@actuate-media/cms-core 0.57.0 → 0.58.0

package/dist/api/routes/sections.js

@@ -0,0 +1,500 @@
+import { listDocuments, getDocument, createDocument, updateDocument } from '../../actions.js';
+import { logEvent } from '../../security/audit.js';
+import { notifyPreviewUpdate } from '../../preview/event-bus.js';
+import { getSectionType, getSectionTypesForScope, getAllSectionTypes, buildSection, coerceSections, coercePostHeader, createPostTemplate, addSection as addSectionToList, removeSection as removeSectionFromList, reorderSections as reorderSectionList, setSectionVisibility, updateSectionContent as updateSectionContentInList, updateSectionSettings as updateSectionSettingsInList, updateSectionMeta as updateSectionMetaInList, validateSectionContent, } from '../../sections/index.js';
+import { buildPostsOrderBy, buildPostsWhere, extractSeoScore as extractPostSeoScore, resolveQueryCollections, } from '../../posts/query.js';
+import { getActuateConfig } from '../../config/runtime.js';
+import { guardedDb } from '../guarded-db.js';
+import { json, errorResponse, internalError, clampPageSize, requireAuth, requireCollectionScope, buildActionContext, collectionSupportsSections, } from '../route-helpers.js';
+export function registerSectionRoutes(router) {
+    const db = guardedDb;
+    // ---------------------------------------------------------------------------
+    // Page section routes (flat Page Editor model)
+    //
+    // These operate on a page document's `data.sections` JSON array — the same
+    // model the visual Page Editor reads/writes — so an AI agent driving the
+    // CMS from Cursor/VS Code via MCP produces real, editable, publishable
+    // sections rather than disposable markup. All mutations go through the
+    // audited `updateDocument` path (versions, hooks, cache invalidation,
+    // live-preview push) and reuse collection scope checks.
+    //
+    // Discovery + validation are deterministic (no LLM) and only need auth.
+    // ---------------------------------------------------------------------------
+    // GET /page-sections/types — discover registered section types + schemas.
+    // Optional `?scope=page|post` filters to types usable on that surface so an
+    // agent only builds sections that have a working renderer in that context.
+    router.get('/page-sections/types', async (request) => {
+        try {
+            const auth = await requireAuth(request);
+            if (auth.error)
+                return auth.error;
+            const scope = new URL(request.url).searchParams.get('scope');
+            const data = scope === 'page' || scope === 'post'
+                ? getSectionTypesForScope(scope)
+                : getAllSectionTypes();
+            return json({ data });
+        }
+        catch (err) {
+            return internalError(err, 'list section types');
+        }
+    });
+    // POST /page-sections/validate — validate section content against its
+    // type schema. Body: { sectionType, content, settings? }.
+    router.post('/page-sections/validate', async (request) => {
+        try {
+            const auth = await requireAuth(request);
+            if (auth.error)
+                return auth.error;
+            const body = (await request.json().catch(() => null));
+            const sectionType = typeof body?.sectionType === 'string' ? body.sectionType : '';
+            if (!sectionType)
+                return errorResponse('sectionType is required', 400);
+            const content = body?.content && typeof body.content === 'object'
+                ? body.content
+                : {};
+            const settings = body?.settings && typeof body.settings === 'object'
+                ? body.settings
+                : undefined;
+            const result = validateSectionContent(sectionType, content, settings);
+            return json({ data: result });
+        }
+        catch (err) {
+            return internalError(err, 'validate section');
+        }
+    });
+    // Shared: load a page document's sections, or a Response on error.
+    //
+    // ADR 0002 ownership guard: a document authored in the visual page builder
+    // carries a `_layout` tree and its `sections` are *compiled* from that tree on
+    // every save. Editing those sections directly would be silently overwritten by
+    // the next builder save, so for WRITE callers we refuse a builder-owned doc
+    // with 409 instead. Read callers are unaffected.
+    const loadPageSections = async (collection, id, ctx, opts) => {
+        if (!collectionSupportsSections(collection)) {
+            return errorResponse(`Collection "${collection}" does not declare a "sections" JSON field, so it cannot store page sections.`, 400);
+        }
+        const doc = await getDocument(collection, id, ctx);
+        if (!doc)
+            return errorResponse('Page not found', 404);
+        // `getDocument` lifts the stored `_layout` out of `data` onto the wire
+        // envelope (`doc.layout`), so the builder-ownership signal lives there.
+        const layout = doc.layout;
+        if (opts?.forWrite && layout && typeof layout === 'object') {
+            return errorResponse(`Page "${id}" is owned by the visual page builder: its sections are compiled from the builder layout and would be overwritten on the next save. Edit it in the Page Builder instead (or clear its layout to convert it to a section-authored page).`, 409);
+        }
+        const data = doc.data ?? {};
+        // Preserve sections whose type isn't registered (seed/code-owned, e.g.
+        // `opal-*`) so a mutation through this API round-trips them instead of
+        // silently dropping externally-managed content on the next persist.
+        return {
+            sections: coerceSections(data.sections, {
+                onUnknown: 'preserve',
+            }),
+        };
+    };
+    // Shared: persist a mutated section array via the audited update path.
+    const persistPageSections = async (collection, id, sections, ctx, userId) => {
+        // Drop the derived `unmanaged` marker before persisting — it is recomputed
+        // from the registry on every read, so storing it would only let it go stale.
+        const toStore = sections.map(({ unmanaged: _unmanaged, ...rest }) => rest);
+        const doc = await updateDocument(collection, id, { sections: toStore }, ctx);
+        await logEvent({
+            event: 'document_updated',
+            userId,
+            details: { collection, documentId: id, action: 'page_sections_updated' },
+        });
+        notifyPreviewUpdate(collection, id, {
+            values: doc.data,
+            status: doc.status,
+            updatedAt: doc.updatedAt?.toISOString?.(),
+        });
+        const data = doc.data ?? {};
+        return coerceSections(data.sections, { onUnknown: 'preserve' });
+    };
+    // GET /page-sections/:collection/:id — list a page's sections.
+    router.get('/page-sections/:collection/:id', async (request, params) => {
+        try {
+            const auth = await requireAuth(request);
+            if (auth.error)
+                return auth.error;
+            const scopeErr = requireCollectionScope(auth.session, params.collection, 'read');
+            if (scopeErr)
+                return scopeErr;
+            const ctx = buildActionContext(auth.session, db());
+            const loaded = await loadPageSections(params.collection, params.id, ctx);
+            if (loaded instanceof Response)
+                return loaded;
+            return json({ data: loaded.sections });
+        }
+        catch (err) {
+            return internalError(err, 'list page sections');
+        }
+    });
+    // POST /page-sections/:collection/:id — add a section.
+    // Body: { sectionType, name?, internalLabel?, visible?, content?, settings?, position? }.
