@sudobility/shapeshyft_service 1.0.0

package/dist/routes/settings.js

@@ -0,0 +1,138 @@
+/**
+ * @fileoverview User settings routes
+ * @description Manages per-user settings including organization name and path.
+ * Uses upsert pattern -- settings are created on first PUT if they don't exist.
+ */
+import { Hono } from "hono";
+import { zValidator } from "@hono/zod-validator";
+import { eq } from "drizzle-orm";
+import { settingsUpdateSchema } from "../schemas/index.js";
+import { successResponse, errorResponse, } from "@sudobility/shapeshyft_engine/types";
+export function createSettingsRouter(ctx) {
+    const { db } = ctx;
+    const { users, userSettings } = ctx.tables;
+    const settingsRouter = new Hono();
+    /**
+     * Helper to get or create user by Firebase UID
+     */
+    async function getOrCreateUser(firebaseUid, email) {
+        const existing = await db
+            .select()
+            .from(users)
+            .where(eq(users.firebase_uid, firebaseUid));
+        if (existing.length > 0) {
+            return existing[0];
+        }
+        const created = await db
+            .insert(users)
+            .values({
+            firebase_uid: firebaseUid,
+            email: email ?? null,
+        })
+            .returning();
+        return created[0];
+    }
+    /**
+     * Generate default organization path from firebase UID
+     * Uses first 8 characters of the UID (without special characters)
+     */
+    function generateDefaultOrgPath(firebaseUid) {
+        return firebaseUid.replace(/[^a-zA-Z0-9]/g, "").slice(0, 8);
+    }
+    // GET user settings
+    settingsRouter.get("/", async (c) => {
+        const authUserId = c.get("userId");
+        const authUserEmail = c.get("userEmail");
+        const userId = c.req.param("userId");
+        if (authUserId !== userId) {
+            return c.json(errorResponse("You can only access your own settings"), 403);
+        }
+        const user = await getOrCreateUser(authUserId, authUserEmail ?? undefined);
+        const rows = await db
+            .select()
+            .from(userSettings)
+            .where(eq(userSettings.firebase_uid, user.firebase_uid));
+        if (rows.length === 0) {
+            // Return default settings with auto-generated org path
+            const defaultSettings = {
+                id: null,
+                firebase_uid: user.firebase_uid,
+                organization_name: null,
+                organization_path: generateDefaultOrgPath(user.firebase_uid),
+                is_default: true,
+                created_at: null,
+                updated_at: null,
+            };
+            return c.json(successResponse(defaultSettings));
+        }
+        const settings = { ...rows[0], is_default: false };
+        return c.json(successResponse(settings));
+    });
+    // PUT create/update settings (upsert)
+    settingsRouter.put("/", zValidator("json", settingsUpdateSchema), async (c) => {
+        const authUserId = c.get("userId");
+        const authUserEmail = c.get("userEmail");
+        const userId = c.req.param("userId");
+        const body = c.req.valid("json");
+        if (authUserId !== userId) {
+            return c.json(errorResponse("You can only update your own settings"), 403);
+        }
+        const user = await getOrCreateUser(authUserId, authUserEmail ?? undefined);
+        // Check if settings exist
+        const existing = await db
+            .select()
+            .from(userSettings)
+            .where(eq(userSettings.firebase_uid, user.firebase_uid));
+        // If changing organization_path, check for duplicates
+        if (body.organization_path) {
+            const duplicate = await db
+                .select()
+                .from(userSettings)
+                .where(eq(userSettings.organization_path, body.organization_path));
+            if (duplicate.length > 0 &&
+                (existing.length === 0 ||
+                    duplicate[0].firebase_uid !== user.firebase_uid)) {
+                return c.json(errorResponse("Organization path already taken"), 409);
+            }
+        }
+        if (existing.length === 0) {
+            // Create new settings
+            const orgPath = body.organization_path || generateDefaultOrgPath(user.firebase_uid);
+            // Double-check the auto-generated path isn't taken
+            if (!body.organization_path) {
+                const autoPathCheck = await db
+                    .select()
+                    .from(userSettings)
+                    .where(eq(userSettings.organization_path, orgPath));
+                if (autoPathCheck.length > 0) {
+                    return c.json(errorResponse("Auto-generated organization path is taken. Please provide a custom organization_path."), 409);
+                }
+            }
+            const rows = await db
+                .insert(userSettings)
+                .values({
+                firebase_uid: user.firebase_uid,
+                organization_name: body.organization_name ?? null,
+                organization_path: orgPath,
+            })
+                .returning();
+            const created = { ...rows[0], is_default: false };
+            return c.json(successResponse(created), 201);
+        }
+        // Update existing settings
+        const current = existing[0];
+        const rows = await db
+            .update(userSettings)
+            .set({
+            organization_name: body.organization_name ?? current.organization_name,
+            organization_path: body.organization_path ?? current.organization_path,
+            updated_at: new Date(),
+        })
+            .where(eq(userSettings.firebase_uid, user.firebase_uid))
+            .returning();
+        const updated = { ...rows[0], is_default: false };
+        return c.json(successResponse(updated));
+    });
+    return settingsRouter;
+}
+//# sourceMappingURL=settings.js.map

