grok-cli-to-openai-compatible 1.2.0

package/dist/services/document.service.js

@@ -0,0 +1,206 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.documentService = exports.DocumentService = void 0;
+const node_crypto_1 = require("node:crypto");
+const node_fs_1 = require("node:fs");
+const node_path_1 = __importDefault(require("node:path"));
+const database_1 = require("../config/database");
+const constants_1 = require("../config/constants");
+const env_1 = require("../config/env");
+const exception_factory_1 = require("../exceptions/exception.factory");
+const id_1 = require("../utils/id");
+const path_safe_1 = require("../utils/path-safe");
+const audit_service_1 = require("./audit.service");
+const encryption_service_1 = require("./encryption.service");
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+function toPrismaBytes(buf) {
+    return Buffer.from(buf);
+}
+class DocumentService {
+    async ensureStorageDir() {
+        await node_fs_1.promises.mkdir(env_1.env.storageDir, { recursive: true });
+    }
+    async upload(input) {
+        const originalName = (0, path_safe_1.sanitizeFilename)(input.originalName);
+        const ext = node_path_1.default.extname(originalName).toLowerCase();
+        const mime = (input.mimeType || 'application/octet-stream').toLowerCase();
+        if (input.buffer.length > env_1.env.UPLOAD_MAX_BYTES) {
+            throw exception_factory_1.ExceptionFactory.documentTooLarge(env_1.env.UPLOAD_MAX_BYTES);
+        }
+        if (!constants_1.ALLOWED_UPLOAD_EXTENSIONS.has(ext) &&
+            !constants_1.ALLOWED_UPLOAD_MIME_TYPES.has(mime)) {
+            throw exception_factory_1.ExceptionFactory.documentTypeNotAllowed(`Extension "${ext}" / MIME "${mime}" is not allowed`);
+        }
+        const checksumSha256 = (0, node_crypto_1.createHash)('sha256').update(input.buffer).digest('hex');
+        const encrypted = encryption_service_1.encryptionService.encrypt(input.buffer);
+        const id = (0, id_1.createId)();
+        const useFilesystem = input.buffer.length > env_1.env.DOCUMENT_DB_MAX_BYTES;
+        let storagePath = null;
+        // any: Prisma Bytes vs Node Buffer typing (TS 5.x ArrayBufferLike mismatch)
+        let contentCiphertext = null;
+        let contentIv = null;
+        let contentTag = null;
+        let storageType = constants_1.STORAGE_TYPES.DB;
+        if (useFilesystem) {
+            await this.ensureStorageDir();
+            const rel = (0, path_safe_1.ensureRelativeStoragePath)(id);
+            const fullPath = node_path_1.default.join(env_1.env.storageDir, `${rel}.enc`);
+            // Store iv + tag + ciphertext together
+            const packed = Buffer.concat([
+                Buffer.from([encrypted.iv.length]),
+                encrypted.iv,
+                Buffer.from([encrypted.tag.length]),
+                encrypted.tag,
+                encrypted.ciphertext,
+            ]);
+            await node_fs_1.promises.writeFile(fullPath, packed, { mode: 0o600 });
+            storagePath = `${rel}.enc`;
+            storageType = constants_1.STORAGE_TYPES.FILESYSTEM;
+        }
+        else {
+            contentCiphertext = toPrismaBytes(encrypted.ciphertext);
+            contentIv = toPrismaBytes(encrypted.iv);
+            contentTag = toPrismaBytes(encrypted.tag);
+        }
+        const created = await database_1.prisma.document.create({
+            data: {
+                id,
+                apiKeyId: input.apiKeyId,
+                originalName,
+                mimeType: mime,
+                sizeBytes: input.buffer.length,
+                storageType,
+                contentCiphertext,
+                contentIv,
+                contentTag,
+                storagePath,
+                checksumSha256,
+            },
+        });
+        await audit_service_1.auditService.log({
+            apiKeyId: input.apiKeyId,
+            action: constants_1.AUDIT_ACTIONS.DOCUMENT_UPLOAD,
+            resource: 'document',
+            resourceId: created.id,
+            meta: {
+                originalName,
+                mimeType: mime,
+                sizeBytes: input.buffer.length,
+                storageType,
+            },
+            ip: input.ip,
+        });
+        return this.toPublic(created);
+    }
+    async list(apiKeyId, limit = 50, offset = 0) {
+        const where = { apiKeyId, deletedAt: null };
+        const [rows, total] = await Promise.all([
+            database_1.prisma.document.findMany({
+                where,
+                orderBy: { createdAt: 'desc' },
+                take: limit,
+                skip: offset,
+            }),
+            database_1.prisma.document.count({ where }),
+        ]);
+        return { items: rows.map((r) => this.toPublic(r)), total };
+    }
+    async getOwned(apiKeyId, documentId) {
+        const doc = await database_1.prisma.document.findFirst({
+            where: { id: documentId, apiKeyId, deletedAt: null },
+        });
+        if (!doc) {
+            throw exception_factory_1.ExceptionFactory.notFound('Document');
+        }
+        return doc;
+    }
+    async getPublic(apiKeyId, documentId) {
+        const doc = await this.getOwned(apiKeyId, documentId);
+        return this.toPublic(doc);
+    }
+    async readDecryptedContent(apiKeyId, documentId) {
+        const doc = await this.getOwned(apiKeyId, documentId);
+        if (doc.storageType === constants_1.STORAGE_TYPES.FILESYSTEM && doc.storagePath) {
+            const fullPath = node_path_1.default.join(env_1.env.storageDir, node_path_1.default.basename(doc.storagePath));
+            const packed = await node_fs_1.promises.readFile(fullPath);
+            let offset = 0;
+            const ivLen = packed[offset++];
+            const iv = packed.subarray(offset, offset + ivLen);
+            offset += ivLen;
+            const tagLen = packed[offset++];
+            const tag = packed.subarray(offset, offset + tagLen);
+            offset += tagLen;
+            const ciphertext = packed.subarray(offset);
+            return encryption_service_1.encryptionService.decrypt({ ciphertext, iv, tag });
+        }
+        if (!doc.contentCiphertext || !doc.contentIv || !doc.contentTag) {
+            throw exception_factory_1.ExceptionFactory.internal('Document ciphertext missing');
+        }
+        return encryption_service_1.encryptionService.decrypt({
+            ciphertext: Buffer.from(doc.contentCiphertext),
+            iv: Buffer.from(doc.contentIv),
+            tag: Buffer.from(doc.contentTag),
+        });
+    }
+    async softDelete(apiKeyId, documentId, ip) {
+        const doc = await this.getOwned(apiKeyId, documentId);
+        await database_1.prisma.document.update({
+            where: { id: doc.id },
+            data: { deletedAt: new Date() },
+        });
+        if (doc.storageType === constants_1.STORAGE_TYPES.FILESYSTEM && doc.storagePath) {
+            const fullPath = node_path_1.default.join(env_1.env.storageDir, node_path_1.default.basename(doc.storagePath));
+            await node_fs_1.promises.unlink(fullPath).catch(() => undefined);
+        }
+        await audit_service_1.auditService.log({
+            apiKeyId,
+            action: constants_1.AUDIT_ACTIONS.DOCUMENT_DELETE,
+            resource: 'document',
+            resourceId: documentId,
+            meta: { originalName: doc.originalName },
+            ip,
+        });
+    }
+    async buildContextFromDocuments(apiKeyId, documentIds, maxChars) {
+        if (documentIds.length === 0)
+            return '';
+        const parts = [];
+        let used = 0;
+        for (const id of documentIds) {
+            const doc = await this.getOwned(apiKeyId, id);
+            const buf = await this.readDecryptedContent(apiKeyId, id);
+            let text = buf.toString('utf8');
+            // Skip clearly binary garbage for context
+            if (text.includes('\u0000')) {
+                text = `[binary file: ${doc.originalName}, ${doc.sizeBytes} bytes, sha256=${doc.checksumSha256}]`;
+            }
+            const header = `--- Document: ${doc.originalName} (${doc.id}) ---\n`;
+            const remaining = maxChars - used;
+            if (remaining <= 0)
+                break;
+            const body = header.length + text.length > remaining
+                ? text.slice(0, Math.max(0, remaining - header.length)) + '\n...[truncated]'
+                : text;
+            const chunk = header + body + '\n';
+            parts.push(chunk);
+            used += chunk.length;
+        }
+        return parts.join('\n');
+    }
+    toPublic(doc) {
+        return {
+            id: doc.id,
+            originalName: doc.originalName,
+            mimeType: doc.mimeType,
+            sizeBytes: doc.sizeBytes,
+            checksumSha256: doc.checksumSha256,
+            createdAt: doc.createdAt,
+        };
+    }
+}
+exports.DocumentService = DocumentService;
+exports.documentService = new DocumentService();
+//# sourceMappingURL=document.service.js.map

