@bevel-software/platform-core-backend 0.19.0 → 0.21.0

package/dist/modules/groups/index.d.ts

@@ -1,7 +0,0 @@
-export { GroupIndexService, groupsWorkspaceId } from './groups.service.js';
-export { GroupProvisionService, GroupProvisionError, groupAccessMd, personalAccessMd, } from './group-provision.service.js';
-export { JoinRequestsService, type JoinRequest } from './join-requests.service.js';
-export { pendingProposals, type JoinProposal } from './join-proposals.js';
-export { createGroupsRoutes } from './groups.routes.js';
-export type { IGroupIndexService, GroupCatalogEntry, GroupSummary, ResolvedPrincipals, ResolvedReaders, } from './groups.contract.js';
-//# sourceMappingURL=index.d.ts.map

package/dist/modules/groups/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/modules/groups/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAC3E,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,aAAa,EACb,gBAAgB,GACjB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,mBAAmB,EAAE,KAAK,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACnF,OAAO,EAAE,gBAAgB,EAAE,KAAK,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAC1E,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,YAAY,EACV,kBAAkB,EAClB,iBAAiB,EACjB,YAAY,EACZ,kBAAkB,EAClB,eAAe,GAChB,MAAM,sBAAsB,CAAC"}

package/dist/modules/groups/index.js

@@ -1,6 +0,0 @@
-export { GroupIndexService, groupsWorkspaceId } from './groups.service.js';
-export { GroupProvisionService, GroupProvisionError, groupAccessMd, personalAccessMd, } from './group-provision.service.js';
-export { JoinRequestsService } from './join-requests.service.js';
-export { pendingProposals } from './join-proposals.js';
-export { createGroupsRoutes } from './groups.routes.js';
-//# sourceMappingURL=index.js.map

package/dist/modules/groups/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/modules/groups/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAC3E,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,aAAa,EACb,gBAAgB,GACjB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,mBAAmB,EAAoB,MAAM,4BAA4B,CAAC;AACnF,OAAO,EAAE,gBAAgB,EAAqB,MAAM,qBAAqB,CAAC;AAC1E,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/modules/groups/join-proposals.d.ts

@@ -1,53 +0,0 @@
-import { type Verb } from '../access/access-control.service.js';
-/**
- * What a join branch is PROPOSING, relative to the default branch.
- *
- * A join request is a change request whose branch edits one group's
- * `access.md`. Rather than treating that change request as an all-or-nothing
- * merge, the group's managers see its individual proposals — "grant Ali read",
- * "grant GTM Team write" — and answer them one at a time. Approving a proposal
- * writes THAT ONE grant onto the default branch through the ordinary access
- * mutation path; the branch is never merged, so nothing else it happens to
- * contain can ride along, and a change request naming five people can be
- * answered with two yeses and three ignores.
- *
- * A proposal is any (principal, verb) GRANT the branch's copy of the file
- * carries that the default branch's copy does not. Deliberately:
- *
- *  - grants only. A `deny` entry is not something to "accept", and a branch
- *    that REMOVES an existing grant proposes nothing — it is a revocation,
- *    which is not what this surface is for. Both are simply invisible here,
- *    and both leave the branch as a normal change request in the review UI.
- *  - every verb, not just `read`. A branch asking for `write` must be visible
- *    AS a write request rather than hiding behind "asked to join"; and the
- *    subset test that retires a request has to cover everything the file can
- *    express, or a request proposing `write` would never settle.
- *
- * When the list comes back EMPTY the branch adds nothing the default branch
- * does not already grant — its proposals have all been accepted (or were
- * never anything) — and the change request has no reason to stay open.
- */
-export interface JoinProposal {
-    verb: Verb;
-    /** Canonical identity — lowercased email, or canonical role name. */
-    id: string;
-    principal: {
-        kind: 'user';
-        email: string;
-        displayName: string;
-    } | {
-        kind: 'role';
-        role: string;
-    };
-    /** How to name this principal in the UI. */
-    label: string;
-}
-/**
- * The grants `branchText` adds over `defaultText` — the proposals a manager
- * can accept. Empty ⇒ the branch's rules are a subset of the default's.
- *
- * `path` is only used to label parse errors; both texts are the same file at
- * two refs.
- */
-export declare function pendingProposals(branchText: string | null, defaultText: string | null, path: string): JoinProposal[];
-//# sourceMappingURL=join-proposals.d.ts.map

package/dist/modules/groups/join-proposals.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"join-proposals.d.ts","sourceRoot":"","sources":["../../../src/modules/groups/join-proposals.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,KAAK,IAAI,EACV,MAAM,qCAAqC,CAAC;AAE7C;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,IAAI,CAAC;IACX,qEAAqE;IACrE,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EACL;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,GACpD;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACnC,4CAA4C;IAC5C,KAAK,EAAE,MAAM,CAAC;CACf;AAgCD;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAC9B,UAAU,EAAE,MAAM,GAAG,IAAI,EACzB,WAAW,EAAE,MAAM,GAAG,IAAI,EAC1B,IAAI,EAAE,MAAM,GACX,YAAY,EAAE,CA0BhB"}

