@kywi-software/core 0.1.0 → 0.2.0

package/dist/admin/surfaces/users/users-permissions.js

@@ -0,0 +1,135 @@
+'use client';
+import { jsx as _jsx, Fragment as _Fragment, jsxs as _jsxs } from "react/jsx-runtime";
+/**
+ * `users.permissions` surface — the capability matrix + per-content ACL
+ * browser, ported verbatim from `apps/reference/app/admin/users/permissions/
+ * page.tsx` (0.2.0 T9). Markup / copy unchanged; wiring substitutions (plan
+ * §1.3): `adminFetch` → `useAdminContext().fetch`. `AdminShellWrapper` is gone
+ * — chrome is rendered once by `KywiAdminApp` (T14).
+ */
+import { useCallback, useEffect, useState } from 'react';
+import { useAdminContext } from '../../context.js';
+import { PermissionMatrix } from '../../permission-matrix.js';
+import { ContentPermissionBrowser, } from '../../content-permission-browser.js';
+import { loadUsers, loadGroups, fullName } from './users-data.js';
+/** Depth-first flatten of the nested site tree into a flat option list. */
+function flattenTree(nodes, out = []) {
+    for (const node of nodes) {
+        out.push({ id: node.id, title: node.title, path: node.path });
+        if (node.children?.length)
+            flattenTree(node.children, out);
+    }
+    return out;
+}
+export default function UsersPermissionsSurface(_props) {
+    const { fetch: adminFetch } = useAdminContext();
+    const [nodes, setNodes] = useState([]);
+    const [users, setUsers] = useState([]);
+    const [groups, setGroups] = useState([]);
+    const [selectedNodeId, setSelectedNodeId] = useState(null);
+    const [entries, setEntries] = useState([]);
+    const [aclLoading, setAclLoading] = useState(false);
+    const [aclError, setAclError] = useState(null);
+    const [busy, setBusy] = useState(false);
+    // Load the pickers' data once: site tree (content nodes), users, and groups.
+    useEffect(() => {
+        let cancelled = false;
+        async function load() {
+            try {
+                const [treeRes, rawUsers, rawGroups] = await Promise.all([
+                    adminFetch('/api/v1/tree'),
+                    loadUsers(adminFetch),
+                    loadGroups(adminFetch),
+                ]);
+                const treeBody = treeRes.ok ? await treeRes.json() : { data: [] };
+                if (cancelled)
+                    return;
+                setNodes(flattenTree(treeBody.data ?? []));
+                setUsers(rawUsers.map((u) => ({ id: u.id, label: fullName(u) })));
+                setGroups(rawGroups.map((g) => ({ id: g.id, label: g.name })));
+            }
+            catch {
+                /* pickers stay empty; the ACL panel still reports its own errors */
+            }
+        }
+        load();
+        return () => { cancelled = true; };
+    }, [adminFetch]);
+    const loadEntries = useCallback(async (nodeId) => {
+        setAclLoading(true);
+        setAclError(null);
+        try {
+            const res = await adminFetch(`/api/v1/content/${nodeId}/permissions`);
+            if (!res.ok) {
+                const body = await res.json().catch(() => null);
+                throw new Error(body?.error?.message ?? `Failed to load permissions (${res.status})`);
+            }
+            const body = await res.json();
+            setEntries(body.data ?? []);
+        }
+        catch (e) {
+            setAclError(e instanceof Error ? e.message : 'Failed to load permissions');
+            setEntries([]);
+        }
+        finally {
+            setAclLoading(false);
+        }
+    }, [adminFetch]);
+    const handleSelectNode = useCallback((id) => {
+        setSelectedNodeId(id || null);
+        setEntries([]);
+        setAclError(null);
+        if (id)
+            loadEntries(id);
+    }, [loadEntries]);
+    const handleGrant = useCallback(async (input) => {
+        if (!selectedNodeId)
+            return;
+        setBusy(true);
+        setAclError(null);
+        try {
+            const payload = input.subjectType === 'user'
+                ? { userId: input.subjectId, action: input.action }
+                : { groupId: input.subjectId, action: input.action };
+            const res = await adminFetch(`/api/v1/content/${selectedNodeId}/permissions`, {
+                method: 'POST',
+                body: JSON.stringify(payload),
+            });
+            if (!res.ok) {
+                const body = await res.json().catch(() => null);
+                throw new Error(body?.error?.message ?? `Failed to add permission (${res.status})`);
+            }
+            await loadEntries(selectedNodeId);
+        }
+        catch (e) {
+            setAclError(e instanceof Error ? e.message : 'Failed to add permission');
+        }
+        finally {
+            setBusy(false);
+        }
+    }, [selectedNodeId, loadEntries, adminFetch]);
+    const handleRevoke = useCallback(async (permissionId) => {
+        if (!selectedNodeId)
+            return;
+        setBusy(true);
+        setAclError(null);
+        try {
+            const res = await adminFetch(`/api/v1/content/${selectedNodeId}/permissions/${permissionId}`, {
+                method: 'DELETE',
+            });
+            if (!res.ok) {
+                const body = await res.json().catch(() => null);
+                throw new Error(body?.error?.message ?? `Failed to remove permission (${res.status})`);
+            }
+            await loadEntries(selectedNodeId);
+        }
+        catch (e) {
+            setAclError(e instanceof Error ? e.message : 'Failed to remove permission');
+        }
+        finally {
+            setBusy(false);
+        }
+    }, [selectedNodeId, loadEntries, adminFetch]);
+    return (_jsxs(_Fragment, { children: [_jsx("div", { className: "kywi-admin-page-header", children: _jsx("h1", { children: "Permissions" }) }), _jsx(PermissionMatrix, {}), _jsx(ContentPermissionBrowser, { nodes: nodes, users: users, groups: groups, selectedNodeId: selectedNodeId, entries: entries, loading: aclLoading, error: aclError, busy: busy, onSelectNode: handleSelectNode, onGrant: handleGrant, onRevoke: handleRevoke })] }));
+}
+//# sourceMappingURL=users-permissions.js.map

