@braidhq/server 0.0.1 → 0.2.0

package/dist/infrastructure/hitl/FsClarificationRepository.js

@@ -0,0 +1,39 @@
+import { Clarification, paginate } from '@braidhq/core';
+import { Clarification as ClarificationSchema } from '@braidhq/schema';
+import { clarificationDir, CLARIFY_STATUSES } from '../_shared/paths.js';
+import { StatusedJsonStore } from './StatusedJsonStore.js';
+export class FsClarificationRepository {
+    base;
+    constructor(options) {
+        this.base = new StatusedJsonStore({
+            entityName: 'Clarification',
+            statuses: CLARIFY_STATUSES,
+            dirFor: clarificationDir,
+            parse: raw => new Clarification(ClarificationSchema.parse(raw)),
+            serialize: entity => entity.toData(),
+            idOf: entity => entity.id,
+            statusOf: entity => entity.status,
+            workspaceIdOf: entity => entity.workspaceId,
+        }, options.workspaceRoots);
+    }
+    async list(filter) {
+        let tickets = await this.base.list({
+            ...(filter?.workspaceId !== undefined ? { workspaceId: filter.workspaceId } : {}),
+            ...(filter?.statuses !== undefined ? { statuses: filter.statuses } : {}),
+        });
+        // Pending tickets are personal, only the owner sees them.
+        // Answered, applied, and skipped tickets stay workspace-shared.
+        if (filter?.viewerId !== undefined) {
+            const viewerId = filter.viewerId;
+            tickets = tickets.filter(ticket => ticket.status !== 'pending' || ticket.owner === 'system' || ticket.owner === viewerId);
+        }
+        return paginate(tickets, filter?.limit, filter?.offset);
+    }
+    load(clarificationId) {
+        return this.base.load(clarificationId);
+    }
+    save(ticket) {
+        return this.base.save(ticket);
+    }
+}
+//# sourceMappingURL=FsClarificationRepository.js.map

package/dist/infrastructure/hitl/FsClarificationRepository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"FsClarificationRepository.js","sourceRoot":"","sources":["../../../src/infrastructure/hitl/FsClarificationRepository.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,aAAa,EAAgC,QAAQ,EAAE,MAAM,eAAe,CAAA;AACrF,OAAO,EAAE,aAAa,IAAI,mBAAmB,EAAE,MAAM,iBAAiB,CAAA;AACtE,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAA;AACxE,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAA;AAM1D,MAAM,OAAO,yBAAyB;IACnB,IAAI,CAAoF;IAEzG,YAAY,OAAyC;QACnD,IAAI,CAAC,IAAI,GAAG,IAAI,iBAAiB,CAC/B;YACE,UAAU,EAAE,eAAe;YAC3B,QAAQ,EAAE,gBAAgB;YAC1B,MAAM,EAAE,gBAAgB;YACxB,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC,IAAI,aAAa,CAAC,mBAAmB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC/D,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE;YACpC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE;YACzB,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM;YACjC,aAAa,EAAE,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,WAAW;SAC5C,EACD,OAAO,CAAC,cAAc,CACvB,CAAA;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,MAA4B;QACrC,IAAI,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;YACjC,GAAG,CAAC,MAAM,EAAE,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjF,GAAG,CAAC,MAAM,EAAE,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzE,CAAC,CAAA;QACF,0DAA0D;QAC1D,gEAAgE;QAChE,IAAI,MAAM,EAAE,QAAQ,KAAK,SAAS,EAAE,CAAC;YACnC,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAA;YAChC,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAChC,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,KAAK,QAAQ,CACtF,CAAA;QACH,CAAC;QACD,OAAO,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAA;IACzD,CAAC;IAED,IAAI,CAAC,eAAgC;QACnC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;IACxC,CAAC;IAED,IAAI,CAAC,MAAqB;QACxB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IAC/B,CAAC;CACF"}

package/dist/infrastructure/hitl/FsProposalRepository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"FsProposalRepository.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/hitl/FsProposalRepository.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,cAAc,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA;AAC5F,OAAO,EAAY,QAAQ,EAAE,KAAK,kBAAkB,EAAE,MAAM,eAAe,CAAA;AAK3E,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,cAAc,EAAE,MAAM,OAAO,CAAC,WAAW,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC,CAAA;CAC/E;AAED,qBAAa,oBAAqB,YAAW,kBAAkB;IAC7D,OAAO,CAAC,QAAQ,CAAC,IAAI,CAA2E;gBAEpF,OAAO,EAAE,2BAA2B;IAgB1C,IAAI,CAAC,MAAM,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;IAqBxD,IAAI,CAAC,UAAU,EAAE,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC;IAI/C,IAAI,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IAIvC,MAAM,CAAC,UAAU,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;CAG9C"}

package/dist/infrastructure/{fs → hitl}/FsProposalRepository.js

@@ -1,11 +1,11 @@
 import { paginate, Proposal } from '@braidhq/core';
 import { Proposal as ProposalSchema } from '@braidhq/schema';
-import { FsStatusedJsonRepository } from './FsStatusedJsonRepository.js';
-import { PROPOSAL_STATUSES, proposalsDir } from './paths.js';
+import { PROPOSAL_STATUSES, proposalsDir } from '../_shared/paths.js';
+import { StatusedJsonStore } from './StatusedJsonStore.js';
 export class FsProposalRepository {
     base;
     constructor(options) {
-        this.base = new FsStatusedJsonRepository({
+        this.base = new StatusedJsonStore({
             entityName: 'Proposal',
             statuses: PROPOSAL_STATUSES,
             dirFor: proposalsDir,
@@ -25,6 +25,13 @@ export class FsProposalRepository {
             const skills = filter.generatedBy;
             proposals = proposals.filter(proposal => skills.includes(proposal.generatedBy));
         }
+        // Pending proposals are personal, only the owner sees them.
+        // Applied and rejected stay as workspace-shared audit history.
+        // Absent viewerId means no filter, for Owner Show All and legacy callers.
+        if (filter?.viewerId !== undefined) {
+            const viewerId = filter.viewerId;
+            proposals = proposals.filter(proposal => proposal.status !== 'pending' || proposal.owner === 'system' || proposal.owner === viewerId);
+        }
         return paginate(proposals, filter?.limit, filter?.offset);
     }
     load(proposalId) {

