opensentinel 2.1.1 → 3.1.1

package/dist/chunk-35WYTA3C.js

@@ -0,0 +1,382 @@
+// src/core/providers/openai-compatible-provider.ts
+import OpenAI from "openai";
+var OpenAICompatibleProvider = class {
+  id;
+  name;
+  type;
+  client;
+  defaultModel;
+  capabilities;
+  constructor(config) {
+    this.id = config.id;
+    this.name = config.name;
+    this.type = config.type;
+    this.defaultModel = config.defaultModel || "gpt-4o";
+    this.client = new OpenAI({
+      apiKey: config.apiKey || "not-needed",
+      baseURL: config.baseUrl
+    });
+    this.capabilities = {
+      supportsVision: true,
+      supportsToolUse: true,
+      supportsStreaming: true,
+      supportsExtendedThinking: false,
+      supportsSystemPrompt: true,
+      maxContextWindow: 128e3
+    };
+  }
+  getCapabilities() {
+    return { ...this.capabilities };
+  }
+  async createMessage(request) {
+    const messages = this.convertMessages(request);
+    const model = request.model || this.defaultModel;
+    const params = {
+      model,
+      messages,
+      max_tokens: request.max_tokens
+    };
+    if (request.tools?.length) {
+      params.tools = request.tools.map(llmToolToOpenAI);
+    }
+    if (request.thinking) {
+      console.warn(`[${this.name}] Extended thinking not supported, ignoring`);
+    }
+    const response = await this.client.chat.completions.create(params);
+    return this.convertResponse(response, model);
+  }
+  streamMessage(request) {
+    const messages = this.convertMessages(request);
+    const model = request.model || this.defaultModel;
+    const params = {
+      model,
+      messages,
+      max_tokens: request.max_tokens,
+      stream: true
+    };
+    if (request.tools?.length) {
+      params.tools = request.tools.map(llmToolToOpenAI);
+    }
+    if (request.thinking) {
+      console.warn(`[${this.name}] Extended thinking not supported, ignoring`);
+    }
+    let fullContent = "";
+    let toolCalls = [];
+    let finishReason = "stop";
+    let inputTokens = 0;
+    let outputTokens = 0;
+    const streamPromise = this.client.chat.completions.create(params);
+    const events = {
+      [Symbol.asyncIterator]() {
+        return {
+          streamDone: false,
+          async next() {
+            return { done: true, value: void 0 };
+          }
+        };
+      }
+    };
+    const self = this;
+    return {
+      events: {
+        async *[Symbol.asyncIterator]() {
+          try {
+            const stream = await self.client.chat.completions.create({
+              ...params,
+              stream: true
+            });
+            for await (const chunk of stream) {
+              const delta = chunk.choices?.[0]?.delta;
+              if (delta?.content) {
+                fullContent += delta.content;
+                yield {
+                  type: "content_block_delta",
+                  delta: { type: "text_delta", text: delta.content }
+                };
+              }
+              if (delta?.tool_calls) {
+                for (const tc of delta.tool_calls) {
+                  if (tc.index !== void 0) {
+                    while (toolCalls.length <= tc.index) {
+                      toolCalls.push({ id: "", name: "", arguments: "" });
+                    }
+                    if (tc.id) toolCalls[tc.index].id = tc.id;
+                    if (tc.function?.name) toolCalls[tc.index].name = tc.function.name;
+                    if (tc.function?.arguments) toolCalls[tc.index].arguments += tc.function.arguments;
+                  }
+                }
+              }
+              if (chunk.choices?.[0]?.finish_reason) {
+                finishReason = chunk.choices[0].finish_reason;
+              }
+              if (chunk.usage) {
+                inputTokens = chunk.usage.prompt_tokens || 0;
+                outputTokens = chunk.usage.completion_tokens || 0;
+              }
+            }
+          } catch (err) {
+            const response = await self.client.chat.completions.create({
+              ...params,
+              stream: false
+            });
+            const msg = response.choices?.[0]?.message;
+            if (msg?.content) {
+              fullContent = msg.content;
+              yield {
+                type: "content_block_delta",
+                delta: { type: "text_delta", text: msg.content }
+              };
+            }
+            finishReason = response.choices?.[0]?.finish_reason || "stop";
+            inputTokens = response.usage?.prompt_tokens || 0;
+            outputTokens = response.usage?.completion_tokens || 0;
+          }
+        }
+      },
+      async finalMessage() {
+        const contentBlocks = [];
+        if (fullContent) {
+          contentBlocks.push({ type: "text", text: fullContent });
+        }
+        for (const tc of toolCalls) {
+          if (tc.name) {
+            let parsedArgs = {};
+            try {
+              parsedArgs = JSON.parse(tc.arguments || "{}");
+            } catch {
+              parsedArgs = {};
+            }
+            contentBlocks.push({
+              type: "tool_use",
+              id: tc.id || `call_${Date.now()}`,
+              name: tc.name,
+              input: parsedArgs
+            });
+          }
+        }
+        return {
+          content: contentBlocks,
+          stop_reason: finishReason === "tool_calls" ? "tool_use" : mapFinishReason(finishReason),
+          usage: { input_tokens: inputTokens, output_tokens: outputTokens },
+          model
+        };
+      }
+    };
+  }
+  async listModels() {
+    try {
+      const models = await this.client.models.list();
+      return (models.data || []).map((m) => m.id);
+    } catch {
+      return [this.defaultModel];
+    }
+  }
+  async isAvailable() {
+    try {
+      await this.client.models.list();
