@package-broker/core 0.2.15

package/dist/db/schema.js

@@ -0,0 +1,99 @@
+import { sqliteTable, text, integer, index, unique } from 'drizzle-orm/sqlite-core';
+// Repositories table
+export const repositories = sqliteTable('repositories', {
+    id: text('id').primaryKey(),
+    url: text('url').notNull(),
+    vcs_type: text('vcs_type').notNull(), // 'git', 'composer', 'artifact' - determines sync strategy
+    credential_type: text('credential_type').notNull(), // 'http_basic', 'github_token', 'gitlab_token', etc.
+    auth_credentials: text('auth_credentials').notNull(), // Encrypted JSON with credential-specific fields
+    composer_json_path: text('composer_json_path'), // Supports glob patterns like '{lib,src}/**/composer.json'
+    package_filter: text('package_filter'), // Comma-separated list of packages to sync (for repos with provider-includes)
+    status: text('status').default('pending'), // 'active', 'error', 'pending', 'syncing'
+    error_message: text('error_message'),
+    last_synced_at: integer('last_synced_at'),
+    created_at: integer('created_at').notNull(),
+}, (table) => ({
+    statusIdx: index('idx_repositories_status').on(table.status),
+    lastSyncedIdx: index('idx_repositories_last_synced').on(table.last_synced_at),
+    credentialTypeIdx: index('idx_repositories_credential_type').on(table.credential_type),
+    vcsTypeIdx: index('idx_repositories_vcs_type').on(table.vcs_type),
+}));
+// Tokens table
+export const tokens = sqliteTable('tokens', {
+    id: text('id').primaryKey(),
+    description: text('description').notNull(),
+    token_hash: text('token_hash').notNull(), // SHA-256 hash for high-entropy tokens
+    permissions: text('permissions').notNull().default('readonly'), // 'readonly' | 'write'
+    rate_limit_max: integer('rate_limit_max').default(1000), // requests per hour
+    created_at: integer('created_at').notNull(),
+    expires_at: integer('expires_at'),
+    last_used_at: integer('last_used_at'),
+}, (table) => ({
+    tokenHashIdx: index('idx_tokens_token_hash').on(table.token_hash),
+}));
+// Artifacts table
+export const artifacts = sqliteTable('artifacts', {
+    id: text('id').primaryKey(),
+    repo_id: text('repo_id')
+        .notNull()
+        .references(() => repositories.id, { onDelete: 'cascade' }),
+    package_name: text('package_name').notNull(),
+    version: text('version').notNull(),
+    file_key: text('file_key').notNull(), // R2/S3 key
+    size: integer('size'), // bytes
+    download_count: integer('download_count').default(0), // Number of downloads
+    created_at: integer('created_at').notNull(),
+    last_downloaded_at: integer('last_downloaded_at'),
+}, (table) => ({
+    repoIdIdx: index('idx_artifacts_repo_id').on(table.repo_id),
+    packageNameIdx: index('idx_artifacts_package_name').on(table.package_name),
+    lastDownloadedIdx: index('idx_artifacts_last_downloaded').on(table.last_downloaded_at),
+    // Composite unique index for fast lookup in dist route
+    uniqueArtifactIdx: unique('artifacts_repo_package_version').on(table.repo_id, table.package_name, table.version),
+}));
+// Package metadata table (for UI queries)
+export const packages = sqliteTable('packages', {
+    id: text('id').primaryKey(),
+    repo_id: text('repo_id')
+        .notNull()
+        .references(() => repositories.id, { onDelete: 'cascade' }),
+    name: text('name').notNull(),
+    version: text('version').notNull(),
+    dist_url: text('dist_url').notNull(),
+    source_dist_url: text('source_dist_url'), // Original source repository URL for on-demand mirroring
+    dist_reference: text('dist_reference'), // Reference/hash for mirror URL substitution (commit hash for git, generated hash for others)
+    description: text('description'),
+    license: text('license'), // JSON string for array support
+    package_type: text('package_type'), // "library", "magento2-module", etc.
+    homepage: text('homepage'),
+    released_at: integer('released_at'),
+    readme_content: text('readme_content'),
+    metadata: text('metadata'), // Complete upstream package metadata as JSON
+    created_at: integer('created_at').notNull(),
+}, (table) => ({
+    repoIdIdx: index('idx_packages_repo_id').on(table.repo_id),
+    nameIdx: index('idx_packages_name').on(table.name),
+    // Unique constraint to prevent duplicate package+version entries
+    uniquePackageVersionIdx: unique('packages_name_version_unique').on(table.name, table.version),
+}));
+// Users table (formerly admin_users)
+export const users = sqliteTable('users', {
+    id: text('id').primaryKey(),
+    email: text('email').notNull().unique(),
+    password_hash: text('password_hash').notNull(), // bcrypt or argon2 hash
+    role: text('role').default('admin').notNull(), // 'admin' | 'viewer'
+    status: text('status').default('active').notNull(), // 'active' | 'invited' | 'blocked'
+    two_factor_secret: text('two_factor_secret'),
+    two_factor_enabled: integer('two_factor_enabled', { mode: 'boolean' }).default(false),
+    recovery_codes: text('recovery_codes'), // Encrypted JSON array of recovery codes
+    invite_token: text('invite_token'), // Token for setting initial password
+    invite_expires_at: integer('invite_expires_at'), // Expiration timestamp for invite
+    created_at: integer('created_at').notNull(),
+    last_login_at: integer('last_login_at'),
+}, (table) => ({
+    emailIdx: index('idx_users_email').on(table.email),
+    inviteTokenIdx: index('idx_users_invite_token').on(table.invite_token),
+}));
+// NO activity_log table - use Cloudflare Workers logs for debugging
+// Workers logs are limited to last X entries and don't require database storage
+//# sourceMappingURL=schema.js.map

