agent-tower 0.5.3 → 0.5.4-beta.1

package/dist/mcp/tools/__tests__/workspaces.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspaces.test.d.ts","sourceRoot":"","sources":["../../../../src/mcp/tools/__tests__/workspaces.test.ts"],"names":[],"mappings":""}

package/dist/mcp/tools/__tests__/workspaces.test.js

@@ -0,0 +1,72 @@
+import { describe, expect, it, vi } from 'vitest';
+import { registerWorkspaceTools } from '../workspaces.js';
+function createServerMock() {
+    const handlers = new Map();
+    return {
+        handlers,
+        server: {
+            tool: vi.fn((name, _description, _shape, handler) => {
+                handlers.set(name, handler);
+            }),
+        },
+    };
+}
+describe('workspace MCP tools', () => {
+    it('lists mergeable workspaces with readDiff capability', async () => {
+        const { server, handlers } = createServerMock();
+        const client = {
+            listMergeableWorkspaces: vi.fn(async () => ({ teamRunId: 'team-run-1', workspaces: [] })),
+        };
+        const auth = {
+            resolveBoundTeamRunId: vi.fn(() => 'team-run-1'),
+            requireCurrentMemberCapabilities: vi.fn(async () => 'member-1'),
+        };
+        registerWorkspaceTools(server, client, { teamRunId: 'team-run-1', invocationId: 'invocation-1' }, auth);
+        const result = await handlers.get('list_mergeable_workspaces')({});
+        expect(auth.requireCurrentMemberCapabilities).toHaveBeenCalledWith(client, { teamRunId: 'team-run-1', invocationId: 'invocation-1' }, 'team-run-1', ['readDiff']);
+        expect(client.listMergeableWorkspaces).toHaveBeenCalledWith('team-run-1');
+        expect(result.isError).toBeUndefined();
+        expect(JSON.parse(result.content[0].text)).toMatchObject({ teamRunId: 'team-run-1' });
+    });
+    it('merges all member workspaces with mergeWorkspace capability', async () => {
+        const { server, handlers } = createServerMock();
+        const client = {
+            mergeAllMemberWorkspaces: vi.fn(async () => ({ teamRunId: 'team-run-1', results: [] })),
+        };
+        const auth = {
+            resolveBoundTeamRunId: vi.fn(() => 'team-run-1'),
+            requireCurrentMemberCapabilities: vi.fn(async () => 'member-1'),
+        };
+        registerWorkspaceTools(server, client, { teamRunId: 'team-run-1', invocationId: 'invocation-1' }, auth);
+        const result = await handlers.get('merge_all_member_workspaces')({
+            workspace_ids: ['workspace-1'],
+            dry_run: true,
+            stop_on_conflict: true,
+        });
+        expect(auth.requireCurrentMemberCapabilities).toHaveBeenCalledWith(client, { teamRunId: 'team-run-1', invocationId: 'invocation-1' }, 'team-run-1', ['mergeWorkspace']);
+        expect(client.mergeAllMemberWorkspaces).toHaveBeenCalledWith('team-run-1', {
+            workspaceIds: ['workspace-1'],
+            dryRun: true,
+            stopOnConflict: true,
+        });
+        expect(result.isError).toBeUndefined();
+        expect(JSON.parse(result.content[0].text)).toMatchObject({ teamRunId: 'team-run-1' });
+    });
+    it('rejects merge_all_member_workspaces without an invocation identity', async () => {
+        const { server, handlers } = createServerMock();
+        const client = {
+            mergeAllMemberWorkspaces: vi.fn(),
+        };
+        const auth = {
+            resolveBoundTeamRunId: vi.fn(() => 'team-run-1'),
+            requireCurrentMemberCapabilities: vi.fn(async () => 'member-1'),
+        };
+        registerWorkspaceTools(server, client, { teamRunId: 'team-run-1' }, auth);
+        const result = await handlers.get('merge_all_member_workspaces')({});
+        expect(result.isError).toBe(true);
+        expect(result.content[0].text).toContain('valid TeamRun agent invocation identity');
+        expect(auth.requireCurrentMemberCapabilities).not.toHaveBeenCalled();
+        expect(client.mergeAllMemberWorkspaces).not.toHaveBeenCalled();
+    });
+});
+//# sourceMappingURL=workspaces.test.js.map

package/dist/mcp/tools/__tests__/workspaces.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspaces.test.js","sourceRoot":"","sources":["../../../../src/mcp/tools/__tests__/workspaces.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAClD,OAAO,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAE1D,SAAS,gBAAgB;IACvB,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAyC,CAAC;IAClE,OAAO;QACL,QAAQ;QACR,MAAM,EAAE;YACN,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,IAAY,EAAE,YAAoB,EAAE,MAAe,EAAE,OAAsC,EAAE,EAAE;gBAC1G,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAC9B,CAAC,CAAC;SACH;KACF,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,gBAAgB,EAAE,CAAC;QAChD,MAAM,MAAM,GAAG;YACb,uBAAuB,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC;SAC1F,CAAC;QACF,MAAM,IAAI,GAAG;YACX,qBAAqB,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC;YAChD,gCAAgC,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,UAAU,CAAC;SAChE,CAAC;QAEF,sBAAsB,CAAC,MAAa,EAAE,MAAa,EAAE,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,EAAE,cAAc,EAAS,EAAE,IAAI,CAAC,CAAC;QAC7H,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,2BAA2B,CAAE,CAAC,EAAE,CAAC,CAAC;QAEpE,MAAM,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC,oBAAoB,CAChE,MAAM,EACN,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,EAAE,cAAc,EAAE,EACzD,YAAY,EACZ,CAAC,UAAU,CAAC,CACb,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC,oBAAoB,CAAC,YAAY,CAAC,CAAC;QAC1E,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,aAAa,EAAE,CAAC;QACvC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC,CAAC;IACxF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QAC3E,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,gBAAgB,EAAE,CAAC;QAChD,MAAM,MAAM,GAAG;YACb,wBAAwB,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,YAAY,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;SACxF,CAAC;QACF,MAAM,IAAI,GAAG;YACX,qBAAqB,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC;YAChD,gCAAgC,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,UAAU,CAAC;SAChE,CAAC;QAEF,sBAAsB,CAAC,MAAa,EAAE,MAAa,EAAE,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,EAAE,cAAc,EAAS,EAAE,IAAI,CAAC,CAAC;QAC7H,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,6BAA6B,CAAE,CAAC;YAChE,aAAa,EAAE,CAAC,aAAa,CAAC;YAC9B,OAAO,EAAE,IAAI;YACb,gBAAgB,EAAE,IAAI;SACvB,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC,oBAAoB,CAChE,MAAM,EACN,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,EAAE,cAAc,EAAE,EACzD,YAAY,EACZ,CAAC,gBAAgB,CAAC,CACnB,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC,oBAAoB,CAAC,YAAY,EAAE;YACzE,YAAY,EAAE,CAAC,aAAa,CAAC;YAC7B,MAAM,EAAE,IAAI;YACZ,cAAc,EAAE,IAAI;SACrB,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,aAAa,EAAE,CAAC;QACvC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC,CAAC;IACxF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;QAClF,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,gBAAgB,EAAE,CAAC;QAChD,MAAM,MAAM,GAAG;YACb,wBAAwB,EAAE,EAAE,CAAC,EAAE,EAAE;SAClC,CAAC;QACF,MAAM,IAAI,GAAG;YACX,qBAAqB,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC;YAChD,gCAAgC,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,UAAU,CAAC;SAChE,CAAC;QAEF,sBAAsB,CAAC,MAAa,EAAE,MAAa,EAAE,EAAE,SAAS,EAAE,YAAY,EAAS,EAAE,IAAI,CAAC,CAAC;QAC/F,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,6BAA6B,CAAE,CAAC,EAAE,CAAC,CAAC;QAEtE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,yCAAyC,CAAC,CAAC;QACpF,MAAM,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACrE,MAAM,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACjE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/mcp/tools/workspaces.d.ts

@@ -2,6 +2,14 @@
  * 工作空间相关 MCP tools
  */
 import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import type { TeamMemberCapabilities } from '@agent-tower/shared';
 import type { AgentTowerClient } from '../http-client.js';
-export declare function registerWorkspaceTools(server: McpServer, client: AgentTowerClient): void;
+import type { McpContext } from '../context.js';
+type TeamMemberCapabilityName = keyof TeamMemberCapabilities;
+export interface WorkspaceToolAuth {
+    resolveBoundTeamRunId(context?: McpContext | null): string | undefined;
+    requireCurrentMemberCapabilities(client: AgentTowerClient, context: McpContext | null, teamRunId: string, requiredCapabilities: TeamMemberCapabilityName[]): Promise<string>;
+}
+export declare function registerWorkspaceTools(server: McpServer, client: AgentTowerClient, context?: McpContext | null, auth?: WorkspaceToolAuth): void;
+export {};
 //# sourceMappingURL=workspaces.d.ts.map

package/dist/mcp/tools/workspaces.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"workspaces.d.ts","sourceRoot":"","sources":["../../../src/mcp/tools/workspaces.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACzE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAO1D,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,gBAAgB,QA+DjF"}
+{"version":3,"file":"workspaces.d.ts","sourceRoot":"","sources":["../../../src/mcp/tools/workspaces.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACzE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAWhD,KAAK,wBAAwB,GAAG,MAAM,sBAAsB,CAAC;AAE7D,MAAM,WAAW,iBAAiB;IAChC,qBAAqB,CAAC,OAAO,CAAC,EAAE,UAAU,GAAG,IAAI,GAAG,MAAM,GAAG,SAAS,CAAC;IACvE,gCAAgC,CAC9B,MAAM,EAAE,gBAAgB,EACxB,OAAO,EAAE,UAAU,GAAG,IAAI,EAC1B,SAAS,EAAE,MAAM,EACjB,oBAAoB,EAAE,wBAAwB,EAAE,GAC/C,OAAO,CAAC,MAAM,CAAC,CAAC;CACpB;AA6BD,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,SAAS,EACjB,MAAM,EAAE,gBAAgB,EACxB,OAAO,GAAE,UAAU,GAAG,IAAW,EACjC,IAAI,CAAC,EAAE,iBAAiB,QAiKzB"}

package/dist/mcp/tools/workspaces.js

@@ -1,5 +1,22 @@
-import { StartWorkspaceSessionInput, GetWorkspaceDiffInput, MergeWorkspaceInput, } from '../types.js';
-export function registerWorkspaceTools(server, client) {
+import { StartWorkspaceSessionInput, GetWorkspaceDiffInput, MergeWorkspaceInput, ListMergeableWorkspacesInput, MergeAllMemberWorkspacesInput, RecordReviewVerdictInput, ReportTestResultInput, } from '../types.js';
+function requireBoundTeamRunId(context, auth, toolName) {
+    const teamRunId = auth.resolveBoundTeamRunId(context);
+    if (!teamRunId) {
+        throw new Error(`${toolName} requires a TeamRun agent session.`);
+    }
+    return teamRunId;
+}
+function requireBoundTeamRunInvocation(context, teamRunId) {
+    if (process.env.AGENT_TOWER_TEAM_RUN_ID === teamRunId
+        && process.env.AGENT_TOWER_INVOCATION_ID) {
+        return;
+    }
+    if (context?.teamRunId === teamRunId && context.invocationId) {
+        return;
+    }
+    throw new Error('A valid TeamRun agent invocation identity is required for this tool.');
+}
+export function registerWorkspaceTools(server, client, context = null, auth) {
     server.tool('start_workspace_session', 'Create a workspace and start an AI agent session for a task.', StartWorkspaceSessionInput.shape, async (params) => {
         try {
             // 1. 创建工作空间
@@ -37,6 +54,12 @@ export function registerWorkspaceTools(server, client) {
     });
     server.tool('merge_workspace', 'Merge a workspace branch into the main branch.', MergeWorkspaceInput.shape, async (params) => {
         try {
+            if (auth) {
+                const teamRunId = auth.resolveBoundTeamRunId(context);
+                if (teamRunId) {
+                    await auth.requireCurrentMemberCapabilities(client, context, teamRunId, ['mergeWorkspace']);
+                }
+            }
             const result = await client.mergeWorkspace(params.workspace_id);
             return { content: [{ type: 'text', text: JSON.stringify(result, null, 2) }] };
         }
@@ -44,5 +67,76 @@ export function registerWorkspaceTools(server, client) {
             return { content: [{ type: 'text', text: `Error: ${e.message}` }], isError: true };
         }
     });
+    server.tool('list_mergeable_workspaces', 'List TeamRun dedicated member workspaces with merge readiness, blockers, review/test verdicts, and git/activity status.', ListMergeableWorkspacesInput.shape, async () => {
+        try {
+            if (!auth) {
+                throw new Error('list_mergeable_workspaces is unavailable without TeamRun auth.');
+            }
+            const teamRunId = requireBoundTeamRunId(context, auth, 'list_mergeable_workspaces');
+            await auth.requireCurrentMemberCapabilities(client, context, teamRunId, ['readDiff']);
+            const result = await client.listMergeableWorkspaces(teamRunId);
+            return { content: [{ type: 'text', text: JSON.stringify(result, null, 2) }] };
+        }
+        catch (e) {
+            return { content: [{ type: 'text', text: `Error: ${e.message}` }], isError: true };
+        }
+    });
+    server.tool('merge_all_member_workspaces', 'Merge all merge-ready TeamRun dedicated member workspaces into the TeamRun main workspace. Returns structured per-workspace results.', MergeAllMemberWorkspacesInput.shape, async (params) => {
+        try {
+            if (!auth) {
+                throw new Error('merge_all_member_workspaces is unavailable without TeamRun auth.');
+            }
+            const teamRunId = requireBoundTeamRunId(context, auth, 'merge_all_member_workspaces');
+            requireBoundTeamRunInvocation(context, teamRunId);
+            await auth.requireCurrentMemberCapabilities(client, context, teamRunId, ['mergeWorkspace']);
+            const result = await client.mergeAllMemberWorkspaces(teamRunId, {
+                workspaceIds: params.workspace_ids,
+                dryRun: params.dry_run,
+                stopOnConflict: params.stop_on_conflict,
+            });
+            return { content: [{ type: 'text', text: JSON.stringify(result, null, 2) }] };
+        }
+        catch (e) {
+            return { content: [{ type: 'text', text: `Error: ${e.message}` }], isError: true };
+        }
+    });
+    server.tool('record_review_verdict', 'Record a TeamRun workspace review verdict bound to the workspace HEAD SHA.', RecordReviewVerdictInput.shape, async (params) => {
+        try {
+            if (!auth) {
+                throw new Error('record_review_verdict is unavailable without TeamRun auth.');
+            }
+            const teamRunId = requireBoundTeamRunId(context, auth, 'record_review_verdict');
+            await auth.requireCurrentMemberCapabilities(client, context, teamRunId, ['readDiff']);
+            const result = await client.recordWorkspaceVerdict(params.workspace_id, {
+                kind: 'REVIEW',
+                verdict: params.verdict,
+                reviewedSha: params.reviewed_sha,
+                reason: params.reason,
+            });
+            return { content: [{ type: 'text', text: JSON.stringify(result, null, 2) }] };
+        }
+        catch (e) {
+            return { content: [{ type: 'text', text: `Error: ${e.message}` }], isError: true };
+        }
+    });
+    server.tool('report_test_result', 'Record a TeamRun workspace test result bound to the workspace HEAD SHA.', ReportTestResultInput.shape, async (params) => {
+        try {
+            if (!auth) {
+                throw new Error('report_test_result is unavailable without TeamRun auth.');
+            }
+            const teamRunId = requireBoundTeamRunId(context, auth, 'report_test_result');
+            await auth.requireCurrentMemberCapabilities(client, context, teamRunId, ['runCommands']);
+            const result = await client.recordWorkspaceVerdict(params.workspace_id, {
+                kind: 'TEST',
+                verdict: params.verdict,
+                reviewedSha: params.reviewed_sha,
+                reason: params.reason,
+            });
+            return { content: [{ type: 'text', text: JSON.stringify(result, null, 2) }] };
+        }
+        catch (e) {
+            return { content: [{ type: 'text', text: `Error: ${e.message}` }], isError: true };
+        }
+    });
 }
 //# sourceMappingURL=workspaces.js.map

