@de-otio/trellis 0.7.1 → 0.9.0

package/dist/lib/age-tier-transition.js

@@ -1,52 +1,15 @@
-"use strict";
 /**
  * Age Tier Transition
  *
  * Checks users' date of birth and transitions their age tier when appropriate.
  * Applies new privacy defaults and notifies users and guardians.
  */
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.computeAgeTier = computeAgeTier;
-exports.checkAgeTierTransitions = checkAgeTierTransitions;
-const logger_1 = require("./logger");
-const privacy_defaults_1 = require("./privacy-defaults");
+import { getLogger } from "./logger.js";
+import { getPrivacyDefaults } from "./privacy-defaults.js";
 /**
  * Compute the age tier from a date of birth.
  */
-function computeAgeTier(dateOfBirth, now = new Date()) {
+export function computeAgeTier(dateOfBirth, now = new Date()) {
     const age = getAge(dateOfBirth, now);
     if (age < 13)
         return "CHILD";
@@ -93,10 +56,10 @@ function mergeMoreRestrictive(currentSettings, newDefaults) {
  * Check all users with a date of birth and transition their age tier if needed.
  * Returns the count of transitioned users and errors.
  */
-async function checkAgeTierTransitions(env) {
-    const { createPrisma } = await Promise.resolve().then(() => __importStar(require("../db")));
+export async function checkAgeTierTransitions(env) {
+    const { createPrisma } = await import("../db.js");
     const db = createPrisma(env);
-    const logger = logger_1.Logger.getInstance(env);
+    const logger = getLogger();
     const now = new Date();
     let transitioned = 0;
     let errors = 0;
@@ -127,7 +90,7 @@ async function checkAgeTierTransitions(env) {
                 if (computedTier === user.ageTier)
                     continue;
                 const oldTier = user.ageTier;
-                const newDefaults = (0, privacy_defaults_1.getPrivacyDefaults)(computedTier);
+                const newDefaults = getPrivacyDefaults(computedTier);
                 const currentSettings = {
                     stealthMode: user.stealthMode,
                     showOnlineStatus: user.showOnlineStatus,

package/dist/lib/age-tier-transition.js.map

@@ -1 +1 @@
-{"version":3,"file":"age-tier-transition.js","sourceRoot":"","sources":["../../src/lib/age-tier-transition.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAUH,wCAKC;AAiDD,0DAiHC;AA7KD,qCAAkC;AAClC,yDAA8E;AAE9E;;GAEG;AACH,SAAgB,cAAc,CAAC,WAAiB,EAAE,MAAY,IAAI,IAAI,EAAE;IACtE,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;IACrC,IAAI,GAAG,GAAG,EAAE;QAAE,OAAO,OAAO,CAAC;IAC7B,IAAI,GAAG,GAAG,EAAE;QAAE,OAAO,MAAM,CAAC;IAC5B,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,MAAM,CAAC,WAAiB,EAAE,GAAS;IAC1C,IAAI,GAAG,GAAG,GAAG,CAAC,WAAW,EAAE,GAAG,WAAW,CAAC,WAAW,EAAE,CAAC;IACxD,MAAM,SAAS,GAAG,GAAG,CAAC,QAAQ,EAAE,GAAG,WAAW,CAAC,QAAQ,EAAE,CAAC;IAC1D,IAAI,SAAS,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,CAAC,IAAI,GAAG,CAAC,OAAO,EAAE,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;QAChF,GAAG,EAAE,CAAC;IACR,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,SAAS,oBAAoB,CAC3B,eAAgC,EAChC,WAA4B;IAE5B,MAAM,eAAe,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;IAClE,MAAM,OAAO,GAAG,EAAE,MAAM,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;IAEzD,OAAO;QACL,2GAA2G;QAC3G,WAAW,EAAE,eAAe,CAAC,WAAW,IAAI,WAAW,CAAC,WAAW;QACnE,gBAAgB,EAAE,eAAe,CAAC,gBAAgB,IAAI,WAAW,CAAC,gBAAgB;QAClF,mBAAmB,EAAE,eAAe,CAAC,mBAAmB,IAAI,WAAW,CAAC,mBAAmB;QAC3F,YAAY,EAAE,eAAe,CAAC,YAAY,IAAI,WAAW,CAAC,YAAY;QACtE,uBAAuB,EAAE,eAAe,CAAC,uBAAuB,IAAI,WAAW,CAAC,uBAAuB;QACvG,2CAA2C;QAC3C,0BAA0B,EAAE,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,0BAA0B,EAAE,WAAW,CAAC,0BAA0B,CAAC;QACxH,eAAe,EAAE,eAAe,CAAC,eAAe,IAAI,WAAW,CAAC,eAAe;QAC/E,4CAA4C;QAC5C,iBAAiB,EACf,eAAe,CAAC,eAAe,CAAC,iBAAiB,CAAC,IAAI,eAAe,CAAC,WAAW,CAAC,iBAAiB,CAAC;YAClG,CAAC,CAAC,eAAe,CAAC,iBAAiB;YACnC,CAAC,CAAC,WAAW,CAAC,iBAAiB;QACnC,oCAAoC;QACpC,QAAQ,EACN,OAAO,CAAC,eAAe,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC;YAChE,CAAC,CAAC,eAAe,CAAC,QAAQ;YAC1B,CAAC,CAAC,WAAW,CAAC,QAAQ;KAC3B,CAAC;AACJ,CAAC;AAED;;;GAGG;AACI,KAAK,UAAU,uBAAuB,CAAC,GAAQ;IAIpD,MAAM,EAAE,YAAY,EAAE,GAAG,wDAAa,OAAO,GAAC,CAAC;IAC/C,MAAM,EAAE,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IAC7B,MAAM,MAAM,GAAG,eAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACvC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IAEvB,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,MAAM,GAAG,CAAC,CAAC;IAEf,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC;YACnC,KAAK,EAAE,EAAE,WAAW,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YACrC,MAAM,EAAE;gBACN,EAAE,EAAE,IAAI;gBACR,WAAW,EAAE,IAAI;gBACjB,OAAO,EAAE,IAAI;gBACb,gBAAgB,EAAE,IAAI;gBACtB,WAAW,EAAE,IAAI;gBACjB,gBAAgB,EAAE,IAAI;gBACtB,mBAAmB,EAAE,IAAI;gBACzB,YAAY,EAAE,IAAI;gBAClB,uBAAuB,EAAE,IAAI;gBAC7B,0BAA0B,EAAE,IAAI;gBAChC,eAAe,EAAE,IAAI;gBACrB,iBAAiB,EAAE,IAAI;gBACvB,QAAQ,EAAE,IAAI;aACf;SACF,CAAC,CAAC;QAEH,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,IAAI,CAAC,IAAI,CAAC,WAAW;oBAAE,SAAS;gBAEhC,MAAM,YAAY,GAAG,cAAc,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;gBAC3D,IAAI,YAAY,KAAK,IAAI,CAAC,OAAO;oBAAE,SAAS;gBAE5C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;gBAC7B,MAAM,WAAW,GAAG,IAAA,qCAAkB,EAAC,YAAY,CAAC,CAAC;gBAErD,MAAM,eAAe,GAAoB;oBACvC,WAAW,EAAE,IAAI,CAAC,WAAW;oBAC7B,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;oBACvC,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;oBAC7C,YAAY,EAAE,IAAI,CAAC,YAAY;oBAC/B,uBAAuB,EAAE,IAAI,CAAC,uBAAuB;oBACrD,0BAA0B,EAAE,IAAI,CAAC,0BAA0B;oBAC3D,eAAe,EAAE,IAAI,CAAC,eAAe;oBACrC,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;oBACzC,QAAQ,EAAE,IAAI,CAAC,QAAQ;iBACxB,CAAC;gBAEF,qEAAqE;gBACrE,MAAM,MAAM,GAAG,oBAAoB,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;gBAElE,MAAM,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC;oBACnB,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE;oBACtB,IAAI,EAAE;wBACJ,OAAO,EAAE,YAAY;wBACrB,GAAG,MAAM;qBACV;iBACF,CAAC,CAAC;gBAEH,2DAA2D;gBAC3D,4DAA4D;gBAC5D,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;oBAC1B,MAAM,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC;wBAC3B,IAAI,EAAE;4BACJ,MAAM,EAAE,IAAI,CAAC,EAAE;4BACf,IAAI,EAAE,QAAQ;4BACd,KAAK,EAAE,kBAAkB;4BACzB,IAAI,EAAE,sCAAsC,OAAO,OAAO,YAAY,uCAAuC;4BAC7G,IAAI,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE;4BACxC,QAAQ,EAAE,IAAI,CAAC,gBAAgB;yBAChC;qBACF,CAAC,CAAC;gBACL,CAAC;gBAED,+CAA+C;gBAC/C,MAAM,aAAa,GAAG,MAAM,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC;oBACnD,KAAK,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE;oBAC7C,OAAO,EAAE,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,EAAE,gBAAgB,EAAE,IAAI,EAAE,EAAE,EAAE;iBAC9D,CAAC,CAAC;gBAEH,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;oBACjC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB;wBAAE,SAAS;oBAC9C,MAAM,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC;wBAC3B,IAAI,EAAE;4BACJ,MAAM,EAAE,IAAI,CAAC,UAAU;4BACvB,IAAI,EAAE,QAAQ;4BACd,KAAK,EAAE,wBAAwB;4BAC/B,IAAI,EAAE,mDAAmD,OAAO,OAAO,YAAY,GAAG;4BACtF,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE;4BAC1D,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,gBAAgB;yBACzC;qBACF,CAAC,CAAC;gBACL,CAAC;gBAED,YAAY,EAAE,CAAC;gBACf,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,EAAE,sBAAsB,OAAO,OAAO,YAAY,EAAE,CAAC,CAAC;YACjF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,EAAE,CAAC;gBACT,MAAM,CAAC,KAAK,CAAC,4BAA4B,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,mCAAmC,EAAE,KAAK,CAAC,CAAC;QACzD,MAAM,EAAE,CAAC;IACX,CAAC;IAED,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC;AAClC,CAAC"}
+{"version":3,"file":"age-tier-transition.js","sourceRoot":"","sources":["../../src/lib/age-tier-transition.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,EAAE,SAAS,EAAU,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,kBAAkB,EAAwB,MAAM,uBAAuB,CAAC;AAEjF;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,WAAiB,EAAE,MAAY,IAAI,IAAI,EAAE;IACtE,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;IACrC,IAAI,GAAG,GAAG,EAAE;QAAE,OAAO,OAAO,CAAC;IAC7B,IAAI,GAAG,GAAG,EAAE;QAAE,OAAO,MAAM,CAAC;IAC5B,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,MAAM,CAAC,WAAiB,EAAE,GAAS;IAC1C,IAAI,GAAG,GAAG,GAAG,CAAC,WAAW,EAAE,GAAG,WAAW,CAAC,WAAW,EAAE,CAAC;IACxD,MAAM,SAAS,GAAG,GAAG,CAAC,QAAQ,EAAE,GAAG,WAAW,CAAC,QAAQ,EAAE,CAAC;IAC1D,IAAI,SAAS,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,CAAC,IAAI,GAAG,CAAC,OAAO,EAAE,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;QAChF,GAAG,EAAE,CAAC;IACR,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,SAAS,oBAAoB,CAC3B,eAAgC,EAChC,WAA4B;IAE5B,MAAM,eAAe,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;IAClE,MAAM,OAAO,GAAG,EAAE,MAAM,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;IAEzD,OAAO;QACL,2GAA2G;QAC3G,WAAW,EAAE,eAAe,CAAC,WAAW,IAAI,WAAW,CAAC,WAAW;QACnE,gBAAgB,EAAE,eAAe,CAAC,gBAAgB,IAAI,WAAW,CAAC,gBAAgB;QAClF,mBAAmB,EAAE,eAAe,CAAC,mBAAmB,IAAI,WAAW,CAAC,mBAAmB;QAC3F,YAAY,EAAE,eAAe,CAAC,YAAY,IAAI,WAAW,CAAC,YAAY;QACtE,uBAAuB,EAAE,eAAe,CAAC,uBAAuB,IAAI,WAAW,CAAC,uBAAuB;QACvG,2CAA2C;QAC3C,0BAA0B,EAAE,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,0BAA0B,EAAE,WAAW,CAAC,0BAA0B,CAAC;QACxH,eAAe,EAAE,eAAe,CAAC,eAAe,IAAI,WAAW,CAAC,eAAe;QAC/E,4CAA4C;QAC5C,iBAAiB,EACf,eAAe,CAAC,eAAe,CAAC,iBAAiB,CAAC,IAAI,eAAe,CAAC,WAAW,CAAC,iBAAiB,CAAC;YAClG,CAAC,CAAC,eAAe,CAAC,iBAAiB;YACnC,CAAC,CAAC,WAAW,CAAC,iBAAiB;QACnC,oCAAoC;QACpC,QAAQ,EACN,OAAO,CAAC,eAAe,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC;YAChE,CAAC,CAAC,eAAe,CAAC,QAAQ;YAC1B,CAAC,CAAC,WAAW,CAAC,QAAQ;KAC3B,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,GAAQ;IAIpD,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC;IAClD,MAAM,EAAE,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IAC7B,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IAEvB,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,MAAM,GAAG,CAAC,CAAC;IAEf,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC;YACnC,KAAK,EAAE,EAAE,WAAW,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YACrC,MAAM,EAAE;gBACN,EAAE,EAAE,IAAI;gBACR,WAAW,EAAE,IAAI;gBACjB,OAAO,EAAE,IAAI;gBACb,gBAAgB,EAAE,IAAI;gBACtB,WAAW,EAAE,IAAI;gBACjB,gBAAgB,EAAE,IAAI;gBACtB,mBAAmB,EAAE,IAAI;gBACzB,YAAY,EAAE,IAAI;gBAClB,uBAAuB,EAAE,IAAI;gBAC7B,0BAA0B,EAAE,IAAI;gBAChC,eAAe,EAAE,IAAI;gBACrB,iBAAiB,EAAE,IAAI;gBACvB,QAAQ,EAAE,IAAI;aACf;SACF,CAAC,CAAC;QAEH,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,IAAI,CAAC,IAAI,CAAC,WAAW;oBAAE,SAAS;gBAEhC,MAAM,YAAY,GAAG,cAAc,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;gBAC3D,IAAI,YAAY,KAAK,IAAI,CAAC,OAAO;oBAAE,SAAS;gBAE5C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;gBAC7B,MAAM,WAAW,GAAG,kBAAkB,CAAC,YAAY,CAAC,CAAC;gBAErD,MAAM,eAAe,GAAoB;oBACvC,WAAW,EAAE,IAAI,CAAC,WAAW;oBAC7B,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;oBACvC,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;oBAC7C,YAAY,EAAE,IAAI,CAAC,YAAY;oBAC/B,uBAAuB,EAAE,IAAI,CAAC,uBAAuB;oBACrD,0BAA0B,EAAE,IAAI,CAAC,0BAA0B;oBAC3D,eAAe,EAAE,IAAI,CAAC,eAAe;oBACrC,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;oBACzC,QAAQ,EAAE,IAAI,CAAC,QAAQ;iBACxB,CAAC;gBAEF,qEAAqE;gBACrE,MAAM,MAAM,GAAG,oBAAoB,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;gBAElE,MAAM,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC;oBACnB,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE;oBACtB,IAAI,EAAE;wBACJ,OAAO,EAAE,YAAY;wBACrB,GAAG,MAAM;qBACV;iBACF,CAAC,CAAC;gBAEH,2DAA2D;gBAC3D,4DAA4D;gBAC5D,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;oBAC1B,MAAM,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC;wBAC3B,IAAI,EAAE;4BACJ,MAAM,EAAE,IAAI,CAAC,EAAE;4BACf,IAAI,EAAE,QAAQ;4BACd,KAAK,EAAE,kBAAkB;4BACzB,IAAI,EAAE,sCAAsC,OAAO,OAAO,YAAY,uCAAuC;4BAC7G,IAAI,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE;4BACxC,QAAQ,EAAE,IAAI,CAAC,gBAAgB;yBAChC;qBACF,CAAC,CAAC;gBACL,CAAC;gBAED,+CAA+C;gBAC/C,MAAM,aAAa,GAAG,MAAM,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC;oBACnD,KAAK,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE;oBAC7C,OAAO,EAAE,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,EAAE,gBAAgB,EAAE,IAAI,EAAE,EAAE,EAAE;iBAC9D,CAAC,CAAC;gBAEH,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;oBACjC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB;wBAAE,SAAS;oBAC9C,MAAM,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC;wBAC3B,IAAI,EAAE;4BACJ,MAAM,EAAE,IAAI,CAAC,UAAU;4BACvB,IAAI,EAAE,QAAQ;4BACd,KAAK,EAAE,wBAAwB;4BAC/B,IAAI,EAAE,mDAAmD,OAAO,OAAO,YAAY,GAAG;4BACtF,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE;4BAC1D,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,gBAAgB;yBACzC;qBACF,CAAC,CAAC;gBACL,CAAC;gBAED,YAAY,EAAE,CAAC;gBACf,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,EAAE,sBAAsB,OAAO,OAAO,YAAY,EAAE,CAAC,CAAC;YACjF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,EAAE,CAAC;gBACT,MAAM,CAAC,KAAK,CAAC,4BAA4B,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,mCAAmC,EAAE,KAAK,CAAC,CAAC;QACzD,MAAM,EAAE,CAAC;IACX,CAAC;IAED,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC;AAClC,CAAC"}

package/dist/lib/app.d.ts

@@ -0,0 +1,76 @@
+/**
+ * Hono application (Stream 2.1 — router migration seam).
+ *
+ * During the migration the Hono app and the legacy regex-array router
+ * (`routeRequest` in `router.ts`) coexist. `server.ts` dispatches to this
+ * app first; on a *fallthrough* 404 (see `FALLTHROUGH_HEADER`) it falls back
+ * to the legacy router. A route is "ported" by mounting it here — its legacy
+ * registry entry can stay until the bulk legacy removal at H-final (it is
+ * simply never reached at runtime once Hono owns it).
+ *
+ * Adapters keep each port mechanical, with NO handler/middleware-body
+ * changes (parity over rewrite):
+ *   - `toHono` wraps a legacy `Route.handler`.
+ *   - `toHonoMiddleware` wraps a legacy `Middleware` (CORS, CSRF, …) verbatim.
+ *   - `honoSecurityHeaders` reapplies `SecurityHeaders` per request (the
+ *     legacy `securityHeadersMiddleware` closes over `env` at construction;
+ *     Hono supplies `env` per request, so only the wiring is re-expressed —
+ *     the header set is the same class).
+ *   - `mount` composes `[...route.middleware, securityHeaders, handler]`,
+ *     mirroring `router.ts` exactly (security headers innermost, so a CORS
+ *     OPTIONS short-circuit is NOT wrapped with them — same as legacy).
+ *
+ * @see plans/trellis-migration/2.1-hono-migration.md (in the saas-foundation repo)
+ */
+import { Hono, type MiddlewareHandler } from "hono";
+import type { Env } from "../env.js";
+import { corsMiddleware, type Middleware } from "./middleware.js";
+import type { TrellisRequestContext } from "./request-context.js";
+/**
+ * Per-request bindings passed as the second arg to `app.fetch(req, bindings)`.
+ * `server.ts` builds these once per request (mirroring the legacy
+ * `RouterContext`).
+ */
+export interface HonoBindings {
+    trellisEnv: Env;
+    requestContext?: TrellisRequestContext;
+}
+type AppEnv = {
+    Bindings: HonoBindings;
+};
+/**
+ * Adapt a legacy `Middleware` (`(ctx, next) => Promise<Response>`) to a Hono
+ * middleware, reusing the legacy implementation verbatim. The legacy `next()`
+ * returns the downstream `Response`; we bridge it to Hono's `next()` (which
+ * sets `c.res`) and hand the legacy middleware a mutable copy so in-place
+ * header mutation (e.g. CORS) is safe against an immutable `c.res`.
