@codemation/host 0.6.0 → 0.8.0

package/dist/index.d.ts

@@ -1,23 +1,25 @@
-import "./index-BbBk26m0.js";
-import "./ItemsInputNormalizer-C-KHg9Mo.js";
-import { a as defineCodemationApp, i as FriendlyCodemationExecutionConfig, n as DefinePluginOptions, o as definePlugin, r as FriendlyCodemationDatabaseConfig, s as workflow, t as DefineCodemationAppOptions } from "./CodemationAuthoring.types-fBRppnmi.js";
-import { S as CodemationWorkflowDiscovery, _ as CodemationEngineExecutionLimitsConfig, a as AppPluginLoadSummary, b as CodemationSchedulerConfig, c as CodemationPluginContext, d as CodemationAppSchedulerConfig, f as CodemationAppSchedulerKind, g as CodemationDatabaseKind, h as CodemationDatabaseConfig, l as CodemationPluginPackageMetadata, m as CodemationConfig, n as CodemationRegistrationContextBase, o as CodemationPlugin, p as CodemationApplicationRuntimeConfig, r as AppConfig, s as CodemationPluginConfig, t as CodemationAppContext, u as CodemationAppDefinition, v as CodemationEventBusConfig, w as CodemationClassToken, x as CodemationSchedulerKind, y as CodemationEventBusKind } from "./CodemationAppContext-DRu1Dpri.js";
-import { a as CodemationAuthConfig, c as CodemationAuthOidcProviderConfig, i as CodemationLogRule, n as CodemationLogConfig, o as CodemationAuthKind, r as CodemationLogLevelName, s as CodemationAuthOAuthProviderConfig, t as CodemationWhitelabelConfig } from "./CodemationWhitelabelConfig-CWbcyQqn.js";
-import "./LogLevelPolicyFactory-CampWO0l.js";
-import { a as ApiPaths, i as CodemationFrontendAuthSnapshotJsonCodec, n as InternalAuthBootstrapJsonCodec, r as FrontendAppConfigJsonCodec, t as PublicFrontendBootstrapJsonCodec } from "./PublicFrontendBootstrapJsonCodec-Cl_DLRh0.js";
-import { a as CodemationFrontendAuthSnapshot, i as CodemationFrontendAuthProviderSnapshot, n as InternalAuthBootstrap, r as FrontendAppConfig, t as PublicFrontendBootstrap } from "./PublicFrontendBootstrap-DzBgwOnG.js";
-import "./CodemationConfigNormalizer-DVko3cVN.js";
-import { t as CodemationConsumerConfigLoader } from "./CodemationConsumerConfigLoader-DJWr86f-.js";
-import "./CredentialServices-UfvHB-rN.js";
-import "./CredentialContractsRegistry-DrMIDSw8.js";
-import "./TelemetryContracts-DbaNomrH.js";
-import "./WorkflowViewContracts-CzK2KFuz.js";
-import { a as CollectionSummaryDto, f as UpsertLocalBootstrapUserResultDto, i as CollectionRowDto, o as ListCollectionRowsResponseDto, p as UserAccountDto, s as SyncCollectionsResponseDto, t as CollectionDetailDto } from "./CollectionContracts.types-DdpHft0i.js";
-import { b as CommandBus, c as FrontendRuntime, g as AppContainerFactory, h as AppContainerLifecycle, m as DatabaseMigrations, n as CodemationBootstrapRequest, p as CollectionSchemaSyncerHolder, r as ApplicationTokens, s as WorkerRuntime, t as CodemationPluginListMerger, v as QueryBus, x as Command, y as Query } from "./CodemationPluginListMerger-DGc-jfa2.js";
-import { r as PrismaDatabaseClient, t as AppConfigFactory } from "./AppConfigFactory-YnveXE9k.js";
-import { t as CodemationPostgresPrismaClientFactory } from "./persistenceServer-vtJAGDat.js";
-import { c as CodemationServerGateway } from "./server-MUNGsBYK.js";
-import { i as CodemationFrontendAuthSnapshotFactory, n as InternalAuthBootstrapFactory, r as FrontendAppConfigFactory, t as PublicFrontendBootstrapFactory } from "./PublicFrontendBootstrapFactory-Cb2pLmDd.js";
+import "./index-DilAYwnH.js";
+import { $ as PersistedRunState, R as Items, tt as RunCurrentState } from "./ItemsInputNormalizer-_RwIfRIQ.js";
+import { a as defineCodemationApp, i as FriendlyCodemationExecutionConfig, n as DefinePluginOptions, o as definePlugin, r as FriendlyCodemationDatabaseConfig, s as workflow, t as DefineCodemationAppOptions } from "./CodemationAuthoring.types-DiKKogum.js";
+import { S as CodemationWorkflowDiscovery, _ as CodemationEngineExecutionLimitsConfig, a as AppPluginLoadSummary, b as CodemationSchedulerConfig, c as CodemationPluginContext, d as CodemationAppSchedulerConfig, f as CodemationAppSchedulerKind, g as CodemationDatabaseKind, h as CodemationDatabaseConfig, l as CodemationPluginPackageMetadata, m as CodemationConfig, n as CodemationRegistrationContextBase, o as CodemationPlugin, p as CodemationApplicationRuntimeConfig, r as AppConfig, s as CodemationPluginConfig, t as CodemationAppContext, u as CodemationAppDefinition, v as CodemationEventBusConfig, w as CodemationClassToken, x as CodemationSchedulerKind, y as CodemationEventBusKind } from "./CodemationAppContext-CGFYVcSb.js";
+import { a as CodemationAuthConfig, c as CodemationAuthOidcProviderConfig, i as CodemationLogRule, l as Logger, n as CodemationLogConfig, o as CodemationAuthKind, r as CodemationLogLevelName, s as CodemationAuthOAuthProviderConfig, t as CodemationWhitelabelConfig } from "./CodemationWhitelabelConfig-Ca2mCUeC.js";
+import "./LogLevelPolicyFactory-ewCHLDLn.js";
+import { a as ApiPaths, i as CodemationFrontendAuthSnapshotJsonCodec, n as InternalAuthBootstrapJsonCodec, r as FrontendAppConfigJsonCodec, t as PublicFrontendBootstrapJsonCodec } from "./PublicFrontendBootstrapJsonCodec-CXG9Dxft.js";
+import { a as CodemationFrontendAuthSnapshot, i as CodemationFrontendAuthProviderSnapshot, n as InternalAuthBootstrap, r as FrontendAppConfig, t as PublicFrontendBootstrap } from "./PublicFrontendBootstrap-Cev3qK46.js";
+import "./CodemationConfigNormalizer-48f-T66P.js";
+import { t as CodemationConsumerConfigLoader } from "./CodemationConsumerConfigLoader-_PIYqwVx.js";
+import "./CredentialServices-BLloBztI.js";
+import "./CredentialContractsRegistry-Bq2bq28t.js";
+import "./TelemetryContracts-BtDx84Cp.js";
+import "./WorkflowViewContracts-B7aFQcIw.js";
+import { a as CollectionSummaryDto, f as UpsertLocalBootstrapUserResultDto, i as CollectionRowDto, o as ListCollectionRowsResponseDto, p as UserAccountDto, s as SyncCollectionsResponseDto, t as CollectionDetailDto } from "./CollectionContracts.types-DDyFYT_D.js";
+import { C as Command, S as CommandBus, _ as AppContainerLifecycle, a as CodemationHonoApiApp, b as QueryBus, g as DatabaseMigrations, h as CollectionSchemaSyncerHolder, l as WorkerRuntime, n as CodemationBootstrapRequest, r as ApplicationTokens, t as CodemationPluginListMerger, u as FrontendRuntime, v as AppContainerFactory, x as Query, y as WorkflowWebsocketServer } from "./CodemationPluginListMerger-DP7djJ9S.js";
+import { r as PrismaDatabaseClient, t as AppConfigFactory } from "./AppConfigFactory-BT0y0LVC.js";
+import "./InternalHonoApiRouteRegistrar-c7t3KnV_.js";
+import { i as CodemationFrontendAuthSnapshotFactory, n as InternalAuthBootstrapFactory, r as FrontendAppConfigFactory, t as PublicFrontendBootstrapFactory } from "./PublicFrontendBootstrapFactory-Dv04tJ-6.js";
+import { n as CodemationPostgresPrismaClientFactory } from "./persistenceServer-B71RGvSj.js";
+import { c as CodemationServerGateway } from "./server-09PKasWR.js";
+import { Server } from "node:http";
 
