ysk-omni 1.0.0

package/dist/services/document.service.js

@@ -0,0 +1,344 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.documentService = exports.DocumentService = void 0;
+const node_child_process_1 = require("node:child_process");
+const node_crypto_1 = require("node:crypto");
+const node_fs_1 = require("node:fs");
+const node_os_1 = __importDefault(require("node:os"));
+const node_path_1 = __importDefault(require("node:path"));
+const node_util_1 = require("node:util");
+const database_1 = require("../config/database");
+const constants_1 = require("../config/constants");
+const env_1 = require("../config/env");
+const exception_factory_1 = require("../exceptions/exception.factory");
+const id_1 = require("../utils/id");
+const logger_1 = require("../utils/logger");
+const file_sniff_1 = require("../utils/file-sniff");
+const path_safe_1 = require("../utils/path-safe");
+const audit_service_1 = require("./audit.service");
+const prisma_bytes_1 = require("../utils/prisma-bytes");
+const api_key_id_1 = require("../utils/api-key-id");
+const encryption_service_1 = require("./encryption.service");
+const execFileAsync = (0, node_util_1.promisify)(node_child_process_1.execFile);
+class DocumentService {
+    async ensureStorageDir() {
+        await node_fs_1.promises.mkdir(env_1.env.storageDir, { recursive: true });
+    }
+    async upload(input) {
+        if (input.buffer.length > env_1.env.UPLOAD_MAX_BYTES) {
+            throw exception_factory_1.ExceptionFactory.documentTooLarge(env_1.env.UPLOAD_MAX_BYTES);
+        }
+        // OTP admin sessions use synthetic ids — map to a real api_keys row for FK
+        const apiKeyId = await (0, api_key_id_1.toPersistentApiKeyId)(input.apiKeyId);
+        const { originalName, mimeType: mime } = (0, file_sniff_1.assertSafeUpload)({
+            originalName: input.originalName,
+            mimeType: input.mimeType,
+            buffer: input.buffer,
+        });
+        const checksumSha256 = (0, node_crypto_1.createHash)('sha256').update(input.buffer).digest('hex');
+        const encrypted = encryption_service_1.encryptionService.encrypt(input.buffer);
+        const id = (0, id_1.createId)();
+        const useFilesystem = input.buffer.length > env_1.env.DOCUMENT_DB_MAX_BYTES;
+        let storagePath = null;
+        // any: Prisma Bytes vs Node Buffer typing (TS 5.x ArrayBufferLike mismatch)
+        let contentCiphertext = null;
+        let contentIv = null;
+        let contentTag = null;
+        let storageType = constants_1.STORAGE_TYPES.DB;
+        if (useFilesystem) {
+            await this.ensureStorageDir();
+            const rel = (0, path_safe_1.ensureRelativeStoragePath)(id);
+            const fullPath = node_path_1.default.join(env_1.env.storageDir, `${rel}.enc`);
+            // Store iv + tag + ciphertext together
+            const packed = Buffer.concat([
+                Buffer.from([encrypted.iv.length]),
+                encrypted.iv,
+                Buffer.from([encrypted.tag.length]),
+                encrypted.tag,
+                encrypted.ciphertext,
+            ]);
+            await node_fs_1.promises.writeFile(fullPath, packed, { mode: 0o600 });
+            storagePath = `${rel}.enc`;
+            storageType = constants_1.STORAGE_TYPES.FILESYSTEM;
+        }
+        else {
+            contentCiphertext = (0, prisma_bytes_1.toPrismaBytes)(encrypted.ciphertext);
+            contentIv = (0, prisma_bytes_1.toPrismaBytes)(encrypted.iv);
+            contentTag = (0, prisma_bytes_1.toPrismaBytes)(encrypted.tag);
+        }
+        const created = await database_1.prisma.document.create({
+            data: {
+                id,
+                apiKeyId,
+                originalName,
+                mimeType: mime,
+                sizeBytes: input.buffer.length,
+                storageType,
+                contentCiphertext,
+                contentIv,
+                contentTag,
+                storagePath,
+                checksumSha256,
+            },
+        });
+        await audit_service_1.auditService.log({
+            apiKeyId,
+            action: constants_1.AUDIT_ACTIONS.DOCUMENT_UPLOAD,
+            resource: 'document',
+            resourceId: created.id,
+            meta: {
+                originalName,
+                mimeType: mime,
+                sizeBytes: input.buffer.length,
+                storageType,
+            },
+            ip: input.ip,
+        });
+        return this.toPublic(created);
+    }
+    /**
+     * Resolve ownership id for Document.apiKeyId (required FK).
+     * OTP sessions use synthetic ids — map to a real admin/key row so upload
+     * and later getOwned/chat attachment paths agree.
+     */
+    async ownerId(apiKeyId) {
+        return (0, api_key_id_1.toPersistentApiKeyId)(apiKeyId);
+    }
+    async list(apiKeyId, limit = 50, offset = 0) {
+        const owner = await this.ownerId(apiKeyId);
+        const where = { apiKeyId: owner, deletedAt: null };
+        const [rows, total] = await Promise.all([
+            database_1.prisma.document.findMany({
+                where,
+                orderBy: { createdAt: 'desc' },
+                take: limit,
+                skip: offset,
+            }),
+            database_1.prisma.document.count({ where }),
