@cat-factory/server 0.6.0

package/dist/modules/localModels/LocalModelEndpointController.js

@@ -0,0 +1,58 @@
+import { localRunnerSchema, testLocalModelEndpointSchema, upsertLocalModelEndpointSchema, } from '@cat-factory/contracts';
+import * as v from 'valibot';
+import { Hono } from 'hono';
+import { param } from '../../http/params.js';
+import { jsonBody } from '../../http/validation.js';
+// Per-USER locally-run model endpoints (Ollama / LM Studio / llama.cpp / vLLM / custom
+// OpenAI-compatible runners). A runner lives on the user's own machine, so endpoints are
+// scoped to the signed-in user — mounted at the root (not under a workspace) and require
+// a signed-in user, like personal subscriptions. The optional bearer key is write-only.
+const signInRequired = (c) => c.json({ error: { code: 'unauthorized', message: 'Sign in to manage local model runners' } }, 401);
+const unavailable = (c) => c.json({ error: { code: 'unavailable', message: 'Local model runner storage is not configured' } }, 503);
+export function localModelEndpointController() {
+    const app = new Hono();
+    app.get('/local-model-endpoints', async (c) => {
+        const local = c.get('container').localModelEndpoints;
+        if (!local)
+            return unavailable(c);
+        const user = c.get('user');
+        if (!user)
+            return signInRequired(c);
+        return c.json({ endpoints: await local.list(user.id) });
+    });
+    app.put('/local-model-endpoints/:provider', jsonBody(upsertLocalModelEndpointSchema), async (c) => {
+        const local = c.get('container').localModelEndpoints;
+        if (!local)
+            return unavailable(c);
+        const user = c.get('user');
+        if (!user)
+            return signInRequired(c);
+        const provider = v.parse(localRunnerSchema, param(c, 'provider'));
+        const body = c.req.valid('json');
+        const endpoint = await local.upsert(user.id, { ...body, provider });
+        return c.json(endpoint, 201);
+    });
+    app.delete('/local-model-endpoints/:provider', async (c) => {
+        const local = c.get('container').localModelEndpoints;
+        if (!local)
+            return unavailable(c);
+        const user = c.get('user');
+        if (!user)
+            return signInRequired(c);
+        const provider = v.parse(localRunnerSchema, param(c, 'provider'));
+        await local.remove(user.id, provider);
+        return c.body(null, 204);
+    });
+    // Probe a runner's `/models` server-side so the UI can validate the URL + list models.
+    app.post('/local-model-endpoints/test', jsonBody(testLocalModelEndpointSchema), async (c) => {
+        const local = c.get('container').localModelEndpoints;
+        if (!local)
+            return unavailable(c);
+        const user = c.get('user');
+        if (!user)
+            return signInRequired(c);
+        return c.json(await local.testConnection(c.req.valid('json')));
+    });
+    return app;
+}
+//# sourceMappingURL=LocalModelEndpointController.js.map

package/dist/modules/localModels/LocalModelEndpointController.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"LocalModelEndpointController.js","sourceRoot":"","sources":["../../../src/modules/localModels/LocalModelEndpointController.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iBAAiB,EACjB,4BAA4B,EAC5B,8BAA8B,GAC/B,MAAM,wBAAwB,CAAA;AAC/B,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAC5B,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAG3B,OAAO,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAA;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAA;AAEnD,uFAAuF;AACvF,yFAAyF;AACzF,yFAAyF;AACzF,wFAAwF;AAExF,MAAM,cAAc,GAAG,CAAC,CAAkB,EAAE,EAAE,CAC5C,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,uCAAuC,EAAE,EAAE,EAAE,GAAG,CAAC,CAAA;AAEpG,MAAM,WAAW,GAAG,CAAC,CAAkB,EAAE,EAAE,CACzC,CAAC,CAAC,IAAI,CACJ,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,8CAA8C,EAAE,EAAE,EAC3F,GAAG,CACJ,CAAA;AAEH,MAAM,UAAU,4BAA4B;IAC1C,MAAM,GAAG,GAAG,IAAI,IAAI,EAAU,CAAA;IAE9B,GAAG,CAAC,GAAG,CAAC,wBAAwB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC5C,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,mBAAmB,CAAA;QACpD,IAAI,CAAC,KAAK;YAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAA;QACjC,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QAC1B,IAAI,CAAC,IAAI;YAAE,OAAO,cAAc,CAAC,CAAC,CAAC,CAAA;QACnC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;IACzD,CAAC,CAAC,CAAA;IAEF,GAAG,CAAC,GAAG,CACL,kCAAkC,EAClC,QAAQ,CAAC,8BAA8B,CAAC,EACxC,KAAK,EAAE,CAAC,EAAE,EAAE;QACV,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,mBAAmB,CAAA;QACpD,IAAI,CAAC,KAAK;YAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAA;QACjC,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QAC1B,IAAI,CAAC,IAAI;YAAE,OAAO,cAAc,CAAC,CAAC,CAAC,CAAA;QACnC,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAA;QACjE,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QAChC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAA;QACnE,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAA;IAC9B,CAAC,CACF,CAAA;IAED,GAAG,CAAC,MAAM,CAAC,kCAAkC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACzD,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,mBAAmB,CAAA;QACpD,IAAI,CAAC,KAAK;YAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAA;QACjC,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QAC1B,IAAI,CAAC,IAAI;YAAE,OAAO,cAAc,CAAC,CAAC,CAAC,CAAA;QACnC,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAA;QACjE,MAAM,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAA;QACrC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;IAC1B,CAAC,CAAC,CAAA;IAEF,uFAAuF;IACvF,GAAG,CAAC,IAAI,CAAC,6BAA6B,EAAE,QAAQ,CAAC,4BAA4B,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC1F,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,mBAAmB,CAAA;QACpD,IAAI,CAAC,KAAK;YAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAA;QACjC,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QAC1B,IAAI,CAAC,IAAI;YAAE,OAAO,cAAc,CAAC,CAAC,CAAC,CAAA;QACnC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;IAChE,CAAC,CAAC,CAAA;IAEF,OAAO,GAAG,CAAA;AACZ,CAAC"}

