@kindgi/api 0.0.0-bootstrap.0 → 0.1.0

package/dist/routes/agents.js

@@ -0,0 +1,342 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (C) 2026 Kindgi Inc.
+import { Hono } from 'hono';
+import { defineAgent } from '@kindgi/agents';
+import { ref, tuplesForCreate } from '@kindgi/authz';
+import { statusFor, toWireError } from '../errors.js';
+import { clampLimit } from './pagination.js';
+import { parseScopeParams } from './scope-params.js';
+/**
+ * Agents resource routes.
+ *
+ * Registry storage is caller-plugged via `AgentRegistryBinding`. The
+ * API package does not own persistence — the binding implementation
+ * supplies the store (tests wrap the in-memory `AgentRegistry` from
+ * `@kindgi/agents`).
+ *
+ * Publish is data-as-code: the body is a full `DefineAgentSpec` (the
+ * same value `defineAgent(...)` accepts).
+ */
+export function agentsRouter(binding, authorizer) {
+    const r = new Hono();
+    // Authorization — check the resource directly (ref('agent', businessId));
+    // permissions cascade from the parent project because the
+    // AgentRegistryBinding's `publish` writes the `agent:X#parent@project:Y`
+    // tuple via the enqueueTuples hook (see AgentPublishInput contract).
+    //
+    //   POST /                                         → admin on body.projectId
+    //   GET /:agentId, GET /:agentId/versions[/…]      → read on the agent
+    //   POST /:agentId/versions/:version/unregister    → admin on the agent
+    //   POST /:agentId/versions/:version/reinstate     → admin on the agent
+    //   GET / (list)                                   → tenant-scoped fetch;
+    //                                                    with a project scope
+    //                                                    (?scopeKind=project&scopeId=),
+    //                                                    require read on that project
+    if (authorizer !== undefined) {
+        r.use('/', async (c, next) => {
+            if (c.req.method !== 'POST')
+                return next();
+            const tenantId = c.get('tenantId');
+            const mw = authorizer.authorize('admin', async () => {
+                try {
+                    const body = await c.req.json();
+                    const pid = body !== null && typeof body === 'object'
+                        ? body.projectId
+                        : undefined;
+                    if (typeof pid === 'string' && pid.length > 0)
+                        return ref('project', pid);
+                }
+                catch {
+                    // POST handler validates + returns 400
+                }
+                return ref('tenant', tenantId);
+            });
+            return mw(c, next);
+        });
+        r.use('/', async (c, next) => {
+            if (c.req.method !== 'GET')
+                return next();
+            // A project filter needs read on that project. Parse it as the
+            // handler does (`?scopeKind=project&scopeId=`).
+            const s = parseScopeParams((n) => c.req.query(n), {
+                tenantId: c.get('tenantId'),
+            });
+            if (s.kind !== 'ok' || s.scope?.kind !== 'project')
+                return next();
+            const scopeProjectId = s.scope.projectId;
+            const mw = authorizer.authorize('read', () => ref('project', scopeProjectId));
+            return mw(c, next);
+        });
+        r.use('/:agentId/*', async (c, next) => {
+            const action = c.req.method === 'GET' ? 'read' : 'admin';
+            const agentId = c.req.param('agentId') ?? '';
+            const mw = authorizer.authorize(action, () => ref('agent', agentId));
+            return mw(c, next);
+        });
+        r.use('/:agentId', async (c, next) => {
+            if (c.req.method !== 'GET')
+                return next();
+            const agentId = c.req.param('agentId') ?? '';
+            const mw = authorizer.authorize('read', () => ref('agent', agentId));
+            return mw(c, next);
+        });
+    }
+    // ---------- GET / (list, cursor-paginated) ----------
+    r.get('/', async (c) => {
+        const requestId = c.get('requestId');
+        const tenantId = c.get('tenantId');
+        const limit = clampLimit(c.req.query('limit'));
+        const cursorRaw = c.req.query('cursor');
+        const nameRaw = c.req.query('name');
+        const scopeParsed = parseScopeParams(c.req.query(), { tenantId });
+        if (scopeParsed.kind === 'err') {
+            c.status(statusFor('scope-invalid'));
+            return c.json(toWireError({ code: 'scope-invalid', message: scopeParsed.message }, requestId));
+        }
+        const page = await binding.list({
+            tenantId,
+            limit,
+            ...(cursorRaw !== undefined && cursorRaw.length > 0 && { cursor: cursorRaw }),
