ysk-omni 1.0.0

package/dist/config/env.js

@@ -0,0 +1,163 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.env = void 0;
+const dotenv_1 = require("dotenv");
+const zod_1 = require("zod");
+const node_path_1 = __importDefault(require("node:path"));
+(0, dotenv_1.config)();
+/** Map legacy GROK_* names onto OMNI_* so existing home env files still load. */
+for (const [omni, legacy] of [
+    ['OMNI_DEFAULT_MODEL', 'GROK_DEFAULT_MODEL'],
+    ['OMNI_DEFAULT_CWD', 'GROK_DEFAULT_CWD'],
+    ['OMNI_CWD_ALLOWLIST', 'GROK_CWD_ALLOWLIST'],
+    ['OMNI_TIMEOUT_MS', 'GROK_TIMEOUT_MS'],
+    ['OMNI_MAX_CONCURRENT', 'GROK_MAX_CONCURRENT'],
+    ['OMNI_ALWAYS_APPROVE', 'GROK_ALWAYS_APPROVE'],
+    ['OMNI_SAFE_MODE', 'GROK_SAFE_MODE'],
+    ['OMNI_SAFE_MAX_TURNS', 'GROK_SAFE_MAX_TURNS'],
+    ['OMNI_SAFE_TIMEOUT_MS', 'GROK_SAFE_TIMEOUT_MS'],
+]) {
+    if (process.env[omni] == null && process.env[legacy] != null) {
+        process.env[omni] = process.env[legacy];
+    }
+}
+const envSchema = zod_1.z.object({
+    // Default production for installable gateway; set development only for local coding
+    NODE_ENV: zod_1.z.enum(['development', 'test', 'production']).default('production'),
+    PORT: zod_1.z.coerce.number().int().positive().default(3850),
+    HOST: zod_1.z.string().default('0.0.0.0'),
+    DATABASE_URL: zod_1.z.string().min(1),
+    ENCRYPTION_KEY: zod_1.z.string().min(1),
+    ADMIN_BOOTSTRAP_KEY: zod_1.z.string().optional(),
+    OMNI_HOME: zod_1.z.string().optional(),
+    // Leftover policy knobs from GCTOAC. They no longer spawn a CLI.
+    OMNI_DEFAULT_MODEL: zod_1.z.string().default(''),
+    OMNI_DEFAULT_CWD: zod_1.z.string().default(''),
+    OMNI_CWD_ALLOWLIST: zod_1.z.string().default(''),
+    OMNI_TIMEOUT_MS: zod_1.z.coerce.number().int().positive().default(600_000),
+    OMNI_MAX_CONCURRENT: zod_1.z.coerce.number().int().positive().default(4),
+    OMNI_ALWAYS_APPROVE: zod_1.z
+        .string()
+        .default('true')
+        .transform((v) => v === 'true' || v === '1'),
+    /** Force all keys into safe mode when true (overrides per-key agent). */
+    OMNI_SAFE_MODE: zod_1.z
+        .string()
+        .default('false')
+        .transform((v) => v === 'true' || v === '1'),
+    OMNI_SAFE_MAX_TURNS: zod_1.z.coerce.number().int().positive().default(4),
+    OMNI_SAFE_TIMEOUT_MS: zod_1.z.coerce.number().int().positive().default(120_000),
+    ADMIN_PANEL_ENABLED: zod_1.z
+        .string()
+        .default('true')
+        .transform((v) => v === 'true' || v === '1'),
+    PM2_ADMIN_ENABLED: zod_1.z
+        .string()
+        .default('true')
+        .transform((v) => v === 'true' || v === '1'),
+    CORS_ORIGINS: zod_1.z.string().default('http://localhost:3850,http://127.0.0.1:3850'),
+    RATE_LIMIT_WINDOW_MS: zod_1.z.coerce.number().int().positive().default(60_000),
+    RATE_LIMIT_MAX: zod_1.z.coerce.number().int().positive().default(120),
+    /** Stricter cap for unauthenticated / IP-only traffic */
+    RATE_LIMIT_IP_MAX: zod_1.z.coerce.number().int().positive().default(60),
+    /** Short-window burst cap per chat API key (10s window) */
+    CHAT_BURST_MAX: zod_1.z.coerce.number().int().positive().default(20),
+    /** Failed auth attempts before temporary IP block */
+    BLOCK_FAILED_AUTH_THRESHOLD: zod_1.z.coerce.number().int().positive().default(20),
+    BLOCK_FAILED_AUTH_WINDOW_MS: zod_1.z.coerce.number().int().positive().default(300_000),
+    BLOCK_DURATION_MS: zod_1.z.coerce.number().int().positive().default(600_000),
+    BODY_LIMIT: zod_1.z.string().default('1mb'),
+    UPLOAD_MAX_BYTES: zod_1.z.coerce.number().int().positive().default(10 * 1024 * 1024),
+    DOCUMENT_DB_MAX_BYTES: zod_1.z.coerce.number().int().positive().default(1024 * 1024),
+    STORAGE_DIR: zod_1.z.string().default('./storage'),
+    LOG_LEVEL: zod_1.z.enum(['fatal', 'error', 'warn', 'info', 'debug', 'trace']).default('info'),
+    /**
+     * Trust reverse proxy hops for client IP (nginx / Cloudflare / LB).
+     * - false / 0: use socket only (ignore X-Forwarded-For)
+     * - true / 1: trust 1 hop (typical nginx or CF → app)
+     * - 2+: e.g. Cloudflare → nginx → app
+     */
+    TRUST_PROXY: zod_1.z
+        .string()
+        .default('1')
+        .transform((v) => {
+        const s = String(v).trim().toLowerCase();
+        if (s === 'false' || s === '0' || s === 'no' || s === 'off')
+            return 0;
+        if (s === 'true' || s === 'yes' || s === 'on')
+            return 1;
+        const n = Number(s);
+        if (Number.isFinite(n) && n >= 0)
+            return Math.min(10, Math.floor(n));
+        return 1;
+    }),
+    /**
+     * Client IP source when proxies are trusted:
+     * auto | cloudflare | nginx | x-forwarded-for | socket
+     */
+    PROXY_IP_SOURCE: zod_1.z
+        .enum(['auto', 'cloudflare', 'nginx', 'x-forwarded-for', 'socket'])
+        .default('auto'),
+    /**
+     * Durable chat work-queue backend.
+     * sqlite = ChatJob table + in-process worker (default, production-ready).
+     * redis / kafka = reserved multi-node backends (not implemented yet).
+     */
+    QUEUE_BACKEND: zod_1.z.enum(['sqlite', 'redis', 'kafka']).default('sqlite'),
+});
+function parseEncryptionKey(raw) {
+    const trimmed = raw.trim();
+    // base64
+    try {
+        const buf = Buffer.from(trimmed, 'base64');
+        if (buf.length === 32)
+            return buf;
+    }
+    catch {
+        /* fall through */
+    }
+    // hex
+    if (/^[0-9a-fA-F]{64}$/.test(trimmed)) {
+        return Buffer.from(trimmed, 'hex');
+    }
+    throw new Error('ENCRYPTION_KEY must be a 32-byte key encoded as base64 or 64-char hex (openssl rand -base64 32)');
+}
+const parsed = envSchema.safeParse(process.env);
+if (!parsed.success) {
+    const details = parsed.error.issues
+        .map((i) => `${i.path.join('.')}: ${i.message}`)
+        .join('; ');
+    throw new Error(`Invalid environment configuration: ${details}`);
+}
+const data = parsed.data;
+const encryptionKey = parseEncryptionKey(data.ENCRYPTION_KEY);
+const storageDir = node_path_1.default.resolve(data.STORAGE_DIR);
+const defaultCwd = data.OMNI_DEFAULT_CWD.trim()
+    ? node_path_1.default.resolve(data.OMNI_DEFAULT_CWD)
+    : node_path_1.default.join(storageDir, 'workspaces', 'default');
+const cwdAllowlist = data.OMNI_CWD_ALLOWLIST
+    ? data.OMNI_CWD_ALLOWLIST.split(',')
+        .map((s) => s.trim())
+        .filter(Boolean)
+        .map((p) => node_path_1.default.resolve(p))
+    : [defaultCwd];
+exports.env = {
+    ...data,
+    encryptionKey,
+    corsOrigins: data.CORS_ORIGINS.split(',')
+        .map((s) => s.trim())
+        .filter(Boolean),
+    cwdAllowlist,
+    storageDir,
+    defaultCwd,
+    isProd: data.NODE_ENV === 'production',
+    isDev: data.NODE_ENV === 'development',
+    /** Number of trusted reverse-proxy hops (0 = off). */
+    trustProxyHops: data.TRUST_PROXY,
+    /** @deprecated use trustProxyHops; kept as boolean for older call sites */
+    TRUST_PROXY: data.TRUST_PROXY > 0,
+};
+//# sourceMappingURL=env.js.map

