@bevel-software/platform-core-backend 0.15.1 → 0.20.0

package/dist/modules/workflow/read-only-filesystem.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"read-only-filesystem.js","sourceRoot":"","sources":["../../../src/modules/workflow/read-only-filesystem.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,GAKhB,MAAM,wBAAwB,CAAC;AAEhC;;;;;;;;;GASG;AACH,MAAM,OAAO,kBAAmB,SAAQ,eAAe;IAC7C,MAAM,CAAC,IAAI,CAAC,EAAU;QAC5B,MAAM,IAAI,KAAK,CACb,kCAAkC,EAAE,oBAAoB;YACtD,mEAAmE,CACtE,CAAC;IACJ,CAAC;IAEQ,KAAK,CAAC,SAAS,CAAC,KAAa,EAAE,QAAqB,EAAE,QAAuB;QACpF,kBAAkB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACxC,CAAC;IAEQ,KAAK,CAAC,UAAU,CAAC,KAAa,EAAE,QAAqB;QAC5D,kBAAkB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACzC,CAAC;IAEQ,KAAK,CAAC,UAAU,CAAC,KAAa,EAAE,QAAwB;QAC/D,kBAAkB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACzC,CAAC;IAEQ,KAAK,CAAC,QAAQ,CAAC,IAAY,EAAE,KAAa,EAAE,QAAsB;QACzE,kBAAkB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACvC,CAAC;IAEQ,KAAK,CAAC,QAAQ,CAAC,IAAY,EAAE,KAAa,EAAE,QAAsB;QACzE,kBAAkB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACvC,CAAC;IAEQ,KAAK,CAAC,KAAK,CAAC,KAAa,EAAE,QAAkC;QACpE,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACnC,CAAC;IAEQ,KAAK,CAAC,KAAK,CAAC,KAAa,EAAE,QAAwB;QAC1D,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACnC,CAAC;CACF"}

