crewx 0.8.5-rc.0 → 0.8.5

package/dist-server/adapters/adapter.module.js

@@ -0,0 +1,35 @@
+"use strict";
+/**
+ * AdapterModule — NestJS module for adapter lifecycle management.
+ *
+ * Implements OnApplicationBootstrap (start adapters from yaml)
+ * and OnApplicationShutdown (stop all adapters with timeout).
+ */
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var AdapterModule_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AdapterModule = void 0;
+const common_1 = require("@nestjs/common");
+const adapter_service_js_1 = require("./adapter.service.js");
+const http_router_service_js_1 = require("./http-router.service.js");
+let AdapterModule = AdapterModule_1 = class AdapterModule {
+    logger = new common_1.Logger(AdapterModule_1.name);
+    onApplicationBootstrap() {
+        this.logger.log('AdapterModule bootstrap — adapters will be loaded lazily via AdapterService');
+    }
+    async onApplicationShutdown() {
+        this.logger.log('AdapterModule shutdown — stopping all adapters');
+    }
+};
+exports.AdapterModule = AdapterModule;
+exports.AdapterModule = AdapterModule = AdapterModule_1 = __decorate([
+    (0, common_1.Module)({
+        providers: [adapter_service_js_1.AdapterService, http_router_service_js_1.AdapterHttpRouterService],
+        exports: [adapter_service_js_1.AdapterService, http_router_service_js_1.AdapterHttpRouterService],
+    })
+], AdapterModule);

package/dist-server/adapters/adapter.service.js

@@ -0,0 +1,79 @@
+"use strict";
+/**
+ * AdapterService — loads adapter configs from crewx.yaml and registers them.
+ *
+ * V1: yaml auto-load model. Reads `adapters:` section from crewx config.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var AdapterService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AdapterService = void 0;
+const common_1 = require("@nestjs/common");
+let AdapterService = AdapterService_1 = class AdapterService {
+    logger = new common_1.Logger(AdapterService_1.name);
+    async loadFromYaml(crewx, adapters) {
+        for (const adapterConf of adapters) {
+            try {
+                const instanceId = adapterConf.instanceId ?? adapterConf.id;
+                this.logger.log(`Loading adapter: ${adapterConf.id} (instance: ${instanceId})`);
+                const adapterModule = await Promise.resolve(`${adapterConf.module}`).then(s => __importStar(require(s)));
+                const adapter = adapterModule.default ?? adapterModule.adapter;
+                if (!adapter) {
+                    this.logger.error(`Adapter module ${adapterConf.module} has no default export`);
+                    continue;
+                }
+                await crewx.registerChannelAdapter({
+                    adapter,
+                    instanceId,
+                    config: adapterConf.config ?? {},
+                });
+                this.logger.log(`Adapter ${adapterConf.id} started successfully`);
+            }
+            catch (err) {
+                this.logger.error(`Failed to load adapter ${adapterConf.id}: ${err instanceof Error ? err.message : String(err)}`);
+            }
+        }
+    }
+};
+exports.AdapterService = AdapterService;
+exports.AdapterService = AdapterService = AdapterService_1 = __decorate([
+    (0, common_1.Injectable)()
+], AdapterService);

