@panguard-ai/panguard 1.4.14 → 1.4.16

package/dist/cli/commands/serve-admin.js

@@ -1,302 +0,0 @@
-/**
- * Admin and Manager proxy route handlers for panguard serve.
- */
-import { sendJson } from './serve-types.js';
-/**
- * Handle admin API routes (/api/admin/*, /api/manager/*).
- * Returns true if the route was handled, false otherwise.
- */
-export async function handleAdminRoutes(req, res, url, pathname, ctx) {
-    const { handlers, managerProxy, threatDb } = ctx;
-    // ── Admin API routes ─────────────────────────────────────────
-    if (pathname === '/api/admin/dashboard') {
-        handlers.handleAdminDashboard(req, res);
-        return true;
-    }
-    if (pathname === '/api/admin/users/search') {
-        handlers.handleAdminUsersSearch(req, res);
-        return true;
-    }
-    if (pathname === '/api/admin/users') {
-        handlers.handleAdminUsers(req, res);
-        return true;
-    }
-    if (pathname === '/api/admin/stats') {
-        handlers.handleAdminStats(req, res);
-        return true;
-    }
-    if (pathname === '/api/admin/sessions') {
-        if (req.method === 'GET') {
-            handlers.handleAdminSessions(req, res);
-        }
-        else {
-            sendJson(res, 405, { ok: false, error: 'Method not allowed' });
-        }
-        return true;
-    }
-    if (pathname === '/api/admin/activity') {
-        handlers.handleAdminActivity(req, res);
-        return true;
-    }
-    if (pathname === '/api/admin/audit/actions') {
-        handlers.handleAdminAuditActions(req, res);
-        return true;
-    }
-    if (pathname === '/api/admin/audit') {
-        handlers.handleAdminAuditLog(req, res);
-        return true;
-    }
-    if (pathname === '/api/admin/usage') {
-        handlers.handleAdminUsageOverview(req, res);
-        return true;
-    }
-    if (pathname === '/api/admin/users/bulk-action') {
-        await handlers.handleAdminBulkAction(req, res);
-        return true;
-    }
-    // /api/admin/sessions/:id (DELETE)
-    const sessionRevokeMatch = pathname.match(/^\/api\/admin\/sessions\/(\d+)$/);
-    if (sessionRevokeMatch) {
-        handlers.handleAdminSessionRevoke(req, res, sessionRevokeMatch[1]);
-        return true;
-    }
-    // /api/admin/users/:id/tier
-    const tierMatch = pathname.match(/^\/api\/admin\/users\/(\d+)\/tier$/);
-    if (tierMatch) {
-        await handlers.handleAdminUpdateTier(req, res, tierMatch[1]);
-        return true;
-    }
-    // /api/admin/users/:id/role
-    const roleMatch = pathname.match(/^\/api\/admin\/users\/(\d+)\/role$/);
-    if (roleMatch) {
-        await handlers.handleAdminUpdateRole(req, res, roleMatch[1]);
-        return true;
-    }
-    // /api/admin/waitlist/:id/approve
-    const approveMatch = pathname.match(/^\/api\/admin\/waitlist\/(\d+)\/approve$/);
-    if (approveMatch) {
-        await handlers.handleAdminWaitlistApprove(req, res, approveMatch[1]);
-        return true;
-    }
-    // /api/admin/waitlist/:id/reject
-    const rejectMatch = pathname.match(/^\/api\/admin\/waitlist\/(\d+)\/reject$/);
-    if (rejectMatch) {
-        await handlers.handleAdminWaitlistReject(req, res, rejectMatch[1]);
-        return true;
-    }
-    // /api/admin/users/:id/suspend
-    const suspendMatch = pathname.match(/^\/api\/admin\/users\/(\d+)\/suspend$/);
-    if (suspendMatch) {
-        await handlers.handleAdminUserSuspend(req, res, suspendMatch[1]);
-        return true;
-    }
-    // /api/admin/usage/:userId
-    const usageUserMatch = pathname.match(/^\/api\/admin\/usage\/(\d+)$/);
-    if (usageUserMatch) {
-        handlers.handleAdminUsageUser(req, res, usageUserMatch[1]);
-        return true;
-    }
-    // /api/admin/users/:id (GET -- user detail)
-    const userDetailMatch = pathname.match(/^\/api\/admin\/users\/(\d+)$/);
-    if (userDetailMatch && req.method === 'GET') {
-        handlers.handleAdminUserDetail(req, res, userDetailMatch[1]);
-        return true;
-    }
-    // /api/admin/settings (GET -- environment config status)
-    if (pathname === '/api/admin/settings' && req.method === 'GET') {
-        sendJson(res, 200, {
-            ok: true,
-            data: {
-                oauth: {
-                    google: !!process.env['GOOGLE_CLIENT_ID'],
-                },
-                email: {
-                    resend: !!process.env['RESEND_API_KEY'],
-                    smtp: !!process.env['SMTP_HOST'],
-                },
-                security: {
-                    totpEnabled: true,
-                },
-                threatCloud: {
-                    endpoint: process.env['THREAT_CLOUD_ENDPOINT'] || null,
-                    apiKey: !!process.env['TC_API_KEY'],
-                },
-                notifications: {
-                    telegram: !!process.env['TELEGRAM_BOT_TOKEN'],