package/dist/mcp/tools/workspaces.js.map

@@ -1 +1 @@
-{"version":3,"file":"workspaces.js","sourceRoot":"","sources":["../../../src/mcp/tools/workspaces.ts"],"names":[],"mappings":"AAKA,OAAO,EACL,0BAA0B,EAC1B,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,aAAa,CAAC;AAErB,MAAM,UAAU,sBAAsB,CAAC,MAAiB,EAAE,MAAwB;IAChF,MAAM,CAAC,IAAI,CACT,yBAAyB,EACzB,8DAA8D,EAC9D,0BAA0B,CAAC,KAAK,EAChC,KAAK,EAAE,MAAM,EAAE,EAAE;QACf,IAAI,CAAC;YACH,YAAY;YACZ,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,OAAO,EAAE;gBAC7D,aAAa,EAAE,MAAM,CAAC,IAAI,KAAK,gBAAgB,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,UAAU;aAChF,CAAC,CAAC;YACH,UAAU;YACV,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,aAAa,CACxC,SAAS,CAAC,EAAE,EACZ,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,WAAW,CACnB,CAAC;YACF,UAAU;YACV,MAAM,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YACtC,OAAO;gBACL,OAAO,EAAE,CAAC;wBACR,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;4BACnB,OAAO,EAAE,MAAM,CAAC,OAAO;4BACvB,YAAY,EAAE,SAAS,CAAC,EAAE;4BAC1B,UAAU,EAAE,OAAO,CAAC,EAAE;4BACtB,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,UAAU;yBAChC,EAAE,IAAI,EAAE,CAAC,CAAC;qBACZ,CAAC;aACH,CAAC;QACJ,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACrF,CAAC;IACH,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,oBAAoB,EACpB,oCAAoC,EACpC,qBAAqB,CAAC,KAAK,EAC3B,KAAK,EAAE,MAAM,EAAE,EAAE;QACf,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YAClE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,cAAc,EAAE,CAAC,EAAE,CAAC;QAC9E,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACrF,CAAC;IACH,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,iBAAiB,EACjB,gDAAgD,EAChD,mBAAmB,CAAC,KAAK,EACzB,KAAK,EAAE,MAAM,EAAE,EAAE;QACf,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YAChE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QAChF,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACrF,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"workspaces.js","sourceRoot":"","sources":["../../../src/mcp/tools/workspaces.ts"],"names":[],"mappings":"AAOA,OAAO,EACL,0BAA0B,EAC1B,qBAAqB,EACrB,mBAAmB,EACnB,4BAA4B,EAC5B,6BAA6B,EAC7B,wBAAwB,EACxB,qBAAqB,GACtB,MAAM,aAAa,CAAC;AAcrB,SAAS,qBAAqB,CAC5B,OAA0B,EAC1B,IAAuB,EACvB,QAAgB;IAEhB,MAAM,SAAS,GAAG,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC;IACtD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,GAAG,QAAQ,oCAAoC,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,6BAA6B,CAAC,OAA0B,EAAE,SAAiB;IAClF,IACE,OAAO,CAAC,GAAG,CAAC,uBAAuB,KAAK,SAAS;WAC9C,OAAO,CAAC,GAAG,CAAC,yBAAyB,EACxC,CAAC;QACD,OAAO;IACT,CAAC;IAED,IAAI,OAAO,EAAE,SAAS,KAAK,SAAS,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;QAC7D,OAAO;IACT,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;AAC1F,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,MAAiB,EACjB,MAAwB,EACxB,UAA6B,IAAI,EACjC,IAAwB;IAExB,MAAM,CAAC,IAAI,CACT,yBAAyB,EACzB,8DAA8D,EAC9D,0BAA0B,CAAC,KAAK,EAChC,KAAK,EAAE,MAAM,EAAE,EAAE;QACf,IAAI,CAAC;YACH,YAAY;YACZ,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,OAAO,EAAE;gBAC7D,aAAa,EAAE,MAAM,CAAC,IAAI,KAAK,gBAAgB,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,UAAU;aAChF,CAAC,CAAC;YACH,UAAU;YACV,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,aAAa,CACxC,SAAS,CAAC,EAAE,EACZ,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,WAAW,CACnB,CAAC;YACF,UAAU;YACV,MAAM,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YACtC,OAAO;gBACL,OAAO,EAAE,CAAC;wBACR,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;4BACnB,OAAO,EAAE,MAAM,CAAC,OAAO;4BACvB,YAAY,EAAE,SAAS,CAAC,EAAE;4BAC1B,UAAU,EAAE,OAAO,CAAC,EAAE;4BACtB,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,UAAU;yBAChC,EAAE,IAAI,EAAE,CAAC,CAAC;qBACZ,CAAC;aACH,CAAC;QACJ,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACrF,CAAC;IACH,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,oBAAoB,EACpB,oCAAoC,EACpC,qBAAqB,CAAC,KAAK,EAC3B,KAAK,EAAE,MAAM,EAAE,EAAE;QACf,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YAClE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,cAAc,EAAE,CAAC,EAAE,CAAC;QAC9E,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACrF,CAAC;IACH,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,iBAAiB,EACjB,gDAAgD,EAChD,mBAAmB,CAAC,KAAK,EACzB,KAAK,EAAE,MAAM,EAAE,EAAE;QACf,IAAI,CAAC;YACH,IAAI,IAAI,EAAE,CAAC;gBACT,MAAM,SAAS,GAAG,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC;gBACtD,IAAI,SAAS,EAAE,CAAC;oBACd,MAAM,IAAI,CAAC,gCAAgC,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC;gBAC9F,CAAC;YACH,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YAChE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QAChF,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACrF,CAAC;IACH,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,2BAA2B,EAC3B,yHAAyH,EACzH,4BAA4B,CAAC,KAAK,EAClC,KAAK,IAAI,EAAE;QACT,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;YACpF,CAAC;YACD,MAAM,SAAS,GAAG,qBAAqB,CAAC,OAAO,EAAE,IAAI,EAAE,2BAA2B,CAAC,CAAC;YACpF,MAAM,IAAI,CAAC,gCAAgC,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;YACtF,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,SAAS,CAAC,CAAC;YAC/D,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QAChF,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACrF,CAAC;IACH,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,6BAA6B,EAC7B,sIAAsI,EACtI,6BAA6B,CAAC,KAAK,EACnC,KAAK,EAAE,MAAM,EAAE,EAAE;QACf,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;YACtF,CAAC;YACD,MAAM,SAAS,GAAG,qBAAqB,CAAC,OAAO,EAAE,IAAI,EAAE,6BAA6B,CAAC,CAAC;YACtF,6BAA6B,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YAClD,MAAM,IAAI,CAAC,gCAAgC,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC;YAC5F,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,SAAS,EAAE;gBAC9D,YAAY,EAAE,MAAM,CAAC,aAAa;gBAClC,MAAM,EAAE,MAAM,CAAC,OAAO;gBACtB,cAAc,EAAE,MAAM,CAAC,gBAAgB;aACxC,CAAC,CAAC;YACH,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QAChF,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACrF,CAAC;IACH,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,uBAAuB,EACvB,4EAA4E,EAC5E,wBAAwB,CAAC,KAAK,EAC9B,KAAK,EAAE,MAAM,EAAE,EAAE;QACf,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;YAChF,CAAC;YACD,MAAM,SAAS,GAAG,qBAAqB,CAAC,OAAO,EAAE,IAAI,EAAE,uBAAuB,CAAC,CAAC;YAChF,MAAM,IAAI,CAAC,gCAAgC,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;YACtF,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,MAAM,CAAC,YAAY,EAAE;gBACtE,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,WAAW,EAAE,MAAM,CAAC,YAAY;gBAChC,MAAM,EAAE,MAAM,CAAC,MAAM;aACtB,CAAC,CAAC;YACH,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QAChF,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACrF,CAAC;IACH,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,oBAAoB,EACpB,yEAAyE,EACzE,qBAAqB,CAAC,KAAK,EAC3B,KAAK,EAAE,MAAM,EAAE,EAAE;QACf,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;YAC7E,CAAC;YACD,MAAM,SAAS,GAAG,qBAAqB,CAAC,OAAO,EAAE,IAAI,EAAE,oBAAoB,CAAC,CAAC;YAC7E,MAAM,IAAI,CAAC,gCAAgC,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC;YACzF,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,MAAM,CAAC,YAAY,EAAE;gBACtE,IAAI,EAAE,MAAM;gBACZ,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,WAAW,EAAE,MAAM,CAAC,YAAY;gBAChC,MAAM,EAAE,MAAM,CAAC,MAAM;aACtB,CAAC,CAAC;YACH,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QAChF,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACrF,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/mcp/types.d.ts

