@wenathlan/saddle 1.8.8 → 1.8.10

package/dist/ai/rag.js

@@ -0,0 +1,22 @@
+/**
+ * rag manifests connect chunks to embedding stores without forcing a vendor client.
+ */
+export async function ragmanifest(input = {}) {
+    const chunks = input.chunks ?? [];
+    const unique = [];
+    const hashes = new Set();
+    for (const chunk of chunks) {
+        const hash = await hashtext(chunk.content);
+        if (hashes.has(hash))
+            continue;
+        hashes.add(hash);
+        unique.push({ ...chunk, contenthash: hash, documentid: hash.slice(0, 16), metadata: { ...(input.metadata ?? {}), ...(chunk.metadata ?? {}) } });
+    }
+    return { documentid: (await hashtext(input.source ?? unique.map((chunk) => chunk.content).join("\n"))).slice(0, 16), source: input.source, chunks: unique, embeddingmodel: input.embeddingmodel, embeddingdimensions: input.embeddingdimensions, createdat: Date.now() };
+}
+export function vectorrecord(chunk, vector, options = {}) { return { id: `${chunk.documentid}-${chunk.id}`, vector, metadata: { headingpath: chunk.headingpath, contenthash: chunk.contenthash, sourceurl: options.sourceurl, tokencount: chunk.tokencount, contenttype: options.contenttype ?? "text", language: options.language ?? "en", embeddingmodel: options.embeddingmodel, embeddingdimensions: vector?.length } }; }
+async function hashtext(text) { const bytes = new TextEncoder().encode(String(text)); if (globalThis.crypto?.subtle) {
+    const digest = await globalThis.crypto.subtle.digest("SHA-256", bytes);
+    return [...new Uint8Array(digest)].map((value) => value.toString(16).padStart(2, "0")).join("");
+} return Array.from(bytes).map((value) => value.toString(16).padStart(2, "0")).join("").slice(0, 64).padEnd(64, "0"); }
+//# sourceMappingURL=rag.js.map

package/dist/ai/rag.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rag.js","sourceRoot":"","sources":["../../ai/rag.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,KAAK,GAAG,EAAE;IAC1C,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC;IAClC,MAAM,MAAM,GAAG,EAAE,CAAC;IAClB,MAAM,MAAM,GAAG,IAAI,GAAG,EAAE,CAAC;IACzB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAAC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAAC,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAAC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;IAAC,CAAC;IAC9Q,OAAO,EAAE,UAAU,EAAE,CAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,MAAM,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,mBAAmB,EAAE,KAAK,CAAC,mBAAmB,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;AAC3Q,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,GAAG,EAAE,IAAI,OAAO,EAAE,EAAE,EAAE,GAAG,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,IAAI,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;AAE9Z,KAAK,UAAU,QAAQ,CAAC,IAAI,IAAI,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;IAAC,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAAC,OAAO,CAAC,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAAC,CAAC,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC"}

package/dist/ai/tokens.d.ts

@@ -0,0 +1,15 @@
+export declare function estimatetokens(text: any, model?: string): number;
+export declare function fitscontext(text: any, context: any, model?: string): boolean;
+export declare function tokenbudget(text: any, options?: {}): {
+    tokens: number;
+    context: any;
+    fits: boolean;
+    remaining: number;
+};
+export declare function settokenratios(values?: {}): {
+    default: 4;
+    gpt: 3.5;
+    claude: 3.2;
+    gemini: 3.5;
+};
+//# sourceMappingURL=tokens.d.ts.map

package/dist/ai/tokens.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokens.d.ts","sourceRoot":"","sources":["../../ai/tokens.ts"],"names":[],"mappings":"AAKA,wBAAgB,cAAc,CAAC,IAAI,KAAA,EAAE,KAAK,SAAY,UAAyG;AAC/J,wBAAgB,WAAW,CAAC,IAAI,KAAA,EAAE,OAAO,KAAA,EAAE,KAAK,SAAY,WAAoD;AAChH,wBAAgB,WAAW,CAAC,IAAI,KAAA,EAAE,OAAO,KAAK;;;;;EAAmQ;AACjT,wBAAgB,cAAc,CAAC,MAAM,KAAK;;;;;EAA0D"}

package/{ai → dist/ai}/tokens.js

@@ -2,8 +2,8 @@
  * token helpers use configurable model ratios and never require a provider tokenizer.
  */
 const ratios = Object.freeze({ default: 4, gpt: 3.5, claude: 3.2, gemini: 3.5 });
-
 export function estimatetokens(text, model = "default") { const ratio = ratios[model] ?? ratios.default; return Math.ceil(String(text ?? "").length / ratio); }
 export function fitscontext(text, context, model = "default") { return estimatetokens(text, model) <= context; }
 export function tokenbudget(text, options = {}) { const tokens = estimatetokens(text, options.model); return { tokens, context: options.context ?? null, fits: options.context == null ? true : tokens <= options.context, remaining: options.context == null ? null : Math.max(0, options.context - tokens) }; }
 export function settokenratios(values = {}) { Object.assign(ratios, values); return { ...ratios }; }
+//# sourceMappingURL=tokens.js.map

