@nospt/plugin-dev-ai-hub-backend 0.2.4 → 0.3.0

package/config.d.ts

@@ -0,0 +1,22 @@
+export interface Config {
+  devAiHub?: {
+    /**
+     * Install telemetry (ADR-0007). The write path is always active — there
+     * is no feature flag — so a salt is always in play; the only question is
+     * where it comes from.
+     */
+    telemetry?: {
+      /**
+       * Stable salt used to hash the caller identity recorded on telemetry
+       * events. Optional: when unset, the plugin generates a salt on first
+       * start and persists it in its own database, which keeps hashes stable
+       * across restarts. Set it explicitly to keep the salt outside the
+       * database it protects — and then it must not change across
+       * restarts/deploys, or historical per-day dedup keys become
+       * unrecoverable.
+       * @visibility secret
+       */
+      salt?: string;
+    };
+  };
+}

package/dist/database/TelemetryStore.cjs.js

@@ -0,0 +1,84 @@
+'use strict';
+
+var node_crypto = require('node:crypto');
+var backendPluginApi = require('@backstage/backend-plugin-api');
+
+const SALT_KEY = "actor_salt";
+const ZERO_COUNTS = {
+  install: 0,
+  copy: 0,
+  download: 0,
+  view: 0
+};
+class TelemetryStore {
+  constructor(db) {
+    this.db = db;
+  }
+  db;
+  static async create(options) {
+    const db = await options.database.getClient();
+    await db.migrate.latest({
+      directory: backendPluginApi.resolvePackagePath(
+        "@nospt/plugin-dev-ai-hub-backend",
+        "migrations"
+      ),
+      loadExtensions: [".js"]
+    });
+    return new TelemetryStore(db);
+  }
+  /**
+   * The salt used to hash actor identity (ADR-0007). A configured value wins
+   * and is never persisted, so a deployment can keep the salt outside the
+   * database it protects. Otherwise the salt is generated once and stored,
+   * which is what makes it survive restarts — the property per-day dedup
+   * actually depends on. It is deliberately not required from config: a
+   * missing value used to fail the plugin's init and take the whole backend
+   * down with it.
+   *
+   * Concurrent replicas starting together race on the insert; the loser reads
+   * back the winner's value, so every replica ends up on the same salt.
+   */
+  async resolveSalt(configured) {
+    if (configured) {
+      return configured;
+    }
+    const existing = await this.readSalt();
+    if (existing) {
+      return existing;
+    }
+    await this.db("telemetry_settings").insert({ key: SALT_KEY, value: node_crypto.randomBytes(32).toString("hex") }).onConflict("key").ignore();
+    const stored = await this.readSalt();
+    if (!stored) {
+      throw new Error("Failed to persist the telemetry actor salt");
+    }
+    return stored;
+  }
+  async readSalt() {
+    const row = await this.db("telemetry_settings").where("key", SALT_KEY).first("value");
+    return row?.value;
+  }
+  async record(event) {
+    const now = /* @__PURE__ */ new Date();
+    await this.db("telemetry_events").insert({
+      entity_ref: event.entityRef,
+      action: event.action,
+      actor_hash: event.actorHash,
+      tool: event.tool ?? null,
+      day: now.toISOString().slice(0, 10),
+      occurred_at: now.toISOString()
+    });
+  }
+  async getCounts(entityRef) {
+    const rows = await this.db("telemetry_events").where("entity_ref", entityRef).groupBy("action").select("action").count(
+      "id as count"
+    );
+    const counts = { ...ZERO_COUNTS };
+    for (const row of rows) {
+      counts[row.action] = Number(row.count);
+    }
+    return counts;
+  }
+}
+
+exports.TelemetryStore = TelemetryStore;
+//# sourceMappingURL=TelemetryStore.cjs.js.map

