@wascartech/devbot 0.0.0-stage → 2.1.1

package/dist/access-grant-store.js

@@ -0,0 +1,99 @@
+import { db } from "./db.js";
+import { getProject, listTokens } from "./token-store.js";
+// Directed cross-project access grants for the internal devbot-forge MCP.
+// Same DB file as project_tokens / project_mcp_servers (devbot.db, 0600).
+// A row (source, target) lets source's runs read target's forge data and
+// clone target's code. Direction is explicit: A->B does not imply B->A.
+//
+// Enrollment invariant: both endpoints must be enrolled (a project_tokens row).
+// Enforced in the admin route on write, and re-checked here on read — a grant
+// whose target was later revoked is ignored (stale edge), never honored.
+export function initAccessGrantTables() {
+    db.exec(`
+    CREATE TABLE IF NOT EXISTS project_access_grants (
+      source_project_id INTEGER NOT NULL,
+      target_project_id INTEGER NOT NULL,
+      created_at        INTEGER NOT NULL,
+      updated_at        INTEGER NOT NULL,
+      PRIMARY KEY (source_project_id, target_project_id)
+    )
+  `);
+    db.exec("CREATE INDEX IF NOT EXISTS idx_access_grants_target ON project_access_grants(target_project_id)");
+}
+// Raw outbound target ids (may include stale/unenrolled targets).
+function rawOutboundTargets(sourceProjectId) {
+    const rows = db
+        .prepare("SELECT target_project_id FROM project_access_grants WHERE source_project_id = ? ORDER BY target_project_id")
+        .all(sourceProjectId);
+    return rows.map((r) => r.target_project_id);
+}
+// Raw inbound source ids (may include stale/unenrolled sources).
+function rawInboundSources(targetProjectId) {
+    const rows = db
+        .prepare("SELECT source_project_id FROM project_access_grants WHERE target_project_id = ? ORDER BY source_project_id")
+        .all(targetProjectId);
+    return rows.map((r) => r.source_project_id);
+}
+// Outbound grants resolved to enrolled target projects only. Stale edges
+// (target no longer enrolled) are filtered out.
+export function listAccessTargets(sourceProjectId) {
+    const out = [];
+    for (const id of rawOutboundTargets(sourceProjectId)) {
+        const p = getProject(id);
+        if (p)
+            out.push({ projectId: p.projectId, projectPath: p.projectPath });
+    }
+    return out;
+}
+// Inbound grants resolved to enrolled source projects only (for the panel's
+// read-only "who can access this project" list).
+export function listAccessSources(targetProjectId) {
+    const out = [];
+    for (const id of rawInboundSources(targetProjectId)) {
+        const p = getProject(id);
+        if (p)
+            out.push({ projectId: p.projectId, projectPath: p.projectPath });
+    }
+    return out;
+}
+// Live authorization check for a cross-project read/clone. Own project is
+// always allowed. Otherwise a grant row must exist AND the target must still
+// be enrolled. Read on every MCP tool call, so revoking a grant is immediate.
+export function isAccessAllowed(sourceProjectId, targetProjectId) {
+    if (sourceProjectId === targetProjectId)
+        return true;
+    const row = db
+        .prepare("SELECT 1 AS ok FROM project_access_grants WHERE source_project_id = ? AND target_project_id = ?")
+        .get(sourceProjectId, targetProjectId);
+    if (!row)
+        return false;
+    return getProject(targetProjectId) !== null;
+}
+export function upsertAccessGrant(sourceProjectId, targetProjectId) {
+    const now = Math.floor(Date.now() / 1000);
+    db.prepare(`INSERT OR REPLACE INTO project_access_grants
+       (source_project_id, target_project_id, created_at, updated_at)
+     VALUES (?, ?,
+       COALESCE((SELECT created_at FROM project_access_grants WHERE source_project_id = ? AND target_project_id = ?), ?),
+       ?)`).run(sourceProjectId, targetProjectId, sourceProjectId, targetProjectId, now, now);
+}
+export function deleteAccessGrant(sourceProjectId, targetProjectId) {
+    const r = db
+        .prepare("DELETE FROM project_access_grants WHERE source_project_id = ? AND target_project_id = ?")
+        .run(sourceProjectId, targetProjectId);
+    return r.changes > 0;
+}
+// Remove every grant touching this project, in both directions. Called from
+// /api/revoke's finally block alongside the other per-project cleanup.
+export function deleteAllAccessGrantsForProject(projectId) {
+    db.prepare("DELETE FROM project_access_grants WHERE source_project_id = ? OR target_project_id = ?").run(projectId, projectId);
+}
+// Enrolled projects that are not the source and not already granted — the
+// add-picker candidates for the Access modal.
+export function listGrantCandidates(sourceProjectId) {
+    const granted = new Set(rawOutboundTargets(sourceProjectId));
+    return listTokens()
+        .filter((p) => p.projectId !== sourceProjectId && !granted.has(p.projectId))
+        .map((p) => ({ projectId: p.projectId, projectPath: p.projectPath }));
+}
+//# sourceMappingURL=access-grant-store.js.map

