@agent-relay/cloud 0.1.0

package/dist/services/nango.js

@@ -0,0 +1,392 @@
+import { Nango } from '@nangohq/node';
+import crypto from 'node:crypto';
+import { getConfig } from '../config.js';
+export const NANGO_INTEGRATIONS = {
+    GITHUB_USER: 'github',
+    GITHUB_APP: 'github-app-oauth',
+};
+class NangoService {
+    _client = null;
+    _secret = null;
+    /** Lazily initialize client on first use to avoid requiring env vars at import */
+    get client() {
+        if (!this._client) {
+            const config = getConfig();
+            this._secret = config.nango.secretKey;
+            this._client = new Nango({
+                secretKey: config.nango.secretKey,
+                ...(config.nango.host ? { host: config.nango.host } : {}),
+            });
+        }
+        return this._client;
+    }
+    get secret() {
+        if (!this._secret) {
+            this._secret = getConfig().nango.secretKey;
+        }
+        return this._secret;
+    }
+    /**
+     * Create a Nango connect session restricted to specific integrations.
+     */
+    async createConnectSession(allowedIntegrations, endUser) {
+        const { data } = await this.client.createConnectSession({
+            allowed_integrations: allowedIntegrations,
+            end_user: {
+                id: endUser.id,
+                email: endUser.email,
+            },
+        });
+        return data;
+    }
+    /**
+     * Fetch GitHub user profile via Nango proxy.
+     */
+    async getGithubUser(connectionId) {
+        const response = await this.client.get({
+            connectionId,
+            providerConfigKey: NANGO_INTEGRATIONS.GITHUB_USER,
+            endpoint: '/user',
+        });
+        return response.data;
+    }
+    /**
+     * Retrieve an installation access token from a GitHub App connection.
+     * Use this ONLY when you need the raw token (e.g., for git clone URLs).
+     * For API calls, use the proxy methods instead.
+     */
+    async getGithubAppToken(connectionId) {
+        try {
+            const token = await this.client.getToken(NANGO_INTEGRATIONS.GITHUB_APP, connectionId, false, true);
+            // Handle different return formats from Nango
+            if (typeof token === 'string') {
+                return token;
+            }
+            // Nango may return an object with access_token
+            if (token && typeof token === 'object') {
+                const tokenObj = token;
+                if (tokenObj.access_token) {
+                    return tokenObj.access_token;
+                }
+                if (tokenObj.token) {
+                    return tokenObj.token;
+                }
+            }
+            console.error('[nango] Unexpected token format:', typeof token, token);
+            throw new Error('Expected GitHub App token to be a string');
+        }
+        catch (err) {
+            // Handle 404 (connection not found) gracefully
+            const error = err;
+            const status = error.response?.status || error.status;
+            if (status === 404) {
+                throw new Error(`GitHub App connection not found: ${connectionId} (may have been disconnected)`);
+            }
+            // Re-throw with cleaner message
+            throw new Error(`Failed to get GitHub App token: ${err.message || 'Unknown error'}`);
+        }
+    }
+    /**
+     * Retrieve the user's OAuth access token from a GitHub App OAuth connection.
+     * This is the user-level token (not the installation token).
+     * Use this for operations that require user context (e.g., gh CLI).
+     *
+     * The user token is stored in connection_config.userCredentials.access_token
+     * by Nango's GitHub App OAuth flow. This is a gho_* or ghu_* token that
+     * works for both git operations and gh CLI commands.
+     */
+    async getGithubUserOAuthToken(connectionId) {
+        try {
+            const connection = await this.client.getConnection(NANGO_INTEGRATIONS.GITHUB_APP, connectionId);
+            const connConfig = connection.connection_config;
+            // Check for userCredentials.access_token (the user's personal OAuth token)
+            const userCredentials = connConfig?.userCredentials;
+            if (userCredentials?.access_token && typeof userCredentials.access_token === 'string') {
+                return userCredentials.access_token;
+            }
+            throw new Error('No userCredentials.access_token in connection_config');
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : 'Unknown error';
+            console.log('[nango] getGithubUserOAuthToken failed:', message);
+            throw new Error('Could not retrieve GitHub user OAuth token');
+        }
+    }
+    /**
+     * Retrieve the user's OAuth token from a 'github' user connection.
