@cat-factory/worker 0.6.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Igor Savin
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/dist/app.d.ts

@@ -0,0 +1,22 @@
+import type { CoreDependencies } from '@cat-factory/orchestration';
+import { Hono } from 'hono';
+import type { AppEnv } from './infrastructure/http/types';
+export interface CreateAppOptions {
+    /** Override core dependencies — used by tests (e.g. a fake agent executor). */
+    overrides?: Partial<CoreDependencies>;
+    /** Force the Cloudflare-AI-enabled flag (conformance forces it off for parity). */
+    cloudflareModelsEnabled?: boolean;
+}
+/**
+ * Assembles the Hono application. A per-request middleware builds the DI
+ * container from the request's `env` bindings and stashes it on the context, so
+ * controllers resolve their services from `c.get('container')`.
+ *
+ * The bulk of the controllers are runtime-neutral and live in @cat-factory/server
+ * (`registerCoreControllers`); the Worker mounts only its own runtime-coupled
+ * controllers — the LLM proxy (Workers AI binding), the WebSocket event stream
+ * (Durable Object), the GitHub webhook (Queue) and connect (Workflow), and the
+ * OAuth login flow.
+ */
+export declare function createApp(options?: CreateAppOptions): Hono<AppEnv>;
+//# sourceMappingURL=app.d.ts.map

package/dist/app.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../src/app.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAA;AAClE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAK3B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,6BAA6B,CAAA;AAEzD,MAAM,WAAW,gBAAgB;IAC/B,+EAA+E;IAC/E,SAAS,CAAC,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAA;IACrC,mFAAmF;IACnF,uBAAuB,CAAC,EAAE,OAAO,CAAA;CAClC;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,SAAS,CAAC,OAAO,GAAE,gBAAqB,GAAG,IAAI,CAAC,MAAM,CAAC,CA0CtE"}

package/dist/app.js

@@ -0,0 +1,49 @@
+import { mountAuthGate, registerCoreControllers } from '@cat-factory/server';
+import { Hono } from 'hono';
+import { cors } from 'hono/cors';
+import { resolveCorsOrigin } from './infrastructure/config/cors';
+import { buildContainer } from './infrastructure/container';
+import { handleError } from './infrastructure/http/errorHandler';
+/**
+ * Assembles the Hono application. A per-request middleware builds the DI
+ * container from the request's `env` bindings and stashes it on the context, so
+ * controllers resolve their services from `c.get('container')`.
+ *
+ * The bulk of the controllers are runtime-neutral and live in @cat-factory/server
+ * (`registerCoreControllers`); the Worker mounts only its own runtime-coupled
+ * controllers — the LLM proxy (Workers AI binding), the WebSocket event stream
+ * (Durable Object), the GitHub webhook (Queue) and connect (Workflow), and the
+ * OAuth login flow.
+ */
+export function createApp(options = {}) {
+    const app = new Hono();
+    // CORS allowlist is per-deployment configuration (CORS_ALLOWED_ORIGINS), not
+    // hardcoded, since each org provisions this system with its own frontend
+    // origin(s). Unset / `*` allows any origin — safe because every route is
+    // bearer-gated and fails closed; pinning origins is defense-in-depth. Auth is a
+    // bearer header (not cookies), so credentials mode stays off.
+    app.use('*', cors({
+        origin: (origin, c) => resolveCorsOrigin(origin, c.env.CORS_ALLOWED_ORIGINS),
+        // X-Personal-Password carries the ambient personal-subscription unlock password
+        // (individual-usage vendors); it must be allow-listed or the browser drops it.
+        allowHeaders: ['Content-Type', 'Authorization', 'X-Personal-Password'],
+    }));
+    app.use('*', async (c, next) => {
+        c.set('container', buildContainer(c.env, options.overrides, {
+            cloudflareModelsEnabled: options.cloudflareModelsEnabled,
+        }));
+        await next();
+    });
+    app.get('/health', (c) => c.json({ status: 'ok' }));
+    // Default-deny session gate + per-workspace authz, shared verbatim with the Node
+    // service (one implementation in @cat-factory/server so the runtimes can't drift).
+    mountAuthGate(app);
+    // The runtime-neutral API layer — every controller is shared across facades. Their
+    // runtime seams (WebSocket upgrade, backfill Workflow, sync Queue, the LLM proxy's
+    // Workers AI binding + upstreams) are delegated to the Worker's gateways (see
+    // buildContainer's `gateways`).
+    registerCoreControllers(app);
+    app.onError(handleError);
+    return app;
+}
+//# sourceMappingURL=app.js.map

