@stratum-hq/lib 0.1.0

package/dist/services/tenant-service.js

@@ -0,0 +1,335 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getChildren = exports.getDescendants = exports.getAncestors = exports.batchCreateTenants = exports.moveTenant = exports.deleteTenant = exports.updateTenant = exports.listTenants = exports.getTenant = exports.createTenant = void 0;
+const pool_helpers_js_1 = require("../pool-helpers.js");
+const core_1 = require("@stratum-hq/core");
+async function createTenant(pool, input) {
+    return (0, pool_helpers_js_1.withTransaction)(pool, async (client) => {
+        // Advisory lock on parent to serialize sibling inserts
+        if (input.parent_id) {
+            await client.query(`SELECT pg_advisory_xact_lock(('x' || substr(md5($1::text), 1, 16))::bit(64)::bigint)`, [input.parent_id]);
+            // Verify parent exists and is active
+            const parentRes = await client.query(`SELECT * FROM tenants WHERE id = $1`, [input.parent_id]);
+            if (parentRes.rows.length === 0) {
+                throw new core_1.TenantNotFoundError(input.parent_id);
+            }
+            if (parentRes.rows[0].status === "archived") {
+                throw new core_1.TenantArchivedError(input.parent_id);
+            }
+            const parent = parentRes.rows[0];
+            const ancestry_path = (0, core_1.appendToPath)(parent.ancestry_path, parent.id);
+            // Inherit region_id from parent if not explicitly provided
+            const regionId = input.region_id ?? parent.region_id ?? null;
+            const res = await client.query(`INSERT INTO tenants (parent_id, ancestry_path, depth, name, slug, config, metadata, isolation_strategy, status, region_id)
+         VALUES ($1, $2, $3, $4, $5, $6, $7, $8, 'active', $9)
+         RETURNING *`, [
+                input.parent_id,
+                ancestry_path,
+                (0, core_1.parseAncestryPath)(ancestry_path).length,
+                input.name,
+                input.slug,
+                JSON.stringify(input.config ?? {}),
+                JSON.stringify(input.metadata ?? {}),
+                input.isolation_strategy ?? "SHARED_RLS",
+                regionId,
+            ]);
+            return res.rows[0];
+        }
+        else {
+            // Root tenant — no parent lock needed
+            const rootRegionId = input.region_id ?? null;
+            const res = await client.query(`INSERT INTO tenants (parent_id, ancestry_path, depth, name, slug, config, metadata, isolation_strategy, status, region_id)
+         VALUES (NULL, '/', 0, $1, $2, $3, $4, $5, 'active', $6)
+         RETURNING *`, [
+                input.name,
+                input.slug,
+                JSON.stringify(input.config ?? {}),
+                JSON.stringify(input.metadata ?? {}),
+                input.isolation_strategy ?? "SHARED_RLS",
+                rootRegionId,
+            ]);
+            return res.rows[0];
+        }
+    }).catch((err) => {
+        if (err instanceof Error &&
+            "code" in err &&
+            err.code === "23505") {
+            throw new core_1.TenantAlreadyExistsError(input.slug);
+        }
+        throw err;
+    });
+}
+exports.createTenant = createTenant;
+async function getTenant(pool, id, includeArchived = false) {
+    return (0, pool_helpers_js_1.withClient)(pool, async (client) => {
+        // Always fetch the row; check archived status in application logic (single query)
+        const res = await client.query(`SELECT * FROM tenants WHERE id = $1`, [id]);
+        if (res.rows.length === 0) {
+            throw new core_1.TenantNotFoundError(id);
+        }
+        const tenant = res.rows[0];
+        if (!includeArchived && tenant.status === "archived") {
+            throw new core_1.TenantArchivedError(id);
+        }
+        return tenant;
+    });
+}
+exports.getTenant = getTenant;
+async function listTenants(pool, pagination) {
+    return (0, pool_helpers_js_1.withClient)(pool, async (client) => {
+        const limit = pagination.limit ?? 50;
+        let res;
+        if (pagination.cursor) {
+            res = await client.query(`SELECT * FROM tenants
+         WHERE status = 'active' AND id > $1
+         ORDER BY id ASC
+         LIMIT $2`, [pagination.cursor, limit + 1]);
+        }
+        else {
+            res = await client.query(`SELECT * FROM tenants
+         WHERE status = 'active'
+         ORDER BY id ASC
+         LIMIT $1`, [limit + 1]);
+        }
+        const rows = res.rows;
+        const has_more = rows.length > limit;
+        const data = has_more ? rows.slice(0, limit) : rows;
+        const next_cursor = has_more ? data[data.length - 1].id : null;
+        return { data, next_cursor, has_more };
+    });
+}
+exports.listTenants = listTenants;
+async function updateTenant(pool, id, patch) {
+    return (0, pool_helpers_js_1.withTransaction)(pool, async (client) => {
+        const existing = await client.query(`SELECT * FROM tenants WHERE id = $1 AND status != 'archived'`, [id]);
+        if (existing.rows.length === 0) {
+            throw new core_1.TenantNotFoundError(id);
+        }
+        const sets = [];
+        const values = [];
+        let idx = 1;
+        if (patch.name !== undefined) {
+            sets.push(`name = $${idx++}`);
+            values.push(patch.name);
+        }
+        if (patch.slug !== undefined) {
+            sets.push(`slug = $${idx++}`);
+            values.push(patch.slug);
+        }
+        if (patch.config !== undefined) {
+            sets.push(`config = $${idx++}`);
+            values.push(JSON.stringify(patch.config));
+        }
+        if (patch.metadata !== undefined) {
+            sets.push(`metadata = $${idx++}`);
+            values.push(JSON.stringify(patch.metadata));
+        }
+        if (sets.length === 0) {
+            return existing.rows[0];
+        }
+        sets.push(`updated_at = now()`);
+        values.push(id);
+        const res = await client.query(`UPDATE tenants SET ${sets.join(", ")} WHERE id = $${idx} RETURNING *`, values);
+        return res.rows[0];
+    }).catch((err) => {
+        if (err instanceof Error &&
+            "code" in err &&
+            err.code === "23505") {
+            throw new core_1.TenantAlreadyExistsError(patch.slug ?? "");
+        }
+        throw err;
+    });
+}
+exports.updateTenant = updateTenant;
+async function deleteTenant(pool, id) {
+    return (0, pool_helpers_js_1.withTransaction)(pool, async (client) => {
+        const existing = await client.query(`SELECT * FROM tenants WHERE id = $1 AND status != 'archived'`, [id]);
+        if (existing.rows.length === 0) {
+            throw new core_1.TenantNotFoundError(id);
+        }
+        // Check for active children
+        const childrenRes = await client.query(`SELECT COUNT(*) as count FROM tenants WHERE parent_id = $1 AND status = 'active'`, [id]);
+        if (parseInt(childrenRes.rows[0].count, 10) > 0) {
+            throw new core_1.TenantHasChildrenError(id);
+        }
+        await client.query(`UPDATE tenants SET status = 'archived', deleted_at = now(), updated_at = now() WHERE id = $1`, [id]);
+    });
+}
+exports.deleteTenant = deleteTenant;
+async function moveTenant(pool, id, newParentId) {
+    return (0, pool_helpers_js_1.withTransaction)(pool, async (client) => {
+        // Lock both old and new parents to prevent concurrent moves
+        await client.query(`SELECT pg_advisory_xact_lock(('x' || substr(md5($1::text), 1, 16))::bit(64)::bigint)`, [id]);
+        await client.query(`SELECT pg_advisory_xact_lock(('x' || substr(md5($1::text), 1, 16))::bit(64)::bigint)`, [newParentId]);
+        // Load tenant being moved
+        const tenantRes = await client.query(`SELECT * FROM tenants WHERE id = $1 AND status != 'archived'`, [id]);
+        if (tenantRes.rows.length === 0) {
+            throw new core_1.TenantNotFoundError(id);
+        }
+        const tenant = tenantRes.rows[0];
+        // Load new parent
+        const newParentRes = await client.query(`SELECT * FROM tenants WHERE id = $1 AND status != 'archived'`, [newParentId]);
+        if (newParentRes.rows.length === 0) {
+            throw new core_1.TenantNotFoundError(newParentId);
+        }
+        const newParent = newParentRes.rows[0];
+        // Cycle detection: newParent must not be a descendant of tenant
+        if (newParent.id === tenant.id ||
+            (0, core_1.isDescendantOf)(newParent.ancestry_path, tenant.ancestry_path) ||
+            (newParent.ancestry_path !== "/" &&
+                newParent.ancestry_path.includes(tenant.id))) {
+            throw new core_1.TenantCycleDetectedError(id, newParentId);
+        }
+        const oldAncestryPath = tenant.ancestry_path;
+        const newAncestryPath = (0, core_1.appendToPath)(newParent.ancestry_path, newParent.id);
+        const newDepth = (0, core_1.parseAncestryPath)(newAncestryPath).length;
+        // Update the moved tenant
+        const updatedRes = await client.query(`UPDATE tenants
+       SET parent_id = $1,
+           ancestry_path = $2,
+           depth = $3,
+           updated_at = now()
+       WHERE id = $4
+       RETURNING *`, [newParentId, newAncestryPath, newDepth, id]);
+        // Recompute ancestry_path for all descendants.