package/dist/access-grant-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"access-grant-store.js","sourceRoot":"","sources":["../src/access-grant-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,SAAS,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAE1D,0EAA0E;AAC1E,0EAA0E;AAC1E,yEAAyE;AACzE,wEAAwE;AACxE,EAAE;AACF,gFAAgF;AAChF,8EAA8E;AAC9E,yEAAyE;AAEzE,MAAM,UAAU,qBAAqB;IACnC,EAAE,CAAC,IAAI,CAAC;;;;;;;;GAQP,CAAC,CAAC;IACH,EAAE,CAAC,IAAI,CAAC,iGAAiG,CAAC,CAAC;AAC7G,CAAC;AAOD,kEAAkE;AAClE,SAAS,kBAAkB,CAAC,eAAuB;IACjD,MAAM,IAAI,GAAG,EAAE;SACZ,OAAO,CAAC,4GAA4G,CAAC;SACrH,GAAG,CAAC,eAAe,CAAyC,CAAC;IAChE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC;AAC9C,CAAC;AAED,iEAAiE;AACjE,SAAS,iBAAiB,CAAC,eAAuB;IAChD,MAAM,IAAI,GAAG,EAAE;SACZ,OAAO,CAAC,4GAA4G,CAAC;SACrH,GAAG,CAAC,eAAe,CAAyC,CAAC;IAChE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC;AAC9C,CAAC;AAED,yEAAyE;AACzE,gDAAgD;AAChD,MAAM,UAAU,iBAAiB,CAAC,eAAuB;IACvD,MAAM,GAAG,GAAmB,EAAE,CAAC;IAC/B,KAAK,MAAM,EAAE,IAAI,kBAAkB,CAAC,eAAe,CAAC,EAAE,CAAC;QACrD,MAAM,CAAC,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC;QACzB,IAAI,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,4EAA4E;AAC5E,iDAAiD;AACjD,MAAM,UAAU,iBAAiB,CAAC,eAAuB;IACvD,MAAM,GAAG,GAAmB,EAAE,CAAC;IAC/B,KAAK,MAAM,EAAE,IAAI,iBAAiB,CAAC,eAAe,CAAC,EAAE,CAAC;QACpD,MAAM,CAAC,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC;QACzB,IAAI,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,0EAA0E;AAC1E,6EAA6E;AAC7E,8EAA8E;AAC9E,MAAM,UAAU,eAAe,CAAC,eAAuB,EAAE,eAAuB;IAC9E,IAAI,eAAe,KAAK,eAAe;QAAE,OAAO,IAAI,CAAC;IACrD,MAAM,GAAG,GAAG,EAAE;SACX,OAAO,CACN,iGAAiG,CAClG;SACA,GAAG,CAAC,eAAe,EAAE,eAAe,CAA+B,CAAC;IACvE,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IACvB,OAAO,UAAU,CAAC,eAAe,CAAC,KAAK,IAAI,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,eAAuB,EAAE,eAAuB;IAChF,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1C,EAAE,CAAC,OAAO,CACR;;;;UAIM,CACP,CAAC,GAAG,CAAC,eAAe,EAAE,eAAe,EAAE,eAAe,EAAE,eAAe,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;AACtF,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,eAAuB,EAAE,eAAuB;IAChF,MAAM,CAAC,GAAG,EAAE;SACT,OAAO,CAAC,yFAAyF,CAAC;SAClG,GAAG,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC;IACzC,OAAO,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC;AACvB,CAAC;AAED,4EAA4E;AAC5E,uEAAuE;AACvE,MAAM,UAAU,+BAA+B,CAAC,SAAiB;IAC/D,EAAE,CAAC,OAAO,CAAC,wFAAwF,CAAC,CAAC,GAAG,CACtG,SAAS,EACT,SAAS,CACV,CAAC;AACJ,CAAC;AAED,0EAA0E;AAC1E,8CAA8C;AAC9C,MAAM,UAAU,mBAAmB,CAAC,eAAuB;IACzD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,kBAAkB,CAAC,eAAe,CAAC,CAAC,CAAC;IAC7D,OAAO,UAAU,EAAE;SAChB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,eAAe,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;SAC3E,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;AAC1E,CAAC"}

package/dist/access-resolve.js

@@ -0,0 +1,11 @@
+import { getPlatform } from "./platform/index.js";
+// Resolve a username to the forge's stable numeric identity for access rules.
+// Forge-neutral: GitLab, ForgeJo, Gitea and GitHub each implement
+// `workItems.resolveUser`. Returns null when no exact user matches.
+export async function resolveUserByUsername(username) {
+    const user = await getPlatform().workItems.resolveUser(username);
+    if (!user)
+        return null;
+    return { userId: user.id, username: user.username };
+}
+//# sourceMappingURL=access-resolve.js.map

package/dist/access-resolve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"access-resolve.js","sourceRoot":"","sources":["../src/access-resolve.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAElD,8EAA8E;AAC9E,kEAAkE;AAClE,oEAAoE;AACpE,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,QAAgB;IAC1D,MAAM,IAAI,GAAG,MAAM,WAAW,EAAE,CAAC,SAAS,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;IACjE,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;AACtD,CAAC"}