package/dist/modules/groups/join-proposals.js

@@ -1,67 +0,0 @@
-import { KNOWN_VERBS, parseAccessFile, } from '../access/access-control.service.js';
-/** Canonical identity of an entry, for set comparison across the two files. */
-function identityOf(entry) {
-    return entry.kind === 'user' ? `user:${entry.email}` : `role:${entry.role}`;
-}
-/**
- * Folder rules from one copy of an `access.md`, per verb, grants only.
- *
- * A file that fails to parse yields NO grants. On the branch side that means
- * a malformed proposal offers nothing to accept (fail-closed). On the default
- * side it means every branch grant looks incoming — which is the safe
- * direction too: the manager is shown proposals to consider rather than
- * having them silently swallowed by an unreadable baseline.
- */
-function grantsByVerb(text, path) {
-    const out = new Map();
-    for (const verb of KNOWN_VERBS)
-        out.set(verb, new Map());
-    if (text === null)
-        return out;
-    const parsed = parseAccessFile(text, path);
-    if (!parsed.ok)
-        return out;
-    for (const verb of KNOWN_VERBS) {
-        const byId = out.get(verb);
-        for (const entry of parsed.file.entries[verb]) {
-            if (entry.deny)
-                continue;
-            byId.set(identityOf(entry), entry);
-        }
-    }
-    return out;
-}
-/**
- * The grants `branchText` adds over `defaultText` — the proposals a manager
- * can accept. Empty ⇒ the branch's rules are a subset of the default's.
- *
- * `path` is only used to label parse errors; both texts are the same file at
- * two refs.
- */
-export function pendingProposals(branchText, defaultText, path) {
-    const branch = grantsByVerb(branchText, path);
-    const base = grantsByVerb(defaultText, path);
-    const out = [];
-    for (const verb of KNOWN_VERBS) {
-        const baseIds = base.get(verb);
-        for (const [id, entry] of branch.get(verb)) {
-            if (baseIds.has(id))
-                continue;
-            out.push(entry.kind === 'user'
-                ? {
-                    verb,
-                    id,
-                    principal: { kind: 'user', email: entry.email, displayName: entry.displayName },
-                    label: entry.displayName,
-                }
-                : {
-                    verb,
-                    id,
-                    principal: { kind: 'role', role: entry.displayRole },
-                    label: entry.displayRole,
-                });
-        }
-    }
-    return out;
-}
-//# sourceMappingURL=join-proposals.js.map

package/dist/modules/groups/join-proposals.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"join-proposals.js","sourceRoot":"","sources":["../../../src/modules/groups/join-proposals.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,WAAW,EACX,eAAe,GAGhB,MAAM,qCAAqC,CAAC;AAyC7C,+EAA+E;AAC/E,SAAS,UAAU,CAAC,KAAkB;IACpC,OAAO,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;AAC9E,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,YAAY,CAAC,IAAmB,EAAE,IAAY;IACrD,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkC,CAAC;IACtD,KAAK,MAAM,IAAI,IAAI,WAAW;QAAE,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;IACzD,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,GAAG,CAAC;IAC9B,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC3C,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,GAAG,CAAC;IAC3B,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,IAAI,CAAE,CAAC;QAC5B,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9C,IAAI,KAAK,CAAC,IAAI;gBAAE,SAAS;YACzB,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAC9B,UAAyB,EACzB,WAA0B,EAC1B,IAAY;IAEZ,MAAM,MAAM,GAAG,YAAY,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,YAAY,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;IAC7C,MAAM,GAAG,GAAmB,EAAE,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAE,CAAC;QAChC,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAE,EAAE,CAAC;YAC5C,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAE,SAAS;YAC9B,GAAG,CAAC,IAAI,CACN,KAAK,CAAC,IAAI,KAAK,MAAM;gBACnB,CAAC,CAAC;oBACE,IAAI;oBACJ,EAAE;oBACF,SAAS,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE;oBAC/E,KAAK,EAAE,KAAK,CAAC,WAAW;iBACzB;gBACH,CAAC,CAAC;oBACE,IAAI;oBACJ,EAAE;oBACF,SAAS,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,WAAW,EAAE;oBACpD,KAAK,EAAE,KAAK,CAAC,WAAW;iBACzB,CACN,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/modules/groups/join-requests.service.d.ts

