@braidhq/server 0.0.1

package/dist/routes/decisions.js

@@ -0,0 +1,30 @@
+import { DecisionAction, DecisionId } from '@braidhq/schema';
+import { zValidator } from '@hono/zod-validator';
+import { Hono } from 'hono';
+import { z } from 'zod';
+import { getWorkspaceId } from '../middleware/workspaceId.js';
+import { assertEntityInWorkspace } from './helpers.js';
+const ListQuerySchema = z.object({
+    action: z.union([DecisionAction, z.array(DecisionAction)]).optional(),
+    limit: z.coerce.number().int().positive().optional(),
+    offset: z.coerce.number().int().nonnegative().optional(),
+});
+export function createDecisionsRouter(deps) {
+    const router = new Hono();
+    router.get('/', zValidator('query', ListQuerySchema), async (context) => {
+        const workspaceId = getWorkspaceId(context);
+        const { action, limit, offset } = context.req.valid('query');
+        const actions = action === undefined ? undefined : Array.isArray(action) ? action : [action];
+        const decisions = await deps.decisionRepository.list({ workspaceId, actions, limit, offset });
+        return context.json({ items: decisions });
+    });
+    router.get('/:decisionId', async (context) => {
+        const workspaceId = getWorkspaceId(context);
+        const decisionId = DecisionId.parse(context.req.param('decisionId'));
+        const decision = await deps.decisionRepository.load(decisionId);
+        assertEntityInWorkspace(workspaceId, decision.workspaceId, 'Decision', decisionId);
+        return context.json(decision);
+    });
+    return router;
+}
+//# sourceMappingURL=decisions.js.map

package/dist/routes/decisions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"decisions.js","sourceRoot":"","sources":["../../src/routes/decisions.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAC5D,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAChD,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAC3B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAA;AAC7D,OAAO,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAA;AAEtD,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACrE,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACpD,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;CACzD,CAAC,CAAA;AAMF,MAAM,UAAU,qBAAqB,CAAC,IAAyB;IAC7D,MAAM,MAAM,GAAG,IAAI,IAAI,EAAE,CAAA;IAEzB,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,OAAO,EAAE,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QACtE,MAAM,WAAW,GAAG,cAAc,CAAC,OAAO,CAAC,CAAA;QAC3C,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QAC5D,MAAM,OAAO,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;QAC5F,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAA;QAC7F,OAAO,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAA;IAC3C,CAAC,CAAC,CAAA;IAEF,MAAM,CAAC,GAAG,CAAC,cAAc,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAC3C,MAAM,WAAW,GAAG,cAAc,CAAC,OAAO,CAAC,CAAA;QAC3C,MAAM,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAA;QACpE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QAC/D,uBAAuB,CAAC,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE,UAAU,EAAE,UAAU,CAAC,CAAA;QAClF,OAAO,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IAC/B,CAAC,CAAC,CAAA;IAEF,OAAO,MAAM,CAAA;AACf,CAAC"}

package/dist/routes/edges.d.ts

@@ -0,0 +1,7 @@
+import type { ModelService } from '@braidhq/core';
+import { Hono } from 'hono';
+export interface EdgesRouterDeps {
+    modelService: ModelService;
+}
+export declare function createEdgesRouter(deps: EdgesRouterDeps): Hono;
+//# sourceMappingURL=edges.d.ts.map

package/dist/routes/edges.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"edges.d.ts","sourceRoot":"","sources":["../../src/routes/edges.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAGjD,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAY3B,MAAM,WAAW,eAAe;IAC9B,YAAY,EAAE,YAAY,CAAA;CAC3B;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,eAAe,GAAG,IAAI,CAkB7D"}

package/dist/routes/edges.js

@@ -0,0 +1,30 @@
+import { EdgeTypeId, NodeId } from '@braidhq/schema';
+import { zValidator } from '@hono/zod-validator';
+import { Hono } from 'hono';
+import { z } from 'zod';
+import { getWorkspaceId } from '../middleware/workspaceId.js';
+const ListQuerySchema = z.object({
+    type: z.union([EdgeTypeId, z.array(EdgeTypeId)]).optional(),
+    fromNodeId: NodeId.optional(),
+    toNodeId: NodeId.optional(),
+    limit: z.coerce.number().int().positive().optional(),
+    offset: z.coerce.number().int().nonnegative().optional(),
+});
+export function createEdgesRouter(deps) {
+    const router = new Hono();
+    router.get('/', zValidator('query', ListQuerySchema), async (context) => {
+        const workspaceId = getWorkspaceId(context);
+        const { type, fromNodeId, toNodeId, limit, offset } = context.req.valid('query');
+        const types = type === undefined ? undefined : Array.isArray(type) ? type : [type];
+        const edges = await deps.modelService.listEdges(workspaceId, {
+            types,
+            fromNodeId,
+            toNodeId,
+            limit,
+            offset,
+        });
+        return context.json({ items: edges });
+    });
+    return router;
+}
+//# sourceMappingURL=edges.js.map

package/dist/routes/edges.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"edges.js","sourceRoot":"","sources":["../../src/routes/edges.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAA;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAChD,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAC3B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAA;AAE7D,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC3D,UAAU,EAAE,MAAM,CAAC,QAAQ,EAAE;IAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE;IAC3B,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACpD,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;CACzD,CAAC,CAAA;AAMF,MAAM,UAAU,iBAAiB,CAAC,IAAqB;IACrD,MAAM,MAAM,GAAG,IAAI,IAAI,EAAE,CAAA;IAEzB,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,OAAO,EAAE,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QACtE,MAAM,WAAW,GAAG,cAAc,CAAC,OAAO,CAAC,CAAA;QAC3C,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QAChF,MAAM,KAAK,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;QAClF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,WAAW,EAAE;YAC3D,KAAK;YACL,UAAU;YACV,QAAQ;YACR,KAAK;YACL,MAAM;SACP,CAAC,CAAA;QACF,OAAO,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAA;IACvC,CAAC,CAAC,CAAA;IAEF,OAAO,MAAM,CAAA;AACf,CAAC"}

