@cat-factory/worker 0.6.0 → 0.7.3

package/package.json

@@ -1,6 +1,11 @@
 {
   "name": "@cat-factory/worker",
-  "version": "0.6.0",
+  "version": "0.7.3",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/kibertoad/cat-factory.git",
+    "directory": "backend/runtimes/cloudflare"
+  },
   "description": "Reusable Cloudflare Worker library (Hono + D1) exposing the Agent Architecture Board core: the `createApp()` Hono factory, the default fetch/scheduled/queue handler, and the Durable Object + Workflow classes. Deployments (see deploy/backend) supply the wrangler.toml + config and re-export these.",
   "files": [
     "dist",
@@ -34,17 +39,17 @@
     "pino": "^9.14.0",
     "valibot": "^1.4.1",
     "workers-ai-provider": "^3.2.0",
-    "@cat-factory/agents": "0.6.0",
-    "@cat-factory/consensus": "0.6.0",
-    "@cat-factory/observability-langfuse": "0.6.0",
-    "@cat-factory/server": "0.6.0",
-    "@cat-factory/contracts": "0.6.0",
-    "@cat-factory/integrations": "0.6.0",
-    "@cat-factory/orchestration": "0.6.0",
-    "@cat-factory/kernel": "0.6.0",
-    "@cat-factory/spend": "0.6.0",
-    "@cat-factory/prompt-fragments": "0.6.0",
-    "@cat-factory/provider-cloudflare": "0.6.0"
+    "@cat-factory/agents": "0.7.3",
+    "@cat-factory/consensus": "0.7.3",
+    "@cat-factory/contracts": "0.7.2",
+    "@cat-factory/integrations": "0.7.3",
+    "@cat-factory/kernel": "0.7.3",
+    "@cat-factory/observability-langfuse": "0.7.3",
+    "@cat-factory/orchestration": "0.7.3",
+    "@cat-factory/prompt-fragments": "0.7.2",
+    "@cat-factory/provider-cloudflare": "0.7.3",
+    "@cat-factory/server": "0.7.3",
+    "@cat-factory/spend": "0.7.3"
   },
   "devDependencies": {
     "@cloudflare/vitest-pool-workers": "^0.16.17",
@@ -52,7 +57,7 @@
     "typescript": "7.0.1-rc",
     "vitest": "^4.1.9",
     "wrangler": "^4.102.0",
-    "@cat-factory/conformance": "0.6.0"
+    "@cat-factory/conformance": "0.7.3"
   },
   "scripts": {
     "build": "tsc -b tsconfig.build.json",

package/dist/infrastructure/ai/CloudflareModelProvider.d.ts

@@ -1,23 +0,0 @@
-import { type ProviderRegistry } from '@cat-factory/agents';
-import type { ModelProvider, ModelRef } from '@cat-factory/kernel';
-import type { LanguageModel } from 'ai';
-import type { Env } from '../env';
-/**
- * Resolves a provider-agnostic {@link ModelRef} into a concrete Vercel AI SDK model.
- * This is the Worker's binding of the LLM seam: the core asks for
- * `{ provider: 'openai', model: 'gpt-4o-mini' }` and gets back something `generateText`
- * can call, while API keys and the Workers AI binding stay here.
- *
- * It is just the Worker's composition of the shared AI provisioning facade
- * ({@link CompositeModelProvider}): the base registry above plus any `extraRegistries`
- * an installation mixes in — e.g. `bedrockRegistry()` from `@cat-factory/provider-bedrock`.
- */
-export declare class CloudflareModelProvider implements ModelProvider {
-    private readonly composite;
-    constructor({ env, extraRegistries }: {
-        env: Env;
-        extraRegistries?: ProviderRegistry[];
-    });
-    resolve(ref: ModelRef): LanguageModel;
-}
-//# sourceMappingURL=CloudflareModelProvider.d.ts.map

package/dist/infrastructure/ai/CloudflareModelProvider.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"CloudflareModelProvider.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/ai/CloudflareModelProvider.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,gBAAgB,EAItB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAA;AAClE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,IAAI,CAAA;AAEvC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,QAAQ,CAAA;AAgDjC;;;;;;;;;GASG;AACH,qBAAa,uBAAwB,YAAW,aAAa;IAC3D,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAwB;IAElD,YAAY,EAAE,GAAG,EAAE,eAAoB,EAAE,EAAE;QAAE,GAAG,EAAE,GAAG,CAAC;QAAC,eAAe,CAAC,EAAE,gBAAgB,EAAE,CAAA;KAAE,EAE5F;IAED,OAAO,CAAC,GAAG,EAAE,QAAQ,GAAG,aAAa,CAEpC;CACF"}

