canopycms 0.0.0

package/dist/api/branch-withdraw.js

@@ -0,0 +1,64 @@
+import { z } from 'zod';
+import { branchNameSchema } from './validators';
+import { getBranchMetadataFileManager } from '../branch-metadata';
+import { defineEndpoint } from './route-builder';
+import { canPerformWorkflowAction } from '../authorization';
+import { syncConvertToDraft } from './github-sync';
+const branchParamSchema = z.object({
+    branch: branchNameSchema,
+});
+const withdrawBranchHandler = async (gc, ctx, req, _params) => {
+    const { branchContext } = gc;
+    // Check if user can perform workflow actions (creator OR ACL access)
+    const defaultAccess = ctx.services.config.defaultBranchAccess ?? 'deny';
+    const canWithdraw = canPerformWorkflowAction(branchContext, req.user, defaultAccess);
+    if (!canWithdraw) {
+        return {
+            ok: false,
+            status: 403,
+            error: 'Only the branch creator or users with explicit branch access can withdraw this branch',
+        };
+    }
+    // Verify branch is in submitted status
+    if (branchContext.branch.status !== 'submitted') {
+        return {
+            ok: false,
+            status: 400,
+            error: `Cannot withdraw branch with status '${branchContext.branch.status}'. Only 'submitted' branches can be withdrawn.`,
+        };
+    }
+    // Convert PR to draft (sync via githubService, or async via task queue)
+    await syncConvertToDraft(ctx, branchContext);
+    // Update branch status to 'editing'
+    const meta = getBranchMetadataFileManager(branchContext.branchRoot, branchContext.baseRoot);
+    const updated = await meta.save({
+        branch: { name: branchContext.branch.name, status: 'editing' },
+    });
+    return { ok: true, status: 200, data: { branch: updated.branch } };
+};
+/**
+ * Withdraw a submitted branch, converting the PR to draft and unlocking editing
+ * POST /:branch/withdraw
+ */
+export const withdrawBranch = defineEndpoint({
+    namespace: 'workflow',
+    name: 'withdraw',
+    method: 'POST',
+    path: '/:branch/withdraw',
+    params: branchParamSchema,
+    responseType: 'BranchResponse',
+    response: {},
+    defaultMockData: {
+        branch: {
+            name: 'test-branch',
+            status: 'editing',
+            access: {},
+            createdBy: 'user-1',
+            createdAt: '2024-01-01',
+            updatedAt: '2024-01-01',
+        },
+    },
+    guards: ['branch'],
+    handler: withdrawBranchHandler,
+});
+//# sourceMappingURL=branch-withdraw.js.map

package/dist/api/branch-withdraw.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"branch-withdraw.js","sourceRoot":"","sources":["../../src/api/branch-withdraw.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AAI/C,OAAO,EAAE,4BAA4B,EAAE,MAAM,oBAAoB,CAAA;AACjE,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAA;AAChD,OAAO,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAA;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAA;AAElD,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,MAAM,EAAE,gBAAgB;CACzB,CAAC,CAAA;AAEF,MAAM,qBAAqB,GAAG,KAAK,EACjC,EAAoC,EACpC,GAAe,EACf,GAAe,EACf,OAA0C,EACjB,EAAE;IAC3B,MAAM,EAAE,aAAa,EAAE,GAAG,EAAE,CAAA;IAE5B,qEAAqE;IACrE,MAAM,aAAa,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,mBAAmB,IAAI,MAAM,CAAA;IACvE,MAAM,WAAW,GAAG,wBAAwB,CAAC,aAAa,EAAE,GAAG,CAAC,IAAI,EAAE,aAAa,CAAC,CAAA;IACpF,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,GAAG;YACX,KAAK,EACH,uFAAuF;SAC1F,CAAA;IACH,CAAC;IAED,uCAAuC;IACvC,IAAI,aAAa,CAAC,MAAM,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QAChD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,GAAG;YACX,KAAK,EAAE,uCAAuC,aAAa,CAAC,MAAM,CAAC,MAAM,gDAAgD;SAC1H,CAAA;IACH,CAAC;IAED,wEAAwE;IACxE,MAAM,kBAAkB,CAAC,GAAG,EAAE,aAAa,CAAC,CAAA;IAE5C,oCAAoC;IACpC,MAAM,IAAI,GAAG,4BAA4B,CAAC,aAAa,CAAC,UAAU,EAAE,aAAa,CAAC,QAAQ,CAAC,CAAA;IAE3F,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC;QAC9B,MAAM,EAAE,EAAE,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE;KAC/D,CAAC,CAAA;IAEF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,CAAA;AACpE,CAAC,CAAA;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,cAAc,CAAC;IAC3C,SAAS,EAAE,UAAU;IACrB,IAAI,EAAE,UAAU;IAChB,MAAM,EAAE,MAAM;IACd,IAAI,EAAE,mBAAmB;IACzB,MAAM,EAAE,iBAAiB;IACzB,YAAY,EAAE,gBAAgB;IAC9B,QAAQ,EAAE,EAAoB;IAC9B,eAAe,EAAE;QACf,MAAM,EAAE;YACN,IAAI,EAAE,aAAa;YACnB,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,EAAE;YACV,SAAS,EAAE,QAAQ;YACnB,SAAS,EAAE,YAAY;YACvB,SAAS,EAAE,YAAY;SACxB;KACF;IACD,MAAM,EAAE,CAAC,QAAQ,CAAU;IAC3B,OAAO,EAAE,qBAAqB;CAC/B,CAAC,CAAA"}

