palaryn 0.1.0

package/dist/src/budget/usage-extractor.js

@@ -0,0 +1,165 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UsageExtractor = void 0;
+class UsageExtractor {
+    constructor(tokenPricing) {
+        this.tokenPricing = tokenPricing || {};
+    }
+    /**
+     * Extract usage data from HTTP response headers.
+     * Supports Anthropic, OpenAI-style, and generic header conventions.
+     */
+    extractFromHeaders(headers) {
+        if (!headers)
+            return undefined;
+        // Normalize header keys to lowercase for case-insensitive matching
+        const normalized = {};
+        for (const [key, value] of Object.entries(headers)) {
+            normalized[key.toLowerCase()] = value;
+        }
+        const inputTokens = this.parseIntHeader(normalized['x-usage-input-tokens']);
+        const outputTokens = this.parseIntHeader(normalized['x-usage-output-tokens']);
+        const totalTokens = this.parseIntHeader(normalized['x-usage-total-tokens']);
+        const providerCost = this.parseFloatHeader(normalized['x-usage-cost-usd']);
+        if (inputTokens === undefined && outputTokens === undefined && totalTokens === undefined && providerCost === undefined) {
+            return undefined;
+        }
+        const usage = {
+            source: 'headers',
+        };
+        if (inputTokens !== undefined)
+            usage.input_tokens = inputTokens;
+        if (outputTokens !== undefined)
+            usage.output_tokens = outputTokens;
+        if (totalTokens !== undefined) {
+            usage.total_tokens = totalTokens;
+        }
+        else if (inputTokens !== undefined && outputTokens !== undefined) {
+            usage.total_tokens = inputTokens + outputTokens;
+        }
+        if (providerCost !== undefined)
+            usage.provider_cost_usd = providerCost;
+        return usage;
+    }
+    /**
+     * Extract usage data from response body.
+     * Supports OpenAI-style `usage` object and Anthropic-style `usage` object.
+     */
+    extractFromBody(body) {
+        if (!body || typeof body !== 'object')
+            return undefined;
+        const bodyObj = body;
+        const usageObj = bodyObj.usage;
+        if (!usageObj || typeof usageObj !== 'object')
+            return undefined;
+        // OpenAI format: usage.prompt_tokens, usage.completion_tokens, usage.total_tokens
+        const promptTokens = typeof usageObj.prompt_tokens === 'number' ? usageObj.prompt_tokens : undefined;
+        const completionTokens = typeof usageObj.completion_tokens === 'number' ? usageObj.completion_tokens : undefined;
+        const totalTokens = typeof usageObj.total_tokens === 'number' ? usageObj.total_tokens : undefined;
+        // Anthropic format: usage.input_tokens, usage.output_tokens
+        const inputTokens = typeof usageObj.input_tokens === 'number' ? usageObj.input_tokens : promptTokens;
+        const outputTokens = typeof usageObj.output_tokens === 'number' ? usageObj.output_tokens : completionTokens;
+        if (inputTokens === undefined && outputTokens === undefined && totalTokens === undefined) {
+            return undefined;
+        }
+        const usage = {
+            source: 'body',
+        };
+        if (inputTokens !== undefined)
+            usage.input_tokens = inputTokens;
+        if (outputTokens !== undefined)
+            usage.output_tokens = outputTokens;
+        if (totalTokens !== undefined) {
+            usage.total_tokens = totalTokens;
+        }
+        else if (inputTokens !== undefined && outputTokens !== undefined) {
+            usage.total_tokens = inputTokens + outputTokens;
+        }
+        return usage;
+    }
+    /**
+     * Compute cost from usage data using token pricing config.
+     * Returns the computed cost in USD, or undefined if pricing not available.
+     */
+    computeCost(usage, model) {
+        if (!model || !this.tokenPricing[model])
+            return undefined;
+        const pricing = this.tokenPricing[model];
+        let cost = 0;
+        if (usage.input_tokens !== undefined) {
+            cost += usage.input_tokens * pricing.input_per_token;
+        }
+        if (usage.output_tokens !== undefined) {
+            cost += usage.output_tokens * pricing.output_per_token;
+        }
+        return cost;
+    }
+    /**
+     * Extract model name from response body.
+     * Supports OpenAI format (body.model) and Anthropic format (body.model).
+     */
+    extractModelFromBody(body) {
+        if (!body || typeof body !== 'object')
+            return undefined;
+        const bodyObj = body;
+        if (typeof bodyObj.model === 'string')
+            return bodyObj.model;
+        return undefined;
+    }
+    /**
+     * Detect provider from model name.
+     */
+    detectProvider(model) {
+        if (/^claude/i.test(model))
+            return 'anthropic';
+        if (/^gpt|^o[1-9]|^dall-e/i.test(model))
+            return 'openai';
+        if (/^gemini/i.test(model))
+            return 'google';
+        if (/^mistral|^mixtral/i.test(model))
+            return 'mistral';
+        if (/^llama/i.test(model))
+            return 'meta';
+        if (/^command/i.test(model))
+            return 'cohere';
+        return 'unknown';
+    }
+    /**
+     * Merge two UsageData objects. The second (body) takes precedence for conflicting fields,
+     * except provider_cost_usd which is preferred from headers.
+     */
+    merge(fromHeaders, fromBody) {
+        if (!fromHeaders && !fromBody)
+            return undefined;
+        if (!fromHeaders)
+            return fromBody;
+        if (!fromBody)
+            return fromHeaders;
+        return {
+            input_tokens: fromBody.input_tokens ?? fromHeaders.input_tokens,
+            output_tokens: fromBody.output_tokens ?? fromHeaders.output_tokens,
+            total_tokens: fromBody.total_tokens ?? fromHeaders.total_tokens,
+            provider_cost_usd: fromHeaders.provider_cost_usd ?? fromBody.provider_cost_usd,
+            computed_cost_usd: fromHeaders.computed_cost_usd ?? fromBody.computed_cost_usd,
+            source: fromBody.source && fromHeaders.source
+                ? `${fromHeaders.source}+${fromBody.source}`
+                : fromBody.source || fromHeaders.source,
+            model: fromBody.model ?? fromHeaders.model,
+            provider: fromBody.provider ?? fromHeaders.provider,
+        };
+    }
+    parseIntHeader(value) {
+        if (value === undefined)
+            return undefined;
+        const parsed = parseInt(value, 10);
+        return isNaN(parsed) ? undefined : parsed;
+    }
+    parseFloatHeader(value) {
+        if (value === undefined)
+            return undefined;
+        const parsed = parseFloat(value);
+        return isNaN(parsed) ? undefined : parsed;
+    }
+}
+exports.UsageExtractor = UsageExtractor;
+//# sourceMappingURL=usage-extractor.js.map