package/dist/services/document.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"document.service.js","sourceRoot":"","sources":["../../src/services/document.service.ts"],"names":[],"mappings":";;;;;;AAAA,6CAAyC;AACzC,qCAAyC;AACzC,0DAA6B;AAC7B,iDAA4C;AAC5C,mDAK6B;AAC7B,uCAAoC;AAEpC,uEAAmE;AACnE,oCAAuC;AACvC,kDAAiF;AACjF,mDAA+C;AAC/C,6DAAyD;AAEzD,8DAA8D;AAC9D,SAAS,aAAa,CAAC,GAAW;IAChC,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC1B,CAAC;AAED,MAAa,eAAe;IAC1B,KAAK,CAAC,gBAAgB;QACpB,MAAM,kBAAE,CAAC,KAAK,CAAC,SAAG,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAMZ;QACC,MAAM,YAAY,GAAG,IAAA,4BAAgB,EAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAC1D,MAAM,GAAG,GAAG,mBAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,CAAC;QACrD,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,IAAI,0BAA0B,CAAC,CAAC,WAAW,EAAE,CAAC;QAE1E,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,SAAG,CAAC,gBAAgB,EAAE,CAAC;YAC/C,MAAM,oCAAgB,CAAC,gBAAgB,CAAC,SAAG,CAAC,gBAAgB,CAAC,CAAC;QAChE,CAAC;QAED,IACE,CAAC,qCAAyB,CAAC,GAAG,CAAC,GAAG,CAAC;YACnC,CAAC,qCAAyB,CAAC,GAAG,CAAC,IAAI,CAAC,EACpC,CAAC;YACD,MAAM,oCAAgB,CAAC,sBAAsB,CAC3C,cAAc,GAAG,aAAa,IAAI,kBAAkB,CACrD,CAAC;QACJ,CAAC;QAED,MAAM,cAAc,GAAG,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC/E,MAAM,SAAS,GAAG,sCAAiB,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC1D,MAAM,EAAE,GAAG,IAAA,aAAQ,GAAE,CAAC;QACtB,MAAM,aAAa,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,SAAG,CAAC,qBAAqB,CAAC;QAEtE,IAAI,WAAW,GAAkB,IAAI,CAAC;QACtC,4EAA4E;QAC5E,IAAI,iBAAiB,GAAQ,IAAI,CAAC;QAClC,IAAI,SAAS,GAAQ,IAAI,CAAC;QAC1B,IAAI,UAAU,GAAQ,IAAI,CAAC;QAC3B,IAAI,WAAW,GAAW,yBAAa,CAAC,EAAE,CAAC;QAE3C,IAAI,aAAa,EAAE,CAAC;YAClB,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC9B,MAAM,GAAG,GAAG,IAAA,qCAAyB,EAAC,EAAE,CAAC,CAAC;YAC1C,MAAM,QAAQ,GAAG,mBAAI,CAAC,IAAI,CAAC,SAAG,CAAC,UAAU,EAAE,GAAG,GAAG,MAAM,CAAC,CAAC;YACzD,uCAAuC;YACvC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;gBAC3B,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;gBAClC,SAAS,CAAC,EAAE;gBACZ,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBACnC,SAAS,CAAC,GAAG;gBACb,SAAS,CAAC,UAAU;aACrB,CAAC,CAAC;YACH,MAAM,kBAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACtD,WAAW,GAAG,GAAG,GAAG,MAAM,CAAC;YAC3B,WAAW,GAAG,yBAAa,CAAC,UAAU,CAAC;QACzC,CAAC;aAAM,CAAC;YACN,iBAAiB,GAAG,aAAa,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;YACxD,SAAS,GAAG,aAAa,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YACxC,UAAU,GAAG,aAAa,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAC5C,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,iBAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;YAC3C,IAAI,EAAE;gBACJ,EAAE;gBACF,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,YAAY;gBACZ,QAAQ,EAAE,IAAI;gBACd,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM;gBAC9B,WAAW;gBACX,iBAAiB;gBACjB,SAAS;gBACT,UAAU;gBACV,WAAW;gBACX,cAAc;aACf;SACF,CAAC,CAAC;QAEH,MAAM,4BAAY,CAAC,GAAG,CAAC;YACrB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,MAAM,EAAE,yBAAa,CAAC,eAAe;YACrC,QAAQ,EAAE,UAAU;YACpB,UAAU,EAAE,OAAO,CAAC,EAAE;YACtB,IAAI,EAAE;gBACJ,YAAY;gBACZ,QAAQ,EAAE,IAAI;gBACd,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM;gBAC9B,WAAW;aACZ;YACD,EAAE,EAAE,KAAK,CAAC,EAAE;SACb,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,IAAI,CACR,QAAgB,EAChB,KAAK,GAAG,EAAE,EACV,MAAM,GAAG,CAAC;QAEV,MAAM,KAAK,GAAG,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QAC5C,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACtC,iBAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBACvB,KAAK;gBACL,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE;gBAC9B,IAAI,EAAE,KAAK;gBACX,IAAI,EAAE,MAAM;aACb,CAAC;YACF,iBAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC;SACjC,CAAC,CAAC;QACH,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;IAC7D,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,QAAgB,EAAE,UAAkB;QACjD,MAAM,GAAG,GAAG,MAAM,iBAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;YAC1C,KAAK,