devchain-cli 0.12.4 → 0.13.0

package/dist/server/modules/cloud/controllers/qr-initiate-proxy.controller.js

@@ -0,0 +1,89 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.QrInitiateProxyController = void 0;
+const common_1 = require("@nestjs/common");
+const cloud_session_manager_service_1 = require("../services/cloud-session-manager.service");
+const refresh_gate_service_1 = require("../services/refresh-gate.service");
+let QrInitiateProxyController = class QrInitiateProxyController {
+    constructor(cloudSession, refreshGate) {
+        this.cloudSession = cloudSession;
+        this.refreshGate = refreshGate;
+    }
+    async initiate(body) {
+        const status = this.cloudSession.getStatus();
+        if (!status.connected) {
+            throw new common_1.UnauthorizedException('Cloud is not connected');
+        }
+        return this.callUpstream(this.cloudSession.getAccessToken(), body);
+    }
+    async callUpstream(token, body) {
+        if (!token)
+            throw new common_1.UnauthorizedException('No access token');
+        const baseUrl = process.env.IDENTITY_SERVICE_URL ?? 'http://localhost:3002';
+        const res = await fetch(`${baseUrl}/auth/qr/initiate`, {
+            method: 'POST',
+            headers: {
+                Authorization: `Bearer ${token}`,
+                'Content-Type': 'application/json',
+            },
+            body: JSON.stringify(body ?? {}),
+        });
+        if (res.status === 401) {
+            const outcome = await this.refreshGate.attemptRefresh();
+            if (outcome === 'success') {
+                const refreshedToken = this.cloudSession.getAccessToken();
+                if (!refreshedToken)
+                    throw new common_1.UnauthorizedException('Refresh succeeded but no token');
+                const retry = await fetch(`${baseUrl}/auth/qr/initiate`, {
+                    method: 'POST',
+                    headers: {
+                        Authorization: `Bearer ${refreshedToken}`,
+                        'Content-Type': 'application/json',
+                    },
+                    body: JSON.stringify(body ?? {}),
+                });
+                if (!retry.ok)
+                    throw new common_1.HttpException(await safeText(retry), retry.status);
+                return retry.json();
+            }
+            throw new common_1.UnauthorizedException('Cloud session expired');
+        }
+        if (!res.ok)
+            throw new common_1.HttpException(await safeText(res), res.status);
+        return res.json();
+    }
+};
+exports.QrInitiateProxyController = QrInitiateProxyController;
+__decorate([
+    (0, common_1.Post)('initiate'),
+    __param(0, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], QrInitiateProxyController.prototype, "initiate", null);
+exports.QrInitiateProxyController = QrInitiateProxyController = __decorate([
+    (0, common_1.Controller)('api/cloud/qr'),
+    __metadata("design:paramtypes", [cloud_session_manager_service_1.CloudSessionManagerService,
+        refresh_gate_service_1.RefreshGateService])
+], QrInitiateProxyController);
+async function safeText(res) {
+    try {
+        return await res.text();
+    }
+    catch {
+        return '';
+    }
+}
+//# sourceMappingURL=qr-initiate-proxy.controller.js.map

package/dist/server/modules/cloud/controllers/qr-initiate-proxy.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"qr-initiate-proxy.controller.js","sourceRoot":"","sources":["../../../../src/modules/cloud/controllers/qr-initiate-proxy.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAA8F;AAC9F,6FAAuF;AACvF,2EAAsE;AAG/D,IAAM,yBAAyB,GAA/B,MAAM,yBAAyB;IACpC,YACmB,YAAwC,EACxC,WAA+B;QAD/B,iBAAY,GAAZ,YAAY,CAA4B;QACxC,gBAAW,GAAX,WAAW,CAAoB;IAC/C,CAAC;IAGE,AAAN,KAAK,CAAC,QAAQ,CAAS,IAA+B;QACpD,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,CAAC;QAC7C,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YACtB,MAAM,IAAI,8BAAqB,CAAC,wBAAwB,CAAC,CAAC;QAC5D,CAAC;QACD,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,cAAc,EAAE,EAAE,IAAI,CAAC,CAAC;IACrE,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,KAAoB,EAAE,IAAa;QAC5D,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,8BAAqB,CAAC,iBAAiB,CAAC,CAAC;QAC/D,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,uBAAuB,CAAC;QAC5E,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,mBAAmB,EAAE;YACrD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,KAAK,EAAE;gBAChC,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,EAAE,CAAC;SACjC,CAAC,CAAC;QAEH,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACvB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,cAAc,EAAE,CAAC;YACxD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,MAAM,cAAc,GAAG,IAAI,CAAC,YAAY,CAAC,cAAc,EAAE,CAAC;gBAC1D,IAAI,CAAC,cAAc;oBAAE,MAAM,IAAI,8BAAqB,CAAC,gCAAgC,CAAC,CAAC;gBACvF,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,mBAAmB,EAAE;oBACvD,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE;wBACP,aAAa,EAAE,UAAU,cAAc,EAAE;wBACzC,cAAc,EAAE,kBAAkB;qBACnC;oBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,EAAE,CAAC;iBACjC,CAAC,CAAC;gBACH,IAAI,CAAC,KAAK,CAAC,EAAE;oBAAE,MAAM,IAAI,sBAAa,CAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;gBAC5E,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;YACtB,CAAC;YACD,MAAM,IAAI,8BAAqB,CAAC,uBAAuB,CAAC,CAAC;QAC3D,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,IAAI,sBAAa,CAAC,MAAM,QAAQ,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QACtE,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;IACpB,CAAC;CACF,CAAA;AAjDY,8DAAyB;AAO9B;IADL,IAAA,aAAI,EAAC,UAAU,CAAC;IACD,WAAA,IAAA,aAAI,GAAE,CAAA;;;;yDAMrB;oCAbU,yBAAyB;IADrC,IAAA,mBAAU,EAAC,cAAc,CAAC;qCAGQ,0DAA0B;QAC3B,yCAAkB;GAHvC,yBAAyB,CAiDrC;AAED,KAAK,UAAU,QAAQ,CAAC,GAAa;IACnC,IAAI,CAAC;QACH,OAAO,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/server/modules/cloud/dtos/cloud-tokens.dto.d.ts