 //#region src/application/queries/ListUserAccountsQuery.d.ts
 declare class ListUserAccountsQuery extends Query<ReadonlyArray<UserAccountDto>> {}
@@ -29,6 +31,82 @@ declare class UpsertLocalBootstrapUserCommand extends Command<UpsertLocalBootstr
   constructor(email: string, password: string);
 }
 //#endregion
+//#region src/bootstrap/perf/BootTimer.d.ts
+/**
+ * Lightweight boot-phase timer. Designed for diagnosing slow `pnpm dev` cold starts.
+ *
+ * Usage: every meaningful boot phase wraps its async work in
+ *   `await BootTimer.measureAsync("phase.name", async () => { ... })`
+ * (or the sync `measure` for non-async work). When `--trace-boot` is set on the CLI
+ * the timer records each phase in a tree, prints a pretty tree to stderr at the end
+ * of boot, and writes the same tree to `tmp/boot-trace.json` for diffing later.
+ *
+ * When disabled (default), every method is a near-zero-cost passthrough — no allocation,
+ * no Date.now() calls, no tree construction. Safe to leave instrumentation in production
+ * code paths.
+ */
+type BootTracePhase = Readonly<{
+  name: string;
+  ms: number;
+  pct: number;
+  children: ReadonlyArray<BootTracePhase>;
+}>;
+declare class BootTimer {
+  private static enabled;
+  private static root;
+  private static current;
+  /** Enable boot tracing for the lifetime of the current process. Idempotent. */
+  static enable(): void;
+  static isEnabled(): boolean;
+  /** Wrap an async phase. Pass-through when disabled. */
+  static measureAsync<T>(name: string, fn: () => Promise<T>): Promise<T>;
+  /** Wrap a sync phase. Pass-through when disabled. */
+  static measure<T>(name: string, fn: () => T): T;
+  /**
+   * Manual start/stop for fire-and-forget phases (e.g. a spawned child process you only
+   * stop once a readiness probe succeeds). Returns the stop function.
+   */
+  static start(name: string): () => void;
+  /** Print the tree to stderr and write JSON to the given path. Finalizes the root span. */
+  static finish(outputJsonPath?: string): Promise<void>;
+  /** Return a plain-object snapshot of the current tree (for tests / diffing). */
+  static snapshot(): BootTracePhase;
+  /** Test helper: reset all state. Do not call in production code. */
+  static reset(): void;
+  private static pushPhase;
+  private static popPhase;
+}
+//#endregion
+//#region src/presentation/websocket/WorkflowWebsocketServerFactory.d.ts
+declare class WorkflowWebsocketServerFactory {
+  create(appConfig: AppConfig): WorkflowWebsocketServer;
+}
+//#endregion
+//#region src/presentation/http/HeadlessHttpServerFactory.d.ts
+/**
+ * Creates a Node.js http.Server that bridges IncomingMessage to Hono's Fetch API.
+ * Used by {@link import("../../bootstrap/runtime/HeadlessApiRuntime").HeadlessApiRuntime}
+ * to serve the Hono API without Next.js.
+ */
+declare class HeadlessHttpServerFactory {
+  create(honoApp: CodemationHonoApiApp, port: number, logger: Logger): Server;
+}
+//#endregion
+//#region src/bootstrap/runtime/HeadlessApiRuntime.d.ts
+/**
+ * Boots the Codemation API + WebSocket servers without the Next.js UI process.
+ * Used by `codemation serve web --headless` for workspace pod containers where the
+ * UI is served externally (e.g. from the control-plane's customer-ui).
+ */
+declare class HeadlessApiRuntime {
+  private readonly appContainerFactory;
+  private readonly websocketServerFactory;
+  private readonly httpServerFactory;
+  private readonly logger;
+  constructor(appContainerFactory: AppContainerFactory, websocketServerFactory: WorkflowWebsocketServerFactory, httpServerFactory: HeadlessHttpServerFactory, logger: Logger);
+  start(appConfig: AppConfig): Promise<void>;
+}
+//#endregion
 //#region src/application/collections/ListCollectionsQuery.d.ts
 declare class ListCollectionsQuery extends Query<ReadonlyArray<CollectionSummaryDto>> {}
 //#endregion
@@ -84,10 +162,52 @@ declare class SyncCollectionsCommand extends Command<SyncCollectionsResponseDto>
   constructor(dryRun: boolean);
 }
 //#endregion
+//#region src/application/contracts/RunContracts.d.ts
+type CreateRunRequest = Readonly<{
+  workflowId?: string;
+  items?: Items;
+  synthesizeTriggerItems?: boolean;
+  currentState?: RunCurrentState;
+  startAt?: string;
+  stopAt?: string;
+  clearFromNodeId?: string;
+  mode?: "manual" | "debug";
+  sourceRunId?: string;
+}>;
+type RunCommandResult = Readonly<{
+  runId: string;
+  workflowId: string;
+  startedAt?: string;
+  status: string;
+  state: PersistedRunState | null;
+}>;
+//#endregion
+//#region src/application/commands/StartWorkflowRunCommand.d.ts
+declare class StartWorkflowRunCommand extends Command<RunCommandResult> {
+  readonly body: CreateRunRequest;
+  constructor(body: CreateRunRequest);
+}
+//#endregion
+//#region src/application/ApplicationRequestError.d.ts
+declare class ApplicationRequestError extends Error {
+  readonly status: number;
+  readonly payload: Readonly<{
+    error: string;
+    errors?: ReadonlyArray<string>;
+  }>;
+  constructor(status: number, message: string, errors?: ReadonlyArray<string>);
+}
+//#endregion
+//#region src/application/queries/GetRunStateQuery.d.ts
+declare class GetRunStateQuery extends Query<PersistedRunState | undefined> {
+  readonly runId: string;
+  constructor(runId: string);
+}
+//#endregion
 //#region src/presentation/config/CodemationPackageManifest.d.ts
 interface CodemationPackageManifest {
   readonly plugin?: string;
 }
 //#endregion
-export { ApiPaths, type AppConfig, AppConfigFactory, AppContainerFactory, AppContainerLifecycle, type AppPluginLoadSummary, ApplicationTokens, type CodemationAppContext, type CodemationAppDefinition, type CodemationAppSchedulerConfig, type CodemationAppSchedulerKind, type CodemationApplicationRuntimeConfig, type CodemationAuthConfig, type CodemationAuthKind, type CodemationAuthOAuthProviderConfig, type CodemationAuthOidcProviderConfig, CodemationBootstrapRequest, type CodemationClassToken, type CodemationConfig, CodemationConsumerConfigLoader, type CodemationDatabaseConfig, type CodemationDatabaseKind, type CodemationEngineExecutionLimitsConfig, type CodemationEventBusConfig, type CodemationEventBusKind, type CodemationFrontendAuthProviderSnapshot, type CodemationFrontendAuthSnapshot, CodemationFrontendAuthSnapshotFactory, CodemationFrontendAuthSnapshotJsonCodec, type CodemationLogConfig, type CodemationLogLevelName, type CodemationLogRule, type CodemationPackageManifest, type CodemationPlugin, type CodemationPluginConfig, type CodemationPluginContext, CodemationPluginListMerger, CodemationPluginPackageMetadata, CodemationPostgresPrismaClientFactory, type CodemationRegistrationContextBase, type CodemationSchedulerConfig, type CodemationSchedulerKind, CodemationServerGateway, type CodemationWhitelabelConfig, type CodemationWorkflowDiscovery, CollectionSchemaSyncerHolder, type CommandBus, DatabaseMigrations, type DefineCodemationAppOptions, type DefinePluginOptions, DeleteCollectionRowCommand, type FriendlyCodemationDatabaseConfig, type FriendlyCodemationExecutionConfig, type FrontendAppConfig, FrontendAppConfigFactory, FrontendAppConfigJsonCodec, FrontendRuntime, GetCollectionQuery, GetCollectionRowQuery, InsertCollectionRowCommand, type InternalAuthBootstrap, InternalAuthBootstrapFactory, InternalAuthBootstrapJsonCodec, ListCollectionRowsQuery, ListCollectionsQuery, ListUserAccountsQuery, type PrismaDatabaseClient as PrismaClient, type PublicFrontendBootstrap, PublicFrontendBootstrapFactory, PublicFrontendBootstrapJsonCodec, type QueryBus, SyncCollectionsCommand, UpdateCollectionRowCommand, UpsertLocalBootstrapUserCommand, type UpsertLocalBootstrapUserResultDto, WorkerRuntime, defineCodemationApp, definePlugin, workflow };
+export { ApiPaths, type AppConfig, AppConfigFactory, AppContainerFactory, AppContainerLifecycle, type AppPluginLoadSummary, ApplicationRequestError, ApplicationTokens, BootTimer, type BootTracePhase, type CodemationAppContext, type CodemationAppDefinition, type CodemationAppSchedulerConfig, type CodemationAppSchedulerKind, type CodemationApplicationRuntimeConfig, type CodemationAuthConfig, type CodemationAuthKind, type CodemationAuthOAuthProviderConfig, type CodemationAuthOidcProviderConfig, CodemationBootstrapRequest, type CodemationClassToken, type CodemationConfig, CodemationConsumerConfigLoader, type CodemationDatabaseConfig, type CodemationDatabaseKind, type CodemationEngineExecutionLimitsConfig, type CodemationEventBusConfig, type CodemationEventBusKind, type CodemationFrontendAuthProviderSnapshot, type CodemationFrontendAuthSnapshot, CodemationFrontendAuthSnapshotFactory, CodemationFrontendAuthSnapshotJsonCodec, type CodemationLogConfig, type CodemationLogLevelName, type CodemationLogRule, type CodemationPackageManifest, type CodemationPlugin, type CodemationPluginConfig, type CodemationPluginContext, CodemationPluginListMerger, CodemationPluginPackageMetadata, CodemationPostgresPrismaClientFactory, type CodemationRegistrationContextBase, type CodemationSchedulerConfig, type CodemationSchedulerKind, CodemationServerGateway, type CodemationWhitelabelConfig, type CodemationWorkflowDiscovery, CollectionSchemaSyncerHolder, type CommandBus, DatabaseMigrations, type DefineCodemationAppOptions, type DefinePluginOptions, DeleteCollectionRowCommand, type FriendlyCodemationDatabaseConfig, type FriendlyCodemationExecutionConfig, type FrontendAppConfig, FrontendAppConfigFactory, FrontendAppConfigJsonCodec, FrontendRuntime, GetCollectionQuery, GetCollectionRowQuery, GetRunStateQuery, HeadlessApiRuntime, HeadlessHttpServerFactory, InsertCollectionRowCommand, type InternalAuthBootstrap, InternalAuthBootstrapFactory, InternalAuthBootstrapJsonCodec, ListCollectionRowsQuery, ListCollectionsQuery, ListUserAccountsQuery, type PrismaDatabaseClient as PrismaClient, type PublicFrontendBootstrap, PublicFrontendBootstrapFactory, PublicFrontendBootstrapJsonCodec, type QueryBus, type RunCommandResult, StartWorkflowRunCommand, SyncCollectionsCommand, UpdateCollectionRowCommand, UpsertLocalBootstrapUserCommand, type UpsertLocalBootstrapUserResultDto, WorkerRuntime, WorkflowWebsocketServerFactory, defineCodemationApp, definePlugin, workflow };
 //# sourceMappingURL=index.d.ts.map