@@ -90,6 +90,52 @@ export declare const MergeWorkspaceInput: z.ZodObject<{
 }, {
     workspace_id: string;
 }>;
+export declare const ListMergeableWorkspacesInput: z.ZodObject<{}, "strip", z.ZodTypeAny, {}, {}>;
+export declare const MergeAllMemberWorkspacesInput: z.ZodObject<{
+    workspace_ids: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    dry_run: z.ZodOptional<z.ZodBoolean>;
+    stop_on_conflict: z.ZodOptional<z.ZodBoolean>;
+}, "strip", z.ZodTypeAny, {
+    workspace_ids?: string[] | undefined;
+    dry_run?: boolean | undefined;
+    stop_on_conflict?: boolean | undefined;
+}, {
+    workspace_ids?: string[] | undefined;
+    dry_run?: boolean | undefined;
+    stop_on_conflict?: boolean | undefined;
+}>;
+export declare const RecordReviewVerdictInput: z.ZodObject<{
+    workspace_id: z.ZodString;
+    verdict: z.ZodEnum<["APPROVED", "CHANGES_REQUESTED"]>;
+    reviewed_sha: z.ZodString;
+    reason: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    verdict: "APPROVED" | "CHANGES_REQUESTED";
+    workspace_id: string;
+    reviewed_sha: string;
+    reason?: string | undefined;
+}, {
+    verdict: "APPROVED" | "CHANGES_REQUESTED";
+    workspace_id: string;
+    reviewed_sha: string;
+    reason?: string | undefined;
+}>;
+export declare const ReportTestResultInput: z.ZodObject<{
+    workspace_id: z.ZodString;
+    verdict: z.ZodEnum<["PASSED", "FAILED"]>;
+    reviewed_sha: z.ZodString;
+    reason: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    verdict: "FAILED" | "PASSED";
+    workspace_id: string;
+    reviewed_sha: string;
+    reason?: string | undefined;
+}, {
+    verdict: "FAILED" | "PASSED";
+    workspace_id: string;
+    reviewed_sha: string;
+    reason?: string | undefined;
+}>;
 export declare const StopSessionInput: z.ZodObject<{
     session_id: z.ZodString;
 }, "strip", z.ZodTypeAny, {

