crewly 1.5.17 → 1.5.19

package/dist/backend/backend/src/controllers/user/user-validation.js

@@ -0,0 +1,165 @@
+/**
+ * User Input Validation
+ *
+ * Validates request bodies for the /api/users endpoint.
+ * Provides field-level validation with structured error responses.
+ *
+ * @module controllers/user/user-validation
+ */
+// =============================================================================
+// Constants
+// =============================================================================
+/** Minimum password length */
+const MIN_PASSWORD_LENGTH = 8;
+/** Maximum username length */
+const MAX_USERNAME_LENGTH = 32;
+/** Minimum username length */
+const MIN_USERNAME_LENGTH = 3;
+/** Username pattern: alphanumeric, underscores, hyphens */
+const USERNAME_PATTERN = /^[a-zA-Z0-9_-]+$/;
+/** Email validation pattern (RFC 5322 simplified) */
+const EMAIL_PATTERN = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
+// =============================================================================
+// Field Validators
+// =============================================================================
+/**
+ * Validate the username field.
+ *
+ * Rules:
+ * - Required, non-empty
+ * - Must be a string
+ * - Alphanumeric, underscores, hyphens only
+ * - Length between 3 and 32 characters
+ * - Trimmed of whitespace
+ *
+ * @param value - Raw username value
+ * @returns Validation result with trimmed username or error
+ */
+export function validateUsername(value) {
+    if (value === null || value === undefined) {
+        return { valid: false, error: { error: 'username is required', field: 'username' } };
+    }
+    if (typeof value !== 'string') {
+        return { valid: false, error: { error: 'username must be a string', field: 'username' } };
+    }
+    const trimmed = value.trim();
+    if (trimmed.length === 0) {
+        return { valid: false, error: { error: 'username is required', field: 'username' } };
+    }
+    if (trimmed.length < MIN_USERNAME_LENGTH) {
+        return {
+            valid: false,
+            error: { error: `username must be at least ${MIN_USERNAME_LENGTH} characters`, field: 'username' },
+        };
+    }
+    if (trimmed.length > MAX_USERNAME_LENGTH) {
+        return {
+            valid: false,
+            error: { error: `username must be at most ${MAX_USERNAME_LENGTH} characters`, field: 'username' },
+        };
+    }
+    if (!USERNAME_PATTERN.test(trimmed)) {
+        return {
+            valid: false,
+            error: { error: 'username must contain only letters, numbers, underscores, and hyphens', field: 'username' },
+        };
+    }
+    return { valid: true, data: trimmed };
+}
+/**
+ * Validate the email field.
+ *
+ * Rules:
+ * - Required, non-empty
+ * - Must be a string
+ * - Must contain @ and match email format
+ * - Trimmed and lowercased
+ *
+ * @param value - Raw email value
+ * @returns Validation result with normalized email or error
+ */
+export function validateEmail(value) {
+    if (value === null || value === undefined) {
+        return { valid: false, error: { error: 'email is required', field: 'email' } };
+    }
+    if (typeof value !== 'string') {
+        return { valid: false, error: { error: 'email must be a string', field: 'email' } };
+    }
+    const trimmed = value.trim().toLowerCase();
+    if (trimmed.length === 0) {
+        return { valid: false, error: { error: 'email is required', field: 'email' } };
+    }
+    if (!trimmed.includes('@')) {
+        return { valid: false, error: { error: 'email must contain @', field: 'email' } };
+    }
+    if (!EMAIL_PATTERN.test(trimmed)) {
+        return { valid: false, error: { error: 'email format is invalid', field: 'email' } };
+    }
+    return { valid: true, data: trimmed };
+}
+/**
+ * Validate the password field.
+ *
+ * Rules:
+ * - Required, non-empty
+ * - Must be a string
+ * - Minimum 8 characters
+ * - Not trimmed (spaces in passwords are intentional)
+ *
+ * @param value - Raw password value
+ * @returns Validation result with password or error
+ */
+export function validatePassword(value) {
+    if (value === null || value === undefined) {
+        return { valid: false, error: { error: 'password is required', field: 'password' } };
+    }
+    if (typeof value !== 'string') {
+        return { valid: false, error: { error: 'password must be a string', field: 'password' } };
+    }
+    if (value.length === 0) {
+        return { valid: false, error: { error: 'password is required', field: 'password' } };
+    }
+    if (value.length < MIN_PASSWORD_LENGTH) {
+        return {
+            valid: false,
+            error: { error: `password must be at least ${MIN_PASSWORD_LENGTH} characters`, field: 'password' },
+        };
+    }
+    return { valid: true, data: value };
+}
+// =============================================================================
+// Composite Validator
+// =============================================================================
+/**
+ * Validate a complete user creation request body.
+ *
+ * Validates all three required fields (username, email, password) and
+ * returns the first error encountered, or cleaned data on success.
+ *
+ * @param body - Raw request body
+ * @returns Validation result with all validated fields or first error
+ */
+export function validateCreateUserInput(body) {
+    if (!body || typeof body !== 'object') {
+        return { valid: false, error: { error: 'Request body is required' } };
+    }
+    const obj = body;
+    const usernameResult = validateUsername(obj.username);
+    if (!usernameResult.valid)
+        return usernameResult;
+    const emailResult = validateEmail(obj.email);
+    if (!emailResult.valid)
+        return emailResult;
+    const passwordResult = validatePassword(obj.password);
+    if (!passwordResult.valid)
+        return passwordResult;
+    return {
+        valid: true,
+        data: {
+            username: usernameResult.data,
+            email: emailResult.data,
+            password: passwordResult.data,
+        },
+    };
+}
+//# sourceMappingURL=user-validation.js.map