package/dist/src/budget/usage-extractor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"usage-extractor.js","sourceRoot":"","sources":["../../../src/budget/usage-extractor.ts"],"names":[],"mappings":";;;AAGA,MAAa,cAAc;IAGzB,YAAY,YAA2C;QACrD,IAAI,CAAC,YAAY,GAAG,YAAY,IAAI,EAAE,CAAC;IACzC,CAAC;IAED;;;OAGG;IACH,kBAAkB,CAAC,OAAgC;QACjD,IAAI,CAAC,OAAO;YAAE,OAAO,SAAS,CAAC;QAE/B,mEAAmE;QACnE,MAAM,UAAU,GAA2B,EAAE,CAAC;QAC9C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACnD,UAAU,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,GAAG,KAAK,CAAC;QACxC,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAC,CAAC;QAC5E,MAAM,YAAY,GAAG,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,uBAAuB,CAAC,CAAC,CAAC;QAC9E,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAC,CAAC;QAC5E,MAAM,YAAY,GAAG,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC,CAAC;QAE3E,IAAI,WAAW,KAAK,SAAS,IAAI,YAAY,KAAK,SAAS,IAAI,WAAW,KAAK,SAAS,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;YACvH,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,KAAK,GAAc;YACvB,MAAM,EAAE,SAAS;SAClB,CAAC;QAEF,IAAI,WAAW,KAAK,SAAS;YAAE,KAAK,CAAC,YAAY,GAAG,WAAW,CAAC;QAChE,IAAI,YAAY,KAAK,SAAS;YAAE,KAAK,CAAC,aAAa,GAAG,YAAY,CAAC;QACnE,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,KAAK,CAAC,YAAY,GAAG,WAAW,CAAC;QACnC,CAAC;aAAM,IAAI,WAAW,KAAK,SAAS,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;YACnE,KAAK,CAAC,YAAY,GAAG,WAAW,GAAG,YAAY,CAAC;QAClD,CAAC;QACD,IAAI,YAAY,KAAK,SAAS;YAAE,KAAK,CAAC,iBAAiB,GAAG,YAAY,CAAC;QAEvE,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;OAGG;IACH,eAAe,CAAC,IAAa;QAC3B,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QAExD,MAAM,OAAO,GAAG,IAA+B,CAAC;QAChD,MAAM,QAAQ,GAAG,OAAO,CAAC,KAA4C,CAAC;QAEtE,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QAEhE,kFAAkF;QAClF,MAAM,YAAY,GAAG,OAAO,QAAQ,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;QACrG,MAAM,gBAAgB,GAAG,OAAO,QAAQ,CAAC,iBAAiB,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;QACjH,MAAM,WAAW,GAAG,OAAO,QAAQ,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;QAElG,4DAA4D;QAC5D,MAAM,WAAW,GAAG,OAAO,QAAQ,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC;QACrG,MAAM,YAAY,GAAG,OAAO,QAAQ,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,gBAAgB,CAAC;QAE5G,IAAI,WAAW,KAAK,SAAS,IAAI,YAAY,KAAK,SAAS,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YACzF,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,KAAK,GAAc;YACvB,MAAM,EAAE,MAAM;SACf,CAAC;QAEF,IAAI,WAAW,KAAK,SAAS;YAAE,KAAK,CAAC,YAAY,GAAG,WAAW,CAAC;QAChE,IAAI,YAAY,KAAK,SAAS;YAAE,KAAK,CAAC,aAAa,GAAG,YAAY,CAAC;QACnE,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,KAAK,CAAC,YAAY,GAAG,WAAW,CAAC;QACnC,CAAC;aAAM,IAAI,WAAW,KAAK,SAAS,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;YACnE,KAAK,CAAC,YAAY,GAAG,WAAW,GAAG,YAAY,CAAC;QAClD,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;OAGG;IACH,WAAW,CAAC,KAAgB,EAAE,KAAc;QAC1C,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAE1D,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,IAAI,GAAG,CAAC,CAAC;QAEb,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;YACrC,IAAI,IAAI,KAAK,CAAC,YAAY,GAAG,OAAO,CAAC,eAAe,CAAC;QACvD,CAAC;QACD,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;YACtC,IAAI,IAAI,KAAK,CAAC,aAAa,GAAG,OAAO,CAAC,gBAAgB,CAAC;QACzD,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;OAGG;IACH,oBAAoB,CAAC,IAAa;QAChC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QACxD,MAAM,OAAO,GAAG,IAA+B,CAAC;QAChD,IAAI,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ;YAAE,OAAO,OAAO,CAAC,KAAK,CAAC;QAC5D,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;OAEG;IACH,cAAc,CAAC,KAAa;QAC1B,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,WAAW,CAAC;QAC/C,IAAI,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,QAAQ,CAAC;QACzD,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,QAAQ,CAAC;QAC5C,IAAI,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QACvD,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,MAAM,CAAC;QACzC,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,QAAQ,CAAC;QAC7C,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,WAAuB,EAAE,QAAoB;QACjD,IAAI,CAAC,WAAW,IAAI,CAAC,QAAQ;YAAE,OAAO,SAAS,CAAC;QAChD,IAAI,CAAC,WAAW;YAAE,OAAO,QAAQ,CAAC;QAClC,IAAI,CAAC,QAAQ;YAAE,OAAO,WAAW,CAAC;QAElC,OAAO;YACL,YAAY,EAAE,QAAQ,CAAC,YAAY,IAAI,WAAW,CAAC,YAAY;YAC/D,aAAa,EAAE,QAAQ,CAAC,aAAa,IAAI,WAAW,CAAC,aAAa;YAClE,YAAY,EAAE,QAAQ,CAAC,YAAY,IAAI,WAAW,CAAC,YAAY;YAC/D,iBAAiB,EAAE,WAAW,CAAC,iBAAiB,IAAI,QAAQ,CAAC,iBAAiB;YAC9E,iBAAiB,EAAE,WAAW,CAAC,iBAAiB,IAAI,QAAQ,CAAC,iBAAiB;YAC9E,MAAM,EAAE,QAAQ,CAAC,MAAM,IAAI,WAAW,CAAC,MAAM;gBAC3C,CAAC,CAAC,GAAG,WAAW,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM,EAAE;gBAC5C,CAAC,CAAC,QAAQ,CAAC,MAAM,IAAI,WAAW,CAAC,MAAM;YACzC,KAAK,EAAE,QAAQ,CAAC,KAAK,IAAI,WAAW,CAAC,KAAK;YAC1C,QAAQ,EAAE,QAAQ,CAAC,QAAQ,IAAI,WAAW,CAAC,QAAQ;SACpD,CAAC;IACJ,CAAC;IAEO,cAAc,CAAC,KAAc;QACnC,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC1C,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACnC,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC;IAC5C,CAAC;IAEO,gBAAgB,CAAC,KAAc;QACrC,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC1C,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;QACjC,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC;IAC5C,CAAC;CACF;AAnKD,wCAmKC"}