package/dist/index.js

@@ -1,18 +1,113 @@
-import { n as definePlugin, t as defineCodemationApp } from "./CodemationAuthoring.types-DZl-sJaM.js";
-import "./LogLevelPolicyFactory-DCUzIN6G.js";
-import { t as ApiPaths } from "./ApiPaths-CLTHphYZ.js";
-import { i as CodemationFrontendAuthSnapshotJsonCodec, n as InternalAuthBootstrapJsonCodec, r as FrontendAppConfigJsonCodec, t as PublicFrontendBootstrapJsonCodec } from "./PublicFrontendBootstrapJsonCodec-DzqvA0uo.js";
-import { t as CodemationConsumerConfigLoader } from "./CodemationConsumerConfigLoader-BeAUS144.js";
-import "./ServerLoggerFactory-BKSIh9Xv.js";
+import { n as definePlugin, t as defineCodemationApp } from "./CodemationAuthoring.types-BteaR3Dc.js";
+import { n as logLevelPolicyFactory } from "./LogLevelPolicyFactory-DCUzIN6G.js";
+import { t as ApiPaths } from "./ApiPaths-Dv1dcHu_.js";
+import { i as CodemationFrontendAuthSnapshotJsonCodec, n as InternalAuthBootstrapJsonCodec, r as FrontendAppConfigJsonCodec, t as PublicFrontendBootstrapJsonCodec } from "./PublicFrontendBootstrapJsonCodec-CegIF_ne.js";
+import { t as CodemationConsumerConfigLoader } from "./CodemationConsumerConfigLoader-By-6tuGc.js";
+import { o as BootTimer, t as ServerLoggerFactory } from "./ServerLoggerFactory-Ckk52S3w.js";
 import "./decorateParam-BWxkAUSj.js";
 import "./decorate-CXWmflG_.js";
-import { d as ApplicationTokens } from "./CredentialServices-CgxwguAv.js";
-import { D as CodemationFrontendAuthSnapshotFactory, E as FrontendAppConfigFactory, N as UpsertLocalBootstrapUserCommand, P as ListUserAccountsQuery, T as InternalAuthBootstrapFactory, a as GetCollectionQuery, c as InsertCollectionRowCommand, d as FrontendRuntime, f as CollectionSchemaSyncerHolder, i as GetCollectionRowQuery, l as DeleteCollectionRowCommand, m as AppContainerLifecycle, n as ListCollectionsQuery, o as UpdateCollectionRowCommand, p as DatabaseMigrations, r as ListCollectionRowsQuery, s as SyncCollectionsCommand, t as AppContainerFactory, u as WorkerRuntime, w as PublicFrontendBootstrapFactory } from "./AppContainerFactory-qaqc-R1D.js";
-import "./WorkflowPolicyUiPresentationFactory-DhPqQ9aB.js";
-import { n as CodemationPluginPackageMetadata, t as AppConfigFactory } from "./AppConfigFactory-C6q-CSKb.js";
-import { n as CodemationBootstrapRequest, t as CodemationPluginListMerger } from "./CodemationPluginListMerger-B-W5Fa_X.js";
-import { t as CodemationPostgresPrismaClientFactory } from "./persistenceServer-CmsIKnO9.js";
-import { r as CodemationServerGateway } from "./server-CJFfY67o.js";
+import { f as ApplicationRequestError, m as ApplicationTokens } from "./CredentialServices-Dk8yypeL.js";
+import "./CodemationTsyringeTypeInfoRegistrar-Bj6FJYFz.js";
+import { C as CodemationHonoApiApp, D as FrontendAppConfigFactory, E as InternalAuthBootstrapFactory, F as StartWorkflowRunCommand, I as UpsertLocalBootstrapUserCommand, L as ListUserAccountsQuery, N as GetRunStateQuery, O as CodemationFrontendAuthSnapshotFactory, T as PublicFrontendBootstrapFactory, a as GetCollectionQuery, c as InsertCollectionRowCommand, d as FrontendRuntime, f as CollectionSchemaSyncerHolder, i as GetCollectionRowQuery, k as WorkflowWebsocketServer, l as DeleteCollectionRowCommand, m as AppContainerLifecycle, n as ListCollectionsQuery, o as UpdateCollectionRowCommand, p as DatabaseMigrations, r as ListCollectionRowsQuery, s as SyncCollectionsCommand, t as AppContainerFactory, u as WorkerRuntime } from "./AppContainerFactory-DRTjG7nG.js";
+import "./WorkflowPolicyUiPresentationFactory-Bb-ae_Zh.js";
+import "./InternalPingRegistrar-DY3kSfxP.js";
+import { r as CodemationPluginPackageMetadata, t as AppConfigFactory } from "./AppConfigFactory-Cx4qQvRk.js";
+import { n as CodemationBootstrapRequest, t as CodemationPluginListMerger } from "./CodemationPluginListMerger-D1B1IEbt.js";
+import { t as CodemationPostgresPrismaClientFactory } from "./persistenceServer-C-hH4z6l.js";
+import { r as CodemationServerGateway } from "./server-vtRCPgRJ.js";
 import { workflow } from "@codemation/core-nodes";
+import { createServer } from "node:http";
 
