@antasphere/chassis-server 1.0.0

package/dist/api/export.js

@@ -0,0 +1,393 @@
+import { Readable } from 'node:stream';
+import { finished } from 'node:stream/promises';
+import { and, asc, eq, gt, isNull, sql } from 'drizzle-orm';
+import { ZipFile } from 'yazl';
+import { apiKeys, auditLog, files, instanceSettings, invitations, projectMembers, projects, projectTeams, user as userTable, workspaceMembers, workspaces, workspaceTeamMembers, workspaceTeams } from '@antasphere/chassis-db';
+import { blobKey } from '../storage/driver.js';
+import { requireAuth, requireNonGuest, requireRole } from '../middleware/auth-context.js';
+import { rateLimit } from '../middleware/rate-limit.js';
+/**
+ * GET /workspace/export — the GDPR/portability bundle: every workspace table
+ * as JSON, the audit log as NDJSON, and every live blob, streamed as one zip
+ * (yazl; modeled on the files-content streaming precedent in files.ts).
+ * Secrets never leave: invitations drop tokenHash, api-keys drop secretHash.
+ */
+const AUDIT_BATCH = 500;
+/**
+ * The entry names the chassis writes itself, without their extension. A tool
+ * entry that lands on one of them is refused: never a silent overwrite, never
+ * two zip entries of one name. (`files/…` needs no line here: a sanitized name
+ * holds no `/`.) `audit-log` is reserved although its file is `.ndjson`, so
+ * that the bundle never holds two audit logs.
+ */
+export const RESERVED_EXPORT_ENTRY_NAMES = [
+    'manifest',
+    'workspace',
+    'members',
+    'invitations',
+    'api-keys',
+    'projects',
+    'project_members',
+    'teams',
+    'team_members',
+    'project_teams',
+    'audit-log',
+    'files',
+    'skipped-blobs'
+];
+/**
+ * Tool entries → zip entries, BEFORE the stream starts: every name goes
+ * through `sanitizeEntryName`, every `rows` through `jsonBuffer`, and a name
+ * that collides (compared without case, since the bundle is extracted on
+ * case-insensitive disks too) with a chassis entry or with another tool entry
+ * throws. Order is the tool's.
+ */
+export function resolveExportEntries(entries) {
+    if (!Array.isArray(entries))
+        throw new Error('export entries: the tool must return an array of entries');
+    const taken = new Set(RESERVED_EXPORT_ENTRY_NAMES);
+    return entries.map((entry) => {
+        if (typeof entry?.name !== 'string' || !Array.isArray(entry.rows)) {
+            throw new Error('export entries: every entry is { name: string, rows: unknown[] }');
+        }
+        const name = sanitizeEntryName(entry.name);
+        const key = name.toLowerCase();
+        if (taken.has(key)) {
+            throw new Error(`export entries: the name "${name}" is already an entry of the bundle`);
+        }
+        taken.add(key);
+        return { entryName: `${name}.json`, buffer: jsonBuffer(entry.rows) };
+    });
+}
+/**
+ * Zip-slip guard: entry names embed the user-supplied originalName, so strip
+ * path separators (`/`, `\`) and control chars, and cap the length — an
+ * uploaded name like `../../etc/cron.d/x` must never place an entry outside
+ * the extraction directory.
+ */
+export function sanitizeEntryName(name) {
+    // eslint-disable-next-line no-control-regex
+    const cleaned = name.replace(/[/\\\u0000-\u001f\u007f]/g, '_');
+    return (cleaned || 'file').slice(0, 150);
+}
+function jsonBuffer(value) {
+    return Buffer.from(JSON.stringify(value, null, 2) + '\n', 'utf8');
+}
+/** Keyset walk of the audit log, one NDJSON line per row (never buffers the table). */
+async function* auditNdjson(db, workspaceId) {
+    let lastId = 0;
+    for (;;) {
+        const rows = await db
+            .select()
+            .from(auditLog)
+            .where(and(eq(auditLog.workspaceId, workspaceId), gt(auditLog.id, lastId)))
+            .orderBy(asc(auditLog.id))
+            .limit(AUDIT_BATCH);
+        if (rows.length === 0)
+            return;
+        for (const row of rows) {
+            yield JSON.stringify({ ...row, createdAt: row.createdAt.toISOString() }) + '\n';
+            lastId = row.id;
+        }
+        if (rows.length < AUDIT_BATCH)
+            return;
+    }
+}
+export function registerExportRoutes(api, deps) {
+    const { db, env, storage, audit, limiters, clientIp, logger } = deps;
+    // Gates, in order: rate limit (IP AND user — exports are expensive) →
+    // authenticated → admin+. Machine principals additionally passed the
+    // fail-closed export-scope gate in authContext before landing here.
+    api.use('/workspace/export', rateLimit(limiters.workspaceExport, clientIp, async (c) => {
+        const principal = c.get('principal');
+        return principal ? [`u:${principal.userId}`] : [];
+    }));
+    api.use('/workspace/export', requireAuth());
+    // Guest capability limit (D2): the whole-workspace export is the named
+    // workspace-scope surface guests must never reach. Defense in depth in
+    // front of the admin gate — a guest is minted role 'member' and the role
+    // is locked (api/members.ts), but export is exactly the surface where a
+    // second, origin-keyed wall is cheap and the failure catastrophic.
+    api.use('/workspace/export', requireNonGuest());
+    api.use('/workspace/export', requireRole('admin'));
+    api.openapi(deps.workspaceExportRoute, async (c) => {
+        const principal = c.get('principal');
+        const workspaceId = principal.workspaceId;
+        const [instance] = await db.select().from(instanceSettings).limit(1);
+        const [{ liveFiles }] = (await db
+            .select({ liveFiles: sql `count(*)::int` })
+            .from(files)
+            .where(and(eq(files.workspaceId, workspaceId), isNull(files.deletedAt))));
+        // The tool's entries (the `api.exportEntries` slot), computed and
+        // serialized BEFORE the audit row and before the first byte: a
+        // contribution that throws, or whose name collides, answers the standard
+        // 500 with no audit row (the middleware writes none on a 4xx/5xx, and the
+        // session row below is not reached) and never a truncated zip. They are
+        // held in memory until their place in the pump: bounded tables only, the
+        // same stance as the chassis sections of step 2. No slot: nothing runs.
+        const toolEntries = deps.exportEntries
+            ? resolveExportEntries(await deps.exportEntries(db, workspaceId))
+            : [];
+        // Exactly one audit row either way: machine reads are audited by the
+        // middleware (it picks this up from c.set), session GETs are not
+        // (audit/service.ts) — so sessions write directly here.
