@cat-factory/worker 0.54.0 → 0.54.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/app.d.ts.map +1 -1
- package/dist/app.js +5 -5
- package/dist/app.js.map +1 -1
- package/dist/infrastructure/config/cors.d.ts +1 -1
- package/dist/infrastructure/config/cors.d.ts.map +1 -1
- package/dist/infrastructure/config/cors.js +1 -1
- package/dist/infrastructure/config/cors.js.map +1 -1
- package/migrations/0034_service_connections.sql +12 -0
- package/package.json +15 -15
package/dist/app.d.ts.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../src/app.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAA;AAE/D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAA;AAClE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;
|
|
1
|
+
{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../src/app.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAA;AAE/D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAA;AAClE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAS3B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,6BAA6B,CAAA;AAEzD,MAAM,WAAW,gBAAgB;IAC/B,+EAA+E;IAC/E,SAAS,CAAC,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAA;IACrC,mFAAmF;IACnF,uBAAuB,CAAC,EAAE,OAAO,CAAA;IACjC,gFAAgF;IAChF,aAAa,CAAC,EAAE,qBAAqB,CAAA;CACtC;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,SAAS,CAAC,OAAO,GAAE,gBAAqB,GAAG,IAAI,CAAC,MAAM,CAAC,CAkDtE"}
|
package/dist/app.js
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
import { mountAuthGate, registerCoreControllers } from '@cat-factory/server';
|
|
2
2
|
import { Hono } from 'hono';
|
|
3
3
|
import { cors } from 'hono/cors';
|
|
4
|
-
import { CORS_ALLOWED_HEADERS, resolveCorsOrigin } from './infrastructure/config/cors';
|
|
4
|
+
import { CORS_ALLOWED_HEADERS, corsReflectsWhenUnset, resolveCorsOrigin, } from './infrastructure/config/cors';
|
|
5
5
|
import { buildContainer } from './infrastructure/container';
|
|
6
6
|
import { handleError } from './infrastructure/http/errorHandler';
|
|
7
7
|
/**
|
|
@@ -19,11 +19,11 @@ export function createApp(options = {}) {
|
|
|
19
19
|
const app = new Hono();
|
|
20
20
|
// CORS allowlist is per-deployment configuration (CORS_ALLOWED_ORIGINS), not
|
|
21
21
|
// hardcoded, since each org provisions this system with its own frontend
|
|
22
|
-
// origin(s).
|
|
23
|
-
//
|
|
24
|
-
// bearer header (not cookies), so credentials mode stays off.
|
|
22
|
+
// origin(s). An explicit `*` reflects any origin; an unset allowlist reflects only
|
|
23
|
+
// in a non-production ENVIRONMENT (a production deployment that forgets it
|
|
24
|
+
// default-denies). Auth is a bearer header (not cookies), so credentials mode stays off.
|
|
25
25
|
app.use('*', cors({
|
|
26
|
-
origin: (origin, c) => resolveCorsOrigin(origin, c.env.CORS_ALLOWED_ORIGINS),
|
|
26
|
+
origin: (origin, c) => resolveCorsOrigin(origin, c.env.CORS_ALLOWED_ORIGINS, corsReflectsWhenUnset(c.env.ENVIRONMENT)),
|
|
27
27
|
// The shared allow-list (kept in @cat-factory/server so both facades match): the
|
|
28
28
|
// SPA sends X-Personal-Password (personal-subscription unlock) and X-Connection-Id
|
|
29
29
|
// (real-time self-echo suppression) on its calls, so each must be allow-listed or
|