package/dist/api/branch.d.ts

@@ -0,0 +1,188 @@
+import { z } from 'zod';
+import type { BranchContext, BranchMetadata } from '../types';
+import type { ApiContext, ApiRequest, ApiResponse } from './types';
+/** Response type for single branch operations (create, update, status) */
+export type BranchResponse = ApiResponse<{
+    branch: BranchMetadata;
+}>;
+/** Response type for listing branches */
+export type BranchListResponse = ApiResponse<{
+    branches: BranchMetadata[];
+}>;
+/** Response type for branch deletion */
+export type BranchDeleteResponse = ApiResponse<{
+    deleted: boolean;
+}>;
+declare const branchParamSchema: z.ZodObject<{
+    branch: z.ZodType<import("../paths").BranchName, z.ZodTypeDef, import("../paths").BranchName>;
+}, "strip", z.ZodTypeAny, {
+    branch: string & {
+        readonly __brand: "BranchName";
+    };
+}, {
+    branch: string & {
+        readonly __brand: "BranchName";
+    };
+}>;
+declare const createBranchBodySchema: z.ZodObject<{
+    branch: z.ZodType<import("../paths").BranchName, z.ZodTypeDef, import("../paths").BranchName>;
+    title: z.ZodOptional<z.ZodString>;
+    description: z.ZodOptional<z.ZodString>;
+    access: z.ZodOptional<z.ZodObject<{
+        allowedUsers: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        allowedGroups: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    }, "strip", z.ZodTypeAny, {
+        allowedUsers?: string[] | undefined;
+        allowedGroups?: string[] | undefined;
+    }, {
+        allowedUsers?: string[] | undefined;
+        allowedGroups?: string[] | undefined;
+    }>>;
+}, "strip", z.ZodTypeAny, {
+    branch: string & {
+        readonly __brand: "BranchName";
+    };
+    description?: string | undefined;
+    title?: string | undefined;
+    access?: {
+        allowedUsers?: string[] | undefined;
+        allowedGroups?: string[] | undefined;
+    } | undefined;
+}, {
+    branch: string & {
+        readonly __brand: "BranchName";
+    };
+    description?: string | undefined;
+    title?: string | undefined;
+    access?: {
+        allowedUsers?: string[] | undefined;
+        allowedGroups?: string[] | undefined;
+    } | undefined;
+}>;
+declare const updateBranchAccessBodySchema: z.ZodObject<{
+    allowedUsers: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    allowedGroups: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+}, "strip", z.ZodTypeAny, {
+    allowedUsers?: string[] | undefined;
+    allowedGroups?: string[] | undefined;
+}, {
+    allowedUsers?: string[] | undefined;
+    allowedGroups?: string[] | undefined;
+}>;
+import type { PathPermission } from '../config';
+import type { CanopyUser } from '../user';
+/**
+ * Check if a user can create branches.
+ * Returns true if:
+ * - User is Admin or Reviewer (privileged)
+ * - User has edit access to at least one path via pathPermissions rules
+ * - No path permissions are defined (open access)
+ */
+export declare const canCreateBranch: (user: CanopyUser, pathPermissions: PathPermission[]) => {
+    allowed: boolean;
+    reason: string;
+};
+export interface CreateBranchBody {
+    branch: string;
+    title?: string;
+    description?: string;
+    access?: BranchMetadata['access'];
+}
+export declare const createBranchHandler: (ctx: ApiContext, req: ApiRequest, body: z.infer<typeof createBranchBodySchema>) => Promise<BranchResponse>;
+export declare const listBranchesHandler: (ctx: ApiContext, req: ApiRequest) => Promise<BranchListResponse>;
+/**
+ * Check if a user can delete a specific branch.
+ * Returns true if user is Admin or the branch creator.
+ */
+export declare const canDeleteBranch: (user: CanopyUser, branchContext: BranchContext) => {
+    allowed: boolean;
+    reason: string;
+};
+export declare const deleteBranchHandler: (ctx: ApiContext, req: ApiRequest, params: z.infer<typeof branchParamSchema>) => Promise<BranchDeleteResponse>;
+export interface UpdateBranchAccessBody {
+    allowedUsers?: string[];
+    allowedGroups?: string[];
+}
+/**
+ * Check if a user can modify branch access.
+ * Returns true if user is Admin or the branch creator.