package/dist/database/TelemetryStore.cjs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TelemetryStore.cjs.js","sources":["../../src/database/TelemetryStore.ts"],"sourcesContent":["import { randomBytes } from 'node:crypto';\nimport type { Knex } from 'knex';\nimport {\n  resolvePackagePath,\n  type DatabaseService,\n} from '@backstage/backend-plugin-api';\nimport type {\n  TelemetryAction,\n  TelemetryCounts,\n} from '@nospt/plugin-dev-ai-hub-common';\n\n/** Settings key holding the salt used to hash telemetry actor identity. */\nconst SALT_KEY = 'actor_salt';\n\nconst ZERO_COUNTS: TelemetryCounts = {\n  install: 0,\n  copy: 0,\n  download: 0,\n  view: 0,\n};\n\nexport interface TelemetryEventRecord {\n  entityRef: string;\n  action: TelemetryAction;\n  actorHash: string | null;\n  tool?: string;\n}\n\n/**\n * Telemetry event log (ADR-0007): store-all writes, raw counts on read for\n * this slice — per-(hash, day)-distinct dedup for `view` is a follow-up.\n */\nexport class TelemetryStore {\n  private constructor(private readonly db: Knex) {}\n\n  static async create(options: {\n    database: DatabaseService;\n  }): Promise<TelemetryStore> {\n    const db = await options.database.getClient();\n    await db.migrate.latest({\n      directory: resolvePackagePath(\n        '@nospt/plugin-dev-ai-hub-backend',\n        'migrations',\n      ),\n      loadExtensions: ['.js'],\n    });\n    return new TelemetryStore(db);\n  }\n\n  /**\n   * The salt used to hash actor identity (ADR-0007). A configured value wins\n   * and is never persisted, so a deployment can keep the salt outside the\n   * database it protects. Otherwise the salt is generated once and stored,\n   * which is what makes it survive restarts — the property per-day dedup\n   * actually depends on. It is deliberately not required from config: a\n   * missing value used to fail the plugin's init and take the whole backend\n   * down with it.\n   *\n   * Concurrent replicas starting together race on the insert; the loser reads\n   * back the winner's value, so every replica ends up on the same salt.\n   */\n  async resolveSalt(configured?: string): Promise<string> {\n    if (configured) {\n      return configured;\n    }\n    const existing = await this.readSalt();\n    if (existing) {\n      return existing;\n    }\n    await this.db('telemetry_settings')\n      .insert({ key: SALT_KEY, value: randomBytes(32).toString('hex') })\n      .onConflict('key')\n      .ignore();\n    const stored = await this.readSalt();\n    if (!stored) {\n      throw new Error('Failed to persist the telemetry actor salt');\n    }\n    return stored;\n  }\n\n  private async readSalt(): Promise<string | undefined> {\n    const row = await this.db('telemetry_settings')\n      .where('key', SALT_KEY)\n      .first<{ value: string } | undefined>('value');\n    return row?.value;\n  }\n\n  async record(event: TelemetryEventRecord): Promise<void> {\n    const now = new Date();\n    await this.db('telemetry_events').insert({\n      entity_ref: event.entityRef,\n      action: event.action,\n      actor_hash: event.actorHash,\n      tool: event.tool ?? null,\n      day: now.toISOString().slice(0, 10),\n      occurred_at: now.toISOString(),\n    });\n  }\n\n  async getCounts(entityRef: string): Promise<TelemetryCounts> {\n    const rows = await this.db('telemetry_events')\n      .where('entity_ref', entityRef)\n      .groupBy('action')\n      .select('action')\n      .count<Array<{ action: TelemetryAction; count: string | number }>>(\n        'id as count',\n      );\n\n    const counts = { ...ZERO_COUNTS };\n    for (const row of rows) {\n      counts[row.action] = Number(row.count);\n    }\n    return counts;\n  }\n}\n"],"names":["resolvePackagePath","randomBytes"],"mappings":";;;;;AAYA,MAAM,QAAA,GAAW,YAAA;AAEjB,MAAM,WAAA,GAA+B;AAAA,EACnC,OAAA,EAAS,CAAA;AAAA,EACT,IAAA,EAAM,CAAA;AAAA,EACN,QAAA,EAAU,CAAA;AAAA,EACV,IAAA,EAAM;AACR,CAAA;AAaO,MAAM,cAAA,CAAe;AAAA,EAClB,YAA6B,EAAA,EAAU;AAAV,IAAA,IAAA,CAAA,EAAA,GAAA,EAAA;AAAA,EAAW;AAAA,EAAX,EAAA;AAAA,EAErC,aAAa,OAAO,OAAA,EAEQ;AAC1B,IAAA,MAAM,EAAA,GAAK,MAAM,OAAA,CAAQ,QAAA,CAAS,SAAA,EAAU;AAC5C,IAAA,MAAM,EAAA,CAAG,QAAQ,MAAA,CAAO;AAAA,MACtB,SAAA,EAAWA,mCAAA;AAAA,QACT,kCAAA;AAAA,QACA;AAAA,OACF;AAAA,MACA,cAAA,EAAgB,CAAC,KAAK;AAAA,KACvB,CAAA;AACD,IAAA,OAAO,IAAI,eAAe,EAAE,CAAA;AAAA,EAC9B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAcA,MAAM,YAAY,UAAA,EAAsC;AACtD,IAAA,IAAI,UAAA,EAAY;AACd,MAAA,OAAO,UAAA;AAAA,IACT;AACA,IAAA,MAAM,QAAA,GAAW,MAAM,IAAA,CAAK,QAAA,EAAS;AACrC,IAAA,IAAI,QAAA,EAAU;AACZ,MAAA,OAAO,QAAA;AAAA,IACT;AACA,IAAA,MAAM,IAAA,CAAK,GAAG,oBAAoB,CAAA,CAC/B,OAAO,EAAE,GAAA,EAAK,UAAU,KAAA,EAAOC,uBAAA,CAAY,EAAE,CAAA,CAAE,QAAA,CAAS,KAAK,CAAA,EAAG,EAChE,UAAA,CAAW,KAAK,EAChB,MAAA,EAAO;AACV,IAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,QAAA,EAAS;AACnC,IAAA,IAAI,CAAC,MAAA,EAAQ;AACX,MAAA,MAAM,IAAI,MAAM,4CAA4C,CAAA;AAAA,IAC9D;AACA,IAAA,OAAO,MAAA;AAAA,EACT;AAAA,EAEA,MAAc,QAAA,GAAwC;AACpD,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,EAAA,CAAG,oBAAoB,CAAA,CAC3C,KAAA,CAAM,KAAA,EAAO,QAAQ,CAAA,CACrB,KAAA,CAAqC,OAAO,CAAA;AAC/C,IAAA,OAAO,GAAA,EAAK,KAAA;AAAA,EACd;AAAA,EAEA,MAAM,OAAO,KAAA,EAA4C;AACvD,IAAA,MAAM,GAAA,uBAAU,IAAA,EAAK;AACrB,IAAA,MAAM,IAAA,CAAK,EAAA,CAAG,kBAAkB,CAAA,CAAE,MAAA,CAAO;AAAA,MACvC,YAAY,KAAA,CAAM,SAAA;AAAA,MAClB,QAAQ,KAAA,CAAM,MAAA;AAAA,MACd,YAAY,KAAA,CAAM,SAAA;AAAA,MAClB,IAAA,EAAM,MAAM,IAAA,IAAQ,IAAA;AAAA,MACpB,KAAK,GAAA,CAAI,WAAA,EAAY,CAAE,KAAA,CAAM,GAAG,EAAE,CAAA;AAAA,MAClC,WAAA,EAAa,IAAI,WAAA;AAAY,KAC9B,CAAA;AAAA,EACH;AAAA,EAEA,MAAM,UAAU,SAAA,EAA6C;AAC3D,IAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,EAAA,CAAG,kBAAkB,CAAA,CAC1C,KAAA,CAAM,YAAA,EAAc,SAAS,EAC7B,OAAA,CAAQ,QAAQ,CAAA,CAChB,MAAA,CAAO,QAAQ,CAAA,CACf,KAAA;AAAA,MACC;AAAA,KACF;AAEF,IAAA,MAAM,MAAA,GAAS,EAAE,GAAG,WAAA,EAAY;AAChC,IAAA,KAAA,MAAW,OAAO,IAAA,EAAM;AACtB,MAAA,MAAA,CAAO,GAAA,CAAI,MAAM,CAAA,GAAI,MAAA,CAAO,IAAI,KAAK,CAAA;AAAA,IACvC;AACA,IAAA,OAAO,MAAA;AAAA,EACT;AACF;;;;"}