package/dist/access-rule-store.js

@@ -0,0 +1,99 @@
+import { db } from "./db.js";
+import { log } from "./logger.js";
+// Per-project trigger access rules. Same DB file as the other stores
+// (devbot.db, 0600). A rule maps a subject (a normalized project role, or a
+// specific forge user by numeric id) to an access level. Rules refine the
+// role-based baseline for that subject; they do not affect other subjects.
+//
+// Precedence is user rule > role rule > baseline. Rules are read on every
+// mention, so add/remove takes effect immediately.
+export function initAccessRuleTables() {
+    db.exec(`
+    CREATE TABLE IF NOT EXISTS project_access_rules (
+      project_id   INTEGER NOT NULL,
+      subject_type TEXT NOT NULL,
+      subject_id   TEXT NOT NULL,
+      username     TEXT NOT NULL DEFAULT '',
+      role         TEXT NOT NULL DEFAULT '',
+      level        TEXT NOT NULL,
+      created_at   INTEGER NOT NULL,
+      updated_at   INTEGER NOT NULL,
+      PRIMARY KEY (project_id, subject_type, subject_id)
+    )
+  `);
+    db.exec("CREATE INDEX IF NOT EXISTS idx_project_access_rules_project ON project_access_rules(project_id)");
+}
+export function listAccessRules(projectId) {
+    let rows;
+    try {
+        rows = db
+            .prepare(`SELECT subject_type, subject_id, username, role, level
+           FROM project_access_rules WHERE project_id = ?
+          ORDER BY subject_type, subject_id COLLATE NOCASE`)
+            .all(projectId);
+    }
+    catch {
+        return [];
+    }
+    const out = [];
+    for (const r of rows) {
+        if (r.subject_type !== "role" && r.subject_type !== "user")
+            continue;
+        if (r.level !== "full" && r.level !== "plan" && r.level !== "denied")
+            continue;
+        out.push({
+            subjectType: r.subject_type,
+            subjectId: r.subject_id,
+            username: r.username ?? "",
+            role: r.role ?? "",
+            level: r.level,
+        });
+    }
+    return out;
+}
+// The level for a single subject, or null when no rule matches.
+function ruleLevel(projectId, subjectType, subjectId) {
+    try {
+        const row = db
+            .prepare("SELECT level FROM project_access_rules WHERE project_id = ? AND subject_type = ? AND subject_id = ?")
+            .get(projectId, subjectType, subjectId);
+        if (!row)
+            return null;
+        return row.level === "full" || row.level === "plan" || row.level === "denied" ? row.level : null;
+    }
+    catch (e) {
+        log.warn("access rule read failed", { projectId, subjectType, subjectId, err: e });
+        return null;
+    }
+}
+// The matched rule for an actor: an exact user rule wins over a role rule.
+// Returns the subject it matched on (for logging) plus the level, or null when
+// no rule applies (caller falls back to the role-based baseline).
+export function resolveAccessRule(projectId, actor) {
+    const userLevel = ruleLevel(projectId, "user", String(actor.userId));
+    if (userLevel)
+        return { level: userLevel, subjectType: "user", subjectId: String(actor.userId) };
+    const roleLevel = ruleLevel(projectId, "role", actor.permission);
+    if (roleLevel)
+        return { level: roleLevel, subjectType: "role", subjectId: actor.permission };
+    return null;
+}
+export function upsertAccessRule(projectId, rule) {
+    const now = Math.floor(Date.now() / 1000);
+    db.prepare(`INSERT OR REPLACE INTO project_access_rules
+       (project_id, subject_type, subject_id, username, role, level, created_at, updated_at)
+     VALUES (?, ?, ?, ?, ?, ?,
+       COALESCE((SELECT created_at FROM project_access_rules WHERE project_id = ? AND subject_type = ? AND subject_id = ?), ?),
+       ?)`).run(projectId, rule.subjectType, rule.subjectId, rule.username, rule.role, rule.level, projectId, rule.subjectType, rule.subjectId, now, now);
+}
+export function deleteAccessRule(projectId, subjectType, subjectId) {
+    const r = db
+        .prepare("DELETE FROM project_access_rules WHERE project_id = ? AND subject_type = ? AND subject_id = ?")
+        .run(projectId, subjectType, subjectId);
+    return r.changes > 0;
+}
+// Remove every rule for a project. Called from /api/revoke's cleanup.
+export function deleteAllAccessRulesForProject(projectId) {
+    db.prepare("DELETE FROM project_access_rules WHERE project_id = ?").run(projectId);
+}
+//# sourceMappingURL=access-rule-store.js.map

package/dist/access-rule-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"access-rule-store.js","sourceRoot":"","sources":["../src/access-rule-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,SAAS,CAAC;AAC7B,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAOlC,qEAAqE;AACrE,4EAA4E;AAC5E,0EAA0E;AAC1E,2EAA2E;AAC3E,EAAE;AACF,0EAA0E;AAC1E,mDAAmD;AAEnD,MAAM,UAAU,oBAAoB;IAClC,EAAE,CAAC,IAAI,CAAC;;;;;;;;;;;;GAYP,CAAC,CAAC;IACH,EAAE,CAAC,IAAI,CAAC,iGAAiG,CAAC,CAAC;AAC7G,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,SAAiB;IAC/C,IAAI,IAMF,CAAC;IACH,IAAI,CAAC;QACH,IAAI,GAAG,EAAE;aACN,OAAO,CACN;;2DAEmD,CACpD;aACA,GAAG,CAAC,SAAS,CAAgB,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,GAAG,GAAiB,EAAE,CAAC;IAC7B,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,IAAI,CAAC,CAAC,YAAY,KAAK,MAAM,IAAI,CAAC,CAAC,YAAY,KAAK,MAAM;YAAE,SAAS;QACrE,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM,IAAI,CAAC,CAAC,KAAK,KAAK,QAAQ;YAAE,SAAS;QAC/E,GAAG,CAAC,IAAI,CAAC;YACP,WAAW,EAAE,CAAC,CAAC,YAAY;YAC3B,SAAS,EAAE,CAAC,CAAC,UAAU;YACvB,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,EAAE;YAC1B,IAAI,EAAG,CAAC,CAAC,IAA0B,IAAI,EAAE;YACzC,KAAK,EAAE,CAAC,CAAC,KAAK;SACf,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,gEAAgE;AAChE,SAAS,SAAS,CAAC,SAAiB,EAAE,WAA4B,EAAE,SAAiB;IACnF,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE;aACX,OAAO,CACN,qGAAqG,CACtG;aACA,GAAG,CAAC,SAAS,EAAE,WAAW,EAAE,SAAS,CAAkC,CAAC;QAC3E,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,OAAO,GAAG,CAAC,KAAK,KAAK,MAAM,IAAI,GAAG,CAAC,KAAK,KAAK,MAAM,IAAI,GAAG,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IACnG,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,GAAG,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,EAAE,CAAU,EAAE,CAAC,CAAC;QAC5F,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,2EAA2E;AAC3E,+EAA+E;AAC/E,kEAAkE;AAClE,MAAM,UAAU,iBAAiB,CAC/B,SAAiB,EACjB,KAAiD;IAEjD,MAAM,SAAS,GAAG,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IACrE,IAAI,SAAS;QAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;IACjG,MAAM,SAAS,GAAG,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IACjE,IAAI,SAAS;QAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC;IAC7F,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,SAAiB,EAAE,IAAgB;IAClE,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1C,EAAE,CAAC,OAAO,CACR;;;;UAIM,CACP,CAAC,GAAG,CACH,SAAS,EACT,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,KAAK,EACV,SAAS,EACT,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,SAAS,EACd,GAAG,EACH,GAAG,CACJ,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,SAAiB,EAAE,WAA4B,EAAE,SAAiB;IACjG,MAAM,CAAC,GAAG,EAAE;SACT,OAAO,CAAC,+FAA+F,CAAC;SACxG,GAAG,CAAC,SAAS,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;IAC1C,OAAO,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC;AACvB,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,8BAA8B,CAAC,SAAiB;IAC9D,EAAE,CAAC,OAAO,CAAC,uDAAuD,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;AACrF,CAAC"}

