@cat-factory/server 0.6.0

package/dist/modules/events/EventsController.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"EventsController.d.ts","sourceRoot":"","sources":["../../../src/modules/events/EventsController.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAE3B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAG/C;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,wBAAgB,gBAAgB,IAAI,IAAI,CAAC,MAAM,CAAC,CAgC/C"}

package/dist/modules/events/EventsController.js

@@ -0,0 +1,56 @@
+import { Hono } from 'hono';
+import { WS_TICKET_TTL_MS, authorizeWsUpgrade, mintWsTicket } from '../../auth/wsTicket.js';
+import { param } from '../../http/params.js';
+/**
+ * Real-time event stream: a WebSocket the SPA subscribes to for live
+ * execution/board updates. The connection is handed to the facade's
+ * {@link RealtimeGateway} (on the Worker: the per-workspace WorkspaceEventsHub
+ * Durable Object; on Node: a WebSocket hub), which holds the socket and broadcasts
+ * events the engine publishes.
+ *
+ * A browser can't set `Authorization` on a WebSocket handshake, so the handshake
+ * authenticates from a `?ticket=` query param. The ticket is NOT the long-lived
+ * session token (which would leak a full-API, multi-day credential into edge /
+ * proxy / Referer logs); it is a short-lived, single-workspace ticket the SPA
+ * mints over the authenticated REST channel via `POST .../events/ticket`. The
+ * ticket is audience-pinned (`ws`) and bound to one `workspaceId`, so it cannot
+ * be replayed as a session, against the LLM proxy, or for another workspace.
+ *
+ * The default-deny gate (in the facade's app) bypasses only the exact GET upgrade;
+ * the per-workspace authorization middleware enforces ownership on the POST mint.
+ *
+ * The ticket mint/verify primitives live in {@link ../../auth/wsTicket.js} so the Node
+ * facade (which handles the upgrade in its HTTP-server `upgrade` listener, not through
+ * this controller) authorises identically.
+ */
+export function eventsController() {
+    const app = new Hono();
+    // Mint a short-lived, workspace-scoped WS ticket. Reached over the authenticated
+    // REST gate; the per-workspace authorization middleware has already confirmed the
+    // caller owns :workspaceId before this runs.
+    app.post('/workspaces/:workspaceId/events/ticket', async (c) => {
+        const cfg = c.get('container').config.auth;
+        const workspaceId = param(c, 'workspaceId');
+        const ticket = await mintWsTicket(cfg, workspaceId);
+        // Auth disabled (dev) yields an empty ticket: the handshake is open, none needed.
+        return c.json(ticket ? { ticket, expiresInMs: WS_TICKET_TTL_MS } : { ticket: '' });
+    });
+    app.get('/workspaces/:workspaceId/events', async (c) => {
+        if (c.req.header('Upgrade')?.toLowerCase() !== 'websocket') {
+            return c.text('expected a websocket upgrade', 426);
+        }
+        const cfg = c.get('container').config.auth;
+        const workspaceId = param(c, 'workspaceId');
+        const auth = await authorizeWsUpgrade(cfg, c.req.query('ticket'), workspaceId);
+        if (!auth.ok)
+            return c.text(auth.message, auth.status);
+        // The actual upgrade is the runtime differentiator (Durable Object on the
+        // Worker, a WebSocket hub on Node) — delegate to the realtime gateway.
+        const upgraded = await c.get('container').gateways.realtime.upgrade(workspaceId, c.req.raw);
+        if (!upgraded)
+            return c.text('real-time events are not enabled', 501);
+        return upgraded;
+    });
+    return app;
+}
+//# sourceMappingURL=EventsController.js.map

package/dist/modules/events/EventsController.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"EventsController.js","sourceRoot":"","sources":["../../../src/modules/events/EventsController.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAC3B,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAA;AAE3F,OAAO,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAA;AAE5C;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,MAAM,UAAU,gBAAgB;IAC9B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAU,CAAA;IAE9B,iFAAiF;IACjF,kFAAkF;IAClF,6CAA6C;IAC7C,GAAG,CAAC,IAAI,CAAC,wCAAwC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC7D,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,IAAI,CAAA;QAC1C,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAA;QAC3C,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,WAAW,CAAC,CAAA;QACnD,kFAAkF;QAClF,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAA;IACpF,CAAC,CAAC,CAAA;IAEF,GAAG,CAAC,GAAG,CAAC,iCAAiC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACrD,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,KAAK,WAAW,EAAE,CAAC;YAC3D,OAAO,CAAC,CAAC,IAAI,CAAC,8BAA8B,EAAE,GAAG,CAAC,CAAA;QACpD,CAAC;QAED,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,IAAI,CAAA;QAC1C,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAA;QAC3C,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,WAAW,CAAC,CAAA;QAC9E,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,CAAA;QAEtD,0EAA0E;QAC1E,uEAAuE;QACvE,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAC3F,IAAI,CAAC,QAAQ;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,kCAAkC,EAAE,GAAG,CAAC,CAAA;QACrE,OAAO,QAAQ,CAAA;IACjB,CAAC,CAAC,CAAA;IAEF,OAAO,GAAG,CAAA;AACZ,CAAC"}

