@bevel-software/platform-core-backend 0.14.0 → 0.19.0

package/THIRD-PARTY-NOTICES.md

@@ -26,12 +26,12 @@ These are shippable alongside our own licence, but carry an obligation beyond
 attribution: modifications to *their own source files* must remain under the same
 licence and be made available. Using them as dependencies triggers nothing.
 
-- `@utcp/cli@1.1.1` — MPL-2.0
+- `@utcp/cli@1.1.3` — MPL-2.0
 - `@utcp/code-mode@1.2.13` — MPL-2.0
 - `@utcp/direct-call@1.1.1` — MPL-2.0
-- `@utcp/http@1.1.11` — MPL-2.0
-- `@utcp/mcp@1.1.6` — MPL-2.0
-- `@utcp/sdk@1.1.2` — MPL-2.0
+- `@utcp/http@1.1.12` — MPL-2.0
+- `@utcp/mcp@1.2.0` — MPL-2.0
+- `@utcp/sdk@1.2.0` — MPL-2.0
 
 ## Packages shipping no licence file
 
@@ -85,12 +85,12 @@ the declared licence; refer to the upstream project for the notice.
 - **@types/node@22.20.1** — MIT — see licence text #16 <https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node>
 - **@types/pg@8.20.0** — MIT — see licence text #16 <https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/pg>
 - **@types/unist@3.0.3** — MIT — see licence text #16 <https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/unist>
-- **@utcp/cli@1.1.1** — MPL-2.0 — see licence text #17 <https://github.com/universal-tool-calling-protocol/typescript-utcp#readme>
+- **@utcp/cli@1.1.3** — MPL-2.0 — see licence text #17 <https://github.com/universal-tool-calling-protocol/typescript-utcp#readme>
 - **@utcp/code-mode@1.2.13** — MPL-2.0 — see licence text #17 <https://github.com/universal-tool-calling-protocol/code-mode#readme>
 - **@utcp/direct-call@1.1.1** — MPL-2.0 — see licence text #17 <https://github.com/universal-tool-calling-protocol/typescript-utcp#readme>
-- **@utcp/http@1.1.11** — MPL-2.0 — see licence text #17 <https://github.com/universal-tool-calling-protocol/typescript-utcp#readme>
-- **@utcp/mcp@1.1.6** — MPL-2.0 — see licence text #17 <https://github.com/universal-tool-calling-protocol/typescript-utcp#readme>
-- **@utcp/sdk@1.1.2** — MPL-2.0 — see licence text #17 <https://github.com/universal-tool-calling-protocol/typescript-utcp#readme>
+- **@utcp/http@1.1.12** — MPL-2.0 — see licence text #17 <https://github.com/universal-tool-calling-protocol/typescript-utcp#readme>
+- **@utcp/mcp@1.2.0** — MPL-2.0 — see licence text #17 <https://github.com/universal-tool-calling-protocol/typescript-utcp#readme>
+- **@utcp/sdk@1.2.0** — MPL-2.0 — see licence text #17 <https://github.com/universal-tool-calling-protocol/typescript-utcp#readme>
 - **@vercel/oidc@3.2.0** — Apache-2.0 — see licence text #18 <https://vercel.com>
 - **@workflow/serde@4.1.0-beta.2** — Apache-2.0 — see licence text #19 <https://github.com/vercel/workflow#readme>
 - **accepts@2.0.0** — MIT — see licence text #20 <https://github.com/jshttp/accepts#readme>

