@kindgi/api 0.0.0-bootstrap.0 → 0.1.0

package/dist/routes/projects.d.ts

@@ -0,0 +1,45 @@
+import { Hono } from 'hono';
+import type { TenantHierarchyBinding } from '@kindgi/platform';
+import type { ProjectBinding, ProjectMembershipBinding } from '@kindgi/platform';
+import type { Authorizer } from '../middleware/authorize.js';
+import type { AppEnv } from '../types.js';
+/**
+ * Projects resource routes — part of the multi-tenant hierarchy.
+ *
+ * Ten endpoints on `/v1/projects`:
+ *   - `GET    /`                         — cursor-paginated list;
+ *                                          `?limit=` / `?cursor=` / `?orgId=` /
+ *                                          `?nameContains=`.
+ *   - `POST   /`                         — create; body `{ name, slug,
+ *                                          orgId?, description?, isDefault? }`;
+ *                                          201 `{ id }`.
+ *   - `GET    /default`                  — returns the tenant's Default
+ *                                          project or 404 `project-not-found`.
+ *                                          MUST be mounted BEFORE `/:projectId`.
+ *   - `GET    /:projectId`               — get; 200 or 404 `project-not-found`.
+ *   - `PATCH  /:projectId`               — partial update; 204 or 404.
+ *   - `DELETE /:projectId`               — 204 idempotent.
+ *   - `GET    /:projectId/memberships`   — list; cursor-paginated.
+ *   - `POST   /:projectId/memberships`   — add member; body `{ userId, role }`;
+ *                                          201. Idempotent per binding contract.
+ *   - `DELETE /:projectId/memberships/:userId`
+ *                                        — 204 idempotent.
+ *   - `PATCH  /:projectId/memberships/:userId`
+ *                                        — updateRole via `{ role }`; 204 or
+ *                                          404 `project-membership-not-found`.
+ */
+export declare function projectsRouter(binding: ProjectBinding, membershipBinding: ProjectMembershipBinding, 
+/**
+ * Tenant-hierarchy binding. When `authorizer` is also set, POST /
+ * routes through `tenantHierarchy.createProject` — writes FGA
+ * parent/owner tuples atomically with the insert. Without an
+ * authorizer, POST / falls back to `binding.create()` (no tuples).
+ */
+tenantHierarchy: TenantHierarchyBinding, 
+/**
+ * Optional authorizer. When provided, routes are gated by
+ * `authorize()` before the handler runs, and the list is filtered to
+ * projects the caller can read.
+ */
+authorizer?: Authorizer): Hono<AppEnv>;
+//# sourceMappingURL=projects.d.ts.map

package/dist/routes/projects.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"projects.d.ts","sourceRoot":"","sources":["../../src/routes/projects.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAG5B,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,KAAK,EAEV,cAAc,EAEd,wBAAwB,EAIzB,MAAM,kBAAkB,CAAC;AAI1B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAG1C;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,cAAc,CAC5B,OAAO,EAAE,cAAc,EACvB,iBAAiB,EAAE,wBAAwB;AAC3C;;;;;GAKG;AACH,eAAe,EAAE,sBAAsB;AACvC;;;;GAIG;AACH,UAAU,CAAC,EAAE,UAAU,GACtB,IAAI,CAAC,MAAM,CAAC,CA8hBd"}

package/dist/routes/projects.js

@@ -0,0 +1,485 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (C) 2026 Kindgi Inc.
+import { Hono } from 'hono';
+import { ref } from '@kindgi/authz';
+import { statusFor, toWireError } from '../errors.js';
+import { clampLimit } from './pagination.js';
+/**
+ * Projects resource routes — part of the multi-tenant hierarchy.
+ *
+ * Ten endpoints on `/v1/projects`:
+ *   - `GET    /`                         — cursor-paginated list;
+ *                                          `?limit=` / `?cursor=` / `?orgId=` /
+ *                                          `?nameContains=`.
+ *   - `POST   /`                         — create; body `{ name, slug,
+ *                                          orgId?, description?, isDefault? }`;
+ *                                          201 `{ id }`.
+ *   - `GET    /default`                  — returns the tenant's Default
+ *                                          project or 404 `project-not-found`.
+ *                                          MUST be mounted BEFORE `/:projectId`.
+ *   - `GET    /:projectId`               — get; 200 or 404 `project-not-found`.
+ *   - `PATCH  /:projectId`               — partial update; 204 or 404.
+ *   - `DELETE /:projectId`               — 204 idempotent.
+ *   - `GET    /:projectId/memberships`   — list; cursor-paginated.
+ *   - `POST   /:projectId/memberships`   — add member; body `{ userId, role }`;
+ *                                          201. Idempotent per binding contract.
+ *   - `DELETE /:projectId/memberships/:userId`
+ *                                        — 204 idempotent.
+ *   - `PATCH  /:projectId/memberships/:userId`
+ *                                        — updateRole via `{ role }`; 204 or
+ *                                          404 `project-membership-not-found`.
+ */
+export function projectsRouter(binding, membershipBinding, 
+/**
+ * Tenant-hierarchy binding. When `authorizer` is also set, POST /
+ * routes through `tenantHierarchy.createProject` — writes FGA
+ * parent/owner tuples atomically with the insert. Without an
+ * authorizer, POST / falls back to `binding.create()` (no tuples).
+ */
+tenantHierarchy, 
+/**
+ * Optional authorizer. When provided, routes are gated by
+ * `authorize()` before the handler runs, and the list is filtered to
+ * projects the caller can read.
