@ixo/decision-oracle 0.0.0-stage → 0.2.1

package/dist/routes/v1/api/sources.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sources.js","sourceRoot":"","sources":["../../../../src/routes/v1/api/sources.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AACtF,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,mBAAmB,EACnB,SAAS,EACT,4BAA4B,EAC5B,QAAQ,EACR,cAAc,GACf,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAkB,UAAU,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAC5E,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,WAAW,EACX,WAAW,GACZ,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,KAAK,EAAE,MAAM,2BAA2B,CAAC;AAClD,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC1E,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAC;AAC9F,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAClD,OAAO,EAAE,KAAK,EAAE,MAAM,+BAA+B,CAAC;AACtD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAE,OAAO,EAAE,MAAM,iCAAiC,CAAC;AAC1D,OAAO,EAAE,QAAQ,EAAE,MAAM,gCAAgC,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,qCAAqC,CAAC;AAEjE,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAEjD,MAAM,CAAC,MAAM,OAAO,GAAG,IAAI,IAAI,EAAU,CAAC;AAE1C,kGAAkG;AAClG,MAAM,mBAAmB,GAAG,UAAU,CAAC;AAEvC,+EAA+E;AAC/E,SAAS,UAAU,CAAC,CAAa;IAC/B,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC/B,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;QAC3B,MAAM,IAAI,QAAQ,CAChB,cAAc,EACd,mEAAmE,CACpE,CAAC;IACJ,OAAO,MAAM,CAAC,GAAG,CAAC;AACpB,CAAC;AAED,0FAA0F;AAC1F,SAAS,aAAa,CAAC,CAAa;IAClC,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,sBAAsB,CAAC;IACnD,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IAC/D,OAAO,GAAG,CAAC;AACb,CAAC;AAED,oGAAoG;AAEpG,OAAO,CAAC,IAAI,CACV,UAAU,EACV,MAAM,CAAC,EAAE,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,EACpE,UAAU,CAAC,EAAE,YAAY,EAAE,CAAC,eAAe,CAAC,EAAE,CAAC,EAC/C,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC,EACrC,KAAK,EAAE,CAAC,EAAE,EAAE;IACV,MAAM,GAAG,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;IAC1B,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC9D,0FAA0F;IAC1F,6FAA6F;IAC7F,yBAAyB;IACzB,IAAI,CAAC,CAAC,MAAM,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,QAAQ,CAChB,WAAW,EACX,8GAA8G,CAC/G,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACnC,MAAM,aAAa,GAAG,gBAAgB,EAAE,CAAC;IACzC,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;IAC5B,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,EAAE;SACtB,MAAM,CAAC,UAAU,CAAC;SAClB,MAAM,CAAC;QACN,QAAQ;QACR,IAAI;QACJ,QAAQ,EAAE,GAAG;QACb,YAAY;QACZ,gBAAgB,EAAE,SAAS;QAC3B,uFAAuF;QACvF,wBAAwB;QACxB,MAAM,EAAE,cAAc;QACtB,2FAA2F;QAC3F,2FAA2F;QAC3F,2FAA2F;QAC3F,mFAAmF;QACnF,gBAAgB,EAAE,CAAC,GAAG,SAAS,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC;QAC5D,uBAAuB,EAAE,MAAM,oBAAoB,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC;QACpF,SAAS,EAAE,GAAG;QACd,SAAS,EAAE,GAAG;KACf,CAAC;SACD,SAAS,EAAE,CAAC;IACf,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACpE,8FAA8F;IAC9F,MAAM,KAAK,CAAC,CAAC,EAAE,gBAAgB,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,QAAQ,CAAC,CAAC;IAC1E,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,oBAAoB,EAAE,EAAE,GAAG,CAAC,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;IAC1F,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,aAAa,EAAE,EAAE,GAAG,CAAC,CAAC;AACpE,CAAC,CACF,CAAC;AAEF,oGAAoG;AAEpG,OAAO,CAAC,GAAG,CACT,UAAU,EACV,MAAM,CAAC,EAAE,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,EACrE,KAAK,EAAE,CAAC,EAAE,EAAE;IACV,MAAM,GAAG,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;IAC1B,8FAA8F;IAC9F,2EAA2E;IAC3E,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,SAAS,EAAE,CAAC;QACxC,MAAM,IAAI,QAAQ,CAChB,YAAY,EACZ,kIAAkI,CACnI,CAAC;IACJ,CAAC;IACD,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;IAC5B,6FAA6F;IAC7F,2FAA2F;IAC3F,0FAA0F;IAC1F,8FAA8F;IAC9F,MAAM,IAAI,GAAG,MAAM,EAAE;SAClB,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;SAClD,IAAI,CAAC,UAAU,CAAC;SAChB,SAAS,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC;SACnE,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,SAAS,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC;SACrE,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;IAChE,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,wFAAwF;IACxF,MAAM,OAAO,GAAG,IAAI,GAAG,EAA6B,CAAC;IACrD,MAAM,OAAO,GAAG,CAAC,MAAiB,EAAE,EAAE;QACpC,MAAM,GAAG,GAAG,MAAM,CAAC,gBAAgB,IAAI,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;QACxB,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACxB,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,EAAE,CAAC;IACjB,KAAK,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;QACpC,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;QAC5C,KAAK,CAAC,IAAI,CAAC;YACT,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC;YAC1B,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,kFAAkF;YAClF,UAAU,EAAE,MAAM,CAAC,GAAG,KAAK,IAAI,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU;YACxF,aAAa,EAAE,IAAI,CAAC,aAAa;SAClC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;AAC3B,CAAC,CACF,CAAC;AAEF,mGAAmG;AAEnG;;;;;;GAMG;AACH,OAAO,CAAC,GAAG,CACT,mCAAmC,EACnC,MAAM,CAAC,EAAE,EAAE,EAAE,yBAAyB,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,EAC/E,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC,EACrD,QAAQ,CAAC,OAAO,EAAE,4BAA4B,CAAC,EAC/C,KAAK,EAAE,CAAC,EAAE,EAAE;IACV,MAAM,GAAG,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;IAC1B,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC/C,IAAI,CAAC,CAAC,MAAM,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,QAAQ,CAChB,WAAW,EACX,2GAA2G,CAC5G,CAAC;IACJ,CAAC;IACD,0EAA0E;IAC1E,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACnD,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;SAClC,MAAM,EAAE;SACR,IAAI,CAAC,UAAU,CAAC;SAChB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,UAAU,CAAC,gBAAgB,EAAE,SAAS,CAAC,EAC1C,KAAK;QACH,CAAC,CAAC,EAAE,CACA,EAAE,CAAC,UAAU,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,EACzC,GAAG,CACD,EAAE,CAAC,UAAU,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,EACzC,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,CACvC,CACF;QACH,CAAC,CAAC,SAAS,CACd,CACF;SACA,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;SAC9D,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IACpB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAClC,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACzB,OAAO,CAAC,CAAC,IAAI,CAAC;QACZ,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC;QAC3B,UAAU,EAAE,IAAI,CAAC,MAAM,GAAG,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI;KAC7F,CAAC,CAAC;AACL,CAAC,CACF,CAAC;AAEF,iGAAiG;AACjG,SAAS,gBAAgB,CAAC,CAAa,EAAE,QAAgB;IACvD,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC3B,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACxC,MAAM,IAAI,QAAQ,CAChB,WAAW,EACX,0GAA0G,CAC3G,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;QACnD,MAAM,IAAI,QAAQ,CAChB,WAAW,EACX,6EAA6E,CAC9E,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;AACvB,CAAC;AAED,mGAAmG;AAEnG;;;;;;GAMG;AACH,OAAO,CAAC,IAAI,CACV,iCAAiC,EACjC,MAAM,CAAC,EAAE,EAAE,EAAE,mBAAmB,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,EAC1E,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC,EACnD,KAAK,EAAE,CAAC,EAAE,EAAE;IACV,MAAM,MAAM,GAAG,gBAAgB,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC;IAClE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;IAC5B,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC;QACpC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;QACvB,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;QACvB,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC;QACrB,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ;KACtB,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;IAC5B,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;IAC5B,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IAC3D,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,QAAQ,CAAC,WAAW,EAAE,4BAA4B,CAAC,CAAC;IAC7E,0FAA0F;IAC1F,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,QAAQ,CAAC,CAAC;IAC3C,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,2BAA2B,EAAE;QAChD,GAAG,MAAM;QACT,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,MAAM,EAAE,QAAQ,CAAC,MAAM;KACxB,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC1F,IAAI,QAAQ,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QACnC,MAAM,WAAW,CAAC,KAAK,EAAE,2BAA2B,EAAE,MAAM,CAAC,CAAC;IAChE,CAAC;SAAM,IAAI,IAAI,CAAC,KAAK,KAAK,UAAU,IAAI,QAAQ,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;QAC3E,yFAAyF;QACzF,8DAA8D;QAC9D,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,6BAA6B,EAAE,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAC5F,MAAM,WAAW,CAAC,KAAK,EAAE,2BAA2B,EAAE,MAAM,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,KAAK,CACT,CAAC,EACD,uBAAuB,EACvB,QAAQ,EACR,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,EAC9C,QAAQ,CACT,CAAC;IAEF,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC;QACjD,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC;QACxC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;KAC/D,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IACtD,OAAO,CAAC,CAAC,IAAI,CAAC;QACZ,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC;QAC5B,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;KAClD,CAAC,CAAC;AACL,CAAC,CACF,CAAC;AAEF,oGAAoG;AAEpG;;;GAGG;AACH,OAAO,CAAC,MAAM,CACZ,oBAAoB,EACpB,MAAM,CAAC,EAAE,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,EACrE,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC,EACnD,KAAK,EAAE,CAAC,EAAE,EAAE;IACV,MAAM,MAAM,GAAG,gBAAgB,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC;IAClE,MAAM,mBAAmB,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC7D,0FAA0F;IAC1F,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,oBAAoB,EAAE;QACzC,GAAG,CAAC,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;QAC9B,EAAE,EAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAqB,CAAC,GAAG;KAC7C,CAAC,CAAC;IACH,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AAC3B,CAAC,CACF,CAAC;AAEF,oGAAoG;AAEpG,OAAO,CAAC,KAAK,CACX,SAAS,EACT,MAAM,CAAC,EAAE,EAAE,EAAE,sBAAsB,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,iBAAiB,EAAE,CAAC,EACpF,UAAU,EAAE,EACZ,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC,EAChC,KAAK,EAAE,CAAC,EAAE,EAAE;IACV,MAAM,EAAE,QAAQ,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IACxC,MAAM,EAAE,iBAAiB,EAAE,GAAG,IAAI,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3D,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;IAC5B,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE;SACnB,MAAM,CAAC,UAAU,CAAC;SAClB,GAAG,CAAC,EAAE,GAAG,IAAI,EAAE,GAAG,CAAC,iBAAiB,KAAK,SAAS,IAAI,EAAE,UAAU,EAAE,iBAAiB,EAAE,CAAC,EAAE,CAAC;SAC3F,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;SACxC,SAAS,EAAE,CAAC;IACf,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,QAAQ,CAAC,WAAW,EAAE,UAAU,QAAQ,iBAAiB,CAAC,CAAC;IAC/E,wFAAwF;IACxF,MAAM,KAAK,CAAC,CAAC,EAAE,yBAAyB,EAAE,QAAQ,EAAE;QAClD,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;KACzC,CAAC,CAAC;IACH,OAAO,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;AACjC,CAAC,CACF,CAAC;AAEF,mGAAmG;AAEnG,OAAO,CAAC,IAAI,CACV,wBAAwB,EACxB,MAAM,CAAC,EAAE,EAAE,EAAE,2BAA2B,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,iBAAiB,EAAE,CAAC,EACzF,UAAU,CAAC,EAAE,YAAY,EAAE,CAAC,eAAe,CAAC,EAAE,CAAC,EAC/C,KAAK,EAAE,CAAC,EAAE,EAAE;IACV,MAAM,EAAE,QAAQ,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IACxC,MAAM,aAAa,GAAG,gBAAgB,EAAE,CAAC;IACzC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,iBAAiB,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,mBAAmB,CAAC,CAAC;IACxE,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;IAC5B,0FAA0F;IAC1F,+FAA+F;IAC/F,2FAA2F;IAC3F,2EAA2E;IAC3E,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE;SACnB,MAAM,CAAC,UAAU,CAAC;SAClB,GAAG,CAAC;QACH,uBAAuB,EAAE,MAAM,oBAAoB,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC;QACpF,+BAA+B,EAAE,GAAG,CAAA,GAAG,UAAU,CAAC,uBAAuB,EAAE;QAC3E,8BAA8B,EAAE,iBAAiB;KAClD,CAAC;SACD,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC,EACjC,EAAE,CACA,MAAM,CAAC,UAAU,CAAC,+BAA+B,CAAC,EAClD,MAAM,CAAC,UAAU,CAAC,8BAA8B,CAAC,EACjD,GAAG,CAAC,UAAU,CAAC,8BAA8B,EAAE,GAAG,CAAC,CACpD,CACF,CACF;SACA,SAAS,CAAC,EAAE,QAAQ,EAAE,UAAU,CAAC,QAAQ,EAAE,CAAC,CAAC;IAChD,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC;YACjD,OAAO,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;YAC3B,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC;SACzC,CAAC,CAAC;QACH,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,QAAQ,CAAC,WAAW,EAAE,UAAU,QAAQ,iBAAiB,CAAC,CAAC;QAClF,MAAM,IAAI,QAAQ,CAChB,UAAU,EACV,6GAA6G,EAC7G,EAAE,MAAM,EAAE,sBAAsB,EAAE,CACnC,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,CAAC,CAAC,EAAE,+BAA+B,EAAE,QAAQ,CAAC,CAAC;IAC1D,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,aAAa,EAAE,iBAAiB,EAAE,iBAAiB,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;AACvF,CAAC,CACF,CAAC"}

package/dist/routes/v1/api/uploads.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Uploads (go-prod spec §4.2, §6.2, §14): `PUT /v1/api/uploads` streams one file (≤ 25 MB) into the
+ * optional `API_UPLOADS` bucket at `uploads/<sourceId>/<ULID>`, and `GET /v1/api/files/:uploadId`
+ * serves it back — never a public object, only through a short-lived signed URL.
+ *
+ * Upload links (v1.7): `POST /v1/api/uploads/links` mints a one-use signed `PUT
+ * /v1/api/uploads/:uploadId` for a client that must never hold the API key — an AI app's sandboxed
+ * widget, which can neither keep a secret nor be trusted with one. The link is the whole credential:
+ * the route is public (no `access()`), like `/files`. The sourceId rides in the URL (`src`) under
+ * the signature, so an edited link never verifies; nothing is stored at mint time — a reservation in
+ * KV would be read back by the browser's PUT from another location seconds later, where eventual
+ * consistency can miss it. A used link is refused by the row's primary key (`409`). Both PUTs go
+ * through ONE `storeUpload`, so a link-made upload is an ordinary row, erased with its claim.
+ *
+ * - **The type is sniffed, never believed.** The stored `mediaType` is what the magic bytes say (a
+ *   small table, `application/octet-stream` otherwise); the request's `Content-Type` is ignored. The
+ *   pull hands the stored type to the facts lane (`api-lane/source.ts`), and the file route serves it
+ *   as an `attachment` with `nosniff` — the oracle never renders what it was sent.
+ * - **The cap is counted, not trusted.** `app.ts` skips the 1 MiB JSON cap for this one route, so
+ *   the route caps itself: a `Content-Length` over the limit is refused before a byte is read, and
+ *   the stream is counted anyway (the header can be absent, or lie). The bytes are buffered — the
+ *   CID needs all of them, and 25 MB sits well inside a Worker's memory.
