@aitne/daemon 0.1.0

package/dist/api/routes/entities.js

@@ -0,0 +1,176 @@
+import { Hono } from "hono";
+import { isDomain, isEntityType } from "@aitne/shared";
+import { findEntitiesByDomainTypeDate, findEntitiesBySource, findEntitiesBySourceKey, getEntityByPath, } from "../../db/entities-store.js";
+/**
+ * Entity-mirror lookup contract (docs/design/21-management-registry-and-
+ * entities.md §7.6).
+ *
+ * GET /api/entities                   ← search
+ *   query params (mutually exclusive shapes):
+ *     • source=<app>&external_id=<eid>      → tier-1 exact match
+ *     • source=<app>[&limit=N]              → list-by-source bias
+ *                                            (management-task-register §10.1
+ *                                            Step 4a — pick the (domain,
+ *                                            type) already dominant for app)
+ *     • domain=<d>&type=<t>&date=<YYYY-MM-DD>[&q=<title>]
+ *                                            → tier-2 fuzzy match
+ *
+ * GET /api/entities/by-path?path=<...> ← exact path
+ *
+ * The mirror is NOT authoritative (§7.6); responses include the parsed
+ * frontmatter.sources so the agent's session can fall through to the
+ * MD file when the mirror's data is too thin. The response shape is
+ * stable across the two query forms — both return an `items` array
+ * plus `tier`/`q` debug hints so the skill can log which lookup tier
+ * answered.
+ */
+const ISO_DATE_RE = /^\d{4}-\d{2}-\d{2}$/;
+function toResponse(record) {
+    return {
+        path: record.path,
+        domain: record.domain,
+        type: record.type,
+        slug: record.slug,
+        title: record.title,
+        status: record.status,
+        date: record.date,
+        lastSyncedAt: record.lastSyncedAt,
+        sources: record.sources,
+    };
+}
+export function createEntitiesRoutes(deps) {
+    const app = new Hono();
+    const { db } = deps;
+    // GET /entities — search by either (source, external_id) or
+    // (domain, type, date[, q]). Query-shape mismatch returns 400 so a
+    // malformed agent call does not silently fall through to the wrong
+    // tier.
+    app.get("/entities", (c) => {
+        const source = c.req.query("source");
+        const externalId = c.req.query("external_id");
+        const domain = c.req.query("domain");
+        const type = c.req.query("type");
+        const date = c.req.query("date");
+        const q = c.req.query("q") ?? undefined;
+        const limitRaw = c.req.query("limit");
+        const hasTier1 = source !== undefined || externalId !== undefined;
+        const hasTier2 = domain !== undefined || type !== undefined ||
+            date !== undefined;
+        if (hasTier1 && hasTier2) {
+            return c.json({
+                error: "ambiguous_query",
+                message: "use either (source, external_id) or (domain, type, date) — not both",
+            }, 400);
+        }
+        if (!hasTier1 && !hasTier2) {
+            return c.json({
+                error: "missing_query",
+                message: "provide (source, external_id) or (domain, type, date) query parameters",
+            }, 400);
+        }
+        if (hasTier1) {
+            // `source` alone is the bias query (Step 4a of §10.1) — list all
+            // entities tagged with that source so the registration skill can
+            // pick the dominant (domain, type) for `output_path`.
+            // `external_id` alone is meaningless without the source key.
