@kindgi/api 0.0.0-bootstrap.0 → 0.1.1

package/dist/routes/retention.js

@@ -0,0 +1,152 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (C) 2026 Kindgi Inc.
+import { Hono } from 'hono';
+import { ref } from '@kindgi/authz';
+import { RETENTION_DOMAINS } from '@kindgi/policy-contract';
+import { statusFor, toWireError } from '../errors.js';
+import { clampLimit } from './pagination.js';
+/**
+ * Retention resource routes — admin surface for the retention
+ * pipeline.
+ *
+ *   - `GET  /v1/retention/scheduled`      tombstoned rows scheduled for deletion
+ *                                         (`?pastGraceOnly=true`: only what a
+ *                                         sweep would purge now)
+ *   - `POST /v1/retention/sweep`          "purge every past-grace tombstone in this tenant"
+ *   - `POST /v1/retention/sweep/:domain`  same but narrowed to one domain
+ *
+ * PEP: reads and writes both require `admin` on `tenant:<tenantId>`,
+ * matching how the other tenant-scoped admin knobs gate.
+ */
+export function retentionRouter(binding, authorizer) {
+    const r = new Hono();
+    // Every retention op is tenant-admin only.
+    if (authorizer !== undefined) {
+        r.use('/*', async (c, next) => {
+            const tenantId = c.get('tenantId');
+            const mw = authorizer.authorize('admin', async () => ref('tenant', tenantId));
+            return mw(c, next);
+        });
+    }
+    r.get('/scheduled', async (c) => {
+        const requestId = c.get('requestId');
+        const tenantId = c.get('tenantId');
+        const url = new URL(c.req.url);
+        const domain = parseDomain(url.searchParams.get('domain'));
+        if (domain === 'invalid') {
+            c.status(statusFor('bad-input'));
+            return c.json(toWireError({
+                code: 'bad-input',
+                message: `\`domain\` must be one of: ${RETENTION_DOMAINS.join(', ')}`,
+            }, requestId));
+        }
+        const limit = clampLimit(url.searchParams.get('limit') ?? undefined);
+        const pastGraceRaw = url.searchParams.get('pastGraceOnly');
+        const pastGraceOnly = pastGraceRaw === 'true';
+        const page = await binding.scheduled({
+            tenantId,
+            limit,
+            pastGraceOnly,
+            ...(domain !== undefined && { domain }),
+        });
+        return c.json(page);
+    });
+    r.post('/sweep', async (c) => {
+        const requestId = c.get('requestId');
+        const tenantId = c.get('tenantId');
+        let body = {};
+        try {
+            const raw = await c.req.text();
+            if (raw.length > 0)
+                body = JSON.parse(raw);
+        }
+        catch {
+            c.status(statusFor('bad-input'));
+            return c.json(toWireError({ code: 'bad-input', message: 'Request body must be valid JSON' }, requestId));
+        }
+        if (typeof body !== 'object' || body === null) {
+            c.status(statusFor('bad-input'));
+            return c.json(toWireError({ code: 'bad-input', message: 'Request body must be an object' }, requestId));
+        }
+        const parsed = parseSweepBody(body);
+        if (parsed.kind === 'err') {
+            c.status(statusFor('bad-input'));
+            return c.json(toWireError({ code: 'bad-input', message: parsed.message }, requestId));
+        }
+        const result = await binding.sweep({
+            tenantId,
+            ...(parsed.value.domain !== undefined && { domain: parsed.value.domain }),
+            ...(parsed.value.maxPerDomain !== undefined && { maxPerDomain: parsed.value.maxPerDomain }),
+        });
+        return c.json(result);
+    });
+    r.post('/sweep/:domain', async (c) => {
+        const requestId = c.get('requestId');
+        const tenantId = c.get('tenantId');
+        const domain = parseDomain(c.req.param('domain'));
+        if (domain === undefined || domain === 'invalid') {
+            c.status(statusFor('bad-input'));
+            return c.json(toWireError({
+                code: 'bad-input',
+                message: `\`:domain\` must be one of: ${RETENTION_DOMAINS.filter((d) => d !== '*').join(', ')}`,
+            }, requestId));
+        }
+        let body = {};
+        try {
+            const raw = await c.req.text();
+            if (raw.length > 0)
+                body = JSON.parse(raw);
