tapimo 0.0.2 → 0.2.0

package/dist/apps/platform/routes/invitations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"invitations.d.ts","sourceRoot":"","sources":["../../../../src/apps/platform/routes/invitations.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,CAAC,MAAM,UAAU,CAAA;AAO7B,OAAO,KAAK,QAAQ,MAAM,+BAA+B,CAAA;AAGzD,OAAO,KAAK,EAAS,WAAW,EAAE,MAAM,WAAW,CAAA;AAKnD,qDAAqD;AACrD,yBAAiB,MAAM,CAAC;IAMtB,8BAA8B;IACvB,MAAM,UAAU;;;;;;;;;;;;qBAsCtB,CAAA;IAED,0EAA0E;IACnE,MAAM,MAAM;;qBASuD,CAAA;IAE1E,4DAA4D;IACrD,MAAM,gBAAgB;;;qBAe8B,CAAA;IAE3D,kEAAkE;IAC3D,MAAM,YAAY;;qBASmD,CAAA;IAE5E,2CAA2C;IACpC,MAAM,cAAc;;;;;;;qBAO+B,CAAA;IAE1D,sEAAsE;IACtE,UAAiB,eAAe,CAAC;QAC/B,iDAAiD;QAC1C,MAAM,QAAQ;;;;;;;;;;;;;;yBAKpB,CAAA;KACF;IAED,mDAAmD;IACnD,UAAiB,iBAAiB,CAAC;QACjC,kFAAkF;QAC3E,MAAM,IAAI;;;;;;;;;;;;;yBAOf,CAAA;QAEF,8DAA8D;QACvD,MAAM,QAAQ;;;;;;;;;;;;;;;yBAKpB,CAAA;KACF;IAED,kDAAkD;IAClD,UAAiB,gBAAgB,CAAC;QAChC,2CAA2C;QACpC,MAAM,QAAQ;;;;;;;;yBAmBpB,CAAA;KACF;IAED,kDAAkD;IAClD,UAAiB,gBAAgB,CAAC;QAChC,oDAAoD;QAC7C,MAAM,QAAQ;;yBASgD,CAAA;KACtE;CACF;AAED;;;;;;GAMG;AACH,wBAAgB,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;oEAgQ1B"}

package/dist/apps/platform/routes/invitations.js

@@ -0,0 +1,413 @@
+import { Hono } from 'hono';
+import * as z from 'zod/mini';
+import * as Auth from '../../../internal/Auth.js';
+import * as Db from '../../../db/Db.js';
+import * as Invitations from '../../../db/tables/invitations.js';
+import * as Memberships from '../../../db/tables/memberships.js';
+import * as OpenApi from '../../../internal/OpenApi.js';
+import * as Response from '../../../internal/Response.js';
+import * as Schema from '../../../internal/Schema.js';
+/** How long an invitation stays acceptable. */
+const ttlDays = 7;
+/** Zod schemas owned by the invitations resource. */
+export var schema;
+(function (schema) {
+    /** A membership role. */
+    const role = z
+        .enum(Memberships.roles)
+        .check(z.describe('Role granted when the invitation is accepted.'), z.meta({ examples: ['member'] })); // prettier-ignore
+    /** One pending invitation. */
+    schema.Invitation = Schema.describe(z.object({
+        createdAt: z
+            .string()
+            .check(z.describe('When the invitation was created (ISO 8601).'), z.meta({ examples: ['2026-01-01T00:00:00.000Z'] })),
+        email: z
+            .string()
+            .check(z.describe('Invitee email (lowercase).'), z.meta({ examples: ['dev@example.com'] })),
+        expiresAt: z
+            .string()
+            .check(z.describe('When the invitation expires (ISO 8601).'), z.meta({ examples: ['2026-01-08T00:00:00.000Z'] })),
+        id: z
+            .string()
+            .check(z.describe('Opaque invitation id (`inv_…`).'), z.meta({ examples: ['inv_1a2b3c4d5e6f7g8h9j0k1m2n'] })),
+        invitedBy: z
+            .string()
+            .check(z.describe('User id (`usr_…`) that created the invitation.'), z.meta({ examples: ['usr_1a2b3c4d5e6f7g8h9j0k1m2n'] })),
+        orgId: z
+            .string()
+            .check(z.describe('Organization id (`org_…`) the invitation joins.'), z.meta({ examples: ['org_1a2b3c4d5e6f7g8h9j0k1m2n'] })),
+        role,
+    }), 'One pending invitation.');
+    /** Path parameters addressing an organization's invitation collection. */
+    schema.Params = z
+        .object({
+        orgId: z
+            .string()
+            .check(z.describe('The organization id (`org_…`).'), z.meta({ examples: ['org_1a2b3c4d5e6f7g8h9j0k1m2n'] })),
+    })
+        .check(z.describe("Path parameters for an organization's invitations."));
+    /** Path parameters addressing one org-scoped invitation. */
+    schema.InvitationParams = z
+        .object({
+        invitationId: z
+            .string()
+            .check(z.describe('The invitation id (`inv_…`).'), z.meta({ examples: ['inv_1a2b3c4d5e6f7g8h9j0k1m2n'] })),
+        orgId: z
+            .string()
+            .check(z.describe('The organization id (`org_…`).'), z.meta({ examples: ['org_1a2b3c4d5e6f7g8h9j0k1m2n'] })),
+    })
+        .check(z.describe('Path parameters for one invitation.'));
+    /** Path parameters addressing one of the caller's invitations. */
+    schema.AcceptParams = z
+        .object({
+        invitationId: z
+            .string()
+            .check(z.describe('The invitation id (`inv_…`).'), z.meta({ examples: ['inv_1a2b3c4d5e6f7g8h9j0k1m2n'] })),
+    })
+        .check(z.describe("Path parameters for one of the caller's invitations."));
+    /** Request body creating an invitation. */
+    schema.InvitationBody = z
+        .object({
+        email: z
+            .email()
+            .check(z.describe('Invitee email.'), z.meta({ examples: ['dev@example.com'] })),
+        role,
+    })
+        .check(z.describe('Fields for creating an invitation.'));
+    /** Schemas for the listInvitations / listMyInvitations operations. */
+    let listInvitations;
+    (function (listInvitations) {
+        /** Non-paginated list of pending invitations. */
+        listInvitations.Response = Schema.describe(z.object({
+            data: z.array(schema.Invitation).check(z.describe('Pending invitations, newest first.')),
+        }), 'A non-paginated list of pending invitations.');
+    })(listInvitations = schema.listInvitations || (schema.listInvitations = {}));
+    /** Schemas for the listMyInvitations operation. */
+    let listMyInvitations;
+    (function (listMyInvitations) {
+        /** A pending invitation addressed to the caller, with the inviting org's name. */
+        listMyInvitations.Item = z.extend(schema.Invitation, {
+            orgName: z
+                .string()
+                .check(z.describe('Human-readable name of the inviting organization.'), z.meta({ examples: ['Acme, Inc.'] })),
+        });
+        /** Non-paginated list of the caller's pending invitations. */
+        listMyInvitations.Response = Schema.describe(z.object({
+            data: z.array(listMyInvitations.Item).check(z.describe('Pending invitations, newest first.')),
+        }), "A non-paginated list of the caller's pending invitations.");
+    })(listMyInvitations = schema.listMyInvitations || (schema.listMyInvitations = {}));
+    /** Schemas for the acceptInvitation operation. */
+    let acceptInvitation;
+    (function (acceptInvitation) {
+        /** The membership granted by accepting. */
+        acceptInvitation.Response = Schema.describe(z.object({
+            orgId: z
+                .string()
+                .check(z.describe('Organization id (`org_…`) joined.'), z.meta({ examples: ['org_1a2b3c4d5e6f7g8h9j0k1m2n'] })),
+            role: z
+                .enum(Memberships.roles)
+                .check(z.describe('Granted role.'), z.meta({ examples: ['member'] })),
+            userId: z
+                .string()
+                .check(z.describe('Member user id (`usr_…`).'), z.meta({ examples: ['usr_1a2b3c4d5e6f7g8h9j0k1m2n'] })),
