@overlordai/server 1.0.1

package/dist/web/admin/admin-bot.controller.js

@@ -0,0 +1,193 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AdminBotController = void 0;
+const common_1 = require("@nestjs/common");
+const protocol_1 = require("@overlordai/protocol");
+const jwt_auth_guard_1 = require("../../auth/guards/jwt-auth.guard");
+const roles_guard_1 = require("../../auth/guards/roles.guard");
+const roles_decorator_1 = require("../../auth/decorators/roles.decorator");
+const bot_repository_1 = require("../../database/repositories/bot.repository");
+const audit_log_repository_1 = require("../../database/repositories/audit-log.repository");
+const crypto_service_1 = require("../../common/crypto.service");
+let AdminBotController = class AdminBotController {
+    botRepo;
+    auditLogRepo;
+    cryptoService;
+    constructor(botRepo, auditLogRepo, cryptoService) {
+        this.botRepo = botRepo;
+        this.auditLogRepo = auditLogRepo;
+        this.cryptoService = cryptoService;
+    }
+    listBots() {
+        const bots = this.botRepo.findAll();
+        // Strip appSecret from response
+        return bots.map((b) => ({
+            id: b.id,
+            platform: b.platform,
+            appId: b.appId,
+            name: b.name,
+            status: b.status,
+            createdAt: b.createdAt,
+        }));
+    }
+    createBot(body, req) {
+        // Encrypt appSecret before storage
+        const encryptedSecret = this.cryptoService.encryptAes(body.appSecret);
+        const bot = this.botRepo.create({
+            platform: body.platform,
+            appId: body.appId,
+            appSecret: encryptedSecret,
+            webhookToken: body.webhookToken,
+            name: body.name,
+        });
+        this.auditLogRepo.create({
+            userId: req.user.sub,
+            action: 'bot_create',
+            resource: `bot:${bot.id}`,
+            detail: `Created bot '${bot.name}' for platform '${bot.platform}'`,
+        });
+        return {
+            id: bot.id,
+            platform: bot.platform,
+            appId: bot.appId,
+            name: bot.name,
+            status: bot.status,
+            createdAt: bot.createdAt,
+        };
+    }
+    listAllBindings() {
+        return this.botRepo.findAllBindings();
+    }
+    listBindings(id) {
+        const bot = this.botRepo.findById(id);
+        if (!bot) {
+            throw new common_1.NotFoundException(`Bot #${id} not found`);
+        }
+        return this.botRepo.findBindingsByBotId(id);
+    }
+    createBinding(id, body, req) {
+        const bot = this.botRepo.findById(id);
+        if (!bot) {
+            throw new common_1.NotFoundException(`Bot #${id} not found`);
+        }
+        const binding = this.botRepo.createBinding({
+            botInstanceId: id,
+            platformChatId: body.platformChatId,
+            projectKey: body.projectKey,
+            chatName: body.chatName,
+        });
+        this.auditLogRepo.create({
+            userId: req.user.sub,
+            action: 'bot_binding_create',
+            resource: `bot:${id}`,
+            detail: `Created binding for chat '${body.platformChatId}'`,
+        });
+        return binding;
+    }
+    deleteBot(id, req) {
+        const bot = this.botRepo.findById(id);
+        if (!bot) {
+            throw new common_1.NotFoundException(`Bot #${id} not found`);
+        }
+        this.botRepo.deleteBot(id);
+        this.auditLogRepo.create({
+            userId: req.user.sub,
+            action: 'bot_delete',
+            resource: `bot:${id}`,
+            detail: `Deleted bot '${bot.name}' and its bindings`,
+        });
+        return { success: true };
+    }
+    deleteBinding(id, body, req) {
+        const bot = this.botRepo.findById(id);
+        if (!bot) {
+            throw new common_1.NotFoundException(`Bot #${id} not found`);
+        }
+        const deleted = this.botRepo.deleteBinding(body.platformChatId);
+        if (!deleted) {
+            throw new common_1.NotFoundException('Binding not found');
+        }
+        this.auditLogRepo.create({
+            userId: req.user.sub,
+            action: 'bot_binding_delete',
+            resource: `bot:${id}`,
+            detail: `Deleted binding for chat '${body.platformChatId}'`,
+        });
+        return { success: true };
+    }
+};
+exports.AdminBotController = AdminBotController;
+__decorate([
+    (0, common_1.Get)(),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", void 0)
+], AdminBotController.prototype, "listBots", null);
+__decorate([
+    (0, common_1.Post)(),
+    __param(0, (0, common_1.Body)()),
+    __param(1, (0, common_1.Req)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object]),
+    __metadata("design:returntype", void 0)
+], AdminBotController.prototype, "createBot", null);
+__decorate([
+    (0, common_1.Get)('all-bindings'),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", void 0)
+], AdminBotController.prototype, "listAllBindings", null);
+__decorate([
+    (0, common_1.Get)(':id/bindings'),
+    __param(0, (0, common_1.Param)('id', common_1.ParseIntPipe)),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Number]),
+    __metadata("design:returntype", void 0)
+], AdminBotController.prototype, "listBindings", null);
+__decorate([
+    (0, common_1.Post)(':id/bindings'),
+    __param(0, (0, common_1.Param)('id', common_1.ParseIntPipe)),
+    __param(1, (0, common_1.Body)()),
+    __param(2, (0, common_1.Req)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Number, Object, Object]),
+    __metadata("design:returntype", void 0)
+], AdminBotController.prototype, "createBinding", null);
+__decorate([
+    (0, common_1.Delete)(':id'),
+    __param(0, (0, common_1.Param)('id', common_1.ParseIntPipe)),
+    __param(1, (0, common_1.Req)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Number, Object]),
+    __metadata("design:returntype", void 0)
+], AdminBotController.prototype, "deleteBot", null);
+__decorate([
+    (0, common_1.Delete)(':id/bindings'),
+    __param(0, (0, common_1.Param)('id', common_1.ParseIntPipe)),
+    __param(1, (0, common_1.Body)()),
+    __param(2, (0, common_1.Req)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Number, Object, Object]),
+    __metadata("design:returntype", void 0)
+], AdminBotController.prototype, "deleteBinding", null);
+exports.AdminBotController = AdminBotController = __decorate([
+    (0, common_1.Controller)('api/admin/bots'),
+    (0, common_1.UseGuards)(jwt_auth_guard_1.JwtAuthGuard, roles_guard_1.RolesGuard),
+    (0, roles_decorator_1.Roles)(protocol_1.DeveloperRole.ADMIN),
+    __metadata("design:paramtypes", [bot_repository_1.BotRepository,
+        audit_log_repository_1.AuditLogRepository,
+        crypto_service_1.CryptoService])
+], AdminBotController);
+//# sourceMappingURL=admin-bot.controller.js.map