package/dist/routes/health.d.ts

@@ -0,0 +1,3 @@
+import { Hono } from 'hono';
+export declare const healthRouter: Hono<import("hono/types").BlankEnv, import("hono/types").BlankSchema, "/">;
+//# sourceMappingURL=health.d.ts.map

package/dist/routes/health.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"health.d.ts","sourceRoot":"","sources":["../../src/routes/health.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAE3B,eAAO,MAAM,YAAY,4EAAa,CAAA"}

package/dist/routes/health.js

@@ -0,0 +1,10 @@
+import { Hono } from 'hono';
+export const healthRouter = new Hono();
+healthRouter.get('/', (context) => {
+    return context.json({
+        status: 'ok',
+        service: 'braid-server',
+        timestamp: new Date().toISOString(),
+    });
+});
+//# sourceMappingURL=health.js.map

package/dist/routes/health.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"health.js","sourceRoot":"","sources":["../../src/routes/health.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAE3B,MAAM,CAAC,MAAM,YAAY,GAAG,IAAI,IAAI,EAAE,CAAA;AAEtC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE;IAChC,OAAO,OAAO,CAAC,IAAI,CAAC;QAClB,MAAM,EAAE,IAAI;QACZ,OAAO,EAAE,cAAc;QACvB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/routes/helpers.d.ts

@@ -0,0 +1,5 @@
+import type { Workspace, WorkspaceRepository } from '@braidhq/core';
+import type { WorkspaceId } from '@braidhq/schema';
+export declare function assertEntityInWorkspace(expected: WorkspaceId, actual: WorkspaceId, entityKind: string, entityId: string): void;
+export declare function loadWorkspaceById(workspaceId: WorkspaceId, workspaceRepository: WorkspaceRepository): Promise<Workspace>;
+//# sourceMappingURL=helpers.d.ts.map

package/dist/routes/helpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"helpers.d.ts","sourceRoot":"","sources":["../../src/routes/helpers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAA;AACnE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA;AAGlD,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,WAAW,EACrB,MAAM,EAAE,WAAW,EACnB,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,GACf,IAAI,CAIN;AAED,wBAAsB,iBAAiB,CACrC,WAAW,EAAE,WAAW,EACxB,mBAAmB,EAAE,mBAAmB,GACvC,OAAO,CAAC,SAAS,CAAC,CAMpB"}

package/dist/routes/helpers.js

@@ -0,0 +1,14 @@
+import { NotFoundError } from '@braidhq/core';
+export function assertEntityInWorkspace(expected, actual, entityKind, entityId) {
+    if (expected !== actual) {
+        throw new NotFoundError(`${entityKind} "${entityId}" not found in workspace "${expected}"`);
+    }
+}
+export async function loadWorkspaceById(workspaceId, workspaceRepository) {
+    const workspaces = await workspaceRepository.list();
+    const match = workspaces.find(workspace => workspace.id === workspaceId);
+    if (!match)
+        throw new NotFoundError(`Workspace "${workspaceId}" not registered`);
+    return match;
+}
+//# sourceMappingURL=helpers.js.map

package/dist/routes/helpers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"helpers.js","sourceRoot":"","sources":["../../src/routes/helpers.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAE7C,MAAM,UAAU,uBAAuB,CACrC,QAAqB,EACrB,MAAmB,EACnB,UAAkB,EAClB,QAAgB;IAEhB,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;QACxB,MAAM,IAAI,aAAa,CAAC,GAAG,UAAU,KAAK,QAAQ,6BAA6B,QAAQ,GAAG,CAAC,CAAA;IAC7F,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,WAAwB,EACxB,mBAAwC;IAExC,MAAM,UAAU,GAAG,MAAM,mBAAmB,CAAC,IAAI,EAAE,CAAA;IACnD,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,WAAW,CAAC,CAAA;IACxE,IAAI,CAAC,KAAK;QACR,MAAM,IAAI,aAAa,CAAC,cAAc,WAAW,kBAAkB,CAAC,CAAA;IACtE,OAAO,KAAK,CAAA;AACd,CAAC"}

package/dist/routes/model.d.ts

@@ -0,0 +1,7 @@
+import type { ModelService } from '@braidhq/core';
+import { Hono } from 'hono';
+export interface ModelRouterDeps {
+    modelService: ModelService;
+}
+export declare function createModelRouter(deps: ModelRouterDeps): Hono;
+//# sourceMappingURL=model.d.ts.map

package/dist/routes/model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"model.d.ts","sourceRoot":"","sources":["../../src/routes/model.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AACjD,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAG3B,MAAM,WAAW,eAAe;IAC9B,YAAY,EAAE,YAAY,CAAA;CAC3B;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,eAAe,GAAG,IAAI,CAU7D"}

package/dist/routes/model.js

@@ -0,0 +1,12 @@
+import { Hono } from 'hono';
+import { getWorkspaceId } from '../middleware/workspaceId.js';
+export function createModelRouter(deps) {
+    const router = new Hono();
+    router.get('/snapshot', async (context) => {
+        const workspaceId = getWorkspaceId(context);
+        const snapshot = await deps.modelService.getSnapshot(workspaceId);
+        return context.json(snapshot);
+    });
+    return router;
+}
+//# sourceMappingURL=model.js.map