package/dist/src/cli.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=cli.d.ts.map

package/dist/src/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../../src/cli.ts"],"names":[],"mappings":""}

package/dist/src/cli.js

@@ -0,0 +1,115 @@
+#!/usr/bin/env node
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+const path = __importStar(require("path"));
+const os = __importStar(require("os"));
+const fs = __importStar(require("fs"));
+const commander_1 = require("commander");
+// Resolve the package root (two levels up from dist/src/cli.js)
+const PACKAGE_ROOT = path.resolve(__dirname, '..', '..');
+// Read version from package.json
+const pkg = JSON.parse(fs.readFileSync(path.join(PACKAGE_ROOT, 'package.json'), 'utf-8'));
+const program = new commander_1.Command();
+program
+    .name('palaryn')
+    .description('Model-agnostic infrastructure layer for AI agent I/O security')
+    .version(pkg.version);
+program
+    .command('start', { isDefault: true })
+    .description('Start the gateway server')
+    .option('-p, --port <port>', 'Server port', '3000')
+    .option('--host <host>', 'Bind address', '0.0.0.0')
+    .option('--policy-pack <path>', 'Path to policy pack YAML')
+    .option('--audit-log-dir <path>', 'Audit log directory')
+    .option('--no-auth', 'Disable authentication')
+    .action(async (opts) => {
+    // Set env vars from CLI flags BEFORE importing server modules
+    // (DEFAULT_CONFIG reads env vars at import time)
+    process.env.PORT = opts.port;
+    process.env.HOST = opts.host;
+    if (opts.policyPack) {
+        process.env.POLICY_PACK_PATH = opts.policyPack;
+    }
+    else if (!process.env.POLICY_PACK_PATH) {
+        // Resolve default policy pack relative to the package installation dir
+        const bundledPack = path.join(PACKAGE_ROOT, 'policy-packs', 'default.yaml');
+        if (fs.existsSync(bundledPack)) {
+            process.env.POLICY_PACK_PATH = bundledPack;
+        }
+    }
+    if (opts.auditLogDir) {
+        process.env.AUDIT_LOG_DIR = opts.auditLogDir;
+    }
+    else if (!process.env.AUDIT_LOG_DIR) {
+        // Default audit logs to ~/.palaryn/logs for global installs
+        const defaultLogDir = path.join(os.homedir(), '.palaryn', 'logs');
+        fs.mkdirSync(defaultLogDir, { recursive: true });
+        process.env.AUDIT_LOG_DIR = defaultLogDir;
+    }
+    if (!opts.auth) {
+        process.env.AUTH_ENABLED = 'false';
+    }
+    // Now import and start the server (env vars are set)
+    const { startServer } = await Promise.resolve().then(() => __importStar(require('./server/index')));
+    await startServer();
+});
+program
+    .command('mcp')
+    .description('Start MCP stdio server (for claude mcp add palaryn -- palaryn mcp)')
+    .option('--workspace <id>', 'Workspace ID')
+    .option('--actor <id>', 'Actor ID')
+    .action(async (opts) => {
+    if (opts.workspace) {
+        process.env.PALARYN_MCP_WORKSPACE = opts.workspace;
+    }
+    if (opts.actor) {
+        process.env.PALARYN_MCP_ACTOR = opts.actor;
+    }
+    // Resolve default policy pack for MCP server too
+    if (!process.env.POLICY_PACK_PATH) {
+        const bundledPack = path.join(PACKAGE_ROOT, 'policy-packs', 'default.yaml');
+        if (fs.existsSync(bundledPack)) {
+            process.env.POLICY_PACK_PATH = bundledPack;
+        }
+    }
