@kywi-software/core 0.1.0

package/dist/api/dashboard-routes.d.ts

@@ -0,0 +1,25 @@
+import type { Router } from './router.js';
+import type { KywiDb } from '../db/client.js';
+import type { KywiConfig } from '../config/types.js';
+export interface DashboardRouteContext {
+    config: KywiConfig;
+    db: KywiDb;
+    authSecret: string;
+    siteIdMap?: Record<string, string>;
+}
+/**
+ * Admin dashboard aggregate.
+ *
+ * `GET /dashboard/stats` returns every headline number and the recent-activity
+ * list the dashboard page needs in ONE response, so the page no longer fans out
+ * ~20 per-content-type list requests on load. Because the e2e login fixture
+ * lands on the dashboard for every test, that fan-out issued ~1,400 extra
+ * requests per suite and degraded the dev server; this collapses it to one call.
+ *
+ * Guarded at editor+ — the lowest admin role that reaches the admin dashboard
+ * (the workflow/pending list this replaces also requires editor). Site-scoped
+ * through the shared request resolver so a config slug can never leak into a
+ * uuid column (enforced by site-id-resolution.lint.test.ts).
+ */
+export declare function registerDashboardRoutes(router: Router, ctx: DashboardRouteContext): void;
+//# sourceMappingURL=dashboard-routes.d.ts.map

package/dist/api/dashboard-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dashboard-routes.d.ts","sourceRoot":"","sources":["../../src/api/dashboard-routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAA;AAC7C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAA;AAOpD,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,UAAU,CAAA;IAClB,EAAE,EAAE,MAAM,CAAA;IACV,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CACnC;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,qBAAqB,GAAG,IAAI,CAaxF"}

package/dist/api/dashboard-routes.js

@@ -0,0 +1,34 @@
+import { jsonOk, unauthorized, forbidden } from './response.js';
+import { resolveAuth } from './auth.js';
+import { resolveSiteId } from './site-context.js';
+import { hasMinRole } from '../auth/roles.js';
+import { getDashboardStats } from '../db/dashboard-queries.js';
+/**
+ * Admin dashboard aggregate.
+ *
+ * `GET /dashboard/stats` returns every headline number and the recent-activity
+ * list the dashboard page needs in ONE response, so the page no longer fans out
+ * ~20 per-content-type list requests on load. Because the e2e login fixture
+ * lands on the dashboard for every test, that fan-out issued ~1,400 extra
+ * requests per suite and degraded the dev server; this collapses it to one call.
+ *
+ * Guarded at editor+ — the lowest admin role that reaches the admin dashboard
+ * (the workflow/pending list this replaces also requires editor). Site-scoped
+ * through the shared request resolver so a config slug can never leak into a
+ * uuid column (enforced by site-id-resolution.lint.test.ts).
+ */
+export function registerDashboardRoutes(router, ctx) {
+    const { config, db, authSecret, siteIdMap } = ctx;
+    // GET /dashboard/stats — one aggregate read for the admin dashboard (editor+)
+    router.get('/dashboard/stats', async (req) => {
+        const auth = await resolveAuth(req.headers.get('authorization'), authSecret, db);
+        if (!auth.user)
+            return unauthorized();
+        if (!hasMinRole(auth.user.role, 'editor'))
+            return forbidden();
+        const siteId = resolveSiteId(req, config, siteIdMap);
+        const stats = await getDashboardStats(db, siteId);
+        return jsonOk(stats);
+    });
+}
+//# sourceMappingURL=dashboard-routes.js.map

package/dist/api/dashboard-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dashboard-routes.js","sourceRoot":"","sources":["../../src/api/dashboard-routes.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,eAAe,CAAA;AAC/D,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAA;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAC7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAA;AAS9D;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,uBAAuB,CAAC,MAAc,EAAE,GAA0B;IAChF,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,GAAG,CAAA;IAEjD,8EAA8E;IAC9E,MAAM,CAAC,GAAG,CAAC,kBAAkB,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAC3C,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,UAAU,EAAE,EAAE,CAAC,CAAA;QAChF,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO,YAAY,EAAE,CAAA;QACrC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC;YAAE,OAAO,SAAS,EAAE,CAAA;QAE7D,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,CAAC,CAAA;QACpD,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;QACjD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAA;IACtB,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/dist/api/email-admin-routes.d.ts

@@ -0,0 +1,22 @@
+import type { Router } from './router.js';
+import type { KywiDb } from '../db/client.js';
+import type { EmailConfig } from '../config/types.js';
+import type { EmailProvider } from '../email/types.js';
+export interface EmailAdminRouteContext {
+    db: KywiDb;
+    authSecret: string;
+    emailConfig: EmailConfig | undefined;
+    emailProvider: EmailProvider | undefined;
+}
+/**
+ * Email administration routes.
+ *
+ * `GET /email/status` reports whether email is configured and echoes the
+ * NON-SECRET config fields (provider, from, smtp host/port/secure — never the
+ * SMTP password or API key) so the admin UI can render a config-as-code view
+ * without shipping secrets to the browser. `POST /email/test` sends a one-off
+ * test message via the configured provider (nodemailer SMTP / console), or 501s
+ * when no provider is configured.
+ */
+export declare function registerEmailAdminRoutes(router: Router, ctx: EmailAdminRouteContext): void;
+//# sourceMappingURL=email-admin-routes.d.ts.map

package/dist/api/email-admin-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"email-admin-routes.d.ts","sourceRoot":"","sources":["../../src/api/email-admin-routes.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAA;AAC7C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AACrD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AAKtD,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,MAAM,CAAA;IACV,UAAU,EAAE,MAAM,CAAA;IAElB,WAAW,EAAE,WAAW,GAAG,SAAS,CAAA;IACpC,aAAa,EAAE,aAAa,GAAG,SAAS,CAAA;CACzC;AAID;;;;;;;;;GASG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,sBAAsB,GAAG,IAAI,CAyD1F"}