-                    slack: !!process.env['SLACK_WEBHOOK_URL'],
-                    email: !!process.env['RESEND_API_KEY'] || !!process.env['SMTP_HOST'],
-                },
-                manager: {
-                    key: !!process.env['PANGUARD_MANAGER_KEY'],
-                    corsOrigins: process.env['MANAGER_CORS_ORIGINS'] || '',
-                },
-            },
-        });
-        return true;
-    }
-    // Detailed health (admin-only) -- includes memory, services, threat stats
-    if (pathname === '/api/admin/health' && req.method === 'GET') {
-        const mem = process.memoryUsage();
-        const services = {
-            email: !!(process.env['RESEND_API_KEY'] || process.env['SMTP_HOST']),
-            oauth: !!process.env['GOOGLE_CLIENT_ID'],
-            errorTracking: !!process.env['SENTRY_DSN'],
-            threatCloud: !!threatDb,
-            tcApiKey: !!process.env['TC_API_KEY'],
-        };
-        let threatStats = null;
-        if (threatDb) {
-            try {
-                const s = threatDb.getStats();
-                threatStats = { rules: s.totalRules, threats: s.totalThreats };
-            }
-            catch {
-                /* ignore */
-            }
-        }
-        sendJson(res, 200, {
-            ok: true,
-            data: {
-                status: 'healthy',
-                version: process.env['npm_package_version'] ?? '0.0.0',
-                uptime: Math.round(process.uptime()),
-                db: 'connected',
-                threatStats,
-                memory: {
-                    rss: Math.round(mem.rss / 1024 / 1024),
-                    heapUsed: Math.round(mem.heapUsed / 1024 / 1024),
-                },
-                services,
-            },
-        });
-        return true;
-    }
-    // ── Manager Proxy Routes ─────────────────────────────────────
-    if (pathname === '/api/manager/api/overview' && req.method === 'GET') {
-        const result = await managerProxy.getOverview();
-        if (result.ok) {
-            sendJson(res, 200, result.data);
-        }
-        else {
-            sendJson(res, 503, { ok: false, error: result.error });
-        }
-        return true;
-    }
-    if (pathname === '/api/manager/api/agents' && req.method === 'GET') {
-        const result = await managerProxy.getAgents();
-        if (result.ok) {
-            sendJson(res, 200, result.data);
-        }
-        else {
-            sendJson(res, 503, { ok: false, error: result.error });
-        }
-        return true;
-    }
-    const managerAgentMatch = pathname.match(/^\/api\/manager\/api\/agents\/([^/]+)$/);
-    if (managerAgentMatch && req.method === 'GET') {
-        const result = await managerProxy.getAgent(managerAgentMatch[1]);
-        if (result.ok) {
-            sendJson(res, 200, result.data);
-        }
-        else {
-            const status = result.error === 'Manager service unavailable' ? 503 : 404;
-            sendJson(res, status, { ok: false, error: result.error });
-        }
-        return true;
-    }
-    if (pathname === '/api/manager/api/events' && req.method === 'GET') {
-        const urlObj = new URL(url, `http://${req.headers.host ?? 'localhost'}`);
-        const limit = parseInt(urlObj.searchParams.get('limit') ?? '50', 10) || 50;
-        const offset = parseInt(urlObj.searchParams.get('offset') ?? '0', 10) || 0;
-        const since = urlObj.searchParams.get('since') ?? undefined;
-        const result = await managerProxy.getEvents({ limit, offset, since });
-        if (result.ok) {
-            sendJson(res, 200, result.data);
-        }
-        else {
-            sendJson(res, 503, { ok: false, error: result.error });
-        }
-        return true;
-    }
-    if (pathname === '/api/manager/api/threats/summary' && req.method === 'GET') {
-        const result = await managerProxy.getThreatSummary();
-        if (result.ok) {
-            sendJson(res, 200, result.data);
-        }
-        else {
-            sendJson(res, 503, { ok: false, error: result.error });
-        }
-        return true;
-    }
-    if (pathname === '/api/manager/api/threats' && req.method === 'GET') {
-        const urlObj = new URL(url, `http://${req.headers.host ?? 'localhost'}`);
-        const since = urlObj.searchParams.get('since') ?? undefined;
-        const result = await managerProxy.getEvents({ since });
-        if (result.ok) {
-            sendJson(res, 200, result.data);
-        }
-        else {
-            sendJson(res, 503, { ok: false, error: result.error });
-        }
-        return true;
-    }
-    // ── Additional Admin Proxy Routes (without /api/manager prefix) ──
-    if (pathname === '/api/admin/agents' && req.method === 'GET') {
