@cat-factory/server 0.6.0

package/dist/github/ensureWorkBranch.js

@@ -0,0 +1,97 @@
+// Ensure a per-task WORK BRANCH exists on the remote before any agent in a pipeline
+// touches the repo. Every container agent for a task operates on one shared branch
+// (`cat-factory/<blockId>`): the writers (spec-writer, coder, …) commit to it and the
+// read-only design agents (architect, analysis) clone it so they read what the earlier
+// writers already committed (e.g. the spec-writer's in-repo `spec/`).
+//
+// Two intents share this one helper:
+//   - WRITERS create the branch up front (a purely mechanical step — every writer
+//     eventually needs the branch — so we do it programmatically rather than relying on
+//     whichever agent writes first).
+//   - READ-ONLY agents only PROBE for it: they never write, so when the branch does not
+//     yet exist there is nothing on it to read and they must fall back to base. Probing
+//     (rather than creating) keeps a code-less pipeline from littering the repo with an
+//     empty `cat-factory/<blockId>` ref that no PR ever uses.
+//
+// Implemented as plain GitHub REST calls using the installation token the facade already
+// mints. It deliberately does NOT go through the `GitHubClient` port: the port exposes no
+// single-ref read (only paged `listBranches`, which can't reliably surface an arbitrary
+// ref), whereas `GET /git/ref/heads/<branch>` resolves a ref in one call. It probes the
+// work branch FIRST, so an already-present branch is reported ready in a single call
+// regardless of whether the base ref can be resolved, and `create` never issues a
+// redundant write. Idempotent: a create that races another and answers 422 "already
+// exists" is treated as success — we never reset or move an existing branch. Best-effort:
+// every failure path returns `false` (so callers fall back) but logs a warning first, so
+// a silent degradation back to the base branch is observable in telemetry rather than
+// invisible.
+import { logger } from '../observability/logger.js';
+const GITHUB_HEADERS = (token) => ({
+    authorization: `Bearer ${token}`,
+    accept: 'application/vnd.github+json',
+    'user-agent': 'cat-factory-server',
+    'x-github-api-version': '2022-11-28',
+});
+/**
+ * Encode a branch name for use in a `/git/ref/heads/<branch>` path. A branch can contain
+ * slashes (`feature/x`), which are real path separators in the ref API, so encode each
+ * segment individually rather than the whole name (which would turn `/` into `%2F` and
+ * break the lookup).
+ */
+function encodeBranchPath(branch) {
+    return branch.split('/').map(encodeURIComponent).join('/');
+}
+/**
+ * Ensure `branch` is present on the remote. Writers (`create !== false`) create it from
+ * `baseBranch`'s tip when absent; read-only callers (`create: false`) only report whether
+ * it already exists. Returns whether the work branch is present afterwards.
+ */
+export async function ensureWorkBranchViaRest(input) {
+    const apiBase = (input.apiBase ?? 'https://api.github.com').replace(/\/+$/, '');
+    const repoPath = `${apiBase}/repos/${input.owner}/${input.name}`;
+    const create = input.create !== false;
+    try {
+        // Probe the work branch first: if it already exists (an earlier step/run created it),
+        // it is ready in a single call — independent of whether the base ref resolves.
+        const probeRes = await fetch(`${repoPath}/git/ref/heads/${encodeBranchPath(input.branch)}`, {
+            headers: GITHUB_HEADERS(input.token),
+        });
+        if (probeRes.ok)
+            return true;
+        if (probeRes.status !== 404) {
+            logger.warn({ branch: input.branch, status: probeRes.status }, 'ensureWorkBranch: unexpected status probing work branch');
+        }
+        // Not present. Read-only callers stop here (a missing branch ⇒ use base); only writers
+        // create it.
+        if (!create)
+            return false;
+        // Resolve the base branch tip the work branch should fork from.
+        const baseRes = await fetch(`${repoPath}/git/ref/heads/${encodeBranchPath(input.baseBranch)}`, {
+            headers: GITHUB_HEADERS(input.token),
+        });
+        if (!baseRes.ok) {
+            logger.warn({ baseBranch: input.baseBranch, status: baseRes.status }, 'ensureWorkBranch: could not resolve base branch tip');
+            return false;
+        }
+        const baseJson = (await baseRes.json().catch(() => null));
+        const sha = baseJson?.object?.sha;
+        if (!sha) {
+            logger.warn({ baseBranch: input.baseBranch }, 'ensureWorkBranch: base ref had no sha');
+            return false;
+        }
+        const createRes = await fetch(`${repoPath}/git/refs`, {
+            method: 'POST',
+            headers: { ...GITHUB_HEADERS(input.token), 'content-type': 'application/json' },
+            body: JSON.stringify({ ref: `refs/heads/${input.branch}`, sha }),
+        });
+        // 201 created, or 422 "Reference already exists" (a race) — both mean it is present.
+        if (createRes.ok || createRes.status === 422)
+            return true;
+        logger.warn({ branch: input.branch, status: createRes.status }, 'ensureWorkBranch: failed to create work branch');
+        return false;
+    }
+    catch (err) {
+        logger.warn({ branch: input.branch, err }, 'ensureWorkBranch: request failed');
+        return false;
+    }
+}
+//# sourceMappingURL=ensureWorkBranch.js.map

