@kywi-software/core 0.1.0

package/dist/api/index.js

@@ -0,0 +1,488 @@
+import { Router } from './router.js';
+import { registerContentRoutes } from './content-routes.js';
+import { registerSiteRoutes } from './site-routes.js';
+import { registerAuthRoutes } from './auth-routes.js';
+import { registerUserRoutes } from './user-routes.js';
+import { registerGroupRoutes } from './group-routes.js';
+import { registerApiKeyRoutes } from './api-key-routes.js';
+import { registerOAuthRoutes } from './oauth-routes.js';
+import { registerPluginRoutes } from './plugin-routes.js';
+import { registerNavRoutes } from './nav-routes.js';
+import { registerTreeRoutes } from './tree-routes.js';
+import { registerLayoutRoutes } from './layout-routes.js';
+import { registerFeedRoutes } from './feed-routes.js';
+import { registerMediaRoutes } from './media-routes.js';
+import { registerFormRoutes } from './form-routes.js';
+import { registerSiteAdminRoutes } from './site-admin-routes.js';
+import { registerDashboardRoutes } from './dashboard-routes.js';
+import { registerWorkflowRoutes } from './workflow-routes.js';
+import { registerVersionRoutes } from './version-routes.js';
+import { registerCategoryRoutes } from './category-routes.js';
+import { registerTagRoutes } from './tag-routes.js';
+import { registerCommentRoutes } from './comment-routes.js';
+import { registerConfigRoutes } from './config-routes.js';
+import { registerAudienceRoutes } from './audience-routes.js';
+import { registerAudienceRuntimeRoutes } from './audience-runtime-routes.js';
+import { registerAudiencePreviewRoutes } from './audience-preview-routes.js';
+import { registerExperimentRoutes } from './experiment-routes.js';
+import { registerExperimentRuntimeRoutes } from './experiment-runtime-routes.js';
+import { registerAdapterProxyRoutes } from './adapter-proxy-routes.js';
+import { bootstrapAdapterRegistry } from '../audiences/adapters/bootstrap.js';
+import { registerBulkRoutes } from './bulk-routes.js';
+import { registerSearchRoutes } from './search-routes.js';
+import { registerRelationshipRoutes } from './relationship-routes.js';
+import { registerWebhookRoutes } from './webhook-routes.js';
+import { registerComponentRoutes } from './component-routes.js';
+import { registerSectionTemplateRoutes } from './section-template-routes.js';
+import { registerExtensionRoutes } from './extension-routes.js';
+import { registerChangesetRoutes } from './changeset-routes.js';
+import { registerSchedulerRoutes } from './scheduler-routes.js';
+import { registerPasswordResetRoutes } from './password-reset-routes.js';
+import { registerContentTypeRoutes } from './content-type-routes.js';
+import { registerTranslationRoutes } from './translation-routes.js';
+import { registerContentPermissionRoutes } from './content-permission-routes.js';
+import { registerCacheRoutes } from './cache-routes.js';
+import { registerEmailAdminRoutes } from './email-admin-routes.js';
+import { wireWebhookDispatch } from '../hooks/webhook-dispatch.js';
+import { wireAxInvalidation } from '../hooks/ax-invalidation.js';
+import { registerAxRoutes } from './ax-routes.js';
+import { createDbAxContentSource } from '../ax/content-source.js';
+import { wireCommentStatsHooks } from '../hooks/stats-hooks.js';
+import { createCachedContentQueries } from '../cache/cached-queries.js';
+import { buildCachedContentGetters } from './cached-content-getters.js';
+import { createThemeRegistry } from '../layout/theme-registry.js';
+import { createKywiAuthConfig } from '../auth/authjs.js';
+import { createAuthjsHandler } from './authjs-routes.js';
+import { createGraphQLSchema } from './graphql/schema.js';
+import { createResolvers } from './graphql/resolvers.js';
+import { handleGraphQLRequest } from './graphql/handler.js';
+import { createHookRegistry } from '../hooks/registry.js';
+import { loadAllPlugins } from '../hooks/plugin-loader.js';
+import { createPluginActivationRegistry } from '../hooks/plugin-activation.js';
+import { listPluginsForSite } from '../db/site-plugin-queries.js';
+import { createEmailProvider } from '../email/index.js';
+import { createKywiCacheProvider, createKywiCache } from '../cache/factory.js';
+import { contentKey, contentSlugKey } from '../cache/keys.js';
+import { buildCustomFieldTable } from '../db/dynamic-schema.js';
+import { loadAdminFields } from '../db/schema-field-queries.js';
+import { loadAdminTypes } from '../db/content-type-queries.js';
+import { resolveSiteId as resolveSiteIdFromDb } from '../db/site-queries.js';
+export { Router } from './router.js';
+export * from './response.js';
+export * from './pagination.js';
+export * from './content-schemas.js';
+export * from './auth.js';
+export * from './auth-routes.js';
+export * from './user-routes.js';
+export * from './group-routes.js';
+export * from './api-key-routes.js';
+export * from './oauth-routes.js';
+export * from './plugin-routes.js';
+export * from './nav-routes.js';
+export * from './tree-routes.js';
+export * from './layout-routes.js';
+export * from './feed-routes.js';
+export * from './ax-routes.js';
+export * from './media-routes.js';
+export * from './form-routes.js';
+export * from './site-admin-routes.js';
+export * from './dashboard-routes.js';
+export * from './workflow-routes.js';
+export * from './version-routes.js';
+export * from './category-routes.js';
+export * from './tag-routes.js';
+export * from './comment-routes.js';
+export * from './config-routes.js';
+export * from './audience-routes.js';
+export * from './audience-runtime-routes.js';
+export * from './audience-preview-routes.js';
+export { registerExperimentRoutes } from './experiment-routes.js';
+export { registerExperimentRuntimeRoutes } from './experiment-runtime-routes.js';
+export * from './authjs-routes.js';
+export { registerChangesetRoutes } from './changeset-routes.js';
+export { registerSchedulerRoutes } from './scheduler-routes.js';
+export { registerPasswordResetRoutes } from './password-reset-routes.js';
+export { registerAdapterProxyRoutes } from './adapter-proxy-routes.js';
+export * from './bulk-routes.js';
+export * from './search-routes.js';
+export * from './content-permission-routes.js';
+export * from './relationship-routes.js';
+export * from './webhook-routes.js';
+export * from './component-routes.js';
+export { registerExtensionRoutes } from './extension-routes.js';
+export { generateOpenApiSpec } from './openapi.js';
+export async function createKywiApiHandler(options) {
+    const { config, db, authSecret, storage } = options;
+    const router = new Router();
+    const hookRegistry = options.hookRegistry ?? createHookRegistry();
+    // Per-site plugin activation gate (G1). Built empty (active-by-default), then
+    // hydrated from kywi_site_plugins once site UUIDs are resolved below. The gate
+    // is a live closure the hook loader consults at emit time, so an admin toggle
+    // takes effect on the next event without a server restart — handlers are
+    // registered once here but fire only while their plugin is active for the
+    // payload's site.
