expxagents 0.25.1 → 0.25.2

package/dist/server/api/__tests__/orgchart-routes.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"orgchart-routes.test.d.ts","sourceRoot":"","sources":["../../../src/api/__tests__/orgchart-routes.test.ts"],"names":[],"mappings":""}

package/dist/server/api/__tests__/orgchart-routes.test.js

@@ -0,0 +1,161 @@
+import { describe, it, expect, beforeEach, afterEach } from 'vitest';
+import Fastify from 'fastify';
+import cookie from '@fastify/cookie';
+import Database from 'better-sqlite3';
+import fs from 'node:fs';
+import path from 'node:path';
+import os from 'node:os';
+import { orgchartRoutes } from '../orgchart-routes.js';
+import { registerAuthMiddleware } from '../../auth/auth-middleware.js';
+import { authRoutes } from '../../auth/auth-routes.js';
+import { hashPassword } from '../../auth/password.js';
+import { runMigrations } from '../../db/migrations.js';
+const SECRET = 'test-secret-that-is-at-least-32-chars-long!!';
+async function buildApp(db, squadsDir) {
+    const app = Fastify();
+    await app.register(cookie);
+    registerAuthMiddleware(app, SECRET);
+    await app.register(authRoutes, { db, jwtSecret: SECRET });
+    await app.register(orgchartRoutes, { squadsDir });
+    await app.ready();
+    return app;
+}
+async function getAuthCookie(app) {
+    const res = await app.inject({
+        method: 'POST',
+        url: '/api/auth/login',
+        payload: { username: 'admin', password: 'admin123' },
+    });
+    const cookies = res.cookies;
+    const accessToken = cookies.find(c => c.name === 'access_token');
+    return `access_token=${accessToken.value}`;
+}
+describe('orgchart routes', () => {
+    let db;
+    let app;
+    let authCookie;
+    let tmpDir;
+    let squadsDir;
+    beforeEach(async () => {
+        db = new Database(':memory:');
+        runMigrations(db);
+        const hash = await hashPassword('admin123');
+        db.prepare("INSERT INTO users (id, username, password_hash, role, created_at) VALUES (?, ?, ?, ?, ?)").run('admin-id', 'admin', hash, 'admin', new Date().toISOString());
+        tmpDir = path.join(os.tmpdir(), `orgchart-test-${Date.now()}`);
+        squadsDir = path.join(tmpDir, 'squads');
+        fs.mkdirSync(squadsDir, { recursive: true });
+        // Create company memory
+        const memDir = path.join(tmpDir, '_expxagents', '_memory');
+        fs.mkdirSync(memDir, { recursive: true });
+        fs.writeFileSync(path.join(memDir, 'company.md'), '# TestCorp\nA test company');
+    });
+    afterEach(async () => {
+        await app?.close();
+        db?.close();
+        fs.rmSync(tmpDir, { recursive: true, force: true });
+    });
+    it('GET /api/orgchart — returns tree from directory hierarchy', async () => {
+        // Create hierarchy: comercial/vendas/hunter-squad
+        const setorDir = path.join(squadsDir, 'comercial');
+        const grupoDir = path.join(setorDir, 'vendas');
+        const squadDir = path.join(grupoDir, 'hunter-squad');
+        fs.mkdirSync(squadDir, { recursive: true });
+        fs.writeFileSync(path.join(squadDir, 'squad.yaml'), `squad:
+  code: hunter-squad
+  name: Hunter Squad
+  description: Prospecta leads
+  icon: rocket
+  agents:
+    - id: researcher
+      name: Researcher
+      icon: magnifying-glass
+  pipeline:
+    steps:
+      - id: step-01
+        agent: researcher
+        label: Research
+`);
+        app = await buildApp(db, squadsDir);
+        authCookie = await getAuthCookie(app);
+        const res = await app.inject({
+            method: 'GET', url: '/api/orgchart',
+            headers: { cookie: authCookie },
+        });
+        expect(res.statusCode).toBe(200);
+        const body = JSON.parse(res.payload);
+        expect(body.tree.name).toBe('TestCorp');
+        expect(body.tree.type).toBe('company');
+        // Hierarchy: company → setor(comercial) → grupo(vendas) → squad(hunter)
+        const setor = body.tree.children[0];
+        expect(setor.type).toBe('setor');
+        expect(setor.name).toBe('Comercial');
+        const grupo = setor.children[0];
+        expect(grupo.type).toBe('grupo');
+        expect(grupo.name).toBe('Vendas');
+        const squad = grupo.children[0];
+        expect(squad.type).toBe('squad');
+        expect(squad.name).toBe('Hunter Squad');
+    });
+    it('returns squads directly under squadsDir without hierarchy', async () => {
+        const squadDir = path.join(squadsDir, 'alpha-team');
+        fs.mkdirSync(squadDir, { recursive: true });
+        fs.writeFileSync(path.join(squadDir, 'squad.yaml'), `squad:
+  code: alpha-team
+  name: Alpha Team
+  description: Dev squad
+  icon: star
+  agents:
+    - id: dev
+      name: Dev
+      icon: code
+  pipeline:
+    steps:
+      - id: step-01
+        agent: dev
+        label: Build
+`);
+        app = await buildApp(db, squadsDir);
+        authCookie = await getAuthCookie(app);
+        const res = await app.inject({
+            method: 'GET', url: '/api/orgchart',
+            headers: { cookie: authCookie },
+        });
+        const body = JSON.parse(res.payload);
+        // Squad appears directly under company (no hierarchy levels)
+        const squad = body.tree.children[0];
+        expect(squad.type).toBe('squad');
+        expect(squad.name).toBe('Alpha Team');
+        expect(body.squads).toHaveLength(1);
+    });
+    it('works with empty squads directory', async () => {
+        app = await buildApp(db, squadsDir);
+        authCookie = await getAuthCookie(app);
+        const res = await app.inject({
+            method: 'GET', url: '/api/orgchart',
+            headers: { cookie: authCookie },
+        });
+        expect(res.statusCode).toBe(200);
+        const body = JSON.parse(res.payload);
+        expect(body.tree.children).toEqual([]);
+        expect(body.squads).toEqual([]);
+    });
+    it('defaults company name when no company.md', async () => {
+        fs.unlinkSync(path.join(tmpDir, '_expxagents', '_memory', 'company.md'));
+        app = await buildApp(db, squadsDir);
+        authCookie = await getAuthCookie(app);
+        const res = await app.inject({
+            method: 'GET', url: '/api/orgchart',
+            headers: { cookie: authCookie },
+        });
+        const body = JSON.parse(res.payload);
+        expect(body.tree.name).toBe('Company');
+    });
+    it('rejects unauthenticated requests', async () => {
+        app = await buildApp(db, squadsDir);
+        const res = await app.inject({
+            method: 'GET', url: '/api/orgchart',
+        });
+        expect(res.statusCode).toBe(401);
+    });
+});
+//# sourceMappingURL=orgchart-routes.test.js.map