+        }
+        catch {
+            c.status(statusFor('bad-input'));
+            return c.json(toWireError({ code: 'bad-input', message: 'Request body must be valid JSON' }, requestId));
+        }
+        if (typeof body !== 'object' || body === null)
+            body = {};
+        const parsed = parseSweepBody(body);
+        if (parsed.kind === 'err') {
+            c.status(statusFor('bad-input'));
+            return c.json(toWireError({ code: 'bad-input', message: parsed.message }, requestId));
+        }
+        const result = await binding.sweep({
+            tenantId,
+            domain,
+            ...(parsed.value.maxPerDomain !== undefined && { maxPerDomain: parsed.value.maxPerDomain }),
+        });
+        return c.json(result);
+    });
+    return r;
+}
+function parseDomain(raw) {
+    if (raw === null || raw === undefined || raw === '')
+        return undefined;
+    if (RETENTION_DOMAINS.includes(raw))
+        return raw;
+    return 'invalid';
+}
+function parseSweepBody(body) {
+    const value = {};
+    if ('domain' in body) {
+        const parsed = parseDomain(String(body.domain));
+        if (parsed === 'invalid') {
+            return {
+                kind: 'err',
+                message: `\`domain\` must be one of: ${RETENTION_DOMAINS.join(', ')}`,
+            };
+        }
+        if (parsed !== undefined)
+            value.domain = parsed;
+    }
+    if ('maxPerDomain' in body) {
+        const n = body.maxPerDomain;
+        if (typeof n !== 'number' || !Number.isInteger(n) || n <= 0 || n > 10_000) {
+            return {
+                kind: 'err',
+                message: '`maxPerDomain` must be a positive integer ≤ 10000',
+            };
+        }
+        value.maxPerDomain = n;
+    }
+    return { kind: 'ok', value };
+}
+//# sourceMappingURL=retention.js.map

package/dist/routes/retention.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"retention.js","sourceRoot":"","sources":["../../src/routes/retention.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,iCAAiC;AAEjC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EAAE,GAAG,EAAE,MAAM,eAAe,CAAC;AACpC,OAAO,EAAE,iBAAiB,EAAwB,MAAM,yBAAyB,CAAC;AAGlF,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAItD,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAE7C;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,eAAe,CAAC,OAAyB,EAAE,UAAuB;IAChF,MAAM,CAAC,GAAG,IAAI,IAAI,EAAU,CAAC;IAE7B,2CAA2C;IAC3C,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;YAC5B,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,UAAU,CAAa,CAAC;YAC/C,MAAM,EAAE,GAAG,UAAU,CAAC,SAAS,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE,CAClD,GAAG,CAAC,QAAQ,EAAE,QAA6B,CAAC,CAC7C,CAAC;YACF,OAAO,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QACrB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,CAAC,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC9B,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACrC,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,UAAU,CAAa,CAAC;QAC/C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAE/B,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC3D,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,CAAU,CAAC,CAAC;YAC1C,OAAO,CAAC,CAAC,IAAI,CACX,WAAW,CACT;gBACE,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE,8BAA8B,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;aACtE,EACD,SAAS,CACV,CACF,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC,CAAC;QACrE,MAAM,YAAY,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QAC3D,MAAM,aAAa,GAAG,YAAY,KAAK,MAAM,CAAC;QAE9C,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC;YACnC,QAAQ;YACR,KAAK;YACL,aAAa;YACb,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,CAAC;SACxC,CAAC,CAAC;QAEH,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC,CAAC,CAAC;IAEH,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC3B,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACrC,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,UAAU,CAAa,CAAC;QAE/C,IAAI,IAAI,GAAY,EAAE,CAAC;QACvB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YAC/B,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;gBAAE,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,CAAU,CAAC,CAAC;YAC1C,OAAO,CAAC,CAAC,IAAI,CACX,WAAW,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