forgebadger 0.1.0 → 0.1.2

package/dist/gateway/src/services/mcp/token-authority.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-authority.js","sourceRoot":"","sources":["../../../../src/services/mcp/token-authority.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACjD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,iBAAiB,EAAE,MAAM,6CAA6C,CAAC;AAChF,OAAO,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,mBAAmB,EAA0B,MAAM,+CAA+C,CAAC;AAEzJ,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAGhE,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC,CAAC;AAElI,MAAM,UAAU,sBAAsB,CAAC,GAAW;IAChD,MAAM,IAAI,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC3F,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC;IACrC,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IACzI,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IAC1J,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,gBAAgB,CAAC,SAAiB,EAAE,IAAY;IACvD,MAAM,QAAQ,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC/C,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3F,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;AACjK,CAAC;AAED,SAAS,6BAA6B,CAAC,EAAY,EAAE,MAAc,EAAE,SAAiB;IACpF,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,8CAA8C,CAAC,CAAC,GAAG,CAAC,MAAM,CAA4B,CAAC;IAC/G,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK,KAAK,EAAE,IAAI,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;IACpI,MAAM,QAAQ,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACvH,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QAC3G,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YACH,OAAO,GAAG,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACpC,CAAC;QAAC,MAAM,CAAC;YACP,sEAAsE;YACtE,SAAS;QACX,CAAC;QACD,IAAI,QAAQ,CAAC,OAAO,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IAC9F,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,EAAY,EAAE,MAAc,EAAE,UAAoB;IACpF,MAAM,QAAQ,GAAG,IAAI,iBAAiB,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;QAC/C,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACrC,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAC5D,MAAM,IAAI,GAAG,sBAAsB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAClD,6BAA6B,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QAChD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC,CAAC,CAAC;IACH,KAAK,MAAM,KAAK,IAAI,MAAM;QAAE,+BAA+B,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5F,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,+BAA+B,CAAC,EAAY,EAAE,MAAc,EAAE,MAA2B,EAAE,IAAY;IAC9G,KAAK,MAAM,OAAO,IAAI,IAAI,iBAAiB,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAC/D,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,OAAO,CAAC,EAAE,CAAC,CAAC;QAC1D,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,CAAC;gBAAC,IAAI,sBAAsB,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,IAAI;oBAAE,SAAS;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,uDAAuD,CAAC,CAAC;QAC9I,CAAC;QACD,MAAM,UAAU,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAChD,IAAI,CAAC;YAAC,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,8CAA8C,CAAC,CAAC;QAC9G,IAAI,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE;YAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;YAChD,OAAO,QAAQ,KAAK,EAAE,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;QACvH,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,6EAA6E,CAAC,CAAC;IACrG,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAAC,EAAY,EAAE,MAAc,EAAE,MAA2B,EAAE,SAA4B;IACrH,IAAI,CAAC,SAAS;QAAE,OAAO;IACvB,MAAM,QAAQ,GAAG,IAAI,iBAAiB,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,CAAC,SAAS,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;QAClD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAClD,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAC1E,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACrC,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAC5D,MAAM,IAAI,GAAG,sBAAsB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAClD,IAAI,IAAI,KAAK,KAAK,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QACzF,6BAA6B,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QAChD,+BAA+B,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QAC1D,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;IACH,KAAK,MAAM,SAAS,IAAI,SAAS,CAAC,SAAS,IAAI,EAAE,EAAE,CAAC;QAClD,mFAAmF;QACnF,MAAM,QAAQ,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;QAC1C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,QAAQ,CAAC,EAAE,CAAC;YAClE,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;QACjF,CAAC;QACD,6BAA6B,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IACtD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,EAAY,EAAE,MAAc,EAAE,OAAe,EAAE,SAA4B;IACjH,MAAM,KAAK,GAAG,IAAI,kBAAkB,CAAC,EAAE,CAAC,CAAC,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACzE,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAC5D,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,uCAAuC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAmC,CAAC;IAC/G,IAAI,IAAI,EAAE,MAAM,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IACxE,MAAM,QAAQ,GAAG,uBAAuB,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;IAChE,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,sBAAsB,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;QACxD,OAAO;IACT,CAAC;IACD,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC;QAAE,OAAO;IACxE,IAAI,CAAC,KAAK,CAAC,WAAW,IAAI,CAAC,KAAK,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACnG,MAAM,IAAI,GAAG,sBAAsB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACvD,IAAI,IAAI,KAAK,KAAK,CAAC,WAAW;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAChF,KAAK,MAAM,SAAS,IAAI,SAAS,EAAE,UAAU,IAAI,EAAE,EAAE,CAAC;QACpD,MAAM,OAAO,GAAG,IAAI,iBAAiB,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACrE,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACnD,gBAAgB,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACrC,6BAA6B,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1D,CAAC;IACD,KAAK,MAAM,WAAW,IAAI,SAAS,EAAE,SAAS,IAAI,EAAE,EAAE,CAAC;QACrD,gBAAgB,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QACpC,6BAA6B,CAAC,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;IACzD,CAAC;AACH,CAAC"}

package/dist/gateway/src/services/model-capability-projection.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Projection of Model Center metadata onto CLI-native model configuration.
+ *
+ * Capability tags are free-form strings stored on `model_profiles.capabilities`.
+ * Each CLI adapter consumes only the subset it can express in its own config
+ * file; this module centralizes those mappings so the apply writers and the
+ * route validation share a single source of truth.
+ */
+/**
+ * Thinking effort levels understood by Kimi Code model entries
+ * (`support_efforts` / `default_effort` in config.toml). Codex uses its own
+ * `minimal|low|medium|high` ladder for `model_reasoning_effort` and is
+ * deliberately not part of this enum.
+ */
+export declare const THINKING_EFFORT_LEVELS: readonly ["low", "medium", "high", "xhigh", "max"];
+export type ThinkingEffortLevel = (typeof THINKING_EFFORT_LEVELS)[number];
+export declare function isThinkingEffortLevel(value: unknown): value is ThinkingEffortLevel;
+/**
+ * Projects a model's free-form capability tags onto Kimi Code capability
+ * entries. De-duplicated, first-seen order preserved.
+ */
+export declare function projectedKimiCapabilities(capabilities: readonly string[]): string[];

package/dist/gateway/src/services/model-capability-projection.js

@@ -0,0 +1,46 @@
+/**
+ * Projection of Model Center metadata onto CLI-native model configuration.
+ *
+ * Capability tags are free-form strings stored on `model_profiles.capabilities`.
+ * Each CLI adapter consumes only the subset it can express in its own config
+ * file; this module centralizes those mappings so the apply writers and the
+ * route validation share a single source of truth.
+ */
+/**
+ * Thinking effort levels understood by Kimi Code model entries
+ * (`support_efforts` / `default_effort` in config.toml). Codex uses its own
+ * `minimal|low|medium|high` ladder for `model_reasoning_effort` and is
+ * deliberately not part of this enum.
+ */
+export const THINKING_EFFORT_LEVELS = ["low", "medium", "high", "xhigh", "max"];
+export function isThinkingEffortLevel(value) {
+    return typeof value === "string" && THINKING_EFFORT_LEVELS.includes(value);
+}
+/**
+ * ForgeBadger capability tag -> Kimi Code `capabilities` entries.
+ * Deliberately conservative: `always_thinking` is never projected (it forces
+ * thinking on, a user-level decision), and `chat` / `code` / `embedding`
+ * have no Kimi Code counterpart.
+ */
+const KIMI_CAPABILITY_PROJECTION = {
+    vision: ["image_in"],
+    video: ["video_in"],
+    audio: ["audio_in"],
+    reasoning: ["thinking"],
+    tools: ["tool_use"]
+};
+/**
+ * Projects a model's free-form capability tags onto Kimi Code capability
+ * entries. De-duplicated, first-seen order preserved.
+ */
+export function projectedKimiCapabilities(capabilities) {
+    const projected = [];
+    for (const capability of capabilities) {
+        for (const target of KIMI_CAPABILITY_PROJECTION[capability] ?? []) {
+            if (!projected.includes(target))
+                projected.push(target);
+        }
+    }
+    return projected;
+}
+//# sourceMappingURL=model-capability-projection.js.map

