@kywi-software/core 0.7.1 → 0.8.0

package/dist/admin/permissions-info.js

@@ -1,27 +0,0 @@
-import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
-import { KYWI_ROLES, canAccessContent } from '../auth/roles.js';
-const ROLE_DESCRIPTIONS = {
-    superAdmin: 'Full control across every site, including users, groups, and settings.',
-    siteAdmin: 'Manages a site: content, users, groups, and site settings.',
-    editor: 'Creates, edits, and publishes content.',
-    author: 'Creates and edits their own draft content, but cannot publish.',
-    reader: 'Read-only access to content.',
-    deny: 'Explicitly denied — overrides any inherited access.',
-};
-const ACTIONS = ['read', 'write', 'publish', 'delete'];
-const ACTION_LABELS = {
-    read: 'Read',
-    write: 'Write',
-    publish: 'Publish',
-    delete: 'Delete',
-};
-export function PermissionsInfo({ contentPermissionsHref = '/admin/content-tree', }) {
-    // "deny" is a marker used only for per-content overrides, not a grantable
-    // account role — show it in the reference list but omit it from the matrix.
-    const accountRoles = KYWI_ROLES.filter(r => r !== 'deny');
-    return (_jsxs("div", { className: "kywi-permissions-info", children: [_jsx("div", { className: "kywi-admin-page-header", children: _jsx("h1", { children: "Permissions" }) }), _jsx("div", { className: "kywi-admin-callout kywi-admin-callout-info", children: _jsxs("p", { children: ["Kywi uses ", _jsx("strong", { children: "role-based access control" }), ". Each user has one account role, and groups can grant a default role to their members. A dedicated visual permission-matrix editor is planned; today, roles are assigned per user under ", _jsx("strong", { children: "All Users" }), ", and fine-grained per-page access is managed in the content editor."] }) }), _jsxs("section", { className: "kywi-admin-form-section", children: [_jsx("h3", { className: "kywi-section-heading", children: "Account Roles" }), _jsx("dl", { className: "kywi-role-glossary", children: KYWI_ROLES.map(role => (_jsxs("div", { className: "kywi-role-glossary-row", children: [_jsx("dt", { children: _jsx("span", { className: `kywi-role-badge kywi-role-${role}`, children: role }) }), _jsx("dd", { children: ROLE_DESCRIPTIONS[role] ?? '' })] }, role))) })] }), _jsxs("section", { className: "kywi-admin-form-section", children: [_jsx("h3", { className: "kywi-section-heading", children: "Content Capabilities by Role" }), _jsx("p", { className: "kywi-field-hint", children: "What each role can do with content, before any per-page override." }), _jsx("div", { className: "kywi-table-scroll", children: _jsxs("table", { className: "kywi-permissions-matrix", children: [_jsx("thead", { children: _jsxs("tr", { children: [_jsx("th", { children: "Role" }), ACTIONS.map(action => (_jsx("th", { className: "kywi-perm-col", children: ACTION_LABELS[action] }, action)))] }) }), _jsx("tbody", { children: accountRoles.map(role => (_jsxs("tr", { children: [_jsx("td", { children: _jsx("span", { className: `kywi-role-badge kywi-role-${role}`, children: role }) }), ACTIONS.map(action => {
-                                                const allowed = canAccessContent(role, action);
-                                                return (_jsx("td", { className: "kywi-perm-cell", children: _jsx("span", { className: allowed ? 'kywi-perm-yes' : 'kywi-perm-no', "aria-label": allowed ? 'allowed' : 'not allowed', children: allowed ? '✓' : '—' }) }, action));
-                                            })] }, role))) })] }) })] }), _jsxs("section", { className: "kywi-admin-form-section", children: [_jsx("h3", { className: "kywi-section-heading", children: "Per-Content Permissions" }), _jsxs("p", { children: ["Individual pages can override the defaults above with their own access control list, including an explicit ", _jsx("code", { children: "deny" }), ". Open any page from the site tree and use its ", _jsx("strong", { children: "Permissions" }), " tab."] }), _jsx("a", { className: "kywi-btn kywi-btn-secondary", href: contentPermissionsHref, children: "Open Site Tree" })] })] }));
-}
-//# sourceMappingURL=permissions-info.js.map

