devchain-cli 0.20.3 → 0.22.0

package/dist/server/modules/external-integrations/my-work/external-my-work.controller.js

@@ -0,0 +1,626 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ExternalMyWorkController = void 0;
+const common_1 = require("@nestjs/common");
+const swagger_1 = require("@nestjs/swagger");
+const zod_1 = require("zod");
+const integration_admission_guard_1 = require("../../../common/guards/integration-admission.guard");
+const request_validation_1 = require("../request-validation");
+const external_time_mutation_models_1 = require("../models/external-time-mutation.models");
+const external_my_work_openapi_1 = require("./external-my-work.openapi");
+const external_edit_session_service_1 = require("./external-edit-session.service");
+const external_my_work_service_1 = require("./external-my-work.service");
+const external_time_mutation_service_1 = require("./external-time-mutation.service");
+const providerSchema = zod_1.z.enum(external_my_work_openapi_1.INTEGRATION_PROVIDER_IDS);
+const querySchema = zod_1.z
+    .object({
+    includeCompleted: zod_1.z.enum(['true', 'false']).optional(),
+})
+    .strict();
+const taskCommentsQuerySchema = zod_1.z
+    .object({
+    cursor: zod_1.z.string().trim().min(1).max(external_my_work_openapi_1.MAX_TASK_COMMENT_CURSOR_LENGTH).optional(),
+})
+    .strict();
+const remoteTaskIdSchema = zod_1.z.string().trim().min(1).max(external_my_work_openapi_1.MAX_REMOTE_TASK_ID_LENGTH);
+const statusInputSchema = zod_1.z
+    .object({ status: zod_1.z.string().trim().min(1).max(external_my_work_openapi_1.MAX_STATUS_LENGTH) })
+    .strict();
+const commentInputSchema = zod_1.z
+    .object({
+    text: zod_1.z.string().trim().min(1).max(external_my_work_openapi_1.MAX_COMMENT_LENGTH),
+    notifyAll: zod_1.z.boolean().optional(),
+})
+    .strict();
+const timeEntryInputSchema = zod_1.z
+    .object({
+    startedAt: zod_1.z.string().datetime({ offset: true }),
+    durationMs: zod_1.z.number().int().positive().max(external_my_work_openapi_1.MAX_TIME_ENTRY_DURATION_MS),
+    note: zod_1.z.string().trim().max(external_my_work_openapi_1.MAX_TIME_ENTRY_NOTE_LENGTH).nullable().optional(),
+})
+    .strict();
+const linkLookupInputSchema = zod_1.z
+    .object({
+    scopeKey: zod_1.z.string().trim().min(1).max(256),
+    taskId: zod_1.z.string().trim().min(1).max(external_my_work_openapi_1.MAX_REMOTE_TASK_ID_LENGTH),
+})
+    .strict();
+const linkLookupBodySchema = zod_1.z
+    .object({ items: zod_1.z.array(linkLookupInputSchema).min(1).max(1_000) })
+    .strict();
+const sessionIdSchema = zod_1.z.string().uuid();
+const deleteSessionInputSchema = zod_1.z
+    .object({
+    pageProof: zod_1.z.string().trim().min(1).max(external_my_work_openapi_1.MAX_TASK_COMMENT_CURSOR_LENGTH).nullable().optional(),
+})
+    .strict();
+const descriptionWriteSchema = zod_1.z
+    .object({
+    document: zod_1.z.object({ version: zod_1.z.literal(1), blocks: zod_1.z.array(zod_1.z.unknown()) }).strict(),
+    revision: zod_1.z.number().int().min(0),
+})
+    .strict();
+const remoteCommentIdSchema = zod_1.z.string().trim().min(1).max(256);
+const commentEditSessionInputSchema = zod_1.z
+    .object({
+    lookupToken: zod_1.z.string().trim().min(1).max(1_024).nullable().optional(),
+})
+    .strict();
+const connectionEpochHeaderSchema = zod_1.z
+    .string()
+    .trim()
+    .regex(/^\d{1,10}$/, 'Invalid connection epoch')
+    .transform(Number);
+const idempotencyKeyHeaderSchema = zod_1.z
+    .string()
+    .trim()
+    .regex(external_time_mutation_models_1.TIME_OPERATION_ID_PATTERN, 'Invalid idempotency key')
+    .max(external_time_mutation_models_1.MAX_TIME_OPERATION_ID_LENGTH);
+const remoteEntryIdSchema = zod_1.z.string().trim().min(1).max(256);
+const operationIdSchema = zod_1.z.string().trim().min(1).max(external_time_mutation_models_1.MAX_TIME_OPERATION_ID_LENGTH);
+function parseOrThrow(schema, value) {
+    return (0, request_validation_1.parseOrThrow)(schema, value, 'Invalid My Work request.');
+}
+let ExternalMyWorkController = class ExternalMyWorkController {
+    myWork;
+    editSessions;
+    timeMutations;
+    constructor(myWork, editSessions, timeMutations) {
+        this.myWork = myWork;
+        this.editSessions = editSessions;
+        this.timeMutations = timeMutations;
+    }
+    async getMyWork(providerValue, queryValue) {
+        const provider = parseOrThrow(providerSchema, providerValue);
+        const query = parseOrThrow(querySchema, queryValue);
+        return this.myWork.getMyWork(provider, {