@@ -1,81 +0,0 @@
-import { type AuthUser, type ChangeRequest, type IWorkflowService } from '@bevel-software/platform-shared';
-import { type WorkspaceService } from '../workspace/workspace.service.js';
-import { type JoinProposal } from './join-proposals.js';
-/** One open join change request, with what it still proposes. */
-export interface JoinRequest {
-    number: number;
-    branch: string;
-    requesterName: string;
-    createdAt: string;
-    /** Grants the branch adds over the default branch. Never empty (see below). */
-    proposals: JoinProposal[];
-}
-/**
- * Join requests as PROPOSALS, and the reconciliation that retires them.
- *
- * The lifecycle has no state of its own — it is derived, every time, from two
- * copies of one file:
- *
- *   open        the branch's `access.md` grants something the default's does not
- *   settled     it does not
- *
- * so "approve" is not an operation on the request at all. A manager grants a
- * principal through the ordinary access path (the same lock + commit every
- * other access edit uses, gated the same way), the default branch gains that
- * entry, and the proposal stops being pending because the diff no longer
- * contains it. When the last one goes, the change request has nothing left to
- * say and is rejected, its branch deleted.
- *
- * That reconciliation runs LAZILY on every listing as well as on demand, so a
- * grant made anywhere — this banner, the Manage-access dialog, a hand edit —
- * settles the request that asked for it. Nothing has to remember to.
- */
-export declare class JoinRequestsService {
-    private readonly workspaceService;
-    private readonly workflow;
-    constructor(workspaceService: WorkspaceService, workflow: IWorkflowService);
-    /**
-     * Open join requests for `group`, each carrying only its still-pending
-     * proposals. Requests with none left are reconciled away (rejected, branch
-     * deleted) and omitted.
-     *
-     * `actor` is who the reconciliation acts as — a manager of the group, since
-     * rejecting a change request requires write on everything it touches.
-     */
-    list(group: string, folder: string, crs: ChangeRequest[], actor: AuthUser): Promise<JoinRequest[]>;
-    /**
-     * Re-check ONE request and settle it if nothing is pending. Returns whether
-     * it was settled. Called right after a grant so the banner updates in the
-     * same round-trip instead of waiting for the next listing.
-     */
-    reconcile(group: string, folder: string, cr: ChangeRequest, actor: AuthUser): Promise<boolean>;
-    /**
-     * Close a request whose proposals have all landed, and delete its branch.
-     *
-     * Rejecting rather than merging is the point: the grants are already on the
-     * default branch, so merging would replay a diff that is now empty of
-     * meaning while dragging along anything else the branch carries. The branch
-     * goes too — it exists only to hold a proposal that no longer exists.
-     *
-     * Best-effort by contract: this runs inside a listing, and a request that
-     * cannot be closed right now must not take the listing down with it. The
-     * next pass tries again.
-     */
-    private settle;
-    /**
-     * The file at one branch, or null when it is absent/unreadable there.
-     *
-     * Every read runs against the DEFAULT branch's clone at `origin/<branch>`,
-     * so one workspace answers for every request and a join branch never needs
-     * a clone of its own. `readFileAtRef` takes a REPO-relative path (the KB
-     * dir is the repo root there).
-     */
-    private readAt;
-    /**
-     * Refresh remote-tracking refs before reading them. Throttled inside, and
-     * best-effort: a request pushed seconds ago is worth one fetch, but a fetch
-     * failure must degrade to "read what we have" rather than empty the list.
-     */
-    private refresh;
-}
-//# sourceMappingURL=join-requests.service.d.ts.map

package/dist/modules/groups/join-requests.service.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"join-requests.service.d.ts","sourceRoot":"","sources":["../../../src/modules/groups/join-requests.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,QAAQ,EACb,KAAK,aAAa,EAClB,KAAK,gBAAgB,EACtB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAwB,KAAK,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AAChG,OAAO,EAAoB,KAAK,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAE1E,iEAAiE;AACjE,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,+EAA+E;IAC/E,SAAS,EAAE,YAAY,EAAE,CAAC;CAC3B;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,qBAAa,mBAAmB;IAE5B,OAAO,CAAC,QAAQ,CAAC,gBAAgB;IACjC,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBADR,gBAAgB,EAAE,gBAAgB,EAClC,QAAQ,EAAE,gBAAgB;IAG7C;;;;;;;OAOG;IACG,IAAI,CACR,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,aAAa,EAAE,EACpB,KAAK,EAAE,QAAQ,GACd,OAAO,CAAC,WAAW,EAAE,CAAC;IA2BzB;;;;OAIG;IACG,SAAS,CACb,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EACd,EAAE,EAAE,aAAa,EACjB,KAAK,EAAE,QAAQ,GACd,OAAO,CAAC,OAAO,CAAC;IAcnB;;;;;;;;;;;OAWG;YACW,MAAM;IAgCpB;;;;;;;OAOG;YACW,MAAM;IAYpB;;;;OAIG;YACW,OAAO;CAKtB"}

