@wairon/cli 5.1.1-dev.64 → 5.1.1-dev.66

package/dist/cli/index.js

@@ -65,7 +65,7 @@ var init_defaults = __esm({
       copilot: ".github/prompts",
       codex: ".codex/agents"
     };
-    WAIRON_VERSION = "5.1.1-dev.64";
+    WAIRON_VERSION = "5.1.1-dev.66";
     GITHUB_REPO = "SYW-Apps/Waffle-AIron";
     SUPPORTED_ALIASES = ["wai"];
     SCAN_EXCLUDE_DIRS = /* @__PURE__ */ new Set([
@@ -2423,6 +2423,24 @@ var init_specs = __esm({
        * stereotypes should bind tech directly (TECH_ON_LOGIC_COMPONENT).
        */
       technologies: import_zod8.z.array(import_zod8.z.string()).optional(),
+      /**
+       * The parameter names THIS realization takes BEFORE the ones its contract
+       * declares — a config object, a data root, the transport handles a portal is
+       * handed. Supplied by whatever wires the component up, never by the caller
+       * the contract describes, which is why they belong to the realization and
+       * not to the contract: another realization of the same contract may hold
+       * them as fields instead.
+       *
+       * Declared rather than guessed, because a leading parameter the contract
+       * does not name is otherwise indistinguishable from one it named under a
+       * different name — `seed(config)` realized as `bootstrapInstance(cfg)` reads
+       * as a dropped parameter to anything that infers. A leading parameter this
+       * list does not name is a finding (UNDECLARED_PARAM), and only a LEADING run
+       * is dropped: one of these names appearing after the contract's own
+       * parameters is not wiring, it is an argument in the middle of the caller's
+       * list.
+       */
+      injectedParams: import_zod8.z.array(import_zod8.z.string()).optional(),
       methods: import_zod8.z.array(MethodImplementationSchema).default([]).superRefine((methods, ctx) => {
         methods.forEach((m, i) => {
           if (!m.calls?.length || m.narrative.length === 0) return;
@@ -14080,6 +14098,173 @@ var init_type_shape = __esm({
   }
 });
 
+// src/core/rules/conformance/param-conformance.ts
+function omittable(optional) {
+  return optional ? "may be left out" : "is required";
+}
+function unitOf2(parameter, position) {
+  return parameter.name ?? `#${position + 1}`;
+}
+function judge(declared, realized, injected, typeAgrees) {
+  let wiring = 0;
+  while (wiring < realized.length && realized[wiring].name !== void 0 && injected.has(realized[wiring].name)) wiring++;
+  const taken = realized.slice(wiring);
+  const matched = Math.min(declared.length, taken.length);
+  const found = {
+    unrealized: /* @__PURE__ */ new Map(),
+    undeclared: /* @__PURE__ */ new Map(),
+    renamed: /* @__PURE__ */ new Map(),
+    optionality: /* @__PURE__ */ new Map()
+  };
+  for (const param of declared.slice(matched)) {
+    found.unrealized.set(param.name, { unit: param.name, told: `"${param.name}"` });
+  }
+  taken.slice(matched).forEach((param, index) => {
+    const unit = unitOf2(param, wiring + matched + index);
+    found.undeclared.set(unit, { unit, told: `"${unit}"` });
+  });
+  for (let position = 0; position < matched; position++) {
+    const param = declared[position];
+    const at = taken[position];
+    if (at.name !== void 0 && at.name !== param.name && typeAgrees(param, at)) {
+      found.renamed.set(`${param.name}\u2192${at.name}`, {
+        unit: param.name,
+        told: `"${param.name}" (the code calls it "${at.name}")`
+      });
+    }
+    if (!!param.optional !== at.optional) {
+      found.optionality.set(`${param.name}:${at.optional}`, {
+        unit: param.name,
+        told: `"${param.name}" (the contract says it ${omittable(!!param.optional)}, the code says it ${omittable(at.optional)})`
+      });
+    }
+  }
+  return found;
+}
+function agreed(judgements, reading) {
+  const [first, ...rest] = judgements;
+  return [...first[reading]].filter(([fact]) => rest.every((other) => other[reading].has(fact))).map(([, finding]) => finding);
+}
+var paramConformanceRule;
+var init_param_conformance = __esm({
+  "src/core/rules/conformance/param-conformance.ts"() {
+    "use strict";
+    init_models();
+    paramConformanceRule = {
+      name: "param-conformance",
+      description: "Code-to-contract for the SIGNATURE, the last of the three readings a spec-driven gate never made: a contract declares `params`, and nothing ever compared them to the parameters of the function that realizes the method. A contract could promise an argument the code does not take, take one the contract never mentions \u2014 including a secret \u2014 or name the same argument two different things, and the brief handed to an implementer would carry the contract's version. Parameters are matched by POSITION against the tail of the realization's list, and the declared type is what tells a rename from a dropped argument: `seed(config: HostConfig)` realized as `bootstrapInstance(cfg: HostConfig)` is one parameter under two names, which anything matching on names alone reads as a parameter the code lost. What a realization takes BEFORE the contract's own parameters is wiring, and it is declared on the implementation as `injectedParams` rather than inferred, because an inferred prefix cannot be told from a renamed first argument. A method the named file only CALLS is left to `methodRealization`, which already reports that the body is not here.",
+      codes: [
+        {
+          code: "UNREALIZED_PARAM",
+          defaultSeverity: "warning",
+          summary: "A contract declares a parameter the function realizing the method does not take \u2014 the contract promises an argument that would go nowhere, and every brief and caller built from it passes one",
+          // Measured code↔spec drift, parameter by parameter, at a site the
+          // finding names — which is why every one of them hands over `parts`.
+          carryable: true
+        },
+        {
+          code: "UNDECLARED_PARAM",
+          defaultSeverity: "warning",
+          summary: "The realizing function takes a parameter no contract parameter names and no declared injection accounts for \u2014 an argument a caller must supply that the design never mentions",
+          carryable: true
+        },
+        {
+          code: "PARAM_NAME_MISMATCH",
+          defaultSeverity: "warning",
+          summary: "A contract parameter and the one realizing it agree on position and type but not on name \u2014 the contract, the ERD and every brief say one word while the code says another",
+          carryable: true
+        },
+        {
+          code: "PARAM_OPTIONALITY",
+          defaultSeverity: "warning",
+          summary: "A contract and its realization disagree about whether a parameter may be left out \u2014 one of them is telling a caller an argument is required when it is not, or the reverse",
+          carryable: true
+        }
+      ],
+      check(ctx) {
+        const code = ctx.codeIndex();
+        const codeNameOf = /* @__PURE__ */ new Map();
+        for (const type of ctx.types) {
+          const named = type.symbol ?? type.name;
+          codeNameOf.set(type.id, named);
+          if (type.subsystem) codeNameOf.set(`${type.subsystem}.${type.id}`, named);
+        }
+        const normalize3 = (text2) => text2.replace(/\s+/g, " ").trim();
+        const typeAgrees = (declared, realized) => {
+          if (!realized.type) return false;
+          const stated = normalize3(declared.type);
+          return stated === realized.type || codeNameOf.get(stated) === realized.type;
+        };
+        for (const { implementation, method: method2, sourceFile, draftContext } of ctx.implementationMethods()) {
+          const contract = ctx.interfaceMap.get(implementation.contract);
+          const declared = contract?.methods.find((m) => m.name === method2.name)?.params ?? [];
+          if (declared.length === 0 || !sourceFile) continue;
+          const file = pathKey(sourceFile);
+          const facts = code.factsAt(file);
+          if (!facts || facts.status !== "analyzed" || facts.analysisGrade !== "exact") continue;
+          const symbol = method2.symbol ?? method2.name;
+          const signatures = facts.functionParams;
+          if (!signatures || !Object.prototype.hasOwnProperty.call(signatures, symbol)) continue;
+          const candidates = signatures[symbol];
+          if (candidates.length === 0) continue;
+          const injected = new Set(implementation.injectedParams ?? []);
+          const judgements = candidates.map((realized) => judge(declared, realized, injected, typeAgrees));
+          const subject = candidates.length > 1 ? `every function called "${symbol}" in "${file}"` : `the function "${symbol}" in "${file}"`;