+    const pluginActivation = createPluginActivationRegistry();
+    // Load plugins (G2/G3/G4): resolve package-only entries, run each plugin's
+    // init(config), register site- and activation-gated hooks, and capture the
+    // aggregated contentTypes/modules/scopeExtensions/adminExtensions. Inline
+    // contentTypes/modules are already folded into config by defineKywiConfig; the
+    // return additionally carries any from dynamically-resolved packages plus the
+    // scope/admin extensions consumed below.
+    const pluginContributions = await loadAllPlugins(config.plugins, hookRegistry, { isActive: (pkg, siteId) => pluginActivation.isActive(pkg, siteId) });
+    const cacheProvider = options.cacheProvider ?? createKywiCacheProvider(config.cache);
+    const cache = createKywiCache(cacheProvider);
+    const kywiCtx = { cache, user: null };
+    // Narrow content-cache invalidation used by mutation routes (workflow
+    // transitions, version restore) that update content directly rather than
+    // through the content hook dispatcher. Mirrors the `content:afterUpdate`
+    // subscription below without firing the full hook chain (webhooks, etc.).
+    const invalidateContentCache = async (siteId, id, slug) => {
+        if (!siteId || !id)
+            return;
+        await cacheProvider.delete(contentKey(siteId, id));
+        if (slug)
+            await cacheProvider.delete(contentSlugKey(siteId, slug));
+        await cacheProvider.invalidatePattern(`feed:${siteId}:*`);
+        await cacheProvider.invalidatePattern(`nav:${siteId}:*`);
+    };
+    // Auto-invalidate cache on content mutations
+    hookRegistry.on('content:afterCreate', async (payload) => {
+        const p = payload;
+        const siteId = String(p.content.siteId ?? '');
+        if (siteId)
+            await cacheProvider.invalidatePattern(`feed:${siteId}:*`);
+    });
+    hookRegistry.on('content:afterUpdate', async (payload) => {
+        const p = payload;
+        const siteId = String(p.content.siteId ?? '');
+        const id = String(p.content.id ?? '');
+        const slug = p.content.slug ? String(p.content.slug) : undefined;
+        if (siteId && id) {
+            await cacheProvider.delete(contentKey(siteId, id));
+            if (slug)
+                await cacheProvider.delete(contentSlugKey(siteId, slug));
+            await cacheProvider.invalidatePattern(`feed:${siteId}:*`);
+            await cacheProvider.invalidatePattern(`nav:${siteId}:*`);
+        }
+    });
+    hookRegistry.on('content:afterDelete', async (payload) => {
+        const p = payload;
+        const siteId = String(p.content.siteId ?? '');
+        const id = String(p.content.id ?? '');
+        if (siteId && id) {
+            await cacheProvider.delete(contentKey(siteId, id));
+            await cacheProvider.invalidatePattern(`feed:${siteId}:*`);
+            await cacheProvider.invalidatePattern(`nav:${siteId}:*`);
+        }
+    });
+    hookRegistry.on('content:afterPublish', async (payload) => {
+        const p = payload;
+        const siteId = String(p.content.siteId ?? '');
+        const id = String(p.content.id ?? '');
+        const slug = p.content.slug ? String(p.content.slug) : undefined;
+        if (siteId && id) {
+            await cacheProvider.delete(contentKey(siteId, id));
+            if (slug)
+                await cacheProvider.delete(contentSlugKey(siteId, slug));
+            await cacheProvider.invalidatePattern(`feed:${siteId}:*`);
+            await cacheProvider.invalidatePattern(`nav:${siteId}:*`);
+        }
+    });
+    // W9: wire comment stats hooks so commentCount stays in sync
+    wireCommentStatsHooks(hookRegistry, db);
+    // W4: create cached content queries when a cache provider is available.
+    // The base getters merge each row with its content-type custom field table
+    // (kywi_ct_*) so a cache-served GET returns the same base+custom shape as an
+    // uncached one. A live `() => customTableMap` accessor is passed so schema
+    // reloads (rebuildSchemaMaps reassigns the map) are reflected per request.
+    const cachedQueries = cacheProvider
+        ? createCachedContentQueries(cacheProvider, buildCachedContentGetters(db, () => customTableMap), config.cache?.contentTtl ?? 300)
+        : null;
+    // W10: build theme registry from config
+    const themeRegistry = createThemeRegistry();
+    for (const theme of config.themes) {
+        themeRegistry.register(theme);
+    }
+    // Load admin-defined fields + admin-created types from DB and merge with config
+    const adminFieldMap = await loadAdminFields(db);
+    const adminTypeList = await loadAdminTypes(db);
+    // Mutated in place (never reassigned) so route handlers that captured these
+    // references at registration see reloads immediately — no server restart.
+    const contentTypeMap = new Map();
+    const customTableMap = new Map();
+    function rebuildSchemaMaps(adminFields, adminTypes) {
+        contentTypeMap.clear();
+        customTableMap.clear();
+        const BUILT_IN_TYPES = [
+            { name: 'page', label: 'Page', baseType: 'content', fields: [] },
+            { name: 'folder', label: 'Folder', baseType: 'folder', fields: [] },
+            { name: 'link', label: 'Link', baseType: 'link', fields: [] },
+        ];
+        for (const bt of BUILT_IN_TYPES) {
+            contentTypeMap.set(bt.name, bt);
+        }
+        // config.contentTypes already includes inline plugins' contentTypes (folded
+        // in by defineKywiConfig); pluginContributions.contentTypes additionally
+        // covers types from dynamically-resolved `package` plugins. Iterate both,
+        // config first so an app type wins a name clash.
+        const allConfigTypes = [...config.contentTypes];
+        for (const pct of pluginContributions.contentTypes) {
+            if (!allConfigTypes.some(c => c.name === pct.name))
+                allConfigTypes.push(pct);
+        }
+        for (const ct of allConfigTypes) {
+            const configFields = ct.fields.map(f => ({ ...f, source: 'config' }));
+            const adminAddedFields = adminFields.get(ct.name) ?? [];
+            const merged = { ...ct, fields: [...configFields, ...adminAddedFields] };
+            contentTypeMap.set(ct.name, merged);
+            if (merged.fields.length > 0) {
+                customTableMap.set(ct.name, buildCustomFieldTable(merged));
+            }
+        }
+        // Admin-created types (visual designer). Never shadow a built-in or config
+        // type — such a name is skipped here (and rejected at creation time).