package/dist/db/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/db/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AAEpF,qBAAqB;AACrB,MAAM,CAAC,MAAM,YAAY,GAAG,WAAW,CACrC,cAAc,EACd;IACE,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE;IAC3B,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE;IAC1B,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,EAAE,2DAA2D;IACjG,eAAe,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC,OAAO,EAAE,EAAE,qDAAqD;IACzG,gBAAgB,EAAE,IAAI,CAAC,kBAAkB,CAAC,CAAC,OAAO,EAAE,EAAE,iDAAiD;IACvG,kBAAkB,EAAE,IAAI,CAAC,oBAAoB,CAAC,EAAE,2DAA2D;IAC3G,cAAc,EAAE,IAAI,CAAC,gBAAgB,CAAC,EAAE,8EAA8E;IACtH,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,0CAA0C;IACrF,aAAa,EAAE,IAAI,CAAC,eAAe,CAAC;IACpC,cAAc,EAAE,OAAO,CAAC,gBAAgB,CAAC;IACzC,UAAU,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;CAC5C,EACD,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACV,SAAS,EAAE,KAAK,CAAC,yBAAyB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC;IAC5D,aAAa,EAAE,KAAK,CAAC,8BAA8B,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC;IAC7E,iBAAiB,EAAE,KAAK,CAAC,kCAAkC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC;IACtF,UAAU,EAAE,KAAK,CAAC,2BAA2B,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC;CAClE,CAAC,CACH,CAAC;AAEF,eAAe;AACf,MAAM,CAAC,MAAM,MAAM,GAAG,WAAW,CAC/B,QAAQ,EACR;IACE,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE;IAC3B,WAAW,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE;IAC1C,UAAU,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE,EAAE,uCAAuC;IACjF,WAAW,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,uBAAuB;IACvF,cAAc,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,oBAAoB;IAC7E,UAAU,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;IAC3C,UAAU,EAAE,OAAO,CAAC,YAAY,CAAC;IACjC,YAAY,EAAE,OAAO,CAAC,cAAc,CAAC;CACtC,EACD,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACV,YAAY,EAAE,KAAK,CAAC,uBAAuB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC;CAClE,CAAC,CACH,CAAC;AAEF,kBAAkB;AAClB,MAAM,CAAC,MAAM,SAAS,GAAG,WAAW,CAClC,WAAW,EACX;IACE,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE;IAC3B,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC;SACrB,OAAO,EAAE;SACT,UAAU,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IAC7D,YAAY,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE;IAC5C,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;IAClC,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,EAAE,YAAY;IAClD,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,QAAQ;IAC/B,cAAc,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,sBAAsB;IAC5E,UAAU,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;IAC3C,kBAAkB,EAAE,OAAO,CAAC,oBAAoB,CAAC;CAClD,EACD,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACV,SAAS,EAAE,KAAK,CAAC,uBAAuB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC;IAC3D,cAAc,EAAE,KAAK,CAAC,4BAA4B,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC;IAC1E,iBAAiB,EAAE,KAAK,CAAC,+BAA+B,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC;IACtF,uDAAuD;IACvD,iBAAiB,EAAE,MAAM,CAAC,gCAAgC,CAAC,CAAC,EAAE,CAC5D,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,YAAY,EAClB,KAAK,CAAC,OAAO,CACd;CACF,CAAC,CACH,CAAC;AAEF,0CAA0C;AAC1C,MAAM,CAAC,MAAM,QAAQ,GAAG,WAAW,CACjC,UAAU,EACV;IACE,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE;IAC3B,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC;SACrB,OAAO,EAAE;SACT,UAAU,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IAC7D,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE;IAC5B,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;IAClC,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;IACpC,eAAe,EAAE,IAAI,CAAC,iBAAiB,CAAC,EAAE,yDAAyD;IACnG,cAAc,EAAE,IAAI,CAAC,gBAAgB,CAAC,EAAE,8FAA8F;IACtI,WAAW,EAAE,IAAI,CAAC,aAAa,CAAC;IAChC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,gCAAgC;IAC1D,YAAY,EAAE,IAAI,CAAC,cAAc,CAAC,EAAE,qCAAqC;IACzE,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC;IAC1B,WAAW,EAAE,OAAO,CAAC,aAAa,CAAC;IACnC,cAAc,EAAE,IAAI,CAAC,gBAAgB,CAAC;IACtC,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,EAAE,6CAA6C;IACzE,UAAU,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;CAC5C,EACD,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACV,SAAS,EAAE,KAAK,CAAC,sBAAsB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC;IAC1D,OAAO,EAAE,KAAK,CAAC,mBAAmB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;IAClD,iEAAiE;IACjE,uBAAuB,EAAE,MAAM,CAAC,8BAA8B,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC;CAC9F,CAAC,CACH,CAAC;AAEF,qCAAqC;AACrC,MAAM,CAAC,MAAM,KAAK,GAAG,WAAW,CAC9B,OAAO,EACP;IACE,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE;IAC3B,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE;IACvC,aAAa,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC,OAAO,EAAE,EAAE,wBAAwB;IACxE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,qBAAqB;IACpE,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,EAAE,mCAAmC;IACvF,iBAAiB,EAAE,IAAI,CAAC,mBAAmB,CAAC;IAC5C,kBAAkB,EAAE,OAAO,CAAC,oBAAoB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IACrF,cAAc,EAAE,IAAI,CAAC,gBAAgB,CAAC,EAAE,yCAAyC;IACjF,YAAY,EAAE,IAAI,CAAC,cAAc,CAAC,EAAE,qCAAqC;IACzE,iBAAiB,EAAE,OAAO,CAAC,mBAAmB,CAAC,EAAE,kCAAkC;IACnF,UAAU,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;IAC3C,aAAa,EAAE,OAAO,CAAC,eAAe,CAAC;CACxC,EACD,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACV,QAAQ,EAAE,KAAK,CAAC,iBAAiB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC;IAClD,cAAc,EAAE,KAAK,CAAC,wBAAwB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC;CACvE,CAAC,CACH,CAAC;AAEF,oEAAoE;AACpE,gFAAgF"}

