@anby/platform-sdk 0.1.0 → 0.7.0

package/dist/cjs/bootstrap/index.js

@@ -0,0 +1,280 @@
+"use strict";
+/**
+ * Third-party app bootstrap (PLAN-app-bootstrap.md PR2).
+ *
+ * `bootstrapFromToken({ appToken })` is the SINGLE platform-init call a
+ * third-party app needs at boot. Given a connection-string token, it:
+ *
+ *   1. Parses the token (sync, no network) → appId, platformUrl, privateKey
+ *   2. Fetches GET ${platformUrl}/registry/discovery (cached on success)
+ *   3. Fetches GET ${endpoints.authPublicKeyUrl} (the user JWT verification key)
+ *   4. Configures the SDK's auth, platform, and entity-identity layers
+ *   5. Schedules a background refresh at 80% of cacheTtlSeconds
+ *
+ * After this returns, the app can use `requireAuth()`, `verifyUserJwt()`,
+ * `publishEvent()`, the entity client, etc. exactly as if it had been
+ * configured via the legacy env-based path.
+ *
+ * Cache: discovery is cached to disk so cold starts survive a brief
+ * registry outage. The token itself is NOT cached — it lives in the env
+ * var. Cached entries are per-app and contain only public information
+ * (URLs and the auth public key PEM, no secrets).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ANBY_TOKEN_PREFIX = void 0;
+exports._resetBootstrapForTests = _resetBootstrapForTests;
+exports.getDiscoveredEndpoints = getDiscoveredEndpoints;
+exports.getDiscoveredRegistryBaseUrl = getDiscoveredRegistryBaseUrl;
+exports.parseAppToken = parseAppToken;
+exports.bootstrapFromToken = bootstrapFromToken;
+const index_js_1 = require("../auth/index.js");
+const index_js_2 = require("../config/index.js");
+const identity_js_1 = require("../entities/identity.js");
+const index_js_3 = require("../events/index.js");
+const http_transport_js_1 = require("../events/http-transport.js");
+const cache_js_1 = require("./cache.js");
+const types_js_1 = require("./types.js");
+Object.defineProperty(exports, "ANBY_TOKEN_PREFIX", { enumerable: true, get: function () { return types_js_1.ANBY_TOKEN_PREFIX; } });
+let _state = null;
+/** For tests: clears the module-level bootstrap state so a fresh
+ *  bootstrapFromToken call re-runs from scratch. Not exported from the
+ *  root barrel. */
+function _resetBootstrapForTests() {
+    _state = null;
+}
+/**
+ * Returns the discovery response cached by the most recent successful
+ * bootstrapFromToken call. Throws if bootstrap has not yet started.
+ *
+ * Resolves the in-progress promise if bootstrap is still in flight, so
+ * callers can `await getDiscoveredEndpoints()` from anywhere safely.
+ */
+async function getDiscoveredEndpoints() {
+    if (!_state) {
+        throw new Error('bootstrap not started — call bootstrapFromToken() before reading discovery state');
+    }
+    await _state.promise;
+    if (!_state.discovery) {
+        throw new Error('bootstrap completed but no discovery cached');
+    }
+    return _state.discovery.endpoints;
+}
+/**
+ * Returns the registry HOST root (e.g. "http://localhost:3003"), without
+ * the /registry path suffix. Use this for callers that already append
+ * /registry/... themselves (autoPublishOnBoot, RegistryPublicKeyVerifier).
+ *
+ * Falls back to discovery.endpoints.registryUrl with /registry stripped
+ * if the registryBaseUrl field is missing (older registries that haven't
+ * deployed PR3 yet).
+ */
+async function getDiscoveredRegistryBaseUrl() {
+    const endpoints = await getDiscoveredEndpoints();
+    if (endpoints.registryBaseUrl)
+        return endpoints.registryBaseUrl;
+    // Backward compat: strip /registry suffix from registryUrl.
+    return endpoints.registryUrl.replace(/\/registry\/?$/, '');
+}
+/**
+ * Parse an `anby_v1_<base64json>` token. Throws on malformed input.
+ *
+ * Sync, no network. Validates structure but does NOT verify the
+ * Ed25519 private key against any server — that happens later when the
+ * SDK tries to mint a scoped-token.