+        for (const at of adminTypes) {
+            if (contentTypeMap.has(at.name))
+                continue;
+            const adminAddedFields = adminFields.get(at.name) ?? [];
+            const merged = { ...at, fields: adminAddedFields };
+            contentTypeMap.set(at.name, merged);
+            if (merged.fields.length > 0) {
+                customTableMap.set(at.name, buildCustomFieldTable(merged));
+            }
+        }
+    }
+    rebuildSchemaMaps(adminFieldMap, adminTypeList);
+    async function reloadMaps() {
+        const [freshAdminFields, freshAdminTypes] = await Promise.all([
+            loadAdminFields(db),
+            loadAdminTypes(db),
+        ]);
+        rebuildSchemaMaps(freshAdminFields, freshAdminTypes);
+    }
+    registerContentTypeRoutes(router, {
+        config,
+        db,
+        authSecret,
+        getContentTypeMap: () => contentTypeMap,
+        getCustomTableMap: () => customTableMap,
+        reloadMaps,
+    });
+    // Resolve config site IDs (slugs) to DB UUIDs once at startup so all route
+    // handlers receive real UUIDs, not the human-readable config identifiers.
+    const siteIdMap = {};
+    for (const site of config.sites) {
+        const uuid = await resolveSiteIdFromDb(db, site.id);
+        if (uuid)
+            siteIdMap[site.id] = uuid;
+    }
+    registerTranslationRoutes(router, {
+        config,
+        db,
+        authSecret,
+        siteIdMap,
+        ...(options.resourceBundles ? { resourceBundles: options.resourceBundles } : {}),
+        getContentTypeMap: () => contentTypeMap,
+        getCustomTableMap: () => customTableMap,
+    });
+    registerContentRoutes(router, {
+        config,
+        db,
+        authSecret,
+        contentTypeMap,
+        customTableMap,
+        hookRegistry,
+        kywiCtx,
+        cachedQueries,
+        siteIdMap,
+    });
+    // Create email provider early so it's available for auth routes, comment routes, and password reset routes
+    const emailProvider = options.emailProvider ?? (config.email ? createEmailProvider(config.email) : undefined);
+    registerSiteRoutes(router, db);
+    registerAuthRoutes(router, { config, db, authSecret, hookRegistry, emailProvider });
+    registerUserRoutes(router, { config, db, authSecret });
+    registerGroupRoutes(router, { config, db, authSecret });
+    registerApiKeyRoutes(router, db, authSecret);
+    // OAuth client management (admin/developer only) — GET|POST /auth/oauth-clients
+    // and GET|PUT|DELETE /auth/oauth-clients/:id. Backed by kywi_oauth_clients; the
+    // create response returns the plaintext client secret exactly once.
+    registerOAuthRoutes(router, db, authSecret);
+    const defaultSiteId = config.sites[0]?.id;
+    registerNavRoutes(router, defaultSiteId !== undefined ? { db, siteId: defaultSiteId } : { db });
+    // Pass the resolved default site UUID (from siteIdMap) so the tree route can
+    // hand it straight to the content query, rather than resolving per-request.
+    const treeDefaultSiteId = config.sites[0]
+        ? (siteIdMap[config.sites[0].id] ?? config.sites[0].id)
+        : undefined;
+    registerTreeRoutes(router, db, authSecret, treeDefaultSiteId);
+    registerLayoutRoutes(router, db, authSecret, config);
+    registerFeedRoutes(router, {
+        config,
+        db,
+        authSecret,
+        contentTypeMap,
+        customTableMap,
+    });
+    if (storage) {
+        registerMediaRoutes(router, { config, db, authSecret, storage });
+    }
+    registerFormRoutes(router, { config, db, authSecret, siteIdMap });
+    registerSiteAdminRoutes(router, db, authSecret, hookRegistry);
+    registerDashboardRoutes(router, { config, db, authSecret, siteIdMap });
+    registerCacheRoutes(router, { db, authSecret, cacheConfig: config.cache, cacheProvider });
+    registerEmailAdminRoutes(router, { db, authSecret, emailConfig: config.email, emailProvider });
+    registerWorkflowRoutes(router, {
+        config,
+        db,
+        authSecret,
+        contentTypeMap,
+        customTableMap,
+        invalidateContent: invalidateContentCache,
+    });
+    registerVersionRoutes(router, {
+        config,
+        db,
+        authSecret,
+        contentTypeMap,
+        customTableMap,
+        invalidateContent: invalidateContentCache,
+    });
+    registerCategoryRoutes(router, { config, db, authSecret, hookRegistry });
+    registerTagRoutes(router, { config, db, authSecret });
+    registerCommentRoutes(router, { config, db, authSecret, hookRegistry, emailProvider });
+    registerConfigRoutes(router, config);
+    // Audience tables key on the DB site UUID (site_id FK), not the human-readable
+    // config slug. Resolve slug→UUID via siteIdMap (same as treeDefaultSiteId above)
+    // so listing/creating audiences targets the real site row. Passing the raw slug
+    // here is the slug-vs-UUID bug class: it makes list queries return nothing and
+    // makes creates fail the site_id FK (invalid-UUID 500).
+    const audienceDefaultSiteId = config.sites[0]
+        ? (siteIdMap[config.sites[0].id] ?? config.sites[0].id)
+        : '';
+    // Build the adapter registry up-front so the audience routes can expose the
+    // registered adapter fields in the condition-builder signal catalogue
+    // (GET /audiences/signals). The registry is also used by the proxy routes below.
+    const adapterRegistry = bootstrapAdapterRegistry(config);
+    registerAudienceRoutes(router, {
+        db,
+        authSecret,
+        defaultSiteId: audienceDefaultSiteId,
+        adapterFields: adapterRegistry.listFields(),
+    });
+    registerAudienceRuntimeRoutes(router, {
+        db,
+        webhookSecret: process.env['KYWI_WEBHOOK_SECRET'] ?? authSecret,
+    });
+    registerAudiencePreviewRoutes(router, {
+        db,
+        authSecret,
+        previewSecret: process.env['KYWI_PREVIEW_SECRET'] ?? authSecret,
+        defaultSiteId: audienceDefaultSiteId,
+    });
+    // A/B experiments — admin CRUD/results (editor read, siteAdmin write) plus the
+    // public runtime beacons (assign/exposure/conversion). Both scope to the
+    // already-resolved default site UUID, mirroring the audience routes above.
+    registerExperimentRoutes(router, { db, authSecret, defaultSiteId: audienceDefaultSiteId });
+    registerExperimentRuntimeRoutes(router, { db, defaultSiteId: audienceDefaultSiteId });
+    // SP21 adapter runtime: build the AdapterRegistry from config (adapters live
+    // under `theme.personalization.adapters`) and mount the server-proxy endpoint.
+    // `POST /kywi/adapters/:adapterId` runs a registered server-proxy adapter's
+    // `collect()` server-side and returns its namespaced signal fields; the client
+    // (@kywi-software/js runClientAdapters) merges them into VisitorSignals.adapters before
+    // evaluating audiences. Unknown ids 404, so mounting it always is safe even
+    // when a site declares no adapters. (Registry built above for the audience
+    // signal catalogue; reused here.)