-export { ApiPaths, AppConfigFactory, AppContainerFactory, AppContainerLifecycle, ApplicationTokens, CodemationBootstrapRequest, CodemationConsumerConfigLoader, CodemationFrontendAuthSnapshotFactory, CodemationFrontendAuthSnapshotJsonCodec, CodemationPluginListMerger, CodemationPluginPackageMetadata, CodemationPostgresPrismaClientFactory, CodemationServerGateway, CollectionSchemaSyncerHolder, DatabaseMigrations, DeleteCollectionRowCommand, FrontendAppConfigFactory, FrontendAppConfigJsonCodec, FrontendRuntime, GetCollectionQuery, GetCollectionRowQuery, InsertCollectionRowCommand, InternalAuthBootstrapFactory, InternalAuthBootstrapJsonCodec, ListCollectionRowsQuery, ListCollectionsQuery, ListUserAccountsQuery, PublicFrontendBootstrapFactory, PublicFrontendBootstrapJsonCodec, SyncCollectionsCommand, UpdateCollectionRowCommand, UpsertLocalBootstrapUserCommand, WorkerRuntime, defineCodemationApp, definePlugin, workflow };
+//#region src/bootstrap/runtime/HeadlessApiRuntime.ts
+/**
+* Boots the Codemation API + WebSocket servers without the Next.js UI process.
+* Used by `codemation serve web --headless` for workspace pod containers where the
+* UI is served externally (e.g. from the control-plane's customer-ui).
+*/
+var HeadlessApiRuntime = class {
+	constructor(appContainerFactory, websocketServerFactory, httpServerFactory, logger) {
+		this.appContainerFactory = appContainerFactory;
+		this.websocketServerFactory = websocketServerFactory;
+		this.httpServerFactory = httpServerFactory;
+		this.logger = logger;
+	}
+	async start(appConfig) {
+		const port = Number(appConfig.env.PORT ?? 4001);
+		this.logger.info(`Starting codemation headless API runtime`);
+		this.logger.info(`HTTP port: ${port}, WS port: ${appConfig.webSocketPort}`);
+		const websocketServer = this.websocketServerFactory.create(appConfig);
+		const container = await this.appContainerFactory.create({
+			appConfig,
+			sharedWorkflowWebsocketServer: websocketServer
+		});
+		await container.resolve(FrontendRuntime).start();
+		const honoApp = container.resolve(CodemationHonoApiApp);
+		const httpServer = this.httpServerFactory.create(honoApp, port, this.logger);
+		await new Promise((resolve) => {
+			httpServer.listen(port, () => {
+				this.logger.info(`codemation headless API listening on port ${port}`);
+				resolve();
+			});
+		});
+	}
+};
+
+//#endregion
+//#region src/presentation/websocket/WorkflowWebsocketServerFactory.ts
+const loggerFactory = new ServerLoggerFactory(logLevelPolicyFactory);
+var WorkflowWebsocketServerFactory = class {
+	create(appConfig) {
+		return new WorkflowWebsocketServer(appConfig.webSocketPort, appConfig.webSocketBindHost, loggerFactory.create("codemation-websocket.server"));
+	}
+};
+
+//#endregion
+//#region src/presentation/http/HeadlessHttpServerFactory.ts
+/**
+* Creates a Node.js http.Server that bridges IncomingMessage to Hono's Fetch API.
+* Used by {@link import("../../bootstrap/runtime/HeadlessApiRuntime").HeadlessApiRuntime}
+* to serve the Hono API without Next.js.
+*/
+var HeadlessHttpServerFactory = class {
+	create(honoApp, port, logger) {
+		return createServer((req, res) => {
+			const url = new URL(req.url ?? "/", `http://${req.headers.host ?? `127.0.0.1:${port}`}`);
+			const headers = new Headers();
+			for (const [key, value] of Object.entries(req.headers)) {
+				if (value === void 0) continue;
+				if (Array.isArray(value)) for (const v of value) headers.append(key, v);
+				else headers.set(key, value);
+			}
+			const chunks = [];
+			req.on("data", (chunk) => chunks.push(chunk));
+			req.on("end", () => {
+				const body = chunks.length > 0 ? Buffer.concat(chunks) : null;
+				const fetchRequest = new Request(url, {
+					method: req.method ?? "GET",
+					headers,
+					body: body?.byteLength ? body : void 0,
+					duplex: "half"
+				});
+				Promise.resolve(honoApp.fetch(fetchRequest)).then(async (fetchResponse) => {
+					const responseHeaders = {};
+					fetchResponse.headers.forEach((value, key) => {
+						responseHeaders[key] = value;
+					});
+					res.writeHead(fetchResponse.status, responseHeaders);
+					const responseBody = await fetchResponse.arrayBuffer();
+					res.end(Buffer.from(responseBody));
+				}).catch((err) => {
+					logger.error("Unhandled request error", err instanceof Error ? err : new Error(String(err)));
+					if (!res.headersSent) {
+						res.writeHead(500);
+						res.end("Internal server error");
+					}
+				});
+			});
+		});
+	}
+};
+
+//#endregion
+export { ApiPaths, AppConfigFactory, AppContainerFactory, AppContainerLifecycle, ApplicationRequestError, ApplicationTokens, BootTimer, CodemationBootstrapRequest, CodemationConsumerConfigLoader, CodemationFrontendAuthSnapshotFactory, CodemationFrontendAuthSnapshotJsonCodec, CodemationPluginListMerger, CodemationPluginPackageMetadata, CodemationPostgresPrismaClientFactory, CodemationServerGateway, CollectionSchemaSyncerHolder, DatabaseMigrations, DeleteCollectionRowCommand, FrontendAppConfigFactory, FrontendAppConfigJsonCodec, FrontendRuntime, GetCollectionQuery, GetCollectionRowQuery, GetRunStateQuery, HeadlessApiRuntime, HeadlessHttpServerFactory, InsertCollectionRowCommand, InternalAuthBootstrapFactory, InternalAuthBootstrapJsonCodec, ListCollectionRowsQuery, ListCollectionsQuery, ListUserAccountsQuery, PublicFrontendBootstrapFactory, PublicFrontendBootstrapJsonCodec, StartWorkflowRunCommand, SyncCollectionsCommand, UpdateCollectionRowCommand, UpsertLocalBootstrapUserCommand, WorkerRuntime, WorkflowWebsocketServerFactory, defineCodemationApp, definePlugin, workflow };
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","names":["appContainerFactory: AppContainerFactory","websocketServerFactory: WorkflowWebsocketServerFactory","httpServerFactory: HeadlessHttpServerFactory","logger: Logger","chunks: Buffer[]","responseHeaders: Record<string, string>"],"sources":["../src/bootstrap/runtime/HeadlessApiRuntime.ts","../src/presentation/websocket/WorkflowWebsocketServerFactory.ts","../src/presentation/http/HeadlessHttpServerFactory.ts"],"sourcesContent":["import type { AppConfig } from \"../../presentation/config/AppConfig\";\nimport type { AppContainerFactory } from \"../AppContainerFactory\";\nimport { FrontendRuntime } from \"./FrontendRuntime\";\nimport { CodemationHonoApiApp } from \"../../presentation/http/hono/CodemationHonoApiAppFactory\";\nimport type { WorkflowWebsocketServerFactory } from \"../../presentation/websocket/WorkflowWebsocketServerFactory\";\nimport type { HeadlessHttpServerFactory } from \"../../presentation/http/HeadlessHttpServerFactory\";\nimport type { Logger } from \"../../application/logging/Logger\";\n\n/**\n * Boots the Codemation API + WebSocket servers without the Next.js UI process.