package/dist/infrastructure/hitl/FsProposalRepository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"FsProposalRepository.js","sourceRoot":"","sources":["../../../src/infrastructure/hitl/FsProposalRepository.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAA2B,MAAM,eAAe,CAAA;AAC3E,OAAO,EAAE,QAAQ,IAAI,cAAc,EAAE,MAAM,iBAAiB,CAAA;AAC5D,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AACrE,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAA;AAM1D,MAAM,OAAO,oBAAoB;IACd,IAAI,CAA2E;IAEhG,YAAY,OAAoC;QAC9C,IAAI,CAAC,IAAI,GAAG,IAAI,iBAAiB,CAC/B;YACE,UAAU,EAAE,UAAU;YACtB,QAAQ,EAAE,iBAAiB;YAC3B,MAAM,EAAE,YAAY;YACpB,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC,IAAI,QAAQ,CAAC,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACrD,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE;YACpC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE;YACzB,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM;YACjC,aAAa,EAAE,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,WAAW;SAC5C,EACD,OAAO,CAAC,cAAc,CACvB,CAAA;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,MAAuB;QAChC,IAAI,SAAS,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;YACnC,GAAG,CAAC,MAAM,EAAE,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjF,GAAG,CAAC,MAAM,EAAE,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzE,CAAC,CAAA;QACF,IAAI,MAAM,EAAE,WAAW,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzD,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAA;YACjC,SAAS,GAAG,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAA;QACjF,CAAC;QACD,4DAA4D;QAC5D,+DAA+D;QAC/D,0EAA0E;QAC1E,IAAI,MAAM,EAAE,QAAQ,KAAK,SAAS,EAAE,CAAC;YACnC,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAA;YAChC,SAAS,GAAG,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CACtC,QAAQ,CAAC,MAAM,KAAK,SAAS,IAAI,QAAQ,CAAC,KAAK,KAAK,QAAQ,IAAI,QAAQ,CAAC,KAAK,KAAK,QAAQ,CAC5F,CAAA;QACH,CAAC;QACD,OAAO,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAA;IAC3D,CAAC;IAED,IAAI,CAAC,UAAsB;QACzB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IACnC,CAAC;IAED,IAAI,CAAC,QAAkB;QACrB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IACjC,CAAC;IAED,MAAM,CAAC,UAAsB;QAC3B,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;IACrC,CAAC;CACF"}

package/dist/infrastructure/hitl/StatusedJsonStore.d.ts

@@ -0,0 +1,30 @@
+import type { AbsolutePath, WorkspaceId } from '@braidhq/schema';
+export interface StatusedJsonStoreConfig<TEntity, TStatus extends string, TId extends string> {
+    readonly entityName: string;
+    readonly statuses: readonly TStatus[];
+    readonly idOf: (entity: TEntity) => TId;
+    readonly statusOf: (entity: TEntity) => TStatus;
+    readonly workspaceIdOf: (entity: TEntity) => WorkspaceId;
+    readonly dirFor: (workspaceRoot: AbsolutePath, status: TStatus) => string;
+    readonly parse: (raw: unknown) => TEntity;
+    readonly serialize: (entity: TEntity) => unknown;
+}
+export interface StatusedJsonListFilter<TStatus extends string> {
+    readonly workspaceId?: WorkspaceId;
+    readonly statuses?: readonly TStatus[];
+}
+export declare class StatusedJsonStore<TEntity, TStatus extends string, TId extends string> {
+    private readonly config;
+    private readonly workspaceRoots;
+    constructor(config: StatusedJsonStoreConfig<TEntity, TStatus, TId>, workspaceRoots: () => Promise<ReadonlyMap<WorkspaceId, AbsolutePath>>);
+    list(filter?: StatusedJsonListFilter<TStatus>): Promise<TEntity[]>;
+    load(id: TId): Promise<TEntity>;
+    save(entity: TEntity): Promise<void>;
+    remove(id: TId): Promise<void>;
+    locate(id: TId): Promise<{
+        readonly path: string;
+        readonly status: TStatus;
+    } | undefined>;
+    private candidateRoots;
+}
+//# sourceMappingURL=StatusedJsonStore.d.ts.map

package/dist/infrastructure/hitl/StatusedJsonStore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"StatusedJsonStore.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/hitl/StatusedJsonStore.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA;AAMhE,MAAM,WAAW,uBAAuB,CAAC,OAAO,EAAE,OAAO,SAAS,MAAM,EAAE,GAAG,SAAS,MAAM;IAI1F,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,QAAQ,EAAE,SAAS,OAAO,EAAE,CAAA;IAGrC,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,GAAG,CAAA;IACvC,QAAQ,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,OAAO,CAAA;IAC/C,QAAQ,CAAC,aAAa,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,WAAW,CAAA;IAExD,QAAQ,CAAC,MAAM,EAAE,CAAC,aAAa,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,KAAK,MAAM,CAAA;IAIzE,QAAQ,CAAC,KAAK,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAA;IACzC,QAAQ,CAAC,SAAS,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,OAAO,CAAA;CACjD;AAED,MAAM,WAAW,sBAAsB,CAAC,OAAO,SAAS,MAAM;IAC5D,QAAQ,CAAC,WAAW,CAAC,EAAE,WAAW,CAAA;IAClC,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,OAAO,EAAE,CAAA;CACvC;AAED,qBAAa,iBAAiB,CAAC,OAAO,EAAE,OAAO,SAAS,MAAM,EAAE,GAAG,SAAS,MAAM;IAE9E,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,cAAc;gBADd,MAAM,EAAE,uBAAuB,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,EACtD,cAAc,EAAE,MAAM,OAAO,CAAC,WAAW,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;IAGlF,IAAI,CAAC,MAAM,CAAC,EAAE,sBAAsB,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;IAiBlE,IAAI,CAAC,EAAE,EAAE,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC;IAQ/B,IAAI,CAAC,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAepC,MAAM,CAAC,EAAE,EAAE,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC;IAO9B,MAAM,CAAC,EAAE,EAAE,GAAG,GAAG,OAAO,CAAC;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAA;KAAE,GAAG,SAAS,CAAC;YAkBjF,cAAc;CAS7B"}

package/dist/infrastructure/{fs/FsStatusedJsonRepository.js → hitl/StatusedJsonStore.js}