,iCAAiC,EAAE,EAAE,SAAS,CAAC,CAC1F,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAC9C,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,CAAU,CAAC,CAAC;YAC1C,OAAO,CAAC,CAAC,IAAI,CACX,WAAW,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,gCAAgC,EAAE,EAAE,SAAS,CAAC,CACzF,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,cAAc,CAAC,IAA+B,CAAC,CAAC;QAC/D,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YAC1B,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,CAAU,CAAC,CAAC;YAC1C,OAAO,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC;QACxF,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC;YACjC,QAAQ;YACR,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACzE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,IAAI,EAAE,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;SAC5F,CAAC,CAAC;QACH,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,CAAC,CAAC,IAAI,CAAC,gBAAgB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACnC,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACrC,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,UAAU,CAAa,CAAC;QAC/C,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;QAClD,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACjD,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,CAAU,CAAC,CAAC;YAC1C,OAAO,CAAC,CAAC,IAAI,CACX,WAAW,CACT;gBACE,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE,+BAA+B,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;aAChG,EACD,SAAS,CACV,CACF,CAAC;QACJ,CAAC;QAED,IAAI,IAAI,GAAY,EAAE,CAAC;QACvB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YAC/B,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;gBAAE,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,CAAU,CAAC,CAAC;YAC1C,OAAO,CAAC,CAAC,IAAI,CACX,WAAW,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,iCAAiC,EAAE,EAAE,SAAS,CAAC,CAC1F,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI;YAAE,IAAI,GAAG,EAAE,CAAC;QAEzD,MAAM,MAAM,GAAG,cAAc,CAAC,IAA+B,CAAC,CAAC;QAC/D,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YAC1B,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,CAAU,CAAC,CAAC;YAC1C,OAAO,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC;QACxF,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC;YACjC,QAAQ;YACR,MAAM;YACN,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,IAAI,EAAE,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;SAC5F,CAAC,CAAC;QACH,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,WAAW,CAAC,GAA8B;IACjD,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IACtE,IAAK,iBAAuC,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,GAAsB,CAAC;IAC1F,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,cAAc,CAAC,IAA6B;IASnD,MAAM,KAAK,GAAwD,EAAE,CAAC;IACtE,IAAI,QAAQ,IAAI,IAAI,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QAChD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO;gBACL,IAAI,EAAE,KAAK;gBACX,OAAO,EAAE,8BAA8B,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;aACtE,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,KAAK,SAAS;YAAE,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC;IAClD,CAAC;IACD,IAAI,cAAc,IAAI,IAAI,EAAE,CAAC;QAC3B,MAAM,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC;QAC5B,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,MAAM,EAAE,CAAC;YAC1E,OAAO;gBACL,IAAI,EAAE,KAAK;gBACX,OAAO,EAAE,mDAAmD;aAC7D,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,YAAY,GAAG,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AAC/B,CAAC"}

package/dist/routes/reviewers.d.ts

@@ -0,0 +1,5 @@
+import { Hono } from 'hono';
+import type { ReviewerRegistryBinding } from '../reviewer-binding.js';
+import type { AppEnv } from '../types.js';
+export declare function reviewersRouter(binding: ReviewerRegistryBinding): Hono<AppEnv>;
+//# sourceMappingURL=reviewers.d.ts.map

package/dist/routes/reviewers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reviewers.d.ts","sourceRoot":"","sources":["../../src/routes/reviewers.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAM5B,OAAO,KAAK,EAAkB,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACtF,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAqB1C,wBAAgB,eAAe,CAAC,OAAO,EAAE,uBAAuB,GAAG,IAAI,CAAC,MAAM,CAAC,CAuH9E"}

package/dist/routes/reviewers.js

@@ -0,0 +1,161 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (C) 2026 Kindgi Inc.
