@verdict-ai/api 0.1.0 → 0.2.0

package/dist/routes/hub.d.ts

@@ -0,0 +1,12 @@
+import { Hono } from "hono";
+import type { AppOptions, Env } from "../app.js";
+/** Paths that answer without an API key. */
+export declare const PUBLIC_HUB_PATHS: Set<string>;
+/** The tenant of a GitHub account. Numeric ids survive renamed logins. */
+export declare const githubTenant: (githubId: number) => string;
+export declare function registerHub(app: Hono<Env>, { engine, keys, github, now, limits, clientKey, signIn }: AppOptions): void;
+/**
+ * Who a tenant publishes as. With GitHub sign-in configured, only signed-in GitHub accounts publish, under their
+ * login; without it (a self-hosted team server), a tenant publishes under its own id, an open server as "local".
+ */
+export declare function publisherFor(opts: Pick<AppOptions, "engine" | "github">): (tenantId: string | undefined) => Promise<string | undefined>;

package/dist/routes/hub.js

@@ -0,0 +1,66 @@
+/**
+ * Hub sign-in (docs/design/hub.md H2). `GET /v1/hub/config` and `POST /v1/hub/login` are public: the CLI learns the
+ * GitHub client id, runs the device flow, and trades the GitHub token for a hub API key bound to the GitHub account.
+ * `GET /v1/hub/me` and `DELETE /v1/hub/keys/:id` are authenticated.
+ */
+import { hasPublishers } from "@verdict-ai/core";
+import { HTTPException } from "hono/http-exception";
+import { z } from "zod";
+import { verifyGithubToken } from "../github.js";
+import { defaultClientKey, enforce } from "../rate-limit.js";
+import { tenant } from "./shared.js";
+/** Paths that answer without an API key. */
+export const PUBLIC_HUB_PATHS = new Set(["/v1/hub/config", "/v1/hub/login"]);
+/** The tenant of a GitHub account. Numeric ids survive renamed logins. */
+export const githubTenant = (githubId) => `gh:${githubId}`;
+export function registerHub(app, { engine, keys, github, now = () => Date.now(), limits, clientKey = defaultClientKey, signIn }) {
+    const publishers = () => {
+        if (!hasPublishers(engine.store))
+            throw new HTTPException(501, { message: "this server's store cannot keep publishers" });
+        return engine.store;
+    };
+    app.get("/v1/hub/config", (c) => c.json({ github: github ? { clientId: github.clientId } : null, publishing: github ? "github" : "tenant", ...(signIn ? { signIn } : {}) }));
+    app.post("/v1/hub/login", async (c) => {
+        if (!github)
+            throw new HTTPException(501, { message: "GitHub sign-in is not configured on this server (GITHUB_CLIENT_ID)" });
+        if (!keys)
+            throw new HTTPException(501, { message: "this server cannot issue API keys (needs a database store)" });
+        // Each sign-in asks GitHub and mints a key: limit it per client before doing either.
+        await enforce(limits?.login, clientKey(c), "sign-in");
+        const { githubToken } = z.object({ githubToken: z.string().min(1).max(512) }).parse(await c.req.json());
+        const account = await verifyGithubToken(githubToken, github);
+        const tenantId = githubTenant(account.id), at = new Date(now()).toISOString();
+        const existing = await publishers().getPublisher(tenantId);
+        await publishers().putPublisher({ tenantId, githubId: account.id, login: account.login, createdAt: existing?.createdAt ?? at, updatedAt: at });
+        const key = await keys.createKey(tenantId, `hub sign-in (${account.login})`);
+        // The GitHub token is not stored anywhere; the hub key is shown once, here.
+        return c.json({ apiKey: key.key, keyId: key.id, handle: account.login, tenantId }, 201);
+    });
+    app.get("/v1/hub/me", async (c) => {
+        const tenantId = tenant(c);
+        const publisher = tenantId && hasPublishers(engine.store) ? await engine.store.getPublisher(tenantId) : undefined;
+        return c.json({ tenantId: tenantId ?? null, handle: publisher?.login ?? (github ? null : tenantId ?? "local"), github: publisher ? { id: publisher.githubId, login: publisher.login } : null });
+    });
+    app.delete("/v1/hub/keys/:id", async (c) => {
+        if (!keys)
+            throw new HTTPException(501, { message: "this server cannot manage API keys" });
+        const tenantId = tenant(c);
+        if (!tenantId || !(await keys.revokeKey(c.req.param("id"), tenantId)))
+            throw new HTTPException(404, { message: "no such key for this account" });
+        return c.body(null, 204);
+    });
+}
+/**
+ * Who a tenant publishes as. With GitHub sign-in configured, only signed-in GitHub accounts publish, under their
+ * login; without it (a self-hosted team server), a tenant publishes under its own id, an open server as "local".
+ */
+export function publisherFor(opts) {
+    return async (tenantId) => {
+        if (!opts.github)
+            return tenantId ?? "local";
+        if (!tenantId || !hasPublishers(opts.engine.store))
+            return undefined;
+        return (await opts.engine.store.getPublisher(tenantId))?.login;
+    };
+}
+//# sourceMappingURL=hub.js.map