package/dist/infrastructure/ai/CloudflareModelProvider.js

@@ -1,62 +0,0 @@
-import { CompositeModelProvider, anthropicResolver, openAiCompatibleResolver, openAiResolver, } from '@cat-factory/agents';
-import { createWorkersAI } from 'workers-ai-provider';
-import { baseUrlFor } from './providerEndpoints';
-// DashScope (Alibaba), DeepSeek and Moonshot (Kimi) all expose OpenAI-compatible
-// chat APIs, so they resolve through the openai-compatible provider with just a
-// base URL and a key (see ./providerEndpoints for the shared base URLs).
-// DashScope's international endpoint is used (the mainland host differs).
-/**
- * Build the Worker's base provider registry. `workers-ai` is the Cloudflare flavour
- * (resolved via the in-process `AI` binding); `openai`/`anthropic` and the
- * OpenAI-compatible vendors (`qwen`/`deepseek`/`moonshot`) are keyed from `env`. A
- * provider is registered ONLY when its credential/binding is present, so an unconfigured
- * provider resolves to a clear "Unsupported model provider" error (from
- * {@link CompositeModelProvider}) rather than failing deep in the vendor SDK — matching the
- * Node facade exactly (the conditional `baseProviderRegistry`), so the two runtimes don't
- * diverge on a missing key.
- */
-function workerBaseRegistry(env) {
-    const compatible = (provider, apiKey) => apiKey
-        ? openAiCompatibleResolver({ name: provider, apiKey, baseURL: baseUrlFor(provider, env) })
-        : undefined;
-    return {
-        openai: env.OPENAI_API_KEY ? openAiResolver({ apiKey: env.OPENAI_API_KEY }) : undefined,
-        anthropic: env.ANTHROPIC_API_KEY
-            ? anthropicResolver({ apiKey: env.ANTHROPIC_API_KEY })
-            : undefined,
-        qwen: compatible('qwen', env.QWEN_API_KEY),
-        deepseek: compatible('deepseek', env.DEEPSEEK_API_KEY),
-        moonshot: compatible('moonshot', env.MOONSHOT_API_KEY),
-        'workers-ai': env.AI
-            ? (ref) => {
-                const binding = env.AI;
-                if (!binding)
-                    throw new Error('Workers AI binding (AI) is not configured');
-                // workers-ai-provider@3 implements the same provider spec as `ai` v6
-                // (`@ai-sdk/provider` v3), so the model is a real LanguageModel — no cast.
-                const workersai = createWorkersAI({ binding });
-                return workersai(ref.model);
-            }
-            : undefined,
-    };
-}
-/**
- * Resolves a provider-agnostic {@link ModelRef} into a concrete Vercel AI SDK model.
- * This is the Worker's binding of the LLM seam: the core asks for
- * `{ provider: 'openai', model: 'gpt-4o-mini' }` and gets back something `generateText`
- * can call, while API keys and the Workers AI binding stay here.
- *
- * It is just the Worker's composition of the shared AI provisioning facade
- * ({@link CompositeModelProvider}): the base registry above plus any `extraRegistries`
- * an installation mixes in — e.g. `bedrockRegistry()` from `@cat-factory/provider-bedrock`.
- */
-export class CloudflareModelProvider {
-    composite;
-    constructor({ env, extraRegistries = [] }) {
-        this.composite = new CompositeModelProvider(workerBaseRegistry(env), ...extraRegistries);
-    }
-    resolve(ref) {
-        return this.composite.resolve(ref);
-    }
-}
-//# sourceMappingURL=CloudflareModelProvider.js.map

package/dist/infrastructure/ai/CloudflareModelProvider.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"CloudflareModelProvider.js","sourceRoot":"","sources":["../../../src/infrastructure/ai/CloudflareModelProvider.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,sBAAsB,EAGtB,iBAAiB,EACjB,wBAAwB,EACxB,cAAc,GACf,MAAM,qBAAqB,CAAA;AAG5B,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AAErD,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAEhD,iFAAiF;AACjF,gFAAgF;AAChF,yEAAyE;AACzE,0EAA0E;AAE1E;;;;;;;;;GASG;AACH,SAAS,kBAAkB,CAAC,GAAQ;IAClC,MAAM,UAAU,GAAG,CACjB,QAA0C,EAC1C,MAA0B,EACC,EAAE,CAC7B,MAAM;QACJ,CAAC,CAAC,wBAAwB,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAE,EAAE,CAAC;QAC3F,CAAC,CAAC,SAAS,CAAA;IAEf,OAAO;QACL,MAAM,EAAE,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;QACvF,SAAS,EAAE,GAAG,CAAC,iBAAiB;YAC9B,CAAC,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,iBAAiB,EAAE,CAAC;YACtD,CAAC,CAAC,SAAS;QACb,IAAI,EAAE,UAAU,CAAC,MAAM,EAAE,GAAG,CAAC,YAAY,CAAC;QAC1C,QAAQ,EAAE,UAAU,CAAC,UAAU,EAAE,GAAG,CAAC,gBAAgB,CAAC;QACtD,QAAQ,EAAE,UAAU,CAAC,UAAU,EAAE,GAAG,CAAC,gBAAgB,CAAC;QACtD,YAAY,EAAE,GAAG,CAAC,EAAE;YAClB,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE;gBACN,MAAM,OAAO,GAAG,GAAG,CAAC,EAAE,CAAA;gBACtB,IAAI,CAAC,OAAO;oBAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAA;gBAC1E,qEAAqE;gBACrE,2EAA2E;gBAC3E,MAAM,SAAS,GAAG,eAAe,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;gBAC9C,OAAO,SAAS,CAAC,GAAG,CAAC,KAAwC,CAAC,CAAA;YAChE,CAAC;YACH,CAAC,CAAC,SAAS;KACd,CAAA;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,OAAO,uBAAuB;IACjB,SAAS,CAAwB;IAElD,YAAY,EAAE,GAAG,EAAE,eAAe,GAAG,EAAE,EAAsD;QAC3F,IAAI,CAAC,SAAS,GAAG,IAAI,sBAAsB,CAAC,kBAAkB,CAAC,GAAG,CAAC,EAAE,GAAG,eAAe,CAAC,CAAA;IAC1F,CAAC;IAED,OAAO,CAAC,GAAa;QACnB,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IACpC,CAAC;CACF"}