\n * Used by `codemation serve web --headless` for workspace pod containers where the\n * UI is served externally (e.g. from the control-plane's customer-ui).\n */\nexport class HeadlessApiRuntime {\n  constructor(\n    private readonly appContainerFactory: AppContainerFactory,\n    private readonly websocketServerFactory: WorkflowWebsocketServerFactory,\n    private readonly httpServerFactory: HeadlessHttpServerFactory,\n    private readonly logger: Logger,\n  ) {}\n\n  async start(appConfig: AppConfig): Promise<void> {\n    const port = Number(appConfig.env.PORT ?? 4001);\n\n    this.logger.info(`Starting codemation headless API runtime`);\n    this.logger.info(`HTTP port: ${port}, WS port: ${appConfig.webSocketPort}`);\n\n    const websocketServer = this.websocketServerFactory.create(appConfig);\n\n    const container = await this.appContainerFactory.create({\n      appConfig,\n      sharedWorkflowWebsocketServer: websocketServer,\n    });\n\n    await container.resolve(FrontendRuntime).start();\n\n    const honoApp = container.resolve(CodemationHonoApiApp);\n    const httpServer = this.httpServerFactory.create(honoApp, port, this.logger);\n\n    await new Promise<void>((resolve) => {\n      httpServer.listen(port, () => {\n        this.logger.info(`codemation headless API listening on port ${port}`);\n        resolve();\n      });\n    });\n  }\n}\n","import type { AppConfig } from \"../config/AppConfig\";\nimport { WorkflowWebsocketServer } from \"./WorkflowWebsocketServer\";\nimport { logLevelPolicyFactory } from \"../../infrastructure/logging/LogLevelPolicyFactory\";\nimport { ServerLoggerFactory } from \"../../infrastructure/logging/ServerLoggerFactory\";\n\nconst loggerFactory = new ServerLoggerFactory(logLevelPolicyFactory);\n\nexport class WorkflowWebsocketServerFactory {\n  create(appConfig: AppConfig): WorkflowWebsocketServer {\n    return new WorkflowWebsocketServer(\n      appConfig.webSocketPort,\n      appConfig.webSocketBindHost,\n      loggerFactory.create(\"codemation-websocket.server\"),\n    );\n  }\n}\n","import { createServer, type Server } from \"node:http\";\nimport type { Logger } from \"../../application/logging/Logger\";\nimport type { CodemationHonoApiApp } from \"./hono/CodemationHonoApiAppFactory\";\n\n/**\n * Creates a Node.js http.Server that bridges IncomingMessage to Hono's Fetch API.\n * Used by {@link import(\"../../bootstrap/runtime/HeadlessApiRuntime\").HeadlessApiRuntime}\n * to serve the Hono API without Next.js.\n */\nexport class HeadlessHttpServerFactory {\n  create(honoApp: CodemationHonoApiApp, port: number, logger: Logger): Server {\n    return createServer((req, res) => {\n      const url = new URL(req.url ?? \"/\", `http://${req.headers.host ?? `127.0.0.1:${port}`}`);\n      const headers = new Headers();\n      for (const [key, value] of Object.entries(req.headers)) {\n        if (value === undefined) continue;\n        if (Array.isArray(value)) {\n          for (const v of value) headers.append(key, v);\n        } else {\n          headers.set(key, value);\n        }\n      }\n      const chunks: Buffer[] = [];\n      req.on(\"data\", (chunk: Buffer) => chunks.push(chunk));\n      req.on(\"end\", () => {\n        // eslint-disable-next-line codemation/no-buffer-everything -- node:http bridge; no streaming alternative when adapting IncomingMessage to Fetch API Request\n        const body = chunks.length > 0 ? Buffer.concat(chunks) : null;\n        const fetchRequest = new Request(url, {\n          method: req.method ?? \"GET\",\n          headers,\n          body: body?.byteLength ? body : undefined,\n          // @ts-expect-error — Node's Request needs duplex for streaming; required in some runtimes\n          duplex: \"half\",\n        });\n        Promise.resolve(honoApp.fetch(fetchRequest))\n          .then(async (fetchResponse: Response) => {\n            const responseHeaders: Record<string, string> = {};\n            fetchResponse.headers.forEach((value, key) => {\n              responseHeaders[key] = value;\n            });\n            res.writeHead(fetchResponse.status, responseHeaders);\n            // eslint-disable-next-line codemation/no-buffer-everything -- node:http bridge; Hono Fetch Response must be fully buffered to write to ServerResponse\n            const responseBody = await fetchResponse.arrayBuffer();\n            res.end(Buffer.from(responseBody));\n          })\n          .catch((err: unknown) => {\n            logger.error(\"Unhandled request error\", err instanceof Error ? err : new Error(String(err)));\n            if (!res.headersSent) {\n              res.writeHead(500);\n              res.end(\"Internal server error\");\n            }\n          });\n      });\n    });\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAaA,IAAa,qBAAb,MAAgC;CAC9B,YACE,AAAiBA,qBACjB,AAAiBC,wBACjB,AAAiBC,mBACjB,AAAiBC,QACjB;EAJiB;EACA;EACA;EACA;;CAGnB,MAAM,MAAM,WAAqC;EAC/C,MAAM,OAAO,OAAO,UAAU,IAAI,QAAQ,KAAK;AAE/C,OAAK,OAAO,KAAK,2CAA2C;AAC5D,OAAK,OAAO,KAAK,cAAc,KAAK,aAAa,UAAU,gBAAgB;EAE3E,MAAM,kBAAkB,KAAK,uBAAuB,OAAO,UAAU;EAErE,MAAM,YAAY,MAAM,KAAK,oBAAoB,OAAO;GACtD;GACA,+BAA+B;GAChC,CAAC;AAEF,QAAM,UAAU,QAAQ,gBAAgB,CAAC,OAAO;EAEhD,MAAM,UAAU,UAAU,QAAQ,qBAAqB;EACvD,MAAM,aAAa,KAAK,kBAAkB,OAAO,SAAS,MAAM,KAAK,OAAO;AAE5E,QAAM,IAAI,SAAe,YAAY;AACnC,cAAW,OAAO,YAAY;AAC5B,SAAK,OAAO,KAAK,6CAA6C,OAAO;AACrE,aAAS;KACT;IACF;;;;;;ACvCN,MAAM,gBAAgB,IAAI,oBAAoB,sBAAsB;AAEpE,IAAa,iCAAb,MAA4C;CAC1C,OAAO,WAA+C;AACpD,SAAO,IAAI,wBACT,UAAU,eACV,UAAU,mBACV,cAAc,OAAO,8BAA8B,CACpD;;;;;;;;;;;ACJL,IAAa,4BAAb,MAAuC;CACrC,OAAO,SAA+B,MAAc,QAAwB;AAC1E,SAAO,cAAc,KAAK,QAAQ;GAChC,MAAM,MAAM,IAAI,IAAI,IAAI,OAAO,KAAK,UAAU,IAAI,QAAQ,QAAQ,aAAa,SAAS;GACxF,MAAM,UAAU,IAAI,SAAS;AAC7B,QAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,IAAI,QAAQ,EAAE;AACtD,QAAI,UAAU,OAAW;AACzB,QAAI,MAAM,QAAQ,MAAM,CACtB,MAAK,MAAM,KAAK,MAAO,SAAQ,OAAO,KAAK,EAAE;QAE7C,SAAQ,IAAI,KAAK,MAAM;;GAG3B,MAAMC,SAAmB,EAAE;AAC3B,OAAI,GAAG,SAAS,UAAkB,OAAO,KAAK,MAAM,CAAC;AACrD,OAAI,GAAG,aAAa;IAElB,MAAM,OAAO,OAAO,SAAS,IAAI,OAAO,OAAO,OAAO,GAAG;IACzD,MAAM,eAAe,IAAI,QAAQ,KAAK;KACpC,QAAQ,IAAI,UAAU;KACtB;KACA,MAAM,MAAM,aAAa,OAAO;KAEhC,QAAQ;KACT,CAAC;AACF,YAAQ,QAAQ,QAAQ,MAAM,aAAa,CAAC,CACzC,KAAK,OAAO,kBAA4B;KACvC,MAAMC,kBAA0C,EAAE;AAClD,mBAAc,QAAQ,SAAS,OAAO,QAAQ;AAC5C,sBAAgB,OAAO;OACvB;AACF,SAAI,UAAU,cAAc,QAAQ,gBAAgB;KAEpD,MAAM,eAAe,MAAM,cAAc,aAAa;AACtD,SAAI,IAAI,OAAO,KAAK,aAAa,CAAC;MAClC,CACD,OAAO,QAAiB;AACvB,YAAO,MAAM,2BAA2B,eAAe,QAAQ,MAAM,IAAI,MAAM,OAAO,IAAI,CAAC,CAAC;AAC5F,SAAI,CAAC,IAAI,aAAa;AACpB,UAAI,UAAU,IAAI;AAClB,UAAI,IAAI,wBAAwB;;MAElC;KACJ;IACF"}