+        }), 'The membership granted by accepting.');
+    })(acceptInvitation = schema.acceptInvitation || (schema.acceptInvitation = {}));
+    /** Schemas for the revokeInvitation operation. */
+    let revokeInvitation;
+    (function (revokeInvitation) {
+        /** Confirmation that the invitation was revoked. */
+        revokeInvitation.Response = z
+            .object({
+            id: z
+                .string()
+                .check(z.describe('ID of the invitation that was revoked.'), z.meta({ examples: ['inv_1a2b3c4d5e6f7g8h9j0k1m2n'] })),
+        })
+            .check(z.describe('Confirmation that the invitation was revoked.'));
+    })(revokeInvitation = schema.revokeInvitation || (schema.revokeInvitation = {}));
+})(schema || (schema = {}));
+/**
+ * Mounts the invitations surface: org-scoped management
+ * (`/orgs/:orgId/invitations`, admins and owners) plus the invitee's side
+ * (`/invitations`, matched against the session's verified email). Invitation
+ * emails dispatch through the sender the platform group publishes on context
+ * (`c.get('email')`), best-effort.
+ */
+export function invitations() {
+    return new Hono()
+        .post('/v1/orgs/:orgId{org_[A-Za-z0-9_-]+}/invitations', Auth.policy({ session: true }), Auth.ensureOrg({ role: 'admin' }), OpenApi.validate('param', schema.Params, {
+        code: 'param_invalid',
+        message: 'Check the path parameters and try again.',
+    }), OpenApi.validate('json', schema.InvitationBody, {
+        code: 'body_invalid',
+        message: 'Check the request body and try again.',
+    }), OpenApi.describeRoute({
+        description: 'Invite an email to the organization with a role. The invitee accepts after signing in with that verified email.', // prettier-ignore
+        operationId: 'createInvitation',
+        responses: OpenApi.responses({
+            errors: { 404: 'No accessible organization was found for this id.' },
+            success: { description: 'The created invitation.', schema: schema.Invitation },
+        }),
+        summary: 'Create invitation',
+        tags: ['Invitations'],
+    }), async (c) => {
+        if (Auth.narrowAccess)
+            return Auth.superAdminAccessError(c);
+        if (Auth.narrowScope)
+            return Auth.ensureOrgError(c);
+        if (OpenApi.narrowValidation)
+            return OpenApi.validationError(c, {
+                code: 'param_invalid',
+                message: 'Check the path parameters and try again.',
+            });
+        if (OpenApi.narrowValidation)
+            return OpenApi.validationError(c, {
+                code: 'body_invalid',
+                message: 'Check the request body and try again.',
+            });
+        const body = c.req.valid('json');
+        // Owners invite anyone; everyone else grants only roles strictly below
+        // their own (an admin invites members, never peers). The super admin
+        // has no membership and may grant any role.
+        const caller = Auth.membership(c);
+        if (caller &&
+            caller.role !== 'owner' &&
+            Memberships.rank[body.role] >= Memberships.rank[caller.role])
+            return Response.error(c, {
+                code: 'forbidden',
+                message: 'Cannot invite at or above your own role',
+                status: 403,
+            });
+        const invitedBy = caller?.userId ?? 'super_admin';
+        const db = Db.get(c.get('db'));
+        try {
+            const record = await Invitations.create(db, {
+                email: body.email,
+                expiresAt: new Date(Date.now() + ttlDays * 86_400_000).toISOString(),
+                invitedBy,
+                orgId: Auth.org(c).id,
+                role: body.role,
+            });
+            dispatchEmail(c, { email: c.get('email'), org: Auth.org(c).name, record });
+            return c.json(Response.validated(schema.Invitation, serializeInvitation(record)), 200);
+        }
+        catch (cause) {
+            return Response.upstream(c, cause);
+        }
+    })
+        .get('/v1/orgs/:orgId{org_[A-Za-z0-9_-]+}/invitations', Auth.policy({ session: true }), Auth.ensureOrg({ role: 'admin' }), OpenApi.validate('param', schema.Params, {
+        code: 'param_invalid',
+        message: 'Check the path parameters and try again.',
+    }), OpenApi.describeRoute({
+        operationId: 'listInvitations',
+        responses: OpenApi.responses({
+            errors: { 404: 'No accessible organization was found for this id.' },
+            success: {
+                description: 'Pending invitations, newest first.',
+                schema: schema.listInvitations.Response,
+            },
+        }),
+        summary: 'List invitations',
+        tags: ['Invitations'],
+    }), async (c) => {
+        if (Auth.narrowAccess)
+            return Auth.superAdminAccessError(c);
+        if (Auth.narrowScope)
+            return Auth.ensureOrgError(c);
+        if (OpenApi.narrowValidation)
+            return OpenApi.validationError(c, {
+                code: 'param_invalid',
+                message: 'Check the path parameters and try again.',
+            });
+        const db = Db.get(c.get('db'));
+        try {
+            const records = await Invitations.listByOrg(db, Auth.org(c).id);
+            return c.json(Response.validated(schema.listInvitations.Response, {
+                data: records.map(serializeInvitation),
+            }), 200);
+        }
+        catch (cause) {
+            return Response.upstream(c, cause);
+        }
+    })
+        .delete('/v1/orgs/:orgId{org_[A-Za-z0-9_-]+}/invitations/:invitationId{inv_[A-Za-z0-9_-]+}', Auth.policy({ session: true }), Auth.ensureOrg({ role: 'admin' }), OpenApi.validate('param', schema.InvitationParams, {
+        code: 'param_invalid',
+        message: 'Check the path parameters and try again.',
+    }), OpenApi.describeRoute({
+        operationId: 'revokeInvitation',
+        responses: OpenApi.responses({
+            errors: { 404: 'No accessible pending invitation was found for this id.' },
+            success: {
+                description: 'Confirmation that the invitation was revoked.',
+                schema: schema.revokeInvitation.Response,
+            },
+        }),
+        summary: 'Revoke invitation',
+        tags: ['Invitations'],
+    }), async (c) => {
+        if (Auth.narrowAccess)
+            return Auth.superAdminAccessError(c);
+        if (Auth.narrowScope)
+            return Auth.ensureOrgError(c);
+        if (OpenApi.narrowValidation)
+            return OpenApi.validationError(c, {
+                code: 'param_invalid',
+                message: 'Check the path parameters and try again.',
+            });
+        const { invitationId } = c.req.valid('param');
+        const db = Db.get(c.get('db'));
+        try {
+            // Bind the invitation to the scoped org before revoking.