package/dist-server/adapters/http-router.service.js

@@ -0,0 +1,91 @@
+"use strict";
+/**
+ * AdapterHttpRouterService — implements HttpRouter.registerRoute for NestJS.
+ *
+ * M2: raw body handling with bodyParser:false,
+ * requireSignature for webhook signature verification,
+ * rateLimit per route, timeout handling.
+ *
+ * Route prefix: /adapters/:adapterId/* (enforced)
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AdapterHttpRouterService = void 0;
+class AdapterHttpRouterService {
+    routes = [];
+    rateLimitCounters = new Map();
+    registerRoute(adapterId, path, handler, opts) {
+        const fullPath = `/adapters/${adapterId}${path}`;
+        this.routes.push({ adapterId, path, fullPath, handler, opts });
+    }
+    getRoutes() {
+        return this.routes;
+    }
+    findRoute(_method, url) {
+        for (const route of this.routes) {
+            if (url === route.fullPath || url.startsWith(route.fullPath)) {
+                return route;
+            }
+        }
+        return undefined;
+    }
+    clearRoutes() {
+        this.routes.length = 0;
+        this.rateLimitCounters.clear();
+    }
+    async handleRequest(route, req, res) {
+        if (!req.url.startsWith('/adapters/')) {
+            res.status(403).json({ error: 'route_prefix_violation' });
+            return;
+        }
+        if (route.opts?.requireSignature) {
+            const sig = req.headers[route.opts.requireSignature.headerName];
+            const sigStr = Array.isArray(sig) ? sig[0] : sig;
+            if (!sigStr || !route.opts.requireSignature.verify(req.body, sigStr)) {
+                res.status(401).json({ error: 'invalid_signature' });
+                return;
+            }
+        }
+        if (route.opts?.rateLimit) {
+            const key = `${route.adapterId}:${route.path}`;
+            const now = Date.now();
+            const entry = this.rateLimitCounters.get(key);
+            const windowMs = 60_000;
+            if (!entry || now >= entry.resetAt) {
+                this.rateLimitCounters.set(key, { count: 1, resetAt: now + windowMs });
+            }
+            else if (entry.count >= route.opts.rateLimit.requestsPerMin) {
+                res.status(429).json({ error: 'rate_limit_exceeded' });
+                return;
+            }
+            else {
+                entry.count++;
+            }
+        }
+        const timeoutMs = route.opts?.timeoutMs ?? 30_000;
+        let settled = false;
+        const timeout = setTimeout(() => {
+            if (!settled) {
+                settled = true;
+                res.status(504).json({ error: 'timeout' });
+            }
+        }, timeoutMs);
+        try {
+            await route.handler(req, res);
+            if (!settled) {
+                settled = true;
+                clearTimeout(timeout);
+            }
+        }
+        catch (err) {
+            if (!settled) {
+                settled = true;
+                clearTimeout(timeout);
+                res.status(500).json({
+                    error: 'handler_error',
+                    message: err instanceof Error ? err.message : String(err),
+                });
+            }
+        }
+    }
+}
+exports.AdapterHttpRouterService = AdapterHttpRouterService;