@@ -0,0 +1,20 @@
+import { z } from 'zod';
+export declare const StoreCloudTokensSchema: z.ZodObject<{
+    accessToken: z.ZodString;
+    refreshToken: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    refreshToken: string;
+    accessToken: string;
+}, {
+    refreshToken: string;
+    accessToken: string;
+}>;
+export type StoreCloudTokensDto = z.infer<typeof StoreCloudTokensSchema>;
+export declare const MagicLinkRequestSchema: z.ZodObject<{
+    email: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    email: string;
+}, {
+    email: string;
+}>;
+export type MagicLinkRequestDto = z.infer<typeof MagicLinkRequestSchema>;

package/dist/server/modules/cloud/dtos/cloud-tokens.dto.js

@@ -0,0 +1,12 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MagicLinkRequestSchema = exports.StoreCloudTokensSchema = void 0;
+const zod_1 = require("zod");
+exports.StoreCloudTokensSchema = zod_1.z.object({
+    accessToken: zod_1.z.string().min(1),
+    refreshToken: zod_1.z.string().min(1),
+});
+exports.MagicLinkRequestSchema = zod_1.z.object({
+    email: zod_1.z.string().email(),
+});
+//# sourceMappingURL=cloud-tokens.dto.js.map

package/dist/server/modules/cloud/dtos/cloud-tokens.dto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud-tokens.dto.js","sourceRoot":"","sources":["../../../../src/modules/cloud/dtos/cloud-tokens.dto.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AAEX,QAAA,sBAAsB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC7C,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAChC,CAAC,CAAC;AAIU,QAAA,sBAAsB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC7C,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;CAC1B,CAAC,CAAC"}

package/dist/server/modules/cloud/services/cloud-egress-bridge.service.d.ts

@@ -0,0 +1,24 @@
+import { CloudSessionManagerService } from './cloud-session-manager.service';
+import { EgressQueueService } from './egress-queue.service';
+import { EventMapperService } from './event-mapper.service';
+import { ProjectEgressConfigService } from './project-egress-config.service';
+import type { EpicCreatedEventPayload } from '../../events/catalog/epic.created';
+import type { EpicDeletedEventPayload } from '../../events/catalog/epic.deleted';
+import type { EpicUpdatedEventPayload } from '../../events/catalog/epic.updated';
+import type { EpicCommentCreatedEventPayload } from '../../events/catalog/epic.comment.created';
+import type { SessionCrashedEventPayload } from '../../events/catalog/session.crashed';
+import type { SessionStoppedEventPayload } from '../../events/catalog/session.stopped';
+export declare class CloudEgressBridgeService {
+    private readonly cloudSession;
+    private readonly egressQueue;
+    private readonly eventMapper;
+    private readonly projectConfig;
+    constructor(cloudSession: CloudSessionManagerService, egressQueue: EgressQueueService, eventMapper: EventMapperService, projectConfig: ProjectEgressConfigService);
+    onEpicCreated(payload: EpicCreatedEventPayload): Promise<void>;
+    onEpicUpdated(payload: EpicUpdatedEventPayload): Promise<void>;
+    onEpicDeleted(payload: EpicDeletedEventPayload): Promise<void>;
+    onEpicCommentCreated(payload: EpicCommentCreatedEventPayload): Promise<void>;
+    onSessionCrashed(payload: SessionCrashedEventPayload): Promise<void>;
+    onSessionStopped(payload: SessionStoppedEventPayload): Promise<void>;
+    private forward;
+}