+            if (source && !externalId) {
+                let limit;
+                if (limitRaw !== undefined) {
+                    const n = Number.parseInt(limitRaw, 10);
+                    if (!Number.isFinite(n) || n < 1) {
+                        return c.json({
+                            error: "validation_error",
+                            message: "`limit` must be a positive integer",
+                        }, 400);
+                    }
+                    limit = n;
+                }
+                const items = findEntitiesBySourceKey(db, source, limit);
+                return c.json({
+                    tier: 1,
+                    mode: "by_source_key",
+                    items: items.map(toResponse),
+                });
+            }
+            if (!source || !externalId) {
+                return c.json({
+                    error: "validation_error",
+                    message: "`external_id` requires `source`; provide `source=<app>&external_id=<eid>` for tier-1 exact match, or `source=<app>` alone for the bias query",
+                }, 400);
+            }
+            const items = findEntitiesBySource(db, source, externalId);
+            return c.json({
+                tier: 1,
+                mode: "exact",
+                items: items.map(toResponse),
+            });
+        }
+        // tier-2
+        if (!domain || !type || !date) {
+            return c.json({
+                error: "validation_error",
+                message: "tier-2 lookup requires `domain`, `type`, and `date` (ISO YYYY-MM-DD)",
+            }, 400);
+        }
+        if (!isDomain(domain)) {
+            return c.json({
+                error: "validation_error",
+                message: `unknown domain "${domain}"`,
+            }, 400);
+        }
+        if (!isEntityType(type)) {
+            return c.json({
+                error: "validation_error",
+                message: `unknown type "${type}" (singular form expected, e.g. "meeting")`,
+            }, 400);
+        }
+        if (!ISO_DATE_RE.test(date)) {
+            return c.json({
+                error: "validation_error",
+                message: "`date` must be ISO YYYY-MM-DD",
+            }, 400);
+        }
+        let limit;
+        if (limitRaw !== undefined) {
+            const n = Number.parseInt(limitRaw, 10);
+            if (!Number.isFinite(n) || n < 1) {
+                return c.json({
+                    error: "validation_error",
+                    message: "`limit` must be a positive integer",
+                }, 400);
+            }
+            limit = n;
+        }
+        const items = findEntitiesByDomainTypeDate(db, {
+            domain,
+            type,
+            date,
+            q,
+            limit,
+        });
+        return c.json({
+            tier: 2,
+            q: q ?? null,
+            items: items.map(toResponse),
+        });
+    });
+    // GET /entities/by-path?path=<...> — exact lookup, 404 on miss
+    app.get("/entities/by-path", (c) => {
+        const path = c.req.query("path");
+        if (!path) {
+            return c.json({
+                error: "missing_query",
+                message: "provide `path` query parameter (e.g. work/meetings/foo.md)",
+            }, 400);
+        }
+        const item = getEntityByPath(db, path);
+        if (!item)
+            return c.json({ error: "not_found" }, 404);
+        return c.json({ item: toResponse(item) });
+    });
+    return app;
+}
+export function buildEntitiesRoutesDepsFromApi(deps) {
+    return { db: deps.db };
+}
+//# sourceMappingURL=entities.js.map

package/dist/api/routes/entities.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"entities.js","sourceRoot":"","sources":["../../../src/api/routes/entities.