npm - @agent-native/core - Versions diffs - 0.134.1 → 0.135.1 - Mend

@agent-native/core 0.134.1 → 0.135.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (463) hide show

package/dist/notifications/routes.d.ts CHANGED Viewed

@@ -16,19 +16,19 @@ export declare function createNotificationsHandler(): import("h3").EventHandlerW
     error?: undefined;
     ok?: undefined;
 } | {
-    count?: undefined;
     updated: number;
     error?: undefined;
     ok?: undefined;
-} | {
     count?: undefined;
+} | {
     updated?: undefined;
     error: string;
     ok?: undefined;
-} | {
     count?: undefined;
+} | {
     updated?: undefined;
-    error?: undefined;
     ok: boolean;
+    error?: undefined;
+    count?: undefined;
 }>>;
 //# sourceMappingURL=routes.d.ts.map

package/dist/observability/routes.d.ts CHANGED Viewed

@@ -41,16 +41,16 @@ export declare function createObservabilityHandler(): import("h3").EventHandlerW
     thumbsUpRate: number;
     avgEvalScore: number;
 } | {
+    error?: undefined;
     summary: import("./types.js").TraceSummary;
     spans: import("./types.js").TraceSpan[];
     id?: undefined;
-    error?: undefined;
     ok?: undefined;
 } | {
+    error?: undefined;
     summary?: undefined;
     spans?: undefined;
     id: string;
-    error?: undefined;
     ok?: undefined;
 } | {
     summary?: undefined;
@@ -59,10 +59,10 @@ export declare function createObservabilityHandler(): import("h3").EventHandlerW
     error: any;
     ok?: undefined;
 } | {
+    error?: undefined;
     summary?: undefined;
     spans?: undefined;
     id?: undefined;
-    error?: undefined;
     ok: boolean;
 }>>;
 //# sourceMappingURL=routes.d.ts.map

package/dist/org/app-roles-handlers.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"app-roles-handlers.d.ts","sourceRoot":"","sources":["../../src/org/app-roles-handlers.ts"],"names":[],"mappings":"~~AAwDA~~;;;GAGG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;GA4B/B,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,iBAAiB;;;;GAqD5B,CAAC"}
1	+ {"version":3,"file":"app-roles-handlers.d.ts","sourceRoot":"","sources":["../../src/org/app-roles-handlers.ts"],"names":[],"mappings":"AAgDA;;;GAGG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;GA4B/B,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,iBAAiB;;;;GAqD5B,CAAC"}

package/dist/org/app-roles-handlers.js CHANGED Viewed

@@ -1,8 +1,8 @@
 import { defineEventHandler, getRequestURL, createError, } from "h3";
-import { getDbExec } from "../db/client.js";
 import { readBody } from "../server/h3-helpers.js";
 import { getRegisteredAppRoles, listAppMemberRoles, setAppMemberRole, } from "./app-roles.js";
 import { getOrgContext } from "./context.js";
+import { isOrgMember } from "./membership.js";
 import { canManageOrg } from "./permissions.js";
 /**
  * Resolve the descriptor a request is talking about.
@@ -31,13 +31,6 @@ function extractMemberEmail(event) {
     const match = path.match(/^\/([^/]+)\/?$/) ?? path.match(/\/app-roles\/([^/]+)\/?$/);
     return match?.[1] ? decodeURIComponent(match[1]) : undefined;
 }
-async function isOrgMember(orgId, email) {
-    const { rows } = await getDbExec().execute({
-        sql: `SELECT 1 FROM org_members WHERE org_id = ? AND LOWER(email) = ? LIMIT 1`,
-        args: [orgId, email.trim().toLowerCase()],
-    });
-    return rows.length > 0;
-}
 /**
  * GET /_agent-native/org/app-roles?appId=X — the app's vocabulary plus every
  * assignment in the active org, and the caller's own resolved role.

