@nocobase/app-plugin-projects 0.0.0-stage → 0.1.0-beta.2

package/dist/server/kernel/activity.d.ts

@@ -0,0 +1,55 @@
+/**
+ * The activity log: one row per change to an issue, written in the caller's transaction so the activity exists
+ * exactly when the change does. The issue timeline reads it.
+ *
+ * How the person acted, when not by hand in the browser, is kept in the details as `via` (`cli`, `api_key`, `agent`) and
+ * `trace` (`ActorTrace`: the agent, its run and conversation, the plan); the timeline reads them as `Activity.via`.
+ *
+ * Thin stand-in: NocoBase has no activity stream of its own yet. The action names and their details are the contract
+ * the timeline reads, and stay when the store is replaced.
+ */
+import type { DatabaseConnection } from '@nocobase/db';
+import type { ActivityVia } from '../../shared/plans.js';
+import type { Actor } from './actor.js';
+import type { IdSource } from './ids.js';
+export declare const ACTIVITIES = "pmActivities";
+export interface ActivityInput {
+    readonly issueId: string;
+    readonly actor: Actor;
+    readonly action: string;
+    readonly details?: Readonly<Record<string, unknown>>;
+}
+export interface ActivityRecorder {
+    record(conn: DatabaseConnection, input: ActivityInput): Promise<void>;
+}
+export declare function createActivityRecorder(ids: IdSource): ActivityRecorder;
+export interface ActivityRecord {
+    readonly id: string;
+    readonly issueId: string;
+    readonly actorType: Actor['type'];
+    readonly actorId: string | null;
+    readonly action: string;
+    readonly details: Readonly<Record<string, unknown>> | null;
+    readonly createdAt: string;
+}
+/**
+ * A page of an issue's activities, newest first, continuing strictly after `cursor` (the `createdAt` and `id` of the
+ * last row of the previous page). Asks for one row more than `limit` to tell whether another page follows.
+ */
+export declare function readActivities(conn: DatabaseConnection, issueId: string, limit: number, cursor?: Pick<ActivityRecord, 'createdAt' | 'id'>): Promise<ActivityRecord[]>;
+/** The kind whose principals act for people through `via: 'agent'` (`ActorTrace.agentId`). */
+export declare const AGENT_VIA_KIND = "agent";
+/**
+ * Splits an activity's stored details into what the change was (`details`) and how the person made it (`via`), naming
+ * the agent with `agentName`.
+ */
+export declare function splitVia(stored: Readonly<Record<string, unknown>> | null, agentName: (agentId: string) => string | null): {
+    readonly details: Readonly<Record<string, unknown>>;
+    readonly via: ActivityVia | null;
+};
+/** The agents named in activities' traces, for one name lookup. */
+export declare function tracedAgents(rows: readonly Pick<ActivityRecord, 'details'>[]): {
+    readonly type: string;
+    readonly id: string;
+}[];
+//# sourceMappingURL=activity.d.ts.map

package/dist/server/kernel/activity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"activity.d.ts","sourceRoot":"","sources":["../../../server/kernel/activity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAEvD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,KAAK,EAAE,KAAK,EAAc,MAAM,YAAY,CAAC;AACpD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAEzC,eAAO,MAAM,UAAU,iBAAiB,CAAC;AAEzC,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACtD;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,CAAC,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACvE;AAED,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,QAAQ,GAAG,gBAAgB,CAoBtE;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAClC,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC;IAC3D,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED;;;GAGG;AACH,wBAAsB,cAAc,CAClC,IAAI,EAAE,kBAAkB,EACxB,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EACb,MAAM,CAAC,EAAE,IAAI,CAAC,cAAc,EAAE,WAAW,GAAG,IAAI,CAAC,GAChD,OAAO,CAAC,cAAc,EAAE,CAAC,CAO3B;AAED,8FAA8F;AAC9F,eAAO,MAAM,cAAc,UAAU,CAAC;AAEtC;;;GAGG;AACH,wBAAgB,QAAQ,CACtB,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,IAAI,EAChD,SAAS,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,GAC5C;IACD,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACpD,QAAQ,CAAC,GAAG,EAAE,WAAW,GAAG,IAAI,CAAC;CAClC,CAsBA;AAED,mEAAmE;AACnE,wBAAgB,YAAY,CAC1B,IAAI,EAAE,SAAS,IAAI,CAAC,cAAc,EAAE,SAAS,CAAC,EAAE,GAC/C;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,EAAE,CAKlD"}

