@aitne/daemon 0.1.0

package/dist/api/routes/git-templates.js

@@ -0,0 +1,276 @@
+/**
+ * Git project document template editor + Re-template (P6 Decision 8).
+ *
+ * Three concerns share one route file because they are one workflow:
+ *
+ *   1. **Template editor.** `GET / PUT /api/git/templates/:kind` reads
+ *      and writes `<dataDir>/templates/{project,git-repo}.md`. Reads
+ *      additionally surface the bundled body so the dashboard can show
+ *      a "reset to bundled" affordance and a per-side diff.
+ *
+ *   2. **Apply.** `POST /api/git/templates/:kind/apply` enumerates the
+ *      target context files for the kind, atomically backs every one of
+ *      them up under `<dataDir>/backups/templates/<safeIso>/`,
+ *      initializes the status grid in `runtime_state`, and inserts a
+ *      single `agent_schedule.task_type='git.project.retemplate'` row.
+ *      A second concurrent invocation gets 409 with the in-flight
+ *      schedule id so the dashboard can render "already running" state.
+ *
+ *   3. **Status surface + per-file reporter.** `GET /api/git/templates/retemplate/status`
+ *      returns the live status grid for the dashboard. `POST /api/git/templates/retemplate/file`
+ *      is what the agent calls to report per-file progress; each call
+ *      updates the status grid, and on terminal status (`completed`,
+ *      `skipped`, `failed`) it also emits one `agent_actions` audit row
+ *      tagged `action_type='git.project.retemplate'`. `started` updates
+ *      the grid only — it is a work-begin marker that the daemon's
+ *      finalize hook needs to know about for rollback, but not a
+ *      per-file outcome the audit log should record (audit rows count
+ *      outcomes, not work-begin pings).
+ *
+ * Risk-tier split (see risk-classifier.ts §"Git templates"):
+ *
+ *   • Editor (`GET / PUT /:kind`), apply (`POST /:kind/apply`), and
+ *     status (`GET /retemplate/status`) are dashboard-driven and stay
+ *     Approve-tier (Bearer required).
+ *   • The per-file reporter (`POST /retemplate/file`) is the exception:
+ *     the re-template task-flow runs as an autonomous session and posts
+ *     over curl from the session workdir, which carries no Bearer. The
+ *     classifier has an exact-match `Autonomous` override for this path.
+ */
+import { Hono } from "hono";
+import { persistPerFileStatus, prepareRetemplateRun, readRetemplateStatus, readTemplateBody, templateFilePath, writeTemplateBody, } from "../../core/template-store.js";
+import { normalizeGitWatchedRepos, readBundledGitProjectDocTemplate, } from "../../core/git-project-docs.js";
+import { selectGitWatchedRepos } from "../../db/repositories-store.js";
+import { existsSync, readFileSync } from "node:fs";
+import { createLogger, toSafeErrorMessage } from "../../logging.js";
+import { readJsonBody } from "../json-body.js";
+const logger = createLogger("git-templates-api");
+const TEMPLATE_BODY_MAX_BYTES = 64 * 1024;
+const REPORT_BODY_MAX_BYTES = 4 * 1024;
+const SLUG_PATTERN = /^[a-z0-9][a-z0-9-]*[a-z0-9]$|^[a-z0-9]$/;
+function parseKind(kind) {
+    return kind === "project" || kind === "git-repo" ? kind : null;
+}
+const VALID_REPORT_STATUSES = new Set(["started", "completed", "skipped", "failed"]);
+export function createGitTemplatesRoutes(deps) {
+    const app = new Hono();
+    /* ── Editor ───────────────────────────────────────────────────────── */
+    app.get("/git/templates/:kind", (c) => {
+        const kind = parseKind(c.req.param("kind"));
+        if (!kind)
+            return c.json({ error: "invalid_kind" }, 400);
+        try {
+            const overridePath = templateFilePath(deps.config.dataDir, kind);
+            const hasOverride = existsSync(overridePath);
+            const overrideBody = hasOverride
+                ? readFileSync(overridePath, "utf-8")
+                : null;
+            // Bundled body — independent of the override layer so the
+            // dashboard can render a "reset to bundled" affordance.