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AACvD,OAAO,EACL,4BAA4B,EAC5B,oBAAoB,EACpB,uBAAuB,EACvB,eAAe,GAEhB,MAAM,4BAA4B,CAAC;AAGpC;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,MAAM,WAAW,GAAG,qBAAqB,CAAC;AAc1C,SAAS,UAAU,CAAC,MAAoB;IACtC,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,OAAO,EAAE,MAAM,CAAC,OAAO;KACxB,CAAC;AACJ,CAAC;AAMD,MAAM,UAAU,oBAAoB,CAAC,IAAwB;IAC3D,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC;IAEpB,4DAA4D;IAC5D,mEAAmE;IACnE,mEAAmE;IACnE,QAAQ;IACR,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,EAAE;QACzB,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACrC,MAAM,UAAU,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACrC,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACjC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC;QACxC,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAEtC,MAAM,QAAQ,GAAG,MAAM,KAAK,SAAS,IAAI,UAAU,KAAK,SAAS,CAAC;QAClE,MAAM,QAAQ,GAAG,MAAM,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS;YACzD,IAAI,KAAK,SAAS,CAAC;QAErB,IAAI,QAAQ,IAAI,QAAQ,EAAE,CAAC;YACzB,OAAO,CAAC,CAAC,IAAI,CACX;gBACE,KAAK,EAAE,iBAAiB;gBACxB,OAAO,EACL,qEAAqE;aACxE,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC3B,OAAO,CAAC,CAAC,IAAI,CACX;gBACE,KAAK,EAAE,eAAe;gBACtB,OAAO,EACL,wEAAwE;aAC3E,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,IAAI,QAAQ,EAAE,CAAC;YACb,iEAAiE;YACjE,iEAAiE;YACjE,sDAAsD;YACtD,6DAA6D;YAC7D,IAAI,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;gBAC1B,IAAI,KAAyB,CAAC;gBAC9B,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;oBAC3B,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;oBACxC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;wBACjC,OAAO,CAAC,CAAC,IAAI,CACX;4BACE,KAAK,EAAE,kBAAkB;4BACzB,OAAO,EAAE,oCAAoC;yBAC9C,EACD,GAAG,CACJ,CAAC;oBACJ,CAAC;oBACD,KAAK,GAAG,CAAC,CAAC;gBACZ,CAAC;gBACD,MAAM,KAAK,GAAG,uBAAuB,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;gBACzD,OAAO,CAAC,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,CAAC;oBACP,IAAI,EAAE,eAAe;oBACrB,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC;iBAC7B,CAAC,CAAC;YACL,CAAC;YACD,IAAI,CAAC,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;gBAC3B,OAAO,CAAC,CAAC,IAAI,CACX;oBACE,KAAK,EAAE,kBAAkB;oBACzB,OAAO,EACL,8IAA8I;iBACjJ,EACD,GAAG,CACJ,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,GAAG,oBAAoB,CAAC,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;YAC3D,OAAO,CAAC,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,CAAC;gBACP,IAAI,EAAE,OAAO;gBACb,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC;aAC7B,CAAC,CAAC;QACL,CAAC;QAED,SAAS;QACT,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YAC9B,OAAO,CAAC,CAAC,IAAI,CACX;gBACE,KAAK,EAAE,kBAAkB;gBACzB,OAAO,EACL,sEAAsE;aACzE,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACtB,OAAO,CAAC,CAAC,IAAI,CACX;gBACE,KAAK,EAAE,kBAAkB;gBACzB,OAAO,EAAE,mBAAmB,MAAM,GAAG;aACtC,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,OAAO,CAAC,CAAC,IAAI,CACX;gBACE,KAAK,EAAE,kBAAkB;gBACzB,OAAO,EAAE,iBAAiB,IAAI,4CAA4C;aAC3E,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,OAAO,CAAC,CAAC,IAAI,CACX;gBACE,KAAK,EAAE,kBAAkB;gBACzB,OAAO,EAAE,+BAA+B;aACzC,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,IAAI,KAAyB,CAAC;QAC9B,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YACxC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBACjC,OAAO,CAAC,CAAC,IAAI,CACX;oBACE,KAAK,EAAE,kBAAkB;oBACzB,OAAO,EAAE,oCAAoC;iBAC9C,EACD,GAAG,CACJ,CAAC;YACJ,CAAC;YACD,KAAK,GAAG,CAAC,CAAC;QACZ,CAAC;QAED,MAAM,KAAK,GAAG,4BAA4B,CAAC,EAAE,EAAE;YAC7C,MAAM;YACN,IAAI;YACJ,IAAI;YACJ,CAAC;YACD,KAAK;SACN,CAAC,CAAC;QACH,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,CAAC;YACP,CAAC,EAAE,CAAC,IAAI,IAAI;YACZ,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC;SAC7B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,+DAA+D;IAC/D,GAAG,CAAC,GAAG,CAAC,mBAAmB,EAAE,CAAC,CAAC,EAAE,EAAE;QACjC,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACjC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,CAAC,CAAC,IAAI,CACX;gBACE,KAAK,EAAE,eAAe;gBACtB,OAAO,EAAE,4DAA4D;aACtE,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,eAAe,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC,IAAI;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,GAAG,CAAC,CAAC;QACtD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,IAAqB;IAErB,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;AACzB,CAAC"}

package/dist/api/routes/git-accounts.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Git accounts API (P5 §"Multi-account remotes").
+ *
+ * The dashboard manages a registry of named credentials at
+ * `config.gitAccounts[<alias>]`. Each entry chooses one of two auth
+ * modes:
+ *   • `gh-cli-profile`: reuse a `gh auth login` profile already on the
+ *     machine. The token is fetched on demand via
+ *     `gh auth token --user <ghProfile> --hostname <host>`.
+ *   • `pat-keychain`: a personal access token the user pasted into the
+ *     dashboard. Stored in the OS keychain at `git.account.<alias>`
+ *     (typed `ScopedSecretName` in `secret-names.ts`); fetched via
+ *     `SecretBroker.getScoped(...)`.
