@overlordai/server 1.0.52 → 1.0.54

package/dist/web/project.controller.d.ts

@@ -3,21 +3,20 @@ import { ProjectMemberRepository } from '../database/repositories/project-member
 import { DeveloperRepository } from '../database/repositories/developer.repository';
 import { TaskRepository } from '../database/repositories/task.repository';
 import { AuditLogRepository } from '../database/repositories/audit-log.repository';
-interface AuthenticatedRequest {
-    user: {
-        sub: number;
-        name: string;
-        role: string;
-    };
-}
+import { CryptoService } from '../common/crypto.service';
+import { ProjectMemberService } from './project-member.service';
+import type { AuthenticatedRequest } from '../auth/authenticated-request';
 export declare class ProjectController {
     private readonly projectRepo;
     private readonly projectMemberRepo;
     private readonly developerRepo;
     private readonly taskRepo;
     private readonly auditLogRepo;
-    constructor(projectRepo: ProjectRepository, projectMemberRepo: ProjectMemberRepository, developerRepo: DeveloperRepository, taskRepo: TaskRepository, auditLogRepo: AuditLogRepository);
+    private readonly projectMemberService;
+    private readonly cryptoService;
+    constructor(projectRepo: ProjectRepository, projectMemberRepo: ProjectMemberRepository, developerRepo: DeveloperRepository, taskRepo: TaskRepository, auditLogRepo: AuditLogRepository, projectMemberService: ProjectMemberService, cryptoService: CryptoService);
     listProjects(): {
+        gitTokenMasked: boolean | null;
         taskCount: number;
         memberCount: number;
         members: {
@@ -26,6 +25,7 @@ export declare class ProjectController {
         }[];
         lastActivity: string | null;
         key: string;
+        createdAt: string;
         name: string;
         aliases: string[];
         repoUrl: string;
@@ -44,7 +44,7 @@ export declare class ProjectController {
         pipeline: string | null;
         ptyOutputFilter: number;
         isDefault: boolean;
-        createdAt: string;
+        defaultReviewers: string[];
     }[];
     listDevelopers(): {
         id: number;
@@ -52,30 +52,47 @@ export declare class ProjectController {
         gitEmail: string;
         role: import("@overlordai/protocol").DeveloperRole;
     }[];
-    getProject(key: string): import("@overlordai/protocol").Project;
-    updateProject(key: string, body: Record<string, unknown>, req: AuthenticatedRequest): import("@overlordai/protocol").Project | null;
-    listMembers(key: string): {
-        id: number;
-        projectKey: string;
-        developerId: number;
-        developerName: string | null;
-        role: string;
+    getProject(key: string): {
+        gitTokenMasked: string | null;
+        key: string;
         createdAt: string;
-    }[];
+        name: string;
+        aliases: string[];
+        repoUrl: string;
+        sshUrl: string | null;
+        gitPlatform: import("@overlordai/protocol").GitPlatform;
+        defaultBranch: string;
+        workspaceRoot: string | null;
+        setupCommands: string | null;
+        testCommand: string | null;
+        agentType: import("@overlordai/protocol").AgentType;
+        agentCommand: string | null;
+        agentEnv: string | null;
+        skillsPath: string | null;
+        allowedTools: string | null;
+        maxTurns: number;
+        pipeline: string | null;
+        ptyOutputFilter: number;
+        isDefault: boolean;
+        defaultReviewers: string[];
+    };
+    updateProject(key: string, body: Record<string, unknown>, req: AuthenticatedRequest): Omit<import("@overlordai/protocol").Project, "gitTokenEncrypted"> | null;
+    listMembers(key: string): import("../database/repositories/project-member.repository").ProjectMember[];
     addMember(key: string, body: {
         developerId: number;
         role?: string;
+    }, req: AuthenticatedRequest): import("../database/repositories/project-member.repository").ProjectMember;
+    removeMember(key: string, developerId: string, req: AuthenticatedRequest): {
+        success: boolean;
+    };
+    setGitToken(key: string, body: {
+        token: string;
     }, req: AuthenticatedRequest): {
-        id: number;
-        projectKey: string;
-        developerId: number;
-        developerName: string | null;
-        role: string;
-        createdAt: string;
+        success: boolean;
+        gitTokenMasked: string;
     };
-    removeMember(key: string, developerId: string, req: AuthenticatedRequest): {
+    deleteGitToken(key: string, req: AuthenticatedRequest): {
         success: boolean;
     };
 }
-export {};
 //# sourceMappingURL=project.controller.d.ts.map

package/dist/web/project.controller.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"project.controller.d.ts","sourceRoot":"","sources":["../../src/web/project.controller.ts"],"names":[],"mappings":"AAmBA,OAAO,EAAE,iBAAiB,EAAE,MAAM,6CAA6C,CAAC;AAChF,OAAO,EAAE,uBAAuB,EAAE,MAAM,oDAAoD,CAAC;AAC7F,OAAO,EAAE,mBAAmB,EAAE,MAAM,+CAA+C,CAAC;AACpF,OAAO,EAAE,cAAc,EAAE,MAAM,0CAA0C,CAAC;AAC1E,OAAO,EAAE,kBAAkB,EAAE,MAAM,+CAA+C,CAAC;AAEnF,UAAU,oBAAoB;IAC5B,IAAI,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CACnD;AAED,qBAEa,iBAAiB;IAE1B,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAClC,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,YAAY;gBAJZ,WAAW,EAAE,iBAAiB,EAC9B,iBAAiB,EAAE,uBAAuB,EAC1C,aAAa,EAAE,mBAAmB,EAClC,QAAQ,EAAE,cAAc,EACxB,YAAY,EAAE,kBAAkB;IAInD,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAkBZ,cAAc;;;;;;IAUd,UAAU,CAAe,GAAG,EAAE,MAAM;IAWpC,aAAa,CACU,GAAG,EAAE,MAAM,EACxB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,GAAG,EAAE,oBAAoB;IA2BlC,WAAW,CAAsB,GAAG,EAAE,MAAM;;;;;;;;IAW5C,SAAS,CACc,GAAG,EAAE,MAAM,EACxB,IAAI,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,EAC7C,GAAG,EAAE,oBAAoB;;;;;;;;IAwClC,YAAY,CACW,GAAG,EAAE,MAAM,EACV,WAAW,EAAE,MAAM,EAClC,GAAG,EAAE,oBAAoB;;;CAyBnC"}