+    router.post('/page-sections/:collection/:id', async (request, params) => {
+        try {
+            const auth = await requireAuth(request);
+            if (auth.error)
+                return auth.error;
+            const scopeErr = requireCollectionScope(auth.session, params.collection, 'update');
+            if (scopeErr)
+                return scopeErr;
+            const body = (await request.json().catch(() => null));
+            const sectionType = typeof body?.sectionType === 'string' ? body.sectionType : '';
+            if (!getSectionType(sectionType)) {
+                return errorResponse(`Unknown section type "${sectionType}". Call GET /page-sections/types for valid ids.`, 400);
+            }
+            const ctx = buildActionContext(auth.session, db());
+            const loaded = await loadPageSections(params.collection, params.id, ctx, { forWrite: true });
+            if (loaded instanceof Response)
+                return loaded;
+            const section = buildSection(sectionType, {
+                name: typeof body?.name === 'string' ? body.name : undefined,
+                internalLabel: typeof body?.internalLabel === 'string' ? body.internalLabel : undefined,
+                visible: body?.visible !== false,
+                content: body?.content && typeof body.content === 'object'
+                    ? body.content
+                    : undefined,
+                settings: body?.settings && typeof body.settings === 'object'
+                    ? body.settings
+                    : undefined,
+            });
+            const position = typeof body?.position === 'number' ? body.position : undefined;
+            const next = addSectionToList(loaded.sections, section, position);
+            const saved = await persistPageSections(params.collection, params.id, next, ctx, auth.session.userId);
+            const validation = validateSectionContent(section.sectionType, section.content, section.settings);
+            return json({ data: { section, sections: saved, validation } }, 201);
+        }
+        catch (err) {
+            return internalError(err, 'add page section');
+        }
+    });
+    // POST /page-sections/:collection/:id/reorder — reorder by id list.
+    // Registered BEFORE the :sectionId routes so "reorder" isn't captured as a
+    // section id (the router matches in registration order).
+    router.post('/page-sections/:collection/:id/reorder', async (request, params) => {
+        try {
+            const auth = await requireAuth(request);
+            if (auth.error)
+                return auth.error;
+            const scopeErr = requireCollectionScope(auth.session, params.collection, 'update');
+            if (scopeErr)
+                return scopeErr;
+            const body = (await request.json().catch(() => null));
+            const orderedIds = Array.isArray(body?.orderedIds)
+                ? body.orderedIds.filter((x) => typeof x === 'string')
+                : null;
+            if (!orderedIds)
+                return errorResponse('orderedIds (string[]) is required', 400);
+            const ctx = buildActionContext(auth.session, db());
+            const loaded = await loadPageSections(params.collection, params.id, ctx, { forWrite: true });
+            if (loaded instanceof Response)
+                return loaded;
+            const next = reorderSectionList(loaded.sections, orderedIds);
+            const saved = await persistPageSections(params.collection, params.id, next, ctx, auth.session.userId);
+            return json({ data: saved });
+        }
+        catch (err) {
+            return internalError(err, 'reorder page sections');
+        }
+    });
+    // PATCH /page-sections/:collection/:id/:sectionId — update a section.
+    // Body: { content?, settings?, name?, internalLabel?, visible? }.
+    router.patch('/page-sections/:collection/:id/:sectionId', async (request, params) => {
+        try {
+            const auth = await requireAuth(request);
+            if (auth.error)
+                return auth.error;
+            const scopeErr = requireCollectionScope(auth.session, params.collection, 'update');
+            if (scopeErr)
+                return scopeErr;
+            const body = (await request.json().catch(() => null));
+            const ctx = buildActionContext(auth.session, db());
+            const loaded = await loadPageSections(params.collection, params.id, ctx, { forWrite: true });
+            if (loaded instanceof Response)
+                return loaded;
+            const sectionId = params.sectionId;
+            if (!loaded.sections.some((s) => s.id === sectionId)) {
+                return errorResponse(`Section "${sectionId}" not found on this page.`, 404);
+            }
+            let next = loaded.sections;
+            if (body?.content && typeof body.content === 'object') {
+                next = updateSectionContentInList(next, sectionId, body.content);
+            }
+            if (body?.settings && typeof body.settings === 'object') {
+                next = updateSectionSettingsInList(next, sectionId, body.settings);
+            }
+            const meta = {};
+            if (typeof body?.name === 'string')
+                meta.name = body.name;
+            if (typeof body?.internalLabel === 'string')
+                meta.internalLabel = body.internalLabel;
+            if (Object.keys(meta).length > 0)
+                next = updateSectionMetaInList(next, sectionId, meta);
+            if (typeof body?.visible === 'boolean') {
+                next = setSectionVisibility(next, sectionId, body.visible);
+            }
+            const saved = await persistPageSections(params.collection, params.id, next, ctx, auth.session.userId);
+            const updated = saved.find((s) => s.id === sectionId);
+            const validation = updated
+                ? validateSectionContent(updated.sectionType, updated.content, updated.settings)
+                : undefined;
+            return json({ data: { section: updated, sections: saved, validation } });
+        }
+        catch (err) {
+            return internalError(err, 'update page section');
+        }
+    });
+    // DELETE /page-sections/:collection/:id/:sectionId — remove a section.
+    router.delete('/page-sections/:collection/:id/:sectionId', async (request, params) => {
+        try {
+            const auth = await requireAuth(request);
+            if (auth.error)
+                return auth.error;
+            const scopeErr = requireCollectionScope(auth.session, params.collection, 'update');
+            if (scopeErr)
+                return scopeErr;
+            const ctx = buildActionContext(auth.session, db());
+            const loaded = await loadPageSections(params.collection, params.id, ctx, { forWrite: true });
+            if (loaded instanceof Response)
+                return loaded;
+            const sectionId = params.sectionId;
+            if (!loaded.sections.some((s) => s.id === sectionId)) {
+                return errorResponse(`Section "${sectionId}" not found on this page.`, 404);
+            }
+            const next = removeSectionFromList(loaded.sections, sectionId);
+            const saved = await persistPageSections(params.collection, params.id, next, ctx, auth.session.userId);
+            return json({ data: { sections: saved } });
+        }
+        catch (err) {
+            return internalError(err, 'remove page section');
+        }
+    });
+    // ---------------------------------------------------------------------------
+    // Post template routes
+    //
+    // A post type's template is a single document in the hidden
+    // `post-templates` collection, matched by `slug` == the post-type slug. It
+    // stores the design-driven header layout (`data.header`) and the default
+    // section list (`data.sections`) new posts inherit. Lets an external AI
+    // agent (Cursor/VS Code) read a type's template and build it from
+    // scope=post section types discovered via `/page-sections/types?scope=post`.
+    // ---------------------------------------------------------------------------
+    const POST_TEMPLATES_COLLECTION = 'post-templates';
+    const findPostTemplateDoc = async (postType, ctx) => {
+        const res = await listDocuments({ collection: POST_TEMPLATES_COLLECTION, pageSize: 200 }, ctx);
+        const docs = res.docs ?? [];
+        return (docs.find((d) => (d.slug ?? d.data?.slug) === postType) ?? null);
+    };
+    const templateResponse = (postType, doc) => {
+        if (!doc) {
+            // No saved template yet → hand back a usable starting template
+            // (centered header + article body + related posts) rather than a blank
+            // one, so new posts and the template editor are never empty. docId is
+            // null so callers can still tell it has not been persisted.
+            const seed = createPostTemplate(postType);
+            return { postType, docId: null, header: seed.header, sections: seed.sections };
+        }
+        const data = doc.data ?? {};
+        return {
+            postType,
+            docId: doc.id,
+            header: coercePostHeader(data.header),
+            sections: coerceSections(data.sections),
+        };
+    };
+    // GET /post-templates/:type — read a post type's template (header +
+    // default sections). Returns an unsaved default when none exists yet.