package/dist/core/catalog-cache-invalidation.d.ts

@@ -0,0 +1,45 @@
+import type { FileChangeNotifier } from '../modules/kb-fs/file-change-notifier.js';
+import type { WorkflowEventBus } from '../modules/workflow/event-bus.js';
+/**
+ * A catalog that scans the DEFAULT branch's working tree and caches the result
+ * behind a TTL — the skill catalog, the tool-manual catalog, the plugin index.
+ * All three answer the same question ("what is released?") off the same folder,
+ * so they go stale together and are dropped together.
+ */
+export interface InvalidatableCatalog {
+    invalidate(): void;
+}
+/**
+ * Every way a released catalog can go stale, wired in one place.
+ *
+ * The TTL inside each catalog is a backstop, not the freshness mechanism: at a
+ * minute wide it is far longer than the gap between "the user did the thing"
+ * and "the user looks for the result". These three subscribers are what make
+ * the next read see the change instead of the previous minute's answer.
+ *
+ * Returns an unsubscribe that detaches all three.
+ */
+export declare function registerCatalogCacheInvalidation(deps: {
+    eventBus: WorkflowEventBus;
+    fileChangeNotifier: FileChangeNotifier;
+    /** The KB folder inside the workspace — `paths` are workspace-relative. */
+    kbDirName: string;
+    catalogs: InvalidatableCatalog[];
+    /**
+     * The read gate every one of those catalogs is FILTERED through, dropped on
+     * the same signal and for the same reason.
+     *
+     * A skill's or a manual's own `read:` frontmatter lives in the file the
+     * commit just rewrote, and the batch gate memoizes those own-entry rules per
+     * workspace for five minutes. Dropping the catalog without dropping that
+     * memo answers the NEW listing through the OLD verdicts — a revoked skill
+     * still loadable by name, a just-granted one still missing from the listing
+     * — for the rest of the memo's life. The two have to go stale together or
+     * the pair disagrees, which is exactly what `getSkill` and `list_skills`
+     * were unified to prevent.
+     */
+    accessControl: {
+        invalidate(workspaceId: string): void;
+    };
+}): () => void;
+//# sourceMappingURL=catalog-cache-invalidation.d.ts.map

package/dist/core/catalog-cache-invalidation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog-cache-invalidation.d.ts","sourceRoot":"","sources":["../../src/core/catalog-cache-invalidation.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0CAA0C,CAAC;AACnF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AAGzE;;;;;GAKG;AACH,MAAM,WAAW,oBAAoB;IACnC,UAAU,IAAI,IAAI,CAAC;CACpB;AAED;;;;;;;;;GASG;AACH,wBAAgB,gCAAgC,CAAC,IAAI,EAAE;IACrD,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,kBAAkB,EAAE,kBAAkB,CAAC;IACvC,2EAA2E;IAC3E,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,oBAAoB,EAAE,CAAC;IACjC;;;;;;;;;;;;OAYG;IACH,aAAa,EAAE;QAAE,UAAU,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;CAC1D,GAAG,MAAM,IAAI,CAiEb"}

