@bevel-software/platform-core-backend 0.14.0 → 0.19.0

package/dist/modules/plugins/join-request-records.store.d.ts

@@ -0,0 +1,161 @@
+import type { ChangeRequestState } from '@bevel-software/platform-shared';
+import type { Database } from '../database/connection.js';
+/**
+ * A join request as the platform recorded it — the durable "this person
+ * asked", which the change request is a consequence of rather than the same
+ * event as. See `plugin_join_requests` in `core-schema.ts` for why it is a
+ * row and not a queue in memory.
+ */
+export interface JoinRequestRecord {
+    id: string;
+    /** Lowercased — the identity the join branch is cut from. */
+    requesterEmail: string;
+    requesterName: string;
+    /** The plugin's primary folder BELOW the plugins root (`Finance`, `teams/GTM`). */
+    pluginKey: string;
+    status: JoinRequestStatus;
+    /** What the git work said when it refused; null unless `failed`. */
+    failureReason: string | null;
+    /** The change request the git work opened; null until it exists. */
+    changeRequestNumber: number | null;
+    /** When a process took this row's git work; null when nobody holds it. */
+    claimedAt: Date | null;
+    /**
+     * The fencing token of the claim `claimedAt` is the liveness of; null when
+     * nobody holds it. A worker names this on every write that holds or decides
+     * the row, so a superseded one writes nothing.
+     */
+    claimToken: string | null;
+}
+export type JoinRequestStatus = 'pending' | 'opened' | 'failed';
+/**
+ * A record this process HOLDS — the only shape a claim hands back, and the
+ * only one the write methods below will accept a token from. Carrying the
+ * token in the type is what stops a caller from settling a row it never
+ * claimed: there is no token to pass unless a claim produced one.
+ */
+export type ClaimedJoinRequest = JoinRequestRecord & {
+    claimToken: string;
+};
+/**
+ * Where join requests are recorded.
+ *
+ * Every method is ONE statement, which is what makes the guarantees the
+ * table's rather than a caller's: two tabs clicking at the same moment both
+ * land on the same row because `(requester_email, plugin_key)` is unique, and
+ * neither has to have read the other's write first.
+ */
+export interface JoinRequestStore {
+    /**
+     * Record the ask. A first ask inserts `pending`; a second one finds the
+     * row — reviving a `failed` record to `pending` so the retry continues the
+     * recorded request, and leaving a `pending` or `opened` one exactly as it
+     * is so a second click cannot restart work already under way.
+     */
+    record(input: {
+        requesterEmail: string;
+        requesterName: string;
+        pluginKey: string;
+    }): Promise<JoinRequestRecord>;
+    /** One record as it stands NOW, or null when it is gone. */
+    byId(id: string): Promise<JoinRequestRecord | null>;
+    /** Every record this person has, for the plugin listing. */
+    forRequester(requesterEmail: string): Promise<JoinRequestRecord[]>;
+    /** Every record still `pending` — what the boot sweep re-runs. */
+    pending(): Promise<JoinRequestRecord[]>;
+    /**
+     * Take this row's git work, or report that somebody else holds it.
+     *
+     * The ONE guard against two processes doing git on the same branch: a
+     * redeploy overlaps two servers, both sweep, and neither's in-process
+     * single-flight map can see the other's. Returns the row when this caller
+     * may proceed and null when it may not — so a caller that gets null does
+     * nothing at all, rather than racing.
+     *
+     * Claims expire (see `claimed_at` on the table) so a process that dies
+     * holding one does not owe the request forever.
+     *
+     * The record that comes back carries a FRESH `claimToken`, which the caller
+     * names on every write after it. That is what makes the claim exclusive
+     * rather than merely advisory: a worker that overran the stale window and
+     * had its row taken can no longer settle the attempt that replaced it.
+     */
+    claim(id: string, staleAfterMs: number): Promise<ClaimedJoinRequest | null>;
+    /**
+     * Say the claim on this row is still being worked — push its timestamp
+     * forward. What turns `claimed_at` from a deadline into a liveness signal:
+     * a process that is still going keeps its row however long the work takes,
+     * and one that died stops beating and lets go within the stale window.
+     *
+     * Answers whether the claim is still THIS caller's. False means the row
+     * moved on without it: taken over after the window lapsed, settled by
+     * somebody else, or deleted outright — which is the shape account erasure
+     * takes. A worker that reads false has to stop before its next side effect
+     * rather than finish work nobody is owed and open a change request for an
+     * account that no longer exists.
+     */
+    heartbeat(id: string, claimToken: string): Promise<boolean>;
+    /**
+     * Give a claim back without deciding the request — the platform was not
+     * ready, so the row stays `pending` and becomes claimable again at once
+     * instead of after the stale window.
+     */
+    release(id: string, claimToken: string): Promise<void>;
+    /**
+     * The git work landed: the change request exists, under this number.
+     * A no-op unless the caller still holds the claim it names.
+     */
+    markOpened(id: string, claimToken: string, changeRequestNumber: number): Promise<void>;
+    /**
+     * The git work refused, in its own words. A no-op unless the caller still
+     * holds the claim it names — a superseded worker's failure must not be
+     * stamped on the attempt that replaced it.
+     */
+    markFailed(id: string, claimToken: string, reason: string): Promise<void>;
+    /**
+     * The change request an `opened` row named is over — declined, withdrawn,
+     * or settled and the access since taken back — so the ask is owed again:
+     * the row goes back to `pending`, unclaimed and unnumbered, for the next
+     * job to carry. Conditional on the row still being `opened` ON THAT
+     * NUMBER, so an attempt that has since re-pointed the row at a newer
+     * request is left alone. Returns the row as it stands afterwards, whether
+     * or not this call changed it; null when it is gone.
+     */
+    reopen(id: string, changeRequestNumber: number): Promise<JoinRequestRecord | null>;
+    /**
+     * The state of each named change request, read from its own row: `open`,
+     * `merged` or `closed`, with a number that has no row absent from the map.
+     *
+     * From the row and not from a listing, because every listing is OPEN-ONLY
+     * and cached — the one question this answers is whether an `opened`
+     * record's request is still standing, and a listing of open requests can
+     * only ever say yes or stay silent. The row says no.
+     */
+    changeRequestStates(numbers: readonly number[]): Promise<Map<number, ChangeRequestState>>;
+}
+export declare class DbJoinRequestStore implements JoinRequestStore {
+    private readonly db;
+    constructor(db: Database);
+    record(input: {
+        requesterEmail: string;
+        requesterName: string;
+        pluginKey: string;
+    }): Promise<JoinRequestRecord>;
+    byId(id: string): Promise<JoinRequestRecord | null>;
+    forRequester(requesterEmail: string): Promise<JoinRequestRecord[]>;
+    pending(): Promise<JoinRequestRecord[]>;
+    /**
+     * One conditional UPDATE, which is what makes this a claim rather than a
+     * check: the `pending` status and the free-or-stale claim are tested by the
+     * database in the same statement that takes the row, so two processes
+     * asking together cannot both be told yes.
+     */
+    claim(id: string, staleAfterMs: number): Promise<ClaimedJoinRequest | null>;
+    heartbeat(id: string, claimToken: string): Promise<boolean>;
+    release(id: string, claimToken: string): Promise<void>;
+    markOpened(id: string, claimToken: string, changeRequestNumber: number): Promise<void>;
+    markFailed(id: string, claimToken: string, reason: string): Promise<void>;
+    reopen(id: string, changeRequestNumber: number): Promise<JoinRequestRecord | null>;
+    changeRequestStates(numbers: readonly number[]): Promise<Map<number, ChangeRequestState>>;
+}
+//# sourceMappingURL=join-request-records.store.d.ts.map