package/dist/admin/permissions-info.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"permissions-info.js","sourceRoot":"","sources":["../../src/admin/permissions-info.tsx"],"names":[],"mappings":";AACA,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAsB,MAAM,kBAAkB,CAAA;AAUnF,MAAM,iBAAiB,GAA2B;IAChD,UAAU,EAAE,wEAAwE;IACpF,SAAS,EAAE,4DAA4D;IACvE,MAAM,EAAE,wCAAwC;IAChD,MAAM,EAAE,gEAAgE;IACxE,MAAM,EAAE,8BAA8B;IACtC,IAAI,EAAE,qDAAqD;CAC5D,CAAA;AAED,MAAM,OAAO,GAAoB,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAA;AACvE,MAAM,aAAa,GAAkC;IACnD,IAAI,EAAE,MAAM;IACZ,KAAK,EAAE,OAAO;IACd,OAAO,EAAE,SAAS;IAClB,MAAM,EAAE,QAAQ;CACjB,CAAA;AAED,MAAM,UAAU,eAAe,CAAC,EAC9B,sBAAsB,GAAG,qBAAqB,GACzB;IACrB,0EAA0E;IAC1E,4EAA4E;IAC5E,MAAM,YAAY,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,MAAM,CAAC,CAAA;IAEzD,OAAO,CACL,eAAK,SAAS,EAAC,uBAAuB,aACpC,cAAK,SAAS,EAAC,wBAAwB,YACrC,uCAAoB,GAChB,EAEN,cAAK,SAAS,EAAC,4CAA4C,YACzD,sCACY,yDAA0C,+LAGxB,yCAA0B,4EAEpD,GACA,EAEN,mBAAS,SAAS,EAAC,yBAAyB,aAC1C,aAAI,SAAS,EAAC,sBAAsB,8BAAmB,EACvD,aAAI,SAAS,EAAC,oBAAoB,YAC/B,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CACtB,eAAgB,SAAS,EAAC,wBAAwB,aAChD,uBACE,eAAM,SAAS,EAAE,6BAA6B,IAAI,EAAE,YAAG,IAAI,GAAQ,GAChE,EACL,uBAAK,iBAAiB,CAAC,IAAI,CAAC,IAAI,EAAE,GAAM,KAJhC,IAAI,CAKR,CACP,CAAC,GACC,IACG,EAEV,mBAAS,SAAS,EAAC,yBAAyB,aAC1C,aAAI,SAAS,EAAC,sBAAsB,6CAAkC,EACtE,YAAG,SAAS,EAAC,iBAAiB,kFAE1B,EACJ,cAAK,SAAS,EAAC,mBAAmB,YAChC,iBAAO,SAAS,EAAC,yBAAyB,aACxC,0BACE,yBACE,gCAAa,EACZ,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CACrB,aAAiB,SAAS,EAAC,eAAe,YAAE,aAAa,CAAC,MAAM,CAAC,IAAxD,MAAM,CAAwD,CACxE,CAAC,IACC,GACC,EACR,0BACG,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CACxB,yBACE,uBACE,eAAM,SAAS,EAAE,6BAA6B,IAAI,EAAE,YAAG,IAAI,GAAQ,GAChE,EACJ,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE;gDACpB,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;gDAC9C,OAAO,CACL,aAAiB,SAAS,EAAC,gBAAgB,YACzC,eACE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,cAAc,gBACzC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,YAE9C,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GACf,IANA,MAAM,CAOV,CACN,CAAA;4CACH,CAAC,CAAC,KAhBK,IAAI,CAiBR,CACN,CAAC,GACI,IACF,GACJ,IACE,EAEV,mBAAS,SAAS,EAAC,yBAAyB,aAC1C,aAAI,SAAS,EAAC,sBAAsB,wCAA6B,EACjE,uIAEsC,kCAAiB,qDACtB,2CAA4B,aACzD,EACJ,YAAG,SAAS,EAAC,6BAA6B,EAAC,IAAI,EAAE,sBAAsB,+BAEnE,IACI,IACN,CACP,CAAA;AACH,CAAC"}

package/dist/api/__tests__/adapter-proxy-routes.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=adapter-proxy-routes.test.d.ts.map

package/dist/api/__tests__/adapter-proxy-routes.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"adapter-proxy-routes.test.d.ts","sourceRoot":"","sources":["../../../src/api/__tests__/adapter-proxy-routes.test.ts"],"names":[],"mappings":""}

package/dist/api/__tests__/adapter-proxy-routes.test.js

@@ -1,72 +0,0 @@
-import { describe, it, expect, beforeEach } from 'vitest';
-import { Router } from '../router.js';
-import { registerAdapterProxyRoutes } from '../adapter-proxy-routes.js';
-import { AdapterRegistry } from '../../audiences/adapters/registry.js';
-import { geoipStubAdapter, staticAttributesAdapter } from '../../audiences/adapters/builtin.js';
-import { evaluateInstantCondition } from '../../audiences/evaluator/instant-match.js';
-import { createEmptySignals } from '../../audiences/types.js';
-function proxyRequest(adapterId, body) {
-    return new Request(`https://x.com/kywi/adapters/${adapterId}`, {
-        method: 'POST',
-        headers: { 'content-type': 'application/json' },
-        body: body === undefined ? '' : JSON.stringify(body),
-    });
-}
-describe('adapter proxy route', () => {
-    let router;
-    let registry;
-    beforeEach(() => {
-        registry = new AdapterRegistry();
-        registry.register(geoipStubAdapter());
-        registry.register(staticAttributesAdapter({ tier: 'enterprise' }, 'segment'));
-        registry.register({ id: 'client-only', side: 'client', fields: ['client-only.x'], collect: async () => ({}) });
-        router = new Router();
-        registerAdapterProxyRoutes(router, { adapterRegistry: registry, authSecret: 'test-secret' });
-    });
-    it('runs a server-proxy adapter and returns its collected fields', async () => {
-        const res = await router.handle(proxyRequest('segment', { signals: {} }), ['kywi', 'adapters', 'segment']);
-        expect(res.status).toBe(200);
-        const json = await res.json();
-        expect(json.data).toEqual({ 'segment.tier': 'enterprise' });
-    });
-    it('passes the POSTed signals to collect()', async () => {
-        const signals = { utm: { source: 'newsletter', medium: null, campaign: null, term: null, content: null } };
-        const res = await router.handle(proxyRequest('geoip-stub', { signals }), ['kywi', 'adapters', 'geoip-stub']);
-        const json = await res.json();
-        // region derives from utm.source, proving the body signals reached collect()
-        expect(json.data).toEqual({ 'geoip-stub.country': 'US', 'geoip-stub.region': 'campaign' });
-    });
-    it('returns 404 for an unknown adapter', async () => {
-        const res = await router.handle(proxyRequest('nope', { signals: {} }), ['kywi', 'adapters', 'nope']);
-        expect(res.status).toBe(404);
-    });
-    it('returns 404 for a client-side adapter (not proxyable)', async () => {
-        const res = await router.handle(proxyRequest('client-only', { signals: {} }), ['kywi', 'adapters', 'client-only']);
-        expect(res.status).toBe(404);
-    });
-    it('falls back to an empty signal set when the body carries none', async () => {
-        // static-attributes ignores signals, so it still resolves with no body.
-        const res = await router.handle(proxyRequest('segment'), ['kywi', 'adapters', 'segment']);
-        expect(res.status).toBe(200);
-        const json = await res.json();
-        expect(json.data).toEqual({ 'segment.tier': 'enterprise' });
-    });
-});
-describe('adapter-driven audience evaluation (end-to-end)', () => {
-    it('collect() output flows into an audience condition match', async () => {
-        // 1. Server-proxy collect() runs (as the mounted route would call it).
-        const adapter = geoipStubAdapter();
-        const collected = await adapter.collect({});
-        // 2. Client merges the collected fields into VisitorSignals.adapters.
-        const signals = { ...createEmptySignals(), adapters: { ...collected } };
-        // 3. An audience condition on the adapter-provided signal evaluates correctly.
-        const cond = {
-            type: 'instant', id: 'c1', groupId: 'g1',
-            signal: 'adapter.geoip-stub.country', operator: 'equals', value: 'US',
-        };
-        expect(evaluateInstantCondition(cond, signals)).toBe(true);
-        const noMatch = { ...cond, value: 'CA' };
-        expect(evaluateInstantCondition(noMatch, signals)).toBe(false);
-    });
-});
-//# sourceMappingURL=adapter-proxy-routes.test.js.map