package/dist/gateway/src/services/model-capability-projection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-capability-projection.js","sourceRoot":"","sources":["../../../src/services/model-capability-projection.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAU,CAAC;AAGzF,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAK,sBAA4C,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACpG,CAAC;AAED;;;;;GAKG;AACH,MAAM,0BAA0B,GAAgD;IAC9E,MAAM,EAAE,CAAC,UAAU,CAAC;IACpB,KAAK,EAAE,CAAC,UAAU,CAAC;IACnB,KAAK,EAAE,CAAC,UAAU,CAAC;IACnB,SAAS,EAAE,CAAC,UAAU,CAAC;IACvB,KAAK,EAAE,CAAC,UAAU,CAAC;CACpB,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,yBAAyB,CAAC,YAA+B;IACvE,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,KAAK,MAAM,UAAU,IAAI,YAAY,EAAE,CAAC;QACtC,KAAK,MAAM,MAAM,IAAI,0BAA0B,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC;YAClE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAAE,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/gateway/src/services/model-endpoint-health.d.ts

@@ -20,6 +20,7 @@ export interface CheckModelEndpointInput {
         family: number;
     }>>;
     allowPlaintextHttp?: boolean;
+    allowPrivateNetworks?: boolean;
 }
 export declare function checkModelEndpoint(input: CheckModelEndpointInput): Promise<ModelEndpointHealth>;
 export declare function validatePublicHttpsEndpointUrl(endpoint: string, resolveHost?: CheckModelEndpointInput["resolveHost"], options?: PublicEndpointOptions): Promise<string | undefined>;

package/dist/gateway/src/services/model-endpoint-health.js

@@ -12,6 +12,7 @@ export async function checkModelEndpoint(input) {
     try {
         const validationError = await validatePublicHttpsEndpointUrl(input.endpoint, resolveHost, {
             allowPlaintextHttp: input.allowPlaintextHttp,
+            allowPrivateNetworks: input.allowPrivateNetworks
         });
         if (validationError) {
             const latencyMs = Math.max(0, now() - start);
@@ -68,7 +69,7 @@ export async function validatePublicHttpsEndpointUrl(endpoint, resolveHost = loo
     if (endpointUrl.protocol !== "https:" && !isTrustedPlaintextHttp) {
         return "Only https protocol is allowed";
     }
-    return validateOutboundHost(endpointUrl.hostname, resolveHost);
+    return validateOutboundHost(endpointUrl.hostname, resolveHost, options);
 }
 function maskRemoteError(error) {
     if (error instanceof DOMException && error.name === "AbortError") {

package/dist/gateway/src/services/model-endpoint-health.js.map

@@ -1 +1 @@
-{"version":3,"file":"model-endpoint-health.js","sourceRoot":"","sources":["../../../src/services/model-endpoint-health.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAE3C,OAAO,EAAE,2BAA2B,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EACL,kBAAkB,IAAI,qBAAqB,EAC3C,qBAAqB,IAAI,wBAAwB,EACjD,oBAAoB,EAErB,MAAM,qBAAqB,CAAC;AAwB7B,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,KAA8B;IACrE,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC;IAC1C,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC;IAC3C,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC5C,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,IAAI,MAAM,CAAC;IAChD,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC;IACpB,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;IAEhE,IAAI,CAAC;QACH,MAAM,eAAe,GAAG,MAAM,8BAA8B,CAAC,KAAK,CAAC,QAAQ,EAAE,WAAW,EAAE;YACxF,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;SAC7C,CAAC,CAAC;QACH,IAAI,eAAe,EAAE,CAAC;YACpB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC;YAC7C,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAC3C,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,SAAS;gBACT,SAAS;gBACT,SAAS;gBACT,KAAK,EAAE,eAAe;aACvB,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,QAAQ,EAAE;YAC/C,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC3C,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC;QAC7C,OAAO;YACL,OAAO,EAAE,QAAQ,CAAC,MAAM,GAAG,GAAG;YAC9B,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,SAAS;YACT,SAAS;YACT,UAAU,EAAE,QAAQ,CAAC,MAAM;YAC3B,SAAS;SACV,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC;QAC7C,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC3C,OAAO;YACL,OAAO,EAAE,KAAK;YACd,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,SAAS;YACT,SAAS;YACT,SAAS;YACT,KAAK,EAAE,eAAe,CAAC,KAAK,CAAC;SAC9B,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,OAAO,CAAC,CAAC;IACxB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,QAAgB,EAChB,cAAsD,MAAM,EAC5D,UAAiC,EAAE;IAEnC,IAAI,WAAgB,CAAC;IACrB,IAAI,CAAC;QACH,WAAW,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,sBAAsB,CAAC;IAChC,CAAC;IAED,MAAM,sBAAsB,GAAG,WAAW,CAAC,QAAQ,KAAK,OAAO,IAAI,OAAO,CAAC,kBAAkB,KAAK,IAAI,CAAC;IACvG,IAAI,WAAW,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,sBAAsB,EAAE,CAAC;QACjE,OAAO,gCAAgC,CAAC;IAC1C,CAAC;IAED,OAAO,oBAAoB,CAAC,WAAW,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,KAAK,YAAY,YAAY,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QACjE,OAAO,mBAAmB,CAAC;IAC7B,CAAC;IACD,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC3B,wEAAwE;QACxE,sEAAsE;QACtE,oDAAoD;QACpD,OAAO,2BAA2B,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,uBAAuB,CAAC;AACjC,CAAC;AAED,SAAS,kBAAkB,CAAC,QAAgB;IAC1C,OAAO,qBAAqB,CAAC,QAAQ,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,qBAAqB,CAAC,QAAgB;IAC7C,OAAO,wBAAwB,CAAC,QAAQ,CAAC,CAAC;AAC5C,CAAC"}
+{"version":3,"file":"model-endpoint-health.js","sourceRoot":"","sources":["../../../src/services/model-endpoint-health.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAE3C,OAAO,EAAE,2BAA2B,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EACL,kBAAkB,IAAI,qBAAqB,EAC3C,qBAAqB,IAAI,wBAAwB,EACjD,oBAAoB,EAErB,MAAM,qBAAqB,CAAC;AAyB7B,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,KAA8B;IACrE,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC;IAC1C,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC;IAC3C,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC5C,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,IAAI,MAAM,CAAC;IAChD,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC;IACpB,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;IAEhE,IAAI,CAAC;QACH,MAAM,eAAe,GAAG,MAAM,8BAA8B,CAAC,KAAK,CAAC,QAAQ,EAAE,WAAW,EAAE;YACxF,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,oBAAoB,EAAE,KAAK,CAAC,oBAAoB;SACjD,CAAC,CAAC;QACH,IAAI,eAAe,EAAE,CAAC;YACpB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC;YAC7C,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAC3C,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,SAAS;gBACT,SAAS;gBACT,SAAS;gBACT,KAAK,EAAE,eAAe;aACvB,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,QAAQ,EAAE;YAC/C,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC3C,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC;QAC7C,OAAO;YACL,OAAO,EAAE,QAAQ,CAAC,MAAM,GAAG,GAAG;YAC9B,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,SAAS;YACT,SAAS;YACT,UAAU,EAAE,QAAQ,CAAC,MAAM;YAC3B,SAAS;SACV,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC;QAC7C,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC3C,OAAO;YACL,OAAO,EAAE,KAAK;YACd,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,SAAS;YACT,SAAS;YACT,SAAS;YACT,KAAK,EAAE,eAAe,CAAC,KAAK,CAAC;SAC9B,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,OAAO,CAAC,CAAC;IACxB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,QAAgB,EAChB,cAAsD,MAAM,EAC5D,UAAiC,EAAE;IAEnC,IAAI,WAAgB,CAAC;IACrB,IAAI,CAAC;QACH,WAAW,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,sBAAsB,CAAC;IAChC,CAAC;IAED,MAAM,sBAAsB,GAAG,WAAW,CAAC,QAAQ,KAAK,OAAO,IAAI,OAAO,CAAC,kBAAkB,KAAK,IAAI,CAAC;IACvG,IAAI,WAAW,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,sBAAsB,EAAE,CAAC;QACjE,OAAO,gCAAgC,CAAC;IAC1C,CAAC;IAED,OAAO,oBAAoB,CAAC,WAAW,CAAC,QAAQ,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,KAAK,YAAY,YAAY,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QACjE,OAAO,mBAAmB,CAAC;IAC7B,CAAC;IACD,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC3B,wEAAwE;QACxE,sEAAsE;QACtE,oDAAoD;QACpD,OAAO,2BAA2B,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,uBAAuB,CAAC;AACjC,CAAC;AAED,SAAS,kBAAkB,CAAC,QAAgB;IAC1C,OAAO,qBAAqB,CAAC,QAAQ,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,qBAAqB,CAAC,QAAgB;IAC7C,OAAO,wBAAwB,CAAC,QAAQ,CAAC,CAAC;AAC5C,CAAC"}