package/dist/app.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"app.js","sourceRoot":"","sources":["../src/app.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAA;AAE5E,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAC3B,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,
|
|
1
|
+
{"version":3,"file":"app.js","sourceRoot":"","sources":["../src/app.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAA;AAE5E,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAC3B,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EACL,oBAAoB,EACpB,qBAAqB,EACrB,iBAAiB,GAClB,MAAM,8BAA8B,CAAA;AACrC,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAA;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,oCAAoC,CAAA;AAYhE;;;;;;;;;;GAUG;AACH,MAAM,UAAU,SAAS,CAAC,OAAO,GAAqB,EAAE;IACtD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAU,CAAA;IAE9B,6EAA6E;IAC7E,yEAAyE;IACzE,mFAAmF;IACnF,2EAA2E;IAC3E,yFAAyF;IACzF,GAAG,CAAC,GAAG,CACL,GAAG,EACH,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CACpB,iBAAiB,CACf,MAAM,EACN,CAAC,CAAC,GAAG,CAAC,oBAAoB,EAC1B,qBAAqB,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CACzC;QACH,iFAAiF;QACjF,mFAAmF;QACnF,kFAAkF;QAClF,wEAAwE;QACxE,YAAY,EAAE,CAAC,GAAG,oBAAoB,CAAC;KACxC,CAAC,CACH,CAAA;IACD,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QAC7B,CAAC,CAAC,GAAG,CACH,WAAW,EACX,cAAc,CAAC,CAAC,CAAC,GAAG,EAAE,OAAO,CAAC,SAAS,EAAE;YACvC,uBAAuB,EAAE,OAAO,CAAC,uBAAuB;YACxD,aAAa,EAAE,OAAO,CAAC,aAAa;SACrC,CAAC,CACH,CAAA;QACD,MAAM,IAAI,EAAE,CAAA;IACd,CAAC,CAAC,CAAA;IAEF,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;IAEnD,iFAAiF;IACjF,mFAAmF;IACnF,aAAa,CAAC,GAAG,CAAC,CAAA;IAElB,mFAAmF;IACnF,mFAAmF;IACnF,8EAA8E;IAC9E,gCAAgC;IAChC,uBAAuB,CAAC,GAAG,CAAC,CAAA;IAE5B,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;IAExB,OAAO,GAAG,CAAA;AACZ,CAAC"}
|
|
@@ -1,2 +1,2 @@
|
|
|
1
|
-
export { CORS_ALLOWED_HEADERS, parseAllowedOrigins, resolveCorsOrigin } from '@cat-factory/server';
|
|
1
|
+
export { CORS_ALLOWED_HEADERS, corsReflectsWhenUnset, parseAllowedOrigins, resolveCorsOrigin, } from '@cat-factory/server';
|
|
2
2
|
//# sourceMappingURL=cors.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"cors.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/config/cors.ts"],"names":[],"mappings":"AACA,OAAO,
|
|
1
|
+
{"version":3,"file":"cors.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/config/cors.ts"],"names":[],"mappings":"AACA,OAAO,EACL,oBAAoB,EACpB,qBAAqB,EACrB,mBAAmB,EACnB,iBAAiB,GAClB,MAAM,qBAAqB,CAAA"}
|
|
@@ -1,3 +1,3 @@
|
|
|
1
1
|
// Moved to the shared @cat-factory/server package; re-exported for existing imports.
|
|
2
|
-
export { CORS_ALLOWED_HEADERS, parseAllowedOrigins, resolveCorsOrigin } from '@cat-factory/server';
|
|
2
|
+
export { CORS_ALLOWED_HEADERS, corsReflectsWhenUnset, parseAllowedOrigins, resolveCorsOrigin, } from '@cat-factory/server';
|
|
3
3
|
//# sourceMappingURL=cors.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"cors.js","sourceRoot":"","sources":["../../../src/infrastructure/config/cors.ts"],"names":[],"mappings":"AAAA,qFAAqF;AACrF,OAAO,
|
|
1
|
+
{"version":3,"file":"cors.js","sourceRoot":"","sources":["../../../src/infrastructure/config/cors.ts"],"names":[],"mappings":"AAAA,qFAAqF;AACrF,OAAO,EACL,oBAAoB,EACpB,qBAAqB,EACrB,mBAAmB,EACnB,iBAAiB,GAClB,MAAM,qBAAqB,CAAA"}
|
|
@@ -0,0 +1,12 @@
|
|
|
1
|
+
-- Connections between services (phase 1 of the service-connections initiative —
|
|
2
|
+
-- see docs/initiatives/service-connections.md).