+     * This is for the separate GitHub OAuth login (not the App connection).
+     */
+    async getGithubUserToken(connectionId) {
+        const token = await this.client.getToken(NANGO_INTEGRATIONS.GITHUB_USER, connectionId);
+        if (typeof token === 'string') {
+            return token;
+        }
+        if (token && typeof token === 'object') {
+            const tokenObj = token;
+            if (tokenObj.access_token) {
+                return tokenObj.access_token;
+            }
+            if (tokenObj.token) {
+                return tokenObj.token;
+            }
+        }
+        throw new Error('Could not retrieve GitHub user token');
+    }
+    /**
+     * List repositories available to a GitHub App installation using the Nango Proxy.
+     * The proxy automatically handles token injection and refresh.
+     * @see https://nango.dev/docs/implementation-guides/requests-proxy/implement-requests-proxy
+     */
+    async listGithubAppRepos(connectionId) {
+        const response = await this.client.get({
+            connectionId,
+            providerConfigKey: NANGO_INTEGRATIONS.GITHUB_APP,
+            endpoint: '/installation/repositories',
+            params: { per_page: '100' },
+        });
+        return response.data;
+    }
+    /**
+     * Get the GitHub App installation ID from a connection.
+     * The installation ID is stored in connection_config.installation_id
+     */
+    async getGithubAppInstallationId(connectionId) {
+        try {
+            const connection = await this.client.getConnection(NANGO_INTEGRATIONS.GITHUB_APP, connectionId);
+            // Extract installation_id from connection_config (where Nango stores it for GitHub App OAuth)
+            const connectionConfig = connection.connection_config;
+            if (connectionConfig?.installation_id) {
+                return Number(connectionConfig.installation_id);
+            }
+            console.warn('[nango] No installation_id in connection_config');
+            return null;
+        }
+        catch (err) {
+            console.error('[nango] Failed to get installation ID:', err);
+            return null;
+        }
+    }
+    /**
+     * Create an issue via Nango Proxy.
+     */
+    async createGithubIssue(connectionId, owner, repo, data) {
+        const response = await this.client.post({
+            connectionId,
+            providerConfigKey: NANGO_INTEGRATIONS.GITHUB_APP,
+            endpoint: `/repos/${owner}/${repo}/issues`,
+            data,
+        });
+        return response.data;
+    }
+    /**
+     * Create a pull request via Nango Proxy.
+     */
+    async createGithubPullRequest(connectionId, owner, repo, data) {
+        const response = await this.client.post({
+            connectionId,
+            providerConfigKey: NANGO_INTEGRATIONS.GITHUB_APP,
+            endpoint: `/repos/${owner}/${repo}/pulls`,
+            data,
+        });
+        return response.data;
+    }
+    /**
+     * Add a comment to an issue via Nango Proxy.
+     */
+    async addGithubIssueComment(connectionId, owner, repo, issueNumber, body) {
+        const response = await this.client.post({
+            connectionId,
+            providerConfigKey: NANGO_INTEGRATIONS.GITHUB_APP,
+            endpoint: `/repos/${owner}/${repo}/issues/${issueNumber}/comments`,
+            data: { body },
+        });
+        return response.data;
+    }
+    /**
+     * Update connection end user metadata (e.g., after creating a user record).
+     */
+    async updateEndUser(connectionId, providerConfigKey, endUser) {
+        await this.client.patchConnection({ connectionId, provider_config_key: providerConfigKey }, { end_user: endUser });
+    }
+    /**
+     * Delete a connection from Nango.
+     *
+     * Used to remove temporary session connections for returning users
+     * to prevent duplicate connections in Nango. In the two-connection pattern,
+     * new users get a permanent connection but returning users authenticate
+     * with a temporary one that gets deleted.
+     *
+     * @param connectionId - Nango connection ID to delete
+     * @param providerConfigKey - The integration key (e.g., 'github')
+     */
+    async deleteConnection(connectionId, providerConfigKey) {
+        await this.client.deleteConnection(providerConfigKey, connectionId);
+    }
+    /**
+     * Get connection metadata including end_user info.
+     * Useful when webhook doesn't include end_user data.
+     */
+    async getConnection(connectionId, providerConfigKey) {
+        const connection = await this.client.getConnection(providerConfigKey, connectionId);
+        return connection;
+    }
+    /**
+     * Check if user has access to a specific GitHub repository.
