@cat-factory/node-server 0.143.0 → 0.144.1

package/dist/db/tables/identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.d.ts","sourceRoot":"","sources":["../../../src/db/tables/identity.ts"],"names":[],"mappings":"AA8BA,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAkBtB,CAAA;AAGD,eAAO,MAAM,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAcjB,CAAA;AAGD,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAkB1B,CAAA;AAED,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAuBpB,CAAA;AAED,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAgBvB,CAAA;AAKD,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAuB5B,CAAA;AAID,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAQ3B,CAAA;AAMF,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAO1B,CAAA;AAGF,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAiB9B,CAAA;AAID,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAiB/B,CAAA"}

package/dist/db/tables/identity.js

@@ -0,0 +1,176 @@
+import { sql } from 'drizzle-orm';
+import { bigint, doublePrecision, index, pgTable, primaryKey, text, uniqueIndex, } from 'drizzle-orm/pg-core';
+// ---------------------------------------------------------------------------
+// The TENANCY & IDENTITY tables, mirroring the Cloudflare D1 tables column-for-column
+// (snake_case field names = column names) exactly as the rest of the Node schema does.
+//
+// One cohesive group — who exists and what they belong to: the board (`workspaces`) and
+// person (`users`) roots every other table keys off, the login identities and account /
+// membership graph layered on them, the two roster-growth paths (`account_invitations`,
+// `password_reset_tokens`), and the per-account rows that configure a tenant
+// (`email_connections`, `account_settings`). Split out of `../schema.ts` so that module
+// stays inside its (shrink-only) size budget; `../schema.ts` re-exports everything here,
+// so every existing `from '../db/schema.js'` import is unaffected and drizzle-kit still
+// sees the tables through that entry point.
+//
+// This is also where the schema's FK targets live: `users.id` and `workspaces.id` are the
+// only two columns anything references. Keeping the referencing credential tables in
+// `../schema.ts` importing FROM here (rather than the reverse) is what keeps the module
+// graph acyclic.
+// ---------------------------------------------------------------------------
+export const workspaces = pgTable('workspaces', {
+    id: text('id').primaryKey(),
+    name: text('name').notNull(),
+    description: text('description'),
+    created_at: bigint('created_at', { mode: 'number' }).notNull(),
+    account_id: text('account_id'),
+    owner_user_id: text('owner_user_id'),
+    // Workspace RBAC access mode ('account' | 'restricted'); default preserves the legacy
+    // "every account member sees it" behaviour so no existing row changes.
+    access_mode: text('access_mode').notNull().default('account'),
+}, 
+// listVisible filters by owner_user_id (legacy) and account_id (membership scope).
+(t) => [
+    index('idx_workspaces_owner').on(t.owner_user_id),
+    index('idx_workspaces_account').on(t.account_id),
+]);
+// Canonical user identity (decoupled from GitHub). Everything else keys off users.id.
+export const users = pgTable('users', {
+    id: text('id').primaryKey(),
+    name: text('name'),
+    email: text('email'),
+    avatar_url: text('avatar_url'),
+    created_at: bigint('created_at', { mode: 'number' }).notNull(),
+}, (t) => [
+    uniqueIndex('idx_users_email')
+        .on(t.email)
+        .where(sql `email IS NOT NULL`),
+]);
+// A linked login identity for a user. (provider, subject) is unique.
+export const userIdentities = pgTable('user_identities', {
+    // ON DELETE RESTRICT: a users row can't be removed while a login identity still points
+    // at it — the DB-level guard against the dangling-identity orphaning incident.
+    user_id: text('user_id')
+        .notNull()
+        .references(() => users.id, { onDelete: 'restrict' }),
+    provider: text('provider').notNull(),
+    subject: text('subject').notNull(),
+    secret: text('secret'),
+    metadata: text('metadata'),
+    created_at: bigint('created_at', { mode: 'number' }).notNull(),
+}, (t) => [
+    primaryKey({ columns: [t.provider, t.subject] }),
+    index('idx_user_identities_user').on(t.user_id),
+]);
+export const accounts = pgTable('accounts', {
+    id: text('id').primaryKey(),
+    type: text('type').notNull(),
+    name: text('name').notNull(),
+    github_account_login: text('github_account_login'),
+    // The user who owns a personal account (its account-of-one). Null for orgs.
