@kywi-software/core 0.1.0

package/dist/admin/version-diff.js

@@ -0,0 +1,22 @@
+import { jsxs as _jsxs, jsx as _jsx } from "react/jsx-runtime";
+function computeDiff(left, right) {
+    const allKeys = new Set([...Object.keys(left), ...Object.keys(right)]);
+    return Array.from(allKeys).sort().map(key => ({
+        key,
+        leftValue: left[key],
+        rightValue: right[key],
+        status: !(key in left) ? 'added' : !(key in right) ? 'removed' : JSON.stringify(left[key]) !== JSON.stringify(right[key]) ? 'changed' : 'unchanged',
+    }));
+}
+function formatValue(value) {
+    if (value === undefined)
+        return '';
+    if (typeof value === 'string')
+        return value;
+    return JSON.stringify(value);
+}
+export function VersionDiff({ left, right }) {
+    const entries = computeDiff(left.snapshot, right.snapshot);
+    return (_jsxs("div", { className: "kywi-admin-diff", children: [_jsxs("div", { className: "kywi-admin-diff-split", children: [_jsx("div", { className: "kywi-admin-diff-side kywi-admin-diff-left", children: _jsxs("div", { className: "kywi-admin-diff-header", children: [_jsxs("h3", { className: "kywi-admin-diff-version", children: ["Version ", left.version] }), _jsx("time", { className: "kywi-admin-diff-date", children: left.createdAt }), left.changeNote && _jsx("p", { className: "kywi-admin-diff-note", children: left.changeNote })] }) }), _jsx("div", { className: "kywi-admin-diff-side kywi-admin-diff-right", children: _jsxs("div", { className: "kywi-admin-diff-header", children: [_jsxs("h3", { className: "kywi-admin-diff-version", children: ["Version ", right.version] }), _jsx("time", { className: "kywi-admin-diff-date", children: right.createdAt }), right.changeNote && _jsx("p", { className: "kywi-admin-diff-note", children: right.changeNote })] }) })] }), _jsx("div", { className: "kywi-admin-diff-fields", children: entries.map(entry => (_jsxs("div", { className: `kywi-admin-diff-row kywi-admin-diff-${entry.status}`, children: [_jsx("div", { className: "kywi-admin-diff-key", children: entry.key }), _jsxs("div", { className: "kywi-admin-diff-values kywi-admin-diff-split", children: [_jsx("div", { className: "kywi-admin-diff-side kywi-admin-diff-left", children: _jsx("span", { className: "kywi-admin-diff-value", children: entry.status !== 'added' ? formatValue(entry.leftValue) : '' }) }), _jsx("div", { className: "kywi-admin-diff-side kywi-admin-diff-right", children: _jsx("span", { className: "kywi-admin-diff-value", children: entry.status !== 'removed' ? formatValue(entry.rightValue) : '' }) })] })] }, entry.key))) })] }));
+}
+//# sourceMappingURL=version-diff.js.map

package/dist/admin/version-diff.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version-diff.js","sourceRoot":"","sources":["../../src/admin/version-diff.tsx"],"names":[],"mappings":";AAqBA,SAAS,WAAW,CAAC,IAA6B,EAAE,KAA8B;IAChF,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IACtE,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC5C,GAAG;QACH,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC;QACpB,UAAU,EAAE,KAAK,CAAC,GAAG,CAAC;QACtB,MAAM,EAAE,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW;KACpJ,CAAC,CAAC,CAAA;AACL,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,CAAA;IAClC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAA;IAC3C,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;AAC9B,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,EAAE,IAAI,EAAE,KAAK,EAAoB;IAC3D,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAA;IAE1D,OAAO,CACL,eAAK,SAAS,EAAC,iBAAiB,aAC9B,eAAK,SAAS,EAAC,uBAAuB,aACpC,cAAK,SAAS,EAAC,2CAA2C,YACxD,eAAK,SAAS,EAAC,wBAAwB,aACrC,cAAI,SAAS,EAAC,yBAAyB,yBAAU,IAAI,CAAC,OAAO,IAAM,EACnE,eAAM,SAAS,EAAC,sBAAsB,YAAE,IAAI,CAAC,SAAS,GAAQ,EAC7D,IAAI,CAAC,UAAU,IAAI,YAAG,SAAS,EAAC,sBAAsB,YAAE,IAAI,CAAC,UAAU,GAAK,IACzE,GACF,EACN,cAAK,SAAS,EAAC,4CAA4C,YACzD,eAAK,SAAS,EAAC,wBAAwB,aACrC,cAAI,SAAS,EAAC,yBAAyB,yBAAU,KAAK,CAAC,OAAO,IAAM,EACpE,eAAM,SAAS,EAAC,sBAAsB,YAAE,KAAK,CAAC,SAAS,GAAQ,EAC9D,KAAK,CAAC,UAAU,IAAI,YAAG,SAAS,EAAC,sBAAsB,YAAE,KAAK,CAAC,UAAU,GAAK,IAC3E,GACF,IACF,EAEN,cAAK,SAAS,EAAC,wBAAwB,YACpC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CACpB,eAEE,SAAS,EAAE,uCAAuC,KAAK,CAAC,MAAM,EAAE,aAEhE,cAAK,SAAS,EAAC,qBAAqB,YAAE,KAAK,CAAC,GAAG,GAAO,EACtD,eAAK,SAAS,EAAC,8CAA8C,aAC3D,cAAK,SAAS,EAAC,2CAA2C,YACxD,eAAM,SAAS,EAAC,uBAAuB,YACpC,KAAK,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,GACxD,GACH,EACN,cAAK,SAAS,EAAC,4CAA4C,YACzD,eAAM,SAAS,EAAC,uBAAuB,YACpC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,GAC3D,GACH,IACF,KAfD,KAAK,CAAC,GAAG,CAgBV,CACP,CAAC,GACE,IACF,CACP,CAAA;AACH,CAAC"}

