@app-vitals/agent-admin 1.12.1 → 1.14.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@app-vitals/agent-admin",
-  "version": "1.12.1",
+  "version": "1.14.0",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/app-vitals/agent.git",
@@ -42,7 +42,7 @@
   },
   "dependencies": {
     "@anthropic-ai/sdk": "0.135.0",
-    "@app-vitals/agent-lib": "1.12.1",
+    "@app-vitals/agent-lib": "1.14.0",
     "@hono/zod-openapi": "^1.0.0",
     "@prisma/adapter-pg": "^7.10.0",
     "@prisma/client": "^7.10.0",

package/src/admin-boot.ts

@@ -99,6 +99,8 @@ import { CronRunNowService } from "./cron-run-now.ts";
 import { parseCronRunNowConfig } from "./cron-run-now-config.ts";
 import { CronRunTranscriptService } from "./cron-run-transcripts.ts";
 import { isDevAuthAllowed } from "./dev-auth-guard.ts";
+import { createGithubEnterpriseApp } from "./github-enterprise-api.ts";
+import { GitHubEnterpriseAppService } from "./github-enterprise-apps.ts";
 import { HttpGithubAppProvisioningClient } from "./github-app-provisioning-client.ts";
 import { HttpGoogleAuthClient } from "./google-auth-client.ts";
 import { HttpChatClient } from "./http-chat-client.ts";
@@ -113,7 +115,7 @@ import { parseSelfServeConfig } from "./self-serve-config.ts";
 import { HttpSlackProvisioningClient } from "./slack-provisioning-client.ts";
 import { SpecialtyTypes } from "./specialty-types.ts";
 import { runStartupPolicyReconcile } from "./startup-policy-reconcile.ts";
-import { makeTokenCrypto } from "./token-crypto.ts";
+import { makeStrictTokenCrypto, makeTokenCrypto } from "./token-crypto.ts";
 import { parseTranscriptConfig } from "./transcript-config.ts";
 import {
   resolveTrialExpirySweepIntervalMs,
@@ -530,6 +532,24 @@ export async function startAdmin(
     }),
   );
 
+  // 3b'. GitHub Enterprise Apps API — /github-enterprise/* — admin-only,
+  //      optional (GHE-1.3). With no rows configured it reports unconfigured
+  //      and does nothing else. Strict crypto: no plain-text key storage.
+  root.route(
+    "/",
+    createGithubEnterpriseApp({
+      appService: new GitHubEnterpriseAppService(
+        prisma,
+        makeStrictTokenCrypto(),
+      ),
+      agentService,
+      agentEnvService,
+      sessionSecret,
+      adminApiKeys,
+      agentTokenService,
+    }),
+  );
+
   // 3c. Extension API routes — after every platform API, before the admin UI
   //     (same no-shadowing rule as the admin CRUD API above).
   mountRouteContributions(root, resolvedExtensions.apiRoutes);

package/src/admin-spec.ts

@@ -24,6 +24,7 @@ import {
   parseAdminApiKeys,
 } from "./agents-api.ts";
 import { createAgentRuntimeApp } from "./api.ts";
+import { createGithubEnterpriseApp } from "./github-enterprise-api.ts";
 
 /** The admin OpenAPI document shape the spec builders and generators share. */
 export interface AdminOpenApiDocument {
@@ -172,6 +173,23 @@ export function buildPlatformAdminSpec(): AdminOpenApiDocument {
     }
   }
 
+  // GHE-1.3: the /github-enterprise routes live in their own app (mounted at
+  // the root in admin-boot.ts); fold their paths and schemas in.
+  const gheSpec = createGithubEnterpriseApp({
+    appService: {} as never,
+    agentService: {} as never,
+    agentEnvService: {} as never,
+    sessionSecret: SESSION_SECRET,
+    adminApiKeys,
+    agentTokenService: { validate: async () => null },
+  }).getOpenAPI31Document({
+    openapi: "3.1.0",
+    info: { title: "github-enterprise (internal)", version: "0.1.0" },
+  });
+  for (const [path, def] of Object.entries(gheSpec.paths ?? {})) {
+    mergedPaths[path] = def as Record<string, unknown>;
+  }
+
   return {
     ...adminSpec,
     paths: mergedPaths,
@@ -180,6 +198,7 @@ export function buildPlatformAdminSpec(): AdminOpenApiDocument {
       schemas: {
         ...(adminSpec.components?.schemas ?? {}),
         ...(runtimeSpec.components?.schemas ?? {}),
+        ...(gheSpec.components?.schemas ?? {}),
       },
     },
   };