+import { Hono } from 'hono';
+import { statusFor, toWireError } from '../errors.js';
+import { clampLimit } from './pagination.js';
+/**
+ * Reviewer roster routes — sub-resource under
+ * `/v1/approvals/reviewers`. Roster management is caller-plugged via
+ * `ReviewerRegistryBinding`; the API package does NOT own persistence.
+ *
+ * The routes deliberately live OUTSIDE the reviewer-role gate applied
+ * inside `approvalsRouter`: registering a reviewer is an admin surface
+ * action, not a reviewer-only one, so requiring a `reviewerRole` on the
+ * caller would be circular ("only reviewers can appoint reviewers").
+ * The caller still needs a valid bearer token — the `/v1/*` auth chain
+ * covers that upstream.
+ *
+ * Mounted BEFORE `approvalsRouter` on the parent `/v1` router so path
+ * matching resolves `/v1/approvals/reviewers/*` here rather than being
+ * captured by the `/:approvalId` param inside the approvals router.
+ */
+const ROLE_VALUES = new Set(['standard', 'senior', 'admin']);
+export function reviewersRouter(binding) {
+    const r = new Hono();
+    // ---------- GET / (list, cursor-paginated) ----------
+    r.get('/', async (c) => {
+        const requestId = c.get('requestId');
+        const tenantId = c.get('tenantId');
+        const limit = clampLimit(c.req.query('limit'));
+        const cursorRaw = c.req.query('cursor');
+        const roleRaw = c.req.query('role');
+        let roleFilter;
+        if (roleRaw !== undefined && roleRaw.length > 0) {
+            if (!ROLE_VALUES.has(roleRaw)) {
+                c.status(statusFor('bad-input'));
+                return c.json(toWireError({ code: 'bad-input', message: `Unknown \`role\` value: ${roleRaw}` }, requestId));
+            }
+            roleFilter = roleRaw;
+        }
+        const page = await binding.list({
+            tenantId,
+            limit,
+            ...(cursorRaw !== undefined && cursorRaw.length > 0 && { cursor: cursorRaw }),
+            ...(roleFilter !== undefined && { role: roleFilter }),
+        });
+        return c.json({
+            data: page.data.map(serializeReviewer),
+            hasMore: page.nextCursor !== undefined,
+            ...(page.nextCursor !== undefined && { nextCursor: page.nextCursor }),
+        });
+    });
+    // ---------- GET /:reviewerId ----------
+    r.get('/:reviewerId', async (c) => {
+        const requestId = c.get('requestId');
+        const tenantId = c.get('tenantId');
+        const reviewerId = c.req.param('reviewerId');
+        const reviewer = await binding.get({ tenantId, reviewerId });
+        if (reviewer === null) {
+            c.status(statusFor('reviewer-not-found'));
+            return c.json(toWireError({
+                code: 'reviewer-not-found',
+                message: `No reviewer registered with id "${reviewerId}"`,
+                reviewerId: reviewerId,
+            }, requestId));
+        }
+        return c.json(serializeReviewer(reviewer));
+    });
+    // ---------- POST / (register) ----------
+    r.post('/', async (c) => {
+        const requestId = c.get('requestId');
+        const tenantId = c.get('tenantId');
+        let body;
+        try {
+            body = await c.req.json();
+        }
+        catch {
+            c.status(statusFor('bad-input'));
+            return c.json(toWireError({ code: 'bad-input', message: 'Request body must be valid JSON' }, requestId));
+        }
+        const parsed = parseRegisterBody(body);
+        if (parsed.kind === 'err') {
+            c.status(statusFor('bad-input'));
+            return c.json(toWireError({ code: 'bad-input', message: parsed.message }, requestId));
+        }
+        const outcome = await binding.register({