+            ...(nameRaw !== undefined && nameRaw.length > 0 && { nameFilter: nameRaw }),
+            ...(scopeParsed.scope !== undefined && { scope: scopeParsed.scope }),
+            ...(scopeParsed.inherit !== undefined && { inherit: scopeParsed.inherit }),
+        });
+        return c.json({
+            data: page.data.map(serializeAgent),
+            hasMore: page.nextCursor !== undefined,
+            ...(page.nextCursor !== undefined && { nextCursor: page.nextCursor }),
+        });
+    });
+    // ---------- GET /:agentId (latest version) ----------
+    r.get('/:agentId', async (c) => {
+        const requestId = c.get('requestId');
+        const tenantId = c.get('tenantId');
+        const agentId = c.req.param('agentId');
+        const agent = await binding.get({ tenantId, agentId });
+        if (agent === null) {
+            // Distinguish 410 gone (identity exists — head row present, no
+            // active version) from 404 not-found (never registered).
+            // Retirement is a derived state (no active
+            // versions); the head row is the identity marker.
+            const exists = await binding.headExists({ tenantId, agentId });
+            if (exists) {
+                c.status(statusFor('agent-gone'));
+                return c.json(toWireError({
+                    code: 'agent-gone',
+                    message: `Agent "${agentId}" has no active versions; reinstate a tombstoned version or publish a new one`,
+                    agentId: agentId,
+                }, requestId));
+            }
+            c.status(statusFor('agent-not-found'));
+            return c.json(toWireError({
+                code: 'agent-not-found',
+                message: `No agent registered with id "${agentId}"`,
+                agentId: agentId,
+            }, requestId));
+        }
+        return c.json(serializeAgent(agent));
+    });
+    // ---------- GET /:agentId/versions (list versions) ----------
+    r.get('/:agentId/versions', async (c) => {
+        const requestId = c.get('requestId');
+        const tenantId = c.get('tenantId');
+        const agentId = c.req.param('agentId');
+        const limit = clampLimit(c.req.query('limit'));
+        const cursorRaw = c.req.query('cursor');
+        // Confirm the id exists at all — an empty versions list from the
+        // binding is ambiguous (no versions vs. unknown id), so we do a
+        // preliminary `get` to flip an unknown id to a `404`.
+        const latest = await binding.get({ tenantId, agentId });
+        if (latest === null) {
+            c.status(statusFor('agent-not-found'));
+            return c.json(toWireError({
+                code: 'agent-not-found',
+                message: `No agent registered with id "${agentId}"`,
+                agentId: agentId,
+            }, requestId));
+        }
+        const page = await binding.listVersions({
+            tenantId,
+            agentId,
+            limit,
+            ...(cursorRaw !== undefined && cursorRaw.length > 0 && { cursor: cursorRaw }),
+        });
+        return c.json({
+            data: page.data.map(serializeAgent),
+            hasMore: page.nextCursor !== undefined,
+            ...(page.nextCursor !== undefined && { nextCursor: page.nextCursor }),
+        });
+    });
+    // ---------- GET /:agentId/versions/:version ----------
+    r.get('/:agentId/versions/:version', async (c) => {
+        const requestId = c.get('requestId');
+        const tenantId = c.get('tenantId');
+        const agentId = c.req.param('agentId');
+        const version = c.req.param('version');
+        const agent = await binding.getVersion({ tenantId, agentId, version });
+        if (agent === null) {
+            c.status(statusFor('agent-not-found'));
+            return c.json(toWireError({
+                code: 'agent-not-found',
+                message: `No agent "${agentId}" at version "${version}"`,
+                agentId: agentId,
+                version: version,
+            }, requestId));
+        }
+        return c.json(serializeAgent(agent));
+    });
+    // ---------- POST / (publish) ----------
+    r.post('/', async (c) => {
+        const requestId = c.get('requestId');
+        const tenantId = c.get('tenantId');
+        let body;
+        try {
+            body = await c.req.json();
+        }
+        catch {
+            c.status(statusFor('bad-input'));
+            return c.json(toWireError({ code: 'bad-input', message: 'Request body must be valid JSON' }, requestId));
+        }
+        if (body === null || typeof body !== 'object') {
+            c.status(statusFor('bad-input'));
+            return c.json(toWireError({ code: 'bad-input', message: 'Request body must be an object' }, requestId));
+        }
+        // `projectId` is REQUIRED on the POST body.