package/dist/routes/hub.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hub.js","sourceRoot":"","sources":["../../src/routes/hub.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,aAAa,EAAuB,MAAM,kBAAkB,CAAC;AAEtE,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,4CAA4C;AAC5C,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,gBAAgB,EAAE,eAAe,CAAC,CAAC,CAAC;AAE7E,0EAA0E;AAC1E,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,QAAgB,EAAE,EAAE,CAAC,MAAM,QAAQ,EAAE,CAAC;AAEnE,MAAM,UAAU,WAAW,CAAC,GAAc,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,SAAS,GAAG,gBAAgB,EAAE,MAAM,EAAc;IACpJ,MAAM,UAAU,GAAG,GAAmB,EAAE;QACtC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,4CAA4C,EAAE,CAAC,CAAC;QAC1H,OAAO,MAAM,CAAC,KAAK,CAAC;IACtB,CAAC,CAAC;IAEF,GAAG,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAE7K,GAAG,CAAC,IAAI,CAAC,eAAe,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACpC,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,oEAAoE,EAAE,CAAC,CAAC;QAC7H,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,4DAA4D,EAAE,CAAC,CAAC;QACnH,qFAAqF;QACrF,MAAM,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QACtD,MAAM,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QACxG,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAC7D,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,EAAE,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAC9E,MAAM,QAAQ,GAAG,MAAM,UAAU,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC3D,MAAM,UAAU,EAAE,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,IAAI,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;QAC/I,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,gBAAgB,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC;QAC7E,4EAA4E;QAC5E,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE,GAAG,CAAC,CAAC;IAC1F,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAChC,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QAC3B,MAAM,SAAS,GAAG,QAAQ,IAAI,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAClH,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,QAAQ,IAAI,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,IAAI,OAAO,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,SAAS,CAAC,QAAQ,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAClM,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,MAAM,CAAC,kBAAkB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACzC,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,oCAAoC,EAAE,CAAC,CAAC;QAC3F,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QAC3B,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,CAAC;YAAE,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,8BAA8B,EAAE,CAAC,CAAC;QACjJ,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,IAA2C;IACtE,OAAO,KAAK,EAAE,QAA4B,EAA+B,EAAE;QACzE,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO,QAAQ,IAAI,OAAO,CAAC;QAC7C,IAAI,CAAC,QAAQ,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QACrE,OAAO,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC;IACjE,CAAC,CAAC;AACJ,CAAC"}

package/dist/routes/project-versions.d.ts

@@ -0,0 +1,4 @@
+import { Hono } from "hono";
+import type { AppOptions, Env } from "../app.js";
+/** Registers version routes. */
+export declare function registerProjectVersions(app: Hono<Env>, options: AppOptions): void;

package/dist/routes/project-versions.js

@@ -0,0 +1,56 @@
+/**
+ * Immutable rubric versions kept in a project (docs/design/control-plane.md §4). A version is stored under the name
+ * services ask for; the server freezes the uploaded rubric again and refuses an id that does not match its content.
+ */
+import { CONTROL_LIST_LIMIT, CONTROL_VERSION_BYTES, controlName, NotFoundError, projectVersion, VersionUpload } from "@verdict-ai/core";
+import { z } from "zod";
+import { ApiError, bare, controlContext, projectNotFound, readJson } from "./shared.js";
+/** A version as lists show it: everything but the rubric document. */
+function listed(v) {
+    const { rubric: _rubric, ...rest } = bare(v);
+    return rest;
+}
+/** Registers version routes. */
+export function registerProjectVersions(app, options) {
+    const { store, scope, allow, project, now } = controlContext(options);
+    const base = "/v1/projects/:project/rubrics";
+    const missing = (name, id, projectName) => new NotFoundError(`version ${id} of ${name} not found in project ${projectName}`);
+    app.post(`${base}/:name/versions`, async (c) => {
+        const s = scope(c), name = c.req.param("name");
+        await allow(c, "version.put", { project: s.project, name });
+        const upload = VersionUpload.parse(await readJson(c.req.raw, CONTROL_VERSION_BYTES));
+        const result = await store().putVersion(await projectVersion(upload, s, controlName(name, "rubric"), now));
+        if (result === "no_project")
+            throw projectNotFound(s.project);
+        return c.json({ version: bare(result.version), created: result.created }, result.created ? 201 : 200);
+    });
+    app.get(base, async (c) => {
+        await allow(c, "version.read", { project: c.req.param("project") });
+        return c.json({ data: await store().listRubricNames(await project(c)) });
+    });
+    app.get(`${base}/:name/versions`, async (c) => {
+        const name = c.req.param("name");
+        await allow(c, "version.read", { project: c.req.param("project"), name });
+        const { limit } = z.object({ limit: z.coerce.number().int().min(1).max(CONTROL_LIST_LIMIT).default(CONTROL_LIST_LIMIT) }).parse(c.req.query());
+        return c.json({ data: (await store().listVersions(await project(c), { name, limit })).map(listed) });
+    });
+    app.get(`${base}/:name/versions/:id`, async (c) => {
+        const s = scope(c), name = c.req.param("name"), id = c.req.param("id");
+        await allow(c, "version.read", { project: s.project, name, versionId: id });
+        const version = await store().getVersion(s, name, id);
+        if (!version)
+            throw missing(name, id, s.project);
+        return c.json(bare(version));
+    });
+    app.delete(`${base}/:name/versions/:id`, async (c) => {
+        const s = scope(c), name = c.req.param("name"), id = c.req.param("id");
+        await allow(c, "version.delete", { project: s.project, name, versionId: id });
+        const result = await store().deleteVersion(s, name, id);
+        if (result === "not_found")
+            throw missing(name, id, s.project);
+        if (result === "in_use")
+            throw new ApiError(409, "in_use", `an environment points at ${id}; promote another version of ${name} or remove the pointer first`);
+        return c.body(null, 204);
+    });
+}
+//# sourceMappingURL=project-versions.js.map

