@cat-factory/worker 0.6.0

package/dist/infrastructure/documents/ConfluenceProvider.js

@@ -0,0 +1,179 @@
+import { ValidationError, } from '@cat-factory/kernel';
+import { CONFLUENCE_DESCRIPTOR, confluenceLogic } from '@cat-factory/integrations';
+// ConfluenceProvider: the document-source provider for Confluence Cloud. It
+// authenticates with HTTP Basic (account email + API token), fetches a page in
+// storage format, and converts the body to the Markdown the planner consumes.
+// All Confluence-specific *pure* logic (ref parsing, base-URL SSRF guard,
+// XHTML → Markdown) lives in `@cat-factory/integrations` so it is unit-testable; this
+// class is the thin `fetch` shell around it. No SDK — fetch + `btoa` suffice.
+const USER_AGENT = 'cat-factory';
+/** Bound the redirect chain so a permitted first hop can't walk us anywhere. */
+const MAX_REDIRECTS = 5;
+/** Hard cap on the bytes read off any response body, to protect the isolate. */
+const MAX_RESPONSE_BYTES = 5_000_000;
+/** Carries the HTTP status so callers can surface a meaningful error. */
+export class ConfluenceApiError extends Error {
+    status;
+    constructor(status, message) {
+        super(message);
+        this.status = status;
+        this.name = 'ConfluenceApiError';
+    }
+}
+/**
+ * `fetch` with redirects followed by hand so the SSRF guard runs against EVERY
+ * hop. With the default `redirect: 'follow'` the permitted site could 302 to an
+ * internal target (or downgrade https→http) and the runtime would follow it
+ * unchecked, leaking the Basic-auth token. We force `redirect: 'manual'`,
+ * re-resolve the `Location` against the current URL, and re-run the same
+ * `assertSafe` guard (https-only + host blocklist) before following.
+ */
+async function safeFetch(url, init, assertSafe) {
+    let current = url;
+    for (let hop = 0;; hop++) {
+        assertSafe(current);
+        const res = await fetch(current, { ...init, redirect: 'manual' });
+        if (res.status >= 300 && res.status < 400) {
+            const location = res.headers.get('location');
+            if (!location)
+                return res;
+            if (hop >= MAX_REDIRECTS) {
+                throw new ConfluenceApiError(502, 'Confluence returned too many redirects');
+            }
+            current = new URL(location, current).toString();
+            continue;
+        }
+        return res;
+    }
+}
+/**
+ * Read a response body with a running byte cap so a hostile/huge response can't
+ * OOM the isolate. Checks the declared Content-Length first, then enforces the
+ * cap while streaming.
+ */
+async function readCappedText(res, maxBytes) {
+    const declared = res.headers.get('content-length');
+    if (declared && Number(declared) > maxBytes) {
+        throw new ConfluenceApiError(502, 'Confluence response too large');
+    }
+    const body = res.body;
+    if (!body)
+        return '';
+    const reader = body.getReader();
+    const chunks = [];
+    let total = 0;
+    try {
+        for (;;) {
+            const { done, value } = await reader.read();
+            if (done)
+                break;
+            if (!value)
+                continue;
+            total += value.byteLength;
+            if (total > maxBytes) {
+                await reader.cancel();
+                throw new ConfluenceApiError(502, 'Confluence response too large');
+            }
+            chunks.push(value);
+        }
+    }
+    finally {
+        reader.releaseLock();
+    }
+    const merged = new Uint8Array(total);
+    let offset = 0;
+    for (const c of chunks) {
+        merged.set(c, offset);
+        offset += c.byteLength;
+    }
+    return new TextDecoder().decode(merged);
+}
+export class ConfluenceProvider {
+    kind = 'confluence';
+    descriptor = CONFLUENCE_DESCRIPTOR;
+    normalizeConnection(input) {
+        const baseUrlRaw = input.baseUrl?.trim();
+        const accountEmail = input.accountEmail?.trim();
+        const apiToken = input.apiToken?.trim();
+        if (!baseUrlRaw || !accountEmail || !apiToken) {
+            throw new ValidationError('Confluence requires a site URL, account email and API token');
+        }
+        const baseUrl = confluenceLogic.normalizeBaseUrl(baseUrlRaw);
+        // Guard against SSRF: the stored base URL is later fetched with the
+        // workspace's credentials, so it must be a public https host.
+        confluenceLogic.assertSafeConfluenceBaseUrl(baseUrl);
+        return {
+            credentials: { baseUrl, accountEmail, apiToken },
+            label: baseUrl,
+        };
+    }
+    parseRef(input) {
+        return confluenceLogic.parseConfluenceRef(input);
+    }
+    async fetchDocument(credentials, externalId) {
+        const base = credentials.baseUrl.replace(/\/+$/, '');
+        const url = `${base}/wiki/rest/api/content/${encodeURIComponent(externalId)}?expand=body.storage,version`;
+        const auth = btoa(`${credentials.accountEmail}:${credentials.apiToken}`);
+        const res = await safeFetch(url, {
+            method: 'GET',
+            headers: {
+                authorization: `Basic ${auth}`,
+                accept: 'application/json',
+                'user-agent': USER_AGENT,
+            },
+        }, (u) => confluenceLogic.assertSafeConfluenceBaseUrl(u));
+        if (!res.ok) {
+            const text = await readCappedText(res, MAX_RESPONSE_BYTES).catch(() => '');
+            throw new ConfluenceApiError(res.status, `Confluence GET ${url} → ${res.status}: ${text.slice(0, 300)}`);
+        }
+        const text = await readCappedText(res, MAX_RESPONSE_BYTES);
+        const json = (() => {
+            try {
+                return JSON.parse(text);
+            }
+            catch {
+                return null;
+            }
+        })();
+        if (!json || !json.id) {
+            throw new ConfluenceApiError(502, `Confluence returned an unexpected body for page ${externalId}`);
+        }
+        const linkBase = json._links?.base ?? `${base}/wiki`;
+        const webui = json._links?.webui ?? '';
+        return {
+            externalId: json.id,
+            title: json.title ?? '(untitled)',
+            url: `${linkBase}${webui}`,
+            body: confluenceLogic.confluenceStorageToMarkdown(json.body?.storage?.value ?? ''),
+        };
+    }
+    async search(credentials, query) {
+        const base = credentials.baseUrl.replace(/\/+$/, '');
+        const cql = encodeURIComponent(confluenceLogic.buildConfluenceSearchCql(query));
+        const url = `${base}/wiki/rest/api/content/search?cql=${cql}&limit=20`;
+        const auth = btoa(`${credentials.accountEmail}:${credentials.apiToken}`);
+        const res = await safeFetch(url, {
+            method: 'GET',
+            headers: {
+                authorization: `Basic ${auth}`,
+                accept: 'application/json',
+                'user-agent': USER_AGENT,
+            },
+        }, (u) => confluenceLogic.assertSafeConfluenceBaseUrl(u));
+        if (!res.ok) {
+            const text = await readCappedText(res, MAX_RESPONSE_BYTES).catch(() => '');
+            throw new ConfluenceApiError(res.status, `Confluence search ${url} → ${res.status}: ${text.slice(0, 300)}`);
+        }
+        const text = await readCappedText(res, MAX_RESPONSE_BYTES);
+        const json = (() => {
+            try {
+                return JSON.parse(text);
+            }
+            catch {
+                return null;
+            }
+        })();
+        return confluenceLogic.parseConfluenceSearchResults(json, base);
+    }
+}
+//# sourceMappingURL=ConfluenceProvider.js.map