+            includeCompleted: query.includeCompleted === 'true',
+        });
+    }
+    async getTaskDetail(providerValue, taskIdValue) {
+        const { provider, taskId } = this.parseTaskPath(providerValue, taskIdValue);
+        return this.myWork.getTaskDetail(provider, taskId);
+    }
+    async listTaskComments(providerValue, taskIdValue, queryValue) {
+        const { provider, taskId } = this.parseTaskPath(providerValue, taskIdValue);
+        const query = parseOrThrow(taskCommentsQuerySchema, queryValue);
+        return this.myWork.listTaskComments(provider, taskId, query.cursor ?? null);
+    }
+    async listTaskTimeEntries(providerValue, taskIdValue, epochValue) {
+        const { provider, taskId } = this.parseTaskPath(providerValue, taskIdValue);
+        const epoch = parseOrThrow(connectionEpochHeaderSchema, String(epochValue ?? ''));
+        return this.myWork.getTimeEntryHistory(provider, taskId, epoch);
+    }
+    async changeTaskStatus(providerValue, taskIdValue, body) {
+        const { provider, taskId } = this.parseTaskPath(providerValue, taskIdValue);
+        return this.myWork.changeTaskStatus(provider, taskId, parseOrThrow(statusInputSchema, body));
+    }
+    async addTaskComment(providerValue, taskIdValue, body) {
+        const { provider, taskId } = this.parseTaskPath(providerValue, taskIdValue);
+        const input = parseOrThrow(commentInputSchema, body);
+        return this.myWork.addTaskComment(provider, taskId, {
+            text: input.text,
+            notifyAll: input.notifyAll ?? false,
+        });
+    }
+    async addTaskTimeEntry(providerValue, taskIdValue, epochValue, idempotencyKeyValue, body) {
+        const { provider, taskId } = this.parseTaskPath(providerValue, taskIdValue);
+        const epoch = parseOrThrow(connectionEpochHeaderSchema, String(epochValue ?? ''));
+        const operationId = parseOrThrow(idempotencyKeyHeaderSchema, String(idempotencyKeyValue ?? ''));
+        const input = parseOrThrow(timeEntryInputSchema, body);
+        return this.timeMutations.createTimeEntry(provider, taskId, {
+            startedAt: input.startedAt,
+            durationMs: input.durationMs,
+            note: input.note ?? null,
+        }, operationId, epoch);
+    }
+    async deleteTaskTimeEntry(providerValue, taskIdValue, entryIdValue, epochValue, idempotencyKeyValue) {
+        const { provider, taskId } = this.parseTaskPath(providerValue, taskIdValue);
+        const entryId = parseOrThrow(remoteEntryIdSchema, entryIdValue);
+        const epoch = parseOrThrow(connectionEpochHeaderSchema, String(epochValue ?? ''));
+        const operationId = parseOrThrow(idempotencyKeyHeaderSchema, String(idempotencyKeyValue ?? ''));
+        return this.timeMutations.deleteTimeEntry(provider, taskId, entryId, operationId, epoch);
+    }
+    async getTimeOperation(providerValue, operationIdValue, epochValue) {
+        const provider = parseOrThrow(providerSchema, providerValue);
+        const operationId = parseOrThrow(operationIdSchema, operationIdValue);
+        const epoch = parseOrThrow(connectionEpochHeaderSchema, String(epochValue ?? ''));
+        return this.timeMutations.getOperation(provider, operationId, epoch);
+    }
+    async verifyTimeOperation(providerValue, operationIdValue, epochValue) {
+        const provider = parseOrThrow(providerSchema, providerValue);
+        const operationId = parseOrThrow(operationIdSchema, operationIdValue);
+        const epoch = parseOrThrow(connectionEpochHeaderSchema, String(epochValue ?? ''));
+        return this.timeMutations.verifyOperation(provider, operationId, epoch);
+    }
+    async acknowledgeTimeOperation(providerValue, operationIdValue, epochValue) {
+        const provider = parseOrThrow(providerSchema, providerValue);
+        const operationId = parseOrThrow(operationIdSchema, operationIdValue);
+        const epoch = parseOrThrow(connectionEpochHeaderSchema, String(epochValue ?? ''));
+        return this.timeMutations.acknowledgeOperation(provider, operationId, epoch);
+    }
+    async getTaskLinkStates(providerValue, body) {
+        const provider = parseOrThrow(providerSchema, providerValue);
+        const input = parseOrThrow(linkLookupBodySchema, body);
+        return this.myWork.getTaskLinkStates(provider, input.items);
+    }
+    async createDescriptionSession(providerValue, taskIdValue) {
+        const { provider, taskId } = this.parseTaskPath(providerValue, taskIdValue);