package/dist/routes/model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model.js","sourceRoot":"","sources":["../../src/routes/model.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAC3B,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAA;AAM7D,MAAM,UAAU,iBAAiB,CAAC,IAAqB;IACrD,MAAM,MAAM,GAAG,IAAI,IAAI,EAAE,CAAA;IAEzB,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QACxC,MAAM,WAAW,GAAG,cAAc,CAAC,OAAO,CAAC,CAAA;QAC3C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,WAAW,CAAC,CAAA;QACjE,OAAO,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IAC/B,CAAC,CAAC,CAAA;IAEF,OAAO,MAAM,CAAA;AACf,CAAC"}

package/dist/routes/nodes.d.ts

@@ -0,0 +1,7 @@
+import type { ModelService } from '@braidhq/core';
+import { Hono } from 'hono';
+export interface NodesRouterDeps {
+    modelService: ModelService;
+}
+export declare function createNodesRouter(deps: NodesRouterDeps): Hono;
+//# sourceMappingURL=nodes.d.ts.map

package/dist/routes/nodes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nodes.d.ts","sourceRoot":"","sources":["../../src/routes/nodes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAGjD,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAgB3B,MAAM,WAAW,eAAe;IAC9B,YAAY,EAAE,YAAY,CAAA;CAC3B;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,eAAe,GAAG,IAAI,CAkC7D"}

package/dist/routes/nodes.js

@@ -0,0 +1,47 @@
+import { NodeId, NodeStatus, NodeTypeId } from '@braidhq/schema';
+import { zValidator } from '@hono/zod-validator';
+import { Hono } from 'hono';
+import { z } from 'zod';
+import { getWorkspaceId } from '../middleware/workspaceId.js';
+const ListQuerySchema = z.object({
+    type: z.union([NodeTypeId, z.array(NodeTypeId)]).optional(),
+    status: z.union([NodeStatus, z.array(NodeStatus)]).optional(),
+    q: z.string().optional(),
+    limit: z.coerce.number().int().positive().optional(),
+    offset: z.coerce.number().int().nonnegative().optional(),
+});
+const ScopeQuerySchema = z.object({
+    depth: z.coerce.number().int().positive().default(2),
+});
+export function createNodesRouter(deps) {
+    const router = new Hono();
+    router.get('/', zValidator('query', ListQuerySchema), async (context) => {
+        const workspaceId = getWorkspaceId(context);
+        const { type, status, q, limit, offset } = context.req.valid('query');
+        const types = type === undefined ? undefined : Array.isArray(type) ? type : [type];
+        const statuses = status === undefined ? undefined : Array.isArray(status) ? status : [status];
+        const nodes = await deps.modelService.findNodes(workspaceId, {
+            types,
+            statuses,
+            nameContains: q,
+            limit,
+            offset,
+        });
+        return context.json({ items: nodes });
+    });
+    router.get('/:nodeId', async (context) => {
+        const workspaceId = getWorkspaceId(context);
+        const nodeId = NodeId.parse(context.req.param('nodeId'));
+        const node = await deps.modelService.getNode(workspaceId, nodeId);
+        return context.json(node);
+    });
+    router.get('/:nodeId/scope', zValidator('query', ScopeQuerySchema), async (context) => {
+        const workspaceId = getWorkspaceId(context);
+        const nodeId = NodeId.parse(context.req.param('nodeId'));
+        const { depth } = context.req.valid('query');
+        const snapshot = await deps.modelService.scopeOf(workspaceId, nodeId, depth);
+        return context.json(snapshot);
+    });
+    return router;
+}
+//# sourceMappingURL=nodes.js.map

package/dist/routes/nodes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nodes.js","sourceRoot":"","sources":["../../src/routes/nodes.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAChE,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAChD,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAC3B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAA;AAE7D,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC3D,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC7D,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACxB,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACpD,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;CACzD,CAAC,CAAA;AAEF,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;CACrD,CAAC,CAAA;AAMF,MAAM,UAAU,iBAAiB,CAAC,IAAqB;IACrD,MAAM,MAAM,GAAG,IAAI,IAAI,EAAE,CAAA;IAEzB,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,OAAO,EAAE,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QACtE,MAAM,WAAW,GAAG,cAAc,CAAC,OAAO,CAAC,CAAA;QAC3C,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QACrE,MAAM,KAAK,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;QAClF,MAAM,QAAQ,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;QAC7F,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,WAAW,EAAE;YAC3D,KAAK;YACL,QAAQ;YACR,YAAY,EAAE,CAAC;YACf,KAAK;YACL,MAAM;SACP,CAAC,CAAA;QACF,OAAO,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAA;IACvC,CAAC,CAAC,CAAA;IAEF,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QACvC,MAAM,WAAW,GAAG,cAAc,CAAC,OAAO,CAAC,CAAA;QAC3C,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAA;QACxD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,CAAA;QACjE,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC3B,CAAC,CAAC,CAAA;IAEF,MAAM,CAAC,GAAG,CAAC,gBAAgB,EAAE,UAAU,CAAC,OAAO,EAAE,gBAAgB,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QACpF,MAAM,WAAW,GAAG,cAAc,CAAC,OAAO,CAAC,CAAA;QAC3C,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAA;QACxD,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QAC5C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,CAAC,CAAA;QAC5E,OAAO,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IAC/B,CAAC,CAAC,CAAA;IAEF,OAAO,MAAM,CAAA;AACf,CAAC"}