package/dist/web/admin/admin-bot.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-bot.controller.js","sourceRoot":"","sources":["../../../src/web/admin/admin-bot.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAWwB;AACxB,mDAAqD;AACrD,qEAAgE;AAChE,+DAA2D;AAC3D,2EAA8D;AAC9D,+EAA2E;AAC3E,2FAAsF;AACtF,gEAA4D;AASrD,IAAM,kBAAkB,GAAxB,MAAM,kBAAkB;IAEV;IACA;IACA;IAHnB,YACmB,OAAsB,EACtB,YAAgC,EAChC,aAA4B;QAF5B,YAAO,GAAP,OAAO,CAAe;QACtB,iBAAY,GAAZ,YAAY,CAAoB;QAChC,kBAAa,GAAb,aAAa,CAAe;IAC5C,CAAC;IAGJ,QAAQ;QACN,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACpC,gCAAgC;QAChC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACtB,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,SAAS,EAAE,CAAC,CAAC,SAAS;SACvB,CAAC,CAAC,CAAC;IACN,CAAC;IAGD,SAAS,CAEP,IAMC,EACM,GAAyB;QAEhC,mCAAmC;QACnC,MAAM,eAAe,GAAG,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAEtE,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;YAC9B,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,SAAS,EAAE,eAAe;YAC1B,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,IAAI,EAAE,IAAI,CAAC,IAAI;SAChB,CAAC,CAAC;QAEH,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC;YACvB,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG;YACpB,MAAM,EAAE,YAAY;YACpB,QAAQ,EAAE,OAAO,GAAG,CAAC,EAAE,EAAE;YACzB,MAAM,EAAE,gBAAgB,GAAG,CAAC,IAAI,mBAAmB,GAAG,CAAC,QAAQ,GAAG;SACnE,CAAC,CAAC;QAEH,OAAO;YACL,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,SAAS,EAAE,GAAG,CAAC,SAAS;SACzB,CAAC;IACJ,CAAC;IAGD,eAAe;QACb,OAAO,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC;IACxC,CAAC;IAGD,YAAY,CAA4B,EAAU;QAChD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACtC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,0BAAiB,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QACtD,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC;IAC9C,CAAC;IAGD,aAAa,CACgB,EAAU,EAErC,IAAwE,EACjE,GAAyB;QAEhC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACtC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,0BAAiB,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QACtD,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC;YACzC,aAAa,EAAE,EAAE;YACjB,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,QAAQ,EAAE,IAAI,CAAC,QAAQ;SACxB,CAAC,CAAC;QAEH,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC;YACvB,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG;YACpB,MAAM,EAAE,oBAAoB;YAC5B,QAAQ,EAAE,OAAO,EAAE,EAAE;YACrB,MAAM,EAAE,6BAA6B,IAAI,CAAC,cAAc,GAAG;SAC5D,CAAC,CAAC;QAEH,OAAO,OAAO,CAAC;IACjB,CAAC;IAGD,SAAS,CACoB,EAAU,EAC9B,GAAyB;QAEhC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACtC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,0BAAiB,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QACtD,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAE3B,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC;YACvB,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG;YACpB,MAAM,EAAE,YAAY;YACpB,QAAQ,EAAE,OAAO,EAAE,EAAE;YACrB,MAAM,EAAE,gBAAgB,GAAG,CAAC,IAAI,oBAAoB;SACrD,CAAC,CAAC;QAEH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAGD,aAAa,CACgB,EAAU,EAC7B,IAAgC,EACjC,GAAyB;QAEhC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACtC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,0BAAiB,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QACtD,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAChE,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,0BAAiB,CAAC,mBAAmB,CAAC,CAAC;QACnD,CAAC;QAED,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC;YACvB,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG;YACpB,MAAM,EAAE,oBAAoB;YAC5B,QAAQ,EAAE,OAAO,EAAE,EAAE;YACrB,MAAM,EAAE,6BAA6B,IAAI,CAAC,cAAc,GAAG;SAC5D,CAAC,CAAC;QAEH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;CACF,CAAA;AAvJY,gDAAkB;AAQ7B;IADC,IAAA,YAAG,GAAE;;;;kDAYL;AAGD;IADC,IAAA,aAAI,GAAE;IAEJ,WAAA,IAAA,aAAI,GAAE,CAAA;IAQN,WAAA,IAAA,YAAG,GAAE,CAAA;;;;mDA4BP;AAGD;IADC,IAAA,YAAG,EAAC,cAAc,CAAC;;;;yDAGnB;AAGD;IADC,IAAA,YAAG,EAAC,cAAc,CAAC;IACN,WAAA,IAAA,cAAK,EAAC,IAAI,EAAE,qBAAY,CAAC,CAAA;;;;sDAMtC;AAGD;IADC,IAAA,aAAI,EAAC,cAAc,CAAC;IAElB,WAAA,IAAA,cAAK,EAAC,IAAI,EAAE,qBAAY,CAAC,CAAA;IACzB,WAAA,IAAA,aAAI,GAAE,CAAA;IAEN,WAAA,IAAA,YAAG,GAAE,CAAA;;;;uDAsBP;AAGD;IADC,IAAA,eAAM,EAAC,KAAK,CAAC;IAEX,WAAA,IAAA,cAAK,EAAC,IAAI,EAAE,qBAAY,CAAC,CAAA;IACzB,WAAA,IAAA,YAAG,GAAE,CAAA;;;;mDAiBP;AAGD;IADC,IAAA,eAAM,EAAC,cAAc,CAAC;IAEpB,WAAA,IAAA,cAAK,EAAC,IAAI,EAAE,qBAAY,CAAC,CAAA;IACzB,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,YAAG,GAAE,CAAA;;;;uDAoBP;6BAtJU,kBAAkB;IAH9B,IAAA,mBAAU,EAAC,gBAAgB,CAAC;IAC5B,IAAA,kBAAS,EAAC,6BAAY,EAAE,wBAAU,CAAC;IACnC,IAAA,uBAAK,EAAC,wBAAa,CAAC,KAAK,CAAC;qCAGG,8BAAa;QACR,yCAAkB;QACjB,8BAAa;GAJpC,kBAAkB,CAuJ9B"}