package/dist/app.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.js","sourceRoot":"","sources":["../src/app.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAA;AAE5E,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAC3B,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAA;AAChE,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAA;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,oCAAoC,CAAA;AAUhE;;;;;;;;;;GAUG;AACH,MAAM,UAAU,SAAS,CAAC,OAAO,GAAqB,EAAE;IACtD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAU,CAAA;IAE9B,6EAA6E;IAC7E,yEAAyE;IACzE,yEAAyE;IACzE,gFAAgF;IAChF,8DAA8D;IAC9D,GAAG,CAAC,GAAG,CACL,GAAG,EACH,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC;QAC5E,gFAAgF;QAChF,+EAA+E;QAC/E,YAAY,EAAE,CAAC,cAAc,EAAE,eAAe,EAAE,qBAAqB,CAAC;KACvE,CAAC,CACH,CAAA;IACD,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QAC7B,CAAC,CAAC,GAAG,CACH,WAAW,EACX,cAAc,CAAC,CAAC,CAAC,GAAG,EAAE,OAAO,CAAC,SAAS,EAAE;YACvC,uBAAuB,EAAE,OAAO,CAAC,uBAAuB;SACzD,CAAC,CACH,CAAA;QACD,MAAM,IAAI,EAAE,CAAA;IACd,CAAC,CAAC,CAAA;IAEF,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;IAEnD,iFAAiF;IACjF,mFAAmF;IACnF,aAAa,CAAC,GAAG,CAAC,CAAA;IAElB,mFAAmF;IACnF,mFAAmF;IACnF,8EAA8E;IAC9E,gCAAgC;IAChC,uBAAuB,CAAC,GAAG,CAAC,CAAA;IAE5B,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;IAExB,OAAO,GAAG,CAAA;AACZ,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,17 @@
+import type { ExecutionContext, MessageBatch, ScheduledController } from '@cloudflare/workers-types';
+import type { Env, ExecutionStartMessage, GitHubSyncMessage } from './infrastructure/env';
+export { ExecutionWorkflow } from './infrastructure/workflows/ExecutionWorkflow';
+export { GitHubBackfillWorkflow } from './infrastructure/workflows/GitHubBackfillWorkflow';
+export { BootstrapWorkflow } from './infrastructure/workflows/BootstrapWorkflow';
+export { ExecutionContainer } from './infrastructure/containers/ExecutionContainer';
+export { WorkspaceEventsHub } from './infrastructure/durable-objects/WorkspaceEventsHub';
+export { registerModelRegistry, clearModelRegistries, type ModelRegistryFactory, } from './infrastructure/ai/registries';
+export { registerAgentKind, registerAgentKinds, clearRegisteredAgentKinds, type AgentKindDefinition, } from '@cat-factory/agents';
+export { registerPipeline, registerPipelines, clearRegisteredPipelines } from '@cat-factory/kernel';
+declare const _default: {
+    fetch: (request: Request, Env?: Env | {} | undefined, executionCtx?: import("hono").ExecutionContext) => Response | Promise<Response>;
+    scheduled(controller: ScheduledController, env: Env, ctx: ExecutionContext): Promise<void>;
+    queue(batch: MessageBatch<ExecutionStartMessage | GitHubSyncMessage>, env: Env): Promise<void>;
+};
+export default _default;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAA;AAGpG,OAAO,KAAK,EAAE,GAAG,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAA;AA0BzF,OAAO,EAAE,iBAAiB,EAAE,MAAM,8CAA8C,CAAA;AAChF,OAAO,EAAE,sBAAsB,EAAE,MAAM,mDAAmD,CAAA;AAC1F,OAAO,EAAE,iBAAiB,EAAE,MAAM,8CAA8C,CAAA;AAEhF,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAA;AAEnF,OAAO,EAAE,kBAAkB,EAAE,MAAM,qDAAqD,CAAA;AAKxF,OAAO,EACL,qBAAqB,EACrB,oBAAoB,EACpB,KAAK,oBAAoB,GAC1B,MAAM,gCAAgC,CAAA;AAMvC,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,yBAAyB,EACzB,KAAK,mBAAmB,GACzB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAA;;IA6BjG,KAAK;IAEC,SAAS,aAAa,mBAAmB,OAAO,GAAG,OAAO,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;IA2M1F,KAAK,QACF,YAAY,CAAC,qBAAqB,GAAG,iBAAiB,CAAC,OACzD,GAAG,GACP,OAAO,CAAC,IAAI,CAAC"}