package/dist/routes/oauth.d.ts

@@ -0,0 +1,20 @@
+import type { GoogleOAuth } from '../infrastructure/oauth/GoogleOAuth.js';
+import type { SecretStore } from '../infrastructure/secrets/SecretStore.js';
+import { Hono } from 'hono';
+export interface OAuthRouterDeps {
+    readonly secretStore: SecretStore;
+    readonly google?: GoogleOAuth;
+}
+/**
+ * OAuth routes for source-loader providers that need user consent.
+ *
+ *   POST /oauth/google/start    → { authorizationUrl }
+ *   GET  /oauth/google/callback?code=…&state=… → HTML page that closes the popup
+ *
+ * Pending state is kept in process memory. The flow is short-lived
+ * (single browser round-trip); a server restart cancels in-flight flows,
+ * which is acceptable for a local desktop / single-user install. SaaS
+ * deployments should swap the in-memory `pending` map for a shared store.
+ */
+export declare function createOAuthRouter(deps: OAuthRouterDeps): Hono;
+//# sourceMappingURL=oauth.d.ts.map

package/dist/routes/oauth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../../src/routes/oauth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAY,MAAM,wCAAwC,CAAA;AACnF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0CAA0C,CAAA;AAE3E,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAW3B,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAA;IACjC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;CAC9B;AASD;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,eAAe,GAAG,IAAI,CAqD7D"}

package/dist/routes/oauth.js

@@ -0,0 +1,107 @@
+import { zValidator } from '@hono/zod-validator';
+import { Hono } from 'hono';
+import { z } from 'zod';
+import { createOAuthState, createPkceVerifier } from '../infrastructure/oauth/GoogleOAuth.js';
+const DRIVE_READONLY_SCOPE = 'https://www.googleapis.com/auth/drive.readonly';
+const StartBodySchema = z.object({
+    workspaceId: z.string().min(1),
+    sourceId: z.string().min(1),
+});
+/**
+ * OAuth routes for source-loader providers that need user consent.
+ *
+ *   POST /oauth/google/start    → { authorizationUrl }
+ *   GET  /oauth/google/callback?code=…&state=… → HTML page that closes the popup
+ *
+ * Pending state is kept in process memory. The flow is short-lived
+ * (single browser round-trip); a server restart cancels in-flight flows,
+ * which is acceptable for a local desktop / single-user install. SaaS
+ * deployments should swap the in-memory `pending` map for a shared store.
+ */
+export function createOAuthRouter(deps) {
+    const router = new Hono();
+    const pending = new Map();
+    router.post('/google/start', zValidator('json', StartBodySchema), async (context) => {
+        if (!deps.google) {
+            return context.json({
+                error: 'Google OAuth is not configured on this server. Set BRAID_GOOGLE_CLIENT_ID + BRAID_GOOGLE_CLIENT_SECRET (and BRAID_GOOGLE_REDIRECT_URI if not the default) and restart.',
+            }, 503);
+        }
+        const { workspaceId, sourceId } = context.req.valid('json');
+        const state = createOAuthState();
+        const codeVerifier = createPkceVerifier();
+        pending.set(state, { workspaceId, sourceId, codeVerifier, createdAt: Date.now() });
+        sweepStale(pending);
+        const authorizationUrl = deps.google.buildAuthorizationUrl({
+            scopes: [DRIVE_READONLY_SCOPE],
+            state,
+            codeVerifier,
+        });
+        return context.json({ authorizationUrl });
+    });
+    router.get('/google/callback', async (context) => {
+        const state = context.req.query('state');
+        const code = context.req.query('code');
+        const error = context.req.query('error');
+        if (error)
+            return context.html(renderCallbackPage({ ok: false, message: `Google returned: ${error}` }), 400);
+        if (!state || !code)
+            return context.html(renderCallbackPage({ ok: false, message: 'Missing state or code query parameter.' }), 400);
+        if (!deps.google)
+            return context.html(renderCallbackPage({ ok: false, message: 'OAuth not configured.' }), 503);
+        const flow = pending.get(state);
+        pending.delete(state);
+        if (!flow)
+            return context.html(renderCallbackPage({ ok: false, message: 'State token not recognised (probably expired or already used).' }), 400);
+        try {
+            const tokens = await deps.google.exchangeCode({ code, codeVerifier: flow.codeVerifier });
+            await persistTokens(deps.secretStore, flow.workspaceId, flow.sourceId, tokens);
+            return context.html(renderCallbackPage({ ok: true, message: 'Connected. You can close this window.' }));
+        }
+        catch (err) {
+            return context.html(renderCallbackPage({
+                ok: false,
+                message: err instanceof Error ? err.message : String(err),
+            }), 500);
+        }
+    });
+    return router;
+}
+async function persistTokens(store, workspaceId, sourceId, tokens) {
+    await store.write('oauth-google', `${workspaceId}--${sourceId}`, tokens);
+}
+function sweepStale(pending) {
+    const cutoff = Date.now() - 10 * 60 * 1000;
+    for (const [state, flow] of pending) {
+        if (flow.createdAt < cutoff)
+            pending.delete(state);
+    }
+}
+function renderCallbackPage(input) {
+    // Tiny self-contained HTML. Tells the popup opener and closes itself.
+    // Inline style so the page works without any asset pipeline.
+    const colour = input.ok ? '#16a34a' : '#dc2626';
+    const status = input.ok ? 'success' : 'error';
+    return `<!doctype html>
+<html><head><meta charset="utf-8"><title>Braid OAuth</title>
+<style>
+  body { font: 14px -apple-system, system-ui, sans-serif; background: #fafafa; color: #1a1a1a; margin: 0; padding: 3rem; }
+  .card { max-width: 28rem; margin: 0 auto; background: white; border-radius: 8px; padding: 2rem; box-shadow: 0 1px 3px rgba(0,0,0,0.08); }
+  h1 { font-size: 1rem; margin: 0 0 0.5rem; color: ${colour}; }
+  p { margin: 0; color: #525252; line-height: 1.5; }
+</style>
+</head><body>
+<div class="card">
+  <h1>${status === 'success' ? 'Connected to Google' : 'Authorization failed'}</h1>
+  <p>${escapeHtml(input.message)}</p>
+</div>
+<script>
+  try { window.opener?.postMessage({ source: 'braid-oauth', provider: 'google', status: ${JSON.stringify(status)} }, '*'); } catch (_e) {}
+  setTimeout(() => { try { window.close(); } catch (_e) {} }, 1500);
+</script>
+</body></html>`;
+}
+function escapeHtml(s) {
+    return s.replace(/[&<>"']/g, ch => ({ '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', '\'': '&#39;' })[ch]);
+}
+//# sourceMappingURL=oauth.js.map