+      return true;
+    } catch {
+      return false;
+    }
+  }
+  // ============================================
+  // Conversion helpers
+  // ============================================
+  convertMessages(request) {
+    const messages = [];
+    if (request.system) {
+      messages.push({ role: "system", content: request.system });
+    }
+    for (const msg of request.messages) {
+      if (msg.role === "system") continue;
+      if (typeof msg.content === "string") {
+        messages.push({ role: msg.role, content: msg.content });
+        continue;
+      }
+      const hasToolResult = msg.content.some((b) => b.type === "tool_result");
+      if (hasToolResult) {
+        for (const block of msg.content) {
+          if (block.type === "tool_result") {
+            messages.push({
+              role: "tool",
+              tool_call_id: block.tool_use_id,
+              content: block.content || ""
+            });
+          }
+        }
+        continue;
+      }
+      const hasToolUse = msg.content.some((b) => b.type === "tool_use");
+      if (hasToolUse) {
+        const textParts = msg.content.filter((b) => b.type === "text");
+        const toolParts = msg.content.filter((b) => b.type === "tool_use");
+        messages.push({
+          role: "assistant",
+          content: textParts.map((b) => b.text).join("") || null,
+          tool_calls: toolParts.map((b) => ({
+            id: b.id || `call_${Date.now()}`,
+            type: "function",
+            function: {
+              name: b.name,
+              arguments: JSON.stringify(b.input || {})
+            }
+          }))
+        });
+        continue;
+      }
+      const parts = [];
+      for (const block of msg.content) {
+        if (block.type === "text") {
+          parts.push({ type: "text", text: block.text });
+        } else if (block.type === "image") {
+          if (block.source?.type === "url" && block.source.url) {
+            parts.push({
+              type: "image_url",
+              image_url: { url: block.source.url }
+            });
+          } else if (block.source?.data) {
+            const mediaType = block.source.mediaType || "image/jpeg";
+            parts.push({
+              type: "image_url",
+              image_url: {
+                url: `data:${mediaType};base64,${block.source.data}`
+              }
+            });
+          }
+        }
+      }
+      messages.push({ role: msg.role, content: parts.length === 1 && parts[0].type === "text" ? parts[0].text : parts });
+    }
+    return messages;
+  }
+  convertResponse(response, model) {
+    const choice = response.choices?.[0];
+    const message = choice?.message;
+    const contentBlocks = [];
+    if (message?.content) {
+      contentBlocks.push({ type: "text", text: message.content });
+    }
+    if (message?.tool_calls) {
+      for (const tc of message.tool_calls) {
+        let parsedArgs = {};
+        try {
+          parsedArgs = JSON.parse(tc.function?.arguments || "{}");
+        } catch {
+          parsedArgs = {};
+        }
+        contentBlocks.push({
+          type: "tool_use",
+          id: tc.id,
+          name: tc.function?.name || "",
+          input: parsedArgs
+        });
+      }
+    }
+    const finishReason = choice?.finish_reason || "stop";
+    return {
+      content: contentBlocks,
+      stop_reason: finishReason === "tool_calls" ? "tool_use" : mapFinishReason(finishReason),
+      usage: {
+        input_tokens: response.usage?.prompt_tokens || 0,
+        output_tokens: response.usage?.completion_tokens || 0
+      },
+      model
+    };
+  }
+};
+function llmToolToOpenAI(tool) {
+  return {
+    type: "function",
+    function: {
+      name: tool.name,
+      description: tool.description,
+      parameters: tool.input_schema
+    }
+  };
+}
+function mapFinishReason(reason) {
+  switch (reason) {
+    case "stop":
+      return "end_turn";
+    case "tool_calls":
+      return "tool_use";
+    case "length":
+      return "max_tokens";
+    default:
+      return "end_turn";
+  }
+}
+
+// src/core/providers/ollama.ts
+var OllamaProvider = class extends OpenAICompatibleProvider {
+  baseUrl;
+  constructor(baseUrl = "http://localhost:11434", defaultModel = "llama3.1") {
+    super({
+      id: "ollama",
+      name: "Ollama",
+      type: "openai-compatible",
+      apiKey: "ollama",
+      // Ollama doesn't require an API key
+      baseUrl: `${baseUrl}/v1`,
+      defaultModel,
+      enabled: true
+    });
+    this.baseUrl = baseUrl;
+  }
+  /**
+   * Return conservative capabilities since not all Ollama models
+   * support vision or tool use.
+   */
+  getCapabilities() {
+    return {
+      supportsVision: false,
+      supportsToolUse: false,
+      supportsStreaming: true,
+      supportsExtendedThinking: false,
+      supportsSystemPrompt: true,
+      maxContextWindow: 8192
+    };
+  }
+  /**
+   * List available models using Ollama's native /api/tags endpoint.
+   * Falls back to the parent's OpenAI-compatible listing on error.
+   */
+  async listModels() {
+    try {
+      const response = await fetch(`${this.baseUrl}/api/tags`);
+      if (!response.ok) {
+        throw new Error(`Ollama /api/tags returned ${response.status}`);
+      }
+      const data = await response.json();
+      if (data.models && data.models.length > 0) {
+        return data.models.map((m) => m.name);
+      }
+      return [this.defaultModel];
+    } catch {
+      return super.listModels();
+    }
+  }
+  /**
+   * Check if the local Ollama server is reachable by hitting
+   * the native /api/tags endpoint with a 3-second timeout.
+   */
+  async isAvailable() {
+    try {
+      const controller = new AbortController();
+      const timeout = setTimeout(() => controller.abort(), 3e3);