package/dist/index.js

@@ -0,0 +1,234 @@
+import { createApp } from './app';
+import { loadConfig } from './infrastructure/config';
+import { D1AgentRunRepository } from './infrastructure/repositories/D1AgentRunRepository';
+import { D1CommitProjectionRepository } from './infrastructure/repositories/D1CommitProjectionRepository';
+import { D1LiveContainerRepository } from './infrastructure/repositories/D1LiveContainerRepository';
+import { D1SubscriptionActivationRepository } from './infrastructure/repositories/D1PersonalSubscriptionRepository';
+import { ContainerInstanceRegistry } from './infrastructure/containers/ContainerInstanceRegistry';
+import { D1RateLimitRepository } from './infrastructure/repositories/D1RateLimitRepository';
+import { D1TokenUsageRepository } from './infrastructure/repositories/D1TokenUsageRepository';
+import { D1LlmCallMetricRepository } from './infrastructure/repositories/D1LlmCallMetricRepository';
+import { D1PipelineScheduleRepository } from './infrastructure/repositories/D1PipelineScheduleRepository';
+import { buildContainer } from './infrastructure/container';
+import { escalateStaleNotifications } from '@cat-factory/server';
+import { CryptoIdGenerator, SystemClock } from './infrastructure/runtime';
+import { WorkflowsWorkRunner } from './infrastructure/workflows/WorkflowsWorkRunner';
+import { WorkflowsBootstrapRunner } from './infrastructure/workflows/WorkflowsBootstrapRunner';
+import { sweepRetention } from './infrastructure/workflows/retention';
+import { WorkflowsLookup, sweepStuckRuns } from './infrastructure/workflows/sweeper';
+import { handleGitHubSyncBatch, reconcileStaleRepos } from './infrastructure/github/sync-consumer';
+import { sweepExpiredEnvironments } from './infrastructure/environments/sweep';
+import { logger } from './infrastructure/observability/logger';
+// Cloudflare Worker entry. In addition to the Hono `fetch` handler, we expose a
+// `scheduled` handler (the cron sweeper, now also reconciling GitHub
+// projections) and a `queue` consumer that multiplexes two queues: durable run
+// admission and GitHub sync. The Workflows bindings require their entrypoint
+// classes to be exported by name.
+export { ExecutionWorkflow } from './infrastructure/workflows/ExecutionWorkflow';
+export { GitHubBackfillWorkflow } from './infrastructure/workflows/GitHubBackfillWorkflow';
+export { BootstrapWorkflow } from './infrastructure/workflows/BootstrapWorkflow';
+// Container-enabled Durable Object backing per-run implementation containers.
+export { ExecutionContainer } from './infrastructure/containers/ExecutionContainer';
+// Per-workspace WebSocket fan-out hub (real-time execution/board events).
+export { WorkspaceEventsHub } from './infrastructure/durable-objects/WorkspaceEventsHub';
+// Installation-level AI provisioning extension point: a deployment registers extra
+// model-provider registries at startup (e.g. AWS Bedrock from
+// @cat-factory/provider-bedrock) and every container build picks them up.
+export { registerModelRegistry, clearModelRegistries, } from './infrastructure/ai/registries';
+// Installation-level extension points for custom agent kinds and predefined pipelines
+// (alongside registerModelRegistry above): a deployment registers these at startup —
+// typically from a proprietary org package — and every prompt build, executor routing
+// decision and new-workspace seed picks them up.
+export { registerAgentKind, registerAgentKinds, clearRegisteredAgentKinds, } from '@cat-factory/agents';
+export { registerPipeline, registerPipelines, clearRegisteredPipelines } from '@cat-factory/kernel';
+const app = createApp();
+/** Compact, log-friendly shape for an unknown caught value. */
+function errInfo(error) {
+    if (error instanceof Error) {
+        return { message: error.message, ...(error.stack ? { stack: error.stack } : {}) };
+    }
+    return { message: String(error) };
+}
+/** A run is treated as orphaned if its lease is older than this. */
+const SWEEP_LEASE_MS = 5 * 60 * 1000;
+/** A GitHub projection is reconciled if it hasn't synced within this window. */
+const GITHUB_RECONCILE_STALE_MS = 30 * 60 * 1000;
+/** Queue name for GitHub webhook deliveries / resync jobs (see wrangler.toml). */
+const GITHUB_SYNC_QUEUE_NAME = 'cat-factory-github-sync';
+/**
+ * Cron schedule (see wrangler.toml `triggers.crons`) that drives the retention
+ * sweep. Retention windows are days-to-months long, so a daily pass is plenty —
+ * running it on the 2-min run-sweeper cron would just re-issue the same boundary
+ * DELETEs ~720×/day against the single D1 writer. Routed by `controller.cron`.
+ */
+const RETENTION_CRON = '0 3 * * *';
+export default {
+    fetch: app.fetch,
+    async scheduled(controller, env, ctx) {
+        const clock = new SystemClock();
+        // Daily pass: prune the unbounded ledgers/projections to their retention
+        // windows. The tables exist regardless of whether GitHub/agents are
+        // configured, so this runs unconditionally; an unused table reclaims nothing.
+        if (controller.cron === RETENTION_CRON) {
+            ctx.waitUntil(sweepRetention({
+                tokenUsageRepository: new D1TokenUsageRepository({ db: env.DB }),
+                rateLimitRepository: new D1RateLimitRepository({
+                    db: env.DB,
+                    idGenerator: new CryptoIdGenerator(),
+                }),
+                commitRepository: new D1CommitProjectionRepository({ db: env.DB }),
+                llmCallMetricRepository: new D1LlmCallMetricRepository({ db: env.DB }),
+                pipelineScheduleRepository: new D1PipelineScheduleRepository({ db: env.DB }),
+                clock,
+                policy: loadConfig(env).retention,
+            })
+                .then((result) => logger.info({ cron: 'retention', ...result }, 'retention sweep complete'))
+                .catch((error) => logger.error({ cron: 'retention', err: errInfo(error) }, 'retention sweep failed')));
+            return;
+        }
+        // Frequent pass (every 2 min): time-sensitive backstops.
+        // Re-drive any agent run — execution OR bootstrap — whose Workflows instance
+        // died. One sweep over the unified agent_runs table dispatches by kind.
+        if (env.EXECUTION_WORKFLOW || env.BOOTSTRAP_WORKFLOW) {
+            const execLookup = env.EXECUTION_WORKFLOW ? new WorkflowsLookup(env.EXECUTION_WORKFLOW) : null;
+            const bootLookup = env.BOOTSTRAP_WORKFLOW ? new WorkflowsLookup(env.BOOTSTRAP_WORKFLOW) : null;
+            const execRunner = env.EXECUTION_WORKFLOW
+                ? new WorkflowsWorkRunner({ workflow: env.EXECUTION_WORKFLOW, queue: env.EXECUTION_QUEUE })
+                : null;
+            const bootRunner = env.BOOTSTRAP_WORKFLOW
+                ? new WorkflowsBootstrapRunner(env.BOOTSTRAP_WORKFLOW)
+                : null;
+            ctx.waitUntil(sweepStuckRuns({
+                agentRunRepository: new D1AgentRunRepository({ db: env.DB }),
+                instanceState: (ref) => {
+                    const lookup = ref.kind === 'bootstrap' ? bootLookup : execLookup;
+                    // No binding for this kind → can't classify, so treat as alive (skip).
+                    return lookup ? lookup.instanceState(ref.id) : Promise.resolve('alive');
+                },
+                redrive: async (ref) => {
+                    if (ref.kind === 'bootstrap')
+                        await bootRunner?.startRun(ref.workspaceId, ref.id);
+                    else
+                        await execRunner?.startRun(ref.workspaceId, ref.id);
+                },
+                // The durable instance is terminal and can't be recreated → finalize the
+                // run as stopped so it stops showing `running` forever (also reclaims any
+                // leftover container). Reuses the same stop path the user-facing button hits.
+                finalizeOrphan: async (ref) => {
+                    const container = buildContainer(env);
+                    const reason = 'The run was stopped automatically: its durable driver ended without finalizing it.';