package/dist/routes/oauth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.js","sourceRoot":"","sources":["../../src/routes/oauth.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAChD,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAC3B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,wCAAwC,CAAA;AAE7F,MAAM,oBAAoB,GAAG,gDAAgD,CAAA;AAE7E,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC5B,CAAC,CAAA;AAcF;;;;;;;;;;GAUG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAqB;IACrD,MAAM,MAAM,GAAG,IAAI,IAAI,EAAE,CAAA;IACzB,MAAM,OAAO,GAAG,IAAI,GAAG,EAAuB,CAAA;IAE9C,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,UAAU,CAAC,MAAM,EAAE,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAClF,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,OAAO,OAAO,CAAC,IAAI,CAAC;gBAClB,KAAK,EAAE,wKAAwK;aAChL,EAAE,GAAG,CAAC,CAAA;QACT,CAAC;QACD,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QAC3D,MAAM,KAAK,GAAG,gBAAgB,EAAE,CAAA;QAChC,MAAM,YAAY,GAAG,kBAAkB,EAAE,CAAA;QACzC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;QAClF,UAAU,CAAC,OAAO,CAAC,CAAA;QACnB,MAAM,gBAAgB,GAAG,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC;YACzD,MAAM,EAAE,CAAC,oBAAoB,CAAC;YAC9B,KAAK;YACL,YAAY;SACb,CAAC,CAAA;QACF,OAAO,OAAO,CAAC,IAAI,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAA;IAC3C,CAAC,CAAC,CAAA;IAEF,MAAM,CAAC,GAAG,CAAC,kBAAkB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAC/C,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QACxC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QACtC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QACxC,IAAI,KAAK;YACP,OAAO,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,oBAAoB,KAAK,EAAE,EAAE,CAAC,EAAE,GAAG,CAAC,CAAA;QACnG,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI;YACjB,OAAO,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,wCAAwC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAA;QAChH,IAAI,CAAC,IAAI,CAAC,MAAM;YACd,OAAO,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,uBAAuB,EAAE,CAAC,EAAE,GAAG,CAAC,CAAA;QAE/F,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QACrB,IAAI,CAAC,IAAI;YACP,OAAO,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,gEAAgE,EAAE,CAAC,EAAE,GAAG,CAAC,CAAA;QAExI,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAA;YACxF,MAAM,aAAa,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;YAC9E,OAAO,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,uCAAuC,EAAE,CAAC,CAAC,CAAA;QACzG,CAAC;QACD,OAAO,GAAG,EAAE,CAAC;YACX,OAAO,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC;gBACrC,EAAE,EAAE,KAAK;gBACT,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aAC1D,CAAC,EAAE,GAAG,CAAC,CAAA;QACV,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,OAAO,MAAM,CAAA;AACf,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,KAAkB,EAClB,WAAmB,EACnB,QAAgB,EAChB,MAAgB;IAEhB,MAAM,KAAK,CAAC,KAAK,CAAC,cAAc,EAAE,GAAG,WAAW,KAAK,QAAQ,EAAE,EAAE,MAAM,CAAC,CAAA;AAC1E,CAAC;AAED,SAAS,UAAU,CAAC,OAAiC;IACnD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;IAC1C,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,OAAO,EAAE,CAAC;QACpC,IAAI,IAAI,CAAC,SAAS,GAAG,MAAM;YACzB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IACzB,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAuC;IACjE,sEAAsE;IACtE,6DAA6D;IAC7D,MAAM,MAAM,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAA;IAC/C,MAAM,MAAM,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAA;IAC7C,OAAO;;;;;qDAK4C,MAAM;;;;;QAKnD,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,sBAAsB;OACtE,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC;;;0FAG0D,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;;;eAGjG,CAAA;AACf,CAAC;AAED,SAAS,UAAU,CAAC,CAAS;IAC3B,OAAO,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,CAAE,CAAC,CAAA;AACrH,CAAC"}

package/dist/routes/ontology.d.ts

@@ -0,0 +1,8 @@
+import type { PluginRegistry, WorkspaceRepository } from '@braidhq/core';
+import { Hono } from 'hono';
+export interface OntologyRouterDeps {
+    workspaceRepository: WorkspaceRepository;
+    pluginRegistry: PluginRegistry;
+}
+export declare function createOntologyRouter(deps: OntologyRouterDeps): Hono;
+//# sourceMappingURL=ontology.d.ts.map