+    const { startMCPServer } = await Promise.resolve().then(() => __importStar(require('./mcp/server')));
+    await startMCPServer();
+});
+program.parseAsync(process.argv).catch((err) => {
+    console.error('Fatal error:', err instanceof Error ? err.message : String(err));
+    process.exit(1);
+});
+//# sourceMappingURL=cli.js.map

package/dist/src/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../../src/cli.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEA,2CAA6B;AAC7B,uCAAyB;AACzB,uCAAyB;AACzB,yCAAoC;AAEpC,gEAAgE;AAChE,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AAEzD,iCAAiC;AACjC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,cAAc,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;AAE1F,MAAM,OAAO,GAAG,IAAI,mBAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,SAAS,CAAC;KACf,WAAW,CAAC,+DAA+D,CAAC;KAC5E,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AAExB,OAAO;KACJ,OAAO,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;KACrC,WAAW,CAAC,0BAA0B,CAAC;KACvC,MAAM,CAAC,mBAAmB,EAAE,aAAa,EAAE,MAAM,CAAC;KAClD,MAAM,CAAC,eAAe,EAAE,cAAc,EAAE,SAAS,CAAC;KAClD,MAAM,CAAC,sBAAsB,EAAE,0BAA0B,CAAC;KAC1D,MAAM,CAAC,wBAAwB,EAAE,qBAAqB,CAAC;KACvD,MAAM,CAAC,WAAW,EAAE,wBAAwB,CAAC;KAC7C,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACrB,8DAA8D;IAC9D,iDAAiD;IACjD,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IAC7B,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IAE7B,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QACpB,OAAO,CAAC,GAAG,CAAC,gBAAgB,GAAG,IAAI,CAAC,UAAU,CAAC;IACjD,CAAC;SAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACzC,uEAAuE;QACvE,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,cAAc,EAAE,cAAc,CAAC,CAAC;QAC5E,IAAI,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YAC/B,OAAO,CAAC,GAAG,CAAC,gBAAgB,GAAG,WAAW,CAAC;QAC7C,CAAC;IACH,CAAC;IAED,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,IAAI,CAAC,WAAW,CAAC;IAC/C,CAAC;SAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;QACtC,4DAA4D;QAC5D,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;QAClE,EAAE,CAAC,SAAS,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,aAAa,CAAC;IAC5C,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,YAAY,GAAG,OAAO,CAAC;IACrC,CAAC;IAED,qDAAqD;IACrD,MAAM,EAAE,WAAW,EAAE,GAAG,wDAAa,gBAAgB,GAAC,CAAC;IACvD,MAAM,WAAW,EAAE,CAAC;AACtB,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,KAAK,CAAC;KACd,WAAW,CAAC,oEAAoE,CAAC;KACjF,MAAM,CAAC,kBAAkB,EAAE,cAAc,CAAC;KAC1C,MAAM,CAAC,cAAc,EAAE,UAAU,CAAC;KAClC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACrB,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACnB,OAAO,CAAC,GAAG,CAAC,qBAAqB,GAAG,IAAI,CAAC,SAAS,CAAC;IACrD,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,IAAI,CAAC,KAAK,CAAC;IAC7C,CAAC;IAED,iDAAiD;IACjD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAClC,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,cAAc,EAAE,cAAc,CAAC,CAAC;QAC5E,IAAI,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YAC/B,OAAO,CAAC,GAAG,CAAC,gBAAgB,GAAG,WAAW,CAAC;QAC7C,CAAC;IACH,CAAC;IAED,MAAM,EAAE,cAAc,EAAE,GAAG,wDAAa,cAAc,GAAC,CAAC;IACxD,MAAM,cAAc,EAAE,CAAC;AACzB,CAAC,CAAC,CAAC;AAEL,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IAC7C,OAAO,CAAC,KAAK,CAAC,cAAc,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAChF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/src/config/defaults.d.ts