package/dist/admin/surfaces/users/users-permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"users-permissions.js","sourceRoot":"","sources":["../../../../src/admin/surfaces/users/users-permissions.tsx"],"names":[],"mappings":"AAAA,YAAY,CAAA;;AAEZ;;;;;;GAMG;AAEH,OAAc,EAAE,WAAW,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAA;AAE/D,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAA;AAC7D,OAAO,EACL,wBAAwB,GAKzB,MAAM,qCAAqC,CAAA;AAC5C,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AASjE,2EAA2E;AAC3E,SAAS,WAAW,CAAC,KAAoB,EAAE,MAA2B,EAAE;IACtE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAA;QAC7D,IAAI,IAAI,CAAC,QAAQ,EAAE,MAAM;YAAE,WAAW,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAA;IAC5D,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,MAAM,CAAC,OAAO,UAAU,uBAAuB,CAAC,MAAoB;IAClE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,eAAe,EAAE,CAAA;IAC/C,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAsB,EAAE,CAAC,CAAA;IAC3D,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAkB,EAAE,CAAC,CAAA;IACvD,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAkB,EAAE,CAAC,CAAA;IAEzD,MAAM,CAAC,cAAc,EAAE,iBAAiB,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAA;IACzE,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAA2B,EAAE,CAAC,CAAA;IACpE,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;IACnD,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAA;IAC7D,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;IAEvC,6EAA6E;IAC7E,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,SAAS,GAAG,KAAK,CAAA;QACrB,KAAK,UAAU,IAAI;YACjB,IAAI,CAAC;gBACH,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;oBACvD,UAAU,CAAC,cAAc,CAAC;oBAC1B,SAAS,CAAC,UAAU,CAAC;oBACrB,UAAU,CAAC,UAAU,CAAC;iBACvB,CAAC,CAAA;gBACF,MAAM,QAAQ,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAA;gBACjE,IAAI,SAAS;oBAAE,OAAM;gBACrB,QAAQ,CAAC,WAAW,CAAE,QAAQ,CAAC,IAAsB,IAAI,EAAE,CAAC,CAAC,CAAA;gBAC7D,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;gBACjE,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAA;YAChE,CAAC;YAAC,MAAM,CAAC;gBACP,oEAAoE;YACtE,CAAC;QACH,CAAC;QACD,IAAI,EAAE,CAAA;QACN,OAAO,GAAG,EAAE,GAAG,SAAS,GAAG,IAAI,CAAA,CAAC,CAAC,CAAA;IACnC,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAA;IAEhB,MAAM,WAAW,GAAG,WAAW,CAAC,KAAK,EAAE,MAAc,EAAE,EAAE;QACvD,aAAa,CAAC,IAAI,CAAC,CAAA;QACnB,WAAW,CAAC,IAAI,CAAC,CAAA;QACjB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,mBAAmB,MAAM,cAAc,CAAC,CAAA;YACrE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAA;gBAC/C,MAAM,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,IAAI,+BAA+B,GAAG,CAAC,MAAM,GAAG,CAAC,CAAA;YACvF,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;YAC7B,UAAU,CAAE,IAAI,CAAC,IAAiC,IAAI,EAAE,CAAC,CAAA;QAC3D,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,WAAW,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAA;YAC1E,UAAU,CAAC,EAAE,CAAC,CAAA;QAChB,CAAC;gBAAS,CAAC;YACT,aAAa,CAAC,KAAK,CAAC,CAAA;QACtB,CAAC;IACH,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAA;IAEhB,MAAM,gBAAgB,GAAG,WAAW,CAAC,CAAC,EAAU,EAAE,EAAE;QAClD,iBAAiB,CAAC,EAAE,IAAI,IAAI,CAAC,CAAA;QAC7B,UAAU,CAAC,EAAE,CAAC,CAAA;QACd,WAAW,CAAC,IAAI,CAAC,CAAA;QACjB,IAAI,EAAE;YAAE,WAAW,CAAC,EAAE,CAAC,CAAA;IACzB,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,CAAA;IAEjB,MAAM,WAAW,GAAG,WAAW,CAAC,KAAK,EAAE,KAAiB,EAAE,EAAE;QAC1D,IAAI,CAAC,cAAc;YAAE,OAAM;QAC3B,OAAO,CAAC,IAAI,CAAC,CAAA;QACb,WAAW,CAAC,IAAI,CAAC,CAAA;QACjB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,KAAK,CAAC,WAAW,KAAK,MAAM;gBAC1C,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE;gBACnD,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAA;YACtD,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,mBAAmB,cAAc,cAAc,EAAE;gBAC5E,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;aAC9B,CAAC,CAAA;YACF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAA;gBAC/C,MAAM,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,IAAI,6BAA6B,GAAG,CAAC,MAAM,GAAG,CAAC,CAAA;YACrF,CAAC;YACD,MAAM,WAAW,CAAC,cAAc,CAAC,CAAA;QACnC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,WAAW,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAA;QAC1E,CAAC;gBAAS,CAAC;YACT,OAAO,CAAC,KAAK,CAAC,CAAA;QAChB,CAAC;IACH,CAAC,EAAE,CAAC,cAAc,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC,CAAA;IAE7C,MAAM,YAAY,GAAG,WAAW,CAAC,KAAK,EAAE,YAAoB,EAAE,EAAE;QAC9D,IAAI,CAAC,cAAc;YAAE,OAAM;QAC3B,OAAO,CAAC,IAAI,CAAC,CAAA;QACb,WAAW,CAAC,IAAI,CAAC,CAAA;QACjB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,mBAAmB,cAAc,gBAAgB,YAAY,EAAE,EAAE;gBAC5F,MAAM,EAAE,QAAQ;aACjB,CAAC,CAAA;YACF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAA;gBAC/C,MAAM,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,IAAI,gCAAgC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAA;YACxF,CAAC;YACD,MAAM,WAAW,CAAC,cAAc,CAAC,CAAA;QACnC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,WAAW,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAA;QAC7E,CAAC;gBAAS,CAAC;YACT,OAAO,CAAC,KAAK,CAAC,CAAA;QAChB,CAAC;IACH,CAAC,EAAE,CAAC,cAAc,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC,CAAA;IAE7C,OAAO,CACL,8BACE,cAAK,SAAS,EAAC,wBAAwB,YACrC,uCAAoB,GAChB,EAEN,KAAC,gBAAgB,KAAG,EAEpB,KAAC,wBAAwB,IACvB,KAAK,EAAE,KAAK,EACZ,KAAK,EAAE,KAAK,EACZ,MAAM,EAAE,MAAM,EACd,cAAc,EAAE,cAAc,EAC9B,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE,UAAU,EACnB,KAAK,EAAE,QAAQ,EACf,IAAI,EAAE,IAAI,EACV,YAAY,EAAE,gBAAgB,EAC9B,OAAO,EAAE,WAAW,EACpB,QAAQ,EAAE,YAAY,GACtB,IACD,CACJ,CAAA;AACH,CAAC"}

package/dist/admin/surfaces/webServices/api-keys.d.ts

@@ -0,0 +1,3 @@
+import type { SurfaceProps } from '../../registry.js';
+export default function WebServicesApiKeysSurface(_props: SurfaceProps): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=api-keys.d.ts.map

package/dist/admin/surfaces/webServices/api-keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-keys.d.ts","sourceRoot":"","sources":["../../../../src/admin/surfaces/webServices/api-keys.tsx"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAarD,MAAM,CAAC,OAAO,UAAU,yBAAyB,CAAC,MAAM,EAAE,YAAY,2CAyFrE"}