+ */
+authorizer) {
+    const r = new Hono();
+    // ---------- GET /default (literal segment; must precede /:projectId) ----------
+    r.get('/default', async (c) => {
+        const requestId = c.get('requestId');
+        const tenantId = c.get('tenantId');
+        const proj = await binding.getDefault(tenantId);
+        if (proj === undefined) {
+            c.status(statusFor('project-not-found'));
+            return c.json(toWireError({
+                code: 'project-not-found',
+                message: 'Tenant has no Default project',
+            }, requestId));
+        }
+        return c.json(serializeProject(proj));
+    });
+    // ---------- GET / (list) ----------
+    r.get('/', async (c) => {
+        const tenantId = c.get('tenantId');
+        const limit = clampLimit(c.req.query('limit'));
+        const cursorRaw = c.req.query('cursor');
+        const orgIdRaw = c.req.query('orgId');
+        const nameContainsRaw = c.req.query('nameContains');
+        const page = await binding.list(tenantId, {
+            limit,
+            ...(cursorRaw !== undefined && cursorRaw.length > 0 && { cursor: cursorRaw }),
+            ...(orgIdRaw !== undefined && orgIdRaw.length > 0 && { orgId: orgIdRaw }),
+            ...(nameContainsRaw !== undefined &&
+                nameContainsRaw.length > 0 && { nameContains: nameContainsRaw }),
+        });
+        // Authorization list-filter — strip projects the caller can't read.
+        const visible = authorizer !== undefined
+            ? await authorizer.filterByCan(c, 'read', page.items, (p) => ref('project', p.id))
+            : [...page.items];
+        return c.json({
+            data: visible.map(serializeProject),
+            hasMore: page.nextCursor !== undefined,
+            ...(page.nextCursor !== undefined && { nextCursor: page.nextCursor }),
+        });
+    });
+    // ---------- Authorization middleware ----------
+    // Full PEP surface for projects + memberships:
+    //   POST /                                     → admin on tenant
+    //   GET /:projectId                            → read on project
+    //   PATCH /:projectId                          → admin on project
+    //   DELETE /:projectId                         → delete on project
+    //   GET /:projectId/memberships[/:userId]      → read on project
+    //   other /:projectId/memberships[/:userId]    → admin on project
+    //   GET /                                       → list-filter by can_read
+    if (authorizer !== undefined) {
+        r.use('/', async (c, next) => {
+            if (c.req.method !== 'POST')
+                return next();
+            const mw = authorizer.authorize('admin', (ctx) => ref('tenant', ctx.get('tenantId')));
+            return mw(c, next);
+        });
+        r.use('/:projectId', async (c, next) => {
+            const method = c.req.method;
+            if (method !== 'GET' && method !== 'PATCH' && method !== 'DELETE')
+                return next();
+            const projectId = c.req.param('projectId');
+            const action = method === 'GET' ? 'read' : method === 'DELETE' ? 'delete' : 'admin';
+            const mw = authorizer.authorize(action, () => ref('project', projectId));
+            return mw(c, next);
+        });
+        // Membership routes: reads require read, mutations admin on the project.
+        r.use('/:projectId/memberships', async (c, next) => {
+            const projectId = c.req.param('projectId');
+            const action = c.req.method === 'GET' ? 'read' : 'admin';
+            const mw = authorizer.authorize(action, () => ref('project', projectId));
+            return mw(c, next);
+        });
+        r.use('/:projectId/memberships/:userId', async (c, next) => {
+            const projectId = c.req.param('projectId');
+            const action = c.req.method === 'GET' ? 'read' : 'admin';
+            const mw = authorizer.authorize(action, () => ref('project', projectId));
+            return mw(c, next);
+        });
+    }
+    r.post('/', async (c) => {
+        const requestId = c.get('requestId');
+        const tenantId = c.get('tenantId');
+        let body;
+        try {
+            body = await c.req.json();
+        }
+        catch {
+            c.status(statusFor('bad-input'));
+            return c.json(toWireError({ code: 'bad-input', message: 'Request body must be valid JSON' }, requestId));
+        }
+        if (body === null || typeof body !== 'object') {
+            c.status(statusFor('bad-input'));
+            return c.json(toWireError({ code: 'bad-input', message: 'Request body must be an object' }, requestId));
+        }
+        const b = body;
+        if (typeof b.name !== 'string' || b.name.length === 0) {
+            c.status(statusFor('bad-input'));
+            return c.json(toWireError({ code: 'bad-input', message: '`name` is required and must be a non-empty string' }, requestId));
+        }
+        if (typeof b.slug !== 'string' || b.slug.length === 0) {
+            c.status(statusFor('bad-input'));
+            return c.json(toWireError({ code: 'bad-input', message: '`slug` is required and must be a non-empty string' }, requestId));
+        }
+        if (b.description !== undefined && typeof b.description !== 'string') {
+            c.status(statusFor('bad-input'));
+            return c.json(toWireError({ code: 'bad-input', message: '`description` must be a string when present' }, requestId));
+        }
+        if (b.orgId !== undefined && typeof b.orgId !== 'string') {
+            c.status(statusFor('bad-input'));
+            return c.json(toWireError({ code: 'bad-input', message: '`orgId` must be a string when present' }, requestId));
+        }
+        if (b.isDefault !== undefined && typeof b.isDefault !== 'boolean') {
+            c.status(statusFor('bad-input'));
+            return c.json(toWireError({ code: 'bad-input', message: '`isDefault` must be a boolean when present' }, requestId));
+        }
+        const spec = {
+            name: b.name,
+            slug: b.slug,
+            ...(b.description !== undefined && { description: b.description }),
+            ...(b.orgId !== undefined && { orgId: b.orgId }),
+            ...(b.isDefault !== undefined && { isDefault: b.isDefault }),
+        };
+        // With an authorizer, create through the tenant-hierarchy binding —
+        // it writes FGA tuples atomically. The tuples are what makes downstream
+        // authz (member add, tenant-admin cascade to project) actually work.
