palaryn 0.1.0

package/dist/src/server/logger.js

@@ -0,0 +1,230 @@
+"use strict";
+/**
+ * Pretty console logger for Palaryn dev mode.
+ * Color-coded pipeline steps with box-drawing characters.
+ *
+ * Also exports a Winston `logger` for structured logging (JSON in production,
+ * colorized console in development).
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.log = exports.logger = void 0;
+const winston_1 = __importDefault(require("winston"));
+const isProduction = process.env.NODE_ENV === 'production';
+exports.logger = winston_1.default.createLogger({
+    level: process.env.LOG_LEVEL || (isProduction ? 'info' : 'debug'),
+    format: isProduction
+        ? winston_1.default.format.combine(winston_1.default.format.timestamp(), winston_1.default.format.json())
+        : winston_1.default.format.combine(winston_1.default.format.timestamp({ format: 'YYYY-MM-DD HH:mm:ss.SSS' }), winston_1.default.format.colorize(), winston_1.default.format.printf(({ timestamp, level, message, ...meta }) => {
+            const metaStr = Object.keys(meta).length > 0 ? ' ' + JSON.stringify(meta) : '';
+            return `${timestamp} ${level}: ${message}${metaStr}`;
+        })),
+    transports: [
+        new winston_1.default.transports.Console(),
+    ],
+});
+const RESET = '\x1b[0m';
+const BOLD = '\x1b[1m';
+const DIM = '\x1b[2m';
+const FG = {
+    black: '\x1b[30m',
+    red: '\x1b[31m',
+    green: '\x1b[32m',
+    yellow: '\x1b[33m',
+    blue: '\x1b[34m',
+    magenta: '\x1b[35m',
+    cyan: '\x1b[36m',
+    white: '\x1b[37m',
+    gray: '\x1b[90m',
+};
+const BG = {
+    red: '\x1b[41m',
+    green: '\x1b[42m',
+    yellow: '\x1b[43m',
+    blue: '\x1b[44m',
+    magenta: '\x1b[45m',
+    cyan: '\x1b[46m',
+    white: '\x1b[47m',
+};
+function timestamp() {
+    return new Date().toISOString().replace('T', ' ').replace('Z', '');
+}
+function tag(bg, fg, label) {
+    return `${bg}${fg}${BOLD} ${label} ${RESET}`;
+}
+function indent(text, prefix = '  ') {
+    return text.split('\n').map(l => prefix + l).join('\n');
+}
+function truncate(s, max = 200) {
+    if (s.length <= max)
+        return s;
+    return s.slice(0, max) + `${DIM}... (${s.length} chars)${RESET}`;
+}
+function jsonPretty(obj, maxDepth = 3) {
+    try {
+        const s = JSON.stringify(obj, null, 2);
+        return truncate(s, 500);
+    }
+    catch {
+        return String(obj);
+    }
+}
+exports.log = {
+    // ── Request lifecycle ─────────────────────────────────────
+    request(method, path, ip, body) {
+        const t = timestamp();
+        console.log('');
+        console.log(`${FG.gray}${t}${RESET}`);
+        console.log(`${tag(BG.blue, FG.white, 'REQUEST')} ${BOLD}${method}${RESET} ${FG.cyan}${path}${RESET} ${DIM}from ${ip}${RESET}`);
+        if (body && Object.keys(body).length > 0) {
+            const b = body;
+            if (b.tool) {
+                const tool = b.tool;
+                console.log(`  ${FG.yellow}tool:${RESET} ${BOLD}${tool.name}${RESET} v${tool.version} ${DIM}[${tool.capability}]${RESET}`);
+            }
+            if (b.actor) {
+                const actor = b.actor;
+                console.log(`  ${FG.yellow}actor:${RESET} ${actor.id} ${DIM}(${actor.type})${RESET}`);
+            }
+            if (b.args) {
+                const args = b.args;
+                if (args.method && args.url) {
+                    console.log(`  ${FG.yellow}target:${RESET} ${args.method} ${FG.cyan}${args.url}${RESET}`);
+                }
+                else {
+                    console.log(`  ${FG.yellow}args:${RESET} ${DIM}${truncate(JSON.stringify(args), 120)}${RESET}`);
+                }
+            }
+            if (b.tool_call_id) {
+                console.log(`  ${FG.yellow}call_id:${RESET} ${DIM}${b.tool_call_id}${RESET}`);
+            }
+        }
+    },
+    response(statusCode, durationMs, body) {
+        const color = statusCode < 300 ? FG.green : statusCode < 400 ? FG.yellow : FG.red;
+        const bgColor = statusCode < 300 ? BG.green : statusCode < 400 ? BG.yellow : BG.red;
+        console.log(`${tag(bgColor, FG.white, 'RESPONSE')} ${color}${BOLD}${statusCode}${RESET} ${DIM}in ${durationMs}ms${RESET}`);
+        if (body) {
+            const b = body;
+            if (b.status) {
+                console.log(`  ${FG.yellow}status:${RESET} ${b.status === 'ok' ? FG.green : FG.red}${b.status}${RESET}`);
+            }
+            if (b.error) {
+                console.log(`  ${FG.red}error:${RESET} ${b.error}`);
+            }
+        }
+        console.log('');
+    },
+    // ── Pipeline steps ────────────────────────────────────────
+    pipelineStart(toolCallId, toolName) {