package/dist/ai/tokens.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokens.js","sourceRoot":"","sources":["../../ai/tokens.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;AAEjF,MAAM,UAAU,cAAc,CAAC,IAAI,EAAE,KAAK,GAAG,SAAS,IAAI,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;AAC/J,MAAM,UAAU,WAAW,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,GAAG,SAAS,IAAI,OAAO,cAAc,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC;AAChH,MAAM,UAAU,WAAW,CAAC,IAAI,EAAE,OAAO,GAAG,EAAE,IAAI,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,OAAO,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,OAAO,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;AACjT,MAAM,UAAU,cAAc,CAAC,MAAM,GAAG,EAAE,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC"}

package/dist/api/auth.d.ts

@@ -0,0 +1,16 @@
+/**
+ * api authorization delegates token verification to the caller and never stores credentials.
+ */
+/** Authorizes a request through an injected verifier or returns an anonymous principal. */
+export declare function authorize(request: any, options?: {}): Promise<{
+    authenticated: boolean;
+    subject: string;
+    tokenpresent: boolean;
+    claims?: undefined;
+} | {
+    tokenpresent?: undefined;
+    authenticated: boolean;
+    subject: string;
+    claims: any;
+}>;
+//# sourceMappingURL=auth.d.ts.map

package/dist/api/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../api/auth.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,2FAA2F;AAC3F,wBAAsB,SAAS,CAAC,OAAO,KAAA,EAAE,OAAO,KAAK;;;;;;;;;;GAOpD"}

package/dist/api/auth.js

@@ -0,0 +1,19 @@
+/**
+ * api authorization delegates token verification to the caller and never stores credentials.
+ */
+/** Authorizes a request through an injected verifier or returns an anonymous principal. */
+export async function authorize(request, options = {}) {
+    const token = request?.headers?.get?.("authorization")?.replace(/^Bearer\s+/i, "") ?? request?.headers?.get?.("x-api-key");
+    if (typeof options.verify !== "function")
+        return { authenticated: false, subject: "anonymous", tokenpresent: Boolean(token) };
+    if (!token)
+        return { authenticated: false, subject: "anonymous", tokenpresent: false };
+    const principal = await options.verify(token, request);
+    if (!principal) {
+        const error = new Error("request is not authorized");
+        error.code = "UNAUTHORIZED";
+        throw error;
+    }
+    return { authenticated: true, subject: String(principal.subject ?? principal.id ?? "caller"), claims: { ...(principal.claims ?? {}) } };
+}
+//# sourceMappingURL=auth.js.map

package/dist/api/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../api/auth.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,2FAA2F;AAC3F,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAAO,EAAE,OAAO,GAAG,EAAE;IACnD,MAAM,KAAK,GAAG,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,IAAI,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC;IAC3H,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU;QAAE,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;IAC9H,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;IACvF,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACvD,IAAI,CAAC,SAAS,EAAE,CAAC;QAAC,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAAC,KAAK,CAAC,IAAI,GAAG,cAAc,CAAC;QAAC,MAAM,KAAK,CAAC;IAAC,CAAC;IACnH,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,SAAS,CAAC,OAAO,IAAI,SAAS,CAAC,EAAE,IAAI,QAAQ,CAAC,EAAE,MAAM,EAAE,EAAE,GAAG,CAAC,SAAS,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;AAC1I,CAAC"}

package/dist/api/contracts.d.ts

@@ -0,0 +1,28 @@
+/**
+ * api contracts keep request identity and success envelopes stable across HTTP and MCP adapters.
+ */
+export declare const apiversion = 1;
+/** Extracts a caller supplied request id or creates a local id without exposing secrets. */
+export declare function requestcontext(request: any, options?: {}): {
+    version: number;
+    requestid: string;
+    method: any;
+    path: any;
+};
+/** Creates a versioned success envelope for APIs that opt into envelopes. */
+export declare function successpayload(data: any, context?: {}): {
+    version: number;
+    requestid: string;
+    data: any;
+};
+/** Creates a versioned error payload with a stable retry hint. */
+export declare function errorpayload(code: any, message: any, context?: {}): {
+    version: number;
+    requestid: string;
+    error: {
+        code: string;
+        message: string;
+        retryafter: number;
+    };
+};
+//# sourceMappingURL=contracts.d.ts.map

package/dist/api/contracts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contracts.d.ts","sourceRoot":"","sources":["../../api/contracts.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,eAAO,MAAM,UAAU,IAAI,CAAC;AAE5B,4FAA4F;AAC5F,wBAAgB,cAAc,CAAC,OAAO,KAAA,EAAE,OAAO,KAAK;;;;;EAGnD;AAED,6EAA6E;AAC7E,wBAAgB,cAAc,CAAC,IAAI,KAAA,EAAE,OAAO,KAAK;;;;EAAwH;AAEzK,kEAAkE;AAClE,wBAAgB,YAAY,CAAC,IAAI,KAAA,EAAE,OAAO,KAAA,EAAE,OAAO,KAAK;;;;QAAwH,IAAI;QAAgB,OAAO;QAAmB,UAAU;;EAAwC"}

