studiograph 1.3.48-next.26 → 1.3.48-next.261

package/dist/server/routes/field-library-api.js

@@ -0,0 +1,126 @@
+/**
+ * Field Library API routes
+ *
+ * CRUD over the workspace's reusable custom field definitions (the field
+ * library). A definition is *soft* metadata — it drives the field picker and
+ * agent awareness, but it never feeds SchemaRegistry, so applying a field is
+ * an ordinary entity frontmatter write and an off-list value is never
+ * rejected here.
+ *
+ * Auth: any authenticated member (no owner gate) — the global auth hook
+ * already rejects unauthenticated callers when users exist. Open mode / API
+ * key are admin-equivalent (no req.user), same as other routes.
+ *
+ * Persistence mirrors config-api: Workspace.writeConfig(next) →
+ * workspaceManager.reloadConfig() (re-reads workspace.json into the live
+ * in-memory config). No SchemaRegistry rebuild is needed — the library is not
+ * compiled into Zod.
+ *
+ *   GET    /api/field-library
+ *   POST   /api/field-library
+ *   PUT    /api/field-library/:key
+ *   DELETE /api/field-library/:key
+ *   GET    /api/field-library/:key/usage?value=
+ */
+import { Workspace } from '../../core/workspace.js';
+import { addFieldDef, updateFieldDef, removeFieldDef, getFieldDef, getFieldLibrary, FieldLibraryError, } from '../../core/field-library.js';
+import { reqUser } from './graph-api-access.js';
+function mapError(err) {
+    switch (err.code) {
+        case 'key_exists': return { status: 409, code: err.code };
+        case 'key_not_found': return { status: 404, code: err.code };
+        case 'invalid_field': return { status: 400, code: err.code };
+        default: return { status: 400, code: 'invalid_field' };
+    }
+}
+export async function registerFieldLibraryApiRoutes(fastify, workspaceManager, _authService) {
+    /** Persist a config mutation: write workspace.json + refresh the live config. */
+    async function persist(next) {
+        const workspace = new Workspace(workspaceManager.getWorkspacePath());
+        workspace.writeConfig(next);
+        workspaceManager.reloadConfig();
+    }
+    // GET /api/field-library — list all definitions.
+    fastify.get('/api/field-library', async (_req, reply) => {
+        return reply.send({ fields: getFieldLibrary(workspaceManager.getConfig()) });
+    });
+    // POST /api/field-library — define a new field.
+    fastify.post('/api/field-library', async (req, reply) => {
+        const { key, label, options } = req.body ?? {};
+        try {
+            const next = addFieldDef(workspaceManager.getConfig(), {
+                key,
+                options,
+                ...(label !== undefined ? { label } : {}),
+                ...(reqUser(req)?.handle ? { created_by: reqUser(req).handle } : {}),
+            });
+            await persist(next);
+        }
+        catch (err) {
+            if (err instanceof FieldLibraryError) {
+                const { status, code } = mapError(err);
+                return reply.status(status).send({ code, error: err.message });
+            }
+            throw err;
+        }
+        return reply.send({ ok: true, fields: getFieldLibrary(workspaceManager.getConfig()) });
+    });
+    // PUT /api/field-library/:key — edit options/label. Returns affected-entry
+    // counts for any option values dropped by the edit (orphan warning).
+    fastify.put('/api/field-library/:key', async (req, reply) => {
+        const { key } = req.params;
+        const body = req.body ?? {};
+        const before = getFieldDef(workspaceManager.getConfig(), key);
+        const affected = {};
+        if (before?.options && Array.isArray(body.options)) {
+            const nextSet = new Set(body.options);
+            for (const v of before.options) {
+                if (!nextSet.has(v))
+                    affected[v] = workspaceManager.countEntitiesWithFieldValue(key, v);
+            }
+        }
+        try {
+            const next = updateFieldDef(workspaceManager.getConfig(), key, {
+                ...(body.options !== undefined ? { options: body.options } : {}),
+                ...(body.label !== undefined ? { label: body.label } : {}),
+            });
+            await persist(next);
+        }
+        catch (err) {
+            if (err instanceof FieldLibraryError) {
+                const { status, code } = mapError(err);
+                return reply.status(status).send({ code, error: err.message });
+            }
+            throw err;
+        }
+        return reply.send({ ok: true, fields: getFieldLibrary(workspaceManager.getConfig()), affected });
+    });
+    // DELETE /api/field-library/:key — remove the definition. Entry values are
+    // left on disk. Returns the count of entries that still held the field.
+    fastify.delete('/api/field-library/:key', async (req, reply) => {
+        const { key } = req.params;
+        const affected = workspaceManager.countEntitiesWithFieldValue(key);
+        try {
+            const next = removeFieldDef(workspaceManager.getConfig(), key);
+            await persist(next);
+        }
+        catch (err) {
+            if (err instanceof FieldLibraryError) {
+                const { status, code } = mapError(err);
+                return reply.status(status).send({ code, error: err.message });
+            }
+            throw err;
+        }
+        return reply.send({ ok: true, fields: getFieldLibrary(workspaceManager.getConfig()), affected });
+    });
+    // GET /api/field-library/:key/usage?value= — entry counts behind the
+    // orphan-warning before an option/field removal.