package/dist/core/catalog-cache-invalidation.js

@@ -0,0 +1,76 @@
+import { DEFAULT_BRANCH, PLUGINS_DIR, SKILLS_DIR } from '@bevel-software/platform-shared';
+import { workspaceIdForBranch } from '../shared/workspace-id.js';
+/**
+ * Every way a released catalog can go stale, wired in one place.
+ *
+ * The TTL inside each catalog is a backstop, not the freshness mechanism: at a
+ * minute wide it is far longer than the gap between "the user did the thing"
+ * and "the user looks for the result". These three subscribers are what make
+ * the next read see the change instead of the previous minute's answer.
+ *
+ * Returns an unsubscribe that detaches all three.
+ */
+export function registerCatalogCacheInvalidation(deps) {
+    const { eventBus, fileChangeNotifier, kbDirName, catalogs, accessControl } = deps;
+    const invalidateAll = () => {
+        for (const c of catalogs)
+            c.invalidate();
+        // Scoped to the branch the catalogs read, and no wider: a drop here costs
+        // the next reader one model load, so it must not reach workspaces this
+        // event says nothing about.
+        accessControl.invalidate(workspaceIdForBranch(DEFAULT_BRANCH));
+    };
+    // Subscriber A — COMMIT-time freshness: a committed change drops the affected
+    // caches immediately instead of waiting out their TTLs. The catalogs are
+    // global but read the DEFAULT branch only, so only default-branch changes
+    // under their folders matter. (The kb-graph id-index invalidation that used
+    // to live here is registered by the enterprise overlay, next to the kb-graph
+    // service it belongs to — the caches are independent, so the split preserves
+    // behavior.)
+    const offFiles = fileChangeNotifier.onFilesChanged(({ branch, paths }) => {
+        if (branch !== DEFAULT_BRANCH)
+            return;
+        // Skills, tools, the plugin index and the link index all read `Plugins/`
+        // or `Skills/`, so one touch check drives every cache. An access grant
+        // lands as a default-branch change to `Plugins/<plugin>/access.md` or a
+        // skill folder's `access.md`, so this is also what makes a newly-granted
+        // plugin or link unlock within one round-trip instead of one TTL. Both
+        // names are live bindings (a deployment may rename the roots), hence read
+        // per event rather than captured.
+        if (paths.some((p) => p.startsWith(`${kbDirName}/${PLUGINS_DIR}/`) || p.startsWith(`${kbDirName}/${SKILLS_DIR}/`))) {
+            invalidateAll();
+        }
+    });
+    // Subscriber B — the DEFAULT branch's tree changed under the catalogs.
+    //
+    // `fs-tree-changed` is emitted the moment bytes hit a working tree: by the
+    // workspace routes when someone writes a file, and by `pullWorkspace` when a
+    // pull rewrites the default workspace — a merge landing an approved skill,
+    // the non-fast-forward recovery ladder, a plain sync from the remote. That
+    // is deliberately ONE signal rather than one per occasion: the catalogs do
+    // not care which path rewrote the tree, only that it is no longer the tree
+    // they scanned. Enumerating the occasions instead (a subscriber for merges,
+    // another for recoveries) left every path nobody had thought of yet serving
+    // a stale catalog for a full TTL — which is exactly how the merge case got
+    // missed.
+    //
+    // `git-sync-recovered` is the same fact arriving by the other road: a
+    // workspace that had diverged from origin has been reconciled, so its tree
+    // moved. The pull inside that recovery announces itself, but the recovery
+    // can also complete by paths that do not run one, and a catalog left holding
+    // a scan of the diverged tree is the failure this exists to prevent.
+    const offEmit = eventBus.onEmit((event) => {
+        if (event.kind !== 'fs-tree-changed' && event.kind !== 'git-sync-recovered')
+            return;
+        // Both events declare `branch`, so no `in` guard: the kind check above has
+        // already narrowed the union to the two that carry one.
+        if (event.branch !== DEFAULT_BRANCH)
+            return;
+        invalidateAll();
+    });
+    return () => {
+        offFiles();
+        offEmit();
+    };
+}
+//# sourceMappingURL=catalog-cache-invalidation.js.map