package/dist/server/api/__tests__/orgchart-routes.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"orgchart-routes.test.js","sourceRoot":"","sources":["../../../src/api/__tests__/orgchart-routes.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,MAAM,MAAM,iBAAiB,CAAC;AACrC,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AACtC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AACvE,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAEvD,MAAM,MAAM,GAAG,8CAA8C,CAAC;AAE9D,KAAK,UAAU,QAAQ,CAAC,EAAqB,EAAE,SAAiB;IAC9D,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IACtB,MAAM,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC3B,sBAAsB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACpC,MAAM,GAAG,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;IAC1D,MAAM,GAAG,CAAC,QAAQ,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;IAClD,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;IAClB,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,GAAyC;IACpE,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;QAC3B,MAAM,EAAE,MAAM;QACd,GAAG,EAAE,iBAAiB;QACtB,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE;KACrD,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,GAAG,CAAC,OAA4C,CAAC;IACjE,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC;IACjE,OAAO,gBAAgB,WAAY,CAAC,KAAK,EAAE,CAAC;AAC9C,CAAC;AAED,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,IAAI,EAAqB,CAAC;IAC1B,IAAI,GAAyC,CAAC;IAC9C,IAAI,UAAkB,CAAC;IACvB,IAAI,MAAc,CAAC;IACnB,IAAI,SAAiB,CAAC;IAEtB,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,EAAE,GAAG,IAAI,QAAQ,CAAC,UAAU,CAAC,CAAC;QAC9B,aAAa,CAAC,EAAE,CAAC,CAAC;QAElB,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,UAAU,CAAC,CAAC;QAC5C,EAAE,CAAC,OAAO,CACR,0FAA0F,CAC3F,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QAEpE,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,iBAAiB,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAC/D,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACxC,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAE7C,wBAAwB;QACxB,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC;QAC3D,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,EAAE,4BAA4B,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,MAAM,GAAG,EAAE,KAAK,EAAE,CAAC;QACnB,EAAE,EAAE,KAAK,EAAE,CAAC;QACZ,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,kDAAkD;QAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;QACrD,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5C,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,EAAE;;;;;;;;;;;;;;CAcvD,CAAC,CAAC;QAEC,GAAG,GAAG,MAAM,QAAQ,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;QACpC,UAAU,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;QAEtC,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;YAC3B,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,eAAe;YACnC,OAAO,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE;SAChC,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAErC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACxC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAEvC,wEAAwE;QACxE,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QACpC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACjC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAErC,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACjC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAElC,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACjC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;QACpD,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5C,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,EAAE;;;;;;;;;;;;;;CAcvD,CAAC,CAAC;QAEC,GAAG,GAAG,MAAM,QAAQ,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;QACpC,UAAU,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;QAEtC,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;YAC3B,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,eAAe;YACnC,OAAO,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE;SAChC,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAErC,6DAA6D;QAC7D,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QACpC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACjC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACtC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;QACjD,GAAG,GAAG,MAAM,QAAQ,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;QACpC,UAAU,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;QAEtC,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;YAC3B,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,eAAe;YACnC,OAAO,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE;SAChC,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACvC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;QACxD,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC;QACzE,GAAG,GAAG,MAAM,QAAQ,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;QACpC,UAAU,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;QAEtC,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;YAC3B,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,eAAe;YACnC,OAAO,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE;SAChC,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;QAChD,GAAG,GAAG,MAAM,QAAQ,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;QAEpC,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;YAC3B,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,eAAe;SACpC,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/server/api/__tests__/settings-routes.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=settings-routes.test.d.ts.map