package/dist/factory.d.ts

@@ -0,0 +1,34 @@
+import { Hono } from 'hono';
+import { type StorageDriver, type DatabasePort } from './index';
+export interface AppBindings {
+    DB?: any;
+    KV?: any;
+    QUEUE?: any;
+    ANALYTICS?: any;
+    LOG_LEVEL?: 'debug' | 'info' | 'warn' | 'error';
+    [key: string]: any;
+}
+export interface AppVariables {
+    storage: StorageDriver;
+    database: DatabasePort;
+    requestId?: string;
+    session?: {
+        userId: string;
+        email: string;
+    };
+}
+export type AppInstance = Hono<{
+    Bindings: AppBindings;
+    Variables: AppVariables;
+}>;
+/**
+ * Create the generic Hono application
+ * This factory function expects drivers to be injected via middleware or arguments,
+ * or it sets up the structure for them to be set.
+ */
+export declare function createApp(options?: {
+    storage?: StorageDriver;
+    database?: DatabasePort;
+    onInit?: (app: AppInstance) => void;
+}): AppInstance;
+//# sourceMappingURL=factory.d.ts.map

package/dist/factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"factory.d.ts","sourceRoot":"","sources":["../src/factory.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EAiDH,KAAK,aAAa,EAClB,KAAK,YAAY,EACpB,MAAM,SAAS,CAAC;AAGjB,MAAM,WAAW,WAAW;IAExB,EAAE,CAAC,EAAE,GAAG,CAAC;IACT,EAAE,CAAC,EAAE,GAAG,CAAC;IACT,KAAK,CAAC,EAAE,GAAG,CAAC;IACZ,SAAS,CAAC,EAAE,GAAG,CAAC;IAEhB,SAAS,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;IAChD,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;CACtB;AAED,MAAM,WAAW,YAAY;IACzB,OAAO,EAAE,aAAa,CAAC;IACvB,QAAQ,EAAE,YAAY,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;CAC/C;AAED,MAAM,MAAM,WAAW,GAAG,IAAI,CAAC;IAAE,QAAQ,EAAE,WAAW,CAAC;IAAC,SAAS,EAAE,YAAY,CAAA;CAAE,CAAC,CAAC;AAEnF;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,OAAO,CAAC,EAAE;IAChC,OAAO,CAAC,EAAE,aAAa,CAAC;IACxB,QAAQ,CAAC,EAAE,YAAY,CAAC;IACxB,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,WAAW,KAAK,IAAI,CAAC;CACvC,GAAG,WAAW,CA0Id"}

package/dist/factory.js

@@ -0,0 +1,121 @@
+import { Hono } from 'hono';
+import { cors } from 'hono/cors';
+import { composerVersionMiddleware, authMiddleware, distAuthMiddleware, requestIdMiddleware, packagesJsonRoute, p2PackageRoute, distRoute, distMirrorRoute, distLockfileRoute, healthRoute, listRepositories, createRepository, getRepository, updateRepository, deleteRepository, verifyRepository, syncRepositoryNow, listTokens, createToken, updateToken, deleteToken, listPackages, getPackage, getPackageReadme, getPackageChangelog, getPackageStats, addPackagesFromMirror, getStats, getSettings, updatePackagistMirroring, deleteArtifact, cleanupArtifacts, cleanupNumericVersions, loginRoute, logoutRoute, meRoute, setupRoute, setup2FARoute, enable2FARoute, disable2FARoute, listUsers, createUser, deleteUser, sessionMiddleware, checkAuthRequired, acceptInviteRoute, getLogger, } from './index';
+/**
+ * Create the generic Hono application
+ * This factory function expects drivers to be injected via middleware or arguments,
+ * or it sets up the structure for them to be set.
+ */
+export function createApp(options) {
+    const app = new Hono();
+    const logger = getLogger('info'); // Default logger, can vary per request if needed
+    // Global middleware
+    app.use('*', cors());
+    app.use('*', requestIdMiddleware);
+    app.onError(async (err, c) => {
+        const requestId = c.get('requestId');
+        logger.error('Unhandled error', {
+            url: c.req.url,
+            method: c.req.method,
+            path: new URL(c.req.url).pathname,
+        }, err instanceof Error ? err : new Error(String(err)));
+        return c.json({
+            error: 'Internal Server Error',
+            message: err.message,
+            ...(requestId && { requestId }),
+        }, 500);
+    });
+    // Custom Init hook (for setting generic drivers from outer scope)
+    if (options?.onInit) {
+        options.onInit(app);
+    }
+    else {
+        // If drivers provided directly, inject them
+        if (options?.database) {
+            app.use('*', async (c, next) => {
+                c.set('database', options.database);
+                await next();
+            });
+        }
+        if (options?.storage) {
+            app.use('*', async (c, next) => {
+                c.set('storage', options.storage);
+                await next();
+            });
+        }
+    }
+    // Health check (no auth required)
+    app.get('/health', healthRoute);
+    // API routes
+    const apiRoutes = new Hono();
+    // Auth routes (no session required)
+    apiRoutes.post('/auth/login', loginRoute);
+    apiRoutes.get('/auth/check', checkAuthRequired);
+    apiRoutes.post('/setup', setupRoute); /* Fresh install flow */
+    apiRoutes.post('/auth/invite/accept', acceptInviteRoute);
+    // Protected routes - require session
+    const protectedRoutes = new Hono();
+    // ** SESSION MIDDLEWARE **
+    protectedRoutes.use('*', async (c, next) => {
+        return sessionMiddleware(c, next);
+    });
+    // Auth routes (session required)
+    protectedRoutes.post('/auth/logout', logoutRoute);
+    protectedRoutes.get('/auth/me', meRoute);
+    protectedRoutes.post('/auth/2fa/setup', setup2FARoute);
+    protectedRoutes.post('/auth/2fa/enable', enable2FARoute);
+    protectedRoutes.post('/auth/2fa/disable', disable2FARoute);
+    // User Management
+    protectedRoutes.get('/users', listUsers);
+    protectedRoutes.post('/users', createUser);
+    protectedRoutes.delete('/users/:id', deleteUser);
+    // Repository routes
+    protectedRoutes.get('/repositories', listRepositories);
+    protectedRoutes.post('/repositories', createRepository);
+    protectedRoutes.get('/repositories/:id', getRepository);
+    protectedRoutes.put('/repositories/:id', updateRepository);
+    protectedRoutes.delete('/repositories/:id', deleteRepository);
+    protectedRoutes.get('/repositories/:id/verify', verifyRepository);
+    protectedRoutes.post('/repositories/:id/sync', syncRepositoryNow);
+    // Token routes
+    protectedRoutes.get('/tokens', listTokens);
+    protectedRoutes.post('/tokens', createToken);
+    protectedRoutes.patch('/tokens/:id', updateToken);
+    protectedRoutes.delete('/tokens/:id', deleteToken);
+    // Package routes
+    protectedRoutes.get('/packages', listPackages);
+    protectedRoutes.get('/packages/:name', getPackage);
+    protectedRoutes.get('/packages/:name/:version/readme', getPackageReadme);
+    protectedRoutes.get('/packages/:name/:version/changelog', getPackageChangelog);
+    protectedRoutes.get('/packages/:name/:version/stats', getPackageStats);
+    protectedRoutes.post('/packages/add-from-mirror', addPackagesFromMirror);
+    // Stats
+    protectedRoutes.get('/stats', getStats);
+    // Settings
+    protectedRoutes.get('/settings', getSettings);
+    protectedRoutes.put('/settings/packagist-mirroring', updatePackagistMirroring);
+    // Artifacts
+    protectedRoutes.delete('/artifacts/:id', deleteArtifact);
+    protectedRoutes.post('/artifacts/cleanup', cleanupArtifacts);
+    protectedRoutes.post('/packages/cleanup-numeric-versions', cleanupNumericVersions);
+    // Mount protected routes under /api
+    apiRoutes.route('/', protectedRoutes);
+    app.route('/api', apiRoutes);
+    // Composer routes
+    const composerAuth = async (c, next) => {
+        await composerVersionMiddleware(c, next);
+    };
+    const composerTokenAuth = async (c, next) => {
+        return authMiddleware(c, next);
+    };
+    app.get('/packages.json', composerAuth, composerTokenAuth, packagesJsonRoute);
+    app.get('/p2/:vendor/:package', composerAuth, composerTokenAuth, p2PackageRoute);
+    const distAuth = async (c, next) => {
+        return distAuthMiddleware(c, next);
+    };
+    app.get('/dist/m/:vendor/:package/:version', composerAuth, distAuth, distMirrorRoute);
+    app.get('/dist/:vendor/:package/:version/:reference', composerAuth, distAuth, distLockfileRoute);
+    app.get('/dist/:repo_id/:vendor/:package/:version', composerAuth, distAuth, distRoute);
+    return app;
+}
+//# sourceMappingURL=factory.js.map