+            const bundledBody = readBundledGitProjectDocTemplate(deps.config.workspaceDir, kind === "project" ? "project" : "repo-only");
+            const activeBody = readTemplateBody(deps.config.dataDir, deps.config.workspaceDir, kind);
+            return c.json({
+                kind,
+                active: activeBody,
+                bundled: bundledBody,
+                override: overrideBody,
+                hasOverride,
+                path: overridePath,
+            });
+        }
+        catch (err) {
+            logger.error({ kind, err }, "Failed to read git template");
+            return c.json({ error: "read_failed", message: toSafeErrorMessage(err) }, 500);
+        }
+    });
+    app.put("/git/templates/:kind", async (c) => {
+        const kind = parseKind(c.req.param("kind"));
+        if (!kind)
+            return c.json({ error: "invalid_kind" }, 400);
+        const parsed = await readJsonBody(c, { maxBytes: TEMPLATE_BODY_MAX_BYTES });
+        if (!parsed.ok)
+            return parsed.response;
+        const body = parsed.body;
+        if (typeof body.content !== "string") {
+            return c.json({ error: "content_required" }, 400);
+        }
+        try {
+            const result = writeTemplateBody(deps.config.dataDir, kind, body.content);
+            logger.info({ kind, bytes: result.bytes }, "Git template override written");
+            return c.json({
+                ok: true,
+                kind,
+                bytes: result.bytes,
+                path: templateFilePath(deps.config.dataDir, kind),
+            });
+        }
+        catch (err) {
+            const code = err.code;
+            /* c8 ignore start — readJsonBody caps the request at the same
+               TEMPLATE_BODY_MAX_BYTES, so any payload that reaches
+               writeTemplateBody is already within the cap. The ETEMPLATE_BODY_TOO_LARGE
+               branch stays as defense-in-depth in case the cap is later relaxed
+               on either side. */
+            if (code === "ETEMPLATE_BODY_TOO_LARGE") {
+                return c.json({
+                    error: "body_too_large",
+                    maxBytes: TEMPLATE_BODY_MAX_BYTES,
+                }, 413);
+            }
+            /* c8 ignore stop */
+            logger.error({ kind, err }, "Failed to write git template");
+            return c.json({ error: "write_failed", message: toSafeErrorMessage(err) }, 500);
+        }
+    });
+    /* ── Apply (enqueue retemplate run) ───────────────────────────────── */
+    app.post("/git/templates/:kind/apply", (c) => {
+        const kind = parseKind(c.req.param("kind"));
+        if (!kind)
+            return c.json({ error: "invalid_kind" }, 400);
+        const repos = normalizeGitWatchedRepos({
+            gitWatchedRepos: selectGitWatchedRepos(deps.db),
+        });
+        const result = prepareRetemplateRun({
+            db: deps.db,
+            dataDir: deps.config.dataDir,
+            workspaceDir: deps.config.workspaceDir,
+            contextDir: deps.getContextDir(),
+            kind,
+            repos,
+        });
+        if (result.ok) {
+            logger.info({
+                kind,
+                scheduleId: result.scheduleId,
+                targets: result.targets.length,
+                backupRoot: result.backupRoot,
+            }, "Retemplate run prepared");
+            return c.json({
+                ok: true,
+                kind,
+                scheduleId: result.scheduleId,
+                correlationId: result.correlationId,
+                backupRoot: result.backupRoot,
+                targets: result.targets.map((t) => ({
+                    slug: t.slug,
+                    contextFile: t.contextFile,
+                    backupRelPath: t.backupRelPath,
+                })),
+            });
+        }
+        if (result.reason === "in_progress") {
+            return c.json({
+                error: "in_progress",
+                scheduleId: result.detail.scheduleId,
+                correlationId: result.detail.correlationId ?? null,
+            }, 409);
+        }
+        if (result.reason === "missing_template") {
+            return c.json({ error: "missing_template", kind }, 412);
+        }
+        return c.json({ error: "no_targets", kind }, 422);
+    });
+    /* ── Status surface ───────────────────────────────────────────────── */
+    app.get("/git/templates/retemplate/status", (c) => {
+        const record = readRetemplateStatus(deps.db);
+        return c.json({ status: record });
