atabey-shared 0.1.1-beta → 0.1.2

package/README.md

@@ -1,32 +1,30 @@
-# [GOV] Atabey Shared — Core Utility Library for AI Governance Platform
+# [GOV] Atabey Shared — Core Utility Library for the AI Governance Platform
 
-[![Version](https://img.shields.io/badge/Version-v0.1.0-beta.0-blue.svg)](https://github.com/ysf-bkr/atabey)
+[![Version](https://img.shields.io/badge/Version-v0.1.2-blue.svg)](https://github.com/ysf-bkr/atabey)
 [![npm](https://img.shields.io/npm/v/atabey-shared)](https://www.npmjs.com/package/atabey-shared)
 [![License: AGPL-3.0](https://img.shields.io/badge/License-AGPL--3.0-blue.svg)](https://www.gnu.org/licenses/agpl-3.0)
 
-**Atabey Shared** is the foundational utility package of the Atabey framework. It provides the shared codebase, data structures, constants, security filters, database holders, logging layers, and locking mechanisms used by both `atabey` (Core CLI/Orchestrator) and `atabey-mcp` (MCP Server).
+**Atabey Shared** is the foundational utility package of the Atabey framework: shared constants and branded types, security filters (PII, secrets, TLS, policy gate), the SQLite holder and migrations, structured logging, audit chain, concurrency primitives (locks, job queue, worker pool) and the sandbox runtime — used by both `atabey` (core CLI/orchestrator) and `atabey-mcp` (MCP server).
 
 ---
 
 ## 📋 Package Overview
 
-| Module | Files | Core Responsibilities |
-|--------|-------|-----------------------|
-| **PII Masking** | `pii.ts` | Regex-based sanitization of 20+ sensitive patterns (emails, phones, credit cards, IP addresses, JWT tokens, API keys) |
-| **Distributed Locking** | `lock.ts` | Multi-process file-based lock implementation with stale lock detection (10s TTL) and retry backoff |
-| **Enterprise Logger** | `logger.ts` | Multi-destination structured logging (Stdout/Stderr + local files) supporting min-level and JSON formatting |
-| **Data Retention** | `retention.ts` | KVKK/GDPR-compliant telemetry and log pruning based on 30-day and 90-day retention policies |
-| **Audit Logs** | `audit.ts` | Unified JSON audit trail capturing agent actions, timestamps, trace IDs, and results |
-| **Error Handling** | `errors.ts` | Custom error classes (`AtabeyBaseError`, `LockError`, `ComplianceError`) preserving stack traces |
-| **Constants & Types** | `constants.ts`, `types.ts` | Centralized constants (Phase paths, candidate directories, MCP constants) and strictly branded types |
-| **File System** | `fs.ts` | Safe file write wrapper with automatic parent directory creation and encoding validation |
-| **Database Holder** | `database.ts` | Singleton SQLite database holder for shared workspace storage |
+| Module group | Files | Responsibility |
+|--------------|-------|----------------|
+| **primitives** | `constants`, `types`, `errors`, `fs`, `string`, `time`, `outbound-http` | Framework constants, branded types, error classes, safe fs, TLS-aware outbound HTTP |
+| **storage** | `database`, `storage`, `migrations`, `memory-prune` | SQLite holder (singleton), schema migrations, memory pruning |
+| **security** | `pii`, `secrets`, `tls`, `policy-gate`, `retention` | PII masking, AES-256-GCM vault, TLS/mTLS, fail-closed PolicyGate, retention |
+| **concurrency** | `lock`, `file-lock`, `job-queue`, `worker-pool`, `worker-thread`, `resilience` | Distributed/file locks, DB-backed job queue, worker pool, circuit breaker |
+| **sandbox** | `sandbox`, `sandbox-runtime`, `sandbox-fs` | OS sandbox (seatbelt/uid), fail-closed sandboxed file writes |
+| **observability** | `logger`, `otel`, `audit`, `audit-chain` | Structured logging, OTel spans, HMAC-signed audit chain |
+| **agent** | `agent-identity`, `api-catalog`, `tokenizer` | Signed agent identity, API endpoint catalog, `cl100k_base` tokenizer |
 