package/dist/server/kernel/activity.js

@@ -0,0 +1,72 @@
+export const ACTIVITIES = 'pmActivities';
+export function createActivityRecorder(ids) {
+    return {
+        async record(conn, { issueId, actor, action, details }) {
+            const trace = {
+                ...(actor.via === undefined ? {} : { via: actor.via }),
+                ...(actor.trace ? { trace: actor.trace } : {}),
+            };
+            await conn.repository(ACTIVITIES).createOne({
+                values: {
+                    id: ids.next(),
+                    issueId,
+                    actorType: actor.type,
+                    actorId: actor.id,
+                    action,
+                    details: { ...details, ...trace },
+                    createdAt: new Date(),
+                },
+            });
+        },
+    };
+}
+/**
+ * A page of an issue's activities, newest first, continuing strictly after `cursor` (the `createdAt` and `id` of the
+ * last row of the previous page). Asks for one row more than `limit` to tell whether another page follows.
+ */
+export async function readActivities(conn, issueId, limit, cursor) {
+    return conn.repository(ACTIVITIES).findMany({
+        filter: { issueId },
+        ...(cursor ? { cursor } : {}),
+        sort: (sort) => [sort.field('createdAt').desc(), sort.field('id').desc()],
+        limit: limit + 1,
+    });
+}
+/** The kind whose principals act for people through `via: 'agent'` (`ActorTrace.agentId`). */
+export const AGENT_VIA_KIND = 'agent';
+/**
+ * Splits an activity's stored details into what the change was (`details`) and how the person made it (`via`), naming
+ * the agent with `agentName`.
+ */
+export function splitVia(stored, agentName) {
+    const { via, trace, ...details } = stored ?? {};
+    const t = (trace && typeof trace === 'object' ? trace : {});
+    const ids = {
+        ...(t.runId ? { runId: t.runId } : {}),
+        ...(t.conversationId ? { conversationId: t.conversationId } : {}),
+        ...(t.planId ? { planId: t.planId } : {}),
+    };
+    if (via === 'agent' && t.agentId)
+        return {
+            details,
+            via: {
+                type: 'agent',
+                agentId: t.agentId,
+                agentName: agentName(t.agentId),
+                ...ids,
+            },
+        };
+    if (t.planId)
+        return { details, via: { type: 'plan', ...ids } };
+    if (via === 'cli' || via === 'api_key')
+        return { details, via: { type: via } };
+    return { details, via: null };
+}
+/** The agents named in activities' traces, for one name lookup. */
+export function tracedAgents(rows) {
+    return rows.flatMap((row) => {
+        const trace = row.details?.trace;
+        return trace?.agentId ? [{ type: AGENT_VIA_KIND, id: trace.agentId }] : [];
+    });
+}
+//# sourceMappingURL=activity.js.map

package/dist/server/kernel/activity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"activity.js","sourceRoot":"","sources":["../../../server/kernel/activity.ts"],"names":[],"mappings":"AAgBA,MAAM,CAAC,MAAM,UAAU,GAAG,cAAc,CAAC;AAazC,MAAM,UAAU,sBAAsB,CAAC,GAAa;IAClD,OAAO;QACL,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE;YACpD,MAAM,KAAK,GAAG;gBACZ,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC;gBACtD,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC/C,CAAC;YACF,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC;gBAC1C,MAAM,EAAE;oBACN,EAAE,EAAE,GAAG,CAAC,IAAI,EAAE;oBACd,OAAO;oBACP,SAAS,EAAE,KAAK,CAAC,IAAI;oBACrB,OAAO,EAAE,KAAK,CAAC,EAAE;oBACjB,MAAM;oBACN,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,GAAG,KAAK,EAAE;oBACjC,SAAS,EAAE,IAAI,IAAI,EAAE;iBACtB;aACF,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC;AAYD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,IAAwB,EACxB,OAAe,EACf,KAAa,EACb,MAAiD;IAEjD,OAAO,IAAI,CAAC,UAAU,CAAiB,UAAU,CAAC,CAAC,QAAQ,CAAC;QAC1D,MAAM,EAAE,EAAE,OAAO,EAAE;QACnB,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7B,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;QACzE,KAAK,EAAE,KAAK,GAAG,CAAC;KACjB,CAAC,CAAC;AACL,CAAC;AAED,8FAA8F;AAC9F,MAAM,CAAC,MAAM,cAAc,GAAG,OAAO,CAAC;AAEtC;;;GAGG;AACH,MAAM,UAAU,QAAQ,CACtB,MAAgD,EAChD,SAA6C;IAK7C,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,OAAO,EAAE,GAAG,MAAM,IAAI,EAAE,CAAC;IAChD,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAe,CAAC;IAC1E,MAAM,GAAG,GAAG;QACV,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtC,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1C,CAAC;IACF,IAAI,GAAG,KAAK,OAAO,IAAI,CAAC,CAAC,OAAO;QAC9B,OAAO;YACL,OAAO;YACP,GAAG,EAAE;gBACH,IAAI,EAAE,OAAO;gBACb,OAAO,EAAE,CAAC,CAAC,OAAO;gBAClB,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;gBAC/B,GAAG,GAAG;aACP;SACF,CAAC;IACJ,IAAI,CAAC,CAAC,MAAM;QAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,GAAG,EAAE,EAAE,CAAC;IAChE,IAAI,GAAG,KAAK,KAAK,IAAI,GAAG,KAAK,SAAS;QACpC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC;IACzC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;AAChC,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,YAAY,CAC1B,IAAgD;IAEhD,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;QAC1B,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,EAAE,KAA+B,CAAC;QAC3D,OAAO,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7E,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/server/kernel/actor.d.ts

@@ -0,0 +1,28 @@
+/** A kind's key (`shared/kinds.ts`). */
+export type ActorType = string;
+/**
+ * How a user reached the API when it was not the browser by hand: `cli` for the CLI's user mode, `api_key` for any
+ * other API-key client, `agent` when an agent acted for the person (a conversation's direct write) or proposed the plan
+ * they executed (`trace`). Recorded for traceability and shown on the timeline; never used to decide permissions.
+ */
+export type ActorVia = 'cli' | 'api_key' | 'agent';
+/**
+ * What a change made through an agent or a plan records beside the person (`ActivityVia` in `shared/plans.ts`). The
+ * ids are opaque to this plugin: it only looks the agent's display name up through the kinds registry (kind `agent`).
+ * A plan nobody's agent proposed carries only `planId`.
+ */
+export interface ActorTrace {
+    readonly agentId?: string;
+    readonly runId?: string;
+    readonly conversationId?: string;
+    readonly planId?: string;
+}
+export interface Actor {
+    readonly type: ActorType;
+    readonly id: string | null;
+    readonly via?: ActorVia;
+    /** With `via: 'agent'`, or for a plan: see `ActorTrace`. */
+    readonly trace?: ActorTrace;
+}
+export declare const SYSTEM_ACTOR: Actor;
+//# sourceMappingURL=actor.d.ts.map

