devchain-cli 0.12.3 → 0.13.0

package/dist/server/modules/cloud/services/egress-queue.service.js

@@ -0,0 +1,136 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EgressQueueService = void 0;
+const common_1 = require("@nestjs/common");
+const logger_1 = require("../../../common/logging/logger");
+const cloud_session_manager_service_1 = require("./cloud-session-manager.service");
+const refresh_gate_service_1 = require("./refresh-gate.service");
+const realtime_broadcaster_port_1 = require("../../realtime/ports/realtime-broadcaster.port");
+const logger = (0, logger_1.createLogger)('EgressQueue');
+const MAX_QUEUE_SIZE = 1000;
+const MAX_DELIVERY_ATTEMPTS = 3;
+const DRAIN_INTERVAL_MS = 100;
+const BASE_BACKOFF_MS = 1000;
+const NOTIFICATIONS_SERVICE_URL = process.env.NOTIFICATIONS_SERVICE_URL || 'http://localhost:3003';
+let EgressQueueService = class EgressQueueService {
+    constructor(cloudSession, refreshGate, broadcaster) {
+        this.cloudSession = cloudSession;
+        this.refreshGate = refreshGate;
+        this.broadcaster = broadcaster;
+        this.queue = [];
+        this.drainTimer = null;
+        this.paused = false;
+        this.pauseBackoffMs = BASE_BACKOFF_MS;
+        this.drainTimer = setInterval(() => this.drainOnce(), DRAIN_INTERVAL_MS);
+    }
+    onModuleDestroy() {
+        if (this.drainTimer) {
+            clearInterval(this.drainTimer);
+            this.drainTimer = null;
+        }
+    }
+    enqueue(payload) {
+        if (this.queue.length >= MAX_QUEUE_SIZE) {
+            this.queue.shift();
+            logger.warn('Queue overflow — dropped oldest entry');
+        }
+        this.queue.push({ payload, attempts: 0, nextAttemptAt: Date.now() });
+    }
+    get length() {
+        return this.queue.length;
+    }
+    async drainOnce() {
+        if (this.paused || this.queue.length === 0)
+            return;
+        const now = Date.now();
+        const entry = this.queue[0];
+        if (!entry || entry.nextAttemptAt > now)
+            return;
+        const token = this.cloudSession.getAccessToken();
+        if (!token)
+            return;
+        try {
+            const response = await fetch(`${NOTIFICATIONS_SERVICE_URL}/api/v1/ingest/local-app`, {
+                method: 'POST',
+                headers: {
+                    'Content-Type': 'application/json',
+                    Authorization: `Bearer ${token}`,
+                },
+                body: JSON.stringify(entry.payload),
+            });
+            if (response.ok || response.status === 409) {
+                this.queue.shift();
+                this.pauseBackoffMs = BASE_BACKOFF_MS;
+                return;
+            }
+            if (response.status === 401) {
+                await this.handle401();
+                return;
+            }
+            entry.attempts++;
+            if (entry.attempts >= MAX_DELIVERY_ATTEMPTS) {
+                this.queue.shift();
+                logger.warn({ sourceEventId: entry.payload.sourceEventId, attempts: entry.attempts }, 'Dropping event after max delivery attempts');
+                return;
+            }
+            entry.nextAttemptAt = now + BASE_BACKOFF_MS * Math.pow(2, entry.attempts - 1);
+            logger.debug({ sourceEventId: entry.payload.sourceEventId, attempt: entry.attempts }, 'Delivery failed — scheduling retry');
+        }
+        catch (error) {
+            entry.attempts++;
+            if (entry.attempts >= MAX_DELIVERY_ATTEMPTS) {
+                this.queue.shift();
+                logger.warn({ sourceEventId: entry.payload.sourceEventId, error }, 'Dropping event after network error');
+                return;
+            }
+            entry.nextAttemptAt = now + BASE_BACKOFF_MS * Math.pow(2, entry.attempts - 1);
+        }
+    }
+    async handle401() {
+        this.paused = true;
+        logger.info('401 received — initiating single-flight refresh');
+        const outcome = await this.refreshGate.attemptRefresh();
+        switch (outcome) {
+            case 'success':
+                this.paused = false;
+                this.pauseBackoffMs = BASE_BACKOFF_MS;
+                logger.info('Refresh succeeded — resuming queue');
+                break;
+            case 'transient_failure':
+                this.pauseBackoffMs = Math.min(this.pauseBackoffMs * 2, 30_000);
+                logger.warn({ backoffMs: this.pauseBackoffMs }, 'Transient refresh failure — pausing with backoff');
+                setTimeout(() => {
+                    this.paused = false;
+                }, this.pauseBackoffMs);
+                break;
+            case 'permanent_failure':
+                logger.warn('Permanent refresh failure — draining queue');
+                this.queue = [];
+                this.paused = false;
+                this.broadcaster.broadcastEvent('cloud', 'egress_disconnected', {
+                    reason: 'refresh_failed',
+                });
+                break;
+        }
+    }
+};
+exports.EgressQueueService = EgressQueueService;
+exports.EgressQueueService = EgressQueueService = __decorate([
+    (0, common_1.Injectable)(),
+    __param(2, (0, common_1.Inject)(realtime_broadcaster_port_1.REALTIME_BROADCASTER)),
+    __metadata("design:paramtypes", [cloud_session_manager_service_1.CloudSessionManagerService,
+        refresh_gate_service_1.RefreshGateService, Object])
+], EgressQueueService);
+//# sourceMappingURL=egress-queue.service.js.map