+    fastify.get('/api/field-library/:key/usage', async (req, reply) => {
+        const { key } = req.params;
+        const { value } = req.query;
+        const total = workspaceManager.countEntitiesWithFieldValue(key);
+        const forValue = value !== undefined ? workspaceManager.countEntitiesWithFieldValue(key, value) : undefined;
+        return reply.send({ total, ...(forValue !== undefined ? { value, count: forValue } : {}) });
+    });
+}
+//# sourceMappingURL=field-library-api.js.map

package/dist/server/routes/field-library-api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"field-library-api.js","sourceRoot":"","sources":["../../../src/server/routes/field-library-api.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAGH,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AAGpD,OAAO,EACL,WAAW,EACX,cAAc,EACd,cAAc,EACd,WAAW,EACX,eAAe,EACf,iBAAiB,GAClB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAEhD,SAAS,QAAQ,CAAC,GAAsB;IACtC,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC;QACjB,KAAK,YAAY,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC;QAC1D,KAAK,eAAe,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC;QAC7D,KAAK,eAAe,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC;QAC7D,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;IACzD,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,OAAwB,EACxB,gBAAkC,EAClC,YAAyB;IAEzB,iFAAiF;IACjF,KAAK,UAAU,OAAO,CAAC,IAAmD;QACxE,MAAM,SAAS,GAAG,IAAI,SAAS,CAAC,gBAAgB,CAAC,gBAAgB,EAAE,CAAC,CAAC;QACrE,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAC5B,gBAAgB,CAAC,YAAY,EAAE,CAAC;IAClC,CAAC;IAED,iDAAiD;IACjD,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;QACtD,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,eAAe,CAAC,gBAAgB,CAAC,SAAS,EAAS,CAAC,EAAE,CAAC,CAAC;IACtF,CAAC,CAAC,CAAC;IAEH,gDAAgD;IAChD,OAAO,CAAC,IAAI,CAET,oBAAoB,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QAC5C,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC,IAAI,IAAK,EAAU,CAAC;QACxD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,WAAW,CAAC,gBAAgB,CAAC,SAAS,EAAS,EAAE;gBAC5D,GAAG;gBACH,OAAO;gBACP,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,GAAG,CAAE,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACtE,CAAC,CAAC;YACH,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,iBAAiB,EAAE,CAAC;gBACrC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;gBACvC,OAAO,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YACjE,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,eAAe,CAAC,gBAAgB,CAAC,SAAS,EAAS,CAAC,EAAE,CAAC,CAAC;IAChG,CAAC,CAAC,CAAC;IAEH,2EAA2E;IAC3E,qEAAqE;IACrE,OAAO,CAAC,GAAG,CAGR,yBAAyB,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACjD,MAAM,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;QAC3B,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;QAE5B,MAAM,MAAM,GAAG,WAAW,CAAC,gBAAgB,CAAC,SAAS,EAAS,EAAE,GAAG,CAAC,CAAC;QACrE,MAAM,QAAQ,GAA2B,EAAE,CAAC;QAC5C,IAAI,MAAM,EAAE,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACnD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACtC,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBAC/B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;oBAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,gBAAgB,CAAC,2BAA2B,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YAC1F,CAAC;QACH,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,cAAc,CAAC,gBAAgB,CAAC,SAAS,EAAS,EAAE,GAAG,EAAE;gBACpE,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChE,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC3D,CAAC,CAAC;YACH,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,iBAAiB,EAAE,CAAC;gBACrC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;gBACvC,OAAO,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YACjE,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,eAAe,CAAC,gBAAgB,CAAC,SAAS,EAAS,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC1G,CAAC,CAAC,CAAC;IAEH,2EAA2E;IAC3E,wEAAwE;IACxE,OAAO,CAAC,MAAM,CAA8B,yBAAyB,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QAC1F,MAAM,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;QAC3B,MAAM,QAAQ,GAAG,gBAAgB,CAAC,2BAA2B,CAAC,GAAG,CAAC,CAAC;QACnE,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,cAAc,CAAC,gBAAgB,CAAC,SAAS,EAAS,EAAE,GAAG,CAAC,CAAC;YACtE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,iBAAiB,EAAE,CAAC;gBACrC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;gBACvC,OAAO,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YACjE,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,eAAe,CAAC,gBAAgB,CAAC,SAAS,EAAS,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC1G,CAAC,CAAC,CAAC;IAEH,qEAAqE;IACrE,iDAAiD;IACjD,OAAO,CAAC,GAAG,CAGR,+BAA+B,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACvD,MAAM,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;QAC3B,MAAM,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC;QAC5B,MAAM,KAAK,GAAG,gBAAgB,CAAC,2BAA2B,CAAC,GAAG,CAAC,CAAC;QAChE,MAAM,QAAQ,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,2BAA2B,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC5G,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9F,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/server/routes/git-http.d.ts

@@ -12,12 +12,12 @@
  *
  * Access rules:
  *   - No users configured (open mode) → full access
- *   - Admin → all collections
- *   - Member → only granted collections
+ *   - Admin → all folders
+ *   - Member → only granted folders
  *   - Private repos → owner only
  */
 import type { FastifyInstance } from 'fastify';
 import type { WsHub } from '../ws-hub.js';
 import type { WorkspaceManager } from '../../core/workspace-manager.js';
-import type { AuthService } from '../../services/auth-service.js';
+import { type AuthService } from '../../services/auth-service.js';
 export declare function registerGitHttpRoutes(fastify: FastifyInstance, workspaceManager: WorkspaceManager, authService: AuthService, workspacePath: string, wsHub?: WsHub): Promise<void>;

package/dist/server/routes/git-http.js

@@ -12,21 +12,24 @@
  *
  * Access rules:
  *   - No users configured (open mode) → full access
- *   - Admin → all collections
- *   - Member → only granted collections
+ *   - Admin → all folders
+ *   - Member → only granted folders
  *   - Private repos → owner only
  */
 import { spawn } from 'child_process';
 import { join } from 'path';
 import { existsSync } from 'fs';
+import * as access from '../../services/access-control.js';
 import { checkRateLimit, recordFailedAttempt, clearAttempts } from './auth-api.js';
 /**
  * Resolve Basic Auth header to an AuthUser, or null if open mode.
  * Returns { user } on success, or { error, statusCode } on failure.
  */
 function authenticateBasic(authHeader, authService) {
-    // Open mode — no users configured, allow everything
-    if (!authService.hasUsers()) {
+    // Open mode — no users configured (and not managed cloud), allow everything.
+    // Managed-cloud workspaces require auth even before the first user lands —
+    // same predicate as the web auth hook.
+    if (access.isOpenMode(authService)) {
         return { user: null };
     }
     if (!authHeader || !authHeader.startsWith('Basic ')) {
@@ -43,20 +46,26 @@ function authenticateBasic(authHeader, authService) {
     if (checkRateLimit(email) > 0) {
         return { error: 'Too many login attempts', statusCode: 429 };
     }
-    // Accept API key as password (any username) — used by MCP and CI
-    if (authService.validateApiKey(password)) {
-        return { user: { id: 0, email: '', displayName: 'API', role: 'admin' } };
+    // Accept a per-user API token as password (username is ignored). Tokens
+    // are minted via POST /api/auth/tokens and carry a concrete user identity.
+    if (password.startsWith('sg_')) {
+        const tokenUser = authService.verifyApiToken(password);
+        if (tokenUser) {
+            clearAttempts(email);
+            return { user: tokenUser };
+        }
+        return { error: 'Invalid or revoked API token', statusCode: 401 };
     }
-    // Accept JWT token as password (issued by studiograph join — per-user access control).
-    // JWTs always start with "eyJ" (base64url of `{"`) so we can detect them without
-    // attempting a failed password auth first.
+    // Accept JWT token as password (issued by login → cookie, or by `studiograph
+    // clone` bootstrap). JWTs always start with "eyJ" (base64url of `{"`) so we
+    // can detect them without attempting a failed password auth first.
     if (password.startsWith('eyJ')) {
         const jwtUser = authService.verifyToken(password);
         if (jwtUser) {
             clearAttempts(email);
             return { user: jwtUser };
         }
-        return { error: 'Invalid or expired token — run `studiograph join` again', statusCode: 401 };
+        return { error: 'Invalid or expired token — run `studiograph admin token issue` to mint a fresh API token', statusCode: 401 };
     }
     const result = authService.authenticate(email, password);
     if (!result) {
@@ -68,11 +77,18 @@ function authenticateBasic(authHeader, authService) {
 }
 /**
  * Check whether a user can access the named folder via git.
+ *
+ * The workspace owner gets implicit access to *shared* folders (memberCount > 1)
+ * they haven't been explicitly added to — shared state is owner-visible by design.
