@cat-factory/server 0.323.0 → 0.325.0

package/dist/modules/publicApi/runProjection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runProjection.d.ts","sourceRoot":"","sources":["../../../src/modules/publicApi/runProjection.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,iBAAiB,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAA;AAC5F,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAA;AACnC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAe/C;;;;;;;GAOG;AACH,wBAAgB,WAAW,CACzB,SAAS,EAAE,iBAAiB,EAC5B,cAAc,EAAE,MAAM,GAAG,IAAI,GAC5B,SAAS,CAwCX;AAED;;;;;;;GAOG;AACH,wBAAgB,WAAW,CACzB,SAAS,EAAE,iBAAiB,EAC5B,KAAK,EAAE,KAAK,EACZ,cAAc,EAAE,MAAM,GAAG,IAAI,GAC5B,SAAS,CA4CX;AAED;;;;;;GAMG;AACH,wBAAsB,aAAa,CAAC,CAAC,SAAS,MAAM,EAClD,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,EACb,WAAW,EAAE,MAAM,EACnB,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAMnC"}

package/dist/modules/publicApi/runProjection.js

@@ -0,0 +1,127 @@
+import { jobSortKey, mapStatus } from './publicApiPaging.js';
+import { viewRunIdentity } from './runIdentityVisibility.js';
+// The two RUN projections the public surface serves, plus the scoped load behind the job half.
+//
+// Extracted from `PublicApiController` because they have three consumers rather than one: the
+// point reads in that controller, the two SSE loops in `publicApiStreamRoutes.ts`, and (through
+// the stream) the decision channel. Keeping them there would have made the stream file import the
+// controller that registers it.
+//
+// Both are PURE functions of the run plus the reading key's identity, which is what lets an SSE
+// loop render frame after frame without a second read: see `runIdentityVisibility.ts` for why the
+// reader is a parameter rather than something looked up in here.
+/**
+ * Project a persisted execution onto the external job resource (no block/board internals).
+ *
+ * Takes the READING key's own identity because the run's pinned one is not visible to every key
+ * (`runIdentityVisibility.ts` holds the rule and why there is one). Passed as a parameter rather
+ * than read off the context here, so the projection stays a pure function of the run plus the
+ * caller and the SSE loops can render frame after frame without re-reading anything.
+ */
+export function toPublicJob(execution, readerIdentity) {
+    const status = mapStatus(execution.status);
+    const identity = viewRunIdentity(execution.initiatedByExternalIdentity, readerIdentity);
+    // The deliverable is the LAST step that actually produced output, normally the terminal step,
+    // but scanning from the end keeps the result meaningful for a multi-step public pipeline whose
+    // final step is a side-effect-only tail that emits nothing (the built-in initiative pipeline is
+    // single-step, so this simply picks that step). Fall back to the terminal step so a `succeeded`
+    // run always carries a (possibly empty) result rather than null.
+    const withOutput = [...execution.steps]
+        .reverse()
+        .find((s) => (s.output ?? '') !== '' || s.custom != null);
+    const deliverable = withOutput ?? execution.steps[execution.steps.length - 1];
+    const result = status === 'succeeded' && deliverable
+        ? { output: deliverable.output ?? '', data: deliverable.custom ?? null }
+        : null;
+    const error = status === 'failed'
+        ? execution.failure
+            ? { code: execution.failure.kind, message: execution.failure.message }
+            : { code: 'run_failed', message: 'The run failed' }
+        : null;
+    return {
+        jobId: execution.id,
+        status,
+        pipelineId: execution.pipelineId,
+        // Pinned at admission from the starting key, so it survives that key's revocation and costs
+        // this projection no lookup (`toPublicJob` also renders every row of a paged list). Withheld
+        // from a key that acts for someone else, which the flag STATES rather than blanking to a
+        // `null` that already means "this run names nobody". Named field by field rather than spread,
+        // for the reason `keyProjection.ts` gives: a spread is exempt from excess-property checking,
+        // so a member added to the view type later would reach the wire with nothing to stop it.