package/dist/config/env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.js","sourceRoot":"","sources":["../../src/config/env.ts"],"names":[],"mappings":";;;;;;AAAA,mCAA8C;AAC9C,6BAAwB;AACxB,0DAA6B;AAE7B,IAAA,eAAU,GAAE,CAAC;AAEb,iFAAiF;AACjF,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI;IAC3B,CAAC,oBAAoB,EAAE,oBAAoB,CAAC;IAC5C,CAAC,kBAAkB,EAAE,kBAAkB,CAAC;IACxC,CAAC,oBAAoB,EAAE,oBAAoB,CAAC;IAC5C,CAAC,iBAAiB,EAAE,iBAAiB,CAAC;IACtC,CAAC,qBAAqB,EAAE,qBAAqB,CAAC;IAC9C,CAAC,qBAAqB,EAAE,qBAAqB,CAAC;IAC9C,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;IACpC,CAAC,qBAAqB,EAAE,qBAAqB,CAAC;IAC9C,CAAC,sBAAsB,EAAE,sBAAsB,CAAC;CACxC,EAAE,CAAC;IACX,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QAC7D,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC1C,CAAC;AACH,CAAC;AAED,MAAM,SAAS,GAAG,OAAC,CAAC,MAAM,CAAC;IACzB,oFAAoF;IACpF,QAAQ,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC;IAC7E,IAAI,EAAE,OAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACtD,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC;IACnC,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,cAAc,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACjC,mBAAmB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1C,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAEhC,iEAAiE;IACjE,kBAAkB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IAC1C,gBAAgB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IACxC,kBAAkB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IAC1C,eAAe,EAAE,OAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC;IACpE,mBAAmB,EAAE,OAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAClE,mBAAmB,EAAE,OAAC;SACnB,MAAM,EAAE;SACR,OAAO,CAAC,MAAM,CAAC;SACf,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,GAAG,CAAC;IAC9C,yEAAyE;IACzE,cAAc,EAAE,OAAC;SACd,MAAM,EAAE;SACR,OAAO,CAAC,OAAO,CAAC;SAChB,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,GAAG,CAAC;IAC9C,mBAAmB,EAAE,OAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAClE,oBAAoB,EAAE,OAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC;IACzE,mBAAmB,EAAE,OAAC;SACnB,MAAM,EAAE;SACR,OAAO,CAAC,MAAM,CAAC;SACf,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,GAAG,CAAC;IAC9C,iBAAiB,EAAE,OAAC;SACjB,MAAM,EAAE;SACR,OAAO,CAAC,MAAM,CAAC;SACf,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,GAAG,CAAC;IAE9C,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,6CAA6C,CAAC;IAC/E,oBAAoB,EAAE,OAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;IACxE,cAAc,EAAE,OAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;IAC/D,yDAAyD;IACzD,iBAAiB,EAAE,OAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IACjE,2DAA2D;IAC3D,cAAc,EAAE,OAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IAC9D,qDAAqD;IACrD,2BAA2B,EAAE,OAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IAC3E,2BAA2B,EAAE,OAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC;IAChF,iBAAiB,EAAE,OAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC;IACtE,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACrC,gBAAgB,EAAE,OAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;IAC9E,qBAAqB,EAAE,OAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAC9E,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC;IAC5C,SAAS,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACvF;;;;;OAKG;IACH,WAAW,EAAE,OAAC;SACX,MAAM,EAAE;SACR,OAAO,CAAC,GAAG,CAAC;SACZ,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE;QACf,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACzC,IAAI,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,KAAK;YAAE,OAAO,CAAC,CAAC;QACtE,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,IAAI;YAAE,OAAO,CAAC,CAAC;QACxD,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACrE,OAAO,CAAC,CAAC;IACX,CAAC,CAAC;IACJ;;;OAGG;IACH,eAAe,EAAE,OAAC;SACf,IAAI,CAAC,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,iBAAiB,EAAE,QAAQ,CAAC,CAAC;SAClE,OAAO,CAAC,MAAM,CAAC;IAClB;;;;OAIG;IACH,aAAa,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;CACtE,CAAC,CAAC;AAEH,SAAS,kBAAkB,CAAC,GAAW;IACrC,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,SAAS;IACT,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC3C,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE;YAAE,OAAO,GAAG,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,kBAAkB;IACpB,CAAC;IACD,MAAM;IACN,IAAI,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACtC,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACrC,CAAC;IACD,MAAM,IAAI,KAAK,CACb,iGAAiG,CAClG,CAAC;AACJ,CAAC;AAED,MAAM,MAAM,GAAG,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;AAEhD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;IACpB,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM;SAChC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;SAC/C,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,MAAM,IAAI,KAAK,CAAC,sCAAsC,OAAO,EAAE,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;AACzB,MAAM,aAAa,GAAG,kBAAkB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;AAE9D,MAAM,UAAU,GAAG,mBAAI,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;AAClD,MAAM,UAAU,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE;IAC7C,CAAC,CAAC,mBAAI,CAAC,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC;IACrC,CAAC,CAAC,mBAAI,CAAC,IAAI,CAAC,UAAU,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;AAEnD,MAAM,YAAY,GAAG,IAAI,CAAC,kBAAkB;IAC1C,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,GAAG,CAAC;SAC/B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC;SACf,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,mBAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;AAEJ,QAAA,GAAG,GAAG;IACjB,GAAG,IAAI;IACP,aAAa;IACb,WAAW,EAAE,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC;SACtC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC;IAClB,YAAY;IACZ,UAAU;IACV,UAAU;IACV,MAAM,EAAE,IAAI,CAAC,QAAQ,KAAK,YAAY;IACtC,KAAK,EAAE,IAAI,CAAC,QAAQ,KAAK,aAAa;IACtC,sDAAsD;IACtD,cAAc,EAAE,IAAI,CAAC,WAAW;IAChC,2EAA2E;IAC3E,WAAW,EAAE,IAAI,CAAC,WAAW,GAAG,CAAC;CAClC,CAAC"}