package/dist/modules/groups/join-requests.service.js

@@ -1,135 +0,0 @@
-import { DEFAULT_BRANCH, isJoinBranchFor, } from '@bevel-software/platform-shared';
-import { workspaceIdForBranch } from '../workspace/workspace.service.js';
-import { pendingProposals } from './join-proposals.js';
-/**
- * Join requests as PROPOSALS, and the reconciliation that retires them.
- *
- * The lifecycle has no state of its own — it is derived, every time, from two
- * copies of one file:
- *
- *   open        the branch's `access.md` grants something the default's does not
- *   settled     it does not
- *
- * so "approve" is not an operation on the request at all. A manager grants a
- * principal through the ordinary access path (the same lock + commit every
- * other access edit uses, gated the same way), the default branch gains that
- * entry, and the proposal stops being pending because the diff no longer
- * contains it. When the last one goes, the change request has nothing left to
- * say and is rejected, its branch deleted.
- *
- * That reconciliation runs LAZILY on every listing as well as on demand, so a
- * grant made anywhere — this banner, the Manage-access dialog, a hand edit —
- * settles the request that asked for it. Nothing has to remember to.
- */
-export class JoinRequestsService {
-    workspaceService;
-    workflow;
-    constructor(workspaceService, workflow) {
-        this.workspaceService = workspaceService;
-        this.workflow = workflow;
-    }
-    /**
-     * Open join requests for `group`, each carrying only its still-pending
-     * proposals. Requests with none left are reconciled away (rejected, branch
-     * deleted) and omitted.
-     *
-     * `actor` is who the reconciliation acts as — a manager of the group, since
-     * rejecting a change request requires write on everything it touches.
-     */
-    async list(group, folder, crs, actor) {
-        await this.refresh();
-        const accessPath = `${folder}/access.md`;
-        const baseText = await this.readAt(DEFAULT_BRANCH, accessPath);
-        const out = [];
-        for (const cr of crs) {
-            if (cr.state !== 'open' || !isJoinBranchFor(cr.branch, group))
-                continue;
-            const proposals = pendingProposals(await this.readAt(cr.branch, accessPath), baseText, accessPath);
-            if (proposals.length === 0) {
-                await this.settle(cr, actor);
-                continue;
-            }
-            out.push({
-                number: cr.number,
-                branch: cr.branch,
-                requesterName: cr.appAuthor?.name ?? 'Someone',
-                createdAt: cr.createdAt,
-                proposals,
-            });
-        }
-        return out.sort((a, b) => a.createdAt.localeCompare(b.createdAt));
-    }
-    /**
-     * Re-check ONE request and settle it if nothing is pending. Returns whether
-     * it was settled. Called right after a grant so the banner updates in the
-     * same round-trip instead of waiting for the next listing.
-     */
-    async reconcile(group, folder, cr, actor) {
-        if (cr.state !== 'open' || !isJoinBranchFor(cr.branch, group))
-            return false;
-        await this.refresh();
-        const accessPath = `${folder}/access.md`;
-        const proposals = pendingProposals(await this.readAt(cr.branch, accessPath), await this.readAt(DEFAULT_BRANCH, accessPath), accessPath);
-        if (proposals.length > 0)
-            return false;
-        await this.settle(cr, actor);
-        return true;
-    }
-    /**
-     * Close a request whose proposals have all landed, and delete its branch.
-     *
-     * Rejecting rather than merging is the point: the grants are already on the
-     * default branch, so merging would replay a diff that is now empty of
-     * meaning while dragging along anything else the branch carries. The branch
-     * goes too — it exists only to hold a proposal that no longer exists.
-     *
-     * Best-effort by contract: this runs inside a listing, and a request that
-     * cannot be closed right now must not take the listing down with it. The
-     * next pass tries again.
-     */
-    async settle(cr, actor) {
-        const wsId = workspaceIdForBranch(DEFAULT_BRANCH);
-        try {
-            await this.workflow.rejectChangeRequest(cr.number, actor, cr.state, cr.authorId ?? null, cr.base, wsId);
-        }
-        catch (err) {
-            console.warn(`[groups] could not close settled join request #${cr.number}: ${err instanceof Error ? err.message : String(err)}`);
-            return;
-        }
-        try {
-            await this.workflow.deleteBranch(wsId, cr.branch, actor);
-        }
-        catch (err) {
-            // The request is closed either way; a leftover branch is cosmetic and
-            // the author can still delete it themselves.
-            console.warn(`[groups] closed join request #${cr.number} but could not delete "${cr.branch}": ${err instanceof Error ? err.message : String(err)}`);
-        }
-    }
-    /**
-     * The file at one branch, or null when it is absent/unreadable there.
-     *
-     * Every read runs against the DEFAULT branch's clone at `origin/<branch>`,
-     * so one workspace answers for every request and a join branch never needs
-     * a clone of its own. `readFileAtRef` takes a REPO-relative path (the KB
-     * dir is the repo root there).
-     */
-    async readAt(branch, repoRelPath) {
-        try {
-            return await this.workspaceService.readFileAtRef(workspaceIdForBranch(DEFAULT_BRANCH), `origin/${branch}`, repoRelPath);
-        }
-        catch {
-            return null;
-        }
-    }
-    /**
-     * Refresh remote-tracking refs before reading them. Throttled inside, and
-     * best-effort: a request pushed seconds ago is worth one fetch, but a fetch
-     * failure must degrade to "read what we have" rather than empty the list.
-     */
-    async refresh() {
-        await this.workspaceService
-            .ensureRemotesFetched(workspaceIdForBranch(DEFAULT_BRANCH))
-            .catch(() => undefined);
-    }
-}
-//# sourceMappingURL=join-requests.service.js.map

