@cat-factory/worker 0.6.0

package/dist/infrastructure/durable-objects/WorkspaceEventsHub.js

@@ -0,0 +1,62 @@
+import { DurableObject } from 'cloudflare:workers';
+/**
+ * Per-workspace pub/sub hub. Addressed by `idFromName(workspaceId)`, so every
+ * subscriber and every publish for a workspace converge on one instance.
+ *
+ * Uses the WebSocket Hibernation API (`ctx.acceptWebSocket` + the
+ * `webSocketMessage`/`webSocketClose`/`webSocketError` methods + `getWebSockets`):
+ * accepted sockets survive the DO being evicted from memory, so an idle workspace
+ * costs nothing. The handlers must be METHODS (not `addEventListener` closures)
+ * precisely because hibernation reconstructs the instance to deliver an event.
+ */
+export class WorkspaceEventsHub extends DurableObject {
+    constructor(ctx, env) {
+        super(ctx, env);
+        // Answer client "ping" frames with "pong" at the edge, without waking the DO —
+        // so heartbeats keep the connection alive without billing or breaking hibernation.
+        ctx.setWebSocketAutoResponse(new WebSocketRequestResponsePair('ping', 'pong'));
+    }
+    async fetch(request) {
+        const url = new URL(request.url);
+        // Internal broadcast: fan a pre-serialised JSON event out to every socket.
+        if (request.method === 'POST' && url.pathname === '/publish') {
+            const body = await request.text();
+            for (const ws of this.ctx.getWebSockets()) {
+                try {
+                    ws.send(body);
+                }
+                catch {
+                    // Socket is mid-close; the close handler reaps it. Ignore.
+                }
+            }
+            return new Response(null, { status: 204 });
+        }
+        // WebSocket upgrade: accept the server end into the hibernatable set and hand
+        // the client end back as a 101 so it flows out through the Worker.
+        if (request.method === 'GET' && request.headers.get('Upgrade')?.toLowerCase() === 'websocket') {
+            const pair = new WebSocketPair();
+            const client = pair[0];
+            const server = pair[1];
+            // NOT server.accept() — that pins the DO in memory and disables hibernation.
+            this.ctx.acceptWebSocket(server);
+            return new Response(null, { status: 101, webSocket: client });
+        }
+        return new Response('expected a websocket upgrade or POST /publish', { status: 400 });
+    }
+    // ---- Hibernation handlers (must be class methods) ------------------------
+    async webSocketMessage() {
+        // Subscribers are receive-only; ignore inbound frames (ping/pong is auto-handled).
+    }
+    async webSocketClose(ws, code, reason) {
+        try {
+            ws.close(code, reason);
+        }
+        catch {
+            // Already closed.
+        }
+    }
+    async webSocketError() {
+        // The socket is dropped from getWebSockets() automatically; nothing to do.
+    }
+}
+//# sourceMappingURL=WorkspaceEventsHub.js.map

package/dist/infrastructure/durable-objects/WorkspaceEventsHub.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"WorkspaceEventsHub.js","sourceRoot":"","sources":["../../../src/infrastructure/durable-objects/WorkspaceEventsHub.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAGlD;;;;;;;;;GASG;AACH,MAAM,OAAO,kBAAmB,SAAQ,aAAkB;IACxD,YAAY,GAAuB,EAAE,GAAQ;QAC3C,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;QACf,+EAA+E;QAC/E,mFAAmF;QACnF,GAAG,CAAC,wBAAwB,CAAC,IAAI,4BAA4B,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;IAChF,CAAC;IAEQ,KAAK,CAAC,KAAK,CAAC,OAAgB;QACnC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAEhC,2EAA2E;QAC3E,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;YAC7D,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAA;YACjC,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,EAAE,CAAC;gBAC1C,IAAI,CAAC;oBACH,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;gBACf,CAAC;gBAAC,MAAM,CAAC;oBACP,2DAA2D;gBAC7D,CAAC;YACH,CAAC;YACD,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;QAC5C,CAAC;QAED,8EAA8E;QAC9E,mEAAmE;QACnE,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,KAAK,WAAW,EAAE,CAAC;YAC9F,MAAM,IAAI,GAAG,IAAI,aAAa,EAAE,CAAA;YAChC,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;YACtB,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;YACtB,6EAA6E;YAC7E,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,MAAM,CAAC,CAAA;YAChC,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAA;QAC/D,CAAC;QAED,OAAO,IAAI,QAAQ,CAAC,+CAA+C,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;IACvF,CAAC;IAED,6EAA6E;IAEpE,KAAK,CAAC,gBAAgB;QAC7B,mFAAmF;IACrF,CAAC;IAEQ,KAAK,CAAC,cAAc,CAAC,EAAa,EAAE,IAAY,EAAE,MAAc;QACvE,IAAI,CAAC;YACH,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;QACxB,CAAC;QAAC,MAAM,CAAC;YACP,kBAAkB;QACpB,CAAC;IACH,CAAC;IAEQ,KAAK,CAAC,cAAc;QAC3B,2EAA2E;IAC7E,CAAC;CACF"}

