@opendatalabs/personal-server-ts-server 1.33.7 → 1.34.0

package/dist/routes/pdpp-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pdpp-auth.js","sourceRoot":"","sources":["../../src/routes/pdpp-auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAEH,OAAO,EAAE,IAAI,EAAgB,MAAM,MAAM,CAAC;AAU1C,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,WAAW,EACX,gBAAgB,EAChB,qBAAqB,EACrB,yBAAyB,EACzB,wBAAwB,EACxB,qBAAqB,EACrB,mBAAmB,EACnB,wBAAwB,GAYzB,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AACtE,OAAO,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAC1E,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAEhF,OAAO,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAC;AAEzE,kFAAkF;AAClF,MAAM,QAAQ,GAAG;IACf,eAAe,EAAE,UAAU;IAC3B,MAAM,EAAE,UAAU;CACV,CAAC;AAEX,sEAAsE;AACtE,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,GAAG,EAAE,CAAC;AAmG/C,SAAS,aAAa,CACpB,CAAU,EACV,MAAyC,EACzC,KAAa,EACb,WAAmB;IAEnB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,WAAW,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;AAC7E,CAAC;AAED,8DAA8D;AAC9D,SAAS,MAAM,CAAC,CAAU;IACxB,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IAC7C,IAAI,CAAC,MAAM,EAAE,WAAW,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IACnE,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACrC,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9C,CAAC;AAED,SAAS,uBAAuB,CAC9B,IAAuB,EACvB,UAA8B,EAC9B,SAAkB,EAClB,QAAiB;IAIjB,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE;gBACP,IAAI,EAAE,cAAc;gBACpB,OAAO,EAAE,kCAAkC;aAC5C;SACF,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;IACrD,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,SAAS,KAAK,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;QAC3E,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE;gBACP,IAAI,EAAE,cAAc;gBACpB,OAAO,EAAE,0CAA0C;aACpD;SACF,CAAC;IACJ,CAAC;IACD,IAAI,SAAS,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACjD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE;gBACP,IAAI,EAAE,mBAAmB;gBACzB,OAAO,EAAE,iCAAiC;aAC3C;SACF,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,IAAI,QAAQ,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAClE,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE;gBACP,IAAI,EAAE,eAAe;gBACrB,OAAO,EAAE,mDAAmD;aAC7D;SACF,CAAC;IACJ,CAAC;IACD,OAAO;QACL,EAAE,EAAE,IAAI;QACR,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,GAAG,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;KACxD,CAAC;AACJ,CAAC;AAED,SAAS,yBAAyB,CAChC,IAAuB,EACvB,SAAiB,EACjB,QAA6B;IAE7B,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;IACnE,OAAO,QAAQ,CAAC,OAAO,CAAC,IAAI,CAC1B,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAC1D,CAAC;AACJ,CAAC;AAED,SAAS,0BAA0B,CACjC,SAAiB,EACjB,MAAmB,EACnB,aAAsB,EACtB,gBAA2B;IAE3B,OAAO,CACL,MAAM,CAAC,SAAS,KAAK,SAAS;QAC9B,CAAC,CAAC,aAAa,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,aAAa,CAAC;QAC5D,CAAC,CAAC,gBAAgB;YAChB,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CACpC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,EAAE,CACrC,gBAAgB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CACpC,CACF,CAAC,CACL,CAAC;AACJ,CAAC;AAED,SAAS,0BAA0B,CAAC,CAAU,EAAE,OAAwB;IACtE,OAAO,aAAa,CAClB,CAAC,EACD,OAAO,CAAC,IAAI,KAAK,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,EACrE,kBAAkB,CAAC,OAAO,CAAC,IAAI,CAAC,EAChC,OAAO,CAAC,OAAO,CAChB,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAS,gBAAgB,CACvB,CAAU;IAEV,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IAC/C,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACpC,IAAI,SAAS,KAAK,gBAAgB;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IACpE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,qBAAqB,CACnC,YAAyC;IAEzC,OAAO,CAAC,CAAU,EAAE,EAAE;QACpB,MAAM,MAAM,GACV,OAAO,YAAY,KAAK,UAAU,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC;QACrE,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,aAAa,CAClB,CAAC,EACD,GAAG,EACH,WAAW,EACX,qEAAqE,CACtE,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC;QACpD,OAAO,CAAC,CAAC,IAAI,CACX;YACE,MAAM;YACN,sBAAsB,EAAE,GAAG,IAAI,YAAY;YAC3C,cAAc,EAAE,GAAG,IAAI,QAAQ;YAC/B,sBAAsB,EAAE,GAAG,IAAI,aAAa;YAC5C,mBAAmB,EAAE,GAAG,IAAI,SAAS;YACrC,qCAAqC,EAAE;gBACrC,qBAAqB;gBACrB,yBAAyB;aAC1B;YACD,qBAAqB,EAAE,CAAC,oBAAoB,EAAE,eAAe,CAAC;YAC9D,wBAAwB,EAAE,CAAC,MAAM,CAAC;YAClC,oEAAoE;YACpE,mEAAmE;YACnE,wCAAwC;YACxC,gCAAgC,EAAE,CAAC,MAAM,CAAC;YAC1C,gBAAgB,EAAE,gBAAgB;SACnC,EACD,GAAG,EACH,QAAQ,CACT,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAuB;IACpD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IAEvB,sEAAsE;IACtE,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QAC7B,MAAM,OAAO,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAC;QACpC,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YAChB,OAAO,aAAa,CAClB,CAAC,EACD,GAAG,EACH,qBAAqB,EACrB,iBAAiB,OAAO,CAAC,SAAS,8CAA8C,gBAAgB,EAAE,CACnG,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,EAAE,CAAC;QACb,CAAC,CAAC,MAAM,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,2EAA2E;IAC3E,iEAAiE;IACjE,4EAA4E;IAC5E,0EAA0E;IAC1E,kEAAkE;IAClE,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACnB,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,eAAe,CAAC,gBAAgB,CAAC,CAAC,CAAC;QAC3D,GAAG,CAAC,GAAG,CACL,cAAc,EACd,wBAAwB,CAAC;YACvB,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,YAAY;YACzC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ;YACjC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW;YACvC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU;YACrC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW;SACxC,CAAC,CACH,CAAC;QACF,GAAG,CAAC,GAAG,CACL,cAAc,EACd,0BAA0B,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CACvD,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IACH,GAAG,CAAC,GAAG,CACL,yCAAyC,EACzC,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,CACnC,CAAC;IAEF;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACH,GAAG,CAAC,IAAI,CAAC,cAAc,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACnC,sEAAsE;QACtE,oEAAoE;QACpE,mEAAmE;QACnE,MAAM,cAAc,GAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAqC;YACvE,EAAE,MAAM,CAAC;QACX,MAAM,SAAS,GACb,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC;YACxB,CAAC,IAAI,CAAC,SAAS,IAAI,cAAc,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC;YAC1D,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;QAC3B,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,kEAAkE;YAClE,kEAAkE;YAClE,sEAAsE;YACtE,4CAA4C;YAC5C,OAAO,aAAa,CAClB,CAAC,EACD,GAAG,EACH,cAAc,EACd,iEAAiE,CAClE,CAAC;QACJ,CAAC;QAED,IAAI,IAAa,CAAC;QAClB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,aAAa,CAClB,CAAC,EACD,GAAG,EACH,iBAAiB,EACjB,qDAAqD,CACtD,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACrE,OAAO,aAAa,CAClB,CAAC,EACD,GAAG,EACH,iBAAiB,EACjB,qDAAqD,CACtD,CAAC;QACJ,CAAC;QACD,MAAM,YAAY,GAAG,IAA+B,CAAC;QACrD,MAAM,QAAQ,GAAG,YAAY,CAAC,SAAS,CAAC;QACxC,IACE,OAAO,QAAQ,KAAK,QAAQ;YAC5B,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAC5B,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,WAAW,IAAI,GAAG,KAAK,aAAa,CACtD;YACD,CAAC,YAAY,CAAC,WAAW,KAAK,SAAS;gBACrC,CAAC,OAAO,YAAY,CAAC,WAAW,KAAK,QAAQ;oBAC3C,YAAY,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,EAC3C,CAAC;YACD,OAAO,aAAa,CAClB,CAAC,EACD,GAAG,EACH,iBAAiB,EACjB,oEAAoE,CACrE,CAAC;QACJ,CAAC;QACD,MAAM,kBAAkB,GAAG,0BAA0B,CAAC,QAAQ,CAAC,CAAC;QAChE,MAAM,WAAW,GACf,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC;YACjC,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC5E,MAAM,kBAAkB,GACtB,IAAI,CAAC,yBAAyB,EAAE,CAAC,QAAQ,CAAC;YAC1C,CAAC,kBAAkB;gBACjB,CAAC,CAAC,IAAI,CAAC,yBAAyB,EAAE,CAAC,kBAAkB,CAAC;gBACtD,CAAC,CAAC,SAAS,CAAC,CAAC;QACjB,MAAM,gBAAgB,GAAG,WAAW,EAAE,SAAS,IAAI,kBAAkB,CAAC;QACtE,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACtB,OAAO,aAAa,CAClB,CAAC,EACD,GAAG,EACH,WAAW,EACX,sCAAsC,CACvC,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC;YACzC,SAAS;YACT,QAAQ,EAAE,gBAAgB;YAC1B,GAAG,CAAC,OAAO,YAAY,CAAC,WAAW,KAAK,QAAQ,IAAI;gBAClD,WAAW,EAAE,CAAC,YAAY,CAAC,WAAW,CAAC;aACxC,CAAC;YACF,UAAU,EAAE,uBAAuB;SACpC,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,EAAE,UAAU,EAAE,SAAS,EAAE,EACzB,6CAA6C,CAC9C,CAAC;QACF,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH;;;;;;;OAOG;IACH,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACjC,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;QAC3C,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,aAAa,CAClB,CAAC,EACD,GAAG,EACH,cAAc,EACd,sEAAsE,CACvE,CAAC;QACJ,CAAC;QAED,IAAI,IAQH,CAAC;QACF,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,aAAa,CAAC,CAAC,EAAE,GAAG,EAAE,iBAAiB,EAAE,mBAAmB,CAAC,CAAC;QACvE,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,qBAAqB,CAAC;QAC3C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpD,wEAAwE;YACxE,uEAAuE;YACvE,yDAAyD;YACzD,OAAO,aAAa,CAClB,CAAC,EACD,GAAG,EACH,+BAA+B,EAC/B,sDAAsD,CACvD,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YAC1C,OAAO,aAAa,CAClB,CAAC,EACD,GAAG,EACH,iBAAiB,EACjB,yCAAyC,CAC1C,CAAC;QACJ,CAAC;QAED,qEAAqE;QACrE,wEAAwE;QACxE,wEAAwE;QACxE,0EAA0E;QAC1E,yDAAyD;QACzD,uEAAuE;QACvE,qEAAqE;QACrE,0EAA0E;QAC1E,iDAAiD;QACjD,IAAI,cAAc,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC;QACrE,sEAAsE;QACtE,yEAAyE;QACzE,uEAAuE;QACvE,wEAAwE;QACxE,oDAAoD;QACpD,IAAI,uBAA6D,CAAC;QAClE,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,qBAAqB,EAAE,CAAC;YAClD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAClE,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