aimeat 1.2.0

package/dist/src/routes/appeals.js

@@ -0,0 +1,241 @@
+import { Router } from 'express';
+import { randomBytes } from 'node:crypto';
+import { requireAuth } from '../auth/middleware.js';
+import { success, error } from '../middleware/envelope.js';
+import { emitChange } from '../services/event-bus.js';
+function param(p) {
+    return Array.isArray(p) ? p[0] : p;
+}
+/**
+ * Determine the content owner for a flagged target.
+ * Returns the GAII/GHII of whoever owns the flagged content.
+ */
+async function getContentOwner(storage, targetType, targetId) {
+    switch (targetType) {
+        case 'memory': {
+            // targetId format: could be the memory key — need agent context
+            // Memory records are keyed by `${gaii}::${key}`, we search all
+            const agents = await storage.listAgents();
+            for (const agent of agents) {
+                const mem = await storage.getMemory(agent.gaii, targetId);
+                if (mem)
+                    return mem.ownerGaii;
+            }
+            return null;
+        }
+        case 'board_post': {
+            // targetId could be "boardId::postId" or just postId
+            // Try to find by iterating boards
+            const boards = await storage.listBoards();
+            for (const board of boards) {
+                const post = await storage.getPost(board.id, targetId);
+                if (post)
+                    return post.authorGaii;
+            }
+            return null;
+        }
+        case 'action': {
+            // Actions are keyed by `${providerGaii}::${id}` in storage
+            // Try to find via listing
+            const actions = await storage.listActions();
+            for (const action of actions) {
+                if (action.id === targetId)
+                    return action.providerGaii;
+            }
+            return null;
+        }
+        case 'agent': {
+            const agent = await storage.getAgent(targetId);
+            return agent ? agent.gaii : null;
+        }
+        default:
+            return null;
+    }
+}
+export function appealsRouter(config, storage) {
+    const router = Router();
+    // ── POST /v1/flags/:flagId/appeal — Content owner appeals a flag ──
+    router.post('/v1/flags/:flagId/appeal', requireAuth(), async (req, res) => {
+        const flagId = param(req.params.flagId);
+        const { reason } = req.body ?? {};
+        // Validate reason
+        if (!reason || typeof reason !== 'string') {
+            res.status(400).json(error(config.nodeId, 'VALIDATION_ERROR', 'reason is required'));
+            return;
+        }
+        if (reason.length > 1000) {
+            res.status(400).json(error(config.nodeId, 'VALIDATION_ERROR', 'reason must be 1000 characters or fewer'));
+            return;
+        }
+        // Look up the flag
+        const flag = await storage.getFlag(flagId);
+        if (!flag) {
+            res.status(404).json(error(config.nodeId, 'NOT_FOUND', `Flag not found: ${flagId}`));
+            return;
+        }
+        // Verify the caller is the content owner
+        const caller = req.auth.sub;
+        const contentOwner = await getContentOwner(storage, flag.targetType, flag.targetId);
+        // Also check by owner name (for owner-level tokens)
+        const callerOwner = req.auth.owner;
+        let isOwner = contentOwner === caller;
+        // If content owner is an agent GAII, check if the caller's owner matches the agent's owner
+        if (!isOwner && contentOwner) {
+            const agent = await storage.getAgent(contentOwner);
+            if (agent && agent.owner === callerOwner) {
+                isOwner = true;
+            }
+        }
+        // Operators can also appeal on behalf of content owners
+        if (!isOwner && !req.auth.roles.includes('operator')) {
+            res.status(403).json(error(config.nodeId, 'ACCESS_DENIED', 'Only the content owner can appeal a flag'));
+            return;
+        }
+        // Check if already appealed
+        const existing = await storage.getAppealByFlagId(flagId);
+        if (existing) {
+            res.status(409).json(error(config.nodeId, 'ALREADY_APPEALED', 'This flag has already been appealed'));
+            return;
