@de-otio/trellis 0.6.0 → 0.7.0

package/dist/lib/routes/index.js

@@ -30,6 +30,7 @@ const webfinger_1 = require("./activitypub/webfinger");
 const admin_1 = require("./admin");
 const admin_costs_1 = require("./admin-costs");
 const auth_1 = require("./auth");
+const auth_discover_1 = require("./auth-discover");
 const badges_1 = require("./badges");
 const comments_1 = require("./comments");
 const content_discovery_1 = require("./content-discovery");
@@ -46,6 +47,7 @@ const circles_1 = require("./circles");
 const discovery_1 = require("./discovery");
 const entity_relationships_1 = require("./entity-relationships");
 const connection_codes_1 = require("./connection-codes");
+const agent_surface_1 = require("./agent-surface");
 const health_1 = require("./health");
 const internal_docs_1 = require("./internal-docs");
 const invitations_1 = require("./invitations");
@@ -66,7 +68,29 @@ const parental_controls_1 = require("./parental-controls");
 const sentiments_1 = require("./sentiments");
 const taxonomy_1 = require("./taxonomy");
 const taxonomy_analytics_1 = require("./taxonomy-analytics");
+const tenants_1 = require("./tenants");
+const tenant_audit_1 = require("./tenant-audit");
+const tenant_compliance_1 = require("./tenant-compliance");
+const setup_status_1 = require("./setup-status");
+const tenant_domains_1 = require("./tenant-domains");
+const tenant_idp_1 = require("./tenant-idp");
+const tenant_members_1 = require("./tenant-members");
+const tenant_role_mappings_1 = require("./tenant-role-mappings");
 const user_1 = require("./user");
+const oauth_1 = require("./oauth");
+const agent_authorize_1 = require("./agent-authorize");
+const agent_sessions_1 = require("./agent-sessions");
+/**
+ * G4 MEDIUM-3: mark every route in `routes` as `publicSpec: true` so it
+ * appears in the auto-generated OpenAPI document. Routes left without
+ * the flag are excluded from `/openapi.json`. The federation surface
+ * and the agent-integration discovery routes are the curated public
+ * spec; non-federation routes (posts, comments, media, ActivityPub,
+ * extensions, etc.) are intentionally omitted.
+ */
+function markPublicSpec(routes) {
+    return routes.map((r) => ({ ...r, publicSpec: true }));
+}
 /**
  * Core routes — domain-agnostic functionality.
  * Extension routes are merged below.
@@ -74,12 +98,38 @@ const user_1 = require("./user");
 const coreRoutes = [
     // Health and configuration (highest priority)
     ...health_1.healthRoutes,
+    // Agent discovery surface (T9b-a): /llms.txt, /openapi.json, /security.txt
+    ...markPublicSpec(agent_surface_1.agentSurfaceRoutes),
     // Authentication
     ...auth_1.authRoutes,
+    // Sign-in discovery (pre-login, no auth required)
+    ...markPublicSpec(auth_discover_1.authDiscoverRoutes),
     // MFA (multi-factor authentication)
     ...mfa_1.mfaRoutes,
     // User profile management
     ...user_1.userRoutes,
+    // Tenant CRUD + auth switch
+    ...markPublicSpec(tenants_1.tenantRoutes),
+    // Tenant domain verification
+    ...markPublicSpec(tenant_domains_1.tenantDomainRoutes),
+    // Tenant identity provider (OIDC)
+    ...markPublicSpec(tenant_idp_1.tenantIdpRoutes),
+    // Tenant members (list/patch role/remove)
+    ...markPublicSpec(tenant_members_1.tenantMemberRoutes),
+    // Tenant role mappings (CRUD)
+    ...markPublicSpec(tenant_role_mappings_1.tenantRoleMappingRoutes),
+    // Tenant audit log
+    ...markPublicSpec(tenant_audit_1.tenantAuditRoutes),
+    // Tenant compliance bundle (T9b-e)
+    ...markPublicSpec(tenant_compliance_1.tenantComplianceRoutes),
+    // Tenant setup-status (T9b-b)
+    ...markPublicSpec(setup_status_1.setupStatusRoutes),
+    // OAuth device-authorization adapter (T9b-d, RFC 8628)
+    ...markPublicSpec(oauth_1.oauthRoutes),
+    // Agent-authorize page (HTML approval flow)
+    ...markPublicSpec(agent_authorize_1.agentAuthorizeRoutes),
+    // User-facing agent sessions (list + revoke)
+    ...markPublicSpec(agent_sessions_1.agentSessionsRoutes),
     // Internal documentation
     ...internal_docs_1.internaldocsRoutes,
     // Orphaned media health monitoring (must be before admin wildcard routes)