package/dist/modules/execution/ExecutionController.d.ts

@@ -0,0 +1,10 @@
+import { Hono } from 'hono';
+import type { AppEnv } from '../../http/env.js';
+/**
+ * The execution engine endpoints — starting/cancelling runs, resolving decisions
+ * and merging PRs. Runs advance durably server-side via Cloudflare Workflows;
+ * progress reaches the browser over the WebSocket events stream, not by polling.
+ * Mounted under `/workspaces/:workspaceId`.
+ */
+export declare function executionController(): Hono<AppEnv>;
+//# sourceMappingURL=ExecutionController.d.ts.map

package/dist/modules/execution/ExecutionController.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ExecutionController.d.ts","sourceRoot":"","sources":["../../../src/modules/execution/ExecutionController.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAC3B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAU/C;;;;;GAKG;AACH,wBAAgB,mBAAmB,IAAI,IAAI,CAAC,MAAM,CAAC,CAmOlD"}

package/dist/modules/execution/ExecutionController.js

@@ -0,0 +1,156 @@
+import { approveStepSchema, rejectStepSchema, requestStepChangesSchema, resolveDecisionSchema, resolveIterationCapSchema, restartFromStepSchema, startExecutionSchema, } from '@cat-factory/contracts';
+import { Hono } from 'hono';
+import { param } from '../../http/params.js';
+import { jsonBody } from '../../http/validation.js';
+import { personalGateForBlock, personalGateForRun, readPersonalPassword, remintActivations, } from '../providers/personalCredentialGate.js';
+/**
+ * The execution engine endpoints — starting/cancelling runs, resolving decisions
+ * and merging PRs. Runs advance durably server-side via Cloudflare Workflows;
+ * progress reaches the browser over the WebSocket events stream, not by polling.
+ * Mounted under `/workspaces/:workspaceId`.
+ */
+export function executionController() {
+    const app = new Hono();
+    app.post('/blocks/:blockId/executions', jsonBody(startExecutionSchema), async (c) => {
+        const container = c.get('container');
+        const workspaceId = param(c, 'workspaceId');
+        const blockId = param(c, 'blockId');
+        const { pipelineId } = c.req.valid('json');
+        // Individual-usage models (Claude/GLM/Codex) require the initiator's personal
+        // subscription: resolve the initiator + an activation closure (throws 428 when a
+        // password is needed). The password rides on the X-Personal-Password header. A run
+        // touching no individual-usage vendor gets a no-op gate.
+        const { initiatedBy, activate } = await personalGateForBlock(container, workspaceId, blockId, pipelineId, c.get('user'), readPersonalPassword(c));
+        const instance = await container.executionService.start(workspaceId, blockId, pipelineId, initiatedBy, activate);
+        return c.json(instance, 201);
+    });
+    app.delete('/blocks/:blockId/executions', async (c) => {
+        const block = await c
+            .get('container')
+            .executionService.cancel(param(c, 'workspaceId'), param(c, 'blockId'));
+        return c.json(block);
+    });
+    app.post('/blocks/:blockId/merge', async (c) => {
+        const block = await c
+            .get('container')
+            .executionService.mergePr(param(c, 'workspaceId'), param(c, 'blockId'));
+        return c.json(block);
+    });
+    // Current spend-safeguard status (token usage vs budget for this period).
+    app.get('/spend', async (c) => {
+        return c.json(await c.get('container').spendService.status());
+    });
+    // LLM observability for a run: the full per-call detail (prompts, responses,
+    // token usage, output-limit headroom, transport-vs-execution latency) behind the
+    // board's step rollups. Empty when the observability sink is not wired.
+    app.get('/executions/:executionId/llm-metrics', async (c) => {
+        const executionId = param(c, 'executionId');
+        const observability = c.get('container').llmObservability;
+        const calls = observability
+            ? await observability.listByExecution(param(c, 'workspaceId'), executionId)
+            : [];
+        return c.json({ executionId, calls });
+    });
+    // LLM-friendly export of a run's model activity: a self-describing JSON bundle
+    // (totals + per-agent insights + every call, with derived ratios) meant to be
+    // handed straight to a model for analysis. Sets a download filename.
+    app.get('/executions/:executionId/llm-metrics/export', async (c) => {
+        const executionId = param(c, 'executionId');
+        const observability = c.get('container').llmObservability;
+        const exported = observability
+            ? await observability.exportForExecution(param(c, 'workspaceId'), executionId)
+            : {
+                kind: 'cat-factory.llm-metrics-export',
+                version: 1,
+                executionId,
+                generatedAt: 0,
+                totals: {
+                    calls: 0,
+                    promptTokens: 0,
+                    completionTokens: 0,
+                    upstreamMs: 0,
+                    overheadMs: 0,
+                    transportOverheadRatio: null,
+                    errors: 0,