+        const auditInfo = {
+            action: 'workspace.export',
+            resourceType: 'workspace',
+            resourceId: workspaceId,
+            metadata: { files: liveFiles }
+        };
+        c.set('audit', auditInfo);
+        if (principal.via === 'session') {
+            await audit.write({
+                workspaceId,
+                principal,
+                ...auditInfo,
+                requestId: c.get('requestId'),
+                ip: clientIp(c)
+            });
+        }
+        const zip = new ZipFile();
+        // @types/yazl types outputStream as the legacy NodeJS.ReadableStream; at
+        // runtime it is a real Readable (a PassThrough), which destroy/toWeb need.
+        const output = zip.outputStream;
+        // A client abort must tear down the source stream and the zip output or
+        // every cancelled download leaks a descriptor/S3 socket (files.ts rule).
+        let currentBlobStream = null;
+        c.req.raw.signal.addEventListener('abort', () => {
+            currentBlobStream?.destroy();
+            output.destroy(new Error('client aborted the export download'));
+        });
+        // Sequential pump, started before returning: entries are added in a
+        // fixed order while the output already streams. An error mid-pump
+        // destroys the output stream → the client sees a truncated (invalid)
+        // zip rather than a silently incomplete "valid" one — accepted: HTTP has
+        // no way to fail a 200 that already started streaming.
+        void (async () => {
+            // 1. Manifest first (no skip list here — it is not known yet; the
+            //    skips land in skipped-blobs.json, written last).
+            zip.addBuffer(jsonBuffer({
+                formatVersion: 1,
+                exportedAt: new Date().toISOString(),
+                instance: {
+                    instanceId: instance?.instanceId ?? null,
+                    name: instance?.name ?? null,
+                    edition: env.EDITION,
+                    version: env.APP_VERSION
+                },
+                workspaceId
+            }), 'manifest.json');
+            // 2. The small bounded tables. Secrets are excluded by SELECTION, not
+            //    by post-filtering: invitations.tokenHash and apiKeys.secretHash
+            //    are simply never queried.
+            const [workspace] = await db
+                .select({ id: workspaces.id, name: workspaces.name, createdAt: workspaces.createdAt })
+                .from(workspaces)
+                .where(eq(workspaces.id, workspaceId))
+                .limit(1);
+            zip.addBuffer(jsonBuffer(workspace ?? null), 'workspace.json');
+            const memberRows = await db
+                .select({
+                id: workspaceMembers.id,
+                userId: workspaceMembers.userId,
+                email: userTable.email,
+                name: userTable.name,
+                role: workspaceMembers.role,
+                isActive: workspaceMembers.isActive,
+                createdAt: workspaceMembers.createdAt,
+                lastSeenAt: workspaceMembers.lastSeenAt
+            })
+                .from(workspaceMembers)
+                .innerJoin(userTable, eq(workspaceMembers.userId, userTable.id))
+                .where(eq(workspaceMembers.workspaceId, workspaceId))
+                .orderBy(asc(workspaceMembers.createdAt), asc(workspaceMembers.id));
+            zip.addBuffer(jsonBuffer(memberRows), 'members.json');
+            const invitationRows = await db
+                .select({
+                id: invitations.id,
+                email: invitations.email,
+                role: invitations.role,
+                invitedBy: invitations.invitedBy,
+                expiresAt: invitations.expiresAt,
+                acceptedAt: invitations.acceptedAt,
+                revokedAt: invitations.revokedAt,
+                createdAt: invitations.createdAt
+            })
+                .from(invitations)
+                .where(eq(invitations.workspaceId, workspaceId))
+                .orderBy(asc(invitations.createdAt), asc(invitations.id));
+            zip.addBuffer(jsonBuffer(invitationRows), 'invitations.json');
+            // PINNED keys only (workspace_id = this workspace): keys are USER
+            // credentials under the user-scoped model — an unpinned key belongs
+            // to its holder, not to any one workspace's export.
+            const apiKeyRows = await db
+                .select({
+                id: apiKeys.id,
+                keyId: apiKeys.keyId,
+                name: apiKeys.name,
+                scopes: apiKeys.scopes,
+                createdBy: apiKeys.createdBy,
+                createdAt: apiKeys.createdAt,
+                lastUsedAt: apiKeys.lastUsedAt,
+                revokedAt: apiKeys.revokedAt,
+                expiresAt: apiKeys.expiresAt
+            })
+                .from(apiKeys)
+                .where(eq(apiKeys.workspaceId, workspaceId))
+                .orderBy(asc(apiKeys.createdAt), asc(apiKeys.id));
+            zip.addBuffer(jsonBuffer(apiKeyRows), 'api-keys.json');
+            // Projects and their members, archived projects included (a project is
+            // never deleted). What a tool links to a project is the tool's entry.
+            const projectRows = await db
+                .select({
+                id: projects.id,
+                name: projects.name,
+                description: projects.description,
+                metadata: projects.metadata,
+                archivedAt: projects.archivedAt,
+                createdBy: projects.createdBy,
+                createdAt: projects.createdAt,
+                updatedAt: projects.updatedAt
+            })
+                .from(projects)
+                .where(eq(projects.workspaceId, workspaceId))
+                .orderBy(asc(projects.createdAt), asc(projects.id));
+            zip.addBuffer(jsonBuffer(projectRows), 'projects.json');
+            const projectMemberRows = await db
+                .select({
+                id: projectMembers.id,
+                projectId: projectMembers.projectId,
+                memberId: projectMembers.memberId,
+                userId: workspaceMembers.userId,
+                role: projectMembers.role,
+                addedBy: projectMembers.addedBy,
+                createdAt: projectMembers.createdAt
+            })
+                .from(projectMembers)
+                .innerJoin(projects, eq(projectMembers.projectId, projects.id))
+                .innerJoin(workspaceMembers, eq(projectMembers.memberId, workspaceMembers.id))
+                .where(eq(projects.workspaceId, workspaceId))
+                .orderBy(asc(projectMembers.createdAt), asc(projectMembers.id));
+            zip.addBuffer(jsonBuffer(projectMemberRows), 'project_members.json');
+            // The teams (PRDCT-2813): the tool's own and the hub's projections
+            // alike (`hubTeamId` tells them apart), their seats, and their places
+            // on projects (PRDCT-2794). The same three tables on both editions.