+     * Uses the user's OAuth connection to query GitHub API.
+     * @param connectionId - User's Nango connection ID (github user OAuth)
+     * @param owner - Repository owner
+     * @param repo - Repository name
+     * @returns Access details or null if no access
+     */
+    async checkUserRepoAccess(connectionId, owner, repo) {
+        try {
+            const response = await this.client.get({
+                connectionId,
+                providerConfigKey: NANGO_INTEGRATIONS.GITHUB_USER,
+                endpoint: `/repos/${owner}/${repo}`,
+            });
+            const data = response.data;
+            let permission = 'none';
+            if (data.permissions) {
+                if (data.permissions.admin) {
+                    permission = 'admin';
+                }
+                else if (data.permissions.push) {
+                    permission = 'write';
+                }
+                else if (data.permissions.pull) {
+                    permission = 'read';
+                }
+            }
+            return {
+                hasAccess: true,
+                permission,
+                repository: {
+                    id: data.id,
+                    fullName: data.full_name,
+                    isPrivate: data.private,
+                    defaultBranch: data.default_branch,
+                },
+            };
+        }
+        catch (err) {
+            // 404 = no access or repo doesn't exist
+            const error = err;
+            if (error.response?.status === 404 || error.response?.status === 403) {
+                return { hasAccess: false };
+            }
+            console.error('[nango] checkUserRepoAccess error:', err);
+            throw err;
+        }
+    }
+    /**
+     * List all repositories the user has access to via their OAuth connection.
+     * Uses the user's personal OAuth token (not the GitHub App).
+     * @param connectionId - User's Nango connection ID (github user OAuth)
+     * @param options - Pagination and filter options
+     * @returns List of accessible repositories
+     */
+    async listUserAccessibleRepos(connectionId, options) {
+        const page = options?.page ?? 1;
+        const perPage = options?.perPage ?? 100;
+        const type = options?.type ?? 'all';
+        const sort = options?.sort ?? 'updated';
+        const response = await this.client.get({
+            connectionId,
+            providerConfigKey: NANGO_INTEGRATIONS.GITHUB_USER,
+            endpoint: '/user/repos',
+            params: {
+                page: String(page),
+                per_page: String(perPage),
+                type,
+                sort,
+                direction: 'desc',
+            },
+        });
+        const repos = response.data || [];
+        return {
+            repositories: repos.map(r => ({
+                id: r.id,
+                fullName: r.full_name,
+                isPrivate: r.private,
+                defaultBranch: r.default_branch,
+                permissions: r.permissions || { admin: false, push: false, pull: false },
+            })),
+            hasMore: repos.length === perPage,
+        };
+    }
+    /**
+     * List collaborators for a repository via Nango Proxy.
+     * Uses the GitHub App connection to access repository collaborators.
+     * @param connectionId - GitHub App connection ID
+     * @param owner - Repository owner
+     * @param repo - Repository name
+     * @returns List of collaborators with their permissions
+     */
+    async listRepoCollaborators(connectionId, owner, repo) {
+        try {
+            const response = await this.client.get({
+                connectionId,
+                providerConfigKey: NANGO_INTEGRATIONS.GITHUB_APP,
+                endpoint: `/repos/${owner}/${repo}/collaborators`,
+                params: { per_page: '100' },
+            });
+            return (response.data || []).map(collab => {
+                let permission = 'none';
+                if (collab.permissions) {
+                    if (collab.permissions.admin) {
+                        permission = 'admin';
+                    }
+                    else if (collab.permissions.push) {
+                        permission = 'write';
+                    }
+                    else if (collab.permissions.pull) {
+                        permission = 'read';
+                    }
+                }
+                return {
+                    id: collab.id,
+                    login: collab.login,
+                    avatarUrl: collab.avatar_url,
+                    permission,
+                };
+            });
+        }
+        catch (err) {
+            const error = err;
+            // 403 = no permission to view collaborators, 404 = repo not found
+            if (error.response?.status === 403 || error.response?.status === 404) {
+                console.warn(`[nango] Cannot list collaborators for ${owner}/${repo}: status ${error.response.status}`);
+                return [];
+            }
+            console.error('[nango] listRepoCollaborators error:', err);
+            throw err;
+        }
+    }
+    /**
+     * Verify webhook signature sent by Nango.