+            const record = await Invitations.get(db, invitationId);
+            if (!record || record.orgId !== Auth.org(c).id)
+                return invitationNotFound(c);
+            const revoked = await Invitations.revoke(db, invitationId);
+            if (!revoked)
+                return invitationNotFound(c);
+            return c.json(Response.validated(schema.revokeInvitation.Response, { id: invitationId }), 200);
+        }
+        catch (cause) {
+            return Response.upstream(c, cause);
+        }
+    })
+        .get('/v1/invitations', Auth.policy({ session: true }), OpenApi.describeRoute({
+        description: "Pending invitations addressed to the session's verified email.",
+        operationId: 'listMyInvitations',
+        responses: OpenApi.responses({
+            success: {
+                description: 'Pending invitations, newest first.',
+                schema: schema.listMyInvitations.Response,
+            },
+        }),
+        summary: 'List my invitations',
+        tags: ['Invitations'],
+    }), async (c) => {
+        if (Auth.narrowAccess)
+            return Auth.superAdminAccessError(c);
+        const principal = Auth.getPrincipal(c);
+        if (principal?.type !== 'session')
+            return sessionRequired(c);
+        // Without a verified email there is nothing to match against.
+        if (!principal.email)
+            return c.json(Response.validated(schema.listMyInvitations.Response, { data: [] }), 200);
+        const db = Db.get(c.get('db'));
+        try {
+            const records = await Invitations.listByEmail(db, principal.email);
+            return c.json(Response.validated(schema.listMyInvitations.Response, {
+                data: records.map((record) => ({
+                    ...serializeInvitation(record),
+                    orgName: record.orgName,
+                })),
+            }), 200);
+        }
+        catch (cause) {
+            return Response.upstream(c, cause);
+        }
+    })
+        .post('/v1/invitations/:invitationId{inv_[A-Za-z0-9_-]+}/accept', Auth.policy({ session: true }), OpenApi.validate('param', schema.AcceptParams, {
+        code: 'param_invalid',
+        message: 'Check the path parameters and try again.',
+    }), OpenApi.describeRoute({
+        description: "Accept an invitation addressed to the session's verified email, joining the organization with the invited role.", // prettier-ignore
+        operationId: 'acceptInvitation',
+        responses: OpenApi.responses({
+            errors: { 404: 'No accessible pending invitation was found for this id.' },
+            success: {
+                description: 'The membership granted by accepting.',
+                schema: schema.acceptInvitation.Response,
+            },
+        }),
+        summary: 'Accept invitation',
+        tags: ['Invitations'],
+    }), async (c) => {
+        if (Auth.narrowAccess)
+            return Auth.superAdminAccessError(c);
+        if (OpenApi.narrowValidation)
+            return OpenApi.validationError(c, {
+                code: 'param_invalid',
+                message: 'Check the path parameters and try again.',
+            });
+        const principal = Auth.getPrincipal(c);
+        if (principal?.type !== 'session')
+            return sessionRequired(c);
+        const { invitationId } = c.req.valid('param');
+        const db = Db.get(c.get('db'));
+        try {
+            // An invitation is visible only to the verified holder of its email;
+            // everyone else sees 404.
+            const record = await Invitations.get(db, invitationId);
+            if (!record || record.email !== principal.email?.toLowerCase())
+                return invitationNotFound(c);
+            const accepted = await Invitations.accept(db, invitationId, principal.id);
+            if (!accepted)
+                return invitationNotFound(c);
+            const membership = await Memberships.get(db, accepted.orgId, principal.id);
+            return c.json(Response.validated(schema.acceptInvitation.Response, {
+                orgId: accepted.orgId,
+                role: membership?.role ?? accepted.role,
+                userId: principal.id,
+            }), 200);
+        }
+        catch (cause) {
+            return Response.upstream(c, cause);
+        }
+    });
+}
+/** Dispatches the invitation email through the app's sender, best-effort. */
+function dispatchEmail(c, options) {
+    const { email: sender, org, record } = options;
+    if (!sender)
+        return;
+    const days = Math.max(1, Math.round((Date.parse(record.expiresAt) - Date.now()) / 86_400_000));
+    const expiry = days === 1 ? '1 day' : `${days} days`;
+    const link = new URL(sender.consoleUrl ?? 'https://console.tempo.xyz');
+    link.searchParams.set('email', record.email);
+    const url = link.href;
+    const dispatch = Promise.resolve(sender.send({
+        from: sender.from,
+        html: `<p>You've been invited to join <strong>${escapeHtml(org)}</strong> on the Tempo Developer Platform</p><p>Sign in at <a href="${url}">${url}</a> to accept. This invitation expires in ${expiry}.</p>`,
+        subject: `You've been invited to ${org} on the Tempo Developer Platform`,
+        text: `You've been invited to join ${org} on the Tempo Developer Platform\n\nSign in at ${url} to accept. This invitation expires in ${expiry}.`,
+        to: record.email,
+    })).catch((error) => console.error('invitation email dispatch failed', error));
+    try {
+        c.executionCtx.waitUntil(dispatch);
+    }
+    catch {
+        // Non-Workers runtime: the floating promise settles on its own.