+ */
+declare function toHonoMiddleware(mw: Middleware): MiddlewareHandler<AppEnv>;
+/**
+ * Translate a legacy anchored RegExp route path to an equivalent Hono path
+ * string. Handles the common single-segment capture `([^/]+)` → `:pN`.
+ *
+ * Returns `null` for anything it cannot translate *safely* (unanchored, or
+ * containing regex metacharacters beyond the `([^/]+)` captures) — the caller
+ * then defers that route rather than risk a mis-translation. Handlers that
+ * re-parse `pathname` (the trellis regex routes all do, via
+ * `pathname.match(SOME_RE)`) keep working unchanged: toHono passes the real
+ * `url.pathname`, so the param NAME here is irrelevant to them.
+ */
+export declare function regexToHonoPath(re: RegExp): string | null;
+/** Re-exported so tests can exercise the middleware adapter in isolation. */
+export { toHonoMiddleware };
+export { corsMiddleware };
+/**
+ * Paths now owned by Hono — derived from the ported sets. Informational
+ * (tests / progress tracking); the runtime owner is decided by Hono matching
+ * first.
+ */
+export declare const HONO_PORTED_PATHS: ReadonlyArray<string>;
+/**
+ * Build the Hono app. Stateless: env + per-request context arrive via
+ * `app.fetch(request, bindings)`, so a single instance is reused across
+ * requests.
+ */
+export declare function buildHonoApp(): Hono<AppEnv>;
+//# sourceMappingURL=app.d.ts.map

package/dist/lib/app.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../../src/lib/app.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,IAAI,EAAgB,KAAK,iBAAiB,EAAE,MAAM,MAAM,CAAC;AAMlE,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAErC,OAAO,EAAE,cAAc,EAAE,KAAK,UAAU,EAA0B,MAAM,iBAAiB,CAAC;AAC1F,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAwElE;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,UAAU,EAAE,GAAG,CAAC;IAChB,cAAc,CAAC,EAAE,qBAAqB,CAAC;CACxC;AAED,KAAK,MAAM,GAAG;IAAE,QAAQ,EAAE,YAAY,CAAA;CAAE,CAAC;AA+BzC;;;;;;GAMG;AACH,iBAAS,gBAAgB,CAAC,EAAE,EAAE,UAAU,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAcnE;AAkBD;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CA6BzD;AAqDD,6EAA6E;AAC7E,OAAO,EAAE,gBAAgB,EAAE,CAAC;AAC5B,OAAO,EAAE,cAAc,EAAE,CAAC;AAgH1B;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,EAAE,aAAa,CAAC,MAAM,CAEnD,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,YAAY,IAAI,IAAI,CAAC,MAAM,CAAC,CA4C3C"}

package/dist/lib/app.js

@@ -0,0 +1,400 @@
+/**
+ * Hono application (Stream 2.1 — router migration seam).
+ *
+ * During the migration the Hono app and the legacy regex-array router
+ * (`routeRequest` in `router.ts`) coexist. `server.ts` dispatches to this
+ * app first; on a *fallthrough* 404 (see `FALLTHROUGH_HEADER`) it falls back
+ * to the legacy router. A route is "ported" by mounting it here — its legacy
+ * registry entry can stay until the bulk legacy removal at H-final (it is
+ * simply never reached at runtime once Hono owns it).
+ *
+ * Adapters keep each port mechanical, with NO handler/middleware-body
+ * changes (parity over rewrite):
+ *   - `toHono` wraps a legacy `Route.handler`.
+ *   - `toHonoMiddleware` wraps a legacy `Middleware` (CORS, CSRF, …) verbatim.
+ *   - `honoSecurityHeaders` reapplies `SecurityHeaders` per request (the
+ *     legacy `securityHeadersMiddleware` closes over `env` at construction;
+ *     Hono supplies `env` per request, so only the wiring is re-expressed —
+ *     the header set is the same class).
+ *   - `mount` composes `[...route.middleware, securityHeaders, handler]`,
+ *     mirroring `router.ts` exactly (security headers innermost, so a CORS
+ *     OPTIONS short-circuit is NOT wrapped with them — same as legacy).
+ *
+ * @see plans/trellis-migration/2.1-hono-migration.md (in the saas-foundation repo)
+ */
+import { Hono } from "hono";
+import { runWithTenantContext, tenantId } from "@de-otio/saas-foundation/tenant";
+import { getExtensions } from "../extensions.js";
+import { extractVerifiedTenantId } from "./auth/auth-middleware.js";
+import { resolveTenantScopeMode } from "./tenant-scope.js";
+import { wrapExtensionRoutes } from "./extension-route-wrapper.js";
+import { corsMiddleware } from "./middleware.js";
+import { actorRoutes } from "./routes/activitypub/actor.js";
+import { audienceRoutes } from "./routes/activitypub/audiences.js";
+import { collectionRoutes } from "./routes/activitypub/collections.js";
+import { entityProfileRoutes } from "./routes/activitypub/entity-profile.js";
+import { friendsRoutes as apFriendsRoutes } from "./routes/activitypub/friends.js";
+import { groupRoutes } from "./routes/activitypub/group.js";
+import { inboxRoutes } from "./routes/activitypub/inbox.js";
+import { messageRoutes } from "./routes/activitypub/messages.js";
+import { outboxRoutes } from "./routes/activitypub/outbox.js";
+import { postRoutes as apPostRoutes } from "./routes/activitypub/post.js";
+import { webfingerRoutes } from "./routes/activitypub/webfinger.js";
+import { adminCostRoutes } from "./routes/admin-costs.js";
+import { agentAuthorizeRoutes } from "./routes/agent-authorize.js";
+import { agentSessionsRoutes } from "./routes/agent-sessions.js";
+import { adminRoutes } from "./routes/admin.js";
+import { buildAgentSurfaceRoutes } from "./routes/agent-surface.js";
+import { authRoutes } from "./routes/auth.js";
+import { authDiscoverRoutes } from "./routes/auth-discover.js";
+import { badgesRoutes } from "./routes/badges.js";
+import { circleRoutes } from "./routes/circles.js";
+import { commentsRoutes } from "./routes/comments.js";
+import { connectionCodeRoutes } from "./routes/connection-codes.js";
+import { contentDiscoveryRoutes } from "./routes/content-discovery.js";
+import { dashboardRoutes } from "./routes/dashboard.js";
+import { deletionRoutes } from "./routes/deletion.js";
+import { entitiesRoutes } from "./routes/entities.js";
+import { exportRoutes } from "./routes/export.js";
+import { discoveryRoutes } from "./routes/discovery.js";
+import { employeesRoutes } from "./routes/employees.js";
+import { entityRelationshipRoutes } from "./routes/entity-relationships.js";
+import { featureFlagsRoutes } from "./routes/feature-flags.js";
+import { feedsRoutes } from "./routes/feeds.js";
+import { friendsRoutes } from "./routes/friends.js";