+    registerAdapterProxyRoutes(router, { adapterRegistry, authSecret });
+    registerBulkRoutes(router, {
+        config,
+        db,
+        authSecret,
+        contentTypeMap,
+        customTableMap,
+        hookRegistry,
+        kywiCtx,
+        siteIdMap,
+    });
+    registerSearchRoutes(router, { config, db, authSecret });
+    registerContentPermissionRoutes(router, { db, authSecret });
+    registerRelationshipRoutes(router, { config, db, authSecret });
+    registerWebhookRoutes(router, { config, db, authSecret });
+    registerComponentRoutes(router, { config, db, authSecret });
+    registerSectionTemplateRoutes(router, { config, db, authSecret });
+    registerExtensionRoutes(router, { config, db, authSecret });
+    // Plugin activation management. Plugins are code-defined (config-as-code): the
+    // list of registered plugins and the hooks they subscribe to come from the
+    // in-memory config, while per-site activation state lives in kywi_site_plugins.
+    // The pluginSiteId is the resolved DB UUID (kywi_site_plugins.siteId is a uuid
+    // FK) — passing the config slug would be the slug-vs-UUID bug class.
+    const pluginSiteId = config.sites[0]
+        ? (siteIdMap[config.sites[0].id] ?? config.sites[0].id)
+        : '';
+    // Hydrate the activation gate from kywi_site_plugins across every resolved
+    // site UUID, so a persisted deactivation is honoured from the first request.
+    const activationRows = [];
+    for (const site of config.sites) {
+        const uuid = siteIdMap[site.id];
+        if (!uuid)
+            continue;
+        const rows = await listPluginsForSite(db, uuid);
+        for (const row of rows) {
+            activationRows.push({ pluginPackage: row.pluginPackage, siteId: uuid, isActive: row.isActive });
+        }
+    }
+    pluginActivation.loadFromRows(activationRows);
+    registerPluginRoutes(router, {
+        db,
+        authSecret,
+        plugins: config.plugins,
+        defaultSiteId: pluginSiteId,
+        // Keep the live gate in sync with admin toggles (no restart) — G1.
+        onActivationChange: (pkg, siteId, active) => pluginActivation.setActive(pkg, siteId, active),
+        // Plugin admin-nav contributions (G2) surfaced read-only for the shell.
+        adminNavItems: pluginContributions.adminExtensions?.navItems ?? [],
+    });
+    registerChangesetRoutes(router, {
+        db,
+        authSecret,
+        defaultSiteId: config.sites[0]?.id,
+        invalidateContent: invalidateContentCache,
+    });
+    // GAP-12-E: admin trigger for the background scheduler sweep (external cron).
+    registerSchedulerRoutes(router, { db, authSecret });
+    // Password reset routes
+    if (emailProvider) {
+        registerPasswordResetRoutes(router, { config, db, emailProvider });
+    }
+    // GraphQL read-only endpoint
+    const gqlSchema = createGraphQLSchema(config);
+    const gqlResolvers = createResolvers(db, config);
+    router.post('/graphql', async (req) => handleGraphQLRequest(gqlSchema, gqlResolvers, req));
+    // Use the resolved site UUID (kywi_webhook_endpoints.siteId is a UUID FK) so
+    // webhook delivery matches endpoints correctly — a config slug would never match.
+    const webhookDispatchSiteId = config.sites[0]
+        ? (siteIdMap[config.sites[0].id] ?? config.sites[0].id)
+        : '';
+    wireWebhookDispatch(db, hookRegistry, webhookDispatchSiteId);
+    // Agent Experience (AX) — Tier 1 serve surfaces. One DB-backed content source
+    // feeds all generators; cache invalidation subscribes to the same content
+    // lifecycle hooks as the content/feed/nav caches above, so a publish through
+    // this singleton handler clears ax:{siteId}:* on this exact cacheProvider and
+    // the next /llms.txt GET regenerates — zero drift, no cross-process bus.
+    const axSource = createDbAxContentSource(db, config);
+    wireAxInvalidation(cacheProvider, hookRegistry);
+    registerAxRoutes(router, { config, db, cacheProvider, contentSource: axSource, siteIdMap });
+    // Auth.js v5 integration — handles /auth/signin, /auth/callback/*, /auth/session, etc.
+    const authjsConfig = createKywiAuthConfig(config, db);
+    const authjsHandler = createAuthjsHandler(authjsConfig);
+    return {
+        handle: async (req, pathSegments) => {
+            const response = await router.handle(req, pathSegments);
+            // If router returns 404 and path starts with 'auth', delegate to Auth.js
+            if (response.status === 404 && pathSegments[0] === 'auth') {
+                return authjsHandler(req);
+            }
+            return response;
+        },
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/api/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/api/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAA;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AACrD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AACrD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AACrD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAA;AACvD,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAA;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAA;AACvD,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAA;AACzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AACnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AACrD,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAA;AACzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AACrD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAA;AACvD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AACrD,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAA;AAChE,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAA;AAC/D,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAA;AAC7D,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAA;AAC3D,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAA;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AACnD,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAA;AAC3D,