+    // ON DELETE RESTRICT: can't drop a user that still owns a personal account.
+    owner_user_id: text('owner_user_id').references(() => users.id, { onDelete: 'restrict' }),
+    created_at: bigint('created_at', { mode: 'number' }).notNull(),
+    // The default cloud provider new services in this account inherit.
+    default_cloud_provider: text('default_cloud_provider'),
+    // The account-tier monthly spend budget (base pricing currency). Null = none.
+    spend_monthly_limit: doublePrecision('spend_monthly_limit'),
+}, 
+// Enforce one personal account per user (a correctness constraint, not just a
+// lookup index) — the partial unique index `findPersonalByUser` relies on.
+(t) => [
+    uniqueIndex('idx_accounts_personal')
+        .on(t.owner_user_id)
+        .where(sql `type = 'personal'`),
+]);
+export const memberships = pgTable('memberships', {
+    account_id: text('account_id').notNull(),
+    // ON DELETE RESTRICT: a users row can't be removed while it still holds a membership.
+    user_id: text('user_id')
+        .notNull()
+        .references(() => users.id, { onDelete: 'restrict' }),
+    // Combinable roles (admin / developer / product) as a CSV; defaults to developer.
+    roles: text('roles').notNull().default('developer'),
+    created_at: bigint('created_at', { mode: 'number' }).notNull(),
+}, (t) => [
+    primaryKey({ columns: [t.account_id, t.user_id] }),
+    index('idx_memberships_user').on(t.user_id),
+]);
+// Workspace membership (workspace RBAC, migration 0052). Scopes a user to a board with a
+// single-valued workspace role; a restricted board reads it as the sole grant, an
+// account-mode board honours it as an upgrade-only overlay.
+export const workspaceMembers = pgTable('workspace_members', {
+    // ON DELETE CASCADE: a deleted board takes its roster (the Drizzle FK; the D1 side
+    // relies on the workspace-delete cascade list since D1 doesn't enforce FKs).
+    workspace_id: text('workspace_id')
+        .notNull()
+        .references(() => workspaces.id, { onDelete: 'cascade' }),
+    // ON DELETE RESTRICT: mirrors memberships.user_id — can't drop a user with a live row.
+    user_id: text('user_id')
+        .notNull()
+        .references(() => users.id, { onDelete: 'restrict' }),
+    // Single value: admin | member | viewer (a strict hierarchy, not a CSV set).
+    role: text('role').notNull(),
+    created_at: bigint('created_at', { mode: 'number' }).notNull(),
+    // Audit: who granted the row; null for system grants (creator auto-enroll). No FK.
+    added_by_user_id: text('added_by_user_id'),
+}, (t) => [
+    primaryKey({ columns: [t.workspace_id, t.user_id] }),
+    // Drives listWorkspaceIdsForUser + the visibility subquery.
+    index('idx_workspace_members_user').on(t.user_id),
+]);
+// Per-account transactional-email sender (UI-onboarded). The provider API key is
+// sealed at rest (SecretCipher), never plaintext.
+export const emailConnections = pgTable('email_connections', {
+    account_id: text('account_id').primaryKey(),
+    provider: text('provider').notNull(),
+    from_address: text('from_address').notNull(),
+    api_key_cipher: text('api_key_cipher').notNull(),
+    created_at: bigint('created_at', { mode: 'number' }).notNull(),
+    updated_at: bigint('updated_at', { mode: 'number' }).notNull(),
+    deleted_at: bigint('deleted_at', { mode: 'number' }),
+});
+// Per-account (deployment-wide) settings, moved out of env (mirror of D1 migration 0014's
+// `account_settings`). `config` is non-secret tuning JSON; `secrets_cipher` is ONE sealed
+// blob grouping every integration credential (domain tag 'cat-factory:account-settings');
+// `summary` is non-secret presence JSON. A missing row means all defaults.
+export const accountSettings = pgTable('account_settings', {
+    account_id: text('account_id').primaryKey(),
+    config: text('config').notNull(),
+    secrets_cipher: text('secrets_cipher'),
+    summary: text('summary').notNull().default('{}'),
+    created_at: bigint('created_at', { mode: 'number' }).notNull(),
+    updated_at: bigint('updated_at', { mode: 'number' }).notNull(),
+});
+// Email invitations into an org account. Only the token's hash is stored.