+            const teamRows = await db
+                .select({
+                id: workspaceTeams.id,
+                hubTeamId: workspaceTeams.hubTeamId,
+                slug: workspaceTeams.slug,
+                name: workspaceTeams.name,
+                createdBy: workspaceTeams.createdBy,
+                createdAt: workspaceTeams.createdAt,
+                updatedAt: workspaceTeams.updatedAt
+            })
+                .from(workspaceTeams)
+                .where(eq(workspaceTeams.workspaceId, workspaceId))
+                .orderBy(asc(workspaceTeams.createdAt), asc(workspaceTeams.id));
+            zip.addBuffer(jsonBuffer(teamRows), 'teams.json');
+            const teamMemberRows = await db
+                .select({
+                id: workspaceTeamMembers.id,
+                teamId: workspaceTeamMembers.teamId,
+                memberId: workspaceTeamMembers.memberId,
+                userId: workspaceMembers.userId,
+                addedBy: workspaceTeamMembers.addedBy,
+                createdAt: workspaceTeamMembers.createdAt
+            })
+                .from(workspaceTeamMembers)
+                .innerJoin(workspaceTeams, eq(workspaceTeamMembers.teamId, workspaceTeams.id))
+                .innerJoin(workspaceMembers, eq(workspaceTeamMembers.memberId, workspaceMembers.id))
+                .where(eq(workspaceTeams.workspaceId, workspaceId))
+                .orderBy(asc(workspaceTeamMembers.createdAt), asc(workspaceTeamMembers.id));
+            zip.addBuffer(jsonBuffer(teamMemberRows), 'team_members.json');
+            const projectTeamRows = await db
+                .select({
+                id: projectTeams.id,
+                projectId: projectTeams.projectId,
+                teamId: projectTeams.teamId,
+                role: projectTeams.role,
+                addedBy: projectTeams.addedBy,
+                createdAt: projectTeams.createdAt
+            })
+                .from(projectTeams)
+                .innerJoin(projects, eq(projectTeams.projectId, projects.id))
+                .where(eq(projects.workspaceId, workspaceId))
+                .orderBy(asc(projectTeams.createdAt), asc(projectTeams.id));
+            zip.addBuffer(jsonBuffer(projectTeamRows), 'project_teams.json');
+            // 3. Audit log as NDJSON, keyset-batched (this table is unbounded).
+            zip.addReadStream(Readable.from(auditNdjson(db, workspaceId)), 'audit-log.ndjson');
+            // 4. Files metadata — ALL rows including soft-deleted (deletedAt set;
+            //    createdBy may be null after an account delete).
+            const fileRows = await db
+                .select()
+                .from(files)
+                .where(eq(files.workspaceId, workspaceId))
+                .orderBy(asc(files.createdAt), asc(files.id));
+            zip.addBuffer(jsonBuffer(fileRows.map((f) => ({
+                id: f.id,
+                sha256: f.sha256,
+                sizeBytes: f.sizeBytes,
+                contentType: f.contentType,
+                originalName: f.originalName,
+                createdBy: f.createdBy,
+                createdAt: f.createdAt.toISOString(),
+                deletedAt: f.deletedAt?.toISOString() ?? null
+            }))), 'files.json');
+            // 4b. The tool's entries, in the tool's order (none without the slot).
+            for (const entry of toolEntries)
+                zip.addBuffer(entry.buffer, entry.entryName);
+            // 5. Blobs, strictly one at a time: await each stream's end before
+            //    opening the next so file descriptors / S3 sockets never pile up
+            //    (yazl keeps accepting entries while piping until end()).
+            const skipped = [];
+            for (const f of fileRows) {
+                // Destroying yazl's output does NOT stop the pump: the ZipFile only
+                // latches errors emitted on itself, so entries added after an abort
+                // are still opened and fully drained. Check the signal explicitly or
+                // a cancelled multi-GB export keeps consuming disk/S3 bandwidth.
+                if (c.req.raw.signal.aborted)
+                    throw new Error('client aborted the export download');
+                if (f.deletedAt) {
+                    skipped.push({ fileId: f.id, sha256: f.sha256, reason: 'soft-deleted' });
+                    continue;
+                }
+                const key = blobKey(f.workspaceId, f.sha256);
+                if (!(await storage.exists(key))) {
+                    skipped.push({ fileId: f.id, sha256: f.sha256, reason: 'blob-missing' });
+                    continue;
+                }
+                const stream = await storage.getStream(key);
+                currentBlobStream = stream;
+                // compress: false — media/binary blobs don't deflate; JSON entries
+                // above keep yazl's default compression.
+                zip.addReadStream(stream, `files/${f.id}-${sanitizeEntryName(f.originalName)}`, {
+                    compress: false
+                });
+                await finished(stream);
+                currentBlobStream = null;
+            }
+            // 6. The skip list last (this is why the manifest carries none).
+            zip.addBuffer(jsonBuffer(skipped), 'skipped-blobs.json');
+            zip.end();
+        })().catch((err) => {
+            // A client cancel is routine, not an operational error.
+            if (c.req.raw.signal.aborted) {
+                logger.info({ workspaceId }, 'workspace export cancelled by the client');
+            }
+            else {
+                logger.error({ err, workspaceId }, 'workspace export pump failed — download truncated');
+            }
+            currentBlobStream?.destroy();
+            output.destroy(err instanceof Error ? err : new Error(String(err)));
+        });
+        const stamp = new Date().toISOString().slice(0, 10).replace(/-/g, '');
+        return c.body(Readable.toWeb(output), 200, {