package/dist/server/kernel/actor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"actor.d.ts","sourceRoot":"","sources":["../../../server/kernel/actor.ts"],"names":[],"mappings":"AAOA,wCAAwC;AACxC,MAAM,MAAM,SAAS,GAAG,MAAM,CAAC;AAE/B;;;;GAIG;AACH,MAAM,MAAM,QAAQ,GAAG,KAAK,GAAG,SAAS,GAAG,OAAO,CAAC;AAEnD;;;;GAIG;AACH,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,KAAK;IACpB,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC;IACxB,4DAA4D;IAC5D,QAAQ,CAAC,KAAK,CAAC,EAAE,UAAU,CAAC;CAC7B;AAED,eAAO,MAAM,YAAY,EAAE,KAAuC,CAAC"}

package/dist/server/kernel/actor.js

@@ -0,0 +1,8 @@
+/**
+ * Who performs an operation: a principal of some kind (`kernel/kinds.ts`): a signed-in user, the system itself (a
+ * sweeper, a rule), or a kind another plugin registered. What a user may do is a separate question, answered by
+ * `access/viewer.ts`.
+ */
+import { SYSTEM_KIND } from '../../shared/kinds.js';
+export const SYSTEM_ACTOR = { type: SYSTEM_KIND, id: null };
+//# sourceMappingURL=actor.js.map

package/dist/server/kernel/actor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"actor.js","sourceRoot":"","sources":["../../../server/kernel/actor.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAgCpD,MAAM,CAAC,MAAM,YAAY,GAAU,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC"}

package/dist/server/kernel/db.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Small gaps in the Repository API, filled in one place so the stores read as if the API had them.
+ */
+import type { FilterBuilder, FilterNode } from '@nocobase/db';
+/**
+ * `field` equals one of `values`: an `or` of equalities.
+ *
+ * Thin stand-in: the Repository filter has no `in` operator. Callers keep lists small (one page of ids); a large
+ * membership test belongs in a relation filter.
+ */
+export declare function oneOf(filter: FilterBuilder, field: string, values: readonly string[]): FilterNode;
+/**
+ * A unique constraint refused the write.
+ *
+ * Thin stand-in: the Repository passes the driver's error through, so the dialects' codes and messages are matched
+ * here. Remove once it reports a conflict of its own.
+ */
+export declare function isUniqueViolation(error: unknown): boolean;
+/** Removes duplicates and empty values, keeping the first occurrence's order. */
+export declare function unique(values: Iterable<string | null | undefined>): string[];
+//# sourceMappingURL=db.d.ts.map

package/dist/server/kernel/db.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"db.d.ts","sourceRoot":"","sources":["../../../server/kernel/db.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE9D;;;;;GAKG;AACH,wBAAgB,KAAK,CACnB,MAAM,EAAE,aAAa,EACrB,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,SAAS,MAAM,EAAE,GACxB,UAAU,CASZ;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CASzD;AAED,iFAAiF;AACjF,wBAAgB,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,GAAG,MAAM,EAAE,CAI5E"}

package/dist/server/kernel/db.js

@@ -0,0 +1,41 @@
+/**
+ * `field` equals one of `values`: an `or` of equalities.
+ *
+ * Thin stand-in: the Repository filter has no `in` operator. Callers keep lists small (one page of ids); a large
+ * membership test belongs in a relation filter.
+ */
+export function oneOf(filter, field, values) {
+    // Matches nothing without a value to compare, so it holds for any column type; PostgreSQL also refuses a NUL
+    // character in a text parameter.
+    if (values.length === 0)
+        return filter.and([
+            filter.string(field).eq(null),
+            filter.string(field).ne(null),
+        ]);
+    return filter.or(values.map((value) => filter.string(field).eq(value)));
+}
+/**
+ * A unique constraint refused the write.
+ *
+ * Thin stand-in: the Repository passes the driver's error through, so the dialects' codes and messages are matched
+ * here. Remove once it reports a conflict of its own.
+ */
+export function isUniqueViolation(error) {
+    if (!(error instanceof Error))
+        return false;
+    const code = error.code;
+    if (code === '23505')
+        return true;
+    if (typeof code === 'string' && code.startsWith('SQLITE_CONSTRAINT'))
+        return /UNIQUE|PRIMARYKEY/u.test(code);
+    return /unique constraint|UNIQUE constraint failed|Duplicate entry/iu.test(error.message);
+}
+/** Removes duplicates and empty values, keeping the first occurrence's order. */
+export function unique(values) {
+    const seen = new Set();
+    for (const value of values)
+        if (value)
+            seen.add(value);
+    return [...seen];
+}
+//# sourceMappingURL=db.js.map