package/dist/routes/project-versions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-versions.js","sourceRoot":"","sources":["../../src/routes/project-versions.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,WAAW,EAAE,aAAa,EAAE,cAAc,EAAE,aAAa,EAAuB,MAAM,kBAAkB,CAAC;AAE7J,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,cAAc,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAExF,sEAAsE;AACtE,SAAS,MAAM,CAAC,CAAiB;IAC/B,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IAC7C,OAAO,IAAI,CAAC;AACd,CAAC;AAED,gCAAgC;AAChC,MAAM,UAAU,uBAAuB,CAAC,GAAc,EAAE,OAAmB;IACzE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IACtE,MAAM,IAAI,GAAG,+BAA+B,CAAC;IAC7C,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,EAAU,EAAE,WAAmB,EAAE,EAAE,CAAC,IAAI,aAAa,CAAC,WAAW,EAAE,OAAO,IAAI,yBAAyB,WAAW,EAAE,CAAC,CAAC;IAErJ,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,iBAAiB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC7C,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC/C,MAAM,KAAK,CAAC,CAAC,EAAE,aAAa,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC,CAAC;QACrF,MAAM,MAAM,GAAG,MAAM,KAAK,EAAE,CAAC,UAAU,CAAC,MAAM,cAAc,CAAC,MAAM,EAAE,CAAC,EAAE,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QAC3G,IAAI,MAAM,KAAK,YAAY;YAAE,MAAM,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAC9D,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACxG,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACxB,MAAM,KAAK,CAAC,CAAC,EAAE,cAAc,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACpE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,KAAK,EAAE,CAAC,eAAe,CAAC,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,iBAAiB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC5C,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACjC,MAAM,KAAK,CAAC,CAAC,EAAE,cAAc,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1E,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;QAC/I,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,MAAM,KAAK,EAAE,CAAC,YAAY,CAAC,MAAM,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACvG,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,qBAAqB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAChD,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACvE,MAAM,KAAK,CAAC,CAAC,EAAE,cAAc,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;QAC5E,MAAM,OAAO,GAAG,MAAM,KAAK,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QACtD,IAAI,CAAC,OAAO;YAAE,MAAM,OAAO,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;QACjD,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,qBAAqB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACnD,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACvE,MAAM,KAAK,CAAC,CAAC,EAAE,gBAAgB,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;QAC9E,MAAM,MAAM,GAAG,MAAM,KAAK,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QACxD,IAAI,MAAM,KAAK,WAAW;YAAE,MAAM,OAAO,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;QAC/D,IAAI,MAAM,KAAK,QAAQ;YAAE,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,QAAQ,EAAE,4BAA4B,EAAE,gCAAgC,IAAI,8BAA8B,CAAC,CAAC;QAC7J,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/routes/projects.d.ts

@@ -0,0 +1,4 @@
+import { Hono } from "hono";
+import type { AppOptions, Env } from "../app.js";
+/** Registers project and environment routes. */
+export declare function registerProjects(app: Hono<Env>, options: AppOptions): void;

package/dist/routes/projects.js

@@ -0,0 +1,91 @@
+/**
+ * Projects and environments of the control plane (docs/design/control-plane.md §3, §5.3). Authenticated and
+ * tenant-scoped; every handler asks `allow` before it touches the store.
+ */
+import { ConfirmRequest, fingerprint, NameRequest, NotFoundError, ValidationError } from "@verdict-ai/core";
+import { HTTPException } from "hono/http-exception";
+import { ApiError, bare, controlContext, projectNotFound, readJson, tenant } from "./shared.js";
+/** Deleting takes the name twice: once in the URL, once in the body. */
+async function confirmed(req, name, what) {
+    const { confirm } = ConfirmRequest.parse(await readJson(req));
+    if (confirm !== name)
+        throw new ValidationError(`to delete ${what} ${name}, send { "confirm": "${name}" }`);
+}
+/** The document a pointer names. A pointed-at version cannot be deleted, so a miss means the pointer just moved. */
+async function rubricOf(store, scope, pointer) {
+    const version = await store.getVersion(scope, pointer.name, pointer.versionId);
+    if (!version)
+        throw new HTTPException(503, { message: `${pointer.name} changed while it was being read; ask again` });
+    return version.rubric;
+}
+/** Registers project and environment routes. */
+export function registerProjects(app, options) {
+    const { store, allow, at } = controlContext(options);
+    app.post("/v1/projects", async (c) => {
+        const { name } = NameRequest.parse(await readJson(c.req.raw));
+        await allow(c, "project.create", { project: name });
+        const tenantId = tenant(c), project = { ...(tenantId === undefined ? {} : { tenantId }), name, createdAt: at() };
+        if (!(await store().createProject(project)))
+            throw new ApiError(409, "already_exists", `project ${name} already exists`);
+        return c.json(bare(project), 201);
+    });
+    app.get("/v1/projects", async (c) => {
+        await allow(c, "project.read");
+        return c.json({ data: (await store().listProjects(tenant(c))).map(bare) });
+    });
+    app.delete("/v1/projects/:project", async (c) => {
+        const name = c.req.param("project");
+        await allow(c, "project.delete", { project: name });
+        await confirmed(c.req.raw, name, "project");
+        if (!(await store().deleteProject(tenant(c), name)))
+            throw projectNotFound(name);
+        return c.body(null, 204);
+    });
+    registerEnvironments(app, options);
+}
+function registerEnvironments(app, options) {
+    const { store, scope, allow, project, at } = controlContext(options);
+    app.post("/v1/projects/:project/environments", async (c) => {
+        const { name } = NameRequest.parse(await readJson(c.req.raw));
+        const s = scope(c);
+        await allow(c, "environment.create", { project: s.project, environment: name });
+        const environment = { ...s, name, createdAt: at() };
+        const result = await store().createEnvironment(environment);
+        if (result === "no_project")
+            throw projectNotFound(s.project);
+        if (result === "exists")
+            throw new ApiError(409, "already_exists", `environment ${name} already exists in project ${s.project}`);
+        return c.json(bare(environment), 201);
+    });
+    app.get("/v1/projects/:project/environments", async (c) => {
+        await allow(c, "environment.read", { project: c.req.param("project") });
+        return c.json({ data: (await store().listEnvironments(await project(c))).map(bare) });
+    });
+    // What a service polls: `?include=rubrics` returns the documents too, so one answer holds everything an environment
+    // runs. Versions never change, so the pointers alone identify the answer: an unchanged environment answers 304.
+    app.get("/v1/projects/:project/environments/:environment", async (c) => {
+        const s = scope(c), name = c.req.param("environment"), withRubrics = c.req.query("include") === "rubrics";
+        await allow(c, "environment.read", { project: s.project, environment: name });
+        const environment = await store().getEnvironment(s, name);
+        if (!environment)
+            throw new NotFoundError(`environment ${name} not found in project ${s.project}`);
+        const pointers = (await store().listPointers(s, name)).map((p) => ({ name: p.name, versionId: p.versionId, updatedAt: p.updatedAt }));
+        const etag = `"${await fingerprint([environment.createdAt, withRubrics, pointers.map((p) => [p.name, p.versionId])])}"`;
+        c.header("ETag", etag);
+        c.header("Cache-Control", "private, no-cache");
+        if (c.req.header("if-none-match") === etag)
+            return c.body(null, 304);
+        if (!withRubrics)
+            return c.json({ ...bare(environment), pointers });
+        return c.json({ ...bare(environment), pointers: await Promise.all(pointers.map(async (p) => ({ ...p, rubric: await rubricOf(store(), s, p) }))) });
+    });
+    app.delete("/v1/projects/:project/environments/:environment", async (c) => {
+        const s = scope(c), name = c.req.param("environment");
+        await allow(c, "environment.delete", { project: s.project, environment: name });
+        await confirmed(c.req.raw, name, "environment");
+        if (!(await store().deleteEnvironment(s, name)))
+            throw new NotFoundError(`environment ${name} not found in project ${s.project}`);
+        return c.body(null, 204);
+    });
+}
+//# sourceMappingURL=projects.js.map