package/dist-server/app.module.js

@@ -0,0 +1,102 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AppModule = void 0;
+const common_1 = require("@nestjs/common");
+const core_1 = require("@nestjs/core");
+const throttler_1 = require("@nestjs/throttler");
+const repository_exception_filter_js_1 = require("./common/repository.exception-filter.js");
+const workspace_middleware_js_1 = require("./common/middleware/workspace.middleware.js");
+const config_1 = require("@nestjs/config");
+const cli_module_js_1 = require("./domain/cli/cli.module.js");
+const usage_module_js_1 = require("./domain/usage/usage.module.js");
+const task_module_js_1 = require("./domain/task/task.module.js");
+const mcp_module_js_1 = require("./domain/mcp/mcp.module.js");
+const agent_module_js_1 = require("./domain/agent/agent.module.js");
+const git_module_js_1 = require("./domain/git/git.module.js");
+const knowledge_module_js_1 = require("./domain/knowledge/knowledge.module.js");
+const wbs_module_js_1 = require("./domain/wbs/wbs.module.js");
+const thread_module_js_1 = require("./domain/thread/thread.module.js");
+const doc_module_js_1 = require("./domain/doc/doc.module.js");
+const document_module_js_1 = require("./domain/document/document.module.js");
+const project_module_js_1 = require("./domain/project/project.module.js");
+const onboarding_module_js_1 = require("./domain/onboarding/onboarding.module.js");
+const box_module_js_1 = require("./domain/box/box.module.js");
+const message_module_js_1 = require("./domain/message/message.module.js");
+const skill_module_js_1 = require("./domain/skill/skill.module.js");
+const workflow_module_js_1 = require("./domain/workflow/workflow.module.js");
+const workspace_module_js_1 = require("./domain/workspace/workspace.module.js");
+const health_module_js_1 = require("./domain/health/health.module.js");
+const http_logging_interceptor_js_1 = require("./common/interceptor/http-logging.interceptor.js");
+const api_id_header_interceptor_js_1 = require("./common/interceptor/api-id-header.interceptor.js");
+const repository_module_js_1 = require("./repository/repository.module.js");
+const crewx_module_js_1 = require("./modules/crewx.module.js");
+const limits_module_js_1 = require("./common/limits/limits.module.js");
+const fs_module_js_1 = require("./domain/fs/fs.module.js");
+const auth_module_js_1 = require("./domain/auth/auth.module.js");
+let AppModule = class AppModule {
+    configure(consumer) {
+        consumer
+            .apply(workspace_middleware_js_1.WorkspaceMiddleware)
+            .forRoutes({ path: 'ws/:slug/(.*)', method: common_1.RequestMethod.ALL });
+    }
+};
+exports.AppModule = AppModule;
+exports.AppModule = AppModule = __decorate([
+    (0, common_1.Module)({
+        imports: [
+            config_1.ConfigModule.forRoot({ isGlobal: true }),
+            throttler_1.ThrottlerModule.forRoot([{ ttl: 60000, limit: 100 }]),
+            repository_module_js_1.RepositoryModule,
+            crewx_module_js_1.CrewxModule,
+            // Workspace-scoped modules (controllers use ws/:slug/* prefix directly)
+            thread_module_js_1.ThreadModule,
+            message_module_js_1.MessageModule,
+            task_module_js_1.TaskModule,
+            agent_module_js_1.AgentModule,
+            usage_module_js_1.UsageModule,
+            document_module_js_1.DocumentModule,
+            doc_module_js_1.DocModule,
+            knowledge_module_js_1.KnowledgeModule,
+            onboarding_module_js_1.OnboardingModule,
+            project_module_js_1.ProjectModule,
+            fs_module_js_1.FsModule,
+            skill_module_js_1.SkillModule,
+            wbs_module_js_1.WbsModule,
+            workflow_module_js_1.WorkflowModule,
+            limits_module_js_1.LimitsModule,
+            // Global modules (no workspace prefix)
+            cli_module_js_1.CliModule,
+            mcp_module_js_1.McpModule,
+            auth_module_js_1.AuthModule,
+            git_module_js_1.GitModule,
+            box_module_js_1.BoxModule,
+            workspace_module_js_1.WorkspaceModule,
+            health_module_js_1.HealthModule,
+        ],
+        controllers: [],
+        providers: [
+            {
+                provide: core_1.APP_FILTER,
+                useClass: repository_exception_filter_js_1.RepositoryExceptionFilter,
+            },
+            {
+                provide: core_1.APP_GUARD,
+                useClass: throttler_1.ThrottlerGuard,
+            },
+            {
+                provide: core_1.APP_INTERCEPTOR,
+                useClass: api_id_header_interceptor_js_1.ApiIdHeaderInterceptor,
+            },
+            {
+                provide: core_1.APP_INTERCEPTOR,
+                useClass: http_logging_interceptor_js_1.HttpLoggingInterceptor,
+            },
+        ],
+    })
+], AppModule);