package/dist/plugin.cjs.js

@@ -1,66 +1,45 @@
 'use strict';
 
 var backendPluginApi = require('@backstage/backend-plugin-api');
-var pluginDevAiHubNode = require('@nospt/plugin-dev-ai-hub-node');
-var AiAssetStore = require('./database/AiAssetStore.cjs.js');
-var AiAssetSyncService = require('./service/AiAssetSyncService.cjs.js');
+var pluginCatalogNode = require('@backstage/plugin-catalog-node');
+var TelemetryStore = require('./database/TelemetryStore.cjs.js');
 var router = require('./router.cjs.js');
 
 const devAiHubPlugin = backendPluginApi.createBackendPlugin({
   pluginId: "dev-ai-hub",
   register(env) {
-    const externalProviders = [];
-    env.registerExtensionPoint(pluginDevAiHubNode.devAiHubProviderExtensionPoint, {
-      addProvider(provider) {
-        externalProviders.push(provider);
-      }
-    });
     env.registerInit({
       deps: {
         config: backendPluginApi.coreServices.rootConfig,
         logger: backendPluginApi.coreServices.logger,
         database: backendPluginApi.coreServices.database,
-        scheduler: backendPluginApi.coreServices.scheduler,
         httpRouter: backendPluginApi.coreServices.httpRouter,
-        urlReader: backendPluginApi.coreServices.urlReader
+        urlReader: backendPluginApi.coreServices.urlReader,
+        httpAuth: backendPluginApi.coreServices.httpAuth,
+        catalog: pluginCatalogNode.catalogServiceRef
       },
-      async init({ config, logger, database, scheduler, httpRouter, urlReader }) {
-        const store = await AiAssetStore.AiAssetStore.create({ database });
-        const providers = (config.getOptionalConfigArray("devAiHub.providers") ?? []).map((p) => ({
-          id: p.getString("id"),
-          type: p.getString("type"),
-          target: p.getString("target"),
-          branch: p.getOptionalString("branch") ?? "main",
-          schedule: {
-            frequency: {
-              minutes: p.getOptionalNumber("schedule.frequency.minutes"),
-              hours: p.getOptionalNumber("schedule.frequency.hours")
-            },
-            timeout: {
-              minutes: p.getOptionalNumber("schedule.timeout.minutes"),
-              hours: p.getOptionalNumber("schedule.timeout.hours")
-            }
-          },
-          filters: p.has("filters") ? {
-            tools: p.getOptionalStringArray("filters.tools"),
-            types: p.getOptionalStringArray("filters.types")
-          } : void 0
-        }));
-        const syncService = new AiAssetSyncService.AiAssetSyncService({
+      async init({
+        config,
+        logger,
+        database,
+        httpRouter,
+        urlReader,
+        httpAuth,
+        catalog
+      }) {
+        const telemetryStore = await TelemetryStore.TelemetryStore.create({ database });
+        const telemetrySalt = await telemetryStore.resolveSalt(
+          config.getOptionalString("devAiHub.telemetry.salt")
+        );
+        const router$1 = router.createRouter({
           logger,
-          store,
-          scheduler,
-          urlReader,
-          providers,
-          externalProviders
+          telemetryStore,
+          telemetrySalt,
+          catalog,
+          httpAuth,
+          reader: urlReader
         });
-        await syncService.start();
-        const router$1 = router.createRouter({ logger, store, syncService, providers });
         httpRouter.use(router$1);
-        httpRouter.addAuthPolicy({ path: "/assets", allow: "unauthenticated" });
-        httpRouter.addAuthPolicy({ path: "/providers", allow: "unauthenticated" });
-        httpRouter.addAuthPolicy({ path: "/stats", allow: "unauthenticated" });
-        httpRouter.addAuthPolicy({ path: "/mcp", allow: "unauthenticated" });
       }
     });
   }