+        return this.editSessions.createDescriptionSession(provider, taskId);
+    }
+    async createCommentDeleteSession(providerValue, taskIdValue, commentIdValue, body) {
+        const { provider, taskId } = this.parseTaskPath(providerValue, taskIdValue);
+        const input = parseOrThrow(deleteSessionInputSchema, body ?? {});
+        return this.editSessions.createCommentDeleteSession(provider, taskId, parseOrThrow(remoteCommentIdSchema, commentIdValue), input.pageProof ?? null);
+    }
+    async touchSession(sessionIdValue) {
+        return this.editSessions.touchSession(parseOrThrow(sessionIdSchema, sessionIdValue));
+    }
+    async verifySession(sessionIdValue) {
+        return this.editSessions.verifySession(parseOrThrow(sessionIdSchema, sessionIdValue));
+    }
+    async saveSession(sessionIdValue, body) {
+        const input = parseOrThrow(descriptionWriteSchema, body);
+        return this.editSessions.saveSession(parseOrThrow(sessionIdSchema, sessionIdValue), input.document, input.revision);
+    }
+    async reloadSession(sessionIdValue) {
+        return this.editSessions.reloadSession(parseOrThrow(sessionIdSchema, sessionIdValue));
+    }
+    async readRichDescription(providerValue, taskIdValue) {
+        const { provider, taskId } = this.parseTaskPath(providerValue, taskIdValue);
+        return this.editSessions.readRichDescription(provider, taskId);
+    }
+    async createCommentEditSession(providerValue, taskIdValue, commentIdValue, body) {
+        const { provider, taskId } = this.parseTaskPath(providerValue, taskIdValue);
+        const input = parseOrThrow(commentEditSessionInputSchema, body ?? {});
+        return this.editSessions.createCommentEditSession(provider, taskId, parseOrThrow(remoteCommentIdSchema, commentIdValue), input.lookupToken ?? null);
+    }
+    async executeCommentDelete(sessionIdValue) {
+        return this.editSessions.executeCommentDelete(parseOrThrow(sessionIdSchema, sessionIdValue));
+    }
+    parseTaskPath(providerValue, taskIdValue) {
+        return {
+            provider: parseOrThrow(providerSchema, providerValue),
+            taskId: parseOrThrow(remoteTaskIdSchema, taskIdValue),
+        };
+    }
+};
+exports.ExternalMyWorkController = ExternalMyWorkController;
+__decorate([
+    (0, common_1.Get)(':provider'),
+    (0, swagger_1.ApiOperation)({ summary: 'Load normalized assigned work from a connected provider' }),
+    (0, swagger_1.ApiParam)({ name: 'provider', enum: [...external_my_work_openapi_1.INTEGRATION_PROVIDER_IDS] }),
+    (0, swagger_1.ApiQuery)({ name: 'includeCompleted', required: false, type: Boolean }),
+    (0, swagger_1.ApiResponse)({
+        status: 200,
+        description: 'A supported My Work snapshot or a safe unsupported-capability response',
+        schema: external_my_work_openapi_1.MY_WORK_RESPONSE_SCHEMA,
+    }),
+    (0, swagger_1.ApiResponse)({ status: 400, description: 'Invalid request or provider is not connected' }),
+    (0, swagger_1.ApiResponse)({ status: 429, description: 'The upstream provider rate limit was reached' }),
+    (0, swagger_1.ApiResponse)({ status: 502, description: 'The upstream provider response was unavailable' }),
+    __param(0, (0, common_1.Param)('provider')),
+    __param(1, (0, common_1.Query)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object]),
+    __metadata("design:returntype", Promise)
+], ExternalMyWorkController.prototype, "getMyWork", null);
+__decorate([
+    (0, common_1.Get)(':provider/tasks/:taskId'),
+    (0, swagger_1.ApiOperation)({ summary: 'Load normalized detail and action capabilities for a remote task' }),
+    (0, swagger_1.ApiParam)({ name: 'provider', enum: [...external_my_work_openapi_1.INTEGRATION_PROVIDER_IDS] }),
+    (0, swagger_1.ApiParam)({ name: 'taskId', type: String }),
+    (0, swagger_1.ApiResponse)({
+        status: 200,
+        description: 'Normalized remote task detail',
+        schema: external_my_work_openapi_1.TASK_DETAIL_RESPONSE_SCHEMA,
+    }),
+    (0, swagger_1.ApiResponse)({ status: 400, description: 'Invalid input or unsupported capability' }),
+    __param(0, (0, common_1.Param)('provider')),
+    __param(1, (0, common_1.Param)('taskId')),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String]),
+    __metadata("design:returntype", Promise)
+], ExternalMyWorkController.prototype, "getTaskDetail", null);
+__decorate([
+    (0, common_1.Get)(':provider/tasks/:taskId/comments'),
+    (0, swagger_1.ApiOperation)({ summary: 'Load normalized newest-first comment history for a remote task' }),