package/dist/modules/plugins/join-request-records.store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"join-request-records.store.d.ts","sourceRoot":"","sources":["../../../src/modules/plugins/join-request-records.store.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAC1E,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AAG1D;;;;;GAKG;AACH,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,6DAA6D;IAC7D,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,mFAAmF;IACnF,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,iBAAiB,CAAC;IAC1B,oEAAoE;IACpE,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,oEAAoE;IACpE,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,0EAA0E;IAC1E,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC;IACvB;;;;OAIG;IACH,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,MAAM,iBAAiB,GAAG,SAAS,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAEhE;;;;;GAKG;AACH,MAAM,MAAM,kBAAkB,GAAG,iBAAiB,GAAG;IAAE,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC;AAE5E;;;;;;;GAOG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;;;;OAKG;IACH,MAAM,CAAC,KAAK,EAAE;QAAE,cAAc,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAChH,4DAA4D;IAC5D,IAAI,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAAC;IACpD,4DAA4D;IAC5D,YAAY,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC;IACnE,kEAAkE;IAClE,OAAO,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC;IACxC;;;;;;;;;;;;;;;;OAgBG;IACH,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAC;IAC5E;;;;;;;;;;;;OAYG;IACH,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5D;;;;OAIG;IACH,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvD;;;OAGG;IACH,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvF;;;;OAIG;IACH,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1E;;;;;;;;OAQG;IACH,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAAC;IACnF;;;;;;;;OAQG;IACH,mBAAmB,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC,CAAC;CAC3F;AAED,qBAAa,kBAAmB,YAAW,gBAAgB;IAC7C,OAAO,CAAC,QAAQ,CAAC,EAAE;gBAAF,EAAE,EAAE,QAAQ;IAEnC,MAAM,CAAC,KAAK,EAAE;QAClB,cAAc,EAAE,MAAM,CAAC;QACvB,aAAa,EAAE,MAAM,CAAC;QACtB,SAAS,EAAE,MAAM,CAAC;KACnB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAqCxB,IAAI,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IASnD,YAAY,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC;IAQlE,OAAO,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC;IAQ7C;;;;;OAKG;IACG,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAyB3E,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAwB3D,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAatD,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAetF,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAazE,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAsBlF,mBAAmB,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;CAQhG"}