+        if (authorizer !== undefined) {
+            const principal = c.get('principal');
+            const creatorUserId = principal?.actor.kind === 'user'
+                ? principal.actor.id
+                : '00000000-0000-0000-0000-000000000000';
+            const result = await tenantHierarchy.createProject({ tenantId, creatorUserId, spec });
+            if (result.kind === 'err') {
+                const code = result.error.code === 'slug-conflict'
+                    ? 'slug-conflict'
+                    : result.error.code === 'default-conflict'
+                        ? 'project-default-already-exists'
+                        : 'internal-server-error';
+                c.status(statusFor(code));
+                return c.json(toWireError({ code, message: result.error.message }, requestId));
+            }
+            c.status(201);
+            return c.json({ id: result.value.projectId });
+        }
+        // No authorizer configured — fall back to the raw binding create;
+        // no FGA tuples written.
+        const id = await binding.create(tenantId, spec);
+        c.status(201);
+        return c.json({ id: id });
+    });
+    // ---------- GET /:projectId/memberships ----------
+    // Mount BEFORE /:projectId so `memberships` is not swallowed by the
+    // param.
+    r.get('/:projectId/memberships', async (c) => {
+        const requestId = c.get('requestId');
+        const tenantId = c.get('tenantId');
+        const projectId = c.req.param('projectId');
+        const project = await binding.get(tenantId, projectId);
+        if (project === undefined) {
+            c.status(statusFor('project-not-found'));
+            return c.json(toWireError({
+                code: 'project-not-found',
+                message: `No project with id "${projectId}"`,
+                projectId: projectId,
+            }, requestId));
+        }
+        const limit = clampLimit(c.req.query('limit'));
+        const cursorRaw = c.req.query('cursor');
+        const page = await membershipBinding.list(tenantId, projectId, {
+            limit,
+            ...(cursorRaw !== undefined && cursorRaw.length > 0 && { cursor: cursorRaw }),
+        });
+        return c.json({
+            data: page.items.map(serializeProjectMembership),
+            hasMore: page.nextCursor !== undefined,
+            ...(page.nextCursor !== undefined && { nextCursor: page.nextCursor }),
+        });
+    });
+    // ---------- POST /:projectId/memberships ----------
+    r.post('/:projectId/memberships', async (c) => {
+        const requestId = c.get('requestId');
+        const tenantId = c.get('tenantId');
+        const projectId = c.req.param('projectId');
+        const project = await binding.get(tenantId, projectId);
+        if (project === undefined) {
+            c.status(statusFor('project-not-found'));
+            return c.json(toWireError({
+                code: 'project-not-found',
+                message: `No project with id "${projectId}"`,
+                projectId: projectId,
+            }, requestId));
+        }
+        let body;
+        try {
+            body = await c.req.json();
+        }
+        catch {
+            c.status(statusFor('bad-input'));
+            return c.json(toWireError({ code: 'bad-input', message: 'Request body must be valid JSON' }, requestId));
+        }
+        if (body === null || typeof body !== 'object') {
+            c.status(statusFor('bad-input'));
+            return c.json(toWireError({ code: 'bad-input', message: 'Request body must be an object' }, requestId));
+        }
+        const b = body;
+        if (typeof b.userId !== 'string' || b.userId.length === 0) {
+            c.status(statusFor('bad-input'));
+            return c.json(toWireError({ code: 'bad-input', message: '`userId` is required and must be a non-empty string' }, requestId));
+        }
+        if (!isProjectRole(b.role)) {
+            c.status(statusFor('bad-input'));
+            return c.json(toWireError({
+                code: 'bad-input',
+                message: '`role` must be one of: viewer, editor, owner, admin, member',
+            }, requestId));
+        }
+        try {
+            // With an authorizer, add through the tenant-hierarchy binding — it
+            // writes the FGA `<role>@project` tuple atomically so the granted
+            // user's permissions land in FGA.
+            if (authorizer !== undefined) {
+                const res = await tenantHierarchy.addProjectMember({
+                    tenantId,
+                    projectId,
+                    userId: b.userId,
+                    role: b.role,
+                });
+                if (res.kind === 'err')
+                    throw new Error(res.error.message);
+            }
+            else {
+                await membershipBinding.add(tenantId, {
+                    projectId,
+                    userId: b.userId,
+                    role: b.role,
+                });
+            }
+        }
+        catch (cause) {
+            const message = cause instanceof Error ? cause.message : String(cause);
+            if (message.startsWith('project-not-found')) {
+                // Racy — project was deleted between preliminary get and add.