 ---
 
 ## 🚀 Installation
 
-This package is designed as an **internal shared module** for the Atabey monorepo workspace, but it can be installed independently if needed:
+Designed as an **internal shared module** for the Atabey monorepo workspace, but installable independently:
 
 ```bash
 npm install atabey-shared
@@ -34,52 +32,83 @@ npm install atabey-shared
 
 ---
 
+## 🧩 Module Structure
+
+The package is organized into focused **module groups**. `src/index.ts` is a barrel
+that re-exports everything flat **plus** a `Modules.<Group>` namespace per group; the
+flat `atabey-shared/*.js` entry points are kept as thin re-export shims for backward
+compatibility.
+
+```
+packages/shared/
+├── src/
+│   ├── index.ts                # Barrel: flat exports + `Modules.<Group>`
+│   └── modules/
+│       ├── primitives/         # constants, types, errors, fs, string, time, outbound-http
+│       ├── storage/            # database, storage, migrations, memory-prune
+│       ├── security/           # pii, secrets, tls, policy-gate, retention
+│       ├── concurrency/        # lock, file-lock, job-queue, worker-pool, worker-thread, resilience
+│       ├── sandbox/            # sandbox, sandbox-runtime, sandbox-fs
+│       ├── observability/      # logger, otel, audit, audit-chain
+│       └── agent/              # agent-identity, api-catalog, tokenizer
+```
+
+Three import styles are supported:
+
+```typescript
+// 1. Flat — stable public API
+import { maskText, logger } from "atabey-shared";
+import { maskText } from "atabey-shared/pii.js";
+
+// 2. Namespaced by module group
+import { Modules } from "atabey-shared";
+Modules.Security.maskText("user@example.com");
+
+// 3. Deep module subpath
+import { maskText } from "atabey-shared/security/pii.js";
+```
+
+---
+
 ## ⚙️ Core Modules Detail
 
 ### 1. PII Protection (KVKK/GDPR Compliance)
-The `pii.ts` module scans and redacts sensitive data before it is logged to disk or sent to external LLM providers, ensuring absolute data privacy.
+The `pii.ts` module scans and redacts sensitive data before it is logged to disk or sent to external LLM providers.
 ```typescript
 import { maskText } from "atabey-shared";
 
-const sensitiveInput = "My phone is +90 555 123 45 67 and email is admin@company.com";
-const sanitizedText = maskText(sensitiveInput);
-console.log(sanitizedText);
-// Output: "My phone is ***-***-**** and email is ***@***"
+const sanitized = maskText("My phone is +90 555 123 45 67 and email is admin@company.com");
+// "My phone is ***-***-**** and email is ***@***"
 ```
 
 ### 2. Distributed Resource Locking
-The `lock.ts` module prevents race conditions between parallel running agents writing to shared resources (e.g. `PROJECT_MEMORY.md`).
+`lock.ts` provides a SQLite-backed `DistributedLock` (server-authoritative, with stale-lock reclaim) that prevents race conditions between parallel agents writing to shared resources. For a lightweight file-based lock, use `AtomicFileLock` from `file-lock.ts`.
 ```typescript
-import { AtabeyLock } from "atabey-shared";
+import { DistributedLock } from "atabey-shared";
 
-const lock = new AtabeyLock("project-memory", { ttlMs: 10000, retryCount: 3 });
+DistributedLock.initialize(); // once at startup
 
-try {
-    const acquired = await lock.acquire();
-    if (acquired) {
-        // Safe region: write to file
+const owner = DistributedLock.getLocalOwnerId();
+if (DistributedLock.acquire("PROJECT_MEMORY.md", owner, { ttlMs: 10000, reason: "memory sync" })) {
+    try {
+        // safe region: write the shared resource
+    } finally {
+        DistributedLock.release("PROJECT_MEMORY.md", owner);
     }
-} finally {
-    await lock.release();
 }
 ```
 
-### 3. Enterprise Logger
-Structured logger wrapping `process.stdout` and `process.stderr` supporting log file logging and JSON output format.
+### 3. Structured Logger
+Structured logger wrapping `process.stdout`/`process.stderr`, with file logging and JSON output.
 ```typescript
 import { logger, LogLevel } from "atabey-shared";
 
-logger.configure({
-    minLevel: LogLevel.DEBUG,
-    jsonFormat: true,
-    logFile: "./.atabey/logs/system.log"
-});
-
+logger.configure({ minLevel: LogLevel.DEBUG, jsonFormat: true, logFile: "./.atabey/logs/system.log" });
 logger.info("Database migration completed", { durationMs: 142 });
 ```
 
 ### 4. Branded Types
-Ensures compile-time validation for workspace ID primitives to prevent mixing up agent names, message IDs, and task IDs.
+Compile-time validation for workspace ID primitives to prevent mixing agent names, message IDs and task IDs.
 ```typescript
 import { AgentID, TaskID, asAgentID, asTaskID } from "atabey-shared";
 
@@ -91,10 +120,19 @@ const task: TaskID = asTaskID("TASK-102");
 
 ## 📦 Dependencies
 
-- **better-sqlite3**: SQLite database engine for storage shims
-- **typescript**: Type safety enforcement
+- **js-tiktoken**: `cl100k_base` BPE tokenizer for token accounting
+- **better-sqlite3**, **chalk**, **zod** _(peer)_: storage, terminal styling and runtime validation
+
+## 🔗 Related Packages
+
+| Package | Role | Links |
+|---------|------|-------|
+| **atabey** | Core engine — CLI, agents, engines, orchestrator | [npm](https://www.npmjs.com/package/atabey) · [source](https://github.com/ysf-bkr/atabey/tree/main/packages/atabey) |
+| **atabey-mcp** | MCP server — 40 tools & governance pipeline | [npm](https://www.npmjs.com/package/atabey-mcp) · [source](https://github.com/ysf-bkr/atabey/tree/main/packages/atabey-mcp) |
+| **atabey-shared** | Shared utilities — constants, storage, PII, audit, locks | [npm](https://www.npmjs.com/package/atabey-shared) · [source](https://github.com/ysf-bkr/atabey/tree/main/packages/shared) |
+
+> Full bilingual documentation (TR + EN): **[github.com/ysf-bkr/atabey](https://github.com/ysf-bkr/atabey#readme)**
 