+export const accountInvitations = pgTable('account_invitations', {
+    id: text('id').primaryKey(),
+    account_id: text('account_id').notNull(),
+    email: text('email').notNull(),
+    roles: text('roles').notNull().default('developer'),
+    token_hash: text('token_hash').notNull(),
+    invited_by: text('invited_by').notNull(),
+    status: text('status').notNull().default('pending'),
+    expires_at: bigint('expires_at', { mode: 'number' }).notNull(),
+    created_at: bigint('created_at', { mode: 'number' }).notNull(),
+}, (t) => [
+    index('idx_account_invitations_account').on(t.account_id),
+    uniqueIndex('idx_account_invitations_token').on(t.token_hash),
+]);
+// Password-reset tokens ("forgot my password"). Only the SHA-256 token hash is stored;
+// single-use (status flips to 'used') and expiring. Mirrors the D1 table.
+export const passwordResetTokens = pgTable('password_reset_tokens', {
+    id: text('id').primaryKey(),
+    user_id: text('user_id').notNull(),
+    token_hash: text('token_hash').notNull(),
+    status: text('status').notNull().default('pending'),
+    expires_at: bigint('expires_at', { mode: 'number' }).notNull(),
+    created_at: bigint('created_at', { mode: 'number' }).notNull(),
+}, (t) => [
+    uniqueIndex('idx_password_reset_tokens_token').on(t.token_hash),
+    index('idx_password_reset_tokens_user').on(t.user_id, t.status),
+    // `deleteExpired` sweeps on `expires_at < ?`; index it like every other TTL column
+    // (idx_environments_expiry / idx_personal_subs_expiry) so the sweep isn't a full scan.
+    index('idx_password_reset_tokens_expiry').on(t.expires_at),
+]);
+//# sourceMappingURL=identity.js.map

package/dist/db/tables/identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.js","sourceRoot":"","sources":["../../../src/db/tables/identity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAA;AACjC,OAAO,EACL,MAAM,EACN,eAAe,EACf,KAAK,EACL,OAAO,EACP,UAAU,EACV,IAAI,EACJ,WAAW,GACZ,MAAM,qBAAqB,CAAA;AAE5B,8EAA8E;AAC9E,sFAAsF;AACtF,uFAAuF;AACvF,EAAE;AACF,wFAAwF;AACxF,wFAAwF;AACxF,wFAAwF;AACxF,6EAA6E;AAC7E,wFAAwF;AACxF,yFAAyF;AACzF,wFAAwF;AACxF,4CAA4C;AAC5C,EAAE;AACF,0FAA0F;AAC1F,qFAAqF;AACrF,wFAAwF;AACxF,iBAAiB;AACjB,8EAA8E;AAE9E,MAAM,CAAC,MAAM,UAAU,GAAG,OAAO,CAC/B,YAAY,EACZ;IACE,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE;IAC3B,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE;IAC5B,WAAW,EAAE,IAAI,CAAC,aAAa,CAAC;IAChC,UAAU,EAAE,MAAM,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;IAC9D,UAAU,EAAE,IAAI,CAAC,YAAY,CAAC;IAC9B,aAAa,EAAE,IAAI,CAAC,eAAe,CAAC;IACpC,sFAAsF;IACtF,uEAAuE;IACvE,WAAW,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC;CAC9D;AACD,mFAAmF;AACnF,CAAC,CAAC,EAAE,EAAE,CAAC;IACL,KAAK,CAAC,sBAAsB,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC;IACjD,KAAK,CAAC,wBAAwB,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC;CACjD,CACF,CAAA;AAED,sFAAsF;AACtF,MAAM,CAAC,MAAM,KAAK,GAAG,OAAO,CAC1B,OAAO,EACP;IACE,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE;IAC3B,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC;IAClB,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC;IACpB,UAAU,EAAE,IAAI,CAAC,YAAY,CAAC;IAC9B,UAAU,EAAE,MAAM,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;CAC/D,EACD,CAAC,CAAC,EAAE,EAAE,CAAC;IACL,WAAW,CAAC,iBAAiB,CAAC;SAC3B,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;SACX,KAAK,CAAC,GAAG,CAAA,mBAAmB,CAAC;CACjC,CACF,CAAA;AAED,qEAAqE;AACrE,MAAM,CAAC,MAAM,cAAc,GAAG,OAAO,CACnC,iBAAiB,EACjB;IACE,uFAAuF;IACvF,+EAA+E;IAC/E,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC;SACrB,OAAO,EAAE;SACT,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;IACvD,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;IACpC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