-        const result = await managerProxy.getAgents();
-        if (result.ok) {
-            sendJson(res, 200, { ok: true, data: result.data });
-        }
-        else {
-            sendJson(res, 503, { ok: false, error: result.error });
-        }
-        return true;
-    }
-    const adminAgentMatch = pathname.match(/^\/api\/admin\/agents\/([^/]+)$/);
-    if (adminAgentMatch && req.method === 'GET') {
-        const result = await managerProxy.getAgent(adminAgentMatch[1]);
-        if (result.ok) {
-            sendJson(res, 200, { ok: true, data: result.data });
-        }
-        else {
-            const status = result.error === 'Manager service unavailable' ? 503 : 404;
-            sendJson(res, status, { ok: false, error: result.error });
-        }
-        return true;
-    }
-    if (pathname === '/api/admin/events' && req.method === 'GET') {
-        const urlObj = new URL(url, `http://${req.headers.host ?? 'localhost'}`);
-        const limit = parseInt(urlObj.searchParams.get('limit') ?? '50', 10) || 50;
-        const offset = parseInt(urlObj.searchParams.get('offset') ?? '0', 10) || 0;
-        const since = urlObj.searchParams.get('since') ?? undefined;
-        const result = await managerProxy.getEvents({ limit, offset, since });
-        if (result.ok) {
-            sendJson(res, 200, { ok: true, data: result.data });
-        }
-        else {
-            sendJson(res, 503, { ok: false, error: result.error });
-        }
-        return true;
-    }
-    if (pathname === '/api/admin/threats' && req.method === 'GET') {
-        const result = await managerProxy.getThreatSummary();
-        if (result.ok) {
-            sendJson(res, 200, { ok: true, data: result.data });
-        }
-        else {
-            sendJson(res, 503, { ok: false, error: result.error });
-        }
-        return true;
-    }
-    if (pathname === '/api/admin/overview' && req.method === 'GET') {
-        const result = await managerProxy.getOverview();
-        if (result.ok) {
-            sendJson(res, 200, { ok: true, data: result.data });
-        }
-        else {
-            sendJson(res, 503, { ok: false, error: result.error });
-        }
-        return true;
-    }
-    return false;
-}
-//# sourceMappingURL=serve-admin.js.map

package/dist/cli/commands/serve-admin.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"serve-admin.js","sourceRoot":"","sources":["../../../src/cli/commands/serve-admin.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE5C;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,GAAoB,EACpB,GAAmB,EACnB,GAAW,EACX,QAAgB,EAChB,GAAiB;IAEjB,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC;IAEjD,gEAAgE;IAEhE,IAAI,QAAQ,KAAK,sBAAsB,EAAE,CAAC;QACxC,QAAQ,CAAC,oBAAoB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACxC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,QAAQ,KAAK,yBAAyB,EAAE,CAAC;QAC3C,QAAQ,CAAC,sBAAsB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC1C,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,QAAQ,KAAK,kBAAkB,EAAE,CAAC;QACpC,QAAQ,CAAC,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACpC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,QAAQ,KAAK,kBAAkB,EAAE,CAAC;QACpC,QAAQ,CAAC,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACpC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,QAAQ,KAAK,qBAAqB,EAAE,CAAC;QACvC,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YACzB,QAAQ,CAAC,mBAAmB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACzC,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;QACjE,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,QAAQ,KAAK,qBAAqB,EAAE,CAAC;QACvC,QAAQ,CAAC,mBAAmB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACvC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,QAAQ,KAAK,0BAA0B,EAAE,CAAC;QAC5C,QAAQ,CAAC,uBAAuB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC3C,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,QAAQ,KAAK,kBAAkB,EAAE,CAAC;QACpC,QAAQ,CAAC,mBAAmB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACvC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,QAAQ,KAAK,kBAAkB,EAAE,CAAC;QACpC,QAAQ,CAAC,wBAAwB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC5C,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,QAAQ,KAAK,8BAA8B,EAAE,CAAC;QAChD,MAAM,QAAQ,CAAC,qBAAqB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC/C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,mCAAmC;IACnC,MAAM,kBAAkB,GAAG,QAAQ,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAC7E,IAAI,kBAAkB,EAAE,CAAC;QACvB,QAAQ,CAAC,wBAAwB,CAAC,GAAG,EAAE,GAAG,EAAE,kBAAkB,CAAC,CAAC,CAAE,CAAC,CAAC;QACpE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,4BAA4B;IAC5B,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACvE,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,QAAQ,CAAC,qBAAqB,