+                    warnings: 0,
+                    truncatedCalls: 0,
+                },
+                insights: [],
+                calls: [],
+            };
+        c.header('content-disposition', `attachment; filename="llm-metrics-${executionId}.json"`);
+        return c.json(exported);
+    });
+    // Resume runs paused by the spend safeguard in this workspace.
+    app.post('/spend/resume', async (c) => {
+        const instances = await c
+            .get('container')
+            .executionService.resumePaused(param(c, 'workspaceId'));
+        return c.json(instances);
+    });
+    app.post('/executions/:executionId/decisions/:decisionId', jsonBody(resolveDecisionSchema), async (c) => {
+        // Re-mint the run's activation BEFORE the engine advances + dispatches the next step.
+        await remintActivations(c, param(c, 'workspaceId'), param(c, 'executionId'));
+        const instance = await c
+            .get('container')
+            .executionService.resolveDecision(param(c, 'workspaceId'), param(c, 'executionId'), param(c, 'decisionId'), c.req.valid('json').choice);
+        return c.json(instance);
+    });
+    // Approve a step's gated proposal (optionally with a human-edited proposal);
+    // the run advances to the next step carrying it forward as context.
+    app.post('/executions/:executionId/steps/:approvalId/approve', jsonBody(approveStepSchema), async (c) => {
+        // Re-mint the run's activation BEFORE the engine advances + dispatches the next step.
+        await remintActivations(c, param(c, 'workspaceId'), param(c, 'executionId'));
+        const instance = await c
+            .get('container')
+            .executionService.approveStep(param(c, 'workspaceId'), param(c, 'executionId'), param(c, 'approvalId'), { proposal: c.req.valid('json').proposal });
+        return c.json(instance);
+    });
+    // Request changes on a gated proposal: the step re-runs with the reviewer's
+    // freeform feedback and/or per-block comments.
+    app.post('/executions/:executionId/steps/:approvalId/request-changes', jsonBody(requestStepChangesSchema), async (c) => {
+        const { feedback, comments } = c.req.valid('json');
+        // The step re-runs (dispatches) — re-mint the run's activation first.
+        await remintActivations(c, param(c, 'workspaceId'), param(c, 'executionId'));
+        const instance = await c
+            .get('container')
+            .executionService.requestStepChanges(param(c, 'workspaceId'), param(c, 'executionId'), param(c, 'approvalId'), { feedback, comments });
+        return c.json(instance);
+    });
+    // Resolve a companion step parked at its automatic-rework cap: one more round /
+    // proceed accepting the current output / stop and reset the task to phase zero. The
+    // companion analogue of the requirements gate's resolve-exceeded; guarded so the
+    // generic approve/reject can't short-circuit it.
+    app.post('/executions/:executionId/steps/:approvalId/resolve-exceeded', jsonBody(resolveIterationCapSchema), async (c) => {
+        // extra-round / proceed re-dispatch the next agent step — re-mint first.
+        await remintActivations(c, param(c, 'workspaceId'), param(c, 'executionId'));
+        const instance = await c
+            .get('container')
+            .executionService.resolveCompanionExceeded(param(c, 'workspaceId'), param(c, 'executionId'), param(c, 'approvalId'), c.req.valid('json').choice);
+        return c.json(instance);
+    });
+    // Restart a run from a chosen step: re-run from `fromStepIndex` onward (resetting
+    // that step + every later step's iteration counters) while keeping the earlier
+    // steps' outputs as handoff context. Works on a run in any state — the engine tears
+    // down a still-running driver/container first. Mints a fresh run id, so it re-drives
+    // like a retry. Individual-usage models (Claude/GLM/Codex) need the initiator's
+    // personal subscription, resolved + activated here (428 when a password is needed).
+    app.post('/executions/:executionId/restart', jsonBody(restartFromStepSchema), async (c) => {
+        const container = c.get('container');
+        const workspaceId = param(c, 'workspaceId');
+        const executionId = param(c, 'executionId');
+        const { fromStepIndex } = c.req.valid('json');
+        const { initiatedBy, activate } = await personalGateForRun(container, workspaceId, executionId, c.get('user'), readPersonalPassword(c));
+        const instance = await container.executionService.restartFromStep(workspaceId, executionId, fromStepIndex, initiatedBy, activate);
+        return c.json(instance);
+    });
+    // Reject a gated proposal: the run stops entirely (a terminal, retryable failure).
+    app.post('/executions/:executionId/steps/:approvalId/reject', jsonBody(rejectStepSchema), async (c) => {
+        const instance = await c
+            .get('container')
+            .executionService.rejectStep(param(c, 'workspaceId'), param(c, 'executionId'), param(c, 'approvalId'), c.req.valid('json').reason);
+        return c.json(instance);
+    });
+    return app;
+}
+//# sourceMappingURL=ExecutionController.js.map

