ysk-omni 1.0.0

package/dist/cli/commands/ddos.js

@@ -0,0 +1,298 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.cmdDdosSummary = cmdDdosSummary;
+exports.cmdDdosPolicyGet = cmdDdosPolicyGet;
+exports.cmdDdosPolicySet = cmdDdosPolicySet;
+exports.cmdDdosPolicyPreset = cmdDdosPolicyPreset;
+exports.cmdDdosPolicyReset = cmdDdosPolicyReset;
+exports.cmdDdosBan = cmdDdosBan;
+exports.cmdDdosUnban = cmdDdosUnban;
+exports.cmdDdosBlacklist = cmdDdosBlacklist;
+const node_crypto_1 = require("node:crypto");
+const constants_1 = require("../../config/constants");
+const ddos_dto_1 = require("../../dto/ddos.dto");
+const runtime_context_1 = require("../lib/runtime-context");
+const print_table_1 = require("../lib/print-table");
+const print_1 = require("../lib/print");
+/** Lazy: needs process.env from initCliRuntime first. */
+async function loadDdosHelpers() {
+    const mod = await Promise.resolve().then(() => __importStar(require('../../services/ddos-policy.service')));
+    return mod;
+}
+async function loadPolicy(databaseUrl) {
+    const { defaultDdosPolicyFromEnv } = await loadDdosHelpers();
+    return (0, runtime_context_1.withPrisma)(databaseUrl, async (prisma) => {
+        const fallback = defaultDdosPolicyFromEnv();
+        const row = await prisma.setting.findUnique({
+            where: { key: constants_1.SETTING_KEYS.DDOS_POLICY },
+        });
+        if (!row?.value)
+            return fallback;
+        try {
+            const parsed = ddos_dto_1.ddosPolicySchema.safeParse({
+                ...fallback,
+                ...JSON.parse(row.value),
+            });
+            return parsed.success ? parsed.data : fallback;
+        }
+        catch {
+            return fallback;
+        }
+    });
+}
+async function savePolicy(databaseUrl, policy) {
+    const next = ddos_dto_1.ddosPolicySchema.parse(policy);
+    await (0, runtime_context_1.withPrisma)(databaseUrl, async (prisma) => {
+        await prisma.setting.upsert({
+            where: { key: constants_1.SETTING_KEYS.DDOS_POLICY },
+            create: { key: constants_1.SETTING_KEYS.DDOS_POLICY, value: JSON.stringify(next) },
+            update: { value: JSON.stringify(next) },
+        });
+    });
+    return next;
+}
+function printPolicy(p) {
+    (0, print_1.info)('DDoS / abuse policy');
+    (0, print_1.info)(`  autoBanEnabled:     ${p.autoBanEnabled}`);
+    (0, print_1.info)(`  rateLimitMax:       ${p.rateLimitMax} / window ${p.rateLimitWindowMs}ms`);
+    (0, print_1.info)(`  rateLimitIpMax:     ${p.rateLimitIpMax}`);
+    (0, print_1.info)(`  chatBurstMax:       ${p.chatBurstMax}`);
+    (0, print_1.info)(`  autoAuth:           ${p.autoAuthEnabled} (thr ${p.failedAuthThreshold})`);
+    (0, print_1.info)(`  autoRate:           ${p.autoRateEnabled} (thr ${p.rateHitThreshold})`);
+    (0, print_1.info)(`  autoConn:           ${p.autoConnEnabled} (max ${p.maxConcurrentPerIp})`);
+    (0, print_1.info)(`  autoVelocity:       ${p.autoVelocityEnabled} (max ${p.velocityMaxRequests})`);
+    (0, print_1.info)(`  escalate:           ${p.escalateEnabled} after ${p.escalateAfterBans}`);
+    (0, print_1.info)(`  whitelist:          ${(p.whitelist || []).join(', ') || '—'}`);
+    (0, print_1.info)(`  proxyIpSource:      ${p.proxyIpSource} hops=${p.proxyTrustHops}`);
+}
+async function cmdDdosSummary(opts) {
+    const rt = (0, runtime_context_1.initCliRuntime)(opts);
+    const policy = await loadPolicy(rt.databaseUrl);
+    const bans = await (0, runtime_context_1.withPrisma)(rt.databaseUrl, async (prisma) => {
+        const now = new Date();
+        return prisma.ipBlacklist.findMany({
+            where: {
+                OR: [{ expiresAt: null }, { expiresAt: { gt: now } }],
+            },
+            orderBy: { createdAt: 'desc' },
+            take: 20,
+        });
+    });
+    if (rt.json) {
+        (0, runtime_context_1.emitJson)({ policy, blacklistCount: bans.length, blacklistSample: bans });
+        return;
+    }
+    printPolicy(policy);
+    (0, print_1.info)('');
+    (0, print_1.info)(`Active blacklist entries: ${bans.length}`);
+    if (bans.length) {
+        (0, print_table_1.printTable)(['ip', 'source', 'reason', 'expires'], bans.slice(0, 10).map((b) => [
+            b.ip,
+            b.source || '—',
+            (b.reason || '—').slice(0, 24),
+            b.expiresAt ? b.expiresAt.toISOString() : 'permanent',
+        ]));
+    }
+}
+async function cmdDdosPolicyGet(opts) {
+    const rt = (0, runtime_context_1.initCliRuntime)(opts);
+    const p = await loadPolicy(rt.databaseUrl);
+    if (rt.json)
+        (0, runtime_context_1.emitJson)(p);
+    else
+        printPolicy(p);
+}
+async function cmdDdosPolicySet(opts) {