package/dist/modules/merge/MergePresetController.d.ts

@@ -0,0 +1,9 @@
+import { Hono } from 'hono';
+import type { AppEnv } from '../../http/env.js';
+/**
+ * CRUD for a workspace's merge threshold presets (the library a task picks its
+ * auto-merge policy from). The default preset is seeded lazily on first list and
+ * cannot be deleted/unset. Mounted under `/workspaces/:workspaceId`.
+ */
+export declare function mergePresetController(): Hono<AppEnv>;
+//# sourceMappingURL=MergePresetController.d.ts.map

package/dist/modules/merge/MergePresetController.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"MergePresetController.d.ts","sourceRoot":"","sources":["../../../src/modules/merge/MergePresetController.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAG3B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAY/C;;;;GAIG;AACH,wBAAgB,qBAAqB,IAAI,IAAI,CAAC,MAAM,CAAC,CAmCpD"}

package/dist/modules/merge/MergePresetController.js

@@ -0,0 +1,46 @@
+import { createMergePresetSchema, updateMergePresetSchema } from '@cat-factory/contracts';
+import { Hono } from 'hono';
+import { param } from '../../http/params.js';
+import { jsonBody } from '../../http/validation.js';
+/** Resolve the merge-preset module or send a 503, returning null when unconfigured. */
+function requireMergePresets(c) {
+    return c.get('container').mergePresets ?? null;
+}
+const unavailable = (c) => c.json({ error: { code: 'unavailable', message: 'Merge presets are not configured' } }, 503);
+/**
+ * CRUD for a workspace's merge threshold presets (the library a task picks its
+ * auto-merge policy from). The default preset is seeded lazily on first list and
+ * cannot be deleted/unset. Mounted under `/workspaces/:workspaceId`.
+ */
+export function mergePresetController() {
+    const app = new Hono();
+    app.get('/merge-presets', async (c) => {
+        const presets = requireMergePresets(c);
+        if (!presets)
+            return unavailable(c);
+        return c.json(await presets.service.list(param(c, 'workspaceId')));
+    });
+    app.post('/merge-presets', jsonBody(createMergePresetSchema), async (c) => {
+        const presets = requireMergePresets(c);
+        if (!presets)
+            return unavailable(c);
+        const preset = await presets.service.create(param(c, 'workspaceId'), c.req.valid('json'));
+        return c.json(preset, 201);
+    });
+    app.patch('/merge-presets/:presetId', jsonBody(updateMergePresetSchema), async (c) => {
+        const presets = requireMergePresets(c);
+        if (!presets)
+            return unavailable(c);
+        const preset = await presets.service.update(param(c, 'workspaceId'), param(c, 'presetId'), c.req.valid('json'));
+        return c.json(preset);
+    });
+    app.delete('/merge-presets/:presetId', async (c) => {
+        const presets = requireMergePresets(c);
+        if (!presets)
+            return unavailable(c);
+        await presets.service.remove(param(c, 'workspaceId'), param(c, 'presetId'));
+        return c.body(null, 204);
+    });
+    return app;
+}
+//# sourceMappingURL=MergePresetController.js.map

package/dist/modules/merge/MergePresetController.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MergePresetController.js","sourceRoot":"","sources":["../../../src/modules/merge/MergePresetController.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAA;AACzF,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAI3B,OAAO,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAA;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAA;AAEnD,uFAAuF;AACvF,SAAS,mBAAmB,CAAC,CAAkB;IAC7C,OAAO,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,YAAY,IAAI,IAAI,CAAA;AAChD,CAAC;AAED,MAAM,WAAW,GAAG,CAAC,CAAkB,EAAE,EAAE,CACzC,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,kCAAkC,EAAE,EAAE,EAAE,GAAG,CAAC,CAAA;AAE9F;;;;GAIG;AACH,MAAM,UAAU,qBAAqB;IACnC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAU,CAAA;IAE9B,GAAG,CAAC,GAAG,CAAC,gBAAgB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACpC,MAAM,OAAO,GAAG,mBAAmB,CAAC,CAAC,CAAC,CAAA;QACtC,IAAI,CAAC,OAAO;YAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAA;QACnC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC,CAAA;IACpE,CAAC,CAAC,CAAA;IAEF,GAAG,CAAC,IAAI,CAAC,gBAAgB,EAAE,QAAQ,CAAC,uBAAuB,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACxE,MAAM,OAAO,GAAG,mBAAmB,CAAC,CAAC,CAAC,CAAA;QACtC,IAAI,CAAC,OAAO;YAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAA;QACnC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAA;QACzF,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC5B,CAAC,CAAC,CAAA;IAEF,GAAG,CAAC,KAAK,CAAC,0BAA0B,EAAE,QAAQ,CAAC,uBAAuB,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACnF,MAAM,OAAO,GAAG,mBAAmB,CAAC,CAAC,CAAC,CAAA;QACtC,IAAI,CAAC,OAAO;YAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAA;QACnC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,CACzC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EACvB,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,EACpB,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CACpB,CAAA;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACvB,CAAC,CAAC,CAAA;IAEF,GAAG,CAAC,MAAM,CAAC,0BAA0B,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACjD,MAAM,OAAO,GAAG,mBAAmB,CAAC,CAAC,CAAC,CAAA;QACtC,IAAI,CAAC,OAAO;YAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAA;QACnC,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAA;QAC3E,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;IAC1B,CAAC,CAAC,CAAA;IAEF,OAAO,GAAG,CAAA;AACZ,CAAC"}