+                c.status(statusFor('project-not-found'));
+                return c.json(toWireError({
+                    code: 'project-not-found',
+                    message: `No project with id "${projectId}"`,
+                    projectId: projectId,
+                }, requestId));
+            }
+            throw cause;
+        }
+        c.status(201);
+        return c.json({
+            projectId: projectId,
+            userId: b.userId,
+            role: b.role,
+        });
+    });
+    // ---------- DELETE /:projectId/memberships/:userId ----------
+    r.delete('/:projectId/memberships/:userId', async (c) => {
+        const tenantId = c.get('tenantId');
+        const projectId = c.req.param('projectId');
+        const userId = c.req.param('userId');
+        await membershipBinding.remove(tenantId, projectId, userId);
+        c.status(204);
+        return c.body(null);
+    });
+    // ---------- PATCH /:projectId/memberships/:userId ----------
+    r.patch('/:projectId/memberships/:userId', async (c) => {
+        const requestId = c.get('requestId');
+        const tenantId = c.get('tenantId');
+        const projectId = c.req.param('projectId');
+        const userId = c.req.param('userId');
+        let body;
+        try {
+            body = await c.req.json();
+        }
+        catch {
+            c.status(statusFor('bad-input'));
+            return c.json(toWireError({ code: 'bad-input', message: 'Request body must be valid JSON' }, requestId));
+        }
+        if (body === null || typeof body !== 'object') {
+            c.status(statusFor('bad-input'));
+            return c.json(toWireError({ code: 'bad-input', message: 'Request body must be an object' }, requestId));
+        }
+        const b = body;
+        if (!isProjectRole(b.role)) {
+            c.status(statusFor('bad-input'));
+            return c.json(toWireError({
+                code: 'bad-input',
+                message: '`role` must be one of: viewer, editor, owner, admin, member',
+            }, requestId));
+        }
+        try {
+            await membershipBinding.updateRole(tenantId, projectId, userId, b.role);
+        }
+        catch (cause) {
+            const message = cause instanceof Error ? cause.message : String(cause);
+            if (message.startsWith('project-membership-not-found')) {
+                c.status(statusFor('project-membership-not-found'));
+                return c.json(toWireError({
+                    code: 'project-membership-not-found',
+                    message: `No membership for project "${projectId}" + user "${userId}"`,
+                    projectId: projectId,
+                    userId: userId,
+                }, requestId));
+            }
+            if (message.startsWith('project-not-found')) {
+                c.status(statusFor('project-not-found'));
+                return c.json(toWireError({
+                    code: 'project-not-found',
+                    message: `No project with id "${projectId}"`,
+                    projectId: projectId,
+                }, requestId));
+            }
+            throw cause;
+        }
+        c.status(204);
+        return c.body(null);
+    });
+    // ---------- GET /:projectId ----------
+    r.get('/:projectId', async (c) => {
+        const requestId = c.get('requestId');
+        const tenantId = c.get('tenantId');
+        const projectId = c.req.param('projectId');
+        const project = await binding.get(tenantId, projectId);
+        if (project === undefined) {
+            c.status(statusFor('project-not-found'));
+            return c.json(toWireError({
+                code: 'project-not-found',
+                message: `No project with id "${projectId}"`,
+                projectId: projectId,
+            }, requestId));
+        }
+        return c.json(serializeProject(project));
+    });
+    // ---------- PATCH /:projectId ----------
+    r.patch('/:projectId', async (c) => {
+        const requestId = c.get('requestId');
+        const tenantId = c.get('tenantId');
+        const projectId = c.req.param('projectId');
+        let body;
+        try {
+            body = await c.req.json();
+        }
+        catch {
+            c.status(statusFor('bad-input'));
+            return c.json(toWireError({ code: 'bad-input', message: 'Request body must be valid JSON' }, requestId));
+        }
+        if (body === null || typeof body !== 'object') {
+            c.status(statusFor('bad-input'));
+            return c.json(toWireError({ code: 'bad-input', message: 'Request body must be an object' }, requestId));
+        }
+        const b = body;
+        const shaped = {};
+        if (b.name !== undefined) {
+            if (typeof b.name !== 'string') {
+                c.status(statusFor('bad-input'));
+                return c.json(toWireError({ code: 'bad-input', message: '`name` must be a string when present' }, requestId));
+            }
+            shaped.name = b.name;
+        }
+        if (b.slug !== undefined) {
+            if (typeof b.slug !== 'string') {
+                c.status(statusFor('bad-input'));
+                return c.json(toWireError({ code: 'bad-input', message: '`slug` must be a string when present' }, requestId));
+            }
+            shaped.slug = b.slug;
+        }
+        if (b.description !== undefined) {
+            if (typeof b.description !== 'string') {
+                c.status(statusFor('bad-input'));
+                return c.json(toWireError({ code: 'bad-input', message: '`description` must be a string when present' }, requestId));
+            }
+            shaped.description = b.description;
+        }
+        if ('orgId' in b) {
+            const raw = b.orgId;
+            if (raw === null) {