package/dist/server/modules/cloud/services/egress-queue.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"egress-queue.service.js","sourceRoot":"","sources":["../../../../src/modules/cloud/services/egress-queue.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAqE;AACrE,2DAA8D;AAC9D,mFAA6E;AAC7E,iEAA4D;AAC5D,8FAGwD;AAGxD,MAAM,MAAM,GAAG,IAAA,qBAAY,EAAC,aAAa,CAAC,CAAC;AAE3C,MAAM,cAAc,GAAG,IAAI,CAAC;AAC5B,MAAM,qBAAqB,GAAG,CAAC,CAAC;AAChC,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAC9B,MAAM,eAAe,GAAG,IAAI,CAAC;AAC7B,MAAM,yBAAyB,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,IAAI,uBAAuB,CAAC;AAS5F,IAAM,kBAAkB,GAAxB,MAAM,kBAAkB;IAM7B,YACmB,YAAwC,EACxC,WAA+B,EAEhD,WAAiD;QAHhC,iBAAY,GAAZ,YAAY,CAA4B;QACxC,gBAAW,GAAX,WAAW,CAAoB;QAE/B,gBAAW,GAAX,WAAW,CAAqB;QAT3C,UAAK,GAAiB,EAAE,CAAC;QACzB,eAAU,GAA0C,IAAI,CAAC;QACzD,WAAM,GAAG,KAAK,CAAC;QACf,mBAAc,GAAG,eAAe,CAAC;QAQvC,IAAI,CAAC,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,iBAAiB,CAAC,CAAC;IAC3E,CAAC;IAED,eAAe;QACb,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC/B,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QACzB,CAAC;IACH,CAAC;IAED,OAAO,CAAC,OAAsB;QAC5B,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,cAAc,EAAE,CAAC;YACxC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YACnB,MAAM,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;QACvD,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACvE,CAAC;IAED,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;IAC3B,CAAC;IAEO,KAAK,CAAC,SAAS;QACrB,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAEnD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC5B,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,aAAa,GAAG,GAAG;YAAE,OAAO;QAEhD,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,cAAc,EAAE,CAAC;QACjD,IAAI,CAAC,KAAK;YAAE,OAAO;QAEnB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,yBAAyB,0BAA0B,EAAE;gBACnF,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,aAAa,EAAE,UAAU,KAAK,EAAE;iBACjC;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC;aACpC,CAAC,CAAC;YAEH,IAAI,QAAQ,CAAC,EAAE,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC3C,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;gBACnB,IAAI,CAAC,cAAc,GAAG,eAAe,CAAC;gBACtC,OAAO;YACT,CAAC;YAED,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC5B,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;gBACvB,OAAO;YACT,CAAC;YAED,KAAK,CAAC,QAAQ,EAAE,CAAC;YACjB,IAAI,KAAK,CAAC,QAAQ,IAAI,qBAAqB,EAAE,CAAC;gBAC5C,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;gBACnB,MAAM,CAAC,IAAI,CACT,EAAE,aAAa,EAAE,KAAK,CAAC,OAAO,CAAC,aAAa,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,EACxE,4CAA4C,CAC7C,CAAC;gBACF,OAAO;YACT,CAAC;YAED,KAAK,CAAC,aAAa,GAAG,GAAG,GAAG,eAAe,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;YAC9E,MAAM,CAAC,KAAK,CACV,EAAE,aAAa,EAAE,KAAK,CAAC,OAAO,CAAC,aAAa,EAAE,OAAO,EAAE,KAAK,CAAC,QAAQ,EAAE,EACvE,oCAAoC,CACrC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,KAAK,CAAC,QAAQ,EAAE,CAAC;YACjB,IAAI,KAAK,CAAC,QAAQ,IAAI,qBAAqB,EAAE,CAAC;gBAC5C,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;gBACnB,MAAM,CAAC,IAAI,CACT,EAAE,aAAa,EAAE,KAAK,CAAC,OAAO,CAAC,aAAa,EAAE,KAAK,EAAE,EACrD,oCAAoC,CACrC,CAAC;gBACF,OAAO;YACT,CAAC;YACD,KAAK,CAAC,aAAa,GAAG,GAAG,GAAG,eAAe,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,SAAS;QACrB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,MAAM,CAAC,IAAI,CAAC,iDAAiD,CAAC,CAAC;QAE/D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,cAAc,EAAE,CAAC;QAExD,QAAQ,OAAO,EAAE,CAAC;YAChB,KAAK,SAAS;gBACZ,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;gBACpB,IAAI,CAAC,cAAc,GAAG,eAAe,CAAC;gBACtC,MAAM,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;gBAClD,MAAM;YAER,KAAK,mBAAmB;gBACtB,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;gBAChE,MAAM,CAAC,IAAI,CACT,EAAE,SAAS,EAAE,IAAI,CAAC,cAAc,EAAE,EAClC,kDAAkD,CACnD,CAAC;gBACF,UAAU,CAAC,GAAG,EAAE;oBACd,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;gBACtB,CAAC,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;gBACxB,MAAM;YAER,KAAK,mBAAmB;gBACtB,MAAM,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;gBAC1D,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;gBAChB,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;gBACpB,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,OAAO,EAAE,qBAAqB,EAAE;oBAC9D,MAAM,EAAE,gBAAgB;iBACzB,CAAC,CAAC;gBACH,MAAM;QACV,CAAC;IACH,CAAC;CACF,CAAA;AAhIY,gDAAkB;6BAAlB,kBAAkB;IAD9B,IAAA,mBAAU,GAAE;IAUR,WAAA,IAAA,eAAM,EAAC,gDAAoB,CAAC,CAAA;qCAFE,0DAA0B;QAC3B,yCAAkB;GARvC,kBAAkB,CAgI9B"}