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAA;AACzD,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAA;AAC7D,OAAO,EAAE,6BAA6B,EAAE,MAAM,8BAA8B,CAAA;AAC5E,OAAO,EAAE,6BAA6B,EAAE,MAAM,8BAA8B,CAAA;AAC5E,OAAO,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAA;AACjE,OAAO,EAAE,+BAA+B,EAAE,MAAM,gCAAgC,CAAA;AAChF,OAAO,EAAE,0BAA0B,EAAE,MAAM,2BAA2B,CAAA;AACtE,OAAO,EAAE,wBAAwB,EAAE,MAAM,oCAAoC,CAAA;AAC7E,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AACrD,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAA;AACzD,OAAO,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAA;AACrE,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAA;AAC3D,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAA;AAC/D,OAAO,EAAE,6BAA6B,EAAE,MAAM,8BAA8B,CAAA;AAC5E,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAA;AAC/D,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAA;AAC/D,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAA;AAC/D,OAAO,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAA;AACxE,OAAO,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAA;AAEpE,OAAO,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAA;AAEnE,OAAO,EAAE,+BAA+B,EAAE,MAAM,gCAAgC,CAAA;AAChF,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAA;AACvD,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAA;AAClE,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAA;AAClE,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAA;AAChE,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AACjD,OAAO,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAA;AACjE,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAA;AAC/D,OAAO,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAA;AACvE,OAAO,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAA;AACvE,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAA;AACjE,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAA;AACxD,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAA;AACxD,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAA;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AACxD,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAA;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAA;AACzD,OAAO,EAAE,cAAc,EAAyB,MAAM,2BAA2B,CAAA;AACjF,OAAO,EAAE,8BAA8B,EAAE,MAAM,+BAA+B,CAAA;AAC9E,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAA;AACjE,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAA;AACvD,OAAO,EAAE,uBAAuB,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AAC9E,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AAC7D,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAA;AAC/D,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAA;AAC/D,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAA;AAC9D,OAAO,EAAE,aAAa,IAAI,mBAAmB,EAAE,MAAM,uBAAuB,CAAA;AAS5E,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,cAAc,eAAe,CAAA;AAC7B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,sBAAsB,CAAA;AACpC,cAAc,WAAW,CAAA;AACzB,cAAc,kBAAkB,CAAA;AAChC,cAAc,kBAAkB,CAAA;AAChC,cAAc,mBAAmB,CAAA;AACjC,cAAc,qBAAqB,CAAA;AACnC,cAAc,mBAAmB,CAAA;AACjC,cAAc,oBAAoB,CAAA;AAClC,cAAc,iBAAiB,CAAA;AAC/B,cAAc,kBAAkB,CAAA;AAChC,cAAc,oBAAoB,CAAA;AAClC,cAAc,kBAAkB,CAAA;AAChC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,mBAAmB,CAAA;AACjC,cAAc,kBAAkB,CAAA;AAChC,cAAc,wBAAwB,CAAA;AACtC,cAAc,uBAAuB,CAAA;AACrC,cAAc,sBAAsB,CAAA;AACpC,cAAc,qBAAqB,CAAA;AACnC,cAAc,sBAAsB,CAAA;AACpC,cAAc,iBAAiB,CAAA;AAC/B,cAAc,qBAAqB,CAAA;AACnC,cAAc,oBAAoB,CAAA;AAClC,cAAc,sBAAsB,CAAA;AACpC,cAAc,8BAA8B,CAAA;AAC5C,cAAc,8BAA8B,CAAA;AAC5C,OAAO,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAA;AACjE,OAAO,EAAE,+BAA+B,EAAE,MAAM,gCAAgC,CAAA;AAChF,cAAc,oBAAoB,CAAA;AAClC,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAA;AAC/D,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAA;AAC/D,OAAO,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAA;AACxE,OAAO,EAAE,0BAA0B,EAAE,MAAM,2BAA2B,CAAA;AACtE,cAAc,kBAAkB,CAAA;AAChC,cAAc,oBAAoB,CAAA;AAClC,cAAc,gCAAgC,CAAA;AAC9C,cAAc,0BAA0B,CAAA;AACxC,cAAc,qBAAqB,CAAA;AACnC,cAAc,uBAAuB,CAAA;AACrC,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAA;AAC/D,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAA;AAkBlD,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,OAAuB;IAChE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,OAAO,CAAA;IACnD,MAAM,MAAM,GAAG,IAAI,MAAM,EAAE,CAAA;IAE3B,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,kBAAkB,EAAE,CAAA;IAEjE,8EAA8E;IAC9E,+EAA+E;IAC/E,8EAA8E;IAC9E,yEAAyE;IACzE,0EAA0E;IAC1E,kBAAkB;IAClB,MAAM,gBAAgB,GAAG,8BAA8B,EAAE,CAAA;IAEzD,2EAA2E;IAC3E,2EAA2E;IAC3E,0EAA0E;IAC1E,+EAA+E;IAC/E,8EAA8E;IAC9E,yCAAyC;IACzC,MAAM,mBAAmB,GAAqB,MAAM,cAAc,CAChE,MAAM,CAAC,OAAO,EACd,YAAY,EACZ,EAAE,QAAQ,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,gBAAgB,CAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,CACtE,CAAA;IACD,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,uBAAuB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IACpF,MAAM,KAAK,GAAG,eAAe,CAAC,aAAa,CAAC,CAAA;IAC5C,MAAM,OAAO,GAAgB,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;IAElD,sEAAsE;IACtE,yEAAyE;IACzE,yEAAyE;IACzE,0EAA0E;IAC1E,MAAM,sBAAsB,GAAG,KAAK,EAClC,MAAe,EACf,EAAW,EACX,IAAa,EACE,EAAE;QACjB,IAAI,CAAC,MAAM,IAAI,CAAC,EAAE;YAAE,OAAM;QAC1B,MAAM,aAAa,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAA;QAClD,IAAI,IAAI;YAAE,MAAM,aAAa,CAAC,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAA;QAClE,MAAM,aAAa,CAAC,iBAAiB,CAAC,QAAQ,MAAM,IAAI,CAAC,CAAA;QACzD,MAAM,aAAa,CAAC,iBAAiB,CAAC,OAAO,MAAM,IAAI,CAAC,CAAA;IAC1D,CAAC,CAAA;IAED,6CAA6C;IAC7C,YAAY,CAAC,EAAE,CAAC,qBAAqB,EAAE,KAAK,EAAE,OAAgB,EAAE,EAAE;QAChE,MAAM,CAAC,GAAG,OAA+C,CAAA;QACzD,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAA;QAC7C,IAAI,MAAM;YAAE,MAAM,aAAa,CAAC,iBAAiB,CAAC,QAAQ,MAAM,IAAI,CAAC,CAAA;IACvE,CAAC,CAAC,CAAA;IAEF,YAAY,CAAC,EAAE,CAAC,qBAAqB,EAAE,KAAK,EAAE,OAAgB,EAAE,EAAE;QAChE,MAAM,CAAC,GAAG,OAA+C,CAAA;QACzD,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAA;QAC7C,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,CAAA;QACrC,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