+    (0, swagger_1.ApiParam)({ name: 'provider', enum: [...external_my_work_openapi_1.INTEGRATION_PROVIDER_IDS] }),
+    (0, swagger_1.ApiParam)({ name: 'taskId', type: String }),
+    (0, swagger_1.ApiQuery)({ name: 'cursor', required: false, type: String }),
+    (0, swagger_1.ApiResponse)({
+        status: 200,
+        description: 'Normalized plain-text comment page plus an optional older-history cursor',
+        schema: external_my_work_openapi_1.TASK_COMMENTS_RESPONSE_SCHEMA,
+    }),
+    (0, swagger_1.ApiResponse)({ status: 400, description: 'Invalid input or unsupported capability' }),
+    __param(0, (0, common_1.Param)('provider')),
+    __param(1, (0, common_1.Param)('taskId')),
+    __param(2, (0, common_1.Query)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String, Object]),
+    __metadata("design:returntype", Promise)
+], ExternalMyWorkController.prototype, "listTaskComments", null);
+__decorate([
+    (0, common_1.Get)(':provider/tasks/:taskId/time-entries'),
+    (0, swagger_1.ApiOperation)({
+        summary: "Load the connected user's normalized 30-day time-entry history for a remote task",
+        description: 'The window is fixed at 30 days and provider-neutral; only the connected user entries are returned, capped at 100 rows. Requires the X-DevChain-Connection-Epoch header, validated before credentials load.',
+    }),
+    (0, swagger_1.ApiParam)({ name: 'provider', enum: [...external_my_work_openapi_1.INTEGRATION_PROVIDER_IDS] }),
+    (0, swagger_1.ApiParam)({ name: 'taskId', type: String }),
+    (0, swagger_1.ApiResponse)({
+        status: 200,
+        description: 'Strict 30-day connected-user time-entry history with truncation and running-timer state',
+        schema: external_my_work_openapi_1.TASK_TIME_ENTRIES_RESPONSE_SCHEMA,
+    }),
+    (0, swagger_1.ApiResponse)({ status: 400, description: 'Invalid input or unsupported capability' }),
+    (0, swagger_1.ApiResponse)({ status: 409, description: 'The connection epoch precondition failed' }),
+    __param(0, (0, common_1.Param)('provider')),
+    __param(1, (0, common_1.Param)('taskId')),
+    __param(2, (0, common_1.Headers)('x-devchain-connection-epoch')),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String, Object]),
+    __metadata("design:returntype", Promise)
+], ExternalMyWorkController.prototype, "listTaskTimeEntries", null);
+__decorate([
+    (0, common_1.Put)(':provider/tasks/:taskId/status'),
+    (0, swagger_1.ApiOperation)({ summary: 'Change a remote task status' }),
+    (0, swagger_1.ApiParam)({ name: 'provider', enum: [...external_my_work_openapi_1.INTEGRATION_PROVIDER_IDS] }),
+    (0, swagger_1.ApiParam)({ name: 'taskId', type: String }),
+    (0, swagger_1.ApiBody)({ schema: external_my_work_openapi_1.STATUS_INPUT_BODY_SCHEMA }),
+    (0, swagger_1.ApiResponse)({
+        status: 200,
+        description: 'Normalized action acknowledgement',
+        schema: (0, external_my_work_openapi_1.taskActionResponseSchema)('change_status'),
+    }),
+    __param(0, (0, common_1.Param)('provider')),
+    __param(1, (0, common_1.Param)('taskId')),
+    __param(2, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String, Object]),
+    __metadata("design:returntype", Promise)
+], ExternalMyWorkController.prototype, "changeTaskStatus", null);
+__decorate([
+    (0, common_1.Post)(':provider/tasks/:taskId/comments'),
+    (0, swagger_1.ApiOperation)({ summary: 'Add a plain-text remote task comment' }),
+    (0, swagger_1.ApiParam)({ name: 'provider', enum: [...external_my_work_openapi_1.INTEGRATION_PROVIDER_IDS] }),
+    (0, swagger_1.ApiParam)({ name: 'taskId', type: String }),
+    (0, swagger_1.ApiBody)({ schema: external_my_work_openapi_1.COMMENT_INPUT_BODY_SCHEMA }),
+    (0, swagger_1.ApiResponse)({
+        status: 200,
+        description: 'Normalized action acknowledgement',
+        schema: (0, external_my_work_openapi_1.taskActionResponseSchema)('add_comment'),
+    }),
+    __param(0, (0, common_1.Param)('provider')),
+    __param(1, (0, common_1.Param)('taskId')),
+    __param(2, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String, Object]),
+    __metadata("design:returntype", Promise)
+], ExternalMyWorkController.prototype, "addTaskComment", null);
+__decorate([
+    (0, common_1.Post)(':provider/tasks/:taskId/time-entries'),
+    (0, swagger_1.ApiOperation)({
+        summary: 'Create a manual remote task time entry behind an operation receipt',