package/dist/lib/routes/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/lib/routes/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;GAWG;;;AAiPH,gCAiBC;AAhQD,8CAA+C;AAC/C,0DAAsD;AACtD,+CAAkD;AAClD,uDAAyD;AACzD,2DAA6D;AAC7D,mDAAsD;AACtD,+CAAkD;AAClD,+CAAkD;AAClD,qDAAuD;AACvD,iDAAoD;AACpD,6CAAyE;AACzE,iEAAmE;AACnE,uDAA0D;AAC1D,mCAAsC;AACtC,+CAAgD;AAChD,iCAAoC;AACpC,qCAAwC;AACxC,yCAA4C;AAC5C,2DAA6D;AAC7D,2CAA8C;AAC9C,yCAA4C;AAC5C,2CAA8C;AAC9C,yCAA4C;AAC5C,qCAAwC;AACxC,mDAAqD;AACrD,mCAAsC;AACtC,uCAA8D;AAC9D,mDAAqD;AACrD,uCAAyC;AACzC,2CAA8C;AAC9C,iEAAkE;AAClE,yDAA0D;AAC1D,qCAAwC;AACxC,mDAAqD;AACrD,+CAAkD;AAClD,iDAAkD;AAClD,+BAAkC;AAClC,mCAAsC;AACtC,+BAAkC;AAClC,2EAA4E;AAC5E,uDAAwD;AACxD,qDAAuD;AACvD,mEAAoE;AACpE,+BAAkC;AAClC,mCAAsC;AACtC,uCAA0C;AAC1C,yCAAmD;AACnD,mDAAsD;AACtD,2DAA4D;AAC5D,6CAAgD;AAChD,yCAA4C;AAC5C,6DAA+D;AAE/D,iCAAoC;AAEpC;;;GAGG;AACH,MAAM,UAAU,GAAY;IAC1B,8CAA8C;IAC9C,GAAG,qBAAY;IAEf,iBAAiB;IACjB,GAAG,iBAAU;IAEb,oCAAoC;IACpC,GAAG,eAAS;IAEZ,0BAA0B;IAC1B,GAAG,iBAAU;IAEb,yBAAyB;IACzB,GAAG,kCAAkB;IAErB,0EAA0E;IAC1E,GAAG,iDAAyB;IAE5B,6DAA6D;IAC7D,GAAG,6BAAe;IAClB,GAAG,mBAAW;IAEd,4EAA4E;IAC5E,GAAG,2BAAe;IAElB,SAAS;IACT,GAAG,qBAAY;IAEf,YAAY;IACZ,GAAG,2BAAe;IAElB,cAAc;IACd,GAAG,+BAAiB;IAEpB,MAAM;IACN,GAAG,eAAS;IAEZ,mDAAmD;IACnD,GAAG,yBAAc;IAEjB,QAAQ;IACR,GAAG,mBAAW;IAEd,QAAQ;IACR,GAAG,mBAAW;IAEd,WAAW;IACX,GAAG,yBAAc;IAEjB,uBAAuB;IACvB,GAAG,6BAAgB;IAEnB,gBAAgB;IAChB,GAAG,mBAAW;IAEd,kCAAkC;IAClC,GAAG,yDAA6B;IAEhC,6CAA6C;IAC7C,GAAG,qCAAmB;IAEtB,4BAA4B;IAC5B,GAAG,oCAAmB;IAEtB,sBAAsB;IACtB,GAAG,uBAAa;IAEhB,sCAAsC;IACtC,GAAG,mCAAmB;IAEtB,0CAA0C;IAC1C,GAAG,yCAAqB;IAExB,cAAc;IACd,GAAG,qBAAY;IAEf,mBAAmB;IACnB,GAAG,yBAAc;IAEjB,0BAA0B;IAC1B,GAAG,uBAAgB;IAEnB,qDAAqD;IACrD,GAAG,kCAAkB;IAErB,0BAA0B;IAC1B,GAAG,sBAAY;IAEf,0CAA0C;IAC1C,GAAG,+CAAwB;IAE3B,mBAAmB;IACnB,GAAG,uCAAoB;IAEvB,YAAY;IACZ,GAAG,2BAAe;IAElB,WAAW;IACX,GAAG,yBAAc;IAEjB,oBAAoB;IACpB,GAAG,0CAAsB;IAEzB,qBAAqB;IACrB,GAAG,4CAAuB;IAE1B,wBAAwB;IACxB,GAAG,gCAAqB;IAExB,gBAAgB;IAChB,GAAG,kCAAkB;IAErB,eAAe;IACf,GAAG,+BAAgB;IAEnB,+DAA+D;IAC/D,GAAG,eAAS;IAEZ,oEAAoE;IACpE,uFAAuF;IACvF,8CAA8C;IAC9C,GAAG,2BAAe;IAClB,GAAG,mBAAW;IACd,GAAG,mBAAW;IACd,GAAG,qBAAY;IACf,GAAG,uBAAa;IAChB,GAAG,mBAAW;IACd,GAAG,8BAAgB;IACnB,GAAG,oCAAmB;IACtB,GAAG,iBAAqB;IAExB,6DAA6D;IAC7D,GAAG,wBAAa;IAEhB,0FAA0F;IAC1F,GAAG,0BAAc;CAClB,CAAC;AAEF,kDAAkD;AAClD,iDAAiD;AACjD,wEAAiE;AAEjE,MAAM,eAAe,GAAY;IAC/B,gDAAgD;IAChD,GAAG,IAAA,0BAAa,GAAE,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAiB,CAAC;IAC1D,+EAA+E;IAC/E,GAAG,IAAA,0BAAa,GAAE,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAA,6CAAmB,EAAC,GAAG,CAAC,CAAC;CAC9D,CAAC;AAEW,QAAA,MAAM,GAAY;IAC7B,GAAG,UAAU;IACb,GAAG,eAAe;IAElB,6BAA6B;IAC7B;QACE,IAAI,EAAE,GAAG;QACT,MAAM,EAAE,GAAG;QACX,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE;YAC9B,MAAM,eAAe,GAAG,IAAI,kCAAe,CAAC,GAAG,CAAC,CAAC;YACjD,OAAO,eAAe,CAAC,oBAAoB,CACzC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,EACtC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;QACJ,CAAC;QACD,UAAU,EAAE,CAAC,IAAA,2BAAc,GAAE,CAAC;QAC9B,WAAW,EAAE,eAAe;KAC7B;CACF,CAAC;AAOF,oDAA6E;AAE7E;;GAEG;AACH,SAAgB,UAAU,CACxB,QAAgB,EAChB,MAAc,EACd,SAAmB;IAEnB,MAAM,iBAAiB,GAAG,SAAS,IAAI,cAAM,CAAC;IAC9C,KAAK,MAAM,KAAK,IAAI,iBAAiB,EAAE,CAAC;QACtC,IAAI,CAAC,KAAK;YAAE,SAAS,CAAC,wBAAwB;QAC9C,IACE,IAAA,2BAAW,EAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC;YACjC,IAAA,6BAAa,EAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,EACnC,CAAC;YACD,MAAM,MAAM,GAAG,IAAA,6BAAa,EAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACnD,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAC3B,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/lib/routes/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;GAWG;;;AAiTH,gCAiBC;AAhUD,8CAA+C;AAC/C,0DAAsD;AACtD,+CAAkD;AAClD,uDAAyD;AACzD,2DAA6D;AAC7D,mDAAsD;AACtD,+CAAkD;AAClD,+CAAkD;AAClD,qDAAuD;AACvD,iDAAoD;AACpD,6CAAyE;AACzE,iEAAmE;AACnE,uDAA0D;AAC1D,mCAAsC;AACtC,+CAAgD;AAChD,iCAAoC;AACpC,mDAAqD;AACrD,qCAAwC;AACxC,yCAA4C;AAC5C,2DAA6D;AAC7D,2CAA8C;AAC9C,yCAA4C;AAC5C,2CAA8C;AAC9C,yCAA4C;AAC5C,qCAAwC;AACxC,mDAAqD;AACrD,mCAAsC;AACtC,uCAA8D;AAC9D,mDAAqD;AACrD,uCAAyC;AACzC,2CAA8C;AAC9C,iEAAkE;AAClE,yDAA0D;AAC1D,mDAAqD;AACrD,qCAAwC;AACxC,mDAAqD;AACrD,+CAAkD;AAClD,iDAAkD;AAClD,+BAAkC;AAClC,mCAAsC;AACtC,+BAAkC;AAClC,2EAA4E;AAC5E,uDAAwD;AACxD,qDAAuD;AACvD,mEAAoE;AACpE,+BAAkC;AAClC,mCAAsC;AACtC,uCAA0C;AAC1C,yCAAmD;AACnD,mDAAsD;AACtD,2DAA4D;AAC5D,6CAAgD;AAChD,yCAA4C;AAC5C,6DAA+D;AAE/D,uCAAyC;AACzC,iDAAmD;AACnD,2DAA6D;AAC7D,iDAAmD;AACnD,qDAAsD;AACtD,6CAA+C;AAC/C,qDAAsD;AACtD,iEAAiE;AACjE,iCAAoC;AACpC,mCAAsC;AACtC,uDAAyD;AACzD,qDAAuD;AAEvD;;;;;;;GAOG;AACH,SAAS,cAAc,CAAC,MAAe;IACrC,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AACzD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,GAAY;IAC1B,8CAA8C;IAC9C,GAAG,qBAAY;IAEf,2EAA2E;IAC3E,GAAG,cAAc,CAAC,kCAAkB,CAAC;IAErC,iBAAiB;IACjB,GAAG,iBAAU;IAEb,kDAAkD;IAClD,GAAG,cAAc,CAAC,kCAAkB,CAAC;IAErC,oCAAoC;IACpC,GAAG,eAAS;IAEZ,0BAA0B;IAC1B,GAAG,iBAAU;IAEb,4BAA4B;IAC5B,GAAG,cAAc,CAAC,sBAAY,CAAC;IAE/B,6BAA6B;IAC7B,GAAG,cAAc,CAAC,mCAAkB,CAAC;IAErC,kCAAkC;IAClC,GAAG,cAAc,CAAC,4BAAe,CAAC;IAElC,0CAA0C;IAC1C,GAAG,cAAc,CAAC,mCAAkB,CAAC;IAErC,8BAA8B;IAC9B,GAAG,cAAc,CAAC,8CAAuB,CAAC;IAE1C,mBAAmB;IACnB,GAAG,cAAc,CAAC,gCAAiB,CAAC;IAEpC,mCAAmC;IACnC,GAAG,cAAc,CAAC,0CAAsB,CAAC;IAEzC,8BAA8B;IAC9B,GAAG,cAAc,CAAC,gCAAiB,CAAC;IAEpC,uDAAuD;IACvD,GAAG,cAAc,CAAC,mBAAW,CAAC;IAE9B,4CAA4C;IAC5C,GAAG,cAAc,CAAC,sCAAoB,CAAC;IAEvC,6CAA6C;IAC7C,GAAG,cAAc,CAAC,oCAAmB,CAAC;IAEtC,yBAAyB;IACzB,GAAG,kCAAkB;IAErB,0EAA0E;IAC1E,GAAG,iDAAyB;IAE5B,6DAA6D;IAC7D,GAAG,6BAAe;IAClB,GAAG,mBAAW;IAEd,4EAA4E;IAC5E,GAAG,2BAAe;IAElB,SAAS;IACT,GAAG,qBAAY;IAEf,YAAY;IACZ,GAAG,2BAAe;IAElB,cAAc;IACd,GAAG,+BAAiB;IAEpB,MAAM;IACN,GAAG,eAAS;IAEZ,mDAAmD;IACnD,GAAG,yBAAc;IAEjB,QAAQ;IACR,GAAG,mBAAW;IAEd,QAAQ;IACR,GAAG,mBAAW;IAEd,WAAW;IACX,GAAG,yBAAc;IAEjB,uBAAuB;IACvB,GAAG,6BAAgB;IAEnB,gBAAgB;IAChB,GAAG,mBAAW;IAEd,kCAAkC;IAClC,GAAG,yDAA6B;IAEhC,6CAA6C;IAC7C,GAAG,qCAAmB;IAEtB,4BAA4B;IAC5B,GAAG,oCAAmB;IAEtB,sBAAsB;IACtB,GAAG,uBAAa;IAEhB,sCAAsC;IACtC,GAAG,mCAAmB;IAEtB,0CAA0C;IAC1C,GAAG,yCAAqB;IAExB,cAAc;IACd,GAAG,qBAAY;IAEf,mBAAmB;IACnB,GAAG,yBAAc;IAEjB,0BAA0B;IAC1B,GAAG,uBAAgB;IAEnB,qDAAqD;IACrD,GAAG,kCAAkB;IAErB,0BAA0B;IAC1B,GAAG,sBAAY;IAEf,0CAA0C;IAC1C,GAAG,+CAAwB;IAE3B,mBAAmB;IACnB,GAAG,uCAAoB;IAEvB,YAAY;IACZ,GAAG,2BAAe;IAElB,WAAW;IACX,GAAG,yBAAc;IAEjB,oBAAoB;IACpB,GAAG,0CAAsB;IAEzB,qBAAqB;IACrB,GAAG,4CAAuB;IAE1B,wBAAwB;IACxB,GAAG,gCAAqB;IAExB,gBAAgB;IAChB,GAAG,kCAAkB;IAErB,eAAe;IACf,GAAG,+BAAgB;IAEnB,+DAA+D;IAC/D,GAAG,eAAS;IAEZ,oEAAoE;IACpE,uFAAuF;IACvF,8CAA8C;IAC9C,GAAG,2BAAe;IAClB,GAAG,mBAAW;IACd,GAAG,mBAAW;IACd,GAAG,qBAAY;IACf,GAAG,uBAAa;IAChB,GAAG,mBAAW;IACd,GAAG,8BAAgB;IACnB,GAAG,oCAAmB;IACtB,GAAG,iBAAqB;IAExB,6DAA6D;IAC7D,GAAG,wBAAa;IAEhB,0FAA0F;IAC1F,GAAG,0BAAc;CAClB,CAAC;AAEF,kDAAkD;AAClD,iDAAiD;AACjD,wEAAiE;AAEjE,MAAM,eAAe,GAAY;IAC/B,gDAAgD;IAChD,GAAG,IAAA,0BAAa,GAAE,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAiB,CAAC;IAC1D,+EAA+E;IAC/E,GAAG,IAAA,0BAAa,GAAE,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAA,6CAAmB,EAAC,GAAG,CAAC,CAAC;CAC9D,CAAC;AAEW,QAAA,MAAM,GAAY;IAC7B,GAAG,UAAU;IACb,GAAG,eAAe;IAElB,6BAA6B;IAC7B;QACE,IAAI,EAAE,GAAG;QACT,MAAM,EAAE,GAAG;QACX,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE;YAC9B,MAAM,eAAe,GAAG,IAAI,kCAAe,CAAC,GAAG,CAAC,CAAC;YACjD,OAAO,eAAe,CAAC,oBAAoB,CACzC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,EACtC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;QACJ,CAAC;QACD,UAAU,EAAE,CAAC,IAAA,2BAAc,GAAE,CAAC;QAC9B,WAAW,EAAE,eAAe;KAC7B;CACF,CAAC;AAOF,oDAA6E;AAE7E;;GAEG;AACH,SAAgB,UAAU,CACxB,QAAgB,EAChB,MAAc,EACd,SAAmB;IAEnB,MAAM,iBAAiB,GAAG,SAAS,IAAI,cAAM,CAAC;IAC9C,KAAK,MAAM,KAAK,IAAI,iBAAiB,EAAE,CAAC;QACtC,IAAI,CAAC,KAAK;YAAE,SAAS,CAAC,wBAAwB;QAC9C,IACE,IAAA,2BAAW,EAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC;YACjC,IAAA,6BAAa,EAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,EACnC,CAAC;YACD,MAAM,MAAM,GAAG,IAAA,6BAAa,EAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACnD,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAC3B,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/lib/routes/mfa.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mfa.d.ts","sourceRoot":"","sources":["../../../src/lib/routes/mfa.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAWH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAerC,eAAO,MAAM,SAAS,EAAE,KAAK,EAkR5B,CAAC"}
+{"version":3,"file":"mfa.d.ts","sourceRoot":"","sources":["../../../src/lib/routes/mfa.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAWH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAerC,eAAO,MAAM,SAAS,EAAE,KAAK,EAmR5B,CAAC"}

package/dist/lib/routes/mfa.js

@@ -172,6 +172,7 @@ exports.mfaRoutes = [
                 }
                 // Update session with mfaVerified flag
                 session.mfaVerified = true;
+                session.mfaVerifiedAt = Date.now();
                 const updatedSessionData = JSON.stringify(session);
                 const sessionSalt = env.SESSION_SALT;
                 const encryptedSession = await sessionManager.encryptSession(updatedSessionData, sessionSecret, sessionSalt);