package/dist/core/catalog-cache-invalidation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog-cache-invalidation.js","sourceRoot":"","sources":["../../src/core/catalog-cache-invalidation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAG1F,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAYjE;;;;;;;;;GASG;AACH,MAAM,UAAU,gCAAgC,CAAC,IAoBhD;IACC,MAAM,EAAE,QAAQ,EAAE,kBAAkB,EAAE,SAAS,EAAE,QAAQ,EAAE,aAAa,EAAE,GAAG,IAAI,CAAC;IAClF,MAAM,aAAa,GAAG,GAAG,EAAE;QACzB,KAAK,MAAM,CAAC,IAAI,QAAQ;YAAE,CAAC,CAAC,UAAU,EAAE,CAAC;QACzC,0EAA0E;QAC1E,uEAAuE;QACvE,4BAA4B;QAC5B,aAAa,CAAC,UAAU,CAAC,oBAAoB,CAAC,cAAc,CAAC,CAAC,CAAC;IACjE,CAAC,CAAC;IAEF,8EAA8E;IAC9E,yEAAyE;IACzE,0EAA0E;IAC1E,4EAA4E;IAC5E,6EAA6E;IAC7E,6EAA6E;IAC7E,aAAa;IACb,MAAM,QAAQ,GAAG,kBAAkB,CAAC,cAAc,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE;QACvE,IAAI,MAAM,KAAK,cAAc;YAAE,OAAO;QACtC,yEAAyE;QACzE,uEAAuE;QACvE,wEAAwE;QACxE,yEAAyE;QACzE,uEAAuE;QACvE,0EAA0E;QAC1E,kCAAkC;QAClC,IACE,KAAK,CAAC,IAAI,CACR,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,SAAS,IAAI,WAAW,GAAG,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,SAAS,IAAI,UAAU,GAAG,CAAC,CACnG,EACD,CAAC;YACD,aAAa,EAAE,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,uEAAuE;IACvE,EAAE;IACF,2EAA2E;IAC3E,6EAA6E;IAC7E,2EAA2E;IAC3E,2EAA2E;IAC3E,2EAA2E;IAC3E,2EAA2E;IAC3E,4EAA4E;IAC5E,4EAA4E;IAC5E,2EAA2E;IAC3E,UAAU;IACV,EAAE;IACF,sEAAsE;IACtE,2EAA2E;IAC3E,0EAA0E;IAC1E,6EAA6E;IAC7E,qEAAqE;IACrE,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;QACxC,IAAI,KAAK,CAAC,IAAI,KAAK,iBAAiB,IAAI,KAAK,CAAC,IAAI,KAAK,oBAAoB;YAAE,OAAO;QACpF,2EAA2E;QAC3E,wDAAwD;QACxD,IAAI,KAAK,CAAC,MAAM,KAAK,cAAc;YAAE,OAAO;QAC5C,aAAa,EAAE,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,EAAE;QACV,QAAQ,EAAE,CAAC;QACX,OAAO,EAAE,CAAC;IACZ,CAAC,CAAC;AACJ,CAAC"}

package/dist/core/catalog-revision.d.ts

@@ -0,0 +1,39 @@
+import express, { type RequestHandler } from 'express';
+import type { ISkillService, SkillSummary } from '../modules/skills/skills.contract.js';
+import type { IToolManualService } from '../modules/tool-manuals/tool-manuals.contract.js';
+import '../modules/tool-auth/tool-auth.middleware.js';
+/**
+ * The revision of a caller's catalog: a hex digest over the two lists.
+ *
+ * The manual half arrives already reduced to one opaque line per manual
+ * (`IToolManualService.catalogFingerprints`), because what makes a manual
+ * "the same manual" includes the bytes of the file it was parsed from — a
+ * `.tool` that keeps its name and description while changing its `url`, its
+ * headers or an inline manual's embedded tools is a DIFFERENT callable thing,
+ * and a client holding the old one has to be told. That digest is the tool
+ * catalog's own business, so it is computed there rather than reconstructed
+ * from a summary here.
+ *
+ * SORTED before hashing, so a reordering is not a change — the scans sort
+ * already, but a dedupe or an access filter could reshuffle what survives, and
+ * "the same set in another order" is not something a client owes a refresh for.
+ */
+export declare function catalogRevision(manuals: readonly string[], skills: readonly SkillSummary[]): string;
+/**
+ * `GET /agent/catalog-revision` — the caller's catalog fingerprint, plus the
+ * two counts behind it so an operator reading a log can tell a shrinking
+ * catalog from a growing one.
+ *
+ * Mounted on the tools router behind the same `manualAuth` as `/agent/all-tools`,
+ * and it tells the caller nothing that route does not already: it is a digest
+ * of what they may read, per-caller, ACL-filtered by the two services
+ * themselves.
+ */
+export declare function createCatalogRevisionRoutes(deps: {
+    toolManuals: Pick<IToolManualService, 'catalogFingerprints'>;
+    skills: Pick<ISkillService, 'listSkills'>;
+    manualAuth: RequestHandler;
+    /** Connection-key/internal-token user id → email, for the per-caller ACL. */
+    resolveUserEmail: (userId: string) => Promise<string | undefined>;
+}): express.Router;
+//# sourceMappingURL=catalog-revision.d.ts.map