+ */
+function parseAppToken(token) {
+    if (!token || typeof token !== 'string') {
+        throw new Error('ANBY_APP_TOKEN is empty');
+    }
+    if (!token.startsWith(types_js_1.ANBY_TOKEN_PREFIX)) {
+        throw new Error(`ANBY_APP_TOKEN must start with "${types_js_1.ANBY_TOKEN_PREFIX}". Did you paste the right value?`);
+    }
+    const b64 = token.slice(types_js_1.ANBY_TOKEN_PREFIX.length);
+    let json;
+    try {
+        json = Buffer.from(b64, 'base64url').toString('utf-8');
+    }
+    catch (err) {
+        throw new Error(`ANBY_APP_TOKEN payload is not valid base64url: ${err.message}`);
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(json);
+    }
+    catch (err) {
+        throw new Error(`ANBY_APP_TOKEN payload is not valid JSON: ${err.message}`);
+    }
+    const obj = parsed;
+    if (obj?.v !== 1 ||
+        typeof obj.appId !== 'string' ||
+        typeof obj.platformUrl !== 'string' ||
+        typeof obj.privateKey !== 'string') {
+        throw new Error('ANBY_APP_TOKEN payload missing required fields (v, appId, platformUrl, privateKey)');
+    }
+    if (!obj.privateKey.includes('PRIVATE KEY')) {
+        throw new Error('ANBY_APP_TOKEN.privateKey is not a PEM');
+    }
+    return {
+        v: 1,
+        appId: obj.appId,
+        platformUrl: obj.platformUrl.replace(/\/$/, ''),
+        privateKey: obj.privateKey,
+    };
+}
+async function fetchDiscovery(platformUrl, fetchImpl) {
+    const url = `${platformUrl}/registry/discovery`;
+    const res = await fetchImpl(url, { headers: { accept: 'application/json' } });
+    if (!res.ok) {
+        throw new Error(`discovery fetch failed: ${res.status} ${res.statusText}`);
+    }
+    const body = (await res.json());
+    if (body?.v !== 1 || !body?.endpoints?.authPublicKeyUrl) {
+        throw new Error('discovery response is missing required fields');
+    }
+    return body;
+}
+async function fetchAuthPublicKey(url, fetchImpl) {
+    const res = await fetchImpl(url, { headers: { accept: 'text/plain' } });
+    if (!res.ok) {
+        throw new Error(`auth-public-key fetch failed: ${res.status} ${res.statusText}`);
+    }
+    const pem = await res.text();
+    // CRITICAL leak check FIRST: a buggy auth-service that accidentally
+    // serves a private key on this endpoint must be rejected loudly,
+    // before any other validation that might mask the security finding.
+    if (pem.includes('PRIVATE KEY')) {
+        throw new Error('auth-public-key endpoint returned PRIVATE KEY material — refusing to use it');
+    }
+    if (!pem.includes('BEGIN PUBLIC KEY')) {
+        throw new Error('auth-public-key response is not a PEM public key');
+    }
+    return pem;
+}
+/**
+ * The single bootstrap entrypoint a third-party app calls at boot.
+ *
+ * Idempotent: if called multiple times in the same process (e.g. once
+ * from entry.server.tsx and again from a refresh timer), the second call
+ * returns the same in-flight promise instead of starting a parallel
+ * bootstrap.
+ *
+ * @example
+ * ```ts
+ * import { bootstrapFromToken, requireAuth } from '@anby/platform-sdk';
+ *
+ * await bootstrapFromToken({ appToken: process.env.ANBY_APP_TOKEN! });
+ *
+ * app.get('/api/widgets', requireAuth(), handler);
+ * ```
+ */
+function bootstrapFromToken(opts) {
+    // PLAN-app-bootstrap-phase2 PR3: dedupe concurrent calls. Multiple
+    // entry points (entry.server, autoPublishOnBoot, refresh timer) can
+    // all await the same shared promise without spawning parallel work.
+    if (_state)
+        return _state.promise;
+    _state = {
+        promise: doBootstrap(opts).catch((err) => {
+            // Failed bootstrap clears state so the next call retries.
+            _state = null;
+            throw err;
+        }),
+    };
+    return _state.promise;
+}
+async function doBootstrap(opts) {
+    const fetchImpl = opts.fetchImpl ?? globalThis.fetch;
+    if (!fetchImpl) {
+        throw new Error('No fetch implementation available. Pass opts.fetchImpl or run on Node 18+.');
+    }
+    const cacheDir = opts.cacheDir ?? `${process.cwd()}/.anby-cache`;
+    // 1. Parse the token (sync, no network)
+    const token = parseAppToken(opts.appToken);
+    if (_state)
+        _state.appToken = token;
+    // 2. Try fetching fresh discovery + auth public key. Fall back to disk
+    //    cache if the network is unreachable on cold start.