+                shaped.orgId = null;
+            }
+            else if (typeof raw === 'string') {
+                shaped.orgId = raw;
+            }
+            else {
+                c.status(statusFor('bad-input'));
+                return c.json(toWireError({ code: 'bad-input', message: '`orgId` must be a string or null when present' }, requestId));
+            }
+        }
+        try {
+            await binding.update(tenantId, projectId, shaped);
+        }
+        catch (cause) {
+            const message = cause instanceof Error ? cause.message : String(cause);
+            if (message.startsWith('project-not-found')) {
+                c.status(statusFor('project-not-found'));
+                return c.json(toWireError({
+                    code: 'project-not-found',
+                    message: `No project with id "${projectId}"`,
+                    projectId: projectId,
+                }, requestId));
+            }
+            throw cause;
+        }
+        c.status(204);
+        return c.body(null);
+    });
+    // ---------- DELETE /:projectId ----------
+    r.delete('/:projectId', async (c) => {
+        const tenantId = c.get('tenantId');
+        const projectId = c.req.param('projectId');
+        await binding.delete(tenantId, projectId);
+        c.status(204);
+        return c.body(null);
+    });
+    return r;
+}
+function isProjectRole(x) {
+    return x === 'viewer' || x === 'editor' || x === 'owner' || x === 'admin' || x === 'member';
+}
+function serializeProject(p) {
+    return {
+        id: p.id,
+        tenantId: p.tenantId,
+        ...(p.orgId !== undefined && { orgId: p.orgId }),
+        name: p.name,
+        slug: p.slug,
+        isDefault: p.isDefault,
+        ...(p.description !== undefined && { description: p.description }),
+        createdAt: p.createdAt,
+        updatedAt: p.updatedAt,
+    };
+}
+function serializeProjectMembership(m) {
+    return {
+        projectId: m.projectId,
+        userId: m.userId,
+        role: m.role,
+        joinedAt: m.joinedAt,
+    };
+}
+//# sourceMappingURL=projects.js.map

package/dist/routes/projects.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"projects.js","sourceRoot":"","sources":["../../src/routes/projects.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,iCAAiC;AAEjC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EAAkB,GAAG,EAAE,MAAM,eAAe,CAAC;AAapD,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAGtD,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAE7C;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,UAAU,cAAc,CAC5B,OAAuB,EACvB,iBAA2C;AAC3C;;;;;GAKG;AACH,eAAuC;AACvC;;;;GAIG;AACH,UAAuB;IAEvB,MAAM,CAAC,GAAG,IAAI,IAAI,EAAU,CAAC;IAE7B,iFAAiF;IACjF,CAAC,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC5B,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACrC,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,UAAU,CAAa,CAAC;QAC/C,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAChD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,mBAAmB,CAAU,CAAC,CAAC;YAClD,OAAO,CAAC,CAAC,IAAI,CACX,WAAW,CACT;gBACE,IAAI,EAAE,mBAAmB;gBACzB,OAAO,EAAE,+BAA+B;aACzC,EACD,SAAS,CACV,CACF,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,qCAAqC;IACrC,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACrB,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,UAAU,CAAa,CAAC;QAC/C,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAC/C,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACxC,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,eAAe,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QACpD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE;YACxC,KAAK;YACL,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,SAAmB,EAAE,CAAC;YACvF,GAAG,CAAC,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,QAAiB,EAAE,CAAC;YAClF,GAAG,CAAC,eAAe,KAAK,SAAS;gBAC/B,eAAe,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,YAAY,EAAE,eAAe,EAAE,CAAC;SACnE,CAAC,CAAC;QACH,oEAAoE;QACpE,MAAM,OAAO,GACX,UAAU,KAAK,SAAS;YACtB,CAAC,CAAC,MAAM,UAAU,CAAC,WAAW,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CACxD,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,EAAuB,CAAC,CAC1C;YACH,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QACtB,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;YACnC,OAAO,EAAE,IAAI,CAAC,UAAU,KAAK,SAAS;YACtC,GAAG,CAAC,IAAI,CAAC,UAAU,KAAK,SAAS,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,UAA+B,EAAE,CAAC;SAC3F,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,iDAAiD;IACjD,+CAA+C;IAC/C,iEAAiE;IACjE,iEAAiE;IACjE,kEAAkE;IAClE,mEAAmE;IACnE,iEAAiE;IACjE,kEAAkE;IAClE,0EAA0E;IAC1E,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;YAC3B,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,MAAM;gBAAE,OAAO,IAAI,EAAE,CAAC;YAC3C,MAAM,EAAE,GAAG,UAAU,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAC/C,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,GAAG,CAAC,UAAU,CAAsB,CAAC,CACxD,CAAC;YACF,OAAO,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QACrB,CAAC,CAAC,CAAC;QACH,CAAC,CAAC,GAAG,CAAC,aAAa,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;YACrC,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;YAC5B,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,QAAQ;gBAAE,OAAO,IAAI,EAAE,CAAC;YACjF,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YAC3C,MAAM,MAAM,GAAG,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;YACpF,MAAM,EAAE,GAAG,UAAU,CAAC,SAAS,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;YACzE,OAAO,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QACrB,CAAC,CAAC,CAAC;QACH,yEAAyE;QACzE,CAAC,CAAC,GAAG,CAAC,yBAAyB,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;YACjD,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YAC3C,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;