+      const response = await fetch(`${this.baseUrl}/api/tags`, {
+        signal: controller.signal
+      });
+      clearTimeout(timeout);
+      return response.ok;
+    } catch {
+      return false;
+    }
+  }
+};
+
+export {
+  OpenAICompatibleProvider,
+  OllamaProvider
+};
+//# sourceMappingURL=chunk-35WYTA3C.js.map

package/dist/chunk-35WYTA3C.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/core/providers/openai-compatible-provider.ts","../src/core/providers/ollama.ts"],"sourcesContent":["/**\n * OpenAI-Compatible Provider\n *\n * Works with OpenAI, OpenRouter, Groq, Mistral, Ollama, and any\n * OpenAI-compatible API endpoint. Converts between provider-agnostic\n * LLM types and OpenAI's chat completions format.\n */\n\nimport OpenAI from \"openai\";\nimport type { LLMProvider } from \"./provider\";\nimport type {\n  LLMProviderCapabilities,\n  LLMProviderConfig,\n  LLMRequest,\n  LLMResponse,\n  LLMContentBlock,\n  LLMStreamEvent,\n  LLMStreamResult,\n  LLMMessage,\n  LLMTool,\n} from \"./types\";\n\nexport class OpenAICompatibleProvider implements LLMProvider {\n  readonly id: string;\n  readonly name: string;\n  readonly type: string;\n  protected client: OpenAI;\n  protected defaultModel: string;\n  protected capabilities: LLMProviderCapabilities;\n\n  constructor(config: LLMProviderConfig) {\n    this.id = config.id;\n    this.name = config.name;\n    this.type = config.type;\n    this.defaultModel = config.defaultModel || \"gpt-4o\";\n\n    this.client = new OpenAI({\n      apiKey: config.apiKey || \"not-needed\",\n      baseURL: config.baseUrl,\n    });\n\n    this.capabilities = {\n      supportsVision: true,\n      supportsToolUse: true,\n      supportsStreaming: true,\n      supportsExtendedThinking: false,\n      supportsSystemPrompt: true,\n      maxContextWindow: 128000,\n    };\n  }\n\n  getCapabilities(): LLMProviderCapabilities {\n    return { ...this.capabilities };\n  }\n\n  async createMessage(request: LLMRequest): Promise<LLMResponse> {\n    const messages = this.convertMessages(request);\n    const model = request.model || this.defaultModel;\n\n    const params: any = {\n      model,\n      messages,\n      max_tokens: request.max_tokens,\n    };\n\n    if (request.tools?.length) {\n      params.tools = request.tools.map(llmToolToOpenAI);\n    }\n\n    // Extended thinking not supported — log warning and ignore\n    if (request.thinking) {\n      console.warn(`[${this.name}] Extended thinking not supported, ignoring`);\n    }\n\n    const response = await this.client.chat.completions.create(params);\n    return this.convertResponse(response, model);\n  }\n\n  streamMessage(request: LLMRequest): LLMStreamResult {\n    const messages = this.convertMessages(request);\n    const model = request.model || this.defaultModel;\n\n    const params: any = {\n      model,\n      messages,\n      max_tokens: request.max_tokens,\n      stream: true,\n    };\n\n    if (request.tools?.length) {\n      params.tools = request.tools.map(llmToolToOpenAI);\n    }\n\n    if (request.thinking) {\n      console.warn(`[${this.name}] Extended thinking not supported, ignoring`);\n    }\n\n    // Accumulate for finalMessage\n    let fullContent = \"\";\n    let toolCalls: any[] = [];\n    let finishReason = \"stop\";\n    let inputTokens = 0;\n    let outputTokens = 0;\n\n    const streamPromise = this.client.chat.completions.create(params) as Promise<any>;\n\n    const events: AsyncIterable<LLMStreamEvent> = {\n      [Symbol.asyncIterator]() {\n        return {\n          streamDone: false,\n          async next(): Promise<IteratorResult<LLMStreamEvent>> {\n            // We need a different approach for OpenAI streaming\n            // Use the non-streaming call and emit chunks manually\n            return { done: true, value: undefined as any };\n          },\n        };\n      },\n    };\n\n    // For OpenAI-compatible, we use a simpler approach: create a non-streaming\n    // call wrapped as a stream-like result. This avoids complex SSE parsing\n    // differences across providers.\n    const self = this;\n\n    return {\n      events: {\n        async *[Symbol.asyncIterator]() {\n          try {\n            const stream = await self.client.chat.completions.create({\n              ...params,\n              stream: true,\n            });\n\n            for await (const chunk of stream as any) {\n              const delta = chunk.choices?.[0]?.delta;\n              if (delta?.content) {\n                fullContent += delta.content;\n                yield {\n                  type: \"content_block_delta\" as const,\n                  delta: { type: \"text_delta\" as const, text: delta.content },\n                };\n              }\n              if (delta?.tool_calls) {\n                for (const tc of delta.tool_calls) {\n                  if (tc.index !== undefined) {\n                    while (toolCalls.length <= tc.index) {\n                      toolCalls.push({ id: \"\", name: \"\", arguments: \"\" });\n                    }\n                    if (tc.id) toolCalls[tc.index].id = tc.id;\n                    if (tc.function?.name) toolCalls[tc.index].name = tc.function.name;\n                    if (tc.function?.arguments) toolCalls[tc.index].arguments += tc.function.arguments;\n                  }\n                }\n              }\n              if (chunk.choices?.[0]?.finish_reason) {\n                finishReason = chunk.choices[0].finish_reason;\n              }\n              if (chunk.usage) {\n                inputTokens = chunk.usage.prompt_tokens || 0;\n                outputTokens = chunk.usage.completion_tokens || 0;\n              }\n            }\n          } catch (err) {\n            // If streaming fails, fall back to non-streaming\n            const response = await self.client.chat.completions.create({\n              ...params,\n              stream: false,\n            });\n            const msg = (response as any).choices?.