package/dist/infrastructure/env.d.ts

@@ -0,0 +1,370 @@
+import type { Ai, D1Database, DurableObjectNamespace, Queue, Workflow } from '@cloudflare/workers-types';
+import type { ExecutionContainer } from './containers/ExecutionContainer';
+import type { WorkspaceEventsHub } from './durable-objects/WorkspaceEventsHub';
+/** Message enqueued to bound the rate at which durable runs are started. */
+export interface ExecutionStartMessage {
+    workspaceId: string;
+    executionId: string;
+}
+/**
+ * Work enqueued on GITHUB_SYNC_QUEUE so the webhook endpoint can ack fast and
+ * apply projection updates asynchronously. A discriminated union: verified
+ * webhook deliveries, and targeted repo resyncs (from the cron reconciler / the
+ * on-demand resync endpoint).
+ */
+export type GitHubSyncMessage = {
+    kind: 'webhook';
+    eventName: string;
+    payload: unknown;
+} | {
+    kind: 'resync-repo';
+    workspaceId: string;
+    repoGithubId: number;
+};
+/** Bindings and vars available to the Worker (declared in wrangler.toml). */
+export interface Env {
+    DB: D1Database;
+    /** Cloudflare Workers AI binding (optional; used when provider = workers-ai). */
+    AI?: Ai;
+    /** Workflows binding that durably drives each run (the only execution path). */
+    EXECUTION_WORKFLOW?: Workflow;
+    /** Optional admission queue; its consumer creates the Workflow instance. */
+    EXECUTION_QUEUE?: Queue<ExecutionStartMessage>;
+    /**
+     * Workflows binding that durably drives each "bootstrap repo" run's poll loop
+     * (see BootstrapWorkflow). Without it a bootstrap still dispatches but isn't
+     * auto-driven — the cron sweep re-drives any job left running.
+     */
+    BOOTSTRAP_WORKFLOW?: Workflow;
+    /** How long a run may park on a human decision before expiring, e.g. "24h". */
+    DECISION_TIMEOUT?: string;
+    /**
+     * Durable driver poll cadence for async container jobs (a Workflows sleep
+     * duration, e.g. "15 seconds"). Default "15 seconds".
+     */
+    JOB_POLL_INTERVAL?: string;
+    /**
+     * Safety cap on how many times the driver polls one container job before
+     * failing the run (the container's own max-duration watchdog should fire
+     * first). Default 280 (≈70 min at the default 15s cadence).
+     */
+    JOB_MAX_POLLS?: string;
+    /**
+     * How many consecutive status-read failures the durable driver tolerates before
+     * giving up on a job (a busy container can briefly fail to answer a poll without
+     * the job itself having failed). Default 6.
+     */
+    JOB_POLL_FAILURE_TOLERANCE?: string;
+    /**
+     * Durable driver poll cadence for a `ci` step's GitHub check runs (a Workflows
+     * sleep duration). CI takes minutes, so coarser than the job poll. Default
+     * "30 seconds".
+     */
+    CI_POLL_INTERVAL?: string;
+    /**
+     * Safety cap on how many times the driver polls CI in one `checking` wait before
+     * giving up the gate. Default 120 (≈60 min at the default 30s cadence). The
+     * CI-fixer attempt budget is separate (per-task, on the merge preset).
+     */
+    CI_MAX_POLLS?: string;
+    /**
+     * Per-workspace WebSocket fan-out hub (Durable Object). Pushes execution/board
+     * changes to subscribed browsers in real time. When absent, the engine pushes
+     * nothing (clients still get state on connect / refresh).
+     */
+    WORKSPACE_EVENTS?: DurableObjectNamespace<WorkspaceEventsHub>;
+    /**
+     * Durable Object namespace backing per-run implementation containers. Each run
+     * addresses its own instance; the container runs the Pi coding-agent harness.
+     */
+    EXEC_CONTAINER?: DurableObjectNamespace<ExecutionContainer>;
+    /**
+     * Public origin of this Worker, e.g. https://cat-factory.example.workers.dev.