package/dist/factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"factory.js","sourceRoot":"","sources":["../src/factory.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EACH,yBAAyB,EACzB,cAAc,EACd,kBAAkB,EAClB,mBAAmB,EACnB,iBAAiB,EACjB,cAAc,EACd,SAAS,EACT,eAAe,EACf,iBAAiB,EACjB,WAAW,EACX,gBAAgB,EAChB,gBAAgB,EAChB,aAAa,EACb,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,UAAU,EACV,WAAW,EACX,WAAW,EACX,WAAW,EACX,YAAY,EACZ,UAAU,EACV,gBAAgB,EAChB,mBAAmB,EACnB,eAAe,EACf,qBAAqB,EACrB,QAAQ,EACR,WAAW,EACX,wBAAwB,EACxB,cAAc,EACd,gBAAgB,EAChB,sBAAsB,EACtB,UAAU,EACV,WAAW,EACX,OAAO,EACP,UAAU,EACV,aAAa,EACb,cAAc,EACd,eAAe,EACf,SAAS,EACT,UAAU,EACV,UAAU,EACV,iBAAiB,EACjB,iBAAiB,EACjB,iBAAiB,EACjB,SAAS,GAIZ,MAAM,SAAS,CAAC;AAuBjB;;;;GAIG;AACH,MAAM,UAAU,SAAS,CAAC,OAIzB;IACG,MAAM,GAAG,GAAG,IAAI,IAAI,EAAsD,CAAC;IAC3E,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,iDAAiD;IAEnF,oBAAoB;IACpB,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;IACrB,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;IAElC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE;QACzB,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAuB,CAAC;QAC3D,MAAM,CAAC,KAAK,CACR,iBAAiB,EACjB;YACI,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG;YACd,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM;YACpB,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ;SACpC,EACD,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CACtD,CAAC;QACF,OAAO,CAAC,CAAC,IAAI,CACT;YACI,KAAK,EAAE,uBAAuB;YAC9B,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,GAAG,CAAC,SAAS,IAAI,EAAE,SAAS,EAAE,CAAC;SAClC,EACD,GAAG,CACN,CAAC;IACN,CAAC,CAAC,CAAC;IAEH,kEAAkE;IAClE,IAAI,OAAO,EAAE,MAAM,EAAE,CAAC;QAClB,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;SAAM,CAAC;QACJ,4CAA4C;QAC5C,IAAI,OAAO,EAAE,QAAQ,EAAE,CAAC;YACpB,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;gBAC3B,CAAC,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,QAAS,CAAC,CAAC;gBACrC,MAAM,IAAI,EAAE,CAAC;YACjB,CAAC,CAAC,CAAC;QACP,CAAC;QACD,IAAI,OAAO,EAAE,OAAO,EAAE,CAAC;YACnB,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;gBAC3B,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,OAAQ,CAAC,CAAC;gBACnC,MAAM,IAAI,EAAE,CAAC;YACjB,CAAC,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IAED,kCAAkC;IAClC,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAEhC,aAAa;IACb,MAAM,SAAS,GAAG,IAAI,IAAI,EAAsD,CAAC;IAEjF,oCAAoC;IACpC,SAAS,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;IAC1C,SAAS,CAAC,GAAG,CAAC,aAAa,EAAE,iBAAiB,CAAC,CAAC;IAChD,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,wBAAwB;IAC9D,SAAS,CAAC,IAAI,CAAC,qBAAqB,EAAE,iBAAiB,CAAC,CAAC;IAEzD,qCAAqC;IACrC,MAAM,eAAe,GAAG,IAAI,IAAI,EAAsD,CAAC;IAEvF,2BAA2B;IAC3B,eAAe,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACvC,OAAO,iBAAiB,CAAC,CAAQ,EAAE,IAAW,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,iCAAiC;IACjC,eAAe,CAAC,IAAI,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;IAClD,eAAe,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACzC,eAAe,CAAC,IAAI,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC;IACvD,eAAe,CAAC,IAAI,CAAC,kBAAkB,EAAE,cAAc,CAAC,CAAC;IACzD,eAAe,CAAC,IAAI,CAAC,mBAAmB,EAAE,eAAe,CAAC,CAAC;IAE3D,kBAAkB;IAClB,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IACzC,eAAe,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC3C,eAAe,CAAC,MAAM,