package/dist/backend/backend/src/controllers/user/user-validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-validation.js","sourceRoot":"","sources":["../../../../../../backend/src/controllers/user/user-validation.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,gFAAgF;AAChF,YAAY;AACZ,gFAAgF;AAEhF,8BAA8B;AAC9B,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAE9B,8BAA8B;AAC9B,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAE/B,8BAA8B;AAC9B,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAE9B,2DAA2D;AAC3D,MAAM,gBAAgB,GAAG,kBAAkB,CAAC;AAE5C,qDAAqD;AACrD,MAAM,aAAa,GAAG,4BAA4B,CAAC;AAgCnD,gFAAgF;AAChF,mBAAmB;AACnB,gFAAgF;AAEhF;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAC1C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,sBAAsB,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,CAAC;IACvF,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,2BAA2B,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,CAAC;IAC5F,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAE7B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,sBAAsB,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,CAAC;IACvF,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,GAAG,mBAAmB,EAAE,CAAC;QACzC,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,EAAE,KAAK,EAAE,6BAA6B,mBAAmB,aAAa,EAAE,KAAK,EAAE,UAAU,EAAE;SACnG,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,GAAG,mBAAmB,EAAE,CAAC;QACzC,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,EAAE,KAAK,EAAE,4BAA4B,mBAAmB,aAAa,EAAE,KAAK,EAAE,UAAU,EAAE;SAClG,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACpC,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,EAAE,KAAK,EAAE,uEAAuE,EAAE,KAAK,EAAE,UAAU,EAAE;SAC7G,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AACxC,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAC1C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC;IACjF,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,wBAAwB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC;IACtF,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAE3C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC;IACjF,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,sBAAsB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC;IACpF,CAAC;IAED,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACjC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,yBAAyB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC;IACvF,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AACxC,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAC1C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,sBAAsB,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,CAAC;IACvF,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,2BAA2B,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,CAAC;IAC5F,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,sBAAsB,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,CAAC;IACvF,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,GAAG,mBAAmB,EAAE,CAAC;QACvC,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,EAAE,KAAK,EAAE,6BAA6B,mBAAmB,aAAa,EAAE,KAAK,EAAE,UAAU,EAAE;SACnG,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AACtC,CAAC;AAED,gFAAgF;AAChF,sBAAsB;AACtB,gFAAgF;AAEhF;;;;;;;;GAQG;AACH,MAAM,UAAU,uBAAuB,CAAC,IAAa;IACnD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,0BAA0B,EAAE,EAAE,CAAC;IACxE,CAAC;IAED,MAAM,GAAG,GAAG,IAA+B,CAAC;IAE5C,MAAM,cAAc,GAAG,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACtD,IAAI,CAAC,cAAc,CAAC,KAAK;QAAE,OAAO,cAAc,CAAC;IAEjD,MAAM,WAAW,GAAG,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC7C,IAAI,CAAC,WAAW,CAAC,KAAK;QAAE,OAAO,WAAW,CAAC;IAE3C,MAAM,cAAc,GAAG,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACtD,IAAI,CAAC,cAAc,CAAC,KAAK;QAAE,OAAO,cAAc,CAAC;IAEjD,OAAO;QACL,KAAK,EAAE,IAAI;QACX,IAAI,EAAE;YACJ,QAAQ,EAAE,cAAc,CAAC,IAAI;YAC7B,KAAK,EAAE,WAAW,CAAC,IAAI;YACvB,QAAQ,EAAE,cAAc,CAAC,IAAI;SAC9B;KACF,CAAC;AACJ,CAAC"}

package/dist/backend/backend/src/controllers/user/user.routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"user.routes.d.ts","sourceRoot":"","sources":["../../../../../../backend/src/controllers/user/user.routes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAmC,MAAM,SAAS,CAAC;AAGlE;;;;;;GAMG;AACH,wBAAgB,gBAAgB,IAAI,MAAM,CA0CzC"}
+{"version":3,"file":"user.routes.d.ts","sourceRoot":"","sources":["../../../../../../backend/src/controllers/user/user.routes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAmC,MAAM,SAAS,CAAC;AAIlE;;;;;;GAMG;AACH,wBAAgB,gBAAgB,IAAI,MAAM,CA8CzC"}