+    const rt = (0, runtime_context_1.initCliRuntime)(opts);
+    const cur = await loadPolicy(rt.databaseUrl);
+    const partial = {};
+    try {
+        for (const key of [
+            'autoBanEnabled',
+            'autoAuthEnabled',
+            'autoRateEnabled',
+            'autoConnEnabled',
+            'autoVelocityEnabled',
+            'escalateEnabled',
+        ]) {
+            const flag = opts[key] ?? opts[key.replace('Enabled', '')];
+            // map CLI kebab flags passed as camel after commander
+            void flag;
+        }
+        if (opts.autoBan !== undefined) {
+            partial.autoBanEnabled = (0, runtime_context_1.parseOnOff)(String(opts.autoBan));
+        }
+        if (opts.autoBanEnabled !== undefined) {
+            partial.autoBanEnabled = (0, runtime_context_1.parseOnOff)(String(opts.autoBanEnabled));
+        }
+    }
+    catch (e) {
+        (0, print_1.fail)(e instanceof Error ? e.message : String(e));
+        process.exitCode = 1;
+        return;
+    }
+    const numMap = {
+        rateLimitMax: 'rateLimitMax',
+        rateLimitIpMax: 'rateLimitIpMax',
+        chatBurstMax: 'chatBurstMax',
+        failedAuthThreshold: 'failedAuthThreshold',
+        rateHitThreshold: 'rateHitThreshold',
+        maxConcurrentPerIp: 'maxConcurrentPerIp',
+        velocityMaxRequests: 'velocityMaxRequests',
+        proxyTrustHops: 'proxyTrustHops',
+    };
+    for (const [cliKey, polKey] of Object.entries(numMap)) {
+        const v = opts[cliKey];
+        if (v !== undefined && v !== null && v !== '') {
+            partial[polKey] = Number(v);
+        }
+    }
+    if (opts.proxyIpSource !== undefined) {
+        partial.proxyIpSource = String(opts.proxyIpSource);
+    }
+    if (!Object.keys(partial).length) {
+        (0, print_1.fail)('No fields. Example: ysk-omni ddos policy set --auto-ban on --rate-limit-max 120');
+        process.exitCode = 1;
+        return;
+    }
+    try {
+        const next = await savePolicy(rt.databaseUrl, {
+            ...cur,
+            ...partial,
+        });
+        (0, print_1.ok)('DDoS policy updated (live within ~2s)');
+        if (rt.json)
+            (0, runtime_context_1.emitJson)(next);
+        else
+            printPolicy(next);
+    }
+    catch (e) {
+        (0, print_1.fail)(e instanceof Error ? e.message : String(e));
+        process.exitCode = 1;
+    }
+}
+async function cmdDdosPolicyPreset(opts) {
+    const rt = (0, runtime_context_1.initCliRuntime)(opts);
+    const name = String(opts.name || '').toLowerCase();
+    if (name !== 'relaxed' && name !== 'balanced' && name !== 'strict') {
+        (0, print_1.fail)('Preset must be relaxed | balanced | strict');
+        process.exitCode = 1;
+        return;
+    }
+    const { ddosPreset } = await loadDdosHelpers();
+    const next = await savePolicy(rt.databaseUrl, ddosPreset(name));
+    (0, print_1.ok)(`Applied DDoS preset: ${name}`);
+    if (rt.json)
+        (0, runtime_context_1.emitJson)(next);
+    else
+        printPolicy(next);
+}
+async function cmdDdosPolicyReset(opts) {
+    const rt = (0, runtime_context_1.initCliRuntime)(opts);
+    const { defaultDdosPolicyFromEnv } = await loadDdosHelpers();
+    const next = await savePolicy(rt.databaseUrl, defaultDdosPolicyFromEnv());
+    (0, print_1.ok)('DDoS policy reset to env defaults');
+    if (rt.json)
+        (0, runtime_context_1.emitJson)(next);
+    else
+        printPolicy(next);
+}
+async function cmdDdosBan(opts) {
+    const rt = (0, runtime_context_1.initCliRuntime)(opts);
+    const ip = String(opts.ip || '').trim();
+    if (!ip) {
+        (0, print_1.fail)('IP required');
+        process.exitCode = 1;
+        return;
+    }
+    const expiresAt = opts.ttl != null && opts.ttl > 0
+        ? new Date(Date.now() + opts.ttl * 1000)
+        : null;
+    await (0, runtime_context_1.withPrisma)(rt.databaseUrl, async (prisma) => {
+        await prisma.ipBlacklist.upsert({
+            where: { ip },
+            create: {
+                id: (0, node_crypto_1.randomUUID)(),
+                ip,
+                reason: opts.reason ?? 'manual CLI ban',
+                source: 'manual',
+                expiresAt,
+                createdBy: 'cli',
+            },
+            update: {
+                reason: opts.reason ?? 'manual CLI ban',
+                source: 'manual',
+                expiresAt,
+                createdBy: 'cli',
+            },
+        });
+    });
+    (0, print_1.ok)(`Banned ${ip}${expiresAt ? ` until ${expiresAt.toISOString()}` : ' (permanent)'} — live within ~5s`);
+}
+async function cmdDdosUnban(opts) {
+    const rt = (0, runtime_context_1.initCliRuntime)(opts);