+            tenantId,
+            userId: parsed.value.userId,
+            role: parsed.value.role,
+            ...(parsed.value.displayName !== undefined && { displayName: parsed.value.displayName }),
+        });
+        c.status(201);
+        return c.json(serializeReviewer(outcome.reviewer));
+    });
+    // ---------- POST /:reviewerId/unregister ----------
+    r.post('/:reviewerId/unregister', async (c) => {
+        const requestId = c.get('requestId');
+        const tenantId = c.get('tenantId');
+        const reviewerId = c.req.param('reviewerId');
+        const outcome = await binding.unregister({ tenantId, reviewerId });
+        if (!outcome.unregistered) {
+            c.status(statusFor('reviewer-not-found'));
+            return c.json(toWireError({
+                code: 'reviewer-not-found',
+                message: `No reviewer "${reviewerId}" to unregister`,
+                reviewerId: reviewerId,
+            }, requestId));
+        }
+        return c.json({
+            reviewerId: reviewerId,
+            unregistered: true,
+        });
+    });
+    return r;
+}
+function serializeReviewer(r) {
+    return {
+        id: r.id,
+        tenantId: r.tenantId,
+        userId: r.userId,
+        role: r.role,
+        ...(r.displayName !== undefined && { displayName: r.displayName }),
+        createdAt: r.createdAt,
+        ...(r.deactivatedAt !== undefined && {
+            deactivatedAt: r.deactivatedAt,
+        }),
+    };
+}
+function parseRegisterBody(body) {
+    if (body === null || typeof body !== 'object' || Array.isArray(body)) {
+        return { kind: 'err', message: 'Request body must be an object' };
+    }
+    const b = body;
+    const userId = b.userId;
+    if (typeof userId !== 'string' || userId.length === 0) {
+        return { kind: 'err', message: 'Field `userId` must be a non-empty string' };
+    }
+    const role = b.role;
+    if (typeof role !== 'string' || !ROLE_VALUES.has(role)) {
+        return { kind: 'err', message: 'Field `role` must be one of: standard, senior, admin' };
+    }
+    const displayNameRaw = b.displayName;
+    let displayName;
+    if (displayNameRaw !== undefined) {
+        if (typeof displayNameRaw !== 'string' || displayNameRaw.length === 0) {
+            return {
+                kind: 'err',
+                message: 'Field `displayName` must be a non-empty string when present',
+            };
+        }
+        displayName = displayNameRaw;
+    }
+    return {
+        kind: 'ok',
+        value: {
+            userId: userId,
+            role: role,
+            ...(displayName !== undefined && { displayName }),
+        },
+    };
+}
+//# sourceMappingURL=reviewers.js.map

package/dist/routes/reviewers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reviewers.js","sourceRoot":"","sources":["../../src/routes/reviewers.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,iCAAiC;AAEjC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAK5B,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAGtD,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAE7C;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,GAA8B,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;AAExF,MAAM,UAAU,eAAe,CAAC,OAAgC;IAC9D,MAAM,CAAC,GAAG,IAAI,IAAI,EAAU,CAAC;IAE7B,uDAAuD;IACvD,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACrB,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACrC,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,UAAU,CAAa,CAAC;QAC/C,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAE/C,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACxC,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAEpC,IAAI,UAAoC,CAAC;QACzC,