package/dist/infrastructure/ai/ContainerRepoScanner.d.ts

@@ -1,39 +0,0 @@
-import { type GitHubInstallationRepository, type ModelRef, type RepoScanner, type ScanRepoRequest, type ScannedBlueprint } from '@cat-factory/kernel';
-import type { DurableObjectNamespace } from '@cloudflare/workers-types';
-import type { ExecutionContainer } from '../containers/ExecutionContainer';
-import type { ContainerSessionService } from '../containers/ContainerSessionService';
-export interface ContainerRepoScannerDependencies {
-    /** The Durable Object namespace backing the per-run container instances. */
-    container: DurableObjectNamespace<ExecutionContainer>;
-    /** Resolve which GitHub installation a workspace's repos live under. */
-    installationRepository: GitHubInstallationRepository;
-    /** Mints a short-lived GitHub installation token for the read-only clone. */
-    mintInstallationToken: (installationId: number) => Promise<string>;
-    /** Mints the signed, model-locked LLM-proxy session token the container uses. */
-    sessionService: ContainerSessionService;
-    /** Model the scanner agent runs with (must be proxyable). */
-    model: ModelRef;
-    /** Public base URL of the Worker's OpenAI-compatible LLM proxy, including `/v1`. */
-    proxyBaseUrl: string;
-    /** GitHub REST base for resolving the repo (Enterprise / api.github.com). */
-    githubApiBase?: string;
-    /** Web base for building the repo clone URL (defaults to github.com). */
-    webBaseUrl?: string;
-}
-/**
- * A {@link RepoScanner} that performs the side-effecting half of a "scan
- * repository" run: it spins up a per-run Cloudflare Container that clones the
- * repository read-only, has the scanner agent decompose it into the canonical
- * service → modules blueprint (with codebase references), and returns
- * that structure. The agent's JSON is coerced into a well-formed tree here.
- *
- * Secrets never reach the container image: the per-run GitHub installation token
- * and the model-locked LLM-proxy session token are minted here and handed over in
- * the dispatch body, exactly as the implementation executor and bootstrapper do.
- */
-export declare class ContainerRepoScanner implements RepoScanner {
-    private readonly deps;
-    constructor(deps: ContainerRepoScannerDependencies);
-    scan(request: ScanRepoRequest): Promise<ScannedBlueprint>;
-}
-//# sourceMappingURL=ContainerRepoScanner.d.ts.map

package/dist/infrastructure/ai/ContainerRepoScanner.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"ContainerRepoScanner.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/ai/ContainerRepoScanner.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,4BAA4B,EACjC,KAAK,QAAQ,EACb,KAAK,WAAW,EAChB,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACtB,MAAM,qBAAqB,CAAA;AAE5B,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAA;AACvE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAA;AAC1E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,uCAAuC,CAAA;AAOpF,MAAM,WAAW,gCAAgC;IAC/C,4EAA4E;IAC5E,SAAS,EAAE,sBAAsB,CAAC,kBAAkB,CAAC,CAAA;IACrD,wEAAwE;IACxE,sBAAsB,EAAE,4BAA4B,CAAA;IACpD,6EAA6E;IAC7E,qBAAqB,EAAE,CAAC,cAAc,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAA;IAClE,iFAAiF;IACjF,cAAc,EAAE,uBAAuB,CAAA;IACvC,6DAA6D;IAC7D,KAAK,EAAE,QAAQ,CAAA;IACf,oFAAoF;IACpF,YAAY,EAAE,MAAM,CAAA;IACpB,6EAA6E;IAC7E,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,yEAAyE;IACzE,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AA6BD;;;;;;;;;;GAUG;AACH,qBAAa,oBAAqB,YAAW,WAAW;IAC1C,OAAO,CAAC,QAAQ,CAAC,IAAI;IAAjC,YAA6B,IAAI,EAAE,gCAAgC,EAAI;IAEjE,IAAI,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,gBAAgB,CAAC,CA8D9D;CACF"}

