@overlordai/server 1.0.53 → 1.0.55

package/dist/common/command-parser.js

@@ -0,0 +1,133 @@
+"use strict";
+/**
+ * Shared command parser for all bot adapters (Lark, Slack, etc.).
+ *
+ * Extracts a structured ParsedCommand from raw user text.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CommandParser = void 0;
+const KNOWN_PARAMS = new Set([
+    '--project',
+    '--on',
+    '--machine',
+    '--worker',
+    '--reviewer',
+]);
+class CommandParser {
+    /**
+     * Parse raw text into a structured command.
+     * Returns null if the text is empty or the command is unrecognised.
+     */
+    static parse(text) {
+        const trimmed = text.trim();
+        if (!trimmed)
+            return null;
+        const tokens = CommandParser.tokenize(trimmed);
+        if (tokens.length === 0)
+            return null;
+        const commandName = tokens[0].toLowerCase();
+        const rest = tokens.slice(1);
+        switch (commandName) {
+            case 'develop':
+            case 'dev':
+                return CommandParser.parseDevelop(rest);
+            case 'cancel':
+                return CommandParser.parseCancelOrRetry('CANCEL', rest);
+            case 'retry':
+                return CommandParser.parseCancelOrRetry('RETRY', rest);
+            default:
+                return null;
+        }
+    }
+    // ---------------------------------------------------------------------------
+    // Sub-parsers
+    // ---------------------------------------------------------------------------
+    static parseDevelop(tokens) {
+        let project;
+        let worker;
+        let reviewers;
+        const descriptionParts = [];
+        let i = 0;
+        while (i < tokens.length) {
+            const token = tokens[i];
+            if (token === '--project' || token === '--on') {
+                i++;
+                if (i < tokens.length) {
+                    project = tokens[i];
+                }
+                i++;
+                continue;
+            }
+            if (token === '--machine' || token === '--worker') {
+                i++;
+                if (i < tokens.length) {
+                    worker = tokens[i];
+                }
+                i++;
+                continue;
+            }
+            if (token === '--reviewer') {
+                i++;
+                reviewers = [];
+                // Collect values until next --param or end
+                while (i < tokens.length && !KNOWN_PARAMS.has(tokens[i])) {
+                    reviewers.push(tokens[i]);
+                    i++;
+                }
+                continue;
+            }
+            // Everything else is part of the description (including unknown --flags)
+            descriptionParts.push(token);
+            i++;
+        }
+        const description = descriptionParts.length > 0
+            ? descriptionParts.join(' ')
+            : undefined;
+        const result = { type: 'DEVELOP' };
+        if (description)
+            result.description = description;
+        if (project)
+            result.project = project;
+        if (worker)
+            result.worker = worker;
+        if (reviewers && reviewers.length > 0)
+            result.reviewers = reviewers;
+        return result;
+    }
+    static parseCancelOrRetry(type, tokens) {
+        const taskId = CommandParser.extractTaskId(tokens);
+        if (taskId === undefined)
+            return null;
+        return { type, taskId };
+    }
+    // ---------------------------------------------------------------------------
+    // Helpers
+    // ---------------------------------------------------------------------------
+    static extractTaskId(tokens) {
+        for (const token of tokens) {
+            const match = /^#?(\d+)$/.exec(token);
+            if (match) {
+                return parseInt(match[1], 10);
+            }
+        }
+        return undefined;
+    }
+    /**
+     * Tokenize input text, respecting single and double-quoted strings.
+     * Quotes are stripped from the resulting tokens.
+     */
+    static tokenize(text) {
+        const tokens = [];
+        const regex = /(?:"([^"]*)")|(?:'([^']*)')|(\S+)/g;
+        let match;
+        while ((match = regex.exec(text)) !== null) {
+            const value = match[1] ?? match[2] ?? match[3];
+            if (value !== undefined) {
+                tokens.push(value);
+            }
+        }
+        return tokens;
+    }
+}
+exports.CommandParser = CommandParser;
+//# sourceMappingURL=command-parser.js.map

package/dist/common/command-parser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-parser.js","sourceRoot":"","sources":["../../src/common/command-parser.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;AAWH,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC;IAC3B,WAAW;IACX,MAAM;IACN,WAAW;IACX,UAAU;IACV,YAAY;CACb,CAAC,CAAC;AAEH,MAAa,aAAa;IACxB;;;OAGG;IACH,MAAM,CAAC,KAAK,CAAC,IAAY;QACvB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAE1B,MAAM,MAAM,GAAG,aAAa,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC/C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAErC,MAAM,WAAW,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QAC5C,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAE7B,QAAQ,WAAW,EAAE,CAAC;YACpB,KAAK,SAAS,CAAC;YACf,KAAK,KAAK;gBACR,OAAO,aAAa,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;YAC1C,KAAK,QAAQ;gBACX,OAAO,aAAa,CAAC,kBAAkB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YAC1D,KAAK,OAAO;gBACV,OAAO,aAAa,CAAC,kBAAkB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YACzD;gBACE,OAAO,IAAI,CAAC;QAChB,CAAC;IACH,CAAC;IAED,8EAA8E;IAC9E,cAAc;IACd,8EAA8E;IAEtE,MAAM,CAAC,YAAY,CAAC,MAAgB;QAC1C,IAAI,OAA2B,CAAC;QAChC,IAAI,MAA0B,CAAC;QAC/B,IAAI,SAA+B,CAAC;QACpC,MAAM,gBAAgB,GAAa,EAAE,CAAC;QAEtC,IAAI,CAAC,GAAG,CAAC,CAAC;QACV,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;YACzB,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;YAExB,IAAI,KAAK,KAAK,WAAW,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;gBAC9C,CAAC,EAAE,CAAC;gBACJ,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;oBACtB,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;gBACtB,CAAC;gBACD,CAAC,EAAE,CAAC;gBACJ,SAAS;YACX,CAAC;YAED,IAAI,KAAK,KAAK,WAAW,IAAI,KAAK,KAAK,UAAU,EAAE,CAAC;gBAClD,CAAC,EAAE,CAAC;gBACJ,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;oBACtB,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;gBACrB,CAAC;gBACD,CAAC,EAAE,CAAC;gBACJ,SAAS;YACX,CAAC;YAED,IAAI,KAAK,KAAK,YAAY,EAAE,CAAC;gBAC3B,CAAC,EAAE,CAAC;gBACJ,SAAS,GAAG,EAAE,CAAC;gBACf,2CAA2C;gBAC3C,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBACzD,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;oBAC1B,CAAC,EAAE,CAAC;gBACN,CAAC;gBACD,SAAS;YACX,CAAC;YAED,yEAAyE;YACzE,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC7B,CAAC,EAAE,CAAC;QACN,CAAC;QAED,MAAM,WAAW,GACf,gBAAgB,CAAC,MAAM,GAAG,CAAC;YACzB,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC;YAC5B,CAAC,CAAC,SAAS,CAAC;QAEhB,MAAM,MAAM,GAAkB,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QAClD,IAAI,WAAW;YAAE,MAAM,CAAC,WAAW,GAAG,WAAW,CAAC;QAClD,IAAI,OAAO;YAAE,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC;QACtC,IAAI,MAAM;YAAE,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;QACnC,IAAI,SAAS,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,CAAC,SAAS,GAAG,SAAS,CAAC;QAEpE,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,MAAM,CAAC,kBAAkB,CAC/B,IAAwB,EACxB,MAAgB;QAEhB,MAAM,MAAM,GAAG,aAAa,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QACnD,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QACtC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC1B,CAAC;IAED,8EAA8E;IAC9E,UAAU;IACV,8EAA8E;IAEtE,MAAM,CAAC,aAAa,CAAC,MAAgB;QAC3C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACtC,IAAI,KAAK,EAAE,CAAC;gBACV,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAChC,CAAC;QACH,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;OAGG;IACK,MAAM,CAAC,QAAQ,CAAC,IAAY;QAClC,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,oCAAoC,CAAC;QACnD,IAAI,KAA6B,CAAC;QAElC,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAC3C,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC;YAC/C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;CACF;AAnID,sCAmIC"}