package/dist/routes/settings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings.js","sourceRoot":"","sources":["../../src/routes/settings.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EACL,eAAe,EACf,aAAa,GAEd,MAAM,qCAAqC,CAAC;AAG7C,MAAM,UAAU,oBAAoB,CAAC,GAAmB;IACtD,MAAM,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC;IACnB,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;IAE3C,MAAM,cAAc,GAAG,IAAI,IAAI,EAAE,CAAC;IAElC;;OAEG;IACH,KAAK,UAAU,eAAe,CAAC,WAAmB,EAAE,KAAc;QAChE,MAAM,QAAQ,GAAG,MAAM,EAAE;aACtB,MAAM,EAAE;aACR,IAAI,CAAC,KAAK,CAAC;aACX,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC,CAAC;QAE9C,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,OAAO,QAAQ,CAAC,CAAC,CAAE,CAAC;QACtB,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,EAAE;aACrB,MAAM,CAAC,KAAK,CAAC;aACb,MAAM,CAAC;YACN,YAAY,EAAE,WAAW;YACzB,KAAK,EAAE,KAAK,IAAI,IAAI;SACrB,CAAC;aACD,SAAS,EAAE,CAAC;QAEf,OAAO,OAAO,CAAC,CAAC,CAAE,CAAC;IACrB,CAAC;IAED;;;OAGG;IACH,SAAS,sBAAsB,CAAC,WAAmB;QACjD,OAAO,WAAW,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9D,CAAC;IAED,oBAAoB;IACpB,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;QAChC,MAAM,UAAU,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACnC,MAAM,aAAa,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAErC,IAAI,UAAU,KAAK,MAAM,EAAE,CAAC;YAC1B,OAAO,CAAC,CAAC,IAAI,CACX,aAAa,CAAC,uCAAuC,CAAC,EACtD,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,UAAU,EAAE,aAAa,IAAI,SAAS,CAAC,CAAC;QAE3E,MAAM,IAAI,GAAG,MAAM,EAAE;aAClB,MAAM,EAAE;aACR,IAAI,CAAC,YAAY,CAAC;aAClB,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;QAE3D,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,uDAAuD;YACvD,MAAM,eAAe,GAAiB;gBACpC,EAAE,EAAE,IAAI;gBACR,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,iBAAiB,EAAE,IAAI;gBACvB,iBAAiB,EAAE,sBAAsB,CAAC,IAAI,CAAC,YAAY,CAAC;gBAC5D,UAAU,EAAE,IAAI;gBAChB,UAAU,EAAE,IAAI;gBAChB,UAAU,EAAE,IAAI;aACjB,CAAC;YACF,OAAO,CAAC,CAAC,IAAI,CAAC,eAAe,CAAe,eAAe,CAAC,CAAC,CAAC;QAChE,CAAC;QAED,MAAM,QAAQ,GAAiB,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;QACjE,OAAO,CAAC,CAAC,IAAI,CAAC,eAAe,CAAe,QAAQ,CAAC,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,sCAAsC;IACtC,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,MAAM,EAAE,oBAAoB,CAAC,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;QAC1E,MAAM,UAAU,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACnC,MAAM,aAAa,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACrC,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAEjC,IAAI,UAAU,KAAK,MAAM,EAAE,CAAC;YAC1B,OAAO,CAAC,CAAC,IAAI,CACX,aAAa,CAAC,uCAAuC,CAAC,EACtD,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,UAAU,EAAE,aAAa,IAAI,SAAS,CAAC,CAAC;QAE3E,0BAA0B;QAC1B,MAAM,QAAQ,GAAG,MAAM,EAAE;aACtB,MAAM,EAAE;aACR,IAAI,CAAC,YAAY,CAAC;aAClB,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;QAE3D,sDAAsD;QACtD,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC3B,MAAM,SAAS,GAAG,MAAM,EAAE;iBACvB,MAAM,EAAE;iBACR,IAAI,CAAC,YAAY,CAAC;iBAClB,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC;YAErE,IACE,SAAS,CAAC,MAAM,GAAG,CAAC;gBACpB,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;oBACpB,SAAS,CAAC,CAAC,CAAE,CAAC,YAAY,KAAK,IAAI,CAAC,YAAY,CAAC,EACnD,CAAC;gBACD,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,iCAAiC,CAAC,EAAE,GAAG,CAAC,CAAC;YACvE,CAAC;QACH,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,sBAAsB;YACtB,MAAM,OAAO,GACX,IAAI,CAAC,iBAAiB,IAAI,sBAAsB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAEtE,mDAAmD;YACnD,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;gBAC5B,MAAM,aAAa,GAAG,MAAM,EAAE;qBAC3B,MAAM,EAAE;qBACR,IAAI,CAAC,YAAY,CAAC;qBAClB,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC,CAAC;gBAEtD,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC7B,OAAO,CAAC,CAAC,IAAI,CACX,aAAa,CACX,uFAAuF,CACxF,EACD,GAAG,CACJ,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,EAAE;iBAClB,MAAM,CAAC,YAAY,CAAC;iBACpB,MAAM,CAAC;gBACN,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,IAAI,IAAI;gBACjD,iBAAiB,EAAE,OAAO;aAC3B,CAAC;iBACD,SAAS,EAAE,CAAC;YAEf,MAAM,OAAO,GAAiB,EAAE,GAAG,IAAI,CAAC,CAAC,CAAE,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;YACjE,OAAO,CAAC,CAAC,IAAI,CAAC,eAAe,CAAe,OAAO,CAAC,EAAE,GAAG,CAAC,CAAC;QAC7D,CAAC;QAED,2BAA2B;QAC3B,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,MAAM,EAAE;aAClB,MAAM,CAAC,YAAY,CAAC;aACpB,GAAG,CAAC;YACH,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,IAAI,OAAO,CAAC,iBAAiB;YACtE,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,IAAI,OAAO,CAAC,iBAAiB;YACtE,UAAU,EAAE,IAAI,IAAI,EAAE;SACvB,CAAC;aACD,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;aACvD,SAAS,EAAE,CAAC;QAEf,MAAM,OAAO,GAAiB,EAAE,GAAG,IAAI,CAAC,CAAC,CAAE,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;QACjE,OAAO,CAAC,CAAC,IAAI,CAAC,eAAe,CAAe,OAAO,CAAC,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,OAAO,cAAc,CAAC;AACxB,CAAC"}

package/dist/routes/storage.d.ts

@@ -0,0 +1,9 @@
+/**
+ * @fileoverview Entity cloud storage configuration routes
+ * @description Manages GCS/S3 storage configs for entities. Credentials
+ * are encrypted at rest using AES-256-CBC. Supports create, update, and delete.
+ */
+import { Hono } from "hono";
+import type { ServiceContext } from "../context.js";
+export declare function createStorageRouter(ctx: ServiceContext): Hono<import("hono/types").BlankEnv, import("hono/types").BlankSchema, "/">;
+//# sourceMappingURL=storage.d.ts.map

package/dist/routes/storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../../src/routes/storage.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAa5B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAEpD,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,cAAc,8EAkQtD"}