+     * Uses the new verifyIncomingWebhookRequest method.
+     * @see https://nango.dev/docs/reference/sdks/node#verify-webhook-signature
+     */
+    verifyWebhookSignature(rawBody, headers) {
+        try {
+            // Use the new method: verifyIncomingWebhookRequest(body, headers)
+            return this.client.verifyIncomingWebhookRequest(rawBody, headers);
+        }
+        catch (err) {
+            console.error('[nango] verifyIncomingWebhookRequest error:', err);
+            // Fall back to manual HMAC verification using the secret key
+            const signature = headers['x-nango-signature'];
+            const hmacSha256 = headers['x-nango-hmac-sha256'];
+            if (!signature && !hmacSha256)
+                return false;
+            const expectedSignature = crypto
+                .createHmac('sha256', this.secret)
+                .update(rawBody)
+                .digest('hex');
+            return signature === expectedSignature || hmacSha256 === expectedSignature;
+        }
+    }
+}
+export const nangoService = new NangoService();
+//# sourceMappingURL=nango.js.map

package/dist/services/nango.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nango.js","sourceRoot":"","sources":["../../src/services/nango.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAEtC,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAEzC,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,WAAW,EAAE,QAAQ;IACrB,UAAU,EAAE,kBAAkB;CACtB,CAAC;AASX,MAAM,YAAY;IACR,OAAO,GAAiB,IAAI,CAAC;IAC7B,OAAO,GAAkB,IAAI,CAAC;IAEtC,kFAAkF;IAClF,IAAY,MAAM;QAChB,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;YAC3B,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC;YACtC,IAAI,CAAC,OAAO,GAAG,IAAI,KAAK,CAAC;gBACvB,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS;gBACjC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC1D,CAAC,CAAC;QACL,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,IAAY,MAAM;QAChB,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,IAAI,CAAC,OAAO,GAAG,SAAS,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;QAC7C,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,oBAAoB,CAAC,mBAA6B,EAAE,OAAuC;QAC/F,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC;YACtD,oBAAoB,EAAE,mBAAmB;YACzC,QAAQ,EAAE;gBACR,EAAE,EAAE,OAAO,CAAC,EAAE;gBACd,KAAK,EAAE,OAAO,CAAC,KAAK;aACrB;SACF,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CAAC,YAAoB;QACtC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAoB;YACxD,YAAY;YACZ,iBAAiB,EAAE,kBAAkB,CAAC,WAAW;YACjD,QAAQ,EAAE,OAAO;SAClB,CAAqC,CAAC;QACvC,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,iBAAiB,CAAC,YAAoB;QAC1C,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CACtC,kBAAkB,CAAC,UAAU,EAC7B,YAAY,EACZ,KAAK,EACL,IAAI,CACL,CAAC;YAEF,6CAA6C;YAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC9B,OAAO,KAAK,CAAC;YACf,CAAC;YAED,+CAA+C;YAC/C,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACvC,MAAM,QAAQ,GAAG,KAAkD,CAAC;gBACpE,IAAI,QAAQ,CAAC,YAAY,EAAE,CAAC;oBAC1B,OAAO,QAAQ,CAAC,YAAY,CAAC;gBAC/B,CAAC;gBACD,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;oBACnB,OAAO,QAAQ,CAAC,KAAK,CAAC;gBACxB,CAAC;YACH,CAAC;YAED,OAAO,CAAC,KAAK,CAAC,kCAAkC,EAAE,OAAO,KAAK,EAAE,KAAK,CAAC,CAAC;YACvE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC9D,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