package/dist/plugin.cjs.js.map

@@ -1 +1 @@
-{"version":3,"file":"plugin.cjs.js","sources":["../src/plugin.ts"],"sourcesContent":["import {\n  coreServices,\n  createBackendPlugin,\n} from '@backstage/backend-plugin-api';\nimport {\n  devAiHubProviderExtensionPoint,\n  type AiAssetProvider,\n} from '@nospt/plugin-dev-ai-hub-node';\nimport { AiAssetStore } from './database/AiAssetStore';\nimport { AiAssetSyncService } from './service/AiAssetSyncService';\nimport { createRouter } from './router';\nimport type { ProviderConfig } from './types';\n\nexport const devAiHubPlugin = createBackendPlugin({\n  pluginId: 'dev-ai-hub',\n  register(env) {\n    const externalProviders: AiAssetProvider[] = [];\n\n    env.registerExtensionPoint(devAiHubProviderExtensionPoint, {\n      addProvider(provider) {\n        externalProviders.push(provider);\n      },\n    });\n\n    env.registerInit({\n      deps: {\n        config: coreServices.rootConfig,\n        logger: coreServices.logger,\n        database: coreServices.database,\n        scheduler: coreServices.scheduler,\n        httpRouter: coreServices.httpRouter,\n        urlReader: coreServices.urlReader,\n      },\n      async init({ config, logger, database, scheduler, httpRouter, urlReader }) {\n        const store = await AiAssetStore.create({ database });\n\n        const providers: ProviderConfig[] = (\n          config.getOptionalConfigArray('devAiHub.providers') ?? []\n        ).map(p => ({\n          id: p.getString('id'),\n          type: p.getString('type') as ProviderConfig['type'],\n          target: p.getString('target'),\n          branch: p.getOptionalString('branch') ?? 'main',\n          schedule: {\n            frequency: {\n              minutes: p.getOptionalNumber('schedule.frequency.minutes'),\n              hours: p.getOptionalNumber('schedule.frequency.hours'),\n            },\n            timeout: {\n              minutes: p.getOptionalNumber('schedule.timeout.minutes'),\n              hours: p.getOptionalNumber('schedule.timeout.hours'),\n            },\n          },\n          filters: p.has('filters')\n            ? {\n                tools: p.getOptionalStringArray('filters.tools'),\n                types: p.getOptionalStringArray('filters.types'),\n              }\n            : undefined,\n        }));\n\n        const syncService = new AiAssetSyncService({\n          logger,\n          store,\n          scheduler,\n          urlReader,\n          providers,\n          externalProviders,\n        });\n\n        await syncService.start();\n\n        const router = createRouter({ logger, store, syncService, providers });\n\n        httpRouter.use(router);\n\n        httpRouter.addAuthPolicy({ path: '/assets', allow: 'unauthenticated' });\n        httpRouter.addAuthPolicy({ path: '/providers', allow: 'unauthenticated' });\n        httpRouter.addAuthPolicy({ path: '/stats', allow: 'unauthenticated' });\n        httpRouter.addAuthPolicy({ path: '/mcp', allow: 'unauthenticated' });\n      },\n    });\n  },\n});\n"],"names":["createBackendPlugin","devAiHubProviderExtensionPoint","coreServices","AiAssetStore","AiAssetSyncService","router","createRouter"],"mappings":";;;;;;;;AAaO,MAAM,iBAAiBA,oCAAA,CAAoB;AAAA,EAChD,QAAA,EAAU,YAAA;AAAA,EACV,SAAS,GAAA,EAAK;AACZ,IAAA,MAAM,oBAAuC,EAAC;AAE9C,IAAA,GAAA,CAAI,uBAAuBC,iDAAA,EAAgC;AAAA,MACzD,YAAY,QAAA,EAAU;AACpB,QAAA,iBAAA,CAAkB,KAAK,QAAQ,CAAA;AAAA,MACjC;AAAA,KACD,CAAA;AAED,IAAA,GAAA,CAAI,YAAA,CAAa;AAAA,MACf,IAAA,EAAM;AAAA,QACJ,QAAQC,6BAAA,CAAa,UAAA;AAAA,QACrB,QAAQA,6BAAA,CAAa,MAAA;AAAA,QACrB,UAAUA,6BAAA,CAAa,QAAA;AAAA,QACvB,WAAWA,6BAAA,CAAa,SAAA;AAAA,QACxB,YAAYA,6BAAA,CAAa,UAAA;AAAA,QACzB,WAAWA,6BAAA,CAAa;AAAA,OAC1B;AAAA,MACA,MAAM,KAAK,EAAE,MAAA,EAAQ,QAAQ,QAAA,EAAU,SAAA,EAAW,UAAA,EAAY,SAAA,EAAU,EAAG;AACzE,QAAA,MAAM,QAAQ,MAAMC,yBAAA,CAAa,MAAA,CAAO,EAAE,UAAU,CAAA;AAEpD,QAAA,MAAM,SAAA,GAAA,CACJ,OAAO,sBAAA,CAAuB,oBAAoB,KAAK,EAAC,EACxD,IAAI,CAAA,CAAA,MAAM;AAAA,UACV,EAAA,EAAI,CAAA,CAAE,SAAA,CAAU,