package/dist/routes/storage.js

@@ -0,0 +1,180 @@
+/**
+ * @fileoverview Entity cloud storage configuration routes
+ * @description Manages GCS/S3 storage configs for entities. Credentials
+ * are encrypted at rest using AES-256-CBC. Supports create, update, and delete.
+ */
+import { Hono } from "hono";
+import { zValidator } from "@hono/zod-validator";
+import { eq } from "drizzle-orm";
+import { storageConfigCreateSchema, storageConfigUpdateSchema, entitySlugParamSchema, } from "../schemas/index.js";
+import { successResponse, errorResponse, } from "@sudobility/shapeshyft_engine/types";
+export function createStorageRouter(ctx) {
+    const { db } = ctx;
+    const { entityStorageConfigs } = ctx.tables;
+    const { encryptApiKey } = ctx.encryption;
+    const { getActor, getEntityWithPermission, getPermissionErrorStatus } = ctx.entityAccess;
+    const storageRouter = new Hono();
+    /**
+     * Convert database storage config to safe response (no credentials)
+     */
+    function toSafeConfig(config) {
+        return {
+            uuid: config.uuid,
+            entity_id: config.entity_id,
+            provider: config.provider,
+            bucket: config.bucket,
+            path_prefix: config.path_prefix,
+            created_at: config.created_at,
+            updated_at: config.updated_at,
+        };
+    }
+    // GET storage config for entity
+    storageRouter.get("/", zValidator("param", entitySlugParamSchema), async (c) => {
+        try {
+            const { entitySlug } = c.req.valid("param");
+            const result = await getEntityWithPermission(entitySlug, getActor(c));
+            if (result.error !== undefined) {
+                return c.json(errorResponse(result.error), getPermissionErrorStatus(result.errorCode));
+            }
+            const rows = await db
+                .select()
+                .from(entityStorageConfigs)
+                .where(eq(entityStorageConfigs.entity_id, result.entity.id));
+            if (rows.length === 0) {
+                return c.json(errorResponse("Storage configuration not found"), 404);
+            }
+            return c.json(successResponse(toSafeConfig(rows[0])));
+        }
+        catch (error) {
+            console.error("Error getting storage config:", error);
+            return c.json(errorResponse(error.message || "Internal server error"), 500);
+        }
+    });
+    // POST create or update storage config (upsert)
+    storageRouter.post("/", zValidator("param", entitySlugParamSchema), zValidator("json", storageConfigCreateSchema), async (c) => {
+        try {
+            const userId = c.get("userId");
+            const { entitySlug } = c.req.valid("param");
+            const body = c.req.valid("json");
+            const result = await getEntityWithPermission(entitySlug, getActor(c), "canManageApiKeys");
+            if (result.error !== undefined) {
+                return c.json(errorResponse(result.error), getPermissionErrorStatus(result.errorCode));
+            }
+            // Encrypt credentials
+            const credentialsJson = JSON.stringify(body.credentials);
+            const { encrypted, iv } = encryptApiKey(credentialsJson);
+            // Check if config already exists
+            const existing = await db
+                .select()
+                .from(entityStorageConfigs)
+                .where(eq(entityStorageConfigs.entity_id, result.entity.id));
+            let rows;
+            if (existing.length > 0) {
+                // Update existing config
+                rows = await db
+                    .update(entityStorageConfigs)
+                    .set({
+                    provider: body.provider,
+                    bucket: body.bucket,
+                    path_prefix: body.path_prefix ?? null,
+                    encrypted_credentials: encrypted,
+                    encryption_iv: iv,
+                    updated_at: new Date(),
+                })
+                    .where(eq(entityStorageConfigs.entity_id, result.entity.id))
+                    .returning();
+            }
+            else {
+                // Create new config
+                rows = await db
+                    .insert(entityStorageConfigs)
+                    .values({
+                    entity_id: result.entity.id,
+                    provider: body.provider,
+                    bucket: body.bucket,
+                    path_prefix: body.path_prefix ?? null,
+                    encrypted_credentials: encrypted,
+                    encryption_iv: iv,
+                    created_by: userId,
+                })
+                    .returning();
+            }
+            return c.json(successResponse(toSafeConfig(rows[0])), existing.length > 0 ? 200 : 201);
+        }
+        catch (error) {
+            console.error("Error creating/updating storage config:", error);
+            return c.json(errorResponse(error.message || "Internal server error"), 500);
+        }
+    });
+    // PUT update storage config (partial update)
+    storageRouter.put("/", zValidator("param", entitySlugParamSchema), zValidator("json", storageConfigUpdateSchema), async (c) => {
+        try {
+            const { entitySlug } = c.req.valid("param");
+            const body = c.req.valid("json");
+            const result = await getEntityWithPermission(entitySlug, getActor(c), "canManageApiKeys");
+            if (result.error !== undefined) {
+                return c.json(errorResponse(result.error), getPermissionErrorStatus(result.errorCode));
+            }
+            // Check if config exists
+            const existing = await db
+                .select()
+                .from(entityStorageConfigs)
+                .where(eq(entityStorageConfigs.entity_id, result.entity.id));
+            if (existing.length === 0) {
+                return c.json(errorResponse("Storage configuration not found"), 404);
+            }
+            const current = existing[0];
+            // Prepare update values
+            let encryptedCredentials = current.encrypted_credentials;
+            let encryptionIv = current.encryption_iv;
+            if (body.credentials) {
+                const credentialsJson = JSON.stringify(body.credentials);
+                const { encrypted, iv } = encryptApiKey(credentialsJson);
+                encryptedCredentials = encrypted;
+                encryptionIv = iv;
+            }
+            const rows = await db
+                .update(entityStorageConfigs)
+                .set({
+                bucket: body.bucket ?? current.bucket,
+                path_prefix: body.path_prefix !== undefined
+                    ? body.path_prefix
+                    : current.path_prefix,
+                encrypted_credentials: encryptedCredentials,
+                encryption_iv: encryptionIv,
+                updated_at: new Date(),
+            })
+                .where(eq(entityStorageConfigs.entity_id, result.entity.id))
+                .returning();
+            return c.json(successResponse(toSafeConfig(rows[0])));
+        }
+        catch (error) {
+            console.error("Error updating storage config:", error);
+            return c.json(errorResponse(error.message || "Internal server error"), 500);
+        }
+    });
+    // DELETE storage config
+    storageRouter.delete("/", zValidator("param", entitySlugParamSchema), async (c) => {
+        try {
+            const { entitySlug } = c.req.valid("param");
+            const result = await getEntityWithPermission(entitySlug, getActor(c), "canManageApiKeys");
+            if (result.error !== undefined) {
+                return c.json(errorResponse(result.error), getPermissionErrorStatus(result.errorCode));
+            }
+            const rows = await db
+                .delete(entityStorageConfigs)
+                .where(eq(entityStorageConfigs.entity_id, result.entity.id))
+                .returning();
+            if (rows.length === 0) {
+                return c.json(errorResponse("Storage configuration not found"), 404);
+            }
+            return c.json(successResponse(toSafeConfig(rows[0])));
+        }
+        catch (error) {
+            console.error("Error deleting storage config:", error);
+            return c.json(errorResponse(error.message || "Internal server error"), 500);
+        }
+    });
+    return storageRouter;
+}
+//# sourceMappingURL=storage.js.map