package/dist/infrastructure/documents/ConfluenceProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ConfluenceProvider.js","sourceRoot":"","sources":["../../../src/infrastructure/documents/ConfluenceProvider.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,GAMhB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAA;AAElF,4EAA4E;AAC5E,+EAA+E;AAC/E,8EAA8E;AAC9E,0EAA0E;AAC1E,sFAAsF;AACtF,8EAA8E;AAE9E,MAAM,UAAU,GAAG,aAAa,CAAA;AAChC,gFAAgF;AAChF,MAAM,aAAa,GAAG,CAAC,CAAA;AACvB,gFAAgF;AAChF,MAAM,kBAAkB,GAAG,SAAS,CAAA;AAEpC,yEAAyE;AACzE,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAEhC,MAAM;IADjB,YACW,MAAc,EACvB,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAA;sBAHL,MAAM;QAIf,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAA;IAClC,CAAC;CACF;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,SAAS,CACtB,GAAW,EACX,IAAiB,EACjB,UAA+B;IAE/B,IAAI,OAAO,GAAG,GAAG,CAAA;IACjB,KAAK,IAAI,GAAG,GAAG,CAAC,GAAI,GAAG,EAAE,EAAE,CAAC;QAC1B,UAAU,CAAC,OAAO,CAAC,CAAA;QACnB,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAA;QACjE,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YAC1C,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;YAC5C,IAAI,CAAC,QAAQ;gBAAE,OAAO,GAAG,CAAA;YACzB,IAAI,GAAG,IAAI,aAAa,EAAE,CAAC;gBACzB,MAAM,IAAI,kBAAkB,CAAC,GAAG,EAAE,wCAAwC,CAAC,CAAA;YAC7E,CAAC;YACD,OAAO,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAA;YAC/C,SAAQ;QACV,CAAC;QACD,OAAO,GAAG,CAAA;IACZ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,cAAc,CAAC,GAAa,EAAE,QAAgB;IAC3D,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAA;IAClD,IAAI,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,QAAQ,EAAE,CAAC;QAC5C,MAAM,IAAI,kBAAkB,CAAC,GAAG,EAAE,+BAA+B,CAAC,CAAA;IACpE,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAA;IACrB,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAA;IACpB,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAA;IAC/B,MAAM,MAAM,GAAiB,EAAE,CAAA;IAC/B,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,IAAI,CAAC;QACH,SAAS,CAAC;YACR,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAA;YAC3C,IAAI,IAAI;gBAAE,MAAK;YACf,IAAI,CAAC,KAAK;gBAAE,SAAQ;YACpB,KAAK,IAAI,KAAK,CAAC,UAAU,CAAA;YACzB,IAAI,KAAK,GAAG,QAAQ,EAAE,CAAC;gBACrB,MAAM,MAAM,CAAC,MAAM,EAAE,CAAA;gBACrB,MAAM,IAAI,kBAAkB,CAAC,GAAG,EAAE,+BAA+B,CAAC,CAAA;YACpE,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACpB,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,WAAW,EAAE,CAAA;IACtB,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAA;IACpC,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAA;QACrB,MAAM,IAAI,CAAC,CAAC,UAAU,CAAA;IACxB,CAAC;IACD,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;AACzC,CAAC;AAUD,MAAM,OAAO,kBAAkB;IACpB,IAAI,GAAG,YAAqB,CAAA;IAC5B,UAAU,GAAG,qBAAqB,CAAA;IAE3C,mBAAmB,CAAC,KAA0B;QAC5C,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,CAAA;QACxC,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE,CAAA;QAC/C,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAA;QACvC,IAAI,CAAC,UAAU,IAAI,CAAC,YAAY,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC9C,MAAM,IAAI,eAAe,CAAC,6DAA6D,CAAC,CAAA;QAC1F,CAAC;QACD,MAAM,OAAO,GAAG,eAAe,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAA;QAC5D,oEAAoE;QACpE,8DAA8D;QAC9D,eAAe,CAAC,2BAA2B,CAAC,OAAO,CAAC,CAAA;QACpD,OAAO;YACL,WAAW,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE;YAChD,KAAK,EAAE,OAAO;SACf,CAAA;IACH,CAAC;IAED,QAAQ,CAAC,KAAa;QACpB,OAAO,eAAe,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAA;IAClD,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,WAAgC,EAChC,UAAkB;QAElB,MAAM,IAAI,GAAG,WAAW,CAAC,OAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;QACrD,MAAM,GAAG,GAAG,GAAG,IAAI,0BAA0B,kBAAkB,CAAC,UAAU,CAAC,8BAA8B,CAAA;QACzG,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,WAAW,CAAC,YAAY,IAAI,WAAW,CAAC,QAAQ,EAAE,CAAC,CAAA;QAExE,MAAM,GAAG,GAAG,MAAM,SAAS,CACzB,GAAG,EACH;YACE,MAAM,EAAE,KAAK;YACb,OAAO,EAAE;gBACP,aAAa,EAAE,SAAS,IAAI,EAAE;gBAC9B,MAAM,EAAE,kBAAkB;gBAC1B,YAAY,EAAE,UAAU;aACzB;SACF,EACD,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,2BAA2B,CAAC,CAAC,CAAC,CACtD,CAAA;QAED,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAA;YAC1E,MAAM,IAAI,kBAAkB,CAC1B,GAAG,CAAC,MAAM,EACV,kBAAkB,GAAG,MAAM,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAC/D,CAAA;QACH,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAA;QAC1D,MAAM,IAAI,GAAG,CAAC,GAAG,EAAE;YACjB,IAAI,CAAC;gBACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAoB,CAAA;YAC5C,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAA;YACb,CAAC;QACH,CAAC,CAAC,EAAE,CAAA;QACJ,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACtB,MAAM,IAAI,kBAAkB,CAC1B,GAAG,EACH,mDAAmD,UAAU,EAAE,CAChE,CAAA;QACH,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,GAAG,IAAI,OAAO,CAAA;QACpD,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE,CAAA;QACtC,OAAO;YACL,UAAU,EAAE,IAAI,CAAC,EAAE;YACnB,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,YAAY;YACjC,GAAG,EAAE,GAAG,QAAQ,GAAG,KAAK,EAAE;YAC1B,IAAI,EAAE,eAAe,CAAC,2BAA2B,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC;SACnF,CAAA;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,WAAgC,EAAE,KAAa;QAC1D,MAAM,IAAI,GAAG,WAAW,CAAC,OAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;QACrD,MAAM,GAAG,GAAG,kBAAkB,CAAC,eAAe,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC,CAAA;QAC/E,MAAM,GAAG,GAAG,GAAG,IAAI,qCAAqC,GAAG,WAAW,CAAA;QACtE,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,WAAW,CAAC,YAAY,IAAI,WAAW,CAAC,QAAQ,EAAE,CAAC,CAAA;QAExE,MAAM,GAAG,GAAG,MAAM,SAAS,CACzB,GAAG,EACH;YACE,MAAM,EAAE,KAAK;YACb,OAAO,EAAE;gBACP,aAAa,EAAE,SAAS,IAAI,EAAE;gBAC9B,MAAM,EAAE,kBAAkB;gBAC1B,YAAY,EAAE,UAAU;aACzB;SACF,EACD,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,2BAA2B,CAAC,CAAC,CAAC,CACtD,CAAA;QACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAA;YAC1E,MAAM,IAAI,kBAAkB,CAC1B,GAAG,CAAC,MAAM,EACV,qBAAqB,GAAG,MAAM,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAClE,CAAA;QACH,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAA;QAC1D,MAAM,IAAI,GAAG,CAAC,GAAG,EAAE;YACjB,IAAI,CAAC;gBACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;YACzB,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAA;YACb,CAAC;QACH,CAAC,CAAC,EAAE,CAAA;QACJ,OAAO,eAAe,CAAC,4BAA4B,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IACjE,CAAC;CACF"}