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;IAEjD,oBAAoB;IACpB,eAAe,CAAC,GAAG,CAAC,eAAe,EAAE,gBAAgB,CAAC,CAAC;IACvD,eAAe,CAAC,IAAI,CAAC,eAAe,EAAE,gBAAgB,CAAC,CAAC;IACxD,eAAe,CAAC,GAAG,CAAC,mBAAmB,EAAE,aAAa,CAAC,CAAC;IACxD,eAAe,CAAC,GAAG,CAAC,mBAAmB,EAAE,gBAAgB,CAAC,CAAC;IAC3D,eAAe,CAAC,MAAM,CAAC,mBAAmB,EAAE,gBAAgB,CAAC,CAAC;IAC9D,eAAe,CAAC,GAAG,CAAC,0BAA0B,EAAE,gBAAgB,CAAC,CAAC;IAClE,eAAe,CAAC,IAAI,CAAC,wBAAwB,EAAE,iBAAiB,CAAC,CAAC;IAElE,eAAe;IACf,eAAe,CAAC,GAAG,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IAC3C,eAAe,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAC7C,eAAe,CAAC,KAAK,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;IAClD,eAAe,CAAC,MAAM,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;IAEnD,iBAAiB;IACjB,eAAe,CAAC,GAAG,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;IAC/C,eAAe,CAAC,GAAG,CAAC,iBAAiB,EAAE,UAAU,CAAC,CAAC;IACnD,eAAe,CAAC,GAAG,CAAC,iCAAiC,EAAE,gBAAgB,CAAC,CAAC;IACzE,eAAe,CAAC,GAAG,CAAC,oCAAoC,EAAE,mBAAmB,CAAC,CAAC;IAC/E,eAAe,CAAC,GAAG,CAAC,gCAAgC,EAAE,eAAe,CAAC,CAAC;IACvE,eAAe,CAAC,IAAI,CAAC,2BAA2B,EAAE,qBAAqB,CAAC,CAAC;IAEzE,QAAQ;IACR,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAExC,WAAW;IACX,eAAe,CAAC,GAAG,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;IAC9C,eAAe,CAAC,GAAG,CAAC,+BAA+B,EAAE,wBAAwB,CAAC,CAAC;IAE/E,YAAY;IACZ,eAAe,CAAC,MAAM,CAAC,gBAAgB,EAAE,cAAc,CAAC,CAAC;IACzD,eAAe,CAAC,IAAI,CAAC,oBAAoB,EAAE,gBAAgB,CAAC,CAAC;IAC7D,eAAe,CAAC,IAAI,CAAC,oCAAoC,EAAE,sBAAsB,CAAC,CAAC;IAEnF,oCAAoC;IACpC,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;IACtC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAE7B,kBAAkB;IAClB,MAAM,YAAY,GAAG,KAAK,EAAE,CAAM,EAAE,IAAS,EAAE,EAAE;QAC7C,MAAM,yBAAyB,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IAC7C,CAAC,CAAC;IACF,MAAM,iBAAiB,GAAG,KAAK,EAAE,CAAM,EAAE,IAAS,EAAE,EAAE;QAClD,OAAO,cAAc,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IACnC,CAAC,CAAC;IAEF,GAAG,CAAC,GAAG,CAAC,gBAAgB,EAAE,YAAY,EAAE,iBAAiB,EAAE,iBAAiB,CAAC,CAAC;IAC9E,GAAG,CAAC,GAAG,CAAC,sBAAsB,EAAE,YAAY,EAAE,iBAAiB,EAAE,cAAc,CAAC,CAAC;IAEjF,MAAM,QAAQ,GAAG,KAAK,EAAE,CAAM,EAAE,IAAS,EAAE,EAAE;QACzC,OAAO,kBAAkB,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IACvC,CAAC,CAAC;IACF,GAAG,CAAC,GAAG,CAAC,mCAAmC,EAAE,YAAY,EAAE,QAAQ,EAAE,eAAe,CAAC,CAAC;IACtF,GAAG,CAAC,GAAG,CAAC,4CAA4C,EAAE,YAAY,EAAE,QAAQ,EAAE,iBAAiB,CAAC,CAAC;IACjG,GAAG,CAAC,GAAG,CAAC,0CAA0C,EAAE,YAAY,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;IAEvF,OAAO,GAAG,CAAC;AACf,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,16 @@
+export * from './db';
+export * from './middleware';
+export * from './routes';
+export * from './storage/index';
+export * from './cache/index';
+export * from './queue/index';
+export * from './sync';
+export * from './queue';
+export * from './jobs';
+export * from './utils';
+export * from './workflows';
+export * from './services/UserService';
+export * from './services/EmailService';
+export * from './ports';
+export * from './factory';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAGA,cAAc,MAAM,CAAC;AACrB,cAAc,cAAc,CAAC;AAC7B,cAAc,UAAU,CAAC;AACzB,cAAc,iBAAiB,CAAC;AAChC,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,QAAQ,CAAC;AACvB,cAAc,SAAS,CAAC;AACxB,cAAc,QAAQ,CAAC;AACvB,cAAc,SAAS,CAAC;AACxB,cAAc,aAAa,CAAC;AAC5B,cAAc,wBAAwB,CAAC;AACvC,cAAc,yBAAyB,CAAC;AACxC,cAAc,SAAS,CAAC;AACxB,cAAc,WAAW,CAAC"}

