@generacy-ai/orchestrator 0.0.0-preview-20260304013206

package/dist/routes/pr-webhooks.js

@@ -0,0 +1,114 @@
+import { createHmac, timingSafeEqual } from 'node:crypto';
+/**
+ * Verify the HMAC-SHA256 signature from GitHub webhook.
+ * Returns true if signature is valid or if no secret is configured.
+ */
+function verifySignature(secret, rawBody, signatureHeader) {
+    if (!secret) {
+        // No secret configured — skip verification (dev mode)
+        return true;
+    }
+    if (!signatureHeader) {
+        return false;
+    }
+    const expectedPrefix = 'sha256=';
+    if (!signatureHeader.startsWith(expectedPrefix)) {
+        return false;
+    }
+    const signature = signatureHeader.slice(expectedPrefix.length);
+    const hmac = createHmac('sha256', secret).update(rawBody).digest('hex');
+    // Use timing-safe comparison to prevent timing attacks
+    try {
+        return timingSafeEqual(Buffer.from(signature, 'hex'), Buffer.from(hmac, 'hex'));
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Setup webhook routes for receiving GitHub PR review events.
+ * The webhook route bypasses global auth middleware — authentication
+ * is handled via HMAC-SHA256 signature verification.
+ */
+export async function setupPrWebhookRoutes(server, options) {
+    const { monitorService, webhookSecret, watchedRepos } = options;
+    // Register a custom content type parser to capture raw body for signature verification
+    server.addContentTypeParser('application/json', { parseAs: 'string' }, (_req, body, done) => {
+        try {
+            const json = JSON.parse(body);
+            // Attach raw body for signature verification
+            done(null, { parsed: json, raw: body });
+        }
+        catch (err) {
+            done(err, undefined);
+        }
+    });
+    // Auth is skipped for /webhooks/github/pr-review via server.ts skipRoutes config.
+    // Authentication is handled via HMAC-SHA256 signature verification.
+    server.post('/webhooks/github/pr-review', {}, async (request, reply) => {
+        const body = request.body;
+        const rawBody = body.raw;
+        const payload = body.parsed;
+        // Verify webhook signature
+        const signatureHeader = request.headers['x-hub-signature-256'];
+        if (!verifySignature(webhookSecret, rawBody, signatureHeader)) {
+            server.log.warn('Invalid webhook signature for PR review event');
+            return reply.status(401).send({ error: 'Invalid signature' });
+        }
+        // Check the GitHub event type from the X-GitHub-Event header
+        const eventType = request.headers['x-github-event'];
+        // Only handle pull_request_review.submitted and pull_request_review_comment.created events
+        const validEvents = ['pull_request_review', 'pull_request_review_comment'];
+        if (!eventType || !validEvents.includes(eventType)) {
+            return reply.status(200).send({
+                status: 'ignored',
+                reason: `not a PR review event (got: ${eventType})`
+            });
+        }
+        // For pull_request_review events, only process "submitted" action
+        if (eventType === 'pull_request_review' && payload.action !== 'submitted') {
+            return reply.status(200).send({
+                status: 'ignored',
+                reason: `not a submitted review (got action: ${payload.action})`
+            });
+        }
+        // For pull_request_review_comment events, only process "created" action
+        if (eventType === 'pull_request_review_comment' && payload.action !== 'created') {
+            return reply.status(200).send({
+                status: 'ignored',
+                reason: `not a created comment (got action: ${payload.action})`
+            });
+        }
+        // Verify this is a watched repository
+        const repoKey = `${payload.repository.owner.login}/${payload.repository.name}`;
+        if (!watchedRepos.has(repoKey)) {
+            return reply.status(200).send({
+                status: 'ignored',
+                reason: 'not a watched repository'
+            });
+        }
+        // Build PrReviewEvent from webhook payload
+        const event = {
+            owner: payload.repository.owner.login,
+            repo: payload.repository.name,
+            prNumber: payload.pull_request.number,
+            prBody: payload.pull_request.body || '',
+            branchName: payload.pull_request.head.ref,
+            source: 'webhook',
+        };
+        // Record webhook event for adaptive polling health tracking
+        monitorService.recordWebhookEvent();
+        // Process the event
+        const processed = await monitorService.processPrReviewEvent(event);
+        return reply.status(200).send({
+            status: processed ? 'processed' : 'duplicate',
+            event: {
+                type: eventType,
+                action: payload.action,
+                pr: payload.pull_request.number,
+                repo: repoKey,
+            },
+        });
+    });
+}
+//# sourceMappingURL=pr-webhooks.js.map