package/dist/infrastructure/documents/GitHubDocsProvider.d.ts

@@ -0,0 +1,42 @@
+import { type DocumentContent, type DocumentCredentials, type DocumentSearchResult, type DocumentSourceProvider, type GitHubClient, type GitHubInstallationRepository, type NormalizedConnection } from '@cat-factory/kernel';
+export interface GitHubDocsProviderDependencies {
+    githubClient: GitHubClient;
+    /** Resolves which installation owns a given repo owner (by account login). */
+    installations: GitHubInstallationRepository;
+}
+export declare class GitHubDocsProvider implements DocumentSourceProvider {
+    private readonly deps;
+    readonly kind: 'github';
+    readonly descriptor: {
+        source: "confluence" | "github" | "notion";
+        label: string;
+        icon: string;
+        credentialFields: {
+            key: string;
+            label: string;
+            help?: string | undefined;
+            placeholder?: string | undefined;
+            secret?: boolean | undefined;
+        }[];
+        refLabel: string;
+        refPlaceholder: string;
+        searchable?: boolean | undefined;
+    };
+    constructor(deps: GitHubDocsProviderDependencies);
+    /**
+     * GitHub docs piggyback on the installed GitHub App, so there is nothing to
+     * validate or persist — the connection is a marker. Any supplied fields are
+     * ignored (the connect form has none).
+     */
+    normalizeConnection(_input: DocumentCredentials): NormalizedConnection;
+    parseRef(input: string): string | null;
+    fetchDocument(_credentials: DocumentCredentials, externalId: string): Promise<DocumentContent>;
+    search(_credentials: DocumentCredentials, query: string, workspaceId: string): Promise<DocumentSearchResult[]>;
+    /**
+     * Find the GitHub App installation whose account owns `owner`. The
+     * installation token for that account is what can read the repo's contents,
+     * regardless of which workspace triggered the import.
+     */
+    private resolveInstallationId;
+}
+//# sourceMappingURL=GitHubDocsProvider.d.ts.map

package/dist/infrastructure/documents/GitHubDocsProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"GitHubDocsProvider.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/documents/GitHubDocsProvider.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,eAAe,EACpB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,sBAAsB,EAC3B,KAAK,YAAY,EACjB,KAAK,4BAA4B,EACjC,KAAK,oBAAoB,EAC1B,MAAM,qBAAqB,CAAA;AAc5B,MAAM,WAAW,8BAA8B;IAC7C,YAAY,EAAE,YAAY,CAAA;IAC1B,8EAA8E;IAC9E,aAAa,EAAE,4BAA4B,CAAA;CAC5C;AAED,qBAAa,kBAAmB,YAAW,sBAAsB;IAInD,OAAO,CAAC,QAAQ,CAAC,IAAI;IAHjC,QAAQ,CAAC,IAAI,EAAG,QAAQ,CAAS;IACjC,QAAQ,CAAC,UAAU;;;;;;;;;;;;;;MAAyB;IAE5C,YAA6B,IAAI,EAAE,8BAA8B,EAAI;IAErE;;;;OAIG;IACH,mBAAmB,CAAC,MAAM,EAAE,mBAAmB,GAAG,oBAAoB,CAErE;IAED,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAErC;IAEK,aAAa,CACjB,YAAY,EAAE,mBAAmB,EACjC,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,eAAe,CAAC,CAoB1B;IAEK,MAAM,CACV,YAAY,EAAE,mBAAmB,EACjC,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAkCjC;IAED;;;;OAIG;YACW,qBAAqB;CAUpC"}