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE;SACrD,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,oCAAgB,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAC9C,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,QAAgB,EAAE,UAAkB;QAClD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QACtD,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAC,QAAgB,EAAE,UAAkB;QAC7D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAEtD,IAAI,GAAG,CAAC,WAAW,KAAK,yBAAa,CAAC,UAAU,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;YACpE,MAAM,QAAQ,GAAG,mBAAI,CAAC,IAAI,CAAC,SAAG,CAAC,UAAU,EAAE,mBAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC;YAC3E,MAAM,MAAM,GAAG,MAAM,kBAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC3C,IAAI,MAAM,GAAG,CAAC,CAAC;YACf,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,CAAE,CAAC;YAChC,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,KAAK,CAAC,CAAC;YACnD,MAAM,IAAI,KAAK,CAAC;YAChB,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,CAAE,CAAC;YACjC,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC;YACrD,MAAM,IAAI,MAAM,CAAC;YACjB,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC3C,OAAO,sCAAiB,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QAC5D,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,iBAAiB,IAAI,CAAC,GAAG,CAAC,SAAS,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC;YAChE,MAAM,oCAAgB,CAAC,QAAQ,CAAC,6BAA6B,CAAC,CAAC;QACjE,CAAC;QAED,OAAO,sCAAiB,CAAC,OAAO,CAAC;YAC/B,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC;YAC9C,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;YAC9B,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC;SACjC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,QAAgB,EAAE,UAAkB,EAAE,EAAW;QAChE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAEtD,MAAM,iBAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;YAC3B,KAAK,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE;YACrB,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE;SAChC,CAAC,CAAC;QAEH,IAAI,GAAG,CAAC,WAAW,KAAK,yBAAa,CAAC,UAAU,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;YACpE,MAAM,QAAQ,GAAG,mBAAI,CAAC,IAAI,CAAC,SAAG,CAAC,UAAU,EAAE,mBAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC;YAC3E,MAAM,kBAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACnD,CAAC;QAED,MAAM,4BAAY,CAAC,GAAG,CAAC;YACrB,QAAQ;YACR,MAAM,EAAE,yBAAa,CAAC,eAAe;YACrC,QAAQ,EAAE,UAAU;YACpB,UAAU,EAAE,UAAU;YACtB,IAAI,EAAE,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE;YACxC,EAAE;SACH,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,yBAAyB,CAC7B,QAAgB,EAChB,WAAqB,EACrB,QAAgB;QAEhB,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAExC,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,IAAI,IAAI,GAAG,CAAC,CAAC;QAEb,KAAK,MAAM,EAAE,IAAI,WAAW,EAAE,CAAC;YAC7B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YAC9C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YAC1D,IAAI,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAChC,0CAA0C;YAC1C,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC5B,IAAI,GAAG,iBAAiB,GAAG,CAAC,YAAY,KAAK,GAAG,CAAC,SAAS,kBAAkB,GAAG,CAAC,cAAc,GAAG,CAAC;YACpG,CAAC;YAED,MAAM,MAAM,GAAG,iBAAiB,GAAG,CAAC,YAAY,KAAK,GAAG,CAAC,EAAE,SAAS,CAAC;YACrE,MAAM,SAAS,GAAG,QAAQ,GAAG,IAAI,CAAC;YAClC,IAAI,SAAS,IAAI,CAAC;gBAAE,MAAM;YAE1B,MAAM,IAAI,GACR,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,GAAG,SAAS;gBACrC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,kBAAkB;gBAC5E,CAAC,CAAC,IAAI,CAAC;YAEX,MAAM,KAAK,GAAG,MAAM,GAAG,IAAI,GAAG,IAAI,CAAC;YACnC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAClB,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC;QACvB,CAAC;QAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAEO,QAAQ,CAAC,GAOhB;QACC,OAAO;YACL,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,YAAY,EAAE,GAAG,CAAC,YAAY;YAC9B,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,cAAc,EAAE,GAAG,CAAC,cAAc;YAClC,SAAS,EAAE,GAAG,CAAC,SAAS;SACzB,CAAC;IACJ,CAAC;CACF;AAxOD,0CAwOC;AAEY,QAAA,eAAe,GAAG,IAAI,eAAe,EAAE,CAAC"}

