opencode-bridge 2.9.0-beta

package/dist/reliability/audit-log.js

@@ -0,0 +1,248 @@
+/**
+ * 结构化审计日志模块
+ *
+ * 功能特性：
+ * - JSONL 格式（每行一个 JSON 对象），便于追加和解析
+ * - 原子写入模式（先写 tmp 文件，再 rename），防止崩溃导致数据损坏
+ * - 敏感字段自动脱敏（password、token、OPENCODE_SERVER_PASSWORD 等）
+ * - 支持按日期滚动的文件命名
+ * - 完整的字段完整性保证
+ */
+import fs from 'node:fs';
+import path from 'node:path';
+import { randomUUID } from 'node:crypto';
+/**
+ * 敏感字段关键词列表（用于脱敏）
+ */
+const SENSITIVE_FIELD_PATTERNS = [
+    'password',
+    'passwd',
+    'secret',
+    'token',
+    'accessToken',
+    'refreshToken',
+    'apiKey',
+    'api_key',
+    'auth',
+    'credential',
+    'privateKey',
+    'OPENCODE_SERVER_PASSWORD',
+];
+/**
+ * 生成唯一的 incident ID
+ * @returns 格式：inc_<uuid>（去掉连字符）
+ */
+export function generateIncidentId() {
+    const uuid = randomUUID().replace(/-/g, '');
+    return `inc_${uuid}`;
+}
+/**
+ * 递归脱敏敏感字段
+ * @param data 原始数据对象
+ * @returns 脱敏后的新对象（不修改原对象）
+ */
+export function redactSensitiveFields(data) {
+    if (!data || typeof data !== 'object' || Array.isArray(data)) {
+        return data;
+    }
+    const result = {};
+    for (const [key, value] of Object.entries(data)) {
+        const keyLower = key.toLowerCase();
+        // 检查是否是敏感字段
+        const isSensitive = SENSITIVE_FIELD_PATTERNS.some(pattern => keyLower.includes(pattern.toLowerCase()));
+        if (isSensitive) {
+            result[key] = '***';
+        }
+        else if (value && typeof value === 'object') {
+            // 递归处理嵌套对象
+            if (Array.isArray(value)) {
+                result[key] = value.map(item => item && typeof item === 'object'
+                    ? redactSensitiveFields(item)
+                    : item);
+            }
+            else {
+                result[key] = redactSensitiveFields(value);
+            }
+        }
+        else {
+            result[key] = value;
+        }
+    }
+    return result;
+}
+/**
+ * 获取日期格式字符串（YYYY-MM-DD）
+ */
+function getDateString(date = new Date()) {
+    return date.toISOString().split('T')[0];
+}
+/**
+ * 生成带日期的日志文件路径
+ * @param basePath 基础路径
+ * @param date 日期
+ * @returns 带日期的文件路径
+ */
+function buildDateRotatedPath(basePath, date = new Date()) {
+    const dir = path.dirname(basePath);
+    const ext = path.extname(basePath);
+    const base = path.basename(basePath, ext);
+    const dateStr = getDateString(date);
+    return path.join(dir, `${base}.${dateStr}${ext}`);
+}
+/**
+ * 原子写入文件（先写临时文件，再 rename）
+ * @param filePath 目标文件路径
+ * @param content 文件内容
+ */
+async function atomicWriteFile(filePath, content) {
+    const dir = path.dirname(filePath);
+    const tmpFile = `${filePath}.${process.pid}.tmp`;
+    try {
+        // 确保目录存在
+        if (!fs.existsSync(dir)) {
+            fs.mkdirSync(dir, { recursive: true });
+        }
+        // 写入临时文件
+        await fs.promises.writeFile(tmpFile, content, 'utf-8');
+        // 原子重命名
+        await fs.promises.rename(tmpFile, filePath);
+    }
+    catch (error) {
+        // 清理临时文件（如果存在）
+        try {
+            await fs.promises.unlink(tmpFile);
+        }
+        catch {
+            // 忽略清理错误
+        }
+        throw error;
+    }
+}
+/**
+ * 追加写入 JSONL 日志（使用原子写入模式）
+ * @param filePath 日志文件路径
+ * @param line JSON 字符串行
+ */
+async function appendJsonLine(filePath, line) {
+    const dir = path.dirname(filePath);
+    try {
+        // 确保目录存在
+        if (!fs.existsSync(dir)) {
+            fs.mkdirSync(dir, { recursive: true });
+        }
+        // 读取现有内容（如果存在）
+        let existingContent = '';
+        if (fs.existsSync(filePath)) {
+            existingContent = await fs.promises.readFile(filePath, 'utf-8');
+        }
+        // 拼接新内容
+        const newContent = existingContent ? `${existingContent}${line}\n` : `${line}\n`;
+        // 原子写入（先写 tmp 再 rename）
+        await atomicWriteFile(filePath, newContent);
+    }
+    catch (error) {
+        throw new Error(`写入审计日志失败：${error instanceof Error ? error.message : String(error)}`);
+    }
+}
+/**
+ * 创建审计日志记录器
+ * @param logFilePath 日志文件路径
+ * @param useDateRotation 是否启用日期滚动（默认 false）
+ * @returns 审计日志记录器
+ */
+export function auditLogger(logFilePath, useDateRotation = false) {
+    return {
+        async log(event) {
+            try {
+                // 确定实际日志文件路径
+                const actualPath = useDateRotation