+                    if (ref.kind === 'bootstrap') {
+                        if (container.bootstrap) {
+                            await container.bootstrap.service.stop(ref.workspaceId, ref.id, {
+                                reason,
+                                kind: 'unknown',
+                            });
+                        }
+                    }
+                    else {
+                        await container.executionService.stopRun(ref.workspaceId, ref.id, {
+                            reason,
+                            kind: 'unknown',
+                        });
+                    }
+                },
+                clock,
+                leaseMs: SWEEP_LEASE_MS,
+            })
+                // Surface what the sweep did — the key signal for "are runs getting stuck?"
+                // Only log when it actually acted.
+                .then(({ redriven, finalized }) => {
+                if (redriven > 0 || finalized > 0) {
+                    logger.warn({ cron: 'run-sweeper', redriven, finalized }, 'swept stuck runs');
+                }
+            })
+                .catch((error) => logger.error({ cron: 'run-sweeper', err: errInfo(error) }, 'run sweep failed')));
+        }
+        // Reclaim expired personal-credential activations (individual-usage subscriptions).
+        // Each is a short-lived, system-encrypted per-run copy of a user's token; the TTL
+        // bounds standing exposure and a finished run's rows are deleted at completion, but
+        // this backstop also clears any that outlived their TTL. The table always exists.
+        {
+            const activations = new D1SubscriptionActivationRepository({ db: env.DB });
+            ctx.waitUntil(activations
+                .deleteExpired(clock.now())
+                .then((reclaimed) => {
+                if (reclaimed > 0)
+                    logger.info({ cron: 'activation-sweeper', reclaimed }, 'reclaimed activations');
+            })
+                .catch((error) => logger.error({ cron: 'activation-sweeper', err: errInfo(error) }, 'activation sweep failed')));
+        }
+        // Instance-level container reaper: kill any per-run container that outlived its
+        // legitimate maximum lifetime. This is the load-bearing backstop the run-record
+        // nets miss — a terminal run whose container survived, or a stuck-`running` run
+        // a live driver keeps warm (so its idle sleep clock never starts). Keys off the
+        // real live-container inventory, not the run record, and kills via the same
+        // EXEC_CONTAINER binding (no Cloudflare API token). With normal runs now self-
+        // reclaiming, a reaped container is a genuine leak — the registry logs each loudly.
+        if (env.EXEC_CONTAINER) {
+            const reaper = new ContainerInstanceRegistry(env.EXEC_CONTAINER, new D1LiveContainerRepository({ db: env.DB }), clock);
+            const maxAgeMs = loadConfig(env).execution.containerMaxAgeMs;
+            ctx.waitUntil(reaper
+                .reapStaleBefore(clock.now() - maxAgeMs)
+                .then(({ reaped }) => {
+                if (reaped > 0)
+                    logger.warn({ cron: 'container-reaper', reaped }, 'reaped leaked containers');
+            })
+                .catch((error) => logger.error({ cron: 'container-reaper', err: errInfo(error) }, 'container reap failed')));
+        }
+        // Escalate long-waiting notifications yellow → red (every 2 min). Runs no longer
+        // time out waiting for a human, so the escalating notification — past each
+        // workspace's `waitingEscalationMinutes` threshold — is the overdue-human signal.
+        ctx.waitUntil(escalateStaleNotifications(buildContainer(env), clock.now())
+            .then((escalated) => {
+            if (escalated > 0)
+                logger.info({ cron: 'notification-escalation', escalated }, 'escalated notifications');
+        })
+            .catch((error) => logger.error({ cron: 'notification-escalation', err: errInfo(error) }, 'notification escalation failed')));
+        // Fire any due recurring pipelines (every 2 min; the actual cadence is hours).
+        // Each due schedule starts its pipeline against its reused block, skipping any
+        // whose block already has an active run. No-op when the feature isn't wired.
+        ctx.waitUntil(Promise.resolve(buildContainer(env).recurring?.service.runDue(clock.now()))
+            .then((result) => {
+            if (result && (result.fired > 0 || result.skipped > 0)) {
+                logger.info({ cron: 'recurring-pipelines', ...result }, 'fired recurring pipelines');
+            }
+        })
+            .catch((error) => logger.error({ cron: 'recurring-pipelines', err: errInfo(error) }, 'recurring-pipeline sweep failed')));
+        // Reconcile GitHub projections that may have missed a webhook (no-op unless
+        // the integration is configured).
+        ctx.waitUntil(reconcileStaleRepos(env, clock, GITHUB_RECONCILE_STALE_MS)
+            .then((scheduled) => {
+            if (scheduled > 0)
+                logger.info({ cron: 'github-reconcile', scheduled }, 'scheduled repo resyncs');
+        })
+            .catch((error) => logger.error({ cron: 'github-reconcile', err: errInfo(error) }, 'github reconcile failed')));
+        // Tear down ephemeral environments whose TTL has elapsed (no-op unless the
+        // environment integration is configured).
+        ctx.waitUntil(sweepExpiredEnvironments(env, clock).catch((error) => logger.error({ cron: 'env-sweeper', err: errInfo(error) }, 'environment sweep failed')));
+    },
+    async queue(batch, env) {
+        // Route by source queue — the single handler serves both queues.
+        if (batch.queue === GITHUB_SYNC_QUEUE_NAME) {
+            await handleGitHubSyncBatch(batch, env);
+            return;
+        }
+        // Execution admission queue: create the Workflows instance per message.
+        if (!env.EXECUTION_WORKFLOW) {
+            for (const message of batch.messages)
+                message.ack();
+            return;
+        }
+        const runner = new WorkflowsWorkRunner({ workflow: env.EXECUTION_WORKFLOW });
+        for (const message of batch.messages) {
+            try {
+                await runner.create(message.body.workspaceId, message.body.executionId);
+                message.ack();
+            }
+            catch {
+                message.retry();
+            }
+        }
+    },
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,OAAO,CAAA;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAA;AAEpD,OAAO,EAAE,oBAAoB,EAAE,MAAM,oDAAoD,CAAA;AACzF,OAAO,EAAE,4BAA4B,EAAE,MAAM,4DAA4D,CAAA;AACzG,OAAO,EAAE,yBAAyB,EAAE,MAAM,yDAAyD,CAAA;AACnG,OAAO,EAAE,kCAAkC,EAAE,MAAM,gEAAgE,CAAA;AACnH,OAAO,EAAE,yBAAyB,EAAE,MAAM,uDAAuD,CAAA;AACjG,OAAO,EAAE,qBAAqB,EAAE,MAAM,qDAAqD,CAAA;AAC3F,OAAO,EAAE,sBAAsB,EAAE,MAAM,sDAAsD,CAAA;AAC7F,OAAO,EAAE,yBAAyB,EAAE,MAAM,yDAAyD,CAAA;AACnG,OAAO,EAAE,4BAA4B,EAAE,MAAM,4DAA4D,CAAA;AACzG,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAA;AAC3D,OAAO,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAA;AAChE,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAA;AACzE,OAAO,EAAE,mBAAmB,EAAE,MAAM,gDAAgD,CAAA;AACpF,OAAO,EAAE,wBAAwB,EAAE,MAAM,qDAAqD,CAAA;AAC9F,OAAO,EAAE,cAAc,EAAE,MAAM,sCAAsC,CAAA;AACrE,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAA;AACpF,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,uCAAuC,CAAA;AAClG,OAAO,EAAE,wBAAwB,EAAE,MAAM,qCAAqC,CAAA;AAC9E,OAAO,EAAE,MAAM,EAAE,MAAM,uCAAuC,CAAA;AAE9D,gFAAgF;AAChF,qEAAqE;AACrE,+EAA+E;AAC/E,6EAA6E;AAC7E,kCAAkC;AAClC,OAAO,EAAE,iBAAiB,EAAE,MAAM,8CAA8C,CAAA;AAChF,OAAO,EAAE,sBAAsB,EAAE,MAAM,mDAAmD,CAAA;AAC1F,OAAO,EAAE,iBAAiB,EAAE,MAAM,8CAA8C,CAAA;AAChF,8EAA8E;AAC9E,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAA;AACnF,0EAA0E;AAC1E,OAAO,EAAE,kBAAkB,EAAE,MAAM,qDAAqD,CAAA;AAExF,mFAAmF;AACnF,8DAA8D;AAC9D,0EAA0E;AAC1E,OAAO,EACL,qBAAqB,EACrB,oBAAoB,GAErB,MAAM,gCAAgC,CAAA;AAEvC,sFAAsF;AACtF,qFAAqF;AACrF,sFAAsF;AACtF,iDAAiD;AACjD,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,yBAAyB,GAE1B,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAA;AAEnG,MAAM,GAAG,GAAG,SAAS,EAAE,CAAA;AAEvB,+DAA+D;AAC/D,SAAS,OAAO,CAAC,KAAc;IAC7B,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC3B,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAA;IACnF,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAA;AACnC,CAAC;AAED,oEAAoE;AACpE,MAAM,cAAc,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAA;AACpC,gFAAgF;AAChF,MAAM,yBAAyB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;AAEhD,kFAAkF;AAClF,MAAM,sBAAsB,GAAG,yBAAyB,CAAA;AAExD;;;;;GAKG;AACH,MAAM,cAAc,GAAG,WAAW,CAAA;AAElC,eAAe;IACb,KAAK,EAAE,GAAG,CAAC,KAAK;IAEhB,KAAK,CAAC,SAAS,CAAC,UAA+B,EAAE,GAAQ,EAAE,GAAqB;QAC9E,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAA;QAE/B,yEAAyE;QACzE,oEAAoE;QACpE,8EAA8E;QAC9E,IAAI,UAAU,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;YACvC,GAAG,CAAC,SAAS,CACX,cAAc,CAAC;gBACb,oBAAoB,EAAE,IAAI,sBAAsB,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC;gBAChE,mBAAmB,EAAE,IAAI,qBAAqB,CAAC;oBAC7C,EAAE,EAAE,GAAG,CAAC,EAAE;oBACV,WAAW,EAAE,IAAI,iBAAiB,EAAE;iBACrC,CAAC;gBACF,gBAAgB,EAAE,IAAI,4BAA4B,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC;gBAClE,uBAAuB,EAAE,IAAI,yBAAyB,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC;gBACtE,0BAA0B,EAAE,IAAI,4BAA4B,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC;gBAC5E,KAAK;gBACL,MAAM,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS;aAClC,CAAC;iBACC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CACf,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,MAAM,EAAE,EAAE,0BAA0B,CAAC,CAC1E;iBACA,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CACf,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,wBAAwB,CAAC,CACnF,CACJ,CAAA;YACD,OAAM;QACR,CAAC;QAED,yDAAyD;QACzD,6EAA6E;QAC7E,wEAAwE;QACxE,IAAI,GAAG,CAAC,kBAAkB,IAAI,GAAG,CAAC,kBAAkB,EAAE,CAAC;YACrD,MAAM,UAAU,GAAG,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,eAAe,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;YAC9F,MAAM,UAAU,GAAG,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,eAAe,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;YAC9F,MAAM,UAAU,GAAG,GAAG,CAAC,kBAAkB;gBACvC,CAAC,CAAC,IAAI,mBAAmB,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,kBAAkB,EAAE,KAAK,EAAE,GAAG,CAAC,eAAe,EAAE,CAAC;gBAC3F,CAAC,CAAC,IAAI,CAAA;YACR,MAAM,UAAU,GAAG,GAAG,CAAC,kBAAkB;gBACvC,CAAC,CAAC,IAAI,wBAAwB,CAAC,GAAG,CAAC,kBAAkB,CAAC;gBACtD,CAAC,CAAC,IAAI,CAAA;YACR,GAAG,CAAC,SAAS,CACX,cAAc,CAAC;gBACb,kBAAkB,EAAE,IAAI,oBAAoB,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC;gBAC5D,aAAa,EAAE,CAAC,GAAG,EAAE,EAAE;oBACrB,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAA;oBACjE,uEAAuE;oBACvE,OAAO,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,OAAgB,CAAC,CAAA;gBAClF,CAAC;gBACD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;oBACrB,IAAI,GAAG,CAAC,IAAI,KAAK,WAAW;wBAAE,MAAM,UAAU,EAAE,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,EAAE,CAAC,CAAA;;wBAC5E,MAAM,UAAU,EAAE,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,EAAE,CAAC,CAAA;gBAC1D,CAAC;gBACD,yEAAyE;gBACzE,0EAA0E;gBAC1E,8EAA8E;gBAC9E,cAAc,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;oBAC5B,MAAM,SAAS,GAAG,cAAc,CAAC,GAAG,CAAC,CAAA;oBACrC,MAAM,MAAM,GACV,oFAAoF,CAAA;oBACtF,IAAI,GAAG,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;wBAC7B,IAAI,SAAS,CAAC,SAAS,EAAE,CAAC;4BACxB,MAAM,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,EAAE,EAAE;gCAC9D,MAAM;gCACN,IAAI,EAAE,SAAS;6BAChB,CAAC,CAAA;wBACJ,CAAC;oBACH,CAAC;yBAAM,CAAC;wBACN,MAAM,SAAS,CAAC,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,EAAE,EAAE;4BAChE,MAAM;4BACN,IAAI,EAAE,SAAS;yBAChB,CAAC,CAAA;oBACJ,CAAC;gBACH,CAAC;gBACD,KAAK;gBACL,OAAO,EAAE,cAAc;aACxB,CAAC;gBACA,4EAA4E;gBAC5E,mCAAmC;iBAClC,IAAI,CAAC,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,EAAE;gBAChC,IAAI,QAAQ,GAAG,CAAC,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;oBAClC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,kBAAkB,CAAC,CAAA;gBAC/E,CAAC;YACH,CAAC,CAAC;iBACD,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CACf,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,kBAAkB,CAAC,CAC/E,CACJ,CAAA;QACH,CAAC;QAED,oFAAoF;QACpF,kFAAkF;QAClF,oFAAoF;QACpF,kFAAkF;QAClF,CAAC;YACC,MAAM,WAAW,GAAG,IAAI,kCAAkC,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAA;YAC1E,GAAG,CAAC,SAAS,CACX,WAAW;iBACR,aAAa,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;iBAC1B,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE;gBAClB,IAAI,SAAS,GAAG,CAAC;oBACf,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,SAAS,EAAE,EAAE,uBAAuB,CAAC,CAAA;YACnF,CAAC,CAAC;iBACD,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CACf,MAAM,CAAC,KAAK,CACV,EAAE,IAAI,EAAE,oBAAoB,EAAE,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,EACnD,yBAAyB,CAC1B,CACF,CACJ,CAAA;QACH,CAAC;QAED,gFAAgF;QAChF,gFAAgF;QAChF,gFAAgF;QAChF,gFAAgF;QAChF,4EAA4E;QAC5E,+EAA+E;QAC/E,oFAAoF;QACpF,IAAI,GAAG,CAAC,cAAc,EAAE,CAAC;YACvB,MAAM,MAAM,GAAG,IAAI,yBAAyB,CAC1C,GAAG,CAAC,cAAc,EAClB,IAAI,yBAAyB,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,EAC7C,KAAK,CACN,CAAA;YACD,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAA;YAC5D,GAAG,CAAC,SAAS,CACX,MAAM;iBACH,eAAe,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC;iBACvC,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE;gBACnB,IAAI,MAAM,GAAG,CAAC;oBACZ,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,MAAM,EAAE,EAAE,0BAA0B,CAAC,CAAA;YACjF,CAAC,CAAC;iBACD,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CACf,MAAM,CAAC,KAAK,CACV,EAAE,IAAI,EAAE,kBAAkB,EAAE,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,EACjD,uBAAuB,CACxB,CACF,CACJ,CAAA;QACH,CAAC;QAED,iFAAiF;QACjF,2EAA2E;QAC3E,kFAAkF;QAClF,GAAG,CAAC,SAAS,CACX,0BAA0B,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC;aACzD,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE;YAClB,IAAI,SAAS,GAAG,CAAC;gBACf,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,yBAAyB,EAAE,SAAS,EAAE,EAAE,yBAAyB,CAAC,CAAA;QAC1F,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CACf,MAAM,CAAC,KAAK,CACV,EAAE,IAAI,EAAE,yBAAyB,EAAE,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,EACxD,gCAAgC,CACjC,CACF,CACJ,CAAA;QAED,+EAA+E;QAC/E,+EAA+E;QAC/E,6EAA6E;QAC7E,GAAG,CAAC,SAAS,CACX,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;aACxE,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;YACf,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC,EAAE,CAAC;gBACvD,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,GAAG,MAAM,EAAE,EAAE,2BAA2B,CAAC,CAAA;YACtF,CAAC;QACH,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CACf,MAAM,CAAC,KAAK,CACV,EAAE,IAAI,EAAE,qBAAqB,EAAE,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,EACpD,iCAAiC,CAClC,CACF,CACJ,CAAA;QAED,4EAA4E;QAC5E,kCAAkC;QAClC,GAAG,CAAC,SAAS,CACX,mBAAmB,CAAC,GAAG,EAAE,KAAK,EAAE,yBAAyB,CAAC;aACvD,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE;YAClB,IAAI,SAAS,GAAG,CAAC;gBACf,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,SAAS,EAAE,EAAE,wBAAwB,CAAC,CAAA;QAClF,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CACf,MAAM,CAAC,KAAK,CACV,EAAE,IAAI,EAAE,kBAAkB,EAAE,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,EACjD,yBAAyB,CAC1B,CACF,CACJ,CAAA;QAED,2EAA2E;QAC3E,0CAA0C;QAC1C,GAAG,CAAC,SAAS,CACX,wBAAwB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CACnD,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,0BAA0B,CAAC,CACvF,CACF,CAAA;IACH,CAAC;IAED,KAAK,CAAC,KAAK,CACT,KAA8D,EAC9D,GAAQ;QAER,iEAAiE;QACjE,IAAI,KAAK,CAAC,KAAK,KAAK,sBAAsB,EAAE,CAAC;YAC3C,MAAM,qBAAqB,CAAC,KAAwC,EAAE,GAAG,CAAC,CAAA;YAC1E,OAAM;QACR,CAAC;QAED,wEAAwE;QACxE,IAAI,CAAC,GAAG,CAAC,kBAAkB,EAAE,CAAC;YAC5B,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,QAAQ;gBAAE,OAAO,CAAC,GAAG,EAAE,CAAA;YACnD,OAAM;QACR,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,mBAAmB,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,kBAAkB,EAAE,CAAC,CAAA;QAC5E,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,QAA2D,EAAE,CAAC;YACxF,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;gBACvE,OAAO,CAAC,GAAG,EAAE,CAAA;YACf,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,CAAC,KAAK,EAAE,CAAA;YACjB,CAAC;QACH,CAAC;IACH,CAAC;CACF,CAAA"}

