@cat-factory/server 0.6.0

package/dist/modules/github/GitHubController.js

@@ -0,0 +1,234 @@
+import { commentSchema, commitFilesSchema, createBranchSchema, createRepoRequestSchema, linkReposSchema, mergePullRequestSchema, openPullRequestSchema, resyncRequestSchema, setRepoMonorepoSchema, } from '@cat-factory/contracts';
+import { Hono } from 'hono';
+import * as v from 'valibot';
+import { StateSigner } from '../../github/state.js';
+import { param } from '../../http/params.js';
+import { jsonBody } from '../../http/validation.js';
+const connectSchema = v.object({ installationId: v.number() });
+/** Resolve the GitHub module or send a 503, returning null when unconfigured. */
+function requireGitHub(c) {
+    return c.get('container').github ?? null;
+}
+const unavailable = (c) => c.json({ error: { code: 'unavailable', message: 'GitHub integration is not configured' } }, 503);
+/**
+ * Workspace-scoped GitHub endpoints: connection management, projection reads
+ * (served from the local DB — fast and rate-limit-free), resync triggers, and repo
+ * writes. Mounted under `/workspaces/:workspaceId`. Runtime-neutral: the async resync
+ * paths (full backfill, single-repo resync) are delegated to the facade's GitHub
+ * gateways, which schedule out of band (Cloudflare Workflow/Queue or pg-boss) or
+ * report that the caller should run them inline.
+ */
+export function githubController() {
+    const app = new Hono();
+    // ---- connection ---------------------------------------------------------
+    // The URL the frontend should redirect to so a workspace owner can install
+    // the App; carries an HMAC-signed `state` binding the install to this workspace.
+    app.get('/github/install-url', async (c) => {
+        const github = requireGitHub(c);
+        if (!github)
+            return unavailable(c);
+        const config = c.get('container').config.github;
+        const signer = new StateSigner(config.webhookSecret);
+        // Bind the install to this workspace AND the signed-in user, with a short
+        // expiry. (The per-workspace authorization middleware has already confirmed
+        // the caller owns :workspaceId before this handler runs.)
+        const state = await signer.sign({
+            workspaceId: param(c, 'workspaceId'),
+            userId: c.get('user')?.id ?? null,
+            exp: Date.now() + 10 * 60 * 1000,
+        });
+        const url = `https://github.com/apps/${config.appSlug}/installations/new?state=${encodeURIComponent(state)}`;
+        return c.json({ url });
+    });
+    app.get('/github/connection', async (c) => {
+        const github = requireGitHub(c);
+        if (!github)
+            return unavailable(c);
+        const connection = await github.installationService.getConnection(param(c, 'workspaceId'));
+        return c.json({ connection });
+    });
+    // Discover the App's installations so the UI can offer a pick instead of a
+    // manually typed installation id (the caller already owns :workspaceId).
+    app.get('/github/installations', async (c) => {
+        const github = requireGitHub(c);
+        if (!github)
+            return unavailable(c);
+        const installations = await github.installationService.listAvailableInstallations(param(c, 'workspaceId'));
+        return c.json({ installations });
+    });
+    // Programmatic bind (the browser flow uses /github/setup/callback instead).
+    // Used by the "discover & link" picker and connect-by-id. Binds the installation
+    // to the workspace's account; repos are then linked explicitly (see below), so
+    // there is no whole-installation backfill on connect.
+    app.post('/github/connect', jsonBody(connectSchema), async (c) => {
+        const github = requireGitHub(c);
+        if (!github)
+            return unavailable(c);
+        const workspaceId = param(c, 'workspaceId');
+        const { installationId } = c.req.valid('json');
+        const connection = await github.installationService.connect(workspaceId, installationId);
+        return c.json(connection, 201);
+    });
+    // The repos the connected installation can access, annotated with whether this
+    // workspace links each. Drives the per-workspace repo picker.
+    app.get('/github/available-repos', async (c) => {
+        const github = requireGitHub(c);
+        if (!github)
+            return unavailable(c);
+        return c.json(await github.syncService.listAvailableRepos(param(c, 'workspaceId')));
+    });
+    // Set the exact set of repos this workspace links. Projects the selection,
+    // tombstones the rest, and deep-syncs the linked repos.