package/dist/routes/ontology.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ontology.d.ts","sourceRoot":"","sources":["../../src/routes/ontology.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAA;AAExE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAG3B,MAAM,WAAW,kBAAkB;IACjC,mBAAmB,EAAE,mBAAmB,CAAA;IACxC,cAAc,EAAE,cAAc,CAAA;CAC/B;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,kBAAkB,GAAG,IAAI,CAkBnE"}

package/dist/routes/ontology.js

@@ -0,0 +1,21 @@
+import { NotFoundError } from '@braidhq/core';
+import { Hono } from 'hono';
+import { getWorkspaceId } from '../middleware/workspaceId.js';
+export function createOntologyRouter(deps) {
+    const router = new Hono();
+    router.get('/', async (context) => {
+        const workspaceId = getWorkspaceId(context);
+        const workspaces = await deps.workspaceRepository.list();
+        const workspace = workspaces.find(ws => ws.id === workspaceId);
+        if (!workspace)
+            throw new NotFoundError(`Workspace "${workspaceId}" not registered`);
+        const ontology = deps.pluginRegistry.requireOntology(workspace.productManifest.ontologyId);
+        return context.json({
+            ontologyId: ontology.ontologyId,
+            nodeTypes: ontology.nodeTypes,
+            edgeTypes: ontology.edgeTypes,
+        });
+    });
+    return router;
+}
+//# sourceMappingURL=ontology.js.map

package/dist/routes/ontology.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ontology.js","sourceRoot":"","sources":["../../src/routes/ontology.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAC7C,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAC3B,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAA;AAO7D,MAAM,UAAU,oBAAoB,CAAC,IAAwB;IAC3D,MAAM,MAAM,GAAG,IAAI,IAAI,EAAE,CAAA;IAEzB,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,MAAM,WAAW,GAAG,cAAc,CAAC,OAAO,CAAC,CAAA;QAC3C,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,IAAI,EAAE,CAAA;QACxD,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,WAAW,CAAC,CAAA;QAC9D,IAAI,CAAC,SAAS;YACZ,MAAM,IAAI,aAAa,CAAC,cAAc,WAAW,kBAAkB,CAAC,CAAA;QACtE,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,eAAe,CAAC,SAAS,CAAC,eAAe,CAAC,UAAU,CAAC,CAAA;QAC1F,OAAO,OAAO,CAAC,IAAI,CAAC;YAClB,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,SAAS,EAAE,QAAQ,CAAC,SAAS;SAC9B,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,OAAO,MAAM,CAAA;AACf,CAAC"}

package/dist/routes/proposals.d.ts

@@ -0,0 +1,10 @@
+import type { HITLService, ModelRepository, ProposalRepository, ValidationService } from '@braidhq/core';
+import { Hono } from 'hono';
+export interface ProposalsRouterDeps {
+    hitlService: HITLService;
+    proposalRepository: ProposalRepository;
+    modelRepository: ModelRepository;
+    validationService: ValidationService;
+}
+export declare function createProposalsRouter(deps: ProposalsRouterDeps): Hono;
+//# sourceMappingURL=proposals.d.ts.map

package/dist/routes/proposals.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proposals.d.ts","sourceRoot":"","sources":["../../src/routes/proposals.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAA;AAGxG,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAyB3B,MAAM,WAAW,mBAAmB;IAClC,WAAW,EAAE,WAAW,CAAA;IACxB,kBAAkB,EAAE,kBAAkB,CAAA;IACtC,eAAe,EAAE,eAAe,CAAA;IAChC,iBAAiB,EAAE,iBAAiB,CAAA;CACrC;AAED,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,mBAAmB,GAAG,IAAI,CAuErE"}