package/dist/github/ensureWorkBranch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ensureWorkBranch.js","sourceRoot":"","sources":["../../src/github/ensureWorkBranch.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,mFAAmF;AACnF,sFAAsF;AACtF,uFAAuF;AACvF,sEAAsE;AACtE,EAAE;AACF,qCAAqC;AACrC,kFAAkF;AAClF,wFAAwF;AACxF,qCAAqC;AACrC,wFAAwF;AACxF,wFAAwF;AACxF,wFAAwF;AACxF,8DAA8D;AAC9D,EAAE;AACF,yFAAyF;AACzF,0FAA0F;AAC1F,wFAAwF;AACxF,wFAAwF;AACxF,qFAAqF;AACrF,kFAAkF;AAClF,oFAAoF;AACpF,0FAA0F;AAC1F,yFAAyF;AACzF,sFAAsF;AACtF,aAAa;AAEb,OAAO,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAA;AAsBnD,MAAM,cAAc,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,CAAC;IACzC,aAAa,EAAE,UAAU,KAAK,EAAE;IAChC,MAAM,EAAE,6BAA6B;IACrC,YAAY,EAAE,oBAAoB;IAClC,sBAAsB,EAAE,YAAY;CACrC,CAAC,CAAA;AAEF;;;;;GAKG;AACH,SAAS,gBAAgB,CAAC,MAAc;IACtC,OAAO,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;AAC5D,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,KAA4B;IACxE,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,wBAAwB,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IAC/E,MAAM,QAAQ,GAAG,GAAG,OAAO,UAAU,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,EAAE,CAAA;IAChE,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,KAAK,KAAK,CAAA;IACrC,IAAI,CAAC;QACH,sFAAsF;QACtF,+EAA+E;QAC/E,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,QAAQ,kBAAkB,gBAAgB,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE;YAC1F,OAAO,EAAE,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC;SACrC,CAAC,CAAA;QACF,IAAI,QAAQ,CAAC,EAAE;YAAE,OAAO,IAAI,CAAA;QAC5B,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC5B,MAAM,CAAC,IAAI,CACT,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,EACjD,yDAAyD,CAC1D,CAAA;QACH,CAAC;QAED,uFAAuF;QACvF,aAAa;QACb,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAA;QAEzB,gEAAgE;QAChE,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,GAAG,QAAQ,kBAAkB,gBAAgB,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,EAAE;YAC7F,OAAO,EAAE,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC;SACrC,CAAC,CAAA;QACF,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YAChB,MAAM,CAAC,IAAI,CACT,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,EACxD,qDAAqD,CACtD,CAAA;YACD,OAAO,KAAK,CAAA;QACd,CAAC;QACD,MAAM,QAAQ,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAEhD,CAAA;QACR,MAAM,GAAG,GAAG,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAA;QACjC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,EAAE,uCAAuC,CAAC,CAAA;YACtF,OAAO,KAAK,CAAA;QACd,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,GAAG,QAAQ,WAAW,EAAE;YACpD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,GAAG,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/E,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,cAAc,KAAK,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC;SACjE,CAAC,CAAA;QACF,qFAAqF;QACrF,IAAI,SAAS,CAAC,EAAE,IAAI,SAAS,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,IAAI,CAAA;QACzD,MAAM,CAAC,IAAI,CACT,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,EAClD,gDAAgD,CACjD,CAAA;QACD,OAAO,KAAK,CAAA;IACd,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,kCAAkC,CAAC,CAAA;QAC9E,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC"}

package/dist/github/state.d.ts

@@ -0,0 +1,19 @@
+/** Claims carried through the install round-trip. */
+export interface InstallState {
+    workspaceId: string;
+    /** Internal user id that initiated the install (null when auth is disabled). */
+    userId: string | null;
+    /** Absolute expiry, epoch ms. */
+    exp: number;
+}
+export declare class StateSigner {
+    private readonly secret;
+    private keyPromise?;
+    constructor(secret: string);
+    sign(state: InstallState): Promise<string>;
+    /** Return the claims if `state` carries a valid, unexpired signature, else null. */
+    verify(state: string | null): Promise<InstallState | null>;
+    private mac;
+    private importKey;
+}
+//# sourceMappingURL=state.d.ts.map

package/dist/github/state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"state.d.ts","sourceRoot":"","sources":["../../src/github/state.ts"],"names":[],"mappings":"AAWA,qDAAqD;AACrD,MAAM,WAAW,YAAY;IAC3B,WAAW,EAAE,MAAM,CAAA;IACnB,gFAAgF;IAChF,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,iCAAiC;IACjC,GAAG,EAAE,MAAM,CAAA;CACZ;AAED,qBAAa,WAAW;IAGV,OAAO,CAAC,QAAQ,CAAC,MAAM;IAFnC,OAAO,CAAC,UAAU,CAAC,CAAoB;IAEvC,YAA6B,MAAM,EAAE,MAAM,EAAI;IAEzC,IAAI,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAG/C;IAED,oFAAoF;IAC9E,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAwB/D;YAEa,GAAG;IAKjB,OAAO,CAAC,SAAS;CAYlB"}

package/dist/github/state.js

@@ -0,0 +1,55 @@
+import { base64url, base64urlToBytes, timingSafeEqual } from '../crypto/encoding.js';
+export class StateSigner {
+    secret;
+    keyPromise;
+    constructor(secret) {
+        this.secret = secret;
+    }
+    async sign(state) {
+        const body = base64url(JSON.stringify(state));
+        return `${body}.${base64url(await this.mac(body))}`;
+    }
+    /** Return the claims if `state` carries a valid, unexpired signature, else null. */
+    async verify(state) {
+        if (!state)
+            return null;
+        const dot = state.indexOf('.');
+        if (dot <= 0 || dot === state.length - 1)
+            return null;
+        const body = state.slice(0, dot);
+        // A malformed base64url signature must fail closed, not throw out of `atob`.
+        let provided;
+        try {
+            provided = base64urlToBytes(state.slice(dot + 1));
+        }
+        catch {
+            return null;
+        }
+        const expected = new Uint8Array(await this.mac(body));
+        if (!timingSafeEqual(provided, expected))
+            return null;
+        let payload;
+        try {
+            payload = JSON.parse(new TextDecoder().decode(base64urlToBytes(body)));
+        }
+        catch {
+            return null;
+        }
+        if (typeof payload.exp !== 'number' || payload.exp < Date.now())
+            return null;
+        if (typeof payload.workspaceId !== 'string' || payload.workspaceId === '')
+            return null;
+        return payload;
+    }
+    async mac(input) {
+        const key = await this.importKey();
+        return crypto.subtle.sign('HMAC', key, new TextEncoder().encode(input));
+    }
+    importKey() {
+        if (!this.keyPromise) {
+            this.keyPromise = crypto.subtle.importKey('raw', new TextEncoder().encode(this.secret), { name: 'HMAC', hash: 'SHA-256' }, false, ['sign']);
+        }
+        return this.keyPromise;
+    }
+}
+//# sourceMappingURL=state.js.map