package/dist/common/config.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Shared server-side configuration constants derived from environment variables.
+ * Import these instead of reading process.env directly in each service.
+ */
+/** Redis connection URL used by all BullMQ queues and the Redis service.
+ *  Read lazily so tests can override process.env after import. */
+export declare function getRedisUrl(): string;
+/** Base URL for the web dashboard (used in notification links, Lark cards, etc.).
+ *  Read lazily so tests can override process.env after import. */
+export declare function getWebUrl(): string;
+/** JWT secret used for user access / refresh tokens.
+ *  Read lazily so tests can override process.env after import. */
+export declare function getJwtSecret(): string;
+/** JWT secret used for worker and channel tokens.
+ *  Read lazily so tests can override process.env after import. */
+export declare function getWorkerJwtSecret(): string;
+//# sourceMappingURL=config.d.ts.map

package/dist/common/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/common/config.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;kEACkE;AAClE,wBAAgB,WAAW,IAAI,MAAM,CAEpC;AAED;kEACkE;AAClE,wBAAgB,SAAS,IAAI,MAAM,CAElC;AAED;kEACkE;AAClE,wBAAgB,YAAY,IAAI,MAAM,CAUrC;AAED;kEACkE;AAClE,wBAAgB,kBAAkB,IAAI,MAAM,CAU3C"}

package/dist/common/config.js

@@ -0,0 +1,47 @@
+"use strict";
+/**
+ * Shared server-side configuration constants derived from environment variables.
+ * Import these instead of reading process.env directly in each service.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getRedisUrl = getRedisUrl;
+exports.getWebUrl = getWebUrl;
+exports.getJwtSecret = getJwtSecret;
+exports.getWorkerJwtSecret = getWorkerJwtSecret;
+/** Redis connection URL used by all BullMQ queues and the Redis service.
+ *  Read lazily so tests can override process.env after import. */
+function getRedisUrl() {
+    return process.env.REDIS_URL || 'redis://localhost:6379';
+}
+/** Base URL for the web dashboard (used in notification links, Lark cards, etc.).
+ *  Read lazily so tests can override process.env after import. */
+function getWebUrl() {
+    return process.env.OVERLORD_WEB_URL || 'http://localhost:3000';
+}
+/** JWT secret used for user access / refresh tokens.
+ *  Read lazily so tests can override process.env after import. */
+function getJwtSecret() {
+    const secret = process.env.JWT_SECRET;
+    if (!secret) {
+        if (process.env.NODE_ENV === 'production') {
+            throw new Error('JWT_SECRET must be set in production');
+        }
+        console.warn('[SECURITY] JWT_SECRET not set — using insecure default. Set JWT_SECRET in production!');
+        return 'default-jwt-secret';
+    }
+    return secret;
+}
+/** JWT secret used for worker and channel tokens.
+ *  Read lazily so tests can override process.env after import. */
+function getWorkerJwtSecret() {
+    const secret = process.env.WORKER_JWT_SECRET;
+    if (!secret) {
+        if (process.env.NODE_ENV === 'production') {
+            throw new Error('WORKER_JWT_SECRET must be set in production');
+        }
+        console.warn('[SECURITY] WORKER_JWT_SECRET not set — using insecure default. Set WORKER_JWT_SECRET in production!');
+        return 'default-worker-jwt-secret';
+    }
+    return secret;
+}
+//# sourceMappingURL=config.js.map

package/dist/common/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/common/config.ts"],"names":[],"mappings":";AAAA;;;GAGG;;AAIH,kCAEC;AAID,8BAEC;AAID,oCAUC;AAID,gDAUC;AAtCD;kEACkE;AAClE,SAAgB,WAAW;IACzB,OAAO,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,wBAAwB,CAAC;AAC3D,CAAC;AAED;kEACkE;AAClE,SAAgB,SAAS;IACvB,OAAO,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,uBAAuB,CAAC;AACjE,CAAC;AAED;kEACkE;AAClE,SAAgB,YAAY;IAC1B,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;IACtC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC1D,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,uFAAuF,CAAC,CAAC;QACtG,OAAO,oBAAoB,CAAC;IAC9B,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;kEACkE;AAClE,SAAgB,kBAAkB;IAChC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;IAC7C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;QACjE,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,qGAAqG,CAAC,CAAC;QACpH,OAAO,2BAA2B,CAAC;IACrC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/common/crypto.service.d.ts