+                    ? buildDateRotatedPath(logFilePath)
+                    : logFilePath;
+                // 构建审计事件对象（确保必填字段）
+                const auditEvent = {
+                    incidentId: event.incidentId,
+                    classification: event.classification,
+                    decision: event.decision,
+                    action: event.action,
+                    result: event.result,
+                    timestamp: event.timestamp || new Date().toISOString(),
+                };
+                // 添加元数据（如果存在）并脱敏
+                if (event.metadata) {
+                    auditEvent.metadata = redactSensitiveFields(event.metadata);
+                }
+                // 序列化为 JSON 字符串
+                const jsonLine = JSON.stringify(auditEvent);
+                // 追加写入日志文件
+                await appendJsonLine(actualPath, jsonLine);
+            }
+            catch (error) {
+                // 记录错误但不阻塞主流程
+                console.error('[AuditLogger] 写入审计日志失败:', error);
+                throw error;
+            }
+        },
+    };
+}
+/**
+ * 验证审计事件字段完整性
+ * @param event 审计事件
+ * @returns 验证结果（包含错误信息）
+ */
+export function validateAuditEvent(event) {
+    const errors = [];
+    const requiredFields = [
+        'incidentId',
+        'classification',
+        'decision',
+        'action',
+        'result',
+        'timestamp',
+    ];
+    for (const field of requiredFields) {
+        if (!event[field]) {
+            errors.push(`缺少必填字段：${field}`);
+        }
+    }
+    // 验证时间戳格式
+    if (event.timestamp && !/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}/.test(event.timestamp)) {
+        errors.push('时间戳格式无效，应为 ISO 8601 格式');
+    }
+    return {
+        valid: errors.length === 0,
+        errors,
+    };
+}
+/**
+ * 解析 JSONL 日志文件
+ * @param filePath 日志文件路径
+ * @returns 审计事件数组
+ */
+export async function parseAuditLogFile(filePath) {
+    if (!fs.existsSync(filePath)) {
+        throw new Error(`日志文件不存在：${filePath}`);
+    }
+    const content = await fs.promises.readFile(filePath, 'utf-8');
+    const lines = content.trim().split('\n').filter(line => line.trim());
+    const events = [];
+    for (const line of lines) {
+        try {
+            const event = JSON.parse(line);
+            events.push(event);
+        }
+        catch (error) {
+            console.error('[AuditLogger] 解析日志行失败:', line, error);
+            // 跳过无效行
+        }
+    }
+    return events;
+}
+// 默认导出
+export default {
+    auditLogger,
+    generateIncidentId,
+    redactSensitiveFields,
+    validateAuditEvent,
+    parseAuditLogFile,
+};
+//# sourceMappingURL=audit-log.js.map

package/dist/reliability/audit-log.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-log.js","sourceRoot":"","sources":["../../src/reliability/audit-log.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAyDzC;;GAEG;AACH,MAAM,wBAAwB,GAAG;IAC/B,UAAU;IACV,QAAQ;IACR,QAAQ;IACR,OAAO;IACP,aAAa;IACb,cAAc;IACd,QAAQ;IACR,SAAS;IACT,MAAM;IACN,YAAY;IACZ,YAAY;IACZ,0BAA0B;CAC3B,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,kBAAkB;IAChC,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC5C,OAAO,OAAO,IAAI,EAAE,CAAC;AACvB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAoC,IAAO;IAC9E,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GAA4B,EAAE,CAAC;IAE3C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,MAAM,QAAQ,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;QAEnC,YAAY;QACZ,MAAM,WAAW,GAAG,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAC1D,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CACzC,CAAC;QAEF,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACtB,CAAC;aAAM,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9C,WAAW;YACX,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzB,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAC7B,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;oBAC9B,CAAC,CAAC,qBAAqB,CAAC,IAA+B,CAAC;oBACxD,CAAC,CAAC,IAAI,CACT,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,GAAG,CAAC,GAAG,qBAAqB,CAAC,KAAgC,CAAC,CAAC;YACxE,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACtB,CAAC;IACH,CAAC;IAED,OAAO,MAAW,CAAC;AACrB,CAAC;AAED;;GAEG;AACH,SAAS,aAAa,CAAC,OAAa,IAAI,IAAI,EAAE;IAC5C,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1C,CAAC;AAED;;;;;GAKG;AACH,SAAS,oBAAoB,CAAC,QAAgB,EAAE,OAAa,IAAI,IAAI,EAAE;IACrE,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACnC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACpC,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,IAAI,OAAO,GAAG,GAAG,EAAE,CAAC,CAAC;AACpD,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,eAAe,CAAC,QAAgB,EAAE,OAAe;IAC9D,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACnC,MAAM,OAAO,GAAG,GAAG,QAAQ,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;IAEjD,IAAI,CAAC;QACH,SAAS;QACT,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACzC,CAAC;QAED,SAAS;QACT,MAAM,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QAEvD,QAAQ;QACR,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC9C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,eAAe;QACf,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,cAAc,CAAC,QAAgB,EAAE,IAAY;IAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAEnC,IAAI,CAAC;QACH,SAAS;QACT,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACzC,CAAC;QAED,eAAe;QACf,IAAI,eAAe,GAAG,EAAE,CAAC;QACzB,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5B,eAAe,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAClE,CAAC;QAED,QAAQ;QACR,MAAM,UAAU,GAAG,eAAe,CAAC,CAAC,CAAC,GAAG,eAAe,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC;QAEjF,wBAAwB;QACxB,MAAM,eAAe,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC9C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,YAAY,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACxF,CAAC;AACH,CAAC;AAaD;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CACzB,WAAmB,EACnB,kBAA2B,KAAK;IAEhC,OAAO;QACL,KAAK,CAAC,GAAG,CAAC,KAAiB;YACzB,IAAI,CAAC;gBACH,aAAa;gBACb,MAAM,UAAU,GAAG,eAAe;oBAChC,CAAC,CAAC,oBAAoB,CAAC,WAAW,CAAC;oBACnC,CAAC,CAAC,WAAW,CAAC;gBAEhB,mBAAmB;gBACnB,MAAM,UAAU,GAA4B;oBAC1C,UAAU,EAAE,KAAK,CAAC,UAAU;oBAC5B,cAAc,EAAE,KAAK,CAAC,cAAc;oBACpC,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;iBACvD,CAAC;gBAEF,iBAAiB;gBACjB,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;oBACnB,UAAU,CAAC,QAAQ,GAAG,qBAAqB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBAC9D,CAAC;gBAED,gBAAgB;gBAChB,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;gBAE5C,WAAW;gBACX,MAAM,cAAc,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;YAC7C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,cAAc;gBACd,OAAO,CAAC,KAAK,CAAC,yBAAyB,EAAE,KAAK,CAAC,CAAC;gBAChD,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAA0B;IAC3D,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,cAAc,GAAyB;QAC3C,YAAY;QACZ,gBAAgB;QAChB,UAAU;QACV,QAAQ;QACR,QAAQ;QACR,WAAW;KACZ,CAAC;IAEF,KAAK,MAAM,KAAK,IAAI,cAAc,EAAE,CAAC;QACnC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YAClB,MAAM,CAAC,IAAI,CAAC,UAAU,KAAK,EAAE,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IAED,UAAU;IACV,IAAI,KAAK,CAAC,SAAS,IAAI,CAAC,sCAAsC,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QACrF,MAAM,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IACxC,CAAC;IAED,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QAC1B,MAAM;KACP,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,QAAgB;IACtD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,WAAW,QAAQ,EAAE,CAAC,CAAC;IACzC,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC9D,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAErE,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAe,CAAC;YAC7C,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,wBAAwB,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;YACrD,QAAQ;QACV,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,OAAO;AACP,eAAe;IACb,WAAW;IACX,kBAAkB;IAClB,qBAAqB;IACrB,kBAAkB;IAClB,iBAAiB;CAClB,CAAC"}

package/dist/reliability/config-guard.d.ts

@@ -0,0 +1,42 @@
+import { type AuditLogger } from './audit-log.js';
+export interface ConfigGuardServerFields {
+    host: string;
+    port: number;
+    auth: {
+        username: string;
+        password?: string;
+    };
+}
+export interface ConfigBackup {
+    path: string;
+    timestamp: number;
+    sha256: string;
+}
+export interface ConfigGuardIO {
+    readFile?: (filePath: string) => Promise<string>;
+    writeFile?: (filePath: string, content: string) => Promise<void>;
+    rename?: (fromPath: string, toPath: string) => Promise<void>;
+    mkdir?: (dirPath: string) => Promise<void>;
+    exists?: (filePath: string) => Promise<boolean>;