+        console.log(`${FG.gray}  ┌─────────────────────────────────────────${RESET}`);
+        console.log(`${FG.gray}  │${RESET} ${tag(BG.magenta, FG.white, 'PIPELINE')} ${BOLD}${toolName}${RESET} ${DIM}(${toolCallId})${RESET}`);
+    },
+    pipelineStep(icon, label, detail, color = FG.white) {
+        console.log(`${FG.gray}  │${RESET}  ${icon} ${BOLD}${color}${label}${RESET} ${detail}`);
+    },
+    pipelineEnd(status, durationMs) {
+        const color = status === 'ok' ? FG.green : status === 'blocked' ? FG.red : FG.yellow;
+        console.log(`${FG.gray}  │${RESET} ${tag(status === 'ok' ? BG.green : status === 'blocked' ? BG.red : BG.yellow, FG.white, 'DONE')} ${color}${BOLD}${status}${RESET} ${DIM}(${durationMs}ms)${RESET}`);
+        console.log(`${FG.gray}  └─────────────────────────────────────────${RESET}`);
+    },
+    // ── Specific pipeline stages ──────────────────────────────
+    idempotencyHit(toolCallId) {
+        this.pipelineStep('$', 'CACHE HIT', `${DIM}returning cached result for ${toolCallId}${RESET}`, FG.cyan);
+    },
+    idempotencyMiss() {
+        this.pipelineStep('$', 'CACHE', `${FG.green}miss${RESET} ${DIM}(new call)${RESET}`, FG.cyan);
+    },
+    rateLimit(allowed, current, limit, blockedBy) {
+        if (allowed) {
+            this.pipelineStep('\u{1F6A6}', 'RATE LIMIT', `${FG.green}pass${RESET} ${DIM}(${current}/${limit})${RESET}`, FG.blue);
+        }
+        else {
+            this.pipelineStep('\u{1F6A6}', 'RATE LIMIT', `${FG.red}BLOCKED${RESET} ${blockedBy}: ${current}/${limit}`, FG.red);
+        }
+    },
+    anomaly(alertCount, blocked) {
+        if (alertCount === 0) {
+            this.pipelineStep('\u{1F50D}', 'ANOMALY', `${FG.green}clean${RESET}`, FG.blue);
+        }
+        else if (blocked) {
+            this.pipelineStep('\u{1F50D}', 'ANOMALY', `${FG.red}BLOCKED${RESET} (${alertCount} alerts)`, FG.red);
+        }
+        else {
+            this.pipelineStep('\u{1F50D}', 'ANOMALY', `${FG.yellow}${alertCount} alert(s) flagged${RESET}`, FG.yellow);
+        }
+    },
+    policy(decision, ruleId, reasons) {
+        const color = decision === 'allow' ? FG.green : decision === 'deny' ? FG.red : decision === 'transform' ? FG.yellow : FG.magenta;
+        const icon = decision === 'allow' ? '\u{2705}' : decision === 'deny' ? '\u{274C}' : decision === 'transform' ? '\u{1F504}' : '\u{23F3}';
+        this.pipelineStep(icon, 'POLICY', `${color}${BOLD}${decision.toUpperCase()}${RESET} ${DIM}rule: ${ruleId || 'none'}${RESET}`, color);
+        if (reasons && reasons.length > 0) {
+            for (const r of reasons) {
+                console.log(`${FG.gray}  │${RESET}    ${DIM}  -> ${r}${RESET}`);
+            }
+        }
+    },
+    dlp(phase, detected, severity, redactionCount) {
+        const label = phase === 'args' ? 'DLP ARGS' : 'DLP OUTPUT';
+        if (detected.length === 0) {
+            this.pipelineStep('\u{1F6E1}\u{FE0F}', label, `${FG.green}clean${RESET}`, FG.blue);
+        }
+        else {
+            const sevColor = severity === 'high' ? FG.red : severity === 'medium' ? FG.yellow : FG.cyan;
+            this.pipelineStep('\u{1F6E1}\u{FE0F}', label, `${sevColor}${severity}${RESET} found: ${FG.yellow}${detected.join(', ')}${RESET} ${DIM}(${redactionCount} redactions)${RESET}`, sevColor);
+        }
+    },
+    budget(allowed, estimated, spent, remaining, reason) {
+        if (allowed) {
+            this.pipelineStep('\u{1F4B0}', 'BUDGET', `${FG.green}pass${RESET} est:$${estimated.toFixed(4)} spent:$${spent.toFixed(4)} left:$${remaining.toFixed(4)}`, FG.green);
+        }
+        else {
+            this.pipelineStep('\u{1F4B0}', 'BUDGET', `${FG.red}BLOCKED${RESET} ${reason}`, FG.red);
+        }
+    },
+    transform(transformations) {
+        for (const t of transformations) {
+            this.pipelineStep('\u{1F504}', 'TRANSFORM', `${FG.yellow}${t.type}${RESET} -> ${t.target}`, FG.yellow);
+        }
+    },
+    executing(toolName, target) {
+        const detail = target ? `${FG.cyan}${target}${RESET}` : '';
+        this.pipelineStep('\u{26A1}', 'EXECUTE', `${BOLD}${toolName}${RESET} ${detail}`, FG.magenta);
+    },
+    executed(httpStatus, durationMs) {
+        const color = httpStatus < 300 ? FG.green : httpStatus < 400 ? FG.yellow : FG.red;
+        this.pipelineStep('\u{26A1}', 'RESULT', `${color}HTTP ${httpStatus}${RESET} ${DIM}(${durationMs}ms)${RESET}`, color);
+    },
+    executionError(error) {
+        this.pipelineStep('\u{1F4A5}', 'ERROR', `${FG.red}${error}${RESET}`, FG.red);
+    },
+    // ── Server lifecycle ──────────────────────────────────────