package/dist/infrastructure/ai/ContainerRepoScanner.js

@@ -1,115 +0,0 @@
-import {} from '@cat-factory/kernel';
-import { boardScanLogic } from '@cat-factory/orchestration';
-// Unlike `/run`, scan/bootstrap stay synchronous request/response. This caps how
-// long the Worker will wait so a wedged container can't block the caller forever;
-// the harness's shared git timeouts bound the underlying git operations too.
-const CONTAINER_SYNC_TIMEOUT_MS = 30 * 60_000;
-/** The role prompt the scanner agent runs under inside the container. */
-const SCAN_SYSTEM_PROMPT = 'You are a Domain-Driven Design architect mapping an existing repository. You have ' +
-    'a fresh, read-only clone. Decompose it into ONE top-level service and the modules ' +
-    'inside it, where each module is a DOMAIN — a cohesive area of the BUSINESS, in the ' +
-    'language of the problem space (a DDD bounded context / aggregate / subdomain). ' +
-    'Name modules after business concepts, not technical layers. ' +
-    'A module MUST represent a business capability or domain model (e.g. Billing, ' +
-    'Catalog, Ordering, Identity), NOT a technical layer or shape: "api", "routes", ' +
-    '"controllers", "utils", "helpers", "lib", "common", "config", "types", "models", ' +
-    '"db" and the like are NOT domains and MUST NOT be modules. ' +
-    'Group the genuinely non-business, technical/cross-cutting plumbing (persistence ' +
-    'wiring, HTTP/transport, logging, configuration, auth middleware, build/deploy, ' +
-    'shared utilities) into a SINGLE module named "infrastructure" rather than ' +
-    'scattering it into many technical modules. ' +
-    'Prefer organising code by domain (the ubiquitous language) over organising by ' +
-    'file type. Anchor every node to the codebase with explicit repo-relative ' +
-    'file/directory references. Keep names short and descriptive. ' +
-    'Respond with ONLY a JSON object of shape {"type","name","summary","references":[],' +
-    '"modules":[{"name","summary","references":[]}]} — no prose, no code fences.';
-/**
- * A {@link RepoScanner} that performs the side-effecting half of a "scan
- * repository" run: it spins up a per-run Cloudflare Container that clones the
- * repository read-only, has the scanner agent decompose it into the canonical
- * service → modules blueprint (with codebase references), and returns
- * that structure. The agent's JSON is coerced into a well-formed tree here.
- *
- * Secrets never reach the container image: the per-run GitHub installation token
- * and the model-locked LLM-proxy session token are minted here and handed over in
- * the dispatch body, exactly as the implementation executor and bootstrapper do.
- */
-export class ContainerRepoScanner {
-    deps;
-    constructor(deps) {
-        this.deps = deps;
-    }
-    async scan(request) {
-        const installation = await this.deps.installationRepository.getByWorkspace(request.workspaceId);
-        if (!installation || installation.deletedAt) {
-            throw new Error(`Workspace '${request.workspaceId}' is not connected to GitHub`);
-        }
-        if (!isProxyableProvider(this.deps.model.provider)) {
-            throw new Error(`Repository scanning needs a model the LLM proxy can serve ` +
-                `(Workers AI, or a direct OpenAI-compatible provider); ` +
-                `'${this.deps.model.provider}' is not supported.`);
-        }
-        const ghToken = await this.deps.mintInstallationToken(installation.installationId);
-        const sessionToken = await this.deps.sessionService.mint({
-            workspaceId: request.workspaceId,
-            executionId: `scan-${request.repo.owner}-${request.repo.name}`,
-            agentKind: 'architect',
-            provider: this.deps.model.provider,
-            model: this.deps.model.model,
-        });
-        const webBase = (this.deps.webBaseUrl ?? 'https://github.com').replace(/\/+$/, '');
-        const cloneUrl = `${webBase}/${request.repo.owner}/${request.repo.name}.git`;
-        const body = {
-            systemPrompt: SCAN_SYSTEM_PROMPT,
-            instructions: request.instructions || 'Map the repository into the blueprint structure.',
-            model: this.deps.model.model,
-            proxyBaseUrl: this.deps.proxyBaseUrl,
-            sessionToken,
-            ghToken,
-            repo: {
-                owner: request.repo.owner,
-                name: request.repo.name,
-                cloneUrl,
-            },
-            ...(this.deps.githubApiBase ? { githubApiBase: this.deps.githubApiBase } : {}),
-        };
-        // One container instance per repo scan (keyed by owner/name), mirroring the
-        // per-run implementation and bootstrap containers.
-        const key = `scan-${request.repo.owner}/${request.repo.name}`;
-        const stub = this.deps.container.get(this.deps.container.idFromName(key));
-        const res = await stub.fetch('http://container/scan', {
-            method: 'POST',
-            headers: { 'content-type': 'application/json' },
-            body: JSON.stringify(body),
-            signal: AbortSignal.timeout(CONTAINER_SYNC_TIMEOUT_MS),
-        });
-        if (!res.ok) {
-            throw new Error(`Scan container failed (HTTP ${res.status}): ${await safeText(res)}`);
-        }
-        const result = (await res.json());
-        if (result.error)
-            throw new Error(`Scan failed: ${result.error}`);
-        const service = boardScanLogic.coerceService(result.service, request.repo.name);
-        if (!service) {
-            throw new Error('Scan produced no usable blueprint');
-        }
-        return { source: 'llm', service };
-    }
-}
-/** Providers the LLM proxy can serve (mirrors ContainerAgentExecutor). */
-function isProxyableProvider(provider) {
-    return (provider === 'workers-ai' ||
-        provider === 'qwen' ||
-        provider === 'deepseek' ||
-        provider === 'moonshot' ||
-        provider === 'openai');
-}
-async function safeText(res) {
-    try {
-        return (await res.text()).slice(0, 500);
-    }
-    catch {
-        return '(no body)';
-    }
-}
-//# sourceMappingURL=ContainerRepoScanner.js.map

package/dist/infrastructure/ai/ContainerRepoScanner.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"ContainerRepoScanner.js","sourceRoot":"","sources":["../../../src/infrastructure/ai/ContainerRepoScanner.ts"],"names":[],"mappings":"AAAA,OAAO,EAMN,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAA;AAK3D,iFAAiF;AACjF,kFAAkF;AAClF,6EAA6E;AAC7E,MAAM,yBAAyB,GAAG,EAAE,GAAG,MAAM,CAAA;AAqB7C,yEAAyE;AACzE,MAAM,kBAAkB,GACtB,oFAAoF;IACpF,oFAAoF;IACpF,qFAAqF;IACrF,iFAAiF;IACjF,8DAA8D;IAC9D,+EAA+E;IAC/E,iFAAiF;IACjF,mFAAmF;IACnF,6DAA6D;IAC7D,kFAAkF;IAClF,iFAAiF;IACjF,4EAA4E;IAC5E,6CAA6C;IAC7C,gFAAgF;IAChF,2EAA2E;IAC3E,+DAA+D;IAC/D,oFAAoF;IACpF,6EAA6E,CAAA;AAQ/E;;;;;;;;;;GAUG;AACH,MAAM,OAAO,oBAAoB;IACF,IAAI;IAAjC,YAA6B,IAAsC;oBAAtC,IAAI;IAAqC,CAAC;IAEvE,KAAK,CAAC,IAAI,CAAC,OAAwB;QACjC,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC,cAAc,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;QAC/F,IAAI,CAAC,YAAY,IAAI,YAAY,CAAC,SAAS,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,cAAc,OAAO,CAAC,WAAW,8BAA8B,CAAC,CAAA;QAClF,CAAC;QAED,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CACb,4DAA4D;gBAC1D,wDAAwD;gBACxD,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,qBAAqB,CACpD,CAAA;QACH,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,YAAY,CAAC,cAAc,CAAC,CAAA;QAClF,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC;YACvD,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,WAAW,EAAE,QAAQ,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE;YAC9D,SAAS,EAAE,WAAW;YACtB,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ;YAClC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK;SAC7B,CAAC,CAAA;QAEF,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,oBAAoB,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;QAClF,MAAM,QAAQ,GAAG,GAAG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,MAAM,CAAA;QAE5E,MAAM,IAAI,GAAG;YACX,YAAY,EAAE,kBAAkB;YAChC,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,kDAAkD;YACxF,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK;YAC5B,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY;YACpC,YAAY;YACZ,OAAO;YACP,IAAI,EAAE;gBACJ,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK;gBACzB,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI;gBACvB,QAAQ;aACT;YACD,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/E,CAAA;QAED,4EAA4E;QAC5E,mDAAmD;QACnD,MAAM,GAAG,GAAG,QAAQ,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAA;QAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAA;QACzE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,uBAAuB,EAAE;YACpD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YAC1B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,yBAAyB,CAAC;SACvD,CAAC,CAAA;QACF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,+BAA+B,GAAG,CAAC,MAAM,MAAM,MAAM,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACvF,CAAC;QACD,MAAM,MAAM,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAwB,CAAA;QACxD,IAAI,MAAM,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,MAAM,CAAC,KAAK,EAAE,CAAC,CAAA;QAEjE,MAAM,OAAO,GAAG,cAAc,CAAC,aAAa,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC/E,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAA;QACtD,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,CAAA;IACnC,CAAC;CACF;AAED,0EAA0E;AAC1E,SAAS,mBAAmB,CAAC,QAAgB;IAC3C,OAAO,CACL,QAAQ,KAAK,YAAY;QACzB,QAAQ,KAAK,MAAM;QACnB,QAAQ,KAAK,UAAU;QACvB,QAAQ,KAAK,UAAU;QACvB,QAAQ,KAAK,QAAQ,CACtB,CAAA;AACH,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,GAAa;IACnC,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,WAAW,CAAA;IACpB,CAAC;AACH,CAAC"}