+ * - **No `Idempotency-Key` store.** The store digests JSON bodies only, and a replayed answer
+ *   would carry a signed URL that had long expired. An upload is content-addressed instead: the same
+ *   bytes give the same `cid`, and a retried upload is one more unused row. Nothing deletes it on a
+ *   clock (owner, 2026-10-11): an upload goes with the claim that names it, with
+ *   `DELETE /uploads/:uploadId` while no claim does, or with its source.
+ * - **The row lands before the object**, so an erase or a source's deletion — which finds objects
+ *   only through rows — can never miss one; a put that fails leaves a row with no object, which
+ *   the R2 delete of either treats as already gone.
+ */
+import { Hono } from "hono";
+import type { ApiContext, ApiEnv } from "../../../middleware/api/types.js";
+export declare const uploads: Hono<ApiEnv, import("hono/types").BlankSchema, "/">;
+/** `https://<ORACLE_HOSTNAME>/v1/api/files/<uploadId>?exp=<now + 10 min>&sig=<hex>`. */
+export declare function signedFileUrl(c: ApiContext, uploadId: string): Promise<string>;
+//# sourceMappingURL=uploads.d.ts.map

package/dist/routes/v1/api/uploads.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"uploads.d.ts","sourceRoot":"","sources":["../../../../src/routes/v1/api/uploads.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAGH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAW5B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,+BAA+B,CAAC;AAExE,eAAO,MAAM,OAAO,qDAAqB,CAAC;AAkT1C,wFAAwF;AACxF,wBAAsB,aAAa,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAIpF"}

package/dist/routes/v1/api/uploads.js

@@ -0,0 +1,414 @@
+/**
+ * Uploads (go-prod spec §4.2, §6.2, §14): `PUT /v1/api/uploads` streams one file (≤ 25 MB) into the
+ * optional `API_UPLOADS` bucket at `uploads/<sourceId>/<ULID>`, and `GET /v1/api/files/:uploadId`
+ * serves it back — never a public object, only through a short-lived signed URL.
+ *
+ * Upload links (v1.7): `POST /v1/api/uploads/links` mints a one-use signed `PUT
+ * /v1/api/uploads/:uploadId` for a client that must never hold the API key — an AI app's sandboxed
+ * widget, which can neither keep a secret nor be trusted with one. The link is the whole credential:
+ * the route is public (no `access()`), like `/files`. The sourceId rides in the URL (`src`) under
+ * the signature, so an edited link never verifies; nothing is stored at mint time — a reservation in
+ * KV would be read back by the browser's PUT from another location seconds later, where eventual
+ * consistency can miss it. A used link is refused by the row's primary key (`409`). Both PUTs go
+ * through ONE `storeUpload`, so a link-made upload is an ordinary row, erased with its claim.
+ *
+ * - **The type is sniffed, never believed.** The stored `mediaType` is what the magic bytes say (a
+ *   small table, `application/octet-stream` otherwise); the request's `Content-Type` is ignored. The
+ *   pull hands the stored type to the facts lane (`api-lane/source.ts`), and the file route serves it
+ *   as an `attachment` with `nosniff` — the oracle never renders what it was sent.
+ * - **The cap is counted, not trusted.** `app.ts` skips the 1 MiB JSON cap for this one route, so
+ *   the route caps itself: a `Content-Length` over the limit is refused before a byte is read, and
+ *   the stream is counted anyway (the header can be absent, or lie). The bytes are buffered — the
+ *   CID needs all of them, and 25 MB sits well inside a Worker's memory.
+ * - **No `Idempotency-Key` store.** The store digests JSON bodies only, and a replayed answer
+ *   would carry a signed URL that had long expired. An upload is content-addressed instead: the same
+ *   bytes give the same `cid`, and a retried upload is one more unused row. Nothing deletes it on a
+ *   clock (owner, 2026-10-11): an upload goes with the claim that names it, with
+ *   `DELETE /uploads/:uploadId` while no claim does, or with its source.
+ * - **The row lands before the object**, so an erase or a source's deletion — which finds objects
+ *   only through rows — can never miss one; a put that fails leaves a row with no object, which
+ *   the R2 delete of either treats as already gone.
+ */
+import { and, eq, isNull } from "drizzle-orm";
+import { Hono } from "hono";
+import { MAX_UPLOAD_BYTES, UploadId } from "../../../contracts/index.js";
+import { apiSources, apiUploads } from "../../../db/schema.js";
+import { sourceLogId } from "../../../lib/api-lane/company.js";
+import { newId, UPLOAD_KEY_PREFIX } from "../../../lib/api-lane/ids.js";
+import { AppError } from "../../../lib/errors.js";
+import { cidForBytes } from "../../../lib/hash.js";
+import { audit } from "../../../middleware/api/audit.js";
+import { access, sourceOf } from "../../../middleware/api/auth.js";
+import { ApiError, assertLinked } from "../../../middleware/api/errors.js";
+import { idempotent } from "../../../middleware/api/idempotency.js";
+export const uploads = new Hono();
+/** How long a signed URL `url` the oracle mints lives; the file route refuses any further out. */
+const URL_TTL_SEC = 600;
+const MAX_URL_TTL_SEC = 900;
+/** An upload link lives as long as a file URL. */
+const LINK_TTL_SEC = 600;
+/** Links one source may mint per 10-minute window — each is a 25 MB door. */
+const LINKS_PER_WINDOW = 100;
+const LINK_WINDOW_SEC = 600;
+uploads.put("/uploads", access({ op: "uploadFile", scope: "claims:write", capability: "claims/submit" }), async (c) => c.json(await storeUpload(c, sourceOf(c).source), 201));
+uploads.post("/uploads/links", access({ op: "createUploadLink", scope: "claims:write", capability: "claims/submit" }), async (c) => {
+    const { source } = sourceOf(c);
+    bucketOf(c);
+    const kv = c.env.CACHE_KV;
+    const nowSec = Math.floor(Date.now() / 1000);
+    // Approximate by design: KV has no atomic increment, so concurrent mints in one window can
+    // each read the same count and overshoot by a few. It bounds a runaway client, not a quota.
+    const window = Math.floor(nowSec / LINK_WINDOW_SEC);
+    const counter = `upload-links:${source.sourceId}:${window}`;
+    // Fail open: one hot key takes ~1 write/s, so a burst can make KV throw — a bound, not a gate.
+    const minted = Number((await kv.get(counter).catch(() => null)) ?? 0);
+    if (minted >= LINKS_PER_WINDOW) {
+        c.header("Retry-After", String((window + 1) * LINK_WINDOW_SEC - nowSec));
+        throw new ApiError("RATE_LIMITED", `This source has created ${LINKS_PER_WINDOW} upload links in the last 10 minutes. Wait and retry; the Retry-After header says how many seconds.`);
+    }
+    await kv
+        .put(counter, String(minted + 1), { expirationTtl: 2 * LINK_WINDOW_SEC })
+        .catch(() => undefined);
+    const uploadId = newId("upl");
+    const exp = nowSec + LINK_TTL_SEC;
+    const src = encodeURIComponent(source.sourceId);
+    const sig = await sign(c, LINK_KEY, linkMessage(uploadId, source.sourceId, exp));
+    const body = {
+        uploadId,
+        uploadUrl: `https://${c.get("config").ORACLE_HOSTNAME}/v1/api/uploads/${uploadId}?src=${src}&exp=${exp}&sig=${sig}`,
+        expiresAt: new Date(exp * 1000).toISOString(),
+    };
+    return c.json(body, 201);
+});
+/**
+ * Public: the link's signature IS the authorisation, as on `/files` — but a write, so every refusal
+ * before the store is `403` and happens before a byte of the body is read: a stale `exp` or a
+ * malformed id, then the signature over `uploadId|src|exp` (a link minted for another source, or
+ * edited, never verifies). The per-IP limiter in `app.ts` still runs in front of it.