+ */
+export declare const canModifyBranchAccess: (user: CanopyUser, branchContext: BranchContext) => {
+    allowed: boolean;
+    reason: string;
+};
+export declare const updateBranchAccessHandler: (ctx: ApiContext, req: ApiRequest, params: z.infer<typeof branchParamSchema>, body: z.infer<typeof updateBranchAccessBodySchema>) => Promise<BranchResponse>;
+/**
+ * Exported routes for router registration
+ */
+export declare const BRANCH_ROUTES: {
+    readonly list: import("./route-builder").RouteDefinition<undefined, undefined, BranchListResponse>;
+    readonly create: import("./route-builder").RouteDefinition<undefined, z.ZodObject<{
+        branch: z.ZodType<import("../paths").BranchName, z.ZodTypeDef, import("../paths").BranchName>;
+        title: z.ZodOptional<z.ZodString>;
+        description: z.ZodOptional<z.ZodString>;
+        access: z.ZodOptional<z.ZodObject<{
+            allowedUsers: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+            allowedGroups: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        }, "strip", z.ZodTypeAny, {
+            allowedUsers?: string[] | undefined;
+            allowedGroups?: string[] | undefined;
+        }, {
+            allowedUsers?: string[] | undefined;
+            allowedGroups?: string[] | undefined;
+        }>>;
+    }, "strip", z.ZodTypeAny, {
+        branch: string & {
+            readonly __brand: "BranchName";
+        };
+        description?: string | undefined;
+        title?: string | undefined;
+        access?: {
+            allowedUsers?: string[] | undefined;
+            allowedGroups?: string[] | undefined;
+        } | undefined;
+    }, {
+        branch: string & {
+            readonly __brand: "BranchName";
+        };
+        description?: string | undefined;
+        title?: string | undefined;
+        access?: {
+            allowedUsers?: string[] | undefined;
+            allowedGroups?: string[] | undefined;
+        } | undefined;
+    }>, BranchResponse>;
+    readonly delete: import("./route-builder").RouteDefinition<z.ZodObject<{
+        branch: z.ZodType<import("../paths").BranchName, z.ZodTypeDef, import("../paths").BranchName>;
+    }, "strip", z.ZodTypeAny, {
+        branch: string & {
+            readonly __brand: "BranchName";
+        };
+    }, {
+        branch: string & {
+            readonly __brand: "BranchName";
+        };
+    }>, undefined, BranchDeleteResponse>;
+    readonly updateAccess: import("./route-builder").RouteDefinition<z.ZodObject<{
+        branch: z.ZodType<import("../paths").BranchName, z.ZodTypeDef, import("../paths").BranchName>;
+    }, "strip", z.ZodTypeAny, {
+        branch: string & {
+            readonly __brand: "BranchName";
+        };
+    }, {
+        branch: string & {
+            readonly __brand: "BranchName";
+        };
+    }>, z.ZodObject<{
+        allowedUsers: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        allowedGroups: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    }, "strip", z.ZodTypeAny, {
+        allowedUsers?: string[] | undefined;
+        allowedGroups?: string[] | undefined;
+    }, {
+        allowedUsers?: string[] | undefined;
+        allowedGroups?: string[] | undefined;
+    }>, BranchResponse>;
+};
+export {};
+//# sourceMappingURL=branch.d.ts.map

package/dist/api/branch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"branch.d.ts","sourceRoot":"","sources":["../../src/api/branch.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,OAAO,KAAK,EAAuB,aAAa,EAAE,cAAc,EAAE,MAAM,UAAU,CAAA;AAGlF,OAAO,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,SAAS,CAAA;AASlE,0EAA0E;AAC1E,MAAM,MAAM,cAAc,GAAG,WAAW,CAAC;IAAE,MAAM,EAAE,cAAc,CAAA;CAAE,CAAC,CAAA;AAEpE,yCAAyC;AACzC,MAAM,MAAM,kBAAkB,GAAG,WAAW,CAAC;IAAE,QAAQ,EAAE,cAAc,EAAE,CAAA;CAAE,CAAC,CAAA;AAE5E,wCAAwC;AACxC,MAAM,MAAM,oBAAoB,GAAG,WAAW,CAAC;IAAE,OAAO,EAAE,OAAO,CAAA;CAAE,CAAC,CAAA;AAMpE,QAAA,MAAM,iBAAiB;;;;;;;;;;EAErB,CAAA;AAEF,QAAA,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAU1B,CAAA;AAEF,QAAA,MAAM,4BAA4B;;;;;;;;;EAGhC,CAAA;AAGF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AAC/C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AAGzC;;;;;;GAMG;AACH,eAAO,MAAM,eAAe,GAC1B,MAAM,UAAU,EAChB,iBAAiB,cAAc,EAAE,KAChC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAkCpC,CAAA;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,MAAM,CAAC,EAAE,cAAc,CAAC,QAAQ,CAAC,CAAA;CAClC;AAED,eAAO,MAAM,mBAAmB,GAC9B,KAAK,UAAU,EACf,KAAK,UAAU,EACf,MAAM,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,KAC3C,OAAO,CAAC,cAAc,CA0DxB,CAAA;AAED,eAAO,MAAM,mBAAmB,GAC9B,KAAK,UAAU,EACf,KAAK,UAAU,KACd,OAAO,CAAC,kBAAkB,CA+C5B,CAAA;AAED;;;GAGG;AACH,eAAO,MAAM,eAAe,GAC1B,MAAM,UAAU,EAChB,eAAe,aAAa,KAC3B;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAYpC,CAAA;AAED,eAAO,MAAM,mBAAmB,GAC9B,KAAK,UAAU,EACf,KAAK,UAAU,EACf,QAAQ,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,KACxC,OAAO,CAAC,oBAAoB,CA0E9B,CAAA;AAED,MAAM,WAAW,sBAAsB;IACrC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAA;IACvB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;CACzB;AAED;;;GAGG;AACH,eAAO,MAAM,qBAAqB,GAChC,MAAM,UAAU,EAChB,eAAe,aAAa,KAC3B;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAYpC,CAAA;AAED,eAAO,MAAM,yBAAyB,GACpC,KAAK,UAAU,EACf,KAAK,UAAU,EACf,QAAQ,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,EACzC,MAAM,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,KACjD,OAAO,CAAC,cAAc,CAqCxB,CAAA;AA0FD;;GAEG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAKhB,CAAA"}

package/dist/api/branch.js

@@ -0,0 +1,381 @@
+import fs from 'node:fs/promises';
+import path from 'node:path';
+import { z } from 'zod';
+import { BranchWorkspaceManager } from '../branch-workspace';
+import { getBranchMetadataFileManager } from '../branch-metadata';
+import { defineEndpoint } from './route-builder';
+import { createDebugLogger } from '../utils/debug';
+import { clientOperatingStrategy } from '../operating-mode';
+import { isNotFoundError, getErrorMessage } from '../utils/error';
+import { branchNameSchema } from './validators';
+const log = createDebugLogger({ prefix: 'BranchAPI' });
+// ============================================================================
+// Zod Schemas for Validation
+// ============================================================================
+const branchParamSchema = z.object({
+    branch: branchNameSchema,
+});
+const createBranchBodySchema = z.object({
+    branch: branchNameSchema,
+    title: z.string().optional(),
+    description: z.string().optional(),
+    access: z
+        .object({
+        allowedUsers: z.array(z.string()).optional(),
+        allowedGroups: z.array(z.string()).optional(),
+    })
+        .optional(),
+});
+const updateBranchAccessBodySchema = z.object({
+    allowedUsers: z.array(z.string()).optional(),
+    allowedGroups: z.array(z.string()).optional(),
+});
+import { isPrivileged, isAdmin, loadPathPermissions } from '../authorization';
+import { operatingStrategy } from '../operating-mode';
+/**
+ * Check if a user can create branches.