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC,CAAE,CAAC,CAAC;QAC9D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,4BAA4B;IAC5B,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACvE,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,QAAQ,CAAC,qBAAqB,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC,CAAE,CAAC,CAAC;QAC9D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,kCAAkC;IAClC,MAAM,YAAY,GAAG,QAAQ,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAChF,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,QAAQ,CAAC,0BAA0B,CAAC,GAAG,EAAE,GAAG,EAAE,YAAY,CAAC,CAAC,CAAE,CAAC,CAAC;QACtE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,iCAAiC;IACjC,MAAM,WAAW,GAAG,QAAQ,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC9E,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,QAAQ,CAAC,yBAAyB,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC,CAAE,CAAC,CAAC;QACpE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,+BAA+B;IAC/B,MAAM,YAAY,GAAG,QAAQ,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC7E,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,QAAQ,CAAC,sBAAsB,CAAC,GAAG,EAAE,GAAG,EAAE,YAAY,CAAC,CAAC,CAAE,CAAC,CAAC;QAClE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,2BAA2B;IAC3B,MAAM,cAAc,GAAG,QAAQ,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;IACtE,IAAI,cAAc,EAAE,CAAC;QACnB,QAAQ,CAAC,oBAAoB,CAAC,GAAG,EAAE,GAAG,EAAE,cAAc,CAAC,CAAC,CAAE,CAAC,CAAC;QAC5D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,4CAA4C;IAC5C,MAAM,eAAe,GAAG,QAAQ,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;IACvE,IAAI,eAAe,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QAC5C,QAAQ,CAAC,qBAAqB,CAAC,GAAG,EAAE,GAAG,EAAE,eAAe,CAAC,CAAC,CAAE,CAAC,CAAC;QAC9D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,yDAAyD;IACzD,IAAI,QAAQ,KAAK,qBAAqB,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QAC/D,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;YACjB,EAAE,EAAE,IAAI;YACR,IAAI,EAAE;gBACJ,KAAK,EAAE;oBACL,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;iBAC1C;gBACD,KAAK,EAAE;oBACL,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;oBACvC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;iBACjC;gBACD,QAAQ,EAAE;oBACR,WAAW,EAAE,IAAI;iBAClB;gBACD,WAAW,EAAE;oBACX,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,IAAI,IAAI;oBACtD,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;iBACpC;gBACD,aAAa,EAAE;oBACb,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;oBAC7C,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;oBACzC,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;iBACrE;gBACD,OAAO,EAAE;oBACP,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;oBAC1C,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,IAAI,EAAE;iBACvD;aACF;SACF,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAED,0EAA0E;IAC1E,IAAI,QAAQ,KAAK,mBAAmB,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QAC7D,MAAM,GAAG,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;QAClC,MAAM,QAAQ,GAAG;YACf,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACpE,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;YACxC,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;YAC1C,WAAW,EAAE,CAAC,CAAC,QAAQ;YACvB,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;SACtC,CAAC;QACF,IAAI,WAAW,GAAG,IAAI,CAAC;QACvB,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC;gBACH,MAAM,CAAC,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC;gBAC9B,WAAW,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC,YAAY,EAAE,CAAC;YACjE,CAAC;YAAC,MAAM,CAAC;gBACP,YAAY;YACd,CAAC;QACH,CAAC;QACD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;YACjB,EAAE,EAAE,IAAI;YACR,IAAI,EAAE;gBACJ,MAAM,EAAE,SAAS;gBACjB,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,IAAI,OAAO;gBACtD,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;gBACpC,EAAE,EAAE,WAAW;gBACf,WAAW;gBACX,MAAM,EAAE;oBACN,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;oBACtC,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,GAAG,IAAI,GAAG,IAAI,CAAC;iBACjD;gBACD,QAAQ;aACT;SACF,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAED,gEAAgE;IAEhE,IAAI,QAAQ,KAAK,2BAA2B,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QACrE,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,WAAW,EAAE,CAAC;QAChD,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;YACd,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QAClC,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QACzD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,QAAQ,KAAK,yBAAyB,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QACnE,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,SAAS,EAAE,CAAC;QAC9C,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;YACd,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QAClC,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QACzD