+        // Missing / empty / non-string → 400 bad-input. Absent from the
+        // agent-shape validator on purpose — the caller controls what
+        // project the agent lands in; the agent definition itself is
+        // project-agnostic.
+        const bodyObj = body;
+        const projectIdRaw = bodyObj.projectId;
+        if (typeof projectIdRaw !== 'string' || projectIdRaw.length === 0) {
+            c.status(statusFor('bad-input'));
+            return c.json(toWireError({ code: 'bad-input', message: '`projectId` is required' }, requestId));
+        }
+        const projectId = projectIdRaw;
+        // Validate via defineAgent — same rules as the runtime primitive,
+        // so an agent published through the API is byte-identical to one
+        // constructed in-process. `defineAgent` returns a Result rather
+        // than throwing. `projectId` is stripped from the spec passed to
+        // `defineAgent` — the agent definition itself is project-agnostic
+        // (the runtime primitive doesn't know about projects).
+        const { projectId: _pid, ...specWithoutProjectId } = bodyObj;
+        const defined = defineAgent(specWithoutProjectId);
+        if (defined.kind === 'err') {
+            c.status(statusFor('invalid-agent'));
+            return c.json(toWireError({
+                code: 'validation-failed',
+                message: defined.error.message,
+                issues: defined.error.issues,
+            }, requestId));
+        }
+        const principal = c.get('principal');
+        const creatorUserId = principal?.actor.kind === 'user'
+            ? principal.actor.id
+            : '00000000-0000-0000-0000-000000000000';
+        const outcome = await binding.publish({
+            tenantId,
+            projectId,
+            agent: defined.value,
+            // Write the authorization tuples in the same transaction as the
+            // registry row. The binding calls this with the business
+            // `agentId`.
+            enqueueTuples: (agentId) => tuplesForCreate({ kind: 'agent', id: agentId, tenantId, projectId }, creatorUserId),
+        });
+        if (outcome.kind === 'already-registered') {
+            c.status(statusFor('agent-already-registered'));
+            return c.json(toWireError({
+                code: 'agent-already-registered',
+                message: `Agent "${outcome.agentId}" version "${outcome.version}" is already registered`,
+                agentId: outcome.agentId,
+                version: outcome.version,
+            }, requestId));
+        }
+        if (outcome.kind === 'project-not-found') {
+            // Caller supplied a `projectId` that does not resolve within
+            // this tenant. Distinct signal from `already-registered` so the
+            // client can prompt for a valid project rather than assume the
+            // version was already used. Answered as `400 bad-input`; the
+            // caller learns from the message which field was invalid.
+            c.status(statusFor('bad-input'));
+            return c.json(toWireError({
+                code: 'bad-input',
+                message: `\`projectId\` "${outcome.projectId}" does not resolve to a project in this tenant`,
+            }, requestId));
+        }
+        c.status(201);
+        return c.json({
+            agentId: outcome.agentId,
+            version: outcome.version,
+        });
+    });
+    // ---------- POST /:agentId/versions/:version/unregister ----------
+    r.post('/:agentId/versions/:version/unregister', async (c) => {
+        const requestId = c.get('requestId');
+        const tenantId = c.get('tenantId');
+        const agentId = c.req.param('agentId');
+        const version = c.req.param('version');
+        const outcome = await binding.unregister({ tenantId, agentId, version });
+        if (!outcome.unregistered) {
+            c.status(statusFor('agent-not-found'));
+            return c.json(toWireError({
+                code: 'agent-not-found',
+                message: `No agent "${agentId}" at version "${version}" to unregister`,
+                agentId: agentId,
+                version: version,
+            }, requestId));
+        }
+        return c.json({
+            agentId: agentId,
+            version: version,
+            unregistered: true,
+        });
+    });
+    // ---------- POST /:agentId/versions/:version/reinstate ----------
+    // Un-tombstone a specific version — clears the version's tombstone
+    // and recomputes the agent's latest version across active
+    // versions. Restores the manifest bytes verbatim (semver hygiene:
+    // reinstate never mutates). Idempotent: reinstating an active
+    // version returns `wasTombstoned: false`.