+{"version":3,"file":"project.controller.d.ts","sourceRoot":"","sources":["../../src/web/project.controller.ts"],"names":[],"mappings":"AAoBA,OAAO,EAAE,iBAAiB,EAAE,MAAM,6CAA6C,CAAC;AAChF,OAAO,EAAE,uBAAuB,EAAE,MAAM,oDAAoD,CAAC;AAC7F,OAAO,EAAE,mBAAmB,EAAE,MAAM,+CAA+C,CAAC;AACpF,OAAO,EAAE,cAAc,EAAE,MAAM,0CAA0C,CAAC;AAC1E,OAAO,EAAE,kBAAkB,EAAE,MAAM,+CAA+C,CAAC;AACnF,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAGzD,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAE1E,qBAEa,iBAAiB;IAE1B,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAClC,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B,OAAO,CAAC,QAAQ,CAAC,oBAAoB;IACrC,OAAO,CAAC,QAAQ,CAAC,aAAa;gBANb,WAAW,EAAE,iBAAiB,EAC9B,iBAAiB,EAAE,uBAAuB,EAC1C,aAAa,EAAE,mBAAmB,EAClC,QAAQ,EAAE,cAAc,EACxB,YAAY,EAAE,kBAAkB,EAChC,oBAAoB,EAAE,oBAAoB,EAC1C,aAAa,EAAE,aAAa;IAK/C,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAmBZ,cAAc;;;;;;IAUd,UAAU,CAAe,GAAG,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;IAuBpC,aAAa,CACU,GAAG,EAAE,MAAM,EACxB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,GAAG,EAAE,oBAAoB;IAwBlC,WAAW,CAAsB,GAAG,EAAE,MAAM;IAO5C,SAAS,CACc,GAAG,EAAE,MAAM,EACxB,IAAI,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,EAC7C,GAAG,EAAE,oBAAoB;IAQlC,YAAY,CACW,GAAG,EAAE,MAAM,EACV,WAAW,EAAE,MAAM,EAClC,GAAG,EAAE,oBAAoB;;;IASlC,WAAW,CACY,GAAG,EAAE,MAAM,EACxB,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,EACxB,GAAG,EAAE,oBAAoB;;;;IA6BlC,cAAc,CACS,GAAG,EAAE,MAAM,EACzB,GAAG,EAAE,oBAAoB;;;CAkBnC"}

package/dist/web/project.controller.js

@@ -16,6 +16,7 @@ exports.ProjectController = void 0;
 const common_1 = require("@nestjs/common");
 const protocol_1 = require("@overlordai/protocol");
 const jwt_auth_guard_1 = require("../auth/guards/jwt-auth.guard");
+const rate_limit_guard_1 = require("../common/rate-limit.guard");
 const project_role_guard_1 = require("../auth/guards/project-role.guard");
 const project_roles_decorator_1 = require("../auth/decorators/project-roles.decorator");
 const project_repository_1 = require("../database/repositories/project.repository");
@@ -23,18 +24,26 @@ const project_member_repository_1 = require("../database/repositories/project-me
 const developer_repository_1 = require("../database/repositories/developer.repository");
 const task_repository_1 = require("../database/repositories/task.repository");
 const audit_log_repository_1 = require("../database/repositories/audit-log.repository");
+const crypto_service_1 = require("../common/crypto.service");
+const string_utils_1 = require("../common/string-utils");
+const project_validation_1 = require("../common/project-validation");
+const project_member_service_1 = require("./project-member.service");
 let ProjectController = class ProjectController {
     projectRepo;
     projectMemberRepo;
     developerRepo;
     taskRepo;
     auditLogRepo;
-    constructor(projectRepo, projectMemberRepo, developerRepo, taskRepo, auditLogRepo) {
+    projectMemberService;
+    cryptoService;
+    constructor(projectRepo, projectMemberRepo, developerRepo, taskRepo, auditLogRepo, projectMemberService, cryptoService) {
         this.projectRepo = projectRepo;
         this.projectMemberRepo = projectMemberRepo;
         this.developerRepo = developerRepo;
         this.taskRepo = taskRepo;
         this.auditLogRepo = auditLogRepo;
+        this.projectMemberService = projectMemberService;
+        this.cryptoService = cryptoService;
     }
     listProjects() {
         const projects = this.projectRepo.findAll();
@@ -43,7 +52,8 @@ let ProjectController = class ProjectController {
         const lastActivityMap = this.taskRepo.lastActivityByProject();
         const memberCountMap = this.projectMemberRepo.countByProject();
         return projects.map((p) => ({
-            ...p,
+            ...project_repository_1.ProjectRepository.stripSecrets(p),
+            gitTokenMasked: p.gitTokenEncrypted ? true : null,
             taskCount: taskCountMap.get(p.key) ?? 0,
             memberCount: memberCountMap.get(p.key) ?? 0,
             members: memberMap.get(p.key) ?? [],
@@ -63,19 +73,25 @@ let ProjectController = class ProjectController {
         if (!project) {
             throw new common_1.NotFoundException(`Project '${key}' not found`);
         }
-        return project;
+        // Mask git token — never return the encrypted blob to the frontend
+        let gitTokenMasked = null;
+        if (project.gitTokenEncrypted) {
+            try {
+                const plainToken = this.cryptoService.decryptAes(project.gitTokenEncrypted);
+                gitTokenMasked = (0, string_utils_1.maskToken)(plainToken);
+            }
+            catch {
+                gitTokenMasked = '●●●●●●●●';
+            }
+        }
+        return { ...project_repository_1.ProjectRepository.stripSecrets(project), gitTokenMasked };
     }
     updateProject(key, body, req) {
         const project = this.projectRepo.findByKey(key);
         if (!project) {
             throw new common_1.NotFoundException(`Project '${key}' not found`);
         }