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,iBAAiB,GAAG,QAAQ,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAC;IACnF,IAAI,iBAAiB,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QAC9C,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,CAAE,CAAC,CAAC;QAClE,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;YACd,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QAClC,CAAC;aAAM,CAAC;YACN,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,KAAK,6BAA6B,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;YAC1E,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QAC5D,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,QAAQ,KAAK,yBAAyB,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QACnE,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,EAAE,UAAU,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,EAAE,CAAC,CAAC;QACzE,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;QAC3E,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;QAC3E,MAAM,KAAK,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC;QAE5D,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QACtE,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;YACd,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QAClC,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QACzD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,QAAQ,KAAK,kCAAkC,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QAC5E,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,gBAAgB,EAAE,CAAC;QACrD,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;YACd,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QAClC,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QACzD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,QAAQ,KAAK,0BAA0B,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QACpE,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,EAAE,UAAU,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,EAAE,CAAC,CAAC;QACzE,MAAM,KAAK,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC;QAE5D,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QACvD,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;YACd,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QAClC,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QACzD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,oEAAoE;IAEpE,IAAI,QAAQ,KAAK,mBAAmB,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QAC7D,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,SAAS,EAAE,CAAC;QAC9C,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;YACd,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACtD,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QACzD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,eAAe,GAAG,QAAQ,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAC1E,IAAI,eAAe,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAE,CAAC,CAAC;QAChE,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;YACd,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACtD,CAAC;aAAM,CAAC;YACN,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,KAAK,6BAA6B,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;YAC1E,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QAC5D,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,QAAQ,KAAK,mBAAmB,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QAC7D,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,EAAE,UAAU,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,EAAE,CAAC,CAAC;QACzE,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;QAC3E,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;QAC3E,MAAM,KAAK,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC;QAE5D,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QACtE,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;YACd,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACtD,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QACzD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,QAAQ,KAAK,oBAAoB,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QAC9D,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,gBAAgB,EAAE,CAAC;QACrD,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;YACd,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACtD,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QACzD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,QAAQ,KAAK,qBAAqB,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QAC/D,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,WAAW,EAAE,CAAC;QAChD,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;YACd,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACtD,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QACzD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/cli/commands/serve-auth.d.ts

@@ -1,11 +0,0 @@
-/**
- * Auth, waitlist, and usage route handlers for panguard serve.