+    r.post('/:agentId/versions/:version/reinstate', async (c) => {
+        const requestId = c.get('requestId');
+        const tenantId = c.get('tenantId');
+        const agentId = c.req.param('agentId');
+        const version = c.req.param('version');
+        const outcome = await binding.reinstateVersion({ tenantId, agentId, version });
+        if (outcome.kind === 'not-found') {
+            c.status(statusFor('agent-not-found'));
+            return c.json(toWireError({
+                code: 'agent-not-found',
+                message: `No agent "${agentId}" at version "${version}" to reinstate`,
+                agentId: agentId,
+                version: version,
+            }, requestId));
+        }
+        return c.json({
+            agentId: outcome.agentId,
+            version: outcome.version,
+            wasTombstoned: outcome.wasTombstoned,
+        });
+    });
+    return r;
+}
+function serializeAgent(a) {
+    return {
+        id: a.id,
+        version: a.version,
+        name: a.name,
+        ...(a.description !== undefined && { description: a.description }),
+        instructions: a.instructions,
+        ...(a.parameters !== undefined && { parameters: a.parameters }),
+        capabilities: a.capabilities,
+        tools: a.tools,
+        retrieval: a.retrieval,
+        guardrails: a.guardrails,
+        ...(a.conversationPolicy !== undefined && { conversationPolicy: a.conversationPolicy }),
+        ...(a.budget !== undefined && { budget: a.budget }),
+        ...(a.tags !== undefined && { tags: a.tags }),
+        ...(a.preferredProvider !== undefined && { preferredProvider: a.preferredProvider }),
+        ...(a.preferredModel !== undefined && { preferredModel: a.preferredModel }),
+    };
+}
+//# sourceMappingURL=agents.js.map

package/dist/routes/agents.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agents.js","sourceRoot":"","sources":["../../src/routes/agents.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,iCAAiC;AAEjC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EAAkD,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7F,OAAO,EAAkB,GAAG,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAIrE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAGtD,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,YAAY,CAAC,OAA6B,EAAE,UAAuB;IACjF,MAAM,CAAC,GAAG,IAAI,IAAI,EAAU,CAAC;IAE7B,0EAA0E;IAC1E,0DAA0D;IAC1D,yEAAyE;IACzE,qEAAqE;IACrE,EAAE;IACF,6EAA6E;IAC7E,uEAAuE;IACvE,wEAAwE;IACxE,wEAAwE;IACxE,0EAA0E;IAC1E,0EAA0E;IAC1E,oFAAoF;IACpF,kFAAkF;IAClF,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;YAC3B,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,MAAM;gBAAE,OAAO,IAAI,EAAE,CAAC;YAC3C,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,UAAU,CAAa,CAAC;YAC/C,MAAM,EAAE,GAAG,UAAU,CAAC,SAAS,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE;gBAClD,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;oBAChC,MAAM,GAAG,GACP,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;wBACvC,CAAC,CAAE,IAAgC,CAAC,SAAS;wBAC7C,CAAC,CAAC,SAAS,CAAC;oBAChB,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;wBAAE,OAAO,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;gBAC5E,CAAC;gBAAC,MAAM,CAAC;oBACP,uCAAuC;gBACzC,CAAC;gBACD,OAAO,GAAG,CAAC,QAAQ,EAAE,QAA6B,CAAC,CAAC;YACtD,CAAC,CAAC,CAAC;YACH,OAAO,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QACrB,CAAC,CAAC,CAAC;QACH,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;YAC3B,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,KAAK;gBAAE,OAAO,IAAI,EAAE,CAAC;YAC1C,+DAA+D;YAC/D,gDAAgD;YAChD,MAAM,CAAC,GAAG,gBAAgB,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