package/dist/api/__tests__/adapter-proxy-routes.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"adapter-proxy-routes.test.js","sourceRoot":"","sources":["../../../src/api/__tests__/adapter-proxy-routes.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAA;AACzD,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AACrC,OAAO,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAA;AACvE,OAAO,EAAE,eAAe,EAAE,MAAM,sCAAsC,CAAA;AACtE,OAAO,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,MAAM,qCAAqC,CAAA;AAC/F,OAAO,EAAE,wBAAwB,EAAE,MAAM,4CAA4C,CAAA;AACrF,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAA;AAG7D,SAAS,YAAY,CAAC,SAAiB,EAAE,IAAc;IACrD,OAAO,IAAI,OAAO,CAAC,+BAA+B,SAAS,EAAE,EAAE;QAC7D,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;KACrD,CAAC,CAAA;AACJ,CAAC;AAED,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,IAAI,MAAc,CAAA;IAClB,IAAI,QAAyB,CAAA;IAE7B,UAAU,CAAC,GAAG,EAAE;QACd,QAAQ,GAAG,IAAI,eAAe,EAAE,CAAA;QAChC,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,EAAE,CAAC,CAAA;QACrC,QAAQ,CAAC,QAAQ,CAAC,uBAAuB,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,SAAS,CAAC,CAAC,CAAA;QAC7E,QAAQ,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,eAAe,CAAC,EAAE,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;QAC9G,MAAM,GAAG,IAAI,MAAM,EAAE,CAAA;QACrB,0BAA0B,CAAC,MAAM,EAAE,EAAE,eAAe,EAAE,QAAQ,EAAE,UAAU,EAAE,aAAa,EAAE,CAAC,CAAA;IAC9F,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,CAAA;QAC1G,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAuC,CAAA;QAClE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAA;IAC7D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACtD,MAAM,OAAO,GAAG,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAA;QAC1G,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,YAAY,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC,CAAA;QAC5G,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAuC,CAAA;QAClE,6EAA6E;QAC7E,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,oBAAoB,EAAE,IAAI,EAAE,mBAAmB,EAAE,UAAU,EAAE,CAAC,CAAA;IAC5F,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;QAClD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAA;QACpG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAC9B,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,aAAa,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC,CAAA;QAClH,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAC9B,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,wEAAwE;QACxE,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,CAAA;QACzF,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAuC,CAAA;QAClE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAA;IAC7D,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,iDAAiD,EAAE,GAAG,EAAE;IAC/D,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACvE,uEAAuE;QACvE,MAAM,OAAO,GAAG,gBAAgB,EAAE,CAAA;QAClC,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QAE3C,sEAAsE;QACtE,MAAM,OAAO,GAAG,EAAE,GAAG,kBAAkB,EAAE,EAAE,QAAQ,EAAE,EAAE,GAAG,SAAS,EAAE,EAAE,CAAA;QAEvE,+EAA+E;QAC/E,MAAM,IAAI,GAA0B;YAClC,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI;YACxC,MAAM,EAAE,4BAA4B,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI;SACtE,CAAA;QACD,MAAM,CAAC,wBAAwB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAE1D,MAAM,OAAO,GAA0B,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAA;QAC/D,MAAM,CAAC,wBAAwB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAChE,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/api/__tests__/admin-tree-routes.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=admin-tree-routes.test.d.ts.map

package/dist/api/__tests__/admin-tree-routes.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"admin-tree-routes.test.d.ts","sourceRoot":"","sources":["../../../src/api/__tests__/admin-tree-routes.test.ts"],"names":[],"mappings":""}