+ */
+uploads.put("/uploads/:uploadId", async (c) => {
+    const uploadId = c.req.param("uploadId");
+    const exp = Number(c.req.query("exp"));
+    const nowSec = Math.floor(Date.now() / 1000);
+    const refused = () => new ApiError("FORBIDDEN", "This upload link has expired, was already used, or is not valid. Ask for a new one (POST /v1/api/uploads/links).");
+    const fresh = Number.isSafeInteger(exp) && exp > nowSec && exp <= nowSec + LINK_TTL_SEC;
+    if (!fresh || !UploadId.safeParse(uploadId).success)
+        throw refused();
+    const sourceId = c.req.query("src") ?? "";
+    if (!sourceId)
+        throw refused();
+    const sig = c.req.query("sig") ?? "";
+    if (!(await verify(c, LINK_KEY, linkMessage(uploadId, sourceId, exp), sig)))
+        throw refused();
+    // The source as it is NOW: a link outlives neither its source nor a pause (§5).
+    const db = await c.var.db();
+    const source = await db.query.apiSources.findFirst({
+        where: eq(apiSources.sourceId, sourceId),
+    });
+    if (!source)
+        throw new ApiError("NOT_FOUND", "This upload link's source no longer exists.");
+    // This public route has no caller, so no caller guard: D10 is checked here. A link was minted
+    // for a linked source, but the source can have gone `disputed` since.
+    assertLinked(source);
+    if (source.status === "paused") {
+        throw new ApiError("SOURCE_PAUSED", "This source is paused, so it can't take uploads right now. Retry once it is resumed.", { reason: source.pausedReason ?? "operator" });
+    }
+    // A used link answers `409` before 25 MB is read; the insert's primary key still decides a race.
+    const used = await db.query.apiUploads.findFirst({
+        columns: { uploadId: true },
+        where: eq(apiUploads.uploadId, uploadId),
+    });
+    if (used)
+        throw linkUsed(uploadId);
+    return c.json(await storeUpload(c, source, uploadId), 201);
+});
+/** The source's own upload, with a fresh signed read; a link not yet used has no row, so `404`. */
+uploads.get("/uploads/:uploadId", access({ op: "getUpload", scope: "claims:read", capability: "claims/read" }), async (c) => {
+    const { source } = sourceOf(c);
+    const uploadId = c.req.param("uploadId");
+    const db = await c.var.db();
+    const row = UploadId.safeParse(uploadId).success
+        ? await db.query.apiUploads.findFirst({
+            columns: { cid: true, mediaType: true, size: true },
+            where: and(eq(apiUploads.uploadId, uploadId), eq(apiUploads.sourceId, source.sourceId)),
+        })
+        : undefined;
+    // Another source's upload is the same 404 as none (§14).
+    if (!row) {
+        throw new ApiError("NOT_FOUND", `Upload ${uploadId} was not found: it was never uploaded, its link was not used yet, or it was deleted.`);
+    }
+    const body = { uploadId, url: await signedFileUrl(c, uploadId), ...row };
+    return c.json(body);
+});
+/**
+ * Delete an upload no claim names (D12: nothing expires an upload, so an abandoned submit's file or
+ * a retry's copy needs a way out short of deleting the source). The same say as erasing a claim
+ * (`settings/manage`). A bound upload is `409`: the claim's erase deletes it. The object goes first,
+ * then the row — the row is how anything ever finds the object again. Idempotent: an unknown or
+ * already-deleted upload of this source (another source's included, §14) is `204` too.
+ */
+uploads.delete("/uploads/:uploadId", access({ op: "deleteUpload", scope: "claims:write", capability: "settings/manage" }), idempotent(), async (c) => {
+    const { source } = sourceOf(c);
+    const uploadId = c.req.param("uploadId");
+    if (!UploadId.safeParse(uploadId).success) {
+        throw new ApiError("VALIDATION", `${uploadId} is not an upload id (upl_…).`);
+    }
+    const db = await c.var.db();
+    const mine = and(eq(apiUploads.uploadId, uploadId), eq(apiUploads.sourceId, source.sourceId));
+    const row = await db.query.apiUploads.findFirst({
+        columns: { r2Key: true, claimId: true },
+        where: mine,
+    });
+    if (!row)
+        return c.body(null, 204);
+    if (row.claimId) {
+        throw new ApiError("CONFLICT", `Upload ${uploadId} belongs to claim ${row.claimId}: erase the claim (DELETE /v1/api/claims/${row.claimId}/body), which deletes its files.`);
+    }
+    await c.env.API_UPLOADS?.delete(row.r2Key);
+    const [deleted] = await db
+        .delete(apiUploads)
+        .where(and(mine, isNull(apiUploads.claimId)))
+        .returning({ uploadId: apiUploads.uploadId });
+    if (deleted) {
+        await audit(c, "upload.deleted", uploadId);
+        c.get("metrics").count("uploads.deleted", 1, { op: "api" });
+    }
+    return c.body(null, 204);
+});
+/**
+ * The one store path of both PUTs: the cap counted on the stream, the type sniffed, the cid
+ * computed, the row before the object. `reserved` is a link's id: inserted with
+ * `onConflictDoNothing`, so a second use of the link (a replay KV has not caught up with) inserts
+ * nothing and is refused `409` before anything is written to R2.
+ */
+async function storeUpload(c, source, reserved) {
+    const bucket = bucketOf(c);
+    const declared = Number(c.req.header("content-length"));
+    if (declared > MAX_UPLOAD_BYTES)
+        throw tooLarge();
+    const length = Number.isSafeInteger(declared) && declared >= 0 ? declared : null;
+    const bytes = await readCapped(c.req.raw.body, length);
+    const mediaType = sniff(bytes);
+    const cid = await cidForBytes(bytes);
+    const now = new Date();
+    const uploadId = reserved ?? newId("upl", now);
+    const r2Key = `${UPLOAD_KEY_PREFIX}${source.sourceId}/${uploadId.slice("upl_".length)}`;
+    const db = await c.var.db();
+    const inserted = await db
+        .insert(apiUploads)
+        .values({
+        uploadId,
+        sourceId: source.sourceId,
+        r2Key,
+        cid,
+        mediaType,
+        size: bytes.byteLength,
+        createdAt: now,
+    })
+        .onConflictDoNothing()
+        .returning({ uploadId: apiUploads.uploadId });
+    if (inserted.length === 0) {
+        throw linkUsed(uploadId);
+    }
+    try {
+        await bucket.put(r2Key, bytes, { httpMetadata: { contentType: mediaType } });
+    }
+    catch (e) {
+        // A link's id is known before the file exists: a row left without its object would read back as
+        // uploaded (`GET /uploads/:id` → cid) and the retry would be `409`. Take the row back so the
+        // same link can be retried — unless a claim already bound it in that window (never pull a
+        // bound row from under a claim) — and the object, in case the put landed and only the answer
+        // failed. A failed cleanup leaves an unused row, for `DELETE /uploads/:uploadId`.
+        await db
+            .delete(apiUploads)
+            .where(and(eq(apiUploads.uploadId, uploadId), isNull(apiUploads.claimId)))
+            .catch(() => undefined);
+        await bucket.delete(r2Key).catch(() => undefined);
+        throw e;
+    }
+    // Only a linked source reaches here (the caller guard, or the link PUT's own check, D10); hashed
+    // anyway if never active.
+    c.get("logger").info("api.upload.stored", {
+        ...(await sourceLogId(source)),
+        uploadId,
+        mediaType,
+        size: bytes.byteLength,
+        link: reserved !== undefined,
+    });
+    c.get("metrics").count("api.upload.bytes", bytes.byteLength, { op: mediaType });
+    return {
+        uploadId,
+        url: await signedFileUrl(c, uploadId),
+        cid,
+        mediaType,
+        size: bytes.byteLength,
+    };
+}
+const linkUsed = (uploadId) => new ApiError("CONFLICT", `Upload link ${uploadId} was already used. Read the file with GET /v1/api/uploads/${uploadId}, or ask for a new link.`);
+function bucketOf(c) {
+    const bucket = c.env.API_UPLOADS;
+    if (!bucket) {
+        throw new ApiError("UPLOADS_DISABLED", "This oracle doesn't accept file uploads. Attach files by URL instead.");
+    }
+    return bucket;
+}
+/**
+ * Public: the signature IS the authorisation (§6.2), so there is no `access()` and no source scope
+ * — whoever holds the URL may read the file until `exp`. A bad or expired signature is `401`
+ * (the OpenAPI's `FileUnauthorized`), checked before anything is read.