package/dist/modules/execution/ExecutionController.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ExecutionController.js","sourceRoot":"","sources":["../../../src/modules/execution/ExecutionController.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,wBAAwB,EACxB,qBAAqB,EACrB,yBAAyB,EACzB,qBAAqB,EACrB,oBAAoB,GACrB,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAE3B,OAAO,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAA;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAA;AACnD,OAAO,EACL,oBAAoB,EACpB,kBAAkB,EAClB,oBAAoB,EACpB,iBAAiB,GAClB,MAAM,wCAAwC,CAAA;AAE/C;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB;IACjC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAU,CAAA;IAE9B,GAAG,CAAC,IAAI,CAAC,6BAA6B,EAAE,QAAQ,CAAC,oBAAoB,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAClF,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;QACpC,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAA;QAC3C,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAA;QACnC,MAAM,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QAC1C,8EAA8E;QAC9E,iFAAiF;QACjF,mFAAmF;QACnF,yDAAyD;QACzD,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,GAAG,MAAM,oBAAoB,CAC1D,SAAS,EACT,WAAW,EACX,OAAO,EACP,UAAU,EACV,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EACb,oBAAoB,CAAC,CAAC,CAAC,CACxB,CAAA;QACD,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,gBAAgB,CAAC,KAAK,CACrD,WAAW,EACX,OAAO,EACP,UAAU,EACV,WAAW,EACX,QAAQ,CACT,CAAA;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAA;IAC9B,CAAC,CAAC,CAAA;IAEF,GAAG,CAAC,MAAM,CAAC,6BAA6B,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACpD,MAAM,KAAK,GAAG,MAAM,CAAC;aAClB,GAAG,CAAC,WAAW,CAAC;aAChB,gBAAgB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAA;QACxE,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACtB,CAAC,CAAC,CAAA;IAEF,GAAG,CAAC,IAAI,CAAC,wBAAwB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC7C,MAAM,KAAK,GAAG,MAAM,CAAC;aAClB,GAAG,CAAC,WAAW,CAAC;aAChB,gBAAgB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAA;QACzE,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACtB,CAAC,CAAC,CAAA;IAEF,0EAA0E;IAC1E,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC5B,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,CAAA;IAC/D,CAAC,CAAC,CAAA;IAEF,6EAA6E;IAC7E,iFAAiF;IACjF,wEAAwE;IACxE,GAAG,CAAC,GAAG,CAAC,sCAAsC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC1D,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAA;QAC3C,MAAM,aAAa,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,gBAAgB,CAAA;QACzD,MAAM,KAAK,GAAG,aAAa;YACzB,CAAC,CAAC,MAAM,aAAa,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EAAE,WAAW,CAAC;YAC3E,CAAC,CAAC,EAAE,CAAA;QACN,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAA;IACvC,CAAC,CAAC,CAAA;IAEF,+EAA+E;IAC/E,8EAA8E;IAC9E,qEAAqE;IACrE,GAAG,CAAC,GAAG,CAAC,6CAA6C,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACjE,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAA;QAC3C,MAAM,aAAa,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,gBAAgB,CAAA;QACzD,MAAM,QAAQ,GAAG,aAAa;YAC5B,CAAC,CAAC,MAAM,aAAa,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EAAE,WAAW,CAAC;YAC9E,CAAC,CAAC;gBACE,IAAI,EAAE,gCAAyC;gBAC/C,OAAO,EAAE,CAAU;gBACnB,WAAW;gBACX,WAAW,EAAE,CAAC;gBACd,MAAM,EAAE;oBACN,KAAK,EAAE,CAAC;oBACR,YAAY,EAAE,CAAC;oBACf,gBAAgB,EAAE,CAAC;oBACnB,UAAU,EAAE,CAAC;oBACb,UAAU,EAAE,CAAC;oBACb,sBAAsB,EAAE,IAAI;oBAC5B,MAAM,EAAE,CAAC;oBACT,QAAQ,EAAE,CAAC;oBACX,cAAc,EAAE,CAAC;iBAClB;gBACD,QAAQ,EAAE,EAAE;gBACZ,KAAK,EAAE,EAAE;aACV,CAAA;QACL,CAAC,CAAC,MAAM,CAAC,qBAAqB,EAAE,qCAAqC,WAAW,QAAQ,CAAC,CAAA;QACzF,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IACzB,CAAC,CAAC,CAAA;IAEF,+DAA+D;IAC/D,GAAG,CAAC,IAAI,CAAC,eAAe,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACpC,MAAM,SAAS,GAAG,MAAM,CAAC;aACtB,GAAG,CAAC,WAAW,CAAC;aAChB,gBAAgB,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAA;QACzD,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