package/dist/api/__tests__/adapter-proxy-routes.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=adapter-proxy-routes.test.d.ts.map

package/dist/api/__tests__/adapter-proxy-routes.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter-proxy-routes.test.d.ts","sourceRoot":"","sources":["../../../src/api/__tests__/adapter-proxy-routes.test.ts"],"names":[],"mappings":""}

package/dist/api/__tests__/adapter-proxy-routes.test.js

@@ -0,0 +1,72 @@
+import { describe, it, expect, beforeEach } from 'vitest';
+import { Router } from '../router.js';
+import { registerAdapterProxyRoutes } from '../adapter-proxy-routes.js';
+import { AdapterRegistry } from '../../audiences/adapters/registry.js';
+import { geoipStubAdapter, staticAttributesAdapter } from '../../audiences/adapters/builtin.js';
+import { evaluateInstantCondition } from '../../audiences/evaluator/instant-match.js';
+import { createEmptySignals } from '../../audiences/types.js';
+function proxyRequest(adapterId, body) {
+    return new Request(`https://x.com/kywi/adapters/${adapterId}`, {
+        method: 'POST',
+        headers: { 'content-type': 'application/json' },
+        body: body === undefined ? '' : JSON.stringify(body),
+    });
+}
+describe('adapter proxy route', () => {
+    let router;
+    let registry;
+    beforeEach(() => {
+        registry = new AdapterRegistry();
+        registry.register(geoipStubAdapter());
+        registry.register(staticAttributesAdapter({ tier: 'enterprise' }, 'segment'));
+        registry.register({ id: 'client-only', side: 'client', fields: ['client-only.x'], collect: async () => ({}) });
+        router = new Router();
+        registerAdapterProxyRoutes(router, { adapterRegistry: registry, authSecret: 'test-secret' });
+    });
+    it('runs a server-proxy adapter and returns its collected fields', async () => {
+        const res = await router.handle(proxyRequest('segment', { signals: {} }), ['kywi', 'adapters', 'segment']);
+        expect(res.status).toBe(200);
+        const json = await res.json();
+        expect(json.data).toEqual({ 'segment.tier': 'enterprise' });
+    });
+    it('passes the POSTed signals to collect()', async () => {
+        const signals = { utm: { source: 'newsletter', medium: null, campaign: null, term: null, content: null } };
+        const res = await router.handle(proxyRequest('geoip-stub', { signals }), ['kywi', 'adapters', 'geoip-stub']);
+        const json = await res.json();
+        // region derives from utm.source, proving the body signals reached collect()
+        expect(json.data).toEqual({ 'geoip-stub.country': 'US', 'geoip-stub.region': 'campaign' });
+    });
+    it('returns 404 for an unknown adapter', async () => {
+        const res = await router.handle(proxyRequest('nope', { signals: {} }), ['kywi', 'adapters', 'nope']);
+        expect(res.status).toBe(404);
+    });
+    it('returns 404 for a client-side adapter (not proxyable)', async () => {
+        const res = await router.handle(proxyRequest('client-only', { signals: {} }), ['kywi', 'adapters', 'client-only']);
+        expect(res.status).toBe(404);
+    });
+    it('falls back to an empty signal set when the body carries none', async () => {
+        // static-attributes ignores signals, so it still resolves with no body.
+        const res = await router.handle(proxyRequest('segment'), ['kywi', 'adapters', 'segment']);
+        expect(res.status).toBe(200);
+        const json = await res.json();
+        expect(json.data).toEqual({ 'segment.tier': 'enterprise' });
+    });
+});
+describe('adapter-driven audience evaluation (end-to-end)', () => {
+    it('collect() output flows into an audience condition match', async () => {
+        // 1. Server-proxy collect() runs (as the mounted route would call it).
+        const adapter = geoipStubAdapter();
+        const collected = await adapter.collect({});
+        // 2. Client merges the collected fields into VisitorSignals.adapters.
+        const signals = { ...createEmptySignals(), adapters: { ...collected } };
+        // 3. An audience condition on the adapter-provided signal evaluates correctly.
+        const cond = {
+            type: 'instant', id: 'c1', groupId: 'g1',
+            signal: 'adapter.geoip-stub.country', operator: 'equals', value: 'US',
+        };
+        expect(evaluateInstantCondition(cond, signals)).toBe(true);
+        const noMatch = { ...cond, value: 'CA' };
+        expect(evaluateInstantCondition(noMatch, signals)).toBe(false);
+    });
+});
+//# sourceMappingURL=adapter-proxy-routes.test.js.map