YACzD,MAAM,EAAE,GAAG,UAAU,CAAC,SAAS,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;YACzE,OAAO,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QACrB,CAAC,CAAC,CAAC;QACH,CAAC,CAAC,GAAG,CAAC,iCAAiC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;YACzD,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YAC3C,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;YACzD,MAAM,EAAE,GAAG,UAAU,CAAC,SAAS,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;YACzE,OAAO,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QACrB,CAAC,CAAC,CAAC;IACL,CAAC;IACD,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACtB,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACrC,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,UAAU,CAAa,CAAC;QAE/C,IAAI,IAAa,CAAC;QAClB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,CAAU,CAAC,CAAC;YAC1C,OAAO,CAAC,CAAC,IAAI,CACX,WAAW,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,iCAAiC,EAAE,EAAE,SAAS,CAAC,CAC1F,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC9C,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,CAAU,CAAC,CAAC;YAC1C,OAAO,CAAC,CAAC,IAAI,CACX,WAAW,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,gCAAgC,EAAE,EAAE,SAAS,CAAC,CACzF,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,GAAG,IAA+B,CAAC;QAC1C,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtD,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,CAAU,CAAC,CAAC;YAC1C,OAAO,CAAC,CAAC,IAAI,CACX,WAAW,CACT,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,mDAAmD,EAAE,EACnF,SAAS,CACV,CACF,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtD,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,CAAU,CAAC,CAAC;YAC1C,OAAO,CAAC,CAAC,IAAI,CACX,WAAW,CACT,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,mDAAmD,EAAE,EACnF,SAAS,CACV,CACF,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,CAAC,WAAW,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;YACrE,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,CAAU,CAAC,CAAC;YAC1C,OAAO,CAAC,CAAC,IAAI,CACX,WAAW,CACT,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,6CAA6C,EAAE,EAC7E,SAAS,CACV,CACF,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YACzD,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,CAAU,CAAC,CAAC;YAC1C,OAAO,CAAC,CAAC,IAAI,CACX,WAAW,CACT,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,uCAAuC,EAAE,EACvE,SAAS,CACV,CACF,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YAClE,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,CAAU,CAAC,CAAC;YAC1C,OAAO,CAAC,CAAC,IAAI,CACX,WAAW,CACT,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,4CAA4C,EAAE,EAC5E,SAAS,CACV,CACF,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAgB;YACxB,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,GAAG,CAAC,CAAC,CAAC,WAAW,KAAK,SAAS,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,WAAqB,EAAE,CAAC;YAC5E,GAAG,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAyB,EAAE,CAAC;YACpE,GAAG,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,SAAoB,EAAE,CAAC;SACxE,CAAC;QACF,oEAAoE;QACpE,wEAAwE;QACxE,qEAAqE;QACrE,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAA0B,CAAC;YAC9D,MAAM,aAAa,GACjB,SAAS,EAAE,KAAK,CAAC,IAAI,KAAK,MAAM;gBAC9B,CAAC,CAAE,SAAS,CAAC,KAAK,CAAC,EAAa;gBAChC,CAAC,CAAE,sCAAiD,CAAC;YACzD,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;YACtF,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;gBAC1B,MAAM,IAAI,GACR,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,eAAe;oBACnC,CAAC,CAAC,eAAe;oBACjB,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,kBAAkB;wBACxC,CAAC,CAAC,gCAAgC;wBAClC,CAAC,CAAC,uBAAuB,CAAC;gBAChC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAU,CAAC,CAAC;gBACnC,OAAO,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC;YACjF,CAAC;YACD,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACd,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,SAA8B,EAAE,CAAC,CAAC;QACrE,CAAC;QACD,kEAAkE;QAClE,yBAAyB;QACzB,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAChD,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACd,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,EAAuB,EAAE,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,oDAAoD;IACpD,oEAAoE;IACpE,SAAS;IACT,CAAC,CAAC,GAAG,CAAC,yBAAyB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC3C,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACrC,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,UAAU,CAAa,CAAC;QAC/C,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAc,CAAC;QAExD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QACvD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,mBAAmB,CAAU,CAAC,CAAC;YAClD,OAAO,CAAC,CAAC,IAAI,CACX,WAAW,CACT;gBACE,IAAI,EAAE,mBAAmB;gBACzB,OAAO,EAAE,uBAAuB,SAA8B,GAAG;gBACjE,SAAS,EAAE,SAA8B;aAC1C,EACD,SAAS,CACV,CACF,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAC/C,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACxC,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE;YAC7D,KAAK;YACL,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,SAAmB,EAAE,CAAC;SACxF,CAAC,CAAC;QACH,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,0BAA0B,CAAC;YAChD,OAAO,EAAE,IAAI,CAAC,UAAU,KAAK,SAAS;YACtC,GAAG,CAAC,IAAI,CAAC,UAAU,KAAK,SAAS,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,UAA+B,EAAE,CAAC;SAC3F,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,qDAAqD;IACrD,CAAC,CAAC,IAAI,CAAC,yBAAyB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC5C,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACrC,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,UAAU,CAAa,CAAC;QAC/C,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAc,CAAC;QAExD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QACvD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,mBAAmB,CAAU,CAAC,CAAC;YAClD,OAAO,CAAC,CAAC,IAAI,CACX,WAAW,CACT;gBACE,IAAI,EAAE,