+        // The moved tenant's old ancestry_path is oldAncestryPath.
+        // Descendants have ancestry_path starting with oldAncestryPath + "/" + id.
+        const oldPrefix = oldAncestryPath === "/"
+            ? `/${id}`
+            : `${oldAncestryPath}/${id}`;
+        const newPrefix = newAncestryPath === "/"
+            ? `/${id}`
+            : `${newAncestryPath}/${id}`;
+        const descendantsRes = await client.query(`SELECT * FROM tenants
+       WHERE ancestry_path LIKE $1
+       ORDER BY depth ASC`, [`${oldPrefix}/%`]);
+        for (const desc of descendantsRes.rows) {
+            const updatedDescPath = newPrefix + desc.ancestry_path.slice(oldPrefix.length);
+            const updatedDescDepth = (0, core_1.parseAncestryPath)(updatedDescPath).length;
+            await client.query(`UPDATE tenants
+         SET ancestry_path = $1,
+             depth = $2,
+             slug = slug,
+             updated_at = now()
+         WHERE id = $3`, [updatedDescPath, updatedDescDepth, desc.id]);
+        }
+        return updatedRes.rows[0];
+    });
+}
+exports.moveTenant = moveTenant;
+/**
+ * Create multiple tenants in a single transaction.
+ * Stops on first error and rolls back all changes.
+ */
+async function batchCreateTenants(pool, inputs) {
+    const created = [];
+    const errors = [];
+    try {
+        await (0, pool_helpers_js_1.withTransaction)(pool, async (client) => {
+            // Map of slug → created tenant for intra-batch parent references
+            const slugMap = new Map();
+            for (let i = 0; i < inputs.length; i++) {
+                const input = inputs[i];
+                let parentId = input.parent_id ?? null;
+                let parentNode = null;
+                if (parentId) {
+                    // Check if parent was created earlier in this batch (by ID)
+                    const batchParent = created.find((t) => t.id === parentId);
+                    if (batchParent) {
+                        parentNode = batchParent;
+                    }
+                    else {
+                        // Look up in DB
+                        const parentRes = await client.query(`SELECT * FROM tenants WHERE id = $1 AND status != 'archived'`, [parentId]);
+                        if (parentRes.rows.length === 0) {
+                            throw new core_1.TenantNotFoundError(parentId);
+                        }
+                        parentNode = parentRes.rows[0];
+                    }
+                    // Advisory lock on parent
+                    await client.query(`SELECT pg_advisory_xact_lock(('x' || substr(md5($1::text), 1, 16))::bit(64)::bigint)`, [parentId]);
+                    const ancestry_path = (0, core_1.appendToPath)(parentNode.ancestry_path, parentNode.id);
+                    const regionId = input.region_id ?? parentNode.region_id ?? null;
+                    const res = await client.query(`INSERT INTO tenants (parent_id, ancestry_path, depth, name, slug, config, metadata, isolation_strategy, status, region_id)
+             VALUES ($1, $2, $3, $4, $5, $6, $7, $8, 'active', $9)
+             RETURNING *`, [
+                        parentId,
+                        ancestry_path,
+                        (0, core_1.parseAncestryPath)(ancestry_path).length,
+                        input.name,
+                        input.slug,
+                        JSON.stringify(input.config ?? {}),
+                        JSON.stringify(input.metadata ?? {}),
+                        input.isolation_strategy ?? "SHARED_RLS",
+                        regionId,
+                    ]);
+                    const tenant = res.rows[0];
+                    created.push(tenant);
+                    slugMap.set(tenant.slug, tenant);
+                }
+                else {
+                    // Root tenant
+                    const rootRegionId = input.region_id ?? null;
+                    const res = await client.query(`INSERT INTO tenants (parent_id, ancestry_path, depth, name, slug, config, metadata, isolation_strategy, status, region_id)
+             VALUES (NULL, '/', 0, $1, $2, $3, $4, $5, 'active', $6)
+             RETURNING *`, [
+                        input.name,
+                        input.slug,
+                        JSON.stringify(input.config ?? {}),
+                        JSON.stringify(input.metadata ?? {}),
+                        input.isolation_strategy ?? "SHARED_RLS",
+                        rootRegionId,
+                    ]);
+                    const tenant = res.rows[0];
+                    created.push(tenant);
+                    slugMap.set(tenant.slug, tenant);
+                }
+            }
+        });
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        errors.push({ index: created.length, slug: inputs[created.length]?.slug ?? "unknown", error: message });
+    }
+    return { created, errors };
+}
+exports.batchCreateTenants = batchCreateTenants;
+async function getAncestors(pool, id) {
+    return (0, pool_helpers_js_1.withClient)(pool, async (client) => {
+        const tenantRes = await client.query(`SELECT * FROM tenants WHERE id = $1`, [id]);
+        if (tenantRes.rows.length === 0) {
+            throw new core_1.TenantNotFoundError(id);
+        }
+        const tenant = tenantRes.rows[0];
+        const ancestorIds = (0, core_1.getAncestorIds)(tenant.ancestry_path);
+        if (ancestorIds.length === 0) {
+            return [];
+        }
+        const res = await client.query(`SELECT * FROM tenants WHERE id = ANY($1) ORDER BY depth ASC`, [ancestorIds]);
+        return res.rows;
+    });
+}
+exports.getAncestors = getAncestors;
+async function getDescendants(pool, id) {
+    return (0, pool_helpers_js_1.withClient)(pool, async (client) => {
+        const existsRes = await client.query(`SELECT id FROM tenants WHERE id = $1`, [id]);
+        if (existsRes.rows.length === 0) {
+            throw new core_1.TenantNotFoundError(id);
+        }
+        // Use ltree <@ operator for efficient subtree query
+        const res = await client.query(`SELECT * FROM tenants
+       WHERE ancestry_ltree <@ (SELECT ancestry_ltree FROM tenants WHERE id = $1)
+         AND id != $1
+       ORDER BY depth ASC`, [id]);
+        return res.rows;
+    });
+}
+exports.getDescendants = getDescendants;
+async function getChildren(pool, id) {
+    return (0, pool_helpers_js_1.withClient)(pool, async (client) => {