package/dist/api/__tests__/adapter-proxy-routes.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter-proxy-routes.test.js","sourceRoot":"","sources":["../../../src/api/__tests__/adapter-proxy-routes.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAA;AACzD,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AACrC,OAAO,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAA;AACvE,OAAO,EAAE,eAAe,EAAE,MAAM,sCAAsC,CAAA;AACtE,OAAO,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,MAAM,qCAAqC,CAAA;AAC/F,OAAO,EAAE,wBAAwB,EAAE,MAAM,4CAA4C,CAAA;AACrF,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAA;AAG7D,SAAS,YAAY,CAAC,SAAiB,EAAE,IAAc;IACrD,OAAO,IAAI,OAAO,CAAC,+BAA+B,SAAS,EAAE,EAAE;QAC7D,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;KACrD,CAAC,CAAA;AACJ,CAAC;AAED,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,IAAI,MAAc,CAAA;IAClB,IAAI,QAAyB,CAAA;IAE7B,UAAU,CAAC,GAAG,EAAE;QACd,QAAQ,GAAG,IAAI,eAAe,EAAE,CAAA;QAChC,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,EAAE,CAAC,CAAA;QACrC,QAAQ,CAAC,QAAQ,CAAC,uBAAuB,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,SAAS,CAAC,CAAC,CAAA;QAC7E,QAAQ,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,eAAe,CAAC,EAAE,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;QAC9G,MAAM,GAAG,IAAI,MAAM,EAAE,CAAA;QACrB,0BAA0B,CAAC,MAAM,EAAE,EAAE,eAAe,EAAE,QAAQ,EAAE,UAAU,EAAE,aAAa,EAAE,CAAC,CAAA;IAC9F,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,CAAA;QAC1G,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAuC,CAAA;QAClE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAA;IAC7D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACtD,MAAM,OAAO,GAAG,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAA;QAC1G,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,YAAY,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC,CAAA;QAC5G,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAuC,CAAA;QAClE,6EAA6E;QAC7E,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,oBAAoB,EAAE,IAAI,EAAE,mBAAmB,EAAE,UAAU,EAAE,CAAC,CAAA;IAC5F,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;QAClD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAA;QACpG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAC9B,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,aAAa,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC,CAAA;QAClH,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAC9B,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,wEAAwE;QACxE,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,CAAA;QACzF,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAuC,CAAA;QAClE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAA;IAC7D,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,iDAAiD,EAAE,GAAG,EAAE;IAC/D,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACvE,uEAAuE;QACvE,MAAM,OAAO,GAAG,gBAAgB,EAAE,CAAA;QAClC,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QAE3C,sEAAsE;QACtE,MAAM,OAAO,GAAG,EAAE,GAAG,kBAAkB,EAAE,EAAE,QAAQ,EAAE,EAAE,GAAG,SAAS,EAAE,EAAE,CAAA;QAEvE,+EAA+E;QAC/E,MAAM,IAAI,GAA0B;YAClC,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI;YACxC,MAAM,EAAE,4BAA4B,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI;SACtE,CAAA;QACD,MAAM,CAAC,wBAAwB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAE1D,MAAM,OAAO,GAA0B,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAA;QAC/D,MAAM,CAAC,wBAAwB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAChE,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/api/__tests__/admin-tree-routes.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=admin-tree-routes.test.d.ts.map

package/dist/api/__tests__/admin-tree-routes.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-tree-routes.test.d.ts","sourceRoot":"","sources":["../../../src/api/__tests__/admin-tree-routes.test.ts"],"names":[],"mappings":""}

package/dist/api/__tests__/admin-tree-routes.test.js

@@ -0,0 +1,60 @@
+import { describe, it, expect, vi, beforeEach } from 'vitest';
+import { Router } from '../router.js';
+import { registerTreeRoutes } from '../tree-routes.js';
+import { getAllContentForSite } from '../../db/tree-queries.js';
+const ADMIN_TOKEN = 'test-secret';
+vi.mock('../../db/tree-queries.js', async (importOriginal) => {
+    const actual = await importOriginal();
+    return {
+        ...actual,
+        getAllContentForSite: vi.fn().mockResolvedValue([
+            { id: '1', parentId: null, title: 'Home', slug: 'home', path: '/home/', depth: 0, sortOrder: 0, isNav: true, isLocked: false, status: 'published', contentTypeName: 'page' },
+            { id: '2', parentId: '1', title: 'About', slug: 'about', path: '/home/about/', depth: 1, sortOrder: 0, isNav: true, isLocked: false, status: 'published', contentTypeName: 'page' },
+            { id: '3', parentId: '1', title: 'Draft Post', slug: 'draft-post', path: '/home/draft-post/', depth: 1, sortOrder: 1, isNav: false, isLocked: false, status: 'draft', contentTypeName: 'blogPost' },
+        ]),
+        moveContent: vi.fn().mockResolvedValue(undefined),
+        copyContent: vi.fn().mockResolvedValue('new-id'),
+        reorderSiblings: vi.fn().mockResolvedValue(undefined),
+    };
+});
+vi.mock('../../db/lock-queries.js', () => ({ getLock: vi.fn().mockResolvedValue(null) }));
+vi.mock('../../db/content-queries.js', () => ({ getContentById: vi.fn().mockResolvedValue(null) }));
+vi.mock('../../db/filename-archive-queries.js', () => ({ archivePath: vi.fn().mockResolvedValue(undefined) }));
+vi.mock('../auth.js', () => ({
+    resolveAuth: vi.fn().mockResolvedValue({ user: { id: 'u1', role: 'admin' } }),
+}));
+vi.mock('../../auth/roles.js', () => ({
+    canAccessContent: vi.fn().mockReturnValue(true),
+}));
+describe('GET /tree', () => {
+    let router;
+    beforeEach(() => {
+        router = new Router();
+        registerTreeRoutes(router, {}, ADMIN_TOKEN, 'site-1');
+    });
+    it('returns 200 with nested tree', async () => {
+        const res = await router.handle(new Request('http://localhost/api/v1/tree'), ['tree']);
+        expect(res.status).toBe(200);
+        const body = await res.json();
+        expect(Array.isArray(body.data)).toBe(true);
+        // Root has 1 node (Home)
+        expect(body.data).toHaveLength(1);
+        expect(body.data[0].id).toBe('1');
+        // Home has 2 children (About, Draft Post)
+        expect(body.data[0].children).toHaveLength(2);
+    });
+    it('exposes status and contentTypeName on nodes', async () => {
+        const res = await router.handle(new Request('http://localhost/api/v1/tree'), ['tree']);
+        const body = await res.json();
+        const draftPost = body.data[0].children[1];
+        expect(draftPost.status).toBe('draft');
+        expect(draftPost.contentTypeName).toBe('blogPost');
+        expect(draftPost.isNav).toBe(false);
+    });
+    it('accepts ?siteId= query param override', async () => {
+        const res = await router.handle(new Request('http://localhost/api/v1/tree?siteId=site-2'), ['tree']);
+        expect(res.status).toBe(200);
+        expect(vi.mocked(getAllContentForSite)).toHaveBeenCalledWith(expect.anything(), 'site-2');
+    });
+});
+//# sourceMappingURL=admin-tree-routes.test.js.map

