@opengeni/api-router 2.6.4 → 2.10.0-canary.0

package/dist/codemode.d.ts

@@ -19,6 +19,10 @@ export declare class CodemodeCatalogNotReadyError extends Error {
     readonly code = "codemode_catalog_not_ready";
     constructor();
 }
+export declare class CodemodeCatalogStaleError extends Error {
+    readonly code = "codemode_catalog_stale";
+    constructor();
+}
 export declare function codemodeAuthorityForGrant(grant: AccessGrant): CodemodeGrantAuthority | null;
 export declare function isCodemodeGrant(grant: AccessGrant): boolean;
 export declare function requireMatchingCodemodeCatalog(authority: CodemodeGrantAuthority, catalog: AttemptToolCatalog | null): AttemptToolCatalog;
@@ -27,4 +31,6 @@ export declare function requireActiveCodemodeCatalog(deps: ApiRouteDeps, grant:
     catalog: AttemptToolCatalog;
 }>;
 export declare function submitAndDispatchCodemodeCall(deps: ApiRouteDeps, grant: AccessGrant, rawRequest: unknown): Promise<CodemodeCallSubmissionValue>;
+export declare function codemodeOperationNeedsDispatch(operation: CodemodeOperation): boolean;
 export declare function readCodemodeOperation(deps: ApiRouteDeps, grant: AccessGrant, operationId: string): Promise<CodemodeOperation | null>;
+export declare function refreshAdmittedCodemodeOperation(admitted: CodemodeOperation, read: () => Promise<CodemodeOperation | null>): Promise<CodemodeOperation>;

package/dist/github-access.d.ts

@@ -1,6 +1,22 @@
-import type { GitHubBindingStatus, GitHubInstallationBinding, GitHubRepository } from "@opengeni/contracts";
-import { listGitHubInstallationAccessForWorkspace } from "@opengeni/db";
+import type { GitHubAppRepositoryBranchPage, GitHubBindingStatus, GitHubInstallationBinding, GitHubRepository } from "@opengeni/contracts";
+import { type GitHubRepositoryBranchesResponse, type ListGitHubRepositoryBranchesQuery } from "@opengeni/contracts/github-repository-contracts";
+import { areGitHubRepositoriesAllowedForWorkspace, listGitHubInstallationAccessForWorkspace } from "@opengeni/db";
 import type { ApiRouteDeps } from "@opengeni/core";
+export type GitHubRepositoryBranchAuthorityErrorCode = "changed" | "not_authorized";
+export declare class GitHubRepositoryBranchAuthorityError extends Error {
+    readonly code: GitHubRepositoryBranchAuthorityErrorCode;
+    constructor(code: GitHubRepositoryBranchAuthorityErrorCode);
+}
+export type WorkspaceGitHubRepositoryBranchServices = {
+    listInstallationAccess: typeof listGitHubInstallationAccessForWorkspace;
+    areRepositoriesAllowed: typeof areGitHubRepositoriesAllowedForWorkspace;
+    listProviderBranches: (deps: ApiRouteDeps, input: {
+        installationId: number;
+        repositoryId: number;
+        page: number;
+        limit: number;
+    }) => Promise<GitHubAppRepositoryBranchPage | null>;
+};
 export declare function listWorkspaceGitHubInstallationBindings(deps: ApiRouteDeps, workspaceId: string): Promise<GitHubInstallationBinding[]>;
 export declare function githubBindingStatus(configured: boolean, installations: GitHubInstallationBinding[]): GitHubBindingStatus;
 export type LiveGitHubInstallation = {
@@ -10,3 +26,10 @@ export type LiveGitHubInstallation = {
 };
 export declare function githubInstallationBindingLifecycle(stored: Awaited<ReturnType<typeof listGitHubInstallationAccessForWorkspace>>[number], liveById: Map<number, LiveGitHubInstallation | null>, installationId: number, lifecycleVerified: boolean): GitHubInstallationBinding["lifecycle"];
 export declare function listWorkspaceGitHubRepositories(deps: ApiRouteDeps, workspaceId: string): Promise<GitHubRepository[]>;
+export declare function listWorkspaceGitHubRepositoryBranches(deps: ApiRouteDeps, input: {
+    accountId: string;
+    workspaceId: string;
+    installationId: number;
+    repositoryId: number;
+    query: ListGitHubRepositoryBranchesQuery;
+}, services?: WorkspaceGitHubRepositoryBranchServices): Promise<GitHubRepositoryBranchesResponse>;

package/dist/http/request-source.d.ts

@@ -0,0 +1,14 @@
+import type { Context } from "hono";
+declare const TRANSPORT_PEER_ADDRESS_BINDING = "opengeniTransportPeerAddress";
+type ApiRequestBindings = {
+    [TRANSPORT_PEER_ADDRESS_BINDING]?: string | null;
+};
+export declare function apiRequestBindingsForTransportPeer(address: string | null | undefined): ApiRequestBindings;
+/**
+ * Resolve a quota/audit source from the server-owned transport peer. Forwarded
+ * values are considered only when the operator declares an exact trusted proxy
+ * hop count; the chain is then walked from the server side so caller-prepended
+ * values cannot replace the address inserted by the trusted edge.
+ */
+export declare function trustedRequestSourceAddress(c: Context, trustedProxyHops: number): string;
+export {};

package/dist/index.js

@@ -1,12 +1,13 @@
 import {
   InteractionFrameProxyTransport,
   SlackBotProviderError,
+  apiRequestBindingsForTransportPeer,
   cleanupScheduledTaskConnectorAuthorization,
   createAppComposition,
   createOpenGeniSlackBotInteractionClient,
   startSlackInteractionPump,
   startTemporalScheduleCleanupPump
-} from "./chunk-XTLI3CBH.js";
+} from "./chunk-XXH7DW34.js";
 
 // src/index.ts
 import {
@@ -32,7 +33,10 @@ import {
 } from "@opengeni/observability";
 import { createObjectStorage } from "@opengeni/storage";
 import { isArtifactRuntimeConfigured } from "@opengeni/artifact-tool/runtime/development";
-import { SESSION_WORKFLOW_WAKE_DISPATCHER_SCHEDULE_ID } from "@opengeni/core";
+import {
+  resolveCatalogSettings,
+  SESSION_WORKFLOW_WAKE_DISPATCHER_SCHEDULE_ID
+} from "@opengeni/core";
 import {
   Connection,
   Client as TemporalClient,
@@ -2905,6 +2909,15 @@ async function startApi(options = {}) {
       () => assertRuntimeDatabasePosture(dbClient.db, databasePosture),
       { ...retryOptions, onRetry }
     );
+    const resolvedCatalog = await retryStartupDependency(
+      "model catalog",
+      () => resolveCatalogSettings(dbClient.db, settings),
+      { ...retryOptions, onRetry }
+    );
+    observability.info("OpenGeni model catalog resolved", {
+      catalogSource: resolvedCatalog.source,
+      catalogVersion: resolvedCatalog.version
+    });
     bus = await retryStartupDependency(
       "NATS",
       () => createNatsEventBus(
@@ -2986,7 +2999,10 @@ async function startApi(options = {}) {
       if (artifactWebSockets.handles(request)) {
         return artifactWebSockets.upgrade(request, bunServer);
       }
-      return app.fetch(request);
+      return app.fetch(
+        request,
+        apiRequestBindingsForTransportPeer(bunServer.requestIP(request)?.address)
+      );
     },
     websocket: {
       maxPayloadLength: EDITABLE_ARTIFACT_LIVE_WEBSOCKET_MAX_MESSAGE_BYTES,