+    }
+}
+/** Escapes org-controlled text for the HTML body. */
+function escapeHtml(text) {
+    return text
+        .replaceAll('&', '&amp;')
+        .replaceAll('<', '&lt;')
+        .replaceAll('>', '&gt;')
+        .replaceAll('"', '&quot;');
+}
+/** Projects an invitation row onto the pending-invitation shape. */
+function serializeInvitation(record) {
+    return {
+        createdAt: record.createdAt,
+        email: record.email,
+        expiresAt: record.expiresAt,
+        id: record.id,
+        invitedBy: record.invitedBy,
+        orgId: record.orgId,
+        role: record.role,
+    };
+}
+function invitationNotFound(c) {
+    return Response.error(c, {
+        code: 'invitation_not_found',
+        message: 'Invitation not found',
+        status: 404,
+    });
+}
+function sessionRequired(c) {
+    return Response.error(c, {
+        code: 'forbidden',
+        message: 'Session required',
+        status: 403,
+    });
+}
+//# sourceMappingURL=invitations.js.map

package/dist/apps/platform/routes/invitations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invitations.js","sourceRoot":"","sources":["../../../../src/apps/platform/routes/invitations.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,IAAI,EAAE,MAAM,MAAM,CAAA;AACzC,OAAO,KAAK,CAAC,MAAM,UAAU,CAAA;AAE7B,OAAO,KAAK,IAAI,MAAM,2BAA2B,CAAA;AACjD,OAAO,KAAK,EAAE,MAAM,mBAAmB,CAAA;AACvC,OAAO,KAAK,WAAW,MAAM,mCAAmC,CAAA;AAChE,OAAO,KAAK,WAAW,MAAM,mCAAmC,CAAA;AAChE,OAAO,KAAK,OAAO,MAAM,8BAA8B,CAAA;AACvD,OAAO,KAAK,QAAQ,MAAM,+BAA+B,CAAA;AACzD,OAAO,KAAK,MAAM,MAAM,6BAA6B,CAAA;AAIrD,+CAA+C;AAC/C,MAAM,OAAO,GAAG,CAAC,CAAA;AAEjB,qDAAqD;AACrD,MAAM,KAAW,MAAM,CA0KtB;AA1KD,WAAiB,MAAM;IACrB,yBAAyB;IACzB,MAAM,IAAI,GAAG,CAAC;SACX,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC;SACvB,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,+CAA+C,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAA,CAAC,kBAAkB;IAE1H,8BAA8B;IACjB,iBAAU,GAAG,MAAM,CAAC,QAAQ,CACvC,CAAC,CAAC,MAAM,CAAC;QACP,SAAS,EAAE,CAAC;aACT,MAAM,EAAE;aACR,KAAK,CACJ,CAAC,CAAC,QAAQ,CAAC,6CAA6C,CAAC,EACzD,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,0BAA0B,CAAC,EAAE,CAAC,CACnD;QACH,KAAK,EAAE,CAAC;aACL,MAAM,EAAE;aACR,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,4BAA4B,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC;QAC7F,SAAS,EAAE,CAAC;aACT,MAAM,EAAE;aACR,KAAK,CACJ,CAAC,CAAC,QAAQ,CAAC,yCAAyC,CAAC,EACrD,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,0BAA0B,CAAC,EAAE,CAAC,CACnD;QACH,EAAE,EAAE,CAAC;aACF,MAAM,EAAE;aACR,KAAK,CACJ,CAAC,CAAC,QAAQ,CAAC,iCAAiC,CAAC,EAC7C,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,8BAA8B,CAAC,EAAE,CAAC,CACvD;QACH,SAAS,EAAE,CAAC;aACT,MAAM,EAAE;aACR,KAAK,CACJ,CAAC,CAAC,QAAQ,CAAC,gDAAgD,CAAC,EAC5D,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,8BAA8B,CAAC,EAAE,CAAC,CACvD;QACH,KAAK,EAAE,CAAC;aACL,MAAM,EAAE;aACR,KAAK,CACJ,CAAC,CAAC,QAAQ,CAAC,iDAAiD,CAAC,EAC7D,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,8BAA8B,CAAC,EAAE,CAAC,CACvD;QACH,IAAI;KACL,CAAC,EACF,yBAAyB,CAC1B,CAAA;IAED,0EAA0E;IAC7D,aAAM,GAAG,CAAC;SACpB,MAAM,CAAC;QACN,KAAK,EAAE,CAAC;aACL,MAAM,EAAE;aACR,KAAK,CACJ,CAAC,CAAC,QAAQ,CAAC,gCAAgC,CAAC,EAC5C,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,8BAA8B,CAAC,EAAE,CAAC,CACvD;KACJ,CAAC;SACD,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,oDAAoD,CAAC,CAAC,CAAA;IAE1E,4DAA4D;IAC/C,uBAAgB,GAAG,CAAC;SAC9B,MAAM,CAAC;QACN,YAAY,EAAE,CAAC;aACZ,MAAM,EAAE;aACR,KAAK,CACJ,CAAC,CAAC,QAAQ,CAAC,8BAA8B,CAAC,EAC1C,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,8BAA8B,CAAC,EAAE,CAAC,CACvD;QACH,KAAK,EAAE,CAAC;aACL,MAAM,EAAE;aACR,KAAK,CACJ,CAAC,CAAC,QAAQ,CAAC,gCAAgC,CAAC,EAC5C,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,8BAA8B,CAAC,EAAE,CAAC,CACvD;KACJ,CAAC;SACD,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,qCAAqC,CAAC,CAAC,CAAA;IAE3D,kEAAkE;IACrD,mBAAY,GAAG,CAAC;SAC1B,MAAM,CAAC;QACN,YAAY,EAAE,CAAC;aACZ,MAAM,EAAE;aACR,KAAK,CACJ,CAAC,CAAC,QAAQ,CAAC,8BAA8B,CAAC,EAC1C,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,8BAA8B,CAAC,EAAE,CAAC,CACvD;KACJ,CAAC;SACD,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,sDAAsD,CAAC,CAAC,CAAA;IAE5E,2CAA2C;IAC9B,qBAAc,GAAG,CAAC;SAC5B,MAAM,CAAC;QACN,KAAK,EAAE,CAAC;aACL,KAAK,EAAE;aACP,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC;QACjF,IAAI;KACL,CAAC;SACD,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,oCAAoC,CAAC,CAAC,CAAA;IAE1D,sEAAsE;IACtE,IAAiB,eAAe,CAQ/B;IARD,WAAiB,eAAe;QAC9B,iDAAiD;QACpC,wBAAQ,GAAG,MAAM,CAAC,QAAQ,CACrC,CAAC,CAAC,MAAM,CAAC;YACP,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAU,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,oCAAoC,CAAC,CAAC;SAClF,CAAC,EACF,8CAA8C,CAC/C,CAAA;IACH,CAAC,EARgB,eAAe,GAAf,OAAA,eAAe,KAAf,OAAA,eAAe,QAQ/B;IAED,mDAAmD;IACnD,IAAiB,iBAAiB,CAkBjC;IAlBD,WAAiB,iBAAiB;QAChC,kFAAkF;QACrE,sBAAI,GAAG,CAAC,CAAC,MAAM,CAAC,iBAAU,EAAE;YACvC,OAAO,EAAE,CAAC;iBACP,MAAM,EAAE;iBACR,KAAK,CACJ,CAAC,CAAC,QAAQ,CAAC,mDAAmD,CAAC,EAC/D,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC,CACrC;SACJ,CAAC,CAAA;QAEF,8DAA8D;QACjD,0BAAQ,GAAG,MAAM,CAAC,QAAQ,CACrC,CAAC,CAAC,MAAM,CAAC;YACP,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,sBAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,oCAAoC,CAAC,CAAC;SAC5E,CAAC,EACF,2DAA2D,CAC5D,CAAA;IACH,CAAC,EAlBgB,iBAAiB,GAAjB,OAAA,iBAAiB,KAAjB,OAAA,iBAAiB,QAkBjC;IAED,kDAAkD;IAClD,IAAiB,gBAAgB,CAsBhC;IAtBD,WAAiB,gBAAgB;QAC/B,2CAA2C;QAC9B,yBAAQ,GAAG,MAAM,CAAC,QAAQ,CACrC,CAAC,CAAC,MAAM,CAAC;YACP,KAAK,EAAE,CAAC;iBACL,MAAM,EAAE;iBACR,KAAK,CACJ,CAAC,CAAC,QAAQ,CAAC,mCAAmC,CAAC,EAC/C,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,8BAA8B,CAAC,EAAE,CAAC,CACvD;YACH,IAAI,EAAE,CAAC;iBACJ,