+    router.get('/post-templates/:type', async (request, params) => {
+        try {
+            const auth = await requireAuth(request);
+            if (auth.error)
+                return auth.error;
+            const scopeErr = requireCollectionScope(auth.session, POST_TEMPLATES_COLLECTION, 'read');
+            if (scopeErr)
+                return scopeErr;
+            const ctx = buildActionContext(auth.session, db());
+            const doc = await findPostTemplateDoc(params.type, ctx);
+            return json({ data: templateResponse(params.type, doc) });
+        }
+        catch (err) {
+            return internalError(err, 'get post template');
+        }
+    });
+    // PUT /post-templates/:type — create or replace a post type's template.
+    // Body: { header?, sections? }. Header is coerced to a full PostHeaderConfig
+    // and sections are coerced (unknown section types dropped) so the stored
+    // template always renders.
+    router.put('/post-templates/:type', async (request, params) => {
+        try {
+            const auth = await requireAuth(request);
+            if (auth.error)
+                return auth.error;
+            const scopeErr = requireCollectionScope(auth.session, POST_TEMPLATES_COLLECTION, 'update');
+            if (scopeErr)
+                return scopeErr;
+            const body = (await request.json().catch(() => null));
+            const header = coercePostHeader(body?.header);
+            const sections = coerceSections(body?.sections);
+            const ctx = buildActionContext(auth.session, db());
+            const existing = await findPostTemplateDoc(params.type, ctx);
+            const data = {
+                title: `${params.type} template`,
+                slug: params.type,
+                postType: params.type,
+                header,
+                sections,
+                status: 'PUBLISHED',
+            };
+            const doc = existing
+                ? await updateDocument(POST_TEMPLATES_COLLECTION, existing.id, data, ctx)
+                : await createDocument(POST_TEMPLATES_COLLECTION, data, ctx);
+            await logEvent({
+                event: existing ? 'document_updated' : 'document_created',
+                userId: auth.session.userId,
+                details: {
+                    collection: POST_TEMPLATES_COLLECTION,
+                    documentId: doc.id,
+                    action: 'post_template_saved',
+                    postType: params.type,
+                },
+            });
+            return json({ data: templateResponse(params.type, doc) });
+        }
+        catch (err) {
+            return internalError(err, 'save post template');
+        }
+    });
+    // ---------------------------------------------------------------------------
+    // GET /posts — aggregate list across post-type collections for the admin
+    // Posts area. Filtering, sorting and pagination all happen at the DB level
+    // (one query + one count) so the page scales past the old per-type client
+    // cap. Respects per-collection read scope: API keys only see collections
+    // their scope allows. Returns the post rows plus dataset-wide type counts
+    // and the contributor list the toolbar needs.
+    // ---------------------------------------------------------------------------
+    router.get('/posts', async (request) => {
+        try {
+            const auth = await requireAuth(request);
+            if (auth.error)
+                return auth.error;
+            const cfg = getActuateConfig();
+            const collections = cfg?.collections ?? {};
+            // Post-type collections the caller may read. Hidden collections and ones
+            // the API-key scope forbids are dropped so the aggregate never leaks rows
+            // a direct /collections/:slug call would refuse.
+            const postTypeMeta = [];
+            const allowedSlugs = [];
+            for (const [slug, col] of Object.entries(collections)) {
+                const isPost = col?.type === 'post' ||
+                    (typeof col?.admin?.group === 'string' && col.admin.group.toLowerCase() === 'posts');
+                if (!isPost || col?.admin?.hidden)
+                    continue;
+                if (requireCollectionScope(auth.session, slug, 'read'))
+                    continue;
+                allowedSlugs.push(slug);
+                postTypeMeta.push({
+                    slug,
+                    singular: col?.labels?.singular ?? slug,
+                    plural: col?.labels?.plural ?? slug,
+                    description: col?.admin?.description ?? null,
+                    urlPrefix: col?.urlPrefix ?? slug,
+                    color: col?.admin?.color ?? null,
+                    icon: col?.admin?.icon ?? null,
+                    fieldCount: col?.fields ? Object.keys(col.fields).length : 0,
+                });
+            }
+            const url = new URL(request.url);
+            const page = Math.max(1, Number(url.searchParams.get('page')) || 1);
+            const pageSize = clampPageSize(url.searchParams.get('pageSize'), 100, 10);
+            if (allowedSlugs.length === 0) {
+                return json({
+                    data: { posts: [], total: 0, page, pageSize, types: [], authors: [] },
+                });
+            }
+            const queryInput = {
+                allowedCollections: allowedSlugs,
+                postType: url.searchParams.get('postType') ?? undefined,
+                status: url.searchParams.get('status') ?? undefined,
+                author: url.searchParams.get('author') ?? undefined,
+                search: url.searchParams.get('search') ?? undefined,
+                sortBy: url.searchParams.get('sortBy') ?? undefined,
+                sortDirection: url.searchParams.get('sortDirection') ?? undefined,
+            };
+            const where = buildPostsWhere(queryInput);
+            const orderBy = buildPostsOrderBy(queryInput.sortBy, queryInput.sortDirection);
+            const queryCollections = resolveQueryCollections(queryInput);
+            // No collections to scan (e.g. a forbidden ?postType) → empty page, but
+            // still return the type/author facets for the toolbar.
+            const [docs, total] = queryCollections.length
+                ? await Promise.all([
+                    db().document.findMany({
+                        where,
+                        orderBy,
+                        skip: (page - 1) * pageSize,
+                        take: pageSize,
+                        include: { createdBy: { select: { id: true, name: true, email: true } } },
+                    }),
+                    db().document.count({ where }),
+                ])
+                : [[], 0];
+            // Dataset-wide facets (ignore the active filters) so the type tabs and
+            // author dropdown reflect everything the user can see, not the query.