+        ]);
+        return { items: rows.map((r) => this.toPublic(r)), total };
+    }
+    async getOwned(apiKeyId, documentId) {
+        const owner = await this.ownerId(apiKeyId);
+        let doc = await database_1.prisma.document.findFirst({
+            where: { id: documentId, apiKeyId: owner, deletedAt: null },
+        });
+        if (doc)
+            return doc;
+        // Admin keys (and OTP sessions mapped to an admin key) may read any
+        // non-deleted document — matches Admin panel document list/download.
+        // Client keys stay ownership-scoped for multi-tenant isolation.
+        const actorKey = await database_1.prisma.apiKey.findUnique({
+            where: { id: owner },
+            select: { role: true },
+        });
+        const isAdmin = (0, api_key_id_1.isSyntheticApiKeyId)(apiKeyId) ||
+            String(actorKey?.role || '').toLowerCase() === constants_1.ROLES.ADMIN;
+        if (isAdmin) {
+            doc = await database_1.prisma.document.findFirst({
+                where: { id: documentId, deletedAt: null },
+            });
+            if (doc)
+                return doc;
+        }
+        throw exception_factory_1.ExceptionFactory.notFound('Document');
+    }
+    async getPublic(apiKeyId, documentId) {
+        const doc = await this.getOwned(apiKeyId, documentId);
+        return this.toPublic(doc);
+    }
+    async readDecryptedContent(apiKeyId, documentId) {
+        const doc = await this.getOwned(apiKeyId, documentId);
+        if (doc.storageType === constants_1.STORAGE_TYPES.FILESYSTEM && doc.storagePath) {
+            const fullPath = node_path_1.default.join(env_1.env.storageDir, node_path_1.default.basename(doc.storagePath));
+            const packed = await node_fs_1.promises.readFile(fullPath);
+            let offset = 0;
+            const ivLen = packed[offset++];
+            const iv = packed.subarray(offset, offset + ivLen);
+            offset += ivLen;
+            const tagLen = packed[offset++];
+            const tag = packed.subarray(offset, offset + tagLen);
+            offset += tagLen;
+            const ciphertext = packed.subarray(offset);
+            return encryption_service_1.encryptionService.decrypt({ ciphertext, iv, tag });
+        }
+        if (!doc.contentCiphertext || !doc.contentIv || !doc.contentTag) {
+            throw exception_factory_1.ExceptionFactory.internal('Document ciphertext missing');
+        }
+        return encryption_service_1.encryptionService.decrypt({
+            ciphertext: Buffer.from(doc.contentCiphertext),
+            iv: Buffer.from(doc.contentIv),
+            tag: Buffer.from(doc.contentTag),
+        });
+    }
+    async softDelete(apiKeyId, documentId, ip) {
+        const doc = await this.getOwned(apiKeyId, documentId);
+        await database_1.prisma.document.update({
+            where: { id: doc.id },
+            data: { deletedAt: new Date() },
+        });
+        if (doc.storageType === constants_1.STORAGE_TYPES.FILESYSTEM && doc.storagePath) {
+            const fullPath = node_path_1.default.join(env_1.env.storageDir, node_path_1.default.basename(doc.storagePath));
+            await node_fs_1.promises.unlink(fullPath).catch(() => undefined);
+        }
+        await audit_service_1.auditService.log({
+            apiKeyId,
+            action: constants_1.AUDIT_ACTIONS.DOCUMENT_DELETE,
+            resource: 'document',
+            resourceId: documentId,
+            meta: { originalName: doc.originalName },
+            ip,
+        });
+    }
+    /**
+     * Decrypt owned documents into `targetDir` so local engine (safe sandbox tools)
+     * can `read_file` / open them by absolute path.
+     */
+    async materializeDocuments(apiKeyId, documentIds, targetDir) {
+        if (documentIds.length === 0)
+            return [];
+        await node_fs_1.promises.mkdir(targetDir, { recursive: true });
+        const usedNames = new Set();
+        const out = [];
+        for (const id of documentIds) {
+            const doc = await this.getOwned(apiKeyId, id);
+            const buf = await this.readDecryptedContent(apiKeyId, id);
+            let safeName = (0, path_safe_1.sanitizeFilename)(doc.originalName);
+            if (usedNames.has(safeName)) {
+                const ext = node_path_1.default.extname(safeName);
+                const stem = node_path_1.default.basename(safeName, ext);
+                safeName = `${stem}-${id.slice(0, 8)}${ext}`;
+            }
+            usedNames.add(safeName);
+            const fullPath = node_path_1.default.join(targetDir, safeName);
+            await node_fs_1.promises.writeFile(fullPath, buf, { mode: 0o600 });
+            out.push({
+                id: doc.id,
+                originalName: doc.originalName,
+                mimeType: doc.mimeType,
+                sizeBytes: doc.sizeBytes,
+                path: fullPath,
+            });
+        }
+        return out;
+    }
+    /**
+     * Build prompt context from documents. Optionally materialize files into
+     * `materializeDir`. Prefer `pathPrefix` (relative to cwd) in the prompt
+     * so tools never need absolute host paths.
+     */
+    async buildContextFromDocuments(apiKeyId, documentIds, maxChars, options) {
+        if (documentIds.length === 0)