package/dist/backend/backend/src/controllers/user/user.routes.js

@@ -1,5 +1,6 @@
 import { Router } from 'express';
 import { UserIdentityService } from '../../services/user/user-identity.service.js';
+import { validateCreateUserInput } from './user-validation.js';
 /**
  * Create the user API router.
  *
@@ -34,12 +35,14 @@ export function createUserRouter() {
     });
     router.post('/', async (req, res, next) => {
         try {
-            const email = String(req.body?.email || '').trim();
-            const slackUserId = req.body?.slackUserId ? String(req.body.slackUserId) : undefined;
-            if (!email || !/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(email)) {
-                res.status(400).json({ success: false, error: 'A valid email is required' });
+            // Run field-level validation (username, email, password)
+            const validation = validateCreateUserInput(req.body);
+            if (!validation.valid) {
+                res.status(400).json({ success: false, ...validation.error });
                 return;
             }
+            const { email } = validation.data;
+            const slackUserId = req.body?.slackUserId ? String(req.body.slackUserId) : undefined;
             const user = await users.createOrUpdateUser({ email, slackUserId });
             res.status(201).json({ success: true, data: user });
         }

package/dist/backend/backend/src/controllers/user/user.routes.js.map

@@ -1 +1 @@
-{"version":3,"file":"user.routes.js","sourceRoot":"","sources":["../../../../../../backend/src/controllers/user/user.routes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAmC,MAAM,SAAS,CAAC;AAClE,OAAO,EAAE,mBAAmB,EAAE,MAAM,8CAA8C,CAAC;AAEnF;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB;IAC9B,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;IACxB,MAAM,KAAK,GAAG,mBAAmB,CAAC,WAAW,EAAE,CAAC;IAEhD,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,IAAa,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;QACzE,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE,CAAC;YACrC,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,KAAK,CAAC,CAAC;QACd,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;QAC3E,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACpD,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;gBAClE,OAAO;YACT,CAAC;YACD,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,KAAK,CAAC,CAAC;QACd,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;QACzE,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YACnD,MAAM,WAAW,GAAG,GAAG,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACrF,IAAI,CAAC,KAAK,IAAI,CAAC,4BAA4B,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACxD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC,CAAC;gBAC7E,OAAO;YACT,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,kBAAkB,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;YACpE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,KAAK,CAAC,CAAC;QACd,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"user.routes.js","sourceRoot":"","sources":["../../../../../../backend/src/controllers/user/user.routes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAmC,MAAM,SAAS,CAAC;AAClE,OAAO,EAAE,mBAAmB,EAAE,MAAM,8CAA8C,CAAC;AACnF,OAAO,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAE/D;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB;IAC9B,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;IACxB,MAAM,KAAK,GAAG,mBAAmB,CAAC,WAAW,EAAE,CAAC;IAEhD,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,IAAa,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;QACzE,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE,CAAC;YACrC,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,KAAK,CAAC,CAAC;QACd,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;QAC3E,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACpD,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;gBAClE,OAAO;YACT,CAAC;YACD,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,KAAK,CAAC,CAAC;QACd,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;QACzE,IAAI,CAAC;YACH,yDAAyD;YACzD,MAAM,UAAU,GAAG,uBAAuB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACrD,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;gBACtB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;gBAC9D,OAAO;YACT,CAAC;YAED,MAAM,EAAE,KAAK,EAAE,GAAG,UAAU,CAAC,IAAI,CAAC;YAClC,MAAM,WAAW,GAAG,GAAG,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAErF,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,kBAAkB,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;YACpE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,KAAK,CAAC,CAAC;QACd,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/backend/backend/src/controllers/v2-workspace/workspace.controller.d.ts

@@ -0,0 +1,72 @@
+/**
+ * V2 Shared Workspace Controller
+ *
+ * CRUD + CAS endpoints for versioned JSON workspaces.
+ *
+ * Endpoints:
+ * - GET    /api/v2/workspaces          — list all workspaces
+ * - GET    /api/v2/workspaces/:id      — read workspace (data + version)
+ * - POST   /api/v2/workspaces          — create workspace
+ * - PUT    /api/v2/workspaces/:id      — write data (CAS, 409 on conflict)
+ * - PUT    /api/v2/workspaces/:id/structured — structured write (path + value)
+ * - DELETE /api/v2/workspaces/:id      — delete workspace
+ *
+ * @module controllers/v2-workspace/workspace.controller
+ */
+import type { Request, Response, NextFunction } from 'express';
+import type { WorkspaceService } from '../../services/workspace/workspace.service.js';
+/**
+ * Set the WorkspaceService instance.
+ * Called during server initialization.
+ *
+ * @param service - The WorkspaceService instance
+ */
+export declare function setWorkspaceService(service: WorkspaceService): void;
+/**
+ * GET /api/v2/workspaces
+ *
+ * Lists all workspaces with full data.
+ */
+export declare function listWorkspaces(_req: Request, res: Response, next: NextFunction): Promise<void>;
+/**
+ * GET /api/v2/workspaces/:id
+ *
+ * Reads a single workspace. Returns the full workspace including data and version.
+ */
+export declare function readWorkspace(req: Request, res: Response, next: NextFunction): Promise<void>;
+/**
+ * POST /api/v2/workspaces
+ *
+ * Creates a new workspace.
+ * Body: CreateWorkspaceInput (name, ownerType, ownerId required)
+ */
+export declare function createWorkspaceHandler(req: Request, res: Response, next: NextFunction): Promise<void>;
+/**
+ * PUT /api/v2/workspaces/:id
+ *
+ * Writes data to a workspace with CAS validation.
+ * Body: { expectedVersion: number, data: {}, writerId: string }
+ *
+ * Returns 409 Conflict if expectedVersion doesn't match current version.
+ * Returns 403 Forbidden if writerId is not authorized.
+ */
+export declare function writeWorkspace(req: Request, res: Response, next: NextFunction): Promise<void>;
+/**
+ * PUT /api/v2/workspaces/:id/structured
+ *
+ * Structured write — sets a value at a specific dot-notation path.
+ * Body: { expectedVersion: number, path: string, value: any, writerId: string }
+ *
+ * Workspace must be in 'structured' access mode.
+ * Returns 409 Conflict if expectedVersion doesn't match.
+ * Returns 403 Forbidden if writerId is not authorized.
+ * Returns 400 if workspace is not in structured mode.
+ */
+export declare function writeStructuredWorkspace(req: Request, res: Response, next: NextFunction): Promise<void>;
+/**
+ * DELETE /api/v2/workspaces/:id
+ *
+ * Deletes a workspace.
+ */
+export declare function deleteWorkspace(req: Request, res: Response, next: NextFunction): Promise<void>;
+//# sourceMappingURL=workspace.controller.d.ts.map