package/dist/routes/pr-webhooks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pr-webhooks.js","sourceRoot":"","sources":["../../src/routes/pr-webhooks.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAI1D;;;GAGG;AACH,SAAS,eAAe,CAAC,MAA0B,EAAE,OAAe,EAAE,eAAmC;IACvG,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,sDAAsD;QACtD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,cAAc,GAAG,SAAS,CAAC;IACjC,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QAChD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,SAAS,GAAG,eAAe,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;IAC/D,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAExE,uDAAuD;IACvD,IAAI,CAAC;QACH,OAAO,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;IAClF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AASD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,MAAuB,EACvB,OAA8B;IAE9B,MAAM,EAAE,cAAc,EAAE,aAAa,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC;IAEhE,uFAAuF;IACvF,MAAM,CAAC,oBAAoB,CACzB,kBAAkB,EAClB,EAAE,OAAO,EAAE,QAAQ,EAAE,EACrB,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;QACnB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAc,CAAC,CAAC;YACxC,6CAA6C;YAC7C,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,GAAY,EAAE,SAAS,CAAC,CAAC;QAChC,CAAC;IACH,CAAC,CACF,CAAC;IAEF,kFAAkF;IAClF,oEAAoE;IACpE,MAAM,CAAC,IAAI,CACT,4BAA4B,EAC5B,EAAE,EACF,KAAK,EAAE,OAAuB,EAAE,KAAmB,EAAE,EAAE;QACrD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAwC,CAAC;QAC9D,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,MAAsC,CAAC;QAE5D,2BAA2B;QAC3B,MAAM,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC,qBAAqB,CAAuB,CAAC;QACrF,IAAI,CAAC,eAAe,CAAC,aAAa,EAAE,OAAO,EAAE,eAAe,CAAC,EAAE,CAAC;YAC9D,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAC;YACjE,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;QAChE,CAAC;QAED,6DAA6D;QAC7D,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAuB,CAAC;QAE1E,2FAA2F;QAC3F,MAAM,WAAW,GAAG,CAAC,qBAAqB,EAAE,6BAA6B,CAAC,CAAC;QAC3E,IAAI,CAAC,SAAS,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YACnD,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBAC5B,MAAM,EAAE,SAAS;gBACjB,MAAM,EAAE,+BAA+B,SAAS,GAAG;aACpD,CAAC,CAAC;QACL,CAAC;QAED,kEAAkE;QAClE,IAAI,SAAS,KAAK,qBAAqB,IAAI,OAAO,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YAC1E,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBAC5B,MAAM,EAAE,SAAS;gBACjB,MAAM,EAAE,uCAAuC,OAAO,CAAC,MAAM,GAAG;aACjE,CAAC,CAAC;QACL,CAAC;QAED,wEAAwE;QACxE,IAAI,SAAS,KAAK,6BAA6B,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAChF,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBAC5B,MAAM,EAAE,SAAS;gBACjB,MAAM,EAAE,sCAAsC,OAAO,CAAC,MAAM,GAAG;aAChE,CAAC,CAAC;QACL,CAAC;QAED,sCAAsC;QACtC,MAAM,OAAO,GAAG,GAAG,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;QAC/E,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/B,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBAC5B,MAAM,EAAE,SAAS;gBACjB,MAAM,EAAE,0BAA0B;aACnC,CAAC,CAAC;QACL,CAAC;QAED,2CAA2C;QAC3C,MAAM,KAAK,GAAkB;YAC3B,KAAK,EAAE,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK;YACrC,IAAI,EAAE,OAAO,CAAC,UAAU,CAAC,IAAI;YAC7B,QAAQ,EAAE,OAAO,CAAC,YAAY,CAAC,MAAM;YACrC,MAAM,EAAE,OAAO,CAAC,YAAY,CAAC,IAAI,IAAI,EAAE;YACvC,UAAU,EAAE,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG;YACzC,MAAM,EAAE,SAAS;SAClB,CAAC;QAEF,4DAA4D;QAC5D,cAAc,CAAC,kBAAkB,EAAE,CAAC;QAEpC,oBAAoB;QACpB,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC;QAEnE,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YAC5B,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW;YAC7C,KAAK,EAAE;gBACL,IAAI,EAAE,SAAS;gBACf,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,EAAE,EAAE,OAAO,CAAC,YAAY,CAAC,MAAM;gBAC/B,IAAI,EAAE,OAAO;aACd;SACF,CAAC,CAAC;IACL,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/routes/queue.d.ts

@@ -0,0 +1,7 @@
+import type { FastifyInstance } from 'fastify';
+import { QueueService } from '../services/queue-service.js';
+/**
+ * Setup queue routes
+ */
+export declare function setupQueueRoutes(server: FastifyInstance, queueService: QueueService): Promise<void>;
+//# sourceMappingURL=queue.d.ts.map

package/dist/routes/queue.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"queue.d.ts","sourceRoot":"","sources":["../../src/routes/queue.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAgC,MAAM,SAAS,CAAC;AAO7E,OAAO,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAK5D;;GAEG;AACH,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,eAAe,EACvB,YAAY,EAAE,YAAY,GACzB,OAAO,CAAC,IAAI,CAAC,CAuHf"}