package/dist/routes/projects.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"projects.js","sourceRoot":"","sources":["../../src/routes/projects.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,WAAW,EAAE,aAAa,EAAE,eAAe,EAAqD,MAAM,kBAAkB,CAAC;AAE/J,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAGpD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,cAAc,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAEhG,wEAAwE;AACxE,KAAK,UAAU,SAAS,CAAC,GAAY,EAAE,IAAY,EAAE,IAAY;IAC/D,MAAM,EAAE,OAAO,EAAE,GAAG,cAAc,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9D,IAAI,OAAO,KAAK,IAAI;QAAE,MAAM,IAAI,eAAe,CAAC,aAAa,IAAI,IAAI,IAAI,wBAAwB,IAAI,KAAK,CAAC,CAAC;AAC9G,CAAC;AAED,oHAAoH;AACpH,KAAK,UAAU,QAAQ,CAAC,KAAmB,EAAE,KAAmB,EAAE,OAA4C;IAC5G,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IAC/E,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,IAAI,6CAA6C,EAAE,CAAC,CAAC;IACtH,OAAO,OAAO,CAAC,MAAM,CAAC;AACxB,CAAC;AAED,gDAAgD;AAChD,MAAM,UAAU,gBAAgB,CAAC,GAAc,EAAE,OAAmB;IAClE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IAErD,GAAG,CAAC,IAAI,CAAC,cAAc,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACnC,MAAM,EAAE,IAAI,EAAE,GAAG,WAAW,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9D,MAAM,KAAK,CAAC,CAAC,EAAE,gBAAgB,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,GAAG,EAAE,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,CAAC;QACjH,IAAI,CAAC,CAAC,MAAM,KAAK,EAAE,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;YAAE,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,gBAAgB,EAAE,WAAW,IAAI,iBAAiB,CAAC,CAAC;QACzH,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAClC,MAAM,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC;QAC/B,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,MAAM,KAAK,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,MAAM,CAAC,uBAAuB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC9C,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACpC,MAAM,KAAK,CAAC,CAAC,EAAE,gBAAgB,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,MAAM,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;QAC5C,IAAI,CAAC,CAAC,MAAM,KAAK,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;YAAE,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC;QACjF,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,oBAAoB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,oBAAoB,CAAC,GAAc,EAAE,OAAmB;IAC/D,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IAErE,GAAG,CAAC,IAAI,CAAC,oCAAoC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACzD,MAAM,EAAE,IAAI,EAAE,GAAG,WAAW,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9D,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACnB,MAAM,KAAK,CAAC,CAAC,EAAE,oBAAoB,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;QAChF,MAAM,WAAW,GAAG,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,CAAC;QACpD,MAAM,MAAM,GAAG,MAAM,KAAK,EAAE,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC;QAC5D,IAAI,MAAM,KAAK,YAAY;YAAE,MAAM,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAC9D,IAAI,MAAM,KAAK,QAAQ;YAAE,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,gBAAgB,EAAE,eAAe,IAAI,8BAA8B,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QACjI,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,GAAG,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,oCAAoC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACxD,MAAM,KAAK,CAAC,CAAC,EAAE,kBAAkB,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACxE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,MAAM,KAAK,EAAE,CAAC,gBAAgB,CAAC,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACxF,CAAC,CAAC,CAAC;IAEH,oHAAoH;IACpH,gHAAgH;IAChH,GAAG,CAAC,GAAG,CAAC,iDAAiD,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACrE,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,WAAW,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,SAAS,CAAC;QAC1G,MAAM,KAAK,CAAC,CAAC,EAAE,kBAAkB,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9E,MAAM,WAAW,GAAG,MAAM,KAAK,EAAE,CAAC,cAAc,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QAC1D,IAAI,CAAC,WAAW;YAAE,MAAM,IAAI,aAAa,CAAC,eAAe,IAAI,yBAAyB,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QACnG,MAAM,QAAQ,GAAG,CAAC,MAAM,KAAK,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;QACtI,MAAM,IAAI,GAAG,IAAI,MAAM,WAAW,CAAC,CAAC,WAAW,CAAC,SAAS,EAAE,WAAW,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QACxH,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACvB,CAAC,CAAC,MAAM,CAAC,eAAe,EAAE,mBAAmB,CAAC,CAAC;QAC/C,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,IAAI;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACrE,IAAI,CAAC,WAAW;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;QACpE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACrJ,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,MAAM,CAAC,iDAAiD,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACxE,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QACtD,MAAM,KAAK,CAAC,CAAC,EAAE,oBAAoB,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;QAChF,MAAM,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;QAChD,IAAI,CAAC,CAAC,MAAM,KAAK,EAAE,CAAC,iBAAiB,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;YAAE,MAAM,IAAI,aAAa,CAAC,eAAe,IAAI,yBAAyB,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QAClI,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/routes/promotions.d.ts