+}
+export interface ApplyConfigGuardOptions {
+    configPath: string;
+    serverFields: ConfigGuardServerFields;
+    level2Template?: Record<string, unknown>;
+    audit?: AuditLogger;
+    io?: ConfigGuardIO;
+}
+export interface ApplyConfigGuardResult {
+    backup: ConfigBackup;
+    appliedLevel: 'level1' | 'level2';
+}
+export interface RollbackConfigOptions {
+    configPath: string;
+    backup: ConfigBackup;
+    audit?: AuditLogger;
+    io?: ConfigGuardIO;
+}
+export declare function applyConfigGuardWithFallback(options: ApplyConfigGuardOptions): Promise<ApplyConfigGuardResult>;
+export declare function rollbackConfigFromBackup(options: RollbackConfigOptions): Promise<void>;
+export declare function createConfigBackup(configPath: string, customIO?: ConfigGuardIO): Promise<ConfigBackup>;
+//# sourceMappingURL=config-guard.d.ts.map

package/dist/reliability/config-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-guard.d.ts","sourceRoot":"","sources":["../../src/reliability/config-guard.ts"],"names":[],"mappings":"AAGA,OAAO,EAAsB,KAAK,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAEtE,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE;QACJ,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;CACH;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACjD,SAAS,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACjE,MAAM,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7D,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACjD;AAED,MAAM,WAAW,uBAAuB;IACtC,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,uBAAuB,CAAC;IACtC,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACzC,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,EAAE,CAAC,EAAE,aAAa,CAAC;CACpB;AAED,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,YAAY,CAAC;IACrB,YAAY,EAAE,QAAQ,GAAG,QAAQ,CAAC;CACnC;AAED,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,YAAY,CAAC;IACrB,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,EAAE,CAAC,EAAE,aAAa,CAAC;CACpB;AA0BD,wBAAsB,4BAA4B,CAChD,OAAO,EAAE,uBAAuB,GAC/B,OAAO,CAAC,sBAAsB,CAAC,CAoEjC;AAED,wBAAsB,wBAAwB,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,CAiD5F;AAyED,wBAAsB,kBAAkB,CACtC,UAAU,EAAE,MAAM,EAClB,QAAQ,CAAC,EAAE,aAAa,GACvB,OAAO,CAAC,YAAY,CAAC,CAavB"}

package/dist/reliability/config-guard.js

@@ -0,0 +1,264 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import { createHash } from 'node:crypto';
+import { generateIncidentId } from './audit-log.js';
+const defaultIO = {
+    async readFile(filePath) {
+        return fs.promises.readFile(filePath, 'utf-8');
+    },
+    async writeFile(filePath, content) {
+        await fs.promises.writeFile(filePath, content, 'utf-8');
+    },
+    async rename(fromPath, toPath) {
+        await fs.promises.rename(fromPath, toPath);
+    },
+    async mkdir(dirPath) {
+        await fs.promises.mkdir(dirPath, { recursive: true });
+    },
+    async exists(filePath) {
+        return fs.existsSync(filePath);
+    },
+};
+const noOpAuditLogger = {
+    async log() {
+        return;
+    },
+};
+export async function applyConfigGuardWithFallback(options) {
+    const io = resolveIO(options.io);
+    const audit = options.audit ?? noOpAuditLogger;
+    const backup = await createConfigBackup(options.configPath, io);
+    await logAuditSafe(audit, {
+        decision: 'create',
+        action: 'config.backup.created',
+        result: 'success',
+        metadata: {
+            configPath: options.configPath,
+            backupPath: backup.path,
+            timestamp: backup.timestamp,
+            sha256: backup.sha256,
+        },
+    });
+    const currentConfig = await readCurrentConfig(options.configPath, io, audit);
+    const level1Config = buildLevel1Config(currentConfig, options.serverFields);
+    try {
+        await writeConfigAtomically(options.configPath, level1Config, io);
+        await logAuditSafe(audit, {
+            decision: 'update',
+            action: 'config.guard.level1.applied',
+            result: 'success',
+            metadata: {
+                configPath: options.configPath,
+                backupPath: backup.path,
+            },
+        });
+        return { backup, appliedLevel: 'level1' };
+    }
+    catch (error) {
+        await logAuditSafe(audit, {
+            decision: 'update',