package/dist/routes/queue.js

@@ -0,0 +1,94 @@
+import { QueueQuerySchema, DecisionIdParamSchema, DecisionResponseRequestSchema, CreateDecisionRequestSchema, } from '../types/index.js';
+import { requireRead, requireWrite } from '../auth/middleware.js';
+import { getSSESubscriptionManager } from '../sse/subscriptions.js';
+import { createQueueEvent } from '../sse/events.js';
+/**
+ * Setup queue routes
+ */
+export async function setupQueueRoutes(server, queueService) {
+    // GET /queue - Get decision queue
+    server.get('/queue', {
+        preHandler: [requireRead('queue')],
+        schema: {
+            querystring: {
+                type: 'object',
+                properties: {
+                    priority: {
+                        type: 'string',
+                        enum: ['blocking_now', 'blocking_soon', 'when_available'],
+                    },
+                    workflowId: { type: 'string' },
+                },
+            },
+        },
+    }, async (request, reply) => {
+        const query = QueueQuerySchema.parse(request.query);
+        const items = await queueService.getQueue(query);
+        return reply.send(items);
+    });
+    // POST /queue - Create a new decision
+    server.post('/queue', {
+        preHandler: [requireWrite('queue')],
+        // Body validation done by Zod in handler to support defaults and coercion
+    }, async (request, reply) => {
+        const body = CreateDecisionRequestSchema.parse(request.body);
+        const item = await queueService.createDecision(body);
+        // Broadcast queue:item:added SSE event
+        const queue = await queueService.getQueue();
+        const manager = getSSESubscriptionManager();
+        const event = createQueueEvent('added', [item], queue.length, 'internal', Date.now());
+        manager.broadcast('queue', event);
+        return reply.status(201).send(item);
+    });
+    // GET /queue/:id - Get specific decision
+    server.get('/queue/:id', {
+        preHandler: [requireRead('queue')],
+        schema: {
+            params: {
+                type: 'object',
+                properties: {
+                    id: { type: 'string', format: 'uuid' },
+                },
+                required: ['id'],
+            },
+        },
+    }, async (request, reply) => {
+        const params = DecisionIdParamSchema.parse(request.params);
+        const decision = await queueService.getDecision(params.id);
+        return reply.send(decision);
+    });
+    // POST /queue/:id/respond - Submit decision response
+    server.post('/queue/:id/respond', {
+        preHandler: [requireWrite('queue')],
+        schema: {
+            params: {
+                type: 'object',
+                properties: {
+                    id: { type: 'string', format: 'uuid' },
+                },
+                required: ['id'],
+            },
+            // Body validation done by Zod in handler to support complex union types
+        },
+    }, async (request, reply) => {
+        const params = DecisionIdParamSchema.parse(request.params);
+        const body = DecisionResponseRequestSchema.parse(request.body);
+        // Fetch the decision item before responding (respond removes it from the queue)
+        const item = await queueService.getDecision(params.id);
+        const response = await queueService.respond(params.id, body, request.auth.userId);
+        // Broadcast queue:item:removed SSE event with the response included
+        const queue = await queueService.getQueue();
+        const manager = getSSESubscriptionManager();
+        const event = createQueueEvent('removed', [item], queue.length, 'internal', Date.now(), response);
+        manager.broadcast('queue', event);
+        return reply.send(response);
+    });
+    // GET /queue/stats - Get queue statistics
+    server.get('/queue/stats', {
+        preHandler: [requireRead('queue')],
+    }, async (_request, reply) => {
+        const stats = await queueService.getQueueStats();
+        return reply.send(stats);
+    });
+}
+//# sourceMappingURL=queue.js.map

package/dist/routes/queue.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"queue.js","sourceRoot":"","sources":["../../src/routes/queue.ts"],"names":[],"mappings":"AACA,OAAO,EACL,gBAAgB,EAChB,qBAAqB,EACrB,6BAA6B,EAC7B,2BAA2B,GAC5B,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAClE,OAAO,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AACpE,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAEpD;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,MAAuB,EACvB,YAA0B;IAE1B,kCAAkC;IAClC,MAAM,CAAC,GAAG,CACR,QAAQ,EACR;QACE,UAAU,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAClC,MAAM,EAAE;YACN,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,QAAQ,EAAE;wBACR,IAAI,EAAE,QAAQ;wBACd,IAAI,EAAE,CAAC,cAAc,EAAE,eAAe,EAAE,gBAAgB,CAAC;qBAC1D;oBACD,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;iBAC/B;aACF;SACO;KACX,EACD,KAAK,EAAE,OAAuB,EAAE,KAAmB,EAAE,EAAE;QACrD,MAAM,KAAK,GAAG,gBAAgB,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACpD,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACjD,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC,CACF,CAAC;IAEF,sCAAsC;IACtC,MAAM,CAAC,IAAI,CACT,QAAQ,EACR;QACE,UAAU,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QACnC,0EAA0E;KAC3E,EACD,KAAK,EAAE,OAAuB,EAAE,KAAmB,EAAE,EAAE;QACrD,MAAM,IAAI,GAAG,2BAA2B,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC7D,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QAErD,uCAAuC;QACvC,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,QAAQ,EAAE,CAAC;QAC5C,MAAM,OAAO,GAAG,yBAAyB,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,gBAAgB,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QACtF,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAElC,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC,CACF,CAAC;IAEF,yCAAyC;IACzC,MAAM,CAAC,GAAG,CACR,YAAY,EACZ;QACE,UAAU,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAClC,MAAM,EAAE;YACN,MAAM,EAAE;gBACN,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE;iBACvC;gBACD,QAAQ,EAAE,CAAC,IAAI,CAAC;aACjB;SACF;KACF,EACD,KAAK,EAAE,OAAuB,EAAE,KAAmB,EAAE,EAAE;QACrD,MAAM,MAAM,GAAG,qBAAqB,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC3D,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC3D,OAAO,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC9B,CAAC,CACF,CAAC;IAEF,qDAAqD;IACrD,MAAM,CAAC,IAAI,CACT,oBAAoB,EACpB;QACE,UAAU,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QACnC,MAAM,EAAE;YACN,MAAM,EAAE;gBACN,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE;iBACvC;gBACD,QAAQ,EAAE,CAAC,IAAI,CAAC;aACjB;YACD,wEAAwE;SACzE;KACF,EACD,KAAK,EAAE,OAAuB,EAAE,KAAmB,EAAE,EAAE;QACrD,MAAM,MAAM,GAAG,qBAAqB,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC3D,MAAM,IAAI,GAAG,6BAA6B,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAE/D,gFAAgF;QAChF,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAEvD,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,OAAO,CACzC,MAAM,CAAC,EAAE,EACT,IAAI,EACJ,OAAO,CAAC,IAAI,CAAC,MAAM,CACpB,CAAC;QAEF,oEAAoE;QACpE,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,QAAQ,EAAE,CAAC;QAC5C,MAAM,OAAO,GAAG,yBAAyB,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,gBAAgB,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,QAAQ,CAAC,CAAC;QAClG,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAElC,OAAO,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC9B,CAAC,CACF,CAAC;IAEF,0CAA0C;IAC1C,MAAM,CAAC,GAAG,CACR,cAAc,EACd;QACE,UAAU,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;KACnC,EACD,KAAK,EAAE,QAAwB,EAAE,KAAmB,EAAE,EAAE;QACtD,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,aAAa,EAAE,CAAC;QACjD,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/routes/webhooks.d.ts