+        externalIdentity: identity.externalIdentity,
+        externalIdentityWithheld: identity.externalIdentityWithheld,
+        // The run's own creation stamp: the SAME value the list's keyset cursor is minted from
+        // (`jobSortKey`), so a caller can page and correlate on one consistent number.
+        createdAt: jobSortKey(execution),
+        result,
+        error,
+    };
+}
+/**
+ * Project a task's persisted run + its block onto the RICH external run resource: per-step
+ * state/progress/subtasks, the failure kind+message, and the PR (url + branch). The run's
+ * `status` is the raw execution status (`running`/`blocked`/`paused`/`done`/`failed`): the
+ * public run view deliberately surfaces the parked states (unlike the coarse `publicJob`), so
+ * a caller can tell an awaiting-a-human `blocked` from a still-`running` step. The PR branch
+ * lives on the BLOCK (`block.pullRequest`), not the run, so both are joined here.
+ */
+export function toPublicRun(execution, block, readerIdentity) {
+    const pr = block.pullRequest;
+    const identity = viewRunIdentity(execution.initiatedByExternalIdentity, readerIdentity);
+    return {
+        runId: execution.id,
+        taskId: block.id,
+        status: execution.status,
+        createdAt: jobSortKey(execution),
+        currentStep: execution.currentStep,
+        steps: execution.steps.map((s) => ({
+            agentKind: s.agentKind,
+            state: s.state,
+            progress: s.progress,
+            subtasks: s.subtasks
+                ? {
+                    completed: s.subtasks.completed,
+                    inProgress: s.subtasks.inProgress,
+                    total: s.subtasks.total,
+                }
+                : null,
+            // The step's deliverable. An EMPTY output is projected as null, matching the way
+            // `toPublicJob` reads "produced something": a step that ran and wrote nothing and a step
+            // that has not run yet are the same fact to a caller reading for a result, and the step's
+            // own `state` is what distinguishes them.
+            output: (s.output ?? '') === '' ? null : (s.output ?? null),
+            data: s.custom ?? null,
+            // Only when true: a step that RAN carries no flag at all, so the field never has to be read
+            // as "false, and also this run is old enough to predate the projection".
+            ...(s.skipped ? { skipped: true } : {}),
+        })),
+        // Who the run was started for, as pinned at admission; null for a run the app, a schedule or
+        // an identity-less key started, and withheld (flagged, not blanked) from a key that acts for
+        // someone else. See `runIdentityVisibility.ts`, and `toPublicJob` for why both members are
+        // named rather than spread.
+        externalIdentity: identity.externalIdentity,
+        externalIdentityWithheld: identity.externalIdentityWithheld,
+        pullRequest: pr ? { url: pr.url, branch: pr.branch ?? null } : null,
+        error: execution.status === 'failed'
+            ? execution.failure
+                ? { code: execution.failure.kind, message: execution.failure.message }
+                : { code: 'run_failed', message: 'The run failed' }
+            : null,
+    };
+}
+/**
+ * Load a public JOB by id for an authenticated key: the persisted execution, but ONLY when it is
+ * anchored on a HEADLESS internal block (a run this public surface created). Returns null when no
+ * such run exists in the key's workspace OR the id points at a normal board execution, so an
+ * external key can never read an arbitrary in-workspace run's output, only its own headless jobs.
+ * Runtime-symmetric: one `executionRepository.get` + one `boardService.getInternalTask` point-read.