package/dist/lib/routes/mfa.js.map

@@ -1 +1 @@
-{"version":3,"file":"mfa.js","sourceRoot":"","sources":["../../../src/lib/routes/mfa.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;AAEH,6BAAwB;AACxB,iCAAwC;AACxC,kDAA8C;AAC9C,sCAAmC;AACnC,oDAAgD;AAChD,8CAA+D;AAC/D,wDAA6D;AAC7D,0DAAsD;AACtD,wDAAoD;AAGpD,MAAM,qBAAqB,GAAG,OAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAE3C,MAAM,wBAAwB,GAAG,OAAC,CAAC,MAAM,CAAC;IACxC,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IAClC,WAAW,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IAC/C,gBAAgB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC;CACxD,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG,OAAC,CAAC,MAAM,CAAC;IAChC,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,wCAAwC;IACzE,IAAI,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;CACjD,CAAC,CAAC;AAEU,QAAA,SAAS,GAAY;IAChC,kDAAkD;IAClD;QACE,IAAI,EAAE,iBAAiB;QACvB,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE;YAC9B,MAAM,eAAe,GAAG,IAAI,kCAAe,CAAC,GAAG,CAAC,CAAC;YACjD,MAAM,MAAM,GAAG,eAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACvC,MAAM,cAAc,GAAG,IAAI,gCAAc,EAAE,CAAC;YAE5C,IAAI,CAAC;gBACH,MAAM,aAAa,GAAG,yBAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;gBACpD,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,UAAU,CAC7C,OAAO,EACP,aAAa,EACb,GAAG,CACJ,CAAC;gBACF,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,MAAM,GAAG,GAAG,eAAe,CAAC,oBAAoB,CAC9C,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,EACzC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;oBACF,OAAO,0BAAW,CAAC,cAAc,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;gBACvD,CAAC;gBAED,MAAM,MAAM,GAAG,IAAA,iBAAY,EAAC,GAAG,CAAC,CAAC;gBACjC,MAAM,UAAU,GAAG,IAAI,wBAAU,CAAC,GAAG,CAAC,CAAC;gBACvC,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CACvC,MAAM,EACN,OAAO,CAAC,MAAM,EACd,OAAO,CAAC,IAAI,CACb,CAAC;gBAEF,MAAM,GAAG,GAAG,eAAe,CAAC,oBAAoB,CAC9C,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EACtB,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;gBACF,OAAO,0BAAW,CAAC,cAAc,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;YACvD,CAAC;YAAC,OAAO,KAAU,EAAE,CAAC;gBACpB,MAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE,KAAK,CAAC,CAAC;gBAClD,MAAM,GAAG,GAAG,eAAe,CAAC,oBAAoB,CAC9C,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,EAClD,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;gBACF,OAAO,0BAAW,CAAC,cAAc,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;YACvD,CAAC;QACH,CAAC;QACD,UAAU,EAAE,CAAC,IAAA,2BAAc,GAAE,CAAC;QAC9B,WAAW,EAAE,2BAA2B;KACzC;IAED,oDAAoD;IACpD;QACE,IAAI,EAAE,uBAAuB;QAC7B,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE;YAC9B,MAAM,eAAe,GAAG,IAAI,kCAAe,CAAC,GAAG,CAAC,CAAC;YACjD,MAAM,MAAM,GAAG,eAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACvC,MAAM,cAAc,GAAG,IAAI,gCAAc,EAAE,CAAC;YAE5C,IAAI,CAAC;gBACH,MAAM,aAAa,GAAG,yBAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;gBACpD,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,UAAU,CAC7C,OAAO,EACP,aAAa,EACb,GAAG,CACJ,CAAC;gBACF,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,MAAM,GAAG,GAAG,eAAe,CAAC,oBAAoB,CAC9C,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,EACzC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;oBACF,OAAO,0BAAW,CAAC,cAAc,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;gBACvD,CAAC;gBAED,MAAM,UAAU,GAAG,IAAI,wBAAU,CAAC,GAAG,CAAC,CAAC;gBACvC,MAAM,UAAU,GAAG,MAAM,UAAU,CAAC,eAAe,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBAEnE,MAAM,GAAG,GAAG,eAAe,CAAC,oBAAoB,CAC9C,IAAI,CAAC,SAAS,CAAC;oBACb,UAAU,EAAE,UAAU,CAAC,UAAU;oBACjC,MAAM,EAAE,UAAU,CAAC,MAAM;oBACzB,WAAW,EAAE,UAAU,CAAC,WAAW;iBACpC,CAAC,EACF,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;gBACF,OAAO,0BAAW,CAAC,cAAc,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;YACvD,CAAC;YAAC,OAAO,KAAU,EAAE,CAAC;gBACpB,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE,KAAK,CAAC,CAAC;gBACtD,MAAM,GAAG,GAAG,eAAe,CAAC,oBAAoB,CAC9C,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,EAClD,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;gBACF,OAAO,0BAAW,CAAC,cAAc,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;YACvD,CAAC;QACH,CAAC;QACD,UAAU,EAAE,CAAC,IAAA,2BAAc,GAAE,EAAE,IAAA,2BAAc,GAAE,CAAC;QAChD,WAAW,EAAE,sBAAsB;KACpC;IAED,0DAA0D;IAC1D;QACE,IAAI,EAAE,0BAA0B;QAChC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE;YAC9B,MAAM,eAAe,GAAG,IAAI,kCAAe,CAAC,GAAG,CAAC,CAAC;YACjD,MAAM,MAAM,GAAG,eAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACvC,MAAM,cAAc,GAAG,IAAI,gCAAc,EAAE,CAAC;YAE5C,IAAI,CAAC;gBACH,MAAM,aAAa,GAAG,yBAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;gBACpD,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,UAAU,CAC7C,OAAO,EACP,aAAa,EACb,GAAG,CACJ,CAAC;gBACF,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,MAAM,GAAG,GAAG,eAAe,CAAC,oBAAoB,CAC9C,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,EACzC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;oBACF,OAAO,0BAAW,CAAC,cAAc,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;gBACvD,CAAC;gBAED,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;gBAClC,MAAM,MAAM,GAAG,wBAAwB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;gBACxD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBACpB,MAAM,GAAG,GAAG,eAAe,CAAC,oBAAoB,CAC9C,IAAI,CAAC,SAAS,CAAC;wBACb,KAAK,EAAE,iBAAiB;wBACxB,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM;qBAC7B,CAAC,EACF,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;oBACF,OAAO,0BAAW,CAAC,cAAc,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;gBACvD,CAAC;gBAED,MAAM,MAAM,GAAG,IAAA,iBAAY,EAAC,GAAG,CAAC,CAAC;gBACjC,MAAM,UAAU,GAAG,IAAI,wBAAU,CAAC,GAAG,CAAC,CAAC;gBACvC,MAAM,aAAa,GAAG,aAAa,CAAC,CAAC,0CAA0C;gBAE/E,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,kBAAkB,CAChD,MAAM,EACN,OAAO,CAAC,MAAM,EACd,MAAM,CAAC,IAAI,CAAC,MAAM,EAClB,MAAM,CAAC,IAAI,CAAC,WAAW,EACvB,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAC5B,aAAa,CACd,CAAC;gBAEF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBACpB,MAAM,GAAG,GAAG,eAAe,CAAC,oBAAoB,CAC9C,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,EACvC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;oBACF,OAAO,0BAAW,CAAC,cAAc,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;gBACvD,CAAC;gBAED,MAAM,GAAG,GAAG,eAAe,CAAC,oBAAoB,CAC9C,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EACjC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;gBACF,OAAO,0BAAW,CAAC,cAAc,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;YACvD,CAAC;YAAC,OAAO,KAAU,EAAE,CAAC;gBACpB,MAAM,CAAC,KAAK,CAAC,mCAAmC,EAAE,KAAK,CAAC,CAAC;gBACzD,MAAM,GAAG,GAAG,eAAe,CAAC,oBAAoB,CAC9C,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,EAClD,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;gBACF,OAAO,0BAAW,CAAC,cAAc,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;YACvD,CAAC;QACH,CAAC;QACD,UAAU,EAAE,CAAC,IAAA,2BAAc,GAAE,EAAE,IAAA,2BAAc,GAAE,CAAC;QAChD,WAAW,EAAE,gDAAgD;KAC9D;IAED,0DAA0D;IAC1D;QACE,IAAI,EAAE,iBAAiB;QACvB,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE;YAC9B,MAAM,eAAe,GAAG,IAAI,kCAAe,CAAC,GAAG,CAAC,CAAC;YACjD,MAAM,MAAM,GAAG,eAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACvC,MAAM,cAAc,GAAG,IAAI,gCAAc,EAAE,CAAC;YAE5C,IAAI,CAAC;gBACH,MAAM,aAAa,GAAG,yBAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;gBACpD,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,UAAU,CAC7C,OAAO,EACP,aAAa,EACb,GAAG,CACJ,CAAC;gBACF,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,MAAM,GAAG,GAAG,eAAe,CAAC,oBAAoB,CAC9C,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,EACzC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;oBACF,OAAO,0BAAW,CAAC,cAAc,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;gBACvD,CAAC;gBAED,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;gBAClC,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;gBAChD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBACpB,MAAM,GAAG,GAAG,eAAe,CAAC,oBAAoB,CAC9C,IAAI,CAAC,SAAS,CAAC;wBACb,KAAK,EAAE,iBAAiB;wBACxB,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM;qBAC7B,CAAC,EACF,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;oBACF,OAAO,0BAAW,CAAC,cAAc,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;gBACvD,CAAC;gBAED,MAAM,MAAM,GAAG,IAAA,iBAAY,EAAC,GAAG,CAAC,CAAC;gBACjC,MAAM,UAAU,GAAG,IAAI,wBAAU,CAAC,GAAG,CAAC,CAAC;gBACvC,IAAI,QAAQ,GAAG,KAAK,CAAC;gBAErB,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAClC,QAAQ,GAAG,MAAM,UAAU,CAAC,gBAAgB,CAC1C,MAAM,EACN,OAAO,CAAC,MAAM,EACd,MAAM,CAAC,IAAI,CAAC,IAAI,CACjB,CAAC;gBACJ,CAAC;qBAAM,CAAC;oBACN,QAAQ,GAAG,MAAM,UAAU,CAAC,UAAU,CACpC,MAAM,EACN,OAAO,CAAC,MAAM,EACd,MAAM,CAAC,IAAI,CAAC,IAAI,EAChB,aAAa,CACd,CAAC;gBACJ,CAAC;gBAED,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,MAAM,GAAG,GAAG,eAAe,CAAC,oBAAoB,CAC9C,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,EACzC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;oBACF,OAAO,0BAAW,CAAC,cAAc,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;gBACvD,CAAC;gBAED,uCAAuC;gBACvC,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;gBAC3B,MAAM,kBAAkB,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;gBACnD,MAAM,WAAW,GAAI,GAAW,CAAC,YAAkC,CAAC;gBACpE,MAAM,gBAAgB,GAAG,MAAM,cAAc,CAAC,cAAc,CAC1D,kBAAkB,EAClB,aAAa,EACb,WAAW,CACZ,CAAC;gBAEF,MAAM,GAAG,GAAG,eAAe,CAAC,oBAAoB,CAC9C,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EACjC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;gBAEF,6BAA6B;gBAC7B,GAAG,CAAC,OAAO,CAAC,GAAG,CACb,YAAY,EACZ,mBAAmB,gBAAgB,yDAAyD,CAC7F,CAAC;gBAEF,OAAO,0BAAW,CAAC,cAAc,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;YACvD,CAAC;YAAC,OAAO,KAAU,EAAE,CAAC;gBACpB,MAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE,KAAK,CAAC,CAAC;gBAClD,MAAM,GAAG,GAAG,eAAe,CAAC,oBAAoB,CAC9C,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,EAClD,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;gBACF,OAAO,0BAAW,CAAC,cAAc,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;YACvD,CAAC;QACH,CAAC;QACD,UAAU,EAAE,CAAC,IAAA,2BAAc,GAAE,EAAE,IAAA,2BAAc,GAAE,CAAC;QAChD,WAAW,EAAE,iBAAiB;KAC/B;CACF,CAAC"}
