devchain-cli 0.12.3 → 0.13.0

package/dist/server/modules/cloud/services/project-egress-config.service.js

@@ -0,0 +1,87 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ProjectEgressConfigService = void 0;
+const common_1 = require("@nestjs/common");
+const better_sqlite3_1 = require("drizzle-orm/better-sqlite3");
+const db_provider_1 = require("../../storage/db/db.provider");
+const sqlite_raw_1 = require("../../storage/db/sqlite-raw");
+const logger_1 = require("../../../common/logging/logger");
+const logger = (0, logger_1.createLogger)('ProjectEgressConfig');
+const SETTINGS_KEY = 'cloud.egress.enabledProjects';
+let ProjectEgressConfigService = class ProjectEgressConfigService {
+    constructor(db) {
+        this.db = db;
+        this.cache = null;
+        this.sqlite = (0, sqlite_raw_1.getRawSqliteClient)(this.db);
+    }
+    isEnabled(projectId) {
+        return this.getMap().get(projectId) ?? false;
+    }
+    hasAnyEnabled() {
+        for (const enabled of this.getMap().values()) {
+            if (enabled)
+                return true;
+        }
+        return false;
+    }
+    setEnabled(projectId, enabled) {
+        const map = this.getMap();
+        map.set(projectId, enabled);
+        this.persist(map);
+        logger.info({ projectId, enabled }, 'Project egress config updated');
+    }
+    getAll() {
+        return Object.fromEntries(this.getMap());
+    }
+    getMap() {
+        if (this.cache)
+            return this.cache;
+        const row = this.sqlite
+            .prepare('SELECT value FROM settings WHERE key = ?')
+            .get(SETTINGS_KEY);
+        const map = new Map();
+        if (row) {
+            try {
+                const parsed = JSON.parse(row.value);
+                for (const [k, v] of Object.entries(parsed)) {
+                    if (typeof v === 'boolean')
+                        map.set(k, v);
+                }
+            }
+            catch {
+                logger.warn('Failed to parse egress config — resetting');
+            }
+        }
+        this.cache = map;
+        return map;
+    }
+    persist(map) {
+        const now = new Date().toISOString();
+        const value = JSON.stringify(Object.fromEntries(map));
+        this.sqlite
+            .prepare(`INSERT INTO settings (id, key, value, created_at, updated_at)
+         VALUES (lower(hex(randomblob(16))), ?, ?, ?, ?)
+         ON CONFLICT(key) DO UPDATE SET value = excluded.value, updated_at = excluded.updated_at`)
+            .run(SETTINGS_KEY, value, now, now);
+        this.cache = map;
+    }
+};
+exports.ProjectEgressConfigService = ProjectEgressConfigService;
+exports.ProjectEgressConfigService = ProjectEgressConfigService = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, common_1.Inject)(db_provider_1.DB_CONNECTION)),
+    __metadata("design:paramtypes", [better_sqlite3_1.BetterSQLite3Database])
+], ProjectEgressConfigService);
+//# sourceMappingURL=project-egress-config.service.js.map

package/dist/server/modules/cloud/services/project-egress-config.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-egress-config.service.js","sourceRoot":"","sources":["../../../../src/modules/cloud/services/project-egress-config.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAoD;AACpD,+DAAmE;AAEnE,8DAA6D;AAC7D,4DAAiE;AACjE,2DAA8D;AAE9D,MAAM,MAAM,GAAG,IAAA,qBAAY,EAAC,qBAAqB,CAAC,CAAC;AACnD,MAAM,YAAY,GAAG,8BAA8B,CAAC;AAG7C,IAAM,0BAA0B,GAAhC,MAAM,0BAA0B;IAIrC,YAAmC,EAA0C;QAAzB,OAAE,GAAF,EAAE,CAAuB;QAFrE,UAAK,GAAgC,IAAI,CAAC;QAGhD,IAAI,CAAC,MAAM,GAAG,IAAA,+BAAkB,EAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC5C,CAAC;IAED,SAAS,CAAC,SAAiB;QACzB,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC;IAC/C,CAAC;IAED,aAAa;QACX,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC;YAC7C,IAAI,OAAO;gBAAE,OAAO,IAAI,CAAC;QAC3B,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,UAAU,CAAC,SAAiB,EAAE,OAAgB;QAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QAC1B,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAC5B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAClB,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,+BAA+B,CAAC,CAAC;IACvE,CAAC;IAED,MAAM;QACJ,OAAO,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3C,CAAC;IAEO,MAAM;QACZ,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC;QAElC,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM;aACpB,OAAO,CAAC,0CAA0C,CAAC;aACnD,GAAG,CAAC,YAAY,CAAkC,CAAC;QAEtD,MAAM,GAAG,GAAG,IAAI,GAAG,EAAmB,CAAC;QACvC,IAAI,GAAG,EAAE,CAAC;YACR,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAA4B,CAAC;gBAChE,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC5C,IAAI,OAAO,CAAC,KAAK,SAAS;wBAAE,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBAC5C,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;YAC3D,CAAC;QACH,CAAC;QAED,IAAI,CAAC,KAAK,GAAG,GAAG,CAAC;QACjB,OAAO,GAAG,CAAC;IACb,CAAC;IAEO,OAAO,CAAC,GAAyB;QACvC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;QAEtD,IAAI,CAAC,MAAM;aACR,OAAO,CACN;;iGAEyF,CAC1F;aACA,GAAG,CAAC,YAAY,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;QAEtC,IAAI,CAAC,KAAK,GAAG,GAAG,CAAC;IACnB,CAAC;CACF,CAAA;AAnEY,gEAA0B;qCAA1B,0BAA0B;IADtC,IAAA,mBAAU,GAAE;IAKE,WAAA,IAAA,eAAM,EAAC,2BAAa,CAAC,CAAA;qCAAsB,sCAAqB;GAJlE,0BAA0B,CAmEtC"}