package/dist/api/email-admin-routes.js

@@ -0,0 +1,72 @@
+import { z } from 'zod';
+import { jsonOk, jsonError, unauthorized, forbidden, validationError } from './response.js';
+import { resolveAuth } from './auth.js';
+import { hasMinRole } from '../auth/roles.js';
+const testEmailSchema = z.object({ to: z.string().email() }).strict();
+/**
+ * Email administration routes.
+ *
+ * `GET /email/status` reports whether email is configured and echoes the
+ * NON-SECRET config fields (provider, from, smtp host/port/secure — never the
+ * SMTP password or API key) so the admin UI can render a config-as-code view
+ * without shipping secrets to the browser. `POST /email/test` sends a one-off
+ * test message via the configured provider (nodemailer SMTP / console), or 501s
+ * when no provider is configured.
+ */
+export function registerEmailAdminRoutes(router, ctx) {
+    const { db, authSecret, emailConfig, emailProvider } = ctx;
+    router.get('/email/status', async (req) => {
+        const auth = await resolveAuth(req.headers.get('authorization'), authSecret, db);
+        if (!auth.user)
+            return unauthorized();
+        if (!hasMinRole(auth.user.role, 'siteAdmin'))
+            return forbidden();
+        if (!emailConfig || !emailProvider) {
+            return jsonOk({ configured: false });
+        }
+        const smtp = emailConfig.smtp;
+        return jsonOk({
+            configured: true,
+            provider: emailConfig.provider,
+            from: emailConfig.from,
+            // Non-secret SMTP fields only; `auth` is a boolean flag, never credentials.
+            smtp: smtp
+                ? { host: smtp.host, port: smtp.port, secure: smtp.secure ?? false, auth: Boolean(smtp.auth) }
+                : null,
+        });
+    });
+    router.post('/email/test', async (req) => {
+        const auth = await resolveAuth(req.headers.get('authorization'), authSecret, db);
+        if (!auth.user)
+            return unauthorized();
+        if (!hasMinRole(auth.user.role, 'siteAdmin'))
+            return forbidden();
+        if (!emailProvider) {
+            return jsonError('NOT_CONFIGURED', 'Email provider is not configured', 501);
+        }
+        let body;
+        try {
+            body = await req.json();
+        }
+        catch {
+            return jsonError('BAD_REQUEST', 'Invalid JSON', 400);
+        }
+        const parsed = testEmailSchema.safeParse(body);
+        if (!parsed.success) {
+            return validationError(parsed.error.errors.map(e => ({ path: e.path.join('.'), message: e.message })));
+        }
+        try {
+            await emailProvider.send({
+                to: parsed.data.to,
+                subject: 'Kywi CMS — test email',
+                html: '<p>This is a test email sent from your Kywi CMS admin. If you received it, email delivery is working.</p>',
+                text: 'This is a test email sent from your Kywi CMS admin. If you received it, email delivery is working.',
+            });
+        }
+        catch (e) {
+            return jsonError('EMAIL_SEND_FAILED', e instanceof Error ? e.message : 'Failed to send test email', 502);
+        }
+        return jsonOk({ sent: true, to: parsed.data.to });
+    });
+}
+//# sourceMappingURL=email-admin-routes.js.map

package/dist/api/email-admin-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"email-admin-routes.js","sourceRoot":"","sources":["../../src/api/email-admin-routes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAKvB,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAC3F,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAA;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAU7C,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAA;AAErE;;;;;;;;;GASG;AACH,MAAM,UAAU,wBAAwB,CAAC,MAAc,EAAE,GAA2B;IAClF,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,WAAW,EAAE,aAAa,EAAE,GAAG,GAAG,CAAA;IAE1D,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACxC,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,UAAU,EAAE,EAAE,CAAC,CAAA;QAChF,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO,YAAY,EAAE,CAAA;QACrC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC;YAAE,OAAO,SAAS,EAAE,CAAA;QAEhE,IAAI,CAAC,WAAW,IAAI,CAAC,aAAa,EAAE,CAAC;YACnC,OAAO,MAAM,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAA;QACtC,CAAC;QAED,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAA;QAC7B,OAAO,MAAM,CAAC;YACZ,UAAU,EAAE,IAAI;YAChB,QAAQ,EAAE,WAAW,CAAC,QAAQ;YAC9B,IAAI,EAAE,WAAW,CAAC,IAAI;YACtB,4EAA4E;YAC5E,IAAI,EAAE,IAAI;gBACR,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBAC9F,CAAC,CAAC,IAAI;SACT,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACvC,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,UAAU,EAAE,EAAE,CAAC,CAAA;QAChF,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO,YAAY,EAAE,CAAA;QACrC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC;YAAE,OAAO,SAAS,EAAE,CAAA;QAEhE,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,OAAO,SAAS,CAAC,gBAAgB,EAAE,kCAAkC,EAAE,GAAG,CAAC,CAAA;QAC7E,CAAC;QAED,IAAI,IAAa,CAAA;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC,aAAa,EAAE,cAAc,EAAE,GAAG,CAAC,CAAA;QACtD,CAAC;QACD,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;QAC9C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAA;QACxG,CAAC;QAED,IAAI,CAAC;YACH,MAAM,aAAa,CAAC,IAAI,CAAC;gBACvB,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE;gBAClB,OAAO,EAAE,uBAAuB;gBAChC,IAAI,EAAE,2GAA2G;gBACjH,IAAI,EAAE,oGAAoG;aAC3G,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,SAAS,CAAC,mBAAmB,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,2BAA2B,EAAE,GAAG,CAAC,CAAA;QAC1G,CAAC;QAED,OAAO,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAA;IACnD,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/dist/api/experiment-routes.d.ts