package/dist/infrastructure/documents/GitHubDocsProvider.js

@@ -0,0 +1,85 @@
+import { ConflictError, ValidationError, } from '@cat-factory/kernel';
+import { GITHUB_DOCS_DESCRIPTOR, githubDocsLogic } from '@cat-factory/integrations';
+export class GitHubDocsProvider {
+    deps;
+    kind = 'github';
+    descriptor = GITHUB_DOCS_DESCRIPTOR;
+    constructor(deps) {
+        this.deps = deps;
+    }
+    /**
+     * GitHub docs piggyback on the installed GitHub App, so there is nothing to
+     * validate or persist — the connection is a marker. Any supplied fields are
+     * ignored (the connect form has none).
+     */
+    normalizeConnection(_input) {
+        return { credentials: {}, label: 'GitHub' };
+    }
+    parseRef(input) {
+        return githubDocsLogic.parseGitHubDocRef(input);
+    }
+    async fetchDocument(_credentials, externalId) {
+        const id = githubDocsLogic.parseGitHubDocExternalId(externalId);
+        if (!id) {
+            throw new ValidationError(`"${externalId}" is not a valid GitHub doc reference`);
+        }
+        const installationId = await this.resolveInstallationId(id.owner);
+        const file = await this.deps.githubClient.getFileContent(installationId, { owner: id.owner, repo: id.repo }, id.path);
+        if (!file) {
+            throw new ConflictError(`GitHub file "${id.path}" was not found in ${id.owner}/${id.repo}`);
+        }
+        return {
+            externalId: githubDocsLogic.githubDocExternalId(id),
+            title: githubDocsLogic.githubDocTitle(id.path),
+            url: githubDocsLogic.githubDocUrl(id),
+            body: file.content,
+        };
+    }
+    async search(_credentials, query, workspaceId) {
+        // Scope to *this workspace's* installation so docs never leak across tenants
+        // (a deployment may host many installations; a workspace owns exactly one).
+        // Code search is account-scoped anyway (GitHub requires an org/user
+        // qualifier), which we build from the installation's account.
+        const installation = await this.deps.installations.getByWorkspace(workspaceId);
+        if (!installation)
+            return [];
+        const scoped = githubDocsLogic.buildGitHubCodeSearchQuery(query, installation.accountLogin, installation.targetType);
+        const hits = await this.deps.githubClient
+            .searchCode(installation.installationId, scoped, 20)
+            .catch(() => []);
+        const out = [];
+        const seen = new Set();
+        for (const hit of hits) {
+            const externalId = githubDocsLogic.githubDocExternalId({
+                owner: hit.owner,
+                repo: hit.repo,
+                path: hit.path,
+            });
+            if (seen.has(externalId))
+                continue;
+            seen.add(externalId);
+            out.push({
+                source: 'github',
+                externalId,
+                title: githubDocsLogic.githubDocTitle(hit.path),
+                url: hit.url,
+                excerpt: '',
+            });
+        }
+        return out.slice(0, 20);
+    }
+    /**
+     * Find the GitHub App installation whose account owns `owner`. The
+     * installation token for that account is what can read the repo's contents,
+     * regardless of which workspace triggered the import.
+     */
+    async resolveInstallationId(owner) {
+        const active = await this.deps.installations.listActive();
+        const match = active.find((i) => i.accountLogin.toLowerCase() === owner.toLowerCase());
+        if (!match) {
+            throw new ConflictError(`No GitHub App installation found for "${owner}". Install the GitHub App on that account to link its docs.`);
+        }
+        return match.installationId;
+    }
+}
+//# sourceMappingURL=GitHubDocsProvider.js.map

