@jazzmind/busibox-app 3.0.18

package/dist/lib/services/email.d.ts

@@ -0,0 +1,65 @@
+/**
+ * Email Sending — Bridge API Client
+ *
+ * All outbound email is delegated to the Bridge API service.
+ * Busibox Portal no longer holds SMTP or Resend secrets.
+ *
+ * Bridge API endpoints (internal network, no auth required):
+ *   POST /api/v1/email/send-magic-link        — magic link + TOTP code
+ *   POST /api/v1/email/send-magic-link-simple  — simple magic link
+ *   POST /api/v1/email/send                    — generic email
+ *   POST /api/v1/email/send-welcome            — welcome email
+ *   POST /api/v1/email/send-account-deactivated
+ *   POST /api/v1/email/send-account-reactivated
+ *   POST /api/v1/email/test                    — test email
+ */
+/**
+ * Send a magic-link + TOTP code email via Bridge API.
+ */
+export declare function sendMagicLinkWithCodeEmail(email: string, magicLinkUrl: string, totpCode: string): Promise<{
+    data: any;
+    error: null;
+}>;
+/**
+ * Send a simple magic-link email (no TOTP) via Bridge API.
+ */
+export declare function sendMagicLinkEmail(email: string, magicLinkUrl: string): Promise<{
+    data: any;
+    error: null;
+}>;
+/**
+ * Send a welcome email via Bridge API.
+ */
+export declare function sendWelcomeEmail(email: string, userName?: string): Promise<{
+    data: any;
+    error: null;
+}>;
+/**
+ * Send an account-deactivated email via Bridge API.
+ */
+export declare function sendAccountDeactivatedEmail(email: string): Promise<{
+    data: any;
+    error: null;
+}>;
+/**
+ * Send an account-reactivated email via Bridge API.
+ */
+export declare function sendAccountReactivatedEmail(email: string): Promise<{
+    data: any;
+    error: null;
+}>;
+/**
+ * Send a test email via Bridge API.
+ * Returns the provider that was used.
+ */
+export declare function sendTestEmail(to: string): Promise<{
+    provider: string;
+}>;
+/**
+ * Send a generic email via Bridge API.
+ */
+export declare function sendEmail(to: string, subject: string, html: string, text: string): Promise<{
+    data: any;
+    error: null;
+}>;
+//# sourceMappingURL=email.d.ts.map

package/dist/lib/services/email.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"email.d.ts","sourceRoot":"","sources":["../../../src/lib/services/email.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAiCH;;GAEG;AACH,wBAAsB,0BAA0B,CAC9C,KAAK,EAAE,MAAM,EACb,YAAY,EAAE,MAAM,EACpB,QAAQ,EAAE,MAAM;;;GASjB;AAED;;GAEG;AACH,wBAAsB,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM;;;GAO3E;AAED;;GAEG;AACH,wBAAsB,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM;;;GAStE;AAED;;GAEG;AACH,wBAAsB,2BAA2B,CAAC,KAAK,EAAE,MAAM;;;GAK9D;AAED;;GAEG;AACH,wBAAsB,2BAA2B,CAAC,KAAK,EAAE,MAAM;;;GAQ9D;AAED;;;GAGG;AACH,wBAAsB,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,CAM7E;AAED;;GAEG;AACH,wBAAsB,SAAS,CAC7B,EAAE,EAAE,MAAM,EACV,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM;;;GAIb"}

package/dist/lib/services/email.js

@@ -0,0 +1,112 @@
+/**
+ * Email Sending — Bridge API Client
+ *
+ * All outbound email is delegated to the Bridge API service.
+ * Busibox Portal no longer holds SMTP or Resend secrets.