@@ -0,0 +1,10 @@
+import type { Router } from './router.js';
+import type { KywiDb } from '../db/client.js';
+interface ExperimentRouteContext {
+    db: KywiDb;
+    authSecret: string;
+    defaultSiteId: string;
+}
+export declare function registerExperimentRoutes(router: Router, ctx: ExperimentRouteContext): void;
+export {};
+//# sourceMappingURL=experiment-routes.d.ts.map

package/dist/api/experiment-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"experiment-routes.d.ts","sourceRoot":"","sources":["../../src/api/experiment-routes.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAA;AAoB7C,UAAU,sBAAsB;IAC9B,EAAE,EAAE,MAAM,CAAA;IACV,UAAU,EAAE,MAAM,CAAA;IAClB,aAAa,EAAE,MAAM,CAAA;CACtB;AAiED,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,sBAAsB,GAAG,IAAI,CAmL1F"}

package/dist/api/experiment-routes.js

@@ -0,0 +1,242 @@
+import { z } from 'zod';
+import { jsonOk, jsonError, notFound, unauthorized, forbidden, validationError } from './response.js';
+import { resolveAuth } from './auth.js';
+import { toSiteUuid } from './site-context.js';
+import { hasMinRole } from '../auth/roles.js';
+import { listExperiments, getExperimentById, createExperiment, updateExperiment, deleteExperiment, setExperimentLifecycle, } from '../experiments/queries.js';
+import { buildExperimentResults } from '../experiments/runtime.js';
+import { validateTrafficSplits } from '../experiments/engine.js';
+// ─── Zod schemas ──────────────────────────────────────────────────────────────
+const variantInputSchema = z.object({
+    name: z.string().min(1),
+    trafficSplit: z.number().int().min(0).max(100),
+    isControl: z.boolean().optional(),
+    variantKey: z.string().nullable().optional(),
+});
+const goalConfigSchema = z.object({
+    url: z.string().optional(),
+    formId: z.string().optional(),
+    eventName: z.string().optional(),
+});
+const createExperimentSchema = z.object({
+    name: z.string().min(1),
+    siteId: z.string().optional(),
+    hypothesis: z.string().nullable().optional(),
+    goalType: z.enum(['pageview', 'form_submit', 'custom']),
+    goalConfig: goalConfigSchema.optional(),
+    targetType: z.enum(['page', 'container']).optional(),
+    contentId: z.string().nullable().optional(),
+    containerId: z.string().nullable().optional(),
+    variants: z.array(variantInputSchema).min(1),
+});
+const updateExperimentSchema = z.object({
+    name: z.string().min(1).optional(),
+    hypothesis: z.string().nullable().optional(),
+    goalType: z.enum(['pageview', 'form_submit', 'custom']).optional(),
+    goalConfig: goalConfigSchema.optional(),
+    targetType: z.enum(['page', 'container']).optional(),
+    contentId: z.string().nullable().optional(),
+    containerId: z.string().nullable().optional(),
+    variants: z.array(variantInputSchema).min(1).optional(),
+});
+const lifecycleSchema = z.object({
+    action: z.enum(['start', 'pause', 'resume', 'complete']),
+    winnerVariantId: z.string().nullable().optional(),
+});
+/** Build a clean ExperimentGoalConfig containing only the keys that were set. */
+function normalizeGoalConfig(gc) {
+    const out = {};
+    if (gc?.url !== undefined)
+        out.url = gc.url;
+    if (gc?.formId !== undefined)
+        out.formId = gc.formId;
+    if (gc?.eventName !== undefined)
+        out.eventName = gc.eventName;
+    return out;
+}
+function toVariantInputs(variants) {
+    return variants.map((v) => ({
+        name: v.name,
+        trafficSplit: v.trafficSplit,
+        ...(v.isControl !== undefined ? { isControl: v.isControl } : {}),
+        ...(v.variantKey !== undefined ? { variantKey: v.variantKey } : {}),
+    }));
+}
+// ─── Route registration ─────────────────────────────────────────────────────
+export function registerExperimentRoutes(router, ctx) {
+    const { db, authSecret, defaultSiteId } = ctx;
+    async function authenticate(req) {
+        return resolveAuth(req.headers.get('authorization'), authSecret, db);
+    }
+    // GET /experiments — list experiments for a site (editor+)
+    router.get('/experiments', async (req) => {
+        const { user, error } = await authenticate(req);
+        if (!user)
+            return unauthorized(error);
+        if (!hasMinRole(user.role, 'editor'))
+            return forbidden();
+        const url = new URL(req.url);
+        const siteId = await toSiteUuid(db, url.searchParams.get('siteId'), defaultSiteId);
+        return jsonOk(await listExperiments(db, siteId));
+    });
+    // POST /experiments — create an experiment (siteAdmin)
+    router.post('/experiments', async (req) => {
+        const { user, error } = await authenticate(req);
+        if (!user)
+            return unauthorized(error);
+        if (!hasMinRole(user.role, 'siteAdmin'))
+            return forbidden();
+        let body;
+        try {
+            body = await req.json();
+        }
+        catch {
+            return jsonError('BAD_REQUEST', 'Invalid JSON body', 400);
+        }
+        const parsed = createExperimentSchema.safeParse(body);
+        if (!parsed.success) {
+            return validationError(parsed.error.errors.map((e) => ({ path: e.path.join('.'), message: e.message })));
+        }
+        const splits = validateTrafficSplits(parsed.data.variants);
+        if (!splits.valid) {
+            return validationError([{ path: 'variants', message: splits.error ?? 'Invalid traffic splits' }]);
+        }
+        const experiment = await createExperiment(db, {
+            siteId: await toSiteUuid(db, parsed.data.siteId, defaultSiteId),
+            name: parsed.data.name,
+            goalType: parsed.data.goalType,
+            variants: toVariantInputs(parsed.data.variants),
+            createdBy: user.id,
+            ...(parsed.data.hypothesis !== undefined ? { hypothesis: parsed.data.hypothesis } : {}),
+            ...(parsed.data.goalConfig !== undefined ? { goalConfig: normalizeGoalConfig(parsed.data.goalConfig) } : {}),
+            ...(parsed.data.targetType !== undefined ? { targetType: parsed.data.targetType } : {}),
+            ...(parsed.data.contentId !== undefined ? { contentId: parsed.data.contentId } : {}),