package/dist/index.js

@@ -0,0 +1,17 @@
+// Core package exports
+export * from './db';
+export * from './middleware';
+export * from './routes';
+export * from './storage/index';
+export * from './cache/index';
+export * from './queue/index';
+export * from './sync';
+export * from './queue';
+export * from './jobs';
+export * from './utils';
+export * from './workflows';
+export * from './services/UserService';
+export * from './services/EmailService';
+export * from './ports';
+export * from './factory';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,uBAAuB;AAEvB,cAAc,MAAM,CAAC;AACrB,cAAc,cAAc,CAAC;AAC7B,cAAc,UAAU,CAAC;AACzB,cAAc,iBAAiB,CAAC;AAChC,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,QAAQ,CAAC;AACvB,cAAc,SAAS,CAAC;AACxB,cAAc,QAAQ,CAAC;AACvB,cAAc,SAAS,CAAC;AACxB,cAAc,aAAa,CAAC;AAC5B,cAAc,wBAAwB,CAAC;AACvC,cAAc,yBAAyB,CAAC;AACxC,cAAc,SAAS,CAAC;AACxB,cAAc,WAAW,CAAC"}

package/dist/jobs/index.d.ts

@@ -0,0 +1,2 @@
+export * from './processor';
+//# sourceMappingURL=index.d.ts.map

package/dist/jobs/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/jobs/index.ts"],"names":[],"mappings":"AAMA,cAAc,aAAa,CAAC"}

package/dist/jobs/index.js

@@ -0,0 +1,7 @@
+/*
+ * PACKAGE.broker
+ * Copyright (C) 2025 Łukasz Bajsarowicz
+ * Licensed under AGPL-3.0
+ */
+export * from './processor';
+//# sourceMappingURL=index.js.map

package/dist/jobs/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/jobs/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,cAAc,aAAa,CAAC"}

package/dist/jobs/processor.d.ts

@@ -0,0 +1,49 @@
+import { type SyncOptions } from '../sync/repository-sync';
+/**
+ * Job types that can be processed
+ */
+export type Job = {
+    type: 'update_token_last_used';
+    tokenId: string;
+    timestamp: number;
+} | {
+    type: 'update_artifact_download';
+    artifactId: string;
+    timestamp: number;
+} | {
+    type: 'sync_repository';
+    repoId: string;
+};
+/**
+ * Environment bindings required for job processing
+ */
+export interface JobEnv {
+    DB: D1Database;
+    KV?: KVNamespace;
+    QUEUE?: Queue;
+    ENCRYPTION_KEY: string;
+}
+/**
+ * Job Processor interface - can be implemented for Queue or Sync execution
+ */
+export interface JobProcessor {
+    /**
+     * Enqueue a job for processing
+     * May execute immediately (sync) or queue for later (async)
+     */
+    enqueue(job: Job): Promise<void>;
+    /**
+     * Enqueue multiple jobs for processing
+     * May execute in parallel (sync) or queue for later (async)
+     */
+    enqueueAll(jobs: Job[]): Promise<void>;
+}
+/**
+ * Create the appropriate job processor based on environment
+ * If QUEUE is available, uses QueueJobProcessor (async)
+ * Otherwise, uses SyncJobProcessor (immediate execution)
+ */
+export declare function createJobProcessor(env: JobEnv, options?: {
+    syncOptions?: SyncOptions;
+}): JobProcessor;
+//# sourceMappingURL=processor.d.ts.map

package/dist/jobs/processor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"processor.d.ts","sourceRoot":"","sources":["../../src/jobs/processor.ts"],"names":[],"mappings":"AAYA,OAAO,EAAgC,KAAK,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAGzF;;GAEG;AACH,MAAM,MAAM,GAAG,GACX;IACA,IAAI,EAAE,wBAAwB,CAAC;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;CACnB,GACC;IACA,IAAI,EAAE,0BAA0B,CAAC;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CACnB,GACC;IACA,IAAI,EAAE,iBAAiB,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEJ;;GAEG;AACH,MAAM,WAAW,MAAM;IACrB,EAAE,EAAE,UAAU,CAAC;IACf,EAAE,CAAC,EAAE,WAAW,CAAC;IACjB,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,cAAc,EAAE,MAAM,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B;;;OAGG;IACH,OAAO,CAAC,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjC;;;OAGG;IACH,UAAU,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACxC;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,MAAM,EACX,OAAO,CAAC,EAAE;IAAE,WAAW,CAAC,EAAE,WAAW,CAAA;CAAE,GACtC,YAAY,CAKd"}