+            return { context: '', files: [] };
+        const files = options?.materializeDir
+            ? await this.materializeDocuments(apiKeyId, documentIds, options.materializeDir)
+            : [];
+        const prefix = (options?.pathPrefix || '').replace(/\\/g, '/').replace(/\/+$/, '');
+        const displayPath = (f) => {
+            if (prefix) {
+                const base = node_path_1.default.basename(f.path);
+                return `${prefix}/${base}`.replace(/\/+/g, '/');
+            }
+            // Fallback: basename only (never leak full host path when prefix missing)
+            return node_path_1.default.basename(f.path);
+        };
+        const pathById = new Map(files.map((f) => [f.id, displayPath(f)]));
+        const parts = [];
+        let used = 0;
+        if (files.length > 0) {
+            const list = files
+                .map((f) => `- ${f.originalName} (${f.mimeType}, ${f.sizeBytes} bytes) → ${displayPath(f)}`)
+                .join('\n');
+            const intro = `Attached files are written under the working directory for tools ` +
+                `(read_file / list_dir). Use these paths relative to cwd:\n${list}\n\n`;
+            parts.push(intro);
+            used += intro.length;
+        }
+        for (const id of documentIds) {
+            const doc = await this.getOwned(apiKeyId, id);
+            const remaining = maxChars - used;
+            if (remaining <= 0)
+                break;
+            const relPath = pathById.get(id);
+            const pathLine = relPath ? `path: ${relPath}\n` : '';
+            const header = `--- Document: ${doc.originalName} (${doc.id}) ---\n${pathLine}`;
+            let bodyText;
+            if ((0, constants_1.isImageMime)(doc.mimeType)) {
+                bodyText =
+                    `[image attachment: name=${doc.originalName}, mime=${doc.mimeType}, ` +
+                        `size=${doc.sizeBytes} bytes, document_id=${doc.id}, sha256=${doc.checksumSha256}` +
+                        (relPath ? `, file=${relPath}` : '') +
+                        `]\n` +
+                        `Note: image bytes are not inlined into the prompt; open the file path if vision/file tools are available.\n`;
+            }
+            else {
+                const buf = await this.readDecryptedContent(apiKeyId, id);
+                bodyText = await this.bufferToContextText(doc, buf);
+            }
+            const body = header.length + bodyText.length > remaining
+                ? bodyText.slice(0, Math.max(0, remaining - header.length)) +
+                    '\n...[truncated]'
+                : bodyText;
+            const chunk = header + body + '\n';
+            parts.push(chunk);
+            used += chunk.length;
+        }
+        return { context: parts.join('\n'), files };
+    }
+    /** Convert file bytes to prompt-safe text (PDF extract, textual decode, or placeholder). */
+    async bufferToContextText(doc, buf) {
+        const mime = (doc.mimeType || '').toLowerCase();
+        const ext = node_path_1.default.extname(doc.originalName).toLowerCase();
+        if (mime === 'application/pdf' || ext === '.pdf') {
+            const extracted = await this.extractPdfText(buf);
+            if (extracted && extracted.trim()) {
+                return extracted;
+            }
+            return (`[pdf file: ${doc.originalName}, ${doc.sizeBytes} bytes, sha256=${doc.checksumSha256}; ` +
+                `text extraction unavailable — use the on-disk path with tools if present]`);
+        }
+        if ((0, constants_1.isTextualMime)(mime) || !buf.includes(0)) {
+            const text = buf.toString('utf8');
+            if (!text.includes('\u0000')) {
+                return text;
+            }
+        }
+        return `[binary file: ${doc.originalName}, ${doc.sizeBytes} bytes, sha256=${doc.checksumSha256}]`;
+    }
+    /** Best-effort PDF text via poppler `pdftotext` when installed. */
+    async extractPdfText(buf) {
+        const tmpIn = node_path_1.default.join(node_os_1.default.tmpdir(), `ysk-omni-pdf-${(0, node_crypto_1.randomUUID)()}.pdf`);
+        try {
+            await node_fs_1.promises.writeFile(tmpIn, buf, { mode: 0o600 });
+            const { stdout } = await execFileAsync('pdftotext', ['-layout', '-enc', 'UTF-8', '-nopgbrk', tmpIn, '-'], {
+                maxBuffer: 12 * 1024 * 1024,
+                timeout: 45_000,
+            });
+            const text = String(stdout || '').replace(/\u0000/g, '').trim();
+            return text || null;
+        }
+        catch (err) {
+            logger_1.logger.debug({ err: err instanceof Error ? err.message : String(err) }, 'pdftotext extraction failed');
+            return null;
+        }
+        finally {
+            await node_fs_1.promises.unlink(tmpIn).catch(() => undefined);
+        }
+    }
+    toPublic(doc) {
+        return {
+            id: doc.id,
+            originalName: doc.originalName,
+            mimeType: doc.mimeType,
+            sizeBytes: doc.sizeBytes,
+            checksumSha256: doc.checksumSha256,
+            createdAt: doc.createdAt,
+        };
+    }
+}
+exports.DocumentService = DocumentService;
+exports.documentService = new DocumentService();
+//# sourceMappingURL=document.service.js.map

