@nospt/plugin-dev-ai-hub-backend 1.0.3 → 1.1.1

package/README.md

@@ -95,6 +95,16 @@ devAiHub:
     # its own database. Set it to keep the salt outside that database, or to
     # control rotation — a real secret, never committed, and stable once set.
     salt: ${DEV_AI_HUB_TELEMETRY_SALT}
+  frameworks:
+    # Optional allow-list. When set, any framework declared on an AiResource
+    # (via `spec.agents` or `devaihub.io/compatible-frameworks`) that is not
+    # listed here is dropped before the resource is served — no badge, no
+    # "Works with" entry, no filter option, no generated install path. Tokens
+    # are normalised (aliases such as `claude` → `claude-code` are resolved),
+    # and a resource declaring the `all` wildcard collapses to exactly this
+    # list. Omit the key to permit every framework; an explicit empty list
+    # permits none. Must be a list of strings.
+    allowed: [claude-code, github-copilot, cursor, google-gemini]
 ```
 
 ## Database

package/config.schema.json

@@ -15,6 +15,18 @@
             }
           },
           "description": "Install telemetry (ADR-0007). The write path is always active — there is no feature flag — so a salt is always in play; the only question is where it comes from."
+        },
+        "frameworks": {
+          "type": "object",
+          "properties": {
+            "allowed": {
+              "type": "array",
+              "items": {
+                "type": "string"
+              }
+            }
+          },
+          "description": "Framework allow-list. When set, any framework declared on an AiResource (via `spec.agents` or the `devaihub.io/compatible-frameworks` annotation) that is not in this list is dropped before the resource is served: no badge, no \"Works with\" entry, no filter option, no generated install path. Tokens are normalised (aliases such as `claude` → `claude-code` are resolved) before comparison, and a resource declaring the `all` wildcard collapses to exactly this list. Omit the key to permit every framework; an explicit empty list permits none. Must be a list of strings."
         }
       }
     }

package/dist/plugin.cjs.js

@@ -37,7 +37,10 @@ const devAiHubPlugin = backendPluginApi.createBackendPlugin({
           telemetrySalt,
           catalog,
           httpAuth,
-          reader: urlReader
+          reader: urlReader,
+          allowedFrameworks: config.getOptionalStringArray(
+            "devAiHub.frameworks.allowed"
+          )
         });
         httpRouter.use(router$1);
       }

package/dist/plugin.cjs.js.map

@@ -1 +1 @@
-{"version":3,"file":"plugin.cjs.js","sources":["../src/plugin.ts"],"sourcesContent":["import {\n  coreServices,\n  createBackendPlugin,\n} from '@backstage/backend-plugin-api';\nimport { catalogServiceRef } from '@backstage/plugin-catalog-node';\nimport { TelemetryStore } from './database/TelemetryStore';\nimport { createRouter } from './router';\n\nexport const devAiHubPlugin = createBackendPlugin({\n  pluginId: 'dev-ai-hub',\n  register(env) {\n    env.registerInit({\n      deps: {\n        config: coreServices.rootConfig,\n        logger: coreServices.logger,\n        database: coreServices.database,\n        httpRouter: coreServices.httpRouter,\n        urlReader: coreServices.urlReader,\n        httpAuth: coreServices.httpAuth,\n        catalog: catalogServiceRef,\n      },\n      async init({\n        config,\n        logger,\n        database,\n        httpRouter,\n        urlReader,\n        httpAuth,\n        catalog,\n      }) {\n        const telemetryStore = await TelemetryStore.create({ database });\n        // Optional on purpose (#56): unset means \"generate and persist one\",\n        // not \"fail\". Requiring it here took the whole backend down on any\n        // deployment that had not configured this plugin.\n        const telemetrySalt = await telemetryStore.resolveSalt(\n          config.getOptionalString('devAiHub.telemetry.salt'),\n        );\n\n        const router = createRouter({\n          logger,\n          telemetryStore,\n          telemetrySalt,\n          catalog,\n          httpAuth,\n          reader: urlReader,\n        });\n\n        httpRouter.use(router);\n      },\n    });\n  },\n});\n"],"names":["createBackendPlugin","coreServices","catalogServiceRef","TelemetryStore","router","createRouter"],"mappings":";;;;;;;AAQO,MAAM,iBAAiBA,oCAAA,CAAoB;AAAA,EAChD,QAAA,EAAU,YAAA;AAAA,EACV,SAAS,GAAA,EAAK;AACZ,IAAA,GAAA,CAAI,YAAA,CAAa;AAAA,MACf,IAAA,EAAM;AAAA,QACJ,QAAQC,6BAAA,CAAa,UAAA;AAAA,QACrB,QAAQA,6BAAA,CAAa,MAAA;AAAA,QACrB,UAAUA,6BAAA,CAAa,QAAA;AAAA,QACvB,YAAYA,6BAAA,CAAa,UAAA;AAAA,QACzB,WAAWA,6BAAA,CAAa,SAAA;AAAA,QACxB,UAAUA,6BAAA,CAAa,QAAA;AAAA,QACvB,OAAA,EAASC;AAAA,OACX;AAAA,MACA,MAAM,IAAA,CAAK;AAAA,QACT,MAAA;AAAA,QACA,MAAA;AAAA,QACA,QAAA;AAAA,QACA,UAAA;AAAA,QACA,SAAA;AAAA,QACA,QAAA;AAAA,QACA;AAAA,OACF,EAAG;AACD,QAAA,MAAM,iBAAiB,MAAMC,6BAAA,CAAe,MAAA,CAAO,EAAE,UAAU,CAAA;AAI/D,QAAA,MAAM,aAAA,GAAgB,MAAM,cAAA,CAAe,WAAA;AAAA,UACzC,MAAA,CAAO,kBAAkB,yBAAyB;AAAA,SACpD;AAEA,QAAA,MAAMC,WAASC,mBAAA,CAAa;AAAA,UAC1B,MAAA;AAAA,UACA,cAAA;AAAA,UACA,aAAA;AAAA,UACA,OAAA;AAAA,UACA,QAAA;AAAA,UACA,MAAA,EAAQ;AAAA,SACT,CAAA;AAED,QAAA,UAAA,CAAW,IAAID,QAAM,CAAA;AAAA,MACvB;AAAA,KACD,CAAA;AAAA,EACH;AACF,CAAC;;;;"}