package/dist/routes/storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.js","sourceRoot":"","sources":["../../src/routes/storage.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACjC,OAAO,EACL,yBAAyB,EACzB,yBAAyB,EACzB,qBAAqB,GACtB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,eAAe,EACf,aAAa,GAEd,MAAM,qCAAqC,CAAC;AAG7C,MAAM,UAAU,mBAAmB,CAAC,GAAmB;IACrD,MAAM,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC;IACnB,MAAM,EAAE,oBAAoB,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;IAC5C,MAAM,EAAE,aAAa,EAAE,GAAG,GAAG,CAAC,UAAU,CAAC;IACzC,MAAM,EAAE,QAAQ,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,GACnE,GAAG,CAAC,YAAY,CAAC;IAEnB,MAAM,aAAa,GAAG,IAAI,IAAI,EAAE,CAAC;IAEjC;;OAEG;IACH,SAAS,YAAY,CACnB,MAAgD;QAEhD,OAAO;YACL,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,QAAQ,EAAE,MAAM,CAAC,QAAwB;YACzC,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,UAAU,EAAE,MAAM,CAAC,UAAU;SAC9B,CAAC;IACJ,CAAC;IAED,gCAAgC;IAChC,aAAa,CAAC,GAAG,CACf,GAAG,EACH,UAAU,CAAC,OAAO,EAAE,qBAAqB,CAAC,EAC1C,KAAK,EAAC,CAAC,EAAC,EAAE;QACR,IAAI,CAAC;YACH,MAAM,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAE5C,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;YACtE,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC/B,OAAO,CAAC,CAAC,IAAI,CACX,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,EAC3B,wBAAwB,CAAC,MAAM,CAAC,SAAS,CAAC,CAC3C,CAAC;YACJ,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,EAAE;iBAClB,MAAM,EAAE;iBACR,IAAI,CAAC,oBAAoB,CAAC;iBAC1B,KAAK,CAAC,EAAE,CAAC,oBAAoB,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;YAE/D,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACtB,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,iCAAiC,CAAC,EAAE,GAAG,CAAC,CAAC;YACvE,CAAC;YAED,OAAO,CAAC,CAAC,IAAI,CACX,eAAe,CAAsB,YAAY,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,CAC7D,CAAC;QACJ,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,CAAC,KAAK,CAAC,+BAA+B,EAAE,KAAK,CAAC,CAAC;YACtD,OAAO,CAAC,CAAC,IAAI,CACX,aAAa,CAAC,KAAK,CAAC,OAAO,IAAI,uBAAuB,CAAC,EACvD,GAAG,CACJ,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC;IAEF,gDAAgD;IAChD,aAAa,CAAC,IAAI,CAChB,GAAG,EACH,UAAU,CAAC,OAAO,EAAE,qBAAqB,CAAC,EAC1C,UAAU,CAAC,MAAM,EAAE,yBAAyB,CAAC,EAC7C,KAAK,EAAC,CAAC,EAAC,EAAE;QACR,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC/B,MAAM,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC5C,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAEjC,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAC1C,UAAU,EACV,QAAQ,CAAC,CAAC,CAAC,EACX,kBAAkB,CACnB,CAAC;YACF,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC/B,OAAO,CAAC,CAAC,IAAI,CACX,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,EAC3B,wBAAwB,CAAC,MAAM,CAAC,SAAS,CAAC,CAC3C,CAAC;YACJ,CAAC;YAED,sBAAsB;YACtB,MAAM,eAAe,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACzD,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,GAAG,aAAa,CAAC,eAAe,CAAC,CAAC;YAEzD,iCAAiC;YACjC,MAAM,QAAQ,GAAG,MAAM,EAAE;iBACtB,MAAM,EAAE;iBACR,IAAI,CAAC,oBAAoB,CAAC;iBAC1B,KAAK,CAAC,EAAE,CAAC,oBAAoB,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;YAE/D,IAAI,IAAI,CAAC;YACT,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,yBAAyB;gBACzB,IAAI,GAAG,MAAM,EAAE;qBACZ,MAAM,CAAC,oBAAoB,CAAC;qBAC5B,GAAG,CAAC;oBACH,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI;oBACrC,qBAAqB,EAAE,SAAS;oBAChC,aAAa,EAAE,EAAE;oBACjB,UAAU,EAAE,IAAI,IAAI,EAAE;iBACvB,CAAC;qBACD,KAAK,CAAC,EAAE,CAAC,oBAAoB,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;qBAC3D,SAAS,EAAE,CAAC;YACjB,CAAC;iBAAM,CAAC;gBACN,oBAAoB;gBACpB,IAAI,GAAG,MAAM,EAAE;qBACZ,MAAM,CAAC,oBAAoB,CAAC;qBAC5B,MAAM,CAAC;oBACN,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE;oBAC3B,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI;oBACrC,qBAAqB,EAAE,SAAS;oBAChC,aAAa,EAAE,EAAE;oBACjB,UAAU,EAAE,MAAM;iBACnB,CAAC;qBACD,SAAS,EAAE,CAAC;YACjB,CAAC;YAED,OAAO,CAAC,CAAC,IAAI,CACX,eAAe,CAAsB,YAAY,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,EAC5D,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAChC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,CAAC,KAAK,CAAC,yCAAyC,EAAE,KAAK,CAAC,CAAC;YAChE,OAAO,CAAC,CAAC,IAAI,CACX,aAAa,CAAC,KAAK,CAAC,OAAO,IAAI,uBAAuB,CAAC,EACvD,GAAG,CACJ,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC;IAEF,6CAA6C;IAC7C,aAAa,CAAC,GAAG,CACf,GAAG,EACH,UAAU,CAAC,OAAO,EAAE,qBAAqB,CAAC,EAC1C,UAAU,CAAC,MAAM,EAAE,yBAAyB,CAAC,EAC7C,KAAK,EAAC,CAAC,EAAC,EAAE;QACR,IAAI,CAAC;YACH,MAAM,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC5C,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAEjC,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAC1C,UAAU,EACV,QAAQ,CAAC,CAAC,CAAC,EACX,kBAAkB,CACnB,CAAC;YACF,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC/B,OAAO,CAAC,CAAC,IAAI,CACX,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,EAC3B,wBAAwB,CAAC,MAAM,CAAC,SAAS,CAAC,CAC3C,CAAC;YACJ,CAAC;YAED,yBAAyB;YACzB,MAAM,QAAQ,GAAG,MAAM,EAAE;iBACtB,MAAM,EAAE;iBACR,IAAI,CAAC,oBAAoB,CAAC;iBAC1B,KAAK,CAAC,EAAE,CAAC,oBAAoB,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;YAE/D,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC1B,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,iCAAiC,CAAC,EAAE,GAAG,CAAC,CAAC;YACvE,CAAC;YAED,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAE,CAAC;YAE7B,wBAAwB;YACxB,IAAI,oBAAoB,GAAG,OAAO,CAAC,qBAAqB,CAAC;YACzD,IAAI,YAAY,GAAG,OAAO,CAAC,aAAa,CAAC;YAEzC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;gBACrB,MAAM,eAAe,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBACzD,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,GAAG,aAAa,CAAC,eAAe,CAAC,CAAC;gBACzD,oBAAoB,GAAG,SAAS,CAAC;gBACjC,YAAY,GAAG,EAAE,CAAC;YACpB,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,EAAE;iBAClB,MAAM,CAAC,oBAAoB,CAAC;iBAC5B,GAAG,CAAC;gBACH,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM;gBACrC,WAAW,EACT,IAAI,CAAC,WAAW,KAAK,SAAS;oBAC5B,CAAC,CAAC,IAAI,CAAC,WAAW;oBAClB,CAAC,CAAC,OAAO,CAAC,WAAW;gBACzB,qBAAqB,EAAE,oBAAoB;gBAC3C,aAAa,EAAE,YAAY;gBAC3B,UAAU,EAAE,IAAI,IAAI,EAAE;aACvB,CAAC;iBACD,KAAK,CAAC,EAAE,CAAC,oBAAoB,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;iBAC3D,SAAS,EAAE,CAAC;YAEf,OAAO,CAAC,CAAC,IAAI,CACX,eAAe,CAAsB,YAAY,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,CAC7D,CAAC;QACJ,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,CAAC,KAAK,CAAC,gCAAgC,EAAE,KAAK,CAAC,CAAC;YACvD,OAAO,CAAC,CAAC,IAAI,CACX,aAAa,CAAC,KAAK,CAAC,OAAO,IAAI,uBAAuB,CAAC,EACvD,GAAG,CACJ,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC;IAEF,wBAAwB;IACxB,aAAa,CAAC,MAAM,CAClB,GAAG,EACH,UAAU,CAAC,OAAO,EAAE,qBAAqB,CAAC,EAC1C,KAAK,EAAC,CAAC,EAAC,EAAE;QACR,IAAI,CAAC;YACH,MAAM,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAE5C,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAC1C,UAAU,EACV,QAAQ,CAAC,CAAC,CAAC,EACX,kBAAkB,CACnB,CAAC;YACF,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC/B,OAAO,CAAC,CAAC,IAAI,CACX,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,EAC3B,wBAAwB,CAAC,MAAM,CAAC,SAAS,CAAC,CAC3C,CAAC;YACJ,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,EAAE;iBAClB,MAAM,CAAC,oBAAoB,CAAC;iBAC5B,KAAK,CAAC,EAAE,CAAC,oBAAoB,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;iBAC3D,SAAS,EAAE,CAAC;YAEf,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACtB,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,iCAAiC,CAAC,EAAE,GAAG,CAAC,CAAC;YACvE,CAAC;YAED,OAAO,CAAC,CAAC,IAAI,CACX,eAAe,CAAsB,YAAY,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,CAC7D,CAAC;QACJ,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,CAAC,KAAK,CAAC,gCAAgC,EAAE,KAAK,CAAC,CAAC;YACvD,OAAO,CAAC,CAAC,IAAI,CACX,aAAa,CAAC,KAAK,CAAC,OAAO,IAAI,uBAAuB,CAAC,EACvD,GAAG,CACJ,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC;IAEF,OAAO,aAAa,CAAC;AACvB,CAAC"}