package/dist/server/api/__tests__/settings-routes.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings-routes.test.d.ts","sourceRoot":"","sources":["../../../src/api/__tests__/settings-routes.test.ts"],"names":[],"mappings":""}

package/dist/server/api/__tests__/settings-routes.test.js

@@ -0,0 +1,177 @@
+import { describe, it, expect, beforeEach, afterEach } from 'vitest';
+import Fastify from 'fastify';
+import cookie from '@fastify/cookie';
+import Database from 'better-sqlite3';
+import fs from 'node:fs';
+import path from 'node:path';
+import os from 'node:os';
+import { settingsRoutes, parseEnvFile, maskValue } from '../settings-routes.js';
+import { registerAuthMiddleware } from '../../auth/auth-middleware.js';
+import { authRoutes } from '../../auth/auth-routes.js';
+import { hashPassword } from '../../auth/password.js';
+import { runMigrations } from '../../db/migrations.js';
+const SECRET = 'test-secret-that-is-at-least-32-chars-long!!';
+async function buildApp(db) {
+    const app = Fastify();
+    await app.register(cookie);
+    registerAuthMiddleware(app, SECRET);
+    await app.register(authRoutes, { db, jwtSecret: SECRET });
+    await app.register(settingsRoutes);
+    await app.ready();
+    return app;
+}
+async function getAuthCookie(app) {
+    const res = await app.inject({
+        method: 'POST',
+        url: '/api/auth/login',
+        payload: { username: 'admin', password: 'admin123' },
+    });
+    const cookies = res.cookies;
+    const accessToken = cookies.find(c => c.name === 'access_token');
+    return `access_token=${accessToken.value}`;
+}
+describe('settings routes', () => {
+    let db;
+    let app;
+    let authCookie;
+    let tmpEnvPath;
+    let origDotenvPath;
+    beforeEach(async () => {
+        db = new Database(':memory:');
+        runMigrations(db);
+        const hash = await hashPassword('admin123');
+        db.prepare("INSERT INTO users (id, username, password_hash, role, created_at) VALUES (?, ?, ?, ?, ?)").run('admin-id', 'admin', hash, 'admin', new Date().toISOString());
+        // Create temp .env file
+        tmpEnvPath = path.join(os.tmpdir(), `.env-test-${Date.now()}`);
+        fs.writeFileSync(tmpEnvPath, 'AWS_REGION=us-east-1\nSES_FROM_EMAIL=test@example.com\nJWT_SECRET=should-not-be-exposed\n');
+        origDotenvPath = process.env.DOTENV_PATH;
+        process.env.DOTENV_PATH = tmpEnvPath;
+        app = await buildApp(db);
+        authCookie = await getAuthCookie(app);
+    });
+    afterEach(async () => {
+        await app?.close();
+        db?.close();
+        if (origDotenvPath !== undefined) {
+            process.env.DOTENV_PATH = origDotenvPath;
+        }
+        else {
+            delete process.env.DOTENV_PATH;
+        }
+        try {
+            fs.unlinkSync(tmpEnvPath);
+        }
+        catch { /* ignore */ }
+    });
+    it('GET /api/settings/env — returns allowed keys only', async () => {
+        const res = await app.inject({
+            method: 'GET',
+            url: '/api/settings/env',
+            headers: { cookie: authCookie },
+        });
+        expect(res.statusCode).toBe(200);
+        const body = JSON.parse(res.payload);
+        expect(body.settings.AWS_REGION).toBe('us-east-1');
+        expect(body.settings.SES_FROM_EMAIL).toBe('test@example.com');
+        // JWT_SECRET should NOT be in the response (not in ALLOWED_KEYS)
+        expect(body.settings.JWT_SECRET).toBeUndefined();
+    });
+    it('GET /api/settings/env — masks secret values', async () => {
+        fs.writeFileSync(tmpEnvPath, 'AWS_ACCESS_KEY_ID=AKIAIOSFODNN7EXAMPLE\nAWS_SECRET_ACCESS_KEY=wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY\n');
+        const res = await app.inject({
+            method: 'GET',
+            url: '/api/settings/env',
+            headers: { cookie: authCookie },
+        });
+        expect(res.statusCode).toBe(200);
+        const body = JSON.parse(res.payload);