package/dist/infrastructure/documents/ConfluenceProvider.d.ts

@@ -1,29 +0,0 @@
-import { type DocumentContent, type DocumentCredentials, type DocumentSearchResult, type DocumentSourceProvider, type NormalizedConnection } from '@cat-factory/kernel';
-/** Carries the HTTP status so callers can surface a meaningful error. */
-export declare class ConfluenceApiError extends Error {
-    readonly status: number;
-    constructor(status: number, message: string);
-}
-export declare class ConfluenceProvider implements DocumentSourceProvider {
-    readonly kind: 'confluence';
-    readonly descriptor: {
-        source: "confluence" | "github" | "notion";
-        label: string;
-        icon: string;
-        credentialFields: {
-            key: string;
-            label: string;
-            help?: string | undefined;
-            placeholder?: string | undefined;
-            secret?: boolean | undefined;
-        }[];
-        refLabel: string;
-        refPlaceholder: string;
-        searchable?: boolean | undefined;
-    };
-    normalizeConnection(input: DocumentCredentials): NormalizedConnection;
-    parseRef(input: string): string | null;
-    fetchDocument(credentials: DocumentCredentials, externalId: string): Promise<DocumentContent>;
-    search(credentials: DocumentCredentials, query: string): Promise<DocumentSearchResult[]>;
-}
-//# sourceMappingURL=ConfluenceProvider.d.ts.map

package/dist/infrastructure/documents/ConfluenceProvider.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"ConfluenceProvider.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/documents/ConfluenceProvider.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,eAAe,EACpB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,sBAAsB,EAC3B,KAAK,oBAAoB,EAC1B,MAAM,qBAAqB,CAAA;AAgB5B,yEAAyE;AACzE,qBAAa,kBAAmB,SAAQ,KAAK;IAEzC,QAAQ,CAAC,MAAM,EAAE,MAAM;IADzB,YACW,MAAM,EAAE,MAAM,EACvB,OAAO,EAAE,MAAM,EAIhB;CACF;AA+ED,qBAAa,kBAAmB,YAAW,sBAAsB;IAC/D,QAAQ,CAAC,IAAI,EAAG,YAAY,CAAS;IACrC,QAAQ,CAAC,UAAU;;;;;;;;;;;;;;MAAwB;IAE3C,mBAAmB,CAAC,KAAK,EAAE,mBAAmB,GAAG,oBAAoB,CAepE;IAED,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAErC;IAEK,aAAa,CACjB,WAAW,EAAE,mBAAmB,EAChC,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,eAAe,CAAC,CAiD1B;IAEK,MAAM,CAAC,WAAW,EAAE,mBAAmB,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAkC7F;CACF"}