+            action: 'config.guard.level1.failed',
+            result: 'failed',
+            metadata: {
+                configPath: options.configPath,
+                error: normalizeErrorMessage(error),
+            },
+        });
+    }
+    const level2Config = options.level2Template ?? buildDefaultLevel2Template(options.serverFields);
+    try {
+        await writeConfigAtomically(options.configPath, level2Config, io);
+        await logAuditSafe(audit, {
+            decision: 'update',
+            action: 'config.guard.level2.applied',
+            result: 'success',
+            metadata: {
+                configPath: options.configPath,
+                backupPath: backup.path,
+            },
+        });
+        return { backup, appliedLevel: 'level2' };
+    }
+    catch (error) {
+        await logAuditSafe(audit, {
+            decision: 'update',
+            action: 'config.guard.level2.failed',
+            result: 'failed',
+            metadata: {
+                configPath: options.configPath,
+                error: normalizeErrorMessage(error),
+            },
+        });
+        throw error;
+    }
+}
+export async function rollbackConfigFromBackup(options) {
+    const io = resolveIO(options.io);
+    const audit = options.audit ?? noOpAuditLogger;
+    const backupExists = await io.exists(options.backup.path);
+    if (!backupExists) {
+        const error = new Error(`备份不存在：${options.backup.path}`);
+        await logAuditSafe(audit, {
+            decision: 'rollback',
+            action: 'config.rollback.failed',
+            result: 'failed',
+            metadata: {
+                configPath: options.configPath,
+                backupPath: options.backup.path,
+                error: error.message,
+            },
+        });
+        throw error;
+    }
+    const backupRaw = await io.readFile(options.backup.path);
+    const backupHash = createHash('sha256').update(backupRaw, 'utf-8').digest('hex');
+    if (backupHash !== options.backup.sha256) {
+        const error = new Error('备份校验失败：sha256 不匹配');
+        await logAuditSafe(audit, {
+            decision: 'rollback',
+            action: 'config.rollback.failed',
+            result: 'failed',
+            metadata: {
+                configPath: options.configPath,
+                backupPath: options.backup.path,
+                expectedSha256: options.backup.sha256,
+                actualSha256: backupHash,
+            },
+        });
+        throw error;
+    }
+    await writeRawAtomically(options.configPath, backupRaw, io);
+    await logAuditSafe(audit, {
+        decision: 'rollback',
+        action: 'config.rollback.applied',
+        result: 'success',
+        metadata: {
+            configPath: options.configPath,
+            backupPath: options.backup.path,
+            sha256: options.backup.sha256,
+        },
+    });
+}
+async function readCurrentConfig(configPath, io, audit) {
+    const exists = await io.exists(configPath);
+    if (!exists) {
+        return {};
+    }
+    const raw = (await io.readFile(configPath)).trim();
+    if (!raw) {
+        return {};
+    }
+    try {
+        const parsed = JSON.parse(raw);
+        if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed)) {
+            throw new Error('配置根节点不是对象');
+        }
+        return parsed;
+    }
+    catch (error) {
+        await logAuditSafe(audit, {
+            decision: 'update',
+            action: 'config.parse.failed',
+            result: 'failed',
+            metadata: {
+                configPath,
+                error: normalizeErrorMessage(error),
+            },
+        });
+        return {};
+    }
+}
+function buildLevel1Config(currentConfig, serverFields) {
+    const currentServer = readObjectRecord(currentConfig.server);
+    return {
+        ...currentConfig,
+        server: {
+            ...currentServer,
+            host: serverFields.host,
+            port: serverFields.port,
+            auth: {
+                username: serverFields.auth.username,
+                ...(serverFields.auth.password ? { password: serverFields.auth.password } : {}),
+            },
+        },
+    };
+}
+function buildDefaultLevel2Template(serverFields) {
+    return {
+        server: {
+            host: serverFields.host,
+            port: serverFields.port,
