hammoc 1.4.0 → 1.6.0

package/packages/server/dist/controllers/harnessBundleController.js

@@ -0,0 +1,312 @@
+/**
+ * Story 30.5 (Task B): Harness Export/Import bundle controller.
+ *
+ * Four endpoints in `routes/harness.ts` mount onto this controller:
+ *   - POST /api/harness/bundle/export
+ *   - POST /api/harness/bundle/import/preview   (multipart/form-data)
+ *   - POST /api/harness/bundle/import/apply
+ *   - GET  /api/harness/bundle/plugin-deps
+ *
+ * Validation:
+ *   - Request bodies / query strings flow through the Zod schemas in
+ *     `harnessBundleSchema.ts` (Task 4 prerequisite). The schemas reject
+ *     `included-explicit` without `acknowledgedSecretInclusion: true` via
+ *     refine (AC2.d-2).
+ *   - The import preview path refuses non-multipart requests with 415 so the
+ *     client clearly distinguishes "you sent JSON instead of a file".
+ *   - Apply against a non-compatible bundle (future / invalid / malformed)
+ *     surfaces 422 with the original compatibility detail (AC5).
+ *   - ZIP-slip / path-traversal entries surface as 400 carrying
+ *     `HARNESS_BUNDLE_UNSAFE_PATH` (AC9).
+ *
+ * Response envelopes match the existing harness controllers — error path
+ * uses `{ error: { code, message, details? } }`.
+ */
+import multer from 'multer';
+import { z } from 'zod';
+import { exportBundleRequestSchema, importApplyRequestSchema, pluginDepsQuerySchema, } from '../utils/harnessBundleSchema.js';
+import { harnessBundleService, } from '../services/harnessBundleService.js';
+import { UnsafeBundlePathError } from '../utils/assertSafeBundlePath.js';
+// ----- multer middleware (memory storage; ZIP small enough to keep in RAM) -
+const MAX_BUNDLE_BYTES = 50 * 1024 * 1024; // 50MB hard ceiling
+const upload = multer({
+    storage: multer.memoryStorage(),
+    limits: { fileSize: MAX_BUNDLE_BYTES, files: 1 },
+});
+export function handleBundleUpload(req, res, next) {
+    const contentType = req.headers['content-type'] ?? '';
+    if (!contentType.toLowerCase().includes('multipart/form-data')) {
+        res.status(415).json({
+            error: {
+                code: 'UNSUPPORTED_MEDIA_TYPE',
+                message: 'Expected multipart/form-data with a ZIP file in the "file" field.',
+            },
+        });
+        return;
+    }
+    upload.single('file')(req, res, (err) => {
+        if (err && err instanceof Error && 'code' in err) {
+            const code = err.code;
+            if (code === 'LIMIT_FILE_SIZE') {
+                res.status(413).json({
+                    error: { code: 'UPLOAD_TOO_LARGE', message: 'Bundle exceeds 50MB upload limit.' },
+                });
+                return;
+            }
+            if (code === 'LIMIT_UNEXPECTED_FILE') {
+                res.status(400).json({
+                    error: { code: 'UPLOAD_UNEXPECTED_FIELD', message: 'Use the "file" field for the ZIP upload.' },
+                });
+                return;
+            }
+        }
+        if (err) {
+            res.status(500).json({
+                error: { code: 'UPLOAD_ERROR', message: 'Failed to receive the uploaded bundle.' },
+            });
+            return;
+        }
+        next();
+    });
+}
+// ----- Zod request schemas (server-side refine for the export endpoint) ----
+const exportBodySchema = exportBundleRequestSchema
+    .extend({
+    acknowledgedSecretInclusion: z.boolean().optional(),
+})
+    .refine((v) => v.secretsPolicy !== 'included-explicit' || v.acknowledgedSecretInclusion === true, {
+    message: 'acknowledgedSecretInclusion must be true when secretsPolicy === "included-explicit"',
+    path: ['acknowledgedSecretInclusion'],
+});