+            ...(parsed.data.containerId !== undefined ? { containerId: parsed.data.containerId } : {}),
+        });
+        return jsonOk(experiment, 201);
+    });
+    // GET /experiments/:id/results — per-variant results (editor+)
+    router.get('/experiments/:id/results', async (req, params) => {
+        const { user, error } = await authenticate(req);
+        if (!user)
+            return unauthorized(error);
+        if (!hasMinRole(user.role, 'editor'))
+            return forbidden();
+        const url = new URL(req.url);
+        const siteId = await toSiteUuid(db, url.searchParams.get('siteId'), defaultSiteId);
+        const experiment = await getExperimentById(db, params.id, siteId);
+        if (!experiment)
+            return notFound('Experiment not found');
+        return jsonOk(await buildExperimentResults(db, experiment));
+    });
+    // POST /experiments/:id/lifecycle — start / pause / resume / complete (siteAdmin)
+    router.post('/experiments/:id/lifecycle', async (req, params) => {
+        const { user, error } = await authenticate(req);
+        if (!user)
+            return unauthorized(error);
+        if (!hasMinRole(user.role, 'siteAdmin'))
+            return forbidden();
+        let body;
+        try {
+            body = await req.json();
+        }
+        catch {
+            return jsonError('BAD_REQUEST', 'Invalid JSON body', 400);
+        }
+        const parsed = lifecycleSchema.safeParse(body);
+        if (!parsed.success) {
+            return validationError(parsed.error.errors.map((e) => ({ path: e.path.join('.'), message: e.message })));
+        }
+        const url = new URL(req.url);
+        const siteId = await toSiteUuid(db, url.searchParams.get('siteId'), defaultSiteId);
+        const existing = await getExperimentById(db, params.id, siteId);
+        if (!existing)
+            return notFound('Experiment not found');
+        if (parsed.data.action === 'complete' && parsed.data.winnerVariantId) {
+            const known = existing.variants.some((v) => v.id === parsed.data.winnerVariantId);
+            if (!known)
+                return validationError([{ path: 'winnerVariantId', message: 'Winner must be one of the experiment variants' }]);
+        }
+        const experiment = await setExperimentLifecycle(db, params.id, parsed.data.action, parsed.data.winnerVariantId ?? null, siteId);
+        if (!experiment)
+            return notFound('Experiment not found');
+        return jsonOk(experiment);
+    });
+    // GET /experiments/:id — single experiment (editor+)
+    router.get('/experiments/:id', async (req, params) => {
+        const { user, error } = await authenticate(req);
+        if (!user)
+            return unauthorized(error);
+        if (!hasMinRole(user.role, 'editor'))
+            return forbidden();
+        const url = new URL(req.url);
+        const siteId = await toSiteUuid(db, url.searchParams.get('siteId'), defaultSiteId);
+        const experiment = await getExperimentById(db, params.id, siteId);
+        if (!experiment)
+            return notFound('Experiment not found');
+        return jsonOk(experiment);
+    });
+    // PUT /experiments/:id — update an experiment (siteAdmin)
+    router.put('/experiments/:id', async (req, params) => {
+        const { user, error } = await authenticate(req);
+        if (!user)
+            return unauthorized(error);
+        if (!hasMinRole(user.role, 'siteAdmin'))
+            return forbidden();
+        let body;
+        try {
+            body = await req.json();
+        }
+        catch {
+            return jsonError('BAD_REQUEST', 'Invalid JSON body', 400);
+        }
+        const parsed = updateExperimentSchema.safeParse(body);
+        if (!parsed.success) {
+            return validationError(parsed.error.errors.map((e) => ({ path: e.path.join('.'), message: e.message })));
+        }
+        if (parsed.data.variants) {
+            const splits = validateTrafficSplits(parsed.data.variants);
+            if (!splits.valid) {
+                return validationError([{ path: 'variants', message: splits.error ?? 'Invalid traffic splits' }]);
+            }
+        }
+        const update = {};
+        if (parsed.data.name !== undefined)
+            update.name = parsed.data.name;
+        if (parsed.data.hypothesis !== undefined)
+            update.hypothesis = parsed.data.hypothesis;
+        if (parsed.data.goalType !== undefined)
+            update.goalType = parsed.data.goalType;
+        if (parsed.data.goalConfig !== undefined)
+            update.goalConfig = normalizeGoalConfig(parsed.data.goalConfig);
+        if (parsed.data.targetType !== undefined)
+            update.targetType = parsed.data.targetType;
+        if (parsed.data.contentId !== undefined)
+            update.contentId = parsed.data.contentId;
+        if (parsed.data.containerId !== undefined)
+            update.containerId = parsed.data.containerId;
+        if (parsed.data.variants !== undefined)
+            update.variants = toVariantInputs(parsed.data.variants);
+        const url = new URL(req.url);
+        const siteId = await toSiteUuid(db, url.searchParams.get('siteId'), defaultSiteId);
+        const experiment = await updateExperiment(db, params.id, update, siteId);
+        if (!experiment)
+            return notFound('Experiment not found');
+        return jsonOk(experiment);
+    });
+    // DELETE /experiments/:id — delete an experiment (siteAdmin)
+    router.delete('/experiments/:id', async (req, params) => {
+        const { user, error } = await authenticate(req);
+        if (!user)
+            return unauthorized(error);
+        if (!hasMinRole(user.role, 'siteAdmin'))
+            return forbidden();
+        const url = new URL(req.url);
+        const siteId = await toSiteUuid(db, url.searchParams.get('siteId'), defaultSiteId);
+        const deleted = await deleteExperiment(db, params.id, siteId);
+        if (!deleted)
+            return notFound('Experiment not found');
+        return jsonOk({ deleted: true });
+    });
+}
+//# sourceMappingURL=experiment-routes.js.map