+{"version":3,"file":"mfa.js","sourceRoot":"","sources":["../../../src/lib/routes/mfa.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;AAEH,6BAAwB;AACxB,iCAAwC;AACxC,kDAA8C;AAC9C,sCAAmC;AACnC,oDAAgD;AAChD,8CAA+D;AAC/D,wDAA6D;AAC7D,0DAAsD;AACtD,wDAAoD;AAGpD,MAAM,qBAAqB,GAAG,OAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAE3C,MAAM,wBAAwB,GAAG,OAAC,CAAC,MAAM,CAAC;IACxC,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IAClC,WAAW,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IAC/C,gBAAgB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC;CACxD,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG,OAAC,CAAC,MAAM,CAAC;IAChC,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,wCAAwC;IACzE,IAAI,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;CACjD,CAAC,CAAC;AAEU,QAAA,SAAS,GAAY;IAChC,kDAAkD;IAClD;QACE,IAAI,EAAE,iBAAiB;QACvB,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE;YAC9B,MAAM,eAAe,GAAG,IAAI,kCAAe,CAAC,GAAG,CAAC,CAAC;YACjD,MAAM,MAAM,GAAG,eAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACvC,MAAM,cAAc,GAAG,IAAI,gCAAc,EAAE,CAAC;YAE5C,IAAI,CAAC;gBACH,MAAM,aAAa,GAAG,yBAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;gBACpD,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,UAAU,CAC7C,OAAO,EACP,aAAa,EACb,GAAG,CACJ,CAAC;gBACF,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,MAAM,GAAG,GAAG,eAAe,CAAC,oBAAoB,CAC9C,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,EACzC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;oBACF,OAAO,0BAAW,CAAC,cAAc,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;gBACvD,CAAC;gBAED,MAAM,MAAM,GAAG,IAAA,iBAAY,EAAC,GAAG,CAAC,CAAC;gBACjC,MAAM,UAAU,GAAG,IAAI,wBAAU,CAAC,GAAG,CAAC,CAAC;gBACvC,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CACvC,MAAM,EACN,OAAO,CAAC,MAAM,EACd,OAAO,CAAC,IAAI,CACb,CAAC;gBAEF,MAAM,GAAG,GAAG,eAAe,CAAC,oBAAoB,CAC9C,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EACtB,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;gBACF,OAAO,0BAAW,CAAC,cAAc,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;YACvD,CAAC;YAAC,OAAO,KAAU,EAAE,CAAC;gBACpB,MAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE,KAAK,CAAC,CAAC;gBAClD,MAAM,GAAG,GAAG,eAAe,CAAC,oBAAoB,CAC9C,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,EAClD,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;gBACF,OAAO,0BAAW,CAAC,cAAc,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;YACvD,CAAC;QACH,CAAC;QACD,UAAU,EAAE,CAAC,IAAA,2BAAc,GAAE,CAAC;QAC9B,WAAW,EAAE,2BAA2B;KACzC;IAED,oDAAoD;IACpD;QACE,IAAI,EAAE,uBAAuB;QAC7B,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE;YAC9B,MAAM,eAAe,GAAG,IAAI,kCAAe,CAAC,GAAG,CAAC,CAAC;YACjD,MAAM,MAAM,GAAG,eAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACvC,MAAM,cAAc,GAAG,IAAI,gCAAc,EAAE,CAAC;YAE5C,IAAI,CAAC;gBACH,MAAM,aAAa,GAAG,yBAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;gBACpD,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,UAAU,CAC7C,OAAO,EACP,aAAa,EACb,GAAG,CACJ,CAAC;gBACF,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,MAAM,GAAG,GAAG,eAAe,CAAC,oBAAoB,CAC9C,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,EACzC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;oBACF,OAAO,0BAAW,CAAC,cAAc,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;gBACvD,CAAC;gBAED,MAAM,UAAU,GAAG,IAAI,wBAAU,CAAC,GAAG,CAAC,CAAC;gBACvC,MAAM,UAAU,GAAG,MAAM,UAAU,CAAC,eAAe,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBAEnE,MAAM,GAAG,GAAG,eAAe,CAAC,oBAAoB,CAC9C,IAAI,CAAC,SAAS,CAAC;oBACb,UAAU,EAAE,UAAU,CAAC,UAAU;oBACjC,MAAM,EAAE,UAAU,CAAC,MAAM;oBACzB,WAAW,EAAE,UAAU,CAAC,WAAW;iBACpC,CAAC,EACF,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;gBACF,OAAO,0BAAW,CAAC,cAAc,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;YACvD,CAAC;YAAC,OAAO,KAAU,EAAE,CAAC;gBACpB,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE,KAAK,CAAC,CAAC;gBACtD,MAAM,GAAG,GAAG,eAAe,CAAC,oBAAoB,CAC9C,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,EAClD,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;gBACF,OAAO,0BAAW,CAAC,cAAc,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;YACvD,CAAC;QACH,CAAC;QACD,UAAU,EAAE,CAAC,IAAA,2BAAc,GAAE,EAAE,IAAA,2BAAc,GAAE,CAAC;QAChD,WAAW,EAAE,sBAAsB;KACpC;IAED,0DAA0D;IAC1D;QACE,IAAI,EAAE,0BAA0B;QAChC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE;YAC9B,MAAM,eAAe,GAAG,IAAI,kCAAe,CAAC,GAAG,CAAC,CAAC;YACjD,MAAM,MAAM,GAAG,eAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACvC,MAAM,cAAc,GAAG,IAAI,gCAAc,EAAE,CAAC;YAE5C,IAAI,CAAC;gBACH,MAAM,aAAa,GAAG,yBAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;gBACpD,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,UAAU,CAC7C,OAAO,EACP,aAAa,EACb,GAAG,CACJ,CAAC;gBACF,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,MAAM,GAAG,GAAG,eAAe,CAAC,oBAAoB,CAC9C,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,EACzC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;oBACF,OAAO,0BAAW,CAAC,cAAc,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;gBACvD,CAAC;gBAED,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;gBAClC,MAAM,MAAM,GAAG,wBAAwB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;gBACxD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBACpB,MAAM,GAAG,GAAG,eAAe,CAAC,oBAAoB,CAC9C,IAAI,CAAC,SAAS,CAAC;wBACb,KAAK,EAAE,iBAAiB;wBACxB,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM;qBAC7B,CAAC,EACF,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;oBACF,OAAO,0BAAW,CAAC,cAAc,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;gBACvD,CAAC;gBAED,MAAM,MAAM,GAAG,IAAA,iBAAY,EAAC,GAAG,CAAC,CAAC;gBACjC,MAAM,UAAU,GAAG,IAAI,wBAAU,CAAC,GAAG,CAAC,CAAC;gBACvC,MAAM,aAAa,GAAG,aAAa,CAAC,CAAC,0CAA0C;gBAE/E,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,kBAAkB,CAChD,MAAM,EACN,OAAO,CAAC,MAAM,EACd,MAAM,CAAC,IAAI,CAAC,MAAM,EAClB,MAAM,CAAC,IAAI,CAAC,WAAW,EACvB,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAC5B,aAAa,CACd,CAAC;gBAEF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBACpB,MAAM,GAAG,GAAG,eAAe,CAAC,oBAAoB,CAC9C,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,EACvC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;oBACF,OAAO,0BAAW,CAAC,cAAc,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;gBACvD,CAAC;gBAED,MAAM,GAAG,GAAG,eAAe,CAAC,oBAAoB,CAC9C,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EACjC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;gBACF,OAAO,0BAAW,CAAC,cAAc,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;YACvD,CAAC;YAAC,OAAO,KAAU,EAAE,CAAC;gBACpB,MAAM,CAAC,KAAK,CAAC,mCAAmC,EAAE,KAAK,CAAC,CAAC;gBACzD,MAAM,GAAG,GAAG,eAAe,CAAC,oBAAoB,CAC9C,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,EAClD,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;gBACF,OAAO,0BAAW,CAAC,cAAc,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;YACvD,CAAC;QACH,CAAC;QACD,UAAU,EAAE,CAAC,IAAA,2BAAc,GAAE,EAAE,IAAA,2BAAc,GAAE,CAAC;QAChD,WAAW,EAAE,gDAAgD;KAC9D;IAED,0DAA0D;IAC1D;QACE,IAAI,EAAE,iBAAiB;QACvB,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE;YAC9B,MAAM,eAAe,GAAG,IAAI,kCAAe,CAAC,GAAG,CAAC,CAAC;YACjD,MAAM,MAAM,GAAG,eAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACvC,MAAM,cAAc,GAAG,IAAI,gCAAc,EAAE,CAAC;YAE5C,IAAI,CAAC;gBACH,MAAM,aAAa,GAAG,yBAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;gBACpD,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,UAAU,CAC7C,OAAO,EACP,aAAa,EACb,GAAG,CACJ,CAAC;gBACF,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,MAAM,GAAG,GAAG,eAAe,CAAC,oBAAoB,CAC9C,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,EACzC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;oBACF,OAAO,0BAAW,CAAC,cAAc,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;gBACvD,CAAC;gBAED,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;gBAClC,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;gBAChD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBACpB,MAAM,GAAG,GAAG,eAAe,CAAC,oBAAoB,CAC9C,IAAI,CAAC,SAAS,CAAC;wBACb,KAAK,EAAE,iBAAiB;wBACxB,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM;qBAC7B,CAAC,EACF,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;oBACF,OAAO,0BAAW,CAAC,cAAc,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;gBACvD,CAAC;gBAED,MAAM,MAAM,GAAG,IAAA,iBAAY,EAAC,GAAG,CAAC,CAAC;gBACjC,MAAM,UAAU,GAAG,IAAI,wBAAU,CAAC,GAAG,CAAC,CAAC;gBACvC,IAAI,QAAQ,GAAG,KAAK,CAAC;gBAErB,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAClC,QAAQ,GAAG,MAAM,UAAU,CAAC,gBAAgB,CAC1C,MAAM,EACN,OAAO,CAAC,MAAM,EACd,MAAM,CAAC,IAAI,CAAC,IAAI,CACjB,CAAC;gBACJ,CAAC;qBAAM,CAAC;oBACN,QAAQ,GAAG,MAAM,UAAU,CAAC,UAAU,CACpC,MAAM,EACN,OAAO,CAAC,MAAM,EACd,MAAM,CAAC,IAAI,CAAC,IAAI,EAChB,aAAa,CACd,CAAC;gBACJ,CAAC;gBAED,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,MAAM,GAAG,GAAG,eAAe,CAAC,oBAAoB,CAC9C,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,EACzC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;oBACF,OAAO,0BAAW,CAAC,cAAc,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;gBACvD,CAAC;gBAED,uCAAuC;gBACvC,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;gBAC3B,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBACnC,MAAM,kBAAkB,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;gBACnD,MAAM,WAAW,GAAI,GAAW,CAAC,YAAkC,CAAC;gBACpE,MAAM,gBAAgB,GAAG,MAAM,cAAc,CAAC,cAAc,CAC1D,kBAAkB,EAClB,aAAa,EACb,WAAW,CACZ,CAAC;gBAEF,MAAM,GAAG,GAAG,eAAe,CAAC,oBAAoB,CAC9C,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EACjC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;gBAEF,6BAA6B;gBAC7B,GAAG,CAAC,OAAO,CAAC,GAAG,CACb,YAAY,EACZ,mBAAmB,gBAAgB,yDAAyD,CAC7F,CAAC;gBAEF,OAAO,0BAAW,CAAC,cAAc,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;YACvD,CAAC;YAAC,OAAO,KAAU,EAAE,CAAC;gBACpB,MAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE,KAAK,CAAC,CAAC;gBAClD,MAAM,GAAG,GAAG,eAAe,CAAC,oBAAoB,CAC9C,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,EAClD,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;gBACF,OAAO,0BAAW,CAAC,cAAc,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;YACvD,CAAC;QACH,CAAC;QACD,UAAU,EAAE,CAAC,IAAA,2BAAc,GAAE,EAAE,IAAA,2BAAc,GAAE,CAAC;QAChD,WAAW,EAAE,iBAAiB;KAC/B;CACF,CAAC"}