+          const opening = subject.charAt(0).toUpperCase() + subject.slice(1);
+          const unrealized = agreed(judgements, "unrealized");
+          if (unrealized.length > 0) {
+            ctx.addIssue(
+              "warning",
+              "UNREALIZED_PARAM",
+              `Method "${method2.name}" of contract "${implementation.contract}" declares ${unrealized.length} parameter(s) ${subject} does not take \u2014 ${unrealized.map((found) => found.told).join(", ")}. The contract is promising an argument that would go nowhere, and nothing breaks at a call site to correct it: every brief and every caller built from the contract passes one. Take the parameter in the code, or drop it from the contract.`,
+              implementation.id,
+              draftContext,
+              void 0,
+              { at: method2.name, covers: unrealized.map((found) => found.unit) }
+            );
+          }
+          const undeclared = agreed(judgements, "undeclared");
+          if (undeclared.length > 0) {
+            ctx.addIssue(
+              "warning",
+              "UNDECLARED_PARAM",
+              `${opening} realizing method "${method2.name}" of contract "${implementation.contract}" takes ${undeclared.length} parameter(s) the contract does not declare and no declared injection accounts for \u2014 ${undeclared.map((found) => found.told).join(", ")}. An argument a caller must supply that the design never mentions is how a credential ends up in a signature nobody has read against its contract. Declare it on the contract, name it in the implementation's \`injectedParams\` when whatever wires this component up supplies it (a LEADING run only), or take it out of the signature.`,
+              implementation.id,
+              draftContext,
+              void 0,
+              { at: method2.name, covers: undeclared.map((found) => found.unit) }
+            );
+          }
+          const renamed = agreed(judgements, "renamed");
+          if (renamed.length > 0) {
+            ctx.addIssue(
+              "warning",
+              "PARAM_NAME_MISMATCH",
+              `Method "${method2.name}" of contract "${implementation.contract}" and ${subject} agree on position and type but not on name for ${renamed.length} parameter(s) \u2014 ${renamed.map((f) => f.told).join("; ")}. The contract, the ERD and every brief carry one word and the code answers to another, which is a rename nobody recorded rather than a different argument \u2014 the declared type agreeing is what says so. Rename one side to the other.`,
+              implementation.id,
+              draftContext,
+              void 0,
+              { at: method2.name, covers: renamed.map((found) => found.unit) }
+            );
+          }
+          const disagreed = agreed(judgements, "optionality");
+          if (disagreed.length > 0) {
+            ctx.addIssue(
+              "warning",
+              "PARAM_OPTIONALITY",
+              `Method "${method2.name}" of contract "${implementation.contract}" and ${subject} disagree about whether ${disagreed.length} parameter(s) may be left out \u2014 ${disagreed.map((f) => f.told).join("; ")}. One of them is telling a caller an argument is required when it is not, or the reverse. Omittable is the code's word for it: a default value and a rest parameter make an argument omittable exactly as a question mark does.`,
+              implementation.id,
+              draftContext,
+              void 0,
+              { at: method2.name, covers: disagreed.map((found) => found.unit) }
+            );
+          }
+        }
+      }
+    };
+  }
+});
+
 // src/core/rules/conformance/unclaimed-source.ts
 var unclaimedSourceRule;
 var init_unclaimed_source = __esm({
@@ -15584,6 +15769,7 @@ var init_repository = __esm({
     init_integration_sim_coverage();
     init_type_realization();
     init_type_shape();
+    init_param_conformance();
     init_unclaimed_source();
     init_export_conformance();
     init_carried_debt();
@@ -15752,11 +15938,14 @@ var init_repository = __esm({
       integrationSimWiringRule,
       integrationSimCoverageRule,
       // The data model's own claim on code — does the file hold the type, and is
-      // it the SHAPE the spec claims — and then the question no spec can ask from
-      // the spec side: which files are named by nothing at all. Last in the
-      // family because that one reads what all the others named.
+      // it the SHAPE the spec claims — then the SIGNATURE, the third reading:
+      // does the code take the arguments the contract promises. And then the
+      // question no spec can ask from the spec side: which files are named by
+      // nothing at all. Last in the family because that one reads what all the
+      // others named.
       typeRealizationRule,
       typeShapeRule,
+      paramConformanceRule,
       unclaimedSourceRule,
       exportConformanceRule,
       couplingRule,
@@ -15925,6 +16114,7 @@ function walkExact(ts, sourceText, fileName) {
   const fieldTypes = /* @__PURE__ */ new Map();
   const localTypes = /* @__PURE__ */ new Map();
   const typeShapes = /* @__PURE__ */ new Map();
+  const functionParams = /* @__PURE__ */ new Map();
   const mutableBindings = /* @__PURE__ */ new Set();
   const schemaConstants = /* @__PURE__ */ new Map();
   const derivedAliases = [];
@@ -16054,6 +16244,14 @@ function walkExact(ts, sourceText, fileName) {
     }
     return void 0;
   };
+  const declaredParameters = (fn) => (fn.parameters ?? []).map((parameter) => {
+    const fact = {
+      optional: !!parameter.questionToken || !!parameter.initializer || !!parameter.dotDotDotToken
+    };
+    if (ts.isIdentifier(parameter.name)) fact.name = parameter.name.text;
+    if (parameter.type) fact.type = parameter.type.getText(sf).replace(/\s+/g, " ").trim();
+    return fact;
+  });
   const collectFunctionFacts = (fn) => {
     let score = 1;
     const callees = /* @__PURE__ */ new Map();
@@ -16096,6 +16294,9 @@ function walkExact(ts, sourceText, fileName) {
       const sites = calls.get(fnName) ?? /* @__PURE__ */ new Map();
       for (const [key, site] of facts.callees) sites.set(key, site);
       calls.set(fnName, sites);
+      const signatures = functionParams.get(fnName) ?? [];
+      signatures.push(declaredParameters(node));
+      functionParams.set(fnName, signatures);
     }
     if (ts.isPropertyDeclaration(node)) recordFieldType(node.name, node.type);
     else if (ts.isParameter(node) && node.parent && ts.isConstructorDeclaration(node.parent) && isParameterProperty(node)) {
@@ -16203,7 +16404,7 @@ function walkExact(ts, sourceText, fileName) {
     typeShapes.set(alias.name, { origin: "derived", fields: schemaMembers(literal), methods: [] });
   }
   const reexportOnly = sf.statements.length > 0 && sf.statements.every((st) => ts.isExportDeclaration(st) && !!st.moduleSpecifier);
-  return { declared, anchors, exported, imports, reexports, starExports, namedReexports, complexity, calls, importBindings, typeOnlyBindings, fieldTypes, localTypes, typeShapes, mutableBindings, reexportOnly };
+  return { declared, anchors, exported, imports, reexports, starExports, namedReexports, complexity, calls, importBindings, typeOnlyBindings, fieldTypes, localTypes, typeShapes, functionParams, mutableBindings, reexportOnly };
 }
 function resolveRelativeModule(fromFile, specifier) {
   if (!specifier.startsWith(".")) return null;
@@ -16386,6 +16587,7 @@ function buildCodeModel(implementations, types, projectRoot2, sourceRoots = [],
             fieldTypes: Object.fromEntries([...facts.fieldTypes].map(([k, v]) => [k, [...v]])),
             localTypes: Object.fromEntries([...facts.localTypes].map(([k, v]) => [k, [...v]])),
             typeShapes: Object.fromEntries(facts.typeShapes),
+            functionParams: Object.fromEntries(facts.functionParams),
             topLevelMutableBindings: [...facts.mutableBindings],
             reexportOnly: facts.reexportOnly
           };
@@ -30005,6 +30207,7 @@ function createMcpServer(options = {}) {
     sourcePath: import_zod11.z.string().optional().describe("Optional: target source code file path relative to project root \u2014 for a chained subproject's implementation (qualified id), relative to that subproject's root; a path given relative to this root that lands inside the subproject is re-expressed for you"),
     simPath: import_zod11.z.string().optional().describe("Optional: the committed integration-sim harness file (project-relative; N:1 sharing allowed). The validator proves it exists and its import graph wires the REAL modules (this component + each direct dependency; technology adapters may stay faked) \u2014 running it is CI's job. Declaring the first simPath in a subsystem activates MISSING_INTEGRATION_SIM for its other complete non-leaf implementations"),