@@ -1,8 +1,8 @@
 import { rm } from 'node:fs/promises';
 import { join } from 'node:path';
 import { NotFoundError } from '@braidhq/core';
-import { listJsonFiles, moveFile, readJsonFile, writeJsonFile } from './jsonFileStore.js';
-export class FsStatusedJsonRepository {
+import { listJsonFiles, moveFile, readJsonFile, writeJsonFile } from '../_shared/jsonFileStore.js';
+export class StatusedJsonStore {
     config;
     workspaceRoots;
     constructor(config, workspaceRoots) {
@@ -76,4 +76,4 @@ export class FsStatusedJsonRepository {
         return root ? new Map([[workspaceId, root]]) : new Map();
     }
 }
-//# sourceMappingURL=FsStatusedJsonRepository.js.map
+//# sourceMappingURL=StatusedJsonStore.js.map

package/dist/infrastructure/hitl/StatusedJsonStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"StatusedJsonStore.js","sourceRoot":"","sources":["../../../src/infrastructure/hitl/StatusedJsonStore.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAA;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAC7C,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAA;AA2BlG,MAAM,OAAO,iBAAiB;IAET;IACA;IAFnB,YACmB,MAAsD,EACtD,cAAqE;QADrE,WAAM,GAAN,MAAM,CAAgD;QACtD,mBAAc,GAAd,cAAc,CAAuD;IACrF,CAAC;IAEJ,KAAK,CAAC,IAAI,CAAC,MAAwC;QACjD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;QAC5D,MAAM,QAAQ,GAAG,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAA;QAElF,MAAM,QAAQ,GAAc,EAAE,CAAA;QAC9B,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YAClC,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;gBAC9B,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAA;gBACnE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;oBACzB,MAAM,IAAI,GAAG,MAAM,YAAY,CAAU,IAAI,CAAC,CAAA;oBAC9C,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA;gBACxC,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,QAAQ,CAAA;IACjB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAO;QAChB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QACnC,IAAI,CAAC,KAAK;YACR,MAAM,IAAI,aAAa,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,KAAK,EAAE,aAAa,CAAC,CAAA;QACxE,MAAM,IAAI,GAAG,MAAM,YAAY,CAAU,KAAK,CAAC,IAAI,CAAC,CAAA;QACpD,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAChC,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,MAAe;QACxB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAA;QACzC,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAA;QACrD,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;QACnC,IAAI,CAAC,IAAI;YACP,MAAM,IAAI,aAAa,CAAC,cAAc,WAAW,kBAAkB,CAAC,CAAA;QACtE,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACnC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;QAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,CAAA;QACvE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QACtC,IAAI,QAAQ,IAAI,QAAQ,CAAC,IAAI,KAAK,UAAU;YAC1C,MAAM,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC,CAAA;QAC3C,MAAM,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAA;IAChE,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAO;QAClB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QACnC,IAAI,CAAC,KAAK;YACR,MAAM,IAAI,aAAa,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,KAAK,EAAE,aAAa,CAAC,CAAA;QACxE,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACtB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAO;QAClB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAA;QACzC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YAClC,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;gBAC1C,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,CAAA;gBAC1E,IAAI,CAAC;oBACH,MAAM,YAAY,CAAC,aAAa,CAAC,CAAA;oBACjC,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,CAAA;gBACxC,CAAC;gBACD,OAAO,KAAK,EAAE,CAAC;oBACb,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;wBACpD,MAAM,KAAK,CAAA;gBACf,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,SAAS,CAAA;IAClB,CAAC;IAEO,KAAK,CAAC,cAAc,CAC1B,WAAoC;QAEpC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAA;QACzC,IAAI,CAAC,WAAW;YACd,OAAO,KAAK,CAAA;QACd,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;QACnC,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,CAAA;IAC1D,CAAC;CACF"}

package/dist/infrastructure/model/FsModelSerializer.d.ts

@@ -0,0 +1,96 @@
+import type { ModelSerializer, Workspace } from '@braidhq/core';
+import type { ModelSnapshot } from '@braidhq/schema';
+import { z } from 'zod';
+export declare const MODEL_JSON_VERSION = 1;
+export declare const ModelJsonFile: z.ZodObject<{
+    version: z.ZodNumber;
+    nodes: z.ZodArray<z.ZodObject<{
+        id: z.core.$ZodBranded<z.ZodString, "NodeId", "out">;
+        type: z.core.$ZodBranded<z.ZodString, "NodeTypeId", "out">;
+        name: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
+        status: z.ZodEnum<{
+            completed: "completed";
+            draft: "draft";
+            unclear: "unclear";
+            deprecated: "deprecated";
+        }>;
+        metadata: z.ZodObject<{
+            intentMissing: z.ZodOptional<z.ZodBoolean>;
+            intentConflict: z.ZodOptional<z.ZodBoolean>;
+            implementationMissing: z.ZodOptional<z.ZodBoolean>;
+            sourceReferences: z.ZodDefault<z.ZodArray<z.ZodObject<{
+                sourceId: z.core.$ZodBranded<z.ZodString, "SourceId", "out">;
+                location: z.ZodObject<{
+                    uri: z.ZodString;
+                    startLine: z.ZodOptional<z.ZodNumber>;
+                    endLine: z.ZodOptional<z.ZodNumber>;
+                    anchor: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>;
+                snippet: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>>>;
+            lastTouchedBy: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "SkillId", "out">>;
+            externalReferences: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                kind: z.core.$ZodBranded<z.ZodString, "ExternalReferenceKind", "out">;
+                url: z.ZodString;
+                label: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>>>;
+            driftIssues: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                id: z.core.$ZodBranded<z.ZodString, "DriftIssueId", "out">;
+                description: z.ZodString;
+                severity: z.ZodEnum<{
+                    error: "error";
+                    warning: "warning";
+                    info: "info";
+                }>;
+                sourceReferences: z.ZodArray<z.ZodObject<{
+                    sourceId: z.core.$ZodBranded<z.ZodString, "SourceId", "out">;
+                    location: z.ZodObject<{
+                        uri: z.ZodString;
+                        startLine: z.ZodOptional<z.ZodNumber>;
+                        endLine: z.ZodOptional<z.ZodNumber>;
+                        anchor: z.ZodOptional<z.ZodString>;
+                    }, z.core.$strip>;
+                    snippet: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>>;
+                raisedAt: z.ZodString;
+            }, z.core.$strip>>>;
+            acknowledgedDrifts: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        }, z.core.$strip>;
+        embedding: z.ZodOptional<z.ZodObject<{
+            vector: z.ZodArray<z.ZodNumber>;
+            modelId: z.ZodString;
+            createdAt: z.ZodString;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+    edges: z.ZodArray<z.ZodObject<{
+        id: z.core.$ZodBranded<z.ZodString, "EdgeId", "out">;
+        type: z.core.$ZodBranded<z.ZodString, "EdgeTypeId", "out">;
+        fromNodeId: z.core.$ZodBranded<z.ZodString, "NodeId", "out">;
+        toNodeId: z.core.$ZodBranded<z.ZodString, "NodeId", "out">;
+        metadata: z.ZodObject<{
+            sourceReferences: z.ZodDefault<z.ZodArray<z.ZodObject<{
+                sourceId: z.core.$ZodBranded<z.ZodString, "SourceId", "out">;
+                location: z.ZodObject<{
+                    uri: z.ZodString;
+                    startLine: z.ZodOptional<z.ZodNumber>;
+                    endLine: z.ZodOptional<z.ZodNumber>;
+                    anchor: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>;
+                snippet: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>>>;
+            lastTouchedBy: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "SkillId", "out">>;
+            externalReferences: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                kind: z.core.$ZodBranded<z.ZodString, "ExternalReferenceKind", "out">;
+                url: z.ZodString;
+                label: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>>>;
+        }, z.core.$strip>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export declare class FsModelSerializer implements ModelSerializer {
+    write(workspace: Workspace, snapshot: ModelSnapshot): Promise<void>;
+    read(workspace: Workspace): Promise<ModelSnapshot | null>;
+    exists(workspace: Workspace): Promise<boolean>;
+}
+//# sourceMappingURL=FsModelSerializer.d.ts.map