package/dist/server/modules/cloud/services/encrypted-token-store.service.d.ts

@@ -0,0 +1,15 @@
+import { BetterSQLite3Database } from 'drizzle-orm/better-sqlite3';
+import type { CloudTokens } from '../types';
+export declare class EncryptedTokenStoreService {
+    private readonly db;
+    private sqlite;
+    private encryptionKey;
+    constructor(db: BetterSQLite3Database);
+    private getEncryptionKey;
+    private getOrCreateSecret;
+    private encrypt;
+    private decrypt;
+    store(tokens: CloudTokens): void;
+    retrieve(): CloudTokens | null;
+    clear(): void;
+}

package/dist/server/modules/cloud/services/encrypted-token-store.service.js

@@ -0,0 +1,131 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EncryptedTokenStoreService = void 0;
+const common_1 = require("@nestjs/common");
+const crypto_1 = require("crypto");
+const fs_1 = require("fs");
+const path_1 = require("path");
+const os_1 = require("os");
+const better_sqlite3_1 = require("drizzle-orm/better-sqlite3");
+const db_provider_1 = require("../../storage/db/db.provider");
+const sqlite_raw_1 = require("../../storage/db/sqlite-raw");
+const logger_1 = require("../../../common/logging/logger");
+const logger = (0, logger_1.createLogger)('EncryptedTokenStore');
+const APP_SALT = Buffer.from('devchain-cloud-token-store-v1-salt', 'utf8');
+const SETTINGS_KEY = 'cloud.tokens.encrypted';
+const SECRET_DIR = (0, path_1.join)((0, os_1.homedir)(), '.devchain', 'cloud');
+const SECRET_FILE = (0, path_1.join)(SECRET_DIR, 'secret.key');
+const SECRET_LENGTH = 32;
+const KEY_LENGTH = 32;
+const IV_LENGTH = 12;
+const AUTH_TAG_LENGTH = 16;
+const SCRYPT_COST = 16384;
+const SCRYPT_BLOCK_SIZE = 8;
+const SCRYPT_PARALLELIZATION = 1;
+let EncryptedTokenStoreService = class EncryptedTokenStoreService {
+    constructor(db) {
+        this.db = db;
+        this.encryptionKey = null;
+        this.sqlite = (0, sqlite_raw_1.getRawSqliteClient)(this.db);
+    }
+    getEncryptionKey() {
+        if (this.encryptionKey) {
+            return this.encryptionKey;
+        }
+        const secret = this.getOrCreateSecret();
+        const machineComponent = Buffer.from(`${(0, os_1.hostname)()}:${(0, os_1.userInfo)().username}`, 'utf8');
+        const password = Buffer.concat([secret, machineComponent]);
+        this.encryptionKey = (0, crypto_1.scryptSync)(password, APP_SALT, KEY_LENGTH, {
+            N: SCRYPT_COST,
+            r: SCRYPT_BLOCK_SIZE,
+            p: SCRYPT_PARALLELIZATION,
+        });
+        return this.encryptionKey;
+    }
+    getOrCreateSecret() {
+        if ((0, fs_1.existsSync)(SECRET_FILE)) {
+            return (0, fs_1.readFileSync)(SECRET_FILE);
+        }
+        if (!(0, fs_1.existsSync)(SECRET_DIR)) {
+            (0, fs_1.mkdirSync)(SECRET_DIR, { recursive: true, mode: 0o700 });
+        }
+        const secret = (0, crypto_1.randomBytes)(SECRET_LENGTH);
+        (0, fs_1.writeFileSync)(SECRET_FILE, secret, { mode: 0o600 });
+        (0, fs_1.chmodSync)(SECRET_FILE, 0o600);
+        logger.info('Created new cloud token encryption secret');
+        return secret;
+    }
+    encrypt(plaintext) {
+        const key = this.getEncryptionKey();
+        const iv = (0, crypto_1.randomBytes)(IV_LENGTH);
+        const cipher = (0, crypto_1.createCipheriv)('aes-256-gcm', key, iv, {
+            authTagLength: AUTH_TAG_LENGTH,
+        });
+        const encrypted = Buffer.concat([cipher.update(plaintext, 'utf8'), cipher.final()]);
+        const authTag = cipher.getAuthTag();
+        return Buffer.concat([iv, authTag, encrypted]).toString('base64');
+    }
+    decrypt(ciphertext) {
+        const key = this.getEncryptionKey();
+        const data = Buffer.from(ciphertext, 'base64');
+        const iv = data.subarray(0, IV_LENGTH);
+        const authTag = data.subarray(IV_LENGTH, IV_LENGTH + AUTH_TAG_LENGTH);
+        const encrypted = data.subarray(IV_LENGTH + AUTH_TAG_LENGTH);
+        const decipher = (0, crypto_1.createDecipheriv)('aes-256-gcm', key, iv, {
+            authTagLength: AUTH_TAG_LENGTH,
+        });
+        decipher.setAuthTag(authTag);
+        return decipher.update(encrypted) + decipher.final('utf8');
+    }
+    store(tokens) {
+        const plaintext = JSON.stringify(tokens);
+        const encrypted = this.encrypt(plaintext);
+        const now = new Date().toISOString();
+        this.sqlite
+            .prepare(`INSERT INTO settings (id, key, value, created_at, updated_at)
+         VALUES (lower(hex(randomblob(16))), ?, ?, ?, ?)
+         ON CONFLICT(key) DO UPDATE SET value = excluded.value, updated_at = excluded.updated_at`)
+            .run(SETTINGS_KEY, encrypted, now, now);
+        logger.info({ userId: tokens.userId }, 'Cloud tokens stored');
+    }
+    retrieve() {
+        const row = this.sqlite
+            .prepare('SELECT value FROM settings WHERE key = ?')
+            .get(SETTINGS_KEY);
+        if (!row) {
+            return null;
+        }
+        try {
+            const plaintext = this.decrypt(row.value);
+            return JSON.parse(plaintext);
+        }
+        catch (error) {
+            logger.warn({ error }, 'Failed to decrypt cloud tokens — clearing stale data');
+            this.clear();
+            return null;
+        }
+    }
+    clear() {
+        this.sqlite.prepare('DELETE FROM settings WHERE key = ?').run(SETTINGS_KEY);
+        logger.info('Cloud tokens cleared');
+    }
+};
+exports.EncryptedTokenStoreService = EncryptedTokenStoreService;
+exports.EncryptedTokenStoreService = EncryptedTokenStoreService = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, common_1.Inject)(db_provider_1.DB_CONNECTION)),
+    __metadata("design:paramtypes", [better_sqlite3_1.BetterSQLite3Database])
+], EncryptedTokenStoreService);
+//# sourceMappingURL=encrypted-token-store.service.js.map