;gBAChB,cAAc,GAAG,QAAQ,CAAC,MAAM,CAAC;gBACjC,uBAAuB,GAAG,QAAQ,CAAC,QAAQ,CAAC;YAC9C,CAAC;iBAAM,CAAC;gBACN,qEAAqE;gBACrE,sEAAsE;gBACtE,iDAAiD;gBACjD,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,EAC5D,iEAAiE,CAClE,CAAC;YACJ,CAAC;QACH,CAAC;QAED,MAAM,eAAe,GAAG,mBAAmB,CACzC,IAAI,CAAC,YAAY,EACjB,cAAc,CACf,CAAC;QACF,IAAI,eAAe,EAAE,CAAC;YACpB,IAAI,CAAC,MAAM,CAAC,IAAI,CACd;gBACE,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,MAAM,EAAE,eAAe,CAAC,IAAI;aAC7B,EACD,4DAA4D,CAC7D,CAAC;YACF,OAAO,aAAa,CAAC,CAAC,EAAE,GAAG,EAAE,iBAAiB,EAAE,eAAe,CAAC,OAAO,CAAC,CAAC;QAC3E,CAAC;QAED,2EAA2E;QAC3E,4EAA4E;QAC5E,MAAM,WAAW,GAAG,qBAAqB,CACvC,IAAI,CAAC,cAAc,EACnB,IAAI,CAAC,qBAAqB,EAC1B,EAAE,QAAQ,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI,EAAE,CACvC,CAAC;QACF,IAAI,WAAW,EAAE,CAAC;YAChB,OAAO,aAAa,CAAC,CAAC,EAAE,GAAG,EAAE,iBAAiB,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC;QACvE,CAAC;QAED,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAC3B,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACnE,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,aAAa,CAClB,CAAC,EACD,GAAG,EACH,+BAA+B,EAC/B,2DAA2D,CAC5D,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,uBAAuB,CACnC,IAAI,EACJ,MAAM,CAAC,CAAC,CAAC,EACT,SAAS,EACT,QAAQ,CAAC,SAAS,CACnB,CAAC;QACF,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;YACd,OAAO,0BAA0B,CAAC,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QACtD,CAAC;QACD,IAAI,CAAC,yBAAyB,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,CAAC;YAC1D,OAAO,aAAa,CAClB,CAAC,EACD,GAAG,EACH,eAAe,EACf,mDAAmD,CACpD,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,GAAG,wBAAwB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC/D,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;YACnB,yEAAyE;YACzE,+DAA+D;YAC/D,qBAAqB;YACrB,EAAE;YACF,kEAAkE;YAClE,oDAAoD;YACpD,sEAAsE;YACtE,qEAAqE;YACrE,mEAAmE;YACnE,sEAAsE;YACtE,YAAY;YACZ,MAAM,UAAU,GACd,UAAU,CAAC,OAAO,CAAC,IAAI,KAAK,iBAAiB;gBAC3C,CAAC,CAAC,iBAAiB;gBACnB,CAAC,CAAC,+BAA+B,CAAC;YACtC,OAAO,aAAa,CAAC,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACvE,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;YACnC,SAAS;YACT,OAAO;YACP,QAAQ;YACR,SAAS,EAAE,wBAAwB,CAAC;gBAClC,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,QAAQ,EAAE,uBAAuB;gBACjC,MAAM,EAAE,IAAI,CAAC,cAAc;aAC5B,CAAC;YACF,WAAW,EAAE,IAAI,CAAC,YAAY;YAC9B,UAAU,EAAE,IAAI,CAAC,KAAK;YACtB,aAAa,EAAE,IAAI,CAAC,cAAc;YAClC,mBAAmB,EAAE,IAAI,CAAC,qBAAqB;YAC/C,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC;SAC/D,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,EAC7D,mCAAmC,CACpC,CAAC;QAEF,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,EAClE,GAAG,EACH,QAAQ,CACT,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH;;;;;;;;OAQG;IACH,GAAG,CAAC,GAAG,CAAC,+BAA+B,EAAE,CAAC,CAAC,EAAE,EAAE;QAC7C,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,MAAM,KAAK,GAAG,uBAAuB,CACnC,IAAI,EACJ,MAAM,CAAC,CAAC,CAAC,EACT,OAAO,EAAE,UAAU,EACnB,OAAO,EAAE,QAAQ,CAAC,SAAS,CAC5B,CAAC;QACF,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;YACd,OAAO,0BAA0B,CAAC,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QACtD,CAAC;QACD,IACE,OAAO;YACP,CAAC,yBAAyB,CAAC,IAAI,EAAE,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,EACtE,CAAC;YACD,OAAO,aAAa,CAClB,CAAC,EACD,GAAG,EACH,eAAe,EACf,mDAAmD,CACpD,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,WAAW,CAAC;YACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,SAAS;YACT,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;YACrB,SAAS,EAAE,IAAI,CAAC,YAAY,CAC1B,OAAO,EAAE,UAAU,IAAI,EAAE,EACzB,OAAO,EAAE,QAAQ,CAAC,SAAS,IAAI,EAAE,CAClC;YACD,eAAe,EAAE,oBAAoB,CAAC,CAAC,CAAC;YACxC,YAAY,EAAE,iBAAiB,CAAC,CAAC,CAAC;YAClC,eAAe,EAAE,oBAAoB,CAAC,CAAC,CAAC;YACxC,aAAa,EACX,IAAI,CAAC,gBAAgB,EAAE,CAAC,OAAO,EAAE,SAAS,CAAC,SAAS,IAAI,EAAE,CAAC;gBAC3D,SAAS;YACX,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,wBAAwB,EAAE,OAAO;gBAC/B,CAAC,CAAC,KAAK,CAAC,IAAI,CACR,IAAI,GAAG,CACL,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAC1C,IAAI;qBACD,YAAY,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;qBAC5D,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAC5B,CACF,CACF;gBACH,CAAC,CAAC,EAAE;SACP,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,OAAO,aAAa,CAClB,CAAC,EACD,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EACnC,kBAAkB,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EACvC,MAAM,CAAC,OAAO,CAAC,OAAO,CACvB,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH;;;OAGG;IACH,GAAG,CAAC,IAAI,CAAC,gCAAgC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACrD,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,MAAM,KAAK,GAAG,uBAAuB,CACnC,IAAI,EACJ,MAAM,CAAC,CAAC,CAAC,EACT,OAAO,EAAE,UAAU,EACnB,OAAO,EAAE,QAAQ,CAAC,SAAS,CAC5B,CAAC;QACF,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;YACd,OAAO,0BAA0B,CAAC,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QACtD,CAAC;QACD,IACE,OAAO;YACP,CAAC,yBAAyB,CAAC,IAAI,EAAE,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,EACtE,CAAC;YACD,OAAO,aAAa,CAClB,CAAC,EACD,GAAG,EACH,eAAe,EACf,mDAAmD,CACpD,CAAC;QACJ,CAAC;QAED,IAAI,IAQH,CAAC;QACF,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,aAAa,CAAC,CAAC,EAAE,GAAG,EAAE,iBAAiB,EAAE,mBAAmB,CAAC,CAAC;QACvE,CAAC;QAED,MAAM,MAAM,GAAG,oBAAoB,CAAC;YAClC,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,SAAS;YACT,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;YACrB,YAAY,EAAE,IAAI,CAAC,aAAa,IAAI,EAAE;YACtC,SAAS,EAAE,IAAI,CAAC,YAAY,CAC1B,OAAO,EAAE,UAAU,IAAI,EAAE,EACzB,OAAO,EAAE,QAAQ,CAAC,SAAS,IAAI,EAAE,CAClC;YACD,eAAe,EAAE,IAAI,CAAC,gBAAgB;YACtC,YAAY,EAAE,IAAI,CAAC,aAAa;YAChC,eAAe,EAAE,IAAI,CAAC,gBAAgB;YACtC,aAAa,EACX,IAAI,CAAC,gBAAgB,EAAE,CAAC,OAAO,EAAE,SAAS,CAAC,SAAS,IAAI,EAAE,CAAC;gBAC3D,SAAS;YACX,yBAAyB,EAAE,IAAI,CAAC,4BAA4B;SAC7D,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,OAAO,aAAa,CAClB,CAAC,EACD,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EACnC,kBAAkB,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EACvC,MAAM,CAAC,OAAO,CAAC,OAAO,CACvB,CAAC;QACJ,CAAC;QAED,mEAAmE;QACnE,6CAA6C;QAC7C,wEAAwE;QACxE,uEAAuE;QACvE,wEAAwE;QACxE,qBAAqB;QACrB,MAAM,IAAI,GAAG,aAAa,MAAM,CAAC,UAAU,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC;QAClE,IAAI,CAAC,KAAK,CAAC,uBAAuB,CAAC;YACjC,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE;YAClC,YAAY,EAAE,MAAM,CAAC,eAAe,CAAC,aAAa;YAClD,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,IAAI;YACJ,QAAQ,EAAE;gBACR,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ;gBAC9B,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS;gBACvC,WAAW,EAAE,OAAQ,CAAC,YAAY;gBAClC,sEAAsE;gBACtE,qDAAqD;gBACrD,aAAa,EAAE,OAAQ,CAAC,cAAc,IAAI,IAAI;gBAC9C,mBAAmB,EAAE,OAAQ,CAAC,qBAAqB,IAAI,IAAI;gBAC3D,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC,WAAW,EAAE;aACvD;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAQ,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;QAEzD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,OAAQ,CAAC,YAAY,CAAC,CAAC;QAChD,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACxC,IAAI,OAAQ,CAAC,WAAW,EAAE,CAAC;YACzB,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,OAAQ,CAAC,WAAW,CAAC,CAAC;QAC3D,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,EAAE,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,EACnC,sDAAsD,CACvD,CAAC;QAEF,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,YAAY,EAAE,QAAQ,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,EACtE,GAAG,EACH,QAAQ,CACT,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,0EAA0E;IAC1E,GAAG,CAAC,IAAI,CAAC,6BAA6B,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAClD,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,MAAM,KAAK,GAAG,uBAAuB,CACnC,IAAI,EACJ,MAAM,CAAC,CAAC,CAAC,EACT,OAAO,EAAE,UAAU,EACnB,OAAO,EAAE,QAAQ,CAAC,SAAS,CAC5B,CAAC;QACF,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;YACd,OAAO,0BAA0B,CAAC,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QACtD,CAAC;QACD,IACE,OAAO;YACP,CAAC,yBAAyB,CAAC,IAAI,EAAE,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,EACtE,CAAC;YACD,OAAO,aAAa,CAClB,CAAC,EACD,GAAG,EACH,eAAe,EACf,mDAAmD,CACpD,CAAC;QACJ,CAAC;QAED,0EAA0E;QAC1E,qEAAqE;QACrE,uEAAuE;QACvE,IAAI,MAA0B,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAgC,CAAC;YACjE,IAAI,OAAO,IAAI,EAAE,MAAM,KAAK,QAAQ;gBAAE,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC7D,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,GAAG,SAAS,CAAC;QACrB,CAAC;QAED,MAAM,MAAM,GAAG,iBAAiB,CAAC;YAC/B,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,SAAS;YACT,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;YACrB,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,CAAC;SACxC,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,OAAO,aAAa,CAClB,CAAC,EACD,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EACnC,kBAAkB,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EACvC,MAAM,CAAC,OAAO,CAAC,OAAO,CACvB,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,OAAQ,CAAC,YAAY,CAAC,CAAC;QAChD,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;QACpD,IAAI,OAAQ,CAAC,WAAW,EAAE,CAAC;YACzB,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,OAAQ,CAAC,WAAW,CAAC,CAAC;QAC3D,CAAC;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,QAAQ,CAAC,QAAQ,EAAE,EAAE,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH;;;;;OAKG;IACH,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC7B,MAAM,WAAW,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;QACvD,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,mCAAmC,CAAC,EAAE,CAAC;YAC/D,OAAO,aAAa,CAClB,CAAC,EACD,GAAG,EACH,iBAAiB,EACjB,wDAAwD,CACzD,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;QACrC,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAE5C,IAAI,SAAS,KAAK,oBAAoB,EAAE,CAAC;YACvC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjC,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC1C,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAChD,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,IAAI,CAAC,WAAW,EAAE,CAAC;gBACvC,OAAO,aAAa,CAClB,CAAC,EACD,GAAG,EACH,iBAAiB,EACjB,gDAAgD,CACjD,CAAC;YACJ,CAAC;YACD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,uBAAuB,CAAC;gBACjD,IAAI;gBACJ,QAAQ;gBACR,WAAW;gBACX,YAAY,EAAE,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,SAAS;aACxD,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;gBACf,OAAO,aAAa,CAClB,CAAC,EACD,GAAG,EACH,MAAM,CAAC,OAAO,CAAC,IAAI,EACnB,MAAM,CAAC,OAAO,CAAC,OAAO,CACvB,CAAC;YACJ,CAAC;YACD,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC9C,CAAC;QAED,IAAI,SAAS,KAAK,eAAe,EAAE,CAAC;YAClC,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YAClD,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,OAAO,aAAa,CAClB,CAAC,EACD,GAAG,EACH,iBAAiB,EACjB,2BAA2B,CAC5B,CAAC;YACJ,CAAC;YACD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC;YACrD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;gBACf,OAAO,aAAa,CAClB,CAAC,EACD,GAAG,EACH,MAAM,CAAC,OAAO,CAAC,IAAI,EACnB,MAAM,CAAC,OAAO,CAAC,OAAO,CACvB,CAAC;YACJ,CAAC;YACD,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC9C,CAAC;QAED,OAAO,aAAa,CAClB,CAAC,EACD,GAAG,EACH,wBAAwB,EACxB,eAAe,SAAS,IAAI,EAAE,+CAA+C,CAC9E,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH;;;;;;;;;;;;;;;;;;;OAmBG;IACH,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAClC,MAAM,WAAW,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QAC9B,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,aAAa,CAClB,CAAC,EACD,GAAG,EACH,gBAAgB,EAChB,qDAAqD,CACtD,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;YACnD,OAAO,aAAa,CAClB,CAAC,EACD,GAAG,EACH,gBAAgB,EAChB,yDAAyD,CAC1D,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YACtB,OAAO,aAAa,CAClB,CAAC,EACD,GAAG,EACH,eAAe,EACf,uCAAuC,CACxC,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,wEAAwE;YACxE,OAAO,aAAa,CAAC,CAAC,EAAE,GAAG,EAAE,iBAAiB,EAAE,mBAAmB,CAAC,CAAC;QACvE,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QAC/C,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClB,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;gBACjB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBAC1D,IACE,CAAC,MAAM;oBACP,MAAM,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS;oBACrC,CAAC,0BAA0B,CACzB,MAAM,CAAC,SAAS,EAChB,MAAM,EACN,MAAM,CAAC,QAAQ,EACf,MAAM,CAAC,WAAW,CACnB,EACD,CAAC;oBACD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;gBAClD,CAAC;YACH,CAAC;iBAAM,IACL,MAAM,CAAC,SAAS,KAAK,OAAO;gBAC5B,MAAM,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS;gBACrC,CAAC,MAAM,CAAC,QAAQ;oBACd,CAAC,CAAC,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ;oBACrC,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW;wBACnB,CAAC,MAAM,CAAC,WAAW;wBACnB,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EACvE,CAAC;gBACD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;QAED,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE;QACvB,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;QAC/B,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC,QAAQ,CAAC;QAEvC,MAAM,YAAY,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC9C,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK;aACtB,oBAAoB,CAAC,MAAM,CAAC,SAAS,CAAC;aACtC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,YAAY,IAAI,MAAM,CAAC,QAAQ,KAAK,YAAY,CAAC;aACrE,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CACjB,0BAA0B,CACxB,MAAM,CAAC,SAAS,EAChB,MAAM,EACN,MAAM,CAAC,QAAQ,EACf,MAAM,CAAC,WAAW,CACnB,CACF;aACA,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAChB,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ;YAC/B,SAAS,EAAE,MAAM,CAAC,QAAQ;YAC1B,MAAM,EAAE,iBAAiB,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC;YAClD,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS;YACjC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;YACvE,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,WAAW;YACrC,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,YAAY;YACvC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACxC,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,MAAM,EAAE,CAAC,CAAC,MAAM;aACjB,CAAC,CAAC;SACJ,CAAC,CAAC,CAAC;QAEN,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH;;;OAGG;IACH,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC9B,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;QAC/B,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC,QAAQ,CAAC;QAEvC,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACxC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,aAAa,CAAC,CAAC,EAAE,GAAG,EAAE,iBAAiB,EAAE,sBAAsB,CAAC,CAAC;QAC1E,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC5C,wEAAwE;QACxE,mDAAmD;QACnD,IACE,CAAC,MAAM;YACP,MAAM,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS;YACrC,CAAC,0BAA0B,CACzB,MAAM,CAAC,SAAS,EAChB,MAAM,EACN,MAAM,CAAC,QAAQ,EACf,MAAM,CAAC,WAAW,CACnB,EACD,CAAC;YACD,OAAO,aAAa,CAAC,CAAC,EAAE,GAAG,EAAE,WAAW,EAAE,iBAAiB,CAAC,CAAC;QAC/D,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QACjD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,uBAAuB,CAAC,CAAC;QAE1E,wDAAwD;QACxD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;IAEH;;;;;;;OAOG;IACH,SAAS,YAAY,CAAC,CAAU;QAQ9B,MAAM,UAAU,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,QAAQ,EAAE,aAAa,CACrB,CAAC,EACD,GAAG,EACH,cAAc,EACd,4BAA4B,CAC7B;aACF,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;QACpD,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,SAAS,KAAK,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YACxE,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,QAAQ,EAAE,aAAa,CACrB,CAAC,EACD,GAAG,EACH,cAAc,EACd,mCAAmC,CACpC;aACF,CAAC;QACJ,CAAC;QACD,OAAO;YACL,EAAE,EAAE,IAAI;YACR,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;YACrD,GAAG,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC;SAC/D,CAAC;IACJ,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,iBAAiB,CACxB,KAAoB,EACpB,MAAmB,EACnB,GAAS;IAET,MAAM,MAAM,GAAG,KAAK,CAAC,WAAW,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC9C,IACE,MAAM,KAAK,QAAQ;QACnB,MAAM,CAAC,KAAK,CAAC,WAAW,KAAK,YAAY;QACzC,MAAM,CAAC,UAAU,EACjB,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,kBAAkB,CAAC,IAAY;IACtC,IAAI,IAAI,KAAK,mBAAmB;QAAE,OAAO,eAAe,CAAC;IACzD,kEAAkE;IAClE,yEAAyE;IACzE,0EAA0E;IAC1E,6BAA6B;IAC7B,IAAI,IAAI,KAAK,6BAA6B,EAAE,CAAC;QAC3C,OAAO,+BAA+B,CAAC;IACzC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,cAAc;YACjB,OAAO,GAAG,CAAC;QACb,KAAK,mBAAmB;YACtB,OAAO,GAAG,CAAC;QACb,KAAK,cAAc;YACjB,OAAO,GAAG,CAAC;QACb,KAAK,6BAA6B;YAChC,wEAAwE;YACxE,uEAAuE;YACvE,qCAAqC;YACrC,OAAO,GAAG,CAAC;QACb,KAAK,mBAAmB;YACtB,qEAAqE;YACrE,qEAAqE;YACrE,kEAAkE;YAClE,sEAAsE;YACtE,sCAAsC;YACtC,OAAO,GAAG,CAAC;QACb;YACE,OAAO,GAAG,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AACtE,CAAC;AAED;;;;GAIG;AACH,SAAS,oBAAoB,CAC3B,CAAU;IAEV,MAAM,OAAO,GAA6B,EAAE,CAAC;IAC7C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC/B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,GAAG,CAAC,YAAY,CAAC,OAAO,EAAE,EAAE,CAAC;QACtD,MAAM,KAAK,GAAG,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7C,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAC3C,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/D,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH;;;;;;;;;GASG;AACH,SAAS,oBAAoB,CAAC,CAAU;IACtC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC/B,MAAM,WAAW,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IAC7D,MAAM,WAAW,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;IAEnE,MAAM,UAAU,GAAoB;QAClC,GAAG,CAAC,WAAW;YACb,CAAC,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,WAAW,CAAC,IAAI;YACrD,SAAS,EAAE,EAAE,YAAY,EAAE,WAAW,EAAE,SAAS,EAAE,QAAQ,EAAE;SAC9D,CAAC;QACJ,GAAG,CAAC,WAAW,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC;KAClD,CAAC;IACF,OAAO,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;AACrE,CAAC;AAED,SAAS,iBAAiB,CAAC,CAAU;IACnC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,MAAM,GAA6B,EAAE,CAAC;IAC5C,MAAM,OAAO,GAAuD,EAAE,CAAC;IAEvE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC/B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,GAAG,CAAC,YAAY,CAAC,OAAO,EAAE,EAAE,CAAC;QACtD,MAAM,OAAO,GAAG,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9C,IAAI,OAAO,EAAE,CAAC;YACZ,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1B,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC1C,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACtC,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC1C,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,GAAG,KAAK,CAAC;YACzC,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC1C,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,GAAG,KAAK,CAAC;QAC3C,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAiB;QAC5B,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,CAAC;QAC1D,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;QACjD,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC;KACjE,CAAC;IACF,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/D,CAAC"}