package/dist/api/__tests__/admin-tree-routes.test.js

@@ -1,60 +0,0 @@
-import { describe, it, expect, vi, beforeEach } from 'vitest';
-import { Router } from '../router.js';
-import { registerTreeRoutes } from '../tree-routes.js';
-import { getAllContentForSite } from '../../db/tree-queries.js';
-const ADMIN_TOKEN = 'test-secret';
-vi.mock('../../db/tree-queries.js', async (importOriginal) => {
-    const actual = await importOriginal();
-    return {
-        ...actual,
-        getAllContentForSite: vi.fn().mockResolvedValue([
-            { id: '1', parentId: null, title: 'Home', slug: 'home', path: '/home/', depth: 0, sortOrder: 0, isNav: true, isLocked: false, status: 'published', contentTypeName: 'page' },
-            { id: '2', parentId: '1', title: 'About', slug: 'about', path: '/home/about/', depth: 1, sortOrder: 0, isNav: true, isLocked: false, status: 'published', contentTypeName: 'page' },
-            { id: '3', parentId: '1', title: 'Draft Post', slug: 'draft-post', path: '/home/draft-post/', depth: 1, sortOrder: 1, isNav: false, isLocked: false, status: 'draft', contentTypeName: 'blogPost' },
-        ]),
-        moveContent: vi.fn().mockResolvedValue(undefined),
-        copyContent: vi.fn().mockResolvedValue('new-id'),
-        reorderSiblings: vi.fn().mockResolvedValue(undefined),
-    };
-});
-vi.mock('../../db/lock-queries.js', () => ({ getLock: vi.fn().mockResolvedValue(null) }));
-vi.mock('../../db/content-queries.js', () => ({ getContentById: vi.fn().mockResolvedValue(null) }));
-vi.mock('../../db/filename-archive-queries.js', () => ({ archivePath: vi.fn().mockResolvedValue(undefined) }));
-vi.mock('../auth.js', () => ({
-    resolveAuth: vi.fn().mockResolvedValue({ user: { id: 'u1', role: 'admin' } }),
-}));
-vi.mock('../../auth/roles.js', () => ({
-    canAccessContent: vi.fn().mockReturnValue(true),
-}));
-describe('GET /tree', () => {
-    let router;
-    beforeEach(() => {
-        router = new Router();
-        registerTreeRoutes(router, {}, ADMIN_TOKEN, 'site-1');
-    });
-    it('returns 200 with nested tree', async () => {
-        const res = await router.handle(new Request('http://localhost/api/v1/tree'), ['tree']);
-        expect(res.status).toBe(200);
-        const body = await res.json();
-        expect(Array.isArray(body.data)).toBe(true);
-        // Root has 1 node (Home)
-        expect(body.data).toHaveLength(1);
-        expect(body.data[0].id).toBe('1');
-        // Home has 2 children (About, Draft Post)
-        expect(body.data[0].children).toHaveLength(2);
-    });
-    it('exposes status and contentTypeName on nodes', async () => {
-        const res = await router.handle(new Request('http://localhost/api/v1/tree'), ['tree']);
-        const body = await res.json();
-        const draftPost = body.data[0].children[1];
-        expect(draftPost.status).toBe('draft');
-        expect(draftPost.contentTypeName).toBe('blogPost');
-        expect(draftPost.isNav).toBe(false);
-    });
-    it('accepts ?siteId= query param override', async () => {
-        const res = await router.handle(new Request('http://localhost/api/v1/tree?siteId=site-2'), ['tree']);
-        expect(res.status).toBe(200);
-        expect(vi.mocked(getAllContentForSite)).toHaveBeenCalledWith(expect.anything(), 'site-2');
-    });
-});
-//# sourceMappingURL=admin-tree-routes.test.js.map

package/dist/api/__tests__/admin-tree-routes.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"admin-tree-routes.test.js","sourceRoot":"","sources":["../../../src/api/__tests__/admin-tree-routes.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAA;AAC7D,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AACrC,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAA;AACtD,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAA;AAE/D,MAAM,WAAW,GAAG,aAAa,CAAA;AAEjC,EAAE,CAAC,IAAI,CAAC,0BAA0B,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE;IAC3D,MAAM,MAAM,GAAG,MAAM,cAAc,EAA6C,CAAA;IAChF,OAAO;QACL,GAAG,MAAM;QACT,oBAAoB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC;YAC9C,EAAE,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,EAAE;YAC5K,EAAE,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,EAAE;YACnL,EAAE,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE;SACpM,CAAC;QACF,WAAW,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC;QACjD,WAAW,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,QAAQ,CAAC;QAChD,eAAe,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC;KACtD,CAAA;AACH,CAAC,CAAC,CAAA;AAEF,EAAE,CAAC,IAAI,CAAC,0BAA0B,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAA;AACzF,EAAE,CAAC,IAAI,CAAC,6BAA6B,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,cAAc,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAA;AACnG,EAAE,CAAC,IAAI,CAAC,sCAAsC,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAA;AAC9G,EAAE,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC;IAC3B,WAAW,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC;CAC9E,CAAC,CAAC,CAAA;AACH,EAAE,CAAC,IAAI,CAAC,qBAAqB,EAAE,GAAG,EAAE,CAAC,CAAC;IACpC,gBAAgB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC;CAChD,CAAC,CAAC,CAAA;AAEH,QAAQ,CAAC,WAAW,EAAE,GAAG,EAAE;IACzB,IAAI,MAAc,CAAA;IAElB,UAAU,CAAC,GAAG,EAAE;QACd,MAAM,GAAG,IAAI,MAAM,EAAE,CAAA;QACrB,kBAAkB,CAAC,MAAM,EAAE,EAAS,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAA;IAC9D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,8BAA8B,EAAE,KAAK,IAAI,EAAE;QAC5C,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAC7B,IAAI,OAAO,CAAC,8BAA8B,CAAC,EAC3C,CAAC,MAAM,CAAC,CACT,CAAA;QACD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAS,CAAA;QACpC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC3C,yBAAyB;QACzB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;QACjC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QACjC,0CAA0C;QAC1C,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;IAC/C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC3D,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAC7B,IAAI,OAAO,CAAC,8BAA8B,CAAC,EAC3C,CAAC,MAAM,CAAC,CACT,CAAA;QACD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAS,CAAA;QACpC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAA;QAC1C,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACtC,MAAM,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QAClD,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACrC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAC7B,IAAI,OAAO,CAAC,4CAA4C,CAAC,EACzD,CAAC,MAAM,CAAC,CACT,CAAA;QACD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,QAAQ,CAAC,CAAA;IAC3F,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/api/__tests__/audience-analytics-routes.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=audience-analytics-routes.test.d.ts.map

package/dist/api/__tests__/audience-analytics-routes.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"audience-analytics-routes.test.d.ts","sourceRoot":"","sources":["../../../src/api/__tests__/audience-analytics-routes.test.ts"],"names":[],"mappings":""}

