@runcore-sh/runcore 0.1.2

package/dist/files/types.js

@@ -0,0 +1,20 @@
+/**
+ * File management types — DASH-65.
+ * All interfaces for the file registry, events, validation, and sync.
+ */
+export const DEFAULT_FILE_SETTINGS = {
+    enabled: true,
+    maxStorageBytes: 10 * 1024 * 1024 * 1024, // 10 GB
+    maxUploadBytes: 50 * 1024 * 1024, // 50 MB
+    maxVersions: 20,
+    autoCompress: true,
+    autoThumbnail: true,
+    encryptSensitive: true,
+    cleanupDays: 90,
+    gdrive: {
+        syncEnabled: false,
+        folderId: null,
+        syncIntervalMs: 15 * 60 * 1000, // 15 min
+    },
+};
+//# sourceMappingURL=types.js.map

package/dist/files/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/files/types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAyKH,MAAM,CAAC,MAAM,qBAAqB,GAAiB;IACjD,OAAO,EAAE,IAAI;IACb,eAAe,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,EAAE,QAAQ;IAClD,cAAc,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAW,QAAQ;IACnD,WAAW,EAAE,EAAE;IACf,YAAY,EAAE,IAAI;IAClB,aAAa,EAAE,IAAI;IACnB,gBAAgB,EAAE,IAAI;IACtB,WAAW,EAAE,EAAE;IACf,MAAM,EAAE;QACN,WAAW,EAAE,KAAK;QAClB,QAAQ,EAAE,IAAI;QACd,cAAc,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,SAAS;KAC1C;CACF,CAAC"}

package/dist/files/validate.d.ts

@@ -0,0 +1,15 @@
+/**
+ * File upload validation pipeline — DASH-65.
+ * Filename sanitization, extension allowlist, magic byte detection, content scan.
+ * Never throws — returns ValidationResult.
+ */
+import type { ValidationResult } from "./types.js";
+export declare const ALLOWED_MIME_TYPES: Record<string, string[]>;
+/** Slugify a filename for storage paths (keep extension separate). */
+export declare function slugify(name: string): string;
+export declare function validateUpload(buffer: Buffer, originalName: string, declaredMime: string, maxUploadBytes: number): Promise<ValidationResult>;
+/** Sanitize SVG buffer content, returning new buffer. */
+export declare function sanitizeSvgBuffer(buffer: Buffer): Buffer;
+/** Resolve the canonical MIME type for a given extension. */
+export declare function mimeForExtension(ext: string): string;
+//# sourceMappingURL=validate.d.ts.map

package/dist/files/validate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../../src/files/validate.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAMnD,eAAO,MAAM,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAwBvD,CAAC;AA4DF,sEAAsE;AACtE,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAO5C;AAqCD,wBAAsB,cAAc,CAClC,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,MAAM,EACpB,YAAY,EAAE,MAAM,EACpB,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,gBAAgB,CAAC,CA2F3B;AAED,yDAAyD;AACzD,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAGxD;AAED,6DAA6D;AAC7D,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAKpD"}