package/dist/api/__tests__/admin-tree-routes.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-tree-routes.test.js","sourceRoot":"","sources":["../../../src/api/__tests__/admin-tree-routes.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAA;AAC7D,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AACrC,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAA;AACtD,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAA;AAE/D,MAAM,WAAW,GAAG,aAAa,CAAA;AAEjC,EAAE,CAAC,IAAI,CAAC,0BAA0B,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE;IAC3D,MAAM,MAAM,GAAG,MAAM,cAAc,EAA6C,CAAA;IAChF,OAAO;QACL,GAAG,MAAM;QACT,oBAAoB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC;YAC9C,EAAE,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,EAAE;YAC5K,EAAE,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,EAAE;YACnL,EAAE,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE;SACpM,CAAC;QACF,WAAW,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC;QACjD,WAAW,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,QAAQ,CAAC;QAChD,eAAe,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC;KACtD,CAAA;AACH,CAAC,CAAC,CAAA;AAEF,EAAE,CAAC,IAAI,CAAC,0BAA0B,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAA;AACzF,EAAE,CAAC,IAAI,CAAC,6BAA6B,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,cAAc,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAA;AACnG,EAAE,CAAC,IAAI,CAAC,sCAAsC,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAA;AAC9G,EAAE,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC;IAC3B,WAAW,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC;CAC9E,CAAC,CAAC,CAAA;AACH,EAAE,CAAC,IAAI,CAAC,qBAAqB,EAAE,GAAG,EAAE,CAAC,CAAC;IACpC,gBAAgB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC;CAChD,CAAC,CAAC,CAAA;AAEH,QAAQ,CAAC,WAAW,EAAE,GAAG,EAAE;IACzB,IAAI,MAAc,CAAA;IAElB,UAAU,CAAC,GAAG,EAAE;QACd,MAAM,GAAG,IAAI,MAAM,EAAE,CAAA;QACrB,kBAAkB,CAAC,MAAM,EAAE,EAAS,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAA;IAC9D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,8BAA8B,EAAE,KAAK,IAAI,EAAE;QAC5C,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAC7B,IAAI,OAAO,CAAC,8BAA8B,CAAC,EAC3C,CAAC,MAAM,CAAC,CACT,CAAA;QACD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAS,CAAA;QACpC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC3C,yBAAyB;QACzB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;QACjC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QACjC,0CAA0C;QAC1C,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;IAC/C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC3D,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAC7B,IAAI,OAAO,CAAC,8BAA8B,CAAC,EAC3C,CAAC,MAAM,CAAC,CACT,CAAA;QACD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAS,CAAA;QACpC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAA;QAC1C,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACtC,MAAM,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QAClD,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACrC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAC7B,IAAI,OAAO,CAAC,4CAA4C,CAAC,EACzD,CAAC,MAAM,CAAC,CACT,CAAA;QACD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,QAAQ,CAAC,CAAA;IAC3F,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/api/__tests__/audience-analytics-routes.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=audience-analytics-routes.test.d.ts.map

package/dist/api/__tests__/audience-analytics-routes.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audience-analytics-routes.test.d.ts","sourceRoot":"","sources":["../../../src/api/__tests__/audience-analytics-routes.test.ts"],"names":[],"mappings":""}