+        const res = await client.query(`SELECT * FROM tenants WHERE parent_id = $1 AND status = 'active' ORDER BY created_at ASC`, [id]);
+        return res.rows;
+    });
+}
+exports.getChildren = getChildren;
+//# sourceMappingURL=tenant-service.js.map

package/dist/services/tenant-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-service.js","sourceRoot":"","sources":["../../src/services/tenant-service.ts"],"names":[],"mappings":";;;AACA,wDAAiE;AACjE,2CAe0B;AAEnB,KAAK,UAAU,YAAY,CAAC,IAAa,EAAE,KAAwB;IACxE,OAAO,IAAA,iCAAe,EAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;QAC5C,uDAAuD;QACvD,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;YACpB,MAAM,MAAM,CAAC,KAAK,CAChB,sFAAsF,EACtF,CAAC,KAAK,CAAC,SAAS,CAAC,CAClB,CAAC;YAEF,qCAAqC;YACrC,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,KAAK,CAClC,qCAAqC,EACrC,CAAC,KAAK,CAAC,SAAS,CAAC,CAClB,CAAC;YACF,IAAI,SAAS,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAChC,MAAM,IAAI,0BAAmB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACjD,CAAC;YACD,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;gBAC5C,MAAM,IAAI,0BAAmB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACjD,CAAC;YAED,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACjC,MAAM,aAAa,GAAG,IAAA,mBAAY,EAAC,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;YAEpE,2DAA2D;YAC3D,MAAM,QAAQ,GAAI,KAAiC,CAAC,SAAS,IAAK,MAAkC,CAAC,SAAS,IAAI,IAAI,CAAC;YAEvH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,KAAK,CAC5B;;qBAEa,EACb;gBACE,KAAK,CAAC,SAAS;gBACf,aAAa;gBACb,IAAA,wBAAiB,EAAC,aAAa,CAAC,CAAC,MAAM;gBACvC,KAAK,CAAC,IAAI;gBACV,KAAK,CAAC,IAAI;gBACV,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC;gBAClC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC;gBACpC,KAAK,CAAC,kBAAkB,IAAI,YAAY;gBACxC,QAAQ;aACT,CACF,CAAC;YAEF,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACrB,CAAC;aAAM,CAAC;YACN,sCAAsC;YACtC,MAAM,YAAY,GAAI,KAAiC,CAAC,SAAS,IAAI,IAAI,CAAC;YAE1E,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,KAAK,CAC5B;;qBAEa,EACb;gBACE,KAAK,CAAC,IAAI;gBACV,KAAK,CAAC,IAAI;gBACV,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC;gBAClC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC;gBACpC,KAAK,CAAC,kBAAkB,IAAI,YAAY;gBACxC,YAAY;aACb,CACF,CAAC;YAEF,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACrB,CAAC;IACH,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;QACxB,IACE,GAAG,YAAY,KAAK;YACpB,MAAM,IAAI,GAAG;YACZ,GAA6B,CAAC,IAAI,KAAK,OAAO,EAC/C,CAAC;YACD,MAAM,IAAI,+BAAwB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACjD,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC,CAAC,CAAC;AACL,CAAC;AA3ED,oCA2EC;AAEM,KAAK,UAAU,SAAS,CAC7B,IAAa,EACb,EAAU,EACV,eAAe,GAAG,KAAK;IAEvB,OAAO,IAAA,4BAAU,EAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;QACvC,kFAAkF;QAClF,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,KAAK,CAC5B,qCAAqC,EACrC,CAAC,EAAE,CAAC,CACL,CAAC;QACF,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,0BAAmB,CAAC,EAAE,CAAC,CAAC;QACpC,CAAC;QACD,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC3B,IAAI,CAAC,eAAe,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YACrD,MAAM,IAAI,0BAAmB,CAAC,EAAE,CAAC,CAAC;QACpC,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC,CAAC;AACL,CAAC;AApBD,8BAoBC;AAEM,KAAK,UAAU,WAAW,CAC/B,IAAa,EACb,UAA2B;IAE3B,OAAO,IAAA,4BAAU,EAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;QACvC,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,IAAI,EAAE,CAAC;QAErC,IAAI,GAA+B,CAAC;QACpC,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;YACtB,GAAG,GAAG,MAAM,MAAM,CAAC,KAAK,CACtB;;;kBAGU,EACV,CAAC,UAAU,CAAC,MAAM,EAAE,KAAK,GAAG,CAAC,CAAC,CAC/B,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,GAAG,GAAG,MAAM,MAAM,CAAC,KAAK,CACtB;;;kBAGU,EACV,CAAC,KAAK,GAAG,CAAC,CAAC,CACZ,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;QACtB,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACrC,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACpD,MAAM,WAAW,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAE/D,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC;IACzC,CAAC,CAAC,CAAC;AACL,CAAC;AAjCD,kCAiCC;AAEM,KAAK,UAAU,YAAY,CAChC,IAAa,EACb,EAAU,EACV,KAAwB;IAExB,OAAO,IAAA,iCAAe,EAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;QAC5C,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,KAAK,CACjC,8DAA8D,EAC9D,CAAC,EAAE,CAAC,CACL,CAAC;QACF,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,0BAAmB,CAAC,EAAE,CAAC,CAAC;QACpC,CAAC;QAED,MAAM,IAAI,GAAa,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAc,EAAE,CAAC;QAC7B,IAAI,GAAG,GAAG,CAAC,CAAC;QAEZ,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC7B,IAAI,CAAC,IAAI,CAAC,WAAW,GAAG,EAAE,EAAE,CAAC,CAAC;YAC9B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC7B,IAAI,CAAC,IAAI,CAAC,WAAW,GAAG,EAAE,EAAE,CAAC,CAAC;YAC9B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC/B,IAAI,CAAC,IAAI,CAAC,aAAa,GAAG,EAAE,EAAE,CAAC,CAAC;YAChC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5C,CAAC;QACD,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YACjC,IAAI,CAAC,IAAI,CAAC,eAAe,GAAG,EAAE,EAAE,CAAC,CAAC;YAClC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC9C,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC1B,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QAChC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEhB,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,KAAK,CAC5B,sBAAsB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,GAAG,cAAc,EACtE,MAAM,CACP,CAAC;QAEF,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACrB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;QACxB,IACE,GAAG,YAAY,KAAK;YACpB,MAAM,IAAI,GAAG;YACZ,GAA6B,CAAC,IAAI,KAAK,OAAO,EAC/C,CAAC;YACD,MAAM,IAAI,+BAAwB,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QACvD,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC,CAAC,CAAC;AACL,CAAC;AA1DD,oCA0DC;AAEM,KAAK,UAAU,YAAY,CAAC,IAAa,EAAE,EAAU;IAC1D,OAAO,IAAA,iCAAe,EAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;QAC5C,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,KAAK,CACjC,8DAA8D,EAC9D,CAAC,EAAE,CAAC,CACL,CAAC;QACF,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,0BAAmB,CAAC,EAAE,CAAC,CAAC;QACpC,CAAC;QAED,4BAA4B;QAC5B,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,KAAK,CACpC,kFAAkF,EAClF,CAAC,EAAE,CAAC,CACL,CAAC;QACF,IAAI,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;YAChD,MAAM,IAAI,6BAAsB,CAAC,EAAE,CAAC,CAAC;QACvC,CAAC;QAED,MAAM,MAAM,CAAC,KAAK,CAChB,8FAA8F,EAC9F,CAAC,EAAE,CAAC,CACL,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAxBD,oCAwBC;AAEM,KAAK,UAAU,UAAU,CAC9B,IAAa,EACb,EAAU,EACV,WAAmB;IAEnB,OAAO,IAAA,iCAAe,EAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;QAC5C,4DAA4D;QAC5D,MAAM,MAAM,CAAC,KAAK,CAChB,sFAAsF,EACtF,CAAC,EAAE,CAAC,CACL,CAAC;QACF,MAAM,MAAM,CAAC,KAAK,CAChB,sFAAsF,EACtF,CAAC,WAAW,CAAC,CACd,CAAC;QAEF,0BAA0B;QAC1B,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,KAAK,CAClC,8DAA8D,EAC9D,CAAC,EAAE,CAAC,CACL,CAAC;QACF,IAAI,SAAS,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,0BAAmB,CAAC,EAAE,CAAC,CAAC;QACpC,CAAC;QACD,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAEjC,kBAAkB;QAClB,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,KAAK,CACrC,8DAA8D,EAC9D,CAAC,WAAW,CAAC,CACd,CAAC;QACF,IAAI,YAAY,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,0BAAmB,CAAC,WAAW,CAAC,CAAC;QAC7C,CAAC;QACD,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAEvC,gEAAgE;QAChE,IACE,SAAS,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE;YAC1B,IAAA,qBAAc,EAAC,SAAS,CAAC,aAAa,EAAE,MAAM,CAAC,aAAa,CAAC;YAC7D,CAAC,SAAS,CAAC,aAAa,KAAK,GAAG;gBAC9B,SAAS,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAC9C,CAAC;YACD,MAAM,IAAI,+BAAwB,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;QACtD,CAAC;QAED,MAAM,eAAe,GAAG,MAAM,CAAC,aAAa,CAAC;QAC7C,MAAM,eAAe,GAAG,IAAA,mBAAY,EAAC,SAAS,CAAC,aAAa,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC;QAC5E,MAAM,QAAQ,GAAG,IAAA,wBAAiB,EAAC,eAAe,CAAC,CAAC,MAAM,CAAC;QAE3D,0BAA0B;QAC1B,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,KAAK,CACnC;;;;;;mBAMa,EACb,CAAC,WAAW,EAAE,eAAe,EAAE,QAAQ,EAAE,EAAE,CAAC,CAC7C,CAAC;QAEF,+CAA+C;QAC/C,2DAA2D;QAC3D,2EAA2E;QAC3E,MAAM,SAAS,GAAG,eAAe,KAAK,GAAG;YACvC,CAAC,CAAC,IAAI,EAAE,EAAE;YACV,CAAC,CAAC,GAAG,eAAe,IAAI,EAAE,EAAE,CAAC;QAC/B,MAAM,SAAS,GAAG,eAAe,KAAK,GAAG;YACvC,CAAC,CAAC,IAAI,EAAE,EAAE;YACV,CAAC,CAAC,GAAG,eAAe,IAAI,EAAE,EAAE,CAAC;QAE/B,MAAM,cAAc,GAAG,MAAM,MAAM,CAAC,KAAK,CACvC;;0BAEoB,EACpB,CAAC,GAAG,SAAS,IAAI,CAAC,CACnB,CAAC;QAEF,KAAK,MAAM,IAAI,IAAI,cAAc,CAAC,IAAI,EAAE,CAAC;YACvC,MAAM,eAAe,GAAG,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YAC/E,MAAM,gBAAgB,GAAG,IAAA,wBAAiB,EAAC,eAAe,CAAC,CAAC,MAAM,CAAC;YACnE,MAAM,MAAM,CAAC,KAAK,CAChB;;;;;uBAKe,EACf,CAAC,eAAe,EAAE,gBAAgB,EAAE,IAAI,CAAC,EAAE,CAAC,CAC7C,CAAC;QACJ,CAAC;QAED,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;AACL,CAAC;AA/FD,gCA+FC;AAOD;;;GAGG;AACI,KAAK,UAAU,kBAAkB,CACtC,IAAa,EACb,MAA2B;IAE3B,MAAM,OAAO,GAAiB,EAAE,CAAC;IACjC,MAAM,MAAM,GAA0D,EAAE,CAAC;IAEzE,IAAI,CAAC;QACH,MAAM,IAAA,iCAAe,EAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YAC3C,iEAAiE;YACjE,MAAM,OAAO,GAAG,IAAI,GAAG,EAAsB,CAAC;YAE9C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACvC,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;gBAExB,IAAI,QAAQ,GAAG,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC;gBACvC,IAAI,UAAU,GAAsB,IAAI,CAAC;gBAEzC,IAAI,QAAQ,EAAE,CAAC;oBACb,4DAA4D;oBAC5D,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC;oBAC3D,IAAI,WAAW,EAAE,CAAC;wBAChB,UAAU,GAAG,WAAW,CAAC;oBAC3B,CAAC;yBAAM,CAAC;wBACN,gBAAgB;wBAChB,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,KAAK,CAClC,8DAA8D,EAC9D,CAAC,QAAQ,CAAC,CACX,CAAC;wBACF,IAAI,SAAS,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;4BAChC,MAAM,IAAI,0BAAmB,CAAC,QAAQ,CAAC,CAAC;wBAC1C,CAAC;wBACD,UAAU,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBACjC,CAAC;oBAED,0BAA0B;oBAC1B,MAAM,MAAM,CAAC,KAAK,CAChB,sFAAsF,EACtF,CAAC,QAAQ,CAAC,CACX,CAAC;oBAEF,MAAM,aAAa,GAAG,IAAA,mBAAY,EAAC,UAAU,CAAC,aAAa,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC;oBAC5E,MAAM,QAAQ,GAAI,KAAiC,CAAC,SAAS,IAAK,UAAsC,CAAC,SAAS,IAAI,IAAI,CAAC;oBAE3H,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,KAAK,CAC5B;;yBAEa,EACb;wBACE,QAAQ;wBACR,aAAa;wBACb,IAAA,wBAAiB,EAAC,aAAa,CAAC,CAAC,MAAM;wBACvC,KAAK,CAAC,IAAI;wBACV,KAAK,CAAC,IAAI;wBACV,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC;wBAClC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC;wBACpC,KAAK,CAAC,kBAAkB,IAAI,YAAY;wBACxC,QAAQ;qBACT,CACF,CAAC;oBACF,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBAC3B,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;oBACrB,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;gBACnC,CAAC;qBAAM,CAAC;oBACN,cAAc;oBACd,MAAM,YAAY,GAAI,KAAiC,CAAC,SAAS,IAAI,IAAI,CAAC;oBAC1E,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,KAAK,CAC5B;;yBAEa,EACb;wBACE,KAAK,CAAC,IAAI;wBACV,KAAK,CAAC,IAAI;wBACV,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC;wBAClC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC;wBACpC,KAAK,CAAC,kBAAkB,IAAI,YAAY;wBACxC,YAAY;qBACb,CACF,CAAC;oBACF,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBAC3B,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;oBACrB,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;gBACnC,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,IAAI,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IAC1G,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AAC7B,CAAC;AA3FD,gDA2FC;AAEM,KAAK,UAAU,YAAY,CAAC,IAAa,EAAE,EAAU;IAC1D,OAAO,IAAA,4BAAU,EAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;QACvC,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,KAAK,CAClC,qCAAqC,EACrC,CAAC,EAAE,CAAC,CACL,CAAC;QACF,IAAI,SAAS,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,0BAAmB,CAAC,EAAE,CAAC,CAAC;QACpC,CAAC;QACD,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,WAAW,GAAG,IAAA,qBAAc,EAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QAEzD,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,KAAK,CAC5B,6DAA6D,EAC7D,CAAC,WAAW,CAAC,CACd,CAAC;QACF,OAAO,GAAG,CAAC,IAAI,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC;AAtBD,oCAsBC;AAEM,KAAK,UAAU,cAAc,CAAC,IAAa,EAAE,EAAU;IAC5D,OAAO,IAAA,4BAAU,EAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;QACvC,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,KAAK,CAClC,sCAAsC,EACtC,CAAC,EAAE,CAAC,CACL,CAAC;QACF,IAAI,SAAS,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,0BAAmB,CAAC,EAAE,CAAC,CAAC;QACpC,CAAC;QAED,oDAAoD;QACpD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,KAAK,CAC5B;;;0BAGoB,EACpB,CAAC,EAAE,CAAC,CACL,CAAC;QACF,OAAO,GAAG,CAAC,IAAI,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC;AApBD,wCAoBC;AAEM,KAAK,UAAU,WAAW,CAAC,IAAa,EAAE,EAAU;IACzD,OAAO,IAAA,4BAAU,EAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;QACvC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,KAAK,CAC5B,0FAA0F,EAC1F,CAAC,EAAE,CAAC,CACL,CAAC;QACF,OAAO,GAAG,CAAC,IAAI,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC;AARD,kCAQC"}

package/dist/services/webhook-service.d.ts

@@ -0,0 +1,12 @@
+import pg from "pg";