+    });
+    /* ── Per-file reporter (called by the agent task-flow) ────────────── */
+    app.post("/git/templates/retemplate/file", async (c) => {
+        const parsed = await readJsonBody(c, { maxBytes: REPORT_BODY_MAX_BYTES });
+        if (!parsed.ok)
+            return parsed.response;
+        const body = parsed.body;
+        if (typeof body.slug !== "string" || !SLUG_PATTERN.test(body.slug)) {
+            return c.json({ error: "invalid_slug" }, 400);
+        }
+        if (typeof body.status !== "string"
+            || !VALID_REPORT_STATUSES.has(body.status)) {
+            return c.json({ error: "invalid_status" }, 400);
+        }
+        const slug = body.slug;
+        const status = body.status;
+        const persisted = persistPerFileStatus({
+            db: deps.db,
+            slug,
+            status,
+            ...(typeof body.reason === "string" ? { reason: body.reason } : {}),
+            ...(typeof body.error === "string" ? { error: body.error } : {}),
+            ...(typeof body.beforeBytes === "number"
+                ? { beforeBytes: body.beforeBytes }
+                : {}),
+            ...(typeof body.afterBytes === "number"
+                ? { afterBytes: body.afterBytes }
+                : {}),
+            ...(typeof body.correlationId === "string"
+                ? { correlationId: body.correlationId }
+                : {}),
+        });
+        if (!persisted.ok) {
+            const code = persisted.reason === "no_active_run"
+                ? 409
+                : persisted.reason === "correlation_mismatch"
+                    ? 409
+                    : 404;
+            return c.json({ error: persisted.reason }, code);
+        }
+        // Per-file audit row — emitted only on terminal status so the audit
+        // log shows exactly one row per file (Decision 8 §2: "Audit row per
+        // file"). `started` updates the status grid (the daemon's finalize
+        // hook needs the marker to decide whether to restore from backup),
+        // but it is a work-begin ping, not an outcome — recording it would
+        // double the row count and pollute success/failed analytics. The
+        // child row reuses the run's `correlationId` as `event_id` so it
+        // stitches to the parent session row the dispatcher writes for the
+        // scheduled task (the scheduler propagates `agent_schedule.correlation_id`
+        // onto `event.correlationId`, which the dispatcher then logs).
+        if (status === "completed"
+            || status === "failed"
+            || status === "skipped") {
+            const auditResult = status === "completed"
+                ? "success"
+                : status === "failed"
+                    ? "failed"
+                    : "skipped";
+            try {
+                const detail = JSON.stringify({
+                    slug,
+                    contextFile: persisted.entry.contextFile,
+                    backupRelPath: persisted.entry.backupRelPath,
+                    kind: persisted.record.kind,
+                    backupRoot: persisted.record.backupRoot,
+                    status,
+                    ...(persisted.entry.beforeBytes !== undefined
+                        ? { beforeBytes: persisted.entry.beforeBytes }
+                        : {}),
+                    ...(persisted.entry.afterBytes !== undefined
+                        ? { afterBytes: persisted.entry.afterBytes }
+                        : {}),
+                    ...(persisted.entry.reason ? { reason: persisted.entry.reason } : {}),
+                    ...(persisted.entry.error ? { error: persisted.entry.error } : {}),
+                });
+                const errorText = status === "failed"
+                    ? typeof body.error === "string"
+                        ? body.error
+                        : "unspecified"
+                    : null;
+                deps.db
+                    .prepare(`INSERT INTO agent_actions
+               (event_id, action_type, trigger, result, detail, error, started_at, completed_at)
+             VALUES (?, 'git.project.retemplate', 'autonomous', ?, ?, ?, datetime('now'), datetime('now'))`)
+                    .run(persisted.record.correlationId, auditResult, detail, errorText);
+            }
+            catch (err) {
+                logger.warn({ err, slug, status }, "Failed to write per-file retemplate audit row (status grid still updated)");
+            }
+        }
+        return c.json({
+            ok: true,
+            slug,
+            status,
