onadit 0.0.1 → 1.0.0

package/dist/src/server/app.js

@@ -0,0 +1,356 @@
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+import Fastify from "fastify";
+import { registerAuth } from "../auth/middleware.js";
+import { RateLimiter } from "../auth/rate-limit.js";
+import { PlaceholderEmbeddingProvider } from "../providers/placeholder-embed.js";
+import { registerJobRoutes } from "./routes/jobs.js";
+import { registerSearchRoute } from "./routes/search.js";
+import { registerConversationSearchRoute } from "./routes/conversations-search.js";
+import { registerSaveRoute } from "./routes/save.js";
+import { registerReconcileRoute } from "./routes/reconcile.js";
+import { registerCompactRoute } from "./routes/compact.js";
+import { registerReindexRoute } from "./routes/reindex.js";
+import { enableSearchByMeaning } from "../onboarding/search-by-meaning.js";
+import { setCapture } from "../onboarding/capture-switch.js";
+import { registerStatsRoute } from "./routes/stats.js";
+import { registerStatusRoute } from "./routes/status.js";
+import { registerFriendStatusRoute } from "./routes/friend-status.js";
+import { getCapabilityCounts, getConversationCountsBySource, } from "../observability/rift-context.js";
+import { registerMcpUsageRoute } from "./routes/mcp-usage.js";
+import { registerIngestRoute } from "./routes/ingest.js";
+import { registerTriageRoute } from "./routes/triage.js";
+import { registerContextRoute, registerBriefRoute } from "./routes/context.js";
+import { registerRetrievalFeedbackRoutes } from "./routes/retrieval-feedback.js";
+import { registerMultipart } from "./middleware/multipart.js";
+import { createSaveHandler } from "../jobs/handlers/save.js";
+import { createReconcileHandler } from "../jobs/handlers/reconcile.js";
+import { createCompactHandler } from "../jobs/handlers/compact.js";
+import { createReindexHandler } from "../jobs/handlers/reindex.js";
+import { createIngestHandler } from "../jobs/handlers/ingest.js";
+import { createTriageHandler } from "../jobs/handlers/triage.js";
+import { createHistoricalBackfillCapability } from "../providers/operator-overrides.js";
+import { getBuildInfo } from "./build-info.js";
+import { SetupSessionManager } from "../onboarding/setup-session.js";
+import { registerSetupRoutes } from "./routes/setup.js";
+import { MCP_ENTRY_FILE } from "../mcp/names.js";
+/**
+ * Build a Fastify instance from validated config.
+ *
+ * Returns the server plus per-instance readiness controls.
+ * Does NOT call `listen()` — the caller is responsible for that
+ * so tests can use `inject()` without binding a port.
+ *
+ * As of Slice 19, job handlers are registered externally (main.ts)
+ * via worker-wrapped handlers. buildApp only registers HTTP routes.
+ *
+ * If `tokenManager` is provided, bearer auth validates against it.
+ * If omitted (e.g. in non-auth tests), only the test_token bypass
+ * works for authenticated routes; all other tokens are rejected.
+ */
+export async function buildApp(config, tokenManager, jobQueue, embeddingProvider, watchers, scanner, digestSummarizer, metadataExtractor, localEmbeddingProvider, configPath) {
+    const startTime = Date.now();
+    let ready = false;
+    const server = Fastify({
+        logger: false,
+        bodyLimit: config.request_limits.json_body_limit_bytes,
+        requestTimeout: config.request_limits.read_timeout_ms,
+    });
+    // --- Auth + rate limiting ---
+    const rateLimiter = new RateLimiter(config.rate_limit.window_ms, config.rate_limit.max_requests);
+    const setupSessions = new SetupSessionManager();
+    registerAuth(server, config, tokenManager ?? null, rateLimiter, setupSessions);
+    // The packaged installer opens this local page after the daemon is healthy.
+    // It is registered only when the daemon knows the exact config path, which
+    // keeps lightweight test apps and library consumers unchanged.
+    if (configPath) {
+        const appFile = fileURLToPath(import.meta.url);
+        registerSetupRoutes(server, {
+            sessions: setupSessions,
+            configPath,
+            nodePath: process.execPath,
+            mcpServerPath: path.resolve(path.dirname(appFile), "..", "mcp", MCP_ENTRY_FILE),
+            config,
+            countArchive: getCapabilityCounts,
+            countBySource: getConversationCountsBySource,
+            startTime,
+            enableSearch: () => enableSearchByMeaning({
+                configPath,
+                keyPresent: !!process.env["VOYAGE_API_KEY"],
+                ...(process.env["RIFT_KEY_RELAY_URL"] ? { relayUrl: process.env["RIFT_KEY_RELAY_URL"] } : {}),
+            }),
+            setCapture: (enabled) => setCapture({ configPath, enabled, keyPresent: !!process.env["VOYAGE_API_KEY"] }),
+            // launchd (KeepAlive) starts the engine again after a clean exit, and
+            // the new process reads the saved key and settings.
+            restartEngine: () => process.kill(process.pid, "SIGTERM"),
+        });
+    }
+    // --- Health endpoint (no auth, always available) ---
+    // `voyage_key_present` mirrors whether the daemon process loaded a
+    // VOYAGE_API_KEY at startup. Used by `onadit onboard` to confirm a
+    // post-kickstart respawn picked up the key without paying the cost
+    // of a /save round-trip that would land in LanceDB.
+    server.get("/health", async (_request, _reply) => {
+        const voyageKey = process.env["VOYAGE_API_KEY"];
+        return {
+            status: "ok",
+            uptime_seconds: Math.floor((Date.now() - startTime) / 1000),
+            voyage_key_present: typeof voyageKey === "string" && voyageKey.length > 0,
+        };
+    });
+    // --- Version endpoint (no auth) ---
+    // Unauthenticated on purpose: operators need to confirm which build is
+    // live before they have a token in hand, and the payload leaks nothing
+    // sensitive.
+    server.get("/version", async (_request, _reply) => {
+        return getBuildInfo();
+    });
+    // --- Readiness probe (no auth) ---