+{"version":3,"file":"plugin.cjs.js","sources":["../src/plugin.ts"],"sourcesContent":["import {\n  coreServices,\n  createBackendPlugin,\n} from '@backstage/backend-plugin-api';\nimport { catalogServiceRef } from '@backstage/plugin-catalog-node';\nimport { TelemetryStore } from './database/TelemetryStore';\nimport { createRouter } from './router';\n\nexport const devAiHubPlugin = createBackendPlugin({\n  pluginId: 'dev-ai-hub',\n  register(env) {\n    env.registerInit({\n      deps: {\n        config: coreServices.rootConfig,\n        logger: coreServices.logger,\n        database: coreServices.database,\n        httpRouter: coreServices.httpRouter,\n        urlReader: coreServices.urlReader,\n        httpAuth: coreServices.httpAuth,\n        catalog: catalogServiceRef,\n      },\n      async init({\n        config,\n        logger,\n        database,\n        httpRouter,\n        urlReader,\n        httpAuth,\n        catalog,\n      }) {\n        const telemetryStore = await TelemetryStore.create({ database });\n        // Optional on purpose (#56): unset means \"generate and persist one\",\n        // not \"fail\". Requiring it here took the whole backend down on any\n        // deployment that had not configured this plugin.\n        const telemetrySalt = await telemetryStore.resolveSalt(\n          config.getOptionalString('devAiHub.telemetry.salt'),\n        );\n\n        const router = createRouter({\n          logger,\n          telemetryStore,\n          telemetrySalt,\n          catalog,\n          httpAuth,\n          reader: urlReader,\n          allowedFrameworks: config.getOptionalStringArray(\n            'devAiHub.frameworks.allowed',\n          ),\n        });\n\n        httpRouter.use(router);\n      },\n    });\n  },\n});\n"],"names":["createBackendPlugin","coreServices","catalogServiceRef","TelemetryStore","router","createRouter"],"mappings":";;;;;;;AAQO,MAAM,iBAAiBA,oCAAA,CAAoB;AAAA,EAChD,QAAA,EAAU,YAAA;AAAA,EACV,SAAS,GAAA,EAAK;AACZ,IAAA,GAAA,CAAI,YAAA,CAAa;AAAA,MACf,IAAA,EAAM;AAAA,QACJ,QAAQC,6BAAA,CAAa,UAAA;AAAA,QACrB,QAAQA,6BAAA,CAAa,MAAA;AAAA,QACrB,UAAUA,6BAAA,CAAa,QAAA;AAAA,QACvB,YAAYA,6BAAA,CAAa,UAAA;AAAA,QACzB,WAAWA,6BAAA,CAAa,SAAA;AAAA,QACxB,UAAUA,6BAAA,CAAa,QAAA;AAAA,QACvB,OAAA,EAASC;AAAA,OACX;AAAA,MACA,MAAM,IAAA,CAAK;AAAA,QACT,MAAA;AAAA,QACA,MAAA;AAAA,QACA,QAAA;AAAA,QACA,UAAA;AAAA,QACA,SAAA;AAAA,QACA,QAAA;AAAA,QACA;AAAA,OACF,EAAG;AACD,QAAA,MAAM,iBAAiB,MAAMC,6BAAA,CAAe,MAAA,CAAO,EAAE,UAAU,CAAA;AAI/D,QAAA,MAAM,aAAA,GAAgB,MAAM,cAAA,CAAe,WAAA;AAAA,UACzC,MAAA,CAAO,kBAAkB,yBAAyB;AAAA,SACpD;AAEA,QAAA,MAAMC,WAASC,mBAAA,CAAa;AAAA,UAC1B,MAAA;AAAA,UACA,cAAA;AAAA,UACA,aAAA;AAAA,UACA,OAAA;AAAA,UACA,QAAA;AAAA,UACA,MAAA,EAAQ,SAAA;AAAA,UACR,mBAAmB,MAAA,CAAO,sBAAA;AAAA,YACxB;AAAA;AACF,SACD,CAAA;AAED,QAAA,UAAA,CAAW,IAAID,QAAM,CAAA;AAAA,MACvB;AAAA,KACD,CAAA;AAAA,EACH;AACF,CAAC;;;;"}

package/dist/router.cjs.js

@@ -12,7 +12,14 @@ var express__default = /*#__PURE__*/_interopDefaultCompat(express);
 var archiver__default = /*#__PURE__*/_interopDefaultCompat(archiver);
 
 function createRouter(options) {
-  const { telemetryStore, telemetrySalt, catalog, httpAuth, reader } = options;
+  const {
+    telemetryStore,
+    telemetrySalt,
+    catalog,
+    httpAuth,
+    reader,
+    allowedFrameworks
+  } = options;
   const router = express__default.default.Router();
   router.use(express__default.default.json());
   router.get("/resources", async (req, res) => {
@@ -22,7 +29,7 @@ function createRouter(options) {
         { filter: { kind: "AiResource" } },
         { credentials }
       );
-      const items = pluginDevAiHubCommon.toResourceSummaries(entities);
+      const items = pluginDevAiHubCommon.toResourceSummaries(entities, { allowedFrameworks });
       res.json({ items });
     } catch (error) {
       if (error.name === "AuthenticationError") {

package/dist/router.cjs.js.map

@@ -1 +1 @@
-{"version":3,"file":"router.cjs.js","sources":["../src/router.ts"],"sourcesContent":["import express from 'express';\nimport archiver from 'archiver';\nimport type {\n  HttpAuthService,\n  LoggerService,\n  UrlReaderService,\n} from '@backstage/backend-plugin-api';\nimport type { CatalogService } from '@backstage/plugin-catalog-node';\nimport type { TelemetryStore } from './database/TelemetryStore';\nimport {\n  TelemetryEventInputSchema,\n  toResourceSummaries,\n} from '@nospt/plugin-dev-ai-hub-common';\nimport { hashActor } from './service/telemetryHash';\nimport {\n  SOURCE_LOCATION_ANNOTATION,\n  contentTypeFor,\n  parseUrlTarget,\n  resolveBody,\n} from './service/bodyResolver';\n\ninterface RouterOptions {\n  logger: LoggerService;\n  telemetryStore: TelemetryStore;\n  telemetrySalt: string;\n  