;gBAChD,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAa;aACxC,CAAC,CAAC;YACH,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,CAAC,KAAK,EAAE,IAAI,KAAK,SAAS;gBAAE,OAAO,IAAI,EAAE,CAAC;YAClE,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,SAA8B,CAAC;YAC9D,MAAM,EAAE,GAAG,UAAU,CAAC,SAAS,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC,CAAC;YAC9E,OAAO,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QACrB,CAAC,CAAC,CAAC;QACH,CAAC,CAAC,GAAG,CAAC,aAAa,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;YACrC,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;YACzD,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;YAC7C,MAAM,EAAE,GAAG,UAAU,CAAC,SAAS,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;YACrE,OAAO,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QACrB,CAAC,CAAC,CAAC;QACH,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;YACnC,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,KAAK;gBAAE,OAAO,IAAI,EAAE,CAAC;YAC1C,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;YAC7C,MAAM,EAAE,GAAG,UAAU,CAAC,SAAS,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;YACrE,OAAO,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QACrB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,uDAAuD;IACvD,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACrB,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACrC,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,UAAU,CAAa,CAAC;QAC/C,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAE/C,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACxC,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAEpC,MAAM,WAAW,GAAG,gBAAgB,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;QAClE,IAAI,WAAW,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YAC/B,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,eAAe,CAAU,CAAC,CAAC;YAC9C,OAAO,CAAC,CAAC,IAAI,CACX,WAAW,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,WAAW,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAChF,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;YAC9B,QAAQ;YACR,KAAK;YACL,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,SAAmB,EAAE,CAAC;YACvF,GAAG,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;YAC3E,GAAG,CAAC,WAAW,CAAC,KAAK,KAAK,SAAS,IAAI,EAAE,KAAK,EAAE,WAAW,CAAC,KAAK,EAAE,CAAC;YACpE,GAAG,CAAC,WAAW,CAAC,OAAO,KAAK,SAAS,IAAI,EAAE,OAAO,EAAE,WAAW,CAAC,OAAO,EAAE,CAAC;SAC3E,CAAC,CAAC;QACH,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC;YACnC,OAAO,EAAE,IAAI,CAAC,UAAU,KAAK,SAAS;YACtC,GAAG,CAAC,IAAI,CAAC,UAAU,KAAK,SAAS,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,UAA+B,EAAE,CAAC;SAC3F,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,uDAAuD;IACvD,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC7B,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACrC,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,UAAU,CAAa,CAAC;QAC/C,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAY,CAAC;QAElD,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QACvD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,+DAA+D;YAC/D,yDAAyD;YACzD,2CAA2C;YAC3C,kDAAkD;YAClD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;YAC/D,IAAI,MAAM,EAAE,CAAC;gBACX,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,YAAY,CAAU,CAAC,CAAC;gBAC3C,OAAO,CAAC,CAAC,IAAI,CACX,WAAW,CACT;oBACE,IAAI,EAAE,YAAY;oBAClB,OAAO,EAAE,UAAU,OAA4B,+EAA+E;oBAC9H,OAAO,EAAE,OAA4B;iBACtC,EACD,SAAS,CACV,CACF,CAAC;YACJ,CAAC;YACD,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,iBAAiB,CAAU,CAAC,CAAC;YAChD,OAAO,CAAC,CAAC,IAAI,CACX,WAAW,CACT;gBACE,IAAI,EAAE,iBAAiB;gBACvB,OAAO,EAAE,gCAAgC,OAA4B,GAAG;gBACxE,