@@ -0,0 +1,3 @@
+import { GatewayConfig } from '../types/config';
+export declare const DEFAULT_CONFIG: GatewayConfig;
+//# sourceMappingURL=defaults.d.ts.map

package/dist/src/config/defaults.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"defaults.d.ts","sourceRoot":"","sources":["../../../src/config/defaults.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAsChD,eAAO,MAAM,cAAc,EAAE,aAwK5B,CAAC"}

package/dist/src/config/defaults.js

@@ -0,0 +1,243 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_CONFIG = void 0;
+const crypto = __importStar(require("crypto"));
+const fs = __importStar(require("fs"));
+const isProduction = process.env.NODE_ENV === 'production';
+/**
+ * Read a secret from a file path or env var.
+ * Lookup order:
+ *   1. `<ENV_VAR>_FILE`  — path to a file whose contents are the secret
+ *      (e.g. `/run/secrets/stripe_key`). Trailing whitespace is stripped.
+ *   2. `<ENV_VAR>`       — plain env var (fallback, dev convenience).
+ *
+ * This lets you use Docker secrets, Kubernetes secret volumes, or any
+ * file-based secret manager without exposing values in env vars.
+ */
+function readSecret(envVar) {
+    const filePath = process.env[`${envVar}_FILE`];
+    if (filePath) {
+        try {
+            return fs.readFileSync(filePath, 'utf-8').trim();
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            throw new Error(`Failed to read secret file for ${envVar}_FILE (${filePath}): ${msg}`);
+        }
+    }
+    return process.env[envVar];
+}
+function requireSecret(envVar) {
+    const value = readSecret(envVar);
+    if (value)
+        return value;
+    if (isProduction) {
+        throw new Error(`${envVar} (or ${envVar}_FILE) must be set in production`);
+    }
+    const generated = crypto.randomBytes(32).toString('hex');
+    console.warn(`[config] WARNING: ${envVar} not set — generated random dev secret. Set ${envVar} or ${envVar}_FILE for stable restarts.`);
+    return generated;
+}
+exports.DEFAULT_CONFIG = {
+    port: parseInt(process.env.PORT || '3000', 10),
+    host: process.env.HOST || '0.0.0.0',
+    auth: {
+        enabled: process.env.AUTH_ENABLED !== 'false',
+        api_keys: isProduction ? {} : {
+            'dev-key-001': { workspace_id: 'ws_default', description: 'Development key' },
+            'pn_2b922eca4de8b8666f1dcc72d0763de9440deebec42e9277a1a82352771362f3': { workspace_id: 'd214b8e5-da34-41a1-bf30-ae6c0e7dd50c', description: 'Android app key' },
+        },
+        jwt_secret: requireSecret('JWT_SECRET'),
+        jwt: {
+            enabled: false,
+            secret: process.env.JWT_SECRET,
+            algorithms: ['RS256', 'HS256'],
+            workspace_claim: 'workspace_id',
+            roles_claim: 'roles',
+            actor_claim: 'sub',
+        },
+        rbac: {
+            enabled: false, // Off by default for backwards compat
+            roles: {
+                admin: {
+                    description: 'Full admin access',
+                    permissions: ['admin:full'],
+                },
+                operator: {
+                    description: 'Can execute tools and manage approvals',
+                    permissions: ['tool:execute', 'approval:manage', 'trace:read', 'policy:read'],
+                },
+                readonly: {
+                    description: 'Read-only access',
+                    permissions: ['tool:execute:read', 'trace:read', 'policy:read'],
+                },
+                agent: {
+                    description: 'AI agent - can execute tools',
+                    permissions: ['tool:execute'],
+                },
+            },
+            default_role: 'agent',
+        },
+    },
+    policy: {
+        pack_path: process.env.POLICY_PACK_PATH || './policy-packs/default.yaml',
+        default_effect: 'DENY',
+        hot_reload: true,
+    },
+    dlp: {
+        enabled: true,
+        scan_args: true,
+        scan_output: true,
+        secrets_detection: true,
+        pii_detection: true,
+        prompt_injection_detection: true,
+        prompt_injection_action: 'log',
+        prompt_injection_block_threshold: 'high',
+        prompt_injection_response: 'deny',
+        default_redaction_method: 'mask',
+    },
+    budget: {
+        task_budget_usd: process.env.BUDGET_TASK_USD
+            ? parseFloat(process.env.BUDGET_TASK_USD) : 2.0,
+        user_daily_budget_usd: process.env.BUDGET_USER_DAILY_USD
+            ? parseFloat(process.env.BUDGET_USER_DAILY_USD) : 50.0,
+        user_monthly_budget_usd: process.env.BUDGET_USER_MONTHLY_USD
+            ? parseFloat(process.env.BUDGET_USER_MONTHLY_USD) : 500.0,