catalog: CatalogService;\n  httpAuth: HttpAuthService;\n  reader: UrlReaderService;\n}\n\nexport function createRouter(options: RouterOptions): express.Router {\n  const { telemetryStore, telemetrySalt, catalog, httpAuth, reader } = options;\n  const router = express.Router();\n\n  router.use(express.json());\n\n  // ── Resources (v2 — catalog-backed, ADR-0001) ─────────────────────────────\n\n  router.get('/resources', async (req, res) => {\n    try {\n      const credentials = await httpAuth.credentials(req);\n      const { items: entities } = await catalog.getEntities(\n        { filter: { kind: 'AiResource' } },\n        { credentials },\n      );\n      const items = toResourceSummaries(entities);\n      res.json({ items });\n    } catch (error) {\n      if ((error as Error).name === 'AuthenticationError') {\n        res.status(401).json({ error: 'Authentication required' });\n        return;\n      }\n      options.logger.error(`Failed to list resources: ${error}`);\n      res.status(500).json({ error: 'Failed to list resources' });\n    }\n  });\n\n  // ── Body resolver (v2 — ADR-0002/0006/0009) ───────────────────────────────\n\n  const safeFilename = (name: string) => name.replace(/[^\\w.-]+/g, '_');\n\n  const sendBodyFile = (\n    res: express.Response,\n    name: string,\n    content: Buffer,\n    download: boolean,\n  ) => {\n    res.setHeader('Content-Type', contentTypeFor(name));\n    if (download) {\n      res.setHeader(\n        'Content-Disposition',\n        `attachment; filename=\"${safeFilename(name.split('/').pop() ?? name)}\"`,\n      );\n    }\n    res.send(content);\n  };\n\n  const handleBodyRequest = async (\n    req: express.Request,\n    res: express.Response,\n    filename?: string,\n  ) => {\n    try {\n      // Re-fetch as the caller: catalog visibility is the only gate (ADR-0006).\n      const credentials = await httpAuth.credentials(req);\n      const entity = await catalog.getEntityByRef(req.params.ref, {\n        credentials,\n      });\n      if (!entity) {\n        res.status(404).json({ error: 'Resource not found' });\n        return;\n      }\n\n      const sourceLocation =\n        entity.metadata.annotations?.[SOURCE_LOCATION_ANNOTATION];\n      const target = sourceLocation && parseUrlTarget(sourceLocation);\n      if (!target) {\n        res.status(404).json({ error: 'Resource has no content location' });\n        return;\n      }\n\n      let body;\n      try {\n        body = await resolveBody(reader, target);\n      } catch (error) {\n        if ((error as Error).name === 'NotFoundError') {\n          res.status(404).json({ error: 'Resource content not found' });\n          return;\n        }\n        options.logger.error(\n          `Body fetch failed for ${req.params.ref}: ${error}`,\n        );\n        res\n          .status(502)\n          .json({ error: 'Failed to fetch resource content from source' });\n        return;\n      }\n\n      const download = req.query.download === 'true';\n\n      if (filename !== undefined) {\n        const file =\n          body.kind === 'tree'\n            ? body.files.find(f => f.path === filename)\n            : undefined;\n        if (!file) {\n          res.status(404).json({ error: 'File not found in resource body' });\n          return;\n        }\n        sendBodyFile(res, filename, await file.content(), download);\n        return;\n      }\n\n      if (body.kind === 'file') {\n        sendBodyFile(res, body.name, body.content, download);\n        return;\n      }\n\n      if (!download) {\n        if (!body.entryPath) {\n          res.status(404).json({ error: 'Resource body has no entry file' });\n          return;\n        }\n        const entry = body.files.find(f => f.path === body.entryPath)!;\n        sendBodyFile(res, body.entryPath, await entry.content(), false);\n        return;\n      }\n\n      // Multi-file artifact: one zip (ADR-0009 — interim, not the golden road).\n      if (body.files.length === 1) {\n        sendBodyFile(\n          res,\n          body.files[0].path,\n          await body.files[0].content(),\n          true,\n        );\n        return;\n      }\n      res.setHeader('Content-Type', 'application/zip');\n      res.setHeader(\n        'Content-Disposition',\n        `attachment; filename=\"${safeFilename(entity.metadata.name)}.zip\"`,\n      );\n      const archive = archiver('zip');\n      archive.on('error', error => {\n        options.logger.error(\n          `Zip assembly failed for ${req.params.ref}: ${error}`,\n        );\n        res.destroy(error);\n      });\n      archive.pipe(res);\n      for (const file of body.files) {\n        archive.append(await file.content(), { name: file.path });\n      }\n      await archive.finalize();\n    } catch (error) {\n      if ((error as Error).name === 'AuthenticationError') {\n        res.status(401).json({ error: 'Authentication required' });\n        return;\n      }\n      options.logger.error(\n        `Body