+    const ip = String(opts.ip || '').trim();
+    const r = await (0, runtime_context_1.withPrisma)(rt.databaseUrl, (prisma) => prisma.ipBlacklist.deleteMany({ where: { ip } }));
+    if (r.count === 0) {
+        (0, print_1.fail)(`No blacklist entry for ${ip}`);
+        process.exitCode = 1;
+        return;
+    }
+    (0, print_1.ok)(`Unbanned ${ip} — live within ~5s`);
+}
+async function cmdDdosBlacklist(opts) {
+    const rt = (0, runtime_context_1.initCliRuntime)(opts);
+    const now = new Date();
+    const rows = await (0, runtime_context_1.withPrisma)(rt.databaseUrl, (prisma) => prisma.ipBlacklist.findMany({
+        where: {
+            OR: [{ expiresAt: null }, { expiresAt: { gt: now } }],
+        },
+        orderBy: { createdAt: 'desc' },
+    }));
+    if (rt.json) {
+        (0, runtime_context_1.emitJson)({ total: rows.length, data: rows });
+        return;
+    }
+    (0, print_1.info)(`Blacklist: ${rows.length}`);
+    (0, print_table_1.printTable)(['ip', 'source', 'reason', 'expires', 'created'], rows.map((b) => [
+        b.ip,
+        b.source || '—',
+        (b.reason || '—').slice(0, 28),
+        b.expiresAt ? b.expiresAt.toISOString().slice(0, 19) : 'permanent',
+        b.createdAt.toISOString().slice(0, 19),
+    ]));
+}
+//# sourceMappingURL=ddos.js.map

package/dist/cli/commands/ddos.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ddos.js","sourceRoot":"","sources":["../../../src/cli/commands/ddos.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA0EA,wCA+BC;AAED,4CAKC;AAED,4CAqEC;AAED,kDAeC;AAED,gDAOC;AAED,gCAoCC;AAED,oCAcC;AAED,4CA0BC;AAnSD,6CAAyC;AACzC,sDAAsD;AACtD,iDAG4B;AAC5B,4DAMgC;AAChC,oDAAgD;AAChD,wCAA8C;AAI9C,yDAAyD;AACzD,KAAK,UAAU,eAAe;IAC5B,MAAM,GAAG,GAAG,wDAAa,oCAAoC,GAAC,CAAC;IAC/D,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,WAAmB;IAC3C,MAAM,EAAE,wBAAwB,EAAE,GAAG,MAAM,eAAe,EAAE,CAAC;IAC7D,OAAO,IAAA,4BAAU,EAAC,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;QAC9C,MAAM,QAAQ,GAAG,wBAAwB,EAAE,CAAC;QAC5C,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC;YAC1C,KAAK,EAAE,EAAE,GAAG,EAAE,wBAAY,CAAC,WAAW,EAAE;SACzC,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,EAAE,KAAK;YAAE,OAAO,QAAQ,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,2BAAgB,CAAC,SAAS,CAAC;gBACxC,GAAG,QAAQ;gBACX,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC;aACzB,CAAC,CAAC;YACH,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC;QACjD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,QAAQ,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,WAAmB,EACnB,MAAkB;IAElB,MAAM,IAAI,GAAG,2BAAgB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5C,MAAM,IAAA,4BAAU,EAAC,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;QAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;YAC1B,KAAK,EAAE,EAAE,GAAG,EAAE,wBAAY,CAAC,WAAW,EAAE;YACxC,MAAM,EAAE,EAAE,GAAG,EAAE,wBAAY,CAAC,WAAW,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE;YACtE,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE;SACxC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,WAAW,CAAC,CAAa;IAChC,IAAA,YAAI,EAAC,qBAAqB,CAAC,CAAC;IAC5B,IAAA,YAAI,EAAC,yBAAyB,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC;IAClD,IAAA,YAAI,EAAC,yBAAyB,CAAC,CAAC,YAAY,aAAa,CAAC,CAAC,iBAAiB,IAAI,CAAC,CAAC;IAClF,IAAA,YAAI,EAAC,yBAAyB,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC;IAClD,IAAA,YAAI,EAAC,yBAAyB,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC;IAChD,IAAA,YAAI,EAAC,yBAAyB,CAAC,CAAC,eAAe,SAAS,CAAC,CAAC,mBAAmB,GAAG,CAAC,CAAC;IAClF,IAAA,YAAI,EAAC,yBAAyB,CAAC,CAAC,eAAe,SAAS,CAAC,CAAC,gBAAgB,GAAG,CAAC,CAAC;IAC/E,IAAA,YAAI,EAAC,yBAAyB,CAAC,CAAC,eAAe,SAAS,CAAC,CAAC,kBAAkB,GAAG,CAAC,CAAC;IACjF,IAAA,YAAI,EAAC,yBAAyB,CAAC,CAAC,mBAAmB,SAAS,CAAC,CAAC,mBAAmB,GAAG,CAAC,CAAC;IACtF,IAAA,YAAI,EAAC,yBAAyB,CAAC,CAAC,eAAe,UAAU,CAAC,CAAC,iBAAiB,EAAE,CAAC,CAAC;IAChF,IAAA,YAAI,EAAC,yBAAyB,CAAC,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;IACvE,IAAA,YAAI,EAAC,yBAAyB,CAAC,CAAC,aAAa,SAAS,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC;AAC5E,CAAC;AAEM,KAAK,UAAU,cAAc,CAAC,IAAa;IAChD,MAAM,EAAE,GAAG,IAAA,gCAAc,EAAC,IAAI,CAAC,CAAC;IAChC,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG,MAAM,IAAA,4BAAU,EAAC,EAAE,CAAC,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;QAC7D,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,OAAO,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC;YACjC,KAAK,EAAE;gBACL,EAAE,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC;aACtD;YACD,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE;YAC9B,IAAI,EAAE,EAAE;SACT,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;QACZ,IAAA,0BAAQ,EAAC,EAAE,MAAM,EAAE,cAAc,EAAE,IAAI,CAAC,MAAM,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC;QACzE,OAAO;IACT,CAAC;IACD,WAAW,CAAC,MAAM,CAAC,CAAC;IACpB,IAAA,YAAI,EAAC,EAAE,CAAC,CAAC;IACT,IAAA,YAAI,EAAC,6BAA6B,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACjD,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,IAAA,wBAAU,EACR,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC,EACrC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YAC3B,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,MAAM,IAAI,GAAG;YACf,CAAC,CAAC,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;YAC9B,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,WAAW;SACtD,CAAC,CACH,CAAC;IACJ,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,gBAAgB,CAAC,IAAa;IAClD,MAAM,EAAE,GAAG,IAAA,gCAAc,EAAC,IAAI,CAAC,CAAC;IAChC,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC;IAC3C,IAAI,EAAE,CAAC,IAAI;QAAE,IAAA,0BAAQ,EAAC,CAAC,CAAC,CAAC;;QACpB,WAAW,CAAC,CAAC,CAAC,CAAC;AACtB,CAAC;AAEM,KAAK,UAAU,gBAAgB,CACpC,IAAuC;IAEvC,MAAM,EAAE,GAAG,IAAA,gCAAc,EAAC,IAAI,CAAC,CAAC;IAChC,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC;IAC7C,MAAM,OAAO,GAA4B,EAAE,CAAC;IAC5C,IAAI,CAAC;QACH,KAAK,MAAM,GAAG,IAAI;YAChB,gBAAgB;YAChB,iBAAiB;YACjB,iBAAiB;YACjB,iBAAiB;YACjB,qBAAqB;YACrB,iBAAiB;SACT,EAAE,CAAC;YACX,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC;YAC3D,sDAAsD;YACtD,KAAK,IAAI,CAAC;QACZ,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAC/B,OAAO,CAAC,cAAc,GAAG,IAAA,4BAAU,EAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;QAC5D,CAAC;QACD,IAAI,IAAI,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;YACtC,OAAO,CAAC,cAAc,GAAG,IAAA,4BAAU,EAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAA,YAAI,EAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QACjD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAA2B;QACrC,YAAY,EAAE,cAAc;QAC5B,cAAc,EAAE,gBAAgB;QAChC,YAAY,EAAE,cAAc;QAC5B,mBAAmB,EAAE,qBAAqB;QAC1C,gBAAgB,EAAE,kBAAkB;QACpC,kBAAkB,EAAE,oBAAoB;QACxC,mBAAmB,EAAE,qBAAqB;QAC1C,cAAc,EAAE,gBAAgB;KACjC,CAAC;IACF,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACtD,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;QACvB,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;YAC9C,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IACD,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QACrC,OAAO,CAAC,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACrD,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC;QACjC,IAAA,YAAI,EACF,iFAAiF,CAClF,CAAC;QACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IACD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,EAAE,CAAC,WAAW,EAAE;YAC5C,GAAG,GAAG;YACN,GAAG,OAAO;SACG,CAAC,CAAC;QACjB,IAAA,UAAE,EAAC,uCAAuC,CAAC,CAAC;QAC5C,IAAI,EAAE,CAAC,IAAI;YAAE,IAAA,0BAAQ,EAAC,IAAI,CAAC,CAAC;;YACvB,WAAW,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAA,YAAI,EAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QACjD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,mBAAmB,CACvC,IAAgC;IAEhC,MAAM,EAAE,GAAG,IAAA,gCAAc,EAAC,IAAI,CAAC,CAAC;IAChC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACnD,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,UAAU,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACnE,IAAA,YAAI,EAAC,4CAA4C,CAAC,CAAC;QACnD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IACD,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,eAAe,EAAE,CAAC;IAC/C,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,EAAE,CAAC,WAAW,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;IAChE,IAAA,UAAE,EAAC,wBAAwB,IAAI,EAAE,CAAC,CAAC;IACnC,IAAI,EAAE,CAAC,IAAI;QAAE,IAAA,0BAAQ,EAAC,IAAI,CAAC,CAAC;;QACvB,WAAW,CAAC,IAAI,CAAC,CAAC;AACzB,CAAC;AAEM,KAAK,UAAU,kBAAkB,CAAC,IAAa;IACpD,MAAM,EAAE,GAAG,IAAA,gCAAc,EAAC,IAAI,CAAC,CAAC;IAChC,MAAM,EAAE,wBAAwB,EAAE,GAAG,MAAM,eAAe,EAAE,CAAC;IAC7D,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,EAAE,CAAC,WAAW,EAAE,wBAAwB,EAAE,CAAC,CAAC;IAC1E,IAAA,UAAE,EAAC,mCAAmC,CAAC,CAAC;IACxC,IAAI,EAAE,CAAC,IAAI;QAAE,IAAA,0BAAQ,EAAC,IAAI,CAAC,CAAC;;QACvB,WAAW,CAAC,IAAI,CAAC,CAAC;AACzB,CAAC;AAEM,KAAK,UAAU,UAAU,CAC9B,IAA6D;IAE7D,MAAM,EAAE,GAAG,IAAA,gCAAc,EAAC,IAAI,CAAC,CAAC;IAChC,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACxC,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,IAAA,YAAI,EAAC,aAAa,CAAC,CAAC;QACpB,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IACD,MAAM,SAAS,GACb,IAAI,CAAC,GAAG,IAAI,IAAI,IAAI,IAAI,CAAC,GAAG,GAAG,CAAC;QAC9B,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC;QACxC,CAAC,CAAC,IAAI,CAAC;IACX,MAAM,IAAA,4BAAU,EAAC,EAAE,CAAC,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;QAChD,MAAM,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC;YAC9B,KAAK,EAAE,EAAE,EAAE,EAAE;YACb,MAAM,EAAE;gBACN,EAAE,EAAE,IAAA,wBAAU,GAAE;gBAChB,EAAE;gBACF,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,gBAAgB;gBACvC,MAAM,EAAE,QAAQ;gBAChB,SAAS;gBACT,SAAS,EAAE,KAAK;aACjB;YACD,MAAM,EAAE;gBACN,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,gBAAgB;gBACvC,MAAM,EAAE,QAAQ;gBAChB,SAAS;gBACT,SAAS,EAAE,KAAK;aACjB;SACF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,IAAA,UAAE,EACA,UAAU,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC,UAAU,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,oBAAoB,CACpG,CAAC;AACJ,CAAC;AAEM,KAAK,UAAU,YAAY,CAChC,IAA8B;IAE9B,MAAM,EAAE,GAAG,IAAA,gCAAc,EAAC,IAAI,CAAC,CAAC;IAChC,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACxC,MAAM,CAAC,GAAG,MAAM,IAAA,4BAAU,EAAC,EAAE,CAAC,WAAW,EAAE,CAAC,MAAM,EAAE,EAAE,CACpD,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CACjD,CAAC;IACF,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC,EAAE,CAAC;QAClB,IAAA,YAAI,EAAC,0BAA0B,EAAE,EAAE,CAAC,CAAC;QACrC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IACD,IAAA,UAAE,EAAC,YAAY,EAAE,oBAAoB,CAAC,CAAC;AACzC,CAAC;AAEM,KAAK,UAAU,gBAAgB,CAAC,IAAa;IAClD,MAAM,EAAE,GAAG,IAAA,gCAAc,EAAC,IAAI,CAAC,CAAC;IAChC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,IAAI,GAAG,MAAM,IAAA,4BAAU,EAAC,EAAE,CAAC,WAAW,EAAE,CAAC,MAAM,EAAE,EAAE,CACvD,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC;QAC1B,KAAK,EAAE;YACL,EAAE,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC;SACtD;QACD,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE;KAC/B,CAAC,CACH,CAAC;IACF,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;QACZ,IAAA,0BAAQ,EAAC,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7C,OAAO;IACT,CAAC;IACD,IAAA,YAAI,EAAC,cAAc,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAClC,IAAA,wBAAU,EACR,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC,EAChD,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACd,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,MAAM,IAAI,GAAG;QACf,CAAC,CAAC,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;QAC9B,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW;QAClE,CAAC,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;KACvC,CAAC,CACH,CAAC;AACJ,CAAC"}

package/dist/cli/commands/docs.d.ts

@@ -0,0 +1,13 @@
+import { type CliOpts } from '../lib/runtime-context';
+export declare function cmdDocsList(opts: CliOpts & {
+    limit?: number;
+    offset?: number;
+}): Promise<void>;
+export declare function cmdDocsShow(opts: CliOpts & {
+    id: string;
+}): Promise<void>;
+export declare function cmdDocsDelete(opts: CliOpts & {
+    id: string;
+    yes?: boolean;
+}): Promise<void>;
+//# sourceMappingURL=docs.d.ts.map

package/dist/cli/commands/docs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"docs.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/docs.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,KAAK,OAAO,EACb,MAAM,wBAAwB,CAAC;AAIhC,wBAAsB,WAAW,CAC/B,IAAI,EAAE,OAAO,GAAG;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAClD,OAAO,CAAC,IAAI,CAAC,CA0Cf;AAED,wBAAsB,WAAW,CAC/B,IAAI,EAAE,OAAO,GAAG;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,GAC7B,OAAO,CAAC,IAAI,CAAC,CA6Bf;AAED,wBAAsB,aAAa,CACjC,IAAI,EAAE,OAAO,GAAG;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,OAAO,CAAA;CAAE,GAC5C,OAAO,CAAC,IAAI,CAAC,CAwBf"}

package/dist/cli/commands/docs.js

@@ -0,0 +1,104 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.cmdDocsList = cmdDocsList;
+exports.cmdDocsShow = cmdDocsShow;
+exports.cmdDocsDelete = cmdDocsDelete;
+const runtime_context_1 = require("../lib/runtime-context");
+const print_table_1 = require("../lib/print-table");
+const print_1 = require("../lib/print");
+async function cmdDocsList(opts) {
+    const rt = (0, runtime_context_1.initCliRuntime)(opts);
+    const limit = Math.min(Math.max(opts.limit ?? 20, 1), 200);
+    const offset = Math.max(opts.offset ?? 0, 0);
+    const { rows, total } = await (0, runtime_context_1.withPrisma)(rt.databaseUrl, async (prisma) => {
+        const where = { deletedAt: null };
+        const [rows, total] = await Promise.all([
+            prisma.document.findMany({
+                where,
+                orderBy: { createdAt: 'desc' },
+                take: limit,
+                skip: offset,
+                select: {
+                    id: true,
+                    originalName: true,
+                    mimeType: true,
+                    sizeBytes: true,
+                    storageType: true,
+                    apiKeyId: true,
+                    createdAt: true,
+                },
+            }),
+            prisma.document.count({ where }),
+        ]);
+        return { rows, total };
+    });
+    if (rt.json) {
+        (0, runtime_context_1.emitJson)({ total, limit, offset, data: rows });
+        return;
+    }
+    (0, print_1.info)(`Documents: ${total}`);