+const applyBodySchema = importApplyRequestSchema.extend({
+    projectSlug: z.string().min(1),
+});
+const previewMultipartSchema = z.object({
+    projectSlug: z.string().min(1),
+});
+// ----- Controller surface ---------------------------------------------------
+export const harnessBundleController = {
+    /** POST /api/harness/bundle/export */
+    async export(req, res) {
+        const parsed = exportBodySchema.safeParse(req.body ?? {});
+        if (!parsed.success) {
+            res.status(400).json({
+                error: {
+                    code: 'INVALID_REQUEST',
+                    message: parsed.error.issues[0]?.message ?? 'invalid body',
+                    details: { issues: parsed.error.issues },
+                },
+            });
+            return;
+        }
+        try {
+            const result = await harnessBundleService.export({
+                projectSlug: parsed.data.projectSlug,
+                includes: parsed.data.includes,
+                secretsPolicy: parsed.data.secretsPolicy,
+                acknowledgedSecretInclusion: parsed.data.acknowledgedSecretInclusion,
+            });
+            res.setHeader('Content-Type', 'application/zip');
+            res.setHeader('Content-Disposition', `attachment; filename="${result.filename}"`);
+            res.setHeader('X-Hammoc-Secrets-Removed', String(result.secretsRemovedCount));
+            res.setHeader('X-Hammoc-Secrets-Replaced', String(result.secretsReplacedCount));
+            res.setHeader('X-Hammoc-Has-Plaintext-Secrets', String(result.hadPlaintextSecrets));
+            res.status(200).send(result.zipBuffer);
+        }
+        catch (error) {
+            const code = error.code;
+            if (code === 'HARNESS_SECRET_ACK_MISSING') {
+                res.status(400).json({
+                    error: {
+                        code: 'HARNESS_SECRET_ACK_MISSING',
+                        message: 'acknowledgedSecretInclusion must be true to export plaintext secrets.',
+                    },
+                });
+                return;
+            }
+            if (code === 'PROJECT_NOT_FOUND') {
+                res.status(404).json({
+                    error: { code: 'PROJECT_NOT_FOUND', message: 'Project not found.' },
+                });
+                return;
+            }
+            res.status(500).json({
+                error: {
+                    code: 'HARNESS_BUNDLE_EXPORT_ERROR',
+                    message: `Failed to export bundle: ${error.message}`,
+                },
+            });
+        }
+    },
+    /** POST /api/harness/bundle/import/preview (multipart/form-data) */
+    async importPreview(req, res) {
+        const file = req.file;
+        if (!file || !file.buffer) {
+            res.status(400).json({
+                error: { code: 'MISSING_FILE', message: 'A ZIP file is required in the "file" field.' },
+            });
+            return;
+        }
+        const parsed = previewMultipartSchema.safeParse(req.body ?? {});
+        if (!parsed.success) {
+            res.status(400).json({
+                error: {
+                    code: 'INVALID_REQUEST',
+                    message: parsed.error.issues[0]?.message ?? 'invalid form fields',
+                },
+            });
+            return;
+        }
+        try {
+            const result = await harnessBundleService.import({
+                projectSlug: parsed.data.projectSlug,
+                zipBuffer: file.buffer,
+                dryRun: true,
+            });
+            // Stash the bundle behind a one-time token so a follow-up apply call can
+            // re-resolve the exact same bytes.