package/dist/files/validate.js

@@ -0,0 +1,213 @@
+/**
+ * File upload validation pipeline — DASH-65.
+ * Filename sanitization, extension allowlist, magic byte detection, content scan.
+ * Never throws — returns ValidationResult.
+ */
+import { createLogger } from "../utils/logger.js";
+const log = createLogger("files.validate");
+// ── MIME type allowlist ─────────────────────────────────────────────────────
+export const ALLOWED_MIME_TYPES = {
+    // Documents
+    "application/pdf": [".pdf"],
+    "application/vnd.openxmlformats-officedocument.wordprocessingml.document": [".docx"],
+    "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet": [".xlsx"],
+    "application/vnd.openxmlformats-officedocument.presentationml.presentation": [".pptx"],
+    "text/plain": [".txt", ".log", ".csv", ".md"],
+    "text/markdown": [".md"],
+    "text/csv": [".csv"],
+    "application/json": [".json"],
+    "application/x-yaml": [".yaml", ".yml"],
+    // Images
+    "image/png": [".png"],
+    "image/jpeg": [".jpg", ".jpeg"],
+    "image/webp": [".webp"],
+    "image/gif": [".gif"],
+    "image/svg+xml": [".svg"],
+    // Audio
+    "audio/wav": [".wav"],
+    "audio/mpeg": [".mp3"],
+    "audio/webm": [".webm"],
+    "audio/ogg": [".ogg"],
+    // Archives
+    "application/zip": [".zip"],
+};
+/** All allowed extensions (flat set for quick lookup). */
+const ALLOWED_EXTENSIONS = new Set(Object.values(ALLOWED_MIME_TYPES).flat());
+const MAGIC_SIGNATURES = [
+    { mime: "application/pdf", bytes: [0x25, 0x50, 0x44, 0x46] }, // %PDF
+    { mime: "image/png", bytes: [0x89, 0x50, 0x4E, 0x47, 0x0D, 0x0A, 0x1A, 0x0A] },
+    { mime: "image/jpeg", bytes: [0xFF, 0xD8, 0xFF] },
+    { mime: "image/gif", bytes: [0x47, 0x49, 0x46, 0x38] }, // GIF8
+    { mime: "image/webp", bytes: [0x52, 0x49, 0x46, 0x46], offset: 0 }, // RIFF (check "WEBP" at offset 8)
+    { mime: "application/zip", bytes: [0x50, 0x4B, 0x03, 0x04] }, // PK
+    { mime: "audio/ogg", bytes: [0x4F, 0x67, 0x67, 0x53] }, // OggS
+    // ID3 tag for MP3
+    { mime: "audio/mpeg", bytes: [0x49, 0x44, 0x33] }, // ID3
+    // RIFF for WAV
+    { mime: "audio/wav", bytes: [0x52, 0x49, 0x46, 0x46] },
+];
+/** Detect MIME type from file header bytes. */
+function detectMimeFromBytes(buffer) {
+    for (const sig of MAGIC_SIGNATURES) {
+        const offset = sig.offset ?? 0;
+        if (buffer.length < offset + sig.bytes.length)
+            continue;
+        const match = sig.bytes.every((b, i) => buffer[offset + i] === b);
+        if (!match)
+            continue;
+        // Disambiguate RIFF containers (WAV vs WebP)
+        if (sig.mime === "audio/wav" || sig.mime === "image/webp") {
+            if (buffer.length >= 12) {
+                const tag = buffer.subarray(8, 12).toString("ascii");
+                if (tag === "WEBP")
+                    return "image/webp";
+                if (tag === "WAVE")
+                    return "audio/wav";
+            }
+            continue;
+        }
+        return sig.mime;
+    }
+    // DOCX/XLSX/PPTX are ZIP-based — check for PK header
+    if (buffer.length >= 4 && buffer[0] === 0x50 && buffer[1] === 0x4B) {
+        return "application/zip"; // Caller checks extension for OOXML types
+    }
+    return null;
+}
+// ── Filename sanitization ───────────────────────────────────────────────────
+/** Slugify a filename for storage paths (keep extension separate). */
+export function slugify(name) {
+    return name
+        .toLowerCase()
+        .replace(/[^a-z0-9.\-_]/g, "-")
+        .replace(/-+/g, "-")
+        .replace(/^-|-$/g, "")
+        .slice(0, 200);
+}
+function sanitizeFilename(name) {
+    // Strip path traversal and control chars
+    let clean = name
+        .replace(/\.\./g, "")
+        .replace(/[/\\]/g, "")
+        .replace(/[\x00-\x1F\x7F]/g, "")
+        .trim();
+    // Truncate to 255 chars
+    if (clean.length > 255)
+        clean = clean.slice(0, 255);
+    // Fallback for empty result
+    if (!clean)
+        clean = "unnamed";
+    return clean;
+}
+function getExtension(name) {
+    const lastDot = name.lastIndexOf(".");
+    if (lastDot <= 0)
+        return "";
+    return name.slice(lastDot).toLowerCase();
+}
+// ── SVG sanitization ────────────────────────────────────────────────────────
+function sanitizeSvg(content) {
+    return content
+        .replace(/<script[\s\S]*?<\/script>/gi, "")
+        .replace(/<iframe[\s\S]*?<\/iframe>/gi, "")
+        .replace(/\bon\w+\s*=/gi, "data-removed=")
+        .replace(/javascript\s*:/gi, "removed:");
+}
+// ── Main validation ─────────────────────────────────────────────────────────
