@data-club/ai-hub-server 0.0.1

package/dist/db/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/db/schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,EACL,IAAI,EACJ,KAAK,EACL,OAAO,EACP,UAAU,EACV,WAAW,EACX,IAAI,GACL,MAAM,yBAAyB,CAAC;AAEjC,gFAAgF;AAChF,gFAAgF;AAChF,gFAAgF;AAEhF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG,WAAW,CAC7B,MAAM,EACN;IACE,iEAAiE;IACjE,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE;IACrC,gDAAgD;IAChD,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE;IAC7C,iEAAiE;IACjE,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC;IACjC;;;;OAIG;IACH,YAAY,EAAE,IAAI,CAAC,eAAe,CAAC;IACnC;;;OAGG;IACH,cAAc,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC;IAClE;;;;OAIG;IACH,iBAAiB,EAAE,OAAO,CAAC,qBAAqB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;SACnE,OAAO,EAAE;SACT,OAAO,CAAC,KAAK,CAAC;IACjB,qCAAqC;IACrC,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE;QACjB,IAAI,EAAE,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,aAAa,CAAC;KACrD,CAAC;SACC,OAAO,EAAE;SACT,OAAO,CAAC,MAAM,CAAC;IAClB;;;;OAIG;IACH,eAAe,EAAE,IAAI,CAAC,kBAAkB,EAAE,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC;IACtE;;;;;;;;;;;;;;OAcG;IACH,iBAAiB,EAAE,IAAI,CAAC,qBAAqB,CAAC;SAC3C,OAAO,EAAE;SACT,OAAO,CAAC,GAAG,CAAA,yCAAyC,CAAC;IACxD,mFAAmF;IACnF,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC;SAC1B,OAAO,EAAE;SACT,OAAO,CAAC,GAAG,CAAA,yCAAyC,CAAC;IACxD,mFAAmF;IACnF,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC;SAC1B,OAAO,EAAE;SACT,OAAO,CAAC,GAAG,CAAA,yCAAyC,CAAC;CACzD,EACD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACN,+EAA+E;IAC/E,OAAO,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;CAC3C,CAAC,CACH,CAAC;AAEF,gFAAgF;AAChF,gFAAgF;AAChF,gFAAgF;AAEhF;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,EAAE;IACxC,sBAAsB;IACtB,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE;IACrC,0DAA0D;IAC1D,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE;IAC3C;;;OAGG;IACH,YAAY,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC,OAAO,EAAE;IAC9C,iEAAiE;IACjE,kBAAkB,EAAE,OAAO,CAAC,sBAAsB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;SACrE,OAAO,EAAE;SACT,OAAO,CAAC,KAAK,CAAC;IACjB,0EAA0E;IAC1E,mBAAmB,EAAE,OAAO,CAAC,uBAAuB,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAC1E,sEAAsE;IACtE,wBAAwB,EAAE,OAAO,CAAC,6BAA6B,CAAC;SAC7D,OAAO,EAAE;SACT,OAAO,CAAC,EAAE,CAAC;IACd;;;;;;;;;;;;;OAaG;IACH,wBAAwB,EAAE,OAAO,CAAC,6BAA6B,CAAC;SAC7D,OAAO,EAAE;SACT,OAAO,CAAC,EAAE,CAAC;IACd;;;;;;;;;;;;;;OAcG;IACH,eAAe,EAAE,IAAI,CAAC,mBAAmB,CAAC;IAC1C;;;;;;;;;;;;OAYG;IACH,wBAAwB,EAAE,IAAI,CAAC,6BAA6B,CAAC;IAC7D,+CAA+C;IAC/C,UAAU,EAAE,OAAO,CAAC,aAAa,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAChF,0BAA0B;IAC1B,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC;SAC1B,OAAO,EAAE;SACT,OAAO,CAAC,GAAG,CAAA,yCAAyC,CAAC;IACxD,0BAA0B;IAC1B,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC;SAC1B,OAAO,EAAE;SACT,OAAO,CAAC,GAAG,CAAA,yCAAyC,CAAC;CACzD,CAAC,CAAC;AAEH,gFAAgF;AAChF,gFAAgF;AAChF,gFAAgF;AAEhF;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,WAAW,CAChC,SAAS,EACT;IACE,sBAAsB;IACtB,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE;IACrC,sEAAsE;IACtE,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC;SACpB,OAAO,EAAE;SACT,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IACrD;;;OAGG;IACH,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC;SACtB,OAAO,EAAE;SACT,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;IACvD,qEAAqE;IACrE,mBAAmB,EAAE,IAAI,CAAC,uBAAuB,CAAC,CAAC,OAAO,EAAE;IAC5D;;;OAGG;IACH,YAAY,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC,OAAO,EAAE;IAC9C;;;OAGG;IACH,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE;IAC9B;;;OAGG;IACH,UAAU,EAAE,OAAO,CAAC,aAAa,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAChF;;;;;;OAMG;IACH,eAAe,EAAE,IAAI,CAAC,kBAAkB,CAAC;IACzC;;OAEG;IACH,SAAS,EAAE,IAAI,CAAC,WAAW,CAAC;IAC5B;;;OAGG;IACH,cAAc,EAAE,OAAO,CAAC,iBAAiB,CAAC;IAC1C;;;;;;;;;;;;;OAaG;IACH,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC;IAC/B,0BAA0B;IAC1B,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC;SAC1B,OAAO,EAAE;SACT,OAAO,CAAC,GAAG,CAAA,yCAAyC,CAAC;IACxD,0BAA0B;IAC1B,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC;SAC1B,OAAO,EAAE;SACT,OAAO,CAAC,GAAG,CAAA,yCAAyC,CAAC;CACzD,EACD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACN,qFAAqF;IACrF,YAAY,EAAE,KAAK,CAAC,wBAAwB,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC;CACtE,CAAC,CACH,CAAC;AAEF,gFAAgF;AAChF,gFAAgF;AAChF,gFAAgF;AAEhF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,EAAE;IACtC,sBAAsB;IACtB,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE;IACrC,4EAA4E;IAC5E,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC;SAC1B,OAAO,EAAE;SACT,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IACxD,gFAAgF;IAChF,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE;QACrB,IAAI,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,CAAC;KACjD,CAAC,CAAC,OAAO,EAAE;IACZ,uEAAuE;IACvE,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE;QACnB,IAAI,EAAE;YACJ,YAAY;YACZ,iBAAiB;YACjB,kBAAkB;YAClB,gBAAgB;YAChB,kBAAkB;YAClB,eAAe;SAChB;KACF,CAAC;IACF,sDAAsD;IACtD,OAAO,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACjD,qEAAqE;IACrE,cAAc,EAAE,IAAI,CAAC,iBAAiB,CAAC;IACvC,gBAAgB;IAChB,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC;SAC1B,OAAO,EAAE;SACT,OAAO,CAAC,GAAG,CAAA,yCAAyC,CAAC;IACxD,4DAA4D;IAC5D,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC;CAChC,CAAC,CAAC;AAEH,gFAAgF;AAChF,gFAAgF;AAChF,gFAAgF;AAEhF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,WAAW,CAClC,YAAY,EACZ;IACE,gFAAgF;IAChF,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC;SACpB,OAAO,EAAE;SACT,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IACrD,wCAAwC;IACxC,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE;IAC7B,+CAA+C;IAC/C,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;IACvC,kFAAkF;IAClF,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE;IAC9C,8CAA8C;IAC9C,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE;IAChD,0BAA0B;IAC1B,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC;SAC1B,OAAO,EAAE;SACT,OAAO,CAAC,GAAG,CAAA,yCAAyC,CAAC;CACzD,EACD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACN,EAAE,EAAE,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;CAC/C,CAAC,CACH,CAAC;AAEF,gFAAgF;AAChF,gFAAgF;AAChF,gFAAgF;AAEhF;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,WAAW,CAAC,eAAe,EAAE;IACvD,gCAAgC;IAChC,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE;IACxC,oFAAoF;IACpF,oBAAoB,EAAE,IAAI,CAAC,yBAAyB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IACzE,+DAA+D;IAC/D,YAAY,EAAE,IAAI,CAAC,gBAAgB,CAAC;IACpC,mFAAmF;IACnF,WAAW,EAAE,IAAI,CAAC,eAAe,CAAC;IAClC,uEAAuE;IACvE,cAAc,EAAE,IAAI,CAAC,iBAAiB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACjF,yDAAyD;IACzD,oBAAoB,EAAE,OAAO,CAAC,wBAAwB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;SACzE,OAAO,EAAE;SACT,OAAO,CAAC,IAAI,CAAC;IAChB,gEAAgE;IAChE,YAAY,EAAE,IAAI,CAAC,eAAe,EAAE,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC;SAC7D,OAAO,EAAE;SACT,OAAO,CAAC,OAAO,CAAC;IACnB;;;;OAIG;IACH,sBAAsB,EAAE,IAAI,CAAC,2BAA2B,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAC7E;;;OAGG;IACH,kBAAkB,EAAE,IAAI,CAAC,sBAAsB,CAAC;IAChD,+EAA+E;IAC/E,2BAA2B,EAAE,IAAI,CAAC,iCAAiC,CAAC;IACpE,6EAA6E;IAC7E,mBAAmB,EAAE,IAAI,CAAC,wBAAwB,CAAC;IACnD,0BAA0B;IAC1B,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC;SAC1B,OAAO,EAAE;SACT,OAAO,CAAC,GAAG,CAAA,yCAAyC,CAAC;CACzD,CAAC,CAAC;AAEH,gFAAgF;AAChF,gFAAgF;AAChF,gFAAgF;AAEhF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,WAAW,CACxC,kBAAkB,EAClB;IACE,0DAA0D;IAC1D,cAAc,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC,OAAO,EAAE;IACjD;;;;;OAKG;IACH,eAAe,EAAE,OAAO,CAAC,kBAAkB,CAAC,CAAC,OAAO,EAAE;IACtD;;;;;OAKG;IACH,cAAc,EAAE,IAAI,CAAC,iBAAiB,CAAC;IACvC;;;;;;OAMG;IACH,YAAY,EAAE,IAAI,CAAC,eAAe,CAAC;IACnC,0BAA0B;IAC1B,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC;SAC1B,OAAO,EAAE;SACT,OAAO,CAAC,GAAG,CAAA,yCAAyC,CAAC;IACxD,0BAA0B;IAC1B,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC;SAC1B,OAAO,EAAE;SACT,OAAO,CAAC,GAAG,CAAA,yCAAyC,CAAC;CACzD,EACD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACN,EAAE,EAAE,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,eAAe,CAAC,EAAE,CAAC;CACnE,CAAC,CACH,CAAC;AAmCF,gFAAgF;AAChF,gFAAgF;AAChF,gFAAgF;AAEhF;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,WAAW,CACrC,eAAe,EACf;IACE;;;OAGG;IACH,cAAc,EAAE,IAAI,CAAC,kBAAkB,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE;IAC/D,wEAAwE;IACxE,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC;SAC1B,OAAO,EAAE;SACT,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IACxD,8CAA8C;IAC9C,YAAY,EAAE,OAAO,CAAC,eAAe,CAAC;IACtC,kCAAkC;IAClC,gBAAgB,EAAE,OAAO,CAAC,mBAAmB,CAAC;IAC9C,6GAA6G;IAC7G,WAAW,EAAE,OAAO,CAAC,cAAc,CAAC;IACpC,uEAAuE;IACvE,iBAAiB,EAAE,OAAO,CAAC,qBAAqB,CAAC;IACjD,kEAAkE;IAClE,gBAAgB,EAAE,OAAO,CAAC,oBAAoB,CAAC;IAC/C,8DAA8D;IAC9D,eAAe,EAAE,OAAO,CAAC,kBAAkB,CAAC;IAC5C,mEAAmE;IACnE,aAAa,EAAE,OAAO,CAAC,gBAAgB,CAAC;IACxC,2CAA2C;IAC3C,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC;IACrB,8BAA8B;IAC9B,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC;SAC1B,OAAO,EAAE;SACT,OAAO,CAAC,GAAG,CAAA,yCAAyC,CAAC;CACzD,EACD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACN,kEAAkE;IAClE,UAAU,EAAE,KAAK,CAAC,2BAA2B,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;CAC/D,CAAC,CACH,CAAC;AAOF,gFAAgF;AAChF,gFAAgF;AAChF,gFAAgF;AAEhF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,WAAW,CAAC,kBAAkB,EAAE;IAC7D,yEAAyE;IACzE,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE;IACrC,oCAAoC;IACpC,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE;IAC3C,kDAAkD;IAClD,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE;IAChC;;;;OAIG;IACH,YAAY,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC,OAAO,EAAE;IAC9C;;;;;OAKG;IACH,YAAY,EAAE,IAAI,CAAC,eAAe,EAAE;QAClC,IAAI,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC;KACjC,CAAC,CAAC,OAAO,EAAE;IACZ,uEAAuE;IACvE,eAAe,EAAE,OAAO,CAAC,kBAAkB,CAAC;IAC5C,mFAAmF;IACnF,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC;IAC7B,4EAA4E;IAC5E,cAAc,EAAE,IAAI,CAAC,iBAAiB,CAAC;IACvC;;;OAGG;IACH,qBAAqB,EAAE,IAAI,CAAC,yBAAyB,CAAC;IACtD,mDAAmD;IACnD,UAAU,EAAE,IAAI,CAAC,aAAa,EAAE;QAC9B,IAAI,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,OAAO,CAAC;KACjC,CAAC;SACC,OAAO,EAAE;SACT,OAAO,CAAC,SAAS,CAAC;IACrB,gFAAgF;IAChF,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC;IAC7B,oFAAoF;IACpF,aAAa,EAAE,IAAI,CAAC,iBAAiB,CAAC;IACtC;;;;OAIG;IACH,cAAc,EAAE,IAAI,CAAC,kBAAkB,CAAC;SACrC,OAAO,EAAE;SACT,OAAO,CAAC,GAAG,CAAA,yCAAyC,CAAC;IACxD,8FAA8F;IAC9F,UAAU,EAAE,OAAO,CAAC,aAAa,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAChF,0BAA0B;IAC1B,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC;SAC1B,OAAO,EAAE;SACT,OAAO,CAAC,GAAG,CAAA,yCAAyC,CAAC;IACxD,0BAA0B;IAC1B,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC;SAC1B,OAAO,EAAE;SACT,OAAO,CAAC,GAAG,CAAA,yCAAyC,CAAC;CACzD,CAAC,CAAC"}