package/dist/infrastructure/ai/CloudflareModelProvider.d.ts

@@ -0,0 +1,23 @@
+import { type ProviderRegistry } from '@cat-factory/agents';
+import type { ModelProvider, ModelRef } from '@cat-factory/kernel';
+import type { LanguageModel } from 'ai';
+import type { Env } from '../env';
+/**
+ * Resolves a provider-agnostic {@link ModelRef} into a concrete Vercel AI SDK model.
+ * This is the Worker's binding of the LLM seam: the core asks for
+ * `{ provider: 'openai', model: 'gpt-4o-mini' }` and gets back something `generateText`
+ * can call, while API keys and the Workers AI binding stay here.
+ *
+ * It is just the Worker's composition of the shared AI provisioning facade
+ * ({@link CompositeModelProvider}): the base registry above plus any `extraRegistries`
+ * an installation mixes in — e.g. `bedrockRegistry()` from `@cat-factory/provider-bedrock`.
+ */
+export declare class CloudflareModelProvider implements ModelProvider {
+    private readonly composite;
+    constructor({ env, extraRegistries }: {
+        env: Env;
+        extraRegistries?: ProviderRegistry[];
+    });
+    resolve(ref: ModelRef): LanguageModel;
+}
+//# sourceMappingURL=CloudflareModelProvider.d.ts.map

package/dist/infrastructure/ai/CloudflareModelProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CloudflareModelProvider.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/ai/CloudflareModelProvider.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,gBAAgB,EAItB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAA;AAClE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,IAAI,CAAA;AAEvC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,QAAQ,CAAA;AAgDjC;;;;;;;;;GASG;AACH,qBAAa,uBAAwB,YAAW,aAAa;IAC3D,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAwB;IAElD,YAAY,EAAE,GAAG,EAAE,eAAoB,EAAE,EAAE;QAAE,GAAG,EAAE,GAAG,CAAC;QAAC,eAAe,CAAC,EAAE,gBAAgB,EAAE,CAAA;KAAE,EAE5F;IAED,OAAO,CAAC,GAAG,EAAE,QAAQ,GAAG,aAAa,CAEpC;CACF"}