+            record: persisted.record,
+        });
+    });
+    return app;
+}
+//# sourceMappingURL=git-templates.js.map

package/dist/api/routes/git-templates.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-templates.js","sourceRoot":"","sources":["../../../src/api/routes/git-templates.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,oBAAoB,EACpB,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,GAGlB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,wBAAwB,EACxB,gCAAgC,GACjC,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AAGvE,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACpE,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C,MAAM,MAAM,GAAG,YAAY,CAAC,mBAAmB,CAAC,CAAC;AAEjD,MAAM,uBAAuB,GAAG,EAAE,GAAG,IAAI,CAAC;AAC1C,MAAM,qBAAqB,GAAG,CAAC,GAAG,IAAI,CAAC;AACvC,MAAM,YAAY,GAAG,yCAAyC,CAAC;AAE/D,SAAS,SAAS,CAAC,IAAwB;IACzC,OAAO,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AACjE,CAAC;AAED,MAAM,qBAAqB,GAAsC,IAAI,GAAG,CAEtE,CAAC,SAAS,EAAE,WAAW,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC;AASjD,MAAM,UAAU,wBAAwB,CACtC,IAAmC;IAEnC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IAEvB,yEAAyE;IAEzE,GAAG,CAAC,GAAG,CAAC,sBAAsB,EAAE,CAAC,CAAC,EAAE,EAAE;QACpC,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5C,IAAI,CAAC,IAAI;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC;QACzD,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YACjE,MAAM,WAAW,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC;YAC7C,MAAM,YAAY,GAAG,WAAW;gBAC9B,CAAC,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC;gBACrC,CAAC,CAAC,IAAI,CAAC;YACT,0DAA0D;YAC1D,wDAAwD;YACxD,MAAM,WAAW,GAAG,gCAAgC,CAClD,IAAI,CAAC,MAAM,CAAC,YAAY,EACxB,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAC7C,CAAC;YACF,MAAM,UAAU,GAAG,gBAAgB,CACjC,IAAI,CAAC,MAAM,CAAC,OAAO,EACnB,IAAI,CAAC,MAAM,CAAC,YAAY,EACxB,IAAI,CACL,CAAC;YACF,OAAO,CAAC,CAAC,IAAI,CAAC;gBACZ,IAAI;gBACJ,MAAM,EAAE,UAAU;gBAClB,OAAO,EAAE,WAAW;gBACpB,QAAQ,EAAE,YAAY;gBACtB,WAAW;gBACX,IAAI,EAAE,YAAY;aACnB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,6BAA6B,CAAC,CAAC;YAC3D,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,kBAAkB,CAAC,GAAG,CAAC,EAAE,EAC1D,GAAG,CACJ,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,sBAAsB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC1C,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5C,IAAI,CAAC,IAAI;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC;QACzD,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,uBAAuB,EAAE,CAAC,CAAC;QAC5E,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC,QAAQ,CAAC;QACvC,MAAM,IAAI,GAAG,MAAM,CAAC,IAA6B,CAAC;QAClD,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YACrC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAAE,GAAG,CAAC,CAAC;QACpD,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YAC1E,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,EAAE,+BAA+B,CAAC,CAAC;YAC5E,OAAO,CAAC,CAAC,IAAI,CAAC;gBACZ,EAAE,EAAE,IAAI;gBACR,IAAI;gBACJ,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,IAAI,EAAE,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC;aAClD,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,GAAI,GAA6B,CAAC,IAAI,CAAC;YACjD;;;;iCAIqB;YACrB,IAAI,IAAI,KAAK,0BAA0B,EAAE,CAAC;gBACxC,OAAO,CAAC,CAAC,IAAI,CACX;oBACE,KAAK,EAAE,gBAAgB;oBACvB,QAAQ,EAAE,uBAAuB;iBAClC,EACD,GAAG,CACJ,CAAC;YACJ,CAAC;YACD,oBAAoB;YACpB,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,8BAA8B,CAAC,CAAC;YAC5D,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,kBAAkB,CAAC,GAAG,CAAC,EAAE,EAC3D,GAAG,CACJ,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,yEAAyE;IAEzE,GAAG,CAAC,IAAI,CAAC,4BAA4B,EAAE,CAAC,CAAC,EAAE,EAAE;QAC3C,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5C,IAAI,CAAC,IAAI;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC;QACzD,MAAM,KAAK,GAAG,wBAAwB,CAAC;YACrC,eAAe,EAAE,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC;SAChD,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,oBAAoB,CAAC;YAClC,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;YAC5B,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;YACtC,UAAU,EAAE,IAAI,CAAC,aAAa,EAAE;YAChC,IAAI;YACJ,KAAK;SACN,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;YACd,MAAM,CAAC,IAAI,CACT;gBACE,IAAI;gBACJ,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM;gBAC9B,UAAU,EAAE,MAAM,CAAC,UAAU;aAC9B,EACD,yBAAyB,CAC1B,CAAC;YACF,OAAO,CAAC,CAAC,IAAI,CAAC;gBACZ,EAAE,EAAE,IAAI;gBACR,IAAI;gBACJ,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,aAAa,EAAE,MAAM,CAAC,aAAa;gBACnC,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBAClC,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,WAAW,EAAE,CAAC,CAAC,WAAW;oBAC1B,aAAa,EAAE,CAAC,CAAC,aAAa;iBAC/B,CAAC,CAAC;aACJ,CAAC,CAAC;QACL,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;YACpC,OAAO,CAAC,CAAC,IAAI,CACX;gBACE,KAAK,EAAE,aAAa;gBACpB,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU;gBACpC,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,aAAa,IAAI,IAAI;aACnD,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,kBAAkB,EAAE,CAAC;YACzC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;QAC1D,CAAC;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,yEAAyE;IAEzE,GAAG,CAAC,GAAG,CAAC,kCAAkC,EAAE,CAAC,CAAC,EAAE,EAAE;QAChD,MAAM,MAAM,GAAG,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC7C,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,yEAAyE;IAEzE,GAAG,CAAC,IAAI,CAAC,gCAAgC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACrD,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,qBAAqB,EAAE,CAAC,CAAC;QAC1E,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC,QAAQ,CAAC;QACvC,MAAM,IAAI,GAAG,MAAM,CAAC,IAQnB,CAAC;QACF,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACnE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC;QAChD,CAAC;QACD,IACE,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ;eAC5B,CAAC,qBAAqB,CAAC,GAAG,CAAC,IAAI,CAAC,MAA8B,CAAC,EAClE,CAAC;YACD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,GAAG,CAAC,CAAC;QAClD,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACvB,MAAM,MAAM,GAAG,IAAI,CAAC,MAA8B,CAAC;QAEnD,MAAM,SAAS,GAAG,oBAAoB,CAAC;YACrC,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,IAAI;YACJ,MAAM;YACN,GAAG,CAAC,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnE,GAAG,CAAC,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,GAAG,CAAC,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ;gBACtC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE;gBACnC,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ;gBACrC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE;gBACjC,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,OAAO,IAAI,CAAC,aAAa,KAAK,QAAQ;gBACxC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE;gBACvC,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CAAC;QAEH,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;YAClB,MAAM,IAAI,GACR,SAAS,CAAC,MAAM,KAAK,eAAe;gBAClC,CAAC,CAAC,GAAG;gBACL,CAAC,CAAC,SAAS,CAAC,MAAM,KAAK,sBAAsB;oBAC3C,CAAC,CAAC,GAAG;oBACL,CAAC,CAAC,GAAG,CAAC;YACZ,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,CAAC;QACnD,CAAC;QAED,oEAAoE;QACpE,oEAAoE;QACpE,mEAAmE;QACnE,mEAAmE;QACnE,mEAAmE;QACnE,iEAAiE;QACjE,iEAAiE;QACjE,mEAAmE;QACnE,2EAA2E;QAC3E,+DAA+D;QAC/D,IACE,MAAM,KAAK,WAAW;eACnB,MAAM,KAAK,QAAQ;eACnB,MAAM,KAAK,SAAS,EACvB,CAAC;YACD,MAAM,WAAW,GACf,MAAM,KAAK,WAAW;gBACpB,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,MAAM,KAAK,QAAQ;oBACnB,CAAC,CAAC,QAAQ;oBACV,CAAC,CAAC,SAAS,CAAC;YAClB,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC;oBAC5B,IAAI;oBACJ,WAAW,EAAE,SAAS,CAAC,KAAK,CAAC,WAAW;oBACxC,aAAa,EAAE,SAAS,CAAC,KAAK,CAAC,aAAa;oBAC5C,IAAI,EAAE,SAAS,CAAC,MAAM,CAAC,IAAI;oBAC3B,UAAU,EAAE,SAAS,CAAC,MAAM,CAAC,UAAU;oBACvC,MAAM;oBACN,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS;wBAC3C,CAAC,CAAC,EAAE,WAAW,EAAE,SAAS,CAAC,KAAK,CAAC,WAAW,EAAE;wBAC9C,CAAC,CAAC,EAAE,CAAC;oBACP,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS;wBAC1C,CAAC,CAAC,EAAE,UAAU,EAAE,SAAS,CAAC,KAAK,CAAC,UAAU,EAAE;wBAC5C,CAAC,CAAC,EAAE,CAAC;oBACP,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACrE,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACnE,CAAC,CAAC;gBACH,MAAM,SAAS,GACb,MAAM,KAAK,QAAQ;oBACjB,CAAC,CAAC,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ;wBAC9B,CAAC,CAAC,IAAI,CAAC,KAAK;wBACZ,CAAC,CAAC,aAAa;oBACjB,CAAC,CAAC,IAAI,CAAC;gBACX,IAAI,CAAC,EAAE;qBACJ,OAAO,CACN;;2GAE+F,CAChG;qBACA,GAAG,CACF,SAAS,CAAC,MAAM,CAAC,aAAa,EAC9B,WAAW,EACX,MAAM,EACN,SAAS,CACV,CAAC;YACN,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,IAAI,CACT,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,EACrB,2EAA2E,CAC5E,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,EAAE,EAAE,IAAI;YACR,IAAI;YACJ,MAAM;YACN,MAAM,EAAE,SAAS,CAAC,MAAM;SACzB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/api/routes/git.d.ts

@@ -0,0 +1,34 @@
+import { Hono } from "hono";
+import type Database from "better-sqlite3";
+export interface GitRouteDependencies {
+    /**
+     * Database for resolving the unified `repositories` table. Optional
+     * only because some tests construct the route with a static
+     * `allowedRepos` allowlist instead of seeding the DB; production
+     * always passes `db`.