resolution failed for ${req.params.ref}: ${error}`,\n      );\n      res.status(500).json({ error: 'Failed to resolve resource body' });\n    }\n  };\n\n  router.get('/entity/:ref/raw', (req, res) => handleBodyRequest(req, res));\n  router.get('/entity/:ref/raw/:filename', (req, res) =>\n    handleBodyRequest(req, res, req.params.filename),\n  );\n\n  // ── Telemetry (v2 — ADR-0007) ──────────────────────────────────────────────\n\n  router.post('/telemetry', async (req, res) => {\n    try {\n      const parsed = TelemetryEventInputSchema.safeParse(req.body);\n      if (!parsed.success) {\n        res.status(400).json({ error: parsed.error.message });\n        return;\n      }\n\n      const credentials = await httpAuth.credentials(req);\n      const entity = await catalog.getEntityByRef(parsed.data.ref, {\n        credentials,\n      });\n      if (!entity) {\n        res.status(404).json({ error: 'Resource not found' });\n        return;\n      }\n\n      await telemetryStore.record({\n        entityRef: parsed.data.ref,\n        action: parsed.data.action,\n        actorHash: hashActor(credentials, telemetrySalt),\n        tool: parsed.data.tool,\n      });\n      res.sendStatus(204);\n    } catch (error) {\n      if ((error as Error).name === 'AuthenticationError') {\n        res.status(401).json({ error: 'Authentication required' });\n        return;\n      }\n      options.logger.error(`POST /telemetry failed: ${error}`);\n      res.status(500).json({ error: 'Failed to record telemetry event' });\n    }\n  });\n\n  router.get('/telemetry/:ref', async (req, res) => {\n    try {\n      await httpAuth.credentials(req);\n      const counts = await telemetryStore.getCounts(req.params.ref);\n      res.json(counts);\n    } catch (error) {\n      if ((error as Error).name === 'AuthenticationError') {\n        res.status(401).json({ error: 'Authentication required' });\n        return;\n      }\n      options.logger.error(`GET /telemetry/${req.params.ref} failed: ${error}`);\n      res.status(500).json({ error: 'Failed to fetch telemetry counts' });\n    }\n  });\n\n  return router;\n}\n"],"names":["express","toResourceSummaries","contentTypeFor","SOURCE_LOCATION_ANNOTATION","parseUrlTarget","resolveBody","archiver","TelemetryEventInputSchema","hashActor"],"mappings":";;;;;;;;;;;;;AA8BO,SAAS,aAAa,OAAA,EAAwC;AACnE,EAAA,MAAM,EAAE,cAAA,EAAgB,aAAA,EAAe,OAAA,EAAS,QAAA,EAAU,QAAO,GAAI,OAAA;AACrE,EAAA,MAAM,MAAA,GAASA,yBAAQ,MAAA,EAAO;AAE9B,EAAA,MAAA,CAAO,GAAA,CAAIA,wBAAA,CAAQ,IAAA,EAAM,CAAA;AAIzB,EAAA,MAAA,CAAO,GAAA,CAAI,YAAA,EAAc,OAAO,GAAA,EAAK,GAAA,KAAQ;AAC3C,IAAA,IAAI;AACF,MAAA,MAAM,WAAA,GAAc,MAAM,QAAA,CAAS,WAAA,CAAY,GAAG,CAAA;AAClD,MAAA,MAAM,EAAE,KAAA,EAAO,QAAA,EAAS,GAAI,MAAM,OAAA,CAAQ,WAAA;AAAA,QACxC,EAAE,MAAA,EAAQ,EAAE,IAAA,EAAM,cAAa,EAAE;AAAA,QACjC,EAAE,WAAA;AAAY,OAChB;AACA,MAAA,MAAM,KAAA,GAAQC,yCAAoB,QAAQ,CAAA;AAC1C,MAAA,GAAA,CAAI,IAAA,CAAK,EAAE,KAAA,EAAO,CAAA;AAAA,IACpB,SAAS,KAAA,EAAO;AACd,MAAA,IAAK,KAAA,CAAgB,SAAS,qBAAA,EAAuB;AACnD,QAAA,GAAA,CAAI,OAAO,GAAG,CAAA,CAAE,KAAK,EAAE,KAAA,EAAO,2BAA2B,CAAA;AACzD,QAAA;AAAA,MACF;AACA,MAAA,OAAA,CAAQ,MAAA,CAAO,KAAA,CAAM,CAAA,0BAAA,EAA6B,KAAK,CAAA,CAAE,CAAA;AACzD,MAAA,GAAA,CAAI,OAAO,GAAG,CAAA,CAAE,KAAK,EAAE,KAAA,EAAO,4BAA4B,CAAA;AAAA,IAC5D;AAAA,EACF,CAAC,CAAA;AAID,EAAA,MAAM,eAAe,CAAC,IAAA,KAAiB,IAAA,CAAK,OAAA,CAAQ,aAAa,GAAG,CAAA;AAEpE,EAAA,MAAM,YAAA,GAAe,CACnB,GAAA,EACA,IAAA,EACA,SACA,QAAA,KACG;AACH,IAAA,GAAA,CAAI,SAAA,CAAU,cAAA,EAAgBC,2BAAA,CAAe,IAAI,CAAC,CAAA;AAClD,IAAA,IAAI,QAAA,EAAU;AACZ,MAAA,GAAA,CAAI,SAAA;AAAA,QACF,qBAAA;AAAA,QACA,CAAA,sBAAA,EAAyB,aAAa,IAAA,CAAK,KAAA,CAAM,GAAG,CAAA,CAAE,GAAA,EAAI,IAAK,IAAI,CAAC,CAAA,CAAA;AAAA,OACtE;AAAA,IACF;AACA,IAAA,GAAA,CAAI,KAAK,OAAO,CAAA;AAAA,EAClB,CAAA;AAEA,EAAA,MAAM,iBAAA,GAAoB,OACxB,GAAA,EACA,GAAA,EACA,QAAA,KACG;AACH,IAAA,IAAI;AAEF,MAAA,MAAM,WAAA,GAAc,MAAM,QAAA,CAAS,WAAA,CAAY,GAAG,CAAA;AAClD,MAAA,MAAM,SAAS,MAAM,OAAA,CAAQ,cAAA,CAAe,GAAA,CAAI,OAAO,GAAA,EAAK;AAAA,QAC1D;AAAA,OACD,CAAA;AACD,MAAA,IAAI,CAAC,MAAA,EAAQ;AACX,QAAA,GAAA,CAAI,OAAO,GAAG,CAAA,CAAE,KAAK,EAAE,KAAA,EAAO,sBAAsB,CAAA;AACpD,QAAA;AAAA,MACF;AAEA,MAAA,MAAM,cAAA,GACJ,MAAA,CAAO,QAAA,CAAS,WAAA,GAAcC,uCAA0B,CAAA;AAC1D,MAAA,MAAM,MAAA,GAAS,cAAA,IAAkBC,2BAAA,CAAe,cAAc,CAAA;AAC9D,MAAA,IAAI,CAAC,MAAA,EAAQ;AACX,QAAA,GAAA,CAAI,OAAO,GAAG,CAAA,CAAE,KAAK,EAAE,KAAA,EAAO,oCAAoC,CAAA;AAClE,QAAA;AAAA,MACF;AAEA,MAAA,IAAI,IAAA;AACJ,MAAA,IAAI;AACF,QAAA,IAAA,GAAO,MAAMC,wBAAA,CAAY,MAAA,EAAQ,MAAM,CAAA;AAAA,MACzC,SAAS,KAAA,EAAO;AACd,QAAA,IAAK,KAAA,CAAgB,SAAS,eAAA,EAAiB;AAC7C,UAAA,GAAA,CAAI,OAAO,GAAG,CAAA,CAAE,KAAK,EAAE,KAAA,EAAO,8BAA8B,CAAA;AAC5D,UAAA;AAAA,QACF;AACA,QAAA,OAAA,CAAQ,MAAA,CAAO,KAAA;AAAA,UACb,CAAA,sBAAA,EAAyB,GAAA,CAAI,MAAA,CAAO,GAAG,KAAK,KAAK,CAAA;AAAA,SACnD;AACA,QAAA,GAAA,CACG,OAAO,GAAG,CAAA,CACV,KAAK,EAAE,KAAA,EAAO,gDAAgD,CAAA;AACjE,QAAA;AAAA,MACF;AAEA,MAAA,MAAM,QAAA,GAAW,GAAA,CAAI,KAAA,CAAM,QAAA,KAAa,MAAA;AAExC,MAAA,IAAI,aAAa,KAAA,CAAA,EAAW;AAC1B,QAAA,MAAM,IAAA,GACJ,IAAA,CAAK,IAAA,KAAS,MAAA,GACV,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,CAAA,CAAA,KAAK,CAAA,CAAE,IAAA,KAAS,QAAQ,CAAA,GACxC,KAAA,CAAA;AACN,QAAA,IAAI,CAAC,IAAA,EAAM;AACT,UAAA,GAAA,CAAI,OAAO,GAAG,CAAA,CAAE,KAAK,EAAE,KAAA,EAAO,mCAAmC,CAAA;AACjE,UAAA;AAAA,QACF;AACA,QAAA,YAAA,CAAa,KAAK,QAAA,EAAU,MAAM,IAAA,CAAK,OAAA,IAAW,QAAQ,CAAA;AAC1D,QAAA;AAAA,MACF;AAEA,MAAA,IAAI,IAAA,CAAK,SAAS,MAAA,EAAQ;AACxB,QAAA,YAAA,CAAa,GAAA,EAAK,IAAA,CAAK,IAAA,EAAM,IAAA,CAAK,SAAS,QAAQ,CAAA;AACnD,QAAA;AAAA,MACF;AAEA,MAAA,IAAI,CAAC,QAAA,EAAU;AACb,QAAA,IAAI,CAAC,KAAK,SAAA,EAAW;AACnB,UAAA,GAAA,CAAI,OAAO,GAAG,CAAA,CAAE,KAAK,EAAE,KAAA,EAAO,mCAAmC,CAAA;AACjE,UAAA;AAAA,QACF;AACA,QAAA,MAAM,KAAA,GAAQ,KAAK,KAAA,CAAM,IAAA,CAAK,OAAK,CAAA,CAAE,IAAA,KAAS,KAAK,SAAS,CAAA;AAC5D,QAAA,YAAA,CAAa,KAAK,IAAA,CAAK,SAAA,EAAW,MAAM,KAAA,CAAM,OAAA,IAAW,KAAK,CAAA;AAC9D,QAAA;AAAA,MACF;AAGA,MAAA,IAAI,IAAA,CAAK,KAAA,CAAM,MAAA,KAAW,CAAA,EAAG;AAC3B,QAAA,YAAA;AAAA,UACE,GAAA;AAAA,UACA,IAAA,CAAK,KAAA,CAAM,CAAC,CAAA,CAAE,IAAA;AAAA,UACd,MAAM,IAAA,CAAK,KAAA,CAAM,CAAC,EAAE,OAAA,EAAQ;AAAA,UAC5B;AAAA,SACF;AACA,QAAA;AAAA,MACF;AACA,MAAA,GAAA,CAAI,SAAA,CAAU,gBAAgB,iBAAiB,CAAA;AAC/C,MAAA,GAAA,CAAI,SAAA;AAAA,QACF,qBAAA;AAAA,QACA,CAAA,sBAAA,EAAyB,YAAA,CAAa,MAAA,CAAO,QAAA,CAAS,IAAI,CAAC,CAAA,KAAA;AAAA,OAC7D;AACA,MAAA,MAAM,OAAA,GAAUC,0BAAS,KAAK,CAAA;AAC9B,MAAA,OAAA,CAAQ,EAAA,CAAG,SAAS,CAAA,KAAA,KAAS;AAC3B,QAAA,OAAA,CAAQ,MAAA,CAAO,KAAA;AAAA,UACb,CAAA,wBAAA,EAA2B,GAAA,CAAI,MAAA,CAAO,GAAG,KAAK,KAAK,CAAA;AAAA,SACrD;AACA,QAAA,GAAA,CAAI,QAAQ,KAAK,CAAA;AAAA,MACnB,CAAC,CAAA;AACD,MAAA,OAAA,CAAQ,KAAK,GAAG,CAAA;AAChB,MAAA,KAAA,MAAW,IAAA,IAAQ,KAAK,KAAA,EAAO;AAC7B,QAAA,OAAA,CAAQ,MAAA,CAAO,MAAM,IAAA,CAAK,OAAA,IAAW,EAAE,IAAA,EAAM,IAAA,CAAK,IAAA,EAAM,CAAA;AAAA,MAC1D;AACA,MAAA,MAAM,QAAQ,QAAA,EAAS;AAAA,IACzB,SAAS,KAAA,EAAO;AACd,MAAA,IAAK,KAAA,CAAgB,SAAS,qBAAA,EAAuB;AACnD,QAAA,GAAA,CAAI,OAAO,GAAG,CAAA,CAAE,KAAK,EAAE,KAAA,EAAO,2BAA2B,CAAA;AACzD,QAAA;AAAA,MACF;AACA,MAAA,OAAA,CAAQ,MAAA,CAAO,KAAA;AAAA,QACb,CAAA,2BAAA,EAA8B,GAAA,CAAI,MAAA,CAAO,GAAG,KAAK,KAAK,CAAA;AAAA,OACxD;AACA,MAAA,GAAA,CAAI,OAAO,GAAG,CAAA,CAAE,KAAK,EAAE,KAAA,EAAO,mCAAmC,CAAA;AAAA,IACnE;AAAA,EACF,CAAA;AAEA,EAAA,MAAA,CAAO,GAAA,CAAI,oBAAoB,CAAC,GAAA,EAAK,QAAQ,iBAAA,CAAkB,GAAA,EAAK,GAAG,CAAC,CAAA;AACxE,EAAA,MAAA,CAAO,GAAA;AAAA,IAAI,4BAAA;AAAA,IAA8B,CAAC,KAAK,GAAA,KAC7C,iBAAA,CAAkB,KAAK,GAAA,EAAK,GAAA,CAAI,OAAO,QAAQ;AAAA,GACjD;AAIA,EAAA,MAAA,CAAO,IAAA,CAAK,YAAA,EAAc,OAAO,GAAA,EAAK,GAAA,KAAQ;AAC5C,IAAA,IAAI;AACF,MAAA,MAAM,MAAA,GAASC,8CAAA,CAA0B,SAAA,CAAU,GAAA,CAAI,IAAI,CAAA;AAC3D,MAAA,IAAI,CAAC,OAAO,OAAA,EAAS;AACnB,QAAA,GAAA,CAAI,MAAA,CAAO,GAAG,CAAA,CAAE,IAAA,CAAK,EAAE,KAAA,EAAO,MAAA,CAAO,KAAA,CAAM,OAAA,EAAS,CAAA;AACpD,QAAA;AAAA,MACF;AAEA,MAAA,MAAM,WAAA,GAAc,MAAM,QAAA,CAAS,WAAA,CAAY,GAAG,CAAA;AAClD,MAAA,MAAM,SAAS,MAAM,OAAA,CAAQ,cAAA,CAAe,MAAA,CAAO,KAAK,GAAA,EAAK;AAAA,QAC3D;AAAA,OACD,CAAA;AACD,MAAA,IAAI,CAAC,MAAA,EAAQ;AACX,QAAA,GAAA,CAAI,OAAO,GAAG,CAAA,CAAE,KAAK,EAAE,KAAA,EAAO,sBAAsB,CAAA;AACpD,QAAA;AAAA,MACF;AAEA,MAAA,MAAM,eAAe,MAAA,CAAO;AAAA,QAC1B,SAAA,EAAW,OAAO,IAAA,CAAK,GAAA;AAAA,QACvB,MAAA,EAAQ,OAAO,IAAA,CAAK,MAAA;AAAA,QACpB,SAAA,EAAWC,uBAAA,CAAU,WAAA,EAAa,aAAa,CAAA;AAAA,QAC/C,IAAA,EAAM,OAAO,IAAA,CAAK;AAAA,OACnB,CAAA;AACD,MAAA,GAAA,CAAI,WAAW,GAAG,CAAA;AAAA,IACpB,SAAS,KAAA,EAAO;AACd,MAAA,IAAK,KAAA,CAAgB,SAAS,qBAAA,EAAuB;AACnD,QAAA,GAAA,CAAI,OAAO,GAAG,CAAA,CAAE,KAAK,EAAE,KAAA,EAAO,2BAA2B,CAAA;AACzD,QAAA;AAAA,MACF;AACA,MAAA,OAAA,CAAQ,MAAA,CAAO,KAAA,CAAM,CAAA,wBAAA,EAA2B,KAAK,CAAA,CAAE,CAAA;AACvD,MAAA,GAAA,CAAI,OAAO,GAAG,CAAA,CAAE,KAAK,EAAE,KAAA,EAAO,oCAAoC,CAAA;AAAA,IACpE;AAAA,EACF,CAAC,CAAA;AAED,EAAA,MAAA,CAAO,GAAA,CAAI,iBAAA,EAAmB,OAAO,GAAA,EAAK,GAAA,KAAQ;AAChD,IAAA,IAAI;AACF,MAAA,MAAM,QAAA,CAAS,YAAY,GAAG,CAAA;AAC9B,MAAA,MAAM,SAAS,MAAM,cAAA,CAAe,SAAA,CAAU,GAAA,CAAI,OAAO,GAAG,CAAA;AAC5D,MAAA,GAAA,CAAI,KAAK,MAAM,CAAA;AAAA,IACjB,SAAS,KAAA,EAAO;AACd,MAAA,IAAK,KAAA,CAAgB,SAAS,qBAAA,EAAuB;AACnD,QAAA,GAAA,CAAI,OAAO,GAAG,CAAA,CAAE,KAAK,EAAE,KAAA,EAAO,2BAA2B,CAAA;AACzD,QAAA;AAAA,MACF;AACA,MAAA,OAAA,CAAQ,MAAA,CAAO,MAAM,CAAA,eAAA,EAAkB,GAAA,CAAI,OAAO,GAAG,CAAA,SAAA,EAAY,KAAK,CAAA,CAAE,CAAA;AACxE,MAAA,GAAA,CAAI,OAAO,GAAG,CAAA,CAAE,KAAK,EAAE,KAAA,EAAO,oCAAoC,CAAA;AAAA,IACpE;AAAA,EACF,CAAC,CAAA;AAED,EAAA,OAAO,MAAA;AACT;;;;"}
+{"version":3,"file":"router.cjs.js","sources":["../src/router.ts"],"sourcesContent":["import express from 'express';\nimport archiver from 'archiver';\nimport type {\n  HttpAuthService,\n  LoggerService,\n  UrlReaderService,\n} from '@backstage/backend-plugin-api';\nimport type { CatalogService } from '@backstage/plugin-catalog-node';\nimport type { TelemetryStore } from './database/TelemetryStore';\nimport {\n  TelemetryEventInputSchema,\n  toResourceSummaries,\n} from '@nospt/plugin-dev-ai-hub-common';\nimport { hashActor } from './service/telemetryHash';\nimport {\n  SOURCE_LOCATION_ANNOTATION,\n  contentTypeFor,\n  parseUrlTarget,\n  resolveBody,\n} from './service/bodyResolver';\n\ninterface RouterOptions {\n  logger: LoggerService;\n  telemetryStore: TelemetryStore;\n  telemetrySalt: string;\n  catalog: CatalogService;\n  httpAuth: HttpAuthService;\n  reader: UrlReaderService;\n  /**\n   * `devAiHub.frameworks.allowed`. Omitted (`undefined`) permits every\n   * framework; an explicit empty list permits none. Passed straight through to\n   * `toResourceSummaries` — do not normalise `[]` to `undefined`.