package/dist/server/modules/cloud/services/refresh-gate.service.d.ts

@@ -0,0 +1,9 @@
+import { CloudSessionManagerService } from './cloud-session-manager.service';
+export type RefreshOutcome = 'success' | 'transient_failure' | 'permanent_failure';
+export declare class RefreshGateService {
+    private readonly cloudSession;
+    private refreshPromise;
+    constructor(cloudSession: CloudSessionManagerService);
+    attemptRefresh(): Promise<RefreshOutcome>;
+    private doRefresh;
+}

package/dist/server/modules/cloud/services/refresh-gate.service.js

@@ -0,0 +1,63 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RefreshGateService = void 0;
+const common_1 = require("@nestjs/common");
+const logger_1 = require("../../../common/logging/logger");
+const cloud_session_manager_service_1 = require("./cloud-session-manager.service");
+const logger = (0, logger_1.createLogger)('RefreshGate');
+let RefreshGateService = class RefreshGateService {
+    constructor(cloudSession) {
+        this.cloudSession = cloudSession;
+        this.refreshPromise = null;
+    }
+    async attemptRefresh() {
+        if (this.refreshPromise) {
+            logger.debug('Joining existing refresh flight');
+            return this.refreshPromise;
+        }
+        this.refreshPromise = this.doRefresh();
+        try {
+            return await this.refreshPromise;
+        }
+        finally {
+            this.refreshPromise = null;
+        }
+    }
+    async doRefresh() {
+        try {
+            await this.cloudSession.refreshAccessToken();
+            if (this.cloudSession.getAccessToken()) {
+                logger.info('Single-flight refresh succeeded');
+                return 'success';
+            }
+            logger.warn('Refresh completed but no access token — permanent failure');
+            return 'permanent_failure';
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : String(error);
+            if (message.includes('invalid') ||
+                message.includes('revoked') ||
+                message.includes('banned')) {
+                logger.warn({ error }, 'Permanent refresh failure');
+                return 'permanent_failure';
+            }
+            logger.warn({ error }, 'Transient refresh failure');
+            return 'transient_failure';
+        }
+    }
+};
+exports.RefreshGateService = RefreshGateService;
+exports.RefreshGateService = RefreshGateService = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [cloud_session_manager_service_1.CloudSessionManagerService])
+], RefreshGateService);
+//# sourceMappingURL=refresh-gate.service.js.map

package/dist/server/modules/cloud/services/refresh-gate.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"refresh-gate.service.js","sourceRoot":"","sources":["../../../../src/modules/cloud/services/refresh-gate.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA4C;AAC5C,2DAA8D;AAC9D,mFAA6E;AAE7E,MAAM,MAAM,GAAG,IAAA,qBAAY,EAAC,aAAa,CAAC,CAAC;AAKpC,IAAM,kBAAkB,GAAxB,MAAM,kBAAkB;IAG7B,YAA6B,YAAwC;QAAxC,iBAAY,GAAZ,YAAY,CAA4B;QAF7D,mBAAc,GAAmC,IAAI,CAAC;IAEU,CAAC;IAEzE,KAAK,CAAC,cAAc;QAClB,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,MAAM,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;YAChD,OAAO,IAAI,CAAC,cAAc,CAAC;QAC7B,CAAC;QAED,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QACvC,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,cAAc,CAAC;QACnC,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC7B,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,SAAS;QACrB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,YAAY,CAAC,kBAAkB,EAAE,CAAC;YAE7C,IAAI,IAAI,CAAC,YAAY,CAAC,cAAc,EAAE,EAAE,CAAC;gBACvC,MAAM,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;gBAC/C,OAAO,SAAS,CAAC;YACnB,CAAC;YAED,MAAM,CAAC,IAAI,CAAC,2DAA2D,CAAC,CAAC;YACzE,OAAO,mBAAmB,CAAC;QAC7B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAEvE,IACE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;gBAC3B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;gBAC3B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAC1B,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,2BAA2B,CAAC,CAAC;gBACpD,OAAO,mBAAmB,CAAC;YAC7B,CAAC;YAED,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,2BAA2B,CAAC,CAAC;YACpD,OAAO,mBAAmB,CAAC;QAC7B,CAAC;IACH,CAAC;CACF,CAAA;AA9CY,gDAAkB;6BAAlB,kBAAkB;IAD9B,IAAA,mBAAU,GAAE;qCAIgC,0DAA0B;GAH1D,kBAAkB,CA8C9B"}