package/dist/infrastructure/documents/ConfluenceProvider.js

@@ -1,179 +0,0 @@
-import { ValidationError, } from '@cat-factory/kernel';
-import { CONFLUENCE_DESCRIPTOR, confluenceLogic } from '@cat-factory/integrations';
-// ConfluenceProvider: the document-source provider for Confluence Cloud. It
-// authenticates with HTTP Basic (account email + API token), fetches a page in
-// storage format, and converts the body to the Markdown the planner consumes.
-// All Confluence-specific *pure* logic (ref parsing, base-URL SSRF guard,
-// XHTML → Markdown) lives in `@cat-factory/integrations` so it is unit-testable; this
-// class is the thin `fetch` shell around it. No SDK — fetch + `btoa` suffice.
-const USER_AGENT = 'cat-factory';
-/** Bound the redirect chain so a permitted first hop can't walk us anywhere. */
-const MAX_REDIRECTS = 5;
-/** Hard cap on the bytes read off any response body, to protect the isolate. */
-const MAX_RESPONSE_BYTES = 5_000_000;
-/** Carries the HTTP status so callers can surface a meaningful error. */
-export class ConfluenceApiError extends Error {
-    status;
-    constructor(status, message) {
-        super(message);
-        this.status = status;
-        this.name = 'ConfluenceApiError';
-    }
-}
-/**
- * `fetch` with redirects followed by hand so the SSRF guard runs against EVERY
- * hop. With the default `redirect: 'follow'` the permitted site could 302 to an
- * internal target (or downgrade https→http) and the runtime would follow it
- * unchecked, leaking the Basic-auth token. We force `redirect: 'manual'`,
- * re-resolve the `Location` against the current URL, and re-run the same
- * `assertSafe` guard (https-only + host blocklist) before following.
- */
-async function safeFetch(url, init, assertSafe) {
-    let current = url;
-    for (let hop = 0;; hop++) {
-        assertSafe(current);
-        const res = await fetch(current, { ...init, redirect: 'manual' });
-        if (res.status >= 300 && res.status < 400) {
-            const location = res.headers.get('location');
-            if (!location)
-                return res;
-            if (hop >= MAX_REDIRECTS) {
-                throw new ConfluenceApiError(502, 'Confluence returned too many redirects');
-            }
-            current = new URL(location, current).toString();
-            continue;
-        }
-        return res;
-    }
-}
-/**
- * Read a response body with a running byte cap so a hostile/huge response can't
- * OOM the isolate. Checks the declared Content-Length first, then enforces the
- * cap while streaming.
- */
-async function readCappedText(res, maxBytes) {
-    const declared = res.headers.get('content-length');
-    if (declared && Number(declared) > maxBytes) {
-        throw new ConfluenceApiError(502, 'Confluence response too large');
-    }
-    const body = res.body;
-    if (!body)
-        return '';
-    const reader = body.getReader();
-    const chunks = [];
-    let total = 0;
-    try {
-        for (;;) {
-            const { done, value } = await reader.read();
-            if (done)
-                break;
-            if (!value)
-                continue;
-            total += value.byteLength;
-            if (total > maxBytes) {
-                await reader.cancel();
-                throw new ConfluenceApiError(502, 'Confluence response too large');
-            }
-            chunks.push(value);
-        }
-    }
-    finally {
-        reader.releaseLock();
-    }
-    const merged = new Uint8Array(total);
-    let offset = 0;
-    for (const c of chunks) {
-        merged.set(c, offset);
-        offset += c.byteLength;
-    }
-    return new TextDecoder().decode(merged);
-}
-export class ConfluenceProvider {
-    kind = 'confluence';
-    descriptor = CONFLUENCE_DESCRIPTOR;
-    normalizeConnection(input) {
-        const baseUrlRaw = input.baseUrl?.trim();
-        const accountEmail = input.accountEmail?.trim();
-        const apiToken = input.apiToken?.trim();
-        if (!baseUrlRaw || !accountEmail || !apiToken) {
-            throw new ValidationError('Confluence requires a site URL, account email and API token');
-        }
-        const baseUrl = confluenceLogic.normalizeBaseUrl(baseUrlRaw);
-        // Guard against SSRF: the stored base URL is later fetched with the
-        // workspace's credentials, so it must be a public https host.
-        confluenceLogic.assertSafeConfluenceBaseUrl(baseUrl);
-        return {
-            credentials: { baseUrl, accountEmail, apiToken },
-            label: baseUrl,
-        };
-    }
-    parseRef(input) {
-        return confluenceLogic.parseConfluenceRef(input);
-    }
-    async fetchDocument(credentials, externalId) {
-        const base = credentials.baseUrl.replace(/\/+$/, '');
-        const url = `${base}/wiki/rest/api/content/${encodeURIComponent(externalId)}?expand=body.storage,version`;
-        const auth = btoa(`${credentials.accountEmail}:${credentials.apiToken}`);
-        const res = await safeFetch(url, {
-            method: 'GET',
-            headers: {
-                authorization: `Basic ${auth}`,
-                accept: 'application/json',
-                'user-agent': USER_AGENT,
-            },
-        }, (u) => confluenceLogic.assertSafeConfluenceBaseUrl(u));
-        if (!res.ok) {
-            const text = await readCappedText(res, MAX_RESPONSE_BYTES).catch(() => '');
-            throw new ConfluenceApiError(res.status, `Confluence GET ${url} → ${res.status}: ${text.slice(0, 300)}`);
-        }
-        const text = await readCappedText(res, MAX_RESPONSE_BYTES);
-        const json = (() => {
-            try {
-                return JSON.parse(text);
-            }
-            catch {
-                return null;
-            }
-        })();
-        if (!json || !json.id) {
-            throw new ConfluenceApiError(502, `Confluence returned an unexpected body for page ${externalId}`);
-        }
-        const linkBase = json._links?.base ?? `${base}/wiki`;
-        const webui = json._links?.webui ?? '';
-        return {
-            externalId: json.id,
-            title: json.title ?? '(untitled)',
-            url: `${linkBase}${webui}`,
-            body: confluenceLogic.confluenceStorageToMarkdown(json.body?.storage?.value ?? ''),
-        };
-    }
-    async search(credentials, query) {
-        const base = credentials.baseUrl.replace(/\/+$/, '');
-        const cql = encodeURIComponent(confluenceLogic.buildConfluenceSearchCql(query));
-        const url = `${base}/wiki/rest/api/content/search?cql=${cql}&limit=20`;
-        const auth = btoa(`${credentials.accountEmail}:${credentials.apiToken}`);
-        const res = await safeFetch(url, {
-            method: 'GET',
-            headers: {
-                authorization: `Basic ${auth}`,
-                accept: 'application/json',
-                'user-agent': USER_AGENT,
-            },
-        }, (u) => confluenceLogic.assertSafeConfluenceBaseUrl(u));
-        if (!res.ok) {
-            const text = await readCappedText(res, MAX_RESPONSE_BYTES).catch(() => '');
-            throw new ConfluenceApiError(res.status, `Confluence search ${url} → ${res.status}: ${text.slice(0, 300)}`);
-        }
-        const text = await readCappedText(res, MAX_RESPONSE_BYTES);
-        const json = (() => {
-            try {
-                return JSON.parse(text);
-            }
-            catch {
-                return null;
-            }
-        })();
-        return confluenceLogic.parseConfluenceSearchResults(json, base);
-    }
-}
-//# sourceMappingURL=ConfluenceProvider.js.map