+        expect(body.settings.AWS_ACCESS_KEY_ID).toBe('****MPLE');
+        expect(body.settings.AWS_SECRET_ACCESS_KEY).toBe('****EKEY');
+    });
+    it('PATCH /api/settings/env — updates values', async () => {
+        const res = await app.inject({
+            method: 'PATCH',
+            url: '/api/settings/env',
+            headers: { cookie: authCookie },
+            payload: { SES_FROM_EMAIL: 'new@example.com', AWS_REGION: 'eu-west-1' },
+        });
+        expect(res.statusCode).toBe(200);
+        const body = JSON.parse(res.payload);
+        expect(body.settings.SES_FROM_EMAIL).toBe('new@example.com');
+        expect(body.settings.AWS_REGION).toBe('eu-west-1');
+        // Verify file was written
+        const content = fs.readFileSync(tmpEnvPath, 'utf-8');
+        expect(content).toContain('SES_FROM_EMAIL=new@example.com');
+        expect(content).toContain('AWS_REGION=eu-west-1');
+        // Verify process.env was updated
+        expect(process.env.SES_FROM_EMAIL).toBe('new@example.com');
+    });
+    it('PATCH /api/settings/env — rejects invalid keys', async () => {
+        const res = await app.inject({
+            method: 'PATCH',
+            url: '/api/settings/env',
+            headers: { cookie: authCookie },
+            payload: { JWT_SECRET: 'hacked', SOME_RANDOM: 'value' },
+        });
+        expect(res.statusCode).toBe(400);
+        expect(JSON.parse(res.payload).error).toContain('Invalid keys');
+    });
+    it('PATCH /api/settings/env — empty string removes key', async () => {
+        await app.inject({
+            method: 'PATCH',
+            url: '/api/settings/env',
+            headers: { cookie: authCookie },
+            payload: { SES_FROM_EMAIL: '' },
+        });
+        const content = fs.readFileSync(tmpEnvPath, 'utf-8');
+        expect(content).not.toContain('SES_FROM_EMAIL');
+    });
+    it('rejects non-admin users', async () => {
+        // Create operator user
+        const hash = await hashPassword('op123');
+        db.prepare("INSERT INTO users (id, username, password_hash, role, created_at) VALUES (?, ?, ?, ?, ?)").run('op-id', 'operator', hash, 'operator', new Date().toISOString());
+        const loginRes = await app.inject({
+            method: 'POST',
+            url: '/api/auth/login',
+            payload: { username: 'operator', password: 'op123' },
+        });
+        const cookies = loginRes.cookies;
+        const opCookie = `access_token=${cookies.find(c => c.name === 'access_token').value}`;
+        const res = await app.inject({
+            method: 'GET',
+            url: '/api/settings/env',
+            headers: { cookie: opCookie },
+        });
+        expect(res.statusCode).toBe(403);
+    });
+    it('rejects unauthenticated requests', async () => {
+        const res = await app.inject({
+            method: 'GET',
+            url: '/api/settings/env',
+        });
+        expect(res.statusCode).toBe(401);
+    });
+});
+describe('parseEnvFile', () => {
+    it('parses key=value pairs, skips comments and blanks', () => {
+        const tmpFile = path.join(os.tmpdir(), `.env-parse-${Date.now()}`);
+        fs.writeFileSync(tmpFile, '# Comment\nKEY1=value1\n\nKEY2=value2\n');
+        const result = parseEnvFile(tmpFile);
+        expect(result.get('KEY1')).toBe('value1');
+        expect(result.get('KEY2')).toBe('value2');
+        expect(result.size).toBe(2);
+        fs.unlinkSync(tmpFile);
+    });
+});
+describe('maskValue', () => {
+    it('masks secret keys', () => {
+        expect(maskValue('AWS_ACCESS_KEY_ID', 'AKIAIOSFODNN7EXAMPLE')).toBe('****MPLE');
+    });
+    it('does not mask non-secret keys', () => {
+        expect(maskValue('AWS_REGION', 'us-east-1')).toBe('us-east-1');
+    });
+    it('returns **** for short secrets', () => {
+        expect(maskValue('AWS_SECRET_ACCESS_KEY', 'abc')).toBe('****');
+    });
+});
+//# sourceMappingURL=settings-routes.test.js.map