package/dist/server/modules/cloud/types/index.d.ts

@@ -0,0 +1,14 @@
+export interface CloudTokens {
+    accessToken: string;
+    refreshToken: string;
+    userId: string;
+    email?: string;
+    expiresAt: string;
+}
+export interface CloudConnectionStatus {
+    connected: boolean;
+    userId?: string;
+    email?: string;
+    expiresAt?: string;
+    identityServiceUrl: string;
+}

package/dist/server/modules/cloud/types/index.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=index.js.map

package/dist/server/modules/cloud/types/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/modules/cloud/types/index.ts"],"names":[],"mappings":""}

package/dist/server/modules/cloud-tunnel/cloud-tunnel.module.d.ts

@@ -0,0 +1,2 @@
+export declare class CloudTunnelModule {
+}

package/dist/server/modules/cloud-tunnel/cloud-tunnel.module.js

@@ -0,0 +1,25 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CloudTunnelModule = void 0;
+const common_1 = require("@nestjs/common");
+const cloud_module_1 = require("../cloud/cloud.module");
+const storage_module_1 = require("../storage/storage.module");
+const tunnel_keypair_service_1 = require("./services/tunnel-keypair.service");
+const tunnel_handler_service_1 = require("./services/tunnel-handler.service");
+const tunnel_client_service_1 = require("./services/tunnel-client.service");
+let CloudTunnelModule = class CloudTunnelModule {
+};
+exports.CloudTunnelModule = CloudTunnelModule;
+exports.CloudTunnelModule = CloudTunnelModule = __decorate([
+    (0, common_1.Module)({
+        imports: [cloud_module_1.CloudModule, storage_module_1.StorageModule],
+        providers: [tunnel_keypair_service_1.TunnelKeypairService, tunnel_handler_service_1.TunnelHandlerService, tunnel_client_service_1.TunnelClientService],
+    })
+], CloudTunnelModule);
+//# sourceMappingURL=cloud-tunnel.module.js.map

package/dist/server/modules/cloud-tunnel/cloud-tunnel.module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud-tunnel.module.js","sourceRoot":"","sources":["../../../src/modules/cloud-tunnel/cloud-tunnel.module.ts"],"names":[],"mappings":";;;;;;;;;AAAA,2CAAwC;AACxC,wDAAoD;AACpD,8DAA0D;AAC1D,8EAAyE;AACzE,8EAAyE;AACzE,4EAAuE;AAMhE,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;CAAG,CAAA;AAApB,8CAAiB;4BAAjB,iBAAiB;IAJ7B,IAAA,eAAM,EAAC;QACN,OAAO,EAAE,CAAC,0BAAW,EAAE,8BAAa,CAAC;QACrC,SAAS,EAAE,CAAC,6CAAoB,EAAE,6CAAoB,EAAE,2CAAmB,CAAC;KAC7E,CAAC;GACW,iBAAiB,CAAG"}

package/dist/server/modules/cloud-tunnel/services/tunnel-client.service.d.ts

@@ -0,0 +1,39 @@
+import { OnApplicationBootstrap, OnModuleDestroy, OnModuleInit } from '@nestjs/common';
+import { CloudSessionManagerService } from '../../cloud/services/cloud-session-manager.service';
+import { RefreshGateService } from '../../cloud/services/refresh-gate.service';
+import { TunnelKeypairService } from './tunnel-keypair.service';
+import { TunnelHandlerService } from './tunnel-handler.service';
+export declare class TunnelClientService implements OnModuleInit, OnApplicationBootstrap, OnModuleDestroy {
+    private readonly cloudSession;
+    private readonly refreshGate;
+    private readonly keypair;
+    private readonly handler;
+    private ws;
+    private reconnectDelay;
+    private reconnectTimer;
+    private heartbeatTimer;
+    private heartbeatPongTimer;
+    private awaitingHeartbeatPong;
+    private readyTimer;
+    private pendingChallenge;
+    private destroyed;
+    constructor(cloudSession: CloudSessionManagerService, refreshGate: RefreshGateService, keypair: TunnelKeypairService, handler: TunnelHandlerService);
+    onModuleInit(): void;
+    onApplicationBootstrap(): void;
+    onModuleDestroy(): void;
+    handleCloudConnected(): void;
+    handleCloudDisconnected(): void;
+    private connect;
+    private handleMessage;
+    private respondToChallenge;
+    private handleClose;
+    private handleSocketError;
+    private startReadyTimeout;
+    private stopReadyTimeout;
+    private scheduleReconnect;
+    private startHeartbeat;
+    private stopHeartbeat;
+    private clearHeartbeatPongTimeout;
+    private handleHeartbeatTimeout;
+    private disconnect;
+}