+ *
+ * All CRUD here is Approve-tier (Bearer required). Secrets never appear
+ * in any response body — the GET payload reports `tokenStored: boolean`
+ * for `pat-keychain` aliases so the dashboard can render a populated
+ * vs empty state without reading the secret.
+ */
+import { Hono } from "hono";
+import type { ApiDependencies } from "../server.js";
+export declare function createGitAccountsRoutes(deps: ApiDependencies): Hono;
+//# sourceMappingURL=git-accounts.d.ts.map

package/dist/api/routes/git-accounts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-accounts.d.ts","sourceRoot":"","sources":["../../../src/api/routes/git-accounts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAmB5B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAuBpD,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,eAAe,GAAG,IAAI,CAmBnE"}

package/dist/api/routes/git-accounts.js

@@ -0,0 +1,227 @@
+/**
+ * Git accounts API (P5 §"Multi-account remotes").
+ *
+ * The dashboard manages a registry of named credentials at
+ * `config.gitAccounts[<alias>]`. Each entry chooses one of two auth
+ * modes:
+ *   • `gh-cli-profile`: reuse a `gh auth login` profile already on the
+ *     machine. The token is fetched on demand via
+ *     `gh auth token --user <ghProfile> --hostname <host>`.
+ *   • `pat-keychain`: a personal access token the user pasted into the
+ *     dashboard. Stored in the OS keychain at `git.account.<alias>`
+ *     (typed `ScopedSecretName` in `secret-names.ts`); fetched via
+ *     `SecretBroker.getScoped(...)`.
+ *
+ * All CRUD here is Approve-tier (Bearer required). Secrets never appear
+ * in any response body — the GET payload reports `tokenStored: boolean`
+ * for `pat-keychain` aliases so the dashboard can render a populated
+ * vs empty state without reading the secret.
+ */
+import { Hono } from "hono";
+import { applyConfigUpdates, } from "../env-writer.js";
+import { createSettingsStore, } from "../../settings/settings-store.js";
+import { GIT_ACCOUNT_ALIAS_PATTERN, gitAccountSchema, } from "../../settings/runtime-settings.js";
+import { GitAccountRegistry, probeGitAccount, } from "../../services/git-account-registry.js";
+import { scopedSecretName } from "../../secrets/secret-names.js";
+import { createLogger, toSafeErrorMessage } from "../../logging.js";
+import { readJsonBody } from "../json-body.js";
+const logger = createLogger("git-accounts-api");
+const ALIAS_MAX_LENGTH = 40;
+const TOKEN_MAX_BYTES = 4096; // PATs are < 100 chars; 4KiB is generous + safe.
+function isValidAlias(value) {
+    /* c8 ignore next -- unreachable via HTTP: Hono path params are always non-empty strings */
+    if (!value)
+        return false;
+    if (value.length === 0 || value.length > ALIAS_MAX_LENGTH)
+        return false;
+    return GIT_ACCOUNT_ALIAS_PATTERN.test(value);
+}
+export function createGitAccountsRoutes(deps) {
+    const settingsStore = createSettingsStore(deps.db);
+    // Prefer the daemon-built registry threaded through ApiDependencies
+    // so observers and the probe endpoint share one instance (and one
+    // askpass-materialization latch). Tests that mount the route in
+    // isolation can fall through to a locally-built stand-in.
+    const registry = deps.gitAccountRegistry
+        ?? new GitAccountRegistry({
+            dataDir: deps.config.dataDir,
+            secretBroker: deps.secretBroker,
+            getAccounts: () => deps.config.gitAccounts,
+        });
+    return wireRoutes({
+        config: deps.config,
+        secretBroker: deps.secretBroker,
+        settingsStore,
+        registry,
+    });
+}
+function wireRoutes(deps) {
+    const app = new Hono();
+    /**
+     * GET /api/git-accounts — list all accounts. Returns metadata only;
+     * no token values or `gh` CLI output.