package/dist/api/__tests__/audience-analytics-routes.test.js

@@ -1,105 +0,0 @@
-import { describe, it, expect, vi, beforeEach } from 'vitest';
-import { Router } from '../router.js';
-import { registerAudienceRoutes } from '../audience-routes.js';
-// Site resolution is a slug→UUID passthrough in unit tests.
-vi.mock('../../db/site-queries.js', () => ({
-    resolveSiteId: vi.fn(async (_db, idOrSlug) => idOrSlug),
-}));
-vi.mock('../../audiences/queries.js', () => ({
-    listAudiences: vi.fn(),
-    getAudienceById: vi.fn(),
-    createAudience: vi.fn(),
-    updateAudience: vi.fn(),
-    deleteAudience: vi.fn(),
-    reorderAudiences: vi.fn(),
-    replaceConditionGroups: vi.fn(),
-    listSelfIdFields: vi.fn(),
-    upsertSelfIdField: vi.fn(),
-    deleteSelfIdField: vi.fn(),
-    getSelfIdWidgetConfig: vi.fn(),
-    upsertSelfIdWidgetConfig: vi.fn(),
-}));
-vi.mock('../../audiences/analytics.js', () => ({
-    getAudiencesAnalytics: vi.fn(),
-}));
-vi.mock('../auth.js', () => ({
-    resolveAuth: vi.fn().mockResolvedValue({ user: { id: 'u1', role: 'siteAdmin', groups: [] } }),
-}));
-import * as queries from '../../audiences/queries.js';
-import { getAudiencesAnalytics } from '../../audiences/analytics.js';
-import { resolveAuth } from '../auth.js';
-const ANALYTICS = [
-    { audienceId: 'aud-1', matchCount: 12, matchRate: 34.5, uniqueVisitors: 12, period: 'week' },
-];
-describe('GET /audiences/analytics', () => {
-    let router;
-    beforeEach(() => {
-        router = new Router();
-        registerAudienceRoutes(router, { db: {}, authSecret: 'test', defaultSiteId: 'site-1' });
-        vi.clearAllMocks();
-        vi.mocked(resolveAuth).mockResolvedValue({ user: { id: 'u1', role: 'siteAdmin', groups: [] } });
-    });
-    it('returns analytics for explicit ids without hitting the audience list', async () => {
-        vi.mocked(getAudiencesAnalytics).mockResolvedValue(ANALYTICS);
-        const req = new Request('https://x.com/audiences/analytics?ids=aud-1,aud-2&period=week', {
-            headers: { authorization: 'Bearer v' },
-        });
-        const res = await router.handle(req, ['audiences', 'analytics']);
-        expect(res.status).toBe(200);
-        const body = await res.json();
-        expect(body.data).toEqual(ANALYTICS);
-        expect(getAudiencesAnalytics).toHaveBeenCalledWith({}, ['aud-1', 'aud-2'], 'week');
-        expect(queries.listAudiences).not.toHaveBeenCalled();
-    });
-    it('falls back to every audience in the site when no ids are given', async () => {
-        vi.mocked(queries.listAudiences).mockResolvedValue([{ id: 'aud-1' }, { id: 'aud-9' }]);
-        vi.mocked(getAudiencesAnalytics).mockResolvedValue([]);
-        const req = new Request('https://x.com/audiences/analytics', { headers: { authorization: 'Bearer v' } });
-        const res = await router.handle(req, ['audiences', 'analytics']);
-        expect(res.status).toBe(200);
-        expect(queries.listAudiences).toHaveBeenCalledOnce();
-        expect(getAudiencesAnalytics).toHaveBeenCalledWith({}, ['aud-1', 'aud-9'], 'week');
-    });
-    it('defaults the period to week and accepts day/month', async () => {
-        vi.mocked(getAudiencesAnalytics).mockResolvedValue([]);
-        const req = new Request('https://x.com/audiences/analytics?ids=aud-1&period=month', {
-            headers: { authorization: 'Bearer v' },
-        });
-        const res = await router.handle(req, ['audiences', 'analytics']);
-        expect(res.status).toBe(200);
-        expect(getAudiencesAnalytics).toHaveBeenCalledWith({}, ['aud-1'], 'month');
-    });
-    it('rejects an invalid period', async () => {
-        const req = new Request('https://x.com/audiences/analytics?ids=aud-1&period=year', {
-            headers: { authorization: 'Bearer v' },
-        });
-        const res = await router.handle(req, ['audiences', 'analytics']);
-        expect(res.status).toBe(400);
-        expect(getAudiencesAnalytics).not.toHaveBeenCalled();
-    });
-    it('is not shadowed by GET /audiences/:id', async () => {
-        vi.mocked(getAudiencesAnalytics).mockResolvedValue(ANALYTICS);
-        const req = new Request('https://x.com/audiences/analytics?ids=aud-1', {
-            headers: { authorization: 'Bearer v' },
-        });
-        const res = await router.handle(req, ['audiences', 'analytics']);
-        expect(res.status).toBe(200);
-        // Would be the single-audience getter if the :id route had matched.
-        expect(queries.getAudienceById).not.toHaveBeenCalled();
-    });
-    it('requires siteAdmin — editors are forbidden', async () => {
-        vi.mocked(resolveAuth).mockResolvedValue({ user: { id: 'u2', role: 'editor', groups: [] } });
-        const req = new Request('https://x.com/audiences/analytics?ids=aud-1', {
-            headers: { authorization: 'Bearer v' },
-        });
-        const res = await router.handle(req, ['audiences', 'analytics']);
-        expect(res.status).toBe(403);
-    });
-    it('requires authentication', async () => {
-        vi.mocked(resolveAuth).mockResolvedValue({ user: null });
-        const req = new Request('https://x.com/audiences/analytics?ids=aud-1', {});
-        const res = await router.handle(req, ['audiences', 'analytics']);
-        expect(res.status).toBe(401);
-    });
-});
-//# sourceMappingURL=audience-analytics-routes.test.js.map