package/dist/admin/surfaces/webServices/api-keys.js

@@ -0,0 +1,65 @@
+'use client';
+import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
+/**
+ * `webServices.apiKeys` surface — personal API key management, ported verbatim
+ * from `apps/reference/app/admin/web-services/api-keys/page.tsx` (0.2.0 T9).
+ * Markup / copy unchanged; wiring substitutions (plan §1.3): `adminFetch` →
+ * `useAdminContext().fetch`. `AdminShellWrapper` is gone — chrome is rendered
+ * once by `KywiAdminApp` (T14). Reuses core's existing `ApiKeyManager` and the
+ * shared `SecretRevealModal` — only the page orchestration is migrated here.
+ */
+import { useCallback, useEffect, useState } from 'react';
+import { useAdminContext } from '../../context.js';
+import { LoadingState, ErrorState } from '../../primitives.js';
+import { SecretRevealModal } from './secret-reveal-modal.js';
+import { ApiKeyManager } from '../../api-key-manager.js';
+import { loadApiKeys, createApiKey, revokeApiKey, } from './web-services-data.js';
+export default function WebServicesApiKeysSurface(_props) {
+    const { fetch: adminFetch } = useAdminContext();
+    const [apiKeys, setApiKeys] = useState([]);
+    const [loading, setLoading] = useState(true);
+    const [error, setError] = useState(null);
+    const [revealed, setRevealed] = useState(null);
+    const load = useCallback(async () => {
+        setLoading(true);
+        setError(null);
+        try {
+            const list = await loadApiKeys(adminFetch);
+            list.sort((a, b) => (b.createdAt ?? '').localeCompare(a.createdAt ?? ''));
+            setApiKeys(list);
+        }
+        catch (e) {
+            setError(e instanceof Error ? e.message : 'Failed to load API keys');
+        }
+        finally {
+            setLoading(false);
+        }
+    }, [adminFetch]);
+    useEffect(() => {
+        load();
+    }, [load]);
+    const handleCreate = useCallback(async (data) => {
+        setError(null);
+        try {
+            const { rawKey, row } = await createApiKey(adminFetch, data);
+            // Reveal the full key exactly once — only its prefix is stored/listed.
+            setRevealed({ name: row.name, key: rawKey });
+            await load();
+        }
+        catch (e) {
+            setError(e instanceof Error ? e.message : 'Failed to create API key');
+        }
+    }, [load, adminFetch]);
+    const handleRevoke = useCallback(async (id) => {
+        setError(null);
+        try {
+            await revokeApiKey(adminFetch, id);
+            await load();
+        }
+        catch (e) {
+            setError(e instanceof Error ? e.message : 'Failed to revoke API key');
+        }
+    }, [load, adminFetch]);
+    return (_jsxs(_Fragment, { children: [_jsx("div", { className: "kywi-admin-page-header", children: _jsxs("div", { children: [_jsx("h1", { children: "API Keys" }), _jsx("p", { className: "kywi-admin-section-hint", children: "Personal API keys authenticate server-to-server requests to the Kywi API. Each key carries the scopes you assign and inherits your role. The full key is shown once at creation \u2014 afterwards only its prefix is listed." })] }) }), error && _jsx(ErrorState, { message: error, onRetry: load }), loading ? (_jsx(LoadingState, { label: "Loading API keys\u2026" })) : (_jsx(ApiKeyManager, { apiKeys: apiKeys, onCreateKey: data => void handleCreate(data), onRevokeKey: id => void handleRevoke(id) })), revealed && (_jsx(SecretRevealModal, { title: "API key", intro: `Copy the API key “${revealed.name}” now. For security it is stored only as a hash and will never be shown again.`, label: "API key", value: revealed.key, onClose: () => setRevealed(null) }))] }));
+}
+//# sourceMappingURL=api-keys.js.map

package/dist/admin/surfaces/webServices/api-keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-keys.js","sourceRoot":"","sources":["../../../../src/admin/surfaces/webServices/api-keys.tsx"],"names":[],"mappings":"AAAA,YAAY,CAAA;;AAEZ;;;;;;;GAOG;AAEH,OAAc,EAAE,WAAW,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAA;AAE/D,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AAClD,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAC9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAA;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAA;AACxD,OAAO,EACL,WAAW,EACX,YAAY,EACZ,YAAY,GAGb,MAAM,wBAAwB,CAAA;AAE/B,MAAM,CAAC,OAAO,UAAU,yBAAyB,CAAC,MAAoB;IACpE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,eAAe,EAAE,CAAA;IAC/C,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAkB,EAAE,CAAC,CAAA;IAC3D,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAA;IAC5C,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAA;IACvD,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,QAAQ,CAAuC,IAAI,CAAC,CAAA;IAEpF,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QAClC,UAAU,CAAC,IAAI,CAAC,CAAA;QAChB,QAAQ,CAAC,IAAI,CAAC,CAAA;QACd,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,UAAU,CAAC,CAAA;YAC1C,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAA;YACzE,UAAU,CAAC,IAAI,CAAC,CAAA;QAClB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,QAAQ,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAA;QACtE,CAAC;gBAAS,CAAC;YACT,UAAU,CAAC,KAAK,CAAC,CAAA;QACnB,CAAC;IACH,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAA;IAEhB,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,EAAE,CAAA;IACR,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAA;IAEV,MAAM,YAAY,GAAG,WAAW,CAC9B,KAAK,EAAE,IAAsB,EAAE,EAAE;QAC/B,QAAQ,CAAC,IAAI,CAAC,CAAA;QACd,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,YAAY,CAAC,UAAU,EAAE,IAAI,CAAC,CAAA;YAC5D,uEAAuE;YACvE,WAAW,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAA;YAC5C,MAAM,IAAI,EAAE,CAAA;QACd,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,QAAQ,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAA;QACvE,CAAC;IACH,CAAC,EACD,CAAC,IAAI,EAAE,UAAU,CAAC,CACnB,CAAA;IAED,MAAM,YAAY,GAAG,WAAW,CAC9B,KAAK,EAAE,EAAU,EAAE,EAAE;QACnB,QAAQ,CAAC,IAAI,CAAC,CAAA;QACd,IAAI,CAAC;YACH,MAAM,YAAY,CAAC,UAAU,EAAE,EAAE,CAAC,CAAA;YAClC,MAAM,IAAI,EAAE,CAAA;QACd,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,QAAQ,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAA;QACvE,CAAC;IACH,CAAC,EACD,CAAC,IAAI,EAAE,UAAU,CAAC,CACnB,CAAA;IAED,OAAO,CACL,8BACE,cAAK,SAAS,EAAC,wBAAwB,YACrC,0BACE,oCAAiB,EACjB,YAAG,SAAS,EAAC,yBAAyB,6OAIlC,IACA,GACF,EAEL,KAAK,IAAI,KAAC,UAAU,IAAC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,GAAI,EAEtD,OAAO,CAAC,CAAC,CAAC,CACT,KAAC,YAAY,IAAC,KAAK,EAAC,wBAAmB,GAAG,CAC3C,CAAC,CAAC,CAAC,CACF,KAAC,aAAa,IACZ,OAAO,EAAE,OAAO,EAChB,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC,KAAK,YAAY,CAAC,IAAI,CAAC,EAC5C,WAAW,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,YAAY,CAAC,EAAE,CAAC,GACxC,CACH,EAEA,QAAQ,IAAI,CACX,KAAC,iBAAiB,IAChB,KAAK,EAAC,SAAS,EACf,KAAK,EAAE,qBAAqB,QAAQ,CAAC,IAAI,gFAAgF,EACzH,KAAK,EAAC,SAAS,EACf,KAAK,EAAE,QAAQ,CAAC,GAAG,EACnB,OAAO,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,GAChC,CACH,IACA,CACJ,CAAA;AACH,CAAC"}

package/dist/admin/surfaces/webServices/oauth.d.ts

@@ -0,0 +1,3 @@
+import type { SurfaceProps } from '../../registry.js';
+export default function WebServicesOAuthSurface(_props: SurfaceProps): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=oauth.d.ts.map

package/dist/admin/surfaces/webServices/oauth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../../../../src/admin/surfaces/webServices/oauth.tsx"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAerD,MAAM,CAAC,OAAO,UAAU,uBAAuB,CAAC,MAAM,EAAE,YAAY,2CAsGnE"}