package/dist/config/omni-home.d.ts

@@ -0,0 +1,3 @@
+/** Data home: OMNI_HOME if set, otherwise ~/.ysk-omni. */
+export declare function omniHome(): string;
+//# sourceMappingURL=omni-home.d.ts.map

package/dist/config/omni-home.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"omni-home.d.ts","sourceRoot":"","sources":["../../src/config/omni-home.ts"],"names":[],"mappings":"AAGA,0DAA0D;AAC1D,wBAAgB,QAAQ,IAAI,MAAM,CAIjC"}

package/dist/config/omni-home.js

@@ -0,0 +1,16 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.omniHome = omniHome;
+const node_os_1 = __importDefault(require("node:os"));
+const node_path_1 = __importDefault(require("node:path"));
+/** Data home: OMNI_HOME if set, otherwise ~/.ysk-omni. */
+function omniHome() {
+    const env = process.env.OMNI_HOME?.trim();
+    if (env)
+        return node_path_1.default.resolve(env);
+    return node_path_1.default.join(node_os_1.default.homedir(), '.ysk-omni');
+}
+//# sourceMappingURL=omni-home.js.map

package/dist/config/omni-home.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"omni-home.js","sourceRoot":"","sources":["../../src/config/omni-home.ts"],"names":[],"mappings":";;;;;AAIA,4BAIC;AARD,sDAAyB;AACzB,0DAA6B;AAE7B,0DAA0D;AAC1D,SAAgB,QAAQ;IACtB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC;IAC1C,IAAI,GAAG;QAAE,OAAO,mBAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAClC,OAAO,mBAAI,CAAC,IAAI,CAAC,iBAAE,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC,CAAC;AAC9C,CAAC"}