package/dist/services/encryption.service.d.ts

@@ -0,0 +1,8 @@
+import type { EncryptedPayload } from '../entities/chat-request.entity';
+export declare class EncryptionService {
+    encrypt(plaintext: string | Buffer): EncryptedPayload;
+    decrypt(payload: EncryptedPayload): Buffer;
+    decryptToString(payload: EncryptedPayload): string;
+}
+export declare const encryptionService: EncryptionService;
+//# sourceMappingURL=encryption.service.d.ts.map

package/dist/services/encryption.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"encryption.service.d.ts","sourceRoot":"","sources":["../../src/services/encryption.service.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AAMxE,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,gBAAgB;IASrD,OAAO,CAAC,OAAO,EAAE,gBAAgB,GAAG,MAAM;IAU1C,eAAe,CAAC,OAAO,EAAE,gBAAgB,GAAG,MAAM;CAGnD;AAED,eAAO,MAAM,iBAAiB,mBAA0B,CAAC"}

package/dist/services/encryption.service.js

@@ -0,0 +1,34 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.encryptionService = exports.EncryptionService = void 0;
+const node_crypto_1 = require("node:crypto");
+const env_1 = require("../config/env");
+const exception_factory_1 = require("../exceptions/exception.factory");
+const ALGO = 'aes-256-gcm';
+const IV_LENGTH = 12;
+class EncryptionService {
+    encrypt(plaintext) {
+        const data = typeof plaintext === 'string' ? Buffer.from(plaintext, 'utf8') : plaintext;
+        const iv = (0, node_crypto_1.randomBytes)(IV_LENGTH);
+        const cipher = (0, node_crypto_1.createCipheriv)(ALGO, env_1.env.encryptionKey, iv);
+        const ciphertext = Buffer.concat([cipher.update(data), cipher.final()]);
+        const tag = cipher.getAuthTag();
+        return { ciphertext, iv, tag };
+    }
+    decrypt(payload) {
+        try {
+            const decipher = (0, node_crypto_1.createDecipheriv)(ALGO, env_1.env.encryptionKey, payload.iv);
+            decipher.setAuthTag(payload.tag);
+            return Buffer.concat([decipher.update(payload.ciphertext), decipher.final()]);
+        }
+        catch {
+            throw exception_factory_1.ExceptionFactory.internal('Failed to decrypt data');
+        }
+    }
+    decryptToString(payload) {
+        return this.decrypt(payload).toString('utf8');
+    }
+}
+exports.EncryptionService = EncryptionService;
+exports.encryptionService = new EncryptionService();
+//# sourceMappingURL=encryption.service.js.map

package/dist/services/encryption.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"encryption.service.js","sourceRoot":"","sources":["../../src/services/encryption.service.ts"],"names":[],"mappings":";;;AAAA,6CAA4E;AAC5E,uCAAoC;AAEpC,uEAAmE;AAEnE,MAAM,IAAI,GAAG,aAAa,CAAC;AAC3B,MAAM,SAAS,GAAG,EAAE,CAAC;AAErB,MAAa,iBAAiB;IAC5B,OAAO,CAAC,SAA0B;QAChC,MAAM,IAAI,GAAG,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACxF,MAAM,EAAE,GAAG,IAAA,yBAAW,EAAC,SAAS,CAAC,CAAC;QAClC,MAAM,MAAM,GAAG,IAAA,4BAAc,EAAC,IAAI,EAAE,SAAG,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;QAC3D,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QACxE,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QAChC,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC;IACjC,CAAC;IAED,OAAO,CAAC,OAAyB;QAC/B,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAA,8BAAgB,EAAC,IAAI,EAAE,SAAG,CAAC,aAAa,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;YACvE,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACjC,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAChF,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,oCAAgB,CAAC,QAAQ,CAAC,wBAAwB,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IAED,eAAe,CAAC,OAAyB;QACvC,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAChD,CAAC;CACF;AAvBD,8CAuBC;AAEY,QAAA,iBAAiB,GAAG,IAAI,iBAAiB,EAAE,CAAC"}