package/dist/github/state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"state.js","sourceRoot":"","sources":["../../src/github/state.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAoBpF,MAAM,OAAO,WAAW;IAGO,MAAM;IAF3B,UAAU,CAAqB;IAEvC,YAA6B,MAAc;sBAAd,MAAM;IAAW,CAAC;IAE/C,KAAK,CAAC,IAAI,CAAC,KAAmB;QAC5B,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAA;QAC7C,OAAO,GAAG,IAAI,IAAI,SAAS,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,CAAA;IACrD,CAAC;IAED,oFAAoF;IACpF,KAAK,CAAC,MAAM,CAAC,KAAoB;QAC/B,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAA;QACvB,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAC9B,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,IAAI,CAAA;QACrD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;QAChC,6EAA6E;QAC7E,IAAI,QAAoB,CAAA;QACxB,IAAI,CAAC;YACH,QAAQ,GAAG,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAA;QACnD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAA;QACb,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAA;QACrD,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAA;QAErD,IAAI,OAAqB,CAAA;QACzB,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAiB,CAAA;QACxF,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAA;QACb,CAAC;QACD,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;YAAE,OAAO,IAAI,CAAA;QAC5E,IAAI,OAAO,OAAO,CAAC,WAAW,KAAK,QAAQ,IAAI,OAAO,CAAC,WAAW,KAAK,EAAE;YAAE,OAAO,IAAI,CAAA;QACtF,OAAO,OAAO,CAAA;IAChB,CAAC;IAEO,KAAK,CAAC,GAAG,CAAC,KAAa;QAC7B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAA;QAClC,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;IACzE,CAAC;IAEO,SAAS;QACf,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACrB,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,CACvC,KAAK,EACL,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EACrC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,EACjC,KAAK,EACL,CAAC,MAAM,CAAC,CACT,CAAA;QACH,CAAC;QACD,OAAO,IAAI,CAAC,UAAU,CAAA;IACxB,CAAC;CACF"}

package/dist/http/authGate.d.ts

@@ -0,0 +1,21 @@
+import type { Hono } from 'hono';
+import type { AppEnv } from './env.js';
+/**
+ * Mount the default-deny session gate and the per-workspace authorization check.
+ *
+ * 1. Default-deny: every route requires a valid session EXCEPT {@link PUBLIC_PREFIXES}
+ *    and the exact WS event-stream upgrade (a browser can't set `Authorization` on a
+ *    WS handshake, so it authenticates via `?ticket=` inside its handler). The gate
+ *    fails closed (503) when auth is unconfigured unless `AUTH_DEV_OPEN` is set, so
+ *    production is always authenticated and any new route is protected by default.
+ * 2. Per-workspace authz: binds the signed-in user to the `:workspaceId` they address
+ *    so one user cannot read or mutate a board outside the accounts they belong to. A
+ *    board in an account the user doesn't belong to is reported as 404 (not 403) so
+ *    existence isn't leaked. Runs only when a user is set (no-op for dev-open / the
+ *    self-authenticating WS upgrade) and skips `/workspaces` (list/create, no `:id`).
+ *
+ * Call this AFTER the middleware that sets `container` on the context and BEFORE
+ * `registerCoreControllers`.
+ */
+export declare function mountAuthGate<E extends AppEnv>(app: Hono<E>): void;
+//# sourceMappingURL=authGate.d.ts.map

package/dist/http/authGate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authGate.d.ts","sourceRoot":"","sources":["../../src/http/authGate.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAEhC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,UAAU,CAAA;AAuBtC;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,aAAa,CAAC,CAAC,SAAS,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAsClE"}

package/dist/http/authGate.js

@@ -0,0 +1,77 @@
+import { requireAuth } from '../auth/middleware.js';
+// The runtime-neutral authentication + authorization gate, shared by every facade.
+// Each facade builds its own app (CORS, the per-request container, runtime-specific
+// controllers) and calls `mountAuthGate(app)` BEFORE `registerCoreControllers(app)` —
+// so the security-critical default-deny + per-workspace ownership checks have ONE
+// implementation and cannot drift between the Cloudflare Worker and the Node service.
+// The gate reads the container the facade stashed on the context, so it works
+// identically regardless of how that container was assembled.
+// Routes that bypass the session gate: either public by necessity or carrying their
+// own authentication.
+//   /health   — liveness probe (no data).
+//   /auth     — the login flow itself; can't require a session to obtain one.
+//   /v1       — container LLM proxy; authenticated by a model-locked session token
+//               (ContainerSessionService), not the workspace session.
+//   /github   — GitHub webhooks + setup callback; verified by HMAC signature.
+//   /slack    — Slack OAuth callback; the `state` is HMAC-signed + short-lived.
+const PUBLIC_PREFIXES = ['/health', '/auth', '/v1', '/github', '/slack'];
+/** The exact WebSocket-upgrade shape that self-authenticates via `?ticket=`. */
+const WS_EVENTS_PATH = /^\/workspaces\/[^/]+\/events$/;
+/**
+ * Mount the default-deny session gate and the per-workspace authorization check.
+ *
+ * 1. Default-deny: every route requires a valid session EXCEPT {@link PUBLIC_PREFIXES}
+ *    and the exact WS event-stream upgrade (a browser can't set `Authorization` on a
+ *    WS handshake, so it authenticates via `?ticket=` inside its handler). The gate
+ *    fails closed (503) when auth is unconfigured unless `AUTH_DEV_OPEN` is set, so
+ *    production is always authenticated and any new route is protected by default.
+ * 2. Per-workspace authz: binds the signed-in user to the `:workspaceId` they address
+ *    so one user cannot read or mutate a board outside the accounts they belong to. A
+ *    board in an account the user doesn't belong to is reported as 404 (not 403) so
+ *    existence isn't leaked. Runs only when a user is set (no-op for dev-open / the
+ *    self-authenticating WS upgrade) and skips `/workspaces` (list/create, no `:id`).
+ *
+ * Call this AFTER the middleware that sets `container` on the context and BEFORE
+ * `registerCoreControllers`.
+ */
+export function mountAuthGate(app) {
+    const gate = requireAuth();
+    app.use('*', (c, next) => {
+        if (c.req.method === 'OPTIONS')
+            return next();
+        const path = c.req.path;
+        if (c.req.method === 'GET' &&
+            c.req.header('Upgrade')?.toLowerCase() === 'websocket' &&
+            WS_EVENTS_PATH.test(path)) {
+            return next();
+        }
+        if (PUBLIC_PREFIXES.some((p) => path === p || path.startsWith(`${p}/`)))
+            return next();
+        return gate(c, next);
+    });
+    app.use('*', async (c, next) => {
+        if (c.req.method === 'OPTIONS')
+            return next();
+        const user = c.get('user');
+        if (!user)
+            return next();
+        const match = /^\/workspaces\/([^/]+)(?:\/.*)?$/.exec(c.req.path);
+        if (!match)
+            return next();
+        const workspaceId = decodeURIComponent(match[1]);
+        const container = c.get('container');
+        const accountId = await container.workspaceService.accountOf(workspaceId);
+        if (accountId === undefined)
+            return next(); // missing board → let the handler 404 normally
+        const notFound = () => c.json({ error: { code: 'not_found', message: 'Workspace not found' } }, 404);
+        if (accountId === null) {
+            // Legacy/unscoped board: only the user who personally owns it may access it.
+            const owner = await container.workspaceService.ownerOf(workspaceId);
+            return owner === user.id ? next() : notFound();
+        }
+        if (await container.accountService.isMember(accountId, user.id))
+            return next();
+        return notFound();
+    });
+}
+//# sourceMappingURL=authGate.js.map