+    app.put('/github/repos', jsonBody(linkReposSchema), async (c) => {
+        const github = requireGitHub(c);
+        if (!github)
+            return unavailable(c);
+        const repos = await github.syncService.setLinkedRepos(param(c, 'workspaceId'), c.req.valid('json').repoGithubIds);
+        return c.json(repos);
+    });
+    // Flag (or unflag) a linked repo as a monorepo: the board then lets several service
+    // frames target the same repo, each pinned to a subdirectory (the picker below).
+    app.patch('/github/repos/:repoGithubId', jsonBody(setRepoMonorepoSchema), async (c) => {
+        const github = requireGitHub(c);
+        if (!github)
+            return unavailable(c);
+        const repo = await github.syncService.setRepoMonorepo(param(c, 'workspaceId'), Number(param(c, 'repoGithubId')), c.req.valid('json').isMonorepo);
+        return c.json(repo);
+    });
+    // Browse one level of a (monorepo) repo's tree so the service picker can pin a
+    // service to a subdirectory. `path` ('' = root) is the directory to list.
+    app.get('/github/repos/:repoGithubId/tree', async (c) => {
+        const github = requireGitHub(c);
+        if (!github)
+            return unavailable(c);
+        return c.json(await github.syncService.listRepoDirectory(param(c, 'workspaceId'), Number(param(c, 'repoGithubId')), c.req.query('path') ?? ''));
+    });
+    app.delete('/github/connection', async (c) => {
+        const github = requireGitHub(c);
+        if (!github)
+            return unavailable(c);
+        await github.installationService.disconnect(param(c, 'workspaceId'));
+        return c.body(null, 204);
+    });
+    // ---- resync -------------------------------------------------------------
+    app.post('/github/resync', jsonBody(resyncRequestSchema), async (c) => {
+        const github = requireGitHub(c);
+        if (!github)
+            return unavailable(c);
+        const workspaceId = param(c, 'workspaceId');
+        const { repoGithubId, full } = c.req.valid('json');
+        const { gateways } = c.get('container');
+        if (full) {
+            const installation = await github.installationService.requireInstallation(workspaceId);
+            const scheduled = await gateways.githubBackfill.scheduleBackfill(installation.installationId);
+            if (scheduled)
+                return c.json({ status: 'backfill_started' }, 202);
+            await github.syncService.backfillInstallation(installation.installationId);
+            return c.json({ status: 'backfilled' });
+        }
+        // Incremental: a single repo (optionally out of band) or the whole workspace.
+        if (repoGithubId !== undefined) {
+            const queued = await gateways.githubWebhook.queueRepoResync(workspaceId, repoGithubId);
+            if (queued)
+                return c.json({ status: 'queued' }, 202);
+            await github.syncService.syncRepoById(workspaceId, repoGithubId);
+            return c.json({ status: 'synced' });
+        }
+        await github.syncService.resyncWorkspace(workspaceId);
+        return c.json({ status: 'synced' });
+    });
+    // ---- projection reads ---------------------------------------------------
+    app.get('/github/repos', async (c) => {
+        const github = requireGitHub(c);
+        if (!github)
+            return unavailable(c);
+        return c.json(await github.service.listRepos(param(c, 'workspaceId')));
+    });
+    app.get('/github/repos/:repoGithubId/branches', async (c) => {
+        const github = requireGitHub(c);
+        if (!github)
+            return unavailable(c);
+        return c.json(await github.service.listBranches(param(c, 'workspaceId'), Number(param(c, 'repoGithubId'))));
+    });
+    app.get('/github/pulls', async (c) => {
+        const github = requireGitHub(c);
+        if (!github)
+            return unavailable(c);
+        return c.json(await github.service.listPullRequests(param(c, 'workspaceId')));
+    });
+    app.get('/github/issues', async (c) => {
+        const github = requireGitHub(c);
+        if (!github)
+            return unavailable(c);
+        return c.json(await github.service.listIssues(param(c, 'workspaceId')));
+    });
+    // ---- writes -------------------------------------------------------------
+    // Programmatically create a repository under the connected account (privileged
+    // App tier, ADR 0005). 503 when no privileged App is configured; 409 when the
+    // account isn't actually privileged, so the caller can fall back.