package/dist/backend/backend/src/controllers/v2-workspace/workspace.controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace.controller.d.ts","sourceRoot":"","sources":["../../../../../../backend/src/controllers/v2-workspace/workspace.controller.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC/D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,+CAA+C,CAAC;AAgBtF;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,gBAAgB,GAAG,IAAI,CAEnE;AAwDD;;;;GAIG;AACH,wBAAsB,cAAc,CAClC,IAAI,EAAE,OAAO,EACb,GAAG,EAAE,QAAQ,EACb,IAAI,EAAE,YAAY,GACjB,OAAO,CAAC,IAAI,CAAC,CAYf;AAED;;;;GAIG;AACH,wBAAsB,aAAa,CACjC,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,EACb,IAAI,EAAE,YAAY,GACjB,OAAO,CAAC,IAAI,CAAC,CAmBf;AAED;;;;;GAKG;AACH,wBAAsB,sBAAsB,CAC1C,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,EACb,IAAI,EAAE,YAAY,GACjB,OAAO,CAAC,IAAI,CAAC,CAmBf;AAED;;;;;;;;GAQG;AACH,wBAAsB,cAAc,CAClC,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,EACb,IAAI,EAAE,YAAY,GACjB,OAAO,CAAC,IAAI,CAAC,CAsBf;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,wBAAwB,CAC5C,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,EACb,IAAI,EAAE,YAAY,GACjB,OAAO,CAAC,IAAI,CAAC,CA8Bf;AAED;;;;GAIG;AACH,wBAAsB,eAAe,CACnC,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,EACb,IAAI,EAAE,YAAY,GACjB,OAAO,CAAC,IAAI,CAAC,CAmBf"}

package/dist/backend/backend/src/controllers/v2-workspace/workspace.controller.js