package/dist/admin/surfaces/webServices/oauth.js

@@ -0,0 +1,75 @@
+'use client';
+import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
+/**
+ * `webServices.oauth` surface — OAuth client management, ported verbatim from
+ * `apps/reference/app/admin/web-services/oauth/page.tsx` (0.2.0 T9). Markup /
+ * copy unchanged; wiring substitutions (plan §1.3): `adminFetch` →
+ * `useAdminContext().fetch`. `AdminShellWrapper` is gone — chrome is rendered
+ * once by `KywiAdminApp` (T14). Reuses core's existing `OAuthManager` and the
+ * shared `SecretRevealModal` — only the page orchestration is migrated here.
+ */
+import { useCallback, useEffect, useState } from 'react';
+import { useAdminContext } from '../../context.js';
+import { LoadingState, ErrorState } from '../../primitives.js';
+import { SecretRevealModal } from './secret-reveal-modal.js';
+import { OAuthManager } from '../../oauth-manager.js';
+import { loadOAuthClients, createOAuthClient, updateOAuthClient, deleteOAuthClient, } from './web-services-data.js';
+export default function WebServicesOAuthSurface(_props) {
+    const { fetch: adminFetch } = useAdminContext();
+    const [clients, setClients] = useState([]);
+    const [loading, setLoading] = useState(true);
+    const [error, setError] = useState(null);
+    const [revealed, setRevealed] = useState(null);
+    const load = useCallback(async () => {
+        setLoading(true);
+        setError(null);
+        try {
+            const list = await loadOAuthClients(adminFetch);
+            list.sort((a, b) => (b.createdAt ?? '').localeCompare(a.createdAt ?? ''));
+            setClients(list);
+        }
+        catch (e) {
+            setError(e instanceof Error ? e.message : 'Failed to load OAuth clients');
+        }
+        finally {
+            setLoading(false);
+        }
+    }, [adminFetch]);
+    useEffect(() => {
+        load();
+    }, [load]);
+    const handleCreate = useCallback(async (data) => {
+        setError(null);
+        try {
+            const { clientSecret, client } = await createOAuthClient(adminFetch, data);
+            // Reveal the plaintext secret exactly once — it is never returned again.
+            setRevealed({ name: client.name, secret: clientSecret });
+            await load();
+        }
+        catch (e) {
+            setError(e instanceof Error ? e.message : 'Failed to create OAuth client');
+        }
+    }, [load, adminFetch]);
+    const handleUpdate = useCallback(async (id, data) => {
+        setError(null);
+        try {
+            await updateOAuthClient(adminFetch, id, data);
+            await load();
+        }
+        catch (e) {
+            setError(e instanceof Error ? e.message : 'Failed to update OAuth client');
+        }
+    }, [load, adminFetch]);
+    const handleDelete = useCallback(async (id) => {
+        setError(null);
+        try {
+            await deleteOAuthClient(adminFetch, id);
+            await load();
+        }
+        catch (e) {
+            setError(e instanceof Error ? e.message : 'Failed to delete OAuth client');
+        }
+    }, [load, adminFetch]);
+    return (_jsxs(_Fragment, { children: [_jsx("div", { className: "kywi-admin-page-header", children: _jsxs("div", { children: [_jsx("h1", { children: "OAuth Clients" }), _jsx("p", { className: "kywi-admin-section-hint", children: "Register confidential OAuth clients that can call the Kywi API on a user\u2019s behalf. The client secret is shown once at creation and stored only as a hash." })] }) }), error && _jsx(ErrorState, { message: error, onRetry: load }), loading ? (_jsx(LoadingState, { label: "Loading OAuth clients\u2026" })) : (_jsx(OAuthManager, { clients: clients, onCreateClient: data => void handleCreate(data), onUpdateClient: (id, data) => void handleUpdate(id, data), onDeleteClient: id => void handleDelete(id) })), revealed && (_jsx(SecretRevealModal, { title: "Client secret", intro: `Copy the client secret for “${revealed.name}” now. For security it is stored only as a hash and will never be shown again.`, label: "Client secret", value: revealed.secret, onClose: () => setRevealed(null) }))] }));
+}
+//# sourceMappingURL=oauth.js.map

package/dist/admin/surfaces/webServices/oauth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.js","sourceRoot":"","sources":["../../../../src/admin/surfaces/webServices/oauth.tsx"],"names":[],"mappings":"AAAA,YAAY,CAAA;;AAEZ;;;;;;;GAOG;AAEH,OAAc,EAAE,WAAW,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAA;AAE/D,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AAClD,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAC9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAA;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAA;AACrD,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,EACjB,iBAAiB,GAIlB,MAAM,wBAAwB,CAAA;AAE/B,MAAM,CAAC,OAAO,UAAU,uBAAuB,CAAC,MAAoB;IAClE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,eAAe,EAAE,CAAA;IAC/C,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAuB,EAAE,CAAC,CAAA;IAChE,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAA;IAC5C,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAA;IACvD,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,QAAQ,CAA0C,IAAI,CAAC,CAAA;IAEvF,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QAClC,UAAU,CAAC,IAAI,CAAC,CAAA;QAChB,QAAQ,CAAC,IAAI,CAAC,CAAA;QACd,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,UAAU,CAAC,CAAA;YAC/C,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAA;YACzE,UAAU,CAAC,IAAI,CAAC,CAAA;QAClB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,QAAQ,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,8BAA8B,CAAC,CAAA;QAC3E,CAAC;gBAAS,CAAC;YACT,UAAU,CAAC,KAAK,CAAC,CAAA;QACnB,CAAC;IACH,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAA;IAEhB,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,EAAE,CAAA;IACR,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAA;IAEV,MAAM,YAAY,GAAG,WAAW,CAC9B,KAAK,EAAE,IAA2B,EAAE,EAAE;QACpC,QAAQ,CAAC,IAAI,CAAC,CAAA;QACd,IAAI,CAAC;YACH,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,MAAM,iBAAiB,CAAC,UAAU,EAAE,IAAI,CAAC,CAAA;YAC1E,yEAAyE;YACzE,WAAW,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAA;YACxD,MAAM,IAAI,EAAE,CAAA;QACd,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,QAAQ,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAA;QAC5E,CAAC;IACH,CAAC,EACD,CAAC,IAAI,EAAE,UAAU,CAAC,CACnB,CAAA;IAED,MAAM,YAAY,GAAG,WAAW,CAC9B,KAAK,EAAE,EAAU,EAAE,IAA2B,EAAE,EAAE;QAChD,QAAQ,CAAC,IAAI,CAAC,CAAA;QACd,IAAI,CAAC;YACH,MAAM,iBAAiB,CAAC,UAAU,EAAE,EAAE,EAAE,IAAI,CAAC,CAAA;YAC7C,MAAM,IAAI,EAAE,CAAA;QACd,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,QAAQ,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAA;QAC5E,CAAC;IACH,CAAC,EACD,CAAC,IAAI,EAAE,UAAU,CAAC,CACnB,CAAA;IAED,MAAM,YAAY,GAAG,WAAW,CAC9B,KAAK,EAAE,EAAU,EAAE,EAAE;QACnB,QAAQ,CAAC,IAAI,CAAC,CAAA;QACd,IAAI,CAAC;YACH,MAAM,iBAAiB,CAAC,UAAU,EAAE,EAAE,CAAC,CAAA;YACvC,MAAM,IAAI,EAAE,CAAA;QACd,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,QAAQ,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAA;QAC5E,CAAC;IACH,CAAC,EACD,CAAC,IAAI,EAAE,UAAU,CAAC,CACnB,CAAA;IAED,OAAO,CACL,8BACE,cAAK,SAAS,EAAC,wBAAwB,YACrC,0BACE,yCAAsB,EACtB,YAAG,SAAS,EAAC,yBAAyB,+KAGlC,IACA,GACF,EAEL,KAAK,IAAI,KAAC,UAAU,IAAC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,GAAI,EAEtD,OAAO,CAAC,CAAC,CAAC,CACT,KAAC,YAAY,IAAC,KAAK,EAAC,6BAAwB,GAAG,CAChD,CAAC,CAAC,CAAC,CACF,KAAC,YAAY,IACX,OAAO,EAAE,OAAO,EAChB,cAAc,EAAE,IAAI,CAAC,EAAE,CAAC,KAAK,YAAY,CAAC,IAAI,CAAC,EAC/C,cAAc,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,YAAY,CAAC,EAAE,EAAE,IAAI,CAAC,EACzD,cAAc,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,YAAY,CAAC,EAAE,CAAC,GAC3C,CACH,EAEA,QAAQ,IAAI,CACX,KAAC,iBAAiB,IAChB,KAAK,EAAC,eAAe,EACrB,KAAK,EAAE,+BAA+B,QAAQ,CAAC,IAAI,gFAAgF,EACnI,KAAK,EAAC,eAAe,EACrB,KAAK,EAAE,QAAQ,CAAC,MAAM,EACtB,OAAO,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,GAChC,CACH,IACA,CACJ,CAAA;AACH,CAAC"}