+    app.post('/github/repos', jsonBody(createRepoRequestSchema), async (c) => {
+        const github = requireGitHub(c);
+        if (!github)
+            return unavailable(c);
+        if (!github.provisioningService) {
+            return c.json({ error: { code: 'unavailable', message: 'Direct repo creation is not configured' } }, 503);
+        }
+        const workspaceId = param(c, 'workspaceId');
+        const { name, private: isPrivate, description } = c.req.valid('json');
+        // Owner = the connected installation's account (throws 409 when unconnected).
+        const installation = await github.installationService.requireInstallation(workspaceId);
+        const result = await github.provisioningService.provision(installation.installationId, {
+            org: installation.accountLogin,
+            name,
+            private: isPrivate,
+            description,
+        });
+        if (result.status === 'delegated') {
+            return c.json({
+                error: {
+                    code: 'not_privileged',
+                    message: `cat-factory can't create repositories under ${installation.accountLogin} (${result.reason}).`,
+                },
+            }, 409);
+        }
+        return c.json(result.repo, 201);
+    });
+    app.post('/github/repos/:repoGithubId/branches', jsonBody(createBranchSchema), async (c) => {
+        const github = requireGitHub(c);
+        if (!github)
+            return unavailable(c);
+        const body = c.req.valid('json');
+        const branch = await github.service.createBranch(param(c, 'workspaceId'), Number(param(c, 'repoGithubId')), body.name, body.fromSha);
+        return c.json(branch, 201);
+    });
+    app.post('/github/repos/:repoGithubId/commits', jsonBody(commitFilesSchema), async (c) => {
+        const github = requireGitHub(c);
+        if (!github)
+            return unavailable(c);
+        const result = await github.service.commitFiles(param(c, 'workspaceId'), Number(param(c, 'repoGithubId')), c.req.valid('json'));
+        return c.json(result, 201);
+    });
+    app.post('/github/repos/:repoGithubId/pulls', jsonBody(openPullRequestSchema), async (c) => {
+        const github = requireGitHub(c);
+        if (!github)
+            return unavailable(c);
+        const pr = await github.service.openPullRequest(param(c, 'workspaceId'), Number(param(c, 'repoGithubId')), c.req.valid('json'));
+        return c.json(pr, 201);
+    });
+    app.put('/github/repos/:repoGithubId/pulls/:number/merge', jsonBody(mergePullRequestSchema), async (c) => {
+        const github = requireGitHub(c);
+        if (!github)
+            return unavailable(c);
+        await github.service.mergePullRequest(param(c, 'workspaceId'), Number(param(c, 'repoGithubId')), Number(param(c, 'number')), c.req.valid('json'));
+        return c.body(null, 204);
+    });
+    app.post('/github/repos/:repoGithubId/issues/:number/comments', jsonBody(commentSchema), async (c) => {
+        const github = requireGitHub(c);
+        if (!github)
+            return unavailable(c);
+        await github.service.comment(param(c, 'workspaceId'), Number(param(c, 'repoGithubId')), Number(param(c, 'number')), c.req.valid('json').body);
+        return c.body(null, 204);
+    });
+    return app;
+}
+//# sourceMappingURL=GitHubController.js.map

package/dist/modules/github/GitHubController.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"GitHubController.js","sourceRoot":"","sources":["../../../src/modules/github/GitHubController.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EACb,iBAAiB,EACjB,kBAAkB,EAClB,uBAAuB,EACvB,eAAe,EACf,sBAAsB,EACtB,qBAAqB,EACrB,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,wBAAwB,CAAA;AAE/B,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAE3B,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAC5B,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAEnD,OAAO,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAA;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAA;AAEnD,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;AAE9D,iFAAiF;AACjF,SAAS,aAAa,CAAC,CAAkB;IACvC,OAAO,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,MAAM,IAAI,IAAI,CAAA;AAC1C,CAAC;AAED,MAAM,WAAW,GAAG,CAAC,CAAkB,EAAE,EAAE,CACzC,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