+ *
+ * Bridge API endpoints (internal network, no auth required):
+ *   POST /api/v1/email/send-magic-link        — magic link + TOTP code
+ *   POST /api/v1/email/send-magic-link-simple  — simple magic link
+ *   POST /api/v1/email/send                    — generic email
+ *   POST /api/v1/email/send-welcome            — welcome email
+ *   POST /api/v1/email/send-account-deactivated
+ *   POST /api/v1/email/send-account-reactivated
+ *   POST /api/v1/email/test                    — test email
+ */
+import { getBridgeApiUrl } from '../next/api-url';
+// ---------------------------------------------------------------------------
+// Low-level bridge call
+// ---------------------------------------------------------------------------
+async function bridgePost(path, body) {
+    const url = `${getBridgeApiUrl()}${path}`;
+    const resp = await fetch(url, {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify(body),
+    });
+    if (!resp.ok) {
+        const text = await resp.text().catch(() => '');
+        let detail = text;
+        try {
+            const json = JSON.parse(text);
+            detail = json.detail || json.error || text;
+        }
+        catch { /* use raw text */ }
+        throw new Error(`Bridge API ${resp.status} ${path}: ${detail}`);
+    }
+    return resp.json();
+}
+// ---------------------------------------------------------------------------
+// Public API — mirrors the old email.ts exports
+// ---------------------------------------------------------------------------
+/**
+ * Send a magic-link + TOTP code email via Bridge API.
+ */
+export async function sendMagicLinkWithCodeEmail(email, magicLinkUrl, totpCode) {
+    console.log('[EMAIL] Sending magic link + TOTP via Bridge API for', email);
+    const result = await bridgePost('/api/v1/email/send-magic-link', {
+        to: email,
+        magic_link_url: magicLinkUrl,
+        totp_code: totpCode,
+    });
+    return { data: result, error: null };
+}
+/**
+ * Send a simple magic-link email (no TOTP) via Bridge API.
+ */
+export async function sendMagicLinkEmail(email, magicLinkUrl) {
+    console.log('[EMAIL] Sending magic link via Bridge API for', email);
+    const result = await bridgePost('/api/v1/email/send-magic-link-simple', {
+        to: email,
+        magic_link_url: magicLinkUrl,
+    });
+    return { data: result, error: null };
+}
+/**
+ * Send a welcome email via Bridge API.
+ */
+export async function sendWelcomeEmail(email, userName) {
+    const portalUrl = process.env.APP_URL || process.env.NEXT_PUBLIC_APP_URL || 'http://localhost:3000';
+    const result = await bridgePost('/api/v1/email/send-welcome', {
+        to: email,
+        user_name: userName || null,
+        portal_url: portalUrl,
+    });
+    return { data: result, error: null };
+}
+/**
+ * Send an account-deactivated email via Bridge API.
+ */
+export async function sendAccountDeactivatedEmail(email) {
+    const result = await bridgePost('/api/v1/email/send-account-deactivated', {
+        to: email,
+    });
+    return { data: result, error: null };
+}
+/**
+ * Send an account-reactivated email via Bridge API.
+ */
+export async function sendAccountReactivatedEmail(email) {
+    const portalUrl = process.env.APP_URL || process.env.NEXT_PUBLIC_APP_URL || 'http://localhost:3000';
+    const result = await bridgePost('/api/v1/email/send-account-reactivated', {
+        to: email,
+        portal_url: portalUrl,
+    });
+    return { data: result, error: null };
+}
+/**
+ * Send a test email via Bridge API.
+ * Returns the provider that was used.
+ */
+export async function sendTestEmail(to) {
+    const result = await bridgePost('/api/v1/email/test', { to });
+    return { provider: result.provider };
+}
+/**
+ * Send a generic email via Bridge API.