-        const allowed = ['name', 'repoUrl', 'sshUrl', 'defaultBranch', 'pipeline', 'setupCommands', 'agentType', 'agentEnv', 'agentCommand', 'workspaceRoot', 'testCommand', 'skillsPath', 'allowedTools', 'maxTurns', 'ptyOutputFilter', 'isDefault', 'aliases', 'gitPlatform'];
-        const sanitized = {};
-        for (const field of allowed) {
-            if (field in body)
-                sanitized[field] = body[field];
-        }
+        const sanitized = (0, project_validation_1.validateProjectUpdate)(body);
         this.projectRepo.update(key, sanitized);
         this.auditLogRepo.create({
             userId: req.user.sub,
@@ -83,63 +99,47 @@ let ProjectController = class ProjectController {
             resource: `project:${key}`,
             detail: `Updated project '${key}'`,
         });
-        return this.projectRepo.findByKey(key);
+        const updated = this.projectRepo.findByKey(key);
+        return updated ? project_repository_1.ProjectRepository.stripSecrets(updated) : null;
     }
     listMembers(key) {
-        const project = this.projectRepo.findByKey(key);
-        if (!project) {
-            throw new common_1.NotFoundException(`Project '${key}' not found`);
-        }
-        return this.projectMemberRepo.findByProject(key);
+        return this.projectMemberService.listMembers(key);
     }
     addMember(key, body, req) {
-        if (typeof body.developerId !== 'number' || !Number.isInteger(body.developerId) || body.developerId < 1) {
-            throw new common_1.BadRequestException('developerId must be a positive integer');
-        }
-        const validRoles = [protocol_1.ProjectRole.MEMBER, protocol_1.ProjectRole.MAINTAINER];
-        const role = body.role ?? protocol_1.ProjectRole.MEMBER;
-        if (!validRoles.includes(role)) {
-            throw new common_1.BadRequestException(`role must be one of: ${validRoles.join(', ')}`);
-        }
+        return this.projectMemberService.addMember(key, body.developerId, body.role, req.user.sub);
+    }
+    removeMember(key, developerId, req) {
+        return this.projectMemberService.removeMember(key, developerId, req.user.sub);
+    }
+    setGitToken(key, body, req) {
         const project = this.projectRepo.findByKey(key);
         if (!project) {
             throw new common_1.NotFoundException(`Project '${key}' not found`);
         }
-        const existing = this.projectMemberRepo.findByProjectAndDeveloper(key, body.developerId);
-        if (existing) {
-            throw new common_1.ConflictException('Developer is already a member of this project');
+        if (!body.token || typeof body.token !== 'string' || body.token.trim().length === 0) {
+            throw new common_1.BadRequestException('token is required and must be a non-empty string');
         }
-        const member = this.projectMemberRepo.create({
-            projectKey: key,
-            developerId: body.developerId,
-            role,
-        });
+        const encrypted = this.cryptoService.encryptAes(body.token.trim());
+        this.projectRepo.update(key, { gitTokenEncrypted: encrypted });
         this.auditLogRepo.create({
             userId: req.user.sub,
-            action: 'project_member_add',
+            action: 'project_update',
             resource: `project:${key}`,
-            detail: `Added developer #${body.developerId} as ${body.role ?? 'member'}`,
+            detail: `Set git token for project '${key}'`,
         });
-        return member;
+        return { success: true, gitTokenMasked: (0, string_utils_1.maskToken)(body.token.trim()) };
     }
-    removeMember(key, developerId, req) {
+    deleteGitToken(key, req) {
         const project = this.projectRepo.findByKey(key);
         if (!project) {
             throw new common_1.NotFoundException(`Project '${key}' not found`);
         }
-        const devId = parseInt(developerId, 10);
-        if (!developerId || isNaN(devId) || devId < 1) {
-            throw new common_1.BadRequestException('developerId query parameter is required');
-        }
-        const deleted = this.projectMemberRepo.delete(key, devId);
-        if (!deleted) {
-            throw new common_1.NotFoundException('Member not found');
-        }
+        this.projectRepo.update(key, { gitTokenEncrypted: null });
         this.auditLogRepo.create({
             userId: req.user.sub,
-            action: 'project_member_remove',
+            action: 'project_update',
             resource: `project:${key}`,
-            detail: `Removed developer #${devId} from project`,
+            detail: `Cleared git token for project '${key}'`,
         });
         return { success: true };
     }
@@ -147,6 +147,7 @@ let ProjectController = class ProjectController {
 exports.ProjectController = ProjectController;
 __decorate([
     (0, common_1.Get)(),
+    (0, rate_limit_guard_1.RateLimit)({ limit: 60, windowMs: 60_000 }),
     __metadata("design:type", Function),
     __metadata("design:paramtypes", []),
     __metadata("design:returntype", void 0)
@@ -206,6 +207,30 @@ __decorate([
     __metadata("design:paramtypes", [String, String, Object]),
     __metadata("design:returntype", void 0)
 ], ProjectController.prototype, "removeMember", null);
+__decorate([
+    (0, common_1.Put)(':projectKey/git-token'),
+    (0, rate_limit_guard_1.RateLimit)({ limit: 10, windowMs: 60_000 }),
+    (0, common_1.UseGuards)(project_role_guard_1.ProjectRoleGuard),
+    (0, project_roles_decorator_1.ProjectRoles)(protocol_1.ProjectRole.MAINTAINER),
+    __param(0, (0, common_1.Param)('projectKey')),
+    __param(1, (0, common_1.Body)()),
+    __param(2, (0, common_1.Req)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object, Object]),