+    server.get("/ready", async (_request, reply) => {
+        if (!ready) {
+            return reply.code(503).send({ status: "not_ready" });
+        }
+        return { status: "ready" };
+    });
+    // --- Friendly fallback for provider-unavailable routes ---
+    // When a route's required deps (queue / embedding provider / digest
+    // summarizer) are missing, register a stub at the same path that
+    // returns 503 with a structured `provider_unavailable` payload, so
+    // operators see a precise reason instead of Fastify's generic 404.
+    //
+    // The recovery hint is derived from `missing` per-dep, not from the
+    // route — saying "set ANTHROPIC_API_KEY" on /compact would be wrong
+    // (the live digest summarizer is Codex CLI by default, or Ollama
+    // when `local_generation.enabled = true`), and saying "set
+    // VOYAGE_API_KEY" when the queue itself is down is misdirection.
+    //
+    // The digest hint is config-aware: when Claude metadata is selected, the
+    // digest summarizer is absent BY DESIGN (no Claude digest worker yet — see
+    // createCloudProviders), so "authenticate Codex CLI" would be wrong advice.
+    // Tell that user the real story instead.
+    const claudeMetadataSelected = config.enrichment?.ai_metadata === true &&
+        config.enrichment?.metadata?.provider === "claude_code";
+    const digestSummarizerHint = claudeMetadataSelected
+        ? "Claude Code metadata is selected, which has no digest worker yet; digests/compaction stay off until Claude digest support ships — switch metadata to Codex (`onadit onboard --enable-codex-enrichment`) or set `local_generation.enabled: true` for Ollama to enable compaction"
+        : "authenticate Codex CLI (`codex login`) or set `local_generation.enabled: true` for Ollama";
+    const MISSING_DEP_HINTS = {
+        job_queue: "daemon job queue is not initialized; restart the daemon",
+        embedding_provider: "set VOYAGE_API_KEY and re-run `onadit onboard`",
+        digest_summarizer: digestSummarizerHint,
+    };
+    const registerUnavailable = (path, missing) => {
+        const hint = missing.map((m) => MISSING_DEP_HINTS[m]).join("; ");
+        server.post(path, async (_request, reply) => reply.code(503).send({
+            error: "provider_unavailable",
+            missing: [...missing],
+            message: `POST ${path} unavailable: ${missing.join(", ")} not configured (${hint})`,
+        }));
+    };
+    // --- Capability tracking for observability ---
+    const supportedSources = new Set();
+    if (jobQueue) {
+        createHistoricalBackfillCapability(config.data_paths.data_dir);
+    }
+    // --- Job routes (authenticated) ---
+    if (jobQueue) {
+        registerJobRoutes(server, jobQueue);
+    }
+    // --- Save route (authenticated, requires queue; embedding optional) ---
+    // In production, main.ts pre-registers worker-wrapped handlers.
+    // Fallback in-process handlers are registered here for tests.
+    //
+    // A no-key install saves with the placeholder (`rift-none`) embedding so a
+    // manual `/save` (CLI/MCP `onadit_save`) still lands a row that lexical search
+    // surfaces immediately. The row is excluded from vector/semantic search
+    // until a real embedding backfills it (reconcile/reindex relabels it). This
+    // mirrors the ingest path below — import and save must both work without
+    // Voyage. (Scheduled auto-capture is a separate, opt-in lane that still
+    // requires a key; see the `captureEnabled` gate in onboard.)
+    if (jobQueue) {
+        registerSaveRoute(server, jobQueue);
+        if (!jobQueue.hasHandler("save")) {
+            jobQueue.registerHandler("save", createSaveHandler({
+                embeddingProvider: embeddingProvider ?? new PlaceholderEmbeddingProvider(),
+                dataDir: config.data_paths.data_dir,
+                queue: jobQueue,
+            }));
+        }
+        supportedSources.add("claude_code");
+        supportedSources.add("gemini_cli");
+        supportedSources.add("codex_cli");
+    }
+    else {
+        registerUnavailable("/save", ["job_queue"]);
+    }
+    // --- Reconcile route (authenticated, requires queue + embedding + config) ---
+    if (jobQueue && embeddingProvider) {
+        registerReconcileRoute(server, jobQueue);
+        if (!jobQueue.hasHandler("reconcile")) {
+            jobQueue.registerHandler("reconcile", createReconcileHandler({
+                config,
+                embeddingProvider,
+                dataDir: config.data_paths.data_dir,
+                watchers: watchers ?? [],
+                scanner: scanner ?? null,
+                ...(localEmbeddingProvider ? { localEmbeddingProvider } : {}),
+            }));
+        }
+    }
+    else {
+        const missing = [
+            ...(jobQueue ? [] : ["job_queue"]),
+            ...(embeddingProvider ? [] : ["embedding_provider"]),
+        ];
+        registerUnavailable("/reconcile", missing);
+    }
+    // --- Compact route (authenticated, requires queue + embedding + digest summarizer) ---
+    if (jobQueue && embeddingProvider && digestSummarizer) {
+        registerCompactRoute(server, jobQueue, config.data_paths.data_dir);
+        if (!jobQueue.hasHandler("compact")) {
+            jobQueue.registerHandler("compact", createCompactHandler({
+                embeddingProvider,
+                digestSummarizer,
+                dataDir: config.data_paths.data_dir,
+                ageThresholdDays: config.compaction.age_threshold_days,
+                watchers: watchers ?? [],
+                scanner: scanner ?? null,
+            }));
+        }
+    }
+    else {
+        const missing = [
+            ...(jobQueue ? [] : ["job_queue"]),
+            ...(embeddingProvider ? [] : ["embedding_provider"]),
+            ...(digestSummarizer ? [] : ["digest_summarizer"]),
+        ];
+        registerUnavailable("/compact", missing);
+    }
+    // --- Reindex route (authenticated, requires queue + embedding + config) ---
+    if (jobQueue && embeddingProvider) {