+    let discovery;
+    let authPublicKeyPem;
+    let usedCache = false;
+    try {
+        discovery = await fetchDiscovery(token.platformUrl, fetchImpl);
+        authPublicKeyPem = await fetchAuthPublicKey(discovery.endpoints.authPublicKeyUrl, fetchImpl);
+    }
+    catch (fetchErr) {
+        const cached = await (0, cache_js_1.readCache)(cacheDir, token.appId);
+        if (!cached) {
+            throw new Error(`bootstrap failed and no cache available: ${fetchErr.message}`);
+        }
+        discovery = cached.discovery;
+        authPublicKeyPem = cached.authPublicKeyPem;
+        usedCache = true;
+    }
+    // Cache discovery into the shared module state so other modules can
+    // read it via getDiscoveredEndpoints() / getDiscoveredRegistryBaseUrl().
+    if (_state)
+        _state.discovery = discovery;
+    // 3. Configure SDK subsystems
+    (0, index_js_1.configureAuth)({ jwtPublicKey: authPublicKeyPem });
+    (0, index_js_2.configurePlatform)({
+        appId: token.appId,
+        registryUrl: discovery.endpoints.registryUrl,
+    });
+    (0, identity_js_1.configureAppIdentity)({
+        appId: token.appId,
+        privateKeyPem: token.privateKey,
+    });
+    // PLAN-app-bootstrap-phase2 PR3: auto-wire HttpEventTransport so dev
+    // calls to publishEvent() work without any manual configuration. The
+    // events endpoint URL comes from discovery — fall back to deriving it
+    // from registryBaseUrl if older discovery responses lack the explicit
+    // eventsUrl field.
+    const eventsUrl = discovery.endpoints.eventsUrl ??
+        `${discovery.endpoints.registryBaseUrl ?? discovery.endpoints.registryUrl.replace(/\/registry\/?$/, '')}/registry/events`;
+    (0, index_js_3.configureEventTransport)(new http_transport_js_1.HttpEventTransport({
+        endpoint: eventsUrl,
+        identity: { appId: token.appId, privateKeyPem: token.privateKey },
+    }));
+    // 4. Persist to cache (only on successful network fetch — don't
+    //    overwrite a fresh cache with a stale-cache value)
+    if (!usedCache) {
+        const fetchedAt = new Date();
+        const staleAt = new Date(fetchedAt.getTime() + discovery.cacheTtlSeconds * 1000);
+        const entry = {
+            fetchedAt: fetchedAt.toISOString(),
+            staleAt: staleAt.toISOString(),
+            discovery,
+            authPublicKeyPem,
+        };
+        try {
+            await (0, cache_js_1.writeCache)(cacheDir, token.appId, entry);
+        }
+        catch (err) {
+            // Cache write failure is non-fatal. The SDK still works in memory;
+            // the next cold start just can't use the disk fallback.
+            console.warn(`[anby] failed to write bootstrap cache: ${err.message}`);
+        }
+    }
+    // 5. Schedule background refresh at 80% of TTL.
+    const refreshInMs = Math.max(60_000, discovery.cacheTtlSeconds * 1000 * 0.8);
+    scheduleRefresh(opts, refreshInMs);
+}
+/**
+ * Background refresh loop. Re-runs bootstrapFromToken at the scheduled
+ * interval. On failure, logs and keeps using the existing in-memory
+ * config — there's no degraded mode because the data we cache (URLs +
+ * public key) is not security-critical and can be stale.
+ */
+function scheduleRefresh(opts, delayMs) {
+    const handle = setTimeout(() => {
+        bootstrapFromToken(opts).catch((err) => {
+            console.warn(`[anby] bootstrap refresh failed: ${err.message} (will retry on next interval)`);
+            // Re-schedule with the same delay even on failure.
+            scheduleRefresh(opts, delayMs);
+        });
+    }, delayMs);
+    // Don't keep the event loop alive just for refresh.