package/dist/api/experiment-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"experiment-routes.js","sourceRoot":"","sources":["../../src/api/experiment-routes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAGvB,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AACrG,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAA;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAC7C,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EAChB,sBAAsB,GACvB,MAAM,2BAA2B,CAAA;AAClC,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAA;AAClE,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAA;AAYhE,iFAAiF;AAEjF,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC9C,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACjC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAC7C,CAAC,CAAA;AAEF,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAA;AAEF,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC5C,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,aAAa,EAAE,QAAQ,CAAC,CAAC;IACvD,UAAU,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IACvC,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,QAAQ,EAAE;IACpD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC3C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC7C,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CAC7C,CAAC,CAAA;AAEF,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAClC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC5C,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,aAAa,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE;IAClE,UAAU,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IACvC,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,QAAQ,EAAE;IACpD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC3C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC7C,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACxD,CAAC,CAAA;AAEF,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;IACxD,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAClD,CAAC,CAAA;AAEF,iFAAiF;AACjF,SAAS,mBAAmB,CAAC,EAAgD;IAC3E,MAAM,GAAG,GAAyB,EAAE,CAAA;IACpC,IAAI,EAAE,EAAE,GAAG,KAAK,SAAS;QAAE,GAAG,CAAC,GAAG,GAAG,EAAE,CAAC,GAAG,CAAA;IAC3C,IAAI,EAAE,EAAE,MAAM,KAAK,SAAS;QAAE,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,MAAM,CAAA;IACpD,IAAI,EAAE,EAAE,SAAS,KAAK,SAAS;QAAE,GAAG,CAAC,SAAS,GAAG,EAAE,CAAC,SAAS,CAAA;IAC7D,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,SAAS,eAAe,CAAC,QAA8C;IACrE,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC1B,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,YAAY,EAAE,CAAC,CAAC,YAAY;QAC5B,GAAG,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,GAAG,CAAC,CAAC,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpE,CAAC,CAAC,CAAA;AACL,CAAC;AAED,+EAA+E;AAE/E,MAAM,UAAU,wBAAwB,CAAC,MAAc,EAAE,GAA2B;IAClF,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,aAAa,EAAE,GAAG,GAAG,CAAA;IAE7C,KAAK,UAAU,YAAY,CAAC,GAAY;QACtC,OAAO,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,UAAU,EAAE,EAAE,CAAC,CAAA;IACtE,CAAC;IAED,2DAA2D;IAC3D,MAAM,CAAC,GAAG,CAAC,cAAc,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACvC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAA;QAC/C,IAAI,CAAC,IAAI;YAAE,OAAO,YAAY,CAAC,KAAK,CAAC,CAAA;QACrC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC;YAAE,OAAO,SAAS,EAAE,CAAA;QAExD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,EAAE,EAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,aAAa,CAAC,CAAA;QAClF,OAAO,MAAM,CAAC,MAAM,eAAe,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAA;IAClD,CAAC,CAAC,CAAA;IAEF,uDAAuD;IACvD,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACxC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAA;QAC/C,IAAI,CAAC,IAAI;YAAE,OAAO,YAAY,CAAC,KAAK,CAAC,CAAA;QACrC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC;YAAE,OAAO,SAAS,EAAE,CAAA;QAE3D,IAAI,IAAa,CAAA;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC,aAAa,EAAE,mBAAmB,EAAE,GAAG,CAAC,CAAA;QAC3D,CAAC;QAED,MAAM,MAAM,GAAG,sBAAsB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;QACrD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAA;QAC1G,CAAC;QAED,MAAM,MAAM,GAAG,qBAAqB,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAC1D,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YAClB,OAAO,eAAe,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,IAAI,wBAAwB,EAAE,CAAC,CAAC,CAAA;QACnG,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,gBAAgB,CAAC,EAAE,EAAE;YAC5C,MAAM,EAAE,MAAM,UAAU,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC;YAC/D,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;YACtB,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ;YAC9B,QAAQ,EAAE,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC;YAC/C,SAAS,EAAE,IAAI,CAAC,EAAE;YAClB,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvF,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,mBAAmB,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5G,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvF,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpF,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC3F,CAAC,CAAA;QAEF,OAAO,MAAM,CAAC,UAAU,EAAE,GAAG,CAAC,CAAA;IAChC,CAAC,CAAC,CAAA;IAEF,+DAA+D;IAC/D,MAAM,CAAC,GAAG,CAAC,0BAA0B,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;QAC3D,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAA;QAC/C,IAAI,CAAC,IAAI;YAAE,OAAO,YAAY,CAAC,KAAK,CAAC,CAAA;QACrC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC;YAAE,OAAO,SAAS,EAAE,CAAA;QAExD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,EAAE,EAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,aAAa,CAAC,CAAA;QAClF,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,EAAE,EAAE,MAAM,CAAC,EAAG,EAAE,MAAM,CAAC,CAAA;QAClE,IAAI,CAAC,UAAU;YAAE,OAAO,QAAQ,CAAC,sBAAsB,CAAC,CAAA;QACxD,OAAO,MAAM,CAAC,MAAM,sBAAsB,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC,CAAA;IAC7D,CAAC,CAAC,CAAA;IAEF,kFAAkF;IAClF,MAAM,CAAC,IAAI,CAAC,4BAA4B,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;QAC9D,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAA;QAC/C,IAAI,CAAC,IAAI;YAAE,OAAO,YAAY,CAAC,KAAK,CAAC,CAAA;QACrC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC;YAAE,OAAO,SAAS,EAAE,CAAA;QAE3D,IAAI,IAAa,CAAA;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC,aAAa,EAAE,mBAAmB,EAAE,GAAG,CAAC,CAAA;QAC3D,CAAC;QAED,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;QAC9C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAA;QAC1G,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,EAAE,EAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,aAAa,CAAC,CAAA;QAElF,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,EAAE,EAAE,MAAM,CAAC,EAAG,EAAE,MAAM,CAAC,CAAA;QAChE,IAAI,CAAC,QAAQ;YAAE,OAAO,QAAQ,CAAC,sBAAsB,CAAC,CAAA;QAEtD,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,UAAU,IAAI,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;YACrE,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;YACjF,IAAI,CAAC,KAAK;gBAAE,OAAO,eAAe,CAAC,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,+CAA+C,EAAE,CAAC,CAAC,CAAA;QAC7H,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,sBAAsB,CAC7C,EAAE,EACF,MAAM,CAAC,EAAG,EACV,MAAM,CAAC,IAAI,CAAC,MAAM,EAClB,MAAM,CAAC,IAAI,CAAC,eAAe,IAAI,IAAI,EACnC,MAAM,CACP,CAAA;QACD,IAAI,CAAC,UAAU;YAAE,OAAO,QAAQ,CAAC,sBAAsB,CAAC,CAAA;QACxD,OAAO,MAAM,CAAC,UAAU,CAAC,CAAA;IAC3B,CAAC,CAAC,CAAA;IAEF,qDAAqD;IACrD,MAAM,CAAC,GAAG,CAAC,kBAAkB,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;QACnD,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAA;QAC/C,IAAI,CAAC,IAAI;YAAE,OAAO,YAAY,CAAC,KAAK,CAAC,CAAA;QACrC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC;YAAE,OAAO,SAAS,EAAE,CAAA;QAExD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,EAAE,EAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,aAAa,CAAC,CAAA;QAClF,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,EAAE,EAAE,MAAM,CAAC,EAAG,EAAE,MAAM,CAAC,CAAA;QAClE,IAAI,CAAC,UAAU;YAAE,OAAO,QAAQ,CAAC,sBAAsB,CAAC,CAAA;QACxD,OAAO,MAAM,CAAC,UAAU,CAAC,CAAA;IAC3B,CAAC,CAAC,CAAA;IAEF,0DAA0D;IAC1D,MAAM,CAAC,GAAG,CAAC,kBAAkB,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;QACnD,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAA;QAC/C,IAAI,CAAC,IAAI;YAAE,OAAO,YAAY,CAAC,KAAK,CAAC,CAAA;QACrC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC;YAAE,OAAO,SAAS,EAAE,CAAA;QAE3D,IAAI,IAAa,CAAA;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC,aAAa,EAAE,mBAAmB,EAAE,GAAG,CAAC,CAAA;QAC3D,CAAC;QAED,MAAM,MAAM,GAAG,sBAAsB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;QACrD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAA;QAC1G,CAAC;QAED,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,qBAAqB,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;YAC1D,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;gBAClB,OAAO,eAAe,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,IAAI,wBAAwB,EAAE,CAAC,CAAC,CAAA;YACnG,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAA2C,EAAE,CAAA;QACzD,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS;YAAE,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAA;QAClE,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,KAAK,SAAS;YAAE,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAA;QACpF,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS;YAAE,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAA;QAC9E,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,KAAK,SAAS;YAAE,MAAM,CAAC,UAAU,GAAG,mBAAmB,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QACzG,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,KAAK,SAAS;YAAE,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAA;QACpF,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS;YAAE,MAAM,CAAC,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAA;QACjF,IAAI,MAAM,CAAC,IAAI,CAAC,WAAW,KAAK,SAAS;YAAE,MAAM,CAAC,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAA;QACvF,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS;YAAE,MAAM,CAAC,QAAQ,GAAG,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAE/F,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,EAAE,EAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,aAAa,CAAC,CAAA;QAElF,MAAM,UAAU,GAAG,MAAM,gBAAgB,CAAC,EAAE,EAAE,MAAM,CAAC,EAAG,EAAE,MAAM,EAAE,MAAM,CAAC,CAAA;QACzE,IAAI,CAAC,UAAU;YAAE,OAAO,QAAQ,CAAC,sBAAsB,CAAC,CAAA;QACxD,OAAO,MAAM,CAAC,UAAU,CAAC,CAAA;IAC3B,CAAC,CAAC,CAAA;IAEF,6DAA6D;IAC7D,MAAM,CAAC,MAAM,CAAC,kBAAkB,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;QACtD,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAA;QAC/C,IAAI,CAAC,IAAI;YAAE,OAAO,YAAY,CAAC,KAAK,CAAC,CAAA;QACrC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC;YAAE,OAAO,SAAS,EAAE,CAAA;QAE3D,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,EAAE,EAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,aAAa,CAAC,CAAA;QAElF,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,EAAE,EAAE,MAAM,CAAC,EAAG,EAAE,MAAM,CAAC,CAAA;QAC9D,IAAI,CAAC,OAAO;YAAE,OAAO,QAAQ,CAAC,sBAAsB,CAAC,CAAA;QACrD,OAAO,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;IAClC,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/dist/api/experiment-runtime-routes.d.ts