package/dist/admin/access-routes.js

@@ -0,0 +1,73 @@
+import { logReq, requireSession } from "../http-util.js";
+import { getProject } from "../token-store.js";
+import { listAccessTargets, listAccessSources, listGrantCandidates, upsertAccessGrant, deleteAccessGrant, } from "../access-grant-store.js";
+function parseProjectIdParam(raw) {
+    const id = Number(Array.isArray(raw) ? raw[0] : raw);
+    return Number.isFinite(id) && Number.isInteger(id) && id > 0 ? id : null;
+}
+// Directed cross-project access grants for the internal devbot-forge MCP.
+// GET returns the project's outbound grants (editable), inbound grants (read-
+// only), and the add-picker candidates (enrolled projects not already granted).
+// PUT/DELETE manage one directed edge. Both endpoints must be enrolled; a
+// self-grant is rejected. All routes are admin-session gated like the rest of
+// /api/*.
+export function mountAccessRoutes(app) {
+    app.get("/api/projects/:id/access", requireSession((req, res) => {
+        const projectId = parseProjectIdParam(req.params.id ?? "");
+        if (!projectId) {
+            logReq(req, "warn", "access route bad id", { id: req.params.id });
+            return res.status(400).json({ error: "invalid project id" });
+        }
+        if (!getProject(projectId)) {
+            logReq(req, "warn", "access route not managed", { projectId });
+            return res.status(404).json({ error: "not managed" });
+        }
+        const outbound = listAccessTargets(projectId);
+        const inbound = listAccessSources(projectId);
+        const candidates = listGrantCandidates(projectId);
+        logReq(req, "debug", "get access", { projectId, outbound: outbound.length, inbound: inbound.length });
+        return res.json({ outbound, inbound, candidates });
+    }));
+    // PUT /api/projects/:id/access/:targetId — create a directed grant id -> target.
+    app.put("/api/projects/:id/access/:targetId", requireSession((req, res) => {
+        const sourceId = parseProjectIdParam(req.params.id ?? "");
+        const targetId = parseProjectIdParam(req.params.targetId ?? "");
+        if (!sourceId || !targetId) {
+            logReq(req, "warn", "access put bad id", { source: req.params.id, target: req.params.targetId });
+            return res.status(400).json({ error: "invalid project id" });
+        }
+        if (sourceId === targetId) {
+            logReq(req, "warn", "access put self", { projectId: sourceId });
+            return res.status(400).json({ error: "cannot grant access to self" });
+        }
+        if (!getProject(sourceId)) {
+            logReq(req, "warn", "access put source not managed", { projectId: sourceId });
+            return res.status(404).json({ error: "source project not managed" });
+        }
+        if (!getProject(targetId)) {
+            logReq(req, "warn", "access put target not enrolled", { sourceId, targetId });
+            return res.status(404).json({ error: "target project not enrolled" });
+        }
+        upsertAccessGrant(sourceId, targetId);
+        logReq(req, "info", "upsert access grant", { sourceId, targetId });
+        return res.json({ ok: true, sourceId, targetId });
+    }));
+    // DELETE /api/projects/:id/access/:targetId — remove a directed grant.
+    // Idempotent: 204 whether or not the edge existed.
+    app.delete("/api/projects/:id/access/:targetId", requireSession((req, res) => {
+        const sourceId = parseProjectIdParam(req.params.id ?? "");
+        const targetId = parseProjectIdParam(req.params.targetId ?? "");
+        if (!sourceId || !targetId) {
+            logReq(req, "warn", "access delete bad id", { source: req.params.id, target: req.params.targetId });
+            return res.status(400).json({ error: "invalid project id" });
+        }
+        if (!getProject(sourceId)) {
+            logReq(req, "warn", "access delete source not managed", { projectId: sourceId });
+            return res.status(404).json({ error: "source project not managed" });
+        }
+        deleteAccessGrant(sourceId, targetId);
+        logReq(req, "info", "delete access grant", { sourceId, targetId });
+        return res.status(204).end();
+    }));
+}
+//# sourceMappingURL=access-routes.js.map

package/dist/admin/access-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"access-routes.js","sourceRoot":"","sources":["../../src/admin/access-routes.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACzD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,mBAAmB,EACnB,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,0BAA0B,CAAC;AAElC,SAAS,mBAAmB,CAAC,GAAY;IACvC,MAAM,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACrD,OAAO,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC3E,CAAC;AAED,0EAA0E;AAC1E,8EAA8E;AAC9E,gFAAgF;AAChF,0EAA0E;AAC1E,8EAA8E;AAC9E,UAAU;AACV,MAAM,UAAU,iBAAiB,CAAC,GAAoB;IACpD,GAAG,CAAC,GAAG,CAAC,0BAA0B,EAAE,cAAc,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC9D,MAAM,SAAS,GAAG,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,qBAAqB,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;YAClE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC3B,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,0BAA0B,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;YAC/D,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,CAAC;QACxD,CAAC;QACD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAC9C,MAAM,OAAO,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAC7C,MAAM,UAAU,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;QAClD,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,YAAY,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QACtG,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC,CAAC;IAEJ,iFAAiF;IACjF,GAAG,CAAC,GAAG,CAAC,oCAAoC,EAAE,cAAc,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACxE,MAAM,QAAQ,GAAG,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,MAAM,QAAQ,GAAG,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;QAChE,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC3B,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,mBAAmB,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;YACjG,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC1B,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,iBAAiB,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;YAChE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC,CAAC;QACxE,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1B,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,+BAA+B,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC9E,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC,CAAC;QACvE,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1B,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,gCAAgC,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC9E,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC,CAAC;QACxE,CAAC;QACD,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACtC,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,qBAAqB,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;QACnE,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC,CAAC;IAEJ,uEAAuE;IACvE,mDAAmD;IACnD,GAAG,CAAC,MAAM,CAAC,oCAAoC,EAAE,cAAc,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC3E,MAAM,QAAQ,GAAG,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,MAAM,QAAQ,GAAG,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;QAChE,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC3B,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,sBAAsB,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;YACpG,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1B,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,kCAAkC,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;YACjF,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC,CAAC;QACvE,CAAC;QACD,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACtC,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,qBAAqB,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;QACnE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;IAC/B,CAAC,CAAC,CAAC,CAAC;AACN,CAAC"}