package/dist/modules/groups/join-requests.service.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"join-requests.service.js","sourceRoot":"","sources":["../../../src/modules/groups/join-requests.service.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,eAAe,GAIhB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,oBAAoB,EAAyB,MAAM,mCAAmC,CAAC;AAChG,OAAO,EAAE,gBAAgB,EAAqB,MAAM,qBAAqB,CAAC;AAY1E;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,OAAO,mBAAmB;IAEX;IACA;IAFnB,YACmB,gBAAkC,EAClC,QAA0B;QAD1B,qBAAgB,GAAhB,gBAAgB,CAAkB;QAClC,aAAQ,GAAR,QAAQ,CAAkB;IAC1C,CAAC;IAEJ;;;;;;;OAOG;IACH,KAAK,CAAC,IAAI,CACR,KAAa,EACb,MAAc,EACd,GAAoB,EACpB,KAAe;QAEf,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACrB,MAAM,UAAU,GAAG,GAAG,MAAM,YAAY,CAAC;QACzC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;QAC/D,MAAM,GAAG,GAAkB,EAAE,CAAC;QAC9B,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;YACrB,IAAI,EAAE,CAAC,KAAK,KAAK,MAAM,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC;gBAAE,SAAS;YACxE,MAAM,SAAS,GAAG,gBAAgB,CAChC,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,UAAU,CAAC,EACxC,QAAQ,EACR,UAAU,CACX,CAAC;YACF,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC3B,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;gBAC7B,SAAS;YACX,CAAC;YACD,GAAG,CAAC,IAAI,CAAC;gBACP,MAAM,EAAE,EAAE,CAAC,MAAM;gBACjB,MAAM,EAAE,EAAE,CAAC,MAAM;gBACjB,aAAa,EAAE,EAAE,CAAC,SAAS,EAAE,IAAI,IAAI,SAAS;gBAC9C,SAAS,EAAE,EAAE,CAAC,SAAS;gBACvB,SAAS;aACV,CAAC,CAAC;QACL,CAAC;QACD,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;IACpE,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,SAAS,CACb,KAAa,EACb,MAAc,EACd,EAAiB,EACjB,KAAe;QAEf,IAAI,EAAE,CAAC,KAAK,KAAK,MAAM,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAC5E,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACrB,MAAM,UAAU,GAAG,GAAG,MAAM,YAAY,CAAC;QACzC,MAAM,SAAS,GAAG,gBAAgB,CAChC,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,UAAU,CAAC,EACxC,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,UAAU,CAAC,EAC7C,UAAU,CACX,CAAC;QACF,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QACvC,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAC7B,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;;;;;;OAWG;IACK,KAAK,CAAC,MAAM,CAAC,EAAiB,EAAE,KAAe;QACrD,MAAM,IAAI,GAAG,oBAAoB,CAAC,cAAc,CAAC,CAAC;QAClD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CACrC,EAAE,CAAC,MAAM,EACT,KAAK,EACL,EAAE,CAAC,KAAK,EACR,EAAE,CAAC,QAAQ,IAAI,IAAI,EACnB,EAAE,CAAC,IAAI,EACP,IAAI,CACL,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CACV,kDAAkD,EAAE,CAAC,MAAM,KACzD,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,EAAE,CACH,CAAC;YACF,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC3D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,sEAAsE;YACtE,6CAA6C;YAC7C,OAAO,CAAC,IAAI,CACV,iCAAiC,EAAE,CAAC,MAAM,0BAA0B,EAAE,CAAC,MAAM,MAC3E,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,EAAE,CACH,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACK,KAAK,CAAC,MAAM,CAAC,MAAc,EAAE,WAAmB;QACtD,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,gBAAgB,CAAC,aAAa,CAC9C,oBAAoB,CAAC,cAAc,CAAC,EACpC,UAAU,MAAM,EAAE,EAClB,WAAW,CACZ,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,OAAO;QACnB,MAAM,IAAI,CAAC,gBAAgB;aACxB,oBAAoB,CAAC,oBAAoB,CAAC,cAAc,CAAC,CAAC;aAC1D,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC5B,CAAC;CACF"}