+     * Handed to the container so Pi can reach the LLM proxy at `${url}/v1`.
+     */
+    WORKER_PUBLIC_URL?: string;
+    /**
+     * Age ceiling (minutes) for the instance-level container reaper: the cron sweeper
+     * SIGKILLs any per-run container whose first dispatch is older than this. Default
+     * 90, hard-clamped to ≥75 so a misconfigured low value can't kill live work (the
+     * longest legitimate lifetime is ≈70 min). See config/execution.ts.
+     */
+    CONTAINER_MAX_AGE_MINUTES?: string;
+    AGENT_DEFAULT_PROVIDER?: string;
+    AGENT_DEFAULT_MODEL?: string;
+    AGENT_DEFAULT_TEMPERATURE?: string;
+    AGENT_MAX_OUTPUT_TOKENS?: string;
+    /** JSON: per-kind overrides, e.g. {"architect":{"provider":"openai","model":"gpt-4o"}}. */
+    AGENT_MODELS?: string;
+    /** Monthly token budget, in SPEND_CURRENCY. Default ~100. */
+    SPEND_MONTHLY_LIMIT?: string;
+    /** ISO 4217 currency for the budget and prices. Default 'EUR'. */
+    SPEND_CURRENCY?: string;
+    /**
+     * JSON map of `provider:model` (or bare `provider`) → per-1M-token price,
+     * e.g. {"openai:gpt-4o":{"inputPerMillion":2.3,"outputPerMillion":9.2}}.
+     * Merged over the built-in defaults.
+     */
+    SPEND_MODEL_PRICES?: string;
+    OPENAI_API_KEY?: string;
+    ANTHROPIC_API_KEY?: string;
+    /** Alibaba DashScope key (provider `qwen`; OpenAI-compatible endpoint). */
+    QWEN_API_KEY?: string;
+    /** DeepSeek API key (provider `deepseek`; OpenAI-compatible endpoint). */
+    DEEPSEEK_API_KEY?: string;
+    /** Moonshot AI key (provider `moonshot`, direct Kimi; OpenAI-compatible). */
+    MOONSHOT_API_KEY?: string;
+    QWEN_BASE_URL?: string;
+    DEEPSEEK_BASE_URL?: string;
+    MOONSHOT_BASE_URL?: string;
+    OPENAI_BASE_URL?: string;
+    OPENROUTER_BASE_URL?: string;
+    LITELLM_BASE_URL?: string;
+    /** Truthy (`true`/`1`/`yes`) enables provider web search for the inline design/research kinds. */
+    INLINE_WEB_SEARCH_ENABLED?: string;
+    /**
+     * Truthy (`true`/`1`/`yes`) enables the optional consensus-orchestration mechanism:
+     * the consensus capability traits are registered (so the pipeline builder offers
+     * "Enable Consensus" on eligible steps) and the agent executor is wrapped to run
+     * consensus-enabled steps through a multi-model process. Off ⇒ unchanged behaviour.
+     */
+    CONSENSUS_ENABLED?: string;
+    /** Comma-separated override of the default `architect,researcher` allow-list. */
+    INLINE_WEB_SEARCH_KINDS?: string;
+    /** Cap on provider web searches per inline run (Anthropic `maxUses`; default 5). */
+    INLINE_WEB_SEARCH_MAX_USES?: string;
+    /** Brave Search key — enables the container web-search proxy (the recommended path). */
+    WEB_SEARCH_BRAVE_API_KEY?: string;
+    /** A self-hosted SearXNG base URL the backend reverse-proxies to (alternative to Brave). */
+    WEB_SEARCH_SEARXNG_URL?: string;
+    /** Optional bearer for a SearXNG instance behind an auth proxy. */
+    WEB_SEARCH_SEARXNG_API_KEY?: string;
+    /** GitHub App id (numeric). Presence enables the integration. */
+    GITHUB_APP_ID?: string;
+    /** GitHub App slug, used to build the install URL. */
+    GITHUB_APP_SLUG?: string;
+    /** GitHub REST API base; defaults to https://api.github.com. */
+    GITHUB_API_BASE?: string;
+    /** Where to redirect the browser after a successful connect. */
+    GITHUB_SETUP_REDIRECT_URL?: string;
+    /** App private key in PKCS#8 PEM (secret). */
+    GITHUB_APP_PRIVATE_KEY?: string;
+    /** Webhook signing secret (secret). */
+    GITHUB_WEBHOOK_SECRET?: string;
+    /** Queue carrying webhook deliveries / resync jobs to the async consumer. */
+    GITHUB_SYNC_QUEUE?: Queue<GitHubSyncMessage>;
+    /** Workflow that performs durable full-repo backfills. */
+    GITHUB_BACKFILL_WORKFLOW?: Workflow;
+    /**
+     * Second GitHub App id carrying `Administration: write`. An org opts in by
+     * installing this App; workspaces bound to that installation can create repos
+     * directly. When unset, every installation runs on the restricted default App
+     * and repo creation stays the manual "create on GitHub" flow.