@@ -1,4 +1,7 @@
-export declare class CryptoService {
+import { OnModuleInit } from '@nestjs/common';
+export declare class CryptoService implements OnModuleInit {
+    private readonly logger;
+    onModuleInit(): void;
     /**
      * Hash a plaintext password using bcrypt with the protocol-defined cost factor.
      */

package/dist/common/crypto.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"crypto.service.d.ts","sourceRoot":"","sources":["../../src/common/crypto.service.ts"],"names":[],"mappings":"AAMA,qBACa,aAAa;IACxB;;OAEG;IACG,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAIrD;;OAEG;IACG,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAIvE;;;;OAIG;IACH,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM;IAerC;;;OAGG;IACH,UAAU,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM;IAkBtC;;OAEG;IACH,kBAAkB,IAAI,MAAM;IAI5B;;OAEG;IACH,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO;IAIjD,OAAO,CAAC,gBAAgB;CASzB"}
+{"version":3,"file":"crypto.service.d.ts","sourceRoot":"","sources":["../../src/common/crypto.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,YAAY,EAAU,MAAM,gBAAgB,CAAC;AAMlE,qBACa,aAAc,YAAW,YAAY;IAChD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAkC;IAEzD,YAAY,IAAI,IAAI;IAUpB;;OAEG;IACG,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAIrD;;OAEG;IACG,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAIvE;;;;OAIG;IACH,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM;IAerC;;;OAGG;IACH,UAAU,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM;IAkBtC;;OAEG;IACH,kBAAkB,IAAI,MAAM;IAI5B;;OAEG;IACH,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO;IAIjD,OAAO,CAAC,gBAAgB;CAIzB"}

package/dist/common/crypto.service.js

@@ -38,6 +38,7 @@ var __importStar = (this && this.__importStar) || (function () {
         return result;
     };
 })();
+var CryptoService_1;
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.CryptoService = void 0;
 const common_1 = require("@nestjs/common");
@@ -45,7 +46,16 @@ const crypto = __importStar(require("node:crypto"));
 const bcrypt = __importStar(require("bcrypt"));
 const otplib_1 = require("otplib");
 const protocol_1 = require("@overlordai/protocol");
-let CryptoService = class CryptoService {
+let CryptoService = CryptoService_1 = class CryptoService {
+    logger = new common_1.Logger(CryptoService_1.name);
+    onModuleInit() {
+        // Validate ENCRYPTION_KEY at startup rather than on first use
+        const hex = process.env.ENCRYPTION_KEY;
+        if (!hex || hex.length !== 64) {
+            throw new Error('ENCRYPTION_KEY environment variable must be a 64-character hex string (32 bytes). Set it before starting the server.');
+        }
+        this.logger.log('ENCRYPTION_KEY validated');
+    }
     /**
      * Hash a plaintext password using bcrypt with the protocol-defined cost factor.
      */
@@ -106,15 +116,12 @@ let CryptoService = class CryptoService {
         return otplib_1.authenticator.check(code, secret);
     }
     getEncryptionKey() {
-        const hex = process.env.ENCRYPTION_KEY;
-        if (!hex || hex.length !== 64) {
-            throw new Error('ENCRYPTION_KEY environment variable must be a 64-character hex string (32 bytes)');
-        }
-        return Buffer.from(hex, 'hex');
+        // Validation already performed in onModuleInit at startup
+        return Buffer.from(process.env.ENCRYPTION_KEY, 'hex');
     }
 };
 exports.CryptoService = CryptoService;
-exports.CryptoService = CryptoService = __decorate([
+exports.CryptoService = CryptoService = CryptoService_1 = __decorate([
     (0, common_1.Injectable)()
 ], CryptoService);
 //# sourceMappingURL=crypto.service.js.map

package/dist/common/crypto.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"crypto.service.js","sourceRoot":"","sources":["../../src/common/crypto.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,2CAA4C;AAC5C,oDAAsC;AACtC,+CAAiC;AACjC,mCAAuC;AACvC,mDAA0D;AAGnD,IAAM,aAAa,GAAnB,MAAM,aAAa;IACxB;;OAEG;IACH,KAAK,CAAC,YAAY,CAAC,QAAgB;QACjC,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,6BAAkB,CAAC,CAAC;IACnD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CAAC,QAAgB,EAAE,IAAY;QAClD,OAAO,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACxC,CAAC;IAED;;;;OAIG;IACH,UAAU,CAAC,SAAiB;QAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACpC,MAAM,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QAClC,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QAE7D,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC;YAC9B,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC;YAChC,MAAM,CAAC,KAAK,EAAE;SACf,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QAEpC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;QACzD,OAAO,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACrC,CAAC;IAED;;;OAGG;IACH,UAAU,CAAC,UAAkB;QAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACpC,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAEnD,MAAM,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACpC,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QAC1C,MAAM,SAAS,GAAG,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAExC,MAAM,QAAQ,GAAG,MAAM,CAAC,gBAAgB,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QACjE,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAE7B,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC;YAC9B,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC;YAC1B,QAAQ,CAAC,KAAK,EAAE;SACjB,CAAC,CAAC;QACH,OAAO,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACpC,CAAC;IAED;;OAEG;IACH,kBAAkB;QAChB,OAAO,sBAAa,CAAC,cAAc,EAAE,CAAC;IACxC,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,MAAc,EAAE,IAAY;QACrC,OAAO,sBAAa,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC3C,CAAC;IAEO,gBAAgB;QACtB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;QACvC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CACb,kFAAkF,CACnF,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACjC,CAAC;CACF,CAAA;AAhFY,sCAAa;wBAAb,aAAa;IADzB,IAAA,mBAAU,GAAE;GACA,aAAa,CAgFzB"}
+{"version":3,"file":"crypto.service.js","sourceRoot":"","sources":["../../src/common/crypto.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,2CAAkE;AAClE,oDAAsC;AACtC,+CAAiC;AACjC,mCAAuC;AACvC,mDAA0D;AAGnD,IAAM,aAAa,qBAAnB,MAAM,aAAa;IACP,MAAM,GAAG,IAAI,eAAM,CAAC,eAAa,CAAC,IAAI,CAAC,CAAC;IAEzD,YAAY;QACV,8DAA8D;QAC9D,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;QACvC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CACb,sHAAsH,CACvH,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;IAC9C,CAAC;IACD;;OAEG;IACH,KAAK,CAAC,YAAY,CAAC,QAAgB;QACjC,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,6BAAkB,CAAC,CAAC;IACnD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CAAC,QAAgB,EAAE,IAAY;QAClD,OAAO,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACxC,CAAC;IAED;;;;OAIG;IACH,UAAU,CAAC,SAAiB;QAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACpC,MAAM,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QAClC,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QAE7D,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC;YAC9B,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC;YAChC,MAAM,CAAC,KAAK,EAAE;SACf,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QAEpC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;QACzD,OAAO,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACrC,CAAC;IAED;;;OAGG;IACH,UAAU,CAAC,UAAkB;QAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACpC,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAEnD,MAAM,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACpC,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QAC1C,MAAM,SAAS,GAAG,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAExC,MAAM,QAAQ,GAAG,MAAM,CAAC,gBAAgB,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QACjE,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAE7B,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC;YAC9B,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC;YAC1B,QAAQ,CAAC,KAAK,EAAE;SACjB,CAAC,CAAC;QACH,OAAO,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACpC,CAAC;IAED;;OAEG;IACH,kBAAkB;QAChB,OAAO,sBAAa,CAAC,cAAc,EAAE,CAAC;IACxC,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,MAAc,EAAE,IAAY;QACrC,OAAO,sBAAa,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC3C,CAAC;IAEO,gBAAgB;QACtB,0DAA0D;QAC1D,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAe,EAAE,KAAK,CAAC,CAAC;IACzD,CAAC;CACF,CAAA;AAvFY,sCAAa;wBAAb,aAAa;IADzB,IAAA,mBAAU,GAAE;GACA,aAAa,CAuFzB"}