package/dist/gateway/src/services/network-policy.d.ts

@@ -18,17 +18,23 @@ export type OutboundHostResolver = (hostname: string, options: {
  *  - Cloud metadata hostnames (GCP, AWS)
  *  - Hostnames that resolve to any of the above (DNS-resolved blocklist)
  */
-export declare function validateOutboundHost(hostname: string, resolveHost: OutboundHostResolver): Promise<string | undefined>;
+export declare function validateOutboundHost(hostname: string, resolveHost: OutboundHostResolver, options?: PublicEndpointOptions): Promise<string | undefined>;
 /**
- * Optional per-provider trust switch. When `allowPlaintextHttp` is true, a
- * plain `http:` endpoint is accepted INSTEAD OF `https:`. This relaxes ONLY the
- * protocol requirement — every other SSRF check (metadata host, private/
+ * Optional per-provider trust switches. When `allowPlaintextHttp` is true,
+ * a plain `http:` endpoint is accepted INSTEAD OF `https:`. This relaxes ONLY
+ * the protocol requirement — every other SSRF check (metadata host, private/
  * loopback/link-local IP incl. DNS-resolved, `.local`/`.internal`, embedded
  * IPv4, and credentials-in-URL) is still enforced, so the switch can never be
  * abused to point a managed secret at cloud metadata or the local network.
+ *
+ * When `allowPrivateNetworks` is true, the private/loopback/link-local IP
+ * blocklist and the `localhost` hostname check are relaxed so a provider can
+ * point at a local model server (e.g. Ollama on 127.0.0.1). Cloud metadata
+ * hosts, `.internal` names, and credentials-in-URL remain blocked.
  */
 export interface PublicEndpointOptions {
     allowPlaintextHttp?: boolean | undefined;
+    allowPrivateNetworks?: boolean | undefined;
 }
 /** Synchronous fail-closed guard used before persisting or decrypting managed credentials. */
 export declare function assertPublicHttpsEndpoint(endpoint: string | null | undefined, options?: PublicEndpointOptions): void;
@@ -36,5 +42,7 @@ export declare function assertPublicHttpsEndpoint(endpoint: string | null | unde
 export declare function assertResolvedPublicHttpsEndpoint(endpoint: string | null | undefined, resolveHost?: OutboundHostResolver, options?: PublicEndpointOptions): Promise<void>;
 export declare function isBlockedIpAddress(hostname: string): string | undefined;
 export declare function isBlockedMetadataHost(hostname: string): string | undefined;
+export declare function isBlockedCloudMetadataHost(hostname: string): string | undefined;
+export declare function isLoopbackHostname(hostname: string): string | undefined;
 export declare function isBlockedIPv4(address: string): boolean;
 export declare function isBlockedIPv6(address: string): boolean;

package/dist/gateway/src/services/network-policy.js

@@ -14,9 +14,26 @@ import { isIP } from "node:net";
  *  - Cloud metadata hostnames (GCP, AWS)
  *  - Hostnames that resolve to any of the above (DNS-resolved blocklist)
  */
-export async function validateOutboundHost(hostname, resolveHost) {
+export async function validateOutboundHost(hostname, resolveHost, options = {}) {
     const normalized = hostname.toLowerCase().replace(/\.$/, "");
-    const blockedByName = isBlockedMetadataHost(normalized);
+    // Cloud metadata stays blocked even for providers that explicitly trust
+    // private networks.
+    const blockedByMetadata = isBlockedCloudMetadataHost(normalized);
+    if (blockedByMetadata) {
+        return blockedByMetadata;
+    }
+    if (options.allowPrivateNetworks === true) {
+        // Trusted local model servers (Ollama, vLLM, ...): the private/loopback
+        // IP blocklist and the loopback hostname check are relaxed, including the
+        // DNS re-resolution pivot guard. `.internal` names stay blocked: they are
+        // a cloud-metadata naming convention (see assertPublicHttpsEndpoint) and
+        // are never a legitimate local model server address.
+        if (normalized.endsWith(".internal")) {
+            return "Internal hostnames are not allowed";
+        }
+        return undefined;
+    }
+    const blockedByName = isLoopbackHostname(normalized);
     if (blockedByName) {
         return blockedByName;
     }
@@ -63,9 +80,13 @@ export function assertPublicHttpsEndpoint(endpoint, options = {}) {
         throw new Error("Managed credentials require a public HTTPS endpoint");
     }
     const hostname = url.hostname.toLowerCase().replace(/\.$/u, "");
-    const blocked = isBlockedMetadataHost(hostname) ?? isBlockedIpAddress(hostname);
-    if (blocked || hostname.endsWith(".local") || hostname.endsWith(".internal")
-        || (!hostname.includes(".") && isIP(hostname) === 0)) {
+    const trustedPrivateNetworks = options.allowPrivateNetworks === true;
+    const blocked = trustedPrivateNetworks
+        ? isBlockedCloudMetadataHost(hostname)
+        : isBlockedMetadataHost(hostname) ?? isBlockedIpAddress(hostname);
+    if (blocked || hostname.endsWith(".internal")
+        || (!trustedPrivateNetworks && (hostname.endsWith(".local")
+            || (!hostname.includes(".") && isIP(hostname) === 0)))) {
         throw new Error(blocked ?? "Managed credentials require a public DNS endpoint");
     }
 }
@@ -73,7 +94,7 @@ export function assertPublicHttpsEndpoint(endpoint, options = {}) {
 export async function assertResolvedPublicHttpsEndpoint(endpoint, resolveHost = lookup, options = {}) {
     assertPublicHttpsEndpoint(endpoint, options);
     const url = new URL(endpoint);
-    const rejection = await validateOutboundHost(url.hostname, resolveHost);
+    const rejection = await validateOutboundHost(url.hostname, resolveHost, options);
     if (rejection)
         throw new Error(`Managed credential endpoint rejected: ${rejection}`);
 }
@@ -102,16 +123,26 @@ export function isBlockedIpAddress(hostname) {
     return undefined;
 }
 export function isBlockedMetadataHost(hostname) {
+    return isBlockedCloudMetadataHost(hostname) ?? isLoopbackHostname(hostname);
+}
+export function isBlockedCloudMetadataHost(hostname) {
     const value = hostname.toLowerCase();
     if (value === "metadata.google.internal" || value.endsWith(".metadata.google.internal")) {
         return "Metadata hostnames are not allowed";
     }
+    // 169.254.169.254: AWS/GCP/Azure IMDS. 100.100.100.200: Alibaba Cloud.
+    // These stay blocked even when allowPrivateNetworks relaxes the rest of
+    // the private-IP blocklist (100.64.0.0/10 would otherwise cover Alibaba).
+    if (value === "169.254.169.254" || value === "100.100.100.200") {
+        return "Cloud metadata service is not allowed";
+    }
+    return undefined;
+}
+export function isLoopbackHostname(hostname) {
+    const value = hostname.toLowerCase();
     if (value === "localhost" || value === "localhost.localdomain") {
         return "Loopback addresses are not allowed";
     }
-    if (value === "169.254.169.254") {
-        return "Cloud metadata service is not allowed";
-    }
     return undefined;
 }
 export function isBlockedIPv4(address) {