package/dist/routes/pdpp-blobs.d.ts

@@ -0,0 +1,26 @@
+import { Hono } from "hono";
+import type { PdppAuthorizationService } from "@opendatalabs/personal-server-ts-core/ports/pdpp-auth";
+import { type PdppRecordStore, type StreamDeclarationRegistry } from "@opendatalabs/personal-server-ts-core/storage/pdpp-records";
+export interface PdppBlobsRouteDeps {
+    store: PdppRecordStore;
+    auth: PdppAuthorizationService;
+    declarations: StreamDeclarationRegistry;
+    instancesForSubject?: (subjectId: string) => string[];
+    instancesForSource?: (subjectId: string, sourceId: string) => string[];
+    isConnectionAvailable?: (instance: string) => boolean;
+    /**
+     * Loads raw blob bytes for a blob_id, or undefined if not locally stored.
+     * Optional: when absent or throwing, GET fails closed with `api_error` (500) instead of a fabricated 200.
+     */
+    readBlobBytes?: (blobId: string) => Promise<Uint8Array<ArrayBuffer> | undefined>;
+}
+export declare function pdppBlobsRoutes(deps: PdppBlobsRouteDeps): Hono;
+/**
+ * Placeholder for the 302-signed-URL blob response variant. NOT a real
+ * signed-URL service — per Architecture §8, blob distribution via signed URL
+ * is gateway-native and out of this lane's scope. This function exists only
+ * to document the shape a real implementation would need; it is not wired
+ * into any route above.
+ */
+export declare function placeholderSignedBlobRedirectTarget(blobId: string): string;
+//# sourceMappingURL=pdpp-blobs.d.ts.map

package/dist/routes/pdpp-blobs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pdpp-blobs.d.ts","sourceRoot":"","sources":["../../src/routes/pdpp-blobs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAgB,MAAM,MAAM,CAAC;AAI1C,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,uDAAuD,CAAC;AAEtG,OAAO,EAIL,KAAK,eAAe,EACpB,KAAK,yBAAyB,EAC/B,MAAM,4DAA4D,CAAC;AAEpE,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,eAAe,CAAC;IACvB,IAAI,EAAE,wBAAwB,CAAC;IAC/B,YAAY,EAAE,yBAAyB,CAAC;IACxC,mBAAmB,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,MAAM,EAAE,CAAC;IACtD,kBAAkB,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,MAAM,EAAE,CAAC;IACvE,qBAAqB,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC;IACtD;;;OAGG;IACH,aAAa,CAAC,EAAE,CACd,MAAM,EAAE,MAAM,KACX,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC,CAAC;CACnD;AA0BD,wBAAgB,eAAe,CAAC,IAAI,EAAE,kBAAkB,GAAG,IAAI,CA0M9D;AAED;;;;;;GAMG;AACH,wBAAgB,mCAAmC,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAE1E"}