package/dist/modules/modelDefaults/ModelDefaultsController.d.ts

@@ -0,0 +1,9 @@
+import { Hono } from 'hono';
+import type { AppEnv } from '../../http/env.js';
+/**
+ * Read/replace a workspace's per-agent-kind default models (the model each agent
+ * kind defaults to, overriding the env routing for that workspace). PUT replaces
+ * the whole map wholesale. Mounted under `/workspaces/:workspaceId`.
+ */
+export declare function modelDefaultsController(): Hono<AppEnv>;
+//# sourceMappingURL=ModelDefaultsController.d.ts.map

package/dist/modules/modelDefaults/ModelDefaultsController.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ModelDefaultsController.d.ts","sourceRoot":"","sources":["../../../src/modules/modelDefaults/ModelDefaultsController.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAG3B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAY/C;;;;GAIG;AACH,wBAAgB,uBAAuB,IAAI,IAAI,CAAC,MAAM,CAAC,CAiBtD"}

package/dist/modules/modelDefaults/ModelDefaultsController.js

@@ -0,0 +1,32 @@
+import { setModelDefaultsSchema } from '@cat-factory/contracts';
+import { Hono } from 'hono';
+import { param } from '../../http/params.js';
+import { jsonBody } from '../../http/validation.js';
+/** Resolve the model-defaults module or send a 503, returning null when unconfigured. */
+function requireModelDefaults(c) {
+    return c.get('container').modelDefaults ?? null;
+}
+const unavailable = (c) => c.json({ error: { code: 'unavailable', message: 'Model defaults are not configured' } }, 503);
+/**
+ * Read/replace a workspace's per-agent-kind default models (the model each agent
+ * kind defaults to, overriding the env routing for that workspace). PUT replaces
+ * the whole map wholesale. Mounted under `/workspaces/:workspaceId`.
+ */
+export function modelDefaultsController() {
+    const app = new Hono();
+    app.get('/model-defaults', async (c) => {
+        const defaults = requireModelDefaults(c);
+        if (!defaults)
+            return unavailable(c);
+        return c.json(await defaults.service.get(param(c, 'workspaceId')));
+    });
+    app.put('/model-defaults', jsonBody(setModelDefaultsSchema), async (c) => {
+        const defaults = requireModelDefaults(c);
+        if (!defaults)
+            return unavailable(c);
+        const stored = await defaults.service.set(param(c, 'workspaceId'), c.req.valid('json'));
+        return c.json(stored);
+    });
+    return app;
+}
+//# sourceMappingURL=ModelDefaultsController.js.map

package/dist/modules/modelDefaults/ModelDefaultsController.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ModelDefaultsController.js","sourceRoot":"","sources":["../../../src/modules/modelDefaults/ModelDefaultsController.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAA;AAC/D,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAI3B,OAAO,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAA;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAA;AAEnD,yFAAyF;AACzF,SAAS,oBAAoB,CAAC,CAAkB;IAC9C,OAAO,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,aAAa,IAAI,IAAI,CAAA;AACjD,CAAC;AAED,MAAM,WAAW,GAAG,CAAC,CAAkB,EAAE,EAAE,CACzC,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,mCAAmC,EAAE,EAAE,EAAE,GAAG,CAAC,CAAA;AAE/F;;;;GAIG;AACH,MAAM,UAAU,uBAAuB;IACrC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAU,CAAA;IAE9B,GAAG,CAAC,GAAG,CAAC,iBAAiB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACrC,MAAM,QAAQ,GAAG,oBAAoB,CAAC,CAAC,CAAC,CAAA;QACxC,IAAI,CAAC,QAAQ;YAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAA;QACpC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC,CAAA;IACpE,CAAC,CAAC,CAAA;IAEF,GAAG,CAAC,GAAG,CAAC,iBAAiB,EAAE,QAAQ,CAAC,sBAAsB,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACvE,MAAM,QAAQ,GAAG,oBAAoB,CAAC,CAAC,CAAC,CAAA;QACxC,IAAI,CAAC,QAAQ;YAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAA;QACpC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAA;QACvF,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACvB,CAAC,CAAC,CAAA;IAEF,OAAO,GAAG,CAAA;AACZ,CAAC"}

package/dist/modules/models/ModelController.d.ts

@@ -0,0 +1,11 @@
+import { Hono } from 'hono';
+import type { AppEnv } from '../../http/env.js';
+/**
+ * Serves the model picker catalog. Selectability is derived from what is actually
+ * configured — a direct API key for the model's provider (the DB pool, scoped to the
+ * workspace + its account + the caller), a connected subscription vendor, or the
+ * opt-in Cloudflare Workers AI lib being enabled. It exposes only labels and
+ * provider/model ids + an `available` flag — never the keys themselves.
+ */
+export declare function modelController(): Hono<AppEnv>;
+//# sourceMappingURL=ModelController.d.ts.map

package/dist/modules/models/ModelController.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ModelController.d.ts","sourceRoot":"","sources":["../../../src/modules/models/ModelController.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAC3B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAI/C;;;;;;GAMG;AACH,wBAAgB,eAAe,IAAI,IAAI,CAAC,MAAM,CAAC,CA4B9C"}