@@ -0,0 +1,9 @@
+import type { Router } from './router.js';
+import type { KywiDb } from '../db/client.js';
+interface ExperimentRuntimeContext {
+    db: KywiDb;
+    defaultSiteId: string;
+}
+export declare function registerExperimentRuntimeRoutes(router: Router, ctx: ExperimentRuntimeContext): void;
+export {};
+//# sourceMappingURL=experiment-runtime-routes.d.ts.map

package/dist/api/experiment-runtime-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"experiment-runtime-routes.d.ts","sourceRoot":"","sources":["../../src/api/experiment-runtime-routes.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAA;AAS7C,UAAU,wBAAwB;IAChC,EAAE,EAAE,MAAM,CAAA;IACV,aAAa,EAAE,MAAM,CAAA;CACtB;AAmBD,wBAAgB,+BAA+B,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,wBAAwB,GAAG,IAAI,CA0EnG"}

package/dist/api/experiment-runtime-routes.js

@@ -0,0 +1,85 @@
+import { randomUUID } from 'node:crypto';
+import { jsonError, notFound, validationError } from './response.js';
+import { toSiteUuid } from './site-context.js';
+import { getExperimentById, getAssignment, recordConversion, recordConversionsForSignal } from '../experiments/queries.js';
+import { resolveExperimentForContainer } from '../experiments/runtime.js';
+import { assignVariant } from '../experiments/engine.js';
+import { COOKIE_NAMES, COOKIE_MAX_AGE, buildSetCookieHeader, parseCookies } from '../audiences/cookies.js';
+/** Read the visitor id from the kywi_visitor cookie / body, minting one if absent. */
+function resolveVisitor(req, bodyVisitorId) {
+    const cookies = parseCookies(req.headers.get('cookie') ?? '');
+    const fromCookie = cookies.get(COOKIE_NAMES.VISITOR);
+    const existing = fromCookie ? decodeURIComponent(fromCookie) : bodyVisitorId;
+    if (existing)
+        return { visitorId: existing, setCookie: null };
+    const visitorId = `vis-${randomUUID()}`;
+    const setCookie = buildSetCookieHeader(COOKIE_NAMES.VISITOR, visitorId, COOKIE_MAX_AGE.VISITOR, { httpOnly: false });
+    return { visitorId, setCookie };
+}
+function jsonData(data, status = 200, setCookie) {
+    const headers = { 'Content-Type': 'application/json' };
+    if (setCookie)
+        headers['Set-Cookie'] = setCookie;
+    return new Response(JSON.stringify({ data }), { status, headers });
+}
+export function registerExperimentRuntimeRoutes(router, ctx) {
+    const { db, defaultSiteId } = ctx;
+    // POST /kywi/experiments/assign — return the visitor's deterministic variant.
+    router.post('/kywi/experiments/assign', async (req) => {
+        const body = (await req.json().catch(() => ({})));
+        if (!body.experimentId)
+            return jsonError('VALIDATION_ERROR', 'experimentId required', 400);
+        const experiment = await getExperimentById(db, body.experimentId);
+        if (!experiment)
+            return notFound('Experiment not found');
+        const { visitorId, setCookie } = resolveVisitor(req, body.visitorId);
+        const assignment = assignVariant(experiment, visitorId);
+        if (!assignment)
+            return jsonError('NO_VARIANTS', 'Experiment has no variants', 400);
+        return jsonData({ experimentId: experiment.id, variantId: assignment.variantId, variantKey: assignment.variantKey, fromWinner: assignment.fromWinner, visitorId }, 200, setCookie);
+    });
+    // POST /kywi/experiments/exposure — record that the visitor saw their variant.
+    // The variant is recomputed server-side (never trusted from the client).
+    router.post('/kywi/experiments/exposure', async (req) => {
+        const body = (await req.json().catch(() => ({})));
+        if (!body.experimentId)
+            return jsonError('VALIDATION_ERROR', 'experimentId required', 400);
+        const experiment = await getExperimentById(db, body.experimentId);
+        if (!experiment)
+            return notFound('Experiment not found');
+        const { visitorId, setCookie } = resolveVisitor(req, body.visitorId);
+        const resolution = await resolveExperimentForContainer(db, experiment, visitorId);
+        return jsonData({ experimentId: experiment.id, variantId: resolution.variantId, recorded: resolution.variantId !== null }, 200, setCookie);
+    });
+    // POST /kywi/experiments/conversion — record a conversion.
+    //   Signal form:   { event: { type, url?, formId?, eventName? } }  (server matches goals)
+    //   Explicit form: { experimentId, goalType }                      (attributes to assigned variant)
+    router.post('/kywi/experiments/conversion', async (req) => {
+        const body = (await req.json().catch(() => ({})));
+        const { visitorId, setCookie } = resolveVisitor(req, body.visitorId);
+        const siteId = await toSiteUuid(db, body.siteId, defaultSiteId);
+        if (body.event) {
+            const recorded = await recordConversionsForSignal(db, siteId, visitorId, body.event);
+            return jsonData({ recorded }, 200, setCookie);
+        }
+        if (body.experimentId && body.goalType) {
+            const experiment = await getExperimentById(db, body.experimentId);
+            if (!experiment)
+                return notFound('Experiment not found');
+            const assignment = await getAssignment(db, body.experimentId, visitorId);
+            if (!assignment)
+                return jsonData({ recorded: 0 }, 200, setCookie);
+            await recordConversion(db, {
+                experimentId: body.experimentId,
+                variantId: assignment.variantId,
+                siteId: experiment.siteId,
+                visitorId,
+                goalType: body.goalType,
+                metadata: { via: 'explicit' },
+            });
+            return jsonData({ recorded: 1 }, 200, setCookie);
+        }
+        return validationError([{ path: 'event', message: 'event or experimentId+goalType required' }]);
+    });
+}
+//# sourceMappingURL=experiment-runtime-routes.js.map