package/dist/common/error-filter.d.ts

@@ -1,5 +1,6 @@
 import { ExceptionFilter, ArgumentsHost } from '@nestjs/common';
 export declare class GlobalExceptionFilter implements ExceptionFilter {
+    private readonly logger;
     catch(exception: unknown, host: ArgumentsHost): void;
     private httpStatusToCode;
 }

package/dist/common/error-filter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"error-filter.d.ts","sourceRoot":"","sources":["../../src/common/error-filter.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,eAAe,EACf,aAAa,EAGd,MAAM,gBAAgB,CAAC;AASxB,qBACa,qBAAsB,YAAW,eAAe;IAC3D,KAAK,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,GAAG,IAAI;IA2DpD,OAAO,CAAC,gBAAgB;CAoBzB"}
+{"version":3,"file":"error-filter.d.ts","sourceRoot":"","sources":["../../src/common/error-filter.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,eAAe,EACf,aAAa,EAId,MAAM,gBAAgB,CAAC;AASxB,qBACa,qBAAsB,YAAW,eAAe;IAC3D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA0C;IAEjE,KAAK,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,GAAG,IAAI;IAgEpD,OAAO,CAAC,gBAAgB;CAoBzB"}

package/dist/common/error-filter.js

@@ -5,6 +5,7 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
     else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
     return c > 3 && r && Object.defineProperty(target, key, r), r;
 };
+var GlobalExceptionFilter_1;
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.GlobalExceptionFilter = void 0;
 const common_1 = require("@nestjs/common");
@@ -13,7 +14,8 @@ const path_1 = require("path");
 const sensitive_filter_1 = require("./sensitive-filter");
 const SPA_INDEX = (0, path_1.join)(__dirname, '..', '..', 'public', 'index.html');
 const HAS_SPA = (0, fs_1.existsSync)(SPA_INDEX);
-let GlobalExceptionFilter = class GlobalExceptionFilter {
+let GlobalExceptionFilter = GlobalExceptionFilter_1 = class GlobalExceptionFilter {
+    logger = new common_1.Logger(GlobalExceptionFilter_1.name);
     catch(exception, host) {
         const ctx = host.switchToHttp();
         const request = ctx.getRequest();
@@ -56,6 +58,8 @@ let GlobalExceptionFilter = class GlobalExceptionFilter {
                 exception instanceof Error
                     ? exception.message
                     : 'An unexpected error occurred';
+            // Log unexpected errors with full stack trace
+            this.logger.error(exception instanceof Error ? exception.stack : String(exception), 'Unhandled exception');
         }
         const body = {
             error: {
@@ -88,7 +92,7 @@ let GlobalExceptionFilter = class GlobalExceptionFilter {
     }
 };
 exports.GlobalExceptionFilter = GlobalExceptionFilter;
-exports.GlobalExceptionFilter = GlobalExceptionFilter = __decorate([
+exports.GlobalExceptionFilter = GlobalExceptionFilter = GlobalExceptionFilter_1 = __decorate([
     (0, common_1.Catch)()
 ], GlobalExceptionFilter);
 //# sourceMappingURL=error-filter.js.map