package/dist/modules/models/ModelController.js

@@ -0,0 +1,38 @@
+import { effectiveCatalogWith, localSelectableModels } from '@cat-factory/kernel';
+import { modelCostResolver } from '@cat-factory/spend';
+import { Hono } from 'hono';
+import { param } from '../../http/params.js';
+import { resolveWorkspaceCapabilities } from '../../agents/providerCapabilities.js';
+/**
+ * Serves the model picker catalog. Selectability is derived from what is actually
+ * configured — a direct API key for the model's provider (the DB pool, scoped to the
+ * workspace + its account + the caller), a connected subscription vendor, or the
+ * opt-in Cloudflare Workers AI lib being enabled. It exposes only labels and
+ * provider/model ids + an `available` flag — never the keys themselves.
+ */
+export function modelController() {
+    const app = new Hono();
+    // Deployment-level catalog (no workspace context): deployment-wide selectability
+    // only (no per-workspace direct keys / subscriptions). The picker uses the
+    // per-workspace route below; this stays for contexts without a workspace.
+    app.get('/models', (c) => {
+        c.header('Cache-Control', 'public, max-age=60');
+        return c.json(c.get('container').config.models);
+    });
+    // Per-workspace catalog: selectability reflects this workspace's (+ its account's +
+    // the caller's) configured API keys and subscription tokens.
+    app.get('/workspaces/:workspaceId/models', async (c) => {
+        const container = c.get('container');
+        const userId = c.get('user')?.id;
+        const caps = await resolveWorkspaceCapabilities(container, param(c, 'workspaceId'), userId);
+        const costFor = modelCostResolver(container.config.spend);
+        // Surface the caller's own locally-run models (Ollama / LM Studio / …) alongside the
+        // built-in catalog. They're scoped to the user (a runner lives on their machine).
+        const local = userId && container.localModelEndpoints
+            ? await container.localModelEndpoints.capabilitiesFor(userId)
+            : [];
+        return c.json(effectiveCatalogWith(localSelectableModels(local), caps, costFor));
+    });
+    return app;
+}
+//# sourceMappingURL=ModelController.js.map

package/dist/modules/models/ModelController.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ModelController.js","sourceRoot":"","sources":["../../../src/modules/models/ModelController.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAA;AACjF,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAA;AACtD,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAE3B,OAAO,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAA;AAC5C,OAAO,EAAE,4BAA4B,EAAE,MAAM,sCAAsC,CAAA;AAEnF;;;;;;GAMG;AACH,MAAM,UAAU,eAAe;IAC7B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAU,CAAA;IAE9B,iFAAiF;IACjF,2EAA2E;IAC3E,0EAA0E;IAC1E,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE;QACvB,CAAC,CAAC,MAAM,CAAC,eAAe,EAAE,oBAAoB,CAAC,CAAA;QAC/C,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IACjD,CAAC,CAAC,CAAA;IAEF,oFAAoF;IACpF,6DAA6D;IAC7D,GAAG,CAAC,GAAG,CAAC,iCAAiC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACrD,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;QACpC,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,CAAA;QAChC,MAAM,IAAI,GAAG,MAAM,4BAA4B,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EAAE,MAAM,CAAC,CAAA;QAC3F,MAAM,OAAO,GAAG,iBAAiB,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QACzD,qFAAqF;QACrF,kFAAkF;QAClF,MAAM,KAAK,GACT,MAAM,IAAI,SAAS,CAAC,mBAAmB;YACrC,CAAC,CAAC,MAAM,SAAS,CAAC,mBAAmB,CAAC,eAAe,CAAC,MAAM,CAAC;YAC7D,CAAC,CAAC,EAAE,CAAA;QACR,OAAO,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,qBAAqB,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAA;IAClF,CAAC,CAAC,CAAA;IAEF,OAAO,GAAG,CAAA;AACZ,CAAC"}

package/dist/modules/notifications/NotificationController.d.ts

@@ -0,0 +1,13 @@
+import { Hono } from 'hono';
+import type { AppEnv } from '../../http/env.js';
+/**
+ * Human-actionable notifications. `act` performs the notification's typed
+ * side-effect (merge the PR for a `merge_review` / `pipeline_complete`, retry the
+ * run for a `ci_failed` / `test_failed`) and then resolves it; `dismiss` just
+ * resolves it. The
+ * board patches its store from the `notification` WorkspaceEvent the service emits
+ * on resolve, but the responses also carry the updated notification.
+ * Mounted under `/workspaces/:workspaceId`.
+ */
+export declare function notificationController(): Hono<AppEnv>;
+//# sourceMappingURL=NotificationController.d.ts.map

package/dist/modules/notifications/NotificationController.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"NotificationController.d.ts","sourceRoot":"","sources":["../../../src/modules/notifications/NotificationController.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAI3B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAW/C;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,IAAI,IAAI,CAAC,MAAM,CAAC,CAsDrD"}

package/dist/modules/notifications/NotificationController.js

@@ -0,0 +1,67 @@
+import { Hono } from 'hono';
+import { NotFoundError } from '@cat-factory/kernel';
+import { param } from '../../http/params.js';
+/** Resolve the notifications module or send a 503, returning null when unconfigured. */
+function requireNotifications(c) {
+    return c.get('container').notifications ?? null;
+}
+const unavailable = (c) => c.json({ error: { code: 'unavailable', message: 'Notifications are not configured' } }, 503);
+/**
+ * Human-actionable notifications. `act` performs the notification's typed
+ * side-effect (merge the PR for a `merge_review` / `pipeline_complete`, retry the
+ * run for a `ci_failed` / `test_failed`) and then resolves it; `dismiss` just
+ * resolves it. The
+ * board patches its store from the `notification` WorkspaceEvent the service emits
+ * on resolve, but the responses also carry the updated notification.
+ * Mounted under `/workspaces/:workspaceId`.
+ */
+export function notificationController() {
+    const app = new Hono();
+    // Open notifications for the board inbox (the snapshot also carries these).
+    app.get('/notifications', async (c) => {
+        const notifications = requireNotifications(c);
+        if (!notifications)
+            return unavailable(c);
+        return c.json(await notifications.service.listOpen(param(c, 'workspaceId')));
+    });
+    // Act on a notification: run its side-effect, then mark it acted.
+    app.post('/notifications/:notificationId/act', async (c) => {
+        const notifications = requireNotifications(c);
+        if (!notifications)
+            return unavailable(c);
+        const workspaceId = param(c, 'workspaceId');
+        const id = param(c, 'notificationId');
+        const notification = await notifications.service.get(workspaceId, id);
+        if (!notification)
+            throw new NotFoundError('Notification', id);
+        if (notification.status !== 'open')
+            return c.json(notification);
+        const container = c.get('container');
+        switch (notification.type) {
+            case 'merge_review':
+            case 'pipeline_complete':
+                // Confirm + merge the PR for real (block is `pr_ready` → `done`).
+                if (notification.blockId) {
+                    await container.executionService.mergePr(workspaceId, notification.blockId);
+                }
+                break;
+            case 'ci_failed':
+            case 'test_failed':
+                // Re-run the failed pipeline once CI / the tests are presumably fixed.
+                if (notification.executionId) {
+                    await container.executionService.retry(workspaceId, notification.executionId);
+                }
+                break;
+        }
+        return c.json(await notifications.service.resolve(workspaceId, id, 'act'));
+    });
+    // Dismiss a notification without acting on it.
+    app.post('/notifications/:notificationId/dismiss', async (c) => {
+        const notifications = requireNotifications(c);
+        if (!notifications)
+            return unavailable(c);
+        return c.json(await notifications.service.resolve(param(c, 'workspaceId'), param(c, 'notificationId'), 'dismiss'));
+    });
+    return app;
+}
+//# sourceMappingURL=NotificationController.js.map