package/dist/services/document.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"document.service.js","sourceRoot":"","sources":["../../src/services/document.service.ts"],"names":[],"mappings":";;;;;;AAAA,2DAA8C;AAC9C,6CAAqD;AACrD,qCAAyC;AACzC,sDAAyB;AACzB,0DAA6B;AAC7B,yCAAsC;AACtC,iDAA4C;AAC5C,mDAM6B;AAC7B,uCAAoC;AAIpC,uEAAmE;AACnE,oCAAuC;AACvC,4CAAyC;AACzC,oDAAuD;AACvD,kDAG4B;AAC5B,mDAA+C;AAC/C,wDAAsD;AACtD,oDAG6B;AAC7B,6DAAyD;AAEzD,MAAM,aAAa,GAAG,IAAA,qBAAS,EAAC,6BAAQ,CAAC,CAAC;AAG1C,MAAa,eAAe;IAC1B,KAAK,CAAC,gBAAgB;QACpB,MAAM,kBAAE,CAAC,KAAK,CAAC,SAAG,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAMZ;QACC,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,SAAG,CAAC,gBAAgB,EAAE,CAAC;YAC/C,MAAM,oCAAgB,CAAC,gBAAgB,CAAC,SAAG,CAAC,gBAAgB,CAAC,CAAC;QAChE,CAAC;QAED,2EAA2E;QAC3E,MAAM,QAAQ,GAAG,MAAM,IAAA,iCAAoB,EAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAE5D,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,IAAA,6BAAgB,EAAC;YACxD,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,MAAM,EAAE,KAAK,CAAC,MAAM;SACrB,CAAC,CAAC;QAEH,MAAM,cAAc,GAAG,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC/E,MAAM,SAAS,GAAG,sCAAiB,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC1D,MAAM,EAAE,GAAG,IAAA,aAAQ,GAAE,CAAC;QACtB,MAAM,aAAa,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,SAAG,CAAC,qBAAqB,CAAC;QAEtE,IAAI,WAAW,GAAkB,IAAI,CAAC;QACtC,4EAA4E;QAC5E,IAAI,iBAAiB,GAAQ,IAAI,CAAC;QAClC,IAAI,SAAS,GAAQ,IAAI,CAAC;QAC1B,IAAI,UAAU,GAAQ,IAAI,CAAC;QAC3B,IAAI,WAAW,GAAW,yBAAa,CAAC,EAAE,CAAC;QAE3C,IAAI,aAAa,EAAE,CAAC;YAClB,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC9B,MAAM,GAAG,GAAG,IAAA,qCAAyB,EAAC,EAAE,CAAC,CAAC;YAC1C,MAAM,QAAQ,GAAG,mBAAI,CAAC,IAAI,CAAC,SAAG,CAAC,UAAU,EAAE,GAAG,GAAG,MAAM,CAAC,CAAC;YACzD,uCAAuC;YACvC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;gBAC3B,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;gBAClC,SAAS,CAAC,EAAE;gBACZ,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBACnC,SAAS,CAAC,GAAG;gBACb,SAAS,CAAC,UAAU;aACrB,CAAC,CAAC;YACH,MAAM,kBAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACtD,WAAW,GAAG,GAAG,GAAG,MAAM,CAAC;YAC3B,WAAW,GAAG,yBAAa,CAAC,UAAU,CAAC;QACzC,CAAC;aAAM,CAAC;YACN,iBAAiB,GAAG,IAAA,4BAAa,EAAC,SAAS,CAAC,UAAU,CAAC,CAAC;YACxD,SAAS,GAAG,IAAA,4BAAa,EAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YACxC,UAAU,GAAG,IAAA,4BAAa,EAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAC5C,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,iBAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;YAC3C,IAAI,EAAE;gBACJ,EAAE;gBACF,QAAQ;gBACR,YAAY;gBACZ,QAAQ,EAAE,IAAI;gBACd,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM;gBAC9B,WAAW;gBACX,iBAAiB;gBACjB,SAAS;gBACT,UAAU;gBACV,WAAW;gBACX,cAAc;aACf;SACF,CAAC,CAAC;QAEH,MAAM,4BAAY,CAAC,GAAG,CAAC;YACrB,QAAQ;YACR,MAAM,EAAE,yBAAa,CAAC,eAAe;YACrC,QAAQ,EAAE,UAAU;YACpB,UAAU,EAAE,OAAO,CAAC,EAAE;YACtB,IAAI,EAAE;gBACJ,YAAY;gBACZ,QAAQ,EAAE,IAAI;gBACd,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM;gBAC9B,WAAW;aACZ;YACD,EAAE,EAAE,KAAK,CAAC,EAAE;SACb,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAChC,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,OAAO,CAAC,QAAgB;QACpC,OAAO,IAAA,iCAAoB,EAAC,QAAQ,CAAC,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,IAAI,CACR,QAAgB,EAChB,KAAK,GAAG,EAAE,EACV,MAAM,GAAG,CAAC;QAEV,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC3C,MAAM,KAAK,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QACnD,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACtC,iBAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBACvB,KAAK;gBACL,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE;gBAC9B,IAAI,EAAE,KAAK;gBACX,IAAI,EAAE,MAAM;aACb,CAAC;YACF,iBAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC;SACjC,CAAC,CAAC;QACH,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;IAC7D,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,QAAgB,EAAE,UAAkB;QACjD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC3C,IAAI,GAAG,GAAG,MAAM,iBAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;YACxC,KAAK,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE;SAC5D,CAAC,CAAC;QACH,IAAI,GAAG;YAAE,OAAO,GAAG,CAAC;QAEpB,oEAAoE;QACpE,qEAAqE;QACrE,gEAAgE;QAChE,MAAM,QAAQ,GAAG,MAAM,iBAAM,CAAC,MAAM,CAAC,UAAU,CAAC;YAC9C,KAAK,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE;YACpB,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;SACvB,CAAC,CAAC;QACH,MAAM,OAAO,GACX,IAAA,gCAAmB,EAAC,QAAQ,CAAC;YAC7B,MAAM,CAAC,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,iBAAK,CAAC,KAAK,CAAC;QAC7D,IAAI,OAAO,EAAE,CAAC;YACZ,GAAG,GAAG,MAAM,iBAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;gBACpC,KAAK,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE;aAC3C,CAAC,CAAC;YACH,IAAI,GAAG;gBAAE,OAAO,GAAG,CAAC;QACtB,CAAC;QAED,MAAM,oCAAgB,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,QAAgB,EAAE,UAAkB;QAClD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QACtD,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAC,QAAgB,EAAE,UAAkB;QAC7D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAEtD,IAAI,GAAG,CAAC,WAAW,KAAK,yBAAa,CAAC,UAAU,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;YACpE,MAAM,QAAQ,GAAG,mBAAI,CAAC,IAAI,CAAC,SAAG,CAAC,UAAU,EAAE,mBAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC;YAC3E,MAAM,MAAM,GAAG,MAAM,kBAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC3C,IAAI,MAAM,GAAG,CAAC,CAAC;YACf,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,CAAE,CAAC;YAChC,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,KAAK,CAAC,CAAC;YACnD,MAAM,IAAI,KAAK,CAAC;YAChB,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,CAAE,CAAC;YACjC,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC;YACrD,MAAM,IAAI,MAAM,CAAC;YACjB,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC3C,OAAO,sCAAiB,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QAC5D,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,iBAAiB,IAAI,CAAC,GAAG,CAAC,SAAS,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC;YAChE,MAAM,oCAAgB,CAAC,QAAQ,CAAC,6BAA6B,CAAC,CAAC;QACjE,CAAC;QAED,OAAO,sCAAiB,CAAC,OAAO,CAAC;YAC/B,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC;YAC9C,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;YAC9B,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC;SACjC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,QAAgB,EAAE,UAAkB,EAAE,EAAW;QAChE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAEtD,MAAM,iBAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;YAC3B,KAAK,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE;YACrB,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE;SAChC,CAAC,CAAC;QAEH,IAAI,GAAG,CAAC,WAAW,KAAK,yBAAa,CAAC,UAAU,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;YACpE,MAAM,QAAQ,GAAG,mBAAI,CAAC,IAAI,CAAC,SAAG,CAAC,UAAU,EAAE,mBAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC;YAC3E,MAAM,kBAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACnD,CAAC;QAED,MAAM,4BAAY,CAAC,GAAG,CAAC;YACrB,QAAQ;YACR,MAAM,EAAE,yBAAa,CAAC,eAAe;YACrC,QAAQ,EAAE,UAAU;YACpB,UAAU,EAAE,UAAU;YACtB,IAAI,EAAE,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE;YACxC,EAAE;SACH,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,oBAAoB,CACxB,QAAgB,EAChB,WAAqB,EACrB,SAAiB;QAEjB,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QACxC,MAAM,kBAAE,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAE/C,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;QACpC,MAAM,GAAG,GAA2B,EAAE,CAAC;QAEvC,KAAK,MAAM,EAAE,IAAI,WAAW,EAAE,CAAC;YAC7B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YAC9C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YAC1D,IAAI,QAAQ,GAAG,IAAA,4BAAgB,EAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YAClD,IAAI,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC5B,MAAM,GAAG,GAAG,mBAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;gBACnC,MAAM,IAAI,GAAG,mBAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;gBAC1C,QAAQ,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,GAAG,EAAE,CAAC;YAC/C,CAAC;YACD,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACxB,MAAM,QAAQ,GAAG,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YAChD,MAAM,kBAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACnD,GAAG,CAAC,IAAI,CAAC;gBACP,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,YAAY,EAAE,GAAG,CAAC,YAAY;gBAC9B,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,IAAI,EAAE,QAAQ;aACf,CAAC,CAAC;QACL,CAAC;QAED,OAAO,GAAG,CAAC;IACb,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,yBAAyB,CAC7B,QAAgB,EAChB,WAAqB,EACrB,QAAgB,EAChB,OAA0D;QAE1D,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;QAEhE,MAAM,KAAK,GAAG,OAAO,EAAE,cAAc;YACnC,CAAC,CAAC,MAAM,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE,WAAW,EAAE,OAAO,CAAC,cAAc,CAAC;YAChF,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,MAAM,GAAG,CAAC,OAAO,EAAE,UAAU,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACnF,MAAM,WAAW,GAAG,CAAC,CAAuB,EAAE,EAAE;YAC9C,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,IAAI,GAAG,mBAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBACnC,OAAO,GAAG,MAAM,IAAI,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAClD,CAAC;YACD,0EAA0E;YAC1E,OAAO,mBAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC,CAAC;QACF,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAEnE,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,IAAI,IAAI,GAAG,CAAC,CAAC;QAEb,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrB,MAAM,IAAI,GAAG,KAAK;iBACf,GAAG,CACF,CAAC,CAAC,EAAE,EAAE,CACJ,KAAK,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,SAAS,aAAa,WAAW,CAAC,CAAC,CAAC,EAAE,CAClF;iBACA,IAAI,CAAC,IAAI,CAAC,CAAC;YACd,MAAM,KAAK,GACT,mEAAmE;gBACnE,6DAA6D,IAAI,MAAM,CAAC;YAC1E,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAClB,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC;QACvB,CAAC;QAED,KAAK,MAAM,EAAE,IAAI,WAAW,EAAE,CAAC;YAC7B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YAC9C,MAAM,SAAS,GAAG,QAAQ,GAAG,IAAI,CAAC;YAClC,IAAI,SAAS,IAAI,CAAC;gBAAE,MAAM;YAE1B,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACjC,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,SAAS,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YACrD,MAAM,MAAM,GAAG,iBAAiB,GAAG,CAAC,YAAY,KAAK,GAAG,CAAC,EAAE,UAAU,QAAQ,EAAE,CAAC;YAEhF,IAAI,QAAgB,CAAC;YAErB,IAAI,IAAA,uBAAW,EAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC9B,QAAQ;oBACN,2BAA2B,GAAG,CAAC,YAAY,UAAU,GAAG,CAAC,QAAQ,IAAI;wBACrE,QAAQ,GAAG,CAAC,SAAS,uBAAuB,GAAG,CAAC,EAAE,YAAY,GAAG,CAAC,cAAc,EAAE;wBAClF,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACpC,KAAK;wBACL,6GAA6G,CAAC;YAClH,CAAC;iBAAM,CAAC;gBACN,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;gBAC1D,QAAQ,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACtD,CAAC;YAED,MAAM,IAAI,GACR,MAAM,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,GAAG,SAAS;gBACzC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;oBACzD,kBAAkB;gBACpB,CAAC,CAAC,QAAQ,CAAC;YAEf,MAAM,KAAK,GAAG,MAAM,GAAG,IAAI,GAAG,IAAI,CAAC;YACnC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAClB,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC;QACvB,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC;IAC9C,CAAC;IAED,4FAA4F;IACpF,KAAK,CAAC,mBAAmB,CAC/B,GAA0F,EAC1F,GAAW;QAEX,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAChD,MAAM,GAAG,GAAG,mBAAI,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,CAAC;QAEzD,IAAI,IAAI,KAAK,iBAAiB,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;YACjD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;YACjD,IAAI,SAAS,IAAI,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC;gBAClC,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,OAAO,CACL,cAAc,GAAG,CAAC,YAAY,KAAK,GAAG,CAAC,SAAS,kBAAkB,GAAG,CAAC,cAAc,IAAI;gBACxF,2EAA2E,CAC5E,CAAC;QACJ,CAAC;QAED,IAAI,IAAA,yBAAa,EAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAClC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC7B,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,OAAO,iBAAiB,GAAG,CAAC,YAAY,KAAK,GAAG,CAAC,SAAS,kBAAkB,GAAG,CAAC,cAAc,GAAG,CAAC;IACpG,CAAC;IAED,mEAAmE;IAC3D,KAAK,CAAC,cAAc,CAAC,GAAW;QACtC,MAAM,KAAK,GAAG,mBAAI,CAAC,IAAI,CAAC,iBAAE,CAAC,MAAM,EAAE,EAAE,gBAAgB,IAAA,wBAAU,GAAE,MAAM,CAAC,CAAC;QACzE,IAAI,CAAC;YACH,MAAM,kBAAE,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAChD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CACpC,WAAW,EACX,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,CAAC,EACpD;gBACE,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;gBAC3B,OAAO,EAAE,MAAM;aAChB,CACF,CAAC;YACF,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YAChE,OAAO,IAAI,IAAI,IAAI,CAAC;QACtB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,eAAM,CAAC,KAAK,CACV,EAAE,GAAG,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EACzD,6BAA6B,CAC9B,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,MAAM,kBAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAEO,QAAQ,CAAC,GAOhB;QACC,OAAO;YACL,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,YAAY,EAAE,GAAG,CAAC,YAAY;YAC9B,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,cAAc,EAAE,GAAG,CAAC,cAAc;YAClC,SAAS,EAAE,GAAG,CAAC,SAAS;SACzB,CAAC;IACJ,CAAC;CACF;AA1YD,0CA0YC;AAEY,QAAA,eAAe,GAAG,IAAI,eAAe,EAAE,CAAC"}

