@kindgi/api 0.1.4 → 0.1.5-rc.0

package/dist/routes/identity.js

@@ -1,11 +1,12 @@
 // SPDX-License-Identifier: Apache-2.0
 // Copyright (C) 2026 Kindgi Inc.
 import { Hono } from 'hono';
+import { callerPrincipal, callerRef, isTenantAdmin, principalToWire } from '../caller.js';
 import { statusFor, toWireError } from '../errors.js';
 import { callerReviewerRole } from '../reviewer-role.js';
 import { clampLimit } from './pagination.js';
 export function identityRouter(options = {}) {
-    const { directory, sessionStore, reviewerBinding } = options;
+    const { directory, sessionStore, reviewerBinding, authorizer, personGrants } = options;
     const r = new Hono();
     // ---------- GET / whoami ----------
     // Mounted first so `/v1/identity/whoami` resolves here rather than
@@ -23,8 +24,21 @@ export function identityRouter(options = {}) {
         if (providerId !== undefined)
             body.providerId = providerId;
         body.scopes = scopes;
+        // Whether the caller is a tenant admin, as the admin routes decide it:
+        // what a console shows admin pages by (scopes are what a credential may
+        // do; admin is a role, from the authorizer when there is one). whoami
+        // is how a console starts, so an authorization store that can't answer
+        // leaves the field out (a console then reads `scopes`) instead of
+        // failing the whole answer.
+        try {
+            body.tenantAdmin = await isTenantAdmin(c, authorizer);
+        }
+        catch (cause) {
+            c.get('log').warn(`whoami: couldn't tell whether the caller is a tenant admin, so tenantAdmin is left out: ${cause instanceof Error ? cause.message : String(cause)}`);
+        }
         if (reviewerRole !== undefined)
             body.reviewerRole = reviewerRole;
+        Object.assign(body, keyFacts(c));
         if (userId !== undefined) {
             body.userId = userId;
             if (directory !== undefined) {
@@ -45,17 +59,24 @@ export function identityRouter(options = {}) {
         // `/users/*` routes fall through to the app-level 404.
         return r;
     }
-    // ---------- GET /users (list) ----------
+    // ---------- GET /users (list; tenant admins) ----------
+    // The people of a tenant, with their emails: a tenant admin's to read.
+    // Anyone else adds a person to a project by their email or id.
     r.get('/users', async (c) => {
+        if (!(await isTenantAdmin(c, authorizer))) {
+            return denied(c, "Only a tenant admin lists the tenant's people");
+        }
         const tenantId = c.get('tenantId');
         const limit = clampLimit(c.req.query('limit'));
         const cursorRaw = c.req.query('cursor');
         const queryRaw = c.req.query('query');
+        const includeUnregistered = c.req.query('includeUnregistered') === 'true';
         const page = await directory.listUsers({
             tenantId,
             limit,
             ...(cursorRaw !== undefined && cursorRaw.length > 0 && { cursor: cursorRaw }),
             ...(queryRaw !== undefined && queryRaw.length > 0 && { query: queryRaw }),
+            ...(includeUnregistered && { includeUnregistered: true }),
         });
         return c.json({
             data: page.data.map(serializeUser),
@@ -63,11 +84,46 @@ export function identityRouter(options = {}) {
             ...(page.nextCursor !== undefined && { nextCursor: page.nextCursor }),
         });
     });
-    // ---------- GET /users/:userId (get) ----------
+    // ---------- POST /users (add a person; tenant admins) ----------
+    const createUser = directory.createUser?.bind(directory);
+    if (createUser !== undefined) {
+        r.post('/users', async (c) => {
+            const requestId = c.get('requestId');
+            if (!(await isTenantAdmin(c, authorizer))) {
+                c.status(statusFor('permission-denied'));
+                return c.json(toWireError({ code: 'permission-denied', message: 'Only a tenant admin adds people' }, requestId));
+            }
+            const parsed = parseCreateUser(await c.req.json().catch(() => undefined));
+            if (typeof parsed === 'string') {
+                c.status(statusFor('bad-input'));
+                return c.json(toWireError({ code: 'bad-input', message: parsed }, requestId));
+            }
+            const createdBy = callerRef(c);
+            const outcome = await createUser({
+                tenantId: c.get('tenantId'),
+                ...parsed,
+                ...(createdBy !== undefined && { createdBy }),
+            });
+            if (outcome.kind === 'email-taken') {
+                c.status(statusFor('identity-user-email-taken'));
+                return c.json(toWireError({
+                    code: 'identity-user-email-taken',
+                    message: 'Another person of this tenant has that email',
+                    userId: outcome.userId,
+                }, requestId));
+            }
+            c.status(201);
+            return c.json(serializeUser(outcome.user));
+        });
+    }
+    // ---------- GET /users/:userId (get; a tenant admin, or your own) ----------
     r.get('/users/:userId', async (c) => {
         const requestId = c.get('requestId');
         const tenantId = c.get('tenantId');
         const userId = c.req.param('userId');