package/dist/routes/pdpp-blobs.js

@@ -0,0 +1,179 @@
+import { Hono } from "hono";
+import { randomUUID } from "node:crypto";
+import { PdppError } from "@opendatalabs/personal-server-ts-core/errors/pdpp";
+import { PDPP_VERSION } from "@opendatalabs/personal-server-ts-core/pdpp-version";
+import { resourceMetadataUrlFor } from "./pdpp-records.js";
+import { recordKeyWithinGrantResources, recordWithinGrantTimeConstraint, resolveReadScope, } from "@opendatalabs/personal-server-ts-core/storage/pdpp-records";
+function requestId() {
+    return `req_${randomUUID()}`;
+}
+function jsonError(c, err, reqId, extraHeaders) {
+    // Every 401 carries the challenge, not just the missing-token branch: a
+    // client holding a STALE token is exactly who needs the pointer back to the
+    // metadata document in order to re-authorize.
+    const headers = {
+        "Request-Id": reqId,
+        "PDPP-Version": PDPP_VERSION,
+        ...(err.status === 401 && {
+            "WWW-Authenticate": `Bearer error="invalid_token", resource_metadata="${resourceMetadataUrlFor(c)}"`,
+        }),
+        ...extraHeaders,
+    };
+    return c.json(err.toJSON(reqId), err.status, headers);
+}
+export function pdppBlobsRoutes(deps) {
+    const app = new Hono();
+    /**
+     * Authorizes a blob fetch through the same path a record read uses (spec §8): finds every
+     * record referencing this blob_id, then grants access if ANY one passes instance scope,
+     * resources, time_constraint, and has blob_ref in its record's specific granted field
+     * projection. Identical bytes can be referenced by more than one record, so an inaccessible
+     * reference must not hide an accessible one.
+     */
+    async function authorizeBlobAccess(c, blobId) {
+        const reqId = requestId();
+        const header = c.req.header("Authorization");
+        const token = header?.match(/^Bearer\s+(.+)$/i)?.[1];
+        if (!token) {
+            const err = new PdppError("authentication_error", "Missing or invalid access token");
+            return {
+                error: jsonError(c, err, reqId, {
+                    // Absolute, derived from this request's origin (RFC 9728 §5.1) --
+                    // shares the records route's helper so the two cannot drift.
+                    "WWW-Authenticate": `Bearer error="invalid_token", resource_metadata="${resourceMetadataUrlFor(c)}"`,
+                }),
+            };
+        }
+        const context = await deps.auth.resolveToken(token);
+        if (!context.active) {
+            const err = new PdppError("authentication_error", "Invalid access token");
+            return { error: jsonError(c, err, reqId) };
+        }
+        // DELETE removes the grant's record references and claim rows. Check its
+        // connection before blob metadata so callers still get the K7 refusal.
+        if (context.tokenKind !== "owner") {
+            const grantInstances = (context.grant?.streams ?? []).flatMap((stream) => stream.instance_ids);
+            if (grantInstances.some((instance) => deps.isConnectionAvailable?.(instance) === false)) {
+                const err = new PdppError("instance_unavailable", "The connection for this grant is unavailable");
+                return { error: jsonError(c, err, reqId) };
+            }
+        }
+        const meta = deps.store.getBlobMeta(blobId);
+        if (!meta) {
+            const err = new PdppError("blob_not_found", "blob_id is unknown or stale");
+            return { error: jsonError(c, err, reqId) };
+        }
+        const notFound = () => jsonError(c, new PdppError("blob_not_found", "blob_id is unknown or stale"), reqId);
+        // Identical blob bytes can legitimately be referenced by more than one
+        // record or instance (e.g. re-ingested via a different stream). Access
+        // is granted if ANY visible reference passes its authorization check —
+        // an inaccessible reference must never hide an accessible one.
+        const references = deps.store.findBlobReferences(blobId);
+        if (references.length === 0)
+            return { error: notFound() };
+        if (context.tokenKind === "owner") {
+            // Owner tokens carry no grant: current-capability read, scoped to the
+            // owner's selected live instances when the token has an instance list.
+            // A source scope must not widen that explicit selection.
+            // Fail closed: a missing resolver, a missing subjectId, or an empty
+            // owned list must all deny rather than fall back to "visible to
+            // everyone" — mirrors the record routes' `?? []` default.
+            if (!context.subjectId)
+                return { error: notFound() };
+            const currentInstances = deps.instancesForSubject?.(context.subjectId);
+            const sourceInstances = context.sourceId
+                ? (deps.instancesForSource?.(context.subjectId, context.sourceId) ?? [])
+                : (currentInstances ?? []);
+            const ownedInstances = context.instanceIds
+                ? context.instanceIds.filter((instance) => sourceInstances.includes(instance))
+                : context.sourceId
+                    ? sourceInstances
+                    : [];
+            const visible = references.some((reference) => ownedInstances.includes(reference.instance));
+            if (!visible)
+                return { error: notFound() };
+            return { ok: true };
+        }
+        // Client token: the blob must be referenced by a record this exact
+        // grant can see — instance scope, resources allowlist, time_constraint,
+        // and blob_ref must be in the granted fields for that record's stream.
+        for (const reference of references) {
+            const declaration = deps.declarations.forInstance(reference.instance, reference.stream);
+            let scope;
+            try {
+                scope = resolveReadScope(context, reference.stream, declaration);
+            }
+            catch {
+                continue;
+            }
+            if (!scope.instanceIds.includes(reference.instance))
+                continue;
+            if (!recordKeyWithinGrantResources(reference.recordKey, scope.streamGrant)) {
+                continue;
+            }
+            if (!scope.fields?.includes("blob_ref"))
+                continue;
+            const record = deps.store.getRecord(reference.instance, reference.stream, reference.recordKey);
+            if (!record ||
+                !recordWithinGrantTimeConstraint(record.data, scope.streamGrant)) {
+                continue;
+            }
+            return { ok: true };
+        }
+        return { error: notFound() };
+    }
+    // Hono dispatches HEAD via the GET handler and discards the body, so no separate HEAD handler is
+    // needed. Content-Length always comes from blob metadata, not the actual byte read.
+    app.get("/:blobId", async (c) => {
+        const blobId = c.req.param("blobId");
+        const authz = await authorizeBlobAccess(c, blobId);
+        if ("error" in authz)
+            return authz.error;
+        const meta = deps.store.getBlobMeta(blobId);
+        const reqId = requestId();
+        const headers = {
+            "Request-Id": reqId,
+            "PDPP-Version": PDPP_VERSION,
+            "Content-Type": meta.mimeType,
+            "Content-Length": String(meta.sizeBytes),
+            "Cache-Control": "private, no-store",
+        };
+        if (c.req.method === "HEAD") {
+            return c.body(null, 200, headers);
+        }
+        let bytes;
+        try {
+            bytes = await deps.readBlobBytes?.(blobId);
+        }
+        catch {
+            // A throwing reader must not leak past this route to app.ts's generic
+            // handler, which returns a different (legacy) error shape. Map it to
+            // the same fail-closed api_error without exposing the reader's detail.
+            return jsonError(c, new PdppError("api_error", "Blob bytes are not available"), reqId);
+        }
+        if (bytes === undefined) {
+            // No byte source wired up, or the store lost the bytes for an
+            // otherwise-known blob -- distinct from a genuine zero-byte blob.
+            return jsonError(c, new PdppError("api_error", "Blob bytes are not available"), reqId);
+        }
+        if (bytes.byteLength !== meta.sizeBytes) {
+            // The declared Content-Length must never silently misrepresent the
+            // returned body. Fail closed rather than let a stale/corrupt
+            // sizeBytes lie to the client about how much data follows.
+            return jsonError(c, new PdppError("api_error", "Stored blob size does not match metadata"), reqId);
+        }
+        return c.body(bytes, 200, headers);
+    });
+    return app;
+}
+/**
+ * Placeholder for the 302-signed-URL blob response variant. NOT a real
+ * signed-URL service — per Architecture §8, blob distribution via signed URL
+ * is gateway-native and out of this lane's scope. This function exists only
+ * to document the shape a real implementation would need; it is not wired
+ * into any route above.
+ */
+export function placeholderSignedBlobRedirectTarget(blobId) {
+    return `https://gateway.invalid/blobs/${encodeURIComponent(blobId)}?signature=not-implemented`;
+}
+//# sourceMappingURL=pdpp-blobs.js.map