package/dist/controllers/admin/api-features.handlers.d.ts

@@ -0,0 +1,6 @@
+export declare const adminApiFeaturesHandlers: {
+    get: import("express").RequestHandler<import("express-serve-static-core").ParamsDictionary, any, any, import("qs").ParsedQs, Record<string, any>>;
+    put: import("express").RequestHandler<import("express-serve-static-core").ParamsDictionary, any, any, import("qs").ParsedQs, Record<string, any>>;
+    preset: import("express").RequestHandler<import("express-serve-static-core").ParamsDictionary, any, any, import("qs").ParsedQs, Record<string, any>>;
+};
+//# sourceMappingURL=api-features.handlers.d.ts.map

package/dist/controllers/admin/api-features.handlers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-features.handlers.d.ts","sourceRoot":"","sources":["../../../src/controllers/admin/api-features.handlers.ts"],"names":[],"mappings":"AAYA,eAAO,MAAM,wBAAwB;;;;CAkDpC,CAAC"}

package/dist/controllers/admin/api-features.handlers.js

@@ -0,0 +1,62 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.adminApiFeaturesHandlers = void 0;
+const constants_1 = require("../../config/constants");
+const exception_factory_1 = require("../../exceptions/exception.factory");
+const async_handler_1 = require("../../utils/async-handler");
+const audit_service_1 = require("../../services/audit.service");
+const api_features_service_1 = require("../../services/api-features.service");
+const api_features_type_1 = require("../../interfaces/api-features.type");
+const client_ip_1 = require("../../utils/client-ip");
+exports.adminApiFeaturesHandlers = {
+    get: (0, async_handler_1.asyncHandler)(async (_req, res) => {
+        const data = await api_features_service_1.apiFeaturesService.get();
+        res.json({
+            object: 'admin.api_features',
+            data,
+            defaults: api_features_type_1.DEFAULT_API_FEATURES,
+            flags: Object.keys(api_features_type_1.DEFAULT_API_FEATURES),
+        });
+    }),
+    put: (0, async_handler_1.asyncHandler)(async (req, res) => {
+        if (!req.apiKey)
+            throw exception_factory_1.ExceptionFactory.unauthorized();
+        const body = (req.body || {});
+        const partial = {};
+        for (const key of Object.keys(api_features_type_1.DEFAULT_API_FEATURES)) {
+            if (typeof body[key] === 'boolean') {
+                partial[key] = body[key];
+            }
+        }
+        if (!Object.keys(partial).length) {
+            throw exception_factory_1.ExceptionFactory.validation('No valid boolean feature flags in body');
+        }
+        const data = await api_features_service_1.apiFeaturesService.update(partial);
+        await audit_service_1.auditService.log({
+            apiKeyId: req.apiKey.id,
+            action: constants_1.AUDIT_ACTIONS.API_FEATURES_UPDATE,
+            resource: 'api_features',
+            meta: partial,
+            ip: (0, client_ip_1.requestIp)(req),
+        });
+        res.json({ object: 'admin.api_features', data });
+    }),
+    preset: (0, async_handler_1.asyncHandler)(async (req, res) => {
+        if (!req.apiKey)
+            throw exception_factory_1.ExceptionFactory.unauthorized();
+        const name = String(req.body?.name || '').toLowerCase();
+        if (name !== 'open' && name !== 'locked' && name !== 'dev') {
+            throw exception_factory_1.ExceptionFactory.validation('name must be open | locked | dev');
+        }
+        const data = await api_features_service_1.apiFeaturesService.applyPreset(name);
+        await audit_service_1.auditService.log({
+            apiKeyId: req.apiKey.id,
+            action: constants_1.AUDIT_ACTIONS.API_FEATURES_UPDATE,
+            resource: 'api_features',
+            meta: { preset: name },
+            ip: (0, client_ip_1.requestIp)(req),
+        });
+        res.json({ object: 'admin.api_features', data, preset: name });
+    }),
+};
+//# sourceMappingURL=api-features.handlers.js.map

package/dist/controllers/admin/api-features.handlers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-features.handlers.js","sourceRoot":"","sources":["../../../src/controllers/admin/api-features.handlers.ts"],"names":[],"mappings":";;;AACA,sDAAuD;AACvD,0EAAsE;AACtE,6DAAyD;AACzD,gEAA4D;AAC5D,8EAAyE;AACzE,0EAG4C;AAC5C,qDAAkD;AAErC,QAAA,wBAAwB,GAAG;IACtC,GAAG,EAAE,IAAA,4BAAY,EAAC,KAAK,EAAE,IAAa,EAAE,GAAa,EAAE,EAAE;QACvD,MAAM,IAAI,GAAG,MAAM,yCAAkB,CAAC,GAAG,EAAE,CAAC;QAC5C,GAAG,CAAC,IAAI,CAAC;YACP,MAAM,EAAE,oBAAoB;YAC5B,IAAI;YACJ,QAAQ,EAAE,wCAAoB;YAC9B,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,wCAAoB,CAAC;SACzC,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,GAAG,EAAE,IAAA,4BAAY,EAAC,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;QACtD,IAAI,CAAC,GAAG,CAAC,MAAM;YAAE,MAAM,oCAAgB,CAAC,YAAY,EAAE,CAAC;QACvD,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAyB,CAAC;QACtD,MAAM,OAAO,GAAyB,EAAE,CAAC;QACzC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,wCAAoB,CAA0B,EAAE,CAAC;YAC7E,IAAI,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,SAAS,EAAE,CAAC;gBACnC,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC;YACjC,MAAM,oCAAgB,CAAC,UAAU,CAAC,wCAAwC,CAAC,CAAC;QAC9E,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,yCAAkB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACtD,MAAM,4BAAY,CAAC,GAAG,CAAC;YACrB,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE;YACvB,MAAM,EAAE,yBAAa,CAAC,mBAAmB;YACzC,QAAQ,EAAE,cAAc;YACxB,IAAI,EAAE,OAAkC;YACxC,EAAE,EAAE,IAAA,qBAAS,EAAC,GAAG,CAAC;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,CAAC,CAAC;IAEF,MAAM,EAAE,IAAA,4BAAY,EAAC,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;QACzD,IAAI,CAAC,GAAG,CAAC,MAAM;YAAE,MAAM,oCAAgB,CAAC,YAAY,EAAE,CAAC;QACvD,MAAM,IAAI,GAAG,MAAM,CAAE,GAAG,CAAC,IAA0B,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAC/E,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;YAC3D,MAAM,oCAAgB,CAAC,UAAU,CAAC,kCAAkC,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,yCAAkB,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QACxD,MAAM,4BAAY,CAAC,GAAG,CAAC;YACrB,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE;YACvB,MAAM,EAAE,yBAAa,CAAC,mBAAmB;YACzC,QAAQ,EAAE,cAAc;YACxB,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;YACtB,EAAE,EAAE,IAAA,qBAAS,EAAC,GAAG,CAAC;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACjE,CAAC,CAAC;CACH,CAAC"}