+        }
+        const now = new Date().toISOString();
+        const id = `appeal-${randomBytes(8).toString('hex')}`;
+        const appeal = await storage.createAppeal({
+            id,
+            flagId,
+            appealedBy: caller,
+            reason,
+            status: 'pending',
+            createdAt: now,
+        });
+        res.status(201).json(success(config.nodeId, appeal, [
+            { description: 'View all appeals', method: 'GET', url: '/v1/appeals' },
+        ]));
+        emitChange('appeals');
+    });
+    // ── GET /v1/appeals — List appeals (operator sees all; organism admin sees their organism's) ──
+    router.get('/v1/appeals', requireAuth(), async (req, res) => {
+        const status = req.query.status;
+        const page = Math.max(1, parseInt(req.query.page, 10) || 1);
+        const perPage = Math.min(100, Math.max(1, parseInt(req.query.per_page, 10) || 20));
+        const isOperator = req.auth.roles.includes('operator');
+        // Resolve caller's GHII for organism admin check
+        let callerGhii = null;
+        if (!isOperator) {
+            const ghiiRecord = await storage.getGHIIByOwner(req.auth.owner);
+            callerGhii = ghiiRecord?.ghii ?? null;
+        }
+        // Find organism IDs where the caller is an admin
+        let adminOrgIds = null;
+        if (!isOperator && callerGhii) {
+            adminOrgIds = new Set();
+            const allOrganisms = await storage.listOrganisms();
+            for (const org of allOrganisms) {
+                if (org.admins.includes(callerGhii)) {
+                    adminOrgIds.add(org.id);
+                }
+            }
+        }
+        // Must be operator or admin of at least one organism
+        if (!isOperator && (!adminOrgIds || adminOrgIds.size === 0)) {
+            res.status(403).json(error(config.nodeId, 'FORBIDDEN', 'Only operators or organism admins can list appeals'));
+            return;
+        }
+        // Fetch all appeals matching status filter
+        const allAppeals = await storage.listAppeals({ status, page: 1, perPage: 10000 });
+        // If organism admin (not operator), filter to appeals for their organism's content
+        let filtered = allAppeals;
+        if (!isOperator && adminOrgIds) {
+            filtered = [];
+            for (const appeal of allAppeals) {
+                const flag = await storage.getFlag(appeal.flagId);
+                if (!flag)
+                    continue;
+                // Check if the flag targets content in an organism the caller admins
+                if (flag.targetType === 'memory' && flag.targetId.includes('::')) {
+                    const [, ...keyParts] = flag.targetId.split('::');
+                    const memoryKey = keyParts.join('::');
+                    const orgMatch = memoryKey.match(/^organism\.([^.]+)\./);
+                    if (orgMatch && adminOrgIds.has(orgMatch[1])) {
+                        filtered.push(appeal);
+                    }
+                }
+            }
+        }
+        const total = filtered.length;
+        // Apply pagination manually
+        const start = (page - 1) * perPage;
+        const appeals = filtered.slice(start, start + perPage);
+        res.json(success(config.nodeId, { appeals, total }, [
+            { description: 'Review an appeal', method: 'POST', url: '/v1/appeals/{id}/review' },
+        ], { page, per_page: perPage, total }));
+    });
+    // ── POST /v1/appeals/:id/review — Review an appeal (operator or organism admin) ──
+    router.post('/v1/appeals/:id/review', requireAuth(), async (req, res) => {
+        const id = param(req.params.id);
+        const { decision, note } = req.body ?? {};
+        // Validate decision
+        if (!decision || !['upheld', 'overturned'].includes(decision)) {
+            res.status(400).json(error(config.nodeId, 'VALIDATION_ERROR', 'decision is required and must be "upheld" or "overturned"'));
+            return;
+        }
+        // Look up the appeal
+        const appeal = await storage.getAppeal(id);
+        if (!appeal) {
+            res.status(404).json(error(config.nodeId, 'NOT_FOUND', `Appeal not found: ${id}`));
+            return;
+        }