,sCAAsC,EAAE,EAAE,EAAE,GAAG,CAAC,CAAA;AAElG;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB;IAC9B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAU,CAAA;IAE9B,4EAA4E;IAE5E,2EAA2E;IAC3E,iFAAiF;IACjF,GAAG,CAAC,GAAG,CAAC,qBAAqB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACzC,MAAM,MAAM,GAAG,aAAa,CAAC,CAAC,CAAC,CAAA;QAC/B,IAAI,CAAC,MAAM;YAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAA;QAClC,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,MAAM,CAAA;QAC/C,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,MAAM,CAAC,aAAa,CAAC,CAAA;QACpD,0EAA0E;QAC1E,4EAA4E;QAC5E,0DAA0D;QAC1D,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC;YAC9B,WAAW,EAAE,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC;YACpC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,IAAI;YACjC,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;SACjC,CAAC,CAAA;QACF,MAAM,GAAG,GAAG,2BAA2B,MAAM,CAAC,OAAO,4BAA4B,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAA;QAC5G,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,CAAA;IACxB,CAAC,CAAC,CAAA;IAEF,GAAG,CAAC,GAAG,CAAC,oBAAoB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACxC,MAAM,MAAM,GAAG,aAAa,CAAC,CAAC,CAAC,CAAA;QAC/B,IAAI,CAAC,MAAM;YAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAA;QAClC,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAA;QAC1F,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,CAAC,CAAA;IAC/B,CAAC,CAAC,CAAA;IAEF,2EAA2E;IAC3E,yEAAyE;IACzE,GAAG,CAAC,GAAG,CAAC,uBAAuB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC3C,MAAM,MAAM,GAAG,aAAa,CAAC,CAAC,CAAC,CAAA;QAC/B,IAAI,CAAC,MAAM;YAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAA;QAClC,MAAM,aAAa,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,0BAA0B,CAC/E,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CACxB,CAAA;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,aAAa,EAAE,CAAC,CAAA;IAClC,CAAC,CAAC,CAAA;IAEF,4EAA4E;IAC5E,iFAAiF;IACjF,+EAA+E;IAC/E,sDAAsD;IACtD,GAAG,CAAC,IAAI,CAAC,iBAAiB,EAAE,QAAQ,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC/D,MAAM,MAAM,GAAG,aAAa,CAAC,CAAC,CAAC,CAAA;QAC/B,IAAI,CAAC,MAAM;YAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAA;QAClC,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAA;QAC3C,MAAM,EAAE,cAAc,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QAC9C,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,OAAO,CAAC,WAAW,EAAE,cAAc,CAAC,CAAA;QACxF,OAAO,CAAC,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,CAAA;IAChC,CAAC,CAAC,CAAA;IAEF,+EAA+E;IAC/E,8DAA8D;IAC9D,GAAG,CAAC,GAAG,CAAC,yBAAyB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC7C,MAAM,MAAM,GAAG,aAAa,CAAC,CAAC,CAAC,CAAA;QAC/B,IAAI,CAAC,MAAM;YAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAA;QAClC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,MAAM,CAAC,WAAW,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC,CAAA;IACrF,CAAC,CAAC,CAAA;IAEF,2EAA2E;IAC3E,wDAAwD;IACxD,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,QAAQ,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC9D,MAAM,MAAM,GAAG,aAAa,CAAC,CAAC,CAAC,CAAA;QAC/B,IAAI,CAAC,MAAM;YAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAA;QAClC,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,cAAc,CACnD,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EACvB,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,aAAa,CAClC,CAAA;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACtB,CAAC,CAAC,CAAA;IAEF,oFAAoF;IACpF,iFAAiF;IACjF,GAAG,CAAC,KAAK,CAAC,6BAA6B,EAAE,QAAQ,CAAC,qBAAqB,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACpF,MAAM,MAAM,GAAG,aAAa,CAAC,CAAC,CAAC,CAAA;QAC/B,IAAI,CAAC,MAAM;YAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAA;QAClC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,eAAe,CACnD,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EACvB,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC,EAChC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,UAAU,CAC/B,CAAA;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACrB,CAAC,CAAC,CAAA;IAEF,+EAA+E;IAC/E,0EAA0E;IAC1E,GAAG,CAAC,GAAG,CAAC,kCAAkC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACtD,MAAM,MAAM,GAAG,aAAa,CAAC,CAAC,CAAC,CAAA;QAC/B,IAAI,CAAC,MAAM;YAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAA;QAClC,OAAO,CAAC,CAAC,IAAI,CACX,MAAM,MAAM,CAAC,WAAW,CAAC,iBAAiB,CACxC