package/dist/gateway/src/services/network-policy.js.map

@@ -1 +1 @@
-{"version":3,"file":"network-policy.js","sourceRoot":"","sources":["../../../src/services/network-policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAOhC;;;;;;;;;;;;;GAaG;AAEH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,QAAgB,EAChB,WAAiC;IAEjC,MAAM,UAAU,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC7D,MAAM,aAAa,GAAG,qBAAqB,CAAC,UAAU,CAAC,CAAC;IACxD,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO,aAAa,CAAC;IACvB,CAAC;IAED,MAAM,WAAW,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;IACnD,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,wEAAwE;IACxE,wEAAwE;IACxE,sDAAsD;IACtD,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,WAAW,CAAC,UAAU,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/D,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,OAAO,qCAAqC,CAAC;QAC/C,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;YAC9B,MAAM,OAAO,GAAG,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAClD,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,OAAO,CAAC;YACjB,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,iCAAiC,CAAC;IAC3C,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAcD,8FAA8F;AAC9F,MAAM,UAAU,yBAAyB,CACvC,QAAmC,EACnC,UAAiC,EAAE;IAEnC,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACtF,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QAAC,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAAC,CAAC;IACxH,MAAM,sBAAsB,GAAG,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,OAAO,CAAC,kBAAkB,KAAK,IAAI,CAAC;IAC/F,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,sBAAsB,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAChE,MAAM,OAAO,GAAG,qBAAqB,CAAC,QAAQ,CAAC,IAAI,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAChF,IAAI,OAAO,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC;WACvE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CAAC,OAAO,IAAI,mDAAmD,CAAC,CAAC;IAClF,CAAC;AACH,CAAC;AAED,0FAA0F;AAC1F,MAAM,CAAC,KAAK,UAAU,iCAAiC,CACrD,QAAmC,EACnC,cAAoC,MAAM,EAC1C,UAAiC,EAAE;IAEnC,yBAAyB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC7C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAkB,CAAC,CAAC;IACxC,MAAM,SAAS,GAAG,MAAM,oBAAoB,CAAC,GAAG,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IACxE,IAAI,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,SAAS,EAAE,CAAC,CAAC;AACvF,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,QAAgB;IACjD,4EAA4E;IAC5E,oDAAoD;IACpD,MAAM,IAAI,GAAG,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC;QAC7D,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACvB,CAAC,CAAC,QAAQ,CAAC;IACb,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,IAAI,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,OAAO,uDAAuD,CAAC;QACjE,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,iBAAiB,IAAI,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;YACxE,OAAO,uDAAuD,CAAC;QACjE,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,YAAY,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAC/C,IAAI,YAAY,IAAI,aAAa,CAAC,YAAY,CAAC,EAAE,CAAC;QAChD,OAAO,uDAAuD,CAAC;IACjE,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,QAAgB;IACpD,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IACrC,IAAI,KAAK,KAAK,0BAA0B,IAAI,KAAK,CAAC,QAAQ,CAAC,2BAA2B,CAAC,EAAE,CAAC;QACxF,OAAO,oCAAoC,CAAC;IAC9C,CAAC;IACD,IAAI,KAAK,KAAK,WAAW,IAAI,KAAK,KAAK,uBAAuB,EAAE,CAAC;QAC/D,OAAO,oCAAoC,CAAC;IAC9C,CAAC;IACD,IAAI,KAAK,KAAK,iBAAiB,EAAE,CAAC;QAChC,OAAO,uCAAuC,CAAC;IACjD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,OAAe;IAC3C,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;IACjF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC,IAAI,OAAO,GAAG,GAAG,CAAC,EAAE,CAAC;QAC3G,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1B,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1B,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1B,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAE1B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,yBAAyB;IAChE,IAAI,CAAC,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC,CAAa,aAAa;IACpD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC,CAAC,kDAAkD;IAC3F,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC,CAAC,gBAAgB;IAClE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC,CAAC,iBAAiB;IAC1D,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,GAAG;QAAE,OAAO,IAAI,CAAC,CAAC,kCAAkC;IACrF,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,yCAAyC;IAC3F,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,0BAA0B;IAC5E,4EAA4E;IAC5E,2EAA2E;IAC3E,2EAA2E;IAC3E,2EAA2E;IAC3E,yEAAyE;IACzE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC,CAAC,6BAA6B;IAClF,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC,CAAC,4BAA4B;IAChF,IAAI,CAAC,IAAI,GAAG;QAAE,OAAO,IAAI,CAAC,CAAC,+CAA+C;IAC1E,kCAAkC;IAClC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC,CAAC,YAAY;IAC/E,KAAK,CAAC,CAAC;IAAC,KAAK,CAAC,CAAC;IACf,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,OAAe;IAC3C,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IAEpC,0DAA0D;IAC1D,IAAI,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QACrD,IAAI,MAAM,IAAI,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;YACpC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,iFAAiF;QACjF,0EAA0E;QAC1E,IAAI,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,oDAAoD;IACpD,IAAI,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,4CAA4C;IAC5C,IAAI,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC;YACxC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC;YACjC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACnC,IAAI,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,2CAA2C;IAC3C,IAAI,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAEnD,4BAA4B;IAC5B,IAAI,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEpD,6BAA6B;IAC7B,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAElE,0BAA0B;IAC1B,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAExC,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,oBAAoB,CAAC,OAAe;IAC3C,yEAAyE;IACzE,yEAAyE;IACzE,4DAA4D;IAC5D,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACzC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC3C,MAAM,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC3C,MAAM,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC3C,MAAM,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC3C,IAAI,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QACtD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,mBAAmB,CAAC,OAAe;IAC1C,MAAM,KAAK,GAAG,+BAA+B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC5D,OAAO,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC;AAC7B,CAAC"}
+{"version":3,"file":"network-policy.js","sourceRoot":"","sources":["../../../src/services/network-policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAOhC;;;;;;;;;;;;;GAaG;AAEH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,QAAgB,EAChB,WAAiC,EACjC,UAAiC,EAAE;IAEnC,MAAM,UAAU,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAE7D,wEAAwE;IACxE,oBAAoB;IACpB,MAAM,iBAAiB,GAAG,0BAA0B,CAAC,UAAU,CAAC,CAAC;IACjE,IAAI,iBAAiB,EAAE,CAAC;QACtB,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IAED,IAAI,OAAO,CAAC,oBAAoB,KAAK,IAAI,EAAE,CAAC;QAC1C,wEAAwE;QACxE,0EAA0E;QAC1E,0EAA0E;QAC1E,yEAAyE;QACzE,qDAAqD;QACrD,IAAI,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YACrC,OAAO,oCAAoC,CAAC;QAC9C,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,aAAa,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;IACrD,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO,aAAa,CAAC;IACvB,CAAC;IAED,MAAM,WAAW,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;IACnD,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,wEAAwE;IACxE,wEAAwE;IACxE,sDAAsD;IACtD,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,WAAW,CAAC,UAAU,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/D,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,OAAO,qCAAqC,CAAC;QAC/C,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;YAC9B,MAAM,OAAO,GAAG,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAClD,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,OAAO,CAAC;YACjB,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,iCAAiC,CAAC;IAC3C,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAoBD,8FAA8F;AAC9F,MAAM,UAAU,yBAAyB,CACvC,QAAmC,EACnC,UAAiC,EAAE;IAEnC,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACtF,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QAAC,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAAC,CAAC;IACxH,MAAM,sBAAsB,GAAG,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,OAAO,CAAC,kBAAkB,KAAK,IAAI,CAAC;IAC/F,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,sBAAsB,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAChE,MAAM,sBAAsB,GAAG,OAAO,CAAC,oBAAoB,KAAK,IAAI,CAAC;IACrE,MAAM,OAAO,GAAG,sBAAsB;QACpC,CAAC,CAAC,0BAA0B,CAAC,QAAQ,CAAC;QACtC,CAAC,CAAC,qBAAqB,CAAC,QAAQ,CAAC,IAAI,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IACpE,IAAI,OAAO,IAAI,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC;WACxC,CAAC,CAAC,sBAAsB,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC;eACtD,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CAAC,OAAO,IAAI,mDAAmD,CAAC,CAAC;IAClF,CAAC;AACH,CAAC;AAED,0FAA0F;AAC1F,MAAM,CAAC,KAAK,UAAU,iCAAiC,CACrD,QAAmC,EACnC,cAAoC,MAAM,EAC1C,UAAiC,EAAE;IAEnC,yBAAyB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC7C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAkB,CAAC,CAAC;IACxC,MAAM,SAAS,GAAG,MAAM,oBAAoB,CAAC,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;IACjF,IAAI,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,SAAS,EAAE,CAAC,CAAC;AACvF,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,QAAgB;IACjD,4EAA4E;IAC5E,oDAAoD;IACpD,MAAM,IAAI,GAAG,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC;QAC7D,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACvB,CAAC,CAAC,QAAQ,CAAC;IACb,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,IAAI,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,OAAO,uDAAuD,CAAC;QACjE,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,iBAAiB,IAAI,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;YACxE,OAAO,uDAAuD,CAAC;QACjE,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,YAAY,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAC/C,IAAI,YAAY,IAAI,aAAa,CAAC,YAAY,CAAC,EAAE,CAAC;QAChD,OAAO,uDAAuD,CAAC;IACjE,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,QAAgB;IACpD,OAAO,0BAA0B,CAAC,QAAQ,CAAC,IAAI,kBAAkB,CAAC,QAAQ,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,QAAgB;IACzD,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IACrC,IAAI,KAAK,KAAK,0BAA0B,IAAI,KAAK,CAAC,QAAQ,CAAC,2BAA2B,CAAC,EAAE,CAAC;QACxF,OAAO,oCAAoC,CAAC;IAC9C,CAAC;IACD,uEAAuE;IACvE,wEAAwE;IACxE,0EAA0E;IAC1E,IAAI,KAAK,KAAK,iBAAiB,IAAI,KAAK,KAAK,iBAAiB,EAAE,CAAC;QAC/D,OAAO,uCAAuC,CAAC;IACjD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,QAAgB;IACjD,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IACrC,IAAI,KAAK,KAAK,WAAW,IAAI,KAAK,KAAK,uBAAuB,EAAE,CAAC;QAC/D,OAAO,oCAAoC,CAAC;IAC9C,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,OAAe;IAC3C,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;IACjF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC,IAAI,OAAO,GAAG,GAAG,CAAC,EAAE,CAAC;QAC3G,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1B,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1B,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1B,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAE1B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,yBAAyB;IAChE,IAAI,CAAC,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC,CAAa,aAAa;IACpD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC,CAAC,kDAAkD;IAC3F,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC,CAAC,gBAAgB;IAClE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC,CAAC,iBAAiB;IAC1D,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,GAAG;QAAE,OAAO,IAAI,CAAC,CAAC,kCAAkC;IACrF,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,yCAAyC;IAC3F,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,0BAA0B;IAC5E,4EAA4E;IAC5E,2EAA2E;IAC3E,2EAA2E;IAC3E,2EAA2E;IAC3E,yEAAyE;IACzE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC,CAAC,6BAA6B;IAClF,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC,CAAC,4BAA4B;IAChF,IAAI,CAAC,IAAI,GAAG;QAAE,OAAO,IAAI,CAAC,CAAC,+CAA+C;IAC1E,kCAAkC;IAClC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC,CAAC,YAAY;IAC/E,KAAK,CAAC,CAAC;IAAC,KAAK,CAAC,CAAC;IACf,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,OAAe;IAC3C,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IAEpC,0DAA0D;IAC1D,IAAI,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QACrD,IAAI,MAAM,IAAI,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;YACpC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,iFAAiF;QACjF,0EAA0E;QAC1E,IAAI,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,oDAAoD;IACpD,IAAI,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,4CAA4C;IAC5C,IAAI,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC;YACxC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC;YACjC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACnC,IAAI,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,2CAA2C;IAC3C,IAAI,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAEnD,4BAA4B;IAC5B,IAAI,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEpD,6BAA6B;IAC7B,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAElE,0BAA0B;IAC1B,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAExC,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,oBAAoB,CAAC,OAAe;IAC3C,yEAAyE;IACzE,yEAAyE;IACzE,4DAA4D;IAC5D,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACzC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC3C,MAAM,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC3C,MAAM,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC3C,MAAM,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC3C,IAAI,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QACtD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,mBAAmB,CAAC,OAAe;IAC1C,MAAM,KAAK,GAAG,+BAA+B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC5D,OAAO,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC;AAC7B,CAAC"}