+ */
+uploads.get("/files/:uploadId", async (c) => {
+    const uploadId = c.req.param("uploadId");
+    const exp = Number(c.req.query("exp"));
+    const nowSec = Math.floor(Date.now() / 1000);
+    const fresh = Number.isSafeInteger(exp) && exp > nowSec && exp <= nowSec + MAX_URL_TTL_SEC;
+    const sig = c.req.query("sig") ?? "";
+    if (!fresh || !(await verify(c, FILE_KEY, fileMessage(uploadId, exp), sig))) {
+        throw new ApiError("UNAUTHORIZED", "This file link has expired or is not valid. Get a fresh link by reading the claim or upload again.");
+    }
+    const notFound = () => new ApiError("NOT_FOUND", `File ${uploadId} was not found; it may have been deleted after the retention period.`);
+    const bucket = c.env.API_UPLOADS;
+    if (!bucket || !UploadId.safeParse(uploadId).success)
+        throw notFound();
+    const db = await c.var.db();
+    const row = await db.query.apiUploads.findFirst({
+        columns: { r2Key: true, mediaType: true },
+        where: eq(apiUploads.uploadId, uploadId),
+    });
+    // Erased by retention ⇒ no row (and no object): the same 404 as an id that never existed.
+    const object = row ? await bucket.get(row.r2Key) : null;
+    if (!row || !object)
+        throw notFound();
+    return new Response(object.body, {
+        headers: {
+            "content-type": row.mediaType,
+            "content-length": String(object.size),
+            "content-disposition": "attachment",
+            "x-content-type-options": "nosniff",
+            "cache-control": `private, max-age=${exp - nowSec}`,
+        },
+    });
+});
+/** `https://<ORACLE_HOSTNAME>/v1/api/files/<uploadId>?exp=<now + 10 min>&sig=<hex>`. */
+export async function signedFileUrl(c, uploadId) {
+    const exp = Math.floor(Date.now() / 1000) + URL_TTL_SEC;
+    const sig = await sign(c, FILE_KEY, fileMessage(uploadId, exp));
+    return `https://${c.get("config").ORACLE_HOSTNAME}/v1/api/files/${uploadId}?exp=${exp}&sig=${sig}`;
+}
+/** One subkey per URL kind, so a read signature can never be replayed as a write one. */
+const FILE_KEY = "api-files-v1";
+const LINK_KEY = "api-upload-v1";
+const fileMessage = (uploadId, exp) => `${uploadId}.${exp}`;
+const linkMessage = (uploadId, sourceId, exp) => `${uploadId}|${sourceId}|${exp}`;
+async function sign(c, info, message) {
+    const mac = await crypto.subtle.sign("HMAC", await subkey(c, info), encoder.encode(message));
+    return [...new Uint8Array(mac)].map((b) => b.toString(16).padStart(2, "0")).join("");
+}
+/** `subtle.verify` compares in constant time; a sig that is not 64 hex chars never matches. */
+async function verify(c, info, message, sig) {
+    if (!/^[0-9a-f]{64}$/.test(sig))
+        return false;
+    const mac = Uint8Array.from(sig.match(/../g), (h) => Number.parseInt(h, 16));
+    return crypto.subtle.verify("HMAC", await subkey(c, info), mac, encoder.encode(message));
+}
+const encoder = new TextEncoder();
+/**
+ * HMAC(WEBHOOK_ENCRYPTION_KEY, info) — a subkey of the one secret the lane always has (config
+ * refuses `API_LANE` without it), so URL signing and webhook-secret encryption never share key
+ * material. Rotating that secret invalidates every outstanding URL; they live 10 minutes.
+ */
+async function subkey(c, info) {
+    const secret = c.get("config").WEBHOOK_ENCRYPTION_KEY;
+    if (!secret)
+        throw AppError.internal("WEBHOOK_ENCRYPTION_KEY is not set");
+    const hmac = { name: "HMAC", hash: "SHA-256" };
+    const master = await crypto.subtle.importKey("raw", encoder.encode(secret), hmac, false, [
+        "sign",
+    ]);
+    const sub = await crypto.subtle.sign("HMAC", master, encoder.encode(info));
+    return crypto.subtle.importKey("raw", sub, hmac, false, ["sign", "verify"]);
+}
+const tooLarge = () => new ApiError("PAYLOAD_TOO_LARGE", `This file is larger than the ${MAX_UPLOAD_BYTES / 1_000_000} MB upload limit. Upload a smaller file, or attach it by URL.`, {
+    limit: MAX_UPLOAD_BYTES,
+});
+/**
+ * The whole body, counted chunk by chunk: past the cap the stream is cancelled and refused. With a
+ * `Content-Length` (already checked against the cap) the bytes land in ONE buffer of that size —
+ * a 25 MB upload holds 25 MB, not the chunks plus a copy of them; without one, the chunks are
+ * joined once at the end.
+ */
+async function readCapped(body, declared) {
+    if (!body)
+        return new Uint8Array();
+    const reader = body.getReader();
+    const cap = declared ?? MAX_UPLOAD_BYTES;
+    const into = declared !== null ? new Uint8Array(declared) : null;
+    const chunks = [];
+    let size = 0;
+    for (;;) {
+        const { done, value } = await reader.read();
+        if (done)
+            break;
+        if (size + value.byteLength > cap) {
+            await reader.cancel();
+            throw tooLarge();
+        }
+        if (into)
+            into.set(value, size);
+        else
+            chunks.push(value);
+        size += value.byteLength;
+    }
+    if (into)
+        return into.subarray(0, size);
+    const bytes = new Uint8Array(size);
+    let offset = 0;
+    for (const chunk of chunks) {
+        bytes.set(chunk, offset);
+        offset += chunk.byteLength;
+    }
+    return bytes;
+}
+/** Magic bytes at an offset; `null` bytes in a signature are wildcards. */
+const MAGIC = [
+    { type: "image/jpeg", at: 0, sig: [0xff, 0xd8, 0xff] },
+    { type: "image/png", at: 0, sig: [0x89, 0x50, 0x4e, 0x47, 0x0d, 0x0a, 0x1a, 0x0a] },
+    { type: "image/gif", at: 0, sig: [0x47, 0x49, 0x46, 0x38, null, 0x61] }, // GIF87a / GIF89a
+    { type: "image/webp", at: 8, sig: [0x57, 0x45, 0x42, 0x50] }, // "WEBP", after "RIFF" + size
+    { type: "application/pdf", at: 0, sig: [0x25, 0x50, 0x44, 0x46, 0x2d] }, // "%PDF-"
+    { type: "application/zip", at: 0, sig: [0x50, 0x4b, 0x03, 0x04] },
+    { type: "application/zip", at: 0, sig: [0x50, 0x4b, 0x05, 0x06] }, // an empty archive
+];
+const RIFF = [0x52, 0x49, 0x46, 0x46];
+/**
+ * What the bytes are (§14): a known signature, else UTF-8 text (JSON when it parses) with no NUL,
+ * else `application/octet-stream`. SVG and HTML sniff as `text/plain` — deliberately: nothing here
+ * is ever given a type a browser would render as a page.