QAChE,IAAI,MAAM,IAAI,EAAE,EAAE,CAAC;YACjB,MAAM,aAAa,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAA;YAClD,IAAI,IAAI;gBAAE,MAAM,aAAa,CAAC,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAA;YAClE,MAAM,aAAa,CAAC,iBAAiB,CAAC,QAAQ,MAAM,IAAI,CAAC,CAAA;YACzD,MAAM,aAAa,CAAC,iBAAiB,CAAC,OAAO,MAAM,IAAI,CAAC,CAAA;QAC1D,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,YAAY,CAAC,EAAE,CAAC,qBAAqB,EAAE,KAAK,EAAE,OAAgB,EAAE,EAAE;QAChE,MAAM,CAAC,GAAG,OAA+C,CAAA;QACzD,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAA;QAC7C,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,CAAA;QACrC,IAAI,MAAM,IAAI,EAAE,EAAE,CAAC;YACjB,MAAM,aAAa,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAA;YAClD,MAAM,aAAa,CAAC,iBAAiB,CAAC,QAAQ,MAAM,IAAI,CAAC,CAAA;YACzD,MAAM,aAAa,CAAC,iBAAiB,CAAC,OAAO,MAAM,IAAI,CAAC,CAAA;QAC1D,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,YAAY,CAAC,EAAE,CAAC,sBAAsB,EAAE,KAAK,EAAE,OAAgB,EAAE,EAAE;QACjE,MAAM,CAAC,GAAG,OAA+C,CAAA;QACzD,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAA;QAC7C,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,CAAA;QACrC,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QAChE,IAAI,MAAM,IAAI,EAAE,EAAE,CAAC;YACjB,MAAM,aAAa,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAA;YAClD,IAAI,IAAI;gBAAE,MAAM,aAAa,CAAC,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAA;YAClE,MAAM,aAAa,CAAC,iBAAiB,CAAC,QAAQ,MAAM,IAAI,CAAC,CAAA;YACzD,MAAM,aAAa,CAAC,iBAAiB,CAAC,OAAO,MAAM,IAAI,CAAC,CAAA;QAC1D,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,6DAA6D;IAC7D,qBAAqB,CAAC,YAAY,EAAE,EAAE,CAAC,CAAA;IAEvC,wEAAwE;IACxE,2EAA2E;IAC3E,6EAA6E;IAC7E,2EAA2E;IAC3E,2EAA2E;IAC3E,MAAM,aAAa,GAAG,aAAa;QACjC,CAAC,CAAC,0BAA0B,CACxB,aAAa,EACb,yBAAyB,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,cAAc,CAAC,EACnD,MAAM,CAAC,KAAK,EAAE,UAAU,IAAI,GAAG,CAChC;QACH,CAAC,CAAC,IAAI,CAAA;IAER,wCAAwC;IACxC,MAAM,aAAa,GAAG,mBAAmB,EAAE,CAAA;IAC3C,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClC,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;IAC/B,CAAC;IAED,gFAAgF;IAChF,MAAM,aAAa,GAAG,MAAM,eAAe,CAAC,EAAE,CAAC,CAAA;IAC/C,MAAM,aAAa,GAAG,MAAM,cAAc,CAAC,EAAE,CAAC,CAAA;IAE9C,4EAA4E;IAC5E,0EAA0E;IAC1E,MAAM,cAAc,GAAG,IAAI,GAAG,EAA6B,CAAA;IAC3D,MAAM,cAAc,GAAG,IAAI,GAAG,EAAmC,CAAA;IAEjE,SAAS,iBAAiB,CACxB,WAA2C,EAC3C,UAA+B;QAE/B,cAAc,CAAC,KAAK,EAAE,CAAA;QACtB,cAAc,CAAC,KAAK,EAAE,CAAA;QAEtB,MAAM,cAAc,GAAwB;YAC1C,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE;YAChE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE;YACnE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE;SAC9D,CAAA;QACD,KAAK,MAAM,EAAE,IAAI,cAAc,EAAE,CAAC;YAChC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;QACjC,CAAC;QAED,4EAA4E;QAC5E,yEAAyE;QACzE,0EAA0E;QAC1E,iDAAiD;QACjD,MAAM,cAAc,GAAG,CAAC,GAAG,MAAM,CAAC,YAAY,CAAC,CAAA;QAC/C,KAAK,MAAM,GAAG,IAAI,mBAAmB,CAAC,YAAY,EAAE,CAAC;YACnD,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC;gBAAE,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC9E,CAAC;QACD,KAAK,MAAM,EAAE,IAAI,cAAc,EAAE,CAAC;YAChC,MAAM,YAAY,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,MAAM,EAAE,QAAiB,EAAE,CAAC,CAAC,CAAA;YAC9E,MAAM,gBAAgB,GAAG,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAA;YACvD,MAAM,MAAM,GAAsB,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,CAAC,GAAG,YAAY,EAAE,GAAG,gBAAgB,CAAC,EAAE,CAAA;YAC3F,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;YACnC,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC7B,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,qBAAqB,CAAC,MAAM,CAAC,CAAC,CAAA;YAC5D,CAAC;QACH,CAAC;QAED,2EAA2E;QAC3E,sEAAsE;QACtE,KAAK,MAAM,EAAE,IAAI,UAAU,EAAE,CAAC;YAC5B,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC;gBAAE,SAAQ;YACzC,MAAM,gBAAgB,GAAG,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAA;YACvD,MAAM,MAAM,GAAsB,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAA;YACrE,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;YACnC,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC7B,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,qBAAqB,CAAC,MAAM,CAAC,CAAC,CAAA;YAC5D,CAAC;QACH,CAAC;IACH,CAAC;IAED,iBAAiB,CAAC,aAAa,EAAE,aAAa,CAAC,CAAA;IAE/C,KAAK,UAAU,UAAU;QACvB,MAAM,CAAC,gBAAgB,EAAE,eAAe,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC5D,eAAe,CAAC,EAAE,CAAC;YACnB,cAAc,CAAC,EAAE,CAAC;SACnB,CAAC,CAAA;QACF,iBAAiB,CAAC,gBAAgB,EAAE,eAAe,CAAC,CAAA;IACtD,CAAC;IAED,yBAAyB,CAAC,MAAM,EAAE;QAChC,MAAM;QACN,EAAE;QACF,UAAU;QACV,iBAAiB,EAAE,GAAG,EAAE,CAAC,cAAc;QACvC,iBAAiB,EAAE,GAAG,EAAE,CAAC,cAAc;QACvC,UAAU;KACX,CAAC,CAAA;IAEF,2EAA2E;IAC3E,0EAA0E;IAC1E,MAAM,SAAS,GAA2B,EAAE,CAAA;IAC5C,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,MAAM,mBAAmB,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAA;QACnD,IAAI,IAAI;YAAE,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,IAAI,CAAA;IACrC,CAAC;IAED,yBAAyB,CAAC,MAAM,EAAE;QAChC,MAAM;QACN,EAAE;QACF,UAAU;QACV,SAAS;QACT,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChF,iBAAiB,EAAE,GAAG,EAAE,CAAC,cAAc;QACvC,iBAAiB,EAAE,GAAG,EAAE,CAAC,cAAc;KACxC,CAAC,CAAA;IAEF,qBAAqB,CAAC,MAAM,EAAE;QAC5B,MAAM;QACN,EAAE;QACF,UAAU;QACV,cAAc;QACd,cAAc;QACd,YAAY;QACZ,OAAO;QACP,aAAa;QACb,SAAS;KACV,CAAC,CAAA;IAEF,2GAA2G;IAC3G,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,mBAAmB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;IAE7G,kBAAkB,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IAC9B,kBAAkB,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,CAAC,CAAA;IACnF,kBAAkB,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,CAAA;IACtD,mBAAmB,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,CAAA;IACvD,oBAAoB,CAAC,MAAM,EAAE,EAAE,EAAE,UAAU,CAAC,CAAA;IAC5C,gFAAgF;IAChF,gFAAgF;IAChF,oEAAoE;IACpE,mBAAmB,CAAC,MAAM,EAAE,EAAE,EAAE,UAAU,CAAC,CAAA;IAC3C,MAAM,aAAa,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAA;IACzC,iBAAiB,CAAC,MAAM,EAAE,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAA;IAC/F,6EAA6E;IAC7E,4EAA4E;IAC5E,MAAM,iBAAiB,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,CAAC,CAAC,SAAS,CAAA;IACb,kBAAkB,CAAC,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