package/dist/org/app-roles-handlers.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"app-roles-handlers.js","sourceRoot":"","sources":["../../src/org/app-roles-handlers.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,aAAa,EACb,WAAW,GAEZ,MAAM,IAAI,CAAC;AAEZ,OAAO,EAAE,~~SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,~~QAAQ,EAAE,MAAM,yBAAyB,CAAC;AACnD,OAAO,EACL,qBAAqB,EACrB,kBAAkB,EAClB,gBAAgB,GAEjB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAEhD;;;;;;;GAOG;AACH,SAAS,iBAAiB,CAAC,KAAoB;IAC7C,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC;QACnB,MAAM,WAAW,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,UAAU,GAAG,qBAAqB,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACvD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,WAAW,CAAC;YAChB,UAAU,EAAE,GAAG;YACf,OAAO,EAAE,gCAAgC,KAAK,GAAG;SAClD,CAAC,CAAC;IACL,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,8EAA8E;AAC9E,SAAS,kBAAkB,CAAC,KAAc;IACxC,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC;IAC3C,MAAM,KAAK,GACT,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;IACzE,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/D,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,KAAa,EAAE,KAAa;IACrD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,SAAS,EAAE,CAAC,OAAO,CAAC;QACzC,GAAG,EAAE,yEAAyE;QAC9E,IAAI,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;KAC1C,CAAC,CAAC;IACH,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;AACzB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,kBAAkB,CACnD,KAAK,EAAE,KAAc,EAAE,EAAE;IACvB,MAAM,GAAG,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IACjC,MAAM,UAAU,GAAG,iBAAiB,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;IACpE,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,CAAC;IAEvC,MAAM,IAAI,GAAG;QACX,KAAK,EAAE,UAAU,CAAC,KAAK;QACvB,KAAK,EAAE,UAAU,CAAC,KAAK;QACvB,WAAW,EAAE,UAAU,CAAC,WAAW,IAAI,IAAI;QAC3C,UAAU,EAAE,UAAU,CAAC,UAAU,IAAI,EAAE;QACvC,SAAS,EAAE,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC;KAClC,CAAC;IACF,IAAI,CAAC,GAAG,CAAC,KAAK;QAAE,OAAO,EAAE,GAAG,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAElE,MAAM,WAAW,GAAG,MAAM,kBAAkB,CAAC,UAAU,CAAC,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;IAC1E,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAC3B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,CACzD,CAAC;IACF,OAAO;QACL,GAAG,IAAI;QACP,WAAW;QACX,wEAAwE;QACxE,4EAA4E;QAC5E,uCAAuC;QACvC,MAAM,EAAE,IAAI,IAAI,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;KACxE,CAAC;AACJ,CAAC,CACF,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,kBAAkB,CAAC,KAAK,EAAE,KAAc,EAAE,EAAE;IAC3E,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;QACf,MAAM,WAAW,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;QACf,MAAM,WAAW,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5B,MAAM,WAAW,CAAC;YAChB,UAAU,EAAE,GAAG;YACf,OAAO,EAAE,kCAAkC;SAC5C,CAAC,CAAC;IACL,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC;IACnC,MAAM,UAAU,GAAG,iBAAiB,CAAC,IAAI,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC;IAE1D,MAAM,KAAK,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IACxC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,WAAW,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC,CAAC;IAC9E,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,EAAE,IAAI,IAAI,IAAI,CAAC;IAChC,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QAC9D,MAAM,WAAW,CAAC;YAChB,UAAU,EAAE,GAAG;YACf,OAAO,EAAE,WAAW,UAAU,CAAC,KAAK,UAAU,IAAI,GAAG;SACtD,CAAC,CAAC;IACL,CAAC;IAED,8EAA8E;IAC9E,6EAA6E;IAC7E,IAAI,CAAC,CAAC,MAAM,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;QAC3C,MAAM,WAAW,CAAC;YAChB,UAAU,EAAE,GAAG;YACf,OAAO,EAAE,mCAAmC;SAC7C,CAAC,CAAC;IACL,CAAC;IAED,MAAM,gBAAgB,CAAC;QACrB,KAAK,EAAE,UAAU,CAAC,KAAK;QACvB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,KAAK;QACL,IAAI,EAAE,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;QACzC,SAAS,EAAE,GAAG,CAAC,KAAK;KACrB,CAAC,CAAC;IAEH,OAAO;QACL,KAAK,EAAE,UAAU,CAAC,KAAK;QACvB,KAAK;QACL,IAAI,EAAE,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;KAC1C,CAAC;AACJ,CAAC,CAAC,CAAC","sourcesContent":["import {\n defineEventHandler,\n getRequestURL,\n createError,\n type H3Event,\n} from \"h3\";\n\nimport { ~~getDbExec } from \"../db/client.js\";\nimport {~~ readBody } from \"../server/h3-helpers.js\";\nimport {\n getRegisteredAppRoles,\n listAppMemberRoles,\n setAppMemberRole,\n type AppRolesDescriptor,\n} from \"./app-roles.js\";\nimport { getOrgContext } from \"./context.js\";\nimport { canManageOrg } from \"./permissions.js\";\n\n/*\n Resolve the descriptor a request is talking about.\n \n The `appId` arrives from the client but can only ever select among\n * descriptors the server already declared through `defineAppRoles`; an\n * unregistered id is a 404, never an implicit new app. That keeps the trusted\n * vocabulary in app source while still letting one workspace host several apps.\n /\nfunction requireDescriptor(appId: string \| null): AppRolesDescriptor<string> {\n if (!appId?.trim()) {\n throw createError({ statusCode: 400, message: \"appId is required\" });\n }\n const descriptor = getRegisteredAppRoles(appId.trim());\n if (!descriptor) {\n throw createError({\n statusCode: 404,\n message: `No app roles registered for \"${appId}\"`,\n });\n }\n return descriptor;\n}\n\n/* Extract the :email tail. The mount prefix is stripped before we see it. /\nfunction extractMemberEmail(event: H3Event): string \| undefined {\n const path = getRequestURL(event).pathname;\n const match =\n path.match(/^\\/([^/]+)\\/?$/) ?? path.match(/\\/app-roles\\/([^/]+)\\/?$/);\n return match?.[1] ? decodeURIComponent(match[1]) : undefined;\n}\n\~~nasync function isOrgMember(orgId: string, email: string): Promise<boolean> {\~~n const { rows } = await getDbExec().execute({\n sql: `SELECT 1 FROM org_members WHERE org_id = ? AND LOWER(email) = ? LIMIT 1`,\n args: [orgId, email.trim().toLowerCase()],\n });\n return rows.length > 0;\n}\n\n/\n GET /_agent-native/org/app-roles?appId=X — the app's vocabulary plus every\n * assignment in the active org, and the caller's own resolved role.\n /\nexport const listAppRolesHandler = defineEventHandler(\n async (event: H3Event) => {\n const url = getRequestURL(event);\n const descriptor = requireDescriptor(url.searchParams.get(\"appId\"));\n const ctx = await getOrgContext(event);\n\n const base = {\n appId: descriptor.appId,\n roles: descriptor.roles,\n defaultRole: descriptor.defaultRole ?? null,\n roleLabels: descriptor.roleLabels ?? {},\n canManage: canManageOrg(ctx.role),\n };\n if (!ctx.orgId) return { ...base, assignments: [], myRole: null };\n\n const assignments = await listAppMemberRoles(descriptor.appId, ctx.orgId);\n const mine = assignments.find(\n (a) => a.email.toLowerCase() === ctx.email.toLowerCase(),\n );\n return {\n ...base,\n assignments,\n // The caller's own role, for progressive disclosure only. Every guarded\n // operation re-resolves this server-side; a client that lies about it gains\n // nothing but a differently-shaped UI.\n myRole: mine && descriptor.roles.includes(mine.role) ? mine.role : null,\n };\n },\n);\n\n/\n PUT /_agent-native/org/app-roles/:email — assign or clear an app role.\n * Body: `{ appId, role }`, where `role: null` clears the assignment.\n \n Org owner/admin only. App roles never confer the right to manage app roles:\n * that would let an app admin escalate inside a team they cannot otherwise\n * administer, and it is the org roster this overlay hangs off.\n */\nexport const setAppRoleHandler = defineEventHandler(async (event: H3Event) => {\n const ctx = await getOrgContext(event);\n if (!ctx.email) {\n throw createError({ statusCode: 401, message: \"Authentication required\" });\n }\n if (!ctx.orgId) {\n throw createError({ statusCode: 400, message: \"No active organization\" });\n }\n if (!canManageOrg(ctx.role)) {\n throw createError({\n statusCode: 403,\n message: \"Organization admin role required\",\n });\n }\n\n const body = await readBody(event);\n const descriptor = requireDescriptor(body?.appId ?? null);\n\n const email = extractMemberEmail(event);\n if (!email) {\n throw createError({ statusCode: 400, message: \"Member email is required\" });\n }\n\n const role = body?.role ?? null;\n if (role !== null && !descriptor.roles.includes(String(role))) {\n throw createError({\n statusCode: 400,\n message: `Unknown ${descriptor.appId} role \"${role}\"`,\n });\n }\n\n // Assignments hang off membership. Writing one for a non-member would leave a\n // row that resolves to nothing and reappears if that person is ever invited.\n if (!(await isOrgMember(ctx.orgId, email))) {\n throw createError({\n statusCode: 404,\n message: \"Not a member of this organization\",\n });\n }\n\n await setAppMemberRole({\n appId: descriptor.appId,\n orgId: ctx.orgId,\n email,\n role: role === null ? null : String(role),\n updatedBy: ctx.email,\n });\n\n return {\n appId: descriptor.appId,\n email,\n role: role === null ? null : String(role),\n };\n});\n"]}
1	+ {"version":3,"file":"app-roles-handlers.js","sourceRoot":"","sources":["../../src/org/app-roles-handlers.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,aAAa,EACb,WAAW,GAEZ,MAAM,IAAI,CAAC;AAEZ,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AACnD,OAAO,EACL,qBAAqB,EACrB,kBAAkB,EAClB,gBAAgB,GAEjB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAEhD;;;;;;;GAOG;AACH,SAAS,iBAAiB,CAAC,KAAoB;IAC7C,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC;QACnB,MAAM,WAAW,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,UAAU,GAAG,qBAAqB,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACvD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,WAAW,CAAC;YAChB,UAAU,EAAE,GAAG;YACf,OAAO,EAAE,gCAAgC,KAAK,GAAG;SAClD,CAAC,CAAC;IACL,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,8EAA8E;AAC9E,SAAS,kBAAkB,CAAC,KAAc;IACxC,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC;IAC3C,MAAM,KAAK,GACT,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;IACzE,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/D,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,kBAAkB,CACnD,KAAK,EAAE,KAAc,EAAE,EAAE;IACvB,MAAM,GAAG,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IACjC,MAAM,UAAU,GAAG,iBAAiB,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;IACpE,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,CAAC;IAEvC,MAAM,IAAI,GAAG;QACX,KAAK,EAAE,UAAU,CAAC,KAAK;QACvB,KAAK,EAAE,UAAU,CAAC,KAAK;QACvB,WAAW,EAAE,UAAU,CAAC,WAAW,IAAI,IAAI;QAC3C,UAAU,EAAE,UAAU,CAAC,UAAU,IAAI,EAAE;QACvC,SAAS,EAAE,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC;KAClC,CAAC;IACF,IAAI,CAAC,GAAG,CAAC,KAAK;QAAE,OAAO,EAAE,GAAG,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAElE,MAAM,WAAW,GAAG,MAAM,kBAAkB,CAAC,UAAU,CAAC,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;IAC1E,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAC3B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,CACzD,CAAC;IACF,OAAO;QACL,GAAG,IAAI;QACP,WAAW;QACX,wEAAwE;QACxE,4EAA4E;QAC5E,uCAAuC;QACvC,MAAM,EAAE,IAAI,IAAI,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;KACxE,CAAC;AACJ,CAAC,CACF,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,kBAAkB,CAAC,KAAK,EAAE,KAAc,EAAE,EAAE;IAC3E,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;QACf,MAAM,WAAW,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;QACf,MAAM,WAAW,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5B,MAAM,WAAW,CAAC;YAChB,UAAU,EAAE,GAAG;YACf,OAAO,EAAE,kCAAkC;SAC5C,CAAC,CAAC;IACL,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC;IACnC,MAAM,UAAU,GAAG,iBAAiB,CAAC,IAAI,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC;IAE1D,MAAM,KAAK,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IACxC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,WAAW,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC,CAAC;IAC9E,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,EAAE,IAAI,IAAI,IAAI,CAAC;IAChC,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QAC9D,MAAM,WAAW,CAAC;YAChB,UAAU,EAAE,GAAG;YACf,OAAO,EAAE,WAAW,UAAU,CAAC,KAAK,UAAU,IAAI,GAAG;SACtD,CAAC,CAAC;IACL,CAAC;IAED,8EAA8E;IAC9E,6EAA6E;IAC7E,IAAI,CAAC,CAAC,MAAM,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;QAC3C,MAAM,WAAW,CAAC;YAChB,UAAU,EAAE,GAAG;YACf,OAAO,EAAE,mCAAmC;SAC7C,CAAC,CAAC;IACL,CAAC;IAED,MAAM,gBAAgB,CAAC;QACrB,KAAK,EAAE,UAAU,CAAC,KAAK;QACvB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,KAAK;QACL,IAAI,EAAE,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;QACzC,SAAS,EAAE,GAAG,CAAC,KAAK;KACrB,CAAC,CAAC;IAEH,OAAO;QACL,KAAK,EAAE,UAAU,CAAC,KAAK;QACvB,KAAK;QACL,IAAI,EAAE,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;KAC1C,CAAC;AACJ,CAAC,CAAC,CAAC","sourcesContent":["import {\n defineEventHandler,\n getRequestURL,\n createError,\n type H3Event,\n} from \"h3\";\n\nimport { readBody } from \"../server/h3-helpers.js\";\nimport {\n getRegisteredAppRoles,\n listAppMemberRoles,\n setAppMemberRole,\n type AppRolesDescriptor,\n} from \"./app-roles.js\";\nimport { getOrgContext } from \"./context.js\";\nimport { isOrgMember } from \"./membership.js\";\nimport { canManageOrg } from \"./permissions.js\";\n\n/*\n Resolve the descriptor a request is talking about.\n \n The `appId` arrives from the client but can only ever select among\n * descriptors the server already declared through `defineAppRoles`; an\n * unregistered id is a 404, never an implicit new app. That keeps the trusted\n * vocabulary in app source while still letting one workspace host several apps.\n /\nfunction requireDescriptor(appId: string \| null): AppRolesDescriptor<string> {\n if (!appId?.trim()) {\n throw createError({ statusCode: 400, message: \"appId is required\" });\n }\n const descriptor = getRegisteredAppRoles(appId.trim());\n if (!descriptor) {\n throw createError({\n statusCode: 404,\n message: `No app roles registered for \"${appId}\"`,\n });\n }\n return descriptor;\n}\n\n/* Extract the :email tail. The mount prefix is stripped before we see it. /\nfunction extractMemberEmail(event: H3Event): string \| undefined {\n const path = getRequestURL(event).pathname;\n const match =\n path.match(/^\\/([^/]+)\\/?$/) ?? path.match(/\\/app-roles\\/([^/]+)\\/?$/);\n return match?.[1] ? decodeURIComponent(match[1]) : undefined;\n}\n\n/\n GET /_agent-native/org/app-roles?appId=X — the app's vocabulary plus every\n * assignment in the active org, and the caller's own resolved role.\n /\nexport const listAppRolesHandler = defineEventHandler(\n async (event: H3Event) => {\n const url = getRequestURL(event);\n const descriptor = requireDescriptor(url.searchParams.get(\"appId\"));\n const ctx = await getOrgContext(event);\n\n const base = {\n appId: descriptor.appId,\n roles: descriptor.roles,\n defaultRole: descriptor.defaultRole ?? null,\n roleLabels: descriptor.roleLabels ?? {},\n canManage: canManageOrg(ctx.role),\n };\n if (!ctx.orgId) return { ...base, assignments: [], myRole: null };\n\n const assignments = await listAppMemberRoles(descriptor.appId, ctx.orgId);\n const mine = assignments.find(\n (a) => a.email.toLowerCase() === ctx.email.toLowerCase(),\n );\n return {\n ...base,\n assignments,\n // The caller's own role, for progressive disclosure only. Every guarded\n // operation re-resolves this server-side; a client that lies about it gains\n // nothing but a differently-shaped UI.\n myRole: mine && descriptor.roles.includes(mine.role) ? mine.role : null,\n };\n },\n);\n\n/\n PUT /_agent-native/org/app-roles/:email — assign or clear an app role.\n * Body: `{ appId, role }`, where `role: null` clears the assignment.\n \n Org owner/admin only. App roles never confer the right to manage app roles:\n * that would let an app admin escalate inside a team they cannot otherwise\n * administer, and it is the org roster this overlay hangs off.\n */\nexport const setAppRoleHandler = defineEventHandler(async (event: H3Event) => {\n const ctx = await getOrgContext(event);\n if (!ctx.email) {\n throw createError({ statusCode: 401, message: \"Authentication required\" });\n }\n if (!ctx.orgId) {\n throw createError({ statusCode: 400, message: \"No active organization\" });\n }\n if (!canManageOrg(ctx.role)) {\n throw createError({\n statusCode: 403,\n message: \"Organization admin role required\",\n });\n }\n\n const body = await readBody(event);\n const descriptor = requireDescriptor(body?.appId ?? null);\n\n const email = extractMemberEmail(event);\n if (!email) {\n throw createError({ statusCode: 400, message: \"Member email is required\" });\n }\n\n const role = body?.role ?? null;\n if (role !== null && !descriptor.roles.includes(String(role))) {\n throw createError({\n statusCode: 400,\n message: `Unknown ${descriptor.appId} role \"${role}\"`,\n });\n }\n\n // Assignments hang off membership. Writing one for a non-member would leave a\n // row that resolves to nothing and reappears if that person is ever invited.\n if (!(await isOrgMember(ctx.orgId, email))) {\n throw createError({\n statusCode: 404,\n message: \"Not a member of this organization\",\n });\n }\n\n await setAppMemberRole({\n appId: descriptor.appId,\n orgId: ctx.orgId,\n email,\n role: role === null ? null : String(role),\n updatedBy: ctx.email,\n });\n\n return {\n appId: descriptor.appId,\n email,\n role: role === null ? null : String(role),\n };\n});\n"]}