+    serverStart(host, port, config) {
+        console.log('');
+        console.log(`${BOLD}${FG.cyan}  ╔════════════════════════════════════════════╗${RESET}`);
+        console.log(`${BOLD}${FG.cyan}  ║${RESET}  ${BOLD}Palaryn Gateway${RESET}  ${DIM}v0.1.0${RESET}                 ${BOLD}${FG.cyan}║${RESET}`);
+        console.log(`${BOLD}${FG.cyan}  ╚════════════════════════════════════════════╝${RESET}`);
+        console.log('');
+        console.log(`  ${FG.green}${BOLD}Server:${RESET}  http://${host}:${port}`);
+        console.log(`  ${FG.green}${BOLD}Admin:${RESET}   http://${host}:${port}/admin`);
+        console.log(`  ${FG.green}${BOLD}Health:${RESET}  http://${host}:${port}/health`);
+        console.log(`  ${FG.green}${BOLD}Metrics:${RESET} http://${host}:${port}/metrics`);
+        console.log('');
+        for (const [key, val] of Object.entries(config)) {
+            const display = typeof val === 'boolean'
+                ? (val ? `${FG.green}enabled${RESET}` : `${FG.gray}disabled${RESET}`)
+                : `${FG.white}${val}${RESET}`;
+            console.log(`  ${DIM}${key}:${RESET} ${display}`);
+        }
+        console.log('');
+        console.log(`${DIM}  Waiting for requests...${RESET}`);
+        console.log('');
+    },
+    serverShutdown(signal) {
+        console.log('');
+        console.log(`${tag(BG.red, FG.white, 'SHUTDOWN')} ${signal} received`);
+    },
+};
+//# sourceMappingURL=logger.js.map

package/dist/src/server/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../../src/server/logger.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;;;;;AAEH,sDAA8B;AAE9B,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,CAAC;AAE9C,QAAA,MAAM,GAAG,iBAAO,CAAC,YAAY,CAAC;IACzC,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;IACjE,MAAM,EAAE,YAAY;QAClB,CAAC,CAAC,iBAAO,CAAC,MAAM,CAAC,OAAO,CACpB,iBAAO,CAAC,MAAM,CAAC,SAAS,EAAE,EAC1B,iBAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CACtB;QACH,CAAC,CAAC,iBAAO,CAAC,MAAM,CAAC,OAAO,CACpB,iBAAO,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC,EAC/D,iBAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,EACzB,iBAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE;YAC/D,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/E,OAAO,GAAG,SAAS,IAAI,KAAK,KAAK,OAAO,GAAG,OAAO,EAAE,CAAC;QACvD,CAAC,CAAC,CACH;IACL,UAAU,EAAE;QACV,IAAI,iBAAO,CAAC,UAAU,CAAC,OAAO,EAAE;KACjC;CACF,CAAC,CAAC;AAEH,MAAM,KAAK,GAAG,SAAS,CAAC;AACxB,MAAM,IAAI,GAAG,SAAS,CAAC;AACvB,MAAM,GAAG,GAAG,SAAS,CAAC;AAEtB,MAAM,EAAE,GAAG;IACT,KAAK,EAAE,UAAU;IACjB,GAAG,EAAE,UAAU;IACf,KAAK,EAAE,UAAU;IACjB,MAAM,EAAE,UAAU;IAClB,IAAI,EAAE,UAAU;IAChB,OAAO,EAAE,UAAU;IACnB,IAAI,EAAE,UAAU;IAChB,KAAK,EAAE,UAAU;IACjB,IAAI,EAAE,UAAU;CACjB,CAAC;AAEF,MAAM,EAAE,GAAG;IACT,GAAG,EAAE,UAAU;IACf,KAAK,EAAE,UAAU;IACjB,MAAM,EAAE,UAAU;IAClB,IAAI,EAAE,UAAU;IAChB,OAAO,EAAE,UAAU;IACnB,IAAI,EAAE,UAAU;IAChB,KAAK,EAAE,UAAU;CAClB,CAAC;AAEF,SAAS,SAAS;IAChB,OAAO,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,GAAG,CAAC,EAAU,EAAE,EAAU,EAAE,KAAa;IAChD,OAAO,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,IAAI,KAAK,IAAI,KAAK,EAAE,CAAC;AAC/C,CAAC;AAED,SAAS,MAAM,CAAC,IAAY,EAAE,SAAiB,IAAI;IACjD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,QAAQ,CAAC,CAAS,EAAE,MAAc,GAAG;IAC5C,IAAI,CAAC,CAAC,MAAM,IAAI,GAAG;QAAE,OAAO,CAAC,CAAC;IAC9B,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,GAAG,GAAG,QAAQ,CAAC,CAAC,MAAM,UAAU,KAAK,EAAE,CAAC;AACnE,CAAC;AAED,SAAS,UAAU,CAAC,GAAY,EAAE,WAAmB,CAAC;IACpD,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACvC,OAAO,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;AACH,CAAC;AAEY,QAAA,GAAG,GAAG;IACjB,6DAA6D;IAE7D,OAAO,CAAC,MAAc,EAAE,IAAY,EAAE,EAAU,EAAE,IAAc;QAC9D,MAAM,CAAC,GAAG,SAAS,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,GAAG,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC;QACtC,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,IAAI,GAAG,MAAM,GAAG,KAAK,IAAI,EAAE,CAAC,IAAI,GAAG,IAAI,GAAG,KAAK,IAAI,GAAG,QAAQ,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;QAChI,IAAI,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,IAA+B,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpE,MAAM,CAAC,GAAG,IAA+B,CAAC;YAC1C,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;gBACX,MAAM,IAAI,GAAG,CAAC,CAAC,IAA+B,CAAC;gBAC/C,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,MAAM,QAAQ,KAAK,IAAI,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,KAAK,KAAK,IAAI,CAAC,OAAO,IAAI,GAAG,IAAI,IAAI,CAAC,UAAU,IAAI,KAAK,EAAE,CAAC,CAAC;YAC7H,CAAC;YACD,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;gBACZ,MAAM,KAAK,GAAG,CAAC,CAAC,KAAgC,CAAC;gBACjD,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,MAAM,SAAS,KAAK,IAAI,KAAK,CAAC,EAAE,IAAI,GAAG,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC;YACxF,CAAC;YACD,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;gBACX,MAAM,IAAI,GAAG,CAAC,CAAC,IAA+B,CAAC;gBAC/C,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;oBAC5B,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,MAAM,UAAU,KAAK,IAAI,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,GAAG,KAAK,EAAE,CAAC,CAAC;gBAC5F,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,MAAM,QAAQ,KAAK,IAAI,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC;gBAClG,CAAC;YACH,CAAC;YACD,IAAI,CAAC,CAAC,YAAY,EAAE,CAAC;gBACnB,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,MAAM,WAAW,KAAK,IAAI,GAAG,GAAG,CAAC,CAAC,YAAY,GAAG,KAAK,EAAE,CAAC,CAAC;YAChF,CAAC;QACH,CAAC;IACH,CAAC;IAED,QAAQ,CAAC,UAAkB,EAAE,UAAkB,EAAE,IAAc;QAC7D,MAAM,KAAK,GAAG,UAAU,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC;QAClF,MAAM,OAAO,GAAG,UAAU,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC;QACpF,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,KAAK,GAAG,IAAI,GAAG,UAAU,GAAG,KAAK,IAAI,GAAG,MAAM,UAAU,KAAK,KAAK,EAAE,CAAC,CAAC;QAC3H,IAAI,IAAI,EAAE,CAAC;YACT,MAAM,CAAC,GAAG,IAA+B,CAAC;YAC1C,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;gBACb,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,MAAM,UAAU,KAAK,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,MAAM,GAAG,KAAK,EAAE,CAAC,CAAC;YAC3G,CAAC;YACD,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;gBACZ,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,GAAG,SAAS,KAAK,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YACtD,CAAC;QACH,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;IAED,6DAA6D;IAE7D,aAAa,CAAC,UAAkB,EAAE,QAAgB;QAChD,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,+CAA+C,KAAK,EAAE,CAAC,CAAC;QAC9E,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,MAAM,KAAK,IAAI,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,IAAI,GAAG,QAAQ,GAAG,KAAK,IAAI,GAAG,IAAI,UAAU,IAAI,KAAK,EAAE,CAAC,CAAC;IACzI,CAAC;IAED,YAAY,CAAC,IAAY,EAAE,KAAa,EAAE,MAAc,EAAE,QAAgB,EAAE,CAAC,KAAK;QAChF,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,MAAM,KAAK,KAAK,IAAI,IAAI,IAAI,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,IAAI,MAAM,EAAE,CAAC,CAAC;IAC1F,CAAC;IAED,WAAW,CAAC,MAAc,EAAE,UAAkB;QAC5C,MAAM,KAAK,GAAG,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC;QACrF,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,MAAM,KAAK,IAAI,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,KAAK,GAAG,IAAI,GAAG,MAAM,GAAG,KAAK,IAAI,GAAG,IAAI,UAAU,MAAM,KAAK,EAAE,CAAC,CAAC;QACvM,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,+CAA+C,KAAK,EAAE,CAAC,CAAC;IAChF,CAAC;IAED,6DAA6D;IAE7D,cAAc,CAAC,UAAkB;QAC/B,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,WAAW,EAAE,GAAG,GAAG,+BAA+B,UAAU,GAAG,KAAK,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;IAC1G,CAAC;IAED,eAAe;QACb,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,OAAO,KAAK,IAAI,GAAG,aAAa,KAAK,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;IAC/F,CAAC;IAED,SAAS,CAAC,OAAgB,EAAE,OAAgB,EAAE,KAAc,EAAE,SAAkB;QAC9E,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,KAAK,OAAO,KAAK,IAAI,GAAG,IAAI,OAAO,IAAI,KAAK,IAAI,KAAK,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;QACvH,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,GAAG,UAAU,KAAK,IAAI,SAAS,KAAK,OAAO,IAAI,KAAK,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;QACrH,CAAC;IACH,CAAC;IAED,OAAO,CAAC,UAAkB,EAAE,OAAgB;QAC1C,IAAI,UAAU,KAAK,CAAC,EAAE,CAAC;YACrB,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,KAAK,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;QACjF,CAAC;aAAM,IAAI,OAAO,EAAE,CAAC;YACnB,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,GAAG,UAAU,KAAK,KAAK,UAAU,UAAU,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;QACvG,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,GAAG,UAAU,oBAAoB,KAAK,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC;QAC7G,CAAC;IACH,CAAC;IAED,MAAM,CAAC,QAAgB,EAAE,MAAe,EAAE,OAAkB;QAC1D,MAAM,KAAK,GAAG,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,KAAK,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC;QACjI,MAAM,IAAI,GAAG,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU,CAAC;QACxI,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,KAAK,GAAG,IAAI,GAAG,QAAQ,CAAC,WAAW,EAAE,GAAG,KAAK,IAAI,GAAG,SAAS,MAAM,IAAI,MAAM,GAAG,KAAK,EAAE,EAAE,KAAK,CAAC,CAAC;QACrI,IAAI,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClC,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;gBACxB,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,MAAM,KAAK,OAAO,GAAG,QAAQ,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC;YAClE,CAAC;QACH,CAAC;IACH,CAAC;IAED,GAAG,CAAC,KAAwB,EAAE,QAAkB,EAAE,QAAgB,EAAE,cAAsB;QACxF,MAAM,KAAK,GAAG,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC;QAC3D,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,IAAI,CAAC,YAAY,CAAC,mBAAmB,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,KAAK,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;QACrF,CAAC;aAAM,CAAC;YACN,MAAM,QAAQ,GAAG,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC;YAC5F,IAAI,CAAC,YAAY,CAAC,mBAAmB,EAAE,KAAK,EAAE,GAAG,QAAQ,GAAG,QAAQ,GAAG,KAAK,WAAW,EAAE,CAAC,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,IAAI,GAAG,IAAI,cAAc,eAAe,KAAK,EAAE,EAAE,QAAQ,CAAC,CAAC;QAC3L,CAAC;IACH,CAAC;IAED,MAAM,CAAC,OAAgB,EAAE,SAAiB,EAAE,KAAa,EAAE,SAAiB,EAAE,MAAe;QAC3F,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,OAAO,KAAK,SAAS,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;QACtK,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,GAAG,UAAU,KAAK,IAAI,MAAM,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;QACzF,CAAC;IACH,CAAC;IAED,SAAS,CAAC,eAAwD;QAChE,KAAK,MAAM,CAAC,IAAI,eAAe,EAAE,CAAC;YAChC,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,GAAG,KAAK,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC;QACzG,CAAC;IACH,CAAC;IAED,SAAS,CAAC,QAAgB,EAAE,MAAe;QACzC,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,GAAG,MAAM,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,SAAS,EAAE,GAAG,IAAI,GAAG,QAAQ,GAAG,KAAK,IAAI,MAAM,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC;IAC/F,CAAC;IAED,QAAQ,CAAC,UAAkB,EAAE,UAAkB;QAC7C,MAAM,KAAK,GAAG,UAAU,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC;QAClF,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,QAAQ,EAAE,GAAG,KAAK,QAAQ,UAAU,GAAG,KAAK,IAAI,GAAG,IAAI,UAAU,MAAM,KAAK,EAAE,EAAE,KAAK,CAAC,CAAC;IACvH,CAAC;IAED,cAAc,CAAC,KAAa;QAC1B,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,GAAG,GAAG,KAAK,GAAG,KAAK,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;IAC/E,CAAC;IAED,6DAA6D;IAE7D,WAAW,CAAC,IAAY,EAAE,IAAY,EAAE,MAA+B;QACrE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,CAAC,IAAI,mDAAmD,KAAK,EAAE,CAAC,CAAC;QACzF,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,CAAC,IAAI,MAAM,KAAK,KAAK,IAAI,kBAAkB,KAAK,KAAK,GAAG,SAAS,KAAK,oBAAoB,IAAI,GAAG,EAAE,CAAC,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC;QAC7I,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,CAAC,IAAI,mDAAmD,KAAK,EAAE,CAAC,CAAC;QACzF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,KAAK,GAAG,IAAI,UAAU,KAAK,YAAY,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC;QAC3E,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,KAAK,GAAG,IAAI,SAAS,KAAK,aAAa,IAAI,IAAI,IAAI,QAAQ,CAAC,CAAC;QACjF,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,KAAK,GAAG,IAAI,UAAU,KAAK,YAAY,IAAI,IAAI,IAAI,SAAS,CAAC,CAAC;QAClF,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,KAAK,GAAG,IAAI,WAAW,KAAK,WAAW,IAAI,IAAI,IAAI,UAAU,CAAC,CAAC;QACnF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAChD,MAAM,OAAO,GAAG,OAAO,GAAG,KAAK,SAAS;gBACtC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,KAAK,UAAU,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,WAAW,KAAK,EAAE,CAAC;gBACrE,CAAC,CAAC,GAAG,EAAE,CAAC,KAAK,GAAG,GAAG,GAAG,KAAK,EAAE,CAAC;YAChC,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,GAAG,GAAG,IAAI,KAAK,IAAI,OAAO,EAAE,CAAC,CAAC;QACpD,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,4BAA4B,KAAK,EAAE,CAAC,CAAC;QACvD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;IAED,cAAc,CAAC,MAAc;QAC3B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,MAAM,WAAW,CAAC,CAAC;IACzE,CAAC;CACF,CAAC"}

package/dist/src/server/stream-proxy.d.ts

@@ -0,0 +1,32 @@
+import type { Response as ExpressResponse } from 'express';
+export interface StreamProxyOptions {
+    /** Target URL to proxy to */
+    url: string;
+    /** HTTP method (default: POST) */
+    method?: string;
+    /** Request headers to forward */
+    headers?: Record<string, string>;
+    /** Request body */
+    body?: unknown;
+    /** Timeout in milliseconds (default: 120000) */
+    timeoutMs?: number;
+    /** Whether to enable SSRF protection (default: true) */
+    ssrfProtection?: boolean;
+}
+export interface StreamProxyResult {
+    /** Accumulated response body (all SSE chunks concatenated) */
+    accumulatedBody: string;
+    /** Upstream HTTP status code */
+    httpStatus: number;
+    /** Upstream response headers */
+    headers: Record<string, string>;
+}
+/**
+ * Opens an HTTP(S) connection to the target URL and pipes the response
+ * as SSE events to an Express response. Accumulates the full response
+ * in a buffer for post-stream DLP scanning.
+ *
+ * @returns The accumulated response body and upstream metadata on stream end.