+ * Solo folders (memberCount === 1, i.e. de-facto private) remain gated: only the
+ * single member can access, even if the caller is the workspace owner.
  */
-function canAccessCollection(user, repoName, authService, _workspaceManager) {
-    if (!user)
-        return true; // open mode / API key
-    return authService.getUserFolders(user.id).includes(repoName);
+function canAccessFolder(user, repoName, authService, workspaceManager, includePrivate = false) {
+    // Delegate to the shared helper so personal-folder restrictions apply
+    // here too — a stale folder_access row must not let a non-owner clone
+    // someone else's personal repo via git transport. `includePrivate` is
+    // an owner-only admin escalation (see access-control.ts).
+    return access.hasRepoAccess(user ?? undefined, repoName, workspaceManager, authService, { includePrivate });
 }
 /** Returns true only if the path is an initialized git repo. */
 function isGitRepo(repoPath) {
@@ -82,16 +98,25 @@ function isGitRepo(repoPath) {
  * Resolve a repo name to its absolute path on disk.
  * Returns null if the repo doesn't exist, or is private and the user isn't the owner.
  */
-function resolveRepoPath(repoName, workspaceManager, workspacePath, user, authService) {
+function resolveRepoPath(repoName, workspaceManager, workspacePath, user, authService, includePrivate = false) {
     const config = workspaceManager.getRepoConfig(repoName);
     if (!config)
         return null;
-    // Folder membership gates access — solo-admin (de-facto private) and
-    // shared folders alike.
-    if (user && !authService.getUserFolders(user.id).includes(repoName))
+    // Delegate to the shared access-control helper — same rule as canAccessFolder
+    // and the rest of the API layer (personal-folder restriction enforced).
+    if (!access.hasRepoAccess(user ?? undefined, repoName, workspaceManager, authService, { includePrivate })) {
         return null;
+    }
     return join(workspacePath, config.path);
 }
+/** Parse the `X-Studiograph-Include-Private` header from a git HTTP
+ *  request into a boolean. The flag is gated to owners by the access
+ *  helpers; setting it as a non-owner is a no-op. */
+function reqIncludePrivate(req) {
+    const raw = req.headers['x-studiograph-include-private'];
+    const v = Array.isArray(raw) ? raw[0] : raw;
+    return v === '1' || v === 'true';
+}
 export async function registerGitHttpRoutes(fastify, workspaceManager, authService, workspacePath, wsHub) {
     // GET /git/:repo/info/refs?service=git-upload-pack|git-receive-pack
     fastify.get('/git/:repo/info/refs', async (req, reply) => {
@@ -106,17 +131,18 @@ export async function registerGitHttpRoutes(fastify, workspaceManager, authServi
             reply.header('WWW-Authenticate', 'Basic realm="Studiograph Git"');
             return reply.status(auth.statusCode).send(auth.error);
         }
-        // Resolve repo
-        const repoPath = resolveRepoPath(repo, workspaceManager, workspacePath, auth.user, authService);
+        // Resolve repo (owner-only `include_private` header for admin ops)
+        const includePrivate = reqIncludePrivate(req);
+        const repoPath = resolveRepoPath(repo, workspaceManager, workspacePath, auth.user, authService, includePrivate);
         if (!repoPath || !isGitRepo(repoPath)) {
             return reply.status(404).send('Repository not found');
         }
-        // Check collection access
-        if (!canAccessCollection(auth.user, repo, authService, workspaceManager)) {
+        // Check folder access
+        if (!canAccessFolder(auth.user, repo, authService, workspaceManager, includePrivate)) {
             return reply.status(404).send('Repository not found');
         }
-        // Push requires collection access (admin → all, member → granted only)
-        if (service === 'git-receive-pack' && !canAccessCollection(auth.user, repo, authService, workspaceManager)) {
+        // Push requires folder access (admin → all, member → granted only)
+        if (service === 'git-receive-pack' && !canAccessFolder(auth.user, repo, authService, workspaceManager, includePrivate)) {
             return reply.status(403).send('Push access denied');
         }
         // Spawn git to advertise refs
@@ -158,11 +184,12 @@ export async function registerGitHttpRoutes(fastify, workspaceManager, authServi
             reply.header('WWW-Authenticate', 'Basic realm="Studiograph Git"');
             return reply.status(auth.statusCode).send(auth.error);
         }
-        const repoPath = resolveRepoPath(repo, workspaceManager, workspacePath, auth.user, authService);
+        const includePrivate = reqIncludePrivate(req);
+        const repoPath = resolveRepoPath(repo, workspaceManager, workspacePath, auth.user, authService, includePrivate);
         if (!repoPath || !isGitRepo(repoPath)) {
             return reply.status(404).send('Repository not found');
         }
-        if (!canAccessCollection(auth.user, repo, authService, workspaceManager)) {
+        if (!canAccessFolder(auth.user, repo, authService, workspaceManager, includePrivate)) {
             return reply.status(404).send('Repository not found');
         }
         reply.raw.writeHead(200, {
@@ -198,14 +225,46 @@ export async function registerGitHttpRoutes(fastify, workspaceManager, authServi
             reply.header('WWW-Authenticate', 'Basic realm="Studiograph Git"');
             return reply.status(auth.statusCode).send(auth.error);
         }
-        const repoPath = resolveRepoPath(repo, workspaceManager, workspacePath, auth.user, authService);
+        const includePrivate = reqIncludePrivate(req);
+        const repoPath = resolveRepoPath(repo, workspaceManager, workspacePath, auth.user, authService, includePrivate);
         if (!repoPath || !isGitRepo(repoPath)) {
             return reply.status(404).send('Repository not found');
         }
-        // Push requires collection access (admin → all, member → granted only)
-        if (!canAccessCollection(auth.user, repo, authService, workspaceManager)) {
+        // Push requires folder access (admin → all, member → granted only)
+        if (!canAccessFolder(auth.user, repo, authService, workspaceManager, includePrivate)) {
             return reply.status(403).send('Push access denied');
         }
+        // Clean-tree guard. receive.denyCurrentBranch=updateInstead would
+        // otherwise overwrite uncommitted server-side changes via the
+        // working-tree reset that updateInstead performs. Auto-commit any
+        // pending state under a system author before accepting the push.