IAAI,CAAA;AAAA,UACpB,IAAA,EAAM,CAAA,CAAE,SAAA,CAAU,MAAM,CAAA;AAAA,UACxB,MAAA,EAAQ,CAAA,CAAE,SAAA,CAAU,QAAQ,CAAA;AAAA,UAC5B,MAAA,EAAQ,CAAA,CAAE,iBAAA,CAAkB,QAAQ,CAAA,IAAK,MAAA;AAAA,UACzC,QAAA,EAAU;AAAA,YACR,SAAA,EAAW;AAAA,cACT,OAAA,EAAS,CAAA,CAAE,iBAAA,CAAkB,4BAA4B,CAAA;AAAA,cACzD,KAAA,EAAO,CAAA,CAAE,iBAAA,CAAkB,0BAA0B;AAAA,aACvD;AAAA,YACA,OAAA,EAAS;AAAA,cACP,OAAA,EAAS,CAAA,CAAE,iBAAA,CAAkB,0BAA0B,CAAA;AAAA,cACvD,KAAA,EAAO,CAAA,CAAE,iBAAA,CAAkB,wBAAwB;AAAA;AACrD,WACF;AAAA,UACA,OAAA,EAAS,CAAA,CAAE,GAAA,CAAI,SAAS,CAAA,GACpB;AAAA,YACE,KAAA,EAAO,CAAA,CAAE,sBAAA,CAAuB,eAAe,CAAA;AAAA,YAC/C,KAAA,EAAO,CAAA,CAAE,sBAAA,CAAuB,eAAe;AAAA,WACjD,GACA;AAAA,SACN,CAAE,CAAA;AAEF,QAAA,MAAM,WAAA,GAAc,IAAIC,qCAAA,CAAmB;AAAA,UACzC,MAAA;AAAA,UACA,KAAA;AAAA,UACA,SAAA;AAAA,UACA,SAAA;AAAA,UACA,SAAA;AAAA,UACA;AAAA,SACD,CAAA;AAED,QAAA,MAAM,YAAY,KAAA,EAAM;AAExB,QAAA,MAAMC,WAASC,mBAAA,CAAa,EAAE,QAAQ,KAAA,EAAO,WAAA,EAAa,WAAW,CAAA;AAErE,QAAA,UAAA,CAAW,IAAID,QAAM,CAAA;AAErB,QAAA,UAAA,CAAW,cAAc,EAAE,IAAA,EAAM,SAAA,EAAW,KAAA,EAAO,mBAAmB,CAAA;AACtE,QAAA,UAAA,CAAW,cAAc,EAAE,IAAA,EAAM,YAAA,EAAc,KAAA,EAAO,mBAAmB,CAAA;AACzE,QAAA,UAAA,CAAW,cAAc,EAAE,IAAA,EAAM,QAAA,EAAU,KAAA,EAAO,mBAAmB,CAAA;AACrE,QAAA,UAAA,CAAW,cAAc,EAAE,IAAA,EAAM,MAAA,EAAQ,KAAA,EAAO,mBAAmB,CAAA;AAAA,MACrE;AAAA,KACD,CAAA;AAAA,EACH;AACF,CAAC;;;;"}
+{"version":3,"file":"plugin.cjs.js","sources":["../src/plugin.ts"],"sourcesContent":["import {\n  coreServices,\n  createBackendPlugin,\n} from '@backstage/backend-plugin-api';\nimport { catalogServiceRef } from '@backstage/plugin-catalog-node';\nimport { TelemetryStore } from './database/TelemetryStore';\nimport { createRouter } from './router';\n\nexport const devAiHubPlugin = createBackendPlugin({\n  pluginId: 'dev-ai-hub',\n  register(env) {\n    env.registerInit({\n      deps: {\n        config: coreServices.rootConfig,\n        logger: coreServices.logger,\n        database: coreServices.database,\n        httpRouter: coreServices.httpRouter,\n        urlReader: coreServices.urlReader,\n        httpAuth: coreServices.httpAuth,\n        catalog: catalogServiceRef,\n      },\n      async init({\n        config,\n        logger,\n        database,\n        httpRouter,\n        urlReader,\n        httpAuth,\n        catalog,\n      }) {\n        const telemetryStore = await TelemetryStore.create({ database });\n        // Optional on purpose (#56): unset means \"generate and persist one\",\n        // not \"fail\". Requiring it here took the whole backend down on any\n        // deployment that had not configured this plugin.\n        const telemetrySalt = await telemetryStore.resolveSalt(\n          config.getOptionalString('devAiHub.telemetry.salt'),\n        );\n\n        const router = createRouter({\n          logger,\n          telemetryStore,\n          telemetrySalt,\n          catalog,\n          httpAuth,\n          reader: urlReader,\n        });\n\n        httpRouter.use(router);\n      },\n    });\n  },\n});\n"],"names":["createBackendPlugin","coreServices","catalogServiceRef","TelemetryStore","router","createRouter"],"mappings":";;;;;;;AAQO,MAAM,iBAAiBA,oCAAA,CAAoB;AAAA,EAChD,QAAA,EAAU,YAAA;AAAA,EACV,SAAS,GAAA,EAAK;AACZ,IAAA,GAAA,CAAI,YAAA,CAAa;AAAA,MACf,IAAA,EAAM;AAAA,QACJ,QAAQC,6BAAA,CAAa,UAAA;AAAA,QACrB,QAAQA,6BAAA,CAAa,MAAA;AAAA,QACrB,UAAUA,6BAAA,CAAa,QAAA;AAAA,QACvB,YAAYA,6BAAA,CAAa,UAAA;AAAA,QACzB,WAAWA,6BAAA,CAAa,SAAA;AAAA,QACxB,UAAUA,6BAAA,CAAa,QAAA;AAAA,QACvB,OAAA,EAASC;AAAA,OACX;AAAA,MACA,MAAM,IAAA,CAAK;AAAA,QACT,MAAA;AAAA,QACA,MAAA;AAAA,QACA,QAAA;AAAA,QACA,UAAA;AAAA,QACA,SAAA;AAAA,QACA,QAAA;AAAA,QACA;AAAA,OACF,EAAG;AACD,QAAA,MAAM,iBAAiB,MAAMC,6BAAA,CAAe,MAAA,CAAO,EAAE,UAAU,CAAA;AAI/D,QAAA,MAAM,aAAA,GAAgB,MAAM,cAAA,CAAe,WAAA;AAAA,UACzC,MAAA,CAAO,kBAAkB,yBAAyB;AAAA,SACpD;AAEA,QAAA,MAAMC,WAASC,mBAAA,CAAa;AAAA,UAC1B,MAAA;AAAA,UACA,cAAA;AAAA,UACA,aAAA;AAAA,UACA,OAAA;AAAA,UACA,QAAA;AAAA,UACA,MAAA,EAAQ;AAAA,SACT,CAAA;AAED,QAAA,UAAA,CAAW,IAAID,QAAM,CAAA;AAAA,MACvB;AAAA,KACD,CAAA;AAAA,EACH;AACF,CAAC;;;;"}