package/dist/admin/access-rule-routes.js

@@ -0,0 +1,107 @@
+import { logReq, requireSession } from "../http-util.js";
+import { getProject } from "../token-store.js";
+import { listAccessRules, upsertAccessRule, deleteAccessRule, } from "../access-rule-store.js";
+import { resolveUserByUsername } from "../access-resolve.js";
+import { AccessRuleAddSchema } from "../types/access.js";
+function parseProjectIdParam(raw) {
+    const id = Number(Array.isArray(raw) ? raw[0] : raw);
+    return Number.isFinite(id) && Number.isInteger(id) && id > 0 ? id : null;
+}
+// Per-project trigger access rules. The bot-wide policy is role based; these
+// routes manage per-subject refinements (a role or a specific user). Adding a
+// user rule resolves the username to a stable numeric id via the active forge.
+// All routes are admin-session gated.
+export function mountAccessRuleRoutes(app) {
+    // GET /api/projects/:id/access-rules — the project's rules.
+    app.get("/api/projects/:id/access-rules", requireSession((req, res) => {
+        const projectId = parseProjectIdParam(req.params.id ?? "");
+        if (!projectId) {
+            logReq(req, "warn", "access-rule route bad id", { id: req.params.id });
+            return res.status(400).json({ error: "invalid project id" });
+        }
+        if (!getProject(projectId)) {
+            logReq(req, "warn", "access-rule route not managed", { projectId });
+            return res.status(404).json({ error: "not managed" });
+        }
+        const rules = listAccessRules(projectId);
+        logReq(req, "debug", "list access rules", { projectId, count: rules.length });
+        return res.json({ rules });
+    }));
+    // POST /api/projects/:id/access-rules — add or update a rule. A role rule is
+    // keyed by the role name; a user rule resolves the username to an id.
+    app.post("/api/projects/:id/access-rules", requireSession(async (req, res) => {
+        const projectId = parseProjectIdParam(req.params.id ?? "");
+        if (!projectId) {
+            logReq(req, "warn", "access-rule post bad id", { id: req.params.id });
+            return res.status(400).json({ error: "invalid project id" });
+        }
+        if (!getProject(projectId)) {
+            logReq(req, "warn", "access-rule post not managed", { projectId });
+            return res.status(404).json({ error: "not managed" });
+        }
+        const parsed = AccessRuleAddSchema.safeParse(req.body);
+        if (!parsed.success) {
+            logReq(req, "warn", "access-rule post bad body", { projectId, issues: parsed.error.issues });
+            return res.status(400).json({ error: "bad request", issues: parsed.error.issues });
+        }
+        const body = parsed.data;
+        if (body.subjectType === "role") {
+            upsertAccessRule(projectId, {
+                subjectType: "role",
+                subjectId: body.role,
+                username: "",
+                role: body.role,
+                level: body.level,
+            });
+            logReq(req, "info", "access-rule role set", { projectId, role: body.role, level: body.level });
+            return res.json({ ok: true, rule: { subjectType: "role", subjectId: body.role, username: "", role: body.role, level: body.level } });
+        }
+        let user;
+        try {
+            user = await resolveUserByUsername(body.username);
+        }
+        catch (e) {
+            logReq(req, "warn", "access-rule resolve failed", { projectId, username: body.username, err: e });
+            return res.status(502).json({ error: "failed to resolve user" });
+        }
+        if (!user) {
+            logReq(req, "warn", "access-rule user not found", { projectId, username: body.username });
+            return res.status(404).json({ error: "user not found" });
+        }
+        upsertAccessRule(projectId, {
+            subjectType: "user",
+            subjectId: String(user.userId),
+            username: user.username,
+            role: "",
+            level: body.level,
+        });
+        logReq(req, "info", "access-rule user set", { projectId, userId: user.userId, level: body.level });
+        return res.json({
+            ok: true,
+            rule: { subjectType: "user", subjectId: String(user.userId), username: user.username, role: "", level: body.level },
+        });
+    }));
+    // DELETE /api/projects/:id/access-rules/:subjectType/:subjectId — remove a
+    // rule. Idempotent: 204 whether or not it existed.
+    app.delete("/api/projects/:id/access-rules/:subjectType/:subjectId", requireSession((req, res) => {
+        const projectId = parseProjectIdParam(req.params.id ?? "");
+        const subjectType = req.params.subjectType;
+        const subjectId = String(req.params.subjectId ?? "").trim();
+        if (!projectId || (subjectType !== "role" && subjectType !== "user") || subjectId === "") {
+            logReq(req, "warn", "access-rule delete bad params", {
+                project: req.params.id,
+                subjectType: req.params.subjectType,
+                subjectId: req.params.subjectId,
+            });
+            return res.status(400).json({ error: "invalid params" });
+        }
+        if (!getProject(projectId)) {
+            logReq(req, "warn", "access-rule delete not managed", { projectId });
+            return res.status(404).json({ error: "not managed" });
+        }
+        deleteAccessRule(projectId, subjectType, subjectId);
+        logReq(req, "info", "access-rule delete", { projectId, subjectType, subjectId });
+        return res.status(204).end();
+    }));
+}
+//# sourceMappingURL=access-rule-routes.js.map