package/dist/server/kernel/db.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"db.js","sourceRoot":"","sources":["../../../server/kernel/db.ts"],"names":[],"mappings":"AAKA;;;;;GAKG;AACH,MAAM,UAAU,KAAK,CACnB,MAAqB,EACrB,KAAa,EACb,MAAyB;IAEzB,6GAA6G;IAC7G,iCAAiC;IACjC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QACrB,OAAO,MAAM,CAAC,GAAG,CAAC;YAChB,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC;YAC7B,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC;SAC9B,CAAC,CAAC;IACL,OAAO,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC1E,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5C,MAAM,IAAI,GAAI,KAA4B,CAAC,IAAI,CAAC;IAChD,IAAI,IAAI,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IAClC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,UAAU,CAAC,mBAAmB,CAAC;QAClE,OAAO,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzC,OAAO,8DAA8D,CAAC,IAAI,CACxE,KAAK,CAAC,OAAO,CACd,CAAC;AACJ,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,MAAM,CAAC,MAA2C;IAChE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,KAAK,IAAI,MAAM;QAAE,IAAI,KAAK;YAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACvD,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;AACnB,CAAC"}

package/dist/server/kernel/errors.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Domain errors. Services never choose an HTTP status: they throw an error of a `kind`, and the route layer turns it
+ * into an `ApiError` (`http.ts`). `code` is the stable machine-readable code that becomes the response's `reason`.
+ */
+export type DomainErrorKind = 'invalid' | 'unauthorized' | 'forbidden' | 'notFound' | 'conflict';
+export interface DomainErrorOptions {
+    /** The domain that defined `code`, when it is passed through from another plugin; `projects` otherwise. */
+    readonly domain?: string;
+    /** What `notFound` could not find, such as `Issue`. */
+    readonly resource?: string;
+}
+export declare class DomainError extends Error {
+    readonly kind: DomainErrorKind;
+    readonly code: string;
+    /** Machine-readable facts for the response's `metadata`; never secrets. */
+    readonly details?: Readonly<Record<string, unknown>>;
+    readonly domain?: string;
+    readonly resource?: string;
+    constructor(kind: DomainErrorKind, code: string, message: string, details?: Readonly<Record<string, unknown>>, options?: DomainErrorOptions);
+}
+export declare function invalid(code: string, message: string, details?: Readonly<Record<string, unknown>>): DomainError;
+export declare function forbidden(message: string, code?: string): DomainError;
+/** An object that does not exist, or that the caller may not see: the two are indistinguishable on purpose. */
+export declare function notFound(what: string): DomainError;
+export declare function conflict(code: string, message: string, details?: Readonly<Record<string, unknown>>): DomainError;
+//# sourceMappingURL=errors.d.ts.map

package/dist/server/kernel/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../../server/kernel/errors.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,MAAM,eAAe,GACzB,SAAS,GAAG,cAAc,GAAG,WAAW,GAAG,UAAU,GAAG,UAAU,CAAC;AAErE,MAAM,WAAW,kBAAkB;IACjC,2GAA2G;IAC3G,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,uDAAuD;IACvD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,qBAAa,WAAY,SAAQ,KAAK;IACpC,SAAgB,IAAI,EAAE,eAAe,CAAC;IACtC,SAAgB,IAAI,EAAE,MAAM,CAAC;IAC7B,2EAA2E;IAC3E,SAAgB,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC5D,SAAgB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChC,SAAgB,QAAQ,CAAC,EAAE,MAAM,CAAC;gBAGhC,IAAI,EAAE,eAAe,EACrB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EAC3C,OAAO,GAAE,kBAAuB;CAUnC;AAED,wBAAgB,OAAO,CACrB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAC1C,WAAW,CAEb;AAED,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,SAAc,GAAG,WAAW,CAE1E;AAED,+GAA+G;AAC/G,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,CAQlD;AAED,wBAAgB,QAAQ,CACtB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAC1C,WAAW,CAEb"}

package/dist/server/kernel/errors.js

@@ -0,0 +1,34 @@
+export class DomainError extends Error {
+    kind;
+    code;
+    /** Machine-readable facts for the response's `metadata`; never secrets. */
+    details;
+    domain;
+    resource;
+    constructor(kind, code, message, details, options = {}) {
+        super(message);
+        this.name = 'DomainError';
+        this.kind = kind;
+        this.code = code;
+        if (details)
+            this.details = details;
+        if (options.domain)
+            this.domain = options.domain;
+        if (options.resource)
+            this.resource = options.resource;
+    }
+}
+export function invalid(code, message, details) {
+    return new DomainError('invalid', code, message, details);
+}
+export function forbidden(message, code = 'FORBIDDEN') {
+    return new DomainError('forbidden', code, message);
+}
+/** An object that does not exist, or that the caller may not see: the two are indistinguishable on purpose. */
+export function notFound(what) {
+    return new DomainError('notFound', 'NOT_FOUND', `${what} not found.`, undefined, { resource: what });
+}
+export function conflict(code, message, details) {
+    return new DomainError('conflict', code, message, details);
+}
+//# sourceMappingURL=errors.js.map

package/dist/server/kernel/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../../server/kernel/errors.ts"],"names":[],"mappings":"AAcA,MAAM,OAAO,WAAY,SAAQ,KAAK;IACpB,IAAI,CAAkB;IACtB,IAAI,CAAS;IAC7B,2EAA2E;IAC3D,OAAO,CAAqC;IAC5C,MAAM,CAAU;IAChB,QAAQ,CAAU;IAElC,YACE,IAAqB,EACrB,IAAY,EACZ,OAAe,EACf,OAA2C,EAC3C,UAA8B,EAAE;QAEhC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;QAC1B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,OAAO;YAAE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACpC,IAAI,OAAO,CAAC,MAAM;YAAE,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QACjD,IAAI,OAAO,CAAC,QAAQ;YAAE,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IACzD,CAAC;CACF;AAED,MAAM,UAAU,OAAO,CACrB,IAAY,EACZ,OAAe,EACf,OAA2C;IAE3C,OAAO,IAAI,WAAW,CAAC,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,OAAe,EAAE,IAAI,GAAG,WAAW;IAC3D,OAAO,IAAI,WAAW,CAAC,WAAW,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;AACrD,CAAC;AAED,+GAA+G;AAC/G,MAAM,UAAU,QAAQ,CAAC,IAAY;IACnC,OAAO,IAAI,WAAW,CACpB,UAAU,EACV,WAAW,EACX,GAAG,IAAI,aAAa,EACpB,SAAS,EACT,EAAE,QAAQ,EAAE,IAAI,EAAE,CACnB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,QAAQ,CACtB,IAAY,EACZ,OAAe,EACf,OAA2C;IAE3C,OAAO,IAAI,WAAW,CAAC,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AAC7D,CAAC"}