+ * Returns true if:
+ * - User is Admin or Reviewer (privileged)
+ * - User has edit access to at least one path via pathPermissions rules
+ * - No path permissions are defined (open access)
+ */
+export const canCreateBranch = (user, pathPermissions) => {
+    // Admins and Reviewers can always create branches
+    if (isPrivileged(user.groups)) {
+        return { allowed: true, reason: 'privileged_user' };
+    }
+    // If no path permissions defined, anyone can create branches
+    if (pathPermissions.length === 0) {
+        return { allowed: true, reason: 'no_restrictions' };
+    }
+    // Check if user has edit access to at least one path rule
+    for (const rule of pathPermissions) {
+        const editTarget = rule.edit;
+        if (!editTarget)
+            continue;
+        // Check if rule has no user/group constraints (open to all)
+        const hasUserConstraint = !!editTarget.allowedUsers?.length;
+        const hasGroupConstraint = !!editTarget.allowedGroups?.length;
+        if (!hasUserConstraint && !hasGroupConstraint) {
+            return { allowed: true, reason: 'open_path_rule' };
+        }
+        // Check if user matches the rule
+        const matchesUser = hasUserConstraint && editTarget.allowedUsers?.includes(user.userId);
+        const matchesGroup = hasGroupConstraint && user.groups?.some((gid) => editTarget.allowedGroups?.includes(gid));
+        if (matchesUser || matchesGroup) {
+            return { allowed: true, reason: 'path_access' };
+        }
+    }
+    return { allowed: false, reason: 'no_path_access' };
+};
+export const createBranchHandler = async (ctx, req, body) => {
+    return log.timed('api', 'createBranch', async () => {
+        const branchName = body.branch;
+        log.debug('api', 'Create branch request', {
+            branchName,
+            userId: req.user.userId,
+        });
+        // Prevent git branch name collision with settings branch
+        // Settings live in separate directory but share same git remote
+        const strategy = operatingStrategy(ctx.services.config.mode);
+        if (strategy.usesSeparateSettingsBranch()) {
+            const settingsBranchName = strategy.getSettingsBranchName(ctx.services.config);
+            if (branchName === settingsBranchName) {
+                return {
+                    ok: false,
+                    status: 400,
+                    error: 'Cannot create content branch with settings branch name (git branch name collision)',
+                };
+            }
+        }
+        // Load path permissions from the main branch's JSON file
+        const mainBranch = ctx.services.config.defaultBaseBranch ?? 'main';
+        const mainBranchContext = await ctx.getBranchContext(mainBranch);
+        let pathPermissions = [];
+        if (mainBranchContext) {
+            const operatingMode = ctx.services.config.mode;
+            pathPermissions = await loadPathPermissions(mainBranchContext.branchRoot, operatingMode);
+        }
+        // Check if user can create branches
+        const canCreate = canCreateBranch(req.user, pathPermissions);
+        if (!canCreate.allowed) {
+            log.debug('api', 'Permission denied', { reason: canCreate.reason });
+            return {
+                ok: false,
+                status: 403,
+                error: 'You do not have permission to create branches',
+            };
+        }
+        const manager = new BranchWorkspaceManager(ctx.services.config);
+        const operatingMode = ctx.services.config.mode;
+        const context = await manager.openOrCreateBranch({
+            branchName,
+            mode: operatingMode,
+            createdBy: req.user.userId,
+            title: body.title,
+            description: body.description,
+            access: body.access,
+        });
+        log.debug('api', 'Branch created', { branchName: context.branch.name });
+        return { ok: true, status: 200, data: { branch: context.branch } };
+    });
+};
+export const listBranchesHandler = async (ctx, req) => {
+    if (!ctx.services.registry) {
+        return {
+            ok: false,
+            status: 400,
+            error: 'Branch operations not available in dev mode',
+        };
+    }
+    const allBranches = await ctx.services.registry.list();
+    // Admins and Reviewers see all branches
+    if (isPrivileged(req.user.groups)) {
+        return {
+            ok: true,
+            status: 200,
+            data: { branches: allBranches.map((c) => c.branch) },
+        };
+    }
+    // Regular users only see branches they created or have explicit access to
+    const visibleBranches = allBranches.filter((context) => {
+        const branch = context.branch;
+        // User created the branch
+        if (branch.createdBy === req.user.userId) {
+            return true;
+        }
+        // User is in allowedUsers
+        if (branch.access?.allowedUsers?.includes(req.user.userId)) {
+            return true;
+        }
+        // User's group is in allowedGroups
+        if (branch.access?.allowedGroups?.some((groupId) => req.user.groups?.includes(groupId))) {
+            return true;
+        }
+        return false;
+    });
+    return {
+        ok: true,
+        status: 200,
+        data: { branches: visibleBranches.map((c) => c.branch) },
+    };
+};
+/**
+ * Check if a user can delete a specific branch.