+ */
+export async function sendEmail(to, subject, html, text) {
+    const result = await bridgePost('/api/v1/email/send', { to, subject, html, text });
+    return { data: result, error: null };
+}
+//# sourceMappingURL=email.js.map

package/dist/lib/services/email.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"email.js","sourceRoot":"","sources":["../../../src/lib/services/email.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAElD,8EAA8E;AAC9E,wBAAwB;AACxB,8EAA8E;AAE9E,KAAK,UAAU,UAAU,CAAU,IAAY,EAAE,IAA6B;IAC5E,MAAM,GAAG,GAAG,GAAG,eAAe,EAAE,GAAG,IAAI,EAAE,CAAC;IAC1C,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAC5B,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;KAC3B,CAAC,CAAC;IAEH,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAC/C,IAAI,MAAM,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC9B,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,cAAc,IAAI,CAAC,MAAM,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC,CAAC;IAClE,CAAC;IAED,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC;AACrB,CAAC;AAED,8EAA8E;AAC9E,gDAAgD;AAChD,8EAA8E;AAE9E;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,KAAa,EACb,YAAoB,EACpB,QAAgB;IAEhB,OAAO,CAAC,GAAG,CAAC,sDAAsD,EAAE,KAAK,CAAC,CAAC;IAC3E,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,+BAA+B,EAAE;QAC/D,EAAE,EAAE,KAAK;QACT,cAAc,EAAE,YAAY;QAC5B,SAAS,EAAE,QAAQ;KACpB,CAAC,CAAC;IACH,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACvC,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,KAAa,EAAE,YAAoB;IAC1E,OAAO,CAAC,GAAG,CAAC,+CAA+C,EAAE,KAAK,CAAC,CAAC;IACpE,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,sCAAsC,EAAE;QACtE,EAAE,EAAE,KAAK;QACT,cAAc,EAAE,YAAY;KAC7B,CAAC,CAAC;IACH,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACvC,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,KAAa,EAAE,QAAiB;IACrE,MAAM,SAAS,GACb,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,uBAAuB,CAAC;IACpF,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,4BAA4B,EAAE;QAC5D,EAAE,EAAE,KAAK;QACT,SAAS,EAAE,QAAQ,IAAI,IAAI;QAC3B,UAAU,EAAE,SAAS;KACtB,CAAC,CAAC;IACH,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACvC,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,KAAa;IAC7D,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,wCAAwC,EAAE;QACxE,EAAE,EAAE,KAAK;KACV,CAAC,CAAC;IACH,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACvC,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,KAAa;IAC7D,MAAM,SAAS,GACb,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,uBAAuB,CAAC;IACpF,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,wCAAwC,EAAE;QACxE,EAAE,EAAE,KAAK;QACT,UAAU,EAAE,SAAS;KACtB,CAAC,CAAC;IACH,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACvC,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,EAAU;IAC5C,MAAM,MAAM,GAAG,MAAM,UAAU,CAC7B,oBAAoB,EACpB,EAAE,EAAE,EAAE,CACP,CAAC;IACF,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;AACvC,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,EAAU,EACV,OAAe,EACf,IAAY,EACZ,IAAY;IAEZ,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,oBAAoB,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACnF,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACvC,CAAC"}

package/dist/lib/services/github-manifest-fetcher.d.ts

@@ -0,0 +1,74 @@
+/**
+ * GitHub Manifest Fetcher
+ *
+ * Fetches and validates busibox.json manifests from GitHub repositories.
+ */
+export interface BusiboxManifest {
+    $schema?: string;
+    name: string;
+    id: string;
+    version: string;
+    description: string;
+    icon: string;
+    defaultPath: string;
+    defaultPort: number;
+    healthEndpoint: string;
+    buildCommand: string;
+    startCommand: string;
+    appMode: 'frontend' | 'prisma';
+    database?: {
+        required: boolean;
+        preferredName: string;
+        schemaManagement: 'prisma' | 'manual';
+        seedCommand?: string;
+    };
+    requiredEnvVars?: string[];
+    optionalEnvVars?: string[];
+    busiboxAppVersion: string;
+}
+interface GitHubUrlParts {
+    owner: string;
+    repo: string;
+}
+/**
+ * Parse GitHub URL into owner and repo
+ */
+export declare function parseGitHubUrl(url: string): GitHubUrlParts;