+    __metadata("design:returntype", void 0)
+], ProjectController.prototype, "setGitToken", null);
+__decorate([
+    (0, common_1.Delete)(':projectKey/git-token'),
+    (0, rate_limit_guard_1.RateLimit)({ limit: 10, windowMs: 60_000 }),
+    (0, common_1.HttpCode)(200),
+    (0, common_1.UseGuards)(project_role_guard_1.ProjectRoleGuard),
+    (0, project_roles_decorator_1.ProjectRoles)(protocol_1.ProjectRole.MAINTAINER),
+    __param(0, (0, common_1.Param)('projectKey')),
+    __param(1, (0, common_1.Req)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object]),
+    __metadata("design:returntype", void 0)
+], ProjectController.prototype, "deleteGitToken", null);
 exports.ProjectController = ProjectController = __decorate([
     (0, common_1.Controller)('api/web/projects'),
     (0, common_1.UseGuards)(jwt_auth_guard_1.JwtAuthGuard),
@@ -213,6 +238,8 @@ exports.ProjectController = ProjectController = __decorate([
         project_member_repository_1.ProjectMemberRepository,
         developer_repository_1.DeveloperRepository,
         task_repository_1.TaskRepository,
-        audit_log_repository_1.AuditLogRepository])
+        audit_log_repository_1.AuditLogRepository,
+        project_member_service_1.ProjectMemberService,
+        crypto_service_1.CryptoService])
 ], ProjectController);
 //# sourceMappingURL=project.controller.js.map

package/dist/web/project.controller.js.map

@@ -1 +1 @@
-{"version":3,"file":"project.controller.js","sourceRoot":"","sources":["../../src/web/project.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAcwB;AACxB,mDAAmD;AACnD,kEAA6D;AAC7D,0EAAqE;AACrE,wFAA0E;AAC1E,oFAAgF;AAChF,kGAA6F;AAC7F,wFAAoF;AACpF,8EAA0E;AAC1E,wFAAmF;AAQ5E,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;IAET;IACA;IACA;IACA;IACA;IALnB,YACmB,WAA8B,EAC9B,iBAA0C,EAC1C,aAAkC,EAClC,QAAwB,EACxB,YAAgC;QAJhC,gBAAW,GAAX,WAAW,CAAmB;QAC9B,sBAAiB,GAAjB,iBAAiB,CAAyB;QAC1C,kBAAa,GAAb,aAAa,CAAqB;QAClC,aAAQ,GAAR,QAAQ,CAAgB;QACxB,iBAAY,GAAZ,YAAY,CAAoB;IAChD,CAAC;IAGJ,YAAY;QACV,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;QAE5C,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC;QACpD,MAAM,SAAS,GAAG,IAAI,CAAC,iBAAiB,CAAC,2BAA2B,CAAC,CAAC,CAAC,CAAC;QACxE,MAAM,eAAe,GAAG,IAAI,CAAC,QAAQ,CAAC,qBAAqB,EAAE,CAAC;QAC9D,MAAM,cAAc,GAAG,IAAI,CAAC,iBAAiB,CAAC,cAAc,EAAE,CAAC;QAE/D,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC1B,GAAG,CAAC;YACJ,SAAS,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;YACvC,WAAW,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;YAC3C,OAAO,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE;YACnC,YAAY,EAAE,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,IAAI;SACjD,CAAC,CAAC,CAAC;IACN,CAAC;IAGD,cAAc;QACZ,OAAO,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC9C,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,IAAI,EAAE,CAAC,CAAC,IAAI;SACb,CAAC,CAAC,CAAC;IACN,CAAC;IAGD,UAAU,CAAe,GAAW;QAClC,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAChD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,0BAAiB,CAAC,YAAY,GAAG,aAAa,CAAC,CAAC;QAC5D,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAKD,aAAa,CACU,GAAW,EACxB,IAA6B,EAC9B,GAAyB;QAEhC,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAChD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,0BAAiB,CAAC,YAAY,GAAG,aAAa,CAAC,CAAC;QAC5D,CAAC;QAED,MAAM,OAAO,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,eAAe,EAAE,UAAU,EAAE,eAAe,EAAE,WAAW,EAAE,UAAU,EAAE,cAAc,EAAE,eAAe,EAAE,aAAa,EAAE,YAAY,EAAE,cAAc,EAAE,UAAU,EAAE,iBAAiB,EAAE,WAAW,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;QACzQ,MAAM,SAAS,GAA4B,EAAE,CAAC;QAC9C,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,KAAK,IAAI,IAAI;gBAAE,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QACpD,CAAC;QACD,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAExC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC;YACvB,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG;YACpB,MAAM,EAAE,gBAAgB;YACxB,QAAQ,EAAE,WAAW,GAAG,EAAE;YAC1B,MAAM,EAAE,oBAAoB,GAAG,GAAG;SACnC,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACzC,CAAC;IAKD,WAAW,CAAsB,GAAW;QAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAChD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,0BAAiB,CAAC,YAAY,GAAG,aAAa,CAAC,CAAC;QAC5D,CAAC;QACD,OAAO,IAAI,CAAC,iBAAiB,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;IACnD,CAAC;IAKD,SAAS,CACc,GAAW,EACxB,IAA4C,EAC7C,GAAyB;QAEhC,IAAI,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,WAAW,GAAG,CAAC,EAAE,CAAC;YACxG,MAAM,IAAI,4BAAmB,CAAC,wCAAwC,CAAC,CAAC;QAC1E,CAAC;QACD,MAAM,UAAU,GAAG,CAAC,sBAAW,CAAC,MAAM,EAAE,sBAAW,CAAC,UAAU,CAAC,CAAC;QAChE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,sBAAW,CAAC,MAAM,CAAC;QAC7C,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAmB,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,4BAAmB,CAAC,wBAAwB,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjF,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAChD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,0BAAiB,CAAC,YAAY,GAAG,aAAa,CAAC,CAAC;QAC5D,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC,yBAAyB,CAAC,GAAG,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QACzF,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,IAAI,0BAAiB,CAAC,+CAA+C,CAAC,CAAC;QAC/E,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC;YAC3C,UAAU,EAAE,GAAG;YACf,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,IAAI;SACL,CAAC,CAAC;QAEH,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC;YACvB,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG;YACpB,MAAM,EAAE,oBAAoB;YAC5B,QAAQ,EAAE,WAAW,GAAG,EAAE;YAC1B,MAAM,EAAE,oBAAoB,IAAI,CAAC,WAAW,OAAO,IAAI,CAAC,IAAI,IAAI,QAAQ,EAAE;SAC3E,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC;IAChB,CAAC;IAKD,YAAY,CACW,GAAW,EACV,WAAmB,EAClC,GAAyB;QAEhC,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAChD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,0BAAiB,CAAC,YAAY,GAAG,aAAa,CAAC,CAAC;QAC5D,CAAC;QAED,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QACxC,IAAI,CAAC,WAAW,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,4BAAmB,CAAC,yCAAyC,CAAC,CAAC;QAC3E,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC1D,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,0BAAiB,CAAC,kBAAkB,CAAC,CAAC;QAClD,CAAC;QAED,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC;YACvB,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG;YACpB,MAAM,EAAE,uBAAuB;YAC/B,QAAQ,EAAE,WAAW,GAAG,EAAE;YAC1B,MAAM,EAAE,sBAAsB,KAAK,eAAe;SACnD,CAAC,CAAC;QAEH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;CACF,CAAA;AAjKY,8CAAiB;AAU5B;IADC,IAAA,YAAG,GAAE;;;;qDAgBL;AAGD;IADC,IAAA,YAAG,EAAC,cAAc,CAAC;;;;uDAQnB;AAGD;IADC,IAAA,YAAG,EAAC,MAAM,CAAC;IACA,WAAA,IAAA,cAAK,EAAC,KAAK,CAAC,CAAA;;;;mDAMvB;AAKD;IAHC,IAAA,YAAG,EAAC,aAAa,CAAC;IAClB,IAAA,kBAAS,EAAC,qCAAgB,CAAC;IAC3B,IAAA,sCAAY,EAAC,sBAAW,CAAC,UAAU,CAAC;IAElC,WAAA,IAAA,cAAK,EAAC,YAAY,CAAC,CAAA;IACnB,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,YAAG,GAAE,CAAA;;;;sDAsBP;AAKD;IAHC,IAAA,YAAG,EAAC,qBAAqB,CAAC;IAC1B,IAAA,kBAAS,EAAC,qCAAgB,CAAC;IAC3B,IAAA,sCAAY,EAAC,sBAAW,CAAC,UAAU,CAAC;IACxB,WAAA,IAAA,cAAK,EAAC,YAAY,CAAC,CAAA;;;;oDAM/B;AAKD;IAHC,IAAA,aAAI,EAAC,qBAAqB,CAAC;IAC3B,IAAA,kBAAS,EAAC,qCAAgB,CAAC;IAC3B,IAAA,sCAAY,EAAC,sBAAW,CAAC,UAAU,CAAC;IAElC,WAAA,IAAA,cAAK,EAAC,YAAY,CAAC,CAAA;IACnB,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,YAAG,GAAE,CAAA;;;;kDAmCP;AAKD;IAHC,IAAA,eAAM,EAAC,qBAAqB,CAAC;IAC7B,IAAA,kBAAS,EAAC,qCAAgB,CAAC;IAC3B,IAAA,sCAAY,EAAC,sBAAW,CAAC,UAAU,CAAC;IAElC,WAAA,IAAA,cAAK,EAAC,YAAY,CAAC,CAAA;IACnB,WAAA,IAAA,cAAK,EAAC,aAAa,CAAC,CAAA;IACpB,WAAA,IAAA,YAAG,GAAE,CAAA;;;;qDAwBP;4BAhKU,iBAAiB;IAF7B,IAAA,mBAAU,EAAC,kBAAkB,CAAC;IAC9B,IAAA,kBAAS,EAAC,6BAAY,CAAC;qCAGU,sCAAiB;QACX,mDAAuB;QAC3B,0CAAmB;QACxB,gCAAc;QACV,yCAAkB;GANxC,iBAAiB,CAiK7B"}
+{"version":3,"file":"project.controller.js","sourceRoot":"","sources":["../../src/web/project.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAcwB;AACxB,mDAAmD;AACnD,kEAA6D;AAC7D,iEAAuD;AACvD,0EAAqE;AACrE,wFAA0E;AAC1E,oFAAgF;AAChF,kGAA6F;AAC7F,wFAAoF;AACpF,8EAA0E;AAC1E,wFAAmF;AACnF,6DAAyD;AACzD,yDAAmD;AACnD,qEAAqE;AACrE,qEAAgE;AAKzD,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;IAET;IACA;IACA;IACA;IACA;IACA;IACA;IAPnB,YACmB,WAA8B,EAC9B,iBAA0C,EAC1C,aAAkC,EAClC,QAAwB,EACxB,YAAgC,EAChC,oBAA0C,EAC1C,aAA4B;QAN5B,gBAAW,GAAX,WAAW,CAAmB;QAC9B,sBAAiB,GAAjB,iBAAiB,CAAyB;QAC1C,kBAAa,GAAb,aAAa,CAAqB;QAClC,aAAQ,GAAR,QAAQ,CAAgB;QACxB,iBAAY,GAAZ,YAAY,CAAoB;QAChC,yBAAoB,GAApB,oBAAoB,CAAsB;QAC1C,kBAAa,GAAb,aAAa,CAAe;IAC5C,CAAC;IAIJ,YAAY;QACV,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;QAE5C,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC;QACpD,MAAM,SAAS,GAAG,IAAI,CAAC,iBAAiB,CAAC,2BAA2B,CAAC,CAAC,CAAC,CAAC;QACxE,MAAM,eAAe,GAAG,IAAI,CAAC,QAAQ,CAAC,qBAAqB,EAAE,CAAC;QAC9D,MAAM,cAAc,GAAG,IAAI,CAAC,iBAAiB,CAAC,cAAc,EAAE,CAAC;QAE/D,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC1B,GAAG,sCAAiB,CAAC,YAAY,CAAC,CAAC,CAAC;YACpC,cAAc,EAAE,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;YACjD,SAAS,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;YACvC,WAAW,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;YAC3C,OAAO,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE;YACnC,YAAY,EAAE,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,IAAI;SACjD,CAAC,CAAC,CAAC;IACN,CAAC;IAGD,cAAc;QACZ,OAAO,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC9C,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,IAAI,EAAE,CAAC,CAAC,IAAI;SACb,CAAC,CAAC,CAAC;IACN,CAAC;IAGD,UAAU,CAAe,GAAW;QAClC,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAChD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,0BAAiB,CAAC,YAAY,GAAG,aAAa,CAAC,CAAC;QAC5D,CAAC;QAED,mEAAmE;QACnE,IAAI,cAAc,GAAkB,IAAI,CAAC;QACzC,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC;YAC9B,IAAI,CAAC;gBACH,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;gBAC5E,cAAc,GAAG,IAAA,wBAAS,EAAC,UAAU,CAAC,CAAC;YACzC,CAAC;YAAC,MAAM,CAAC;gBACP,cAAc,GAAG,UAAU,CAAC;YAC9B,CAAC;QACH,CAAC;QAED,OAAO,EAAE,GAAG,sCAAiB,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,cAAc,EAAE,CAAC;IACxE,CAAC;IAKD,aAAa,CACU,GAAW,EACxB,IAA6B,EAC9B,GAAyB;QAEhC,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAChD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,0BAAiB,CAAC,YAAY,GAAG,aAAa,CAAC,CAAC;QAC5D,CAAC;QAED,MAAM,SAAS,GAAG,IAAA,0CAAqB,EAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAExC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC;YACvB,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG;YACpB,MAAM,EAAE,gBAAgB;YACxB,QAAQ,EAAE,WAAW,GAAG,EAAE;YAC1B,MAAM,EAAE,oBAAoB,GAAG,GAAG;SACnC,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAChD,OAAO,OAAO,CAAC,CAAC,CAAC,sCAAiB,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAClE,CAAC;IAKD,WAAW,CAAsB,GAAW;QAC1C,OAAO,IAAI,CAAC,oBAAoB,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACpD,CAAC;IAKD,SAAS,CACc,GAAW,EACxB,IAA4C,EAC7C,GAAyB;QAEhC,OAAO,IAAI,CAAC,oBAAoB,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC7F,CAAC;IAKD,YAAY,CACW,GAAW,EACV,WAAmB,EAClC,GAAyB;QAEhC,OAAO,IAAI,CAAC,oBAAoB,CAAC,YAAY,CAAC,GAAG,EAAE,WAAW,