,iBAAiB,CAAC,CAAA;IAC7D,oBAAoB,CAAC,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,CAAA;IACpD,kBAAkB,CAAC,MAAM,EAAE;QACzB,MAAM;QACN,EAAE;QACF,UAAU;QACV,cAAc;QACd,cAAc;KACf,CAAC,CAAA;IAEF,IAAI,OAAO,EAAE,CAAC;QACZ,mBAAmB,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAA;IAClE,CAAC;IAED,kBAAkB,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAA;IACjE,uBAAuB,CAAC,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,YAAY,CAAC,CAAA;IAC7D,uBAAuB,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAA;IACtE,mBAAmB,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,CAAC,KAAK,EAAE,aAAa,EAAE,CAAC,CAAA;IACzF,wBAAwB,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,CAAC,KAAK,EAAE,aAAa,EAAE,CAAC,CAAA;IAC9F,sBAAsB,CAAC,MAAM,EAAE;QAC7B,MAAM;QACN,EAAE;QACF,UAAU;QACV,cAAc;QACd,cAAc;QACd,iBAAiB,EAAE,sBAAsB;KAC1C,CAAC,CAAA;IAEF,qBAAqB,CAAC,MAAM,EAAE;QAC5B,MAAM;QACN,EAAE;QACF,UAAU;QACV,cAAc;QACd,cAAc;QACd,iBAAiB,EAAE,sBAAsB;KAC1C,CAAC,CAAA;IAEF,sBAAsB,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,CAAA;IACxE,iBAAiB,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,CAAA;IACrD,qBAAqB,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,CAAC,CAAA;IACtF,oBAAoB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAEpC,+EAA+E;IAC/E,iFAAiF;IACjF,gFAAgF;IAChF,+EAA+E;IAC/E,wDAAwD;IACxD,MAAM,qBAAqB,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC3C,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,CAAC,CAAC,EAAE,CAAA;IACN,4EAA4E;IAC5E,sEAAsE;IACtE,iFAAiF;IACjF,MAAM,eAAe,GAAG,wBAAwB,CAAC,MAAM,CAAC,CAAA;IACxD,sBAAsB,CAAC,MAAM,EAAE;QAC7B,EAAE;QACF,UAAU;QACV,aAAa,EAAE,qBAAqB;QACpC,aAAa,EAAE,eAAe,CAAC,UAAU,EAAE;KAC5C,CAAC,CAAA;IACF,6BAA6B,CAAC,MAAM,EAAE;QACpC,EAAE;QACF,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,IAAI,UAAU;KAChE,CAAC,CAAA;IACF,6BAA6B,CAAC,MAAM,EAAE;QACpC,EAAE;QACF,UAAU;QACV,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,IAAI,UAAU;QAC/D,aAAa,EAAE,qBAAqB;KACrC,CAAC,CAAA;IAEF,+EAA+E;IAC/E,yEAAyE;IACzE,2EAA2E;IAC3E,wBAAwB,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,aAAa,EAAE,qBAAqB,EAAE,CAAC,CAAA;IAC1F,+BAA+B,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,aAAa,EAAE,qBAAqB,EAAE,CAAC,CAAA;IAErF,6EAA6E;IAC7E,+EAA+E;IAC/E,4EAA4E;IAC5E,+EAA+E;IAC/E,wFAAwF;IACxF,4EAA4E;IAC5E,2EAA2E;IAC3E,kCAAkC;IAClC,0BAA0B,CAAC,MAAM,EAAE,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC,CAAA;IAEnE,kBAAkB,CAAC,MAAM,EAAE;QACzB,MAAM;QACN,EAAE;QACF,UAAU;QACV,cAAc;QACd,cAAc;QACd,YAAY;QACZ,OAAO;QACP,SAAS;KACV,CAAC,CAAA;IAEF,oBAAoB,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,CAAA;IACxD,+BAA+B,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,CAAA;IAC3D,0BAA0B,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,CAAA;IAC9D,qBAAqB,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,CAAA;IACzD,uBAAuB,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,CAAA;IAC3D,6BAA6B,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,CAAA;IACjE,uBAAuB,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,CAAA;IAE3D,+EAA+E;IAC/E,2EAA2E;IAC3E,gFAAgF;IAChF,+EAA+E;IAC/E,qEAAqE;IACrE,MAAM,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,CAAC,CAAC,EAAE,CAAA;IAEN,2EAA2E;IAC3E,6EAA6E;IAC7E,MAAM,cAAc,GAAwE,EAAE,CAAA;IAC9F,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QAC/B,IAAI,CAAC,IAAI;YAAE,SAAQ;QACnB,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,EAAE,EAAE,IAAI,CAAC,CAAA;QAC/C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,cAAc,CAAC,IAAI,CAAC,EAAE,aAAa,EAAE,GAAG,CAAC,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAA;QACjG,CAAC;IACH,CAAC;IACD,gBAAgB,CAAC,YAAY,CAAC,cAAc,CAAC,CAAA;IAE7C,oBAAoB,CAAC,MAAM,EAAE;QAC3B,EAAE;QACF,UAAU;QACV,OAAO,EAAE,MAAM,CAAC,OAAoB;QACpC,aAAa,EAAE,YAAY;QAC3B,mEAAmE;QACnE,kBAAkB,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,gBAAgB,CAAC,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC;QAC5F,wEAAwE;QACxE,aAAa,EAAE,mBAAmB,CAAC,eAAe,EAAE,QAAQ,IAAI,EAAE;KACnE,CAAC,CAAA;IAEF,uBAAuB,CAAC,MAAM,EAAE;QAC9B,EAAE;QACF,UAAU;QACV,aAAa,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;QAClC,iBAAiB,EAAE,sBAAsB;KAC1C,CAAC,CAAA;IAEF,8EAA8E;IAC9E,uBAAuB,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,CAAA;IAEnD,wBAAwB;IACxB,IAAI,aAAa,EAAE,CAAC;QAClB,2BAA2B,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,aAAa,EAAE,CAAC,CAAA;IACpE,CAAC;IAED,6BAA6B;IAC7B,MAAM,SAAS,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAA;IAC7C,MAAM,YAAY,GAAG,eAAe,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;IAChD,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,oBAAoB,CAAC,SAAS,EAAE,YAAY,EAAE,GAAG,CAAC,CAAC,CAAA;IAE1F,6EAA6E;IAC7E,kFAAkF;IAClF,MAAM,qBAAqB,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC3C,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,CAAC,CAAC,EAAE,CAAA;IACN,mBAAmB,CAAC,EAAE,EAAE,YAAY,EAAE,qBAAqB,CAAC,CAAA;IAE5D,8EAA8E;IAC9E,0EAA0E;IAC1E,6EAA6E;IAC7E,8EAA8E;IAC9E,yEAAyE;IACzE,MAAM,QAAQ,GAAG,uBAAuB,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;IACpD,kBAAkB,CAAC,aAAa,EAAE,YAAY,CAAC,CAAA;IAC/C,gBAAgB,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,aAAa,EAAE,aAAa,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAA;IAE3F,uFAAuF;IACvF,MAAM,YAAY,GAAG,oBAAoB,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IACrD,MAAM,aAAa,GAAG,mBAAmB,CAAC,YAAY,CAAC,CAAA;IAEvD,OAAO;QACL,MAAM,EAAE,KAAK,EAAE,GAAY,EAAE,YAAsB,EAAE,EAAE;YACrD,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,YAAY,CAAC,CAAA;YACvD,yEAAyE;YACzE,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,YAAY,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;gBAC1D,OAAO,aAAa,CAAC,GAAG,CAAC,CAAA;YAC3B,CAAC;YACD,OAAO,QAAQ,CAAA;QACjB,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/api/layout-routes.d.ts

@@ -0,0 +1,5 @@
+import type { Router } from './router.js';
+import type { KywiDb } from '../db/client.js';
+import type { KywiConfig } from '../config/types.js';
+export declare function registerLayoutRoutes(router: Router, db: KywiDb, authSecret: string, config?: KywiConfig): void;
+//# sourceMappingURL=layout-routes.d.ts.map