package/dist/gateway/src/services/notification-dedupe.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Terminal- and hook-notification deduplication.
+ *
+ * A single CLI prompt can surface through two channels: the CLI-native hook
+ * (HTTP) and PTY output interception (OSC 9/99/777, bell). Both land as
+ * `claude_notification` events, so within a short window the second copy of
+ * the same logical notification is dropped.
+ *
+ * Bucket rules (per session):
+ *   - "attention" (terminal bell for Claude/Kimi) shares a bucket with
+ *     "permission_prompt" — both mean "the CLI is waiting on the user".
+ *   - "task_completed" and "task_failed" are independent buckets.
+ *   - Every other type is its own bucket.
+ *
+ * Source semantics:
+ *   - A terminal notification is dropped when ANY source already recorded an
+ *     entry in the bucket within the window (hooks are the primary channel;
+ *     the terminal copy is the echo).
+ *   - A hook notification is dropped only when an earlier HOOK entry exists —
+ *     terminal output must never suppress a hook.
+ */
+export type NotificationSource = "hook" | "terminal";
+/** Default suppression window shared by the hook and terminal channels. */
+export declare const notificationDedupeWindowMs = 10000;
+export interface NotificationDeduperOptions {
+    /** Suppression window in milliseconds. Default: notificationDedupeWindowMs. */
+    windowMs?: number;
+    /** Maximum active identity/type buckets. Oldest recorded bucket is evicted. */
+    maxBuckets?: number;
+}
+export interface NotificationDeduper {
+    shouldDrop(sessionId: string, notificationType: string, source: NotificationSource, nowMs: number): boolean;
+    record(sessionId: string, notificationType: string, source: NotificationSource, nowMs: number): void;
+}
+export declare function createNotificationDeduper(options?: NotificationDeduperOptions): NotificationDeduper & {
+    readonly size: number;
+};
+/** Process-wide deduper shared by the hook route and terminal ingestion. */
+export declare const defaultNotificationDeduper: NotificationDeduper & {
+    readonly size: number;
+};