package/dist/controllers/admin/audit.handlers.d.ts

@@ -0,0 +1,5 @@
+/** Admin handlers: audit */
+export declare const adminAuditHandlers: {
+    listAudit: import("express").RequestHandler<import("express-serve-static-core").ParamsDictionary, any, any, import("qs").ParsedQs, Record<string, any>>;
+};
+//# sourceMappingURL=audit.handlers.d.ts.map

package/dist/controllers/admin/audit.handlers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.handlers.d.ts","sourceRoot":"","sources":["../../../src/controllers/admin/audit.handlers.ts"],"names":[],"mappings":"AAaA,4BAA4B;AAC5B,eAAO,MAAM,kBAAkB;;CAkE9B,CAAC"}

package/dist/controllers/admin/audit.handlers.js

@@ -0,0 +1,79 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.adminAuditHandlers = void 0;
+const database_1 = require("../../config/database");
+const async_handler_1 = require("../../utils/async-handler");
+const list_sort_1 = require("../../utils/list-sort");
+const AUDIT_SORT_FIELDS = [
+    'createdAt',
+    'action',
+    'resource',
+    'ip',
+];
+/** Admin handlers: audit */
+exports.adminAuditHandlers = {
+    listAudit: (0, async_handler_1.asyncHandler)(async (req, res) => {
+        const query = req.query;
+        const where = {};
+        if (query.action)
+            where.action = query.action;
+        if (query.resource)
+            where.resource = query.resource;
+        if (query.apiKeyId)
+            where.apiKeyId = query.apiKeyId;
+        const createdAt = {};
+        if (query.from) {
+            const d = new Date(query.from);
+            if (!Number.isNaN(d.getTime()))
+                createdAt.gte = d;
+        }
+        if (query.to) {
+            const d = new Date(query.to);
+            if (!Number.isNaN(d.getTime()))
+                createdAt.lte = d;
+        }
+        if (Object.keys(createdAt).length)
+            where.createdAt = createdAt;
+        const q = query.q?.trim();
+        if (q) {
+            where.OR = [
+                { action: { contains: q } },
+                { resource: { contains: q } },
+                { resourceId: { contains: q } },
+                { ip: { contains: q } },
+                { apiKey: { name: { contains: q } } },
+                { apiKey: { keyPrefix: { contains: q } } },
+            ];
+        }
+        const orderBy = (0, list_sort_1.resolveScalarOrderBy)(query.sortBy, query.sortDir, AUDIT_SORT_FIELDS, 'createdAt');
+        const [rows, total] = await Promise.all([
+            database_1.prisma.auditLog.findMany({
+                where,
+                orderBy,
+                take: query.limit,
+                skip: query.offset,
+                include: {
+                    apiKey: { select: { id: true, name: true, keyPrefix: true } },
+                },
+            }),
+            database_1.prisma.auditLog.count({ where }),
+        ]);
+        res.json({
+            object: 'list',
+            total,
+            limit: query.limit,
+            offset: query.offset,
+            data: rows.map((r) => ({
+                id: r.id,
+                action: r.action,
+                resource: r.resource,
+                resourceId: r.resourceId,
+                metaJson: r.metaJson,
+                ip: r.ip,
+                createdAt: r.createdAt,
+                apiKey: r.apiKey,
+            })),
+        });
+    }),
+};
+//# sourceMappingURL=audit.handlers.js.map