,+CAA+C;YAC/C,MAAM,KAAK,GAAG,GAA0D,CAAC;YACzE,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,EAAE,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC;YACtD,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;gBACnB,MAAM,IAAI,KAAK,CAAC,oCAAoC,YAAY,+BAA+B,CAAC,CAAC;YACnG,CAAC;YACD,gCAAgC;YAChC,MAAM,IAAI,KAAK,CAAC,mCAAoC,GAAa,CAAC,OAAO,IAAI,eAAe,EAAE,CAAC,CAAC;QAClG,CAAC;IACH,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,uBAAuB,CAAC,YAAoB;QAChD,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,kBAAkB,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;YAChG,MAAM,UAAU,GAAI,UAA8D,CAAC,iBAAiB,CAAC;YAErG,2EAA2E;YAC3E,MAAM,eAAe,GAAG,UAAU,EAAE,eAAwD,CAAC;YAC7F,IAAI,eAAe,EAAE,YAAY,IAAI,OAAO,eAAe,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;gBACtF,OAAO,eAAe,CAAC,YAAY,CAAC;YACtC,CAAC;YAED,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC1E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YACrE,OAAO,CAAC,GAAG,CAAC,yCAAyC,EAAE,OAAO,CAAC,CAAC;YAChE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,kBAAkB,CAAC,YAAoB;QAC3C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CACtC,kBAAkB,CAAC,WAAW,EAC9B,YAAY,CACb,CAAC;QAEF,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACvC,MAAM,QAAQ,GAAG,KAAkD,CAAC;YACpE,IAAI,QAAQ,CAAC,YAAY,EAAE,CAAC;gBAC1B,OAAO,QAAQ,CAAC,YAAY,CAAC;YAC/B,CAAC;YACD,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;gBACnB,OAAO,QAAQ,CAAC,KAAK,CAAC;YACxB,CAAC;QACH,CAAC;QAED,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,kBAAkB,CAAC,YAAoB;QAC3C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAuG;YAC3I,YAAY;YACZ,iBAAiB,EAAE,kBAAkB,CAAC,UAAU;YAChD,QAAQ,EAAE,4BAA4B;YACtC,MAAM,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE;SAC5B,CAAwH,CAAC;QAC1H,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,0BAA0B,CAAC,YAAoB;QACnD,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,kBAAkB,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;YAChG,8FAA8F;YAC9F,MAAM,gBAAgB,GAAI,UAA8D,CAAC,iBAAiB,CAAC;YAC3G,IAAI,gBAAgB,EAAE,eAAe,EAAE,CAAC;gBACtC,OAAO,MAAM,CAAC,gBAAgB,CAAC,eAAe,CAAC,CAAC;YAClD,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,iDAAiD,CAAC,CAAC;YAChE,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,wCAAwC,EAAE,GAAG,CAAC,CAAC;YAC7D,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,iBAAiB,CACrB,YAAoB,EACpB,KAAa,EACb,IAAY,EACZ,IAAyD;QAEzD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAuC;YAC5E,YAAY;YACZ,iBAAiB,EAAE,kBAAkB,CAAC,UAAU;YAChD,QAAQ,EAAE,UAAU,KAAK,IAAI,IAAI,SAAS;YAC1C,IAAI;SACL,CAAwD,CAAC;QAC1D,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,uBAAuB,CAC3B,YAAoB,EACpB,KAAa,EACb,IAAY,EACZ,IAAkE;QAElE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAuC;YAC5E,YAAY;YACZ,iBAAiB,EAAE,kBAAkB,CAAC,UAAU;YAChD,QAAQ,EAAE,UAAU,KAAK,IAAI,IAAI,QAAQ;YACzC,IAAI;SACL,CAAwD,CAAC;QAC1D,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,qBAAqB,CACzB,YAAoB,EACpB,KAAa,EACb,IAAY,EACZ,WAAmB,EACnB,IAAY;QAEZ,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAmC;YACxE,YAAY;YACZ,iBAAiB,EAAE,kBAAkB,CAAC,UAAU;YAChD,QAAQ,EAAE,UAAU,KAAK,IAAI,IAAI,WAAW,WAAW,WAAW;YAClE,IAAI,EAAE,EAAE,IAAI,EAAE;SACf,CAAoD,CAAC;QACtD,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CAAC,YAAoB,EAAE,iBAAyB,EAAE,OAAuC;QAC1G,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAC/B,EAAE,YAAY,