+        description: 'Requires the X-DevChain-Connection-Epoch precondition header and an Idempotency-Key operation id. One operation id and payload tuple dispatch at most once; a dispatched timeout, network loss, or unusable 5xx returns outcome_unknown and is never retried automatically.',
+    }),
+    (0, swagger_1.ApiParam)({ name: 'provider', enum: [...external_my_work_openapi_1.INTEGRATION_PROVIDER_IDS] }),
+    (0, swagger_1.ApiParam)({ name: 'taskId', type: String }),
+    (0, swagger_1.ApiBody)({ schema: external_my_work_openapi_1.TIME_ENTRY_INPUT_BODY_SCHEMA }),
+    (0, swagger_1.ApiResponse)({
+        status: 200,
+        description: 'Provider-confirmed create or a receipt-bound unknown outcome',
+        schema: external_my_work_openapi_1.TIME_ENTRY_CREATE_RESPONSE_SCHEMA,
+    }),
+    (0, swagger_1.ApiResponse)({ status: 400, description: 'Invalid input or unsupported capability' }),
+    (0, swagger_1.ApiResponse)({
+        status: 409,
+        description: 'Epoch precondition, idempotency conflict, or busy gate',
+    }),
+    __param(0, (0, common_1.Param)('provider')),
+    __param(1, (0, common_1.Param)('taskId')),
+    __param(2, (0, common_1.Headers)('x-devchain-connection-epoch')),
+    __param(3, (0, common_1.Headers)('idempotency-key')),
+    __param(4, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String, Object, Object, Object]),
+    __metadata("design:returntype", Promise)
+], ExternalMyWorkController.prototype, "addTaskTimeEntry", null);
+__decorate([
+    (0, common_1.Delete)(':provider/tasks/:taskId/time-entries/:entryId'),
+    (0, swagger_1.ApiOperation)({
+        summary: 'Delete an owned remote time entry behind an operation receipt',
+        description: 'Requires the X-DevChain-Connection-Epoch precondition header and an Idempotency-Key operation id. A provider preflight proves presence and ownership first; ambiguous outcomes resolve only through the exact-resource verify route.',
+    }),
+    (0, swagger_1.ApiParam)({ name: 'provider', enum: [...external_my_work_openapi_1.INTEGRATION_PROVIDER_IDS] }),
+    (0, swagger_1.ApiParam)({ name: 'taskId', type: String }),
+    (0, swagger_1.ApiParam)({ name: 'entryId', type: String }),
+    (0, swagger_1.ApiResponse)({
+        status: 200,
+        description: 'Deleted, already-deleted, not-applied, or a receipt-bound unknown outcome',
+        schema: external_my_work_openapi_1.TIME_ENTRY_DELETE_RESPONSE_SCHEMA,
+    }),
+    (0, swagger_1.ApiResponse)({ status: 400, description: 'Invalid input or unsupported capability' }),
+    (0, swagger_1.ApiResponse)({ status: 403, description: 'The entry is not deletable by the connected user' }),
+    (0, swagger_1.ApiResponse)({
+        status: 409,
+        description: 'Epoch precondition, idempotency conflict, or busy gate',
+    }),
+    __param(0, (0, common_1.Param)('provider')),
+    __param(1, (0, common_1.Param)('taskId')),
+    __param(2, (0, common_1.Param)('entryId')),
+    __param(3, (0, common_1.Headers)('x-devchain-connection-epoch')),
+    __param(4, (0, common_1.Headers)('idempotency-key')),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String, String, Object, Object]),
+    __metadata("design:returntype", Promise)
+], ExternalMyWorkController.prototype, "deleteTaskTimeEntry", null);
+__decorate([
+    (0, common_1.Get)(':provider/time-operations/:operationId'),
+    (0, swagger_1.ApiOperation)({
+        summary: 'Read one time-entry operation receipt',
+        description: 'Requires the X-DevChain-Connection-Epoch precondition header.',
+    }),
+    (0, swagger_1.ApiParam)({ name: 'provider', enum: [...external_my_work_openapi_1.INTEGRATION_PROVIDER_IDS] }),
+    (0, swagger_1.ApiParam)({ name: 'operationId', type: String }),
+    (0, swagger_1.ApiResponse)({ status: 200, schema: external_my_work_openapi_1.TIME_OPERATION_ACK_RESPONSE_SCHEMA }),
+    (0, swagger_1.ApiResponse)({ status: 404, description: 'The operation receipt is unknown or expired' }),
+    __param(0, (0, common_1.Param)('provider')),
+    __param(1, (0, common_1.Param)('operationId')),
+    __param(2, (0, common_1.Headers)('x-devchain-connection-epoch')),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String, Object]),
+    __metadata("design:returntype", Promise)
+], ExternalMyWorkController.prototype, "getTimeOperation", null);
+__decorate([
+    (0, common_1.Post)(':provider/time-operations/:operationId/verify'),
+    (0, swagger_1.ApiOperation)({
+        summary: 'Resolve an unknown time-entry operation from exact provider proof',