package/{api → dist/api}/contracts.js

@@ -1,17 +1,14 @@
 /**
  * api contracts keep request identity and success envelopes stable across HTTP and MCP adapters.
  */
-
 export const apiversion = 1;
-
 /** Extracts a caller supplied request id or creates a local id without exposing secrets. */
 export function requestcontext(request, options = {}) {
-  const requestid = request?.headers?.get?.("x-request-id") ?? options.requestid ?? `request${Date.now().toString(36)}`;
-  return { version: apiversion, requestid: String(requestid), method: request?.method ?? options.method, path: options.path };
+    const requestid = request?.headers?.get?.("x-request-id") ?? options.requestid ?? `request${Date.now().toString(36)}`;
+    return { version: apiversion, requestid: String(requestid), method: request?.method ?? options.method, path: options.path };
 }
-
 /** Creates a versioned success envelope for APIs that opt into envelopes. */
 export function successpayload(data, context = {}) { return { version: apiversion, requestid: String(context.requestid ?? `request${Date.now().toString(36)}`), data }; }
-
 /** Creates a versioned error payload with a stable retry hint. */
 export function errorpayload(code, message, context = {}) { return { version: apiversion, requestid: String(context.requestid ?? `request${Date.now().toString(36)}`), error: { code: String(code), message: String(message), retryafter: Number(context.retryafter ?? 0) } }; }
+//# sourceMappingURL=contracts.js.map

package/dist/api/contracts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contracts.js","sourceRoot":"","sources":["../../api/contracts.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC;AAE5B,4FAA4F;AAC5F,MAAM,UAAU,cAAc,CAAC,OAAO,EAAE,OAAO,GAAG,EAAE;IAClD,MAAM,SAAS,GAAG,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,cAAc,CAAC,IAAI,OAAO,CAAC,SAAS,IAAI,UAAU,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;IACtH,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,IAAI,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;AAC9H,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,cAAc,CAAC,IAAI,EAAE,OAAO,GAAG,EAAE,IAAI,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS,IAAI,UAAU,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAEzK,kEAAkE;AAClE,MAAM,UAAU,YAAY,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,IAAI,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS,IAAI,UAAU,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,UAAU,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC"}

package/dist/api/control.d.ts

@@ -0,0 +1,10 @@
+/**
+ * control service exposes operator controls through Web Request and Response without selecting a web framework.
+ */
+/** Creates a framework-neutral HTTP handler for an injected operator control surface. */
+export declare function controlservice(options?: {}): {
+    path: string;
+    controls: any;
+    handle: (request: any) => Promise<Response>;
+};
+//# sourceMappingURL=control.d.ts.map

package/dist/api/control.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"control.d.ts","sourceRoot":"","sources":["../../api/control.ts"],"names":[],"mappings":"AAAA;;GAEG;AAOH,yFAAyF;AACzF,wBAAgB,cAAc,CAAC,OAAO,KAAK;;;;EAsB1C"}

package/dist/api/control.js

@@ -0,0 +1,35 @@
+/**
+ * control service exposes operator controls through Web Request and Response without selecting a web framework.
+ */
+import { authorize } from "./auth.js";
+import { requestcontext } from "./contracts.js";
+import { errorresponse, jsonresponse } from "./http.js";
+import { controlsurface } from "../surfaces/controls.js";
+/** Creates a framework-neutral HTTP handler for an injected operator control surface. */
+export function controlservice(options = {}) {
+    const controls = options.controls ?? controlsurface({ adapters: options.adapters, audit: options.audit });
+    const path = String(options.path ?? "/v1/control");
+    if (!path.startsWith("/"))
+        throw new TypeError("control service path must be absolute");
+    async function handle(request) {
+        const context = requestcontext(request, { path });
+        try {
+            await authorize(request, { verify: options.verify });
+            const url = new URL(request.url ?? request);
+            if (url.pathname !== path)
+                return errorresponse("NOT_FOUND", "control route not found", { status: 404, requestid: context.requestid });
+            if (request.method === "GET")
+                return jsonresponse({ ...controls.describe(), requestid: context.requestid });
+            if (request.method !== "POST")
+                return errorresponse("METHOD_NOT_ALLOWED", "control route requires GET or POST", { status: 405, requestid: context.requestid });
+            const input = typeof request.json === "function" ? await request.json() : {};
+            const result = await controls.execute(input);
+            return jsonresponse({ requestid: context.requestid, data: result }, { status: result.ok ? 200 : 409 });
+        }
+        catch (error) {
+            return errorresponse(error?.code ?? "CONTROL_REQUEST_FAILED", error?.message ?? error, { status: error?.code === "UNAUTHORIZED" ? 401 : 400, requestid: context.requestid });
+        }
+    }
+    return { path, controls, handle };
+}
+//# sourceMappingURL=control.js.map

package/dist/api/control.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"control.js","sourceRoot":"","sources":["../../api/control.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAEzD,yFAAyF;AACzF,MAAM,UAAU,cAAc,CAAC,OAAO,GAAG,EAAE;IACzC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,cAAc,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;IAC1G,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI,aAAa,CAAC,CAAC;IACnD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,uCAAuC,CAAC,CAAC;IAExF,KAAK,UAAU,MAAM,CAAC,OAAO;QAC3B,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,IAAI,CAAC;YACH,MAAM,SAAS,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;YACrD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,CAAC;YAC5C,IAAI,GAAG,CAAC,QAAQ,KAAK,IAAI;gBAAE,OAAO,aAAa,CAAC,WAAW,EAAE,yBAAyB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;YACvI,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK;gBAAE,OAAO,YAAY,CAAC,EAAE,GAAG,QAAQ,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;YAC5G,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM;gBAAE,OAAO,aAAa,CAAC,oBAAoB,EAAE,oCAAoC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;YAC/J,MAAM,KAAK,GAAG,OAAO,OAAO,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7E,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC7C,OAAO,YAAY,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;QACzG,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,aAAa,CAAC,KAAK,EAAE,IAAI,IAAI,wBAAwB,EAAE,KAAK,EAAE,OAAO,IAAI,KAAK,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;QAC/K,CAAC;IACH,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;AACpC,CAAC"}