package/dist/api/__tests__/audience-analytics-routes.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"audience-analytics-routes.test.js","sourceRoot":"","sources":["../../../src/api/__tests__/audience-analytics-routes.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAA;AAC7D,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AACrC,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAA;AAE9D,4DAA4D;AAC5D,EAAE,CAAC,IAAI,CAAC,0BAA0B,EAAE,GAAG,EAAE,CAAC,CAAC;IACzC,aAAa,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,GAAY,EAAE,QAAgB,EAAE,EAAE,CAAC,QAAQ,CAAC;CACzE,CAAC,CAAC,CAAA;AAEH,EAAE,CAAC,IAAI,CAAC,4BAA4B,EAAE,GAAG,EAAE,CAAC,CAAC;IAC3C,aAAa,EAAE,EAAE,CAAC,EAAE,EAAE;IACtB,eAAe,EAAE,EAAE,CAAC,EAAE,EAAE;IACxB,cAAc,EAAE,EAAE,CAAC,EAAE,EAAE;IACvB,cAAc,EAAE,EAAE,CAAC,EAAE,EAAE;IACvB,cAAc,EAAE,EAAE,CAAC,EAAE,EAAE;IACvB,gBAAgB,EAAE,EAAE,CAAC,EAAE,EAAE;IACzB,sBAAsB,EAAE,EAAE,CAAC,EAAE,EAAE;IAC/B,gBAAgB,EAAE,EAAE,CAAC,EAAE,EAAE;IACzB,iBAAiB,EAAE,EAAE,CAAC,EAAE,EAAE;IAC1B,iBAAiB,EAAE,EAAE,CAAC,EAAE,EAAE;IAC1B,qBAAqB,EAAE,EAAE,CAAC,EAAE,EAAE;IAC9B,wBAAwB,EAAE,EAAE,CAAC,EAAE,EAAE;CAClC,CAAC,CAAC,CAAA;AAEH,EAAE,CAAC,IAAI,CAAC,8BAA8B,EAAE,GAAG,EAAE,CAAC,CAAC;IAC7C,qBAAqB,EAAE,EAAE,CAAC,EAAE,EAAE;CAC/B,CAAC,CAAC,CAAA;AAEH,EAAE,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC;IAC3B,WAAW,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC;CAC9F,CAAC,CAAC,CAAA;AAEH,OAAO,KAAK,OAAO,MAAM,4BAA4B,CAAA;AACrD,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAA;AACpE,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAExC,MAAM,SAAS,GAAG;IAChB,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;CAC7F,CAAA;AAED,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;IACxC,IAAI,MAAc,CAAA;IAElB,UAAU,CAAC,GAAG,EAAE;QACd,MAAM,GAAG,IAAI,MAAM,EAAE,CAAA;QACrB,sBAAsB,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,EAAW,EAAE,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC,CAAA;QAChG,EAAE,CAAC,aAAa,EAAE,CAAA;QAClB,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,EAAW,CAAC,CAAA;IAC1G,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;QACpF,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC,iBAAiB,CAAC,SAAkB,CAAC,CAAA;QACtE,MAAM,GAAG,GAAG,IAAI,OAAO,CAAC,+DAA+D,EAAE;YACvF,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,EAAE;SACvC,CAAC,CAAA;QACF,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,CAAA;QAChE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAyB,CAAA;QACpD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;QACpC,MAAM,CAAC,qBAAqB,CAAC,CAAC,oBAAoB,CAAC,EAAE,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,CAAA;QAClF,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;IACtD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;QAC9E,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,iBAAiB,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,CAAU,CAAC,CAAA;QAC/F,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC,iBAAiB,CAAC,EAAW,CAAC,CAAA;QAC/D,MAAM,GAAG,GAAG,IAAI,OAAO,CAAC,mCAAmC,EAAE,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,EAAE,EAAE,CAAC,CAAA;QACxG,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,CAAA;QAChE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,oBAAoB,EAAE,CAAA;QACpD,MAAM,CAAC,qBAAqB,CAAC,CAAC,oBAAoB,CAAC,EAAE,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,CAAA;IACpF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACjE,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC,iBAAiB,CAAC,EAAW,CAAC,CAAA;QAC/D,MAAM,GAAG,GAAG,IAAI,OAAO,CAAC,0DAA0D,EAAE;YAClF,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,EAAE;SACvC,CAAC,CAAA;QACF,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,CAAA;QAChE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,CAAC,qBAAqB,CAAC,CAAC,oBAAoB,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAA;IAC5E,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2BAA2B,EAAE,KAAK,IAAI,EAAE;QACzC,MAAM,GAAG,GAAG,IAAI,OAAO,CAAC,yDAAyD,EAAE;YACjF,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,EAAE;SACvC,CAAC,CAAA;QACF,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,CAAA;QAChE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,CAAC,qBAAqB,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;IACtD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC,iBAAiB,CAAC,SAAkB,CAAC,CAAA;QACtE,MAAM,GAAG,GAAG,IAAI,OAAO,CAAC,6CAA6C,EAAE;YACrE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,EAAE;SACvC,CAAC,CAAA;QACF,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,CAAA;QAChE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,oEAAoE;QACpE,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;IACxD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;QAC1D,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAW,CAAC,CAAA;QACrG,MAAM,GAAG,GAAG,IAAI,OAAO,CAAC,6CAA6C,EAAE;YACrE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,EAAE;SACvC,CAAC,CAAA;QACF,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,CAAA;QAChE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAC9B,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,yBAAyB,EAAE,KAAK,IAAI,EAAE;QACvC,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,IAAI,EAAW,CAAC,CAAA;QACjE,MAAM,GAAG,GAAG,IAAI,OAAO,CAAC,6CAA6C,EAAE,EAAE,CAAC,CAAA;QAC1E,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,CAAA;QAChE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAC9B,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/api/__tests__/audience-routes-site-scope.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=audience-routes-site-scope.test.d.ts.map

package/dist/api/__tests__/audience-routes-site-scope.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"audience-routes-site-scope.test.d.ts","sourceRoot":"","sources":["../../../src/api/__tests__/audience-routes-site-scope.test.ts"],"names":[],"mappings":""}