package/dist/db/seed.d.ts

@@ -0,0 +1,92 @@
+/**
+ * First-boot seed.
+ *
+ * Two responsibilities, both idempotent:
+ *
+ * 1. **Super-admin seed (§8.5).** If the `user` table is empty, insert
+ *    `username = "DataClub"`, `password_hash = argon2id("admin")`,
+ *    `role = "super_admin"`, `is_initial_password = true`. Hardcoded
+ *    credentials by design — the operator changes them on first login (the
+ *    flag enforces it).
+ *
+ * 2. **Admin-setting bootstrap (§6.7 / §6.10 / §12.1).** If the singleton
+ *    `admin_setting` row doesn't exist, create it with theme defaults
+ *    (`theme_switcher_enabled = true`, `theme_default = "light"` per §7.6),
+ *    seed `service_token_signing_key` from env `SERVICE_TOKEN_SIGNING_KEY`
+ *    if set else random, seed `metrics_scrape_token` from env
+ *    `METRICS_SCRAPE_TOKEN` if set else random, encrypt and store the env
+ *    `LETTA_API_KEY`, and write `letta_base_url` / `letta_ade_url`. After
+ *    first boot the env vars for the signing key + metrics token are no
+ *    longer consulted — DB columns are authoritative.
+ *
+ * Both run inside a single SQLite transaction so a partial failure can't
+ * leave a half-seeded DB. Idempotency is enforced by the row-existence
+ * checks at the top of each branch.
+ *
+ * @see SPECIFICATIONS.md §8.5 — initial super admin seed
+ * @see SPECIFICATIONS.md §6.7 — single signing key
+ * @see SPECIFICATIONS.md §6.10 — observability / metrics token
+ * @see SPECIFICATIONS.md §12.1 — env-var semantics
+ */
+import type { Logger } from "../observability/logger.js";
+import type { DbHandle } from "./connection.js";
+/** Seeded super-admin username — see §8.5. */
+export declare const SUPER_ADMIN_SEED_USERNAME = "DataClub";
+/** Seeded super-admin password — see §8.5. Operator changes on first login. */
+export declare const SUPER_ADMIN_SEED_PASSWORD = "admin";
+/**
+ * Inputs the seed needs from the env (or a test harness). Kept as an explicit
+ * record so callers don't pass `process.env` directly through the seed —
+ * test harnesses can synthesize the exact shape they want without monkeying
+ * with the real environment.
+ */
+export interface SeedInputs {
+    /** Required — the AES-256 encryption key (parsed). */
+    encryptionKey: Buffer;
+    /** Optional bootstrap-only signing key. Random when undefined (§6.7). */
+    signingKeyFromEnv?: Buffer | undefined;
+    /** Optional bootstrap-only metrics token. Random when undefined (§6.10). */
+    metricsScrapeTokenFromEnv?: string | undefined;
+    /**
+     * @deprecated Kept on the interface so existing callers compile, but
+     * **no longer seeded into the DB**. The Letta API key is read at runtime
+     * from `admin_setting.letta_api_key_encrypted` with a fallback to
+     * `env.LETTA_API_KEY` when the column is empty/whitespace
+     * (`letta/client.ts:getSdk`). Letting env stay authoritative until a
+     * super-admin overrides it via the admin panel is the precedence
+     * documented in env-vars.md. v2 will drop this field.
+     */
+    lettaApiKey?: string | undefined;
+    /** Required — Letta base URL written into the row. */
+    lettaBaseUrl?: string | undefined;
+    /** Optional super-admin override for the ADE link target. */
+    lettaAdeUrl?: string | undefined;
+}
+/**
+ * What the seed actually wrote, so the caller can log first-boot specifics
+ * (e.g. "metrics scrape token: <random>" exactly once on stdout).
+ */
+export interface SeedReport {
+    /** `true` if the super-admin row was created on this boot. */
+    seededSuperAdmin: boolean;
+    /** `true` if the `admin_setting` row was created on this boot. */
+    seededAdminSetting: boolean;
+    /**
+     * If `seededAdminSetting && metricsScrapeTokenFromEnv was undefined`, this
+     * is the random token that was generated. The dev runner logs it once on
+     * stdout for the operator to copy. `null` otherwise.
+     */
+    randomMetricsScrapeToken: string | null;
+}
+/**
+ * Runs both seed branches in a single transaction. Idempotent — running on
+ * an already-seeded DB is a no-op (returns a report with both booleans
+ * `false` and `randomMetricsScrapeToken` null).
+ *
+ * @param handle - the DB handle.
+ * @param inputs - bootstrap-only env values.
+ * @param logger - pino logger for the once-on-first-boot notices (§6.10).
+ * @returns what was actually seeded.
+ */
+export declare function runFirstBootSeed(handle: DbHandle, inputs: SeedInputs, logger: Logger): Promise<SeedReport>;
+//# sourceMappingURL=seed.d.ts.map

package/dist/db/seed.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"seed.d.ts","sourceRoot":"","sources":["../../src/db/seed.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAKH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AAEzD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAOhD,8CAA8C;AAC9C,eAAO,MAAM,yBAAyB,aAAa,CAAC;AAEpD,+EAA+E;AAC/E,eAAO,MAAM,yBAAyB,UAAU,CAAC;AAMjD;;;;;GAKG;AACH,MAAM,WAAW,UAAU;IACzB,sDAAsD;IACtD,aAAa,EAAE,MAAM,CAAC;IACtB,yEAAyE;IACzE,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,4EAA4E;IAC5E,yBAAyB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/C;;;;;;;;OAQG;IACH,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,sDAAsD;IACtD,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,6DAA6D;IAC7D,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAClC;AAED;;;GAGG;AACH,MAAM,WAAW,UAAU;IACzB,8DAA8D;IAC9D,gBAAgB,EAAE,OAAO,CAAC;IAC1B,kEAAkE;IAClE,kBAAkB,EAAE,OAAO,CAAC;IAC5B;;;;OAIG;IACH,wBAAwB,EAAE,MAAM,GAAG,IAAI,CAAC;CACzC;AAMD;;;;;;;;;GASG;AACH,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,QAAQ,EAChB,MAAM,EAAE,UAAU,EAClB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,UAAU,CAAC,CA0GrB"}