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EACvB,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC,EAChC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAC1B,CACF,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,GAAG,CAAC,MAAM,CAAC,oBAAoB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC3C,MAAM,MAAM,GAAG,aAAa,CAAC,CAAC,CAAC,CAAA;QAC/B,IAAI,CAAC,MAAM;YAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAA;QAClC,MAAM,MAAM,CAAC,mBAAmB,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAA;QACpE,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;IAC1B,CAAC,CAAC,CAAA;IAEF,4EAA4E;IAE5E,GAAG,CAAC,IAAI,CAAC,gBAAgB,EAAE,QAAQ,CAAC,mBAAmB,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACpE,MAAM,MAAM,GAAG,aAAa,CAAC,CAAC,CAAC,CAAA;QAC/B,IAAI,CAAC,MAAM;YAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAA;QAClC,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAA;QAC3C,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QAClD,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;QAEvC,IAAI,IAAI,EAAE,CAAC;YACT,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAA;YACtF,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,cAAc,CAAC,gBAAgB,CAAC,YAAY,CAAC,cAAc,CAAC,CAAA;YAC7F,IAAI,SAAS;gBAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,kBAAkB,EAAE,EAAE,GAAG,CAAC,CAAA;YACjE,MAAM,MAAM,CAAC,WAAW,CAAC,oBAAoB,CAAC,YAAY,CAAC,cAAc,CAAC,CAAA;YAC1E,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAA;QACzC,CAAC;QAED,8EAA8E;QAC9E,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;YAC/B,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,aAAa,CAAC,eAAe,CAAC,WAAW,EAAE,YAAY,CAAC,CAAA;YACtF,IAAI,MAAM;gBAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,GAAG,CAAC,CAAA;YACpD,MAAM,MAAM,CAAC,WAAW,CAAC,YAAY,CAAC,WAAW,EAAE,YAAY,CAAC,CAAA;YAChE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAA;QACrC,CAAC;QACD,MAAM,MAAM,CAAC,WAAW,CAAC,eAAe,CAAC,WAAW,CAAC,CAAA;QACrD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAA;IACrC,CAAC,CAAC,CAAA;IAEF,4EAA4E;IAE5E,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACnC,MAAM,MAAM,GAAG,aAAa,CAAC,CAAC,CAAC,CAAA;QAC/B,IAAI,CAAC,MAAM;YAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAA;QAClC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC,CAAA;IACxE,CAAC,CAAC,CAAA;IAEF,GAAG,CAAC,GAAG,CAAC,sCAAsC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC1D,MAAM,MAAM,GAAG,aAAa,CAAC,CAAC,CAAC,CAAA;QAC/B,IAAI,CAAC,MAAM;YAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAA;QAClC,OAAO,CAAC,CAAC,IAAI,CACX,MAAM,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC,CAAC,CAC7F,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACnC,MAAM,MAAM,GAAG,aAAa,CAAC,CAAC,CAAC,CAAA;QAC/B,IAAI,CAAC,MAAM;YAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAA;QAClC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC,CAAA;IAC/E,CAAC,CAAC,CAAA;IAEF,GAAG,CAAC,GAAG,CAAC,gBAAgB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACpC,MAAM,MAAM,GAAG,aAAa,CAAC,CAAC,CAAC,CAAA;QAC/B,IAAI,CAAC,MAAM;YAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAA;QAClC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC,CAAA;IACzE,CAAC,CAAC,CAAA;IAEF,4EAA4E;IAE5E,+EAA+E;IAC/E,8EAA8E;IAC9E,kEAAkE;IAClE,GAAG,CAAC,IAAI,CAAC,eAAe,EAAE,QAAQ,CAAC,uBAAuB,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACvE,MAAM,MAAM,GAAG,aAAa,CAAC,CAAC,CAAC,CAAA;QAC/B,IAAI,CAAC,MAAM;YAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAA;QAClC,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;YAChC,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,wCAAwC,EAAE,EAAE,EACrF,GAAG,CACJ,CAAA;QACH,CAAC;QACD,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAA;QAC3C,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QACrE,8EAA8E;QAC9E,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAA;QACtF,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,SAAS,CAAC,YAAY,CAAC,cAAc,EAAE;YACrF,GAAG,EAAE,YAAY,CAAC,YAAY;YAC9B,IAAI;YACJ,OAAO,EAAE,SAAS;YAClB,WAAW;SACZ,CAAC,CAAA;QACF,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YAClC,OAAO,CAAC,CAAC,IAAI,CACX;gBACE,KAAK,EAAE;oBACL,IAAI,EAAE,gBAAgB;oBACtB,OAAO,EAAE,+CAA+C,YAAY,CAAC,YAAY,KAAK,MAAM,CAAC,MAAM,IAAI;iBACxG;aACF,EACD,GAAG,CACJ,CAAA;QACH,CAAC;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;IACjC,CAAC,CAAC,CAAA;IAEF,GAAG,CAAC,IAAI,CAAC,sCAAsC,EAAE,QAAQ,CAAC,kBAAkB,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACzF,MAAM,MAAM,GAAG,aAAa,CAAC,CAAC,CAAC,CAAA;QAC/B,IAAI,CAAC,MAAM;YAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAA;QAClC,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QAChC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,YAAY,CAC9C,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EACvB,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC,EAChC,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,OAAO,CACb,CAAA;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC5B,CAAC,CAAC,CAAA;IAEF,GAAG,CAAC,IAAI,CAAC,qCAAqC,EAAE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACvF,MAAM,MAAM,GAAG,aAAa,CAAC,CAAC,CAAC,CAAA;QAC/B,IAAI,CAAC,MAAM;YAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAA;QAClC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,WAAW,CAC7C,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EACvB,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC,EAChC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CACpB,CAAA;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC5B,CAAC,CAAC,CAAA;IAEF,GAAG,CAAC,IAAI,CAAC,mCAAmC,EAAE,QAAQ,CAAC,qBAAqB,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACzF,MAAM,MAAM,GAAG,aAAa,CAAC,CAAC,CAAC,CAAA;QAC/B,IAAI,CAAC,MAAM;YAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAA;QAClC,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,eAAe,CAC7C,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EACvB,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC,EAChC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CACpB,CAAA;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,CAAC,CAAA;IACxB,CAAC,CAAC,CAAA;IAEF,GAAG,CAAC,GAAG,CACL,iDAAiD,EACjD,QAAQ,CAAC,sBAAsB,CAAC,EAChC,KAAK,EAAE,CAAC,EAAE,EAAE;QACV,MAAM,MAAM,GAAG,aAAa,CAAC,CAAC,CAAC,CAAA;QAC/B,IAAI,CAAC,MAAM;YAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAA;QAClC,MAAM,MAAM,CAAC,OAAO,CAAC,gBAAgB,CACnC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EACvB,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC,EAChC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,EAC1B,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CACpB,CAAA;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;IAC1B,CAAC,CACF,CAAA;IAED,GAAG,CAAC,IAAI,CACN,qDAAqD,EACrD,QAAQ,CAAC,aAAa,CAAC,EACvB,KAAK,EAAE,CAAC,EAAE,EAAE;QACV,MAAM,MAAM,GAAG,aAAa,CAAC,CAAC,CAAC,CAAA;QAC/B,IAAI,CAAC,MAAM;YAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAA;QAClC,MAAM,MAAM,CAAC,OAAO,CAAC,OAAO,CAC1B,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EACvB,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC,EAChC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,EAC1B,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CACzB,CAAA;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;IAC1B,CAAC,CACF,CAAA;IAED,OAAO,GAAG,CAAA;AACZ,CAAC"}

package/dist/modules/github/GitHubWebhookController.d.ts

@@ -0,0 +1,13 @@
+import { Hono } from 'hono';
+import type { AppEnv } from '../../http/env.js';
+/**
+ * Public GitHub-facing endpoints (NOT under /workspaces, since GitHub calls
+ * them): the webhook receiver and the App setup callback. Mounted at `/github`.
+ *
+ * The webhook receiver verifies the HMAC signature over the *raw* body before
+ * anything else, acks fast by handing the delivery to the facade's webhook-ingest
+ * gateway for async projection (falling back to inline handling when no async
+ * consumer is wired, e.g. local dev), and never blocks GitHub on projection work.
+ */
+export declare function githubWebhookController(): Hono<AppEnv>;
+//# sourceMappingURL=GitHubWebhookController.d.ts.map

package/dist/modules/github/GitHubWebhookController.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"GitHubWebhookController.d.ts","sourceRoot":"","sources":["../../../src/modules/github/GitHubWebhookController.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAE3B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAE/C;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,IAAI,IAAI,CAAC,MAAM,CAAC,CAuEtD"}

package/dist/modules/github/GitHubWebhookController.js

@@ -0,0 +1,74 @@
+import { Hono } from 'hono';
+import { StateSigner } from '../../github/state.js';
+/**
+ * Public GitHub-facing endpoints (NOT under /workspaces, since GitHub calls
+ * them): the webhook receiver and the App setup callback. Mounted at `/github`.