package/dist/services/grok-cli.service.d.ts

@@ -0,0 +1,18 @@
+import type { GrokJsonResult, GrokRunOptions, GrokRunResult, GrokStreamEvent } from '../interfaces/grok.interface';
+export declare class GrokCliService {
+    private active;
+    get activeCount(): number;
+    get maxConcurrent(): number;
+    tryAcquire(): boolean;
+    release(): void;
+    buildArgs(options: GrokRunOptions): string[];
+    runOnce(options: GrokRunOptions): Promise<GrokRunResult>;
+    stream(options: GrokRunOptions): AsyncGenerator<GrokStreamEvent>;
+    isAvailable(): Promise<boolean>;
+    listModelsFromCli(): Promise<string[]>;
+    parseModelsOutput(stdout: string): string[];
+    parseJsonResult(stdout: string): GrokJsonResult;
+    private sanitizedEnv;
+}
+export declare const grokCliService: GrokCliService;
+//# sourceMappingURL=grok-cli.service.d.ts.map

package/dist/services/grok-cli.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"grok-cli.service.d.ts","sourceRoot":"","sources":["../../src/services/grok-cli.service.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACV,cAAc,EACd,cAAc,EACd,aAAa,EACb,eAAe,EAChB,MAAM,8BAA8B,CAAC;AAItC,qBAAa,cAAc;IACzB,OAAO,CAAC,MAAM,CAAK;IAEnB,IAAI,WAAW,IAAI,MAAM,CAExB;IAED,IAAI,aAAa,IAAI,MAAM,CAE1B;IAED,UAAU,IAAI,OAAO;IAQrB,OAAO,IAAI,IAAI;IAIf,SAAS,CAAC,OAAO,EAAE,cAAc,GAAG,MAAM,EAAE;IAuCtC,OAAO,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC;IAuDvD,MAAM,CAAC,OAAO,EAAE,cAAc,GAAG,cAAc,CAAC,eAAe,CAAC;IAiDjE,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC;IAY/B,iBAAiB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IAgB5C,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE;IAW3C,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc;IAwB/C,OAAO,CAAC,YAAY;CASrB;AAED,eAAO,MAAM,cAAc,gBAAuB,CAAC"}

package/dist/services/grok-cli.service.js

@@ -0,0 +1,213 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.grokCliService = exports.GrokCliService = void 0;
+const node_readline_1 = require("node:readline");
+const execa_1 = require("execa");
+const env_1 = require("../config/env");
+const exception_factory_1 = require("../exceptions/exception.factory");
+const logger_1 = require("../utils/logger");
+class GrokCliService {
+    active = 0;
+    get activeCount() {
+        return this.active;
+    }
+    get maxConcurrent() {
+        return env_1.env.GROK_MAX_CONCURRENT;
+    }
+    tryAcquire() {
+        if (this.active >= env_1.env.GROK_MAX_CONCURRENT) {
+            return false;
+        }
+        this.active += 1;
+        return true;
+    }
+    release() {
+        this.active = Math.max(0, this.active - 1);
+    }
+    buildArgs(options) {
+        const args = [
+            '-p',
+            options.prompt,
+            '-m',
+            options.model,
+            '--cwd',
+            options.cwd,
+            '--output-format',
+            options.stream ? 'streaming-json' : 'json',
+        ];
+        const alwaysApprove = options.alwaysApprove !== undefined
+            ? options.alwaysApprove
+            : env_1.env.GROK_ALWAYS_APPROVE;
+        if (alwaysApprove) {
+            args.push('--always-approve');
+        }
+        if (options.sessionId) {
+            args.push('-s', options.sessionId);
+        }
+        if (options.maxTurns != null && options.maxTurns > 0) {
+            args.push('--max-turns', String(options.maxTurns));
+        }
+        if (options.toolsAllowlist) {
+            args.push('--tools', options.toolsAllowlist);
+        }
+        if (options.toolsDenylist) {
+            args.push('--disallowed-tools', options.toolsDenylist);
+        }
+        return args;
+    }
+    async runOnce(options) {
+        const args = this.buildArgs({ ...options, stream: false });
+        const timeout = options.timeoutMs ?? env_1.env.GROK_TIMEOUT_MS;
+        logger_1.logger.debug({
+            bin: env_1.env.GROK_BIN,
+            model: options.model,
+            cwd: options.cwd,
+            alwaysApprove: options.alwaysApprove,
+            maxTurns: options.maxTurns,
+            toolsAllowlist: options.toolsAllowlist,
+            toolsDenylist: options.toolsDenylist ? '[set]' : null,
+        }, 'Spawning grok');
+        try {
+            const result = await (0, execa_1.execa)(env_1.env.GROK_BIN, args, {
+                timeout,
+                reject: false,
+                env: this.sanitizedEnv(),
+                maxBuffer: 20 * 1024 * 1024,
+            });
+            if (result.timedOut) {
+                throw exception_factory_1.ExceptionFactory.grokTimeout();
+            }
+            if (result.exitCode !== 0) {
+                const stderr = (result.stderr || '').slice(0, 2000);