package/dist/jobs/processor.js

@@ -0,0 +1,118 @@
+/*
+ * PACKAGE.broker
+ * Copyright (C) 2025 Łukasz Bajsarowicz
+ * Licensed under AGPL-3.0
+ */
+// Job Processor - abstraction for sync/async job execution
+// Automatically falls back to synchronous execution when Queues are unavailable
+import { createD1Database as createDatabase } from '../db';
+import { tokens, artifacts } from '../db/schema';
+import { eq } from 'drizzle-orm';
+import { syncRepository } from '../sync/repository-sync';
+import { getLogger } from '../utils/logger';
+/**
+ * Create the appropriate job processor based on environment
+ * If QUEUE is available, uses QueueJobProcessor (async)
+ * Otherwise, uses SyncJobProcessor (immediate execution)
+ */
+export function createJobProcessor(env, options) {
+    if (env.QUEUE && typeof env.QUEUE.send === 'function') {
+        return new QueueJobProcessor(env.QUEUE);
+    }
+    return new SyncJobProcessor(env, options?.syncOptions);
+}
+/**
+ * Queue-based job processor - sends jobs to Cloudflare Queue
+ * Jobs are processed asynchronously by queue consumers
+ */
+class QueueJobProcessor {
+    queue;
+    constructor(queue) {
+        this.queue = queue;
+    }
+    async enqueue(job) {
+        await this.queue.send(job);
+    }
+    async enqueueAll(jobs) {
+        // Queue supports batch sending
+        for (const job of jobs) {
+            await this.queue.send(job);
+        }
+    }
+}
+/**
+ * Synchronous job processor - executes jobs immediately
+ * Used when Queues are not available (free tier / local dev)
+ */
+class SyncJobProcessor {
+    env;
+    syncOptions;
+    constructor(env, syncOptions) {
+        this.env = env;
+        this.syncOptions = syncOptions;
+    }
+    async enqueue(job) {
+        await this.processJob(job);
+    }
+    async enqueueAll(jobs) {
+        // Process jobs in parallel for better performance
+        await Promise.all(jobs.map((job) => this.processJob(job)));
+    }
+    async processJob(job) {
+        const db = createDatabase(this.env.DB);
+        const logger = getLogger();
+        try {
+            switch (job.type) {
+                case 'update_token_last_used':
+                    await db
+                        .update(tokens)
+                        .set({ last_used_at: job.timestamp })
+                        .where(eq(tokens.id, job.tokenId));
+                    break;
+                case 'update_artifact_download':
+                    // Increment download count and update last_downloaded_at
+                    const [artifact] = await db
+                        .select()
+                        .from(artifacts)
+                        .where(eq(artifacts.id, job.artifactId))
+                        .limit(1);
+                    if (artifact) {
+                        await db
+                            .update(artifacts)
+                            .set({
+                            download_count: (artifact.download_count || 0) + 1,
+                            last_downloaded_at: job.timestamp,
+                        })
+                            .where(eq(artifacts.id, job.artifactId));
+                    }
+                    break;
+                case 'sync_repository':
+                    if (!this.syncOptions) {
+                        logger.warn('SyncJobProcessor: syncOptions not provided, skipping sync', { repoId: job.repoId });
+                        return;
+                    }
+                    const syncEnv = {
+                        DB: this.env.DB,
+                        KV: this.env.KV,
+                        QUEUE: this.env.QUEUE,
+                        ENCRYPTION_KEY: this.env.ENCRYPTION_KEY,
+                    };
+                    const result = await syncRepository(job.repoId, syncEnv, this.syncOptions);
+                    if (!result.success) {
+                        logger.error('Sync failed for repo', { repoId: job.repoId, error: result.error });
+                    }
+                    else {
+                        logger.info('Sync successful for repo', { repoId: job.repoId, packageCount: result.packages.length });
+                    }
+                    break;
+                default:
+                    logger.warn('Unknown job type', { jobType: job.type });
+            }
+        }
+        catch (error) {
+            logger.error('Job processing error', { jobType: job.type }, error instanceof Error ? error : new Error(String(error)));
+            // Don't throw - we want to continue processing other jobs
+        }
+    }
+}
+//# sourceMappingURL=processor.js.map

package/dist/jobs/processor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"processor.js","sourceRoot":"","sources":["../../src/jobs/processor.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,2DAA2D;AAC3D,gFAAgF;AAEhF,OAAO,EAAE,gBAAgB,IAAI,cAAc,EAAE,MAAM,OAAO,CAAC;AAC3D,OAAO,EAAE,MAAM,EAAE,SAAS,EAAgB,MAAM,cAAc,CAAC;AAC/D,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,cAAc,EAAkC,MAAM,yBAAyB,CAAC;AACzF,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAgD5C;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAChC,GAAW,EACX,OAAuC;IAEvC,IAAI,GAAG,CAAC,KAAK,IAAI,OAAO,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QACtD,OAAO,IAAI,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,IAAI,gBAAgB,CAAC,GAAG,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;AACzD,CAAC;AAED;;;GAGG;AACH,MAAM,iBAAiB;IACD;IAApB,YAAoB,KAAY;QAAZ,UAAK,GAAL,KAAK,CAAO;IAAI,CAAC;IAErC,KAAK,CAAC,OAAO,CAAC,GAAQ;QACpB,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,IAAW;QAC1B,+BAA+B;QAC/B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,gBAAgB;IAEV;IACA;IAFV,YACU,GAAW,EACX,WAAyB;QADzB,QAAG,GAAH,GAAG,CAAQ;QACX,gBAAW,GAAX,WAAW,CAAc;IAC/B,CAAC;IAEL,KAAK,CAAC,OAAO,CAAC,GAAQ;QACpB,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,IAAW;QAC1B,kDAAkD;QAClD,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC7D,CAAC;IAEO,KAAK,CAAC,UAAU,CAAC,GAAQ;QAC/B,MAAM,EAAE,GAAG,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAE3B,IAAI,CAAC;YACH,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC;gBACjB,KAAK,wBAAwB;oBAC3B,MAAM,EAAE;yBACL,MAAM,CAAC,MAAM,CAAC;yBACd,GAAG,CAAC,EAAE,YAAY,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC;yBACpC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;oBACrC,MAAM;gBAER,KAAK,0BAA0B;oBAC7B,yDAAyD;oBACzD,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,EAAE;yBACxB,MAAM,EAAE;yBACR,IAAI,CAAC,SAAS,CAAC;yBACf,KAAK,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;yBACvC,KAAK,CAAC,CAAC,CAAC,CAAC;oBAEZ,IAAI,QAAQ,EAAE,CAAC;wBACb,MAAM,EAAE;6BACL,MAAM,CAAC,SAAS,CAAC;6BACjB,GAAG,CAAC;4BACH,cAAc,EAAE,CAAC,QAAQ,CAAC,cAAc,IAAI,CAAC,CAAC,GAAG,CAAC;4BAClD,kBAAkB,EAAE,GAAG,CAAC,SAAS;yBAClC,CAAC;6BACD,KAAK,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;oBAC7C,CAAC;oBACD,MAAM;gBAER,KAAK,iBAAiB;oBACpB,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;wBACtB,MAAM,CAAC,IAAI,CAAC,2DAA2D,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;wBACjG,OAAO;oBACT,CAAC;oBAED,MAAM,OAAO,GAAY;wBACvB,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE;wBACf,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE;wBACf,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK;wBACrB,cAAc,EAAE,IAAI,CAAC,GAAG,CAAC,cAAc;qBACxC,CAAC;oBAEF,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;oBAE3E,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;wBACpB,MAAM,CAAC,KAAK,CAAC,sBAAsB,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;oBACpF,CAAC;yBAAM,CAAC;wBACN,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;oBACxG,CAAC;oBACD,MAAM;gBAER;oBACE,MAAM,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,OAAO,EAAG,GAAW,CAAC,IAAI,EAAE,CAAC,CAAC;YACpE,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,sBAAsB,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACvH,0DAA0D;QAC5D,CAAC;IACH,CAAC;CACF"}