     technologies: import_zod11.z.array(import_zod11.z.string()).optional().describe(`External technologies this implementation binds to (e.g. ["mysql"]) \u2014 declares this component's ownership tree as the technology's home; references outside it are flagged (TECH_LEAKAGE) and contract identifiers must stay intent-language. Only for Adapter/Store/Registry/Index components.`),
+    injectedParams: import_zod11.z.array(import_zod11.z.string()).optional().describe("The parameter names this realization takes BEFORE the ones its contract declares \u2014 a config object, a data root, the transport handles a portal is handed. Supplied by whatever wires the component up, never by the caller the contract describes, which is why they belong here and not to the contract: another realization may hold them as fields instead. Declared rather than guessed, because a leading parameter the contract does not name cannot be told from one it named under a different name (`seed(config)` realized as `bootstrapInstance(cfg)`); a leading parameter this list does not name is reported (UNDECLARED_PARAM). Only a LEADING run is dropped \u2014 one of these names appearing after the contract's own parameters is an argument in the middle of the caller's list, not wiring"),
     detail: detailEnum.optional().describe("Spec-level narrative detail default for all methods"),
     conformance: conformanceEnum.optional().describe("Spec-level conformance tier default: declared | anchored | off (omitted = stereotype default: Portal \u2192 anchored, else declared)"),
     methods: import_zod11.z.array(import_zod11.z.object(implMethodShape).strict()).optional().describe("Method implementations containing L5 narratives"),
@@ -30015,11 +30218,11 @@ function createMcpServer(options = {}) {
     server,
     "sdd_write_narrative",
     {
-      description: "Write L4 Concrete Implementation spec containing L5 method narratives. Narratives are a FLAT ordered step list; flow steps (branch/switch/loop/try/parallel/jump/return/throw) jump by step number \u2014 blocks are just skipped regions. Steps may declare a `label` anchor, and every jump field has a *Label twin (toLabel, onTrueLabel, endLabel, \u2026) resolved to step numbers at write time \u2014 prefer labels over hand-counted numbers; an unresolvable label rejects the write. Detail dial per method: full (narrative required) | calls-only (call choreography suffices) | intent (prose instead of steps); omitted = stereotype default (Portal/Observer/Adapter: calls-only, Store/Index/Registry: intent, else full). A method whose narrative shows no steps declares the calls it makes in `calls` (one \"<component>.<method>\" each): the reachability walk takes exactly those edges and no others, so an intent-level method that reaches a collaborator must name it or that collaborator is reported unused. Conformance dial per method or spec: declared | anchored | off \u2014 how strictly structural conformance requires contract methods to be realized in their source file (omitted = Portal: anchored, else declared). A method whose body lives in its own file names it in the method's sourcePath; the implementation's sourcePath is the default for every method that names none. Re-authoring an existing id REPLACES the method list: a method left out of the input is REMOVED together with its narrative (and reported); spec-level lint/ext are carried forward, and the stored status is kept unless this input states a higher one. The answer carries a write receipt as structured content beside the sentence \u2014 the status written, whether a spec already held the id, and the notices a restatement raised, each as its own entry.",
+      description: "Write L4 Concrete Implementation spec containing L5 method narratives. Narratives are a FLAT ordered step list; flow steps (branch/switch/loop/try/parallel/jump/return/throw) jump by step number \u2014 blocks are just skipped regions. Steps may declare a `label` anchor, and every jump field has a *Label twin (toLabel, onTrueLabel, endLabel, \u2026) resolved to step numbers at write time \u2014 prefer labels over hand-counted numbers; an unresolvable label rejects the write. Detail dial per method: full (narrative required) | calls-only (call choreography suffices) | intent (prose instead of steps); omitted = stereotype default (Portal/Observer/Adapter: calls-only, Store/Index/Registry: intent, else full). A method whose narrative shows no steps declares the calls it makes in `calls` (one \"<component>.<method>\" each): the reachability walk takes exactly those edges and no others, so an intent-level method that reaches a collaborator must name it or that collaborator is reported unused. Conformance dial per method or spec: declared | anchored | off \u2014 how strictly structural conformance requires contract methods to be realized in their source file (omitted = Portal: anchored, else declared). A method whose body lives in its own file names it in the method's sourcePath; the implementation's sourcePath is the default for every method that names none. Parameters the realization takes BEFORE its contract's own \u2014 a config object, a data root, a portal's transport handles \u2014 are wiring, and are declared once for the spec in injectedParams; a leading parameter it does not name is reported against the contract (UNDECLARED_PARAM). Re-authoring an existing id REPLACES the method list: a method left out of the input is REMOVED together with its narrative (and reported); spec-level lint/ext are carried forward, and the stored status is kept unless this input states a higher one. The answer carries a write receipt as structured content beside the sentence \u2014 the status written, whether a spec already held the id, and the notices a restatement raised, each as its own entry.",
       inputSchema: implInput,
       outputSchema: specWriteReceiptOutput
     },
-    ({ id, name, description, contract, sourcePath, simPath, technologies, detail, conformance, methods, status: status2 }) => {
+    ({ id, name, description, contract, sourcePath, simPath, technologies, injectedParams, detail, conformance, methods, status: status2 }) => {
       try {
         const { loadInterfaceSpec: loadInterfaceSpec2, loadImplementationSpec: loadImplementationSpec2, saveImplementationSpec: saveImplementationSpec2 } = requireSpecs();
         const intf = loadInterfaceSpec2(contract);
@@ -30051,6 +30254,7 @@ function createMcpServer(options = {}) {
           sourcePath,
           simPath,
           technologies,
+          injectedParams,
           detail,
           conformance,
           // Post-resolution every cases/catches entry has its numeric step —
@@ -45038,85 +45242,71 @@ details.adv summary { cursor:pointer; color:var(--dim); font-size:12px; margin-b
 </body>
 </html>`;
 }
-function loginWithPassword(cfg, body, res, secureCookie) {
-  const sessionId = signInWithPassword(cfg, String(body?.user ?? ""), String(body?.password ?? ""));
-  res.writeHead(200, {
-    "content-type": "application/json",
-    "set-cookie": setSessionCookie(sessionId, secureCookie)
-  });
-  res.end(JSON.stringify({ ok: true }));
+function loginWithPassword(cfg, user, password) {
+  return signInWithPassword(cfg, user, password);
 }
-function adminListUsers(cfg, sessionId, url, res) {
-  const project2 = url.searchParams.get("project") ?? void 0;
-  sendJson(res, 200, { users: listUsers3(cfg, sessionId, project2) });
+function adminListUsers(cfg, sessionId, project2) {
+  return listUsers3(cfg, sessionId, project2);
 }
-function adminUpsertUser(cfg, sessionId, body, res) {
-  sendJson(res, 200, upsertUser3(cfg, sessionId, body));
+function adminUpsertUser(cfg, sessionId, record2) {
+  return upsertUser3(cfg, sessionId, record2);
 }
-function adminSetUserStatus(cfg, sessionId, body, res) {
-  sendJson(res, 200, setUserStatus3(cfg, sessionId, String(body?.userId ?? ""), String(body?.status ?? "")));
+function adminSetUserStatus(cfg, sessionId, userId, status2) {
+  return setUserStatus3(cfg, sessionId, userId, status2);
 }
-function adminCreateShareLink(cfg, sessionId, body, res) {
-  sendJson(res, 201, createShareLink(cfg, sessionId, body ?? {}));
+function adminCreateShareLink(cfg, sessionId, input) {
+  return createShareLink(cfg, sessionId, input);
 }
-function adminListShareLinks(cfg, sessionId, url, res) {
-  sendJson(res, 200, { links: listShareLinks(cfg, sessionId, url.searchParams.get("projectId") ?? "") });
+function adminListShareLinks(cfg, sessionId, projectId) {