+ *
+ * The webhook receiver verifies the HMAC signature over the *raw* body before
+ * anything else, acks fast by handing the delivery to the facade's webhook-ingest
+ * gateway for async projection (falling back to inline handling when no async
+ * consumer is wired, e.g. local dev), and never blocks GitHub on projection work.
+ */
+export function githubWebhookController() {
+    const app = new Hono();
+    app.post('/webhooks', async (c) => {
+        const github = c.get('container').github;
+        if (!github)
+            return c.json({ error: { code: 'unavailable', message: 'GitHub not configured' } }, 503);
+        // Verify against the raw bytes before parsing.
+        const raw = await c.req.arrayBuffer();
+        const ok = await github.webhookVerifier.verify(raw, c.req.header('x-hub-signature-256') ?? null);
+        if (!ok) {
+            return c.json({ error: { code: 'unauthorized', message: 'Invalid signature' } }, 401);
+        }
+        const eventName = c.req.header('x-github-event') ?? '';
+        let payload;
+        try {
+            payload = JSON.parse(new TextDecoder().decode(raw));
+        }
+        catch {
+            return c.json({ error: { code: 'validation', message: 'Invalid JSON body' } }, 400);
+        }
+        // Hand off for async projection; if no async consumer is wired, apply inline so
+        // local/dev still works.
+        const queued = await c
+            .get('container')
+            .gateways.githubWebhook.enqueueWebhook(eventName, payload);
+        if (!queued)
+            await github.webhookService.handle(eventName, payload);
+        return c.body(null, 202);
+    });
+    // GitHub redirects here after an installation. On a fresh install we carry the
+    // HMAC-signed `state` (the workspace id we issued) that binds the installation
+    // to that workspace. But GitHub also redirects here for STATELESS actions —
+    // notably a repo-access change saved straight from the App's installation
+    // settings page (`setup_action=update`), which carries no `state`. We can't
+    // bind a NEW installation without a signed workspace id, but if it's already
+    // bound we recover the workspace and treat the redirect as a resync — so newly
+    // granted repos get picked up instead of dead-ending on "invalid state".
+    app.get('/setup/callback', async (c) => {
+        const container = c.get('container');
+        const github = container.github;
+        if (!github)
+            return c.json({ error: { code: 'unavailable', message: 'GitHub not configured' } }, 503);
+        const installationId = Number(c.req.query('installation_id'));
+        if (!Number.isFinite(installationId)) {
+            return c.json({ error: { code: 'validation', message: 'Missing installation_id' } }, 400);
+        }
+        const signer = new StateSigner(container.config.github.webhookSecret);
+        const state = await signer.verify(c.req.query('state') ?? null);
+        // No (valid) state → only proceed if this installation is already bound;
+        // binding a brand-new installation still requires a signed state.
+        const workspaceId = state?.workspaceId ?? (await github.installationService.resolveBoundWorkspace(installationId));
+        if (!workspaceId) {
+            return c.json({ error: { code: 'unauthorized', message: 'Invalid or expired state' } }, 401);
+        }
+        await github.installationService.connect(workspaceId, installationId);
+        // Repos are linked explicitly per workspace after connecting, so there is no
+        // whole-installation backfill here — the user picks which repos this board
+        // tracks, which projects and syncs just those.