package/dist/core/catalog-revision.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog-revision.d.ts","sourceRoot":"","sources":["../../src/core/catalog-revision.ts"],"names":[],"mappings":"AACA,OAAO,OAAO,EAAE,EAAgB,KAAK,cAAc,EAAE,MAAM,SAAS,CAAC;AAErE,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,sCAAsC,CAAC;AACxF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kDAAkD,CAAC;AAC3F,OAAO,8CAA8C,CAAC;AAmCtD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,SAAS,MAAM,EAAE,EAC1B,MAAM,EAAE,SAAS,YAAY,EAAE,GAC9B,MAAM,CAOR;AAED;;;;;;;;;GASG;AACH,wBAAgB,2BAA2B,CAAC,IAAI,EAAE;IAChD,WAAW,EAAE,IAAI,CAAC,kBAAkB,EAAE,qBAAqB,CAAC,CAAC;IAC7D,MAAM,EAAE,IAAI,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;IAC1C,UAAU,EAAE,cAAc,CAAC;IAC3B,6EAA6E;IAC7E,gBAAgB,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;CACnE,GAAG,OAAO,CAAC,MAAM,CAyBjB"}

package/dist/core/catalog-revision.js

@@ -0,0 +1,94 @@
+import { createHash } from 'node:crypto';
+import express from 'express';
+import { logger } from '../shared/logging.js';
+import '../modules/tool-auth/tool-auth.middleware.js'; // Express Request augmentation (req.toolAuth)
+const log = logger('catalog-revision');
+/**
+ * A fingerprint of ONE caller's released catalog — every tool manual and every
+ * skill the default branch serves them, right now.
+ *
+ * It exists for a client that holds a long-lived connection and cannot be told
+ * anything: the local `hexis-mcp` server. The hosted endpoint is stateless, so
+ * every request there already rebuilds its surface from the live registry
+ * (`mcp.routes.stateless.test.ts` pins that). A process on someone's laptop
+ * registered the deployment's manual ONCE, at startup, and would otherwise
+ * serve that startup's toolset until it is restarted. Polling this tells it —
+ * cheaply, and without a second way for the catalogs to be read — exactly when
+ * that toolset stopped being the current one.
+ *
+ * Why a fingerprint and not a counter: the caches are dropped by any
+ * default-branch write (`catalog-cache-invalidation.ts` sees `fs-tree-changed`,
+ * which carries no paths), so a bump-per-invalidation would have every note
+ * anyone saves re-registering an MCP session on every connected laptop. This
+ * changes when the CATALOG changed, and a poller that re-registers on it is
+ * doing work that was actually owed.
+ */
+/**
+ * A skill's line: everything `list_skills` shows about it on an AGENT
+ * surface. Not `plugins`, which only the browser route decorates onto the
+ * catalog — a field no agent-facing listing carries cannot be a change one
+ * owes a refresh for.
+ */
+function skillFingerprint(s) {
+    return [s.name, s.path, s.version ?? '', s.description].join('\u0000');
+}
+/**
+ * The revision of a caller's catalog: a hex digest over the two lists.
+ *
+ * The manual half arrives already reduced to one opaque line per manual
+ * (`IToolManualService.catalogFingerprints`), because what makes a manual
+ * "the same manual" includes the bytes of the file it was parsed from — a
+ * `.tool` that keeps its name and description while changing its `url`, its
+ * headers or an inline manual's embedded tools is a DIFFERENT callable thing,
+ * and a client holding the old one has to be told. That digest is the tool
+ * catalog's own business, so it is computed there rather than reconstructed
+ * from a summary here.
+ *
+ * SORTED before hashing, so a reordering is not a change — the scans sort
+ * already, but a dedupe or an access filter could reshuffle what survives, and
+ * "the same set in another order" is not something a client owes a refresh for.
+ */
+export function catalogRevision(manuals, skills) {
+    const lines = [
+        ...[...manuals].sort(),
+        '\u0001', // separates the two lists, so a line can never migrate between them
+        ...skills.map(skillFingerprint).sort(),
+    ];
+    return createHash('sha256').update(lines.join('\n')).digest('hex').slice(0, 32);
+}
+/**
+ * `GET /agent/catalog-revision` — the caller's catalog fingerprint, plus the
+ * two counts behind it so an operator reading a log can tell a shrinking
+ * catalog from a growing one.
+ *
+ * Mounted on the tools router behind the same `manualAuth` as `/agent/all-tools`,
+ * and it tells the caller nothing that route does not already: it is a digest
+ * of what they may read, per-caller, ACL-filtered by the two services
+ * themselves.
+ */
+export function createCatalogRevisionRoutes(deps) {
+    const router = express.Router();
+    router.get('/agent/catalog-revision', deps.manualAuth, async (req, res) => {
+        try {
+            const userId = req.toolAuth?.userId;
+            const email = userId ? await deps.resolveUserEmail(userId).catch(() => undefined) : undefined;
+            // No resolvable caller is an EMPTY catalog, not a failure: that is what
+            // both list surfaces answer such a caller, so the fingerprint agrees
+            // with them rather than inventing a third verdict.
+            const [manuals, skills] = email
+                ? await Promise.all([deps.toolManuals.catalogFingerprints(email), deps.skills.listSkills(email)])
+                : [[], []];
+            res.json({
+                revision: catalogRevision(manuals, skills),
+                tools: manuals.length,
+                skills: skills.length,
+            });
+        }
+        catch (err) {
+            log.error('catalog-revision failed:', { err });
+            res.status(500).json({ error: 'Failed to read the catalog' });
+        }
+    });
+    return router;
+}
+//# sourceMappingURL=catalog-revision.js.map