package/dist/web/admin/admin-developer.controller.d.ts

@@ -0,0 +1,52 @@
+import { DeveloperRole } from '@overlordai/protocol';
+import type { CreateDeveloperRequest } from '@overlordai/protocol';
+import { DeveloperRepository } from '../../database/repositories/developer.repository';
+import { AuditLogRepository } from '../../database/repositories/audit-log.repository';
+import { CryptoService } from '../../common/crypto.service';
+interface AuthenticatedRequest {
+    user: {
+        sub: number;
+        name: string;
+        role: string;
+    };
+}
+export declare class AdminDeveloperController {
+    private readonly developerRepo;
+    private readonly auditLogRepo;
+    private readonly cryptoService;
+    constructor(developerRepo: DeveloperRepository, auditLogRepo: AuditLogRepository, cryptoService: CryptoService);
+    listDevelopers(): {
+        id: number;
+        name: string;
+        gitName: string;
+        gitEmail: string;
+        role: DeveloperRole;
+        status: string;
+        totpEnabled: boolean;
+        createdAt: string;
+    }[];
+    createDeveloper(body: CreateDeveloperRequest, req: AuthenticatedRequest): Promise<{
+        id: number;
+        name: string;
+        gitName: string;
+        gitEmail: string;
+        role: DeveloperRole;
+        status: string;
+        createdAt: string;
+    }>;
+    updateDeveloper(id: number, body: Record<string, unknown>, req: AuthenticatedRequest): {
+        id: number;
+        name: string;
+        gitName: string;
+        gitEmail: string;
+        role: DeveloperRole;
+        status: string;
+        totpEnabled: boolean;
+        createdAt: string;
+    };
+    resetTotp(id: number, req: AuthenticatedRequest): {
+        success: boolean;
+    };
+}
+export {};
+//# sourceMappingURL=admin-developer.controller.d.ts.map