package/dist/http/authGate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authGate.js","sourceRoot":"","sources":["../../src/http/authGate.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAGnD,mFAAmF;AACnF,oFAAoF;AACpF,sFAAsF;AACtF,kFAAkF;AAClF,sFAAsF;AACtF,8EAA8E;AAC9E,8DAA8D;AAE9D,oFAAoF;AACpF,sBAAsB;AACtB,0CAA0C;AAC1C,8EAA8E;AAC9E,mFAAmF;AACnF,sEAAsE;AACtE,8EAA8E;AAC9E,gFAAgF;AAChF,MAAM,eAAe,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAA;AAExE,gFAAgF;AAChF,MAAM,cAAc,GAAG,+BAA+B,CAAA;AAEtD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,aAAa,CAAmB,GAAY;IAC1D,MAAM,IAAI,GAAG,WAAW,EAAK,CAAA;IAC7B,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE;QACvB,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,SAAS;YAAE,OAAO,IAAI,EAAE,CAAA;QAC7C,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAA;QACvB,IACE,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,KAAK;YACtB,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,KAAK,WAAW;YACtD,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EACzB,CAAC;YACD,OAAO,IAAI,EAAE,CAAA;QACf,CAAC;QACD,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAAE,OAAO,IAAI,EAAE,CAAA;QACtF,OAAO,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAA;IACtB,CAAC,CAAC,CAAA;IAEF,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QAC7B,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,SAAS;YAAE,OAAO,IAAI,EAAE,CAAA;QAC7C,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QAC1B,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,EAAE,CAAA;QACxB,MAAM,KAAK,GAAG,kCAAkC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QACjE,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,EAAE,CAAA;QACzB,MAAM,WAAW,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAA;QACjD,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;QACpC,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,gBAAgB,CAAC,SAAS,CAAC,WAAW,CAAC,CAAA;QACzE,IAAI,SAAS,KAAK,SAAS;YAAE,OAAO,IAAI,EAAE,CAAA,CAAC,+CAA+C;QAE1F,MAAM,QAAQ,GAAG,GAAG,EAAE,CACpB,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,qBAAqB,EAAE,EAAE,EAAE,GAAG,CAAC,CAAA;QAE/E,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YACvB,6EAA6E;YAC7E,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,gBAAgB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;YACnE,OAAO,KAAK,KAAK,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;QAChD,CAAC;QACD,IAAI,MAAM,SAAS,CAAC,cAAc,CAAC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,CAAC;YAAE,OAAO,IAAI,EAAE,CAAA;QAC9E,OAAO,QAAQ,EAAE,CAAA;IACnB,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/dist/http/cors.d.ts

@@ -0,0 +1,13 @@
+/** Parse a comma-separated allowed-origins string into trimmed entries. */
+export declare function parseAllowedOrigins(configured: string | undefined): string[];
+/**
+ * Resolve the value for `Access-Control-Allow-Origin` for one request, given the
+ * request's `Origin` and the configured allowlist. Returns the origin to echo
+ * back (so it works without credentials), or `null` to omit the header.
+ *
+ * - No allowlist configured, or it contains `*` → allow any origin (echo it).
+ * - Otherwise → echo the origin only when it's explicitly listed.
+ * - No request Origin (non-browser caller) → `null`; CORS doesn't apply.
+ */
+export declare function resolveCorsOrigin(requestOrigin: string | undefined | null, configured: string | undefined): string | null;
+//# sourceMappingURL=cors.d.ts.map

package/dist/http/cors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cors.d.ts","sourceRoot":"","sources":["../../src/http/cors.ts"],"names":[],"mappings":"AAMA,2EAA2E;AAC3E,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,EAAE,CAK5E;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAC/B,aAAa,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,EACxC,UAAU,EAAE,MAAM,GAAG,SAAS,GAC7B,MAAM,GAAG,IAAI,CAKf"}

package/dist/http/cors.js

@@ -0,0 +1,30 @@
+// CORS origin policy. The set of allowed browser Origins is configuration, not
+// code: this is a self-hosted system, so each provisioning org declares its own
+// frontend origin(s) (comma-separated). A lone `*` — or no value at all — allows
+// any origin, which is safe here because every route is bearer-gated and fails
+// closed; pinning origins is defense-in-depth.
+/** Parse a comma-separated allowed-origins string into trimmed entries. */
+export function parseAllowedOrigins(configured) {
+    return (configured ?? '')
+        .split(',')
+        .map((origin) => origin.trim())
+        .filter(Boolean);
+}
+/**
+ * Resolve the value for `Access-Control-Allow-Origin` for one request, given the
+ * request's `Origin` and the configured allowlist. Returns the origin to echo
+ * back (so it works without credentials), or `null` to omit the header.
+ *
+ * - No allowlist configured, or it contains `*` → allow any origin (echo it).
+ * - Otherwise → echo the origin only when it's explicitly listed.
+ * - No request Origin (non-browser caller) → `null`; CORS doesn't apply.
+ */
+export function resolveCorsOrigin(requestOrigin, configured) {
+    if (!requestOrigin)
+        return null;
+    const allowed = parseAllowedOrigins(configured);
+    if (allowed.length === 0 || allowed.includes('*'))
+        return requestOrigin;
+    return allowed.includes(requestOrigin) ? requestOrigin : null;
+}
+//# sourceMappingURL=cors.js.map