package/dist/server/api/__tests__/settings-routes.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings-routes.test.js","sourceRoot":"","sources":["../../../src/api/__tests__/settings-routes.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,MAAM,MAAM,iBAAiB,CAAC;AACrC,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AACtC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAChF,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AACvE,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAEvD,MAAM,MAAM,GAAG,8CAA8C,CAAC;AAE9D,KAAK,UAAU,QAAQ,CAAC,EAAqB;IAC3C,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IACtB,MAAM,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC3B,sBAAsB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACpC,MAAM,GAAG,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;IAC1D,MAAM,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;IACnC,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;IAClB,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,GAAyC;IACpE,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;QAC3B,MAAM,EAAE,MAAM;QACd,GAAG,EAAE,iBAAiB;QACtB,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE;KACrD,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,GAAG,CAAC,OAA4C,CAAC;IACjE,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC;IACjE,OAAO,gBAAgB,WAAY,CAAC,KAAK,EAAE,CAAC;AAC9C,CAAC;AAED,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,IAAI,EAAqB,CAAC;IAC1B,IAAI,GAAyC,CAAC;IAC9C,IAAI,UAAkB,CAAC;IACvB,IAAI,UAAkB,CAAC;IACvB,IAAI,cAAkC,CAAC;IAEvC,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,EAAE,GAAG,IAAI,QAAQ,CAAC,UAAU,CAAC,CAAC;QAC9B,aAAa,CAAC,EAAE,CAAC,CAAC;QAElB,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,UAAU,CAAC,CAAC;QAC5C,EAAE,CAAC,OAAO,CACR,0FAA0F,CAC3F,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QAEpE,wBAAwB;QACxB,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,aAAa,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAC/D,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,2FAA2F,CAAC,CAAC;QAC1H,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;QACzC,OAAO,CAAC,GAAG,CAAC,WAAW,GAAG,UAAU,CAAC;QAErC,GAAG,GAAG,MAAM,QAAQ,CAAC,EAAE,CAAC,CAAC;QACzB,UAAU,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,MAAM,GAAG,EAAE,KAAK,EAAE,CAAC;QACnB,EAAE,EAAE,KAAK,EAAE,CAAC;QACZ,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;YACjC,OAAO,CAAC,GAAG,CAAC,WAAW,GAAG,cAAc,CAAC;QAC3C,CAAC;aAAM,CAAC;YACN,OAAO,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;QACjC,CAAC;QACD,IAAI,CAAC;YAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;YAC3B,MAAM,EAAE,KAAK;YACb,GAAG,EAAE,mBAAmB;YACxB,OAAO,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE;SAChC,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACnD,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAC9D,iEAAiE;QACjE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,aAAa,EAAE,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC3D,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,0GAA0G,CAAC,CAAC;QAEzI,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;YAC3B,MAAM,EAAE,KAAK;YACb,GAAG,EAAE,mBAAmB;YACxB,OAAO,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE;SAChC,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACzD,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;QACxD,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;YAC3B,MAAM,EAAE,OAAO;YACf,GAAG,EAAE,mBAAmB;YACxB,OAAO,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE;YAC/B,OAAO,EAAE,EAAE,cAAc,EAAE,iBAAiB,EAAE,UAAU,EAAE,WAAW,EAAE;SACxE,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC7D,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAEnD,0BAA0B;QAC1B,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACrD,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,gCAAgC,CAAC,CAAC;QAC5D,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;QAElD,iCAAiC;QACjC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;YAC3B,MAAM,EAAE,OAAO;YACf,GAAG,EAAE,mBAAmB;YACxB,OAAO,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE;YAC/B,OAAO,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE;SACxD,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QAClE,MAAM,GAAG,CAAC,MAAM,CAAC;YACf,MAAM,EAAE,OAAO;YACf,GAAG,EAAE,mBAAmB;YACxB,OAAO,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE;YAC/B,OAAO,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE;SAChC,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACrD,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yBAAyB,EAAE,KAAK,IAAI,EAAE;QACvC,uBAAuB;QACvB,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;QACzC,EAAE,CAAC,OAAO,CACR,0FAA0F,CAC3F,CAAC,GAAG,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QAEvE,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;YAChC,MAAM,EAAE,MAAM;YACd,GAAG,EAAE,iBAAiB;YACtB,OAAO,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE;SACrD,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,QAAQ,CAAC,OAA4C,CAAC;QACtE,MAAM,QAAQ,GAAG,gBAAgB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,cAAc,CAAE,CAAC,KAAK,EAAE,CAAC;QAEvF,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;YAC3B,MAAM,EAAE,KAAK;YACb,GAAG,EAAE,mBAAmB;YACxB,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE;SAC9B,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;QAChD,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;YAC3B,MAAM,EAAE,KAAK;YACb,GAAG,EAAE,mBAAmB;SACzB,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,cAAc,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACnE,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,yCAAyC,CAAC,CAAC;QACrE,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5B,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,WAAW,EAAE,GAAG,EAAE;IACzB,EAAE,CAAC,mBAAmB,EAAE,GAAG,EAAE;QAC3B,MAAM,CAAC,SAAS,CAAC,mBAAmB,EAAE,sBAAsB,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,MAAM,CAAC,SAAS,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,CAAC,SAAS,CAAC,uBAAuB,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/server/api/__tests__/system-routes.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=system-routes.test.d.ts.map

package/dist/server/api/__tests__/system-routes.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"system-routes.test.d.ts","sourceRoot":"","sources":["../../../src/api/__tests__/system-routes.test.ts"],"names":[],"mappings":""}