package/dist/server/modules/cloud/services/encrypted-token-store.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"encrypted-token-store.service.js","sourceRoot":"","sources":["../../../../src/modules/cloud/services/encrypted-token-store.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAoD;AACpD,mCAAmF;AACnF,2BAAmF;AACnF,+BAA4B;AAC5B,2BAAiD;AACjD,+DAAmE;AAEnE,8DAA6D;AAC7D,4DAAiE;AACjE,2DAA8D;AAG9D,MAAM,MAAM,GAAG,IAAA,qBAAY,EAAC,qBAAqB,CAAC,CAAC;AAInD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,oCAAoC,EAAE,MAAM,CAAC,CAAC;AAC3E,MAAM,YAAY,GAAG,wBAAwB,CAAC;AAC9C,MAAM,UAAU,GAAG,IAAA,WAAI,EAAC,IAAA,YAAO,GAAE,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;AACzD,MAAM,WAAW,GAAG,IAAA,WAAI,EAAC,UAAU,EAAE,YAAY,CAAC,CAAC;AACnD,MAAM,aAAa,GAAG,EAAE,CAAC;AACzB,MAAM,UAAU,GAAG,EAAE,CAAC;AACtB,MAAM,SAAS,GAAG,EAAE,CAAC;AACrB,MAAM,eAAe,GAAG,EAAE,CAAC;AAC3B,MAAM,WAAW,GAAG,KAAK,CAAC;AAC1B,MAAM,iBAAiB,GAAG,CAAC,CAAC;AAC5B,MAAM,sBAAsB,GAAG,CAAC,CAAC;AAG1B,IAAM,0BAA0B,GAAhC,MAAM,0BAA0B;IAIrC,YAAmC,EAA0C;QAAzB,OAAE,GAAF,EAAE,CAAuB;QAFrE,kBAAa,GAAkB,IAAI,CAAC;QAG1C,IAAI,CAAC,MAAM,GAAG,IAAA,+BAAkB,EAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC5C,CAAC;IAEO,gBAAgB;QACtB,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,OAAO,IAAI,CAAC,aAAa,CAAC;QAC5B,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACxC,MAAM,gBAAgB,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,IAAA,aAAQ,GAAE,IAAI,IAAA,aAAQ,GAAE,CAAC,QAAQ,EAAE,EAAE,MAAM,CAAC,CAAC;QACrF,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC;QAE3D,IAAI,CAAC,aAAa,GAAG,IAAA,mBAAU,EAAC,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE;YAC9D,CAAC,EAAE,WAAW;YACd,CAAC,EAAE,iBAAiB;YACpB,CAAC,EAAE,sBAAsB;SAC1B,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IAEO,iBAAiB;QACvB,IAAI,IAAA,eAAU,EAAC,WAAW,CAAC,EAAE,CAAC;YAC5B,OAAO,IAAA,iBAAY,EAAC,WAAW,CAAC,CAAC;QACnC,CAAC;QAED,IAAI,CAAC,IAAA,eAAU,EAAC,UAAU,CAAC,EAAE,CAAC;YAC5B,IAAA,cAAS,EAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1D,CAAC;QAED,MAAM,MAAM,GAAG,IAAA,oBAAW,EAAC,aAAa,CAAC,CAAC;QAC1C,IAAA,kBAAa,EAAC,WAAW,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACpD,IAAA,cAAS,EAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;QACzD,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,OAAO,CAAC,SAAiB;QAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACpC,MAAM,EAAE,GAAG,IAAA,oBAAW,EAAC,SAAS,CAAC,CAAC;QAClC,MAAM,MAAM,GAAG,IAAA,uBAAc,EAAC,aAAa,EAAE,GAAG,EAAE,EAAE,EAAE;YACpD,aAAa,EAAE,eAAe;SAC/B,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QACpF,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QACpC,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACpE,CAAC;IAEO,OAAO,CAAC,UAAkB;QAChC,MAAM,GAAG,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAC/C,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QACvC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,SAAS,GAAG,eAAe,CAAC,CAAC;QACtE,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,GAAG,eAAe,CAAC,CAAC;QAE7D,MAAM,QAAQ,GAAG,IAAA,yBAAgB,EAAC,aAAa,EAAE,GAAG,EAAE,EAAE,EAAE;YACxD,aAAa,EAAE,eAAe;SAC/B,CAAC,CAAC;QACH,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAC7B,OAAO,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7D,CAAC;IAED,KAAK,CAAC,MAAmB;QACvB,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACzC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC1C,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAErC,IAAI,CAAC,MAAM;aACR,OAAO,CACN;;iGAEyF,CAC1F;aACA,GAAG,CAAC,YAAY,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;QAE1C,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,qBAAqB,CAAC,CAAC;IAChE,CAAC;IAED,QAAQ;QACN,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM;aACpB,OAAO,CAAC,0CAA0C,CAAC;aACnD,GAAG,CAAC,YAAY,CAAkC,CAAC;QAEtD,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAC1C,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,CAAgB,CAAC;QAC9C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,sDAAsD,CAAC,CAAC;YAC/E,IAAI,CAAC,KAAK,EAAE,CAAC;YACb,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK;QACH,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,oCAAoC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC5E,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACtC,CAAC;CACF,CAAA;AA1GY,gEAA0B;qCAA1B,0BAA0B;IADtC,IAAA,mBAAU,GAAE;IAKE,WAAA,IAAA,eAAM,EAAC,2BAAa,CAAC,CAAA;qCAAsB,sCAAqB;GAJlE,0BAA0B,CA0GtC"}