+        if (!isOwn(c, userId) && !(await isTenantAdmin(c, authorizer))) {
+            return denied(c, "Only a tenant admin reads someone else's record");
+        }
         const user = await directory.getUser({ tenantId, userId });
         if (user === null) {
             c.status(statusFor('identity-user-not-found'));
@@ -79,10 +135,13 @@ export function identityRouter(options = {}) {
         }
         return c.json(serializeUser(user));
     });
-    // ---------- GET /users/:userId/sessions (list active sessions) ----------
+    // ---------- GET /users/:userId/sessions (a tenant admin, or your own) ----------
     r.get('/users/:userId/sessions', async (c) => {
         const tenantId = c.get('tenantId');
         const userId = c.req.param('userId');
+        if (!isOwn(c, userId) && !(await isTenantAdmin(c, authorizer))) {
+            return denied(c, "Only a tenant admin reads someone else's sessions");
+        }
         const page = await directory.listSessions({ tenantId, userId });
         return c.json({
             data: page.data.map(serializeSession),
@@ -90,14 +149,66 @@ export function identityRouter(options = {}) {
             ...(page.nextCursor !== undefined && { nextCursor: page.nextCursor }),
         });
     });
-    // ---------- POST /users/:userId/revoke-sessions (admin) ----------
+    // ---------- POST /users/:userId/unregister (remove a person; tenant admins) ----------
+    const unregisterUser = directory.unregisterUser?.bind(directory);
+    if (unregisterUser !== undefined) {
+        r.post('/users/:userId/unregister', async (c) => {
+            const requestId = c.get('requestId');
+            const userId = c.req.param('userId');
+            if (!(await isTenantAdmin(c, authorizer))) {
+                c.status(statusFor('permission-denied'));
+                return c.json(toWireError({ code: 'permission-denied', message: 'Only a tenant admin removes people' }, requestId));
+            }
+            const unregisteredBy = callerRef(c);
+            const outcome = await unregisterUser({
+                tenantId: c.get('tenantId'),
+                userId,
+                ...(unregisteredBy !== undefined && { unregisteredBy }),
+            });
+            if (outcome.kind === 'not-found') {
+                c.status(statusFor('identity-user-not-found'));
+                return c.json(toWireError({
+                    code: 'identity-user-not-found',
+                    message: `No user with id "${userId}" under this tenant`,
+                    userId: userId,
+                }, requestId));
+            }
+            if (outcome.kind === 'refused') {
+                const code = outcome.reason === 'last-tenant-admin'
+                    ? 'last-tenant-admin'
+                    : 'identity-user-unregister-refused';
+                c.status(statusFor(code));
+                return c.json(toWireError({
+                    code,
+                    message: outcome.message,
+                    reason: outcome.reason,
+                    userId: userId,
+                }, requestId));
+            }
+            return c.json({
+                user: serializeUser(outcome.user),
+                keysRevoked: outcome.keysRevoked,
+                sessionsRevoked: outcome.sessionsRevoked,
+                grantsRemoved: outcome.grantsRemoved,
+            });
+        });
+    }
+    // ---------- POST /users/:userId/revoke-sessions (admin, or your own) ----------
     r.post('/users/:userId/revoke-sessions', async (c) => {
         const requestId = c.get('requestId');
         const tenantId = c.get('tenantId');
         const userId = c.req.param('userId');
+        if (!isOwn(c, userId) && !(await isTenantAdmin(c, authorizer))) {
+            return denied(c, "Only a tenant admin revokes someone else's sessions");
+        }
         let outcome;
         try {
-            outcome = await directory.revokeAllSessions({ tenantId, userId });
+            const revokedBy = callerRef(c);
+            outcome = await directory.revokeAllSessions({
+                tenantId,
+                userId,
+                ...(revokedBy !== undefined && { revokedBy }),
+            });
         }
         catch (err) {
             c.status(statusFor('identity-revoke-failed'));
@@ -112,8 +223,99 @@ export function identityRouter(options = {}) {
             revokedCount: outcome.revokedCount,
         });
     });
+    mountPersonGrants(r, personGrants, authorizer);
     return r;
 }
+const unsupported = (c) => {
+    c.status(statusFor('person-grants-unsupported'));
+    return c.json(toWireError({
+        code: 'person-grants-unsupported',
+        message: "This runtime doesn't read or write a person's grants: it runs without an authorization store",
+    }, c.get('requestId')));
+};
+/** Whether `userId` is the caller's own. */
+const isOwn = (c, userId) => c.get('userId') === userId;
+const denied = (c, message) => {
+    c.status(statusFor('permission-denied'));
+    return c.json(toWireError({ code: 'permission-denied', message }, c.get('requestId')));
+};
+/**
+ * `GET /users/:userId/grants` (a tenant admin, or the person), and
+ * `POST /users/:userId/grant|ungrant` (tenant admins): `{kind:
+ * 'tenant-admin'}`, written before the call answers.