+            'content-type': 'application/zip',
+            'content-disposition': `attachment; filename="export-${instance?.instanceId ?? 'instance'}-${stamp}.zip"`,
+            'x-content-type-options': 'nosniff',
+            'cache-control': 'no-store'
+        });
+    });
+}
+//# sourceMappingURL=export.js.map

package/dist/api/export.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"export.js","sourceRoot":"","sources":["../../src/api/export.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAC5D,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAC/B,OAAO,EACL,OAAO,EACP,QAAQ,EACR,KAAK,EACL,gBAAgB,EAChB,WAAW,EACX,cAAc,EACd,QAAQ,EACR,YAAY,EACZ,IAAI,IAAI,SAAS,EACjB,gBAAgB,EAChB,UAAU,EACV,oBAAoB,EACpB,cAAc,EAEf,MAAM,wBAAwB,CAAC;AAKhC,OAAO,EAAE,OAAO,EAAsB,MAAM,sBAAsB,CAAC;AACnE,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAC1F,OAAO,EAAE,SAAS,EAAqB,MAAM,6BAA6B,CAAC;AAG3E;;;;;GAKG;AAEH,MAAM,WAAW,GAAG,GAAG,CAAC;AA6BxB;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG;IACzC,UAAU;IACV,WAAW;IACX,SAAS;IACT,aAAa;IACb,UAAU;IACV,UAAU;IACV,iBAAiB;IACjB,OAAO;IACP,cAAc;IACd,eAAe;IACf,WAAW;IACX,OAAO;IACP,eAAe;CACP,CAAC;AAQX;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAsB;IACzD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IACzG,MAAM,KAAK,GAAG,IAAI,GAAG,CAAS,2BAA2B,CAAC,CAAC;IAC3D,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QAC3B,IAAI,OAAO,KAAK,EAAE,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAClE,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;QACtF,CAAC;QACD,MAAM,IAAI,GAAG,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QAC/B,IAAI,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,6BAA6B,IAAI,qCAAqC,CAAC,CAAC;QAC1F,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACf,OAAO,EAAE,SAAS,EAAE,GAAG,IAAI,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;IACvE,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,4CAA4C;IAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,2BAA2B,EAAE,GAAG,CAAC,CAAC;IAC/D,OAAO,CAAC,OAAO,IAAI,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;AACpE,CAAC;AAED,uFAAuF;AACvF,KAAK,SAAS,CAAC,CAAC,WAAW,CAAC,EAAM,EAAE,WAAmB;IACrD,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,SAAS,CAAC;QACR,MAAM,IAAI,GAAG,MAAM,EAAE;aAClB,MAAM,EAAE;aACR,IAAI,CAAC,QAAQ,CAAC;aACd,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;aAC1E,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;aACzB,KAAK,CAAC,WAAW,CAAC,CAAC;QACtB,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAC9B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,GAAG,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC;YAChF,MAAM,GAAG,GAAG,CAAC,EAAE,CAAC;QAClB,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,GAAG,WAAW;YAAE,OAAO;IACxC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,GAAgB,EAAE,IAAqB;IAC1E,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAErE,sEAAsE;IACtE,qEAAqE;IACrE,oEAAoE;IACpE,GAAG,CAAC,GAAG,CACL,mBAAmB,EACnB,SAAS,CAAC,QAAQ,CAAC,eAAe,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACxD,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACrC,OAAO,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACpD,CAAC,CAAC,CACH,CAAC;IACF,GAAG,CAAC,GAAG,CAAC,mBAAmB,EAAE,WAAW,EAAE,CAAC,CAAC;IAC5C,uEAAuE;IACvE,uEAAuE;IACvE,yEAAyE;IACzE,wEAAwE;IACxE,mEAAmE;IACnE,GAAG,CAAC,GAAG,CAAC,mBAAmB,EAAE,eAAe,EAAE,CAAC,CAAC;IAChD,GAAG,CAAC,GAAG,CAAC,mBAAmB,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;IAEnD,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,oBAAoB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACjD,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAE,CAAC;QACtC,MAAM,WAAW,GAAG,SAAS,CAAC,WAAW,CAAC;QAE1C,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACrE,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE;aAC9B,MAAM,CAAC,EAAE,SAAS,EAAE,GAAG,CAAQ,eAAe,EAAE,CAAC;aACjD,IAAI,CAAC,KAAK,CAAC;aACX,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAA4B,CAAC;QAEvG,kEAAkE;QAClE,+DAA+D;QAC/D,yEAAyE;QACzE,0EAA0E;QAC1E,wEAAwE;QACxE,yEAAyE;QACzE,wEAAwE;QACxE,MAAM,WAAW,GAAG,IAAI,CAAC,aAAa;YACpC,CAAC,CAAC,oBAAoB,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;YACjE,CAAC,CAAC,EAAE,CAAC;QAEP,qEAAqE;QACrE,iEAAiE;QACjE,wDAAwD;QACxD,MAAM,SAAS,GAAG;YAChB,MAAM,EAAE,kBAAkB;YAC1B,YAAY,EAAE,WAAW;YACzB,UAAU,EAAE,WAAW;YACvB,QAAQ,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE;SAC/B,CAAC;QACF,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC1B,IAAI,SAAS,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YAChC,MAAM,KAAK,CAAC,KAAK,CAAC;gBAChB,WAAW;gBACX,SAAS;gBACT,GAAG,SAAS;gBACZ,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC;gBAC7B,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;aAChB,CAAC,CAAC;QACL,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,yEAAyE;QACzE,2EAA2E;QAC3E,MAAM,MAAM,GAAG,GAAG,CAAC,YAAwB,CAAC;QAE5C,wEAAwE;QACxE,yEAAyE;QACzE,IAAI,iBAAiB,GAAoB,IAAI,CAAC;QAC9C,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE;YAC9C,iBAAiB,EAAE,OAAO,EAAE,CAAC;YAC7B,MAAM,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC,CAAC;QAClE,CAAC,CAAC,CAAC;QAEH,oEAAoE;QACpE,kEAAkE;QAClE,qEAAqE;QACrE,yEAAyE;QACzE,uDAAuD;QACvD,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,kEAAkE;YAClE,sDAAsD;YACtD,GAAG,CAAC,SAAS,CACX,UAAU,CAAC;gBACT,aAAa,EAAE,CAAC;gBAChB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACpC,QAAQ,EAAE;oBACR,UAAU,EAAE,QAAQ,EAAE,UAAU,IAAI,IAAI;oBACxC,IAAI,EAAE,QAAQ,EAAE,IAAI,IAAI,IAAI;oBAC5B,OAAO,EAAE,GAAG,CAAC,OAAO;oBACpB,OAAO,EAAE,GAAG,CAAC,WAAW;iBACzB;gBACD,WAAW;aACZ,CAAC,EACF,eAAe,CAChB,CAAC;YAEF,sEAAsE;YACtE,qEAAqE;YACrE,+BAA+B;YAC/B,MAAM,CAAC,SAAS,CAAC,GAAG,MAAM,EAAE;iBACzB,MAAM,CAAC,EAAE,EAAE,EAAE,UAAU,CAAC,EAAE,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,SAAS,EAAE,UAAU,CAAC,SAAS,EAAE,CAAC;iBACrF,IAAI,CAAC,UAAU,CAAC;iBAChB,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;iBACrC,KAAK,CAAC,CAAC,CAAC,CAAC;YACZ,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,SAAS,IAAI,IAAI,CAAC,EAAE,gBAAgB,CAAC,CAAC;YAE/D,MAAM,UAAU,GAAG,MAAM,EAAE;iBACxB,MAAM,CAAC;gBACN,EAAE,EAAE,gBAAgB,CAAC,EAAE;gBACvB,MAAM,EAAE,gBAAgB,CAAC,MAAM;gBAC/B,KAAK,EAAE,SAAS,CAAC,KAAK;gBACtB,IAAI,EAAE,SAAS,CAAC,IAAI;gBACpB,IAAI,EAAE,gBAAgB,CAAC,IAAI;gBAC3B,QAAQ,EAAE,gBAAgB,CAAC,QAAQ;gBACnC,SAAS,EAAE,gBAAgB,CAAC,SAAS;gBACrC,UAAU,EAAE,gBAAgB,CAAC,UAAU;aACxC,CAAC;iBACD,IAAI,CAAC,gBAAgB,CAAC;iBACtB,SAAS,CAAC,SAAS,EAAE,EAAE,CAAC,gBAAgB,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC;iBAC/D,KAAK,CAAC,EAAE,CAAC,gBAAgB,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;iBACpD,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,CAAC;YACtE,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,cAAc,CAAC,CAAC;YAEtD,MAAM,cAAc,GAAG,MAAM,EAAE;iBAC5B,MAAM,CAAC;gBACN,EAAE,EAAE,WAAW,CAAC,EAAE;gBAClB,KAAK,EAAE,WAAW,CAAC,KAAK;gBACxB,IAAI,EAAE,WAAW,CAAC,IAAI;gBACtB,SAAS,EAAE,WAAW,CAAC,SAAS;gBAChC,SAAS,EAAE,WAAW,CAAC,SAAS;gBAChC,UAAU,EAAE,WAAW,CAAC,UAAU;gBAClC,SAAS,EAAE,WAAW,CAAC,SAAS;gBAChC,SAAS,EAAE,WAAW,CAAC,SAAS;aACjC,CAAC;iBACD,IAAI,CAAC,WAAW,CAAC;iBACjB,KAAK,CAAC,EAAE,CAAC,WAAW,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;iBAC/C,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;YAC5D,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,kBAAkB,CAAC,CAAC;YAE9D,kEAAkE;YAClE,oEAAoE;YACpE,oDAAoD;YACpD,MAAM,UAAU,GAAG,MAAM,EAAE;iBACxB,MAAM,CAAC;gBACN,EAAE,EAAE,OAAO,CAAC,EAAE;gBACd,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;aAC7B,CAAC;iBACD,IAAI,CAAC,OAAO,CAAC;iBACb,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;iBAC3C,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;YACpD,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,eAAe,CAAC,CAAC;YAEvD,uEAAuE;YACvE,sEAAsE;YACtE,MAAM,WAAW,GAAG,MAAM,EAAE;iBACzB,MAAM,CAAC;gBACN,EAAE,EAAE,QAAQ,CAAC,EAAE;gBACf,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,WAAW,EAAE,QAAQ,CAAC,WAAW;gBACjC,QAAQ,EAAE,QAAQ,CAAC,QAAQ;gBAC3B,UAAU,EAAE,QAAQ,CAAC,UAAU;gBAC/B,SAAS,EAAE,QAAQ,CAAC,SAAS;gBAC7B,SAAS,EAAE,QAAQ,CAAC,SAAS;gBAC7B,SAAS,EAAE,QAAQ,CAAC,SAAS;aAC9B,CAAC;iBACD,IAAI,CAAC,QAAQ,CAAC;iBACd,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;iBAC5C,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;YACtD,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,eAAe,CAAC,CAAC;YAExD,MAAM,iBAAiB,GAAG,MAAM,EAAE;iBAC/B,MAAM,CAAC;gBACN,EAAE,EAAE,cAAc,CAAC,EAAE;gBACrB,SAAS,EAAE,cAAc,CAAC,SAAS;gBACnC,QAAQ,EAAE,cAAc,CAAC,QAAQ;gBACjC,MAAM,EAAE,gBAAgB,CAAC,MAAM;gBAC/B,IAAI,EAAE,cAAc,CAAC,IAAI;gBACzB,OAAO,EAAE,cAAc,CAAC,OAAO;gBAC/B,SAAS,EAAE,cAAc,CAAC,SAAS;aACpC,CAAC;iBACD,IAAI,CAAC,cAAc,CAAC;iBACpB,SAAS,CAAC,QAAQ,EAAE,EAAE,CAAC,cAAc,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;iBAC9D,SAAS,CAAC,gBAAgB,EAAE,EAAE,CAAC,cAAc,CAAC,QAAQ,EAAE,gBAAgB,CAAC,EAAE,CAAC,CAAC;iBAC7E,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;iBAC5C,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC;YAClE,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,iBAAiB,CAAC,EAAE,sBAAsB,CAAC,CAAC;YAErE,mEAAmE;YACnE,sEAAsE;YACtE,oEAAoE;YACpE,MAAM,QAAQ,GAAG,MAAM,EAAE;iBACtB,MAAM,CAAC;gBACN,EAAE,EAAE,cAAc,CAAC,EAAE;gBACrB,SAAS,EAAE,cAAc,CAAC,SAAS;gBACnC,IAAI,EAAE,cAAc,CAAC,IAAI;gBACzB,IAAI,EAAE,cAAc,CAAC,IAAI;gBACzB,SAAS,EAAE,cAAc,CAAC,SAAS;gBACnC,SAAS,EAAE,cAAc,CAAC,SAAS;gBACnC,SAAS,EAAE,cAAc,CAAC,SAAS;aACpC,CAAC;iBACD,IAAI,CAAC,cAAc,CAAC;iBACpB,KAAK,CAAC,EAAE,CAAC,cAAc,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;iBAClD,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC;YAClE,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,YAAY,CAAC,CAAC;YAElD,MAAM,cAAc,GAAG,MAAM,EAAE;iBAC5B,MAAM,CAAC;gBACN,EAAE,EAAE,oBAAoB,CAAC,EAAE;gBAC3B,MAAM,EAAE,oBAAoB,CAAC,MAAM;gBACnC,QAAQ,EAAE,oBAAoB,CAAC,QAAQ;gBACvC,MAAM,EAAE,gBAAgB,CAAC,MAAM;gBAC/B,OAAO,EAAE,oBAAoB,CAAC,OAAO;gBACrC,SAAS,EAAE,oBAAoB,CAAC,SAAS;aAC1C,CAAC;iBACD,IAAI,CAAC,oBAAoB,CAAC;iBAC1B,SAAS,CAAC,cAAc,EAAE,EAAE,CAAC,oBAAoB,CAAC,MAAM,EAAE,cAAc,CAAC,EAAE,CAAC,CAAC;iBAC7E,SAAS,CAAC,gBAAgB,EAAE,EAAE,CAAC,oBAAoB,CAAC,QAAQ,EAAE,gBAAgB,CAAC,EAAE,CAAC,CAAC;iBACnF,KAAK,CAAC,EAAE,CAAC,cAAc,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;iBAClD,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC,CAAC;YAC9E,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,mBAAmB,CAAC,CAAC;YAE/D,MAAM,eAAe,GAAG,MAAM,EAAE;iBAC7B,MAAM,CAAC;gBACN,EAAE,EAAE,YAAY,CAAC,EAAE;gBACnB,SAAS,EAAE,YAAY,CAAC,SAAS;gBACjC,MAAM,EAAE,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,YAAY,CAAC,IAAI;gBACvB,OAAO,EAAE,YAAY,CAAC,OAAO;gBAC7B,SAAS,EAAE,YAAY,CAAC,SAAS;aAClC,CAAC;iBACD,IAAI,CAAC,YAAY,CAAC;iBAClB,SAAS,CAAC,QAAQ,EAAE,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;iBAC5D,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;iBAC5C,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC;YAC9D,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,oBAAoB,CAAC,CAAC;YAEjE,oEAAoE;YACpE,GAAG,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC;YAEnF,sEAAsE;YACtE,qDAAqD;YACrD,MAAM,QAAQ,GAAG,MAAM,EAAE;iBACtB,MAAM,EAAE;iBACR,IAAI,CAAC,KAAK,CAAC;iBACX,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;iBACzC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;YAChD,GAAG,CAAC,SAAS,CACX,UAAU,CACR,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACnB,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,SAAS,EAAE,CAAC,CAAC,SAAS;gBACtB,WAAW,EAAE,CAAC,CAAC,WAAW;gBAC1B,YAAY,EAAE,CAAC,CAAC,YAAY;gBAC5B,SAAS,EAAE,CAAC,CAAC,SAAS;gBACtB,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,WAAW,EAAE;gBACpC,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,IAAI,IAAI;aAC9C,CAAC,CAAC,CACJ,EACD,YAAY,CACb,CAAC;YAEF,uEAAuE;YACvE,KAAK,MAAM,KAAK,IAAI,WAAW;gBAAE,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;YAE9E,mEAAmE;YACnE,qEAAqE;YACrE,8DAA8D;YAC9D,MAAM,OAAO,GAA8D,EAAE,CAAC;YAC9E,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;gBACzB,oEAAoE;gBACpE,oEAAoE;gBACpE,qEAAqE;gBACrE,iEAAiE;gBACjE,IAAI,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO;oBAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;gBACpF,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC;oBAChB,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;oBACzE,SAAS;gBACX,CAAC;gBACD,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