+  return listShareLinks(cfg, sessionId, projectId);
 }
-function adminRefreshShareSnapshot(cfg, sessionId, body, res) {
-  sendJson(res, 200, refreshSnapshot(cfg, sessionId, String(body?.linkId ?? "")));
+function adminRefreshShareSnapshot(cfg, sessionId, linkId) {
+  return refreshSnapshot(cfg, sessionId, linkId);
 }
-function adminUpdateShareLink(cfg, sessionId, body, res) {
-  sendJson(res, 200, updateShareLink(cfg, sessionId, String(body?.linkId ?? ""), body?.changes ?? {}));
+function adminUpdateShareLink(cfg, sessionId, linkId, changes) {
+  return updateShareLink(cfg, sessionId, linkId, changes);
 }
-function adminRemoveShareLink(cfg, sessionId, body, res) {
-  removeShareLink(cfg, sessionId, String(body?.linkId ?? ""));
-  sendJson(res, 200, { ok: true });
+function adminRemoveShareLink(cfg, sessionId, linkId) {
+  removeShareLink(cfg, sessionId, linkId);
 }
-function adminGetShareAccessLog(cfg, sessionId, url, res) {
-  const limit = Number(url.searchParams.get("limit") ?? "100") || 100;
-  sendJson(res, 200, { entries: getShareAccessLog(cfg, sessionId, url.searchParams.get("linkId") ?? "", limit) });
+function adminGetShareAccessLog(cfg, sessionId, linkId, limit) {
+  return getShareAccessLog(cfg, sessionId, linkId, limit);
 }
-function adminListProviders(cfg, sessionId, res) {
-  sendJson(res, 200, { providers: listIdentityProviders(cfg, sessionId) });
+function adminListProviders(cfg, sessionId) {
+  return listIdentityProviders(cfg, sessionId);
 }
-function adminUpsertProvider(cfg, sessionId, body, res) {
-  sendJson(res, 200, upsertIdentityProvider(cfg, sessionId, body));
+function adminUpsertProvider(cfg, sessionId, config) {
+  return upsertIdentityProvider(cfg, sessionId, config);
 }
-function adminRemoveProvider(cfg, sessionId, body, res) {
-  removeIdentityProvider(cfg, sessionId, String(body?.id ?? ""));
-  sendJson(res, 200, { ok: true });
+function adminRemoveProvider(cfg, sessionId, id) {
+  removeIdentityProvider(cfg, sessionId, id);
 }
-function mintAgentToken(cfg, sessionId, body, res) {
-  const token = mintProjectToken(cfg, sessionId, String(body?.projectId ?? ""), body?.write === true);
-  sendJson(res, 201, { token });
+function mintAgentToken(cfg, sessionId, projectId, write) {
+  return mintProjectToken(cfg, sessionId, projectId, write);
 }
-function revokeAgentToken(cfg, sessionId, body, res) {
-  revokeProjectToken(cfg, sessionId, String(body?.id ?? ""));
-  sendJson(res, 200, { ok: true });
+function revokeAgentToken(cfg, sessionId, tokenId) {
+  revokeProjectToken(cfg, sessionId, tokenId);
 }
-function listAgentTokens(cfg, sessionId, res) {
-  sendJson(res, 200, { tokens: listMyTokens(cfg, sessionId) });
+function listAgentTokens(cfg, sessionId) {
+  return listMyTokens(cfg, sessionId);
 }
-function adminListOrgUnits(cfg, sessionId, res) {
-  sendJson(res, 200, { units: listOrganizationUnits2(cfg, sessionId) });
+function adminListOrgUnits(cfg, sessionId) {
+  return listOrganizationUnits2(cfg, sessionId);
 }
-function adminListSecretRefs(cfg, sessionId, res) {
-  sendJson(res, 200, { refs: listSecretRefs(cfg, sessionId) });
+function adminListSecretRefs(cfg, sessionId) {
+  return listSecretRefs(cfg, sessionId);
 }
-function adminSetSecret(cfg, sessionId, body, res) {
-  setSecret3(cfg, sessionId, String(body?.key ?? ""), String(body?.value ?? ""));
-  sendJson(res, 200, { ok: true });
+function adminSetSecret(cfg, sessionId, key, value) {
+  setSecret3(cfg, sessionId, key, value);
 }
-function adminUpsertOrgUnit(cfg, sessionId, body, res) {
-  sendJson(res, 200, upsertOrganizationUnit(cfg, sessionId, body));
+function adminUpsertOrgUnit(cfg, sessionId, record2) {
+  return upsertOrganizationUnit(cfg, sessionId, record2);
 }
-function adminPlaceProject(cfg, sessionId, body, res) {
-  placeProject3(cfg, sessionId, String(body?.projectId ?? ""), String(body?.unitId ?? ""));
-  sendJson(res, 200, { ok: true });
+function adminPlaceProject(cfg, sessionId, projectId, unitId) {
+  placeProject3(cfg, sessionId, projectId, unitId);
 }
-function adminRemoveUnit(cfg, sessionId, body, res) {
-  removeUnit(cfg, sessionId, String(body?.unitId ?? ""), body?.disposition ?? {});
-  sendJson(res, 200, { ok: true });
+function adminRemoveUnit(cfg, sessionId, unitId, disposition) {
+  removeUnit(cfg, sessionId, unitId, disposition);
 }
 function bodyScope(body) {
   return {
@@ -45124,69 +45314,44 @@ function bodyScope(body) {
     scopeId: body?.scopeId !== void 0 ? String(body.scopeId) : void 0
   };
 }
-function adminListRoles(cfg, sessionId, res) {
-  sendJson(res, 200, { roles: listRoles3(cfg, sessionId) });
-}
-function adminCreateRole(cfg, sessionId, body, res) {
-  sendJson(res, 200, createRole3(cfg, sessionId, body));
-}
-function adminUpdateRole(cfg, sessionId, body, res) {
-  sendJson(res, 200, updateRole3(cfg, sessionId, body));
-}
-function adminDeleteRole(cfg, sessionId, body, res) {
-  deleteRole3(cfg, sessionId, String(body?.id ?? ""));
-  sendJson(res, 200, { ok: true });
-}
-function adminBindRole(cfg, sessionId, body, res) {
-  const scope = bodyScope(body);
-  sendJson(res, 200, bindRole2(cfg, sessionId, String(body?.userId ?? ""), String(body?.roleId ?? ""), scope.scopeKind, scope.scopeId));
-}
-function adminUnbindRole(cfg, sessionId, body, res) {
-  const scope = bodyScope(body);
-  sendJson(res, 200, unbindRole2(cfg, sessionId, String(body?.userId ?? ""), String(body?.roleId ?? ""), scope.scopeKind, scope.scopeId));
-}
-function adminListAssignments(cfg, sessionId, url, res) {
-  const q2 = (name) => url.searchParams.get(name) ?? void 0;
-  sendJson(res, 200, {
-    assignments: listAssignments3(
-      cfg,
-      sessionId,
-      q2("scopeKind"),
-      q2("scopeId"),
-      q2("subjectKind"),
-      q2("subjectId")
-    )
-  });
+function adminListRoles(cfg, sessionId) {
+  return listRoles3(cfg, sessionId);
 }
-function adminSetAssignment(cfg, sessionId, body, res) {
-  sendJson(res, 200, setAssignment3(cfg, sessionId, body));
-}
-function adminRemoveAssignment(cfg, sessionId, body, res) {
-  removeAssignment3(cfg, sessionId, String(body?.id ?? ""));
-  sendJson(res, 200, { ok: true });
-}
-function projectList(cfg, sessionId, res) {
-  sendJson(res, 200, { projects: listProjects2(cfg, sessionId) });
-}
-function projectCreate(cfg, sessionId, body, res) {
-  sendJson(
-    res,
-    201,
-    createProject2(
-      cfg,
-      sessionId,
-      String(body?.id ?? ""),
-      String(body?.unitId ?? ""),
-      body?.profileSelection
-    )
-  );
+function adminCreateRole(cfg, sessionId, role) {
+  return createRole3(cfg, sessionId, role);
+}
+function adminUpdateRole(cfg, sessionId, role) {
+  return updateRole3(cfg, sessionId, role);
+}
+function adminDeleteRole(cfg, sessionId, roleId) {
+  deleteRole3(cfg, sessionId, roleId);
+}
+function adminBindRole(cfg, sessionId, userId, roleId, scopeKind, scopeId) {
+  return bindRole2(cfg, sessionId, userId, roleId, scopeKind, scopeId);
+}
+function adminUnbindRole(cfg, sessionId, userId, roleId, scopeKind, scopeId) {
+  return unbindRole2(cfg, sessionId, userId, roleId, scopeKind, scopeId);
 }
-function projectLock(cfg, sessionId, body, res) {
-  sendJson(res, 200, lockProject3(cfg, sessionId, String(body?.projectId ?? "")));
+function adminListAssignments(cfg, sessionId, scopeKind, scopeId, subjectKind, subjectId) {
+  return listAssignments3(cfg, sessionId, scopeKind, scopeId, subjectKind, subjectId);
 }
-function projectDestroy(cfg, sessionId, body, res) {
-  destroyProject2(cfg, sessionId, String(body?.id ?? ""));
-  sendJson(res, 200, { ok: true });
+function adminSetAssignment(cfg, sessionId, assignment) {
+  return setAssignment3(cfg, sessionId, assignment);
+}
+function adminRemoveAssignment(cfg, sessionId, assignmentId) {
+  removeAssignment3(cfg, sessionId, assignmentId);
+}
+function projectList(cfg, sessionId) {
+  return listProjects2(cfg, sessionId);
+}
+function projectCreate(cfg, sessionId, id, unitId, profileSelection) {
+  return createProject2(cfg, sessionId, id, unitId, profileSelection);
+}
+function projectLock(cfg, sessionId, projectId) {
+  return lockProject3(cfg, sessionId, projectId);
+}
+function projectDestroy(cfg, sessionId, id) {
+  destroyProject2(cfg, sessionId, id);
 }
 var q = (url, name) => url.searchParams.get(name) ?? void 0;
 function archiveBody(body) {
@@ -45198,159 +45363,107 @@ function packNameOverride(req) {
   const v = Array.isArray(h) ? h[0] : h;
   return v && v.trim() ? v.trim() : void 0;
 }
-function opsListGlobalPacks(cfg, sessionId, res) {
-  sendJson(res, 200, { packs: listGlobalPacks2(cfg, sessionId) });
+function opsListGlobalPacks(cfg, sessionId) {
+  return listGlobalPacks2(cfg, sessionId);
 }
-function opsInstallGlobalPack(cfg, sessionId, body, res) {