+ */
+function mountPersonGrants(r, binding, authorizer) {
+    r.get('/users/:userId/grants', async (c) => {
+        const userId = c.req.param('userId');
+        if (!isOwn(c, userId) && !(await isTenantAdmin(c, authorizer))) {
+            return denied(c, "Only a tenant admin reads someone else's grants");
+        }
+        if (binding === undefined)
+            return unsupported(c);
+        const grants = await binding.read({ tenantId: c.get('tenantId'), userId });
+        if (grants === null)
+            return notFound(c, userId);
+        return c.json(serializePersonGrants(grants));
+    });
+    for (const action of ['grant', 'ungrant']) {
+        r.post(`/users/:userId/${action}`, async (c) => {
+            if (!(await isTenantAdmin(c, authorizer))) {
+                return denied(c, "Only a tenant admin changes a person's grants");
+            }
+            const grant = parsePersonGrant(await c.req.json().catch(() => undefined));
+            if (typeof grant === 'string') {
+                c.status(statusFor('bad-input'));
+                return c.json(toWireError({ code: 'bad-input', message: grant }, c.get('requestId')));
+            }
+            if (binding === undefined)
+                return unsupported(c);
+            const by = callerRef(c);
+            const result = await binding[action]({
+                tenantId: c.get('tenantId'),
+                userId: c.req.param('userId'),
+                grant,
+                ...(by !== undefined && { by }),
+            });
+            if (result.kind === 'err')
+                return grantError(c, result.error);
+            return c.json(serializePersonGrants(result.value));
+        });
+    }
+}
+function notFound(c, userId) {
+    c.status(statusFor('identity-user-not-found'));
+    return c.json(toWireError({
+        code: 'identity-user-not-found',
+        message: `No user with id "${userId}" under this tenant`,
+        userId,
+    }, c.get('requestId')));
+}
+function grantError(c, error) {
+    c.status(statusFor(error.code));
+    return c.json(toWireError({ code: error.code, message: error.message }, c.get('requestId')));
+}
+/** `{kind: 'tenant-admin'}`, or why not. */
+function parsePersonGrant(raw) {
+    const b = raw;
+    if (typeof b !== 'object' ||
+        b === null ||
+        Array.isArray(b) ||
+        b.kind !== 'tenant-admin' ||
+        Object.keys(b).length !== 1) {
+        return "The body must be { kind: 'tenant-admin' }: a person's project and team roles have their own routes (`/v1/projects/{projectId}/memberships`, `/v1/teams/{teamId}/memberships`)";
+    }
+    return { kind: 'tenant-admin' };
+}
+function serializePersonGrants(g) {
+    return {
+        userId: g.userId,
+        ...(g.tenantAdmin !== undefined && { tenantAdmin: g.tenantAdmin }),
+        ...(g.tenantMember !== undefined && { tenantMember: g.tenantMember }),
+        projects: g.projects.map((p) => ({ projectId: p.projectId, role: p.role })),
+        teams: g.teams.map((t) => ({ teamId: t.teamId, role: t.role })),
+        ...(g.reviewer !== undefined && { reviewer: { role: g.reviewer.role } }),
+    };
+}
 function serializeUser(u) {
     return {
         userId: u.userId,
@@ -122,6 +324,9 @@ function serializeUser(u) {
         ...(u.displayName !== undefined && { displayName: u.displayName }),
         createdAt: u.createdAt,
         ...(u.lastActiveAt !== undefined && { lastActiveAt: u.lastActiveAt }),
+        ...(u.unregisteredAt !== undefined && {
+            unregisteredAt: u.unregisteredAt,
+        }),
         ...(u.metadata !== undefined && { metadata: u.metadata }),
     };
 }
@@ -136,4 +341,39 @@ function serializeSession(s) {
         ...(s.revokedAt !== undefined && { revokedAt: s.revokedAt }),
     };
 }
+/**
+ * What an API key adds to whoami: whom it acts for, its id, and what it's
+ * limited to, so a client can say "you're acme-ci, limited to project X".
+ */
+function keyFacts(c) {
+    const principal = callerPrincipal(c);
+    const tokenId = c.get('tokenId');
+    const role = c.get('tokenRole');
+    const projectId = c.get('tokenProjectId');
+    return {
+        ...(principal !== undefined && { principal: principalToWire(principal) }),
+        ...(tokenId !== undefined && { tokenId }),
+        ...(role !== undefined && { role }),
+        ...(projectId !== undefined && { projectId }),
+    };
+}
+const MAX_NAME_LENGTH = 200;
+/** `{displayName, primaryEmail?}`, or why not. */
+function parseCreateUser(raw) {
+    if (raw === null || typeof raw !== 'object' || Array.isArray(raw)) {
+        return 'Request body must be a JSON object';
+    }
+    const b = raw;
+    if (typeof b.displayName !== 'string' ||
+        b.displayName.trim() === '' ||
+        b.displayName.length > MAX_NAME_LENGTH) {
+        return `\`displayName\` must be a non-empty string of at most ${MAX_NAME_LENGTH} characters`;
+    }
+    if (b.primaryEmail === undefined)
+        return { displayName: b.displayName.trim() };
+    if (typeof b.primaryEmail !== 'string' || !/^[^@\s]+@[^@\s]+$/.test(b.primaryEmail)) {
+        return '`primaryEmail` must be an email address';
+    }
+    return { displayName: b.displayName.trim(), primaryEmail: b.primaryEmail };
+}