package/dist/api/__tests__/audience-routes-site-scope.test.js

@@ -1,101 +0,0 @@
-import { describe, it, expect, vi, beforeEach } from 'vitest';
-import { Router } from '../router.js';
-import { registerAudienceRoutes } from '../audience-routes.js';
-import { SignJWT } from 'jose';
-import { getAudienceById, updateAudience, deleteAudience, replaceConditionGroups } from '../../audiences/queries.js';
-// F2c-J09-G4 (SECURITY): item-level audience routes must scope by the request's
-// site. Without a siteId predicate an authenticated admin could read/mutate/
-// delete another site's audience by UUID. Mock the query layer with a siteId-AWARE
-// implementation so a route that fails to thread the resolved siteId leaks.
-const SITE_A_AUD = { id: 'aud-a', siteId: 'site-a-uuid', name: 'A', status: 'active', priority: 1, conditionGroups: [] };
-vi.mock('../../audiences/queries.js', () => {
-    const scoped = (id, siteId) => {
-        if (id !== SITE_A_AUD.id)
-            return null;
-        if (siteId !== undefined && siteId !== SITE_A_AUD.siteId)
-            return null;
-        return SITE_A_AUD;
-    };
-    return {
-        listAudiences: vi.fn().mockResolvedValue([]),
-        getAudienceById: vi.fn((_db, id, siteId) => Promise.resolve(scoped(id, siteId))),
-        createAudience: vi.fn(),
-        updateAudience: vi.fn((_db, id, _data, siteId) => Promise.resolve(scoped(id, siteId))),
-        deleteAudience: vi.fn((_db, id, siteId) => Promise.resolve(scoped(id, siteId) !== null)),
-        reorderAudiences: vi.fn(),
-        replaceConditionGroups: vi.fn().mockResolvedValue(undefined),
-        listSelfIdFields: vi.fn().mockResolvedValue([]),
-        upsertSelfIdField: vi.fn(),
-        deleteSelfIdField: vi.fn(),
-        getSelfIdWidgetConfig: vi.fn(),
-        upsertSelfIdWidgetConfig: vi.fn(),
-    };
-});
-vi.mock('../../audiences/analytics.js', () => ({ getAudiencesAnalytics: vi.fn().mockResolvedValue([]) }));
-// toSiteUuid resolves the slug 'default' -> Site A UUID; passes UUIDs through.
-vi.mock('../site-context.js', () => ({
-    toSiteUuid: vi.fn(async (_db, idOrSlug, fallback) => {
-        const raw = idOrSlug ?? (typeof fallback === 'string' ? fallback : 'default');
-        return raw === 'default' ? 'site-a-uuid' : raw;
-    }),
-}));
-const TEST_SECRET = 'test-secret-that-is-at-least-32-chars-long!!';
-async function token(role = 'siteAdmin') {
-    const key = new TextEncoder().encode(TEST_SECRET);
-    return new SignJWT({ sub: 'u1', role })
-        .setProtectedHeader({ alg: 'HS256' }).setIssuedAt().setExpirationTime('1h').sign(key);
-}
-describe('audience item routes - cross-site addressing is blocked (F2c-J09-G4)', () => {
-    let router;
-    beforeEach(() => {
-        vi.clearAllMocks();
-        router = new Router();
-        registerAudienceRoutes(router, { db: {}, authSecret: TEST_SECRET, defaultSiteId: 'default' });
-    });
-    it('GET /audiences/:id in the owning site returns the row (threads siteId)', async () => {
-        const res = await router.handle(new Request('http://localhost/api/v1/audiences/aud-a?siteId=default', {
-            headers: { Authorization: `Bearer ${await token()}` },
-        }), ['audiences', 'aud-a']);
-        expect(res.status).toBe(200);
-        expect(getAudienceById).toHaveBeenCalledWith(expect.anything(), 'aud-a', 'site-a-uuid');
-    });
-    it('GET /audiences/:id scoped to a different site returns 404', async () => {
-        const res = await router.handle(new Request('http://localhost/api/v1/audiences/aud-a?siteId=site-b-uuid', {
-            headers: { Authorization: `Bearer ${await token()}` },
-        }), ['audiences', 'aud-a']);
-        expect(res.status).toBe(404);
-        expect(getAudienceById).toHaveBeenCalledWith(expect.anything(), 'aud-a', 'site-b-uuid');
-    });
-    it('PUT /audiences/:id scoped to a different site 404s BEFORE rewriting condition groups', async () => {
-        const res = await router.handle(new Request('http://localhost/api/v1/audiences/aud-a?siteId=site-b-uuid', {
-            method: 'PUT',
-            headers: { 'Content-Type': 'application/json', Authorization: `Bearer ${await token()}` },
-            body: JSON.stringify({ name: 'hijacked', conditionGroups: [{ conditions: [] }] }),
-        }), ['audiences', 'aud-a']);
-        expect(res.status).toBe(404);
-        // Critical: the destructive replaceConditionGroups must NOT run for a foreign site.
-        expect(replaceConditionGroups).not.toHaveBeenCalled();
-        expect(updateAudience).not.toHaveBeenCalled();
-    });
-    it('DELETE /audiences/:id scoped to a different site returns 404', async () => {
-        const res = await router.handle(new Request('http://localhost/api/v1/audiences/aud-a?siteId=site-b-uuid', {
-            method: 'DELETE',
-            headers: { Authorization: `Bearer ${await token()}` },
-        }), ['audiences', 'aud-a']);
-        expect(res.status).toBe(404);
-        // Post-merge contract: the site-ownership pre-check (getAudienceById) 404s
-        // first, so the mutation is never reached for a foreign site.
-        expect(getAudienceById).toHaveBeenCalledWith(expect.anything(), 'aud-a', 'site-b-uuid');
-        expect(deleteAudience).not.toHaveBeenCalled();
-    });
-    it('PUT /audiences/:id in the owning site succeeds and updates', async () => {
-        const res = await router.handle(new Request('http://localhost/api/v1/audiences/aud-a?siteId=default', {
-            method: 'PUT',
-            headers: { 'Content-Type': 'application/json', Authorization: `Bearer ${await token()}` },
-            body: JSON.stringify({ name: 'renamed' }),
-        }), ['audiences', 'aud-a']);
-        expect(res.status).toBe(200);
-        expect(updateAudience).toHaveBeenCalledWith(expect.anything(), 'aud-a', expect.anything(), 'site-a-uuid');
-    });
-});
-//# sourceMappingURL=audience-routes-site-scope.test.js.map