package/dist-server/bootstrap/crewx-server.js

@@ -0,0 +1,79 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createServerCrewx = createServerCrewx;
+const fs_1 = require("fs");
+const path_1 = require("path");
+const os_1 = require("os");
+const sdk_1 = require("@crewx/sdk");
+const plugins_1 = require("@crewx/sdk/plugins");
+const repository_1 = require("@crewx/sdk/repository");
+const node_1 = require("@crewx/sdk/tools/node");
+const SERVER_VERSION = (() => {
+    try {
+        const pkg = JSON.parse((0, fs_1.readFileSync)((0, path_1.join)(__dirname, '../../package.json'), 'utf8'));
+        return pkg.version ?? '0.0.0';
+    }
+    catch {
+        return '0.0.0';
+    }
+})();
+/**
+ * Build a Crewx instance for the NestJS server with standard plugins
+ * (FileLogger + SqliteTracing) plus built-in node tools registration.
+ * Passes itself as remoteFactory so that file:// remote agent delegation
+ * inherits the same plugin/tool environment in the target Crewx instance
+ * (identical semantics to CLI's createCliCrewx).
+ *
+ * Behavior mirrors createCliCrewx:
+ *   - If configPath resolves to an existing file → load it (with built-ins merged)
+ *   - If configPath is NOT set via CREWX_CONFIG env AND the file doesn't exist →
+ *     fall back to built-in-only mode so `crewx` can launch from any cwd
+ *   - If CREWX_CONFIG is explicitly set AND the file doesn't exist → throw
+ *
+ * workspaceRoot used by FileLoggerPlugin: directory of the yaml when present,
+ * otherwise process.cwd() so logs land in the launch directory.
+ */
+async function createServerCrewx(configPath) {
+    let yamlPath;
+    let workspaceRoot;
+    if (configPath !== undefined) {
+        // Caller explicitly provided a path — trust it directly without existsSync
+        const absConfigPath = (0, path_1.resolve)(configPath);
+        yamlPath = absConfigPath;
+        workspaceRoot = (0, path_1.dirname)(absConfigPath);
+    }
+    else {
+        // No explicit path — use env/default with existsSync fallback
+        const defaultPath = (0, path_1.resolve)(process.env.CREWX_CONFIG ?? 'crewx.yaml');
+        const isExplicitConfig = Boolean(process.env.CREWX_CONFIG);
+        const fileExists = (0, fs_1.existsSync)(defaultPath);
+        if (fileExists) {
+            yamlPath = defaultPath;
+            workspaceRoot = (0, path_1.dirname)(defaultPath);
+        }
+        else if (isExplicitConfig) {
+            throw new Error(`[crewx] Config file not found: ${defaultPath} (set via CREWX_CONFIG)`);
+        }
+        else {
+            yamlPath = undefined;
+            workspaceRoot = process.cwd();
+        }
+    }
+    const dbDir = (0, path_1.join)((0, os_1.homedir)(), '.crewx');
+    (0, fs_1.mkdirSync)(dbDir, { recursive: true });
+    const dbPath = (0, path_1.join)(dbDir, 'crewx.db');
+    const handle = (0, repository_1.openDrizzleDb)(dbPath);
+    try {
+        (0, repository_1.runMigrations)(handle.db);
+    }
+    finally {
+        handle.close();
+    }
+    const crewx = await sdk_1.Crewx.loadYaml(yamlPath, {
+        remoteFactory: createServerCrewx,
+    });
+    (0, node_1.registerBuiltinTools)(crewx);
+    await crewx.use(new plugins_1.FileLoggerPlugin({ workspaceRoot, version: SERVER_VERSION }));
+    await crewx.use(new plugins_1.SqliteTracingPlugin({ version: SERVER_VERSION }));
+    return crewx;
+}

package/dist-server/common/cors.js

@@ -0,0 +1,15 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isAllowedOrigin = isAllowedOrigin;
+function isAllowedOrigin(origin, allowedExtensionIds) {
+    if (!origin)
+        return true;
+    if (origin === 'http://localhost:8200')
+        return true;
+    if (origin.startsWith('chrome-extension://') &&
+        (allowedExtensionIds.length === 0 ||
+            allowedExtensionIds.some((id) => origin === `chrome-extension://${id}`))) {
+        return true;
+    }
+    return false;
+}

package/dist-server/common/decorators/project.decorator.js

@@ -0,0 +1,21 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Project = void 0;
+const common_1 = require("@nestjs/common");
+/**
+ * Extract project identifier:
+ * 1. X-CrewX-Project header
+ * 2. ?project query param (backward compat)
+ * 3. process.cwd() (server working directory = default project)
+ *
+ * @deprecated Use `@Workspace()` decorator from `workspace.decorator.ts` instead.
+ * This decorator returns a raw string; `@Workspace()` returns a full
+ * `WorkspaceContext` ({ id, path, name }) populated by `WorkspaceMiddleware`.
+ */
+exports.Project = (0, common_1.createParamDecorator)((_data, ctx) => {
+    const req = ctx.switchToHttp().getRequest();
+    const header = req.headers['x-crewx-project'];
+    const headerValue = Array.isArray(header) ? header[0] : header;
+    const queryValue = req.query['project'];
+    return headerValue || queryValue || process.cwd();
+});

