@evermore.work/server 2026.509.0-canary.0

package/dist/routes/sidebar-badges.js

@@ -0,0 +1,68 @@
+import { Router } from "express";
+import { and, eq } from "drizzle-orm";
+import { inboxDismissals, joinRequests } from "@evermore.work/db";
+import { sidebarBadgeService } from "../services/sidebar-badges.js";
+import { accessService } from "../services/access.js";
+import { dashboardService } from "../services/dashboard.js";
+import { collapseDuplicatePendingHumanJoinRequests } from "../lib/join-request-dedupe.js";
+import { assertCompanyAccess } from "./authz.js";
+function buildDismissedAtByKey(dismissals) {
+    return new Map(dismissals.map((dismissal) => [dismissal.itemKey, new Date(dismissal.dismissedAt).getTime()]));
+}
+export function sidebarBadgeRoutes(db) {
+    const router = Router();
+    const svc = sidebarBadgeService(db);
+    const access = accessService(db);
+    const dashboard = dashboardService(db);
+    router.get("/companies/:companyId/sidebar-badges", async (req, res) => {
+        const companyId = req.params.companyId;
+        assertCompanyAccess(req, companyId);
+        let canApproveJoins = false;
+        if (req.actor.type === "board") {
+            canApproveJoins =
+                req.actor.source === "local_implicit" ||
+                    Boolean(req.actor.isInstanceAdmin) ||
+                    (await access.canUser(companyId, req.actor.userId, "joins:approve"));
+        }
+        else if (req.actor.type === "agent" && req.actor.agentId) {
+            canApproveJoins = await access.hasPermission(companyId, "agent", req.actor.agentId, "joins:approve");
+        }
+        const visibleJoinRequests = canApproveJoins
+            ? collapseDuplicatePendingHumanJoinRequests(await db
+                .select({
+                id: joinRequests.id,
+                requestType: joinRequests.requestType,
+                status: joinRequests.status,
+                requestingUserId: joinRequests.requestingUserId,
+                requestEmailSnapshot: joinRequests.requestEmailSnapshot,
+                updatedAt: joinRequests.updatedAt,
+                createdAt: joinRequests.createdAt,
+            })
+                .from(joinRequests)
+                .where(and(eq(joinRequests.companyId, companyId), eq(joinRequests.status, "pending_approval")))).map(({ id, updatedAt, createdAt }) => ({
+                id,
+                updatedAt,
+                createdAt,
+            }))
+            : [];
+        const dismissedAtByKey = req.actor.type === "board" && req.actor.userId
+            ? await db
+                .select({ itemKey: inboxDismissals.itemKey, dismissedAt: inboxDismissals.dismissedAt })
+                .from(inboxDismissals)
+                .where(and(eq(inboxDismissals.companyId, companyId), eq(inboxDismissals.userId, req.actor.userId)))
+                .then(buildDismissedAtByKey)
+            : new Map();
+        const badges = await svc.get(companyId, {
+            dismissals: dismissedAtByKey,
+            joinRequests: visibleJoinRequests,
+        });
+        const summary = await dashboard.summary(companyId);
+        const hasFailedRuns = badges.failedRuns > 0;
+        const alertsCount = (summary.agents.error > 0 && !hasFailedRuns ? 1 : 0) +
+            (summary.costs.monthBudgetCents > 0 && summary.costs.monthUtilizationPercent >= 80 ? 1 : 0);
+        badges.inbox = badges.failedRuns + alertsCount + badges.joinRequests + badges.approvals;
+        res.json(badges);
+    });
+    return router;
+}
+//# sourceMappingURL=sidebar-badges.js.map

package/dist/routes/sidebar-badges.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sidebar-badges.js","sourceRoot":"","sources":["../../src/routes/sidebar-badges.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAEjC,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAClE,OAAO,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AACpE,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,yCAAyC,EAAE,MAAM,+BAA+B,CAAC;AAC1F,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAEjD,SAAS,qBAAqB,CAC5B,UAAkE;IAElE,OAAO,IAAI,GAAG,CACZ,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAC9F,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,EAAM;IACvC,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;IACxB,MAAM,GAAG,GAAG,mBAAmB,CAAC,EAAE,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,aAAa,CAAC,EAAE,CAAC,CAAC;IACjC,MAAM,SAAS,GAAG,gBAAgB,CAAC,EAAE,CAAC,CAAC;IAEvC,MAAM,CAAC,GAAG,CAAC,sCAAsC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACpE,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,SAAmB,CAAC;QACjD,mBAAmB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QACpC,IAAI,eAAe,GAAG,KAAK,CAAC;QAC5B,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC/B,eAAe;gBACb,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,gBAAgB;oBACrC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC;oBAClC,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC;QACzE,CAAC;aAAM,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YAC3D,eAAe,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;QACvG,CAAC;QAED,MAAM,mBAAmB,GAAG,eAAe;YACzC,CAAC,CAAC,yCAAyC,CACzC,MAAM,EAAE;iBACL,MAAM,CAAC;gBACN,EAAE,EAAE,YAAY,CAAC,EAAE;gBACnB,WAAW,EAAE,YAAY,CAAC,WAAW;gBACrC,MAAM,EAAE,YAAY,CAAC,MAAM;gBAC3B,gBAAgB,EAAE,YAAY,CAAC,gBAAgB;gBAC/C,oBAAoB,EAAE,YAAY,CAAC,oBAAoB;gBACvD,SAAS,EAAE,YAAY,CAAC,SAAS;gBACjC,SAAS,EAAE,YAAY,CAAC,SAAS;aAClC,CAAC;iBACD,IAAI,CAAC,YAAY,CAAC;iBAClB,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAClG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;gBACvC,EAAE;gBACF,SAAS;gBACT,SAAS;aACV,CAAC,CAAC;YACH,CAAC,CAAC,EAAE,CAAC;QAEP,MAAM,gBAAgB,GACpB,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM;YAC5C,CAAC,CAAC,MAAM,EAAE;iBACP,MAAM,CAAC,EAAE,OAAO,EAAE,eAAe,CAAC,OAAO,EAAE,WAAW,EAAE,eAAe,CAAC,WAAW,EAAE,CAAC;iBACtF,IAAI,CAAC,eAAe,CAAC;iBACrB,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,eAAe,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;iBAClG,IAAI,CAAC,qBAAqB,CAAC;YAC9B,CAAC,CAAC,IAAI,GAAG,EAAkB,CAAC;QAEhC,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE;YACtC,UAAU,EAAE,gBAAgB;YAC5B,YAAY,EAAE,mBAAmB;SAClC,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACnD,MAAM,aAAa,GAAG,MAAM,CAAC,UAAU,GAAG,CAAC,CAAC;QAC5C,MAAM,WAAW,GACf,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACpD,CAAC,OAAO,CAAC,KAAK,CAAC,gBAAgB,GAAG,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,uBAAuB,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9F,MAAM,CAAC,KAAK,GAAG,MAAM,CAAC,UAAU,GAAG,WAAW,GAAG,MAAM,CAAC,YAAY,GAAG,MAAM,CAAC,SAAS,CAAC;QAExF,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACnB,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/routes/sidebar-preferences.d.ts