IAC1B,CAAC,CAAC,CAAA;IAEF,GAAG,CAAC,IAAI,CACN,gDAAgD,EAChD,QAAQ,CAAC,qBAAqB,CAAC,EAC/B,KAAK,EAAE,CAAC,EAAE,EAAE;QACV,sFAAsF;QACtF,MAAM,iBAAiB,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAA;QAC5E,MAAM,QAAQ,GAAG,MAAM,CAAC;aACrB,GAAG,CAAC,WAAW,CAAC;aAChB,gBAAgB,CAAC,eAAe,CAC/B,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EACvB,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EACvB,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,EACtB,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,CAC3B,CAAA;QACH,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IACzB,CAAC,CACF,CAAA;IAED,6EAA6E;IAC7E,oEAAoE;IACpE,GAAG,CAAC,IAAI,CACN,oDAAoD,EACpD,QAAQ,CAAC,iBAAiB,CAAC,EAC3B,KAAK,EAAE,CAAC,EAAE,EAAE;QACV,sFAAsF;QACtF,MAAM,iBAAiB,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAA;QAC5E,MAAM,QAAQ,GAAG,MAAM,CAAC;aACrB,GAAG,CAAC,WAAW,CAAC;aAChB,gBAAgB,CAAC,WAAW,CAC3B,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EACvB,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EACvB,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,EACtB,EAAE,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAC3C,CAAA;QACH,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IACzB,CAAC,CACF,CAAA;IAED,4EAA4E;IAC5E,+CAA+C;IAC/C,GAAG,CAAC,IAAI,CACN,4DAA4D,EAC5D,QAAQ,CAAC,wBAAwB,CAAC,EAClC,KAAK,EAAE,CAAC,EAAE,EAAE;QACV,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QAClD,sEAAsE;QACtE,MAAM,iBAAiB,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAA;QAC5E,MAAM,QAAQ,GAAG,MAAM,CAAC;aACrB,GAAG,CAAC,WAAW,CAAC;aAChB,gBAAgB,CAAC,kBAAkB,CAClC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EACvB,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EACvB,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,EACtB,EAAE,QAAQ,EAAE,QAAQ,EAAE,CACvB,CAAA;QACH,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IACzB,CAAC,CACF,CAAA;IAED,gFAAgF;IAChF,oFAAoF;IACpF,iFAAiF;IACjF,iDAAiD;IACjD,GAAG,CAAC,IAAI,CACN,6DAA6D,EAC7D,QAAQ,CAAC,yBAAyB,CAAC,EACnC,KAAK,EAAE,CAAC,EAAE,EAAE;QACV,yEAAyE;QACzE,MAAM,iBAAiB,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAA;QAC5E,MAAM,QAAQ,GAAG,MAAM,CAAC;aACrB,GAAG,CAAC,WAAW,CAAC;aAChB,gBAAgB,CAAC,wBAAwB,CACxC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EACvB,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EACvB,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,EACtB,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,CAC3B,CAAA;QACH,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IACzB,CAAC,CACF,CAAA;IAED,kFAAkF;IAClF,+EAA+E;IAC/E,oFAAoF;IACpF,qFAAqF;IACrF,gFAAgF;IAChF,oFAAoF;IACpF,GAAG,CAAC,IAAI,CAAC,kCAAkC,EAAE,QAAQ,CAAC,qBAAqB,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACxF,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;QACpC,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAA;QAC3C,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAA;QAC3C,MAAM,EAAE,aAAa,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QAC7C,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,GAAG,MAAM,kBAAkB,CACxD,SAAS,EACT,WAAW,EACX,WAAW,EACX,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EACb,oBAAoB,CAAC,CAAC,CAAC,CACxB,CAAA;QACD,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,gBAAgB,CAAC,eAAe,CAC/D,WAAW,EACX,WAAW,EACX,aAAa,EACb,WAAW,EACX,QAAQ,CACT,CAAA;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IACzB,CAAC,CAAC,CAAA;IAEF,mFAAmF;IACnF,GAAG,CAAC,IAAI,CACN,mDAAmD,EACnD,QAAQ,CAAC,gBAAgB,CAAC,EAC1B,KAAK,EAAE,CAAC,EAAE,EAAE;QACV,MAAM,QAAQ,GAAG,MAAM,CAAC;aACrB,GAAG,CAAC,WAAW,CAAC;aAChB,gBAAgB,CAAC,UAAU,CAC1B,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EACvB,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EACvB,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,EACtB,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,CAC3B,CAAA;QACH,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IACzB,CAAC,CACF,CAAA;IAED,OAAO,GAAG,CAAA;AACZ,CAAC"}