@@ -0,0 +1,15 @@
+import type { FastifyInstance } from 'fastify';
+import type { LabelMonitorService } from '../services/label-monitor-service.js';
+export interface WebhookRouteOptions {
+    monitorService: LabelMonitorService;
+    webhookSecret?: string;
+    watchedRepos: Set<string>;
+    clusterGithubUsername?: string;
+}
+/**
+ * Setup webhook routes for receiving GitHub events.
+ * The webhook route bypasses global auth middleware — authentication
+ * is handled via HMAC-SHA256 signature verification.
+ */
+export declare function setupWebhookRoutes(server: FastifyInstance, options: WebhookRouteOptions): Promise<void>;
+//# sourceMappingURL=webhooks.d.ts.map

package/dist/routes/webhooks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhooks.d.ts","sourceRoot":"","sources":["../../src/routes/webhooks.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAgC,MAAM,SAAS,CAAC;AAE7E,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sCAAsC,CAAC;AAiChF,MAAM,WAAW,mBAAmB;IAClC,cAAc,EAAE,mBAAmB,CAAC;IACpC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC1B,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAChC;AAED;;;;GAIG;AACH,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,eAAe,EACvB,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,IAAI,CAAC,CA2Hf"}

package/dist/routes/webhooks.js

@@ -0,0 +1,117 @@
+import { createHmac, timingSafeEqual } from 'node:crypto';
+/**
+ * Verify the HMAC-SHA256 signature from GitHub webhook.
+ * Returns true if signature is valid or if no secret is configured.
+ */
+function verifySignature(secret, rawBody, signatureHeader) {
+    if (!secret) {
+        // No secret configured — skip verification (dev mode)
+        return true;
+    }
+    if (!signatureHeader) {
+        return false;
+    }
+    const expectedPrefix = 'sha256=';
+    if (!signatureHeader.startsWith(expectedPrefix)) {
+        return false;
+    }
+    const signature = signatureHeader.slice(expectedPrefix.length);
+    const hmac = createHmac('sha256', secret).update(rawBody).digest('hex');
+    // Use timing-safe comparison to prevent timing attacks
+    try {
+        return timingSafeEqual(Buffer.from(signature, 'hex'), Buffer.from(hmac, 'hex'));
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Setup webhook routes for receiving GitHub events.
+ * The webhook route bypasses global auth middleware — authentication
+ * is handled via HMAC-SHA256 signature verification.
+ */
+export async function setupWebhookRoutes(server, options) {
+    const { monitorService, webhookSecret, watchedRepos, clusterGithubUsername } = options;
+    // Register a custom content type parser to capture raw body for signature verification
+    server.addContentTypeParser('application/json', { parseAs: 'string' }, (_req, body, done) => {
+        try {
+            const json = JSON.parse(body);
+            // Attach raw body for signature verification
+            done(null, { parsed: json, raw: body });
+        }
+        catch (err) {
+            done(err, undefined);
+        }
+    });
+    // Auth is skipped for /webhooks/github via server.ts skipRoutes config.
+    // Authentication is handled via HMAC-SHA256 signature verification.
+    server.post('/webhooks/github', {}, async (request, reply) => {
+        const body = request.body;
+        const rawBody = body.raw;
+        const payload = body.parsed;
+        // Verify webhook signature
+        const signatureHeader = request.headers['x-hub-signature-256'];
+        if (!verifySignature(webhookSecret, rawBody, signatureHeader)) {
+            server.log.warn('Invalid webhook signature');
+            return reply.status(401).send({ error: 'Invalid signature' });
+        }
+        // Only handle "labeled" events
+        if (payload.action !== 'labeled') {
+            return reply.status(200).send({ status: 'ignored', reason: 'not a labeled event' });
+        }
+        // Verify this is a watched repository
+        const repoKey = `${payload.repository.owner.login}/${payload.repository.name}`;
+        if (!watchedRepos.has(repoKey)) {
+            return reply.status(200).send({ status: 'ignored', reason: 'not a watched repository' });
+        }
+        // Assignee filtering: only process issues assigned to this cluster
+        if (clusterGithubUsername) {
+            const assigneeLogins = (payload.issue.assignees ?? []).map(a => a.login);
+            if (assigneeLogins.length === 0) {
+                server.log.warn({ issue: payload.issue.number, repo: repoKey }, 'Webhook: skipping issue with no assignees');
+                return reply.status(200).send({
+                    status: 'ignored',
+                    reason: 'issue has no assignees',
+                });
+            }
+            if (!assigneeLogins.includes(clusterGithubUsername)) {
+                server.log.debug({ issue: payload.issue.number, repo: repoKey, assignees: assigneeLogins }, 'Webhook: skipping issue not assigned to this cluster');
+                return reply.status(200).send({
+                    status: 'ignored',
+                    reason: 'not assigned to this cluster',
+                });
+            }
+        }
+        // Parse and process the label event
+        const issueLabels = payload.issue.labels.map(l => l.name);
+        const event = monitorService.parseLabelEvent(payload.label.name, payload.repository.owner.login, payload.repository.name, payload.issue.number, issueLabels, 'webhook');
+        if (!event) {
+            // For completed:* labels without matching waiting-for:*, re-fetch from GitHub
+            if (payload.label.name.startsWith('completed:')) {
+                server.log.info({ label: payload.label.name, repo: repoKey, issue: payload.issue.number }, 'Webhook completed:* label has no matching waiting-for:*, attempting re-fetch');