+                logger_1.logger.error({ exitCode: result.exitCode, stderr }, 'Grok CLI failed');
+                throw exception_factory_1.ExceptionFactory.grokError(`Grok CLI exited with code ${result.exitCode}`, { stderr });
+            }
+            const raw = this.parseJsonResult(result.stdout || '');
+            return {
+                text: raw.text ?? '',
+                stopReason: raw.stopReason,
+                sessionId: raw.sessionId,
+                raw,
+            };
+        }
+        catch (err) {
+            if (err instanceof Error && 'code' in err && err.code === 'ENOENT') {
+                throw exception_factory_1.ExceptionFactory.grokNotAvailable(`Grok binary not found: ${env_1.env.GROK_BIN}. Install Grok CLI and ensure it is on PATH.`);
+            }
+            throw err;
+        }
+    }
+    async *stream(options) {
+        const args = this.buildArgs({ ...options, stream: true });
+        const timeout = options.timeoutMs ?? env_1.env.GROK_TIMEOUT_MS;
+        const proc = (0, execa_1.execa)(env_1.env.GROK_BIN, args, {
+            timeout,
+            reject: false,
+            env: this.sanitizedEnv(),
+            buffer: false,
+        });
+        if (!proc.stdout) {
+            throw exception_factory_1.ExceptionFactory.grokError('Grok CLI produced no stdout');
+        }
+        const rl = (0, node_readline_1.createInterface)({ input: proc.stdout });
+        try {
+            for await (const line of rl) {
+                const trimmed = line.trim();
+                if (!trimmed)
+                    continue;
+                try {
+                    const event = JSON.parse(trimmed);
+                    yield event;
+                }
+                catch {
+                    logger_1.logger.warn({ line: trimmed.slice(0, 200) }, 'Skipping non-JSON grok stream line');
+                }
+            }
+            const result = await proc;
+            if (result.timedOut) {
+                throw exception_factory_1.ExceptionFactory.grokTimeout();
+            }
+            if (result.exitCode !== 0 && result.exitCode !== null) {
+                const stderr = (result.stderr || '').toString().slice(0, 2000);
+                throw exception_factory_1.ExceptionFactory.grokError(`Grok CLI exited with code ${result.exitCode}`, { stderr });
+            }
+        }
+        finally {
+            rl.close();
+            try {
+                proc.kill('SIGTERM');
+            }
+            catch {
+                /* ignore */
+            }
+        }
+    }
+    async isAvailable() {
+        try {
+            const result = await (0, execa_1.execa)(env_1.env.GROK_BIN, ['--version'], {
+                timeout: 10_000,
+                reject: false,
+            });
+            return result.exitCode === 0;
+        }
+        catch {
+            return false;
+        }
+    }
+    async listModelsFromCli() {
+        try {
+            const result = await (0, execa_1.execa)(env_1.env.GROK_BIN, ['models'], {
+                timeout: 30_000,
+                reject: false,
+                env: this.sanitizedEnv(),
+            });
+            if (result.exitCode !== 0) {
+                return [];
+            }
+            return this.parseModelsOutput(result.stdout || '');
+        }
+        catch {
+            return [];
+        }
+    }
+    parseModelsOutput(stdout) {
+        const models = [];
+        for (const line of stdout.split('\n')) {
+            const match = line.match(/^\s*[\*\-]\s+([a-zA-Z0-9._\-]+)/);
+            if (match?.[1]) {
+                models.push(match[1]);
+            }
+        }
+        return [...new Set(models)];
+    }
+    parseJsonResult(stdout) {
+        const trimmed = stdout.trim();
+        if (!trimmed) {
+            return { text: '' };
+        }
+        // Prefer last JSON object if CLI prints extra lines
+        const lines = trimmed.split('\n').filter(Boolean);
+        for (let i = lines.length - 1; i >= 0; i -= 1) {
+            try {
+                return JSON.parse(lines[i]);
+            }
+            catch {
+                /* try previous */
+            }
+        }
+        try {
+            return JSON.parse(trimmed);
+        }
+        catch {
+            // Fallback: treat entire stdout as plain text
+            return { text: trimmed };
+        }
+    }
+    sanitizedEnv() {
+        const { DATABASE_URL: _db, ENCRYPTION_KEY: _enc, ADMIN_BOOTSTRAP_KEY: _admin, ...rest } = process.env;
+        return rest;
+    }
+}
+exports.GrokCliService = GrokCliService;
+exports.grokCliService = new GrokCliService();
+//# sourceMappingURL=grok-cli.service.js.map