+     */
+    app.get("/git-accounts", async (c) => {
+        const aliases = Object.entries(deps.config.gitAccounts ?? {}).map(([alias, account]) => ({ alias, account }));
+        aliases.sort((a, b) => a.alias.localeCompare(b.alias));
+        const enriched = await Promise.all(aliases.map(async ({ alias, account }) => {
+            const tokenStored = account.authMode === "pat-keychain"
+                ? await deps.secretBroker.hasScoped(scopedSecretName("git.account", alias))
+                : null;
+            return {
+                alias,
+                type: account.type,
+                authMode: account.authMode,
+                ghProfile: account.ghProfile ?? null,
+                host: account.host || "github.com",
+                tokenStored,
+            };
+        }));
+        return c.json({ accounts: enriched });
+    });
+    /** GET /api/git-accounts/:alias — single-account read. */
+    app.get("/git-accounts/:alias", async (c) => {
+        const alias = c.req.param("alias");
+        if (!isValidAlias(alias)) {
+            return c.json({ error: "invalid_alias" }, 400);
+        }
+        const account = deps.config.gitAccounts?.[alias];
+        if (!account)
+            return c.json({ error: "not_found" }, 404);
+        const tokenStored = account.authMode === "pat-keychain"
+            ? await deps.secretBroker.hasScoped(scopedSecretName("git.account", alias))
+            : null;
+        return c.json({
+            alias,
+            type: account.type,
+            authMode: account.authMode,
+            ghProfile: account.ghProfile ?? null,
+            host: account.host || "github.com",
+            tokenStored,
+        });
+    });
+    /**
+     * PUT /api/git-accounts/:alias — upsert metadata + (optional)
+     * inline-token write. The Zod-derived `gitAccountSchema` validates
+     * the body shape; `applyConfigUpdates` re-validates the entire
+     * `gitAccounts` record so a malformed entry rejects atomically.
+     *
+     * Body shape:
+     *   { type, authMode, ghProfile?, host?, token? }
+     *
+     * `token` is optional — if present, it's written to the keychain at
+     * `git.account.<alias>` and stripped from the persisted record.
+     * Future updates that omit `token` keep the previously-stored secret.
+     */
+    app.put("/git-accounts/:alias", async (c) => {
+        const alias = c.req.param("alias");
+        if (!isValidAlias(alias)) {
+            return c.json({ error: "invalid_alias" }, 400);
+        }
+        const parsed = await readJsonBody(c, { maxBytes: TOKEN_MAX_BYTES });
+        if (!parsed.ok)
+            return parsed.response;
+        const body = parsed.body;
+        const tokenRaw = body.token;
+        const tokenString = typeof tokenRaw === "string" ? tokenRaw : undefined;
+        if (tokenString !== undefined && tokenString.length === 0) {
+            return c.json({ error: "invalid_body", message: "token must be non-empty when supplied" }, 400);
+        }
+        // Strip `token` before schema validation — it isn't part of the
+        // persisted shape; it routes to the keychain instead.
+        const candidate = { ...body };
+        delete candidate.token;
+        const accountParse = gitAccountSchema.safeParse(candidate);
+        if (!accountParse.success) {
+            return c.json({
+                error: "invalid_body",
+                issues: accountParse.error.issues,
+            }, 400);
+        }
+        const next = accountParse.data;
+        if (next.authMode === "pat-keychain" && !tokenString) {
+            const existing = await deps.secretBroker.hasScoped(scopedSecretName("git.account", alias));
+            if (!existing) {
+                return c.json({
+                    error: "token_required",
+                    message: "pat-keychain accounts require a token on first creation; supply 'token' in the body.",
+                }, 400);
+            }
+        }
+        const merged = {
+            ...(deps.config.gitAccounts ?? {}),
+            [alias]: next,
+        };
+        const result = await applyConfigUpdates(deps.config, deps.settingsStore, { gitAccounts: merged });
+        if (Object.keys(result.errors).length > 0) {
+            return c.json({ error: "validation_failed", errors: result.errors }, 400);
+        }
+        if (tokenString) {
+            try {
+                await deps.secretBroker.setScoped(scopedSecretName("git.account", alias), tokenString);
+            }
+            catch (err) {
+                logger.error({ alias, err }, "Failed to write git account token to keychain");
+                return c.json({ error: "secret_write_failed", message: toSafeErrorMessage(err) }, 500);
+            }
+        }
+        logger.info({ alias, authMode: next.authMode, tokenWritten: Boolean(tokenString) }, "Git account upserted");
+        return c.json({ ok: true, alias });
+    });
+    /**
+     * DELETE /api/git-accounts/:alias — remove the metadata entry AND
+     * delete the keychain secret if present. Repos still pointing at the
+     * alias keep polling without env injection (see the resolver fallback
+     * in observers/git-watcher.ts and observers/github-poller.ts).
+     */
+    app.delete("/git-accounts/:alias", async (c) => {
+        const alias = c.req.param("alias");
+        if (!isValidAlias(alias)) {
+            return c.json({ error: "invalid_alias" }, 400);
+        }
+        if (!deps.config.gitAccounts?.[alias]) {
+            return c.json({ error: "not_found" }, 404);
+        }
+        const remaining = { ...deps.config.gitAccounts };
+        delete remaining[alias];
+        const result = await applyConfigUpdates(deps.config, deps.settingsStore, {
+            gitAccounts: remaining,
+        });
+        if (Object.keys(result.errors).length > 0) {
+            return c.json({ error: "validation_failed", errors: result.errors }, 400);
+        }
+        try {
+            await deps.secretBroker.deleteScoped(scopedSecretName("git.account", alias));
+        }
+        catch (err) {
+            // Secret deletion failures are non-fatal — the metadata is gone, so
+            // the keychain entry is now an orphan but inert. Log so an operator
+            // can clean up if they care.
+            logger.warn({ alias, err }, "Git account metadata removed, keychain delete failed");
+        }
+        logger.info({ alias }, "Git account removed");
+        return c.json({ ok: true, alias });
+    });
+    /**
+     * POST /api/git-accounts/:alias/probe — verify credentials by calling
+     * `gh api user --hostname X` with the resolved env. Returns the
+     * authenticated login on success so the dashboard can warn when
+     * `ghProfile` doesn't match the active account on the host.
+     */
+    app.post("/git-accounts/:alias/probe", async (c) => {
+        const alias = c.req.param("alias");
+        if (!isValidAlias(alias)) {
+            return c.json({ error: "invalid_alias" }, 400);
+        }
+        if (!deps.config.gitAccounts?.[alias]) {
+            return c.json({ error: "not_found" }, 404);
+        }
+        const result = await probeGitAccount(deps.registry, alias);
+        if (result.ok) {
+            return c.json({ ok: true, login: result.login, host: result.host });
+        }
+        return c.json({ ok: false, reason: result.reason }, 200);
+    });
+    return app;
+}
+//# sourceMappingURL=git-accounts.js.map

package/dist/api/routes/git-accounts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-accounts.js","sourceRoot":"","sources":["../../../src/api/routes/git-accounts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EACL,kBAAkB,GAEnB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,mBAAmB,GAEpB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,yBAAyB,EACzB,gBAAgB,GAEjB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,kBAAkB,EAClB,eAAe,GAChB,MAAM,wCAAwC,CAAC;AAChD,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AAEjE,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACpE,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C,MAAM,MAAM,GAAG,YAAY,CAAC,kBAAkB,CAAC,CAAC;AAEhD,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAC5B,MAAM,eAAe,GAAG,IAAI,CAAC,CAAC,iDAAiD;AAE/E,SAAS,YAAY,CAAC,KAAyB;IAC7C,2FAA2F;IAC3F,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,gBAAgB;QAAE,OAAO,KAAK,CAAC;IACxE,OAAO,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC/C,CAAC;AASD,MAAM,UAAU,uBAAuB,CAAC,IAAqB;IAC3D,MAAM,aAAa,GAAG,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACnD,oEAAoE;IACpE,kEAAkE;IAClE,gEAAgE;IAChE,0DAA0D;IAC1D,MAAM,QAAQ,GACZ,IAAI,CAAC,kBAAkB;WACpB,IAAI,kBAAkB,CAAC;YACxB,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;YAC5B,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,WAAW,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW;SAC3C,CAAC,CAAC;IACL,OAAO,UAAU,CAAC;QAChB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,aAAa;QACb,QAAQ;KACT,CAAC,CAAC;AACL,CAAC;AAED,SAAS,UAAU,CAAC,IAA0B;IAC5C,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IAEvB;;;OAGG;IACH,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACnC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,GAAG,CAC/D,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAC3C,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QACvD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAChC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;YACvC,MAAM,WAAW,GACf,OAAO,CAAC,QAAQ,KAAK,cAAc;gBACjC,CAAC,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,CAC/B,gBAAgB,CAAC,aAAa,EAAE,KAAK,CAAC,CACvC;gBACH,CAAC,CAAC,IAAI,CAAC;YACX,OAAO;gBACL,KAAK;gBACL,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,IAAI;gBACpC,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,YAAY;gBAClC,WAAW;aACZ,CAAC;QACJ,CAAC,CAAC,CACH,CAAC;QACF,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,0DAA0D;IAC1D,GAAG,CAAC,GAAG,CAAC,sBAAsB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC1C,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,GAAG,CAAC,CAAC;QACjD,