package/dist/db/seed.js

@@ -0,0 +1,160 @@
+/**
+ * First-boot seed.
+ *
+ * Two responsibilities, both idempotent:
+ *
+ * 1. **Super-admin seed (§8.5).** If the `user` table is empty, insert
+ *    `username = "DataClub"`, `password_hash = argon2id("admin")`,
+ *    `role = "super_admin"`, `is_initial_password = true`. Hardcoded
+ *    credentials by design — the operator changes them on first login (the
+ *    flag enforces it).
+ *
+ * 2. **Admin-setting bootstrap (§6.7 / §6.10 / §12.1).** If the singleton
+ *    `admin_setting` row doesn't exist, create it with theme defaults
+ *    (`theme_switcher_enabled = true`, `theme_default = "light"` per §7.6),
+ *    seed `service_token_signing_key` from env `SERVICE_TOKEN_SIGNING_KEY`
+ *    if set else random, seed `metrics_scrape_token` from env
+ *    `METRICS_SCRAPE_TOKEN` if set else random, encrypt and store the env
+ *    `LETTA_API_KEY`, and write `letta_base_url` / `letta_ade_url`. After
+ *    first boot the env vars for the signing key + metrics token are no
+ *    longer consulted — DB columns are authoritative.
+ *
+ * Both run inside a single SQLite transaction so a partial failure can't
+ * leave a half-seeded DB. Idempotency is enforced by the row-existence
+ * checks at the top of each branch.
+ *
+ * @see SPECIFICATIONS.md §8.5 — initial super admin seed
+ * @see SPECIFICATIONS.md §6.7 — single signing key
+ * @see SPECIFICATIONS.md §6.10 — observability / metrics token
+ * @see SPECIFICATIONS.md §12.1 — env-var semantics
+ */
+import { randomBytes, randomUUID } from "node:crypto";
+import { hashPassword } from "../auth/argon2.js";
+import { adminSetting, user } from "./schema.js";
+/* ────────────────────────────────────────────────────────────────────────── */
+/*  Hardcoded super-admin credentials (§8.5)                                  */
+/* ────────────────────────────────────────────────────────────────────────── */
+/** Seeded super-admin username — see §8.5. */
+export const SUPER_ADMIN_SEED_USERNAME = "DataClub";
+/** Seeded super-admin password — see §8.5. Operator changes on first login. */
+export const SUPER_ADMIN_SEED_PASSWORD = "admin";
+/* ────────────────────────────────────────────────────────────────────────── */
+/*  Seed entrypoint                                                           */
+/* ────────────────────────────────────────────────────────────────────────── */
+/**
+ * Runs both seed branches in a single transaction. Idempotent — running on
+ * an already-seeded DB is a no-op (returns a report with both booleans
+ * `false` and `randomMetricsScrapeToken` null).
+ *
+ * @param handle - the DB handle.
+ * @param inputs - bootstrap-only env values.
+ * @param logger - pino logger for the once-on-first-boot notices (§6.10).
+ * @returns what was actually seeded.
+ */
+export async function runFirstBootSeed(handle, inputs, logger) {
+    const report = {
+        seededSuperAdmin: false,
+        seededAdminSetting: false,
+        randomMetricsScrapeToken: null,
+    };
+    // Compute the password hash + encryption outside the transaction (Argon2
+    // is async; better-sqlite3 transactions are sync).
+    const userCount = handle.raw
+        .prepare("SELECT COUNT(*) as c FROM user")
+        .get();
+    const adminCount = handle.raw
+        .prepare("SELECT COUNT(*) as c FROM admin_setting")
+        .get();
+    let superAdminInsert = null;
+    if (userCount.c === 0) {
+        const passwordHash = await hashPassword(SUPER_ADMIN_SEED_PASSWORD);
+        superAdminInsert = {
+            id: randomUUID(),
+            username: SUPER_ADMIN_SEED_USERNAME,
+            passwordHash,
+            identitySource: "local",
+            isInitialPassword: true,
+            role: "super_admin",
+        };
+    }
+    let adminInsert = null;
+    if (adminCount.c === 0) {
+        const signingKey = inputs.signingKeyFromEnv ?? randomBytes(64);
+        let metricsToken;
+        if (inputs.metricsScrapeTokenFromEnv) {
+            metricsToken = inputs.metricsScrapeTokenFromEnv;
+        }
+        else {
+            metricsToken = randomBytes(32).toString("hex");
+            report.randomMetricsScrapeToken = metricsToken;
+        }
+        // **Deliberately left NULL.** `LETTA_API_KEY` is consulted at runtime
+        // as a fallback when this column is empty or whitespace (see
+        // `letta/client.ts:getSdk`). Seeding it into the DB on first boot would
+        // freeze the env value into the admin_setting row, after which
+        // changing `.env` + restart would silently have no effect — that was
+        // the rotation footgun before 2026-05. Leaving the column NULL by
+        // default means env stays authoritative until a super-admin explicitly
+        // PATCHes a value via /admin/settings; clearing the value there falls
+        // back to env again. See docs/operations/env-vars.md for the full
+        // precedence model.
+        const lettaApiKeyEncrypted = null;
+        adminInsert = {
+            id: 1,
+            lettaApiKeyEncrypted,
+            lettaBaseUrl: inputs.lettaBaseUrl ?? null,
+            lettaAdeUrl: inputs.lettaAdeUrl ?? deriveLettaAdeUrl(inputs.lettaBaseUrl),
+            featureToggles: {},
+            themeSwitcherEnabled: true,
+            themeDefault: "light",
+            serviceTokenSigningKey: signingKey,
+            metricsScrapeToken: metricsToken,
+        };
+    }
+    if (!superAdminInsert && !adminInsert) {
+        return report;
+    }
+    const tx = handle.raw.transaction(() => {
+        if (superAdminInsert) {
+            handle.db.insert(user).values(superAdminInsert).run();
+            report.seededSuperAdmin = true;
+        }
+        if (adminInsert) {
+            handle.db.insert(adminSetting).values(adminInsert).run();
+            report.seededAdminSetting = true;
+        }
+    });
+    tx();
+    if (report.seededSuperAdmin) {
+        logger.info({
+            username: SUPER_ADMIN_SEED_USERNAME,
+            is_initial_password: true,
+        }, "Seeded initial super-admin user (change the password immediately on first login).");
+    }
+    if (report.randomMetricsScrapeToken) {
+        // Per §6.10: log the random metrics token once on stdout so the operator
+        // can copy it into their Prometheus / Alloy config. We embed the value
+        // in the message string rather than as a structured field because the
+        // generic pino-redaction policy (§13.3) censors token-shaped keys — and
+        // here, this is the one place where we _do_ want the operator to see it.
+        // Subsequent reads (`GET /admin/settings`, request logs) never expose it
+        // because it stays out of the structured field list. Operators rotate via
+        // `/admin/settings/rotate-metrics-token`; only the rotation response
+        // re-reveals the new value.
+        logger.info({ event: "first_boot_metrics_token_generated" }, `Generated random METRICS_SCRAPE_TOKEN: ${report.randomMetricsScrapeToken} — copy this into your Prometheus / Alloy scrape config.`);
+    }
+    return report;
+}
+/**
+ * Derives `letta_ade_url` from `letta_base_url` by stripping a trailing
+ * `/v1` per §12.1. Returns `null` if the base url is itself null.
+ *
+ * @param baseUrl - the configured Letta base URL.
+ * @returns the ADE URL or `null`.
+ */
+function deriveLettaAdeUrl(baseUrl) {
+    if (!baseUrl)
+        return null;
+    return baseUrl.replace(/\/v1\/?$/, "");
+}
+//# sourceMappingURL=seed.js.map