+        description: 'Creates resolve only from complete before/after id sets plus exactly one new matching entry; deletes resolve only through the exact-resource read. Collection absence never resolves anything.',
+    }),
+    (0, swagger_1.ApiParam)({ name: 'provider', enum: [...external_my_work_openapi_1.INTEGRATION_PROVIDER_IDS] }),
+    (0, swagger_1.ApiParam)({ name: 'operationId', type: String }),
+    (0, swagger_1.ApiResponse)({ status: 200, schema: external_my_work_openapi_1.TIME_OPERATION_VERIFY_RESPONSE_SCHEMA }),
+    (0, swagger_1.ApiResponse)({ status: 404, description: 'The operation receipt is unknown or expired' }),
+    (0, swagger_1.ApiResponse)({ status: 409, description: 'Epoch precondition failed' }),
+    __param(0, (0, common_1.Param)('provider')),
+    __param(1, (0, common_1.Param)('operationId')),
+    __param(2, (0, common_1.Headers)('x-devchain-connection-epoch')),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String, Object]),
+    __metadata("design:returntype", Promise)
+], ExternalMyWorkController.prototype, "verifyTimeOperation", null);
+__decorate([
+    (0, common_1.Post)(':provider/time-operations/:operationId/acknowledge'),
+    (0, swagger_1.ApiOperation)({
+        summary: 'Acknowledge the duplicate risk of an unknown time-entry operation',
+        description: 'Transitions a live unknown receipt to terminal abandoned_unknown. This is the only way past an ambiguity that cannot be verified.',
+    }),
+    (0, swagger_1.ApiParam)({ name: 'provider', enum: [...external_my_work_openapi_1.INTEGRATION_PROVIDER_IDS] }),
+    (0, swagger_1.ApiParam)({ name: 'operationId', type: String }),
+    (0, swagger_1.ApiResponse)({ status: 200, schema: external_my_work_openapi_1.TIME_OPERATION_ACK_RESPONSE_SCHEMA }),
+    (0, swagger_1.ApiResponse)({ status: 404, description: 'The operation receipt is unknown or expired' }),
+    (0, swagger_1.ApiResponse)({ status: 409, description: 'The operation is not unresolved' }),
+    __param(0, (0, common_1.Param)('provider')),
+    __param(1, (0, common_1.Param)('operationId')),
+    __param(2, (0, common_1.Headers)('x-devchain-connection-epoch')),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String, Object]),
+    __metadata("design:returntype", Promise)
+], ExternalMyWorkController.prototype, "acknowledgeTimeOperation", null);
+__decorate([
+    (0, common_1.Post)(':provider/links/batch'),
+    (0, swagger_1.ApiOperation)({ summary: 'Resolve DevChain link state for remote task cards' }),
+    (0, swagger_1.ApiParam)({ name: 'provider', enum: [...external_my_work_openapi_1.INTEGRATION_PROVIDER_IDS] }),
+    __param(0, (0, common_1.Param)('provider')),
+    __param(1, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object]),
+    __metadata("design:returntype", Promise)
+], ExternalMyWorkController.prototype, "getTaskLinkStates", null);
+__decorate([
+    (0, common_1.Post)(':provider/tasks/:taskId/edit-sessions'),
+    (0, swagger_1.ApiOperation)({
+        summary: 'Open a bounded description-edit session from a fresh baseline read',
+        description: 'Read-only rendering never allocates a session. Unsupported baseline content fails closed with unsupported_content and no session is created.',
+    }),
+    (0, swagger_1.ApiParam)({ name: 'provider', enum: [...external_my_work_openapi_1.INTEGRATION_PROVIDER_IDS] }),
+    (0, swagger_1.ApiParam)({ name: 'taskId', type: String }),
+    (0, swagger_1.ApiResponse)({
+        status: 201,
+        description: 'The opened edit session pinned to the current connection generation',
+        schema: external_my_work_openapi_1.EDIT_SESSION_RESPONSE_SCHEMA,
+    }),
+    __param(0, (0, common_1.Param)('provider')),
+    __param(1, (0, common_1.Param)('taskId')),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String]),
+    __metadata("design:returntype", Promise)
+], ExternalMyWorkController.prototype, "createDescriptionSession", null);
+__decorate([
+    (0, common_1.Post)(':provider/tasks/:taskId/comments/:commentId/delete-sessions'),
+    (0, swagger_1.ApiOperation)({
+        summary: 'Open an owner-validated comment-deletion session through a bounded lookup',
+        description: 'ClickUp lookups replay at most the producing page plus one provider-issued adjacent page. A comment that is missing or not authored by the current user creates no session.',
+    }),
+    (0, swagger_1.ApiParam)({ name: 'provider', enum: [...external_my_work_openapi_1.INTEGRATION_PROVIDER_IDS] }),
+    (0, swagger_1.ApiParam)({ name: 'taskId', type: String }),