@@ -0,0 +1,3 @@
+import type { Db } from "@evermore.work/db";
+export declare function sidebarPreferenceRoutes(db: Db): import("express-serve-static-core").Router;
+//# sourceMappingURL=sidebar-preferences.d.ts.map

package/dist/routes/sidebar-preferences.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sidebar-preferences.d.ts","sourceRoot":"","sources":["../../src/routes/sidebar-preferences.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,mBAAmB,CAAC;AAe5C,wBAAgB,uBAAuB,CAAC,EAAE,EAAE,EAAE,8CAsD7C"}

package/dist/routes/sidebar-preferences.js

@@ -0,0 +1,63 @@
+import { Router } from "express";
+import { upsertSidebarOrderPreferenceSchema } from "@evermore.work/shared";
+import { validate } from "../middleware/validate.js";
+import { logActivity, sidebarPreferenceService } from "../services/index.js";
+import { assertBoard, assertCompanyAccess, getActorInfo } from "./authz.js";
+function requireBoardUserId(req, res) {
+    assertBoard(req);
+    if (!req.actor.userId) {
+        res.status(403).json({ error: "Board user context required" });
+        return null;
+    }
+    return req.actor.userId;
+}
+export function sidebarPreferenceRoutes(db) {
+    const router = Router();
+    const svc = sidebarPreferenceService(db);
+    router.get("/sidebar-preferences/me", async (req, res) => {
+        const userId = requireBoardUserId(req, res);
+        if (!userId)
+            return;
+        res.json(await svc.getCompanyOrder(userId));
+    });
+    router.put("/sidebar-preferences/me", validate(upsertSidebarOrderPreferenceSchema), async (req, res) => {
+        const userId = requireBoardUserId(req, res);
+        if (!userId)
+            return;
+        res.json(await svc.upsertCompanyOrder(userId, req.body.orderedIds));
+    });
+    router.get("/companies/:companyId/sidebar-preferences/me", async (req, res) => {
+        const companyId = req.params.companyId;
+        assertCompanyAccess(req, companyId);
+        const userId = requireBoardUserId(req, res);
+        if (!userId)
+            return;
+        res.json(await svc.getProjectOrder(companyId, userId));
+    });
+    router.put("/companies/:companyId/sidebar-preferences/me", validate(upsertSidebarOrderPreferenceSchema), async (req, res) => {
+        const companyId = req.params.companyId;
+        assertCompanyAccess(req, companyId);
+        const userId = requireBoardUserId(req, res);
+        if (!userId)
+            return;
+        const result = await svc.upsertProjectOrder(companyId, userId, req.body.orderedIds);
+        const actor = getActorInfo(req);
+        await logActivity(db, {
+            companyId,
+            actorType: actor.actorType,
+            actorId: actor.actorId,
+            agentId: actor.agentId,
+            runId: actor.runId,
+            action: "sidebar_preferences.project_order_updated",
+            entityType: "company",
+            entityId: companyId,
+            details: {
+                userId,
+                orderedIds: result.orderedIds,
+            },
+        });
+        res.json(result);
+    });
+    return router;
+}
+//# sourceMappingURL=sidebar-preferences.js.map

package/dist/routes/sidebar-preferences.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sidebar-preferences.js","sourceRoot":"","sources":["../../src/routes/sidebar-preferences.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAA+B,MAAM,SAAS,CAAC;AAE9D,OAAO,EAAE,kCAAkC,EAAE,MAAM,uBAAuB,CAAC;AAC3E,OAAO,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAC7E,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE5E,SAAS,kBAAkB,CAAC,GAAY,EAAE,GAAa;IACrD,WAAW,CAAC,GAAG,CAAC,CAAC;IACjB,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QACtB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC,CAAC;QAC/D,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,EAAM;IAC5C,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;IACxB,MAAM,GAAG,GAAG,wBAAwB,CAAC,EAAE,CAAC,CAAC;IAEzC,MAAM,CAAC,GAAG,CAAC,yBAAyB,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACvD,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC5C,IAAI,CAAC,MAAM;YAAE,OAAO;QACpB,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,yBAAyB,EAAE,QAAQ,CAAC,kCAAkC,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACrG,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC5C,IAAI,CAAC,MAAM;YAAE,OAAO;QACpB,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,kBAAkB,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,8CAA8C,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC5E,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,SAAmB,CAAC;QACjD,mBAAmB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QACpC,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC5C,IAAI,CAAC,MAAM;YAAE,OAAO;QACpB,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,eAAe,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CACR,8CAA8C,EAC9C,QAAQ,CAAC,kCAAkC,CAAC,EAC5C,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACjB,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,SAAmB,CAAC;QACjD,mBAAmB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QACpC,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC5C,IAAI,CAAC,MAAM;YAAE,OAAO;QAEpB,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACpF,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,WAAW,CAAC,EAAE,EAAE;YACpB,SAAS;YACT,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,MAAM,EAAE,2CAA2C;YACnD,UAAU,EAAE,SAAS;YACrB,QAAQ,EAAE,SAAS;YACnB,OAAO,EAAE;gBACP,MAAM;gBACN,UAAU,EAAE,MAAM,CAAC,UAAU;aAC9B;SACF,CAAC,CAAC;QACH,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACnB,CAAC,CACF,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/routes/user-profiles.d.ts

@@ -0,0 +1,3 @@
+import type { Db } from "@evermore.work/db";
+export declare function userProfileRoutes(db: Db): import("express-serve-static-core").Router;
+//# sourceMappingURL=user-profiles.d.ts.map

package/dist/routes/user-profiles.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-profiles.d.ts","sourceRoot":"","sources":["../../src/routes/user-profiles.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,mBAAmB,CAAC;AAyS5C,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,EAAE,8CAwIvC"}