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChF,CAAC;IAMD,WAAW,CACY,GAAW,EACxB,IAAuB,EACxB,GAAyB;QAEhC,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAChD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,0BAAiB,CAAC,YAAY,GAAG,aAAa,CAAC,CAAC;QAC5D,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpF,MAAM,IAAI,4BAAmB,CAAC,kDAAkD,CAAC,CAAC;QACpF,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QACnE,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,iBAAiB,EAAE,SAAS,EAAE,CAAC,CAAC;QAE/D,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC;YACvB,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG;YACpB,MAAM,EAAE,gBAAgB;YACxB,QAAQ,EAAE,WAAW,GAAG,EAAE;YAC1B,MAAM,EAAE,8BAA8B,GAAG,GAAG;SAC7C,CAAC,CAAC;QAEH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,IAAA,wBAAS,EAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;IACzE,CAAC;IAOD,cAAc,CACS,GAAW,EACzB,GAAyB;QAEhC,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAChD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,0BAAiB,CAAC,YAAY,GAAG,aAAa,CAAC,CAAC;QAC5D,CAAC;QAED,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC;QAE1D,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC;YACvB,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG;YACpB,MAAM,EAAE,gBAAgB;YACxB,QAAQ,EAAE,WAAW,GAAG,EAAE;YAC1B,MAAM,EAAE,kCAAkC,GAAG,GAAG;SACjD,CAAC,CAAC;QAEH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;CACF,CAAA;AA9KY,8CAAiB;AAa5B;IAFC,IAAA,YAAG,GAAE;IACL,IAAA,4BAAS,EAAC,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;;;;qDAiB1C;AAGD;IADC,IAAA,YAAG,EAAC,cAAc,CAAC;;;;uDAQnB;AAGD;IADC,IAAA,YAAG,EAAC,MAAM,CAAC;IACA,WAAA,IAAA,cAAK,EAAC,KAAK,CAAC,CAAA;;;;mDAkBvB;AAKD;IAHC,IAAA,YAAG,EAAC,aAAa,CAAC;IAClB,IAAA,kBAAS,EAAC,qCAAgB,CAAC;IAC3B,IAAA,sCAAY,EAAC,sBAAW,CAAC,UAAU,CAAC;IAElC,WAAA,IAAA,cAAK,EAAC,YAAY,CAAC,CAAA;IACnB,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,YAAG,GAAE,CAAA;;;;sDAmBP;AAKD;IAHC,IAAA,YAAG,EAAC,qBAAqB,CAAC;IAC1B,IAAA,kBAAS,EAAC,qCAAgB,CAAC;IAC3B,IAAA,sCAAY,EAAC,sBAAW,CAAC,UAAU,CAAC;IACxB,WAAA,IAAA,cAAK,EAAC,YAAY,CAAC,CAAA;;;;oDAE/B;AAKD;IAHC,IAAA,aAAI,EAAC,qBAAqB,CAAC;IAC3B,IAAA,kBAAS,EAAC,qCAAgB,CAAC;IAC3B,IAAA,sCAAY,EAAC,sBAAW,CAAC,UAAU,CAAC;IAElC,WAAA,IAAA,cAAK,EAAC,YAAY,CAAC,CAAA;IACnB,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,YAAG,GAAE,CAAA;;;;kDAGP;AAKD;IAHC,IAAA,eAAM,EAAC,qBAAqB,CAAC;IAC7B,IAAA,kBAAS,EAAC,qCAAgB,CAAC;IAC3B,IAAA,sCAAY,EAAC,sBAAW,CAAC,UAAU,CAAC;IAElC,WAAA,IAAA,cAAK,EAAC,YAAY,CAAC,CAAA;IACnB,WAAA,IAAA,cAAK,EAAC,aAAa,CAAC,CAAA;IACpB,WAAA,IAAA,YAAG,GAAE,CAAA;;;;qDAGP;AAMD;IAJC,IAAA,YAAG,EAAC,uBAAuB,CAAC;IAC5B,IAAA,4BAAS,EAAC,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IAC1C,IAAA,kBAAS,EAAC,qCAAgB,CAAC;IAC3B,IAAA,sCAAY,EAAC,sBAAW,CAAC,UAAU,CAAC;IAElC,WAAA,IAAA,cAAK,EAAC,YAAY,CAAC,CAAA;IACnB,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,YAAG,GAAE,CAAA;;;;oDAsBP;AAOD;IALC,IAAA,eAAM,EAAC,uBAAuB,CAAC;IAC/B,IAAA,4BAAS,EAAC,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IAC1C,IAAA,iBAAQ,EAAC,GAAG,CAAC;IACb,IAAA,kBAAS,EAAC,qCAAgB,CAAC;IAC3B,IAAA,sCAAY,EAAC,sBAAW,CAAC,UAAU,CAAC;IAElC,WAAA,IAAA,cAAK,EAAC,YAAY,CAAC,CAAA;IACnB,WAAA,IAAA,YAAG,GAAE,CAAA;;;;uDAiBP;4BA7KU,iBAAiB;IAF7B,IAAA,mBAAU,EAAC,kBAAkB,CAAC;IAC9B,IAAA,kBAAS,EAAC,6BAAY,CAAC;qCAGU,sCAAiB;QACX,mDAAuB;QAC3B,0CAAmB;QACxB,gCAAc;QACV,yCAAkB;QACV,6CAAoB;QAC3B,8BAAa;GARpC,iBAAiB,CA8K7B"}

package/dist/web/pty.gateway.d.ts

@@ -5,19 +5,25 @@ import { AuthService } from '../auth/auth.service';
 import { PtyRelayService } from '../dispatcher/pty-relay.service';
 import { RedisService } from '../redis/redis.service';
 import { DeveloperRepository } from '../database/repositories/developer.repository';
-import { MachineRepository } from '../database/repositories/machine.repository';
+import { WorkerRepository } from '../database/repositories/worker.repository';
 import { TaskRepository } from '../database/repositories/task.repository';
 export declare class PtyGateway implements OnGatewayConnection, OnGatewayDisconnect {
     private readonly authService;
     private readonly ptyRelayService;
     private readonly redis;
     private readonly developerRepo;
-    private readonly machineRepo;
+    private readonly workerRepo;
     private readonly taskRepo;
     private readonly logger;
     private readonly authedSockets;
     private readonly AUTH_TIMEOUT_MS;
-    constructor(authService: AuthService, ptyRelayService: PtyRelayService, redis: RedisService, developerRepo: DeveloperRepository, machineRepo: MachineRepository, taskRepo: TaskRepository);
+    private readonly CACHE_TTL_MS;
+    private readonly taskCache;
+    private readonly developerCache;
+    private getOrFetchCached;
+    private getCachedTask;
+    private getCachedDeveloper;
+    constructor(authService: AuthService, ptyRelayService: PtyRelayService, redis: RedisService, developerRepo: DeveloperRepository, workerRepo: WorkerRepository, taskRepo: TaskRepository);
     handleConnection(client: WebSocket, req: IncomingMessage): void;
     handleDisconnect(client: WebSocket): void;
     private handleAuth;