----
 
 ## License
 

package/dist/agent-identity.d.ts

@@ -1,34 +1 @@
-/**
- * Agent Identity — cryptographically signed agent tokens.
- *
- * Problem: `ATABEY_ACTIVE_AGENT` is a plain env var, so any tool/subprocess can
- * impersonate `@manager` or `@security`. When `ATABEY_AGENT_SECRET` is set,
- * Atabey accepts an HMAC-signed `ATABEY_AGENT_TOKEN` and verifies it
- * (fail-closed on tampering/expiry). Set `ATABEY_AGENT_IDENTITY_REQUIRED=true`
- * to refuse plain-env identity entirely.
- *
- * Token format: `${agent}.${issuedAt}.${expiresAt}.${hmacSha256Base64url}`
- */
-export interface AgentIdentity {
-    agent: string;
-    issuedAt: number;
-    expiresAt: number;
-}
-export interface AgentTokenResult {
-    valid: boolean;
-    agent?: string;
-    reason?: string;
-}
-/** True when agent-token verification is mandatory (plain env rejected). */
-export declare function isAgentIdentityEnforced(): boolean;
-/** Sign an agent identity into a compact token. */
-export declare function signAgentToken(agent: string, options?: {
-    ttlMs?: number;
-    key?: string | Buffer;
-}): string;
-/** Verify an agent token (signature + expiry). */
-export declare function verifyAgentToken(token: string, options?: {
-    key?: string | Buffer;
-}): AgentTokenResult;
-/** Decode a token's identity without verification (for diagnostics only). */
-export declare function decodeAgentToken(token: string): AgentIdentity | null;
+export * from "./modules/agent/agent-identity.js";

package/dist/agent-identity.js

@@ -1,77 +1,2 @@
-/**
- * Agent Identity — cryptographically signed agent tokens.
- *
- * Problem: `ATABEY_ACTIVE_AGENT` is a plain env var, so any tool/subprocess can
- * impersonate `@manager` or `@security`. When `ATABEY_AGENT_SECRET` is set,
- * Atabey accepts an HMAC-signed `ATABEY_AGENT_TOKEN` and verifies it
- * (fail-closed on tampering/expiry). Set `ATABEY_AGENT_IDENTITY_REQUIRED=true`
- * to refuse plain-env identity entirely.
- *
- * Token format: `${agent}.${issuedAt}.${expiresAt}.${hmacSha256Base64url}`
- */
-import crypto from "crypto";
-import { resolveAuditChainKey } from "./audit-chain.js";
-function resolveKey(explicit) {
-    if (explicit) {
-        return Buffer.isBuffer(explicit) ? explicit : crypto.createHash("sha256").update(explicit, "utf8").digest();
-    }
-    const envSecret = process.env.ATABEY_AGENT_SECRET;
-    if (envSecret && envSecret.trim()) {
-        return crypto.createHash("sha256").update(envSecret.trim(), "utf8").digest();
-    }
-    return resolveAuditChainKey();
-}
-function timingSafeEqual(a, b) {
-    const ba = Buffer.from(a);
-    const bb = Buffer.from(b);
-    if (ba.length !== bb.length)
-        return false;
-    return crypto.timingSafeEqual(ba, bb);
-}
-/** True when agent-token verification is mandatory (plain env rejected). */
-export function isAgentIdentityEnforced() {
-    return process.env.ATABEY_AGENT_IDENTITY_REQUIRED === "true";
-}
-/** Sign an agent identity into a compact token. */
-export function signAgentToken(agent, options = {}) {
-    const key = resolveKey(options.key);
-    if (!key) {
-        throw new Error("[AGENT_IDENTITY] No signing key. Set ATABEY_AGENT_SECRET.");
-    }
-    const name = agent.replace(/^@/, "");
-    const issuedAt = Date.now();
-    const expiresAt = issuedAt + (options.ttlMs ?? 60 * 60 * 1000);
-    const payload = `${name}.${issuedAt}.${expiresAt}`;
-    const sig = crypto.createHmac("sha256", key).update(payload).digest("base64url");
-    return `${payload}.${sig}`;
-}
-/** Verify an agent token (signature + expiry). */
-export function verifyAgentToken(token, options = {}) {
-    const key = resolveKey(options.key);
-    if (!key)
-        return { valid: false, reason: "No signing key configured." };
-    if (!token || typeof token !== "string")
-        return { valid: false, reason: "Empty token." };
-    const parts = token.split(".");
-    if (parts.length !== 4)
-        return { valid: false, reason: "Malformed token." };
-    const [name, issuedAt, expiresAt, sig] = parts;
-    const payload = `${name}.${issuedAt}.${expiresAt}`;
-    const expected = crypto.createHmac("sha256", key).update(payload).digest("base64url");
-    if (!timingSafeEqual(sig, expected))
-        return { valid: false, reason: "Signature mismatch." };
-    const exp = Number(expiresAt);
-    if (!Number.isFinite(exp))
-        return { valid: false, reason: "Invalid expiry." };
-    if (Date.now() > exp)
-        return { valid: false, reason: "Token expired." };
-    return { valid: true, agent: `@${name}` };
-}
-/** Decode a token's identity without verification (for diagnostics only). */
-export function decodeAgentToken(token) {
-    const parts = token.split(".");
-    if (parts.length !== 4)
-        return null;
-    return { agent: `@${parts[0]}`, issuedAt: Number(parts[1]), expiresAt: Number(parts[2]) };
-}
+export * from "./modules/agent/agent-identity.js";
 //# sourceMappingURL=agent-identity.js.map