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC;iBACvB,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YACvE,MAAM,EAAE,CAAC;iBACN,MAAM,EAAE;iBACR,KAAK,CACJ,CAAC,CAAC,QAAQ,CAAC,2BAA2B,CAAC,EACvC,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,8BAA8B,CAAC,EAAE,CAAC,CACvD;SACJ,CAAC,EACF,sCAAsC,CACvC,CAAA;IACH,CAAC,EAtBgB,gBAAgB,GAAhB,OAAA,gBAAgB,KAAhB,OAAA,gBAAgB,QAsBhC;IAED,kDAAkD;IAClD,IAAiB,gBAAgB,CAYhC;IAZD,WAAiB,gBAAgB;QAC/B,oDAAoD;QACvC,yBAAQ,GAAG,CAAC;aACtB,MAAM,CAAC;YACN,EAAE,EAAE,CAAC;iBACF,MAAM,EAAE;iBACR,KAAK,CACJ,CAAC,CAAC,QAAQ,CAAC,wCAAwC,CAAC,EACpD,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,8BAA8B,CAAC,EAAE,CAAC,CACvD;SACJ,CAAC;aACD,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,+CAA+C,CAAC,CAAC,CAAA;IACvE,CAAC,EAZgB,gBAAgB,GAAhB,OAAA,gBAAgB,KAAhB,OAAA,gBAAgB,QAYhC;AACH,CAAC,EA1KgB,MAAM,KAAN,MAAM,QA0KtB;AAED;;;;;;GAMG;AACH,MAAM,UAAU,WAAW;IACzB,OAAO,IAAI,IAAI,EAAe;SAC3B,IAAI,CACH,iDAAiD,EACjD,IAAI,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAC9B,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EACjC,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE;QACvC,IAAI,EAAE,eAAe;QACrB,OAAO,EAAE,0CAA0C;KACpD,CAAC,EACF,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,cAAc,EAAE;QAC9C,IAAI,EAAE,cAAc;QACpB,OAAO,EAAE,uCAAuC;KACjD,CAAC,EACF,OAAO,CAAC,aAAa,CAAC;QACpB,WAAW,EAAE,iHAAiH,EAAE,kBAAkB;QAClJ,WAAW,EAAE,kBAAkB;QAC/B,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC;YAC3B,MAAM,EAAE,EAAE,GAAG,EAAE,mDAAmD,EAAE;YACpE,OAAO,EAAE,EAAE,WAAW,EAAE,yBAAyB,EAAE,MAAM,EAAE,MAAM,CAAC,UAAU,EAAE;SAC/E,CAAC;QACF,OAAO,EAAE,mBAAmB;QAC5B,IAAI,EAAE,CAAC,aAAa,CAAC;KACtB,CAAC,EACF,KAAK,EAAE,CAAC,EAAE,EAAE;QACV,IAAI,IAAI,CAAC,YAAY;YAAE,OAAO,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;QAC3D,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAA;QACnD,IAAI,OAAO,CAAC,gBAAgB;YAC1B,OAAO,OAAO,CAAC,eAAe,CAAC,CAAC,EAAE;gBAChC,IAAI,EAAE,eAAe;gBACrB,OAAO,EAAE,0CAA0C;aACpD,CAAC,CAAA;QACJ,IAAI,OAAO,CAAC,gBAAgB;YAC1B,OAAO,OAAO,CAAC,eAAe,CAAC,CAAC,EAAE;gBAChC,IAAI,EAAE,cAAc;gBACpB,OAAO,EAAE,uCAAuC;aACjD,CAAC,CAAA;QAEJ,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QAChC,uEAAuE;QACvE,qEAAqE;QACrE,4CAA4C;QAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAA;QACjC,IACE,MAAM;YACN,MAAM,CAAC,IAAI,KAAK,OAAO;YACvB,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;YAE5D,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE;gBACvB,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE,yCAAyC;gBAClD,MAAM,EAAE,GAAG;aACZ,CAAC,CAAA;QACJ,MAAM,SAAS,GAAG,MAAM,EAAE,MAAM,IAAI,aAAa,CAAA;QAEjD,MAAM,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAA;QAC9B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,EAAE,EAAE;gBAC1C,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,GAAG,UAAU,CAAC,CAAC,WAAW,EAAE;gBACpE,SAAS;gBACT,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE;gBACrB,IAAI,EAAE,IAAI,CAAC,IAAI;aAChB,CAAC,CAAA;YACF,aAAa,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAA;YAC1E,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,UAAU,EAAE,mBAAmB,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;QACxF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;QACpC,CAAC;IACH,CAAC,CACF;SACA,GAAG,CACF,iDAAiD,EACjD,IAAI,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAC9B,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EACjC,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE;QACvC,IAAI,EAAE,eAAe;QACrB,OAAO,EAAE,0CAA0C;KACpD,CAAC,EACF,OAAO,CAAC,aAAa,CAAC;QACpB,WAAW,EAAE,iBAAiB;QAC9B,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC;YAC3B,MAAM,EAAE,EAAE,GAAG,EAAE,mDAAmD,EAAE;YACpE,OAAO,EAAE;gBACP,WAAW,EAAE,oCAAoC;gBACjD,MAAM,EAAE,MAAM,CAAC,eAAe,CAAC,QAAQ;aACxC;SACF,CAAC;QACF,OAAO,EAAE,kBAAkB;QAC3B,IAAI,EAAE,CAAC,aAAa,CAAC;KACtB,CAAC,EACF,KAAK,EAAE,CAAC,EAAE,EAAE;QACV,IAAI,IAAI,CAAC,YAAY;YAAE,OAAO,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;QAC3D,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAA;QACnD,IAAI,OAAO,CAAC,gBAAgB;YAC1B,OAAO,OAAO,CAAC,eAAe,CAAC,CAAC,EAAE;gBAChC,IAAI,EAAE,eAAe;gBACrB,OAAO,EAAE,0CAA0C;aACpD,CAAC,CAAA;QAEJ,MAAM,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAA;QAC9B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;YAC/D,OAAO,CAAC,CAAC,IAAI,CACX,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,eAAe,CAAC,QAAQ,EAAE;gBAClD,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;aACvC,CAAC,EACF,GAAG,CACJ,CAAA;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;QACpC,CAAC;IACH,CAAC,CACF;SACA,MAAM,CACL,mFAAmF,EACnF,IAAI,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAC9B,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EACjC,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,gBAAgB,EAAE;QACjD,IAAI,EAAE,eAAe;QACrB,OAAO,EAAE,0CAA0C;KACpD,CAAC,EACF,OAAO,CAAC,aAAa,CAAC;QACpB,WAAW,EAAE,kBAAkB;QAC/B,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC;YAC3B,MAAM,EAAE,EAAE,GAAG,EAAE,yDAAyD,EAAE;YAC1E,OAAO,EAAE;gBACP,WAAW,EAAE,+CAA+C;gBAC5D,MAAM,EAAE,MAAM,CAAC,gBAAgB,CAAC,QAAQ;aACzC;SACF,CAAC;QACF,OAAO,EAAE,mBAAmB;QAC5B,IAAI,EAAE,CAAC,aAAa,CAAC;KACtB,CAAC,EACF,KAAK,EAAE,CAAC,EAAE,EAAE;QACV,IAAI,IAAI,CAAC,YAAY;YAAE,OAAO,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;QAC3D,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAA;QACnD,IAAI,OAAO,CAAC,gBAAgB;YAC1B,OAAO,OAAO,CAAC,eAAe,CAAC,CAAC,EAAE;gBAChC,IAAI,EAAE,eAAe;gBACrB,OAAO,EAAE,0CAA0C;aACpD,CAAC,CAAA;QAEJ,MAAM,EAAE,YAAY,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QAC7C,MAAM,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAA;QAC9B,IAAI,CAAC;YACH,yDAAyD;YACzD,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,EAAE,EAAE,YAAY,CAAC,CAAA;YACtD,