;gBAC7C,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;oBACjC,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;oBACzE,SAAS;gBACX,CAAC;gBACD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBAC5C,iBAAiB,GAAG,MAAM,CAAC;gBAC3B,mEAAmE;gBACnE,yCAAyC;gBACzC,GAAG,CAAC,aAAa,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,EAAE,IAAI,iBAAiB,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,EAAE;oBAC9E,QAAQ,EAAE,KAAK;iBAChB,CAAC,CAAC;gBACH,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC;gBACvB,iBAAiB,GAAG,IAAI,CAAC;YAC3B,CAAC;YAED,iEAAiE;YACjE,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,oBAAoB,CAAC,CAAC;YACzD,GAAG,CAAC,GAAG,EAAE,CAAC;QACZ,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;YAC1B,wDAAwD;YACxD,IAAI,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAC7B,MAAM,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,EAAE,0CAA0C,CAAC,CAAC;YAC3E,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,WAAW,EAAE,EAAE,mDAAmD,CAAC,CAAC;YAC1F,CAAC;YACD,iBAAiB,EAAE,OAAO,EAAE,CAAC;YAC7B,MAAM,CAAC,OAAO,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACtE,CAAC,CAAC,CAAC;QAEH,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACtE,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAA8B,EAAE,GAAG,EAAE;YACtE,cAAc,EAAE,iBAAiB;YACjC,qBAAqB,EAAE,gCAAgC,QAAQ,EAAE,UAAU,IAAI,UAAU,IAAI,KAAK,OAAO;YACzG,wBAAwB,EAAE,SAAS;YACnC,eAAe,EAAE,UAAU;SAC5B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/api/files.d.ts

@@ -0,0 +1,40 @@
+import type { OpenAPIHono } from '@hono/zod-openapi';
+import type { SQL } from 'drizzle-orm';
+import type { Principal } from '@antasphere/chassis-contract';
+import type { DbConn } from '@antasphere/chassis-db';
+import type { Env } from '../env.js';
+import type { ScopeRoutes } from './scope-routes.js';
+import type { Logger } from '../logger.js';
+import type { PlatformRegistry } from '../platform/registry.js';
+import type { FileService } from '../files/service.js';
+import type { StorageDriver } from '../storage/driver.js';
+export interface FileRouteDeps {
+    service: FileService;
+    storage: StorageDriver;
+    registry: PlatformRegistry;
+    env: Pick<Env, 'MAX_FILE_SIZE_MB'>;
+    logger: Logger;
+    /**
+     * ADR 011 blob-delete guard: true when the blob is referenced by a live
+     * version manifest of the tool's resource — DELETE answers 409 file_in_use instead
+     * of removing it. Runs inside the delete transaction (files module stays
+     * tool-agnostic; the wiring point injects the tool's check).
+     */
+    blobInUse: (tx: DbConn, workspaceId: string, sha256: string) => Promise<boolean>;
+    /**
+     * ADR 013 per-blob read scope (SL-B1): a WHERE predicate over the `files`
+     * row, or `undefined` for the workspace admin/owner operator view. Injected
+     * for the same reason as `blobInUse` — the files module stays
+     * tool-agnostic and the wiring point supplies the tool's policy.
+     */
+    blobReadScope: (principal: Principal) => SQL | undefined;
+    /**
+     * The delete route the tool instantiated (its OpenAPI 409 carries the tool's
+     * wording), and the tool's message of that 409 `file_in_use`
+     * (`copy.fileInUse`): what references a blob is the tool's to name.
+     */
+    fileDeleteRoute: ScopeRoutes['fileDeleteRoute'];
+    fileInUse: string;
+}
+export declare function registerFileRoutes(api: OpenAPIHono, deps: FileRouteDeps): void;
+//# sourceMappingURL=files.d.ts.map

package/dist/api/files.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"files.d.ts","sourceRoot":"","sources":["../../src/api/files.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAIrD,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAEvC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,KAAK,EAAE,MAAM,EAAW,MAAM,wBAAwB,CAAC;AAC9D,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAGvD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAgB1D,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,WAAW,CAAC;IACrB,OAAO,EAAE,aAAa,CAAC;IACvB,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;IACnC,MAAM,EAAE,MAAM,CAAC;IACf;;;;;OAKG;IACH,SAAS,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACjF;;;;;OAKG;IACH,aAAa,EAAE,CAAC,SAAS,EAAE,SAAS,KAAK,GAAG,GAAG,SAAS,CAAC;IACzD;;;;OAIG;IACH,eAAe,EAAE,WAAW,CAAC,iBAAiB,CAAC,CAAC;IAChD,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,aAAa,GAAG,IAAI,CA2I9E"}

package/dist/api/files.js

@@ -0,0 +1,150 @@
+import { Readable } from 'node:stream';
+import { fileGetRoute, filesListRoute, fileUploadRoute } from '@antasphere/chassis-contract/routes';
+import { FileTooLargeError } from '../files/spool.js';
+import { serveBlob } from '../files/serve.js';
+import { isUuid } from '../pagination.js';
+import { requireAuth, requireNonGuest } from '../middleware/auth-context.js';
+const err = (code, message) => ({ error: { code, message } });
+const toWire = (f) => ({
+    id: f.id,
+    sha256: f.sha256,
+    sizeBytes: f.sizeBytes,
+    contentType: f.contentType,
+    originalName: f.originalName,
+    createdBy: f.createdBy,
+    createdAt: f.createdAt.toISOString()
+});
+export function registerFileRoutes(api, deps) {
+    const { service, storage, registry, env, logger } = deps;
+    const maxBytes = env.MAX_FILE_SIZE_MB * 1024 * 1024;
+    api.use('/files', requireAuth());
+    api.use('/files/*', requireAuth());
+    // Guest capability limit (D2, both editions): the generic files surface is
+    // a WORKSPACE-level surface (ADR 006) — an inventory of the tenant's blobs
+    // with a delete on it. Its READS are now per-resource authorized like every
+    // other content read (SL-B1: `deps.blobReadScope`, ADR 013), but the
+    // surface as a whole still belongs to the workspace, and an external guest
+    // has no business there: they were invited to ONE resource, not to the host
+    // tenant's file cabinet. Guests push and pull its bytes through the ADR
+    // 013-gated routes of the tool instead (its asset upload and its
+    // per-resource asset download).