+        workspace_daily_budget_usd: process.env.BUDGET_WORKSPACE_DAILY_USD
+            ? parseFloat(process.env.BUDGET_WORKSPACE_DAILY_USD) : 200.0,
+        workspace_monthly_budget_usd: process.env.BUDGET_WORKSPACE_MONTHLY_USD
+            ? parseFloat(process.env.BUDGET_WORKSPACE_MONTHLY_USD) : 5000.0,
+        max_steps_per_task: process.env.BUDGET_MAX_STEPS
+            ? parseInt(process.env.BUDGET_MAX_STEPS, 10) : 50,
+        max_retries_per_call: 3,
+        max_wall_clock_ms: 300000,
+    },
+    audit: {
+        enabled: true,
+        log_dir: process.env.AUDIT_LOG_DIR || './logs',
+        console_output: !isProduction,
+        retention_days: 30,
+    },
+    executor: {
+        http: {
+            timeout_ms: 15000,
+            max_retries: 3,
+            backoff_base_ms: 1000,
+        },
+        cache: {
+            enabled: true,
+            ttl_ms: 300000,
+        },
+    },
+    approval: {
+        enabled: true,
+        token_secret: requireSecret('APPROVAL_SECRET'),
+        default_ttl_seconds: 3600,
+    },
+    rate_limit: {
+        enabled: true,
+        actor_max_per_window: process.env.RATE_LIMIT_ACTOR_MAX
+            ? parseInt(process.env.RATE_LIMIT_ACTOR_MAX, 10) : 100,
+        workspace_max_per_window: process.env.RATE_LIMIT_WORKSPACE_MAX
+            ? parseInt(process.env.RATE_LIMIT_WORKSPACE_MAX, 10) : 500,
+        window_ms: process.env.RATE_LIMIT_WINDOW_MS
+            ? parseInt(process.env.RATE_LIMIT_WINDOW_MS, 10) : 60000,
+    },
+    anomaly: {
+        enabled: true,
+        window_ms: 300000, // 5 minutes (shorter for dev testing)
+        z_score_threshold: 2, // Lower threshold for easier testing
+        min_samples: 5, // Need only 5 data points before detection activates
+        action: 'flag', // 'flag' adds to result metadata; change to 'block' to deny
+        track_actors: true,
+        track_tools: true,
+        track_workspaces: true,
+    },
+    proxy: {
+        enabled: process.env.PROXY_ENABLED === 'true',
+        port: parseInt(process.env.PROXY_PORT || '3128', 10),
+        passthrough_domains: process.env.PROXY_PASSTHROUGH_DOMAINS
+            ? process.env.PROXY_PASSTHROUGH_DOMAINS.split(',').map(s => s.trim())
+            : undefined,
+        default_workspace_id: process.env.PALARYN_WORKSPACE_ID,
+        default_actor_id: process.env.PALARYN_ACTOR_ID,
+        require_auth: process.env.PROXY_REQUIRE_AUTH !== 'false',
+    },
+    cors_origins: process.env.CORS_ORIGINS
+        ? process.env.CORS_ORIGINS.split(',').map(s => s.trim())
+        : undefined,
+    oauth: {
+        enabled: process.env.OAUTH_ENABLED === 'true',
+        session_secret: requireSecret('OAUTH_SESSION_SECRET'),
+        session_ttl_seconds: parseInt(process.env.OAUTH_SESSION_TTL || '604800', 10), // 7 days
+        google: process.env.GOOGLE_CLIENT_ID ? {
+            client_id: process.env.GOOGLE_CLIENT_ID,
+            client_secret: readSecret('GOOGLE_CLIENT_SECRET') || '',
+            redirect_uri: process.env.GOOGLE_REDIRECT_URI,
+        } : undefined,
+        github: process.env.GITHUB_CLIENT_ID ? {
+            client_id: process.env.GITHUB_CLIENT_ID,
+            client_secret: readSecret('GITHUB_CLIENT_SECRET') || '',
+            redirect_uri: process.env.GITHUB_REDIRECT_URI,
+        } : undefined,
+    },
+    stripe: readSecret('STRIPE_SECRET_KEY') ? {
+        secret_key: readSecret('STRIPE_SECRET_KEY'),
+        webhook_secret: readSecret('STRIPE_WEBHOOK_SECRET') || '',
+        price_ids: {
+            pro_monthly: process.env.STRIPE_PRICE_PRO_MONTHLY || '',
+            business_monthly: process.env.STRIPE_PRICE_BUSINESS_MONTHLY || '',
+        },
+        checkout_success_url: process.env.STRIPE_CHECKOUT_SUCCESS_URL,
+        checkout_cancel_url: process.env.STRIPE_CHECKOUT_CANCEL_URL,
+        portal_return_url: process.env.STRIPE_PORTAL_RETURN_URL,
+    } : undefined,
+    frontend: {
+        enabled: process.env.FRONTEND_ENABLED === 'true',
+        build_path: process.env.FRONTEND_BUILD_PATH || './web/dist',
+    },
+    mcp_oauth: process.env.MCP_OAUTH_ENABLED === 'true' ? {
+        enabled: true,
+        base_url: process.env.MCP_OAUTH_BASE_URL,
+        access_token_ttl: process.env.MCP_OAUTH_ACCESS_TOKEN_TTL
+            ? parseInt(process.env.MCP_OAUTH_ACCESS_TOKEN_TTL, 10)
+            : undefined,
+        refresh_token_ttl: process.env.MCP_OAUTH_REFRESH_TOKEN_TTL
+            ? parseInt(process.env.MCP_OAUTH_REFRESH_TOKEN_TTL, 10)
+            : undefined,
+    } : undefined,
+};
+//# sourceMappingURL=defaults.js.map