+            auth: {
+                username: serverFields.auth.username,
+                ...(serverFields.auth.password ? { password: serverFields.auth.password } : {}),
+            },
+        },
+        reliability: {
+            mode: 'observe',
+            loopbackOnly: true,
+        },
+    };
+}
+export async function createConfigBackup(configPath, customIO) {
+    const io = resolveIO(customIO);
+    const exists = await io.exists(configPath);
+    const originalRaw = exists ? await io.readFile(configPath) : '';
+    const sha256 = createHash('sha256').update(originalRaw, 'utf-8').digest('hex');
+    const timestamp = Date.now();
+    const backupPath = `${configPath}.bak.${timestamp}.${sha256}`;
+    await writeRawAtomically(backupPath, originalRaw, io);
+    return {
+        path: backupPath,
+        timestamp,
+        sha256,
+    };
+}
+async function writeConfigAtomically(configPath, configObject, io) {
+    const content = `${JSON.stringify(configObject, null, 2)}\n`;
+    await writeRawAtomically(configPath, content, io);
+}
+async function writeRawAtomically(targetPath, content, io) {
+    const targetDir = path.dirname(targetPath);
+    await io.mkdir(targetDir);
+    const tmpPath = `${targetPath}.${process.pid}.tmp`;
+    await io.writeFile(tmpPath, content);
+    await io.rename(tmpPath, targetPath);
+}
+function resolveIO(customIO) {
+    return {
+        readFile: customIO?.readFile ?? defaultIO.readFile,
+        writeFile: customIO?.writeFile ?? defaultIO.writeFile,
+        rename: customIO?.rename ?? defaultIO.rename,
+        mkdir: customIO?.mkdir ?? defaultIO.mkdir,
+        exists: customIO?.exists ?? defaultIO.exists,
+    };
+}
+function readObjectRecord(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value)) {
+        return {};
+    }
+    return value;
+}
+function normalizeErrorMessage(error) {
+    if (error instanceof Error) {
+        return error.message;
+    }
+    return String(error);
+}
+async function logAuditSafe(audit, input) {
+    try {
+        await audit.log({
+            incidentId: generateIncidentId(),
+            classification: 'config',
+            decision: input.decision,
+            action: input.action,
+            result: input.result,
+            timestamp: new Date().toISOString(),
+            metadata: input.metadata,
+        });
+    }
+    catch {
+        // 审计日志失败不应阻断配置保护主流程。
+    }
+}
+//# sourceMappingURL=config-guard.js.map

package/dist/reliability/config-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-guard.js","sourceRoot":"","sources":["../../src/reliability/config-guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,kBAAkB,EAAoB,MAAM,gBAAgB,CAAC;AA6CtE,MAAM,SAAS,GAA4B;IACzC,KAAK,CAAC,QAAQ,CAAC,QAAgB;QAC7B,OAAO,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACjD,CAAC;IACD,KAAK,CAAC,SAAS,CAAC,QAAgB,EAAE,OAAe;QAC/C,MAAM,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAC1D,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,QAAgB,EAAE,MAAc;QAC3C,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC7C,CAAC;IACD,KAAK,CAAC,KAAK,CAAC,OAAe;QACzB,MAAM,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,QAAgB;QAC3B,OAAO,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IACjC,CAAC;CACF,CAAC;AAEF,MAAM,eAAe,GAAgB;IACnC,KAAK,CAAC,GAAG;QACP,OAAO;IACT,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,OAAgC;IAEhC,MAAM,EAAE,GAAG,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACjC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,eAAe,CAAC;IAC/C,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAChE,MAAM,YAAY,CAAC,KAAK,EAAE;QACxB,QAAQ,EAAE,QAAQ;QAClB,MAAM,EAAE,uBAAuB;QAC/B,MAAM,EAAE,SAAS;QACjB,QAAQ,EAAE;YACR,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,UAAU,EAAE,MAAM,CAAC,IAAI;YACvB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB;KACF,CAAC,CAAC;IAEH,MAAM,aAAa,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC;IAC7E,MAAM,YAAY,GAAG,iBAAiB,CAAC,aAAa,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;IAE5E,IAAI,CAAC;QACH,MAAM,qBAAqB,CAAC,OAAO,CAAC,UAAU,EAAE,YAAY,EAAE,EAAE,CAAC,CAAC;QAClE,MAAM,YAAY,CAAC,KAAK,EAAE;YACxB,QAAQ,EAAE,QAAQ;YAClB,MAAM,EAAE,6BAA6B;YACrC,MAAM,EAAE,SAAS;YACjB,QAAQ,EAAE;gBACR,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,UAAU,EAAE,MAAM,CAAC,IAAI;aACxB;SACF,CAAC,CAAC;QACH,