package/dist/api/http.d.ts

@@ -0,0 +1,7 @@
+/**
+ * http helpers use the web request response contract and remain framework neutral.
+ */
+export declare function jsonresponse(data: any, options?: {}): Response;
+export declare function errorresponse(code: any, message: any, options?: {}): Response;
+export declare function sseresponse(events: any): Response;
+//# sourceMappingURL=http.d.ts.map

package/dist/api/http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../api/http.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,wBAAgB,YAAY,CAAC,IAAI,KAAA,EAAE,OAAO,KAAK,YAAsP;AAErS,wBAAgB,aAAa,CAAC,IAAI,KAAA,EAAE,OAAO,KAAA,EAAE,OAAO,KAAK,YAA+N;AAExR,wBAAgB,WAAW,CAAC,MAAM,KAAA,YAIjC"}

package/{api → dist/api}/http.js

@@ -2,11 +2,11 @@
  * http helpers use the web request response contract and remain framework neutral.
  */
 export function jsonresponse(data, options = {}) { return new Response(JSON.stringify(data), { status: options.status ?? 200, headers: { "content-type": "application/json; charset=utf-8", "x-content-type-options": "nosniff", "referrer-policy": "no-referrer", ...(options.headers ?? {}) } }); }
-
 export function errorresponse(code, message, options = {}) { return jsonresponse({ error: { code, message, retryafter: options.retryafter ?? 0, requestid: options.requestid ?? `request${Date.now().toString(36)}` } }, { status: options.status ?? 400, headers: options.headers }); }
-
 export function sseresponse(events) {
-  const encoder = new TextEncoder();
-  const stream = new ReadableStream({ start(controller) { for (const event of events) controller.enqueue(encoder.encode(`event: ${event.event ?? "message"}\ndata: ${JSON.stringify(event.data ?? {})}\n\n`)); controller.close(); } });
-  return new Response(stream, { headers: { "content-type": "text/event-stream", "cache-control": "no-cache, no-store", connection: "keep-alive", "x-accel-buffering": "no", "x-content-type-options": "nosniff" } });
+    const encoder = new TextEncoder();
+    const stream = new ReadableStream({ start(controller) { for (const event of events)
+            controller.enqueue(encoder.encode(`event: ${event.event ?? "message"}\ndata: ${JSON.stringify(event.data ?? {})}\n\n`)); controller.close(); } });
+    return new Response(stream, { headers: { "content-type": "text/event-stream", "cache-control": "no-cache, no-store", connection: "keep-alive", "x-accel-buffering": "no", "x-content-type-options": "nosniff" } });
 }
+//# sourceMappingURL=http.js.map

package/dist/api/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../../api/http.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,IAAI,EAAE,OAAO,GAAG,EAAE,IAAI,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,iCAAiC,EAAE,wBAAwB,EAAE,SAAS,EAAE,iBAAiB,EAAE,aAAa,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;AAErS,MAAM,UAAU,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,IAAI,OAAO,YAAY,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,UAAU,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;AAExR,MAAM,UAAU,WAAW,CAAC,MAAM;IAChC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,MAAM,MAAM,GAAG,IAAI,cAAc,CAAC,EAAE,KAAK,CAAC,UAAU,IAAI,KAAK,MAAM,KAAK,IAAI,MAAM;YAAE,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,KAAK,CAAC,KAAK,IAAI,SAAS,WAAW,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACtO,OAAO,IAAI,QAAQ,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,mBAAmB,EAAE,eAAe,EAAE,oBAAoB,EAAE,UAAU,EAAE,YAAY,EAAE,mBAAmB,EAAE,IAAI,EAAE,wBAAwB,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;AACrN,CAAC"}

package/dist/api/rate.d.ts

@@ -0,0 +1,28 @@
+/**
+ * token bucket rate limiting supports global user and domain keys.
+ */
+export declare function ratebucket(options?: {}): {
+    consume: (key: any, cost?: number) => {
+        allowed: boolean;
+        retryafter: number;
+    };
+    clear(): void;
+};
+export declare function ratelimiter(options?: {}): {
+    check(input?: {}): {
+        allowed: boolean;
+        retryafter: any;
+        scope: string | {
+            consume: (key: any, cost?: number) => {
+                allowed: boolean;
+                retryafter: number;
+            };
+            clear(): void;
+        };
+    } | {
+        scope?: undefined;
+        allowed: boolean;
+        retryafter: number;
+    };
+};
+//# sourceMappingURL=rate.d.ts.map

package/dist/api/rate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate.d.ts","sourceRoot":"","sources":["../../api/rate.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,wBAAgB,UAAU,CAAC,OAAO,KAAK;;;;;;EActC;AAED,wBAAgB,WAAW,CAAC,OAAO,KAAK;IAKpC,KAAK;;;;;;;;;;;;;;;EAMR"}