@@ -0,0 +1,236 @@
+/**
+ * V2 Shared Workspace Controller
+ *
+ * CRUD + CAS endpoints for versioned JSON workspaces.
+ *
+ * Endpoints:
+ * - GET    /api/v2/workspaces          — list all workspaces
+ * - GET    /api/v2/workspaces/:id      — read workspace (data + version)
+ * - POST   /api/v2/workspaces          — create workspace
+ * - PUT    /api/v2/workspaces/:id      — write data (CAS, 409 on conflict)
+ * - PUT    /api/v2/workspaces/:id/structured — structured write (path + value)
+ * - DELETE /api/v2/workspaces/:id      — delete workspace
+ *
+ * @module controllers/v2-workspace/workspace.controller
+ */
+import { WorkspaceConflictError, WorkspaceAccessError, validateCreateWorkspaceInput, validateWriteWorkspaceInput, } from '../../types/v2/workspace.types.js';
+/** Module-level reference to the workspace service */
+let workspaceService = null;
+/**
+ * Set the WorkspaceService instance.
+ * Called during server initialization.
+ *
+ * @param service - The WorkspaceService instance
+ */
+export function setWorkspaceService(service) {
+    workspaceService = service;
+}
+// ---------------------------------------------------------------------------
+// Error Mapping Helper
+// ---------------------------------------------------------------------------
+/**
+ * Maps domain errors to HTTP responses.
+ * Returns true if the error was handled, false otherwise.
+ *
+ * @param error - The caught error
+ * @param res - Express response
+ * @returns True if the error was mapped to a response
+ */
+function handleDomainError(error, res) {
+    if (error instanceof WorkspaceConflictError) {
+        res.status(409).json({
+            success: false,
+            error: error.message,
+            expectedVersion: error.expectedVersion,
+            actualVersion: error.actualVersion,
+        });
+        return true;
+    }
+    if (error instanceof WorkspaceAccessError) {
+        res.status(403).json({
+            success: false,
+            error: error.message,
+        });
+        return true;
+    }
+    if (error instanceof Error && error.message.includes('not found')) {
+        res.status(404).json({
+            success: false,
+            error: error.message,
+        });
+        return true;
+    }
+    if (error instanceof Error && error.message.includes('not in structured mode')) {
+        res.status(400).json({
+            success: false,
+            error: error.message,
+        });
+        return true;
+    }
+    return false;
+}
+// ---------------------------------------------------------------------------
+// Handlers
+// ---------------------------------------------------------------------------
+/**
+ * GET /api/v2/workspaces
+ *
+ * Lists all workspaces with full data.
+ */
+export async function listWorkspaces(_req, res, next) {
+    try {
+        if (!workspaceService) {
+            res.status(503).json({ success: false, error: 'Workspace service not initialized' });
+            return;
+        }
+        const workspaces = await workspaceService.listAll();
+        res.json({ success: true, data: workspaces });
+    }
+    catch (error) {
+        next(error);
+    }
+}
+/**
+ * GET /api/v2/workspaces/:id
+ *
+ * Reads a single workspace. Returns the full workspace including data and version.
+ */
+export async function readWorkspace(req, res, next) {
+    try {
+        if (!workspaceService) {
+            res.status(503).json({ success: false, error: 'Workspace service not initialized' });
+            return;
+        }
+        const { id } = req.params;
+        const workspace = await workspaceService.read(id);
+        if (!workspace) {
+            res.status(404).json({ success: false, error: `Workspace '${id}' not found` });
+            return;
+        }
+        res.json({ success: true, data: workspace });
+    }
+    catch (error) {
+        next(error);
+    }
+}
+/**
+ * POST /api/v2/workspaces
+ *
+ * Creates a new workspace.
+ * Body: CreateWorkspaceInput (name, ownerType, ownerId required)
+ */
+export async function createWorkspaceHandler(req, res, next) {
+    try {
+        if (!workspaceService) {
+            res.status(503).json({ success: false, error: 'Workspace service not initialized' });
+            return;
+        }
+        const input = req.body;
+        const validationErrors = validateCreateWorkspaceInput(input);
+        if (validationErrors.length > 0) {
+            res.status(400).json({ success: false, errors: validationErrors });
+            return;
+        }
+        const workspace = await workspaceService.create(input);
+        res.status(201).json({ success: true, data: workspace });
+    }
+    catch (error) {
+        next(error);
+    }
+}
+/**
+ * PUT /api/v2/workspaces/:id
+ *
+ * Writes data to a workspace with CAS validation.
+ * Body: { expectedVersion: number, data: {}, writerId: string }
+ *
+ * Returns 409 Conflict if expectedVersion doesn't match current version.
+ * Returns 403 Forbidden if writerId is not authorized.
+ */
+export async function writeWorkspace(req, res, next) {
+    try {
+        if (!workspaceService) {
+            res.status(503).json({ success: false, error: 'Workspace service not initialized' });
+            return;
+        }
+        const { id } = req.params;
+        const input = req.body;
+        const validationErrors = validateWriteWorkspaceInput(input);
+        if (validationErrors.length > 0) {
+            res.status(400).json({ success: false, errors: validationErrors });
+            return;
+        }
+        const updated = await workspaceService.write(id, input);
+        res.json({ success: true, data: updated });
+    }
+    catch (error) {
+        if (handleDomainError(error, res))
+            return;
+        next(error);
+    }
+}
+/**
+ * PUT /api/v2/workspaces/:id/structured
+ *
+ * Structured write — sets a value at a specific dot-notation path.
+ * Body: { expectedVersion: number, path: string, value: any, writerId: string }
+ *
+ * Workspace must be in 'structured' access mode.
+ * Returns 409 Conflict if expectedVersion doesn't match.
+ * Returns 403 Forbidden if writerId is not authorized.
+ * Returns 400 if workspace is not in structured mode.
+ */
+export async function writeStructuredWorkspace(req, res, next) {
+    try {
+        if (!workspaceService) {
+            res.status(503).json({ success: false, error: 'Workspace service not initialized' });
+            return;
+        }
+        const { id } = req.params;
+        const input = req.body;
+        // Validate structured write input
+        if (typeof input.expectedVersion !== 'number' || input.expectedVersion < 1) {
+            res.status(400).json({ success: false, error: 'expectedVersion must be a positive integer' });
+            return;
+        }
+        if (!input.path || typeof input.path !== 'string') {
+            res.status(400).json({ success: false, error: 'path is required and must be a non-empty string' });
+            return;
+        }
+        if (!input.writerId || typeof input.writerId !== 'string') {
+            res.status(400).json({ success: false, error: 'writerId is required and must be a non-empty string' });
+            return;
+        }
+        const updated = await workspaceService.writeStructured(id, input);
+        res.json({ success: true, data: updated });
+    }
+    catch (error) {
+        if (handleDomainError(error, res))
+            return;
+        next(error);
+    }
+}
+/**
+ * DELETE /api/v2/workspaces/:id
+ *
+ * Deletes a workspace.
+ */
+export async function deleteWorkspace(req, res, next) {
+    try {
+        if (!workspaceService) {
+            res.status(503).json({ success: false, error: 'Workspace service not initialized' });
+            return;
+        }
+        const { id } = req.params;
+        const deleted = await workspaceService.delete(id);
+        if (!deleted) {
+            res.status(404).json({ success: false, error: `Workspace '${id}' not found` });
+            return;
+        }
+        res.json({ success: true, message: `Workspace '${id}' deleted` });
+    }
+    catch (error) {
+        next(error);
+    }
+}
+//# sourceMappingURL=workspace.controller.js.map