package/dist/web/admin/admin-developer.controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-developer.controller.d.ts","sourceRoot":"","sources":["../../../src/web/admin/admin-developer.controller.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAInE,OAAO,EAAE,mBAAmB,EAAE,MAAM,kDAAkD,CAAC;AACvF,OAAO,EAAE,kBAAkB,EAAE,MAAM,kDAAkD,CAAC;AACtF,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAE5D,UAAU,oBAAoB;IAC5B,IAAI,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CACnD;AAED,qBAGa,wBAAwB;IAEjC,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B,OAAO,CAAC,QAAQ,CAAC,aAAa;gBAFb,aAAa,EAAE,mBAAmB,EAClC,YAAY,EAAE,kBAAkB,EAChC,aAAa,EAAE,aAAa;IAI/C,cAAc;;;;;;;;;;IAgBR,eAAe,CACX,IAAI,EAAE,sBAAsB,EAC7B,GAAG,EAAE,oBAAoB;;;;;;;;;IA8BlC,eAAe,CACc,EAAE,EAAE,MAAM,EAC7B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,GAAG,EAAE,oBAAoB;;;;;;;;;;IAmClC,SAAS,CACoB,EAAE,EAAE,MAAM,EAC9B,GAAG,EAAE,oBAAoB;;;CAsBnC"}

package/dist/web/admin/admin-developer.controller.js

@@ -0,0 +1,160 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AdminDeveloperController = void 0;
+const common_1 = require("@nestjs/common");
+const protocol_1 = require("@overlordai/protocol");
+const jwt_auth_guard_1 = require("../../auth/guards/jwt-auth.guard");
+const roles_guard_1 = require("../../auth/guards/roles.guard");
+const roles_decorator_1 = require("../../auth/decorators/roles.decorator");
+const developer_repository_1 = require("../../database/repositories/developer.repository");
+const audit_log_repository_1 = require("../../database/repositories/audit-log.repository");
+const crypto_service_1 = require("../../common/crypto.service");
+let AdminDeveloperController = class AdminDeveloperController {
+    developerRepo;
+    auditLogRepo;
+    cryptoService;
+    constructor(developerRepo, auditLogRepo, cryptoService) {
+        this.developerRepo = developerRepo;
+        this.auditLogRepo = auditLogRepo;
+        this.cryptoService = cryptoService;
+    }
+    listDevelopers() {
+        const developers = this.developerRepo.findAll();
+        // Strip sensitive fields
+        return developers.map((d) => ({
+            id: d.id,
+            name: d.name,
+            gitName: d.gitName,
+            gitEmail: d.gitEmail,
+            role: d.role,
+            status: d.status,
+            totpEnabled: !!d.totpSecret,
+            createdAt: d.createdAt,
+        }));
+    }
+    async createDeveloper(body, req) {
+        const passwordHash = await this.cryptoService.hashPassword(body.password);
+        const developer = this.developerRepo.create({
+            name: body.name,
+            gitName: body.gitName,
+            gitEmail: body.gitEmail,
+            passwordHash,
+            role: body.role,
+        });
+        this.auditLogRepo.create({
+            userId: req.user.sub,
+            action: 'developer_create',
+            resource: `developer:${developer.id}`,
+            detail: `Created developer '${developer.name}' with role '${developer.role}'`,
+        });
+        return {
+            id: developer.id,
+            name: developer.name,
+            gitName: developer.gitName,
+            gitEmail: developer.gitEmail,
+            role: developer.role,
+            status: developer.status,
+            createdAt: developer.createdAt,
+        };
+    }
+    updateDeveloper(id, body, req) {
+        const developer = this.developerRepo.findById(id);
+        if (!developer) {
+            throw new common_1.NotFoundException(`Developer #${id} not found`);
+        }
+        const allowed = ['name', 'role', 'status', 'gitName', 'gitEmail'];
+        const sanitized = {};
+        for (const key of allowed) {
+            if (key in body)
+                sanitized[key] = body[key];
+        }
+        this.developerRepo.update(id, sanitized);
+        this.auditLogRepo.create({
+            userId: req.user.sub,
+            action: 'developer_update',
+            resource: `developer:${id}`,
+            detail: `Updated developer #${id}`,
+        });
+        const updated = this.developerRepo.findById(id);
+        return {
+            id: updated.id,
+            name: updated.name,
+            gitName: updated.gitName,
+            gitEmail: updated.gitEmail,
+            role: updated.role,
+            status: updated.status,
+            totpEnabled: !!updated.totpSecret,
+            createdAt: updated.createdAt,
+        };
+    }
+    resetTotp(id, req) {
+        if (id === req.user.sub) {
+            throw new common_1.BadRequestException('Cannot reset your own TOTP');
+        }
+        const developer = this.developerRepo.findById(id);
+        if (!developer) {
+            throw new common_1.NotFoundException(`Developer #${id} not found`);
+        }
+        this.developerRepo.update(id, { totpSecret: null });
+        this.auditLogRepo.create({
+            userId: req.user.sub,
+            action: 'reset_totp',
+            resource: `developer:${id}`,
+            detail: `Reset TOTP for developer '${developer.name}'`,
+        });
+        return { success: true };
+    }
+};
+exports.AdminDeveloperController = AdminDeveloperController;
+__decorate([
+    (0, common_1.Get)(),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", void 0)
+], AdminDeveloperController.prototype, "listDevelopers", null);
+__decorate([
+    (0, common_1.Post)(),
+    __param(0, (0, common_1.Body)()),
+    __param(1, (0, common_1.Req)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object]),
+    __metadata("design:returntype", Promise)
+], AdminDeveloperController.prototype, "createDeveloper", null);
+__decorate([
+    (0, common_1.Put)(':id'),
+    __param(0, (0, common_1.Param)('id', common_1.ParseIntPipe)),
+    __param(1, (0, common_1.Body)()),
+    __param(2, (0, common_1.Req)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Number, Object, Object]),
+    __metadata("design:returntype", void 0)
+], AdminDeveloperController.prototype, "updateDeveloper", null);
+__decorate([
+    (0, common_1.Put)(':id/reset-totp'),
+    __param(0, (0, common_1.Param)('id', common_1.ParseIntPipe)),
+    __param(1, (0, common_1.Req)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Number, Object]),
+    __metadata("design:returntype", void 0)
+], AdminDeveloperController.prototype, "resetTotp", null);
+exports.AdminDeveloperController = AdminDeveloperController = __decorate([
+    (0, common_1.Controller)('api/admin/developers'),
+    (0, common_1.UseGuards)(jwt_auth_guard_1.JwtAuthGuard, roles_guard_1.RolesGuard),
+    (0, roles_decorator_1.Roles)(protocol_1.DeveloperRole.ADMIN),
+    __metadata("design:paramtypes", [developer_repository_1.DeveloperRepository,
+        audit_log_repository_1.AuditLogRepository,
+        crypto_service_1.CryptoService])
+], AdminDeveloperController);
+//# sourceMappingURL=admin-developer.controller.js.map