package/dist/core/catalog-revision.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog-revision.js","sourceRoot":"","sources":["../../src/core/catalog-revision.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,OAA8C,MAAM,SAAS,CAAC;AACrE,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAG9C,OAAO,8CAA8C,CAAC,CAAC,8CAA8C;AAErG,MAAM,GAAG,GAAG,MAAM,CAAC,kBAAkB,CAAC,CAAC;AAEvC;;;;;;;;;;;;;;;;;;;GAmBG;AAEH;;;;;GAKG;AACH,SAAS,gBAAgB,CAAC,CAAe;IACvC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AACzE,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,eAAe,CAC7B,OAA0B,EAC1B,MAA+B;IAE/B,MAAM,KAAK,GAAG;QACZ,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,EAAE;QACtB,QAAQ,EAAE,oEAAoE;QAC9E,GAAG,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,IAAI,EAAE;KACvC,CAAC;IACF,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAClF,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,2BAA2B,CAAC,IAM3C;IACC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAEhC,MAAM,CAAC,GAAG,CAAC,yBAAyB,EAAE,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,GAAY,EAAE,GAAG,EAAE,EAAE;QACjF,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC;YACpC,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9F,wEAAwE;YACxE,qEAAqE;YACrE,mDAAmD;YACnD,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,KAAK;gBAC7B,CAAC,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;gBACjG,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YACb,GAAG,CAAC,IAAI,CAAC;gBACP,QAAQ,EAAE,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC;gBAC1C,KAAK,EAAE,OAAO,CAAC,MAAM;gBACrB,MAAM,EAAE,MAAM,CAAC,MAAM;aACtB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,KAAK,CAAC,0BAA0B,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;YAC/C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC,CAAC;QAChE,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/core/create-core-server.d.ts