package/dist/controllers/admin/audit.handlers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.handlers.js","sourceRoot":"","sources":["../../../src/controllers/admin/audit.handlers.ts"],"names":[],"mappings":";;;AACA,oDAA+C;AAE/C,6DAAyD;AACzD,qDAA6D;AAE7D,MAAM,iBAAiB,GAAG;IACxB,WAAW;IACX,QAAQ;IACR,UAAU;IACV,IAAI;CACI,CAAC;AAEX,4BAA4B;AACf,QAAA,kBAAkB,GAAG;IAChC,SAAS,EAAE,IAAA,4BAAY,EAAC,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;QAC5D,MAAM,KAAK,GAAG,GAAG,CAAC,KAEjB,CAAC;QACF,MAAM,KAAK,GAA4B,EAAE,CAAC;QAC1C,IAAI,KAAK,CAAC,MAAM;YAAE,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;QAC9C,IAAI,KAAK,CAAC,QAAQ;YAAE,KAAK,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;QACpD,IAAI,KAAK,CAAC,QAAQ;YAAE,KAAK,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;QACpD,MAAM,SAAS,GAA+B,EAAE,CAAC;QACjD,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;YACf,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC/B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;gBAAE,SAAS,CAAC,GAAG,GAAG,CAAC,CAAC;QACpD,CAAC;QACD,IAAI,KAAK,CAAC,EAAE,EAAE,CAAC;YACb,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC7B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;gBAAE,SAAS,CAAC,GAAG,GAAG,CAAC,CAAC;QACpD,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM;YAAE,KAAK,CAAC,SAAS,GAAG,SAAS,CAAC;QAC/D,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;QAC1B,IAAI,CAAC,EAAE,CAAC;YACN,KAAK,CAAC,EAAE,GAAG;gBACT,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE;gBAC3B,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE;gBAC7B,EAAE,UAAU,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE;gBAC/B,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE;gBACvB,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE,EAAE;gBACrC,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE,EAAE;aAC3C,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,IAAA,gCAAoB,EAClC,KAAK,CAAC,MAAM,EACZ,KAAK,CAAC,OAAO,EACb,iBAAiB,EACjB,WAAW,CACZ,CAAC;QACF,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACtC,iBAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBACvB,KAAK;gBACL,OAAO;gBACP,IAAI,EAAE,KAAK,CAAC,KAAK;gBACjB,IAAI,EAAE,KAAK,CAAC,MAAM;gBAClB,OAAO,EAAE;oBACP,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE;iBAC9D;aACF,CAAC;YACF,iBAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC;SACjC,CAAC,CAAC;QACH,GAAG,CAAC,IAAI,CAAC;YACP,MAAM,EAAE,MAAM;YACd,KAAK;YACL,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACrB,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,UAAU,EAAE,CAAC,CAAC,UAAU;gBACxB,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,SAAS,EAAE,CAAC,CAAC,SAAS;gBACtB,MAAM,EAAE,CAAC,CAAC,MAAM;aACjB,CAAC,CAAC;SACJ,CAAC,CAAC;IACL,CAAC,CAAC;CAEH,CAAC"}

package/dist/controllers/admin/auth.handlers.d.ts

@@ -0,0 +1,8 @@
+/** Public + authenticated admin auth endpoints */
+export declare const adminAuthHandlers: {
+    /** POST /auth/login — exchange OTP for session token */
+    login: import("express").RequestHandler<import("express-serve-static-core").ParamsDictionary, any, any, import("qs").ParsedQs, Record<string, any>>;
+    /** POST /auth/logout — revoke current session */
+    logout: import("express").RequestHandler<import("express-serve-static-core").ParamsDictionary, any, any, import("qs").ParsedQs, Record<string, any>>;
+};
+//# sourceMappingURL=auth.handlers.d.ts.map

package/dist/controllers/admin/auth.handlers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.handlers.d.ts","sourceRoot":"","sources":["../../../src/controllers/admin/auth.handlers.ts"],"names":[],"mappings":"AAmBA,kDAAkD;AAClD,eAAO,MAAM,iBAAiB;IAC5B,wDAAwD;;IA0BxD,iDAAiD;;CAQlD,CAAC"}

package/dist/controllers/admin/auth.handlers.js

@@ -0,0 +1,56 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.adminAuthHandlers = void 0;
+const admin_auth_dto_1 = require("../../dto/admin-auth.dto");
+const exception_factory_1 = require("../../exceptions/exception.factory");
+const async_handler_1 = require("../../utils/async-handler");
+const admin_auth_service_1 = require("../../services/admin-auth.service");
+const client_ip_1 = require("../../utils/client-ip");
+const rate_limit_middleware_1 = require("../../middlewares/rate-limit.middleware");
+function extractBearer(req) {
+    const header = req.header('authorization');
+    if (!header)
+        return null;
+    const [scheme, token] = header.split(/\s+/);
+    if (!scheme || !token || scheme.toLowerCase() !== 'bearer')
+        return null;
+    return token.trim();
+}
+/** Public + authenticated admin auth endpoints */
+exports.adminAuthHandlers = {
+    /** POST /auth/login — exchange OTP for session token */
+    login: (0, async_handler_1.asyncHandler)(async (req, res) => {
+        const parsed = admin_auth_dto_1.adminOtpLoginSchema.safeParse(req.body);
+        if (!parsed.success) {
+            throw exception_factory_1.ExceptionFactory.validation('Login code is required');
+        }
+        try {
+            const result = await admin_auth_service_1.adminAuthService.loginWithOtp(parsed.data.code, {
+                ip: (0, client_ip_1.requestIp)(req),
+                userAgent: req.header('user-agent') ?? undefined,
+            });
+            (0, rate_limit_middleware_1.clearFailedAuth)(req);
+            res.json({
+                object: 'admin.session',
+                data: {
+                    token: result.token,
+                    expiresAt: result.expiresAt.toISOString(),
+                    tokenType: 'Bearer',
+                },
+            });
+        }
+        catch (err) {
+            (0, rate_limit_middleware_1.recordFailedAuth)(req);
+            throw err;
+        }
+    }),
+    /** POST /auth/logout — revoke current session */
+    logout: (0, async_handler_1.asyncHandler)(async (req, res) => {
+        const token = extractBearer(req);
+        if (token && (0, admin_auth_service_1.isSessionToken)(token)) {
+            await admin_auth_service_1.adminAuthService.logout(token, (0, client_ip_1.requestIp)(req));
+        }
+        res.json({ object: 'admin.session.deleted', data: { ok: true } });
+    }),
+};
+//# sourceMappingURL=auth.handlers.js.map