package/dist/server/modules/cloud-tunnel/services/tunnel-client.service.js

@@ -0,0 +1,319 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TunnelClientService = void 0;
+const common_1 = require("@nestjs/common");
+const event_emitter_1 = require("@nestjs/event-emitter");
+const ws_1 = __importDefault(require("ws"));
+const os_1 = require("os");
+const cloud_session_manager_service_1 = require("../../cloud/services/cloud-session-manager.service");
+const refresh_gate_service_1 = require("../../cloud/services/refresh-gate.service");
+const tunnel_keypair_service_1 = require("./tunnel-keypair.service");
+const tunnel_handler_service_1 = require("./tunnel-handler.service");
+const logger_1 = require("../../../common/logging/logger");
+const logger = (0, logger_1.createLogger)('TunnelClient');
+const BASE_RECONNECT_DELAY = 1000;
+const MAX_RECONNECT_DELAY = 60_000;
+const HEARTBEAT_INTERVAL_MS = 30_000;
+const HEARTBEAT_PONG_TIMEOUT_MS = 10_000;
+const READY_TIMEOUT_MS = 30_000;
+let TunnelClientService = class TunnelClientService {
+    constructor(cloudSession, refreshGate, keypair, handler) {
+        this.cloudSession = cloudSession;
+        this.refreshGate = refreshGate;
+        this.keypair = keypair;
+        this.handler = handler;
+        this.ws = null;
+        this.reconnectDelay = BASE_RECONNECT_DELAY;
+        this.reconnectTimer = null;
+        this.heartbeatTimer = null;
+        this.heartbeatPongTimer = null;
+        this.awaitingHeartbeatPong = false;
+        this.readyTimer = null;
+        this.pendingChallenge = null;
+        this.destroyed = false;
+    }
+    onModuleInit() {
+        if (this.cloudSession.getStatus().connected) {
+            this.connect();
+        }
+    }
+    onApplicationBootstrap() {
+        if (this.cloudSession.getStatus().connected) {
+            this.connect();
+        }
+    }
+    onModuleDestroy() {
+        this.destroyed = true;
+        this.disconnect();
+    }
+    handleCloudConnected() {
+        this.connect();
+    }
+    handleCloudDisconnected() {
+        this.disconnect();
+    }
+    async connect() {
+        if (this.destroyed || this.ws)
+            return;
+        const token = this.cloudSession.getAccessToken();
+        if (!token)
+            return;
+        const bridgeUrl = process.env.BRIDGE_SERVICE_URL ?? 'https://bridge.devchain.twitechlab.com';
+        const wsUrl = bridgeUrl.replace(/^http/, 'ws') + '/v1/tunnel';
+        try {
+            this.ws = new ws_1.default(wsUrl, {
+                headers: { Authorization: `Bearer ${token}` },
+            });
+            this.ws.on('message', (data) => this.handleMessage(data));
+            this.ws.on('close', (code, reason) => this.handleClose(code, reason.toString()));
+            this.ws.on('error', (err) => {
+                logger.error({ err }, 'Tunnel WS error');
+                this.handleSocketError();
+            });
+            this.startReadyTimeout(this.ws);
+        }
+        catch (err) {
+            logger.error({ err }, 'Failed to create tunnel WS connection');
+            this.scheduleReconnect();
+        }
+    }
+    async handleMessage(data) {
+        let parsed;
+        try {
+            parsed = JSON.parse(data.toString());
+        }
+        catch {
+            return;
+        }
+        if (typeof parsed !== 'object' || parsed === null)
+            return;
+        const msg = parsed;
+        if (msg.type === 'challenge') {
+            const nonce = msg.nonce;
+            const ts = msg.ts;
+            this.pendingChallenge = { nonce, ts };
+            await this.respondToChallenge(nonce, ts);
+            return;
+        }
+        if (msg.type === 'ready') {
+            this.stopReadyTimeout();
+            this.reconnectDelay = BASE_RECONNECT_DELAY;
+            const instanceId = msg.instanceId;
+            await this.keypair.setInstanceId(instanceId);
+            this.startHeartbeat();
+            logger.info({ instanceId }, 'Tunnel ready');
+            return;
+        }
+        if ('jsonrpc' in msg && msg.method) {
+            const response = await this.handler.handle(msg);
+            this.ws?.send(JSON.stringify(response));
+        }
+    }
+    async respondToChallenge(nonce, ts) {
+        try {
+            const kp = await this.keypair.getOrCreate();
+            const signPayload = nonce + (kp.instanceId ?? '') + ts;
+            const signature = await this.keypair.sign(signPayload, kp.privateKey);
+            this.ws?.send(JSON.stringify({
+                type: 'attest',
+                publicKey: kp.publicKey,
+                signature,
+                label: (0, os_1.hostname)(),
+                protocolVersion: '1',
+                instanceId: kp.instanceId,
+            }));
+        }
+        catch (err) {
+            logger.error({ err }, 'Failed to respond to challenge');
+            this.ws?.close();
+        }
+    }
+    async handleClose(code, reason) {
+        this.stopReadyTimeout();
+        this.stopHeartbeat();
+        this.ws = null;
+        this.pendingChallenge = null;
+        if (this.destroyed)
+            return;
+        logger.info({ code, reason }, 'Tunnel closed');
+        if (code === 4001) {
+            const outcome = await this.refreshGate.attemptRefresh();
+            if (outcome === 'success') {
+                this.scheduleReconnect();