package/dist/lib/routes/notifications.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"notifications.d.ts","sourceRoot":"","sources":["../../../src/lib/routes/notifications.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAeH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAErC,eAAO,MAAM,mBAAmB,EAAE,KAAK,EA+TtC,CAAC"}
+{"version":3,"file":"notifications.d.ts","sourceRoot":"","sources":["../../../src/lib/routes/notifications.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAgBH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAErC,eAAO,MAAM,mBAAmB,EAAE,KAAK,EAiWtC,CAAC"}

package/dist/lib/routes/notifications.js

@@ -8,6 +8,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.notificationsRoutes = void 0;
 const age_gate_middleware_1 = require("../age-gate-middleware");
+const auth_middleware_1 = require("../auth/auth-middleware");
 const logger_1 = require("../logger");
 const middleware_1 = require("../middleware");
 const secret_resolver_1 = require("../secret-resolver");
@@ -31,11 +32,15 @@ exports.notificationsRoutes = [
             if (!session) {
                 return securityHeaders.createSecureResponse(JSON.stringify({ error: "Unauthorized" }), { status: 401, headers: { "content-type": "application/json" } });
             }
+            const auth = await (0, auth_middleware_1.authMiddleware)(request, env);
+            if (!auth || !auth.activeTenantId) {
+                return securityHeaders.createSecureResponse(JSON.stringify({ error: "Unauthorized" }), { status: 401, headers: { "content-type": "application/json" } });
+            }
             try {
                 const url = new URL(request.url);
                 const cursor = url.searchParams.get("cursor") || null;
                 const limit = parseInt(url.searchParams.get("limit") || "20", 10);
-                const result = await handler.getNotifications(session.userId, cursor, limit, env);
+                const result = await handler.getNotifications(session.userId, cursor, limit, env, auth.activeTenantId);
                 return securityHeaders.addSecurityHeaders(new Response(JSON.stringify(result), {
                     status: 200,
                     headers: { "content-type": "application/json" },
@@ -67,11 +72,15 @@ exports.notificationsRoutes = [
             if (!session) {
                 return securityHeaders.createSecureResponse(JSON.stringify({ error: "Unauthorized" }), { status: 401, headers: { "content-type": "application/json" } });
             }
+            const auth = await (0, auth_middleware_1.authMiddleware)(request, env);
+            if (!auth || !auth.activeTenantId) {
+                return securityHeaders.createSecureResponse(JSON.stringify({ error: "Unauthorized" }), { status: 401, headers: { "content-type": "application/json" } });
+            }
             try {
                 const notificationId = pathname
                     .split("/api/notifications/")[1]
                     .split("/read")[0];
-                await handler.markRead(session.userId, notificationId, env);
+                await handler.markRead(session.userId, notificationId, env, auth.activeTenantId);
                 return securityHeaders.addSecurityHeaders(new Response(JSON.stringify({ success: true }), {
                     status: 200,
                     headers: { "content-type": "application/json" },
@@ -106,8 +115,12 @@ exports.notificationsRoutes = [
             if (!session) {
                 return securityHeaders.createSecureResponse(JSON.stringify({ error: "Unauthorized" }), { status: 401, headers: { "content-type": "application/json" } });
             }
+            const auth = await (0, auth_middleware_1.authMiddleware)(request, env);
+            if (!auth || !auth.activeTenantId) {
+                return securityHeaders.createSecureResponse(JSON.stringify({ error: "Unauthorized" }), { status: 401, headers: { "content-type": "application/json" } });
+            }
             try {
-                await handler.markAllRead(session.userId, env);
+                await handler.markAllRead(session.userId, env, auth.activeTenantId);
                 return securityHeaders.addSecurityHeaders(new Response(JSON.stringify({ success: true }), {
                     status: 200,
                     headers: { "content-type": "application/json" },
@@ -139,9 +152,13 @@ exports.notificationsRoutes = [
             if (!session) {
                 return securityHeaders.createSecureResponse(JSON.stringify({ error: "Unauthorized" }), { status: 401, headers: { "content-type": "application/json" } });
             }
+            const auth = await (0, auth_middleware_1.authMiddleware)(request, env);
+            if (!auth || !auth.activeTenantId) {
+                return securityHeaders.createSecureResponse(JSON.stringify({ error: "Unauthorized" }), { status: 401, headers: { "content-type": "application/json" } });
+            }
             try {
                 const ageTier = session.ageTier || "ADULT";
-                const result = await handler.getUnreadCount(session.userId, ageTier, env);
+                const result = await handler.getUnreadCount(session.userId, ageTier, env, auth.activeTenantId);
                 return securityHeaders.addSecurityHeaders(new Response(JSON.stringify(result), {
                     status: 200,
                     headers: { "content-type": "application/json" },