package/dist/server/modules/cloud/services/event-mapper.service.d.ts

@@ -0,0 +1,42 @@
+import type { EpicCreatedEventPayload } from '../../events/catalog/epic.created';
+import type { EpicDeletedEventPayload } from '../../events/catalog/epic.deleted';
+import type { EpicUpdatedEventPayload } from '../../events/catalog/epic.updated';
+import type { EpicCommentCreatedEventPayload } from '../../events/catalog/epic.comment.created';
+import type { SessionCrashedEventPayload } from '../../events/catalog/session.crashed';
+import type { SessionStoppedEventPayload } from '../../events/catalog/session.stopped';
+export interface IngestPayload {
+    source: 'workflow';
+    sourceEventId: string;
+    sourceEventType: string;
+    forwardingUserId: string;
+    recipientMode: 'self';
+    recipientHints: never[];
+    occurredAt: string;
+    payload: Record<string, unknown>;
+    projectId: string | null;
+    orgId: null;
+}
+type AllowlistedEvent = {
+    name: 'epic.created';
+    payload: EpicCreatedEventPayload;
+} | {
+    name: 'epic.updated';
+    payload: EpicUpdatedEventPayload;
+} | {
+    name: 'epic.deleted';
+    payload: EpicDeletedEventPayload;
+} | {
+    name: 'epic.comment.created';
+    payload: EpicCommentCreatedEventPayload;
+} | {
+    name: 'session.crashed';
+    payload: SessionCrashedEventPayload;
+} | {
+    name: 'session.stopped';
+    payload: SessionStoppedEventPayload;
+};
+export declare class EventMapperService {
+    mapToIngestPayload(event: AllowlistedEvent, sourceEventId: string, forwardingUserId: string): IngestPayload;
+    private extractProjectId;
+}
+export {};