+ * Returns true if user is Admin or the branch creator.
+ */
+export const canDeleteBranch = (user, branchContext) => {
+    // Admins can delete any branch
+    if (isAdmin(user.groups)) {
+        return { allowed: true, reason: 'admin' };
+    }
+    // Branch creator can delete their own branch
+    if (branchContext.branch.createdBy === user.userId) {
+        return { allowed: true, reason: 'creator' };
+    }
+    return { allowed: false, reason: 'not_authorized' };
+};
+export const deleteBranchHandler = async (ctx, req, params) => {
+    const branchName = params.branch;
+    // Disallow delete in modes that don't support branching (branch = developer's git checkout)
+    const operatingMode = ctx.services.config.mode;
+    if (!clientOperatingStrategy(operatingMode).supportsBranching()) {
+        return {
+            ok: false,
+            status: 400,
+            error: 'Cannot delete branches in this operating mode',
+        };
+    }
+    // Get branch context
+    const branchContext = await ctx.getBranchContext(branchName);
+    if (!branchContext) {
+        return { ok: false, status: 404, error: 'Branch not found' };
+    }
+    // Check permission
+    const canDelete = canDeleteBranch(req.user, branchContext);
+    if (!canDelete.allowed) {
+        return {
+            ok: false,
+            status: 403,
+            error: 'You do not have permission to delete this branch',
+        };
+    }
+    // Block deletion if branch has open PR (submitted status)
+    if (branchContext.branch.status === 'submitted') {
+        return {
+            ok: false,
+            status: 400,
+            error: 'Cannot delete branch with open pull request',
+        };
+    }
+    // Delete branch metadata file so it disappears from registry scans
+    const metadataFile = path.join(branchContext.branchRoot, '.canopy-meta', 'branch.json');
+    try {
+        await fs.unlink(metadataFile);
+    }
+    catch (err) {
+        if (!isNotFoundError(err)) {
+            console.error(`CanopyCMS: Failed to delete branch metadata for ${branchName}:`, getErrorMessage(err));
+        }
+    }
+    // In multi-branch modes, also delete the entire branch directory
+    if (branchContext.branchRoot !== branchContext.baseRoot) {
+        try {
+            await fs.rm(branchContext.branchRoot, { recursive: true, force: true });
+        }
+        catch (err) {
+            console.error(`CanopyCMS: Failed to delete branch directory for ${branchName}:`, getErrorMessage(err));
+        }
+    }
+    // Invalidate registry cache so next list() will regenerate without this branch
+    if (!ctx.services.registry) {
+        return {
+            ok: false,
+            status: 400,
+            error: 'Branch operations not available in dev mode',
+        };
+    }
+    await ctx.services.registry.invalidate();
+    return { ok: true, status: 200, data: { deleted: true } };
+};
+/**
+ * Check if a user can modify branch access.
+ * Returns true if user is Admin or the branch creator.
+ */
+export const canModifyBranchAccess = (user, branchContext) => {
+    // Admins can modify any branch
+    if (isAdmin(user.groups)) {
+        return { allowed: true, reason: 'admin' };
+    }
+    // Branch creator can modify their own branch
+    if (branchContext.branch.createdBy === user.userId) {
+        return { allowed: true, reason: 'creator' };
+    }
+    return { allowed: false, reason: 'not_authorized' };
+};
+export const updateBranchAccessHandler = async (ctx, req, params, body) => {
+    const branchName = params.branch;
+    // Get branch context
+    const branchContext = await ctx.getBranchContext(branchName);
+    if (!branchContext) {
+        return { ok: false, status: 404, error: 'Branch not found' };
+    }
+    // Check permission
+    const canModify = canModifyBranchAccess(req.user, branchContext);
+    if (!canModify.allowed) {
+        return {
+            ok: false,
+            status: 403,
+            error: 'You do not have permission to modify this branch',
+        };
+    }
+    // Build new access control
+    const newAccess = {
+        ...branchContext.branch.access,
+    };
+    if (body.allowedUsers !== undefined) {
+        newAccess.allowedUsers = body.allowedUsers;
+    }
+    if (body.allowedGroups !== undefined) {
+        newAccess.allowedGroups = body.allowedGroups;
+    }
+    // Update metadata (automatically invalidates registry cache)
+    const metadata = getBranchMetadataFileManager(branchContext.branchRoot, branchContext.baseRoot);
+    const updated = await metadata.save({
+        branch: { access: newAccess },
+    });
+    return { ok: true, status: 200, data: { branch: updated.branch } };
+};
+// ============================================================================
