@bevel-software/platform-core-backend 0.1.0

package/dist/core/create-core-services.d.ts

@@ -0,0 +1,95 @@
+import type { AuthProviderPlugin } from '../modules/auth/auth.routes.js';
+import type { AuthUser } from '@bevel-software/platform-shared';
+import { CoreConfig } from '../core-config.js';
+import { type Database } from '../modules/database/connection.js';
+import { WorkspaceService } from '../modules/workspace/workspace.service.js';
+import { RoutineWritePolicyService } from '../modules/workspace/routine-write-policy.js';
+import { KbSeedService } from '../modules/workspace/kb-seed.service.js';
+import { SpillStore } from '../modules/workspace/spill-store.js';
+import { type ISessionSink } from '../modules/workspace/session-sink.js';
+import { AuthService } from '../modules/auth/auth.service.js';
+import { AccountErasureService } from '../modules/auth/account-erasure.service.js';
+import { createAuthMiddleware } from '../modules/auth/auth.middleware.js';
+import { AccessControlService } from '../modules/access/access-control.service.js';
+import { CreatorAccessService } from '../modules/access/creator-access.js';
+import { SkillService } from '../modules/skills/index.js';
+import { ToolManualService } from '../modules/tool-manuals/index.js';
+import { DbSecretsVaultService } from '../modules/secrets-vault/index.js';
+import { GitService } from '../modules/workflow/git/git.service.js';
+import { PullRequestService } from '../modules/workflow/git/pull-request.service.js';
+import { DiffService } from '../modules/diff/diff.service.js';
+import { ReviewWorkflowService } from '../modules/workflow/review-workflow/review-workflow.service.js';
+import { FileLockService } from '../modules/workflow/file-lock.service.js';
+import { WorkflowEventBus } from '../modules/workflow/event-bus.js';
+import { FileChangeNotifier } from '../modules/workflow/file-change-notifier.js';
+import { WorkflowService } from '../modules/workflow/workflow.service.js';
+import { SessionOntologyService } from '../modules/workflow/session-ontology.service.js';
+import { PendingCommitsService } from '../modules/workflow/pending-commits.service.js';
+import { PendingCommitsWorker } from '../modules/workflow/pending-commits.worker.js';
+import { AdminAccessService } from '../modules/admin/admin-access.service.js';
+import { ExternalApiKeyService } from '../modules/tool-auth/external-api-key.service.js';
+import { InternalTokenService } from '../modules/tool-auth/internal-token.service.js';
+import { createToolAuthMiddleware, createManualAuthMiddleware } from '../modules/tool-auth/tool-auth.middleware.js';
+import { type ILlmUsageMeter } from '../modules/tool-auth/llm-usage-meter.js';
+import { McpService } from '../modules/mcp/mcp.service.js';
+import { createMcpAuthMiddleware } from '../modules/mcp/mcp-auth.middleware.js';
+import { BevelOAuthProvider } from '../modules/mcp/oauth/bevel-oauth-provider.js';
+import { ToolRegistry } from '../modules/tool-registry/tool-registry.js';
+import { createToolHandlerFactory } from '../modules/tool-helpers/tool-handler.js';
+import { type CorePorts } from './core-ports.js';
+/**
+ * Everything the CORE composition builds: the core services `createCoreServer`
+ * mounts, plus the primitives the enterprise overlay's own construction needs
+ * (db, event bus, notifier, registries, middlewares, …).
+ *
+ * The fields under "server-time seams" are deliberately MUTABLE: they are only
+ * read when the server is built / at request time, and the enterprise overlay
+ * overwrites them after `createCoreServices` returns (its implementations need
+ * core services to construct). See {@link CorePorts} for the pattern.
+ */
+export interface CoreServices {
+    config: CoreConfig;
+    db: Database;
+    workspaceService: WorkspaceService;
+    kbSeedService: KbSeedService;
+    spillStore: SpillStore;
+    accessControl: AccessControlService;
+    creatorAccess: CreatorAccessService;
+    sessionOntologyService: SessionOntologyService;
+    routineWritePolicy: RoutineWritePolicyService;
+    skillService: SkillService;
+    toolManualService: ToolManualService;
+    authService: AuthService;
+    authMiddleware: ReturnType<typeof createAuthMiddleware>;
+    accountErasureService: AccountErasureService;
+    gitService: GitService;
+    pullRequestService: PullRequestService;
+    diffService: DiffService;
+    reviewWorkflowService: ReviewWorkflowService;
+    fileLockService: FileLockService;
+    workflowService: WorkflowService;
+    eventBus: WorkflowEventBus;
+    fileChangeNotifier: FileChangeNotifier;
+    pendingCommitsService: PendingCommitsService;
+    pendingCommitsWorker: PendingCommitsWorker;
+    recoveryBot: AuthUser;
+    adminAccess: AdminAccessService;
+    secretsVaultService: DbSecretsVaultService;
+    externalApiKeyService: ExternalApiKeyService;
+    internalTokenService: InternalTokenService;
+    mcpService: McpService;
+    mcpAuthMiddleware: ReturnType<typeof createMcpAuthMiddleware>;
+    mcpOAuthProvider: BevelOAuthProvider;
+    toolRegistry: ToolRegistry;
+    toolAuthMiddleware: ReturnType<typeof createToolAuthMiddleware>;
+    manualAuthMiddleware: ReturnType<typeof createManualAuthMiddleware>;
+    toolHandlerFactory: ReturnType<typeof createToolHandlerFactory>;
+    /** `start_session` backing — core default {@link UuidSessionSink}. */
+    sessionSink: ISessionSink;
+    /** Connection-key LLM metering view — core default unmetered. */
+    usageMeter: ILlmUsageMeter;
+    /** SSO plugins the auth router mounts — same array instance as the port. */
+    authProviders: AuthProviderPlugin[];
+}
+export declare function createCoreServices(config: CoreConfig, ports?: CorePorts): Promise<CoreServices>;
+//# sourceMappingURL=create-core-services.d.ts.map