+ */
+export declare function streamProxy(options: StreamProxyOptions, clientRes: ExpressResponse): Promise<StreamProxyResult>;
+//# sourceMappingURL=stream-proxy.d.ts.map

package/dist/src/server/stream-proxy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stream-proxy.d.ts","sourceRoot":"","sources":["../../../src/server/stream-proxy.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,QAAQ,IAAI,eAAe,EAAE,MAAM,SAAS,CAAC;AAmC3D,MAAM,WAAW,kBAAkB;IACjC,6BAA6B;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,kCAAkC;IAClC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iCAAiC;IACjC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,mBAAmB;IACnB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,gDAAgD;IAChD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,wDAAwD;IACxD,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,iBAAiB;IAChC,8DAA8D;IAC9D,eAAe,EAAE,MAAM,CAAC;IACxB,gCAAgC;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,gCAAgC;IAChC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACjC;AAED;;;;;;GAMG;AACH,wBAAgB,WAAW,CACzB,OAAO,EAAE,kBAAkB,EAC3B,SAAS,EAAE,eAAe,GACzB,OAAO,CAAC,iBAAiB,CAAC,CAiI5B"}

package/dist/src/server/stream-proxy.js

@@ -0,0 +1,184 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.streamProxy = streamProxy;
+const http = __importStar(require("http"));
+const https = __importStar(require("https"));
+const url_1 = require("url");
+const http_executor_1 = require("../executor/http-executor");
+const dns = __importStar(require("dns"));
+const net = __importStar(require("net"));
+/** Maximum accumulated response size for post-DLP scan (50 MB) */
+const MAX_ACCUMULATED_BYTES = 50 * 1024 * 1024;
+/**
+ * Resolve a hostname and verify it's not private/internal (SSRF protection).
+ * Reuses the same logic as HttpExecutor.
+ */
+function validateResolvedIP(hostname) {
+    if (net.isIP(hostname)) {
+        if ((0, http_executor_1.isPrivateIP)(hostname)) {
+            return Promise.reject(new Error(`SSRF blocked: resolved IP ${hostname} is a private/reserved address`));
+        }
+        return Promise.resolve();
+    }
+    return new Promise((resolve, reject) => {
+        dns.lookup(hostname, { all: true }, (err, addresses) => {
+            if (err)
+                return reject(err);
+            for (const addr of addresses) {
+                if ((0, http_executor_1.isPrivateIP)(addr.address)) {
+                    return reject(new Error(`SSRF blocked: hostname "${hostname}" resolved to private IP ${addr.address}`));
+                }
+            }
+            resolve();
+        });
+    });
+}
+/**
+ * Opens an HTTP(S) connection to the target URL and pipes the response
+ * as SSE events to an Express response. Accumulates the full response
+ * in a buffer for post-stream DLP scanning.
+ *
+ * @returns The accumulated response body and upstream metadata on stream end.
+ */
+function streamProxy(options, clientRes) {
+    const { url, method = 'POST', headers = {}, body, timeoutMs = 120000, ssrfProtection = true, } = options;
+    return new Promise(async (resolve, reject) => {
+        // SSRF protection
+        const parsedUrl = new url_1.URL(url);
+        if (ssrfProtection) {
+            try {
+                await validateResolvedIP(parsedUrl.hostname);
+            }
+            catch (err) {
+                reject(err);
+                return;
+            }
+        }
+        const isHttps = parsedUrl.protocol === 'https:';
+        const transport = isHttps ? https : http;
+        const bodyStr = body ? (typeof body === 'string' ? body : JSON.stringify(body)) : undefined;
+        const requestHeaders = { ...headers };
+        if (bodyStr && !requestHeaders['content-type'] && !requestHeaders['Content-Type']) {
+            requestHeaders['Content-Type'] = 'application/json';
+        }
+        if (bodyStr) {
+            requestHeaders['Content-Length'] = Buffer.byteLength(bodyStr).toString();
+        }
+        const requestOptions = {
+            hostname: parsedUrl.hostname,
+            port: parsedUrl.port || (isHttps ? 443 : 80),
+            path: parsedUrl.pathname + parsedUrl.search,
+            method: method.toUpperCase(),
+            headers: requestHeaders,
+            timeout: timeoutMs,
+        };
+        const req = transport.request(requestOptions, (upstreamRes) => {
+            const httpStatus = upstreamRes.statusCode || 502;
+            // Collect upstream response headers
+            const responseHeaders = {};
+            for (const [key, value] of Object.entries(upstreamRes.headers)) {
+                if (value)
+                    responseHeaders[key] = Array.isArray(value) ? value.join(', ') : value;
+            }
+            // If upstream returns non-2xx, read the body and reject
+            if (httpStatus >= 400) {
+                let errBody = '';
+                upstreamRes.on('data', (chunk) => { errBody += chunk.toString(); });
+                upstreamRes.on('end', () => {
+                    reject(new Error(`Upstream returned HTTP ${httpStatus}: ${errBody.slice(0, 500)}`));
+                });
+                return;