package/dist/routes/user-profiles.js

@@ -0,0 +1,337 @@
+import { Router } from "express";
+import { and, desc, eq, gte, isNull, sql } from "drizzle-orm";
+import { activityLog, agents, authUsers, companyMemberships, costEvents, issueComments, issues, } from "@evermore.work/db";
+import { notFound } from "../errors.js";
+import { assertCompanyAccess } from "./authz.js";
+const PROFILE_WINDOWS = [
+    { key: "last7", label: "Last 7 days", days: 7 },
+    { key: "last30", label: "Last 30 days", days: 30 },
+    { key: "all", label: "All time", days: null },
+];
+function slugifyUserPart(value) {
+    const normalized = value
+        ?.trim()
+        .toLowerCase()
+        .replace(/['"]/g, "")
+        .replace(/[^a-z0-9]+/g, "-")
+        .replace(/^-+|-+$/g, "");
+    return normalized || null;
+}
+function userSlugCandidates(row) {
+    const candidates = new Set();
+    const add = (value) => {
+        const slug = slugifyUserPart(value);
+        if (slug)
+            candidates.add(slug);
+    };
+    add(row.name);
+    add(row.email?.split("@")[0]);
+    add(row.email);
+    add(row.principalId);
+    return [...candidates];
+}
+async function resolveCompanyUser(db, companyId, rawSlug) {
+    const slug = slugifyUserPart(rawSlug);
+    if (!slug)
+        return null;
+    const rows = await db
+        .select({
+        id: companyMemberships.id,
+        principalId: companyMemberships.principalId,
+        status: companyMemberships.status,
+        membershipRole: companyMemberships.membershipRole,
+        createdAt: companyMemberships.createdAt,
+        userId: authUsers.id,
+        name: authUsers.name,
+        email: authUsers.email,
+        image: authUsers.image,
+    })
+        .from(companyMemberships)
+        .leftJoin(authUsers, eq(authUsers.id, companyMemberships.principalId))
+        .where(and(eq(companyMemberships.companyId, companyId), eq(companyMemberships.principalType, "user")))
+        .orderBy(desc(companyMemberships.updatedAt))
+        .limit(200);
+    return rows.find((row) => userSlugCandidates(row).includes(slug)) ?? null;
+}
+function userIssueInvolvementSql(companyId, userId) {
+    return sql `
+    (
+      ${issues.createdByUserId} = ${userId}
+      OR ${issues.assigneeUserId} = ${userId}
+      OR EXISTS (
+        SELECT 1
+        FROM ${issueComments}
+        WHERE ${issueComments.companyId} = ${companyId}
+          AND ${issueComments.issueId} = ${issues.id}
+          AND ${issueComments.authorUserId} = ${userId}
+      )
+    )
+  `;
+}
+function windowStart(days) {
+    if (!days)
+        return null;
+    return new Date(Date.now() - days * 24 * 60 * 60 * 1000);
+}
+function startOfUtcDay(date) {
+    return new Date(Date.UTC(date.getUTCFullYear(), date.getUTCMonth(), date.getUTCDate()));
+}
+function isoDay(date) {
+    return startOfUtcDay(date).toISOString().slice(0, 10);
+}
+function dayKeyExpr(dateSql) {
+    return sql `to_char(date_trunc('day', ${dateSql}), 'YYYY-MM-DD')`;
+}
+function sumNumber(column) {
+    return sql `coalesce(sum(${column}), 0)::double precision`;
+}
+async function loadWindowStats(db, companyId, userId, key, label, from) {
+    const involvement = userIssueInvolvementSql(companyId, userId);
+    const openStatuses = ["backlog", "todo", "in_progress", "in_review", "blocked"];
+    const fromIso = from?.toISOString();
+    const [issueStats] = await db
+        .select({
+        touchedIssues: sql `count(distinct case when ${involvement} ${fromIso ? sql `and ${issues.updatedAt} >= ${fromIso}` : sql ``} then ${issues.id} end)::int`,
+        createdIssues: sql `count(distinct case when ${issues.createdByUserId} = ${userId} ${fromIso ? sql `and ${issues.createdAt} >= ${fromIso}` : sql ``} then ${issues.id} end)::int`,
+        completedIssues: sql `count(distinct case when ${involvement} and ${issues.status} = 'done' ${fromIso ? sql `and ${issues.completedAt} >= ${fromIso}` : sql ``} then ${issues.id} end)::int`,
+        assignedOpenIssues: sql `count(distinct case when ${issues.assigneeUserId} = ${userId} and ${issues.status} in (${sql.join(openStatuses.map((status) => sql `${status}`), sql `, `)}) then ${issues.id} end)::int`,
+    })
+        .from(issues)
+        .where(and(eq(issues.companyId, companyId), isNull(issues.hiddenAt)));
+    const commentConditions = [
+        eq(issueComments.companyId, companyId),
+        eq(issueComments.authorUserId, userId),
+    ];
+    if (from)
+        commentConditions.push(gte(issueComments.createdAt, from));
+    const [commentStats] = await db
+        .select({ count: sql `count(*)::int` })
+        .from(issueComments)
+        .where(and(...commentConditions));
+    const activityConditions = [
+        eq(activityLog.companyId, companyId),
+        eq(activityLog.actorType, "user"),
+        eq(activityLog.actorId, userId),
+    ];
+    if (from)
+        activityConditions.push(gte(activityLog.createdAt, from));
+    const [activityStats] = await db
+        .select({ count: sql `count(*)::int` })
+        .from(activityLog)
+        .where(and(...activityConditions));
+    const costConditions = [
+        eq(costEvents.companyId, companyId),
+        userIssueInvolvementSql(companyId, userId),
+    ];
+    if (from)
+        costConditions.push(gte(costEvents.occurredAt, from));
+    const [costStats] = await db
+        .select({
+        costCents: sumNumber(costEvents.costCents),
+        inputTokens: sumNumber(costEvents.inputTokens),
+        cachedInputTokens: sumNumber(costEvents.cachedInputTokens),
+        outputTokens: sumNumber(costEvents.outputTokens),
+        costEventCount: sql `count(${costEvents.id})::int`,
+    })
+        .from(costEvents)
+        .innerJoin(issues, and(eq(issues.id, costEvents.issueId), eq(issues.companyId, costEvents.companyId)))
+        .where(and(...costConditions));
+    return {
+        key,
+        label,
+        touchedIssues: Number(issueStats?.touchedIssues ?? 0),
+        createdIssues: Number(issueStats?.createdIssues ?? 0),
+        completedIssues: Number(issueStats?.completedIssues ?? 0),
+        assignedOpenIssues: Number(issueStats?.assignedOpenIssues ?? 0),
+        commentCount: Number(commentStats?.count ?? 0),
+        activityCount: Number(activityStats?.count ?? 0),
+        costCents: Number(costStats?.costCents ?? 0),
+        inputTokens: Number(costStats?.inputTokens ?? 0),
+        cachedInputTokens: Number(costStats?.cachedInputTokens ?? 0),
+        outputTokens: Number(costStats?.outputTokens ?? 0),
+        costEventCount: Number(costStats?.costEventCount ?? 0),
+    };
+}
+async function loadDailyStats(db, companyId, userId) {
+    const firstDay = startOfUtcDay(new Date(Date.now() - 13 * 24 * 60 * 60 * 1000));
+    const points = new Map();
+    for (let index = 0; index < 14; index += 1) {
+        const date = new Date(firstDay.getTime() + index * 24 * 60 * 60 * 1000);
+        points.set(isoDay(date), {
+            date: isoDay(date),
+            activityCount: 0,
+            completedIssues: 0,
+            costCents: 0,
+            inputTokens: 0,
+            cachedInputTokens: 0,
+            outputTokens: 0,
+        });
+    }
+    const activityDay = dayKeyExpr(sql `${activityLog.createdAt}`);
+    const activityRows = await db
+        .select({
+        date: activityDay,
+        count: sql `count(*)::int`,
+    })
+        .from(activityLog)