package/dist/routes/pdpp-blobs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pdpp-blobs.js","sourceRoot":"","sources":["../../src/routes/pdpp-blobs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAgB,MAAM,MAAM,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,mDAAmD,CAAC;AAC9E,OAAO,EAAE,YAAY,EAAE,MAAM,oDAAoD,CAAC;AAElF,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EACL,6BAA6B,EAC7B,+BAA+B,EAC/B,gBAAgB,GAGjB,MAAM,4DAA4D,CAAC;AAkBpE,SAAS,SAAS;IAChB,OAAO,OAAO,UAAU,EAAE,EAAE,CAAC;AAC/B,CAAC;AAED,SAAS,SAAS,CAChB,CAAU,EACV,GAAc,EACd,KAAa,EACb,YAAqC;IAErC,wEAAwE;IACxE,4EAA4E;IAC5E,8CAA8C;IAC9C,MAAM,OAAO,GAA2B;QACtC,YAAY,EAAE,KAAK;QACnB,cAAc,EAAE,YAAY;QAC5B,GAAG,CAAC,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI;YACxB,kBAAkB,EAAE,oDAAoD,sBAAsB,CAAC,CAAC,CAAC,GAAG;SACrG,CAAC;QACF,GAAG,YAAY;KAChB,CAAC;IACF,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,MAAe,EAAE,OAAO,CAAC,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAwB;IACtD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IAEvB;;;;;;OAMG;IACH,KAAK,UAAU,mBAAmB,CAChC,CAAU,EACV,MAAc;QAEd,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QAC7C,MAAM,KAAK,GAAG,MAAM,EAAE,KAAK,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACrD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,GAAG,GAAG,IAAI,SAAS,CACvB,sBAAsB,EACtB,iCAAiC,CAClC,CAAC;YACF,OAAO;gBACL,KAAK,EAAE,SAAS,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE;oBAC9B,kEAAkE;oBAClE,6DAA6D;oBAC7D,kBAAkB,EAAE,oDAAoD,sBAAsB,CAAC,CAAC,CAAC,GAAG;iBACrG,CAAC;aACH,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QACpD,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YACpB,MAAM,GAAG,GAAG,IAAI,SAAS,CAAC,sBAAsB,EAAE,sBAAsB,CAAC,CAAC;YAC1E,OAAO,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,EAAE,CAAC;QAC7C,CAAC;QAED,yEAAyE;QACzE,uEAAuE;QACvE,IAAI,OAAO,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;YAClC,MAAM,cAAc,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,OAAO,CAC3D,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,YAAY,CAChC,CAAC;YACF,IACE,cAAc,CAAC,IAAI,CACjB,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,qBAAqB,EAAE,CAAC,QAAQ,CAAC,KAAK,KAAK,CAC/D,EACD,CAAC;gBACD,MAAM,GAAG,GAAG,IAAI,SAAS,CACvB,sBAAsB,EACtB,8CAA8C,CAC/C,CAAC;gBACF,OAAO,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,EAAE,CAAC;YAC7C,CAAC;QACH,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,GAAG,GAAG,IAAI,SAAS,CACvB,gBAAgB,EAChB,6BAA6B,CAC9B,CAAC;YACF,OAAO,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,EAAE,CAAC;QAC7C,CAAC;QAED,MAAM,QAAQ,GAAG,GAAG,EAAE,CACpB,SAAS,CACP,CAAC,EACD,IAAI,SAAS,CAAC,gBAAgB,EAAE,6BAA6B,CAAC,EAC9D,KAAK,CACN,CAAC;QAEJ,uEAAuE;QACvE,uEAAuE;QACvE,uEAAuE;QACvE,+DAA+D;QAC/D,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;QACzD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC;QAE1D,IAAI,OAAO,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;YAClC,sEAAsE;YACtE,uEAAuE;YACvE,yDAAyD;YACzD,oEAAoE;YACpE,gEAAgE;YAChE,0DAA0D;YAC1D,IAAI,CAAC,OAAO,CAAC,SAAS;gBAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC;YACrD,MAAM,gBAAgB,GAAG,IAAI,CAAC,mBAAmB,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACvE,MAAM,eAAe,GAAG,OAAO,CAAC,QAAQ;gBACtC,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACxE,CAAC,CAAC,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC;YAC7B,MAAM,cAAc,GAAG,OAAO,CAAC,WAAW;gBACxC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CACtC,eAAe,CAAC,QAAQ,CAAC,QAAQ,CAAC,CACnC;gBACH,CAAC,CAAC,OAAO,CAAC,QAAQ;oBAChB,CAAC,CAAC,eAAe;oBACjB,CAAC,CAAC,EAAE,CAAC;YACT,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAC5C,cAAc,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,CAC5C,CAAC;YACF,IAAI,CAAC,OAAO;gBAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC;YAC3C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACtB,CAAC;QAED,mEAAmE;QACnE,wEAAwE;QACxE,uEAAuE;QACvE,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,WAAW,CAC/C,SAAS,CAAC,QAAQ,EAClB,SAAS,CAAC,MAAM,CACjB,CAAC;YACF,IAAI,KAAK,CAAC;YACV,IAAI,CAAC;gBACH,KAAK,GAAG,gBAAgB,CAAC,OAAO,EAAE,SAAS,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;YACnE,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;YAED,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC;gBAAE,SAAS;YAC9D,IACE,CAAC,6BAA6B,CAAC,SAAS,CAAC,SAAS,EAAE,KAAK,CAAC,WAAW,CAAC,EACtE,CAAC;gBACD,SAAS;YACX,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,UAAU,CAAC;gBAAE,SAAS;YAElD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CACjC,SAAS,CAAC,QAAQ,EAClB,SAAS,CAAC,MAAM,EAChB,SAAS,CAAC,SAAS,CACpB,CAAC;YACF,IACE,CAAC,MAAM;gBACP,CAAC,+BAA+B,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,WAAW,CAAC,EAChE,CAAC;gBACD,SAAS;YACX,CAAC;YAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACtB,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC;IAC/B,CAAC;IAED,iGAAiG;IACjG,oFAAoF;IACpF,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC9B,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACrC,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACnD,IAAI,OAAO,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC,KAAK,CAAC;QAEzC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAE,CAAC;QAC7C,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;QAC1B,MAAM,OAAO,GAA2B;YACtC,YAAY,EAAE,KAAK;YACnB,cAAc,EAAE,YAAY;YAC5B,cAAc,EAAE,IAAI,CAAC,QAAQ;YAC7B,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;YACxC,eAAe,EAAE,mBAAmB;SACrC,CAAC;QAEF,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC5B,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;QACpC,CAAC;QAED,IAAI,KAA0C,CAAC;QAC/C,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC,MAAM,CAAC,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,sEAAsE;YACtE,qEAAqE;YACrE,uEAAuE;YACvE,OAAO,SAAS,CACd,CAAC,EACD,IAAI,SAAS,CAAC,WAAW,EAAE,8BAA8B,CAAC,EAC1D,KAAK,CACN,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,8DAA8D;YAC9D,kEAAkE;YAClE,OAAO,SAAS,CACd,CAAC,EACD,IAAI,SAAS,CAAC,WAAW,EAAE,8BAA8B,CAAC,EAC1D,KAAK,CACN,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,CAAC,SAAS,EAAE,CAAC;YACxC,mEAAmE;YACnE,6DAA6D;YAC7D,2DAA2D;YAC3D,OAAO,SAAS,CACd,CAAC,EACD,IAAI,SAAS,CAAC,WAAW,EAAE,0CAA0C,CAAC,EACtE,KAAK,CACN,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mCAAmC,CAAC,MAAc;IAChE,OAAO,iCAAiC,kBAAkB,CAAC,MAAM,CAAC,4BAA4B,CAAC;AACjG,CAAC"}

package/dist/routes/pdpp-connections.d.ts

@@ -0,0 +1,28 @@
+import { Hono } from "hono";
+import type { PdppAuthorizationService } from "@opendatalabs/personal-server-ts-core/ports/pdpp-auth";
+import { type PdppInstanceBinding } from "../storage/pdpp-records-sqlite-store.js";
+export interface PdppConnectionStore {
+    listConnections(sourceId: string): PdppInstanceBinding[];
+    getInstanceBinding(instance: string): PdppInstanceBinding;
+    registerConnection(input: {
+        instance: string;
+        sourceId: string;
+        method: string;
+        label: string;
+    }): PdppInstanceBinding;
+    deleteConnection(instance: string): PdppInstanceBinding;
+}
+export interface PdppConnectionRouteDeps {
+    store: PdppConnectionStore;
+    auth: PdppAuthorizationService;
+    ownerSubjectId: string;
+    /** Known method ids keyed by source id. */
+    connectionMethods: Map<string, string[]>;
+    /** Active per-instance writer methods for canonical-enabled sources. */
+    configuredMethods: Map<string, string[]>;
+    canonicalSourceIds: Set<string>;
+    /** Source ids in the connection registry. */
+    sourceIds: Set<string>;
+}
+export declare function pdppConnectionRoutes(deps: PdppConnectionRouteDeps): Hono;
+//# sourceMappingURL=pdpp-connections.d.ts.map

package/dist/routes/pdpp-connections.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pdpp-connections.d.ts","sourceRoot":"","sources":["../../src/routes/pdpp-connections.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,uDAAuD,CAAC;AACtG,OAAO,EAEL,KAAK,mBAAmB,EACzB,MAAM,yCAAyC,CAAC;AAGjD,MAAM,WAAW,mBAAmB;IAClC,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,mBAAmB,EAAE,CAAC;IACzD,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,mBAAmB,CAAC;IAC1D,kBAAkB,CAAC,KAAK,EAAE;QACxB,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,EAAE,MAAM,CAAC;KACf,GAAG,mBAAmB,CAAC;IACxB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,mBAAmB,CAAC;CACzD;AAED,MAAM,WAAW,uBAAuB;IACtC,KAAK,EAAE,mBAAmB,CAAC;IAC3B,IAAI,EAAE,wBAAwB,CAAC;IAC/B,cAAc,EAAE,MAAM,CAAC;IACvB,2CAA2C;IAC3C,iBAAiB,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IACzC,wEAAwE;IACxE,iBAAiB,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IACzC,kBAAkB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAChC,6CAA6C;IAC7C,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;CACxB;AA8BD,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,uBAAuB,GAAG,IAAI,CA8JxE"}