+        try {
+            const graph = workspaceManager.getGraph(repo);
+            const gitService = graph.getGitService();
+            if (gitService && gitService.hasUncommittedChanges()) {
+                const status = gitService.getStatus();
+                const fileCount = status.modified.length + status.added.length + status.deleted.length + status.untracked.length;
+                const message = `recovery: commit ${fileCount} pending file(s) before incoming push`;
+                const recoveryUser = {
+                    id: 'studiograph-recovery',
+                    name: 'Studiograph (recovery)',
+                    email: 'recovery@studiograph.local',
+                };
+                gitService.commitAll(message, recoveryUser);
+                const { recordCommitAudit } = await import('../commit-audit.js');
+                recordCommitAudit(workspacePath, {
+                    repo,
+                    source: 'recovery',
+                    user: recoveryUser,
+                    message,
+                    fileCount,
+                });
+                fastify.log.warn(`[git-http] auto-committed ${fileCount} pending file(s) in ${repo} before push`);
+            }
+        }
+        catch (err) {
+            fastify.log.warn({ err }, '[git-http] pre-push clean-tree guard failed (continuing)');
+        }
         reply.raw.writeHead(200, {
             'Content-Type': 'application/x-git-receive-pack-result',
             'Cache-Control': 'no-cache',
@@ -225,6 +284,7 @@ export async function registerGitHttpRoutes(fastify, workspaceManager, authServi
                     type: 'repo_sync', repo,
                     source: 'git-push',
                     actor: auth.user?.displayName ?? 'Git',
+                    workspaceWide: access.isWorkspaceWide(repo, workspaceManager),
                     timestamp: new Date().toISOString(),
                 });
             }

package/dist/server/routes/git-http.js.map

@@ -1 +1 @@
-{"version":3,"file":"git-http.js","sourceRoot":"","sources":["../../../src/server/routes/git-http.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAGH,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AACtC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAIhC,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAMnF;;;GAGG;AACH,SAAS,iBAAiB,CACxB,UAA8B,EAC9B,WAAwB;IAExB,oDAAoD;IACpD,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,EAAE,CAAC;QAC5B,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACxB,CAAC;IAED,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpD,OAAO,EAAE,KAAK,EAAE,yBAAyB,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;IAC/D,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC7E,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,QAAQ,KAAK,CAAC,CAAC,EAAE,CAAC;QACpB,OAAO,EAAE,KAAK,EAAE,qBAAqB,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;IAC3D,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;IAE7C,mBAAmB;IACnB,IAAI,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,yBAAyB,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;IAC/D,CAAC;IAED,iEAAiE;IACjE,IAAI,WAAW,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzC,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAS,EAAE,CAAC;IAClF,CAAC;IAED,uFAAuF;IACvF,iFAAiF;IACjF,2CAA2C;IAC3C,IAAI,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,WAAW,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QAClD,IAAI,OAAO,EAAE,CAAC;YACZ,aAAa,CAAC,KAAK,CAAC,CAAC;YACrB,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QAC3B,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,yDAAyD,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;IAC/F,CAAC;IAED,MAAM,MAAM,GAAG,WAAW,CAAC,YAAY,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACzD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,mBAAmB,CAAC,KAAK,CAAC,CAAC;QAC3B,OAAO,EAAE,KAAK,EAAE,qBAAqB,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;IAC3D,CAAC;IAED,aAAa,CAAC,KAAK,CAAC,CAAC;IACrB,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;AAC/B,CAAC;AAED;;GAEG;AACH,SAAS,mBAAmB,CAC1B,IAAqB,EACrB,QAAgB,EAChB,WAAwB,EACxB,iBAAmC;IAEnC,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC,CAAC,sBAAsB;IAC9C,OAAO,WAAW,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAChE,CAAC;AAED,gEAAgE;AAChE,SAAS,SAAS,CAAC,QAAgB;IACjC,OAAO,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;AAC5C,CAAC;AAED;;;GAGG;AACH,SAAS,eAAe,CACtB,QAAgB,EAChB,gBAAkC,EAClC,aAAqB,EACrB,IAAqB,EACrB,WAAwB;IAExB,MAAM,MAAM,GAAG,gBAAgB,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;IACxD,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,qEAAqE;IACrE,wBAAwB;IACxB,IAAI,IAAI,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IACjF,OAAO,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,OAAwB,EACxB,gBAAkC,EAClC,WAAwB,EACxB,aAAqB,EACrB,KAAa;IAGb,oEAAoE;IACpE,OAAO,CAAC,GAAG,CACT,sBAAsB,EACtB,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,MAAM,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;QAC5B,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC;QAElC,IAAI,OAAO,KAAK,iBAAiB,IAAI,OAAO,KAAK,kBAAkB,EAAE,CAAC;YACpE,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;QACpE,CAAC;QAED,eAAe;QACf,MAAM,IAAI,GAAG,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;QACvE,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;YACpB,KAAK,CAAC,MAAM,CAAC,kBAAkB,EAAE,+BAA+B,CAAC,CAAC;YAClE,OAAO,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxD,CAAC;QAED,eAAe;QACf,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,EAAE,gBAAgB,EAAE,aAAa,EAAE,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAChG,IAAI,CAAC,QAAQ,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;YACtC,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACxD,CAAC;QAED,0BAA0B;QAC1B,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,gBAAgB,CAAC,EAAE,CAAC;YACzE,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACxD,CAAC;QAED,uEAAuE;QACvE,IAAI,OAAO,KAAK,kBAAkB,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,gBAAgB,CAAC,EAAE,CAAC;YAC3G,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QACtD,CAAC;QAED,8BAA8B;QAC9B,MAAM,UAAU,GAAG,OAAO,KAAK,iBAAiB,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,cAAc,CAAC;QAElF,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;YACvB,cAAc,EAAE,iBAAiB,OAAO,gBAAgB;YACxD,eAAe,EAAE,UAAU;SAC5B,CAAC,CAAC;QAEH,2CAA2C;QAC3C,MAAM,MAAM,GAAG,aAAa,OAAO,IAAI,CAAC;QACxC,MAAM,SAAS,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACpE,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,SAAS,GAAG,MAAM,EAAE,CAAC,CAAC;QACzC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAExB,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,QAAQ,CAAC,EAAE;YACvF,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;SAChC,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;QAE5C,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE;YACtC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,UAAU,YAAY,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACnE,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACpB,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;QAClB,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACvB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,uBAAuB,UAAU,EAAE,CAAC,CAAC;YAC5D,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBAC3B,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YAC3B,CAAC;YACD,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;QAClB,CAAC,CAAC,CAAC;QAEH,yCAAyC;QACzC,OAAO,KAAK,CAAC;IACf,CAAC,CACF,CAAC;IAEF,gDAAgD;IAChD,OAAO,CAAC,IAAI,CACV,4BAA4B,EAC5B,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,MAAM,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;QAE5B,MAAM,IAAI,GAAG,