package/dist/server/modules/cloud/services/event-mapper.service.js

@@ -0,0 +1,44 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EventMapperService = void 0;
+const common_1 = require("@nestjs/common");
+let EventMapperService = class EventMapperService {
+    mapToIngestPayload(event, sourceEventId, forwardingUserId) {
+        const projectId = this.extractProjectId(event);
+        return {
+            source: 'workflow',
+            sourceEventId,
+            sourceEventType: event.name,
+            forwardingUserId,
+            recipientMode: 'self',
+            recipientHints: [],
+            occurredAt: new Date().toISOString(),
+            payload: event.payload,
+            projectId,
+            orgId: null,
+        };
+    }
+    extractProjectId(event) {
+        switch (event.name) {
+            case 'epic.created':
+            case 'epic.updated':
+            case 'epic.deleted':
+            case 'epic.comment.created':
+                return event.payload.projectId;
+            case 'session.crashed':
+            case 'session.stopped':
+                return null;
+        }
+    }
+};
+exports.EventMapperService = EventMapperService;
+exports.EventMapperService = EventMapperService = __decorate([
+    (0, common_1.Injectable)()
+], EventMapperService);
+//# sourceMappingURL=event-mapper.service.js.map

package/dist/server/modules/cloud/services/event-mapper.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-mapper.service.js","sourceRoot":"","sources":["../../../../src/modules/cloud/services/event-mapper.service.ts"],"names":[],"mappings":";;;;;;;;;AAAA,2CAA4C;AA8BrC,IAAM,kBAAkB,GAAxB,MAAM,kBAAkB;IAC7B,kBAAkB,CAChB,KAAuB,EACvB,aAAqB,EACrB,gBAAwB;QAExB,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAE/C,OAAO;YACL,MAAM,EAAE,UAAU;YAClB,aAAa;YACb,eAAe,EAAE,KAAK,CAAC,IAAI;YAC3B,gBAAgB;YAChB,aAAa,EAAE,MAAM;YACrB,cAAc,EAAE,EAAE;YAClB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACpC,OAAO,EAAE,KAAK,CAAC,OAA6C;YAC5D,SAAS;YACT,KAAK,EAAE,IAAI;SACZ,CAAC;IACJ,CAAC;IAEO,gBAAgB,CAAC,KAAuB;QAC9C,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;YACnB,KAAK,cAAc,CAAC;YACpB,KAAK,cAAc,CAAC;YACpB,KAAK,cAAc,CAAC;YACpB,KAAK,sBAAsB;gBACzB,OAAO,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;YACjC,KAAK,iBAAiB,CAAC;YACvB,KAAK,iBAAiB;gBACpB,OAAO,IAAI,CAAC;QAChB,CAAC;IACH,CAAC;CACF,CAAA;AAlCY,gDAAkB;6BAAlB,kBAAkB;IAD9B,IAAA,mBAAU,GAAE;GACA,kBAAkB,CAkC9B"}

package/dist/server/modules/cloud/services/project-activity-reporter.service.d.ts

@@ -0,0 +1,21 @@
+import { BetterSQLite3Database } from 'drizzle-orm/better-sqlite3';
+import type { SessionActivityChangedEventPayload } from '../../events/catalog/session.activity.changed';
+import { CloudSessionManagerService } from './cloud-session-manager.service';
+import { RefreshGateService } from './refresh-gate.service';
+interface TouchProjectOptions {
+    respectThrottle?: boolean;
+}
+export declare class ProjectActivityReporterService {
+    private readonly cloudSession;
+    private readonly refreshGate;
+    private readonly sqlite;
+    private readonly lastTouchedByProjectId;
+    constructor(db: BetterSQLite3Database, cloudSession: CloudSessionManagerService, refreshGate: RefreshGateService);
+    onSessionActivityChanged(payload: SessionActivityChangedEventPayload): Promise<void>;
+    touchProject(projectId: string, options?: TouchProjectOptions): Promise<null>;
+    private resolveSessionProjectId;
+    private isThrottled;
+    private forwardUpstream;
+    private callUpstream;
+}
+export {};