package/dist/server/kernel/events.d.ts

@@ -0,0 +1,43 @@
+/**
+ * The domain event bus. Every write announces what happened as an event; realtime pushes, notifications and other
+ * reactions are listeners, so a service never calls them directly.
+ *
+ * The bus knows no event: each domain declares its own by augmenting `DomainEventMap` next to the code that emits
+ * them, for example in `domains/issues/issue.events.ts`:
+ *
+ * ```ts
+ * declare module '../../kernel/events.js' {
+ *   interface DomainEventMap {
+ *     'issue.changed': { readonly issueId: string };
+ *   }
+ * }
+ * ```
+ *
+ * Events are emitted inside a transaction (`tx.ts`) and reach listeners only after it commits. Delivery is in-process
+ * and best effort: a failing listener is logged and skipped, and nothing survives a restart or reaches another
+ * instance.
+ *
+ * Thin stand-in: NocoBase has no change events of its own yet. Replace the bus when it does; event names and payloads
+ * are the contract listeners depend on, so they stay.
+ */
+export interface DomainEventMap {
+}
+export type DomainEventType = Extract<keyof DomainEventMap, string>;
+export type DomainEvent<T extends DomainEventType = DomainEventType> = {
+    [K in T]: {
+        readonly type: K;
+    } & DomainEventMap[K];
+}[T];
+export type DomainEventListener<T extends DomainEventType = DomainEventType> = (event: DomainEvent<T>) => void | Promise<void>;
+export interface DomainEventBus {
+    emit(event: DomainEvent): void;
+    /** Listens to one event type; returns what stops listening. */
+    on<T extends DomainEventType>(type: T, listener: DomainEventListener<T>): () => void;
+    /** Listens to every event; returns what stops listening. */
+    onAny(listener: DomainEventListener): () => void;
+}
+export interface DomainEventBusOptions {
+    readonly onListenerError?: (error: unknown, event: DomainEvent) => void;
+}
+export declare function createDomainEventBus(options?: DomainEventBusOptions): DomainEventBus;
+//# sourceMappingURL=events.d.ts.map

package/dist/server/kernel/events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../../../server/kernel/events.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAIH,MAAM,WAAW,cAAc;CAAG;AAElC,MAAM,MAAM,eAAe,GAAG,OAAO,CAAC,MAAM,cAAc,EAAE,MAAM,CAAC,CAAC;AAEpE,MAAM,MAAM,WAAW,CAAC,CAAC,SAAS,eAAe,GAAG,eAAe,IAAI;KACpE,CAAC,IAAI,CAAC,GAAG;QAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAA;KAAE,GAAG,cAAc,CAAC,CAAC,CAAC;CACnD,CAAC,CAAC,CAAC,CAAC;AAEL,MAAM,MAAM,mBAAmB,CAAC,CAAC,SAAS,eAAe,GAAG,eAAe,IAAI,CAC7E,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC,KAClB,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAE1B,MAAM,WAAW,cAAc;IAC7B,IAAI,CAAC,KAAK,EAAE,WAAW,GAAG,IAAI,CAAC;IAC/B,+DAA+D;IAC/D,EAAE,CAAC,CAAC,SAAS,eAAe,EAC1B,IAAI,EAAE,CAAC,EACP,QAAQ,EAAE,mBAAmB,CAAC,CAAC,CAAC,GAC/B,MAAM,IAAI,CAAC;IACd,4DAA4D;IAC5D,KAAK,CAAC,QAAQ,EAAE,mBAAmB,GAAG,MAAM,IAAI,CAAC;CAClD;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,KAAK,IAAI,CAAC;CACzE;AAED,wBAAgB,oBAAoB,CAClC,OAAO,GAAE,qBAA0B,GAClC,cAAc,CA6ChB"}