package/dist/org/index.d.ts CHANGED Viewed

@@ -14,4 +14,5 @@ export { organizations, orgMembers, orgInvitations, appMemberRoles, } from "./sc
 export { getMyOrgHandler, createOrgHandler, updateOrgHandler, switchOrgHandler, listMembersHandler, removeMemberHandler, changeMemberRoleHandler, listInvitationsHandler, createInvitationHandler, acceptInvitationHandler, setA2ASecretHandler, syncA2ASecretHandler, receiveA2ASecretHandler, } from "./handlers.js";
 export { listAppRolesHandler, setAppRoleHandler, } from "./app-roles-handlers.js";
 export { isFreeEmailProvider } from "./free-email-providers.js";
+export { isOrgMember } from "./membership.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/org/index.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/org/index.ts"],"names":[],"mappings":"AAEA,YAAY,EACV,OAAO,EACP,UAAU,EACV,UAAU,EACV,oBAAoB,EACpB,OAAO,EACP,SAAS,EACT,oBAAoB,GACrB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,mBAAmB,EACnB,YAAY,EACZ,kBAAkB,EAClB,cAAc,EACd,WAAW,GACZ,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,aAAa,EACb,YAAY,EACZ,eAAe,EACf,oBAAoB,EACpB,kBAAkB,EAClB,oBAAoB,EACpB,kBAAkB,GACnB,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,sBAAsB,EACtB,yBAAyB,GAC1B,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,gCAAgC,EAAE,MAAM,qBAAqB,CAAC;AACvE,YAAY,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAE/D,OAAO,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AACnE,YAAY,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAElE,OAAO,EACL,cAAc,EACd,qBAAqB,EACrB,sBAAsB,EACtB,kBAAkB,EAClB,cAAc,EACd,gBAAgB,GACjB,MAAM,gBAAgB,CAAC;AACxB,YAAY,EACV,QAAQ,EACR,kBAAkB,EAClB,aAAa,EACb,aAAa,EACb,gBAAgB,GACjB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEjD,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAIhE,OAAO,EACL,aAAa,EACb,UAAU,EACV,cAAc,EACd,cAAc,GACf,MAAM,aAAa,CAAC;AAIrB,OAAO,EACL,eAAe,EACf,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EAChB,kBAAkB,EAClB,mBAAmB,EACnB,uBAAuB,EACvB,sBAAsB,EACtB,uBAAuB,EACvB,uBAAuB,EACvB,mBAAmB,EACnB,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,mBAAmB,EACnB,iBAAiB,GAClB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC"}
1	+ {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/org/index.ts"],"names":[],"mappings":"AAEA,YAAY,EACV,OAAO,EACP,UAAU,EACV,UAAU,EACV,oBAAoB,EACpB,OAAO,EACP,SAAS,EACT,oBAAoB,GACrB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,mBAAmB,EACnB,YAAY,EACZ,kBAAkB,EAClB,cAAc,EACd,WAAW,GACZ,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,aAAa,EACb,YAAY,EACZ,eAAe,EACf,oBAAoB,EACpB,kBAAkB,EAClB,oBAAoB,EACpB,kBAAkB,GACnB,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,sBAAsB,EACtB,yBAAyB,GAC1B,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,gCAAgC,EAAE,MAAM,qBAAqB,CAAC;AACvE,YAAY,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAE/D,OAAO,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AACnE,YAAY,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAElE,OAAO,EACL,cAAc,EACd,qBAAqB,EACrB,sBAAsB,EACtB,kBAAkB,EAClB,cAAc,EACd,gBAAgB,GACjB,MAAM,gBAAgB,CAAC;AACxB,YAAY,EACV,QAAQ,EACR,kBAAkB,EAClB,aAAa,EACb,aAAa,EACb,gBAAgB,GACjB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEjD,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAIhE,OAAO,EACL,aAAa,EACb,UAAU,EACV,cAAc,EACd,cAAc,GACf,MAAM,aAAa,CAAC;AAIrB,OAAO,EACL,eAAe,EACf,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EAChB,kBAAkB,EAClB,mBAAmB,EACnB,uBAAuB,EACvB,sBAAsB,EACtB,uBAAuB,EACvB,uBAAuB,EACvB,mBAAmB,EACnB,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,mBAAmB,EACnB,iBAAiB,GAClB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAEhE,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC"}

package/dist/org/index.js CHANGED Viewed

@@ -15,4 +15,5 @@ export { organizations, orgMembers, orgInvitations, appMemberRoles, } from "./sc
 export { getMyOrgHandler, createOrgHandler, updateOrgHandler, switchOrgHandler, listMembersHandler, removeMemberHandler, changeMemberRoleHandler, listInvitationsHandler, createInvitationHandler, acceptInvitationHandler, setA2ASecretHandler, syncA2ASecretHandler, receiveA2ASecretHandler, } from "./handlers.js";
 export { listAppRolesHandler, setAppRoleHandler, } from "./app-roles-handlers.js";
 export { isFreeEmailProvider } from "./free-email-providers.js";
+export { isOrgMember } from "./membership.js";
 //# sourceMappingURL=index.js.map