package/dist/infrastructure/model/FsModelSerializer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"FsModelSerializer.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/model/FsModelSerializer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,eAAe,CAAA;AAC/D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AAIpD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAGvB,eAAO,MAAM,kBAAkB,IAAI,CAAA;AAEnC,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAIxB,CAAA;AAEF,qBAAa,iBAAkB,YAAW,eAAe;IACjD,KAAK,CAAC,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IAenE,IAAI,CAAC,SAAS,EAAE,SAAS,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;IAmBzD,MAAM,CAAC,SAAS,EAAE,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC;CASrD"}

package/dist/infrastructure/model/FsModelSerializer.js

@@ -0,0 +1,60 @@
+import { mkdir, readFile, rename, writeFile } from 'node:fs/promises';
+import process from 'node:process';
+import { GraphEdge, GraphNode } from '@braidhq/schema';
+import { z } from 'zod';
+import { graphJsonPath, workspaceArtifactsDir } from '../_shared/paths.js';
+export const MODEL_JSON_VERSION = 1;
+export const ModelJsonFile = z.object({
+    version: z.number().int(),
+    nodes: z.array(GraphNode),
+    edges: z.array(GraphEdge),
+});
+export class FsModelSerializer {
+    async write(workspace, snapshot) {
+        const path = graphJsonPath(workspace.rootPath);
+        await mkdir(workspaceArtifactsDir(workspace.rootPath), { recursive: true });
+        const payload = {
+            version: MODEL_JSON_VERSION,
+            nodes: [...snapshot.nodes].sort(byId),
+            edges: [...snapshot.edges].sort(byId),
+        };
+        // Atomic write. A crashed server must not leave a half-file behind,
+        // one that would mis-hydrate Kùzu on the next restart.
+        const tmp = `${path}.tmp-${process.pid}-${Date.now()}`;
+        await writeFile(tmp, `${JSON.stringify(payload, null, 2)}\n`, 'utf-8');
+        await rename(tmp, path);
+    }
+    async read(workspace) {
+        let raw;
+        try {
+            raw = await readFile(graphJsonPath(workspace.rootPath), 'utf-8');
+        }
+        catch (error) {
+            if (error.code === 'ENOENT')
+                return null;
+            throw error;
+        }
+        const parsed = ModelJsonFile.parse(JSON.parse(raw));
+        if (parsed.version !== MODEL_JSON_VERSION) {
+            throw new Error(`model.json version mismatch in ${workspace.rootPath}: expected ${MODEL_JSON_VERSION}, got ${parsed.version}`);
+        }
+        return { nodes: parsed.nodes, edges: parsed.edges };
+    }
+    async exists(workspace) {
+        try {
+            await readFile(graphJsonPath(workspace.rootPath), 'utf-8');
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
+}
+function byId(a, b) {
+    if (a.id < b.id)
+        return -1;
+    if (a.id > b.id)
+        return 1;
+    return 0;
+}
+//# sourceMappingURL=FsModelSerializer.js.map

package/dist/infrastructure/model/FsModelSerializer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"FsModelSerializer.js","sourceRoot":"","sources":["../../../src/infrastructure/model/FsModelSerializer.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AACrE,OAAO,OAAO,MAAM,cAAc,CAAA;AAClC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AACtD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAAE,aAAa,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAA;AAE1E,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAA;AAEnC,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACzB,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC;IACzB,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC;CAC1B,CAAC,CAAA;AAEF,MAAM,OAAO,iBAAiB;IAC5B,KAAK,CAAC,KAAK,CAAC,SAAoB,EAAE,QAAuB;QACvD,MAAM,IAAI,GAAG,aAAa,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAA;QAC9C,MAAM,KAAK,CAAC,qBAAqB,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAC3E,MAAM,OAAO,GAAG;YACd,OAAO,EAAE,kBAAkB;YAC3B,KAAK,EAAE,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YACrC,KAAK,EAAE,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;SACtC,CAAA;QACD,oEAAoE;QACpE,uDAAuD;QACvD,MAAM,GAAG,GAAG,GAAG,IAAI,QAAQ,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAA;QACtD,MAAM,SAAS,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;QACtE,MAAM,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;IACzB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,SAAoB;QAC7B,IAAI,GAAW,CAAA;QACf,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,QAAQ,CAAC,aAAa,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,CAAA;QAClE,CAAC;QACD,OAAO,KAAK,EAAE,CAAC;YACb,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBACpD,OAAO,IAAI,CAAA;YACb,MAAM,KAAK,CAAA;QACb,CAAC;QACD,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAA;QACnD,IAAI,MAAM,CAAC,OAAO,KAAK,kBAAkB,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CACb,kCAAkC,SAAS,CAAC,QAAQ,cAAc,kBAAkB,SAAS,MAAM,CAAC,OAAO,EAAE,CAC9G,CAAA;QACH,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAA;IACrD,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,SAAoB;QAC/B,IAAI,CAAC;YACH,MAAM,QAAQ,CAAC,aAAa,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,CAAA;YAC1D,OAAO,IAAI,CAAA;QACb,CAAC;QACD,MAAM,CAAC;YACL,OAAO,KAAK,CAAA;QACd,CAAC;IACH,CAAC;CACF;AAED,SAAS,IAAI,CAA2B,CAAI,EAAE,CAAI;IAChD,IAAI,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE;QACb,OAAO,CAAC,CAAC,CAAA;IACX,IAAI,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE;QACb,OAAO,CAAC,CAAA;IACV,OAAO,CAAC,CAAA;AACV,CAAC"}