package/dist/api/__tests__/audience-analytics-routes.test.js

@@ -0,0 +1,105 @@
+import { describe, it, expect, vi, beforeEach } from 'vitest';
+import { Router } from '../router.js';
+import { registerAudienceRoutes } from '../audience-routes.js';
+// Site resolution is a slug→UUID passthrough in unit tests.
+vi.mock('../../db/site-queries.js', () => ({
+    resolveSiteId: vi.fn(async (_db, idOrSlug) => idOrSlug),
+}));
+vi.mock('../../audiences/queries.js', () => ({
+    listAudiences: vi.fn(),
+    getAudienceById: vi.fn(),
+    createAudience: vi.fn(),
+    updateAudience: vi.fn(),
+    deleteAudience: vi.fn(),
+    reorderAudiences: vi.fn(),
+    replaceConditionGroups: vi.fn(),
+    listSelfIdFields: vi.fn(),
+    upsertSelfIdField: vi.fn(),
+    deleteSelfIdField: vi.fn(),
+    getSelfIdWidgetConfig: vi.fn(),
+    upsertSelfIdWidgetConfig: vi.fn(),
+}));
+vi.mock('../../audiences/analytics.js', () => ({
+    getAudiencesAnalytics: vi.fn(),
+}));
+vi.mock('../auth.js', () => ({
+    resolveAuth: vi.fn().mockResolvedValue({ user: { id: 'u1', role: 'siteAdmin', groups: [] } }),
+}));
+import * as queries from '../../audiences/queries.js';
+import { getAudiencesAnalytics } from '../../audiences/analytics.js';
+import { resolveAuth } from '../auth.js';
+const ANALYTICS = [
+    { audienceId: 'aud-1', matchCount: 12, matchRate: 34.5, uniqueVisitors: 12, period: 'week' },
+];
+describe('GET /audiences/analytics', () => {
+    let router;
+    beforeEach(() => {
+        router = new Router();
+        registerAudienceRoutes(router, { db: {}, authSecret: 'test', defaultSiteId: 'site-1' });
+        vi.clearAllMocks();
+        vi.mocked(resolveAuth).mockResolvedValue({ user: { id: 'u1', role: 'siteAdmin', groups: [] } });
+    });
+    it('returns analytics for explicit ids without hitting the audience list', async () => {
+        vi.mocked(getAudiencesAnalytics).mockResolvedValue(ANALYTICS);
+        const req = new Request('https://x.com/audiences/analytics?ids=aud-1,aud-2&period=week', {
+            headers: { authorization: 'Bearer v' },
+        });
+        const res = await router.handle(req, ['audiences', 'analytics']);
+        expect(res.status).toBe(200);
+        const body = await res.json();
+        expect(body.data).toEqual(ANALYTICS);
+        expect(getAudiencesAnalytics).toHaveBeenCalledWith({}, ['aud-1', 'aud-2'], 'week');
+        expect(queries.listAudiences).not.toHaveBeenCalled();
+    });
+    it('falls back to every audience in the site when no ids are given', async () => {
+        vi.mocked(queries.listAudiences).mockResolvedValue([{ id: 'aud-1' }, { id: 'aud-9' }]);
+        vi.mocked(getAudiencesAnalytics).mockResolvedValue([]);
+        const req = new Request('https://x.com/audiences/analytics', { headers: { authorization: 'Bearer v' } });
+        const res = await router.handle(req, ['audiences', 'analytics']);
+        expect(res.status).toBe(200);
+        expect(queries.listAudiences).toHaveBeenCalledOnce();
+        expect(getAudiencesAnalytics).toHaveBeenCalledWith({}, ['aud-1', 'aud-9'], 'week');
+    });
+    it('defaults the period to week and accepts day/month', async () => {
+        vi.mocked(getAudiencesAnalytics).mockResolvedValue([]);
+        const req = new Request('https://x.com/audiences/analytics?ids=aud-1&period=month', {
+            headers: { authorization: 'Bearer v' },
+        });
+        const res = await router.handle(req, ['audiences', 'analytics']);
+        expect(res.status).toBe(200);
+        expect(getAudiencesAnalytics).toHaveBeenCalledWith({}, ['aud-1'], 'month');
+    });
+    it('rejects an invalid period', async () => {
+        const req = new Request('https://x.com/audiences/analytics?ids=aud-1&period=year', {
+            headers: { authorization: 'Bearer v' },
+        });
+        const res = await router.handle(req, ['audiences', 'analytics']);
+        expect(res.status).toBe(400);
+        expect(getAudiencesAnalytics).not.toHaveBeenCalled();
+    });
+    it('is not shadowed by GET /audiences/:id', async () => {
+        vi.mocked(getAudiencesAnalytics).mockResolvedValue(ANALYTICS);
+        const req = new Request('https://x.com/audiences/analytics?ids=aud-1', {
+            headers: { authorization: 'Bearer v' },
+        });
+        const res = await router.handle(req, ['audiences', 'analytics']);
+        expect(res.status).toBe(200);
+        // Would be the single-audience getter if the :id route had matched.
+        expect(queries.getAudienceById).not.toHaveBeenCalled();
+    });
+    it('requires siteAdmin — editors are forbidden', async () => {
+        vi.mocked(resolveAuth).mockResolvedValue({ user: { id: 'u2', role: 'editor', groups: [] } });
+        const req = new Request('https://x.com/audiences/analytics?ids=aud-1', {
+            headers: { authorization: 'Bearer v' },
+        });
+        const res = await router.handle(req, ['audiences', 'analytics']);
+        expect(res.status).toBe(403);
+    });
+    it('requires authentication', async () => {
+        vi.mocked(resolveAuth).mockResolvedValue({ user: null });
+        const req = new Request('https://x.com/audiences/analytics?ids=aud-1', {});
+        const res = await router.handle(req, ['audiences', 'analytics']);
+        expect(res.status).toBe(401);
+    });
+});
+//# sourceMappingURL=audience-analytics-routes.test.js.map