+            const bundleToken = harnessBundleService.storeBundle(parsed.data.projectSlug, file.buffer, result.manifest);
+            res.status(200).json({
+                bundleToken,
+                manifest: result.manifest,
+                preview: result.preview,
+                compatibility: result.compatibility,
+                compatibilityDetail: result.compatibilityDetail,
+            });
+        }
+        catch (error) {
+            if (error instanceof UnsafeBundlePathError) {
+                res.status(400).json({
+                    error: {
+                        code: error.code,
+                        message: error.message,
+                        details: { relativePath: error.relativePath },
+                    },
+                });
+                return;
+            }
+            const code = error.code;
+            if (code === 'PROJECT_NOT_FOUND') {
+                res.status(404).json({
+                    error: { code: 'PROJECT_NOT_FOUND', message: 'Project not found.' },
+                });
+                return;
+            }
+            res.status(500).json({
+                error: {
+                    code: 'HARNESS_BUNDLE_PREVIEW_ERROR',
+                    message: `Failed to preview bundle: ${error.message}`,
+                },
+            });
+        }
+    },
+    /** POST /api/harness/bundle/import/apply */
+    async importApply(req, res) {
+        const parsed = applyBodySchema.safeParse(req.body ?? {});
+        if (!parsed.success) {
+            res.status(400).json({
+                error: {
+                    code: 'INVALID_REQUEST',
+                    message: parsed.error.issues[0]?.message ?? 'invalid body',
+                    details: { issues: parsed.error.issues },
+                },
+            });
+            return;
+        }
+        const entry = harnessBundleService.consumeBundle(parsed.data.bundleToken);
+        if (!entry) {
+            res.status(404).json({
+                error: {
+                    code: 'HARNESS_BUNDLE_TOKEN_NOT_FOUND',
+                    message: 'Bundle token expired or unknown — request a new import preview.',
+                },
+            });
+            return;
+        }
+        if (entry.projectSlug !== parsed.data.projectSlug) {
+            res.status(400).json({
+                error: {
+                    code: 'HARNESS_BUNDLE_TOKEN_MISMATCH',
+                    message: 'Bundle token belongs to a different project.',
+                },
+            });
+            return;
+        }
+        try {
+            const input = {
+                projectSlug: parsed.data.projectSlug,
+                zipBuffer: entry.zipBuffer,
+                dryRun: false,
+                itemActions: parsed.data.itemActions,
+            };
+            const result = await harnessBundleService.import(input);
+            if (result.compatibility !== 'compatible') {
+                res.status(422).json({
+                    error: {
+                        code: 'HARNESS_BUNDLE_INCOMPATIBLE',
+                        message: `Bundle is ${result.compatibility}; apply refused.`,
+                        details: {
+                            compatibility: result.compatibility,
+                            compatibilityDetail: result.compatibilityDetail,
+                        },
+                    },
+                });
+                return;
+            }
+            // Token consumed — release.
+            harnessBundleService.releaseBundle(parsed.data.bundleToken);
+            res.status(200).json({ appliedSummary: result.appliedSummary });
+        }
+        catch (error) {
+            if (error instanceof UnsafeBundlePathError) {
+                res.status(400).json({
+                    error: {
+                        code: error.code,
+                        message: error.message,
+                        details: { relativePath: error.relativePath },
+                    },
+                });
+                return;
+            }
+            res.status(500).json({
+                error: {
+                    code: 'HARNESS_BUNDLE_APPLY_ERROR',
+                    message: `Failed to apply bundle: ${error.message}`,
+                },
+            });
+        }
+    },
+    /** GET /api/harness/bundle/plugin-deps?projectSlug=<slug> */