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,EACxD,EAAE,QAAQ,EAAE,OAAO,EAAE,CACtB,CAAC;IACJ,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,gBAAgB,CAAC,YAAoB,EAAE,iBAAyB;QACpE,MAAM,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,iBAAiB,EAAE,YAAY,CAAC,CAAC;IACtE,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,aAAa,CAAC,YAAoB,EAAE,iBAAyB;QAOjE,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,iBAAiB,EAAE,YAAY,CAAC,CAAC;QACpF,OAAO,UAMN,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,mBAAmB,CAAC,YAAoB,EAAE,KAAa,EAAE,IAAY;QAUzE,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAUnC;gBACD,YAAY;gBACZ,iBAAiB,EAAE,kBAAkB,CAAC,WAAW;gBACjD,QAAQ,EAAE,UAAU,KAAK,IAAI,IAAI,EAAE;aACpC,CAUC,CAAC;YAEH,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;YAC3B,IAAI,UAAU,GAAwC,MAAM,CAAC;YAE7D,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;gBACrB,IAAI,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;oBAC3B,UAAU,GAAG,OAAO,CAAC;gBACvB,CAAC;qBAAM,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;oBACjC,UAAU,GAAG,OAAO,CAAC;gBACvB,CAAC;qBAAM,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;oBACjC,UAAU,GAAG,MAAM,CAAC;gBACtB,CAAC;YACH,CAAC;YAED,OAAO;gBACL,SAAS,EAAE,IAAI;gBACf,UAAU;gBACV,UAAU,EAAE;oBACV,EAAE,EAAE,IAAI,CAAC,EAAE;oBACX,QAAQ,EAAE,IAAI,CAAC,SAAS;oBACxB,SAAS,EAAE,IAAI,CAAC,OAAO;oBACvB,aAAa,EAAE,IAAI,CAAC,cAAc;iBACnC;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,wCAAwC;YACxC,MAAM,KAAK,GAAG,GAAyC,CAAC;YACxD,IAAI,KAAK,CAAC,QAAQ,EAAE,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,QAAQ,EAAE,MAAM,KAAK,GAAG,EAAE,CAAC;gBACrE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;YAC9B,CAAC;YACD,OAAO,CAAC,KAAK,CAAC,oCAAoC,EAAE,GAAG,CAAC,CAAC;YACzD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,uBAAuB,CAAC,YAAoB,EAAE,OAKnD;QAcC,MAAM,IAAI,GAAG,OAAO,EAAE,IAAI,IAAI,CAAC,CAAC;QAChC,MAAM,OAAO,GAAG,OAAO,EAAE,OAAO,IAAI,GAAG,CAAC;QACxC,MAAM,IAAI,GAAG,OAAO,EAAE,IAAI,IAAI,KAAK,CAAC;QACpC,MAAM,IAAI,GAAG,OAAO,EAAE,IAAI,IAAI,SAAS,CAAC;QAExC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAUlC;YACF,YAAY;YACZ,iBAAiB,EAAE,kBAAkB,CAAC,WAAW;YACjD,QAAQ,EAAE,aAAa;YACvB,MAAM,EAAE;gBACN,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC;gBAClB,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC;gBACzB,IAAI;gBACJ,IAAI;gBACJ,SAAS,EAAE,MAAM;aAClB;SACF,CAUE,CAAC;QAEJ,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC;QAElC,OAAO;YACL,YAAY,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBAC5B,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,QAAQ,EAAE,CAAC,CAAC,SAAS;gBACrB,SAAS,EAAE,CAAC,CAAC,OAAO;gBACpB,aAAa,EAAE,CAAC,CAAC,cAAc;gBAC/B,WAAW,EAAE,CAAC,CAAC,WAAW,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE;aACzE,CAAC,CAAC;YACH,OAAO,EAAE,KAAK,CAAC,MAAM,KAAK,OAAO;SAClC,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,qBAAqB,CAAC,YAAoB,EAAE,KAAa,EAAE,IAAY;QAM3E,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAYlC;gBACF,YAAY;gBACZ,iBAAiB,EAAE,kBAAkB,CAAC,UAAU;gBAChD,QAAQ,EAAE,UAAU,KAAK,IAAI,IAAI,gBAAgB;gBACjD,MAAM,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE;aAC5B,CAYE,CAAC;YAEJ,OAAO,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE;gBACxC,IAAI,UAAU,GAAwC,MAAM,CAAC;gBAC7D,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;oBACvB,IAAI,MAAM,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