+import type { Webhook, CreateWebhookInput, UpdateWebhookInput } from "@stratum-hq/core";
+/** Decrypts a stored webhook secret. */
+export declare function decryptSecret(encrypted: string): string;
+export declare function createWebhook(pool: pg.Pool, input: CreateWebhookInput): Promise<Webhook>;
+export declare function getWebhook(pool: pg.Pool, id: string): Promise<Webhook>;
+export declare function listWebhooks(pool: pg.Pool, tenantId?: string | null): Promise<Webhook[]>;
+export declare function updateWebhook(pool: pg.Pool, id: string, input: UpdateWebhookInput): Promise<Webhook>;
+export declare function deleteWebhook(pool: pg.Pool, id: string): Promise<void>;
+export declare function listWebhookDeliveries(pool: pg.Pool, webhookId: string): Promise<Record<string, unknown>[]>;
+export declare function getWebhooksForEvent(pool: pg.Pool, eventType: string, tenantId: string): Promise<Webhook[]>;
+//# sourceMappingURL=webhook-service.d.ts.map

package/dist/services/webhook-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-service.d.ts","sourceRoot":"","sources":["../../src/services/webhook-service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,CAAC;AAEpB,OAAO,KAAK,EACV,OAAO,EACP,kBAAkB,EAClB,kBAAkB,EACnB,MAAM,kBAAkB,CAAC;AAY1B,wCAAwC;AACxC,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAEvD;AAED,wBAAsB,aAAa,CACjC,IAAI,EAAE,EAAE,CAAC,IAAI,EACb,KAAK,EAAE,kBAAkB,GACxB,OAAO,CAAC,OAAO,CAAC,CAiBlB;AAED,wBAAsB,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAW5E;AAED,wBAAsB,YAAY,CAChC,IAAI,EAAE,EAAE,CAAC,IAAI,EACb,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,GACvB,OAAO,CAAC,OAAO,EAAE,CAAC,CAepB;AAED,wBAAsB,aAAa,CACjC,IAAI,EAAE,EAAE,CAAC,IAAI,EACb,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,kBAAkB,GACxB,OAAO,CAAC,OAAO,CAAC,CAoDlB;AAED,wBAAsB,aAAa,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAU5E;AAED,wBAAsB,qBAAqB,CACzC,IAAI,EAAE,EAAE,CAAC,IAAI,EACb,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,CAiBpC;AAED,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,EAAE,CAAC,IAAI,EACb,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,OAAO,EAAE,CAAC,CAWpB"}

package/dist/services/webhook-service.js

@@ -0,0 +1,129 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getWebhooksForEvent = exports.listWebhookDeliveries = exports.deleteWebhook = exports.updateWebhook = exports.listWebhooks = exports.getWebhook = exports.createWebhook = exports.decryptSecret = void 0;
+const pool_helpers_js_1 = require("../pool-helpers.js");
+const core_1 = require("@stratum-hq/core");
+const crypto_js_1 = require("../crypto.js");
+/** Columns safe to return in API responses (excludes secret_hash). */
+const WEBHOOK_PUBLIC_COLS = "id, tenant_id, url, events, active, description, created_at, updated_at";
+/** Encrypts a webhook secret for storage. */
+function encryptSecret(secret) {
+    return (0, crypto_js_1.encrypt)(secret);
+}
+/** Decrypts a stored webhook secret. */
+function decryptSecret(encrypted) {
+    return (0, crypto_js_1.decrypt)(encrypted);
+}
+exports.decryptSecret = decryptSecret;
+async function createWebhook(pool, input) {
+    return (0, pool_helpers_js_1.withClient)(pool, async (client) => {
+        const encryptedSecret = encryptSecret(input.secret);
+        const res = await client.query(`INSERT INTO webhooks (tenant_id, url, secret_hash, events, active, description)
+       VALUES ($1, $2, $3, $4, true, $5)
+       RETURNING ${WEBHOOK_PUBLIC_COLS}`, [
+            input.tenant_id ?? null,
+            input.url,
+            encryptedSecret,
+            input.events,
+            input.description ?? null,
+        ]);
+        return res.rows[0];
+    });
+}
+exports.createWebhook = createWebhook;
+async function getWebhook(pool, id) {
+    return (0, pool_helpers_js_1.withClient)(pool, async (client) => {
+        const res = await client.query(`SELECT ${WEBHOOK_PUBLIC_COLS} FROM webhooks WHERE id = $1`, [id]);
+        if (res.rows.length === 0) {
+            throw new core_1.WebhookNotFoundError(id);
+        }
+        return res.rows[0];
+    });
+}
+exports.getWebhook = getWebhook;
+async function listWebhooks(pool, tenantId) {
+    return (0, pool_helpers_js_1.withClient)(pool, async (client) => {
+        let res;
+        if (tenantId !== undefined && tenantId !== null) {
+            res = await client.query(`SELECT ${WEBHOOK_PUBLIC_COLS} FROM webhooks WHERE tenant_id = $1 ORDER BY created_at ASC`, [tenantId]);
+        }
+        else {
+            res = await client.query(`SELECT ${WEBHOOK_PUBLIC_COLS} FROM webhooks ORDER BY created_at ASC`);
+        }
+        return res.rows;
+    });
+}
+exports.listWebhooks = listWebhooks;
+async function updateWebhook(pool, id, input) {
+    return (0, pool_helpers_js_1.withTransaction)(pool, async (client) => {
+        const existing = await client.query(`SELECT id FROM webhooks WHERE id = $1`, [id]);
+        if (existing.rows.length === 0) {
+            throw new core_1.WebhookNotFoundError(id);
+        }
+        const sets = [];
+        const values = [];
+        let idx = 1;
+        if (input.url !== undefined) {
+            sets.push(`url = $${idx++}`);
+            values.push(input.url);
+        }
+        if (input.secret !== undefined) {
+            sets.push(`secret_hash = $${idx++}`);
+            values.push(encryptSecret(input.secret));
+        }
+        if (input.events !== undefined) {
+            sets.push(`events = $${idx++}`);
+            values.push(input.events);
+        }
+        if (input.active !== undefined) {
+            sets.push(`active = $${idx++}`);
+            values.push(input.active);
+        }
+        if (input.description !== undefined) {
+            sets.push(`description = $${idx++}`);
+            values.push(input.description);
+        }
+        if (sets.length === 0) {
+            const current = await client.query(`SELECT ${WEBHOOK_PUBLIC_COLS} FROM webhooks WHERE id = $1`, [id]);
+            return current.rows[0];
+        }
+        sets.push(`updated_at = now()`);
+        values.push(id);
+        const res = await client.query(`UPDATE webhooks SET ${sets.join(", ")} WHERE id = $${idx} RETURNING ${WEBHOOK_PUBLIC_COLS}`, values);
+        return res.rows[0];
+    });
+}
+exports.updateWebhook = updateWebhook;
+async function deleteWebhook(pool, id) {
+    return (0, pool_helpers_js_1.withTransaction)(pool, async (client) => {
+        const res = await client.query(`DELETE FROM webhooks WHERE id = $1 RETURNING id`, [id]);
+        if (res.rows.length === 0) {