package/dist/org/index.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/org/index.ts"],"names":[],"mappings":"AAAA,iCAAiC;AAYjC,OAAO,EACL,mBAAmB,EACnB,YAAY,EACZ,kBAAkB,EAClB,cAAc,EACd,WAAW,GACZ,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,aAAa,EACb,YAAY,EACZ,eAAe,EACf,oBAAoB,EACpB,kBAAkB,EAClB,oBAAoB,EACpB,kBAAkB,GACnB,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,sBAAsB,EACtB,yBAAyB,GAC1B,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,gCAAgC,EAAE,MAAM,qBAAqB,CAAC;AAGvE,OAAO,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AAGnE,OAAO,EACL,cAAc,EACd,qBAAqB,EACrB,sBAAsB,EACtB,kBAAkB,EAClB,cAAc,EACd,gBAAgB,GACjB,MAAM,gBAAgB,CAAC;AASxB,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEjD,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEhE,2EAA2E;AAC3E,wDAAwD;AACxD,OAAO,EACL,aAAa,EACb,UAAU,EACV,cAAc,EACd,cAAc,GACf,MAAM,aAAa,CAAC;AAErB,8EAA8E;AAC9E,qDAAqD;AACrD,OAAO,EACL,eAAe,EACf,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EAChB,kBAAkB,EAClB,mBAAmB,EACnB,uBAAuB,EACvB,sBAAsB,EACtB,uBAAuB,EACvB,uBAAuB,EACvB,mBAAmB,EACnB,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,mBAAmB,EACnB,iBAAiB,GAClB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC","sourcesContent":["// Public API for the org module.\n\nexport type {\n OrgRole,\n OrgContext,\n OrgSummary,\n OrgInvitationSummary,\n OrgInfo,\n OrgMember,\n OrgPendingInvitation,\n} from \"./types.js\";\n\nexport {\n canInviteOrgMembers,\n canManageOrg,\n canManageOrgDomain,\n orgRoleAtLeast,\n orgRoleRank,\n} from \"./permissions.js\";\n\nexport {\n getOrgContext,\n getOrgDomain,\n getOrgA2ASecret,\n getA2ASecretByDomain,\n resolveOrgByDomain,\n resolveOrgIdForEmail,\n createOrganization,\n} from \"./context.js\";\n\nexport {\n implicitServiceOrgRole,\n parseServiceIdentityEmail,\n} from \"./service-identity.js\";\n\nexport { acceptPendingInvitationsForEmail } from \"./accept-pending.js\";\nexport type { AcceptPendingResult } from \"./accept-pending.js\";\n\nexport { autoJoinDomainMatchingOrgs } from \"./auto-join-domain.js\";\nexport type { AutoJoinDomainResult } from \"./auto-join-domain.js\";\n\nexport {\n defineAppRoles,\n getRegisteredAppRoles,\n listRegisteredAppRoles,\n listAppMemberRoles,\n resolveAppRole,\n setAppMemberRole,\n} from \"./app-roles.js\";\nexport type {\n AppRoles,\n AppRolesDescriptor,\n AppRoleCaller,\n AppRoleLookup,\n AppMemberRoleRow,\n} from \"./app-roles.js\";\n\nexport { ORG_MIGRATIONS } from \"./migrations.js\";\n\nexport { createOrgPlugin, defaultOrgPlugin } from \"./plugin.js\";\n\n// Drizzle schema (re-exported so templates can write typed queries against\n// org tables without redefining the schema themselves).\nexport {\n organizations,\n orgMembers,\n orgInvitations,\n appMemberRoles,\n} from \"./schema.js\";\n\n// Individual handlers — exported so templates can compose a custom org plugin\n// while still using the framework-provided handlers.\nexport {\n getMyOrgHandler,\n createOrgHandler,\n updateOrgHandler,\n switchOrgHandler,\n listMembersHandler,\n removeMemberHandler,\n changeMemberRoleHandler,\n listInvitationsHandler,\n createInvitationHandler,\n acceptInvitationHandler,\n setA2ASecretHandler,\n syncA2ASecretHandler,\n receiveA2ASecretHandler,\n} from \"./handlers.js\";\n\nexport {\n listAppRolesHandler,\n setAppRoleHandler,\n} from \"./app-roles-handlers.js\";\n\nexport { isFreeEmailProvider } from \"./free-email-providers.js\";\n"]}
1	+ {"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/org/index.ts"],"names":[],"mappings":"AAAA,iCAAiC;AAYjC,OAAO,EACL,mBAAmB,EACnB,YAAY,EACZ,kBAAkB,EAClB,cAAc,EACd,WAAW,GACZ,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,aAAa,EACb,YAAY,EACZ,eAAe,EACf,oBAAoB,EACpB,kBAAkB,EAClB,oBAAoB,EACpB,kBAAkB,GACnB,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,sBAAsB,EACtB,yBAAyB,GAC1B,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,gCAAgC,EAAE,MAAM,qBAAqB,CAAC;AAGvE,OAAO,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AAGnE,OAAO,EACL,cAAc,EACd,qBAAqB,EACrB,sBAAsB,EACtB,kBAAkB,EAClB,cAAc,EACd,gBAAgB,GACjB,MAAM,gBAAgB,CAAC;AASxB,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEjD,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEhE,2EAA2E;AAC3E,wDAAwD;AACxD,OAAO,EACL,aAAa,EACb,UAAU,EACV,cAAc,EACd,cAAc,GACf,MAAM,aAAa,CAAC;AAErB,8EAA8E;AAC9E,qDAAqD;AACrD,OAAO,EACL,eAAe,EACf,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EAChB,kBAAkB,EAClB,mBAAmB,EACnB,uBAAuB,EACvB,sBAAsB,EACtB,uBAAuB,EACvB,uBAAuB,EACvB,mBAAmB,EACnB,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,mBAAmB,EACnB,iBAAiB,GAClB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAEhE,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC","sourcesContent":["// Public API for the org module.\n\nexport type {\n OrgRole,\n OrgContext,\n OrgSummary,\n OrgInvitationSummary,\n OrgInfo,\n OrgMember,\n OrgPendingInvitation,\n} from \"./types.js\";\n\nexport {\n canInviteOrgMembers,\n canManageOrg,\n canManageOrgDomain,\n orgRoleAtLeast,\n orgRoleRank,\n} from \"./permissions.js\";\n\nexport {\n getOrgContext,\n getOrgDomain,\n getOrgA2ASecret,\n getA2ASecretByDomain,\n resolveOrgByDomain,\n resolveOrgIdForEmail,\n createOrganization,\n} from \"./context.js\";\n\nexport {\n implicitServiceOrgRole,\n parseServiceIdentityEmail,\n} from \"./service-identity.js\";\n\nexport { acceptPendingInvitationsForEmail } from \"./accept-pending.js\";\nexport type { AcceptPendingResult } from \"./accept-pending.js\";\n\nexport { autoJoinDomainMatchingOrgs } from \"./auto-join-domain.js\";\nexport type { AutoJoinDomainResult } from \"./auto-join-domain.js\";\n\nexport {\n defineAppRoles,\n getRegisteredAppRoles,\n listRegisteredAppRoles,\n listAppMemberRoles,\n resolveAppRole,\n setAppMemberRole,\n} from \"./app-roles.js\";\nexport type {\n AppRoles,\n AppRolesDescriptor,\n AppRoleCaller,\n AppRoleLookup,\n AppMemberRoleRow,\n} from \"./app-roles.js\";\n\nexport { ORG_MIGRATIONS } from \"./migrations.js\";\n\nexport { createOrgPlugin, defaultOrgPlugin } from \"./plugin.js\";\n\n// Drizzle schema (re-exported so templates can write typed queries against\n// org tables without redefining the schema themselves).\nexport {\n organizations,\n orgMembers,\n orgInvitations,\n appMemberRoles,\n} from \"./schema.js\";\n\n// Individual handlers — exported so templates can compose a custom org plugin\n// while still using the framework-provided handlers.\nexport {\n getMyOrgHandler,\n createOrgHandler,\n updateOrgHandler,\n switchOrgHandler,\n listMembersHandler,\n removeMemberHandler,\n changeMemberRoleHandler,\n listInvitationsHandler,\n createInvitationHandler,\n acceptInvitationHandler,\n setA2ASecretHandler,\n syncA2ASecretHandler,\n receiveA2ASecretHandler,\n} from \"./handlers.js\";\n\nexport {\n listAppRolesHandler,\n setAppRoleHandler,\n} from \"./app-roles-handlers.js\";\n\nexport { isFreeEmailProvider } from \"./free-email-providers.js\";\n\nexport { isOrgMember } from \"./membership.js\";\n"]}

package/dist/org/membership.d.ts ADDED Viewed

@@ -0,0 +1,6 @@
+/**
+ * One resolver for "is this email in this org". Two private copies of this
+ * query already existed; a third would be the one that drifts.
+ */
+export declare function isOrgMember(orgId: string, email: string): Promise<boolean>;
+//# sourceMappingURL=membership.d.ts.map

package/dist/org/membership.d.ts.map ADDED Viewed

	@@ -0,0 +1 @@
1	+ {"version":3,"file":"membership.d.ts","sourceRoot":"","sources":["../../src/org/membership.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,wBAAsB,WAAW,CAC/B,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,OAAO,CAAC,CAQlB"}

package/dist/org/membership.js ADDED Viewed

@@ -0,0 +1,16 @@
+import { getDbExec } from "../db/client.js";
+/**
+ * One resolver for "is this email in this org". Two private copies of this
+ * query already existed; a third would be the one that drifts.
+ */
+export async function isOrgMember(orgId, email) {
+    const normalized = email.trim().toLowerCase();
+    if (!orgId || !normalized)
+        return false;
+    const { rows } = await getDbExec().execute({
+        sql: `SELECT 1 FROM org_members WHERE org_id = ? AND LOWER(email) = ? LIMIT 1`,
+        args: [orgId, normalized],
+    });
+    return rows.length > 0;
+}
+//# sourceMappingURL=membership.js.map

package/dist/org/membership.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"membership.js","sourceRoot":"","sources":["../../src/org/membership.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAE5C;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,KAAa,EACb,KAAa;IAEb,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9C,IAAI,CAAC,KAAK,IAAI,CAAC,UAAU;QAAE,OAAO,KAAK,CAAC;IACxC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,SAAS,EAAE,CAAC,OAAO,CAAC;QACzC,GAAG,EAAE,yEAAyE;QAC9E,IAAI,EAAE,CAAC,KAAK,EAAE,UAAU,CAAC;KAC1B,CAAC,CAAC;IACH,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;AACzB,CAAC","sourcesContent":["import { getDbExec } from \"../db/client.js\";\n\n/**\n * One resolver for \"is this email in this org\". Two private copies of this\n * query already existed; a third would be the one that drifts.\n */\nexport async function isOrgMember(\n orgId: string,\n email: string,\n): Promise<boolean> {\n const normalized = email.trim().toLowerCase();\n if (!orgId || !normalized) return false;\n const { rows } = await getDbExec().execute({\n sql: `SELECT 1 FROM org_members WHERE org_id = ? AND LOWER(email) = ? LIMIT 1`,\n args: [orgId, normalized],\n });\n return rows.length > 0;\n}\n"]}

package/dist/progress/routes.d.ts CHANGED Viewed

@@ -15,7 +15,7 @@ export declare function createProgressHandler(): import("h3").EventHandlerWithFe
     error: string;
     ok?: undefined;
 } | {
-    ok: boolean;
     error?: undefined;
+    ok: boolean;
 }>>;
 //# sourceMappingURL=routes.d.ts.map

package/dist/provider-api/actions/custom-provider-registration.d.ts CHANGED Viewed

@@ -75,10 +75,10 @@ export declare function createCustomProviderRegistrationAction<TSchema extends Z
         user: "user";
     }>>;
 }, z.core.$strip>>, {
-    deleted?: undefined;
+    message?: undefined;
     id?: undefined;
-    provider?: undefined;
     found?: undefined;
+    deleted?: undefined;
     providers: {
         id: string;
         label: string;
@@ -89,45 +89,45 @@ export declare function createCustomProviderRegistrationAction<TSchema extends Z
         updatedAt: number;
     }[];
     count: number;
+    provider?: undefined;
     registered?: undefined;
     label?: undefined;
-    message?: undefined;
 } | {
-    deleted?: undefined;
-    count?: undefined;
+    message?: undefined;
     id?: undefined;
+    deleted?: undefined;
     providers?: undefined;
+    count?: undefined;
     found: boolean;
     provider: import("../custom-registry.js").CustomProviderConfig;
     registered?: undefined;
     label?: undefined;
-    message?: undefined;
 } | {
+    message?: undefined;
     deleted?: undefined;
+    providers?: undefined;
     count?: undefined;
     provider?: undefined;
-    providers?: undefined;
     found: boolean;
     id: string;
     registered?: undefined;
     label?: undefined;
-    message?: undefined;
 } | {
-    count?: undefined;
-    provider?: undefined;
+    message?: undefined;
     found?: undefined;
     providers?: undefined;
+    count?: undefined;
+    provider?: undefined;
     deleted: boolean;
     id: string;
     registered?: undefined;
     label?: undefined;
-    message?: undefined;
 } | {
+    found?: undefined;
     deleted?: undefined;
+    providers?: undefined;
     count?: undefined;
     provider?: undefined;
-    found?: undefined;
-    providers?: undefined;
     registered: boolean;
     id: string;
     label: string;

package/dist/provider-api/actions/provider-api.d.ts CHANGED Viewed

@@ -312,6 +312,7 @@ export declare function createProviderApiActions(runtime: Pick<ProviderApiRuntim
         scope?: "org" | "user" | undefined;
     }, {
         id?: undefined;
+        provider?: undefined;
         deleted?: undefined;
         found?: undefined;
         providers: {
@@ -324,14 +325,13 @@ export declare function createProviderApiActions(runtime: Pick<ProviderApiRuntim
             updatedAt: number;
         }[];
         count: number;
-        provider?: undefined;
         registered?: undefined;
         label?: undefined;
         message?: undefined;
     } | {
+        count?: undefined;
         id?: undefined;
         deleted?: undefined;
-        count?: undefined;
         providers?: undefined;
         found: boolean;
         provider: import("../custom-registry.js").CustomProviderConfig;
@@ -339,31 +339,31 @@ export declare function createProviderApiActions(runtime: Pick<ProviderApiRuntim
         label?: undefined;
         message?: undefined;
     } | {
-        deleted?: undefined;
         count?: undefined;
-        providers?: undefined;
         provider?: undefined;
+        deleted?: undefined;
+        providers?: undefined;
         found: boolean;
         id: string;
         registered?: undefined;
         label?: undefined;
         message?: undefined;
     } | {
-        found?: undefined;
         count?: undefined;
-        providers?: undefined;
         provider?: undefined;
+        found?: undefined;
+        providers?: undefined;
         deleted: boolean;
         id: string;
         registered?: undefined;
         label?: undefined;
         message?: undefined;
     } | {
+        count?: undefined;
+        provider?: undefined;
         deleted?: undefined;
         found?: undefined;
-        count?: undefined;
         providers?: undefined;
-        provider?: undefined;
         registered: boolean;
         id: string;
         label: string;