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;QACvE,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;YACpB,KAAK,CAAC,MAAM,CAAC,kBAAkB,EAAE,+BAA+B,CAAC,CAAC;YAClE,OAAO,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxD,CAAC;QAED,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,EAAE,gBAAgB,EAAE,aAAa,EAAE,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAChG,IAAI,CAAC,QAAQ,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;YACtC,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACxD,CAAC;QAED,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,gBAAgB,CAAC,EAAE,CAAC;YACzE,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACxD,CAAC;QAED,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;YACvB,cAAc,EAAE,sCAAsC;YACtD,eAAe,EAAE,UAAU;SAC5B,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,aAAa,EAAE,iBAAiB,EAAE,QAAQ,CAAC,EAAE;YACtE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;SAChC,CAAC,CAAC;QAEH,qCAAqC;QACrC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAEzB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;QAE5C,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE;YACtC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,2BAA2B,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACjE,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACpB,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;QAClB,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACvB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,iCAAiC,CAAC,CAAC;YAC1D,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBAC3B,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YAC3B,CAAC;YACD,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;QAClB,CAAC,CAAC,CAAC;QAEH,OAAO,KAAK,CAAC;IACf,CAAC,CACF,CAAC;IAEF,0CAA0C;IAC1C,OAAO,CAAC,IAAI,CACV,6BAA6B,EAC7B,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,MAAM,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;QAE5B,MAAM,IAAI,GAAG,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;QACvE,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;YACpB,KAAK,CAAC,MAAM,CAAC,kBAAkB,EAAE,+BAA+B,CAAC,CAAC;YAClE,OAAO,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxD,CAAC;QAED,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,EAAE,gBAAgB,EAAE,aAAa,EAAE,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAChG,IAAI,CAAC,QAAQ,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;YACtC,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACxD,CAAC;QAED,uEAAuE;QACvE,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,gBAAgB,CAAC,EAAE,CAAC;YACzE,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QACtD,CAAC;QAED,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;YACvB,cAAc,EAAE,uCAAuC;YACvD,eAAe,EAAE,UAAU;SAC5B,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,cAAc,EAAE,iBAAiB,EAAE,QAAQ,CAAC,EAAE;YACvE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;SAChC,CAAC,CAAC;QAEH,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAEzB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;QAE5C,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE;YACtC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,4BAA4B,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAClE,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACxB,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;YAChB,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;gBACf,KAAK,EAAE,SAAS,CAAC;oBACf,IAAI,EAAE,WAAW,EAAE,IAAI;oBACvB,MAAM,EAAE,UAAU;oBAClB,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,WAAW,IAAI,KAAK;oBACtC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;iBACpC,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACvB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,kCAAkC,CAAC,CAAC;YAC3D,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBAC3B,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YAC3B,CAAC;YACD,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;QAClB,CAAC,CAAC,CAAC;QAEH,OAAO,KAAK,CAAC;IACf,CAAC,CACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"git-http.js","sourceRoot":"","sources":["../../../src/server/routes/git-http.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAGH,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AACtC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAIhC,OAAO,KAAK,MAAM,MAAM,kCAAkC,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAMnF;;;GAGG;AACH,SAAS,iBAAiB,CACxB,UAA8B,EAC9B,WAAwB;IAExB,6EAA6E;IAC7E,2EAA2E;IAC3E,uCAAuC;IACvC,IAAI,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QACnC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACxB,CAAC;IAED,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpD,OAAO,EAAE,KAAK,EAAE,yBAAyB,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;IAC/D,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC7E,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,QAAQ,KAAK,CAAC,CAAC,EAAE,CAAC;QACpB,OAAO,EAAE,KAAK,EAAE,qBAAqB,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;IAC3D,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;IAE7C,mBAAmB;IACnB,IAAI,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,yBAAyB,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;IAC/D,CAAC;IAED,wEAAwE;IACxE,2EAA2E;IAC3E,IAAI,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,SAAS,GAAG,WAAW,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QACvD,IAAI,SAAS,EAAE,CAAC;YACd,aAAa,CAAC,KAAK,CAAC,CAAC;YACrB,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QAC7B,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,8BAA8B,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;IACpE,CAAC;IAED,6EAA6E;IAC7E,4EAA4E;IAC5E,mEAAmE;IACnE,IAAI,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,WAAW,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QAClD,IAAI,OAAO,EAAE,CAAC;YACZ,aAAa,CAAC,KAAK,CAAC,CAAC;YACrB,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QAC3B,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,0FAA0F,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;IAChI,CAAC;IAED,MAAM,MAAM,GAAG,WAAW,CAAC,YAAY,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACzD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,mBAAmB,CAAC,KAAK,CAAC,CAAC;QAC3B,OAAO,EAAE,KAAK,EAAE,qBAAqB,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;IAC3D,CAAC;IAED,aAAa,CAAC,KAAK,CAAC,CAAC;IACrB,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;AAC/B,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,eAAe,CACtB,IAAqB,EACrB,QAAgB,EAChB,WAAwB,EACxB,gBAAkC,EAClC,iBAA0B,KAAK;IAE/B,sEAAsE;IACtE,sEAAsE;IACtE,sEAAsE;IACtE,0DAA0D;IAC1D,OAAO,MAAM,CAAC,aAAa,CAAC,IAAI,IAAI,SAAS,EAAE,QAAQ,EAAE,gBAAgB,EAAE,WAAW,EAAE,EAAE,cAAc,EAAE,CAAC,CAAC;AAC9G,CAAC;AAED,gEAAgE;AAChE,SAAS,SAAS,CAAC,QAAgB;IACjC,OAAO,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;AAC5C,CAAC;AAED;;;GAGG;AACH,SAAS,eAAe,CACtB,QAAgB,EAChB,gBAAkC,EAClC,aAAqB,EACrB,IAAqB,EACrB,WAAwB,EACxB,iBAA0B,KAAK;IAE/B,MAAM,MAAM,GAAG,gBAAgB,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;IACxD,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,8EAA8E;IAC9E,wEAAwE;IACxE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,IAAI,SAAS,EAAE,QAAQ,EAAE,gBAAgB,EAAE,WAAW,EAAE,EAAE,cAAc,EAAE,CAAC,EAAE,CAAC;QAC1G,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;AAC1C,CAAC;AAED;;qDAEqD;AACrD,SAAS,iBAAiB,CAAC,GAA+D;IACxF,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,+BAA+B,CAAC,CAAC;IACzD,MAAM,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAC5C,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,MAAM,CAAC;AACnC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,OAAwB,EACxB,gBAAkC,EAClC,WAAwB,EACxB,aAAqB,EACrB,KAAa;IAGb,oEAAoE;IACpE,OAAO,CAAC,GAAG,CACT,sBAAsB,EACtB,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,MAAM,