package/dist/lib/routes/notifications.js.map

@@ -1 +1 @@
-{"version":3,"file":"notifications.js","sourceRoot":"","sources":["../../../src/lib/routes/notifications.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,gEAA2D;AAC3D,sCAAmC;AACnC,8CAIuB;AACvB,wDAA6C;AAC7C,0DAAsD;AACtD,wDAAoD;AACpD,8CAA0C;AAC1C,kEAAyF;AACzF,0FAAqF;AAGxE,QAAA,mBAAmB,GAAY;IAC1C,iEAAiE;IACjE;QACE,IAAI,EAAE,wBAAwB;QAC9B,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,cAAc,EAAE,EAAE,EAAE;YAC5D,MAAM,cAAc,GAAG,IAAI,gCAAc,EAAE,CAAC;YAC5C,MAAM,eAAe,GAAG,IAAI,kCAAe,CAAC,GAAG,CAAC,CAAC;YACjD,MAAM,MAAM,GAAG,eAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACvC,MAAM,SAAS,GAAG,IAAI,sBAAS,EAAE,CAAC;YAClC,MAAM,OAAO,GAAG,IAAI,0CAAmB,EAAE,CAAC;YAC1C,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,UAAU,CAC7C,OAAO,EACP,yBAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAC7B,GAAG,CACJ,CAAC;YAEF,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,eAAe,CAAC,oBAAoB,CACzC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,EACzC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;YACJ,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBACjC,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC;gBACtD,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;gBAElE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,gBAAgB,CAC3C,OAAO,CAAC,MAAM,EACd,MAAM,EACN,KAAK,EACL,GAAG,CACJ,CAAC;gBAEF,OAAO,eAAe,CAAC,kBAAkB,CACvC,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE;oBACnC,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;iBAChD,CAAC,CACH,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE,KAAK,CAAC,CAAC;gBACpD,OAAO,eAAe,CAAC,oBAAoB,CACzC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,EACzD,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;YACJ,CAAC;QACH,CAAC;QACD,UAAU,EAAE;YACV,IAAA,2BAAc,GAAE;YAChB,IAAA,uCAAiB,GAAE;YACnB,IAAA,gCAAmB,EAAC,EAAE,WAAW,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;SAC1D;QACD,WAAW,EAAE,oBAAoB;KAClC;IAED,sEAAsE;IACtE;QACE,IAAI,EAAE,uCAAuC;QAC7C,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,cAAc,EAAE,EAAE,EAAE;YAC5D,MAAM,cAAc,GAAG,IAAI,gCAAc,EAAE,CAAC;YAC5C,MAAM,eAAe,GAAG,IAAI,kCAAe,CAAC,GAAG,CAAC,CAAC;YACjD,MAAM,MAAM,GAAG,eAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACvC,MAAM,SAAS,GAAG,IAAI,sBAAS,EAAE,CAAC;YAClC,MAAM,OAAO,GAAG,IAAI,0CAAmB,EAAE,CAAC;YAC1C,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,UAAU,CAC7C,OAAO,EACP,yBAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAC7B,GAAG,CACJ,CAAC;YAEF,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,eAAe,CAAC,oBAAoB,CACzC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,EACzC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;YACJ,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,cAAc,GAAG,QAAQ;qBAC5B,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;qBAC/B,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;gBAErB,MAAM,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,GAAG,CAAC,CAAC;gBAE5D,OAAO,eAAe,CAAC,kBAAkB,CACvC,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE;oBAC9C,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;iBAChD,CAAC,CACH,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,gDAAyB,EAAE,CAAC;oBAC/C,OAAO,eAAe,CAAC,oBAAoB,CACzC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC,EACnD,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;gBACJ,CAAC;gBACD,MAAM,CAAC,KAAK,CAAC,qCAAqC,EAAE,KAAK,CAAC,CAAC;gBAC3D,OAAO,eAAe,CAAC,oBAAoB,CACzC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,EACzD,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;YACJ,CAAC;QACH,CAAC;QACD,UAAU,EAAE;YACV,IAAA,2BAAc,GAAE;YAChB,IAAA,2BAAc,GAAE;YAChB,IAAA,gCAAmB,EAAC,EAAE,WAAW,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;SAC1D;QACD,WAAW,EAAE,2BAA2B;KACzC;IAED,oEAAoE;IACpE;QACE,IAAI,EAAE,kCAAkC;QACxC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,cAAc,EAAE,EAAE,EAAE;YAC5D,MAAM,cAAc,GAAG,IAAI,gCAAc,EAAE,CAAC;YAC5C,MAAM,eAAe,GAAG,IAAI,kCAAe,CAAC,GAAG,CAAC,CAAC;YACjD,MAAM,MAAM,GAAG,eAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACvC,MAAM,SAAS,GAAG,IAAI,sBAAS,EAAE,CAAC;YAClC,MAAM,OAAO,GAAG,IAAI,0CAAmB,EAAE,CAAC;YAC1C,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,UAAU,CAC7C,OAAO,EACP,yBAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAC7B,GAAG,CACJ,CAAC;YAEF,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,eAAe,CAAC,oBAAoB,CACzC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,EACzC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;YACJ,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;gBAE/C,OAAO,eAAe,CAAC,kBAAkB,CACvC,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE;oBAC9C,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;iBAChD,CAAC,CACH,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CAAC,0CAA0C,EAAE,KAAK,CAAC,CAAC;gBAChE,OAAO,eAAe,CAAC,oBAAoB,CACzC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,EACzD,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;YACJ,CAAC;QACH,CAAC;QACD,UAAU,EAAE;YACV,IAAA,2BAAc,GAAE;YAChB,IAAA,2BAAc,GAAE;YAChB,IAAA,gCAAmB,EAAC,EAAE,WAAW,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;SAC1D;QACD,WAAW,EAAE,gCAAgC;KAC9C;IAED,yDAAyD;IACzD;QACE,IAAI,EAAE,sCAAsC;QAC5C,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,cAAc,EAAE,EAAE,EAAE;YAC5D,MAAM,cAAc,GAAG,IAAI,gCAAc,EAAE,CAAC;YAC5C,MAAM,eAAe,GAAG,IAAI,kCAAe,CAAC,GAAG,CAAC,CAAC;YACjD,MAAM,MAAM,GAAG,eAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACvC,MAAM,SAAS,GAAG,IAAI,sBAAS,EAAE,CAAC;YAClC,MAAM,OAAO,GAAG,IAAI,0CAAmB,EAAE,CAAC;YAC1C,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,UAAU,CAC7C,OAAO,EACP,yBAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAC7B,GAAG,CACJ,CAAC;YAEF,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,eAAe,CAAC,oBAAoB,CACzC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,EACzC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;YACJ,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC;gBAC3C,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,cAAc,CACzC,OAAO,CAAC,MAAM,EACd,OAAO,EACP,GAAG,CACJ,CAAC;gBAEF,OAAO,eAAe,CAAC,kBAAkB,CACvC,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE;oBACnC,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;iBAChD,CAAC,CACH,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CAAC,6BAA6B,EAAE,KAAK,CAAC,CAAC;gBACnD,OAAO,eAAe,CAAC,oBAAoB,CACzC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,EACzD,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;YACJ,CAAC;QACH,CAAC;QACD,UAAU,EAAE;YACV,IAAA,2BAAc,GAAE;YAChB,IAAA,uCAAiB,GAAE;YACnB,IAAA,gCAAmB,EAAC,EAAE,WAAW,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;SAC3D;QACD,WAAW,EAAE,+BAA+B;KAC7C;IAED,oEAAoE;IACpE;QACE,IAAI,EAAE,qCAAqC;QAC3C,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,cAAc,EAAE,EAAE,EAAE;YAC5D,MAAM,cAAc,GAAG,IAAI,gCAAc,EAAE,CAAC;YAC5C,MAAM,eAAe,GAAG,IAAI,kCAAe,CAAC,GAAG,CAAC,CAAC;YACjD,MAAM,MAAM,GAAG,eAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACvC,MAAM,SAAS,GAAG,IAAI,sBAAS,EAAE,CAAC;YAClC,MAAM,YAAY,GAAG,IAAI,iEAA8B,EAAE,CAAC;YAC1D,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,UAAU,CAC7C,OAAO,EACP,yBAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAC7B,GAAG,CACJ,CAAC;YAEF,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,eAAe,CAAC,oBAAoB,CACzC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,EACzC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;YACJ,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,cAAc,CAChD,OAAO,CAAC,MAAM,EACd,GAAG,CACJ,CAAC;gBACF,OAAO,eAAe,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;YACtD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CAAC,yCAAyC,EAAE,KAAK,CAAC,CAAC;gBAC/D,OAAO,eAAe,CAAC,oBAAoB,CACzC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,EACzD,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;YACJ,CAAC;QACH,CAAC;QACD,UAAU,EAAE;YACV,IAAA,2BAAc,GAAE;YAChB,IAAA,gCAAmB,EAAC,EAAE,WAAW,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;SAC1D;QACD,WAAW,EAAE,8BAA8B;KAC5C;IAED,uEAAuE;IACvE;QACE,IAAI,EAAE,qCAAqC;QAC3C,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,cAAc,EAAE,EAAE,EAAE;YAC5D,MAAM,cAAc,GAAG,IAAI,gCAAc,EAAE,CAAC;YAC5C,MAAM,eAAe,GAAG,IAAI,kCAAe,CAAC,GAAG,CAAC,CAAC;YACjD,MAAM,MAAM,GAAG,eAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACvC,MAAM,SAAS,GAAG,IAAI,sBAAS,EAAE,CAAC;YAClC,MAAM,YAAY,GAAG,IAAI,iEAA8B,EAAE,CAAC;YAC1D,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,UAAU,CAC7C,OAAO,EACP,yBAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAC7B,GAAG,CACJ,CAAC;YAEF,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,eAAe,CAAC,oBAAoB,CACzC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,EACzC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;YACJ,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;gBAClC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC;gBAE3C,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,iBAAiB,CACnD,OAAO,CAAC,MAAM,EACd,OAAO,EACP,IAAW,EACX,GAAG,CACJ,CAAC;gBACF,OAAO,eAAe,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;YACtD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,WAAW,EAAE,CAAC;oBACjC,OAAO,eAAe,CAAC,oBAAoB,CACzC,IAAI,CAAC,SAAS,CAAC;wBACb,KAAK,EAAE,kBAAkB;wBACzB,OAAO,EAAE,mBAAmB;qBAC7B,CAAC,EACF,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;gBACJ,CAAC;gBACD,MAAM,CAAC,KAAK,CAAC,0CAA0C,EAAE,KAAK,CAAC,CAAC;gBAChE,OAAO,eAAe,CAAC,oBAAoB,CACzC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,EACzD,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;YACJ,CAAC;QACH,CAAC;QACD,UAAU,EAAE;YACV,IAAA,2BAAc,GAAE;YAChB,IAAA,2BAAc,GAAE;YAChB,IAAA,gCAAmB,EAAC,EAAE,WAAW,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;SAC1D;QACD,WAAW,EAAE,iCAAiC;KAC/C;CACF,CAAC"}
+{"version":3,"file":"notifications.js","sourceRoot":"","sources":["../../../src/lib/routes/notifications.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,gEAA2D;AAC3D,6DAAyD;AACzD,sCAAmC;AACnC,8CAIuB;AACvB,wDAA6C;AAC7C,0DAAsD;AACtD,wDAAoD;AACpD,8CAA0C;AAC1C,kEAAyF;AACzF,0FAAqF;AAGxE,QAAA,mBAAmB,GAAY;IAC1C,iEAAiE;IACjE;QACE,IAAI,EAAE,wBAAwB;QAC9B,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,cAAc,EAAE,EAAE,EAAE;YAC5D,MAAM,cAAc,GAAG,IAAI,gCAAc,EAAE,CAAC;YAC5C,MAAM,eAAe,GAAG,IAAI,kCAAe,CAAC,GAAG,CAAC,CAAC;YACjD,MAAM,MAAM,GAAG,eAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACvC,MAAM,SAAS,GAAG,IAAI,sBAAS,EAAE,CAAC;YAClC,MAAM,OAAO,GAAG,IAAI,0CAAmB,EAAE,CAAC;YAC1C,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,UAAU,CAC7C,OAAO,EACP,yBAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAC7B,GAAG,CACJ,CAAC;YAEF,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,eAAe,CAAC,oBAAoB,CACzC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,EACzC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;YACJ,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,IAAA,gCAAc,EAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAChD,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;gBAClC,OAAO,eAAe,CAAC,oBAAoB,CACzC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,EACzC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;YACJ,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBACjC,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC;gBACtD,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;gBAElE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,gBAAgB,CAC3C,OAAO,CAAC,MAAM,EACd,MAAM,EACN,KAAK,EACL,GAAG,EACH,IAAI,CAAC,cAAc,CACpB,CAAC;gBAEF,OAAO,eAAe,CAAC,kBAAkB,CACvC,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE;oBACnC,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;iBAChD,CAAC,CACH,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE,KAAK,CAAC,CAAC;gBACpD,OAAO,eAAe,CAAC,oBAAoB,CACzC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,EACzD,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;YACJ,CAAC;QACH,CAAC;QACD,UAAU,EAAE;YACV,IAAA,2BAAc,GAAE;YAChB,IAAA,uCAAiB,GAAE;YACnB,IAAA,gCAAmB,EAAC,EAAE,WAAW,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;SAC1D;QACD,WAAW,EAAE,oBAAoB;KAClC;IAED,sEAAsE;IACtE;QACE,IAAI,EAAE,uCAAuC;QAC7C,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,cAAc,EAAE,EAAE,EAAE;YAC5D,MAAM,cAAc,GAAG,IAAI,gCAAc,EAAE,CAAC;YAC5C,MAAM,eAAe,GAAG,IAAI,kCAAe,CAAC,GAAG,CAAC,CAAC;YACjD,MAAM,MAAM,GAAG,eAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACvC,MAAM,SAAS,GAAG,IAAI,sBAAS,EAAE,CAAC;YAClC,MAAM,OAAO,GAAG,IAAI,0CAAmB,EAAE,CAAC;YAC1C,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,UAAU,CAC7C,OAAO,EACP,yBAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAC7B,GAAG,CACJ,CAAC;YAEF,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,eAAe,CAAC,oBAAoB,CACzC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,EACzC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;YACJ,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,IAAA,gCAAc,EAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAChD,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;gBAClC,OAAO,eAAe,CAAC,oBAAoB,CACzC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,EACzC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;YACJ,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,cAAc,GAAG,QAAQ;qBAC5B,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;qBAC/B,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;gBAErB,MAAM,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,GAAG,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;gBAEjF,OAAO,eAAe,CAAC,kBAAkB,CACvC,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE;oBAC9C,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;iBAChD,CAAC,CACH,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,gDAAyB,EAAE,CAAC;oBAC/C,OAAO,eAAe,CAAC,oBAAoB,CACzC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC,EACnD,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;gBACJ,CAAC;gBACD,MAAM,CAAC,KAAK,CAAC,qCAAqC,EAAE,KAAK,CAAC,CAAC;gBAC3D,OAAO,eAAe,CAAC,oBAAoB,CACzC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,EACzD,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;YACJ,CAAC;QACH,CAAC;QACD,UAAU,EAAE;YACV,IAAA,2BAAc,GAAE;YAChB,IAAA,2BAAc,GAAE;YAChB,IAAA,gCAAmB,EAAC,EAAE,WAAW,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;SAC1D;QACD,WAAW,EAAE,2BAA2B;KACzC;IAED,oEAAoE;IACpE;QACE,IAAI,EAAE,kCAAkC;QACxC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,cAAc,EAAE,EAAE,EAAE;YAC5D,MAAM,cAAc,GAAG,IAAI,gCAAc,EAAE,CAAC;YAC5C,MAAM,eAAe,GAAG,IAAI,kCAAe,CAAC,GAAG,CAAC,CAAC;YACjD,MAAM,MAAM,GAAG,eAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACvC,MAAM,SAAS,GAAG,IAAI,sBAAS,EAAE,CAAC;YAClC,MAAM,OAAO,GAAG,IAAI,0CAAmB,EAAE,CAAC;YAC1C,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,UAAU,CAC7C,OAAO,EACP,yBAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAC7B,GAAG,CACJ,CAAC;YAEF,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,eAAe,CAAC,oBAAoB,CACzC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,EACzC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;YACJ,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,IAAA,gCAAc,EAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAChD,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;gBAClC,OAAO,eAAe,CAAC,oBAAoB,CACzC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,EACzC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;YACJ,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;gBAEpE,OAAO,eAAe,CAAC,kBAAkB,CACvC,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE;oBAC9C,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;iBAChD,CAAC,CACH,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CAAC,0CAA0C,EAAE,KAAK,CAAC,CAAC;gBAChE,OAAO,eAAe,CAAC,oBAAoB,CACzC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,EACzD,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;YACJ,CAAC;QACH,CAAC;QACD,UAAU,EAAE;YACV,IAAA,2BAAc,GAAE;YAChB,IAAA,2BAAc,GAAE;YAChB,IAAA,gCAAmB,EAAC,EAAE,WAAW,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;SAC1D;QACD,WAAW,EAAE,gCAAgC;KAC9C;IAED,yDAAyD;IACzD;QACE,IAAI,EAAE,sCAAsC;QAC5C,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,cAAc,EAAE,EAAE,EAAE;YAC5D,MAAM,cAAc,GAAG,IAAI,gCAAc,EAAE,CAAC;YAC5C,MAAM,eAAe,GAAG,IAAI,kCAAe,CAAC,GAAG,CAAC,CAAC;YACjD,MAAM,MAAM,GAAG,eAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACvC,MAAM,SAAS,GAAG,IAAI,sBAAS,EAAE,CAAC;YAClC,MAAM,OAAO,GAAG,IAAI,0CAAmB,EAAE,CAAC;YAC1C,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,UAAU,CAC7C,OAAO,EACP,yBAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAC7B,GAAG,CACJ,CAAC;YAEF,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,eAAe,CAAC,oBAAoB,CACzC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,EACzC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;YACJ,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,IAAA,gCAAc,EAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAChD,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;gBAClC,OAAO,eAAe,CAAC,oBAAoB,CACzC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,EACzC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;YACJ,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC;gBAC3C,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,cAAc,CACzC,OAAO,CAAC,MAAM,EACd,OAAO,EACP,GAAG,EACH,IAAI,CAAC,cAAc,CACpB,CAAC;gBAEF,OAAO,eAAe,CAAC,kBAAkB,CACvC,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE;oBACnC,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;iBAChD,CAAC,CACH,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CAAC,6BAA6B,EAAE,KAAK,CAAC,CAAC;gBACnD,OAAO,eAAe,CAAC,oBAAoB,CACzC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,EACzD,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;YACJ,CAAC;QACH,CAAC;QACD,UAAU,EAAE;YACV,IAAA,2BAAc,GAAE;YAChB,IAAA,uCAAiB,GAAE;YACnB,IAAA,gCAAmB,EAAC,EAAE,WAAW,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;SAC3D;QACD,WAAW,EAAE,+BAA+B;KAC7C;IAED,oEAAoE;IACpE;QACE,IAAI,EAAE,qCAAqC;QAC3C,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,cAAc,EAAE,EAAE,EAAE;YAC5D,MAAM,cAAc,GAAG,IAAI,gCAAc,EAAE,CAAC;YAC5C,MAAM,eAAe,GAAG,IAAI,kCAAe,CAAC,GAAG,CAAC,CAAC;YACjD,MAAM,MAAM,GAAG,eAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACvC,MAAM,SAAS,GAAG,IAAI,sBAAS,EAAE,CAAC;YAClC,MAAM,YAAY,GAAG,IAAI,iEAA8B,EAAE,CAAC;YAC1D,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,UAAU,CAC7C,OAAO,EACP,yBAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAC7B,GAAG,CACJ,CAAC;YAEF,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,eAAe,CAAC,oBAAoB,CACzC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,EACzC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;YACJ,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,cAAc,CAChD,OAAO,CAAC,MAAM,EACd,GAAG,CACJ,CAAC;gBACF,OAAO,eAAe,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;YACtD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CAAC,yCAAyC,EAAE,KAAK,CAAC,CAAC;gBAC/D,OAAO,eAAe,CAAC,oBAAoB,CACzC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,EACzD,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;YACJ,CAAC;QACH,CAAC;QACD,UAAU,EAAE;YACV,IAAA,2BAAc,GAAE;YAChB,IAAA,gCAAmB,EAAC,EAAE,WAAW,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;SAC1D;QACD,WAAW,EAAE,8BAA8B;KAC5C;IAED,uEAAuE;IACvE;QACE,IAAI,EAAE,qCAAqC;QAC3C,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,cAAc,EAAE,EAAE,EAAE;YAC5D,MAAM,cAAc,GAAG,IAAI,gCAAc,EAAE,CAAC;YAC5C,MAAM,eAAe,GAAG,IAAI,kCAAe,CAAC,GAAG,CAAC,CAAC;YACjD,MAAM,MAAM,GAAG,eAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACvC,MAAM,SAAS,GAAG,IAAI,sBAAS,EAAE,CAAC;YAClC,MAAM,YAAY,GAAG,IAAI,iEAA8B,EAAE,CAAC;YAC1D,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,UAAU,CAC7C,OAAO,EACP,yBAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAC7B,GAAG,CACJ,CAAC;YAEF,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,eAAe,CAAC,oBAAoB,CACzC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,EACzC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;YACJ,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;gBAClC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC;gBAE3C,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,iBAAiB,CACnD,OAAO,CAAC,MAAM,EACd,OAAO,EACP,IAAW,EACX,GAAG,CACJ,CAAC;gBACF,OAAO,eAAe,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;YACtD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,WAAW,EAAE,CAAC;oBACjC,OAAO,eAAe,CAAC,oBAAoB,CACzC,IAAI,CAAC,SAAS,CAAC;wBACb,KAAK,EAAE,kBAAkB;wBACzB,OAAO,EAAE,mBAAmB;qBAC7B,CAAC,EACF,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;gBACJ,CAAC;gBACD,MAAM,CAAC,KAAK,CAAC,0CAA0C,EAAE,KAAK,CAAC,CAAC;gBAChE,OAAO,eAAe,CAAC,oBAAoB,CACzC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,EACzD,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;YACJ,CAAC;QACH,CAAC;QACD,UAAU,EAAE;YACV,IAAA,2BAAc,GAAE;YAChB,IAAA,2BAAc,GAAE;YAChB,IAAA,gCAAmB,EAAC,EAAE,WAAW,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;SAC1D;QACD,WAAW,EAAE,iCAAiC;KAC/C;CACF,CAAC"}