package/dist/mcp/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/mcp/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,eAAO,MAAM,iBAAiB,gDAAe,CAAC;AAI9C,eAAO,MAAM,cAAc;;;;;;;;;;;;EAMzB,CAAC;AAEH,eAAO,MAAM,eAAe;;;;;;;;;;;;EAI1B,CAAC;AAEH,eAAO,MAAM,YAAY;;;;;;EAEvB,CAAC;AAEH,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;EAM1B,CAAC;AAEH,eAAO,MAAM,eAAe;;;;;;EAE1B,CAAC;AAIH,eAAO,MAAM,kBAAkB,gDAAe,CAAC;AAI/C,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;EAMrC,CAAC;AAEH,eAAO,MAAM,qBAAqB;;;;;;EAEhC,CAAC;AAEH,eAAO,MAAM,mBAAmB;;;;;;EAE9B,CAAC;AAIH,eAAO,MAAM,gBAAgB;;;;;;EAE3B,CAAC;AAEH,eAAO,MAAM,gBAAgB;;;;;;;;;EAG3B,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/mcp/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,eAAO,MAAM,iBAAiB,gDAAe,CAAC;AAI9C,eAAO,MAAM,cAAc;;;;;;;;;;;;EAMzB,CAAC;AAEH,eAAO,MAAM,eAAe;;;;;;;;;;;;EAI1B,CAAC;AAEH,eAAO,MAAM,YAAY;;;;;;EAEvB,CAAC;AAEH,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;EAM1B,CAAC;AAEH,eAAO,MAAM,eAAe;;;;;;EAE1B,CAAC;AAIH,eAAO,MAAM,kBAAkB,gDAAe,CAAC;AAI/C,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;EAMrC,CAAC;AAEH,eAAO,MAAM,qBAAqB;;;;;;EAEhC,CAAC;AAEH,eAAO,MAAM,mBAAmB;;;;;;EAE9B,CAAC;AAEH,eAAO,MAAM,4BAA4B,gDAAe,CAAC;AAEzD,eAAO,MAAM,6BAA6B;;;;;;;;;;;;EAOxC,CAAC;AAEH,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;EAMnC,CAAC;AAEH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;EAMhC,CAAC;AAIH,eAAO,MAAM,gBAAgB;;;;;;EAE3B,CAAC;AAEH,eAAO,MAAM,gBAAgB;;;;;;;;;EAG3B,CAAC"}

package/dist/mcp/types.js

@@ -46,6 +46,29 @@ export const GetWorkspaceDiffInput = z.object({
 export const MergeWorkspaceInput = z.object({
     workspace_id: z.string().describe('The ID of the workspace to merge'),
 });
+export const ListMergeableWorkspacesInput = z.object({});
+export const MergeAllMemberWorkspacesInput = z.object({
+    workspace_ids: z.array(z.string().min(1)).optional()
+        .describe('Optional list of TeamRun dedicated workspace IDs to merge. Defaults to all merge-ready member workspaces.'),
+    dry_run: z.boolean().optional()
+        .describe('When true, return the workspaces that would be merged without changing git or workspace state.'),
+    stop_on_conflict: z.boolean().optional()
+        .describe('When true, stop processing after the first merge conflict. Defaults to false.'),
+});
+export const RecordReviewVerdictInput = z.object({
+    workspace_id: z.string().describe('The ID of the workspace being reviewed'),
+    verdict: z.enum(['APPROVED', 'CHANGES_REQUESTED'])
+        .describe("Review verdict: 'APPROVED' or 'CHANGES_REQUESTED'"),
+    reviewed_sha: z.string().min(1).describe('Workspace HEAD commit SHA that this review applies to'),
+    reason: z.string().optional().describe('Optional review summary or reason'),
+});
+export const ReportTestResultInput = z.object({
+    workspace_id: z.string().describe('The ID of the workspace tested'),
+    verdict: z.enum(['PASSED', 'FAILED'])
+        .describe("Test verdict: 'PASSED' or 'FAILED'"),
+    reviewed_sha: z.string().min(1).describe('Workspace HEAD commit SHA that this test result applies to'),
+    reason: z.string().optional().describe('Optional test report summary'),
+});
 // ── Sessions ──
 export const StopSessionInput = z.object({
     session_id: z.string().describe('The ID of the session to stop'),

package/dist/mcp/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/mcp/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,iBAAiB;AAEjB,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAE9C,cAAc;AAEd,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;IAC3E,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,QAAQ,EAAE;SACjF,QAAQ,CAAC,iFAAiF,CAAC;IAC9F,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;SAC/C,QAAQ,CAAC,iDAAiD,CAAC;CAC/D,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,6CAA6C,CAAC;IAC9E,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,uBAAuB,CAAC;IAC1D,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kCAAkC,CAAC;CAChF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,gCAAgC,CAAC;CAC/D,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC;IAC5D,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wBAAwB,CAAC;IACtE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC;IAC3E,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,QAAQ,EAAE;SACjF,QAAQ,CAAC,qEAAqE,CAAC;CACnF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC;CAC7D,CAAC,CAAC;AAEH,kBAAkB;AAElB,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAE/C,mBAAmB;AAEnB,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,qDAAqD,CAAC;IACnF,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,yCAAyC,CAAC;IAC7E,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oGAAoG,CAAC;IACtI,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC,CAAC,QAAQ,EAAE;SACpD,QAAQ,CAAC,sGAAsG,CAAC;CACpH,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,yBAAyB,CAAC;CAC7D,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kCAAkC,CAAC;CACtE,CAAC,CAAC;AAEH,iBAAiB;AAEjB,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,+BAA+B,CAAC;CACjE,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,uBAAuB,CAAC;IACxD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,qBAAqB,CAAC;CAC3D,CAAC,CAAC"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/mcp/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,iBAAiB;AAEjB,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAE9C,cAAc;AAEd,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;IAC3E,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,QAAQ,EAAE;SACjF,QAAQ,CAAC,iFAAiF,CAAC;IAC9F,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;SAC/C,QAAQ,CAAC,iDAAiD,CAAC;CAC/D,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,6CAA6C,CAAC;IAC9E,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,uBAAuB,CAAC;IAC1D,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kCAAkC,CAAC;CAChF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,gCAAgC,CAAC;CAC/D,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC;IAC5D,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wBAAwB,CAAC;IACtE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC;IAC3E,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,QAAQ,EAAE;SACjF,QAAQ,CAAC,qEAAqE,CAAC;CACnF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC;CAC7D,CAAC,CAAC;AAEH,kBAAkB;AAElB,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAE/C,mBAAmB;AAEnB,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,qDAAqD,CAAC;IACnF,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,yCAAyC,CAAC;IAC7E,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oGAAoG,CAAC;IACtI,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC,CAAC,QAAQ,EAAE;SACpD,QAAQ,CAAC,sGAAsG,CAAC;CACpH,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,yBAAyB,CAAC;CAC7D,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kCAAkC,CAAC;CACtE,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAEzD,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;SACjD,QAAQ,CAAC,2GAA2G,CAAC;IACxH,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;SAC5B,QAAQ,CAAC,gGAAgG,CAAC;IAC7G,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;SACrC,QAAQ,CAAC,+EAA+E,CAAC;CAC7F,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;IAC3E,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAC;SAC/C,QAAQ,CAAC,mDAAmD,CAAC;IAChE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,uDAAuD,CAAC;IACjG,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC;CAC5E,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,gCAAgC,CAAC;IACnE,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;SAClC,QAAQ,CAAC,oCAAoC,CAAC;IACjD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,4DAA4D,CAAC;IACtG,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC;CACvE,CAAC,CAAC;AAEH,iBAAiB;AAEjB,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,+BAA+B,CAAC;CACjE,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,uBAAuB,CAAC;IACxD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,qBAAqB,CAAC;CAC3D,CAAC,CAAC"}

package/dist/middleware/__tests__/access-auth.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=access-auth.test.d.ts.map

package/dist/middleware/__tests__/access-auth.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"access-auth.test.d.ts","sourceRoot":"","sources":["../../../src/middleware/__tests__/access-auth.test.ts"],"names":[],"mappings":""}