package/dist/admin/surfaces/webServices/secret-reveal-modal.d.ts

@@ -0,0 +1,8 @@
+export declare function SecretRevealModal({ title, intro, label, value, onClose, }: {
+    title: string;
+    intro: string;
+    label: string;
+    value: string;
+    onClose: () => void;
+}): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=secret-reveal-modal.d.ts.map

package/dist/admin/surfaces/webServices/secret-reveal-modal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-reveal-modal.d.ts","sourceRoot":"","sources":["../../../../src/admin/surfaces/webServices/secret-reveal-modal.tsx"],"names":[],"mappings":"AAkBA,wBAAgB,iBAAiB,CAAC,EAChC,KAAK,EACL,KAAK,EACL,KAAK,EACL,KAAK,EACL,OAAO,GACR,EAAE;IACD,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,MAAM,IAAI,CAAA;CACpB,2CAkEA"}

package/dist/admin/surfaces/webServices/secret-reveal-modal.js

@@ -0,0 +1,30 @@
+'use client';
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+/**
+ * Reveal-once secret modal, ported verbatim from
+ * `apps/reference/components/secret-reveal-modal.tsx` (0.2.0 admin-app
+ * migration, plan §1.3 / §2, T9). No wiring substitutions — this component is
+ * purely presentational (no fetch/router/session dependency) and is shared by
+ * both `webServices.oauth` and `webServices.apiKeys`.
+ *
+ * OAuth client secrets and API keys are returned in plaintext exactly once, at
+ * creation time — the server only ever stores a hash. This modal surfaces that
+ * value with a copy button and an explicit "you won't see this again" warning,
+ * then discards it when the admin dismisses the dialog. The value lives only in
+ * this component's props for the lifetime of the modal; it is never persisted.
+ */
+import { useState } from 'react';
+export function SecretRevealModal({ title, intro, label, value, onClose, }) {
+    const [copied, setCopied] = useState(false);
+    async function handleCopy() {
+        try {
+            await navigator.clipboard.writeText(value);
+            setCopied(true);
+        }
+        catch {
+            setCopied(false);
+        }
+    }
+    return (_jsx("div", { className: "kywi-overlay-shell", role: "dialog", "aria-modal": "true", "aria-label": title, onClick: onClose, children: _jsxs("div", { className: "kywi-admin-secret-modal", onClick: e => e.stopPropagation(), children: [_jsxs("div", { className: "kywi-admin-picker-header", children: [_jsx("h2", { className: "kywi-admin-picker-title", children: title }), _jsx("button", { type: "button", className: "kywi-admin-picker-close", onClick: onClose, "aria-label": "Close", children: "\u00D7" })] }), _jsxs("div", { className: "kywi-admin-secret-modal-body", children: [_jsxs("div", { className: "kywi-admin-secret-warning", role: "alert", children: [_jsx("span", { "aria-hidden": "true", children: "\u26A0" }), _jsx("span", { children: intro })] }), _jsxs("div", { className: "kywi-field", children: [_jsx("label", { className: "kywi-field-label", htmlFor: "kywi-secret-value", children: label }), _jsxs("div", { className: "kywi-admin-secret-field", children: [_jsx("code", { id: "kywi-secret-value", className: "kywi-admin-secret-value", children: value }), _jsx("button", { type: "button", className: "kywi-btn kywi-btn-secondary", onClick: handleCopy, children: copied ? 'Copied!' : 'Copy' })] })] }), _jsx("div", { className: "kywi-admin-secret-actions", children: _jsx("button", { type: "button", className: "kywi-btn kywi-btn-primary", onClick: onClose, children: "Done" }) })] })] }) }));
+}
+//# sourceMappingURL=secret-reveal-modal.js.map

package/dist/admin/surfaces/webServices/secret-reveal-modal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-reveal-modal.js","sourceRoot":"","sources":["../../../../src/admin/surfaces/webServices/secret-reveal-modal.tsx"],"names":[],"mappings":"AAAA,YAAY,CAAA;;AAEZ;;;;;;;;;;;;GAYG;AAEH,OAAc,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAA;AAEvC,MAAM,UAAU,iBAAiB,CAAC,EAChC,KAAK,EACL,KAAK,EACL,KAAK,EACL,KAAK,EACL,OAAO,GAOR;IACC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;IAE3C,KAAK,UAAU,UAAU;QACvB,IAAI,CAAC;YACH,MAAM,SAAS,CAAC,SAAS,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;YAC1C,SAAS,CAAC,IAAI,CAAC,CAAA;QACjB,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,CAAC,KAAK,CAAC,CAAA;QAClB,CAAC;IACH,CAAC;IAED,OAAO,CACL,cACE,SAAS,EAAC,oBAAoB,EAC9B,IAAI,EAAC,QAAQ,gBACF,MAAM,gBACL,KAAK,EACjB,OAAO,EAAE,OAAO,YAEhB,eAAK,SAAS,EAAC,yBAAyB,EAAC,OAAO,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,eAAe,EAAE,aACxE,eAAK,SAAS,EAAC,0BAA0B,aACvC,aAAI,SAAS,EAAC,yBAAyB,YAAE,KAAK,GAAM,EACpD,iBACE,IAAI,EAAC,QAAQ,EACb,SAAS,EAAC,yBAAyB,EACnC,OAAO,EAAE,OAAO,gBACL,OAAO,uBAGX,IACL,EAEN,eAAK,SAAS,EAAC,8BAA8B,aAC3C,eAAK,SAAS,EAAC,2BAA2B,EAAC,IAAI,EAAC,OAAO,aACrD,8BAAkB,MAAM,uBAAS,EACjC,yBAAO,KAAK,GAAQ,IAChB,EAEN,eAAK,SAAS,EAAC,YAAY,aACzB,gBAAO,SAAS,EAAC,kBAAkB,EAAC,OAAO,EAAC,mBAAmB,YAC5D,KAAK,GACA,EACR,eAAK,SAAS,EAAC,yBAAyB,aACtC,eAAM,EAAE,EAAC,mBAAmB,EAAC,SAAS,EAAC,yBAAyB,YAC7D,KAAK,GACD,EACP,iBACE,IAAI,EAAC,QAAQ,EACb,SAAS,EAAC,6BAA6B,EACvC,OAAO,EAAE,UAAU,YAElB,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,GACrB,IACL,IACF,EAEN,cAAK,SAAS,EAAC,2BAA2B,YACxC,iBAAQ,IAAI,EAAC,QAAQ,EAAC,SAAS,EAAC,2BAA2B,EAAC,OAAO,EAAE,OAAO,qBAEnE,GACL,IACF,IACF,GACF,CACP,CAAA;AACH,CAAC"}