package/dist/lib/routes/oauth.d.ts

@@ -0,0 +1,15 @@
+/**
+ * OAuth 2.0 device-authorization endpoints (T9b-d, RFC 8628).
+ *
+ *   POST /oauth2/device_authorization
+ *   POST /oauth2/token (grant_type=urn:ietf:params:oauth:grant-type:device_code)
+ *
+ * Discovery + agent-approval pages live in `agent-authorize.ts`. The
+ * /settings/agents user-facing surface lives in `agent-sessions.ts`.
+ *
+ * No CSRF on these endpoints — they accept token-bearing or anonymous
+ * requests from CLIs that aren't running in a browser context.
+ */
+import type { Route } from "./types";
+export declare const oauthRoutes: Route[];
+//# sourceMappingURL=oauth.d.ts.map

package/dist/lib/routes/oauth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../../../src/lib/routes/oauth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAcH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AA8DrC,eAAO,MAAM,WAAW,EAAE,KAAK,EA2F9B,CAAC"}

package/dist/lib/routes/oauth.js

@@ -0,0 +1,139 @@
+"use strict";
+/**
+ * OAuth 2.0 device-authorization endpoints (T9b-d, RFC 8628).
+ *
+ *   POST /oauth2/device_authorization
+ *   POST /oauth2/token (grant_type=urn:ietf:params:oauth:grant-type:device_code)
+ *
+ * Discovery + agent-approval pages live in `agent-authorize.ts`. The
+ * /settings/agents user-facing surface lives in `agent-sessions.ts`.
+ *
+ * No CSRF on these endpoints — they accept token-bearing or anonymous
+ * requests from CLIs that aren't running in a browser context.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.oauthRoutes = void 0;
+const zod_1 = require("zod");
+const device_authorization_1 = require("../oauth/device-authorization");
+const middleware_1 = require("../middleware");
+const trusted_client_ip_1 = require("../net/trusted-client-ip");
+const security_headers_1 = require("../security-headers");
+/**
+ * Hard cap on the agent-supplied User-Agent we accept as the agent label
+ * (G4 HIGH-4). The label is rendered on the operator's approval page and
+ * persisted alongside the agent session. Anything beyond this size is
+ * truncated server-side at request time.
+ */
+const MAX_AGENT_LABEL_BYTES = 256;
+function truncateAgentLabel(input) {
+    if (!input)
+        return undefined;
+    if (input.length <= MAX_AGENT_LABEL_BYTES)
+        return input;
+    return input.slice(0, MAX_AGENT_LABEL_BYTES);
+}
+const DEVICE_AUTHORIZATION_RE = /^\/oauth2\/device_authorization$/;
+const TOKEN_RE = /^\/oauth2\/token$/;
+const DEVICE_GRANT_TYPE = "urn:ietf:params:oauth:grant-type:device_code";
+/** RFC 8628 §3.1 — request body is a form-encoded `client_id`. */
+const DeviceAuthorizationRequestSchema = zod_1.z
+    .object({
+    client_id: zod_1.z.string().min(1).max(256),
+    scope: zod_1.z.string().max(1024).optional(),
+})
+    .strict();
+const TokenRequestSchema = zod_1.z
+    .object({
+    grant_type: zod_1.z.literal(DEVICE_GRANT_TYPE),
+    device_code: zod_1.z.string().min(16).max(512),
+    client_id: zod_1.z.string().min(1).max(256),
+})
+    .strict();
+function jsonResponse(body, status, env) {
+    const sec = new security_headers_1.SecurityHeaders(env);
+    return sec.createSecureResponse(JSON.stringify(body), {
+        status,
+        headers: { "content-type": "application/json", "cache-control": "no-store" },
+    });
+}
+async function readForm(request) {
+    const ct = request.headers.get("content-type") || "";
+    if (ct.includes("application/x-www-form-urlencoded")) {
+        const text = await request.text();
+        const out = {};
+        for (const part of new URLSearchParams(text).entries()) {
+            out[part[0]] = part[1];
+        }
+        return out;
+    }
+    if (ct.includes("application/json")) {
+        return (await request.json());
+    }
+    return {};
+}
+exports.oauthRoutes = [
+    {
+        path: DEVICE_AUTHORIZATION_RE,
+        method: "POST",
+        handler: async (request, env) => {
+            const form = await readForm(request);
+            const parsed = DeviceAuthorizationRequestSchema.safeParse(form);
+            if (!parsed.success) {
+                return jsonResponse({ error: "invalid_request", error_description: "client_id is required" }, 400, env);
+            }
+            const expectedClientId = env.COGNITO_AGENT_CLIENT_ID;
+            if (expectedClientId && parsed.data.client_id !== expectedClientId) {
+                return jsonResponse({ error: "invalid_client", error_description: "Unknown client_id" }, 400, env);
+            }
+            const verificationUriBase = env.AGENT_VERIFICATION_URI_BASE ||
+                "https://skybber.com/agents/authorize";
+            const result = await (0, device_authorization_1.startDeviceAuthorization)({
+                verificationUriBase,
+                // HIGH-4: cap caller-supplied User-Agent at 256 bytes server-side.
+                agentLabel: truncateAgentLabel(request.headers.get("user-agent")),
+                sourceIp: (0, trusted_client_ip_1.trustedClientIp)(request, env),
+            });
+            return jsonResponse(result, 200, env);
+        },
+        middleware: [(0, middleware_1.corsMiddleware)()],
+        description: "RFC 8628 device authorization request",
+    },
+    {
+        path: TOKEN_RE,
+        method: "POST",
+        handler: async (request, env) => {
+            const form = await readForm(request);
+            const parsed = TokenRequestSchema.safeParse(form);
+            if (!parsed.success) {
+                return jsonResponse({
+                    error: "unsupported_grant_type",
+                    error_description: "Only device_code grant type is supported by this adapter",
+                }, 400, env);
+            }
+            const expectedClientId = env.COGNITO_AGENT_CLIENT_ID;
+            if (expectedClientId && parsed.data.client_id !== expectedClientId) {
+                return jsonResponse({ error: "invalid_client", error_description: "Unknown client_id" }, 400, env);
+            }
+            const result = await (0, device_authorization_1.pollDeviceAuth)(parsed.data.device_code);
+            switch (result.outcome) {
+                case "ok":
+                    return jsonResponse(result.tokens, 200, env);
+                case "pending":
+                    return jsonResponse({ error: "authorization_pending" }, 400, env);
+                case "slow_down":
+                    return jsonResponse({ error: "slow_down" }, 400, env);
+                case "expired":
+                    return jsonResponse({ error: "expired_token" }, 400, env);
+                case "denied":
+                    return jsonResponse({ error: "access_denied" }, 400, env);
+                case "gone":
+                    // Per spec, RFC 8628 doesn't formalise read-once gone vs unknown;
+                    // we use 410 to make the read-once invariant clearly observable.
+                    return jsonResponse({ error: "invalid_grant", error_description: "device_code already used or unknown" }, 410, env);
+            }
+        },
+        middleware: [(0, middleware_1.corsMiddleware)()],
+        description: "RFC 8628 device-code token poll",
+    },
+];
+//# sourceMappingURL=oauth.js.map

