studiograph 1.3.47 → 1.3.48-beta.0

package/dist/server/routes/config-api.js

@@ -0,0 +1,256 @@
+/**
+ * Config API routes
+ *
+ * Endpoints for syncing workspace configuration (auth seed, workspace.json,
+ * ABOUT.md, sources, connectors) between a local machine and a remote
+ * Studiograph server via `studiograph push/pull --remote`.
+ *
+ * Folder markdown data is NOT handled here — it flows through the embedded
+ * git HTTP server at /git/:repo (see git-http.ts), which gives us native
+ * conflict detection, commit history, and per-folder granularity.
+ *
+ * All routes require admin authentication.
+ *
+ *   GET  /api/config/bundle   — export workspace config as JSON bundle
+ *   POST /api/config/bundle   — import workspace config bundle
+ */
+import { existsSync, mkdirSync, readFileSync, readdirSync, writeFileSync } from 'fs';
+import { join } from 'path';
+import { Workspace } from '../../core/workspace.js';
+import { isWorkspaceOwner } from '../../services/auth-service.js';
+import { ConnectorManager } from '../../mcp/connector-manager.js';
+import { buildConfigBundle, bundleContainsBootstrapFields } from '../../core/secrets/bundle.js';
+import { SchemaViolationError } from '../../core/schemas/workspace.js';
+const CONFIG_BUNDLE_NAME_RE = /^[a-z0-9][a-z0-9_-]*$/;
+export function isSafeConfigBundleName(name) {
+    return CONFIG_BUNDLE_NAME_RE.test(name);
+}
+function requireAdmin(req, authService) {
+    // Open mode (no users configured) or Bearer token (admin-equivalent) — allow.
+    // The Fastify preHandler auth hook rejects unauthenticated requests when users exist,
+    // so !req.user here means either open mode or API key auth, both of which are allowed.
+    if (!authService.hasUsers())
+        return true;
+    const user = req.user;
+    if (!user)
+        return true; // Bearer token auth — no req.user set, admin-equivalent
+    return isWorkspaceOwner(user.role);
+}
+export async function registerConfigApiRoutes(fastify, workspaceManager, workspacePath, authService) {
+    const sgDir = join(workspacePath, '.studiograph');
+    // ── GET /api/config/bundle ────────────────────────────────────────────────
+    // Export workspace config as a JSON bundle for `studiograph pull --remote`.
+    fastify.get('/api/config/bundle', async (req, reply) => {
+        if (!requireAdmin(req, authService)) {
+            return reply.status(403).send({ error: 'Admin access required' });
+        }
+        const workspace = new Workspace(workspacePath);
+        const config = await workspace.loadConfig();
+        const about = workspace.loadAbout();
+        const authSeed = authService.getSeedData();
+        // Sources
+        const sources = {};
+        const sourcesDir = join(sgDir, 'sources');
+        if (existsSync(sourcesDir)) {
+            for (const entry of readdirSync(sourcesDir)) {
+                if (!entry.endsWith('.json'))
+                    continue;
+                try {
+                    sources[entry.replace('.json', '')] = JSON.parse(readFileSync(join(sourcesDir, entry), 'utf-8'));
+                }
+                catch { /* skip malformed source files */ }
+            }
+        }
+        // Connectors (workspace-level; secrets are stored separately and not exported)
+        const connectors = ConnectorManager.loadWorkspaceConfigs(workspacePath);
+        // Phase 3: every export route runs through buildConfigBundle() so the
+        // GET /api/config/bundle response and the `studiograph push --remote`
+        // CLI produce byte-identical output for the same workspace state.
+        // The helper drops bootstrap-class fields (jwtSecret, apiKey) from
+        // the seed and rejects secret-shaped raw values that slipped past
+        // upstream sanitizers.
+        const sanitized = buildConfigBundle({
+            workspace: config,
+            about,
+            authSeed: authSeed,
+            sources,
+            connectors: connectors,
+        });
+        return reply.send(sanitized);
+    });
+    // ── POST /api/config/bundle ───────────────────────────────────────────────
+    // Import a workspace config bundle from `studiograph push --remote`.