package/dist/admin/surfaces/webServices/web-services-data.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Data helpers for the admin Web Services surface (OAuth clients + API keys),
+ * ported verbatim from `apps/reference/app/admin/web-services/
+ * web-services-data.ts` (0.2.0 admin-app migration, plan §1.3 / §2, T9).
+ *
+ * OAuth client management is backed by /auth/oauth-clients (kywi_oauth_clients);
+ * API keys by /auth/api-keys (kywi_api_keys). Both create endpoints return a
+ * plaintext secret ONCE at creation — the server only stores a hash — so the
+ * surfaces capture it from the create response and reveal it a single time.
+ *
+ * The only substitution from the reference original: `adminFetch` (app-local
+ * `lib/admin-auth`) is now injected as a `FetchLike` parameter, sourced by each
+ * surface from `useAdminContext().fetch` (same pattern as
+ * `surfaces/users/users-data.ts`). All requests flow through the DB-backed
+ * /api/v1 handler.
+ */
+import type { FetchLike } from '../../content-editor-api.js';
+import type { OAuthClientSummary, OAuthClientCreateData, OAuthClientUpdateData } from '../../oauth-manager.js';
+import type { ApiKeySummary, ApiKeyCreateData } from '../../api-key-manager.js';
+export type { OAuthClientSummary, OAuthClientCreateData, OAuthClientUpdateData, ApiKeySummary, ApiKeyCreateData, };
+/** Shape of the POST /auth/oauth-clients response — secret shown once. */
+export interface OAuthClientCreated {
+    clientSecret: string;
+    client: OAuthClientSummary;
+}
+/** Shape of the POST /auth/api-keys response — raw key shown once. */
+export interface ApiKeyCreated {
+    rawKey: string;
+    row: ApiKeySummary;
+}
+export declare function loadOAuthClients(fetchFn: FetchLike): Promise<OAuthClientSummary[]>;
+export declare function createOAuthClient(fetchFn: FetchLike, data: OAuthClientCreateData): Promise<OAuthClientCreated>;
+export declare function updateOAuthClient(fetchFn: FetchLike, id: string, data: OAuthClientUpdateData): Promise<OAuthClientSummary>;
+export declare function deleteOAuthClient(fetchFn: FetchLike, id: string): Promise<void>;
+export declare function loadApiKeys(fetchFn: FetchLike): Promise<ApiKeySummary[]>;
+export declare function createApiKey(fetchFn: FetchLike, data: ApiKeyCreateData): Promise<ApiKeyCreated>;
+export declare function revokeApiKey(fetchFn: FetchLike, id: string): Promise<void>;
+//# sourceMappingURL=web-services-data.d.ts.map

package/dist/admin/surfaces/webServices/web-services-data.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-services-data.d.ts","sourceRoot":"","sources":["../../../../src/admin/surfaces/webServices/web-services-data.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAA;AAC5D,OAAO,KAAK,EACV,kBAAkB,EAClB,qBAAqB,EACrB,qBAAqB,EACtB,MAAM,wBAAwB,CAAA;AAC/B,OAAO,KAAK,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAA;AAE/E,YAAY,EACV,kBAAkB,EAClB,qBAAqB,EACrB,qBAAqB,EACrB,aAAa,EACb,gBAAgB,GACjB,CAAA;AAED,0EAA0E;AAC1E,MAAM,WAAW,kBAAkB;IACjC,YAAY,EAAE,MAAM,CAAA;IACpB,MAAM,EAAE,kBAAkB,CAAA;CAC3B;AAED,sEAAsE;AACtE,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAA;IACd,GAAG,EAAE,aAAa,CAAA;CACnB;AA+BD,wBAAsB,gBAAgB,CAAC,OAAO,EAAE,SAAS,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAExF;AAED,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,qBAAqB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAIpH;AAED,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,qBAAqB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAIhI;AAED,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAErF;AAID,wBAAsB,WAAW,CAAC,OAAO,EAAE,SAAS,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAE9E;AAED,wBAAsB,YAAY,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,aAAa,CAAC,CAIrG;AAED,wBAAsB,YAAY,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAEhF"}

package/dist/admin/surfaces/webServices/web-services-data.js

@@ -0,0 +1,52 @@
+async function readData(res) {
+    if (!res.ok) {
+        let message = `Request failed (${res.status})`;
+        try {
+            const body = await res.json();
+            message = body?.error?.message ?? message;
+        }
+        catch {
+            /* keep default */
+        }
+        throw new Error(message);
+    }
+    const body = await res.json();
+    return body.data;
+}
+async function expectOk(res) {
+    if (res.ok)
+        return;
+    let message = `Request failed (${res.status})`;
+    try {
+        const body = await res.json();
+        message = body?.error?.message ?? message;
+    }
+    catch {
+        /* keep default */
+    }
+    throw new Error(message);
+}
+// ─── OAuth clients ────────────────────────────────────────────────────────────
+export async function loadOAuthClients(fetchFn) {
+    return readData(await fetchFn('/api/v1/auth/oauth-clients'));
+}
+export async function createOAuthClient(fetchFn, data) {
+    return readData(await fetchFn('/api/v1/auth/oauth-clients', { method: 'POST', body: JSON.stringify(data) }));
+}
+export async function updateOAuthClient(fetchFn, id, data) {
+    return readData(await fetchFn(`/api/v1/auth/oauth-clients/${id}`, { method: 'PUT', body: JSON.stringify(data) }));
+}
+export async function deleteOAuthClient(fetchFn, id) {
+    await expectOk(await fetchFn(`/api/v1/auth/oauth-clients/${id}`, { method: 'DELETE' }));
+}
+// ─── API keys ─────────────────────────────────────────────────────────────────
+export async function loadApiKeys(fetchFn) {
+    return readData(await fetchFn('/api/v1/auth/api-keys'));
+}
+export async function createApiKey(fetchFn, data) {
+    return readData(await fetchFn('/api/v1/auth/api-keys', { method: 'POST', body: JSON.stringify(data) }));
+}
+export async function revokeApiKey(fetchFn, id) {
+    await expectOk(await fetchFn(`/api/v1/auth/api-keys/${id}`, { method: 'DELETE' }));
+}
+//# sourceMappingURL=web-services-data.js.map