package/dist/gateway/src/services/notification-dedupe.js

@@ -0,0 +1,86 @@
+/**
+ * Terminal- and hook-notification deduplication.
+ *
+ * A single CLI prompt can surface through two channels: the CLI-native hook
+ * (HTTP) and PTY output interception (OSC 9/99/777, bell). Both land as
+ * `claude_notification` events, so within a short window the second copy of
+ * the same logical notification is dropped.
+ *
+ * Bucket rules (per session):
+ *   - "attention" (terminal bell for Claude/Kimi) shares a bucket with
+ *     "permission_prompt" — both mean "the CLI is waiting on the user".
+ *   - "task_completed" and "task_failed" are independent buckets.
+ *   - Every other type is its own bucket.
+ *
+ * Source semantics:
+ *   - A terminal notification is dropped when ANY source already recorded an
+ *     entry in the bucket within the window (hooks are the primary channel;
+ *     the terminal copy is the echo).
+ *   - A hook notification is dropped only when an earlier HOOK entry exists —
+ *     terminal output must never suppress a hook.
+ */
+/** Default suppression window shared by the hook and terminal channels. */
+export const notificationDedupeWindowMs = 10_000;
+export function createNotificationDeduper(options = {}) {
+    const windowMs = options.windowMs ?? notificationDedupeWindowMs;
+    const maxBuckets = options.maxBuckets ?? 4_096;
+    if (!Number.isInteger(maxBuckets) || maxBuckets < 1)
+        throw new RangeError("maxBuckets must be a positive integer");
+    const entries = new Map();
+    function keyFor(sessionId, notificationType) {
+        return `${sessionId}\u0000${dedupeBucket(notificationType)}`;
+    }
+    function prune(list, nowMs) {
+        const cutoff = nowMs - windowMs;
+        return list.filter((entry) => entry.at >= cutoff);
+    }
+    return {
+        get size() { return entries.size; },
+        shouldDrop(sessionId, notificationType, source, nowMs) {
+            const list = entries.get(keyFor(sessionId, notificationType));
+            if (!list)
+                return false;
+            for (const entry of list) {
+                if (entry.at < nowMs - windowMs)
+                    continue;
+                if (source === "terminal" || entry.source === "hook")
+                    return true;
+            }
+            return false;
+        },
+        record(sessionId, notificationType, source, nowMs) {
+            // Sweep all identities, including native turns which may never recur.
+            for (const [storedKey, storedList] of entries) {
+                const active = prune(storedList, nowMs);
+                if (active.length)
+                    entries.set(storedKey, active);
+                else
+                    entries.delete(storedKey);
+            }
+            const key = keyFor(sessionId, notificationType);
+            // Only the latest timestamp for each source affects suppression.
+            const list = (entries.get(key) ?? []).filter((entry) => entry.source !== source);
+            list.push({ source, at: nowMs });
+            entries.delete(key);
+            entries.set(key, list);
+            while (entries.size > maxBuckets) {
+                const oldest = entries.keys().next().value;
+                if (oldest === undefined)
+                    break;
+                entries.delete(oldest);
+            }
+        }
+    };
+}
+/**
+ * "attention" and "permission_prompt" coalesce; everything else is its own
+ * bucket (task_completed, task_failed, ...).
+ */
+function dedupeBucket(notificationType) {
+    if (notificationType === "attention")
+        return "permission_prompt";
+    return notificationType;
+}
+/** Process-wide deduper shared by the hook route and terminal ingestion. */
+export const defaultNotificationDeduper = createNotificationDeduper();
+//# sourceMappingURL=notification-dedupe.js.map

package/dist/gateway/src/services/notification-dedupe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"notification-dedupe.js","sourceRoot":"","sources":["../../../src/services/notification-dedupe.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAIH,2EAA2E;AAC3E,MAAM,CAAC,MAAM,0BAA0B,GAAG,MAAM,CAAC;AAmBjD,MAAM,UAAU,yBAAyB,CAAC,UAAsC,EAAE;IAChF,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,0BAA0B,CAAC;IAChE,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,KAAK,CAAC;IAC/C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,uCAAuC,CAAC,CAAC;IACnH,MAAM,OAAO,GAAG,IAAI,GAAG,EAAyB,CAAC;IAEjD,SAAS,MAAM,CAAC,SAAiB,EAAE,gBAAwB;QACzD,OAAO,GAAG,SAAS,SAAS,YAAY,CAAC,gBAAgB,CAAC,EAAE,CAAC;IAC/D,CAAC;IAED,SAAS,KAAK,CAAC,IAAmB,EAAE,KAAa;QAC/C,MAAM,MAAM,GAAG,KAAK,GAAG,QAAQ,CAAC;QAChC,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,IAAI,MAAM,CAAC,CAAC;IACpD,CAAC;IAED,OAAO;QACL,IAAI,IAAI,KAAK,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QACnC,UAAU,CAAC,SAAS,EAAE,gBAAgB,EAAE,MAAM,EAAE,KAAK;YACnD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC,CAAC;YAC9D,IAAI,CAAC,IAAI;gBAAE,OAAO,KAAK,CAAC;YACxB,KAAK,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC;gBACzB,IAAI,KAAK,CAAC,EAAE,GAAG,KAAK,GAAG,QAAQ;oBAAE,SAAS;gBAC1C,IAAI,MAAM,KAAK,UAAU,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM;oBAAE,OAAO,IAAI,CAAC;YACpE,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,CAAC,SAAS,EAAE,gBAAgB,EAAE,MAAM,EAAE,KAAK;YAC/C,sEAAsE;YACtE,KAAK,MAAM,CAAC,SAAS,EAAE,UAAU,CAAC,IAAI,OAAO,EAAE,CAAC;gBAC9C,MAAM,MAAM,GAAG,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;gBACxC,IAAI,MAAM,CAAC,MAAM;oBAAE,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;;oBAC7C,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACjC,CAAC;YACD,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;YAChD,iEAAiE;YACjE,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;YACjF,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YACjC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACpB,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACvB,OAAO,OAAO,CAAC,IAAI,GAAG,UAAU,EAAE,CAAC;gBACjC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;gBAC3C,IAAI,MAAM,KAAK,SAAS;oBAAE,MAAM;gBAChC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,YAAY,CAAC,gBAAwB;IAC5C,IAAI,gBAAgB,KAAK,WAAW;QAAE,OAAO,mBAAmB,CAAC;IACjE,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAED,4EAA4E;AAC5E,MAAM,CAAC,MAAM,0BAA0B,GAAG,yBAAyB,EAAE,CAAC"}