OAAO,EAAE,OAA4B;aACtC,EACD,SAAS,CACV,CACF,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,+DAA+D;IAC/D,CAAC,CAAC,GAAG,CAAC,oBAAoB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACtC,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACrC,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,UAAU,CAAa,CAAC;QAC/C,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAY,CAAC;QAClD,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAC/C,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAExC,iEAAiE;QACjE,gEAAgE;QAChE,sDAAsD;QACtD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QACxD,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,iBAAiB,CAAU,CAAC,CAAC;YAChD,OAAO,CAAC,CAAC,IAAI,CACX,WAAW,CACT;gBACE,IAAI,EAAE,iBAAiB;gBACvB,OAAO,EAAE,gCAAgC,OAA4B,GAAG;gBACxE,OAAO,EAAE,OAA4B;aACtC,EACD,SAAS,CACV,CACF,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC;YACtC,QAAQ;YACR,OAAO;YACP,KAAK;YACL,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,SAAmB,EAAE,CAAC;SACxF,CAAC,CAAC;QACH,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC;YACnC,OAAO,EAAE,IAAI,CAAC,UAAU,KAAK,SAAS;YACtC,GAAG,CAAC,IAAI,CAAC,UAAU,KAAK,SAAS,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,UAA+B,EAAE,CAAC;SAC3F,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,wDAAwD;IACxD,CAAC,CAAC,GAAG,CAAC,6BAA6B,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC/C,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACrC,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,UAAU,CAAa,CAAC;QAC/C,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAY,CAAC;QAClD,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAW,CAAC;QAEjD,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QACvE,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,iBAAiB,CAAU,CAAC,CAAC;YAChD,OAAO,CAAC,CAAC,IAAI,CACX,WAAW,CACT;gBACE,IAAI,EAAE,iBAAiB;gBACvB,OAAO,EAAE,aAAa,OAA4B,iBAAiB,OAA4B,GAAG;gBAClG,OAAO,EAAE,OAA4B;gBACrC,OAAO,EAAE,OAA4B;aACtC,EACD,SAAS,CACV,CACF,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,yCAAyC;IACzC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACtB,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACrC,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,UAAU,CAAa,CAAC;QAE/C,IAAI,IAAa,CAAC;QAClB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,CAAU,CAAC,CAAC;YAC1C,OAAO,CAAC,CAAC,IAAI,CACX,WAAW,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,iCAAiC,EAAE,EAAE,SAAS,CAAC,CAC1F,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC9C,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,CAAU,CAAC,CAAC;YAC1C,OAAO,CAAC,CAAC,IAAI,CACX,WAAW,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,gCAAgC,EAAE,EAAE,SAAS,CAAC,CACzF,CAAC;QACJ,CAAC;QAED,4CAA4C;QAC5C,gEAAgE;QAChE,8DAA8D;QAC9D,6DAA6D;QAC7D,oBAAoB;QACpB,MAAM,OAAO,GAAG,IAA+B,CAAC;QAChD,MAAM,YAAY,GAAG,OAAO,CAAC,SAAS,CAAC;QACvC,IAAI,OAAO,YAAY,KAAK,QAAQ,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClE,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,CAAU,CAAC,CAAC;YAC1C,OAAO,CAAC,CAAC,IAAI,CACX,WAAW,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,yBAAyB,EAAE,EAAE,SAAS,CAAC,CAClF,CAAC;QACJ,CAAC;QACD,MAAM,SAAS,GAAG,YAAyB,CAAC;QAE5C,kEAAkE;QAClE,iEAAiE;QACjE,gEAAgE;QAChE,iEAAiE;QACjE,kEAAkE;QAClE,uDAAuD;QACvD,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,oBAAoB,EAAE,GAAG,OAAO,CAAC;QAC7D,MAAM,OAAO,GAAG,WAAW,CAAC,oBAAkD,CAAC,CAAC;QAChF,IAAI,OAAO,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YAC3B,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,eAAe,CAAU,CAAC,CAAC;YAC9C,OAAO,CAAC,CAAC,IAAI,CACX,WAAW,CACT;gBACE,IAAI,EAAE,mBAAmB;gBACzB,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO;gBAC9B,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,MAA8C;aACrE,EACD,SAAS,CACV,CACF,CAAC;QACJ,CAAC;QAED,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAA0B,CAAC;QAC9D,MAAM,aAAa,GACjB,SAAS,EAAE,KAAK,CAAC,IAAI,KAAK,MAAM;YAC9B,CAAC,CAAE,SAAS,CAAC,KAAK,CAAC,EAAa;YAChC,CAAC,CAAE,sCAAiD,CAAC;QACzD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC;YACpC,QAAQ;YACR,SAAS;YACT,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,gEAAgE;YAChE,yDAAyD;YACzD,aAAa;YACb,aAAa,EAAE,CAAC,OAAO,EAAE,EAAE,CACzB,eAAe,CACb,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,OAAkB,EAAE,QAAQ,EAAE,SAAS,EAAE,EAC9D,aAAa,CACd;SACJ,CAAC,CAAC;QACH,IAAI,OAAO,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;YAC1C,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,0BAA0B,CAAU,CAAC,CAAC;YACzD,OAAO,CAAC,CAAC,IAAI,CACX,WAAW,CACT;gBACE,IAAI,EAAE,0BAA0B;gBAChC,OAAO,EAAE,UAAU,OAAO,CAAC,OAA4B,cAAc,OAAO,CAAC,OAA4B,yBAAyB;gBAClI,OAAO,EAAE,OAAO,CAAC,OAA4B;gBAC7C,OAAO,EAAE,OAAO,CAAC,OAA4B;aAC9C,EACD,SAAS,CACV,CACF,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;YACzC,6DAA6D;YAC7D,gEAAgE;YAChE,+DAA+D;YAC/D,6DAA6D;YAC7D,0DAA0D;YAC1D,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,CAAU,CAAC,CAAC;YAC1C,OAAO,CAAC,CAAC,IAAI,CACX,WAAW,CACT;gBACE,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE,kBAAkB,OAAO,CAAC,SAA8B,gDAAgD;aAClH,EACD,SAAS,CACV,CACF,CAAC;QACJ,CAAC;QACD,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACd,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,OAAO,EAAE,OAAO,CAAC,OAA4B;YAC7C,OAAO,EAAE,OAAO,CAAC,OAA4B;SAC9C,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,oEAAoE;IACpE,CAAC,CAAC,IAAI,CAAC,wCAAwC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC3D,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACrC,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,UAAU,CAAa,CAAC;QAC/C,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAY,CAAC;QAClD,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAW,CAAC;QAEjD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QACzE,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;YAC1B,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,iBAAiB,CAAU,CAAC,CAAC;YAChD,OAAO,CAAC,CAAC,IAAI,CACX,WAAW,CACT;gBACE,IAAI,EAAE,iBAAiB;gBACvB,OAAO,EAAE,aAAa,OAA4B,iBAAiB,OAA4B,iBAAiB;gBAChH,OAAO,EAAE,OAA4B;gBACrC,OAAO,EAAE,OAA4B;aACtC,EACD,SAAS,CACV,CACF,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,OAAO,EAAE,OAA4B;YACrC,OAAO,EAAE,OAA4B;YACrC,YAAY,EAAE,IAAI;SACnB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,mEAAmE;IACnE,mEAAmE;IACnE,0DAA0D;IAC1D,kEAAkE;IAClE,8DAA8D;IAC9D,0CAA0C;IAC1C,CAAC,CAAC,IAAI,CAAC,uCAAuC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC1D,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACrC,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,UAAU,CAAa,CAAC;QAC/C,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAY,CAAC;QAClD,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAW,CAAC;QAEjD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,gBAAgB,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QAC/E,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YACjC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,iBAAiB,CAAU,CAAC,CAAC;YAChD,OAAO,CAAC,CAAC,IAAI,CACX,WAAW,CACT;gBACE,IAAI,EAAE,iBAAiB;gBACvB,OAAO,EAAE,aAAa,OAA4B,iBAAiB,OAA4B,gBAAgB;gBAC/G,OAAO,EAAE,OAA4B;gBACrC,OAAO,EAAE,OAA4B;aACtC,EACD,SAAS,CACV,CACF,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,OAAO,EAAE,OAAO,CAAC,OAA4B;YAC7C,OAAO,EAAE,OAAO,CAAC,OAA4B;YAC7C,aAAa,EAAE,OAAO,CAAC,aAAa;SACrC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,cAAc,CAAC,CAAQ;IAC9B,OAAO;QACL,