package/dist/admin/surfaces/webServices/web-services-data.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-services-data.js","sourceRoot":"","sources":["../../../../src/admin/surfaces/webServices/web-services-data.ts"],"names":[],"mappings":"AA4CA,KAAK,UAAU,QAAQ,CAAI,GAAa;IACtC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,IAAI,OAAO,GAAG,mBAAmB,GAAG,CAAC,MAAM,GAAG,CAAA;QAC9C,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;YAC7B,OAAO,GAAG,IAAI,EAAE,KAAK,EAAE,OAAO,IAAI,OAAO,CAAA;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,kBAAkB;QACpB,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAA;IAC1B,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;IAC7B,OAAO,IAAI,CAAC,IAAS,CAAA;AACvB,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,GAAa;IACnC,IAAI,GAAG,CAAC,EAAE;QAAE,OAAM;IAClB,IAAI,OAAO,GAAG,mBAAmB,GAAG,CAAC,MAAM,GAAG,CAAA;IAC9C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;QAC7B,OAAO,GAAG,IAAI,EAAE,KAAK,EAAE,OAAO,IAAI,OAAO,CAAA;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,kBAAkB;IACpB,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAA;AAC1B,CAAC;AAED,iFAAiF;AAEjF,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,OAAkB;IACvD,OAAO,QAAQ,CAAuB,MAAM,OAAO,CAAC,4BAA4B,CAAC,CAAC,CAAA;AACpF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAAkB,EAAE,IAA2B;IACrF,OAAO,QAAQ,CACb,MAAM,OAAO,CAAC,4BAA4B,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAC5F,CAAA;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAAkB,EAAE,EAAU,EAAE,IAA2B;IACjG,OAAO,QAAQ,CACb,MAAM,OAAO,CAAC,8BAA8B,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CACjG,CAAA;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAAkB,EAAE,EAAU;IACpE,MAAM,QAAQ,CAAC,MAAM,OAAO,CAAC,8BAA8B,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAA;AACzF,CAAC;AAED,iFAAiF;AAEjF,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAkB;IAClD,OAAO,QAAQ,CAAkB,MAAM,OAAO,CAAC,uBAAuB,CAAC,CAAC,CAAA;AAC1E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAAkB,EAAE,IAAsB;IAC3E,OAAO,QAAQ,CACb,MAAM,OAAO,CAAC,uBAAuB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CACvF,CAAA;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAAkB,EAAE,EAAU;IAC/D,MAAM,QAAQ,CAAC,MAAM,OAAO,CAAC,yBAAyB,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAA;AACpF,CAAC"}

package/dist/api/admin-features-routes.d.ts

@@ -0,0 +1,10 @@
+import type { Router } from './router.js';
+import type { KywiDb } from '../db/client.js';
+import type { KywiConfig } from '../config/types.js';
+export interface AdminFeaturesRouteContext {
+    config: KywiConfig;
+    db: KywiDb;
+    authSecret: string;
+}
+export declare function registerAdminFeaturesRoutes(router: Router, ctx: AdminFeaturesRouteContext): void;
+//# sourceMappingURL=admin-features-routes.d.ts.map

package/dist/api/admin-features-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-features-routes.d.ts","sourceRoot":"","sources":["../../src/api/admin-features-routes.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAA;AAC7C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAA;AA2BpD,MAAM,WAAW,yBAAyB;IACxC,MAAM,EAAE,UAAU,CAAA;IAClB,EAAE,EAAE,MAAM,CAAA;IACV,UAAU,EAAE,MAAM,CAAA;CACnB;AAED,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,yBAAyB,GAAG,IAAI,CAiChG"}

package/dist/api/admin-features-routes.js

@@ -0,0 +1,61 @@
+import { z } from 'zod';
+import { jsonOk, jsonError, unauthorized, forbidden, validationError } from './response.js';
+import { resolveAuth } from './auth.js';
+import { hasMinRole } from '../auth/roles.js';
+import { toSiteUuid } from './site-context.js';
+import { getAdminFeatureFlags, setAdminFeatureFlags } from '../db/admin-features-queries.js';
+/**
+ * T16 runtime admin feature-flag routes (plan §4). Thin wrappers over the
+ * per-site `admin.features` settings-key queries.
+ *
+ * Authz is deliberately asymmetric:
+ *  - `GET /admin-features?siteId=` is readable by ANY authenticated admin, because
+ *    every signed-in role needs the flag map to render its nav (the map decides
+ *    which surfaces are hidden). No role floor beyond a valid session.
+ *  - `PUT /admin-features?siteId=` is superAdmin-ONLY — stricter than the
+ *    siteAdmin+ general `/sites/:siteId/settings` routes — since flipping these
+ *    flags reshapes the admin for everyone on the site.
+ *
+ * The runtime toggle is a UI gate, not a security boundary: the underlying
+ * `/api/v1` endpoints stay governed by roles regardless of these flags
+ * (plan §4, risk 4). `siteId` (config slug or DB UUID, or omitted) is resolved
+ * to a DB UUID via `toSiteUuid`, falling back to the first configured site.
+ */
+const flagsSchema = z.record(z.boolean());
+export function registerAdminFeaturesRoutes(router, ctx) {
+    const { config, db, authSecret } = ctx;
+    // GET /admin-features?siteId= — any authenticated admin (needed to render nav).
+    router.get('/admin-features', async (req) => {
+        const auth = await resolveAuth(req.headers.get('authorization'), authSecret, db);
+        if (!auth.user)
+            return unauthorized();
+        const url = new URL(req.url);
+        const siteId = await toSiteUuid(db, url.searchParams.get('siteId'), config);
+        const flags = await getAdminFeatureFlags(db, siteId);
+        return jsonOk({ siteId, flags });
+    });
+    // PUT /admin-features?siteId= — superAdmin only. Body = flag map { id: boolean }.
+    router.put('/admin-features', async (req) => {
+        const auth = await resolveAuth(req.headers.get('authorization'), authSecret, db);
+        if (!auth.user)
+            return unauthorized();
+        if (!hasMinRole(auth.user.role, 'superAdmin'))
+            return forbidden();
+        let body;
+        try {
+            body = await req.json();
+        }
+        catch {
+            return jsonError('BAD_REQUEST', 'Invalid JSON', 400);
+        }
+        const parsed = flagsSchema.safeParse(body);
+        if (!parsed.success) {
+            return validationError(parsed.error.errors.map(e => ({ path: e.path.join('.'), message: e.message })));
+        }
+        const url = new URL(req.url);
+        const siteId = await toSiteUuid(db, url.searchParams.get('siteId'), config);
+        const flags = await setAdminFeatureFlags(db, siteId, parsed.data);
+        return jsonOk({ siteId, flags });
+    });
+}
+//# sourceMappingURL=admin-features-routes.js.map

package/dist/api/admin-features-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-features-routes.js","sourceRoot":"","sources":["../../src/api/admin-features-routes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAIvB,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAC3F,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAA;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAC9C,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAA;AAE5F;;;;;;;;;;;;;;;;GAgBG;AAEH,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAA;AAQzC,MAAM,UAAU,2BAA2B,CAAC,MAAc,EAAE,GAA8B;IACxF,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,GAAG,GAAG,CAAA;IAEtC,gFAAgF;IAChF,MAAM,CAAC,GAAG,CAAC,iBAAiB,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAC1C,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,UAAU,EAAE,EAAE,CAAC,CAAA;QAChF,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO,YAAY,EAAE,CAAA;QAErC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,EAAE,EAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAA;QAC3E,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;QACpD,OAAO,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAA;IAClC,CAAC,CAAC,CAAA;IAEF,kFAAkF;IAClF,MAAM,CAAC,GAAG,CAAC,iBAAiB,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAC1C,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,UAAU,EAAE,EAAE,CAAC,CAAA;QAChF,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO,YAAY,EAAE,CAAA;QACrC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC;YAAE,OAAO,SAAS,EAAE,CAAA;QAEjE,IAAI,IAAa,CAAA;QACjB,IAAI,CAAC;YAAC,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,SAAS,CAAC,aAAa,EAAE,cAAc,EAAE,GAAG,CAAC,CAAA;QAAC,CAAC;QAE9F,MAAM,MAAM,GAAG,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;QAC1C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAA;QACxG,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,EAAE,EAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAA;QAC3E,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAA;QACjE,OAAO,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAA;IAClC,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/dist/api/graphql/resolvers.d.ts