package/dist/routes/pdpp-connections.js

@@ -0,0 +1,144 @@
+import { Hono } from "hono";
+import { PdppBindingError, } from "../storage/pdpp-records-sqlite-store.js";
+import { resolveRetainedSourceId } from "../pdpp/source-id-compat.js";
+function jsonError(code, message, status) {
+    return Response.json({ error: { code, message } }, { status });
+}
+const CONNECTION_ID = /^conn_[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/;
+function isConnectionId(id, owner, sourceId) {
+    return (CONNECTION_ID.test(id) ||
+        (sourceId !== undefined &&
+            id ===
+                `${sourceId.split("/").filter(Boolean).pop() ?? sourceId}:${owner.toLowerCase()}`));
+}
+function connectionJson(binding, sourceId = binding.sourceId) {
+    return {
+        connection_id: binding.instance,
+        source_id: sourceId,
+        method_id: binding.method,
+        label: binding.label,
+    };
+}
+export function pdppConnectionRoutes(deps) {
+    const app = new Hono();
+    async function owner(request) {
+        const token = request.headers
+            .get("authorization")
+            ?.match(/^Bearer\s+(.+)$/i)?.[1];
+        if (!token)
+            return jsonError("authentication_error", "Owner token required", 401);
+        const context = await deps.auth.resolveToken(token);
+        if (!context.active ||
+            context.tokenKind !== "owner" ||
+            !context.subjectId ||
+            !context.sourceId ||
+            context.subjectId.toLowerCase() !== deps.ownerSubjectId.toLowerCase()) {
+            return jsonError("authentication_error", "Owner token required", 401);
+        }
+        return { subjectId: context.subjectId, sourceId: context.sourceId };
+    }
+    app.get("/pdpp/capabilities", (c) => c.json({ capabilities: ["connections_v1"] }));
+    app.get("/pdpp/connections", async (c) => {
+        const requestedSourceId = c.req.query("source_id");
+        const sourceId = requestedSourceId
+            ? resolveRetainedSourceId(requestedSourceId, deps.sourceIds)
+            : undefined;
+        if (!requestedSourceId || !sourceId) {
+            return jsonError("not_found", "Source declaration not found", 404);
+        }
+        const ownerScope = await owner(c.req.raw);
+        if (ownerScope instanceof Response)
+            return ownerScope;
+        if (ownerScope.sourceId !== sourceId) {
+            return jsonError("access_denied", "Owner token has a different source scope", 403);
+        }
+        return c.json({
+            connections: deps.store
+                .listConnections(sourceId)
+                .map((connection) => connectionJson(connection, requestedSourceId)),
+        });
+    });
+    app.put("/pdpp/connections/:connectionId", async (c) => {
+        const connectionId = c.req.param("connectionId");
+        let body;
+        try {
+            body = await c.req.json();
+        }
+        catch {
+            return jsonError("invalid_request", "Body must be JSON", 400);
+        }
+        if (!body || typeof body !== "object" || Array.isArray(body)) {
+            return jsonError("invalid_request", "Body must be an object", 400);
+        }
+        const input = body;
+        const requestedSourceId = input.source_id;
+        const sourceId = typeof requestedSourceId === "string"
+            ? resolveRetainedSourceId(requestedSourceId, deps.sourceIds)
+            : undefined;
+        if (!sourceId ||
+            typeof input.method_id !== "string" ||
+            typeof input.label !== "string") {
+            return jsonError("invalid_request", "source_id, method_id and label are required", 400);
+        }
+        const ownerScope = await owner(c.req.raw);
+        if (ownerScope instanceof Response)
+            return ownerScope;
+        if (ownerScope.sourceId !== sourceId) {
+            return jsonError("access_denied", "Owner token has a different source scope", 403);
+        }
+        if (!isConnectionId(connectionId, ownerScope.subjectId, sourceId)) {
+            return jsonError("connection_id_invalid", "Connection id is invalid", 400);
+        }
+        const configured = deps.connectionMethods.get(sourceId) ?? [];
+        if (configured.length !== 1 || configured[0] !== input.method_id) {
+            return jsonError("method_inactive", "Method is not active for this source", 409);
+        }
+        try {
+            const binding = deps.store.registerConnection({
+                instance: connectionId,
+                sourceId,
+                method: input.method_id,
+                label: input.label,
+            });
+            if (deps.canonicalSourceIds.has(sourceId)) {
+                deps.configuredMethods.set(connectionId, [input.method_id]);
+            }
+            return c.json(connectionJson(binding), 200);
+        }
+        catch (error) {
+            if (error instanceof PdppBindingError) {
+                const status = error.reason === "connection_id_invalid" ? 400 : 409;
+                return jsonError(error.reason, error.reason, status);
+            }
+            throw error;
+        }
+    });
+    app.delete("/pdpp/connections/:connectionId", async (c) => {
+        const connectionId = c.req.param("connectionId");
+        const ownerScope = await owner(c.req.raw);
+        if (ownerScope instanceof Response)
+            return ownerScope;
+        const current = deps.store.getInstanceBinding(connectionId);
+        if (!current.sourceId ||
+            !deps.sourceIds.has(current.sourceId) ||
+            !isConnectionId(connectionId, ownerScope.subjectId, current.sourceId)) {
+            return jsonError("not_found", "Connection not found", 404);
+        }
+        if (ownerScope.sourceId !== current.sourceId) {
+            return jsonError("access_denied", "Owner token has a different source scope", 403);
+        }
+        if (current.deletedAt !== null)
+            return c.json(connectionJson(current), 200);
+        try {
+            return c.json(connectionJson(deps.store.deleteConnection(connectionId)), 200);
+        }
+        catch (error) {
+            if (error instanceof PdppBindingError) {
+                return jsonError(error.reason, error.reason, 409);
+            }
+            throw error;
+        }
+    });
+    return app;
+}
+//# sourceMappingURL=pdpp-connections.js.map

package/dist/routes/pdpp-connections.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pdpp-connections.js","sourceRoot":"","sources":["../../src/routes/pdpp-connections.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EACL,gBAAgB,GAEjB,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AA2BtE,SAAS,SAAS,CAAC,IAAY,EAAE,OAAe,EAAE,MAAc;IAC9D,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;AACjE,CAAC;AAED,MAAM,aAAa,GACjB,4EAA4E,CAAC;AAE/E,SAAS,cAAc,CAAC,EAAU,EAAE,KAAa,EAAE,QAAiB;IAClE,OAAO,CACL,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,CAAC,QAAQ,KAAK,SAAS;YACrB,EAAE;gBACA,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,IAAI,QAAQ,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC,CACvF,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CACrB,OAA4B,EAC5B,QAAQ,GAAG,OAAO,CAAC,QAAQ;IAE3B,OAAO;QACL,aAAa,EAAE,OAAO,CAAC,QAAQ;QAC/B,SAAS,EAAE,QAAQ;QACnB,SAAS,EAAE,OAAO,CAAC,MAAM;QACzB,KAAK,EAAE,OAAO,CAAC,KAAK;KACrB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,IAA6B;IAChE,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IAEvB,KAAK,UAAU,KAAK,CAClB,OAAgB;QAEhB,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO;aAC1B,GAAG,CAAC,eAAe,CAAC;YACrB,EAAE,KAAK,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACnC,IAAI,CAAC,KAAK;YACR,OAAO,SAAS,CAAC,sBAAsB,EAAE,sBAAsB,EAAE,GAAG,CAAC,CAAC;QACxE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QACpD,IACE,CAAC,OAAO,CAAC,MAAM;YACf,OAAO,CAAC,SAAS,KAAK,OAAO;YAC7B,CAAC,OAAO,CAAC,SAAS;YAClB,CAAC,OAAO,CAAC,QAAQ;YACjB,OAAO,CAAC,SAAS,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,cAAc,CAAC,WAAW,EAAE,EACrE,CAAC;YACD,OAAO,SAAS,CAAC,sBAAsB,EAAE,sBAAsB,EAAE,GAAG,CAAC,CAAC;QACxE,CAAC;QACD,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;IACtE,CAAC;IAED,GAAG,CAAC,GAAG,CAAC,oBAAoB,EAAE,CAAC,CAAC,EAAE,EAAE,CAClC,CAAC,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAC7C,CAAC;IAEF,GAAG,CAAC,GAAG,CAAC,mBAAmB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACvC,MAAM,iBAAiB,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACnD,MAAM,QAAQ,GAAG,iBAAiB;YAChC,CAAC,CAAC,uBAAuB,CAAC,iBAAiB,EAAE,IAAI,CAAC,SAAS,CAAC;YAC5D,CAAC,CAAC,SAAS,CAAC;QACd,IAAI,CAAC,iBAAiB,IAAI,CAAC,QAAQ,EAAE,CAAC;YACpC,OAAO,SAAS,CAAC,WAAW,EAAE,8BAA8B,EAAE,GAAG,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC1C,IAAI,UAAU,YAAY,QAAQ;YAAE,OAAO,UAAU,CAAC;QACtD,IAAI,UAAU,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACrC,OAAO,SAAS,CACd,eAAe,EACf,0CAA0C,EAC1C,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,WAAW,EAAE,IAAI,CAAC,KAAK;iBACpB,eAAe,CAAC,QAAQ,CAAC;iBACzB,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,cAAc,CAAC,UAAU,EAAE,iBAAiB,CAAC,CAAC;SACtE,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,iCAAiC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACrD,MAAM,YAAY,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QACjD,IAAI,IAAa,CAAC;QAClB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC,iBAAiB,EAAE,mBAAmB,EAAE,GAAG,CAAC,CAAC;QAChE,CAAC;QACD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7D,OAAO,SAAS,CAAC,iBAAiB,EAAE,wBAAwB,EAAE,GAAG,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,KAAK,GAAG,IAA+B,CAAC;QAC9C,MAAM,iBAAiB,GAAG,KAAK,CAAC,SAAS,CAAC;QAC1C,MAAM,QAAQ,GACZ,OAAO,iBAAiB,KAAK,QAAQ;YACnC,CAAC,CAAC,uBAAuB,CAAC,iBAAiB,EAAE,IAAI,CAAC,SAAS,CAAC;YAC5D,CAAC,CAAC,SAAS,CAAC;QAChB,IACE,CAAC,QAAQ;YACT,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;YACnC,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,EAC/B,CAAC;YACD,OAAO,SAAS,CACd,iBAAiB,EACjB,6CAA6C,EAC7C,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC1C,IAAI,UAAU,YAAY,QAAQ;YAAE,OAAO,UAAU,CAAC;QACtD,IAAI,UAAU,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACrC,OAAO,SAAS,CACd,eAAe,EACf,0CAA0C,EAC1C,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,cAAc,CAAC,YAAY,EAAE,UAAU,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,CAAC;YAClE,OAAO,SAAS,CACd,uBAAuB,EACvB,0BAA0B,EAC1B,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC9D,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,SAAS,EAAE,CAAC;YACjE,OAAO,SAAS,CACd,iBAAiB,EACjB,sCAAsC,EACtC,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC;gBAC5C,QAAQ,EAAE,YAAY;gBACtB,QAAQ;gBACR,MAAM,EAAE,KAAK,CAAC,SAAS;gBACvB,KAAK,EAAE,KAAK,CAAC,KAAK;aACnB,CAAC,CAAC;YACH,IAAI,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC1C,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;YAC9D,CAAC;YACD,OAAO,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,gBAAgB,EAAE,CAAC;gBACtC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,KAAK,uBAAuB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;gBACpE,OAAO,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YACvD,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,MAAM,CAAC,iCAAiC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACxD,MAAM,YAAY,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QACjD,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC1C,IAAI,UAAU,YAAY,QAAQ;YAAE,OAAO,UAAU,CAAC;QACtD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC;QAC5D,IACE,CAAC,OAAO,CAAC,QAAQ;YACjB,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC;YACrC,CAAC,cAAc,CAAC,YAAY,EAAE,UAAU,CAAC,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC,EACrE,CAAC;YACD,OAAO,SAAS,CAAC,WAAW,EAAE,sBAAsB,EAAE,GAAG,CAAC,CAAC;QAC7D,CAAC;QACD,IAAI,UAAU,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ,EAAE,CAAC;YAC7C,OAAO,SAAS,CACd,eAAe,EACf,0CAA0C,EAC1C,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,CAAC,SAAS,KAAK,IAAI;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,CAAC;QAC5E,IAAI,CAAC;YACH,OAAO,CAAC,CAAC,IAAI,CACX,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC,EACzD,GAAG,CACJ,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,gBAAgB,EAAE,CAAC;gBACtC,OAAO,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YACpD,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/routes/pdpp-declarations.d.ts