package/dist/web/admin/admin-developer.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-developer.controller.js","sourceRoot":"","sources":["../../../src/web/admin/admin-developer.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAYwB;AACxB,mDAAqD;AAErD,qEAAgE;AAChE,+DAA2D;AAC3D,2EAA8D;AAC9D,2FAAuF;AACvF,2FAAsF;AACtF,gEAA4D;AASrD,IAAM,wBAAwB,GAA9B,MAAM,wBAAwB;IAEhB;IACA;IACA;IAHnB,YACmB,aAAkC,EAClC,YAAgC,EAChC,aAA4B;QAF5B,kBAAa,GAAb,aAAa,CAAqB;QAClC,iBAAY,GAAZ,YAAY,CAAoB;QAChC,kBAAa,GAAb,aAAa,CAAe;IAC5C,CAAC;IAGJ,cAAc;QACZ,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;QAChD,yBAAyB;QACzB,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC5B,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU;YAC3B,SAAS,EAAE,CAAC,CAAC,SAAS;SACvB,CAAC,CAAC,CAAC;IACN,CAAC;IAGK,AAAN,KAAK,CAAC,eAAe,CACX,IAA4B,EAC7B,GAAyB;QAEhC,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1E,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC;YAC1C,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,YAAY;YACZ,IAAI,EAAE,IAAI,CAAC,IAAI;SAChB,CAAC,CAAC;QAEH,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC;YACvB,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG;YACpB,MAAM,EAAE,kBAAkB;YAC1B,QAAQ,EAAE,aAAa,SAAS,CAAC,EAAE,EAAE;YACrC,MAAM,EAAE,sBAAsB,SAAS,CAAC,IAAI,gBAAgB,SAAS,CAAC,IAAI,GAAG;SAC9E,CAAC,CAAC;QAEH,OAAO;YACL,EAAE,EAAE,SAAS,CAAC,EAAE;YAChB,IAAI,EAAE,SAAS,CAAC,IAAI;YACpB,OAAO,EAAE,SAAS,CAAC,OAAO;YAC1B,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,IAAI,EAAE,SAAS,CAAC,IAAI;YACpB,MAAM,EAAE,SAAS,CAAC,MAAM;YACxB,SAAS,EAAE,SAAS,CAAC,SAAS;SAC/B,CAAC;IACJ,CAAC;IAGD,eAAe,CACc,EAAU,EAC7B,IAA6B,EAC9B,GAAyB;QAEhC,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAClD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,0BAAiB,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC;QAC5D,CAAC;QAED,MAAM,OAAO,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;QAClE,MAAM,SAAS,GAA4B,EAAE,CAAC;QAC9C,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;YAC1B,IAAI,GAAG,IAAI,IAAI;gBAAE,SAAS,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9C,CAAC;QACD,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;QAEzC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC;YACvB,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG;YACpB,MAAM,EAAE,kBAAkB;YAC1B,QAAQ,EAAE,aAAa,EAAE,EAAE;YAC3B,MAAM,EAAE,sBAAsB,EAAE,EAAE;SACnC,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAE,CAAC;QACjD,OAAO;YACL,EAAE,EAAE,OAAO,CAAC,EAAE;YACd,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU;YACjC,SAAS,EAAE,OAAO,CAAC,SAAS;SAC7B,CAAC;IACJ,CAAC;IAGD,SAAS,CACoB,EAAU,EAC9B,GAAyB;QAEhC,IAAI,EAAE,KAAK,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;YACxB,MAAM,IAAI,4BAAmB,CAAC,4BAA4B,CAAC,CAAC;QAC9D,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAClD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,0BAAiB,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC;QAC5D,CAAC;QAED,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;QAEpD,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC;YACvB,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG;YACpB,MAAM,EAAE,YAAY;YACpB,QAAQ,EAAE,aAAa,EAAE,EAAE;YAC3B,MAAM,EAAE,6BAA6B,SAAS,CAAC,IAAI,GAAG;SACvD,CAAC,CAAC;QAEH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;CACF,CAAA;AAtHY,4DAAwB;AAQnC;IADC,IAAA,YAAG,GAAE;;;;8DAcL;AAGK;IADL,IAAA,aAAI,GAAE;IAEJ,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,YAAG,GAAE,CAAA;;;;+DA2BP;AAGD;IADC,IAAA,YAAG,EAAC,KAAK,CAAC;IAER,WAAA,IAAA,cAAK,EAAC,IAAI,EAAE,qBAAY,CAAC,CAAA;IACzB,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,YAAG,GAAE,CAAA;;;;+DAgCP;AAGD;IADC,IAAA,YAAG,EAAC,gBAAgB,CAAC;IAEnB,WAAA,IAAA,cAAK,EAAC,IAAI,EAAE,qBAAY,CAAC,CAAA;IACzB,WAAA,IAAA,YAAG,GAAE,CAAA;;;;yDAqBP;mCArHU,wBAAwB;IAHpC,IAAA,mBAAU,EAAC,sBAAsB,CAAC;IAClC,IAAA,kBAAS,EAAC,6BAAY,EAAE,wBAAU,CAAC;IACnC,IAAA,uBAAK,EAAC,wBAAa,CAAC,KAAK,CAAC;qCAGS,0CAAmB;QACpB,yCAAkB;QACjB,8BAAa;GAJpC,wBAAwB,CAsHpC"}