+ */
+export async function loadPublicJob(c, workspaceId, id) {
+    const container = c.get('container');
+    const execution = await container.executionRepository.get(workspaceId, id);
+    if (!execution)
+        return null;
+    const anchor = await container.boardService.getInternalTask(workspaceId, execution.blockId);
+    return anchor ? execution : null;
+}
+//# sourceMappingURL=runProjection.js.map

package/dist/modules/publicApi/runProjection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runProjection.js","sourceRoot":"","sources":["../../../src/modules/publicApi/runProjection.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAA;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAA;AAE5D,+FAA+F;AAC/F,EAAE;AACF,8FAA8F;AAC9F,gGAAgG;AAChG,kGAAkG;AAClG,gCAAgC;AAChC,EAAE;AACF,gGAAgG;AAChG,kGAAkG;AAClG,iEAAiE;AAEjE;;;;;;;GAOG;AACH,MAAM,UAAU,WAAW,CACzB,SAA4B,EAC5B,cAA6B;IAE7B,MAAM,MAAM,GAAG,SAAS,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;IAC1C,MAAM,QAAQ,GAAG,eAAe,CAAC,SAAS,CAAC,2BAA2B,EAAE,cAAc,CAAC,CAAA;IACvF,8FAA8F;IAC9F,+FAA+F;IAC/F,gGAAgG;IAChG,gGAAgG;IAChG,iEAAiE;IACjE,MAAM,UAAU,GAAG,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC;SACpC,OAAO,EAAE;SACT,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC,CAAA;IAC3D,MAAM,WAAW,GAAG,UAAU,IAAI,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IAC7E,MAAM,MAAM,GACV,MAAM,KAAK,WAAW,IAAI,WAAW;QACnC,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,IAAI,EAAE,EAAE,IAAI,EAAE,WAAW,CAAC,MAAM,IAAI,IAAI,EAAE;QACxE,CAAC,CAAC,IAAI,CAAA;IACV,MAAM,KAAK,GACT,MAAM,KAAK,QAAQ;QACjB,CAAC,CAAC,SAAS,CAAC,OAAO;YACjB,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE;YACtE,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,gBAAgB,EAAE;QACrD,CAAC,CAAC,IAAI,CAAA;IACV,OAAO;QACL,KAAK,EAAE,SAAS,CAAC,EAAE;QACnB,MAAM;QACN,UAAU,EAAE,SAAS,CAAC,UAAU;QAChC,4FAA4F;QAC5F,6FAA6F;QAC7F,yFAAyF;QACzF,8FAA8F;QAC9F,6FAA6F;QAC7F,yFAAyF;QACzF,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB;QAC3C,wBAAwB,EAAE,QAAQ,CAAC,wBAAwB;QAC3D,uFAAuF;QACvF,+EAA+E;QAC/E,SAAS,EAAE,UAAU,CAAC,SAAS,CAAC;QAChC,MAAM;QACN,KAAK;KACN,CAAA;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,WAAW,CACzB,SAA4B,EAC5B,KAAY,EACZ,cAA6B;IAE7B,MAAM,EAAE,GAAG,KAAK,CAAC,WAAW,CAAA;IAC5B,MAAM,QAAQ,GAAG,eAAe,CAAC,SAAS,CAAC,2BAA2B,EAAE,cAAc,CAAC,CAAA;IACvF,OAAO;QACL,KAAK,EAAE,SAAS,CAAC,EAAE;QACnB,MAAM,EAAE,KAAK,CAAC,EAAE;QAChB,MAAM,EAAE,SAAS,CAAC,MAAM;QACxB,SAAS,EAAE,UAAU,CAAC,SAAS,CAAC;QAChC,WAAW,EAAE,SAAS,CAAC,WAAW;QAClC,KAAK,EAAE,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACjC,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBAClB,CAAC,CAAC;oBACE,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,SAAS;oBAC/B,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,UAAU;oBACjC,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK;iBACxB;gBACH,CAAC,CAAC,IAAI;YACR,iFAAiF;YACjF,yFAAyF;YACzF,0FAA0F;YAC1F,0CAA0C;YAC1C,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC;YAC3D,IAAI,EAAE,CAAC,CAAC,MAAM,IAAI,IAAI;YACtB,4FAA4F;YAC5F,yEAAyE;YACzE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxC,CAAC,CAAC;QACH,6FAA6F;QAC7F,6FAA6F;QAC7F,2FAA2F;QAC3F,4BAA4B;QAC5B,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB;QAC3C,wBAAwB,EAAE,QAAQ,CAAC,wBAAwB;QAC3D,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI;QACnE,KAAK,EACH,SAAS,CAAC,MAAM,KAAK,QAAQ;YAC3B,CAAC,CAAC,SAAS,CAAC,OAAO;gBACjB,