+        registerReindexRoute(server, jobQueue);
+        if (!jobQueue.hasHandler("reindex")) {
+            jobQueue.registerHandler("reindex", createReindexHandler({
+                config,
+                embeddingProvider,
+                dataDir: config.data_paths.data_dir,
+                watchers: watchers ?? [],
+                scanner: scanner ?? null,
+                ...(localEmbeddingProvider ? { localEmbeddingProvider } : {}),
+            }));
+        }
+    }
+    else {
+        const missing = [
+            ...(jobQueue ? [] : ["job_queue"]),
+            ...(embeddingProvider ? [] : ["embedding_provider"]),
+        ];
+        registerUnavailable("/reindex", missing);
+    }
+    // --- Ingest route (authenticated, requires queue for job creation) ---
+    // Import only needs a metadata extractor — the embedding may be the no-key
+    // placeholder (`rift-none` zero vectors), so a friend can import and search
+    // before connecting any embedding provider. main.ts always supplies a
+    // metadataExtractor (BasicMetadataExtractor when no AI worker is installed).
+    if (jobQueue) {
+        await registerMultipart(server, config);
+        registerIngestRoute(server, jobQueue, config.request_limits.multipart_limit_bytes, !!metadataExtractor, config.data_paths.data_dir);
+        if (metadataExtractor && !jobQueue.hasHandler("ingest")) {
+            jobQueue.registerHandler("ingest", createIngestHandler({
+                embeddingProvider: embeddingProvider ?? new PlaceholderEmbeddingProvider(),
+                metadataExtractor,
+                dataDir: config.data_paths.data_dir,
+                queue: jobQueue,
+            }));
+        }
+    }
+    // --- Triage route + handler ---
+    // Route is always registered when a queue is present.
+    // In production, main.ts pre-registers the worker-wrapped handler.
+    // The fallback in-process handler is used when main hasn't run (tests,
+    // app.ts standalone). Triage doesn't need embedding/metadata providers.
+    if (jobQueue) {
+        registerTriageRoute(server, jobQueue, config.data_paths.data_dir);
+        if (!jobQueue.hasHandler("triage")) {
+            jobQueue.registerHandler("triage", createTriageHandler({
+                dataDir: config.data_paths.data_dir,
+                openai: config.openai,
+            }));
+        }
+    }
+    // --- Search routes (authenticated) ---
+    // Onadit's own generated-reports tree, anchored relative to the data dir the
+    // same way the reconcile handler writes reports (`<dataDir>/../reports`).
+    // Passed into report/snapshot classification so only Onadit-authored reports
+    // are demoted/discounted — a client's `reports/` folder is left intact.
+    const selfReportsRoot = path.resolve(config.data_paths.data_dir, "..", "reports");
+    // /search is ALWAYS available. With an embedding provider it runs hybrid
+    // (vector + lexical) + rerank; with none it runs an INTENTIONAL lexical-only
+    // mode (mode:"lexical", degraded:false) so a no-key install can search its
+    // imported archive immediately. This is a first-class mode, not the degraded
+    // fallback that a mid-search vector failure produces.
+    registerSearchRoute(server, embeddingProvider, localEmbeddingProvider, config.sources, selfReportsRoot, config.data_paths.data_dir);
+    if (embeddingProvider) {
+        registerConversationSearchRoute(server, embeddingProvider);
+    }
+    else {
+        registerUnavailable("/conversations/search", ["embedding_provider"]);
+    }
+    // Like /search, the pack runs on keyword matches alone when there is no
+    // key, so an agent's first recall works before search by meaning is on.
+    registerContextRoute(server, embeddingProvider ?? localEmbeddingProvider, config.sources, selfReportsRoot);
+    // Project brief: local files + captured sessions, no embeddings needed.
+    registerBriefRoute(server, config.data_paths.data_dir);
+    // --- Retrieval feedback rails (authenticated) ---
+    // These routes write append-only learning events and expose shadow scoring.
+    // They are available even when embeddings are unavailable: exact evidence
+    // opens and outcome logs are local ledger operations.
+    registerRetrievalFeedbackRoutes(server, config.data_paths.data_dir);
+    // --- Observability deps ---
+    const obsDeps = {
+        config,
+        scanner: scanner ?? null,
+        watchers: watchers ?? [],
+        capabilities: {
+            watchEnabled: config.sources.some((s) => s.mode === "watch"),
+            scanEnabled: config.sources.some((s) => s.mode === "scheduled_scan"),
+            supportedSources,
+            inboxEnabled: !!(embeddingProvider && metadataExtractor),
+        },
+        getMaintenanceState: () => {
+            const job = jobQueue?.getRunningExclusiveJob() ?? null;
+            return {
+                active: job !== null,
+                startedAt: job ? new Date(job.updated_at) : null,
+            };
+        },
+    };
+    // --- Stats route (authenticated) ---
+    registerStatsRoute(server, obsDeps);
+    // --- Status route (authenticated) ---
+    registerStatusRoute(server, obsDeps);
+    // --- Friend-status route (authenticated, structured) ---
+    registerFriendStatusRoute(server, {
+        config,
+        startTime,
+        configPath: configPath ?? null,
+        ...(jobQueue ? { jobQueue } : {}),
+    });
+    // --- MCP usage telemetry (unauthenticated; SwiftBar polls every 10s) ---
+    registerMcpUsageRoute(server, obsDeps);
+    // --- Token revocation (authenticated) ---
+    server.delete("/auth/token", async (_request, reply) => {
+        if (!tokenManager) {
+            return reply.code(501).send({ error: "not_configured" });
+        }
+        await tokenManager.revokeAll();
+        return reply.code(204).send();
+    });
+    return {
+        server,
+        markReady: () => {
+            ready = true;
+        },
+        isReady: () => ready,
+    };
+}
+//# sourceMappingURL=app.js.map