package/dist/api/rate.js

@@ -0,0 +1,36 @@
+/**
+ * token bucket rate limiting supports global user and domain keys.
+ */
+export function ratebucket(options = {}) {
+    const capacity = options.capacity ?? 10;
+    const refill = options.refill ?? capacity;
+    const interval = options.interval ?? 60000;
+    const buckets = new Map();
+    function consume(key, cost = 1) {
+        const now = Date.now();
+        const previous = buckets.get(key) ?? { tokens: capacity, at: now };
+        const tokens = Math.min(capacity, previous.tokens + ((now - previous.at) / interval) * refill);
+        if (tokens < cost)
+            return { allowed: false, retryafter: Math.ceil(((cost - tokens) / refill) * interval) };
+        buckets.set(key, { tokens: tokens - cost, at: now });
+        return { allowed: true, retryafter: 0 };
+    }
+    return { consume, clear() { buckets.clear(); } };
+}
+export function ratelimiter(options = {}) {
+    const global = ratebucket(options.global ?? { capacity: 1000, refill: 1000 });
+    const user = ratebucket(options.user ?? { capacity: 100, refill: 100 });
+    const domain = ratebucket(options.domain ?? { capacity: 10, refill: 10 });
+    return {
+        check(input = {}) {
+            const checks = [[global, "global"], [user, `user:${input.user ?? "anonymous"}`], [domain, `domain:${input.domain ?? "unknown"}`]];
+            for (const [bucket, key] of checks) {
+                const result = bucket.consume(key);
+                if (!result.allowed)
+                    return { allowed: false, retryafter: result.retryafter, scope: key };
+            }
+            return { allowed: true, retryafter: 0 };
+        }
+    };
+}
+//# sourceMappingURL=rate.js.map

package/dist/api/rate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate.js","sourceRoot":"","sources":["../../api/rate.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,UAAU,UAAU,CAAC,OAAO,GAAG,EAAE;IACrC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC;IACxC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,QAAQ,CAAC;IAC1C,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,KAAK,CAAC;IAC3C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAE,CAAC;IAC1B,SAAS,OAAO,CAAC,GAAG,EAAE,IAAI,GAAG,CAAC;QAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC;QACnE,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,GAAG,QAAQ,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,GAAG,MAAM,CAAC,CAAC;QAC/F,IAAI,MAAM,GAAG,IAAI;YAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC;QAC3G,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QACrD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;IAC1C,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,KAAK,KAAK,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,OAAO,GAAG,EAAE;IACtC,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9E,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IACxE,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;IAC1E,OAAO;QACL,KAAK,CAAC,KAAK,GAAG,EAAE;YACd,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,QAAQ,KAAK,CAAC,IAAI,IAAI,WAAW,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,UAAU,KAAK,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC,CAAC,CAAC;YAClI,KAAK,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,MAAM,EAAE,CAAC;gBAAC,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBAAC,IAAI,CAAC,MAAM,CAAC,OAAO;oBAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;YAAC,CAAC;YACtK,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;QAC1C,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/api/security.d.ts

@@ -0,0 +1,12 @@
+/**
+ * URL security rejects private network targets before a fetch is attempted.
+ * DNS resolution remains a host adapter concern and is never performed silently.
+ */
+export declare function assertpublicurl(value: any, options?: {}): URL;
+/** Checks a resolved address list through a caller supplied DNS resolver to reduce rebinding risk. */
+export declare function assertresolvedpublicurl(value: any, options?: {}): Promise<URL>;
+/** Validates a redirect chain as public and bounded before a caller follows it. */
+export declare function assertredirectchain(values?: any[], options?: {}): string[];
+/** Returns a non throwing boolean for validators and middleware. */
+export declare function ispublicurl(value: any, options?: {}): boolean;
+//# sourceMappingURL=security.d.ts.map

package/dist/api/security.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.d.ts","sourceRoot":"","sources":["../../api/security.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,wBAAgB,eAAe,CAAC,KAAK,KAAA,EAAE,OAAO,KAAK,OAOlD;AAED,sGAAsG;AACtG,wBAAsB,uBAAuB,CAAC,KAAK,KAAA,EAAE,OAAO,KAAK,gBAOhE;AAED,mFAAmF;AACnF,wBAAgB,mBAAmB,CAAC,MAAM,QAAK,EAAE,OAAO,KAAK,YAI5D;AAED,oEAAoE;AACpE,wBAAgB,WAAW,CAAC,KAAK,KAAA,EAAE,OAAO,KAAK,WAAmF"}