package/dist/modules/workflow/workflow.errors.d.ts

@@ -1,197 +0,0 @@
-/**
- * Workflow domain errors. This is the single source of truth — every error
- * raised by the workflow module (branches, changes, change requests, access
- * control, locks) lives here. Route handlers shape responses via the
- * `.status` + `.payload` contract on the base class.
- *
- * Naming: classes use workflow vocabulary. `WorkflowDomainError` is the
- * abstract base; specific subclasses describe the workflow concept that
- * went wrong (`BranchNameError`, `ProtectedBranchError`, etc.). Where a
- * concept is purely git mechanics with no workflow analogue
- * (`NoSharedHistoryError`), the name keeps its git flavour because
- * consumers actually need to discriminate on it.
- */
-import type { ValidationReport } from '@bevel-software/platform-shared';
-export declare class WorkflowDomainError extends Error {
-    readonly status: number;
-    readonly payload?: Record<string, unknown>;
-    constructor(message: string, status: number, payload?: Record<string, unknown>);
-}
-export declare class BranchNameError extends WorkflowDomainError {
-    readonly branchName: string;
-    constructor(reason: string, branchName: string);
-}
-export declare class ProtectedBranchError extends WorkflowDomainError {
-    readonly branchName: string;
-    readonly action: string;
-    constructor(branchName: string, action: string);
-}
-/**
- * The caller tried to delete a branch they don't own. Authorship is inferred
- * from the `<email-localpart>/<slug>` naming convention used by
- * `slugifyDraftName` — see `isBranchAuthoredBy` in `@bevel-software/platform-shared`.
- *
- * Distinct from `AccessDeniedError` because that error is path-based
- * (file-level write permission via `roles.yaml`/`access.md`). Branch
- * authorship is identity-based and has no eligible-roles list to surface —
- * the only way for someone else to delete a non-author's branch is to push
- * the delete via git CLI directly.
- */
-export declare class BranchAuthorshipError extends WorkflowDomainError {
-    readonly branchName: string;
-    readonly kind: "branch-authorship";
-    constructor(branchName: string);
-}
-/**
- * The local commit landed but pushing it to origin failed because the
- * remote diverged (a teammate or the agent landed competing commits while
- * the lock was held). The cooperative recovery — `pull --rebase` + retry
- * push — also failed, because the divergence touches the same file and the
- * rebase conflicts.
- *
- * Per the "disk is the source of truth" rule we do NOT auto-force-push
- * from the workflow layer (that's a destructive history rewrite that can
- * lose teammate work irrecoverably). Instead we surface this structured
- * error so the frontend can seed an agent prompt — the agent has git + gh
- * CLI access plus the lock-aware write tool, so it can read both sides,
- * semantically merge, and save the resolved file through the normal
- * save=share pipeline. The user sees only a loading indicator; the agent
- * does the reconciliation.
- *
- * State at the moment this fires:
- *   - The local branch has the user's just-committed change as its HEAD.
- *   - The lock has already been released (lock release runs BEFORE the
- *     push attempt). The agent can acquire its own lock.
- *   - `origin/<branch>` has commits the local clone doesn't reach.
- *   - The working tree is clean (the commit landed).
- *
- * The payload carries enough context that the prompt builder can phrase
- * the resolution request to the agent without further server round-trips.
- */
-export declare class PushNeedsAgentResolutionError extends WorkflowDomainError {
-    readonly branch: string;
-    readonly path: string;
-    readonly originalDetail: string;
-    readonly recoveryDetail: string;
-    readonly kind: "push-needs-resolution";
-    constructor(branch: string, path: string, originalDetail: string, recoveryDetail: string);
-}
-/**
- * Refreshing a workspace from origin (`GitService.pull`) hit a rebase
- * conflict: the workspace carries local commits origin doesn't have, origin
- * moved ahead with changes that touch the same files, and replaying the
- * local commits conflicts. The rebase has already been aborted — the
- * workspace is back in its pre-pull state (diverged, clean tree).
- *
- * This state does NOT resolve itself: every subsequent pull hits the same
- * conflict, and the local commits (someone's saved content, under
- * save=share) stay unshared until the divergence is reconciled. The service
- * layer therefore reacts by queueing a background recovery run (see
- * `WorkflowService.updateFromRemote`); this error tells the caller what
- * happened and which paths are contested.
- *
- * 409 like the other conflict errors — the operation needs the divergence
- * cleared before it can succeed. `detail` (the raw git failure, already