package/dist/modules/notifications/NotificationController.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"NotificationController.js","sourceRoot":"","sources":["../../../src/modules/notifications/NotificationController.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAG3B,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAEnD,OAAO,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAA;AAE5C,wFAAwF;AACxF,SAAS,oBAAoB,CAAC,CAAkB;IAC9C,OAAO,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,aAAa,IAAI,IAAI,CAAA;AACjD,CAAC;AAED,MAAM,WAAW,GAAG,CAAC,CAAkB,EAAE,EAAE,CACzC,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,kCAAkC,EAAE,EAAE,EAAE,GAAG,CAAC,CAAA;AAE9F;;;;;;;;GAQG;AACH,MAAM,UAAU,sBAAsB;IACpC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAU,CAAA;IAE9B,4EAA4E;IAC5E,GAAG,CAAC,GAAG,CAAC,gBAAgB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACpC,MAAM,aAAa,GAAG,oBAAoB,CAAC,CAAC,CAAC,CAAA;QAC7C,IAAI,CAAC,aAAa;YAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAA;QACzC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC,CAAA;IAC9E,CAAC,CAAC,CAAA;IAEF,kEAAkE;IAClE,GAAG,CAAC,IAAI,CAAC,oCAAoC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACzD,MAAM,aAAa,GAAG,oBAAoB,CAAC,CAAC,CAAC,CAAA;QAC7C,IAAI,CAAC,aAAa;YAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAA;QACzC,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAA;QAC3C,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAA;QACrC,MAAM,YAAY,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC,CAAA;QACrE,IAAI,CAAC,YAAY;YAAE,MAAM,IAAI,aAAa,CAAC,cAAc,EAAE,EAAE,CAAC,CAAA;QAC9D,IAAI,YAAY,CAAC,MAAM,KAAK,MAAM;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;QAE/D,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;QACpC,QAAQ,YAAY,CAAC,IAAI,EAAE,CAAC;YAC1B,KAAK,cAAc,CAAC;YACpB,KAAK,mBAAmB;gBACtB,kEAAkE;gBAClE,IAAI,YAAY,CAAC,OAAO,EAAE,CAAC;oBACzB,MAAM,SAAS,CAAC,gBAAgB,CAAC,OAAO,CAAC,WAAW,EAAE,YAAY,CAAC,OAAO,CAAC,CAAA;gBAC7E,CAAC;gBACD,MAAK;YACP,KAAK,WAAW,CAAC;YACjB,KAAK,aAAa;gBAChB,uEAAuE;gBACvE,IAAI,YAAY,CAAC,WAAW,EAAE,CAAC;oBAC7B,MAAM,SAAS,CAAC,gBAAgB,CAAC,KAAK,CAAC,WAAW,EAAE,YAAY,CAAC,WAAW,CAAC,CAAA;gBAC/E,CAAC;gBACD,MAAK;QACT,CAAC;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC,CAAA;IAC5E,CAAC,CAAC,CAAA;IAEF,+CAA+C;IAC/C,GAAG,CAAC,IAAI,CAAC,wCAAwC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC7D,MAAM,aAAa,GAAG,oBAAoB,CAAC,CAAC,CAAC,CAAA;QAC7C,IAAI,CAAC,aAAa;YAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAA;QACzC,OAAO,CAAC,CAAC,IAAI,CACX,MAAM,aAAa,CAAC,OAAO,CAAC,OAAO,CACjC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EACvB,KAAK,CAAC,CAAC,EAAE,gBAAgB,CAAC,EAC1B,SAAS,CACV,CACF,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,OAAO,GAAG,CAAA;AACZ,CAAC"}

package/dist/modules/pipelines/PipelineController.d.ts

@@ -0,0 +1,5 @@
+import { Hono } from 'hono';
+import type { AppEnv } from '../../http/env.js';
+/** Pipeline palette CRUD. Mounted under `/workspaces/:workspaceId`. */
+export declare function pipelineController(): Hono<AppEnv>;
+//# sourceMappingURL=PipelineController.d.ts.map

package/dist/modules/pipelines/PipelineController.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PipelineController.d.ts","sourceRoot":"","sources":["../../../src/modules/pipelines/PipelineController.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAC3B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAI/C,uEAAuE;AACvE,wBAAgB,kBAAkB,IAAI,IAAI,CAAC,MAAM,CAAC,CAkDjD"}