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,KAAK,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE;gBAAE,OAAO,kBAAkB,CAAC,CAAC,CAAC,CAAA;YAC5E,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,EAAE,EAAE,YAAY,CAAC,CAAA;YAC1D,IAAI,CAAC,OAAO;gBAAE,OAAO,kBAAkB,CAAC,CAAC,CAAC,CAAA;YAC1C,OAAO,CAAC,CAAC,IAAI,CACX,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,gBAAgB,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,YAAY,EAAE,CAAC,EAC1E,GAAG,CACJ,CAAA;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;QACpC,CAAC;IACH,CAAC,CACF;SACA,GAAG,CACF,iBAAiB,EACjB,IAAI,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAC9B,OAAO,CAAC,aAAa,CAAC;QACpB,WAAW,EAAE,gEAAgE;QAC7E,WAAW,EAAE,mBAAmB;QAChC,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC;YAC3B,OAAO,EAAE;gBACP,WAAW,EAAE,oCAAoC;gBACjD,MAAM,EAAE,MAAM,CAAC,iBAAiB,CAAC,QAAQ;aAC1C;SACF,CAAC;QACF,OAAO,EAAE,qBAAqB;QAC9B,IAAI,EAAE,CAAC,aAAa,CAAC;KACtB,CAAC,EACF,KAAK,EAAE,CAAC,EAAE,EAAE;QACV,IAAI,IAAI,CAAC,YAAY;YAAE,OAAO,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;QAE3D,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;QACtC,IAAI,SAAS,EAAE,IAAI,KAAK,SAAS;YAAE,OAAO,eAAe,CAAC,CAAC,CAAC,CAAA;QAC5D,8DAA8D;QAC9D,IAAI,CAAC,SAAS,CAAC,KAAK;YAClB,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,iBAAiB,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,EAAE,GAAG,CAAC,CAAA;QAEzF,MAAM,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAA;QAC9B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,CAAC,KAAK,CAAC,CAAA;YAClE,OAAO,CAAC,CAAC,IAAI,CACX,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,iBAAiB,CAAC,QAAQ,EAAE;gBACpD,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;oBAC7B,GAAG,mBAAmB,CAAC,MAAM,CAAC;oBAC9B,OAAO,EAAE,MAAM,CAAC,OAAO;iBACxB,CAAC,CAAC;aACJ,CAAC,EACF,GAAG,CACJ,CAAA;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;QACpC,CAAC;IACH,CAAC,CACF;SACA,IAAI,CACH,0DAA0D,EAC1D,IAAI,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAC9B,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,YAAY,EAAE;QAC7C,IAAI,EAAE,eAAe;QACrB,OAAO,EAAE,0CAA0C;KACpD,CAAC,EACF,OAAO,CAAC,aAAa,CAAC;QACpB,WAAW,EAAE,iHAAiH,EAAE,kBAAkB;QAClJ,WAAW,EAAE,kBAAkB;QAC/B,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC;YAC3B,MAAM,EAAE,EAAE,GAAG,EAAE,yDAAyD,EAAE;YAC1E,OAAO,EAAE;gBACP,WAAW,EAAE,sCAAsC;gBACnD,MAAM,EAAE,MAAM,CAAC,gBAAgB,CAAC,QAAQ;aACzC;SACF,CAAC;QACF,OAAO,EAAE,mBAAmB;QAC5B,IAAI,EAAE,CAAC,aAAa,CAAC;KACtB,CAAC,EACF,KAAK,EAAE,CAAC,EAAE,EAAE;QACV,IAAI,IAAI,CAAC,YAAY;YAAE,OAAO,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;QAC3D,IAAI,OAAO,CAAC,gBAAgB;YAC1B,OAAO,OAAO,CAAC,eAAe,CAAC,CAAC,EAAE;gBAChC,IAAI,EAAE,eAAe;gBACrB,OAAO,EAAE,0CAA0C;aACpD,CAAC,CAAA;QAEJ,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;QACtC,IAAI,SAAS,EAAE,IAAI,KAAK,SAAS;YAAE,OAAO,eAAe,CAAC,CAAC,CAAC,CAAA;QAE5D,MAAM,EAAE,YAAY,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QAC7C,MAAM,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAA;QAC9B,IAAI,CAAC;YACH,qEAAqE;YACrE,0BAA0B;YAC1B,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,EAAE,EAAE,YAAY,CAAC,CAAA;YACtD,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,KAAK,EAAE,WAAW,EAAE;gBAC5D,OAAO,kBAAkB,CAAC,CAAC,CAAC,CAAA;YAC9B,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,EAAE,EAAE,YAAY,EAAE,SAAS,CAAC,EAAE,CAAC,CAAA;YACzE,IAAI,CAAC,QAAQ;gBAAE,OAAO,kBAAkB,CAAC,CAAC,CAAC,CAAA;YAC3C,MAAM,UAAU,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,EAAE,EAAE,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,CAAC,CAAA;YAC1E,OAAO,CAAC,CAAC,IAAI,CACX,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,gBAAgB,CAAC,QAAQ,EAAE;gBACnD,KAAK,EAAE,QAAQ,CAAC,KAAK;gBACrB,IAAI,EAAE,UAAU,EAAE,IAAI,IAAI,QAAQ,CAAC,IAAI;gBACvC,MAAM,EAAE,SAAS,CAAC,EAAE;aACrB,CAAC,EACF,GAAG,CACJ,CAAA;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;QACpC,CAAC;IACH,CAAC,CACF,CAAA;AACL,CAAC;AAED,6EAA6E;AAC7E,SAAS,aAAa,CACpB,CAAuB,EACvB,OAA8E;IAE9E,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,CAAA;IAC9C,IAAI,CAAC,MAAM;QAAE,OAAM;IACnB,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,UAAU,CAAC,CAAC,CAAA;IAC9F,MAAM,MAAM,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI,OAAO,CAAA;IACpD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,UAAU,IAAI,2BAA2B,CAAC,CAAA;IACtE,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAA;IAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAA;IACrB,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAC9B,MAAM,CAAC,IAAI,CAAC;QACV,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,IAAI,EAAE,0CAA0C,UAAU,CAAC,GAAG,CAAC,uEAAuE,GAAG,KAAK,GAAG,8CAA8C,MAAM,OAAO;QAC5M,OAAO,EAAE,0BAA0B,GAAG,kCAAkC;QACxE,IAAI,EAAE,+BAA+B,GAAG,kDAAkD,GAAG,0CAA0C,MAAM,GAAG;QAChJ,EAAE,EAAE,MAAM,CAAC,KAAK;KACjB,CAAC,CACH,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,kCAAkC,EAAE,KAAK,CAAC,CAAC,CAAA;IAC5E,IAAI,CAAC;QACH,CAAC,CAAC,YAAY,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAA;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,gEAAgE;IAClE,CAAC;AACH,CAAC;AAED,qDAAqD;AACrD,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,IAAI;SACR,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC;SACxB,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC;SACvB,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC;SACvB,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;AAC9B,CAAC;AAED,oEAAoE;AACpE,SAAS,mBAAmB,CAAC,MAA0B;IACrD,OAAO;QACL,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,IAAI,EAAE,MAAM,CAAC,IAAI;KAClB,CAAA;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,CAAuB;IACjD,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE;QACvB,IAAI,EAAE,sBAAsB;QAC5B,OAAO,EAAE,sBAAsB;QAC/B,MAAM,EAAE,GAAG;KACZ,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,CAAuB;IAC9C,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE;QACvB,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE,kBAAkB;QAC3B,MAAM,EAAE,GAAG;KACZ,CAAC,CAAA;AACJ,CAAC"}