+export async function validateUpload(buffer, originalName, declaredMime, maxUploadBytes) {
+    const sanitizedName = sanitizeFilename(originalName);
+    const ext = getExtension(sanitizedName);
+    // 1. Extension check
+    if (!ext) {
+        return { valid: false, rejected: "No file extension", sanitizedName, detectedMime: "", detectedExt: "" };
+    }
+    if (!ALLOWED_EXTENSIONS.has(ext)) {
+        return { valid: false, rejected: `Extension not allowed: ${ext}`, sanitizedName, detectedMime: "", detectedExt: ext };
+    }
+    // 2. Double extension check (e.g., .pdf.exe)
+    const parts = sanitizedName.split(".");
+    if (parts.length > 2) {
+        const suspiciousExts = [".exe", ".bat", ".cmd", ".com", ".scr", ".pif", ".vbs", ".js", ".ws", ".msi"];
+        for (const part of parts.slice(1)) {
+            if (suspiciousExts.includes("." + part.toLowerCase())) {
+                return { valid: false, rejected: `Suspicious double extension detected`, sanitizedName, detectedMime: "", detectedExt: ext };
+            }
+        }
+    }
+    // 3. Size check
+    if (buffer.length > maxUploadBytes) {
+        const sizeMB = (buffer.length / (1024 * 1024)).toFixed(1);
+        const limitMB = (maxUploadBytes / (1024 * 1024)).toFixed(1);
+        return { valid: false, rejected: `File too large: ${sizeMB} MB (limit: ${limitMB} MB)`, sanitizedName, detectedMime: declaredMime, detectedExt: ext };
+    }
+    // 4. Magic byte verification
+    const detectedMime = detectMimeFromBytes(buffer);
+    // Text files won't have magic bytes — that's OK
+    const textExts = new Set([".txt", ".log", ".csv", ".md", ".json", ".yaml", ".yml", ".svg"]);
+    const isTextExt = textExts.has(ext);
+    if (detectedMime && !isTextExt) {
+        // OOXML files are ZIP-based — verify extension matches
+        const ooxmlExts = {
+            ".docx": "application/vnd.openxmlformats-officedocument.wordprocessingml.document",
+            ".xlsx": "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet",
+            ".pptx": "application/vnd.openxmlformats-officedocument.presentationml.presentation",
+        };
+        if (detectedMime === "application/zip" && ooxmlExts[ext]) {
+            // ZIP-based OOXML — trust the extension
+        }
+        else {
+            // Check declared MIME category matches detected
+            const declaredBase = declaredMime.split("/")[0];
+            const detectedBase = detectedMime.split("/")[0];
+            if (declaredBase !== detectedBase && detectedBase !== "application") {
+                log.warn("MIME mismatch detected", { declared: declaredMime, detected: detectedMime, name: sanitizedName });
+                return {
+                    valid: false,
+                    rejected: `File type mismatch: declared ${declaredMime} but detected ${detectedMime}`,
+                    sanitizedName,
+                    detectedMime,
+                    detectedExt: ext,
+                };
+            }
+        }
+    }
+    // 5. Content scan for text files
+    if (isTextExt) {
+        const text = buffer.toString("utf-8");
+        // Reject binary masquerading as text
+        if (text.includes("\0") && ext !== ".json") {
+            return { valid: false, rejected: "Binary content in text file", sanitizedName, detectedMime: declaredMime, detectedExt: ext };
+        }
+        // SVG script stripping (sanitize in place — caller should use sanitized buffer)
+        if (ext === ".svg") {
+            const hasDangerousContent = /<script/i.test(text) ||
+                /on\w+\s*=/i.test(text) ||
+                /javascript\s*:/i.test(text);
+            if (hasDangerousContent) {
+                log.warn("SVG sanitized — dangerous content stripped", { name: sanitizedName });
+            }
+        }
+    }
+    const resolvedMime = detectedMime ?? declaredMime;
+    log.debug("upload validated", { name: sanitizedName, mime: resolvedMime, size: buffer.length });
+    return {
+        valid: true,
+        sanitizedName,
+        detectedMime: resolvedMime,
+        detectedExt: ext,
+    };
+}
+/** Sanitize SVG buffer content, returning new buffer. */
+export function sanitizeSvgBuffer(buffer) {
+    const sanitized = sanitizeSvg(buffer.toString("utf-8"));
+    return Buffer.from(sanitized, "utf-8");
+}
+/** Resolve the canonical MIME type for a given extension. */
+export function mimeForExtension(ext) {
+    for (const [mime, exts] of Object.entries(ALLOWED_MIME_TYPES)) {
+        if (exts.includes(ext))
+            return mime;
+    }
+    return "application/octet-stream";
+}
+//# sourceMappingURL=validate.js.map