package/dist/backend/backend/src/controllers/v2-workspace/workspace.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace.controller.js","sourceRoot":"","sources":["../../../../../../backend/src/controllers/v2-workspace/workspace.controller.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAIH,OAAO,EACL,sBAAsB,EACtB,oBAAoB,EACpB,4BAA4B,EAC5B,2BAA2B,GAC5B,MAAM,mCAAmC,CAAC;AAO3C,sDAAsD;AACtD,IAAI,gBAAgB,GAA4B,IAAI,CAAC;AAErD;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAyB;IAC3D,gBAAgB,GAAG,OAAO,CAAC;AAC7B,CAAC;AAED,8EAA8E;AAC9E,uBAAuB;AACvB,8EAA8E;AAE9E;;;;;;;GAOG;AACH,SAAS,iBAAiB,CAAC,KAAc,EAAE,GAAa;IACtD,IAAI,KAAK,YAAY,sBAAsB,EAAE,CAAC;QAC5C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACnB,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,KAAK,CAAC,OAAO;YACpB,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,aAAa,EAAE,KAAK,CAAC,aAAa;SACnC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,KAAK,YAAY,oBAAoB,EAAE,CAAC;QAC1C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACnB,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,KAAK,CAAC,OAAO;SACrB,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QAClE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACnB,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,KAAK,CAAC,OAAO;SACrB,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,wBAAwB,CAAC,EAAE,CAAC;QAC/E,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACnB,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,KAAK,CAAC,OAAO;SACrB,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,8EAA8E;AAC9E,WAAW;AACX,8EAA8E;AAE9E;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,IAAa,EACb,GAAa,EACb,IAAkB;IAElB,IAAI,CAAC;QACH,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACtB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC,CAAC;YACrF,OAAO;QACT,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE,CAAC;QACpD,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;IAChD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,KAAK,CAAC,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,GAAY,EACZ,GAAa,EACb,IAAkB;IAElB,IAAI,CAAC;QACH,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACtB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC,CAAC;YACrF,OAAO;QACT,CAAC;QAED,MAAM,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;QAC1B,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAElD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,CAAC,CAAC;YAC/E,OAAO;QACT,CAAC;QAED,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;IAC/C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,KAAK,CAAC,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,GAAY,EACZ,GAAa,EACb,IAAkB;IAElB,IAAI,CAAC;QACH,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACtB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC,CAAC;YACrF,OAAO;QACT,CAAC;QAED,MAAM,KAAK,GAAG,GAAG,CAAC,IAA4B,CAAC;QAC/C,MAAM,gBAAgB,GAAG,4BAA4B,CAAC,KAAK,CAAC,CAAC;QAC7D,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC;YACnE,OAAO;QACT,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;IAC3D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,KAAK,CAAC,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,GAAY,EACZ,GAAa,EACb,IAAkB;IAElB,IAAI,CAAC;QACH,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACtB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC,CAAC;YACrF,OAAO;QACT,CAAC;QAED,MAAM,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;QAC1B,MAAM,KAAK,GAAG,GAAG,CAAC,IAA2B,CAAC;QAE9C,MAAM,gBAAgB,GAAG,2BAA2B,CAAC,KAAK,CAAC,CAAC;QAC5D,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC;YACnE,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QACxD,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IAC7C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC;YAAE,OAAO;QAC1C,IAAI,CAAC,KAAK,CAAC,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,GAAY,EACZ,GAAa,EACb,IAAkB;IAElB,IAAI,CAAC;QACH,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACtB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC,CAAC;YACrF,OAAO;QACT,CAAC;QAED,MAAM,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;QAC1B,MAAM,KAAK,GAAG,GAAG,CAAC,IAA4B,CAAC;QAE/C,kCAAkC;QAClC,IAAI,OAAO,KAAK,CAAC,eAAe,KAAK,QAAQ,IAAI,KAAK,CAAC,eAAe,GAAG,CAAC,EAAE,CAAC;YAC3E,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,4CAA4C,EAAE,CAAC,CAAC;YAC9F,OAAO;QACT,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAClD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,iDAAiD,EAAE,CAAC,CAAC;YACnG,OAAO;QACT,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC1D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,qDAAqD,EAAE,CAAC,CAAC;YACvG,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,eAAe,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAClE,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IAC7C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC;YAAE,OAAO;QAC1C,IAAI,CAAC,KAAK,CAAC,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,GAAY,EACZ,GAAa,EACb,IAAkB;IAElB,IAAI,CAAC;QACH,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACtB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC,CAAC;YACrF,OAAO;QACT,CAAC;QAED,MAAM,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;QAC1B,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAElD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,CAAC,CAAC;YAC/E,OAAO;QACT,CAAC;QAED,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;IACpE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,KAAK,CAAC,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/backend/backend/src/controllers/v2-workspace/workspace.routes.d.ts