package/dist/provider-api/corpus-jobs.d.ts CHANGED Viewed

@@ -73,7 +73,6 @@ export declare function createProviderCorpusJobAction(options: CreateProviderCor
     offset?: unknown;
     limit?: unknown;
 }, {
-    deleted?: undefined;
     jobs: {
         id: string;
         name: string;
@@ -84,6 +83,7 @@ export declare function createProviderCorpusJobAction(options: CreateProviderCor
         updatedAt: string;
     }[];
     total: number;
+    deleted?: undefined;
     jobId?: undefined;
 } | {
     jobs?: undefined;
@@ -91,9 +91,9 @@ export declare function createProviderCorpusJobAction(options: CreateProviderCor
     deleted: boolean;
     jobId: string;
 } | {
-    deleted?: undefined;
     jobs?: undefined;
     total?: undefined;
+    deleted?: undefined;
     jobId?: undefined;
     hits: Record<string, unknown>[];
     offset: number;

package/dist/review/actions/create-review-comment.d.ts CHANGED Viewed

@@ -1,3 +1,4 @@
+import type { ReviewActorKind, ReviewCommentKind } from "../types.js";
 declare const _default: import("../../action.js").ActionDefinition<{
     resourceType: string;
     resourceId: string;
@@ -13,6 +14,36 @@ declare const _default: import("../../action.js").ActionDefinition<{
         id?: string;
     }[];
     metadata?: Record<string, unknown>;
-}, import("../types.js").ReviewComment>;
+}, {
+    id: string;
+    resourceType: string;
+    resourceId: string;
+    threadId: string;
+    parentCommentId: string | null;
+    targetId: string | null;
+    kind: ReviewCommentKind;
+    status: import("../types.js").ReviewCommentStatus;
+    anchor: unknown | null;
+    body: string;
+    authorEmail: string | null;
+    authorName: string | null;
+    createdBy: ReviewActorKind;
+    resolutionTarget: import("../types.js").ReviewResolutionTarget | null;
+    mentions: import("../types.js").ReviewMention[];
+    ownerEmail: string | null;
+    orgId: string | null;
+    visibility: import("../../sharing/schema.js").Visibility;
+    resolvedBy: string | null;
+    resolvedAt: string | null;
+    consumedAt: string | null;
+    deletedBy: string | null;
+    deletedAt: string | null;
+    createdAt: string;
+    updatedAt: string;
+    metadata: Record<string, unknown> | null;
+    resolutionNote?: string | null;
+    canDelete?: boolean;
+    notified: import("../../server/activity-notifications.js").ActivityNotificationResult;
+}>;
 export default _default;
 //# sourceMappingURL=create-review-comment.d.ts.map

package/dist/review/actions/create-review-comment.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"create-review-comment.d.ts","sourceRoot":"","sources":["../../../src/review/actions/create-review-comment.ts"],"names":[],"mappings":""}
1	+ {"version":3,"file":"create-review-comment.d.ts","sourceRoot":"","sources":["../../../src/review/actions/create-review-comment.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EACV,eAAe,EACf,iBAAiB,EAElB,MAAM,aAAa,CAAC"}

package/dist/review/actions/create-review-comment.js CHANGED Viewed

@@ -2,6 +2,7 @@ import { z } from "zod";
 import { defineAction } from "../../action.js";
 import { reviewAuthorNameFromContext } from "../identity.js";
 import { extractReviewMentions, normalizeReviewMentions } from "../mentions.js";
+import { notifyReviewComment } from "../notifications.js";
 import { assertReviewableResourceAccess, normalizeReviewVisibility, } from "../registry.js";
 import { insertReviewComment } from "../store.js";
 const mentionSchema = z.object({
@@ -41,7 +42,7 @@ export default defineAction({
             ...extractReviewMentions(args.body),
         ]);
         const resolutionTarget = args.resolutionTarget ?? (mentions.length > 0 ? "human" : "agent");
-        return insertReviewComment({
+        const comment = await insertReviewComment({
             resourceType: args.resourceType,
             resourceId: args.resourceId,
             targetId: args.targetId ?? null,
@@ -58,6 +59,7 @@ export default defineAction({
             visibility: normalizeReviewVisibility(access.visibility),
             metadata: args.metadata,
         });
+        return { ...comment, notified: await notifyReviewComment(comment) };
     },
     audit: {
         target: (args, result) => {