package/dist/files/validate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.js","sourceRoot":"","sources":["../../src/files/validate.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAGlD,MAAM,GAAG,GAAG,YAAY,CAAC,gBAAgB,CAAC,CAAC;AAE3C,+EAA+E;AAE/E,MAAM,CAAC,MAAM,kBAAkB,GAA6B;IAC1D,YAAY;IACZ,iBAAiB,EAAE,CAAC,MAAM,CAAC;IAC3B,yEAAyE,EAAE,CAAC,OAAO,CAAC;IACpF,mEAAmE,EAAE,CAAC,OAAO,CAAC;IAC9E,2EAA2E,EAAE,CAAC,OAAO,CAAC;IACtF,YAAY,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC;IAC7C,eAAe,EAAE,CAAC,KAAK,CAAC;IACxB,UAAU,EAAE,CAAC,MAAM,CAAC;IACpB,kBAAkB,EAAE,CAAC,OAAO,CAAC;IAC7B,oBAAoB,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC;IACvC,SAAS;IACT,WAAW,EAAE,CAAC,MAAM,CAAC;IACrB,YAAY,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC;IAC/B,YAAY,EAAE,CAAC,OAAO,CAAC;IACvB,WAAW,EAAE,CAAC,MAAM,CAAC;IACrB,eAAe,EAAE,CAAC,MAAM,CAAC;IACzB,QAAQ;IACR,WAAW,EAAE,CAAC,MAAM,CAAC;IACrB,YAAY,EAAE,CAAC,MAAM,CAAC;IACtB,YAAY,EAAE,CAAC,OAAO,CAAC;IACvB,WAAW,EAAE,CAAC,MAAM,CAAC;IACrB,WAAW;IACX,iBAAiB,EAAE,CAAC,MAAM,CAAC;CAC5B,CAAC;AAEF,0DAA0D;AAC1D,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAChC,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,IAAI,EAAE,CACzC,CAAC;AAUF,MAAM,gBAAgB,GAAqB;IACzC,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAAY,OAAO;IAC/E,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE;IAC9E,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE;IACjD,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAAkB,OAAO;IAC/E,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,EAAM,kCAAkC;IAC1G,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAAY,KAAK;IAC7E,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAAkB,OAAO;IAC/E,kBAAkB;IAClB,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAAuB,MAAM;IAC9E,eAAe;IACf,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE;CACvD,CAAC;AAEF,+CAA+C;AAC/C,SAAS,mBAAmB,CAAC,MAAc;IACzC,KAAK,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC;QAC/B,IAAI,MAAM,CAAC,MAAM,GAAG,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM;YAAE,SAAS;QACxD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QAClE,IAAI,CAAC,KAAK;YAAE,SAAS;QAErB,6CAA6C;QAC7C,IAAI,GAAG,CAAC,IAAI,KAAK,WAAW,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YAC1D,IAAI,MAAM,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;gBACxB,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;gBACrD,IAAI,GAAG,KAAK,MAAM;oBAAE,OAAO,YAAY,CAAC;gBACxC,IAAI,GAAG,KAAK,MAAM;oBAAE,OAAO,WAAW,CAAC;YACzC,CAAC;YACD,SAAS;QACX,CAAC;QAED,OAAO,GAAG,CAAC,IAAI,CAAC;IAClB,CAAC;IAED,qDAAqD;IACrD,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACnE,OAAO,iBAAiB,CAAC,CAAC,0CAA0C;IACtE,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,+EAA+E;AAE/E,sEAAsE;AACtE,MAAM,UAAU,OAAO,CAAC,IAAY;IAClC,OAAO,IAAI;SACR,WAAW,EAAE;SACb,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC;SAC9B,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;SACrB,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACnB,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY;IACpC,yCAAyC;IACzC,IAAI,KAAK,GAAG,IAAI;SACb,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;SACpB,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;SACrB,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC;SAC/B,IAAI,EAAE,CAAC;IAEV,wBAAwB;IACxB,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG;QAAE,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAEpD,4BAA4B;IAC5B,IAAI,CAAC,KAAK;QAAE,KAAK,GAAG,SAAS,CAAC;IAE9B,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,YAAY,CAAC,IAAY;IAChC,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,OAAO,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IAC5B,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;AAC3C,CAAC;AAED,+EAA+E;AAE/E,SAAS,WAAW,CAAC,OAAe;IAClC,OAAO,OAAO;SACX,OAAO,CAAC,6BAA6B,EAAE,EAAE,CAAC;SAC1C,OAAO,CAAC,6BAA6B,EAAE,EAAE,CAAC;SAC1C,OAAO,CAAC,eAAe,EAAE,eAAe,CAAC;SACzC,OAAO,CAAC,kBAAkB,EAAE,UAAU,CAAC,CAAC;AAC7C,CAAC;AAED,+EAA+E;AAE/E,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,MAAc,EACd,YAAoB,EACpB,YAAoB,EACpB,cAAsB;IAEtB,MAAM,aAAa,GAAG,gBAAgB,CAAC,YAAY,CAAC,CAAC;IACrD,MAAM,GAAG,GAAG,YAAY,CAAC,aAAa,CAAC,CAAC;IAExC,qBAAqB;IACrB,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,mBAAmB,EAAE,aAAa,EAAE,YAAY,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;IAC3G,CAAC;IACD,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QACjC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,0BAA0B,GAAG,EAAE,EAAE,aAAa,EAAE,YAAY,EAAE,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC;IACxH,CAAC;IAED,6CAA6C;IAC7C,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,cAAc,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QACtG,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YAClC,IAAI,cAAc,CAAC,QAAQ,CAAC,GAAG,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;gBACtD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,sCAAsC,EAAE,aAAa,EAAE,YAAY,EAAE,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC;YAC/H,CAAC;QACH,CAAC;IACH,CAAC;IAED,gBAAgB;IAChB,IAAI,MAAM,CAAC,MAAM,GAAG,cAAc,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAC1D,MAAM,OAAO,GAAG,CAAC,cAAc,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAC5D,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,mBAAmB,MAAM,eAAe,OAAO,MAAM,EAAE,aAAa,EAAE,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC;IACxJ,CAAC;IAED,6BAA6B;IAC7B,MAAM,YAAY,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAEjD,gDAAgD;IAChD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC5F,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAEpC,IAAI,YAAY,IAAI,CAAC,SAAS,EAAE,CAAC;QAC/B,uDAAuD;QACvD,MAAM,SAAS,GAA2B;YACxC,OAAO,EAAE,yEAAyE;YAClF,OAAO,EAAE,mEAAmE;YAC5E,OAAO,EAAE,2EAA2E;SACrF,CAAC;QACF,IAAI,YAAY,KAAK,iBAAiB,IAAI,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;YACzD,wCAAwC;QAC1C,CAAC;aAAM,CAAC;YACN,gDAAgD;YAChD,MAAM,YAAY,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAChD,MAAM,YAAY,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAChD,IAAI,YAAY,KAAK,YAAY,IAAI,YAAY,KAAK,aAAa,EAAE,CAAC;gBACpE,GAAG,CAAC,IAAI,CAAC,wBAAwB,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC;gBAC5G,OAAO;oBACL,KAAK,EAAE,KAAK;oBACZ,QAAQ,EAAE,gCAAgC,YAAY,iBAAiB,YAAY,EAAE;oBACrF,aAAa;oBACb,YAAY;oBACZ,WAAW,EAAE,GAAG;iBACjB,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,iCAAiC;IACjC,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACtC,qCAAqC;QACrC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;YAC3C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,6BAA6B,EAAE,aAAa,EAAE,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC;QAChI,CAAC;QACD,gFAAgF;QAChF,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;YACnB,MAAM,mBAAmB,GACvB,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;gBACrB,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;gBACvB,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC/B,IAAI,mBAAmB,EAAE,CAAC;gBACxB,GAAG,CAAC,IAAI,CAAC,4CAA4C,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC;YAClF,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAAG,YAAY,IAAI,YAAY,CAAC;IAElD,GAAG,CAAC,KAAK,CAAC,kBAAkB,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAChG,OAAO;QACL,KAAK,EAAE,IAAI;QACX,aAAa;QACb,YAAY,EAAE,YAAY;QAC1B,WAAW,EAAE,GAAG;KACjB,CAAC;AACJ,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,iBAAiB,CAAC,MAAc;IAC9C,MAAM,SAAS,GAAG,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IACxD,OAAO,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;AACzC,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE,CAAC;QAC9D,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;IACtC,CAAC;IACD,OAAO,0BAA0B,CAAC;AACpC,CAAC"}