package/dist/server/modules/cloud/services/cloud-egress-bridge.service.js

@@ -0,0 +1,111 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CloudEgressBridgeService = void 0;
+const common_1 = require("@nestjs/common");
+const event_emitter_1 = require("@nestjs/event-emitter");
+const logger_1 = require("../../../common/logging/logger");
+const events_service_1 = require("../../events/services/events.service");
+const cloud_session_manager_service_1 = require("./cloud-session-manager.service");
+const egress_queue_service_1 = require("./egress-queue.service");
+const event_mapper_service_1 = require("./event-mapper.service");
+const project_egress_config_service_1 = require("./project-egress-config.service");
+const logger = (0, logger_1.createLogger)('CloudEgressBridge');
+let CloudEgressBridgeService = class CloudEgressBridgeService {
+    constructor(cloudSession, egressQueue, eventMapper, projectConfig) {
+        this.cloudSession = cloudSession;
+        this.egressQueue = egressQueue;
+        this.eventMapper = eventMapper;
+        this.projectConfig = projectConfig;
+    }
+    async onEpicCreated(payload) {
+        this.forward({ name: 'epic.created', payload });
+    }
+    async onEpicUpdated(payload) {
+        this.forward({ name: 'epic.updated', payload });
+    }
+    async onEpicDeleted(payload) {
+        this.forward({ name: 'epic.deleted', payload });
+    }
+    async onEpicCommentCreated(payload) {
+        this.forward({ name: 'epic.comment.created', payload });
+    }
+    async onSessionCrashed(payload) {
+        this.forward({ name: 'session.crashed', payload });
+    }
+    async onSessionStopped(payload) {
+        this.forward({ name: 'session.stopped', payload });
+    }
+    forward(event) {
+        const status = this.cloudSession.getStatus();
+        if (!status.connected || !status.userId)
+            return;
+        const metadata = (0, events_service_1.getEventMetadata)(event.payload);
+        if (!metadata) {
+            logger.debug({ eventName: event.name }, 'Skipping event without metadata');
+            return;
+        }
+        const ingestPayload = this.eventMapper.mapToIngestPayload(event, metadata.id, status.userId);
+        if (ingestPayload.projectId && !this.projectConfig.isEnabled(ingestPayload.projectId)) {
+            return;
+        }
+        if (!ingestPayload.projectId && !this.projectConfig.hasAnyEnabled()) {
+            return;
+        }
+        this.egressQueue.enqueue(ingestPayload);
+        logger.debug({ eventName: event.name, sourceEventId: metadata.id }, 'Event enqueued for cloud egress');
+    }
+};
+exports.CloudEgressBridgeService = CloudEgressBridgeService;
+__decorate([
+    (0, event_emitter_1.OnEvent)('epic.created', { async: true }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], CloudEgressBridgeService.prototype, "onEpicCreated", null);
+__decorate([
+    (0, event_emitter_1.OnEvent)('epic.updated', { async: true }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], CloudEgressBridgeService.prototype, "onEpicUpdated", null);
+__decorate([
+    (0, event_emitter_1.OnEvent)('epic.deleted', { async: true }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], CloudEgressBridgeService.prototype, "onEpicDeleted", null);
+__decorate([
+    (0, event_emitter_1.OnEvent)('epic.comment.created', { async: true }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], CloudEgressBridgeService.prototype, "onEpicCommentCreated", null);
+__decorate([
+    (0, event_emitter_1.OnEvent)('session.crashed', { async: true }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], CloudEgressBridgeService.prototype, "onSessionCrashed", null);
+__decorate([
+    (0, event_emitter_1.OnEvent)('session.stopped', { async: true }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], CloudEgressBridgeService.prototype, "onSessionStopped", null);
+exports.CloudEgressBridgeService = CloudEgressBridgeService = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [cloud_session_manager_service_1.CloudSessionManagerService,
+        egress_queue_service_1.EgressQueueService,
+        event_mapper_service_1.EventMapperService,
+        project_egress_config_service_1.ProjectEgressConfigService])
+], CloudEgressBridgeService);
+//# sourceMappingURL=cloud-egress-bridge.service.js.map