package/dist/core/create-core-services.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-core-services.d.ts","sourceRoot":"","sources":["../../src/core/create-core-services.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AACzE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,iCAAiC,CAAC;AAEhE,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAS,KAAK,QAAQ,EAAE,MAAM,mCAAmC,CAAC;AAGzE,OAAO,EAAE,gBAAgB,EAAE,MAAM,2CAA2C,CAAC;AAC7E,OAAO,EAAE,yBAAyB,EAAE,MAAM,8CAA8C,CAAC;AACzF,OAAO,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAC;AACxE,OAAO,EAAE,UAAU,EAAE,MAAM,qCAAqC,CAAC;AACjE,OAAO,EAAmB,KAAK,YAAY,EAAE,MAAM,sCAAsC,CAAC;AAC1F,OAAO,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAC;AAC9D,OAAO,EAAE,qBAAqB,EAAE,MAAM,4CAA4C,CAAC;AACnF,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EAAE,oBAAoB,EAAE,MAAM,6CAA6C,CAAC;AACnF,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAC3E,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,EACL,qBAAqB,EAGtB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,wCAAwC,CAAC;AACpE,OAAO,EAAE,kBAAkB,EAAE,MAAM,iDAAiD,CAAC;AAGrF,OAAO,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAC;AAC9D,OAAO,EAAE,qBAAqB,EAAE,MAAM,gEAAgE,CAAC;AACvG,OAAO,EAAE,eAAe,EAAE,MAAM,0CAA0C,CAAC;AAC3E,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,EAAE,kBAAkB,EAAE,MAAM,6CAA6C,CAAC;AACjF,OAAO,EAAE,eAAe,EAAE,MAAM,yCAAyC,CAAC;AAE1E,OAAO,EAAE,sBAAsB,EAAE,MAAM,iDAAiD,CAAC;AACzF,OAAO,EAAE,qBAAqB,EAAE,MAAM,gDAAgD,CAAC;AACvF,OAAO,EACL,oBAAoB,EAErB,MAAM,+CAA+C,CAAC;AAEvD,OAAO,EAAE,kBAAkB,EAAE,MAAM,0CAA0C,CAAC;AAC9E,OAAO,EAAE,qBAAqB,EAAE,MAAM,kDAAkD,CAAC;AACzF,OAAO,EAAE,oBAAoB,EAAE,MAAM,gDAAgD,CAAC;AACtF,OAAO,EACL,wBAAwB,EACxB,0BAA0B,EAC3B,MAAM,8CAA8C,CAAC;AACtD,OAAO,EAAqB,KAAK,cAAc,EAAE,MAAM,yCAAyC,CAAC;AAEjG,OAAO,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAC3D,OAAO,EAAE,uBAAuB,EAAE,MAAM,uCAAuC,CAAC;AAChF,OAAO,EAAE,kBAAkB,EAAE,MAAM,8CAA8C,CAAC;AAElF,OAAO,EAAE,YAAY,EAAE,MAAM,2CAA2C,CAAC;AAEzE,OAAO,EAAE,wBAAwB,EAAE,MAAM,yCAAyC,CAAC;AAEnF,OAAO,EAAqB,KAAK,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAEpE;;;;;;;;;GASG;AACH,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,UAAU,CAAC;IACnB,EAAE,EAAE,QAAQ,CAAC;IACb,gBAAgB,EAAE,gBAAgB,CAAC;IACnC,aAAa,EAAE,aAAa,CAAC;IAC7B,UAAU,EAAE,UAAU,CAAC;IACvB,aAAa,EAAE,oBAAoB,CAAC;IACpC,aAAa,EAAE,oBAAoB,CAAC;IACpC,sBAAsB,EAAE,sBAAsB,CAAC;IAC/C,kBAAkB,EAAE,yBAAyB,CAAC;IAC9C,YAAY,EAAE,YAAY,CAAC;IAC3B,iBAAiB,EAAE,iBAAiB,CAAC;IACrC,WAAW,EAAE,WAAW,CAAC;IACzB,cAAc,EAAE,UAAU,CAAC,OAAO,oBAAoB,CAAC,CAAC;IACxD,qBAAqB,EAAE,qBAAqB,CAAC;IAC7C,UAAU,EAAE,UAAU,CAAC;IACvB,kBAAkB,EAAE,kBAAkB,CAAC;IACvC,WAAW,EAAE,WAAW,CAAC;IACzB,qBAAqB,EAAE,qBAAqB,CAAC;IAC7C,eAAe,EAAE,eAAe,CAAC;IACjC,eAAe,EAAE,eAAe,CAAC;IACjC,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,kBAAkB,EAAE,kBAAkB,CAAC;IACvC,qBAAqB,EAAE,qBAAqB,CAAC;IAC7C,oBAAoB,EAAE,oBAAoB,CAAC;IAC3C,WAAW,EAAE,QAAQ,CAAC;IACtB,WAAW,EAAE,kBAAkB,CAAC;IAChC,mBAAmB,EAAE,qBAAqB,CAAC;IAC3C,qBAAqB,EAAE,qBAAqB,CAAC;IAC7C,oBAAoB,EAAE,oBAAoB,CAAC;IAC3C,UAAU,EAAE,UAAU,CAAC;IACvB,iBAAiB,EAAE,UAAU,CAAC,OAAO,uBAAuB,CAAC,CAAC;IAC9D,gBAAgB,EAAE,kBAAkB,CAAC;IACrC,YAAY,EAAE,YAAY,CAAC;IAC3B,kBAAkB,EAAE,UAAU,CAAC,OAAO,wBAAwB,CAAC,CAAC;IAChE,oBAAoB,EAAE,UAAU,CAAC,OAAO,0BAA0B,CAAC,CAAC;IACpE,kBAAkB,EAAE,UAAU,CAAC,OAAO,wBAAwB,CAAC,CAAC;IAEhE,sEAAsE;IACtE,WAAW,EAAE,YAAY,CAAC;IAC1B,iEAAiE;IACjE,UAAU,EAAE,cAAc,CAAC;IAC3B,4EAA4E;IAC5E,aAAa,EAAE,kBAAkB,EAAE,CAAC;CACrC;AAED,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,UAAU,EAClB,KAAK,GAAE,SAAc,GACpB,OAAO,CAAC,YAAY,CAAC,CA4XvB"}

package/dist/core/create-core-services.js

@@ -0,0 +1,352 @@
+import { DEFAULT_BRANCH, PROTECTED_BRANCHES, SKILLS_DIR, TOOLS_DIR } from '@bevel-software/platform-shared';
+import { getDb } from '../modules/database/connection.js';
+import { runCoreMigrations } from '../modules/database/migrate.js';
+import { coreMigrationsDir } from '../assets.js';
+import { WorkspaceService } from '../modules/workspace/workspace.service.js';
+import { RoutineWritePolicyService } from '../modules/workspace/routine-write-policy.js';
+import { KbSeedService } from '../modules/workspace/kb-seed.service.js';
+import { SpillStore } from '../modules/workspace/spill-store.js';
+import { UuidSessionSink } from '../modules/workspace/session-sink.js';
+import { AuthService } from '../modules/auth/auth.service.js';
+import { AccountErasureService } from '../modules/auth/account-erasure.service.js';
+import { createAuthMiddleware } from '../modules/auth/auth.middleware.js';
+import { AccessControlService } from '../modules/access/access-control.service.js';
+import { CreatorAccessService } from '../modules/access/creator-access.js';
+import { SkillService } from '../modules/skills/index.js';
+import { ToolManualService } from '../modules/tool-manuals/index.js';
+import { DbSecretsVaultService, McpOAuthDiscoveryService, registerBevelSecretsVariableLoader, } from '../modules/secrets-vault/index.js';
+import { GitService } from '../modules/workflow/git/git.service.js';
+import { PullRequestService } from '../modules/workflow/git/pull-request.service.js';
+import { WorkspaceMutex } from '../modules/workflow/git/mutex.js';
+import { assertGitVersion } from '../modules/workflow/git/git-version.js';
+import { DiffService } from '../modules/diff/diff.service.js';
+import { ReviewWorkflowService } from '../modules/workflow/review-workflow/review-workflow.service.js';
+import { FileLockService } from '../modules/workflow/file-lock.service.js';
+import { WorkflowEventBus } from '../modules/workflow/event-bus.js';
+import { FileChangeNotifier } from '../modules/workflow/file-change-notifier.js';
+import { WorkflowService } from '../modules/workflow/workflow.service.js';
+import { WorkflowHooks } from '../modules/workflow/workflow-hooks.js';
+import { SessionOntologyService } from '../modules/workflow/session-ontology.service.js';
+import { PendingCommitsService } from '../modules/workflow/pending-commits.service.js';
+import { PendingCommitsWorker, consoleSystemNoticeSink, } from '../modules/workflow/pending-commits.worker.js';
+import { ensureRecoveryBotUser } from '../modules/workflow/recovery-bot.js';
+import { AdminAccessService } from '../modules/admin/admin-access.service.js';
+import { ExternalApiKeyService } from '../modules/tool-auth/external-api-key.service.js';
+import { InternalTokenService } from '../modules/tool-auth/internal-token.service.js';
+import { createToolAuthMiddleware, createManualAuthMiddleware, } from '../modules/tool-auth/tool-auth.middleware.js';
+import { unmeteredLlmUsage } from '../modules/tool-auth/llm-usage-meter.js';
+import { McpSessionStore } from '../modules/mcp/mcp-session-store.js';
+import { McpService } from '../modules/mcp/mcp.service.js';
+import { createMcpAuthMiddleware } from '../modules/mcp/mcp-auth.middleware.js';
+import { BevelOAuthProvider } from '../modules/mcp/oauth/bevel-oauth-provider.js';
+import { getOAuthProtectedResourceMetadataUrl } from '@modelcontextprotocol/sdk/server/auth/router.js';
+import { ToolRegistry } from '../modules/tool-registry/tool-registry.js';
+import { createToolContextResolver } from '../modules/tool-helpers/tool-context.js';
+import { createToolHandlerFactory } from '../modules/tool-helpers/tool-handler.js';
+import { TokenCrypto } from '../shared/token-crypto.js';
+import { noopRecoveryAgent } from './core-ports.js';
+export async function createCoreServices(config, ports = {}) {
+    // Fail fast on a runtime whose git is too old for `--no-write-fetch-head`
+    // (see `git-version.ts`): every clone, fetch and refresh below depends on it,
+    // so an unsupported binary is better surfaced here than at the first merge.