+ */
+function sniff(bytes) {
+    const at = (offset, sig) => bytes.length >= offset + sig.length &&
+        sig.every((b, i) => b === null || bytes[offset + i] === b);
+    for (const m of MAGIC) {
+        if (m.type === "image/webp" && !at(0, RIFF))
+            continue;
+        if (at(m.at, m.sig))
+            return m.type;
+    }
+    if (bytes.length === 0 || bytes.includes(0))
+        return "application/octet-stream";
+    let text;
+    try {
+        text = new TextDecoder("utf-8", { fatal: true, ignoreBOM: false }).decode(bytes);
+    }
+    catch {
+        return "application/octet-stream";
+    }
+    try {
+        JSON.parse(text);
+        return "application/json";
+    }
+    catch {
+        return "text/plain";
+    }
+}
+//# sourceMappingURL=uploads.js.map

package/dist/routes/v1/api/uploads.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"uploads.js","sourceRoot":"","sources":["../../../../src/routes/v1/api/uploads.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,gBAAgB,EAAe,QAAQ,EAAmB,MAAM,oBAAoB,CAAC;AAC9F,OAAO,EAAkB,UAAU,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAC5E,OAAO,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAC5D,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AACrE,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,KAAK,EAAE,MAAM,+BAA+B,CAAC;AACtD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,UAAU,EAAE,MAAM,qCAAqC,CAAC;AAGjE,MAAM,CAAC,MAAM,OAAO,GAAG,IAAI,IAAI,EAAU,CAAC;AAE1C,kGAAkG;AAClG,MAAM,WAAW,GAAG,GAAG,CAAC;AACxB,MAAM,eAAe,GAAG,GAAG,CAAC;AAC5B,kDAAkD;AAClD,MAAM,YAAY,GAAG,GAAG,CAAC;AACzB,6EAA6E;AAC7E,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAC7B,MAAM,eAAe,GAAG,GAAG,CAAC;AAE5B,OAAO,CAAC,GAAG,CACT,UAAU,EACV,MAAM,CAAC,EAAE,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,cAAc,EAAE,UAAU,EAAE,eAAe,EAAE,CAAC,EAChF,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,WAAW,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,CACnE,CAAC;AAEF,OAAO,CAAC,IAAI,CACV,gBAAgB,EAChB,MAAM,CAAC,EAAE,EAAE,EAAE,kBAAkB,EAAE,KAAK,EAAE,cAAc,EAAE,UAAU,EAAE,eAAe,EAAE,CAAC,EACtF,KAAK,EAAE,CAAC,EAAE,EAAE;IACV,MAAM,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC/B,QAAQ,CAAC,CAAC,CAAC,CAAC;IACZ,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;IAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC7C,2FAA2F;IAC3F,4FAA4F;IAC5F,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,eAAe,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG,gBAAgB,MAAM,CAAC,QAAQ,IAAI,MAAM,EAAE,CAAC;IAC5D,+FAA+F;IAC/F,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACtE,IAAI,MAAM,IAAI,gBAAgB,EAAE,CAAC;QAC/B,CAAC,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,eAAe,GAAG,MAAM,CAAC,CAAC,CAAC;QACzE,MAAM,IAAI,QAAQ,CAChB,cAAc,EACd,2BAA2B,gBAAgB,qGAAqG,CACjJ,CAAC;IACJ,CAAC;IACD,MAAM,EAAE;SACL,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,EAAE,aAAa,EAAE,CAAC,GAAG,eAAe,EAAE,CAAC;SACxE,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAE1B,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;IAC9B,MAAM,GAAG,GAAG,MAAM,GAAG,YAAY,CAAC;IAClC,MAAM,GAAG,GAAG,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAChD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,CAAC,EAAE,QAAQ,EAAE,WAAW,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC;IACjF,MAAM,IAAI,GAAe;QACvB,QAAQ;QACR,SAAS,EAAE,WAAW,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,eAAe,mBAAmB,QAAQ,QAAQ,GAAG,QAAQ,GAAG,QAAQ,GAAG,EAAE;QACnH,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE;KAC9C,CAAC;IACF,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AAC3B,CAAC,CACF,CAAC;AAEF;;;;;GAKG;AACH,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;IAC5C,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACzC,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC7C,MAAM,OAAO,GAAG,GAAG,EAAE,CACnB,IAAI,QAAQ,CACV,WAAW,EACX,kHAAkH,CACnH,CAAC;IACJ,MAAM,KAAK,GAAG,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,YAAY,CAAC;IACxF,IAAI,CAAC,KAAK,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,OAAO;QAAE,MAAM,OAAO,EAAE,CAAC;IACrE,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IAC1C,IAAI,CAAC,QAAQ;QAAE,MAAM,OAAO,EAAE,CAAC;IAC/B,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IACrC,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,CAAC,EAAE,QAAQ,EAAE,WAAW,CAAC,QAAQ,EAAE,QAAQ,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;QAAE,MAAM,OAAO,EAAE,CAAC;IAE7F,gFAAgF;IAChF,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;IAC5B,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC;QACjD,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC;KACzC,CAAC,CAAC;IACH,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,QAAQ,CAAC,WAAW,EAAE,6CAA6C,CAAC,CAAC;IAC5F,8FAA8F;IAC9F,sEAAsE;IACtE,YAAY,CAAC,MAAM,CAAC,CAAC;IACrB,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,MAAM,IAAI,QAAQ,CAChB,eAAe,EACf,sFAAsF,EACtF,EAAE,MAAM,EAAE,MAAM,CAAC,YAAY,IAAI,UAAU,EAAE,CAC9C,CAAC;IACJ,CAAC;IAED,iGAAiG;IACjG,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC;QAC/C,OAAO,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;QAC3B,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC;KACzC,CAAC,CAAC;IACH,IAAI,IAAI;QAAE,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAEnC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,WAAW,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,GAAG,CAAC,CAAC;AAC7D,CAAC,CAAC,CAAC;AAEH,mGAAmG;AACnG,OAAO,CAAC,GAAG,CACT,oBAAoB,EACpB,MAAM,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,aAAa,EAAE,CAAC,EAC5E,KAAK,EAAE,CAAC,EAAE,EAAE;IACV,MAAM,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC/B,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACzC,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;IAC5B,MAAM,GAAG,GAAG,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,OAAO;QAC9C,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC;YAClC,OAAO,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE;YACnD,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;SACxF,CAAC;QACJ,CAAC,CAAC,SAAS,CAAC;IACd,yDAAyD;IACzD,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,QAAQ,CAChB,WAAW,EACX,UAAU,QAAQ,sFAAsF,CACzG,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAW,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,GAAG,GAAG,EAAE,CAAC;IACjF,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACtB,CAAC,CACF,CAAC;AAEF;;;;;;GAMG;AACH,OAAO,CAAC,MAAM,CACZ,oBAAoB,EACpB,MAAM,CAAC,EAAE,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,cAAc,EAAE,UAAU,EAAE,iBAAiB,EAAE,CAAC,EACpF,UAAU,EAAE,EACZ,KAAK,EAAE,CAAC,EAAE,EAAE;IACV,MAAM,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC/B,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACzC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC;QAC1C,MAAM,IAAI,QAAQ,CAAC,YAAY,EAAE,GAAG,QAAQ,+BAA+B,CAAC,CAAC;IAC/E,CAAC;IACD,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;IAC5B,MAAM,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC9F,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC;QAC9C,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE;QACvC,KAAK,EAAE,IAAI;KACZ,CAAC,CAAC;IACH,IAAI,CAAC,GAAG;QAAE,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACnC,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;QAChB,MAAM,IAAI,QAAQ,CAChB,UAAU,EACV,UAAU,QAAQ,qBAAqB,GAAG,CAAC,OAAO,4CAA4C,GAAG,CAAC,OAAO,kCAAkC,CAC5I,CAAC;IACJ,CAAC;IACD,MAAM,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3C,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,EAAE;SACvB,MAAM,CAAC,UAAU,CAAC;SAClB,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;SAC5C,SAAS,CAAC,EAAE,QAAQ,EAAE,UAAU,CAAC,QAAQ,EAAE,CAAC,CAAC;IAChD,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,KAAK,CAAC,CAAC,EAAE,gBAAgB,EAAE,QAAQ,CAAC,CAAC;QAC3C,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,iBAAiB,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AAC3B,CAAC,CACF,CAAC;AAEF;;;;;GAKG;AACH,KAAK,UAAU,WAAW,CAAC,CAAa,EAAE,MAAiB,EAAE,QAAiB;IAC5E,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC;IACxD,IAAI,QAAQ,GAAG,gBAAgB;QAAE,MAAM,QAAQ,EAAE,CAAC;IAElD,MAAM,MAAM,GAAG,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;IACjF,