+    fastify.post('/api/config/bundle', async (req, reply) => {
+        if (!requireAdmin(req, authService)) {
+            return reply.status(403).send({ error: 'Admin access required' });
+        }
+        const bundle = req.body;
+        if (!bundle || typeof bundle !== 'object') {
+            return reply.status(400).send({ error: 'Invalid config bundle' });
+        }
+        // Phase 3 + Codex H1/H2: reject any inbound bundle that carries
+        // bootstrap-class fields (jwtSecret, deprecated apiKey), nested
+        // secret slots (r2_config.secret_access_key and friends), or
+        // connector secrets that aren't $ENV_VAR placeholders. The
+        // detector walks the bundle to arbitrary depth and uses the same
+        // predicate as the export sanitizer — asymmetry between the two
+        // is itself a finding.
+        const offendingFields = bundleContainsBootstrapFields({
+            workspace: bundle.workspace,
+            about: bundle.about,
+            authSeed: bundle.authSeed,
+            sources: bundle.sources,
+            connectors: bundle.connectors,
+        });
+        if (offendingFields.length > 0) {
+            return reply.status(400).send({
+                error: `Bundle contains non-exportable fields: ${offendingFields.join(', ')}. ` +
+                    'Secret values belong in environment variables on the target host (or $ENV_VAR ' +
+                    'placeholders for connector slots), not in the workspace bundle.',
+            });
+        }
+        const invalidSourceName = Object.keys(bundle.sources ?? {}).find(name => !isSafeConfigBundleName(name));
+        if (invalidSourceName) {
+            return reply.status(400).send({ error: `Invalid source name: ${invalidSourceName}` });
+        }
+        const invalidConnector = (bundle.connectors ?? []).find(conn => typeof conn?.name !== 'string' || !isSafeConfigBundleName(conn.name));
+        if (invalidConnector) {
+            const name = typeof invalidConnector?.name === 'string' ? invalidConnector.name : String(invalidConnector?.name);
+            return reply.status(400).send({ error: `Invalid connector name: ${name}` });
+        }
+        const workspace = new Workspace(workspacePath);
+        const applied = [];
+        // Phase 9c: any writer below may throw `SchemaViolationError` when
+        // STUDIOGRAPH_SCHEMA_STRICT is on (the default) and the validator
+        // catches a secret-shaped field that slipped past the
+        // bundleContainsBootstrapFields gate above. We translate the throw
+        // into HTTP 400 with the stable `code: 'schema_violation'` so the
+        // CLI can recognize it and the message stays redaction-safe (the
+        // error explicitly does not include the offending value).
+        try {
+            // 1. Auth seed — restore users and API key.
+            // Overwrite mode: this is an explicit admin import; the bundle is the
+            // source of truth, so any local-shadow rows should be replaced.
+            //
+            // Codex M1: errors from `applySeed` are NOT swallowed. Upstream's
+            // 2026-05 hardening made applySeed throw on verification failures
+            // (missing users, stale password_hash after overwrite, etc.) — those
+            // signals must reach the admin via the HTTP response, not get hidden
+            // behind a cheerful "seed file written (apply pending restart)"
+            // string while the running server keeps serving stale credentials.
+            //
+            // Only `SQLITE_BUSY` (DB-locked during heavy traffic) is translated
+            // into a structured 409 retry hint. Everything else (verification
+            // failures, AAD mismatch, JSON parse, unknown SQL error) bubbles to
+            // the outer catch and surfaces as 500 with the redacted message.