package/dist/controllers/admin/auth.handlers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.handlers.js","sourceRoot":"","sources":["../../../src/controllers/admin/auth.handlers.ts"],"names":[],"mappings":";;;AACA,6DAA+D;AAC/D,0EAAsE;AACtE,6DAAyD;AACzD,0EAAqF;AACrF,qDAAkD;AAClD,mFAGiD;AAEjD,SAAS,aAAa,CAAC,GAAY;IACjC,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IAC3C,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC5C,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,WAAW,EAAE,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACxE,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,kDAAkD;AACrC,QAAA,iBAAiB,GAAG;IAC/B,wDAAwD;IACxD,KAAK,EAAE,IAAA,4BAAY,EAAC,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;QACxD,MAAM,MAAM,GAAG,oCAAmB,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACvD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,oCAAgB,CAAC,UAAU,CAAC,wBAAwB,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,qCAAgB,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE;gBACnE,EAAE,EAAE,IAAA,qBAAS,EAAC,GAAG,CAAC;gBAClB,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,SAAS;aACjD,CAAC,CAAC;YACH,IAAA,uCAAe,EAAC,GAAG,CAAC,CAAC;YACrB,GAAG,CAAC,IAAI,CAAC;gBACP,MAAM,EAAE,eAAe;gBACvB,IAAI,EAAE;oBACJ,KAAK,EAAE,MAAM,CAAC,KAAK;oBACnB,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,WAAW,EAAE;oBACzC,SAAS,EAAE,QAAQ;iBACpB;aACF,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAA,wCAAgB,EAAC,GAAG,CAAC,CAAC;YACtB,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC,CAAC;IAEF,iDAAiD;IACjD,MAAM,EAAE,IAAA,4BAAY,EAAC,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;QACzD,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,KAAK,IAAI,IAAA,mCAAc,EAAC,KAAK,CAAC,EAAE,CAAC;YACnC,MAAM,qCAAgB,CAAC,MAAM,CAAC,KAAK,EAAE,IAAA,qBAAS,EAAC,GAAG,CAAC,CAAC,CAAC;QACvD,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,uBAAuB,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IACpE,CAAC,CAAC;CACH,CAAC"}

package/dist/controllers/admin/catalog.handlers.d.ts

@@ -0,0 +1,10 @@
+export declare const adminCatalogHandlers: {
+    catalog: import("express").RequestHandler<import("express-serve-static-core").ParamsDictionary, any, any, import("qs").ParsedQs, Record<string, any>>;
+    sync: import("express").RequestHandler<import("express-serve-static-core").ParamsDictionary, any, any, import("qs").ParsedQs, Record<string, any>>;
+    hub: import("express").RequestHandler<import("express-serve-static-core").ParamsDictionary, any, any, import("qs").ParsedQs, Record<string, any>>;
+    pull: import("express").RequestHandler<import("express-serve-static-core").ParamsDictionary, any, any, import("qs").ParsedQs, Record<string, any>>;
+    loadModel: import("express").RequestHandler<import("express-serve-static-core").ParamsDictionary, any, any, import("qs").ParsedQs, Record<string, any>>;
+    removeLocal: import("express").RequestHandler<import("express-serve-static-core").ParamsDictionary, any, any, import("qs").ParsedQs, Record<string, any>>;
+    unloadModel: import("express").RequestHandler<import("express-serve-static-core").ParamsDictionary, any, any, import("qs").ParsedQs, Record<string, any>>;
+};
+//# sourceMappingURL=catalog.handlers.d.ts.map

package/dist/controllers/admin/catalog.handlers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog.handlers.d.ts","sourceRoot":"","sources":["../../../src/controllers/admin/catalog.handlers.ts"],"names":[],"mappings":"AAoBA,eAAO,MAAM,oBAAoB;;;;;;;;CAyJhC,CAAC"}