package/dist-server/common/decorators/workspace.decorator.js

@@ -0,0 +1,24 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Workspace = void 0;
+const common_1 = require("@nestjs/common");
+/**
+ * Parameter decorator that extracts `WorkspaceContext` from the current request.
+ *
+ * The context is populated by `WorkspaceMiddleware` (global) and contains:
+ * - `id`   — SHA-256 hex (64 chars), used as `workspace_id` in DB queries
+ * - `path` — Normalized absolute directory path
+ * - `name` — Directory basename (human-readable)
+ *
+ * @example
+ * ```ts
+ * @Get()
+ * findAll(@Workspace() ws: WorkspaceContext) {
+ *   return this.service.findAll(ws.id);
+ * }
+ * ```
+ */
+exports.Workspace = (0, common_1.createParamDecorator)((_data, ctx) => {
+    const req = ctx.switchToHttp().getRequest();
+    return req.workspace;
+});

package/dist-server/common/interceptor/api-id-header.interceptor.js

@@ -0,0 +1,53 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ApiIdHeaderInterceptor = void 0;
+const common_1 = require("@nestjs/common");
+const core_1 = require("@nestjs/core");
+const HEADER_NAME = 'X-CrewX-ApiId';
+const SWAGGER_API_OPERATION = 'swagger/apiOperation';
+let ApiIdHeaderInterceptor = class ApiIdHeaderInterceptor {
+    reflector;
+    constructor(reflector) {
+        this.reflector = reflector;
+    }
+    intercept(context, next) {
+        // Guard: skip for non-controller contexts (e.g. static file serving)
+        if (!this.reflector) {
+            return next.handle();
+        }
+        let handler;
+        try {
+            handler = context.getHandler();
+        }
+        catch {
+            return next.handle();
+        }
+        if (!handler) {
+            return next.handle();
+        }
+        const metadata = this.reflector.get(SWAGGER_API_OPERATION, handler);
+        const operationId = metadata?.operationId;
+        if (!operationId) {
+            return next.handle();
+        }
+        const res = context.switchToHttp().getResponse();
+        if (!res.headersSent) {
+            res.setHeader(HEADER_NAME, operationId);
+        }
+        return next.handle();
+    }
+};
+exports.ApiIdHeaderInterceptor = ApiIdHeaderInterceptor;
+exports.ApiIdHeaderInterceptor = ApiIdHeaderInterceptor = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [core_1.Reflector])
+], ApiIdHeaderInterceptor);