;IAClC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC;IACtB,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;CAC/D,EACD,CAAC,CAAC,EAAE,EAAE,CAAC;IACL,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAChD,KAAK,CAAC,0BAA0B,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;CAChD,CACF,CAAA;AAED,MAAM,CAAC,MAAM,QAAQ,GAAG,OAAO,CAC7B,UAAU,EACV;IACE,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE;IAC3B,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE;IAC5B,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE;IAC5B,oBAAoB,EAAE,IAAI,CAAC,sBAAsB,CAAC;IAClD,4EAA4E;IAC5E,4EAA4E;IAC5E,aAAa,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;IACzF,UAAU,EAAE,MAAM,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;IAC9D,mEAAmE;IACnE,sBAAsB,EAAE,IAAI,CAAC,wBAAwB,CAAC;IACtD,8EAA8E;IAC9E,mBAAmB,EAAE,eAAe,CAAC,qBAAqB,CAAC;CAC5D;AACD,8EAA8E;AAC9E,2EAA2E;AAC3E,CAAC,CAAC,EAAE,EAAE,CAAC;IACL,WAAW,CAAC,uBAAuB,CAAC;SACjC,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC;SACnB,KAAK,CAAC,GAAG,CAAA,mBAAmB,CAAC;CACjC,CACF,CAAA;AAED,MAAM,CAAC,MAAM,WAAW,GAAG,OAAO,CAChC,aAAa,EACb;IACE,UAAU,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;IACxC,sFAAsF;IACtF,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC;SACrB,OAAO,EAAE;SACT,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;IACvD,kFAAkF;IAClF,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC;IACnD,UAAU,EAAE,MAAM,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;CAC/D,EACD,CAAC,CAAC,EAAE,EAAE,CAAC;IACL,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAClD,KAAK,CAAC,sBAAsB,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;CAC5C,CACF,CAAA;AAED,yFAAyF;AACzF,kFAAkF;AAClF,4DAA4D;AAC5D,MAAM,CAAC,MAAM,gBAAgB,GAAG,OAAO,CACrC,mBAAmB,EACnB;IACE,mFAAmF;IACnF,6EAA6E;IAC7E,YAAY,EAAE,IAAI,CAAC,cAAc,CAAC;SAC/B,OAAO,EAAE;SACT,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IAC3D,uFAAuF;IACvF,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC;SACrB,OAAO,EAAE;SACT,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;IACvD,6EAA6E;IAC7E,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE;IAC5B,UAAU,EAAE,MAAM,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;IAC9D,mFAAmF;IACnF,gBAAgB,EAAE,IAAI,CAAC,kBAAkB,CAAC;CAC3C,EACD,CAAC,CAAC,EAAE,EAAE,CAAC;IACL,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACpD,4DAA4D;IAC5D,KAAK,CAAC,4BAA4B,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;CAClD,CACF,CAAA;AAED,iFAAiF;AACjF,kDAAkD;AAClD,MAAM,CAAC,MAAM,gBAAgB,GAAG,OAAO,CAAC,mBAAmB,EAAE;IAC3D,UAAU,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,UAAU,EAAE;IAC3C,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;IACpC,YAAY,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE;IAC5C,cAAc,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC,OAAO,EAAE;IAChD,UAAU,EAAE,MAAM,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;IAC9D,UAAU,EAAE,MAAM,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;IAC9D,UAAU,EAAE,MAAM,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;CACrD,CAAC,CAAA;AAEF,0FAA0F;AAC1F,0FAA0F;AAC1F,0FAA0F;AAC1F,2EAA2E;AAC3E,MAAM,CAAC,MAAM,eAAe,GAAG,OAAO,CAAC,kBAAkB,EAAE;IACzD,UAAU,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,UAAU,EAAE;IAC3C,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE;IAChC,cAAc,EAAE,IAAI,CAAC,gBAAgB,CAAC;IACtC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAChD,UAAU,EAAE,MAAM,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;IAC9D,UAAU,EAAE,MAAM,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;CAC/D,CAAC,CAAA;AAEF,0EAA0E;AAC1E,MAAM,CAAC,MAAM,kBAAkB,GAAG,OAAO,CACvC,qBAAqB,EACrB;IACE,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE;IAC3B,UAAU,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