+            if (bundle.authSeed) {
+                writeFileSync(join(sgDir, 'auth-seed.json'), JSON.stringify(bundle.authSeed, null, 2), 'utf-8');
+                try {
+                    authService.applySeed({ mode: 'overwrite' });
+                    applied.push(`Users: ${bundle.authSeed.users?.length ?? 0}`);
+                }
+                catch (err) {
+                    if (isSqliteLockError(err)) {
+                        return reply.status(409).send({
+                            code: 'auth_db_locked',
+                            error: 'auth.db is locked by a concurrent writer; the seed file was written ' +
+                                'but the in-process apply could not run. Retry the import or restart the server.',
+                            retry: true,
+                        });
+                    }
+                    throw err;
+                }
+            }
+            // 2. Workspace config — merge, preserving server-specific fields.
+            //
+            // Phase 9b: route through `Workspace.writeConfig()` so this importer
+            // shares the same schema-validator + dual-write seam as every other
+            // writer. The previous direct `writeFileSync` bypassed Phase 9a
+            // telemetry — and would bypass Phase 9c's strict reject too.
+            if (bundle.workspace) {
+                const local = await workspace.loadConfig().catch(() => ({}));
+                const merged = { ...local, ...bundle.workspace };
+                // Preserve fields that belong to the server, not the client machine
+                if (local.server_url)
+                    merged.server_url = local.server_url;
+                if (local.railway)
+                    merged.railway = local.railway;
+                workspace.writeConfig(merged);
+                workspaceManager.reloadConfig();
+                applied.push(`Workspace: ${bundle.workspace.repos?.length ?? 0} folder(s)`);
+            }
+            // 3. ABOUT.md — workspace identity
+            if (bundle.about !== null && bundle.about !== undefined) {
+                writeFileSync(join(sgDir, 'ABOUT.md'), bundle.about, 'utf-8');
+                applied.push('Workspace identity (ABOUT.md)');
+            }
+            // 4. Sources
+            if (bundle.sources && Object.keys(bundle.sources).length > 0) {
+                const sourcesDir = join(sgDir, 'sources');
+                mkdirSync(sourcesDir, { recursive: true });
+                for (const [name, def] of Object.entries(bundle.sources)) {
+                    writeFileSync(join(sourcesDir, `${name}.json`), JSON.stringify(def, null, 2), 'utf-8');
+                }
+                applied.push(`Sources: ${Object.keys(bundle.sources).join(', ')}`);
+            }
+            // 5. Connectors (workspace-level configs, no secrets).
+            //
+            // Phase 9b: route through `ConnectorManager.saveWorkspaceConfig` so
+            // every connector save runs the same schema validator + stripSecrets
+            // re-pass. Inbound bundles should already be sanitized at the source,
+            // but the re-strip is idempotent and keeps the single seam invariant.
+            if (bundle.connectors && bundle.connectors.length > 0) {
+                for (const conn of bundle.connectors) {
+                    ConnectorManager.saveWorkspaceConfig(conn, workspacePath);
+                }
+                applied.push(`Connectors: ${bundle.connectors.map(c => c.name).join(', ')}`);
+            }
+            return reply.send({ ok: true, applied });
+        }
+        catch (err) {
+            if (err instanceof SchemaViolationError) {
+                return reply.status(400).send({
+                    code: SchemaViolationError.code,
+                    scope: err.scope,
+                    // The message from the error class is already redaction-safe —
+                    // it lists field paths + classifications, never values.
+                    error: err.message,
+                    violations: err.violations.map(v => ({
+                        path: v.path,
+                        registryKey: v.registryKey,
+                        classification: v.classification,
+                        reason: v.reason,
+                    })),
+                });
+            }
+            // Codex M1: applySeed throws verification failures from upstream's
+            // 2026-05 hardening (missing users post-commit, stale password_hash
+            // in overwrite mode). They must NOT be swallowed silently behind a
+            // 200 ok=true; the admin needs to know the bundle wasn't actually
+            // applied. Surface as 500 with a structured payload. Lock errors
+            // are handled inline above (409 retry).
+            const code = typeof err?.code === 'string' ? err.code : 'bundle_apply_failed';
+            const message = typeof err?.message === 'string' ? err.message : 'config bundle import failed';
+            return reply.status(500).send({
+                code,
+                error: message,
+            });
+        }
+    });
+}
+/**
+ * Detect better-sqlite3 locking errors. Surfaced when another writer
+ * holds the lock (running server, prior open handle). Caller translates
+ * to HTTP 409 so admin imports during heavy traffic get a sensible
+ * "retry" signal instead of a 500.