+    (0, swagger_1.ApiParam)({ name: 'commentId', type: String }),
+    (0, swagger_1.ApiBody)({ schema: external_my_work_openapi_1.DELETE_SESSION_INPUT_BODY_SCHEMA }),
+    (0, swagger_1.ApiResponse)({
+        status: 201,
+        description: 'The opened deletion session; deletion itself is a separate gated action',
+        schema: external_my_work_openapi_1.EDIT_SESSION_RESPONSE_SCHEMA,
+    }),
+    __param(0, (0, common_1.Param)('provider')),
+    __param(1, (0, common_1.Param)('taskId')),
+    __param(2, (0, common_1.Param)('commentId')),
+    __param(3, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String, String, Object]),
+    __metadata("design:returntype", Promise)
+], ExternalMyWorkController.prototype, "createCommentDeleteSession", null);
+__decorate([
+    (0, common_1.Post)('edit-sessions/:sessionId/touch'),
+    (0, swagger_1.ApiOperation)({
+        summary: 'Keep a dirty editor session active without contacting the provider',
+    }),
+    (0, swagger_1.ApiParam)({ name: 'sessionId', type: String, format: 'uuid' }),
+    (0, swagger_1.ApiResponse)({ status: 200, schema: external_my_work_openapi_1.EDIT_SESSION_RESPONSE_SCHEMA }),
+    __param(0, (0, common_1.Param)('sessionId')),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String]),
+    __metadata("design:returntype", Promise)
+], ExternalMyWorkController.prototype, "touchSession", null);
+__decorate([
+    (0, common_1.Post)('edit-sessions/:sessionId/verify'),
+    (0, swagger_1.ApiOperation)({
+        summary: 'Verify a session against a fresh remote read after an unknown outcome',
+        description: 'Seeing the new payload commits the save exactly once; seeing the old baseline never re-arms writes; other content reports divergence.',
+    }),
+    (0, swagger_1.ApiParam)({ name: 'sessionId', type: String, format: 'uuid' }),
+    (0, swagger_1.ApiResponse)({ status: 200, schema: external_my_work_openapi_1.EDIT_SESSION_VERIFY_RESPONSE_SCHEMA }),
+    __param(0, (0, common_1.Param)('sessionId')),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String]),
+    __metadata("design:returntype", Promise)
+], ExternalMyWorkController.prototype, "verifySession", null);
+__decorate([
+    (0, common_1.Post)('edit-sessions/:sessionId/save'),
+    (0, swagger_1.ApiOperation)({
+        summary: 'Save canonical rich content through a current editable session',
+        description: 'A fresh provider read, revision and metadata comparison, connection-generation check, and one vendor mutation run inside the shared provider operation gate; the gate is then released and a read-only post-write verification runs with generation rechecks on both sides. A verified save returns the new revision. A dispatched timeout, network loss, or 5xx classifies as outcome_unknown. Neither provider offers compare-and-swap, so a remote edit landing between the preflight and verification reads can remain undetectable; divergence detection narrows but does not eliminate that window.',
+    }),
+    (0, swagger_1.ApiParam)({ name: 'sessionId', type: String, format: 'uuid' }),
+    (0, swagger_1.ApiBody)({
+        schema: {
+            type: 'object',
+            required: ['document', 'revision'],
+            properties: {
+                document: { type: 'object' },
+                revision: { type: 'integer', minimum: 0 },
+            },
+        },
+    }),
+    (0, swagger_1.ApiResponse)({ status: 200, schema: external_my_work_openapi_1.EDIT_SESSION_WRITE_RESPONSE_SCHEMA }),
+    __param(0, (0, common_1.Param)('sessionId')),
+    __param(1, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object]),
+    __metadata("design:returntype", Promise)
+], ExternalMyWorkController.prototype, "saveSession", null);
+__decorate([
+    (0, common_1.Post)('edit-sessions/:sessionId/reload'),
+    (0, swagger_1.ApiOperation)({
+        summary: 'Reload the editable session baseline from a fresh provider read',
+        description: 'Discards the local baseline in favor of the current remote content and advances the revision. Available only from the editable state; a session with an unknown pending write must Verify or retry its exact payload instead.',
+    }),
+    (0, swagger_1.ApiParam)({ name: 'sessionId', type: String, format: 'uuid' }),
+    (0, swagger_1.ApiResponse)({ status: 200, schema: external_my_work_openapi_1.EDIT_SESSION_RELOAD_RESPONSE_SCHEMA }),
+    __param(0, (0, common_1.Param)('sessionId')),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String]),