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC;QACjD,IAAI,CAAC,OAAO;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,GAAG,CAAC,CAAC;QACzD,MAAM,WAAW,GACf,OAAO,CAAC,QAAQ,KAAK,cAAc;YACjC,CAAC,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,CAC/B,gBAAgB,CAAC,aAAa,EAAE,KAAK,CAAC,CACvC;YACH,CAAC,CAAC,IAAI,CAAC;QACX,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,KAAK;YACL,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,IAAI;YACpC,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,YAAY;YAClC,WAAW;SACZ,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH;;;;;;;;;;;;OAYG;IACH,GAAG,CAAC,GAAG,CAAC,sBAAsB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC1C,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,GAAG,CAAC,CAAC;QACjD,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC,CAAC;QACpE,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC,QAAQ,CAAC;QACvC,MAAM,IAAI,GAAG,MAAM,CAAC,IAA+B,CAAC;QACpD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC;QAC5B,MAAM,WAAW,GAAG,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;QACxE,IAAI,WAAW,KAAK,SAAS,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1D,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,uCAAuC,EAAE,EAC3E,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,gEAAgE;QAChE,sDAAsD;QACtD,MAAM,SAAS,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;QAC9B,OAAO,SAAS,CAAC,KAAK,CAAC;QACvB,MAAM,YAAY,GAAG,gBAAgB,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAC3D,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;YAC1B,OAAO,CAAC,CAAC,IAAI,CACX;gBACE,KAAK,EAAE,cAAc;gBACrB,MAAM,EAAE,YAAY,CAAC,KAAK,CAAC,MAAM;aAClC,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAsB,YAAY,CAAC,IAAI,CAAC;QAClD,IAAI,IAAI,CAAC,QAAQ,KAAK,cAAc,IAAI,CAAC,WAAW,EAAE,CAAC;YACrD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,CAChD,gBAAgB,CAAC,aAAa,EAAE,KAAK,CAAC,CACvC,CAAC;YACF,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,CAAC,CAAC,IAAI,CACX;oBACE,KAAK,EAAE,gBAAgB;oBACvB,OAAO,EACL,sFAAsF;iBACzF,EACD,GAAG,CACJ,CAAC;YACJ,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAG;YACb,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC;YAClC,CAAC,KAAK,CAAC,EAAE,IAAI;SACd,CAAC;QACF,MAAM,MAAM,GAAuB,MAAM,kBAAkB,CACzD,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,aAAa,EAClB,EAAE,WAAW,EAAE,MAAM,EAAE,CACxB,CAAC;QACF,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1C,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,EACrD,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,IAAI,WAAW,EAAE,CAAC;YAChB,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,CAC/B,gBAAgB,CAAC,aAAa,EAAE,KAAK,CAAC,EACtC,WAAW,CACZ,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,KAAK,CACV,EAAE,KAAK,EAAE,GAAG,EAAE,EACd,+CAA+C,CAChD,CAAC;gBACF,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,qBAAqB,EAAE,OAAO,EAAE,kBAAkB,CAAC,GAAG,CAAC,EAAE,EAClE,GAAG,CACJ,CAAC;YACJ,CAAC;QACH,CAAC;QAED,MAAM,CAAC,IAAI,CACT,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,YAAY,EAAE,OAAO,CAAC,WAAW,CAAC,EAAE,EACtE,sBAAsB,CACvB,CAAC;QACF,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH;;;;;OAKG;IACH,GAAG,CAAC,MAAM,CAAC,sBAAsB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC7C,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,GAAG,CAAC,CAAC;QACjD,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;YACtC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,GAAG,CAAC,CAAC;QAC7C,CAAC;QACD,MAAM,SAAS,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QACjD,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC;QACxB,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,aAAa,EAAE;YACvE,WAAW,EAAE,SAAS;SACvB,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1C,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,EACrD,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,YAAY,CAAC,YAAY,CAClC,gBAAgB,CAAC,aAAa,EAAE,KAAK,CAAC,CACvC,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,oEAAoE;YACpE,oEAAoE;YACpE,6BAA6B;YAC7B,MAAM,CAAC,IAAI,CACT,EAAE,KAAK,EAAE,GAAG,EAAE,EACd,sDAAsD,CACvD,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,qBAAqB,CAAC,CAAC;QAC9C,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH;;;;;OAKG;IACH,GAAG,CAAC,IAAI,CAAC,4BAA4B,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACjD,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,GAAG,CAAC,CAAC;QACjD,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;YACtC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,GAAG,CAAC,CAAC;QAC7C,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC3D,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;YACd,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACtE,CAAC;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/api/routes/git-templates.d.ts

@@ -0,0 +1,50 @@
+/**
+ * Git project document template editor + Re-template (P6 Decision 8).