package/dist/router.cjs.js

@@ -1,10 +1,11 @@
 'use strict';
 
-var crypto = require('crypto');
 var express = require('express');
 var archiver = require('archiver');
-var streamableHttp_js = require('@modelcontextprotocol/sdk/server/streamableHttp.js');
-var McpServerService = require('./service/McpServerService.cjs.js');
+var pluginDevAiHubCommon = require('@nospt/plugin-dev-ai-hub-common');
+var toResourceSummary = require('./service/toResourceSummary.cjs.js');
+var telemetryHash = require('./service/telemetryHash.cjs.js');
+var bodyResolver = require('./service/bodyResolver.cjs.js');
 
 function _interopDefaultCompat (e) { return e && typeof e === 'object' && 'default' in e ? e : { default: e }; }
 
@@ -12,232 +13,176 @@ var express__default = /*#__PURE__*/_interopDefaultCompat(express);
 var archiver__default = /*#__PURE__*/_interopDefaultCompat(archiver);
 
 function createRouter(options) {
-  const { store, syncService, providers } = options;
+  const { telemetryStore, telemetrySalt, catalog, httpAuth, reader } = options;
   const router = express__default.default.Router();
-  const mcpSessions = /* @__PURE__ */ new Map();
   router.use(express__default.default.json());
-  router.get("/assets", async (req, res) => {
+  router.get("/resources", async (req, res) => {
     try {
-      const filter = {
-        type: req.query.type,
-        tool: req.query.tool,
-        providerId: req.query.provider,
-        search: req.query.search,
-        tags: req.query.tags ? req.query.tags.split(",").filter(Boolean) : void 0,
-        page: req.query.page ? Number(req.query.page) : 1,
-        pageSize: req.query.pageSize ? Number(req.query.pageSize) : 20
-      };
-      const { items, totalCount } = await store.listAssets(filter);
-      res.json({
-        items,
-        totalCount,
-        page: filter.page,
-        pageSize: filter.pageSize
-      });
-    } catch (err) {
-      options.logger.error("GET /assets failed", err);
-      res.status(500).json({ error: "Internal server error" });
-    }
-  });
-  router.get("/assets/:id", async (req, res) => {
-    try {
-      const asset = await store.getAsset(req.params.id);
-      if (!asset) return res.status(404).json({ error: "Asset not found" });
-      return res.json(asset);
-    } catch (err) {
-      options.logger.error("GET /assets/:id failed", err);
-      return res.status(500).json({ error: "Internal server error" });
-    }
-  });
-  router.get("/assets/:id/raw", async (req, res) => {
-    try {
-      const asset = await store.getAsset(req.params.id);
-      if (!asset) return res.status(404).json({ error: "Asset not found" });
-      res.setHeader("Content-Type", "text/markdown; charset=utf-8");
-      return res.send(asset.content);
-    } catch (err) {
-      options.logger.error("GET /assets/:id/raw failed", err);
-      return res.status(500).json({ error: "Internal server error" });
-    }
-  });
-  router.get("/assets/:id/download", async (req, res) => {
-    try {
-      const asset = await store.getAsset(req.params.id);
-      if (!asset) return res.status(404).json({ error: "Asset not found" });
-      const filename = `${asset.name.replace(/\s+/g, "-").toLowerCase()}`;
-      if (asset.type === "skill") {
-        res.setHeader("Content-Type", "application/zip");
-        res.setHeader(
-          "Content-Disposition",
-          `attachment; filename="${filename}.zip"`
-        );
-        const archive = archiver__default.default("zip");
-        archive.pipe(res);
-        archive.append(asset.content, { name: "SKILL.md" });
-        if (asset.resourcesContent) {
-          for (const [resourcePath, resourceContent] of Object.entries(asset.resourcesContent)) {
-            archive.append(resourceContent, { name: resourcePath });
-          }
-        }
-        await archive.finalize();
-      } else {
-        res.setHeader("Content-Type", "text/markdown; charset=utf-8");
-        res.setHeader(
-          "Content-Disposition",
-          `attachment; filename="${filename}.md"`
-        );
-        return res.send(asset.content);
+      const credentials = await httpAuth.credentials(req);
+      const { items: entities } = await catalog.getEntities(
+        { filter: { kind: "AiResource" } },
+        { credentials }
+      );
+      const items = entities.map(toResourceSummary.toResourceSummary).filter((s) => s !== void 0);
+      res.json({ items });
+    } catch (error) {
+      if (error.name === "AuthenticationError") {
+        res.status(401).json({ error: "Authentication required" });
+        return;
       }
-      return void 0;
-    } catch (err) {
-      options.logger.error("GET /assets/:id/download failed", err);
-      return res.status(500).json({ error: "Internal server error" });
+      options.logger.error(`Failed to list resources: ${error}`);
+      res.status(500).json({ error: "Failed to list resources" });
     }
   });
-  router.post("/assets/:id/track-install", async (req, res) => {
-    try {
-      const asset = await store.getAsset(req.params.id);
-      if (!asset) return res.status(404).json({ error: "Asset not found" });
-      await store.incrementInstallCount(req.params.id);
-      return res.status(204).send();
-    } catch (err) {
-      options.logger.error("POST /assets/:id/track-install failed", err);