-  sendJson(res, 200, installGlobalPack2(cfg, sessionId, String(body?.name ?? ""), String(body?.content ?? "")));
+function opsInstallGlobalPack(cfg, sessionId, name, content) {
+  return installGlobalPack2(cfg, sessionId, name, content);
 }
-function opsRemoveGlobalPack(cfg, sessionId, body, res) {
-  removeGlobalPack2(cfg, sessionId, String(body?.name ?? ""));
-  sendJson(res, 200, { ok: true });
+function opsRemoveGlobalPack(cfg, sessionId, name) {
+  removeGlobalPack2(cfg, sessionId, name);
 }
-function opsListProjectPacks(cfg, sessionId, url, res) {
-  sendJson(res, 200, { packs: listProjectPacks2(cfg, sessionId, q(url, "projectId") ?? "") });
+function opsListProjectPacks(cfg, sessionId, project2) {
+  return listProjectPacks2(cfg, sessionId, project2);
 }
-function opsInstallProjectPack(cfg, sessionId, body, res) {
-  sendJson(res, 200, installProjectPack2(cfg, sessionId, String(body?.projectId ?? ""), String(body?.name ?? ""), String(body?.content ?? "")));
+function opsInstallProjectPack(cfg, sessionId, project2, name, content) {
+  return installProjectPack2(cfg, sessionId, project2, name, content);
 }
-function opsRemoveProjectPack(cfg, sessionId, body, res) {
-  removeProjectPack2(cfg, sessionId, String(body?.projectId ?? ""), String(body?.name ?? ""));
-  sendJson(res, 200, { ok: true });
+function opsRemoveProjectPack(cfg, sessionId, project2, name) {
+  removeProjectPack2(cfg, sessionId, project2, name);
 }
-function opsInstallGlobalPackArchive(cfg, sessionId, req, body, res) {
-  sendJson(res, 200, installGlobalPackArchive2(cfg, sessionId, archiveBody(body), packNameOverride(req)));
+function opsInstallGlobalPackArchive(cfg, sessionId, archive, name) {
+  return installGlobalPackArchive2(cfg, sessionId, archive, name);
 }
-function opsInstallProjectPackArchive(cfg, sessionId, req, url, body, res) {
-  sendJson(res, 200, installProjectPackArchive2(cfg, sessionId, q(url, "projectId") ?? "", archiveBody(body), packNameOverride(req)));
+function opsInstallProjectPackArchive(cfg, sessionId, project2, archive, name) {
+  return installProjectPackArchive2(cfg, sessionId, project2, archive, name);
 }
-function opsExportProjectTree(cfg, sessionId, url, res) {
-  const result = exportProjectTree2(
-    cfg,
-    sessionId,
-    q(url, "projectId") ?? "",
-    void 0,
-    q(url, "includeDerived") === "1",
-    q(url, "allowPartial") === "1"
-  );
-  res.writeHead(200, {
-    "content-type": "application/zip",
-    "content-disposition": `attachment; filename="${result.suggestedFileName}"`
-  });
-  res.end(Buffer.from(result.archive));
-}
-function opsImportProjectTree(cfg, sessionId, url, body, res) {
-  sendJson(
-    res,
-    200,
-    importProjectTree2(
-      cfg,
-      sessionId,
-      q(url, "projectId") ?? "",
-      archiveBody(body),
-      void 0,
-      q(url, "replace") === "1"
-    )
-  );
+function opsExportProjectTree(cfg, sessionId, project2, subproject, includeDerived, allowPartial) {
+  return exportProjectTree2(cfg, sessionId, project2, subproject, includeDerived, allowPartial);
 }
-function opsListAvailableProfiles(cfg, sessionId, res) {
-  sendJson(res, 200, { profiles: listAvailableProfiles2(cfg, sessionId) });
+function opsImportProjectTree(cfg, sessionId, project2, archive, subproject, replaceExisting) {
+  return importProjectTree2(cfg, sessionId, project2, archive, subproject, replaceExisting);
 }
-function opsListAdoptableProjectPacks(cfg, sessionId, url, res) {
-  sendJson(res, 200, { packs: listAdoptableProjectPacks2(cfg, sessionId, q(url, "projectId") ?? "") });
+function opsListAvailableProfiles(cfg, sessionId) {
+  return listAvailableProfiles2(cfg, sessionId);
 }
-function opsAdoptProjectPack(cfg, sessionId, body, res) {
-  sendJson(res, 200, adoptProjectPack2(cfg, sessionId, String(body?.projectId ?? ""), String(body?.name ?? "")));
+function opsListAdoptableProjectPacks(cfg, sessionId, project2) {
+  return listAdoptableProjectPacks2(cfg, sessionId, project2);
 }
-function opsGetPackPolicy(cfg, sessionId, res) {
-  sendJson(res, 200, getPackPolicy2(cfg, sessionId));
+function opsAdoptProjectPack(cfg, sessionId, project2, name) {
+  return adoptProjectPack2(cfg, sessionId, project2, name);
 }
-function opsSetPackPolicy(cfg, sessionId, body, res) {
-  sendJson(res, 200, setPackPolicy2(cfg, sessionId, body));
+function opsGetPackPolicy(cfg, sessionId) {
+  return getPackPolicy2(cfg, sessionId);
 }
-function opsPolicyEvaluate(cfg, sessionId, url, res) {
-  sendJson(res, 200, evaluateProjectPolicy2(cfg, sessionId, q(url, "projectId") ?? ""));
+function opsSetPackPolicy(cfg, sessionId, policy) {
+  return setPackPolicy2(cfg, sessionId, policy);
 }
-function opsPolicyReconcile(cfg, sessionId, body, res) {
-  sendJson(res, 200, reconcileProjectPolicy2(cfg, sessionId, String(body?.projectId ?? "")));
+function opsPolicyEvaluate(cfg, sessionId, projectId) {
+  return evaluateProjectPolicy2(cfg, sessionId, projectId);
 }
-function opsGetProjectConfig(cfg, sessionId, url, res) {
-  sendJson(res, 200, getProjectConfig2(cfg, sessionId, q(url, "projectId") ?? ""));
+function opsPolicyReconcile(cfg, sessionId, projectId) {
+  return reconcileProjectPolicy2(cfg, sessionId, projectId);
 }
-function opsSetProjectConfig(cfg, sessionId, body, res) {
-  sendJson(res, 200, setProjectType3(cfg, sessionId, String(body?.projectId ?? ""), String(body?.projectType ?? "")));
+function opsGetProjectConfig(cfg, sessionId, projectId) {
+  return getProjectConfig2(cfg, sessionId, projectId);
 }
-function opsListProjectProfiles(cfg, sessionId, url, res) {
-  sendJson(res, 200, { profiles: listProjectProfiles2(cfg, sessionId, q(url, "projectId") ?? "") });
+function opsSetProjectConfig(cfg, sessionId, projectId, projectType) {
+  return setProjectType3(cfg, sessionId, projectId, projectType);
 }
-function opsListProducers(cfg, sessionId, url, res) {
-  sendJson(res, 200, { producers: listProducers2(cfg, sessionId, q(url, "projectId") ?? "") });
+function opsListProjectProfiles(cfg, sessionId, project2) {
+  return listProjectProfiles2(cfg, sessionId, project2);
 }
-function opsConfigureProducer(cfg, sessionId, body, res) {
-  configureProducer2(cfg, sessionId, String(body?.projectId ?? ""), String(body?.target ?? ""), String(body?.parentPageId ?? ""));
-  sendJson(res, 200, { ok: true });
+function opsListProducers(cfg, sessionId, project2) {
+  return listProducers2(cfg, sessionId, project2);
 }
-function opsRemoveProducer(cfg, sessionId, body, res) {
-  removeProducer2(cfg, sessionId, String(body?.projectId ?? ""), String(body?.target ?? ""));
-  sendJson(res, 200, { ok: true });
+function opsConfigureProducer(cfg, sessionId, project2, target, parentPageId) {
+  configureProducer2(cfg, sessionId, project2, target, parentPageId);
 }
-async function opsRunProducer(cfg, sessionId, body, res) {
-  await produceProducer2(cfg, sessionId, String(body?.projectId ?? ""), String(body?.target ?? ""));
-  sendJson(res, 200, { ok: true });
+function opsRemoveProducer(cfg, sessionId, project2, target) {
+  removeProducer2(cfg, sessionId, project2, target);
 }
-function opsGitStatus(cfg, sessionId, url, res) {
-  sendJson(res, 200, getGitBinding2(cfg, sessionId, q(url, "projectId") ?? ""));
+async function opsRunProducer(cfg, sessionId, project2, target) {
+  await produceProducer2(cfg, sessionId, project2, target);
 }
-function opsGitBind(cfg, sessionId, body, res) {
-  const pat = body?.pat ? String(body.pat) : void 0;
-  sendJson(res, 200, enableGit2(cfg, sessionId, String(body?.projectId ?? ""), String(body?.remote ?? ""), String(body?.branch ?? ""), pat));
+function opsGitStatus(cfg, sessionId, project2) {
+  return getGitBinding2(cfg, sessionId, project2);
 }
-function opsGitUnbind(cfg, sessionId, body, res) {
-  disableGit2(cfg, sessionId, String(body?.projectId ?? ""));
-  sendJson(res, 200, { ok: true });
+function opsGitBind(cfg, sessionId, project2, remote, branch, pat) {
+  return enableGit2(cfg, sessionId, project2, remote, branch, pat);
 }
-function opsGitSync(cfg, sessionId, body, res) {
-  syncGit2(cfg, sessionId, String(body?.projectId ?? ""));
-  sendJson(res, 200, { ok: true });
+function opsGitUnbind(cfg, sessionId, project2) {
+  disableGit2(cfg, sessionId, project2);
 }
-function opsGitCommit(cfg, sessionId, body, res) {
-  sendJson(
-    res,
-    200,
-    commitProject2(
-      cfg,
-      sessionId,
-      String(body?.projectId ?? ""),
-      typeof body?.subsystem === "string" && body.subsystem ? body.subsystem : void 0,
-      typeof body?.message === "string" && body.message ? body.message : void 0
-    )
-  );
+function opsGitSync(cfg, sessionId, project2) {
+  syncGit2(cfg, sessionId, project2);