package/dist/apps/platform/routes/me.d.ts

@@ -0,0 +1,95 @@
+import * as z from 'zod/mini';
+import type * as App from '../../../App.js';
+import * as Response from '../../../internal/Response.js';
+/** Zod schemas owned by the current-user resource. */
+export declare namespace schema {
+    /** The signed-in developer. */
+    const User: z.ZodMiniObject<{
+        address: z.ZodMiniOptional<z.ZodMiniString<string>>;
+        createdAt: z.ZodMiniString<string>;
+        email: z.ZodMiniOptional<z.ZodMiniString<string>>;
+        id: z.ZodMiniString<string>;
+        updatedAt: z.ZodMiniString<string>;
+    }, z.core.$strip>;
+}
+/**
+ * Mounts the `/me` resource: the session's user. Session lane only — API keys
+ * identify workloads, not developers.
+ */
+export declare function me(): import("hono/hono-base").HonoBase<App.Environment, {
+    "/v1/me": {
+        $get: {
+            output: {
+                error: {
+                    code: "api_key_malformed";
+                    details?: readonly Response.error.Detail[] | undefined;
+                    message: string;
+                };
+                requestId: string;
+            };
+            outputFormat: "json";
+            status: 400;
+            input: {};
+        } | {
+            output: {
+                error: {
+                    code: "api_key_invalid" | "api_key_missing";
+                    details?: readonly Response.error.Detail[] | undefined;
+                    message: string;
+                };
+                requestId: string;
+            };
+            outputFormat: "json";
+            status: 401;
+            input: {};
+        } | {
+            output: {
+                error: {
+                    code: "upstream_error";
+                    details?: readonly Response.error.Detail[] | undefined;
+                    message: string;
+                };
+                requestId: string;
+            };
+            outputFormat: "json";
+            status: 502;
+            input: {};
+        } | {
+            output: {
+                error: {
+                    code: "forbidden";
+                    details?: readonly Response.error.Detail[] | undefined;
+                    message: string;
+                };
+                requestId: string;
+            };
+            outputFormat: "json";
+            status: 403;
+            input: {};
+        } | {
+            output: {
+                error: {
+                    code: "user_not_found";
+                    details?: readonly Response.error.Detail[] | undefined;
+                    message: string;
+                };
+                requestId: string;
+            };
+            outputFormat: "json";
+            status: 404;
+            input: {};
+        } | {
+            output: {
+                address?: string | undefined;
+                createdAt: string;
+                email?: string | undefined;
+                id: string;
+                updatedAt: string;
+            };
+            outputFormat: "json";
+            status: 200;
+            input: {};
+        };
+    };
+}, "/", "/v1/me">;
+//# sourceMappingURL=me.d.ts.map

package/dist/apps/platform/routes/me.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"me.d.ts","sourceRoot":"","sources":["../../../../src/apps/platform/routes/me.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,CAAC,MAAM,UAAU,CAAA;AAE7B,OAAO,KAAK,KAAK,GAAG,MAAM,iBAAiB,CAAA;AAI3C,OAAO,KAAK,QAAQ,MAAM,+BAA+B,CAAA;AAIzD,sDAAsD;AACtD,yBAAiB,MAAM,CAAC;IACtB,+BAA+B;IACxB,MAAM,IAAI;;;;;;qBA+BhB,CAAA;CACF;AAED;;;GAGG;AACH,wBAAgB,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAqDjB"}

package/dist/apps/platform/routes/me.js

@@ -0,0 +1,81 @@
+import { Hono } from 'hono';
+import * as z from 'zod/mini';
+import * as Auth from '../../../internal/Auth.js';
+import * as Db from '../../../db/Db.js';
+import * as OpenApi from '../../../internal/OpenApi.js';
+import * as Response from '../../../internal/Response.js';
+import * as Schema from '../../../internal/Schema.js';
+import * as Users from '../../../db/tables/users.js';
+/** Zod schemas owned by the current-user resource. */
+export var schema;
+(function (schema) {
+    /** The signed-in developer. */
+    schema.User = Schema.describe(z.object({
+        address: z
+            .optional(z.string())
+            .check(z.describe('Wallet address bound to this user, when wallet sign-in established it.'), z.meta({ examples: ['0x0000000000000000000000000000000000000001'] })),
+        createdAt: z
+            .string()
+            .check(z.describe('When the user was created (ISO 8601).'), z.meta({ examples: ['2026-01-01T00:00:00.000Z'] })),
+        email: z
+            .optional(z.string())
+            .check(z.describe('Verified email from the wallet identity token, when present.')),
+        id: z
+            .string()
+            .check(z.describe('Opaque user id (`usr_…`).'), z.meta({ examples: ['usr_1a2b3c4d5e6f7g8h9j0k1m2n'] })),
+        updatedAt: z
+            .string()
+            .check(z.describe('When the user was last updated (ISO 8601).'), z.meta({ examples: ['2026-01-01T00:00:00.000Z'] })),
+    }), 'The signed-in developer.');
+})(schema || (schema = {}));
+/**
+ * Mounts the `/me` resource: the session's user. Session lane only — API keys
+ * identify workloads, not developers.