+            const facetWhere = { collection: { in: allowedSlugs }, deletedAt: null };
+            const [typeCounts, authorGroups] = await Promise.all([
+                db().document.groupBy({
+                    by: ['collection'],
+                    where: facetWhere,
+                    _count: { _all: true },
+                }),
+                db().document.groupBy({ by: ['createdById'], where: facetWhere }),
+            ]);
+            const countBySlug = new Map();
+            for (const row of typeCounts) {
+                countBySlug.set(row.collection, row._count._all);
+            }
+            const authorIds = authorGroups
+                .map((g) => g.createdById)
+                .filter((id) => Boolean(id));
+            const authorUsers = authorIds.length
+                ? await db().user.findMany({
+                    where: { id: { in: authorIds } },
+                    select: { id: true, name: true, email: true },
+                })
+                : [];
+            const posts = docs.map((d) => ({
+                id: d.id,
+                collection: d.collection,
+                title: d.title ?? null,
+                slug: d.slug ?? null,
+                status: d.status,
+                publishedAt: d.publishedAt ? d.publishedAt.toISOString() : null,
+                scheduledAt: d.scheduledAt ? d.scheduledAt.toISOString() : null,
+                createdAt: d.createdAt.toISOString(),
+                updatedAt: d.updatedAt.toISOString(),
+                seoScore: extractPostSeoScore(d.data),
+                author: d.createdBy
+                    ? { id: d.createdBy.id, name: d.createdBy.name?.trim() || d.createdBy.email }
+                    : null,
+            }));
+            return json({
+                data: {
+                    posts,
+                    total,
+                    page,
+                    pageSize,
+                    types: postTypeMeta.map((t) => ({ ...t, count: countBySlug.get(t.slug) ?? 0 })),
+                    authors: authorUsers.map((u) => ({
+                        id: u.id,
+                        name: u.name?.trim() || u.email,
+                    })),
+                },
+            });
+        }
+        catch (err) {
+            return internalError(err, 'list posts');
+        }
+    });
+}
+//# sourceMappingURL=sections.js.map

package/dist/api/routes/sections.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sections.js","sourceRoot":"","sources":["../../../src/api/routes/sections.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AAC7F,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAA;AAClD,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAA;AAChE,OAAO,EACL,cAAc,EACd,uBAAuB,EACvB,kBAAkB,EAClB,YAAY,EACZ,cAAc,EACd,gBAAgB,EAChB,kBAAkB,EAClB,UAAU,IAAI,gBAAgB,EAC9B,aAAa,IAAI,qBAAqB,EACtC,eAAe,IAAI,kBAAkB,EACrC,oBAAoB,EACpB,oBAAoB,IAAI,0BAA0B,EAClD,qBAAqB,IAAI,2BAA2B,EACpD,iBAAiB,IAAI,uBAAuB,EAC5C,sBAAsB,GACvB,MAAM,yBAAyB,CAAA;AAQhC,OAAO,EACL,iBAAiB,EACjB,eAAe,EACf,eAAe,IAAI,mBAAmB,EACtC,uBAAuB,GAGxB,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAA;AAC1D,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAC5C,OAAO,EACL,IAAI,EACJ,aAAa,EACb,aAAa,EACb,aAAa,EACb,WAAW,EACX,sBAAsB,EACtB,kBAAkB,EAClB,0BAA0B,GAC3B,MAAM,qBAAqB,CAAA;AAE5B,MAAM,UAAU,qBAAqB,CAAC,MAAiB;IACrD,MAAM,EAAE,GAAG,SAAS,CAAA;IACpB,8EAA8E;IAC9E,+CAA+C;IAC/C,EAAE;IACF,2EAA2E;IAC3E,yEAAyE;IACzE,uEAAuE;IACvE,uEAAuE;IACvE,sEAAsE;IACtE,wDAAwD;IACxD,EAAE;IACF,wEAAwE;IACxE,8EAA8E;IAE9E,0EAA0E;IAC1E,4EAA4E;IAC5E,2EAA2E;IAC3E,MAAM,CAAC,GAAG,CAAC,sBAAsB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QACnD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAA;YACvC,IAAI,IAAI,CAAC,KAAK;gBAAE,OAAO,IAAI,CAAC,KAAK,CAAA;YACjC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;YAC5D,MAAM,IAAI,GACR,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,MAAM;gBAClC,CAAC,CAAC,uBAAuB,CAAC,KAAqB,CAAC;gBAChD,CAAC,CAAC,kBAAkB,EAAE,CAAA;YAC1B,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAA;QACvB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,aAAa,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAA;QACjD,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,sEAAsE;IACtE,0DAA0D;IAC1D,MAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QACvD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAA;YACvC,IAAI,IAAI,CAAC,KAAK;gBAAE,OAAO,IAAI,CAAC,KAAK,CAAA;YAEjC,MAAM,IAAI,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAI5C,CAAA;YACR,MAAM,WAAW,GAAG,OAAO,IAAI,EAAE,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAA;YACjF,IAAI,CAAC,WAAW;gBAAE,OAAO,aAAa,CAAC,yBAAyB,EAAE,GAAG,CAAC,CAAA;YACtE,MAAM,OAAO,GACX,IAAI,EAAE,OAAO,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ;gBAC/C,CAAC,CAAE,IAAI,CAAC,OAAmC;gBAC3C,CAAC,CAAC,EAAE,CAAA;YACR,MAAM,QAAQ,GACZ,IAAI,EAAE,QAAQ,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ;gBACjD,CAAC,CAAE,IAAI,CAAC,QAA4B;gBACpC,CAAC,CAAC,SAAS,CAAA;YAEf,MAAM,MAAM,GAAG,sBAAsB,CAAC,WAAW,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAA;YACrE,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAA;QAC/B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,aAAa,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAA;QAC/C,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,mEAAmE;IACnE,EAAE;IACF,2EAA2E;IAC3E,+EAA+E;IAC/E,+EAA+E;IAC/E,4EAA4E;IAC5E,iDAAiD;IACjD,MAAM,gBAAgB,GAAG,KAAK,EAC5B,UAAkB,EAClB,EAAU,EACV,GAAkB,EAClB,IAA6B,EACoB,EAAE;QACnD,IAAI,CAAC,0BAA0B,CAAC,UAAU,CAAC,EAAE,CAAC;YAC5C,OAAO,aAAa,CAClB,eAAe,UAAU,+EAA+E,EACxG,GAAG,CACJ,CAAA;QACH,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,UAAU,EAAE,EAAE,EAAE,GAAG,CAAC,CAAA;QAClD,IAAI,CAAC,GAAG;YAAE,OAAO,aAAa,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAA;QACrD,uEAAuE;QACvE,wEAAwE;QACxE,MAAM,MAAM,GAAI,GAA4B,CAAC,MAAM,CAAA;QACnD,IAAI,IAAI,EAAE,QAAQ,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC3D,OAAO,aAAa,CAClB,SAAS,EAAE,yOAAyO,EACpP,GAAG,CACJ,CAAA;QACH,CAAC;QACD,MAAM,IAAI,GAAI,GAA0C,CAAC,IAAI,IAAI,EAAE,CAAA;QACnE,uEAAuE;QACvE,uEAAuE;QACvE,oEAAoE;QACpE,OAAO;YACL,QAAQ,EAAE,cAAc,CAAE,IAAgC,CAAC,QAAQ,EAAE;gBACnE,SAAS,EAAE,UAAU;aACtB,CAAC;SACH,CAAA;IACH,CAAC,CAAA;IAED,uEAAuE;IACvE,MAAM,mBAAmB,GAAG,KAAK,EAC/B,UAAkB,EAClB,EAAU,EACV,QAAuB,EACvB,GAAkB,EAClB,MAAc,EACU,EAAE;QAC1B,2EAA2E;QAC3E,6EAA6E;QAC7E,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAA;QAC1E,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,UAAU,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,GAAG,CAAC,CAAA;QAC5E,MAAM,QAAQ,CAAC;YACb,KAAK,EAAE,kBAAkB;YACzB,MAAM;YACN,OAAO,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,EAAE,uBAAuB,EAAE;SACzE,CAAC,CAAA;QACF,mBAAmB,CAAC,UAAU,EAAE,EAAE,EAAE;YAClC,MAAM,EAAG,GAA0B,CAAC,IAAI;YACxC,MAAM,EAAG,GAA2B,CAAC,MAAM;YAC3C,SAAS,EAAG,GAA4B,CAAC,SAAS,EAAE,WAAW,EAAE,EAAE;SACpE,CAAC,CAAA;QACF,MAAM,IAAI,GAAI,GAA0C,CAAC,IAAI,IAAI,EAAE,CAAA;QACnE,OAAO,cAAc,CAAE,IAAgC,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CAAA;IAC9F,CAAC,CAAA;IAED,+DAA+D;IAC/D,MAAM,CAAC,GAAG,CAAC,gCAAgC,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE;QACrE,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAA;YACvC,IAAI,IAAI,CAAC,KAAK;gBAAE,OAAO,IAAI,CAAC,KAAK,CAAA;YACjC,MAAM,QAAQ,GAAG,sBAAsB,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,UAAW,EAAE,MAAM,CAAC,CAAA;YACjF,IAAI,QAAQ;gBAAE,OAAO,QAAQ,CAAA;YAE7B,MAAM,GAAG,GAAG,kBAAkB,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,EAAE,CAAC,CAAA;YAClD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,UAAW,EAAE,MAAM,CAAC,EAAG,EAAE,GAAG,CAAC,CAAA;YAC1E,IAAI,MAAM,YAAY,QAAQ;gBAAE,OAAO,MAAM,CAAA;YAC7C,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAA;QACxC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,aAAa,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAA;QACjD,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,uDAAuD;IACvD,0FAA0F;IAC1F,MAAM,CAAC,IAAI,CAAC,gCAAgC,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE;QACtE,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAA;YACvC,IAAI,IAAI,CAAC,KAAK;gBAAE,OAAO,IAAI,CAAC,KAAK,CAAA;YACjC,MAAM,QAAQ,GAAG,sBAAsB,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,UAAW,EAAE,QAAQ,CAAC,CAAA;YACnF,IAAI,QAAQ;gBAAE,OAAO,QAAQ,CAAA;YAE7B,MAAM,IAAI,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAQ5C,CAAA;YACR,MAAM,WAAW,GAAG,OAAO,IAAI,EAAE,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAA;YACjF,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,EAAE,CAAC;gBACjC,OAAO,aAAa,CAClB,yBAAyB,WAAW,iDAAiD,EACrF,GAAG,CACJ,CAAA;YACH,CAAC;YAED,MAAM,GAAG,GAAG,kBAAkB,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,EAAE,CAAC,CAAA;YAClD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,UAAW,EAAE,MAAM,CAAC,EAAG,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAA;YAC9F,IAAI,MAAM,YAAY,QAAQ;gBAAE,OAAO,MAAM,CAAA;YAE7C,MAAM,OAAO,GAAG,YAAY,CAAC,WAA4B,EAAE;gBACzD,IAAI,EAAE,OAAO,IAAI,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;gBAC5D,aAAa,EAAE,OAAO,IAAI,EAAE,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS;gBACvF,OAAO,EAAE,IAAI,EAAE,OAAO,KAAK,KAAK;gBAChC,OAAO,EACL,IAAI,EAAE,OAAO,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ;oBAC/C,CAAC,CAAE,IAAI,CAAC,OAAmC;oBAC3C,CAAC,CAAC,SAAS;gBACf,QAAQ,EACN,IAAI,EAAE,QAAQ,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ;oBACjD,CAAC,CAAE,IAAI,CAAC,QAAqC;oBAC7C,CAAC,CAAC,SAAS;aAChB,CAAC,CAAA;YACF,MAAM,QAAQ,GAAG,OAAO,IAAI,EAAE,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAA;YAC/E,MAAM,IAAI,GAAG,gBAAgB,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAA;YACjE,MAAM,KAAK,GAAG,MAAM,mBAAmB,CACrC,MAAM,CAAC,UAAW,EAClB,MAAM,CAAC,EAAG,EACV,IAAI,EACJ,GAAG,EACH,IAAI,CAAC,OAAO,CAAC,MAAM,CACpB,CAAA;YACD,MAAM,UAAU,GAAG,sBAAsB,CACvC,OAAO,CAAC,WAAW,EACnB,OAAO,CAAC,OAAO,EACf,OAAO,CAAC,QAAQ,CACjB,CAAA;YACD,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,GAAG,CAAC,CAAA;QACtE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,aAAa,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAA;QAC/C,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,oEAAoE;IACpE,2EAA2E;IAC3E,yDAAyD;IACzD,MAAM,CAAC,IAAI,CAAC,wCAAwC,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE;QAC9E,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAA;YACvC,IAAI,IAAI,CAAC,KAAK;gBAAE,OAAO,IAAI,CAAC,KAAK,CAAA;YACjC,MAAM,QAAQ,GAAG,sBAAsB,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,UAAW,EAAE,QAAQ,CAAC,CAAA;YACnF,IAAI,QAAQ;gBAAE,OAAO,QAAQ,CAAA;YAE7B,MAAM,IAAI,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAoC,CAAA;YACxF,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC;gBAChD,CAAC,CAAE,IAAK,CAAC,UAAwB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;gBACnF,CAAC,CAAC,IAAI,CAAA;YACR,IAAI,CAAC,UAAU;gBAAE,OAAO,aAAa,CAAC,mCAAmC,EAAE,GAAG,CAAC,CAAA;YAE/E,MAAM,GAAG,GAAG,kBAAkB,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,EAAE,CAAC,CAAA;YAClD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,UAAW,EAAE,MAAM,CAAC,EAAG,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAA;YAC9F,IAAI,MAAM,YAAY,QAAQ;gBAAE,OAAO,MAAM,CAAA;YAE7C,MAAM,IAAI,GAAG,kBAAkB,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAA;YAC5D,MAAM,KAAK,GAAG,MAAM,mBAAmB,CACrC,MAAM,CAAC,UAAW,EAClB,MAAM,CAAC,EAAG,EACV,IAAI,EACJ,GAAG,EACH,IAAI,CAAC,OAAO,CAAC,MAAM,CACpB,CAAA;YACD,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QAC9B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,aAAa,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAA;QACpD,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,sEAAsE;IACtE,kEAAkE;IAClE,MAAM,CAAC,KAAK,CAAC,2CAA2C,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE;QAClF,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAA;YACvC,IAAI,IAAI,CAAC,KAAK;gBAAE,OAAO,IAAI,CAAC,KAAK,CAAA;YACjC,MAAM,QAAQ,GAAG,sBAAsB,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,UAAW,EAAE,QAAQ,CAAC,CAAA;YACnF,IAAI,QAAQ;gBAAE,OAAO,QAAQ,CAAA;YAE7B,MAAM,IAAI,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAM5C,CAAA;YAER,MAAM,GAAG,GAAG,kBAAkB,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,EAAE,CAAC,CAAA;YAClD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,UAAW,EAAE,MAAM,CAAC,EAAG,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAA;YAC9F,IAAI,MAAM,YAAY,QAAQ;gBAAE,OAAO,MAAM,CAAA;YAE7C,MAAM,SAAS,GAAG,MAAM,CAAC,SAAU,CAAA;YACnC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,EAAE,CAAC;gBACrD,OAAO,aAAa,CAAC,YAAY,SAAS,2BAA2B,EAAE,GAAG,CAAC,CAAA;YAC7E,CAAC;YAED,IAAI,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAA;YAC1B,IAAI,IAAI,EAAE,OAAO,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;gBACtD,IAAI,GAAG,0BAA0B,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,OAAkC,CAAC,CAAA;YAC7F,CAAC;YACD,IAAI,IAAI,EAAE,QAAQ,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBACxD,IAAI,GAAG,2BAA2B,CAChC,IAAI,EACJ,SAAS,EACT,IAAI,CAAC,QAAoC,CAC1C,CAAA;YACH,CAAC;YACD,MAAM,IAAI,GAA8C,EAAE,CAAA;YAC1D,IAAI,OAAO,IAAI,EAAE,IAAI,KAAK,QAAQ;gBAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAA;YACzD,IAAI,OAAO,IAAI,EAAE,aAAa,KAAK,QAAQ;gBAAE,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,CAAA;YACpF,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;gBAAE,IAAI,GAAG,uBAAuB,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,CAAA;YACvF,IAAI,OAAO,IAAI,EAAE,OAAO,KAAK,SAAS,EAAE,CAAC;gBACvC,IAAI,GAAG,oBAAoB,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,CAAA;YAC5D,CAAC;YAED,MAAM,KAAK,GAAG,MAAM,mBAAmB,CACrC,MAAM,CAAC,UAAW,EAClB,MAAM,CAAC,EAAG,EACV,IAAI,EACJ,GAAG,EACH,IAAI,CAAC,OAAO,CAAC,MAAM,CACpB,CAAA;YACD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,CAAA;YACrD,MAAM,UAAU,GAAG,OAAO;gBACxB,CAAC,CAAC,sBAAsB,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC;gBAChF,CAAC,CAAC,SAAS,CAAA;YACb,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,CAAC,CAAA;QAC1E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,aAAa,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAA;QAClD,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,uEAAuE;IACvE,MAAM,CAAC,MAAM,CAAC,2CAA2C,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE;QACnF,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAA;YACvC,IAAI,IAAI,CAAC,KAAK;gBAAE,OAAO,IAAI,CAAC,KAAK,CAAA;YACjC,MAAM,QAAQ,GAAG,sBAAsB,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,UAAW,EAAE,QAAQ,CAAC,CAAA;YACnF,IAAI,QAAQ;gBAAE,OAAO,QAAQ,CAAA;YAE7B,MAAM,GAAG,GAAG,kBAAkB,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,EAAE,CAAC,CAAA;YAClD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,UAAW,EAAE,MAAM,CAAC,EAAG,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAA;YAC9F,IAAI,MAAM,YAAY,QAAQ;gBAAE,OAAO,MAAM,CAAA;YAE7C,MAAM,SAAS,GAAG,MAAM,CAAC,SAAU,CAAA;YACnC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,EAAE,CAAC;gBACrD,OAAO,aAAa,CAAC,YAAY,SAAS,2BAA2B,EAAE,GAAG,CAAC,CAAA;YAC7E,CAAC;YACD,MAAM,IAAI,GAAG,qBAAqB,CAAC,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAA;YAC9D,MAAM,KAAK,GAAG,MAAM,mBAAmB,CACrC,MAAM,CAAC,UAAW,EAClB,MAAM,CAAC,EAAG,EACV,IAAI,EACJ,GAAG,EACH,IAAI,CAAC,OAAO,CAAC,MAAM,CACpB,CAAA;YACD,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC,CAAA;QAC5C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,aAAa,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAA;QAClD,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,8EAA8E;IAC9E,uBAAuB;IACvB,EAAE;IACF,4DAA4D;IAC5D,2EAA2E;IAC3E,yEAAyE;IACzE,wEAAwE;IACxE,kEAAkE;IAClE,6EAA6E;IAC7E,8EAA8E;IAE9E,MAAM,yBAAyB,GAAG,gBAAgB,CAAA;IAQlD,MAAM,mBAAmB,GAAG,KAAK,EAC/B,QAAgB,EAChB,GAAkB,EACe,EAAE;QACnC,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,EAAE,UAAU,EAAE,yBAAyB,EAAE,QAAQ,EAAE,GAAG,EAAE,EAAE,GAAG,CAAC,CAAA;QAC9F,MAAM,IAAI,GAAI,GAA+C,CAAC,IAAI,IAAI,EAAE,CAAA;QACxE,OAAO,CACL,IAAI,CAAC,IAAI,CACP,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,IAAK,CAAC,CAAC,IAA4C,EAAE,IAAI,CAAC,KAAK,QAAQ,CACtF,IAAI,IAAI,CACV,CAAA;IACH,CAAC,CAAA;IAED,MAAM,gBAAgB,GAAG,CACvB,QAAgB,EAChB,GAA2B,EAM3B,EAAE;QACF,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,+DAA+D;YAC/D,uEAAuE;YACvE,sEAAsE;YACtE,4DAA4D;YAC5D,MAAM,IAAI,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAA;YACzC,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAA;QAChF,CAAC;QACD,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAA;QAC3B,OAAO;YACL,QAAQ;YACR,KAAK,EAAE,GAAG,CAAC,EAAE;YACb,MAAM,EAAE,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC;YACrC,QAAQ,EAAE,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC;SACxC,CAAA;IACH,CAAC,CAAA;IAED,oEAAoE;IACpE,sEAAsE;IACtE,MAAM,CAAC,GAAG,CAAC,uBAAuB,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE;QAC5D,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAA;YACvC,IAAI,IAAI,CAAC,KAAK;gBAAE,OAAO,IAAI,CAAC,KAAK,CAAA;YACjC,MAAM,QAAQ,GAAG,sBAAsB,CAAC,IAAI,CAAC,OAAO,EAAE,yBAAyB,EAAE,MAAM,CAAC,CAAA;YACxF,IAAI,QAAQ;gBAAE,OAAO,QAAQ,CAAA;YAE7B,MAAM,GAAG,GAAG,kBAAkB,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,EAAE,CAAC,CAAA;YAClD,MAAM,GAAG,GAAG,MAAM,mBAAmB,CAAC,MAAM,CAAC,IAAK,EAAE,GAAG,CAAC,CAAA;YACxD,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,gBAAgB,CAAC,MAAM,CAAC,IAAK,EAAE,GAAG,CAAC,EAAE,CAAC,CAAA;QAC5D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,aAAa,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAA;QAChD,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,wEAAwE;IACxE,6EAA6E;IAC7E,yEAAyE;IACzE,2BAA2B;IAC3B,MAAM,CAAC,GAAG,CAAC,uBAAuB,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE;QAC5D,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAA;YACvC,IAAI,IAAI,CAAC,KAAK;gBAAE,OAAO,IAAI,CAAC,KAAK,CAAA;YACjC,MAAM,QAAQ,GAAG,sBAAsB,CAAC,IAAI,CAAC,OAAO,EAAE,yBAAyB,EAAE,QAAQ,CAAC,CAAA;YAC1F,IAAI,QAAQ;gBAAE,OAAO,QAAQ,CAAA;YAE7B,MAAM,IAAI,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAG5C,CAAA;YACR,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;YAC7C,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;YAE/C,MAAM,GAAG,GAAG,kBAAkB,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,EAAE,CAAC,CAAA;YAClD,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,MAAM,CAAC,IAAK,EAAE,GAAG,CAAC,CAAA;YAC7D,MAAM,IAAI,GAA4B;gBACpC,KAAK,EAAE,GAAG,MAAM,CAAC,IAAI,WAAW;gBAChC,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,QAAQ,EAAE,MAAM,CAAC,IAAI;gBACrB,MAAM;gBACN,QAAQ;gBACR,MAAM,EAAE,WAAW;aACpB,CAAA;YACD,MAAM,GAAG,GAAG,QAAQ;gBAClB,CAAC,CAAC,MAAM,cAAc,CAAC,yBAAyB,EAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC;gBACzE,CAAC,CAAC,MAAM,cAAc,CAAC,yBAAyB,EAAE,IAAI,EAAE,GAAG,CAAC,CAAA;YAE9D,MAAM,QAAQ,CAAC;gBACb,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,kBAAkB;gBACzD,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;gBAC3B,OAAO,EAAE;oBACP,UAAU,EAAE,yBAAyB;oBACrC,UAAU,EAAG,GAAuB,CAAC,EAAE;oBACvC,MAAM,EAAE,qBAAqB;oBAC7B,QAAQ,EAAE,MAAM,CAAC,IAAI;iBACtB;aACF,CAAC,CAAA;YAEF,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,gBAAgB,CAAC,MAAM,CAAC,IAAK,EAAE,GAAiC,CAAC,EAAE,CAAC,CAAA;QAC1F,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,aAAa,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAA;QACjD,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,8EAA8E;IAC9E,yEAAyE;IACzE,2EAA2E;IAC3E,0EAA0E;IAC1E,yEAAyE;IACzE,0EAA0E;IAC1E,8CAA8C;IAC9C,8EAA8E;IAC9E,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QACrC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAA;YACvC,IAAI,IAAI,CAAC,KAAK;gBAAE,OAAO,IAAI,CAAC,KAAK,CAAA;YAEjC,MAAM,GAAG,GAAG,gBAAgB,EAAE,CAAA;YAC9B,MAAM,WAAW,GAAG,GAAG,EAAE,WAAW,IAAI,EAAE,CAAA;YAE1C,yEAAyE;YACzE,0EAA0E;YAC1E,iDAAiD;YACjD,MAAM,YAAY,GASb,EAAE,CAAA;YACP,MAAM,YAAY,GAAa,EAAE,CAAA;YACjC,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAyB,EAAE,CAAC;gBAC9E,MAAM,MAAM,GACV,GAAG,EAAE,IAAI,KAAK,MAAM;oBACpB,CAAC,OAAO,GAAG,EAAE,KAAK,EAAE,KAAK,KAAK,QAAQ,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC,CAAA;gBACtF,IAAI,CAAC,MAAM,IAAI,GAAG,EAAE,KAAK,EAAE,MAAM;oBAAE,SAAQ;gBAC3C,IAAI,sBAAsB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC;oBAAE,SAAQ;gBAChE,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;gBACvB,YAAY,CAAC,IAAI,CAAC;oBAChB,IAAI;oBACJ,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,IAAI,IAAI;oBACvC,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,IAAI,IAAI;oBACnC,WAAW,EAAE,GAAG,EAAE,KAAK,EAAE,WAAW,IAAI,IAAI;oBAC5C,SAAS,EAAE,GAAG,EAAE,SAAS,IAAI,IAAI;oBACjC,