 //# sourceMappingURL=identity.js.map

package/dist/routes/identity.js.map

@@ -1 +1 @@
-{"version":3,"file":"identity.js","sourceRoot":"","sources":["../../src/routes/identity.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,iCAAiC;AAEjC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAI5B,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAOtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAGzD,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AA0C7C,MAAM,UAAU,cAAc,CAAC,UAAiC,EAAE;IAChE,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,eAAe,EAAE,GAAG,OAAO,CAAC;IAC7D,MAAM,CAAC,GAAG,IAAI,IAAI,EAAU,CAAC;IAE7B,qCAAqC;IACrC,mEAAmE;IACnE,8DAA8D;IAC9D,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC3B,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,UAAU,CAAa,CAAC;QAC/C,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAA0B,CAAC;QAC9D,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAuB,CAAC;QACrD,MAAM,UAAU,GAAG,CAAC,CAAC,GAAG,CAAC,YAAY,CAAuB,CAAC;QAC7D,MAAM,MAAM,GAAI,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAmC,IAAI,EAAE,CAAC;QACxE,MAAM,YAAY,GAAG,MAAM,kBAAkB,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC;QAElE,MAAM,IAAI,GAA4B,EAAE,QAAQ,EAAE,CAAC;QACnD,IAAI,SAAS,KAAK,SAAS;YAAE,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QACxD,IAAI,UAAU,KAAK,SAAS;YAAE,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC3D,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,YAAY,KAAK,SAAS;YAAE,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;QAEjE,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;YACrB,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;gBAC3D,IAAI,IAAI,KAAK,IAAI;oBAAE,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;YACrD,CAAC;QACH,CAAC;QAED,IAAI,SAAS,KAAK,SAAS,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;YAC1D,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC;YAChE,IAAI,OAAO,KAAK,IAAI;gBAAE,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QAC3D,CAAC;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC,CAAC,CAAC;IAEH,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,2DAA2D;QAC3D,uDAAuD;QACvD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,0CAA0C;IAC1C,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC1B,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,UAAU,CAAa,CAAC;QAC/C,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAC/C,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACxC,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAEtC,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,SAAS,CAAC;YACrC,QAAQ;YACR,KAAK;YACL,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,SAAmB,EAAE,CAAC;YACvF,GAAG,CAAC,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;SAC1E,CAAC,CAAC;QACH,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC;YAClC,OAAO,EAAE,IAAI,CAAC,UAAU,KAAK,SAAS;YACtC,GAAG,CAAC,IAAI,CAAC,UAAU,KAAK,SAAS,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,UAA+B,EAAE,CAAC;SAC3F,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,iDAAiD;IACjD,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAClC,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACrC,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,UAAU,CAAa,CAAC;QAC/C,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAW,CAAC;QAE/C,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QAC3D,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,yBAAyB,CAAU,CAAC,CAAC;YACxD,OAAO,CAAC,CAAC,IAAI,CACX,WAAW,CACT;gBACE,IAAI,EAAE,yBAAyB;gBAC/B,OAAO,EAAE,oBAAoB,MAA2B,qBAAqB;gBAC7E,MAAM,EAAE,MAA2B;aACpC,EACD,SAAS,CACV,CACF,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,2EAA2E;IAC3E,CAAC,CAAC,GAAG,CAAC,yBAAyB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC3C,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,UAAU,CAAa,CAAC;QAC/C,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAW,CAAC;QAE/C,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QAChE,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAAC;YACrC,OAAO,EAAE,IAAI,CAAC,UAAU,KAAK,SAAS;YACtC,GAAG,CAAC,IAAI,CAAC,UAAU,KAAK,SAAS,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,UAA+B,EAAE,CAAC;SAC3F,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,oEAAoE;IACpE,CAAC,CAAC,IAAI,CAAC,gCAAgC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACnD,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACrC,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,UAAU,CAAa,CAAC;QAC/C,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAW,CAAC;QAE/C,IAAI,OAA2E,CAAC;QAChF,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,SAAS,CAAC,iBAAiB,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QACpE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,wBAAwB,CAAU,CAAC,CAAC;YACvD,OAAO,CAAC,CAAC,IAAI,CACX,WAAW,CACT;gBACE,IAAI,EAAE,wBAAwB;gBAC9B,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,2BAA2B;gBACzE,MAAM,EAAE,MAA2B;aACpC,EACD,SAAS,CACV,CACF,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,MAAM,EAAE,OAAO,CAAC,MAA2B;YAC3C,YAAY,EAAE,OAAO,CAAC,YAAY;SACnC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,aAAa,CAAC,CAAa;IAClC,OAAO;QACL,MAAM,EAAE,CAAC,CAAC,MAA2B;QACrC,QAAQ,EAAE,CAAC,CAAC,QAA6B;QACzC,GAAG,CAAC,CAAC,CAAC,YAAY,KAAK,SAAS,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,EAAE,CAAC;QACrE,GAAG,CAAC,CAAC,CAAC,WAAW,KAAK,SAAS,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAClE,SAAS,EAAE,CAAC,CAAC,SAA8B;QAC3C,GAAG,CAAC,CAAC,CAAC,YAAY,KAAK,SAAS,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC,YAAiC,EAAE,CAAC;QAC1F,GAAG,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;KAC1D,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,CAAiB;IACzC,OAAO;QACL,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,MAAM,EAAE,CAAC,CAAC,MAA2B;QACrC,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,SAAS,EAAE,CAAC,CAAC,SAA8B;QAC3C,SAAS,EAAE,CAAC,CAAC,SAA8B;QAC3C,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,GAAG,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,SAA8B,EAAE,CAAC;KAClF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"identity.js","sourceRoot":"","sources":["../../src/routes/identity.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,iCAAiC;AAGjC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAI5B,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC1F,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AActD,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAGzD,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAwD7C,MAAM,UAAU,cAAc,CAAC,UAAiC,EAAE;IAChE,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,eAAe,EAAE,UAAU,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC;IACvF,MAAM,CAAC,GAAG,IAAI,IAAI,EAAU,CAAC;IAE7B,qCAAqC;IACrC,mEAAmE;IACnE,8DAA8D;IAC9D,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC3B,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,UAAU,CAAa,CAAC;QAC/C,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAA0B,CAAC;QAC9D,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAuB,CAAC;QACrD,MAAM,UAAU,GAAG,CAAC,CAAC,GAAG,CAAC,YAAY,CAAuB,CAAC;QAC7D,MAAM,MAAM,GAAI,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAmC,IAAI,EAAE,CAAC;QACxE,MAAM,YAAY,GAAG,MAAM,kBAAkB,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC;QAElE,MAAM,IAAI,GAA4B,EAAE,QAAQ,EAAE,CAAC;QACnD,IAAI,SAAS,KAAK,SAAS;YAAE,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QACxD,IAAI,UAAU,KAAK,SAAS;YAAE,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC3D,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,uEAAuE;QACvE,wEAAwE;QACxE,sEAAsE;QACtE,uEAAuE;QACvE,kEAAkE;QAClE,4BAA4B;QAC5B,IAAI,CAAC;YACH,IAAI,CAAC,WAAW,GAAG,MAAM,aAAa,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;QACxD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CACf,2FAA2F,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACpJ,CAAC;QACJ,CAAC;QACD,IAAI,YAAY,KAAK,SAAS;YAAE,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;QACjE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QAEjC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;YACrB,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;gBAC3D,IAAI,IAAI,KAAK,IAAI;oBAAE,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;YACrD,CAAC;QACH,CAAC;QAED,IAAI,SAAS,KAAK,SAAS,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;YAC1D,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC;YAChE,IAAI,OAAO,KAAK,IAAI;gBAAE,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QAC3D,CAAC;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC,CAAC,CAAC;IAEH,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,2DAA2D;QAC3D,uDAAuD;QACvD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,yDAAyD;IACzD,uEAAuE;IACvE,+DAA+D;IAC/D,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC1B,IAAI,CAAC,CAAC,MAAM,aAAa,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC;YAC1C,OAAO,MAAM,CAAC,CAAC,EAAE,+CAA+C,CAAC,CAAC;QACpE,CAAC;QACD,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,UAAU,CAAa,CAAC;QAC/C,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAC/C,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACxC,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,mBAAmB,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,qBAAqB,CAAC,KAAK,MAAM,CAAC;QAE1E,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,SAAS,CAAC;YACrC,QAAQ;YACR,KAAK;YACL,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,SAAmB,EAAE,CAAC;YACvF,GAAG,CAAC,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;YACzE,GAAG,CAAC,mBAAmB,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC;SAC1D,CAAC,CAAC;QACH,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC;YAClC,OAAO,EAAE,IAAI,CAAC,UAAU,KAAK,SAAS;YACtC,GAAG,CAAC,IAAI,CAAC,UAAU,KAAK,SAAS,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,UAA+B,EAAE,CAAC;SAC3F,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,kEAAkE;IAClE,MAAM,UAAU,GAAG,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IACzD,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;YAC3B,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACrC,IAAI,CAAC,CAAC,MAAM,aAAa,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC;gBAC1C,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,mBAAmB,CAAU,CAAC,CAAC;gBAClD,OAAO,CAAC,CAAC,IAAI,CACX,WAAW,CACT,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,iCAAiC,EAAE,EACzE,SAAS,CACV,CACF,CAAC;YACJ,CAAC;YACD,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;YAC1E,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC/B,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,CAAU,CAAC,CAAC;gBAC1C,OAAO,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC;YAChF,CAAC;YACD,MAAM,SAAS,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;YAC/B,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC;gBAC/B,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAa;gBACvC,GAAG,MAAM;gBACT,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,EAAE,SAAS,EAAE,CAAC;aAC9C,CAAC,CAAC;YACH,IAAI,OAAO,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;gBACnC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,2BAA2B,CAAU,CAAC,CAAC;gBAC1D,OAAO,CAAC,CAAC,IAAI,CACX,WAAW,CACT;oBACE,IAAI,EAAE,2BAA2B;oBACjC,OAAO,EAAE,8CAA8C;oBACvD,MAAM,EAAE,OAAO,CAAC,MAA2B;iBAC5C,EACD,SAAS,CACV,CACF,CAAC;YACJ,CAAC;YACD,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACd,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7C,CAAC,CAAC,CAAC;IACL,CAAC;IAED,8EAA8E;IAC9E,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAClC,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACrC,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,UAAU,CAAa,CAAC;QAC/C,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAW,CAAC;QAC/C,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,aAAa,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC;YAC/D,OAAO,MAAM,CAAC,CAAC,EAAE,iDAAiD,CAAC,CAAC;QACtE,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QAC3D,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,yBAAyB,CAAU,CAAC,CAAC;YACxD,OAAO,CAAC,CAAC,IAAI,CACX,WAAW,CACT;gBACE,IAAI,EAAE,yBAAyB;gBAC/B,OAAO,EAAE,oBAAoB,MAA2B,qBAAqB;gBAC7E,MAAM,EAAE,MAA2B;aACpC,EACD,SAAS,CACV,CACF,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,kFAAkF;IAClF,CAAC,CAAC,GAAG,CAAC,yBAAyB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC3C,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,UAAU,CAAa,CAAC;QAC/C,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAW,CAAC;QAC/C,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,aAAa,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC;YAC/D,OAAO,MAAM,CAAC,CAAC,EAAE,mDAAmD,CAAC,CAAC;QACxE,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QAChE,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAAC;YACrC,OAAO,EAAE,IAAI,CAAC,UAAU,KAAK,SAAS;YACtC,GAAG,CAAC,IAAI,CAAC,UAAU,KAAK,SAAS,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,UAA+B,EAAE,CAAC;SAC3F,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,wFAAwF;IACxF,MAAM,cAAc,GAAG,SAAS,CAAC,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IACjE,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACjC,CAAC,CAAC,IAAI,CAAC,2BAA2B,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;YAC9C,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACrC,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAW,CAAC;YAC/C,IAAI,CAAC,CAAC,MAAM,aAAa,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC;gBAC1C,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,mBAAmB,CAAU,CAAC,CAAC;gBAClD,OAAO,CAAC,CAAC,IAAI,CACX,WAAW,CACT,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,oCAAoC,EAAE,EAC5E,SAAS,CACV,CACF,CAAC;YACJ,CAAC;YACD,MAAM,cAAc,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;YACpC,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC;gBACnC,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAa;gBACvC,MAAM;gBACN,GAAG,CAAC,cAAc,KAAK,SAAS,IAAI,EAAE,cAAc,EAAE,CAAC;aACxD,CAAC,CAAC;YACH,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;gBACjC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,yBAAyB,CAAU,CAAC,CAAC;gBACxD,OAAO,CAAC,CAAC,IAAI,CACX,WAAW,CACT;oBACE,IAAI,EAAE,yBAAyB;oBAC/B,OAAO,EAAE,oBAAoB,MAA2B,qBAAqB;oBAC7E,MAAM,EAAE,MAA2B;iBACpC,EACD,SAAS,CACV,CACF,CAAC;YACJ,CAAC;YACD,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC/B,MAAM,IAAI,GACR,OAAO,CAAC,MAAM,KAAK,mBAAmB;oBACpC,CAAC,CAAC,mBAAmB;oBACrB,CAAC,CAAC,kCAAkC,CAAC;gBACzC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAU,CAAC,CAAC;gBACnC,OAAO,CAAC,CAAC,IAAI,CACX,WAAW,CACT;oBACE,IAAI;oBACJ,OAAO,EAAE,OAAO,CAAC,OAAO;oBACxB,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,MAAM,EAAE,MAA2B;iBACpC,EACD,SAAS,CACV,CACF,CAAC;YACJ,CAAC;YACD,OAAO,CAAC,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC;gBACjC,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,eAAe,EAAE,OAAO,CAAC,eAAe;gBACxC,aAAa,EAAE,OAAO,CAAC,aAAa;aACrC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,iFAAiF;IACjF,CAAC,CAAC,IAAI,CAAC,gCAAgC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACnD,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACrC,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,UAAU,CAAa,CAAC;QAC/C,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAW,CAAC;QAC/C,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,aAAa,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC;YAC/D,OAAO,MAAM,CAAC,CAAC,EAAE,qDAAqD,CAAC,CAAC;QAC1E,CAAC;QAED,IAAI,OAA2E,CAAC;QAChF,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;YAC/B,OAAO,GAAG,MAAM,SAAS,CAAC,iBAAiB,CAAC;gBAC1C,QAAQ;gBACR,MAAM;gBACN,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,EAAE,SAAS,EAAE,CAAC;aAC9C,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,wBAAwB,CAAU,CAAC,CAAC;YACvD,OAAO,CAAC,CAAC,IAAI,CACX,WAAW,CACT;gBACE,IAAI,EAAE,wBAAwB;gBAC9B,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,2BAA2B;gBACzE,MAAM,EAAE,MAA2B;aACpC,EACD,SAAS,CACV,CACF,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