package/dist/src/config/defaults.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"defaults.js","sourceRoot":"","sources":["../../../src/config/defaults.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,+CAAiC;AACjC,uCAAyB;AAGzB,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,CAAC;AAE3D;;;;;;;;;GASG;AACH,SAAS,UAAU,CAAC,MAAc;IAChC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC;IAC/C,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,CAAC;YACH,OAAO,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QACnD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,MAAM,IAAI,KAAK,CAAC,kCAAkC,MAAM,UAAU,QAAQ,MAAM,GAAG,EAAE,CAAC,CAAC;QACzF,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,aAAa,CAAC,MAAc;IACnC,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IACjC,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC;IACxB,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,QAAQ,MAAM,kCAAkC,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACzD,OAAO,CAAC,IAAI,CAAC,qBAAqB,MAAM,+CAA+C,MAAM,OAAO,MAAM,4BAA4B,CAAC,CAAC;IACxI,OAAO,SAAS,CAAC;AACnB,CAAC;AAEY,QAAA,cAAc,GAAkB;IAC3C,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,MAAM,EAAE,EAAE,CAAC;IAC9C,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,SAAS;IACnC,IAAI,EAAE;QACJ,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,KAAK,OAAO;QAC7C,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAC5B,aAAa,EAAE,EAAE,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,iBAAiB,EAAE;YAC7E,qEAAqE,EAAE,EAAE,YAAY,EAAE,sCAAsC,EAAE,WAAW,EAAE,iBAAiB,EAAE;SAChK;QACD,UAAU,EAAE,aAAa,CAAC,YAAY,CAAC;QACvC,GAAG,EAAE;YACH,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU;YAC9B,UAAU,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;YAC9B,eAAe,EAAE,cAAc;YAC/B,WAAW,EAAE,OAAO;YACpB,WAAW,EAAE,KAAK;SACnB;QACD,IAAI,EAAE;YACJ,OAAO,EAAE,KAAK,EAAG,sCAAsC;YACvD,KAAK,EAAE;gBACL,KAAK,EAAE;oBACL,WAAW,EAAE,mBAAmB;oBAChC,WAAW,EAAE,CAAC,YAAY,CAAC;iBAC5B;gBACD,QAAQ,EAAE;oBACR,WAAW,EAAE,wCAAwC;oBACrD,WAAW,EAAE,CAAC,cAAc,EAAE,iBAAiB,EAAE,YAAY,EAAE,aAAa,CAAC;iBAC9E;gBACD,QAAQ,EAAE;oBACR,WAAW,EAAE,kBAAkB;oBAC/B,WAAW,EAAE,CAAC,mBAAmB,EAAE,YAAY,EAAE,aAAa,CAAC;iBAChE;gBACD,KAAK,EAAE;oBACL,WAAW,EAAE,8BAA8B;oBAC3C,WAAW,EAAE,CAAC,cAAc,CAAC;iBAC9B;aACF;YACD,YAAY,EAAE,OAAO;SACtB;KACF;IACD,MAAM,EAAE;QACN,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,6BAA6B;QACxE,cAAc,EAAE,MAAM;QACtB,UAAU,EAAE,IAAI;KACjB;IACD,GAAG,EAAE;QACH,OAAO,EAAE,IAAI;QACb,SAAS,EAAE,IAAI;QACf,WAAW,EAAE,IAAI;QACjB,iBAAiB,EAAE,IAAI;QACvB,aAAa,EAAE,IAAI;QACnB,0BAA0B,EAAE,IAAI;QAChC,uBAAuB,EAAE,KAAK;QAC9B,gCAAgC,EAAE,MAAM;QACxC,yBAAyB,EAAE,MAAM;QACjC,wBAAwB,EAAE,MAAM;KACjC;IACD,MAAM,EAAE;QACN,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe;YAC1C,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,GAAG;QACjD,qBAAqB,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB;YACtD,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,IAAI;QACxD,uBAAuB,EAAE,OAAO,CAAC,GAAG,CAAC,uBAAuB;YAC1D,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,KAAK;QAC3D,0BAA0B,EAAE,OAAO,CAAC,GAAG,CAAC,0BAA0B;YAChE,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC,CAAC,CAAC,KAAK;QAC9D,4BAA4B,EAAE,OAAO,CAAC,GAAG,CAAC,4BAA4B;YACpE,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC,CAAC,CAAC,MAAM;QACjE,kBAAkB,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB;YAC9C,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE;QACnD,oBAAoB,EAAE,CAAC;QACvB,iBAAiB,EAAE,MAAM;KAC1B;IACD,KAAK,EAAE;QACL,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,QAAQ;QAC9C,cAAc,EAAE,CAAC,YAAY;QAC7B,cAAc,EAAE,EAAE;KACnB;IACD,QAAQ,EAAE;QACR,IAAI,EAAE;YACJ,UAAU,EAAE,KAAK;YACjB,WAAW,EAAE,CAAC;YACd,eAAe,EAAE,IAAI;SACtB;QACD,KAAK,EAAE;YACL,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,MAAM;SACf;KACF;IACD,QAAQ,EAAE;QACR,OAAO,EAAE,IAAI;QACb,YAAY,EAAE,aAAa,CAAC,iBAAiB,CAAC;QAC9C,mBAAmB,EAAE,IAAI;KAC1B;IACD,UAAU,EAAE;QACV,OAAO,EAAE,IAAI;QACb,oBAAoB,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB;YACpD,