;wBAC7B,UAAU,GAAG,OAAO,CAAC;oBACvB,CAAC;yBAAM,IAAI,MAAM,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;wBACnC,UAAU,GAAG,OAAO,CAAC;oBACvB,CAAC;yBAAM,IAAI,MAAM,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;wBACnC,UAAU,GAAG,MAAM,CAAC;oBACtB,CAAC;gBACH,CAAC;gBACD,OAAO;oBACL,EAAE,EAAE,MAAM,CAAC,EAAE;oBACb,KAAK,EAAE,MAAM,CAAC,KAAK;oBACnB,SAAS,EAAE,MAAM,CAAC,UAAU;oBAC5B,UAAU;iBACX,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,KAAK,GAAG,GAAyC,CAAC;YACxD,kEAAkE;YAClE,IAAI,KAAK,CAAC,QAAQ,EAAE,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,QAAQ,EAAE,MAAM,KAAK,GAAG,EAAE,CAAC;gBACrE,OAAO,CAAC,IAAI,CAAC,yCAAyC,KAAK,IAAI,IAAI,YAAY,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;gBACxG,OAAO,EAAE,CAAC;YACZ,CAAC;YACD,OAAO,CAAC,KAAK,CAAC,sCAAsC,EAAE,GAAG,CAAC,CAAC;YAC3D,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,sBAAsB,CAAC,OAAe,EAAE,OAAsD;QAC5F,IAAI,CAAC;YACH,kEAAkE;YAClE,OAAO,IAAI,CAAC,MAAM,CAAC,4BAA4B,CAAC,OAAO,EAAE,OAAkC,CAAC,CAAC;QAC/F,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,6CAA6C,EAAE,GAAG,CAAC,CAAC;YAClE,6DAA6D;YAC7D,MAAM,SAAS,GAAG,OAAO,CAAC,mBAAmB,CAAuB,CAAC;YACrE,MAAM,UAAU,GAAG,OAAO,CAAC,qBAAqB,CAAuB,CAAC;YACxE,IAAI,CAAC,SAAS,IAAI,CAAC,UAAU;gBAAE,OAAO,KAAK,CAAC;YAE5C,MAAM,iBAAiB,GAAG,MAAM;iBAC7B,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC;iBACjC,MAAM,CAAC,OAAO,CAAC;iBACf,MAAM,CAAC,KAAK,CAAC,CAAC;YACjB,OAAO,SAAS,KAAK,iBAAiB,IAAI,UAAU,KAAK,iBAAiB,CAAC;QAC7E,CAAC;IACH,CAAC;CACF;AAED,MAAM,CAAC,MAAM,YAAY,GAAG,IAAI,YAAY,EAAE,CAAC"}

package/dist/services/persistence.d.ts

@@ -0,0 +1,131 @@
+/**
+ * Cloud Persistence Service
+ *
+ * Handles durable persistence of agent session data for cloud deployments.
+ * Subscribes to wrapper events ('summary', 'session-end') and persists
+ * to PostgreSQL via Drizzle ORM.
+ *
+ * This decouples wrappers from storage concerns - the wrapper emits events,
+ * this service handles persistence. Different storage backends can be swapped
+ * by implementing alternative persistence services.
+ *
+ * @see RelayPtyOrchestratorEvents in src/wrapper/relay-pty-orchestrator.ts for event definitions
+ */
+import type { RelayPtyOrchestrator } from '@agent-relay/wrapper';
+/**
+ * Configuration for CloudPersistenceService
+ */
+export interface CloudPersistenceConfig {
+    /** Workspace ID for scoping sessions */
+    workspaceId: string;
+    /** Optional callback when summary is persisted */
+    onSummaryPersisted?: (agentName: string, summaryId: string) => void;
+    /** Optional callback when session ends */
+    onSessionEnded?: (agentName: string, sessionId: string) => void;
+}
+/**
+ * CloudPersistenceService manages durable storage for agent sessions.
+ *
+ * Usage:
+ * ```typescript
+ * const persistence = new CloudPersistenceService({
+ *   workspaceId: 'workspace-123',
+ * });
+ *
+ * // Bind to a RelayPtyOrchestrator instance
+ * const pty = new RelayPtyOrchestrator(config);
+ * const sessionId = await persistence.bindToWrapper(pty);
+ *
+ * // When done, unbind to clean up listeners
+ * persistence.unbindFromWrapper(pty);
+ * ```
+ */
+export declare class CloudPersistenceService {
+    private config;
+    private boundWrappers;
+    constructor(config: CloudPersistenceConfig);
+    /**
+     * Bind to a RelayPtyOrchestrator instance and start persisting its events.