|
|
3
|
+
--
|
|
4
|
+
-- `service_connections`: a `service`-type frame's directed connections to the other
|
|
5
|
+
-- services it USES (stored on the consumer end), serialized as a JSON array of
|
|
6
|
+
-- `{ serviceBlockId, description? }`. Drawn as board edges and the source of the
|
|
7
|
+
-- per-task "involved services" choices. Stored as JSON, mirroring `frontend_config`.
|
|
8
|
+
ALTER TABLE blocks ADD COLUMN service_connections TEXT;
|
|
9
|
+
-- `involved_service_ids`: a task's selected connected service frames (JSON array of
|
|
10
|
+
-- frame block ids) that are directly involved beyond the task's own service — they
|
|
11
|
+
-- spin up as ephemeral environments too, and the coding agent may change their repos.
|
|
12
|
+
ALTER TABLE blocks ADD COLUMN involved_service_ids TEXT;
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@cat-factory/worker",
|
|
3
|
-
"version": "0.54.
|
|
3
|
+
"version": "0.54.2",
|
|
4
4
|
"description": "Reusable Cloudflare Worker library (Hono + D1) exposing the Agent Architecture Board core: the `createApp()` Hono factory, the default fetch/scheduled/queue handler, and the Durable Object + Workflow classes. Deployments (see deploy/backend) supply the wrangler.toml + config and re-export these.",
|
|
5
5
|
"repository": {
|
|
6
6
|
"type": "git",
|
|
@@ -42,19 +42,19 @@
|
|
|
42
42
|
"pino": "^10.3.1",
|
|
43
43
|
"valibot": "^1.4.2",
|
|
44
44
|
"workers-ai-provider": "^3.2.1",
|
|
45
|
-
"@cat-factory/
|
|
46
|
-
"@cat-factory/
|
|
47
|
-
"@cat-factory/
|
|
48
|
-
"@cat-factory/
|
|
49
|
-
"@cat-factory/
|
|
50
|
-
"@cat-factory/integrations": "0.56.
|
|
51
|
-
"@cat-factory/kernel": "0.70.
|
|
52
|
-
"@cat-factory/observability-langfuse": "0.7.
|
|
53
|
-
"@cat-factory/orchestration": "0.59.
|
|
54
|
-
"@cat-factory/
|
|
55
|
-
"@cat-factory/
|
|
56
|
-
"@cat-factory/
|
|
57
|
-
"@cat-factory/spend": "0.10.
|
|
45
|
+
"@cat-factory/agents": "0.26.15",
|
|
46
|
+
"@cat-factory/consensus": "0.8.16",
|
|
47
|
+
"@cat-factory/contracts": "0.83.0",
|
|
48
|
+
"@cat-factory/gates": "0.2.72",
|
|
49
|
+
"@cat-factory/gitlab": "0.4.43",
|
|
50
|
+
"@cat-factory/integrations": "0.56.3",
|
|
51
|
+
"@cat-factory/kernel": "0.70.2",
|
|
52
|
+
"@cat-factory/observability-langfuse": "0.7.115",
|
|
53
|
+
"@cat-factory/orchestration": "0.59.2",
|
|
54
|
+
"@cat-factory/prompt-fragments": "0.9.43",
|
|
55
|
+
"@cat-factory/provider-cloudflare": "0.7.121",
|
|
56
|
+
"@cat-factory/server": "0.68.2",
|
|
57
|
+
"@cat-factory/spend": "0.10.76"
|
|
58
58
|
},
|
|
59
59
|
"devDependencies": {
|
|
60
60
|
"@cloudflare/vitest-pool-workers": "^0.16.20",
|
|
@@ -62,7 +62,7 @@
|
|
|
62
62
|
"typescript": "7.0.1-rc",
|
|
63
63
|
"vitest": "^4.1.9",
|
|
64
64
|
"wrangler": "^4.105.0",
|
|
65
|
-
"@cat-factory/conformance": "0.9.
|
|
65
|
+
"@cat-factory/conformance": "0.9.96"
|
|
66
66
|
},
|
|
67
67
|
"scripts": {
|
|
68
68
|
"build": "tsc -b tsconfig.build.json",
|