package/dist/server/api/__tests__/system-routes.test.js

@@ -0,0 +1,79 @@
+import { describe, it, expect, beforeEach, afterEach, vi } from 'vitest';
+import Fastify from 'fastify';
+import { systemRoutes } from '../system-routes.js';
+// Mock child_process
+vi.mock('node:child_process', () => ({
+    execFile: vi.fn((_cmd, args, _opts, cb) => {
+        if (args[0] === 'view' && args[1] === 'expxagents') {
+            cb(null, { stdout: '0.15.0\n' });
+        }
+        else {
+            cb(null, { stdout: '' });
+        }
+    }),
+}));
+// Mock promisify to work with our mock
+vi.mock('node:util', async () => {
+    const actual = await vi.importActual('node:util');
+    return {
+        ...actual,
+        promisify: (fn) => {
+            return (...args) => {
+                return new Promise((resolve, reject) => {
+                    fn(...args, (err, result) => {
+                        if (err)
+                            reject(err);
+                        else
+                            resolve(result);
+                    });
+                });
+            };
+        },
+    };
+});
+describe('system-routes', () => {
+    let app;
+    beforeEach(async () => {
+        app = Fastify();
+        app.decorate('requireAuth', async () => { });
+        await app.register(systemRoutes, { packageVersion: '0.14.2' });
+    });
+    afterEach(async () => {
+        await app.close();
+    });
+    it('GET /api/system/version should return current and latest versions', async () => {
+        const res = await app.inject({ method: 'GET', url: '/api/system/version' });
+        expect(res.statusCode).toBe(200);
+        const body = res.json();
+        expect(body.current).toBe('0.14.2');
+        expect(body.latest).toBe('0.15.0');
+        expect(body.updateAvailable).toBe(true);
+    });
+    it('GET /api/system/version should detect no update when current equals latest', async () => {
+        await app.close();
+        app = Fastify();
+        app.decorate('requireAuth', async () => { });
+        await app.register(systemRoutes, { packageVersion: '0.15.0' });
+        const res = await app.inject({ method: 'GET', url: '/api/system/version' });
+        const body = res.json();
+        expect(body.updateAvailable).toBe(false);
+    });
+    it('POST /api/system/update should respond with ok when update available', async () => {
+        const res = await app.inject({ method: 'POST', url: '/api/system/update' });
+        expect(res.statusCode).toBe(200);
+        const body = res.json();
+        expect(body.ok).toBe(true);
+        expect(body.message).toContain('0.15.0');
+    });
+    it('POST /api/system/update should respond with not ok when already up to date', async () => {
+        await app.close();
+        app = Fastify();
+        app.decorate('requireAuth', async () => { });
+        await app.register(systemRoutes, { packageVersion: '0.15.0' });
+        const res = await app.inject({ method: 'POST', url: '/api/system/update' });
+        const body = res.json();
+        expect(body.ok).toBe(false);
+        expect(body.message).toContain('up to date');
+    });
+});
+//# sourceMappingURL=system-routes.test.js.map

package/dist/server/api/__tests__/system-routes.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"system-routes.test.js","sourceRoot":"","sources":["../../../src/api/__tests__/system-routes.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACzE,OAAO,OAAO,MAAM,SAAS,CAAC;AAE9B,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEnD,qBAAqB;AACrB,EAAE,CAAC,IAAI,CAAC,oBAAoB,EAAE,GAAG,EAAE,CAAC,CAAC;IACnC,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,IAAY,EAAE,IAAc,EAAE,KAAU,EAAE,EAAY,EAAE,EAAE;QACzE,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,YAAY,EAAE,CAAC;YACnD,EAAE,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;QACnC,CAAC;aAAM,CAAC;YACN,EAAE,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC,CAAC;CACH,CAAC,CAAC,CAAC;AAEJ,uCAAuC;AACvC,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,IAAI,EAAE;IAC9B,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,YAAY,CAA6B,WAAW,CAAC,CAAC;IAC9E,OAAO;QACL,GAAG,MAAM;QACT,SAAS,EAAE,CAAC,EAAY,EAAE,EAAE;YAC1B,OAAO,CAAC,GAAG,IAAW,EAAE,EAAE;gBACxB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;oBACrC,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,GAAQ,EAAE,MAAW,EAAE,EAAE;wBACpC,IAAI,GAAG;4BAAE,MAAM,CAAC,GAAG,CAAC,CAAC;;4BAChB,OAAO,CAAC,MAAM,CAAC,CAAC;oBACvB,CAAC,CAAC,CAAC;gBACL,CAAC,CAAC,CAAC;YACL,CAAC,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,IAAI,GAAoB,CAAC;IAEzB,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,GAAG,GAAG,OAAO,EAAE,CAAC;QAChB,GAAG,CAAC,QAAQ,CAAC,aAAa,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC,CAAC,CAAC;QAC5C,MAAM,GAAG,CAAC,QAAQ,CAAC,YAAY,EAAE,EAAE,cAAc,EAAE,QAAQ,EAAE,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;IACpB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;QACjF,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,qBAAqB,EAAE,CAAC,CAAC;QAC5E,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACxB,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACpC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACnC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4EAA4E,EAAE,KAAK,IAAI,EAAE;QAC1F,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;QAClB,GAAG,GAAG,OAAO,EAAE,CAAC;QAChB,GAAG,CAAC,QAAQ,CAAC,aAAa,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC,CAAC,CAAC;QAC5C,MAAM,GAAG,CAAC,QAAQ,CAAC,YAAY,EAAE,EAAE,cAAc,EAAE,QAAQ,EAAE,CAAC,CAAC;QAE/D,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,qBAAqB,EAAE,CAAC,CAAC;QAC5E,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACxB,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;QACpF,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,oBAAoB,EAAE,CAAC,CAAC;QAC5E,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACxB,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3B,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4EAA4E,EAAE,KAAK,IAAI,EAAE;QAC1F,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;QAClB,GAAG,GAAG,OAAO,EAAE,CAAC;QAChB,GAAG,CAAC,QAAQ,CAAC,aAAa,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC,CAAC,CAAC;QAC5C,MAAM,GAAG,CAAC,QAAQ,CAAC,YAAY,EAAE,EAAE,cAAc,EAAE,QAAQ,EAAE,CAAC,CAAC;QAE/D,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,oBAAoB,EAAE,CAAC,CAAC;QAC5E,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACxB,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5B,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/server/api/__tests__/team-routes.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=team-routes.test.d.ts.map