package/dist/lib/routes/oauth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.js","sourceRoot":"","sources":["../../../src/lib/routes/oauth.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;GAWG;;;AAEH,6BAAwB;AACxB,wEAGuC;AACvC,8CAA+C;AAC/C,gEAA2D;AAC3D,0DAAsD;AAOtD;;;;;GAKG;AACH,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAElC,SAAS,kBAAkB,CAAC,KAAgC;IAC1D,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,IAAI,KAAK,CAAC,MAAM,IAAI,qBAAqB;QAAE,OAAO,KAAK,CAAC;IACxD,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,qBAAqB,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,uBAAuB,GAAG,kCAAkC,CAAC;AACnE,MAAM,QAAQ,GAAG,mBAAmB,CAAC;AAErC,MAAM,iBAAiB,GAAG,8CAA8C,CAAC;AAEzE,kEAAkE;AAClE,MAAM,gCAAgC,GAAG,OAAC;KACvC,MAAM,CAAC;IACN,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACrC,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;CACvC,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,kBAAkB,GAAG,OAAC;KACzB,MAAM,CAAC;IACN,UAAU,EAAE,OAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC;IACxC,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACxC,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;CACtC,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,SAAS,YAAY,CAAC,IAAa,EAAE,MAAc,EAAE,GAAY;IAC/D,MAAM,GAAG,GAAG,IAAI,kCAAe,CAAC,GAAY,CAAC,CAAC;IAC9C,OAAO,GAAG,CAAC,oBAAoB,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE;QACpD,MAAM;QACN,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,eAAe,EAAE,UAAU,EAAE;KAC7E,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,OAAgB;IACtC,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;IACrD,IAAI,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;QAClC,MAAM,GAAG,GAA2B,EAAE,CAAC;QACvC,KAAK,MAAM,IAAI,IAAI,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;YACvD,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACzB,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,IAAI,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACpC,OAAO,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAA2B,CAAC;IAC1D,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAGY,QAAA,WAAW,GAAY;IAClC;QACE,IAAI,EAAE,uBAAuB;QAC7B,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE;YAC9B,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC;YACrC,MAAM,MAAM,GAAG,gCAAgC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAChE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,OAAO,YAAY,CACjB,EAAE,KAAK,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,EACxE,GAAG,EACH,GAAG,CACJ,CAAC;YACJ,CAAC;YAED,MAAM,gBAAgB,GAAG,GAAG,CAAC,uBAAuB,CAAC;YACrD,IAAI,gBAAgB,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,KAAK,gBAAgB,EAAE,CAAC;gBACnE,OAAO,YAAY,CACjB,EAAE,KAAK,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,EACnE,GAAG,EACH,GAAG,CACJ,CAAC;YACJ,CAAC;YAED,MAAM,mBAAmB,GACvB,GAAG,CAAC,2BAA2B;gBAC/B,sCAAsC,CAAC;YAEzC,MAAM,MAAM,GAAG,MAAM,IAAA,+CAAwB,EAAC;gBAC5C,mBAAmB;gBACnB,mEAAmE;gBACnE,UAAU,EAAE,kBAAkB,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;gBACjE,QAAQ,EAAE,IAAA,mCAAe,EAAC,OAAO,EAAE,GAAG,CAAC;aACxC,CAAC,CAAC;YAEH,OAAO,YAAY,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;QACxC,CAAC;QACD,UAAU,EAAE,CAAC,IAAA,2BAAc,GAAE,CAAC;QAC9B,WAAW,EAAE,uCAAuC;KACrD;IACD;QACE,IAAI,EAAE,QAAQ;QACd,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE;YAC9B,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC;YACrC,MAAM,MAAM,GAAG,kBAAkB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAClD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,OAAO,YAAY,CACjB;oBACE,KAAK,EAAE,wBAAwB;oBAC/B,iBAAiB,EAAE,0DAA0D;iBAC9E,EACD,GAAG,EACH,GAAG,CACJ,CAAC;YACJ,CAAC;YAED,MAAM,gBAAgB,GAAG,GAAG,CAAC,uBAAuB,CAAC;YACrD,IAAI,gBAAgB,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,KAAK,gBAAgB,EAAE,CAAC;gBACnE,OAAO,YAAY,CACjB,EAAE,KAAK,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,EACnE,GAAG,EACH,GAAG,CACJ,CAAC;YACJ,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,IAAA,qCAAc,EAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAC7D,QAAQ,MAAM,CAAC,OAAO,EAAE,CAAC;gBACvB,KAAK,IAAI;oBACP,OAAO,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;gBAC/C,KAAK,SAAS;oBACZ,OAAO,YAAY,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;gBACpE,KAAK,WAAW;oBACd,OAAO,YAAY,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;gBACxD,KAAK,SAAS;oBACZ,OAAO,YAAY,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;gBAC5D,KAAK,QAAQ;oBACX,OAAO,YAAY,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;gBAC5D,KAAK,MAAM;oBACT,kEAAkE;oBAClE,iEAAiE;oBACjE,OAAO,YAAY,CACjB,EAAE,KAAK,EAAE,eAAe,EAAE,iBAAiB,EAAE,qCAAqC,EAAE,EACpF,GAAG,EACH,GAAG,CACJ,CAAC;YACN,CAAC;QACH,CAAC;QACD,UAAU,EAAE,CAAC,IAAA,2BAAc,GAAE,CAAC;QAC9B,WAAW,EAAE,iCAAiC;KAC/C;CACF,CAAC"}

package/dist/lib/routes/posts.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"posts.d.ts","sourceRoot":"","sources":["../../../src/lib/routes/posts.ts"],"names":[],"mappings":"AAAA;;GAEG;AAkBH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAErC,eAAO,MAAM,WAAW,EAAE,KAAK,EAq2B9B,CAAC"}
+{"version":3,"file":"posts.d.ts","sourceRoot":"","sources":["../../../src/lib/routes/posts.ts"],"names":[],"mappings":"AAAA;;GAEG;AAkBH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAErC,eAAO,MAAM,WAAW,EAAE,KAAK,EAk4B9B,CAAC"}

package/dist/lib/routes/posts.js

@@ -12,13 +12,12 @@ const logger_1 = require("../logger");
 const middleware_1 = require("../middleware");
 const post_handler_1 = require("../post-handler");
 const rate_limit_1 = require("../rate-limit");
-const request_context_1 = require("../request-context");
 const secret_resolver_1 = require("../secret-resolver");
 const security_headers_1 = require("../security-headers");
 const session_manager_1 = require("../session-manager");
 const tag_suggestions_handler_1 = require("../tag-suggestions-handler");
 const taxonomy_handler_1 = require("../taxonomy-handler");
-const tenant_context_1 = require("../tenant-context");
+const auth_middleware_1 = require("../auth/auth-middleware");
 const validation_1 = require("../validation");
 exports.postsRoutes = [
     {
@@ -43,11 +42,15 @@ exports.postsRoutes = [
             if (rateLimitResponse) {
                 return securityHeaders.addSecurityHeaders(rateLimitResponse);
             }
+            const auth = await (0, auth_middleware_1.authMiddleware)(request, env);
+            if (!auth || !auth.activeTenantId) {
+                return securityHeaders.createSecureResponse(JSON.stringify({ error: "Unauthorized" }), { status: 401, headers: { "content-type": "application/json" } });
+            }
             try {
                 if (!requestContext) {
                     return securityHeaders.createSecureResponse(JSON.stringify({ error: "Request context not available" }), { status: 500, headers: { "content-type": "application/json" } });
                 }
-                const response = await postHandler.createPost(request, session, env, requestContext);
+                const response = await postHandler.createPost(request, session, env, requestContext, auth.activeTenantId);
                 return securityHeaders.addSecurityHeaders(response);
             }
             catch (error) {
@@ -254,10 +257,12 @@ exports.postsRoutes = [
                         invalidTaxonIds,
                     }), { status: 400, headers: { "content-type": "application/json" } });
                 }
-                // Get tenant ID
-                const ctx = await (0, request_context_1.createRequestContext)(request, env);
-                const tenantCtx = await (0, tenant_context_1.getRequestContext)(request, ctx.session || null);
-                const tenantId = tenantCtx.tenant?.id || "trellis";
+                // Get tenant ID from authenticated JWT
+                const auth = await (0, auth_middleware_1.authMiddleware)(request, env);
+                if (!auth || !auth.activeTenantId) {
+                    return securityHeaders.createSecureResponse(JSON.stringify({ error: "Unauthorized" }), { status: 401, headers: { "content-type": "application/json" } });
+                }
+                const tenantId = auth.activeTenantId;
                 // Get database and taxonomy handler
                 const region = requestContext.region || "US";
                 const db = (0, database_wrapper_helper_1.getWrappedDatabase)(region, env, request);
@@ -328,10 +333,12 @@ exports.postsRoutes = [
                 if (!body.taxonIds || !Array.isArray(body.taxonIds)) {
                     return securityHeaders.createSecureResponse(JSON.stringify({ error: "taxonIds array is required" }), { status: 400, headers: { "content-type": "application/json" } });
                 }
-                // Get tenant ID
-                const ctx = await (0, request_context_1.createRequestContext)(request, env);
-                const tenantCtx = await (0, tenant_context_1.getRequestContext)(request, ctx.session || null);
-                const tenantId = tenantCtx.tenant?.id || "trellis";
+                // Get tenant ID from authenticated JWT
+                const auth = await (0, auth_middleware_1.authMiddleware)(request, env);
+                if (!auth || !auth.activeTenantId) {
+                    return securityHeaders.createSecureResponse(JSON.stringify({ error: "Unauthorized" }), { status: 401, headers: { "content-type": "application/json" } });
+                }
+                const tenantId = auth.activeTenantId;
                 // Get database and taxonomy handler
                 const region = requestContext.region || "US";
                 const db = (0, database_wrapper_helper_1.getWrappedDatabase)(region, env, request);
@@ -370,10 +377,12 @@ exports.postsRoutes = [
                 if (!post) {
                     return securityHeaders.createSecureResponse(JSON.stringify({ error: "Post not found" }), { status: 404, headers: { "content-type": "application/json" } });
                 }
-                // Get tenant ID
-                const ctx = await (0, request_context_1.createRequestContext)(request, env);
-                const tenantCtx = await (0, tenant_context_1.getRequestContext)(request, ctx.session || null);
-                const tenantId = tenantCtx.tenant?.id || "trellis";
+                // Get tenant ID from authenticated JWT
+                const auth = await (0, auth_middleware_1.authMiddleware)(request, env);
+                if (!auth || !auth.activeTenantId) {
+                    return securityHeaders.createSecureResponse(JSON.stringify({ error: "Unauthorized" }), { status: 401, headers: { "content-type": "application/json" } });
+                }
+                const tenantId = auth.activeTenantId;
                 // Get database and taxonomy handler
                 const region = requestContext.region || "US";
                 const db = (0, database_wrapper_helper_1.getWrappedDatabase)(region, env, request);
@@ -439,10 +448,12 @@ exports.postsRoutes = [
                 if (!fullPost) {
                     return securityHeaders.createSecureResponse(JSON.stringify({ error: "Post not found" }), { status: 404, headers: { "content-type": "application/json" } });
                 }
-                // Get tenant ID
-                const ctx = await (0, request_context_1.createRequestContext)(request, env);
-                const tenantCtx = await (0, tenant_context_1.getRequestContext)(request, ctx.session || null);
-                const tenantId = tenantCtx.tenant?.id || "trellis";
+                // Get tenant ID from authenticated JWT
+                const auth = await (0, auth_middleware_1.authMiddleware)(request, env);
+                if (!auth || !auth.activeTenantId) {
+                    return securityHeaders.createSecureResponse(JSON.stringify({ error: "Unauthorized" }), { status: 401, headers: { "content-type": "application/json" } });
+                }
+                const tenantId = auth.activeTenantId;
                 // Get database and handlers
                 const wrappedDb = (0, database_wrapper_helper_1.getWrappedDatabase)(requestContext.region || "US", env, request);
                 const taxonomyHandler = new taxonomy_handler_1.TaxonomyHandler(wrappedDb, tenantId, env.TAXONOMY_CACHE_KV);