package/dist/files/version.d.ts

@@ -0,0 +1,31 @@
+/**
+ * File versioning — DASH-65.
+ * Manages version chain: copies current file before overwrite,
+ * maintains version history, supports rollback.
+ */
+import type { FileEntry, VersionInfo } from "./types.js";
+import type { FileStore } from "./store.js";
+/**
+ * Create a new version snapshot before updating a file.
+ * Copies the current file to storage/versions/<file-id>/v<n>_<timestamp>.<ext>
+ * Returns the new version number.
+ */
+export declare function createVersion(entry: FileEntry, storageRoot: string, store: FileStore, maxVersions: number): Promise<{
+    ok: boolean;
+    version: number;
+    message: string;
+}>;
+/**
+ * List all versions of a file from the versions directory.
+ */
+export declare function listVersions(fileId: string, storageRoot: string): Promise<VersionInfo[]>;
+/**
+ * Rollback a file to a specific version.
+ * Copies the target version back to the primary path.
+ * Rollback is itself a new version (incrementing the counter).
+ */
+export declare function rollbackToVersion(entry: FileEntry, targetVersion: number, storageRoot: string, store: FileStore): Promise<{
+    ok: boolean;
+    message: string;
+}>;
+//# sourceMappingURL=version.d.ts.map

package/dist/files/version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../../src/files/version.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAMH,OAAO,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAI5C;;;;GAIG;AACH,wBAAsB,aAAa,CACjC,KAAK,EAAE,SAAS,EAChB,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,SAAS,EAChB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,CA0B5D;AAED;;GAEG;AACH,wBAAsB,YAAY,CAChC,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,WAAW,EAAE,CAAC,CA4BxB;AAED;;;;GAIG;AACH,wBAAsB,iBAAiB,CACrC,KAAK,EAAE,SAAS,EAChB,aAAa,EAAE,MAAM,EACrB,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,SAAS,GACf,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,CA8C3C"}