@@ -30,10 +30,10 @@ export declare function createResolvers(db: KywiDb, config: KywiConfig): {
         slug: string;
         sortOrder: number;
         updatedAt: Date;
-        createdAt: Date;
         name: string;
-        isActive: boolean;
         description: string | null;
+        createdAt: Date;
+        isActive: boolean;
         isInterestGroup: boolean;
         notes: string | null;
     }[]>;
@@ -46,18 +46,18 @@ export declare function createResolvers(db: KywiDb, config: KywiConfig): {
         id: string;
         siteId: string;
         updatedAt: Date;
+        caption: string | null;
+        width: number | null;
+        height: number | null;
+        tags: unknown;
         createdAt: Date;
         deletedAt: Date | null;
         filename: string;
         mimeType: string;
         fileSize: number;
-        width: number | null;
-        height: number | null;
         duration: number | null;
         originalFilename: string;
         altText: string | null;
-        caption: string | null;
-        tags: unknown;
         uploadedBy: string | null;
         storageKey: string;
     } | null>;

package/dist/api/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/api/index.ts"],"names":[],"mappings":"AA2CA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AA4BvD,OAAO,KAAK,EAAE,UAAU,EAAmD,MAAM,oBAAoB,CAAA;AACrG,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAA;AAE7C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AACxD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AACtD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAA;AACxD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAA;AAE1D,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,cAAc,eAAe,CAAA;AAC7B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,sBAAsB,CAAA;AACpC,cAAc,WAAW,CAAA;AACzB,cAAc,kBAAkB,CAAA;AAChC,cAAc,kBAAkB,CAAA;AAChC,cAAc,mBAAmB,CAAA;AACjC,cAAc,qBAAqB,CAAA;AACnC,cAAc,mBAAmB,CAAA;AACjC,cAAc,oBAAoB,CAAA;AAClC,cAAc,iBAAiB,CAAA;AAC/B,cAAc,kBAAkB,CAAA;AAChC,cAAc,oBAAoB,CAAA;AAClC,cAAc,kBAAkB,CAAA;AAChC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,mBAAmB,CAAA;AACjC,cAAc,kBAAkB,CAAA;AAChC,cAAc,wBAAwB,CAAA;AACtC,cAAc,uBAAuB,CAAA;AACrC,cAAc,sBAAsB,CAAA;AACpC,cAAc,qBAAqB,CAAA;AACnC,cAAc,sBAAsB,CAAA;AACpC,cAAc,iBAAiB,CAAA;AAC/B,cAAc,qBAAqB,CAAA;AACnC,cAAc,oBAAoB,CAAA;AAClC,cAAc,sBAAsB,CAAA;AACpC,cAAc,8BAA8B,CAAA;AAC5C,cAAc,8BAA8B,CAAA;AAC5C,OAAO,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAA;AACjE,OAAO,EAAE,+BAA+B,EAAE,MAAM,gCAAgC,CAAA;AAChF,cAAc,oBAAoB,CAAA;AAClC,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAA;AAC/D,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAA;AAC/D,OAAO,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAA;AACxE,OAAO,EAAE,0BAA0B,EAAE,MAAM,2BAA2B,CAAA;AACtE,cAAc,kBAAkB,CAAA;AAChC,cAAc,oBAAoB,CAAA;AAClC,cAAc,gCAAgC,CAAA;AAC9C,cAAc,0BAA0B,CAAA;AACxC,cAAc,qBAAqB,CAAA;AACnC,cAAc,uBAAuB,CAAA;AACrC,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAA;AAC/D,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAA;AAElD,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,UAAU,CAAA;IAClB,EAAE,EAAE,MAAM,CAAA;IACV,UAAU,EAAE,MAAM,CAAA;IAClB,OAAO,CAAC,EAAE,eAAe,CAAA;IACzB,aAAa,CAAC,EAAE,aAAa,CAAA;IAC7B,YAAY,CAAC,EAAE,YAAY,CAAA;IAC3B,aAAa,CAAC,EAAE,iBAAiB,CAAA;IACjC,mFAAmF;IACnF,eAAe,CAAC,EAAE,eAAe,CAAA;CAClC;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;CAChE;AAED,wBAAsB,oBAAoB,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC,CAwa3F"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/api/index.ts"],"names":[],"mappings":"AA4CA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AA4BvD,OAAO,KAAK,EAAE,UAAU,EAAmD,MAAM,oBAAoB,CAAA;AACrG,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAA;AAE7C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AACxD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AACtD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAA;AACxD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAA;AAE1D,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,cAAc,eAAe,CAAA;AAC7B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,sBAAsB,CAAA;AACpC,cAAc,WAAW,CAAA;AACzB,cAAc,kBAAkB,CAAA;AAChC,cAAc,kBAAkB,CAAA;AAChC,cAAc,mBAAmB,CAAA;AACjC,cAAc,qBAAqB,CAAA;AACnC,cAAc,mBAAmB,CAAA;AACjC,cAAc,oBAAoB,CAAA;AAClC,cAAc,iBAAiB,CAAA;AAC/B,cAAc,kBAAkB,CAAA;AAChC,cAAc,oBAAoB,CAAA;AAClC,cAAc,kBAAkB,CAAA;AAChC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,mBAAmB,CAAA;AACjC,cAAc,kBAAkB,CAAA;AAChC,cAAc,wBAAwB,CAAA;AACtC,cAAc,uBAAuB,CAAA;AACrC,cAAc,sBAAsB,CAAA;AACpC,cAAc,qBAAqB,CAAA;AACnC,cAAc,sBAAsB,CAAA;AACpC,cAAc,iBAAiB,CAAA;AAC/B,cAAc,qBAAqB,CAAA;AACnC,cAAc,oBAAoB,CAAA;AAClC,cAAc,sBAAsB,CAAA;AACpC,cAAc,8BAA8B,CAAA;AAC5C,cAAc,8BAA8B,CAAA;AAC5C,OAAO,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAA;AACjE,OAAO,EAAE,+BAA+B,EAAE,MAAM,gCAAgC,CAAA;AAChF,cAAc,oBAAoB,CAAA;AAClC,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAA;AAC/D,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAA;AAC/D,OAAO,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAA;AACxE,OAAO,EAAE,0BAA0B,EAAE,MAAM,2BAA2B,CAAA;AACtE,cAAc,kBAAkB,CAAA;AAChC,cAAc,oBAAoB,CAAA;AAClC,cAAc,gCAAgC,CAAA;AAC9C,cAAc,0BAA0B,CAAA;AACxC,cAAc,qBAAqB,CAAA;AACnC,cAAc,uBAAuB,CAAA;AACrC,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAA;AAC/D,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAA;AAElD,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,UAAU,CAAA;IAClB,EAAE,EAAE,MAAM,CAAA;IACV,UAAU,EAAE,MAAM,CAAA;IAClB,OAAO,CAAC,EAAE,eAAe,CAAA;IACzB,aAAa,CAAC,EAAE,aAAa,CAAA;IAC7B,YAAY,CAAC,EAAE,YAAY,CAAA;IAC3B,aAAa,CAAC,EAAE,iBAAiB,CAAA;IACjC,mFAAmF;IACnF,eAAe,CAAC,EAAE,eAAe,CAAA;CAClC;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;CAChE;AAED,wBAAsB,oBAAoB,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC,CAya3F"}