package/dist/api/__tests__/audience-analytics-routes.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audience-analytics-routes.test.js","sourceRoot":"","sources":["../../../src/api/__tests__/audience-analytics-routes.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAA;AAC7D,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AACrC,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAA;AAE9D,4DAA4D;AAC5D,EAAE,CAAC,IAAI,CAAC,0BAA0B,EAAE,GAAG,EAAE,CAAC,CAAC;IACzC,aAAa,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,GAAY,EAAE,QAAgB,EAAE,EAAE,CAAC,QAAQ,CAAC;CACzE,CAAC,CAAC,CAAA;AAEH,EAAE,CAAC,IAAI,CAAC,4BAA4B,EAAE,GAAG,EAAE,CAAC,CAAC;IAC3C,aAAa,EAAE,EAAE,CAAC,EAAE,EAAE;IACtB,eAAe,EAAE,EAAE,CAAC,EAAE,EAAE;IACxB,cAAc,EAAE,EAAE,CAAC,EAAE,EAAE;IACvB,cAAc,EAAE,EAAE,CAAC,EAAE,EAAE;IACvB,cAAc,EAAE,EAAE,CAAC,EAAE,EAAE;IACvB,gBAAgB,EAAE,EAAE,CAAC,EAAE,EAAE;IACzB,sBAAsB,EAAE,EAAE,CAAC,EAAE,EAAE;IAC/B,gBAAgB,EAAE,EAAE,CAAC,EAAE,EAAE;IACzB,iBAAiB,EAAE,EAAE,CAAC,EAAE,EAAE;IAC1B,iBAAiB,EAAE,EAAE,CAAC,EAAE,EAAE;IAC1B,qBAAqB,EAAE,EAAE,CAAC,EAAE,EAAE;IAC9B,wBAAwB,EAAE,EAAE,CAAC,EAAE,EAAE;CAClC,CAAC,CAAC,CAAA;AAEH,EAAE,CAAC,IAAI,CAAC,8BAA8B,EAAE,GAAG,EAAE,CAAC,CAAC;IAC7C,qBAAqB,EAAE,EAAE,CAAC,EAAE,EAAE;CAC/B,CAAC,CAAC,CAAA;AAEH,EAAE,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC;IAC3B,WAAW,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC;CAC9F,CAAC,CAAC,CAAA;AAEH,OAAO,KAAK,OAAO,MAAM,4BAA4B,CAAA;AACrD,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAA;AACpE,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAExC,MAAM,SAAS,GAAG;IAChB,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;CAC7F,CAAA;AAED,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;IACxC,IAAI,MAAc,CAAA;IAElB,UAAU,CAAC,GAAG,EAAE;QACd,MAAM,GAAG,IAAI,MAAM,EAAE,CAAA;QACrB,sBAAsB,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,EAAW,EAAE,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC,CAAA;QAChG,EAAE,CAAC,aAAa,EAAE,CAAA;QAClB,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,EAAW,CAAC,CAAA;IAC1G,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;QACpF,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC,iBAAiB,CAAC,SAAkB,CAAC,CAAA;QACtE,MAAM,GAAG,GAAG,IAAI,OAAO,CAAC,+DAA+D,EAAE;YACvF,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,EAAE;SACvC,CAAC,CAAA;QACF,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,CAAA;QAChE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAyB,CAAA;QACpD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;QACpC,MAAM,CAAC,qBAAqB,CAAC,CAAC,oBAAoB,CAAC,EAAE,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,CAAA;QAClF,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;IACtD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;QAC9E,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,iBAAiB,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,CAAU,CAAC,CAAA;QAC/F,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC,iBAAiB,CAAC,EAAW,CAAC,CAAA;QAC/D,MAAM,GAAG,GAAG,IAAI,OAAO,CAAC,mCAAmC,EAAE,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,EAAE,EAAE,CAAC,CAAA;QACxG,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,CAAA;QAChE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,oBAAoB,EAAE,CAAA;QACpD,MAAM,CAAC,qBAAqB,CAAC,CAAC,oBAAoB,CAAC,EAAE,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,CAAA;IACpF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACjE,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC,iBAAiB,CAAC,EAAW,CAAC,CAAA;QAC/D,MAAM,GAAG,GAAG,IAAI,OAAO,CAAC,0DAA0D,EAAE;YAClF,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,EAAE;SACvC,CAAC,CAAA;QACF,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,CAAA;QAChE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,CAAC,qBAAqB,CAAC,CAAC,oBAAoB,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAA;IAC5E,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2BAA2B,EAAE,KAAK,IAAI,EAAE;QACzC,MAAM,GAAG,GAAG,IAAI,OAAO,CAAC,yDAAyD,EAAE;YACjF,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,EAAE;SACvC,CAAC,CAAA;QACF,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,CAAA;QAChE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,CAAC,qBAAqB,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;IACtD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC,iBAAiB,CAAC,SAAkB,CAAC,CAAA;QACtE,MAAM,GAAG,GAAG,IAAI,OAAO,CAAC,6CAA6C,EAAE;YACrE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,EAAE;SACvC,CAAC,CAAA;QACF,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,CAAA;QAChE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,oEAAoE;QACpE,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;IACxD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;QAC1D,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAW,CAAC,CAAA;QACrG,MAAM,GAAG,GAAG,IAAI,OAAO,CAAC,6CAA6C,EAAE;YACrE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,EAAE;SACvC,CAAC,CAAA;QACF,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,CAAA;QAChE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAC9B,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,yBAAyB,EAAE,KAAK,IAAI,EAAE;QACvC,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,IAAI,EAAW,CAAC,CAAA;QACjE,MAAM,GAAG,GAAG,IAAI,OAAO,CAAC,6CAA6C,EAAE,EAAE,CAAC,CAAA;QAC1E,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,CAAA;QAChE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAC9B,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/api/__tests__/audience-routes-site-scope.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=audience-routes-site-scope.test.d.ts.map

package/dist/api/__tests__/audience-routes-site-scope.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audience-routes-site-scope.test.d.ts","sourceRoot":"","sources":["../../../src/api/__tests__/audience-routes-site-scope.test.ts"],"names":[],"mappings":""}