package/dist/agent-identity.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent-identity.js","sourceRoot":"","sources":["../src/agent-identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAcxD,SAAS,UAAU,CAAC,QAA0B;IAC1C,IAAI,QAAQ,EAAE,CAAC;QACX,OAAO,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC;IAChH,CAAC;IACD,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;IAClD,IAAI,SAAS,IAAI,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC;QAChC,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC;IACjF,CAAC;IACD,OAAO,oBAAoB,EAAE,CAAC;AAClC,CAAC;AAED,SAAS,eAAe,CAAC,CAAS,EAAE,CAAS;IACzC,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1B,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1B,IAAI,EAAE,CAAC,MAAM,KAAK,EAAE,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1C,OAAO,MAAM,CAAC,eAAe,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;AAC1C,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,uBAAuB;IACnC,OAAO,OAAO,CAAC,GAAG,CAAC,8BAA8B,KAAK,MAAM,CAAC;AACjE,CAAC;AAED,mDAAmD;AACnD,MAAM,UAAU,cAAc,CAAC,KAAa,EAAE,UAAqD,EAAE;IACjG,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,CAAC,GAAG,EAAE,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IACjF,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC5B,MAAM,SAAS,GAAG,QAAQ,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC/D,MAAM,OAAO,GAAG,GAAG,IAAI,IAAI,QAAQ,IAAI,SAAS,EAAE,CAAC;IACnD,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACjF,OAAO,GAAG,OAAO,IAAI,GAAG,EAAE,CAAC;AAC/B,CAAC;AAED,kDAAkD;AAClD,MAAM,UAAU,gBAAgB,CAAC,KAAa,EAAE,UAAqC,EAAE;IACnF,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC;IACxE,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IAEzF,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;IAC5E,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,CAAC,GAAG,KAAK,CAAC;IAC/C,MAAM,OAAO,GAAG,GAAG,IAAI,IAAI,QAAQ,IAAI,SAAS,EAAE,CAAC;IACnD,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACtF,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,QAAQ,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;IAE5F,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;IAC9B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IAC9E,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAExE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;AAC9C,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC1C,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,OAAO,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC9F,CAAC"}
+{"version":3,"file":"agent-identity.js","sourceRoot":"","sources":["../src/agent-identity.ts"],"names":[],"mappings":"AAAA,cAAc,mCAAmC,CAAC"}

package/dist/api-catalog.d.ts

@@ -1,57 +1 @@
-/**
- * API Catalog — endpoint registry, route/OpenAPI scanner, and drift detection.
- *
- * Purpose: let frontend/mobile agents integrate against the backend API using
- * a compact JSON catalog instead of reading large route source files (token
- * savings + zero context pollution).
- *
- * The scanner is HEURISTIC (regex/AST-lite) and covers:
- *   - Express / Fastify:  app|router|server|fastify.get('/path', ...)
- *   - Fastify route():    fastify.route({ method, url, ... })
- *   - NestJS decorators:  @Get('path') / @Post('path')
- *   - OpenAPI v3 / Swagger v2 JSON specs
- */
-export interface ApiEndpoint {
-    method: string;
-    path: string;
-    tag?: string;
-    summary?: string;
-    authRequired: boolean;
-    requestSchema?: string;
-    responseSchema?: string;
-    source?: string;
-    updatedAt: string;
-}
-export interface ApiCatalog {
-    version: 1;
-    generatedAt: string;
-    endpoints: ApiEndpoint[];
-}
-export interface ApiDrift {
-    added: ApiEndpoint[];
-    removed: ApiEndpoint[];
-    changed: Array<{
-        previous: ApiEndpoint;
-        current: ApiEndpoint;
-    }>;
-}
-export declare function endpointKey(e: {
-    method: string;
-    path: string;
-}): string;
-export declare function normalizePath(p: string): string;
-/** Parse an OpenAPI v3 or Swagger v2 spec object into endpoints. */
-export declare function parseOpenApiSpec(spec: unknown): ApiEndpoint[];
-/**
- * Walk a project tree and collect endpoints from route source files and any
- * OpenAPI/Swagger JSON specs.
- */
-export declare function scanProjectForEndpoints(rootDir: string, options?: {
-    maxFiles?: number;
-}): ApiEndpoint[];
-export declare function dedupe(endpoints: ApiEndpoint[]): ApiEndpoint[];
-/**
- * Diff a previous catalog against a freshly scanned one.
- */
-export declare function detectApiDrift(previous: ApiEndpoint[], current: ApiEndpoint[]): ApiDrift;
-export declare function isApiDriftClean(drift: ApiDrift): boolean;
+export * from "./modules/agent/api-catalog.js";