package/dist/infrastructure/documents/GitHubDocsProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"GitHubDocsProvider.js","sourceRoot":"","sources":["../../../src/infrastructure/documents/GitHubDocsProvider.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EACb,eAAe,GAQhB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,sBAAsB,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAA;AAmBnF,MAAM,OAAO,kBAAkB;IAIA,IAAI;IAHxB,IAAI,GAAG,QAAiB,CAAA;IACxB,UAAU,GAAG,sBAAsB,CAAA;IAE5C,YAA6B,IAAoC;oBAApC,IAAI;IAAmC,CAAC;IAErE;;;;OAIG;IACH,mBAAmB,CAAC,MAA2B;QAC7C,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAA;IAC7C,CAAC;IAED,QAAQ,CAAC,KAAa;QACpB,OAAO,eAAe,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAA;IACjD,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,YAAiC,EACjC,UAAkB;QAElB,MAAM,EAAE,GAAG,eAAe,CAAC,wBAAwB,CAAC,UAAU,CAAC,CAAA;QAC/D,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,MAAM,IAAI,eAAe,CAAC,IAAI,UAAU,uCAAuC,CAAC,CAAA;QAClF,CAAC;QACD,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,EAAE,CAAC,KAAK,CAAC,CAAA;QACjE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,cAAc,CACtD,cAAc,EACd,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,EAClC,EAAE,CAAC,IAAI,CACR,CAAA;QACD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,aAAa,CAAC,gBAAgB,EAAE,CAAC,IAAI,sBAAsB,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,CAAA;QAC7F,CAAC;QACD,OAAO;YACL,UAAU,EAAE,eAAe,CAAC,mBAAmB,CAAC,EAAE,CAAC;YACnD,KAAK,EAAE,eAAe,CAAC,cAAc,CAAC,EAAE,CAAC,IAAI,CAAC;YAC9C,GAAG,EAAE,eAAe,CAAC,YAAY,CAAC,EAAE,CAAC;YACrC,IAAI,EAAE,IAAI,CAAC,OAAO;SACnB,CAAA;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CACV,YAAiC,EACjC,KAAa,EACb,WAAmB;QAEnB,6EAA6E;QAC7E,4EAA4E;QAC5E,oEAAoE;QACpE,8DAA8D;QAC9D,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,cAAc,CAAC,WAAW,CAAC,CAAA;QAC9E,IAAI,CAAC,YAAY;YAAE,OAAO,EAAE,CAAA;QAC5B,MAAM,MAAM,GAAG,eAAe,CAAC,0BAA0B,CACvD,KAAK,EACL,YAAY,CAAC,YAAY,EACzB,YAAY,CAAC,UAAU,CACxB,CAAA;QACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY;aACtC,UAAU,CAAC,YAAY,CAAC,cAAc,EAAE,MAAM,EAAE,EAAE,CAAC;aACnD,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAA;QAClB,MAAM,GAAG,GAA2B,EAAE,CAAA;QACtC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;QAC9B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,UAAU,GAAG,eAAe,CAAC,mBAAmB,CAAC;gBACrD,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,IAAI,EAAE,GAAG,CAAC,IAAI;aACf,CAAC,CAAA;YACF,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC;gBAAE,SAAQ;YAClC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;YACpB,GAAG,CAAC,IAAI,CAAC;gBACP,MAAM,EAAE,QAAQ;gBAChB,UAAU;gBACV,KAAK,EAAE,eAAe,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC;gBAC/C,GAAG,EAAE,GAAG,CAAC,GAAG;gBACZ,OAAO,EAAE,EAAE;aACZ,CAAC,CAAA;QACJ,CAAC;QACD,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IACzB,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,qBAAqB,CAAC,KAAa;QAC/C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE,CAAA;QACzD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,WAAW,EAAE,CAAC,CAAA;QACtF,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,aAAa,CACrB,yCAAyC,KAAK,6DAA6D,CAC5G,CAAA;QACH,CAAC;QACD,OAAO,KAAK,CAAC,cAAc,CAAA;IAC7B,CAAC;CACF"}

package/dist/infrastructure/documents/NotionProvider.d.ts

@@ -0,0 +1,32 @@
+import { type DocumentContent, type DocumentCredentials, type DocumentSearchResult, type DocumentSourceProvider, type NormalizedConnection } from '@cat-factory/kernel';
+/** Carries the HTTP status so callers can surface a meaningful error. */
+export declare class NotionApiError extends Error {
+    readonly status: number;
+    constructor(status: number, message: string);
+}
+export declare class NotionProvider implements DocumentSourceProvider {
+    readonly kind: 'notion';
+    readonly descriptor: {
+        source: "confluence" | "github" | "notion";
+        label: string;
+        icon: string;
+        credentialFields: {
+            key: string;
+            label: string;
+            help?: string | undefined;
+            placeholder?: string | undefined;
+            secret?: boolean | undefined;
+        }[];
+        refLabel: string;
+        refPlaceholder: string;
+        searchable?: boolean | undefined;
+    };
+    normalizeConnection(input: DocumentCredentials): NormalizedConnection;
+    parseRef(input: string): string | null;
+    fetchDocument(credentials: DocumentCredentials, externalId: string): Promise<DocumentContent>;
+    search(credentials: DocumentCredentials, query: string): Promise<DocumentSearchResult[]>;
+    /** Page through a page's top-level blocks (bounded), returning them in order. */
+    private fetchBlocks;
+    private get;
+}
+//# sourceMappingURL=NotionProvider.d.ts.map

package/dist/infrastructure/documents/NotionProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"NotionProvider.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/documents/NotionProvider.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,eAAe,EACpB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,sBAAsB,EAC3B,KAAK,oBAAoB,EAC1B,MAAM,qBAAqB,CAAA;AAsB5B,yEAAyE;AACzE,qBAAa,cAAe,SAAQ,KAAK;IAErC,QAAQ,CAAC,MAAM,EAAE,MAAM;IADzB,YACW,MAAM,EAAE,MAAM,EACvB,OAAO,EAAE,MAAM,EAIhB;CACF;AAkGD,qBAAa,cAAe,YAAW,sBAAsB;IAC3D,QAAQ,CAAC,IAAI,EAAG,QAAQ,CAAS;IACjC,QAAQ,CAAC,UAAU;;;;;;;;;;;;;;MAAoB;IAEvC,mBAAmB,CAAC,KAAK,EAAE,mBAAmB,GAAG,oBAAoB,CAMpE;IAED,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAErC;IAEK,aAAa,CACjB,WAAW,EAAE,mBAAmB,EAChC,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,eAAe,CAAC,CAe1B;IAEK,MAAM,CAAC,WAAW,EAAE,mBAAmB,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC,CA6B7F;IAED,iFAAiF;YACnE,WAAW;YAqBX,GAAG;CA+BlB"}