package/dist/modules/plugins/join-request-records.store.js

@@ -0,0 +1,179 @@
+import { and, eq, inArray, isNotNull, sql } from 'drizzle-orm';
+import { changeRequests, pluginJoinRequests } from '../database/schema.js';
+export class DbJoinRequestStore {
+    db;
+    constructor(db) {
+        this.db = db;
+    }
+    async record(input) {
+        const requesterEmail = input.requesterEmail.toLowerCase();
+        const [inserted] = await this.db
+            .insert(pluginJoinRequests)
+            .values({ requesterEmail, requesterName: input.requesterName, pluginKey: input.pluginKey })
+            .onConflictDoNothing({
+            target: [pluginJoinRequests.requesterEmail, pluginJoinRequests.pluginKey],
+        })
+            .returning();
+        if (inserted)
+            return toRecord(inserted);
+        // Already recorded. The CASE is what keeps the revival to one statement:
+        // whether this ask is a retry is decided by the row as the database reads
+        // it, not by a value this process read a moment ago and may have lost a
+        // race over.
+        const [row] = await this.db
+            .update(pluginJoinRequests)
+            .set({
+            requesterName: input.requesterName,
+            status: sql `case when ${pluginJoinRequests.status} = 'failed' then 'pending' else ${pluginJoinRequests.status} end`,
+            failureReason: sql `case when ${pluginJoinRequests.status} = 'failed' then null else ${pluginJoinRequests.failureReason} end`,
+            // A revived row is free for the retry to claim at once; a row that is
+            // already `pending` keeps whatever claim is running against it, so a
+            // second click still cannot start a second job.
+            claimedAt: sql `case when ${pluginJoinRequests.status} = 'failed' then null else ${pluginJoinRequests.claimedAt} end`,
+            claimToken: sql `case when ${pluginJoinRequests.status} = 'failed' then null else ${pluginJoinRequests.claimToken} end`,
+            updatedAt: new Date(),
+        })
+            .where(and(eq(pluginJoinRequests.requesterEmail, requesterEmail), eq(pluginJoinRequests.pluginKey, input.pluginKey)))
+            .returning();
+        return toRecord(row);
+    }
+    async byId(id) {
+        const [row] = await this.db
+            .select()
+            .from(pluginJoinRequests)
+            .where(eq(pluginJoinRequests.id, id))
+            .limit(1);
+        return row ? toRecord(row) : null;
+    }
+    async forRequester(requesterEmail) {
+        const rows = await this.db
+            .select()
+            .from(pluginJoinRequests)
+            .where(eq(pluginJoinRequests.requesterEmail, requesterEmail.toLowerCase()));
+        return rows.map(toRecord);
+    }
+    async pending() {
+        const rows = await this.db
+            .select()
+            .from(pluginJoinRequests)
+            .where(eq(pluginJoinRequests.status, 'pending'));
+        return rows.map(toRecord);
+    }
+    /**
+     * One conditional UPDATE, which is what makes this a claim rather than a
+     * check: the `pending` status and the free-or-stale claim are tested by the
+     * database in the same statement that takes the row, so two processes
+     * asking together cannot both be told yes.
+     */
+    async claim(id, staleAfterMs) {
+        const [row] = await this.db
+            .update(pluginJoinRequests)
+            // The token is minted by the DATABASE, in the same statement that takes
+            // the row, so it is unique to this claim by construction — two callers
+            // racing here cannot be handed the same one even if one of them read a
+            // stale row a moment before.
+            .set({ claimedAt: new Date(), claimToken: sql `gen_random_uuid()` })
+            .where(and(eq(pluginJoinRequests.id, id), eq(pluginJoinRequests.status, 'pending'), sql `(${pluginJoinRequests.claimedAt} is null or ${pluginJoinRequests.claimedAt} < now() - make_interval(secs => ${staleAfterMs / 1000}))`))
+            .returning();
+        if (!row)
+            return null;
+        const record = toRecord(row);
+        // The same statement that took the row minted the token, so a returned
+        // row always has one. The check is the type's rather than a real branch —
+        // and if the column ever did come back null, refusing the claim is the
+        // safe reading: no token, no exclusive right to the row.
+        return record.claimToken ? { ...record, claimToken: record.claimToken } : null;
+    }
+    async heartbeat(id, claimToken) {
+        // Conditional on the row still being claimed AND pending AND claimed by
+        // THIS caller. Pending-and-claimed keeps a late beat from resurrecting a
+        // claim on a row that has already been settled; the token keeps a worker
+        // which overran the stale window from beating — and so from keeping alive
+        // — a claim that now belongs to its replacement.
+        const beaten = await this.db
+            .update(pluginJoinRequests)
+            .set({ claimedAt: new Date() })
+            .where(and(eq(pluginJoinRequests.id, id), eq(pluginJoinRequests.status, 'pending'), isNotNull(pluginJoinRequests.claimedAt), eq(pluginJoinRequests.claimToken, claimToken)))
+            .returning({ id: pluginJoinRequests.id });
+        // Nothing matched: taken over, already settled, or the row is gone —
+        // account erasure deletes it. All three mean "stop", which is why the
+        // caller gets a boolean rather than silence.
+        return beaten.length > 0;
+    }
+    async release(id, claimToken) {
+        await this.db
+            .update(pluginJoinRequests)
+            .set({ claimedAt: null, claimToken: null })
+            .where(and(eq(pluginJoinRequests.id, id), eq(pluginJoinRequests.status, 'pending'), eq(pluginJoinRequests.claimToken, claimToken)));
+    }
+    async markOpened(id, claimToken, changeRequestNumber) {
+        await this.db
+            .update(pluginJoinRequests)
+            .set({
+            status: 'opened',
+            changeRequestNumber,
+            failureReason: null,
+            // The claim is spent with the outcome it decided, in one statement.
+            claimedAt: null,
+            claimToken: null,
+            updatedAt: new Date(),
+        })
+            .where(and(eq(pluginJoinRequests.id, id), eq(pluginJoinRequests.claimToken, claimToken)));
+    }
+    async markFailed(id, claimToken, reason) {
+        await this.db
+            .update(pluginJoinRequests)
+            .set({
+            status: 'failed',
+            failureReason: reason,
+            claimedAt: null,
+            claimToken: null,
+            updatedAt: new Date(),
+        })
+            .where(and(eq(pluginJoinRequests.id, id), eq(pluginJoinRequests.claimToken, claimToken)));
+    }
+    async reopen(id, changeRequestNumber) {
+        const [row] = await this.db
+            .update(pluginJoinRequests)
+            .set({
+            status: 'pending',
+            changeRequestNumber: null,
+            failureReason: null,
+            claimedAt: null,
+            claimToken: null,
+            updatedAt: new Date(),
+        })
+            .where(and(eq(pluginJoinRequests.id, id), eq(pluginJoinRequests.status, 'opened'), eq(pluginJoinRequests.changeRequestNumber, changeRequestNumber)))
+            .returning();
+        return row ? toRecord(row) : this.byId(id);
+    }
+    async changeRequestStates(numbers) {
+        if (numbers.length === 0)
+            return new Map();
+        const rows = await this.db
+            .select({ number: changeRequests.number, state: changeRequests.state })
+            .from(changeRequests)
+            .where(inArray(changeRequests.number, [...numbers]));
+        return new Map(rows.map((r) => [r.number, r.state]));
+    }
+}
+function toRecord(row) {
+    return {
+        id: row.id,
+        requesterEmail: row.requesterEmail,
+        requesterName: row.requesterName,
+        pluginKey: row.pluginKey,
+        // The column is `text` with a CHECK; the check is what makes this cast
+        // honest, and a row that somehow escaped it reads as `pending` rather
+        // than as a status nothing handles.
+        status: isStatus(row.status) ? row.status : 'pending',
+        failureReason: row.failureReason,
+        changeRequestNumber: row.changeRequestNumber,
+        claimedAt: row.claimedAt,
+        claimToken: row.claimToken,
+    };
+}
+function isStatus(value) {
+    return value === 'pending' || value === 'opened' || value === 'failed';
+}
+//# sourceMappingURL=join-request-records.store.js.map