EAAE,EAAE,CAAC,CAAC,EAAuB;QAC7B,OAAO,EAAE,CAAC,CAAC,OAA4B;QACvC,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,GAAG,CAAC,CAAC,CAAC,WAAW,KAAK,SAAS,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAClE,YAAY,EAAE,CAAC,CAAC,YAAY;QAC5B,GAAG,CAAC,CAAC,CAAC,UAAU,KAAK,SAAS,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC;QAC/D,YAAY,EAAE,CAAC,CAAC,YAAY;QAC5B,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,GAAG,CAAC,CAAC,CAAC,kBAAkB,KAAK,SAAS,IAAI,EAAE,kBAAkB,EAAE,CAAC,CAAC,kBAAkB,EAAE,CAAC;QACvF,GAAG,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;QACnD,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7C,GAAG,CAAC,CAAC,CAAC,iBAAiB,KAAK,SAAS,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC,iBAAiB,EAAE,CAAC;QACpF,GAAG,CAAC,CAAC,CAAC,cAAc,KAAK,SAAS,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC,cAAc,EAAE,CAAC;KAC5E,CAAC;AACJ,CAAC"}

package/dist/routes/approvals.d.ts

@@ -0,0 +1,37 @@
+import { Hono } from 'hono';
+import type { ConversationBinding } from '@kindgi/agents';
+import type { SigningKeyBinding } from '@kindgi/crypto';
+import type { RunBinding } from '@kindgi/runtime';
+import type { RunHandlerBinding } from '../handler-binding.js';
+import type { HitlBinding } from '../hitl-binding.js';
+import type { ReviewerBinding } from '../reviewer-binding.js';
+import type { AppEnv } from '../types.js';
+export interface ApprovalsRouterOptions {
+    readonly signingKey?: SigningKeyBinding;
+    /**
+     * When supplied, the POST /:approvalId/complete handler
+     * invokes `runHandler.resumeRun(runId)` INLINE after `completeToken`
+     * succeeds — the reviewer's HTTP response reflects the resumed run's
+     * new terminal (or re-suspended) state. Absent = the route does
+     * `completeToken` only; something else (a background job in the
+     * deployment, or a later `POST /v1/runs/:runId/resume`) must drive
+     * the resume.
+     */
+    readonly runHandler?: RunHandlerBinding;
+}
+/**
+ * Approvals resource routes.
+ *
+ * Reviewer-role scoping: routes require `c.get('reviewerRole')` to be
+ * set by the auth middleware (see `TokenResolution.reviewerRole`).
+ * Tokens without a reviewer role get `403 permission-denied` on every
+ * approvals route — this surface is reviewer-only.
+ *
+ * Visibility filter: a caller with role `R` sees approvals whose
+ * `requiredRole` rank ≤ their rank (standard < senior < admin). The
+ * scoping is applied post-fetch on the returned rows — pushing the
+ * filter into the storage query would require a role-set predicate on
+ * `listApprovals`.
+ */
+export declare function approvalsRouter(conversationBinding: ConversationBinding, reviewerBinding: ReviewerBinding, hitlBinding: HitlBinding, runBinding: RunBinding, options?: ApprovalsRouterOptions): Hono<AppEnv>;
+//# sourceMappingURL=approvals.d.ts.map

package/dist/routes/approvals.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approvals.d.ts","sourceRoot":"","sources":["../../src/routes/approvals.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAG1D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAelD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,KAAK,EAA4B,WAAW,EAAsB,MAAM,oBAAoB,CAAC;AACpG,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAsC1C,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,UAAU,CAAC,EAAE,iBAAiB,CAAC;IACxC;;;;;;;;OAQG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,iBAAiB,CAAC;CACzC;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,eAAe,CAC7B,mBAAmB,EAAE,mBAAmB,EACxC,eAAe,EAAE,eAAe,EAChC,WAAW,EAAE,WAAW,EACxB,UAAU,EAAE,UAAU,EACtB,OAAO,GAAE,sBAA2B,GACnC,IAAI,CAAC,MAAM,CAAC,CAkhBd"}