package/dist/review/actions/create-review-comment.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"create-review-comment.js","sourceRoot":"","sources":["../../../src/review/actions/create-review-comment.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,2BAA2B,EAAE,MAAM,gBAAgB,CAAC;AAC7D,OAAO,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAChF,OAAO,EACL,8BAA8B,EAC9B,yBAAyB,GAC1B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAOlD,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC/C,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACrC,CAAC,CAAC;AAEH,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;IACtB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC1C,IAAI,EAAE,CAAC;SACJ,IAAI,CAAC;QACJ,SAAS;QACT,YAAY;QACZ,YAAY;QACZ,UAAU;QACV,UAAU;QACV,QAAQ;KACT,CAAC;SACD,QAAQ,EAAE;IACb,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACzC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC5C,gBAAgB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAClE,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,QAAQ,EAAE;IAC3C,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CACvD,CAAC,CAAC;AAEH,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,wEAAwE;IAC1E,MAAM;IACN,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QACvB,MAAM,SAAS,GAAG,GAAwC,CAAC;QAC3D,MAAM,MAAM,GAAG,MAAM,8BAA8B,CACjD,IAAI,CAAC,YAAY,EACjB,IAAI,CAAC,UAAU,EACf,SAAS,EACT,QAAQ,CACT,CAAC;QACF,MAAM,QAAQ,GAAG,uBAAuB,CAAC;YACvC,GAAG,uBAAuB,CAAC,IAAI,CAAC,QAAQ,CAAC;YACzC,GAAG,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC;SACpC,CAAC,CAAC;QACH,MAAM,gBAAgB,GACpB,IAAI,CAAC,gBAAgB,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAErE,OAAO,mBAAmB,CAAC;~~YACzB~~,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI;YAC/B,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,IAAI,SAAS,CAAsB;YACnD,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,IAAI;YAC3B,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,WAAW,EAAE,SAAS,EAAE,SAAS,IAAI,IAAI;YACzC,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,2BAA2B,CAAC,SAAS,CAAC;YACrE,SAAS,EAAE,oBAAoB,CAAC,SAAS,CAAC;YAC1C,gBAAgB;YAChB,QAAQ;YACR,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,SAAS,EAAE,SAAS,IAAI,IAAI;YAC7D,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,SAAS,EAAE,KAAK,IAAI,IAAI;YAC/C,UAAU,EAAE,yBAAyB,CAAC,MAAM,CAAC,UAAU,CAAC;YACxD,QAAQ,EAAE,IAAI,CAAC,QAAQ;SACxB,CAAC,CAAC;~~IACL~~,CAAC;IACD,KAAK,EAAE;QACL,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YACvB,MAAM,OAAO,GAAG,MAIf,CAAC;YACF,OAAO;gBACL,IAAI,EAAE,IAAI,CAAC,YAAY;gBACvB,EAAE,EAAE,IAAI,CAAC,UAAU;gBACnB,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,UAAU,EAAE,OAAO,CAAC,UAAU;aAC/B,CAAC;QACJ,CAAC;KACF;CACF,CAAC,CAAC;AAEH,SAAS,oBAAoB,CAC3B,GAAsC;IAEtC,MAAM,MAAM,GAAG,OAAO,GAAG,EAAE,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IACjE,IAAI,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QAC5C,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,OAAO,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC7C,CAAC","sourcesContent":["import { z } from \"zod\";\n\nimport { defineAction } from \"../../action.js\";\nimport { reviewAuthorNameFromContext } from \"../identity.js\";\nimport { extractReviewMentions, normalizeReviewMentions } from \"../mentions.js\";\nimport {\n assertReviewableResourceAccess,\n normalizeReviewVisibility,\n} from \"../registry.js\";\nimport { insertReviewComment } from \"../store.js\";\nimport type {\n ReviewActorKind,\n ReviewCommentKind,\n ReviewResourceContext,\n} from \"../types.js\";\n\nconst mentionSchema = z.object({\n label: z.string().min(1),\n email: z.string().email().nullable().optional(),\n id: z.string().nullable().optional(),\n});\n\nconst schema = z.object({\n resourceType: z.string().min(1),\n resourceId: z.string().min(1),\n targetId: z.string().nullable().optional(),\n kind: z\n .enum([\n \"comment\",\n \"annotation\",\n \"correction\",\n \"question\",\n \"decision\",\n \"review\",\n ])\n .optional(),\n anchor: z.unknown().nullable().optional(),\n body: z.string().min(1),\n authorName: z.string().nullable().optional(),\n resolutionTarget: z.enum([\"agent\", \"human\"]).nullable().optional(),\n mentions: z.array(mentionSchema).optional(),\n metadata: z.record(z.string(), z.unknown()).optional(),\n});\n\nexport default defineAction({\n description:\n \"Create an inline comment, annotation, or review thread for a resource.\",\n schema,\n run: async (args, ctx) => {\n const actionCtx = ctx as ReviewResourceContext \| undefined;\n const access = await assertReviewableResourceAccess(\n args.resourceType,\n args.resourceId,\n actionCtx,\n \"viewer\",\n );\n const mentions = normalizeReviewMentions([\n ...normalizeReviewMentions(args.mentions),\n ...extractReviewMentions(args.body),\n ]);\n const resolutionTarget =\n args.resolutionTarget ?? (mentions.length > 0 ? \"human\" : \"agent\");\n\n ~~return~~ insertReviewComment({\n resourceType: args.resourceType,\n resourceId: args.resourceId,\n targetId: args.targetId ?? null,\n kind: (args.kind ?? \"comment\") as ReviewCommentKind,\n anchor: args.anchor ?? null,\n body: args.body,\n authorEmail: actionCtx?.userEmail ?? null,\n authorName: args.authorName ?? reviewAuthorNameFromContext(actionCtx),\n createdBy: actorKindFromContext(actionCtx),\n resolutionTarget,\n mentions,\n ownerEmail: access.ownerEmail ?? actionCtx?.userEmail ?? null,\n orgId: access.orgId ?? actionCtx?.orgId ?? null,\n visibility: normalizeReviewVisibility(access.visibility),\n metadata: args.metadata,\n });\n },\n audit: {\n target: (args, result) => {\n const comment = result as {\n ownerEmail?: string \| null;\n orgId?: string \| null;\n visibility?: \"private\" \| \"org\" \| \"public\";\n };\n return {\n type: args.resourceType,\n id: args.resourceId,\n ownerEmail: comment.ownerEmail,\n orgId: comment.orgId,\n visibility: comment.visibility,\n };\n },\n },\n});\n\nfunction actorKindFromContext(\n ctx: ReviewResourceContext \| undefined,\n): ReviewActorKind {\n const caller = typeof ctx?.caller === \"string\" ? ctx.caller : \"\";\n if (caller === \"agent\" \|\| caller === \"tool\") {\n return \"agent\";\n }\n return ctx?.userEmail ? \"human\" : \"system\";\n}\n"]}
1	+ {"version":3,"file":"create-review-comment.js","sourceRoot":"","sources":["../../../src/review/actions/create-review-comment.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,2BAA2B,EAAE,MAAM,gBAAgB,CAAC;AAC7D,OAAO,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAChF,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EACL,8BAA8B,EAC9B,yBAAyB,GAC1B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAOlD,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC/C,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACrC,CAAC,CAAC;AAEH,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;IACtB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC1C,IAAI,EAAE,CAAC;SACJ,IAAI,CAAC;QACJ,SAAS;QACT,YAAY;QACZ,YAAY;QACZ,UAAU;QACV,UAAU;QACV,QAAQ;KACT,CAAC;SACD,QAAQ,EAAE;IACb,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACzC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC5C,gBAAgB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAClE,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,QAAQ,EAAE;IAC3C,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CACvD,CAAC,CAAC;AAEH,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,wEAAwE;IAC1E,MAAM;IACN,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QACvB,MAAM,SAAS,GAAG,GAAwC,CAAC;QAC3D,MAAM,MAAM,GAAG,MAAM,8BAA8B,CACjD,IAAI,CAAC,YAAY,EACjB,IAAI,CAAC,UAAU,EACf,SAAS,EACT,QAAQ,CACT,CAAC;QACF,MAAM,QAAQ,GAAG,uBAAuB,CAAC;YACvC,GAAG,uBAAuB,CAAC,IAAI,CAAC,QAAQ,CAAC;YACzC,GAAG,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC;SACpC,CAAC,CAAC;QACH,MAAM,gBAAgB,GACpB,IAAI,CAAC,gBAAgB,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAErE,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC;YACxC,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI;YAC/B,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,IAAI,SAAS,CAAsB;YACnD,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,IAAI;YAC3B,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,WAAW,EAAE,SAAS,EAAE,SAAS,IAAI,IAAI;YACzC,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,2BAA2B,CAAC,SAAS,CAAC;YACrE,SAAS,EAAE,oBAAoB,CAAC,SAAS,CAAC;YAC1C,gBAAgB;YAChB,QAAQ;YACR,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,SAAS,EAAE,SAAS,IAAI,IAAI;YAC7D,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,SAAS,EAAE,KAAK,IAAI,IAAI;YAC/C,UAAU,EAAE,yBAAyB,CAAC,MAAM,CAAC,UAAU,CAAC;YACxD,QAAQ,EAAE,IAAI,CAAC,QAAQ;SACxB,CAAC,CAAC;QAEH,OAAO,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC,OAAO,CAAC,EAAE,CAAC;IACtE,CAAC;IACD,KAAK,EAAE;QACL,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YACvB,MAAM,OAAO,GAAG,MAIf,CAAC;YACF,OAAO;gBACL,IAAI,EAAE,IAAI,CAAC,YAAY;gBACvB,EAAE,EAAE,IAAI,CAAC,UAAU;gBACnB,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,UAAU,EAAE,OAAO,CAAC,UAAU;aAC/B,CAAC;QACJ,CAAC;KACF;CACF,CAAC,CAAC;AAEH,SAAS,oBAAoB,CAC3B,GAAsC;IAEtC,MAAM,MAAM,GAAG,OAAO,GAAG,EAAE,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IACjE,IAAI,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QAC5C,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,OAAO,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC7C,CAAC","sourcesContent":["import { z } from \"zod\";\n\nimport { defineAction } from \"../../action.js\";\nimport { reviewAuthorNameFromContext } from \"../identity.js\";\nimport { extractReviewMentions, normalizeReviewMentions } from \"../mentions.js\";\nimport { notifyReviewComment } from \"../notifications.js\";\nimport {\n assertReviewableResourceAccess,\n normalizeReviewVisibility,\n} from \"../registry.js\";\nimport { insertReviewComment } from \"../store.js\";\nimport type {\n ReviewActorKind,\n ReviewCommentKind,\n ReviewResourceContext,\n} from \"../types.js\";\n\nconst mentionSchema = z.object({\n label: z.string().min(1),\n email: z.string().email().nullable().optional(),\n id: z.string().nullable().optional(),\n});\n\nconst schema = z.object({\n resourceType: z.string().min(1),\n resourceId: z.string().min(1),\n targetId: z.string().nullable().optional(),\n kind: z\n .enum([\n \"comment\",\n \"annotation\",\n \"correction\",\n \"question\",\n \"decision\",\n \"review\",\n ])\n .optional(),\n anchor: z.unknown().nullable().optional(),\n body: z.string().min(1),\n authorName: z.string().nullable().optional(),\n resolutionTarget: z.enum([\"agent\", \"human\"]).nullable().optional(),\n mentions: z.array(mentionSchema).optional(),\n metadata: z.record(z.string(), z.unknown()).optional(),\n});\n\nexport default defineAction({\n description:\n \"Create an inline comment, annotation, or review thread for a resource.\",\n schema,\n run: async (args, ctx) => {\n const actionCtx = ctx as ReviewResourceContext \| undefined;\n const access = await assertReviewableResourceAccess(\n args.resourceType,\n args.resourceId,\n actionCtx,\n \"viewer\",\n );\n const mentions = normalizeReviewMentions([\n ...normalizeReviewMentions(args.mentions),\n ...extractReviewMentions(args.body),\n ]);\n const resolutionTarget =\n args.resolutionTarget ?? (mentions.length > 0 ? \"human\" : \"agent\");\n\n const comment = await insertReviewComment({\n resourceType: args.resourceType,\n resourceId: args.resourceId,\n targetId: args.targetId ?? null,\n kind: (args.kind ?? \"comment\") as ReviewCommentKind,\n anchor: args.anchor ?? null,\n body: args.body,\n authorEmail: actionCtx?.userEmail ?? null,\n authorName: args.authorName ?? reviewAuthorNameFromContext(actionCtx),\n createdBy: actorKindFromContext(actionCtx),\n resolutionTarget,\n mentions,\n ownerEmail: access.ownerEmail ?? actionCtx?.userEmail ?? null,\n orgId: access.orgId ?? actionCtx?.orgId ?? null,\n visibility: normalizeReviewVisibility(access.visibility),\n metadata: args.metadata,\n });\n\n return { ...comment, notified: await notifyReviewComment(comment) };\n },\n audit: {\n target: (args, result) => {\n const comment = result as {\n ownerEmail?: string \| null;\n orgId?: string \| null;\n visibility?: \"private\" \| \"org\" \| \"public\";\n };\n return {\n type: args.resourceType,\n id: args.resourceId,\n ownerEmail: comment.ownerEmail,\n orgId: comment.orgId,\n visibility: comment.visibility,\n };\n },\n },\n});\n\nfunction actorKindFromContext(\n ctx: ReviewResourceContext \| undefined,\n): ReviewActorKind {\n const caller = typeof ctx?.caller === \"string\" ? ctx.caller : \"\";\n if (caller === \"agent\" \|\| caller === \"tool\") {\n return \"agent\";\n }\n return ctx?.userEmail ? \"human\" : \"system\";\n}\n"]}

package/dist/review/actions/reply-review-comment.d.ts CHANGED Viewed

@@ -1,3 +1,4 @@
+import type { ReviewActorKind } from "../types.js";
 declare const _default: import("../../action.js").ActionDefinition<{
     resourceType: string;
     resourceId: string;
@@ -11,6 +12,36 @@ declare const _default: import("../../action.js").ActionDefinition<{
         id?: string;
     }[];
     metadata?: Record<string, unknown>;
-}, import("../types.js").ReviewComment>;
+}, {
+    id: string;
+    resourceType: string;
+    resourceId: string;
+    threadId: string;
+    parentCommentId: string | null;
+    targetId: string | null;
+    kind: import("../types.js").ReviewCommentKind;
+    status: import("../types.js").ReviewCommentStatus;
+    anchor: unknown | null;
+    body: string;
+    authorEmail: string | null;
+    authorName: string | null;
+    createdBy: ReviewActorKind;
+    resolutionTarget: import("../types.js").ReviewResolutionTarget | null;
+    mentions: import("../types.js").ReviewMention[];
+    ownerEmail: string | null;
+    orgId: string | null;
+    visibility: import("../../sharing/schema.js").Visibility;
+    resolvedBy: string | null;
+    resolvedAt: string | null;
+    consumedAt: string | null;
+    deletedBy: string | null;
+    deletedAt: string | null;
+    createdAt: string;
+    updatedAt: string;
+    metadata: Record<string, unknown> | null;
+    resolutionNote?: string | null;
+    canDelete?: boolean;
+    notified: import("../../server/activity-notifications.js").ActivityNotificationResult;
+}>;
 export default _default;
 //# sourceMappingURL=reply-review-comment.d.ts.map

package/dist/review/actions/reply-review-comment.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"reply-review-comment.d.ts","sourceRoot":"","sources":["../../../src/review/actions/reply-review-comment.ts"],"names":[],"mappings":""}
1	+ {"version":3,"file":"reply-review-comment.d.ts","sourceRoot":"","sources":["../../../src/review/actions/reply-review-comment.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,eAAe,EAAyB,MAAM,aAAa,CAAC"}