package/dist/modules/fragmentLibrary/FragmentLibraryController.d.ts

@@ -0,0 +1,14 @@
+import { Hono } from 'hono';
+import type { AppEnv } from '../../http/env.js';
+type Scope = 'account' | 'workspace';
+/**
+ * The prompt-fragment library API (ADR 0006 §8), mounted twice — once under
+ * `/accounts/:accountId` and once under `/workspaces/:workspaceId` — so a tier's
+ * fragments and repo sources are managed at the scope that owns them. Workspace
+ * routes are authorized by the global per-workspace gate in app.ts; account
+ * routes guard on account membership here. The merged/resolved read (what an
+ * agent actually sees) is workspace-only.
+ */
+export declare function fragmentLibraryController(scope: Scope): Hono<AppEnv>;
+export {};
+//# sourceMappingURL=FragmentLibraryController.d.ts.map

package/dist/modules/fragmentLibrary/FragmentLibraryController.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"FragmentLibraryController.d.ts","sourceRoot":"","sources":["../../../src/modules/fragmentLibrary/FragmentLibraryController.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAG3B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAI/C,KAAK,KAAK,GAAG,SAAS,GAAG,WAAW,CAAA;AAwBpC;;;;;;;GAOG;AACH,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,CAwGpE"}

package/dist/modules/fragmentLibrary/FragmentLibraryController.js

@@ -0,0 +1,128 @@
+import { createPromptFragmentSchema, linkFragmentSourceSchema, updatePromptFragmentSchema, } from '@cat-factory/contracts';
+import { Hono } from 'hono';
+import { param } from '../../http/params.js';
+import { jsonBody } from '../../http/validation.js';
+/** Resolve the fragment-library module or send a 503 when unconfigured. */
+function requireLibrary(c) {
+    return c.get('container').fragmentLibrary ?? null;
+}
+const unavailable = (c) => c.json({ error: { code: 'unavailable', message: 'Prompt-fragment library is not configured' } }, 503);
+const sourcesUnavailable = (c) => c.json({
+    error: {
+        code: 'unavailable',
+        message: 'Repo-sourced fragments require the GitHub integration to be configured',
+    },
+}, 503);
+/**
+ * The prompt-fragment library API (ADR 0006 §8), mounted twice — once under
+ * `/accounts/:accountId` and once under `/workspaces/:workspaceId` — so a tier's
+ * fragments and repo sources are managed at the scope that owns them. Workspace
+ * routes are authorized by the global per-workspace gate in app.ts; account
+ * routes guard on account membership here. The merged/resolved read (what an
+ * agent actually sees) is workspace-only.
+ */
+export function fragmentLibraryController(scope) {
+    const app = new Hono();
+    const ownerId = (c) => scope === 'account' ? param(c, 'accountId') : param(c, 'workspaceId');
+    const ownerKind = scope;
+    // Account-scoped routes are an authenticated concept: require sign-in and
+    // membership in the addressed account (404 hides existence, mirroring boards).
+    if (scope === 'account') {
+        app.use('/prompt-fragments', accountGuard);
+        app.use('/prompt-fragments/*', accountGuard);
+        app.use('/fragment-sources', accountGuard);
+        app.use('/fragment-sources/*', accountGuard);
+    }
+    // ---- fragments (this tier, raw — not merged) ----------------------------
+    app.get('/prompt-fragments', async (c) => {
+        const lib = requireLibrary(c);
+        if (!lib)
+            return unavailable(c);
+        return c.json(await lib.libraryService.listTier(ownerKind, ownerId(c)));
+    });
+    app.post('/prompt-fragments', jsonBody(createPromptFragmentSchema), async (c) => {
+        const lib = requireLibrary(c);
+        if (!lib)
+            return unavailable(c);
+        const fragment = await lib.libraryService.create(ownerKind, ownerId(c), c.req.valid('json'));
+        return c.json(fragment, 201);
+    });
+    app.patch('/prompt-fragments/:fragmentId{.+}', jsonBody(updatePromptFragmentSchema), async (c) => {
+        const lib = requireLibrary(c);
+        if (!lib)
+            return unavailable(c);
+        const fragment = await lib.libraryService.update(ownerKind, ownerId(c), param(c, 'fragmentId'), c.req.valid('json'));
+        return c.json(fragment);
+    });
+    app.delete('/prompt-fragments/:fragmentId{.+}', async (c) => {
+        const lib = requireLibrary(c);
+        if (!lib)
+            return unavailable(c);
+        await lib.libraryService.remove(ownerKind, ownerId(c), param(c, 'fragmentId'));
+        return c.body(null, 204);
+    });
+    // ---- repo sources -------------------------------------------------------
+    app.get('/fragment-sources', async (c) => {
+        const lib = requireLibrary(c);
+        if (!lib)
+            return unavailable(c);
+        if (!lib.sourceService)
+            return sourcesUnavailable(c);
+        return c.json(await lib.sourceService.list(ownerKind, ownerId(c)));
+    });
+    app.post('/fragment-sources', jsonBody(linkFragmentSourceSchema), async (c) => {
+        const lib = requireLibrary(c);
+        if (!lib)
+            return unavailable(c);
+        if (!lib.sourceService)
+            return sourcesUnavailable(c);
+        const source = await lib.sourceService.link(ownerKind, ownerId(c), c.req.valid('json'));
+        return c.json(source, 201);
+    });
+    app.delete('/fragment-sources/:id', async (c) => {
+        const lib = requireLibrary(c);
+        if (!lib)
+            return unavailable(c);
+        if (!lib.sourceService)
+            return sourcesUnavailable(c);
+        await lib.sourceService.unlink(param(c, 'id'));
+        return c.body(null, 204);
+    });
+    app.get('/fragment-sources/:id/status', async (c) => {
+        const lib = requireLibrary(c);
+        if (!lib)
+            return unavailable(c);
+        if (!lib.sourceService)
+            return sourcesUnavailable(c);
+        return c.json(await lib.sourceService.status(param(c, 'id')));
+    });
+    app.post('/fragment-sources/:id/sync', async (c) => {
+        const lib = requireLibrary(c);
+        if (!lib)
+            return unavailable(c);
+        if (!lib.sourceService)
+            return sourcesUnavailable(c);
+        return c.json(await lib.sourceService.sync(param(c, 'id')));
+    });
+    // ---- resolved (workspace only) — the merged catalog an agent sees -------
+    if (scope === 'workspace') {
+        app.get('/prompt-fragments/resolved', async (c) => {
+            const lib = requireLibrary(c);
+            if (!lib)
+                return unavailable(c);
+            return c.json(await lib.libraryService.resolvedCatalog(param(c, 'workspaceId')));
+        });
+    }
+    return app;
+}
+/** Guard an account-scoped request: require sign-in + membership (404 otherwise). */
+async function accountGuard(c, next) {
+    const user = c.get('user');
+    if (!user) {
+        return c.json({ error: { code: 'unauthorized', message: 'Sign in to manage the library' } }, 401);
+    }
+    // requireMember throws NotFoundError (→ 404) when the user isn't a member.
+    await c.get('container').accountService.requireMember(param(c, 'accountId'), user.id);
+    await next();
+}
+//# sourceMappingURL=FragmentLibraryController.js.map