+                monitorService.recordWebhookEvent();
+                const refetchResult = await monitorService.verifyAndProcessCompletedLabel(payload.repository.owner.login, payload.repository.name, payload.issue.number, payload.label.name);
+                return reply.status(200).send({
+                    status: refetchResult ? 'processed' : 'ignored',
+                    reason: refetchResult
+                        ? 'resume detected after label re-fetch'
+                        : 'no matching waiting-for:* after re-fetch',
+                });
+            }
+            return reply.status(200).send({ status: 'ignored', reason: 'not a trigger label' });
+        }
+        // Record webhook event for adaptive polling health tracking
+        monitorService.recordWebhookEvent();
+        // Process the event
+        const processed = await monitorService.processLabelEvent(event);
+        return reply.status(200).send({
+            status: processed ? 'processed' : 'duplicate',
+            event: {
+                type: event.type,
+                issue: event.issueNumber,
+                label: event.labelName,
+            },
+        });
+    });
+}
+//# sourceMappingURL=webhooks.js.map

package/dist/routes/webhooks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhooks.js","sourceRoot":"","sources":["../../src/routes/webhooks.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAI1D;;;GAGG;AACH,SAAS,eAAe,CAAC,MAA0B,EAAE,OAAe,EAAE,eAAmC;IACvG,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,sDAAsD;QACtD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,cAAc,GAAG,SAAS,CAAC;IACjC,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QAChD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,SAAS,GAAG,eAAe,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;IAC/D,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAExE,uDAAuD;IACvD,IAAI,CAAC;QACH,OAAO,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;IAClF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AASD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,MAAuB,EACvB,OAA4B;IAE5B,MAAM,EAAE,cAAc,EAAE,aAAa,EAAE,YAAY,EAAE,qBAAqB,EAAE,GAAG,OAAO,CAAC;IAEvF,uFAAuF;IACvF,MAAM,CAAC,oBAAoB,CACzB,kBAAkB,EAClB,EAAE,OAAO,EAAE,QAAQ,EAAE,EACrB,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;QACnB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAc,CAAC,CAAC;YACxC,6CAA6C;YAC7C,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,GAAY,EAAE,SAAS,CAAC,CAAC;QAChC,CAAC;IACH,CAAC,CACF,CAAC;IAEF,wEAAwE;IACxE,oEAAoE;IACpE,MAAM,CAAC,IAAI,CACT,kBAAkB,EAClB,EAAE,EACF,KAAK,EAAE,OAAuB,EAAE,KAAmB,EAAE,EAAE;QACrD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAwC,CAAC;QAC9D,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,MAA8B,CAAC;QAEpD,2BAA2B;QAC3B,MAAM,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC,qBAAqB,CAAuB,CAAC;QACrF,IAAI,CAAC,eAAe,CAAC,aAAa,EAAE,OAAO,EAAE,eAAe,CAAC,EAAE,CAAC;YAC9D,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;YAC7C,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;QAChE,CAAC;QAED,+BAA+B;QAC/B,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACjC,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC,CAAC;QACtF,CAAC;QAED,sCAAsC;QACtC,MAAM,OAAO,GAAG,GAAG,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;QAC/E,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/B,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC,CAAC;QAC3F,CAAC;QAED,mEAAmE;QACnE,IAAI,qBAAqB,EAAE,CAAC;YAC1B,MAAM,cAAc,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YACzE,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAChC,MAAM,CAAC,GAAG,CAAC,IAAI,CACb,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,EAC9C,2CAA2C,CAC5C,CAAC;gBACF,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBAC5B,MAAM,EAAE,SAAS;oBACjB,MAAM,EAAE,wBAAwB;iBACjC,CAAC,CAAC;YACL,CAAC;YACD,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,CAAC;gBACpD,MAAM,CAAC,GAAG,CAAC,KAAK,CACd,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,EACzE,sDAAsD,CACvD,CAAC;gBACF,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBAC5B,MAAM,EAAE,SAAS;oBACjB,MAAM,EAAE,8BAA8B;iBACvC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,oCAAoC;QACpC,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC1D,MAAM,KAAK,GAAG,cAAc,CAAC,eAAe,CAC1C,OAAO,CAAC,KAAK,CAAC,IAAI,EAClB,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,EAC9B,OAAO,CAAC,UAAU,CAAC,IAAI,EACvB,OAAO,CAAC,KAAK,CAAC,MAAM,EACpB,WAAW,EACX,SAAS,CACV,CAAC;QAEF,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,8EAA8E;YAC9E,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;gBAChD,MAAM,CAAC,GAAG,CAAC,IAAI,CACb,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,EACzE,8EAA8E,CAC/E,CAAC;gBACF,cAAc,CAAC,kBAAkB,EAAE,CAAC;gBACpC,MAAM,aAAa,GAAG,MAAM,cAAc,CAAC,8BAA8B,CACvE,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,EAC9B,OAAO,CAAC,UAAU,CAAC,IAAI,EACvB,OAAO,CAAC,KAAK,CAAC,MAAM,EACpB,OAAO,CAAC,KAAK,CAAC,IAAI,CACnB,CAAC;gBACF,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBAC5B,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;oBAC/C,MAAM,EAAE,aAAa;wBACnB,CAAC,CAAC,sCAAsC;wBACxC,CAAC,CAAC,0CAA0C;iBAC/C,CAAC,CAAC;YACL,CAAC;YAED,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC,CAAC;QACtF,CAAC;QAED,4DAA4D;QAC5D,cAAc,CAAC,kBAAkB,EAAE,CAAC;QAEpC,oBAAoB;QACpB,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAEhE,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YAC5B,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW;YAC7C,KAAK,EAAE;gBACL,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,KAAK,EAAE,KAAK,CAAC,WAAW;gBACxB,KAAK,EAAE,KAAK,CAAC,SAAS;aACvB;SACF,CAAC,CAAC;IACL,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/routes/workflows.d.ts