@@ -0,0 +1,4 @@
+import { Hono } from "hono";
+import type { AppOptions, Env } from "../app.js";
+/** Registers promotion, rollback and history routes. */
+export declare function registerPromotions(app: Hono<Env>, options: AppOptions): void;

package/dist/routes/promotions.js

@@ -0,0 +1,72 @@
+/**
+ * Pointer changes and their history (docs/design/control-plane.md §5). A promotion names the version the caller saw;
+ * the store applies all of a request's changes or none, and a stale request is answered with where the pointers are.
+ */
+import { CONTROL_LIST_LIMIT, NotFoundError, planRollback, PromotionRequest, promotionEvents, RollbackRequest, } from "@verdict-ai/core";
+import { z } from "zod";
+import { ApiError, bare, controlContext, readJson } from "./shared.js";
+const HistoryQuery = z.object({
+    environment: z.string().optional(), name: z.string().optional(),
+    limit: z.coerce.number().int().min(1).max(CONTROL_LIST_LIMIT).default(CONTROL_LIST_LIMIT),
+});
+const noEnvironment = (ctx) => new NotFoundError(`environment ${ctx.environment} not found in project ${ctx.scope.project}`);
+/** Where the named pointers are now, for the answer to a request that saw them elsewhere. */
+async function current(store, scope, environment, names) {
+    const pointers = await store.listPointers(scope, environment);
+    return names.map((name) => ({ name, versionId: pointers.find((p) => p.name === name)?.versionId ?? null }));
+}
+/** The error for a batch the store refused. */
+async function refusal(store, reason, events, ctx) {
+    if (reason === "no_environment")
+        return noEnvironment(ctx);
+    if (reason === "unknown_version") {
+        for (const e of events) {
+            if (e.to !== null && !(await store.getVersion(ctx.scope, e.name, e.to)))
+                return new ApiError(400, "unknown_version", `version ${e.to} is not kept under ${e.name} in project ${ctx.scope.project}; upload it first`);
+        }
+    }
+    const now = await current(store, ctx.scope, ctx.environment, events.map((e) => e.name));
+    return new ApiError(409, "pointer_conflict", `${ctx.environment} changed since you read it; nothing was applied`, { current: now });
+}
+/** Registers promotion, rollback and history routes. */
+export function registerPromotions(app, options) {
+    const { store, scope, allow, project, at } = controlContext(options);
+    const base = "/v1/projects/:project/environments/:environment";
+    app.post(`${base}/promotions`, async (c) => {
+        const request = PromotionRequest.parse(await readJson(c.req.raw));
+        const ctx = { scope: scope(c), environment: c.req.param("environment"), actor: c.get("actor"), at: at() };
+        for (const change of request.changes) {
+            await allow(c, change.versionId === null ? "pointer.unset" : "pointer.promote", { project: ctx.scope.project, environment: ctx.environment, name: change.name, versionId: change.versionId });
+        }
+        const events = promotionEvents(request, ctx);
+        const result = await store().applyPromotions(events);
+        if (!result.ok)
+            throw await refusal(store(), result.reason, events, ctx);
+        return c.json({ events: events.map(bare) });
+    });
+    app.post(`${base}/rollbacks`, async (c) => {
+        const request = RollbackRequest.parse(await readJson(c.req.raw));
+        const ctx = { scope: scope(c), environment: c.req.param("environment"), actor: c.get("actor"), at: at() };
+        await allow(c, "pointer.rollback", { project: ctx.scope.project, environment: ctx.environment, name: request.name });
+        const plan = await planRollback(store(), request, ctx);
+        if (!plan.ok) {
+            if (plan.reason === "no_environment")
+                throw noEnvironment(ctx);
+            if (plan.reason === "nothing_to_roll_back")
+                throw new ApiError(409, "nothing_to_roll_back", `${request.name} in ${ctx.environment} has no earlier version on record`);
+            throw new ApiError(409, "pointer_conflict", `${ctx.environment} changed since you read it; nothing was applied`, { current: [{ name: request.name, versionId: plan.current }] });
+        }
+        const result = await store().applyPromotions([plan.event]);
+        if (!result.ok && result.reason === "unknown_version")
+            throw new ApiError(409, "nothing_to_roll_back", `the earlier version ${plan.event.to} of ${request.name} was deleted`);
+        if (!result.ok)
+            throw await refusal(store(), result.reason, [plan.event], ctx);
+        return c.json({ event: bare(plan.event) });
+    });
+    app.get("/v1/projects/:project/history", async (c) => {
+        const q = HistoryQuery.parse(c.req.query());
+        await allow(c, "history.read", { project: c.req.param("project"), environment: q.environment, name: q.name });
+        return c.json({ data: (await store().listHistory(await project(c), q)).map(bare) });
+    });
+}
+//# sourceMappingURL=promotions.js.map