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG;QACxD,wBAAwB,EAAE,OAAO,CAAC,GAAG,CAAC,wBAAwB;YAC5D,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG;QAC5D,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB;YACzC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK;KAC3D;IACD,OAAO,EAAE;QACP,OAAO,EAAE,IAAI;QACb,SAAS,EAAE,MAAM,EAAE,sCAAsC;QACzD,iBAAiB,EAAE,CAAC,EAAE,qCAAqC;QAC3D,WAAW,EAAE,CAAC,EAAQ,qDAAqD;QAC3E,MAAM,EAAE,MAAM,EAAQ,4DAA4D;QAClF,YAAY,EAAE,IAAI;QAClB,WAAW,EAAE,IAAI;QACjB,gBAAgB,EAAE,IAAI;KACvB;IACD,KAAK,EAAE;QACL,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,aAAa,KAAK,MAAM;QAC7C,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,MAAM,EAAE,EAAE,CAAC;QACpD,mBAAmB,EAAE,OAAO,CAAC,GAAG,CAAC,yBAAyB;YACxD,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACrE,CAAC,CAAC,SAAS;QACb,oBAAoB,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB;QACtD,gBAAgB,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB;QAC9C,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,KAAK,OAAO;KACzD;IACD,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY;QACpC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACxD,CAAC,CAAC,SAAS;IACb,KAAK,EAAE;QACL,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,aAAa,KAAK,MAAM;QAC7C,cAAc,EAAE,aAAa,CAAC,sBAAsB,CAAC;QACrD,mBAAmB,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,QAAQ,EAAE,EAAE,CAAC,EAAE,SAAS;QACvF,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC;YACrC,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB;YACvC,aAAa,EAAE,UAAU,CAAC,sBAAsB,CAAC,IAAI,EAAE;YACvD,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB;SAC9C,CAAC,CAAC,CAAC,SAAS;QACb,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC;YACrC,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB;YACvC,aAAa,EAAE,UAAU,CAAC,sBAAsB,CAAC,IAAI,EAAE;YACvD,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB;SAC9C,CAAC,CAAC,CAAC,SAAS;KACd;IACD,MAAM,EAAE,UAAU,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC;QACxC,UAAU,EAAE,UAAU,CAAC,mBAAmB,CAAE;QAC5C,cAAc,EAAE,UAAU,CAAC,uBAAuB,CAAC,IAAI,EAAE;QACzD,SAAS,EAAE;YACT,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,EAAE;YACvD,gBAAgB,EAAE,OAAO,CAAC,GAAG,CAAC,6BAA6B,IAAI,EAAE;SAClE;QACD,oBAAoB,EAAE,OAAO,CAAC,GAAG,CAAC,2BAA2B;QAC7D,mBAAmB,EAAE,OAAO,CAAC,GAAG,CAAC,0BAA0B;QAC3D,iBAAiB,EAAE,OAAO,CAAC,GAAG,CAAC,wBAAwB;KACxD,CAAC,CAAC,CAAC,SAAS;IACb,QAAQ,EAAE;QACR,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,KAAK,MAAM;QAChD,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,YAAY;KAC5D;IACD,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,KAAK,MAAM,CAAC,CAAC,CAAC;QACpD,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB;QACxC,gBAAgB,EAAE,OAAO,CAAC,GAAG,CAAC,0BAA0B;YACtD,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,0BAA0B,EAAE,EAAE,CAAC;YACtD,CAAC,CAAC,SAAS;QACb,iBAAiB,EAAE,OAAO,CAAC,GAAG,CAAC,2BAA2B;YACxD,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,2BAA2B,EAAE,EAAE,CAAC;YACvD,CAAC,CAAC,SAAS;KACd,CAAC,CAAC,CAAC,SAAS;CACd,CAAC"}

package/dist/src/config/validate.d.ts

@@ -0,0 +1,15 @@
+import { GatewayConfig } from '../types/config';
+export interface ConfigIssue {
+    level: 'fatal' | 'warning';
+    message: string;
+}
+export interface ConfigValidationResult {
+    valid: boolean;
+    issues: ConfigIssue[];
+}
+/**
+ * Validate gateway configuration before startup.
+ * Returns fatal errors (should prevent startup) and warnings (log and continue).
+ */
+export declare function validateConfig(config: GatewayConfig): ConfigValidationResult;
+//# sourceMappingURL=validate.d.ts.map

package/dist/src/config/validate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../../../src/config/validate.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAEhD,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,OAAO,GAAG,SAAS,CAAC;IAC3B,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,WAAW,EAAE,CAAC;CACvB;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,aAAa,GAAG,sBAAsB,CAsE5E"}