+ */
+export function me() {
+    return new Hono().get('/v1/me', Auth.policy({ session: true }), OpenApi.describeRoute({
+        operationId: 'getMe',
+        responses: OpenApi.responses({
+            errors: {
+                403: 'The caller is not a signed-in user.',
+                404: 'No user exists for this session.',
+            },
+            success: { description: 'The authenticated user.', schema: schema.User },
+        }),
+        summary: 'Get current user',
+        tags: ['Users'],
+    }), async (c) => {
+        if (Auth.narrowAccess)
+            return Auth.superAdminAccessError(c);
+        // The session lane is the only lane here; `super_admin` bypasses lanes
+        // but has no user row, so it is rejected too.
+        const principal = Auth.getPrincipal(c);
+        if (principal?.type !== 'session')
+            return Response.error(c, {
+                code: 'forbidden',
+                message: 'Session required',
+                status: 403,
+            });
+        const db = Db.get(c.get('db'));
+        try {
+            const user = await Users.get(db, principal.id);
+            if (!user)
+                return Response.error(c, {
+                    code: 'user_not_found',
+                    message: 'User not found',
+                    status: 404,
+                });
+            return c.json(Response.validated(schema.User, {
+                ...(user.address ? { address: user.address } : {}),
+                createdAt: user.createdAt,
+                ...(user.email ? { email: user.email } : {}),
+                id: user.id,
+                updatedAt: user.updatedAt,
+            }), 200);
+        }
+        catch (cause) {
+            return Response.upstream(c, cause);
+        }
+    });
+}
+//# sourceMappingURL=me.js.map

package/dist/apps/platform/routes/me.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"me.js","sourceRoot":"","sources":["../../../../src/apps/platform/routes/me.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAC3B,OAAO,KAAK,CAAC,MAAM,UAAU,CAAA;AAG7B,OAAO,KAAK,IAAI,MAAM,2BAA2B,CAAA;AACjD,OAAO,KAAK,EAAE,MAAM,mBAAmB,CAAA;AACvC,OAAO,KAAK,OAAO,MAAM,8BAA8B,CAAA;AACvD,OAAO,KAAK,QAAQ,MAAM,+BAA+B,CAAA;AACzD,OAAO,KAAK,MAAM,MAAM,6BAA6B,CAAA;AACrD,OAAO,KAAK,KAAK,MAAM,6BAA6B,CAAA;AAEpD,sDAAsD;AACtD,MAAM,KAAW,MAAM,CAkCtB;AAlCD,WAAiB,MAAM;IACrB,+BAA+B;IAClB,WAAI,GAAG,MAAM,CAAC,QAAQ,CACjC,CAAC,CAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;aACP,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;aACpB,KAAK,CACJ,CAAC,CAAC,QAAQ,CAAC,wEAAwE,CAAC,EACpF,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,4CAA4C,CAAC,EAAE,CAAC,CACrE;QACH,SAAS,EAAE,CAAC;aACT,MAAM,EAAE;aACR,KAAK,CACJ,CAAC,CAAC,QAAQ,CAAC,uCAAuC,CAAC,EACnD,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,0BAA0B,CAAC,EAAE,CAAC,CACnD;QACH,KAAK,EAAE,CAAC;aACL,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;aACpB,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,8DAA8D,CAAC,CAAC;QACpF,EAAE,EAAE,CAAC;aACF,MAAM,EAAE;aACR,KAAK,CACJ,CAAC,CAAC,QAAQ,CAAC,2BAA2B,CAAC,EACvC,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,8BAA8B,CAAC,EAAE,CAAC,CACvD;QACH,SAAS,EAAE,CAAC;aACT,MAAM,EAAE;aACR,KAAK,CACJ,CAAC,CAAC,QAAQ,CAAC,4CAA4C,CAAC,EACxD,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,0BAA0B,CAAC,EAAE,CAAC,CACnD;KACJ,CAAC,EACF,0BAA0B,CAC3B,CAAA;AACH,CAAC,EAlCgB,MAAM,KAAN,MAAM,QAkCtB;AAED;;;GAGG;AACH,MAAM,UAAU,EAAE;IAChB,OAAO,IAAI,IAAI,EAAmB,CAAC,GAAG,CACpC,QAAQ,EACR,IAAI,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAC9B,OAAO,CAAC,aAAa,CAAC;QACpB,WAAW,EAAE,OAAO;QACpB,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC;YAC3B,MAAM,EAAE;gBACN,GAAG,EAAE,qCAAqC;gBAC1C,GAAG,EAAE,kCAAkC;aACxC;YACD,OAAO,EAAE,EAAE,WAAW,EAAE,yBAAyB,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE;SACzE,CAAC;QACF,OAAO,EAAE,kBAAkB;QAC3B,IAAI,EAAE,CAAC,OAAO,CAAC;KAChB,CAAC,EACF,KAAK,EAAE,CAAC,EAAE,EAAE;QACV,IAAI,IAAI,CAAC,YAAY;YAAE,OAAO,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;QAE3D,uEAAuE;QACvE,8CAA8C;QAC9C,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;QACtC,IAAI,SAAS,EAAE,IAAI,KAAK,SAAS;YAC/B,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE;gBACvB,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE,kBAAkB;gBAC3B,MAAM,EAAE,GAAG;aACZ,CAAC,CAAA;QAEJ,MAAM,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAA;QAC9B,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,CAAC,EAAE,CAAC,CAAA;YAC9C,IAAI,CAAC,IAAI;gBACP,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE;oBACvB,IAAI,EAAE,gBAAgB;oBACtB,OAAO,EAAE,gBAAgB;oBACzB,MAAM,EAAE,GAAG;iBACZ,CAAC,CAAA;YACJ,OAAO,CAAC,CAAC,IAAI,CACX,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE;gBAC9B,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClD,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC5C,EAAE,EAAE,IAAI,CAAC,EAAE;gBACX,SAAS,EAAE,IAAI,CAAC,SAAS;aAC1B,CAAC,EACF,GAAG,CACJ,CAAA;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;QACpC,CAAC;IACH,CAAC,CACF,CAAA;AACH,CAAC"}