package/dist/modules/plugins/join-request-records.store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"join-request-records.store.js","sourceRoot":"","sources":["../../../src/modules/plugins/join-request-records.store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAG/D,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAqI3E,MAAM,OAAO,kBAAkB;IACA;IAA7B,YAA6B,EAAY;QAAZ,OAAE,GAAF,EAAE,CAAU;IAAG,CAAC;IAE7C,KAAK,CAAC,MAAM,CAAC,KAIZ;QACC,MAAM,cAAc,GAAG,KAAK,CAAC,cAAc,CAAC,WAAW,EAAE,CAAC;QAC1D,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,IAAI,CAAC,EAAE;aAC7B,MAAM,CAAC,kBAAkB,CAAC;aAC1B,MAAM,CAAC,EAAE,cAAc,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;aAC1F,mBAAmB,CAAC;YACnB,MAAM,EAAE,CAAC,kBAAkB,CAAC,cAAc,EAAE,kBAAkB,CAAC,SAAS,CAAC;SAC1E,CAAC;aACD,SAAS,EAAE,CAAC;QACf,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACxC,yEAAyE;QACzE,0EAA0E;QAC1E,wEAAwE;QACxE,aAAa;QACb,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,CAAC,EAAE;aACxB,MAAM,CAAC,kBAAkB,CAAC;aAC1B,GAAG,CAAC;YACH,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,MAAM,EAAE,GAAG,CAAA,aAAa,kBAAkB,CAAC,MAAM,mCAAmC,kBAAkB,CAAC,MAAM,MAAM;YACnH,aAAa,EAAE,GAAG,CAAA,aAAa,kBAAkB,CAAC,MAAM,8BAA8B,kBAAkB,CAAC,aAAa,MAAM;YAC5H,sEAAsE;YACtE,qEAAqE;YACrE,gDAAgD;YAChD,SAAS,EAAE,GAAG,CAAA,aAAa,kBAAkB,CAAC,MAAM,8BAA8B,kBAAkB,CAAC,SAAS,MAAM;YACpH,UAAU,EAAE,GAAG,CAAA,aAAa,kBAAkB,CAAC,MAAM,8BAA8B,kBAAkB,CAAC,UAAU,MAAM;YACtH,SAAS,EAAE,IAAI,IAAI,EAAE;SACtB,CAAC;aACD,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,kBAAkB,CAAC,cAAc,EAAE,cAAc,CAAC,EACrD,EAAE,CAAC,kBAAkB,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,CAClD,CACF;aACA,SAAS,EAAE,CAAC;QACf,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAU;QACnB,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,CAAC,EAAE;aACxB,MAAM,EAAE;aACR,IAAI,CAAC,kBAAkB,CAAC;aACxB,KAAK,CAAC,EAAE,CAAC,kBAAkB,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;aACpC,KAAK,CAAC,CAAC,CAAC,CAAC;QACZ,OAAO,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,cAAsB;QACvC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE;aACvB,MAAM,EAAE;aACR,IAAI,CAAC,kBAAkB,CAAC;aACxB,KAAK,CAAC,EAAE,CAAC,kBAAkB,CAAC,cAAc,EAAE,cAAc,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QAC9E,OAAO,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,OAAO;QACX,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE;aACvB,MAAM,EAAE;aACR,IAAI,CAAC,kBAAkB,CAAC;aACxB,KAAK,CAAC,EAAE,CAAC,kBAAkB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;QACnD,OAAO,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC5B,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,KAAK,CAAC,EAAU,EAAE,YAAoB;QAC1C,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,CAAC,EAAE;aACxB,MAAM,CAAC,kBAAkB,CAAC;YAC3B,wEAAwE;YACxE,uEAAuE;YACvE,uEAAuE;YACvE,6BAA6B;aAC5B,GAAG,CAAC,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,UAAU,EAAE,GAAG,CAAA,mBAAmB,EAAE,CAAC;aAClE,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,kBAAkB,CAAC,EAAE,EAAE,EAAE,CAAC,EAC7B,EAAE,CAAC,kBAAkB,CAAC,MAAM,EAAE,SAAS,CAAC,EACxC,GAAG,CAAA,IAAI,kBAAkB,CAAC,SAAS,eAAe,kBAAkB,CAAC,SAAS,oCAAoC,YAAY,GAAG,IAAI,IAAI,CAC1I,CACF;aACA,SAAS,EAAE,CAAC;QACf,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC7B,uEAAuE;QACvE,0EAA0E;QAC1E,uEAAuE;QACvE,yDAAyD;QACzD,OAAO,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACjF,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,EAAU,EAAE,UAAkB;QAC5C,wEAAwE;QACxE,yEAAyE;QACzE,yEAAyE;QACzE,0EAA0E;QAC1E,iDAAiD;QACjD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE;aACzB,MAAM,CAAC,kBAAkB,CAAC;aAC1B,GAAG,CAAC,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;aAC9B,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,kBAAkB,CAAC,EAAE,EAAE,EAAE,CAAC,EAC7B,EAAE,CAAC,kBAAkB,CAAC,MAAM,EAAE,SAAS,CAAC,EACxC,SAAS,CAAC,kBAAkB,CAAC,SAAS,CAAC,EACvC,EAAE,CAAC,kBAAkB,CAAC,UAAU,EAAE,UAAU,CAAC,CAC9C,CACF;aACA,SAAS,CAAC,EAAE,EAAE,EAAE,kBAAkB,CAAC,EAAE,EAAE,CAAC,CAAC;QAC5C,qEAAqE;QACrE,sEAAsE;QACtE,6CAA6C;QAC7C,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,EAAU,EAAE,UAAkB;QAC1C,MAAM,IAAI,CAAC,EAAE;aACV,MAAM,CAAC,kBAAkB,CAAC;aAC1B,GAAG,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;aAC1C,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,kBAAkB,CAAC,EAAE,EAAE,EAAE,CAAC,EAC7B,EAAE,CAAC,kBAAkB,CAAC,MAAM,EAAE,SAAS,CAAC,EACxC,EAAE,CAAC,kBAAkB,CAAC,UAAU,EAAE,UAAU,CAAC,CAC9C,CACF,CAAC;IACN,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,EAAU,EAAE,UAAkB,EAAE,mBAA2B;QAC1E,MAAM,IAAI,CAAC,EAAE;aACV,MAAM,CAAC,kBAAkB,CAAC;aAC1B,GAAG,CAAC;YACH,MAAM,EAAE,QAAQ;YAChB,mBAAmB;YACnB,aAAa,EAAE,IAAI;YACnB,oEAAoE;YACpE,SAAS,EAAE,IAAI;YACf,UAAU,EAAE,IAAI;YAChB,SAAS,EAAE,IAAI,IAAI,EAAE;SACtB,CAAC;aACD,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,kBAAkB,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC;IAC9F,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,EAAU,EAAE,UAAkB,EAAE,MAAc;QAC7D,MAAM,IAAI,CAAC,EAAE;aACV,MAAM,CAAC,kBAAkB,CAAC;aAC1B,GAAG,CAAC;YACH,MAAM,EAAE,QAAQ;YAChB,aAAa,EAAE,MAAM;YACrB,SAAS,EAAE,IAAI;YACf,UAAU,EAAE,IAAI;YAChB,SAAS,EAAE,IAAI,IAAI,EAAE;SACtB,CAAC;aACD,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,kBAAkB,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC;IAC9F,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAU,EAAE,mBAA2B;QAClD,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,CAAC,EAAE;aACxB,MAAM,CAAC,kBAAkB,CAAC;aAC1B,GAAG,CAAC;YACH,MAAM,EAAE,SAAS;YACjB,mBAAmB,EAAE,IAAI;YACzB,aAAa,EAAE,IAAI;YACnB,SAAS,EAAE,IAAI;YACf,UAAU,EAAE,IAAI;YAChB,SAAS,EAAE,IAAI,IAAI,EAAE;SACtB,CAAC;aACD,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,kBAAkB,CAAC,EAAE,EAAE,EAAE,CAAC,EAC7B,EAAE,CAAC,kBAAkB,CAAC,MAAM,EAAE,QAAQ,CAAC,EACvC,EAAE,CAAC,kBAAkB,CAAC,mBAAmB,EAAE,mBAAmB,CAAC,CAChE,CACF;aACA,SAAS,EAAE,CAAC;QACf,OAAO,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,OAA0B;QAClD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,GAAG,EAAE,CAAC;QAC3C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE;aACvB,MAAM,CAAC,EAAE,MAAM,EAAE,cAAc,CAAC,MAAM,EAAE,KAAK,EAAE,cAAc,CAAC,KAAK,EAAE,CAAC;aACtE,IAAI,CAAC,cAAc,CAAC;aACpB,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACvD,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,KAA2B,CAAC,CAAC,CAAC,CAAC;IAC7E,CAAC;CACF;AAED,SAAS,QAAQ,CAAC,GAA2C;IAC3D,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,cAAc,EAAE,GAAG,CAAC,cAAc;QAClC,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,uEAAuE;QACvE,sEAAsE;QACtE,oCAAoC;QACpC,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;QACrD,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,mBAAmB,EAAE,GAAG,CAAC,mBAAmB;QAC5C,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,UAAU,EAAE,GAAG,CAAC,UAAU;KAC3B,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa;IAC7B,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,QAAQ,CAAC;AACzE,CAAC"}