package/dist/admin/access-rule-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"access-rule-routes.js","sourceRoot":"","sources":["../../src/admin/access-rule-routes.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACzD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EACL,eAAe,EACf,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAEzD,SAAS,mBAAmB,CAAC,GAAY;IACvC,MAAM,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACrD,OAAO,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC3E,CAAC;AAED,6EAA6E;AAC7E,8EAA8E;AAC9E,+EAA+E;AAC/E,sCAAsC;AACtC,MAAM,UAAU,qBAAqB,CAAC,GAAoB;IACxD,4DAA4D;IAC5D,GAAG,CAAC,GAAG,CAAC,gCAAgC,EAAE,cAAc,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACpE,MAAM,SAAS,GAAG,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,0BAA0B,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;YACvE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC3B,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,+BAA+B,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;YACpE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,CAAC;QACxD,CAAC;QACD,MAAM,KAAK,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC;QACzC,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,mBAAmB,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QAC9E,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC,CAAC;IAEJ,6EAA6E;IAC7E,sEAAsE;IACtE,GAAG,CAAC,IAAI,CAAC,gCAAgC,EAAE,cAAc,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC3E,MAAM,SAAS,GAAG,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,yBAAyB,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;YACtE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC3B,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,8BAA8B,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;YACnE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,CAAC;QACxD,CAAC;QACD,MAAM,MAAM,GAAG,mBAAmB,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACvD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,2BAA2B,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YAC7F,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QACrF,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QACzB,IAAI,IAAI,CAAC,WAAW,KAAK,MAAM,EAAE,CAAC;YAChC,gBAAgB,CAAC,SAAS,EAAE;gBAC1B,WAAW,EAAE,MAAM;gBACnB,SAAS,EAAE,IAAI,CAAC,IAAI;gBACpB,QAAQ,EAAE,EAAE;gBACZ,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,KAAK,EAAE,IAAI,CAAC,KAAK;aAClB,CAAC,CAAC;YACH,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,sBAAsB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;YAC/F,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACvI,CAAC;QACD,IAAI,IAAI,CAAC;QACT,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,qBAAqB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACpD,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,4BAA4B,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAU,EAAE,CAAC,CAAC;YAC3G,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC,CAAC;QACnE,CAAC;QACD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,4BAA4B,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC1F,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAC3D,CAAC;QACD,gBAAgB,CAAC,SAAS,EAAE;YAC1B,WAAW,EAAE,MAAM;YACnB,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;YAC9B,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,IAAI,EAAE,EAAE;YACR,KAAK,EAAE,IAAI,CAAC,KAAK;SAClB,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,sBAAsB,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QACnG,OAAO,GAAG,CAAC,IAAI,CAAC;YACd,EAAE,EAAE,IAAI;YACR,IAAI,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE;SACpH,CAAC,CAAC;IACL,CAAC,CAAC,CAAC,CAAC;IAEJ,2EAA2E;IAC3E,mDAAmD;IACnD,GAAG,CAAC,MAAM,CAAC,wDAAwD,EAAE,cAAc,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC/F,MAAM,SAAS,GAAG,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,MAAM,WAAW,GAAG,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC;QAC3C,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5D,IAAI,CAAC,SAAS,IAAI,CAAC,WAAW,KAAK,MAAM,IAAI,WAAW,KAAK,MAAM,CAAC,IAAI,SAAS,KAAK,EAAE,EAAE,CAAC;YACzF,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,+BAA+B,EAAE;gBACnD,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE;gBACtB,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,WAAW;gBACnC,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS;aAChC,CAAC,CAAC;YACH,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAC3D,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC3B,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,gCAAgC,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;YACrE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,CAAC;QACxD,CAAC;QACD,gBAAgB,CAAC,SAAS,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;QACpD,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,oBAAoB,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC;QACjF,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;IAC/B,CAAC,CAAC,CAAC,CAAC;AACN,CAAC"}

package/dist/admin/custom-repos-routes.js

@@ -0,0 +1,93 @@
+import { logReq, requireSession } from "../http-util.js";
+import { getProject } from "../token-store.js";
+import { listCustomRepoSummaries, upsertCustomRepo, deleteCustomRepo, } from "../custom-repos-store.js";
+import { CustomRepoBodySchema, isCustomRepoKind, isValidCustomRepoName, } from "../types/custom-repos.js";
+// Admin routes for custom skills/subagent repositories (work item #63). One
+// route family serves both global (project_id = 0) and per-project scopes, and
+// both `skills` / `agents` kinds. Tokens are never echoed back.
+function parseProjectIdParam(raw) {
+    const id = Number(raw);
+    return Number.isFinite(id) && Number.isInteger(id) && id > 0 ? id : null;
+}
+function parseKind(raw) {
+    return isCustomRepoKind(raw) ? raw : null;
+}
+export function mountCustomReposRoutes(app) {
+    // ---- Global scope --------------------------------------------------------
+    app.get("/api/settings/custom-repos/:kind", requireSession((req, res) => {
+        const kind = parseKind(String(req.params.kind ?? ""));
+        if (!kind)
+            return res.status(400).json({ error: "invalid kind" });
+        logReq(req, "debug", "list global custom repos", { kind });
+        return res.json({ repos: listCustomRepoSummaries(0, kind) });
+    }));
+    app.put("/api/settings/custom-repos/:kind/:name", requireSession((req, res) => {
+        const kind = parseKind(String(req.params.kind ?? ""));
+        const name = String(req.params.name ?? "");
+        if (!kind)
+            return res.status(400).json({ error: "invalid kind" });
+        if (!isValidCustomRepoName(name))
+            return res.status(400).json({ error: "invalid name" });
+        const parsed = CustomRepoBodySchema.safeParse(req.body);
+        if (!parsed.success) {
+            logReq(req, "warn", "global custom repo put bad body", { kind, name, issues: parsed.error.issues });
+            return res.status(400).json({ error: "bad request", issues: parsed.error.issues });
+        }
+        upsertCustomRepo(0, kind, name, parsed.data);
+        logReq(req, "info", "upsert global custom repo", { kind, name });
+        return res.json({ ok: true, name });
+    }));
+    app.delete("/api/settings/custom-repos/:kind/:name", requireSession((req, res) => {
+        const kind = parseKind(String(req.params.kind ?? ""));
+        const name = String(req.params.name ?? "");
+        if (!kind)
+            return res.status(400).json({ error: "invalid kind" });
+        if (!isValidCustomRepoName(name))
+            return res.status(400).json({ error: "invalid name" });
+        const existed = deleteCustomRepo(0, kind, name);
+        if (!existed)
+            return res.status(404).json({ error: "not found" });
+        logReq(req, "info", "delete global custom repo", { kind, name });
+        return res.status(204).end();
+    }));
+    const projectRoute = (handler) => requireSession((req, res) => {
+        const projectId = parseProjectIdParam(String(req.params.id ?? ""));
+        const kind = parseKind(String(req.params.kind ?? ""));
+        if (!projectId)
+            return res.status(400).json({ error: "invalid project id" });
+        if (!kind)
+            return res.status(400).json({ error: "invalid kind" });
+        if (!getProject(projectId))
+            return res.status(404).json({ error: "not managed" });
+        req.repoProjectId = projectId;
+        req.repoKind = kind;
+        return handler(req, res);
+    });
+    app.get("/api/projects/:id/custom-repos/:kind", projectRoute((req, res) => {
+        return res.json({ repos: listCustomRepoSummaries(req.repoProjectId, req.repoKind) });
+    }));
+    app.put("/api/projects/:id/custom-repos/:kind/:name", projectRoute((req, res) => {
+        const name = String(req.params.name ?? "");
+        if (!isValidCustomRepoName(name))
+            return res.status(400).json({ error: "invalid name" });
+        const parsed = CustomRepoBodySchema.safeParse(req.body);
+        if (!parsed.success) {
+            logReq(req, "warn", "project custom repo put bad body", { name, issues: parsed.error.issues });
+            return res.status(400).json({ error: "bad request", issues: parsed.error.issues });
+        }
+        upsertCustomRepo(req.repoProjectId, req.repoKind, name, parsed.data);
+        logReq(req, "info", "upsert project custom repo", { projectId: req.repoProjectId, kind: req.repoKind, name });
+        return res.json({ ok: true, name });
+    }));
+    app.delete("/api/projects/:id/custom-repos/:kind/:name", projectRoute((req, res) => {
+        const name = String(req.params.name ?? "");
+        if (!isValidCustomRepoName(name))
+            return res.status(400).json({ error: "invalid name" });
+        const existed = deleteCustomRepo(req.repoProjectId, req.repoKind, name);
+        if (!existed)
+            return res.status(404).json({ error: "not found" });
+        logReq(req, "info", "delete project custom repo", { projectId: req.repoProjectId, kind: req.repoKind, name });
+        return res.status(204).end();
+    }));
+}
+//# sourceMappingURL=custom-repos-routes.js.map