package/dist/api/__tests__/audience-routes-site-scope.test.js

@@ -0,0 +1,101 @@
+import { describe, it, expect, vi, beforeEach } from 'vitest';
+import { Router } from '../router.js';
+import { registerAudienceRoutes } from '../audience-routes.js';
+import { SignJWT } from 'jose';
+import { getAudienceById, updateAudience, deleteAudience, replaceConditionGroups } from '../../audiences/queries.js';
+// F2c-J09-G4 (SECURITY): item-level audience routes must scope by the request's
+// site. Without a siteId predicate an authenticated admin could read/mutate/
+// delete another site's audience by UUID. Mock the query layer with a siteId-AWARE
+// implementation so a route that fails to thread the resolved siteId leaks.
+const SITE_A_AUD = { id: 'aud-a', siteId: 'site-a-uuid', name: 'A', status: 'active', priority: 1, conditionGroups: [] };
+vi.mock('../../audiences/queries.js', () => {
+    const scoped = (id, siteId) => {
+        if (id !== SITE_A_AUD.id)
+            return null;
+        if (siteId !== undefined && siteId !== SITE_A_AUD.siteId)
+            return null;
+        return SITE_A_AUD;
+    };
+    return {
+        listAudiences: vi.fn().mockResolvedValue([]),
+        getAudienceById: vi.fn((_db, id, siteId) => Promise.resolve(scoped(id, siteId))),
+        createAudience: vi.fn(),
+        updateAudience: vi.fn((_db, id, _data, siteId) => Promise.resolve(scoped(id, siteId))),
+        deleteAudience: vi.fn((_db, id, siteId) => Promise.resolve(scoped(id, siteId) !== null)),
+        reorderAudiences: vi.fn(),
+        replaceConditionGroups: vi.fn().mockResolvedValue(undefined),
+        listSelfIdFields: vi.fn().mockResolvedValue([]),
+        upsertSelfIdField: vi.fn(),
+        deleteSelfIdField: vi.fn(),
+        getSelfIdWidgetConfig: vi.fn(),
+        upsertSelfIdWidgetConfig: vi.fn(),
+    };
+});
+vi.mock('../../audiences/analytics.js', () => ({ getAudiencesAnalytics: vi.fn().mockResolvedValue([]) }));
+// toSiteUuid resolves the slug 'default' -> Site A UUID; passes UUIDs through.
+vi.mock('../site-context.js', () => ({
+    toSiteUuid: vi.fn(async (_db, idOrSlug, fallback) => {
+        const raw = idOrSlug ?? (typeof fallback === 'string' ? fallback : 'default');
+        return raw === 'default' ? 'site-a-uuid' : raw;
+    }),
+}));
+const TEST_SECRET = 'test-secret-that-is-at-least-32-chars-long!!';
+async function token(role = 'siteAdmin') {
+    const key = new TextEncoder().encode(TEST_SECRET);
+    return new SignJWT({ sub: 'u1', role })
+        .setProtectedHeader({ alg: 'HS256' }).setIssuedAt().setExpirationTime('1h').sign(key);
+}
+describe('audience item routes - cross-site addressing is blocked (F2c-J09-G4)', () => {
+    let router;
+    beforeEach(() => {
+        vi.clearAllMocks();
+        router = new Router();
+        registerAudienceRoutes(router, { db: {}, authSecret: TEST_SECRET, defaultSiteId: 'default' });
+    });
+    it('GET /audiences/:id in the owning site returns the row (threads siteId)', async () => {
+        const res = await router.handle(new Request('http://localhost/api/v1/audiences/aud-a?siteId=default', {
+            headers: { Authorization: `Bearer ${await token()}` },
+        }), ['audiences', 'aud-a']);
+        expect(res.status).toBe(200);
+        expect(getAudienceById).toHaveBeenCalledWith(expect.anything(), 'aud-a', 'site-a-uuid');
+    });
+    it('GET /audiences/:id scoped to a different site returns 404', async () => {
+        const res = await router.handle(new Request('http://localhost/api/v1/audiences/aud-a?siteId=site-b-uuid', {
+            headers: { Authorization: `Bearer ${await token()}` },
+        }), ['audiences', 'aud-a']);
+        expect(res.status).toBe(404);
+        expect(getAudienceById).toHaveBeenCalledWith(expect.anything(), 'aud-a', 'site-b-uuid');
+    });
+    it('PUT /audiences/:id scoped to a different site 404s BEFORE rewriting condition groups', async () => {
+        const res = await router.handle(new Request('http://localhost/api/v1/audiences/aud-a?siteId=site-b-uuid', {
+            method: 'PUT',
+            headers: { 'Content-Type': 'application/json', Authorization: `Bearer ${await token()}` },
+            body: JSON.stringify({ name: 'hijacked', conditionGroups: [{ conditions: [] }] }),
+        }), ['audiences', 'aud-a']);
+        expect(res.status).toBe(404);
+        // Critical: the destructive replaceConditionGroups must NOT run for a foreign site.
+        expect(replaceConditionGroups).not.toHaveBeenCalled();
+        expect(updateAudience).not.toHaveBeenCalled();
+    });
+    it('DELETE /audiences/:id scoped to a different site returns 404', async () => {
+        const res = await router.handle(new Request('http://localhost/api/v1/audiences/aud-a?siteId=site-b-uuid', {
+            method: 'DELETE',
+            headers: { Authorization: `Bearer ${await token()}` },
+        }), ['audiences', 'aud-a']);
+        expect(res.status).toBe(404);
+        // Post-merge contract: the site-ownership pre-check (getAudienceById) 404s
+        // first, so the mutation is never reached for a foreign site.
+        expect(getAudienceById).toHaveBeenCalledWith(expect.anything(), 'aud-a', 'site-b-uuid');
+        expect(deleteAudience).not.toHaveBeenCalled();
+    });
+    it('PUT /audiences/:id in the owning site succeeds and updates', async () => {
+        const res = await router.handle(new Request('http://localhost/api/v1/audiences/aud-a?siteId=default', {
+            method: 'PUT',
+            headers: { 'Content-Type': 'application/json', Authorization: `Bearer ${await token()}` },
+            body: JSON.stringify({ name: 'renamed' }),
+        }), ['audiences', 'aud-a']);
+        expect(res.status).toBe(200);
+        expect(updateAudience).toHaveBeenCalledWith(expect.anything(), 'aud-a', expect.anything(), 'site-a-uuid');
+    });
+});
+//# sourceMappingURL=audience-routes-site-scope.test.js.map