package/dist/infrastructure/documents/NotionProvider.js

@@ -0,0 +1,220 @@
+import { ValidationError, } from '@cat-factory/kernel';
+import { NOTION_DESCRIPTOR, notionLogic } from '@cat-factory/integrations';
+// NotionProvider: the document-source provider for Notion. It authenticates with
+// a single internal-integration token (Bearer), fetches a page for its title and
+// URL, then pages through the page's top-level blocks and converts them to the
+// Markdown the planner consumes. Because the API host is fixed
+// (`api.notion.com`) and there is no per-site base URL, there is no SSRF surface.
+// Notion-specific *pure* logic (ref parsing, block → Markdown) lives in
+// `@cat-factory/integrations`; this class is the thin `fetch` shell.
+const API_BASE = 'https://api.notion.com/v1';
+const NOTION_API_HOST = 'api.notion.com';
+const NOTION_VERSION = '2022-06-28';
+const USER_AGENT = 'cat-factory';
+/** Bound the block backfill so a huge page can't stall an import (100 blocks/page). */
+const MAX_BLOCK_PAGES = 5;
+/** Bound the redirect chain so the fixed API host can't 302 us elsewhere. */
+const MAX_REDIRECTS = 5;
+/** Hard cap on the bytes read off any response body, to protect the isolate. */
+const MAX_RESPONSE_BYTES = 5_000_000;
+/** Carries the HTTP status so callers can surface a meaningful error. */
+export class NotionApiError extends Error {
+    status;
+    constructor(status, message) {
+        super(message);
+        this.status = status;
+        this.name = 'NotionApiError';
+    }
+}
+/**
+ * The Notion API host is fixed, so any redirect must stay on `api.notion.com`
+ * over https. A redirect off-host (e.g. to an internal address) is treated as an
+ * SSRF attempt and rejected. Mirrors the per-hop guard the site-configurable
+ * providers run.
+ */
+function assertSafeNotionUrl(url) {
+    let parsed;
+    try {
+        parsed = new URL(url);
+    }
+    catch {
+        throw new NotionApiError(502, `Notion request URL is invalid: ${url}`);
+    }
+    if (parsed.protocol !== 'https:') {
+        throw new NotionApiError(502, 'Notion request must use https');
+    }
+    if (parsed.hostname.toLowerCase() !== NOTION_API_HOST) {
+        throw new NotionApiError(502, `Notion redirect to a disallowed host: ${parsed.hostname}`);
+    }
+}
+/**
+ * `fetch` with redirects followed by hand so the host guard runs against EVERY
+ * hop. With the default `redirect: 'follow'` a 302 from the API could be chased
+ * to an internal target (or downgraded to http), leaking the Bearer token. We
+ * force `redirect: 'manual'`, re-resolve the `Location`, and re-validate.
+ */
+async function safeFetch(url, init) {
+    let current = url;
+    for (let hop = 0;; hop++) {
+        assertSafeNotionUrl(current);
+        const res = await fetch(current, { ...init, redirect: 'manual' });
+        if (res.status >= 300 && res.status < 400) {
+            const location = res.headers.get('location');
+            if (!location)
+                return res;
+            if (hop >= MAX_REDIRECTS) {
+                throw new NotionApiError(502, 'Notion returned too many redirects');
+            }
+            current = new URL(location, current).toString();
+            continue;
+        }
+        return res;
+    }
+}
+/**
+ * Read a response body with a running byte cap so a hostile/huge response can't
+ * OOM the isolate. Checks the declared Content-Length first, then enforces the
+ * cap while streaming.
+ */
+async function readCappedText(res, maxBytes) {
+    const declared = res.headers.get('content-length');
+    if (declared && Number(declared) > maxBytes) {
+        throw new NotionApiError(502, 'Notion response too large');
+    }
+    const body = res.body;
+    if (!body)
+        return '';
+    const reader = body.getReader();
+    const chunks = [];
+    let total = 0;
+    try {
+        for (;;) {
+            const { done, value } = await reader.read();
+            if (done)
+                break;
+            if (!value)
+                continue;
+            total += value.byteLength;
+            if (total > maxBytes) {
+                await reader.cancel();
+                throw new NotionApiError(502, 'Notion response too large');
+            }
+            chunks.push(value);
+        }
+    }
+    finally {
+        reader.releaseLock();
+    }
+    const merged = new Uint8Array(total);
+    let offset = 0;
+    for (const c of chunks) {
+        merged.set(c, offset);
+        offset += c.byteLength;
+    }
+    return new TextDecoder().decode(merged);
+}
+export class NotionProvider {
+    kind = 'notion';
+    descriptor = NOTION_DESCRIPTOR;
+    normalizeConnection(input) {
+        const apiToken = input.apiToken?.trim();
+        if (!apiToken) {
+            throw new ValidationError('Notion requires an internal integration token');
+        }
+        return { credentials: { apiToken }, label: 'Notion workspace' };
+    }
+    parseRef(input) {
+        return notionLogic.parseNotionRef(input);
+    }
+    async fetchDocument(credentials, externalId) {
+        const page = await this.get(credentials, `/pages/${encodeURIComponent(externalId)}`);
+        if (!page.id) {
+            throw new NotionApiError(502, `Notion returned an unexpected body for page ${externalId}`);
+        }
+        const blocks = await this.fetchBlocks(credentials, page.id);
+        return {
+            externalId: page.id,
+            title: notionLogic.notionPageTitle(page.properties),
+            url: page.url ?? `https://www.notion.so/${page.id.replace(/-/g, '')}`,
+            body: notionLogic.notionBlocksToMarkdown(blocks),
+        };
+    }
+    async search(credentials, query) {
+        const res = await safeFetch(`${API_BASE}/search`, {
+            method: 'POST',
+            headers: {
+                authorization: `Bearer ${credentials.apiToken}`,
+                'notion-version': NOTION_VERSION,
+                accept: 'application/json',
+                'content-type': 'application/json',
+                'user-agent': USER_AGENT,
+            },
+            body: JSON.stringify({
+                query,
+                filter: { property: 'object', value: 'page' },
+                page_size: 20,
+            }),
+        });
+        if (!res.ok) {
+            const text = await readCappedText(res, MAX_RESPONSE_BYTES).catch(() => '');
+            throw new NotionApiError(res.status, `Notion search → ${res.status}: ${text.slice(0, 300)}`);
+        }
+        const text = await readCappedText(res, MAX_RESPONSE_BYTES);
+        const json = (() => {
+            try {
+                return JSON.parse(text);
+            }
+            catch {
+                return null;
+            }
+        })();
+        return notionLogic.parseNotionSearchResults(json);
+    }
+    /** Page through a page's top-level blocks (bounded), returning them in order. */
+    async fetchBlocks(credentials, pageId) {
+        const blocks = [];
+        let cursor;
+        for (let i = 0; i < MAX_BLOCK_PAGES; i++) {
+            const query = cursor
+                ? `?page_size=100&start_cursor=${encodeURIComponent(cursor)}`
+                : '?page_size=100';
+            const res = await this.get(credentials, `/blocks/${encodeURIComponent(pageId)}/children${query}`);
+            if (Array.isArray(res.results))
+                blocks.push(...res.results);
+            if (!res.has_more || !res.next_cursor)
+                break;
+            cursor = res.next_cursor;
+        }
+        return blocks;
+    }
+    async get(credentials, path) {
+        const url = `${API_BASE}${path}`;
+        const res = await safeFetch(url, {
+            method: 'GET',
+            headers: {
+                authorization: `Bearer ${credentials.apiToken}`,
+                'notion-version': NOTION_VERSION,
+                accept: 'application/json',
+                'user-agent': USER_AGENT,
+            },
+        });
+        if (!res.ok) {
+            const text = await readCappedText(res, MAX_RESPONSE_BYTES).catch(() => '');
+            throw new NotionApiError(res.status, `Notion GET ${url} → ${res.status}: ${text.slice(0, 300)}`);
+        }
+        const text = await readCappedText(res, MAX_RESPONSE_BYTES);
+        const json = (() => {
+            try {
+                return JSON.parse(text);
+            }
+            catch {
+                return null;
+            }
+        })();
+        if (json === null) {
+            throw new NotionApiError(502, `Notion returned an unparseable body for ${path}`);
+        }
+        return json;
+    }
+}
+//# sourceMappingURL=NotionProvider.js.map