+    api.use('/files', requireNonGuest());
+    api.use('/files/*', requireNonGuest());
+    api.openapi(filesListRoute, async (c) => {
+        const principal = c.get('principal');
+        const { cursor, limit } = c.req.valid('query');
+        const { files: rows, nextCursor } = await service.list(principal.workspaceId, {
+            ...(cursor !== undefined ? { cursor } : {}),
+            limit,
+            // ADR 013 (SL-B1): a plain member pages the blobs they uploaded plus
+            // those referenced by resources they can read; admins/owners keep the
+            // whole-workspace operator view.
+            visibility: deps.blobReadScope(principal)
+        });
+        return c.json({ files: rows.map(toWire), nextCursor }, 200);
+    });
+    api.openapi(fileUploadRoute, async (c) => {
+        const principal = c.get('principal');
+        const { name } = c.req.valid('query');
+        const contentType = c.req.header('content-type') ?? 'application/octet-stream';
+        // The declared-size check and the usage event are the entitlement gate's
+        // (the billing rail, §7): a tool declares `files.upload` on this route in
+        // its contract and the chassis gate runs it before this handler; the hard
+        // cap is still enforced mid-stream below. Nothing is checked or emitted
+        // by hand here.
+        if (!c.req.raw.body) {
+            return c.json(err('empty_body', 'Request body required'), 400);
+        }
+        try {
+            const { file, deduplicated } = await service.upload({
+                workspaceId: principal.workspaceId,
+                createdBy: principal.userId,
+                originalName: name,
+                contentType,
+                body: Readable.fromWeb(c.req.raw.body),
+                maxBytes
+            });
+            c.set('audit', {
+                action: 'file.upload',
+                resourceType: 'file',
+                resourceId: file.id,
+                metadata: { name, sizeBytes: file.sizeBytes, deduplicated }
+            });
+            registry.events.emit('file.uploaded', {
+                workspaceId: principal.workspaceId,
+                fileId: file.id,
+                sizeBytes: file.sizeBytes
+            });
+            return c.json({ file: toWire(file), deduplicated }, 201);
+        }
+        catch (e) {
+            if (e instanceof FileTooLargeError) {
+                return c.json(err('file_too_large', e.message), 413);
+            }
+            logger.error({ err: e }, 'file upload failed');
+            return c.json(err('upload_failed', 'Upload failed'), 400);
+        }
+    });
+    api.openapi(fileGetRoute, async (c) => {
+        const principal = c.get('principal');
+        const { id } = c.req.valid('param');
+        // 404, never 403, when the scope excludes the blob (ADR 013): a blob a
+        // principal cannot read must not be probeable by id either.
+        const file = await service.get(principal.workspaceId, id, deps.blobReadScope(principal));
+        if (!file)
+            return c.json(err('not_found', 'File not found'), 404);
+        return c.json(toWire(file), 200);
+    });
+    api.openapi(deps.fileDeleteRoute, async (c) => {
+        const principal = c.get('principal');
+        const { id } = c.req.valid('param');
+        // Same scope on the mutation: a member must not be able to delete (or
+        // probe) a blob they may not read.
+        const file = await service.get(principal.workspaceId, id, deps.blobReadScope(principal));
+        if (!file)
+            return c.json(err('not_found', 'File not found'), 404);
+        const outcome = await service.delete(file, (tx, row) => deps.blobInUse(tx, row.workspaceId, row.sha256));
+        if (outcome === 'in_use') {
+            return c.json(err('file_in_use', deps.fileInUse), 409);
+        }
+        c.set('audit', { action: 'file.delete', resourceType: 'file', resourceId: file.id });
+        return c.json(toWire(file), 200);
+    });
+    // ── Content: streamed, Range-capable. Registered as plain Hono routes (a
+    // byte endpoint, not part of the JSON OpenAPI surface); guarded by the
+    // same requireAuth + scope machinery as everything else under /files.
+    // The streaming machinery itself (ETag/304/Range/safe-serving) is shared
+    // with the tool's asset download — files/serve.ts.
+    const contentHandler = async (c, headOnly) => {
+        const principal = c.get('principal');
+        const id = c.req.param('id') ?? '';
+        // Plain Hono route (no contract param schema): reject a non-UUID id here
+        // or it reaches Postgres' uuid cast and surfaces as a sanitized 500.
+        if (!isUuid(id))
+            return c.json(err('not_found', 'File not found'), 404);
+        // The byte route carries the ADR 013 scope too (SL-B1) — this was the
+        // whole-tenant read: `workspace_id` alone served ANY resource's content to
+        // any member and to any read-scope key.
+        const file = await service.get(principal.workspaceId, id, deps.blobReadScope(principal));
+        if (!file)
+            return c.json(err('not_found', 'File not found'), 404);
+        return serveBlob(c, {
+            storage,
+            logger,
+            workspaceId: file.workspaceId,
+            sha256: file.sha256,
+            sizeBytes: file.sizeBytes,
+            contentType: file.contentType,
+            filename: file.originalName,
+            headOnly
+        });
+    };
+    // ONE registration for both verbs. Hono rewrites HEAD to GET before routing
+    // (verified against the pinned version: a HEAD request runs the GET handler
+    // and the HEAD registration never fires), so a separate `api.on('HEAD', …)`
+    // is dead code and every HEAD would silently stream the whole body. Read
+    // the verb off the request instead — that is the only signal that survives
+    // the rewrite. Never add an `api.on('HEAD', …)` route on this app.