package/dist/modules/pipelines/PipelineController.js

@@ -0,0 +1,46 @@
+import { clonePipelineSchema, createPipelineSchema, organizePipelineSchema, updatePipelineSchema, } from '@cat-factory/contracts';
+import { Hono } from 'hono';
+import { param } from '../../http/params.js';
+import { jsonBody } from '../../http/validation.js';
+/** Pipeline palette CRUD. Mounted under `/workspaces/:workspaceId`. */
+export function pipelineController() {
+    const app = new Hono();
+    app.get('/pipelines', async (c) => {
+        return c.json(await c.get('container').pipelineService.list(param(c, 'workspaceId')));
+    });
+    app.post('/pipelines', jsonBody(createPipelineSchema), async (c) => {
+        const pipeline = await c
+            .get('container')
+            .pipelineService.create(param(c, 'workspaceId'), c.req.valid('json'));
+        return c.json(pipeline, 201);
+    });
+    // Clone any pipeline (built-in or custom) into a new, editable copy.
+    app.post('/pipelines/:pipelineId/clone', jsonBody(clonePipelineSchema), async (c) => {
+        const pipeline = await c
+            .get('container')
+            .pipelineService.clone(param(c, 'workspaceId'), param(c, 'pipelineId'), c.req.valid('json'));
+        return c.json(pipeline, 201);
+    });
+    // Edit a custom pipeline in place. Built-in pipelines reject this (clone first).
+    app.patch('/pipelines/:pipelineId', jsonBody(updatePipelineSchema), async (c) => {
+        const pipeline = await c
+            .get('container')
+            .pipelineService.update(param(c, 'workspaceId'), param(c, 'pipelineId'), c.req.valid('json'));
+        return c.json(pipeline);
+    });
+    // Organize a pipeline in the library: set labels / archive state. The only mutation
+    // allowed on a built-in pipeline (view metadata, not structure), so built-ins reject
+    // `update`/`delete` but accept this.
+    app.patch('/pipelines/:pipelineId/organize', jsonBody(organizePipelineSchema), async (c) => {
+        const pipeline = await c
+            .get('container')
+            .pipelineService.organize(param(c, 'workspaceId'), param(c, 'pipelineId'), c.req.valid('json'));
+        return c.json(pipeline);
+    });
+    app.delete('/pipelines/:pipelineId', async (c) => {
+        await c.get('container').pipelineService.remove(param(c, 'workspaceId'), param(c, 'pipelineId'));
+        return c.body(null, 204);
+    });
+    return app;
+}
+//# sourceMappingURL=PipelineController.js.map

package/dist/modules/pipelines/PipelineController.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PipelineController.js","sourceRoot":"","sources":["../../../src/modules/pipelines/PipelineController.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,sBAAsB,EACtB,oBAAoB,GACrB,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAE3B,OAAO,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAA;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAA;AAEnD,uEAAuE;AACvE,MAAM,UAAU,kBAAkB;IAChC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAU,CAAA;IAE9B,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAChC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC,CAAA;IACvF,CAAC,CAAC,CAAA;IAEF,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,oBAAoB,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACjE,MAAM,QAAQ,GAAG,MAAM,CAAC;aACrB,GAAG,CAAC,WAAW,CAAC;aAChB,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAA;QACvE,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAA;IAC9B,CAAC,CAAC,CAAA;IAEF,qEAAqE;IACrE,GAAG,CAAC,IAAI,CAAC,8BAA8B,EAAE,QAAQ,CAAC,mBAAmB,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAClF,MAAM,QAAQ,GAAG,MAAM,CAAC;aACrB,GAAG,CAAC,WAAW,CAAC;aAChB,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAA;QAC9F,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAA;IAC9B,CAAC,CAAC,CAAA;IAEF,iFAAiF;IACjF,GAAG,CAAC,KAAK,CAAC,wBAAwB,EAAE,QAAQ,CAAC,oBAAoB,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC9E,MAAM,QAAQ,GAAG,MAAM,CAAC;aACrB,GAAG,CAAC,WAAW,CAAC;aAChB,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAA;QAC/F,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IACzB,CAAC,CAAC,CAAA;IAEF,oFAAoF;IACpF,qFAAqF;IACrF,qCAAqC;IACrC,GAAG,CAAC,KAAK,CAAC,iCAAiC,EAAE,QAAQ,CAAC,sBAAsB,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACzF,MAAM,QAAQ,GAAG,MAAM,CAAC;aACrB,GAAG,CAAC,WAAW,CAAC;aAChB,eAAe,CAAC,QAAQ,CACvB,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EACvB,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,EACtB,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CACpB,CAAA;QACH,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IACzB,CAAC,CAAC,CAAA;IAEF,GAAG,CAAC,MAAM,CAAC,wBAAwB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC/C,MAAM,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,CAAA;QAChG,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;IAC1B,CAAC,CAAC,CAAA;IAEF,OAAO,GAAG,CAAA;AACZ,CAAC"}

package/dist/modules/promptFragments/PromptFragmentController.d.ts

@@ -0,0 +1,11 @@
+import { Hono } from 'hono';
+import type { AppEnv } from '../../http/env.js';
+/**
+ * Serves the universal best-practice prompt fragment pool read-only — the
+ * build-static catalog (compiled into the facade from @cat-factory/prompt-fragments)
+ * plus any fragments a deployment registered at startup. It is workspace-independent,
+ * so it lives outside the workspace-scoped API and is cacheable. The frontend fetches
+ * it once to populate the per-service and per-block pickers.
+ */
+export declare function promptFragmentController(): Hono<AppEnv>;
+//# sourceMappingURL=PromptFragmentController.d.ts.map

package/dist/modules/promptFragments/PromptFragmentController.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PromptFragmentController.d.ts","sourceRoot":"","sources":["../../../src/modules/promptFragments/PromptFragmentController.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAC3B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAE/C;;;;;;GAMG;AACH,wBAAgB,wBAAwB,IAAI,IAAI,CAAC,MAAM,CAAC,CASvD"}

package/dist/modules/promptFragments/PromptFragmentController.js

@@ -0,0 +1,18 @@
+import { universalFragments } from '@cat-factory/prompt-fragments';
+import { Hono } from 'hono';
+/**
+ * Serves the universal best-practice prompt fragment pool read-only — the
+ * build-static catalog (compiled into the facade from @cat-factory/prompt-fragments)
+ * plus any fragments a deployment registered at startup. It is workspace-independent,
+ * so it lives outside the workspace-scoped API and is cacheable. The frontend fetches
+ * it once to populate the per-service and per-block pickers.
+ */
+export function promptFragmentController() {
+    const app = new Hono();
+    app.get('/prompt-fragments', (c) => {
+        c.header('Cache-Control', 'public, max-age=3600');
+        return c.json(universalFragments());
+    });
+    return app;
+}
+//# sourceMappingURL=PromptFragmentController.js.map