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE;gBACtE,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,gBAAgB,EAAE;YACrD,CAAC,CAAC,IAAI;KACX,CAAA;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,CAAa,EACb,WAAmB,EACnB,EAAU;IAEV,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;IACpC,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,mBAAmB,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC,CAAA;IAC1E,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAA;IAC3B,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,YAAY,CAAC,eAAe,CAAC,WAAW,EAAE,SAAS,CAAC,OAAO,CAAC,CAAA;IAC3F,OAAO,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAA;AAClC,CAAC"}

package/dist/modules/publicApi/taskCreation.d.ts

@@ -8,6 +8,8 @@ export interface PublicTaskCreationDeps {
     taskTypeRegistry: ServerContainer['taskTypeRegistry'];
     tasks: ServerContainer['tasks'];
     documents: ServerContainer['documents'];
+    /** The merged best-practice catalog a named `fragmentIds` is checked against; absent ⇒ a 503. */
+    fragmentLibrary: ServerContainer['fragmentLibrary'];
     logger: Logger;
 }
 /** Read the collaborators this module drives off the request's container. */

package/dist/modules/publicApi/taskCreation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"taskCreation.d.ts","sourceRoot":"","sources":["../../../src/modules/publicApi/taskCreation.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,KAAK,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAA;AAC1E,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAA;AACjD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AAyBxD,4DAA4D;AAC5D,MAAM,WAAW,sBAAsB;IACrC,YAAY,EAAE,eAAe,CAAC,cAAc,CAAC,CAAA;IAC7C,iGAAiG;IACjG,gBAAgB,EAAE,eAAe,CAAC,kBAAkB,CAAC,CAAA;IACrD,KAAK,EAAE,eAAe,CAAC,OAAO,CAAC,CAAA;IAC/B,SAAS,EAAE,eAAe,CAAC,WAAW,CAAC,CAAA;IACvC,MAAM,EAAE,MAAM,CAAA;CACf;AAED,6EAA6E;AAC7E,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,eAAe,GAAG,sBAAsB,CAQnF;AAED;;;;;;;GAOG;AACH,wBAAsB,yBAAyB,CAC7C,IAAI,EAAE,sBAAsB,EAC5B,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,qBAAqB,GAC1B,OAAO,CAAC,KAAK,CAAC,CAgDhB"}
+{"version":3,"file":"taskCreation.d.ts","sourceRoot":"","sources":["../../../src/modules/publicApi/taskCreation.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,KAAK,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAA;AAC1E,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAA;AACjD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AAsCxD,4DAA4D;AAC5D,MAAM,WAAW,sBAAsB;IACrC,YAAY,EAAE,eAAe,CAAC,cAAc,CAAC,CAAA;IAC7C,iGAAiG;IACjG,gBAAgB,EAAE,eAAe,CAAC,kBAAkB,CAAC,CAAA;IACrD,KAAK,EAAE,eAAe,CAAC,OAAO,CAAC,CAAA;IAC/B,SAAS,EAAE,eAAe,CAAC,WAAW,CAAC,CAAA;IACvC,iGAAiG;IACjG,eAAe,EAAE,eAAe,CAAC,iBAAiB,CAAC,CAAA;IACnD,MAAM,EAAE,MAAM,CAAA;CACf;AAED,6EAA6E;AAC7E,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,eAAe,GAAG,sBAAsB,CASnF;AAED;;;;;;;GAOG;AACH,wBAAsB,yBAAyB,CAC7C,IAAI,EAAE,sBAAsB,EAC5B,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,qBAAqB,GAC1B,OAAO,CAAC,KAAK,CAAC,CAsDhB"}

package/dist/modules/publicApi/taskCreation.js

@@ -1,5 +1,6 @@
 import { UNATTRIBUTED_BLOCK_EDIT_AUTHORITY } from '@cat-factory/contracts';
 import { releaseUnattachedTask, resolveDocuments } from './documentAttachment.js';
+import { assertFragmentsResolvable } from './fragmentCatalog.js';
 import { resolveTaskTypeFields } from './taskTypeFields.js';
 import { resolveTicket } from './ticketLinkage.js';