package/dist/web/admin/admin-machine.controller.d.ts

@@ -0,0 +1,64 @@
+import { MachineStatus } from '@overlordai/protocol';
+import { MachineRepository } from '../../database/repositories/machine.repository';
+import { TaskRepository } from '../../database/repositories/task.repository';
+import { AuditLogRepository } from '../../database/repositories/audit-log.repository';
+interface AuthenticatedRequest {
+    user: {
+        sub: number;
+        name: string;
+        role: string;
+    };
+}
+export declare class AdminMachineController {
+    private readonly machineRepo;
+    private readonly taskRepo;
+    private readonly auditLogRepo;
+    private readonly logger;
+    constructor(machineRepo: MachineRepository, taskRepo: TaskRepository, auditLogRepo: AuditLogRepository);
+    listMachines(): {
+        id: string;
+        name: string;
+        host: string;
+        port: number;
+        tokenId: number;
+        os: string | null;
+        cpuCores: number | null;
+        memoryGb: number | null;
+        maxSlots: number;
+        activeSlots: number;
+        cpuUsage: number;
+        memoryUsage: number;
+        diskUsage: number;
+        loadThreshold: number;
+        tags: string[];
+        capabilities: string[];
+        protocolVersion: string;
+        lastHeartbeat: string | null;
+        status: MachineStatus;
+    }[];
+    updateMachine(id: string, body: {
+        status?: MachineStatus;
+    }, req: AuthenticatedRequest): {
+        id: string;
+        name: string;
+        host: string;
+        port: number;
+        tokenId: number;
+        os: string | null;
+        cpuCores: number | null;
+        memoryGb: number | null;
+        maxSlots: number;
+        activeSlots: number;
+        cpuUsage: number;
+        memoryUsage: number;
+        diskUsage: number;
+        loadThreshold: number;
+        tags: string[];
+        capabilities: string[];
+        protocolVersion: string;
+        lastHeartbeat: string | null;
+        status: MachineStatus;
+    };
+}
+export {};
+//# sourceMappingURL=admin-machine.controller.d.ts.map

package/dist/web/admin/admin-machine.controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-machine.controller.d.ts","sourceRoot":"","sources":["../../../src/web/admin/admin-machine.controller.ts"],"names":[],"mappings":"AAYA,OAAO,EAAiB,aAAa,EAAc,MAAM,sBAAsB,CAAC;AAKhF,OAAO,EAAE,iBAAiB,EAAE,MAAM,gDAAgD,CAAC;AACnF,OAAO,EAAE,cAAc,EAAE,MAAM,6CAA6C,CAAC;AAC7E,OAAO,EAAE,kBAAkB,EAAE,MAAM,kDAAkD,CAAC;AAOtF,UAAU,oBAAoB;IAC5B,IAAI,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CACnD;AAED,qBAGa,sBAAsB;IAI/B,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,YAAY;IAL/B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA2C;gBAG/C,WAAW,EAAE,iBAAiB,EAC9B,QAAQ,EAAE,cAAc,EACxB,YAAY,EAAE,kBAAkB;IAInD,YAAY;;;;;;;;;;;;;;;;;;;;;IAKZ,aAAa,CACE,EAAE,EAAE,MAAM,EACf,IAAI,EAAE;QAAE,MAAM,CAAC,EAAE,aAAa,CAAA;KAAE,EACjC,GAAG,EAAE,oBAAoB;;;;;;;;;;;;;;;;;;;;;CAqDnC"}