+ */
+function isSqliteLockError(err) {
+    if (!err || typeof err !== 'object')
+        return false;
+    const code = err.code;
+    if (code === 'SQLITE_BUSY' || code === 'SQLITE_LOCKED')
+        return true;
+    const msg = err.message;
+    return typeof msg === 'string' && /database (?:is )?locked|SQLITE_BUSY|SQLITE_LOCKED/i.test(msg);
+}
+//# sourceMappingURL=config-api.js.map

package/dist/server/routes/config-api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-api.js","sourceRoot":"","sources":["../../../src/server/routes/config-api.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAGH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,IAAI,CAAC;AACrF,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AAEpD,OAAO,EAAE,gBAAgB,EAAmC,MAAM,gCAAgC,CAAC;AACnG,OAAO,EAAE,gBAAgB,EAAwB,MAAM,gCAAgC,CAAC;AACxF,OAAO,EAAE,iBAAiB,EAAE,6BAA6B,EAAE,MAAM,8BAA8B,CAAC;AAChG,OAAO,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AAUvE,MAAM,qBAAqB,GAAG,uBAAuB,CAAC;AAEtD,MAAM,UAAU,sBAAsB,CAAC,IAAY;IACjD,OAAO,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,YAAY,CAAC,GAAQ,EAAE,WAAwB;IACtD,8EAA8E;IAC9E,sFAAsF;IACtF,uFAAuF;IACvF,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE;QAAE,OAAO,IAAI,CAAC;IACzC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;IACtB,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC,CAAC,wDAAwD;IAChF,OAAO,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,OAAwB,EACxB,gBAAkC,EAClC,aAAqB,EACrB,WAAwB;IAExB,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC;IAElD,6EAA6E;IAC7E,4EAA4E;IAE5E,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACrD,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,CAAC;YACpC,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;QACpE,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,SAAS,CAAC,aAAa,CAAC,CAAC;QAC/C,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,UAAU,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,SAAS,CAAC,SAAS,EAAE,CAAC;QACpC,MAAM,QAAQ,GAAG,WAAW,CAAC,WAAW,EAAE,CAAC;QAE3C,UAAU;QACV,MAAM,OAAO,GAAwB,EAAE,CAAC;QACxC,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QAC1C,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC3B,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC5C,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC;oBAAE,SAAS;gBACvC,IAAI,CAAC;oBACH,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;gBACnG,CAAC;gBAAC,MAAM,CAAC,CAAC,iCAAiC,CAAC,CAAC;YAC/C,CAAC;QACH,CAAC;QAED,+EAA+E;QAC/E,MAAM,UAAU,GAAG,gBAAgB,CAAC,oBAAoB,CAAC,aAAa,CAAC,CAAC;QAExE,sEAAsE;QACtE,sEAAsE;QACtE,kEAAkE;QAClE,mEAAmE;QACnE,kEAAkE;QAClE,uBAAuB;QACvB,MAAM,SAAS,GAAG,iBAAiB,CAAC;YAClC,SAAS,EAAE,MAA4C;YACvD,KAAK;YACL,QAAQ,EAAE,QAAqD;YAC/D,OAAO;YACP,UAAU,EAAE,UAAuD;SACpE,CAAC,CAAC;QACH,OAAO,KAAK,CAAC,IAAI,CAAC,SAAoC,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,6EAA6E;IAC7E,qEAAqE;IAErE,OAAO,CAAC,IAAI,CAAyB,oBAAoB,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QAC9E,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,CAAC;YACpC,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;QACpE,CAAC;QAED,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC;QACxB,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC1C,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