package/dist/common/error-filter.js.map

@@ -1 +1 @@
-{"version":3,"file":"error-filter.js","sourceRoot":"","sources":["../../src/common/error-filter.ts"],"names":[],"mappings":";;;;;;;;;AAAA,2CAMwB;AACxB,2BAAgC;AAChC,+BAA4B;AAE5B,yDAA8C;AAE9C,MAAM,SAAS,GAAG,IAAA,WAAI,EAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;AACtE,MAAM,OAAO,GAAG,IAAA,eAAU,EAAC,SAAS,CAAC,CAAC;AAG/B,IAAM,qBAAqB,GAA3B,MAAM,qBAAqB;IAChC,KAAK,CAAC,SAAkB,EAAE,IAAmB;QAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,GAAG,CAAC,UAAU,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;QAEnC,uEAAuE;QACvE,IACE,OAAO;YACP,SAAS,YAAY,0BAAiB;YACtC,OAAO,CAAC,MAAM,KAAK,KAAK;YACxB,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC;YAChC,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC;YACpC,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC;YAC/B,OAAO,CAAC,GAAG,KAAK,UAAU,EAC1B,CAAC;YACD,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;YAC7B,OAAO;QACT,CAAC;QAED,IAAI,UAAkB,CAAC;QACvB,IAAI,IAAY,CAAC;QACjB,IAAI,OAAe,CAAC;QAEpB,IAAI,SAAS,YAAY,sBAAa,EAAE,CAAC;YACvC,UAAU,GAAG,SAAS,CAAC,SAAS,EAAE,CAAC;YACnC,MAAM,iBAAiB,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC;YAClD,IAAI,OAAO,iBAAiB,KAAK,QAAQ,EAAE,CAAC;gBAC1C,OAAO,GAAG,iBAAiB,CAAC;YAC9B,CAAC;iBAAM,IACL,OAAO,iBAAiB,KAAK,QAAQ;gBACrC,iBAAiB,KAAK,IAAI;gBAC1B,SAAS,IAAI,iBAAiB,EAC9B,CAAC;gBACD,MAAM,GAAG,GAAI,iBAA6C,CAAC,OAAO,CAAC;gBACnE,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC9D,CAAC;iBAAM,CAAC;gBACN,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC;YAC9B,CAAC;YACD,IAAI,GAAG,UAAU,IAAI,GAAG,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;QAClF,CAAC;aAAM,CAAC;YACN,UAAU,GAAG,GAAG,CAAC;YACjB,IAAI,GAAG,gBAAgB,CAAC;YACxB,OAAO;gBACL,SAAS,YAAY,KAAK;oBACxB,CAAC,CAAC,SAAS,CAAC,OAAO;oBACnB,CAAC,CAAC,8BAA8B,CAAC;QACvC,CAAC;QAED,MAAM,IAAI,GAAa;YACrB,KAAK,EAAE;gBACL,IAAI;gBACJ,OAAO,EAAE,IAAA,2BAAQ,EAAC,OAAO,CAAC;gBAC1B,UAAU;aACX;SACF,CAAC;QAEF,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzC,CAAC;IAEO,gBAAgB,CAAC,MAAc;QACrC,QAAQ,MAAM,EAAE,CAAC;YACf,KAAK,GAAG;gBACN,OAAO,aAAa,CAAC;YACvB,KAAK,GAAG;gBACN,OAAO,cAAc,CAAC;YACxB,KAAK,GAAG;gBACN,OAAO,WAAW,CAAC;YACrB,KAAK,GAAG;gBACN,OAAO,WAAW,CAAC;YACrB,KAAK,GAAG;gBACN,OAAO,UAAU,CAAC;YACpB,KAAK,GAAG;gBACN,OAAO,sBAAsB,CAAC;YAChC,KAAK,GAAG;gBACN,OAAO,mBAAmB,CAAC;YAC7B;gBACE,OAAO,OAAO,CAAC;QACnB,CAAC;IACH,CAAC;CACF,CAAA;AAhFY,sDAAqB;gCAArB,qBAAqB;IADjC,IAAA,cAAK,GAAE;GACK,qBAAqB,CAgFjC"}
+{"version":3,"file":"error-filter.js","sourceRoot":"","sources":["../../src/common/error-filter.ts"],"names":[],"mappings":";;;;;;;;;;AAAA,2CAOwB;AACxB,2BAAgC;AAChC,+BAA4B;AAE5B,yDAA8C;AAE9C,MAAM,SAAS,GAAG,IAAA,WAAI,EAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;AACtE,MAAM,OAAO,GAAG,IAAA,eAAU,EAAC,SAAS,CAAC,CAAC;AAG/B,IAAM,qBAAqB,6BAA3B,MAAM,qBAAqB;IACf,MAAM,GAAG,IAAI,eAAM,CAAC,uBAAqB,CAAC,IAAI,CAAC,CAAC;IAEjE,KAAK,CAAC,SAAkB,EAAE,IAAmB;QAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,GAAG,CAAC,UAAU,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;QAEnC,uEAAuE;QACvE,IACE,OAAO;YACP,SAAS,YAAY,0BAAiB;YACtC,OAAO,CAAC,MAAM,KAAK,KAAK;YACxB,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC;YAChC,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC;YACpC,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC;YAC/B,OAAO,CAAC,GAAG,KAAK,UAAU,EAC1B,CAAC;YACD,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;YAC7B,OAAO;QACT,CAAC;QAED,IAAI,UAAkB,CAAC;QACvB,IAAI,IAAY,CAAC;QACjB,IAAI,OAAe,CAAC;QAEpB,IAAI,SAAS,YAAY,sBAAa,EAAE,CAAC;YACvC,UAAU,GAAG,SAAS,CAAC,SAAS,EAAE,CAAC;YACnC,MAAM,iBAAiB,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC;YAClD,IAAI,OAAO,iBAAiB,KAAK,QAAQ,EAAE,CAAC;gBAC1C,OAAO,GAAG,iBAAiB,CAAC;YAC9B,CAAC;iBAAM,IACL,OAAO,iBAAiB,KAAK,QAAQ;gBACrC,iBAAiB,KAAK,IAAI;gBAC1B,SAAS,IAAI,iBAAiB,EAC9B,CAAC;gBACD,MAAM,GAAG,GAAI,iBAA6C,CAAC,OAAO,CAAC;gBACnE,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC9D,CAAC;iBAAM,CAAC;gBACN,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC;YAC9B,CAAC;YACD,IAAI,GAAG,UAAU,IAAI,GAAG,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;QAClF,CAAC;aAAM,CAAC;YACN,UAAU,GAAG,GAAG,CAAC;YACjB,IAAI,GAAG,gBAAgB,CAAC;YACxB,OAAO;gBACL,SAAS,YAAY,KAAK;oBACxB,CAAC,CAAC,SAAS,CAAC,OAAO;oBACnB,CAAC,CAAC,8BAA8B,CAAC;YACrC,8CAA8C;YAC9C,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,SAAS,YAAY,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,EAChE,qBAAqB,CACtB,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAa;YACrB,KAAK,EAAE;gBACL,IAAI;gBACJ,OAAO,EAAE,IAAA,2BAAQ,EAAC,OAAO,CAAC;gBAC1B,UAAU;aACX;SACF,CAAC;QAEF,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzC,CAAC;IAEO,gBAAgB,CAAC,MAAc;QACrC,QAAQ,MAAM,EAAE,CAAC;YACf,KAAK,GAAG;gBACN,OAAO,aAAa,CAAC;YACvB,KAAK,GAAG;gBACN,OAAO,cAAc,CAAC;YACxB,KAAK,GAAG;gBACN,OAAO,WAAW,CAAC;YACrB,KAAK,GAAG;gBACN,OAAO,WAAW,CAAC;YACrB,KAAK,GAAG;gBACN,OAAO,UAAU,CAAC;YACpB,KAAK,GAAG;gBACN,OAAO,sBAAsB,CAAC;YAChC,KAAK,GAAG;gBACN,OAAO,mBAAmB,CAAC;YAC7B;gBACE,OAAO,OAAO,CAAC;QACnB,CAAC;IACH,CAAC;CACF,CAAA;AAvFY,sDAAqB;gCAArB,qBAAqB;IADjC,IAAA,cAAK,GAAE;GACK,qBAAqB,CAuFjC"}