package/dist/db/seed.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"seed.js","sourceRoot":"","sources":["../../src/db/seed.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEtD,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAIjD,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AAEjD,gFAAgF;AAChF,gFAAgF;AAChF,gFAAgF;AAEhF,8CAA8C;AAC9C,MAAM,CAAC,MAAM,yBAAyB,GAAG,UAAU,CAAC;AAEpD,+EAA+E;AAC/E,MAAM,CAAC,MAAM,yBAAyB,GAAG,OAAO,CAAC;AAoDjD,gFAAgF;AAChF,gFAAgF;AAChF,gFAAgF;AAEhF;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,MAAgB,EAChB,MAAkB,EAClB,MAAc;IAEd,MAAM,MAAM,GAAe;QACzB,gBAAgB,EAAE,KAAK;QACvB,kBAAkB,EAAE,KAAK;QACzB,wBAAwB,EAAE,IAAI;KAC/B,CAAC;IAEF,yEAAyE;IACzE,mDAAmD;IACnD,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG;SACzB,OAAO,CAAC,gCAAgC,CAAC;SACzC,GAAG,EAAmB,CAAC;IAC1B,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG;SAC1B,OAAO,CAAC,yCAAyC,CAAC;SAClD,GAAG,EAAmB,CAAC;IAE1B,IAAI,gBAAgB,GAAoC,IAAI,CAAC;IAC7D,IAAI,SAAS,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,YAAY,GAAG,MAAM,YAAY,CAAC,yBAAyB,CAAC,CAAC;QACnE,gBAAgB,GAAG;YACjB,EAAE,EAAE,UAAU,EAAE;YAChB,QAAQ,EAAE,yBAAyB;YACnC,YAAY;YACZ,cAAc,EAAE,OAAO;YACvB,iBAAiB,EAAE,IAAI;YACvB,IAAI,EAAE,aAAa;SACpB,CAAC;IACJ,CAAC;IAED,IAAI,WAAW,GAA4C,IAAI,CAAC;IAChE,IAAI,UAAU,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,UAAU,GACd,MAAM,CAAC,iBAAiB,IAAI,WAAW,CAAC,EAAE,CAAC,CAAC;QAC9C,IAAI,YAAoB,CAAC;QACzB,IAAI,MAAM,CAAC,yBAAyB,EAAE,CAAC;YACrC,YAAY,GAAG,MAAM,CAAC,yBAAyB,CAAC;QAClD,CAAC;aAAM,CAAC;YACN,YAAY,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC/C,MAAM,CAAC,wBAAwB,GAAG,YAAY,CAAC;QACjD,CAAC;QACD,sEAAsE;QACtE,6DAA6D;QAC7D,wEAAwE;QACxE,+DAA+D;QAC/D,qEAAqE;QACrE,kEAAkE;QAClE,uEAAuE;QACvE,sEAAsE;QACtE,kEAAkE;QAClE,oBAAoB;QACpB,MAAM,oBAAoB,GAAkB,IAAI,CAAC;QACjD,WAAW,GAAG;YACZ,EAAE,EAAE,CAAC;YACL,oBAAoB;YACpB,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,IAAI;YACzC,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,iBAAiB,CAAC,MAAM,CAAC,YAAY,CAAC;YACzE,cAAc,EAAE,EAAE;YAClB,oBAAoB,EAAE,IAAI;YAC1B,YAAY,EAAE,OAAO;YACrB,sBAAsB,EAAE,UAAU;YAClC,kBAAkB,EAAE,YAAY;SACjC,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,gBAAgB,IAAI,CAAC,WAAW,EAAE,CAAC;QACtC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,EAAE;QACrC,IAAI,gBAAgB,EAAE,CAAC;YACrB,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,GAAG,EAAE,CAAC;YACtD,MAAM,CAAC,gBAAgB,GAAG,IAAI,CAAC;QACjC,CAAC;QACD,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,GAAG,EAAE,CAAC;YACzD,MAAM,CAAC,kBAAkB,GAAG,IAAI,CAAC;QACnC,CAAC;IACH,CAAC,CAAC,CAAC;IACH,EAAE,EAAE,CAAC;IAEL,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;QAC5B,MAAM,CAAC,IAAI,CACT;YACE,QAAQ,EAAE,yBAAyB;YACnC,mBAAmB,EAAE,IAAI;SAC1B,EACD,mFAAmF,CACpF,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,wBAAwB,EAAE,CAAC;QACpC,yEAAyE;QACzE,uEAAuE;QACvE,sEAAsE;QACtE,wEAAwE;QACxE,yEAAyE;QACzE,yEAAyE;QACzE,0EAA0E;QAC1E,qEAAqE;QACrE,4BAA4B;QAC5B,MAAM,CAAC,IAAI,CACT,EAAE,KAAK,EAAE,oCAAoC,EAAE,EAC/C,0CAA0C,MAAM,CAAC,wBAAwB,0DAA0D,CACpI,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;GAMG;AACH,SAAS,iBAAiB,CAAC,OAA2B;IACpD,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,OAAO,OAAO,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;AACzC,CAAC"}