+        // Phase 2.4 — Allow organism admins to review appeals for their organism's content
+        const isOperator = req.auth.roles.includes('operator');
+        let isOrganismAdmin = false;
+        if (!isOperator) {
+            const flag = await storage.getFlag(appeal.flagId);
+            if (flag && flag.targetType === 'memory' && flag.targetId.includes('::')) {
+                const [, ...keyParts] = flag.targetId.split('::');
+                const memoryKey = keyParts.join('::');
+                const orgMatch = memoryKey.match(/^organism\.([^.]+)\./);
+                if (orgMatch) {
+                    const organism = await storage.getOrganism(orgMatch[1]);
+                    if (organism) {
+                        const ghiiRecord = await storage.getGHIIByOwner(req.auth.owner);
+                        if (ghiiRecord && organism.admins.includes(ghiiRecord.ghii)) {
+                            isOrganismAdmin = true;
+                        }
+                    }
+                }
+            }
+        }
+        if (!isOperator && !isOrganismAdmin) {
+            res.status(403).json(error(config.nodeId, 'FORBIDDEN', 'Only operators or organism admins can review appeals'));
+            return;
+        }
+        // Must be pending
+        if (appeal.status !== 'pending') {
+            res.status(409).json(error(config.nodeId, 'ALREADY_REVIEWED', `Appeal has already been reviewed with decision: ${appeal.status}`));
+            return;
+        }
+        const now = new Date().toISOString();
+        const reviewer = req.auth.sub;
+        if (decision === 'overturned') {
+            // Flag status -> "dismissed", content is restored
+            await storage.updateFlag(appeal.flagId, {
+                status: 'dismissed',
+                reviewedBy: reviewer,
+                reviewedAt: now,
+            });
+        }
+        // If "upheld", the flag stays active (content remains hidden)
+        const updated = await storage.updateAppeal(id, {
+            status: decision,
+            reviewedBy: reviewer,
+            reviewNote: note ?? undefined,
+            reviewedAt: now,
+        });
+        res.json(success(config.nodeId, updated, [
+            { description: 'View all appeals', method: 'GET', url: '/v1/appeals' },
+            { description: 'View the related flag', method: 'GET', url: `/v1/flags/summary/${(await storage.getFlag(appeal.flagId))?.targetType}/${(await storage.getFlag(appeal.flagId))?.targetId}` },
+        ]));
+        emitChange('appeals');
+    });
+    return router;
+}
+//# sourceMappingURL=appeals.js.map

package/dist/src/routes/appeals.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"appeals.js","sourceRoot":"","sources":["../../../src/routes/appeals.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAG1C,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAEtD,SAAS,KAAK,CAAC,CAAoB;IAC/B,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACvC,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,eAAe,CAC1B,OAAgB,EAChB,UAAkB,EAClB,QAAgB;IAEhB,QAAQ,UAAU,EAAE,CAAC;QACjB,KAAK,QAAQ,CAAC,CAAC,CAAC;YACZ,gEAAgE;YAChE,+DAA+D;YAC/D,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC;YAC1C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBACzB,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;gBAC1D,IAAI,GAAG;oBAAE,OAAO,GAAG,CAAC,SAAS,CAAC;YAClC,CAAC;YACD,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,KAAK,YAAY,CAAC,CAAC,CAAC;YAChB,qDAAqD;YACrD,kCAAkC;YAClC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC;YAC1C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBACzB,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;gBACvD,IAAI,IAAI;oBAAE,OAAO,IAAI,CAAC,UAAU,CAAC;YACrC,CAAC;YACD,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACZ,2DAA2D;YAC3D,0BAA0B;YAC1B,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,WAAW,EAAE,CAAC;YAC5C,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC3B,IAAI,MAAM,CAAC,EAAE,KAAK,QAAQ;oBAAE,OAAO,MAAM,CAAC,YAAY,CAAC;YAC3D,CAAC;YACD,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,KAAK,OAAO,CAAC,CAAC,CAAC;YACX,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC/C,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;QACrC,CAAC;QACD;YACI,OAAO,IAAI,CAAC;IACpB,CAAC;AACL,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