- * credential-redacted by `GitService.git`) is kept OFF the payload; it's for
- * server logs and the recovery pipeline, not the client.
- */
-export declare class PullRebaseConflictError extends WorkflowDomainError {
-    readonly branch: string;
-    readonly conflictedPaths: string[];
-    readonly detail: string;
-    readonly kind: "pull-rebase-conflict";
-    constructor(branch: string, conflictedPaths: string[], detail: string);
-}
-/**
- * Generic 400 for workflow-input validation (malformed branch names, missing
- * fields, etc.). Carries an optional payload so callers can attach typed
- * discriminators (`kind: '...'`) when the frontend needs to switch on the
- * specific failure mode.
- */
-export declare class WorkflowValidationError extends WorkflowDomainError {
-    constructor(message: string, payload?: Record<string, unknown>);
-}
-/**
- * The draft branch doesn't share history with the target branch, so GitHub
- * would reject the change request with `no history in common`. Surfaced as
- * a structured payload so the frontend's typed-error parser can route into
- * the agent recovery flow.
- */
-export declare class NoSharedHistoryError extends WorkflowDomainError {
-    readonly head: string;
-    readonly base: string;
-    readonly kind: "no-shared-history";
-    constructor(head: string, base: string);
-}
-/**
- * The KB validator reported `mustFix` issues (DANGLING LINK / ASYMMETRY /
- * ERROR) — the change cannot land until they're resolved. The payload
- * carries the structured report so the UI / agent can render the items
- * the user must fix without re-running the validator.
- */
-export declare class ValidationFailedError extends WorkflowDomainError {
-    readonly validation: ValidationReport;
-    constructor(report: ValidationReport);
-}
-/**
- * Method exists on the workflow interface but has no backing implementation
- * yet. 501 so the frontend can light up "coming soon" affordances without
- * confusing them with 5xx infra failures. `feature` is the workflow method
- * name; clients switch on it to render targeted copy.
- */
-export declare class NotImplementedWorkflowError extends WorkflowDomainError {
-    readonly feature: string;
-    readonly kind: "not-implemented";
-    constructor(feature: string);
-}
-/**
- * Attempting to reconcile two branches (opening a change request, refreshing
- * one from target, or executing a merge) hit conflicts that the workflow
- * cannot auto-resolve. The structured payload carries the list of
- * conflicting paths so the frontend / agent can route into the resolution
- * flow without a second round-trip.
- *
- * 409 because the conflict is a precondition the caller has to clear (by
- * resolving + committing on the source branch) before the operation can
- * succeed — same semantics git itself uses for merge conflicts.
- */
-export declare class ChangeRequestConflictsError extends WorkflowDomainError {
-    readonly sourceBranch: string;
-    readonly targetBranch: string;
-    readonly conflictedPaths: string[];
-    readonly kind: "change-request-conflicts";
-    constructor(sourceBranch: string, targetBranch: string, conflictedPaths: string[]);
-}
-/**
- * Caller tried to open a change request for a `(source, target)` pair that
- * already has one open. Spec rule: A→B blocks A→B (B→A is allowed). Carries
- * the existing CR number so the UI / agent can deep-link to it instead of
- * trying to recover.
- */
-export declare class DuplicateChangeRequestError extends WorkflowDomainError {
-    readonly sourceBranch: string;
-    readonly targetBranch: string;
-    readonly existingNumber: number;
-    readonly kind: "duplicate-change-request";
-    constructor(sourceBranch: string, targetBranch: string, existingNumber: number);
-}
-/**
- * Raised when a merge must neutralise a CR's `roles.yaml` change (restore the
- * base branch's version on the source branch) but that preservation write fails.
- * `roles.yaml` decides admin membership and is mutable ONLY via the admin Roles
- * & Members surface — a CR must never carry a roles.yaml change across a merge,
- * so if we cannot guarantee the base version is preserved we abort the merge
- * rather than risk landing the CR's version on a protected branch. 502: the
- * failure is an internal git/push hiccup, not the caller's fault.
- */
-export declare class RolesYamlPreservationError extends WorkflowDomainError {
-    readonly kind: "roles-yaml-preservation-failed";
-    /**
-     * The underlying git/push failure. Kept OFF the client-facing message (which
-     * stays generic for the 502) so raw git internals / paths don't leak to the
-     * caller — log this server-side for diagnostics instead.
-     */
-    readonly detail: string;
-    constructor(reason: string);
-}
-//# sourceMappingURL=workflow.errors.d.ts.map