+     */
+    GITHUB_PRIVILEGED_APP_ID?: string;
+    /** Privileged App private key in PKCS#8 PEM (secret). */
+    GITHUB_PRIVILEGED_APP_PRIVATE_KEY?: string;
+    /** OAuth client id (a GitHub App's or a classic OAuth App's). Enables login. */
+    GITHUB_OAUTH_CLIENT_ID?: string;
+    /** OAuth client secret (secret). */
+    GITHUB_OAUTH_CLIENT_SECRET?: string;
+    /** OAuth host; defaults to https://github.com (override for GitHub Enterprise). */
+    GITHUB_OAUTH_BASE?: string;
+    /** HMAC secret used to sign session tokens + the OAuth state nonce (secret). */
+    AUTH_SESSION_SECRET?: string;
+    /** Session lifetime in hours; defaults to 168 (7 days). */
+    AUTH_SESSION_TTL_HOURS?: string;
+    /** Fixed post-login landing URL (the SPA). Recommended in production. */
+    AUTH_SUCCESS_REDIRECT_URL?: string;
+    /**
+     * Comma-separated allowlist of extra origins the post-login `redirect` query
+     * may target (e.g. a separately-hosted SPA). The request's own origin is
+     * always allowed; anything else is rejected to stop token-leaking redirects.
+     */
+    AUTH_ALLOWED_REDIRECT_ORIGINS?: string;
+    /** Override the OAuth redirect_uri when the public URL differs from the origin. */
+    AUTH_CALLBACK_URL?: string;
+    /**
+     * Comma-separated allowlist of GitHub logins permitted to sign in. Combined
+     * with AUTH_ALLOWED_ORGS as an OR allowlist. When BOTH are empty, sign-in is
+     * denied to everyone (fail closed) — an operator must name who may enter.
+     */
+    AUTH_ALLOWED_LOGINS?: string;
+    /**
+     * Comma-separated allowlist of GitHub organization logins whose members may
+     * sign in. A user is admitted when they belong to any listed org (membership
+     * is read from GitHub at login via the `read:org` scope, requested only when
+     * this is set). Combined with AUTH_ALLOWED_LOGINS as an OR allowlist; when
+     * BOTH are empty, sign-in is denied to everyone (fail closed).
+     */
+    AUTH_ALLOWED_ORGS?: string;
+    /**
+     * Local-dev/test ONLY escape hatch: set to 'true' to allow the API to run with
+     * auth unconfigured (open). It lives in `.dev.vars` (gitignored) and the test
+     * bindings, never in the deployed `wrangler.toml`. In production this is unset,
+     * so an unconfigured deployment fails closed instead of serving data openly.
+     */
+    AUTH_DEV_OPEN?: string;
+    /** Set 'true' to offer email/password signup + login (needs a strong session secret). */
+    AUTH_PASSWORD_ENABLED?: string;
+    /** Comma-separated email domains allowed to self-signup without an invite. */
+    AUTH_ALLOWED_EMAIL_DOMAINS?: string;
+    /** Google OAuth credentials (login-with-Google); both required to enable it. */
+    GOOGLE_OAUTH_CLIENT_ID?: string;
+    GOOGLE_OAUTH_CLIENT_SECRET?: string;
+    /** Explicit Google redirect_uri; derived from the request origin when unset. */
+    GOOGLE_OAUTH_REDIRECT_URL?: string;
+    /** Transactional email (invitations): opt-in flag + master key for the per-account API key. */
+    EMAIL_ENABLED?: string;
+    EMAIL_ENCRYPTION_KEY?: string;
+    /** Public SPA base URL the invite-accept link points at. */
+    APP_BASE_URL?: string;
+    /**
+     * Deployment environment marker (e.g. `production`, `staging`, `development`).
+     * When set to a production-like value, the AUTH_DEV_OPEN escape hatch is
+     * refused even if present — so a leaked dev flag can't re-open a deployed
+     * worker. Set `ENVIRONMENT = "production"` in the deployed wrangler.toml.
+     */
+    ENVIRONMENT?: string;
+    /**
+     * Comma-separated allowlist of browser Origins permitted by CORS (e.g. the
+     * SPA's origin, `https://app.example.com`). Each provisioning org sets its own
+     * frontend origin(s) here. A single `*` (or leaving this unset) allows any
+     * origin — safe because every route is bearer-gated and fails closed, but set
+     * it in production to harden. See `config/cors.ts` and `app.ts`.
+     */
+    CORS_ALLOWED_ORIGINS?: string;
+    /**
+     * Shared master key (base64, ≥32 bytes decoded; a secret) for encrypting every
+     * integration's per-workspace credentials at rest. ONE key backs them all: the
+     * cipher domain-separates per integration via its HKDF `info` tag, so document,
+     * task, environment and runner credentials never share a derived key. The always-on
+     * document/task integrations require it and FAIL config load without it; the opt-in
+     * environment/runner integrations need it (plus their enable flag) to assemble.
+     */
+    ENCRYPTION_KEY?: string;
+    /**
+     * Comma-separated allow-list of sources to register (e.g. `confluence,notion`).
+     * Defaults to all known sources when unset.
+     */
+    DOCUMENT_SOURCES?: string;
+    /**
+     * Doc → board planner: 'llm' (default) uses the configured agent model to
+     * extract structure; 'headings' forces the deterministic heading parser.
+     */
+    DOCUMENT_PLANNER?: string;
+    /**
+     * Comma-separated allow-list of sources to register (e.g. `jira`). Defaults to
+     * all known sources when unset.
+     */
+    TASK_SOURCES?: string;
+    /**
+     * Enables the environment provider integration ('true'). Per-workspace provider
+     * manifests and their (encrypted) secret bundles live in D1, not here. Secrets are
+     * sealed with the shared `ENCRYPTION_KEY`.
+     */
+    ENVIRONMENTS_ENABLED?: string;
+    /**
+     * Comma-separated hostnames exempt from the strict public-https URL guard, for a
+     * TRUSTED in-house adapter pointing at an internal env platform (a private/VPN host).
+     * Each entry matches exactly, or as a dot suffix when it starts with `.` (`.internal`).
+     */
+    ENVIRONMENTS_ALLOW_URL_HOSTS?: string;
+    /** `true` to permit `http` (not just `https`) for trusted env/provider URLs. */
+    ENVIRONMENTS_ALLOW_HTTP_URLS?: string;
+    /**
+     * Enables routing repo-operating coding jobs (`coder`, `mocker`, `playwright`)
+     * to a workspace's own container runner pool instead of Cloudflare Containers
+     * ('true'). Per-workspace pool manifests and their (encrypted) scheduler-API
+     * secret bundles live in D1, not here. A workspace with a registered pool uses
+     * it; workspaces without one fall back to the Cloudflare `EXEC_CONTAINER`
+     * binding. Container-based implementation is always on, so when no
+     * `EXEC_CONTAINER` binding is present a registered pool is the mandatory runner
+     * backend. Requires a configured GitHub App, WORKER_PUBLIC_URL and the session
+     * secret, exactly like the Cloudflare container path. Scheduler secrets are sealed
+     * with the shared `ENCRYPTION_KEY`.
+     */
+    RUNNERS_ENABLED?: string;
+    /** Comma-separated hostnames exempt from the strict public-https guard (see ENVIRONMENTS_ALLOW_URL_HOSTS). */
+    RUNNERS_ALLOW_URL_HOSTS?: string;
+    /** `true` to permit `http` for a trusted internal pool scheduler URL. */
+    RUNNERS_ALLOW_HTTP_URLS?: string;
+    /**
+     * Enables the Slack notification transport ('true'). The per-account bot token is
+     * sealed with the shared `ENCRYPTION_KEY`. The three `SLACK_*` OAuth vars are
+     * optional: when all present they enable the "Add to Slack" flow; otherwise an
+     * org connects by pasting a bot token.
+     */
+    SLACK_ENABLED?: string;
+    SLACK_CLIENT_ID?: string;
+    SLACK_CLIENT_SECRET?: string;
+    SLACK_REDIRECT_URL?: string;
+    /**
+     * Enables the Datadog post-release-health gate ('true'). The per-workspace API/app
+     * keys are sealed with the shared `ENCRYPTION_KEY` (datadog-scoped HKDF info). Off →
+     * the `post-release-health` gate is a pass-through.