+import { healthRoutes } from "./routes/health.js";
+import { internaldocsRoutes } from "./routes/internal-docs.js";
+import { invitationsRoutes } from "./routes/invitations.js";
+import { linkReportRoutes } from "./routes/link-reports.js";
+import { mapRoutes } from "./routes/map.js";
+import { mediaRoutes } from "./routes/media.js";
+import { mediaMetadataVisibilityRoutes } from "./routes/media-metadata-visibility.js";
+import { mfaRoutes } from "./routes/mfa.js";
+import { notificationsRoutes } from "./routes/notifications.js";
+import { oauthRoutes } from "./routes/oauth.js";
+import { orphanedMediaRoutes } from "./routes/orphaned-media.js";
+import { orphanedMediaHealthRoutes } from "./routes/orphaned-media-health.js";
+import { outRoutes } from "./routes/out.js";
+import { parentalControlRoutes } from "./routes/parental-controls.js";
+import { postsRoutes } from "./routes/posts.js";
+import { privacyRoutes } from "./routes/privacy.js";
+import { productTaxonomyRoutes } from "./routes/products.js";
+import { relationshipRoutes } from "./routes/relationships.js";
+import { sentimentsRoutes } from "./routes/sentiments.js";
+import { setupStatusRoutes } from "./routes/setup-status.js";
+import { taxonomyRoutes } from "./routes/taxonomy.js";
+import { taxonomyAnalyticsRoutes } from "./routes/taxonomy-analytics.js";
+import { tenantAuditRoutes } from "./routes/tenant-audit.js";
+import { tenantComplianceRoutes } from "./routes/tenant-compliance.js";
+import { tenantDomainRoutes } from "./routes/tenant-domains.js";
+import { tenantIdpRoutes } from "./routes/tenant-idp.js";
+import { tenantMemberRoutes } from "./routes/tenant-members.js";
+import { tenantRoleMappingRoutes } from "./routes/tenant-role-mappings.js";
+import { tenantRoutes } from "./routes/tenants.js";
+import { uploadSessionRoutes } from "./routes/upload-sessions.js";
+import { userRoutes } from "./routes/user.js";
+// The curated, `publicSpec`-flagged route aggregate (routes/index.ts applies
+// `markPublicSpec` to the federation surface). Used only as the OpenAPI
+// generator's data source — NOT for routing (Hono mounts PORTED_ROUTE_SETS).
+import { routes as curatedRouteRegistry } from "./routes/index.js";
+import { SecurityHeaders } from "./security-headers.js";
+/** Build a legacy `MiddlewareContext` from a Hono `Context`. */
+function legacyContext(c) {
+    const url = new URL(c.req.url);
+    return {
+        request: c.req.raw,
+        env: c.env.trellisEnv,
+        requestContext: c.env.requestContext,
+        url,
+        pathname: url.pathname,
+        method: c.req.method,
+    };
+}
+/**
+ * Adapt a legacy `Route.handler` to a Hono handler. The body is unchanged:
+ * it still receives `(request, env, { url, pathname, params, requestContext })`.
+ */
+function toHono(handler) {
+    return (c) => {
+        const url = new URL(c.req.url);
+        return handler(c.req.raw, c.env.trellisEnv, {
+            url,
+            pathname: url.pathname,
+            params: c.req.param(),
+            requestContext: c.env.requestContext,
+        });
+    };
+}
+/**
+ * Adapt a legacy `Middleware` (`(ctx, next) => Promise<Response>`) to a Hono
+ * middleware, reusing the legacy implementation verbatim. The legacy `next()`
+ * returns the downstream `Response`; we bridge it to Hono's `next()` (which
+ * sets `c.res`) and hand the legacy middleware a mutable copy so in-place
+ * header mutation (e.g. CORS) is safe against an immutable `c.res`.
+ */
+function toHonoMiddleware(mw) {
+    return async (c, next) => {
+        const ctx = legacyContext(c);
+        const legacyNext = async () => {
+            await next();
+            const r = c.res;
+            return new Response(r.body, {
+                status: r.status,
+                statusText: r.statusText,
+                headers: r.headers,
+            });
+        };
+        c.res = await mw(ctx, legacyNext);
+    };
+}
+/**
+ * Hono middleware applying `SecurityHeaders` to the response, reading env per
+ * request. Mirrors the legacy `securityHeadersMiddleware(env)`.
+ */
+function honoSecurityHeaders() {
+    return async (c, next) => {
+        await next();
+        c.res = new SecurityHeaders(c.env.trellisEnv).addSecurityHeaders(c.res);
+    };
+}
+function normalizeMethods(method) {
+    if (method === undefined || method === "*")
+        return ["ALL"];
+    return Array.isArray(method) ? method : [method];
+}
+/**
+ * Translate a legacy anchored RegExp route path to an equivalent Hono path
+ * string. Handles the common single-segment capture `([^/]+)` → `:pN`.
+ *
+ * Returns `null` for anything it cannot translate *safely* (unanchored, or
+ * containing regex metacharacters beyond the `([^/]+)` captures) — the caller
+ * then defers that route rather than risk a mis-translation. Handlers that
+ * re-parse `pathname` (the trellis regex routes all do, via
+ * `pathname.match(SOME_RE)`) keep working unchanged: toHono passes the real
+ * `url.pathname`, so the param NAME here is irrelevant to them.
+ */
+export function regexToHonoPath(re) {
+    let src = re.source;
+    if (!src.startsWith("^") || !src.endsWith("$"))
+        return null;
+    src = src.slice(1, -1).replace(/\\\//g, "/");
+    // Protect escaped literals (e.g. `\.json`) so the metachar guard below
+    // doesn't reject them, then restore after. The sentinel delimiter is a
+    // Unicode private-use code point (U+E000): it can never appear in a real
+    // URL path, so the round-trip is collision-proof \u2014 and unlike a NUL
+    // delimiter it keeps this source valid UTF-8 text (a NUL makes grep/diff
+    // treat the whole file as binary). Written as an escape, so the file
+    // itself stays plain ASCII.
+    src = src.replace(/\\\./g, "\uE000DOT\uE000").replace(/\\-/g, "\uE000DASH\uE000");
+    // Replace each single-segment capture with a positional :pN param. Both
+    // `([^/]+)` and the (sloppier) greedy `(.+)` are treated as one segment:
+    // real IDs never contain slashes, and during coexistence a hypothetical
+    // multi-segment path simply falls through to the legacy router (which still
+    // holds the original regex). The handler re-parses `pathname` with its own
+    // regex, so the param name is irrelevant.