+        .where(and(eq(activityLog.companyId, companyId), eq(activityLog.actorType, "user"), eq(activityLog.actorId, userId), gte(activityLog.createdAt, firstDay)))
+        .groupBy(activityDay);
+    for (const row of activityRows) {
+        const point = points.get(row.date);
+        if (point)
+            point.activityCount = Number(row.count);
+    }
+    const completedDay = dayKeyExpr(sql `${issues.completedAt}`);
+    const completedRows = await db
+        .select({
+        date: completedDay,
+        count: sql `count(distinct ${issues.id})::int`,
+    })
+        .from(issues)
+        .where(and(eq(issues.companyId, companyId), isNull(issues.hiddenAt), eq(issues.status, "done"), gte(issues.completedAt, firstDay), userIssueInvolvementSql(companyId, userId)))
+        .groupBy(completedDay);
+    for (const row of completedRows) {
+        const point = points.get(row.date);
+        if (point)
+            point.completedIssues = Number(row.count);
+    }
+    const costDay = dayKeyExpr(sql `${costEvents.occurredAt}`);
+    const costRows = await db
+        .select({
+        date: costDay,
+        costCents: sumNumber(costEvents.costCents),
+        inputTokens: sumNumber(costEvents.inputTokens),
+        cachedInputTokens: sumNumber(costEvents.cachedInputTokens),
+        outputTokens: sumNumber(costEvents.outputTokens),
+    })
+        .from(costEvents)
+        .innerJoin(issues, and(eq(issues.id, costEvents.issueId), eq(issues.companyId, costEvents.companyId)))
+        .where(and(eq(costEvents.companyId, companyId), gte(costEvents.occurredAt, firstDay), userIssueInvolvementSql(companyId, userId)))
+        .groupBy(costDay);
+    for (const row of costRows) {
+        const point = points.get(row.date);
+        if (!point)
+            continue;
+        point.costCents = Number(row.costCents);
+        point.inputTokens = Number(row.inputTokens);
+        point.cachedInputTokens = Number(row.cachedInputTokens);
+        point.outputTokens = Number(row.outputTokens);
+    }
+    return [...points.values()];
+}
+export function userProfileRoutes(db) {
+    const router = Router();
+    router.get("/companies/:companyId/users/:userSlug/profile", async (req, res) => {
+        const companyId = req.params.companyId;
+        const userSlug = req.params.userSlug;
+        assertCompanyAccess(req, companyId);
+        const row = await resolveCompanyUser(db, companyId, userSlug);
+        if (!row)
+            throw notFound("User not found");
+        const canonicalSlug = userSlugCandidates(row)[0] ?? row.principalId;
+        const userId = row.userId ?? row.principalId;
+        const [stats, daily, recentIssues, recentActivity, topAgents, topProviders] = await Promise.all([
+            Promise.all(PROFILE_WINDOWS.map((entry) => loadWindowStats(db, companyId, userId, entry.key, entry.label, windowStart(entry.days)))),
+            loadDailyStats(db, companyId, userId),
+            db
+                .select({
+                id: issues.id,
+                identifier: issues.identifier,
+                title: issues.title,
+                status: issues.status,
+                priority: issues.priority,
+                assigneeAgentId: issues.assigneeAgentId,
+                assigneeUserId: issues.assigneeUserId,
+                updatedAt: issues.updatedAt,
+                completedAt: issues.completedAt,
+            })
+                .from(issues)
+                .where(and(eq(issues.companyId, companyId), isNull(issues.hiddenAt), userIssueInvolvementSql(companyId, userId)))
+                .orderBy(desc(issues.updatedAt))
+                .limit(8),
+            db
+                .select({
+                id: activityLog.id,
+                action: activityLog.action,
+                entityType: activityLog.entityType,
+                entityId: activityLog.entityId,
+                details: activityLog.details,
+                createdAt: activityLog.createdAt,
+            })
+                .from(activityLog)
+                .where(and(eq(activityLog.companyId, companyId), eq(activityLog.actorType, "user"), eq(activityLog.actorId, userId)))
+                .orderBy(desc(activityLog.createdAt))
+                .limit(12),
+            db
+                .select({
+                agentId: costEvents.agentId,
+                agentName: agents.name,
+                costCents: sumNumber(costEvents.costCents),
+                inputTokens: sumNumber(costEvents.inputTokens),
+                cachedInputTokens: sumNumber(costEvents.cachedInputTokens),
+                outputTokens: sumNumber(costEvents.outputTokens),
+            })
+                .from(costEvents)
+                .innerJoin(issues, and(eq(issues.id, costEvents.issueId), eq(issues.companyId, costEvents.companyId)))
+                .leftJoin(agents, eq(agents.id, costEvents.agentId))
+                .where(and(eq(costEvents.companyId, companyId), userIssueInvolvementSql(companyId, userId)))
+                .groupBy(costEvents.agentId, agents.name)
+                .orderBy(desc(sumNumber(costEvents.costCents)))
+                .limit(5),
+            db
+                .select({
+                provider: costEvents.provider,
+                biller: costEvents.biller,
+                model: costEvents.model,
+                costCents: sumNumber(costEvents.costCents),
+                inputTokens: sumNumber(costEvents.inputTokens),
+                cachedInputTokens: sumNumber(costEvents.cachedInputTokens),
+                outputTokens: sumNumber(costEvents.outputTokens),
+            })
+                .from(costEvents)
+                .innerJoin(issues, and(eq(issues.id, costEvents.issueId), eq(issues.companyId, costEvents.companyId)))
+                .where(and(eq(costEvents.companyId, companyId), userIssueInvolvementSql(companyId, userId)))
+                .groupBy(costEvents.provider, costEvents.biller, costEvents.model)
+                .orderBy(desc(sumNumber(costEvents.costCents)))
+                .limit(5),
+        ]);
+        const user = {
+            id: userId,
+            slug: canonicalSlug,
+            name: row.name,
+            email: row.email,
+            image: row.image,
+            membershipRole: row.membershipRole,
+            membershipStatus: row.status,
+            joinedAt: row.createdAt,
+        };
+        const payload = {
+            user,
+            stats,
+            daily,
+            recentIssues: recentIssues.map((issue) => ({
+                ...issue,
+                status: issue.status,
+                priority: issue.priority,
+            })),
+            recentActivity,
+            topAgents: topAgents.map((entry) => ({
+                ...entry,
+                costCents: Number(entry.costCents),
+                inputTokens: Number(entry.inputTokens),
+                cachedInputTokens: Number(entry.cachedInputTokens),
+                outputTokens: Number(entry.outputTokens),
+            })),
+            topProviders: topProviders.map((entry) => ({
+                ...entry,
+                costCents: Number(entry.costCents),
+                inputTokens: Number(entry.inputTokens),
+                cachedInputTokens: Number(entry.cachedInputTokens),
+                outputTokens: Number(entry.outputTokens),
+            })),
+        };
+        res.json(payload);
+    });
+    return router;
+}
+//# sourceMappingURL=user-profiles.js.map