package/dist/admin/custom-repos-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"custom-repos-routes.js","sourceRoot":"","sources":["../../src/admin/custom-repos-routes.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,cAAc,EAAmB,MAAM,iBAAiB,CAAC;AAC1E,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EACL,uBAAuB,EACvB,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,oBAAoB,EACpB,gBAAgB,EAChB,qBAAqB,GAEtB,MAAM,0BAA0B,CAAC;AAElC,4EAA4E;AAC5E,+EAA+E;AAC/E,gEAAgE;AAEhE,SAAS,mBAAmB,CAAC,GAAW;IACtC,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACvB,OAAO,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC3E,CAAC;AAED,SAAS,SAAS,CAAC,GAAW;IAC5B,OAAO,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,GAAoB;IACzD,6EAA6E;IAE7E,GAAG,CAAC,GAAG,CAAC,kCAAkC,EAAE,cAAc,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACtE,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;QACtD,IAAI,CAAC,IAAI;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;QAClE,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,0BAA0B,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC,CAAC;IAEJ,GAAG,CAAC,GAAG,CAAC,wCAAwC,EAAE,cAAc,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC5E,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;QACtD,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAC3C,IAAI,CAAC,IAAI;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;QAClE,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;QACzF,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACxD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,iCAAiC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YACpG,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QACrF,CAAC;QACD,gBAAgB,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QAC7C,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,2BAA2B,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACjE,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC,CAAC;IAEJ,GAAG,CAAC,MAAM,CAAC,wCAAwC,EAAE,cAAc,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC/E,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;QACtD,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAC3C,IAAI,CAAC,IAAI;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;QAClE,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;QACzF,MAAM,OAAO,GAAG,gBAAgB,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAChD,IAAI,CAAC,OAAO;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;QAClE,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,2BAA2B,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACjE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;IAC/B,CAAC,CAAC,CAAC,CAAC;IAMJ,MAAM,YAAY,GAAG,CAAC,OAAyD,EAAE,EAAE,CACjF,cAAc,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC1B,MAAM,SAAS,GAAG,mBAAmB,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACnE,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;QACtD,IAAI,CAAC,SAAS;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;QAC7E,IAAI,CAAC,IAAI;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;QAClE,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,CAAC;QACjF,GAAe,CAAC,aAAa,GAAG,SAAS,CAAC;QAC1C,GAAe,CAAC,QAAQ,GAAG,IAAI,CAAC;QACjC,OAAO,OAAO,CAAC,GAAc,EAAE,GAAG,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEL,GAAG,CAAC,GAAG,CAAC,sCAAsC,EAAE,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACxE,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,CAAC,GAAG,CAAC,aAAa,EAAE,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACvF,CAAC,CAAC,CAAC,CAAC;IAEJ,GAAG,CAAC,GAAG,CAAC,4CAA4C,EAAE,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC9E,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAC3C,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;QACzF,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACxD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,kCAAkC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YAC/F,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QACrF,CAAC;QACD,gBAAgB,CAAC,GAAG,CAAC,aAAa,EAAE,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QACrE,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,4BAA4B,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,aAAa,EAAE,IAAI,EAAE,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9G,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC,CAAC;IAEJ,GAAG,CAAC,MAAM,CAAC,4CAA4C,EAAE,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACjF,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAC3C,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;QACzF,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,CAAC,aAAa,EAAE,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACxE,IAAI,CAAC,OAAO;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;QAClE,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,4BAA4B,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,aAAa,EAAE,IAAI,EAAE,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9G,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;IAC/B,CAAC,CAAC,CAAC,CAAC;AACN,CAAC"}