package/dist/files/version.js

@@ -0,0 +1,129 @@
+/**
+ * File versioning — DASH-65.
+ * Manages version chain: copies current file before overwrite,
+ * maintains version history, supports rollback.
+ */
+import { copyFile, readdir, readFile, stat, unlink, mkdir } from "node:fs/promises";
+import { join, extname } from "node:path";
+import { createHash } from "node:crypto";
+import { createLogger } from "../utils/logger.js";
+const log = createLogger("files.version");
+/**
+ * Create a new version snapshot before updating a file.
+ * Copies the current file to storage/versions/<file-id>/v<n>_<timestamp>.<ext>
+ * Returns the new version number.
+ */
+export async function createVersion(entry, storageRoot, store, maxVersions) {
+    try {
+        const currentPath = join(storageRoot, entry.storagePath);
+        const ext = extname(entry.name) || extname(entry.storagePath);
+        const versionDir = join(storageRoot, "versions", entry.id);
+        await mkdir(versionDir, { recursive: true });
+        const ts = Date.now();
+        const versionFile = `v${entry.version}_${ts}${ext}`;
+        const versionPath = join(versionDir, versionFile);
+        await copyFile(currentPath, versionPath);
+        // Log the versioned event
+        await store.logEvent(entry.id, "versioned", "system", `v${entry.version} archived`);
+        // Prune old versions if over limit
+        await pruneVersions(entry.id, storageRoot, maxVersions);
+        const newVersion = entry.version + 1;
+        log.info("version created", { fileId: entry.id, version: entry.version, newVersion });
+        return { ok: true, version: newVersion, message: `Version ${entry.version} archived` };
+    }
+    catch (err) {
+        log.error("version creation failed", { fileId: entry.id, error: err.message });
+        return { ok: false, version: entry.version, message: `Version failed: ${err.message}` };
+    }
+}
+/**
+ * List all versions of a file from the versions directory.
+ */
+export async function listVersions(fileId, storageRoot) {
+    const versionDir = join(storageRoot, "versions", fileId);
+    try {
+        const files = await readdir(versionDir);
+        const versions = [];
+        for (const file of files) {
+            const match = file.match(/^v(\d+)_(\d+)/);
+            if (!match)
+                continue;
+            const filePath = join(versionDir, file);
+            const fileStat = await stat(filePath);
+            const buffer = await readFile(filePath);
+            const checksum = createHash("sha256").update(buffer).digest("hex");
+            versions.push({
+                version: parseInt(match[1], 10),
+                storagePath: join("versions", fileId, file),
+                sizeBytes: fileStat.size,
+                checksum,
+                createdAt: new Date(parseInt(match[2], 10)).toISOString(),
+            });
+        }
+        return versions.sort((a, b) => a.version - b.version);
+    }
+    catch {
+        return [];
+    }
+}
+/**
+ * Rollback a file to a specific version.
+ * Copies the target version back to the primary path.
+ * Rollback is itself a new version (incrementing the counter).
+ */
+export async function rollbackToVersion(entry, targetVersion, storageRoot, store) {
+    try {
+        const versions = await listVersions(entry.id, storageRoot);
+        const target = versions.find((v) => v.version === targetVersion);
+        if (!target) {
+            return { ok: false, message: `Version ${targetVersion} not found` };
+        }
+        const targetPath = join(storageRoot, target.storagePath);
+        const primaryPath = join(storageRoot, entry.storagePath);
+        // First, archive the current file as the latest version
+        const ext = extname(entry.name) || extname(entry.storagePath);
+        const versionDir = join(storageRoot, "versions", entry.id);
+        await mkdir(versionDir, { recursive: true });
+        const ts = Date.now();
+        const archiveName = `v${entry.version}_${ts}${ext}`;
+        await copyFile(primaryPath, join(versionDir, archiveName));
+        // Copy target version to primary
+        await copyFile(targetPath, primaryPath);
+        // Update registry
+        const buffer = await readFile(primaryPath);
+        const checksum = createHash("sha256").update(buffer).digest("hex");
+        const fileStat = await stat(primaryPath);
+        await store.update(entry.id, {
+            version: entry.version + 1,
+            sizeBytes: fileStat.size,
+            checksum,
+        });
+        await store.logEvent(entry.id, "versioned", "system", `Rolled back from v${entry.version} to v${targetVersion}`);
+        log.info("file rolled back", { fileId: entry.id, from: entry.version, to: targetVersion });
+        return { ok: true, message: `Rolled back to version ${targetVersion}` };
+    }
+    catch (err) {
+        log.error("rollback failed", { fileId: entry.id, target: targetVersion, error: err.message });
+        return { ok: false, message: `Rollback failed: ${err.message}` };
+    }
+}
+/**
+ * Remove old versions beyond the max limit (keep the most recent N).
+ */
+async function pruneVersions(fileId, storageRoot, maxVersions) {
+    const versions = await listVersions(fileId, storageRoot);
+    if (versions.length <= maxVersions)
+        return;
+    // Remove oldest versions first
+    const toRemove = versions.slice(0, versions.length - maxVersions);
+    for (const v of toRemove) {
+        try {
+            await unlink(join(storageRoot, v.storagePath));
+            log.debug("pruned old version", { fileId, version: v.version });
+        }
+        catch {
+            // Ignore — file may already be gone
+        }
+    }
+}
+//# sourceMappingURL=version.js.map