@@ -0,0 +1,7 @@
+import type { FastifyInstance } from 'fastify';
+import { WorkflowService } from '../services/workflow-service.js';
+/**
+ * Setup workflow routes
+ */
+export declare function setupWorkflowRoutes(server: FastifyInstance, workflowService: WorkflowService): Promise<void>;
+//# sourceMappingURL=workflows.d.ts.map

package/dist/routes/workflows.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflows.d.ts","sourceRoot":"","sources":["../../src/routes/workflows.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAgC,MAAM,SAAS,CAAC;AAM7E,OAAO,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAGlE;;GAEG;AACH,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,eAAe,EACvB,eAAe,EAAE,eAAe,GAC/B,OAAO,CAAC,IAAI,CAAC,CAiKf"}

package/dist/routes/workflows.js

@@ -0,0 +1,138 @@
+import { CreateWorkflowRequestSchema, ListWorkflowsQuerySchema, WorkflowIdParamSchema, } from '../types/index.js';
+import { requireRead, requireWrite } from '../auth/middleware.js';
+/**
+ * Setup workflow routes
+ */
+export async function setupWorkflowRoutes(server, workflowService) {
+    // POST /workflows - Create and start a workflow
+    server.post('/workflows', {
+        preHandler: [requireWrite('workflows')],
+        schema: {
+            description: 'Create and start a new workflow',
+            tags: ['Workflows'],
+            body: {
+                type: 'object',
+                properties: {
+                    definitionId: { type: 'string' },
+                    definition: { type: 'object' },
+                    context: { type: 'object' },
+                    metadata: {
+                        type: 'object',
+                        properties: {
+                            name: { type: 'string' },
+                            tags: { type: 'array', items: { type: 'string' } },
+                        },
+                    },
+                },
+                required: ['context'],
+            },
+        },
+    }, async (request, reply) => {
+        const body = CreateWorkflowRequestSchema.parse(request.body);
+        const workflow = await workflowService.create(body);
+        return reply
+            .status(201)
+            .header('location', `/workflows/${workflow.id}`)
+            .send(workflow);
+    });
+    // GET /workflows - List workflows
+    server.get('/workflows', {
+        preHandler: [requireRead('workflows')],
+        schema: {
+            description: 'List workflows',
+            tags: ['Workflows'],
+            querystring: {
+                type: 'object',
+                properties: {
+                    status: {
+                        type: 'string',
+                        enum: ['created', 'running', 'paused', 'completed', 'cancelled', 'failed'],
+                    },
+                    page: { type: 'integer', minimum: 1, default: 1 },
+                    pageSize: { type: 'integer', minimum: 1, maximum: 100, default: 20 },
+                },
+            },
+        },
+    }, async (request, reply) => {
+        const query = ListWorkflowsQuerySchema.parse(request.query);
+        const result = await workflowService.list(query);
+        return reply.send(result);
+    });
+    // GET /workflows/:id - Get workflow details
+    server.get('/workflows/:id', {
+        preHandler: [requireRead('workflows')],
+        schema: {
+            description: 'Get workflow details',
+            tags: ['Workflows'],
+            params: {
+                type: 'object',
+                properties: {
+                    id: { type: 'string', format: 'uuid' },
+                },
+                required: ['id'],
+            },
+        },
+    }, async (request, reply) => {
+        const params = WorkflowIdParamSchema.parse(request.params);
+        const workflow = await workflowService.get(params.id);
+        return reply.send(workflow);
+    });
+    // POST /workflows/:id/pause - Pause workflow
+    server.post('/workflows/:id/pause', {
+        preHandler: [requireWrite('workflows')],
+        schema: {
+            description: 'Pause a running workflow',
+            tags: ['Workflows'],
+            params: {
+                type: 'object',
+                properties: {
+                    id: { type: 'string', format: 'uuid' },
+                },
+                required: ['id'],
+            },
+        },
+    }, async (request, reply) => {
+        const params = WorkflowIdParamSchema.parse(request.params);
+        const workflow = await workflowService.pause(params.id);
+        return reply.send(workflow);
+    });
+    // POST /workflows/:id/resume - Resume workflow
+    server.post('/workflows/:id/resume', {
+        preHandler: [requireWrite('workflows')],
+        schema: {
+            description: 'Resume a paused workflow',
+            tags: ['Workflows'],
+            params: {
+                type: 'object',
+                properties: {
+                    id: { type: 'string', format: 'uuid' },
+                },
+                required: ['id'],
+            },
+        },
+    }, async (request, reply) => {
+        const params = WorkflowIdParamSchema.parse(request.params);
+        const workflow = await workflowService.resume(params.id);