package/dist/infrastructure/ai/CloudflareModelProvider.js

@@ -0,0 +1,62 @@
+import { CompositeModelProvider, anthropicResolver, openAiCompatibleResolver, openAiResolver, } from '@cat-factory/agents';
+import { createWorkersAI } from 'workers-ai-provider';
+import { baseUrlFor } from './providerEndpoints';
+// DashScope (Alibaba), DeepSeek and Moonshot (Kimi) all expose OpenAI-compatible
+// chat APIs, so they resolve through the openai-compatible provider with just a
+// base URL and a key (see ./providerEndpoints for the shared base URLs).
+// DashScope's international endpoint is used (the mainland host differs).
+/**
+ * Build the Worker's base provider registry. `workers-ai` is the Cloudflare flavour
+ * (resolved via the in-process `AI` binding); `openai`/`anthropic` and the
+ * OpenAI-compatible vendors (`qwen`/`deepseek`/`moonshot`) are keyed from `env`. A
+ * provider is registered ONLY when its credential/binding is present, so an unconfigured
+ * provider resolves to a clear "Unsupported model provider" error (from
+ * {@link CompositeModelProvider}) rather than failing deep in the vendor SDK — matching the
+ * Node facade exactly (the conditional `baseProviderRegistry`), so the two runtimes don't
+ * diverge on a missing key.
+ */
+function workerBaseRegistry(env) {
+    const compatible = (provider, apiKey) => apiKey
+        ? openAiCompatibleResolver({ name: provider, apiKey, baseURL: baseUrlFor(provider, env) })
+        : undefined;
+    return {
+        openai: env.OPENAI_API_KEY ? openAiResolver({ apiKey: env.OPENAI_API_KEY }) : undefined,
+        anthropic: env.ANTHROPIC_API_KEY
+            ? anthropicResolver({ apiKey: env.ANTHROPIC_API_KEY })
+            : undefined,
+        qwen: compatible('qwen', env.QWEN_API_KEY),
+        deepseek: compatible('deepseek', env.DEEPSEEK_API_KEY),
+        moonshot: compatible('moonshot', env.MOONSHOT_API_KEY),
+        'workers-ai': env.AI
+            ? (ref) => {
+                const binding = env.AI;
+                if (!binding)
+                    throw new Error('Workers AI binding (AI) is not configured');
+                // workers-ai-provider@3 implements the same provider spec as `ai` v6
+                // (`@ai-sdk/provider` v3), so the model is a real LanguageModel — no cast.
+                const workersai = createWorkersAI({ binding });
+                return workersai(ref.model);
+            }
+            : undefined,
+    };
+}
+/**
+ * Resolves a provider-agnostic {@link ModelRef} into a concrete Vercel AI SDK model.
+ * This is the Worker's binding of the LLM seam: the core asks for
+ * `{ provider: 'openai', model: 'gpt-4o-mini' }` and gets back something `generateText`
+ * can call, while API keys and the Workers AI binding stay here.
+ *
+ * It is just the Worker's composition of the shared AI provisioning facade
+ * ({@link CompositeModelProvider}): the base registry above plus any `extraRegistries`
+ * an installation mixes in — e.g. `bedrockRegistry()` from `@cat-factory/provider-bedrock`.
+ */
+export class CloudflareModelProvider {
+    composite;
+    constructor({ env, extraRegistries = [] }) {
+        this.composite = new CompositeModelProvider(workerBaseRegistry(env), ...extraRegistries);
+    }
+    resolve(ref) {
+        return this.composite.resolve(ref);
+    }
+}
+//# sourceMappingURL=CloudflareModelProvider.js.map

package/dist/infrastructure/ai/CloudflareModelProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CloudflareModelProvider.js","sourceRoot":"","sources":["../../../src/infrastructure/ai/CloudflareModelProvider.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,sBAAsB,EAGtB,iBAAiB,EACjB,wBAAwB,EACxB,cAAc,GACf,MAAM,qBAAqB,CAAA;AAG5B,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AAErD,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAEhD,iFAAiF;AACjF,gFAAgF;AAChF,yEAAyE;AACzE,0EAA0E;AAE1E;;;;;;;;;GASG;AACH,SAAS,kBAAkB,CAAC,GAAQ;IAClC,MAAM,UAAU,GAAG,CACjB,QAA0C,EAC1C,MAA0B,EACC,EAAE,CAC7B,MAAM;QACJ,CAAC,CAAC,wBAAwB,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAE,EAAE,CAAC;QAC3F,CAAC,CAAC,SAAS,CAAA;IAEf,OAAO;QACL,MAAM,EAAE,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;QACvF,SAAS,EAAE,GAAG,CAAC,iBAAiB;YAC9B,CAAC,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,iBAAiB,EAAE,CAAC;YACtD,CAAC,CAAC,SAAS;QACb,IAAI,EAAE,UAAU,CAAC,MAAM,EAAE,GAAG,CAAC,YAAY,CAAC;QAC1C,QAAQ,EAAE,UAAU,CAAC,UAAU,EAAE,GAAG,CAAC,gBAAgB,CAAC;QACtD,QAAQ,EAAE,UAAU,CAAC,UAAU,EAAE,GAAG,CAAC,gBAAgB,CAAC;QACtD,YAAY,EAAE,GAAG,CAAC,EAAE;YAClB,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE;gBACN,MAAM,OAAO,GAAG,GAAG,CAAC,EAAE,CAAA;gBACtB,IAAI,CAAC,OAAO;oBAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAA;gBAC1E,qEAAqE;gBACrE,2EAA2E;gBAC3E,MAAM,SAAS,GAAG,eAAe,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;gBAC9C,OAAO,SAAS,CAAC,GAAG,CAAC,KAAwC,CAAC,CAAA;YAChE,CAAC;YACH,CAAC,CAAC,SAAS;KACd,CAAA;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,OAAO,uBAAuB;IACjB,SAAS,CAAwB;IAElD,YAAY,EAAE,GAAG,EAAE,eAAe,GAAG,EAAE,EAAsD;QAC3F,IAAI,CAAC,SAAS,GAAG,IAAI,sBAAsB,CAAC,kBAAkB,CAAC,GAAG,CAAC,EAAE,GAAG,eAAe,CAAC,CAAA;IAC1F,CAAC;IAED,OAAO,CAAC,GAAa;QACnB,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IACpC,CAAC;CACF"}

package/dist/infrastructure/ai/CompositeAgentExecutor.d.ts

@@ -0,0 +1,2 @@
+export { CompositeAgentExecutor } from '@cat-factory/server';
+//# sourceMappingURL=CompositeAgentExecutor.d.ts.map

package/dist/infrastructure/ai/CompositeAgentExecutor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CompositeAgentExecutor.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/ai/CompositeAgentExecutor.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAA"}

package/dist/infrastructure/ai/CompositeAgentExecutor.js

@@ -0,0 +1,5 @@
+// Moved to the runtime-neutral @cat-factory/server package (so the Node service
+// wires the same inline+container composite); re-exported here for existing Worker
+// imports and tests.
+export { CompositeAgentExecutor } from '@cat-factory/server';
+//# sourceMappingURL=CompositeAgentExecutor.js.map

package/dist/infrastructure/ai/CompositeAgentExecutor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CompositeAgentExecutor.js","sourceRoot":"","sources":["../../../src/infrastructure/ai/CompositeAgentExecutor.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,mFAAmF;AACnF,qBAAqB;AACrB,OAAO,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAA"}

package/dist/infrastructure/ai/ContainerAgentExecutor.d.ts

@@ -0,0 +1,2 @@
+export { ContainerAgentExecutor, type ContainerAgentExecutorDependencies, type RepoTarget, type ResolveRepoTarget, type MintInstallationToken, type ResolveRunnerTransport, } from '@cat-factory/server';
+//# sourceMappingURL=ContainerAgentExecutor.d.ts.map