+        return c.redirect(container.config.github.setupRedirectUrl);
+    });
+    return app;
+}
+//# sourceMappingURL=GitHubWebhookController.js.map

package/dist/modules/github/GitHubWebhookController.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"GitHubWebhookController.js","sourceRoot":"","sources":["../../../src/modules/github/GitHubWebhookController.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAC3B,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAGnD;;;;;;;;GAQG;AACH,MAAM,UAAU,uBAAuB;IACrC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAU,CAAA;IAE9B,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAChC,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,MAAM,CAAA;QACxC,IAAI,CAAC,MAAM;YACT,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,uBAAuB,EAAE,EAAE,EAAE,GAAG,CAAC,CAAA;QAE1F,+CAA+C;QAC/C,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,CAAA;QACrC,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,qBAAqB,CAAC,IAAI,IAAI,CAAC,CAAA;QAChG,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,mBAAmB,EAAE,EAAE,EAAE,GAAG,CAAC,CAAA;QACvF,CAAC;QAED,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAA;QACtD,IAAI,OAAgB,CAAA;QACpB,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAA;QACrD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,mBAAmB,EAAE,EAAE,EAAE,GAAG,CAAC,CAAA;QACrF,CAAC;QAED,gFAAgF;QAChF,yBAAyB;QACzB,MAAM,MAAM,GAAG,MAAM,CAAC;aACnB,GAAG,CAAC,WAAW,CAAC;aAChB,QAAQ,CAAC,aAAa,CAAC,cAAc,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;QAC5D,IAAI,CAAC,MAAM;YAAE,MAAM,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;QACnE,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;IAC1B,CAAC,CAAC,CAAA;IAEF,+EAA+E;IAC/E,+EAA+E;IAC/E,4EAA4E;IAC5E,0EAA0E;IAC1E,4EAA4E;IAC5E,6EAA6E;IAC7E,+EAA+E;IAC/E,yEAAyE;IACzE,GAAG,CAAC,GAAG,CAAC,iBAAiB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACrC,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;QACpC,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAA;QAC/B,IAAI,CAAC,MAAM;YACT,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,uBAAuB,EAAE,EAAE,EAAE,GAAG,CAAC,CAAA;QAE1F,MAAM,cAAc,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAA;QAC7D,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;YACrC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,yBAAyB,EAAE,EAAE,EAAE,GAAG,CAAC,CAAA;QAC3F,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAA;QACrE,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,CAAA;QAC/D,yEAAyE;QACzE,kEAAkE;QAClE,MAAM,WAAW,GACf,KAAK,EAAE,WAAW,IAAI,CAAC,MAAM,MAAM,CAAC,mBAAmB,CAAC,qBAAqB,CAAC,cAAc,CAAC,CAAC,CAAA;QAChG,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,0BAA0B,EAAE,EAAE,EAAE,GAAG,CAAC,CAAA;QAC9F,CAAC;QAED,MAAM,MAAM,CAAC,mBAAmB,CAAC,OAAO,CAAC,WAAW,EAAE,cAAc,CAAC,CAAA;QAErE,6EAA6E;QAC7E,2EAA2E;QAC3E,+CAA+C;QAE/C,OAAO,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAA;IAC7D,CAAC,CAAC,CAAA;IAEF,OAAO,GAAG,CAAA;AACZ,CAAC"}

package/dist/modules/llmProxy/LlmProxyController.d.ts

@@ -0,0 +1,18 @@
+import { Hono } from 'hono';
+import type { AppEnv } from '../../http/env.js';
+/**
+ * The output-token ceiling for a workers-ai container call: Pi's asked value floored to
+ * {@link PI_MIN_OUTPUT_TOKENS}, then capped so input + output fits the model's context
+ * window (when the catalog declares one). A small-window model rejects the WHOLE request
+ * (Workers AI error 8007 → HTTP 502) when the output request alone fills the window, so we
+ * reserve room for the prompt: estimate its input-token cost from the serialized
+ * prompt + tool definitions (`inputChars`) and hold that back. The cap only NARROWS the
+ * floor; an unknown window or ample room leaves it untouched. Pure + exported for testing.
+ */
+export declare function workersAiOutputCeiling(args: {
+    asked: number;
+    contextWindow: number | undefined;
+    inputChars: number;
+}): number;
+export declare function llmProxyController(): Hono<AppEnv>;
+//# sourceMappingURL=LlmProxyController.d.ts.map

package/dist/modules/llmProxy/LlmProxyController.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"LlmProxyController.d.ts","sourceRoot":"","sources":["../../../src/modules/llmProxy/LlmProxyController.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAK3B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AA+C/C;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE;IAC3C,KAAK,EAAE,MAAM,CAAA;IACb,aAAa,EAAE,MAAM,GAAG,SAAS,CAAA;IACjC,UAAU,EAAE,MAAM,CAAA;CACnB,GAAG,MAAM,CAQT;AAwBD,wBAAgB,kBAAkB,IAAI,IAAI,CAAC,MAAM,CAAC,CAybjD"}