+     */
+    db?: Database.Database;
+    /**
+     * Optional: when set, augments the unified-store allowlist. Tests use
+     * this so they don't need to seed the table for every call. Production
+     * code should pass `db` only and rely on the store.
+     */
+    allowedRepos?: string[];
+}
+/**
+ * Git API routes — read-only proxy for configured repositories.
+ *
+ * GET /git/log   — recent commit log
+ * GET /git/diff  — diff between refs
+ * GET /git/show  — show a specific commit
+ *
+ * `?repo=` accepts:
+ *   - an absolute filesystem path that appears in the unified
+ *     `repositories` table with a non-null `local_path`,
+ *   - a repository id (e.g. "github:acme/widgets" or "local:abc123…").
+ *
+ * GitHub-only repositories (no local clone) 404 with a helpful error.
+ * Refs and hashes are sanitized to prevent shell injection.
+ */
+export declare function createGitRoutes(deps: GitRouteDependencies): Hono;
+//# sourceMappingURL=git.d.ts.map

package/dist/api/routes/git.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"git.d.ts","sourceRoot":"","sources":["../../../src/api/routes/git.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAG5B,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAU3C,MAAM,WAAW,oBAAoB;IACnC;;;;;OAKG;IACH,EAAE,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC;IACvB;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACzB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,oBAAoB,GAAG,IAAI,CAsHhE"}

package/dist/api/routes/git.js

@@ -0,0 +1,126 @@
+import { Hono } from "hono";
+import { execFile } from "node:child_process";
+import { promisify } from "node:util";
+import { resolveRepositoryIdentifier, selectGitRepoPaths, } from "../../db/repositories-store.js";
+import { createLogger, toSafeErrorMessage } from "../../logging.js";
+const execFileAsync = promisify(execFile);
+const logger = createLogger("git-api");
+/**
+ * Git API routes — read-only proxy for configured repositories.
+ *
+ * GET /git/log   — recent commit log
+ * GET /git/diff  — diff between refs
+ * GET /git/show  — show a specific commit
+ *
+ * `?repo=` accepts:
+ *   - an absolute filesystem path that appears in the unified
+ *     `repositories` table with a non-null `local_path`,
+ *   - a repository id (e.g. "github:acme/widgets" or "local:abc123…").
+ *
+ * GitHub-only repositories (no local clone) 404 with a helpful error.
+ * Refs and hashes are sanitized to prevent shell injection.
+ */
+export function createGitRoutes(deps) {
+    const app = new Hono();
+    function resolveRepo(repoParam) {
+        if (!repoParam)
+            return null;
+        // Direct path match first (the common case from existing callers).
+        const allowed = new Set();
+        if (deps.db) {
+            for (const path of selectGitRepoPaths(deps.db))
+                allowed.add(path);
+        }
+        if (deps.allowedRepos) {
+            for (const path of deps.allowedRepos)
+                allowed.add(path);
+        }
+        if (allowed.has(repoParam))
+            return repoParam;
+        // Fallback: id lookup against the store.