+    let i = 0;
+    src = src.replace(/\(\[\^\/\]\+\)|\(\.\+\)/g, () => `:p${i++}`);
+    // Anything still containing regex metacharacters (incl. a bare `.` meaning
+    // any-char) is not a plain path — defer it rather than mis-translate.
+    if (/[\\^$.*+?()[\]{}|]/.test(src))
+        return null;
+    src = src.replace(/\uE000DOT\uE000/g, ".").replace(/\uE000DASH\uE000/g, "-");
+    return src;
+}
+/**
+ * Mount a legacy `Route` onto the Hono app, composing its middleware exactly
+ * as `router.ts` does: `[...route.middleware, securityHeaders]` with the
+ * handler last. Security headers are innermost, so a CORS OPTIONS
+ * short-circuit returns 204 WITHOUT them — identical to the legacy router.
+ *
+ * Only string paths are supported here (H0/H1 routes). RegExp / wildcard
+ * patterns are translated in later batches; mounting one throws so it can't
+ * be silently mis-ported.
+ */
+function mount(app, route) {
+    const honoPath = typeof route.path === "string" ? route.path : regexToHonoPath(route.path);
+    if (honoPath === null) {
+        throw new Error(`mount: cannot translate route path to Hono (${String(route.path)})`);
+    }
+    const middlewares = (route.middleware ?? []).map(toHonoMiddleware);
+    middlewares.push(honoSecurityHeaders());
+    // The handler is the terminal of the chain; structurally it satisfies
+    // MiddlewareHandler (it ignores `next` and returns a Response).
+    const chain = [
+        ...middlewares,
+        toHono(route.handler),
+    ];
+    // Hono's variadic `.on`/`.all` generics don't accept a spread of a typed
+    // MiddlewareHandler[]; cast to a simple variadic signature at this boundary
+    // (the element types are already checked by toHono/toHonoMiddleware).
+    const on = app.on;
+    const all = app.all;
+    for (const method of normalizeMethods(route.method)) {
+        if (method === "ALL") {
+            all(honoPath, ...chain);
+        }
+        else {
+            on(method, honoPath, ...chain);
+        }
+    }
+}
+/** Re-exported so tests can exercise the middleware adapter in isolation. */
+export { toHonoMiddleware };
+export { corsMiddleware };
+/**
+ * Route files fully ported to Hono. Porting a file = add its exported
+ * `Route[]` here (after translating any non-string paths). Each set's legacy
+ * registry entry can remain until H-final; Hono owns these at runtime.
+ *
+ * H0/H1/H2: `healthRoutes` (/health, /api/config, /api/csrf-token).
+ * H3/H4: exact-string route files (routing pattern already proven by
+ * health.ts; the only new surface is registration, asserted via `app.routes`
+ * in tests).
+ */
+/**
+ * Agent-surface routes (`/llms.txt`, `/openapi.json`, `/security.txt`) wired so
+ * `/openapi.json` generates from the curated, `publicSpec`-flagged registry
+ * rather than the empty static export. The getter is deferred (`() => …`) so the
+ * fully-initialised aggregate is read on the first request, not at module-eval
+ * time — which also sidesteps any import-order concern. The generator emits only
+ * `publicSpec: true` routes, so this publishes the federation/discovery surface
+ * (schemas stay minimal until the zod-openapi work).
+ */
+const wiredAgentSurfaceRoutes = buildAgentSurfaceRoutes(() => curatedRouteRegistry);
+const PORTED_ROUTE_SETS = [
+    healthRoutes,
+    // H3
+    connectionCodeRoutes,
+    deletionRoutes,
+    discoveryRoutes,
+    employeesRoutes,
+    featureFlagsRoutes,
+    mapRoutes,
+    mfaRoutes,
+    privacyRoutes,
+    userRoutes,
+    // H4
+    agentAuthorizeRoutes,
+    circleRoutes,
+    entityRelationshipRoutes,
+    friendsRoutes,
+    outRoutes,
+    relationshipRoutes,
+    taxonomyAnalyticsRoutes,
+    // H5 — activitypub federation surface (all :param string paths)
+    actorRoutes,
+    audienceRoutes,
+    collectionRoutes,
+    entityProfileRoutes,
+    apFriendsRoutes,
+    groupRoutes,
+    inboxRoutes,
+    messageRoutes,
+    outboxRoutes,
+    apPostRoutes,
+    webfingerRoutes,
+    // H6 — remaining string-path files (media/taxonomy/discovery/admin-exacts)
+    mediaRoutes,
+    mediaMetadataVisibilityRoutes,
+    uploadSessionRoutes,
+    taxonomyRoutes,
+    contentDiscoveryRoutes,
+    orphanedMediaRoutes,
+    orphanedMediaHealthRoutes,
+    adminCostRoutes,
+    wiredAgentSurfaceRoutes,
+    // H7 — first regex-path file; mount() auto-translates ([^/]+) → :pN.
+    // The revoke handler re-parses pathname via REVOKE_RE, so it is unchanged.
+    agentSessionsRoutes,
+    // H8 — regex-path files whose captures are all ([^/]+) (mount auto-
+    // translates). Deferred: dashboard/export/invitations (greedy (.+)) and
+    // tenant-compliance (escaped \. literal) — need wildcard / dot handling.
+    badgesRoutes,
+    commentsRoutes,
+    entitiesRoutes,
+    linkReportRoutes,
+    notificationsRoutes,
+    oauthRoutes,
+    parentalControlRoutes,
+    postsRoutes,
+    productTaxonomyRoutes,
+    sentimentsRoutes,
+    setupStatusRoutes,
+    tenantRoutes,
+    tenantAuditRoutes,
+    tenantDomainRoutes,
+    tenantIdpRoutes,
+    tenantMemberRoutes,
+    tenantRoleMappingRoutes,
+    // H9 — files unlocked by regexToHonoPath handling (.+) and \. literals.
+    dashboardRoutes,
+    exportRoutes,
+    invitationsRoutes,
+    tenantComplianceRoutes,
+    // H10 — wildcard files. Hono runs matching handlers in REGISTRATION ORDER
+    // (first to return a Response wins) — NOT by path specificity. So the
+    // specific authDiscoverRoutes (POST /api/auth/discover) MUST be registered
+    // BEFORE the auth wildcard to win. Legacy registered the wildcard first and
+    // handleAuthRoutes has no /discover handling, so legacy 404'd discover — a
+    // latent bug. Ordering discover first here serves it from the dedicated
+    // timing-safe handler and routes everything else /api/auth/* to the wildcard
+    // — the cleaner, intended behavior (nothing is live; safe to fix).
+    authDiscoverRoutes,
+    authRoutes,
+    // feeds/internal-docs are isolated wildcards; admin has no broad /api/admin/*
+    // catch-all (only the narrow /api/admin/super-admin/*).