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;QAC5B,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC;QAElC,IAAI,OAAO,KAAK,iBAAiB,IAAI,OAAO,KAAK,kBAAkB,EAAE,CAAC;YACpE,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;QACpE,CAAC;QAED,eAAe;QACf,MAAM,IAAI,GAAG,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;QACvE,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;YACpB,KAAK,CAAC,MAAM,CAAC,kBAAkB,EAAE,+BAA+B,CAAC,CAAC;YAClE,OAAO,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxD,CAAC;QAED,mEAAmE;QACnE,MAAM,cAAc,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAC9C,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,EAAE,gBAAgB,EAAE,aAAa,EAAE,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC;QAChH,IAAI,CAAC,QAAQ,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;YACtC,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACxD,CAAC;QAED,sBAAsB;QACtB,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,gBAAgB,EAAE,cAAc,CAAC,EAAE,CAAC;YACrF,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACxD,CAAC;QAED,mEAAmE;QACnE,IAAI,OAAO,KAAK,kBAAkB,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,gBAAgB,EAAE,cAAc,CAAC,EAAE,CAAC;YACvH,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QACtD,CAAC;QAED,8BAA8B;QAC9B,MAAM,UAAU,GAAG,OAAO,KAAK,iBAAiB,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,cAAc,CAAC;QAElF,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;YACvB,cAAc,EAAE,iBAAiB,OAAO,gBAAgB;YACxD,eAAe,EAAE,UAAU;SAC5B,CAAC,CAAC;QAEH,2CAA2C;QAC3C,MAAM,MAAM,GAAG,aAAa,OAAO,IAAI,CAAC;QACxC,MAAM,SAAS,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACpE,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,SAAS,GAAG,MAAM,EAAE,CAAC,CAAC;QACzC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAExB,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,QAAQ,CAAC,EAAE;YACvF,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;SAChC,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;QAE5C,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE;YACtC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,UAAU,YAAY,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACnE,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACpB,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;QAClB,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACvB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,uBAAuB,UAAU,EAAE,CAAC,CAAC;YAC5D,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBAC3B,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YAC3B,CAAC;YACD,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;QAClB,CAAC,CAAC,CAAC;QAEH,yCAAyC;QACzC,OAAO,KAAK,CAAC;IACf,CAAC,CACF,CAAC;IAEF,gDAAgD;IAChD,OAAO,CAAC,IAAI,CACV,4BAA4B,EAC5B,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,MAAM,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;QAE5B,MAAM,IAAI,GAAG,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;QACvE,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;YACpB,KAAK,CAAC,MAAM,CAAC,kBAAkB,EAAE,+BAA+B,CAAC,CAAC;YAClE,OAAO,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxD,CAAC;QAED,MAAM,cAAc,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAC9C,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,EAAE,gBAAgB,EAAE,aAAa,EAAE,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC;QAChH,IAAI,CAAC,QAAQ,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;YACtC,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACxD,CAAC;QAED,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,gBAAgB,EAAE,cAAc,CAAC,EAAE,CAAC;YACrF,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACxD,CAAC;QAED,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;YACvB,cAAc,EAAE,sCAAsC;YACtD,eAAe,EAAE,UAAU;SAC5B,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,aAAa,EAAE,iBAAiB,EAAE,QAAQ,CAAC,EAAE;YACtE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;SAChC,CAAC,CAAC;QAEH,qCAAqC;QACrC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAEzB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;QAE5C,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE;YACtC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,2BAA2B,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACjE,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACpB,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;QAClB,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACvB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,iCAAiC,CAAC,CAAC;YAC1D,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBAC3B,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YAC3B,CAAC;YACD,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;QAClB,CAAC,CAAC,CAAC;QAEH,OAAO,KAAK,CAAC;IACf,CAAC,CACF,CAAC;IAEF,0CAA0C;IAC1C,OAAO,CAAC,IAAI,CACV,6BAA6B,EAC7B,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,MAAM,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;QAE5B,MAAM,IAAI,GAAG,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;QACvE,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;YACpB,KAAK,CAAC,MAAM,CAAC,kBAAkB,EAAE,+BAA+B,CAAC,CAAC;YAClE,OAAO,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxD,CAAC;QAED,MAAM,cAAc,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAC9C,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,EAAE,gBAAgB,EAAE,aAAa,EAAE,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC;QAChH,IAAI,CAAC,QAAQ,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;YACtC,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACxD,CAAC;QAED,mEAAmE;QACnE,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,gBAAgB,EAAE,cAAc,CAAC,EAAE,CAAC;YACrF,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QACtD,CAAC;QAED,kEAAkE;QAClE,8DAA8D;QAC9D,kEAAkE;QAClE,iEAAiE;QACjE,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC9C,MAAM,UAAU,GAAG,KAAK,CAAC,aAAa,EAAE,CAAC;YACzC,IAAI,UAAU,IAAI,UAAU,CAAC,qBAAqB,EAAE,EAAE,CAAC;gBACrD,MAAM,MAAM,GAAG,UAAU,CAAC,SAAS,EAAE,CAAC;gBACtC,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC;gBACjH,MAAM,OAAO,GAAG,oBAAoB,SAAS,uCAAuC,CAAC;gBACrF,MAAM,YAAY,GAAG;oBACnB,EAAE,EAAE,sBAAsB;oBAC1B,IAAI,EAAE,wBAAwB;oBAC9B,KAAK,EAAE,4BAA4B;iBACpC,CAAC;gBACF,UAAU,CAAC,SAAS,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;gBAC5C,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;gBACjE,iBAAiB,CAAC,aAAa,EAAE;oBAC/B,IAAI;oBACJ,MAAM,EAAE,UAAU;oBAClB,IAAI,EAAE,YAAY;oBAClB,OAAO;oBACP,SAAS;iBACV,CAAC,CAAC;gBACH,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,6BAA6B,SAAS,uBAAuB,IAAI,cAAc,CAAC,CAAC;YACpG,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,0DAA0D,CAAC,CAAC;QACxF,CAAC;QAED,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;YACvB,cAAc,EAAE,uCAAuC;YACvD,eAAe,EAAE,UAAU;SAC5B,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,cAAc,EAAE,iBAAiB,EAAE,QAAQ,CAAC,EAAE;YACvE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;SAChC,CAAC,CAAC;QAEH,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAEzB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;QAE5C,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE;YACtC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,4BAA4B,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAClE,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACxB,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;YAChB,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;gBACf,KAAK,EAAE,SAAS,CAAC;oBACf,IAAI,EAAE,WAAW,EAAE,IAAI;oBACvB,MAAM,EAAE,UAAU;oBAClB,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,WAAW,IAAI,KAAK;oBACtC,aAAa,EAAE,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE,gBAAgB,CAAC;oBAC7D,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;iBACpC,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACvB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,kCAAkC,CAAC,CAAC;YAC3D,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBAC3B,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YAC3B,CAAC;YACD,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;QAClB,CAAC,CAAC,CAAC;QAEH,OAAO,KAAK,CAAC;IACf,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/server/routes/graph-api-access.d.ts