[0]?.message;\n            if (msg?.content) {\n              fullContent = msg.content;\n              yield {\n                type: \"content_block_delta\" as const,\n                delta: { type: \"text_delta\" as const, text: msg.content },\n              };\n            }\n            finishReason = (response as any).choices?.[0]?.finish_reason || \"stop\";\n            inputTokens = (response as any).usage?.prompt_tokens || 0;\n            outputTokens = (response as any).usage?.completion_tokens || 0;\n          }\n        },\n      },\n      async finalMessage(): Promise<LLMResponse> {\n        const contentBlocks: LLMContentBlock[] = [];\n\n        if (fullContent) {\n          contentBlocks.push({ type: \"text\", text: fullContent });\n        }\n\n        for (const tc of toolCalls) {\n          if (tc.name) {\n            let parsedArgs: unknown = {};\n            try {\n              parsedArgs = JSON.parse(tc.arguments || \"{}\");\n            } catch {\n              parsedArgs = {};\n            }\n            contentBlocks.push({\n              type: \"tool_use\",\n              id: tc.id || `call_${Date.now()}`,\n              name: tc.name,\n              input: parsedArgs,\n            });\n          }\n        }\n\n        return {\n          content: contentBlocks,\n          stop_reason: finishReason === \"tool_calls\" ? \"tool_use\" : mapFinishReason(finishReason),\n          usage: { input_tokens: inputTokens, output_tokens: outputTokens },\n          model,\n        };\n      },\n    };\n  }\n\n  async listModels(): Promise<string[]> {\n    try {\n      const models = await this.client.models.list();\n      return (models.data || []).map((m: any) => m.id);\n    } catch {\n      return [this.defaultModel];\n    }\n  }\n\n  async isAvailable(): Promise<boolean> {\n    try {\n      await this.client.models.list();\n      return true;\n    } catch {\n      return false;\n    }\n  }\n\n  // ============================================\n  // Conversion helpers\n  // ============================================\n\n  protected convertMessages(request: LLMRequest): any[] {\n    const messages: any[] = [];\n\n    // Add system prompt as a system role message\n    if (request.system) {\n      messages.push({ role: \"system\", content: request.system });\n    }\n\n    for (const msg of request.messages) {\n      if (msg.role === \"system\") continue; // Already handled above\n\n      if (typeof msg.content === \"string\") {\n        messages.push({ role: msg.role, content: msg.content });\n        continue;\n      }\n\n      // Convert content blocks\n      const hasToolResult = msg.content.some((b) => b.type === \"tool_result\");\n      if (hasToolResult) {\n        // OpenAI uses separate tool messages\n        for (const block of msg.content) {\n          if (block.type === \"tool_result\") {\n            messages.push({\n              role: \"tool\",\n              tool_call_id: block.tool_use_id,\n              content: block.content || \"\",\n            });\n          }\n        }\n        continue;\n      }\n\n      const hasToolUse = msg.content.some((b) => b.type === \"tool_use\");\n      if (hasToolUse) {\n        // Assistant message with tool calls\n        const textParts = msg.content.filter((b) => b.type === \"text\");\n        const toolParts = msg.content.filter((b) => b.type === \"tool_use\");\n\n        messages.push({\n          role: \"assistant\",\n          content: textParts.map((b) => b.text).join(\"\") || null,\n          tool_calls: toolParts.map((b) => ({\n            id: b.id || `call_${Date.now()}`,\n            type: \"function\",\n            function: {\n              name: b.name,\n              arguments: JSON.stringify(b.input || {}),\n            },\n          })),\n        });\n        continue;\n      }\n\n      // Mixed content (text + images)\n      const parts: any[] = [];\n      for (const block of msg.content) {\n        if (block.type === \"text\") {\n          parts.push({ type: \"text\", text: block.text });\n        } else if (block.type === \"image\") {\n          if (block.source?.type === \"url\" && block.source.url) {\n            parts.push({\n              type: \"image_url\",\n              image_url: { url: block.source.url },\n            });\n          } else if (block.source?.data) {\n            const mediaType = block.source.mediaType || \"image/jpeg\";\n            parts.push({\n              type: \"image_url\",\n              image_url: {\n                url: `data:${mediaType};base64,${block.source.data}`,\n              },\n            });\n          }\n        }\n      }\n\n      messages.push({ role: msg.role, content: parts.length === 1 && parts[0].type === \"text\" ? parts[0].text : parts });\n    }\n\n    return messages;\n  }\n\n  protected convertResponse(response: any, model: string): LLMResponse {\n    const choice = response.choices?.