\n   */\n  allowedFrameworks?: string[];\n}\n\nexport function createRouter(options: RouterOptions): express.Router {\n  const {\n    telemetryStore,\n    telemetrySalt,\n    catalog,\n    httpAuth,\n    reader,\n    allowedFrameworks,\n  } = options;\n  const router = express.Router();\n\n  router.use(express.json());\n\n  // ── Resources (v2 — catalog-backed, ADR-0001) ─────────────────────────────\n\n  router.get('/resources', async (req, res) => {\n    try {\n      const credentials = await httpAuth.credentials(req);\n      const { items: entities } = await catalog.getEntities(\n        { filter: { kind: 'AiResource' } },\n        { credentials },\n      );\n      const items = toResourceSummaries(entities, { allowedFrameworks });\n      res.json({ items });\n    } catch (error) {\n      if ((error as Error).name === 'AuthenticationError') {\n        res.status(401).json({ error: 'Authentication required' });\n        return;\n      }\n      options.logger.error(`Failed to list resources: ${error}`);\n      res.status(500).json({ error: 'Failed to list resources' });\n    }\n  });\n\n  // ── Body resolver (v2 — ADR-0002/0006/0009) ───────────────────────────────\n\n  const safeFilename = (name: string) => name.replace(/[^\\w.-]+/g, '_');\n\n  const sendBodyFile = (\n    res: express.Response,\n    name: string,\n    content: Buffer,\n    download: boolean,\n  ) => {\n    res.setHeader('Content-Type', contentTypeFor(name));\n    if (download) {\n      res.setHeader(\n        'Content-Disposition',\n        `attachment; filename=\"${safeFilename(name.split('/').pop() ?? name)}\"`,\n      );\n    }\n    res.send(content);\n  };\n\n  const handleBodyRequest = async (\n    req: express.Request,\n    res: express.Response,\n    filename?: string,\n  ) => {\n    try {\n      // Re-fetch as the caller: catalog visibility is the only gate (ADR-0006).\n      const credentials = await httpAuth.credentials(req);\n      const entity = await catalog.getEntityByRef(req.params.ref, {\n        credentials,\n      });\n      if (!entity) {\n        res.status(404).json({ error: 'Resource not found' });\n        return;\n      }\n\n      const sourceLocation =\n        entity.metadata.annotations?.[SOURCE_LOCATION_ANNOTATION];\n      const target = sourceLocation && parseUrlTarget(sourceLocation);\n      if (!target) {\n        res.status(404).json({ error: 'Resource has no content location' });\n        return;\n      }\n\n      let body;\n      try {\n        body = await resolveBody(reader, target);\n      } catch (error) {\n        if ((error as Error).name === 'NotFoundError') {\n          res.status(404).json({ error: 'Resource content not found' });\n          return;\n        }\n        options.logger.error(\n          `Body fetch failed for ${req.params.ref}: ${error}`,\n        );\n        res\n          .status(502)\n          .json({ error: 'Failed to fetch resource content from source' });\n        return;\n      }\n\n      const download = req.query.download === 'true';\n\n      if (filename !== undefined) {\n        const file =\n          body.kind === 'tree'\n            ? body.files.find(f => f.path === filename)\n            : undefined;\n        if (!file) {\n          res.status(404).json({ error: 'File not found in resource body' });\n          return;\n        }\n        sendBodyFile(res, filename, await file.content(), download);\n        return;\n      }\n\n      if (body.kind === 'file') {\n        sendBodyFile(res, body.name, body.content, download);\n        return;\n      }\n\n      if (!download) {\n        if (!body.entryPath) {\n          res.status(404).json({ error: 'Resource body has no entry file' });\n          return;\n        }\n        const entry = body.files.find(f => f.path === body.entryPath)!;\n        sendBodyFile(res, body.entryPath, await entry.content(), false);\n        return;\n      }\n\n      // Multi-file artifact: one zip (ADR-0009 — interim, not the golden road).\n      if (body.files.length === 1) {\n        sendBodyFile(\n          res,\n          body.files[0].path,\n          await body.files[0].content(),\n          true,\n        );\n        return;\n      }\n      res.setHeader('Content-Type', 'application/zip');\n      res.setHeader(\n        'Content-Disposition',\n        `attachment; filename=\"${safeFilename(entity.metadata.name)}.zip\"`,\n      );\n      const archive = archiver('zip');\n      archive.on('error', error => {\n        options.logger.error(\n          `Zip assembly failed for ${req.params.ref}: ${error}`,\n        );\n        res.destroy(error);\n      });\n      archive.pipe(res);\n      for (const file of body.files) {\n        archive.append(await file.content(), { name: file.path });\n      }\n      await archive.finalize();\n    } catch (error) {\n      if ((error as Error).name === 'AuthenticationError') {\n        res.status(401).json({ error: 'Authentication required' });\n        return;\n      }\n      options.logger.error(\n        `Body resolution failed for ${req.params.ref}: ${error}`,\n      );\n      res.status(500).json({ error: 'Failed to resolve resource body' });\n    }\n  };\n\n  router.get('/entity/:ref/raw', (req, res) => handleBodyRequest(req, res));\n  router.get('/entity/:ref/raw/:filename', (req, res) =>\n    handleBodyRequest(req, res, req.params.filename),\n  );\n\n  // ── Telemetry (v2 — ADR-0007) ──────────────────────────────────────────────\n\n  router.post('/telemetry', async (req, res) => {\n    try {\n      const parsed = TelemetryEventInputSchema.safeParse(req.body);\n      if (!parsed.success) {\n        res.status(400).json({ error: parsed.error.message });\n        return;\n      }\n\n      const credentials = await httpAuth.credentials(req);\n      const entity = await catalog.getEntityByRef(parsed.data.ref, {\n        credentials,\n      });\n      if (!entity) {\n        res.status(404).json({ error: 'Resource not found' });\n        return;\n      }\n\n      await telemetryStore.record({\n        entityRef: parsed.data.ref,\n        action: parsed.data.action,\n        actorHash: hashActor(credentials, telemetrySalt),\n        tool: parsed.data.tool,\n      });\n      res.sendStatus(204);\n    } catch (error) {\n      if ((error as Error).name === 'AuthenticationError') {\n        res.status(401).json({ error: 'Authentication required' });\n        return;\n      }\n      options.logger.error(`POST /telemetry failed: ${error}`);\n      res.status(500).json({ error: 'Failed to record telemetry event' });\n    }\n  });\n\n  router.get('/telemetry/:ref', async (req, res) => {\n    try {\n      await httpAuth.credentials(req);\n      const counts = await telemetryStore.getCounts(req.params.ref);\n      res.json(counts);\n    } catch (error) {\n      if ((error as Error).name === 'AuthenticationError') {\n        res.status(401).json({ error: 'Authentication required' });\n        return;\n      }\n      options.logger.error(`GET /telemetry/${req.params.ref} failed: ${error}`);\n      res.status(500).json({ error: 'Failed to fetch telemetry counts' });\n    }\n  });\n\n  return router;\n}\n"],"names":["express","toResourceSummaries","contentTypeFor","SOURCE_LOCATION_ANNOTATION","parseUrlTarget","resolveBody","archiver","TelemetryEventInputSchema","hashActor"],"mappings":";;;;;;;;;;;;;AAoCO,SAAS,aAAa,OAAA,EAAwC;AACnE,EAAA,MAAM;AAAA,IACJ,cAAA;AAAA,IACA,aAAA;AAAA,IACA,OAAA;AAAA,IACA,QAAA;AAAA,IACA,MAAA;AAAA,IACA;AAAA,GACF,GAAI,OAAA;AACJ,EAAA,MAAM,MAAA,GAASA,yBAAQ,MAAA,EAAO;AAE9B,EAAA,MAAA,CAAO,GAAA,CAAIA,wBAAA,CAAQ,IAAA,EAAM,CAAA;AAIzB,EAAA,MAAA,CAAO,GAAA,CAAI,YAAA,EAAc,OAAO,GAAA,EAAK,GAAA,KAAQ;AAC3C,IAAA,IAAI;AACF,MAAA,MAAM,WAAA,GAAc,MAAM,QAAA,CAAS,WAAA,CAAY,GAAG,CAAA;AAClD,MAAA,MAAM,EAAE,KAAA,EAAO,QAAA,EAAS,GAAI,MAAM,OAAA,CAAQ,WAAA;AAAA,QACxC,EAAE,MAAA,EAAQ,EAAE,IAAA,EAAM,cAAa,EAAE;AAAA,QACjC,EAAE,WAAA;AAAY,OAChB;AACA,MAAA,MAAM,KAAA,GAAQC,wCAAA,CAAoB,QAAA,EAAU,EAAE,mBAAmB,CAAA;AACjE,MAAA,GAAA,CAAI,IAAA,CAAK,EAAE,KAAA,EAAO,CAAA;AAAA,IACpB,SAAS,KAAA,EAAO;AACd,MAAA,IAAK,KAAA,CAAgB,SAAS,qBAAA,EAAuB;AACnD,QAAA,GAAA,CAAI,OAAO,GAAG,CAAA,CAAE,KAAK,EAAE,KAAA,EAAO,2BAA2B,CAAA;AACzD,QAAA;AAAA,MACF;AACA,MAAA,OAAA,CAAQ,MAAA,CAAO,KAAA,CAAM,CAAA,0BAAA,EAA6B,KAAK,CAAA,CAAE,CAAA;AACzD,MAAA,GAAA,CAAI,OAAO,GAAG,CAAA,CAAE,KAAK,EAAE,KAAA,EAAO,4BAA4B,CAAA;AAAA,IAC5D;AAAA,EACF,CAAC,CAAA;AAID,EAAA,MAAM,eAAe,CAAC,IAAA,KAAiB,IAAA,CAAK,OAAA,CAAQ,aAAa,GAAG,CAAA;AAEpE,EAAA,MAAM,YAAA,GAAe,CACnB,GAAA,EACA,IAAA,EACA,SACA,QAAA,KACG;AACH,IAAA,GAAA,CAAI,SAAA,CAAU,cAAA,EAAgBC,2BAAA,CAAe,IAAI,CAAC,CAAA;AAClD,IAAA,IAAI,QAAA,EAAU;AACZ,MAAA,GAAA,CAAI,SAAA;AAAA,QACF,qBAAA;AAAA,QACA,CAAA,sBAAA,EAAyB,aAAa,IAAA,CAAK,KAAA,CAAM,GAAG,CAAA,CAAE,GAAA,EAAI,IAAK,IAAI,CAAC,CAAA,CAAA;AAAA,OACtE;AAAA,IACF;AACA,IAAA,GAAA,CAAI,KAAK,OAAO,CAAA;AAAA,EAClB,CAAA;AAEA,EAAA,MAAM,iBAAA,GAAoB,OACxB,GAAA,EACA,GAAA,EACA,QAAA,KACG;AACH,IAAA,IAAI;AAEF,MAAA,MAAM,WAAA,GAAc,MAAM,QAAA,CAAS,WAAA,CAAY,GAAG,CAAA;AAClD,MAAA,MAAM,SAAS,MAAM,OAAA,CAAQ,cAAA,CAAe,GAAA,CAAI,OAAO,GAAA,EAAK;AAAA,QAC1D;AAAA,OACD,CAAA;AACD,MAAA,IAAI,CAAC,MAAA,EAAQ;AACX,QAAA,GAAA,CAAI,OAAO,GAAG,CAAA,CAAE,KAAK,EAAE,KAAA,EAAO,sBAAsB,CAAA;AACpD,QAAA;AAAA,MACF;AAEA,MAAA,MAAM,cAAA,GACJ,MAAA,CAAO,QAAA,CAAS,WAAA,GAAcC,uCAA0B,CAAA;AAC1D,MAAA,MAAM,MAAA,GAAS,cAAA,IAAkBC,2BAAA,CAAe,cAAc,CAAA;AAC9D,MAAA,IAAI,CAAC,MAAA,EAAQ;AACX,QAAA,GAAA,CAAI,OAAO,GAAG,CAAA,CAAE,KAAK,EAAE,KAAA,EAAO,oCAAoC,CAAA;AAClE,QAAA;AAAA,MACF;AAEA,MAAA,IAAI,IAAA;AACJ,MAAA,IAAI;AACF,QAAA,IAAA,GAAO,MAAMC,wBAAA,CAAY,MAAA,EAAQ,MAAM,CAAA;AAAA,MACzC,SAAS,KAAA,EAAO;AACd,QAAA,IAAK,KAAA,CAAgB,SAAS,eAAA,EAAiB;AAC7C,UAAA,GAAA,CAAI,OAAO,GAAG,CAAA,CAAE,KAAK,EAAE,KAAA,EAAO,8BAA8B,CAAA;AAC5D,UAAA;AAAA,QACF;AACA,QAAA,OAAA,CAAQ,MAAA,CAAO,KAAA;AAAA,UACb,CAAA,sBAAA,EAAyB,GAAA,CAAI,MAAA,CAAO,GAAG,KAAK,KAAK,CAAA;AAAA,SACnD;AACA,QAAA,GAAA,CACG,OAAO,GAAG,CAAA,CACV,KAAK,EAAE,KAAA,EAAO,gDAAgD,CAAA;AACjE,QAAA;AAAA,MACF;AAEA,MAAA,MAAM,QAAA,GAAW,GAAA,CAAI,KAAA,CAAM,QAAA,KAAa,MAAA;AAExC,MAAA,IAAI,aAAa,KAAA,CAAA,EAAW;AAC1B,QAAA,MAAM,IAAA,GACJ,IAAA,CAAK,IAAA,KAAS,MAAA,GACV,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,CAAA,CAAA,KAAK,CAAA,CAAE,IAAA,KAAS,QAAQ,CAAA,GACxC,KAAA,CAAA;AACN,QAAA,IAAI,CAAC,IAAA,EAAM;AACT,UAAA,GAAA,CAAI,OAAO,GAAG,CAAA,CAAE,KAAK,EAAE,KAAA,EAAO,mCAAmC,CAAA;AACjE,UAAA;AAAA,QACF;AACA,QAAA,YAAA,CAAa,KAAK,QAAA,EAAU,MAAM,IAAA,CAAK,OAAA,IAAW,QAAQ,CAAA;AAC1D,QAAA;AAAA,MACF;AAEA,MAAA,IAAI,IAAA,CAAK,SAAS,MAAA,EAAQ;AACxB,QAAA,YAAA,CAAa,GAAA,EAAK,IAAA,CAAK,IAAA,EAAM,IAAA,CAAK,SAAS,QAAQ,CAAA;AACnD,QAAA;AAAA,MACF;AAEA,MAAA,IAAI,CAAC,QAAA,EAAU;AACb,QAAA,IAAI,CAAC,KAAK,SAAA,EAAW;AACnB,UAAA,GAAA,CAAI,OAAO,GAAG,CAAA,CAAE,KAAK,EAAE,KAAA,EAAO,mCAAmC,CAAA;AACjE,UAAA;AAAA,QACF;AACA,QAAA,MAAM,KAAA,GAAQ,KAAK,KAAA,CAAM,IAAA,CAAK,OAAK,CAAA,CAAE,IAAA,KAAS,KAAK,SAAS,CAAA;AAC5D,QAAA,YAAA,CAAa,KAAK,IAAA,CAAK,SAAA,EAAW,MAAM,KAAA,CAAM,OAAA,IAAW,KAAK,CAAA;AAC9D,QAAA;AAAA,MACF;AAGA,MAAA,IAAI,IAAA,CAAK,KAAA,CAAM,MAAA,KAAW,CAAA,EAAG;AAC3B,QAAA,YAAA;AAAA,UACE,GAAA;AAAA,UACA,IAAA,CAAK,KAAA,CAAM,CAAC,CAAA,CAAE,IAAA;AAAA,UACd,MAAM,IAAA,CAAK,KAAA,CAAM,CAAC,EAAE,OAAA,EAAQ;AAAA,UAC5B;AAAA,SACF;AACA,QAAA;AAAA,MACF;AACA,MAAA,GAAA,CAAI,SAAA,CAAU,gBAAgB,iBAAiB,CAAA;AAC/C,MAAA,GAAA,CAAI,SAAA;AAAA,QACF,qBAAA;AAAA,QACA,CAAA,sBAAA,EAAyB,YAAA,CAAa,MAAA,CAAO,QAAA,CAAS,IAAI,CAAC,CAAA,KAAA;AAAA,OAC7D;AACA,MAAA,MAAM,OAAA,GAAUC,0BAAS,KAAK,CAAA;AAC9B,MAAA,OAAA,CAAQ,EAAA,CAAG,SAAS,CAAA,KAAA,KAAS;AAC3B,QAAA,OAAA,CAAQ,MAAA,CAAO,KAAA;AAAA,UACb,CAAA,wBAAA,EAA2B,GAAA,CAAI,MAAA,CAAO,GAAG,KAAK,KAAK,CAAA;AAAA,SACrD;AACA,QAAA,GAAA,CAAI,QAAQ,KAAK,CAAA;AAAA,MACnB,CAAC,CAAA;AACD,MAAA,OAAA,CAAQ,KAAK,GAAG,CAAA;AAChB,MAAA,KAAA,MAAW,IAAA,IAAQ,KAAK,KAAA,EAAO;AAC7B,QAAA,OAAA,CAAQ,MAAA,CAAO,MAAM,IAAA,CAAK,OAAA,IAAW,EAAE,IAAA,EAAM,IAAA,CAAK,IAAA,EAAM,CAAA;AAAA,MAC1D;AACA,MAAA,MAAM,QAAQ,QAAA,EAAS;AAAA,IACzB,SAAS,KAAA,EAAO;AACd,MAAA,IAAK,KAAA,CAAgB,SAAS,qBAAA,EAAuB;AACnD,QAAA,GAAA,CAAI,OAAO,GAAG,CAAA,CAAE,KAAK,EAAE,KAAA,EAAO,2BAA2B,CAAA;AACzD,QAAA;AAAA,MACF;AACA,MAAA,OAAA,CAAQ,MAAA,CAAO,KAAA;AAAA,QACb,CAAA,2BAAA,EAA8B,GAAA,CAAI,MAAA,CAAO,GAAG,KAAK,KAAK,CAAA;AAAA,OACxD;AACA,MAAA,GAAA,CAAI,OAAO,GAAG,CAAA,CAAE,KAAK,EAAE,KAAA,EAAO,mCAAmC,CAAA;AAAA,IACnE;AAAA,EACF,CAAA;AAEA,EAAA,MAAA,CAAO,GAAA,CAAI,oBAAoB,CAAC,GAAA,EAAK,QAAQ,iBAAA,CAAkB,GAAA,EAAK,GAAG,CAAC,CAAA;AACxE,EAAA,MAAA,CAAO,GAAA;AAAA,IAAI,4BAAA;AAAA,IAA8B,CAAC,KAAK,GAAA,KAC7C,iBAAA,CAAkB,KAAK,GAAA,EAAK,GAAA,CAAI,OAAO,QAAQ;AAAA,GACjD;AAIA,EAAA,MAAA,CAAO,IAAA,CAAK,YAAA,EAAc,OAAO,GAAA,EAAK,GAAA,KAAQ;AAC5C,IAAA,IAAI;AACF,MAAA,MAAM,MAAA,GAASC,8CAAA,CAA0B,SAAA,CAAU,GAAA,CAAI,IAAI,CAAA;AAC3D,MAAA,IAAI,CAAC,OAAO,OAAA,EAAS;AACnB,QAAA,GAAA,CAAI,MAAA,CAAO,GAAG,CAAA,CAAE,IAAA,CAAK,EAAE,KAAA,EAAO,MAAA,CAAO,KAAA,CAAM,OAAA,EAAS,CAAA;AACpD,QAAA;AAAA,MACF;AAEA,MAAA,MAAM,WAAA,GAAc,MAAM,QAAA,CAAS,WAAA,CAAY,GAAG,CAAA;AAClD,MAAA,MAAM,SAAS,MAAM,OAAA,CAAQ,cAAA,CAAe,MAAA,CAAO,KAAK,GAAA,EAAK;AAAA,QAC3D;AAAA,OACD,CAAA;AACD,MAAA,IAAI,CAAC,MAAA,EAAQ;AACX,QAAA,GAAA,CAAI,OAAO,GAAG,CAAA,CAAE,KAAK,EAAE,KAAA,EAAO,sBAAsB,CAAA;AACpD,QAAA;AAAA,MACF;AAEA,MAAA,MAAM,eAAe,MAAA,CAAO;AAAA,QAC1B,SAAA,EAAW,OAAO,IAAA,CAAK,GAAA;AAAA,QACvB,MAAA,EAAQ,OAAO,IAAA,CAAK,MAAA;AAAA,QACpB,SAAA,EAAWC,uBAAA,CAAU,WAAA,EAAa,aAAa,CAAA;AAAA,QAC/C,IAAA,EAAM,OAAO,IAAA,CAAK;AAAA,OACnB,CAAA;AACD,MAAA,GAAA,CAAI,WAAW,GAAG,CAAA;AAAA,IACpB,SAAS,KAAA,EAAO;AACd,MAAA,IAAK,KAAA,CAAgB,SAAS,qBAAA,EAAuB;AACnD,QAAA,GAAA,CAAI,OAAO,GAAG,CAAA,CAAE,KAAK,EAAE,KAAA,EAAO,2BAA2B,CAAA;AACzD,QAAA;AAAA,MACF;AACA,MAAA,OAAA,CAAQ,MAAA,CAAO,KAAA,CAAM,CAAA,wBAAA,EAA2B,KAAK,CAAA,CAAE,CAAA;AACvD,MAAA,GAAA,CAAI,OAAO,GAAG,CAAA,CAAE,KAAK,EAAE,KAAA,EAAO,oCAAoC,CAAA;AAAA,IACpE;AAAA,EACF,CAAC,CAAA;AAED,EAAA,MAAA,CAAO,GAAA,CAAI,iBAAA,EAAmB,OAAO,GAAA,EAAK,GAAA,KAAQ;AAChD,IAAA,IAAI;AACF,MAAA,MAAM,QAAA,CAAS,YAAY,GAAG,CAAA;AAC9B,MAAA,MAAM,SAAS,MAAM,cAAA,CAAe,SAAA,CAAU,GAAA,CAAI,OAAO,GAAG,CAAA;AAC5D,MAAA,GAAA,CAAI,KAAK,MAAM,CAAA;AAAA,IACjB,SAAS,KAAA,EAAO;AACd,MAAA,IAAK,KAAA,CAAgB,SAAS,qBAAA,EAAuB;AACnD,QAAA,GAAA,CAAI,OAAO,GAAG,CAAA,CAAE,KAAK,EAAE,KAAA,EAAO,2BAA2B,CAAA;AACzD,QAAA;AAAA,MACF;AACA,MAAA,OAAA,CAAQ,MAAA,CAAO,MAAM,CAAA,eAAA,EAAkB,GAAA,CAAI,OAAO,GAAG,CAAA,SAAA,EAAY,KAAK,CAAA,CAAE,CAAA;AACxE,MAAA,GAAA,CAAI,OAAO,GAAG,CAAA,CAAE,KAAK,EAAE,KAAA,EAAO,oCAAoC,CAAA;AAAA,IACpE;AAAA,EACF,CAAC,CAAA;AAED,EAAA,OAAO,MAAA;AACT;;;;"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nospt/plugin-dev-ai-hub-backend",
-  "version": "1.0.3",
+  "version": "1.1.1",
   "description": "Backend plugin for Dev AI Hub",
   "license": "Apache-2.0",
   "main": "./dist/index.cjs.js",
@@ -61,7 +61,7 @@
     "@backstage/backend-plugin-api": "^1.10.0",
     "@backstage/catalog-model": "^1.10.0",
     "@backstage/plugin-catalog-node": "^2.2.4",
-    "@nospt/plugin-dev-ai-hub-common": "^1.0.3",
+    "@nospt/plugin-dev-ai-hub-common": "^1.1.1",
     "archiver": "^6.0.0",
     "express": "^5.2.1",
     "js-yaml": "^4.3.1",