package/dist/routes/user-profiles.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-profiles.js","sourceRoot":"","sources":["../../src/routes/user-profiles.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAE9D,OAAO,EACL,WAAW,EACX,MAAM,EACN,SAAS,EACT,kBAAkB,EAClB,UAAU,EACV,aAAa,EACb,MAAM,GACP,MAAM,mBAAmB,CAAC;AAO3B,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACxC,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAcjD,MAAM,eAAe,GAAG;IACtB,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE;IAC/C,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,EAAE,EAAE;IAClD,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE;CACrC,CAAC;AAEX,SAAS,eAAe,CAAC,KAAgC;IACvD,MAAM,UAAU,GAAG,KAAK;QACtB,EAAE,IAAI,EAAE;SACP,WAAW,EAAE;SACb,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;SACpB,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC3B,OAAO,UAAU,IAAI,IAAI,CAAC;AAC5B,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAmB;IAC7C,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,MAAM,GAAG,GAAG,CAAC,KAAgC,EAAE,EAAE;QAC/C,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,IAAI;YAAE,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC,CAAC;IACF,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACd,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9B,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACf,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACrB,OAAO,CAAC,GAAG,UAAU,CAAC,CAAC;AACzB,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,EAAM,EAAE,SAAiB,EAAE,OAAe;IAC1E,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IACtC,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IAEvB,MAAM,IAAI,GAAG,MAAM,EAAE;SAClB,MAAM,CAAC;QACN,EAAE,EAAE,kBAAkB,CAAC,EAAE;QACzB,WAAW,EAAE,kBAAkB,CAAC,WAAW;QAC3C,MAAM,EAAE,kBAAkB,CAAC,MAAM;QACjC,cAAc,EAAE,kBAAkB,CAAC,cAAc;QACjD,SAAS,EAAE,kBAAkB,CAAC,SAAS;QACvC,MAAM,EAAE,SAAS,CAAC,EAAE;QACpB,IAAI,EAAE,SAAS,CAAC,IAAI;QACpB,KAAK,EAAE,SAAS,CAAC,KAAK;QACtB,KAAK,EAAE,SAAS,CAAC,KAAK;KACvB,CAAC;SACD,IAAI,CAAC,kBAAkB,CAAC;SACxB,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,kBAAkB,CAAC,WAAW,CAAC,CAAC;SACrE,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,kBAAkB,CAAC,SAAS,EAAE,SAAS,CAAC,EAC3C,EAAE,CAAC,kBAAkB,CAAC,aAAa,EAAE,MAAM,CAAC,CAC7C,CACF;SACA,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC;SAC3C,KAAK,CAAC,GAAG,CAAC,CAAC;IAEd,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC;AAC5E,CAAC;AAED,SAAS,uBAAuB,CAAC,SAAiB,EAAE,MAAc;IAChE,OAAO,GAAG,CAAS;;QAEb,MAAM,CAAC,eAAe,MAAM,MAAM;WAC/B,MAAM,CAAC,cAAc,MAAM,MAAM;;;eAG7B,aAAa;gBACZ,aAAa,CAAC,SAAS,MAAM,SAAS;gBACtC,aAAa,CAAC,OAAO,MAAM,MAAM,CAAC,EAAE;gBACpC,aAAa,CAAC,YAAY,MAAM,MAAM;;;GAGnD,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,IAAmB;IACtC,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,aAAa,CAAC,IAAU;IAC/B,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,IAAI,CAAC,WAAW,EAAE,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;AAC1F,CAAC;AAED,SAAS,MAAM,CAAC,IAAU;IACxB,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,UAAU,CAAC,OAA+B;IACjD,OAAO,GAAG,CAAQ,6BAA6B,OAAO,kBAAkB,CAAC;AAC3E,CAAC;AAED,SAAS,SAAS,CAAC,MAA0I;IAC3J,OAAO,GAAG,CAAQ,gBAAgB,MAAM,yBAAyB,CAAC;AACpE,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,EAAM,EACN,SAAiB,EACjB,MAAc,EACd,GAAkC,EAClC,KAAa,EACb,IAAiB;IAEjB,MAAM,WAAW,GAAG,uBAAuB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAC/D,MAAM,YAAY,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;IAChF,MAAM,OAAO,GAAG,IAAI,EAAE,WAAW,EAAE,CAAC;IAEpC,MAAM,CAAC,UAAU,CAAC,GAAG,MAAM,EAAE;SAC1B,MAAM,CAAC;QACN,aAAa,EAAE,GAAG,CAAQ,4BAA4B,WAAW,IAAI,OAAO,CAAC,CAAC,CAAC,GAAG,CAAA,OAAO,MAAM,CAAC,SAAS,OAAO,OAAO,EAAE,CAAC,CAAC,CAAC,GAAG,CAAA,EAAE,SAAS,MAAM,CAAC,EAAE,YAAY;QAC/J,aAAa,EAAE,GAAG,CAAQ,4BAA4B,MAAM,CAAC,eAAe,MAAM,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,GAAG,CAAA,OAAO,MAAM,CAAC,SAAS,OAAO,OAAO,EAAE,CAAC,CAAC,CAAC,GAAG,CAAA,EAAE,SAAS,MAAM,CAAC,EAAE,YAAY;QACtL,eAAe,EAAE,GAAG,CAAQ,4BAA4B,WAAW,QAAQ,MAAM,CAAC,MAAM,aAAa,OAAO,CAAC,CAAC,CAAC,GAAG,CAAA,OAAO,MAAM,CAAC,WAAW,OAAO,OAAO,EAAE,CAAC,CAAC,CAAC,GAAG,CAAA,EAAE,SAAS,MAAM,CAAC,EAAE,YAAY;QACjM,kBAAkB,EAAE,GAAG,CAAQ,4BAA4B,MAAM,CAAC,cAAc,MAAM,MAAM,QAAQ,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,CAAA,GAAG,MAAM,EAAE,CAAC,EAAE,GAAG,CAAA,IAAI,CAAC,UAAU,MAAM,CAAC,EAAE,YAAY;KACxN,CAAC;SACD,IAAI,CAAC,MAAM,CAAC;SACZ,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAExE,MAAM,iBAAiB,GAAG;QACxB,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,SAAS,CAAC;QACtC,EAAE,CAAC,aAAa,CAAC,YAAY,EAAE,MAAM,CAAC;KACvC,CAAC;IACF,IAAI,IAAI;QAAE,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC;IACrE,MAAM,CAAC,YAAY,CAAC,GAAG,MAAM,EAAE;SAC5B,MAAM,CAAC,EAAE,KAAK,EAAE,GAAG,CAAQ,eAAe,EAAE,CAAC;SAC7C,IAAI,CAAC,aAAa,CAAC;SACnB,KAAK,CAAC,GAAG,CAAC,GAAG,iBAAiB,CAAC,CAAC,CAAC;IAEpC,MAAM,kBAAkB,GAAG;QACzB,EAAE,CAAC,WAAW,CAAC,SAAS,EAAE,SAAS,CAAC;QACpC,EAAE,CAAC,WAAW,CAAC,SAAS,EAAE,MAAM,CAAC;QACjC,EAAE,CAAC,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC;KAChC,CAAC;IACF,IAAI,IAAI;QAAE,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC;IACpE,MAAM,CAAC,aAAa,CAAC,GAAG,MAAM,EAAE;SAC7B,MAAM,CAAC,EAAE,KAAK,EAAE,GAAG,CAAQ,eAAe,EAAE,CAAC;SAC7C,IAAI,CAAC,WAAW,CAAC;SACjB,KAAK,CAAC,GAAG,CAAC,GAAG,kBAAkB,CAAC,CAAC,CAAC;IAErC,MAAM,cAAc,GAAG;QACrB,EAAE,CAAC,UAAU,CAAC,SAAS,EAAE,SAAS,CAAC;QACnC,uBAAuB,CAAC,SAAS,EAAE,MAAM,CAAC;KAC3C,CAAC;IACF,IAAI,IAAI;QAAE,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC;IAChE,MAAM,CAAC,SAAS,CAAC,GAAG,MAAM,EAAE;SACzB,MAAM,CAAC;QACN,SAAS,EAAE,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC;QAC1C,WAAW,EAAE,SAAS,CAAC,UAAU,CAAC,WAAW,CAAC;QAC9C,iBAAiB,EAAE,SAAS,CAAC,UAAU,CAAC,iBAAiB,CAAC;QAC1D,YAAY,EAAE,SAAS,CAAC,UAAU,CAAC,YAAY,CAAC;QAChD,cAAc,EAAE,GAAG,CAAQ,SAAS,UAAU,CAAC,EAAE,QAAQ;KAC1D,CAAC;SACD,IAAI,CAAC,UAAU,CAAC;SAChB,SAAS,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,UAAU,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;SACrG,KAAK,CAAC,GAAG,CAAC,GAAG,cAAc,CAAC,CAAC,CAAC;IAEjC,OAAO;QACL,GAAG;QACH,KAAK;QACL,aAAa,EAAE,MAAM,CAAC,UAAU,EAAE,aAAa,IAAI,CAAC,CAAC;QACrD,aAAa,EAAE,MAAM,CAAC,UAAU,EAAE,aAAa,IAAI,CAAC,CAAC;QACrD,eAAe,EAAE,MAAM,CAAC,UAAU,EAAE,eAAe,IAAI,CAAC,CAAC;QACzD,kBAAkB,EAAE,MAAM,CAAC,UAAU,EAAE,kBAAkB,IAAI,CAAC,CAAC;QAC/D,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,KAAK,IAAI,CAAC,CAAC;QAC9C,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,KAAK,IAAI,CAAC,CAAC;QAChD,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,SAAS,IAAI,CAAC,CAAC;QAC5C,WAAW,EAAE,MAAM,CAAC,SAAS,EAAE,WAAW,IAAI,CAAC,CAAC;QAChD,iBAAiB,EAAE,MAAM,CAAC,SAAS,EAAE,iBAAiB,IAAI,CAAC,CAAC;QAC5D,YAAY,EAAE,MAAM,CAAC,SAAS,EAAE,YAAY,IAAI,CAAC,CAAC;QAClD,cAAc,EAAE,MAAM,CAAC,SAAS,EAAE,cAAc,IAAI,CAAC,CAAC;KACvD,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,EAAM,EAAE,SAAiB,EAAE,MAAc;IACrE,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;IAChF,MAAM,MAAM,GAAG,IAAI,GAAG,EAAiC,CAAC;IACxD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,EAAE,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,KAAK,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QACxE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE;YACvB,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC;YAClB,aAAa,EAAE,CAAC;YAChB,eAAe,EAAE,CAAC;YAClB,SAAS,EAAE,CAAC;YACZ,WAAW,EAAE,CAAC;YACd,iBAAiB,EAAE,CAAC;YACpB,YAAY,EAAE,CAAC;SAChB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,WAAW,GAAG,UAAU,CAAC,GAAG,CAAA,GAAG,WAAW,CAAC,SAAS,EAAE,CAAC,CAAC;IAC9D,MAAM,YAAY,GAAG,MAAM,EAAE;SAC1B,MAAM,CAAC;QACN,IAAI,EAAE,WAAW;QACjB,KAAK,EAAE,GAAG,CAAQ,eAAe;KAClC,CAAC;SACD,IAAI,CAAC,WAAW,CAAC;SACjB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,WAAW,CAAC,SAAS,EAAE,SAAS,CAAC,EACpC,EAAE,CAAC,WAAW,CAAC,SAAS,EAAE,MAAM,CAAC,EACjC,EAAE,CAAC,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC,EAC/B,GAAG,CAAC,WAAW,CAAC,SAAS,EAAE,QAAQ,CAAC,CACrC,CACF;SACA,OAAO,CAAC,WAAW,CAAC,CAAC;IAExB,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,KAAK;YAAE,KAAK,CAAC,aAAa,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACrD,CAAC;IAED,MAAM,YAAY,GAAG,UAAU,CAAC,GAAG,CAAA,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;IAC5D,MAAM,aAAa,GAAG,MAAM,EAAE;SAC3B,MAAM,CAAC;QACN,IAAI,EAAE,YAAY;QAClB,KAAK,EAAE,GAAG,CAAQ,kBAAkB,MAAM,CAAC,EAAE,QAAQ;KACtD,CAAC;SACD,IAAI,CAAC,MAAM,CAAC;SACZ,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC,EAC/B,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EACvB,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EACzB,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC,EACjC,uBAAuB,CAAC,SAAS,EAAE,MAAM,CAAC,CAC3C,CACF;SACA,OAAO,CAAC,YAAY,CAAC,CAAC;IAEzB,KAAK,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,KAAK;YAAE,KAAK,CAAC,eAAe,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACvD,CAAC;IAED,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAA,GAAG,UAAU,CAAC,UAAU,EAAE,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAG,MAAM,EAAE;SACtB,MAAM,CAAC;QACN,IAAI,EAAE,OAAO;QACb,SAAS,EAAE,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC;QAC1C,WAAW,EAAE,SAAS,CAAC,UAAU,CAAC,WAAW,CAAC;QAC9C,iBAAiB,EAAE,SAAS,CAAC,UAAU,CAAC,iBAAiB,CAAC;QAC1D,YAAY,EAAE,SAAS,CAAC,UAAU,CAAC,YAAY,CAAC;KACjD,CAAC;SACD,IAAI,CAAC,UAAU,CAAC;SAChB,SAAS,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,UAAU,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;SACrG,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,UAAU,CAAC,SAAS,EAAE,SAAS,CAAC,EACnC,GAAG,CAAC,UAAU,CAAC,UAAU,EAAE,QAAQ,CAAC,EACpC,uBAAuB,CAAC,SAAS,EAAE,MAAM,CAAC,CAC3C,CACF;SACA,OAAO,CAAC,OAAO,CAAC,CAAC;IAEpB,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,KAAK,CAAC,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACxC,KAAK,CAAC,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC5C,KAAK,CAAC,iBAAiB,GAAG,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QACxD,KAAK,CAAC,YAAY,GAAG,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAChD,CAAC;IAED,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,EAAM;IACtC,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;IAExB,MAAM,CAAC,GAAG,CAAC,+CAA+C,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC7E,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,SAAmB,CAAC;QACjD,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,QAAkB,CAAC;QAC/C,mBAAmB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAEpC,MAAM,GAAG,GAAG,MAAM,kBAAkB,CAAC,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;QAC9D,IAAI,CAAC,GAAG;YAAE,MAAM,QAAQ,CAAC,gBAAgB,CAAC,CAAC;QAC3C,MAAM,aAAa,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,WAAW,CAAC;QACpE,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,WAAW,CAAC;QAE7C,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,cAAc,EAAE,SAAS,EAAE,YAAY,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC9F,OAAO,CAAC,GAAG,CACT,eAAe,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAC5B,eAAe,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CACxF,CACF;YACD,cAAc,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC;YACrC,EAAE;iBACC,MAAM,CAAC;gBACN,EAAE,EAAE,MAAM,CAAC,EAAE;gBACb,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,eAAe,EAAE,MAAM,CAAC,eAAe;gBACvC,cAAc,EAAE,MAAM,CAAC,cAAc;gBACrC,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,WAAW,EAAE,MAAM,CAAC,WAAW;aAChC,CAAC;iBACD,IAAI,CAAC,MAAM,CAAC;iBACZ,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC,EAC/B,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EACvB,uBAAuB,CAAC,SAAS,EAAE,MAAM,CAAC,CAC3C,CACF;iBACA,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;iBAC/B,KAAK,CAAC,CAAC,CAAC;YACX,EAAE;iBACC,MAAM,CAAC;gBACN,EAAE,EAAE,WAAW,CAAC,EAAE;gBAClB,MAAM,EAAE,WAAW,CAAC,MAAM;gBAC1B,UAAU,EAAE,WAAW,CAAC,UAAU;gBAClC,QAAQ,EAAE,WAAW,CAAC,QAAQ;gBAC9B,OAAO,EAAE,WAAW,CAAC,OAAO;gBAC5B,SAAS,EAAE,WAAW,CAAC,SAAS;aACjC,CAAC;iBACD,IAAI,CAAC,WAAW,CAAC;iBACjB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,WAAW,CAAC,SAAS,EAAE,SAAS,CAAC,EACpC,EAAE,CAAC,WAAW,CAAC,SAAS,EAAE,MAAM,CAAC,EACjC,EAAE,CAAC,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC,CAChC,CACF;iBACA,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;iBACpC,KAAK,CAAC,EAAE,CAAC;YACZ,EAAE;iBACC,MAAM,CAAC;gBACN,OAAO,EAAE,UAAU,CAAC,OAAO;gBAC3B,SAAS,EAAE,MAAM,CAAC,IAAI;gBACtB,SAAS,EAAE,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC;gBAC1C,WAAW,EAAE,SAAS,CAAC,UAAU,CAAC,WAAW,CAAC;gBAC9C,iBAAiB,EAAE,SAAS,CAAC,UAAU,CAAC,iBAAiB,CAAC;gBAC1D,YAAY,EAAE,SAAS,CAAC,UAAU,CAAC,YAAY,CAAC;aACjD,CAAC;iBACD,IAAI,CAAC,UAAU,CAAC;iBAChB,SAAS,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,UAAU,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;iBACrG,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC;iBACnD,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,uBAAuB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;iBAC3F,OAAO,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC;iBACxC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;iBAC9C,KAAK,CAAC,CAAC,CAAC;YACX,EAAE;iBACC,MAAM,CAAC;gBACN,QAAQ,EAAE,UAAU,CAAC,QAAQ;gBAC7B,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,KAAK,EAAE,UAAU,CAAC,KAAK;gBACvB,SAAS,EAAE,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC;gBAC1C,WAAW,EAAE,SAAS,CAAC,UAAU,CAAC,WAAW,CAAC;gBAC9C,iBAAiB,EAAE,SAAS,CAAC,UAAU,CAAC,iBAAiB,CAAC;gBAC1D,YAAY,EAAE,SAAS,CAAC,UAAU,CAAC,YAAY,CAAC;aACjD,CAAC;iBACD,IAAI,CAAC,UAAU,CAAC;iBAChB,SAAS,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,UAAU,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;iBACrG,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,uBAAuB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;iBAC3F,OAAO,CAAC,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,MAAM,EAAE,UAAU,CAAC,KAAK,CAAC;iBACjE,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;iBAC9C,KAAK,CAAC,CAAC,CAAC;SACZ,CAAC,CAAC;QAEH,MAAM,IAAI,GAAwB;YAChC,EAAE,EAAE,MAAM;YACV,IAAI,EAAE,aAAa;YACnB,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,cAAc,EAAE,GAAG,CAAC,cAAc;YAClC,gBAAgB,EAAE,GAAG,CAAC,MAAM;YAC5B,QAAQ,EAAE,GAAG,CAAC,SAAS;SACxB,CAAC;QAEF,MAAM,OAAO,GAAwB;YACnC,IAAI;YACJ,KAAK;YACL,KAAK;YACL,YAAY,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBACzC,GAAG,KAAK;gBACR,MAAM,EAAE,KAAK,CAAC,MAA+D;gBAC7E,QAAQ,EAAE,KAAK,CAAC,QAAmE;aACpF,CAAC,CAAC;YACH,cAAc;YACd,SAAS,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBACnC,GAAG,KAAK;gBACR,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC;gBAClC,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC;gBACtC,iBAAiB,EAAE,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC;gBAClD,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC;aACzC,CAAC,CAAC;YACH,YAAY,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBACzC,GAAG,KAAK;gBACR,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC;gBAClC,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC;gBACtC,iBAAiB,EAAE,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC;gBAClD,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC;aACzC,CAAC,CAAC;SACJ,CAAC;QAEF,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpB,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/routes/workspace-command-authz.d.ts