package/dist/common/git-utils.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Extract the project path (e.g. "group/project") from a git repo URL.
+ */
+export declare function extractProjectPath(repoUrl: string): string | null;
+/**
+ * Extract the base URL (scheme + host) from a git repo URL.
+ */
+export declare function extractGitBaseUrl(repoUrl: string): string | null;
+//# sourceMappingURL=git-utils.d.ts.map

package/dist/common/git-utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-utils.d.ts","sourceRoot":"","sources":["../../src/common/git-utils.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAcjE;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAYhE"}

package/dist/common/git-utils.js

@@ -0,0 +1,41 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.extractProjectPath = extractProjectPath;
+exports.extractGitBaseUrl = extractGitBaseUrl;
+/**
+ * Extract the project path (e.g. "group/project") from a git repo URL.
+ */
+function extractProjectPath(repoUrl) {
+    // SSH format: git@host:path.git
+    const sshMatch = /^git@[^:]+:(.+?)(?:\.git)?$/.exec(repoUrl);
+    if (sshMatch)
+        return sshMatch[1];
+    // HTTPS format: https://host/path.git or https://host/path
+    try {
+        const parsed = new URL(repoUrl);
+        let path = parsed.pathname;
+        path = path.replace(/^\//, '').replace(/\.git$/, '');
+        return path || null;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Extract the base URL (scheme + host) from a git repo URL.
+ */
+function extractGitBaseUrl(repoUrl) {
+    // SSH format: git@host:path -> https://host
+    const sshMatch = /^git@([^:]+):/.exec(repoUrl);
+    if (sshMatch)
+        return `https://${sshMatch[1]}`;
+    // HTTPS format
+    try {
+        const parsed = new URL(repoUrl);
+        return `${parsed.protocol}//${parsed.host}`;
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=git-utils.js.map

package/dist/common/git-utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-utils.js","sourceRoot":"","sources":["../../src/common/git-utils.ts"],"names":[],"mappings":";;AAGA,gDAcC;AAKD,8CAYC;AAlCD;;GAEG;AACH,SAAgB,kBAAkB,CAAC,OAAe;IAChD,gCAAgC;IAChC,MAAM,QAAQ,GAAG,6BAA6B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7D,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC;IAEjC,2DAA2D;IAC3D,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;QAChC,IAAI,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC;QAC3B,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACrD,OAAO,IAAI,IAAI,IAAI,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAgB,iBAAiB,CAAC,OAAe;IAC/C,4CAA4C;IAC5C,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/C,IAAI,QAAQ;QAAE,OAAO,WAAW,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;IAE9C,eAAe;IACf,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;QAChC,OAAO,GAAG,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/common/health.controller.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"health.controller.d.ts","sourceRoot":"","sources":["../../src/common/health.controller.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAU/D,qBACa,gBAAgB;IAEzB,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBADR,KAAK,EAAE,YAAY,EACnB,QAAQ,EAAE,eAAe;IAItC,KAAK,CAAQ,GAAG,EAAE;QAAE,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG;YAAE,IAAI,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,CAAA;SAAE,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;CAwChG"}
+{"version":3,"file":"health.controller.d.ts","sourceRoot":"","sources":["../../src/common/health.controller.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAU/D,qBACa,gBAAgB;IAEzB,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBADR,KAAK,EAAE,YAAY,EACnB,QAAQ,EAAE,eAAe;IAItC,KAAK,CAAQ,GAAG,EAAE;QAAE,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG;YAAE,IAAI,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,CAAA;SAAE,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;CAoChG"}

package/dist/common/health.controller.js

@@ -27,7 +27,7 @@ let HealthController = class HealthController {
         const health = {
             status: 'ok',
             redis: 'connected',
-            sqlite: 'writable',
+            sqlite: 'ok',
             bullmq: 'ready',
             uptime: process.uptime(),
         };
@@ -44,12 +44,10 @@ let HealthController = class HealthController {
             health.redis = 'disconnected';
             health.status = 'error';
         }
-        // Check SQLite
+        // Check SQLite (read-only probe — no WAL writes)
         try {
             const db = this.database.getDb();
-            db.exec(`CREATE TABLE IF NOT EXISTS _health_check (_id INTEGER PRIMARY KEY);
-         INSERT INTO _health_check (_id) VALUES (1);
-         DELETE FROM _health_check WHERE _id = 1;`);
+            db.prepare('SELECT 1').get();
         }
         catch {
             health.sqlite = 'error';