@@ -0,0 +1,58 @@
+/**
+ * Declaration submission (§5 declaration acceptance).
+ *
+ * `POST /pdpp/declarations` — offer a SourceDeclaration and get an accept or a
+ * refusal, in this server lifetime.
+ *
+ * ## Why this route exists
+ *
+ * The AS already had a real validator (`parseDeclaration`) and a real trust
+ * policy (the connector gate), but both ran only at construction: declarations
+ * came from `config.pdpp.declarationPaths`, were parsed once, and were pinned.
+ * Asking "would you accept this document?" therefore meant editing config and
+ * restarting the process. That is not merely inconvenient — it makes the
+ * question unanswerable. A restart-per-submission puts a control and its
+ * negative case in two different server lifetimes, so what gets measured is
+ * what survives a reboot, not what the AS refuses at an acceptance surface.
+ *
+ * ## Why it is operator-authenticated and NOT client-reachable
+ *
+ * A declaration asserts authority over a source: which streams exist, which
+ * fields they have, what an owner is consenting to when they approve a grant
+ * against it. A client that can submit its own declaration can declare itself
+ * authority over any source and then request a grant against the shape it
+ * just invented, which defeats the entire §5 trust model. So the credential
+ * here is the operator's — the same authority that may edit
+ * `declarationPaths` — and never a client token. Absent a configured operator
+ * credential the route refuses everything, because a submission surface that
+ * fails open is worse than no submission surface.
+ *
+ * ## The response contract
+ *
+ * Acceptance is `200` with the snapshot now retained for the key, so a caller
+ * can see what is actually held rather than inferring it from a bare 204.
+ * Refusal is `400` with `{ error, error_description }`, where `error` is the
+ * `DeclarationFailureCode` the validator produced. Acceptance is idempotent
+ * for an identical resubmission: a positive control has to be runnable twice.
+ */
+import { Hono } from "hono";
+import type { Logger } from "pino";
+import type { MutableDeclarationRegistry } from "../pdpp/declaration-registry.js";
+export interface PdppDeclarationRouteDeps {
+    logger: Logger;
+    registry: MutableDeclarationRegistry;
+    /**
+     * The connector inventory, for the response's benefit only — the registry
+     * applies the gate itself. Kept in the deps so a caller can see the two are
+     * meant to agree.
+     */
+    supportedConnectors: string[];
+    /**
+     * The operator credential. Undefined disables the route entirely (every
+     * request is refused), which is the safe reading of "no credential
+     * configured" for a surface that decides what this server trusts.
+     */
+    operatorToken?: string;
+}
+export declare function pdppDeclarationRoutes(deps: PdppDeclarationRouteDeps): Hono;
+//# sourceMappingURL=pdpp-declarations.d.ts.map

package/dist/routes/pdpp-declarations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pdpp-declarations.d.ts","sourceRoot":"","sources":["../../src/routes/pdpp-declarations.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,MAAM,CAAC;AACnC,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAElF,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,0BAA0B,CAAC;IACrC;;;;OAIG;IACH,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAC9B;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,wBAAwB,GAAG,IAAI,CA+D1E"}

package/dist/routes/pdpp-declarations.js

@@ -0,0 +1,94 @@
+/**
+ * Declaration submission (§5 declaration acceptance).
+ *
+ * `POST /pdpp/declarations` — offer a SourceDeclaration and get an accept or a
+ * refusal, in this server lifetime.
+ *
+ * ## Why this route exists
+ *
+ * The AS already had a real validator (`parseDeclaration`) and a real trust
+ * policy (the connector gate), but both ran only at construction: declarations
+ * came from `config.pdpp.declarationPaths`, were parsed once, and were pinned.
+ * Asking "would you accept this document?" therefore meant editing config and
+ * restarting the process. That is not merely inconvenient — it makes the
+ * question unanswerable. A restart-per-submission puts a control and its
+ * negative case in two different server lifetimes, so what gets measured is
+ * what survives a reboot, not what the AS refuses at an acceptance surface.
+ *
+ * ## Why it is operator-authenticated and NOT client-reachable
+ *
+ * A declaration asserts authority over a source: which streams exist, which
+ * fields they have, what an owner is consenting to when they approve a grant
+ * against it. A client that can submit its own declaration can declare itself
+ * authority over any source and then request a grant against the shape it
+ * just invented, which defeats the entire §5 trust model. So the credential
+ * here is the operator's — the same authority that may edit
+ * `declarationPaths` — and never a client token. Absent a configured operator
+ * credential the route refuses everything, because a submission surface that
+ * fails open is worse than no submission surface.
+ *
+ * ## The response contract
+ *
+ * Acceptance is `200` with the snapshot now retained for the key, so a caller
+ * can see what is actually held rather than inferring it from a bare 204.
+ * Refusal is `400` with `{ error, error_description }`, where `error` is the
+ * `DeclarationFailureCode` the validator produced. Acceptance is idempotent
+ * for an identical resubmission: a positive control has to be runnable twice.
+ */
+import { Hono } from "hono";
+import { timingSafeEqual } from "node:crypto";
+export function pdppDeclarationRoutes(deps) {
+    const app = new Hono();
+    app.post("/declarations", async (c) => {
+        if (!authorized(c.req.header("authorization"), deps.operatorToken)) {
+            return c.json({
+                error: "unauthorized",
+                error_description: "Declaration submission requires the operator credential",
+            }, 401, { "Cache-Control": "no-store" });
+        }
+        // Read the raw bytes, not a parsed body. The digest a producer's envelope
+        // is later checked against is taken over exactly what was submitted, so
+        // re-serializing a parsed object here would change the digest for
+        // formatting alone and quietly break verification.
+        const document = await c.req.text();
+        const result = deps.registry.submit(document);
+        if (!result.ok) {
+            deps.logger.warn({ code: result.failure.code, reason: result.failure.message }, "PDPP declaration refused");
+            return c.json({
+                error: result.failure.code,
+                error_description: result.failure.message,
+            }, 400, { "Cache-Control": "no-store" });
+        }
+        deps.logger.info({
+            sourceId: result.snapshot.source_id,
+            version: result.snapshot.version,
+            digest: result.snapshot.digest.slice(0, 12),
+        }, "PDPP declaration retained");
+        // What is retained for this key after the call — clause 5.8-4's retention
+        // half stays observable without a second request.
+        return c.json({
+            source_id: result.snapshot.source_id,
+            source_kind: result.snapshot.source_kind,
+            version: result.snapshot.version,
+            digest: result.snapshot.digest,
+            streams: result.snapshot.streams.map((s) => s.name),
+        }, 200, { "Cache-Control": "no-store" });
+    });
+    return app;
+}
+/**
+ * Constant-time bearer comparison. A submission surface that decides what the
+ * server trusts is worth not leaking its credential a byte at a time.
+ */
+function authorized(header, expected) {
+    if (!expected)
+        return false;
+    if (!header?.toLowerCase().startsWith("bearer "))
+        return false;
+    const presented = Buffer.from(header.slice(7).trim());
+    const secret = Buffer.from(expected);
+    if (presented.length !== secret.length)
+        return false;
+    return timingSafeEqual(presented, secret);
+}
+//# sourceMappingURL=pdpp-declarations.js.map