package/dist/modules/promptFragments/PromptFragmentController.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PromptFragmentController.js","sourceRoot":"","sources":["../../../src/modules/promptFragments/PromptFragmentController.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAA;AAClE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAG3B;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB;IACtC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAU,CAAA;IAE9B,GAAG,CAAC,GAAG,CAAC,mBAAmB,EAAE,CAAC,CAAC,EAAE,EAAE;QACjC,CAAC,CAAC,MAAM,CAAC,eAAe,EAAE,sBAAsB,CAAC,CAAA;QACjD,OAAO,CAAC,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC,CAAA;IACrC,CAAC,CAAC,CAAA;IAEF,OAAO,GAAG,CAAA;AACZ,CAAC"}

package/dist/modules/providers/ApiKeyController.d.ts

@@ -0,0 +1,13 @@
+import { type ApiKey } from '@cat-factory/contracts';
+import type { ApiKeySummary } from '@cat-factory/integrations';
+import { Hono } from 'hono';
+import type { AppEnv } from '../../http/env.js';
+/** Project the service summary onto the wire type (already secret-free). */
+export declare function apiKeyToWire(summary: ApiKeySummary): ApiKey;
+/** Workspace-scoped API-key routes, mounted under `/workspaces/:workspaceId`. */
+export declare function workspaceApiKeyController(): Hono<AppEnv>;
+/** User-scoped API-key routes (the caller's own pool), mounted at the root. */
+export declare function userApiKeyController(): Hono<AppEnv>;
+/** Parse a provider id from a query/path value, or undefined when absent/invalid. */
+export declare function parseApiKeyProvider(value: string | undefined): "anthropic" | "deepseek" | "litellm" | "moonshot" | "openai" | "openrouter" | "qwen" | undefined;
+//# sourceMappingURL=ApiKeyController.d.ts.map

package/dist/modules/providers/ApiKeyController.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ApiKeyController.d.ts","sourceRoot":"","sources":["../../../src/modules/providers/ApiKeyController.ts"],"names":[],"mappings":"AAAA,OAAO,EAAyC,KAAK,MAAM,EAAE,MAAM,wBAAwB,CAAA;AAC3F,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAA;AAE9D,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAE3B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAkB/C,4EAA4E;AAC5E,wBAAgB,YAAY,CAAC,OAAO,EAAE,aAAa,GAAG,MAAM,CAa3D;AAED,iFAAiF;AACjF,wBAAgB,yBAAyB,IAAI,IAAI,CAAC,MAAM,CAAC,CAyBxD;AAED,+EAA+E;AAC/E,wBAAgB,oBAAoB,IAAI,IAAI,CAAC,MAAM,CAAC,CA+BnD;AAED,qFAAqF;AACrF,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,oGAI5D"}

package/dist/modules/providers/ApiKeyController.js

@@ -0,0 +1,98 @@
+import { addApiKeySchema, apiKeyProviderSchema } from '@cat-factory/contracts';
+import * as v from 'valibot';
+import { Hono } from 'hono';
+import { param } from '../../http/params.js';
+import { jsonBody } from '../../http/validation.js';
+// Direct-provider API-key endpoints. Keys (OpenAI/Anthropic/Qwen/DeepSeek/Moonshot)
+// are onboarded here and stored encrypted, replacing deployment-env onboarding. The
+// raw key is write-only — only metadata + rolling-window usage is ever returned.
+//
+// This controller mounts the WORKSPACE-scoped routes (under `/workspaces/:workspaceId`)
+// and the USER-scoped routes (`/me/api-keys`, the caller's own pool). ACCOUNT-scoped
+// keys are managed by the AccountController, which admin-gates them.
+const unavailable = (c) => c.json({ error: { code: 'unavailable', message: 'API key storage is not configured' } }, 503);
+const signInRequired = (c) => c.json({ error: { code: 'unauthorized', message: 'Sign in to manage your API keys' } }, 401);
+/** Project the service summary onto the wire type (already secret-free). */
+export function apiKeyToWire(summary) {
+    return {
+        id: summary.id,
+        scope: summary.scope,
+        scopeId: summary.scopeId,
+        provider: summary.provider,
+        label: summary.label,
+        createdAt: summary.createdAt,
+        lastUsedAt: summary.lastUsedAt,
+        inputTokens: summary.inputTokens,
+        outputTokens: summary.outputTokens,
+        requestCount: summary.requestCount,
+    };
+}
+/** Workspace-scoped API-key routes, mounted under `/workspaces/:workspaceId`. */
+export function workspaceApiKeyController() {
+    const app = new Hono();
+    app.get('/api-keys', async (c) => {
+        const apiKeys = c.get('container').apiKeys;
+        if (!apiKeys)
+            return unavailable(c);
+        const keys = await apiKeys.listKeys('workspace', param(c, 'workspaceId'));
+        return c.json({ keys: keys.map(apiKeyToWire) });
+    });
+    app.post('/api-keys', jsonBody(addApiKeySchema), async (c) => {
+        const apiKeys = c.get('container').apiKeys;
+        if (!apiKeys)
+            return unavailable(c);
+        const summary = await apiKeys.addKey('workspace', param(c, 'workspaceId'), c.req.valid('json'));
+        return c.json(apiKeyToWire(summary), 201);
+    });
+    app.delete('/api-keys/:id', async (c) => {
+        const apiKeys = c.get('container').apiKeys;
+        if (!apiKeys)
+            return unavailable(c);
+        await apiKeys.removeKey('workspace', param(c, 'workspaceId'), param(c, 'id'));
+        return c.body(null, 204);
+    });
+    return app;
+}
+/** User-scoped API-key routes (the caller's own pool), mounted at the root. */
+export function userApiKeyController() {
+    const app = new Hono();
+    app.get('/me/api-keys', async (c) => {
+        const apiKeys = c.get('container').apiKeys;
+        if (!apiKeys)
+            return unavailable(c);
+        const user = c.get('user');
+        if (!user)
+            return signInRequired(c);
+        const keys = await apiKeys.listKeys('user', user.id);
+        return c.json({ keys: keys.map(apiKeyToWire) });
+    });
+    app.post('/me/api-keys', jsonBody(addApiKeySchema), async (c) => {
+        const apiKeys = c.get('container').apiKeys;
+        if (!apiKeys)
+            return unavailable(c);
+        const user = c.get('user');
+        if (!user)
+            return signInRequired(c);
+        const summary = await apiKeys.addKey('user', user.id, c.req.valid('json'));
+        return c.json(apiKeyToWire(summary), 201);
+    });
+    app.delete('/me/api-keys/:id', async (c) => {
+        const apiKeys = c.get('container').apiKeys;
+        if (!apiKeys)
+            return unavailable(c);
+        const user = c.get('user');
+        if (!user)
+            return signInRequired(c);
+        await apiKeys.removeKey('user', user.id, param(c, 'id'));
+        return c.body(null, 204);
+    });
+    return app;
+}
+/** Parse a provider id from a query/path value, or undefined when absent/invalid. */
+export function parseApiKeyProvider(value) {
+    if (!value)
+        return undefined;
+    const parsed = v.safeParse(apiKeyProviderSchema, value);
+    return parsed.success ? parsed.output : undefined;
+}
+//# sourceMappingURL=ApiKeyController.js.map