package/dist/api-catalog.js

@@ -1,254 +1,2 @@
-/**
- * API Catalog — endpoint registry, route/OpenAPI scanner, and drift detection.
- *
- * Purpose: let frontend/mobile agents integrate against the backend API using
- * a compact JSON catalog instead of reading large route source files (token
- * savings + zero context pollution).
- *
- * The scanner is HEURISTIC (regex/AST-lite) and covers:
- *   - Express / Fastify:  app|router|server|fastify.get('/path', ...)
- *   - Fastify route():    fastify.route({ method, url, ... })
- *   - NestJS decorators:  @Get('path') / @Post('path')
- *   - OpenAPI v3 / Swagger v2 JSON specs
- */
-import fs from "fs";
-import path from "path";
-const HTTP_METHODS = ["get", "post", "put", "patch", "delete", "options", "head"];
-const ROUTE_EXTENSIONS = new Set([".ts", ".tsx", ".js", ".jsx", ".mjs", ".cjs"]);
-const SKIP_DIRS = new Set(["node_modules", "dist", "build", ".git", "coverage", ".atabey", ".next"]);
-export function endpointKey(e) {
-    return `${e.method.toUpperCase()} ${normalizePath(e.path)}`;
-}
-export function normalizePath(p) {
-    if (!p)
-        return "/";
-    let out = p.trim();
-    if (!out.startsWith("/"))
-        out = `/${out}`;
-    // Collapse :param and {param} to a stable placeholder for drift comparison.
-    out = out.replace(/\{[^}]+\}/g, ":param").replace(/:[A-Za-z0-9_]+/g, ":param");
-    out = out.replace(/\/+$/, "");
-    return out || "/";
-}
-function defaultTag(p) {
-    const seg = p.split("/").filter(Boolean);
-    return seg[0] || "root";
-}
-/** Extract a route statement plus a few following lines for schema hints. */
-function scanRouteSource(filePath, content) {
-    const now = new Date().toISOString();
-    const lines = content.split("\n");
-    const found = new Map();
-    const add = (method, rawPath, schemaHint, authHint) => {
-        if (!rawPath || rawPath === "*")
-            return;
-        const m = method.toUpperCase();
-        const p = rawPath;
-        const key = endpointKey({ method: m, path: p });
-        if (found.has(key))
-            return;
-        const schemaMatch = /(?:schema|body|response)\s*:\s*([A-Za-z0-9_.]+)/.exec(schemaHint);
-        found.set(key, {
-            method: m,
-            path: p.startsWith("/") ? p : `/${p}`,
-            tag: defaultTag(p),
-            authRequired: authHint,
-            requestSchema: schemaMatch?.[1],
-            source: filePath,
-            updatedAt: now,
-        });
-    };
-    const isRouteLine = (l) => /\.(get|post|put|patch|delete|options|head)\s*\(/.test(l) ||
-        /@(Get|Post|Put|Patch|Delete|Options|Head)\s*\(/.test(l) ||
-        /\broute\s*\(/.test(l);
-    for (let i = 0; i < lines.length; i++) {
-        const line = lines[i];
-        // Statement-bounded window: stop at the next route line or statement end
-        // so schema/auth hints cannot bleed into the following route.
-        let window = line;
-        for (let j = i + 1; j < Math.min(i + 12, lines.length); j++) {
-            if (isRouteLine(lines[j]))
-                break;
-            window += `\n${lines[j]}`;
-            if (/;\s*$/.test(lines[j]))
-                break;
-        }
-        const authHint = /\b(authenticate|authGuard|verifyToken|preHandler\s*:\s*\[?\s*auth|requireAuth|jwt)\b/i.test(window);
-        // Express / Fastify shorthand: app.get('/x', ...) / router.post("/x", ...)
-        const short = /\.(get|post|put|patch|delete|options|head)\s*\(\s*[`'"]([^`'"]+)[`'"]/gi;
-        let m;
-        while ((m = short.exec(line)) !== null) {
-            add(m[1], m[2], window, authHint);
-        }
-        // Fastify route({ method: 'GET', url: '/x' }) — method/url may be in either order.
-        if (/\broute\s*\(/.test(line) || /\burl\s*:/.test(line)) {
-            const methodM = /method\s*:\s*[`'"](\w+)[`'"]/i.exec(window);
-            const urlM = /url\s*:\s*[`'"]([^`'"]+)[`'"]/i.exec(window);
-            if (methodM && urlM)
-                add(methodM[1], urlM[1], window, authHint);
-        }
-        // NestJS decorators: @Get('path') @Post()
-        const dec = /@(Get|Post|Put|Patch|Delete|Options|Head)\s*\(\s*[`'"]?([^`'")]*)[`'"]?\s*\)/g;
-        while ((m = dec.exec(line)) !== null) {
-            add(m[1], m[2] || "/", window, authHint);
-        }
-    }
-    return [...found.values()];
-}
-/** Parse an OpenAPI v3 or Swagger v2 spec object into endpoints. */
-export function parseOpenApiSpec(spec) {
-    const now = new Date().toISOString();
-    const doc = spec;
-    const paths = doc?.["paths"];
-    if (!paths || typeof paths !== "object")
-        return [];
-    const out = [];
-    for (const [rawPath, item] of Object.entries(paths)) {
-        if (!item || typeof item !== "object")
-            continue;
-        for (const method of HTTP_METHODS) {
-            const op = item[method];
-            if (!op)
-                continue;
-            const tags = Array.isArray(op["tags"]) ? op["tags"] : [];
-            const security = op["security"];
-            const requestSchema = refName(op["requestBody"]?.["content"]?.["application/json"]) ??