package/dist/api/experiment-runtime-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"experiment-runtime-routes.js","sourceRoot":"","sources":["../../src/api/experiment-runtime-routes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAGxC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AACpE,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAC9C,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,gBAAgB,EAAE,0BAA0B,EAAE,MAAM,2BAA2B,CAAA;AAC1H,OAAO,EAAE,6BAA6B,EAAE,MAAM,2BAA2B,CAAA;AACzE,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAA;AACxD,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAA;AAQ1G,sFAAsF;AACtF,SAAS,cAAc,CAAC,GAAY,EAAE,aAAsB;IAC1D,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAA;IAC7D,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,CAAA;IACpD,MAAM,QAAQ,GAAG,UAAU,CAAC,CAAC,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,aAAa,CAAA;IAC5E,IAAI,QAAQ;QAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,CAAA;IAC7D,MAAM,SAAS,GAAG,OAAO,UAAU,EAAE,EAAE,CAAA;IACvC,MAAM,SAAS,GAAG,oBAAoB,CAAC,YAAY,CAAC,OAAO,EAAE,SAAS,EAAE,cAAc,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAA;IACpH,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,CAAA;AACjC,CAAC;AAED,SAAS,QAAQ,CAAC,IAAa,EAAE,MAAM,GAAG,GAAG,EAAE,SAAyB;IACtE,MAAM,OAAO,GAA2B,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAA;IAC9E,IAAI,SAAS;QAAE,OAAO,CAAC,YAAY,CAAC,GAAG,SAAS,CAAA;IAChD,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAA;AACpE,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,MAAc,EAAE,GAA6B;IAC3F,MAAM,EAAE,EAAE,EAAE,aAAa,EAAE,GAAG,GAAG,CAAA;IAEjC,8EAA8E;IAC9E,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACpD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAkD,CAAA;QAClG,IAAI,CAAC,IAAI,CAAC,YAAY;YAAE,OAAO,SAAS,CAAC,kBAAkB,EAAE,uBAAuB,EAAE,GAAG,CAAC,CAAA;QAE1F,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,EAAE,EAAE,IAAI,CAAC,YAAY,CAAC,CAAA;QACjE,IAAI,CAAC,UAAU;YAAE,OAAO,QAAQ,CAAC,sBAAsB,CAAC,CAAA;QAExD,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,CAAA;QACpE,MAAM,UAAU,GAAG,aAAa,CAAC,UAAU,EAAE,SAAS,CAAC,CAAA;QACvD,IAAI,CAAC,UAAU;YAAE,OAAO,SAAS,CAAC,aAAa,EAAE,4BAA4B,EAAE,GAAG,CAAC,CAAA;QAEnF,OAAO,QAAQ,CACb,EAAE,YAAY,EAAE,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,UAAU,CAAC,SAAS,EAAE,UAAU,EAAE,UAAU,CAAC,UAAU,EAAE,UAAU,EAAE,UAAU,CAAC,UAAU,EAAE,SAAS,EAAE,EACjJ,GAAG,EACH,SAAS,CACV,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,+EAA+E;IAC/E,yEAAyE;IACzE,MAAM,CAAC,IAAI,CAAC,4BAA4B,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACtD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAkD,CAAA;QAClG,IAAI,CAAC,IAAI,CAAC,YAAY;YAAE,OAAO,SAAS,CAAC,kBAAkB,EAAE,uBAAuB,EAAE,GAAG,CAAC,CAAA;QAE1F,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,EAAE,EAAE,IAAI,CAAC,YAAY,CAAC,CAAA;QACjE,IAAI,CAAC,UAAU;YAAE,OAAO,QAAQ,CAAC,sBAAsB,CAAC,CAAA;QAExD,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,CAAA;QACpE,MAAM,UAAU,GAAG,MAAM,6BAA6B,CAAC,EAAE,EAAE,UAAU,EAAE,SAAS,CAAC,CAAA;QACjF,OAAO,QAAQ,CAAC,EAAE,YAAY,EAAE,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,UAAU,CAAC,SAAS,EAAE,QAAQ,EAAE,UAAU,CAAC,SAAS,KAAK,IAAI,EAAE,EAAE,GAAG,EAAE,SAAS,CAAC,CAAA;IAC5I,CAAC,CAAC,CAAA;IAEF,2DAA2D;IAC3D,0FAA0F;IAC1F,oGAAoG;IACpG,MAAM,CAAC,IAAI,CAAC,8BAA8B,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACxD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAM/C,CAAA;QAED,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,CAAA;QACpE,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC,CAAA;QAE/D,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,MAAM,QAAQ,GAAG,MAAM,0BAA0B,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAA;YACpF,OAAO,QAAQ,CAAC,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,SAAS,CAAC,CAAA;QAC/C,CAAC;QAED,IAAI,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACvC,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,EAAE,EAAE,IAAI,CAAC,YAAY,CAAC,CAAA;YACjE,IAAI,CAAC,UAAU;gBAAE,OAAO,QAAQ,CAAC,sBAAsB,CAAC,CAAA;YACxD,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,EAAE,EAAE,IAAI,CAAC,YAAY,EAAE,SAAS,CAAC,CAAA;YACxE,IAAI,CAAC,UAAU;gBAAE,OAAO,QAAQ,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,SAAS,CAAC,CAAA;YACjE,MAAM,gBAAgB,CAAC,EAAE,EAAE;gBACzB,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,SAAS,EAAE,UAAU,CAAC,SAAS;gBAC/B,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,SAAS;gBACT,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,QAAQ,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE;aAC9B,CAAC,CAAA;YACF,OAAO,QAAQ,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,SAAS,CAAC,CAAA;QAClD,CAAC;QAED,OAAO,eAAe,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,yCAAyC,EAAE,CAAC,CAAC,CAAA;IACjG,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/dist/api/extension-routes.d.ts

@@ -0,0 +1,11 @@
+import type { Router } from './router.js';
+import type { KywiDb } from '../db/client.js';
+import type { KywiConfig } from '../config/types.js';
+interface ExtensionRouteContext {
+    config: KywiConfig;
+    db: KywiDb;
+    authSecret: string;
+}
+export declare function registerExtensionRoutes(router: Router, ctx: ExtensionRouteContext): void;
+export {};
+//# sourceMappingURL=extension-routes.d.ts.map

package/dist/api/extension-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"extension-routes.d.ts","sourceRoot":"","sources":["../../src/api/extension-routes.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAA;AAC7C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAA;AAuBpD,UAAU,qBAAqB;IAC7B,MAAM,EAAE,UAAU,CAAA;IAClB,EAAE,EAAE,MAAM,CAAA;IACV,UAAU,EAAE,MAAM,CAAA;CACnB;AAyHD,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,qBAAqB,GAAG,IAAI,CA8TxF"}