 /** Read the collaborators this module drives off the request's container. */
@@ -9,6 +10,7 @@ export function taskCreationDeps(container) {
         taskTypeRegistry: container.taskTypeRegistry,
         tasks: container.tasks,
         documents: container.documents,
+        fragmentLibrary: container.fragmentLibrary,
         logger: container.logger,
     };
 }
@@ -26,19 +28,25 @@ export async function createTaskWithAttachments(deps, workspaceId, serviceId, bo
     // is a pure, deterministic refusal, so it must land ahead of the outbound ticket/document
     // fetches, exactly like the container check below.
     const taskTypeFields = resolveTaskTypeFields(body, deps.taskTypeRegistry);
-    // `modelPresetId` and `riskPolicyId` ride the spread because the public surface spells them
-    // exactly as `AddTaskInput` does, which is the ONE reason a spread is safe here and is pinned by
-    // `blockEditAuthority.coverage.spec.ts`. Whether either id names a real row is `addServiceTask`'s
-    // to refuse, on the service where every other door reaches it too (`presetPinGuard.ts`).
+    // The container is checked before anything is fetched, read per workspace, or written, and
+    // UNCONDITIONALLY, not only when there is an outbound fetch to save. A `serviceId` that names
+    // nothing is the caller's most basic mistake, and every refusal that runs ahead of it answers a
+    // request about a service that does not exist by complaining about something else: a typo'd
+    // path carrying an unknown standard would come back `422 prompt_fragment_not_found`, telling the
+    // integrator its service was fine and sending it to fix the wrong end. `addServiceTask`
+    // re-applies the same rule (it is the one that must hold at the moment of the write); this moves
+    // the cheap, deterministic half of it in front of everything.
+    await deps.boardService.assertTaskContainer(workspaceId, serviceId);
+    // Then the standards: one the workspace does not resolve is refused before anything is fetched
+    // or written. See `fragmentCatalog.ts` for why the run path's "drop a stale id" is the wrong
+    // disposition for a list a caller just named.
+    await assertFragmentsResolvable(deps.fragmentLibrary, workspaceId, body.fragmentIds);
+    // `modelPresetId`, `riskPolicyId` and `fragmentIds` ride the spread because the public surface
+    // spells each exactly as `AddTaskInput` does, which is the ONE reason a spread is safe here and
+    // is pinned by `blockEditAuthority.coverage.spec.ts`. Whether the two PINS name a real row is
+    // `addServiceTask`'s to refuse, on the service where every other door reaches it too
+    // (`presetPinGuard.ts`); the standards were settled a few lines up, at this door.
     const input = { ...rest, ...(taskTypeFields ? { taskTypeFields } : {}) };
-    if (ticket || documents?.length) {
-        // The container is checked FIRST because resolving a ticket or a source document is an
-        // outbound call to the workspace's own tracker/wiki: a bad `serviceId` should be answered by
-        // the 404 it could have had for free, not paid for with a live third-party fetch.
-        // `addServiceTask` re-applies the same rule (it is the one that must hold at the moment of the
-        // write); this only moves the cheap, deterministic half of it in front of the expensive work.