,MAAM,EAAE,OAAO,CAAC,MAA2B;YAC3C,YAAY,EAAE,OAAO,CAAC,YAAY;SACnC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,iBAAiB,CAAC,CAAC,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC;IAC/C,OAAO,CAAC,CAAC;AACX,CAAC;AAED,MAAM,WAAW,GAAG,CAAC,CAAkB,EAAE,EAAE;IACzC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,2BAA2B,CAAU,CAAC,CAAC;IAC1D,OAAO,CAAC,CAAC,IAAI,CACX,WAAW,CACT;QACE,IAAI,EAAE,2BAA2B;QACjC,OAAO,EACL,8FAA8F;KACjG,EACD,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CACnB,CACF,CAAC;AACJ,CAAC,CAAC;AAEF,4CAA4C;AAC5C,MAAM,KAAK,GAAG,CAAC,CAAkB,EAAE,MAAc,EAAE,EAAE,CAClD,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAmC,KAAK,MAAM,CAAC;AAEhE,MAAM,MAAM,GAAG,CAAC,CAAkB,EAAE,OAAe,EAAE,EAAE;IACrD,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,mBAAmB,CAAU,CAAC,CAAC;IAClD,OAAO,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;AACzF,CAAC,CAAC;AAEF;;;;GAIG;AACH,SAAS,iBAAiB,CACxB,CAAe,EACf,OAAwC,EACxC,UAAkC;IAElC,CAAC,CAAC,GAAG,CAAC,uBAAuB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACzC,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACrC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,aAAa,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC;YAC/D,OAAO,MAAM,CAAC,CAAC,EAAE,iDAAiD,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC;QACjD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAa,EAAE,MAAM,EAAE,CAAC,CAAC;QACvF,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAChD,OAAO,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,KAAK,MAAM,MAAM,IAAI,CAAC,OAAO,EAAE,SAAS,CAAU,EAAE,CAAC;QACnD,CAAC,CAAC,IAAI,CAAC,kBAAkB,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;YAC7C,IAAI,CAAC,CAAC,MAAM,aAAa,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC;gBAC1C,OAAO,MAAM,CAAC,CAAC,EAAE,+CAA+C,CAAC,CAAC;YACpE,CAAC;YACD,MAAM,KAAK,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;YAC1E,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC9B,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,CAAU,CAAC,CAAC;gBAC1C,OAAO,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;YACxF,CAAC;YACD,IAAI,OAAO,KAAK,SAAS;gBAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC;YACjD,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;YACxB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;gBACnC,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAa;gBACvC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC;gBAC7B,KAAK;gBACL,GAAG,CAAC,EAAE,KAAK,SAAS,IAAI,EAAE,EAAE,EAAE,CAAC;aAChC,CAAC,CAAC;YACH,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK;gBAAE,OAAO,UAAU,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;YAC9D,OAAO,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACrD,CAAC,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,CAAkB,EAAE,MAAc;IAClD,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,yBAAyB,CAAU,CAAC,CAAC;IACxD,OAAO,CAAC,CAAC,IAAI,CACX,WAAW,CACT;QACE,IAAI,EAAE,yBAAyB;QAC/B,OAAO,EAAE,oBAAoB,MAAM,qBAAqB;QACxD,MAAM;KACP,EACD,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CACnB,CACF,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,CAAkB,EAAE,KAAuB;IAC7D,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAU,CAAC,CAAC;IACzC,OAAO,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;AAC/F,CAAC;AAED,4CAA4C;AAC5C,SAAS,gBAAgB,CAAC,GAAY;IACpC,MAAM,CAAC,GAAG,GAA4C,CAAC;IACvD,IACE,OAAO,CAAC,KAAK,QAAQ;QACrB,CAAC,KAAK,IAAI;QACV,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAChB,CAAC,CAAC,IAAI,KAAK,cAAc;QACzB,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,EAC3B,CAAC;QACD,OAAO,+KAA+K,CAAC;IACzL,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;AAClC,CAAC;AAED,SAAS,qBAAqB,CAAC,CAAe;IAC5C,OAAO;QACL,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,GAAG,CAAC,CAAC,CAAC,WAAW,KAAK,SAAS,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAClE,GAAG,CAAC,CAAC,CAAC,YAAY,KAAK,SAAS,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,EAAE,CAAC;QACrE,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC3E,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC/D,GAAG,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,IAAI,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;KACzE,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,CAAa;IAClC,OAAO;QACL,MAAM,EAAE,CAAC,CAAC,MAA2B;QACrC,QAAQ,EAAE,CAAC,CAAC,QAA6B;QACzC,GAAG,CAAC,CAAC,CAAC,YAAY,KAAK,SAAS,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,EAAE,CAAC;QACrE,GAAG,CAAC,CAAC,CAAC,WAAW,KAAK,SAAS,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAClE,SAAS,EAAE,CAAC,CAAC,SAA8B;QAC3C,GAAG,CAAC,CAAC,CAAC,YAAY,KAAK,SAAS,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC,YAAiC,EAAE,CAAC;QAC1F,GAAG,CAAC,CAAC,CAAC,cAAc,KAAK,SAAS,IAAI;YACpC,cAAc,EAAE,CAAC,CAAC,cAAmC;SACtD,CAAC;QACF,GAAG,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;KAC1D,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,CAAiB;IACzC,OAAO;QACL,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,MAAM,EAAE,CAAC,CAAC,MAA2B;QACrC,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,SAAS,EAAE,CAAC,CAAC,SAA8B;QAC3C,SAAS,EAAE,CAAC,CAAC,SAA8B;QAC3C,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,GAAG,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,SAA8B,EAAE,CAAC;KAClF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,QAAQ,CAAC