+    (0, print_table_1.printTable)(['id', 'name', 'mime', 'size', 'storage', 'created'], rows.map((d) => [
+        d.id.slice(0, 8),
+        d.originalName.slice(0, 32),
+        d.mimeType.slice(0, 20),
+        d.sizeBytes,
+        d.storageType,
+        d.createdAt.toISOString().slice(0, 19),
+    ]));
+}
+async function cmdDocsShow(opts) {
+    const rt = (0, runtime_context_1.initCliRuntime)(opts);
+    const doc = await (0, runtime_context_1.withPrisma)(rt.databaseUrl, (prisma) => prisma.document.findFirst({
+        where: { id: opts.id, deletedAt: null },
+        select: {
+            id: true,
+            originalName: true,
+            mimeType: true,
+            sizeBytes: true,
+            storageType: true,
+            checksumSha256: true,
+            apiKeyId: true,
+            createdAt: true,
+        },
+    }));
+    if (!doc) {
+        (0, print_1.fail)(`Document not found: ${opts.id}`);
+        process.exitCode = 1;
+        return;
+    }
+    if (rt.json)
+        (0, runtime_context_1.emitJson)(doc);
+    else {
+        (0, print_1.info)(`Document ${doc.id}`);
+        for (const [k, v] of Object.entries(doc)) {
+            (0, print_1.info)(`  ${k}: ${v instanceof Date ? v.toISOString() : v}`);
+        }
+    }
+}
+async function cmdDocsDelete(opts) {
+    const rt = (0, runtime_context_1.initCliRuntime)(opts);
+    if (!opts.yes) {
+        (0, print_1.fail)('Refusing to delete without --yes');
+        process.exitCode = 1;
+        return;
+    }
+    const n = await (0, runtime_context_1.withPrisma)(rt.databaseUrl, async (prisma) => {
+        const doc = await prisma.document.findFirst({
+            where: { id: opts.id, deletedAt: null },
+        });
+        if (!doc)
+            return 0;
+        await prisma.document.update({
+            where: { id: opts.id },
+            data: { deletedAt: new Date() },
+        });
+        return 1;
+    });
+    if (!n) {
+        (0, print_1.fail)(`Document not found: ${opts.id}`);
+        process.exitCode = 1;
+        return;
+    }
+    (0, print_1.ok)(`Soft-deleted document ${opts.id}`);
+}
+//# sourceMappingURL=docs.js.map

package/dist/cli/commands/docs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"docs.js","sourceRoot":"","sources":["../../../src/cli/commands/docs.ts"],"names":[],"mappings":";;AASA,kCA4CC;AAED,kCA+BC;AAED,sCA0BC;AAlHD,4DAKgC;AAChC,oDAAgD;AAChD,wCAA8C;AAEvC,KAAK,UAAU,WAAW,CAC/B,IAAmD;IAEnD,MAAM,EAAE,GAAG,IAAA,gCAAc,EAAC,IAAI,CAAC,CAAC;IAChC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7C,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAA,4BAAU,EAAC,EAAE,CAAC,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;QACxE,MAAM,KAAK,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QAClC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACtC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBACvB,KAAK;gBACL,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE;gBAC9B,IAAI,EAAE,KAAK;gBACX,IAAI,EAAE,MAAM;gBACZ,MAAM,EAAE;oBACN,EAAE,EAAE,IAAI;oBACR,YAAY,EAAE,IAAI;oBAClB,QAAQ,EAAE,IAAI;oBACd,SAAS,EAAE,IAAI;oBACf,WAAW,EAAE,IAAI;oBACjB,QAAQ,EAAE,IAAI;oBACd,SAAS,EAAE,IAAI;iBAChB;aACF,CAAC;YACF,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC;SACjC,CAAC,CAAC;QACH,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACzB,CAAC,CAAC,CAAC;IACH,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;QACZ,IAAA,0BAAQ,EAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/C,OAAO;IACT,CAAC;IACD,IAAA,YAAI,EAAC,cAAc,KAAK,EAAE,CAAC,CAAC;IAC5B,IAAA,wBAAU,EACR,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,CAAC,EACpD,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACd,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;QAChB,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;QAC3B,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;QACvB,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,WAAW;QACb,CAAC,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;KACvC,CAAC,CACH,CAAC;AACJ,CAAC;AAEM,KAAK,UAAU,WAAW,CAC/B,IAA8B;IAE9B,MAAM,EAAE,GAAG,IAAA,gCAAc,EAAC,IAAI,CAAC,CAAC;IAChC,MAAM,GAAG,GAAG,MAAM,IAAA,4BAAU,EAAC,EAAE,CAAC,WAAW,EAAE,CAAC,MAAM,EAAE,EAAE,CACtD,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;QACxB,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE;QACvC,MAAM,EAAE;YACN,EAAE,EAAE,IAAI;YACR,YAAY,EAAE,IAAI;YAClB,QAAQ,EAAE,IAAI;YACd,SAAS,EAAE,IAAI;YACf,WAAW,EAAE,IAAI;YACjB,cAAc,EAAE,IAAI;YACpB,QAAQ,EAAE,IAAI;YACd,SAAS,EAAE,IAAI;SAChB;KACF,CAAC,CACH,CAAC;IACF,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,IAAA,YAAI,EAAC,uBAAuB,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QACvC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IACD,IAAI,EAAE,CAAC,IAAI;