package/dist/http/cors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cors.js","sourceRoot":"","sources":["../../src/http/cors.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,gFAAgF;AAChF,iFAAiF;AACjF,+EAA+E;AAC/E,+CAA+C;AAE/C,2EAA2E;AAC3E,MAAM,UAAU,mBAAmB,CAAC,UAA8B;IAChE,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC;SACtB,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;SAC9B,MAAM,CAAC,OAAO,CAAC,CAAA;AACpB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAC/B,aAAwC,EACxC,UAA8B;IAE9B,IAAI,CAAC,aAAa;QAAE,OAAO,IAAI,CAAA;IAC/B,MAAM,OAAO,GAAG,mBAAmB,CAAC,UAAU,CAAC,CAAA;IAC/C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,aAAa,CAAA;IACvE,OAAO,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAA;AAC/D,CAAC"}

package/dist/http/env.d.ts

@@ -0,0 +1,68 @@
+import type { AgentRunRepository, ConsensusSessionRepository } from '@cat-factory/kernel';
+import type { ApiKeyService, LocalModelEndpointService, PersonalSubscriptionService, ProviderSubscriptionService } from '@cat-factory/integrations';
+import type { Core } from '@cat-factory/orchestration';
+import type { SessionPayload } from '../auth/signing.js';
+import type { AppConfig } from '../config/types.js';
+import type { RuntimeGateways } from '../runtime/gateways.js';
+export interface ServerContainer extends Core {
+    config: AppConfig;
+    /** Kind-spanning view over agent_runs (retry dispatch + the cron sweeper). */
+    agentRunRepository: AgentRunRepository;
+    /**
+     * Consensus session transcripts (the optional `@cat-factory/consensus` mechanism's
+     * observability surface). Present only when the facade wired the repository; the
+     * consensus read endpoint 404s when absent.
+     */
+    consensusSessionRepository?: ConsensusSessionRepository;
+    /** Per-facade runtime seams (real-time delivery, …) the shared controllers use. */
+    gateways: RuntimeGateways;
+    /**
+     * The workspace subscription-token pool (Claude Code / Codex credentials).
+     * Present only when the facade wired the provider-subscription repository.
+     */
+    subscriptions?: ProviderSubscriptionService;
+    /**
+     * The per-user individual-usage subscription store (Claude). Present only when the
+     * facade wired the personal-subscription repositories (needs ENCRYPTION_KEY). Drives
+     * the personal-credential controller + the run activation the executor leases.
+     */
+    personalSubscriptions?: PersonalSubscriptionService;
+    /**
+     * The direct-provider API-key pool (OpenAI/Anthropic/Qwen/DeepSeek/Moonshot),
+     * scoped account/workspace/user. Present only when the facade wired the
+     * provider-api-key repository (needs ENCRYPTION_KEY). Drives the API-key
+     * controller, the per-scope model-provider resolver, and the LLM proxy's key lease.
+     */
+    apiKeys?: ApiKeyService;
+    /**
+     * Whether the opt-in Cloudflare Workers AI provider lib is registered for this
+     * deployment (binding on the Worker, REST account/token on Node). When false, the
+     * `workers-ai` provider is unavailable and `cloudflare`-flavour catalog models are
+     * not selectable.
+     */
+    cloudflareModelsEnabled?: boolean;
+    /**
+     * The deployment's direct-provider base-URL resolver (env override → built-in default,
+     * or null when none — e.g. an unconfigured operator-hosted LiteLLM gateway). The model
+     * catalog uses it to gate selectability: an OpenAI-compatible provider is only
+     * selectable once its base URL resolves, mirroring what the dispatch path requires.
+     */
+    baseUrlFor?: (provider: string) => string | null | undefined;
+    /**
+     * The per-USER locally-run model endpoints store (Ollama / LM Studio / llama.cpp /
+     * vLLM / custom OpenAI-compatible runners). Present only when the facade wired the
+     * local-model repository (needs ENCRYPTION_KEY). Drives the local-runner controller,
+     * the per-user model catalog, and the LLM proxy's base-URL/key resolution for a
+     * locally-run model — resolved by the run initiator.
+     */
+    localModelEndpoints?: LocalModelEndpointService;
+}
+/** Hono generics shared by the cross-runtime controllers (Variables only — no Bindings). */
+export type AppEnv = {
+    Variables: {
+        container: ServerContainer;
+        /** The authenticated user, set by `requireAuth` when auth is enabled. */
+        user?: SessionPayload;
+    };
+};
+//# sourceMappingURL=env.d.ts.map

package/dist/http/env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../src/http/env.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAA;AACzF,OAAO,KAAK,EACV,aAAa,EACb,yBAAyB,EACzB,2BAA2B,EAC3B,2BAA2B,EAC5B,MAAM,2BAA2B,CAAA;AAClC,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,4BAA4B,CAAA;AACtD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AACxD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AACnD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AAQ7D,MAAM,WAAW,eAAgB,SAAQ,IAAI;IAC3C,MAAM,EAAE,SAAS,CAAA;IACjB,8EAA8E;IAC9E,kBAAkB,EAAE,kBAAkB,CAAA;IACtC;;;;OAIG;IACH,0BAA0B,CAAC,EAAE,0BAA0B,CAAA;IACvD,mFAAmF;IACnF,QAAQ,EAAE,eAAe,CAAA;IACzB;;;OAGG;IACH,aAAa,CAAC,EAAE,2BAA2B,CAAA;IAC3C;;;;OAIG;IACH,qBAAqB,CAAC,EAAE,2BAA2B,CAAA;IACnD;;;;;OAKG;IACH,OAAO,CAAC,EAAE,aAAa,CAAA;IACvB;;;;;OAKG;IACH,uBAAuB,CAAC,EAAE,OAAO,CAAA;IACjC;;;;;OAKG;IACH,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,GAAG,SAAS,CAAA;IAC5D;;;;;;OAMG;IACH,mBAAmB,CAAC,EAAE,yBAAyB,CAAA;CAChD;AAED,4FAA4F;AAC5F,MAAM,MAAM,MAAM,GAAG;IACnB,SAAS,EAAE;QACT,SAAS,EAAE,eAAe,CAAA;QAC1B,yEAAyE;QACzE,IAAI,CAAC,EAAE,cAAc,CAAA;KACtB,CAAA;CACF,CAAA"}

package/dist/http/env.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=env.js.map

package/dist/http/env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.js","sourceRoot":"","sources":["../../src/http/env.ts"],"names":[],"mappings":""}