package/dist/services/encryption.service.d.ts

@@ -0,0 +1,8 @@
+import type { EncryptedPayload } from '../entities/encrypted-payload.entity';
+export declare class EncryptionService {
+    encrypt(plaintext: string | Buffer): EncryptedPayload;
+    decrypt(payload: EncryptedPayload): Buffer;
+    decryptToString(payload: EncryptedPayload): string;
+}
+export declare const encryptionService: EncryptionService;
+//# sourceMappingURL=encryption.service.d.ts.map

package/dist/services/encryption.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"encryption.service.d.ts","sourceRoot":"","sources":["../../src/services/encryption.service.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAC;AAM7E,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,gBAAgB;IASrD,OAAO,CAAC,OAAO,EAAE,gBAAgB,GAAG,MAAM;IAU1C,eAAe,CAAC,OAAO,EAAE,gBAAgB,GAAG,MAAM;CAGnD;AAED,eAAO,MAAM,iBAAiB,mBAA0B,CAAC"}

package/dist/services/encryption.service.js

@@ -0,0 +1,34 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.encryptionService = exports.EncryptionService = void 0;
+const node_crypto_1 = require("node:crypto");
+const env_1 = require("../config/env");
+const exception_factory_1 = require("../exceptions/exception.factory");
+const ALGO = 'aes-256-gcm';
+const IV_LENGTH = 12;
+class EncryptionService {
+    encrypt(plaintext) {
+        const data = typeof plaintext === 'string' ? Buffer.from(plaintext, 'utf8') : plaintext;
+        const iv = (0, node_crypto_1.randomBytes)(IV_LENGTH);
+        const cipher = (0, node_crypto_1.createCipheriv)(ALGO, env_1.env.encryptionKey, iv);
+        const ciphertext = Buffer.concat([cipher.update(data), cipher.final()]);
+        const tag = cipher.getAuthTag();
+        return { ciphertext, iv, tag };
+    }
+    decrypt(payload) {
+        try {
+            const decipher = (0, node_crypto_1.createDecipheriv)(ALGO, env_1.env.encryptionKey, payload.iv);
+            decipher.setAuthTag(payload.tag);
+            return Buffer.concat([decipher.update(payload.ciphertext), decipher.final()]);
+        }
+        catch {
+            throw exception_factory_1.ExceptionFactory.internal('Failed to decrypt data');
+        }
+    }
+    decryptToString(payload) {
+        return this.decrypt(payload).toString('utf8');
+    }
+}
+exports.EncryptionService = EncryptionService;
+exports.encryptionService = new EncryptionService();
+//# sourceMappingURL=encryption.service.js.map

package/dist/services/encryption.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"encryption.service.js","sourceRoot":"","sources":["../../src/services/encryption.service.ts"],"names":[],"mappings":";;;AAAA,6CAA4E;AAC5E,uCAAoC;AAEpC,uEAAmE;AAEnE,MAAM,IAAI,GAAG,aAAa,CAAC;AAC3B,MAAM,SAAS,GAAG,EAAE,CAAC;AAErB,MAAa,iBAAiB;IAC5B,OAAO,CAAC,SAA0B;QAChC,MAAM,IAAI,GAAG,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACxF,MAAM,EAAE,GAAG,IAAA,yBAAW,EAAC,SAAS,CAAC,CAAC;QAClC,MAAM,MAAM,GAAG,IAAA,4BAAc,EAAC,IAAI,EAAE,SAAG,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;QAC3D,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QACxE,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QAChC,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC;IACjC,CAAC;IAED,OAAO,CAAC,OAAyB;QAC/B,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAA,8BAAgB,EAAC,IAAI,EAAE,SAAG,CAAC,aAAa,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;YACvE,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACjC,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAChF,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,oCAAgB,CAAC,QAAQ,CAAC,wBAAwB,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IAED,eAAe,CAAC,OAAyB;QACvC,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAChD,CAAC;CACF;AAvBD,8CAuBC;AAEY,QAAA,iBAAiB,GAAG,IAAI,iBAAiB,EAAE,CAAC"}

package/dist/services/engine-session-map.service.d.ts

@@ -0,0 +1,11 @@
+import { type ResolvedEngineSession } from '../utils/engine-session';
+/**
+ * Persist client `session_id` → local engine UUID so we create once (`-s`)
+ * and resume after (`--resume`). Tenant-scoped by API key id.
+ */
+export declare class EngineSessionMapService {
+    resolve(apiKeyId: string, clientSessionId: string): Promise<ResolvedEngineSession>;
+    remember(apiKeyId: string, clientSessionId: string, engineSessionId: string): Promise<void>;
+}
+export declare const engineSessionMapService: EngineSessionMapService;
+//# sourceMappingURL=engine-session-map.service.d.ts.map

package/dist/services/engine-session-map.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine-session-map.service.d.ts","sourceRoot":"","sources":["../../src/services/engine-session-map.service.ts"],"names":[],"mappings":"AAEA,OAAO,EAGL,KAAK,qBAAqB,EAC3B,MAAM,yBAAyB,CAAC;AAEjC;;;GAGG;AACH,qBAAa,uBAAuB;IAC5B,OAAO,CACX,QAAQ,EAAE,MAAM,EAChB,eAAe,EAAE,MAAM,GACtB,OAAO,CAAC,qBAAqB,CAAC;IA+B3B,QAAQ,CACZ,QAAQ,EAAE,MAAM,EAChB,eAAe,EAAE,MAAM,EACvB,eAAe,EAAE,MAAM,GACtB,OAAO,CAAC,IAAI,CAAC;CAgBjB;AAED,eAAO,MAAM,uBAAuB,yBAAgC,CAAC"}