package/dist/infrastructure/documents/NotionProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"NotionProvider.js","sourceRoot":"","sources":["../../../src/infrastructure/documents/NotionProvider.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,GAMhB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAA;AAE1E,iFAAiF;AACjF,iFAAiF;AACjF,+EAA+E;AAC/E,+DAA+D;AAC/D,kFAAkF;AAClF,wEAAwE;AACxE,qEAAqE;AAErE,MAAM,QAAQ,GAAG,2BAA2B,CAAA;AAC5C,MAAM,eAAe,GAAG,gBAAgB,CAAA;AACxC,MAAM,cAAc,GAAG,YAAY,CAAA;AACnC,MAAM,UAAU,GAAG,aAAa,CAAA;AAChC,uFAAuF;AACvF,MAAM,eAAe,GAAG,CAAC,CAAA;AACzB,6EAA6E;AAC7E,MAAM,aAAa,GAAG,CAAC,CAAA;AACvB,gFAAgF;AAChF,MAAM,kBAAkB,GAAG,SAAS,CAAA;AAEpC,yEAAyE;AACzE,MAAM,OAAO,cAAe,SAAQ,KAAK;IAE5B,MAAM;IADjB,YACW,MAAc,EACvB,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAA;sBAHL,MAAM;QAIf,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAA;IAC9B,CAAC;CACF;AAED;;;;;GAKG;AACH,SAAS,mBAAmB,CAAC,GAAW;IACtC,IAAI,MAAW,CAAA;IACf,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAA;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,cAAc,CAAC,GAAG,EAAE,kCAAkC,GAAG,EAAE,CAAC,CAAA;IACxE,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACjC,MAAM,IAAI,cAAc,CAAC,GAAG,EAAE,+BAA+B,CAAC,CAAA;IAChE,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,eAAe,EAAE,CAAC;QACtD,MAAM,IAAI,cAAc,CAAC,GAAG,EAAE,yCAAyC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAA;IAC3F,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,SAAS,CAAC,GAAW,EAAE,IAAiB;IACrD,IAAI,OAAO,GAAG,GAAG,CAAA;IACjB,KAAK,IAAI,GAAG,GAAG,CAAC,GAAI,GAAG,EAAE,EAAE,CAAC;QAC1B,mBAAmB,CAAC,OAAO,CAAC,CAAA;QAC5B,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAA;QACjE,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YAC1C,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;YAC5C,IAAI,CAAC,QAAQ;gBAAE,OAAO,GAAG,CAAA;YACzB,IAAI,GAAG,IAAI,aAAa,EAAE,CAAC;gBACzB,MAAM,IAAI,cAAc,CAAC,GAAG,EAAE,oCAAoC,CAAC,CAAA;YACrE,CAAC;YACD,OAAO,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAA;YAC/C,SAAQ;QACV,CAAC;QACD,OAAO,GAAG,CAAA;IACZ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,cAAc,CAAC,GAAa,EAAE,QAAgB;IAC3D,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAA;IAClD,IAAI,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,QAAQ,EAAE,CAAC;QAC5C,MAAM,IAAI,cAAc,CAAC,GAAG,EAAE,2BAA2B,CAAC,CAAA;IAC5D,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAA;IACrB,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAA;IACpB,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAA;IAC/B,MAAM,MAAM,GAAiB,EAAE,CAAA;IAC/B,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,IAAI,CAAC;QACH,SAAS,CAAC;YACR,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAA;YAC3C,IAAI,IAAI;gBAAE,MAAK;YACf,IAAI,CAAC,KAAK;gBAAE,SAAQ;YACpB,KAAK,IAAI,KAAK,CAAC,UAAU,CAAA;YACzB,IAAI,KAAK,GAAG,QAAQ,EAAE,CAAC;gBACrB,MAAM,MAAM,CAAC,MAAM,EAAE,CAAA;gBACrB,MAAM,IAAI,cAAc,CAAC,GAAG,EAAE,2BAA2B,CAAC,CAAA;YAC5D,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACpB,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,WAAW,EAAE,CAAA;IACtB,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAA;IACpC,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAA;QACrB,MAAM,IAAI,CAAC,CAAC,UAAU,CAAA;IACxB,CAAC;IACD,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;AACzC,CAAC;AAcD,MAAM,OAAO,cAAc;IAChB,IAAI,GAAG,QAAiB,CAAA;IACxB,UAAU,GAAG,iBAAiB,CAAA;IAEvC,mBAAmB,CAAC,KAA0B;QAC5C,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAA;QACvC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,eAAe,CAAC,+CAA+C,CAAC,CAAA;QAC5E,CAAC;QACD,OAAO,EAAE,WAAW,EAAE,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAA;IACjE,CAAC;IAED,QAAQ,CAAC,KAAa;QACpB,OAAO,WAAW,CAAC,cAAc,CAAC,KAAK,CAAC,CAAA;IAC1C,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,WAAgC,EAChC,UAAkB;QAElB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,CACzB,WAAW,EACX,UAAU,kBAAkB,CAAC,UAAU,CAAC,EAAE,CAC3C,CAAA;QACD,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,MAAM,IAAI,cAAc,CAAC,GAAG,EAAE,+CAA+C,UAAU,EAAE,CAAC,CAAA;QAC5F,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC,CAAA;QAC3D,OAAO;YACL,UAAU,EAAE,IAAI,CAAC,EAAE;YACnB,KAAK,EAAE,WAAW,CAAC,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC;YACnD,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,yBAAyB,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE;YACrE,IAAI,EAAE,WAAW,CAAC,sBAAsB,CAAC,MAAM,CAAC;SACjD,CAAA;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,WAAgC,EAAE,KAAa;QAC1D,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,QAAQ,SAAS,EAAE;YAChD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,WAAW,CAAC,QAAQ,EAAE;gBAC/C,gBAAgB,EAAE,cAAc;gBAChC,MAAM,EAAE,kBAAkB;gBAC1B,cAAc,EAAE,kBAAkB;gBAClC,YAAY,EAAE,UAAU;aACzB;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,KAAK;gBACL,MAAM,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE;gBAC7C,SAAS,EAAE,EAAE;aACd,CAAC;SACH,CAAC,CAAA;QACF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAA;YAC1E,MAAM,IAAI,cAAc,CAAC,GAAG,CAAC,MAAM,EAAE,mBAAmB,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAA;QAC9F,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAA;QAC1D,MAAM,IAAI,GAAG,CAAC,GAAG,EAAE;YACjB,IAAI,CAAC;gBACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;YACzB,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAA;YACb,CAAC;QACH,CAAC,CAAC,EAAE,CAAA;QACJ,OAAO,WAAW,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAA;IACnD,CAAC;IAED,iFAAiF;IACzE,KAAK,CAAC,WAAW,CACvB,WAAgC,EAChC,MAAc;QAEd,MAAM,MAAM,GAA8B,EAAE,CAAA;QAC5C,IAAI,MAA0B,CAAA;QAC9B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,eAAe,EAAE,CAAC,EAAE,EAAE,CAAC;YACzC,MAAM,KAAK,GAAG,MAAM;gBAClB,CAAC,CAAC,+BAA+B,kBAAkB,CAAC,MAAM,CAAC,EAAE;gBAC7D,CAAC,CAAC,gBAAgB,CAAA;YACpB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CACxB,WAAW,EACX,WAAW,kBAAkB,CAAC,MAAM,CAAC,YAAY,KAAK,EAAE,CACzD,CAAA;YACD,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,CAAA;YAC3D,IAAI,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,GAAG,CAAC,WAAW;gBAAE,MAAK;YAC5C,MAAM,GAAG,GAAG,CAAC,WAAW,CAAA;QAC1B,CAAC;QACD,OAAO,MAAM,CAAA;IACf,CAAC;IAEO,KAAK,CAAC,GAAG,CAAI,WAAgC,EAAE,IAAY;QACjE,MAAM,GAAG,GAAG,GAAG,QAAQ,GAAG,IAAI,EAAE,CAAA;QAChC,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE;YAC/B,MAAM,EAAE,KAAK;YACb,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,WAAW,CAAC,QAAQ,EAAE;gBAC/C,gBAAgB,EAAE,cAAc;gBAChC,MAAM,EAAE,kBAAkB;gBAC1B,YAAY,EAAE,UAAU;aACzB;SACF,CAAC,CAAA;QACF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAA;YAC1E,MAAM,IAAI,cAAc,CACtB,GAAG,CAAC,MAAM,EACV,cAAc,GAAG,MAAM,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAC3D,CAAA;QACH,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAA;QAC1D,MAAM,IAAI,GAAG,CAAC,GAAG,EAAE;YACjB,IAAI,CAAC;gBACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAM,CAAA;YAC9B,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAA;YACb,CAAC;QACH,CAAC,CAAC,EAAE,CAAA;QACJ,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,MAAM,IAAI,cAAc,CAAC,GAAG,EAAE,2CAA2C,IAAI,EAAE,CAAC,CAAA;QAClF,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;CACF"}