package/dist/routes/user-api-keys.d.ts

@@ -0,0 +1,14 @@
+/**
+ * @fileoverview Personal API key routes
+ * @description CRUD for the personal API keys (`<user prefix>...`) a user can present instead of a
+ * Firebase ID token. Keys are scoped to a user (not an entity): a key carries
+ * exactly the access its owner has, across every entity they belong to.
+ *
+ * Two operations hand back a usable secret — create and reveal — and both
+ * deliberately require a Firebase ID token. A leaked key can therefore be used
+ * to call the API, but not to mint further credentials or read sibling keys.
+ */
+import { Hono } from "hono";
+import type { ServiceContext } from "../context.js";
+export declare function createUserApiKeysRouter(ctx: ServiceContext): Hono<import("hono/types").BlankEnv, import("hono/types").BlankSchema, "/">;
+//# sourceMappingURL=user-api-keys.d.ts.map

package/dist/routes/user-api-keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-api-keys.d.ts","sourceRoot":"","sources":["../../src/routes/user-api-keys.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAa5B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAEpD,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,cAAc,8EA2U1D"}

package/dist/routes/user-api-keys.js

@@ -0,0 +1,237 @@
+/**
+ * @fileoverview Personal API key routes
+ * @description CRUD for the personal API keys (`<user prefix>...`) a user can present instead of a
+ * Firebase ID token. Keys are scoped to a user (not an entity): a key carries
+ * exactly the access its owner has, across every entity they belong to.
+ *
+ * Two operations hand back a usable secret — create and reveal — and both
+ * deliberately require a Firebase ID token. A leaked key can therefore be used
+ * to call the API, but not to mint further credentials or read sibling keys.
+ */
+import { Hono } from "hono";
+import { zValidator } from "@hono/zod-validator";
+import { eq, and, desc } from "drizzle-orm";
+import { successResponse, errorResponse, } from "@sudobility/shapeshyft_engine/types";
+import { apiKeyIdParamSchema, userApiKeyCreateSchema, userApiKeyUpdateSchema, userIdParamSchema, } from "../schemas/index.js";
+export function createUserApiKeysRouter(ctx) {
+    const { db } = ctx;
+    const { userApiKeys } = ctx.tables;
+    const { generateUserApiKey, hashUserApiKey, encryptUserApiKey, decryptUserApiKey, } = ctx.userApiKeys;
+    const { invalidateUserApiKeyCache } = ctx.userApiKeyCache;
+    const userApiKeysRouter = new Hono();
+    function toSafe(row) {
+        return {
+            uuid: row.uuid,
+            firebase_uid: row.firebase_uid,
+            key_name: row.key_name,
+            key_prefix: row.key_prefix,
+            is_active: row.is_active,
+            last_used_at: row.last_used_at?.toISOString() ?? null,
+            created_at: row.created_at?.toISOString() ?? null,
+            updated_at: row.updated_at?.toISOString() ?? null,
+        };
+    }
+    /**
+     * Verify the path userId matches the authenticated user.
+     * Returns an error message when it does not.
+     */
+    function checkOwnership(c, userId) {
+        const authUserId = c.get("userId");
+        return authUserId === userId
+            ? null
+            : "You can only manage your own API keys";
+    }
+    /** Operations that yield a usable secret require a real Firebase token. */
+    function requireFirebaseAuth(c) {
+        return c.get("authMethod") === "api_key"
+            ? "This operation requires a Firebase ID token. An API key cannot create or reveal API keys."
+            : null;
+    }
+    // =============================================================================
+    // Routes
+    // =============================================================================
+    /**
+     * GET /users/:userId/api-keys
+     * List the caller's API keys. Secrets are never included.
+     */
+    userApiKeysRouter.get("/", zValidator("param", userIdParamSchema), async (c) => {
+        try {
+            const { userId } = c.req.valid("param");
+            const ownershipError = checkOwnership(c, userId);
+            if (ownershipError)
+                return c.json(errorResponse(ownershipError), 403);
+            const rows = await db
+                .select()
+                .from(userApiKeys)
+                .where(eq(userApiKeys.firebase_uid, userId))
+                .orderBy(desc(userApiKeys.created_at));
+            return c.json(successResponse(rows.map(toSafe)));
+        }
+        catch (error) {
+            console.error("Error listing user API keys:", error);
+            const message = error instanceof Error ? error.message : "Internal server error";
+            return c.json(errorResponse(message), 500);
+        }
+    });
+    /**
+     * POST /users/:userId/api-keys
+     * Create a key. The full value is returned once, here.
+     * Requires a Firebase ID token.
+     */
+    userApiKeysRouter.post("/", zValidator("param", userIdParamSchema), zValidator("json", userApiKeyCreateSchema), async (c) => {
+        try {
+            const { userId } = c.req.valid("param");
+            const { key_name } = c.req.valid("json");
+            const ownershipError = checkOwnership(c, userId);
+            if (ownershipError)
+                return c.json(errorResponse(ownershipError), 403);
+            const authError = requireFirebaseAuth(c);
+            if (authError)
+                return c.json(errorResponse(authError), 403);
+            const { key, prefix } = generateUserApiKey();
+            const { encrypted, iv } = encryptUserApiKey(key);
+            const rows = await db
+                .insert(userApiKeys)
+                .values({
+                firebase_uid: userId,
+                key_name,
+                key_hash: hashUserApiKey(key),
+                key_prefix: prefix,
+                encrypted_key: encrypted,
+                encryption_iv: iv,
+            })