package/dist/routes/promotions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"promotions.js","sourceRoot":"","sources":["../../src/routes/promotions.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EACL,kBAAkB,EAAE,aAAa,EAAE,YAAY,EAAE,gBAAgB,EAAE,eAAe,EAAE,eAAe,GAEpG,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEvE,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/D,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC;CAC1F,CAAC,CAAC;AAEH,MAAM,aAAa,GAAG,CAAC,GAAqB,EAAE,EAAE,CAAC,IAAI,aAAa,CAAC,eAAe,GAAG,CAAC,WAAW,yBAAyB,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;AAE/I,6FAA6F;AAC7F,KAAK,UAAU,OAAO,CAAC,KAAmB,EAAE,KAAmB,EAAE,WAAmB,EAAE,KAAe;IACnG,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,YAAY,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IAC9D,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,SAAS,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;AAC9G,CAAC;AAED,+CAA+C;AAC/C,KAAK,UAAU,OAAO,CAAC,KAAmB,EAAE,MAAwB,EAAE,MAAwB,EAAE,GAAqB;IACnH,IAAI,MAAM,KAAK,gBAAgB;QAAE,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC;IAC3D,IAAI,MAAM,KAAK,iBAAiB,EAAE,CAAC;QACjC,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,IAAI,CAAC,CAAC,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;gBAAE,OAAO,IAAI,QAAQ,CAAC,GAAG,EAAE,iBAAiB,EAAE,WAAW,CAAC,CAAC,EAAE,sBAAsB,CAAC,CAAC,IAAI,eAAe,GAAG,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;QACvN,CAAC;IACH,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACxF,OAAO,IAAI,QAAQ,CAAC,GAAG,EAAE,kBAAkB,EAAE,GAAG,GAAG,CAAC,WAAW,iDAAiD,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;AACtI,CAAC;AAED,wDAAwD;AACxD,MAAM,UAAU,kBAAkB,CAAC,GAAc,EAAE,OAAmB;IACpE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IACrE,MAAM,IAAI,GAAG,iDAAiD,CAAC;IAE/D,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,aAAa,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACzC,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QAClE,MAAM,GAAG,GAAqB,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC;QAC5H,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACrC,MAAM,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,iBAAiB,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;QAChM,CAAC;QACD,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAC7C,MAAM,MAAM,GAAG,MAAM,KAAK,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,MAAM,MAAM,OAAO,CAAC,KAAK,EAAE,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;QACzE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACxC,MAAM,OAAO,GAAG,eAAe,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QACjE,MAAM,GAAG,GAAqB,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC;QAC5H,MAAM,KAAK,CAAC,CAAC,EAAE,kBAAkB,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QACrH,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QACvD,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,IAAI,IAAI,CAAC,MAAM,KAAK,gBAAgB;gBAAE,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;YAC/D,IAAI,IAAI,CAAC,MAAM,KAAK,sBAAsB;gBAAE,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,sBAAsB,EAAE,GAAG,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC,WAAW,mCAAmC,CAAC,CAAC;YACtK,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,kBAAkB,EAAE,GAAG,GAAG,CAAC,WAAW,iDAAiD,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;QACnL,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,KAAK,EAAE,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAC3D,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,MAAM,KAAK,iBAAiB;YAAE,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,sBAAsB,EAAE,uBAAuB,IAAI,CAAC,KAAK,CAAC,EAAE,OAAO,OAAO,CAAC,IAAI,cAAc,CAAC,CAAC;QAC9K,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,MAAM,MAAM,OAAO,CAAC,KAAK,EAAE,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC;QAC/E,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,+BAA+B,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACnD,MAAM,CAAC,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;QAC5C,MAAM,KAAK,CAAC,CAAC,EAAE,cAAc,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC9G,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,MAAM,KAAK,EAAE,CAAC,WAAW,CAAC,MAAM,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACtF,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/routes/public-hub.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Public hub reads (docs/design/hub.md §9, §16.3): search, a card's versions and one publication, as JSON under
+ * `/v1/public/*` and as pages under `/hub`. No API key. These are the only store reads that are not tenant-scoped, and
+ * they read only the publications collection, through `publicView`, which drops the publishing tenant.
+ */
+import { type Publication, type PublicationStore, type PublicPublication, type PublicVersionEntry } from "@verdict-ai/core";
+import { Hono } from "hono";
+import { z } from "zod";
+import type { AppOptions, Env } from "../app.js";
+/** Public paths start with these; the tenant middleware lets them through without a key. */
+export declare const isPublicHubPath: (path: string) => boolean;
+declare const Search: z.ZodObject<{
+    q: z.ZodOptional<z.ZodString>;
+    domain: z.ZodOptional<z.ZodString>;
+    locale: z.ZodOptional<z.ZodString>;
+    type: z.ZodOptional<z.ZodEnum<{
+        choice: "choice";
+        score: "score";
+        noul: "noul";
+    }>>;
+    owner: z.ZodOptional<z.ZodString>;
+    limit: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
+}, z.core.$strip>;
+export type PublicSearch = z.infer<typeof Search>;
+/** A withdrawn version answers 410: it existed and was taken down, which is different from never existing. */
+export declare class WithdrawnError extends Error {
+    publication: Publication;
+    constructor(publication: Publication);
+}
+export declare function registerPublicHub(app: Hono<Env>, { engine, limits, clientKey }: Pick<AppOptions, "engine" | "limits" | "clientKey">): void;
+/** The reads themselves, kept apart from HTTP so the JSON routes and the pages answer the same way. */
+export declare function publicHub(store: () => PublicationStore): {
+    search(q: PublicSearch): Promise<Publication[]>;
+    /** A card at `versionId`, or at its newest live version, with every version it has had. */
+    card(owner: string, slug: string, versionId?: string): Promise<{
+        publication: PublicPublication;
+        versions: PublicVersionEntry[];
+    }>;
+    publication(id: string): Promise<PublicPublication>;
+};
+export {};