package/dist/modules/plugins/join-requests.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"join-requests.service.d.ts","sourceRoot":"","sources":["../../../src/modules/plugins/join-requests.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,QAAQ,EACb,KAAK,aAAa,EAClB,KAAK,gBAAgB,EACtB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,KAAK,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AAE1E,OAAO,EAAoB,KAAK,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAE1E,iEAAiE;AACjE,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,+EAA+E;IAC/E,SAAS,EAAE,YAAY,EAAE,CAAC;CAC3B;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,qBAAa,mBAAmB;IAE5B,OAAO,CAAC,QAAQ,CAAC,gBAAgB;IACjC,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBADR,gBAAgB,EAAE,gBAAgB,EAClC,QAAQ,EAAE,gBAAgB;IAG7C;;;;;;;OAOG;IACG,IAAI,CACR,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,aAAa,EAAE,EACpB,KAAK,EAAE,QAAQ,GACd,OAAO,CAAC,WAAW,EAAE,CAAC;IA2BzB;;;;OAIG;IACG,SAAS,CACb,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,EAAE,EAAE,aAAa,EACjB,KAAK,EAAE,QAAQ,GACd,OAAO,CAAC,OAAO,CAAC;IAcnB;;;;;;;;;;;OAWG;YACW,MAAM;IAgCpB;;;;;;;OAOG;YACW,MAAM;IAYpB;;;;OAIG;YACW,OAAO;CAKtB"}
+{"version":3,"file":"join-requests.service.d.ts","sourceRoot":"","sources":["../../../src/modules/plugins/join-requests.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,QAAQ,EACb,KAAK,aAAa,EAClB,KAAK,gBAAgB,EACtB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,KAAK,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AAK1E,OAAO,EAAoB,KAAK,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAE1E,iEAAiE;AACjE,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,+EAA+E;IAC/E,SAAS,EAAE,YAAY,EAAE,CAAC;CAC3B;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,qBAAa,mBAAmB;IAE5B,OAAO,CAAC,QAAQ,CAAC,gBAAgB;IACjC,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBADR,gBAAgB,EAAE,gBAAgB,EAClC,QAAQ,EAAE,gBAAgB;IAG7C;;;;;;;OAOG;IACG,IAAI,CACR,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,aAAa,EAAE,EACpB,KAAK,EAAE,QAAQ,GACd,OAAO,CAAC,WAAW,EAAE,CAAC;IA2BzB;;;;OAIG;IACG,SAAS,CACb,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,EAAE,EAAE,aAAa,EACjB,KAAK,EAAE,QAAQ,GACd,OAAO,CAAC,OAAO,CAAC;IAcnB;;;;;;;;;;;OAWG;YACW,MAAM;IAgCpB;;;;;;;OAOG;YACW,MAAM;IAYpB;;;;OAIG;YACW,OAAO;CAKtB"}

package/dist/modules/plugins/join-requests.service.js

@@ -1,4 +1,6 @@
 import { DEFAULT_BRANCH, isJoinBranchFor, } from '@bevel-software/platform-shared';
+import { logger } from '../../shared/logging.js';
+const log = logger('plugins');
 import { workspaceIdForBranch } from '../../shared/workspace-id.js';
 import { pendingProposals } from './join-proposals.js';
 /**
@@ -93,7 +95,7 @@ export class JoinRequestsService {
             await this.workflow.rejectChangeRequest(cr.number, actor, cr.state, cr.authorId ?? null, cr.base, wsId);
         }
         catch (err) {
-            console.warn(`[plugins] could not close settled join request #${cr.number}: ${err instanceof Error ? err.message : String(err)}`);
+            log.warn(`could not close settled join request #${cr.number}: ${err instanceof Error ? err.message : String(err)}`);
             return;
         }
         try {
@@ -102,7 +104,7 @@ export class JoinRequestsService {
         catch (err) {
             // The request is closed either way; a leftover branch is cosmetic and
             // the author can still delete it themselves.
-            console.warn(`[plugins] closed join request #${cr.number} but could not delete "${cr.branch}": ${err instanceof Error ? err.message : String(err)}`);
+            log.warn(`closed join request #${cr.number} but could not delete "${cr.branch}": ${err instanceof Error ? err.message : String(err)}`);
         }
     }
     /**