+                .returning();
+            const created = {
+                ...toSafe(rows[0]),
+                api_key: key,
+            };
+            return c.json(successResponse(created), 201);
+        }
+        catch (error) {
+            console.error("Error creating user API key:", error);
+            const message = error instanceof Error ? error.message : "Bad request";
+            return c.json(errorResponse(message), 400);
+        }
+    });
+    /**
+     * GET /users/:userId/api-keys/:keyId
+     * Metadata for one key. The secret is not included.
+     */
+    userApiKeysRouter.get("/:keyId", zValidator("param", apiKeyIdParamSchema), async (c) => {
+        try {
+            const { userId, keyId } = c.req.valid("param");
+            const ownershipError = checkOwnership(c, userId);
+            if (ownershipError)
+                return c.json(errorResponse(ownershipError), 403);
+            const rows = await db
+                .select()
+                .from(userApiKeys)
+                .where(and(eq(userApiKeys.firebase_uid, userId), eq(userApiKeys.uuid, keyId)));
+            if (rows.length === 0) {
+                return c.json(errorResponse("API key not found"), 404);
+            }
+            return c.json(successResponse(toSafe(rows[0])));
+        }
+        catch (error) {
+            console.error("Error getting user API key:", error);
+            const message = error instanceof Error ? error.message : "Internal server error";
+            return c.json(errorResponse(message), 500);
+        }
+    });
+    /**
+     * GET /users/:userId/api-keys/:keyId/reveal
+     * Return the full key so its owner can copy it again.
+     * Requires a Firebase ID token.
+     */
+    userApiKeysRouter.get("/:keyId/reveal", zValidator("param", apiKeyIdParamSchema), async (c) => {
+        try {
+            const { userId, keyId } = c.req.valid("param");
+            const ownershipError = checkOwnership(c, userId);
+            if (ownershipError)
+                return c.json(errorResponse(ownershipError), 403);
+            const authError = requireFirebaseAuth(c);
+            if (authError)
+                return c.json(errorResponse(authError), 403);
+            const rows = await db
+                .select()
+                .from(userApiKeys)
+                .where(and(eq(userApiKeys.firebase_uid, userId), eq(userApiKeys.uuid, keyId)));
+            if (rows.length === 0) {
+                return c.json(errorResponse("API key not found"), 404);
+            }
+            const row = rows[0];
+            const apiKey = decryptUserApiKey(row.encrypted_key, row.encryption_iv);
+            return c.json(successResponse({ api_key: apiKey }));
+        }
+        catch (error) {
+            console.error("Error revealing user API key:", error);
+            const message = error instanceof Error ? error.message : "Internal server error";
+            return c.json(errorResponse(message), 500);
+        }
+    });
+    /**
+     * PUT /users/:userId/api-keys/:keyId
+     * Rename a key or toggle it active. Deactivating takes effect immediately.
+     */
+    userApiKeysRouter.put("/:keyId", zValidator("param", apiKeyIdParamSchema), zValidator("json", userApiKeyUpdateSchema), async (c) => {
+        try {
+            const { userId, keyId } = c.req.valid("param");
+            const body = c.req.valid("json");
+            const ownershipError = checkOwnership(c, userId);
+            if (ownershipError)
+                return c.json(errorResponse(ownershipError), 403);
+            const existing = await db
+                .select()
+                .from(userApiKeys)
+                .where(and(eq(userApiKeys.firebase_uid, userId), eq(userApiKeys.uuid, keyId)));
+            if (existing.length === 0) {
+                return c.json(errorResponse("API key not found"), 404);
+            }
+            const rows = await db
+                .update(userApiKeys)
+                .set({
+                key_name: body.key_name ?? existing[0].key_name,
+                is_active: body.is_active ?? existing[0].is_active,
+                updated_at: new Date(),
+            })
+                .where(eq(userApiKeys.uuid, keyId))
+                .returning();
+            // Drop the cached identity so a deactivation is not honored late.
+            invalidateUserApiKeyCache(existing[0].key_hash);
+            return c.json(successResponse(toSafe(rows[0])));
+        }
+        catch (error) {
+            console.error("Error updating user API key:", error);
+            const message = error instanceof Error ? error.message : "Bad request";
+            return c.json(errorResponse(message), 400);
+        }
+    });
+    /**
+     * DELETE /users/:userId/api-keys/:keyId
+     * Permanently revoke a key.
+     */
+    userApiKeysRouter.delete("/:keyId", zValidator("param", apiKeyIdParamSchema), async (c) => {
+        try {
+            const { userId, keyId } = c.req.valid("param");
+            const ownershipError = checkOwnership(c, userId);
+            if (ownershipError)
+                return c.json(errorResponse(ownershipError), 403);
+            const rows = await db
+                .delete(userApiKeys)
+                .where(and(eq(userApiKeys.firebase_uid, userId), eq(userApiKeys.uuid, keyId)))
+                .returning();
+            if (rows.length === 0) {
+                return c.json(errorResponse("API key not found"), 404);
+            }
+            invalidateUserApiKeyCache(rows[0].key_hash);
+            return c.json(successResponse(toSafe(rows[0])));
+        }
+        catch (error) {
+            console.error("Error deleting user API key:", error);
+            const message = error instanceof Error ? error.message : "Bad request";
+            return c.json(errorResponse(message), 400);
+        }
+    });
+    return userApiKeysRouter;
+}
+//# sourceMappingURL=user-api-keys.js.map