package/dist/src/server/app.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.js","sourceRoot":"","sources":["../../../src/server/app.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,OAAiC,MAAM,SAAS,CAAC;AAExD,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAErD,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAIpD,OAAO,EAAE,4BAA4B,EAAE,MAAM,mCAAmC,CAAC;AACjF,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,+BAA+B,EAAE,MAAM,kCAAkC,CAAC;AACnF,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AAC3E,OAAO,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAC7D,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,EACL,mBAAmB,EACnB,6BAA6B,GAC9B,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAC/E,OAAO,EAAE,+BAA+B,EAAE,MAAM,gCAAgC,CAAC;AACjF,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AACvE,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAKjE,OAAO,EAAE,kCAAkC,EAAE,MAAM,oCAAoC,CAAC;AACxF,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAQjD;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,MAAc,EACd,YAA2B,EAC3B,QAAmB,EACnB,iBAAqC,EACrC,QAAoB,EACpB,OAAwB,EACxB,gBAAmC,EACnC,iBAAqC,EACrC,sBAA0C,EAC1C,UAAmB;IAEnB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,IAAI,KAAK,GAAG,KAAK,CAAC;IAElB,MAAM,MAAM,GAAG,OAAO,CAAC;QACrB,MAAM,EAAE,KAAK;QACb,SAAS,EAAE,MAAM,CAAC,cAAc,CAAC,qBAAqB;QACtD,cAAc,EAAE,MAAM,CAAC,cAAc,CAAC,eAAe;KACtD,CAAC,CAAC;IAEH,+BAA+B;IAC/B,MAAM,WAAW,GAAG,IAAI,WAAW,CACjC,MAAM,CAAC,UAAU,CAAC,SAAS,EAC3B,MAAM,CAAC,UAAU,CAAC,YAAY,CAC/B,CAAC;IACF,MAAM,aAAa,GAAG,IAAI,mBAAmB,EAAE,CAAC;IAChD,YAAY,CACV,MAAM,EACN,MAAM,EACN,YAAY,IAAI,IAAI,EACpB,WAAW,EACX,aAAa,CACd,CAAC;IAEF,4EAA4E;IAC5E,2EAA2E;IAC3E,+DAA+D;IAC/D,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/C,mBAAmB,CAAC,MAAM,EAAE;YAC1B,QAAQ,EAAE,aAAa;YACvB,UAAU;YACV,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,aAAa,EAAE,IAAI,CAAC,OAAO,CACzB,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EACrB,IAAI,EACJ,KAAK,EACL,cAAc,CACf;YACD,MAAM;YACN,YAAY,EAAE,mBAAmB;YACjC,aAAa,EAAE,6BAA6B;YAC5C,SAAS;YACT,YAAY,EAAE,GAAG,EAAE,CACjB,qBAAqB,CAAC;gBACpB,UAAU;gBACV,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;gBAC3C,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC9F,CAAC;YACJ,UAAU,EAAE,CAAC,OAAO,EAAE,EAAE,CACtB,UAAU,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAClF,sEAAsE;YACtE,oDAAoD;YACpD,aAAa,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC;SAC1D,CAAC,CAAC;IACL,CAAC;IAED,sDAAsD;IACtD,mEAAmE;IACnE,mEAAmE;IACnE,mEAAmE;IACnE,oDAAoD;IACpD,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;QAC/C,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QAChD,OAAO;YACL,MAAM,EAAE,IAAa;YACrB,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,GAAG,IAAI,CAAC;YAC3D,kBAAkB,EAAE,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC;SAC1E,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,qCAAqC;IACrC,uEAAuE;IACvE,uEAAuE;IACvE,aAAa;IACb,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;QAChD,OAAO,YAAY,EAAE,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,oCAAoC;IACpC,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE;QAC7C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;QACvD,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,4DAA4D;IAC5D,oEAAoE;IACpE,iEAAiE;IACjE,mEAAmE;IACnE,mEAAmE;IACnE,EAAE;IACF,oEAAoE;IACpE,oEAAoE;IACpE,iEAAiE;IACjE,2DAA2D;IAC3D,iEAAiE;IACjE,EAAE;IACF,yEAAyE;IACzE,2EAA2E;IAC3E,4EAA4E;IAC5E,yCAAyC;IACzC,MAAM,sBAAsB,GAC1B,MAAM,CAAC,UAAU,EAAE,WAAW,KAAK,IAAI;QACvC,MAAM,CAAC,UAAU,EAAE,QAAQ,EAAE,QAAQ,KAAK,aAAa,CAAC;IAC1D,MAAM,oBAAoB,GAAG,sBAAsB;QACjD,CAAC,CAAC,iRAAiR;QACnR,CAAC,CAAC,2FAA2F,CAAC;IAChG,MAAM,iBAAiB,GAAG;QACxB,SAAS,EAAE,yDAAyD;QACpE,kBAAkB,EAChB,gDAAgD;QAClD,iBAAiB,EAAE,oBAAoB;KAC/B,CAAC;IAEX,MAAM,mBAAmB,GAAG,CAC1B,IAAY,EACZ,OAAkC,EAC5B,EAAE;QACR,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,CAC1C,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACnB,KAAK,EAAE,sBAAsB;YAC7B,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC;YACrB,OAAO,EAAE,QAAQ,IAAI,iBAAiB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB,IAAI,GAAG;SACpF,CAAC,CACH,CAAC;IACJ,CAAC,CAAC;IAEF,gDAAgD;IAChD,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAsB,CAAC;IAEvD,IAAI,QAAQ,EAAE,CAAC;QACb,kCAAkC,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IACjE,CAAC;IAED,qCAAqC;IACrC,IAAI,QAAQ,EAAE,CAAC;QACb,iBAAiB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACtC,CAAC;IAED,yEAAyE;IACzE,gEAAgE;IAChE,8DAA8D;IAC9D,EAAE;IACF,2EAA2E;IAC3E,+EAA+E;IAC/E,wEAAwE;IACxE,4EAA4E;IAC5E,yEAAyE;IACzE,wEAAwE;IACxE,6DAA6D;IAC7D,IAAI,QAAQ,EAAE,CAAC;QACb,iBAAiB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACpC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YACjC,QAAQ,CAAC,eAAe,CACtB,MAAM,EACN,iBAAiB,CAAC;gBAChB,iBAAiB,EACf,iBAAiB,IAAI,IAAI,4BAA4B,EAAE;gBACzD,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ;gBACnC,KAAK,EAAE,QAAQ;aAChB,CAAC,CACH,CAAC;QACJ,CAAC;QACD,gBAAgB,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QACpC,gBAAgB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACnC,gBAAgB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACpC,CAAC;SAAM,CAAC;QACN,mBAAmB,CAAC,OAAO,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;IAC9C,CAAC;IAED,+EAA+E;IAC/E,IAAI,QAAQ,IAAI,iBAAiB,EAAE,CAAC;QAClC,sBAAsB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACzC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YACtC,QAAQ,CAAC,eAAe,CACtB,WAAW,EACX,sBAAsB,CAAC;gBACrB,MAAM;gBACN,iBAAiB;gBACjB,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ;gBACnC,QAAQ,EAAE,QAAQ,IAAI,EAAE;gBACxB,OAAO,EAAE,OAAO,IAAI,IAAI;gBACxB,GAAG,CAAC,sBAAsB,CAAC,CAAC,CAAC,EAAE,sBAAsB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC9D,CAAC,CACH,CAAC;QACJ,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,OAAO,GAAiB;YAC5B,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,WAAoB,CAAC,CAAC;YAC3C,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,oBAA6B,CAAC,CAAC;SAC9D,CAAC;QACF,mBAAmB,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IAC7C,CAAC;IAED,wFAAwF;IACxF,IAAI,QAAQ,IAAI,iBAAiB,IAAI,gBAAgB,EAAE,CAAC;QACtD,oBAAoB,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QACnE,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACpC,QAAQ,CAAC,eAAe,CACtB,SAAS,EACT,oBAAoB,CAAC;gBACnB,iBAAiB;gBACjB,gBAAgB;gBAChB,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ;gBACnC,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,kBAAkB;gBACtD,QAAQ,EAAE,QAAQ,IAAI,EAAE;gBACxB,OAAO,EAAE,OAAO,IAAI,IAAI;aACzB,CAAC,CACH,CAAC;QACJ,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,OAAO,GAAiB;YAC5B,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,WAAoB,CAAC,CAAC;YAC3C,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,oBAA6B,CAAC,CAAC;YAC7D,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,mBAA4B,CAAC,CAAC;SAC5D,CAAC;QACF,mBAAmB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAC3C,CAAC;IAED,6EAA6E;IAC7E,IAAI,QAAQ,IAAI,iBAAiB,EAAE,CAAC;QAClC,oBAAoB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACvC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACpC,QAAQ,CAAC,eAAe,CACtB,SAAS,EACT,oBAAoB,CAAC;gBACnB,MAAM;gBACN,iBAAiB;gBACjB,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ;gBACnC,QAAQ,EAAE,QAAQ,IAAI,EAAE;gBACxB,OAAO,EAAE,OAAO,IAAI,IAAI;gBACxB,GAAG,CAAC,sBAAsB,CAAC,CAAC,CAAC,EAAE,sBAAsB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC9D,CAAC,CACH,CAAC;QACJ,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,OAAO,GAAiB;YAC5B,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,WAAoB,CAAC,CAAC;YAC3C,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,oBAA6B,CAAC,CAAC;SAC9D,CAAC;QACF,mBAAmB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAC3C,CAAC;IAED,wEAAwE;IACxE,2EAA2E;IAC3E,4EAA4E;IAC5E,sEAAsE;IACtE,6EAA6E;IAC7E,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,iBAAiB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACxC,mBAAmB,CACjB,MAAM,EACN,QAAQ,EACR,MAAM,CAAC,cAAc,CAAC,qBAAqB,EAC3C,CAAC,CAAC,iBAAiB,EACnB,MAAM,CAAC,UAAU,CAAC,QAAQ,CAC3B,CAAC;QACF,IAAI,iBAAiB,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACxD,QAAQ,CAAC,eAAe,CACtB,QAAQ,EACR,mBAAmB,CAAC;gBAClB,iBAAiB,EAAE,iBAAiB,IAAI,IAAI,4BAA4B,EAAE;gBAC1E,iBAAiB;gBACjB,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ;gBACnC,KAAK,EAAE,QAAQ;aAChB,CAAC,CACH,CAAC;QACJ,CAAC;IACH,CAAC;IAED,iCAAiC;IACjC,sDAAsD;IACtD,mEAAmE;IACnE,uEAAuE;IACvE,wEAAwE;IACxE,IAAI,QAAQ,EAAE,CAAC;QACb,mBAAmB,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAClE,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACnC,QAAQ,CAAC,eAAe,CACtB,QAAQ,EACR,mBAAmB,CAAC;gBAClB,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ;gBACnC,MAAM,EAAE,MAAM,CAAC,MAAM;aACtB,CAAC,CACH,CAAC;QACJ,CAAC;IACH,CAAC;IAED,wCAAwC;IACxC,6EAA6E;IAC7E,0EAA0E;IAC1E,6EAA6E;IAC7E,wEAAwE;IACxE,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,CAClC,MAAM,CAAC,UAAU,CAAC,QAAQ,EAC1B,IAAI,EACJ,SAAS,CACV,CAAC;IACF,yEAAyE;IACzE,6EAA6E;IAC7E,2EAA2E;IAC3E,6EAA6E;IAC7E,sDAAsD;IACtD,mBAAmB,CACjB,MAAM,EACN,iBAAiB,EACjB,sBAAsB,EACtB,MAAM,CAAC,OAAO,EACd,eAAe,EACf,MAAM,CAAC,UAAU,CAAC,QAAQ,CAC3B,CAAC;IACF,IAAI,iBAAiB,EAAE,CAAC;QACtB,+BAA+B,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IAC7D,CAAC;SAAM,CAAC;QACN,mBAAmB,CAAC,uBAAuB,EAAE,CAAC,oBAAoB,CAAC,CAAC,CAAC;IACvE,CAAC;IACD,wEAAwE;IACxE,wEAAwE;IACxE,oBAAoB,CAClB,MAAM,EACN,iBAAiB,IAAI,sBAAsB,EAC3C,MAAM,CAAC,OAAO,EACd,eAAe,CAChB,CAAC;IAEF,wEAAwE;IACxE,kBAAkB,CAAC,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IAEvD,mDAAmD;IACnD,4EAA4E;IAC5E,0EAA0E;IAC1E,sDAAsD;IACtD,+BAA+B,CAAC,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IAEpE,6BAA6B;IAC7B,MAAM,OAAO,GAAsB;QACjC,MAAM;QACN,OAAO,EAAE,OAAO,IAAI,IAAI;QACxB,QAAQ,EAAE,QAAQ,IAAI,EAAE;QACxB,YAAY,EAAE;YACZ,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC;YAC5D,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,gBAAgB,CAAC;YACpE,gBAAgB;YAChB,YAAY,EAAE,CAAC,CAAC,CAAC,iBAAiB,IAAI,iBAAiB,CAAC;SACzD;QACD,mBAAmB,EAAE,GAAG,EAAE;YACxB,MAAM,GAAG,GAAG,QAAQ,EAAE,sBAAsB,EAAE,IAAI,IAAI,CAAC;YACvD,OAAO;gBACL,MAAM,EAAE,GAAG,KAAK,IAAI;gBACpB,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI;aACjD,CAAC;QACJ,CAAC;KACF,CAAC;IAEF,sCAAsC;IACtC,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAEpC,uCAAuC;IACvC,mBAAmB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAErC,0DAA0D;IAC1D,yBAAyB,CAAC,MAAM,EAAE;QAChC,MAAM;QACN,SAAS;QACT,UAAU,EAAE,UAAU,IAAI,IAAI;QAC9B,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClC,CAAC,CAAC;IAEH,0EAA0E;IAC1E,qBAAqB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAEvC,2CAA2C;IAC3C,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE;QACrD,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAC3D,CAAC;QACD,MAAM,YAAY,CAAC,SAAS,EAAE,CAAC;QAC/B,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,MAAM;QACN,SAAS,EAAE,GAAG,EAAE;YACd,KAAK,GAAG,IAAI,CAAC;QACf,CAAC;QACD,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK;KACrB,CAAC;AACJ,CAAC"}