+/**
+ * Check if URL is a GitHub URL
+ */
+export declare function isGitHubUrl(url: string): boolean;
+/**
+ * Fetch busibox.json manifest from GitHub repository
+ *
+ * @param repoUrl - GitHub repository URL
+ * @param token - Optional GitHub token (uses env var if not provided)
+ * @param branch - Branch to fetch from (default: main)
+ * @returns Parsed manifest
+ */
+export declare function fetchManifestFromGitHub(repoUrl: string, token?: string, branch?: string): Promise<BusiboxManifest>;
+/**
+ * Validate GitHub repository access
+ *
+ * @param repoUrl - GitHub repository URL
+ * @param token - Optional GitHub token
+ * @returns True if repo is accessible
+ */
+export declare function validateGitHubAccess(repoUrl: string, token?: string): Promise<{
+    accessible: boolean;
+    error?: string;
+}>;
+/**
+ * Fetch manifest and validate GitHub access
+ *
+ * @param repoUrl - GitHub repository URL
+ * @param token - Optional GitHub token
+ * @returns Validation result with manifest if successful
+ */
+export declare function fetchAndValidateManifest(repoUrl: string, token?: string): Promise<{
+    valid: boolean;
+    manifest?: BusiboxManifest;
+    error?: string;
+}>;
+export {};
+//# sourceMappingURL=github-manifest-fetcher.d.ts.map

package/dist/lib/services/github-manifest-fetcher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-manifest-fetcher.d.ts","sourceRoot":"","sources":["../../../src/lib/services/github-manifest-fetcher.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,WAAW,eAAe;IAC9B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,UAAU,GAAG,QAAQ,CAAC;IAC/B,QAAQ,CAAC,EAAE;QACT,QAAQ,EAAE,OAAO,CAAC;QAClB,aAAa,EAAE,MAAM,CAAC;QACtB,gBAAgB,EAAE,QAAQ,GAAG,QAAQ,CAAC;QACtC,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;IACF,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,UAAU,cAAc;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,cAAc,CA4B1D;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAEhD;AAED;;;;;;;GAOG;AACH,wBAAsB,uBAAuB,CAC3C,OAAO,EAAE,MAAM,EACf,KAAK,CAAC,EAAE,MAAM,EACd,MAAM,GAAE,MAAe,GACtB,OAAO,CAAC,eAAe,CAAC,CA6C1B;AAED;;;;;;GAMG;AACH,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,MAAM,EACf,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC;IAAE,UAAU,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CA2ClD;AAED;;;;;;GAMG;AACH,wBAAsB,wBAAwB,CAC5C,OAAO,EAAE,MAAM,EACf,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC;IACT,KAAK,EAAE,OAAO,CAAC;IACf,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC,CAgCD"}

package/dist/lib/services/github-manifest-fetcher.js

@@ -0,0 +1,168 @@
+/**
+ * GitHub Manifest Fetcher
+ *
+ * Fetches and validates busibox.json manifests from GitHub repositories.
+ */
+/**
+ * Parse GitHub URL into owner and repo
+ */
+export function parseGitHubUrl(url) {
+    // Handle various GitHub URL formats:
+    // https://github.com/owner/repo
+    // https://github.com/owner/repo.git
+    // git@github.com:owner/repo.git
+    let cleanUrl = url.trim();
+    // Remove .git suffix if present
+    if (cleanUrl.endsWith('.git')) {
+        cleanUrl = cleanUrl.slice(0, -4);
+    }
+    // Handle SSH format
+    if (cleanUrl.startsWith('git@github.com:')) {
+        cleanUrl = cleanUrl.replace('git@github.com:', 'https://github.com/');
+    }
+    // Extract owner/repo from URL
+    const match = cleanUrl.match(/github\.com\/([^\/]+)\/([^\/]+)/);
+    if (!match) {
+        throw new Error('Invalid GitHub URL format');
+    }
+    return {
+        owner: match[1],
+        repo: match[2],
+    };
+}
+/**
+ * Check if URL is a GitHub URL
+ */
+export function isGitHubUrl(url) {
+    return url.includes('github.com');
+}
+/**
+ * Fetch busibox.json manifest from GitHub repository
+ *
+ * @param repoUrl - GitHub repository URL
+ * @param token - Optional GitHub token (uses env var if not provided)
+ * @param branch - Branch to fetch from (default: main)
+ * @returns Parsed manifest
+ */
+export async function fetchManifestFromGitHub(repoUrl, token, branch = 'main') {
+    const { owner, repo } = parseGitHubUrl(repoUrl);
+    // Try main first, then master
+    const branches = branch === 'main' ? ['main', 'master'] : [branch];