package/dist/common/health.controller.js.map

@@ -1 +1 @@
-{"version":3,"file":"health.controller.js","sourceRoot":"","sources":["../../src/common/health.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAkE;AAClE,0DAAsD;AACtD,mEAA+D;AAWxD,IAAM,gBAAgB,GAAtB,MAAM,gBAAgB;IAER;IACA;IAFnB,YACmB,KAAmB,EACnB,QAAyB;QADzB,UAAK,GAAL,KAAK,CAAc;QACnB,aAAQ,GAAR,QAAQ,CAAiB;IACzC,CAAC;IAGE,AAAN,KAAK,CAAC,KAAK,CAAQ,GAA4D;QAC7E,MAAM,MAAM,GAAiB;YAC3B,MAAM,EAAE,IAAI;YACZ,KAAK,EAAE,WAAW;YAClB,MAAM,EAAE,UAAU;YAClB,MAAM,EAAE,OAAO;YACf,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE;SACzB,CAAC;QAEF,cAAc;QACd,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;YACtC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YACjC,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;gBACpB,MAAM,CAAC,KAAK,GAAG,cAAc,CAAC;gBAC9B,MAAM,CAAC,MAAM,GAAG,OAAO,CAAC;YAC1B,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,KAAK,GAAG,cAAc,CAAC;YAC9B,MAAM,CAAC,MAAM,GAAG,OAAO,CAAC;QAC1B,CAAC;QAED,eAAe;QACf,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;YACjC,EAAE,CAAC,IAAI,CACL;;kDAE0C,CAC3C,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,MAAM,GAAG,OAAO,CAAC;YACxB,MAAM,CAAC,MAAM,GAAG,OAAO,CAAC;QAC1B,CAAC;QAED,MAAM,UAAU,GACd,MAAM,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,mBAAU,CAAC,EAAE,CAAC,CAAC,CAAC,mBAAU,CAAC,mBAAmB,CAAC;QAE1E,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;CACF,CAAA;AA/CY,4CAAgB;AAOrB;IADL,IAAA,YAAG,GAAE;IACO,WAAA,IAAA,YAAG,GAAE,CAAA;;;;6CAuCjB;2BA9CU,gBAAgB;IAD5B,IAAA,mBAAU,EAAC,SAAS,CAAC;qCAGM,4BAAY;QACT,kCAAe;GAHjC,gBAAgB,CA+C5B"}
+{"version":3,"file":"health.controller.js","sourceRoot":"","sources":["../../src/common/health.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAkE;AAClE,0DAAsD;AACtD,mEAA+D;AAWxD,IAAM,gBAAgB,GAAtB,MAAM,gBAAgB;IAER;IACA;IAFnB,YACmB,KAAmB,EACnB,QAAyB;QADzB,UAAK,GAAL,KAAK,CAAc;QACnB,aAAQ,GAAR,QAAQ,CAAiB;IACzC,CAAC;IAGE,AAAN,KAAK,CAAC,KAAK,CAAQ,GAA4D;QAC7E,MAAM,MAAM,GAAiB;YAC3B,MAAM,EAAE,IAAI;YACZ,KAAK,EAAE,WAAW;YAClB,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,OAAO;YACf,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE;SACzB,CAAC;QAEF,cAAc;QACd,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;YACtC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YACjC,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;gBACpB,MAAM,CAAC,KAAK,GAAG,cAAc,CAAC;gBAC9B,MAAM,CAAC,MAAM,GAAG,OAAO,CAAC;YAC1B,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,KAAK,GAAG,cAAc,CAAC;YAC9B,MAAM,CAAC,MAAM,GAAG,OAAO,CAAC;QAC1B,CAAC;QAED,iDAAiD;QACjD,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;YACjC,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,EAAE,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,MAAM,GAAG,OAAO,CAAC;YACxB,MAAM,CAAC,MAAM,GAAG,OAAO,CAAC;QAC1B,CAAC;QAED,MAAM,UAAU,GACd,MAAM,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,mBAAU,CAAC,EAAE,CAAC,CAAC,CAAC,mBAAU,CAAC,mBAAmB,CAAC;QAE1E,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;CACF,CAAA;AA3CY,4CAAgB;AAOrB;IADL,IAAA,YAAG,GAAE;IACO,WAAA,IAAA,YAAG,GAAE,CAAA;;;;6CAmCjB;2BA1CU,gBAAgB;IAD5B,IAAA,mBAAU,EAAC,SAAS,CAAC;qCAGM,4BAAY;QACT,kCAAe;GAHjC,gBAAgB,CA2C5B"}

package/dist/common/machine-utils.d.ts

@@ -0,0 +1,32 @@
+import type { Machine } from '@overlordai/protocol';
+/**
+ * Strip sensitive fields (e.g. recoverySecretHash) from a Machine object
+ * before returning it in API responses.
+ */
+export declare function stripMachineSecrets(machine: Machine): {
+    id: string;
+    name: string;
+    host: string;
+    port: number;
+    tokenId: number;
+    os: string | null;
+    cpuModel: string | null;
+    cpuCores: number | null;
+    memoryGb: number | null;
+    maxSlots: number;
+    activeSlots: number;
+    cpuUsage: number;
+    memoryUsage: number;
+    diskUsage: number;
+    loadThreshold: number;
+    tags: string[];
+    capabilities: string[];
+    protocolVersion: string;
+    workerVersion: string | null;
+    lastHeartbeat: string | null;
+    sshUrl: string | null;
+    status: import("@overlordai/protocol").MachineStatus;
+    decommissionedAt: string | null;
+    decommissionedBy: number | null;
+};
+//# sourceMappingURL=machine-utils.d.ts.map

package/dist/common/machine-utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"machine-utils.d.ts","sourceRoot":"","sources":["../../src/common/machine-utils.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAEpD;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;EAGnD"}

package/dist/common/machine-utils.js

@@ -0,0 +1,12 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.stripMachineSecrets = stripMachineSecrets;
+/**
+ * Strip sensitive fields (e.g. recoverySecretHash) from a Machine object
+ * before returning it in API responses.
+ */
+function stripMachineSecrets(machine) {
+    const { recoverySecretHash, ...safe } = machine;
+    return safe;
+}
+//# sourceMappingURL=machine-utils.js.map

package/dist/common/machine-utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"machine-utils.js","sourceRoot":"","sources":["../../src/common/machine-utils.ts"],"names":[],"mappings":";;AAMA,kDAGC;AAPD;;;GAGG;AACH,SAAgB,mBAAmB,CAAC,OAAgB;IAClD,MAAM,EAAE,kBAAkB,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;IAChD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/common/pagination.d.ts

@@ -1,4 +1,12 @@
 import type { PaginatedResult } from '@overlordai/protocol';
+/**
+ * Clamp a user-supplied limit string to a safe integer range.
+ */
+export declare function clampLimit(value: string | undefined, defaultLimit?: number, max?: number): number;
+/**
+ * Clamp a user-supplied offset string to a non-negative integer.
+ */
+export declare function clampOffset(value: string | undefined): number;
 /**
  * Encode an integer id as a base64 cursor string.
  */
@@ -8,11 +16,10 @@ export declare function encodeCursor(id: number): string;
  */
 export declare function decodeCursor(cursor: string): number;
 /**
- * Paginate an array of items using cursor-based pagination.
+ * Paginate an array of raw DB rows: slice first, then map.
  *
- * If the number of items exceeds `limit`, the result is sliced to `limit`
- * and `nextCursor` is set from the last included item's id.
- * Otherwise all items are returned with `nextCursor: null`.
+ * The caller should pass the raw rows (limit + 1) and a mapper function.
+ * This avoids mapping the extra "hasMore" probe row unnecessarily.
  */
-export declare function paginate<T>(items: T[], limit: number, getId: (item: T) => number): PaginatedResult<T>;
+export declare function paginate<TRow, T>(rows: TRow[], limit: number, mapper: (row: TRow) => T, getId: (item: T) => number): PaginatedResult<T>;
 //# sourceMappingURL=pagination.d.ts.map