package/dist/server/modules/cloud/services/cloud-egress-bridge.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud-egress-bridge.service.js","sourceRoot":"","sources":["../../../../src/modules/cloud/services/cloud-egress-bridge.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA4C;AAC5C,yDAAgD;AAChD,2DAA8D;AAC9D,yEAAwE;AACxE,mFAA6E;AAC7E,iEAA4D;AAC5D,iEAA4D;AAC5D,mFAA6E;AAQ7E,MAAM,MAAM,GAAG,IAAA,qBAAY,EAAC,mBAAmB,CAAC,CAAC;AAG1C,IAAM,wBAAwB,GAA9B,MAAM,wBAAwB;IACnC,YACmB,YAAwC,EACxC,WAA+B,EAC/B,WAA+B,EAC/B,aAAyC;QAHzC,iBAAY,GAAZ,YAAY,CAA4B;QACxC,gBAAW,GAAX,WAAW,CAAoB;QAC/B,gBAAW,GAAX,WAAW,CAAoB;QAC/B,kBAAa,GAAb,aAAa,CAA4B;IACzD,CAAC;IAGE,AAAN,KAAK,CAAC,aAAa,CAAC,OAAgC;QAClD,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC,CAAC;IAClD,CAAC;IAGK,AAAN,KAAK,CAAC,aAAa,CAAC,OAAgC;QAClD,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC,CAAC;IAClD,CAAC;IAGK,AAAN,KAAK,CAAC,aAAa,CAAC,OAAgC;QAClD,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC,CAAC;IAClD,CAAC;IAGK,AAAN,KAAK,CAAC,oBAAoB,CAAC,OAAuC;QAChE,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,OAAO,EAAE,CAAC,CAAC;IAC1D,CAAC;IAGK,AAAN,KAAK,CAAC,gBAAgB,CAAC,OAAmC;QACxD,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,CAAC,CAAC;IACrD,CAAC;IAGK,AAAN,KAAK,CAAC,gBAAgB,CAAC,OAAmC;QACxD,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,CAAC,CAAC;IACrD,CAAC;IAEO,OAAO,CAAC,KAA8D;QAC5E,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,CAAC;QAC7C,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,MAAM;YAAE,OAAO;QAEhD,MAAM,QAAQ,GAAG,IAAA,iCAAgB,EAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACjD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,iCAAiC,CAAC,CAAC;YAC3E,OAAO;QACT,CAAC;QAED,MAAM,aAAa,GAAG,IAAI,CAAC,WAAW,CAAC,kBAAkB,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QAE7F,IAAI,aAAa,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,CAAC;YACtF,OAAO;QACT,CAAC;QAED,IAAI,CAAC,aAAa,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,aAAa,EAAE,EAAE,CAAC;YACpE,OAAO;QACT,CAAC;QAED,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QACxC,MAAM,CAAC,KAAK,CACV,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,aAAa,EAAE,QAAQ,CAAC,EAAE,EAAE,EACrD,iCAAiC,CAClC,CAAC;IACJ,CAAC;CACF,CAAA;AAhEY,4DAAwB;AAS7B;IADL,IAAA,uBAAO,EAAC,cAAc,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;;;;6DAGxC;AAGK;IADL,IAAA,uBAAO,EAAC,cAAc,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;;;;6DAGxC;AAGK;IADL,IAAA,uBAAO,EAAC,cAAc,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;;;;6DAGxC;AAGK;IADL,IAAA,uBAAO,EAAC,sBAAsB,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;;;;oEAGhD;AAGK;IADL,IAAA,uBAAO,EAAC,iBAAiB,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;;;;gEAG3C;AAGK;IADL,IAAA,uBAAO,EAAC,iBAAiB,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;;;;gEAG3C;mCApCU,wBAAwB;IADpC,IAAA,mBAAU,GAAE;qCAGsB,0DAA0B;QAC3B,yCAAkB;QAClB,yCAAkB;QAChB,0DAA0B;GALjD,wBAAwB,CAgEpC"}

package/dist/server/modules/cloud/services/cloud-session-manager.service.d.ts

@@ -0,0 +1,27 @@
+import { OnModuleInit, OnModuleDestroy } from '@nestjs/common';
+import { EncryptedTokenStoreService } from './encrypted-token-store.service';
+import { EventsService } from '../../events/services/events.service';
+import { type RealtimeBroadcaster } from '../../realtime/ports/realtime-broadcaster.port';
+import type { CloudTokens, CloudConnectionStatus } from '../types';
+export declare class CloudSessionManagerService implements OnModuleInit, OnModuleDestroy {
+    private readonly tokenStore;
+    private readonly eventsService;
+    private readonly broadcaster;
+    private refreshTimer;
+    private currentTokens;
+    private jwksCache;
+    constructor(tokenStore: EncryptedTokenStoreService, eventsService: EventsService, broadcaster: RealtimeBroadcaster);
+    onModuleInit(): Promise<void>;
+    onModuleDestroy(): void;
+    storeTokens(accessToken: string, refreshToken: string): Promise<CloudTokens>;
+    getStatus(): CloudConnectionStatus;
+    getAccessToken(): string | null;
+    disconnect(): Promise<void>;
+    refreshAccessToken(): Promise<void>;
+    private validateAccessToken;
+    private getJwks;
+    private scheduleRefresh;
+    private clearRefreshTimer;
+    private scheduleRefreshRetry;
+    private handleRefreshFailure;
+}