package/dist/modules/mcp/mcp-session-store.d.ts

@@ -1,74 +0,0 @@
-/**
- * In-memory mapping from MCP session id → { userId, tokenId }. Each entry
- * represents one MCP client connection's worth of state: the Bevel user the
- * Bearer token resolved to at `initialize`, and the connection-key id for
- * metering. Conversation continuity is the caller's own (a continuity-aware
- * tool like `ask` returns its `sessionId` in the result and the caller echoes
- * it back); thread/workspace bookkeeping lives on the REST tool surface.
- *
- * Eviction is lazy: each `get` / `touch` sweeps idle entries before the
- * lookup, and `put` enforces the size cap before insert. No background
- * timer — keeps the store cheap to construct and avoids leaking a setInterval
- * handle in tests.
- *
- * Single-replica only. If we add a second backend instance later, sessions
- * need to be persisted (see docs/mcp-remote-access.md → "Out of scope"). The
- * MCP protocol tolerates this — a 404 on an unknown session id is a defined
- * response, and clients re-initialize.
- */
-export interface McpSession {
-    sessionId: string;
-    userId: string;
-    /**
-     * The connection-key id this session authenticated with, or null when the
-     * session was opened with a browser JWT (no connection key). Captured at
-     * `initialize` so every `ask_bevel_agent` call in the session can be metered
-     * against that key's daily token cap.
-     */
-    tokenId: string | null;
-    createdAt: number;
-    lastTouchedAt: number;
-}
-export interface McpSessionStoreOptions {
-    /** Drop sessions idle for longer than this. Default: 4 hours. */
-    idleTtlMs?: number;
-    /** Hard cap on simultaneous live sessions. Oldest-touched evicted first. */
-    maxSessions?: number;
-    /** Override `Date.now` — injected only by tests. */
-    now?: () => number;
-}
-export declare class McpSessionStore {
-    private readonly sessions;
-    private readonly idleTtlMs;
-    private readonly maxSessions;
-    private readonly now;
-    private readonly evictListeners;
-    constructor(opts?: McpSessionStoreOptions);
-    /**
-     * Subscribe to eviction events. Returns an unsubscribe function so callers
-     * can clean up in test teardown. The route layer uses this to drop the
-     * transport-state entry in its `active` map and close the underlying SDK
-     * transport when the store decides a session has aged out.
-     */
-    onEvict(listener: (sessionId: string) => void): () => void;
-    /**
-     * Register a fresh MCP session. Caller supplies the id (generated by the
-     * SDK's transport). Evicts the oldest-touched session if the cap is hit
-     * — better than refusing the connection, since a wedged old session is
-     * the most likely cause of a full table.
-     */
-    create(sessionId: string, userId: string, tokenId?: string | null): McpSession;
-    /**
-     * Look up a session and bump its `lastTouchedAt`. Returns null when the
-     * session is unknown or has aged out. Sweep runs first so an aged entry
-     * is collected, not silently revived.
-     */
-    get(sessionId: string): McpSession | null;
-    delete(sessionId: string): void;
-    /** Visible size; useful for diagnostics. Does not sweep. */
-    size(): number;
-    private sweep;
-    private evictOldest;
-    private emitEviction;
-}
-//# sourceMappingURL=mcp-session-store.d.ts.map

package/dist/modules/mcp/mcp-session-store.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"mcp-session-store.d.ts","sourceRoot":"","sources":["../../../src/modules/mcp/mcp-session-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf;;;;;OAKG;IACH,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,sBAAsB;IACrC,iEAAiE;IACjE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,4EAA4E;IAC5E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,oDAAoD;IACpD,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAKD,qBAAa,eAAe;IAC1B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiC;IAC1D,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IASnC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA0C;gBAE7D,IAAI,GAAE,sBAA2B;IAM7C;;;;;OAKG;IACH,OAAO,CAAC,QAAQ,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,IAAI,GAAG,MAAM,IAAI;IAO1D;;;;;OAKG;IACH,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAE,MAAM,GAAG,IAAW,GAAG,UAAU;IAiBpF;;;;OAIG;IACH,GAAG,CAAC,SAAS,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI;IAQzC,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAI/B,4DAA4D;IAC5D,IAAI,IAAI,MAAM;IAId,OAAO,CAAC,KAAK;IAUb,OAAO,CAAC,WAAW;IAenB,OAAO,CAAC,YAAY;CAYrB"}