[0];\n    const message = choice?.message;\n    const contentBlocks: LLMContentBlock[] = [];\n\n    if (message?.content) {\n      contentBlocks.push({ type: \"text\", text: message.content });\n    }\n\n    // Convert tool calls\n    if (message?.tool_calls) {\n      for (const tc of message.tool_calls) {\n        let parsedArgs: unknown = {};\n        try {\n          parsedArgs = JSON.parse(tc.function?.arguments || \"{}\");\n        } catch {\n          parsedArgs = {};\n        }\n        contentBlocks.push({\n          type: \"tool_use\",\n          id: tc.id,\n          name: tc.function?.name || \"\",\n          input: parsedArgs,\n        });\n      }\n    }\n\n    const finishReason = choice?.finish_reason || \"stop\";\n\n    return {\n      content: contentBlocks,\n      stop_reason: finishReason === \"tool_calls\" ? \"tool_use\" : mapFinishReason(finishReason),\n      usage: {\n        input_tokens: response.usage?.prompt_tokens || 0,\n        output_tokens: response.usage?.completion_tokens || 0,\n      },\n      model,\n    };\n  }\n}\n\n// ============================================\n// Tool conversion\n// ============================================\n\nfunction llmToolToOpenAI(tool: LLMTool): any {\n  return {\n    type: \"function\",\n    function: {\n      name: tool.name,\n      description: tool.description,\n      parameters: tool.input_schema,\n    },\n  };\n}\n\nfunction mapFinishReason(reason: string): LLMResponse[\"stop_reason\"] {\n  switch (reason) {\n    case \"stop\":\n      return \"end_turn\";\n    case \"tool_calls\":\n      return \"tool_use\";\n    case \"length\":\n      return \"max_tokens\";\n    default:\n      return \"end_turn\";\n  }\n}\n","/**\n * Ollama Provider\n *\n * Extends the OpenAI-compatible provider for local Ollama instances.\n * Ollama exposes an OpenAI-compatible API at /v1 and its own native\n * endpoints (e.g. /api/tags) for model management.\n */\n\nimport { OpenAICompatibleProvider } from \"./openai-compatible-provider\";\nimport type { LLMProviderCapabilities } from \"./types\";\n\nexport class OllamaProvider extends OpenAICompatibleProvider {\n  private baseUrl: string;\n\n  constructor(\n    baseUrl: string = \"http://localhost:11434\",\n    defaultModel: string = \"llama3.1\"\n  ) {\n    super({\n      id: \"ollama\",\n      name: \"Ollama\",\n      type: \"openai-compatible\",\n      apiKey: \"ollama\", // Ollama doesn't require an API key\n      baseUrl: `${baseUrl}/v1`,\n      defaultModel,\n      enabled: true,\n    });\n\n    this.baseUrl = baseUrl;\n  }\n\n  /**\n   * Return conservative capabilities since not all Ollama models\n   * support vision or tool use.\n   */\n  override getCapabilities(): LLMProviderCapabilities {\n    return {\n      supportsVision: false,\n      supportsToolUse: false,\n      supportsStreaming: true,\n      supportsExtendedThinking: false,\n      supportsSystemPrompt: true,\n      maxContextWindow: 8192,\n    };\n  }\n\n  /**\n   * List available models using Ollama's native /api/tags endpoint.\n   * Falls back to the parent's OpenAI-compatible listing on error.\n   */\n  override async listModels(): Promise<string[]> {\n    try {\n      const response = await fetch(`${this.baseUrl}/api/tags`);\n      if (!response.ok) {\n        throw new Error(`Ollama /api/tags returned ${response.status}`);\n      }\n      const data = (await response.json()) as {\n        models?: Array<{ name: string }>;\n      };\n      if (data.models && data.models.length > 0) {\n        return data.models.map((m) => m.name);\n      }\n      return [this.defaultModel];\n    } catch {\n      return super.listModels();\n    }\n  }\n\n  /**\n   * Check if the local Ollama server is reachable by hitting\n   * the native /api/tags endpoint with a 3-second timeout.\n   */\n  override async isAvailable(): Promise<boolean> {\n    try {\n      const controller = new AbortController();\n      const timeout = setTimeout(() => controller.abort(), 3000);\n\n      const response = await fetch(`${this.baseUrl}/api/tags`, {\n        signal: controller.signal,\n      });\n\n      clearTimeout(timeout);\n      return response.ok;\n    } catch {\n      return false;\n    }\n  }\n}\n"],"mappings":";AAQA,OAAO,YAAY;AAcZ,IAAM,2BAAN,MAAsD;AAAA,EAClD;AAAA,EACA;AAAA,EACA;AAAA,EACC;AAAA,EACA;AAAA,EACA;AAAA,EAEV,YAAY,QAA2B;AACrC,SAAK,KAAK,OAAO;AACjB,SAAK,OAAO,OAAO;AACnB,SAAK,OAAO,OAAO;AACnB,SAAK,eAAe,OAAO,gBAAgB;AAE3C,SAAK,SAAS,IAAI,OAAO;AAAA,MACvB,QAAQ,OAAO,UAAU;AAAA,MACzB,SAAS,OAAO;AAAA,IAClB,CAAC;AAED,SAAK,eAAe;AAAA,MAClB,gBAAgB;AAAA,MAChB,iBAAiB;AAAA,MACjB,mBAAmB;AAAA,MACnB,0BAA0B;AAAA,MAC1B,sBAAsB;AAAA,MACtB,kBAAkB;AAAA,IACpB;AAAA,EACF;AAAA,EAEA,kBAA2C;AACzC,WAAO,EAAE,GAAG,KAAK,aAAa;AAAA,EAChC;AAAA,EAEA,MAAM,cAAc,SAA2C;AAC7D,UAAM,WAAW,KAAK,gBAAgB,OAAO;AAC7C,UAAM,QAAQ,QAAQ,SAAS,KAAK;AAEpC,UAAM,SAAc;AAAA,MAClB;AAAA,MACA;AAAA,MACA,YAAY,QAAQ;AAAA,IACtB;AAEA,QAAI,QAAQ,OAAO,QAAQ;AACzB,aAAO,QAAQ,QAAQ,MAAM,IAAI,eAAe;AAAA,IAClD;AAGA,QAAI,QAAQ,UAAU;AACpB,cAAQ,KAAK,IAAI,KAAK,IAAI,6CAA6C;AAAA,IACzE;AAEA,UAAM,WAAW,MAAM,KAAK,OAAO,KAAK,YAAY,OAAO,MAAM;AACjE,WAAO,KAAK,gBAAgB,UAAU,KAAK;AAAA,EAC7C;AAAA,EAEA,cAAc,SAAsC;AAClD,UAAM,WAAW,KAAK,gBAAgB,OAAO;AAC7C,UAAM,QAAQ,QAAQ,SAAS,KAAK;AAEpC,UAAM,SAAc;AAAA,MAClB;AAAA,MACA;AAAA,MACA,YAAY,QAAQ;AAAA,MACpB,QAAQ;AAAA,IACV;AAEA,QAAI,QAAQ,OAAO,QAAQ;AACzB,aAAO,QAAQ,QAAQ,MAAM,IAAI,eAAe;AAAA,IAClD;AAEA,QAAI,QAAQ,UAAU;AACpB,cAAQ,KAAK,IAAI,KAAK,IAAI,6CAA6C;AAAA,IACzE;AAGA,QAAI,cAAc;AAClB,QAAI,YAAmB,CAAC;AACxB,QAAI,eAAe;AACnB,QAAI,cAAc;AAClB,QAAI,eAAe;AAEnB,UAAM,gBAAgB,KAAK,OAAO,KAAK,YAAY,OAAO,MAAM;AAEhE,UAAM,SAAwC;AAAA,MAC5C,CAAC,OAAO,aAAa,IAAI;AACvB,eAAO;AAAA,UACL,YAAY;AAAA,UACZ,MAAM,OAAgD;AAGpD,mBAAO,EAAE,MAAM,MAAM,OAAO,OAAiB;AAAA,UAC/C;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAKA,UAAM,OAAO;AAEb,WAAO;AAAA,MACL,QAAQ;AAAA,QACN,QAAQ,OAAO,aAAa,IAAI;AAC9B,cAAI;AACF,kBAAM,SAAS,MAAM,KAAK,OAAO,KAAK,YAAY,OAAO;AAAA,cACvD,GAAG;AAAA,cACH,QAAQ;AAAA,YACV,CAAC;AAED,6BAAiB,SAAS,QAAe;AACvC,oBAAM,QAAQ,MAAM,UAAU,CAAC,GAAG;AAClC,kBAAI,OAAO,SAAS;AAClB,+BAAe,MAAM;AACrB,sBAAM;AAAA,kBACJ,MAAM;AAAA,kBACN,OAAO,EAAE,MAAM,cAAuB,MAAM,MAAM,QAAQ;AAAA,gBAC5D;AAAA,cACF;AACA,kBAAI,OAAO,YAAY;AACrB,2BAAW,MAAM,MAAM,YAAY;AACjC,sBAAI,GAAG,UAAU,QAAW;AAC1B,2BAAO,UAAU,UAAU,GAAG,OAAO;AACnC,gCAAU,KAAK,EAAE,IAAI,IAAI,MAAM,IAAI,WAAW,GAAG,CAAC;AAAA,oBACpD;AACA,wBAAI,GAAG,GAAI,WAAU,GAAG,KAAK,EAAE,KAAK,GAAG;AACvC,wBAAI,GAAG,UAAU,KAAM,WAAU,GAAG,KAAK,EAAE,OAAO,GAAG,SAAS;AAC9D,wBAAI,GAAG,UAAU,UAAW,WAAU,GAAG,KAAK,EAAE,aAAa,GAAG,SAAS;AAAA,kBAC3E;AAAA,gBACF;AAAA,cACF;AACA,kBAAI,MAAM,UAAU,CAAC,GAAG,eAAe;AACrC,+BAAe,MAAM,QAAQ,CAAC,EAAE;AAAA,cAClC;AACA,kBAAI,MAAM,OAAO;AACf,8BAAc,MAAM,MAAM,iBAAiB;AAC3C,+BAAe,MAAM,MAAM,qBAAqB;AAAA,cAClD;AAAA,YACF;AAAA,UACF,SAAS,KAAK;AAEZ,kBAAM,WAAW,MAAM,KAAK,OAAO,KAAK,YAAY,OAAO;AAAA,cACzD,GAAG;AAAA,cACH,QAAQ;AAAA,YACV,CAAC;AACD,kBAAM,MAAO,SAAiB,UAAU,CAAC,GAAG;AAC5C,gBAAI,KAAK,SAAS;AAChB,4BAAc,IAAI;AAClB,oBAAM;AAAA,gBACJ,MAAM;AAAA,gBACN,OAAO,EAAE,MAAM,cAAuB,MAAM,IAAI,QAAQ;AAAA,cAC1D;AAAA,YACF;AACA,2BAAgB,SAAiB,UAAU,CAAC,GAAG,iBAAiB;AAChE,0BAAe,SAAiB,OAAO,iBAAiB;AACxD,2BAAgB,SAAiB,OAAO,qBAAqB;AAAA,UAC/D;AAAA,QACF;AAAA,MACF;AAAA,MACA,MAAM,eAAqC;AACzC,cAAM,gBAAmC,CAAC;AAE1C,YAAI,aAAa;AACf,wBAAc,KAAK,EAAE,MAAM,QAAQ,MAAM,YAAY,CAAC;AAAA,QACxD;AAEA,mBAAW,MAAM,WAAW;AAC1B,cAAI,GAAG,MAAM;AACX,gBAAI,aAAsB,CAAC;AAC3B,gBAAI;AACF,2BAAa,KAAK,MAAM,GAAG,aAAa,IAAI;AAAA,YAC9C,QAAQ;AACN,2BAAa,CAAC;AAAA,YAChB;AACA,0BAAc,KAAK;AAAA,cACjB,MAAM;AAAA,cACN,IAAI,GAAG,MAAM,QAAQ,KAAK,IAAI,CAAC;AAAA,cAC/B,MAAM,GAAG;AAAA,cACT,OAAO;AAAA,YACT,CAAC;AAAA,UACH;AAAA,QACF;AAEA,eAAO;AAAA,UACL,SAAS;AAAA,UACT,aAAa,iBAAiB,eAAe,aAAa,gBAAgB,YAAY;AAAA,UACtF,OAAO,EAAE,cAAc,aAAa,eAAe,aAAa;AAAA,UAChE;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,aAAgC;AACpC,QAAI;AACF,YAAM,SAAS,MAAM,KAAK,OAAO,OAAO,KAAK;AAC7C,cAAQ,OAAO,QAAQ,CAAC,GAAG,IAAI,CAAC,MAAW,EAAE,EAAE;AAAA,IACjD,QAAQ;AACN,aAAO,CAAC,KAAK,YAAY;AAAA,IAC3B;AAAA,EACF;AAAA,EAEA,MAAM,cAAgC;AACpC,QAAI;AACF,YAAM,KAAK,OAAO,OAAO,KAAK;AAC9B,aAAO;AAAA,IACT,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAMU,gBAAgB,SAA4B;AACpD,UAAM,WAAkB,CAAC;AAGzB,QAAI,QAAQ,QAAQ;AAClB,eAAS,KAAK,EAAE,MAAM,UAAU,SAAS,QAAQ,OAAO,CAAC;AAAA,IAC3D;AAEA,eAAW,OAAO,QAAQ,UAAU;AAClC,UAAI,IAAI,SAAS,SAAU;AAE3B,UAAI,OAAO,IAAI,YAAY,UAAU;AACnC,iBAAS,KAAK,EAAE,MAAM,IAAI,MAAM,SAAS,IAAI,QAAQ,CAAC;AACtD;AAAA,MACF;AAGA,YAAM,gBAAgB,IAAI,QAAQ,KAAK,CAAC,MAAM,EAAE,SAAS,aAAa;AACtE,UAAI,eAAe;AAEjB,mBAAW,SAAS,IAAI,SAAS;AAC/B,cAAI,MAAM,SAAS,eAAe;AAChC,qBAAS,KAAK;AAAA,cACZ,MAAM;AAAA,cACN,cAAc,MAAM;AAAA,cACpB,SAAS,MAAM,WAAW;AAAA,YAC5B,CAAC;AAAA,UACH;AAAA,QACF;AACA;AAAA,MACF;AAEA,YAAM,aAAa,IAAI,QAAQ,KAAK,CAAC,MAAM,EAAE,SAAS,UAAU;AAChE,UAAI,YAAY;AAEd,cAAM,YAAY,IAAI,QAAQ,OAAO,CAAC,MAAM,EAAE,SAAS,MAAM;AAC7D,cAAM,YAAY,IAAI,QAAQ,OAAO,CAAC,MAAM,EAAE,SAAS,UAAU;AAEjE,iBAAS,KAAK;AAAA,UACZ,MAAM;AAAA,UACN,SAAS,UAAU,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK;AAAA,UAClD,YAAY,UAAU,IAAI,CAAC,OAAO;AAAA,YAChC,IAAI,EAAE,MAAM,QAAQ,KAAK,IAAI,CAAC;AAAA,YAC9B,MAAM;AAAA,YACN,UAAU;AAAA,cACR,MAAM,EAAE;AAAA,cACR,WAAW,KAAK,UAAU,EAAE,SAAS,CAAC,CAAC;AAAA,YACzC;AAAA,UACF,EAAE;AAAA,QACJ,CAAC;AACD;AAAA,MACF;AAGA,YAAM,QAAe,CAAC;AACtB,iBAAW,SAAS,IAAI,SAAS;AAC/B,YAAI,MAAM,SAAS,QAAQ;AACzB,gBAAM,KAAK,EAAE,MAAM,QAAQ,MAAM,MAAM,KAAK,CAAC;AAAA,QAC/C,WAAW,MAAM,SAAS,SAAS;AACjC,cAAI,MAAM,QAAQ,SAAS,SAAS,MAAM,OAAO,KAAK;AACpD,kBAAM,KAAK;AAAA,cACT,MAAM;AAAA,cACN,WAAW,EAAE,KAAK,MAAM,OAAO,IAAI;AAAA,YACrC,CAAC;AAAA,UACH,WAAW,MAAM,QAAQ,MAAM;AAC7B,kBAAM,YAAY,MAAM,OAAO,aAAa;AAC5C,kBAAM,KAAK;AAAA,cACT,MAAM;AAAA,cACN,WAAW;AAAA,gBACT,KAAK,QAAQ,SAAS,WAAW,MAAM,OAAO,IAAI;AAAA,cACpD;AAAA,YACF,CAAC;AAAA,UACH;AAAA,QACF;AAAA,MACF;AAEA,eAAS,KAAK,EAAE,MAAM,IAAI,MAAM,SAAS,MAAM,WAAW,KAAK,MAAM,CAAC,EAAE,SAAS,SAAS,MAAM,CAAC,EAAE,OAAO,MAAM,CAAC;AAAA,IACnH;AAEA,WAAO;AAAA,EACT;AAAA,EAEU,gBAAgB,UAAe,OAA4B;AACnE,UAAM,SAAS,SAAS,UAAU,CAAC;AACnC,UAAM,UAAU,QAAQ;AACxB,UAAM,gBAAmC,CAAC;AAE1C,QAAI,SAAS,SAAS;AACpB,oBAAc,KAAK,EAAE,MAAM,QAAQ,MAAM,QAAQ,QAAQ,CAAC;AAAA,IAC5D;AAGA,QAAI,SAAS,YAAY;AACvB,iBAAW,MAAM,QAAQ,YAAY;AACnC,YAAI,aAAsB,CAAC;AAC3B,YAAI;AACF,uBAAa,KAAK,MAAM,GAAG,UAAU,aAAa,IAAI;AAAA,QACxD,QAAQ;AACN,uBAAa,CAAC;AAAA,QAChB;AACA,sBAAc,KAAK;AAAA,UACjB,MAAM;AAAA,UACN,IAAI,GAAG;AAAA,UACP,MAAM,GAAG,UAAU,QAAQ;AAAA,UAC3B,OAAO;AAAA,QACT,CAAC;AAAA,MACH;AAAA,IACF;AAEA,UAAM,eAAe,QAAQ,iBAAiB;AAE9C,WAAO;AAAA,MACL,SAAS;AAAA,MACT,aAAa,iBAAiB,eAAe,aAAa,gBAAgB,YAAY;AAAA,MACtF,OAAO;AAAA,QACL,cAAc,SAAS,OAAO,iBAAiB;AAAA,QAC/C,eAAe,SAAS,OAAO,qBAAqB;AAAA,MACtD;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACF;AAMA,SAAS,gBAAgB,MAAoB;AAC3C,SAAO;AAAA,IACL,MAAM;AAAA,IACN,UAAU;AAAA,MACR,MAAM,KAAK;AAAA,MACX,aAAa,KAAK;AAAA,MAClB,YAAY,KAAK;AAAA,IACnB;AAAA,EACF;AACF;AAEA,SAAS,gBAAgB,QAA4C;AACnE,UAAQ,QAAQ;AAAA,IACd,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT;AACE,aAAO;AAAA,EACX;AACF;;;ACxXO,IAAM,iBAAN,cAA6B,yBAAyB;AAAA,EACnD;AAAA,EAER,YACE,UAAkB,0BAClB,eAAuB,YACvB;AACA,UAAM;AAAA,MACJ,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,MAAM;AAAA,MACN,QAAQ;AAAA;AAAA,MACR,SAAS,GAAG,OAAO;AAAA,MACnB;AAAA,MACA,SAAS;AAAA,IACX,CAAC;AAED,SAAK,UAAU;AAAA,EACjB;AAAA;AAAA;AAAA;AAAA;AAAA,EAMS,kBAA2C;AAClD,WAAO;AAAA,MACL,gBAAgB;AAAA,MAChB,iBAAiB;AAAA,MACjB,mBAAmB;AAAA,MACnB,0BAA0B;AAAA,MAC1B,sBAAsB;AAAA,MACtB,kBAAkB;AAAA,IACpB;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAe,aAAgC;AAC7C,QAAI;AACF,YAAM,WAAW,MAAM,MAAM,GAAG,KAAK,OAAO,WAAW;AACvD,UAAI,CAAC,SAAS,IAAI;AAChB,cAAM,IAAI,MAAM,6BAA6B,SAAS,MAAM,EAAE;AAAA,MAChE;AACA,YAAM,OAAQ,MAAM,SAAS,KAAK;AAGlC,UAAI,KAAK,UAAU,KAAK,OAAO,SAAS,GAAG;AACzC,eAAO,KAAK,OAAO,IAAI,CAAC,MAAM,EAAE,IAAI;AAAA,MACtC;AACA,aAAO,CAAC,KAAK,YAAY;AAAA,IAC3B,QAAQ;AACN,aAAO,MAAM,WAAW;AAAA,IAC1B;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAe,cAAgC;AAC7C,QAAI;AACF,YAAM,aAAa,IAAI,gBAAgB;AACvC,YAAM,UAAU,WAAW,MAAM,WAAW,MAAM,GAAG,GAAI;AAEzD,YAAM,WAAW,MAAM,MAAM,GAAG,KAAK,OAAO,aAAa;AAAA,QACvD,QAAQ,WAAW;AAAA,MACrB,CAAC;AAED,mBAAa,OAAO;AACpB,aAAO,SAAS;AAAA,IAClB,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AACF;","names":[]}

package/dist/chunk-3E2PSU2C.js

@@ -0,0 +1,146 @@
+// src/core/security/pairing.ts
+import crypto from "crypto";
+var PairingManager = class {
+  currentCode = null;
+  devices = /* @__PURE__ */ new Map();
+  codeLifetimeMs = 5 * 60 * 1e3;
+  // 5 minutes
+  // -----------------------------------------------------------------------
+  // Code lifetime configuration
+  // -----------------------------------------------------------------------
+  /**
+   * Set the lifetime of generated pairing codes.
+   * @param minutes - Lifetime in minutes.