+            throw new core_1.WebhookNotFoundError(id);
+        }
+    });
+}
+exports.deleteWebhook = deleteWebhook;
+async function listWebhookDeliveries(pool, webhookId) {
+    return (0, pool_helpers_js_1.withClient)(pool, async (client) => {
+        // Verify webhook exists
+        const existing = await client.query(`SELECT id FROM webhooks WHERE id = $1`, [webhookId]);
+        if (existing.rows.length === 0) {
+            throw new core_1.WebhookNotFoundError(webhookId);
+        }
+        const res = await client.query(`SELECT id, webhook_id, event_id, status, attempts, next_retry_at, last_error, response_code, created_at, completed_at
+       FROM webhook_deliveries WHERE webhook_id = $1 ORDER BY created_at DESC LIMIT 100`, [webhookId]);
+        return res.rows;
+    });
+}
+exports.listWebhookDeliveries = listWebhookDeliveries;
+async function getWebhooksForEvent(pool, eventType, tenantId) {
+    return (0, pool_helpers_js_1.withClient)(pool, async (client) => {
+        const res = await client.query(`SELECT ${WEBHOOK_PUBLIC_COLS}, secret_encrypted FROM webhooks
+       WHERE active = true
+         AND $1 = ANY(events)
+         AND (tenant_id IS NULL OR tenant_id = $2)`, [eventType, tenantId]);
+        return res.rows;
+    });
+}
+exports.getWebhooksForEvent = getWebhooksForEvent;
+//# sourceMappingURL=webhook-service.js.map

package/dist/services/webhook-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-service.js","sourceRoot":"","sources":["../../src/services/webhook-service.ts"],"names":[],"mappings":";;;AACA,wDAAiE;AAMjE,2CAAwD;AACxD,4CAAgD;AAEhD,sEAAsE;AACtE,MAAM,mBAAmB,GAAG,yEAAyE,CAAC;AAEtG,6CAA6C;AAC7C,SAAS,aAAa,CAAC,MAAc;IACnC,OAAO,IAAA,mBAAO,EAAC,MAAM,CAAC,CAAC;AACzB,CAAC;AAED,wCAAwC;AACxC,SAAgB,aAAa,CAAC,SAAiB;IAC7C,OAAO,IAAA,mBAAO,EAAC,SAAS,CAAC,CAAC;AAC5B,CAAC;AAFD,sCAEC;AAEM,KAAK,UAAU,aAAa,CACjC,IAAa,EACb,KAAyB;IAEzB,OAAO,IAAA,4BAAU,EAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;QACvC,MAAM,eAAe,GAAG,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACpD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,KAAK,CAC5B;;mBAEa,mBAAmB,EAAE,EAClC;YACE,KAAK,CAAC,SAAS,IAAI,IAAI;YACvB,KAAK,CAAC,GAAG;YACT,eAAe;YACf,KAAK,CAAC,MAAM;YACZ,KAAK,CAAC,WAAW,IAAI,IAAI;SAC1B,CACF,CAAC;QACF,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACrB,CAAC,CAAC,CAAC;AACL,CAAC;AApBD,sCAoBC;AAEM,KAAK,UAAU,UAAU,CAAC,IAAa,EAAE,EAAU;IACxD,OAAO,IAAA,4BAAU,EAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;QACvC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,KAAK,CAC5B,UAAU,mBAAmB,8BAA8B,EAC3D,CAAC,EAAE,CAAC,CACL,CAAC;QACF,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,2BAAoB,CAAC,EAAE,CAAC,CAAC;QACrC,CAAC;QACD,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACrB,CAAC,CAAC,CAAC;AACL,CAAC;AAXD,gCAWC;AAEM,KAAK,UAAU,YAAY,CAChC,IAAa,EACb,QAAwB;IAExB,OAAO,IAAA,4BAAU,EAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;QACvC,IAAI,GAA4B,CAAC;QACjC,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YAChD,GAAG,GAAG,MAAM,MAAM,CAAC,KAAK,CACtB,UAAU,mBAAmB,6DAA6D,EAC1F,CAAC,QAAQ,CAAC,CACX,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,GAAG,GAAG,MAAM,MAAM,CAAC,KAAK,CACtB,UAAU,mBAAmB,wCAAwC,CACtE,CAAC;QACJ,CAAC;QACD,OAAO,GAAG,CAAC,IAAI,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC;AAlBD,oCAkBC;AAEM,KAAK,UAAU,aAAa,CACjC,IAAa,EACb,EAAU,EACV,KAAyB;IAEzB,OAAO,IAAA,iCAAe,EAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;QAC5C,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,KAAK,CACjC,uCAAuC,EACvC,CAAC,EAAE,CAAC,CACL,CAAC;QACF,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,2BAAoB,CAAC,EAAE,CAAC,CAAC;QACrC,CAAC;QAED,MAAM,IAAI,GAAa,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAc,EAAE,CAAC;QAC7B,IAAI,GAAG,GAAG,CAAC,CAAC;QAEZ,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YAC5B,IAAI,CAAC,IAAI,CAAC,UAAU,GAAG,EAAE,EAAE,CAAC,CAAC;YAC7B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACzB,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC/B,IAAI,CAAC,IAAI,CAAC,kBAAkB,GAAG,EAAE,EAAE,CAAC,CAAC;YACrC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QAC3C,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC/B,IAAI,CAAC,IAAI,CAAC,aAAa,GAAG,EAAE,EAAE,CAAC,CAAC;YAChC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC/B,IAAI,CAAC,IAAI,CAAC,aAAa,GAAG,EAAE,EAAE,CAAC,CAAC;YAChC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;QACD,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YACpC,IAAI,CAAC,IAAI,CAAC,kBAAkB,GAAG,EAAE,EAAE,CAAC,CAAC;YACrC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACjC,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,KAAK,CAChC,UAAU,mBAAmB,8BAA8B,EAC3D,CAAC,EAAE,CAAC,CACL,CAAC;YACF,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACzB,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QAChC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEhB,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,KAAK,CAC5B,uBAAuB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,GAAG,cAAc,mBAAmB,EAAE,EAC5F,MAAM,CACP,CAAC;QACF,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACrB,CAAC,CAAC,CAAC;AACL,CAAC;AAxDD,sCAwDC;AAEM,KAAK,UAAU,aAAa,CAAC,IAAa,EAAE,EAAU;IAC3D,OAAO,IAAA,iCAAe,EAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;QAC5C,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,KAAK,CAC5B,iDAAiD,EACjD,CAAC,EAAE,CAAC,CACL,CAAC;QACF,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,2BAAoB,CAAC,EAAE,CAAC,CAAC;QACrC,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAVD,sCAUC;AAEM,KAAK,UAAU,qBAAqB,CACzC,IAAa,EACb,SAAiB;IAEjB,OAAO,IAAA,4BAAU,EAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;QACvC,wBAAwB;QACxB,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,KAAK,CACjC,uCAAuC,EACvC,CAAC,SAAS,CAAC,CACZ,CAAC;QACF,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,2BAAoB,CAAC,SAAS,CAAC,CAAC;QAC5C,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,KAAK,CAC5B;wFACkF,EAClF,CAAC,SAAS,CAAC,CACZ,CAAC;QACF,OAAO,GAAG,CAAC,IAAI,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC;AApBD,sDAoBC;AAEM,KAAK,UAAU,mBAAmB,CACvC,IAAa,EACb,SAAiB,EACjB,QAAgB;IAEhB,OAAO,IAAA,4BAAU,EAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;QACvC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,KAAK,CAC5B,UAAU,mBAAmB;;;mDAGgB,EAC7C,CAAC,SAAS,EAAE,QAAQ,CAAC,CACtB,CAAC;QACF,OAAO,GAAG,CAAC,IAAI,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC;AAfD,kDAeC"}

package/dist/stratum.d.ts

@@ -0,0 +1,107 @@
+import pg from "pg";
+import * as tenantService from "./services/tenant-service.js";