package/dist/modules/workflow/workflow.errors.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"workflow.errors.d.ts","sourceRoot":"","sources":["../../../src/modules/workflow/workflow.errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AAExE,qBAAa,mBAAoB,SAAQ,KAAK;IAC5C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBAC/B,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAM/E;AAED,qBAAa,eAAgB,SAAQ,mBAAmB;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM;gBAA3C,MAAM,EAAE,MAAM,EAAW,UAAU,EAAE,MAAM;CAIxD;AAED,qBAAa,oBAAqB,SAAQ,mBAAmB;IAC/C,QAAQ,CAAC,UAAU,EAAE,MAAM;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM;gBAA3C,UAAU,EAAE,MAAM,EAAW,MAAM,EAAE,MAAM;CAIjE;AAED;;;;;;;;;;GAUG;AACH,qBAAa,qBAAsB,SAAQ,mBAAmB;IAEhD,QAAQ,CAAC,UAAU,EAAE,MAAM;IADvC,QAAQ,CAAC,IAAI,EAAG,mBAAmB,CAAU;gBACxB,UAAU,EAAE,MAAM;CAQxC;AASD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,qBAAa,6BAA8B,SAAQ,mBAAmB;IAGlE,QAAQ,CAAC,MAAM,EAAE,MAAM;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM;IACrB,QAAQ,CAAC,cAAc,EAAE,MAAM;IAC/B,QAAQ,CAAC,cAAc,EAAE,MAAM;IALjC,QAAQ,CAAC,IAAI,EAAG,uBAAuB,CAAU;gBAEtC,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,cAAc,EAAE,MAAM,EACtB,cAAc,EAAE,MAAM;CAiBlC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,qBAAa,uBAAwB,SAAQ,mBAAmB;IAG5D,QAAQ,CAAC,MAAM,EAAE,MAAM;IACvB,QAAQ,CAAC,eAAe,EAAE,MAAM,EAAE;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM;IAJzB,QAAQ,CAAC,IAAI,EAAG,sBAAsB,CAAU;gBAErC,MAAM,EAAE,MAAM,EACd,eAAe,EAAE,MAAM,EAAE,EACzB,MAAM,EAAE,MAAM;CAe1B;AAED;;;;;GAKG;AACH,qBAAa,uBAAwB,SAAQ,mBAAmB;gBAClD,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAI/D;AAED;;;;;GAKG;AACH,qBAAa,oBAAqB,SAAQ,mBAAmB;IAE/C,QAAQ,CAAC,IAAI,EAAE,MAAM;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM;IADxD,QAAQ,CAAC,IAAI,EAAG,mBAAmB,CAAU;gBACxB,IAAI,EAAE,MAAM,EAAW,IAAI,EAAE,MAAM;CASzD;AAED;;;;;GAKG;AACH,qBAAa,qBAAsB,SAAQ,mBAAmB;IAC5D,QAAQ,CAAC,UAAU,EAAE,gBAAgB,CAAC;gBAC1B,MAAM,EAAE,gBAAgB;CAerC;AAED;;;;;GAKG;AACH,qBAAa,2BAA4B,SAAQ,mBAAmB;IAEtD,QAAQ,CAAC,OAAO,EAAE,MAAM;IADpC,QAAQ,CAAC,IAAI,EAAG,iBAAiB,CAAU;gBACtB,OAAO,EAAE,MAAM;CAQrC;AAED;;;;;;;;;;GAUG;AACH,qBAAa,2BAA4B,SAAQ,mBAAmB;IAGhE,QAAQ,CAAC,YAAY,EAAE,MAAM;IAC7B,QAAQ,CAAC,YAAY,EAAE,MAAM;IAC7B,QAAQ,CAAC,eAAe,EAAE,MAAM,EAAE;IAJpC,QAAQ,CAAC,IAAI,EAAG,0BAA0B,CAAU;gBAEzC,YAAY,EAAE,MAAM,EACpB,YAAY,EAAE,MAAM,EACpB,eAAe,EAAE,MAAM,EAAE;CAgBrC;AAED;;;;;GAKG;AACH,qBAAa,2BAA4B,SAAQ,mBAAmB;IAGhE,QAAQ,CAAC,YAAY,EAAE,MAAM;IAC7B,QAAQ,CAAC,YAAY,EAAE,MAAM;IAC7B,QAAQ,CAAC,cAAc,EAAE,MAAM;IAJjC,QAAQ,CAAC,IAAI,EAAG,0BAA0B,CAAU;gBAEzC,YAAY,EAAE,MAAM,EACpB,YAAY,EAAE,MAAM,EACpB,cAAc,EAAE,MAAM;CAclC;AAED;;;;;;;;GAQG;AACH,qBAAa,0BAA2B,SAAQ,mBAAmB;IACjE,QAAQ,CAAC,IAAI,EAAG,gCAAgC,CAAU;IAC1D;;;;OAIG;IACH,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;gBACZ,MAAM,EAAE,MAAM;CAS3B"}