package/dist/mapping.d.ts

@@ -1,3 +1,3 @@
-import "./ItemsInputNormalizer-C-KHg9Mo.js";
-import { t as WorkflowPolicyUiPresentationFactory } from "./WorkflowPolicyUiPresentationFactory-DQEY-h_S.js";
+import "./ItemsInputNormalizer-_RwIfRIQ.js";
+import { t as WorkflowPolicyUiPresentationFactory } from "./WorkflowPolicyUiPresentationFactory-6MyjCvBO.js";
 export { WorkflowPolicyUiPresentationFactory };

package/dist/mapping.js

@@ -1,3 +1,3 @@
-import { t as WorkflowPolicyUiPresentationFactory } from "./WorkflowPolicyUiPresentationFactory-DhPqQ9aB.js";
+import { t as WorkflowPolicyUiPresentationFactory } from "./WorkflowPolicyUiPresentationFactory-Bb-ae_Zh.js";
 
 export { WorkflowPolicyUiPresentationFactory };

package/dist/nextServer.d.ts

@@ -1,19 +1,20 @@
-import { t as RunIntentService } from "./index-BbBk26m0.js";
-import { Ct as CredentialTypeDefinition, E as WebhookInvocationMatch, F as BinaryAttachment, G as RunIdFactory, I as Item, J as WorkflowDefinition, P as ActivationIdFactory, _t as CredentialOAuth2AuthDefinition, o as BinaryStorage, w as WorkflowActivationPolicy } from "./ItemsInputNormalizer-C-KHg9Mo.js";
-import { r as AppConfig } from "./CodemationAppContext-DRu1Dpri.js";
-import { l as Logger, u as LoggerFactory } from "./CodemationWhitelabelConfig-CWbcyQqn.js";
-import { n as logLevelPolicyFactory, t as LogLevelPolicyFactory } from "./LogLevelPolicyFactory-CampWO0l.js";
-import { a as CodemationFrontendAuthSnapshot, i as CodemationFrontendAuthProviderSnapshot, n as InternalAuthBootstrap, r as FrontendAppConfig, t as PublicFrontendBootstrap } from "./PublicFrontendBootstrap-DzBgwOnG.js";
-import "./CodemationConfigNormalizer-DVko3cVN.js";
-import { a as CredentialInstanceService, c as CredentialSecretCipher, i as CredentialBindingService, l as CredentialFieldEnvOverlayService, o as CredentialOAuth2ScopeResolver, r as CredentialRuntimeMaterialService, s as CredentialMaterialResolver, t as CredentialStore, u as CredentialTypeRegistryImpl } from "./CredentialServices-UfvHB-rN.js";
-import "./CredentialContractsRegistry-DrMIDSw8.js";
-import "./TelemetryContracts-DbaNomrH.js";
-import { i as WorkflowSummary, t as WorkflowDto } from "./WorkflowViewContracts-CzK2KFuz.js";
-import { _ as WorkflowWebsocketServer, a as WorkflowDebuggerOverlayRepository, b as CommandBus, c as FrontendRuntime, d as LogFilter, f as WorkflowRunRepository, g as AppContainerFactory, h as AppContainerLifecycle, i as HonoApiRouteRegistrar, l as WorkflowRunRetentionPruneScheduler, m as DatabaseMigrations, n as CodemationBootstrapRequest, o as SessionVerifier, r as ApplicationTokens, s as WorkerRuntime, t as CodemationPluginListMerger, u as ServerLoggerFactory, v as QueryBus } from "./CodemationPluginListMerger-DGc-jfa2.js";
-import { t as AppConfigFactory } from "./AppConfigFactory-YnveXE9k.js";
-import { n as InternalAuthBootstrapFactory, r as FrontendAppConfigFactory, t as PublicFrontendBootstrapFactory } from "./PublicFrontendBootstrapFactory-Cb2pLmDd.js";
-import { t as WorkflowPolicyUiPresentationFactory } from "./WorkflowPolicyUiPresentationFactory-DQEY-h_S.js";
-import { Hono } from "hono";
+import { n as RunIntentService, t as OAuthFlowExecutor } from "./index-DilAYwnH.js";
+import { D as WebhookInvocationMatch, F as ActivationIdFactory, I as BinaryAttachment, L as Item, X as WorkflowDefinition, o as BinaryStorage, q as RunIdFactory, w as WorkflowActivationPolicy } from "./ItemsInputNormalizer-_RwIfRIQ.js";
+import { r as AppConfig } from "./CodemationAppContext-CGFYVcSb.js";
+import { l as Logger, u as LoggerFactory } from "./CodemationWhitelabelConfig-Ca2mCUeC.js";
+import { n as logLevelPolicyFactory, t as LogLevelPolicyFactory } from "./LogLevelPolicyFactory-ewCHLDLn.js";
+import { a as CodemationFrontendAuthSnapshot, i as CodemationFrontendAuthProviderSnapshot, n as InternalAuthBootstrap, r as FrontendAppConfig, t as PublicFrontendBootstrap } from "./PublicFrontendBootstrap-Cev3qK46.js";
+import "./CodemationConfigNormalizer-48f-T66P.js";
+import { a as CredentialSecretCipher, i as CredentialInstanceService, o as McpServerCatalog, r as CredentialBindingService, t as CredentialStore } from "./CredentialServices-BLloBztI.js";
+import "./CredentialContractsRegistry-Bq2bq28t.js";
+import "./TelemetryContracts-BtDx84Cp.js";
+import { i as WorkflowSummary, t as WorkflowDto } from "./WorkflowViewContracts-B7aFQcIw.js";
+import { S as CommandBus, _ as AppContainerLifecycle, a as CodemationHonoApiApp, b as QueryBus, c as SessionVerifier, d as WorkflowRunRetentionPruneScheduler, f as ServerLoggerFactory, g as DatabaseMigrations, i as WorkflowDebuggerOverlayRepository, l as WorkerRuntime, m as WorkflowRunRepository, n as CodemationBootstrapRequest, o as BinaryHttpRouteHandler, p as LogFilter, r as ApplicationTokens, s as ServerHttpRouteParams, t as CodemationPluginListMerger, u as FrontendRuntime, v as AppContainerFactory, y as WorkflowWebsocketServer } from "./CodemationPluginListMerger-DP7djJ9S.js";
+import { t as AppConfigFactory } from "./AppConfigFactory-BT0y0LVC.js";
+import "./InternalHonoApiRouteRegistrar-c7t3KnV_.js";
+import { n as InternalAuthBootstrapFactory, r as FrontendAppConfigFactory, t as PublicFrontendBootstrapFactory } from "./PublicFrontendBootstrapFactory-Dv04tJ-6.js";
+import { t as WorkflowPolicyUiPresentationFactory } from "./WorkflowPolicyUiPresentationFactory-6MyjCvBO.js";
+import { t as PairingConfig } from "./pairing.types-snfZ_OzB.js";
 