+    api.get('/files/:id/content', (c) => contentHandler(c, c.req.method === 'HEAD'));
+}
+//# sourceMappingURL=files.js.map

package/dist/api/files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"files.js","sourceRoot":"","sources":["../../src/api/files.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAGvC,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAC;AAQpG,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAE9C,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAE7E,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,OAAe,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;AAE9E,MAAM,MAAM,GAAG,CAAC,CAAU,EAAE,EAAE,CAAC,CAAC;IAC9B,EAAE,EAAE,CAAC,CAAC,EAAE;IACR,MAAM,EAAE,CAAC,CAAC,MAAM;IAChB,SAAS,EAAE,CAAC,CAAC,SAAS;IACtB,WAAW,EAAE,CAAC,CAAC,WAAW;IAC1B,YAAY,EAAE,CAAC,CAAC,YAAY;IAC5B,SAAS,EAAE,CAAC,CAAC,SAAS;IACtB,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,WAAW,EAAE;CACrC,CAAC,CAAC;AA+BH,MAAM,UAAU,kBAAkB,CAAC,GAAgB,EAAE,IAAmB;IACtE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IACzD,MAAM,QAAQ,GAAG,GAAG,CAAC,gBAAgB,GAAG,IAAI,GAAG,IAAI,CAAC;IAEpD,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC;IACjC,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,WAAW,EAAE,CAAC,CAAC;IACnC,2EAA2E;IAC3E,2EAA2E;IAC3E,4EAA4E;IAC5E,qEAAqE;IACrE,2EAA2E;IAC3E,4EAA4E;IAC5E,wEAAwE;IACxE,iEAAiE;IACjE,gCAAgC;IAChC,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,eAAe,EAAE,CAAC,CAAC;IACrC,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,eAAe,EAAE,CAAC,CAAC;IAEvC,GAAG,CAAC,OAAO,CAAC,cAAc,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACtC,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAE,CAAC;QACtC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC/C,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE;YAC5E,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3C,KAAK;YACL,qEAAqE;YACrE,sEAAsE;YACtE,iCAAiC;YACjC,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC;SAC1C,CAAC,CAAC;QACH,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,EAAE,GAAG,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,OAAO,CAAC,eAAe,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACvC,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAE,CAAC;QACtC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,WAAW,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,0BAA0B,CAAC;QAE/E,yEAAyE;QACzE,0EAA0E;QAC1E,0EAA0E;QAC1E,wEAAwE;QACxE,gBAAgB;QAChB,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YACpB,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,uBAAuB,CAAC,EAAE,GAAG,CAAC,CAAC;QACjE,CAAC;QAED,IAAI,CAAC;YACH,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC;gBAClD,WAAW,EAAE,SAAS,CAAC,WAAW;gBAClC,SAAS,EAAE,SAAS,CAAC,MAAM;gBAC3B,YAAY,EAAE,IAAI;gBAClB,WAAW;gBACX,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,IAAyB,CAAC;gBAC3D,QAAQ;aACT,CAAC,CAAC;YAEH,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE;gBACb,MAAM,EAAE,aAAa;gBACrB,YAAY,EAAE,MAAM;gBACpB,UAAU,EAAE,IAAI,CAAC,EAAE;gBACnB,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,YAAY,EAAE;aAC5D,CAAC,CAAC;YACH,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE;gBACpC,WAAW,EAAE,SAAS,CAAC,WAAW;gBAClC,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,SAAS,EAAE,IAAI,CAAC,SAAS;aAC1B,CAAC,CAAC;YAEH,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,EAAE,GAAG,CAAC,CAAC;QAC3D,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,iBAAiB,EAAE,CAAC;gBACnC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,CAAC;YACvD,CAAC;YACD,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,oBAAoB,CAAC,CAAC;YAC/C,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,eAAe,CAAC,EAAE,GAAG,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,OAAO,CAAC,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACpC,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAE,CAAC;QACtC,MAAM,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACpC,uEAAuE;QACvE,4DAA4D;QAC5D,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,EAAE,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC;QACzF,IAAI,CAAC,IAAI;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,gBAAgB,CAAC,EAAE,GAAG,CAAC,CAAC;QAClE,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC5C,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAE,CAAC;QACtC,MAAM,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACpC,sEAAsE;QACtE,mCAAmC;QACnC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,EAAE,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC;QACzF,IAAI,CAAC,IAAI;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,gBAAgB,CAAC,EAAE,GAAG,CAAC,CAAC;QAClE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;QACzG,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;YACzB,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,CAAC;QACzD,CAAC;QACD,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QACrF,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,0EAA0E;IAC1E,uEAAuE;IACvE,sEAAsE;IACtE,yEAAyE;IACzE,mDAAmD;IACnD,MAAM,cAAc,GAAG,KAAK,EAAE,CAAU,EAAE,QAAiB,EAAE,EAAE;QAC7D,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAE,CAAC;QACtC,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACnC,yEAAyE;QACzE,qEAAqE;QACrE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,gBAAgB,CAAC,EAAE,GAAG,CAAC,CAAC;QACxE,sEAAsE;QACtE,2EAA2E;QAC3E,wCAAwC;QACxC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,EAAE,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC;QACzF,IAAI,CAAC,IAAI;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,gBAAgB,CAAC,EAAE,GAAG,CAAC,CAAC;QAElE,OAAO,SAAS,CAAC,CAAC,EAAE;YAClB,OAAO;YACP,MAAM;YACN,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,QAAQ,EAAE,IAAI,CAAC,YAAY;YAC3B,QAAQ;SACT,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,4EAA4E;IAC5E,4EAA4E;IAC5E,4EAA4E;IAC5E,yEAAyE;IACzE,2EAA2E;IAC3E,mEAAmE;IACnE,GAAG,CAAC,GAAG,CAAC,oBAAoB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC;AACnF,CAAC"}

package/dist/api/index.d.ts

@@ -0,0 +1,17 @@
+export { registerApiKeyRoutes } from './apikeys.js';
+export { registerAuditRoutes } from './audit.js';
+export { registerBreakGlassRoutes } from './break-glass.js';
+export { registerCliAuthRoutes } from './cli-auth.js';
+export { demoSessionJudge, demoSignInOn, registerDemoPassRoutes } from './demo-passes.js';
+export { registerExportRoutes, resolveExportEntries, sanitizeEntryName, RESERVED_EXPORT_ENTRY_NAMES, type ExportEntriesFn, type ExportEntry } from './export.js';
+export { registerFileRoutes } from './files.js';
+export { registerInvitationRoutes } from './invitations.js';
+export { registerMemberRoutes } from './members.js';
+export { registerOnboardingRoutes } from './onboarding.js';
+export { registerOpenApiDoc } from './openapi-doc.js';
+export { registerProjectRoutes } from './projects.js';
+export { registerSsoConnectRoutes } from './sso-connect.js';
+export { registerSsoLogoutRoutes } from './sso-logout.js';
+export { registerTeamRoutes } from './teams.js';
+export { type WorkspaceCloudDeps, registerWorkspaceRoutes, workspaceCreateWallClosed, workspaceCreationPolicy, workspaceCreationRefusal } from './workspaces.js';
+//# sourceMappingURL=index.d.ts.map