;IACxC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE;IAC9B,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC;IACnD,UAAU,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;IACxC,UAAU,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;IACxC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC;IACnD,UAAU,EAAE,MAAM,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;IAC9D,UAAU,EAAE,MAAM,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;CAC/D,EACD,CAAC,CAAC,EAAE,EAAE,CAAC;IACL,KAAK,CAAC,iCAAiC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC;IACzD,WAAW,CAAC,+BAA+B,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC;CAC9D,CACF,CAAA;AAED,uFAAuF;AACvF,0EAA0E;AAC1E,MAAM,CAAC,MAAM,mBAAmB,GAAG,OAAO,CACxC,uBAAuB,EACvB;IACE,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE;IAC3B,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;IAClC,UAAU,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;IACxC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC;IACnD,UAAU,EAAE,MAAM,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;IAC9D,UAAU,EAAE,MAAM,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;CAC/D,EACD,CAAC,CAAC,EAAE,EAAE,CAAC;IACL,WAAW,CAAC,iCAAiC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC;IAC/D,KAAK,CAAC,gCAAgC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;IAC/D,mFAAmF;IACnF,uFAAuF;IACvF,KAAK,CAAC,kCAAkC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC;CAC3D,CACF,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cat-factory/node-server",
-  "version": "0.143.0",
+  "version": "0.144.1",
   "description": "Node.js runtime facade for the Agent Architecture Board: serves the shared @cat-factory/server Hono app via @hono/node-server, wiring Node implementations of the runtime ports (persistence, gateways, model provisioning).",
   "repository": {
     "type": "git",
@@ -33,24 +33,24 @@
     "pg-boss": "^12.26.3",
     "toad-scheduler": "^4.1.0",
     "ws": "^8.21.1",
-    "@cat-factory/agents": "0.93.0",
-    "@cat-factory/caching": "0.11.29",
-    "@cat-factory/consensus": "0.13.9",
+    "@cat-factory/agents": "0.94.0",
+    "@cat-factory/caching": "0.11.30",
+    "@cat-factory/consensus": "0.13.10",
     "@cat-factory/contracts": "0.202.0",
-    "@cat-factory/eks": "0.1.182",
-    "@cat-factory/gates": "0.8.29",
-    "@cat-factory/gitlab": "0.14.12",
-    "@cat-factory/integrations": "0.113.3",
-    "@cat-factory/kernel": "0.200.0",
-    "@cat-factory/observability-langfuse": "0.9.26",
-    "@cat-factory/orchestration": "0.176.0",
-    "@cat-factory/observability-otel": "0.4.26",
+    "@cat-factory/eks": "0.1.184",
+    "@cat-factory/gates": "0.8.30",
+    "@cat-factory/gitlab": "0.14.13",
+    "@cat-factory/integrations": "0.113.5",
+    "@cat-factory/kernel": "0.201.0",
+    "@cat-factory/observability-langfuse": "0.9.27",
+    "@cat-factory/observability-otel": "0.4.27",
+    "@cat-factory/orchestration": "0.177.1",
     "@cat-factory/prompt-fragments": "0.15.25",
-    "@cat-factory/provider-bedrock": "0.7.334",
-    "@cat-factory/provider-cloudflare": "0.7.335",
-    "@cat-factory/provider-s3": "0.2.254",
-    "@cat-factory/server": "0.185.0",
-    "@cat-factory/spend": "0.12.130"
+    "@cat-factory/provider-bedrock": "0.7.335",
+    "@cat-factory/provider-cloudflare": "0.7.336",
+    "@cat-factory/provider-s3": "0.2.255",
+    "@cat-factory/server": "0.185.2",
+    "@cat-factory/spend": "0.12.131"
   },
   "devDependencies": {
     "@types/node": "^26.1.1",
@@ -59,7 +59,7 @@
     "drizzle-kit": "1.0.0-rc.4",
     "typescript": "7.0.2",
     "vitest": "^4.1.10",
-    "@cat-factory/conformance": "0.16.9"
+    "@cat-factory/conformance": "0.16.11"
   },
   "optionalDependencies": {
     "ioredis": "^5.11.1"