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChD,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAuB,CAAC,EAAE,CAAC;gBAC9C,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,CAAU,CAAC,CAAC;gBAC1C,OAAO,CAAC,CAAC,IAAI,CACX,WAAW,CACT,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,2BAA2B,OAAO,EAAE,EAAE,EACpE,SAAS,CACV,CACF,CAAC;YACJ,CAAC;YACD,UAAU,GAAG,OAAuB,CAAC;QACvC,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;YAC9B,QAAQ;YACR,KAAK;YACL,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,SAAmB,EAAE,CAAC;YACvF,GAAG,CAAC,UAAU,KAAK,SAAS,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;SACtD,CAAC,CAAC;QACH,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC;YACtC,OAAO,EAAE,IAAI,CAAC,UAAU,KAAK,SAAS;YACtC,GAAG,CAAC,IAAI,CAAC,UAAU,KAAK,SAAS,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,UAA+B,EAAE,CAAC;SAC3F,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,yCAAyC;IACzC,CAAC,CAAC,GAAG,CAAC,cAAc,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAChC,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACrC,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,UAAU,CAAa,CAAC;QAC/C,MAAM,UAAU,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAe,CAAC;QAE3D,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC;QAC7D,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,oBAAoB,CAAU,CAAC,CAAC;YACnD,OAAO,CAAC,CAAC,IAAI,CACX,WAAW,CACT;gBACE,IAAI,EAAE,oBAAoB;gBAC1B,OAAO,EAAE,mCAAmC,UAA+B,GAAG;gBAC9E,UAAU,EAAE,UAA+B;aAC5C,EACD,SAAS,CACV,CACF,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,0CAA0C;IAC1C,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACtB,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACrC,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,UAAU,CAAa,CAAC;QAE/C,IAAI,IAAa,CAAC;QAClB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,CAAU,CAAC,CAAC;YAC1C,OAAO,CAAC,CAAC,IAAI,CACX,WAAW,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,iCAAiC,EAAE,EAAE,SAAS,CAAC,CAC1F,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YAC1B,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,CAAU,CAAC,CAAC;YAC1C,OAAO,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC;QACxF,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC;YACrC,QAAQ;YACR,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM;YAC3B,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI;YACvB,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,IAAI,EAAE,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;SACzF,CAAC,CAAC;QACH,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACd,OAAO,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,qDAAqD;IACrD,CAAC,CAAC,IAAI,CAAC,yBAAyB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC5C,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACrC,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,UAAU,CAAa,CAAC;QAC/C,MAAM,UAAU,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAe,CAAC;QAE3D,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC;QACnE,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;YAC1B,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,oBAAoB,CAAU,CAAC,CAAC;YACnD,OAAO,CAAC,CAAC,IAAI,CACX,WAAW,CACT;gBACE,IAAI,EAAE,oBAAoB;gBAC1B,OAAO,EAAE,gBAAgB,UAA+B,iBAAiB;gBACzE,UAAU,EAAE,UAA+B;aAC5C,EACD,SAAS,CACV,CACF,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,UAAU,EAAE,UAA+B;YAC3C,YAAY,EAAE,IAAI;SACnB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,iBAAiB,CAAC,CAAiB;IAC1C,OAAO;QACL,EAAE,EAAE,CAAC,CAAC,EAAuB;QAC7B,QAAQ,EAAE,CAAC,CAAC,QAA6B;QACzC,MAAM,EAAE,CAAC,CAAC,MAA2B;QACrC,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,GAAG,CAAC,CAAC,CAAC,WAAW,KAAK,SAAS,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAClE,SAAS,EAAE,CAAC,CAAC,SAA8B;QAC3C,