 //#region src/application/dev/DevBootstrapSummaryJson.types.d.ts
 type DevBootstrapSummaryJson = Readonly<{
@@ -91,7 +92,8 @@ interface DataMapper<TSource, TTarget> {
 declare class WorkflowDefinitionMapper implements DataMapper<WorkflowDefinition, WorkflowDto> {
   private readonly policyUi;
   private readonly workflowActivationPolicy;
-  constructor(policyUi: WorkflowPolicyUiPresentationFactory, workflowActivationPolicy: WorkflowActivationPolicy);
+  private readonly mcpCatalog;
+  constructor(policyUi: WorkflowPolicyUiPresentationFactory, workflowActivationPolicy: WorkflowActivationPolicy, mcpCatalog: McpServerCatalog);
   map(workflow: WorkflowDefinition): Promise<WorkflowDto>;
   mapSync(workflow: WorkflowDefinition): WorkflowDto;
   toSummary(workflow: WorkflowDefinition): WorkflowSummary;
@@ -109,6 +111,7 @@ declare class WorkflowDefinitionMapper implements DataMapper<WorkflowDefinition,
    * Omit optional port fields when undefined so persisted snapshot DTOs (which never serialize
    * undefined keys) stay aligned with live workflow mapping.
    */
+  private readInspectorSummary;
   private nodePortFieldsFromConfig;
   private nodeTypeName;
 }
@@ -128,36 +131,13 @@ declare class RequestToWebhookItemMapper {
   private toQuery;
 }
 //#endregion
-//#region src/presentation/http/ServerHttpRouteParams.d.ts
-type ServerHttpRouteParams = Readonly<Record<string, string>>;
-//#endregion
-//#region src/presentation/http/routeHandlers/BinaryHttpRouteHandlerFactory.d.ts
-declare class BinaryHttpRouteHandler {
-  private readonly queryBus;
-  private readonly commandBus;
-  private readonly binaryStorage;
-  constructor(queryBus: QueryBus, commandBus: CommandBus, binaryStorage: BinaryStorage);
-  getRunBinaryContent(_: Request, params: ServerHttpRouteParams): Promise<Response>;
-  getWorkflowOverlayBinaryContent(_: Request, params: ServerHttpRouteParams): Promise<Response>;
-  postWorkflowDebuggerOverlayBinaryUpload(request: Request, params: ServerHttpRouteParams): Promise<Response>;
-  private createBinaryResponse;
-  private createContentDisposition;
-  private escapeFilename;
-}
-//#endregion
-//#region src/presentation/http/hono/CodemationHonoApiAppFactory.d.ts
-declare class CodemationHonoApiApp {
-  private readonly app;
-  constructor(sessionVerifier: SessionVerifier, registrars: ReadonlyArray<HonoApiRouteRegistrar>, binaryHttpRouteHandler: BinaryHttpRouteHandler);
-  getHono(): Hono;
-  fetch(request: Request): Response | Promise<Response>;
-}
-//#endregion
 //#region src/presentation/http/routeHandlers/CredentialHttpRouteHandler.d.ts
 declare class CredentialHttpRouteHandler {
   private readonly queryBus;
   private readonly commandBus;
-  constructor(queryBus: QueryBus, commandBus: CommandBus);
+  private readonly sessionVerifier;
+  private readonly pairingConfig;
+  constructor(queryBus: QueryBus, commandBus: CommandBus, sessionVerifier: SessionVerifier, pairingConfig: PairingConfig | null);
   getCredentialTypes(): Promise<Response>;
   getCredentialFieldEnvStatus(): Promise<Response>;
   getCredentialInstances(): Promise<Response>;
@@ -170,87 +150,36 @@ declare class CredentialHttpRouteHandler {
   getWorkflowCredentialHealth(_: Request, params: ServerHttpRouteParams): Promise<Response>;
 }
 //#endregion
-//#region src/domain/credentials/OAuth2ProviderRegistry.d.ts
-type JsonRecord = Readonly<Record<string, unknown>>;
-type OAuth2ResolvedProvider = Readonly<{
-  providerId: string;
-  authorizeUrl: string;
-  tokenUrl: string;
-  userInfoUrl?: string;
-}>;
-declare class OAuth2ProviderRegistry {
-  private static readonly googleProvider;
-  resolve(definition: CredentialTypeDefinition, publicConfig: JsonRecord): OAuth2ResolvedProvider;
-  resolveClientId(auth: CredentialOAuth2AuthDefinition, publicConfig: JsonRecord): string;
-  resolveClientSecretFieldKey(auth: CredentialOAuth2AuthDefinition): string;
-  private resolveBuiltInProvider;
-  private resolveTemplateProvider;
-  private expandTemplate;
-  private resolvePublicConfigProvider;
-}
-//#endregion
-//#region src/domain/credentials/OAuth2ConnectServiceFactory.d.ts
-type OAuth2AuthRedirectResult = Readonly<{
-  instanceId: string;
-  redirectUri: string;
-  redirectUrl: string;
-}>;
-type OAuth2CallbackResult = Readonly<{
-  instanceId: string;
-  connectedEmail?: string;
-}>;
-declare class OAuth2ConnectService {
-  private readonly credentialStore;
-  private readonly credentialInstanceService;
-  private readonly credentialTypeRegistry;
-  private readonly credentialRuntimeMaterialService;
-  private readonly credentialFieldEnvOverlayService;
-  private readonly credentialMaterialResolver;
-  private readonly credentialSecretCipher;
-  private readonly credentialOAuth2ScopeResolver;
-  private readonly oauth2ProviderRegistry;
+//#region src/domain/credentials/OAuth2RedirectUriResolver.d.ts
+/**
+ * Resolves the canonical OAuth2 redirect URI from the public base URL or request origin.
+ * The redirect URI always points to `/api/oauth2/callback`, which is the URL operators
+ * register with their OAuth provider.
+ */
+declare class OAuth2RedirectUriResolver {
   private readonly appConfig;
-  private static readonly stateTtlMs;
-  constructor(credentialStore: CredentialStore, credentialInstanceService: CredentialInstanceService, credentialTypeRegistry: CredentialTypeRegistryImpl, credentialRuntimeMaterialService: CredentialRuntimeMaterialService, credentialFieldEnvOverlayService: CredentialFieldEnvOverlayService, credentialMaterialResolver: CredentialMaterialResolver, credentialSecretCipher: CredentialSecretCipher, credentialOAuth2ScopeResolver: CredentialOAuth2ScopeResolver, oauth2ProviderRegistry: OAuth2ProviderRegistry, appConfig: AppConfig);
-  createAuthRedirect(instanceId: string, requestOrigin: string): Promise<OAuth2AuthRedirectResult>;
-  handleCallback(args: Readonly<{
-    code?: string | null;
-    state?: string | null;
-    requestOrigin: string;
-  }>): Promise<OAuth2CallbackResult>;
-  getRedirectUri(requestOrigin: string): string;
+  constructor(appConfig: AppConfig);
+  resolve(requestOrigin: string): string;
   /**
-   * `new URL(path, base)` requires `base` to be an absolute URL with a scheme.
-   * Misconfigured CODEMATION_PUBLIC_BASE_URL (e.g. `localhost:3000` without http://) or odd
-   * forwarded headers otherwise throw TypeError: Invalid URL.
-   *
-   * Comma-separated values (proxy chains or copy-paste mistakes like `http,http`) use the
-   * first segment only; obviously invalid hostnames are rejected.
+   * Ensures the base URL has an http/https scheme. Comma-separated values (proxy chains) use
+   * the first segment only.
    */
-  private ensureAbsoluteUrlForOAuth2Base;
-  private requireOAuth2Type;
-  private exchangeAuthorizationCode;
-  private mergeTokenMaterial;
-  private resolveExpiry;
-  private resolveGrantedScopes;
-  private resolveConnectedEmail;
-  private findEmail;
-  private parseJsonRecord;
-  private createTokenExchangeErrorMessage;
-  private createOpaqueValue;
-  private createPkceCodeChallenge;
+  private ensureAbsoluteUrl;
   private normalizeBaseUrl;
 }
 //#endregion
 //#region src/presentation/http/routeHandlers/OAuth2HttpRouteHandlerFactory.d.ts
 declare class OAuth2HttpRouteHandler {
-  private readonly oauth2ConnectService;
+  private readonly redirectUriResolver;
   private readonly credentialInstanceService;
-  constructor(oauth2ConnectService: OAuth2ConnectService, credentialInstanceService: CredentialInstanceService);
-  getAuthRedirect(request: Request): Promise<Response>;
-  getCallback(request: Request): Promise<Response>;
+  private readonly oauthFlowExecutor;
+  private readonly credentialStore;
+  private readonly credentialSecretCipher;
+  constructor(redirectUriResolver: OAuth2RedirectUriResolver, credentialInstanceService: CredentialInstanceService, oauthFlowExecutor: OAuthFlowExecutor, credentialStore: CredentialStore, credentialSecretCipher: CredentialSecretCipher);
   getRedirectUri(request: Request): Promise<Response>;
   postDisconnect(request: Request): Promise<Response>;
+  postOAuthStart(request: Request): Promise<Response>;
+  getOAuthCallback(request: Request): Promise<Response>;
   private resolveRequestOrigin;
   /** Proxies may send comma-separated lists (chain); use the first host/proto only. */
   private static firstCommaSeparatedValue;