+        return reply.send(workflow);
+    });
+    // DELETE /workflows/:id - Cancel workflow
+    server.delete('/workflows/:id', {
+        preHandler: [requireWrite('workflows')],
+        schema: {
+            description: 'Cancel a workflow',
+            tags: ['Workflows'],
+            params: {
+                type: 'object',
+                properties: {
+                    id: { type: 'string', format: 'uuid' },
+                },
+                required: ['id'],
+            },
+        },
+    }, async (request, reply) => {
+        const params = WorkflowIdParamSchema.parse(request.params);
+        await workflowService.cancel(params.id);
+        return reply.status(204).send();
+    });
+}
+//# sourceMappingURL=workflows.js.map

package/dist/routes/workflows.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflows.js","sourceRoot":"","sources":["../../src/routes/workflows.ts"],"names":[],"mappings":"AACA,OAAO,EACL,2BAA2B,EAC3B,wBAAwB,EACxB,qBAAqB,GACtB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAElE;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,MAAuB,EACvB,eAAgC;IAEhC,gDAAgD;IAChD,MAAM,CAAC,IAAI,CACT,YAAY,EACZ;QACE,UAAU,EAAE,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;QACvC,MAAM,EAAE;YACN,WAAW,EAAE,iCAAiC;YAC9C,IAAI,EAAE,CAAC,WAAW,CAAC;YACnB,IAAI,EAAE;gBACJ,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBAChC,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBAC9B,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBAC3B,QAAQ,EAAE;wBACR,IAAI,EAAE,QAAQ;wBACd,UAAU,EAAE;4BACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;4BACxB,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;yBACnD;qBACF;iBACF;gBACD,QAAQ,EAAE,CAAC,SAAS,CAAC;aACtB;SACF;KACF,EACD,KAAK,EAAE,OAAuB,EAAE,KAAmB,EAAE,EAAE;QACrD,MAAM,IAAI,GAAG,2BAA2B,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC7D,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAEpD,OAAO,KAAK;aACT,MAAM,CAAC,GAAG,CAAC;aACX,MAAM,CAAC,UAAU,EAAE,cAAc,QAAQ,CAAC,EAAE,EAAE,CAAC;aAC/C,IAAI,CAAC,QAAQ,CAAC,CAAC;IACpB,CAAC,CACF,CAAC;IAEF,kCAAkC;IAClC,MAAM,CAAC,GAAG,CACR,YAAY,EACZ;QACE,UAAU,EAAE,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;QACtC,MAAM,EAAE;YACN,WAAW,EAAE,gBAAgB;YAC7B,IAAI,EAAE,CAAC,WAAW,CAAC;YACnB,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,MAAM,EAAE;wBACN,IAAI,EAAE,QAAQ;wBACd,IAAI,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,QAAQ,CAAC;qBAC3E;oBACD,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE;oBACjD,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE;iBACrE;aACF;SACF;KACF,EACD,KAAK,EAAE,OAAuB,EAAE,KAAmB,EAAE,EAAE;QACrD,MAAM,KAAK,GAAG,wBAAwB,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC5D,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjD,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC,CACF,CAAC;IAEF,4CAA4C;IAC5C,MAAM,CAAC,GAAG,CACR,gBAAgB,EAChB;QACE,UAAU,EAAE,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;QACtC,MAAM,EAAE;YACN,WAAW,EAAE,sBAAsB;YACnC,IAAI,EAAE,CAAC,WAAW,CAAC;YACnB,MAAM,EAAE;gBACN,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE;iBACvC;gBACD,QAAQ,EAAE,CAAC,IAAI,CAAC;aACjB;SACF;KACF,EACD,KAAK,EAAE,OAAuB,EAAE,KAAmB,EAAE,EAAE;QACrD,MAAM,MAAM,GAAG,qBAAqB,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC3D,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACtD,OAAO,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC9B,CAAC,CACF,CAAC;IAEF,6CAA6C;IAC7C,MAAM,CAAC,IAAI,CACT,sBAAsB,EACtB;QACE,UAAU,EAAE,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;QACvC,MAAM,EAAE;YACN,WAAW,EAAE,0BAA0B;YACvC,IAAI,EAAE,CAAC,WAAW,CAAC;YACnB,MAAM,EAAE;gBACN,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE;iBACvC;gBACD,QAAQ,EAAE,CAAC,IAAI,CAAC;aACjB;SACF;KACF,EACD,KAAK,EAAE,OAAuB,EAAE,KAAmB,EAAE,EAAE;QACrD,MAAM,MAAM,GAAG,qBAAqB,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC3D,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACxD,OAAO,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC9B,CAAC,CACF,CAAC;IAEF,+CAA+C;IAC/C,MAAM,CAAC,IAAI,CACT,uBAAuB,EACvB;QACE,UAAU,EAAE,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;QACvC,MAAM,EAAE;YACN,WAAW,EAAE,0BAA0B;YACvC,IAAI,EAAE,CAAC,WAAW,CAAC;YACnB,MAAM,EAAE;gBACN,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE;iBACvC;gBACD,QAAQ,EAAE,CAAC,IAAI,CAAC;aACjB;SACF;KACF,EACD,KAAK,EAAE,OAAuB,EAAE,KAAmB,EAAE,EAAE;QACrD,MAAM,MAAM,GAAG,qBAAqB,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC3D,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACzD,OAAO,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC9B,CAAC,CACF,CAAC;IAEF,0CAA0C;IAC1C,MAAM,CAAC,MAAM,CACX,gBAAgB,EAChB;QACE,UAAU,EAAE,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;QACvC,MAAM,EAAE;YACN,WAAW,EAAE,mBAAmB;YAChC,IAAI,EAAE,CAAC,WAAW,CAAC;YACnB,MAAM,EAAE;gBACN,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE;iBACvC;gBACD,QAAQ,EAAE,CAAC,IAAI,CAAC;aACjB;SACF;KACF,EACD,KAAK,EAAE,OAAuB,EAAE,KAAmB,EAAE,EAAE;QACrD,MAAM,MAAM,GAAG,qBAAqB,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC3D,MAAM,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACxC,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAClC,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/server.d.ts