package/dist/server/kernel/events.js

@@ -0,0 +1,64 @@
+/**
+ * The domain event bus. Every write announces what happened as an event; realtime pushes, notifications and other
+ * reactions are listeners, so a service never calls them directly.
+ *
+ * The bus knows no event: each domain declares its own by augmenting `DomainEventMap` next to the code that emits
+ * them, for example in `domains/issues/issue.events.ts`:
+ *
+ * ```ts
+ * declare module '../../kernel/events.js' {
+ *   interface DomainEventMap {
+ *     'issue.changed': { readonly issueId: string };
+ *   }
+ * }
+ * ```
+ *
+ * Events are emitted inside a transaction (`tx.ts`) and reach listeners only after it commits. Delivery is in-process
+ * and best effort: a failing listener is logged and skipped, and nothing survives a restart or reaches another
+ * instance.
+ *
+ * Thin stand-in: NocoBase has no change events of its own yet. Replace the bus when it does; event names and payloads
+ * are the contract listeners depend on, so they stay.
+ */
+export function createDomainEventBus(options = {}) {
+    const byType = new Map();
+    const any = new Set();
+    const deliver = (listener, event) => {
+        try {
+            const result = listener(event);
+            if (result instanceof Promise)
+                result.catch((error) => options.onListenerError?.(error, event));
+        }
+        catch (error) {
+            options.onListenerError?.(error, event);
+        }
+    };
+    const subscribe = (set, listener) => {
+        set.add(listener);
+        return () => {
+            set.delete(listener);
+        };
+    };
+    return {
+        emit(event) {
+            // Widened: with no domain loaded, `DomainEvent` is `never`.
+            const { type } = event;
+            for (const listener of byType.get(type) ?? [])
+                deliver(listener, event);
+            for (const listener of any)
+                deliver(listener, event);
+        },
+        on(type, listener) {
+            let set = byType.get(type);
+            if (!set) {
+                set = new Set();
+                byType.set(type, set);
+            }
+            return subscribe(set, listener);
+        },
+        onAny(listener) {
+            return subscribe(any, listener);
+        },
+    };
+}
+//# sourceMappingURL=events.js.map

package/dist/server/kernel/events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.js","sourceRoot":"","sources":["../../../server/kernel/events.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AA+BH,MAAM,UAAU,oBAAoB,CAClC,UAAiC,EAAE;IAEnC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAoC,CAAC;IAC3D,MAAM,GAAG,GAAG,IAAI,GAAG,EAAuB,CAAC;IAE3C,MAAM,OAAO,GAAG,CAAC,QAA6B,EAAE,KAAkB,EAAE,EAAE;QACpE,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC/B,IAAI,MAAM,YAAY,OAAO;gBAC3B,MAAM,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE,CAC9B,OAAO,CAAC,eAAe,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,CACxC,CAAC;QACN,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,eAAe,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,SAAS,GAAG,CAChB,GAA6B,EAC7B,QAA6B,EAC7B,EAAE;QACF,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAClB,OAAO,GAAG,EAAE;YACV,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACvB,CAAC,CAAC;IACJ,CAAC,CAAC;IAEF,OAAO;QACL,IAAI,CAAC,KAAK;YACR,4DAA4D;YAC5D,MAAM,EAAE,IAAI,EAAE,GAAG,KAAkC,CAAC;YACpD,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE;gBAAE,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YACxE,KAAK,MAAM,QAAQ,IAAI,GAAG;gBAAE,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACvD,CAAC;QACD,EAAE,CAAC,IAAI,EAAE,QAAQ;YACf,IAAI,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC3B,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,GAAG,GAAG,IAAI,GAAG,EAAE,CAAC;gBAChB,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YACxB,CAAC;YACD,OAAO,SAAS,CAAC,GAAG,EAAE,QAA+B,CAAC,CAAC;QACzD,CAAC;QACD,KAAK,CAAC,QAAQ;YACZ,OAAO,SAAS,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAClC,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/server/kernel/http.d.ts

@@ -0,0 +1,47 @@
+/**
+ * HTTP helpers for the route modules: domain errors to `ApiError`, and list bodies. Only route code
+ * imports this file; services never see a request.
+ */
+import { ApiError } from '@nocobase/app-server/router';
+import type { Env, ErrorHandler } from 'hono';
+import { Hono } from 'hono';
+import type { Page } from '../../shared/common.js';
+import { DomainError } from './errors.js';
+/** The error domain of every reason this plugin defines. */
+export declare const PROJECTS_DOMAIN = "projects";
+/** The tag of every operation in the API document. */
+export declare const tags: string[];
+/**
+ * A person (a session or an API key), or an agent's run (its run token, `x-nocobase-run-token`, when the application
+ * assembles the agents plugin). The run acts for the person who woke the agent, within the actions the application
+ * gives it; only routes listing it accept it.
+ */
+export declare const personOrRunSecurity: Record<string, string[]>[];
+/** The `ApiError` a domain error answers with: its code as `reason`, its details as `metadata`. */
+export declare function toProjectsApiError(error: DomainError): ApiError;
+/**
+ * Runs `read` for a resource named by the query or body rather than the URL: one that does not exist is a bad request
+ * naming `field`, not a 404.
+ */
+export declare function referencedBy<T>(field: string, read: () => Promise<T>): Promise<T>;
+/** The one error handler of this plugin's routes: domain errors become `ApiError`, the rest is the framework's. */
+export declare const projectsErrorHandler: ErrorHandler;
+/** A router whose errors go through `projectsErrorHandler`. */
+export declare function domainRouter<E extends Env = Env>(): Hono<E>;
+/** A cursor-paged list as the API answers it; `nextPageToken` is absent on the last page. */
+export interface CursorListBody<T> {
+    readonly data: readonly T[];
+    readonly meta: {
+        readonly nextPageToken?: string;
+    };
+}
+export declare function cursorList<T>(page: Page<T>): CursorListBody<T>;
+/** A bounded list, answered whole. */
+export interface BoundedListBody<T> {
+    readonly data: readonly T[];
+    readonly meta: {
+        readonly total: number;
+    };
+}
+export declare function boundedList<T>(data: readonly T[]): BoundedListBody<T>;
+//# sourceMappingURL=http.d.ts.map