package/dist/server/modules/cloud/services/cloud-session-manager.service.js

@@ -0,0 +1,257 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CloudSessionManagerService = void 0;
+const common_1 = require("@nestjs/common");
+const jose = __importStar(require("jose"));
+const logger_1 = require("../../../common/logging/logger");
+const encrypted_token_store_service_1 = require("./encrypted-token-store.service");
+const events_service_1 = require("../../events/services/events.service");
+const realtime_broadcaster_port_1 = require("../../realtime/ports/realtime-broadcaster.port");
+const logger = (0, logger_1.createLogger)('CloudSessionManager');
+const DEFAULT_REFRESH_BUFFER_MS = 60_000;
+const REFRESH_RETRY_DELAY_MS = 30_000;
+const IDENTITY_SERVICE_URL = process.env.IDENTITY_SERVICE_URL || 'http://localhost:3002';
+let CloudSessionManagerService = class CloudSessionManagerService {
+    constructor(tokenStore, eventsService, broadcaster) {
+        this.tokenStore = tokenStore;
+        this.eventsService = eventsService;
+        this.broadcaster = broadcaster;
+        this.refreshTimer = null;
+        this.currentTokens = null;
+        this.jwksCache = null;
+    }
+    async onModuleInit() {
+        const tokens = this.tokenStore.retrieve();
+        if (tokens) {
+            const expiresAtMs = new Date(tokens.expiresAt).getTime();
+            if (expiresAtMs > Date.now()) {
+                this.currentTokens = tokens;
+                this.scheduleRefresh();
+                logger.info({ userId: tokens.userId }, 'Restored cloud session from encrypted store');
+            }
+            else {
+                this.currentTokens = tokens;
+                try {
+                    await this.refreshAccessToken();
+                }
+                catch {
+                    logger.warn('Stored cloud tokens expired and refresh failed transiently — will retry');
+                }
+            }
+        }
+    }
+    onModuleDestroy() {
+        this.clearRefreshTimer();
+    }
+    async storeTokens(accessToken, refreshToken) {
+        const payload = await this.validateAccessToken(accessToken);
+        const tokens = {
+            accessToken,
+            refreshToken,
+            userId: payload.sub,
+            email: payload.email,
+            expiresAt: new Date(payload.exp * 1000).toISOString(),
+        };
+        this.tokenStore.store(tokens);
+        this.currentTokens = tokens;
+        this.scheduleRefresh();
+        await this.eventsService.publish('session.cloud_connected', {
+            userId: tokens.userId,
+        });
+        this.broadcaster.broadcastEvent('cloud', 'connected', {
+            userId: tokens.userId,
+            email: tokens.email,
+        });
+        logger.info({ userId: tokens.userId }, 'Cloud session established');
+        return tokens;
+    }
+    getStatus() {
+        if (!this.currentTokens) {
+            return { connected: false, identityServiceUrl: IDENTITY_SERVICE_URL };
+        }
+        return {
+            connected: true,
+            userId: this.currentTokens.userId,
+            email: this.currentTokens.email,
+            expiresAt: this.currentTokens.expiresAt,
+            identityServiceUrl: IDENTITY_SERVICE_URL,
+        };
+    }
+    getAccessToken() {
+        return this.currentTokens?.accessToken ?? null;
+    }
+    async disconnect() {
+        const userId = this.currentTokens?.userId ?? null;
+        this.clearRefreshTimer();
+        this.currentTokens = null;
+        this.tokenStore.clear();
+        await this.eventsService.publish('session.cloud_disconnected', {
+            userId,
+        });
+        this.broadcaster.broadcastEvent('cloud', 'disconnected', { userId });
+        logger.info({ userId }, 'Cloud session disconnected');
+    }
+    async refreshAccessToken() {
+        if (!this.currentTokens) {
+            return;
+        }
+        const { refreshToken } = this.currentTokens;
+        try {
+            const response = await fetch(`${IDENTITY_SERVICE_URL}/auth/refresh`, {
+                method: 'POST',
+                headers: { 'Content-Type': 'application/json' },
+                body: JSON.stringify({ refresh_token: refreshToken }),
+            });
+            if (!response.ok) {
+                const body = (await response.json().catch(() => ({})));
+                const errorCode = body.error;
+                if (response.status === 401 || errorCode === 'invalid_refresh_token') {