+    __metadata("design:returntype", Promise)
+], ExternalMyWorkController.prototype, "reloadSession", null);
+__decorate([
+    (0, common_1.Get)(':provider/tasks/:taskId/rich-description'),
+    (0, swagger_1.ApiOperation)({
+        summary: 'Stateless canonical rich-description read (allocates no session)',
+        description: 'Returns the bounded canonical document when the provider payload parses inside the closed set, plus capability flags and a read-only reason otherwise. Only the explicit edit-session route creates a session.',
+    }),
+    (0, swagger_1.ApiParam)({ name: 'provider', enum: [...external_my_work_openapi_1.INTEGRATION_PROVIDER_IDS] }),
+    (0, swagger_1.ApiParam)({ name: 'taskId', type: String }),
+    (0, swagger_1.ApiResponse)({ status: 200, schema: external_my_work_openapi_1.RICH_DESCRIPTION_RESPONSE_SCHEMA }),
+    __param(0, (0, common_1.Param)('provider')),
+    __param(1, (0, common_1.Param)('taskId')),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String]),
+    __metadata("design:returntype", Promise)
+], ExternalMyWorkController.prototype, "readRichDescription", null);
+__decorate([
+    (0, common_1.Post)(':provider/tasks/:taskId/comments/:commentId/edit-sessions'),
+    (0, swagger_1.ApiOperation)({
+        summary: 'Open an owner-validated comment-edit session through a bounded lookup',
+        description: 'The comment must parse inside the closed canonical set and belong to the authenticated user. ClickUp callers pass the server-issued lookup token from the comment page; Jira uses its exact-comment endpoint.',
+    }),
+    (0, swagger_1.ApiParam)({ name: 'provider', enum: [...external_my_work_openapi_1.INTEGRATION_PROVIDER_IDS] }),
+    (0, swagger_1.ApiParam)({ name: 'taskId', type: String }),
+    (0, swagger_1.ApiParam)({ name: 'commentId', type: String }),
+    (0, swagger_1.ApiBody)({ schema: external_my_work_openapi_1.COMMENT_EDIT_SESSION_INPUT_BODY_SCHEMA }),
+    (0, swagger_1.ApiResponse)({
+        status: 201,
+        description: 'The opened comment-edit session pinned to the current connection generation',
+        schema: external_my_work_openapi_1.EDIT_SESSION_RESPONSE_SCHEMA,
+    }),
+    __param(0, (0, common_1.Param)('provider')),
+    __param(1, (0, common_1.Param)('taskId')),
+    __param(2, (0, common_1.Param)('commentId')),
+    __param(3, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String, String, Object]),
+    __metadata("design:returntype", Promise)
+], ExternalMyWorkController.prototype, "createCommentEditSession", null);
+__decorate([
+    (0, common_1.Delete)('edit-sessions/:sessionId'),
+    (0, swagger_1.ApiOperation)({
+        summary: 'Execute the owned comment deletion of a current session',
+        description: 'A later vendor 404 is treated as already deleted. Known rejections fail closed and invalidate the session.',
+    }),
+    (0, swagger_1.ApiParam)({ name: 'sessionId', type: String, format: 'uuid' }),
+    (0, swagger_1.ApiResponse)({ status: 200, schema: external_my_work_openapi_1.COMMENT_DELETE_RESPONSE_SCHEMA }),
+    __param(0, (0, common_1.Param)('sessionId')),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String]),
+    __metadata("design:returntype", Promise)
+], ExternalMyWorkController.prototype, "executeCommentDelete", null);
+exports.ExternalMyWorkController = ExternalMyWorkController = __decorate([
+    (0, swagger_1.ApiTags)('integrations'),
+    (0, common_1.Controller)('api/integrations/my-work'),
+    (0, common_1.UseGuards)(integration_admission_guard_1.IntegrationAdmissionGuard),
+    (0, swagger_1.ApiResponse)({ status: 400, description: 'Invalid request, connection, or capability' }),
+    (0, swagger_1.ApiResponse)({ status: 403, description: 'The provider denied the operation' }),
+    (0, swagger_1.ApiResponse)({ status: 404, description: 'The remote task was not found' }),
+    (0, swagger_1.ApiResponse)({ status: 429, description: 'The provider rate limit was reached' }),
+    (0, swagger_1.ApiResponse)({
+        status: 502,
+        description: 'The provider returned an invalid or unavailable response',
+    }),
+    (0, swagger_1.ApiResponse)({ status: 504, description: 'The provider request timed out' }),
+    __metadata("design:paramtypes", [external_my_work_service_1.ExternalMyWorkService,
+        external_edit_session_service_1.ExternalEditSessionService,
+        external_time_mutation_service_1.ExternalTimeMutationService])
+], ExternalMyWorkController);
+//# sourceMappingURL=external-my-work.controller.js.map