package/dist/handlers/fetch.d.ts

@@ -0,0 +1,89 @@
+/**
+ * Canonical entry point: `createFetchHandler({...})`.
+ *
+ * Every per-customer wrapper mounts this through one of the adapters. The
+ * Next.js App Router adapter (`createNextRouteHandler`) is the first-class
+ * one (§6.2); the bare `createFetchHandler` is what `node:http` /
+ * `Bun.serve` / Cloudflare Workers / etc. wrap directly with a 5-line
+ * adapter on the user's side.
+ *
+ * The handler:
+ *
+ * 1. Peels `basePath` off the URL.
+ * 2. Runs the matcher against the route table.
+ * 3. Invokes the matched handler with `(req, ctx)` and a unique
+ *    `request_id` propagated through the per-request child logger.
+ * 4. Catches any thrown error, logs it, returns a generic 500.
+ *
+ * No auth check happens here — that's the role-enforcement middleware's
+ * job, and it lives inside individual handlers (or, in Step 3+, behind a
+ * `protected()` wrapper). Step 2's `POST /auth/login` does not require auth.
+ *
+ * @see SPECIFICATIONS.md §6.2 — Web-Standard Fetch handlers
+ */
+import type Database from "better-sqlite3";
+import type { DrizzleDB } from "../db/connection.js";
+import { type LettaClient } from "../letta/client.js";
+import { SubprocessThrottle } from "../letta/subprocessThrottle.js";
+import type { Logger } from "../observability/logger.js";
+import type { RouteEntry } from "./types.js";
+/**
+ * Dependency bundle accepted by `createFetchHandler`. The fetch entry point
+ * stays decoupled from process bootstrap (env loading, DB opening,
+ * migrations) so tests can pass a tmp DB + a captured logger directly.
+ */
+export interface CreateFetchHandlerOptions {
+    /** Drizzle client. */
+    db: DrizzleDB;
+    /** Raw better-sqlite3 handle (used for `transaction()` and PRAGMAs). */
+    sqlite: Database.Database;
+    /** Pino logger with redaction wired. */
+    logger: Logger;
+    /** Parsed `AI_HUB_ENCRYPTION_KEY`. */
+    encryptionKey: Buffer;
+    /** Route prefix. Default `/api/ai-hub`. */
+    basePath?: string;
+    /**
+     * Override the route table (tests inject a stub table to assert matcher
+     * behavior in isolation). Defaults to `buildRouteTable()`.
+     */
+    routes?: ReadonlyArray<RouteEntry>;
+    /**
+     * Project-shaped Letta client. Tests pass a mock so they never call
+     * out to a real Letta. When omitted, the default reads
+     * `admin_setting.letta_base_url` + decrypted API key on each use and
+     * memoizes one SDK instance per `(apiKey, baseURL)` pair.
+     *
+     * @see SPECIFICATIONS.md §6.4
+     */
+    lettaClient?: LettaClient;
+    /**
+     * Throttle gating Letta Code subprocess spawns. Tests inject a configured
+     * instance (e.g. with a fixed `MemReader` returning low MemAvailable to
+     * drive the 503 overload path). Defaults to a fresh `SubprocessThrottle`
+     * with config from env (`AI_HUB_SUBPROCESS_RAM_THRESHOLD_PCT`,
+     * `AI_HUB_SUBPROCESS_HARD_CAP`) reading `/proc/meminfo`.
+     *
+     * @see ../letta/subprocessThrottle.ts
+     */
+    subprocessThrottle?: SubprocessThrottle;
+    /**
+     * Env-var source for runtime fallbacks (currently: the Letta API key
+     * when the DB column is empty — see `letta/client.ts:resolveApiKey`).
+     * Defaults to `process.env`. Tests pass the synthesized record they
+     * boot with so the env-fallback behavior is exercisable.
+     */
+    envSource?: Record<string, string | undefined>;
+}
+/**
+ * The exposed Fetch handler — `(Request) => Promise<Response>`.
+ */
+export type FetchHandler = (req: Request) => Promise<Response>;
+/**
+ * Builds a Fetch handler from the given dependencies.
+ *
+ * @param opts - DB, logger, encryption key, etc.
+ * @returns the per-instance Fetch handler.
+ */
+export declare function createFetchHandler(opts: CreateFetchHandlerOptions): FetchHandler;
+//# sourceMappingURL=fetch.d.ts.map

package/dist/handlers/fetch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetch.d.ts","sourceRoot":"","sources":["../../src/handlers/fetch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAIH,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAE3C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAEL,KAAK,WAAW,EACjB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAEL,kBAAkB,EACnB,MAAM,gCAAgC,CAAC;AACxC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AAMzD,OAAO,KAAK,EAAsB,UAAU,EAAE,MAAM,YAAY,CAAC;AAEjE;;;;GAIG;AACH,MAAM,WAAW,yBAAyB;IACxC,sBAAsB;IACtB,EAAE,EAAE,SAAS,CAAC;IACd,wEAAwE;IACxE,MAAM,EAAE,QAAQ,CAAC,QAAQ,CAAC;IAC1B,wCAAwC;IACxC,MAAM,EAAE,MAAM,CAAC;IACf,sCAAsC;IACtC,aAAa,EAAE,MAAM,CAAC;IACtB,2CAA2C;IAC3C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;OAGG;IACH,MAAM,CAAC,EAAE,aAAa,CAAC,UAAU,CAAC,CAAC;IACnC;;;;;;;OAOG;IACH,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B;;;;;;;;OAQG;IACH,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACxC;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;CAChD;AAED;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;AAE/D;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,yBAAyB,GAC9B,YAAY,CA6Ed"}