- */
-import type { IncomingMessage, ServerResponse } from 'node:http';
-import type { RouteContext } from './serve-types.js';
-/**
- * Handle auth API routes (/api/auth/*, /api/waitlist/*, /api/usage/*).
- * Returns true if the route was handled, false otherwise.
- */
-export declare function handleAuthRoutes(req: IncomingMessage, res: ServerResponse, url: string, pathname: string, ctx: RouteContext): Promise<boolean>;
-//# sourceMappingURL=serve-auth.d.ts.map

package/dist/cli/commands/serve-auth.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"serve-auth.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/serve-auth.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAErD;;;GAGG;AACH,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,MAAM,EAChB,GAAG,EAAE,YAAY,GAChB,OAAO,CAAC,OAAO,CAAC,CAqHlB"}

package/dist/cli/commands/serve-auth.js

@@ -1,119 +0,0 @@
-/**
- * Auth, waitlist, and usage route handlers for panguard serve.
- */
-/**
- * Handle auth API routes (/api/auth/*, /api/waitlist/*, /api/usage/*).
- * Returns true if the route was handled, false otherwise.
- */
-export async function handleAuthRoutes(req, res, url, pathname, ctx) {
-    const { handlers } = ctx;
-    // ── Auth API routes ──────────────────────────────────────────
-    if (pathname === '/api/auth/register') {
-        await handlers.handleRegister(req, res);
-        return true;
-    }
-    if (pathname === '/api/auth/login') {
-        await handlers.handleLogin(req, res);
-        return true;
-    }
-    if (pathname === '/api/auth/logout') {
-        handlers.handleLogout(req, res);
-        return true;
-    }
-    if (pathname === '/api/auth/me') {
-        handlers.handleMe(req, res);
-        return true;
-    }
-    if (pathname === '/api/auth/delete-account') {
-        await handlers.handleDeleteAccount(req, res);
-        return true;
-    }
-    if (pathname === '/api/auth/export-data') {
-        handlers.handleExportData(req, res);
-        return true;
-    }
-    if (pathname === '/api/auth/totp/setup') {
-        handlers.handleTotpSetup(req, res);
-        return true;
-    }
-    if (pathname === '/api/auth/totp/verify') {
-        await handlers.handleTotpVerify(req, res);
-        return true;
-    }
-    if (pathname === '/api/auth/totp/disable') {
-        await handlers.handleTotpDisable(req, res);
-        return true;
-    }
-    if (pathname === '/api/auth/totp/status') {
-        handlers.handleTotpStatus(req, res);
-        return true;
-    }
-    if (pathname === '/api/auth/forgot-password') {
-        await handlers.handleForgotPassword(req, res);
-        return true;
-    }
-    if (pathname === '/api/auth/reset-password') {
-        await handlers.handleResetPassword(req, res);
-        return true;
-    }
-    if (pathname === '/api/auth/google') {
-        handlers.handleGoogleAuth(req, res);
-        return true;
-    }
-    if (pathname.startsWith('/api/auth/google/callback')) {
-        const urlObj = new URL(url, `http://${req.headers.host ?? 'localhost'}`);
-        const code = urlObj.searchParams.get('code') ?? '';
-        const state = urlObj.searchParams.get('state');
-        await handlers.handleGoogleCallback(req, res, code, state);
-        return true;
-    }
-    if (pathname === '/api/auth/oauth/exchange') {
-        await handlers.handleOAuthExchange(req, res);
-        return true;
-    }
-    if (pathname === '/api/auth/cli') {
-        handlers.handleCliAuth(req, res);
-        return true;
-    }
-    if (pathname === '/api/auth/cli/exchange') {
-        await handlers.handleCliExchange(req, res);
-        return true;
-    }
-    // ── Waitlist API routes ──────────────────────────────────────
-    if (pathname === '/api/waitlist/join') {
-        await handlers.handleWaitlistJoin(req, res);