+                    logger.warn('Refresh token invalid/revoked — disconnecting');
+                    await this.handleRefreshFailure();
+                    return;
+                }
+                throw new Error(`Refresh failed: ${response.status} ${JSON.stringify(body)}`);
+            }
+            const body = (await response.json());
+            const payload = await this.validateAccessToken(body.access_token);
+            this.currentTokens = {
+                ...this.currentTokens,
+                accessToken: body.access_token,
+                refreshToken: body.refresh_token,
+                expiresAt: new Date(payload.exp * 1000).toISOString(),
+            };
+            this.tokenStore.store(this.currentTokens);
+            this.scheduleRefresh();
+            logger.debug({ userId: this.currentTokens.userId }, 'Access token refreshed');
+        }
+        catch (error) {
+            if (!this.currentTokens)
+                return;
+            logger.error({ error }, 'Token refresh transient error');
+            this.scheduleRefreshRetry();
+            throw error;
+        }
+    }
+    async validateAccessToken(token) {
+        const jwks = await this.getJwks();
+        const keyStore = jose.createLocalJWKSet(jwks);
+        const { payload } = await jose.jwtVerify(token, keyStore, {
+            clockTolerance: 60,
+        });
+        if (!payload.sub || !payload.exp) {
+            throw new Error('Invalid JWT payload: missing sub or exp');
+        }
+        return payload;
+    }
+    async getJwks() {
+        if (this.jwksCache && this.jwksCache.expiresAt > Date.now()) {
+            return this.jwksCache.keys;
+        }
+        const response = await fetch(`${IDENTITY_SERVICE_URL}/.well-known/jwks.json`);
+        if (!response.ok) {
+            throw new Error(`JWKS fetch failed: ${response.status}`);
+        }
+        const keys = (await response.json());
+        this.jwksCache = { keys, expiresAt: Date.now() + 600_000 };
+        return keys;
+    }
+    scheduleRefresh() {
+        this.clearRefreshTimer();
+        if (!this.currentTokens)
+            return;
+        const expiresAtMs = new Date(this.currentTokens.expiresAt).getTime();
+        const refreshAtMs = expiresAtMs - DEFAULT_REFRESH_BUFFER_MS;
+        const delayMs = Math.max(refreshAtMs - Date.now(), 1000);
+        this.refreshTimer = setTimeout(() => {
+            this.refreshAccessToken().catch((error) => {
+                logger.error({ error }, 'Scheduled refresh failed');
+            });
+        }, delayMs);
+        logger.debug({ delayMs, expiresAt: this.currentTokens.expiresAt }, 'Scheduled token refresh');
+    }
+    clearRefreshTimer() {
+        if (this.refreshTimer) {
+            clearTimeout(this.refreshTimer);
+            this.refreshTimer = null;
+        }
+    }
+    scheduleRefreshRetry() {
+        this.clearRefreshTimer();
+        if (!this.currentTokens)
+            return;
+        this.refreshTimer = setTimeout(() => {
+            this.refreshAccessToken().catch((error) => {
+                logger.error({ error }, 'Scheduled refresh retry failed');
+            });
+        }, REFRESH_RETRY_DELAY_MS);
+        logger.debug({ delayMs: REFRESH_RETRY_DELAY_MS }, 'Scheduled token refresh retry');
+    }
+    async handleRefreshFailure() {
+        this.clearRefreshTimer();
+        const userId = this.currentTokens?.userId ?? null;
+        this.currentTokens = null;
+        this.tokenStore.clear();
+        await this.eventsService.publish('session.cloud_disconnected', {
+            userId,
+        });
+        this.broadcaster.broadcastEvent('cloud', 'disconnected', {
+            userId,
+            reason: 'refresh_failed',
+        });
+        logger.info({ userId }, 'Cloud session disconnected due to refresh failure');
+    }
+};
+exports.CloudSessionManagerService = CloudSessionManagerService;
+exports.CloudSessionManagerService = CloudSessionManagerService = __decorate([
+    (0, common_1.Injectable)(),
+    __param(1, (0, common_1.Inject)((0, common_1.forwardRef)(() => events_service_1.EventsService))),
+    __param(2, (0, common_1.Inject)(realtime_broadcaster_port_1.REALTIME_BROADCASTER)),
+    __metadata("design:paramtypes", [encrypted_token_store_service_1.EncryptedTokenStoreService,
+        events_service_1.EventsService, Object])
+], CloudSessionManagerService);
+//# sourceMappingURL=cloud-session-manager.service.js.map