package/dist/web/admin/admin-machine.controller.js

@@ -0,0 +1,111 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var AdminMachineController_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AdminMachineController = void 0;
+const common_1 = require("@nestjs/common");
+const protocol_1 = require("@overlordai/protocol");
+const jwt_auth_guard_1 = require("../../auth/guards/jwt-auth.guard");
+const roles_guard_1 = require("../../auth/guards/roles.guard");
+const roles_decorator_1 = require("../../auth/decorators/roles.decorator");
+const machine_repository_1 = require("../../database/repositories/machine.repository");
+const task_repository_1 = require("../../database/repositories/task.repository");
+const audit_log_repository_1 = require("../../database/repositories/audit-log.repository");
+function stripMachineSecrets(machine) {
+    const { recoverySecretHash, ...safe } = machine;
+    return safe;
+}
+let AdminMachineController = AdminMachineController_1 = class AdminMachineController {
+    machineRepo;
+    taskRepo;
+    auditLogRepo;
+    logger = new common_1.Logger(AdminMachineController_1.name);
+    constructor(machineRepo, taskRepo, auditLogRepo) {
+        this.machineRepo = machineRepo;
+        this.taskRepo = taskRepo;
+        this.auditLogRepo = auditLogRepo;
+    }
+    listMachines() {
+        return this.machineRepo.findAll().map(stripMachineSecrets);
+    }
+    updateMachine(id, body, req) {
+        const machine = this.machineRepo.findById(id);
+        if (!machine) {
+            throw new common_1.NotFoundException(`Machine '${id}' not found`);
+        }
+        const validStatuses = ['online', 'offline', 'draining'];
+        if (body.status && !validStatuses.includes(body.status)) {
+            throw new common_1.BadRequestException(`Invalid status. Must be one of: ${validStatuses.join(', ')}`);
+        }
+        if (body.status) {
+            this.machineRepo.updateStatus(id, body.status);
+            // When forcing a machine offline, reconcile its active tasks
+            if (body.status === 'offline') {
+                const activeTasks = this.taskRepo.findByMachineId(id, [
+                    protocol_1.TaskStatus.ASSIGNED,
+                    protocol_1.TaskStatus.RUNNING,
+                ]);
+                for (const task of activeTasks) {
+                    if (task.status === protocol_1.TaskStatus.ASSIGNED) {
+                        // ASSIGNED tasks can be re-queued for another machine
+                        this.taskRepo.updateStatus(task.id, protocol_1.TaskStatus.QUEUED, task.revision, {
+                            machineId: null,
+                        });
+                        this.logger.warn(`Task #${task.id} re-queued: machine '${machine.name}' forced offline`);
+                    }
+                    else if (task.status === protocol_1.TaskStatus.RUNNING) {
+                        // RUNNING tasks must be failed — their state is indeterminate
+                        this.taskRepo.updateStatus(task.id, protocol_1.TaskStatus.FAILED, task.revision, {
+                            errorMessage: `Machine '${machine.name}' forced offline by administrator`,
+                            completedAt: new Date().toISOString(),
+                        });
+                        this.logger.warn(`Task #${task.id} marked FAILED: machine '${machine.name}' forced offline`);
+                    }
+                }
+            }
+        }
+        this.auditLogRepo.create({
+            userId: req.user.sub,
+            action: 'machine_update',
+            resource: `machine:${id}`,
+            detail: `Updated machine '${machine.name}'`,
+        });
+        return stripMachineSecrets(this.machineRepo.findById(id));
+    }
+};
+exports.AdminMachineController = AdminMachineController;
+__decorate([
+    (0, common_1.Get)(),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", void 0)
+], AdminMachineController.prototype, "listMachines", null);
+__decorate([
+    (0, common_1.Put)(':id'),
+    __param(0, (0, common_1.Param)('id')),
+    __param(1, (0, common_1.Body)()),
+    __param(2, (0, common_1.Req)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object, Object]),
+    __metadata("design:returntype", void 0)
+], AdminMachineController.prototype, "updateMachine", null);
+exports.AdminMachineController = AdminMachineController = AdminMachineController_1 = __decorate([
+    (0, common_1.Controller)('api/admin/machines'),
+    (0, common_1.UseGuards)(jwt_auth_guard_1.JwtAuthGuard, roles_guard_1.RolesGuard),
+    (0, roles_decorator_1.Roles)(protocol_1.DeveloperRole.ADMIN),
+    __metadata("design:paramtypes", [machine_repository_1.MachineRepository,
+        task_repository_1.TaskRepository,
+        audit_log_repository_1.AuditLogRepository])
+], AdminMachineController);
+//# sourceMappingURL=admin-machine.controller.js.map