;QACpE,CAAC;QAED,gEAAgE;QAChE,gEAAgE;QAChE,6DAA6D;QAC7D,2DAA2D;QAC3D,iEAAiE;QACjE,gEAAgE;QAChE,uBAAuB;QACvB,MAAM,eAAe,GAAG,6BAA6B,CAAC;YACpD,SAAS,EAAE,MAAM,CAAC,SAA2C;YAC7D,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,QAAQ,EAAE,MAAM,CAAC,QAAqD;YACtE,OAAO,EAAE,MAAM,CAAC,OAAkC;YAClD,UAAU,EAAE,MAAM,CAAC,UAAuD;SAC3E,CAAC,CAAC;QACH,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/B,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBAC5B,KAAK,EAAE,0CAA0C,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;oBAC7E,gFAAgF;oBAChF,iEAAiE;aACpE,CAAC,CAAC;QACL,CAAC;QAED,MAAM,iBAAiB,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC;QACxG,IAAI,iBAAiB,EAAE,CAAC;YACtB,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wBAAwB,iBAAiB,EAAE,EAAE,CAAC,CAAC;QACxF,CAAC;QAED,MAAM,gBAAgB,GAAG,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,IAAI,EAAE,IAAI,KAAK,QAAQ,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACtI,IAAI,gBAAgB,EAAE,CAAC;YACrB,MAAM,IAAI,GAAG,OAAO,gBAAgB,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC;YACjH,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,2BAA2B,IAAI,EAAE,EAAE,CAAC,CAAC;QAC9E,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,SAAS,CAAC,aAAa,CAAC,CAAC;QAC/C,MAAM,OAAO,GAAa,EAAE,CAAC;QAE7B,mEAAmE;QACnE,kEAAkE;QAClE,sDAAsD;QACtD,mEAAmE;QACnE,kEAAkE;QAClE,iEAAiE;QACjE,0DAA0D;QAC1D,IAAI,CAAC;YAEL,4CAA4C;YAC5C,sEAAsE;YACtE,gEAAgE;YAChE,EAAE;YACF,kEAAkE;YAClE,kEAAkE;YAClE,qEAAqE;YACrE,qEAAqE;YACrE,gEAAgE;YAChE,mEAAmE;YACnE,EAAE;YACF,oEAAoE;YACpE,kEAAkE;YAClE,oEAAoE;YACpE,iEAAiE;YACjE,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACpB,aAAa,CAAC,IAAI,CAAC,KAAK,EAAE,gBAAgB,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;gBAChG,IAAI,CAAC;oBACH,WAAW,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;oBAC7C,OAAO,CAAC,IAAI,CAAC,UAAU,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC,EAAE,CAAC,CAAC;gBAC/D,CAAC;gBAAC,OAAO,GAAQ,EAAE,CAAC;oBAClB,IAAI,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC;wBAC3B,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;4BAC5B,IAAI,EAAE,gBAAgB;4BACtB,KAAK,EAAE,sEAAsE;gCAC3E,iFAAiF;4BACnF,KAAK,EAAE,IAAI;yBACZ,CAAC,CAAC;oBACL,CAAC;oBACD,MAAM,GAAG,CAAC;gBACZ,CAAC;YACH,CAAC;YAED,kEAAkE;YAClE,EAAE;YACF,qEAAqE;YACrE,oEAAoE;YACpE,gEAAgE;YAChE,6DAA6D;YAC7D,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;gBACrB,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAQ,CAAC,CAAC;gBACpE,MAAM,MAAM,GAAG,EAAE,GAAG,KAAK,EAAE,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;gBACjD,oEAAoE;gBACpE,IAAK,KAAa,CAAC,UAAU;oBAAG,MAAc,CAAC,UAAU,GAAI,KAAa,CAAC,UAAU,CAAC;gBACtF,IAAK,KAAa,CAAC,OAAO;oBAAG,MAAc,CAAC,OAAO,GAAI,KAAa,CAAC,OAAO,CAAC;gBAC7E,SAAS,CAAC,WAAW,CAAC,MAAa,CAAC,CAAC;gBACrC,gBAAgB,CAAC,YAAY,EAAE,CAAC;gBAChC,OAAO,CAAC,IAAI,CAAC,cAAc,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC,YAAY,CAAC,CAAC;YAC9E,CAAC;YAED,mCAAmC;YACnC,IAAI,MAAM,CAAC,KAAK,KAAK,IAAI,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxD,aAAa,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;gBAC9D,OAAO,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;YAChD,CAAC;YAED,aAAa;YACb,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC7D,