@@ -0,0 +1,14 @@
+import type { Request } from "express";
+export declare function assertNoAgentHostWorkspaceCommandMutation(req: Request, paths: string[]): void;
+export declare function collectAgentAdapterWorkspaceCommandPaths(adapterConfig: unknown, prefix?: string): string[];
+export declare function collectProjectExecutionWorkspaceCommandPaths(policy: unknown): string[];
+export declare function collectProjectWorkspaceCommandPaths(workspacePatch: unknown, prefix?: string): string[];
+export declare function collectIssueWorkspaceCommandPaths(input: {
+    executionWorkspaceSettings?: unknown;
+    assigneeAdapterOverrides?: unknown;
+}): string[];
+export declare function collectExecutionWorkspaceCommandPaths(input: {
+    config?: unknown;
+    metadata?: unknown;
+}): string[];
+//# sourceMappingURL=workspace-command-authz.d.ts.map

package/dist/routes/workspace-command-authz.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-command-authz.d.ts","sourceRoot":"","sources":["../../src/routes/workspace-command-authz.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AA0CvC,wBAAgB,yCAAyC,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,QAKtF;AAED,wBAAgB,wCAAwC,CACtD,aAAa,EAAE,OAAO,EACtB,MAAM,SAAkB,GACvB,MAAM,EAAE,CAMV;AAED,wBAAgB,4CAA4C,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,EAAE,CAMtF;AAED,wBAAgB,mCAAmC,CACjD,cAAc,EAAE,OAAO,EACvB,MAAM,SAAK,GACV,MAAM,EAAE,CAKV;AAED,wBAAgB,iCAAiC,CAAC,KAAK,EAAE;IACvD,0BAA0B,CAAC,EAAE,OAAO,CAAC;IACrC,wBAAwB,CAAC,EAAE,OAAO,CAAC;CACpC,GAAG,MAAM,EAAE,CAsBX;AAED,wBAAgB,qCAAqC,CAAC,KAAK,EAAE;IAC3D,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB,GAAG,MAAM,EAAE,CASX"}