package/dist/infrastructure/ai/ContainerAgentExecutor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ContainerAgentExecutor.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/ai/ContainerAgentExecutor.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,sBAAsB,EACtB,KAAK,kCAAkC,EACvC,KAAK,UAAU,EACf,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,GAC5B,MAAM,qBAAqB,CAAA"}

package/dist/infrastructure/ai/ContainerAgentExecutor.js

@@ -0,0 +1,5 @@
+// Moved to the runtime-neutral @cat-factory/server package (so the Node service
+// runs the same container agent executor, dispatching to its self-hosted runner
+// pool); re-exported here for existing Worker imports.
+export { ContainerAgentExecutor, } from '@cat-factory/server';
+//# sourceMappingURL=ContainerAgentExecutor.js.map

package/dist/infrastructure/ai/ContainerAgentExecutor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ContainerAgentExecutor.js","sourceRoot":"","sources":["../../../src/infrastructure/ai/ContainerAgentExecutor.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,gFAAgF;AAChF,uDAAuD;AACvD,OAAO,EACL,sBAAsB,GAMvB,MAAM,qBAAqB,CAAA"}

package/dist/infrastructure/ai/ContainerRepoBootstrapper.d.ts

@@ -0,0 +1,2 @@
+export { ContainerRepoBootstrapper, type ContainerRepoBootstrapperDependencies, } from '@cat-factory/server';
+//# sourceMappingURL=ContainerRepoBootstrapper.d.ts.map

package/dist/infrastructure/ai/ContainerRepoBootstrapper.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ContainerRepoBootstrapper.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/ai/ContainerRepoBootstrapper.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,yBAAyB,EACzB,KAAK,qCAAqC,GAC3C,MAAM,qBAAqB,CAAA"}

package/dist/infrastructure/ai/ContainerRepoBootstrapper.js

@@ -0,0 +1,5 @@
+// Moved to the runtime-neutral @cat-factory/server package (so the Node service runs
+// the same repo bootstrapper, dispatching through the shared runner-transport seam);
+// re-exported here for existing Worker imports.
+export { ContainerRepoBootstrapper, } from '@cat-factory/server';
+//# sourceMappingURL=ContainerRepoBootstrapper.js.map

package/dist/infrastructure/ai/ContainerRepoBootstrapper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ContainerRepoBootstrapper.js","sourceRoot":"","sources":["../../../src/infrastructure/ai/ContainerRepoBootstrapper.ts"],"names":[],"mappings":"AAAA,qFAAqF;AACrF,qFAAqF;AACrF,gDAAgD;AAChD,OAAO,EACL,yBAAyB,GAE1B,MAAM,qBAAqB,CAAA"}

package/dist/infrastructure/ai/ContainerRepoScanner.d.ts

@@ -0,0 +1,39 @@
+import { type GitHubInstallationRepository, type ModelRef, type RepoScanner, type ScanRepoRequest, type ScannedBlueprint } from '@cat-factory/kernel';
+import type { DurableObjectNamespace } from '@cloudflare/workers-types';
+import type { ExecutionContainer } from '../containers/ExecutionContainer';
+import type { ContainerSessionService } from '../containers/ContainerSessionService';
+export interface ContainerRepoScannerDependencies {
+    /** The Durable Object namespace backing the per-run container instances. */
+    container: DurableObjectNamespace<ExecutionContainer>;
+    /** Resolve which GitHub installation a workspace's repos live under. */
+    installationRepository: GitHubInstallationRepository;
+    /** Mints a short-lived GitHub installation token for the read-only clone. */
+    mintInstallationToken: (installationId: number) => Promise<string>;
+    /** Mints the signed, model-locked LLM-proxy session token the container uses. */
+    sessionService: ContainerSessionService;
+    /** Model the scanner agent runs with (must be proxyable). */
+    model: ModelRef;
+    /** Public base URL of the Worker's OpenAI-compatible LLM proxy, including `/v1`. */
+    proxyBaseUrl: string;
+    /** GitHub REST base for resolving the repo (Enterprise / api.github.com). */
+    githubApiBase?: string;
+    /** Web base for building the repo clone URL (defaults to github.com). */
+    webBaseUrl?: string;
+}
+/**
+ * A {@link RepoScanner} that performs the side-effecting half of a "scan
+ * repository" run: it spins up a per-run Cloudflare Container that clones the
+ * repository read-only, has the scanner agent decompose it into the canonical
+ * service → modules blueprint (with codebase references), and returns
+ * that structure. The agent's JSON is coerced into a well-formed tree here.
+ *
+ * Secrets never reach the container image: the per-run GitHub installation token
+ * and the model-locked LLM-proxy session token are minted here and handed over in
+ * the dispatch body, exactly as the implementation executor and bootstrapper do.
+ */
+export declare class ContainerRepoScanner implements RepoScanner {
+    private readonly deps;
+    constructor(deps: ContainerRepoScannerDependencies);
+    scan(request: ScanRepoRequest): Promise<ScannedBlueprint>;
+}
+//# sourceMappingURL=ContainerRepoScanner.d.ts.map

package/dist/infrastructure/ai/ContainerRepoScanner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ContainerRepoScanner.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/ai/ContainerRepoScanner.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,4BAA4B,EACjC,KAAK,QAAQ,EACb,KAAK,WAAW,EAChB,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACtB,MAAM,qBAAqB,CAAA;AAE5B,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAA;AACvE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAA;AAC1E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,uCAAuC,CAAA;AAOpF,MAAM,WAAW,gCAAgC;IAC/C,4EAA4E;IAC5E,SAAS,EAAE,sBAAsB,CAAC,kBAAkB,CAAC,CAAA;IACrD,wEAAwE;IACxE,sBAAsB,EAAE,4BAA4B,CAAA;IACpD,6EAA6E;IAC7E,qBAAqB,EAAE,CAAC,cAAc,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAA;IAClE,iFAAiF;IACjF,cAAc,EAAE,uBAAuB,CAAA;IACvC,6DAA6D;IAC7D,KAAK,EAAE,QAAQ,CAAA;IACf,oFAAoF;IACpF,YAAY,EAAE,MAAM,CAAA;IACpB,6EAA6E;IAC7E,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,yEAAyE;IACzE,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AA6BD;;;;;;;;;;GAUG;AACH,qBAAa,oBAAqB,YAAW,WAAW;IAC1C,OAAO,CAAC,QAAQ,CAAC,IAAI;IAAjC,YAA6B,IAAI,EAAE,gCAAgC,EAAI;IAEjE,IAAI,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,gBAAgB,CAAC,CA8D9D;CACF"}