-                refName(op["parameters"]);
-            const responses = op["responses"];
-            const okResp = responses?.["200"] ?? responses?.["201"] ?? Object.values(responses || {})[0];
-            const responseSchema = refName((okResp?.["content"]?.["application/json"]) ?? okResp?.["schema"]);
-            out.push({
-                method: method.toUpperCase(),
-                path: rawPath,
-                tag: tags[0] || defaultTag(rawPath),
-                summary: typeof op["summary"] === "string" ? op["summary"] : undefined,
-                authRequired: Array.isArray(security) ? security.length > 0 : false,
-                requestSchema,
-                responseSchema,
-                source: "openapi",
-                updatedAt: now,
-            });
-        }
-    }
-    return out;
-}
-function refName(node) {
-    if (!node || typeof node !== "object")
-        return undefined;
-    const obj = node;
-    if (typeof obj["$ref"] === "string")
-        return obj["$ref"];
-    if (typeof obj["title"] === "string")
-        return obj["title"];
-    const schema = obj["schema"];
-    if (schema && typeof schema === "object") {
-        const s = schema;
-        if (typeof s["$ref"] === "string")
-            return s["$ref"];
-        if (typeof s["title"] === "string")
-            return s["title"];
-    }
-    return undefined;
-}
-/**
- * Walk a project tree and collect endpoints from route source files and any
- * OpenAPI/Swagger JSON specs.
- */
-export function scanProjectForEndpoints(rootDir, options = {}) {
-    const maxFiles = options.maxFiles ?? 5000;
-    const results = [];
-    let visited = 0;
-    const walk = (dir) => {
-        if (visited >= maxFiles)
-            return;
-        let entries;
-        try {
-            entries = fs.readdirSync(dir, { withFileTypes: true });
-        }
-        catch {
-            return;
-        }
-        for (const entry of entries) {
-            if (visited >= maxFiles)
-                return;
-            const full = path.join(dir, entry.name);
-            if (entry.isDirectory()) {
-                if (SKIP_DIRS.has(entry.name))
-                    continue;
-                walk(full);
-            }
-            else if (entry.isFile()) {
-                visited++;
-                const ext = path.extname(entry.name).toLowerCase();
-                try {
-                    if (ext === ".json" && /openapi|swagger/i.test(entry.name)) {
-                        const spec = JSON.parse(fs.readFileSync(full, "utf8"));
-                        results.push(...parseOpenApiSpec(spec));
-                    }
-                    else if (ROUTE_EXTENSIONS.has(ext)) {
-                        const content = fs.readFileSync(full, "utf8");
-                        if (/\.(get|post|put|patch|delete)\(|@(Get|Post|Put|Patch|Delete)\(|\broute\(/.test(content)) {
-                            results.push(...scanRouteSource(path.relative(rootDir, full), content));
-                        }
-                    }
-                }
-                catch {
-                    /* skip unreadable files */
-                }
-            }
-        }
-    };
-    walk(rootDir);
-    return dedupe(results);
-}
-export function dedupe(endpoints) {
-    const map = new Map();
-    for (const e of endpoints) {
-        const key = endpointKey(e);
-        const existing = map.get(key);
-        if (!existing) {
-            map.set(key, e);
-        }
-        else {
-            // Prefer the record with richer schema info.
-            map.set(key, {
-                ...existing,
-                requestSchema: existing.requestSchema ?? e.requestSchema,
-                responseSchema: existing.responseSchema ?? e.responseSchema,
-                authRequired: existing.authRequired || e.authRequired,
-            });
-        }
-    }
-    return [...map.values()].sort((a, b) => endpointKey(a).localeCompare(endpointKey(b)));
-}
-/**
- * Diff a previous catalog against a freshly scanned one.
- */
-export function detectApiDrift(previous, current) {
-    const prevMap = new Map(previous.map((e) => [endpointKey(e), e]));
-    const curMap = new Map(current.map((e) => [endpointKey(e), e]));
-    const added = [];
-    const removed = [];
-    const changed = [];
-    for (const [key, cur] of curMap) {
-        const prev = prevMap.get(key);
-        if (!prev) {
-            added.push(cur);
-            continue;
-        }
-        if ((prev.requestSchema ?? "") !== (cur.requestSchema ?? "") ||
-            (prev.responseSchema ?? "") !== (cur.responseSchema ?? "") ||
-            prev.authRequired !== cur.authRequired) {
-            changed.push({ previous: prev, current: cur });
-        }
-    }
-    for (const [key, prev] of prevMap) {
-        if (!curMap.has(key))
-            removed.push(prev);
-    }
-    return { added, removed, changed };
-}
-export function isApiDriftClean(drift) {
-    return drift.added.length === 0 && drift.removed.length === 0 && drift.changed.length === 0;
-}
+export * from "./modules/agent/api-catalog.js";
 //# sourceMappingURL=api-catalog.js.map