package/dist/api/layout-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"layout-routes.d.ts","sourceRoot":"","sources":["../../src/api/layout-routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAA;AAC7C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAA;AAapD,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,MAAM,EACd,EAAE,EAAE,MAAM,EACV,UAAU,EAAE,MAAM,EAClB,MAAM,CAAC,EAAE,UAAU,GAClB,IAAI,CAkHN"}

package/dist/api/layout-routes.js

@@ -0,0 +1,116 @@
+import { jsonOk, jsonError, notFound, unauthorized, forbidden } from './response.js';
+import { resolveAuth } from './auth.js';
+import { toSiteUuid } from './site-context.js';
+import { canAccessContent, hasMinRole } from '../auth/roles.js';
+import { getContentLayout, setContentLayout } from '../db/layout-queries.js';
+import { validateLayoutDocument } from '../layout/types.js';
+import { newlyIntroducedAdminOnlyTypes } from '../layout/module-permissions.js';
+import { z } from 'zod';
+const RegionSectionsSchema = z.array(z.unknown());
+export function registerLayoutRoutes(router, db, authSecret, config) {
+    // Resolve the request's site so a content id from another site cannot be
+    // addressed via the layout routes (the content id → siteId column is the
+    // cross-site addressing vector). When no config was supplied (legacy callers)
+    // scoping is skipped, preserving prior behaviour.
+    async function resolveSite(req) {
+        if (!config)
+            return undefined;
+        const url = new URL(req.url);
+        return toSiteUuid(db, url.searchParams.get('siteId'), config);
+    }
+    // Server-side mirror of the palette's admin-only module gate (defense in depth).
+    // A caller below siteAdmin may re-save a layout that already contains an
+    // admin-placed module (e.g. an `html` block) but may not INTRODUCE a new one —
+    // diffed by module id against the stored document. Returns a 403 Response when
+    // the incoming layout adds an admin-only module, or null to proceed.
+    function rejectNewAdminOnlyModules(role, incoming, stored) {
+        if (hasMinRole(role, 'siteAdmin'))
+            return null;
+        const offending = newlyIntroducedAdminOnlyTypes(incoming, stored);
+        if (offending.length === 0)
+            return null;
+        return jsonError('FORBIDDEN_MODULE', `Your role may not add these module types: ${offending.join(', ')}`, 403);
+    }
+    // GET /content/:type/:id/layout
+    router.get('/content/:type/:id/layout', async (req, params) => {
+        const siteId = await resolveSite(req);
+        const layout = await getContentLayout(db, params.id, siteId);
+        if (!layout)
+            return notFound('No layout found for this content');
+        return jsonOk(layout);
+    });
+    // PUT /content/:type/:id/layout
+    router.put('/content/:type/:id/layout', async (req, params) => {
+        const auth = await resolveAuth(req.headers.get('authorization'), authSecret, db);
+        if (!auth.user)
+            return unauthorized();
+        if (!canAccessContent(auth.user.role, 'write'))
+            return forbidden();
+        let body;
+        try {
+            body = await req.json();
+        }
+        catch {
+            return jsonError('BAD_REQUEST', 'Invalid JSON body', 400);
+        }
+        const result = validateLayoutDocument(body);
+        if (!result.success) {
+            return jsonError('VALIDATION_ERROR', result.error, 400);
+        }
+        const siteId = await resolveSite(req);
+        const stored = await getContentLayout(db, params.id, siteId);
+        const moduleDenied = rejectNewAdminOnlyModules(auth.user.role, result.data, stored);
+        if (moduleDenied)
+            return moduleDenied;
+        const saved = await setContentLayout(db, params.id, result.data, siteId);
+        if (!saved)
+            return notFound('No layout found for this content');
+        return jsonOk(result.data);
+    });
+    // PATCH /content/:type/:id/layout/regions/:regionName
+    router.patch('/content/:type/:id/layout/regions/:regionName', async (req, params) => {
+        const auth = await resolveAuth(req.headers.get('authorization'), authSecret, db);
+        if (!auth.user)
+            return unauthorized();
+        if (!canAccessContent(auth.user.role, 'write'))
+            return forbidden();
+        let body;
+        try {
+            body = await req.json();
+        }
+        catch {
+            return jsonError('BAD_REQUEST', 'Invalid JSON body', 400);
+        }
+        const parsed = RegionSectionsSchema.safeParse(body);
+        if (!parsed.success) {
+            return jsonError('VALIDATION_ERROR', 'Expected an array of sections', 400);
+        }
+        // Validate each section by wrapping in a throwaway layout
+        const testLayout = {
+            regions: { [params.regionName]: parsed.data },
+        };
+        const validation = validateLayoutDocument(testLayout);
+        if (!validation.success) {
+            return jsonError('VALIDATION_ERROR', validation.error, 400);
+        }
+        // Merge into existing layout
+        const siteId = await resolveSite(req);
+        const existing = await getContentLayout(db, params.id, siteId) ?? { regions: {} };
+        const merged = {
+            regions: {
+                ...existing.regions,
+                [params.regionName]: validation.data.regions[params.regionName],
+            },
+        };
+        // Gate the merged document against what is already stored, so patching a
+        // region can't slip in a new admin-only module for a below-siteAdmin caller.
+        const moduleDenied = rejectNewAdminOnlyModules(auth.user.role, merged, existing);
+        if (moduleDenied)
+            return moduleDenied;
+        const saved = await setContentLayout(db, params.id, merged, siteId);
+        if (!saved)
+            return notFound('No layout found for this content');
+        return jsonOk(merged);
+    });
+}
+//# sourceMappingURL=layout-routes.js.map