+    feedsRoutes,
+    internaldocsRoutes,
+    adminRoutes,
+];
+/**
+ * Paths now owned by Hono — derived from the ported sets. Informational
+ * (tests / progress tracking); the runtime owner is decided by Hono matching
+ * first.
+ */
+export const HONO_PORTED_PATHS = PORTED_ROUTE_SETS.flatMap((set) => set.map((r) => r.path).filter((p) => typeof p === "string"));
+/**
+ * Build the Hono app. Stateless: env + per-request context arrive via
+ * `app.fetch(request, bindings)`, so a single instance is reused across
+ * requests.
+ */
+export function buildHonoApp() {
+    const app = new Hono();
+    // WS1 (multi-tenancy, doc/14): when tenant scoping is enabled, establish the
+    // ambient tenant for the entire downstream via `runWithTenantContext`. `run()`
+    // propagates the tenant through every `await` in the request — unlike setting
+    // it inside the per-handler `authMiddleware`, whose `enterWith` does not
+    // survive the `await` back to the handler. Gated on the scope mode, so there
+    // is zero verification cost on the default ("off") path.
+    if (resolveTenantScopeMode() !== "off") {
+        app.use("*", async (c, next) => {
+            const tid = await extractVerifiedTenantId(c.req.raw, c.env.trellisEnv);
+            if (!tid)
+                return next();
+            return runWithTenantContext(tenantId(tid), () => next());
+        });
+    }
+    // Mount every ported route file. `mount` reuses each legacy handler +
+    // middleware unchanged and composes security headers innermost.
+    for (const set of PORTED_ROUTE_SETS) {
+        for (const route of set)
+            mount(app, route);
+    }
+    // H-ext — extension routes (dynamic; extensions are registered before the
+    // server starts, mirroring the legacy registry in routes/index.ts). Raw
+    // app-wired routes plus core-wrapped routes. Empty in tests / when no
+    // extensions are registered.
+    const extensions = getExtensions();
+    for (const ext of extensions) {
+        for (const route of ext.routes)
+            mount(app, route);
+        for (const route of wrapExtensionRoutes(ext))
+            mount(app, route);
+    }
+    // Hono is the sole router (the legacy routeRequest fallback was removed in
+    // H-final). Unmatched → the real 404, matching the legacy 404 handler
+    // (security headers + { error: "Not found" }).
+    app.notFound((c) => new SecurityHeaders(c.env.trellisEnv).createSecureResponse(JSON.stringify({ error: "Not found" }), { status: 404, headers: { "content-type": "application/json" } }));
+    return app;
+}
+//# sourceMappingURL=app.js.map

package/dist/lib/app.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.js","sourceRoot":"","sources":["../../src/lib/app.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,IAAI,EAAwC,MAAM,MAAM,CAAC;AAClE,OAAO,EAAE,oBAAoB,EAAE,QAAQ,EAAE,MAAM,iCAAiC,CAAC;AAEjF,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAE3D,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,EAAE,cAAc,EAA2C,MAAM,iBAAiB,CAAC;AAE1F,OAAO,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAC5D,OAAO,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,qCAAqC,CAAC;AACvE,OAAO,EAAE,mBAAmB,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,EAAE,aAAa,IAAI,eAAe,EAAE,MAAM,iCAAiC,CAAC;AACnF,OAAO,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAC;AACjE,OAAO,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAC9D,OAAO,EAAE,UAAU,IAAI,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAC1E,OAAO,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AACpE,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AACvE,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAC5E,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,6BAA6B,EAAE,MAAM,uCAAuC,CAAC;AACtF,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AACzE,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AACvE,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAC3E,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEnD,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,6EAA6E;AAC7E,wEAAwE;AACxE,6EAA6E;AAC7E,OAAO,EAAE,MAAM,IAAI,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACnE,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAcxD,gEAAgE;AAChE,SAAS,aAAa,CAAC,CAAkB;IACvC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC/B,OAAO;QACL,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG;QAClB,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU;QACrB,cAAc,EAAE,CAAC,CAAC,GAAG,CAAC,cAAc;QACpC,GAAG;QACH,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM;KACrB,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,MAAM,CAAC,OAAyB;IACvC,OAAO,CAAC,CAAkB,EAAqB,EAAE;QAC/C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC/B,OAAO,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,EAAE;YAC1C,GAAG;YACH,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,EAA4B;YAC/C,cAAc,EAAE,CAAC,CAAC,GAAG,CAAC,cAAc;SACrC,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAS,gBAAgB,CAAC,EAAc;IACtC,OAAO,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACvB,MAAM,GAAG,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;QAC7B,MAAM,UAAU,GAAG,KAAK,IAAuB,EAAE;YAC/C,MAAM,IAAI,EAAE,CAAC;YACb,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC;YAChB,OAAO,IAAI,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE;gBAC1B,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,UAAU,EAAE,CAAC,CAAC,UAAU;gBACxB,OAAO,EAAE,CAAC,CAAC,OAAO;aACnB,CAAC,CAAC;QACL,CAAC,CAAC;QACF,CAAC,CAAC,GAAG,GAAG,MAAM,EAAE,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IACpC,CAAC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,mBAAmB;IAC1B,OAAO,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACvB,MAAM,IAAI,EAAE,CAAC;QACb,CAAC,CAAC,GAAG,GAAG,IAAI,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC1E,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAuB;IAC/C,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAC3D,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AACnD,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