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,IAAI,IAAI;oBAChC,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,IAAI,IAAI;oBAC9B,UAAU,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;iBAC7D,CAAC,CAAA;YACJ,CAAC;YAED,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;YAChC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA;YACnE,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,CAAA;YAEzE,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC9B,OAAO,IAAI,CAAC;oBACV,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;iBACtE,CAAC,CAAA;YACJ,CAAC;YAED,MAAM,UAAU,GAAG;gBACjB,kBAAkB,EAAE,YAAY;gBAChC,QAAQ,EAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,SAAS;gBACvD,MAAM,EAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,SAAS;gBACnD,MAAM,EAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,SAAS;gBACnD,MAAM,EAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,SAAS;gBACnD,MAAM,EAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAiB,IAAI,SAAS;gBACpE,aAAa,EAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,CAAa,IAAI,SAAS;aAC/E,CAAA;YAED,MAAM,KAAK,GAAG,eAAe,CAAC,UAAU,CAAC,CAAA;YACzC,MAAM,OAAO,GAAG,iBAAiB,CAAC,UAAU,CAAC,MAAM,EAAE,UAAU,CAAC,aAAa,CAAC,CAAA;YAC9E,MAAM,gBAAgB,GAAG,uBAAuB,CAAC,UAAU,CAAC,CAAA;YAE5D,wEAAwE;YACxE,uDAAuD;YACvD,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,gBAAgB,CAAC,MAAM;gBAC3C,CAAC,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC;oBAChB,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC;wBACrB,KAAK;wBACL,OAAO;wBACP,IAAI,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,QAAQ;wBAC3B,IAAI,EAAE,QAAQ;wBACd,OAAO,EAAE,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE;qBAC1E,CAAC;oBACF,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC;iBAC/B,CAAC;gBACJ,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;YAEX,uEAAuE;YACvE,sEAAsE;YACtE,MAAM,UAAU,GAAG,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAA;YACxE,MAAM,CAAC,UAAU,EAAE,YAAY,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBACnD,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC;oBACpB,EAAE,EAAE,CAAC,YAAY,CAAC;oBAClB,KAAK,EAAE,UAAU;oBACjB,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;iBACvB,CAAC;gBACF,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;aAClE,CAAC,CAAA;YAEF,MAAM,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAA;YAC7C,KAAK,MAAM,GAAG,IAAI,UAAqE,EAAE,CAAC;gBACxF,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;YAClD,CAAC;YAED,MAAM,SAAS,GAAI,YAAsD;iBACtE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC;iBACzB,MAAM,CAAC,CAAC,EAAE,EAAgB,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAA;YAC5C,MAAM,WAAW,GAAG,SAAS,CAAC,MAAM;gBAClC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC;oBACvB,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE;oBAChC,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE;iBAC9C,CAAC;gBACJ,CAAC,CAAC,EAAE,CAAA;YAEN,MAAM,KAAK,GACT,IAaD,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACZ,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,UAAU,EAAE,CAAC,CAAC,UAAU;gBACxB,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI;gBACtB,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI;gBACpB,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,WAAW,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI;gBAC/D,WAAW,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI;gBAC/D,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,WAAW,EAAE;gBACpC,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,WAAW,EAAE;gBACpC,QAAQ,EAAE,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC;gBACrC,MAAM,EAAE,CAAC,CAAC,SAAS;oBACjB,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,SAAS,CAAC,KAAK,EAAE;oBAC7E,CAAC,CAAC,IAAI;aACT,CAAC,CAAC,CAAA;YAEH,OAAO,IAAI,CAAC;gBACV,IAAI,EAAE;oBACJ,KAAK;oBACL,KAAK;oBACL,IAAI;oBACJ,QAAQ;oBACR,KAAK,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;oBAC/E,OAAO,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,CAA8C,EAAE,EAAE,CAAC,CAAC;wBAC5E,EAAE,EAAE,CAAC,CAAC,EAAE;wBACR,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK;qBAChC,CAAC,CAAC;iBACJ;aACF,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,aAAa,CAAC,GAAG,EAAE,YAAY,CAAC,CAAA;QACzC,CAAC;IACH,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/dist/api/routes/security-center.d.ts

@@ -0,0 +1,3 @@
+import type { ApiRouter } from '../router.js';
+export declare function registerSecurityCenterRoutes(router: ApiRouter): void;
+//# sourceMappingURL=security-center.d.ts.map

package/dist/api/routes/security-center.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-center.d.ts","sourceRoot":"","sources":["../../../src/api/routes/security-center.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAA;AAW7C,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAiEpE"}

package/dist/api/routes/security-center.js

@@ -0,0 +1,71 @@
+import { getClientIp } from '../../security/client-ip.js';
+import { guardedDb } from '../guarded-db.js';
+import { importAIPlugin, json, internalError, requireAuth, requireAdminScope, } from '../route-helpers.js';
+export function registerSecurityCenterRoutes(router) {
+    const db = guardedDb;
+    // ---------------------------------------------------------------------------
+    // Security Center
+    //   GET  /security                       — computed posture + summaries
+    //   PUT  /security                        — persist enforced policy (lockout-safe)
+    //   POST /security/sessions/revoke-all    — revoke the caller's other sessions
+    // ---------------------------------------------------------------------------
+    router.get('/security', async (request) => {
+        try {
+            const auth = await requireAuth(request);
+            if (auth.error)
+                return auth.error;
+            const adminErr = requireAdminScope(auth.session);
+            if (adminErr)
+                return adminErr;
+            const { getSecurityCenterData } = await import('../../security/center/gather.js');
+            const data = await getSecurityCenterData({
+                db: db(),
+                userId: auth.session.userId,
+                currentIp: getClientIp(request),
+            });
+            return json({ data });
+        }
+        catch (err) {
+            return internalError(err, 'security GET');
+        }
+    });
+    // Read-only AI status. The dashboard cannot configure AI — it is wired up
+    // server-side via `aiPlugin({ provider, apiKey })` reading environment
+    // variables. This endpoint just reports whether the plugin is installed and
+    // a provider is configured so the admin UI can show an honest status instead
+    // of a decorative key field. Never returns secret values.