@@ -0,0 +1,15 @@
+/**
+ * V2 Shared Workspace Routes
+ *
+ * Router for versioned JSON workspace CRUD with CAS.
+ *
+ * @module controllers/v2-workspace/workspace.routes
+ */
+import { Router } from 'express';
+/**
+ * Create the V2 workspace router.
+ *
+ * @returns Express router for /api/v2/workspaces routes
+ */
+export declare function createV2WorkspaceRouter(): Router;
+//# sourceMappingURL=workspace.routes.d.ts.map

package/dist/backend/backend/src/controllers/v2-workspace/workspace.routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace.routes.d.ts","sourceRoot":"","sources":["../../../../../../backend/src/controllers/v2-workspace/workspace.routes.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAUjC;;;;GAIG;AACH,wBAAgB,uBAAuB,IAAI,MAAM,CAsBhD"}

package/dist/backend/backend/src/controllers/v2-workspace/workspace.routes.js

@@ -0,0 +1,31 @@
+/**
+ * V2 Shared Workspace Routes
+ *
+ * Router for versioned JSON workspace CRUD with CAS.
+ *
+ * @module controllers/v2-workspace/workspace.routes
+ */
+import { Router } from 'express';
+import { listWorkspaces, readWorkspace, createWorkspaceHandler, writeWorkspace, writeStructuredWorkspace, deleteWorkspace, } from './workspace.controller.js';
+/**
+ * Create the V2 workspace router.
+ *
+ * @returns Express router for /api/v2/workspaces routes
+ */
+export function createV2WorkspaceRouter() {
+    const router = Router();
+    // List all workspaces
+    router.get('/', listWorkspaces);
+    // Read a single workspace
+    router.get('/:id', readWorkspace);
+    // Create a new workspace
+    router.post('/', createWorkspaceHandler);
+    // Write data to workspace (CAS — 409 on conflict)
+    router.put('/:id', writeWorkspace);
+    // Structured write to specific path (CAS — 409 on conflict)
+    router.put('/:id/structured', writeStructuredWorkspace);
+    // Delete workspace
+    router.delete('/:id', deleteWorkspace);
+    return router;
+}
+//# sourceMappingURL=workspace.routes.js.map

package/dist/backend/backend/src/controllers/v2-workspace/workspace.routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace.routes.js","sourceRoot":"","sources":["../../../../../../backend/src/controllers/v2-workspace/workspace.routes.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EACL,cAAc,EACd,aAAa,EACb,sBAAsB,EACtB,cAAc,EACd,wBAAwB,EACxB,eAAe,GAChB,MAAM,2BAA2B,CAAC;AAEnC;;;;GAIG;AACH,MAAM,UAAU,uBAAuB;IACrC,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;IAExB,sBAAsB;IACtB,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IAEhC,0BAA0B;IAC1B,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAElC,yBAAyB;IACzB,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAC;IAEzC,kDAAkD;IAClD,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAEnC,4DAA4D;IAC5D,MAAM,CAAC,GAAG,CAAC,iBAAiB,EAAE,wBAAwB,CAAC,CAAC;IAExD,mBAAmB;IACnB,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IAEvC,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/backend/backend/src/index.d.ts

@@ -22,6 +22,7 @@ export declare class CrewlyServer {
     private eventBusService;
     private notifyReconciliationService;
     private systemResourceAlertService;
+    private reconcilerService;
     private isShuttingDown;
     private healthMonitoringInterval;
     constructor(config?: Partial<StartupConfig>);
@@ -75,6 +76,23 @@ export declare class CrewlyServer {
     private sigintCount;
     private registerSignalHandlers;
     private startHealthMonitoring;
+    /**
+     * Removes done/cancelled Requests older than 24h from disk,
+     * and purges done/cancelled/failed WorkItems from the task pool.
+     * Memory, knowledge, and learnings are never purged.
+     */
+    private purgeCompletedData;
+    /**
+     * Closes open Requests that were created within the last 10 minutes.
+     * Used to handle direct orchestrator responses that don't go through WorkItems.
+     * Also rolls up orchestrator token usage and sets ownerAgent for the Request.
+     *
+     * Token source varies by runtime:
+     *   - claude-code: reads session JSONL (TUI status bar not capturable from PTY)
+     *   - gemini-cli / codex-cli: reads from TokenUsageService (fed by PTY parser)
+     *   - crewly-agent: reads from TokenUsageService (fed by SDK)
+     */
+    private autoCloseOpenRequests;
     private logMemoryUsage;
     shutdown(): Promise<void>;
     getConfig(): StartupConfig;