,eAAe,CAAC,EAAU;IACxC,IAAI,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC;IACpB,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5D,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAE7C,uEAAuE;IACvE,uEAAuE;IACvE,yEAAyE;IACzE,yEAAyE;IACzE,yEAAyE;IACzE,qEAAqE;IACrE,4BAA4B;IAC5B,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;IAElF,wEAAwE;IACxE,yEAAyE;IACzE,wEAAwE;IACxE,4EAA4E;IAC5E,2EAA2E;IAC3E,0CAA0C;IAC1C,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,0BAA0B,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;IAEhE,2EAA2E;IAC3E,sEAAsE;IACtE,IAAI,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAEhD,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC;IAC7E,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,KAAK,CAAC,GAAiB,EAAE,KAAY;IAC5C,MAAM,QAAQ,GACZ,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5E,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CACb,+CAA+C,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CACrE,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAgC,CAAC,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,GAAG,CAC3E,gBAAgB,CACjB,CAAC;IACF,WAAW,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC,CAAC;IACxC,sEAAsE;IACtE,gEAAgE;IAChE,MAAM,KAAK,GAAgC;QACzC,GAAG,WAAW;QACd,MAAM,CAAC,KAAK,CAAC,OAAO,CAAyC;KAC9D,CAAC;IAEF,yEAAyE;IACzE,4EAA4E;IAC5E,sEAAsE;IACtE,MAAM,EAAE,GAAG,GAAG,CAAC,EAIN,CAAC;IACV,MAAM,GAAG,GAAG,GAAG,CAAC,GAGP,CAAC;IAEV,KAAK,MAAM,MAAM,IAAI,gBAAgB,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QACpD,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;YACrB,GAAG,CAAC,QAAQ,EAAE,GAAG,KAAK,CAAC,CAAC;QAC1B,CAAC;aAAM,CAAC;YACN,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;AACH,CAAC;AAED,6EAA6E;AAC7E,OAAO,EAAE,gBAAgB,EAAE,CAAC;AAC5B,OAAO,EAAE,cAAc,EAAE,CAAC;AAE1B;;;;;;;;;GASG;AACH;;;;;;;;GAQG;AACH,MAAM,uBAAuB,GAAY,uBAAuB,CAC9D,GAAG,EAAE,CAAC,oBAAoB,CAC3B,CAAC;AAEF,MAAM,iBAAiB,GAAwC;IAC7D,YAAY;IACZ,KAAK;IACL,oBAAoB;IACpB,cAAc;IACd,eAAe;IACf,eAAe;IACf,kBAAkB;IAClB,SAAS;IACT,SAAS;IACT,aAAa;IACb,UAAU;IACV,KAAK;IACL,oBAAoB;IACpB,YAAY;IACZ,wBAAwB;IACxB,aAAa;IACb,SAAS;IACT,kBAAkB;IAClB,uBAAuB;IACvB,gEAAgE;IAChE,WAAW;IACX,cAAc;IACd,gBAAgB;IAChB,mBAAmB;IACnB,eAAe;IACf,WAAW;IACX,WAAW;IACX,aAAa;IACb,YAAY;IACZ,YAAY;IACZ,eAAe;IACf,2EAA2E;IAC3E,WAAW;IACX,6BAA6B;IAC7B,mBAAmB;IACnB,cAAc;IACd,sBAAsB;IACtB,mBAAmB;IACnB,yBAAyB;IACzB,eAAe;IACf,uBAAuB;IACvB,qEAAqE;IACrE,2EAA2E;IAC3E,mBAAmB;IACnB,oEAAoE;IACpE,wEAAwE;IACxE,yEAAyE;IACzE,YAAY;IACZ,cAAc;IACd,cAAc;IACd,gBAAgB;IAChB,mBAAmB;IACnB,WAAW;IACX,qBAAqB;IACrB,WAAW;IACX,qBAAqB;IACrB,gBAAgB;IAChB,iBAAiB;IACjB,YAAY;IACZ,iBAAiB;IACjB,kBAAkB;IAClB,eAAe;IACf,kBAAkB;IAClB,uBAAuB;IACvB,wEAAwE;IACxE,eAAe;IACf,YAAY;IACZ,iBAAiB;IACjB,sBAAsB;IACtB,0EAA0E;IAC1E,sEAAsE;IACtE,2EAA2E;IAC3E,4EAA4E;IAC5E,2EAA2E;IAC3E,wEAAwE;IACxE,6EAA6E;IAC7E,mEAAmE;IACnE,kBAAkB;IAClB,UAAU;IACV,8EAA8E;IAC9E,wDAAwD;IACxD,WAAW;IACX,kBAAkB;IAClB,WAAW;CACZ,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAA0B,iBAAiB,CAAC,OAAO,CAC/E,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAClF,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,YAAY;IAC1B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAU,CAAC;IAE/B,6EAA6E;IAC7E,+EAA+E;IAC/E,8EAA8E;IAC9E,yEAAyE;IACzE,6EAA6E;IAC7E,yDAAyD;IACzD,IAAI,sBAAsB,EAAE,KAAK,KAAK,EAAE,CAAC;QACvC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;YAC7B,MAAM,GAAG,GAAG,MAAM,uBAAuB,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YACvE,IAAI,CAAC,GAAG;gBAAE,OAAO,IAAI,EAAE,CAAC;YACxB,OAAO,oBAAoB,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;QAC3D,CAAC,CAAC,CAAC;IACL,CAAC;IAED,sEAAsE;IACtE,gEAAgE;IAChE,KAAK,MAAM,GAAG,IAAI,iBAAiB,EAAE,CAAC;QACpC,KAAK,MAAM,KAAK,IAAI,GAAG;YAAE,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC7C,CAAC;IAED,0EAA0E;IAC1E,wEAAwE;IACxE,sEAAsE;IACtE,6BAA6B;IAC7B,MAAM,UAAU,GAAG,aAAa,EAAE,CAAC;IACnC,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,MAAiB;YAAE,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC7D,KAAK,MAAM,KAAK,IAAI,mBAAmB,CAAC,GAAG,CAAC;YAAE,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAClE,CAAC;IAED,2EAA2E;IAC3E,sEAAsE;IACtE,+CAA+C;IAC/C,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,CACjB,IAAI,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,oBAAoB,CACxD,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,EACtC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CACF,CAAC;IAEF,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/lib/audit/csv-export.js

@@ -1,17 +1,10 @@
-"use strict";
 /**
  * CSV Export for Audit Events (RFC 4180)
  *
  * Fields that contain commas, double-quotes, or newlines are enclosed in
  * double-quotes. Inner double-quotes are doubled per RFC 4180 §2.7.
  */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.CSV_HEADERS = void 0;
-exports.escapeCsvField = escapeCsvField;
-exports.renderCsvRow = renderCsvRow;
-exports.renderCsvHeader = renderCsvHeader;
-exports.renderCsv = renderCsv;
-exports.CSV_HEADERS = [
+export const CSV_HEADERS = [
     "eventId",
     "type",
     "tenantId",
@@ -21,22 +14,22 @@ exports.CSV_HEADERS = [
     "payload",
 ];
 /** Escape a single CSV field per RFC 4180. */
-function escapeCsvField(value) {
+export function escapeCsvField(value) {
     if (value.includes(",") || value.includes('"') || value.includes("\n") || value.includes("\r")) {
         return `"${value.replace(/"/g, '""')}"`;
     }
     return value;
 }
 /** Render one CSV row from an array of string values. */
-function renderCsvRow(fields) {
+export function renderCsvRow(fields) {
     return fields.map(escapeCsvField).join(",");
 }
 /** Render the header row. */
-function renderCsvHeader() {
-    return renderCsvRow([...exports.CSV_HEADERS]);
+export function renderCsvHeader() {
+    return renderCsvRow([...CSV_HEADERS]);
 }
 /** Render a complete CSV document (header + rows) from an array of row objects. */
-function renderCsv(rows) {
+export function renderCsv(rows) {
     const lines = [renderCsvHeader()];
     for (const row of rows) {
         lines.push(renderCsvRow([