-        await deps.boardService.assertTaskContainer(workspaceId, serviceId);
-    }
     const linkage = ticket ? await resolveTicket(deps, workspaceId, ticket) : null;
     const attachment = documents?.length ? await resolveDocuments(deps, workspaceId, documents) : null;
     // Unattributed by the same reading the headless RUN start gets (ADR 0037): an API key holds

package/dist/modules/publicApi/taskCreation.js.map

@@ -1 +1 @@
-{"version":3,"file":"taskCreation.js","sourceRoot":"","sources":["../../../src/modules/publicApi/taskCreation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iCAAiC,EAAE,MAAM,wBAAwB,CAAA;AAI1E,OAAO,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAA;AACjF,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAA;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAgClD,6EAA6E;AAC7E,MAAM,UAAU,gBAAgB,CAAC,SAA0B;IACzD,OAAO;QACL,YAAY,EAAE,SAAS,CAAC,YAAY;QACpC,gBAAgB,EAAE,SAAS,CAAC,gBAAgB;QAC5C,KAAK,EAAE,SAAS,CAAC,KAAK;QACtB,SAAS,EAAE,SAAS,CAAC,SAAS;QAC9B,MAAM,EAAE,SAAS,CAAC,MAAM;KACzB,CAAA;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,IAA4B,EAC5B,WAAmB,EACnB,SAAiB,EACjB,IAA2B;IAE3B,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAA;IAC5D,gGAAgG;IAChG,0FAA0F;IAC1F,mDAAmD;IACnD,MAAM,cAAc,GAAG,qBAAqB,CAAC,IAAI,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAA;IACzE,4FAA4F;IAC5F,iGAAiG;IACjG,kGAAkG;IAClG,yFAAyF;IACzF,MAAM,KAAK,GAAG,EAAE,GAAG,IAAI,EAAE,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAA;IACxE,IAAI,MAAM,IAAI,SAAS,EAAE,MAAM,EAAE,CAAC;QAChC,uFAAuF;QACvF,6FAA6F;QAC7F,kFAAkF;QAClF,+FAA+F;QAC/F,8FAA8F;QAC9F,MAAM,IAAI,CAAC,YAAY,CAAC,mBAAmB,CAAC,WAAW,EAAE,SAAS,CAAC,CAAA;IACrE,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,aAAa,CAAC,IAAI,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IAC9E,MAAM,UAAU,GAAG,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,gBAAgB,CAAC,IAAI,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IAElG,4FAA4F;IAC5F,+FAA+F;IAC/F,qFAAqF;IACrF,qFAAqF;IACrF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,cAAc,CAClD,WAAW,EACX,SAAS,EACT,KAAK,EACL,iCAAiC,CAClC,CAAA;IAED,IAAI,UAAU,EAAE,CAAC;QACf,0FAA0F;QAC1F,8FAA8F;QAC9F,gEAAgE;QAChE,IAAI,CAAC;YACH,MAAM,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;QACnC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,qBAAqB,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,CAAC,EAAE,CAAC,CAAA;YACxD,MAAM,KAAK,CAAA;QACb,CAAC;IACH,CAAC;IACD,+FAA+F;IAC/F,wEAAwE;IACxE,IAAI,OAAO;QAAE,MAAM,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IAC1C,OAAO,KAAK,CAAA;AACd,CAAC"}
+{"version":3,"file":"taskCreation.js","sourceRoot":"","sources":["../../../src/modules/publicApi/taskCreation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iCAAiC,EAAE,MAAM,wBAAwB,CAAA;AAI1E,OAAO,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAA;AACjF,OAAO,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAA;AAChE,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAA;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AA8ClD,6EAA6E;AAC7E,MAAM,UAAU,gBAAgB,CAAC,SAA