+    router.get('/ai/status', async (request) => {
+        try {
+            const auth = await requireAuth(request);
+            if (auth.error)
+                return auth.error;
+            const adminErr = requireAdminScope(auth.session);
+            if (adminErr)
+                return adminErr;
+            let installed = false;
+            let configured = false;
+            try {
+                const aiMod = await importAIPlugin();
+                installed = true;
+                if (typeof aiMod?.getAIProvider === 'function') {
+                    configured = aiMod.getAIProvider() != null;
+                }
+            }
+            catch {
+                installed = false;
+            }
+            // Best-effort provider hint from the environment. We only expose which
+            // provider env var is present, never the key value itself.
+            const provider = process.env.ANTHROPIC_API_KEY
+                ? 'anthropic'
+                : process.env.OPENAI_API_KEY
+                    ? 'openai'
+                    : null;
+            return json({ data: { installed, configured, provider } });
+        }
+        catch (err) {
+            return internalError(err, 'ai status');
+        }
+    });
+}
+//# sourceMappingURL=security-center.js.map

package/dist/api/routes/security-center.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-center.js","sourceRoot":"","sources":["../../../src/api/routes/security-center.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAA;AACzD,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAC5C,OAAO,EACL,cAAc,EACd,IAAI,EACJ,aAAa,EACb,WAAW,EACX,iBAAiB,GAClB,MAAM,qBAAqB,CAAA;AAE5B,MAAM,UAAU,4BAA4B,CAAC,MAAiB;IAC5D,MAAM,EAAE,GAAG,SAAS,CAAA;IACpB,8EAA8E;IAC9E,kBAAkB;IAClB,wEAAwE;IACxE,mFAAmF;IACnF,+EAA+E;IAC/E,8EAA8E;IAE9E,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QACxC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAA;YACvC,IAAI,IAAI,CAAC,KAAK;gBAAE,OAAO,IAAI,CAAC,KAAK,CAAA;YACjC,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YAChD,IAAI,QAAQ;gBAAE,OAAO,QAAQ,CAAA;YAE7B,MAAM,EAAE,qBAAqB,EAAE,GAAG,MAAM,MAAM,CAAC,iCAAiC,CAAC,CAAA;YACjF,MAAM,IAAI,GAAG,MAAM,qBAAqB,CAAC;gBACvC,EAAE,EAAE,EAAE,EAAE;gBACR,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;gBAC3B,SAAS,EAAE,WAAW,CAAC,OAAO,CAAC;aAChC,CAAC,CAAA;YACF,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAA;QACvB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,aAAa,CAAC,GAAG,EAAE,cAAc,CAAC,CAAA;QAC3C,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,0EAA0E;IAC1E,uEAAuE;IACvE,4EAA4E;IAC5E,6EAA6E;IAC7E,0DAA0D;IAC1D,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QACzC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAA;YACvC,IAAI,IAAI,CAAC,KAAK;gBAAE,OAAO,IAAI,CAAC,KAAK,CAAA;YACjC,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YAChD,IAAI,QAAQ;gBAAE,OAAO,QAAQ,CAAA;YAE7B,IAAI,SAAS,GAAG,KAAK,CAAA;YACrB,IAAI,UAAU,GAAG,KAAK,CAAA;YACtB,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,MAAM,cAAc,EAAE,CAAA;gBACpC,SAAS,GAAG,IAAI,CAAA;gBAChB,IAAI,OAAO,KAAK,EAAE,aAAa,KAAK,UAAU,EAAE,CAAC;oBAC/C,UAAU,GAAG,KAAK,CAAC,aAAa,EAAE,IAAI,IAAI,CAAA;gBAC5C,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS,GAAG,KAAK,CAAA;YACnB,CAAC;YAED,uEAAuE;YACvE,2DAA2D;YAC3D,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB;gBAC5C,CAAC,CAAC,WAAW;gBACb,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc;oBAC1B,CAAC,CAAC,QAAQ;oBACV,CAAC,CAAC,IAAI,CAAA;YAEV,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAA;QAC5D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,aAAa,CAAC,GAAG,EAAE,WAAW,CAAC,CAAA;QACxC,CAAC;IACH,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/dist/api/routes/seo-public.d.ts

@@ -0,0 +1,14 @@
+import type { ApiRouter } from '../router.js';
+import type { ActuateCMSConfig } from '../../config/types.js';
+/**
+ * Load the runtime config with DB-stored SEO overrides applied. Used by every
+ * public SEO surface (sitemap, robots, og.png) and by /resolve so admin edits
+ * in the Settings → SEO panel take effect without a redeploy.
+ *
+ * Falls back to the static config when no override row exists yet — first
+ * boot of a freshly-installed CMS keeps working.
+ */
+export declare function loadEffectiveConfig(): Promise<ActuateCMSConfig | null>;
+export declare function siteUrlFromRequest(request: Request, cfg?: ActuateCMSConfig | null): string;
+export declare function registerSeoPublicRoutes(router: ApiRouter): void;
+//# sourceMappingURL=seo-public.d.ts.map

package/dist/api/routes/seo-public.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"seo-public.d.ts","sourceRoot":"","sources":["../../../src/api/routes/seo-public.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAA;AAE7C,OAAO,KAAK,EAAE,gBAAgB,EAAwB,MAAM,uBAAuB,CAAA;AAoBnF;;;;;;;GAOG;AACH,wBAAsB,mBAAmB,IAAI,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAU5E;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,gBAAgB,GAAG,IAAI,GAAG,MAAM,CAW1F;AAED,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAg7B/D"}