+                return;
+            }
+            if (outcome === 'transient_failure') {
+                this.scheduleReconnect();
+                return;
+            }
+            logger.error({ code, reason, outcome }, 'Tunnel auth permanently failed');
+            return;
+        }
+        if (code === 4002) {
+            logger.warn('Instance revoked; not reconnecting');
+            return;
+        }
+        if (code === 4003) {
+            logger.error('Protocol incompatible; not reconnecting');
+            return;
+        }
+        this.scheduleReconnect();
+    }
+    handleSocketError() {
+        const socket = this.ws;
+        if (!socket)
+            return;
+        this.stopReadyTimeout();
+        this.stopHeartbeat();
+        this.ws = null;
+        this.pendingChallenge = null;
+        try {
+            socket.terminate();
+        }
+        catch {
+            socket.close();
+        }
+        this.scheduleReconnect();
+    }
+    startReadyTimeout(socket) {
+        this.stopReadyTimeout();
+        this.readyTimer = setTimeout(() => {
+            if (this.ws !== socket || socket.readyState !== ws_1.default.OPEN)
+                return;
+            logger.warn('Tunnel ready timeout — reconnecting');
+            this.stopHeartbeat();
+            this.ws = null;
+            this.pendingChallenge = null;
+            try {
+                socket.terminate();
+            }
+            catch {
+                socket.close();
+            }
+            this.scheduleReconnect();
+        }, READY_TIMEOUT_MS);
+    }
+    stopReadyTimeout() {
+        if (this.readyTimer) {
+            clearTimeout(this.readyTimer);
+            this.readyTimer = null;
+        }
+    }
+    scheduleReconnect() {
+        if (this.destroyed || this.reconnectTimer)
+            return;
+        const jitter = Math.random() * 1000;
+        const delay = this.reconnectDelay + jitter;
+        this.reconnectTimer = setTimeout(() => {
+            this.reconnectTimer = null;
+            this.connect();
+        }, delay);
+        this.reconnectDelay = Math.min(this.reconnectDelay * 2, MAX_RECONNECT_DELAY);
+    }
+    startHeartbeat() {
+        this.stopHeartbeat();
+        const socket = this.ws;
+        if (!socket)
+            return;
+        socket.on('pong', () => {
+            if (this.ws !== socket)
+                return;
+            this.clearHeartbeatPongTimeout();
+        });
+        this.heartbeatTimer = setInterval(() => {
+            if (this.ws !== socket || socket.readyState !== ws_1.default.OPEN) {
+                this.stopHeartbeat();
+                return;
+            }
+            if (this.awaitingHeartbeatPong) {
+                this.handleHeartbeatTimeout(socket);
+                return;
+            }
+            this.awaitingHeartbeatPong = true;
+            socket.ping();
+            this.heartbeatPongTimer = setTimeout(() => {
+                if (this.ws === socket &&
+                    this.awaitingHeartbeatPong &&
+                    socket.readyState === ws_1.default.OPEN) {
+                    this.handleHeartbeatTimeout(socket);
+                }
+            }, HEARTBEAT_PONG_TIMEOUT_MS);
+        }, HEARTBEAT_INTERVAL_MS);
+    }
+    stopHeartbeat() {
+        if (this.heartbeatTimer) {
+            clearInterval(this.heartbeatTimer);
+            this.heartbeatTimer = null;
+        }
+        this.clearHeartbeatPongTimeout();
+    }
+    clearHeartbeatPongTimeout() {
+        if (this.heartbeatPongTimer) {
+            clearTimeout(this.heartbeatPongTimer);
+            this.heartbeatPongTimer = null;
+        }
+        this.awaitingHeartbeatPong = false;
+    }
+    handleHeartbeatTimeout(socket) {
+        logger.warn('Tunnel heartbeat timeout — reconnecting');
+        this.stopReadyTimeout();
+        this.stopHeartbeat();
+        if (this.ws === socket) {
+            this.ws = null;
+            this.pendingChallenge = null;
+        }
+        try {
+            socket.terminate();
+        }
+        catch {
+            socket.close();
+        }
+        this.scheduleReconnect();
+    }
+    disconnect() {
+        if (this.reconnectTimer) {
+            clearTimeout(this.reconnectTimer);
+            this.reconnectTimer = null;
+        }
+        this.stopReadyTimeout();
+        this.stopHeartbeat();
+        if (this.ws) {
+            this.ws.close();
+            this.ws = null;
+        }
+        this.pendingChallenge = null;
+    }
+};
+exports.TunnelClientService = TunnelClientService;
+__decorate([
+    (0, event_emitter_1.OnEvent)('session.cloud_connected'),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", void 0)
+], TunnelClientService.prototype, "handleCloudConnected", null);
+__decorate([
+    (0, event_emitter_1.OnEvent)('session.cloud_disconnected'),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", void 0)
+], TunnelClientService.prototype, "handleCloudDisconnected", null);
+exports.TunnelClientService = TunnelClientService = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [cloud_session_manager_service_1.CloudSessionManagerService,
+        refresh_gate_service_1.RefreshGateService,
+        tunnel_keypair_service_1.TunnelKeypairService,
+        tunnel_handler_service_1.TunnelHandlerService])
+], TunnelClientService);
+//# sourceMappingURL=tunnel-client.service.js.map