+    async pluginDeps(req, res) {
+        const parsed = pluginDepsQuerySchema.safeParse(req.query ?? {});
+        if (!parsed.success) {
+            res.status(400).json({
+                error: {
+                    code: 'INVALID_REQUEST',
+                    message: parsed.error.issues[0]?.message ?? 'invalid query',
+                },
+            });
+            return;
+        }
+        try {
+            const pluginDependencies = await harnessBundleService.collectPluginDependencies(parsed.data.projectSlug);
+            res.status(200).json({ pluginDependencies });
+        }
+        catch (error) {
+            const code = error.code;
+            if (code === 'PROJECT_NOT_FOUND') {
+                res.status(404).json({
+                    error: { code: 'PROJECT_NOT_FOUND', message: 'Project not found.' },
+                });
+                return;
+            }
+            res.status(500).json({
+                error: {
+                    code: 'HARNESS_BUNDLE_PLUGIN_DEPS_ERROR',
+                    message: `Failed to load plugin dependencies: ${error.message}`,
+                },
+            });
+        }
+    },
+};
+//# sourceMappingURL=harnessBundleController.js.map

package/packages/server/dist/controllers/harnessBundleController.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"harnessBundleController.js","sourceRoot":"","sources":["../../src/controllers/harnessBundleController.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAGH,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,yBAAyB,EACzB,wBAAwB,EACxB,qBAAqB,GACtB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,oBAAoB,GAErB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AAGzE,8EAA8E;AAE9E,MAAM,gBAAgB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,oBAAoB;AAE/D,MAAM,MAAM,GAAG,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC,aAAa,EAAE;IAC/B,MAAM,EAAE,EAAE,QAAQ,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC,EAAE;CACjD,CAAC,CAAC;AAEH,MAAM,UAAU,kBAAkB,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB;IAChF,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;IACtD,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,CAAC;QAC/D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACnB,KAAK,EAAE;gBACL,IAAI,EAAE,wBAAwB;gBAC9B,OAAO,EAAE,mEAAmE;aAC7E;SACF,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IACD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,GAAY,EAAE,EAAE;QAC/C,IAAI,GAAG,IAAI,GAAG,YAAY,KAAK,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;YACjD,MAAM,IAAI,GAAI,GAAgC,CAAC,IAAI,CAAC;YACpD,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;gBAC/B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,KAAK,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,mCAAmC,EAAE;iBAClF,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YACD,IAAI,IAAI,KAAK,uBAAuB,EAAE,CAAC;gBACrC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,KAAK,EAAE,EAAE,IAAI,EAAE,yBAAyB,EAAE,OAAO,EAAE,0CAA0C,EAAE;iBAChG,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;QACH,CAAC;QACD,IAAI,GAAG,EAAE,CAAC;YACR,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,wCAAwC,EAAE;aACnF,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,IAAI,EAAE,CAAC;IACT,CAAC,CAAC,CAAC;AACL,CAAC;AAED,8EAA8E;AAE9E,MAAM,gBAAgB,GAAG,yBAAyB;KAC/C,MAAM,CAAC;IACN,2BAA2B,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CACpD,CAAC;KACD,MAAM,CACL,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,KAAK,mBAAmB,IAAI,CAAC,CAAC,2BAA2B,KAAK,IAAI,EACxF;IACE,OAAO,EAAE,qFAAqF;IAC9F,IAAI,EAAE,CAAC,6BAA6B,CAAC;CACtC,CACF,CAAC;AAEJ,MAAM,eAAe,GAAG,wBAAwB,CAAC,MAAM,CAAC;IACtD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC/B,CAAC,CAAC;AAEH,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC/B,CAAC,CAAC;AAEH,+EAA+E;AAE/E,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,sCAAsC;IACtC,KAAK,CAAC,MAAM,CAAC,GAAY,EAAE,GAAa;QACtC,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAC1D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE;oBACL,IAAI,EAAE,iBAAiB;oBACvB,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,cAAc;oBAC1D,OAAO,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE;iBACzC;aACF,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,MAAM,CAAC;gBAC/C,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW;gBACpC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ;gBAC9B,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa;gBACxC,2BAA2B,EAAE,MAAM,CAAC,IAAI,CAAC,2BAA2B;aACrE,CAAC,CAAC;YAEH,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,iBAAiB,CAAC,CAAC;YACjD,GAAG,CAAC,SAAS,CACX,qBAAqB,EACrB,yBAAyB,MAAM,CAAC,QAAQ,GAAG,CAC5C,CAAC;YACF,GAAG,CAAC,SAAS,CAAC,0BAA0B,EAAE,MAAM,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,CAAC;YAC9E,GAAG,CAAC,SAAS,CAAC,2BAA2B,EAAE,MAAM,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC,CAAC;YAChF,GAAG,CAAC,SAAS,CAAC,gCAAgC,EAAE,MAAM,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,CAAC;YACpF,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,CAAC;YACnD,IAAI,IAAI,KAAK,4BAA4B,EAAE,CAAC;gBAC1C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,KAAK,EAAE;wBACL,IAAI,EAAE,4BAA4B;wBAClC,OAAO,EAAE,uEAAuE;qBACjF;iBACF,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YACD,IAAI,IAAI,KAAK,mBAAmB,EAAE,CAAC;gBACjC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,KAAK,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,oBAAoB,EAAE;iBACpE,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE;oBACL,IAAI,EAAE,6BAA6B;oBACnC,OAAO,EAAE,4BAA6B,KAAe,CAAC,OAAO,EAAE;iBAChE;aACF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,oEAAoE;IACpE,KAAK,CAAC,aAAa,CAAC,GAAY,EAAE,GAAa;QAC7C,MAAM,IAAI,GAAI,GAA6D,CAAC,IAAI,CAAC;QACjF,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YAC1B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,6CAA6C,EAAE;aACxF,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,MAAM,MAAM,GAAG,sBAAsB,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAChE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE;oBACL,IAAI,EAAE,iBAAiB;oBACvB,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,qBAAqB;iBAClE;aACF,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,MAAM,CAAC;gBAC/C,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW;gBACpC,SAAS,EAAE,IAAI,CAAC,MAAM;gBACtB,MAAM,EAAE,IAAI;aACb,CAAC,CAAC;YAEH,yEAAyE;YACzE,mCAAmC;YACnC,MAAM,WAAW,GAAG,oBAAoB,CAAC,WAAW,CAClD,MAAM,CAAC,IAAI,CAAC,WAAW,EACvB,IAAI,CAAC,MAAM,EACX,MAAM,CAAC,QAAQ,CAChB,CAAC;YAEF,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,WAAW;gBACX,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,aAAa,EAAE,MAAM,CAAC,aAAa;gBACnC,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;aAChD,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,qBAAqB,EAAE,CAAC;gBAC3C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,KAAK,EAAE;wBACL,IAAI,EAAE,KAAK,CAAC,IAAI;wBAChB,OAAO,EAAE,KAAK,CAAC,OAAO;wBACtB,OAAO,EAAE,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE;qBAC9C;iBACF,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YACD,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,CAAC;YACnD,IAAI,IAAI,KAAK,mBAAmB,EAAE,CAAC;gBACjC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,KAAK,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,oBAAoB,EAAE;iBACpE,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE;oBACL,IAAI,EAAE,8BAA8B;oBACpC,OAAO,EAAE,6BAA8B,KAAe,CAAC,OAAO,EAAE;iBACjE;aACF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,4CAA4C;IAC5C,KAAK,CAAC,WAAW,CAAC,GAAY,EAAE,GAAa;QAC3C,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QACzD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE;oBACL,IAAI,EAAE,iBAAiB;oBACvB,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,cAAc;oBAC1D,OAAO,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE;iBACzC;aACF,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,MAAM,KAAK,GAAG,oBAAoB,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC1E,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE;oBACL,IAAI,EAAE,gCAAgC;oBACtC,OAAO,EAAE,iEAAiE;iBAC3E;aACF,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,IAAI,KAAK,CAAC,WAAW,KAAK,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YAClD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE;oBACL,IAAI,EAAE,+BAA+B;oBACrC,OAAO,EAAE,8CAA8C;iBACxD;aACF,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,KAAK,GAAgB;gBACzB,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW;gBACpC,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,MAAM,EAAE,KAAK;gBACb,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAA+C;aACzE,CAAC;YACF,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACxD,IAAI,MAAM,CAAC,aAAa,KAAK,YAAY,EAAE,CAAC;gBAC1C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,KAAK,EAAE;wBACL,IAAI,EAAE,6BAA6B