package/dist/web/admin/admin-machine.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-machine.controller.js","sourceRoot":"","sources":["../../../src/web/admin/admin-machine.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAWwB;AACxB,mDAAgF;AAEhF,qEAAgE;AAChE,+DAA2D;AAC3D,2EAA8D;AAC9D,uFAAmF;AACnF,iFAA6E;AAC7E,2FAAsF;AAEtF,SAAS,mBAAmB,CAAC,OAAgB;IAC3C,MAAM,EAAE,kBAAkB,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;IAChD,OAAO,IAAI,CAAC;AACd,CAAC;AASM,IAAM,sBAAsB,8BAA5B,MAAM,sBAAsB;IAId;IACA;IACA;IALF,MAAM,GAAG,IAAI,eAAM,CAAC,wBAAsB,CAAC,IAAI,CAAC,CAAC;IAElE,YACmB,WAA8B,EAC9B,QAAwB,EACxB,YAAgC;QAFhC,gBAAW,GAAX,WAAW,CAAmB;QAC9B,aAAQ,GAAR,QAAQ,CAAgB;QACxB,iBAAY,GAAZ,YAAY,CAAoB;IAChD,CAAC;IAGJ,YAAY;QACV,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IAC7D,CAAC;IAGD,aAAa,CACE,EAAU,EACf,IAAgC,EACjC,GAAyB;QAEhC,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC9C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,0BAAiB,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;QAC3D,CAAC;QAED,MAAM,aAAa,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;QACxD,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACxD,MAAM,IAAI,4BAAmB,CAAC,mCAAmC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC/F,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YAE/C,6DAA6D;YAC7D,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC9B,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,EAAE;oBACpD,qBAAU,CAAC,QAAQ;oBACnB,qBAAU,CAAC,OAAO;iBACnB,CAAC,CAAC;gBACH,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;oBAC/B,IAAI,IAAI,CAAC,MAAM,KAAK,qBAAU,CAAC,QAAQ,EAAE,CAAC;wBACxC,sDAAsD;wBACtD,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,EAAE,qBAAU,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE;4BACpE,SAAS,EAAE,IAAI;yBAChB,CAAC,CAAC;wBACH,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,SAAS,IAAI,CAAC,EAAE,wBAAwB,OAAO,CAAC,IAAI,kBAAkB,CACvE,CAAC;oBACJ,CAAC;yBAAM,IAAI,IAAI,CAAC,MAAM,KAAK,qBAAU,CAAC,OAAO,EAAE,CAAC;wBAC9C,8DAA8D;wBAC9D,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,EAAE,qBAAU,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE;4BACpE,YAAY,EAAE,YAAY,OAAO,CAAC,IAAI,mCAAmC;4BACzE,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;yBACtC,CAAC,CAAC;wBACH,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,SAAS,IAAI,CAAC,EAAE,4BAA4B,OAAO,CAAC,IAAI,kBAAkB,CAC3E,CAAC;oBACJ,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC;YACvB,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG;YACpB,MAAM,EAAE,gBAAgB;YACxB,QAAQ,EAAE,WAAW,EAAE,EAAE;YACzB,MAAM,EAAE,oBAAoB,OAAO,CAAC,IAAI,GAAG;SAC5C,CAAC,CAAC;QAEH,OAAO,mBAAmB,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAE,CAAC,CAAC;IAC7D,CAAC;CACF,CAAA;AAvEY,wDAAsB;AAUjC;IADC,IAAA,YAAG,GAAE;;;;0DAGL;AAGD;IADC,IAAA,YAAG,EAAC,KAAK,CAAC;IAER,WAAA,IAAA,cAAK,EAAC,IAAI,CAAC,CAAA;IACX,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,YAAG,GAAE,CAAA;;;;2DAoDP;iCAtEU,sBAAsB;IAHlC,IAAA,mBAAU,EAAC,oBAAoB,CAAC;IAChC,IAAA,kBAAS,EAAC,6BAAY,EAAE,wBAAU,CAAC;IACnC,IAAA,uBAAK,EAAC,wBAAa,CAAC,KAAK,CAAC;qCAKO,sCAAiB;QACpB,gCAAc;QACV,yCAAkB;GANxC,sBAAsB,CAuElC"}

package/dist/web/admin/admin-project.controller.d.ts

@@ -0,0 +1,45 @@
+import type { CreateProjectRequest } from '@overlordai/protocol';
+import { ProjectRepository } from '../../database/repositories/project.repository';
+import { ProjectMemberRepository } from '../../database/repositories/project-member.repository';
+import { AuditLogRepository } from '../../database/repositories/audit-log.repository';
+interface AuthenticatedRequest {
+    user: {
+        sub: number;
+        name: string;
+        role: string;
+    };
+}
+export declare class AdminProjectController {
+    private readonly projectRepo;
+    private readonly projectMemberRepo;
+    private readonly auditLogRepo;
+    constructor(projectRepo: ProjectRepository, projectMemberRepo: ProjectMemberRepository, auditLogRepo: AuditLogRepository);
+    listProjects(): import("@overlordai/protocol").Project[];
+    createProject(body: CreateProjectRequest, req: AuthenticatedRequest): import("@overlordai/protocol").Project;
+    updateProject(key: string, body: Record<string, unknown>, req: AuthenticatedRequest): import("@overlordai/protocol").Project | null;
+    deleteProject(key: string, req: AuthenticatedRequest): {
+        success: boolean;
+    };
+    listMembers(key: string): {
+        id: number;
+        projectKey: string;
+        developerId: number;
+        role: string;
+        createdAt: string;
+    }[];
+    addMember(key: string, body: {
+        developerId: number;
+        role?: string;
+    }, req: AuthenticatedRequest): {
+        id: number;
+        projectKey: string;
+        developerId: number;
+        role: string;
+        createdAt: string;
+    };
+    removeMember(key: string, developerId: string, req: AuthenticatedRequest): {
+        success: boolean;
+    };
+}
+export {};
+//# sourceMappingURL=admin-project.controller.d.ts.map