-      return res.status(500).json({ error: "Internal server error" });
+  const safeFilename = (name) => name.replace(/[^\w.-]+/g, "_");
+  const sendBodyFile = (res, name, content, download) => {
+    res.setHeader("Content-Type", bodyResolver.contentTypeFor(name));
+    if (download) {
+      res.setHeader(
+        "Content-Disposition",
+        `attachment; filename="${safeFilename(name.split("/").pop() ?? name)}"`
+      );
     }
-  });
-  router.get("/providers", async (_req, res) => {
+    res.send(content);
+  };
+  const handleBodyRequest = async (req, res, filename) => {
     try {
-      const statuses = await store.getAllSyncStatuses();
-      const statusMap = new Map(statuses.map((s) => [s.providerId, s]));
-      const result = providers.map((p) => {
-        const status = statusMap.get(p.id);
-        return {
-          id: p.id,
-          type: p.type,
-          target: p.target,
-          branch: p.branch,
-          lastSync: status?.lastSync,
-          lastCommit: status?.lastCommit,
-          status: status?.status ?? "idle",
-          error: status?.error,
-          assetCount: status?.assetCount ?? 0
-        };
+      const credentials = await httpAuth.credentials(req);
+      const entity = await catalog.getEntityByRef(req.params.ref, {
+        credentials
       });
-      res.json(result);
-    } catch (err) {
-      options.logger.error("GET /providers failed", err);
-      res.status(500).json({ error: "Internal server error" });
-    }
-  });
-  router.get("/providers/:id/status", async (req, res) => {
-    try {
-      const provider = providers.find((p) => p.id === req.params.id);
-      if (!provider) return res.status(404).json({ error: "Provider not found" });
-      const status = await store.getSyncStatus(req.params.id);
-      return res.json(
-        status ?? {
-          providerId: req.params.id,
-          status: "idle",
-          assetCount: 0
+      if (!entity) {
+        res.status(404).json({ error: "Resource not found" });
+        return;
+      }
+      const sourceLocation = entity.metadata.annotations?.[bodyResolver.SOURCE_LOCATION_ANNOTATION];
+      const target = sourceLocation && bodyResolver.parseUrlTarget(sourceLocation);
+      if (!target) {
+        res.status(404).json({ error: "Resource has no content location" });
+        return;
+      }
+      let body;
+      try {
+        body = await bodyResolver.resolveBody(reader, target);
+      } catch (error) {
+        if (error.name === "NotFoundError") {
+          res.status(404).json({ error: "Resource content not found" });
+          return;
         }
-      );
-    } catch (err) {
-      options.logger.error("GET /providers/:id/status failed", err);
-      return res.status(500).json({ error: "Internal server error" });
-    }
-  });
-  router.post("/providers/:id/sync", async (req, res) => {
-    try {
-      const provider = providers.find((p) => p.id === req.params.id);
-      if (!provider) return res.status(404).json({ error: "Provider not found" });
-      setImmediate(() => syncService.syncProvider(provider));
-      return res.json({ message: "Sync triggered", providerId: provider.id });
-    } catch (err) {
-      options.logger.error("POST /providers/:id/sync failed", err);
-      return res.status(500).json({ error: "Internal server error" });
-    }
-  });
-  router.get("/stats", async (_req, res) => {
-    try {
-      const stats = await store.getStats();
-      res.json(stats);
-    } catch (err) {
-      options.logger.error("GET /stats failed", err);
-      res.status(500).json({ error: "Internal server error" });
-    }
-  });
-  router.post("/mcp", async (req, res) => {
-    try {
-      const sessionId = req.headers["mcp-session-id"];
-      if (sessionId) {
-        const transport2 = mcpSessions.get(sessionId);
-        if (!transport2) {
-          res.status(404).json({ error: "MCP session not found" });
+        options.logger.error(
+          `Body fetch failed for ${req.params.ref}: ${error}`
+        );
+        res.status(502).json({ error: "Failed to fetch resource content from source" });
+        return;
+      }
+      const download = req.query.download === "true";
+      if (filename !== void 0) {
+        const file = body.kind === "tree" ? body.files.find((f) => f.path === filename) : void 0;
+        if (!file) {
+          res.status(404).json({ error: "File not found in resource body" });
           return;
         }
-        await transport2.handleRequest(req, res, req.body);
+        sendBodyFile(res, filename, await file.content(), download);
+        return;
+      }
+      if (body.kind === "file") {
+        sendBodyFile(res, body.name, body.content, download);
         return;
       }
-      const toolFilter = req.query.tool ?? req.headers["x-ai-hub-tool"] ?? "";
-      const providerFilter = req.query.provider ?? req.headers["x-ai-hub-provider"] ?? "";
-      const proactiveEnabled = (req.query.proactive ?? req.headers["x-ai-hub-proactive"] ?? "false") === "true";
-      const newSessionId = crypto.randomUUID();
-      const transport = new streamableHttp_js.StreamableHTTPServerTransport({
-        sessionIdGenerator: () => newSessionId,
-        onsessioninitialized: (id) => {
-          mcpSessions.set(id, transport);
-          options.logger.debug(