package/dist/modules/fragmentLibrary/FragmentLibraryController.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"FragmentLibraryController.js","sourceRoot":"","sources":["../../../src/modules/fragmentLibrary/FragmentLibraryController.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,0BAA0B,EAC1B,wBAAwB,EACxB,0BAA0B,GAC3B,MAAM,wBAAwB,CAAA;AAE/B,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAI3B,OAAO,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAA;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAA;AAInD,2EAA2E;AAC3E,SAAS,cAAc,CAAC,CAAkB;IACxC,OAAO,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,eAAe,IAAI,IAAI,CAAA;AACnD,CAAC;AAED,MAAM,WAAW,GAAG,CAAC,CAAkB,EAAE,EAAE,CACzC,CAAC,CAAC,IAAI,CACJ,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,2CAA2C,EAAE,EAAE,EACxF,GAAG,CACJ,CAAA;AAEH,MAAM,kBAAkB,GAAG,CAAC,CAAkB,EAAE,EAAE,CAChD,CAAC,CAAC,IAAI,CACJ;IACE,KAAK,EAAE;QACL,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,wEAAwE;KAClF;CACF,EACD,GAAG,CACJ,CAAA;AAEH;;;;;;;GAOG;AACH,MAAM,UAAU,yBAAyB,CAAC,KAAY;IACpD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAU,CAAA;IAE9B,MAAM,OAAO,GAAG,CAAC,CAAkB,EAAE,EAAE,CACrC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAA;IACvE,MAAM,SAAS,GAAsB,KAAK,CAAA;IAE1C,0EAA0E;IAC1E,+EAA+E;IAC/E,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,GAAG,CAAC,GAAG,CAAC,mBAAmB,EAAE,YAAY,CAAC,CAAA;QAC1C,GAAG,CAAC,GAAG,CAAC,qBAAqB,EAAE,YAAY,CAAC,CAAA;QAC5C,GAAG,CAAC,GAAG,CAAC,mBAAmB,EAAE,YAAY,CAAC,CAAA;QAC1C,GAAG,CAAC,GAAG,CAAC,qBAAqB,EAAE,YAAY,CAAC,CAAA;IAC9C,CAAC;IAED,4EAA4E;IAE5E,GAAG,CAAC,GAAG,CAAC,mBAAmB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACvC,MAAM,GAAG,GAAG,cAAc,CAAC,CAAC,CAAC,CAAA;QAC7B,IAAI,CAAC,GAAG;YAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAA;QAC/B,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,cAAc,CAAC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACzE,CAAC,CAAC,CAAA;IAEF,GAAG,CAAC,IAAI,CAAC,mBAAmB,EAAE,QAAQ,CAAC,0BAA0B,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC9E,MAAM,GAAG,GAAG,cAAc,CAAC,CAAC,CAAC,CAAA;QAC7B,IAAI,CAAC,GAAG;YAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAA;QAC/B,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAA;QAC5F,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAA;IAC9B,CAAC,CAAC,CAAA;IAEF,GAAG,CAAC,KAAK,CACP,mCAAmC,EACnC,QAAQ,CAAC,0BAA0B,CAAC,EACpC,KAAK,EAAE,CAAC,EAAE,EAAE;QACV,MAAM,GAAG,GAAG,cAAc,CAAC,CAAC,CAAC,CAAA;QAC7B,IAAI,CAAC,GAAG;YAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAA;QAC/B,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,MAAM,CAC9C,SAAS,EACT,OAAO,CAAC,CAAC,CAAC,EACV,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,EACtB,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CACpB,CAAA;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IACzB,CAAC,CACF,CAAA;IAED,GAAG,CAAC,MAAM,CAAC,mCAAmC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC1D,MAAM,GAAG,GAAG,cAAc,CAAC,CAAC,CAAC,CAAA;QAC7B,IAAI,CAAC,GAAG;YAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAA;QAC/B,MAAM,GAAG,CAAC,cAAc,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,CAAA;QAC9E,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;IAC1B,CAAC,CAAC,CAAA;IAEF,4EAA4E;IAE5E,GAAG,CAAC,GAAG,CAAC,mBAAmB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACvC,MAAM,GAAG,GAAG,cAAc,CAAC,CAAC,CAAC,CAAA;QAC7B,IAAI,CAAC,GAAG;YAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAA;QAC/B,IAAI,CAAC,GAAG,CAAC,aAAa;YAAE,OAAO,kBAAkB,CAAC,CAAC,CAAC,CAAA;QACpD,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACpE,CAAC,CAAC,CAAA;IAEF,GAAG,CAAC,IAAI,CAAC,mBAAmB