package/dist/controllers/admin/catalog.handlers.js

@@ -0,0 +1,170 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.adminCatalogHandlers = void 0;
+const node_fs_1 = __importDefault(require("node:fs"));
+const async_handler_1 = require("../../utils/async-handler");
+const node_path_1 = __importDefault(require("node:path"));
+const omni_home_1 = require("../../config/omni-home");
+const curated_1 = require("../../catalog/curated");
+const registry_1 = require("../../services/hf/registry");
+const delete_local_1 = require("../../services/hf/delete-local");
+const client_1 = require("../../services/hf/client");
+const record_pull_1 = require("../../services/hf/record-pull");
+const vram_scheduler_1 = require("../../services/vram-scheduler");
+const engine_manager_1 = require("../../services/runtimes/engine-manager");
+const exception_factory_1 = require("../../exceptions/exception.factory");
+const echo_1 = require("../../services/runtimes/echo");
+const hub_search_1 = require("../../services/hf/hub-search");
+exports.adminCatalogHandlers = {
+    catalog: (0, async_handler_1.asyncHandler)(async (_req, res) => {
+        const packs = (0, curated_1.loadCuratedPacks)();
+        const local = (0, registry_1.pruneMissingFiles)().models;
+        const snap = vram_scheduler_1.vramScheduler.snapshot();
+        const popular = (0, hub_search_1.loadPopularCache)();
+        res.status(200).json({
+            packs,
+            local,
+            echo: echo_1.ECHO_MODEL_ID,
+            loaded: engine_manager_1.engineManager.list(),
+            usedMb: snap.usedMb,
+            budgetMb: snap.budgetMb,
+            popular: popular?.hits || [],
+            popularSyncedAt: popular?.syncedAt || null,
+        });
+    }),
+    sync: (0, async_handler_1.asyncHandler)(async (_req, res) => {
+        try {
+            const cache = await (0, hub_search_1.syncPopularGguf)();
+            res.status(200).json({
+                ok: true,
+                count: cache.hits.length,
+                syncedAt: cache.syncedAt,
+                hits: cache.hits,
+                source: cache.source,
+            });
+        }
+        catch (err) {
+            res.status(502).json({
+                error: {
+                    code: 'hub_unavailable',
+                    message: err instanceof Error ? err.message : 'Hugging Face Hub sync failed',
+                },
+            });
+        }
+    }),
+    hub: (0, async_handler_1.asyncHandler)(async (req, res) => {
+        const q = String(req.query.q || '').trim();
+        const modality = String(req.query.modality || '').trim();
+        const cursor = String(req.query.cursor || '').trim();
+        const limit = Number(req.query.limit);
+        try {
+            const data = await (0, hub_search_1.searchHub)({ q, modality, cursor, limit });
+            res.status(200).json(data);
+        }
+        catch (err) {
+            res.status(502).json({
+                error: {
+                    code: 'hub_unavailable',
+                    message: err instanceof Error ? err.message : 'Hugging Face Hub search failed',
+                },
+            });
+        }
+    }),
+    pull: (0, async_handler_1.asyncHandler)(async (req, res) => {
+        const model = String(req.body?.model || '').trim();
+        if (!model)
+            throw exception_factory_1.ExceptionFactory.validation('model is required');
+        const home = (0, omni_home_1.omniHome)();
+        res.status(200);
+        res.setHeader('Content-Type', 'application/x-ndjson');
+        const destDir = node_path_1.default.join(home, 'models');
+        const write = (obj) => {
+            res.write(`${JSON.stringify(obj)}\n`);
+        };
+        const result = await (0, client_1.pullModel)(model, destDir, (p) => write(p));
+        const entry = (0, record_pull_1.recordPullIfOk)(model, result, node_path_1.default.join(home, 'registry.json'));
+        write({ status: result.status, entry, reason: result.reason });
+        res.end();
+    }),
+    loadModel: (0, async_handler_1.asyncHandler)(async (req, res) => {
+        const id = String(req.body?.id || '').trim();
+        if (!id)
+            throw exception_factory_1.ExceptionFactory.validation('id is required');
+        const exclusive = Boolean(req.body?.exclusive);
+        const entry = (0, registry_1.findEntry)(id);
+        const vramMb = Number(req.body?.vramMb) ||
+            entry?.vramMb ||
+            (id === echo_1.ECHO_MODEL_ID ? 0 : 4096);
+        if (exclusive)
+            await engine_manager_1.engineManager.unloadAll();
+        if (id === echo_1.ECHO_MODEL_ID) {
+            const plan = vram_scheduler_1.vramScheduler.load({ id, vramMb: 0, exclusive });
+            res.status(200).json({ ok: true, plan, ...vram_scheduler_1.vramScheduler.snapshot(), loaded: engine_manager_1.engineManager.list() });
+            return;
+        }
+        if (!entry) {
+            throw exception_factory_1.ExceptionFactory.notFound('Model');
+        }
+        if (!entry.path || !node_fs_1.default.existsSync(entry.path)) {
+            throw exception_factory_1.ExceptionFactory.engineUnconfigured(`No GGUF file on disk for ${entry.id}; Pull a GGUF first`);
+        }
+        const patched = { ...entry, vramMb: vramMb || entry.vramMb };
+        if (entry.runtime === 'whisper' ||
+            entry.runtime === 'diffusion' ||
+            entry.runtime === 'tts') {
+            res.status(200).json({
+                ok: true,
+                engine: { id: entry.id, kind: entry.runtime, path: entry.path },
+                ...vram_scheduler_1.vramScheduler.snapshot(),
+                loaded: engine_manager_1.engineManager.list(),
+            });
+            return;
+        }
+        const isGguf = Boolean(entry.path?.toLowerCase().endsWith('.gguf'));
+        const eng = isGguf || entry.runtime === 'llamacpp'
+            ? await engine_manager_1.engineManager.loadGguf(patched)
+            : await engine_manager_1.engineManager.loadVllm(patched);
+        res.status(200).json({
+            ok: true,
+            engine: { id: eng.id, port: eng.port, kind: eng.kind },
+            ...vram_scheduler_1.vramScheduler.snapshot(),
+            loaded: engine_manager_1.engineManager.list(),
+        });
+    }),
+    removeLocal: (0, async_handler_1.asyncHandler)(async (req, res) => {
+        const id = String(req.body?.id || '').trim();
+        if (!id)
+            throw exception_factory_1.ExceptionFactory.validation('id is required');
+        try {
+            const out = await (0, delete_local_1.deleteLocalModel)(id);
+            res.status(200).json({
+                ok: true,
+                ...out,
+                ...vram_scheduler_1.vramScheduler.snapshot(),
+                loaded: engine_manager_1.engineManager.list(),
+                local: (0, registry_1.loadRegistry)().models,
+            });
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            if (msg.startsWith('not found'))
+                throw exception_factory_1.ExceptionFactory.notFound('Model');
+            throw err;
+        }
+    }),
+    unloadModel: (0, async_handler_1.asyncHandler)(async (req, res) => {
+        const id = String(req.body?.id || req.params.id || '').trim();
+        if (!id)
+            throw exception_factory_1.ExceptionFactory.validation('id is required');
+        const removed = await engine_manager_1.engineManager.unload(id);
+        res.status(200).json({
+            ok: removed,
+            ...vram_scheduler_1.vramScheduler.snapshot(),
+            loaded: engine_manager_1.engineManager.list(),
+        });
+    }),
+};
+//# sourceMappingURL=catalog.handlers.js.map