+    for (const branchName of branches) {
+        try {
+            const manifestUrl = `https://raw.githubusercontent.com/${owner}/${repo}/${branchName}/busibox.json`;
+            const headers = {
+                'Accept': 'application/json',
+            };
+            // Add token if provided (required for private repos)
+            const githubToken = token || process.env.GITHUB_TOKEN;
+            if (githubToken) {
+                headers['Authorization'] = `token ${githubToken}`;
+            }
+            const response = await fetch(manifestUrl, { headers });
+            if (response.ok) {
+                const manifest = await response.json();
+                return manifest;
+            }
+            // If this branch doesn't exist, try next
+            if (response.status === 404 && branchName !== branches[branches.length - 1]) {
+                continue;
+            }
+            // Other errors
+            if (!response.ok) {
+                throw new Error(`GitHub API error: ${response.status} ${response.statusText}`);
+            }
+        }
+        catch (error) {
+            // If this is the last branch to try, throw the error
+            if (branchName === branches[branches.length - 1]) {
+                throw error;
+            }
+        }
+    }
+    throw new Error('Could not find busibox.json in main or master branch');
+}
+/**
+ * Validate GitHub repository access
+ *
+ * @param repoUrl - GitHub repository URL
+ * @param token - Optional GitHub token
+ * @returns True if repo is accessible
+ */
+export async function validateGitHubAccess(repoUrl, token) {
+    try {
+        const { owner, repo } = parseGitHubUrl(repoUrl);
+        const headers = {
+            'Accept': 'application/vnd.github.v3+json',
+        };
+        const githubToken = token || process.env.GITHUB_TOKEN;
+        if (githubToken) {
+            headers['Authorization'] = `token ${githubToken}`;
+        }
+        const response = await fetch(`https://api.github.com/repos/${owner}/${repo}`, { headers });
+        if (response.ok) {
+            return { accessible: true };
+        }
+        if (response.status === 404) {
+            return {
+                accessible: false,
+                error: 'Repository not found or you do not have access. For private repos, provide a GitHub token.'
+            };
+        }
+        if (response.status === 401 || response.status === 403) {
+            return {
+                accessible: false,
+                error: 'Invalid GitHub token or insufficient permissions'
+            };
+        }
+        return {
+            accessible: false,
+            error: `GitHub API error: ${response.status}`
+        };
+    }
+    catch (error) {
+        return {
+            accessible: false,
+            error: error instanceof Error ? error.message : 'Failed to validate GitHub access'
+        };
+    }
+}
+/**
+ * Fetch manifest and validate GitHub access
+ *
+ * @param repoUrl - GitHub repository URL
+ * @param token - Optional GitHub token
+ * @returns Validation result with manifest if successful
+ */
+export async function fetchAndValidateManifest(repoUrl, token) {
+    try {
+        // First validate repo access
+        const accessCheck = await validateGitHubAccess(repoUrl, token);
+        if (!accessCheck.accessible) {
+            return {
+                valid: false,
+                error: accessCheck.error,
+            };
+        }
+        // Fetch manifest
+        const manifest = await fetchManifestFromGitHub(repoUrl, token);
+        // Basic validation
+        if (!manifest.name || !manifest.id || !manifest.defaultPath || !manifest.defaultPort) {
+            return {
+                valid: false,
+                error: 'Invalid manifest: missing required fields (name, id, defaultPath, defaultPort)',
+            };
+        }
+        return {
+            valid: true,
+            manifest,
+        };
+    }
+    catch (error) {
+        return {
+            valid: false,
+            error: error instanceof Error ? error.message : 'Failed to fetch manifest',
+        };