,CAAkB;IAClC,MAAM,SAAS,GAAG,eAAe,CAAC,CAAC,CAAC,CAAC;IACrC,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,SAAS,CAAuB,CAAC;IACvD,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAChC,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAC1C,OAAO;QACL,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,EAAE,SAAS,EAAE,eAAe,CAAC,SAAS,CAAC,EAAE,CAAC;QACzE,GAAG,CAAC,OAAO,KAAK,SAAS,IAAI,EAAE,OAAO,EAAE,CAAC;QACzC,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,IAAI,EAAE,CAAC;QACnC,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,EAAE,SAAS,EAAE,CAAC;KAC9C,CAAC;AACJ,CAAC;AAED,MAAM,eAAe,GAAG,GAAG,CAAC;AAE5B,kDAAkD;AAClD,SAAS,eAAe,CAAC,GAAY;IACnC,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAClE,OAAO,oCAAoC,CAAC;IAC9C,CAAC;IACD,MAAM,CAAC,GAAG,GAAwD,CAAC;IACnE,IACE,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ;QACjC,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE;QAC3B,CAAC,CAAC,WAAW,CAAC,MAAM,GAAG,eAAe,EACtC,CAAC;QACD,OAAO,yDAAyD,eAAe,aAAa,CAAC;IAC/F,CAAC;IACD,IAAI,CAAC,CAAC,YAAY,KAAK,SAAS;QAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE,EAAE,CAAC;IAC/E,IAAI,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC;QACpF,OAAO,yCAAyC,CAAC;IACnD,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,EAAE,CAAC;AAC7E,CAAC"}

package/dist/routes/improvement-passes.d.ts

@@ -0,0 +1,52 @@
+import { Hono } from 'hono';
+import type { AgentRegistryBinding } from '../agent-binding.js';
+import type { BlockRegistryBinding } from '../block-binding.js';
+import { type ImproveScheduleInput, type ImprovementBudget, type ImprovementPass, type ImprovementPassBinding } from '../improvement-pass-binding.js';
+import type { AgentReleaseBindings } from '../live-version-binding.js';
+import type { Authorizer } from '../middleware/authorize.js';
+import type { AppEnv } from '../types.js';
+/** What `improve` checks a pass against before it starts. */
+export interface ImproveDeps {
+    readonly passes?: ImprovementPassBinding;
+    readonly agents: AgentRegistryBinding;
+    readonly blocks: BlockRegistryBinding;
+    readonly releases: AgentReleaseBindings;
+}
+export declare const DEFAULT_BUDGET: ImprovementBudget;
+/**
+ * `POST /improve` (under `/v1/proposals`): start an improvement pass for
+ * an agent version and a live scope. It answers 202 with the pass; the
+ * pass carries on in the background (`GET /v1/improvement-passes/:id`).
+ *
+ * Checked first, as evaluating its proposal would be: the version must be
+ * active and pinned, it must pin a settings block with tunable keys, the
+ * agent registry must take writes, and the agent must have a live version
+ * for the whole tenant. Needs `publish` on the agent.
+ */
+export declare function mountImproveRoute(r: Hono<AppEnv>, deps: ImproveDeps, authorizer?: Authorizer): void;
+/**
+ * `/v1/improvement-passes`: read passes back, and cancel one.
+ *
+ *   GET  /               newest first; `?agentId=` narrows
+ *   GET  /:passId        one
+ *   POST /:passId/cancel stop a running pass (it writes no proposal)
+ *
+ * Authorized on the pass's agent: `read`, and `publish` to cancel. A pass
+ * the caller can't read answers 404.
+ */
+export declare function improvementPassesRouter(passes: ImprovementPassBinding | undefined, authorizer?: Authorizer): Hono<AppEnv>;
+export declare function serializePass(p: ImprovementPass): Record<string, unknown>;
+/**
+ * An `improve` schedule's input (`config.input`), defaults applied: the
+ * pass options `improve` takes (no agent, scope or test set: the schedule
+ * names those, and each pass builds its test set), plus `threshold` and
+ * `monthlyCapUsd`.
+ */
+export declare function parseImproveScheduleInput(raw: unknown): {
+    kind: 'ok';
+    input: ImproveScheduleInput;
+} | {
+    kind: 'err';
+    message: string;
+};
+//# sourceMappingURL=improvement-passes.d.ts.map

package/dist/routes/improvement-passes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"improvement-passes.d.ts","sourceRoot":"","sources":["../../src/routes/improvement-passes.ts"],"names":[],"mappings":"AAGA,OAAO,EAAgB,IAAI,EAAE,MAAM,MAAM,CAAC;AAM1C,OAAO,KAAK,EAAE,oBAAoB,EAAsB,MAAM,qBAAqB,CAAC;AACpF,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAGhE,OAAO,EAEL,KAAK,oBAAoB,EAEzB,KAAK,iBAAiB,EAEtB,KAAK,eAAe,EACpB,KAAK,sBAAsB,EAE5B,MAAM,gCAAgC,CAAC;AACxC,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AACvE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAE7D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAO1C,6DAA6D;AAC7D,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,sBAAsB,CAAC;IACzC,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;IACtC,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,CAAC;CACzC;AAED,eAAO,MAAM,cAAc,EAAE,iBAAwD,CAAC;AAKtF;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,CAAC,EAAE,UAAU,QAgE5F;AAED;;;;;;;;;GASG;AACH,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,sBAAsB,GAAG,SAAS,EAC1C,UAAU,CAAC,EAAE,UAAU,GACtB,IAAI,CAAC,MAAM,CAAC,CA8Ed;AAwCD,wBAAgB,aAAa,CAAC,CAAC,EAAE,eAAe,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAwBzE;AAoJD;;;;;GAKG;AACH,wBAAgB,yBAAyB,CACvC,GAAG,EAAE,OAAO,GACX;IAAE,IAAI,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,oBAAoB,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAkChF"}