package/dist/web/pty.gateway.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pty.gateway.d.ts","sourceRoot":"","sources":["../../src/web/pty.gateway.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,mBAAmB,EACnB,mBAAmB,EACpB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AAc/B,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,+CAA+C,CAAC;AACpF,OAAO,EAAE,iBAAiB,EAAE,MAAM,6CAA6C,CAAC;AAChF,OAAO,EAAE,cAAc,EAAE,MAAM,0CAA0C,CAAC;AAoB1E,qBACa,UAAW,YAAW,mBAAmB,EAAE,mBAAmB;IAMvE,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,eAAe;IAChC,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAV3B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA+B;IACtD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAgD;IAC9E,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAU;gBAGvB,WAAW,EAAE,WAAW,EACxB,eAAe,EAAE,eAAe,EAChC,KAAK,EAAE,YAAY,EACnB,aAAa,EAAE,mBAAmB,EAClC,WAAW,EAAE,iBAAiB,EAC9B,QAAQ,EAAE,cAAc;IAG3C,gBAAgB,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,eAAe,GAAG,IAAI;IA4E/D,gBAAgB,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI;YA2B3B,UAAU;IAmKxB,OAAO,CAAC,cAAc;IAwCtB,OAAO,CAAC,YAAY;IAkBpB,OAAO,CAAC,qBAAqB;IAwB7B,OAAO,CAAC,mBAAmB;IAoB3B,OAAO,CAAC,qBAAqB;YASf,iBAAiB;IAyC/B,OAAO,CAAC,aAAa;CAOtB"}
+{"version":3,"file":"pty.gateway.d.ts","sourceRoot":"","sources":["../../src/web/pty.gateway.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,mBAAmB,EACnB,mBAAmB,EACpB,MAAM,oBAAoB,CAAC;AAG5B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AAc/B,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,+CAA+C,CAAC;AACpF,OAAO,EAAE,gBAAgB,EAAE,MAAM,4CAA4C,CAAC;AAC9E,OAAO,EAAE,cAAc,EAAE,MAAM,0CAA0C,CAAC;AAyB1E,qBACa,UAAW,YAAW,mBAAmB,EAAE,mBAAmB;IA0BvE,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,eAAe;IAChC,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,QAAQ;IA9B3B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA+B;IACtD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAgD;IAC9E,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAU;IAC1C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IACtC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAyE;IACnG,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA8E;IAE7G,OAAO,CAAC,gBAAgB;IASxB,OAAO,CAAC,aAAa;IAIrB,OAAO,CAAC,kBAAkB;gBAKP,WAAW,EAAE,WAAW,EACxB,eAAe,EAAE,eAAe,EAChC,KAAK,EAAE,YAAY,EACnB,aAAa,EAAE,mBAAmB,EAClC,UAAU,EAAE,gBAAgB,EAC5B,QAAQ,EAAE,cAAc;IAG3C,gBAAgB,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,eAAe,GAAG,IAAI;IA+E/D,gBAAgB,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI;YA2B3B,UAAU;IA6KxB,OAAO,CAAC,cAAc;IAwCtB,OAAO,CAAC,YAAY;IAkBpB,OAAO,CAAC,qBAAqB;IAwB7B,OAAO,CAAC,mBAAmB;IAoB3B,OAAO,CAAC,qBAAqB;YASf,iBAAiB;IAyC/B,OAAO,CAAC,aAAa;CAatB"}

package/dist/web/pty.gateway.js

@@ -13,31 +13,50 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.PtyGateway = void 0;
 const websockets_1 = require("@nestjs/websockets");
 const common_1 = require("@nestjs/common");
+const protocol_1 = require("@overlordai/protocol");
 const ws_1 = require("ws");
 const uuid_1 = require("uuid");
-const protocol_1 = require("@overlordai/protocol");
+const protocol_2 = require("@overlordai/protocol");
 const auth_service_1 = require("../auth/auth.service");
 const pty_relay_service_1 = require("../dispatcher/pty-relay.service");
 const redis_service_1 = require("../redis/redis.service");
 const developer_repository_1 = require("../database/repositories/developer.repository");
-const machine_repository_1 = require("../database/repositories/machine.repository");
+const worker_repository_1 = require("../database/repositories/worker.repository");
 const task_repository_1 = require("../database/repositories/task.repository");
 let PtyGateway = PtyGateway_1 = class PtyGateway {
     authService;
     ptyRelayService;
     redis;
     developerRepo;
-    machineRepo;
+    workerRepo;
     taskRepo;
     logger = new common_1.Logger(PtyGateway_1.name);
     authedSockets = new Map();
     AUTH_TIMEOUT_MS = 10_000;
-    constructor(authService, ptyRelayService, redis, developerRepo, machineRepo, taskRepo) {
+    CACHE_TTL_MS = 5_000;
+    taskCache = new Map();
+    developerCache = new Map();
+    getOrFetchCached(cache, key, fetcher) {
+        const now = Date.now();
+        const cached = cache.get(key);
+        if (cached && cached.expiresAt > now)
+            return cached.value;
+        const value = fetcher();
+        cache.set(key, { value, expiresAt: now + this.CACHE_TTL_MS });
+        return value;
+    }
+    getCachedTask(taskId) {
+        return this.getOrFetchCached(this.taskCache, taskId, () => this.taskRepo.findById(taskId));
+    }
+    getCachedDeveloper(developerId) {
+        return this.getOrFetchCached(this.developerCache, developerId, () => this.developerRepo.findById(developerId));
+    }
+    constructor(authService, ptyRelayService, redis, developerRepo, workerRepo, taskRepo) {
         this.authService = authService;
         this.ptyRelayService = ptyRelayService;
         this.redis = redis;
         this.developerRepo = developerRepo;
-        this.machineRepo = machineRepo;
+        this.workerRepo = workerRepo;
         this.taskRepo = taskRepo;
     }
     handleConnection(client, req) {
@@ -52,8 +71,9 @@ let PtyGateway = PtyGateway_1 = class PtyGateway {
         const isWorkerPath = url.startsWith('/api/workers/pty/');
         this.logger.debug(`New PTY connection for task ${taskId} (${isWorkerPath ? 'worker' : 'web'})`);
         // Set auth timeout
+        let authCompleted = false;
         const authTimeout = setTimeout(() => {
-            if (!this.authedSockets.has(client)) {
+            if (!authCompleted && !this.authedSockets.has(client)) {
                 this.logger.warn(`PTY auth timeout for task ${taskId}`);
                 client.close(4001, 'Auth timeout');
             }
@@ -76,6 +96,7 @@ let PtyGateway = PtyGateway_1 = class PtyGateway {
                     return;
                 }
                 clearTimeout(authTimeout);
+                authCompleted = true;