package/dist/src/server/build-info.d.ts

@@ -0,0 +1,8 @@
+export interface BuildInfo {
+    name: string;
+    version: string;
+    commit: string;
+    node: string;
+}
+export declare function getBuildInfo(): BuildInfo;
+//# sourceMappingURL=build-info.d.ts.map

package/dist/src/server/build-info.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-info.d.ts","sourceRoot":"","sources":["../../../src/server/build-info.ts"],"names":[],"mappings":"AAaA,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;CACd;AAID,wBAAgB,YAAY,IAAI,SAAS,CA+BxC"}

package/dist/src/server/build-info.js

@@ -0,0 +1,61 @@
+/**
+ * Build/version info surfaced via GET /version and the daemon boot log.
+ *
+ * Kept deliberately minimal: name + version read from package.json, commit
+ * read once from `RIFT_COMMIT` or a best-effort `git rev-parse HEAD`,
+ * plus the running Node version. No timestamps — reading mtime is racy and
+ * the commit already pins the build.
+ */
+import fs from "node:fs";
+import path from "node:path";
+import { execSync } from "node:child_process";
+import { fileURLToPath } from "node:url";
+let cached;
+export function getBuildInfo() {
+    if (cached)
+        return cached;
+    const here = path.dirname(fileURLToPath(import.meta.url));
+    // src/server/build-info.ts → up two levels to repo root in dev,
+    // dist/src/server/build-info.js → up three to repo root when built.
+    const candidates = [
+        path.resolve(here, "../../package.json"),
+        path.resolve(here, "../../../package.json"),
+    ];
+    let name = "onadit";
+    let version = "0.0.0";
+    for (const candidate of candidates) {
+        try {
+            const pkg = JSON.parse(fs.readFileSync(candidate, "utf8"));
+            if (pkg.name)
+                name = pkg.name;
+            if (pkg.version)
+                version = pkg.version;
+            break;
+        }
+        catch {
+            // try next candidate
+        }
+    }
+    const commit = resolveCommit();
+    cached = { name, version, commit, node: process.version };
+    return cached;
+}
+function resolveCommit() {
+    const fromEnv = process.env["RIFT_COMMIT"];
+    if (fromEnv && fromEnv.trim())
+        return fromEnv.trim();
+    try {
+        const sha = execSync("git rev-parse HEAD", {
+            stdio: ["ignore", "pipe", "ignore"],
+        })
+            .toString()
+            .trim();
+        if (sha)
+            return sha;
+    }
+    catch {
+        // not in a git checkout, or git not installed
+    }
+    return "unknown";
+}
+//# sourceMappingURL=build-info.js.map