-        return true;
-    }
-    if (pathname.startsWith('/api/waitlist/verify/')) {
-        const token = pathname.split('/api/waitlist/verify/')[1];
-        handlers.handleWaitlistVerify(req, res, token ?? '');
-        return true;
-    }
-    if (pathname === '/api/waitlist/stats') {
-        handlers.handleWaitlistStats(req, res);
-        return true;
-    }
-    if (pathname === '/api/waitlist/list') {
-        handlers.handleWaitlistList(req, res);
-        return true;
-    }
-    // ── Usage / Quota API routes ─────────────────────────────────
-    if (pathname === '/api/usage') {
-        handlers.handleUsageSummary(req, res);
-        return true;
-    }
-    if (pathname === '/api/usage/limits') {
-        handlers.handleUsageLimits(req, res);
-        return true;
-    }
-    if (pathname === '/api/usage/check') {
-        await handlers.handleUsageCheck(req, res);
-        return true;
-    }
-    if (pathname === '/api/usage/record') {
-        await handlers.handleUsageRecord(req, res);
-        return true;
-    }
-    return false;
-}
-//# sourceMappingURL=serve-auth.js.map

package/dist/cli/commands/serve-auth.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"serve-auth.js","sourceRoot":"","sources":["../../../src/cli/commands/serve-auth.ts"],"names":[],"mappings":"AAAA;;GAEG;AAKH;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,GAAoB,EACpB,GAAmB,EACnB,GAAW,EACX,QAAgB,EAChB,GAAiB;IAEjB,MAAM,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC;IAEzB,gEAAgE;IAEhE,IAAI,QAAQ,KAAK,oBAAoB,EAAE,CAAC;QACtC,MAAM,QAAQ,CAAC,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACxC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,QAAQ,KAAK,iBAAiB,EAAE,CAAC;QACnC,MAAM,QAAQ,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACrC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,QAAQ,KAAK,kBAAkB,EAAE,CAAC;QACpC,QAAQ,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAChC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,QAAQ,KAAK,cAAc,EAAE,CAAC;QAChC,QAAQ,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC5B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,QAAQ,KAAK,0BAA0B,EAAE,CAAC;QAC5C,MAAM,QAAQ,CAAC,mBAAmB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC7C,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,QAAQ,KAAK,uBAAuB,EAAE,CAAC;QACzC,QAAQ,CAAC,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACpC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,QAAQ,KAAK,sBAAsB,EAAE,CAAC;QACxC,QAAQ,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACnC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,QAAQ,KAAK,uBAAuB,EAAE,CAAC;QACzC,MAAM,QAAQ,CAAC,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC1C,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,QAAQ,KAAK,wBAAwB,EAAE,CAAC;QAC1C,MAAM,QAAQ,CAAC,iBAAiB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC3C,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,QAAQ,KAAK,uBAAuB,EAAE,CAAC;QACzC,QAAQ,CAAC,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACpC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,QAAQ,KAAK,2BAA2B,EAAE,CAAC;QAC7C,MAAM,QAAQ,CAAC,oBAAoB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC9C,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,QAAQ,KAAK,0BAA0B,EAAE,CAAC;QAC5C,MAAM,QAAQ,CAAC,mBAAmB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC7C,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,QAAQ,KAAK,kBAAkB,EAAE,CAAC;QACpC,QAAQ,CAAC,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACpC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,QAAQ,CAAC,UAAU,CAAC,2BAA2B,CAAC,EAAE,CAAC;QACrD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,EAAE,UAAU,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,EAAE,CAAC,CAAC;QACzE,MAAM,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACnD,MAAM,KAAK,