,EAAE,QAAQ,CAAC,wBAAwB,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC5E,MAAM,GAAG,GAAG,cAAc,CAAC,CAAC,CAAC,CAAA;QAC7B,IAAI,CAAC,GAAG;YAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAA;QAC/B,IAAI,CAAC,GAAG,CAAC,aAAa;YAAE,OAAO,kBAAkB,CAAC,CAAC,CAAC,CAAA;QACpD,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAA;QACvF,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC5B,CAAC,CAAC,CAAA;IAEF,GAAG,CAAC,MAAM,CAAC,uBAAuB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC9C,MAAM,GAAG,GAAG,cAAc,CAAC,CAAC,CAAC,CAAA;QAC7B,IAAI,CAAC,GAAG;YAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAA;QAC/B,IAAI,CAAC,GAAG,CAAC,aAAa;YAAE,OAAO,kBAAkB,CAAC,CAAC,CAAC,CAAA;QACpD,MAAM,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAA;QAC9C,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;IAC1B,CAAC,CAAC,CAAA;IAEF,GAAG,CAAC,GAAG,CAAC,8BAA8B,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAClD,MAAM,GAAG,GAAG,cAAc,CAAC,CAAC,CAAC,CAAA;QAC7B,IAAI,CAAC,GAAG;YAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAA;QAC/B,IAAI,CAAC,GAAG,CAAC,aAAa;YAAE,OAAO,kBAAkB,CAAC,CAAC,CAAC,CAAA;QACpD,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAA;IAC/D,CAAC,CAAC,CAAA;IAEF,GAAG,CAAC,IAAI,CAAC,4BAA4B,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACjD,MAAM,GAAG,GAAG,cAAc,CAAC,CAAC,CAAC,CAAA;QAC7B,IAAI,CAAC,GAAG;YAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAA;QAC/B,IAAI,CAAC,GAAG,CAAC,aAAa;YAAE,OAAO,kBAAkB,CAAC,CAAC,CAAC,CAAA;QACpD,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAA;IAC7D,CAAC,CAAC,CAAA;IAEF,4EAA4E;IAE5E,IAAI,KAAK,KAAK,WAAW,EAAE,CAAC;QAC1B,GAAG,CAAC,GAAG,CAAC,4BAA4B,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;YAChD,MAAM,GAAG,GAAG,cAAc,CAAC,CAAC,CAAC,CAAA;YAC7B,IAAI,CAAC,GAAG;gBAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAA;YAC/B,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,cAAc,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC,CAAA;QAClF,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,qFAAqF;AACrF,KAAK,UAAU,YAAY,CAAC,CAAkB,EAAE,IAAyB;IACvE,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IAC1B,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,+BAA+B,EAAE,EAAE,EAC7E,GAAG,CACJ,CAAA;IACH,CAAC;IACD,2EAA2E;IAC3E,MAAM,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,cAAc,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,WAAW,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC,CAAA;IACrF,MAAM,IAAI,EAAE,CAAA;AACd,CAAC"}

package/dist/modules/github/GitHubController.d.ts

@@ -0,0 +1,12 @@
+import { Hono } from 'hono';
+import type { AppEnv } from '../../http/env.js';
+/**
+ * Workspace-scoped GitHub endpoints: connection management, projection reads
+ * (served from the local DB — fast and rate-limit-free), resync triggers, and repo
+ * writes. Mounted under `/workspaces/:workspaceId`. Runtime-neutral: the async resync
+ * paths (full backfill, single-repo resync) are delegated to the facade's GitHub
+ * gateways, which schedule out of band (Cloudflare Workflow/Queue or pg-boss) or
+ * report that the caller should run them inline.
+ */
+export declare function githubController(): Hono<AppEnv>;
+//# sourceMappingURL=GitHubController.d.ts.map

package/dist/modules/github/GitHubController.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"GitHubController.d.ts","sourceRoot":"","sources":["../../../src/modules/github/GitHubController.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAI3B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAc/C;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,IAAI,IAAI,CAAC,MAAM,CAAC,CA+Q/C"}