 }
-function opsGitSyncConfig(cfg, sessionId, body, res) {
-  configureGitSync2(
-    cfg,
-    sessionId,
-    String(body?.projectId ?? ""),
-    typeof body?.periodicSyncMinutes === "number" ? body.periodicSyncMinutes : void 0,
-    typeof body?.skipIfClean === "boolean" ? body.skipIfClean : void 0
-  );
-  sendJson(res, 200, { ok: true });
+function opsGitCommit(cfg, sessionId, project2, subsystem, message) {
+  return commitProject2(cfg, sessionId, project2, subsystem, message);
 }
-function opsListGitBacking(cfg, sessionId, res) {
-  sendJson(res, 200, { bindings: listBackingBindings2(cfg, sessionId) });
+function opsGitSyncConfig(cfg, sessionId, project2, periodicSyncMinutes, skipIfClean) {
+  configureGitSync2(cfg, sessionId, project2, periodicSyncMinutes, skipIfClean);
 }
-function opsBindGitBacking(cfg, sessionId, body, res) {
-  const pat = body?.pat ? String(body.pat) : void 0;
-  const binding = { ...body ?? {} };
-  delete binding.pat;
-  sendJson(res, 200, bindBackingScope(cfg, sessionId, binding, pat));
+function opsListGitBacking(cfg, sessionId) {
+  return listBackingBindings2(cfg, sessionId);
 }
-function opsUnbindGitBacking(cfg, sessionId, body, res) {
-  unbindBackingScope(cfg, sessionId, String(body?.id ?? ""));
-  sendJson(res, 200, { ok: true });
+function opsBindGitBacking(cfg, sessionId, binding, pat) {
+  return bindBackingScope(cfg, sessionId, binding, pat);
 }
-function opsSyncGitBacking(cfg, sessionId, body, res) {
-  sendJson(res, 200, { published: syncBackingScope(cfg, sessionId, String(body?.id ?? "")) });
+function opsUnbindGitBacking(cfg, sessionId, bindingId) {
+  unbindBackingScope(cfg, sessionId, bindingId);
+}
+function opsSyncGitBacking(cfg, sessionId, bindingId) {
+  return syncBackingScope(cfg, sessionId, bindingId);
 }
 function auditQueryFrom(url) {
   const query = {};
@@ -45374,17 +45487,17 @@ function auditQueryFrom(url) {
   if (limit !== void 0) query.limit = Number(limit);
   return query;
 }
-function opsAuditQuery(cfg, sessionId, url, res) {
-  sendJson(res, 200, { events: queryAuditEvents3(cfg, sessionId, auditQueryFrom(url)) });
+function opsAuditQuery(cfg, sessionId, query) {
+  return queryAuditEvents3(cfg, sessionId, query);
 }
-function opsAuditCount(cfg, sessionId, url, res) {
-  sendJson(res, 200, { count: countAuditEvents3(cfg, sessionId, auditQueryFrom(url)) });
+function opsAuditCount(cfg, sessionId, query) {
+  return countAuditEvents3(cfg, sessionId, query);
 }
-function opsGetExposure(cfg, sessionId, res) {
-  sendJson(res, 200, getExposurePolicy2(cfg, sessionId));
+function opsGetExposure(cfg, sessionId) {
+  return getExposurePolicy2(cfg, sessionId);
 }
-function opsSetExposure(cfg, sessionId, body, res) {
-  sendJson(res, 200, setExposurePolicy2(cfg, sessionId, body));
+function opsSetExposure(cfg, sessionId, policy) {
+  return setExposurePolicy2(cfg, sessionId, policy);
 }
 async function handleWebRequest(cfg, req, res, body, url, ctx) {
   const parts = url.pathname.split("/").filter(Boolean).map(decodeURIComponent);
@@ -45431,7 +45544,13 @@ async function handleWebRequest(cfg, req, res, body, url, ctx) {
       return sendJson(res, 200, getLoginOptions(cfg));
     }
     if (req.method === "POST" && parts.length === 2 && parts[1] === "login") {
-      return loginWithPassword(cfg, body, res, ctx.secureCookie);
+      const loginSessionId = loginWithPassword(cfg, String(body?.user ?? ""), String(body?.password ?? ""));
+      res.writeHead(200, {
+        "content-type": "application/json",
+        "set-cookie": setSessionCookie(loginSessionId, ctx.secureCookie)
+      });
+      res.end(JSON.stringify({ ok: true }));
+      return;
     }
     if (req.method === "POST" && parts.length === 2 && parts[1] === "logout") {
       signOut(cfg, sessionId);
@@ -45474,223 +45593,309 @@ async function handleWebRequest(cfg, req, res, body, url, ctx) {
       return;
     }
     if (req.method === "GET" && parts.length === 2 && parts[1] === "tokens") {
-      return listAgentTokens(cfg, sessionId, res);
+      return sendJson(res, 200, { tokens: listAgentTokens(cfg, sessionId) });
     }
     if (req.method === "POST" && parts.length === 2 && parts[1] === "tokens") {
-      return mintAgentToken(cfg, sessionId, body, res);
+      const token = mintAgentToken(cfg, sessionId, String(body?.projectId ?? ""), body?.write === true);
+      return sendJson(res, 201, { token });
     }
     if (req.method === "POST" && parts.length === 3 && parts[1] === "tokens" && parts[2] === "revoke") {
-      return revokeAgentToken(cfg, sessionId, body, res);
+      revokeAgentToken(cfg, sessionId, String(body?.id ?? ""));
+      return sendJson(res, 200, { ok: true });
     }
     if (parts.length >= 2 && parts[1] === "projects") {
       if (req.method === "GET" && parts.length === 2) {
-        return projectList(cfg, sessionId, res);
+        return sendJson(res, 200, { projects: projectList(cfg, sessionId) });
       }
       if (req.method === "POST" && parts.length === 2) {
-        return projectCreate(cfg, sessionId, body, res);
+        return sendJson(
+          res,
+          201,
+          projectCreate(
+            cfg,
+            sessionId,
+            String(body?.id ?? ""),
+            String(body?.unitId ?? ""),
+            body?.profileSelection
+          )
+        );
       }
       if (req.method === "POST" && parts.length === 3 && parts[2] === "lock") {
-        return projectLock(cfg, sessionId, body, res);
+        return sendJson(res, 200, projectLock(cfg, sessionId, String(body?.projectId ?? "")));
       }
       if (req.method === "POST" && parts.length === 3 && parts[2] === "destroy") {
-        return projectDestroy(cfg, sessionId, body, res);
+        projectDestroy(cfg, sessionId, String(body?.id ?? ""));
+        return sendJson(res, 200, { ok: true });
       }
       if (req.method === "GET" && parts.length === 3 && parts[2] === "packs") {
-        return opsListProjectPacks(cfg, sessionId, url, res);
+        return sendJson(res, 200, { packs: opsListProjectPacks(cfg, sessionId, q(url, "projectId") ?? "") });
       }
       if (req.method === "POST" && parts.length === 3 && parts[2] === "packs") {
-        return opsInstallProjectPack(cfg, sessionId, body, res);
+        return sendJson(res, 200, opsInstallProjectPack(cfg, sessionId, String(body?.projectId ?? ""), String(body?.name ?? ""), String(body?.content ?? "")));
       }
       if (req.method === "POST" && parts.length === 4 && parts[2] === "packs" && parts[3] === "upload") {
-        return opsInstallProjectPackArchive(cfg, sessionId, req, url, body, res);
+        return sendJson(res, 200, opsInstallProjectPackArchive(cfg, sessionId, q(url, "projectId") ?? "", archiveBody(body), packNameOverride(req)));
       }
       if (req.method === "POST" && parts.length === 4 && parts[2] === "packs" && parts[3] === "remove") {
-        return opsRemoveProjectPack(cfg, sessionId, body, res);
+        opsRemoveProjectPack(cfg, sessionId, String(body?.projectId ?? ""), String(body?.name ?? ""));
+        return sendJson(res, 200, { ok: true });
       }
       if (req.method === "GET" && parts.length === 4 && parts[2] === "packs" && parts[3] === "adoptable") {
-        return opsListAdoptableProjectPacks(cfg, sessionId, url, res);
+        return sendJson(res, 200, { packs: opsListAdoptableProjectPacks(cfg, sessionId, q(url, "projectId") ?? "") });
       }
       if (req.method === "POST" && parts.length === 4 && parts[2] === "packs" && parts[3] === "adopt") {
-        return opsAdoptProjectPack(cfg, sessionId, body, res);
+        return sendJson(res, 200, opsAdoptProjectPack(cfg, sessionId, String(body?.projectId ?? ""), String(body?.name ?? "")));
       }
       if (req.method === "GET" && parts.length === 4 && parts[2] === "tree" && parts[3] === "export") {
-        return opsExportProjectTree(cfg, sessionId, url, res);
+        const result = opsExportProjectTree(
+          cfg,
+          sessionId,
+          q(url, "projectId") ?? "",
+          void 0,
+          q(url, "includeDerived") === "1",
+          q(url, "allowPartial") === "1"
+        );
+        res.writeHead(200, {
+          "content-type": "application/zip",
+          "content-disposition": `attachment; filename="${result.suggestedFileName}"`
+        });
+        res.end(Buffer.from(result.archive));
+        return;
       }
       if (req.method === "POST" && parts.length === 4 && parts[2] === "tree" && parts[3] === "import") {
-        return opsImportProjectTree(cfg, sessionId, url, body, res);
+        return sendJson(
+          res,
+          200,
+          opsImportProjectTree(
+            cfg,
+            sessionId,