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACvD,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;IAC/B,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,KAAK,CAAC,CAAC;IACrC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,QAAQ,GAAG,QAAQ,IAAI,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,GAAG,iBAAiB,GAAG,MAAM,CAAC,QAAQ,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;IAExF,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;IAC5B,MAAM,QAAQ,GAAG,MAAM,EAAE;SACtB,MAAM,CAAC,UAAU,CAAC;SAClB,MAAM,CAAC;QACN,QAAQ;QACR,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,KAAK;QACL,GAAG;QACH,SAAS;QACT,IAAI,EAAE,KAAK,CAAC,UAAU;QACtB,SAAS,EAAE,GAAG;KACf,CAAC;SACD,mBAAmB,EAAE;SACrB,SAAS,CAAC,EAAE,QAAQ,EAAE,UAAU,CAAC,QAAQ,EAAE,CAAC,CAAC;IAChD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC3B,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,YAAY,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;IAC/E,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,gGAAgG;QAChG,6FAA6F;QAC7F,0FAA0F;QAC1F,6FAA6F;QAC7F,kFAAkF;QAClF,MAAM,EAAE;aACL,MAAM,CAAC,UAAU,CAAC;aAClB,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;aACzE,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC1B,MAAM,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAClD,MAAM,CAAC,CAAC;IACV,CAAC;IAED,iGAAiG;IACjG,0BAA0B;IAC1B,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,mBAAmB,EAAE;QACxC,GAAG,CAAC,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;QAC9B,QAAQ;QACR,SAAS;QACT,IAAI,EAAE,KAAK,CAAC,UAAU;QACtB,IAAI,EAAE,QAAQ,KAAK,SAAS;KAC7B,CAAC,CAAC;IACH,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,kBAAkB,EAAE,KAAK,CAAC,UAAU,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;IAChF,OAAO;QACL,QAAQ;QACR,GAAG,EAAE,MAAM,aAAa,CAAC,CAAC,EAAE,QAAQ,CAAC;QACrC,GAAG;QACH,SAAS;QACT,IAAI,EAAE,KAAK,CAAC,UAAU;KACvB,CAAC;AACJ,CAAC;AAED,MAAM,QAAQ,GAAG,CAAC,QAAgB,EAAE,EAAE,CACpC,IAAI,QAAQ,CACV,UAAU,EACV,eAAe,QAAQ,6DAA6D,QAAQ,0BAA0B,CACvH,CAAC;AAEJ,SAAS,QAAQ,CAAC,CAAa;IAC7B,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC;IACjC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,QAAQ,CAChB,kBAAkB,EAClB,uEAAuE,CACxE,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;IAC1C,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACzC,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC7C,MAAM,KAAK,GAAG,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,eAAe,CAAC;IAC3F,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IACrC,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,CAAC,EAAE,QAAQ,EAAE,WAAW,CAAC,QAAQ,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;QAC5E,MAAM,IAAI,QAAQ,CAChB,cAAc,EACd,oGAAoG,CACrG,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,GAAG,EAAE,CACpB,IAAI,QAAQ,CACV,WAAW,EACX,QAAQ,QAAQ,sEAAsE,CACvF,CAAC;IACJ,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC;IACjC,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,OAAO;QAAE,MAAM,QAAQ,EAAE,CAAC;IACvE,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;IAC5B,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC;QAC9C,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE;QACzC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC;KACzC,CAAC,CAAC;IACH,0FAA0F;IAC1F,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACxD,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM;QAAE,MAAM,QAAQ,EAAE,CAAC;IAEtC,OAAO,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE;QAC/B,OAAO,EAAE;YACP,cAAc,EAAE,GAAG,CAAC,SAAS;YAC7B,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;YACrC,qBAAqB,EAAE,YAAY;YACnC,wBAAwB,EAAE,SAAS;YACnC,eAAe,EAAE,oBAAoB,GAAG,GAAG,MAAM,EAAE;SACpD;KACF,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,wFAAwF;AACxF,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,CAAa,EAAE,QAAgB;IACjE,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,WAAW,CAAC;IACxD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,CAAC,EAAE,QAAQ,EAAE,WAAW,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC;IAChE,OAAO,WAAW,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,eAAe,iBAAiB,QAAQ,QAAQ,GAAG,QAAQ,GAAG,EAAE,CAAC;AACrG,CAAC;AAED,yFAAyF;AACzF,MAAM,QAAQ,GAAG,cAAc,CAAC;AAChC,MAAM,QAAQ,GAAG,eAAe,CAAC;AACjC,MAAM,WAAW,GAAG,CAAC,QAAgB,EAAE,GAAW,EAAE,EAAE,CAAC,GAAG,QAAQ,IAAI,GAAG,EAAE,CAAC;AAC5E,MAAM,WAAW,GAAG,CAAC,QAAgB,EAAE,QAAgB,EAAE,GAAW,EAAE,EAAE,CACtE,GAAG,QAAQ,IAAI,QAAQ,IAAI,GAAG,EAAE,CAAC;AAEnC,KAAK,UAAU,IAAI,CAAC,CAAa,EAAE,IAAY,EAAE,OAAe;IAC9D,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7F,OAAO,CAAC,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACvF,CAAC;AAED,+FAA+F;AAC/F,KAAK,UAAU,MAAM,CAAC,CAAa,EAAE,IAAY,EAAE,OAAe,EAAE,GAAW;IAC7E,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9C,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAa,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IACzF,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;AAC3F,CAAC;AAED,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;AAElC;;;;GAIG;AACH,KAAK,UAAU,MAAM,CAAC,CAAa,EAAE,IAAY;IAC/C,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,sBAAsB,CAAC;IACtD,IAAI,CAAC,MAAM;QAAE,MAAM,QAAQ,CAAC,QAAQ,CAAC,mCAAmC,CAAC,CAAC;IAC1E,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC/C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE;QACvF,MAAM;KACP,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3E,OAAO,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,QAAQ,GAAG,GAAG,EAAE,CACpB,IAAI,QAAQ,CACV,mBAAmB,EACnB,gCAAgC,gBAAgB,GAAG,SAAS,+DAA+D,EAC3H;IACE,KAAK,EAAE,gBAAgB;CACxB,CACF,CAAC;AAEJ;;;;;GAKG;AACH,KAAK,UAAU,UAAU,CACvB,IAAuC,EACvC,QAAuB;IAEvB,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,UAAU,EAAE,CAAC;IACnC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;IAChC,MAAM,GAAG,GAAG,QAAQ,IAAI,gBAAgB,CAAC;IACzC,MAAM,IAAI,GAAG,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACjE,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,SAAS,CAAC;QACR,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QAC5C,IAAI,IAAI;YAAE,MAAM;QAChB,IAAI,IAAI,GAAG,KAAK,CAAC,UAAU,GAAG,GAAG,EAAE,CAAC;YAClC,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;YACtB,MAAM,QAAQ,EAAE,CAAC;QACnB,CAAC;QACD,IAAI,IAAI;YAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;;YAC3B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxB,IAAI,IAAI,KAAK,CAAC,UAAU,CAAC;IAC3B,CAAC;IACD,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC;IAC7B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,2EAA2E;AAC3E,MAAM,KAAK,GAAmF;IAC5F,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE;IACtD,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE;IACnF,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,kBAAkB;IAC3F,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,8BAA8B;IAC5F,EAAE,IAAI,EAAE,iBAAiB,EAAE,EAAE,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,UAAU;IACnF,EAAE,IAAI,EAAE,iBAAiB,EAAE,EAAE,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE;IACjE,EAAE,IAAI,EAAE,iBAAiB,EAAE,EAAE,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,mBAAmB;CACvF,CAAC;AACF,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AAEtC;;;;GAIG;AACH,SAAS,KAAK,CAAC,KAAiB;IAC9B,MAAM,EAAE,GAAG,CAAC,MAAc,EAAE,GAAiC,EAAE,EAAE,CAC/D,KAAK,CAAC,MAAM,IAAI,MAAM,GAAG,GAAG,CAAC,MAAM;QACnC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IAC7D,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC;YAAE,SAAS;QACtD,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC;IACrC,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,0BAA0B,CAAC;IAC/E,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACnF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,0BAA0B,CAAC;IACpC,CAAC;IACD,IAAI,CAAC;QACH,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACjB,OAAO,kBAAkB,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,YAAY,CAAC;IACtB,CAAC;AACH,CAAC"}

package/dist/routes/v1/api/views.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Rows → the wire (`src/contracts/api.ts`): one projection per resource, so every route that shows
+ * a source, a member, a key or a webhook endpoint shows it the same way. What never leaves: a key's hash, a secret's
+ * ciphertext, an invite token's hash, operator notes.