package/dist/files/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../../src/files/version.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACpF,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAIlD,MAAM,GAAG,GAAG,YAAY,CAAC,eAAe,CAAC,CAAC;AAE1C;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,KAAgB,EAChB,WAAmB,EACnB,KAAgB,EAChB,WAAmB;IAEnB,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;QACzD,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC9D,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,EAAE,UAAU,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;QAC3D,MAAM,KAAK,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAE7C,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACtB,MAAM,WAAW,GAAG,IAAI,KAAK,CAAC,OAAO,IAAI,EAAE,GAAG,GAAG,EAAE,CAAC;QACpD,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QAElD,MAAM,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;QAEzC,0BAA0B;QAC1B,MAAM,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;QAEpF,mCAAmC;QACnC,MAAM,aAAa,CAAC,KAAK,CAAC,EAAE,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;QAExD,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC;QACrC,GAAG,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC;QACtF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,WAAW,KAAK,CAAC,OAAO,WAAW,EAAE,CAAC;IACzF,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,GAAG,CAAC,KAAK,CAAC,yBAAyB,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAC/E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,mBAAmB,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;IAC1F,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,MAAc,EACd,WAAmB;IAEnB,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;IACzD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC;QACxC,MAAM,QAAQ,GAAkB,EAAE,CAAC;QAEnC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;YAC1C,IAAI,CAAC,KAAK;gBAAE,SAAS;YAErB,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;YACxC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;YACtC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACxC,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAEnE,QAAQ,CAAC,IAAI,CAAC;gBACZ,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;gBAC/B,WAAW,EAAE,IAAI,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC;gBAC3C,SAAS,EAAE,QAAQ,CAAC,IAAI;gBACxB,QAAQ;gBACR,SAAS,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE;aAC1D,CAAC,CAAC;QACL,CAAC;QAED,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,KAAgB,EAChB,aAAqB,EACrB,WAAmB,EACnB,KAAgB;IAEhB,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;QAC3D,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,aAAa,CAAC,CAAC;QACjE,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,aAAa,YAAY,EAAE,CAAC;QACtE,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;QACzD,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;QAEzD,wDAAwD;QACxD,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC9D,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,EAAE,UAAU,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;QAC3D,MAAM,KAAK,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7C,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACtB,MAAM,WAAW,GAAG,IAAI,KAAK,CAAC,OAAO,IAAI,EAAE,GAAG,GAAG,EAAE,CAAC;QACpD,MAAM,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC,CAAC;QAE3D,iCAAiC;QACjC,MAAM,QAAQ,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QAExC,kBAAkB;QAClB,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC3C,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,CAAC;QAEzC,MAAM,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE;YAC3B,OAAO,EAAE,KAAK,CAAC,OAAO,GAAG,CAAC;YAC1B,SAAS,EAAE,QAAQ,CAAC,IAAI;YACxB,QAAQ;SACT,CAAC,CAAC;QAEH,MAAM,KAAK,CAAC,QAAQ,CAClB,KAAK,CAAC,EAAE,EACR,WAAW,EACX,QAAQ,EACR,qBAAqB,KAAK,CAAC,OAAO,QAAQ,aAAa,EAAE,CAC1D,CAAC;QAEF,GAAG,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,EAAE,aAAa,EAAE,CAAC,CAAC;QAC3F,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,0BAA0B,aAAa,EAAE,EAAE,CAAC;IAC1E,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,GAAG,CAAC,KAAK,CAAC,iBAAiB,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAC9F,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,oBAAoB,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;IACnE,CAAC;AACH,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,aAAa,CAC1B,MAAc,EACd,WAAmB,EACnB,WAAmB;IAEnB,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACzD,IAAI,QAAQ,CAAC,MAAM,IAAI,WAAW;QAAE,OAAO;IAE3C,+BAA+B;IAC/B,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,MAAM,GAAG,WAAW,CAAC,CAAC;IAClE,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;YAC/C,GAAG,CAAC,KAAK,CAAC,oBAAoB,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QAClE,CAAC;QAAC,MAAM,CAAC;YACP,oCAAoC;QACtC,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/github/client.d.ts

@@ -0,0 +1,83 @@
+/**
+ * GitHub REST API client — fetch-based, no SDK dependency.
+ * Reads GITHUB_TOKEN from process.env (hydrated by vault).
+ *
+ * All methods use retry with exponential backoff for transient failures.
+ * Auth errors are surfaced immediately. Permanent errors return null.
+ */
+import type { ErrorKind } from "./retry.js";
+import type { GitHubUser, GitHubRepo, GitHubIssue, GitHubPullRequest, GitHubPRFile, GitHubCommit, GitHubReview, GitHubComment, GitHubLabel, GitHubWorkflowRunsResponse, GitHubCheckRunsResponse, GitHubCompareResult, GitHubTag, GitHubIssueEvent } from "./types.js";
+export declare function setApiBase(url: string): void;
+export declare function isAvailable(): boolean;
+/** Validate the token by calling /user. */
+export declare function validateAuth(): Promise<{
+    valid: boolean;
+    error?: string;
+}>;
+export declare function getAuthenticatedUser(): Promise<GitHubUser | null>;
+export declare function getRepo(owner: string, repo: string): Promise<GitHubRepo | null>;
+export declare function listIssues(owner: string, repo: string, opts?: {
+    state?: "open" | "closed" | "all";
+    labels?: string;
+    per_page?: number;
+    since?: string;
+}): Promise<GitHubIssue[] | null>;
+export declare function getIssue(owner: string, repo: string, number: number): Promise<GitHubIssue | null>;
+export declare function addIssueLabels(owner: string, repo: string, number: number, labels: string[]): Promise<GitHubLabel[] | null>;
+export declare function addIssueComment(owner: string, repo: string, number: number, body: string): Promise<GitHubComment | null>;
+export declare function addIssueAssignees(owner: string, repo: string, number: number, assignees: string[]): Promise<GitHubIssue | null>;
+export declare function listPullRequests(owner: string, repo: string, opts?: {
+    state?: "open" | "closed" | "all";
+    per_page?: number;
+}): Promise<GitHubPullRequest[] | null>;
+export declare function getPullRequest(owner: string, repo: string, number: number): Promise<GitHubPullRequest | null>;
+export declare function getPRFiles(owner: string, repo: string, number: number): Promise<GitHubPRFile[] | null>;
+export declare function getPRReviews(owner: string, repo: string, number: number): Promise<GitHubReview[] | null>;
+export declare function createPRReview(owner: string, repo: string, number: number, opts: {
+    body: string;
+    event: "APPROVE" | "REQUEST_CHANGES" | "COMMENT";
+}): Promise<GitHubReview | null>;
+export declare function listCommits(owner: string, repo: string, opts?: {
+    sha?: string;
+    since?: string;
+    until?: string;
+    per_page?: number;
+}): Promise<Array<{
+    sha: string;
+    commit: {
+        message: string;
+        author: {
+            name: string;
+            email: string;
+            date: string;
+        } | null;
+    };
+    html_url: string;
+}> | null>;
+export declare function getCommit(owner: string, repo: string, sha: string): Promise<GitHubCommit | null>;
+export declare function listLabels(owner: string, repo: string): Promise<GitHubLabel[] | null>;
+export declare function createLabel(owner: string, repo: string, opts: {
+    name: string;
+    color: string;
+    description?: string;
+}): Promise<GitHubLabel | null>;
+export declare function listWorkflowRuns(owner: string, repo: string, opts?: {
+    status?: "completed" | "in_progress" | "queued";
+    per_page?: number;
+    created?: string;
+}): Promise<GitHubWorkflowRunsResponse | null>;
+export declare function listCheckRuns(owner: string, repo: string, ref: string): Promise<GitHubCheckRunsResponse | null>;
+export declare function compareBranches(owner: string, repo: string, base: string, head: string): Promise<GitHubCompareResult | null>;
+export declare function listTags(owner: string, repo: string, opts?: {
+    per_page?: number;
+}): Promise<GitHubTag[] | null>;
+export declare function listIssueEvents(owner: string, repo: string, issueNumber: number): Promise<GitHubIssueEvent[] | null>;
+export declare function listIssueComments(owner: string, repo: string, issueNumber: number, opts?: {
+    per_page?: number;
+}): Promise<GitHubComment[] | null>;
+export declare function getHealth(): {
+    available: boolean;
+    lastError: ErrorKind | null;
+    lastErrorMessage: string | null;
+};
+//# sourceMappingURL=client.d.ts.map