package/dist/backend/backend/src/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../backend/src/index.ts"],"names":[],"mappings":";AAyCA,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAkGjD,qBAAa,YAAY;IACxB,OAAO,CAAC,GAAG,CAAsB;IACjC,OAAO,CAAC,UAAU,CAAkC;IACpD,OAAO,CAAC,EAAE,CAAiB;IAC3B,OAAO,CAAC,MAAM,CAAgB;IAC9B,OAAO,CAAC,MAAM,CAAqE;IAEnF,OAAO,CAAC,cAAc,CAAkB;IACxC,OAAO,CAAC,WAAW,CAAe;IAClC,OAAO,CAAC,gBAAgB,CAAoB;IAC5C,OAAO,CAAC,uBAAuB,CAA2B;IAC1D,OAAO,CAAC,sBAAsB,CAA0B;IACxD,OAAO,CAAC,mBAAmB,CAAuB;IAClD,OAAO,CAAC,4BAA4B,CAAgC;IACpE,OAAO,CAAC,uBAAuB,CAA2B;IAC1D,OAAO,CAAC,aAAa,CAAiB;IACtC,OAAO,CAAC,eAAe,CAAmB;IAC1C,OAAO,CAAC,mBAAmB,CAAuB;IAClD,OAAO,CAAC,qBAAqB,CAAyB;IACtD,OAAO,CAAC,wBAAwB,CAA4B;IAC5D,OAAO,CAAC,eAAe,CAAmB;IAC1C,OAAO,CAAC,2BAA2B,CAA+B;IAClE,OAAO,CAAC,0BAA0B,CAA8B;IAGhE,OAAO,CAAC,cAAc,CAAS;IAC/B,OAAO,CAAC,wBAAwB,CAA+B;gBAEnD,MAAM,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC;IA2D3C,OAAO,CAAC,kBAAkB;IAmK1B,OAAO,CAAC,mBAAmB;IA0C3B,OAAO,CAAC,eAAe;IAmGvB,OAAO,CAAC,kBAAkB;IAwBpB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IA0mB5B;;;OAGG;YACW,2BAA2B;IA8BzC;;;OAGG;YACW,8BAA8B;IAsB5C;;;OAGG;YACW,gCAAgC;IAsB9C;;;OAGG;YACW,8BAA8B;IAsB5C;;;;OAIG;YACW,8BAA8B;IA2F5C;;;;;OAKG;YACW,iCAAiC;IA4G/C;;;;OAIG;YACW,2BAA2B;YA0B3B,qBAAqB;YAsBrB,eAAe;YAiCf,kBAAkB;IAgBhC,OAAO,CAAC,WAAW,CAAK;IAExB,OAAO,CAAC,sBAAsB;IAqD9B,OAAO,CAAC,qBAAqB;IAS7B,OAAO,CAAC,cAAc;IAchB,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IA2O/B,SAAS,IAAI,aAAa;CAG1B;AAeD,eAAe,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../backend/src/index.ts"],"names":[],"mappings":";AAyCA,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AA0GjD,qBAAa,YAAY;IACxB,OAAO,CAAC,GAAG,CAAsB;IACjC,OAAO,CAAC,UAAU,CAAkC;IACpD,OAAO,CAAC,EAAE,CAAiB;IAC3B,OAAO,CAAC,MAAM,CAAgB;IAC9B,OAAO,CAAC,MAAM,CAAqE;IAEnF,OAAO,CAAC,cAAc,CAAkB;IACxC,OAAO,CAAC,WAAW,CAAe;IAClC,OAAO,CAAC,gBAAgB,CAAoB;IAC5C,OAAO,CAAC,uBAAuB,CAA2B;IAC1D,OAAO,CAAC,sBAAsB,CAA0B;IACxD,OAAO,CAAC,mBAAmB,CAAuB;IAClD,OAAO,CAAC,4BAA4B,CAAgC;IACpE,OAAO,CAAC,uBAAuB,CAA2B;IAC1D,OAAO,CAAC,aAAa,CAAiB;IACtC,OAAO,CAAC,eAAe,CAAmB;IAC1C,OAAO,CAAC,mBAAmB,CAAuB;IAClD,OAAO,CAAC,qBAAqB,CAAyB;IACtD,OAAO,CAAC,wBAAwB,CAA4B;IAC5D,OAAO,CAAC,eAAe,CAAmB;IAC1C,OAAO,CAAC,2BAA2B,CAA+B;IAClE,OAAO,CAAC,0BAA0B,CAA8B;IAChE,OAAO,CAAC,iBAAiB,CAAkC;IAG3D,OAAO,CAAC,cAAc,CAAS;IAC/B,OAAO,CAAC,wBAAwB,CAA+B;gBAEnD,MAAM,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC;IA2D3C,OAAO,CAAC,kBAAkB;IAuQ1B,OAAO,CAAC,mBAAmB;IA0C3B,OAAO,CAAC,eAAe;IAmGvB,OAAO,CAAC,kBAAkB;IAwBpB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAi5B5B;;;OAGG;YACW,2BAA2B;IA8BzC;;;OAGG;YACW,8BAA8B;IAsB5C;;;OAGG;YACW,gCAAgC;IAsB9C;;;OAGG;YACW,8BAA8B;IAsB5C;;;;OAIG;YACW,8BAA8B;IA2F5C;;;;;OAKG;YACW,iCAAiC;IA4G/C;;;;OAIG;YACW,2BAA2B;YA0B3B,qBAAqB;YAsBrB,eAAe;YAiCf,kBAAkB;IAgBhC,OAAO,CAAC,WAAW,CAAK;IAExB,OAAO,CAAC,sBAAsB;IAqD9B,OAAO,CAAC,qBAAqB;IAmB7B;;;;OAIG;IACH,OAAO,CAAC,kBAAkB;IA0D1B;;;;;;;;;OASG;IACH,OAAO,CAAC,qBAAqB;IAsH7B,OAAO,CAAC,cAAc;IAchB,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAoQ/B,SAAS,IAAI,aAAa;CAG1B;AAeD,eAAe,YAAY,CAAC"}