package/dist/infrastructure/oauth/GoogleOAuth.d.ts

@@ -1,17 +1,22 @@
+/**
+ * Profile fields Braid needs after Google authn.
+ * `sub` is the stable Google account id, used as the join key into `users.json`.
+ */
+export interface GoogleProfile {
+    readonly sub: string;
+    readonly email: string;
+    readonly displayName: string;
+    readonly emailVerified?: boolean;
+}
 export interface GoogleOAuthConfig {
-    /** OAuth client id from the user's GCP project. */
     readonly clientId: string;
-    /** OAuth client secret. */
     readonly clientSecret: string;
-    /** Absolute redirect URI registered in the GCP OAuth client. */
     readonly redirectUri: string;
+    readonly loginRedirectUri?: string;
 }
 export interface AuthorizationUrlInput {
-    /** OAuth scope(s) requested. Braid passes Drive read-only. */
     readonly scopes: readonly string[];
-    /** State token (CSRF + flow-restore). */
     readonly state: string;
-    /** PKCE verifier; the URL embeds its SHA-256 challenge. */
     readonly codeVerifier: string;
 }
 export interface TokenSet {
@@ -26,26 +31,50 @@ export interface RefreshedAccessToken {
     readonly expiresAt: string;
 }
 /**
- * Minimal Google OAuth 2.0 client for installed-app / web flow.
- *
- * Why not `openid-client` or `google-auth-library`: we only need 4 calls
- * (build URL, exchange code, refresh, revoke); avoiding a heavyweight
- * dependency keeps the server's install footprint small and the auth
- * surface auditable.
+ * Minimal Google OAuth 2.0 client for the installed-app or web flow.
+ * We skip `openid-client` and `google-auth-library`,
+ * because only four calls are needed (build URL, exchange code, refresh, revoke).
+ * Avoiding a heavyweight dependency keeps the server's install footprint small,
+ * and the auth surface auditable.
  */
 export declare class GoogleOAuth {
     private readonly config;
     constructor(config: GoogleOAuthConfig);
     /**
      * Build the URL the user's browser is sent to. `state` and `codeVerifier`
-     * MUST be unique per flow; the caller stores them in pending-state until
-     * the callback arrives.
+     * MUST be unique per flow,
+     * the caller stores them in pending-state until the callback arrives.
      */
     buildAuthorizationUrl(input: AuthorizationUrlInput): string;
     exchangeCode(input: {
         code: string;
         codeVerifier: string;
     }): Promise<TokenSet>;
+    /**
+     * Login flow URL. Same client and redirect as the Drive flow,
+     * but with `openid email profile` scopes and no `prompt=consent`.
+     * Google suppresses the consent screen when the user has already approved those scopes,
+     * which is what login wants,
+     * unlike Drive where a refresh_token is required and `prompt=consent` is forced.
+     */
+    buildLoginUrl(input: {
+        state: string;
+        codeVerifier: string;
+    }): string;
+    /** Path Google sends the login callback to. Routed under `/auth/google/callback`. */
+    loginRedirectUri(): string;
+    /**
+     * Exchange an authorization code from the login flow for the user's profile.
+     * Does NOT require `refresh_token`, since login is one-shot.
+     * The Braid server issues its own session afterwards,
+     * so Google's tokens are discarded after this call.
+     * Uses the userinfo endpoint instead of decoding the id_token,
+     * so no JWT verifier is pulled in just to read 3 fields.
+     */
+    loginWithCode(input: {
+        code: string;
+        codeVerifier: string;
+    }): Promise<GoogleProfile>;
     refreshAccessToken(refreshToken: string): Promise<RefreshedAccessToken>;
 }
 /**

package/dist/infrastructure/oauth/GoogleOAuth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"GoogleOAuth.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/oauth/GoogleOAuth.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,iBAAiB;IAChC,mDAAmD;IACnD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,2BAA2B;IAC3B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,gEAAgE;IAChE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;CAC7B;AAED,MAAM,WAAW,qBAAqB;IACpC,8DAA8D;IAC9D,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAA;IAClC,yCAAyC;IACzC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,2DAA2D;IAC3D,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;CAC9B;AAED,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC3B;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC3B;AAED;;;;;;;GAOG;AACH,qBAAa,WAAW;IACV,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,iBAAiB;IAEtD;;;;OAIG;IACH,qBAAqB,CAAC,KAAK,EAAE,qBAAqB,GAAG,MAAM;IAgBrD,YAAY,CAAC,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,QAAQ,CAAC;IA2B9E,kBAAkB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC;CAsB9E;AA4BD;;;GAGG;AACH,wBAAgB,kBAAkB,IAAI,MAAM,CAE3C;AAED;;GAEG;AACH,wBAAgB,gBAAgB,IAAI,MAAM,CAEzC"}
+{"version":3,"file":"GoogleOAuth.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/oauth/GoogleOAuth.ts"],"names":[],"mappings":"AAMA;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAA;CACjC;AAED,MAAM,WAAW,iBAAiB;IAEhC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IAEzB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAG7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAM5B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;CACnC;AAED,MAAM,WAAW,qBAAqB;IAEpC,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAA;IAElC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IAEtB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;CAC9B;AAED,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC3B;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC3B;AAED;;;;;;GAMG;AACH,qBAAa,WAAW;IACV,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,iBAAiB;IAEtD;;;;OAIG;IACH,qBAAqB,CAAC,KAAK,EAAE,qBAAqB,GAAG,MAAM;IAgBrD,YAAY,CAAC,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,QAAQ,CAAC;IA2BpF;;;;;;OAMG;IACH,aAAa,CAAC,KAAK,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,GAAG,MAAM;IAerE,qFAAqF;IACrF,gBAAgB,IAAI,MAAM;IAI1B;;;;;;;OAOG;IACG,aAAa,CAAC,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,aAAa,CAAC;IA0CpF,kBAAkB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC;CAsB9E;AA4BD;;;GAGG;AACH,wBAAgB,kBAAkB,IAAI,MAAM,CAE3C;AAED;;GAEG;AACH,wBAAgB,gBAAgB,IAAI,MAAM,CAEzC"}