package/dist/server/modules/cloud/services/cloud-session-manager.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud-session-manager.service.js","sourceRoot":"","sources":["../../../../src/modules/cloud/services/cloud-session-manager.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,2CAA+F;AAC/F,2CAA6B;AAC7B,2DAA8D;AAC9D,mFAA6E;AAC7E,yEAAqE;AACrE,8FAGwD;AAGxD,MAAM,MAAM,GAAG,IAAA,qBAAY,EAAC,qBAAqB,CAAC,CAAC;AAEnD,MAAM,yBAAyB,GAAG,MAAM,CAAC;AACzC,MAAM,sBAAsB,GAAG,MAAM,CAAC;AACtC,MAAM,oBAAoB,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,uBAAuB,CAAC;AAGlF,IAAM,0BAA0B,GAAhC,MAAM,0BAA0B;IAKrC,YACmB,UAAsC,EAEvD,aAA6C,EAE7C,WAAiD;QAJhC,eAAU,GAAV,UAAU,CAA4B;QAEtC,kBAAa,GAAb,aAAa,CAAe;QAE5B,gBAAW,GAAX,WAAW,CAAqB;QAT3C,iBAAY,GAAyC,IAAI,CAAC;QAC1D,kBAAa,GAAuB,IAAI,CAAC;QACzC,cAAS,GAA2D,IAAI,CAAC;IAQ9E,CAAC;IAEJ,KAAK,CAAC,YAAY;QAChB,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAC1C,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,WAAW,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;YACzD,IAAI,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;gBAC7B,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC;gBAC5B,IAAI,CAAC,eAAe,EAAE,CAAC;gBACvB,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,6CAA6C,CAAC,CAAC;YACxF,CAAC;iBAAM,CAAC;gBAEN,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC;gBAC5B,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,kBAAkB,EAAE,CAAC;gBAClC,CAAC;gBAAC,MAAM,CAAC;oBACP,MAAM,CAAC,IAAI,CAAC,yEAAyE,CAAC,CAAC;gBACzF,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,eAAe;QACb,IAAI,CAAC,iBAAiB,EAAE,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,WAAmB,EAAE,YAAoB;QACzD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC;QAE5D,MAAM,MAAM,GAAgB;YAC1B,WAAW;YACX,YAAY;YACZ,MAAM,EAAE,OAAO,CAAC,GAAG;YACnB,KAAK,EAAG,OAAmC,CAAC,KAA2B;YACvE,SAAS,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE;SACtD,CAAC;QAEF,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC9B,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC;QAC5B,IAAI,CAAC,eAAe,EAAE,CAAC;QAEvB,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,yBAAyB,EAAE;YAC1D,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CAAC,CAAC;QAEH,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,OAAO,EAAE,WAAW,EAAE;YACpD,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,KAAK,EAAE,MAAM,CAAC,KAAK;SACpB,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,2BAA2B,CAAC,CAAC;QACpE,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,SAAS;QACP,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACxB,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,CAAC;QACxE,CAAC;QAED,OAAO;YACL,SAAS,EAAE,IAAI;YACf,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,MAAM;YACjC,KAAK,EAAE,IAAI,CAAC,aAAa,CAAC,KAAK;YAC/B,SAAS,EAAE,IAAI,CAAC,aAAa,CAAC,SAAS;YACvC,kBAAkB,EAAE,oBAAoB;SACzC,CAAC;IACJ,CAAC;IAED,cAAc;QACZ,OAAO,IAAI,CAAC,aAAa,EAAE,WAAW,IAAI,IAAI,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,UAAU;QACd,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,EAAE,MAAM,IAAI,IAAI,CAAC;QAClD,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;QAC1B,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QAExB,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,4BAA4B,EAAE;YAC7D,MAAM;SACP,CAAC,CAAC;QAEH,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,OAAO,EAAE,cAAc,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QAErE,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,4BAA4B,CAAC,CAAC;IACxD,CAAC;IAED,KAAK,CAAC,kBAAkB;QACtB,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACxB,OAAO;QACT,CAAC;QAED,MAAM,EAAE,YAAY,EAAE,GAAG,IAAI,CAAC,aAAa,CAAC;QAE5C,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,oBAAoB,eAAe,EAAE;gBACnE,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC;aACtD,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAA4B,CAAC;gBAClF,MAAM,SAAS,GAAG,IAAI,CAAC,KAA2B,CAAC;gBAEnD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,SAAS,KAAK,uBAAuB,EAAE,CAAC;oBACrE,MAAM,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAC;oBAC7D,MAAM,IAAI,CAAC,oBAAoB,EAAE,CAAC;oBAClC,OAAO;gBACT,CAAC;gBAED,MAAM,IAAI,KAAK,CAAC,mBAAmB,QAAQ,CAAC,MAAM,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAChF,CAAC;YAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAGlC,CAAC;YAEF,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAElE,IAAI,CAAC,aAAa,GAAG;gBACnB,GAAG,IAAI,CAAC,aAAa;gBACrB,WAAW,EAAE,IAAI,CAAC,YAAY;gBAC9B,YAAY,EAAE,IAAI,CAAC,aAAa;gBAChC,SAAS,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE;aACtD,CAAC;YAEF,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YAC1C,IAAI,CAAC,eAAe,EAAE,CAAC;YAEvB,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,EAAE,wBAAwB,CAAC,CAAC;QAChF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,IAAI,CAAC,aAAa;gBAAE,OAAO;YAEhC,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,+BAA+B,CAAC,CAAC;YACzD,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC5B,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAC/B,KAAa;QAEb,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAE9C,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,QAAQ,EAAE;YACxD,cAAc,EAAE,EAAE;SACnB,CAAC,CAAC;QAEH,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC7D,CAAC;QAED,OAAO,OAAyD,CAAC;IACnE,CAAC;IAEO,KAAK,CAAC,OAAO;QACnB,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YAC5D,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;QAC7B,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,oBAAoB,wBAAwB,CAAC,CAAC;QAC9E,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,sBAAsB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3D,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAuB,CAAC;QAC3D,IAAI,CAAC,SAAS,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC;QAC3D,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,eAAe;QACrB,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAEzB,IAAI,CAAC,IAAI,CAAC,aAAa;YAAE,OAAO;QAEhC,MAAM,WAAW,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;QACrE,MAAM,WAAW,GAAG,WAAW,GAAG,yBAAyB,CAAC;QAC5D,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;QAEzD,IAAI,CAAC,YAAY,GAAG,UAAU,CAAC,GAAG,EAAE;YAClC,IAAI,CAAC,kBAAkB,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;gBACxC,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,0BAA0B,CAAC,CAAC;YACtD,CAAC,CAAC,CAAC;QACL,CAAC,EAAE,OAAO,CAAC,CAAC;QAEZ,MAAM,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,EAAE,yBAAyB,CAAC,CAAC;IAChG,CAAC;IAEO,iBAAiB;QACvB,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAChC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QAC3B,CAAC;IACH,CAAC;IAEO,oBAAoB;QAC1B,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAEzB,IAAI,CAAC,IAAI,CAAC,aAAa;YAAE,OAAO;QAEhC,IAAI,CAAC,YAAY,GAAG,UAAU,CAAC,GAAG,EAAE;YAClC,IAAI,CAAC,kBAAkB,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;gBACxC,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,gCAAgC,CAAC,CAAC;YAC5D,CAAC,CAAC,CAAC;QACL,CAAC,EAAE,sBAAsB,CAAC,CAAC;QAE3B,MAAM,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,sBAAsB,EAAE,EAAE,+BAA+B,CAAC,CAAC;IACrF,CAAC;IAEO,KAAK,CAAC,oBAAoB;QAChC,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,EAAE,MAAM,IAAI,IAAI,CAAC;QAClD,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;QAC1B,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QAExB,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,4BAA4B,EAAE;YAC7D,MAAM;SACP,CAAC,CAAC;QAEH,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,OAAO,EAAE,cAAc,EAAE;YACvD,MAAM;YACN,MAAM,EAAE,gBAAgB;SACzB,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,mDAAmD,CAAC,CAAC;IAC/E,CAAC;CACF,CAAA;AAhPY,gEAA0B;qCAA1B,0BAA0B;IADtC,IAAA,mBAAU,GAAE;IAQR,WAAA,IAAA,eAAM,EAAC,IAAA,mBAAU,EAAC,GAAG,EAAE,CAAC,8BAAa,CAAC,CAAC,CAAA;IAEvC,WAAA,IAAA,eAAM,EAAC,gDAAoB,CAAC,CAAA;qCAHA,0DAA0B;QAEvB,8BAAa;GARpC,0BAA0B,CAgPtC"}

package/dist/server/modules/cloud/services/egress-queue.service.d.ts

@@ -0,0 +1,20 @@
+import { OnModuleDestroy } from '@nestjs/common';
+import { CloudSessionManagerService } from './cloud-session-manager.service';
+import { RefreshGateService } from './refresh-gate.service';
+import { type RealtimeBroadcaster } from '../../realtime/ports/realtime-broadcaster.port';
+import type { IngestPayload } from './event-mapper.service';
+export declare class EgressQueueService implements OnModuleDestroy {
+    private readonly cloudSession;
+    private readonly refreshGate;
+    private readonly broadcaster;
+    private queue;
+    private drainTimer;
+    private paused;
+    private pauseBackoffMs;
+    constructor(cloudSession: CloudSessionManagerService, refreshGate: RefreshGateService, broadcaster: RealtimeBroadcaster);
+    onModuleDestroy(): void;
+    enqueue(payload: IngestPayload): void;
+    get length(): number;
+    private drainOnce;
+    private handle401;
+}