@@ -30,6 +30,13 @@ export interface ServerExtensions {
      * overlay's own router installs a larger parser for them (body-parser
      * ignores a second parse once the first has run — see the comment at the
      * parser below).
+     *
+     * An exempt path under `/api/workspace/:id` has its body parsed AFTER the
+     * git-internals route guard has looked at it, so a path-bearing field in
+     * that body is not refused ahead of the route the way every other
+     * workspace body is. The services refuse the git folder on their own, so
+     * nothing reaches it; but such a router should run `gitGuardedInputs` on
+     * the parsed body itself if it wants the same early, sanitized 403.
      */
     jsonParserExemptPaths?: string[];
     /**

package/dist/core/create-core-server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create-core-server.d.ts","sourceRoot":"","sources":["../../src/core/create-core-server.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,SAAS,CAAC;AAG9B,OAAO,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAqBtD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,+CAA+C,CAAC;AAazF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAE9D,KAAK,UAAU,GAAG,UAAU,CAAC,OAAO,OAAO,CAAC,CAAC;AAE7C;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,YAAY,CAAC,cAAc,CAAC,CAAC;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,cAAc,CAAC;IACzB,WAAW,EAAE,YAAY,CAAC,oBAAoB,CAAC,CAAC;IAChD,+EAA+E;IAC/E,mBAAmB,EAAE,mBAAmB,CAAC;IACzC,IAAI,EAAE,YAAY,CAAC;CACpB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;;;;OAKG;IACH,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC;IACjC;;;;OAIG;IACH,MAAM,CAAC,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAClD,mFAAmF;IACnF,OAAO,CAAC,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,GAAG,IAAI,CAAC;IACpD;;;;OAIG;IACH,KAAK,CAAC,CAAC,GAAG,EAAE,cAAc,GAAG,IAAI,CAAC;IAClC;;;;OAIG;IACH,SAAS,CAAC,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,GAAG,IAAI,CAAC;IACtD,2EAA2E;IAC3E,MAAM,CAAC,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,GAAG,IAAI,CAAC;CACpD;AAED,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,YAAY,EAClB,GAAG,GAAE,gBAAqB,EAC1B,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GAChC,OAAO,CAAC,UAAU,CAAC,CAwarB"}
+{"version":3,"file":"create-core-server.d.ts","sourceRoot":"","sources":["../../src/core/create-core-server.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,SAAS,CAAC;AAO9B,OAAO,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAoCtD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,+CAA+C,CAAC;AA+BzF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAE9D,KAAK,UAAU,GAAG,UAAU,CAAC,OAAO,OAAO,CAAC,CAAC;AAE7C;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,YAAY,CAAC,cAAc,CAAC,CAAC;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,cAAc,CAAC;IACzB,WAAW,EAAE,YAAY,CAAC,oBAAoB,CAAC,CAAC;IAChD,+EAA+E;IAC/E,mBAAmB,EAAE,mBAAmB,CAAC;IACzC,IAAI,EAAE,YAAY,CAAC;CACpB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;;;;;;;;;;;OAYG;IACH,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC;IACjC;;;;OAIG;IACH,MAAM,CAAC,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAClD,mFAAmF;IACnF,OAAO,CAAC,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,GAAG,IAAI,CAAC;IACpD;;;;OAIG;IACH,KAAK,CAAC,CAAC,GAAG,EAAE,cAAc,GAAG,IAAI,CAAC;IAClC;;;;OAIG;IACH,SAAS,CAAC,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,GAAG,IAAI,CAAC;IACtD,2EAA2E;IAC3E,MAAM,CAAC,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,GAAG,IAAI,CAAC;CACpD;AAED,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,YAAY,EAClB,GAAG,GAAE,gBAAqB,EAC1B,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GAChC,OAAO,CAAC,UAAU,CAAC,CAmqBrB"}