package/dist/handlers/fetch.js

@@ -0,0 +1,173 @@
+/**
+ * Canonical entry point: `createFetchHandler({...})`.
+ *
+ * Every per-customer wrapper mounts this through one of the adapters. The
+ * Next.js App Router adapter (`createNextRouteHandler`) is the first-class
+ * one (§6.2); the bare `createFetchHandler` is what `node:http` /
+ * `Bun.serve` / Cloudflare Workers / etc. wrap directly with a 5-line
+ * adapter on the user's side.
+ *
+ * The handler:
+ *
+ * 1. Peels `basePath` off the URL.
+ * 2. Runs the matcher against the route table.
+ * 3. Invokes the matched handler with `(req, ctx)` and a unique
+ *    `request_id` propagated through the per-request child logger.
+ * 4. Catches any thrown error, logs it, returns a generic 500.
+ *
+ * No auth check happens here — that's the role-enforcement middleware's
+ * job, and it lives inside individual handlers (or, in Step 3+, behind a
+ * `protected()` wrapper). Step 2's `POST /auth/login` does not require auth.
+ *
+ * @see SPECIFICATIONS.md §6.2 — Web-Standard Fetch handlers
+ */
+import { randomUUID } from "node:crypto";
+import { createDefaultLettaClient, } from "../letta/client.js";
+import { resolveFilesDir } from "../letta/sandbox.js";
+import { readThrottleConfigFromEnv, SubprocessThrottle, } from "../letta/subprocessThrottle.js";
+import { ensureRotationScheduler } from "../state/rotationScheduler.js";
+import { buildRouteTable } from "./routeTable.js";
+import { matchRoute } from "./router.js";
+import { internalError, methodNotAllowed, notFound } from "./responses.js";
+/**
+ * Builds a Fetch handler from the given dependencies.
+ *
+ * @param opts - DB, logger, encryption key, etc.
+ * @returns the per-instance Fetch handler.
+ */
+export function createFetchHandler(opts) {
+    const subprocessThrottle = opts.subprocessThrottle ?? new SubprocessThrottle(readThrottleConfigFromEnv());
+    const envSource = opts.envSource ?? process.env;
+    // Step-12.5 — resolve the per-session sandbox + seed base directory.
+    // Creates `seeds/` + `sandboxes/` under the resolved path if missing
+    // (idempotent), so the admin agents validator + POST /sessions don't
+    // need to mkdir on the fly.
+    const filesDir = resolveFilesDir(envSource);
+    const ctx = {
+        db: opts.db,
+        sqlite: opts.sqlite,
+        logger: opts.logger,
+        encryptionKey: opts.encryptionKey,
+        basePath: normalizeBasePath(opts.basePath ?? "/api/ai-hub"),
+        lettaClient: opts.lettaClient ??
+            createDefaultLettaClient({
+                db: opts.db,
+                encryptionKey: opts.encryptionKey,
+                subprocessThrottle,
+                envSource,
+            }),
+        subprocessThrottle,
+        envSource,
+        filesDir,
+    };
+    // Start the rotating-message scheduler once per process. Idempotent + a
+    // no-op under tests / when `AI_HUB_DISABLE_ROTATION_SCHEDULER=1` (see
+    // `ensureRotationScheduler`), so building multiple handlers — or booting
+    // the server in vitest — never spawns competing loops.
+    ensureRotationScheduler({ db: ctx.db, lettaClient: ctx.lettaClient, logger: ctx.logger }, envSource);
+    const routes = opts.routes ?? buildRouteTable();
+    return async (req) => {
+        const requestId = req.headers.get("x-request-id") ?? randomUUID();
+        const childLogger = ctx.logger.child({ request_id: requestId });
+        const childCtx = { ...ctx, logger: childLogger };
+        const url = new URL(req.url);
+        const innerPath = stripBasePath(url.pathname, ctx.basePath);
+        if (innerPath === null) {
+            // Path is outside the basePath — the wrapper shouldn't have routed it
+            // here, but if it did we 404 cleanly rather than bubbling an
+            // ambiguous response.
+            return notFound();
+        }
+        const method = req.method.toUpperCase();
+        const match = matchRoute(routes, method, innerPath);
+        if (!match) {
+            // Distinguish "path doesn't exist" from "path exists, wrong method"
+            // — the React client treats them differently. We do the second-pass
+            // check by trying the wildcard method.
+            const anyMethod = matchRoute(routes, "*", innerPath);
+            if (anyMethod)
+                return methodNotAllowed();
+            // Also check whether the same path exists for *any* method.
+            const samePath = routes.find((r) => pathMatchesRaw(r.path, innerPath));
+            return samePath ? methodNotAllowed() : notFound();
+        }
+        try {
+            return await match.entry.handler(req, childCtx, match.params);
+        }
+        catch (err) {
+            childLogger.error({ err: err instanceof Error ? err.message : String(err), method, path: innerPath }, "Unhandled error in route handler.");
+            return internalError();
+        }
+    };
+}
+/* ────────────────────────────────────────────────────────────────────────── */
+/*  Helpers                                                                   */
+/* ────────────────────────────────────────────────────────────────────────── */
+/**
+ * Trims trailing slashes off `basePath` and ensures it begins with one.
+ *
+ * @param raw - the user-supplied base path.
+ * @returns the normalized base path (e.g. `"/api/ai-hub"`).
+ */
+function normalizeBasePath(raw) {
+    if (!raw)
+        return "";
+    let out = raw;
+    if (!out.startsWith("/"))
+        out = "/" + out;
+    while (out.length > 1 && out.endsWith("/"))
+        out = out.slice(0, -1);
+    return out;
+}
+/**
+ * Returns `pathname` with `basePath` peeled off, or `null` if `pathname` is
+ * not under the prefix. An empty `basePath` returns `pathname` unchanged.
+ *
+ * @param pathname - request URL pathname.
+ * @param basePath - the configured prefix.
+ * @returns the inner path or `null`.
+ */
+function stripBasePath(pathname, basePath) {
+    if (basePath === "" || basePath === "/")
+        return pathname;
+    if (pathname === basePath)
+        return "/";
+    if (pathname.startsWith(basePath + "/")) {
+        return pathname.slice(basePath.length);
+    }
+    return null;
+}
+/**
+ * Cheap "does this template match this path at all" predicate used for the
+ * 405-vs-404 disambiguation. Doesn't return params (that already happened
+ * in the main match).
+ *
+ * @param template - the route template.
+ * @param pathname - the actual path.
+ * @returns `true` when the template's segments match the path's.
+ */
+function pathMatchesRaw(template, pathname) {
+    const tplParts = trimSlashes(template).split("/");
+    const pathParts = trimSlashes(pathname).split("/");
+    if (tplParts.length !== pathParts.length)
+        return false;
+    for (let i = 0; i < tplParts.length; i++) {
+        const tp = tplParts[i];
+        const pp = pathParts[i];
+        if (tp.startsWith(":"))
+            continue;
+        if (tp !== pp)
+            return false;
+    }
+    return true;
+}
+/** Same trim logic as in `router.ts`; inlined here to keep this file self-contained. */
+function trimSlashes(s) {
+    let out = s;
+    if (out.startsWith("/"))
+        out = out.slice(1);
+    if (out.endsWith("/"))
+        out = out.slice(0, -1);
+    return out;
+}
+//# sourceMappingURL=fetch.js.map