package/dist/modules/plugins/join-requests.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"join-requests.service.js","sourceRoot":"","sources":["../../../src/modules/plugins/join-requests.service.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,eAAe,GAIhB,MAAM,iCAAiC,CAAC;AAEzC,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EAAE,gBAAgB,EAAqB,MAAM,qBAAqB,CAAC;AAY1E;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,OAAO,mBAAmB;IAEX;IACA;IAFnB,YACmB,gBAAkC,EAClC,QAA0B;QAD1B,qBAAgB,GAAhB,gBAAgB,CAAkB;QAClC,aAAQ,GAAR,QAAQ,CAAkB;IAC1C,CAAC;IAEJ;;;;;;;OAOG;IACH,KAAK,CAAC,IAAI,CACR,MAAc,EACd,MAAc,EACd,GAAoB,EACpB,KAAe;QAEf,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACrB,MAAM,UAAU,GAAG,GAAG,MAAM,YAAY,CAAC;QACzC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;QAC/D,MAAM,GAAG,GAAkB,EAAE,CAAC;QAC9B,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;YACrB,IAAI,EAAE,CAAC,KAAK,KAAK,MAAM,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;gBAAE,SAAS;YACzE,MAAM,SAAS,GAAG,gBAAgB,CAChC,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,UAAU,CAAC,EACxC,QAAQ,EACR,UAAU,CACX,CAAC;YACF,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC3B,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;gBAC7B,SAAS;YACX,CAAC;YACD,GAAG,CAAC,IAAI,CAAC;gBACP,MAAM,EAAE,EAAE,CAAC,MAAM;gBACjB,MAAM,EAAE,EAAE,CAAC,MAAM;gBACjB,aAAa,EAAE,EAAE,CAAC,SAAS,EAAE,IAAI,IAAI,SAAS;gBAC9C,SAAS,EAAE,EAAE,CAAC,SAAS;gBACvB,SAAS;aACV,CAAC,CAAC;QACL,CAAC;QACD,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;IACpE,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,SAAS,CACb,MAAc,EACd,MAAc,EACd,EAAiB,EACjB,KAAe;QAEf,IAAI,EAAE,CAAC,KAAK,KAAK,MAAM,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;YAAE,OAAO,KAAK,CAAC;QAC7E,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACrB,MAAM,UAAU,GAAG,GAAG,MAAM,YAAY,CAAC;QACzC,MAAM,SAAS,GAAG,gBAAgB,CAChC,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,UAAU,CAAC,EACxC,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,UAAU,CAAC,EAC7C,UAAU,CACX,CAAC;QACF,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QACvC,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAC7B,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;;;;;;OAWG;IACK,KAAK,CAAC,MAAM,CAAC,EAAiB,EAAE,KAAe;QACrD,MAAM,IAAI,GAAG,oBAAoB,CAAC,cAAc,CAAC,CAAC;QAClD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CACrC,EAAE,CAAC,MAAM,EACT,KAAK,EACL,EAAE,CAAC,KAAK,EACR,EAAE,CAAC,QAAQ,IAAI,IAAI,EACnB,EAAE,CAAC,IAAI,EACP,IAAI,CACL,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CACV,mDAAmD,EAAE,CAAC,MAAM,KAC1D,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,EAAE,CACH,CAAC;YACF,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC3D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,sEAAsE;YACtE,6CAA6C;YAC7C,OAAO,CAAC,IAAI,CACV,kCAAkC,EAAE,CAAC,MAAM,0BAA0B,EAAE,CAAC,MAAM,MAC5E,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,EAAE,CACH,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACK,KAAK,CAAC,MAAM,CAAC,MAAc,EAAE,WAAmB;QACtD,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,gBAAgB,CAAC,aAAa,CAC9C,oBAAoB,CAAC,cAAc,CAAC,EACpC,UAAU,MAAM,EAAE,EAClB,WAAW,CACZ,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,OAAO;QACnB,MAAM,IAAI,CAAC,gBAAgB;aACxB,oBAAoB,CAAC,oBAAoB,CAAC,cAAc,CAAC,CAAC;aAC1D,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC5B,CAAC;CACF"}
+{"version":3,"file":"join-requests.service.js","sourceRoot":"","sources":["../../../src/modules/plugins/join-requests.service.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,eAAe,GAIhB,MAAM,iCAAiC,CAAC;AAEzC,OAAO,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AAEjD,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;AAC9B,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EAAE,gBAAgB,EAAqB,MAAM,qBAAqB,CAAC;AAY1E;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,OAAO,mBAAmB;IAEX;IACA;IAFnB,YACmB,gBAAkC,EAClC,QAA0B;QAD1B,qBAAgB,GAAhB,gBAAgB,CAAkB;QAClC,aAAQ,GAAR,QAAQ,CAAkB;IAC1C,CAAC;IAEJ;;;;;;;OAOG;IACH,KAAK,CAAC,IAAI,CACR,MAAc,EACd,MAAc,EACd,GAAoB,EACpB,KAAe;QAEf,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACrB,MAAM,UAAU,GAAG,GAAG,MAAM,YAAY,CAAC;QACzC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;QAC/D,MAAM,GAAG,GAAkB,EAAE,CAAC;QAC9B,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;YACrB,IAAI,EAAE,CAAC,KAAK,KAAK,MAAM,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;gBAAE,SAAS;YACzE,MAAM,SAAS,GAAG,gBAAgB,CAChC,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,UAAU,CAAC,EACxC,QAAQ,EACR,UAAU,CACX,CAAC;YACF,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC3B,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;gBAC7B,SAAS;YACX,CAAC;YACD,GAAG,CAAC,IAAI,CAAC;gBACP,MAAM,EAAE,EAAE,CAAC,MAAM;gBACjB,MAAM,EAAE,EAAE,CAAC,MAAM;gBACjB,aAAa,EAAE,EAAE,CAAC,SAAS,EAAE,IAAI,IAAI,SAAS;gBAC9C,SAAS,EAAE,EAAE,CAAC,SAAS;gBACvB,SAAS;aACV,CAAC,CAAC;QACL,CAAC;QACD,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;IACpE,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,SAAS,CACb,MAAc,EACd,MAAc,EACd,EAAiB,EACjB,KAAe;QAEf,IAAI,EAAE,CAAC,KAAK,KAAK,MAAM,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;YAAE,OAAO,KAAK,CAAC;QAC7E,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACrB,MAAM,UAAU,GAAG,GAAG,MAAM,YAAY,CAAC;QACzC,MAAM,SAAS,GAAG,gBAAgB,CAChC,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,UAAU,CAAC,EACxC,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,UAAU,CAAC,EAC7C,UAAU,CACX,CAAC;QACF,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QACvC,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAC7B,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;;;;;;OAWG;IACK,KAAK,CAAC,MAAM,CAAC,EAAiB,EAAE,KAAe;QACrD,MAAM,IAAI,GAAG,oBAAoB,CAAC,cAAc,CAAC,CAAC;QAClD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CACrC,EAAE,CAAC,MAAM,EACT,KAAK,EACL,EAAE,CAAC,KAAK,EACR,EAAE,CAAC,QAAQ,IAAI,IAAI,EACnB,EAAE,CAAC,IAAI,EACP,IAAI,CACL,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CACN,yCAAyC,EAAE,CAAC,MAAM,KAChD,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,EAAE,CACH,CAAC;YACF,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC3D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,sEAAsE;YACtE,6CAA6C;YAC7C,GAAG,CAAC,IAAI,CACN,wBAAwB,EAAE,CAAC,MAAM,0BAA0B,EAAE,CAAC,MAAM,MAClE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,EAAE,CACH,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACK,KAAK,CAAC,MAAM,CAAC,MAAc,EAAE,WAAmB;QACtD,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,gBAAgB,CAAC,aAAa,CAC9C,oBAAoB,CAAC,cAAc,CAAC,EACpC,UAAU,MAAM,EAAE,EAClB,WAAW,CACZ,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,OAAO;QACnB,MAAM,IAAI,CAAC,gBAAgB;aACxB,oBAAoB,CAAC,oBAAoB,CAAC,cAAc,CAAC,CAAC;aAC1D,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC5B,CAAC;CACF"}