+import * as apiKeyService from "./services/api-key-service.js";
+import * as eventService from "./services/event-service.js";
+import * as keyRotationService from "./services/key-rotation-service.js";
+import * as roleService from "./services/role-service.js";
+import type { TenantNode, CreateTenantInput, UpdateTenantInput, PaginationInput, PaginatedResult, ConfigEntry, SetConfigInput, ResolvedConfig, BatchSetConfigResult, PermissionPolicy, CreatePermissionInput, UpdatePermissionInput, ResolvedPermission, Webhook, CreateWebhookInput, UpdateWebhookInput, AuditContext, AuditEntry, AuditLogQuery, ConsentRecord, GrantConsentInput, Region, CreateRegionInput, UpdateRegionInput, TenantContext, ConfigDiff } from "@stratum-hq/core";
+export interface StratumOptions {
+    pool: pg.Pool;
+    keyPrefix?: string;
+}
+export declare class Stratum {
+    private readonly pool;
+    private readonly keyPrefix;
+    constructor(options: StratumOptions);
+    private emitEvent;
+    createTenant(input: CreateTenantInput, audit?: AuditContext): Promise<TenantNode>;
+    getTenant(id: string, includeArchived?: boolean): Promise<TenantNode>;
+    listTenants(pagination: PaginationInput): Promise<PaginatedResult<TenantNode>>;
+    updateTenant(id: string, patch: UpdateTenantInput, audit?: AuditContext): Promise<TenantNode>;
+    deleteTenant(id: string, audit?: AuditContext): Promise<void>;
+    moveTenant(id: string, newParentId: string, audit?: AuditContext): Promise<TenantNode>;
+    getAncestors(id: string): Promise<TenantNode[]>;
+    getDescendants(id: string): Promise<TenantNode[]>;
+    getChildren(id: string): Promise<TenantNode[]>;
+    getTenantContext(tenantId: string): Promise<TenantContext>;
+    resolveConfig(tenantId: string): Promise<ResolvedConfig>;
+    setConfig(tenantId: string, key: string, input: SetConfigInput, audit?: AuditContext): Promise<ConfigEntry>;
+    deleteConfig(tenantId: string, key: string, audit?: AuditContext): Promise<void>;
+    getConfigWithInheritance(tenantId: string): Promise<ResolvedConfig>;
+    diffConfig(tenantIdA: string, tenantIdB: string): Promise<ConfigDiff>;
+    resolvePermissions(tenantId: string): Promise<Record<string, ResolvedPermission>>;
+    createPermission(tenantId: string, input: CreatePermissionInput, audit?: AuditContext): Promise<PermissionPolicy>;
+    updatePermission(tenantId: string, policyId: string, input: UpdatePermissionInput, audit?: AuditContext): Promise<PermissionPolicy>;
+    deletePermission(tenantId: string, policyId: string, audit?: AuditContext): Promise<void>;
+    createApiKey(tenantId: string, nameOrOptions?: string | apiKeyService.CreateApiKeyOptions, expiresAt?: Date): Promise<apiKeyService.CreatedApiKey>;
+    validateApiKey(key: string): Promise<apiKeyService.ValidatedApiKey | null>;
+    revokeApiKey(keyId: string): Promise<boolean>;
+    rotateApiKey(keyId: string, newName?: string): Promise<apiKeyService.CreatedApiKey>;
+    listApiKeys(tenantId?: string): Promise<Array<{
+        id: string;
+        tenant_id: string | null;
+        name: string | null;
+        created_at: Date;
+        last_used_at: Date | null;
+        revoked_at: Date | null;
+        expires_at: Date | null;
+    }>>;
+    listDormantKeys(dormantDays?: number): Promise<Array<{
+        id: string;
+        tenant_id: string | null;
+        name: string | null;
+        last_used_at: Date | null;
+        created_at: Date;
+    }>>;
+    createWebhook(input: CreateWebhookInput, audit?: AuditContext): Promise<Webhook>;
+    getWebhook(id: string): Promise<Webhook>;
+    listWebhooks(tenantId?: string): Promise<Webhook[]>;
+    updateWebhook(id: string, input: UpdateWebhookInput, audit?: AuditContext): Promise<Webhook>;
+    deleteWebhook(id: string, audit?: AuditContext): Promise<void>;
+    listWebhookDeliveries(webhookId: string): Promise<Record<string, unknown>[]>;
+    testWebhook(id: string): Promise<{
+        success: boolean;
+        response_code: number | null;
+        error?: string;
+    }>;
+    listFailedDeliveries(limit?: number, tenantId?: string): Promise<Record<string, unknown>[]>;
+    retryDelivery(deliveryId: string): Promise<boolean>;
+    retryFailedDeliveries(tenantId?: string): Promise<number>;
+    getDeliveryStats(tenantId?: string): Promise<eventService.DeliveryStats>;
+    queryAuditLogs(query: AuditLogQuery): Promise<AuditEntry[]>;
+    getAuditEntry(id: string): Promise<AuditEntry | null>;
+    grantConsent(tenantId: string, input: GrantConsentInput, audit?: AuditContext): Promise<ConsentRecord>;
+    revokeConsent(tenantId: string, subjectId: string, purpose: string, audit?: AuditContext): Promise<boolean>;
+    listConsent(tenantId: string, subjectId?: string): Promise<ConsentRecord[]>;
+    getActiveConsent(tenantId: string, subjectId: string, purpose: string): Promise<ConsentRecord | null>;
+    purgeExpiredData(retentionDays?: number): Promise<{
+        deleted_count: number;
+    }>;
+    purgeTenant(tenantId: string, audit?: AuditContext): Promise<void>;
+    exportTenantData(tenantId: string): Promise<Record<string, unknown>>;
+    createRegion(input: CreateRegionInput, audit?: AuditContext): Promise<Region>;
+    getRegion(id: string): Promise<Region>;
+    listRegions(): Promise<Region[]>;
+    updateRegion(id: string, input: UpdateRegionInput, audit?: AuditContext): Promise<Region>;
+    deleteRegion(id: string, audit?: AuditContext): Promise<void>;
+    migrateRegion(tenantId: string, newRegionId: string, audit?: AuditContext): Promise<void>;
+    createRole(input: roleService.CreateRoleInput, audit?: AuditContext): Promise<roleService.Role>;
+    getRole(id: string): Promise<roleService.Role | null>;
+    listRoles(tenantId?: string): Promise<roleService.Role[]>;
+    updateRole(id: string, input: roleService.UpdateRoleInput, audit?: AuditContext): Promise<roleService.Role | null>;
+    deleteRole(id: string, audit?: AuditContext): Promise<boolean>;
+    assignRoleToKey(keyId: string, roleId: string): Promise<boolean>;
+    removeRoleFromKey(keyId: string): Promise<boolean>;
+    resolveKeyScopes(keyId: string): Promise<string[]>;
+    batchCreateTenants(inputs: CreateTenantInput[], audit?: AuditContext): Promise<tenantService.BatchCreateResult>;
+    batchSetConfig(tenantId: string, entries: Array<{
+        key: string;
+        value: unknown;
+        locked?: boolean;
+        sensitive?: boolean;
+    }>, audit?: AuditContext): Promise<BatchSetConfigResult>;