@@ -0,0 +1,63 @@
+import type { FastifyReply, FastifyRequest } from 'fastify';
+import type { WorkspaceManager } from '../../core/workspace-manager.js';
+import type { AuthService, AuthUser } from '../../services/auth-service.js';
+import type { GitUser } from '../../services/git.js';
+import { type WorkspaceAccessService } from '../../services/workspace-access.js';
+/** Convert an AuthUser from the request to a GitUser for commit attribution. */
+export declare function reqGitUser(req: FastifyRequest): GitUser | undefined;
+export declare function reqUser(req: FastifyRequest): AuthUser | undefined;
+export declare function getAccessibleRepos(req: FastifyRequest, workspaceManager: WorkspaceManager, authService: AuthService): {
+    name: string;
+    path: string;
+    display_name?: string | undefined;
+    type?: string | undefined;
+    description?: string | undefined;
+    personal?: boolean | undefined;
+    owner_id?: number | undefined;
+    system?: boolean | undefined;
+    workspace_wide?: boolean | undefined;
+    archived_at?: string | undefined;
+    archived_by?: string | undefined;
+    sync?: {
+        source: string;
+        entity_type?: string | undefined;
+        filter?: Record<string, any> | undefined;
+    }[] | undefined;
+}[];
+/** Accessible repos MINUS `system` folders (the reserved asset store) and
+ *  archived folders. Use for knowledge/content surfaces (sidebar/folder list,
+ *  entity summaries, graph topology, search, graph-health) so the asset store's
+ *  wrapper entities and archived folders don't pollute them. The asset manager
+ *  + authz still use getAccessibleRepos (system + archived included) so archived
+ *  folders stay reachable for unarchive. */
+export declare function getContentRepos(req: FastifyRequest, workspaceManager: WorkspaceManager, authService: AuthService): {
+    name: string;
+    path: string;
+    display_name?: string | undefined;
+    type?: string | undefined;
+    description?: string | undefined;
+    personal?: boolean | undefined;
+    owner_id?: number | undefined;
+    system?: boolean | undefined;
+    workspace_wide?: boolean | undefined;
+    archived_at?: string | undefined;
+    archived_by?: string | undefined;
+    sync?: {
+        source: string;
+        entity_type?: string | undefined;
+        filter?: Record<string, any> | undefined;
+    }[] | undefined;
+}[];
+export declare function hasRepoAccess(req: FastifyRequest, repoName: string, workspaceManager: WorkspaceManager, authService: AuthService): boolean;
+export declare function canWriteRepo(req: FastifyRequest, repoName: string, workspaceManager: WorkspaceManager, authService: AuthService): boolean;
+export declare function isFolderAdminOrOwner(req: FastifyRequest, repoName: string, workspaceManager: WorkspaceManager, authService: AuthService): boolean;
+export declare function getAccessibleEntityIds(req: FastifyRequest, workspaceManager: WorkspaceManager, authService: AuthService): Set<string> | null;
+export declare function filterWikilinks(wikilinks: string[], accessibleIds: Set<string> | null): string[];
+/**
+ * Guard against non-admin members creating eager skills in shared folders:
+ * eager skills inline into prompts for everyone with folder access.
+ */
+export declare function checkEagerSkillPermission(req: FastifyRequest, entityType: string, data: Record<string, any> | undefined, repoName: string, workspaceManager: WorkspaceManager, authService: AuthService): string | null;
+export declare function graphForRead(accessService: WorkspaceAccessService, req: FastifyRequest, reply: FastifyReply, repoName: string): import("../../core/graph.js").BaseGraphManager | null;
+export declare function graphForWrite(accessService: WorkspaceAccessService, req: FastifyRequest, reply: FastifyReply, repoName: string): import("../../core/graph.js").BaseGraphManager | null;
+export declare function graphForAdmin(accessService: WorkspaceAccessService, req: FastifyRequest, reply: FastifyReply, repoName: string): import("../../core/graph.js").BaseGraphManager | null;

package/dist/server/routes/graph-api-access.js

@@ -0,0 +1,115 @@
+import { isArchivedRepo } from '../../core/types.js';
+import * as access from '../../services/access-control.js';
+import { AccessDeniedError, sendAccessDenied, } from '../../services/workspace-access.js';
+/** Convert an AuthUser from the request to a GitUser for commit attribution. */
+export function reqGitUser(req) {
+    const user = req.user;
+    if (!user)
+        return undefined;
+    // Use handle (a stable, human-readable, email-free slug) as the identity
+    // for created_by / updated_by frontmatter and as the git author. Real
+    // emails would land in committed entity content + git history, where
+    // they're hard to scrub later.
+    return { id: user.handle, name: user.displayName, email: `${user.handle}@studiograph.local` };
+}
+export function reqUser(req) {
+    return req.user;
+}
+/** Parse the `include_private` query param or `X-Studiograph-Include-Private`
+ *  header into an access option. The flag is owner-gated by the access
+ *  helpers themselves — non-owners passing it have no effect. */
+function reqAccessOptions(req) {
+    const query = req.query ?? {};
+    const headers = req.headers ?? {};
+    const flagged = query.include_private === '1' ||
+        query.include_private === 'true' ||
+        headers['x-studiograph-include-private'] === '1' ||
+        headers['x-studiograph-include-private'] === 'true';
+    return flagged ? { includePrivate: true } : {};
+}
+export function getAccessibleRepos(req, workspaceManager, authService) {
+    return access.getAccessibleRepos(reqUser(req), workspaceManager, authService, reqAccessOptions(req));
+}
+/** Accessible repos MINUS `system` folders (the reserved asset store) and
+ *  archived folders. Use for knowledge/content surfaces (sidebar/folder list,
+ *  entity summaries, graph topology, search, graph-health) so the asset store's
+ *  wrapper entities and archived folders don't pollute them. The asset manager
+ *  + authz still use getAccessibleRepos (system + archived included) so archived
+ *  folders stay reachable for unarchive. */
+export function getContentRepos(req, workspaceManager, authService) {
+    return getAccessibleRepos(req, workspaceManager, authService).filter(r => !r.system && !isArchivedRepo(r));
+}
+export function hasRepoAccess(req, repoName, workspaceManager, authService) {
+    return access.hasRepoAccess(reqUser(req), repoName, workspaceManager, authService, reqAccessOptions(req));
+}
+export function canWriteRepo(req, repoName, workspaceManager, authService) {
+    return access.canWriteRepo(reqUser(req), repoName, workspaceManager, authService);
+}
+export function isFolderAdminOrOwner(req, repoName, workspaceManager, authService) {
+    return access.isFolderAdminOrOwner(reqUser(req), repoName, workspaceManager, authService);
+}
+export function getAccessibleEntityIds(req, workspaceManager, authService) {
+    return access.getAccessibleEntityIds(reqUser(req), workspaceManager, authService);
+}
+export function filterWikilinks(wikilinks, accessibleIds) {
+    return access.filterWikilinks(wikilinks, accessibleIds);
+}
+/**
+ * Guard against non-admin members creating eager skills in shared folders:
+ * eager skills inline into prompts for everyone with folder access.