package/dist/github/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/github/client.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,KAAK,EACV,UAAU,EACV,UAAU,EACV,WAAW,EACX,iBAAiB,EACjB,YAAY,EACZ,YAAY,EACZ,YAAY,EACZ,aAAa,EACb,WAAW,EACX,0BAA0B,EAC1B,uBAAuB,EACvB,mBAAmB,EACnB,SAAS,EACT,gBAAgB,EACjB,MAAM,YAAY,CAAC;AAoBpB,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAE5C;AAiED,wBAAgB,WAAW,IAAI,OAAO,CAErC;AAED,2CAA2C;AAC3C,wBAAsB,YAAY,IAAI,OAAO,CAAC;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAWhF;AAID,wBAAsB,oBAAoB,IAAI,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAiBvE;AAID,wBAAsB,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAYrF;AAID,wBAAsB,UAAU,CAC9B,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GAC/F,OAAO,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,CAmB/B;AAED,wBAAsB,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAYvG;AAED,wBAAsB,cAAc,CAClC,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EAAE,GACf,OAAO,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,CAe/B;AAED,wBAAsB,eAAe,CACnC,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAe/B;AAED,wBAAsB,iBAAiB,CACrC,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EAAE,GAClB,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAe7B;AAID,wBAAsB,gBAAgB,CACpC,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GAC9D,OAAO,CAAC,iBAAiB,EAAE,GAAG,IAAI,CAAC,CAgBrC;AAED,wBAAsB,cAAc,CAClC,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAYnC;AAED,wBAAsB,UAAU,CAC9B,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,YAAY,EAAE,GAAG,IAAI,CAAC,CAYhC;AAED,wBAAsB,YAAY,CAChC,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,YAAY,EAAE,GAAG,IAAI,CAAC,CAYhC;AAED,wBAAsB,cAAc,CAClC,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,EACd,IAAI,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,SAAS,GAAG,iBAAiB,GAAG,SAAS,CAAA;CAAE,GACvE,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAe9B;AAID,wBAAsB,WAAW,CAC/B,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GACzE,OAAO,CAAC,KAAK,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,GAAG,IAAI,CAAA;KAAE,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,GAAG,IAAI,CAAC,CAoBrJ;AAED,wBAAsB,SAAS,CAC7B,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAY9B;AAID,wBAAsB,UAAU,CAC9B,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,CAY/B;AAED,wBAAsB,WAAW,CAC/B,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,GAC1D,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAe7B;AAID,wBAAsB,gBAAgB,CACpC,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE;IAAE,MAAM,CAAC,EAAE,WAAW,GAAG,aAAa,GAAG,QAAQ,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAC9F,OAAO,CAAC,0BAA0B,GAAG,IAAI,CAAC,CAiB5C;AAID,wBAAsB,aAAa,CACjC,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC,CAYzC;AAID,wBAAsB,eAAe,CACnC,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAYrC;AAID,wBAAsB,QAAQ,CAC5B,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GAC3B,OAAO,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,CAe7B;AAID,wBAAsB,eAAe,CACnC,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,gBAAgB,EAAE,GAAG,IAAI,CAAC,CAYpC;AAID,wBAAsB,iBAAiB,CACrC,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,EACnB,IAAI,CAAC,EAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GAC3B,OAAO,CAAC,aAAa,EAAE,GAAG,IAAI,CAAC,CAejC;AAID,wBAAgB,SAAS,IAAI;IAAE,SAAS,EAAE,OAAO,CAAC;IAAC,SAAS,EAAE,SAAS,GAAG,IAAI,CAAC;IAAC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAMhH"}