package/dist/routes/workspace-command-authz.js

@@ -0,0 +1,83 @@
+import { forbidden } from "../errors.js";
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function hasOwn(value, key) {
+    return Object.prototype.hasOwnProperty.call(value, key);
+}
+function prefixPath(prefix, key) {
+    return prefix.length > 0 ? `${prefix}.${key}` : key;
+}
+function collectWorkspaceStrategyCommandPaths(raw, prefix) {
+    if (!isRecord(raw))
+        return [];
+    const paths = [];
+    if (hasOwn(raw, "provisionCommand")) {
+        paths.push(prefixPath(prefix, "provisionCommand"));
+    }
+    if (hasOwn(raw, "teardownCommand")) {
+        paths.push(prefixPath(prefix, "teardownCommand"));
+    }
+    return paths;
+}
+function collectExecutionWorkspaceConfigCommandPaths(raw, prefix) {
+    if (!isRecord(raw))
+        return [];
+    const paths = [];
+    if (hasOwn(raw, "provisionCommand")) {
+        paths.push(prefixPath(prefix, "provisionCommand"));
+    }
+    if (hasOwn(raw, "teardownCommand")) {
+        paths.push(prefixPath(prefix, "teardownCommand"));
+    }
+    if (hasOwn(raw, "cleanupCommand")) {
+        paths.push(prefixPath(prefix, "cleanupCommand"));
+    }
+    return paths;
+}
+export function assertNoAgentHostWorkspaceCommandMutation(req, paths) {
+    if (req.actor.type !== "agent" || paths.length === 0)
+        return;
+    throw forbidden(`Agent keys cannot modify host-executed workspace commands (${paths.join(", ")}).`);
+}
+export function collectAgentAdapterWorkspaceCommandPaths(adapterConfig, prefix = "adapterConfig") {
+    if (!isRecord(adapterConfig))
+        return [];
+    return collectWorkspaceStrategyCommandPaths(adapterConfig.workspaceStrategy, `${prefix}.workspaceStrategy`);
+}
+export function collectProjectExecutionWorkspaceCommandPaths(policy) {
+    if (!isRecord(policy))
+        return [];
+    return collectWorkspaceStrategyCommandPaths(policy.workspaceStrategy, "executionWorkspacePolicy.workspaceStrategy");
+}
+export function collectProjectWorkspaceCommandPaths(workspacePatch, prefix = "") {
+    if (!isRecord(workspacePatch))
+        return [];
+    return hasOwn(workspacePatch, "cleanupCommand")
+        ? [prefixPath(prefix, "cleanupCommand")]
+        : [];
+}
+export function collectIssueWorkspaceCommandPaths(input) {
+    const paths = [];
+    if (isRecord(input.executionWorkspaceSettings)) {
+        paths.push(...collectWorkspaceStrategyCommandPaths(input.executionWorkspaceSettings.workspaceStrategy, "executionWorkspaceSettings.workspaceStrategy"));
+    }
+    if (isRecord(input.assigneeAdapterOverrides)) {
+        const adapterConfig = input.assigneeAdapterOverrides.adapterConfig;
+        if (isRecord(adapterConfig)) {
+            paths.push(...collectWorkspaceStrategyCommandPaths(adapterConfig.workspaceStrategy, "assigneeAdapterOverrides.adapterConfig.workspaceStrategy"));
+        }
+    }
+    return paths;
+}
+export function collectExecutionWorkspaceCommandPaths(input) {
+    const paths = [];
+    if (input.config !== undefined) {
+        paths.push(...collectExecutionWorkspaceConfigCommandPaths(input.config, "config"));
+    }
+    if (isRecord(input.metadata) && hasOwn(input.metadata, "config")) {
+        paths.push(...collectExecutionWorkspaceConfigCommandPaths(input.metadata.config, "metadata.config"));
+    }
+    return paths;
+}
+//# sourceMappingURL=workspace-command-authz.js.map

package/dist/routes/workspace-command-authz.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-command-authz.js","sourceRoot":"","sources":["../../src/routes/workspace-command-authz.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAEzC,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,MAAM,CAAC,KAA8B,EAAE,GAAW;IACzD,OAAO,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,UAAU,CAAC,MAAc,EAAE,GAAW;IAC7C,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;AACtD,CAAC;AAED,SAAS,oCAAoC,CAAC,GAAY,EAAE,MAAc;IACxE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAC9B,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,MAAM,CAAC,GAAG,EAAE,kBAAkB,CAAC,EAAE,CAAC;QACpC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC,CAAC;IACrD,CAAC;IACD,IAAI,MAAM,CAAC,GAAG,EAAE,iBAAiB,CAAC,EAAE,CAAC;QACnC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,2CAA2C,CAAC,GAAY,EAAE,MAAc;IAC/E,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAC9B,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,MAAM,CAAC,GAAG,EAAE,kBAAkB,CAAC,EAAE,CAAC;QACpC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC,CAAC;IACrD,CAAC;IACD,IAAI,MAAM,CAAC,GAAG,EAAE,iBAAiB,CAAC,EAAE,CAAC;QACnC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,MAAM,CAAC,GAAG,EAAE,gBAAgB,CAAC,EAAE,CAAC;QAClC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,yCAAyC,CAAC,GAAY,EAAE,KAAe;IACrF,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAC7D,MAAM,SAAS,CACb,8DAA8D,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CACnF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wCAAwC,CACtD,aAAsB,EACtB,MAAM,GAAG,eAAe;IAExB,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC;QAAE,OAAO,EAAE,CAAC;IACxC,OAAO,oCAAoC,CACzC,aAAa,CAAC,iBAAiB,EAC/B,GAAG,MAAM,oBAAoB,CAC9B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,4CAA4C,CAAC,MAAe;IAC1E,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,OAAO,oCAAoC,CACzC,MAAM,CAAC,iBAAiB,EACxB,4CAA4C,CAC7C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mCAAmC,CACjD,cAAuB,EACvB,MAAM,GAAG,EAAE;IAEX,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC;QAAE,OAAO,EAAE,CAAC;IACzC,OAAO,MAAM,CAAC,cAAc,EAAE,gBAAgB,CAAC;QAC7C,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;QACxC,CAAC,CAAC,EAAE,CAAC;AACT,CAAC;AAED,MAAM,UAAU,iCAAiC,CAAC,KAGjD;IACC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,QAAQ,CAAC,KAAK,CAAC,0BAA0B,CAAC,EAAE,CAAC;QAC/C,KAAK,CAAC,IAAI,CACR,GAAG,oCAAoC,CACrC,KAAK,CAAC,0BAA0B,CAAC,iBAAiB,EAClD,8CAA8C,CAC/C,CACF,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,KAAK,CAAC,wBAAwB,CAAC,EAAE,CAAC;QAC7C,MAAM,aAAa,GAAG,KAAK,CAAC,wBAAwB,CAAC,aAAa,CAAC;QACnE,IAAI,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;YAC5B,KAAK,CAAC,IAAI,CACR,GAAG,oCAAoC,CACrC,aAAa,CAAC,iBAAiB,EAC/B,0DAA0D,CAC3D,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,qCAAqC,CAAC,KAGrD;IACC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC/B,KAAK,CAAC,IAAI,CAAC,GAAG,2CAA2C,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;IACrF,CAAC;IACD,IAAI,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;QACjE,KAAK,CAAC,IAAI,CAAC,GAAG,2CAA2C,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC,CAAC;IACvG,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}