package/dist/api/security.js

@@ -0,0 +1,56 @@
+/**
+ * URL security rejects private network targets before a fetch is attempted.
+ * DNS resolution remains a host adapter concern and is never performed silently.
+ */
+export function assertpublicurl(value, options = {}) {
+    const url = new URL(value);
+    if (!["http:", "https:"].includes(url.protocol))
+        throw new TypeError("url protocol is not allowed");
+    if (Array.isArray(options.allowedhosts) && options.allowedhosts.length > 0 && !options.allowedhosts.includes(url.hostname))
+        throw new Error("url host is not allowed");
+    if (options.allowprivate)
+        return url;
+    if (privatehostname(url.hostname) || privateip(url.hostname))
+        throw new Error("private network target is not allowed");
+    return url;
+}
+/** Checks a resolved address list through a caller supplied DNS resolver to reduce rebinding risk. */
+export async function assertresolvedpublicurl(value, options = {}) {
+    const url = assertpublicurl(value, options);
+    if (typeof options.resolve !== "function" || options.allowprivate)
+        return url;
+    const addresses = await options.resolve(url.hostname);
+    if (!Array.isArray(addresses) || addresses.length === 0)
+        throw new Error("url host did not resolve to an address");
+    for (const address of addresses)
+        if (privateip(String(address)) || privatehostname(String(address)))
+            throw new Error("resolved target is private");
+    return url;
+}
+/** Validates a redirect chain as public and bounded before a caller follows it. */
+export function assertredirectchain(values = [], options = {}) {
+    const maxredirects = Number(options.maxredirects ?? 5);
+    if (!Array.isArray(values) || values.length > maxredirects + 1)
+        throw new Error("redirect chain exceeds configured limit");
+    return values.map((value) => assertpublicurl(value, options).href);
+}
+/** Returns a non throwing boolean for validators and middleware. */
+export function ispublicurl(value, options = {}) { try {
+    assertpublicurl(value, options);
+    return true;
+}
+catch {
+    return false;
+} }
+function privatehostname(hostname) { const value = hostname.toLowerCase().replace(/^\[|\]$/g, "").replace(/\.$/, ""); return value.endsWith(".local") || value.endsWith(".internal") || value.endsWith(".localhost") || value === "localhost" || value === "broadcasthost"; }
+function privateip(hostname) {
+    const normalized = hostname.toLowerCase().replace(/^\[|\]$/g, "");
+    if (normalized === "::1" || normalized.startsWith("fc") || normalized.startsWith("fd") || normalized.startsWith("fe80:") || normalized.startsWith("::ffff:"))
+        return true;
+    const parts = normalized.split(".").map(Number);
+    if (parts.length !== 4 || parts.some((part) => !Number.isInteger(part) || part < 0 || part > 255))
+        return false;
+    const [first, second] = parts;
+    return first === 10 || first === 127 || first === 169 && second === 254 || first === 172 && second >= 16 && second <= 31 || first === 192 && second === 168;
+}
+//# sourceMappingURL=security.js.map

package/dist/api/security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.js","sourceRoot":"","sources":["../../api/security.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,EAAE;IACjD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3B,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,6BAA6B,CAAC,CAAC;IACpG,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,OAAO,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IACvK,IAAI,OAAO,CAAC,YAAY;QAAE,OAAO,GAAG,CAAC;IACrC,IAAI,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IACvH,OAAO,GAAG,CAAC;AACb,CAAC;AAED,sGAAsG;AACtG,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,EAAE;IAC/D,MAAM,GAAG,GAAG,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC5C,IAAI,OAAO,OAAO,CAAC,OAAO,KAAK,UAAU,IAAI,OAAO,CAAC,YAAY;QAAE,OAAO,GAAG,CAAC;IAC9E,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACtD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IACnH,KAAK,MAAM,OAAO,IAAI,SAAS;QAAE,IAAI,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IACnJ,OAAO,GAAG,CAAC;AACb,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,mBAAmB,CAAC,MAAM,GAAG,EAAE,EAAE,OAAO,GAAG,EAAE;IAC3D,MAAM,YAAY,GAAG,MAAM,CAAC,OAAO,CAAC,YAAY,IAAI,CAAC,CAAC,CAAC;IACvD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,YAAY,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC3H,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC;AACrE,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,EAAE,IAAI,IAAI,CAAC;IAAC,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAAC,OAAO,IAAI,CAAC;AAAC,CAAC;AAAC,MAAM,CAAC;IAAC,OAAO,KAAK,CAAC;AAAC,CAAC,CAAC,CAAC;AAElI,SAAS,eAAe,CAAC,QAAQ,IAAI,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,KAAK,KAAK,WAAW,IAAI,KAAK,KAAK,eAAe,CAAC,CAAC,CAAC;AAC7Q,SAAS,SAAS,CAAC,QAAQ;IACzB,MAAM,UAAU,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAClE,IAAI,UAAU,KAAK,KAAK,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1K,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAChD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAChH,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,KAAK,CAAC;IAC9B,OAAO,KAAK,KAAK,EAAE,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,IAAI,KAAK,KAAK,GAAG,IAAI,MAAM,IAAI,EAAE,IAAI,MAAM,IAAI,EAAE,IAAI,KAAK,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,CAAC;AAC9J,CAAC"}

package/dist/api/service.d.ts

@@ -0,0 +1,5 @@
+export declare function saddleservice(options?: {}): {
+    handle: (request: any) => Promise<Response>;
+    jobs: Map<any, any>;
+};
+//# sourceMappingURL=service.d.ts.map

package/dist/api/service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../api/service.ts"],"names":[],"mappings":"AAUA,wBAAgB,aAAa,CAAC,OAAO,KAAK;;;EAyBzC"}