package/dist/server/api/__tests__/team-routes.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"team-routes.test.d.ts","sourceRoot":"","sources":["../../../src/api/__tests__/team-routes.test.ts"],"names":[],"mappings":""}

package/dist/server/api/__tests__/team-routes.test.js

@@ -0,0 +1,116 @@
+import { describe, it, expect, beforeAll, afterAll } from 'vitest';
+import { buildApp } from '../../app.js';
+describe('team routes', () => {
+    let app;
+    let cookie;
+    beforeAll(async () => {
+        app = await buildApp({ config: { jwtSecret: 'test-secret-team' } });
+        await app.ready();
+        // Login as default admin
+        const loginRes = await app.inject({
+            method: 'POST',
+            url: '/api/auth/login',
+            payload: { username: 'admin', password: 'admin' },
+        });
+        const cookies = loginRes.cookies;
+        const access = cookies.find((c) => c.name === 'access_token');
+        const refresh = cookies.find((c) => c.name === 'refresh_token');
+        cookie = `access_token=${access.value}; refresh_token=${refresh.value}`;
+        // Clean table from previous runs
+        app.db.exec('DELETE FROM team_members');
+    });
+    afterAll(async () => {
+        await app.close();
+    });
+    it('GET /api/team — returns empty list initially', async () => {
+        const res = await app.inject({
+            method: 'GET',
+            url: '/api/team',
+            headers: { cookie },
+        });
+        expect(res.statusCode).toBe(200);
+        const body = res.json();
+        expect(body.members).toEqual([]);
+    });
+    it('POST /api/team — creates a team member', async () => {
+        const res = await app.inject({
+            method: 'POST',
+            url: '/api/team',
+            headers: { cookie },
+            payload: {
+                name: 'Maria Silva',
+                role: 'Designer',
+                email: 'maria@example.com',
+                phone: '+55 11 99999-0000',
+            },
+        });
+        expect(res.statusCode).toBe(201);
+        const body = res.json();
+        expect(body.member.name).toBe('Maria Silva');
+        expect(body.member.role).toBe('Designer');
+        expect(body.member.email).toBe('maria@example.com');
+        expect(body.member.phone).toBe('+55 11 99999-0000');
+        expect(body.member.id).toMatch(/^tm-/);
+    });
+    it('POST /api/team — rejects missing name', async () => {
+        const res = await app.inject({
+            method: 'POST',
+            url: '/api/team',
+            headers: { cookie },
+            payload: { role: 'Dev' },
+        });
+        expect(res.statusCode).toBe(400);
+    });
+    it('PATCH /api/team/:id — updates a team member', async () => {
+        // Create first
+        const createRes = await app.inject({
+            method: 'POST',
+            url: '/api/team',
+            headers: { cookie },
+            payload: { name: 'Joao', role: 'Dev' },
+        });
+        const { member } = createRes.json();
+        const res = await app.inject({
+            method: 'PATCH',
+            url: `/api/team/${member.id}`,
+            headers: { cookie },
+            payload: { role: 'Senior Dev', email: 'joao@test.com' },
+        });
+        expect(res.statusCode).toBe(200);
+        const updated = res.json().member;
+        expect(updated.name).toBe('Joao');
+        expect(updated.role).toBe('Senior Dev');
+        expect(updated.email).toBe('joao@test.com');
+    });
+    it('DELETE /api/team/:id — deletes a team member', async () => {
+        const createRes = await app.inject({
+            method: 'POST',
+            url: '/api/team',
+            headers: { cookie },
+            payload: { name: 'Temp User', role: 'Intern' },
+        });
+        const { member } = createRes.json();
+        const res = await app.inject({
+            method: 'DELETE',
+            url: `/api/team/${member.id}`,
+            headers: { cookie },
+        });
+        expect(res.statusCode).toBe(200);
+        expect(res.json().ok).toBe(true);
+        // Verify deleted
+        const delRes = await app.inject({
+            method: 'DELETE',
+            url: `/api/team/${member.id}`,
+            headers: { cookie },
+        });
+        expect(delRes.statusCode).toBe(404);
+    });
+    it('rejects unauthenticated requests', async () => {
+        const res = await app.inject({
+            method: 'GET',
+            url: '/api/team',
+        });
+        expect(res.statusCode).toBe(401);
+    });
+});
+//# sourceMappingURL=team-routes.test.js.map