+            }
+            // Set SSE response headers on the client response
+            clientRes.writeHead(200, {
+                'Content-Type': 'text/event-stream',
+                'Cache-Control': 'no-cache',
+                'Connection': 'keep-alive',
+                'X-Accel-Buffering': 'no',
+            });
+            // Accumulation buffer for post-DLP
+            let accumulated = '';
+            let accumulatedBytes = 0;
+            upstreamRes.on('data', (chunk) => {
+                const str = chunk.toString();
+                // Pipe directly to client (zero-buffer streaming)
+                clientRes.write(chunk);
+                // Accumulate for post-stream DLP scan
+                accumulatedBytes += chunk.length;
+                if (accumulatedBytes <= MAX_ACCUMULATED_BYTES) {
+                    accumulated += str;
+                }
+            });
+            upstreamRes.on('end', () => {
+                clientRes.end();
+                resolve({
+                    accumulatedBody: accumulated,
+                    httpStatus,
+                    headers: responseHeaders,
+                });
+            });
+            upstreamRes.on('error', (err) => {
+                // Send SSE error event to client before closing
+                try {
+                    clientRes.write(`event: error\ndata: ${JSON.stringify({ error: err.message })}\n\n`);
+                    clientRes.end();
+                }
+                catch {
+                    // Client may already be disconnected
+                }
+                reject(err);
+            });
+        });
+        req.on('error', (err) => {
+            reject(err);
+        });
+        req.on('timeout', () => {
+            req.destroy();
+            reject(new Error(`Upstream request timeout after ${timeoutMs}ms`));
+        });
+        // Handle client disconnect — abort the upstream request
+        clientRes.on('close', () => {
+            if (!req.destroyed) {
+                req.destroy();
+            }
+        });
+        if (bodyStr) {
+            req.write(bodyStr);
+        }
+        req.end();
+    });
+}
+//# sourceMappingURL=stream-proxy.js.map

package/dist/src/server/stream-proxy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stream-proxy.js","sourceRoot":"","sources":["../../../src/server/stream-proxy.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqEA,kCAoIC;AAzMD,2CAA6B;AAC7B,6CAA+B;AAC/B,6BAA0B;AAE1B,6DAAwD;AACxD,yCAA2B;AAC3B,yCAA2B;AAE3B,kEAAkE;AAClE,MAAM,qBAAqB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAE/C;;;GAGG;AACH,SAAS,kBAAkB,CAAC,QAAgB;IAC1C,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvB,IAAI,IAAA,2BAAW,EAAC,QAAQ,CAAC,EAAE,CAAC;YAC1B,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,6BAA6B,QAAQ,gCAAgC,CAAC,CAAC,CAAC;QAC1G,CAAC;QACD,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAED,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,EAAE,SAAS,EAAE,EAAE;YACrD,IAAI,GAAG;gBAAE,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;YAC5B,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;gBAC7B,IAAI,IAAA,2BAAW,EAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC9B,OAAO,MAAM,CACX,IAAI,KAAK,CAAC,2BAA2B,QAAQ,4BAA4B,IAAI,CAAC,OAAO,EAAE,CAAC,CACzF,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AA0BD;;;;;;GAMG;AACH,SAAgB,WAAW,CACzB,OAA2B,EAC3B,SAA0B;IAE1B,MAAM,EACJ,GAAG,EACH,MAAM,GAAG,MAAM,EACf,OAAO,GAAG,EAAE,EACZ,IAAI,EACJ,SAAS,GAAG,MAAM,EAClB,cAAc,GAAG,IAAI,GACtB,GAAG,OAAO,CAAC;IAEZ,OAAO,IAAI,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE;QAC3C,kBAAkB;QAClB,MAAM,SAAS,GAAG,IAAI,SAAG,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,cAAc,EAAE,CAAC;YACnB,IAAI,CAAC;gBACH,MAAM,kBAAkB,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;YAC/C,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,GAAG,CAAC,CAAC;gBACZ,OAAO;YACT,CAAC;QACH,CAAC;QAED,MAAM,OAAO,GAAG,SAAS,CAAC,QAAQ,KAAK,QAAQ,CAAC;QAChD,MAAM,SAAS,GAAG,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QACzC,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAE5F,MAAM,cAAc,GAA2B,EAAE,GAAG,OAAO,EAAE,CAAC;QAC9D,IAAI,OAAO,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,EAAE,CAAC;YAClF,cAAc,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;QACtD,CAAC;QACD,IAAI,OAAO,EAAE,CAAC;YACZ,cAAc,CAAC,gBAAgB,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC3E,CAAC;QAED,MAAM,cAAc,GAAG;YACrB,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,IAAI,EAAE,SAAS,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5C,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,MAAM;YAC3C,MAAM,EAAE,MAAM,CAAC,WAAW,EAAE;YAC5B,OAAO,EAAE,cAAc;YACvB,OAAO,EAAE,SAAS;SACnB,CAAC;QAEF,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,WAAW,EAAE,EAAE;YAC5D,MAAM,UAAU,GAAG,WAAW,CAAC,UAAU,IAAI,GAAG,CAAC;YAEjD,oCAAoC;YACpC,MAAM,eAAe,GAA2B,EAAE,CAAC;YACnD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC/D,IAAI,KAAK;oBAAE,eAAe,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;YACpF,CAAC;YAED,wDAAwD;YACxD,IAAI,UAAU,IAAI,GAAG,EAAE,CAAC;gBACtB,IAAI,OAAO,GAAG,EAAE,CAAC;gBACjB,WAAW,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,GAAG,OAAO,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC5E,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;oBACzB,MAAM,CAAC,IAAI,KAAK,CAAC,0BAA0B,UAAU,KAAK,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;gBACtF,CAAC,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,kDAAkD;YAClD,SAAS,CAAC,SAAS,CAAC,GAAG,EAAE;gBACvB,cAAc,EAAE,mBAAmB;gBACnC,eAAe,EAAE,UAAU;gBAC3B,YAAY,EAAE,YAAY;gBAC1B,mBAAmB,EAAE,IAAI;aAC1B,CAAC,CAAC;YAEH,mCAAmC;YACnC,IAAI,WAAW,GAAG,EAAE,CAAC;YACrB,IAAI,gBAAgB,GAAG,CAAC,CAAC;YAEzB,WAAW,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBACvC,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;gBAE7B,kDAAkD;gBAClD,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAEvB,sCAAsC;gBACtC,gBAAgB,IAAI,KAAK,CAAC,MAAM,CAAC;gBACjC,IAAI,gBAAgB,IAAI,qBAAqB,EAAE,CAAC;oBAC9C,WAAW,IAAI,GAAG,CAAC;gBACrB,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;gBACzB,SAAS,CAAC,GAAG,EAAE,CAAC;gBAChB,OAAO,CAAC;oBACN,eAAe,EAAE,WAAW;oBAC5B,UAAU;oBACV,OAAO,EAAE,eAAe;iBACzB,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YAEH,WAAW,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBAC9B,gDAAgD;gBAChD,IAAI,CAAC;oBACH,SAAS,CAAC,KAAK,CAAC,uBAAuB,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC;oBACrF,SAAS,CAAC,GAAG,EAAE,CAAC;gBAClB,CAAC;gBAAC,MAAM,CAAC;oBACP,qCAAqC;gBACvC,CAAC;gBACD,MAAM,CAAC,GAAG,CAAC,CAAC;YACd,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACtB,MAAM,CAAC,GAAG,CAAC,CAAC;QACd,CAAC,CAAC,CAAC;QAEH,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;YACrB,GAAG,CAAC,OAAO,EAAE,CAAC;YACd,MAAM,CAAC,IAAI,KAAK,CAAC,kCAAkC,SAAS,IAAI,CAAC,CAAC,CAAC;QACrE,CAAC,CAAC,CAAC;QAEH,wDAAwD;QACxD,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACzB,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;gBACnB,GAAG,CAAC,OAAO,EAAE,CAAC;YAChB,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,IAAI,OAAO,EAAE,CAAC;YACZ,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACrB,CAAC;QACD,GAAG,CAAC,GAAG,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/src/storage/file-persistence.d.ts

@@ -0,0 +1,48 @@
+import { UserStore, OAuthAccountStore, WorkspaceStore, WorkspaceMemberStore, SessionStore, UserApiKeyStore, PolicyStore } from './interfaces';
+import { OAuthClientsStore } from '../mcp/oauth-stores';
+/**
+ * Wraps an in-memory store with file persistence.
+ * Every mutation triggers a save of ALL stores to disk.
+ */
+export declare class FilePersistedStores {
+    private filePath;
+    private saveTimer;
+    readonly userStore: UserStore;
+    readonly oauthAccountStore: OAuthAccountStore;
+    readonly workspaceStore: WorkspaceStore;
+    readonly workspaceMemberStore: WorkspaceMemberStore;
+    readonly sessionStore: SessionStore;
+    readonly userApiKeyStore: UserApiKeyStore;
+    readonly policyStore: PolicyStore;
+    readonly oauthClientsStore: OAuthClientsStore;
+    private _users;
+    private _oauth;
+    private _workspaces;
+    private _members;
+    private _sessions;
+    private _apiKeys;
+    private _policies;
+    private _oauthClients;
+    constructor(dataDir: string);
+    private load;
+    private scheduleSave;
+    /**
+     * Write to disk synchronously. Use for critical operations where
+     * data loss from a crash within 100ms would be unacceptable
+     * (e.g. user creation, API key creation).
+     */
+    saveImmediate(): void;
+    private saveNow;
+    private serializeMembers;
+    private serializeApiKeys;
+    private serializePolicies;
+    flush(): void;
+    private wrapUserStore;
+    private wrapOAuthStore;
+    private wrapWorkspaceStore;
+    private wrapMemberStore;
+    private wrapSessionStore;
+    private wrapApiKeyStore;
+    private wrapPolicyStore;
+}
+//# sourceMappingURL=file-persistence.d.ts.map

package/dist/src/storage/file-persistence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-persistence.d.ts","sourceRoot":"","sources":["../../../src/storage/file-persistence.ts"],"names":[],"mappings":"AAmBA,OAAO,EACL,SAAS,EACT,iBAAiB,EACjB,cAAc,EACd,oBAAoB,EACpB,YAAY,EACZ,eAAe,EACf,WAAW,EACZ,MAAM,cAAc,CAAC;AAUtB,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAexD;;;GAGG;AACH,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,SAAS,CAA8C;IAE/D,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,iBAAiB,EAAE,iBAAiB,CAAC;IAC9C,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;IACxC,QAAQ,CAAC,oBAAoB,EAAE,oBAAoB,CAAC;IACpD,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IACpC,QAAQ,CAAC,eAAe,EAAE,eAAe,CAAC;IAC1C,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,iBAAiB,EAAE,iBAAiB,CAAC;IAG9C,OAAO,CAAC,MAAM,CAAoB;IAClC,OAAO,CAAC,MAAM,CAA4B;IAC1C,OAAO,CAAC,WAAW,CAAyB;IAC5C,OAAO,CAAC,QAAQ,CAA+B;IAC/C,OAAO,CAAC,SAAS,CAAuB;IACxC,OAAO,CAAC,QAAQ,CAA0B;IAC1C,OAAO,CAAC,SAAS,CAAsB;IACvC,OAAO,CAAC,aAAa,CAAoB;gBAE7B,OAAO,EAAE,MAAM;IA8B3B,OAAO,CAAC,IAAI;IA4BZ,OAAO,CAAC,YAAY;IAkBpB;;;;OAIG;IACH,aAAa,IAAI,IAAI;IAQrB,OAAO,CAAC,OAAO;IAoBf,OAAO,CAAC,gBAAgB;IAgBxB,OAAO,CAAC,gBAAgB;IAexB,OAAO,CAAC,iBAAiB;IAKzB,KAAK,IAAI,IAAI;IAUb,OAAO,CAAC,aAAa;IAWrB,OAAO,CAAC,cAAc;IAWtB,OAAO,CAAC,kBAAkB;IAY1B,OAAO,CAAC,eAAe;IAYvB,OAAO,CAAC,gBAAgB;IAYxB,OAAO,CAAC,eAAe;IAavB,OAAO,CAAC,eAAe;CASxB"}