package/dist/infrastructure/documents/ConfluenceProvider.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"ConfluenceProvider.js","sourceRoot":"","sources":["../../../src/infrastructure/documents/ConfluenceProvider.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,GAMhB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAA;AAElF,4EAA4E;AAC5E,+EAA+E;AAC/E,8EAA8E;AAC9E,0EAA0E;AAC1E,sFAAsF;AACtF,8EAA8E;AAE9E,MAAM,UAAU,GAAG,aAAa,CAAA;AAChC,gFAAgF;AAChF,MAAM,aAAa,GAAG,CAAC,CAAA;AACvB,gFAAgF;AAChF,MAAM,kBAAkB,GAAG,SAAS,CAAA;AAEpC,yEAAyE;AACzE,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAEhC,MAAM;IADjB,YACW,MAAc,EACvB,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAA;sBAHL,MAAM;QAIf,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAA;IAClC,CAAC;CACF;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,SAAS,CACtB,GAAW,EACX,IAAiB,EACjB,UAA+B;IAE/B,IAAI,OAAO,GAAG,GAAG,CAAA;IACjB,KAAK,IAAI,GAAG,GAAG,CAAC,GAAI,GAAG,EAAE,EAAE,CAAC;QAC1B,UAAU,CAAC,OAAO,CAAC,CAAA;QACnB,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAA;QACjE,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YAC1C,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;YAC5C,IAAI,CAAC,QAAQ;gBAAE,OAAO,GAAG,CAAA;YACzB,IAAI,GAAG,IAAI,aAAa,EAAE,CAAC;gBACzB,MAAM,IAAI,kBAAkB,CAAC,GAAG,EAAE,wCAAwC,CAAC,CAAA;YAC7E,CAAC;YACD,OAAO,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAA;YAC/C,SAAQ;QACV,CAAC;QACD,OAAO,GAAG,CAAA;IACZ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,cAAc,CAAC,GAAa,EAAE,QAAgB;IAC3D,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAA;IAClD,IAAI,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,QAAQ,EAAE,CAAC;QAC5C,MAAM,IAAI,kBAAkB,CAAC,GAAG,EAAE,+BAA+B,CAAC,CAAA;IACpE,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAA;IACrB,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAA;IACpB,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAA;IAC/B,MAAM,MAAM,GAAiB,EAAE,CAAA;IAC/B,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,IAAI,CAAC;QACH,SAAS,CAAC;YACR,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAA;YAC3C,IAAI,IAAI;gBAAE,MAAK;YACf,IAAI,CAAC,KAAK;gBAAE,SAAQ;YACpB,KAAK,IAAI,KAAK,CAAC,UAAU,CAAA;YACzB,IAAI,KAAK,GAAG,QAAQ,EAAE,CAAC;gBACrB,MAAM,MAAM,CAAC,MAAM,EAAE,CAAA;gBACrB,MAAM,IAAI,kBAAkB,CAAC,GAAG,EAAE,+BAA+B,CAAC,CAAA;YACpE,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACpB,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,WAAW,EAAE,CAAA;IACtB,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAA;IACpC,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAA;QACrB,MAAM,IAAI,CAAC,CAAC,UAAU,CAAA;IACxB,CAAC;IACD,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;AACzC,CAAC;AAUD,MAAM,OAAO,kBAAkB;IACpB,IAAI,GAAG,YAAqB,CAAA;IAC5B,UAAU,GAAG,qBAAqB,CAAA;IAE3C,mBAAmB,CAAC,KAA0B;QAC5C,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,CAAA;QACxC,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE,CAAA;QAC/C,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAA;QACvC,IAAI,CAAC,UAAU,IAAI,CAAC,YAAY,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC9C,MAAM,IAAI,eAAe,CAAC,6DAA6D,CAAC,CAAA;QAC1F,CAAC;QACD,MAAM,OAAO,GAAG,eAAe,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAA;QAC5D,oEAAoE;QACpE,8DAA8D;QAC9D,eAAe,CAAC,2BAA2B,CAAC,OAAO,CAAC,CAAA;QACpD,OAAO;YACL,WAAW,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE;YAChD,KAAK,EAAE,OAAO;SACf,CAAA;IACH,CAAC;IAED,QAAQ,CAAC,KAAa;QACpB,OAAO,eAAe,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAA;IAClD,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,WAAgC,EAChC,UAAkB;QAElB,MAAM,IAAI,GAAG,WAAW,CAAC,OAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;QACrD,MAAM,GAAG,GAAG,GAAG,IAAI,0BAA0B,kBAAkB,CAAC,UAAU,CAAC,8BAA8B,CAAA;QACzG,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,WAAW,CAAC,YAAY,IAAI,WAAW,CAAC,QAAQ,EAAE,CAAC,CAAA;QAExE,MAAM,GAAG,GAAG,MAAM,SAAS,CACzB,GAAG,EACH;YACE,MAAM,EAAE,KAAK;YACb,OAAO,EAAE;gBACP,aAAa,EAAE,SAAS,IAAI,EAAE;gBAC9B,MAAM,EAAE,kBAAkB;gBAC1B,YAAY,EAAE,UAAU;aACzB;SACF,EACD,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,2BAA2B,CAAC,CAAC,CAAC,CACtD,CAAA;QAED,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAA;YAC1E,MAAM,IAAI,kBAAkB,CAC1B,GAAG,CAAC,MAAM,EACV,kBAAkB,GAAG,MAAM,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAC/D,CAAA;QACH,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAA;QAC1D,MAAM,IAAI,GAAG,CAAC,GAAG,EAAE;YACjB,IAAI,CAAC;gBACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAoB,CAAA;YAC5C,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAA;YACb,CAAC;QACH,CAAC,CAAC,EAAE,CAAA;QACJ,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACtB,MAAM,IAAI,kBAAkB,CAC1B,GAAG,EACH,mDAAmD,UAAU,EAAE,CAChE,CAAA;QACH,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,GAAG,IAAI,OAAO,CAAA;QACpD,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE,CAAA;QACtC,OAAO;YACL,UAAU,EAAE,IAAI,CAAC,EAAE;YACnB,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,YAAY;YACjC,GAAG,EAAE,GAAG,QAAQ,GAAG,KAAK,EAAE;YAC1B,IAAI,EAAE,eAAe,CAAC,2BAA2B,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC;SACnF,CAAA;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,WAAgC,EAAE,KAAa;QAC1D,MAAM,IAAI,GAAG,WAAW,CAAC,OAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;QACrD,MAAM,GAAG,GAAG,kBAAkB,CAAC,eAAe,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC,CAAA;QAC/E,MAAM,GAAG,GAAG,GAAG,IAAI,qCAAqC,GAAG,WAAW,CAAA;QACtE,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,WAAW,CAAC,YAAY,IAAI,WAAW,CAAC,QAAQ,EAAE,CAAC,CAAA;QAExE,MAAM,GAAG,GAAG,MAAM,SAAS,CACzB,GAAG,EACH;YACE,MAAM,EAAE,KAAK;YACb,OAAO,EAAE;gBACP,aAAa,EAAE,SAAS,IAAI,EAAE;gBAC9B,MAAM,EAAE,kBAAkB;gBAC1B,YAAY,EAAE,UAAU;aACzB;SACF,EACD,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,2BAA2B,CAAC,CAAC,CAAC,CACtD,CAAA;QACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAA;YAC1E,MAAM,IAAI,kBAAkB,CAC1B,GAAG,CAAC,MAAM,EACV,qBAAqB,GAAG,MAAM,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAClE,CAAA;QACH,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAA;QAC1D,MAAM,IAAI,GAAG,CAAC,GAAG,EAAE;YACjB,IAAI,CAAC;gBACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;YACzB,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAA;YACb,CAAC;QACH,CAAC,CAAC,EAAE,CAAA;QACJ,OAAO,eAAe,CAAC,4BAA4B,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IACjE,CAAC;CACF"}