package/dist/modules/plugins/plugin-links.d.ts

@@ -0,0 +1,69 @@
+import type { WorkspaceService } from '../workspace/workspace.service.js';
+import type { IAccessControl } from '../access/access-control.interface.js';
+import type { ISkillService } from '../skills/skills.contract.js';
+import type { PluginMembership } from './plugins.contract.js';
+import type { PluginSource } from './discovery/plugin-source.js';
+/** One plugin's links, resolved against the released catalog. */
+export interface PluginLinks {
+    /** The plugin's name — its identity to people and URLs. */
+    name: string;
+    /** Repo-relative plugin folder. */
+    folder: string;
+    /** The roots the manifest declares, normalised. */
+    roots: string[];
+    /** Skill folders the roots resolve to (released catalog only). */
+    linkedSkills: string[];
+    /** Roots that resolve to no released skill — a typo, or a skill not yet merged. */
+    unresolvedRoots: string[];
+    /** Whether hexis writes these links and checks their grants — see `DiscoveredPlugin`. */
+    linksAreManaged: boolean;
+}
+export interface LinkMembership {
+    /** skill path → every plugin that holds it, inline or by link. */
+    bySkill: Map<string, PluginMembership[]>;
+    /** plugin folder → its links. Every plugin folder appears, linked or not. */
+    byPlugin: Map<string, PluginLinks>;
+}
+/**
+ * The link index: which shared skills each plugin links, and — the other way
+ * round — which plugins each skill belongs to, whether by sitting inside the
+ * plugin folder or by being linked from its manifest.
+ *
+ * Plugins come from the configured {@link PluginSource} (native manifests, or
+ * a customer dialect); resolution runs against the RELEASED catalog
+ * (`skillService.listSkills()`, unfiltered), never the file system: the
+ * catalog already applies the leaf-folder rule, the `.bevelignore` layers
+ * and the global-name dedup, and a second walk here would be a second
+ * opinion about what a skill is.
+ *
+ * `granted` is the consistency check the amber dot renders: a linked skill
+ * whose own access rules DO grant the plugin's `plugin/<Name>/read`
+ * principal (directly or from a scope above it). The link service writes
+ * that grant with the link; only a hand edit takes it away.
+ *
+ * Cached briefly, dropped by `invalidate()` from the same file-change
+ * subscriber that drops the plugin index, so a link committed on the default
+ * branch shows within one round-trip.
+ */
+export declare class PluginLinkIndex {
+    private readonly workspaceService;
+    private readonly skillService;
+    private readonly accessControl;
+    private readonly kbDirName;
+    /** Where plugins come from — the one discovery every catalog shares. */
+    private readonly source;
+    private readonly cache;
+    constructor(workspaceService: WorkspaceService, skillService: ISkillService, accessControl: IAccessControl, kbDirName: string, 
+    /** Where plugins come from — the one discovery every catalog shares. */
+    source: PluginSource, now?: () => number);
+    invalidate(): void;
+    membership(): Promise<LinkMembership>;
+    /** Convenience: the memberships of one skill (empty when it is in no plugin). */
+    pluginsOf(skillPath: string): Promise<PluginMembership[]>;
+    private build;
+    /** Whether the skill folder's effective readers include the plugin's read principal. */
+    private isGranted;
+}
+/** The default-branch workspace id every link resolution runs against. */
+export declare function linksWorkspaceId(): string;
+//# sourceMappingURL=plugin-links.d.ts.map

package/dist/modules/plugins/plugin-links.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-links.d.ts","sourceRoot":"","sources":["../../../src/modules/plugins/plugin-links.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AAE1E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAC;AAC5E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAGlE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAIjE,iEAAiE;AACjE,MAAM,WAAW,WAAW;IAC1B,2DAA2D;IAC3D,IAAI,EAAE,MAAM,CAAC;IACb,mCAAmC;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,mDAAmD;IACnD,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,kEAAkE;IAClE,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,mFAAmF;IACnF,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,yFAAyF;IACzF,eAAe,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,cAAc;IAC7B,kEAAkE;IAClE,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC;IACzC,6EAA6E;IAC7E,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;CACpC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,qBAAa,eAAe;IAIxB,OAAO,CAAC,QAAQ,CAAC,gBAAgB;IACjC,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,wEAAwE;IACxE,OAAO,CAAC,QAAQ,CAAC,MAAM;IARzB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA2B;gBAG9B,gBAAgB,EAAE,gBAAgB,EAClC,YAAY,EAAE,aAAa,EAC3B,aAAa,EAAE,cAAc,EAC7B,SAAS,EAAE,MAAM;IAClC,wEAAwE;IACvD,MAAM,EAAE,YAAY,EACrC,GAAG,GAAE,MAAM,MAAiB;IAK9B,UAAU,IAAI,IAAI;IAIZ,UAAU,IAAI,OAAO,CAAC,cAAc,CAAC;IAgB3C,iFAAiF;IAC3E,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;YAMjD,KAAK;IAoEnB,wFAAwF;YAC1E,SAAS;CAUxB;AAED,0EAA0E;AAC1E,wBAAgB,gBAAgB,IAAI,MAAM,CAEzC"}