package/dist/infrastructure/oauth/GoogleOAuth.js

@@ -1,13 +1,13 @@
 import { createHash, randomBytes } from 'node:crypto';
 const AUTH_ENDPOINT = 'https://accounts.google.com/o/oauth2/v2/auth';
 const TOKEN_ENDPOINT = 'https://oauth2.googleapis.com/token';
+const USERINFO_ENDPOINT = 'https://openidconnect.googleapis.com/v1/userinfo';
 /**
- * Minimal Google OAuth 2.0 client for installed-app / web flow.
- *
- * Why not `openid-client` or `google-auth-library`: we only need 4 calls
- * (build URL, exchange code, refresh, revoke); avoiding a heavyweight
- * dependency keeps the server's install footprint small and the auth
- * surface auditable.
+ * Minimal Google OAuth 2.0 client for the installed-app or web flow.
+ * We skip `openid-client` and `google-auth-library`,
+ * because only four calls are needed (build URL, exchange code, refresh, revoke).
+ * Avoiding a heavyweight dependency keeps the server's install footprint small,
+ * and the auth surface auditable.
  */
 export class GoogleOAuth {
     config;
@@ -16,8 +16,8 @@ export class GoogleOAuth {
     }
     /**
      * Build the URL the user's browser is sent to. `state` and `codeVerifier`
-     * MUST be unique per flow; the caller stores them in pending-state until
-     * the callback arrives.
+     * MUST be unique per flow,
+     * the caller stores them in pending-state until the callback arrives.
      */
     buildAuthorizationUrl(input) {
         const params = new URLSearchParams({
@@ -25,7 +25,7 @@ export class GoogleOAuth {
             redirect_uri: this.config.redirectUri,
             response_type: 'code',
             scope: input.scopes.join(' '),
-            access_type: 'offline', // → refresh_token in response
+            access_type: 'offline', // yields refresh_token in the response
             prompt: 'consent', // ensure refresh_token even on re-auth
             include_granted_scopes: 'true',
             state: input.state,
@@ -54,12 +54,79 @@ export class GoogleOAuth {
         }
         const payload = await response.json();
         if (!payload.refresh_token) {
-            // Google only returns refresh_token on first consent. If we don't have
-            // one, the caller can't store anything useful for next time.
+            // Google only returns refresh_token on first consent.
+            // Without one, the caller can't store anything useful for next time.
             throw new Error('Google did not return a refresh_token. Add prompt=consent and ensure access_type=offline.');
         }
         return tokenSetFromPayload(payload);
     }
+    /**
+     * Login flow URL. Same client and redirect as the Drive flow,
+     * but with `openid email profile` scopes and no `prompt=consent`.
+     * Google suppresses the consent screen when the user has already approved those scopes,
+     * which is what login wants,
+     * unlike Drive where a refresh_token is required and `prompt=consent` is forced.
+     */
+    buildLoginUrl(input) {
+        const params = new URLSearchParams({
+            client_id: this.config.clientId,
+            redirect_uri: this.loginRedirectUri(),
+            response_type: 'code',
+            scope: 'openid email profile',
+            access_type: 'online',
+            include_granted_scopes: 'true',
+            state: input.state,
+            code_challenge: pkceChallenge(input.codeVerifier),
+            code_challenge_method: 'S256',
+        });
+        return `${AUTH_ENDPOINT}?${params.toString()}`;
+    }
+    /** Path Google sends the login callback to. Routed under `/auth/google/callback`. */
+    loginRedirectUri() {
+        return this.config.loginRedirectUri ?? this.config.redirectUri;
+    }
+    /**
+     * Exchange an authorization code from the login flow for the user's profile.
+     * Does NOT require `refresh_token`, since login is one-shot.
+     * The Braid server issues its own session afterwards,
+     * so Google's tokens are discarded after this call.
+     * Uses the userinfo endpoint instead of decoding the id_token,
+     * so no JWT verifier is pulled in just to read 3 fields.
+     */
+    async loginWithCode(input) {
+        const body = new URLSearchParams({
+            client_id: this.config.clientId,
+            client_secret: this.config.clientSecret,
+            redirect_uri: this.loginRedirectUri(),
+            grant_type: 'authorization_code',
+            code: input.code,
+            code_verifier: input.codeVerifier,
+        });
+        const tokenResponse = await fetch(TOKEN_ENDPOINT, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
+            body,
+        });
+        if (!tokenResponse.ok) {
+            const text = await tokenResponse.text().catch(() => '');
+            throw new Error(`Google login token exchange failed: ${tokenResponse.status} ${tokenResponse.statusText} ${text}`);
+        }
+        const { access_token } = await tokenResponse.json();
+        const userinfoResponse = await fetch(USERINFO_ENDPOINT, {
+            headers: { Authorization: `Bearer ${access_token}` },
+        });
+        if (!userinfoResponse.ok) {
+            const text = await userinfoResponse.text().catch(() => '');
+            throw new Error(`Google userinfo fetch failed: ${userinfoResponse.status} ${userinfoResponse.statusText} ${text}`);
+        }
+        const userinfo = await userinfoResponse.json();
+        return {
+            sub: userinfo.sub,
+            email: userinfo.email,
+            displayName: userinfo.name ?? userinfo.given_name ?? userinfo.email,
+            ...(userinfo.email_verified !== undefined ? { emailVerified: userinfo.email_verified } : {}),
+        };
+    }
     async refreshAccessToken(refreshToken) {
         const body = new URLSearchParams({
             client_id: this.config.clientId,