+    await assertGitVersion();
+    const db = getDb(config.databaseUrl);
+    // Migrations must run BEFORE any service that reads or writes a managed
+    // table. `PendingCommitsService.startupReconcile` (called later in this
+    // function) hits `pending_commits` — on a fresh DB, deferring migrations to
+    // after createServices would 42P01 the boot.
+    //
+    // DIVERGENCE vs bevel-platform's copy of this file (Phase C reconciliation):
+    // upstream still calls the legacy single-folder `runMigrations(db)`; this
+    // package runs its own squashed idempotent CORE history from the packaged
+    // `migrations/` folder, tracked in `__drizzle_migrations_core`. An
+    // enterprise overlay runs its own history AFTER this (see migrate.ts).
+    await runCoreMigrations(db, coreMigrationsDir());
+    const workspaceService = new WorkspaceService(config.workspacesRoot, config.kbRepoUrl, config.kbDirName, config.gitUsername);
+    // Seed (or top-up) the KB remote before the first clone so the rest of the app
+    // can keep assuming the remote already carries the protected branches + base
+    // scaffolding — a fresh or partially-populated remote no longer needs to have
+    // been forked from the standalone template.
+    const kbSeedService = new KbSeedService(config.kbRepoUrl, config.kbTemplateDir, [...PROTECTED_BRANCHES], DEFAULT_BRANCH, config.seedAdminEmails, config.gitUsername);
+    workspaceService.setSeedService(kbSeedService);
+    // Shared, workspace-independent store for oversized `call_tool_chain` results,
+    // read back via `read_file`. Sibling of `workspacesRoot`, never committed.
+    const spillStore = new SpillStore(config.spillRoot);
+    const accessControl = new AccessControlService(workspaceService, config.kbDirName);
+    // Creator read-grant on creation: read is default-deny, so every surface
+    // that creates KB files/folders (human routes, agent tools, upload apply)
+    // consults this planner to keep creations visible to their creator.
+    const creatorAccess = new CreatorAccessService(workspaceService, accessControl, config.kbDirName);
+    // Ontology-session boundary: records each agent run's touched ontologies and
+    // blocks writes once a run has crossed ontologies. Postgres-backed so the
+    // boundary survives a restart.
+    const sessionOntologyService = new SessionOntologyService(db);
+    // Per-run write restriction (by file extension). Shared by the workspace tool
+    // surface (which enforces it) and the routine runner (which sets it for
+    // dashboard-only `watchlist_check` runs). In-memory: a restriction lives only for
+    // one run, unlike the Postgres-backed ontology touched-set above.
+    const routineWritePolicy = new RoutineWritePolicyService();
+    // Skills: discovered from the default-branch workspace only (global catalog).
+    const skillService = new SkillService(workspaceService, accessControl, config.kbDirName);
+    // Tool manuals: user-authored `*.tool` files under `Tools/` in the default
+    // branch — access-controlled like Skills, served to external agents via
+    // `GET /api/agent/all-tools` and registered on the MCP proxy's UTCP client.
+    const toolManualService = new ToolManualService(workspaceService, accessControl, config.kbDirName);
+    // Auth service — resolves identities for login, PR author attribution, and
+    // access lookups. (Change requests now store the author email directly, so
+    // PullRequestService no longer depends on it for attribution.)
+    const authService = new AuthService(db, config);
+    const authMiddleware = createAuthMiddleware(authService);
+    // Shared mutex so git and diff operations on the same workspace serialize
+    // against each other — a backup-reseed races a concurrent commit otherwise.
+    const workspaceMutex = new WorkspaceMutex();
+    // Workflow lifecycle hooks — the ONE registry this composition shares
+    // between GitService (advisory commit validation), the session-ontology
+    // gate (blocking preWrite), and the enterprise composition root, which
+    // registers module-owned handlers on `workflowService.hooks` right after
+    // this function returns. Core registers none: no commit-time validation
+    // (advisory anyway) and no ontology write block.
+    const workflowHooks = new WorkflowHooks();
+    const gitService = new GitService(workspaceService, workflowHooks, config.kbDirName, workspaceMutex, accessControl);
+    // A fresh clone has already fetched every ref — let the git layer skip the
+    // redundant implicit `git fetch` on the first `listBranches` after bootstrap.
+    workspaceService.setWorkspaceClonedListener((id) => gitService.noteWorkspaceFetched(id));
+    const pullRequestService = new PullRequestService(db, workspaceService, accessControl, gitService);
+    const diffService = new DiffService(workspaceService, workspaceMutex, config.workspacesRoot, config.backupsRoot, config.kbDirName);
+    // Late-bind the diff service into WorkspaceService so file writes/moves
+    // trigger backup updates. (GitService used to take a diffService too — for
+    // the post-switch backup reseed — but switchBranch is gone with the
+    // per-branch workspace model, so the injection no longer applies.)
+    workspaceService.setDiffService(diffService);
+    const reviewWorkflowService = new ReviewWorkflowService(db, accessControl, workspaceService, gitService);
+    // Late-bind the comment enricher so PullRequestService.getPrDetail includes
+    // our DB-backed comments without forcing a circular constructor dependency.
+    pullRequestService.setDetailEnricher(reviewWorkflowService);
+    // Workflow facade — the abstraction every app consumer should reach for
+    // instead of the individual git / PR / review-workflow services. See
+    // PLAN.md for the migration story. Today it delegates straight through;
+    // implementations migrate into the workflow module over later steps.
+    const fileLockService = new FileLockService(db);
+    // Background commit queue. The `WorkflowService.releaseLock` path
+    // enqueues a row here instead of running commitFile + push inline; the
+    // worker drains the queue out of band so a git hiccup can't block the
+    // user-visible save path. See `lock-decoupling-plan.md`.
+    const pendingCommitsService = new PendingCommitsService(db);
+    // Let the git status path tell an expected dirty tree (queued saves still
+    // draining) from a genuinely orphaned one before it warns loudly.
+    gitService.setPendingCommitsProbe((workspaceId) => pendingCommitsService.hasAnyForWorkspace(workspaceId));
+    // In-process event bus: every WorkflowService mutation method that
+    // succeeds emits a typed event; the SSE route fans it to connected
+    // browser sessions. Single instance per Node process — survives across
+    // requests, doesn't survive restarts (clients reconnect + resync).
+    const eventBus = new WorkflowEventBus();
+    // In-process post-commit hook (distinct from the SSE bus): fires once per
+    // committed change (batched paths) so catalogs refresh instantly and the
+    // id-repair keeps the id namespace collision-free. Subscribers are registered
+    // below, once the reacting services exist.
+    const fileChangeNotifier = new FileChangeNotifier();
+    const workflowService = new WorkflowService(db, gitService, pullRequestService, reviewWorkflowService, workspaceService, accessControl, fileLockService, pendingCommitsService, config.kbDirName, eventBus, fileChangeNotifier, 
+    // Exposed as `workflowService.hooks` — the SAME instance GitService and
+    // the session-ontology gate consult, so enterprise registrations against
+    // it reach every hook point.