package/dist/server/kernel/http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../../server/kernel/http.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EACL,QAAQ,EAGT,MAAM,6BAA6B,CAAC;AACrC,OAAO,KAAK,EAAE,GAAG,EAAE,YAAY,EAAE,MAAM,MAAM,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,4DAA4D;AAC5D,eAAO,MAAM,eAAe,aAAa,CAAC;AAE1C,sDAAsD;AACtD,eAAO,MAAM,IAAI,EAAE,MAAM,EAAiB,CAAC;AAE3C;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,EAIzD,CAAC;AAuDF,mGAAmG;AACnG,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,WAAW,GAAG,QAAQ,CAU/D;AAED;;;GAGG;AACH,wBAAsB,YAAY,CAAC,CAAC,EAClC,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GACrB,OAAO,CAAC,CAAC,CAAC,CAeZ;AAED,mHAAmH;AACnH,eAAO,MAAM,oBAAoB,EAAE,YAIhC,CAAC;AAEJ,+DAA+D;AAC/D,wBAAgB,YAAY,CAAC,CAAC,SAAS,GAAG,GAAG,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,CAI3D;AAED,6FAA6F;AAC7F,MAAM,WAAW,cAAc,CAAC,CAAC;IAC/B,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE;QAAE,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACpD;AAED,wBAAgB,UAAU,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,cAAc,CAAC,CAAC,CAAC,CAK9D;AAED,sCAAsC;AACtC,MAAM,WAAW,eAAe,CAAC,CAAC;IAChC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE;QAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;CAC3C;AAED,wBAAgB,WAAW,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,EAAE,GAAG,eAAe,CAAC,CAAC,CAAC,CAErE"}

package/dist/server/kernel/http.js

@@ -0,0 +1,120 @@
+/**
+ * HTTP helpers for the route modules: domain errors to `ApiError`, and list bodies. Only route code
+ * imports this file; services never see a request.
+ */
+import { ApiError, apiErrorHandler, } from '@nocobase/app-server/router';
+import { Hono } from 'hono';
+import { DomainError } from './errors.js';
+/** The error domain of every reason this plugin defines. */
+export const PROJECTS_DOMAIN = 'projects';
+/** The tag of every operation in the API document. */
+export const tags = ['Projects'];
+/**
+ * A person (a session or an API key), or an agent's run (its run token, `x-nocobase-run-token`, when the application
+ * assembles the agents plugin). The run acts for the person who woke the agent, within the actions the application
+ * gives it; only routes listing it accept it.
+ */
+export const personOrRunSecurity = [
+    { cookieAuth: [] },
+    { apiKeyAuth: [] },
+    { runToken: [] },
+];
+/** Refusals of a valid request because of how the application is set up. */
+const PRECONDITION_CODES = new Set([
+    'APPROVAL_UNAVAILABLE',
+    'FILES_UNAVAILABLE',
+    'PLAN_UNAVAILABLE',
+]);
+const ALREADY_EXISTS_CODES = new Set([
+    'DEPENDENCY_EXISTS',
+    'LABEL_EXISTS',
+    'WORKFLOW_EXISTS',
+]);
+/** A concurrent change won: read again and retry. */
+const ABORTED_CODES = new Set([
+    'REVISION_CONFLICT',
+    'UNDO_STALE',
+]);
+/** `notFound` names a resource in words; its reason names it in UPPER_SNAKE_CASE. */
+const NOT_FOUND_REASONS = {
+    'Approval request': 'APPROVAL_NOT_FOUND',
+    'Deleted issue': 'ISSUE_NOT_FOUND',
+    File: 'INTAKE_FILE_NOT_FOUND',
+    Job: 'INTAKE_JOB_NOT_FOUND',
+    Resource: 'PROJECT_RESOURCE_NOT_FOUND',
+};
+function notFoundReason(resource) {
+    if (!resource)
+        return 'NOT_FOUND';
+    return (NOT_FOUND_REASONS[resource] ??
+        `${resource.trim().replace(/\s+/gu, '_').toUpperCase()}_NOT_FOUND`);
+}
+function statusOf(error) {
+    switch (error.kind) {
+        case 'invalid':
+            return PRECONDITION_CODES.has(error.code)
+                ? 'FAILED_PRECONDITION'
+                : 'INVALID_ARGUMENT';
+        case 'unauthorized':
+            return 'UNAUTHENTICATED';
+        case 'forbidden':
+            return 'PERMISSION_DENIED';
+        case 'notFound':
+            return 'NOT_FOUND';
+        case 'conflict':
+            if (ALREADY_EXISTS_CODES.has(error.code))
+                return 'ALREADY_EXISTS';
+            // Any other conflict is a state that forbids the request, such as a plan that is no longer open.
+            return ABORTED_CODES.has(error.code) ? 'ABORTED' : 'FAILED_PRECONDITION';
+    }
+}
+/** The `ApiError` a domain error answers with: its code as `reason`, its details as `metadata`. */
+export function toProjectsApiError(error) {
+    return new ApiError({
+        status: statusOf(error),
+        reason: error.kind === 'notFound' ? notFoundReason(error.resource) : error.code,
+        domain: error.domain ?? PROJECTS_DOMAIN,
+        message: error.message,
+        ...(error.details ? { metadata: error.details } : {}),
+        cause: error,
+    });
+}
+/**
+ * Runs `read` for a resource named by the query or body rather than the URL: one that does not exist is a bad request
+ * naming `field`, not a 404.
+ */
+export async function referencedBy(field, read) {
+    try {
+        return await read();
+    }
+    catch (error) {
+        if (!(error instanceof DomainError) || error.kind !== 'notFound')
+            throw error;
+        throw new ApiError({
+            status: 'INVALID_ARGUMENT',
+            reason: notFoundReason(error.resource),
+            domain: error.domain ?? PROJECTS_DOMAIN,
+            message: error.message,
+            fieldViolations: [{ field, description: error.message }],
+            cause: error,
+        });
+    }
+}
+/** The one error handler of this plugin's routes: domain errors become `ApiError`, the rest is the framework's. */
+export const projectsErrorHandler = (error, context) => apiErrorHandler(error instanceof DomainError ? toProjectsApiError(error) : error, context);
+/** A router whose errors go through `projectsErrorHandler`. */
+export function domainRouter() {
+    const router = new Hono();
+    router.onError(projectsErrorHandler);
+    return router;
+}
+export function cursorList(page) {
+    return {
+        data: page.data,
+        meta: page.nextCursor ? { nextPageToken: page.nextCursor } : {},
+    };
+}
+export function boundedList(data) {
+    return { data, meta: { total: data.length } };
+}
+//# sourceMappingURL=http.js.map