QAAE,IAAA,0BAAQ,EAAC,GAAG,CAAC,CAAC;SACtB,CAAC;QACJ,IAAA,YAAI,EAAC,YAAY,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;QAC3B,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACzC,IAAA,YAAI,EAAC,KAAK,CAAC,KAAK,CAAC,YAAY,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,aAAa,CACjC,IAA6C;IAE7C,MAAM,EAAE,GAAG,IAAA,gCAAc,EAAC,IAAI,CAAC,CAAC;IAChC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QACd,IAAA,YAAI,EAAC,kCAAkC,CAAC,CAAC;QACzC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IACD,MAAM,CAAC,GAAG,MAAM,IAAA,4BAAU,EAAC,EAAE,CAAC,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;QAC1D,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;YAC1C,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE;SACxC,CAAC,CAAC;QACH,IAAI,CAAC,GAAG;YAAE,OAAO,CAAC,CAAC;QACnB,MAAM,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;YAC3B,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE;YACtB,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE;SAChC,CAAC,CAAC;QACH,OAAO,CAAC,CAAC;IACX,CAAC,CAAC,CAAC;IACH,IAAI,CAAC,CAAC,EAAE,CAAC;QACP,IAAA,YAAI,EAAC,uBAAuB,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QACvC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IACD,IAAA,UAAE,EAAC,yBAAyB,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;AACzC,CAAC"}

package/dist/cli/commands/doctor.d.ts

@@ -0,0 +1,6 @@
+export declare function cmdDoctor(opts: {
+    home?: string;
+    forceHome?: boolean;
+    port?: number;
+}): Promise<void>;
+//# sourceMappingURL=doctor.d.ts.map

package/dist/cli/commands/doctor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/doctor.ts"],"names":[],"mappings":"AAYA,wBAAsB,SAAS,CAAC,IAAI,EAAE;IACpC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,GAAG,OAAO,CAAC,IAAI,CAAC,CAmLhB"}

package/dist/cli/commands/doctor.js

@@ -0,0 +1,207 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.cmdDoctor = cmdDoctor;
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_path_1 = __importDefault(require("node:path"));
+const node_child_process_1 = require("node:child_process");
+const paths_1 = require("../lib/paths");
+const env_file_1 = require("../lib/env-file");
+const process_mgr_1 = require("../lib/process-mgr");
+const runner_info_1 = require("../lib/runner-info");
+const print_1 = require("../lib/print");
+async function cmdDoctor(opts) {
+    let issues = 0;
+    const paths = (0, paths_1.resolveRuntimePaths)({
+        home: opts.home,
+        forceHome: opts.forceHome ?? Boolean(opts.home),
+    });
+    (0, print_1.info)(`Node: ${process.version}`);
+    if (Number(process.versions.node.split('.')[0]) < 20) {
+        (0, print_1.fail)('Node >= 20 required');
+        issues += 1;
+    }
+    else {
+        (0, print_1.ok)('Node version OK');
+    }
+    (0, print_1.info)(`Package root: ${paths.packageRoot}`);
+    (0, print_1.info)(`Home (${paths.mode}): ${paths.home}`);
+    try {
+        const { loadRegistry } = await Promise.resolve().then(() => __importStar(require('../../services/hf/registry')));
+        const { readEnginesState } = await Promise.resolve().then(() => __importStar(require('../../services/runtimes/engine-manager')));
+        const { llamaServerBin } = await Promise.resolve().then(() => __importStar(require('../../services/runtimes/llama-server')));
+        const { describeVllmRuntime } = await Promise.resolve().then(() => __importStar(require('../../services/runtimes/vllm')));
+        const { ECHO_MODEL_ID } = await Promise.resolve().then(() => __importStar(require('../../services/runtimes/echo')));
+        const st = readEnginesState();
+        const local = loadRegistry().models;
+        (0, print_1.ok)(`Echo engine: ${ECHO_MODEL_ID}`);
+        (0, print_1.info)(`llama-server: ${llamaServerBin() || 'not on PATH'}`);
+        (0, print_1.info)(`vllm: ${describeVllmRuntime()}`);
+        if (!st.loaded.length) {
+            (0, print_1.info)('Loaded engines: (none) — start the gateway and Load a model in Admin');
+        }
+        else {
+            (0, print_1.ok)(`Loaded engines: ${st.loaded.map((m) => `${m.id} (${m.kind} :${m.port}, ${m.vramMb} MB)`).join(', ')}`);
+        }
+        (0, print_1.info)(`Estimated VRAM: ${st.usedMb} MB / ${st.budgetMb} MB budget`);
+        if (local.length) {
+            (0, print_1.info)(`Registry: ${local.map((m) => m.id).join(', ')}`);
+        }
+    }
+    catch (err) {
+        (0, print_1.warn)(`Could not read model registry: ${err instanceof Error ? err.message : String(err)}`);
+    }
+    if (!node_fs_1.default.existsSync(paths.envFile)) {
+        // Missing setup is a real issue for production, but report as warn-level
+        // diagnostic (still increments issues so doctor exits non-zero).