+// Route Definitions with defineEndpoint
+// ============================================================================
+/**
+ * List all branches visible to current user
+ * GET /branches
+ */
+const listBranches = defineEndpoint({
+    namespace: 'branches',
+    name: 'list',
+    method: 'GET',
+    path: '/branches',
+    responseType: 'BranchListResponse',
+    response: {},
+    defaultMockData: { branches: [] },
+    handler: listBranchesHandler,
+});
+/**
+ * Create a new branch
+ * POST /branches
+ */
+const createBranch = defineEndpoint({
+    namespace: 'branches',
+    name: 'create',
+    method: 'POST',
+    path: '/branches',
+    body: createBranchBodySchema,
+    bodyType: 'CreateBranchBody',
+    responseType: 'BranchResponse',
+    response: {},
+    defaultMockData: {
+        branch: {
+            name: 'test-branch',
+            status: 'editing',
+            access: {},
+            createdBy: 'user-1',
+            createdAt: '2024-01-01',
+            updatedAt: '2024-01-01',
+        },
+    },
+    handler: createBranchHandler,
+});
+/**
+ * Delete a branch
+ * DELETE /:branch
+ */
+const deleteBranch = defineEndpoint({
+    namespace: 'branches',
+    name: 'delete',
+    method: 'DELETE',
+    path: '/:branch',
+    params: branchParamSchema,
+    responseType: 'BranchDeleteResponse',
+    response: {},
+    defaultMockData: { deleted: true },
+    handler: deleteBranchHandler,
+});
+/**
+ * Update branch access control
+ * PATCH /:branch/access
+ */
+const updateBranchAccess = defineEndpoint({
+    namespace: 'branches',
+    name: 'updateAccess',
+    method: 'PATCH',
+    path: '/:branch/access',
+    params: branchParamSchema,
+    body: updateBranchAccessBodySchema,
+    bodyType: 'UpdateBranchAccessBody',
+    responseType: 'BranchResponse',
+    response: {},
+    defaultMockData: {
+        branch: {
+            name: 'test-branch',
+            status: 'editing',
+            access: {},
+            createdBy: 'user-1',
+            createdAt: '2024-01-01',
+            updatedAt: '2024-01-01',
+        },
+    },
+    handler: updateBranchAccessHandler,
+});
+/**
+ * Exported routes for router registration
+ */
+export const BRANCH_ROUTES = {
+    list: listBranches,
+    create: createBranch,
+    delete: deleteBranch,
+    updateAccess: updateBranchAccess,
+};
+//# sourceMappingURL=branch.js.map

package/dist/api/branch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"branch.js","sourceRoot":"","sources":["../../src/api/branch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,kBAAkB,CAAA;AACjC,OAAO,IAAI,MAAM,WAAW,CAAA;AAC5B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAGvB,OAAO,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAA;AAC5D,OAAO,EAAE,4BAA4B,EAAE,MAAM,oBAAoB,CAAA;AAEjE,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAA;AAChD,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AAClD,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAA;AAC3D,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAA;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AAE/C,MAAM,GAAG,GAAG,iBAAiB,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAA;AAWtD,+EAA+E;AAC/E,6BAA6B;AAC7B,+EAA+E;AAE/E,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,MAAM,EAAE,gBAAgB;CACzB,CAAC,CAAA;AAEF,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,MAAM,EAAE,gBAAgB;IACxB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,MAAM,EAAE,CAAC;SACN,MAAM,CAAC;QACN,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;QAC5C,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;KAC9C,CAAC;SACD,QAAQ,EAAE;CACd,CAAC,CAAA;AAEF,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC5C,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC9C,CAAC,CAAA;AAEF,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAA;AAG7E,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAA;AAErD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAC7B,IAAgB,EAChB,eAAiC,EACK,EAAE;IACxC,kDAAkD;IAClD,IAAI,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAA;IACrD,CAAC;IAED,6DAA6D;IAC7D,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAA;IACrD,CAAC;IAED,0DAA0D;IAC1D,KAAK,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC;QACnC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAA;QAC5B,IAAI,CAAC,UAAU;YAAE,SAAQ;QAEzB,4DAA4D;QAC5D,MAAM,iBAAiB,GAAG,CAAC,CAAC,UAAU,CAAC,YAAY,EAAE,MAAM,CAAA;QAC3D,MAAM,kBAAkB,GAAG,CAAC,CAAC,UAAU,CAAC,aAAa,EAAE,MAAM,CAAA;QAC7D,IAAI,CAAC,iBAAiB,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC9C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAA;QACpD,CAAC;QAED,iCAAiC;QACjC,MAAM,WAAW,GAAG,iBAAiB,IAAI,UAAU,CAAC,YAAY,EAAE,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACvF,MAAM,YAAY,GAChB,kBAAkB,IAAI,