package/dist/gateway/src/services/notification-events.js

@@ -1,4 +1,20 @@
-import { NotificationRepository } from "../db/repositories/notification-repository.js";
+import { NotificationService } from './notification-service.js';
+import { redactAgentText } from './agent/redaction.js';
+import { nativePromptIdentity, SessionNotificationPromptRepository } from '../db/repositories/session-notification-prompt-repository.js';
+/**
+ * Adapters that have their own `notifications.<adapter>Permission*` titles in
+ * the web catalogue. An adapter missing from this set falls back to the Claude
+ * wording — which used to be silent, because the previous if-chain and the key
+ * catalogue were maintained separately and drifted.
+ */
+const NOTIFICATION_TITLE_ADAPTERS = new Set([
+    "claude",
+    "opencode",
+    "codex",
+    "kimi",
+    "pi",
+    "mcode"
+]);
 /** Only these CLI hook notification types become in-app notifications. */
 const NOTIFIED_CLI_NOTIFICATION_TYPES = new Set([
     "permission_prompt",
@@ -6,7 +22,8 @@ const NOTIFIED_CLI_NOTIFICATION_TYPES = new Set([
     "task_completed",
     "task_interrupted",
     "task_failed",
-    "session_ended"
+    "session_ended",
+    "attention"
 ]);
 export function attachNotificationPersistence(options) {
     options.eventBus.on("event", (event) => {
@@ -14,7 +31,19 @@ export function attachNotificationPersistence(options) {
         if (!input)
             return;
         try {
-            const notification = new NotificationRepository(options.db, event.userId).create(input);
+            if (event.type === 'claude_notification') {
+                try {
+                    const native = nativePromptIdentity(event.nativeSessionId, event.nativeTurnId);
+                    const prompt = event.cliSummary?.identityQuality === 'exact_turn' ? event.cliSummary.request
+                        : native?.turnId && !event.cliSummary && !event.nativeSubagent
+                            ? new SessionNotificationPromptRepository(options.db, event.userId).find(event.sessionId, native) : undefined;
+                    if (prompt && input.payload && typeof input.payload === 'object') {
+                        input.payload = { ...input.payload, last_prompt: prompt };
+                    }
+                }
+                catch { /* Optional identity enrichment must not suppress lifecycle notifications. */ }
+            }
+            const notification = new NotificationService(options.db, event.userId).create(input);
             if (isPersistableNotificationEvent(event)) {
                 event.notificationId = notification.id;
                 event.notificationCreatedAt = notification.createdAt;
@@ -36,7 +65,8 @@ export function notificationInputFromEvent(event) {
             }
             const adapter = event.adapter ?? "claude";
             const titleKey = notificationTitleKey(event.notificationType, adapter);
-            const message = event.toolName ? `${event.toolName}: ${event.message}` : event.message;
+            const safe = redactAgentText;
+            const message = safe(event.toolName ? `${event.toolName}: ${event.message}` : event.message);
             return {
                 type: event.type,
                 titleKey,
@@ -45,15 +75,19 @@ export function notificationInputFromEvent(event) {
                 sessionId: event.sessionId,
                 payload: {
                     session_id: event.sessionId,
+                    ...(event.nativeSessionId ? { native_session_id: event.nativeSessionId } : {}),
+                    ...(event.nativeTurnId ? { native_turn_id: event.nativeTurnId } : {}),
+                    ...(event.nativeSubagent ? { native_subagent: true } : {}),
                     ...(event.projectId ? { project_id: event.projectId } : {}),
-                    ...(event.projectName ? { project_name: event.projectName } : {}),
-                    ...(event.sessionName ? { session_name: event.sessionName } : {}),
-                    hook_event_name: event.hookEventName,
-                    notification_type: event.notificationType,
-                    message: event.message,
+                    ...(event.projectName ? { project_name: safe(event.projectName) } : {}),
+                    ...(event.sessionName ? { session_name: safe(event.sessionName) } : {}),
+                    hook_event_name: safe(event.hookEventName),
+                    notification_type: safe(event.notificationType),
+                    message: safe(event.message),
                     adapter,
-                    ...(event.title ? { title: event.title } : {}),
-                    ...(event.toolName ? { tool_name: event.toolName } : {})
+                    ...(event.cliSummary ? { cli_summary: event.cliSummary } : {}),
+                    ...(event.title ? { title: safe(event.title) } : {}),
+                    ...(event.toolName ? { tool_name: safe(event.toolName) } : {})
                 }
             };
         }
@@ -62,15 +96,15 @@ export function notificationInputFromEvent(event) {
                 type: event.type,
                 category: "app_action",
                 titleKey: event.titleKey,
-                message: event.message,
+                message: redactAgentText(event.message),
                 href: "/models",
                 payload: {
                     action: event.action,
                     status: event.status,
-                    message: event.message,
+                    message: redactAgentText(event.message),
                     ...(event.adapter ? { adapter: event.adapter } : {}),
                     ...(event.providerId ? { provider_id: event.providerId } : {}),
-                    ...(event.providerName ? { provider_name: event.providerName } : {})
+                    ...(event.providerName ? { provider_name: redactAgentText(event.providerName) } : {})
                 }
             };
         case "session_created":
@@ -84,26 +118,10 @@ export function notificationInputFromEvent(event) {
 }
 function notificationTitleKey(notificationType, adapter) {
     if (notificationType === "permission_prompt") {
-        if (adapter === "opencode")
-            return "notifications.opencodePermissionRequest";
-        if (adapter === "codex")
-            return "notifications.codexPermissionRequest";
-        if (adapter === "kimi")
-            return "notifications.kimiPermissionRequest";
-        if (adapter === "pi")
-            return "notifications.piPermissionRequest";
-        return "notifications.claudePermissionRequest";
+        return `notifications.${NOTIFICATION_TITLE_ADAPTERS.has(adapter) ? adapter : "claude"}PermissionRequest`;
     }
     if (notificationType === "permission_denied") {
-        if (adapter === "opencode")
-            return "notifications.opencodePermissionDenied";
-        if (adapter === "codex")
-            return "notifications.codexPermissionDenied";
-        if (adapter === "kimi")
-            return "notifications.kimiPermissionDenied";
-        if (adapter === "pi")
-            return "notifications.piPermissionDenied";
-        return "notifications.claudePermissionDenied";
+        return `notifications.${NOTIFICATION_TITLE_ADAPTERS.has(adapter) ? adapter : "claude"}PermissionDenied`;
     }
     if (notificationType === "task_completed")
         return "notifications.taskCompleted";