package/dist/server/modules/cloud/services/project-activity-reporter.service.js

@@ -0,0 +1,138 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ProjectActivityReporterService = void 0;
+const common_1 = require("@nestjs/common");
+const event_emitter_1 = require("@nestjs/event-emitter");
+const better_sqlite3_1 = require("drizzle-orm/better-sqlite3");
+const logger_1 = require("../../../common/logging/logger");
+const db_provider_1 = require("../../storage/db/db.provider");
+const sqlite_raw_1 = require("../../storage/db/sqlite-raw");
+const cloud_session_manager_service_1 = require("./cloud-session-manager.service");
+const refresh_gate_service_1 = require("./refresh-gate.service");
+const PROJECT_ACTIVITY_THROTTLE_MS = 60_000;
+const logger = (0, logger_1.createLogger)('ProjectActivityReporter');
+let ProjectActivityReporterService = class ProjectActivityReporterService {
+    constructor(db, cloudSession, refreshGate) {
+        this.cloudSession = cloudSession;
+        this.refreshGate = refreshGate;
+        this.lastTouchedByProjectId = new Map();
+        this.sqlite = (0, sqlite_raw_1.getRawSqliteClient)(db);
+    }
+    async onSessionActivityChanged(payload) {
+        if (payload.state !== 'busy')
+            return;
+        const projectId = this.resolveSessionProjectId(payload.sessionId);
+        if (!projectId)
+            return;
+        try {
+            await this.touchProject(projectId);
+        }
+        catch (error) {
+            logger.debug({ error, projectId, sessionId: payload.sessionId }, 'Activity touch failed');
+        }
+    }
+    async touchProject(projectId, options = {}) {
+        const normalizedProjectId = projectId.trim();
+        if (!normalizedProjectId) {
+            throw new common_1.HttpException('Project id is required', common_1.HttpStatus.BAD_REQUEST);
+        }
+        const respectThrottle = options.respectThrottle ?? true;
+        if (respectThrottle && this.isThrottled(normalizedProjectId)) {
+            return null;
+        }
+        if (respectThrottle) {
+            this.lastTouchedByProjectId.set(normalizedProjectId, Date.now());
+        }
+        return this.forwardUpstream('POST', `/api/v1/activity/projects/${encodeURIComponent(normalizedProjectId)}/touch`);
+    }
+    resolveSessionProjectId(sessionId) {
+        const row = this.sqlite
+            .prepare(`SELECT agents.project_id AS projectId
+         FROM sessions
+         JOIN agents ON agents.id = sessions.agent_id
+         WHERE sessions.id = ?`)
+            .get(sessionId);
+        return row?.projectId ?? null;
+    }
+    isThrottled(projectId) {
+        const lastTouchedAt = this.lastTouchedByProjectId.get(projectId);
+        return lastTouchedAt !== undefined && Date.now() - lastTouchedAt < PROJECT_ACTIVITY_THROTTLE_MS;
+    }
+    async forwardUpstream(method, path, body) {
+        const status = this.cloudSession.getStatus();
+        if (!status.connected)
+            throw new common_1.UnauthorizedException('Cloud is not connected');
+        return this.callUpstream(method, path, body, this.cloudSession.getAccessToken());
+    }
+    async callUpstream(method, path, body, token) {
+        if (!token)
+            throw new common_1.UnauthorizedException('No access token');
+        const baseUrl = process.env.NOTIFICATIONS_SERVICE_URL ?? 'http://localhost:3003';
+        const hasBody = body !== undefined;
+        const headers = {
+            Authorization: `Bearer ${token}`,
+            ...(hasBody ? { 'Content-Type': 'application/json' } : {}),
+        };
+        const init = {
+            method,
+            headers,
+            ...(hasBody ? { body: JSON.stringify(body) } : {}),
+        };
+        const res = await fetch(`${baseUrl}${path}`, init);
+        if (res.status === 401) {
+            const outcome = await this.refreshGate.attemptRefresh();
+            if (outcome === 'success') {
+                const refreshed = this.cloudSession.getAccessToken();
+                if (!refreshed)
+                    throw new common_1.UnauthorizedException('Refresh succeeded but no token');
+                const retryHeaders = {
+                    Authorization: `Bearer ${refreshed}`,
+                    ...(hasBody ? { 'Content-Type': 'application/json' } : {}),
+                };
+                const retry = await fetch(`${baseUrl}${path}`, { ...init, headers: retryHeaders });
+                if (!retry.ok)
+                    throw new common_1.HttpException(await safeText(retry), retry.status);
+                return null;
+            }
+            throw new common_1.UnauthorizedException('Cloud session expired');
+        }
+        if (!res.ok)
+            throw new common_1.HttpException(await safeText(res), res.status);
+        return null;
+    }
+};
+exports.ProjectActivityReporterService = ProjectActivityReporterService;
+__decorate([
+    (0, event_emitter_1.OnEvent)('session.activity.changed', { async: true }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], ProjectActivityReporterService.prototype, "onSessionActivityChanged", null);
+exports.ProjectActivityReporterService = ProjectActivityReporterService = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, common_1.Inject)(db_provider_1.DB_CONNECTION)),
+    __metadata("design:paramtypes", [better_sqlite3_1.BetterSQLite3Database,
+        cloud_session_manager_service_1.CloudSessionManagerService,
+        refresh_gate_service_1.RefreshGateService])
+], ProjectActivityReporterService);
+async function safeText(res) {
+    try {
+        return await res.text();
+    }
+    catch {
+        return '';
+    }
+}
+//# sourceMappingURL=project-activity-reporter.service.js.map