package/dist/modules/workflow/workflow.errors.js

@@ -1,298 +0,0 @@
-/**
- * Workflow domain errors. This is the single source of truth — every error
- * raised by the workflow module (branches, changes, change requests, access
- * control, locks) lives here. Route handlers shape responses via the
- * `.status` + `.payload` contract on the base class.
- *
- * Naming: classes use workflow vocabulary. `WorkflowDomainError` is the
- * abstract base; specific subclasses describe the workflow concept that
- * went wrong (`BranchNameError`, `ProtectedBranchError`, etc.). Where a
- * concept is purely git mechanics with no workflow analogue
- * (`NoSharedHistoryError`), the name keeps its git flavour because
- * consumers actually need to discriminate on it.
- */
-export class WorkflowDomainError extends Error {
-    status;
-    payload;
-    constructor(message, status, payload) {
-        super(message);
-        this.name = 'WorkflowDomainError';
-        this.status = status;
-        this.payload = payload;
-    }
-}
-export class BranchNameError extends WorkflowDomainError {
-    branchName;
-    constructor(reason, branchName) {
-        super(`Invalid branch name "${branchName}": ${reason}`, 400);
-        this.branchName = branchName;
-        this.name = 'BranchNameError';
-    }
-}
-export class ProtectedBranchError extends WorkflowDomainError {
-    branchName;
-    action;
-    constructor(branchName, action) {
-        super(`Branch "${branchName}" is protected — ${action} is not allowed.`, 403);
-        this.branchName = branchName;
-        this.action = action;
-        this.name = 'ProtectedBranchError';
-    }
-}
-/**
- * The caller tried to delete a branch they don't own. Authorship is inferred
- * from the `<email-localpart>/<slug>` naming convention used by
- * `slugifyDraftName` — see `isBranchAuthoredBy` in `@bevel-software/platform-shared`.
- *
- * Distinct from `AccessDeniedError` because that error is path-based
- * (file-level write permission via `roles.yaml`/`access.md`). Branch
- * authorship is identity-based and has no eligible-roles list to surface —
- * the only way for someone else to delete a non-author's branch is to push
- * the delete via git CLI directly.
- */
-export class BranchAuthorshipError extends WorkflowDomainError {
-    branchName;
-    kind = 'branch-authorship';
-    constructor(branchName) {
-        super(`Only the author of "${branchName}" can delete it.`, 403, { kind: 'branch-authorship', branchName });
-        this.branchName = branchName;
-        this.name = 'BranchAuthorshipError';
-    }
-}
-// `DirtyWorkingTreeError` removed: under save=share + per-branch workspaces
-// no operation in the workflow can legitimately encounter a dirty working
-// tree. The two former callers (`switchBranch` and `mergeFromOrigin`'s
-// pre-flight) are gone / relaxed; if a dirty tree ever shows up it's an
-// internal bug that gets server-side-logged in `statusInternal`, never
-// surfaced as a user-facing 409.
-/**
- * The local commit landed but pushing it to origin failed because the
- * remote diverged (a teammate or the agent landed competing commits while
- * the lock was held). The cooperative recovery — `pull --rebase` + retry
- * push — also failed, because the divergence touches the same file and the
- * rebase conflicts.
- *
- * Per the "disk is the source of truth" rule we do NOT auto-force-push
- * from the workflow layer (that's a destructive history rewrite that can
- * lose teammate work irrecoverably). Instead we surface this structured
- * error so the frontend can seed an agent prompt — the agent has git + gh
- * CLI access plus the lock-aware write tool, so it can read both sides,
- * semantically merge, and save the resolved file through the normal
- * save=share pipeline. The user sees only a loading indicator; the agent
- * does the reconciliation.
- *
- * State at the moment this fires:
- *   - The local branch has the user's just-committed change as its HEAD.
- *   - The lock has already been released (lock release runs BEFORE the
- *     push attempt). The agent can acquire its own lock.
- *   - `origin/<branch>` has commits the local clone doesn't reach.
- *   - The working tree is clean (the commit landed).
- *
- * The payload carries enough context that the prompt builder can phrase
- * the resolution request to the agent without further server round-trips.
- */
-export class PushNeedsAgentResolutionError extends WorkflowDomainError {
-    branch;
-    path;
-    originalDetail;
-    recoveryDetail;
-    kind = 'push-needs-resolution';
-    constructor(branch, path, originalDetail, recoveryDetail) {
-        super(`Saved locally on "${branch}" but couldn't share with the team automatically — ` +
-            `the remote diverged on "${path}" and the cooperative rebase couldn't reconcile. ` +
-            `The agent will resolve this.`, 409, {
-            kind: 'push-needs-resolution',
-            branch,
-            path,
-            originalDetail,
-            recoveryDetail,
-        });
-        this.branch = branch;
-        this.path = path;
-        this.originalDetail = originalDetail;
-        this.recoveryDetail = recoveryDetail;
-        this.name = 'PushNeedsAgentResolutionError';
-    }
-}
-/**
- * Refreshing a workspace from origin (`GitService.pull`) hit a rebase
- * conflict: the workspace carries local commits origin doesn't have, origin
- * moved ahead with changes that touch the same files, and replaying the
- * local commits conflicts. The rebase has already been aborted — the
- * workspace is back in its pre-pull state (diverged, clean tree).
- *
- * This state does NOT resolve itself: every subsequent pull hits the same
- * conflict, and the local commits (someone's saved content, under
- * save=share) stay unshared until the divergence is reconciled. The service
- * layer therefore reacts by queueing a background recovery run (see
- * `WorkflowService.updateFromRemote`); this error tells the caller what
- * happened and which paths are contested.
- *
- * 409 like the other conflict errors — the operation needs the divergence
- * cleared before it can succeed. `detail` (the raw git failure, already
- * credential-redacted by `GitService.git`) is kept OFF the payload; it's for
- * server logs and the recovery pipeline, not the client.
- */
-export class PullRebaseConflictError extends WorkflowDomainError {
-    branch;
-    conflictedPaths;
-    detail;
-    kind = 'pull-rebase-conflict';
-    constructor(branch, conflictedPaths, detail) {
-        const list = conflictedPaths.join(', ');
-        super(`Updating "${branch}" from origin hit conflicts in ${conflictedPaths.length} file(s): ${list}. ` +