package/dist/modules/providers/ApiKeyController.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ApiKeyController.js","sourceRoot":"","sources":["../../../src/modules/providers/ApiKeyController.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAe,MAAM,wBAAwB,CAAA;AAE3F,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAC5B,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAG3B,OAAO,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAA;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAA;AAEnD,oFAAoF;AACpF,oFAAoF;AACpF,iFAAiF;AACjF,EAAE;AACF,wFAAwF;AACxF,qFAAqF;AACrF,qEAAqE;AAErE,MAAM,WAAW,GAAG,CAAC,CAAkB,EAAE,EAAE,CACzC,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,mCAAmC,EAAE,EAAE,EAAE,GAAG,CAAC,CAAA;AAE/F,MAAM,cAAc,GAAG,CAAC,CAAkB,EAAE,EAAE,CAC5C,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,iCAAiC,EAAE,EAAE,EAAE,GAAG,CAAC,CAAA;AAE9F,4EAA4E;AAC5E,MAAM,UAAU,YAAY,CAAC,OAAsB;IACjD,OAAO;QACL,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,YAAY,EAAE,OAAO,CAAC,YAAY;KACnC,CAAA;AACH,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,yBAAyB;IACvC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAU,CAAA;IAE9B,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC/B,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,OAAO,CAAA;QAC1C,IAAI,CAAC,OAAO;YAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAA;QACnC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAA;QACzE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC,CAAA;IACjD,CAAC,CAAC,CAAA;IAEF,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC3D,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,OAAO,CAAA;QAC1C,IAAI,CAAC,OAAO;YAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAA;QACnC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAA;QAC/F,OAAO,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,CAAA;IAC3C,CAAC,CAAC,CAAA;IAEF,GAAG,CAAC,MAAM,CAAC,eAAe,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACtC,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,OAAO,CAAA;QAC1C,IAAI,CAAC,OAAO;YAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAA;QACnC,MAAM,OAAO,CAAC,SAAS,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAA;QAC7E,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;IAC1B,CAAC,CAAC,CAAA;IAEF,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,oBAAoB;IAClC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAU,CAAA;IAE9B,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAClC,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,OAAO,CAAA;QAC1C,IAAI,CAAC,OAAO;YAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAA;QACnC,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QAC1B,IAAI,CAAC,IAAI;YAAE,OAAO,cAAc,CAAC,CAAC,CAAC,CAAA;QACnC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAA;QACpD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC,CAAA;IACjD,CAAC,CAAC,CAAA;IAEF,GAAG,CAAC,IAAI,CAAC,cAAc,EAAE,QAAQ,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC9D,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,OAAO,CAAA;QAC1C,IAAI,CAAC,OAAO;YAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAA;QACnC,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QAC1B,IAAI,CAAC,IAAI;YAAE,OAAO,cAAc,CAAC,CAAC,CAAC,CAAA;QACnC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAA;QAC1E,OAAO,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,CAAA;IAC3C,CAAC,CAAC,CAAA;IAEF,GAAG,CAAC,MAAM,CAAC,kBAAkB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACzC,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,OAAO,CAAA;QAC1C,IAAI,CAAC,OAAO;YAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAA;QACnC,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QAC1B,IAAI,CAAC,IAAI;YAAE,OAAO,cAAc,CAAC,CAAC,CAAC,CAAA;QACnC,MAAM,OAAO,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAA;QACxD,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;IAC1B,CAAC,CAAC,CAAA;IAEF,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,mBAAmB,CAAC,KAAyB;IAC3D,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAA;IAC5B,MAAM,MAAM,GAAG,CAAC,CAAC,SAAS,CAAC,oBAAoB,EAAE,KAAK,CAAC,CAAA;IACvD,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAA;AACnD,CAAC"}

package/dist/modules/providers/PersonalSubscriptionController.d.ts

@@ -0,0 +1,4 @@
+import { Hono } from 'hono';
+import type { AppEnv } from '../../http/env.js';
+export declare function personalSubscriptionController(): Hono<AppEnv>;
+//# sourceMappingURL=PersonalSubscriptionController.d.ts.map

package/dist/modules/providers/PersonalSubscriptionController.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PersonalSubscriptionController.d.ts","sourceRoot":"","sources":["../../../src/modules/providers/PersonalSubscriptionController.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAE3B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAuB/C,wBAAgB,8BAA8B,IAAI,IAAI,CAAC,MAAM,CAAC,CA+B7D"}