package/dist/infrastructure/durable-objects/WorkspaceEventsHub.d.ts

@@ -0,0 +1,20 @@
+import { DurableObject } from 'cloudflare:workers';
+import type { Env } from '../env';
+/**
+ * Per-workspace pub/sub hub. Addressed by `idFromName(workspaceId)`, so every
+ * subscriber and every publish for a workspace converge on one instance.
+ *
+ * Uses the WebSocket Hibernation API (`ctx.acceptWebSocket` + the
+ * `webSocketMessage`/`webSocketClose`/`webSocketError` methods + `getWebSockets`):
+ * accepted sockets survive the DO being evicted from memory, so an idle workspace
+ * costs nothing. The handlers must be METHODS (not `addEventListener` closures)
+ * precisely because hibernation reconstructs the instance to deliver an event.
+ */
+export declare class WorkspaceEventsHub extends DurableObject<Env> {
+    constructor(ctx: DurableObjectState, env: Env);
+    fetch(request: Request): Promise<Response>;
+    webSocketMessage(): Promise<void>;
+    webSocketClose(ws: WebSocket, code: number, reason: string): Promise<void>;
+    webSocketError(): Promise<void>;
+}
+//# sourceMappingURL=WorkspaceEventsHub.d.ts.map

package/dist/infrastructure/durable-objects/WorkspaceEventsHub.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"WorkspaceEventsHub.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/durable-objects/WorkspaceEventsHub.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAClD,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,QAAQ,CAAA;AAEjC;;;;;;;;;GASG;AACH,qBAAa,kBAAmB,SAAQ,aAAa,CAAC,GAAG,CAAC;IACxD,YAAY,GAAG,EAAE,kBAAkB,EAAE,GAAG,EAAE,GAAG,EAK5C;IAEc,KAAK,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CA4BxD;IAIc,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC,CAE/C;IAEc,cAAc,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAMxF;IAEc,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC,CAE7C;CACF"}