+    if (typeof handle.unref === 'function')
+        handle.unref();
+}
+//# sourceMappingURL=index.js.map

package/dist/cjs/bootstrap/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/bootstrap/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;;;AAmCH,0DAEC;AASD,wDAaC;AAWD,oEAKC;AAiBD,sCAkDC;AA4DD,gDAaC;AArND,+CAAiD;AACjD,iDAAuD;AACvD,yDAA+D;AAC/D,iDAA6D;AAC7D,mEAAiE;AACjE,yCAAmD;AACnD,yCAKoB;AAEX,kGANP,4BAAiB,OAMO;AAe1B,IAAI,MAAM,GAA0B,IAAI,CAAC;AAEzC;;mBAEmB;AACnB,SAAgB,uBAAuB;IACrC,MAAM,GAAG,IAAI,CAAC;AAChB,CAAC;AAED;;;;;;GAMG;AACI,KAAK,UAAU,sBAAsB;IAG1C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,kFAAkF,CACnF,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,CAAC,OAAO,CAAC;IACrB,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC;AACpC,CAAC;AAED;;;;;;;;GAQG;AACI,KAAK,UAAU,4BAA4B;IAChD,MAAM,SAAS,GAAG,MAAM,sBAAsB,EAAE,CAAC;IACjD,IAAI,SAAS,CAAC,eAAe;QAAE,OAAO,SAAS,CAAC,eAAe,CAAC;IAChE,4DAA4D;IAC5D,OAAO,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;AAC7D,CAAC;AAUD;;;;;;GAMG;AACH,SAAgB,aAAa,CAAC,KAAa;IACzC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,4BAAiB,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CACb,mCAAmC,4BAAiB,mCAAmC,CACxF,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,4BAAiB,CAAC,MAAM,CAAC,CAAC;IAElD,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACzD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,kDAAmD,GAAa,CAAC,OAAO,EAAE,CAC3E,CAAC;IACJ,CAAC;IAED,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,6CAA8C,GAAa,CAAC,OAAO,EAAE,CACtE,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,MAA+B,CAAC;IAC5C,IACE,GAAG,EAAE,CAAC,KAAK,CAAC;QACZ,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ;QAC7B,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ;QACnC,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,EAClC,CAAC;QACD,MAAM,IAAI,KAAK,CACb,oFAAoF,CACrF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IAED,OAAO;QACL,CAAC,EAAE,CAAC;QACJ,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,WAAW,EAAE,GAAG,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;QAC/C,UAAU,EAAE,GAAG,CAAC,UAAU;KAC3B,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,WAAmB,EACnB,SAAuB;IAEvB,MAAM,GAAG,GAAG,GAAG,WAAW,qBAAqB,CAAC;IAChD,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,EAAE,CAAC,CAAC;IAC9E,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,2BAA2B,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAsB,CAAC;IACrD,IAAI,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,gBAAgB,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,GAAW,EACX,SAAuB;IAEvB,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE,CAAC,CAAC;IACxE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,iCAAiC,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,CAChE,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC7B,oEAAoE;IACpE,iEAAiE;IACjE,oEAAoE;IACpE,IAAI,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CACb,6EAA6E,CAC9E,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,SAAgB,kBAAkB,CAAC,IAAsB;IACvD,mEAAmE;IACnE,oEAAoE;IACpE,oEAAoE;IACpE,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC;IAClC,MAAM,GAAG;QACP,OAAO,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACvC,0DAA0D;YAC1D,MAAM,GAAG,IAAI,CAAC;YACd,MAAM,GAAG,CAAC;QACZ,CAAC,CAAC;KACH,CAAC;IACF,OAAO,MAAM,CAAC,OAAO,CAAC;AACxB,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,IAAsB;IAC/C,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,UAAU,CAAC,KAAK,CAAC;IACrD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