package/dist/modules/mcp/mcp-session-store.js

@@ -1,131 +0,0 @@
-/**
- * In-memory mapping from MCP session id → { userId, tokenId }. Each entry
- * represents one MCP client connection's worth of state: the Bevel user the
- * Bearer token resolved to at `initialize`, and the connection-key id for
- * metering. Conversation continuity is the caller's own (a continuity-aware
- * tool like `ask` returns its `sessionId` in the result and the caller echoes
- * it back); thread/workspace bookkeeping lives on the REST tool surface.
- *
- * Eviction is lazy: each `get` / `touch` sweeps idle entries before the
- * lookup, and `put` enforces the size cap before insert. No background
- * timer — keeps the store cheap to construct and avoids leaking a setInterval
- * handle in tests.
- *
- * Single-replica only. If we add a second backend instance later, sessions
- * need to be persisted (see docs/mcp-remote-access.md → "Out of scope"). The
- * MCP protocol tolerates this — a 404 on an unknown session id is a defined
- * response, and clients re-initialize.
- */
-const DEFAULT_IDLE_TTL_MS = 4 * 60 * 60 * 1000;
-const DEFAULT_MAX_SESSIONS = 5000;
-export class McpSessionStore {
-    sessions = new Map();
-    idleTtlMs;
-    maxSessions;
-    now;
-    // Subscribers notified whenever a session is dropped by the store itself
-    // (idle TTL sweep or size-cap eviction). NOT fired by explicit `delete()` —
-    // the caller of `delete` already knows the session is gone, and the route
-    // layer uses `delete` *because* it's already cleaning up.
-    //
-    // Callbacks are invoked synchronously; long-running cleanup (e.g.
-    // `transport.close()`) should be fire-and-forget so a slow listener can't
-    // block the next eviction.
-    evictListeners = new Set();
-    constructor(opts = {}) {
-        this.idleTtlMs = opts.idleTtlMs ?? DEFAULT_IDLE_TTL_MS;
-        this.maxSessions = opts.maxSessions ?? DEFAULT_MAX_SESSIONS;
-        this.now = opts.now ?? Date.now;
-    }
-    /**
-     * Subscribe to eviction events. Returns an unsubscribe function so callers
-     * can clean up in test teardown. The route layer uses this to drop the
-     * transport-state entry in its `active` map and close the underlying SDK
-     * transport when the store decides a session has aged out.
-     */
-    onEvict(listener) {
-        this.evictListeners.add(listener);
-        return () => {
-            this.evictListeners.delete(listener);
-        };
-    }
-    /**
-     * Register a fresh MCP session. Caller supplies the id (generated by the
-     * SDK's transport). Evicts the oldest-touched session if the cap is hit
-     * — better than refusing the connection, since a wedged old session is
-     * the most likely cause of a full table.
-     */
-    create(sessionId, userId, tokenId = null) {
-        this.sweep();
-        if (this.sessions.size >= this.maxSessions) {
-            this.evictOldest();
-        }
-        const now = this.now();
-        const session = {
-            sessionId,
-            userId,
-            tokenId,
-            createdAt: now,
-            lastTouchedAt: now,
-        };
-        this.sessions.set(sessionId, session);
-        return session;
-    }
-    /**
-     * Look up a session and bump its `lastTouchedAt`. Returns null when the
-     * session is unknown or has aged out. Sweep runs first so an aged entry
-     * is collected, not silently revived.
-     */
-    get(sessionId) {
-        this.sweep();
-        const session = this.sessions.get(sessionId);
-        if (!session)
-            return null;
-        session.lastTouchedAt = this.now();
-        return session;
-    }
-    delete(sessionId) {
-        this.sessions.delete(sessionId);
-    }
-    /** Visible size; useful for diagnostics. Does not sweep. */
-    size() {
-        return this.sessions.size;
-    }
-    sweep() {
-        const cutoff = this.now() - this.idleTtlMs;
-        for (const [id, s] of this.sessions) {
-            if (s.lastTouchedAt < cutoff) {
-                this.sessions.delete(id);
-                this.emitEviction(id);
-            }
-        }
-    }
-    evictOldest() {
-        let oldestId = null;
-        let oldestTouched = Infinity;
-        for (const [id, s] of this.sessions) {
-            if (s.lastTouchedAt < oldestTouched) {
-                oldestTouched = s.lastTouchedAt;
-                oldestId = id;
-            }
-        }
-        if (oldestId) {
-            this.sessions.delete(oldestId);
-            this.emitEviction(oldestId);
-        }
-    }
-    emitEviction(sessionId) {
-        for (const listener of this.evictListeners) {
-            try {
-                listener(sessionId);
-            }
-            catch (err) {
-                // A misbehaving listener must not stop the sweep from finishing —
-                // otherwise one bad subscriber would block the rest of the eviction
-                // pass and leak more sessions.
-                console.warn('[mcp-session-store] eviction listener threw:', err);
-            }
-        }
-    }
-}
-//# sourceMappingURL=mcp-session-store.js.map