-            `Automatic background recovery has been queued.`, 409, {
-            kind: 'pull-rebase-conflict',
-            branch,
-            conflictedPaths,
-        });
-        this.branch = branch;
-        this.conflictedPaths = conflictedPaths;
-        this.detail = detail;
-        this.name = 'PullRebaseConflictError';
-    }
-}
-/**
- * Generic 400 for workflow-input validation (malformed branch names, missing
- * fields, etc.). Carries an optional payload so callers can attach typed
- * discriminators (`kind: '...'`) when the frontend needs to switch on the
- * specific failure mode.
- */
-export class WorkflowValidationError extends WorkflowDomainError {
-    constructor(message, payload) {
-        super(message, 400, payload);
-        this.name = 'WorkflowValidationError';
-    }
-}
-/**
- * The draft branch doesn't share history with the target branch, so GitHub
- * would reject the change request with `no history in common`. Surfaced as
- * a structured payload so the frontend's typed-error parser can route into
- * the agent recovery flow.
- */
-export class NoSharedHistoryError extends WorkflowDomainError {
-    head;
-    base;
-    kind = 'no-shared-history';
-    constructor(head, base) {
-        super(`The draft "${head}" doesn't share history with "${base}". ` +
-            `It was likely started outside the app or from an unrelated point.`, 400, { kind: 'no-shared-history', head, base });
-        this.head = head;
-        this.base = base;
-        this.name = 'NoSharedHistoryError';
-    }
-}
-/**
- * The KB validator reported `mustFix` issues (DANGLING LINK / ASYMMETRY /
- * ERROR) — the change cannot land until they're resolved. The payload
- * carries the structured report so the UI / agent can render the items
- * the user must fix without re-running the validator.
- */
-export class ValidationFailedError extends WorkflowDomainError {
-    validation;
-    constructor(report) {
-        super(`Cannot commit — knowledge graph has ${report.mustFix.length} unresolved issue(s).`, 422, {
-            validation: {
-                ok: report.ok,
-                mustFix: report.mustFix,
-                warnings: report.warnings,
-            },
-        });
-        this.name = 'ValidationFailedError';
-        this.validation = report;
-    }
-}
-/**
- * Method exists on the workflow interface but has no backing implementation
- * yet. 501 so the frontend can light up "coming soon" affordances without
- * confusing them with 5xx infra failures. `feature` is the workflow method
- * name; clients switch on it to render targeted copy.
- */
-export class NotImplementedWorkflowError extends WorkflowDomainError {
-    feature;
-    kind = 'not-implemented';
-    constructor(feature) {
-        super(`Workflow feature "${feature}" is not yet implemented in this build.`, 501, { kind: 'not-implemented', feature });
-        this.feature = feature;
-        this.name = 'NotImplementedWorkflowError';
-    }
-}
-/**
- * Attempting to reconcile two branches (opening a change request, refreshing
- * one from target, or executing a merge) hit conflicts that the workflow
- * cannot auto-resolve. The structured payload carries the list of
- * conflicting paths so the frontend / agent can route into the resolution
- * flow without a second round-trip.
- *
- * 409 because the conflict is a precondition the caller has to clear (by
- * resolving + committing on the source branch) before the operation can
- * succeed — same semantics git itself uses for merge conflicts.
- */
-export class ChangeRequestConflictsError extends WorkflowDomainError {
-    sourceBranch;
-    targetBranch;
-    conflictedPaths;
-    kind = 'change-request-conflicts';
-    constructor(sourceBranch, targetBranch, conflictedPaths) {
-        const list = conflictedPaths.join(', ');
-        super(`Conflicts merging "${targetBranch}" into "${sourceBranch}". ` +
-            `${conflictedPaths.length} file(s): ${list}. Resolve on "${sourceBranch}" and try again.`, 409, {
-            kind: 'change-request-conflicts',
-            sourceBranch,
-            targetBranch,
-            conflictedPaths,
-        });
-        this.sourceBranch = sourceBranch;
-        this.targetBranch = targetBranch;
-        this.conflictedPaths = conflictedPaths;
-        this.name = 'ChangeRequestConflictsError';
-    }
-}
-/**
- * Caller tried to open a change request for a `(source, target)` pair that
- * already has one open. Spec rule: A→B blocks A→B (B→A is allowed). Carries
- * the existing CR number so the UI / agent can deep-link to it instead of
- * trying to recover.
- */
-export class DuplicateChangeRequestError extends WorkflowDomainError {
-    sourceBranch;
-    targetBranch;
-    existingNumber;
-    kind = 'duplicate-change-request';
-    constructor(sourceBranch, targetBranch, existingNumber) {
-        super(`An open change request already exists from "${sourceBranch}" to "${targetBranch}" (#${existingNumber}).`, 409, {
-            kind: 'duplicate-change-request',
-            sourceBranch,
-            targetBranch,
-            existingNumber,
-        });
-        this.sourceBranch = sourceBranch;
-        this.targetBranch = targetBranch;
-        this.existingNumber = existingNumber;
-        this.name = 'DuplicateChangeRequestError';
-    }
-}
-/**
- * Raised when a merge must neutralise a CR's `roles.yaml` change (restore the
- * base branch's version on the source branch) but that preservation write fails.
- * `roles.yaml` decides admin membership and is mutable ONLY via the admin Roles
- * & Members surface — a CR must never carry a roles.yaml change across a merge,
- * so if we cannot guarantee the base version is preserved we abort the merge
- * rather than risk landing the CR's version on a protected branch. 502: the
- * failure is an internal git/push hiccup, not the caller's fault.
- */
-export class RolesYamlPreservationError extends WorkflowDomainError {
-    kind = 'roles-yaml-preservation-failed';
-    /**
-     * The underlying git/push failure. Kept OFF the client-facing message (which
-     * stays generic for the 502) so raw git internals / paths don't leak to the
-     * caller — log this server-side for diagnostics instead.
-     */
-    detail;
-    constructor(reason) {
-        super('Could not preserve the official roles.yaml while merging — merge aborted so no roles.yaml change can ride in.', 502, { kind: 'roles-yaml-preservation-failed' });
-        this.name = 'RolesYamlPreservationError';
-        this.detail = reason;
-    }
-}
-//# sourceMappingURL=workflow.errors.js.map