package/dist/handlers/fetch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetch.js","sourceRoot":"","sources":["../../src/handlers/fetch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAKzC,OAAO,EACL,wBAAwB,GAEzB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EACL,yBAAyB,EACzB,kBAAkB,GACnB,MAAM,gCAAgC,CAAC;AAExC,OAAO,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAC;AAExE,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAyD3E;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAChC,IAA+B;IAE/B,MAAM,kBAAkB,GACtB,IAAI,CAAC,kBAAkB,IAAI,IAAI,kBAAkB,CAAC,yBAAyB,EAAE,CAAC,CAAC;IACjF,MAAM,SAAS,GACb,IAAI,CAAC,SAAS,IAAK,OAAO,CAAC,GAA0C,CAAC;IACxE,qEAAqE;IACrE,qEAAqE;IACrE,qEAAqE;IACrE,4BAA4B;IAC5B,MAAM,QAAQ,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC;IAC5C,MAAM,GAAG,GAAuB;QAC9B,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,QAAQ,EAAE,iBAAiB,CAAC,IAAI,CAAC,QAAQ,IAAI,aAAa,CAAC;QAC3D,WAAW,EACT,IAAI,CAAC,WAAW;YAChB,wBAAwB,CAAC;gBACvB,EAAE,EAAE,IAAI,CAAC,EAAE;gBACX,aAAa,EAAE,IAAI,CAAC,aAAa;gBACjC,kBAAkB;gBAClB,SAAS;aACV,CAAC;QACJ,kBAAkB;QAClB,SAAS;QACT,QAAQ;KACT,CAAC;IAEF,wEAAwE;IACxE,sEAAsE;IACtE,yEAAyE;IACzE,uDAAuD;IACvD,uBAAuB,CACrB,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,EAChE,SAAS,CACV,CAAC;IAEF,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,eAAe,EAAE,CAAC;IAEhD,OAAO,KAAK,EAAE,GAAG,EAAE,EAAE;QACnB,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,UAAU,EAAE,CAAC;QAClE,MAAM,WAAW,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC;QAChE,MAAM,QAAQ,GAAuB,EAAE,GAAG,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;QAErE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,SAAS,GAAG,aAAa,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC5D,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YACvB,sEAAsE;YACtE,6DAA6D;YAC7D,sBAAsB;YACtB,OAAO,QAAQ,EAAE,CAAC;QACpB,CAAC;QAED,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;QACpD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,oEAAoE;YACpE,oEAAoE;YACpE,uCAAuC;YACvC,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;YACrD,IAAI,SAAS;gBAAE,OAAO,gBAAgB,EAAE,CAAC;YACzC,4DAA4D;YAC5D,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;YACvE,OAAO,QAAQ,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QACpD,CAAC;QAED,IAAI,CAAC;YACH,OAAO,MAAM,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAChE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,WAAW,CAAC,KAAK,CACf,EAAE,GAAG,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,EAClF,mCAAmC,CACpC,CAAC;YACF,OAAO,aAAa,EAAE,CAAC;QACzB,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,gFAAgF;AAChF,gFAAgF;AAEhF;;;;;GAKG;AACH,SAAS,iBAAiB,CAAC,GAAW;IACpC,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC;IACpB,IAAI,GAAG,GAAG,GAAG,CAAC;IACd,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC;IAC1C,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACnE,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,aAAa,CAAC,QAAgB,EAAE,QAAgB;IACvD,IAAI,QAAQ,KAAK,EAAE,IAAI,QAAQ,KAAK,GAAG;QAAE,OAAO,QAAQ,CAAC;IACzD,IAAI,QAAQ,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IACtC,IAAI,QAAQ,CAAC,UAAU,CAAC,QAAQ,GAAG,GAAG,CAAC,EAAE,CAAC;QACxC,OAAO,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,cAAc,CAAC,QAAgB,EAAE,QAAgB;IACxD,MAAM,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAClD,MAAM,SAAS,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACnD,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACvD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACzC,MAAM,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAW,CAAC;QACjC,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC,CAAW,CAAC;QAClC,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QACjC,IAAI,EAAE,KAAK,EAAE;YAAE,OAAO,KAAK,CAAC;IAC9B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,wFAAwF;AACxF,SAAS,WAAW,CAAC,CAAS;IAC5B,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC5C,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC9C,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/handlers/nextjs.d.ts

@@ -0,0 +1,40 @@
+/**
+ * Next.js App Router adapter.
+ *
+ * Wraps `createFetchHandler` so per-customer wrapper apps can mount
+ * ai-hub-server with one line:
+ *
+ * ```ts
+ * // app/api/ai-hub/[...path]/route.ts
+ * import { createNextRouteHandler } from "@data-club/ai-hub-server";
+ *
+ * const handler = createNextRouteHandler({ ...options });
+ * export const GET = handler;
+ * export const POST = handler;
+ * export const PATCH = handler;
+ * export const DELETE = handler;
+ * ```
+ *
+ * The adapter is intentionally thin — Next.js App Router already gives us
+ * Web-Standard `Request` / `Response` objects, so this is barely more than
+ * a re-export. The reason it exists at all (rather than telling users to
+ * import `createFetchHandler` directly) is so the package owns the contract:
+ * if Next.js ever tightens its route-handler signature (e.g. adds a context
+ * arg), we adapt here without breaking every wrapper app.
+ *
+ * @see SPECIFICATIONS.md §6.2 — stack
+ * @see SPECIFICATIONS.md §14 — demo app pattern
+ */
+import { type CreateFetchHandlerOptions, type FetchHandler } from "./fetch.js";
+/**
+ * Builds a Next.js App Router-compatible route handler.
+ *
+ * Each HTTP-method export (`GET`, `POST`, …) in `route.ts` should reference
+ * the same instance — Next.js dispatches by method name, but our internal
+ * matcher does the work; sharing the instance avoids re-opening the DB.
+ *
+ * @param opts - same shape as `createFetchHandler`.
+ * @returns a function suitable for `export const GET = ...`.
+ */
+export declare function createNextRouteHandler(opts: CreateFetchHandlerOptions): FetchHandler;
+//# sourceMappingURL=nextjs.d.ts.map

package/dist/handlers/nextjs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nextjs.d.ts","sourceRoot":"","sources":["../../src/handlers/nextjs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EAEL,KAAK,yBAAyB,EAC9B,KAAK,YAAY,EAClB,MAAM,YAAY,CAAC;AAEpB;;;;;;;;;GASG;AACH,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,yBAAyB,GAC9B,YAAY,CAEd"}

package/dist/handlers/nextjs.js

@@ -0,0 +1,42 @@
+/**
+ * Next.js App Router adapter.
+ *
+ * Wraps `createFetchHandler` so per-customer wrapper apps can mount
+ * ai-hub-server with one line:
+ *
+ * ```ts
+ * // app/api/ai-hub/[...path]/route.ts
+ * import { createNextRouteHandler } from "@data-club/ai-hub-server";
+ *
+ * const handler = createNextRouteHandler({ ...options });
+ * export const GET = handler;
+ * export const POST = handler;
+ * export const PATCH = handler;
+ * export const DELETE = handler;
+ * ```
+ *
+ * The adapter is intentionally thin — Next.js App Router already gives us
+ * Web-Standard `Request` / `Response` objects, so this is barely more than
+ * a re-export. The reason it exists at all (rather than telling users to
+ * import `createFetchHandler` directly) is so the package owns the contract:
+ * if Next.js ever tightens its route-handler signature (e.g. adds a context
+ * arg), we adapt here without breaking every wrapper app.
+ *
+ * @see SPECIFICATIONS.md §6.2 — stack
+ * @see SPECIFICATIONS.md §14 — demo app pattern
+ */
+import { createFetchHandler, } from "./fetch.js";
+/**
+ * Builds a Next.js App Router-compatible route handler.
+ *
+ * Each HTTP-method export (`GET`, `POST`, …) in `route.ts` should reference
+ * the same instance — Next.js dispatches by method name, but our internal
+ * matcher does the work; sharing the instance avoids re-opening the DB.
+ *
+ * @param opts - same shape as `createFetchHandler`.
+ * @returns a function suitable for `export const GET = ...`.
+ */
+export function createNextRouteHandler(opts) {
+    return createFetchHandler(opts);
+}
+//# sourceMappingURL=nextjs.js.map

package/dist/handlers/nextjs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nextjs.js","sourceRoot":"","sources":["../../src/handlers/nextjs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EACL,kBAAkB,GAGnB,MAAM,YAAY,CAAC;AAEpB;;;;;;;;;GASG;AACH,MAAM,UAAU,sBAAsB,CACpC,IAA+B;IAE/B,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC;AAClC,CAAC"}