package/dist/api/__tests__/audience-routes-site-scope.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audience-routes-site-scope.test.js","sourceRoot":"","sources":["../../../src/api/__tests__/audience-routes-site-scope.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAA;AAC7D,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AACrC,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAA;AAC9D,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAA;AAC9B,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,cAAc,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAA;AAEpH,gFAAgF;AAChF,6EAA6E;AAC7E,mFAAmF;AACnF,4EAA4E;AAE5E,MAAM,UAAU,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,EAAE,eAAe,EAAE,EAAE,EAAE,CAAA;AAExH,EAAE,CAAC,IAAI,CAAC,4BAA4B,EAAE,GAAG,EAAE;IACzC,MAAM,MAAM,GAAG,CAAC,EAAU,EAAE,MAAe,EAAE,EAAE;QAC7C,IAAI,EAAE,KAAK,UAAU,CAAC,EAAE;YAAE,OAAO,IAAI,CAAA;QACrC,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,UAAU,CAAC,MAAM;YAAE,OAAO,IAAI,CAAA;QACrE,OAAO,UAAU,CAAA;IACnB,CAAC,CAAA;IACD,OAAO;QACL,aAAa,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAC5C,eAAe,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,GAAQ,EAAE,EAAU,EAAE,MAAe,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;QACtG,cAAc,EAAE,EAAE,CAAC,EAAE,EAAE;QACvB,cAAc,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,GAAQ,EAAE,EAAU,EAAE,KAAU,EAAE,MAAe,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;QACjH,cAAc,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,GAAQ,EAAE,EAAU,EAAE,MAAe,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC;QAC9G,gBAAgB,EAAE,EAAE,CAAC,EAAE,EAAE;QACzB,sBAAsB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC;QAC5D,gBAAgB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAC/C,iBAAiB,EAAE,EAAE,CAAC,EAAE,EAAE;QAC1B,iBAAiB,EAAE,EAAE,CAAC,EAAE,EAAE;QAC1B,qBAAqB,EAAE,EAAE,CAAC,EAAE,EAAE;QAC9B,wBAAwB,EAAE,EAAE,CAAC,EAAE,EAAE;KAClC,CAAA;AACH,CAAC,CAAC,CAAA;AAEF,EAAE,CAAC,IAAI,CAAC,8BAA8B,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,qBAAqB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA;AAEzG,+EAA+E;AAC/E,EAAE,CAAC,IAAI,CAAC,oBAAoB,EAAE,GAAG,EAAE,CAAC,CAAC;IACnC,UAAU,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,GAAY,EAAE,QAAmC,EAAE,QAAa,EAAE,EAAE;QAC3F,MAAM,GAAG,GAAG,QAAQ,IAAI,CAAC,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;QAC7E,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAA;IAChD,CAAC,CAAC;CACH,CAAC,CAAC,CAAA;AAEH,MAAM,WAAW,GAAG,8CAA8C,CAAA;AAElE,KAAK,UAAU,KAAK,CAAC,IAAI,GAAG,WAAW;IACrC,MAAM,GAAG,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;IACjD,OAAO,IAAI,OAAO,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;SACpC,kBAAkB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;AACzF,CAAC;AAED,QAAQ,CAAC,sEAAsE,EAAE,GAAG,EAAE;IACpF,IAAI,MAAc,CAAA;IAClB,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,aAAa,EAAE,CAAA;QAClB,MAAM,GAAG,IAAI,MAAM,EAAE,CAAA;QACrB,sBAAsB,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,EAAS,EAAE,UAAU,EAAE,WAAW,EAAE,aAAa,EAAE,SAAS,EAAE,CAAC,CAAA;IACtG,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wEAAwE,EAAE,KAAK,IAAI,EAAE;QACtF,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAC7B,IAAI,OAAO,CAAC,wDAAwD,EAAE;YACpE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,KAAK,EAAE,EAAE,EAAE;SACtD,CAAC,EAAE,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAA;QAC7B,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,CAAC,eAAe,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,aAAa,CAAC,CAAA;IACzF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAC7B,IAAI,OAAO,CAAC,4DAA4D,EAAE;YACxE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,KAAK,EAAE,EAAE,EAAE;SACtD,CAAC,EAAE,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAA;QAC7B,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,CAAC,eAAe,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,aAAa,CAAC,CAAA;IACzF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sFAAsF,EAAE,KAAK,IAAI,EAAE;QACpG,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAC7B,IAAI,OAAO,CAAC,4DAA4D,EAAE;YACxE,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,aAAa,EAAE,UAAU,MAAM,KAAK,EAAE,EAAE,EAAE;YACzF,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,eAAe,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;SAClF,CAAC,EAAE,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAA;QAC7B,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,oFAAoF;QACpF,MAAM,CAAC,sBAAsB,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;QACrD,MAAM,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;IAC/C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAC7B,IAAI,OAAO,CAAC,4DAA4D,EAAE;YACxE,MAAM,EAAE,QAAQ;YAChB,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,KAAK,EAAE,EAAE,EAAE;SACtD,CAAC,EAAE,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAA;QAC7B,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,2EAA2E;QAC3E,8DAA8D;QAC9D,MAAM,CAAC,eAAe,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,aAAa,CAAC,CAAA;QACvF,MAAM,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;IAC/C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC1E,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAC7B,IAAI,OAAO,CAAC,wDAAwD,EAAE;YACpE,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,aAAa,EAAE,UAAU,MAAM,KAAK,EAAE,EAAE,EAAE;YACzF,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;SAC1C,CAAC,EAAE,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAA;QAC7B,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,CAAC,cAAc,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,aAAa,CAAC,CAAA;IAC3G,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/api/__tests__/auth-routes.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=auth-routes.test.d.ts.map

package/dist/api/__tests__/auth-routes.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-routes.test.d.ts","sourceRoot":"","sources":["../../../src/api/__tests__/auth-routes.test.ts"],"names":[],"mappings":""}