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;gBAC1C,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC3C,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;oBACzD,aAAa,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,IAAI,OAAO,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;gBACzF,CAAC;gBACD,OAAO,CAAC,IAAI,CAAC,YAAY,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACrE,CAAC;YAED,uDAAuD;YACvD,EAAE;YACF,oEAAoE;YACpE,qEAAqE;YACrE,sEAAsE;YACtE,sEAAsE;YACtE,IAAI,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;oBACrC,gBAAgB,CAAC,mBAAmB,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;gBAC5D,CAAC;gBACD,OAAO,CAAC,IAAI,CAAC,eAAe,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC/E,CAAC;YAED,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,IAAI,GAAG,YAAY,oBAAoB,EAAE,CAAC;gBACxC,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBAC5B,IAAI,EAAE,oBAAoB,CAAC,IAAI;oBAC/B,KAAK,EAAE,GAAG,CAAC,KAAK;oBAChB,+DAA+D;oBAC/D,wDAAwD;oBACxD,KAAK,EAAE,GAAG,CAAC,OAAO;oBAClB,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;wBACnC,IAAI,EAAE,CAAC,CAAC,IAAI;wBACZ,WAAW,EAAE,CAAC,CAAC,WAAW;wBAC1B,cAAc,EAAE,CAAC,CAAC,cAAc;wBAChC,MAAM,EAAE,CAAC,CAAC,MAAM;qBACjB,CAAC,CAAC;iBACJ,CAAC,CAAC;YACL,CAAC;YACD,mEAAmE;YACnE,oEAAoE;YACpE,mEAAmE;YACnE,kEAAkE;YAClE,iEAAiE;YACjE,wCAAwC;YACxC,MAAM,IAAI,GAAG,OAAO,GAAG,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,qBAAqB,CAAC;YAC9E,MAAM,OAAO,GAAG,OAAO,GAAG,EAAE,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,6BAA6B,CAAC;YAC/F,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBAC5B,IAAI;gBACJ,KAAK,EAAE,OAAO;aACf,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,SAAS,iBAAiB,CAAC,GAAY;IACrC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAClD,MAAM,IAAI,GAAI,GAA0B,CAAC,IAAI,CAAC;IAC9C,IAAI,IAAI,KAAK,aAAa,IAAI,IAAI,KAAK,eAAe;QAAE,OAAO,IAAI,CAAC;IACpE,MAAM,GAAG,GAAI,GAA6B,CAAC,OAAO,CAAC;IACnD,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,oDAAoD,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACnG,CAAC"}

package/dist/server/routes/connectors-api.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Connectors API routes
+ *
+ * REST endpoints for MCP connector management:
+ *   GET    /api/connectors                        — list configured MCP connectors
+ *   POST   /api/connectors/import                 — import connector(s) from JSON config block
+ *   GET    /api/connectors/:name/config           — get connector config (secrets masked)
+ *   POST   /api/connectors/:name/config           — create/update connector config
+ *   DELETE /api/connectors/:name/config           — remove connector config
+ *   POST   /api/connectors/:name/oauth/connect    — initiate OAuth flow (MCP SDK auto-discovery)
+ *   GET    /api/oauth/callback/:name              — OAuth callback (browser redirect)
+ *   GET    /api/connectors/:name/oauth/status     — poll OAuth connection status
+ *   POST   /api/connectors/:name/oauth/disconnect — clear OAuth tokens
+ */
+import type { FastifyInstance } from 'fastify';
+import { type AuthService } from '../../services/auth-service.js';
+export declare function registerConnectorsApiRoutes(fastify: FastifyInstance, authService: AuthService, workspacePath: string): Promise<void>;