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC/C,MAAM,QAAQ,CAAC,oBAAoB,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAC3D,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,QAAQ,KAAK,0BAA0B,EAAE,CAAC;QAC5C,MAAM,QAAQ,CAAC,mBAAmB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC7C,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,QAAQ,KAAK,eAAe,EAAE,CAAC;QACjC,QAAQ,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACjC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,QAAQ,KAAK,wBAAwB,EAAE,CAAC;QAC1C,MAAM,QAAQ,CAAC,iBAAiB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC3C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,gEAAgE;IAEhE,IAAI,QAAQ,KAAK,oBAAoB,EAAE,CAAC;QACtC,MAAM,QAAQ,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC5C,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,QAAQ,CAAC,UAAU,CAAC,uBAAuB,CAAC,EAAE,CAAC;QACjD,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,CAAC;QACzD,QAAQ,CAAC,oBAAoB,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;QACrD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,QAAQ,KAAK,qBAAqB,EAAE,CAAC;QACvC,QAAQ,CAAC,mBAAmB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACvC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,QAAQ,KAAK,oBAAoB,EAAE,CAAC;QACtC,QAAQ,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACtC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,gEAAgE;IAEhE,IAAI,QAAQ,KAAK,YAAY,EAAE,CAAC;QAC9B,QAAQ,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACtC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,QAAQ,KAAK,mBAAmB,EAAE,CAAC;QACrC,QAAQ,CAAC,iBAAiB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACrC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,QAAQ,KAAK,kBAAkB,EAAE,CAAC;QACpC,MAAM,QAAQ,CAAC,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC1C,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,QAAQ,KAAK,mBAAmB,EAAE,CAAC;QACrC,MAAM,QAAQ,CAAC,iBAAiB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC3C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/cli/commands/serve-core.d.ts

@@ -1,25 +0,0 @@
-/**
- * Core middleware, health check, static file serving, and rule seeding
- * for panguard serve.
- */
-import type { IncomingMessage, ServerResponse } from 'node:http';
-import type { ThreatCloudDBInstance } from './serve-types.js';
-/**
- * Apply security headers and CORS to every response.
- * Returns true if the request was fully handled (OPTIONS preflight).
- */
-export declare function applyMiddleware(req: IncomingMessage, res: ServerResponse): boolean;
-/**
- * Handle core routes: /health, /openapi.json, /docs/api, /admin/*.
- * Returns true if the route was handled, false otherwise.
- */
-export declare function handleCoreRoutes(req: IncomingMessage, res: ServerResponse, pathname: string, db: {
-    healthCheck(): void;
-}, threatDb: ThreatCloudDBInstance, adminDir: string | undefined): boolean;
-/**
- * Seed rules from bundled config/ directory into Threat Cloud DB.
- * Reads ATR YAML files.
- * Returns count of rules seeded.
- */
-export declare function seedRulesFromBundled(threatDb: ThreatCloudDBInstance): Promise<number>;
-//# sourceMappingURL=serve-core.d.ts.map

package/dist/cli/commands/serve-core.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"serve-core.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/serve-core.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAMjE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAK9D;;;GAGG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO,CA8BlF;AAID;;;GAGG;AACH,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,QAAQ,EAAE,MAAM,EAChB,EAAE,EAAE;IAAE,WAAW,IAAI,IAAI,CAAA;CAAE,EAC3B,QAAQ,EAAE,qBAAqB,EAC/B,QAAQ,EAAE,MAAM,GAAG,SAAS,GAC3B,OAAO,CAgDT;AA2DD;;;;GAIG;AACH,wBAAsB,oBAAoB,CAAC,QAAQ,EAAE,qBAAqB,GAAG,OAAO,CAAC,MAAM,CAAC,CAqF3F"}