mBAAmB;gBACzB,OAAO,EAAE,uBAAuB,SAA8B,GAAG;gBACjE,SAAS,EAAE,SAA8B;aAC1C,EACD,SAAS,CACV,CACF,CAAC;QACJ,CAAC;QACD,IAAI,IAAa,CAAC;QAClB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,CAAU,CAAC,CAAC;YAC1C,OAAO,CAAC,CAAC,IAAI,CACX,WAAW,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,iCAAiC,EAAE,EAAE,SAAS,CAAC,CAC1F,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC9C,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,CAAU,CAAC,CAAC;YAC1C,OAAO,CAAC,CAAC,IAAI,CACX,WAAW,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,gCAAgC,EAAE,EAAE,SAAS,CAAC,CACzF,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,GAAG,IAA+B,CAAC;QAC1C,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1D,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,CAAU,CAAC,CAAC;YAC1C,OAAO,CAAC,CAAC,IAAI,CACX,WAAW,CACT,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,qDAAqD,EAAE,EACrF,SAAS,CACV,CACF,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,CAAU,CAAC,CAAC;YAC1C,OAAO,CAAC,CAAC,IAAI,CACX,WAAW,CACT;gBACE,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE,6DAA6D;aACvE,EACD,SAAS,CACV,CACF,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,oEAAoE;YACpE,kEAAkE;YAClE,kCAAkC;YAClC,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;gBAC7B,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,gBAAgB,CAAC;oBACjD,QAAQ;oBACR,SAAS;oBACT,MAAM,EAAE,CAAC,CAAC,MAA2B;oBACrC,IAAI,EAAE,CAAC,CAAC,IAAmB;iBAC5B,CAAC,CAAC;gBACH,IAAI,GAAG,CAAC,IAAI,KAAK,KAAK;oBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC7D,CAAC;iBAAM,CAAC;gBACN,MAAM,iBAAiB,CAAC,GAAG,CAAC,QAAQ,EAAE;oBACpC,SAAS;oBACT,MAAM,EAAE,CAAC,CAAC,MAA2B;oBACrC,IAAI,EAAE,CAAC,CAAC,IAAI;iBACb,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,IAAI,OAAO,CAAC,UAAU,CAAC,mBAAmB,CAAC,EAAE,CAAC;gBAC5C,8DAA8D;gBAC9D,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,mBAAmB,CAAU,CAAC,CAAC;gBAClD,OAAO,CAAC,CAAC,IAAI,CACX,WAAW,CACT;oBACE,IAAI,EAAE,mBAAmB;oBACzB,OAAO,EAAE,uBAAuB,SAA8B,GAAG;oBACjE,SAAS,EAAE,SAA8B;iBAC1C,EACD,SAAS,CACV,CACF,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;QACD,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACd,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,SAAS,EAAE,SAA8B;YACzC,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,IAAI,EAAE,CAAC,CAAC,IAAI;SACb,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,+DAA+D;IAC/D,CAAC,CAAC,MAAM,CAAC,iCAAiC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACtD,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,UAAU,CAAa,CAAC;QAC/C,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAc,CAAC;QACxD,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAW,CAAC;QAC/C,MAAM,iBAAiB,CAAC,MAAM,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;QAC5D,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACd,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC,CAAC,CAAC;IAEH,8DAA8D;IAC9D,CAAC,CAAC,KAAK,CAAC,iCAAiC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACrD,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACrC,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,UAAU,CAAa,CAAC;QAC/C,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAc,CAAC;QACxD,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAW,CAAC;QAE/C,IAAI,IAAa,CAAC;QAClB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,CAAU,CAAC,CAAC;YAC1C,OAAO,CAAC,CAAC,IAAI,CACX,WAAW,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,iCAAiC,EAAE,EAAE,SAAS,CAAC,CAC1F,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC9C,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,CAAU,CAAC,CAAC;YAC1C,OAAO,CAAC,CAAC,IAAI,CACX,WAAW,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,gCAAgC,EAAE,EAAE,SAAS,CAAC,CACzF,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,GAAG,IAA+B,CAAC;QAC1C,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,CAAU,CAAC,CAAC;YAC1C,OAAO,CAAC,CAAC,IAAI,CACX,WAAW,CACT;gBACE,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE,6DAA6D;aACvE,EACD,SAAS,CACV,CACF,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,MAAM,iBAAiB,CAAC,UAAU,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QAC1E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,IAAI,OAAO,CAAC,UAAU,CAAC,8BAA8B,CAAC,EAAE,CAAC;gBACvD,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,8BAA8B,CAAU,CAAC,CAAC;gBAC7D,OAAO,CAAC,CAAC,IAAI,CACX,WAAW,CACT;oBACE,IAAI,EAAE,8BAA8B;oBACpC,OAAO,EAAE,8BAA8B,SAA8B,aAAa,MAA2B,GAAG;oBAChH,SAAS,EAAE,SAA8B;oBACzC,MAAM,EAAE,MAA2B;iBACpC,EACD,SAAS,CACV,CACF,CAAC;YACJ,CAAC;YACD,IAAI,OAAO,CAAC,UAAU,CAAC,mBAAmB,CAAC,EAAE,CAAC;gBAC5C,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,mBAAmB,CAAU,CAAC,CAAC;gBAClD,OAAO,CAAC,CAAC,IAAI,CACX,WAAW,CACT;oBACE,IAAI,EAAE,mBAAmB;oBACzB,OAAO,EAAE,uBAAuB,SAA8B,GAAG;oBACjE,SAAS,EAAE,SAA8B;iBAC1C,EACD,SAAS,CACV,CACF,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;QACD,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACd,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC,CAAC,CAAC;IAEH,wCAAwC;IACxC,CAAC,CAAC,GAAG,CAAC,aAAa,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC/B,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACrC,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,UAAU,CAAa,CAAC;QAC/C,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAc,CAAC;QAExD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QACvD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,mBAAmB,CAAU,CAAC,CAAC;YAClD,OAAO,CAAC,CAAC,IAAI,CACX,WAAW,CACT;gBACE,IAAI,EAAE,mBAAmB;gBACzB,OAAO,EAAE,uBAAuB,SAA8B,GAAG;gBACjE,SAAS,EAAE,SAA8B;aAC1C,EACD,SAAS,CACV,CACF,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,0CAA0C;IAC1C,CAAC,CAAC,KAAK,CAAC,aAAa,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACjC,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACrC,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,UAAU,CAAa,CAAC;QAC/C,