package/dist/infrastructure/oauth/GoogleOAuth.js.map

@@ -1 +1 @@
-{"version":3,"file":"GoogleOAuth.js","sourceRoot":"","sources":["../../../src/infrastructure/oauth/GoogleOAuth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAErD,MAAM,aAAa,GAAG,8CAA8C,CAAA;AACpE,MAAM,cAAc,GAAG,qCAAqC,CAAA;AAiC5D;;;;;;;GAOG;AACH,MAAM,OAAO,WAAW;IACO;IAA7B,YAA6B,MAAyB;QAAzB,WAAM,GAAN,MAAM,CAAmB;IAAG,CAAC;IAE1D;;;;OAIG;IACH,qBAAqB,CAAC,KAA4B;QAChD,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC/B,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;YACrC,aAAa,EAAE,MAAM;YACrB,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;YAC7B,WAAW,EAAE,SAAS,EAAE,8BAA8B;YACtD,MAAM,EAAE,SAAS,EAAE,uCAAuC;YAC1D,sBAAsB,EAAE,MAAM;YAC9B,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,cAAc,EAAE,aAAa,CAAC,KAAK,CAAC,YAAY,CAAC;YACjD,qBAAqB,EAAE,MAAM;SAC9B,CAAC,CAAA;QACF,OAAO,GAAG,aAAa,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAA;IAChD,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,KAA6C;QAC9D,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;YAC/B,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC/B,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;YACvC,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;YACrC,UAAU,EAAE,oBAAoB;YAChC,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,aAAa,EAAE,KAAK,CAAC,YAAY;SAClC,CAAC,CAAA;QACF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,cAAc,EAAE;YAC3C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;YAChE,IAAI;SACL,CAAC,CAAA;QACF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAA;YAClD,MAAM,IAAI,KAAK,CAAC,iCAAiC,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,IAAI,IAAI,EAAE,CAAC,CAAA;QACpG,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAsB,CAAA;QACzD,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;YAC3B,uEAAuE;YACvE,6DAA6D;YAC7D,MAAM,IAAI,KAAK,CAAC,2FAA2F,CAAC,CAAA;QAC9G,CAAC;QACD,OAAO,mBAAmB,CAAC,OAAO,CAAC,CAAA;IACrC,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,YAAoB;QAC3C,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;YAC/B,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC/B,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;YACvC,UAAU,EAAE,eAAe;YAC3B,aAAa,EAAE,YAAY;SAC5B,CAAC,CAAA;QACF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,cAAc,EAAE;YAC3C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;YAChE,IAAI;SACL,CAAC,CAAA;QACF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAA;YAClD,MAAM,IAAI,KAAK,CAAC,gCAAgC,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,IAAI,IAAI,EAAE,CAAC,CAAA;QACnG,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAsB,CAAA;QACzD,OAAO;YACL,WAAW,EAAE,OAAO,CAAC,YAAY;YACjC,SAAS,EAAE,cAAc,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE;SAC5D,CAAA;IACH,CAAC;CACF;AAUD,SAAS,mBAAmB,CAAC,CAAmB;IAC9C,OAAO;QACL,WAAW,EAAE,CAAC,CAAC,YAAY;QAC3B,YAAY,EAAE,CAAC,CAAC,aAAc;QAC9B,SAAS,EAAE,cAAc,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE;QACrD,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,SAAS,EAAE,CAAC,CAAC,UAAU;KACxB,CAAA;AACH,CAAC;AAED,SAAS,cAAc,CAAC,OAAe;IACrC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,GAAG,IAAI,CAAC,CAAA;AAC9C,CAAC;AAED,SAAS,aAAa,CAAC,QAAgB;IACrC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;AAClE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB;IAChC,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;AAC9C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB;IAC9B,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;AAC9C,CAAC"}
+{"version":3,"file":"GoogleOAuth.js","sourceRoot":"","sources":["../../../src/infrastructure/oauth/GoogleOAuth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAErD,MAAM,aAAa,GAAG,8CAA8C,CAAA;AACpE,MAAM,cAAc,GAAG,qCAAqC,CAAA;AAC5D,MAAM,iBAAiB,GAAG,kDAAkD,CAAA;AAmD5E;;;;;;GAMG;AACH,MAAM,OAAO,WAAW;IACO;IAA7B,YAA6B,MAAyB;QAAzB,WAAM,GAAN,MAAM,CAAmB;IAAG,CAAC;IAE1D;;;;OAIG;IACH,qBAAqB,CAAC,KAA4B;QAChD,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC/B,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;YACrC,aAAa,EAAE,MAAM;YACrB,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;YAC7B,WAAW,EAAE,SAAS,EAAE,uCAAuC;YAC/D,MAAM,EAAE,SAAS,EAAE,uCAAuC;YAC1D,sBAAsB,EAAE,MAAM;YAC9B,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,cAAc,EAAE,aAAa,CAAC,KAAK,CAAC,YAAY,CAAC;YACjD,qBAAqB,EAAE,MAAM;SAC9B,CAAC,CAAA;QACF,OAAO,GAAG,aAAa,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAA;IAChD,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,KAA6C;QAC9D,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;YAC/B,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC/B,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;YACvC,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;YACrC,UAAU,EAAE,oBAAoB;YAChC,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,aAAa,EAAE,KAAK,CAAC,YAAY;SAClC,CAAC,CAAA;QACF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,cAAc,EAAE;YAC3C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;YAChE,IAAI;SACL,CAAC,CAAA;QACF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAA;YAClD,MAAM,IAAI,KAAK,CAAC,iCAAiC,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,IAAI,IAAI,EAAE,CAAC,CAAA;QACpG,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAsB,CAAA;QACzD,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;YAC3B,sDAAsD;YACtD,qEAAqE;YACrE,MAAM,IAAI,KAAK,CAAC,2FAA2F,CAAC,CAAA;QAC9G,CAAC;QACD,OAAO,mBAAmB,CAAC,OAAO,CAAC,CAAA;IACrC,CAAC;IAED;;;;;;OAMG;IACH,aAAa,CAAC,KAA8C;QAC1D,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC/B,YAAY,EAAE,IAAI,CAAC,gBAAgB,EAAE;YACrC,aAAa,EAAE,MAAM;YACrB,KAAK,EAAE,sBAAsB;YAC7B,WAAW,EAAE,QAAQ;YACrB,sBAAsB,EAAE,MAAM;YAC9B,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,cAAc,EAAE,aAAa,CAAC,KAAK,CAAC,YAAY,CAAC;YACjD,qBAAqB,EAAE,MAAM;SAC9B,CAAC,CAAA;QACF,OAAO,GAAG,aAAa,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAA;IAChD,CAAC;IAED,qFAAqF;IACrF,gBAAgB;QACd,OAAO,IAAI,CAAC,MAAM,CAAC,gBAAgB,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,CAAA;IAChE,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,aAAa,CAAC,KAA6C;QAC/D,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;YAC/B,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC/B,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;YACvC,YAAY,EAAE,IAAI,CAAC,gBAAgB,EAAE;YACrC,UAAU,EAAE,oBAAoB;YAChC,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,aAAa,EAAE,KAAK,CAAC,YAAY;SAClC,CAAC,CAAA;QACF,MAAM,aAAa,GAAG,MAAM,KAAK,CAAC,cAAc,EAAE;YAChD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;YAChE,IAAI;SACL,CAAC,CAAA;QACF,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC;YACtB,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAA;YACvD,MAAM,IAAI,KAAK,CAAC,uCAAuC,aAAa,CAAC,MAAM,IAAI,aAAa,CAAC,UAAU,IAAI,IAAI,EAAE,CAAC,CAAA;QACpH,CAAC;QACD,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,aAAa,CAAC,IAAI,EAA8B,CAAA;QAE/E,MAAM,gBAAgB,GAAG,MAAM,KAAK,CAAC,iBAAiB,EAAE;YACtD,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,YAAY,EAAE,EAAE;SACrD,CAAC,CAAA;QACF,IAAI,CAAC,gBAAgB,CAAC,EAAE,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAA;YAC1D,MAAM,IAAI,KAAK,CAAC,iCAAiC,gBAAgB,CAAC,MAAM,IAAI,gBAAgB,CAAC,UAAU,IAAI,IAAI,EAAE,CAAC,CAAA;QACpH,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAM3C,CAAA;QACD,OAAO;YACL,GAAG,EAAE,QAAQ,CAAC,GAAG;YACjB,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,WAAW,EAAE,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,UAAU,IAAI,QAAQ,CAAC,KAAK;YACnE,GAAG,CAAC,QAAQ,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,QAAQ,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7F,CAAA;IACH,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,YAAoB;QAC3C,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;YAC/B,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC/B,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;YACvC,UAAU,EAAE,eAAe;YAC3B,aAAa,EAAE,YAAY;SAC5B,CAAC,CAAA;QACF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,cAAc,EAAE;YAC3C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;YAChE,IAAI;SACL,CAAC,CAAA;QACF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAA;YAClD,MAAM,IAAI,KAAK,CAAC,gCAAgC,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,IAAI,IAAI,EAAE,CAAC,CAAA;QACnG,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAsB,CAAA;QACzD,OAAO;YACL,WAAW,EAAE,OAAO,CAAC,YAAY;YACjC,SAAS,EAAE,cAAc,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE;SAC5D,CAAA;IACH,CAAC;CACF;AAUD,SAAS,mBAAmB,CAAC,CAAmB;IAC9C,OAAO;QACL,WAAW,EAAE,CAAC,CAAC,YAAY;QAC3B,YAAY,EAAE,CAAC,CAAC,aAAc;QAC9B,SAAS,EAAE,cAAc,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE;QACrD,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,SAAS,EAAE,CAAC,CAAC,UAAU;KACxB,CAAA;AACH,CAAC;AAED,SAAS,cAAc,CAAC,OAAe;IACrC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,GAAG,IAAI,CAAC,CAAA;AAC9C,CAAC;AAED,SAAS,aAAa,CAAC,QAAgB;IACrC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;AAClE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB;IAChC,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;AAC9C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB;IAC9B,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;AAC9C,CAAC"}