+    rotateEncryptionKey(oldKeyMaterial: string, newKeyMaterial: string, audit?: AuditContext): Promise<keyRotationService.KeyRotationResult>;
+    /** Validates that a webhook URL does not target internal/private networks. */
+    private validateWebhookUrl;
+}
+//# sourceMappingURL=stratum.d.ts.map

package/dist/stratum.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stratum.d.ts","sourceRoot":"","sources":["../src/stratum.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,KAAK,aAAa,MAAM,8BAA8B,CAAC;AAG9D,OAAO,KAAK,aAAa,MAAM,+BAA+B,CAAC;AAE/D,OAAO,KAAK,YAAY,MAAM,6BAA6B,CAAC;AAK5D,OAAO,KAAK,kBAAkB,MAAM,oCAAoC,CAAC;AACzE,OAAO,KAAK,WAAW,MAAM,4BAA4B,CAAC;AAE1D,OAAO,KAAK,EACV,UAAU,EACV,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EACf,eAAe,EACf,WAAW,EACX,cAAc,EACd,cAAc,EAEd,oBAAoB,EACpB,gBAAgB,EAChB,qBAAqB,EACrB,qBAAqB,EACrB,kBAAkB,EAClB,OAAO,EACP,kBAAkB,EAClB,kBAAkB,EAClB,YAAY,EACZ,UAAU,EACV,aAAa,EACb,aAAa,EACb,iBAAiB,EACjB,MAAM,EACN,iBAAiB,EACjB,iBAAiB,EACjB,aAAa,EACb,UAAU,EAGX,MAAM,kBAAkB,CAAC;AAG1B,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,qBAAa,OAAO;IAClB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAU;IAC/B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;gBAEvB,OAAO,EAAE,cAAc;IAMnC,OAAO,CAAC,SAAS;IAuBX,YAAY,CAAC,KAAK,EAAE,iBAAiB,EAAE,KAAK,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,UAAU,CAAC;IAcvF,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,eAAe,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC;IAKrE,WAAW,CAAC,UAAU,EAAE,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;IAGxE,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,iBAAiB,EAAE,KAAK,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,UAAU,CAAC;IAa7F,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC;IAW7D,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,UAAU,CAAC;IAa5F,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;IAG/C,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;IAGjD,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;IAKxC,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAWhE,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IAKlD,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC;IAa3G,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC;IAStF,wBAAwB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IAK7D,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IA8C3E,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;IAK3E,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,qBAAqB,EAAE,KAAK,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAajH,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,qBAAqB,EAAE,KAAK,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAWnI,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC;IAW/F,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,GAAG,aAAa,CAAC,mBAAmB,EAAE,SAAS,CAAC,EAAE,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,aAAa,CAAC;IAKlJ,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,eAAe,GAAG,IAAI,CAAC;IAK1E,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAK7C,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,aAAa,CAAC;IAGnF,WAAW,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,UAAU,EAAE,IAAI,CAAC;QAAC,YAAY,EAAE,IAAI,GAAG,IAAI,CAAC;QAAC,UAAU,EAAE,IAAI,GAAG,IAAI,CAAC;QAAC,UAAU,EAAE,IAAI,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;IAG5M,eAAe,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,YAAY,EAAE,IAAI,GAAG,IAAI,CAAC;QAAC,UAAU,EAAE,IAAI,CAAA;KAAE,CAAC,CAAC;IAK3J,aAAa,CAAC,KAAK,EAAE,kBAAkB,EAAE,KAAK,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC;IAWtF,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAGxC,YAAY,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;IAG7C,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,kBAAkB,EAAE,KAAK,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC;IAa5F,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC;IAWpE,qBAAqB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;IAGtE,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IA6C1G,oBAAoB,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;IAG3F,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAGnD,qBAAqB,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAGzD,gBAAgB,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,aAAa,CAAC;IAKxE,cAAc,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;IAG3D,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAK/C,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,iBAAiB,EAAE,KAAK,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,aAAa,CAAC;IAUtG,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC;IASjH,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IAG3E,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;IAK/F,gBAAgB,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,aAAa,EAAE,MAAM,CAAA;KAAE,CAAC;IAG5E,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC;IAUlE,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAKpE,YAAY,CAAC,KAAK,EAAE,iBAAiB,EAAE,KAAK,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC;IAUnF,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAGtC,WAAW,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IAG1B,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,iBAAiB,EAAE,KAAK,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC;IAUzF,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ7D,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC;IAWzF,UAAU,CAAC,KAAK,EAAE,WAAW,CAAC,eAAe,EAAE,KAAK,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC;IAUrG,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,IAAI,GAAG,IAAI,CAAC;IAGrD,SAAS,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;IAGnD,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,CAAC,eAAe,EAAE,KAAK,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC,IAAI,GAAG,IAAI,CAAC;IAUlH,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC;IASpE,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAGhE,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAGlD,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAK5C,kBAAkB,CAAC,MAAM,EAAE,iBAAiB,EAAE,EAAE,KAAK,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,aAAa,CAAC,iBAAiB,CAAC;IAa/G,cAAc,CAClB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,OAAO,CAAC;QAAC,SAAS,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC,EACtF,KAAK,CAAC,EAAE,YAAY,GACnB,OAAO,CAAC,oBAAoB,CAAC;IAsB1B,mBAAmB,CACvB,cAAc,EAAE,MAAM,EACtB,cAAc,EAAE,MAAM,EACtB,KAAK,CAAC,EAAE,YAAY,GACnB,OAAO,CAAC,kBAAkB,CAAC,iBAAiB,CAAC;IAWhD,8EAA8E;IAC9E,OAAO,CAAC,kBAAkB;CAyB3B"}