+    }
+}
+//# sourceMappingURL=github-manifest-fetcher.js.map

package/dist/lib/services/github-manifest-fetcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-manifest-fetcher.js","sourceRoot":"","sources":["../../../src/lib/services/github-manifest-fetcher.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AA+BH;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,qCAAqC;IACrC,gCAAgC;IAChC,oCAAoC;IACpC,gCAAgC;IAEhC,IAAI,QAAQ,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAE1B,gCAAgC;IAChC,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9B,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACnC,CAAC;IAED,oBAAoB;IACpB,IAAI,QAAQ,CAAC,UAAU,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAC3C,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,iBAAiB,EAAE,qBAAqB,CAAC,CAAC;IACxE,CAAC;IAED,8BAA8B;IAC9B,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAChE,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/C,CAAC;IAED,OAAO;QACL,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;QACf,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;KACf,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,GAAW;IACrC,OAAO,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;AACpC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,OAAe,EACf,KAAc,EACd,SAAiB,MAAM;IAEvB,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IAEhD,8BAA8B;IAC9B,MAAM,QAAQ,GAAG,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAEnE,KAAK,MAAM,UAAU,IAAI,QAAQ,EAAE,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,qCAAqC,KAAK,IAAI,IAAI,IAAI,UAAU,eAAe,CAAC;YAEpG,MAAM,OAAO,GAAgB;gBAC3B,QAAQ,EAAE,kBAAkB;aAC7B,CAAC;YAEF,qDAAqD;YACrD,MAAM,WAAW,GAAG,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;YACtD,IAAI,WAAW,EAAE,CAAC;gBAChB,OAAO,CAAC,eAAe,CAAC,GAAG,SAAS,WAAW,EAAE,CAAC;YACpD,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;YAEvD,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;gBAChB,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACvC,OAAO,QAAQ,CAAC;YAClB,CAAC;YAED,yCAAyC;YACzC,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,UAAU,KAAK,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC;gBAC5E,SAAS;YACX,CAAC;YAED,eAAe;YACf,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CAAC,qBAAqB,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;YACjF,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,qDAAqD;YACrD,IAAI,UAAU,KAAK,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC;gBACjD,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;AAC1E,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,OAAe,EACf,KAAc;IAEd,IAAI,CAAC;QACH,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;QAEhD,MAAM,OAAO,GAAgB;YAC3B,QAAQ,EAAE,gCAAgC;SAC3C,CAAC;QAEF,MAAM,WAAW,GAAG,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;QACtD,IAAI,WAAW,EAAE,CAAC;YAChB,OAAO,CAAC,eAAe,CAAC,GAAG,SAAS,WAAW,EAAE,CAAC;QACpD,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,gCAAgC,KAAK,IAAI,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QAE3F,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;YAChB,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;QAC9B,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC5B,OAAO;gBACL,UAAU,EAAE,KAAK;gBACjB,KAAK,EAAE,4FAA4F;aACpG,CAAC;QACJ,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACvD,OAAO;gBACL,UAAU,EAAE,KAAK;gBACjB,KAAK,EAAE,kDAAkD;aAC1D,CAAC;QACJ,CAAC;QAED,OAAO;YACL,UAAU,EAAE,KAAK;YACjB,KAAK,EAAE,qBAAqB,QAAQ,CAAC,MAAM,EAAE;SAC9C,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,UAAU,EAAE,KAAK;YACjB,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,kCAAkC;SACnF,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,OAAe,EACf,KAAc;IAMd,IAAI,CAAC;QACH,6BAA6B;QAC7B,MAAM,WAAW,GAAG,MAAM,oBAAoB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC/D,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,CAAC;YAC5B,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,KAAK,EAAE,WAAW,CAAC,KAAK;aACzB,CAAC;QACJ,CAAC;QAED,iBAAiB;QACjB,MAAM,QAAQ,GAAG,MAAM,uBAAuB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAE/D,mBAAmB;QACnB,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;YACrF,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,KAAK,EAAE,gFAAgF;aACxF,CAAC;QACJ,CAAC;QAED,OAAO;YACL,KAAK,EAAE,IAAI;YACX,QAAQ;SACT,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,0BAA0B;SAC3E,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/lib/services/libraries.d.ts