GAAG,CAAC,CAAC,CAAC,aAAa,KAAK,SAAS,IAAI;YACnC,aAAa,EAAE,CAAC,CAAC,aAAkC;SACpD,CAAC;KACH,CAAC;AACJ,CAAC;AAQD,SAAS,iBAAiB,CACxB,IAAa;IAIb,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACrE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,gCAAgC,EAAE,CAAC;IACpE,CAAC;IACD,MAAM,CAAC,GAAG,IAA+B,CAAC;IAC1C,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;IACxB,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,2CAA2C,EAAE,CAAC;IAC/E,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC;IACpB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAoB,CAAC,EAAE,CAAC;QACvE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,sDAAsD,EAAE,CAAC;IAC1F,CAAC;IACD,MAAM,cAAc,GAAG,CAAC,CAAC,WAAW,CAAC;IACrC,IAAI,WAA+B,CAAC;IACpC,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACjC,IAAI,OAAO,cAAc,KAAK,QAAQ,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtE,OAAO;gBACL,IAAI,EAAE,KAAK;gBACX,OAAO,EAAE,6DAA6D;aACvE,CAAC;QACJ,CAAC;QACD,WAAW,GAAG,cAAc,CAAC;IAC/B,CAAC;IACD,OAAO;QACL,IAAI,EAAE,IAAI;QACV,KAAK,EAAE;YACL,MAAM,EAAE,MAAgB;YACxB,IAAI,EAAE,IAAoB;YAC1B,GAAG,CAAC,WAAW,KAAK,SAAS,IAAI,EAAE,WAAW,EAAE,CAAC;SAClD;KACF,CAAC;AACJ,CAAC"}

package/dist/routes/runs.d.ts

@@ -0,0 +1,34 @@
+import { Hono } from 'hono';
+import type { RunBinding } from '@kindgi/runtime';
+import type { RunId, TenantId } from '@kindgi/types';
+import type { EventBusBinding } from '../event-bus-binding.js';
+import type { RunHandlerBinding } from '../handler-binding.js';
+import type { Authorizer } from '../middleware/authorize.js';
+import type { MintPublicRunTokenResult } from '../public-run-token.js';
+import type { AppEnv } from '../types.js';
+/** Options for `runsRouter`. */
+export interface RunsRouterOptions {
+    /**
+     * Optional push-based event bus. When present, `GET /:runId/stream`
+     * subscribes on `kernel:run:<runId>` and delivers events
+     * push-mode. When absent, the route polls the run's journal every
+     * 200 ms — wire shape identical either way.
+     */
+    readonly eventBus?: EventBusBinding;
+    /**
+     * Issue public run tokens: `POST /` adds a `publicAccessToken` for the
+     * new run, for its progress routes.
+     */
+    readonly publicRunTokens?: {
+        readonly mint: (tenantId: TenantId, runIds: readonly RunId[]) => MintPublicRunTokenResult;
+    };
+}
+/**
+ * Runs resource routes (per `docs/API-ROUTE-CONVENTIONS.md` §7).
+ *
+ * Routes: `POST /` (start), `GET /:runId`, `GET /` (list),
+ * `POST /:runId/cancel`, `POST /:runId/resume`, `GET /:runId/stream`
+ * (SSE), `GET /:runId/journal`.
+ */
+export declare function runsRouter(binding: RunHandlerBinding, runBinding: RunBinding, options?: RunsRouterOptions, authorizer?: Authorizer): Hono<AppEnv>;
+//# sourceMappingURL=runs.d.ts.map

package/dist/routes/runs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runs.d.ts","sourceRoot":"","sources":["../../src/routes/runs.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAG5B,OAAO,KAAK,EAAkC,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAClF,OAAO,KAAK,EAA4B,KAAK,EAAU,QAAQ,EAAE,MAAM,eAAe,CAAC;AAKvF,OAAO,KAAK,EAAE,eAAe,EAA8B,MAAM,yBAAyB,CAAC;AAC3F,OAAO,KAAK,EACV,iBAAiB,EAGlB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AACvE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAc1C,gCAAgC;AAChC,MAAM,WAAW,iBAAiB;IAChC;;;;;OAKG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,eAAe,CAAC;IACpC;;;OAGG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE;QACzB,QAAQ,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,KAAK,EAAE,KAAK,wBAAwB,CAAC;KAC3F,CAAC;CACH;AAKD;;;;;;GAMG;AACH,wBAAgB,UAAU,CACxB,OAAO,EAAE,iBAAiB,EAC1B,UAAU,EAAE,UAAU,EACtB,OAAO,GAAE,iBAAsB,EAC/B,UAAU,CAAC,EAAE,UAAU,GACtB,IAAI,CAAC,MAAM,CAAC,CA8gBd"}