package/dist/review/actions/reply-review-comment.js CHANGED Viewed

@@ -2,6 +2,7 @@ import { z } from "zod";
 import { defineAction } from "../../action.js";
 import { reviewAuthorNameFromContext } from "../identity.js";
 import { extractReviewMentions, normalizeReviewMentions } from "../mentions.js";
+import { notifyReviewComment } from "../notifications.js";
 import { assertReviewableResourceAccess, normalizeReviewVisibility, } from "../registry.js";
 import { getReviewCommentById, insertReviewReply } from "../store.js";
 const mentionSchema = z.object({
@@ -45,7 +46,7 @@ export default defineAction({
             ...extractReviewMentions(args.body),
         ]);
         const routeTarget = args.resolutionTarget ?? (mentions.length > 0 ? "human" : null);
-        return insertReviewReply({
+        const reply = await insertReviewReply({
             resourceType: args.resourceType,
             resourceId: args.resourceId,
             threadId: parent.threadId,
@@ -67,6 +68,7 @@ export default defineAction({
             resourceType: args.resourceType,
             resourceId: args.resourceId,
         });
+        return { ...reply, notified: await notifyReviewComment(reply) };
     },
     audit: {
         target: (args, result) => {

package/dist/review/actions/reply-review-comment.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"reply-review-comment.js","sourceRoot":"","sources":["../../../src/review/actions/reply-review-comment.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,2BAA2B,EAAE,MAAM,gBAAgB,CAAC;AAC7D,OAAO,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAChF,OAAO,EACL,8BAA8B,EAC9B,yBAAyB,GAC1B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAGtE,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC/C,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACrC,CAAC,CAAC;AAEH,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;IACtB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC5C,gBAAgB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAClE,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,QAAQ,EAAE;IAC3C,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CACvD,CAAC,CAAC;AAEH,eAAe,YAAY,CAAC;IAC1B,WAAW,EAAE,6CAA6C;IAC1D,MAAM;IACN,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QACvB,MAAM,SAAS,GAAG,GAAwC,CAAC;QAC3D,MAAM,KAAK,GAAG;YACZ,SAAS,EAAE,SAAS,EAAE,SAAS,IAAI,IAAI;YACvC,KAAK,EAAE,SAAS,EAAE,KAAK,IAAI,IAAI;SAChC,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,8BAA8B,CACjD,IAAI,CAAC,YAAY,EACjB,IAAI,CAAC,UAAU,EACf,SAAS,EACT,QAAQ,CACT,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE;YAC/D,WAAW,EAAE,IAAI;SAClB,CAAC,CAAC;QACH,IACE,CAAC,MAAM;YACP,MAAM,CAAC,YAAY,KAAK,IAAI,CAAC,YAAY;YACzC,MAAM,CAAC,UAAU,KAAK,IAAI,CAAC,UAAU,EACrC,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC9C,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC/C,CAAC;QACD,MAAM,QAAQ,GAAG,uBAAuB,CAAC;YACvC,GAAG,uBAAuB,CAAC,IAAI,CAAC,QAAQ,CAAC;YACzC,GAAG,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC;SACpC,CAAC,CAAC;QAEH,MAAM,WAAW,GACf,IAAI,CAAC,gBAAgB,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAClE,~~OAAO~~,iBAAiB,~~CACtB~~;YACE,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,eAAe,EAAE,MAAM,CAAC,EAAE;YAC1B,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,WAAW,EAAE,SAAS,EAAE,SAAS,IAAI,IAAI;YACzC,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,2BAA2B,CAAC,SAAS,CAAC;YACrE,SAAS,EAAE,oBAAoB,CAAC,SAAS,CAAC;YAC1C,gBAAgB,EAAE,IAAI;YACtB,QAAQ;YACR,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,SAAS,EAAE,SAAS,IAAI,IAAI;YAC7D,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,SAAS,EAAE,KAAK,IAAI,IAAI;YAC/C,UAAU,EAAE,yBAAyB,CAAC,MAAM,CAAC,UAAU,CAAC;YACxD,QAAQ,EAAE,IAAI,CAAC,QAAQ;SACxB,EACD,WAAW,EACX;YACE,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CACF,CAAC;~~IACJ~~,CAAC;IACD,KAAK,EAAE;QACL,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YACvB,MAAM,OAAO,GAAG,MAIf,CAAC;YACF,OAAO;gBACL,IAAI,EAAE,IAAI,CAAC,YAAY;gBACvB,EAAE,EAAE,IAAI,CAAC,UAAU;gBACnB,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,UAAU,EAAE,OAAO,CAAC,UAAU;aAC/B,CAAC;QACJ,CAAC;KACF;CACF,CAAC,CAAC;AAEH,SAAS,oBAAoB,CAC3B,GAAsC;IAEtC,MAAM,MAAM,GAAG,OAAO,GAAG,EAAE,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IACjE,IAAI,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QAC5C,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,OAAO,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC7C,CAAC","sourcesContent":["import { z } from \"zod\";\n\nimport { defineAction } from \"../../action.js\";\nimport { reviewAuthorNameFromContext } from \"../identity.js\";\nimport { extractReviewMentions, normalizeReviewMentions } from \"../mentions.js\";\nimport {\n assertReviewableResourceAccess,\n normalizeReviewVisibility,\n} from \"../registry.js\";\nimport { getReviewCommentById, insertReviewReply } from \"../store.js\";\nimport type { ReviewActorKind, ReviewResourceContext } from \"../types.js\";\n\nconst mentionSchema = z.object({\n label: z.string().min(1),\n email: z.string().email().nullable().optional(),\n id: z.string().nullable().optional(),\n});\n\nconst schema = z.object({\n resourceType: z.string().min(1),\n resourceId: z.string().min(1),\n commentId: z.string().min(1),\n body: z.string().min(1),\n authorName: z.string().nullable().optional(),\n resolutionTarget: z.enum([\"agent\", \"human\"]).nullable().optional(),\n mentions: z.array(mentionSchema).optional(),\n metadata: z.record(z.string(), z.unknown()).optional(),\n});\n\nexport default defineAction({\n description: \"Reply to an existing review comment thread.\",\n schema,\n run: async (args, ctx) => {\n const actionCtx = ctx as ReviewResourceContext \| undefined;\n const scope = {\n userEmail: actionCtx?.userEmail ?? null,\n orgId: actionCtx?.orgId ?? null,\n };\n const access = await assertReviewableResourceAccess(\n args.resourceType,\n args.resourceId,\n actionCtx,\n \"viewer\",\n );\n const parent = await getReviewCommentById(args.commentId, scope, {\n bypassScope: true,\n });\n if (\n !parent \|\|\n parent.resourceType !== args.resourceType \|\|\n parent.resourceId !== args.resourceId\n ) {\n throw new Error(\"Review comment not found\");\n }\n if (parent.status !== \"open\") {\n throw new Error(\"Review thread is not open\");\n }\n const mentions = normalizeReviewMentions([\n ...normalizeReviewMentions(args.mentions),\n ...extractReviewMentions(args.body),\n ]);\n\n const routeTarget =\n args.resolutionTarget ?? (mentions.length > 0 ? \"human\" : null);\n ~~return~~ insertReviewReply(\n {\n resourceType: args.resourceType,\n resourceId: args.resourceId,\n threadId: parent.threadId,\n parentCommentId: parent.id,\n targetId: parent.targetId,\n kind: parent.kind,\n anchor: parent.anchor,\n body: args.body,\n authorEmail: actionCtx?.userEmail ?? null,\n authorName: args.authorName ?? reviewAuthorNameFromContext(actionCtx),\n createdBy: actorKindFromContext(actionCtx),\n resolutionTarget: null,\n mentions,\n ownerEmail: access.ownerEmail ?? actionCtx?.userEmail ?? null,\n orgId: access.orgId ?? actionCtx?.orgId ?? null,\n visibility: normalizeReviewVisibility(access.visibility),\n metadata: args.metadata,\n },\n routeTarget,\n {\n resourceType: args.resourceType,\n resourceId: args.resourceId,\n },\n );\n },\n audit: {\n target: (args, result) => {\n const comment = result as {\n ownerEmail?: string \| null;\n orgId?: string \| null;\n visibility?: \"private\" \| \"org\" \| \"public\";\n };\n return {\n type: args.resourceType,\n id: args.resourceId,\n ownerEmail: comment.ownerEmail,\n orgId: comment.orgId,\n visibility: comment.visibility,\n };\n },\n },\n});\n\nfunction actorKindFromContext(\n ctx: ReviewResourceContext \| undefined,\n): ReviewActorKind {\n const caller = typeof ctx?.caller === \"string\" ? ctx.caller : \"\";\n if (caller === \"agent\" \|\| caller === \"tool\") {\n return \"agent\";\n }\n return ctx?.userEmail ? \"human\" : \"system\";\n}\n"]}
1	+ {"version":3,"file":"reply-review-comment.js","sourceRoot":"","sources":["../../../src/review/actions/reply-review-comment.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,2BAA2B,EAAE,MAAM,gBAAgB,CAAC;AAC7D,OAAO,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAChF,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EACL,8BAA8B,EAC9B,yBAAyB,GAC1B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAGtE,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC/C,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACrC,CAAC,CAAC;AAEH,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;IACtB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC5C,gBAAgB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAClE,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,QAAQ,EAAE;IAC3C,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CACvD,CAAC,CAAC;AAEH,eAAe,YAAY,CAAC;IAC1B,WAAW,EAAE,6CAA6C;IAC1D,MAAM;IACN,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QACvB,MAAM,SAAS,GAAG,GAAwC,CAAC;QAC3D,MAAM,KAAK,GAAG;YACZ,SAAS,EAAE,SAAS,EAAE,SAAS,IAAI,IAAI;YACvC,KAAK,EAAE,SAAS,EAAE,KAAK,IAAI,IAAI;SAChC,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,8BAA8B,CACjD,IAAI,CAAC,YAAY,EACjB,IAAI,CAAC,UAAU,EACf,SAAS,EACT,QAAQ,CACT,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE;YAC/D,WAAW,EAAE,IAAI;SAClB,CAAC,CAAC;QACH,IACE,CAAC,MAAM;YACP,MAAM,CAAC,YAAY,KAAK,IAAI,CAAC,YAAY;YACzC,MAAM,CAAC,UAAU,KAAK,IAAI,CAAC,UAAU,EACrC,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC9C,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC/C,CAAC;QACD,MAAM,QAAQ,GAAG,uBAAuB,CAAC;YACvC,GAAG,uBAAuB,CAAC,IAAI,CAAC,QAAQ,CAAC;YACzC,GAAG,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC;SACpC,CAAC,CAAC;QAEH,MAAM,WAAW,GACf,IAAI,CAAC,gBAAgB,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAClE,MAAM,KAAK,GAAG,MAAM,iBAAiB,CACnC;YACE,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,eAAe,EAAE,MAAM,CAAC,EAAE;YAC1B,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,WAAW,EAAE,SAAS,EAAE,SAAS,IAAI,IAAI;YACzC,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,2BAA2B,CAAC,SAAS,CAAC;YACrE,SAAS,EAAE,oBAAoB,CAAC,SAAS,CAAC;YAC1C,gBAAgB,EAAE,IAAI;YACtB,QAAQ;YACR,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,SAAS,EAAE,SAAS,IAAI,IAAI;YAC7D,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,SAAS,EAAE,KAAK,IAAI,IAAI;YAC/C,UAAU,EAAE,yBAAyB,CAAC,MAAM,CAAC,UAAU,CAAC;YACxD,QAAQ,EAAE,IAAI,CAAC,QAAQ;SACxB,EACD,WAAW,EACX;YACE,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CACF,CAAC;QAEF,OAAO,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC;IAClE,CAAC;IACD,KAAK,EAAE;QACL,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YACvB,MAAM,OAAO,GAAG,MAIf,CAAC;YACF,OAAO;gBACL,IAAI,EAAE,IAAI,CAAC,YAAY;gBACvB,EAAE,EAAE,IAAI,CAAC,UAAU;gBACnB,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,UAAU,EAAE,OAAO,CAAC,UAAU;aAC/B,CAAC;QACJ,CAAC;KACF;CACF,CAAC,CAAC;AAEH,SAAS,oBAAoB,CAC3B,GAAsC;IAEtC,MAAM,MAAM,GAAG,OAAO,GAAG,EAAE,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IACjE,IAAI,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QAC5C,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,OAAO,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC7C,CAAC","sourcesContent":["import { z } from \"zod\";\n\nimport { defineAction } from \"../../action.js\";\nimport { reviewAuthorNameFromContext } from \"../identity.js\";\nimport { extractReviewMentions, normalizeReviewMentions } from \"../mentions.js\";\nimport { notifyReviewComment } from \"../notifications.js\";\nimport {\n assertReviewableResourceAccess,\n normalizeReviewVisibility,\n} from \"../registry.js\";\nimport { getReviewCommentById, insertReviewReply } from \"../store.js\";\nimport type { ReviewActorKind, ReviewResourceContext } from \"../types.js\";\n\nconst mentionSchema = z.object({\n label: z.string().min(1),\n email: z.string().email().nullable().optional(),\n id: z.string().nullable().optional(),\n});\n\nconst schema = z.object({\n resourceType: z.string().min(1),\n resourceId: z.string().min(1),\n commentId: z.string().min(1),\n body: z.string().min(1),\n authorName: z.string().nullable().optional(),\n resolutionTarget: z.enum([\"agent\", \"human\"]).nullable().optional(),\n mentions: z.array(mentionSchema).optional(),\n metadata: z.record(z.string(), z.unknown()).optional(),\n});\n\nexport default defineAction({\n description: \"Reply to an existing review comment thread.\",\n schema,\n run: async (args, ctx) => {\n const actionCtx = ctx as ReviewResourceContext \| undefined;\n const scope = {\n userEmail: actionCtx?.userEmail ?? null,\n orgId: actionCtx?.orgId ?? null,\n };\n const access = await assertReviewableResourceAccess(\n args.resourceType,\n args.resourceId,\n actionCtx,\n \"viewer\",\n );\n const parent = await getReviewCommentById(args.commentId, scope, {\n bypassScope: true,\n });\n if (\n !parent \|\|\n parent.resourceType !== args.resourceType \|\|\n parent.resourceId !== args.resourceId\n ) {\n throw new Error(\"Review comment not found\");\n }\n if (parent.status !== \"open\") {\n throw new Error(\"Review thread is not open\");\n }\n const mentions = normalizeReviewMentions([\n ...normalizeReviewMentions(args.mentions),\n ...extractReviewMentions(args.body),\n ]);\n\n const routeTarget =\n args.resolutionTarget ?? (mentions.length > 0 ? \"human\" : null);\n const reply = await insertReviewReply(\n {\n resourceType: args.resourceType,\n resourceId: args.resourceId,\n threadId: parent.threadId,\n parentCommentId: parent.id,\n targetId: parent.targetId,\n kind: parent.kind,\n anchor: parent.anchor,\n body: args.body,\n authorEmail: actionCtx?.userEmail ?? null,\n authorName: args.authorName ?? reviewAuthorNameFromContext(actionCtx),\n createdBy: actorKindFromContext(actionCtx),\n resolutionTarget: null,\n mentions,\n ownerEmail: access.ownerEmail ?? actionCtx?.userEmail ?? null,\n orgId: access.orgId ?? actionCtx?.orgId ?? null,\n visibility: normalizeReviewVisibility(access.visibility),\n metadata: args.metadata,\n },\n routeTarget,\n {\n resourceType: args.resourceType,\n resourceId: args.resourceId,\n },\n );\n\n return { ...reply, notified: await notifyReviewComment(reply) };\n },\n audit: {\n target: (args, result) => {\n const comment = result as {\n ownerEmail?: string \| null;\n orgId?: string \| null;\n visibility?: \"private\" \| \"org\" \| \"public\";\n };\n return {\n type: args.resourceType,\n id: args.resourceId,\n ownerEmail: comment.ownerEmail,\n orgId: comment.orgId,\n visibility: comment.visibility,\n };\n },\n },\n});\n\nfunction actorKindFromContext(\n ctx: ReviewResourceContext \| undefined,\n): ReviewActorKind {\n const caller = typeof ctx?.caller === \"string\" ? ctx.caller : \"\";\n if (caller === \"agent\" \|\| caller === \"tool\") {\n return \"agent\";\n }\n return ctx?.userEmail ? \"human\" : \"system\";\n}\n"]}