package/dist/infrastructure/reactor/FsReactorCycleRepository.d.ts

@@ -0,0 +1,29 @@
+import type { ReactorCycleRepository } from '@braidhq/core';
+import type { AbsolutePath, ReactorCycle, ReactorCycleId, WorkspaceId } from '@braidhq/schema';
+export interface FsReactorCycleRepositoryOptions {
+    /**
+     * Lookup of workspaceId to workspaceRoot. Shared with the other Fs repositories,
+     * so this repo doesn't introduce a separate dependency on `WorkspaceService`.
+     * `composeFs.ts` builds a single closure once and passes it to every fs repo.
+     */
+    readonly workspaceRoots: () => Promise<ReadonlyMap<WorkspaceId, AbsolutePath>>;
+}
+/**
+ * Filesystem-backed `ReactorCycleRepository`. One JSON file per cycle,
+ * at `artifacts/reactor-cycles/<cycleId>.json`.
+ * Each save is an atomic rename,
+ * so the Studio Activity page never reads a half-written file.
+ *
+ * The file body is exactly the `ReactorCycle` shape, no wrapper or envelope.
+ * A future SQLite or Postgres impl maps one file to one row keyed by `cycleId`,
+ * with `(workspaceId, startedAt)` indexed for the list query.
+ */
+export declare class FsReactorCycleRepository implements ReactorCycleRepository {
+    private readonly options;
+    constructor(options: FsReactorCycleRepositoryOptions);
+    save(cycle: ReactorCycle): Promise<void>;
+    load(workspaceId: WorkspaceId, cycleId: ReactorCycleId): Promise<ReactorCycle | undefined>;
+    listByWorkspace(workspaceId: WorkspaceId): Promise<readonly ReactorCycle[]>;
+    private resolveRoot;
+}
+//# sourceMappingURL=FsReactorCycleRepository.d.ts.map

package/dist/infrastructure/reactor/FsReactorCycleRepository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"FsReactorCycleRepository.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/reactor/FsReactorCycleRepository.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAA;AAC3D,OAAO,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA;AAU9F,MAAM,WAAW,+BAA+B;IAC9C;;;;OAIG;IACH,QAAQ,CAAC,cAAc,EAAE,MAAM,OAAO,CAAC,WAAW,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC,CAAA;CAC/E;AAED;;;;;;;;;GASG;AACH,qBAAa,wBAAyB,YAAW,sBAAsB;IACzD,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAAP,OAAO,EAAE,+BAA+B;IAE/D,IAAI,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC;IAUxC,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC;IAoB1F,eAAe,CAAC,WAAW,EAAE,WAAW,GAAG,OAAO,CAAC,SAAS,YAAY,EAAE,CAAC;YA0BnE,WAAW;CAO1B"}