package/dist/routes/user-api-keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-api-keys.js","sourceRoot":"","sources":["../../src/routes/user-api-keys.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EACL,eAAe,EACf,aAAa,GACd,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EACL,mBAAmB,EACnB,sBAAsB,EACtB,sBAAsB,EACtB,iBAAiB,GAClB,MAAM,qBAAqB,CAAC;AAG7B,MAAM,UAAU,uBAAuB,CAAC,GAAmB;IACzD,MAAM,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC;IACnB,MAAM,EAAE,WAAW,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;IACnC,MAAM,EACJ,kBAAkB,EAClB,cAAc,EACd,iBAAiB,EACjB,iBAAiB,GAClB,GAAG,GAAG,CAAC,WAAW,CAAC;IACpB,MAAM,EAAE,yBAAyB,EAAE,GAAG,GAAG,CAAC,eAAe,CAAC;IAE1D,MAAM,iBAAiB,GAAG,IAAI,IAAI,EAAE,CAAC;IAkCrC,SAAS,MAAM,CAAC,GAAkB;QAChC,OAAO;YACL,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,YAAY,EAAE,GAAG,CAAC,YAAY;YAC9B,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE,WAAW,EAAE,IAAI,IAAI;YACrD,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,WAAW,EAAE,IAAI,IAAI;YACjD,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,WAAW,EAAE,IAAI,IAAI;SAClD,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,SAAS,cAAc,CAAC,CAAM,EAAE,MAAc;QAC5C,MAAM,UAAU,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACnC,OAAO,UAAU,KAAK,MAAM;YAC1B,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,uCAAuC,CAAC;IAC9C,CAAC;IAED,2EAA2E;IAC3E,SAAS,mBAAmB,CAAC,CAAM;QACjC,OAAO,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,KAAK,SAAS;YACtC,CAAC,CAAC,2FAA2F;YAC7F,CAAC,CAAC,IAAI,CAAC;IACX,CAAC;IAED,gFAAgF;IAChF,SAAS;IACT,gFAAgF;IAEhF;;;OAGG;IACH,iBAAiB,CAAC,GAAG,CACnB,GAAG,EACH,UAAU,CAAC,OAAO,EAAE,iBAAiB,CAAC,EACtC,KAAK,EAAC,CAAC,EAAC,EAAE;QACR,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACxC,MAAM,cAAc,GAAG,cAAc,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YACjD,IAAI,cAAc;gBAAE,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,cAAc,CAAC,EAAE,GAAG,CAAC,CAAC;YAEtE,MAAM,IAAI,GAAG,MAAM,EAAE;iBAClB,MAAM,EAAE;iBACR,IAAI,CAAC,WAAW,CAAC;iBACjB,KAAK,CAAC,EAAE,CAAC,WAAW,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;iBAC3C,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC;YAEzC,OAAO,CAAC,CAAC,IAAI,CAAC,eAAe,CAAmB,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACrE,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,KAAK,CAAC,CAAC;YACrD,MAAM,OAAO,GACX,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,uBAAuB,CAAC;YACnE,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC,CACF,CAAC;IAEF;;;;OAIG;IACH,iBAAiB,CAAC,IAAI,CACpB,GAAG,EACH,UAAU,CAAC,OAAO,EAAE,iBAAiB,CAAC,EACtC,UAAU,CAAC,MAAM,EAAE,sBAAsB,CAAC,EAC1C,KAAK,EAAC,CAAC,EAAC,EAAE;QACR,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACxC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAEzC,MAAM,cAAc,GAAG,cAAc,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YACjD,IAAI,cAAc;gBAAE,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,cAAc,CAAC,EAAE,GAAG,CAAC,CAAC;YAEtE,MAAM,SAAS,GAAG,mBAAmB,CAAC,CAAC,CAAC,CAAC;YACzC,IAAI,SAAS;gBAAE,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,CAAC;YAE5D,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,kBAAkB,EAAE,CAAC;YAC7C,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;YAEjD,MAAM,IAAI,GAAG,MAAM,EAAE;iBAClB,MAAM,CAAC,WAAW,CAAC;iBACnB,MAAM,CAAC;gBACN,YAAY,EAAE,MAAM;gBACpB,QAAQ;gBACR,QAAQ,EAAE,cAAc,CAAC,GAAG,CAAC;gBAC7B,UAAU,EAAE,MAAM;gBAClB,aAAa,EAAE,SAAS;gBACxB,aAAa,EAAE,EAAE;aAClB,CAAC;iBACD,SAAS,EAAE,CAAC;YAEf,MAAM,OAAO,GAAsB;gBACjC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC;gBACnB,OAAO,EAAE,GAAG;aACb,CAAC;YAEF,OAAO,CAAC,CAAC,IAAI,CAAC,eAAe,CAAoB,OAAO,CAAC,EAAE,GAAG,CAAC,CAAC;QAClE,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,KAAK,CAAC,CAAC;YACrD,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC;YACvE,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC,CACF,CAAC;IAEF;;;OAGG;IACH,iBAAiB,CAAC,GAAG,CACnB,SAAS,EACT,UAAU,CAAC,OAAO,EAAE,mBAAmB,CAAC,EACxC,KAAK,EAAC,CAAC,EAAC,EAAE;QACR,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC/C,MAAM,cAAc,GAAG,cAAc,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YACjD,IAAI,cAAc;gBAAE,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,cAAc,CAAC,EAAE,GAAG,CAAC,CAAC;YAEtE,MAAM,IAAI,GAAG,MAAM,EAAE;iBAClB,MAAM,EAAE;iBACR,IAAI,CAAC,WAAW,CAAC;iBACjB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,WAAW,CAAC,YAAY,EAAE,MAAM,CAAC,EACpC,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,CAC5B,CACF,CAAC;YAEJ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACtB,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC,EAAE,GAAG,CAAC,CAAC;YACzD,CAAC;YAED,OAAO,CAAC,CAAC,IAAI,CAAC,eAAe,CAAiB,MAAM,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC;QACnE,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,OAAO,CAAC,KAAK,CAAC,6BAA6B,EAAE,KAAK,CAAC,CAAC;YACpD,MAAM,OAAO,GACX,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,uBAAuB,CAAC;YACnE,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC,CACF,CAAC;IAEF;;;;OAIG;IACH,iBAAiB,CAAC,GAAG,CACnB,gBAAgB,EAChB,UAAU,CAAC,OAAO,EAAE,mBAAmB,CAAC,EACxC,KAAK,EAAC,CAAC,EAAC,EAAE;QACR,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAE/C,MAAM,cAAc,GAAG,cAAc,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YACjD,IAAI,cAAc;gBAAE,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,cAAc,CAAC,EAAE,GAAG,CAAC,CAAC;YAEtE,MAAM,SAAS,GAAG,mBAAmB,CAAC,CAAC,CAAC,CAAC;YACzC,IAAI,SAAS;gBAAE,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,CAAC;YAE5D,MAAM,IAAI,GAAG,MAAM,EAAE;iBAClB,MAAM,EAAE;iBACR,IAAI,CAAC,WAAW,CAAC;iBACjB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,WAAW,CAAC,YAAY,EAAE,MAAM,CAAC,EACpC,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,CAC5B,CACF,CAAC;YAEJ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACtB,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC,EAAE,GAAG,CAAC,CAAC;YACzD,CAAC;YAED,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC;YACrB,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,aAAa,EAAE,GAAG,CAAC,aAAa,CAAC,CAAC;YAEvE,OAAO,CAAC,CAAC,IAAI,CAAC,eAAe,CAAqB,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;QAC1E,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,OAAO,CAAC,KAAK,CAAC,+BAA+B,EAAE,KAAK,CAAC,CAAC;YACtD,MAAM,OAAO,GACX,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,uBAAuB,CAAC;YACnE,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC,CACF,CAAC;IAEF;;;OAGG;IACH,iBAAiB,CAAC,GAAG,CACnB,SAAS,EACT,UAAU,CAAC,OAAO,EAAE,mBAAmB,CAAC,EACxC,UAAU,CAAC,MAAM,EAAE,sBAAsB,CAAC,EAC1C,KAAK,EAAC,CAAC,EAAC,EAAE;QACR,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC/C,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAEjC,MAAM,cAAc,GAAG,cAAc,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YACjD,IAAI,cAAc;gBAAE,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,cAAc,CAAC,EAAE,GAAG,CAAC,CAAC;YAEtE,MAAM,QAAQ,GAAG,MAAM,EAAE;iBACtB,MAAM,EAAE;iBACR,IAAI,CAAC,WAAW,CAAC;iBACjB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,WAAW,CAAC,YAAY,EAAE,MAAM,CAAC,EACpC,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,CAC5B,CACF,CAAC;YAEJ,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC1B,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC,EAAE,GAAG,CAAC,CAAC;YACzD,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,EAAE;iBAClB,MAAM,CAAC,WAAW,CAAC;iBACnB,GAAG,CAAC;gBACH,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,CAAC,CAAE,CAAC,QAAQ;gBAChD,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,QAAQ,CAAC,CAAC,CAAE,CAAC,SAAS;gBACnD,UAAU,EAAE,IAAI,IAAI,EAAE;aACvB,CAAC;iBACD,KAAK,CAAC,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;iBAClC,SAAS,EAAE,CAAC;YAEf,kEAAkE;YAClE,yBAAyB,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAC,CAAC;YAEjD,OAAO,CAAC,CAAC,IAAI,CAAC,eAAe,CAAiB,MAAM,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC;QACnE,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,KAAK,CAAC,CAAC;YACrD,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC;YACvE,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC,CACF,CAAC;IAEF;;;OAGG;IACH,iBAAiB,CAAC,MAAM,CACtB,SAAS,EACT,UAAU,CAAC,OAAO,EAAE,mBAAmB,CAAC,EACxC,KAAK,EAAC,CAAC,EAAC,EAAE;QACR,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC/C,MAAM,cAAc,GAAG,cAAc,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YACjD,IAAI,cAAc;gBAAE,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,cAAc,CAAC,EAAE,GAAG,CAAC,CAAC;YAEtE,MAAM,IAAI,GAAG,MAAM,EAAE;iBAClB,MAAM,CAAC,WAAW,CAAC;iBACnB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,WAAW,CAAC,YAAY,EAAE,MAAM,CAAC,EACpC,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,CAC5B,CACF;iBACA,SAAS,EAAE,CAAC;YAEf,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACtB,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC,EAAE,GAAG,CAAC,CAAC;YACzD,CAAC;YAED,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAC,CAAC;YAE7C,OAAO,CAAC,CAAC,IAAI,CAAC,eAAe,CAAiB,MAAM,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC;QACnE,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,KAAK,CAAC,CAAC;YACrD,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC;YACvE,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC,CACF,CAAC;IAEF,OAAO,iBAAiB,CAAC;AAC3B,CAAC"}

package/dist/routes/users.d.ts

@@ -0,0 +1,7 @@
+/**
+ * @fileoverview User routes
+ */
+import { Hono } from "hono";
+import type { ServiceContext } from "../context.js";
+export declare function createUsersRouter(ctx: ServiceContext): Hono<import("hono/types").BlankEnv, import("hono/types").BlankSchema, "/">;
+//# sourceMappingURL=users.d.ts.map

package/dist/routes/users.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"users.d.ts","sourceRoot":"","sources":["../../src/routes/users.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAW5B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAEpD,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,cAAc,8EAuHpD"}