package/dist/http/errorHandler.d.ts

@@ -0,0 +1,4 @@
+import type { Context } from 'hono';
+/** Maps domain errors to HTTP responses; anything else is a 500. */
+export declare function handleError(error: unknown, c: Context): Response;
+//# sourceMappingURL=errorHandler.d.ts.map

package/dist/http/errorHandler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errorHandler.d.ts","sourceRoot":"","sources":["../../src/http/errorHandler.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAA;AAanC,oEAAoE;AACpE,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,GAAG,QAAQ,CA2BhE"}

package/dist/http/errorHandler.js

@@ -0,0 +1,33 @@
+import { DomainError } from '@cat-factory/kernel';
+import { logger } from '../observability/logger.js';
+const STATUS_BY_CODE = {
+    not_found: 404,
+    validation: 422,
+    conflict: 409,
+    // Precondition Required: a user-scoped personal credential (password/subscription)
+    // must be supplied before the action can proceed (individual-usage restricted mode).
+    credential_required: 428,
+};
+/** Maps domain errors to HTTP responses; anything else is a 500. */
+export function handleError(error, c) {
+    if (error instanceof DomainError) {
+        return c.json({
+            error: {
+                code: error.code,
+                message: error.message,
+                ...(error.details ? { details: error.details } : {}),
+            },
+        }, STATUS_BY_CODE[error.code]);
+    }
+    // Unexpected fault: log it with request context so it's traceable, but never
+    // leak internals to the client.
+    logger.error({
+        err: error instanceof Error
+            ? { message: error.message, stack: error.stack }
+            : { message: String(error) },
+        method: c.req.method,
+        path: new URL(c.req.url).pathname,
+    }, 'unhandled request error');
+    return c.json({ error: { code: 'internal', message: 'Internal server error' } }, 500);
+}
+//# sourceMappingURL=errorHandler.js.map

package/dist/http/errorHandler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errorHandler.js","sourceRoot":"","sources":["../../src/http/errorHandler.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAA;AAGjD,OAAO,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAA;AAEnD,MAAM,cAAc,GAAsD;IACxE,SAAS,EAAE,GAAG;IACd,UAAU,EAAE,GAAG;IACf,QAAQ,EAAE,GAAG;IACb,mFAAmF;IACnF,qFAAqF;IACrF,mBAAmB,EAAE,GAAG;CACzB,CAAA;AAED,oEAAoE;AACpE,MAAM,UAAU,WAAW,CAAC,KAAc,EAAE,CAAU;IACpD,IAAI,KAAK,YAAY,WAAW,EAAE,CAAC;QACjC,OAAO,CAAC,CAAC,IAAI,CACX;YACE,KAAK,EAAE;gBACL,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACrD;SACF,EACD,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,CAC3B,CAAA;IACH,CAAC;IACD,6EAA6E;IAC7E,gCAAgC;IAChC,MAAM,CAAC,KAAK,CACV;QACE,GAAG,EACD,KAAK,YAAY,KAAK;YACpB,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE;YAChD,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE;QAChC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM;QACpB,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ;KAClC,EACD,yBAAyB,CAC1B,CAAA;IACD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,uBAAuB,EAAE,EAAE,EAAE,GAAG,CAAC,CAAA;AACvF,CAAC"}

package/dist/http/params.d.ts

@@ -0,0 +1,8 @@
+import type { Context } from 'hono';
+/**
+ * Read a required path parameter. Controllers are mounted under a param prefix
+ * (`/workspaces/:workspaceId`), so Hono types the lookup as possibly undefined;
+ * a missing value would be a routing bug, surfaced here as a clear error.
+ */
+export declare function param(c: Context, name: string): string;
+//# sourceMappingURL=params.d.ts.map

package/dist/http/params.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"params.d.ts","sourceRoot":"","sources":["../../src/http/params.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAA;AAEnC;;;;GAIG;AACH,wBAAgB,KAAK,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAItD"}

package/dist/http/params.js

@@ -0,0 +1,13 @@
+import { ValidationError } from '@cat-factory/kernel';
+/**
+ * Read a required path parameter. Controllers are mounted under a param prefix
+ * (`/workspaces/:workspaceId`), so Hono types the lookup as possibly undefined;
+ * a missing value would be a routing bug, surfaced here as a clear error.
+ */
+export function param(c, name) {
+    const value = c.req.param(name);
+    if (value === undefined)
+        throw new ValidationError(`Missing path parameter: ${name}`);
+    return value;
+}
+//# sourceMappingURL=params.js.map

package/dist/http/params.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"params.js","sourceRoot":"","sources":["../../src/http/params.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AAGrD;;;;GAIG;AACH,MAAM,UAAU,KAAK,CAAC,CAAU,EAAE,IAAY;IAC5C,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAC/B,IAAI,KAAK,KAAK,SAAS;QAAE,MAAM,IAAI,eAAe,CAAC,2BAA2B,IAAI,EAAE,CAAC,CAAA;IACrF,OAAO,KAAK,CAAA;AACd,CAAC"}

package/dist/http/validation.d.ts

@@ -0,0 +1,12 @@
+import type { GenericSchema } from 'valibot';
+export declare function jsonBody<T extends GenericSchema>(schema: T): import("hono").MiddlewareHandler<import("hono").Env, string, {
+    in: (undefined extends import("valibot").InferInput<T> ? true : false) extends true ? {
+        json?: (import("valibot").InferInput<T> extends infer T_1 ? T_1 extends import("valibot").InferInput<T> ? T_1 extends any ? T_1 : { [K2 in keyof T_1]?: any; } : never : never) | undefined;
+    } : {
+        json: import("valibot").InferInput<T> extends infer T_2 ? T_2 extends import("valibot").InferInput<T> ? T_2 extends any ? T_2 : { [K2 in keyof T_2]: any; } : never : never;
+    };
+    out: {
+        json: import("valibot").InferOutput<T>;
+    };
+}>;
+//# sourceMappingURL=validation.d.ts.map

package/dist/http/validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../src/http/validation.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AAK5C,wBAAgB,QAAQ,CAAC,CAAC,SAAS,aAAa,EAAE,MAAM,EAAE,CAAC;;;;;;;;;GAkB1D"}