package/dist/nextServer.js

@@ -1,12 +1,14 @@
 import { n as logLevelPolicyFactory, t as LogLevelPolicyFactory } from "./LogLevelPolicyFactory-DCUzIN6G.js";
-import "./ApiPaths-CLTHphYZ.js";
-import { a as FilteringLogger, i as PerformanceLogPolicy, n as PerformanceLogPolicyFactory, r as performanceLogPolicyFactory, t as ServerLoggerFactory } from "./ServerLoggerFactory-BKSIh9Xv.js";
+import "./ApiPaths-Dv1dcHu_.js";
+import { a as FilteringLogger, i as PerformanceLogPolicy, n as PerformanceLogPolicyFactory, r as performanceLogPolicyFactory, t as ServerLoggerFactory } from "./ServerLoggerFactory-Ckk52S3w.js";
 import "./decorateParam-BWxkAUSj.js";
 import "./decorate-CXWmflG_.js";
-import { a as CredentialInstanceService, d as ApplicationTokens, i as CredentialBindingService } from "./CredentialServices-CgxwguAv.js";
-import { C as BinaryHttpRouteHandler, E as FrontendAppConfigFactory, M as RunBinaryAttachmentLookupService, O as WorkflowWebsocketServer, S as CodemationHonoApiApp, T as InternalAuthBootstrapFactory, _ as WebhookHttpRouteHandler, b as OAuth2HttpRouteHandler, d as FrontendRuntime, g as WorkflowHttpRouteHandler, h as WorkflowRunRetentionPruneScheduler, k as WorkflowDefinitionMapper, m as AppContainerLifecycle, p as DatabaseMigrations, t as AppContainerFactory, u as WorkerRuntime, v as RequestToWebhookItemMapper, w as PublicFrontendBootstrapFactory, x as CredentialHttpRouteHandler, y as RunHttpRouteHandler } from "./AppContainerFactory-qaqc-R1D.js";
-import { t as WorkflowPolicyUiPresentationFactory } from "./WorkflowPolicyUiPresentationFactory-DhPqQ9aB.js";
-import { t as AppConfigFactory } from "./AppConfigFactory-C6q-CSKb.js";
-import { n as CodemationBootstrapRequest, t as CodemationPluginListMerger } from "./CodemationPluginListMerger-B-W5Fa_X.js";
+import { a as CredentialInstanceService, i as CredentialBindingService, m as ApplicationTokens } from "./CredentialServices-Dk8yypeL.js";
+import "./CodemationTsyringeTypeInfoRegistrar-Bj6FJYFz.js";
+import { A as WorkflowDefinitionMapper, C as CodemationHonoApiApp, D as FrontendAppConfigFactory, E as InternalAuthBootstrapFactory, P as RunBinaryAttachmentLookupService, S as CredentialHttpRouteHandler, T as PublicFrontendBootstrapFactory, _ as WorkflowHttpRouteHandler, b as RunHttpRouteHandler, d as FrontendRuntime, h as WorkflowRunRetentionPruneScheduler, k as WorkflowWebsocketServer, m as AppContainerLifecycle, p as DatabaseMigrations, t as AppContainerFactory, u as WorkerRuntime, v as WebhookHttpRouteHandler, w as BinaryHttpRouteHandler, x as OAuth2HttpRouteHandler, y as RequestToWebhookItemMapper } from "./AppContainerFactory-DRTjG7nG.js";
+import { t as WorkflowPolicyUiPresentationFactory } from "./WorkflowPolicyUiPresentationFactory-Bb-ae_Zh.js";
+import "./InternalPingRegistrar-DY3kSfxP.js";
+import { t as AppConfigFactory } from "./AppConfigFactory-Cx4qQvRk.js";
+import { n as CodemationBootstrapRequest, t as CodemationPluginListMerger } from "./CodemationPluginListMerger-D1B1IEbt.js";
 
 export { AppConfigFactory, AppContainerFactory, AppContainerLifecycle, ApplicationTokens, BinaryHttpRouteHandler, CodemationBootstrapRequest, CodemationHonoApiApp, CodemationPluginListMerger, CredentialBindingService, CredentialHttpRouteHandler, CredentialInstanceService, DatabaseMigrations, FilteringLogger, FrontendAppConfigFactory, FrontendRuntime, InternalAuthBootstrapFactory, LogLevelPolicyFactory, OAuth2HttpRouteHandler, PerformanceLogPolicy, PerformanceLogPolicyFactory, PublicFrontendBootstrapFactory, RequestToWebhookItemMapper, RunBinaryAttachmentLookupService, RunHttpRouteHandler, ServerLoggerFactory, WebhookHttpRouteHandler, WorkerRuntime, WorkflowDefinitionMapper, WorkflowHttpRouteHandler, WorkflowPolicyUiPresentationFactory, WorkflowRunRetentionPruneScheduler, WorkflowWebsocketServer, logLevelPolicyFactory, performanceLogPolicyFactory };