0B;IACzD,OAAO;QACL,YAAY,EAAE,SAAS,CAAC,YAAY;QACpC,gBAAgB,EAAE,SAAS,CAAC,gBAAgB;QAC5C,KAAK,EAAE,SAAS,CAAC,KAAK;QACtB,SAAS,EAAE,SAAS,CAAC,SAAS;QAC9B,eAAe,EAAE,SAAS,CAAC,eAAe;QAC1C,MAAM,EAAE,SAAS,CAAC,MAAM;KACzB,CAAA;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,IAA4B,EAC5B,WAAmB,EACnB,SAAiB,EACjB,IAA2B;IAE3B,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAA;IAC5D,gGAAgG;IAChG,0FAA0F;IAC1F,mDAAmD;IACnD,MAAM,cAAc,GAAG,qBAAqB,CAAC,IAAI,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAA;IACzE,2FAA2F;IAC3F,8FAA8F;IAC9F,gGAAgG;IAChG,4FAA4F;IAC5F,iGAAiG;IACjG,wFAAwF;IACxF,iGAAiG;IACjG,8DAA8D;IAC9D,MAAM,IAAI,CAAC,YAAY,CAAC,mBAAmB,CAAC,WAAW,EAAE,SAAS,CAAC,CAAA;IACnE,+FAA+F;IAC/F,6FAA6F;IAC7F,8CAA8C;IAC9C,MAAM,yBAAyB,CAAC,IAAI,CAAC,eAAe,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,CAAA;IACpF,+FAA+F;IAC/F,gGAAgG;IAChG,8FAA8F;IAC9F,qFAAqF;IACrF,kFAAkF;IAClF,MAAM,KAAK,GAAG,EAAE,GAAG,IAAI,EAAE,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAA;IACxE,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,aAAa,CAAC,IAAI,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IAC9E,MAAM,UAAU,GAAG,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,gBAAgB,CAAC,IAAI,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IAElG,4FAA4F;IAC5F,+FAA+F;IAC/F,qFAAqF;IACrF,qFAAqF;IACrF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,cAAc,CAClD,WAAW,EACX,SAAS,EACT,KAAK,EACL,iCAAiC,CAClC,CAAA;IAED,IAAI,UAAU,EAAE,CAAC;QACf,0FAA0F;QAC1F,8FAA8F;QAC9F,gEAAgE;QAChE,IAAI,CAAC;YACH,MAAM,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;QACnC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,qBAAqB,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,CAAC,EAAE,CAAC,CAAA;YACxD,MAAM,KAAK,CAAA;QACb,CAAC;IACH,CAAC;IACD,+FAA+F;IAC/F,wEAAwE;IACxE,IAAI,OAAO;QAAE,MAAM,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IAC1C,OAAO,KAAK,CAAA;AACd,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cat-factory/server",
-  "version": "0.323.0",
+  "version": "0.325.0",
   "description": "Runtime-neutral HTTP layer for the Agent Architecture Board: the Hono controllers, middleware (auth/authz/CORS/error), request helpers and the gateway seams shared by every deployment facade (Cloudflare Worker, Node service).",
   "repository": {
     "type": "git",
@@ -24,13 +24,13 @@
     "access": "public"
   },
   "dependencies": {
-    "@cat-factory/agents": "0.165.0",
-    "@cat-factory/contracts": "0.353.0",
-    "@cat-factory/integrations": "0.173.1",
-    "@cat-factory/kernel": "0.346.1",
-    "@cat-factory/mcp-server": "0.50.0",
-    "@cat-factory/orchestration": "0.311.0",
-    "@cat-factory/spend": "0.21.7",
+    "@cat-factory/agents": "0.166.1",
+    "@cat-factory/contracts": "0.355.0",
+    "@cat-factory/integrations": "0.174.0",
+    "@cat-factory/kernel": "0.347.0",
+    "@cat-factory/mcp-server": "0.52.0",
+    "@cat-factory/orchestration": "0.313.0",
+    "@cat-factory/spend": "0.21.9",
     "@toad-contracts/core": "0.4.0",
     "@toad-contracts/hono": "0.3.2",
     "@toad-contracts/valibot": "0.5.0",