@@ -0,0 +1,124 @@
+type PersonalLibraryType = 'DOCS' | 'RESEARCH' | 'TASKS' | 'MEDIA' | 'CUSTOM';
+export declare const PersonalLibraryTypes: {
+    readonly DOCS: PersonalLibraryType;
+    readonly RESEARCH: PersonalLibraryType;
+    readonly TASKS: PersonalLibraryType;
+    readonly MEDIA: PersonalLibraryType;
+    readonly CUSTOM: PersonalLibraryType;
+};
+export declare const PersonalLibraryNames: Record<Exclude<PersonalLibraryType, 'CUSTOM'>, string>;
+/** Fixed types that cannot be deleted; only CUSTOM can be deleted */
+export declare const FIXED_PERSONAL_LIBRARY_TYPES: Set<PersonalLibraryType>;
+/** True if library is a user-created custom personal library (can be renamed/deleted) */
+export declare function isCustomPersonalLibrary(library: {
+    libraryType?: string | null;
+    library_type?: string | null;
+    isPersonal?: boolean;
+    is_personal?: boolean;
+}): boolean;
+export interface Library {
+    id: string;
+    name: string;
+    description: string | null;
+    isPersonal: boolean;
+    userId: string | null;
+    libraryType: PersonalLibraryType | null;
+    createdBy: string;
+    createdAt: Date;
+    updatedAt: Date;
+    deletedAt: Date | null;
+}
+export interface LibraryRoleInfo {
+    id: string;
+    name: string;
+    description: string | null;
+}
+export interface LibraryWithRole extends Library {
+    role: LibraryRoleInfo | null;
+    roles: LibraryRoleInfo[];
+    _count: {
+        documents: number;
+    };
+}
+/**
+ * Get or create user's personal library of a specific type via data-api.
+ *
+ * Data-api provides POST /libraries with isPersonal: true which calls
+ * get_or_create_personal_library internally, handling idempotency.
+ */
+export declare function ensurePersonalLibrary(userId: string, libraryType?: PersonalLibraryType, sessionJwt?: string): Promise<Library>;
+/**
+ * Convenience function to get or create user's research library.
+ * This is where web research results are stored.
+ */
+export declare function ensureResearchLibrary(userId: string, sessionJwt?: string): Promise<Library>;
+/**
+ * Convenience function to get or create user's tasks library.
+ * This is where agent task outputs are stored.
+ */
+export declare function ensureTasksLibrary(userId: string, sessionJwt?: string): Promise<Library>;
+/**
+ * Get all personal libraries for a user (DOCS, RESEARCH, and TASKS).
+ * Creates them if they don't exist.
+ */
+export declare function ensureAllPersonalLibraries(userId: string, sessionJwt?: string): Promise<Library[]>;
+/**
+ * Check if user can access a library
+ * - Personal library: must be the owner
+ * - Shared library: check via authz role bindings
+ *
+ * Note: Access check is done by data-api (source of truth for libraries).
+ */
+export declare function canAccessLibrary(userId: string, libraryId: string, sessionJwt?: string): Promise<boolean>;
+/**
+ * Check if user can upload to a library
+ * - Personal library: must be the owner
+ * - Shared library: must have access via authz bindings
+ */
+export declare function canUploadToLibrary(userId: string, libraryId: string, sessionJwt?: string): Promise<boolean>;
+/**
+ * Get all libraries accessible to user
+ * Fetches from data-api which is the source of truth for libraries.
+ *
+ * @param userId - User ID
+ * @param sessionJwt - Session JWT for Zero Trust token exchange (REQUIRED)
+ */
+export declare function getUserLibraries(userId: string, sessionJwt: string): Promise<LibraryWithRole[]>;
+/**
+ * Get documents in a library via data-api.
+ */
+export declare function getLibraryDocuments(libraryId: string, options: {
+    sortBy?: 'name' | 'createdAt' | 'size';
+    sortOrder?: 'asc' | 'desc';
+    status?: string;
+    tag?: string;
+    tags?: string[];
+    search?: string;
+    sessionJwt: string;
+    userId: string;
+}): Promise<any>;
+/**
+ * Check if user can manage a library (admin or creator).
+ * Uses data-api to check library ownership.