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAc,CAAC;QAExD,IAAI,IAAa,CAAC;QAClB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,CAAU,CAAC,CAAC;YAC1C,OAAO,CAAC,CAAC,IAAI,CACX,WAAW,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,iCAAiC,EAAE,EAAE,SAAS,CAAC,CAC1F,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC9C,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,CAAU,CAAC,CAAC;YAC1C,OAAO,CAAC,CAAC,IAAI,CACX,WAAW,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,gCAAgC,EAAE,EAAE,SAAS,CAAC,CACzF,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,GAAG,IAA+B,CAAC;QAC1C,MAAM,MAAM,GAA6D,EAAE,CAAC;QAC5E,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACzB,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC/B,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,CAAU,CAAC,CAAC;gBAC1C,OAAO,CAAC,CAAC,IAAI,CACX,WAAW,CACT,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,sCAAsC,EAAE,EACtE,SAAS,CACV,CACF,CAAC;YACJ,CAAC;YACD,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC;QACvB,CAAC;QACD,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACzB,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC/B,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,CAAU,CAAC,CAAC;gBAC1C,OAAO,CAAC,CAAC,IAAI,CACX,WAAW,CACT,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,sCAAsC,EAAE,EACtE,SAAS,CACV,CACF,CAAC;YACJ,CAAC;YACD,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC;QACvB,CAAC;QACD,IAAI,CAAC,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YAChC,IAAI,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;gBACtC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,CAAU,CAAC,CAAC;gBAC1C,OAAO,CAAC,CAAC,IAAI,CACX,WAAW,CACT,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,6CAA6C,EAAE,EAC7E,SAAS,CACV,CACF,CAAC;YACJ,CAAC;YACD,MAAM,CAAC,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC;QACrC,CAAC;QACD,IAAI,OAAO,IAAI,CAAC,EAAE,CAAC;YACjB,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC;YACpB,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;gBACjB,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC;YACtB,CAAC;iBAAM,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;gBACnC,MAAM,CAAC,KAAK,GAAG,GAAuB,CAAC;YACzC,CAAC;iBAAM,CAAC;gBACN,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,CAAU,CAAC,CAAC;gBAC1C,OAAO,CAAC,CAAC,IAAI,CACX,WAAW,CACT,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,+CAA+C,EAAE,EAC/E,SAAS,CACV,CACF,CAAC;YACJ,CAAC;QACH,CAAC;QACD,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;QACpD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,IAAI,OAAO,CAAC,UAAU,CAAC,mBAAmB,CAAC,EAAE,CAAC;gBAC5C,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,mBAAmB,CAAU,CAAC,CAAC;gBAClD,OAAO,CAAC,CAAC,IAAI,CACX,WAAW,CACT;oBACE,IAAI,EAAE,mBAAmB;oBACzB,OAAO,EAAE,uBAAuB,SAA8B,GAAG;oBACjE,SAAS,EAAE,SAA8B;iBAC1C,EACD,SAAS,CACV,CACF,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;QACD,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACd,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC,CAAC,CAAC;IAEH,2CAA2C;IAC3C,CAAC,CAAC,MAAM,CAAC,aAAa,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAClC,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,UAAU,CAAa,CAAC;QAC/C,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAc,CAAC;QACxD,MAAM,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAC1C,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACd,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,aAAa,CAAC,CAAU;IAC/B,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,QAAQ,CAAC;AAC9F,CAAC;AAED,SAAS,gBAAgB,CAAC,CAAU;IAClC,OAAO;QACL,EAAE,EAAE,CAAC,CAAC,EAAuB;QAC7B,QAAQ,EAAE,CAAC,CAAC,QAA6B;QACzC,GAAG,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAA0B,EAAE,CAAC;QACrE,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,GAAG,CAAC,CAAC,CAAC,WAAW,KAAK,SAAS,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAClE,SAAS,EAAE,CAAC,CAAC,SAA8B;QAC3C,SAAS,EAAE,CAAC,CAAC,SAA8B;KAC5C,CAAC;AACJ,CAAC;AAED,SAAS,0BAA0B,CAAC,CAAoB;IACtD,OAAO;QACL,SAAS,EAAE,CAAC,CAAC,SAA8B;QAC3C,MAAM,EAAE,CAAC,CAAC,MAA2B;QACrC,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,QAAQ,EAAE,CAAC,CAAC,QAA6B;KAC1C,CAAC;AACJ,CAAC"}

package/dist/routes/proposals.d.ts

@@ -0,0 +1,24 @@
+import { Hono } from 'hono';
+import type { SupervisorBinding } from '../supervisor-binding.js';
+import type { AppEnv } from '../types.js';
+/**
+ * Supervisor proposals resource. Ships the full self-fix lifecycle
+ * over HTTP: draft → dry-run → submit-review → apply / rollback /
+ * withdraw — the complete supervisor loop.
+ *
+ * Persistence + runtime wiring is caller-plugged via
+ * `SupervisorBinding` — the API package doesn't own supervisor
+ * runtime, agent registry, HITL wiring, or eval invocation.
+ *
+ * `supervisorId` scoping: every route requires an `X-Supervisor-Id`
+ * request header. Missing / empty → `400 supervisor-header-missing`.
+ *
+ * State transitions: attempts to advance a proposal from a status
+ * the runtime won't accept (e.g., apply on a proposal still in
+ * `dry-running`) surface as `409 proposal-invalid-state-transition`.
+ * This is a caller/state conflict per `docs/API-ROUTE-CONVENTIONS.md`
+ * §4.3 — the request was well-formed but the resource is not in
+ * the required state.
+ */
+export declare function proposalsRouter(binding: SupervisorBinding): Hono<AppEnv>;
+//# sourceMappingURL=proposals.d.ts.map

package/dist/routes/proposals.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proposals.d.ts","sourceRoot":"","sources":["../../src/routes/proposals.ts"],"names":[],"mappings":"AAGA,OAAO,EAAgB,IAAI,EAAE,MAAM,MAAM,CAAC;AAY1C,OAAO,KAAK,EAMV,iBAAiB,EAClB,MAAM,0BAA0B,CAAC;AAClC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AA6B1C;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,iBAAiB,GAAG,IAAI,CAAC,MAAM,CAAC,CAuWxE"}