+        (0, print_1.fail)(`.env missing — run: ysk-omni setup`);
+        issues += 1;
+    }
+    else {
+        (0, print_1.ok)(`.env found: ${paths.envFile}`);
+        // Backfill missing modern keys (TRUST_PROXY, PROXY_IP_SOURCE, …)
+        (0, env_file_1.ensureEnvFile)(paths, opts.port ?? paths_1.DEFAULT_PORT);
+        const env = (0, env_file_1.readEnvFile)(paths.envFile);
+        if (!env.ENCRYPTION_KEY) {
+            (0, print_1.fail)('ENCRYPTION_KEY missing in .env');
+            issues += 1;
+        }
+        else {
+            (0, print_1.ok)('ENCRYPTION_KEY set');
+        }
+        const port = Number(opts.port || env.PORT || paths_1.DEFAULT_PORT);
+        (0, print_1.info)(`PORT: ${port} (default ${paths_1.DEFAULT_PORT})`);
+        (0, print_1.info)(`NODE_ENV: ${env.NODE_ENV || '(unset → production default)'}`);
+        if (env.NODE_ENV === 'development') {
+            (0, print_1.warn)('NODE_ENV=development (pretty logs). For installed / long-running use: NODE_ENV=production');
+        }
+        else {
+            (0, print_1.ok)('NODE_ENV=production (or production default)');
+        }
+        const cwd = env.OMNI_DEFAULT_CWD || '(storage/workspaces/default)';
+        const allow = env.OMNI_CWD_ALLOWLIST || cwd;
+        (0, print_1.info)(`OMNI_DEFAULT_CWD: ${cwd}`);
+        const envDir = node_path_1.default.dirname(paths.envFile);
+        const roots = String(allow)
+            .split(',')
+            .map((s) => s.trim())
+            .filter(Boolean);
+        const dangerous = [paths.packageRoot, envDir];
+        if (roots.some((r) => dangerous.some((d) => r === d || r.startsWith(`${d}${node_path_1.default.sep}`) || d.startsWith(`${r}${node_path_1.default.sep}`)))) {
+            (0, print_1.warn)('OMNI_CWD_ALLOWLIST / OMNI_DEFAULT_CWD includes the gateway root or .env directory — agent keys can read ENCRYPTION_KEY');
+        }
+        // Proxy / reverse proxy
+        const trust = env.TRUST_PROXY ?? '1';
+        const src = env.PROXY_IP_SOURCE || 'auto';
+        (0, print_1.ok)(`Trust proxy hops: ${trust}  |  PROXY_IP_SOURCE: ${src}`);
+        if (trust === 'false' || trust === '0') {
+            (0, print_1.warn)('TRUST_PROXY=0/false — client IP ignores X-Forwarded-For / CF headers (OK for direct only)');
+        }
+        // Rate-limit related (informational)
+        (0, print_1.info)(`Rate limits: key ${env.RATE_LIMIT_MAX || '120'}/win · IP ${env.RATE_LIMIT_IP_MAX || '60'} · burst ${env.CHAT_BURST_MAX || '20'}`);
+        (0, print_1.info)('  (Admin → DDoS policy overrides these at runtime when saved)');
+        // Dual runner / port conflict
+        const det = (0, runner_info_1.detectRunner)(paths, port);
+        (0, print_1.info)(`Runner: ${det.runner}  preferred: ${det.preferred ?? '—'}`);
+        if (det.runner === 'mixed') {
+            (0, print_1.fail)('Both ysk-omni and PM2 appear online — fix with: ysk-omni stop && ysk-omni start [--pm2]');
+            issues += 1;
+        }
+        else if (det.omniRunning) {
+            (0, print_1.ok)(`ysk-omni running (pid ${det.omniPid})`);
+        }
+        else if (det.pm2.online) {
+            (0, print_1.ok)(`PM2 online (${det.pm2.name}, ${det.pm2.status})`);
+        }
+        else {
+            (0, print_1.info)('Server not running');
+        }
+        const pids = (0, process_mgr_1.findPidsOnPort)(port);
+        if (pids.length > 1) {
+            (0, print_1.warn)(`Multiple listeners on :${port}: ${pids.join(', ')} — EADDRINUSE risk`);
+            issues += 1;
+        }
+        else if (pids.length === 1 && det.runner === 'none') {
+            (0, print_1.warn)(`Port ${port} held by pid ${pids[0]} but runner not detected`);
+        }
+        // Log sizes
+        const logFiles = [
+            node_path_1.default.join(paths.logsDir, 'pm2-error.log'),
+            node_path_1.default.join(paths.logsDir, 'pm2-out.log'),
+            node_path_1.default.join(paths.logsDir, 'ysk-omni.err.log'),
+            node_path_1.default.join(paths.logsDir, 'ysk-omni.out.log'),
+        ];
+        for (const f of logFiles) {
+            try {
+                if (node_fs_1.default.existsSync(f)) {
+                    const kb = Math.round(node_fs_1.default.statSync(f).size / 1024);
+                    if (kb > 5 * 1024) {
+                        (0, print_1.warn)(`Large log ${node_path_1.default.basename(f)}: ${kb} KB (Admin auto-trims >5MB on read; or Clear logs)`);
+                    }
+                }
+            }
+            catch {
+                /* ignore */
+            }
+        }
+    }
+    const serverJs = node_path_1.default.join(paths.packageRoot, 'dist', 'server.js');
+    if (node_fs_1.default.existsSync(serverJs)) {
+        (0, print_1.ok)('dist/server.js built');
+    }
+    else {
+        (0, print_1.warn)('dist/server.js missing — run npm run build');
+        issues += 1;
+    }
+    try {
+        const which = (0, node_child_process_1.execSync)('which pm2', { encoding: 'utf8' }).trim();
+        (0, print_1.ok)(`pm2: ${which}`);
+    }
+    catch {
+        (0, print_1.warn)('pm2 not found — Admin PM2 page needs it. Install: npm install -g pm2');
+        (0, print_1.warn)('Or run: ysk-omni update (may install pm2)');
+    }
+    if (issues === 0) {
+        (0, print_1.ok)('Doctor: all checks passed');
+    }
+    else {
+        (0, print_1.fail)(`Doctor: ${issues} issue(s)`);
+        process.exitCode = 1;
+    }
+}
+//# sourceMappingURL=doctor.js.map