-            `dev-ai-hub MCP: session ${id} opened (tool="${toolFilter || "all"}", provider="${providerFilter || "all"}", proactive=${proactiveEnabled})`
-          );
+      if (!download) {
+        if (!body.entryPath) {
+          res.status(404).json({ error: "Resource body has no entry file" });
+          return;
         }
+        const entry = body.files.find((f) => f.path === body.entryPath);
+        sendBodyFile(res, body.entryPath, await entry.content(), false);
+        return;
+      }
+      if (body.files.length === 1) {
+        sendBodyFile(
+          res,
+          body.files[0].path,
+          await body.files[0].content(),
+          true
+        );
+        return;
+      }
+      res.setHeader("Content-Type", "application/zip");
+      res.setHeader(
+        "Content-Disposition",
+        `attachment; filename="${safeFilename(entity.metadata.name)}.zip"`
+      );
+      const archive = archiver__default.default("zip");
+      archive.on("error", (error) => {
+        options.logger.error(
+          `Zip assembly failed for ${req.params.ref}: ${error}`
+        );
+        res.destroy(error);
       });
-      transport.onclose = () => {
-        mcpSessions.delete(newSessionId);
-        options.logger.debug(`dev-ai-hub MCP: session ${newSessionId} closed`);
-      };
-      const server = McpServerService.createMcpServer(store, toolFilter, providerFilter, providers, proactiveEnabled);
-      await server.connect(transport);
-      await transport.handleRequest(req, res, req.body);
-    } catch (err) {
-      options.logger.error("POST /mcp failed", err);
-      if (!res.headersSent) res.status(500).json({ error: "Internal server error" });
+      archive.pipe(res);
+      for (const file of body.files) {
+        archive.append(await file.content(), { name: file.path });
+      }
+      await archive.finalize();
+    } catch (error) {
+      if (error.name === "AuthenticationError") {
+        res.status(401).json({ error: "Authentication required" });
+        return;
+      }
+      options.logger.error(
+        `Body resolution failed for ${req.params.ref}: ${error}`
+      );
+      res.status(500).json({ error: "Failed to resolve resource body" });
     }
-  });
-  router.get("/mcp", async (req, res) => {
+  };
+  router.get("/entity/:ref/raw", (req, res) => handleBodyRequest(req, res));
+  router.get(
+    "/entity/:ref/raw/:filename",
+    (req, res) => handleBodyRequest(req, res, req.params.filename)
+  );
+  router.post("/telemetry", async (req, res) => {
     try {
-      const sessionId = req.headers["mcp-session-id"];
-      if (!sessionId) {
-        res.status(400).json({ error: "mcp-session-id header required" });
+      const parsed = pluginDevAiHubCommon.TelemetryEventInputSchema.safeParse(req.body);
+      if (!parsed.success) {
+        res.status(400).json({ error: parsed.error.message });
         return;
       }
-      const transport = mcpSessions.get(sessionId);
-      if (!transport) {
-        res.status(404).json({ error: "MCP session not found" });
+      const credentials = await httpAuth.credentials(req);
+      const entity = await catalog.getEntityByRef(parsed.data.ref, {
+        credentials
+      });
+      if (!entity) {
+        res.status(404).json({ error: "Resource not found" });
         return;
       }
-      await transport.handleRequest(req, res);
-    } catch (err) {
-      options.logger.error("GET /mcp failed", err);
-      if (!res.headersSent) res.status(500).json({ error: "Internal server error" });
+      await telemetryStore.record({
+        entityRef: parsed.data.ref,
+        action: parsed.data.action,
+        actorHash: telemetryHash.hashActor(credentials, telemetrySalt),
+        tool: parsed.data.tool
+      });
+      res.sendStatus(204);
+    } catch (error) {
+      if (error.name === "AuthenticationError") {
+        res.status(401).json({ error: "Authentication required" });
+        return;
+      }
+      options.logger.error(`POST /telemetry failed: ${error}`);
+      res.status(500).json({ error: "Failed to record telemetry event" });
     }
   });
-  router.delete("/mcp", async (req, res) => {
+  router.get("/telemetry/:ref", async (req, res) => {
     try {
-      const sessionId = req.headers["mcp-session-id"];
-      if (!sessionId) {
-        res.status(400).json({ error: "mcp-session-id header required" });
-        return;
-      }
-      const transport = mcpSessions.get(sessionId);
-      if (!transport) {
-        res.status(404).json({ error: "MCP session not found" });
+      await httpAuth.credentials(req);
+      const counts = await telemetryStore.getCounts(req.params.ref);
+      res.json(counts);
+    } catch (error) {
+      if (error.name === "AuthenticationError") {
+        res.status(401).json({ error: "Authentication required" });
         return;
       }
-      await transport.handleRequest(req, res);
-      mcpSessions.delete(sessionId);
-    } catch (err) {
-      options.logger.error("DELETE /mcp failed", err);
-      if (!res.headersSent) res.status(500).json({ error: "Internal server error" });
+      options.logger.error(`GET /telemetry/${req.params.ref} failed: ${error}`);
+      res.status(500).json({ error: "Failed to fetch telemetry counts" });
     }
   });
   return router;