package/dist/api/service.js

@@ -0,0 +1,70 @@
+/**
+ * saddle service exposes universal routes without choosing hono fastify express or another server.
+ */
+import { crawl } from "../scrape/crawl.js";
+import { ratelimiter } from "./rate.js";
+import { errorresponse, jsonresponse, sseresponse } from "./http.js";
+import { assertpublicurl } from "./security.js";
+import { authorize } from "./auth.js";
+import { requestcontext, successpayload } from "./contracts.js";
+export function saddleservice(options = {}) {
+    if (typeof options.scrape !== "function")
+        throw new TypeError("service requires scrape");
+    const limit = options.ratelimiter ?? ratelimiter();
+    const jobs = new Map();
+    async function handle(request) {
+        const url = new URL(request.url ?? request);
+        const context = requestcontext(request, { path: url.pathname });
+        const input = request.json ? await request.clone().json().catch(() => ({})) : request.body ?? {};
+        let principal;
+        try {
+            principal = await authorize(request, { verify: options.verify });
+        }
+        catch (error) {
+            return errorresponse(error.code ?? "UNAUTHORIZED", error.message, { status: 401, requestid: context.requestid });
+        }
+        const rate = limit.check({ user: request.headers?.get?.("x-api-key") ?? "anonymous", domain: url.hostname });
+        if (!rate.allowed)
+            return errorresponse("RATE_LIMITED", "request rate limit exceeded", { status: 429, retryafter: rate.retryafter, requestid: context.requestid });
+        try {
+            if (url.pathname === "/health" && request.method === "GET")
+                return jsonresponse({ healthy: true, jobs: jobs.size, principal: principal.subject }, { headers: { "x-request-id": context.requestid } });
+            if (url.pathname === "/v1/event" && request.method === "GET")
+                return sseresponse([{ event: "health", data: { healthy: true } }]);
+            if (url.pathname === "/v1/scrape" && request.method === "POST") {
+                assertpublicurl(input.url, options.security);
+                const result = await options.scrape(input.url, input);
+                return jsonresponse(options.envelope ? successpayload(result, context) : result, { headers: { "x-request-id": context.requestid } });
+            }
+            if (url.pathname === "/v1/crawl" && request.method === "POST") {
+                assertpublicurl(input.url, options.security);
+                const result = await crawl(input.url, { ...input, scrape: (target) => options.scrape(target, input) });
+                return jsonresponse(result);
+            }
+            if (url.pathname === "/v1/batch" && request.method === "POST") {
+                const results = [];
+                for (const item of input.urls ?? []) {
+                    assertpublicurl(item, options.security);
+                    results.push(await options.scrape(item, input));
+                }
+                return jsonresponse({ results, completed: results.length, total: input.urls?.length ?? 0 });
+            }
+            if (url.pathname === "/v1/scrape/async" && request.method === "POST") {
+                assertpublicurl(input.url, options.security);
+                const id = `task${Date.now().toString(36)}${jobs.size}`;
+                jobs.set(id, { id, status: "queued" });
+                Promise.resolve(options.scrape(input.url, input)).then((result) => jobs.set(id, { id, status: "completed", result }), (error) => jobs.set(id, { id, status: "failed", error: error.message }));
+                return jsonresponse({ id, status: "queued" }, { status: 202 });
+            }
+            const match = url.pathname.match(/^\/v1\/scrape\/([^/]+)$/);
+            if (match && request.method === "GET")
+                return jobs.has(match[1]) ? jsonresponse(jobs.get(match[1])) : errorresponse("NOT_FOUND", "task not found", { status: 404 });
+            return errorresponse("NOT_FOUND", "route not found", { status: 404 });
+        }
+        catch (error) {
+            return errorresponse(error.code ?? "REQUEST_FAILED", error.message, { status: error.code === "UNAUTHORIZED" ? 401 : 500, requestid: context.requestid });
+        }
+    }
+    return { handle, jobs };
+}
+//# sourceMappingURL=service.js.map

package/dist/api/service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../../api/service.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACrE,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAEhE,MAAM,UAAU,aAAa,CAAC,OAAO,GAAG,EAAE;IACxC,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU;QAAE,MAAM,IAAI,SAAS,CAAC,yBAAyB,CAAC,CAAC;IACzF,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,IAAI,WAAW,EAAE,CAAC;IACnD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAE,CAAC;IACvB,KAAK,UAAU,MAAM,CAAC,OAAO;QAC3B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QAChE,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC;QACjG,IAAI,SAAS,CAAC;QACd,IAAI,CAAC;YAAC,SAAS,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,OAAO,aAAa,CAAC,KAAK,CAAC,IAAI,IAAI,cAAc,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;QAAC,CAAC;QAC7M,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,WAAW,EAAE,MAAM,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC7G,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO,aAAa,CAAC,cAAc,EAAE,6BAA6B,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;QACnK,IAAI,CAAC;YACH,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK;gBAAE,OAAO,YAAY,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YACtM,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK;gBAAE,OAAO,WAAW,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;YACjI,IAAI,GAAG,CAAC,QAAQ,KAAK,YAAY,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAAC,eAAe,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;gBAAC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;gBAAC,OAAO,YAAY,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YAAC,CAAC;YAC9S,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAAC,eAAe,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;gBAAC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;gBAAC,OAAO,YAAY,CAAC,MAAM,CAAC,CAAC;YAAC,CAAC;YACrP,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAAC,MAAM,OAAO,GAAG,EAAE,CAAC;gBAAC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;oBAAC,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;oBAAC,OAAO,CAAC,IAAI,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;gBAAC,CAAC;gBAAC,OAAO,YAAY,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,IAAI,CAAC,EAAE,CAAC,CAAC;YAAC,CAAC;YACtT,IAAI,GAAG,CAAC,QAAQ,KAAK,kBAAkB,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAAC,eAAe,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;gBAAC,MAAM,EAAE,GAAG,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;gBAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;gBAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;gBAAC,OAAO,YAAY,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YAAC,CAAC;YACxd,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;YAC5D,IAAI,KAAK,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK;gBAAE,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,WAAW,EAAE,gBAAgB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YACpK,OAAO,aAAa,CAAC,WAAW,EAAE,iBAAiB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACxE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,OAAO,aAAa,CAAC,KAAK,CAAC,IAAI,IAAI,gBAAgB,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;QAAC,CAAC;IAC/K,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AAC1B,CAAC"}