package/dist/routes/public-hub.js

@@ -0,0 +1,119 @@
+/**
+ * Public hub reads (docs/design/hub.md §9, §16.3): search, a card's versions and one publication, as JSON under
+ * `/v1/public/*` and as pages under `/hub`. No API key. These are the only store reads that are not tenant-scoped, and
+ * they read only the publications collection, through `publicView`, which drops the publishing tenant.
+ */
+import { hasPublications, latestPerRef, listingOf, NotFoundError, publicView, versionEntry, withdrawalNote, } from "@verdict-ai/core";
+import { HTTPException } from "hono/http-exception";
+import { z } from "zod";
+import { cardPage, goneCardPage, missingPage, searchPage } from "../hub-pages.js";
+import { defaultClientKey, enforce } from "../rate-limit.js";
+/** Public paths start with these; the tenant middleware lets them through without a key. */
+export const isPublicHubPath = (path) => path.startsWith("/v1/public/") || path === "/hub" || path.startsWith("/hub/");
+const SEARCH_LIMIT = 50;
+/** Enough rows to find the newest version of each card a page shows. */
+const SCAN_LIMIT = 500;
+const Search = z.object({
+    q: z.string().max(200).optional(), domain: z.string().max(60).optional(), locale: z.string().max(35).optional(),
+    type: z.enum(["score", "noul", "choice"]).optional(), owner: z.string().max(64).optional(),
+    limit: z.coerce.number().int().min(1).max(SEARCH_LIMIT).default(SEARCH_LIMIT),
+});
+/** A withdrawn version answers 410: it existed and was taken down, which is different from never existing. */
+export class WithdrawnError extends Error {
+    publication;
+    constructor(publication) {
+        super(withdrawalNote(publication));
+        this.publication = publication;
+    }
+}
+export function registerPublicHub(app, { engine, limits, clientKey = defaultClientKey }) {
+    const store = () => {
+        if (!hasPublications(engine.store))
+            throw new HTTPException(501, { message: "this server's store cannot keep publications" });
+        return engine.store;
+    };
+    const hub = publicHub(store);
+    // One check per request: in Hono "/hub/*" also matches "/hub", so the paths are tested here rather than as patterns.
+    app.use(async (c, next) => {
+        if (isPublicHubPath(c.req.path))
+            await enforce(limits?.read, clientKey(c), "hub read");
+        await next();
+    });
+    app.get("/v1/public/rubrics", async (c) => c.json({ data: (await hub.search(Search.parse(c.req.query()))).map(listingOf) }));
+    app.get("/v1/public/rubrics/:owner/:slug", async (c) => {
+        try {
+            return c.json(await hub.card(c.req.param("owner"), c.req.param("slug"), c.req.query("version")));
+        }
+        catch (e) {
+            return withdrawnJson(c, e);
+        }
+    });
+    app.get("/v1/public/publications/:id", async (c) => {
+        try {
+            return c.json(await hub.publication(c.req.param("id")));
+        }
+        catch (e) {
+            return withdrawnJson(c, e);
+        }
+    });
+    app.get("/hub", async (c) => {
+        const parsed = Search.safeParse(c.req.query());
+        const query = parsed.success ? parsed.data : Search.parse({});
+        return html(c, searchPage({ query, results: (await hub.search(query)).map(listingOf) }));
+    });
+    app.get("/hub/:owner/:slug", async (c) => {
+        const origin = new URL(c.req.url).origin;
+        try {
+            return html(c, cardPage({ origin, ...(await hub.card(c.req.param("owner"), c.req.param("slug"), c.req.query("version"))) }));
+        }
+        catch (e) {
+            if (e instanceof WithdrawnError)
+                return html(c, goneCardPage(e.publication, e.message), 410);
+            if (e instanceof NotFoundError)
+                return html(c, missingPage(e.message), 404);
+            throw e;
+        }
+    });
+}
+/** The reads themselves, kept apart from HTTP so the JSON routes and the pages answer the same way. */
+export function publicHub(store) {
+    return {
+        async search(q) {
+            const query = { q: q.q || undefined, domain: q.domain || undefined, locale: q.locale || undefined, judgmentType: q.type, owner: q.owner || undefined, limit: SCAN_LIMIT };
+            return latestPerRef(await store().listPublications(query)).slice(0, q.limit);
+        },
+        /** A card at `versionId`, or at its newest live version, with every version it has had. */
+        async card(owner, slug, versionId) {
+            const all = await store().listPublications({ owner, slug, includeWithdrawn: true, limit: SCAN_LIMIT });
+            if (!all.length)
+                throw new NotFoundError(`no card ${owner}/${slug} on this hub`);
+            const chosen = versionId ? all.find((p) => p.version.id === versionId) : all.find((p) => !p.withdrawnAt) ?? all[0];
+            if (!chosen)
+                throw new NotFoundError(`${owner}/${slug} has no version ${versionId}`);
+            if (chosen.withdrawnAt)
+                throw new WithdrawnError(chosen);
+            return { publication: publicView(chosen), versions: all.map(versionEntry) };
+        },
+        async publication(id) {
+            const p = await store().getPublication(id);
+            if (!p)
+                throw new NotFoundError(`publication ${id} not found`);
+            if (p.withdrawnAt)
+                throw new WithdrawnError(p);
+            return publicView(p);
+        },
+    };
+}
+function withdrawnJson(c, e) {
+    if (!(e instanceof WithdrawnError))
+        throw e;
+    return c.json({ error: { type: e.publication.takedown ? "taken_down" : "withdrawn", message: e.message, withdrawnAt: e.publication.withdrawnAt } }, 410);
+}
+/** Pages carry no scripts and load nothing from elsewhere: everything shown is author-written text, escaped. */
+function html(c, body, status = 200) {
+    c.header("content-security-policy", "default-src 'none'; style-src 'unsafe-inline'; base-uri 'none'; form-action 'self'; frame-ancestors 'none'");
+    c.header("x-content-type-options", "nosniff");
+    c.header("referrer-policy", "no-referrer");
+    return c.html(body, status);
+}
+//# sourceMappingURL=public-hub.js.map