package/dist/middleware/__tests__/access-auth.test.js

@@ -0,0 +1,249 @@
+import { execFileSync } from 'node:child_process';
+import fs from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+import fastifyCookie from '@fastify/cookie';
+import Fastify from 'fastify';
+import { afterAll, beforeAll, beforeEach, describe, expect, it } from 'vitest';
+const testDir = fs.mkdtempSync(path.join(os.tmpdir(), 'agent-tower-access-auth-middleware-'));
+const dbPath = path.join(testDir, 'test.db');
+process.env.AGENT_TOWER_DATABASE_URL = `file:${dbPath}`;
+process.env.AGENT_TOWER_DATA_DIR = testDir;
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = path.dirname(__filename);
+const serverRoot = path.resolve(__dirname, '../../..');
+const schemaPath = path.join(serverRoot, 'prisma/schema.prisma');
+let prisma;
+let accessAuthHook;
+let accessAuthRoutes;
+let AccessAuthService;
+let INTERNAL_API_TOKEN_HEADER;
+let INTERNAL_API_TOKEN_ENV;
+let getOrCreateInternalApiToken;
+async function buildTestApp() {
+    const app = Fastify();
+    await app.register(fastifyCookie);
+    app.addHook('onRequest', accessAuthHook);
+    await app.register(accessAuthRoutes, { prefix: '/api' });
+    app.get('/api/private', async () => ({ ok: true }));
+    app.post('/api/private', async () => ({ ok: true }));
+    app.get('/api/tunnel/bootstrap', async () => ({ ok: true }));
+    app.get('/view/:workspaceId/*', async () => ({ ok: true }));
+    return app;
+}
+describe('accessAuthHook', () => {
+    beforeAll(async () => {
+        execFileSync('pnpm', ['exec', 'prisma', 'db', 'push', '--skip-generate', `--schema=${schemaPath}`], {
+            cwd: serverRoot,
+            env: { ...process.env, AGENT_TOWER_DATABASE_URL: `file:${dbPath}` },
+            stdio: 'pipe',
+        });
+        const middlewareModule = await import('../access-auth.js');
+        const routesModule = await import('../../routes/access-auth.js');
+        const serviceModule = await import('../../services/access-auth.service.js');
+        const tokenModule = await import('../../utils/internal-api-token.js');
+        const utilsModule = await import('../../utils/index.js');
+        accessAuthHook = middlewareModule.accessAuthHook;
+        accessAuthRoutes = routesModule.accessAuthRoutes;
+        AccessAuthService = serviceModule.AccessAuthService;
+        INTERNAL_API_TOKEN_HEADER = tokenModule.INTERNAL_API_TOKEN_HEADER;
+        INTERNAL_API_TOKEN_ENV = tokenModule.INTERNAL_API_TOKEN_ENV;
+        getOrCreateInternalApiToken = tokenModule.getOrCreateInternalApiToken;
+        prisma = utilsModule.prisma;
+    });
+    beforeEach(async () => {
+        await prisma.accessAuthSettings.deleteMany();
+        delete process.env.AGENT_TOWER_INTERNAL_TOKEN;
+        AccessAuthService.__test.resetLoginRateLimit();
+        AccessAuthService.__test.resetSessionSecretGeneration();
+    });
+    afterAll(async () => {
+        await prisma.$disconnect();
+        fs.rmSync(testDir, { recursive: true, force: true });
+    });
+    it('allows API requests when access password is disabled', async () => {
+        const app = await buildTestApp();
+        try {
+            const response = await app.inject({ method: 'GET', url: '/api/private' });
+            expect(response.statusCode).toBe(200);
+        }
+        finally {
+            await app.close();
+        }
+    });
+    it('handles concurrent initial access auth status requests on a fresh database', async () => {
+        const app = await buildTestApp();
+        try {
+            const responses = await Promise.all(Array.from({ length: 8 }, () => app.inject({ method: 'GET', url: '/api/access-auth/status' })));
+            expect(responses.map((response) => response.statusCode)).toEqual(Array.from({ length: 8 }, () => 200));
+            for (const response of responses) {
+                expect(response.json()).toEqual({ enabled: false, authenticated: true });
+            }
+            await expect(prisma.accessAuthSettings.count()).resolves.toBe(1);
+        }
+        finally {
+            await app.close();
+        }
+    });
+    it('rejects protected APIs when enabled and allows status/login/tunnel bootstrap', async () => {
+        await AccessAuthService.updateSettings({ enabled: true, newPassword: 'secret-pass' });
+        const app = await buildTestApp();
+        try {
+            const privateResponse = await app.inject({ method: 'GET', url: '/api/private' });
+            expect(privateResponse.statusCode).toBe(401);
+            expect(privateResponse.json()).toMatchObject({ code: 'ACCESS_AUTH_REQUIRED' });
+            const statusResponse = await app.inject({ method: 'GET', url: '/api/access-auth/status' });
+            expect(statusResponse.statusCode).toBe(200);
+            expect(statusResponse.json()).toEqual({ enabled: true, authenticated: false });
+            const tunnelResponse = await app.inject({ method: 'GET', url: '/api/tunnel/bootstrap' });
+            expect(tunnelResponse.statusCode).toBe(200);
+        }
+        finally {
+            await app.close();
+        }
+    });
+    it('sets a session cookie on login and allows same-origin writes', async () => {
+        await AccessAuthService.updateSettings({ enabled: true, newPassword: 'secret-pass' });
+        const app = await buildTestApp();
+        try {
+            const loginResponse = await app.inject({
+                method: 'POST',
+                url: '/api/access-auth/login',
+                payload: { password: 'secret-pass' },
+            });
+            expect(loginResponse.statusCode).toBe(200);
+            const cookie = String(loginResponse.headers['set-cookie']);
+            expect(cookie).toContain('agent-tower-access=');
+            const writeResponse = await app.inject({
+                method: 'POST',
+                url: '/api/private',
+                headers: {
+                    cookie,
+                    origin: 'http://localhost:12580',
+                    host: 'localhost:12580',
+                },
+            });
+            expect(writeResponse.statusCode).toBe(200);
+            const csrfResponse = await app.inject({
+                method: 'POST',
+                url: '/api/private',
+                headers: {
+                    cookie,
+                    origin: 'http://evil.example',
+                    host: 'localhost:12580',
+                },
+            });
+            expect(csrfResponse.statusCode).toBe(403);
+        }
+        finally {
+            await app.close();
+        }
+    });
+    it('allows internal token requests without a browser session', async () => {
+        await AccessAuthService.updateSettings({ enabled: true, newPassword: 'secret-pass' });
+        const app = await buildTestApp();
+        const originalDataDir = process.env.AGENT_TOWER_DATA_DIR;
+        const token = getOrCreateInternalApiToken(testDir);
+        process.env[INTERNAL_API_TOKEN_ENV] = token;
+        process.env.AGENT_TOWER_DATA_DIR = path.join(testDir, 'wrong-data-dir');
+        try {
+            const response = await app.inject({
+                method: 'GET',
+                url: '/api/private',
+                headers: {
+                    [INTERNAL_API_TOKEN_HEADER]: token,
+                },
+            });
+            expect(response.statusCode).toBe(200);
+        }
+        finally {
+            if (originalDataDir === undefined) {
+                delete process.env.AGENT_TOWER_DATA_DIR;
+            }
+            else {
+                process.env.AGENT_TOWER_DATA_DIR = originalDataDir;
+            }
+            await app.close();
+        }
+    });
+    it('rejects missing or incorrect internal token requests when access password is enabled', async () => {
+        await AccessAuthService.updateSettings({ enabled: true, newPassword: 'secret-pass' });
+        process.env[INTERNAL_API_TOKEN_ENV] = 'expected-internal-token';
+        const app = await buildTestApp();
+        try {
+            const missingResponse = await app.inject({
+                method: 'GET',
+                url: '/api/private',
+            });
+            expect(missingResponse.statusCode).toBe(401);
+            expect(missingResponse.json()).toMatchObject({ code: 'ACCESS_AUTH_REQUIRED' });
+            const wrongResponse = await app.inject({
+                method: 'GET',
+                url: '/api/private',
+                headers: {
+                    [INTERNAL_API_TOKEN_HEADER]: 'wrong-internal-token',
+                },
+            });
+            expect(wrongResponse.statusCode).toBe(401);
+            expect(wrongResponse.json()).toMatchObject({ code: 'ACCESS_AUTH_INVALID_INTERNAL_TOKEN' });
+        }
+        finally {
+            await app.close();
+        }
+    });
+    it('allows tokenized preview proxy requests without allowing main API requests', async () => {
+        await AccessAuthService.updateSettings({ enabled: true, newPassword: 'secret-pass' });
+        const previewToken = await AccessAuthService.createPreviewAccessToken('workspace-1');
+        const app = await buildTestApp();
+        try {
+            const previewResponse = await app.inject({
+                method: 'GET',
+                url: `/view/workspace-1/__agent_tower_preview/${previewToken}/api/echo`,
+            });
+            expect(previewResponse.statusCode).toBe(200);
+            const mismatchedPreviewResponse = await app.inject({
+                method: 'GET',
+                url: `/view/workspace-2/__agent_tower_preview/${previewToken}/api/echo`,
+            });
+            expect(mismatchedPreviewResponse.statusCode).toBe(401);
+            const apiResponse = await app.inject({
+                method: 'GET',
+                url: '/api/private',
+                headers: {
+                    'x-preview-token': previewToken,
+                },
+            });
+            expect(apiResponse.statusCode).toBe(401);
+        }
+        finally {
+            await app.close();
+        }
+    });
+    it('rate limits repeated login failures at the route boundary', async () => {
+        await AccessAuthService.updateSettings({ enabled: true, newPassword: 'secret-pass' });
+        const app = await buildTestApp();
+        try {
+            for (let i = 0; i < AccessAuthService.__test.MAX_FAILED_LOGIN_ATTEMPTS; i += 1) {
+                const response = await app.inject({
+                    method: 'POST',
+                    url: '/api/access-auth/login',
+                    payload: { password: 'wrong-pass' },
+                });
+                expect(response.statusCode).toBe(401);
+            }
+            const limited = await app.inject({
+                method: 'POST',
+                url: '/api/access-auth/login',
+                payload: { password: 'secret-pass' },
+            });
+            expect(limited.statusCode).toBe(429);
+            expect(limited.json()).toMatchObject({ code: 'ACCESS_AUTH_RATE_LIMITED' });
+            expect(limited.headers['set-cookie']).toBeUndefined();
+        }
+        finally {
+            await app.close();
+        }
+    });
+});
+//# sourceMappingURL=access-auth.test.js.map