package/dist/apps/registry.d.ts

@@ -0,0 +1,33 @@
+/**
+ * app registry keeps installation, scope and revocation state outside platform credentials.
+ */
+export declare const appstatuses: readonly string[];
+/** Creates a caller-owned app installation registry with explicit scopes. */
+export declare function appregistry(options?: {}): {
+    install: (input?: {}) => {
+        scopes: unknown[];
+        id: string;
+        name: string;
+        status: any;
+        installedat: number;
+        updatedat: number;
+        metadata: any;
+    };
+    suspend: (id: any) => any;
+    revoke: (id: any) => any;
+    restore: (id: any) => any;
+    authorize: (id: any, required?: any[]) => {
+        allowed: boolean;
+        reason: string;
+        missing?: undefined;
+        appid?: undefined;
+    } | {
+        allowed: boolean;
+        missing: any[];
+        appid: any;
+        reason?: undefined;
+    };
+    get: (id: any) => any;
+    list: () => any[];
+};
+//# sourceMappingURL=registry.d.ts.map

package/dist/apps/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../apps/registry.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,eAAO,MAAM,WAAW,mBAAuD,CAAC;AAEhF,6EAA6E;AAC7E,wBAAgB,WAAW,CAAC,OAAO,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;EAYvC"}

package/dist/apps/registry.js

@@ -0,0 +1,24 @@
+/**
+ * app registry keeps installation, scope and revocation state outside platform credentials.
+ */
+export const appstatuses = Object.freeze(["installed", "suspended", "revoked"]);
+/** Creates a caller-owned app installation registry with explicit scopes. */
+export function appregistry(options = {}) {
+    const values = new Map(options.apps ? options.apps.map((app) => [app.id, normalize(app)]) : []);
+    function install(input = {}) { if (!input.id || !input.name)
+        throw new TypeError("app installation requires id and name"); const app = normalize({ ...input, status: "installed", installedat: input.installedat ?? Date.now() }); values.set(app.id, app); return { ...app, scopes: [...app.scopes] }; }
+    function suspend(id) { return transition(id, "suspended"); }
+    function revoke(id) { return transition(id, "revoked"); }
+    function restore(id) { return transition(id, "installed"); }
+    function authorize(id, required = []) { const app = requireapp(id); if (app.status !== "installed")
+        return { allowed: false, reason: `app-${app.status}` }; const missing = required.filter((scope) => !app.scopes.includes(scope)); return { allowed: missing.length === 0, missing, appid: app.id }; }
+    function get(id) { const app = values.get(String(id)); return app ? { ...app, scopes: [...app.scopes] } : null; }
+    function list() { return [...values.values()].map((app) => ({ ...app, scopes: [...app.scopes] })); }
+    return { install, suspend, revoke, restore, authorize, get, list };
+    function requireapp(id) { const app = values.get(String(id)); if (!app)
+        throw new Error(`app not found: ${id}`); return app; }
+    function transition(id, status) { const app = requireapp(id); if (!appstatuses.includes(status))
+        throw new TypeError(`unsupported app status: ${status}`); app.status = status; app.updatedat = Date.now(); return get(id); }
+}
+function normalize(input) { return { id: String(input.id), name: String(input.name), status: input.status ?? "installed", scopes: [...new Set((input.scopes ?? []).map(String))], installedat: Number(input.installedat ?? Date.now()), updatedat: Number(input.updatedat ?? Date.now()), metadata: { ...(input.metadata ?? {}) } }; }
+//# sourceMappingURL=registry.js.map

package/dist/apps/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../apps/registry.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,CAAC,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC;AAEhF,6EAA6E;AAC7E,MAAM,UAAU,WAAW,CAAC,OAAO,GAAG,EAAE;IACtC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAChG,SAAS,OAAO,CAAC,KAAK,GAAG,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI;QAAE,MAAM,IAAI,SAAS,CAAC,uCAAuC,CAAC,CAAC,CAAC,MAAM,GAAG,GAAG,SAAS,CAAC,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,GAAG,EAAE,MAAM,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IACzS,SAAS,OAAO,CAAC,EAAE,IAAI,OAAO,UAAU,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC;IAC5D,SAAS,MAAM,CAAC,EAAE,IAAI,OAAO,UAAU,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;IACzD,SAAS,OAAO,CAAC,EAAE,IAAI,OAAO,UAAU,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC;IAC5D,SAAS,SAAS,CAAC,EAAE,EAAE,QAAQ,GAAG,EAAE,IAAI,MAAM,GAAG,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,MAAM,KAAK,WAAW;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IACxS,SAAS,GAAG,CAAC,EAAE,IAAI,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,MAAM,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACjH,SAAS,IAAI,KAAK,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,MAAM,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACpG,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;IACnE,SAAS,UAAU,CAAC,EAAE,IAAI,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;IAC9H,SAAS,UAAU,CAAC,EAAE,EAAE,MAAM,IAAI,MAAM,GAAG,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,2BAA2B,MAAM,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AAC/N,CAAC;AAED,SAAS,SAAS,CAAC,KAAK,IAAI,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,WAAW,EAAE,MAAM,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,WAAW,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC"}