package/dist/server/kernel/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../../../server/kernel/http.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EACL,QAAQ,EACR,eAAe,GAEhB,MAAM,6BAA6B,CAAC;AAErC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAG5B,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,4DAA4D;AAC5D,MAAM,CAAC,MAAM,eAAe,GAAG,UAAU,CAAC;AAE1C,sDAAsD;AACtD,MAAM,CAAC,MAAM,IAAI,GAAa,CAAC,UAAU,CAAC,CAAC;AAE3C;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA+B;IAC7D,EAAE,UAAU,EAAE,EAAE,EAAE;IAClB,EAAE,UAAU,EAAE,EAAE,EAAE;IAClB,EAAE,QAAQ,EAAE,EAAE,EAAE;CACjB,CAAC;AAEF,4EAA4E;AAC5E,MAAM,kBAAkB,GAAwB,IAAI,GAAG,CAAC;IACtD,sBAAsB;IACtB,mBAAmB;IACnB,kBAAkB;CACnB,CAAC,CAAC;AACH,MAAM,oBAAoB,GAAwB,IAAI,GAAG,CAAC;IACxD,mBAAmB;IACnB,cAAc;IACd,iBAAiB;CAClB,CAAC,CAAC;AACH,qDAAqD;AACrD,MAAM,aAAa,GAAwB,IAAI,GAAG,CAAC;IACjD,mBAAmB;IACnB,YAAY;CACb,CAAC,CAAC;AAEH,qFAAqF;AACrF,MAAM,iBAAiB,GAAqC;IAC1D,kBAAkB,EAAE,oBAAoB;IACxC,eAAe,EAAE,iBAAiB;IAClC,IAAI,EAAE,uBAAuB;IAC7B,GAAG,EAAE,sBAAsB;IAC3B,QAAQ,EAAE,4BAA4B;CACvC,CAAC;AAEF,SAAS,cAAc,CAAC,QAA4B;IAClD,IAAI,CAAC,QAAQ;QAAE,OAAO,WAAW,CAAC;IAClC,OAAO,CACL,iBAAiB,CAAC,QAAQ,CAAC;QAC3B,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,YAAY,CACnE,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,KAAkB;IAClC,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,SAAS;YACZ,OAAO,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;gBACvC,CAAC,CAAC,qBAAqB;gBACvB,CAAC,CAAC,kBAAkB,CAAC;QACzB,KAAK,cAAc;YACjB,OAAO,iBAAiB,CAAC;QAC3B,KAAK,WAAW;YACd,OAAO,mBAAmB,CAAC;QAC7B,KAAK,UAAU;YACb,OAAO,WAAW,CAAC;QACrB,KAAK,UAAU;YACb,IAAI,oBAAoB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;gBAAE,OAAO,gBAAgB,CAAC;YAClE,iGAAiG;YACjG,OAAO,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,qBAAqB,CAAC;IAC7E,CAAC;AACH,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,kBAAkB,CAAC,KAAkB;IACnD,OAAO,IAAI,QAAQ,CAAC;QAClB,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC;QACvB,MAAM,EACJ,KAAK,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI;QACzE,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,eAAe;QACvC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,KAAK,EAAE,KAAK;KACb,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,KAAa,EACb,IAAsB;IAEtB,IAAI,CAAC;QACH,OAAO,MAAM,IAAI,EAAE,CAAC;IACtB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,CAAC,KAAK,YAAY,WAAW,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU;YAC9D,MAAM,KAAK,CAAC;QACd,MAAM,IAAI,QAAQ,CAAC;YACjB,MAAM,EAAE,kBAAkB;YAC1B,MAAM,EAAE,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC;YACtC,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,eAAe;YACvC,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,eAAe,EAAE,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;YACxD,KAAK,EAAE,KAAK;SACb,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,mHAAmH;AACnH,MAAM,CAAC,MAAM,oBAAoB,GAAiB,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CACnE,eAAe,CACb,KAAK,YAAY,WAAW,CAAC,CAAC,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,EAChE,OAAO,CACR,CAAC;AAEJ,+DAA+D;AAC/D,MAAM,UAAU,YAAY;IAC1B,MAAM,MAAM,GAAG,IAAI,IAAI,EAAK,CAAC;IAC7B,MAAM,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACrC,OAAO,MAAM,CAAC;AAChB,CAAC;AAQD,MAAM,UAAU,UAAU,CAAI,IAAa;IACzC,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE;KAChE,CAAC;AACJ,CAAC;AAQD,MAAM,UAAU,WAAW,CAAI,IAAkB;IAC/C,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;AAChD,CAAC"}