package/dist/http/validation.js

@@ -0,0 +1,21 @@
+import { vValidator } from '@hono/valibot-validator';
+// Thin wrapper around @hono/valibot-validator that yields a consistent error
+// envelope (matching the domain error handler) when a request body fails the
+// contract, instead of the library default.
+export function jsonBody(schema) {
+    return vValidator('json', schema, (result, c) => {
+        if (!result.success) {
+            return c.json({
+                error: {
+                    code: 'validation',
+                    message: 'Request body failed validation',
+                    issues: result.issues.map((issue) => ({
+                        path: issue.path?.map((p) => p.key).join('.'),
+                        message: issue.message,
+                    })),
+                },
+            }, 400);
+        }
+    });
+}
+//# sourceMappingURL=validation.js.map

package/dist/http/validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../src/http/validation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAA;AAGpD,6EAA6E;AAC7E,6EAA6E;AAC7E,4CAA4C;AAC5C,MAAM,UAAU,QAAQ,CAA0B,MAAS;IACzD,OAAO,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;QAC9C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,CAAC,CAAC,IAAI,CACX;gBACE,KAAK,EAAE;oBACL,IAAI,EAAE,YAAY;oBAClB,OAAO,EAAE,gCAAgC;oBACzC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;wBACpC,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;wBAC7C,OAAO,EAAE,KAAK,CAAC,OAAO;qBACvB,CAAC,CAAC;iBACJ;aACF,EACD,GAAG,CACJ,CAAA;QACH,CAAC;IACH,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,46 @@
+export { logger, type Logger } from './observability/logger.js';
+export { type AppEnv, type ServerContainer } from './http/env.js';
+export { type GitHubBackfillScheduler, type GitHubWebhookIngest, type LlmInProcessRequest, type LlmTokenUsage, type LlmUpstream, type LlmUpstreamEndpoint, type RealtimeGateway, type RuntimeGateways, type WebSearchResponse, type WebSearchResult, type WebSearchUpstream, } from './runtime/gateways.js';
+export { BraveWebSearchUpstream, SearxngWebSearchUpstream, createWebSearchUpstreamFromEnv, DEFAULT_WEB_SEARCH_COUNT, } from './modules/webSearch/upstreams.js';
+export { escalateStaleNotifications } from './runtime/escalateNotifications.js';
+export { StateSigner, type InstallState } from './github/state.js';
+export { GitHubOAuth, type GitHubOAuthDependencies, type GitHubIdentity, } from './auth/GitHubOAuth.js';
+export { GoogleOAuth, type GoogleOAuthDependencies, type GoogleIdentity, } from './auth/GoogleOAuth.js';
+export { WebCryptoPasswordHasher } from './crypto/WebCryptoPasswordHasher.js';
+export { authController, pickPostLoginRedirect } from './modules/auth/AuthController.js';
+export { llmProxyController } from './modules/llmProxy/LlmProxyController.js';
+export { ContainerSessionService, DEFAULT_SESSION_TTL_MS, type ContainerSession, type MintInput, } from './containers/ContainerSessionService.js';
+export { CompositeAgentExecutor } from './agents/CompositeAgentExecutor.js';
+export { ContainerAgentExecutor, type ContainerAgentExecutorDependencies, type RepoTarget, type ResolveRepoTarget, type MintInstallationToken, type EnsureWorkBranch, } from './agents/ContainerAgentExecutor.js';
+export { ensureWorkBranchViaRest, type EnsureWorkBranchInput } from './github/ensureWorkBranch.js';
+export { RunnerJobClient, type ResolveRunnerTransport } from './agents/RunnerJobClient.js';
+export { createScopedModelProviderResolver, type ScopedModelProviderOptions, } from './agents/modelProviderResolver.js';
+export { resolveWorkspaceCapabilities, type CapabilityServices, } from './agents/providerCapabilities.js';
+export { ContainerRepoBootstrapper, type ContainerRepoBootstrapperDependencies, } from './agents/ContainerRepoBootstrapper.js';
+export { buildResolveRepoTarget, type ResolveRepoTargetDependencies, } from './agents/resolveRepoTarget.js';
+export { bearerToken, requireAuth, verifySession } from './auth/middleware.js';
+export { registerCoreControllers } from './app.js';
+export { FanOutEventPublisher, type FanOutEventPublisherDependencies, } from './events/FanOutEventPublisher.js';
+export { InAppNotificationChannel } from './events/InAppNotificationChannel.js';
+export { mountAuthGate } from './http/authGate.js';
+export { param } from './http/params.js';
+export { jsonBody } from './http/validation.js';
+export { handleError } from './http/errorHandler.js';
+export { parseAllowedOrigins, resolveCorsOrigin } from './http/cors.js';
+export { base64url, base64urlToBytes, pkcs8PemToDer, timingSafeEqual } from './crypto/encoding.js';
+export { WebCryptoSecretCipher, type WebCryptoSecretCipherOptions, } from './crypto/WebCryptoSecretCipher.js';
+export { WebCryptoPersonalSecretCipher } from './crypto/WebCryptoPersonalSecretCipher.js';
+export { GitHubAppAuth, type GitHubAppAuthDependencies } from './github/GitHubAppAuth.js';