+     */
+    DATADOG_ENABLED?: string;
+    /**
+     * Optional incident-enrichment credentials (deployment-level): on a regression the
+     * on-call investigation is posted onto an incident PagerDuty / incident.io ALREADY
+     * opened from the same monitors/SLOs (annotate, never re-alert).
+     */
+    PAGERDUTY_API_TOKEN?: string;
+    PAGERDUTY_FROM_EMAIL?: string;
+    INCIDENTIO_API_KEY?: string;
+    /**
+     * Enables the tenant-scoped prompt-fragment library ('true'). Fragments and
+     * repo-source linkages live in D1; no encryption key is needed (guidelines are
+     * not secrets and repo reads reuse the account's GitHub installation).
+     */
+    PROMPT_LIBRARY_ENABLED?: string;
+    /**
+     * Relevance selector mode: 'llm' asks the agent model to pick relevant
+     * fragments per run; 'deterministic' (default) matches on appliesTo + tags.
+     */
+    PROMPT_LIBRARY_SELECTOR?: string;
+    /**
+     * Whether the LLM observability sink records the complete prompts sent to the model
+     * ('false' to disable). Default true. When disabled the numeric telemetry (tokens,
+     * timing, finish reason, counts) is still captured, but the prompt body is stored
+     * empty — for deployments that must not retain (potentially sensitive) prompt text.
+     */
+    LLM_RECORD_PROMPTS?: string;
+    /**
+     * Opt-in flag for streaming LLM generations (and container tool spans) to Langfuse.
+     * Enabled only when 'true' AND both keys below are set. The sink uses Langfuse's
+     * fetch-based ingestion API, so it runs unchanged on the Worker runtime.
+     */
+    LANGFUSE_ENABLED?: string;
+    /** Langfuse public key (`pk-lf-…`). */
+    LANGFUSE_PUBLIC_KEY?: string;
+    /** Langfuse secret key (`sk-lf-…`); a Worker secret. */
+    LANGFUSE_SECRET_KEY?: string;
+    /** Langfuse host; defaults to Langfuse Cloud when unset. */
+    LANGFUSE_BASE_URL?: string;
+    /**
+     * Days of `token_usage` ledger history to keep. The spend budget only reads the
+     * current period, so this is generous by default for reporting. Default ~395
+     * (13 months, for year-over-year). 0 disables pruning.
+     */
+    TOKEN_USAGE_RETENTION_DAYS?: string;
+    /**
+     * Days of `github_rate_limits` telemetry to keep. Only recent headroom matters,
+     * so this is aggressive. Default 7. 0 disables pruning.
+     */
+    GITHUB_RATE_LIMIT_RETENTION_DAYS?: string;
+    /**
+     * Days of `github_commits` projection history to keep. Also bounds the initial
+     * backfill window so a large/monorepo connect can't insert full history in one
+     * step. Default 90. 0 disables pruning and backfills the full history.
+     */
+    GITHUB_COMMIT_RETENTION_DAYS?: string;
+    /**
+     * Days of `llm_call_metrics` (LLM observability) history to keep. Heavy — full
+     * per-call prompt/response — and only useful for recent debugging, so pruned
+     * aggressively. Default 3. 0 disables pruning.
+     */
+    LLM_CALL_METRICS_RETENTION_DAYS?: string;
+}
+//# sourceMappingURL=env.d.ts.map

package/dist/infrastructure/env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../src/infrastructure/env.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,EAAE,EACF,UAAU,EACV,sBAAsB,EACtB,KAAK,EACL,QAAQ,EACT,MAAM,2BAA2B,CAAA;AAClC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAA;AACzE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,sCAAsC,CAAA;AAE9E,4EAA4E;AAC5E,MAAM,WAAW,qBAAqB;IACpC,WAAW,EAAE,MAAM,CAAA;IACnB,WAAW,EAAE,MAAM,CAAA;CACpB;AAED;;;;;GAKG;AACH,MAAM,MAAM,iBAAiB,GACzB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,GACxD;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,CAAA;AAEtE,6EAA6E;AAC7E,MAAM,WAAW,GAAG;IAClB,EAAE,EAAE,UAAU,CAAA;IAEd,iFAAiF;IACjF,EAAE,CAAC,EAAE,EAAE,CAAA;IAGP,gFAAgF;IAChF,kBAAkB,CAAC,EAAE,QAAQ,CAAA;IAC7B,4EAA4E;IAC5E,eAAe,CAAC,EAAE,KAAK,CAAC,qBAAqB,CAAC,CAAA;IAC9C;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,QAAQ,CAAA;IAC7B,+EAA+E;IAC/E,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB;;;OAGG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB;;;;OAIG;IACH,0BAA0B,CAAC,EAAE,MAAM,CAAA;IACnC;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,sBAAsB,CAAC,kBAAkB,CAAC,CAAA;IAG7D;;;OAGG;IACH,cAAc,CAAC,EAAE,sBAAsB,CAAC,kBAAkB,CAAC,CAAA;IAC3D;;;OAGG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B;;;;;OAKG;IACH,yBAAyB,CAAC,EAAE,MAAM,CAAA;IAGlC,sBAAsB,CAAC,EAAE,MAAM,CAAA;IAC/B,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,yBAAyB,CAAC,EAAE,MAAM,CAAA;IAClC,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAChC,2FAA2F;IAC3F,YAAY,CAAC,EAAE,MAAM,CAAA;IAGrB,6DAA6D;IAC7D,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,kEAAkE;IAClE,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAG3B,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,2EAA2E;IAC3E,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,0EAA0E;IAC1E,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,6EAA6E;IAC7E,gBAAgB,CAAC,EAAE,MAAM,CAAA;IAIzB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,eAAe,CAAC,EAAE,MAAM,CAAA;IAGxB,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,gBAAgB,CAAC,EAAE,MAAM,CAAA;IAMzB,kGAAkG;IAClG,yBAAyB,CAAC,EAAE,MAAM,CAAA;IAClC;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,iFAAiF;IACjF,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAChC,oFAAoF;IACpF,0BAA0B,CAAC,EAAE,MAAM,CAAA;IAMnC,wFAAwF;IACxF,wBAAwB,CAAC,EAAE,MAAM,CAAA;IACjC,4FAA4F;IAC5F,sBAAsB,CAAC,EAAE,MAAM,CAAA;IAC/B,mEAAmE;IACnE,0BAA0B,CAAC,EAAE,MAAM,CAAA;IAGnC,iEAAiE;IACjE,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,sDAAsD;IACtD,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,gEAAgE;IAChE,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,gEAAgE;IAChE,yBAAyB,CAAC,EAAE,MAAM,CAAA;IAClC,8CAA8C;IAC9C,sBAAsB,CAAC,EAAE,MAAM,CAAA;IAC/B,uCAAuC;IACvC,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B,6EAA6E;IAC7E,iBAAiB,CAAC,EAAE,KAAK,CAAC,iBAAiB,CAAC,CAAA;IAC5C,0DAA0D;IAC1D,wBAAwB,CAAC,EAAE,QAAQ,CAAA;IAGnC;;;;;OAKG;IACH,wBAAwB,CAAC,EAAE,MAAM,CAAA;IACjC,yDAAyD;IACzD,iCAAiC,CAAC,EAAE,MAAM,CAAA;IAG1C,gFAAgF;IAChF,sBAAsB,CAAC,EAAE,MAAM,CAAA;IAC/B,oCAAoC;IACpC,0BAA0B,CAAC,EAAE,MAAM,CAAA;IACnC,mFAAmF;IACnF,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,gFAAgF;IAChF,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,2DAA2D;IAC3D,sBAAsB,CAAC,EAAE,MAAM,CAAA;IAC/B,yEAAyE;IACzE,yBAAyB,CAAC,EAAE,MAAM,CAAA;IAClC;;;;OAIG;IACH,6BAA6B,CAAC,EAAE,MAAM,CAAA;IACtC,mFAAmF;IACnF,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B;;;;OAIG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B;;;;;;OAMG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B;;;;;OAKG;IACH,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,yFAAyF;IACzF,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B,8EAA8E;IAC9E,0BAA0B,CAAC,EAAE,MAAM,CAAA;IACnC,gFAAgF;IAChF,sBAAsB,CAAC,EAAE,MAAM,CAAA;IAC/B,0BAA0B,CAAC,EAAE,MAAM,CAAA;IACnC,gFAAgF;IAChF,yBAAyB,CAAC,EAAE,MAAM,CAAA;IAClC,+FAA+F;IAC/F,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B,4DAA4D;IAC5D,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,CAAA;IAEpB;;;;;;OAMG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAE7B;;;;;;;OAOG;IACH,cAAc,CAAC,EAAE,MAAM,CAAA;IAGvB;;;OAGG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB;;;OAGG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAA;IAGzB;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAA;IAGrB;;;;OAIG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B;;;;OAIG;IACH,4BAA4B,CAAC,EAAE,MAAM,CAAA;IACrC,gFAAgF;IAChF,4BAA4B,CAAC,EAAE,MAAM,CAAA;IAGrC;;;;;;;;;;;OAWG;IACH,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,8GAA8G;IAC