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC;IAC5C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,YAAY,CAAC,KAAK,EAAE;YACxB,QAAQ,EAAE,QAAQ;YAClB,MAAM,EAAE,4BAA4B;YACpC,MAAM,EAAE,QAAQ;YAChB,QAAQ,EAAE;gBACR,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,KAAK,EAAE,qBAAqB,CAAC,KAAK,CAAC;aACpC;SACF,CAAC,CAAC;IACL,CAAC;IAED,MAAM,YAAY,GAAG,OAAO,CAAC,cAAc,IAAI,0BAA0B,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAChG,IAAI,CAAC;QACH,MAAM,qBAAqB,CAAC,OAAO,CAAC,UAAU,EAAE,YAAY,EAAE,EAAE,CAAC,CAAC;QAClE,MAAM,YAAY,CAAC,KAAK,EAAE;YACxB,QAAQ,EAAE,QAAQ;YAClB,MAAM,EAAE,6BAA6B;YACrC,MAAM,EAAE,SAAS;YACjB,QAAQ,EAAE;gBACR,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,UAAU,EAAE,MAAM,CAAC,IAAI;aACxB;SACF,CAAC,CAAC;QACH,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC;IAC5C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,YAAY,CAAC,KAAK,EAAE;YACxB,QAAQ,EAAE,QAAQ;YAClB,MAAM,EAAE,4BAA4B;YACpC,MAAM,EAAE,QAAQ;YAChB,QAAQ,EAAE;gBACR,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,KAAK,EAAE,qBAAqB,CAAC,KAAK,CAAC;aACpC;SACF,CAAC,CAAC;QACH,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,OAA8B;IAC3E,MAAM,EAAE,GAAG,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACjC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,eAAe,CAAC;IAE/C,MAAM,YAAY,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC1D,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,SAAS,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACxD,MAAM,YAAY,CAAC,KAAK,EAAE;YACxB,QAAQ,EAAE,UAAU;YACpB,MAAM,EAAE,wBAAwB;YAChC,MAAM,EAAE,QAAQ;YAChB,QAAQ,EAAE;gBACR,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI;gBAC/B,KAAK,EAAE,KAAK,CAAC,OAAO;aACrB;SACF,CAAC,CAAC;QACH,MAAM,KAAK,CAAC;IACd,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACzD,MAAM,UAAU,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACjF,IAAI,UAAU,KAAK,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QAC7C,MAAM,YAAY,CAAC,KAAK,EAAE;YACxB,QAAQ,EAAE,UAAU;YACpB,MAAM,EAAE,wBAAwB;YAChC,MAAM,EAAE,QAAQ;YAChB,QAAQ,EAAE;gBACR,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI;gBAC/B,cAAc,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM;gBACrC,YAAY,EAAE,UAAU;aACzB;SACF,CAAC,CAAC;QACH,MAAM,KAAK,CAAC;IACd,CAAC;IAED,MAAM,kBAAkB,CAAC,OAAO,CAAC,UAAU,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;IAC5D,MAAM,YAAY,CAAC,KAAK,EAAE;QACxB,QAAQ,EAAE,UAAU;QACpB,MAAM,EAAE,yBAAyB;QACjC,MAAM,EAAE,SAAS;QACjB,QAAQ,EAAE;YACR,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI;YAC/B,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM;SAC9B;KACF,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,UAAkB,EAClB,EAA2B,EAC3B,KAAkB;IAElB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC3C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACnD,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;QAC1C,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACnE,MAAM,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC;QAC/B,CAAC;QACD,OAAO,MAAiC,CAAC;IAC3C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,YAAY,CAAC,KAAK,EAAE;YACxB,QAAQ,EAAE,QAAQ;YAClB,MAAM,EAAE,qBAAqB;YAC7B,MAAM,EAAE,QAAQ;YAChB,QAAQ,EAAE;gBACR,UAAU;gBACV,KAAK,EAAE,qBAAqB,CAAC,KAAK,CAAC;aACpC;SACF,CAAC,CAAC;QACH,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CACxB,aAAsC,EACtC,YAAqC;IAErC,MAAM,aAAa,GAAG,gBAAgB,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;IAC7D,OAAO;QACL,GAAG,aAAa;QAChB,MAAM,EAAE;YACN,GAAG,aAAa;YAChB,IAAI,EAAE,YAAY,CAAC,IAAI;YACvB,IAAI,EAAE,YAAY,CAAC,IAAI;YACvB,IAAI,EAAE;gBACJ,QAAQ,EAAE,YAAY,CAAC,IAAI,CAAC,QAAQ;gBACpC,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAChF;SACF;KACF,CAAC;AACJ,CAAC;AAED,SAAS,0BAA0B,CAAC,YAAqC;IACvE,OAAO;QACL,MAAM,EAAE;YACN,IAAI,EAAE,YAAY,CAAC,IAAI;YACvB,IAAI,EAAE,YAAY,CAAC,IAAI;YACvB,IAAI,EAAE;gBACJ,QAAQ,EAAE,YAAY,CAAC,IAAI,CAAC,QAAQ;gBACpC,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAChF;SACF;QACD,WAAW,EAAE;YACX,IAAI,EAAE,SAAS;YACf,YAAY,EAAE,IAAI;SACnB;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,UAAkB,EAClB,QAAwB;IAExB,MAAM,EAAE,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC/B,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,WAAW,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAChE,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC/E,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,UAAU,GAAG,GAAG,UAAU,QAAQ,SAAS,IAAI,MAAM,EAAE,CAAC;IAC9D,MAAM,kBAAkB,CAAC,UAAU,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;IACtD,OAAO;QACL,IAAI,EAAE,UAAU;QAChB,SAAS;QACT,MAAM;KACP,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,qBAAqB,CAClC,UAAkB,EAClB,YAAqC,EACrC,EAA2B;IAE3B,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;IAC7D,MAAM,kBAAkB,CAAC,UAAU,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;AACpD,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,UAAkB,EAClB,OAAe,EACf,EAA2B;IAE3B,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC1B,MAAM,OAAO,GAAG,GAAG,UAAU,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;IACnD,MAAM,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACrC,MAAM,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,SAAS,CAAC,QAAwB;IACzC,OAAO;QACL,QAAQ,EAAE,QAAQ,EAAE,QAAQ,IAAI,SAAS,CAAC,QAAQ;QAClD,SAAS,EAAE,QAAQ,EAAE,SAAS,IAAI,SAAS,CAAC,SAAS;QACrD,MAAM,EAAE,QAAQ,EAAE,MAAM,IAAI,SAAS,CAAC,MAAM;QAC5C,KAAK,EAAE,QAAQ,EAAE,KAAK,IAAI,SAAS,CAAC,KAAK;QACzC,MAAM,EAAE,QAAQ,EAAE,MAAM,IAAI,SAAS,CAAC,MAAM;KAC7C,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,KAAgC,CAAC;AAC1C,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAc;IAC3C,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC3B,OAAO,KAAK,CAAC,OAAO,CAAC;IACvB,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,KAAkB,EAClB,KAKC;IAED,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,GAAG,CAAC;YACd,UAAU,EAAE,kBAAkB,EAAE;YAChC,cAAc,EAAE,QAAQ;YACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,QAAQ,EAAE,KAAK,CAAC,QAAQ;SACzB,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,qBAAqB;IACvB,CAAC;AACH,CAAC"}

package/dist/reliability/conversation-heartbeat.d.ts

@@ -0,0 +1,37 @@
+import { FailureType } from './types.js';
+export interface HeartbeatCheckDefinition {
+    id: FailureType;
+    description: string;
+}
+export interface HeartbeatState {
+    lastRunAt: number;
+    lastWindowKey: string;
+    lastExecutedCheckIds: string[];
+    updatedAt: number;
+}
+export interface ConversationHeartbeatResult {
+    executed: boolean;
+    reason: 'executed' | 'window_not_elapsed' | 'window_dedup' | 'no_checks';
+    executedCheckIds: string[];
+}
+export interface ConversationHeartbeatOptions {
+    heartbeatFilePath?: string;
+    stateFilePath?: string;
+    windowMs?: number;
+    now?: () => number;
+    executeCheck?: (check: HeartbeatCheckDefinition) => Promise<void> | void;
+    logger?: Pick<Console, 'warn' | 'error' | 'info'>;
+}
+export declare function parseHeartbeatChecklist(markdown: string): HeartbeatCheckDefinition[];
+export declare class ConversationHeartbeatEngine {
+    private readonly heartbeatFilePath;
+    private readonly stateFilePath;
+    private readonly windowMs;
+    private readonly now;
+    private readonly executeCheck;
+    private readonly logger;
+    constructor(options?: ConversationHeartbeatOptions);
+    onInboundMessage(): Promise<ConversationHeartbeatResult>;
+    private loadChecklist;
+}
+//# sourceMappingURL=conversation-heartbeat.d.ts.map

package/dist/reliability/conversation-heartbeat.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"conversation-heartbeat.d.ts","sourceRoot":"","sources":["../../src/reliability/conversation-heartbeat.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEzC,MAAM,WAAW,wBAAwB;IACvC,EAAE,EAAE,WAAW,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,oBAAoB,EAAE,MAAM,EAAE,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,EAAE,UAAU,GAAG,oBAAoB,GAAG,cAAc,GAAG,WAAW,CAAC;IACzE,gBAAgB,EAAE,MAAM,EAAE,CAAC;CAC5B;AAED,MAAM,WAAW,4BAA4B;IAC3C,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,wBAAwB,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACzE,MAAM,CAAC,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,GAAG,MAAM,CAAC,CAAC;CACnD;AAiCD,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,MAAM,GAAG,wBAAwB,EAAE,CAiCpF;AA+CD,qBAAa,2BAA2B;IACtC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAS;IAE3C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IAEvC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAElC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IAEnC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAqD;IAElF,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA2C;gBAEtD,OAAO,GAAE,4BAAiC;IAahD,gBAAgB,IAAI,OAAO,CAAC,2BAA2B,CAAC;IAmD9D,OAAO,CAAC,aAAa;CAgBtB"}