package/dist/routes/proposals.js

@@ -0,0 +1,80 @@
+import { ProposalDraft, ProposalId, ProposalStatus, UserId } from '@braidhq/schema';
+import { zValidator } from '@hono/zod-validator';
+import { Hono } from 'hono';
+import { z } from 'zod';
+import { getWorkspaceId } from '../middleware/workspaceId.js';
+import { assertEntityInWorkspace } from './helpers.js';
+const ListQuerySchema = z.object({
+    status: z.union([ProposalStatus, z.array(ProposalStatus)]).optional(),
+    limit: z.coerce.number().int().positive().optional(),
+    offset: z.coerce.number().int().nonnegative().optional(),
+});
+const ApplyBodySchema = z.object({
+    userId: UserId,
+});
+const RejectBodySchema = z.object({
+    reason: z.string().min(1),
+    userId: UserId,
+});
+// Skill-facing create. Body must carry `workspaceId` matching the route
+// param; we let zod parse the rest of the ProposalDraft fields and let
+// HITLService.submitProposal validate ops against the live graph.
+const CreateBodySchema = ProposalDraft.omit({ workspaceId: true });
+export function createProposalsRouter(deps) {
+    const router = new Hono();
+    // Create. Returns 201 + the saved proposal on success, 400 + `issues`
+    // when ops fail validation. Skills call this instead of writing JSON files
+    // so they pick up validation errors on the write call, not on apply.
+    router.post('/', zValidator('json', CreateBodySchema), async (context) => {
+        const workspaceId = getWorkspaceId(context);
+        const body = context.req.valid('json');
+        const proposal = await deps.hitlService.submitProposal({ workspaceId, ...body });
+        return context.json(proposal.toData(), 201);
+    });
+    router.get('/', zValidator('query', ListQuerySchema), async (context) => {
+        const workspaceId = getWorkspaceId(context);
+        const { status, limit, offset } = context.req.valid('query');
+        const statuses = status === undefined ? undefined : Array.isArray(status) ? status : [status];
+        const proposals = await deps.proposalRepository.list({ workspaceId, statuses, limit, offset });
+        return context.json({ items: proposals.map(proposal => proposal.toData()) });
+    });
+    router.get('/:proposalId', async (context) => {
+        const workspaceId = getWorkspaceId(context);
+        const proposalId = ProposalId.parse(context.req.param('proposalId'));
+        const proposal = await deps.proposalRepository.load(proposalId);
+        assertEntityInWorkspace(workspaceId, proposal.workspaceId, 'Proposal', proposalId);
+        return context.json(proposal.toData());
+    });
+    // Pre-apply check: returns the validation issues a skill would hit if it
+    // tried to apply this proposal right now. Skills call this after writing
+    // their proposal so they can iterate on issues without the user in the loop.
+    router.get('/:proposalId/validate', async (context) => {
+        const workspaceId = getWorkspaceId(context);
+        const proposalId = ProposalId.parse(context.req.param('proposalId'));
+        const proposal = await deps.proposalRepository.load(proposalId);
+        assertEntityInWorkspace(workspaceId, proposal.workspaceId, 'Proposal', proposalId);
+        const snapshot = await deps.modelRepository.load(workspaceId);
+        const result = await deps.validationService.validateOperations(snapshot, proposal.operations);
+        return context.json(result);
+    });
+    router.post('/:proposalId/apply', zValidator('json', ApplyBodySchema), async (context) => {
+        const workspaceId = getWorkspaceId(context);
+        const proposalId = ProposalId.parse(context.req.param('proposalId'));
+        const { userId } = context.req.valid('json');
+        const proposal = await deps.proposalRepository.load(proposalId);
+        assertEntityInWorkspace(workspaceId, proposal.workspaceId, 'Proposal', proposalId);
+        const decision = await deps.hitlService.applyProposal(proposalId, userId);
+        return context.json(decision);
+    });
+    router.post('/:proposalId/reject', zValidator('json', RejectBodySchema), async (context) => {
+        const workspaceId = getWorkspaceId(context);
+        const proposalId = ProposalId.parse(context.req.param('proposalId'));
+        const { reason, userId } = context.req.valid('json');
+        const proposal = await deps.proposalRepository.load(proposalId);
+        assertEntityInWorkspace(workspaceId, proposal.workspaceId, 'Proposal', proposalId);
+        const decision = await deps.hitlService.rejectProposal(proposalId, reason, userId);
+        return context.json(decision);
+    });
+    return router;
+}
+//# sourceMappingURL=proposals.js.map

package/dist/routes/proposals.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proposals.js","sourceRoot":"","sources":["../../src/routes/proposals.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAA;AACnF,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAChD,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAC3B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAA;AAC7D,OAAO,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAA;AAEtD,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACrE,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACpD,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;CACzD,CAAC,CAAA;AAEF,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,MAAM,EAAE,MAAM;CACf,CAAC,CAAA;AAEF,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,MAAM,EAAE,MAAM;CACf,CAAC,CAAA;AAEF,wEAAwE;AACxE,uEAAuE;AACvE,kEAAkE;AAClE,MAAM,gBAAgB,GAAG,aAAa,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAA;AASlE,MAAM,UAAU,qBAAqB,CAAC,IAAyB;IAC7D,MAAM,MAAM,GAAG,IAAI,IAAI,EAAE,CAAA;IAEzB,sEAAsE;IACtE,2EAA2E;IAC3E,qEAAqE;IACrE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,MAAM,EAAE,gBAAgB,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QACvE,MAAM,WAAW,GAAG,cAAc,CAAC,OAAO,CAAC,CAAA;QAC3C,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QACtC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,EAAE,WAAW,EAAE,GAAG,IAAI,EAAE,CAAC,CAAA;QAChF,OAAO,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,CAAA;IAC7C,CAAC,CAAC,CAAA;IAEF,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,OAAO,EAAE,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QACtE,MAAM,WAAW,GAAG,cAAc,CAAC,OAAO,CAAC,CAAA;QAC3C,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QAC5D,MAAM,QAAQ,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;QAC7F,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAA;QAC9F,OAAO,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,CAAA;IAC9E,CAAC,CAAC,CAAA;IAEF,MAAM,CAAC,GAAG,CAAC,cAAc,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAC3C,MAAM,WAAW,GAAG,cAAc,CAAC,OAAO,CAAC,CAAA;QAC3C,MAAM,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAA;QACpE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QAC/D,uBAAuB,CAAC,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE,UAAU,EAAE,UAAU,CAAC,CAAA;QAClF,OAAO,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAA;IACxC,CAAC,CAAC,CAAA;IAEF,yEAAyE;IACzE,yEAAyE;IACzE,6EAA6E;IAC7E,MAAM,CAAC,GAAG,CAAC,uBAAuB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QACpD,MAAM,WAAW,GAAG,cAAc,CAAC,OAAO,CAAC,CAAA;QAC3C,MAAM,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAA;QACpE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QAC/D,uBAAuB,CAAC,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE,UAAU,EAAE,UAAU,CAAC,CAAA;QAClF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QAC7D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,QAAQ,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAA;QAC7F,OAAO,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IAC7B,CAAC,CAAC,CAAA;IAEF,MAAM,CAAC,IAAI,CACT,oBAAoB,EACpB,UAAU,CAAC,MAAM,EAAE,eAAe,CAAC,EACnC,KAAK,EAAE,OAAO,EAAE,EAAE;QAChB,MAAM,WAAW,GAAG,cAAc,CAAC,OAAO,CAAC,CAAA;QAC3C,MAAM,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAA;QACpE,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QAC5C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QAC/D,uBAAuB,CAAC,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE,UAAU,EAAE,UAAU,CAAC,CAAA;QAClF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,UAAU,EAAE,MAAM,CAAC,CAAA;QACzE,OAAO,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IAC/B,CAAC,CACF,CAAA;IAED,MAAM,CAAC,IAAI,CACT,qBAAqB,EACrB,UAAU,CAAC,MAAM,EAAE,gBAAgB,CAAC,EACpC,KAAK,EAAE,OAAO,EAAE,EAAE;QAChB,MAAM,WAAW,GAAG,cAAc,CAAC,OAAO,CAAC,CAAA;QAC3C,MAAM,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAA;QACpE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QACpD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QAC/D,uBAAuB,CAAC,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE,UAAU,EAAE,UAAU,CAAC,CAAA;QAClF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,CAAA;QAClF,OAAO,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IAC/B,CAAC,CACF,CAAA;IAED,OAAO,MAAM,CAAA;AACf,CAAC"}