@@ -0,0 +1,35 @@
+import { type FastifyInstance, type FastifyServerOptions } from 'fastify';
+import { type OrchestratorConfig } from './config/index.js';
+/**
+ * Server creation options
+ */
+export interface CreateServerOptions {
+    /** Configuration (loads from file/env if not provided) */
+    config?: OrchestratorConfig;
+    /** Additional Fastify options */
+    fastifyOptions?: FastifyServerOptions;
+    /** Skip route registration (for testing individual routes) */
+    skipRoutes?: boolean;
+}
+/**
+ * Create and configure the Fastify server
+ */
+export declare function createServer(options?: CreateServerOptions): Promise<FastifyInstance>;
+/**
+ * Start the server and begin listening
+ */
+export declare function startServer(server: FastifyInstance): Promise<string>;
+/**
+ * Create a server for testing
+ */
+export declare function createTestServer(configOverrides?: Partial<OrchestratorConfig>): Promise<FastifyInstance>;
+/**
+ * Create a fully configured server for production
+ */
+export declare function createProductionServer(): Promise<FastifyInstance>;
+declare module 'fastify' {
+    interface FastifyInstance {
+        config: OrchestratorConfig;
+    }
+}
+//# sourceMappingURL=server.d.ts.map

package/dist/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAgB,EAAE,KAAK,eAAe,EAAE,KAAK,oBAAoB,EAAE,MAAM,SAAS,CAAC;AAKnF,OAAO,EAAE,KAAK,kBAAkB,EAAgC,MAAM,mBAAmB,CAAC;AAwB1F;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,0DAA0D;IAC1D,MAAM,CAAC,EAAE,kBAAkB,CAAC;IAC5B,iCAAiC;IACjC,cAAc,CAAC,EAAE,oBAAoB,CAAC;IACtC,8DAA8D;IAC9D,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED;;GAEG;AACH,wBAAsB,YAAY,CAAC,OAAO,GAAE,mBAAwB,GAAG,OAAO,CAAC,eAAe,CAAC,CAsR9F;AAED;;GAEG;AACH,wBAAsB,WAAW,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CAS1E;AAED;;GAEG;AACH,wBAAsB,gBAAgB,CACpC,eAAe,GAAE,OAAO,CAAC,kBAAkB,CAAM,GAChD,OAAO,CAAC,eAAe,CAAC,CAG1B;AAED;;GAEG;AACH,wBAAsB,sBAAsB,IAAI,OAAO,CAAC,eAAe,CAAC,CAGvE;AAGD,OAAO,QAAQ,SAAS,CAAC;IACvB,UAAU,eAAe;QACvB,MAAM,EAAE,kBAAkB,CAAC;KAC5B;CACF"}