package/dist/modules/plugins/plugin-links.js

@@ -0,0 +1,163 @@
+import path from 'node:path';
+import { logger } from '../../shared/logging.js';
+const log = logger('plugins');
+import { DEFAULT_BRANCH, pluginManifestName, skillUnderRoot } from '@bevel-software/platform-shared';
+import { workspaceIdForBranch } from '../../shared/workspace-id.js';
+import { TtlCache } from '../../shared/ttl-cache.js';
+import { canonicalRoleName, pluginPrincipalKey } from '../access-model/access-grammar.js';
+const CACHE_TTL_MS = 60_000;
+/**
+ * The link index: which shared skills each plugin links, and — the other way
+ * round — which plugins each skill belongs to, whether by sitting inside the
+ * plugin folder or by being linked from its manifest.
+ *
+ * Plugins come from the configured {@link PluginSource} (native manifests, or
+ * a customer dialect); resolution runs against the RELEASED catalog
+ * (`skillService.listSkills()`, unfiltered), never the file system: the
+ * catalog already applies the leaf-folder rule, the `.bevelignore` layers
+ * and the global-name dedup, and a second walk here would be a second
+ * opinion about what a skill is.
+ *
+ * `granted` is the consistency check the amber dot renders: a linked skill
+ * whose own access rules DO grant the plugin's `plugin/<Name>/read`
+ * principal (directly or from a scope above it). The link service writes
+ * that grant with the link; only a hand edit takes it away.
+ *
+ * Cached briefly, dropped by `invalidate()` from the same file-change
+ * subscriber that drops the plugin index, so a link committed on the default
+ * branch shows within one round-trip.
+ */
+export class PluginLinkIndex {
+    workspaceService;
+    skillService;
+    accessControl;
+    kbDirName;
+    source;
+    cache;
+    constructor(workspaceService, skillService, accessControl, kbDirName, 
+    /** Where plugins come from — the one discovery every catalog shares. */
+    source, now = Date.now) {
+        this.workspaceService = workspaceService;
+        this.skillService = skillService;
+        this.accessControl = accessControl;
+        this.kbDirName = kbDirName;
+        this.source = source;
+        this.cache = new TtlCache(CACHE_TTL_MS, now);
+    }
+    invalidate() {
+        this.cache.invalidate();
+    }
+    async membership() {
+        const cached = this.cache.get();
+        if (cached)
+            return cached;
+        // Token first, like the other catalogs: an `invalidate()` landing while
+        // the build reads the pre-change tree must not be undone by storing that
+        // read afterwards.
+        const token = this.cache.begin();
+        const built = await this.build();
+        // A degraded read (no workspace yet) is served but not stored — the same
+        // reasoning as the plugin index: caching a failure hides every link for
+        // a full TTL after its cause is gone.
+        if (built === null)
+            return { bySkill: new Map(), byPlugin: new Map() };
+        this.cache.set(built, token);
+        return built;
+    }
+    /** Convenience: the memberships of one skill (empty when it is in no plugin). */
+    async pluginsOf(skillPath) {
+        return (await this.membership()).bySkill.get(skillPath) ?? [];
+    }
+    // --- internal --------------------------------------------------------------
+    async build() {
+        let wsId;
+        let kbRoot;
+        try {
+            wsId = (await this.workspaceService.getOrCreateForBranch(DEFAULT_BRANCH)).id;
+            kbRoot = path.join(await this.workspaceService.getWorkspacePath(wsId), this.kbDirName);
+        }
+        catch {
+            return null;
+        }
+        const skills = await this.skillService.listSkills(undefined);
+        const bySkill = new Map();
+        const byPlugin = new Map();
+        const add = (skillPath, m) => {
+            const list = bySkill.get(skillPath) ?? [];
+            if (!list.some((x) => x.name === m.name))
+                list.push(m);
+            bySkill.set(skillPath, list);
+        };
+        const discovered = await this.source.discover(kbRoot);
+        for (const w of discovered.warnings)
+            log.warn(w);
+        // Inline skills: the ones sitting INSIDE a plugin's folder, matched by
+        // folder prefix (a plugin may sit at any depth, so the second path
+        // segment says nothing). Personal folders are places, not plugins —
+        // their skills belong to nobody's plugin.
+        const ownerOf = (skillPath) => discovered.plugins.find((p) => !p.personal && p.exists && skillPath.startsWith(`${p.folder}/`));
+        for (const s of skills) {
+            const owner = ownerOf(s.path);
+            if (owner)
+                add(s.path, { name: owner.name, linked: false, granted: true });
+        }
+        for (const plugin of discovered.plugins) {
+            // Personal folders are places, not plugins; a manifest without the
+            // access.md that makes a plugin EXIST is a ghost the index and the
+            // compiler omit, so it must not be linkable or hold grants either.
+            if (plugin.personal || !plugin.exists)
+                continue;
+            const roots = plugin.linkedRoots;
+            const linkedSkills = [];
+            const unresolvedRoots = [];
+            for (const root of roots) {
+                const hits = skills.filter((s) => skillUnderRoot(s.path, root)).map((s) => s.path);
+                if (hits.length === 0)
+                    unresolvedRoots.push(root);
+                for (const hit of hits)
+                    if (!linkedSkills.includes(hit))
+                        linkedSkills.push(hit);
+            }
+            byPlugin.set(plugin.name, {
+                name: plugin.name,
+                folder: plugin.folder,
+                roots,
+                linkedSkills,
+                unresolvedRoots,
+                linksAreManaged: plugin.linksAreManaged,
+            });
+            if (linkedSkills.length === 0)
+                continue;
+            const token = pluginPrincipalKey(pluginManifestName(plugin.name), 'read');
+            for (const skillPath of linkedSkills) {
+                // A skill that also sits INSIDE this plugin folder is inline, and its
+                // inline membership already stands.
+                if (skillPath.startsWith(`${plugin.folder}/`))
+                    continue;
+                // An unmanaged (dialect) link is a plain reference: nothing to grant,
+                // nothing to repair — the skill's own scope decides who reads it.
+                const granted = plugin.linksAreManaged ? await this.isGranted(wsId, skillPath, token) : true;
+                add(skillPath, { name: plugin.name, linked: true, granted });
+            }
+        }
+        return { bySkill, byPlugin };
+    }
+    /** Whether the skill folder's effective readers include the plugin's read principal. */
+    async isGranted(wsId, skillPath, token) {
+        try {
+            const readers = await this.accessControl.eligibleReaders(wsId, skillPath);
+            if (!readers.restricted)
+                return true; // readable by everyone — the plugin's members included
+            // The resolver reports display names; compare through the one canonicaliser.
+            return (readers.principals ?? []).some((p) => p.kind === 'plugin' && canonicalRoleName(p.name) === token);
+        }
+        catch {
+            return false; // fail closed: an unreadable tree reports the link as needing repair
+        }
+    }
+}
+/** The default-branch workspace id every link resolution runs against. */
+export function linksWorkspaceId() {
+    return workspaceIdForBranch(DEFAULT_BRANCH);
+}
+//# sourceMappingURL=plugin-links.js.map