package/dist/services/grok-cli.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"grok-cli.service.js","sourceRoot":"","sources":["../../src/services/grok-cli.service.ts"],"names":[],"mappings":";;;AAAA,iDAAgD;AAChD,iCAA8B;AAC9B,uCAAoC;AAOpC,uEAAmE;AACnE,4CAAyC;AAEzC,MAAa,cAAc;IACjB,MAAM,GAAG,CAAC,CAAC;IAEnB,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,IAAI,aAAa;QACf,OAAO,SAAG,CAAC,mBAAmB,CAAC;IACjC,CAAC;IAED,UAAU;QACR,IAAI,IAAI,CAAC,MAAM,IAAI,SAAG,CAAC,mBAAmB,EAAE,CAAC;YAC3C,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;QACjB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO;QACL,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC7C,CAAC;IAED,SAAS,CAAC,OAAuB;QAC/B,MAAM,IAAI,GAAG;YACX,IAAI;YACJ,OAAO,CAAC,MAAM;YACd,IAAI;YACJ,OAAO,CAAC,KAAK;YACb,OAAO;YACP,OAAO,CAAC,GAAG;YACX,iBAAiB;YACjB,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,MAAM;SAC3C,CAAC;QAEF,MAAM,aAAa,GACjB,OAAO,CAAC,aAAa,KAAK,SAAS;YACjC,CAAC,CAAC,OAAO,CAAC,aAAa;YACvB,CAAC,CAAC,SAAG,CAAC,mBAAmB,CAAC;QAC9B,IAAI,aAAa,EAAE,CAAC;YAClB,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAChC,CAAC;QAED,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;YACtB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QACrC,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ,IAAI,IAAI,IAAI,OAAO,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;YACrD,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;QACrD,CAAC;QAED,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;YAC3B,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;QAC/C,CAAC;QAED,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;YAC1B,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;QACzD,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAAuB;QACnC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3D,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,IAAI,SAAG,CAAC,eAAe,CAAC;QAEzD,eAAM,CAAC,KAAK,CACV;YACE,GAAG,EAAE,SAAG,CAAC,QAAQ;YACjB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,aAAa,EAAE,OAAO,CAAC,aAAa;YACpC,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,aAAa,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI;SACtD,EACD,eAAe,CAChB,CAAC;QAEF,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAA,aAAK,EAAC,SAAG,CAAC,QAAQ,EAAE,IAAI,EAAE;gBAC7C,OAAO;gBACP,MAAM,EAAE,KAAK;gBACb,GAAG,EAAE,IAAI,CAAC,YAAY,EAAE;gBACxB,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;aAC5B,CAAC,CAAC;YAEH,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACpB,MAAM,oCAAgB,CAAC,WAAW,EAAE,CAAC;YACvC,CAAC;YAED,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;gBAC1B,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;gBACpD,eAAM,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC;gBACvE,MAAM,oCAAgB,CAAC,SAAS,CAC9B,6BAA6B,MAAM,CAAC,QAAQ,EAAE,EAC9C,EAAE,MAAM,EAAE,CACX,CAAC;YACJ,CAAC;YAED,MAAM,GAAG,GAAG,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;YACtD,OAAO;gBACL,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,EAAE;gBACpB,UAAU,EAAE,GAAG,CAAC,UAAU;gBAC1B,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,GAAG;aACJ,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,KAAK,IAAI,MAAM,IAAI,GAAG,IAAK,GAAyB,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC1F,MAAM,oCAAgB,CAAC,gBAAgB,CACrC,0BAA0B,SAAG,CAAC,QAAQ,8CAA8C,CACrF,CAAC;YACJ,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,CAAC,MAAM,CAAC,OAAuB;QACnC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,IAAI,SAAG,CAAC,eAAe,CAAC;QAEzD,MAAM,IAAI,GAAG,IAAA,aAAK,EAAC,SAAG,CAAC,QAAQ,EAAE,IAAI,EAAE;YACrC,OAAO;YACP,MAAM,EAAE,KAAK;YACb,GAAG,EAAE,IAAI,CAAC,YAAY,EAAE;YACxB,MAAM,EAAE,KAAK;SACd,CAAC,CAAC;QAEH,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,MAAM,oCAAgB,CAAC,SAAS,CAAC,6BAA6B,CAAC,CAAC;QAClE,CAAC;QAED,MAAM,EAAE,GAAG,IAAA,+BAAe,EAAC,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC;YACH,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,EAAE,EAAE,CAAC;gBAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;gBAC5B,IAAI,CAAC,OAAO;oBAAE,SAAS;gBACvB,IAAI,CAAC;oBACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAoB,CAAC;oBACrD,MAAM,KAAK,CAAC;gBACd,CAAC;gBAAC,MAAM,CAAC;oBACP,eAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,oCAAoC,CAAC,CAAC;gBACrF,CAAC;YACH,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC;YAC1B,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACpB,MAAM,oCAAgB,CAAC,WAAW,EAAE,CAAC;YACvC,CAAC;YACD,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;gBACtD,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;gBAC/D,MAAM,oCAAgB,CAAC,SAAS,CAC9B,6BAA6B,MAAM,CAAC,QAAQ,EAAE,EAC9C,EAAE,MAAM,EAAE,CACX,CAAC;YACJ,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,IAAI,CAAC;gBACH,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACvB,CAAC;YAAC,MAAM,CAAC;gBACP,YAAY;YACd,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,WAAW;QACf,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAA,aAAK,EAAC,SAAG,CAAC,QAAQ,EAAE,CAAC,WAAW,CAAC,EAAE;gBACtD,OAAO,EAAE,MAAM;gBACf,MAAM,EAAE,KAAK;aACd,CAAC,CAAC;YACH,OAAO,MAAM,CAAC,QAAQ,KAAK,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,KAAK,CAAC,iBAAiB;QACrB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAA,aAAK,EAAC,SAAG,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,EAAE;gBACnD,OAAO,EAAE,MAAM;gBACf,MAAM,EAAE,KAAK;gBACb,GAAG,EAAE,IAAI,CAAC,YAAY,EAAE;aACzB,CAAC,CAAC;YACH,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;gBAC1B,OAAO,EAAE,CAAC;YACZ,CAAC;YACD,OAAO,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QACrD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED,iBAAiB,CAAC,MAAc;QAC9B,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACtC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;YAC5D,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACf,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YACxB,CAAC;QACH,CAAC;QACD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9B,CAAC;IAED,eAAe,CAAC,MAAc;QAC5B,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QACtB,CAAC;QAED,oDAAoD;QACpD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAClD,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9C,IAAI,CAAC;gBACH,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAE,CAAmB,CAAC;YACjD,CAAC;YAAC,MAAM,CAAC;gBACP,kBAAkB;YACpB,CAAC;QACH,CAAC;QAED,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAmB,CAAC;QAC/C,CAAC;QAAC,MAAM,CAAC;YACP,8CAA8C;YAC9C,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QAC3B,CAAC;IACH,CAAC;IAEO,YAAY;QAClB,MAAM,EACJ,YAAY,EAAE,GAAG,EACjB,cAAc,EAAE,IAAI,EACpB,mBAAmB,EAAE,MAAM,EAC3B,GAAG,IAAI,EACR,GAAG,OAAO,CAAC,GAAG,CAAC;QAChB,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AA9OD,wCA8OC;AAEY,QAAA,cAAc,GAAG,IAAI,cAAc,EAAE,CAAC"}