+    workflowHooks);
+    // Subscriber A — catalog freshness: a committed change drops the affected
+    // caches immediately instead of waiting out their TTLs. The tool/skill
+    // catalogs are global but read the DEFAULT branch only, so only
+    // default-branch changes under their folders matter. (The kb-graph id-index
+    // invalidation that used to live in this subscriber is registered by the
+    // enterprise overlay, next to the kb-graph service it belongs to — the
+    // caches are independent, so the split preserves behavior.)
+    fileChangeNotifier.onFilesChanged(({ branch, paths }) => {
+        if (branch !== DEFAULT_BRANCH)
+            return;
+        if (paths.some((p) => p.startsWith(`${config.kbDirName}/${TOOLS_DIR}/`)))
+            toolManualService.invalidate();
+        if (paths.some((p) => p.startsWith(`${config.kbDirName}/${SKILLS_DIR}/`)))
+            skillService.invalidate();
+    });
+    // Admin = `Admin` role in roles.yaml, resolved through the access model on the
+    // default branch (no env allow-list).
+    const adminAccess = new AdminAccessService(accessControl, workspaceService, DEFAULT_BRANCH);
+    // Secrets Vault: the per-user store of credentials (static API keys + OAuth
+    // tokens) that back UTCP tool variables (`${FOO_API_KEY}`). Encrypted at rest
+    // with the connector-config key; read only by the `bevel-secrets` variable
+    // loader at tool-call time. Swap-seam: `ISecretsVaultService` could later be a
+    // client's external secret manager without touching the loader or the tools.
+    const secretsVaultService = new DbSecretsVaultService(db, config.secretsEncKey, undefined, 
+    // Scope-driven resolution: a `.tool`'s declared variable scope decides whether
+    // `resolve` reads the shared (admin) row or the caller's own per-user row.
+    (key) => toolManualService.scopeOfVariable(key));
+    // Register the `bevel-secrets` UTCP variable loader against this vault so any
+    // UTCP client can resolve `${VAR}` from the caller's secrets at tool-call time.
+    registerBevelSecretsVariableLoader(secretsVaultService);
+    // Zero-config OAuth for bare `type: mcp` `.tool`s: when the remote server
+    // demands OAuth (MCP authorization spec), discover its authorization server,
+    // dynamically register a public PKCE client, and persist the provider as the
+    // shared vault row — the tool catalog then decorates the manual with a
+    // synthetic per-user sign-in. Setter-injected: this service needs the vault,
+    // which is constructed after the tool-manual service.
+    const mcpOAuthDiscovery = new McpOAuthDiscoveryService({
+        secretsVault: secretsVaultService,
+        redirectUri: `${config.publicBackendUrl}/api/secrets/oauth/callback`,
+    });
+    toolManualService.setMcpAuthDiscovery(mcpOAuthDiscovery);
+    // Least-privilege internal tokens: minted per (workspace, user, scope) by the
+    // agents' code-mode clients and by the MCP proxy, verified by the tool-auth
+    // middleware below — the same instance must back both sides.
+    const internalTokenService = new InternalTokenService({ prefix: config.internalTokenPrefix });
+    // GDPR erasure path: admin-driven user deletion. The core service erases the
+    // rows it owns; each module contributes its slice as a participant.
+    const accountErasureService = new AccountErasureService(db, ports.erasureParticipants ?? []);
+    // MCP (remote agent access). ExternalApiKeyService handles connection-key
+    // lifecycle; McpSessionStore holds per-session userId in memory
+    // (single-replica — see docs/mcp-remote-access.md). McpService is now a
+    // GENERIC proxy: per session it discovers the UTCP manual at /api/agent/utcp
+    // over loopback and re-exposes every tool, dispatching calls back through the
+    // REST tool surface (so agent logic + metering live there, once).
+    const externalApiKeyService = new ExternalApiKeyService(db, config.externalApiKeyPrefix);
+    const mcpSessionStore = new McpSessionStore();
+    const mcpService = new McpService(mcpSessionStore, {
+        // Loopback to our own REST tool surface — 127.0.0.1 (not localhost) to pin
+        // IPv4 and dodge resolver ambiguity. The proxy authenticates each call with
+        // the caller's own connection key.
+        loopbackBaseUrl: `http://127.0.0.1:${config.port}`,
+        // Manual namespace + UTCP variable prefix (KNOWLEDGE_BASE_API_URL / …).
+        manualName: 'KNOWLEDGE_BASE',
+        // Oversized chain results spill here too — an external MCP session has no
+        // ambient workspace, so it reads the spill back by ref via `read_file`.
+        spillStore,
+        // For the needs-authorization setup link surfaced to external agents.
+        publicFrontendUrl: config.publicFrontendUrl,
+    }, 
+    // Pre-dispatch per-user credential check: the vault answers "has this caller
+    // set it?" and the manual catalog answers "which user-scoped vars does this
+    // tool need?".
+    secretsVaultService, toolManualService, 
+    // Loopback bearer mint for OAuth/JWT sessions — their own bearer would
+    // 401 at the connection-key/internal-only /api/agent/* hop.
+    internalTokenService, 
+    // Session-grant reset for broken tool sign-ins. A closure because the
+    // provider is constructed just below (it needs nothing from McpService;
+    // the binding is only dereferenced at call time, long after boot).
+    (bearer) => mcpOAuthProvider.revokeByAccessToken(bearer));
+    // MCP OAuth 2.1 authorization server (our own AS): lets MCP clients with no
+    // pre-shared connection key connect via the standard 401 → discovery → DCR →
+    // authorize (PKCE) flow. The authorize step routes the browser to /connect
+    // where the user configures their tools; the resulting access token resolves
+    // to that user in the MCP auth middleware, like a connection key.
+    const mcpOAuthProvider = new BevelOAuthProvider({
+        db,
+        crypto: config.secretsEncKey ? new TokenCrypto(config.secretsEncKey) : null,
+        stateSecret: config.jwtSecret,
+        publicFrontendUrl: config.publicFrontendUrl,
+        tokenPrefix: config.mcpOAuthTokenPrefix,
+    });
+    // RFC 9728 pointer carried on every MCP 401 challenge so OAuth-capable
+    // clients discover the AS. Single source of truth for the resource id.
+    const mcpResourceUrl = new URL('/api/mcp', config.publicBackendUrl);
+    const mcpResourceMetadataUrl = getOAuthProtectedResourceMetadataUrl(mcpResourceUrl);
+    const mcpAuthMiddleware = createMcpAuthMiddleware(authService, externalApiKeyService, mcpOAuthProvider, mcpResourceMetadataUrl);
+    // ── Unified tool surface ──────────────────────────────────────────────
+    // ONE catalog of self-describing UTCP tools, served as two manuals (external
+    // for CI/MCP; internal for our agent's loopback code-mode client) and hosted
+    // by each owning module behind shared auth + context utilities. The core
+    // server assembles the router (registers tool defs + mounts endpoints). The
+    // `internalTokenService` minted above (shared with the agent factories) is
+    // the same one the tool-auth middleware verifies internal tokens against.
+    const toolRegistry = new ToolRegistry();
+    const resolveToolContext = createToolContextResolver({
+        authService,
+        workspaceService,
+        workflowService,
+        events: eventBus,
+        kbDirName: config.kbDirName,
+        creatorAccess,
+    });
+    const toolHandlerFactory = createToolHandlerFactory(resolveToolContext);
+    const toolAuthMiddleware = createToolAuthMiddleware(externalApiKeyService, internalTokenService);
+    // Read-only manual endpoints accept the above PLUS a browser JWT, so a
+    // logged-in user can browse the catalog with their session. Execution routes
+    // keep `toolAuthMiddleware` (no JWT), so a session can read but not invoke.