package/dist/server/api/__tests__/team-routes.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"team-routes.test.js","sourceRoot":"","sources":["../../../src/api/__tests__/team-routes.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AACnE,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAGxC,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;IAC3B,IAAI,GAAoB,CAAC;IACzB,IAAI,MAAc,CAAC;IAEnB,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,GAAG,GAAG,MAAM,QAAQ,CAAC,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,kBAAkB,EAAE,EAAE,CAAC,CAAC;QACpE,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;QAElB,yBAAyB;QACzB,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;YAChC,MAAM,EAAE,MAAM;YACd,GAAG,EAAE,iBAAiB;YACtB,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE;SAClD,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAiD,CAAC;QAC3E,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC;QAC9D,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,eAAe,CAAC,CAAC;QAChE,MAAM,GAAG,gBAAgB,MAAO,CAAC,KAAK,mBAAmB,OAAQ,CAAC,KAAK,EAAE,CAAC;QAE1E,iCAAiC;QAChC,GAAW,CAAC,EAAE,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,KAAK,IAAI,EAAE;QAClB,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;IACpB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC5D,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;YAC3B,MAAM,EAAE,KAAK;YACb,GAAG,EAAE,WAAW;YAChB,OAAO,EAAE,EAAE,MAAM,EAAE;SACpB,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACxB,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACtD,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;YAC3B,MAAM,EAAE,MAAM;YACd,GAAG,EAAE,WAAW;YAChB,OAAO,EAAE,EAAE,MAAM,EAAE;YACnB,OAAO,EAAE;gBACP,IAAI,EAAE,aAAa;gBACnB,IAAI,EAAE,UAAU;gBAChB,KAAK,EAAE,mBAAmB;gBAC1B,KAAK,EAAE,mBAAmB;aAC3B;SACF,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACxB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC7C,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC1C,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QACpD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QACpD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;YAC3B,MAAM,EAAE,MAAM;YACd,GAAG,EAAE,WAAW;YAChB,OAAO,EAAE,EAAE,MAAM,EAAE;YACnB,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;SACzB,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC3D,eAAe;QACf,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;YACjC,MAAM,EAAE,MAAM;YACd,GAAG,EAAE,WAAW;YAChB,OAAO,EAAE,EAAE,MAAM,EAAE;YACnB,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE;SACvC,CAAC,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC;QAEpC,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;YAC3B,MAAM,EAAE,OAAO;YACf,GAAG,EAAE,aAAa,MAAM,CAAC,EAAE,EAAE;YAC7B,OAAO,EAAE,EAAE,MAAM,EAAE;YACnB,OAAO,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,eAAe,EAAE;SACxD,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC;QAClC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAClC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACxC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC5D,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;YACjC,MAAM,EAAE,MAAM;YACd,GAAG,EAAE,WAAW;YAChB,OAAO,EAAE,EAAE,MAAM,EAAE;YACnB,OAAO,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE;SAC/C,CAAC,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC;QAEpC,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;YAC3B,MAAM,EAAE,QAAQ;YAChB,GAAG,EAAE,aAAa,MAAM,CAAC,EAAE,EAAE;YAC7B,OAAO,EAAE,EAAE,MAAM,EAAE;SACpB,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEjC,iBAAiB;QACjB,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;YAC9B,MAAM,EAAE,QAAQ;YAChB,GAAG,EAAE,aAAa,MAAM,CAAC,EAAE,EAAE;YAC7B,OAAO,EAAE,EAAE,MAAM,EAAE;SACpB,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;QAChD,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;YAC3B,MAAM,EAAE,KAAK;YACb,GAAG,EAAE,WAAW;SACjB,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/server/api/__tests__/webhook-routes.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=webhook-routes.test.d.ts.map

package/dist/server/api/__tests__/webhook-routes.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-routes.test.d.ts","sourceRoot":"","sources":["../../../src/api/__tests__/webhook-routes.test.ts"],"names":[],"mappings":""}