message: batch[0].message, metadata: batch[0].metadata };
-        }
-        // Use metadata from the most recent message
-        const latestMetadata = batch[batch.length - 1].metadata;
-        // Coalesce messages with a numbered separator
-        const parts = batch.map((item, index) => {
-            return `[Message ${index + 1}/${batch.length}]\n${item.message}`;
-        });
-        const coalesced = `${batch.length} messages received while rate-limited. Process them together:\n\n${parts.join('\n\n---\n\n')}`;
-        return { message: coalesced, metadata: latestMetadata };
-    }
-    /**
-     * Execute the handler with exponential backoff retry on 429/quota errors.
-     *
-     * @param message - Message to send
-     * @param metadata - Optional metadata
-     * @param handler - The API call handler
-     * @returns Handler result
-     * @throws Error after max retries exhausted
-     */
-    async executeWithRetry(message, metadata, handler) {
-        let lastError = null;
-        for (let attempt = 0; attempt <= this.config.maxRetries; attempt++) {
-            try {
-                return await handler(message, metadata);
-            }
-            catch (error) {
-                lastError = error instanceof Error ? error : new Error(String(error));
-                // Only retry on 429 / quota errors
-                if (!this.isRetryableError(lastError)) {
-                    throw lastError;
-                }
-                if (attempt >= this.config.maxRetries) {
-                    break;
-                }
-                // Exponential backoff
-                const backoffMs = Math.min(this.config.initialBackoffMs * Math.pow(this.config.backoffMultiplier, attempt), this.config.maxBackoffMs);
-                await new Promise((resolve) => setTimeout(resolve, backoffMs));
-            }
-        }
-        throw new Error(`Rate limit retries exhausted (${this.config.maxRetries} attempts). Last error: ${lastError?.message}`);
-    }
-    /**
-     * Check if an error is retryable (429 or quota-related).
-     *
-     * @param error - The error to check
-     * @returns True if the error should be retried
-     */
-    isRetryableError(error) {
-        const message = error.message.toLowerCase();
-        return (message.includes('429') ||
-            message.includes('quota') ||
-            message.includes('rate limit') ||
-            message.includes('resource_exhausted') ||
-            message.includes('too many requests'));
-    }
-}
-//# sourceMappingURL=rate-limiter.js.map