package/dist/src/server/build-info.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-info.js","sourceRoot":"","sources":["../../../src/server/build-info.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AASzC,IAAI,MAA6B,CAAC;AAElC,MAAM,UAAU,YAAY;IAC1B,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAE1B,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1D,gEAAgE;IAChE,oEAAoE;IACpE,MAAM,UAAU,GAAG;QACjB,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,oBAAoB,CAAC;QACxC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,uBAAuB,CAAC;KAC5C,CAAC;IAEF,IAAI,IAAI,GAAG,QAAQ,CAAC;IACpB,IAAI,OAAO,GAAG,OAAO,CAAC;IACtB,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAGxD,CAAC;YACF,IAAI,GAAG,CAAC,IAAI;gBAAE,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;YAC9B,IAAI,GAAG,CAAC,OAAO;gBAAE,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;YACvC,MAAM;QACR,CAAC;QAAC,MAAM,CAAC;YACP,qBAAqB;QACvB,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;IAE/B,MAAM,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;IAC1D,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,aAAa;IACpB,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAC3C,IAAI,OAAO,IAAI,OAAO,CAAC,IAAI,EAAE;QAAE,OAAO,OAAO,CAAC,IAAI,EAAE,CAAC;IACrD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,QAAQ,CAAC,oBAAoB,EAAE;YACzC,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;SACpC,CAAC;aACC,QAAQ,EAAE;aACV,IAAI,EAAE,CAAC;QACV,IAAI,GAAG;YAAE,OAAO,GAAG,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,8CAA8C;IAChD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/src/server/lifecycle.d.ts

@@ -0,0 +1,30 @@
+import type { FastifyInstance } from "fastify";
+export interface ShutdownDeps {
+    exit: (code: number) => void;
+    stderr: (msg: string) => void;
+}
+/**
+ * Create a shutdown handler that closes the server, enforces a hard
+ * timeout, and calls `deps.exit` with the appropriate code.
+ *
+ * - close() resolves  → clearTimeout, exit(0)
+ * - close() rejects   → clearTimeout, exit(1)
+ * - close() hangs     → timeout fires, exit(1)
+ *
+ * The timer is NOT unref'd — it is the hard safety net.
+ *
+ * Exported for direct testing; production code uses `registerShutdownHandlers`.
+ */
+export declare function createShutdown(closeFn: () => Promise<void>, timeoutMs: number, deps: ShutdownDeps): (signal: string) => void;
+/**
+ * Register SIGTERM and SIGINT handlers for graceful shutdown.
+ *
+ * On signal: run optional pre-close hook (e.g., kill worker children),
+ * close the Fastify server (drains in-flight requests), then exit 0.
+ * If everything takes longer than `timeoutMs`, force-exit 1.
+ */
+export declare function registerShutdownHandlers(app: FastifyInstance, opts?: {
+    timeoutMs?: number;
+    onShutdown?: () => void | Promise<void>;
+}): void;
+//# sourceMappingURL=lifecycle.d.ts.map

package/dist/src/server/lifecycle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lifecycle.d.ts","sourceRoot":"","sources":["../../../src/server/lifecycle.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAE/C,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B,MAAM,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CAC/B;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,cAAc,CAC5B,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,EAC5B,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,YAAY,GACjB,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,CA0B1B;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CACtC,GAAG,EAAE,eAAe,EACpB,IAAI,CAAC,EAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,GACrE,IAAI,CAoBN"}

package/dist/src/server/lifecycle.js

@@ -0,0 +1,59 @@
+/**
+ * Create a shutdown handler that closes the server, enforces a hard
+ * timeout, and calls `deps.exit` with the appropriate code.
+ *
+ * - close() resolves  → clearTimeout, exit(0)
+ * - close() rejects   → clearTimeout, exit(1)
+ * - close() hangs     → timeout fires, exit(1)
+ *
+ * The timer is NOT unref'd — it is the hard safety net.
+ *
+ * Exported for direct testing; production code uses `registerShutdownHandlers`.
+ */
+export function createShutdown(closeFn, timeoutMs, deps) {
+    let shutting = false;
+    return (signal) => {
+        if (shutting)
+            return;
+        shutting = true;
+        deps.stderr(`Received ${signal}, shutting down...\n`);
+        const timer = setTimeout(() => {
+            deps.stderr("Shutdown timed out, forcing exit.\n");
+            deps.exit(1);
+        }, timeoutMs);
+        closeFn()
+            .then(() => {
+            clearTimeout(timer);
+            deps.exit(0);
+        })
+            .catch((err) => {
+            clearTimeout(timer);
+            deps.stderr(`Error during shutdown: ${err instanceof Error ? err.message : String(err)}\n`);
+            deps.exit(1);
+        });
+    };
+}
+/**
+ * Register SIGTERM and SIGINT handlers for graceful shutdown.
+ *
+ * On signal: run optional pre-close hook (e.g., kill worker children),
+ * close the Fastify server (drains in-flight requests), then exit 0.
+ * If everything takes longer than `timeoutMs`, force-exit 1.
+ */
+export function registerShutdownHandlers(app, opts) {
+    const timeoutMs = opts?.timeoutMs ?? 10_000;
+    const onShutdown = opts?.onShutdown;
+    const shutdown = createShutdown(async () => {
+        if (onShutdown)
+            await onShutdown();
+        await app.close();
+    }, timeoutMs, {
+        exit: (code) => process.exit(code),
+        stderr: (msg) => {
+            process.stderr.write(msg);
+        },
+    });
+    process.on("SIGTERM", () => shutdown("SIGTERM"));
+    process.on("SIGINT", () => shutdown("SIGINT"));
+}
+//# sourceMappingURL=lifecycle.js.map