package/dist/services/engine-session-map.service.js

@@ -0,0 +1,59 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.engineSessionMapService = exports.EngineSessionMapService = void 0;
+const database_1 = require("../config/database");
+const id_1 = require("../utils/id");
+const engine_session_1 = require("../utils/engine-session");
+/**
+ * Persist client `session_id` → local engine UUID so we create once (`-s`)
+ * and resume after (`--resume`). Tenant-scoped by API key id.
+ */
+class EngineSessionMapService {
+    async resolve(apiKeyId, clientSessionId) {
+        const raw = clientSessionId.trim().slice(0, 128);
+        if (!raw) {
+            return (0, engine_session_1.resolveEngineSessionBinding)({
+                apiKeyId,
+                clientSessionId: raw,
+            });
+        }
+        const byClient = await database_1.prisma.engineSessionAlias.findUnique({
+            where: {
+                apiKeyId_clientSessionId: { apiKeyId, clientSessionId: raw },
+            },
+        });
+        let knownByEngineId = null;
+        if ((0, engine_session_1.isUuid)(raw)) {
+            const byEngine = await database_1.prisma.engineSessionAlias.findFirst({
+                where: { apiKeyId, engineSessionId: raw },
+            });
+            knownByEngineId = byEngine?.engineSessionId ?? null;
+        }
+        return (0, engine_session_1.resolveEngineSessionBinding)({
+            apiKeyId,
+            clientSessionId: raw,
+            knownEngineSessionId: byClient?.engineSessionId ?? null,
+            knownByEngineId,
+        });
+    }
+    async remember(apiKeyId, clientSessionId, engineSessionId) {
+        const raw = clientSessionId.trim().slice(0, 128);
+        if (!raw || !(0, engine_session_1.isUuid)(engineSessionId))
+            return;
+        await database_1.prisma.engineSessionAlias.upsert({
+            where: {
+                apiKeyId_clientSessionId: { apiKeyId, clientSessionId: raw },
+            },
+            create: {
+                id: (0, id_1.createId)(),
+                apiKeyId,
+                clientSessionId: raw,
+                engineSessionId,
+            },
+            update: { engineSessionId },
+        });
+    }
+}
+exports.EngineSessionMapService = EngineSessionMapService;
+exports.engineSessionMapService = new EngineSessionMapService();
+//# sourceMappingURL=engine-session-map.service.js.map

package/dist/services/engine-session-map.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine-session-map.service.js","sourceRoot":"","sources":["../../src/services/engine-session-map.service.ts"],"names":[],"mappings":";;;AAAA,iDAA4C;AAC5C,oCAAuC;AACvC,4DAIiC;AAEjC;;;GAGG;AACH,MAAa,uBAAuB;IAClC,KAAK,CAAC,OAAO,CACX,QAAgB,EAChB,eAAuB;QAEvB,MAAM,GAAG,GAAG,eAAe,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACjD,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,IAAA,4CAA2B,EAAC;gBACjC,QAAQ;gBACR,eAAe,EAAE,GAAG;aACrB,CAAC,CAAC;QACL,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,iBAAM,CAAC,kBAAkB,CAAC,UAAU,CAAC;YAC1D,KAAK,EAAE;gBACL,wBAAwB,EAAE,EAAE,QAAQ,EAAE,eAAe,EAAE,GAAG,EAAE;aAC7D;SACF,CAAC,CAAC;QAEH,IAAI,eAAe,GAAkB,IAAI,CAAC;QAC1C,IAAI,IAAA,uBAAM,EAAC,GAAG,CAAC,EAAE,CAAC;YAChB,MAAM,QAAQ,GAAG,MAAM,iBAAM,CAAC,kBAAkB,CAAC,SAAS,CAAC;gBACzD,KAAK,EAAE,EAAE,QAAQ,EAAE,eAAe,EAAE,GAAG,EAAE;aAC1C,CAAC,CAAC;YACH,eAAe,GAAG,QAAQ,EAAE,eAAe,IAAI,IAAI,CAAC;QACtD,CAAC;QAED,OAAO,IAAA,4CAA2B,EAAC;YACjC,QAAQ;YACR,eAAe,EAAE,GAAG;YACpB,oBAAoB,EAAE,QAAQ,EAAE,eAAe,IAAI,IAAI;YACvD,eAAe;SAChB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,QAAQ,CACZ,QAAgB,EAChB,eAAuB,EACvB,eAAuB;QAEvB,MAAM,GAAG,GAAG,eAAe,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACjD,IAAI,CAAC,GAAG,IAAI,CAAC,IAAA,uBAAM,EAAC,eAAe,CAAC;YAAE,OAAO;QAC7C,MAAM,iBAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC;YACrC,KAAK,EAAE;gBACL,wBAAwB,EAAE,EAAE,QAAQ,EAAE,eAAe,EAAE,GAAG,EAAE;aAC7D;YACD,MAAM,EAAE;gBACN,EAAE,EAAE,IAAA,aAAQ,GAAE;gBACd,QAAQ;gBACR,eAAe,EAAE,GAAG;gBACpB,eAAe;aAChB;YACD,MAAM,EAAE,EAAE,eAAe,EAAE;SAC5B,CAAC,CAAC;IACL,CAAC;CACF;AAvDD,0DAuDC;AAEY,QAAA,uBAAuB,GAAG,IAAI,uBAAuB,EAAE,CAAC"}

package/dist/services/engine-slot.service.d.ts

@@ -0,0 +1,21 @@
+import type { EngineJsonResult, EngineRunOptions, EngineRunResult, EngineStreamEvent } from '../interfaces';
+/** In-flight chat job slot (global concurrency). */
+export declare class EngineSlotService {
+    private active;
+    get activeCount(): number;
+    get maxConcurrent(): number;
+    tryAcquire(): boolean;
+    release(): void;
+    buildArgs(_options: EngineRunOptions & {
+        promptFile?: string;
+    }): string[];
+    runOnce(_options: EngineRunOptions): Promise<EngineRunResult>;
+    stream(_options: EngineRunOptions): AsyncGenerator<EngineStreamEvent, void, unknown>;
+    isAvailable(): Promise<boolean>;
+    listModelsFromCli(): Promise<string[]>;
+    parseModelsOutput(_stdout: string): string[];
+    parseJsonResult(_stdout: string): EngineJsonResult;
+    sanitizedEnv(): NodeJS.ProcessEnv;
+}
+export declare const engineSlotService: EngineSlotService;
+//# sourceMappingURL=engine-slot.service.d.ts.map