                 void this.handleAuth(client, frame, taskId, isWorkerPath, initialHandler);
                 return;
             }
@@ -116,14 +137,14 @@ let PtyGateway = PtyGateway_1 = class PtyGateway {
         }
     }
     async handleAuth(client, frame, taskId, isWorkerPath, initialHandler) {
-        const expectedAud = isWorkerPath ? 'worker' : 'web';
+        const expectedAud = isWorkerPath || Boolean(frame.workerJwt) ? 'worker' : 'web';
         // Validate channel token
         let channelPayload;
         try {
             channelPayload = await this.authService.validateChannelToken(frame.channelToken, expectedAud);
         }
-        catch {
-            this.logger.warn(`PTY auth failed: invalid channel token`);
+        catch (err) {
+            this.logger.warn(`PTY auth failed: ${(0, protocol_1.getErrorMessage)(err)}`);
             client.close(4004, 'Invalid channel token');
             return;
         }
@@ -134,8 +155,9 @@ let PtyGateway = PtyGateway_1 = class PtyGateway {
             return;
         }
         // Redis jti dedup (atomic SET ... EX ... NX)
+        // Keep jti key for 2x token lifetime to guard against clock skew
         const jtiKey = `pty_jti:${channelPayload.jti}`;
-        const result = await this.redis.getClient().set(jtiKey, '1', 'EX', 60, 'NX');
+        const result = await this.redis.getClient().set(jtiKey, '1', 'EX', protocol_2.CHANNEL_TOKEN_EXPIRY_SEC * 2, 'NX');
         if (result === null) {
             this.logger.warn(`PTY auth failed: channel token already consumed`);
             client.close(4006, 'Channel token already consumed');
@@ -147,7 +169,8 @@ let PtyGateway = PtyGateway_1 = class PtyGateway {
         let messageHandler = null;
         let webJti;
         let webTokenExp;
-        if (isWorkerPath) {
+        const isWorker = expectedAud === 'worker';
+        if (isWorker) {
             // Worker auth: validate Worker JWT
             const workerJwt = frame.workerJwt;
             if (!workerJwt) {
@@ -164,8 +187,8 @@ let PtyGateway = PtyGateway_1 = class PtyGateway {
                 client.close(4008, 'Invalid worker JWT');
                 return;
             }
-            // Look up task to get owner info and project filter setting
-            const task = this.taskRepo.findById(taskId);
+            // Look up task to get owner info and project filter setting (cached, 5s TTL)
+            const task = this.getCachedTask(taskId);
             const taskOwnerId = task?.developerId ?? 0;
             let projectFilterEnabled = false;
             if (task?.configSnapshot) {
@@ -224,7 +247,7 @@ let PtyGateway = PtyGateway_1 = class PtyGateway {
             revalidationTimer = setInterval(() => {
                 this.revalidateUserJwt(client, userPayload.sub, userPayload.jti, userPayload.exp)
                     .catch((err) => this.logger.error(`PTY revalidation error for developer ${userPayload.sub}`, err));
-            }, protocol_1.TOKEN_REVALIDATION_INTERVAL_MS);
+            }, protocol_2.TOKEN_REVALIDATION_INTERVAL_MS);
         }
         const authedSocket = {
             ws: client,
@@ -238,6 +261,11 @@ let PtyGateway = PtyGateway_1 = class PtyGateway {
             tokenExp: webTokenExp,
         };
         this.authedSockets.set(client, authedSocket);
+        // Notify PTY clients that auth succeeded before they flush any
+        // buffered frames such as the initial resize.
+        if (client.readyState === ws_1.WebSocket.OPEN) {
+            client.send(JSON.stringify({ type: 'auth_ok' }));
+        }
         this.logger.log(`PTY ${expectedAud} authenticated for task ${taskId} (${connectionId})`);
     }
     handlePtyFrame(authed, frame) {
@@ -329,19 +357,25 @@ let PtyGateway = PtyGateway_1 = class PtyGateway {
                 return;
             }
         }
-        // Check if user account is still active
-        const developer = this.developerRepo.findById(developerId);
-        if (!developer || developer.status !== 'active') {
+        // Check if user account is still active (cached, 5s TTL)
+        const developer = this.getCachedDeveloper(developerId);
+        if (!developer || developer.status !== protocol_2.DeveloperStatus.ACTIVE) {
             this.logger.warn(`PTY revalidation failed: developer ${developerId} inactive/not found`);
             client.close(4020, 'User inactive');
         }
     }
     extractTaskId(url) {
-        // Match /ws/pty/:taskId or /api/workers/pty/:taskId
-        const match = /\/(?:ws\/pty|api\/workers\/pty)\/(\d+)/.exec(url);
-        if (!match)
+        // Try query parameter first: /ws/pty?taskId=123
+        const queryMatch = /[?&]taskId=(\d+)/.exec(url);
+        if (queryMatch) {
+            const id = parseInt(queryMatch[1], 10);
+            return isNaN(id) ? null : id;
+        }
+        // Fallback: path parameter /ws/pty/:taskId or /api/workers/pty/:taskId
+        const pathMatch = /\/(?:ws\/pty|api\/workers\/pty)\/(\d+)/.exec(url);
+        if (!pathMatch)
             return null;
-        const id = parseInt(match[1], 10);
+        const id = parseInt(pathMatch[1], 10);
         return isNaN(id) ? null : id;
     }
 };
@@ -352,7 +386,7 @@ exports.PtyGateway = PtyGateway = PtyGateway_1 = __decorate([
         pty_relay_service_1.PtyRelayService,
         redis_service_1.RedisService,
         developer_repository_1.DeveloperRepository,
-        machine_repository_1.MachineRepository,
+        worker_repository_1.WorkerRepository,
         task_repository_1.TaskRepository])
 ], PtyGateway);
 //# sourceMappingURL=pty.gateway.js.map