package/dist/modules/workflow/workflow.errors.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"workflow.errors.js","sourceRoot":"","sources":["../../../src/modules/workflow/workflow.errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAIH,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IACnC,MAAM,CAAS;IACf,OAAO,CAA2B;IAC3C,YAAY,OAAe,EAAE,MAAc,EAAE,OAAiC;QAC5E,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;QAClC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;CACF;AAED,MAAM,OAAO,eAAgB,SAAQ,mBAAmB;IACjB;IAArC,YAAY,MAAc,EAAW,UAAkB;QACrD,KAAK,CAAC,wBAAwB,UAAU,MAAM,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;QAD1B,eAAU,GAAV,UAAU,CAAQ;QAErD,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AAED,MAAM,OAAO,oBAAqB,SAAQ,mBAAmB;IACtC;IAA6B;IAAlD,YAAqB,UAAkB,EAAW,MAAc;QAC9D,KAAK,CAAC,WAAW,UAAU,oBAAoB,MAAM,kBAAkB,EAAE,GAAG,CAAC,CAAC;QAD3D,eAAU,GAAV,UAAU,CAAQ;QAAW,WAAM,GAAN,MAAM,CAAQ;QAE9D,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAED;;;;;;;;;;GAUG;AACH,MAAM,OAAO,qBAAsB,SAAQ,mBAAmB;IAEvC;IADZ,IAAI,GAAG,mBAA4B,CAAC;IAC7C,YAAqB,UAAkB;QACrC,KAAK,CACH,uBAAuB,UAAU,kBAAkB,EACnD,GAAG,EACH,EAAE,IAAI,EAAE,mBAAmB,EAAE,UAAU,EAAE,CAC1C,CAAC;QALiB,eAAU,GAAV,UAAU,CAAQ;QAMrC,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AAED,4EAA4E;AAC5E,0EAA0E;AAC1E,uEAAuE;AACvE,wEAAwE;AACxE,uEAAuE;AACvE,iCAAiC;AAEjC;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,OAAO,6BAA8B,SAAQ,mBAAmB;IAGzD;IACA;IACA;IACA;IALF,IAAI,GAAG,uBAAgC,CAAC;IACjD,YACW,MAAc,EACd,IAAY,EACZ,cAAsB,EACtB,cAAsB;QAE/B,KAAK,CACH,qBAAqB,MAAM,qDAAqD;YAC9E,2BAA2B,IAAI,mDAAmD;YAClF,8BAA8B,EAChC,GAAG,EACH;YACE,IAAI,EAAE,uBAAuB;YAC7B,MAAM;YACN,IAAI;YACJ,cAAc;YACd,cAAc;SACf,CACF,CAAC;QAjBO,WAAM,GAAN,MAAM,CAAQ;QACd,SAAI,GAAJ,IAAI,CAAQ;QACZ,mBAAc,GAAd,cAAc,CAAQ;QACtB,mBAAc,GAAd,cAAc,CAAQ;QAe/B,IAAI,CAAC,IAAI,GAAG,+BAA+B,CAAC;IAC9C,CAAC;CACF;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,OAAO,uBAAwB,SAAQ,mBAAmB;IAGnD;IACA;IACA;IAJF,IAAI,GAAG,sBAA+B,CAAC;IAChD,YACW,MAAc,EACd,eAAyB,EACzB,MAAc;QAEvB,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxC,KAAK,CACH,aAAa,MAAM,kCAAkC,eAAe,CAAC,MAAM,aAAa,IAAI,IAAI;YAC9F,gDAAgD,EAClD,GAAG,EACH;YACE,IAAI,EAAE,sBAAsB;YAC5B,MAAM;YACN,eAAe;SAChB,CACF,CAAC;QAdO,WAAM,GAAN,MAAM,CAAQ;QACd,oBAAe,GAAf,eAAe,CAAU;QACzB,WAAM,GAAN,MAAM,CAAQ;QAavB,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,uBAAwB,SAAQ,mBAAmB;IAC9D,YAAY,OAAe,EAAE,OAAiC;QAC5D,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;QAC7B,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,oBAAqB,SAAQ,mBAAmB;IAEtC;IAAuB;IADnC,IAAI,GAAG,mBAA4B,CAAC;IAC7C,YAAqB,IAAY,EAAW,IAAY;QACtD,KAAK,CACH,cAAc,IAAI,iCAAiC,IAAI,KAAK;YAC1D,mEAAmE,EACrE,GAAG,EACH,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,IAAI,EAAE,CAC1C,CAAC;QANiB,SAAI,GAAJ,IAAI,CAAQ;QAAW,SAAI,GAAJ,IAAI,CAAQ;QAOtD,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,qBAAsB,SAAQ,mBAAmB;IACnD,UAAU,CAAmB;IACtC,YAAY,MAAwB;QAClC,KAAK,CACH,uCAAuC,MAAM,CAAC,OAAO,CAAC,MAAM,uBAAuB,EACnF,GAAG,EACH;YACE,UAAU,EAAE;gBACV,EAAE,EAAE,MAAM,CAAC,EAAE;gBACb,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;aAC1B;SACF,CACF,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;QACpC,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC;IAC3B,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,2BAA4B,SAAQ,mBAAmB;IAE7C;IADZ,IAAI,GAAG,iBAA0B,CAAC;IAC3C,YAAqB,OAAe;QAClC,KAAK,CACH,qBAAqB,OAAO,yCAAyC,EACrE,GAAG,EACH,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,CACrC,CAAC;QALiB,YAAO,GAAP,OAAO,CAAQ;QAMlC,IAAI,CAAC,IAAI,GAAG,6BAA6B,CAAC;IAC5C,CAAC;CACF;AAED;;;;;;;;;;GAUG;AACH,MAAM,OAAO,2BAA4B,SAAQ,mBAAmB;IAGvD;IACA;IACA;IAJF,IAAI,GAAG,0BAAmC,CAAC;IACpD,YACW,YAAoB,EACpB,YAAoB,EACpB,eAAyB;QAElC,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxC,KAAK,CACH,sBAAsB,YAAY,WAAW,YAAY,KAAK;YAC5D,GAAG,eAAe,CAAC,MAAM,aAAa,IAAI,iBAAiB,YAAY,kBAAkB,EAC3F,GAAG,EACH;YACE,IAAI,EAAE,0BAA0B;YAChC,YAAY;YACZ,YAAY;YACZ,eAAe;SAChB,CACF,CAAC;QAfO,iBAAY,GAAZ,YAAY,CAAQ;QACpB,iBAAY,GAAZ,YAAY,CAAQ;QACpB,oBAAe,GAAf,eAAe,CAAU;QAclC,IAAI,CAAC,IAAI,GAAG,6BAA6B,CAAC;IAC5C,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,2BAA4B,SAAQ,mBAAmB;IAGvD;IACA;IACA;IAJF,IAAI,GAAG,0BAAmC,CAAC;IACpD,YACW,YAAoB,EACpB,YAAoB,EACpB,cAAsB;QAE/B,KAAK,CACH,+CAA+C,YAAY,SAAS,YAAY,OAAO,cAAc,IAAI,EACzG,GAAG,EACH;YACE,IAAI,EAAE,0BAA0B;YAChC,YAAY;YACZ,YAAY;YACZ,cAAc;SACf,CACF,CAAC;QAbO,iBAAY,GAAZ,YAAY,CAAQ;QACpB,iBAAY,GAAZ,YAAY,CAAQ;QACpB,mBAAc,GAAd,cAAc,CAAQ;QAY/B,IAAI,CAAC,IAAI,GAAG,6BAA6B,CAAC;IAC5C,CAAC;CACF;AAED;;;;;;;;GAQG;AACH,MAAM,OAAO,0BAA2B,SAAQ,mBAAmB;IACxD,IAAI,GAAG,gCAAyC,CAAC;IAC1D;;;;OAIG;IACM,MAAM,CAAS;IACxB,YAAY,MAAc;QACxB,KAAK,CACH,+GAA+G,EAC/G,GAAG,EACH,EAAE,IAAI,EAAE,gCAAgC,EAAE,CAC3C,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;QACzC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF"}