package/dist-server/common/interceptor/http-logging.interceptor.js

@@ -0,0 +1,124 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HttpLoggingInterceptor = void 0;
+const common_1 = require("@nestjs/common");
+const rxjs_1 = require("rxjs");
+const crypto_1 = require("crypto");
+const request_log_repository_js_1 = require("../../repository/request-log.repository.js");
+const BATCH_SIZE = 500;
+const FLUSH_INTERVAL_MS = 30_000;
+/** Paths to skip logging (healthcheck endpoints) */
+const SKIP_PATHS = new Set(['/health', '/healthz', '/ready', '/readiness', '/liveness']);
+let HttpLoggingInterceptor = class HttpLoggingInterceptor {
+    repo;
+    queue = [];
+    flushTimer;
+    constructor(repo) {
+        this.repo = repo;
+        this.flushTimer = setInterval(() => this.flush(), FLUSH_INTERVAL_MS);
+    }
+    intercept(context, next) {
+        const httpCtx = context.switchToHttp();
+        const req = httpCtx.getRequest();
+        // Skip healthcheck endpoints
+        if (SKIP_PATHS.has(req.path)) {
+            return next.handle();
+        }
+        // Skip if X-Skip-Request-Log header is set
+        if (req.headers['x-skip-request-log'] === 'true') {
+            return next.handle();
+        }
+        const startTime = Date.now();
+        const res = httpCtx.getResponse();
+        // Patch res.json to capture response body for @Res() controllers
+        const origJson = res.json.bind(res);
+        res.json = (body) => {
+            res.__body = body;
+            return origJson(body);
+        };
+        return next.handle().pipe((0, rxjs_1.tap)({
+            next: () => this.logRequest(req, res, startTime),
+            error: () => this.logRequest(req, res, startTime),
+        }));
+    }
+    logRequest(req, res, startTime) {
+        const durationMs = Date.now() - startTime;
+        const statusCode = res.statusCode;
+        const now = new Date();
+        const entry = {
+            id: (0, crypto_1.randomUUID)(),
+            path: req.path,
+            method: req.method,
+            status_code: statusCode,
+            duration_ms: durationMs,
+            ip: req.ip ?? req.socket?.remoteAddress ?? undefined,
+            request_headers: this.safeJson(this.filterHeaders(req.headers)),
+            response_headers: this.safeJson(this.filterHeaders(res.getHeaders())),
+            request_body: req.body ? this.safeJson(req.body) : undefined,
+            response_body: undefined,
+            query: Object.keys(req.query).length > 0 ? this.safeJson(req.query) : undefined,
+            user_id: undefined,
+            project_id: this.extractProjectId(req.path),
+            partition_key: `${now.getFullYear()}-${String(now.getMonth() + 1).padStart(2, '0')}`,
+            timestamp: now.toISOString(),
+        };
+        const resBody = res.__body;
+        if (resBody !== undefined) {
+            entry.response_body = typeof resBody === 'string' ? resBody : this.safeJson(resBody);
+        }
+        this.queue.push(entry);
+        if (this.queue.length >= BATCH_SIZE) {
+            this.flush();
+        }
+    }
+    flush() {
+        if (this.queue.length === 0)
+            return;
+        const batch = this.queue.splice(0);
+        this.repo.bulkInsert(batch);
+    }
+    /** Extract project_id from URL patterns like /api/projects/:id/... */
+    extractProjectId(urlPath) {
+        const match = urlPath.match(/\/projects\/([^/]+)/);
+        return match?.[1];
+    }
+    /** Filter out sensitive headers */
+    filterHeaders(headers) {
+        const filtered = {};
+        const sensitiveKeys = new Set(['authorization', 'cookie', 'set-cookie', 'x-api-key']);
+        for (const [key, value] of Object.entries(headers)) {
+            if (!sensitiveKeys.has(key.toLowerCase())) {
+                filtered[key] = value;
+            }
+        }
+        return filtered;
+    }
+    safeJson(data) {
+        try {
+            const json = JSON.stringify(data);
+            // Truncate at 512KB to prevent DB bloat
+            return json.length > 524288 ? json.slice(0, 524288) : json;
+        }
+        catch {
+            return undefined;
+        }
+    }
+    onModuleDestroy() {
+        clearInterval(this.flushTimer);
+        this.flush();
+    }
+};
+exports.HttpLoggingInterceptor = HttpLoggingInterceptor;
+exports.HttpLoggingInterceptor = HttpLoggingInterceptor = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [request_log_repository_js_1.RequestLogRepository])
+], HttpLoggingInterceptor);

package/dist-server/common/limits/defaults.js

@@ -0,0 +1,13 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UNLIMITED_LIMITS = exports.FREE_TIER_LIMITS = void 0;
+exports.FREE_TIER_LIMITS = {
+    tier: 'FREE',
+    workspaces: 3,
+    agentsPerWorkspace: 10,
+};
+exports.UNLIMITED_LIMITS = {
+    tier: 'ENTERPRISE',
+    workspaces: -1,
+    agentsPerWorkspace: -1,
+};

package/dist-server/common/limits/limits-provider.js

@@ -0,0 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LimitsProvider = void 0;
+class LimitsProvider {
+}
+exports.LimitsProvider = LimitsProvider;