+    const manualAuthMiddleware = createManualAuthMiddleware(externalApiKeyService, internalTokenService, authService);
+    // Recovery-bot identity: a synthetic `recovery-bot@bevel.local` user
+    // backing (a) the recovery agent's commit authorship and (b) the
+    // `'system'` feedback notice's user_id FK. Idempotent ensure so this
+    // is safe to call on every boot.
+    const recoveryBot = await ensureRecoveryBotUser(db);
+    // Background commit worker. Drains `pending_commits` rows that the
+    // refactored `releaseLock` enqueues. On terminal failure (transient
+    // retry budget AND recovery-agent budget exhausted) the worker emits
+    // a `'system'` feedback notice that admins triage out of band.
+    //
+    // The orphan-startup sweep runs BEFORE start() so any rows that
+    // previous deploys left as `running` (process crashed mid-commit) get
+    // reset to `pending` before the worker starts claiming. The sweep
+    // also enqueues working-tree dirt that pre-dates the queue (the
+    // existing `target-company-state` orphans).
+    await pendingCommitsService.startupReconcile(workspaceService.knownWorkspaces(), { scan: (ws) => workspaceService.scanOrphanedPaths(ws.id) }, { email: recoveryBot.email, name: recoveryBot.name });
+    const pendingCommitsWorker = new PendingCommitsWorker({
+        service: pendingCommitsService,
+        workflow: {
+            runPendingCommit: (workspaceId, branch, path, user) => workflowService.runPendingCommit(workspaceId, branch, path, user),
+        },
+        // Both escalation sinks come through CorePorts: the recovery agent and the
+        // notice sink are enterprise-owned (background-agent factory / feedback
+        // dashboard); core defaults skip recovery and log to stderr.
+        recoveryAgent: ports.recoveryAgent ?? noopRecoveryAgent,
+        feedback: ports.systemNotice ?? consoleSystemNoticeSink,
+        workspaces: {
+            knownWorkspaces: () => workspaceService.knownWorkspaces(),
+        },
+        recoveryBot: {
+            id: recoveryBot.id,
+            email: recoveryBot.email,
+            name: recoveryBot.name,
+        },
+    });
+    pendingCommitsWorker.start();
+    return {
+        config,
+        db,
+        workspaceService,
+        kbSeedService,
+        spillStore,
+        accessControl,
+        creatorAccess,
+        sessionOntologyService,
+        routineWritePolicy,
+        skillService,
+        toolManualService,
+        authService,
+        authMiddleware,
+        accountErasureService,
+        gitService,
+        pullRequestService,
+        diffService,
+        reviewWorkflowService,
+        fileLockService,
+        workflowService,
+        eventBus,
+        fileChangeNotifier,
+        pendingCommitsService,
+        pendingCommitsWorker,
+        recoveryBot,
+        adminAccess,
+        secretsVaultService,
+        externalApiKeyService,
+        internalTokenService,
+        mcpService,
+        mcpAuthMiddleware,
+        mcpOAuthProvider,
+        toolRegistry,
+        toolAuthMiddleware,
+        manualAuthMiddleware,
+        toolHandlerFactory,
+        // Server-time seams — defaults here; the enterprise overlay overwrites
+        // (or, for the array, pushes into) these after construction.
+        sessionSink: ports.sessionSink ?? new UuidSessionSink(),
+        usageMeter: ports.usageMeter ?? unmeteredLlmUsage,
+        authProviders: ports.authProviders ?? [],
+    };
+}
+//# sourceMappingURL=create-core-services.js.map

package/dist/core/create-core-services.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-core-services.js","sourceRoot":"","sources":["../../src/core/create-core-services.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,iCAAiC,CAAC;AAE5G,OAAO,EAAE,KAAK,EAAiB,MAAM,mCAAmC,CAAC;AACzE,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,2CAA2C,CAAC;AAC7E,OAAO,EAAE,yBAAyB,EAAE,MAAM,8CAA8C,CAAC;AACzF,OAAO,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAC;AACxE,OAAO,EAAE,UAAU,EAAE,MAAM,qCAAqC,CAAC;AACjE,OAAO,EAAE,eAAe,EAAqB,MAAM,sCAAsC,CAAC;AAC1F,OAAO,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAC;AAC9D,OAAO,EAAE,qBAAqB,EAAE,MAAM,4CAA4C,CAAC;AACnF,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EAAE,oBAAoB,EAAE,MAAM,6CAA6C,CAAC;AACnF,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAC3E,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,EACL,qBAAqB,EACrB,wBAAwB,EACxB,kCAAkC,GACnC,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,wCAAwC,CAAC;AACpE,OAAO,EAAE,kBAAkB,EAAE,MAAM,iDAAiD,CAAC;AACrF,OAAO,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAClE,OAAO,EAAE,gBAAgB,EAAE,MAAM,wCAAwC,CAAC;AAC1E,OAAO,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAC;AAC9D,OAAO,EAAE,qBAAqB,EAAE,MAAM,gEAAgE,CAAC;AACvG,OAAO,EAAE,eAAe,EAAE,MAAM,0CAA0C,CAAC;AAC3E,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,EAAE,kBAAkB,EAAE,MAAM,6CAA6C,CAAC;AACjF,OAAO,EAAE,eAAe,EAAE,MAAM,yCAAyC,CAAC;AAC1E,OAAO,EAAE,aAAa,EAAE,MAAM,uCAAuC,CAAC;AACtE,OAAO,EAAE,sBAAsB,EAAE,MAAM,iDAAiD,CAAC;AACzF,OAAO,EAAE,qBAAqB,EAAE,MAAM,gDAAgD,CAAC;AACvF,OAAO,EACL,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,+CAA+C,CAAC;AACvD,OAAO,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAC5E,OAAO,EAAE,kBAAkB,EAAE,MAAM,0CAA0C,CAAC;AAC9E,OAAO,EAAE,qBAAqB,EAAE,MAAM,kDAAkD,CAAC;AACzF,OAAO,EAAE,oBAAoB,EAAE,MAAM,gDAAgD,CAAC;AACtF,OAAO,EACL,wBAAwB,EACxB,0BAA0B,GAC3B,MAAM,8CAA8C,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAuB,MAAM,yCAAyC,CAAC;AACjG,OAAO,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAC;AACtE,OAAO,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAC3D,OAAO,EAAE,uBAAuB,EAAE,MAAM,uCAAuC,CAAC;AAChF,OAAO,EAAE,kBAAkB,EAAE,MAAM,8CAA8C,CAAC;AAClF,OAAO,EAAE,oCAAoC,EAAE,MAAM,iDAAiD,CAAC;AACvG,OAAO,EAAE,YAAY,EAAE,MAAM,2CAA2C,CAAC;AACzE,OAAO,EAAE,yBAAyB,EAAE,MAAM,yCAAyC,CAAC;AACpF,OAAO,EAAE,wBAAwB,EAAE,MAAM,yCAAyC,CAAC;AACnF,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAkB,MAAM,iBAAiB,CAAC;AA0DpE,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,MAAkB,EAClB,QAAmB,EAAE;IAErB,0EAA0E;IAC1E,8EAA8E;IAC9E,4EAA4E;IAC5E,MAAM,gBAAgB,EAAE,CAAC;IACzB,MAAM,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACrC,wEAAwE;IACxE,wEAAwE;IACxE,4EAA4E;IAC5E,6CAA6C;IAC7C,EAAE;IACF,6EAA6E;IAC7E,0EAA0E;IAC1E,0EAA0E;IAC1E,mEAAmE;IACnE,uEAAuE;IACvE,MAAM,iBAAiB,CAAC,EAAE,EAAE,iBAAiB,EAAE,CAAC,CAAC;IACjD,MAAM,gBAAgB,GAAG,IAAI,gBAAgB,CAC3C,MAAM,CAAC,cAAc,EACrB,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,WAAW,CACnB,CAAC;IACF,+EAA+E;IAC/E,6EAA6E;IAC7E,8EAA8E;IAC9E,4CAA4C;IAC5C,MAAM,aAAa,GAAG,IAAI,aAAa,CACrC,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,aAAa,EACpB,CAAC,GAAG,kBAAkB,CAAC,EACvB,cAAc,EACd,MAAM,CAAC,eAAe,EACtB,MAAM,CAAC,WAAW,CACnB,CAAC;IACF,gBAAgB,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC;IAC/C,+EAA+E;IAC/E,2EAA2E;IAC3E,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACpD,MAAM,aAAa,GAAG,IAAI,oBAAoB,CAAC,gBAAgB,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;IACnF,yEAAyE;IACzE,0EAA0E;IAC1E,oEAAoE;IACpE,MAAM,aAAa,GAAG,IAAI,oBAAoB,CAAC,gBAAgB,EAAE,aAAa,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;IAElG,6EAA6E;IAC7E,0EAA0E;IAC1E,+BAA+B;IAC/B,MAAM,sBAAsB,GAAG,IAAI,sBAAsB,CAAC,EAAE,CAAC,CAAC;IAC9D,8EAA8E;IAC9E,wEAAwE;IACxE,kFAAkF;IAClF,kEAAkE;IAClE,MAAM,kBAAkB,GAAG,IAAI,yBAAyB,EAAE,CAAC;IAC3D,8EAA8E;IAC9E,MAAM,YAAY,GAAG,IAAI,YAAY,CAAC,gBAAgB,EAAE,aAAa,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;IACzF,2EAA2E;IAC3E,wEAAwE;IACxE,4EAA4E;IAC5E,MAAM,iBAAiB,GAAG,IAAI,iBAAiB,CAAC,gBAAgB,EAAE,aAAa,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;IACnG,2EAA2E;IAC3E,2EAA2E;IAC3E,+DAA+D;IAC/D,MAAM,WAAW,GAAG,IAAI,WAAW,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IAChD,MAAM,cAAc,GAAG,oBAAoB,CAAC,WAAW,CAAC,CAAC;IAEzD,0EAA0E;IAC1E,4EAA4E;IAC5E,MAAM,cAAc,GAAG,IAAI,cAAc,EAAE,CAAC;IAC5C,sEAAsE;IACtE,wEAAwE;IACxE,uEAAuE;IACvE,yEAAyE;IACzE,wEAAwE;IACxE,iDAAiD;IACjD,MAAM,aAAa,GAAG,IAAI,aAAa,EAAE,CAAC;IAC1C,MAAM,UAAU,GAAG,IAAI,UAAU,CAC/B,gBAAgB,EAChB,aAAa,EACb,MAAM,CAAC,SAAS,EAChB,cAAc,EACd,aAAa,CACd,CAAC;IACF,2EAA2E;IAC3E,8EAA8E;IAC9E,gBAAgB,CAAC,0BAA0B,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,UAAU,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC,CAAC;IACzF,MAAM,kBAAkB,GAAG,IAAI,kBAAkB,CAC/C,EAAE,EACF,gBAAgB,EAChB,aAAa,EACb,UAAU,CACX,CAAC;IACF,MAAM,WAAW,GAAG,IAAI,WAAW,CACjC,gBAAgB,EAChB,cAAc,EACd,MAAM,CAAC,cAAc,EACrB,MAAM,CAAC,WAAW,EAClB,MAAM,CAAC,SAAS,CACjB,CAAC;IACF,wEAAwE;IACxE,2EAA2E;IAC3E,oEAAoE;IACpE,mEAAmE;IACnE,gBAAgB,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;IAC7C,MAAM,qBAAqB,GAAG,IAAI,qBAAqB,CACrD,EAAE,EACF,aAAa,EACb,gBAAgB,EAChB,UAAU,CACX,CAAC;IACF,4EAA4E;IAC5E,4EAA4E;IAC5E,kBAAkB,CAAC,iBAAiB,CAAC,qBAAqB,CAAC,CAAC;IAE5D,wEAAwE;IACxE,qEAAqE;IACrE,wEAAwE;IACxE,qEAAqE;IACrE,MAAM,eAAe,GAAG,IAAI,eAAe,CAAC,EAAE,CAAC,CAAC;IAChD,kEAAkE;IAClE,uEAAuE;IACvE,sEAAsE;IACtE,yDAAyD;IACzD,MAAM,qBAAqB,GAAG,IAAI,qBAAqB,CAAC,EAAE,CAAC,CAAC;IAC5D,0EAA0E;IAC1E,kEAAkE;IAClE,UAAU,CAAC,sBAAsB,CAAC,CAAC,WAAW,EAAE,EAAE,CAChD,qBAAqB,CAAC,kBAAkB,CAAC,WAAW,CAAC,CACtD,CAAC;IACF,mEAAmE;IACnE,mEAAmE;IACnE,uEAAuE;IACvE,mEAAmE;IACnE,MAAM,QAAQ,GAAG,IAAI,gBAAgB,EAAE,CAAC;IACxC,0EAA0E;IAC1E,yEAAyE;IACzE,8EAA8E;IAC9E,2CAA2C;IAC3C,MAAM,kBAAkB,GAAG,IAAI,kBAAkB,EAAE,CAAC;IACpD,MAAM,eAAe,GAAG,IAAI,eAAe,CACzC,EAAE,EACF,UAAU,EACV,kBAAkB,EAClB,qBAAqB,EACrB,gBAAgB,EAChB,aAAa,EACb,eAAe,EACf,qBAAqB,EACrB,MAAM,CAAC,SAAS,EAChB,QAAQ,EACR,kBAAkB;IAClB,wEAAwE;IACxE,yEAAyE;IACzE,6BAA6B;IAC7B,aAAa,CACd,CAAC;IAEF,0EAA0E;IAC1E,uEAAuE;IACvE,gEAAgE;IAChE,4EAA4E;IAC5E,yEAAyE;IACzE,uEAAuE;IACvE,4DAA4D;IAC5D,kBAAkB,CAAC,cAAc,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE;QACtD,IAAI,MAAM,KAAK,cAAc;YAAE,OAAO;QACtC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,MAAM,CAAC,SAAS,IAAI,SAAS,GAAG,CAAC,CAAC;YAAE,iBAAiB,CAAC,UAAU,EAAE,CAAC;QACzG,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,MAAM,CAAC,SAAS,IAAI,UAAU,GAAG,CAAC,CAAC;YAAE,YAAY,CAAC,UAAU,EAAE,CAAC;IACvG,CAAC,CAAC,CAAC;IAEH,+EAA+E;IAC/E,sCAAsC;IACtC,MAAM,WAAW,GAAG,IAAI,kBAAkB,CAAC,aAAa,EAAE,gBAAgB,EAAE,cAAc,CAAC,CAAC;IAE5F,4EAA4E;IAC5E,8EAA8E;IAC9E,2EAA2E;IAC3E,+EAA+E;IAC/E,6EAA6E;IAC7E,MAAM,mBAAmB,GAAG,IAAI,qBAAqB,CACnD,EAAE,EACF,MAAM,CAAC,aAAa,EACpB,SAAS;IACT,+EAA+E;IAC/E,2EAA2E;IAC3E,CAAC,GAAG,EAAE,EAAE,CAAC,iBAAiB,CAAC,eAAe,CAAC,GAAG,CAAC,CAChD,CAAC;IACF,8EAA8E;IAC9E,gFAAgF;IAChF,kCAAkC,CAAC,mBAAmB,CAAC,CAAC;IAExD,0EAA0E;IAC1E,6EAA6E;IAC7E,6EAA6E;IAC7E,uEAAuE;IACvE,6EAA6E;IAC7E,sDAAsD;IACtD,MAAM,iBAAiB,GAAG,IAAI,wBAAwB,CAAC;QACrD,YAAY,EAAE,mBAAmB;QACjC,WAAW,EAAE,GAAG,MAAM,CAAC,gBAAgB,6BAA6B;KACrE,CAAC,CAAC;IACH,iBAAiB,CAAC,mBAAmB,CAAC,iBAAiB,CAAC,CAAC;IAEzD,8EAA8E;IAC9E,4EAA4E;IAC5E,6DAA6D;IAC7D,MAAM,oBAAoB,GAAG,IAAI,oBAAoB,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,mBAAmB,EAAE,CAAC,CAAC;IAE9F,6EAA6E;IAC7E,oEAAoE;IACpE,MAAM,qBAAqB,GAAG,IAAI,qBAAqB,CAAC,EAAE,EAAE,KAAK,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC;IAE7F,0EAA0E;IAC1E,gEAAgE;IAChE,wEAAwE;IACxE,6EAA6E;IAC7E,8EAA8E;IAC9E,kEAAkE;IAClE,MAAM,qBAAqB,GAAG,IAAI,qBAAqB,CAAC,EAAE,EAAE,MAAM,CAAC,oBAAoB,CAAC,CAAC;IACzF,MAAM,eAAe,GAAG,IAAI,eAAe,EAAE,CAAC;IAC9C,MAAM,UAAU,GAAG,IAAI,UAAU,CAC/B,eAAe,EACf;QACE,2EAA2E;QAC3E,4EAA4E;QAC5E,mCAAmC;QACnC,eAAe,EAAE,oBAAoB,MAAM,CAAC,IAAI,EAAE;QAClD,wEAAwE;QACxE,UAAU,EAAE,gBAAgB;QAC5B,0EAA0E;QAC1E,wEAAwE;QACxE,UAAU;QACV,sEAAsE;QACtE,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;KAC5C;IACD,6EAA6E;IAC7E,4EAA4E;IAC5E,eAAe;IACf,mBAAmB,EACnB,iBAAiB;IACjB,uEAAuE;IACvE,4DAA4D;IAC5D,oBAAoB;IACpB,sEAAsE;IACtE,wEAAwE;IACxE,mEAAmE;IACnE,CAAC,MAAM,EAAE,EAAE,CAAC,gBAAgB,CAAC,mBAAmB,CAAC,MAAM,CAAC,CACzD,CAAC;IACF,4EAA4E;IAC5E,6EAA6E;IAC7E,2EAA2E;IAC3E,6EAA6E;IAC7E,kEAAkE;IAClE,MAAM,gBAAgB,GAAG,IAAI,kBAAkB,CAAC;QAC9C,EAAE;QACF,MAAM,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,WAAW,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI;QAC3E,WAAW,EAAE,MAAM,CAAC,SAAS;QAC7B,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;QAC3C,WAAW,EAAE,MAAM,CAAC,mBAAmB;KACxC,CAAC,CAAC;IACH,uEAAuE;IACvE,uEAAuE;IACvE,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,gBAAgB,CAAC,CAAC;IACpE,MAAM,sBAAsB,GAAG,oCAAoC,CAAC,cAAc,CAAC,CAAC;IACpF,MAAM,iBAAiB,GAAG,uBAAuB,CAC/C,WAAW,EACX,qBAAqB,EACrB,gBAAgB,EAChB,sBAAsB,CACvB,CAAC;IAEF,yEAAyE;IACzE,6EAA6E;IAC7E,6EAA6E;IAC7E,yEAAyE;IACzE,4EAA4E;IAC5E,2EAA2E;IAC3E,0EAA0E;IAC1E,MAAM,YAAY,GAAG,IAAI,YAAY,EAAE,CAAC;IACxC,MAAM,kBAAkB,GAAG,yBAAyB,CAAC;QACnD,WAAW;QACX,gBAAgB;QAChB,eAAe;QACf,MAAM,EAAE,QAAQ;QAChB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,aAAa;KACd,CAAC,CAAC;IACH,MAAM,kBAAkB,GAAG,wBAAwB,CAAC,kBAAkB,CAAC,CAAC;IACxE,MAAM,kBAAkB,GAAG,wBAAwB,CAAC,qBAAqB,EAAE,oBAAoB,CAAC,CAAC;IACjG,uEAAuE;IACvE,6EAA6E;IAC7E,4EAA4E;IAC5E,MAAM,oBAAoB,GAAG,0BAA0B,CAAC,qBAAqB,EAAE,oBAAoB,EAAE,WAAW,CAAC,CAAC;IAElH,qEAAqE;IACrE,iEAAiE;IACjE,qEAAqE;IACrE,iCAAiC;IACjC,MAAM,WAAW,GAAG,MAAM,qBAAqB,CAAC,EAAE,CAAC,CAAC;IAEpD,mEAAmE;IACnE,oEAAoE;IACpE,qEAAqE;IACrE,+DAA+D;IAC/D,EAAE;IACF,gEAAgE;IAChE,sEAAsE;IACtE,kEAAkE;IAClE,gEAAgE;IAChE,4CAA4C;IAC5C,MAAM,qBAAqB,CAAC,gBAAgB,CAC1C,gBAAgB,CAAC,eAAe,EAAE,EAClC,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAC3D,EAAE,KAAK,EAAE,WAAW,CAAC,KAAK,EAAE,IAAI,EAAE,WAAW,CAAC,IAAI,EAAE,CACrD,CAAC;IACF,MAAM,oBAAoB,GAAG,IAAI,oBAAoB,CAAC;QACpD,OAAO,EAAE,qBAAqB;QAC9B,QAAQ,EAAE;YACR,gBAAgB,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CACpD,eAAe,CAAC,gBAAgB,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC;SACpE;QACD,2EAA2E;QAC3E,wEAAwE;QACxE,6DAA6D;QAC7D,aAAa,EAAE,KAAK,CAAC,aAAa,IAAI,iBAAiB;QACvD,QAAQ,EAAE,KAAK,CAAC,YAAY,IAAI,uBAAuB;QACvD,UAAU,EAAE;YACV,eAAe,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,eAAe,EAAE;SAC1D;QACD,WAAW,EAAE;YACX,EAAE,EAAE,WAAW,CAAC,EAAE;YAClB,KAAK,EAAE,WAAW,CAAC,KAAK;YACxB,IAAI,EAAE,WAAW,CAAC,IAAI;SACvB;KACF,CAAC,CAAC;IACH,oBAAoB,CAAC,KAAK,EAAE,CAAC;IAE7B,OAAO;QACL,MAAM;QACN,EAAE;QACF,gBAAgB;QAChB,aAAa;QACb,UAAU;QACV,aAAa;QACb,aAAa;QACb,sBAAsB;QACtB,kBAAkB;QAClB,YAAY;QACZ,iBAAiB;QACjB,WAAW;QACX,cAAc;QACd,qBAAqB;QACrB,UAAU;QACV,kBAAkB;QAClB,WAAW;QACX,qBAAqB;QACrB,eAAe;QACf,eAAe;QACf,QAAQ;QACR,kBAAkB;QAClB,qBAAqB;QACrB,oBAAoB;QACpB,WAAW;QACX,WAAW;QACX,mBAAmB;QACnB,qBAAqB;QACrB,oBAAoB;QACpB,UAAU;QACV,iBAAiB;QACjB,gBAAgB;QAChB,YAAY;QACZ,kBAAkB;QAClB,oBAAoB;QACpB,kBAAkB;QAClB,uEAAuE;QACvE,6DAA6D;QAC7D,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,IAAI,eAAe,EAAE;QACvD,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,iBAAiB;QACjD,aAAa,EAAE,KAAK,CAAC,aAAa,IAAI,EAAE;KACzC,CAAC;AACJ,CAAC"}

package/dist/core-config.d.ts

@@ -0,0 +1,119 @@
+/**
+ * Configuration for the CORE platform: the git-backed workspace/workflow,
+ * skills, tools, secrets vault, access control, and the MCP surface. Contains
+ * NO LLM, connector, or SSO-provider settings — those live on the enterprise
+ * `AppConfig` (config.ts), which extends this class. A core-only deployment
+ * boots from exactly these env vars.