+ */
+export declare function canManageLibrary(userId: string, libraryId: string, sessionJwt?: string): Promise<boolean>;
+/**
+ * Set document visibility and library association when uploaded to a library.
+ * This is now handled by data-api during upload -- this function is a no-op
+ * kept for backward compatibility.
+ */
+export declare function setDocumentVisibilityFromLibrary(documentId: string, libraryId: string): Promise<void>;
+/**
+ * Get a user's personal library by type via data-api.
+ * Returns null if not found (use ensurePersonalLibrary to create if needed).
+ */
+export declare function getPersonalLibraryByType(userId: string, libraryType: PersonalLibraryType, sessionJwt?: string): Promise<Library | null>;
+/**
+ * Get a user's library by name (for backwards compatibility and folder-based lookups).
+ * Supports special folder names:
+ * - "personal" or "personal-docs" -> DOCS library
+ * - "personal-research" or "research" -> RESEARCH library
+ */
+export declare function getLibraryByFolder(userId: string, folderName: string, sessionJwt?: string): Promise<Library | null>;
+export {};
+//# sourceMappingURL=libraries.d.ts.map

package/dist/lib/services/libraries.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"libraries.d.ts","sourceRoot":"","sources":["../../../src/lib/services/libraries.ts"],"names":[],"mappings":"AAiBA,KAAK,mBAAmB,GAAG,MAAM,GAAG,UAAU,GAAG,OAAO,GAAG,OAAO,GAAG,QAAQ,CAAC;AAE9E,eAAO,MAAM,oBAAoB;mBACf,mBAAmB;uBACX,mBAAmB;oBACzB,mBAAmB;oBACnB,mBAAmB;qBACjB,mBAAmB;CAC/B,CAAC;AAGX,eAAO,MAAM,oBAAoB,EAAE,MAAM,CAAC,OAAO,CAAC,mBAAmB,EAAE,QAAQ,CAAC,EAAE,MAAM,CAKvF,CAAC;AAEF,qEAAqE;AACrE,eAAO,MAAM,4BAA4B,0BAKvC,CAAC;AAEH,yFAAyF;AACzF,wBAAgB,uBAAuB,CAAC,OAAO,EAAE;IAC/C,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB,GAAG,OAAO,CAIV;AAGD,MAAM,WAAW,OAAO;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,UAAU,EAAE,OAAO,CAAC;IACpB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,WAAW,EAAE,mBAAmB,GAAG,IAAI,CAAC;IACxC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC;CACxB;AAGD,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED,MAAM,WAAW,eAAgB,SAAQ,OAAO;IAC9C,IAAI,EAAE,eAAe,GAAG,IAAI,CAAC;IAC7B,KAAK,EAAE,eAAe,EAAE,CAAC;IACzB,MAAM,EAAE;QACN,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;CACH;AAuCD;;;;;GAKG;AACH,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,MAAM,EACd,WAAW,GAAE,mBAA+C,EAC5D,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC,OAAO,CAAC,CA2FlB;AAED;;;GAGG;AACH,wBAAsB,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAEjG;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAE9F;AAED;;;GAGG;AACH,wBAAsB,0BAA0B,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAqCxG;AAgBD;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC,OAAO,CAAC,CAoDlB;AAED;;;;GAIG;AACH,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC,OAAO,CAAC,CAElB;AAED;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,eAAe,EAAE,CAAC,CA6D5B;AAED;;GAEG;AACH,wBAAsB,mBAAmB,CACvC,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE;IACP,MAAM,CAAC,EAAE,MAAM,GAAG,WAAW,GAAG,MAAM,CAAC;IACvC,SAAS,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;CAChB,gBA+BF;AAED;;;GAGG;AACH,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC,OAAO,CAAC,CA4BlB;AAED;;;;GAIG;AACH,wBAAsB,gCAAgC,CACpD,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,IAAI,CAAC,CAGf;AAED;;;GAGG;AACH,wBAAsB,wBAAwB,CAC5C,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,mBAAmB,EAChC,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAyBzB;AAED;;;;;GAKG;AACH,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,MAAM,EAClB,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CA8CzB"}