feat: secure organization provider credentials

2026-07-10 22:04:43 +08:00
parent e049cb6880
commit 848f913597
51 changed files with 3280 additions and 230 deletions
@@ -14,11 +14,16 @@ import { registerExplorerRoutes } from "./explorerRoutes.js";
 import { registerMembersRoutes } from "./membersRoutes.js";
 import { registerSessionsAndUsageRoutes } from "./sessionsRoutes.js";
 import { registerTeamsRoutes } from "./teamsRoutes.js";
+import { registerProviderConnectionRoutes } from "./providerConnectionRoutes.js";
+import type { LocalSecretEnvelope } from "../../security/secretEnvelope.js";
+import type { ProviderReadinessProbe } from "../../connections/providerReadiness.js";

 export interface OrgRouteConfig {
  readonly prisma: PrismaClient;
  readonly sessionSecret: string;
  readonly projectWorkspaceRoot: string;
+  readonly secretEnvelope: LocalSecretEnvelope;
+  readonly providerReadinessProbe?: ProviderReadinessProbe;
 }

 export async function registerOrgRoutes(app: FastifyInstance, config: OrgRouteConfig): Promise<void> {
@@ -101,4 +106,12 @@ export async function registerOrgRoutes(app: FastifyInstance, config: OrgRouteCo
    prisma: config.prisma,
    sessionSecret: config.sessionSecret,
  });
+  await registerProviderConnectionRoutes(app, {
+    prisma: config.prisma,
+    sessionSecret: config.sessionSecret,
+    secretEnvelope: config.secretEnvelope,
+    ...(config.providerReadinessProbe !== undefined
+      ? { providerReadinessProbe: config.providerReadinessProbe }
+      : {}),
+  });
 }