package/dist/routes/runs.d.ts

@@ -0,0 +1,9 @@
+import type { RunRepository, SkillRunner, WorkspaceRepository } from '@braidhq/core';
+import { Hono } from 'hono';
+export interface RunsRouterDeps {
+    readonly runRepository: RunRepository;
+    readonly skillRunner: SkillRunner;
+    readonly workspaceRepository: WorkspaceRepository;
+}
+export declare function createRunsRouter(deps: RunsRouterDeps): Hono;
+//# sourceMappingURL=runs.d.ts.map

package/dist/routes/runs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runs.d.ts","sourceRoot":"","sources":["../../src/routes/runs.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,aAAa,EACb,WAAW,EACX,mBAAmB,EACpB,MAAM,eAAe,CAAA;AAItB,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAM3B,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAA;IACrC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAA;IACjC,QAAQ,CAAC,mBAAmB,EAAE,mBAAmB,CAAA;CAClD;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,cAAc,GAAG,IAAI,CAyE3D"}

package/dist/routes/runs.js

@@ -0,0 +1,73 @@
+import { NotFoundError } from '@braidhq/core';
+import { SkillRunId } from '@braidhq/schema';
+import { Hono } from 'hono';
+import { streamSSE } from 'hono/streaming';
+import { createAsyncQueue } from '../infrastructure/agent/asyncQueue.js';
+import { getWorkspaceId } from '../middleware/workspaceId.js';
+import { loadWorkspaceById } from './helpers.js';
+export function createRunsRouter(deps) {
+    const router = new Hono();
+    router.get('/', async (context) => {
+        const workspace = await loadWorkspaceById(getWorkspaceId(context), deps.workspaceRepository);
+        const items = await deps.runRepository.listRecords(workspace);
+        return context.json({ items });
+    });
+    // Replay the persisted JSONL log and, if the run is still active, tail new
+    // events as they arrive. Clients can open / close / reopen this stream
+    // freely; the underlying subprocess and event log are not affected.
+    router.get('/:runId/events', async (context) => {
+        const workspace = await loadWorkspaceById(getWorkspaceId(context), deps.workspaceRepository);
+        const runId = SkillRunId.parse(context.req.param('runId'));
+        return streamSSE(context, async (stream) => {
+            if (!deps.skillRunner.isActive(runId)) {
+                for await (const event of deps.runRepository.readEvents(workspace, runId)) {
+                    await stream.writeSSE({ event: event.type, data: JSON.stringify(event) });
+                }
+                return;
+            }
+            // Subscribe BEFORE reading JSONL. positionAtSubscribe is the snapshot of
+            // how many events were already persisted, so we read exactly that many
+            // from disk and rely on the live listener for everything from there on.
+            const queue = createAsyncQueue();
+            const { unsubscribe, positionAtSubscribe } = deps.skillRunner.subscribe(runId, (event) => {
+                queue.push(event);
+            });
+            try {
+                let delivered = 0;
+                for await (const event of deps.runRepository.readEvents(workspace, runId)) {
+                    if (delivered >= positionAtSubscribe)
+                        break;
+                    await stream.writeSSE({ event: event.type, data: JSON.stringify(event) });
+                    delivered++;
+                }
+                for await (const event of queue.iterate()) {
+                    await stream.writeSSE({ event: event.type, data: JSON.stringify(event) });
+                    if (event.type === 'completed' || event.type === 'error') {
+                        queue.end();
+                        break;
+                    }
+                }
+            }
+            finally {
+                unsubscribe();
+            }
+        });
+    });
+    // SIGTERM the underlying claude subprocess. The drain loop emits a
+    // `completed` event with the actual exit code, which the SSE tailers
+    // receive normally. 404 if the run already finished.
+    router.post('/:runId/cancel', async (context) => {
+        const runId = SkillRunId.parse(context.req.param('runId'));
+        await deps.skillRunner.cancel(runId);
+        return context.body(null, 204);
+    });
+    router.delete('/sessions/:sessionId', async (context) => {
+        const sessionId = context.req.param('sessionId');
+        if (!sessionId)
+            throw new NotFoundError('sessionId is required');
+        await deps.skillRunner.forgetSession(sessionId);
+        return context.body(null, 204);
+    });
+    return router;
+}
+//# sourceMappingURL=runs.js.map