package/dist/server/modules/cloud-tunnel/services/tunnel-client.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tunnel-client.service.js","sourceRoot":"","sources":["../../../../src/modules/cloud-tunnel/services/tunnel-client.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAmG;AACnG,yDAAgD;AAChD,4CAA2B;AAC3B,2BAA8B;AAC9B,sGAAgG;AAChG,oFAA+E;AAC/E,qEAAgE;AAChE,qEAAgE;AAChE,2DAA8D;AAE9D,MAAM,MAAM,GAAG,IAAA,qBAAY,EAAC,cAAc,CAAC,CAAC;AAE5C,MAAM,oBAAoB,GAAG,IAAI,CAAC;AAClC,MAAM,mBAAmB,GAAG,MAAM,CAAC;AACnC,MAAM,qBAAqB,GAAG,MAAM,CAAC;AACrC,MAAM,yBAAyB,GAAG,MAAM,CAAC;AACzC,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAGzB,IAAM,mBAAmB,GAAzB,MAAM,mBAAmB;IAW9B,YACmB,YAAwC,EACxC,WAA+B,EAC/B,OAA6B,EAC7B,OAA6B;QAH7B,iBAAY,GAAZ,YAAY,CAA4B;QACxC,gBAAW,GAAX,WAAW,CAAoB;QAC/B,YAAO,GAAP,OAAO,CAAsB;QAC7B,YAAO,GAAP,OAAO,CAAsB;QAdxC,OAAE,GAAqB,IAAI,CAAC;QAC5B,mBAAc,GAAG,oBAAoB,CAAC;QACtC,mBAAc,GAAyC,IAAI,CAAC;QAC5D,mBAAc,GAA0C,IAAI,CAAC;QAC7D,uBAAkB,GAAyC,IAAI,CAAC;QAChE,0BAAqB,GAAG,KAAK,CAAC;QAC9B,eAAU,GAAyC,IAAI,CAAC;QACxD,qBAAgB,GAAyC,IAAI,CAAC;QAC9D,cAAS,GAAG,KAAK,CAAC;IAOvB,CAAC;IAEJ,YAAY;QACV,IAAI,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,CAAC,SAAS,EAAE,CAAC;YAC5C,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,CAAC;IACH,CAAC;IAED,sBAAsB;QACpB,IAAI,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,CAAC,SAAS,EAAE,CAAC;YAC5C,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,CAAC;IACH,CAAC;IAED,eAAe;QACb,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACtB,IAAI,CAAC,UAAU,EAAE,CAAC;IACpB,CAAC;IAGD,oBAAoB;QAClB,IAAI,CAAC,OAAO,EAAE,CAAC;IACjB,CAAC;IAGD,uBAAuB;QACrB,IAAI,CAAC,UAAU,EAAE,CAAC;IACpB,CAAC;IAEO,KAAK,CAAC,OAAO;QACnB,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,EAAE;YAAE,OAAO;QAEtC,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,cAAc,EAAE,CAAC;QACjD,IAAI,CAAC,KAAK;YAAE,OAAO;QAEnB,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,wCAAwC,CAAC;QAC7F,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,YAAY,CAAC;QAE9D,IAAI,CAAC;YACH,IAAI,CAAC,EAAE,GAAG,IAAI,YAAS,CAAC,KAAK,EAAE;gBAC7B,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE;aAC9C,CAAC,CAAC;YAEH,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;YAC1D,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;YACjF,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBAC1B,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,iBAAiB,CAAC,CAAC;gBACzC,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC3B,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,uCAAuC,CAAC,CAAC;YAC/D,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC3B,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,IAAuB;QACjD,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QAED,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO;QAC1D,MAAM,GAAG,GAAG,MAAiC,CAAC;QAE9C,IAAI,GAAG,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAC7B,MAAM,KAAK,GAAG,GAAG,CAAC,KAAe,CAAC;YAClC,MAAM,EAAE,GAAG,GAAG,CAAC,EAAY,CAAC;YAC5B,IAAI,CAAC,gBAAgB,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;YACtC,MAAM,IAAI,CAAC,kBAAkB,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACzC,OAAO;QACT,CAAC;QAED,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YACzB,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACxB,IAAI,CAAC,cAAc,GAAG,oBAAoB,CAAC;YAC3C,MAAM,UAAU,GAAG,GAAG,CAAC,UAAoB,CAAC;YAC5C,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;YAC7C,IAAI,CAAC,cAAc,EAAE,CAAC;YACtB,MAAM,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,EAAE,cAAc,CAAC,CAAC;YAC5C,OAAO;QACT,CAAC;QAED,IAAI,SAAS,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YACnC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CACxC,GAA2D,CAC5D,CAAC;YACF,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAAC,KAAa,EAAE,EAAU;QACxD,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;YAC5C,MAAM,WAAW,GAAG,KAAK,GAAG,CAAC,EAAE,CAAC,UAAU,IAAI,EAAE,CAAC,GAAG,EAAE,CAAC;YACvD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC;YAEtE,IAAI,CAAC,EAAE,EAAE,IAAI,CACX,IAAI,CAAC,SAAS,CAAC;gBACb,IAAI,EAAE,QAAQ;gBACd,SAAS,EAAE,EAAE,CAAC,SAAS;gBACvB,SAAS;gBACT,KAAK,EAAE,IAAA,aAAQ,GAAE;gBACjB,eAAe,EAAE,GAAG;gBACpB,UAAU,EAAE,EAAE,CAAC,UAAU;aAC1B,CAAC,CACH,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,gCAAgC,CAAC,CAAC;YACxD,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC;QACnB,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,IAAY,EAAE,MAAc;QACpD,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACxB,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC;QACf,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC;QAE7B,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO;QAE3B,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,eAAe,CAAC,CAAC;QAE/C,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,cAAc,EAAE,CAAC;YACxD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,IAAI,CAAC,iBAAiB,EAAE,CAAC;gBACzB,OAAO;YACT,CAAC;YACD,IAAI