package/dist/common/pagination.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pagination.d.ts","sourceRoot":"","sources":["../../src/common/pagination.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAE5D;;GAEG;AACH,wBAAgB,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAE/C;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAEnD;AAED;;;;;;GAMG;AACH,wBAAgB,QAAQ,CAAC,CAAC,EACxB,KAAK,EAAE,CAAC,EAAE,EACV,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,MAAM,GACzB,eAAe,CAAC,CAAC,CAAC,CAapB"}
+{"version":3,"file":"pagination.d.ts","sourceRoot":"","sources":["../../src/common/pagination.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAE5D;;GAEG;AACH,wBAAgB,UAAU,CACxB,KAAK,EAAE,MAAM,GAAG,SAAS,EACzB,YAAY,SAAK,EACjB,GAAG,SAAM,GACR,MAAM,CAIR;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAG7D;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAE/C;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAEnD;AAED;;;;;GAKG;AACH,wBAAgB,QAAQ,CAAC,IAAI,EAAE,CAAC,EAC9B,IAAI,EAAE,IAAI,EAAE,EACZ,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,CAAC,GAAG,EAAE,IAAI,KAAK,CAAC,EACxB,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,MAAM,GACzB,eAAe,CAAC,CAAC,CAAC,CAQpB"}

package/dist/common/pagination.js

@@ -1,8 +1,25 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.clampLimit = clampLimit;
+exports.clampOffset = clampOffset;
 exports.encodeCursor = encodeCursor;
 exports.decodeCursor = decodeCursor;
 exports.paginate = paginate;
+/**
+ * Clamp a user-supplied limit string to a safe integer range.
+ */
+function clampLimit(value, defaultLimit = 20, max = 100) {
+    const parsed = value ? parseInt(value, 10) : NaN;
+    const n = Number.isFinite(parsed) ? parsed : defaultLimit;
+    return Math.min(Math.max(n, 1), max);
+}
+/**
+ * Clamp a user-supplied offset string to a non-negative integer.
+ */
+function clampOffset(value) {
+    const parsed = value ? parseInt(value, 10) : NaN;
+    return Number.isFinite(parsed) && parsed > 0 ? parsed : 0;
+}
 /**
  * Encode an integer id as a base64 cursor string.
  */
@@ -16,24 +33,17 @@ function decodeCursor(cursor) {
     return parseInt(Buffer.from(cursor, 'base64').toString(), 10);
 }
 /**
- * Paginate an array of items using cursor-based pagination.
+ * Paginate an array of raw DB rows: slice first, then map.
  *
- * If the number of items exceeds `limit`, the result is sliced to `limit`
- * and `nextCursor` is set from the last included item's id.
- * Otherwise all items are returned with `nextCursor: null`.
+ * The caller should pass the raw rows (limit + 1) and a mapper function.
+ * This avoids mapping the extra "hasMore" probe row unnecessarily.
  */
-function paginate(items, limit, getId) {
-    if (items.length > limit) {
-        const sliced = items.slice(0, limit);
-        const lastItem = sliced[sliced.length - 1];
-        return {
-            data: sliced,
-            nextCursor: encodeCursor(getId(lastItem)),
-        };
-    }
-    return {
-        data: items,
-        nextCursor: null,
-    };
+function paginate(rows, limit, mapper, getId) {
+    const hasMore = rows.length > limit;
+    const data = (hasMore ? rows.slice(0, limit) : rows).map(mapper);
+    const nextCursor = hasMore && data.length > 0
+        ? encodeCursor(getId(data[data.length - 1]))
+        : null;
+    return { data, nextCursor };
 }
 //# sourceMappingURL=pagination.js.map

package/dist/common/pagination.js.map

@@ -1 +1 @@
-{"version":3,"file":"pagination.js","sourceRoot":"","sources":["../../src/common/pagination.ts"],"names":[],"mappings":";;AAKA,oCAEC;AAKD,oCAEC;AASD,4BAiBC;AAtCD;;GAEG;AACH,SAAgB,YAAY,CAAC,EAAU;IACrC,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AACpD,CAAC;AAED;;GAEG;AACH,SAAgB,YAAY,CAAC,MAAc;IACzC,OAAO,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;AAChE,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,QAAQ,CACtB,KAAU,EACV,KAAa,EACb,KAA0B;IAE1B,IAAI,KAAK,CAAC,MAAM,GAAG,KAAK,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QACrC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC3C,OAAO;YACL,IAAI,EAAE,MAAM;YACZ,UAAU,EAAE,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;SAC1C,CAAC;IACJ,CAAC;IACD,OAAO;QACL,IAAI,EAAE,KAAK;QACX,UAAU,EAAE,IAAI;KACjB,CAAC;AACJ,CAAC"}
+{"version":3,"file":"pagination.js","sourceRoot":"","sources":["../../src/common/pagination.ts"],"names":[],"mappings":";;AAKA,gCAQC;AAKD,kCAGC;AAKD,oCAEC;AAKD,oCAEC;AAQD,4BAaC;AAtDD;;GAEG;AACH,SAAgB,UAAU,CACxB,KAAyB,EACzB,YAAY,GAAG,EAAE,EACjB,GAAG,GAAG,GAAG;IAET,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IACjD,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC;IAC1D,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACvC,CAAC;AAED;;GAEG;AACH,SAAgB,WAAW,CAAC,KAAyB;IACnD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IACjD,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED;;GAEG;AACH,SAAgB,YAAY,CAAC,EAAU;IACrC,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AACpD,CAAC;AAED;;GAEG;AACH,SAAgB,YAAY,CAAC,MAAc;IACzC,OAAO,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;AAChE,CAAC;AAED;;;;;GAKG;AACH,SAAgB,QAAQ,CACtB,IAAY,EACZ,KAAa,EACb,MAAwB,EACxB,KAA0B;IAE1B,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;IACpC,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACjE,MAAM,UAAU,GACd,OAAO,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;QACxB,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;QAC5C,CAAC,CAAC,IAAI,CAAC;IACX,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;AAC9B,CAAC"}

package/dist/common/project-validation.d.ts

@@ -0,0 +1,7 @@
+export declare const ALLOWED_PROJECT_FIELDS: readonly ["name", "repoUrl", "sshUrl", "defaultBranch", "pipeline", "setupCommands", "agentType", "agentEnv", "agentCommand", "workspaceRoot", "testCommand", "skillsPath", "allowedTools", "maxTurns", "ptyOutputFilter", "isDefault", "aliases", "gitPlatform", "defaultReviewers"];
+/**
+ * Validate and sanitize project update fields.
+ * Shared between ProjectController and AdminProjectController.
+ */
+export declare function validateProjectUpdate(body: Record<string, unknown>): Record<string, unknown>;
+//# sourceMappingURL=project-validation.d.ts.map