+export { GitHubAppRegistry, type GitHubAppRegistryDependencies, type RegisteredApp, type AppTokenSource, } from './github/GitHubAppRegistry.js';
+export { FetchGitHubClient, GitHubApiError, type FetchGitHubClientDependencies, } from './github/FetchGitHubClient.js';
+export { FetchGitHubProvisioningClient, type FetchGitHubProvisioningClientDependencies, } from './github/FetchGitHubProvisioningClient.js';
+export { WebCryptoWebhookVerifier } from './github/WebCryptoWebhookVerifier.js';
+export { GitHubCiStatusProvider, type GitHubCiStatusProviderDependencies, } from './github/GitHubCiStatusProvider.js';
+export { GitHubMergeabilityProvider, classifyMergeability, type GitHubMergeabilityProviderDependencies, } from './github/GitHubMergeabilityProvider.js';
+export { GitHubPullRequestMerger, type GitHubPullRequestMergerDependencies, } from './github/GitHubPullRequestMerger.js';
+export { HmacSigner, TOKEN_AUDIENCE, type SessionPayload, type SessionUser, type TokenAudience, } from './auth/signing.js';
+export { WS_TICKET_TTL_MS, authorizeWsUpgrade, mintWsTicket, type WsTicket, type WsUpgradeAuth, } from './auth/wsTicket.js';
+export type { AgentsConfig, AppConfig, AuthConfig, DatadogConfig, IncidentEnrichmentConfig, DocumentsConfig, EmailConfig, EnvironmentsConfig, ExecutionConfig, FragmentLibraryConfig, GitHubConfig, GoogleOAuthConfig, LangfuseConfig, ObservabilityConfig, PrivilegedAppConfig, RetentionConfig, RunnerPoolConfig, SlackConfig, TasksConfig, } from './config/types.js';
+export { resolveUrlSafetyPolicy } from './config/url-safety.js';
+export * from './persistence/mappers.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,MAAM,EAAE,KAAK,MAAM,EAAE,MAAM,2BAA2B,CAAA;AAC/D,OAAO,EAAE,KAAK,MAAM,EAAE,KAAK,eAAe,EAAE,MAAM,eAAe,CAAA;AACjE,OAAO,EACL,KAAK,uBAAuB,EAC5B,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACxB,KAAK,aAAa,EAClB,KAAK,WAAW,EAChB,KAAK,mBAAmB,EACxB,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,KAAK,iBAAiB,GACvB,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EACL,sBAAsB,EACtB,wBAAwB,EACxB,8BAA8B,EAC9B,wBAAwB,GACzB,MAAM,kCAAkC,CAAA;AACzC,OAAO,EAAE,0BAA0B,EAAE,MAAM,oCAAoC,CAAA;AAC/E,OAAO,EAAE,WAAW,EAAE,KAAK,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAClE,OAAO,EACL,WAAW,EACX,KAAK,uBAAuB,EAC5B,KAAK,cAAc,GACpB,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EACL,WAAW,EACX,KAAK,uBAAuB,EAC5B,KAAK,cAAc,GACpB,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EAAE,uBAAuB,EAAE,MAAM,qCAAqC,CAAA;AAC7E,OAAO,EAAE,cAAc,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAA;AACxF,OAAO,EAAE,kBAAkB,EAAE,MAAM,0CAA0C,CAAA;AAC7E,OAAO,EACL,uBAAuB,EACvB,sBAAsB,EACtB,KAAK,gBAAgB,EACrB,KAAK,SAAS,GACf,MAAM,yCAAyC,CAAA;AAIhD,OAAO,EAAE,sBAAsB,EAAE,MAAM,oCAAoC,CAAA;AAC3E,OAAO,EACL,sBAAsB,EACtB,KAAK,kCAAkC,EACvC,KAAK,UAAU,EACf,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,EAC1B,KAAK,gBAAgB,GACtB,MAAM,oCAAoC,CAAA;AAC3C,OAAO,EAAE,uBAAuB,EAAE,KAAK,qBAAqB,EAAE,MAAM,8BAA8B,CAAA;AAClG,OAAO,EAAE,eAAe,EAAE,KAAK,sBAAsB,EAAE,MAAM,6BAA6B,CAAA;AAC1F,OAAO,EACL,iCAAiC,EACjC,KAAK,0BAA0B,GAChC,MAAM,mCAAmC,CAAA;AAC1C,OAAO,EACL,4BAA4B,EAC5B,KAAK,kBAAkB,GACxB,MAAM,kCAAkC,CAAA;AACzC,OAAO,EACL,yBAAyB,EACzB,KAAK,qCAAqC,GAC3C,MAAM,uCAAuC,CAAA;AAC9C,OAAO,EACL,sBAAsB,EACtB,KAAK,6BAA6B,GACnC,MAAM,+BAA+B,CAAA;AACtC,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AAC9E,OAAO,EAAE,uBAAuB,EAAE,MAAM,UAAU,CAAA;AAClD,OAAO,EACL,oBAAoB,EACpB,KAAK,gCAAgC,GACtC,MAAM,kCAAkC,CAAA;AACzC,OAAO,EAAE,wBAAwB,EAAE,MAAM,sCAAsC,CAAA;AAC/E,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAClD,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAA;AACxC,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAA;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAA;AACpD,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AACvE,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AAIlG,OAAO,EACL,qBAAqB,EACrB,KAAK,4BAA4B,GAClC,MAAM,mCAAmC,CAAA;AAC1C,OAAO,EAAE,6BAA6B,EAAE,MAAM,2CAA2C,CAAA;AACzF,OAAO,EAAE,aAAa,EAAE,KAAK,yBAAyB,EAAE,MAAM,2BAA2B,CAAA;AACzF,OAAO,EACL,iBAAiB,EACjB,KAAK,6BAA6B,EAClC,KAAK,aAAa,EAClB,KAAK,cAAc,GACpB,MAAM,+BAA+B,CAAA;AAKtC,OAAO,EACL,iBAAiB,EACjB,cAAc,EACd,KAAK,6BAA6B,GACnC,MAAM,+BAA+B,CAAA;AAGtC,OAAO,EACL,6BAA6B,EAC7B,KAAK,yCAAyC,GAC/C,MAAM,2CAA2C,CAAA;AAClD,OAAO,EAAE,wBAAwB,EAAE,MAAM,sCAAsC,CAAA;AAC/E,OAAO,EACL,sBAAsB,EACtB,KAAK,kCAAkC,GACxC,MAAM,oCAAoC,CAAA;AAC3C,OAAO,EACL,0BAA0B,EAC1B,oBAAoB,EACpB,KAAK,sCAAsC,GAC5C,MAAM,wCAAwC,CAAA;AAC/C,OAAO,EACL,uBAAuB,EACvB,KAAK,mCAAmC,GACzC,MAAM,qCAAqC,CAAA;AAC5C,OAAO,EACL,UAAU,EACV,cAAc,EACd,KAAK,cAAc,EACnB,KAAK,WAAW,EAChB,KAAK,aAAa,GACnB,MAAM,mBAAmB,CAAA;AAC1B,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,YAAY,EACZ,KAAK,QAAQ,EACb,KAAK,aAAa,GACnB,MAAM,oBAAoB,CAAA;AAC3B,YAAY,EACV,YAAY,EACZ,SAAS,EACT,UAAU,EACV,aAAa,EACb,wBAAwB,EACxB,eAAe,EACf,WAAW,EACX,kBAAkB,EAClB,eAAe,EACf,qBAAqB,EACrB,YAAY,EACZ,iBAAiB,EACjB,cAAc,EACd,mBAAmB,EACnB,mBAAmB,EACnB,eAAe,EACf,gBAAgB,EAChB,WAAW,EACX,WAAW,GACZ,MAAM,mBAAmB,CAAA;AAC1B,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAA;AAI/D,cAAc,0BAA0B,CAAA"}