+   */
+  setCodeLifetime(minutes) {
+    this.codeLifetimeMs = minutes * 60 * 1e3;
+  }
+  // -----------------------------------------------------------------------
+  // Code generation & retrieval
+  // -----------------------------------------------------------------------
+  /**
+   * Generate a new 6-digit numeric pairing code.
+   * Replaces any existing active code.
+   * @returns The 6-digit code string.
+   */
+  generateCode() {
+    const code = String(Math.floor(1e5 + Math.random() * 9e5));
+    const now = Date.now();
+    this.currentCode = {
+      code,
+      createdAt: now,
+      expiresAt: now + this.codeLifetimeMs,
+      used: false
+    };
+    return code;
+  }
+  /**
+   * Return the current pairing code if it is still active (not expired and
+   * not yet used). Returns `null` otherwise.
+   */
+  getActiveCode() {
+    if (!this.currentCode) return null;
+    if (this.currentCode.used) return null;
+    if (Date.now() > this.currentCode.expiresAt) return null;
+    return this.currentCode.code;
+  }
+  // -----------------------------------------------------------------------
+  // Pairing
+  // -----------------------------------------------------------------------
+  /**
+   * Attempt to pair a device using the provided code.
+   *
+   * On success the code is marked as used and a unique bearer token is
+   * returned that the device should store for future authenticated requests.
+   */
+  pair(code, deviceInfo) {
+    if (!this.currentCode) {
+      return { success: false, error: "No active pairing code" };
+    }
+    if (this.currentCode.used) {
+      return { success: false, error: "Pairing code already used" };
+    }
+    if (Date.now() > this.currentCode.expiresAt) {
+      return { success: false, error: "Pairing code expired" };
+    }
+    if (this.currentCode.code !== code) {
+      return { success: false, error: "Invalid pairing code" };
+    }
+    this.currentCode.used = true;
+    const randomHex = crypto.randomBytes(36).toString("hex").slice(0, 48);
+    const token = `os_pair_${randomHex}`;
+    const now = Date.now();
+    const device = {
+      token,
+      deviceInfo,
+      pairedAt: now,
+      lastSeen: now
+    };
+    this.devices.set(token, device);
+    return { success: true, token };
+  }
+  // -----------------------------------------------------------------------
+  // Token operations
+  // -----------------------------------------------------------------------
+  /**
+   * Check whether a token corresponds to a paired device.
+   */
+  validateToken(token) {
+    return this.devices.has(token);
+  }
+  /**
+   * Retrieve the device record associated with a token.
+   */
+  getDeviceByToken(token) {
+    return this.devices.get(token);
+  }
+  /**
+   * Revoke a previously issued token, effectively un-pairing the device.
+   * @returns `true` if the token existed and was removed.
+   */
+  revokeToken(token) {
+    return this.devices.delete(token);
+  }
+  // -----------------------------------------------------------------------
+  // Device listing & bookkeeping
+  // -----------------------------------------------------------------------
+  /**
+   * Return a snapshot of all currently paired devices.
+   */
+  listDevices() {
+    return Array.from(this.devices.values()).map((d) => ({
+      token: d.token,
+      deviceInfo: d.deviceInfo,
+      pairedAt: d.pairedAt,
+      lastSeen: d.lastSeen
+    }));
+  }
+  /**
+   * Bump the `lastSeen` timestamp for the given token.
+   */
+  updateLastSeen(token) {
+    const device = this.devices.get(token);
+    if (device) {
+      device.lastSeen = Date.now();
+    }
+  }
+  // -----------------------------------------------------------------------
+  // Stats
+  // -----------------------------------------------------------------------
+  /**
+   * Return a small stats summary for display purposes.
+   */
+  getStats() {
+    return {
+      activeCode: this.getActiveCode() !== null,
+      deviceCount: this.devices.size
+    };
+  }
+};
+var pairingManager = new PairingManager();
+
+export {
+  PairingManager,
+  pairingManager
+};
+//# sourceMappingURL=chunk-3E2PSU2C.js.map

package/dist/chunk-3E2PSU2C.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/core/security/pairing.ts"],"sourcesContent":["/**\n * PairingManager — consumer-friendly device pairing via 6-digit codes.\n *\n * Flow:\n *  1. Server generates a short-lived 6-digit numeric code.\n *  2. User enters the code on their device/app.\n *  3. On match the device receives a bearer token for future requests.\n */\n\nimport crypto from \"crypto\";\n\n// ---------------------------------------------------------------------------\n// Interfaces\n// ---------------------------------------------------------------------------\n\nexport interface PairingCode {\n  code: string;\n  createdAt: number;\n  expiresAt: number;\n  used: boolean;\n}\n\nexport interface PairedDevice {\n  token: string;\n  deviceInfo: string;\n  pairedAt: number;\n  lastSeen: number;\n}\n\n// ---------------------------------------------------------------------------\n// PairingManager\n// ---------------------------------------------------------------------------\n\nexport class PairingManager {\n  private currentCode: PairingCode | null = null;\n  private devices: Map<string, PairedDevice> = new Map();\n  private codeLifetimeMs: number = 5 * 60 * 1000; // 5 minutes\n\n  // -----------------------------------------------------------------------\n  // Code lifetime configuration\n  // -----------------------------------------------------------------------\n\n  /**\n   * Set the lifetime of generated pairing codes.\n   * @param minutes - Lifetime in minutes.\n   */\n  setCodeLifetime(minutes: number): void {\n    this.codeLifetimeMs = minutes * 60 * 1000;\n  }\n\n  // -----------------------------------------------------------------------\n  // Code generation & retrieval\n  // -----------------------------------------------------------------------\n\n  /**\n   * Generate a new 6-digit numeric pairing code.\n   * Replaces any existing active code.\n   * @returns The 6-digit code string.\n   */\n  generateCode(): string {\n    const code = String(Math.floor(100000 + Math.random() * 900000));\n    const now = Date.now();\n\n    this.currentCode = {\n      code,\n      createdAt: now,\n      expiresAt: now + this.codeLifetimeMs,\n      used: false,\n    };\n\n    return code;\n  }\n\n  /**\n   * Return the current pairing code if it is still active (not expired and\n   * not yet used). Returns `null` otherwise.