package/dist/services/models.service.d.ts

@@ -0,0 +1,10 @@
+import type { OpenAiModel, OpenAiModelList } from '../interfaces/openai.interface';
+export declare class ModelsService {
+    private cache;
+    private readonly ttlMs;
+    list(): Promise<OpenAiModelList>;
+    get(modelId: string): Promise<OpenAiModel>;
+    getModelIds(): Promise<string[]>;
+}
+export declare const modelsService: ModelsService;
+//# sourceMappingURL=models.service.d.ts.map

package/dist/services/models.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"models.service.d.ts","sourceRoot":"","sources":["../../src/services/models.service.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AAKnF,qBAAa,aAAa;IACxB,OAAO,CAAC,KAAK,CAAwD;IACrE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAiB;IAEjC,IAAI,IAAI,OAAO,CAAC,eAAe,CAAC;IAKhC,GAAG,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IAa1C,WAAW,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;CAevC;AAED,eAAO,MAAM,aAAa,eAAsB,CAAC"}

package/dist/services/models.service.js

@@ -0,0 +1,43 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.modelsService = exports.ModelsService = void 0;
+const constants_1 = require("../config/constants");
+const env_1 = require("../config/env");
+const exception_factory_1 = require("../exceptions/exception.factory");
+const openai_mapper_1 = require("../utils/openai-mapper");
+const grok_cli_service_1 = require("./grok-cli.service");
+class ModelsService {
+    cache = null;
+    ttlMs = 5 * 60 * 1000;
+    async list() {
+        const models = await this.getModelIds();
+        return (0, openai_mapper_1.mapModelsList)(models);
+    }
+    async get(modelId) {
+        const models = await this.getModelIds();
+        if (!models.includes(modelId)) {
+            throw exception_factory_1.ExceptionFactory.notFound('Model');
+        }
+        return {
+            id: modelId,
+            object: 'model',
+            created: Math.floor(Date.now() / 1000),
+            owned_by: 'xai',
+        };
+    }
+    async getModelIds() {
+        const now = Date.now();
+        if (this.cache && now - this.cache.fetchedAt < this.ttlMs) {
+            return this.cache.models;
+        }
+        const fromCli = await grok_cli_service_1.grokCliService.listModelsFromCli();
+        const models = fromCli.length > 0
+            ? fromCli
+            : Array.from(new Set([env_1.env.GROK_DEFAULT_MODEL, ...constants_1.DEFAULT_MODELS]));
+        this.cache = { models, fetchedAt: now };
+        return models;
+    }
+}
+exports.ModelsService = ModelsService;
+exports.modelsService = new ModelsService();
+//# sourceMappingURL=models.service.js.map

package/dist/services/models.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"models.service.js","sourceRoot":"","sources":["../../src/services/models.service.ts"],"names":[],"mappings":";;;AAAA,mDAAqD;AACrD,uCAAoC;AAEpC,uEAAmE;AACnE,0DAAuD;AACvD,yDAAoD;AAEpD,MAAa,aAAa;IAChB,KAAK,GAAmD,IAAI,CAAC;IACpD,KAAK,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;IAEvC,KAAK,CAAC,IAAI;QACR,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACxC,OAAO,IAAA,6BAAa,EAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,OAAe;QACvB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACxC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9B,MAAM,oCAAgB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC3C,CAAC;QACD,OAAO;YACL,EAAE,EAAE,OAAO;YACX,MAAM,EAAE,OAAO;YACf,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;YACtC,QAAQ,EAAE,KAAK;SAChB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,WAAW;QACf,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,IAAI,CAAC,KAAK,IAAI,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;YAC1D,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;QAC3B,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,iCAAc,CAAC,iBAAiB,EAAE,CAAC;QACzD,MAAM,MAAM,GACV,OAAO,CAAC,MAAM,GAAG,CAAC;YAChB,CAAC,CAAC,OAAO;YACT,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,SAAG,CAAC,kBAAkB,EAAE,GAAG,0BAAc,CAAC,CAAC,CAAC,CAAC;QAEvE,IAAI,CAAC,KAAK,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;QACxC,OAAO,MAAM,CAAC;IAChB,CAAC;CACF;AArCD,sCAqCC;AAEY,QAAA,aAAa,GAAG,IAAI,aAAa,EAAE,CAAC"}

package/dist/services/policy.service.d.ts

@@ -0,0 +1,20 @@
+import { type KeyMode } from '../config/constants';
+import type { AuthenticatedApiKey } from '../interfaces/auth.interface';
+export interface ResolvedPolicy {
+    mode: KeyMode;
+    alwaysApprove: boolean;
+    cwd: string;
+    timeoutMs: number;
+    maxTurns: number | null;
+    /** If set, passed as --tools allowlist */
+    toolsAllowlist: string | null;
+    /** If set, passed as --disallowed-tools */
+    toolsDenylist: string | null;
+    sandboxForced: boolean;
+}
+export declare class PolicyService {
+    resolve(apiKey: AuthenticatedApiKey, clientCwd?: string | null): Promise<ResolvedPolicy>;
+    ensureSandbox(apiKeyId: string): Promise<string>;
+}
+export declare const policyService: PolicyService;
+//# sourceMappingURL=policy.service.d.ts.map

package/dist/services/policy.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.service.d.ts","sourceRoot":"","sources":["../../src/services/policy.service.ts"],"names":[],"mappings":"AAEA,OAAO,EAKL,KAAK,OAAO,EACb,MAAM,qBAAqB,CAAC;AAE7B,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AAIxE,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,OAAO,CAAC;IACd,aAAa,EAAE,OAAO,CAAC;IACvB,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,0CAA0C;IAC1C,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,2CAA2C;IAC3C,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,aAAa,EAAE,OAAO,CAAC;CACxB;AAED,qBAAa,aAAa;IAClB,OAAO,CACX,MAAM,EAAE,mBAAmB,EAC3B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GACxB,OAAO,CAAC,cAAc,CAAC;IAgDpB,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;CAMvD;AAED,eAAO,MAAM,aAAa,eAAsB,CAAC"}