+        if (deps.db) {
+            const row = resolveRepositoryIdentifier(deps.db, repoParam);
+            if (row && row.localPath)
+                return row.localPath;
+        }
+        return null;
+    }
+    function listAllowed() {
+        const allowed = new Set();
+        if (deps.db) {
+            for (const path of selectGitRepoPaths(deps.db))
+                allowed.add(path);
+        }
+        if (deps.allowedRepos) {
+            for (const path of deps.allowedRepos)
+                allowed.add(path);
+        }
+        return [...allowed];
+    }
+    // GET /git/log — recent commit log
+    app.get("/git/log", async (c) => {
+        const repo = resolveRepo(c.req.query("repo"));
+        if (!repo) {
+            return c.json({ error: "invalid or missing repo", allowed: listAllowed() }, 400);
+        }
+        const count = Math.min(Number(c.req.query("count") ?? "5"), 200);
+        try {
+            const { stdout } = await execFileAsync("git", ["log", "--format=%H|%h|%s|%an|%ar", `-${count}`], { cwd: repo, timeout: 10_000 });
+            const commits = stdout
+                .trim()
+                .split("\n")
+                .filter(Boolean)
+                .map((line) => {
+                const [hash, short, subject, author, ago] = line.split("|");
+                return { hash, short, subject, author, ago };
+            });
+            return c.json({ commits });
+        }
+        catch (err) {
+            logger.error({ err, repo }, "git log failed");
+            return c.json({ error: toSafeErrorMessage(err) }, 500);
+        }
+    });
+    // GET /git/diff — diff between refs
+    app.get("/git/diff", async (c) => {
+        const repo = resolveRepo(c.req.query("repo"));
+        if (!repo) {
+            return c.json({ error: "invalid or missing repo" }, 400);
+        }
+        // Use || (not ??) so explicit ?ref= (empty string) falls back to default
+        const ref = c.req.query("ref") || "HEAD~1..HEAD";
+        // Sanitize ref — reject shell metacharacters and flag-like arguments
+        if (/[;&|`$]/.test(ref) || ref.startsWith("-")) {
+            return c.json({ error: "invalid ref format" }, 400);
+        }
+        try {
+            const { stdout } = await execFileAsync("git", ["diff", "--stat", "-p", ref], { cwd: repo, timeout: 10_000, maxBuffer: 200_000 });
+            return c.json({ diff: stdout.slice(0, 10_000) });
+        }
+        catch (err) {
+            logger.error({ err, repo, ref }, "git diff failed");
+            return c.json({ error: toSafeErrorMessage(err) }, 500);
+        }
+    });
+    // GET /git/show — show a specific commit
+    app.get("/git/show", async (c) => {
+        const repo = resolveRepo(c.req.query("repo"));
+        if (!repo) {
+            return c.json({ error: "invalid or missing repo" }, 400);
+        }
+        const hash = c.req.query("hash") || "HEAD";
+        if (/[;&|`$]/.test(hash) || hash.startsWith("-")) {
+            return c.json({ error: "invalid hash format" }, 400);
+        }
+        try {
+            const { stdout } = await execFileAsync("git", ["show", "--stat", "--format=%H%n%s%n%b%n---", hash], { cwd: repo, timeout: 10_000, maxBuffer: 100_000 });
+            return c.json({ show: stdout.slice(0, 5000) });
+        }
+        catch (err) {
+            logger.error({ err, repo, hash }, "git show failed");
+            return c.json({ error: toSafeErrorMessage(err) }, 500);
+        }
+    });
+    return app;
+}
+//# sourceMappingURL=git.js.map

package/dist/api/routes/git.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git.js","sourceRoot":"","sources":["../../../src/api/routes/git.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,OAAO,EACL,2BAA2B,EAC3B,kBAAkB,GACnB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAEpE,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAC1C,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;AAkBvC;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,eAAe,CAAC,IAA0B;IACxD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IAEvB,SAAS,WAAW,CAAC,SAA6B;QAChD,IAAI,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC;QAC5B,mEAAmE;QACnE,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAClC,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;YACZ,KAAK,MAAM,IAAI,IAAI,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACpE,CAAC;QACD,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,YAAY;gBAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC1D,CAAC;QACD,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;QAC7C,yCAAyC;QACzC,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,GAAG,GAAG,2BAA2B,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;YAC5D,IAAI,GAAG,IAAI,GAAG,CAAC,SAAS;gBAAE,OAAO,GAAG,CAAC,SAAS,CAAC;QACjD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,SAAS,WAAW;QAClB,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAClC,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;YACZ,KAAK,MAAM,IAAI,IAAI,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACpE,CAAC;QACD,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,YAAY;gBAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC1D,CAAC;QACD,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC;IACtB,CAAC;IAED,mCAAmC;IACnC,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC9B,MAAM,IAAI,GAAG,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QAC9C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,yBAAyB,EAAE,OAAO,EAAE,WAAW,EAAE,EAAE,EAC5D,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;QACjE,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CACpC,KAAK,EACL,CAAC,KAAK,EAAE,2BAA2B,EAAE,IAAI,KAAK,EAAE,CAAC,EACjD,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,CAC/B,CAAC;YACF,MAAM,OAAO,GAAG,MAAM;iBACnB,IAAI,EAAE;iBACN,KAAK,CAAC,IAAI,CAAC;iBACX,MAAM,CAAC,OAAO,CAAC;iBACf,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;gBACZ,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBAC5D,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;YAC/C,CAAC,CAAC,CAAC;YACL,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QAC7B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,gBAAgB,CAAC,CAAC;YAC9C,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QACzD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,oCAAoC;IACpC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC/B,MAAM,IAAI,GAAG,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QAC9C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,EAAE,GAAG,CAAC,CAAC;QAC3D,CAAC;QAED,yEAAyE;QACzE,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,cAAc,CAAC;QACjD,qEAAqE;QACrE,IAAI,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/C,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,GAAG,CAAC,CAAC;QACtD,CAAC;QAED,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CACpC,KAAK,EACL,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,EAC7B,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,CACnD,CAAC;YACF,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QACnD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,iBAAiB,CAAC,CAAC;YACpD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QACzD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,yCAAyC;IACzC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC/B,MAAM,IAAI,GAAG,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QAC9C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,EAAE,GAAG,CAAC,CAAC;QAC3D,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC;QAC3C,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACjD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,EAAE,GAAG,CAAC,CAAC;QACvD,CAAC;QAED,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CACpC,KAAK,EACL,CAAC,MAAM,EAAE,QAAQ,EAAE,0BAA0B,EAAE,IAAI,CAAC,EACpD,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,CACnD,CAAC;YACF,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QACjD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,iBAAiB,CAAC,CAAC;YACrD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QACzD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/api/routes/github.d.ts

@@ -0,0 +1,34 @@
+import { Hono } from "hono";
+import type Database from "better-sqlite3";
+import type { EventBus } from "../../core/event-bus.js";
+import type { AgentConfig } from "../../config.js";
+import type { SecretBroker } from "../../secrets/secret-broker.js";
+export interface GitHubRouteDependencies {
+    db: Database.Database;
+    config: AgentConfig;
+    secretBroker: SecretBroker;
+    eventBus: EventBus;
+    /** Optional GitWatcher to notify on webhook events (for fallback frequency adjustment) */
+    onWebhookEvent?: () => void;
+}
+/**
+ * GitHub Webhook receiver + API proxy routes.
+ *
+ * Webhook: POST /webhook/github — receives GitHub events, verifies signature,
+ * parses event payload, and emits events to the EventBus.
+ *
+ * API Proxy: GET /github/repos, GET /github/pulls, POST /github/pulls/comment
+ * — proxies requests to GitHub via @octokit/rest.
+ */
+/**
+ * Create both webhook and API route apps separately.
+ * - webhookApp: mount at root (/) → POST /webhook/github
+ * - apiApp: mount at /api → GET /github/repos, GET /github/pulls, etc.
+ */
+export declare function createGitHubRoutes(deps: GitHubRouteDependencies): {
+    webhookApp: Hono;
+    apiApp: Hono;
+};
+/** Verify GitHub webhook HMAC-SHA256 signature */
+export declare function verifySignature(payload: string, signature: string, secret: string): boolean;
+//# sourceMappingURL=github.d.ts.map

package/dist/api/routes/github.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"github.d.ts","sourceRoot":"","sources":["../../../src/api/routes/github.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAE3C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AACxD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAQnD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAYnE,MAAM,WAAW,uBAAuB;IACtC,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;IACtB,MAAM,EAAE,WAAW,CAAC;IACpB,YAAY,EAAE,YAAY,CAAC;IAC3B,QAAQ,EAAE,QAAQ,CAAC;IACnB,0FAA0F;IAC1F,cAAc,CAAC,EAAE,MAAM,IAAI,CAAC;CAC7B;AAED;;;;;;;;GAQG;AACH;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,uBAAuB,GAAG;IACjE,UAAU,EAAE,IAAI,CAAC;IACjB,MAAM,EAAE,IAAI,CAAC;CACd,CAoSA;AAID,kDAAkD;AAClD,wBAAgB,eAAe,CAC7B,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,GACb,OAAO,CAIT"}