;wBACnC,OAAO,EAAE,aAAa,MAAM,CAAC,aAAa,kBAAkB;wBAC5D,OAAO,EAAE;4BACP,aAAa,EAAE,MAAM,CAAC,aAAa;4BACnC,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;yBAChD;qBACF;iBACF,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YACD,4BAA4B;YAC5B,oBAAoB,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAC5D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC;QAClE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,qBAAqB,EAAE,CAAC;gBAC3C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,KAAK,EAAE;wBACL,IAAI,EAAE,KAAK,CAAC,IAAI;wBAChB,OAAO,EAAE,KAAK,CAAC,OAAO;wBACtB,OAAO,EAAE,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE;qBAC9C;iBACF,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE;oBACL,IAAI,EAAE,4BAA4B;oBAClC,OAAO,EAAE,2BAA4B,KAAe,CAAC,OAAO,EAAE;iBAC/D;aACF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,6DAA6D;IAC7D,KAAK,CAAC,UAAU,CAAC,GAAY,EAAE,GAAa;QAC1C,MAAM,MAAM,GAAG,qBAAqB,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QAChE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE;oBACL,IAAI,EAAE,iBAAiB;oBACvB,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,eAAe;iBAC5D;aACF,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,MAAM,kBAAkB,GAAG,MAAM,oBAAoB,CAAC,yBAAyB,CAC7E,MAAM,CAAC,IAAI,CAAC,WAAW,CACxB,CAAC;YACF,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,CAAC;YACnD,IAAI,IAAI,KAAK,mBAAmB,EAAE,CAAC;gBACjC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,KAAK,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,oBAAoB,EAAE;iBACpE,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE;oBACL,IAAI,EAAE,kCAAkC;oBACxC,OAAO,EAAE,uCAAwC,KAAe,CAAC,OAAO,EAAE;iBAC3E;aACF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF,CAAC"}

package/packages/server/dist/controllers/harnessCommandController.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Story 28.5: Harness slash-command list / read / create / update / copy / delete controller.
+ *
+ * Mirrors the inline error-mapping pattern from harnessHookController — each
+ * handler walks the shared HARNESS_ERRORS table to emit
+ * `{ error: { code, message, details? } }` envelopes. New mapped codes for
+ * this story: HARNESS_COMMAND_NOT_FOUND and HARNESS_COMMAND_NAME_CONFLICT.
+ *
+ * Route surface (mounted at /api/harness from routes/harness.ts):
+ *   GET    /commands?projectSlug=<slug>?
+ *   GET    /commands/* (path-as-glob)
+ *   POST   /commands
+ *   PUT    /commands/* (path-as-glob)
+ *   POST   /commands/copy
+ *   POST   /commands/copy-directory
+ *   DELETE /commands/* (path-as-glob)
+ */
+import type { Request, Response } from 'express';
+export declare const harnessCommandController: {
+    list(req: Request, res: Response): Promise<void>;
+    read(req: Request, res: Response): Promise<void>;
+    create(req: Request, res: Response): Promise<void>;
+    update(req: Request, res: Response): Promise<void>;
+    copy(req: Request, res: Response): Promise<void>;
+    copyDirectory(req: Request, res: Response): Promise<void>;
+    delete(req: Request, res: Response): Promise<void>;
+    /**
+     * Story 30.7 (Task B.2): rewrite every detected secret in the command body
+     * as a `${ENV_REF}` placeholder. The route is the client-side dialog's
+     * `replaceWithEnvRefCommand` action target — distinct from `update` so the
+     * intent is auditable in the access log.
+     */
+    replaceSecretWithEnvRef(req: Request, res: Response): Promise<void>;
+};
+//# sourceMappingURL=harnessCommandController.d.ts.map

package/packages/server/dist/controllers/harnessCommandController.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"harnessCommandController.d.ts","sourceRoot":"","sources":["../../src/controllers/harnessCommandController.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AA6QjD,eAAO,MAAM,wBAAwB;cACnB,OAAO,OAAO,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;cAgBtC,OAAO,OAAO,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;gBAuBpC,OAAO,OAAO,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;gBAgBtC,OAAO,OAAO,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;cA6BxC,OAAO,OAAO,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;uBAgB7B,OAAO,OAAO,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;gBAkB7C,OAAO,OAAO,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IA6BxD;;;;;OAKG;iCACgC,OAAO,OAAO,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;CA0B1E,CAAC"}