+            q(url, "projectId") ?? "",
+            archiveBody(body),
+            void 0,
+            q(url, "replace") === "1"
+          )
+        );
       }
       if (req.method === "GET" && parts.length === 3 && parts[2] === "config") {
-        return opsGetProjectConfig(cfg, sessionId, url, res);
+        return sendJson(res, 200, opsGetProjectConfig(cfg, sessionId, q(url, "projectId") ?? ""));
       }
       if (req.method === "POST" && parts.length === 3 && parts[2] === "config") {
-        return opsSetProjectConfig(cfg, sessionId, body, res);
+        return sendJson(res, 200, opsSetProjectConfig(cfg, sessionId, String(body?.projectId ?? ""), String(body?.projectType ?? "")));
       }
       if (req.method === "GET" && parts.length === 3 && parts[2] === "profiles") {
-        return opsListProjectProfiles(cfg, sessionId, url, res);
+        return sendJson(res, 200, { profiles: opsListProjectProfiles(cfg, sessionId, q(url, "projectId") ?? "") });
       }
       if (req.method === "GET" && parts.length === 3 && parts[2] === "policy") {
-        return opsPolicyEvaluate(cfg, sessionId, url, res);
+        return sendJson(res, 200, opsPolicyEvaluate(cfg, sessionId, q(url, "projectId") ?? ""));
       }
       if (req.method === "POST" && parts.length === 4 && parts[2] === "policy" && parts[3] === "reconcile") {
-        return opsPolicyReconcile(cfg, sessionId, body, res);
+        return sendJson(res, 200, opsPolicyReconcile(cfg, sessionId, String(body?.projectId ?? "")));
       }
       if (req.method === "GET" && parts.length === 3 && parts[2] === "producers") {
-        return opsListProducers(cfg, sessionId, url, res);
+        return sendJson(res, 200, { producers: opsListProducers(cfg, sessionId, q(url, "projectId") ?? "") });
       }
       if (req.method === "POST" && parts.length === 3 && parts[2] === "producers") {
-        return opsConfigureProducer(cfg, sessionId, body, res);
+        opsConfigureProducer(cfg, sessionId, String(body?.projectId ?? ""), String(body?.target ?? ""), String(body?.parentPageId ?? ""));
+        return sendJson(res, 200, { ok: true });
       }
       if (req.method === "POST" && parts.length === 4 && parts[2] === "producers" && parts[3] === "remove") {
-        return opsRemoveProducer(cfg, sessionId, body, res);
+        opsRemoveProducer(cfg, sessionId, String(body?.projectId ?? ""), String(body?.target ?? ""));
+        return sendJson(res, 200, { ok: true });
       }
       if (req.method === "POST" && parts.length === 4 && parts[2] === "producers" && parts[3] === "run") {
-        return opsRunProducer(cfg, sessionId, body, res);
+        return opsRunProducer(cfg, sessionId, String(body?.projectId ?? ""), String(body?.target ?? "")).then(() => sendJson(res, 200, { ok: true }));
       }
       if (req.method === "GET" && parts.length === 3 && parts[2] === "git") {
-        return opsGitStatus(cfg, sessionId, url, res);
+        return sendJson(res, 200, opsGitStatus(cfg, sessionId, q(url, "projectId") ?? ""));
       }
       if (req.method === "POST" && parts.length === 3 && parts[2] === "git") {
-        return opsGitBind(cfg, sessionId, body, res);
+        const pat = body?.pat ? String(body.pat) : void 0;
+        return sendJson(res, 200, opsGitBind(cfg, sessionId, String(body?.projectId ?? ""), String(body?.remote ?? ""), String(body?.branch ?? ""), pat));
       }
       if (req.method === "POST" && parts.length === 4 && parts[2] === "git" && parts[3] === "disconnect") {
-        return opsGitUnbind(cfg, sessionId, body, res);
+        opsGitUnbind(cfg, sessionId, String(body?.projectId ?? ""));
+        return sendJson(res, 200, { ok: true });
       }
       if (req.method === "POST" && parts.length === 4 && parts[2] === "git" && parts[3] === "sync") {
-        return opsGitSync(cfg, sessionId, body, res);
+        opsGitSync(cfg, sessionId, String(body?.projectId ?? ""));
+        return sendJson(res, 200, { ok: true });
       }
       if (req.method === "POST" && parts.length === 4 && parts[2] === "git" && parts[3] === "commit") {
-        return opsGitCommit(cfg, sessionId, body, res);
+        return sendJson(
+          res,
+          200,
+          opsGitCommit(
+            cfg,
+            sessionId,
+            String(body?.projectId ?? ""),
+            typeof body?.subsystem === "string" && body.subsystem ? body.subsystem : void 0,
+            typeof body?.message === "string" && body.message ? body.message : void 0
+          )
+        );
       }
       if (req.method === "POST" && parts.length === 4 && parts[2] === "git" && parts[3] === "sync-config") {
-        return opsGitSyncConfig(cfg, sessionId, body, res);
+        opsGitSyncConfig(
+          cfg,
+          sessionId,
+          String(body?.projectId ?? ""),
+          typeof body?.periodicSyncMinutes === "number" ? body.periodicSyncMinutes : void 0,
+          typeof body?.skipIfClean === "boolean" ? body.skipIfClean : void 0
+        );
+        return sendJson(res, 200, { ok: true });
       }
     }
     if (parts.length >= 2 && parts[1] === "admin") {
       if (req.method === "GET" && parts.length === 3 && parts[2] === "users") {
-        return adminListUsers(cfg, sessionId, url, res);
+        const project2 = url.searchParams.get("project") ?? void 0;
+        return sendJson(res, 200, { users: adminListUsers(cfg, sessionId, project2) });
       }
       if (req.method === "POST" && parts.length === 4 && parts[2] === "users" && parts[3] === "status") {
-        return adminSetUserStatus(cfg, sessionId, body, res);
+        return sendJson(res, 200, adminSetUserStatus(cfg, sessionId, String(body?.userId ?? ""), String(body?.status ?? "")));
       }
       if (req.method === "POST" && parts.length === 3 && parts[2] === "users") {
-        return adminUpsertUser(cfg, sessionId, body, res);
+        return sendJson(res, 200, adminUpsertUser(cfg, sessionId, body));
       }
       if (req.method === "GET" && parts.length === 3 && parts[2] === "providers") {
-        return adminListProviders(cfg, sessionId, res);
+        return sendJson(res, 200, { providers: adminListProviders(cfg, sessionId) });
       }
       if (req.method === "POST" && parts.length === 4 && parts[2] === "providers" && parts[3] === "remove") {
-        return adminRemoveProvider(cfg, sessionId, body, res);
+        adminRemoveProvider(cfg, sessionId, String(body?.id ?? ""));
+        return sendJson(res, 200, { ok: true });
       }
       if (req.method === "POST" && parts.length === 3 && parts[2] === "providers") {
-        return adminUpsertProvider(cfg, sessionId, body, res);
+        return sendJson(res, 200, adminUpsertProvider(cfg, sessionId, body));
       }
       if (req.method === "GET" && parts.length === 4 && parts[2] === "org" && parts[3] === "units") {
-        return adminListOrgUnits(cfg, sessionId, res);
+        return sendJson(res, 200, { units: adminListOrgUnits(cfg, sessionId) });
       }
       if (req.method === "GET" && parts.length === 3 && parts[2] === "secrets") {
-        return adminListSecretRefs(cfg, sessionId, res);
+        return sendJson(res, 200, { refs: adminListSecretRefs(cfg, sessionId) });
       }
       if (req.method === "POST" && parts.length === 3 && parts[2] === "secrets") {
-        return adminSetSecret(cfg, sessionId, body, res);
+        adminSetSecret(cfg, sessionId, String(body?.key ?? ""), String(body?.value ?? ""));
+        return sendJson(res, 200, { ok: true });
       }
       if (req.method === "POST" && parts.length === 4 && parts[2] === "org" && parts[3] === "units") {
-        return adminUpsertOrgUnit(cfg, sessionId, body, res);
+        return sendJson(res, 200, adminUpsertOrgUnit(cfg, sessionId, body));
       }
       if (req.method === "POST" && parts.length === 5 && parts[2] === "org" && parts[3] === "units" && parts[4] === "remove") {
-        return adminRemoveUnit(cfg, sessionId, body, res);
+        adminRemoveUnit(cfg, sessionId, String(body?.unitId ?? ""), body?.disposition ?? {});
+        return sendJson(res, 200, { ok: true });
       }
       if (req.method === "POST" && parts.length === 4 && parts[2] === "org" && parts[3] === "placements") {
-        return adminPlaceProject(cfg, sessionId, body, res);
+        adminPlaceProject(cfg, sessionId, String(body?.projectId ?? ""), String(body?.unitId ?? ""));
+        return sendJson(res, 200, { ok: true });
       }
       if (req.method === "GET" && parts.length === 3 && parts[2] === "roles") {
-        return adminListRoles(cfg, sessionId, res);
+        return sendJson(res, 200, { roles: adminListRoles(cfg, sessionId) });
       }
       if (req.method === "POST" && parts.length === 3 && parts[2] === "roles") {