package/dist/middleware/__tests__/access-auth.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"access-auth.test.js","sourceRoot":"","sources":["../../../src/middleware/__tests__/access-auth.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,aAAa,MAAM,iBAAiB,CAAC;AAC5C,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAG/E,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,qCAAqC,CAAC,CAAC,CAAC;AAC9F,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;AAC7C,OAAO,CAAC,GAAG,CAAC,wBAAwB,GAAG,QAAQ,MAAM,EAAE,CAAC;AACxD,OAAO,CAAC,GAAG,CAAC,oBAAoB,GAAG,OAAO,CAAC;AAE3C,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;AAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;AACvD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,sBAAsB,CAAC,CAAC;AAEjE,IAAI,MAAoB,CAAC;AACzB,IAAI,cAAiE,CAAC;AACtE,IAAI,gBAA+E,CAAC;AACpF,IAAI,iBAA2F,CAAC;AAChG,IAAI,yBAAuG,CAAC;AAC5G,IAAI,sBAAiG,CAAC;AACtG,IAAI,2BAA2G,CAAC;AAEhH,KAAK,UAAU,YAAY;IACzB,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IACtB,MAAM,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;IAClC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;IACzC,MAAM,GAAG,CAAC,QAAQ,CAAC,gBAAgB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IACzD,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACpD,GAAG,CAAC,IAAI,CAAC,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACrD,GAAG,CAAC,GAAG,CAAC,uBAAuB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC7D,GAAG,CAAC,GAAG,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC5D,OAAO,GAAG,CAAC;AACb,CAAC;AAED,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,YAAY,CACV,MAAM,EACN,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,iBAAiB,EAAE,YAAY,UAAU,EAAE,CAAC,EAC7E;YACE,GAAG,EAAE,UAAU;YACf,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,wBAAwB,EAAE,QAAQ,MAAM,EAAE,EAAE;YACnE,KAAK,EAAE,MAAM;SACd,CACF,CAAC;QAEF,MAAM,gBAAgB,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;QAC3D,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,6BAA6B,CAAC,CAAC;QACjE,MAAM,aAAa,GAAG,MAAM,MAAM,CAAC,uCAAuC,CAAC,CAAC;QAC5E,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,mCAAmC,CAAC,CAAC;QACtE,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;QACzD,cAAc,GAAG,gBAAgB,CAAC,cAAc,CAAC;QACjD,gBAAgB,GAAG,YAAY,CAAC,gBAAgB,CAAC;QACjD,iBAAiB,GAAG,aAAa,CAAC,iBAAiB,CAAC;QACpD,yBAAyB,GAAG,WAAW,CAAC,yBAAyB,CAAC;QAClE,sBAAsB,GAAG,WAAW,CAAC,sBAAsB,CAAC;QAC5D,2BAA2B,GAAG,WAAW,CAAC,2BAA2B,CAAC;QACtE,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,MAAM,MAAM,CAAC,kBAAkB,CAAC,UAAU,EAAE,CAAC;QAC7C,OAAO,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC;QAC9C,iBAAiB,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;QAC/C,iBAAiB,CAAC,MAAM,CAAC,4BAA4B,EAAE,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,KAAK,IAAI,EAAE;QAClB,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC;QAC3B,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,GAAG,GAAG,MAAM,YAAY,EAAE,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,cAAc,EAAE,CAAC,CAAC;YAC1E,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACxC,CAAC;gBAAS,CAAC;YACT,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;QACpB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4EAA4E,EAAE,KAAK,IAAI,EAAE;QAC1F,MAAM,GAAG,GAAG,MAAM,YAAY,EAAE,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,GAAG,CACjC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,yBAAyB,EAAE,CAAC,CAAC,CAC/F,CAAC;YAEF,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YACvG,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;gBACjC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;YAC3E,CAAC;YACD,MAAM,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACnE,CAAC;gBAAS,CAAC;YACT,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;QACpB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8EAA8E,EAAE,KAAK,IAAI,EAAE;QAC5F,MAAM,iBAAiB,CAAC,cAAc,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,aAAa,EAAE,CAAC,CAAC;QACtF,MAAM,GAAG,GAAG,MAAM,YAAY,EAAE,CAAC;QAEjC,IAAI,CAAC;YACH,MAAM,eAAe,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,cAAc,EAAE,CAAC,CAAC;YACjF,MAAM,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7C,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,CAAC,CAAC;YAE/E,MAAM,cAAc,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,yBAAyB,EAAE,CAAC,CAAC;YAC3F,MAAM,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC5C,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC;YAE/E,MAAM,cAAc,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,uBAAuB,EAAE,CAAC,CAAC;YACzF,MAAM,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9C,CAAC;gBAAS,CAAC;YACT,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;QACpB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,iBAAiB,CAAC,cAAc,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,aAAa,EAAE,CAAC,CAAC;QACtF,MAAM,GAAG,GAAG,MAAM,YAAY,EAAE,CAAC;QAEjC,IAAI,CAAC;YACH,MAAM,aAAa,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;gBACrC,MAAM,EAAE,MAAM;gBACd,GAAG,EAAE,wBAAwB;gBAC7B,OAAO,EAAE,EAAE,QAAQ,EAAE,aAAa,EAAE;aACrC,CAAC,CAAC;YACH,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC3C,MAAM,MAAM,GAAG,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;YAC3D,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAC;YAEhD,MAAM,aAAa,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;gBACrC,MAAM,EAAE,MAAM;gBACd,GAAG,EAAE,cAAc;gBACnB,OAAO,EAAE;oBACP,MAAM;oBACN,MAAM,EAAE,wBAAwB;oBAChC,IAAI,EAAE,iBAAiB;iBACxB;aACF,CAAC,CAAC;YACH,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAE3C,MAAM,YAAY,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;gBACpC,MAAM,EAAE,MAAM;gBACd,GAAG,EAAE,cAAc;gBACnB,OAAO,EAAE;oBACP,MAAM;oBACN,MAAM,EAAE,qBAAqB;oBAC7B,IAAI,EAAE,iBAAiB;iBACxB;aACF,CAAC,CAAC;YACH,MAAM,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC5C,CAAC;gBAAS,CAAC;YACT,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;QACpB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,iBAAiB,CAAC,cAAc,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,aAAa,EAAE,CAAC,CAAC;QACtF,MAAM,GAAG,GAAG,MAAM,YAAY,EAAE,CAAC;QACjC,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;QACzD,MAAM,KAAK,GAAG,2BAA2B,CAAC,OAAO,CAAC,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,GAAG,KAAK,CAAC;QAC5C,OAAO,CAAC,GAAG,CAAC,oBAAoB,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;QAExE,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;gBAChC,MAAM,EAAE,KAAK;gBACb,GAAG,EAAE,cAAc;gBACnB,OAAO,EAAE;oBACP,CAAC,yBAAyB,CAAC,EAAE,KAAK;iBACnC;aACF,CAAC,CAAC;YACH,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACxC,CAAC;gBAAS,CAAC;YACT,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;gBAClC,OAAO,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;YAC1C,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,oBAAoB,GAAG,eAAe,CAAC;YACrD,CAAC;YACD,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;QACpB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sFAAsF,EAAE,KAAK,IAAI,EAAE;QACpG,MAAM,iBAAiB,CAAC,cAAc,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,aAAa,EAAE,CAAC,CAAC;QACtF,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,GAAG,yBAAyB,CAAC;QAChE,MAAM,GAAG,GAAG,MAAM,YAAY,EAAE,CAAC;QAEjC,IAAI,CAAC;YACH,MAAM,eAAe,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;gBACvC,MAAM,EAAE,KAAK;gBACb,GAAG,EAAE,cAAc;aACpB,CAAC,CAAC;YACH,MAAM,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7C,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,CAAC,CAAC;YAE/E,MAAM,aAAa,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;gBACrC,MAAM,EAAE,KAAK;gBACb,GAAG,EAAE,cAAc;gBACnB,OAAO,EAAE;oBACP,CAAC,yBAAyB,CAAC,EAAE,sBAAsB;iBACpD;aACF,CAAC,CAAC;YACH,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC3C,MAAM,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,oCAAoC,EAAE,CAAC,CAAC;QAC7F,CAAC;gBAAS,CAAC;YACT,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;QACpB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4EAA4E,EAAE,KAAK,IAAI,EAAE;QAC1F,MAAM,iBAAiB,CAAC,cAAc,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,aAAa,EAAE,CAAC,CAAC;QACtF,MAAM,YAAY,GAAG,MAAM,iBAAiB,CAAC,wBAAwB,CAAC,aAAa,CAAC,CAAC;QACrF,MAAM,GAAG,GAAG,MAAM,YAAY,EAAE,CAAC;QAEjC,IAAI,CAAC;YACH,MAAM,eAAe,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;gBACvC,MAAM,EAAE,KAAK;gBACb,GAAG,EAAE,2CAA2C,YAAY,WAAW;aACxE,CAAC,CAAC;YACH,MAAM,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAE7C,MAAM,yBAAyB,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;gBACjD,MAAM,EAAE,KAAK;gBACb,GAAG,EAAE,2CAA2C,YAAY,WAAW;aACxE,CAAC,CAAC;YACH,MAAM,CAAC,yBAAyB,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAEvD,MAAM,WAAW,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;gBACnC,MAAM,EAAE,KAAK;gBACb,GAAG,EAAE,cAAc;gBACnB,OAAO,EAAE;oBACP,iBAAiB,EAAE,YAAY;iBAChC;aACF,CAAC,CAAC;YACH,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3C,CAAC;gBAAS,CAAC;YACT,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;QACpB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,iBAAiB,CAAC,cAAc,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,aAAa,EAAE,CAAC,CAAC;QACtF,MAAM,GAAG,GAAG,MAAM,YAAY,EAAE,CAAC;QAEjC,IAAI,CAAC;YACH,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,iBAAiB,CAAC,MAAM,CAAC,yBAAyB,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC/E,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;oBAChC,MAAM,EAAE,MAAM;oBACd,GAAG,EAAE,wBAAwB;oBAC7B,OAAO,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE;iBACpC,CAAC,CAAC;gBACH,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACxC,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;gBAC/B,MAAM,EAAE,MAAM;gBACd,GAAG,EAAE,wBAAwB;gBAC7B,OAAO,EAAE,EAAE,QAAQ,EAAE,aAAa,EAAE;aACrC,CAAC,CAAC;YAEH,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACrC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,0BAA0B,EAAE,CAAC,CAAC;YAC3E,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QACxD,CAAC;gBAAS,CAAC;YACT,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;QACpB,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/middleware/access-auth.d.ts

@@ -0,0 +1,3 @@
+import type { FastifyReply, FastifyRequest } from 'fastify';
+export declare function accessAuthHook(request: FastifyRequest, reply: FastifyReply): Promise<void>;
+//# sourceMappingURL=access-auth.d.ts.map