package/dist/infrastructure/documents/GitHubDocsProvider.d.ts

@@ -1,42 +0,0 @@
-import { type DocumentContent, type DocumentCredentials, type DocumentSearchResult, type DocumentSourceProvider, type GitHubClient, type GitHubInstallationRepository, type NormalizedConnection } from '@cat-factory/kernel';
-export interface GitHubDocsProviderDependencies {
-    githubClient: GitHubClient;
-    /** Resolves which installation owns a given repo owner (by account login). */
-    installations: GitHubInstallationRepository;
-}
-export declare class GitHubDocsProvider implements DocumentSourceProvider {
-    private readonly deps;
-    readonly kind: 'github';
-    readonly descriptor: {
-        source: "confluence" | "github" | "notion";
-        label: string;
-        icon: string;
-        credentialFields: {
-            key: string;
-            label: string;
-            help?: string | undefined;
-            placeholder?: string | undefined;
-            secret?: boolean | undefined;
-        }[];
-        refLabel: string;
-        refPlaceholder: string;
-        searchable?: boolean | undefined;
-    };
-    constructor(deps: GitHubDocsProviderDependencies);
-    /**
-     * GitHub docs piggyback on the installed GitHub App, so there is nothing to
-     * validate or persist — the connection is a marker. Any supplied fields are
-     * ignored (the connect form has none).
-     */
-    normalizeConnection(_input: DocumentCredentials): NormalizedConnection;
-    parseRef(input: string): string | null;
-    fetchDocument(_credentials: DocumentCredentials, externalId: string): Promise<DocumentContent>;
-    search(_credentials: DocumentCredentials, query: string, workspaceId: string): Promise<DocumentSearchResult[]>;
-    /**
-     * Find the GitHub App installation whose account owns `owner`. The
-     * installation token for that account is what can read the repo's contents,
-     * regardless of which workspace triggered the import.
-     */
-    private resolveInstallationId;
-}
-//# sourceMappingURL=GitHubDocsProvider.d.ts.map

package/dist/infrastructure/documents/GitHubDocsProvider.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"GitHubDocsProvider.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/documents/GitHubDocsProvider.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,eAAe,EACpB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,sBAAsB,EAC3B,KAAK,YAAY,EACjB,KAAK,4BAA4B,EACjC,KAAK,oBAAoB,EAC1B,MAAM,qBAAqB,CAAA;AAc5B,MAAM,WAAW,8BAA8B;IAC7C,YAAY,EAAE,YAAY,CAAA;IAC1B,8EAA8E;IAC9E,aAAa,EAAE,4BAA4B,CAAA;CAC5C;AAED,qBAAa,kBAAmB,YAAW,sBAAsB;IAInD,OAAO,CAAC,QAAQ,CAAC,IAAI;IAHjC,QAAQ,CAAC,IAAI,EAAG,QAAQ,CAAS;IACjC,QAAQ,CAAC,UAAU;;;;;;;;;;;;;;MAAyB;IAE5C,YAA6B,IAAI,EAAE,8BAA8B,EAAI;IAErE;;;;OAIG;IACH,mBAAmB,CAAC,MAAM,EAAE,mBAAmB,GAAG,oBAAoB,CAErE;IAED,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAErC;IAEK,aAAa,CACjB,YAAY,EAAE,mBAAmB,EACjC,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,eAAe,CAAC,CAoB1B;IAEK,MAAM,CACV,YAAY,EAAE,mBAAmB,EACjC,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAkCjC;IAED;;;;OAIG;YACW,qBAAqB;CAUpC"}