+ *
+ * Three concerns share one route file because they are one workflow:
+ *
+ *   1. **Template editor.** `GET / PUT /api/git/templates/:kind` reads
+ *      and writes `<dataDir>/templates/{project,git-repo}.md`. Reads
+ *      additionally surface the bundled body so the dashboard can show
+ *      a "reset to bundled" affordance and a per-side diff.
+ *
+ *   2. **Apply.** `POST /api/git/templates/:kind/apply` enumerates the
+ *      target context files for the kind, atomically backs every one of
+ *      them up under `<dataDir>/backups/templates/<safeIso>/`,
+ *      initializes the status grid in `runtime_state`, and inserts a
+ *      single `agent_schedule.task_type='git.project.retemplate'` row.
+ *      A second concurrent invocation gets 409 with the in-flight
+ *      schedule id so the dashboard can render "already running" state.
+ *
+ *   3. **Status surface + per-file reporter.** `GET /api/git/templates/retemplate/status`
+ *      returns the live status grid for the dashboard. `POST /api/git/templates/retemplate/file`
+ *      is what the agent calls to report per-file progress; each call
+ *      updates the status grid, and on terminal status (`completed`,
+ *      `skipped`, `failed`) it also emits one `agent_actions` audit row
+ *      tagged `action_type='git.project.retemplate'`. `started` updates
+ *      the grid only — it is a work-begin marker that the daemon's
+ *      finalize hook needs to know about for rollback, but not a
+ *      per-file outcome the audit log should record (audit rows count
+ *      outcomes, not work-begin pings).
+ *
+ * Risk-tier split (see risk-classifier.ts §"Git templates"):
+ *
+ *   • Editor (`GET / PUT /:kind`), apply (`POST /:kind/apply`), and
+ *     status (`GET /retemplate/status`) are dashboard-driven and stay
+ *     Approve-tier (Bearer required).
+ *   • The per-file reporter (`POST /retemplate/file`) is the exception:
+ *     the re-template task-flow runs as an autonomous session and posts
+ *     over curl from the session workdir, which carries no Bearer. The
+ *     classifier has an exact-match `Autonomous` override for this path.
+ */
+import { Hono } from "hono";
+import type Database from "better-sqlite3";
+import type { AgentConfig } from "../../config.js";
+export interface GitTemplatesRouteDependencies {
+    db: Database.Database;
+    config: AgentConfig;
+    /** Resolves the active context root (vault or `<dataDir>/context`). */
+    getContextDir: () => string;
+}
+export declare function createGitTemplatesRoutes(deps: GitTemplatesRouteDependencies): Hono;
+//# sourceMappingURL=git-templates.d.ts.map

package/dist/api/routes/git-templates.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-templates.d.ts","sourceRoot":"","sources":["../../../src/api/routes/git-templates.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAgB5B,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAC3C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAmBnD,MAAM,WAAW,6BAA6B;IAC5C,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;IACtB,MAAM,EAAE,WAAW,CAAC;IACpB,uEAAuE;IACvE,aAAa,EAAE,MAAM,MAAM,CAAC;CAC7B;AAED,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,6BAA6B,GAClC,IAAI,CAiRN"}