9G,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAChC,yEAAyE;IACzE,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAGhC;;;;;OAKG;IACH,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAG3B;;;;OAIG;IACH,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB;;;;OAIG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAG3B;;;;OAIG;IACH,sBAAsB,CAAC,EAAE,MAAM,CAAA;IAC/B;;;OAGG;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAGhC;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAG3B;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,uCAAuC;IACvC,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,wDAAwD;IACxD,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,4DAA4D;IAC5D,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAG1B;;;;OAIG;IACH,0BAA0B,CAAC,EAAE,MAAM,CAAA;IACnC;;;OAGG;IACH,gCAAgC,CAAC,EAAE,MAAM,CAAA;IACzC;;;;OAIG;IACH,4BAA4B,CAAC,EAAE,MAAM,CAAA;IACrC;;;;OAIG;IACH,+BAA+B,CAAC,EAAE,MAAM,CAAA;CACzC"}

package/dist/infrastructure/env.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=env.js.map

package/dist/infrastructure/env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.js","sourceRoot":"","sources":["../../src/infrastructure/env.ts"],"names":[],"mappings":""}

package/dist/infrastructure/environments/HttpEnvironmentProvider.d.ts

@@ -0,0 +1,27 @@
+import { type EnvironmentProvider, type EnvironmentStatusRequest, type EnvironmentTeardownRequest, type EnvironmentStatus, type ProvisionEnvironmentRequest, type ProvisionedEnvironment } from '@cat-factory/kernel';
+/** Carries the HTTP status so the API can surface a meaningful (redacted) error. */
+export declare class EnvironmentApiError extends Error {
+    readonly status: number;
+    constructor(status: number, message: string);
+}
+export interface HttpEnvironmentProviderOptions {
+    defaultTimeoutMs?: number;
+}
+export declare class HttpEnvironmentProvider implements EnvironmentProvider {
+    private readonly defaultTimeoutMs;
+    /** Per-isolate OAuth token cache, keyed by token URL + client id. */
+    private readonly oauthCache;
+    constructor(options?: HttpEnvironmentProviderOptions);
+    provision(req: ProvisionEnvironmentRequest): Promise<ProvisionedEnvironment>;
+    status(req: EnvironmentStatusRequest): Promise<ProvisionedEnvironment>;
+    teardown(req: EnvironmentTeardownRequest): Promise<{
+        status: EnvironmentStatus;
+    }>;
+    private execute;
+    private buildUrl;
+    private authHeaders;
+    private oauthToken;
+    private mapResponse;
+    private mapAccess;
+}
+//# sourceMappingURL=HttpEnvironmentProvider.d.ts.map

package/dist/infrastructure/environments/HttpEnvironmentProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"HttpEnvironmentProvider.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/environments/HttpEnvironmentProvider.ts"],"names":[],"mappings":"AAAA,OAAO,EAKL,KAAK,mBAAmB,EAExB,KAAK,wBAAwB,EAC7B,KAAK,0BAA0B,EAC/B,KAAK,iBAAiB,EACtB,KAAK,2BAA2B,EAEhC,KAAK,sBAAsB,EAE5B,MAAM,qBAAqB,CAAA;AAqB5B,oFAAoF;AACpF,qBAAa,mBAAoB,SAAQ,KAAK;IAE1C,QAAQ,CAAC,MAAM,EAAE,MAAM;IADzB,YACW,MAAM,EAAE,MAAM,EACvB,OAAO,EAAE,MAAM,EAIhB;CACF;AAqFD,MAAM,WAAW,8BAA8B;IAC7C,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAC1B;AAED,qBAAa,uBAAwB,YAAW,mBAAmB;IACjE,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAQ;IACzC,qEAAqE;IACrE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA0D;IAErF,YAAY,OAAO,GAAE,8BAAmC,EAEvD;IAEK,SAAS,CAAC,GAAG,EAAE,2BAA2B,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAajF;IAEK,MAAM,CAAC,GAAG,EAAE,wBAAwB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAwB3E;IAEK,QAAQ,CAAC,GAAG,EAAE,0BAA0B,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,iBAAiB,CAAA;KAAE,CAAC,CAatF;YAIa,OAAO;IAmDrB,OAAO,CAAC,QAAQ;YAoBF,WAAW;YAgCX,UAAU;IAsDxB,OAAO,CAAC,WAAW;IA4BnB,OAAO,CAAC,SAAS;CAiBlB"}