+ */
+import { type ApiKey, type Member, type MemberStatus, type Source, type WebhookEndpoint } from "../../../contracts/index.js";
+import type { ApiKey as ApiKeyRow, ApiMember, ApiSource, WebhookEndpoint as WebhookEndpointRow } from "../../../db/schema.js";
+export declare function sourceView(row: ApiSource): Source;
+/** Where a member stands (§3.4). A root (`sourceRoots`: the organisation entity's current
+ *  controllers) is `active` with no grant; anyone else needs a stored
+ *  grant that is neither revoked nor expired. (The revocation LIST is checked on use; a revoke
+ *  through the API stamps the row too, so this view agrees with it.) */
+export declare function memberStatus(row: ApiMember, roots: readonly string[], now?: Date): MemberStatus;
+export declare function memberView(row: ApiMember, roots: readonly string[], now?: Date): Member;
+export declare function keyView(row: ApiKeyRow): ApiKey;
+/** Never a secret: the URL, the subscriptions and whether it is on. */
+export declare function endpointView(row: WebhookEndpointRow): WebhookEndpoint;
+//# sourceMappingURL=views.d.ts.map

package/dist/routes/v1/api/views.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"views.d.ts","sourceRoot":"","sources":["../../../../src/routes/v1/api/views.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACL,KAAK,MAAM,EAEX,KAAK,MAAM,EACX,KAAK,YAAY,EAEjB,KAAK,MAAM,EACX,KAAK,eAAe,EAErB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EACV,MAAM,IAAI,SAAS,EACnB,SAAS,EACT,SAAS,EACT,eAAe,IAAI,kBAAkB,EACtC,MAAM,oBAAoB,CAAC;AAU5B,wBAAgB,UAAU,CAAC,GAAG,EAAE,SAAS,GAAG,MAAM,CAiBjD;AAED;;;wEAGwE;AACxE,wBAAgB,YAAY,CAC1B,GAAG,EAAE,SAAS,EACd,KAAK,EAAE,SAAS,MAAM,EAAE,EACxB,GAAG,OAAa,GACf,YAAY,CAOd;AAED,wBAAgB,UAAU,CAAC,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,MAAM,EAAE,EAAE,GAAG,OAAa,GAAG,MAAM,CAsB7F;AAED,wBAAgB,OAAO,CAAC,GAAG,EAAE,SAAS,GAAG,MAAM,CAY9C;AAED,uEAAuE;AACvE,wBAAgB,YAAY,CAAC,GAAG,EAAE,kBAAkB,GAAG,eAAe,CAQrE"}

package/dist/routes/v1/api/views.js

@@ -0,0 +1,95 @@
+/**
+ * Rows → the wire (`src/contracts/api.ts`): one projection per resource, so every route that shows
+ * a source, a member, a key or a webhook endpoint shows it the same way. What never leaves: a key's hash, a secret's
+ * ciphertext, an invite token's hash, operator notes.
+ */
+import { ROLE_CAPABILITIES, } from "../../../contracts/index.js";
+import { AppError } from "../../../lib/errors.js";
+/** D10: a source never exists without its organisation — the insert sets it and migration 0017
+ *  deleted every row made before; a row without one is a bug, never a null on the wire. */
+function entityOf(row) {
+    if (!row.companyEntityDid)
+        throw AppError.internal("A source has no organisation (D10)");
+    return row.companyEntityDid;
+}
+export function sourceView(row) {
+    return {
+        sourceId: row.sourceId,
+        name: row.name,
+        ownerDid: row.ownerDid,
+        status: row.status,
+        pausedReason: row.status === "paused" ? (row.pausedReason ?? "operator") : null,
+        billingMode: row.billingMode,
+        allowedProtocols: row.allowedProtocols.map((protocolDid) => ({ protocolDid })),
+        refillFloorCents: row.refillFloorCents ?? null,
+        defaultWebhookUrl: row.webhookUrl ?? null,
+        contactEmail: row.contactEmail ?? null,
+        companyEntityDid: entityOf(row),
+        payeeField: row.payeeField ?? null,
+        createdAt: row.createdAt.toISOString(),
+        activatedAt: row.activatedAt?.toISOString() ?? null,
+    };
+}
+/** Where a member stands (§3.4). A root (`sourceRoots`: the organisation entity's current
+ *  controllers) is `active` with no grant; anyone else needs a stored
+ *  grant that is neither revoked nor expired. (The revocation LIST is checked on use; a revoke
+ *  through the API stamps the row too, so this view agrees with it.) */
+export function memberStatus(row, roots, now = new Date()) {
+    if (row.did !== null && roots.includes(row.did))
+        return "active";
+    if (row.revokedAt)
+        return "revoked";
+    if (!row.acceptedAt)
+        return "invited";
+    if (!row.delegationCid)
+        return "accepted";
+    if (row.expiresAt && row.expiresAt.getTime() <= now.getTime())
+        return "expired";
+    return "active";
+}
+export function memberView(row, roots, now = new Date()) {
+    const status = memberStatus(row, roots, now);
+    const isRoot = row.did !== null && roots.includes(row.did);
+    const capabilities = status === "active" ? [...ROLE_CAPABILITIES[isRoot ? "owner" : row.role]] : [];
+    return {
+        memberId: row.memberId,
+        did: row.did,
+        email: row.email,
+        role: isRoot ? "owner" : row.role,
+        status,
+        capabilities,
+        protocols: isRoot ? null : (row.nbProtocols ?? null),
+        expiresAt: row.expiresAt?.toISOString() ?? null,
+        delegationCid: row.delegationCid,
+        revokedAt: row.revokedAt?.toISOString() ?? null,
+        reviewerDid: row.reviewerDid,
+        reviewerDelegationExpiresAt: row.reviewerDelegationExpiresAt?.toISOString() ?? null,
+        notifyReviews: row.notifyReviews,
+        invitedAt: row.invitedAt.toISOString(),
+        acceptedAt: row.acceptedAt?.toISOString() ?? null,
+    };
+}
+export function keyView(row) {
+    return {
+        prefix: row.prefix,
+        name: row.name,
+        masked: `eo_${row.environment}_${row.prefix}_…`,
+        environment: row.environment,
+        scopes: row.scopes,
+        maxSpendCentsPerDay: row.maxSpendCentsPerDay,
+        createdAt: row.createdAt.toISOString(),
+        lastUsedAt: row.lastUsedAt?.toISOString() ?? null,
+        revokedAt: row.revokedAt?.toISOString() ?? null,
+    };
+}
+/** Never a secret: the URL, the subscriptions and whether it is on. */
+export function endpointView(row) {
+    return {
+        endpointId: row.endpointId,
+        url: row.url,
+        events: row.events,
+        enabled: row.status === "active",
+        createdAt: row.createdAt.toISOString(),
+    };
+}
+//# sourceMappingURL=views.js.map