+ */
+export declare class CoreConfig {
+    readonly port: number;
+    readonly databaseUrl: string;
+    readonly nodeEnv: string;
+    /**
+     * Tenant slug injected into every credential prefix so a deploy can brand its
+     * keys (`<tenant>_…` external API keys, `<tenant>-int_…` internal tokens,
+     * `<tenant>-up_…` upload tokens). Defaults to `bevel`. Changing it on an
+     * existing deployment invalidates previously minted keys/tokens (their
+     * prefix no longer matches), so pick it once. Lowercase alphanumeric only —
+     * `_` and `-` are reserved as prefix separators.
+     */
+    readonly tenantId: string;
+    readonly workspacesRoot: string;
+    /**
+     * Sibling-to-`workspacesRoot` location for the diff-review backup ledger.
+     * Layout mirrors `workspacesRoot` one-to-one: each user's repo lives at
+     * `<workspacesRoot>/<userId>/<repo>/...` and its backup at
+     * `<backupsRoot>/<userId>/<repo>/...`. Default sits next to workspaces so
+     * the two move together when ops point them at a different volume.
+     */
+    readonly backupsRoot: string;
+    /**
+     * Sibling-to-`workspacesRoot` location for `call_tool_chain` spill files —
+     * oversized tool-chain results parked outside any workspace so any agent (in-
+     * process or external over MCP) can read them back via `read_file`. Ephemeral,
+     * never committed, best-effort GC'd on write.
+     */
+    readonly spillRoot: string;
+    readonly jwtSecret: string;
+    readonly testPassword: string;
+    /** Clone/push URL for the KB repo. Any https git host (GitHub, GitLab, Bitbucket, Azure DevOps, self-hosted). */
+    readonly kbRepoUrl: string;
+    /** Directory name the KB lives under inside each user's workspace dir. */
+    readonly kbDirName: string;
+    /**
+     * Username sent in the git-over-HTTPS Basic credential (password = the git
+     * token). All major hosts accept a token as the password but differ on the
+     * username: GitHub `x-access-token` (default), GitLab `oauth2`, Bitbucket
+     * `x-token-auth`, Azure DevOps any non-empty value. Set `GIT_USERNAME` per
+     * host. Restricted to a safe charset because it's interpolated into the
+     * credential-helper shell snippet.
+     */
+    readonly gitUsername: string;
+    /**
+     * Filesystem path to the KB seed template (the `kb-template/` folder shipped
+     * inside this package — see `defaultKbTemplateDir()`). The seeder reads this
+     * to initialise an empty KB remote, and to top-up missing scaffolding on an
+     * existing one. Override with `KB_TEMPLATE_DIR`.
+     */
+    readonly kbTemplateDir: string;
+    /**
+     * Admin emails written into the generated `roles.yaml` when a fresh KB repo is
+     * seeded. Comma/whitespace-separated. A freshly-seeded repo with no Admin is
+     * unusable (access resolution requires ≥1 Admin), so seeding an EMPTY remote
+     * fails fast when this is empty. Not needed once the remote is already seeded.
+     */
+    readonly seedAdminEmails: string[];
+    /**
+     * Ontology-session boundary kill-switch. When true (default), an agent run
+     * that has read across more than one ontology can no longer write. A no-op on
+     * a single-ontology KB. Set `ONTOLOGY_SESSION_BLOCK=false` to disable.
+     *
+     * Stays on CORE config (not `AppConfig`) even though the write BLOCK itself
+     * is an enterprise-registered hook: the flag also switches off the core-owned
+     * touch TRACKING (the gate skips entirely when false — see
+     * `session-ontology.gate.ts`), so it must exist wherever the tracking runs.
+     */
+    readonly ontologySessionBlock: boolean;
+    /**
+     * Password-login toggle for the login screen. Default enabled; set
+     * `LOGIN_PASSWORD=false` to hide the method AND reject `/auth/login`
+     * server-side. SSO methods are separate `AuthProviderPlugin`s wired by the
+     * composition root — their toggles live with their configuration.
+     */
+    readonly loginPasswordEnabled: boolean;
+    /**
+     * Optional allow-list of email domains. When non-empty, ONLY emails whose
+     * domain matches (exactly, or as a subdomain) may log in via ANY method
+     * (shared-password or SSO). Comma/whitespace-separated; empty (default)
+     * allows any email. A leading `@` or `.` on an entry is tolerated, so
+     * `ALLOWED_EMAIL_DOMAINS=bevel.software, example.com` works as expected.
+     */
+    readonly allowedEmailDomains: string[];
+    /**
+     * 32-byte key (hex or base64) for AES-256-GCM encryption of core at-rest
+     * secrets: the secrets-vault values and the MCP OAuth client secrets/tokens.
+     * Read from `SECRETS_ENC_KEY`, falling back to the legacy
+     * `CONNECTOR_CONFIG_ENC_KEY` → `SHAREPOINT_TOKEN_ENC_KEY` chain so existing
+     * deploys keep decrypting without re-keying. Empty = secret values can't be
+     * saved (a clear error surfaces only when a secret is actually written/read).
+     */
+    readonly secretsEncKey: string;
+    /**
+     * Public base URL of THIS backend, used to build OAuth redirect URIs.
+     * Must match a redirect URI registered with the OAuth provider(s).
+     */
+    readonly publicBackendUrl: string;
+    /** Public base URL of the frontend, where callbacks redirect post-login. */
+    readonly publicFrontendUrl: string;
+    constructor();
+    /** Prefix for external API keys (connection keys): `<tenant>_`. */
+    get externalApiKeyPrefix(): string;
+    /** Prefix for in-process internal HMAC tokens: `<tenant>-int_`. */
+    get internalTokenPrefix(): string;
+    /** Prefix for scoped single-use bulk-upload tokens: `<tenant>-up_`. */
+    get uploadTokenPrefix(): string;
+    /** Prefix for MCP OAuth access tokens: `<tenant>-mcp_`. */
+    get mcpOAuthTokenPrefix(): string;
+    private validateKbIdentity;
+}
+//# sourceMappingURL=core-config.d.ts.map

package/dist/core-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"core-config.d.ts","sourceRoot":"","sources":["../src/core-config.ts"],"names":[],"mappings":"AAQA;;;;;;GAMG;AACH,qBAAa,UAAU;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB;;;;;;;OAOG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC;;;;;;OAMG;IACH,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B;;;;;OAKG;IACH,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,iHAAiH;IACjH,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,0EAA0E;IAC1E,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;;;;;;;OAOG;IACH,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B;;;;;OAKG;IACH,QAAQ,CAAC,eAAe,EAAE,MAAM,EAAE,CAAC;IACnC;;;;;;;;;OASG;IACH,QAAQ,CAAC,oBAAoB,EAAE,OAAO,CAAC;IACvC;;;;;OAKG;IACH,QAAQ,CAAC,oBAAoB,EAAE,OAAO,CAAC;IACvC;;;;;;OAMG;IACH,QAAQ,CAAC,mBAAmB,EAAE,MAAM,EAAE,CAAC;IACvC;;;;;;;OAOG;IACH,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B;;;OAGG;IACH,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,4EAA4E;IAC5E,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;;IA8FnC,mEAAmE;IACnE,IAAI,oBAAoB,IAAI,MAAM,CAEjC;IAED,mEAAmE;IACnE,IAAI,mBAAmB,IAAI,MAAM,CAEhC;IAED,uEAAuE;IACvE,IAAI,iBAAiB,IAAI,MAAM,CAE9B;IAED,2DAA2D;IAC3D,IAAI,mBAAmB,IAAI,MAAM,CAEhC;IAED,OAAO,CAAC,kBAAkB;CA4B3B"}