,MAAoB,EAAE,OAAgB;IAChE,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;IAExB,qEAAqE;IACrE,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACtE,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACxC,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;QAElC,kBAAkB;QAClB,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YACxC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,kBAAkB,EAAE,oBAAoB,CAAC,CAAC,CAAC;YACrF,OAAO;QACX,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC;YACvB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,kBAAkB,EAAE,yCAAyC,CAAC,CAAC,CAAC;YAC1G,OAAO;QACX,CAAC;QAED,mBAAmB;QACnB,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,mBAAmB,MAAM,EAAE,CAAC,CAAC,CAAC;YACrF,OAAO;QACX,CAAC;QAED,yCAAyC;QACzC,MAAM,MAAM,GAAG,GAAG,CAAC,IAAK,CAAC,GAAG,CAAC;QAC7B,MAAM,YAAY,GAAG,MAAM,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAEpF,oDAAoD;QACpD,MAAM,WAAW,GAAG,GAAG,CAAC,IAAK,CAAC,KAAK,CAAC;QACpC,IAAI,OAAO,GAAG,YAAY,KAAK,MAAM,CAAC;QAEtC,2FAA2F;QAC3F,IAAI,CAAC,OAAO,IAAI,YAAY,EAAE,CAAC;YAC3B,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;YACnD,IAAI,KAAK,IAAI,KAAK,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;gBACvC,OAAO,GAAG,IAAI,CAAC;YACnB,CAAC;QACL,CAAC;QAED,wDAAwD;QACxD,IAAI,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,IAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YACpD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,EACrD,0CAA0C,CAAC,CAAC,CAAC;YACjD,OAAO;QACX,CAAC;QAED,4BAA4B;QAC5B,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACzD,IAAI,QAAQ,EAAE,CAAC;YACX,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,kBAAkB,EACxD,qCAAqC,CAAC,CAAC,CAAC;YAC5C,OAAO;QACX,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,EAAE,GAAG,UAAU,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAEtD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC;YACtC,EAAE;YACF,MAAM;YACN,UAAU,EAAE,MAAM;YAClB,MAAM;YACN,MAAM,EAAE,SAAS;YACjB,SAAS,EAAE,GAAG;SACjB,CAAC,CAAC;QAEH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE;YAChD,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,aAAa,EAAE;SACzE,CAAC,CAAC,CAAC;QACJ,UAAU,CAAC,SAAS,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;IAEH,iGAAiG;IACjG,MAAM,CAAC,GAAG,CAAC,aAAa,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACxD,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,MAA4B,CAAC;QACtD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAc,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;QACtE,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,QAAkB,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAE7F,MAAM,UAAU,GAAG,GAAG,CAAC,IAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAExD,iDAAiD;QACjD,IAAI,UAAU,GAAkB,IAAI,CAAC;QACrC,IAAI,CAAC,UAAU,EAAE,CAAC;YACd,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,IAAK,CAAC,KAAK,CAAC,CAAC;YACjE,UAAU,GAAG,UAAU,EAAE,IAAI,IAAI,IAAI,CAAC;QAC1C,CAAC;QAED,iDAAiD;QACjD,IAAI,WAAW,GAAuB,IAAI,CAAC;QAC3C,IAAI,CAAC,UAAU,IAAI,UAAU,EAAE,CAAC;YAC5B,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;YAChC,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,aAAa,EAAE,CAAC;YACnD,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;gBAC7B,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;oBAClC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAC5B,CAAC;YACL,CAAC;QACL,CAAC;QAED,qDAAqD;QACrD,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC,WAAW,IAAI,WAAW,CAAC,IAAI,KAAK,CAAC,CAAC,EAAE,CAAC;YAC1D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,EACjD,oDAAoD,CAAC,CAAC,CAAC;YAC3D,OAAO;QACX,CAAC;QAED,2CAA2C;QAC3C,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QAElF,mFAAmF;QACnF,IAAI,QAAQ,GAAG,UAAU,CAAC;QAC1B,IAAI,CAAC,UAAU,IAAI,WAAW,EAAE,CAAC;YAC7B,QAAQ,GAAG,EAAE,CAAC;YACd,KAAK,MAAM,MAAM,IAAI,UAAU,EAAE,CAAC;gBAC9B,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBAClD,IAAI,CAAC,IAAI;oBAAE,SAAS;gBACpB,qEAAqE;gBACrE,IAAI,IAAI,CAAC,UAAU,KAAK,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC/D,MAAM,CAAC,EAAE,GAAG,QAAQ,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBAClD,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBACtC,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;oBACzD,IAAI,QAAQ,IAAI,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC3C,