,OAAO,KAAK,mBAAmB,EAAE,CAAC;gBACpC,IAAI,CAAC,iBAAiB,EAAE,CAAC;gBACzB,OAAO;YACT,CAAC;YACD,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,gCAAgC,CAAC,CAAC;YAC1E,OAAO;QACT,CAAC;QAED,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,MAAM,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;YAClD,OAAO;QACT,CAAC;QAED,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,MAAM,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAC;YACxD,OAAO;QACT,CAAC;QAED,IAAI,CAAC,iBAAiB,EAAE,CAAC;IAC3B,CAAC;IAEO,iBAAiB;QACvB,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC;QACvB,IAAI,CAAC,MAAM;YAAE,OAAO;QAEpB,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACxB,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC;QACf,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC;QAE7B,IAAI,CAAC;YACH,MAAM,CAAC,SAAS,EAAE,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,CAAC;QAED,IAAI,CAAC,iBAAiB,EAAE,CAAC;IAC3B,CAAC;IAEO,iBAAiB,CAAC,MAAiB;QACzC,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACxB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,GAAG,EAAE;YAChC,IAAI,IAAI,CAAC,EAAE,KAAK,MAAM,IAAI,MAAM,CAAC,UAAU,KAAK,YAAS,CAAC,IAAI;gBAAE,OAAO;YAEvE,MAAM,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;YACnD,IAAI,CAAC,aAAa,EAAE,CAAC;YACrB,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC;YACf,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC;YAE7B,IAAI,CAAC;gBACH,MAAM,CAAC,SAAS,EAAE,CAAC;YACrB,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,CAAC;YAED,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC3B,CAAC,EAAE,gBAAgB,CAAC,CAAC;IACvB,CAAC;IAEO,gBAAgB;QACtB,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC9B,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QACzB,CAAC;IACH,CAAC;IAEO,iBAAiB;QACvB,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,cAAc;YAAE,OAAO;QAClD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC;QACpC,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC;QAC3C,IAAI,CAAC,cAAc,GAAG,UAAU,CAAC,GAAG,EAAE;YACpC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;YAC3B,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,CAAC,EAAE,KAAK,CAAC,CAAC;QACV,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,GAAG,CAAC,EAAE,mBAAmB,CAAC,CAAC;IAC/E,CAAC;IAEO,cAAc;QACpB,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC;QACvB,IAAI,CAAC,MAAM;YAAE,OAAO;QAEpB,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;YACrB,IAAI,IAAI,CAAC,EAAE,KAAK,MAAM;gBAAE,OAAO;YAC/B,IAAI,CAAC,yBAAyB,EAAE,CAAC;QACnC,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,cAAc,GAAG,WAAW,CAAC,GAAG,EAAE;YACrC,IAAI,IAAI,CAAC,EAAE,KAAK,MAAM,IAAI,MAAM,CAAC,UAAU,KAAK,YAAS,CAAC,IAAI,EAAE,CAAC;gBAC/D,IAAI,CAAC,aAAa,EAAE,CAAC;gBACrB,OAAO;YACT,CAAC;YAED,IAAI,IAAI,CAAC,qBAAqB,EAAE,CAAC;gBAC/B,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC;gBACpC,OAAO;YACT,CAAC;YAED,IAAI,CAAC,qBAAqB,GAAG,IAAI,CAAC;YAClC,MAAM,CAAC,IAAI,EAAE,CAAC;YACd,IAAI,CAAC,kBAAkB,GAAG,UAAU,CAAC,GAAG,EAAE;gBACxC,IACE,IAAI,CAAC,EAAE,KAAK,MAAM;oBAClB,IAAI,CAAC,qBAAqB;oBAC1B,MAAM,CAAC,UAAU,KAAK,YAAS,CAAC,IAAI,EACpC,CAAC;oBACD,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC;gBACtC,CAAC;YACH,CAAC,EAAE,yBAAyB,CAAC,CAAC;QAChC,CAAC,EAAE,qBAAqB,CAAC,CAAC;IAC5B,CAAC;IAEO,aAAa;QACnB,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,aAAa,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YACnC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC7B,CAAC;QACD,IAAI,CAAC,yBAAyB,EAAE,CAAC;IACnC,CAAC;IAEO,yBAAyB;QAC/B,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC5B,YAAY,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;YACtC,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC;QACjC,CAAC;QACD,IAAI,CAAC,qBAAqB,GAAG,KAAK,CAAC;IACrC,CAAC;IAEO,sBAAsB,CAAC,MAAiB;QAC9C,MAAM,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;QACvD,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACxB,IAAI,CAAC,aAAa,EAAE,CAAC;QAErB,IAAI,IAAI,CAAC,EAAE,KAAK,MAAM,EAAE,CAAC;YACvB,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC;YACf,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC;QAC/B,CAAC;QAED,IAAI,CAAC;YACH,MAAM,CAAC,SAAS,EAAE,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,CAAC;QAED,IAAI,CAAC,iBAAiB,EAAE,CAAC;IAC3B,CAAC;IAEO,UAAU;QAChB,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,YAAY,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAClC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC7B,CAAC;QACD,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACxB,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;YACZ,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC;QACjB,CAAC;QACD,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAC/B,CAAC;CACF,CAAA;AAnTY,kDAAmB;AAoC9B;IADC,IAAA,uBAAO,EAAC,yBAAyB,CAAC;;;;+DAGlC;AAGD;IADC,IAAA,uBAAO,EAAC,4BAA4B,CAAC;;;;kEAGrC;8BA3CU,mBAAmB;IAD/B,IAAA,mBAAU,GAAE;qCAasB,0DAA0B;QAC3B,yCAAkB;QACtB,6CAAoB;QACpB,6CAAoB;GAfrC,mBAAmB,CAmT/B"}