package/dist/modules/mcp/mcp-session-store.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"mcp-session-store.js","sourceRoot":"","sources":["../../../src/modules/mcp/mcp-session-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAyBH,MAAM,mBAAmB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAC/C,MAAM,oBAAoB,GAAG,IAAI,CAAC;AAElC,MAAM,OAAO,eAAe;IACT,QAAQ,GAAG,IAAI,GAAG,EAAsB,CAAC;IACzC,SAAS,CAAS;IAClB,WAAW,CAAS;IACpB,GAAG,CAAe;IACnC,yEAAyE;IACzE,4EAA4E;IAC5E,0EAA0E;IAC1E,0DAA0D;IAC1D,EAAE;IACF,kEAAkE;IAClE,0EAA0E;IAC1E,2BAA2B;IACV,cAAc,GAAG,IAAI,GAAG,EAA+B,CAAC;IAEzE,YAAY,OAA+B,EAAE;QAC3C,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,mBAAmB,CAAC;QACvD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,oBAAoB,CAAC;QAC5D,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IAClC,CAAC;IAED;;;;;OAKG;IACH,OAAO,CAAC,QAAqC;QAC3C,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAClC,OAAO,GAAG,EAAE;YACV,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACvC,CAAC,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,SAAiB,EAAE,MAAc,EAAE,UAAyB,IAAI;QACrE,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YAC3C,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,OAAO,GAAe;YAC1B,SAAS;YACT,MAAM;YACN,OAAO;YACP,SAAS,EAAE,GAAG;YACd,aAAa,EAAE,GAAG;SACnB,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACtC,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;;OAIG;IACH,GAAG,CAAC,SAAiB;QACnB,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAC1B,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACnC,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,MAAM,CAAC,SAAiB;QACtB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAClC,CAAC;IAED,4DAA4D;IAC5D,IAAI;QACF,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;IAC5B,CAAC;IAEO,KAAK;QACX,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC;QAC3C,KAAK,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACpC,IAAI,CAAC,CAAC,aAAa,GAAG,MAAM,EAAE,CAAC;gBAC7B,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACzB,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;YACxB,CAAC;QACH,CAAC;IACH,CAAC;IAEO,WAAW;QACjB,IAAI,QAAQ,GAAkB,IAAI,CAAC;QACnC,IAAI,aAAa,GAAG,QAAQ,CAAC;QAC7B,KAAK,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACpC,IAAI,CAAC,CAAC,aAAa,GAAG,aAAa,EAAE,CAAC;gBACpC,aAAa,GAAG,CAAC,CAAC,aAAa,CAAC;gBAChC,QAAQ,GAAG,EAAE,CAAC;YAChB,CAAC;QACH,CAAC;QACD,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC/B,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IAEO,YAAY,CAAC,SAAiB;QACpC,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YAC3C,IAAI,CAAC;gBACH,QAAQ,CAAC,SAAS,CAAC,CAAC;YACtB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,kEAAkE;gBAClE,oEAAoE;gBACpE,+BAA+B;gBAC/B,OAAO,CAAC,IAAI,CAAC,8CAA8C,EAAE,GAAG,CAAC,CAAC;YACpE,CAAC;QACH,CAAC;IACH,CAAC;CACF"}

package/dist/modules/workflow/file-change-notifier.d.ts

@@ -1,38 +0,0 @@
-/**
- * One in-process notification fired AFTER a set of file changes is committed +
- * pushed (post-lock-release), so backend services can react to KB writes without
- * the per-file TTL wait. Distinct from the SSE `WorkflowEventBus`, which fans
- * scoped events to browser sessions; this is an unscoped, server-side domain hook.
- *
- * BATCHED by design: a single-file save emits `paths: [p]`, a batch write
- * (`LockingFilesystem.writeFiles`, e.g. a bulk node upload) emits ONE event with
- * every path it committed. Subscribers that do expensive per-event work (the
- * id-repair rebuilds the id index) handle a whole batch off one rebuild instead
- * of N back-to-back ones.
- *
- * Emitted from the two post-commit chokepoints (`WorkflowService.runPendingCommit`
- * for single-file writes, `LockingFilesystem.writeFiles` for batches).
- *
- * Every listener is invoked inside try/catch — a throwing subscriber must never
- * fail the commit that triggered it (mirrors the SSE bus's per-subscriber
- * isolation). Firing is fire-and-forget; a listener that needs to write files
- * (id-repair) does so on its own, after the locks have already been released.
- */
-import type { AuthUser } from '@bevel-software/platform-shared';
-export interface FilesChange {
-    workspaceId: string;
-    branch: string;
-    /** Workspace-relative paths committed in this change (≥1; sorted for batches). */
-    paths: string[];
-    /** Who the change was committed as — a reacting write (id-repair) acts as the same user. */
-    byUser: AuthUser;
-}
-export type FilesChangedListener = (change: FilesChange) => void;
-export declare class FileChangeNotifier {
-    private readonly listeners;
-    /** Register a listener. Returns an unsubscribe fn. */
-    onFilesChanged(listener: FilesChangedListener): () => void;
-    /** Fan a change out to every listener; isolate + log each so one can't break the commit. */
-    emit(change: FilesChange): void;
-}
-//# sourceMappingURL=file-change-notifier.d.ts.map

package/dist/modules/workflow/file-change-notifier.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"file-change-notifier.d.ts","sourceRoot":"","sources":["../../../src/modules/workflow/file-change-notifier.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,iCAAiC,CAAC;AAEhE,MAAM,WAAW,WAAW;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,kFAAkF;IAClF,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,4FAA4F;IAC5F,MAAM,EAAE,QAAQ,CAAC;CAClB;AAED,MAAM,MAAM,oBAAoB,GAAG,CAAC,MAAM,EAAE,WAAW,KAAK,IAAI,CAAC;AAEjE,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAmC;IAE7D,sDAAsD;IACtD,cAAc,CAAC,QAAQ,EAAE,oBAAoB,GAAG,MAAM,IAAI;IAK1D,4FAA4F;IAC5F,IAAI,CAAC,MAAM,EAAE,WAAW,GAAG,IAAI;CAUhC"}