-        return adminCreateRole(cfg, sessionId, body, res);
+        return sendJson(res, 200, adminCreateRole(cfg, sessionId, body));
       }
       if (req.method === "POST" && parts.length === 4 && parts[2] === "roles" && parts[3] === "update") {
-        return adminUpdateRole(cfg, sessionId, body, res);
+        return sendJson(res, 200, adminUpdateRole(cfg, sessionId, body));
       }
       if (req.method === "POST" && parts.length === 4 && parts[2] === "roles" && parts[3] === "remove") {
-        return adminDeleteRole(cfg, sessionId, body, res);
+        adminDeleteRole(cfg, sessionId, String(body?.id ?? ""));
+        return sendJson(res, 200, { ok: true });
       }
       if (req.method === "POST" && parts.length === 4 && parts[2] === "roles" && parts[3] === "bind") {
-        return adminBindRole(cfg, sessionId, body, res);
+        const scope = bodyScope(body);
+        return sendJson(res, 200, adminBindRole(cfg, sessionId, String(body?.userId ?? ""), String(body?.roleId ?? ""), scope.scopeKind, scope.scopeId));
       }
       if (req.method === "POST" && parts.length === 4 && parts[2] === "roles" && parts[3] === "unbind") {
-        return adminUnbindRole(cfg, sessionId, body, res);
+        const scope = bodyScope(body);
+        return sendJson(res, 200, adminUnbindRole(cfg, sessionId, String(body?.userId ?? ""), String(body?.roleId ?? ""), scope.scopeKind, scope.scopeId));
       }
       if (req.method === "GET" && parts.length === 3 && parts[2] === "permissions") {
-        return adminListAssignments(cfg, sessionId, url, res);
+        const q2 = (name) => url.searchParams.get(name) ?? void 0;
+        return sendJson(res, 200, {
+          assignments: adminListAssignments(
+            cfg,
+            sessionId,
+            q2("scopeKind"),
+            q2("scopeId"),
+            q2("subjectKind"),
+            q2("subjectId")
+          )
+        });
       }
       if (req.method === "POST" && parts.length === 3 && parts[2] === "permissions") {
-        return adminSetAssignment(cfg, sessionId, body, res);
+        return sendJson(res, 200, adminSetAssignment(cfg, sessionId, body));
       }
       if (req.method === "POST" && parts.length === 4 && parts[2] === "permissions" && parts[3] === "remove") {
-        return adminRemoveAssignment(cfg, sessionId, body, res);
+        adminRemoveAssignment(cfg, sessionId, String(body?.id ?? ""));
+        return sendJson(res, 200, { ok: true });
       }
       if (req.method === "GET" && parts.length === 3 && parts[2] === "packs") {
-        return opsListGlobalPacks(cfg, sessionId, res);
+        return sendJson(res, 200, { packs: opsListGlobalPacks(cfg, sessionId) });
       }
       if (req.method === "POST" && parts.length === 3 && parts[2] === "packs") {
-        return opsInstallGlobalPack(cfg, sessionId, body, res);
+        return sendJson(res, 200, opsInstallGlobalPack(cfg, sessionId, String(body?.name ?? ""), String(body?.content ?? "")));
       }
       if (req.method === "POST" && parts.length === 4 && parts[2] === "packs" && parts[3] === "upload") {
-        return opsInstallGlobalPackArchive(cfg, sessionId, req, body, res);
+        return sendJson(res, 200, opsInstallGlobalPackArchive(cfg, sessionId, archiveBody(body), packNameOverride(req)));
       }
       if (req.method === "POST" && parts.length === 4 && parts[2] === "packs" && parts[3] === "remove") {
-        return opsRemoveGlobalPack(cfg, sessionId, body, res);
+        opsRemoveGlobalPack(cfg, sessionId, String(body?.name ?? ""));
+        return sendJson(res, 200, { ok: true });
       }
       if (req.method === "GET" && parts.length === 3 && parts[2] === "profiles") {
-        return opsListAvailableProfiles(cfg, sessionId, res);
+        return sendJson(res, 200, { profiles: opsListAvailableProfiles(cfg, sessionId) });
       }
       if (req.method === "GET" && parts.length === 3 && parts[2] === "policy") {
-        return opsGetPackPolicy(cfg, sessionId, res);
+        return sendJson(res, 200, opsGetPackPolicy(cfg, sessionId));
       }
       if (req.method === "POST" && parts.length === 3 && parts[2] === "policy") {
-        return opsSetPackPolicy(cfg, sessionId, body, res);
+        return sendJson(res, 200, opsSetPackPolicy(cfg, sessionId, body));
       }
       if (req.method === "GET" && parts.length === 3 && parts[2] === "audit") {
-        return opsAuditQuery(cfg, sessionId, url, res);
+        return sendJson(res, 200, { events: opsAuditQuery(cfg, sessionId, auditQueryFrom(url)) });
       }
       if (req.method === "GET" && parts.length === 4 && parts[2] === "audit" && parts[3] === "count") {
-        return opsAuditCount(cfg, sessionId, url, res);
+        return sendJson(res, 200, { count: opsAuditCount(cfg, sessionId, auditQueryFrom(url)) });
       }
       if (req.method === "GET" && parts.length === 3 && parts[2] === "exposure") {
-        return opsGetExposure(cfg, sessionId, res);
+        return sendJson(res, 200, opsGetExposure(cfg, sessionId));
       }
       if (req.method === "POST" && parts.length === 3 && parts[2] === "exposure") {
-        return opsSetExposure(cfg, sessionId, body, res);
+        return sendJson(res, 200, opsSetExposure(cfg, sessionId, body));
       }
       if (req.method === "GET" && parts.length === 3 && parts[2] === "git-backing") {
-        return opsListGitBacking(cfg, sessionId, res);
+        return sendJson(res, 200, { bindings: opsListGitBacking(cfg, sessionId) });
       }
       if (req.method === "POST" && parts.length === 3 && parts[2] === "git-backing") {
-        return opsBindGitBacking(cfg, sessionId, body, res);
+        const pat = body?.pat ? String(body.pat) : void 0;
+        const binding = { ...body ?? {} };
+        delete binding.pat;
+        return sendJson(res, 200, opsBindGitBacking(cfg, sessionId, binding, pat));
       }
       if (req.method === "POST" && parts.length === 4 && parts[2] === "git-backing" && parts[3] === "remove") {
-        return opsUnbindGitBacking(cfg, sessionId, body, res);
+        opsUnbindGitBacking(cfg, sessionId, String(body?.id ?? ""));
+        return sendJson(res, 200, { ok: true });
       }
       if (req.method === "POST" && parts.length === 4 && parts[2] === "git-backing" && parts[3] === "sync") {
-        return opsSyncGitBacking(cfg, sessionId, body, res);
+        return sendJson(res, 200, { published: opsSyncGitBacking(cfg, sessionId, String(body?.id ?? "")) });
       }
       if (req.method === "POST" && parts.length === 3 && parts[2] === "share") {
-        return adminCreateShareLink(cfg, sessionId, body, res);
+        return sendJson(res, 201, adminCreateShareLink(cfg, sessionId, body ?? {}));
       }
       if (req.method === "GET" && parts.length === 3 && parts[2] === "share") {
-        return adminListShareLinks(cfg, sessionId, url, res);
+        return sendJson(res, 200, { links: adminListShareLinks(cfg, sessionId, url.searchParams.get("projectId") ?? "") });
       }
       if (req.method === "POST" && parts.length === 4 && parts[2] === "share" && parts[3] === "refresh") {
-        return adminRefreshShareSnapshot(cfg, sessionId, body, res);
+        return sendJson(res, 200, adminRefreshShareSnapshot(cfg, sessionId, String(body?.linkId ?? "")));
       }
       if (req.method === "POST" && parts.length === 4 && parts[2] === "share" && parts[3] === "update") {
-        return adminUpdateShareLink(cfg, sessionId, body, res);
+        return sendJson(res, 200, adminUpdateShareLink(cfg, sessionId, String(body?.linkId ?? ""), body?.changes ?? {}));
       }
       if (req.method === "POST" && parts.length === 4 && parts[2] === "share" && parts[3] === "remove") {
-        return adminRemoveShareLink(cfg, sessionId, body, res);
+        adminRemoveShareLink(cfg, sessionId, String(body?.linkId ?? ""));
+        return sendJson(res, 200, { ok: true });
       }
       if (req.method === "GET" && parts.length === 4 && parts[2] === "share" && parts[3] === "access") {
-        return adminGetShareAccessLog(cfg, sessionId, url, res);
+        const limit = Number(url.searchParams.get("limit") ?? "100") || 100;
+        return sendJson(res, 200, { entries: adminGetShareAccessLog(cfg, sessionId, url.searchParams.get("linkId") ?? "", limit) });
       }
       if (req.method === "GET" && parts.length === 3 && parts[2] === "landscape") {
         return sendJson(res, 200, generateLandscape(cfg, sessionId));
@@ -46629,6 +46834,7 @@ var WEB_MUTATION_PATHS = /* @__PURE__ */ new Set([
   "/web/projects/git/sync",
   "/web/projects/git/commit",
   "/web/projects/git/sync-config",
+  "/web/projects/config",
   "/web/tokens",
   "/web/tokens/revoke",
   "/web/projects",