+ */
+export function checkEagerSkillPermission(req, entityType, data, repoName, workspaceManager, authService) {
+    if (entityType !== 'skill')
+        return null;
+    if (!data || data.loading !== 'eager')
+        return null;
+    const user = reqUser(req);
+    if (!user)
+        return null; // API key / open mode
+    const personalRepo = workspaceManager.getUserSeedRepo(user.id);
+    if (personalRepo && personalRepo.name === repoName)
+        return null;
+    if (isFolderAdminOrOwner(req, repoName, workspaceManager, authService))
+        return null;
+    return 'Creating an eager skill in a shared folder requires folder admin or workspace owner. Save this skill to your personal folder or set loading to "on-demand".';
+}
+export function graphForRead(accessService, req, reply, repoName) {
+    try {
+        return accessService.graphForRead(reqUser(req), repoName);
+    }
+    catch (err) {
+        if (err instanceof AccessDeniedError) {
+            sendAccessDenied(reply, err);
+            return null;
+        }
+        reply.status(404).send({ error: err.message });
+        return null;
+    }
+}
+export function graphForWrite(accessService, req, reply, repoName) {
+    try {
+        return accessService.graphForWrite(reqUser(req), repoName);
+    }
+    catch (err) {
+        if (err instanceof AccessDeniedError) {
+            sendAccessDenied(reply, err);
+            return null;
+        }
+        reply.status(404).send({ error: err.message });
+        return null;
+    }
+}
+export function graphForAdmin(accessService, req, reply, repoName) {
+    try {
+        return accessService.graphForAdmin(reqUser(req), repoName);
+    }
+    catch (err) {
+        if (err instanceof AccessDeniedError) {
+            sendAccessDenied(reply, err);
+            return null;
+        }
+        reply.status(404).send({ error: err.message });
+        return null;
+    }
+}
+//# sourceMappingURL=graph-api-access.js.map

package/dist/server/routes/graph-api-access.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"graph-api-access.js","sourceRoot":"","sources":["../../../src/server/routes/graph-api-access.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAGrD,OAAO,KAAK,MAAM,MAAM,kCAAkC,CAAC;AAC3D,OAAO,EACL,iBAAiB,EACjB,gBAAgB,GAEjB,MAAM,oCAAoC,CAAC;AAE5C,gFAAgF;AAChF,MAAM,UAAU,UAAU,CAAC,GAAmB;IAC5C,MAAM,IAAI,GAAI,GAAW,CAAC,IAA4B,CAAC;IACvD,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,yEAAyE;IACzE,sEAAsE;IACtE,qEAAqE;IACrE,+BAA+B;IAC/B,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC,MAAM,oBAAoB,EAAE,CAAC;AAChG,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,GAAmB;IACzC,OAAQ,GAAW,CAAC,IAA4B,CAAC;AACnD,CAAC;AAED;;iEAEiE;AACjE,SAAS,gBAAgB,CAAC,GAAmB;IAC3C,MAAM,KAAK,GAAI,GAAG,CAAC,KAA4C,IAAI,EAAE,CAAC;IACtE,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC;IAClC,MAAM,OAAO,GACX,KAAK,CAAC,eAAe,KAAK,GAAG;QAC7B,KAAK,CAAC,eAAe,KAAK,MAAM;QAChC,OAAO,CAAC,+BAA+B,CAAC,KAAK,GAAG;QAChD,OAAO,CAAC,+BAA+B,CAAC,KAAK,MAAM,CAAC;IACtD,OAAO,OAAO,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,GAAmB,EAAE,gBAAkC,EAAE,WAAwB;IAClH,OAAO,MAAM,CAAC,kBAAkB,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,gBAAgB,EAAE,WAAW,EAAE,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC;AACvG,CAAC;AAED;;;;;4CAK4C;AAC5C,MAAM,UAAU,eAAe,CAAC,GAAmB,EAAE,gBAAkC,EAAE,WAAwB;IAC/G,OAAO,kBAAkB,CAAC,GAAG,EAAE,gBAAgB,EAAE,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7G,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,GAAmB,EAAE,QAAgB,EAAE,gBAAkC,EAAE,WAAwB;IAC/H,OAAO,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,gBAAgB,EAAE,WAAW,EAAE,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC;AAC5G,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,GAAmB,EAAE,QAAgB,EAAE,gBAAkC,EAAE,WAAwB;IAC9H,OAAO,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,gBAAgB,EAAE,WAAW,CAAC,CAAC;AACpF,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,GAAmB,EAAE,QAAgB,EAAE,gBAAkC,EAAE,WAAwB;IACtI,OAAO,MAAM,CAAC,oBAAoB,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,gBAAgB,EAAE,WAAW,CAAC,CAAC;AAC5F,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,GAAmB,EAAE,gBAAkC,EAAE,WAAwB;IACtH,OAAO,MAAM,CAAC,sBAAsB,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,gBAAgB,EAAE,WAAW,CAAC,CAAC;AACpF,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,SAAmB,EAAE,aAAiC;IACpF,OAAO,MAAM,CAAC,eAAe,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;AAC1D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,yBAAyB,CACvC,GAAmB,EACnB,UAAkB,EAClB,IAAqC,EACrC,QAAgB,EAChB,gBAAkC,EAClC,WAAwB;IAExB,IAAI,UAAU,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IACxC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IACnD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1B,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC,CAAC,sBAAsB;IAC9C,MAAM,YAAY,GAAG,gBAAgB,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC/D,IAAI,YAAY,IAAI,YAAY,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAChE,IAAI,oBAAoB,CAAC,GAAG,EAAE,QAAQ,EAAE,gBAAgB,EAAE,WAAW,CAAC;QAAE,OAAO,IAAI,CAAC;IACpF,OAAO,6JAA6J,CAAC;AACvK,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,aAAqC,EACrC,GAAmB,EACnB,KAAmB,EACnB,QAAgB;IAEhB,IAAI,CAAC;QACH,OAAO,aAAa,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC;IAC5D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,iBAAiB,EAAE,CAAC;YAAC,gBAAgB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QACpF,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1D,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,aAAqC,EACrC,GAAmB,EACnB,KAAmB,EACnB,QAAgB;IAEhB,IAAI,CAAC;QACH,OAAO,aAAa,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC;IAC7D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,iBAAiB,EAAE,CAAC;YAAC,gBAAgB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QACpF,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1D,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,aAAqC,EACrC,GAAmB,EACnB,KAAmB,EACnB,QAAgB;IAEhB,IAAI,CAAC;QACH,OAAO,aAAa,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC;IAC7D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,iBAAiB,EAAE,CAAC;YAAC,gBAAgB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QACpF,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1D,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/server/routes/graph-api.d.ts

@@ -2,7 +2,7 @@
  * Graph API routes
  *
  * REST façade over WorkspaceManager.
- * Enforces per-collection access when users are authenticated via JWT.
+ * Enforces per-folder access when users are authenticated via JWT.
  * API key / open mode → full access (no filtering).
  */
 import type { FastifyInstance } from 'fastify';
@@ -10,5 +10,4 @@ import { WorkspaceManager } from '../../core/workspace-manager.js';
 import { AuthService } from '../../services/auth-service.js';
 import type { WsHub } from '../ws-hub.js';
 import type { SessionManager } from '../session-manager.js';
-import type { YjsManager } from '../yjs-manager.js';
-export declare function registerGraphApiRoutes(fastify: FastifyInstance, workspaceManager: WorkspaceManager, authService: AuthService, wsHub?: WsHub, sessionManager?: SessionManager, yjsManager?: YjsManager): Promise<void>;
+export declare function registerGraphApiRoutes(fastify: FastifyInstance, workspaceManager: WorkspaceManager, authService: AuthService, wsHub?: WsHub, sessionManager?: SessionManager): Promise<void>;