package/dist/review/index.d.ts CHANGED Viewed

@@ -1,6 +1,7 @@
 export type { ReviewActorKind, ReviewComment, ReviewCommentKind, ReviewCommentStatus, ReviewMention, ReviewResolutionTarget, ReviewResourceAccess, ReviewResourceContext, ReviewResourceRole, ReviewScope, ReviewStatus, ReviewStatusEntry, ReviewableResourceRegistration, } from "./types.js";
 export { redactPublicReviewCommentIdentity, redactPublicReviewStatusIdentity, reviewAuthorNameFromContext, shouldRedactReviewIdentity, } from "./identity.js";
 export { extractReviewMentions, normalizeReviewMentions } from "./mentions.js";
+export { notifyReviewComment, REVIEW_NOTIFICATION_PREFS_KEY, type ReviewNotificationResult, } from "./notifications.js";
 export { __resetReviewableResourcesForTests, assertReviewableResourceAccess, getReviewableResource, listReviewableResources, registerReviewableResource, resolveReviewableResourceAccess, } from "./registry.js";
 export { __resetReviewInitForTests, ensureReviewTables, getReviewCommentById, getReviewStatus, getReviewThreadSummary, getReviewThreadRoot, queryReviewComments, routeReviewThread, sendReviewThreadToAgent, } from "./store.js";
 export type { GetReviewThreadSummaryInput, ReviewThreadSummary, } from "./store.js";

package/dist/review/index.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/review/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,eAAe,EACf,aAAa,EACb,iBAAiB,EACjB,mBAAmB,EACnB,aAAa,EACb,sBAAsB,EACtB,oBAAoB,EACpB,qBAAqB,EACrB,kBAAkB,EAClB,WAAW,EACX,YAAY,EACZ,iBAAiB,EACjB,8BAA8B,GAC/B,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,iCAAiC,EACjC,gCAAgC,EAChC,2BAA2B,EAC3B,0BAA0B,GAC3B,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AAC/E,OAAO,EACL,kCAAkC,EAClC,8BAA8B,EAC9B,qBAAqB,EACrB,uBAAuB,EACvB,0BAA0B,EAC1B,+BAA+B,GAChC,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,yBAAyB,EACzB,kBAAkB,EAClB,oBAAoB,EACpB,eAAe,EACf,sBAAsB,EACtB,mBAAmB,EACnB,mBAAmB,EACnB,iBAAiB,EACjB,uBAAuB,GACxB,MAAM,YAAY,CAAC;AACpB,YAAY,EACV,2BAA2B,EAC3B,mBAAmB,GACpB,MAAM,YAAY,CAAC"}
1	+ {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/review/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,eAAe,EACf,aAAa,EACb,iBAAiB,EACjB,mBAAmB,EACnB,aAAa,EACb,sBAAsB,EACtB,oBAAoB,EACpB,qBAAqB,EACrB,kBAAkB,EAClB,WAAW,EACX,YAAY,EACZ,iBAAiB,EACjB,8BAA8B,GAC/B,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,iCAAiC,EACjC,gCAAgC,EAChC,2BAA2B,EAC3B,0BAA0B,GAC3B,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AAC/E,OAAO,EACL,mBAAmB,EACnB,6BAA6B,EAC7B,KAAK,wBAAwB,GAC9B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,kCAAkC,EAClC,8BAA8B,EAC9B,qBAAqB,EACrB,uBAAuB,EACvB,0BAA0B,EAC1B,+BAA+B,GAChC,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,yBAAyB,EACzB,kBAAkB,EAClB,oBAAoB,EACpB,eAAe,EACf,sBAAsB,EACtB,mBAAmB,EACnB,mBAAmB,EACnB,iBAAiB,EACjB,uBAAuB,GACxB,MAAM,YAAY,CAAC;AACpB,YAAY,EACV,2BAA2B,EAC3B,mBAAmB,GACpB,MAAM,YAAY,CAAC"}

package/dist/review/index.js CHANGED Viewed

@@ -1,5 +1,6 @@
 export { redactPublicReviewCommentIdentity, redactPublicReviewStatusIdentity, reviewAuthorNameFromContext, shouldRedactReviewIdentity, } from "./identity.js";
 export { extractReviewMentions, normalizeReviewMentions } from "./mentions.js";
+export { notifyReviewComment, REVIEW_NOTIFICATION_PREFS_KEY, } from "./notifications.js";
 export { __resetReviewableResourcesForTests, assertReviewableResourceAccess, getReviewableResource, listReviewableResources, registerReviewableResource, resolveReviewableResourceAccess, } from "./registry.js";
 export { __resetReviewInitForTests, ensureReviewTables, getReviewCommentById, getReviewStatus, getReviewThreadSummary, getReviewThreadRoot, queryReviewComments, routeReviewThread, sendReviewThreadToAgent, } from "./store.js";
 //# sourceMappingURL=index.js.map