+     * Creates a new agent session record and returns the session ID.
+     *
+     * @param wrapper The RelayPtyOrchestrator to bind to
+     * @returns The session ID for this agent session
+     */
+    bindToRelayPtyOrchestrator(wrapper: RelayPtyOrchestrator): Promise<string>;
+    /**
+     * Unbind from a RelayPtyOrchestrator and clean up event listeners.
+     *
+     * @param wrapper The RelayPtyOrchestrator to unbind from
+     */
+    unbindFromRelayPtyOrchestrator(wrapper: RelayPtyOrchestrator): void;
+    /**
+     * Handle a summary event - persist to agent_summaries table.
+     */
+    private handleSummary;
+    /**
+     * Handle a session-end event - update agent_sessions with end marker.
+     */
+    private handleSessionEnd;
+    /**
+     * Get the session ID for a bound wrapper.
+     */
+    getSessionId(wrapper: RelayPtyOrchestrator): string | undefined;
+    /**
+     * Get all summaries for a session.
+     */
+    getSessionSummaries(sessionId: string): Promise<{
+        id: string;
+        sessionId: string;
+        agentName: string;
+        summary: {
+            currentTask?: string;
+            completedTasks?: string[];
+            decisions?: string[];
+            context?: string;
+            files?: string[];
+        };
+        createdAt: Date;
+    }[]>;
+    /**
+     * Get the latest summary for an agent in THIS workspace.
+     * Joins through agent_sessions to ensure workspace scoping.
+     */
+    getLatestSummary(agentName: string): Promise<{
+        id: string;
+        sessionId: string;
+        agentName: string;
+        summary: {
+            currentTask?: string;
+            completedTasks?: string[];
+            decisions?: string[];
+            context?: string;
+            files?: string[];
+        };
+        createdAt: Date;
+    }>;
+    /**
+     * Get active sessions for a workspace.
+     */
+    getActiveSessions(): Promise<{
+        id: string;
+        workspaceId: string;
+        agentName: string;
+        status: string;
+        startedAt: Date;
+        endedAt: Date | null;
+        endMarker: {
+            summary?: string;
+            completedTasks?: string[];
+        } | null;
+        metadata: unknown;
+    }[]>;
+    /**
+     * Clean up all bindings.
+     */
+    destroy(): void;
+}
+/**
+ * Factory function to create a persistence service for a workspace.
+ */
+export declare function createPersistenceService(workspaceId: string): CloudPersistenceService;
+//# sourceMappingURL=persistence.d.ts.map

package/dist/services/persistence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"persistence.d.ts","sourceRoot":"","sources":["../../src/services/persistence.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAKjE;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,wCAAwC;IACxC,WAAW,EAAE,MAAM,CAAC;IACpB,kDAAkD;IAClD,kBAAkB,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,KAAK,IAAI,CAAC;IACpE,0CAA0C;IAC1C,cAAc,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,KAAK,IAAI,CAAC;CACjE;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,uBAAuB;IAClC,OAAO,CAAC,MAAM,CAAyB;IACvC,OAAO,CAAC,aAAa,CAIhB;gBAEO,MAAM,EAAE,sBAAsB;IAI1C;;;;;;OAMG;IACG,0BAA0B,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,MAAM,CAAC;IA0ChF;;;;OAIG;IACH,8BAA8B,CAAC,OAAO,EAAE,oBAAoB,GAAG,IAAI;IAWnE;;OAEG;YACW,aAAa;IAyB3B;;OAEG;YACW,gBAAgB;IAoB9B;;OAEG;IACH,YAAY,CAAC,OAAO,EAAE,oBAAoB,GAAG,MAAM,GAAG,SAAS;IAI/D;;OAEG;IACG,mBAAmB,CAAC,SAAS,EAAE,MAAM;;;;;;;;;;;;;IAQ3C;;;OAGG;IACG,gBAAgB,CAAC,SAAS,EAAE,MAAM;;;;;;;;;;;;;IAqBxC;;OAEG;IACG,iBAAiB;;;;;;;;;;;;;IAUvB;;OAEG;IACH,OAAO,IAAI,IAAI;CAKhB;AAED;;GAEG;AACH,wBAAgB,wBAAwB,CAAC,WAAW,EAAE,MAAM,GAAG,uBAAuB,CAErF"}