package/dist/api/__tests__/audience-routes-site-scope.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"audience-routes-site-scope.test.js","sourceRoot":"","sources":["../../../src/api/__tests__/audience-routes-site-scope.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAA;AAC7D,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AACrC,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAA;AAC9D,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAA;AAC9B,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,cAAc,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAA;AAEpH,gFAAgF;AAChF,6EAA6E;AAC7E,mFAAmF;AACnF,4EAA4E;AAE5E,MAAM,UAAU,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,EAAE,eAAe,EAAE,EAAE,EAAE,CAAA;AAExH,EAAE,CAAC,IAAI,CAAC,4BAA4B,EAAE,GAAG,EAAE;IACzC,MAAM,MAAM,GAAG,CAAC,EAAU,EAAE,MAAe,EAAE,EAAE;QAC7C,IAAI,EAAE,KAAK,UAAU,CAAC,EAAE;YAAE,OAAO,IAAI,CAAA;QACrC,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,UAAU,CAAC,MAAM;YAAE,OAAO,IAAI,CAAA;QACrE,OAAO,UAAU,CAAA;IACnB,CAAC,CAAA;IACD,OAAO;QACL,aAAa,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAC5C,eAAe,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,GAAQ,EAAE,EAAU,EAAE,MAAe,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;QACtG,cAAc,EAAE,EAAE,CAAC,EAAE,EAAE;QACvB,cAAc,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,GAAQ,EAAE,EAAU,EAAE,KAAU,EAAE,MAAe,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;QACjH,cAAc,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,GAAQ,EAAE,EAAU,EAAE,MAAe,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC;QAC9G,gBAAgB,EAAE,EAAE,CAAC,EAAE,EAAE;QACzB,sBAAsB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC;QAC5D,gBAAgB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAC/C,iBAAiB,EAAE,EAAE,CAAC,EAAE,EAAE;QAC1B,iBAAiB,EAAE,EAAE,CAAC,EAAE,EAAE;QAC1B,qBAAqB,EAAE,EAAE,CAAC,EAAE,EAAE;QAC9B,wBAAwB,EAAE,EAAE,CAAC,EAAE,EAAE;KAClC,CAAA;AACH,CAAC,CAAC,CAAA;AAEF,EAAE,CAAC,IAAI,CAAC,8BAA8B,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,qBAAqB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA;AAEzG,+EAA+E;AAC/E,EAAE,CAAC,IAAI,CAAC,oBAAoB,EAAE,GAAG,EAAE,CAAC,CAAC;IACnC,UAAU,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,GAAY,EAAE,QAAmC,EAAE,QAAa,EAAE,EAAE;QAC3F,MAAM,GAAG,GAAG,QAAQ,IAAI,CAAC,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;QAC7E,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAA;IAChD,CAAC,CAAC;CACH,CAAC,CAAC,CAAA;AAEH,MAAM,WAAW,GAAG,8CAA8C,CAAA;AAElE,KAAK,UAAU,KAAK,CAAC,IAAI,GAAG,WAAW;IACrC,MAAM,GAAG,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;IACjD,OAAO,IAAI,OAAO,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;SACpC,kBAAkB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;AACzF,CAAC;AAED,QAAQ,CAAC,sEAAsE,EAAE,GAAG,EAAE;IACpF,IAAI,MAAc,CAAA;IAClB,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,aAAa,EAAE,CAAA;QAClB,MAAM,GAAG,IAAI,MAAM,EAAE,CAAA;QACrB,sBAAsB,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,EAAS,EAAE,UAAU,EAAE,WAAW,EAAE,aAAa,EAAE,SAAS,EAAE,CAAC,CAAA;IACtG,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wEAAwE,EAAE,KAAK,IAAI,EAAE;QACtF,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAC7B,IAAI,OAAO,CAAC,wDAAwD,EAAE;YACpE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,KAAK,EAAE,EAAE,EAAE;SACtD,CAAC,EAAE,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAA;QAC7B,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,CAAC,eAAe,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,aAAa,CAAC,CAAA;IACzF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAC7B,IAAI,OAAO,CAAC,4DAA4D,EAAE;YACxE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,KAAK,EAAE,EAAE,EAAE;SACtD,CAAC,EAAE,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAA;QAC7B,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,CAAC,eAAe,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,aAAa,CAAC,CAAA;IACzF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sFAAsF,EAAE,KAAK,IAAI,EAAE;QACpG,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAC7B,IAAI,OAAO,CAAC,4DAA4D,EAAE;YACxE,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,aAAa,EAAE,UAAU,MAAM,KAAK,EAAE,EAAE,EAAE;YACzF,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,eAAe,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;SAClF,CAAC,EAAE,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAA;QAC7B,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,oFAAoF;QACpF,MAAM,CAAC,sBAAsB,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;QACrD,MAAM,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;IAC/C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAC7B,IAAI,OAAO,CAAC,4DAA4D,EAAE;YACxE,MAAM,EAAE,QAAQ;YAChB,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,KAAK,EAAE,EAAE,EAAE;SACtD,CAAC,EAAE,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAA;QAC7B,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,2EAA2E;QAC3E,8DAA8D;QAC9D,MAAM,CAAC,eAAe,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,aAAa,CAAC,CAAA;QACvF,MAAM,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;IAC/C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC1E,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAC7B,IAAI,OAAO,CAAC,wDAAwD,EAAE;YACpE,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,aAAa,EAAE,UAAU,MAAM,KAAK,EAAE,EAAE,EAAE;YACzF,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;SAC1C,CAAC,EAAE,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAA;QAC7B,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,CAAC,cAAc,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,aAAa,CAAC,CAAA;IAC3G,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/api/__tests__/auth-routes.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=auth-routes.test.d.ts.map

package/dist/api/__tests__/auth-routes.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth-routes.test.d.ts","sourceRoot":"","sources":["../../../src/api/__tests__/auth-routes.test.ts"],"names":[],"mappings":""}