package/dist/admin/env-routes.js

@@ -0,0 +1,74 @@
+import { logReq, requireSession } from "../http-util.js";
+import { getProject } from "../token-store.js";
+import { listEnvVarSummaries, upsertEnvVar, deleteEnvVar, } from "../env-config-store.js";
+import { EnvVarBodySchema, ENV_NAME_RE, ENV_NAME_MAX, } from "../types/env-config.js";
+function parseProjectIdParam(raw) {
+    const id = Number(Array.isArray(raw) ? raw[0] : raw);
+    return Number.isFinite(id) && Number.isInteger(id) && id > 0 ? id : null;
+}
+function parseEnvNameParam(raw) {
+    const value = Array.isArray(raw) ? raw[0] : raw;
+    return typeof value === "string" && ENV_NAME_RE.test(value) && value.length <= ENV_NAME_MAX ? value : null;
+}
+function envRoute(needsName, handler) {
+    return requireSession((req, res) => {
+        const projectId = parseProjectIdParam(req.params.id ?? "");
+        if (!projectId) {
+            logReq(req, "warn", "env route bad id", { id: req.params.id });
+            return res.status(400).json({ error: "invalid project id" });
+        }
+        let name;
+        if (needsName) {
+            const parsedName = parseEnvNameParam(req.params.name ?? "");
+            if (!parsedName) {
+                logReq(req, "warn", "env route bad name", { projectId, name: req.params.name });
+                return res.status(400).json({ error: "invalid name" });
+            }
+            name = parsedName;
+        }
+        if (!getProject(projectId)) {
+            logReq(req, "warn", "env route not managed", { projectId });
+            return res.status(404).json({ error: "not managed" });
+        }
+        req.envProjectId = projectId;
+        if (name)
+            req.envName = name;
+        return handler(req, res);
+    });
+}
+export function mountEnvRoutes(app) {
+    // GET /api/projects/:id/env — list env var summaries for a project.
+    // Never returns values — only names, enabled flags, and hasValue.
+    app.get("/api/projects/:id/env", envRoute(false, (req, res) => {
+        const vars = listEnvVarSummaries(req.envProjectId);
+        logReq(req, "debug", "list env", { projectId: req.envProjectId, count: vars.length });
+        return res.json({ vars });
+    }));
+    // PUT /api/projects/:id/env/:name — upsert an env var.
+    // Body: { value: string, enabled: boolean }. An empty value on edit means
+    // "leave unchanged" (keep the existing encrypted value).
+    app.put("/api/projects/:id/env/:name", envRoute(true, (req, res) => {
+        const name = req.envName;
+        const parsed = EnvVarBodySchema.safeParse(req.body);
+        if (!parsed.success) {
+            logReq(req, "warn", "env put bad body", { projectId: req.envProjectId, name, issues: parsed.error.issues });
+            return res.status(400).json({ error: "bad request", issues: parsed.error.issues });
+        }
+        upsertEnvVar(req.envProjectId, name, parsed.data.value, parsed.data.enabled);
+        // Never log the value — it's a secret.
+        logReq(req, "info", "upsert env", { projectId: req.envProjectId, name, enabled: parsed.data.enabled });
+        return res.json({ ok: true, name, enabled: parsed.data.enabled });
+    }));
+    // DELETE /api/projects/:id/env/:name — remove an env var.
+    app.delete("/api/projects/:id/env/:name", envRoute(true, (req, res) => {
+        const name = req.envName;
+        const existed = deleteEnvVar(req.envProjectId, name);
+        if (!existed) {
+            logReq(req, "debug", "env delete not found", { projectId: req.envProjectId, name });
+            return res.status(404).json({ error: "not found" });
+        }
+        logReq(req, "info", "delete env", { projectId: req.envProjectId, name });
+        return res.status(204).end();
+    }));
+}
+//# sourceMappingURL=env-routes.js.map

package/dist/admin/env-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-routes.js","sourceRoot":"","sources":["../../src/admin/env-routes.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,cAAc,EAAuC,MAAM,iBAAiB,CAAC;AAC9F,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EACL,mBAAmB,EACnB,YAAY,EACZ,YAAY,GACb,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,gBAAgB,EAChB,WAAW,EACX,YAAY,GACb,MAAM,wBAAwB,CAAC;AAEhC,SAAS,mBAAmB,CAAC,GAAY;IACvC,MAAM,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACrD,OAAO,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC3E,CAAC;AACD,SAAS,iBAAiB,CAAC,GAAY;IACrC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAChD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7G,CAAC;AAGD,SAAS,QAAQ,CACf,SAAkB,EAClB,OAAwD;IAExD,OAAO,cAAc,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACjC,MAAM,SAAS,GAAG,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,kBAAkB,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;YAC/D,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,IAAwB,CAAC;QAC7B,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,UAAU,GAAG,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;YAC5D,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,oBAAoB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;gBAChF,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;YACzD,CAAC;YACD,IAAI,GAAG,UAAU,CAAC;QACpB,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC3B,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,uBAAuB,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;YAC5D,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,CAAC;QACxD,CAAC;QACA,GAAc,CAAC,YAAY,GAAG,SAAS,CAAC;QACzC,IAAI,IAAI;YAAG,GAAc,CAAC,OAAO,GAAG,IAAI,CAAC;QACzC,OAAO,OAAO,CAAC,GAAa,EAAE,GAAG,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,GAAoB;IACjD,oEAAoE;IACpE,kEAAkE;IAClE,GAAG,CAAC,GAAG,CAAC,uBAAuB,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC5D,MAAM,IAAI,GAAG,mBAAmB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACnD,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,YAAY,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACtF,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC,CAAC;IAEJ,uDAAuD;IACvD,0EAA0E;IAC1E,yDAAyD;IACzD,GAAG,CAAC,GAAG,CAAC,6BAA6B,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACjE,MAAM,IAAI,GAAG,GAAG,CAAC,OAAQ,CAAC;QAC1B,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACpD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,kBAAkB,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YAC5G,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QACrF,CAAC;QACD,YAAY,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC7E,uCAAuC;QACvC,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QACvG,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC,CAAC;IAEJ,0DAA0D;IAC1D,GAAG,CAAC,MAAM,CAAC,6BAA6B,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACpE,MAAM,IAAI,GAAG,GAAG,CAAC,OAAQ,CAAC;QAC1B,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;QACrD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,sBAAsB,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;YACpF,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;QACtD,CAAC;QACD,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;QACzE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;IAC/B,CAAC,CAAC,CAAC,CAAC;AACN,CAAC"}