package/dist/routes/public-hub.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"public-hub.js","sourceRoot":"","sources":["../../src/routes/public-hub.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EACL,eAAe,EAAE,YAAY,EAAE,SAAS,EAAE,aAAa,EAAE,UAAU,EAAE,YAAY,EAAE,cAAc,GAElG,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAClF,OAAO,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAE7D,4FAA4F;AAC5F,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;AAE/H,MAAM,YAAY,GAAG,EAAE,CAAC;AACxB,wEAAwE;AACxE,MAAM,UAAU,GAAG,GAAG,CAAC;AAEvB,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;IACtB,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC/G,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC1F,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC;CAC9E,CAAC,CAAC;AAGH,8GAA8G;AAC9G,MAAM,OAAO,cAAe,SAAQ,KAAK;IACpB;IAAnB,YAAmB,WAAwB;QACzC,KAAK,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC,CAAC;QADlB,gBAAW,GAAX,WAAW,CAAa;IAE3C,CAAC;CACF;AAED,MAAM,UAAU,iBAAiB,CAAC,GAAc,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,GAAG,gBAAgB,EAAuD;IACrJ,MAAM,KAAK,GAAG,GAAqB,EAAE;QACnC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,8CAA8C,EAAE,CAAC,CAAC;QAC9H,OAAO,MAAM,CAAC,KAAK,CAAC;IACtB,CAAC,CAAC;IACF,MAAM,GAAG,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAC7B,qHAAqH;IACrH,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACxB,IAAI,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,MAAM,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;QACvF,MAAM,IAAI,EAAE,CAAC;IACf,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,oBAAoB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;IAE7H,GAAG,CAAC,GAAG,CAAC,iCAAiC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACrD,IAAI,CAAC;YAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC;QACzG,OAAO,CAAC,EAAE,CAAC;YAAC,OAAO,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,6BAA6B,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACjD,IAAI,CAAC;YAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC;QAChE,OAAO,CAAC,EAAE,CAAC;YAAC,OAAO,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC1B,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;QAC/C,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC9D,OAAO,IAAI,CAAC,CAAC,EAAE,UAAU,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,MAAM,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3F,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,mBAAmB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACvC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;QACzC,IAAI,CAAC;YAAC,OAAO,IAAI,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAAC,CAAC;QACrI,OAAO,CAAC,EAAE,CAAC;YACT,IAAI,CAAC,YAAY,cAAc;gBAAE,OAAO,IAAI,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,CAAC;YAC7F,IAAI,CAAC,YAAY,aAAa;gBAAE,OAAO,IAAI,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,CAAC;YAC5E,MAAM,CAAC,CAAC;QACV,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,uGAAuG;AACvG,MAAM,UAAU,SAAS,CAAC,KAA6B;IACrD,OAAO;QACL,KAAK,CAAC,MAAM,CAAC,CAAe;YAC1B,MAAM,KAAK,GAAqB,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,SAAS,EAAE,YAAY,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;YAC5L,OAAO,YAAY,CAAC,MAAM,KAAK,EAAE,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;QAC/E,CAAC;QAED,2FAA2F;QAC3F,KAAK,CAAC,IAAI,CAAC,KAAa,EAAE,IAAY,EAAE,SAAkB;YACxD,MAAM,GAAG,GAAG,MAAM,KAAK,EAAE,CAAC,gBAAgB,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;YACvG,IAAI,CAAC,GAAG,CAAC,MAAM;gBAAE,MAAM,IAAI,aAAa,CAAC,WAAW,KAAK,IAAI,IAAI,cAAc,CAAC,CAAC;YACjF,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC;YACnH,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,aAAa,CAAC,GAAG,KAAK,IAAI,IAAI,mBAAmB,SAAS,EAAE,CAAC,CAAC;YACrF,IAAI,MAAM,CAAC,WAAW;gBAAE,MAAM,IAAI,cAAc,CAAC,MAAM,CAAC,CAAC;YACzD,OAAO,EAAE,WAAW,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;QAC9E,CAAC;QAED,KAAK,CAAC,WAAW,CAAC,EAAU;YAC1B,MAAM,CAAC,GAAG,MAAM,KAAK,EAAE,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;YAC3C,IAAI,CAAC,CAAC;gBAAE,MAAM,IAAI,aAAa,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC;YAC/D,IAAI,CAAC,CAAC,WAAW;gBAAE,MAAM,IAAI,cAAc,CAAC,CAAC,CAAC,CAAC;YAC/C,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC;QACvB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,CAAe,EAAE,CAAU;IAChD,IAAI,CAAC,CAAC,CAAC,YAAY,cAAc,CAAC;QAAE,MAAM,CAAC,CAAC;IAC5C,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,CAAC,WAAW,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;AAC3J,CAAC;AAED,gHAAgH;AAChH,SAAS,IAAI,CAAC,CAAe,EAAE,IAAY,EAAE,SAA0B,GAAG;IACxE,CAAC,CAAC,MAAM,CAAC,yBAAyB,EAAE,4GAA4G,CAAC,CAAC;IAClJ,CAAC,CAAC,MAAM,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAC;IAC9C,CAAC,CAAC,MAAM,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC;IAC3C,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AAC9B,CAAC"}

package/dist/routes/publications.d.ts

@@ -0,0 +1,4 @@
+import { Hono } from "hono";
+import type { AppOptions, Env } from "../app.js";
+/** Registers publication routes; requests are validated by `buildPublication`, never trusted as documents. */
+export declare function registerPublications(app: Hono<Env>, { engine, publisherOf, now, limits }: AppOptions): void;