package/dist/server/modules/cloud-tunnel/services/tunnel-handler.service.d.ts

@@ -0,0 +1,44 @@
+interface JsonRpcRequest {
+    jsonrpc: '2.0';
+    id: string;
+    method: string;
+    params?: Record<string, unknown>;
+}
+interface JsonRpcResponse {
+    jsonrpc: '2.0';
+    id: string;
+    result?: unknown;
+    error?: {
+        code: number;
+        message: string;
+        data?: unknown;
+    };
+}
+export declare class TunnelHandlerService {
+    private readonly storage;
+    private readonly handlers;
+    constructor(storage: any);
+    handle(req: JsonRpcRequest): Promise<JsonRpcResponse>;
+    private listProjects;
+    private listStatuses;
+    private listParentEpics;
+    private listParentEpicsByStatus;
+    private listParentEpicsWithSummary;
+    private listEpicsByStatus;
+    private listParentChildren;
+    private getEpicDetail;
+    private toStatusDto;
+    private toStatusMap;
+    private toAgentNameMap;
+    private resolveProjectIdForStatus;
+    private toEpicDto;
+    private aggregateChildSummaries;
+    private hasPotentialChildTruncation;
+    private buildCountSafeChildSummary;
+    private toStatusPosition;
+    private itemsOf;
+    private totalOf;
+    private limitOf;
+    private offsetOf;
+}
+export {};