\n   */\n  getActiveCode(): string | null {\n    if (!this.currentCode) return null;\n    if (this.currentCode.used) return null;\n    if (Date.now() > this.currentCode.expiresAt) return null;\n    return this.currentCode.code;\n  }\n\n  // -----------------------------------------------------------------------\n  // Pairing\n  // -----------------------------------------------------------------------\n\n  /**\n   * Attempt to pair a device using the provided code.\n   *\n   * On success the code is marked as used and a unique bearer token is\n   * returned that the device should store for future authenticated requests.\n   */\n  pair(\n    code: string,\n    deviceInfo: string,\n  ): { success: boolean; token?: string; error?: string } {\n    if (!this.currentCode) {\n      return { success: false, error: \"No active pairing code\" };\n    }\n\n    if (this.currentCode.used) {\n      return { success: false, error: \"Pairing code already used\" };\n    }\n\n    if (Date.now() > this.currentCode.expiresAt) {\n      return { success: false, error: \"Pairing code expired\" };\n    }\n\n    if (this.currentCode.code !== code) {\n      return { success: false, error: \"Invalid pairing code\" };\n    }\n\n    // Mark the code as consumed.\n    this.currentCode.used = true;\n\n    // Generate a bearer token.\n    const randomHex = crypto.randomBytes(36).toString(\"hex\").slice(0, 48);\n    const token = `os_pair_${randomHex}`;\n\n    const now = Date.now();\n    const device: PairedDevice = {\n      token,\n      deviceInfo,\n      pairedAt: now,\n      lastSeen: now,\n    };\n\n    this.devices.set(token, device);\n\n    return { success: true, token };\n  }\n\n  // -----------------------------------------------------------------------\n  // Token operations\n  // -----------------------------------------------------------------------\n\n  /**\n   * Check whether a token corresponds to a paired device.\n   */\n  validateToken(token: string): boolean {\n    return this.devices.has(token);\n  }\n\n  /**\n   * Retrieve the device record associated with a token.\n   */\n  getDeviceByToken(token: string): PairedDevice | undefined {\n    return this.devices.get(token);\n  }\n\n  /**\n   * Revoke a previously issued token, effectively un-pairing the device.\n   * @returns `true` if the token existed and was removed.\n   */\n  revokeToken(token: string): boolean {\n    return this.devices.delete(token);\n  }\n\n  // -----------------------------------------------------------------------\n  // Device listing & bookkeeping\n  // -----------------------------------------------------------------------\n\n  /**\n   * Return a snapshot of all currently paired devices.\n   */\n  listDevices(): Array<{\n    token: string;\n    deviceInfo: string;\n    pairedAt: number;\n    lastSeen: number;\n  }> {\n    return Array.from(this.devices.values()).map((d) => ({\n      token: d.token,\n      deviceInfo: d.deviceInfo,\n      pairedAt: d.pairedAt,\n      lastSeen: d.lastSeen,\n    }));\n  }\n\n  /**\n   * Bump the `lastSeen` timestamp for the given token.\n   */\n  updateLastSeen(token: string): void {\n    const device = this.devices.get(token);\n    if (device) {\n      device.lastSeen = Date.now();\n    }\n  }\n\n  // -----------------------------------------------------------------------\n  // Stats\n  // -----------------------------------------------------------------------\n\n  /**\n   * Return a small stats summary for display purposes.\n   */\n  getStats(): { activeCode: boolean; deviceCount: number } {\n    return {\n      activeCode: this.getActiveCode() !== null,\n      deviceCount: this.devices.size,\n    };\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Singleton export\n// ---------------------------------------------------------------------------\n\nexport const pairingManager = new PairingManager();\n"],"mappings":";AASA,OAAO,YAAY;AAwBZ,IAAM,iBAAN,MAAqB;AAAA,EAClB,cAAkC;AAAA,EAClC,UAAqC,oBAAI,IAAI;AAAA,EAC7C,iBAAyB,IAAI,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAU1C,gBAAgB,SAAuB;AACrC,SAAK,iBAAiB,UAAU,KAAK;AAAA,EACvC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,eAAuB;AACrB,UAAM,OAAO,OAAO,KAAK,MAAM,MAAS,KAAK,OAAO,IAAI,GAAM,CAAC;AAC/D,UAAM,MAAM,KAAK,IAAI;AAErB,SAAK,cAAc;AAAA,MACjB;AAAA,MACA,WAAW;AAAA,MACX,WAAW,MAAM,KAAK;AAAA,MACtB,MAAM;AAAA,IACR;AAEA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,gBAA+B;AAC7B,QAAI,CAAC,KAAK,YAAa,QAAO;AAC9B,QAAI,KAAK,YAAY,KAAM,QAAO;AAClC,QAAI,KAAK,IAAI,IAAI,KAAK,YAAY,UAAW,QAAO;AACpD,WAAO,KAAK,YAAY;AAAA,EAC1B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAYA,KACE,MACA,YACsD;AACtD,QAAI,CAAC,KAAK,aAAa;AACrB,aAAO,EAAE,SAAS,OAAO,OAAO,yBAAyB;AAAA,IAC3D;AAEA,QAAI,KAAK,YAAY,MAAM;AACzB,aAAO,EAAE,SAAS,OAAO,OAAO,4BAA4B;AAAA,IAC9D;AAEA,QAAI,KAAK,IAAI,IAAI,KAAK,YAAY,WAAW;AAC3C,aAAO,EAAE,SAAS,OAAO,OAAO,uBAAuB;AAAA,IACzD;AAEA,QAAI,KAAK,YAAY,SAAS,MAAM;AAClC,aAAO,EAAE,SAAS,OAAO,OAAO,uBAAuB;AAAA,IACzD;AAGA,SAAK,YAAY,OAAO;AAGxB,UAAM,YAAY,OAAO,YAAY,EAAE,EAAE,SAAS,KAAK,EAAE,MAAM,GAAG,EAAE;AACpE,UAAM,QAAQ,WAAW,SAAS;AAElC,UAAM,MAAM,KAAK,IAAI;AACrB,UAAM,SAAuB;AAAA,MAC3B;AAAA,MACA;AAAA,MACA,UAAU;AAAA,MACV,UAAU;AAAA,IACZ;AAEA,SAAK,QAAQ,IAAI,OAAO,MAAM;AAE9B,WAAO,EAAE,SAAS,MAAM,MAAM;AAAA,EAChC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,cAAc,OAAwB;AACpC,WAAO,KAAK,QAAQ,IAAI,KAAK;AAAA,EAC/B;AAAA;AAAA;AAAA;AAAA,EAKA,iBAAiB,OAAyC;AACxD,WAAO,KAAK,QAAQ,IAAI,KAAK;AAAA,EAC/B;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,YAAY,OAAwB;AAClC,WAAO,KAAK,QAAQ,OAAO,KAAK;AAAA,EAClC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,cAKG;AACD,WAAO,MAAM,KAAK,KAAK,QAAQ,OAAO,CAAC,EAAE,IAAI,CAAC,OAAO;AAAA,MACnD,OAAO,EAAE;AAAA,MACT,YAAY,EAAE;AAAA,MACd,UAAU,EAAE;AAAA,MACZ,UAAU,EAAE;AAAA,IACd,EAAE;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA,EAKA,eAAe,OAAqB;AAClC,UAAM,SAAS,KAAK,QAAQ,IAAI,KAAK;AACrC,QAAI,QAAQ;AACV,aAAO,WAAW,KAAK,IAAI;AAAA,IAC7B;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,WAAyD;AACvD,WAAO;AAAA,MACL,YAAY,KAAK,cAAc,MAAM;AAAA,MACrC,aAAa,KAAK,QAAQ;AAAA,IAC5B;AAAA,EACF;AACF;AAMO,IAAM,iBAAiB,IAAI,eAAe;","names":[]}

package/dist/{chunk-L3F43VPB.js → chunk-4GLYY4NN.js}

@@ -246,7 +246,7 @@ var MCPClient = class {
       },
       clientInfo: {
         name: "OpenSentinel",
-        version: "2.0.0"
+        version: "3.0.0"
       }
     };
     const result = await this.request("initialize", params);
@@ -649,4 +649,4 @@ export {
   getMCPToolSummary,
   findMCPTool
 };
-//# sourceMappingURL=chunk-L3F43VPB.js.map
+//# sourceMappingURL=chunk-4GLYY4NN.js.map