package/dist/services/engine-slot.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine-slot.service.d.ts","sourceRoot":"","sources":["../../src/services/engine-slot.service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,EACf,iBAAiB,EAClB,MAAM,eAAe,CAAC;AAIvB,oDAAoD;AACpD,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,MAAM,CAAK;IAEnB,IAAI,WAAW,IAAI,MAAM,CAExB;IAED,IAAI,aAAa,IAAI,MAAM,CAE1B;IAED,UAAU,IAAI,OAAO;IAQrB,OAAO,IAAI,IAAI;IAIf,SAAS,CAAC,QAAQ,EAAE,gBAAgB,GAAG;QAAE,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,MAAM,EAAE;IAInE,OAAO,CAAC,QAAQ,EAAE,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC;IAI5D,MAAM,CACX,QAAQ,EAAE,gBAAgB,GACzB,cAAc,CAAC,iBAAiB,EAAE,IAAI,EAAE,OAAO,CAAC;IAI7C,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC;IAI/B,iBAAiB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IAI5C,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE;IAI5C,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,gBAAgB;IAIlD,YAAY,IAAI,MAAM,CAAC,UAAU;CAMlC;AAED,eAAO,MAAM,iBAAiB,mBAA0B,CAAC"}

package/dist/services/engine-slot.service.js

@@ -0,0 +1,55 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.engineSlotService = exports.EngineSlotService = void 0;
+const exception_factory_1 = require("../exceptions/exception.factory");
+const env_1 = require("../config/env");
+/** In-flight chat job slot (global concurrency). */
+class EngineSlotService {
+    active = 0;
+    get activeCount() {
+        return this.active;
+    }
+    get maxConcurrent() {
+        return env_1.env.OMNI_MAX_CONCURRENT;
+    }
+    tryAcquire() {
+        if (this.active >= env_1.env.OMNI_MAX_CONCURRENT) {
+            return false;
+        }
+        this.active += 1;
+        return true;
+    }
+    release() {
+        this.active = Math.max(0, this.active - 1);
+    }
+    buildArgs(_options) {
+        throw exception_factory_1.ExceptionFactory.engineUnconfigured();
+    }
+    async runOnce(_options) {
+        throw exception_factory_1.ExceptionFactory.engineUnconfigured();
+    }
+    async *stream(_options) {
+        throw exception_factory_1.ExceptionFactory.engineUnconfigured();
+    }
+    async isAvailable() {
+        return false;
+    }
+    async listModelsFromCli() {
+        return [];
+    }
+    parseModelsOutput(_stdout) {
+        return [];
+    }
+    parseJsonResult(_stdout) {
+        return { text: '' };
+    }
+    sanitizedEnv() {
+        return {
+            PATH: process.env.PATH,
+            HOME: process.env.HOME,
+        };
+    }
+}
+exports.EngineSlotService = EngineSlotService;
+exports.engineSlotService = new EngineSlotService();
+//# sourceMappingURL=engine-slot.service.js.map

package/dist/services/engine-slot.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine-slot.service.js","sourceRoot":"","sources":["../../src/services/engine-slot.service.ts"],"names":[],"mappings":";;;AAMA,uEAAmE;AACnE,uCAAoC;AAEpC,oDAAoD;AACpD,MAAa,iBAAiB;IACpB,MAAM,GAAG,CAAC,CAAC;IAEnB,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,IAAI,aAAa;QACf,OAAO,SAAG,CAAC,mBAAmB,CAAC;IACjC,CAAC;IAED,UAAU;QACR,IAAI,IAAI,CAAC,MAAM,IAAI,SAAG,CAAC,mBAAmB,EAAE,CAAC;YAC3C,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;QACjB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO;QACL,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC7C,CAAC;IAED,SAAS,CAAC,QAAoD;QAC5D,MAAM,oCAAgB,CAAC,kBAAkB,EAAE,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,QAA0B;QACtC,MAAM,oCAAgB,CAAC,kBAAkB,EAAE,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,CAAC,MAAM,CACX,QAA0B;QAE1B,MAAM,oCAAgB,CAAC,kBAAkB,EAAE,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,WAAW;QACf,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,CAAC,iBAAiB;QACrB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,iBAAiB,CAAC,OAAe;QAC/B,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,eAAe,CAAC,OAAe;QAC7B,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IACtB,CAAC;IAED,YAAY;QACV,OAAO;YACL,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI;YACtB,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI;SACvB,CAAC;IACJ,CAAC;CACF;AA3DD,8CA2DC;AAEY,QAAA,iBAAiB,GAAG,IAAI,iBAAiB,EAAE,CAAC"}

package/dist/services/hf/client.d.ts

@@ -0,0 +1,18 @@
+export type HubFile = {
+    path: string;
+    size?: number;
+};
+export declare function encodeRepoId(repoId: string): string;
+export declare function listHubFiles(repoId: string): Promise<HubFile[]>;
+export declare function listRepoQuants(specRaw: string): Promise<string[]>;
+export type PullProgress = {
+    status: 'starting' | 'downloading' | 'done' | 'skipped' | 'error';
+    model: string;
+    file?: string;
+    bytes?: number;
+    total?: number;
+    path?: string;
+    reason?: string;
+};
+export declare function pullModel(specRaw: string, destDir: string, onProgress?: (p: PullProgress) => void): Promise<PullProgress>;
+//# sourceMappingURL=client.d.ts.map

package/dist/services/hf/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../../src/services/hf/client.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,OAAO,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AA+BtD,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAKnD;AAED,wBAAsB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAqBrE;AAED,wBAAsB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAIvE;AAED,MAAM,MAAM,YAAY,GAAG;IACzB,MAAM,EAAE,UAAU,GAAG,aAAa,GAAG,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC;IAClE,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,wBAAsB,SAAS,CAC7B,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,UAAU,CAAC,EAAE,CAAC,CAAC,EAAE,YAAY,KAAK,IAAI,GACrC,OAAO,CAAC,YAAY,CAAC,CA6EvB"}