package/dist/api-catalog.js.map

@@ -1 +1 @@
-{"version":3,"file":"api-catalog.js","sourceRoot":"","sources":["../src/api-catalog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AA0BxB,MAAM,YAAY,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;AAClF,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AACjF,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;AAErG,MAAM,UAAU,WAAW,CAAC,CAAmC;IAC3D,OAAO,GAAG,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,CAAS;IACnC,IAAI,CAAC,CAAC;QAAE,OAAO,GAAG,CAAC;IACnB,IAAI,GAAG,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACnB,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,GAAG,GAAG,IAAI,GAAG,EAAE,CAAC;IAC1C,4EAA4E;IAC5E,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,iBAAiB,EAAE,QAAQ,CAAC,CAAC;IAC/E,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC9B,OAAO,GAAG,IAAI,GAAG,CAAC;AACtB,CAAC;AAED,SAAS,UAAU,CAAC,CAAS;IACzB,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACzC,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC;AAC5B,CAAC;AAED,6EAA6E;AAC7E,SAAS,eAAe,CAAC,QAAgB,EAAE,OAAe;IACtD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAuB,CAAC;IAE7C,MAAM,GAAG,GAAG,CAAC,MAAc,EAAE,OAAe,EAAE,UAAkB,EAAE,QAAiB,EAAE,EAAE;QACnF,IAAI,CAAC,OAAO,IAAI,OAAO,KAAK,GAAG;YAAE,OAAO;QACxC,MAAM,CAAC,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;QAC/B,MAAM,CAAC,GAAG,OAAO,CAAC;QAClB,MAAM,GAAG,GAAG,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;QAChD,IAAI,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO;QAC3B,MAAM,WAAW,GAAG,iDAAiD,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACvF,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE;YACX,MAAM,EAAE,CAAC;YACT,IAAI,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE;YACrC,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC;YAClB,YAAY,EAAE,QAAQ;YACtB,aAAa,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;YAC/B,MAAM,EAAE,QAAQ;YAChB,SAAS,EAAE,GAAG;SACjB,CAAC,CAAC;IACP,CAAC,CAAC;IAEF,MAAM,WAAW,GAAG,CAAC,CAAS,EAAE,EAAE,CAC9B,iDAAiD,CAAC,IAAI,CAAC,CAAC,CAAC;QACzD,gDAAgD,CAAC,IAAI,CAAC,CAAC,CAAC;QACxD,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAE3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACtB,yEAAyE;QACzE,8DAA8D;QAC9D,IAAI,MAAM,GAAG,IAAI,CAAC;QAClB,KAAK,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC1D,IAAI,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAAE,MAAM;YACjC,MAAM,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1B,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAAE,MAAM;QACtC,CAAC;QACD,MAAM,QAAQ,GAAG,uFAAuF,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAEtH,2EAA2E;QAC3E,MAAM,KAAK,GAAG,yEAAyE,CAAC;QACxF,IAAI,CAAyB,CAAC;QAC9B,OAAO,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACrC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;QACtC,CAAC;QAED,mFAAmF;QACnF,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACtD,MAAM,OAAO,GAAG,+BAA+B,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC7D,MAAM,IAAI,GAAG,gCAAgC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC3D,IAAI,OAAO,IAAI,IAAI;gBAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;QACpE,CAAC;QAED,0CAA0C;QAC1C,MAAM,GAAG,GAAG,+EAA+E,CAAC;QAC5F,OAAO,CAAC,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACnC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC7C,CAAC;IACL,CAAC;IAED,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;AAC/B,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,gBAAgB,CAAC,IAAa;IAC1C,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,GAAG,GAAG,IAAsC,CAAC;IACnD,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,OAAO,CAAwD,CAAC;IACpF,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IAEnD,MAAM,GAAG,GAAkB,EAAE,CAAC;IAC9B,KAAK,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAClD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,SAAS;QAChD,KAAK,MAAM,MAAM,IAAI,YAAY,EAAE,CAAC;YAChC,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAwC,CAAC;YAC/D,IAAI,CAAC,EAAE;gBAAE,SAAS;YAClB,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAE,EAAE,CAAC,MAAM,CAAc,CAAC,CAAC,CAAC,EAAE,CAAC;YACvE,MAAM,QAAQ,GAAG,EAAE,CAAC,UAAU,CAAC,CAAC;YAChC,MAAM,aAAa,GACf,OAAO,CAAG,EAAE,CAAC,aAAa,CAA6B,EAAE,CAAC,SAAS,CAA6B,EAAE,CAAC,kBAAkB,CAAC,CAAC;gBACvH,OAAO,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;YAC9B,MAAM,SAAS,GAAG,EAAE,CAAC,WAAW,CAAwD,CAAC;YACzF,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7F,MAAM,cAAc,GAAG,OAAO,CAC1B,CAAE,MAAM,EAAE,CAAC,SAAS,CAA6B,EAAE,CAAC,kBAAkB,CAAC,CAAC,IAAI,MAAM,EAAE,CAAC,QAAQ,CAAC,CACjG,CAAC;YACF,GAAG,CAAC,IAAI,CAAC;gBACL,MAAM,EAAE,MAAM,CAAC,WAAW,EAAE;gBAC5B,IAAI,EAAE,OAAO;gBACb,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,OAAO,CAAC;gBACnC,OAAO,EAAE,OAAO,EAAE,CAAC,SAAS,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,EAAE,CAAC,SAAS,CAAY,CAAC,CAAC,CAAC,SAAS;gBAClF,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK;gBACnE,aAAa;gBACb,cAAc;gBACd,MAAM,EAAE,SAAS;gBACjB,SAAS,EAAE,GAAG;aACjB,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACf,CAAC;AAED,SAAS,OAAO,CAAC,IAAa;IAC1B,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACxD,MAAM,GAAG,GAAG,IAA+B,CAAC;IAC5C,IAAI,OAAO,GAAG,CAAC,MAAM,CAAC,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC;IACxD,IAAI,OAAO,GAAG,CAAC,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC,OAAO,CAAW,CAAC;IACpE,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC7B,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,CAAC,GAAG,MAAiC,CAAC;QAC5C,IAAI,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,QAAQ;YAAE,OAAO,CAAC,CAAC,MAAM,CAAW,CAAC;QAC9D,IAAI,OAAO,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ;YAAE,OAAO,CAAC,CAAC,OAAO,CAAW,CAAC;IACpE,CAAC;IACD,OAAO,SAAS,CAAC;AACrB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CAAC,OAAe,EAAE,UAAiC,EAAE;IACxF,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,IAAI,CAAC;IAC1C,MAAM,OAAO,GAAkB,EAAE,CAAC;IAClC,IAAI,OAAO,GAAG,CAAC,CAAC;IAEhB,MAAM,IAAI,GAAG,CAAC,GAAW,EAAE,EAAE;QACzB,IAAI,OAAO,IAAI,QAAQ;YAAE,OAAO;QAChC,IAAI,OAAoB,CAAC;QACzB,IAAI,CAAC;YACD,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,CAAC;QAAC,MAAM,CAAC;YACL,OAAO;QACX,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC1B,IAAI,OAAO,IAAI,QAAQ;gBAAE,OAAO;YAChC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACxC,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACtB,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;oBAAE,SAAS;gBACxC,IAAI,CAAC,IAAI,CAAC,CAAC;YACf,CAAC;iBAAM,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;gBACxB,OAAO,EAAE,CAAC;gBACV,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;gBACnD,IAAI,CAAC;oBACD,IAAI,GAAG,KAAK,OAAO,IAAI,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;wBACzD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;wBACvD,OAAO,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;oBAC5C,CAAC;yBAAM,IAAI,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;wBACnC,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;wBAC9C,IAAI,0EAA0E,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;4BAC3F,OAAO,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;wBAC5E,CAAC;oBACL,CAAC;gBACL,CAAC;gBAAC,MAAM,CAAC;oBACL,2BAA2B;gBAC/B,CAAC;YACL,CAAC;QACL,CAAC;IACL,CAAC,CAAC;IAEF,IAAI,CAAC,OAAO,CAAC,CAAC;IACd,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,SAAwB;IAC3C,MAAM,GAAG,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC3C,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;QAC3B,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,CAAC,QAAQ,EAAE,CAAC;YACZ,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACpB,CAAC;aAAM,CAAC;YACJ,6CAA6C;YAC7C,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE;gBACT,GAAG,QAAQ;gBACX,aAAa,EAAE,QAAQ,CAAC,aAAa,IAAI,CAAC,CAAC,aAAa;gBACxD,cAAc,EAAE,QAAQ,CAAC,cAAc,IAAI,CAAC,CAAC,cAAc;gBAC3D,YAAY,EAAE,QAAQ,CAAC,YAAY,IAAI,CAAC,CAAC,YAAY;aACxD,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IACD,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1F,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,QAAuB,EAAE,OAAsB;IAC1E,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAClE,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAEhE,MAAM,KAAK,GAAkB,EAAE,CAAC;IAChC,MAAM,OAAO,GAAkB,EAAE,CAAC;IAClC,MAAM,OAAO,GAA2D,EAAE,CAAC;IAE3E,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAChB,SAAS;QACb,CAAC;QACD,IACI,CAAC,IAAI,CAAC,aAAa,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC;YACxD,CAAC,IAAI,CAAC,cAAc,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,IAAI,EAAE,CAAC;YAC1D,IAAI,CAAC,YAAY,KAAK,GAAG,CAAC,YAAY,EACxC,CAAC;YACC,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;QACnD,CAAC;IACL,CAAC;IACD,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,OAAO,EAAE,CAAC;QAChC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7C,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAe;IAC3C,OAAO,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC;AAChG,CAAC"}
+{"version":3,"file":"api-catalog.js","sourceRoot":"","sources":["../src/api-catalog.ts"],"names":[],"mappings":"AAAA,cAAc,gCAAgC,CAAC"}