package/dist/server/modules/cloud/services/project-activity-reporter.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-activity-reporter.service.js","sourceRoot":"","sources":["../../../../src/modules/cloud/services/project-activity-reporter.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAMwB;AACxB,yDAAgD;AAChD,+DAAmE;AACnE,2DAA8D;AAC9D,8DAA6D;AAC7D,4DAAiE;AAEjE,mFAA6E;AAC7E,iEAA4D;AAE5D,MAAM,4BAA4B,GAAG,MAAM,CAAC;AAC5C,MAAM,MAAM,GAAG,IAAA,qBAAY,EAAC,yBAAyB,CAAC,CAAC;AAOhD,IAAM,8BAA8B,GAApC,MAAM,8BAA8B;IAIzC,YACyB,EAAyB,EAC/B,YAAwC,EACxC,WAA+B;QAD/B,iBAAY,GAAZ,YAAY,CAA4B;QACxC,gBAAW,GAAX,WAAW,CAAoB;QALjC,2BAAsB,GAAG,IAAI,GAAG,EAAkB,CAAC;QAOlE,IAAI,CAAC,MAAM,GAAG,IAAA,+BAAkB,EAAC,EAAE,CAAC,CAAC;IACvC,CAAC;IAGK,AAAN,KAAK,CAAC,wBAAwB,CAAC,OAA2C;QACxE,IAAI,OAAO,CAAC,KAAK,KAAK,MAAM;YAAE,OAAO;QAErC,MAAM,SAAS,GAAG,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAClE,IAAI,CAAC,SAAS;YAAE,OAAO;QAEvB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,EAAE,uBAAuB,CAAC,CAAC;QAC5F,CAAC;IACH,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,SAAiB,EAAE,UAA+B,EAAE;QACrE,MAAM,mBAAmB,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC;QAC7C,IAAI,CAAC,mBAAmB,EAAE,CAAC;YACzB,MAAM,IAAI,sBAAa,CAAC,wBAAwB,EAAE,mBAAU,CAAC,WAAW,CAAC,CAAC;QAC5E,CAAC;QAED,MAAM,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,IAAI,CAAC;QACxD,IAAI,eAAe,IAAI,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,EAAE,CAAC;YAC7D,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,eAAe,EAAE,CAAC;YACpB,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,mBAAmB,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QACnE,CAAC;QAED,OAAO,IAAI,CAAC,eAAe,CACzB,MAAM,EACN,6BAA6B,kBAAkB,CAAC,mBAAmB,CAAC,QAAQ,CAC7E,CAAC;IACJ,CAAC;IAEO,uBAAuB,CAAC,SAAiB;QAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM;aACpB,OAAO,CACN;;;+BAGuB,CACxB;aACA,GAAG,CAAC,SAAS,CAA6C,CAAC;QAE9D,OAAO,GAAG,EAAE,SAAS,IAAI,IAAI,CAAC;IAChC,CAAC;IAEO,WAAW,CAAC,SAAiB;QACnC,MAAM,aAAa,GAAG,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACjE,OAAO,aAAa,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,aAAa,GAAG,4BAA4B,CAAC;IAClG,CAAC;IAEO,KAAK,CAAC,eAAe,CAAC,MAAc,EAAE,IAAY,EAAE,IAAc;QACxE,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,CAAC;QAC7C,IAAI,CAAC,MAAM,CAAC,SAAS;YAAE,MAAM,IAAI,8BAAqB,CAAC,wBAAwB,CAAC,CAAC;QACjF,OAAO,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,YAAY,CAAC,cAAc,EAAE,CAAC,CAAC;IACnF,CAAC;IAEO,KAAK,CAAC,YAAY,CACxB,MAAc,EACd,IAAY,EACZ,IAAa,EACb,KAAoB;QAEpB,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,8BAAqB,CAAC,iBAAiB,CAAC,CAAC;QAC/D,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,IAAI,uBAAuB,CAAC;QACjF,MAAM,OAAO,GAAG,IAAI,KAAK,SAAS,CAAC;QACnC,MAAM,OAAO,GAA2B;YACtC,aAAa,EAAE,UAAU,KAAK,EAAE;YAChC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC3D,CAAC;QACF,MAAM,IAAI,GAAgB;YACxB,MAAM;YACN,OAAO;YACP,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACnD,CAAC;QACF,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,GAAG,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;QAEnD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACvB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,cAAc,EAAE,CAAC;YACxD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,cAAc,EAAE,CAAC;gBACrD,IAAI,CAAC,SAAS;oBAAE,MAAM,IAAI,8BAAqB,CAAC,gCAAgC,CAAC,CAAC;gBAClF,MAAM,YAAY,GAA2B;oBAC3C,aAAa,EAAE,UAAU,SAAS,EAAE;oBACpC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC3D,CAAC;gBACF,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,GAAG,IAAI,EAAE,EAAE,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC;gBACnF,IAAI,CAAC,KAAK,CAAC,EAAE;oBAAE,MAAM,IAAI,sBAAa,CAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;gBAC5E,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,IAAI,8BAAqB,CAAC,uBAAuB,CAAC,CAAC;QAC3D,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,IAAI,sBAAa,CAAC,MAAM,QAAQ,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QACtE,OAAO,IAAI,CAAC;IACd,CAAC;CACF,CAAA;AA9GY,wEAA8B;AAanC;IADL,IAAA,uBAAO,EAAC,0BAA0B,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;;;;8EAYpD;yCAxBU,8BAA8B;IAD1C,IAAA,mBAAU,GAAE;IAMR,WAAA,IAAA,eAAM,EAAC,2BAAa,CAAC,CAAA;qCAAK,sCAAqB;QACjB,0DAA0B;QAC3B,yCAAkB;GAPvC,8BAA8B,CA8G1C;AAED,KAAK,UAAU,QAAQ,CAAC,GAAa;IACnC,IAAI,CAAC;QACH,OAAO,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/server/modules/cloud/services/project-egress-config.service.d.ts

@@ -0,0 +1,13 @@
+import { BetterSQLite3Database } from 'drizzle-orm/better-sqlite3';
+export declare class ProjectEgressConfigService {
+    private readonly db;
+    private sqlite;
+    private cache;
+    constructor(db: BetterSQLite3Database);
+    isEnabled(projectId: string): boolean;
+    hasAnyEnabled(): boolean;
+    setEnabled(projectId: string, enabled: boolean): void;
+    getAll(): Record<string, boolean>;
+    private getMap;
+    private persist;
+}