package/dist/middleware/auth.d.ts

@@ -0,0 +1,52 @@
+import type { Context } from 'hono';
+import type { DatabasePort } from '../ports';
+export interface AuthContext {
+    tokenId: string;
+    tokenDescription: string;
+    tokenPermissions: 'readonly' | 'write';
+}
+/**
+ * Dual authentication middleware for dist route
+ * Accepts either Composer token (Basic Auth) OR admin session (Bearer token)
+ */
+export declare function distAuthMiddleware(c: Context<{
+    Bindings: {
+        DB: D1Database;
+        KV?: KVNamespace;
+        QUEUE?: Queue;
+    };
+    Variables: {
+        auth?: AuthContext;
+        session?: {
+            userId: string;
+            email: string;
+        };
+        database: DatabasePort;
+    };
+}>, next: () => Promise<Response>): Promise<Response>;
+/**
+ * Authentication middleware
+ * Validates Basic Auth -> D1 Token -> KV Rate Limit
+ */
+export declare function authMiddleware(c: Context<{
+    Bindings: {
+        DB: D1Database;
+        KV?: KVNamespace;
+        QUEUE?: Queue;
+    };
+    Variables: {
+        auth: AuthContext;
+        database: DatabasePort;
+        requestId?: string;
+    };
+}>, next: () => Promise<Response>): Promise<Response>;
+/**
+ * Middleware to check token permissions
+ * Requires write permission for certain operations
+ */
+export declare function checkTokenPermissions(requiredPermission: 'readonly' | 'write'): (c: Context<{
+    Variables: {
+        auth: AuthContext;
+    };
+}>, next: () => Promise<Response>) => Promise<Response>;
+//# sourceMappingURL=auth.d.ts.map

package/dist/middleware/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/middleware/auth.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAQ,MAAM,MAAM,CAAC;AAG1C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAI7C,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,gBAAgB,EAAE,MAAM,CAAC;IACzB,gBAAgB,EAAE,UAAU,GAAG,OAAO,CAAC;CACxC;AA+FD;;;GAGG;AACH,wBAAsB,kBAAkB,CACtC,CAAC,EAAE,OAAO,CAAC;IACT,QAAQ,EAAE;QACR,EAAE,EAAE,UAAU,CAAC;QACf,EAAE,CAAC,EAAE,WAAW,CAAC;QACjB,KAAK,CAAC,EAAE,KAAK,CAAC;KACf,CAAC;IACF,SAAS,EAAE;QACT,IAAI,CAAC,EAAE,WAAW,CAAC;QACnB,OAAO,CAAC,EAAE;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAA;SAAE,CAAC;QAC5C,QAAQ,EAAE,YAAY,CAAC;KACxB,CAAC;CACH,CAAC,EACF,IAAI,EAAE,MAAM,OAAO,CAAC,QAAQ,CAAC,GAC5B,OAAO,CAAC,QAAQ,CAAC,CA6GnB;AAED;;;GAGG;AACH,wBAAsB,cAAc,CAClC,CAAC,EAAE,OAAO,CAAC;IACT,QAAQ,EAAE;QACR,EAAE,EAAE,UAAU,CAAC;QACf,EAAE,CAAC,EAAE,WAAW,CAAC;QACjB,KAAK,CAAC,EAAE,KAAK,CAAC;KACf,CAAC;IACF,SAAS,EAAE;QACT,IAAI,EAAE,WAAW,CAAC;QAClB,QAAQ,EAAE,YAAY,CAAC;QACvB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;CACH,CAAC,EACF,IAAI,EAAE,MAAM,OAAO,CAAC,QAAQ,CAAC,GAC5B,OAAO,CAAC,QAAQ,CAAC,CA0HnB;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,kBAAkB,EAAE,UAAU,GAAG,OAAO,IAE1E,GAAG,OAAO,CAAC;IACT,SAAS,EAAE;QACT,IAAI,EAAE,WAAW,CAAC;KACnB,CAAC;CACH,CAAC,EACF,MAAM,MAAM,OAAO,CAAC,QAAQ,CAAC,KAC5B,OAAO,CAAC,QAAQ,CAAC,CAqBrB"}