package/dist/modules/workspace/bevel-ignore.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"bevel-ignore.d.ts","sourceRoot":"","sources":["../../../src/modules/workspace/bevel-ignore.ts"],"names":[],"mappings":"AAIA;;;GAGG;AACH,eAAO,MAAM,eAAe,iBAAiB,CAAC;AAS9C;;;;;;;GAOG;AACH,qBAAa,gBAAgB;IACP,OAAO,CAAC,QAAQ,CAAC,MAAM;IAA3C,OAAO;IAEP,MAAM,CAAC,KAAK,IAAI,gBAAgB;IAIhC;;;OAGG;IACG,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAY1D;;;;OAIG;IACH,SAAS,CAAC,YAAY,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,GAAG,OAAO;CAY/D"}

package/dist/modules/workspace/bevel-ignore.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"bevel-ignore.js","sourceRoot":"","sources":["../../../src/modules/workspace/bevel-ignore.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,MAAuB,MAAM,QAAQ,CAAC;AAE7C;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,cAAc,CAAC;AAS9C;;;;;;;GAOG;AACH,MAAM,OAAO,gBAAgB;IACU;IAArC,YAAqC,MAA8B;QAA9B,WAAM,GAAN,MAAM,CAAwB;IAAG,CAAC;IAEvE,MAAM,CAAC,KAAK;QACV,OAAO,IAAI,gBAAgB,CAAC,EAAE,CAAC,CAAC;IAClC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,YAAY,CAAC,GAAW;QAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;QAC7C,IAAI,QAAgB,CAAC;QACrB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACvC,OAAO,IAAI,gBAAgB,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;IACxE,CAAC;IAED;;;;OAIG;IACH,SAAS,CAAC,YAAoB,EAAE,WAAoB;QAClD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YACxE,+EAA+E;YAC/E,kEAAkE;YAClE,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,SAAS;YAC3C,+EAA+E;YAC/E,MAAM,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;YAC5C,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;QAChD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;CACF"}

package/dist/modules/workspace/kb-seed.interface.d.ts

@@ -1,36 +0,0 @@
-/**
- * Bootstraps the KB *remote* so the rest of the app's assumption — that the KB
- * repo it clones already carries the protected branches and base scaffolding —
- * holds even for a brand-new (or partially-populated) GitHub repo.
- *
- * The platform used to require the KB remote to have been forked from the
- * standalone `knowledge-base-template` repo. That template now ships inside the
- * platform (`kb-template/` at the repo root) and this service seeds from it.
- */
-export interface IKbSeedService {
-    /**
-     * Ensure the KB remote can be cloned: seed a fully-empty repo, and make sure
-     * every protected branch exists as a ref (so `clone -b <branch>` succeeds).
-     * Idempotent and single-flight — safe to await before every clone; the real
-     * work runs at most once per process.
-     *
-     * - **Empty remote** → full seed: all template files (incl. the sample
-     *   ontology) committed to every protected branch. Uses `ADMIN_EMAIL`
-     *   (a repo with no Admin is unusable), otherwise throws.
-     * - **Existing remote** → create only the protected branches that don't exist
-     *   yet, off an existing one. No file changes here — per-branch base files are
-     *   filled in by {@link topUpWorkspace} when a branch is loaded.
-     */
-    ensureRemoteSeeded(): Promise<void>;
-    /**
-     * Fill in any missing base scaffolding on the freshly-cloned workspace of the
-     * branch a user just loaded, then commit + push it to that branch. Add-only —
-     * never overwrites existing files, and never restores the sample ontology.
-     * Best-effort: never throws, so a top-up hiccup can't block loading the branch.
-     *
-     * @param repoDir Absolute path to the checked-out KB clone for `branch`.
-     * @param branch  The branch that clone is on (the push target).
-     */
-    topUpWorkspace(repoDir: string, branch: string): Promise<void>;
-}
-//# sourceMappingURL=kb-seed.interface.d.ts.map

package/dist/modules/workspace/kb-seed.interface.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"kb-seed.interface.d.ts","sourceRoot":"","sources":["../../../src/modules/workspace/kb-seed.interface.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,MAAM,WAAW,cAAc;IAC7B;;;;;;;;;;;;OAYG;IACH,kBAAkB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAEpC;;;;;;;;OAQG;IACH,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAChE"}

package/dist/modules/workspace/kb-seed.interface.js

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=kb-seed.interface.js.map

package/dist/modules/workspace/kb-seed.interface.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"kb-seed.interface.js","sourceRoot":"","sources":["../../../src/modules/workspace/kb-seed.interface.ts"],"names":[],"mappings":""}