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,aAAa,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAA;QAE3F,IAAI,WAAW,IAAI,YAAY,EAAE,CAAC;YAChC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,CAAA;QACjD,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAA;AACrD,CAAC,CAAA;AASD,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAAK,EACtC,GAAe,EACf,GAAe,EACf,IAA4C,EACnB,EAAE;IAC3B,OAAO,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,cAAc,EAAE,KAAK,IAAI,EAAE;QACjD,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAA;QAC9B,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,uBAAuB,EAAE;YACxC,UAAU;YACV,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM;SACxB,CAAC,CAAA;QAEF,yDAAyD;QACzD,gEAAgE;QAChE,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QAC5D,IAAI,QAAQ,CAAC,0BAA0B,EAAE,EAAE,CAAC;YAC1C,MAAM,kBAAkB,GAAG,QAAQ,CAAC,qBAAqB,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;YAC9E,IAAI,UAAU,KAAK,kBAAkB,EAAE,CAAC;gBACtC,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,MAAM,EAAE,GAAG;oBACX,KAAK,EACH,oFAAoF;iBACvF,CAAA;YACH,CAAC;QACH,CAAC;QAED,yDAAyD;QACzD,MAAM,UAAU,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,iBAAiB,IAAI,MAAM,CAAA;QAClE,MAAM,iBAAiB,GAAG,MAAM,GAAG,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAA;QAEhE,IAAI,eAAe,GAAqB,EAAE,CAAA;QAC1C,IAAI,iBAAiB,EAAE,CAAC;YACtB,MAAM,aAAa,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAA;YAC9C,eAAe,GAAG,MAAM,mBAAmB,CAAC,iBAAiB,CAAC,UAAU,EAAE,aAAa,CAAC,CAAA;QAC1F,CAAC;QAED,oCAAoC;QACpC,MAAM,SAAS,GAAG,eAAe,CAAC,GAAG,CAAC,IAAI,EAAE,eAAe,CAAC,CAAA;QAC5D,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;YACvB,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,mBAAmB,EAAE,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC,CAAA;YACnE,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,GAAG;gBACX,KAAK,EAAE,+CAA+C;aACvD,CAAA;QACH,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,sBAAsB,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;QAC/D,MAAM,aAAa,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAA;QAC9C,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,kBAAkB,CAAC;YAC/C,UAAU;YACV,IAAI,EAAE,aAAa;YACnB,SAAS,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM;YAC1B,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC,CAAA;QAEF,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,gBAAgB,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAA;QACvE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,CAAA;IACpE,CAAC,CAAC,CAAA;AACJ,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAAK,EACtC,GAAe,EACf,GAAe,EACc,EAAE;IAC/B,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;QAC3B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,GAAG;YACX,KAAK,EAAE,6CAA6C;SACrD,CAAA;IACH,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAA;IAEtD,wCAAwC;IACxC,IAAI,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAClC,OAAO;YACL,EAAE,EAAE,IAAI;YACR,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,EAAE,QAAQ,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE;SACrD,CAAA;IACH,CAAC;IAED,0EAA0E;IAC1E,MAAM,eAAe,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE;QACrD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAA;QAC7B,0BAA0B;QAC1B,IAAI,MAAM,CAAC,SAAS,KAAK,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACzC,OAAO,IAAI,CAAA;QACb,CAAC;QACD,0BAA0B;QAC1B,IAAI,MAAM,CAAC,MAAM,EAAE,YAAY,EAAE,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3D,OAAO,IAAI,CAAA;QACb,CAAC;QACD,mCAAmC;QACnC,IACE,MAAM,CAAC,MAAM,EAAE,aAAa,EAAE,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAC5C,GAAG,CAAC,IAAI,CAAC,MAA4B,EAAE,QAAQ,CAAC,OAAO,CAAC,CAC1D,EACD,CAAC;YACD,OAAO,IAAI,CAAA;QACb,CAAC;QACD,OAAO,KAAK,CAAA;IACd,CAAC,CAAC,CAAA;IAEF,OAAO;QACL,EAAE,EAAE,IAAI;QACR,MAAM,EAAE,GAAG;QACX,IAAI,EAAE,EAAE,QAAQ,EAAE,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE;KACzD,CAAA;AACH,CAAC,CAAA;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAC7B,IAAgB,EAChB,aAA4B,EACU,EAAE;IACxC,+BAA+B;IAC/B,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAA;IAC3C,CAAC;IAED,6CAA6C;IAC7C,IAAI,aAAa,CAAC,MAAM,CAAC,SAAS,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;QACnD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAA;IAC7C,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAA;AACrD,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAAK,EACtC,GAAe,EACf,GAAe,EACf,MAAyC,EACV,EAAE;IACjC,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAA;IAEhC,4FAA4F;IAC5F,MAAM,aAAa,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAA;IAC9C,IAAI,CAAC,uBAAuB,CAAC,aAAa,CAAC,CAAC,iBAAiB,EAAE,EAAE,CAAC;QAChE,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,GAAG;YACX,KAAK,EAAE,+CAA+C;SACvD,CAAA;IACH,CAAC;IAED,qBAAqB;IACrB,MAAM,aAAa,GAAG,MAAM,GAAG,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAA;IAC5D,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAA;IAC9D,CAAC;IAED,mBAAmB;IACnB,MAAM,SAAS,GAAG,eAAe,CAAC,GAAG,CAAC,IAAI,EAAE,aAAa,CAAC,CAAA;IAC1D,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;QACvB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,GAAG;YACX,KAAK,EAAE,kDAAkD;SAC1D,CAAA;IACH,CAAC;IAED,0DAA0D;IAC1D,IAAI,aAAa,CAAC,MAAM,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QAChD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,GAAG;YACX,KAAK,EAAE,6CAA6C;SACrD,CAAA;IACH,CAAC;IAED,mEAAmE;IACnE,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE,cAAc,EAAE,aAAa,CAAC,CAAA;IACvF,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,CAAA;IAC/B,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,OAAO,CAAC,KAAK,CACX,mDAAmD,UAAU,GAAG,EAChE,eAAe,CAAC,GAAG,CAAC,CACrB,CAAA;QACH,CAAC;IACH,CAAC;IAED,iEAAiE;IACjE,IAAI,aAAa,CAAC,UAAU,KAAK,aAAa,CAAC,QAAQ,EAAE,CAAC;QACxD,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QACzE,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,OAAO,CAAC,KAAK,CACX,oDAAoD,UAAU,GAAG,EACjE,eAAe,CAAC,GAAG,CAAC,CACrB,CAAA;QACH,CAAC;IACH,CAAC;IAED,+EAA+E;IAC/E,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;QAC3B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,GAAG;YACX,KAAK,EAAE,6CAA6C;SACrD,CAAA;IACH,CAAC;IACD,MAAM,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAA;IAExC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAA;AAC3D,CAAC,CAAA;AAOD;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CACnC,IAAgB,EAChB,aAA4B,EACU,EAAE;IACxC,+BAA+B;IAC/B,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAA;IAC3C,CAAC;IAED,6CAA6C;IAC7C,IAAI,aAAa,CAAC,MAAM,CAAC,SAAS,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;QACnD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAA;IAC7C,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAA;AACrD,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,yBAAyB,GAAG,KAAK,EAC5C,GAAe,EACf,GAAe,EACf,MAAyC,EACzC,IAAkD,EACzB,EAAE;IAC3B,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAA;IAEhC,qBAAqB;IACrB,MAAM,aAAa,GAAG,MAAM,GAAG,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAA;IAC5D,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAA;IAC9D,CAAC;IAED,mBAAmB;IACnB,MAAM,SAAS,GAAG,qBAAqB,CAAC,GAAG,CAAC,IAAI,EAAE,aAAa,CAAC,CAAA;IAChE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;QACvB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,GAAG;YACX,KAAK,EAAE,kDAAkD;SAC1D,CAAA;IACH,CAAC;IAED,2BAA2B;IAC3B,MAAM,SAAS,GAAwB;QACrC,GAAG,aAAa,CAAC,MAAM,CAAC,MAAM;KAC/B,CAAA;IACD,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACpC,SAAS,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAA;IAC5C,CAAC;IACD,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QACrC,SAAS,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,CAAA;IAC9C,CAAC;IAED,6DAA6D;IAC7D,MAAM,QAAQ,GAAG,4BAA4B,CAAC,aAAa,CAAC,UAAU,EAAE,aAAa,CAAC,QAAQ,CAAC,CAAA;IAC/F,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC;QAClC,MAAM,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE;KAC9B,CAAC,CAAA;IAEF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,CAAA;AACpE,CAAC,CAAA;AAED,+EAA+E;AAC/E,wCAAwC;AACxC,+EAA+E;AAE/E;;;GAGG;AACH,MAAM,YAAY,GAAG,cAAc,CAAC;IAClC,SAAS,EAAE,UAAU;IACrB,IAAI,EAAE,MAAM;IACZ,MAAM,EAAE,KAAK;IACb,IAAI,EAAE,WAAW;IACjB,YAAY,EAAE,oBAAoB;IAClC,QAAQ,EAAE,EAAwB;IAClC,eAAe,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE;IACjC,OAAO,EAAE,mBAAmB;CAC7B,CAAC,CAAA;AAEF;;;GAGG;AACH,MAAM,YAAY,GAAG,cAAc,CAAC;IAClC,SAAS,EAAE,UAAU;IACrB,IAAI,EAAE,QAAQ;IACd,MAAM,EAAE,MAAM;IACd,IAAI,EAAE,WAAW;IACjB,IAAI,EAAE,sBAAsB;IAC5B,QAAQ,EAAE,kBAAkB;IAC5B,YAAY,EAAE,gBAAgB;IAC9B,QAAQ,EAAE,EAAoB;IAC9B,eAAe,EAAE;QACf,MAAM,EAAE;YACN,IAAI,EAAE,aAAa;YACnB,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,EAAE;YACV,SAAS,EAAE,QAAQ;YACnB,SAAS,EAAE,YAAY;YACvB,SAAS,EAAE,YAAY;SACxB;KACF;IACD,OAAO,EAAE,mBAAmB;CAC7B,CAAC,CAAA;AAEF;;;GAGG;AACH,MAAM,YAAY,GAAG,cAAc,CAAC;IAClC,SAAS,EAAE,UAAU;IACrB,IAAI,EAAE,QAAQ;IACd,MAAM,EAAE,QAAQ;IAChB,IAAI,EAAE,UAAU;IAChB,MAAM,EAAE,iBAAiB;IACzB,YAAY,EAAE,sBAAsB;IACpC,QAAQ,EAAE,EAA0B;IACpC,eAAe,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;IAClC,OAAO,EAAE,mBAAmB;CAC7B,CAAC,CAAA;AAEF;;;GAGG;AACH,MAAM,kBAAkB,GAAG,cAAc,CAAC;IACxC,SAAS,EAAE,UAAU;IACrB,IAAI,EAAE,cAAc;IACpB,MAAM,EAAE,OAAO;IACf,IAAI,EAAE,iBAAiB;IACvB,MAAM,EAAE,iBAAiB;IACzB,IAAI,EAAE,4BAA4B;IAClC,QAAQ,EAAE,wBAAwB;IAClC,YAAY,EAAE,gBAAgB;IAC9B,QAAQ,EAAE,EAAoB;IAC9B,eAAe,EAAE;QACf,MAAM,EAAE;YACN,IAAI,EAAE,aAAa;YACnB,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,EAAE;YACV,SAAS,EAAE,QAAQ;YACnB,SAAS,EAAE,YAAY;YACvB,SAAS,EAAE,YAAY;SACxB;KACF;IACD,OAAO,EAAE,yBAAyB;CACnC,CAAC,CAAA;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,IAAI,EAAE,YAAY;IAClB,MAAM,EAAE,YAAY;IACpB,MAAM,EAAE,YAAY;IACpB,YAAY,EAAE,kBAAkB;CACxB,CAAA"}