package/dist/gateway/src/services/notification-events.js.map

@@ -1 +1 @@
-{"version":3,"file":"notification-events.js","sourceRoot":"","sources":["../../../src/services/notification-events.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAgC,MAAM,+CAA+C,CAAC;AAWrH,0EAA0E;AAC1E,MAAM,+BAA+B,GAAG,IAAI,GAAG,CAAC;IAC9C,mBAAmB;IACnB,mBAAmB;IACnB,gBAAgB;IAChB,kBAAkB;IAClB,aAAa;IACb,eAAe;CAChB,CAAC,CAAC;AAOH,MAAM,UAAU,6BAA6B,CAAC,OAAuC;IACnF,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAuB,EAAE,EAAE;QACvD,MAAM,KAAK,GAAG,0BAA0B,CAAC,KAAK,CAAC,CAAC;QAChD,IAAI,CAAC,KAAK;YAAE,OAAO;QAEnB,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,IAAI,sBAAsB,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACxF,IAAI,8BAA8B,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC1C,KAAK,CAAC,cAAc,GAAG,YAAY,CAAC,EAAE,CAAC;gBACvC,KAAK,CAAC,qBAAqB,GAAG,YAAY,CAAC,SAAS,CAAC;YACvD,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,qEAAqE;QACvE,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,8BAA8B,CAAC,KAAuB;IAC7D,OAAO,KAAK,CAAC,IAAI,KAAK,qBAAqB,IAAI,KAAK,CAAC,IAAI,KAAK,yBAAyB,CAAC;AAC1F,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,KAAuB;IAChE,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,qBAAqB,CAAC,CAAC,CAAC;YAC3B,IAAI,CAAC,+BAA+B,CAAC,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBACjE,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,QAAQ,CAAC;YAC1C,MAAM,QAAQ,GAAG,oBAAoB,CAAC,KAAK,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC;YACvE,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC;YACvF,OAAO;gBACL,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,QAAQ;gBACR,OAAO;gBACP,IAAI,EAAE,aAAa,kBAAkB,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE;gBACxD,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,OAAO,EAAE;oBACP,UAAU,EAAE,KAAK,CAAC,SAAS;oBAC3B,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC3D,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACjE,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACjE,eAAe,EAAE,KAAK,CAAC,aAAa;oBACpC,iBAAiB,EAAE,KAAK,CAAC,gBAAgB;oBACzC,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,OAAO;oBACP,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC9C,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACzD;aACF,CAAC;QACJ,CAAC;QACD,KAAK,yBAAyB;YAC5B,OAAO;gBACL,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,QAAQ,EAAE,YAAY;gBACtB,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,IAAI,EAAE,SAAS;gBACf,OAAO,EAAE;oBACP,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACpD,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC9D,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACrE;aACF,CAAC;QACJ,KAAK,iBAAiB,CAAC;QACvB,KAAK,wBAAwB,CAAC;QAC9B,KAAK,iBAAiB,CAAC;QACvB,KAAK,kBAAkB,CAAC;QACxB,KAAK,qBAAqB,CAAC;QAC3B,KAAK,OAAO;YACV,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,gBAAwB,EAAE,OAAe;IACrE,IAAI,gBAAgB,KAAK,mBAAmB,EAAE,CAAC;QAC7C,IAAI,OAAO,KAAK,UAAU;YAAE,OAAO,yCAAyC,CAAC;QAC7E,IAAI,OAAO,KAAK,OAAO;YAAE,OAAO,sCAAsC,CAAC;QACvE,IAAI,OAAO,KAAK,MAAM;YAAE,OAAO,qCAAqC,CAAC;QACrE,IAAI,OAAO,KAAK,IAAI;YAAE,OAAO,mCAAmC,CAAC;QACjE,OAAO,uCAAuC,CAAC;IACjD,CAAC;IACD,IAAI,gBAAgB,KAAK,mBAAmB,EAAE,CAAC;QAC7C,IAAI,OAAO,KAAK,UAAU;YAAE,OAAO,wCAAwC,CAAC;QAC5E,IAAI,OAAO,KAAK,OAAO;YAAE,OAAO,qCAAqC,CAAC;QACtE,IAAI,OAAO,KAAK,MAAM;YAAE,OAAO,oCAAoC,CAAC;QACpE,IAAI,OAAO,KAAK,IAAI;YAAE,OAAO,kCAAkC,CAAC;QAChE,OAAO,sCAAsC,CAAC;IAChD,CAAC;IACD,IAAI,gBAAgB,KAAK,gBAAgB;QAAE,OAAO,6BAA6B,CAAC;IAChF,IAAI,gBAAgB,KAAK,aAAa;QAAE,OAAO,0BAA0B,CAAC;IAC1E,IAAI,gBAAgB,KAAK,eAAe;QAAE,OAAO,4BAA4B,CAAC;IAC9E,OAAO,+BAA+B,CAAC;AACzC,CAAC"}
+{"version":3,"file":"notification-events.js","sourceRoot":"","sources":["../../../src/services/notification-events.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAQhE,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,oBAAoB,EAAE,mCAAmC,EAAE,MAAM,8DAA8D,CAAC;AASzI;;;;;GAKG;AACH,MAAM,2BAA2B,GAAwB,IAAI,GAAG,CAAC;IAC/D,QAAQ;IACR,UAAU;IACV,OAAO;IACP,MAAM;IACN,IAAI;IACJ,OAAO;CACR,CAAC,CAAC;AAIH,0EAA0E;AAC1E,MAAM,+BAA+B,GAAG,IAAI,GAAG,CAAC;IAC9C,mBAAmB;IACnB,mBAAmB;IACnB,gBAAgB;IAChB,kBAAkB;IAClB,aAAa;IACb,eAAe;IACf,WAAW;CACZ,CAAC,CAAC;AAOH,MAAM,UAAU,6BAA6B,CAAC,OAAuC;IACnF,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAuB,EAAE,EAAE;QACvD,MAAM,KAAK,GAAG,0BAA0B,CAAC,KAAK,CAAC,CAAC;QAChD,IAAI,CAAC,KAAK;YAAE,OAAO;QAEnB,IAAI,CAAC;YACH,IAAI,KAAK,CAAC,IAAI,KAAK,qBAAqB,EAAE,CAAC;gBACzC,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,CAAC,eAAe,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;oBAC/E,MAAM,MAAM,GAAG,KAAK,CAAC,UAAU,EAAE,eAAe,KAAK,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO;wBAC1F,CAAC,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,IAAI,CAAC,KAAK,CAAC,cAAc;4BAC5D,CAAC,CAAC,IAAI,mCAAmC,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;oBAClH,IAAI,MAAM,IAAI,KAAK,CAAC,OAAO,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;wBACjE,KAAK,CAAC,OAAO,GAAG,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC;oBAC5D,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC,CAAC,6EAA6E,CAAC,CAAC;YAC3F,CAAC;YACD,MAAM,YAAY,GAAG,IAAI,mBAAmB,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACrF,IAAI,8BAA8B,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC1C,KAAK,CAAC,cAAc,GAAG,YAAY,CAAC,EAAE,CAAC;gBACvC,KAAK,CAAC,qBAAqB,GAAG,YAAY,CAAC,SAAS,CAAC;YACvD,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,qEAAqE;QACvE,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,8BAA8B,CAAC,KAAuB;IAC7D,OAAO,KAAK,CAAC,IAAI,KAAK,qBAAqB,IAAI,KAAK,CAAC,IAAI,KAAK,yBAAyB,CAAC;AAC1F,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,KAAuB;IAChE,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,qBAAqB,CAAC,CAAC,CAAC;YAC3B,IAAI,CAAC,+BAA+B,CAAC,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBACjE,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,QAAQ,CAAC;YAC1C,MAAM,QAAQ,GAAG,oBAAoB,CAAC,KAAK,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC;YACvE,MAAM,IAAI,GAAG,eAAe,CAAC;YAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC7F,OAAO;gBACL,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,QAAQ;gBACR,OAAO;gBACP,IAAI,EAAE,aAAa,kBAAkB,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE;gBACxD,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,OAAO,EAAE;oBACP,UAAU,EAAE,KAAK,CAAC,SAAS;oBAC3B,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,KAAK,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC9E,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACrE,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC1D,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC3D,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACvE,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACvE,eAAe,EAAE,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC;oBAC1C,iBAAiB,EAAE,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC;oBAC/C,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;oBAC5B,OAAO;oBACP,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC9D,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACpD,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC/D;aACF,CAAC;QACJ,CAAC;QACD,KAAK,yBAAyB;YAC5B,OAAO;gBACL,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,QAAQ,EAAE,YAAY;gBACtB,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,OAAO,EAAE,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC;gBACvC,IAAI,EAAE,SAAS;gBACf,OAAO,EAAE;oBACP,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,OAAO,EAAE,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC;oBACvC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACpD,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC9D,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,eAAe,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACtF;aACF,CAAC;QACJ,KAAK,iBAAiB,CAAC;QACvB,KAAK,wBAAwB,CAAC;QAC9B,KAAK,iBAAiB,CAAC;QACvB,KAAK,kBAAkB,CAAC;QACxB,KAAK,qBAAqB,CAAC;QAC3B,KAAK,OAAO;YACV,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,gBAAwB,EAAE,OAAe;IACrE,IAAI,gBAAgB,KAAK,mBAAmB,EAAE,CAAC;QAC7C,OAAO,iBAAiB,2BAA2B,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,mBAAqC,CAAC;IAC7H,CAAC;IACD,IAAI,gBAAgB,KAAK,mBAAmB,EAAE,CAAC;QAC7C,OAAO,iBAAiB,2BAA2B,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,kBAAoC,CAAC;IAC5H,CAAC;IACD,IAAI,gBAAgB,KAAK,gBAAgB;QAAE,OAAO,6BAA6B,CAAC;IAChF,IAAI,gBAAgB,KAAK,aAAa;QAAE,OAAO,0BAA0B,CAAC;IAC1E,IAAI,gBAAgB,KAAK,eAAe;QAAE,OAAO,4BAA4B,CAAC;IAC9E,OAAO,+BAA+B,CAAC;AACzC,CAAC"}

package/dist/gateway/src/services/notification-service.d.ts

@@ -0,0 +1,9 @@
+import type { Database } from '../db/types.js';
+import { type CreateNotificationInput } from '../db/repositories/notification-repository.js';
+/** All production notification producers use this atomic in-app + optional delivery boundary. */
+export declare class NotificationService {
+    private readonly db;
+    private readonly userId;
+    constructor(db: Database, userId: string);
+    create(input: CreateNotificationInput): import("../db/repositories/notification-repository.js").Notification;
+}

package/dist/gateway/src/services/notification-service.js

@@ -0,0 +1,19 @@
+import { NotificationRepository } from '../db/repositories/notification-repository.js';
+import { FeishuNotifications } from './notifications/feishu-notifications.js';
+/** All production notification producers use this atomic in-app + optional delivery boundary. */
+export class NotificationService {
+    db;
+    userId;
+    constructor(db, userId) {
+        this.db = db;
+        this.userId = userId;
+    }
+    create(input) {
+        return this.db.transaction(() => {
+            const notification = new NotificationRepository(this.db, this.userId).create(input);
+            new FeishuNotifications(this.db, this.userId).enqueue(notification);
+            return notification;
+        }).immediate();
+    }
+}
+//# sourceMappingURL=notification-service.js.map