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;oBAC1B,CAAC;gBACL,CAAC;YACL,CAAC;QACL,CAAC;QAED,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC;QAE9B,4BAA4B;QAC5B,MAAM,KAAK,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC;QACnC,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,OAAO,CAAC,CAAC;QAEvD,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;YAChD,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,yBAAyB,EAAE;SACtF,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,oFAAoF;IACpF,MAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACpE,MAAM,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAChC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;QAE1C,oBAAoB;QACpB,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,kBAAkB,EACxD,2DAA2D,CAAC,CAAC,CAAC;YAClE,OAAO;QACX,CAAC;QAED,qBAAqB;QACrB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAC3C,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,qBAAqB,EAAE,EAAE,CAAC,CAAC,CAAC;YACnF,OAAO;QACX,CAAC;QAED,mFAAmF;QACnF,MAAM,UAAU,GAAG,GAAG,CAAC,IAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QACxD,IAAI,eAAe,GAAG,KAAK,CAAC;QAC5B,IAAI,CAAC,UAAU,EAAE,CAAC;YACd,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAClD,IAAI,IAAI,IAAI,IAAI,CAAC,UAAU,KAAK,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBACvE,MAAM,CAAC,EAAE,GAAG,QAAQ,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAClD,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACtC,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;gBACzD,IAAI,QAAQ,EAAE,CAAC;oBACX,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;oBACxD,IAAI,QAAQ,EAAE,CAAC;wBACX,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,IAAK,CAAC,KAAK,CAAC,CAAC;wBACjE,IAAI,UAAU,IAAI,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;4BAC1D,eAAe,GAAG,IAAI,CAAC;wBAC3B,CAAC;oBACL,CAAC;gBACL,CAAC;YACL,CAAC;QACL,CAAC;QAED,IAAI,CAAC,UAAU,IAAI,CAAC,eAAe,EAAE,CAAC;YAClC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,EACjD,sDAAsD,CAAC,CAAC,CAAC;YAC7D,OAAO;QACX,CAAC;QAED,kBAAkB;QAClB,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC9B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,kBAAkB,EACxD,mDAAmD,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YACzE,OAAO;QACX,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAK,CAAC,GAAG,CAAC;QAE/B,IAAI,QAAQ,KAAK,YAAY,EAAE,CAAC;YAC5B,kDAAkD;YAClD,MAAM,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE;gBACpC,MAAM,EAAE,WAAW;gBACnB,UAAU,EAAE,QAAQ;gBACpB,UAAU,EAAE,GAAG;aAClB,CAAC,CAAC;QACP,CAAC;QACD,8DAA8D;QAE9D,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE;YAC3C,MAAM,EAAE,QAAQ;YAChB,UAAU,EAAE,QAAQ;YACpB,UAAU,EAAE,IAAI,IAAI,SAAS;YAC7B,UAAU,EAAE,GAAG;SAClB,CAAC,CAAC;QAEH,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE;YACrC,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,aAAa,EAAE;YACtE,EAAE,WAAW,EAAE,uBAAuB,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,qBAAqB,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,UAAU,IAAI,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE;SAC9L,CAAC,CAAC,CAAC;QACJ,UAAU,CAAC,SAAS,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAClB,CAAC"}

package/dist/src/routes/apps.d.ts

@@ -0,0 +1,14 @@
+import { Router } from 'express';
+import type { AimeatConfig } from '../config.js';
+import type { Storage } from '../storage/interface.js';
+import type { PeerInfo } from '../services/federation.js';
+/**
+ * App Catalog routes — versioned apps with manifest and search.
+ *
+ * Apps are single-file HTML apps stored in the dedicated apps table.
+ * Each publish auto-increments the version number.
+ * Old versions are preserved. Download counter is tracked separately.
+ * Screenshots use the existing storage system with key prefix "apps/screenshots/".
+ */
+export declare function appsRouter(config: AimeatConfig, storage: Storage, peers: Map<string, PeerInfo>): Router;
+//# sourceMappingURL=apps.d.ts.map

package/dist/src/routes/apps.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"apps.d.ts","sourceRoot":"","sources":["../../../src/routes/apps.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,OAAO,EAAe,MAAM,yBAAyB,CAAC;AACpE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AAM1D;;;;;;;GAOG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,MAAM,CA+avG"}