package/dist/src/server/lifecycle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lifecycle.js","sourceRoot":"","sources":["../../../src/server/lifecycle.ts"],"names":[],"mappings":"AAOA;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,cAAc,CAC5B,OAA4B,EAC5B,SAAiB,EACjB,IAAkB;IAElB,IAAI,QAAQ,GAAG,KAAK,CAAC;IAErB,OAAO,CAAC,MAAc,EAAE,EAAE;QACxB,IAAI,QAAQ;YAAE,OAAO;QACrB,QAAQ,GAAG,IAAI,CAAC;QAChB,IAAI,CAAC,MAAM,CAAC,YAAY,MAAM,sBAAsB,CAAC,CAAC;QAEtD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,IAAI,CAAC,MAAM,CAAC,qCAAqC,CAAC,CAAC;YACnD,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACf,CAAC,EAAE,SAAS,CAAC,CAAC;QAEd,OAAO,EAAE;aACN,IAAI,CAAC,GAAG,EAAE;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACf,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;YACtB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,CAAC,MAAM,CACT,0BAA0B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAC/E,CAAC;YACF,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACf,CAAC,CAAC,CAAC;IACP,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CACtC,GAAoB,EACpB,IAAsE;IAEtE,MAAM,SAAS,GAAG,IAAI,EAAE,SAAS,IAAI,MAAM,CAAC;IAC5C,MAAM,UAAU,GAAG,IAAI,EAAE,UAAU,CAAC;IAEpC,MAAM,QAAQ,GAAG,cAAc,CAC7B,KAAK,IAAI,EAAE;QACT,IAAI,UAAU;YAAE,MAAM,UAAU,EAAE,CAAC;QACnC,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;IACpB,CAAC,EACD,SAAS,EACT;QACE,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;QAClC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE;YACd,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC5B,CAAC;KACF,CACF,CAAC;IAEF,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;IACjD,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;AACjD,CAAC"}

package/dist/src/server/middleware/multipart.d.ts

@@ -0,0 +1,51 @@
+/**
+ * Multipart upload middleware — Slice 12.
+ *
+ * Registers @fastify/multipart on the Fastify instance with a file
+ * size limit derived from config (default 100 MB per PRD Section 3.4).
+ *
+ * Provides `consumeMultipartFile()` — the ONLY sanctioned way to read
+ * an uploaded file.  It drains the stream, detects truncation, and
+ * throws a Fastify error that maps to 413 Payload Too Large.  Route
+ * handlers never inspect `file.truncated` themselves.
+ */
+import type { FastifyInstance, FastifyRequest } from "fastify";
+import type { Config } from "../../config/schema.js";
+export interface UploadedFile {
+    filename: string;
+    mimetype: string;
+    data: Buffer;
+}
+export declare function registerMultipart(server: FastifyInstance, config: Config): Promise<void>;
+/**
+ * Central multipart file consumer.
+ *
+ * Every route that accepts a file upload MUST call this function
+ * instead of accessing `request.file()` directly.  It enforces the
+ * size limit centrally so individual routes cannot forget.
+ *
+ * @throws Fastify error with statusCode 413 when the file is truncated
+ * @throws Fastify error with statusCode 400 when no file is present
+ */
+export interface UploadedFileWithFields {
+    file: UploadedFile;
+    fields: Record<string, string>;
+}
+/**
+ * Central multipart consumer that returns both the file and form fields.
+ *
+ * Used by routes that accept a file plus metadata fields (e.g. POST /ingest).
+ */
+export declare function consumeMultipartUpload(request: FastifyRequest, limitBytes: number): Promise<UploadedFileWithFields>;
+/**
+ * Central multipart file consumer.
+ *
+ * Every route that accepts a file upload MUST call this function
+ * instead of accessing `request.file()` directly.  It enforces the
+ * size limit centrally so individual routes cannot forget.
+ *
+ * @throws Fastify error with statusCode 413 when the file is truncated
+ * @throws Fastify error with statusCode 400 when no file is present
+ */
+export declare function consumeMultipartFile(request: FastifyRequest, limitBytes: number): Promise<UploadedFile>;
+//# sourceMappingURL=multipart.d.ts.map

package/dist/src/server/middleware/multipart.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"multipart.d.ts","sourceRoot":"","sources":["../../../../src/server/middleware/multipart.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAE/D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAErD,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,eAAe,EACvB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,IAAI,CAAC,CAUf;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,YAAY,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAChC;AAED;;;;GAIG;AACH,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,cAAc,EACvB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,sBAAsB,CAAC,CA4CjC;AAED;;;;;;;;;GASG;AACH,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,cAAc,EACvB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,YAAY,CAAC,CA0BvB"}