,4EAA4E,CAC7E,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE,cAAc,CAAC;IAEjE,wCAAwC;IACxC,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC3C,IAAI,MAAM;QAAE,MAAM,CAAC,QAAQ,GAAG,KAAK,CAAC;IAEpC,uEAAuE;IACvE,wDAAwD;IACxD,IAAI,SAA4B,CAAC;IACjC,IAAI,gBAAwB,CAAC;IAC7B,IAAI,SAAS,GAAG,KAAK,CAAC;IAEtB,IAAI,CAAC;QACH,SAAS,GAAG,MAAM,cAAc,CAAC,KAAK,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QAC/D,gBAAgB,GAAG,MAAM,kBAAkB,CACzC,SAAS,CAAC,SAAS,CAAC,gBAAgB,EACpC,SAAS,CACV,CAAC;IACJ,CAAC;IAAC,OAAO,QAAQ,EAAE,CAAC;QAClB,MAAM,MAAM,GAAG,MAAM,IAAA,oBAAS,EAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QACtD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CACb,4CAA6C,QAAkB,CAAC,OAAO,EAAE,CAC1E,CAAC;QACJ,CAAC;QACD,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;QAC7B,gBAAgB,GAAG,MAAM,CAAC,gBAAgB,CAAC;QAC3C,SAAS,GAAG,IAAI,CAAC;IACnB,CAAC;IAED,oEAAoE;IACpE,yEAAyE;IACzE,IAAI,MAAM;QAAE,MAAM,CAAC,SAAS,GAAG,SAAS,CAAC;IAEzC,8BAA8B;IAC9B,IAAA,wBAAa,EAAC,EAAE,YAAY,EAAE,gBAAgB,EAAE,CAAC,CAAC;IAClD,IAAA,4BAAiB,EAAC;QAChB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,WAAW,EAAE,SAAS,CAAC,SAAS,CAAC,WAAW;KAC7C,CAAC,CAAC;IACH,IAAA,kCAAoB,EAAC;QACnB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,aAAa,EAAE,KAAK,CAAC,UAAU;KAChC,CAAC,CAAC;IAEH,qEAAqE;IACrE,qEAAqE;IACrE,sEAAsE;IACtE,sEAAsE;IACtE,mBAAmB;IACnB,MAAM,SAAS,GACb,SAAS,CAAC,SAAS,CAAC,SAAS;QAC7B,GAAG,SAAS,CAAC,SAAS,CAAC,eAAe,IAAI,SAAS,CAAC,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,kBAAkB,CAAC;IAC5H,IAAA,kCAAuB,EACrB,IAAI,sCAAkB,CAAC;QACrB,QAAQ,EAAE,SAAS;QACnB,QAAQ,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,aAAa,EAAE,KAAK,CAAC,UAAU,EAAE;KAClE,CAAC,CACH,CAAC;IAEF,gEAAgE;IAChE,uDAAuD;IACvD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,SAAS,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC;QACjF,MAAM,KAAK,GAAoB;YAC7B,SAAS,EAAE,SAAS,CAAC,WAAW,EAAE;YAClC,OAAO,EAAE,OAAO,CAAC,WAAW,EAAE;YAC9B,SAAS;YACT,gBAAgB;SACjB,CAAC;QACF,IAAI,CAAC;YACH,MAAM,IAAA,qBAAU,EAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACjD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,mEAAmE;YACnE,wDAAwD;YACxD,OAAO,CAAC,IAAI,CACV,2CAA4C,GAAa,CAAC,OAAO,EAAE,CACpE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,gDAAgD;IAChD,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,eAAe,GAAG,IAAI,GAAG,GAAG,CAAC,CAAC;IAC7E,eAAe,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;AACrC,CAAC;AAED;;;;;GAKG;AACH,SAAS,eAAe,CAAC,IAAsB,EAAE,OAAe;IAC9D,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,EAAE;QAC7B,kBAAkB,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACrC,OAAO,CAAC,IAAI,CACV,oCAAqC,GAAa,CAAC,OAAO,gCAAgC,CAC3F,CAAC;YACF,mDAAmD;YACnD,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;IACL,CAAC,EAAE,OAAO,CAAC,CAAC;IACZ,oDAAoD;IACpD,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,UAAU;QAAE,MAAM,CAAC,KAAK,EAAE,CAAC;AACzD,CAAC"}

package/dist/cjs/bootstrap/types.d.ts

@@ -0,0 +1,53 @@
+/**
+ * Types for the third-party app bootstrap flow
+ * (PLAN-app-bootstrap.md PR2).
+ *
+ * `AnbyAppToken` is the parsed payload of the `ANBY_APP_TOKEN` env var.
+ * The wire format is `anby_v1_<base64url(json(AnbyAppToken))>`.
+ *
+ * `DiscoveryResponse` is what `GET /registry/discovery` returns.
+ */
+export declare const ANBY_TOKEN_PREFIX = "anby_v1_";
+export interface AnbyAppToken {
+    v: 1;
+    appId: string;
+    /** Externally-reachable platform base URL, e.g. "https://anby.io". */
+    platformUrl: string;
+    /** PEM-encoded Ed25519 private key for service-to-service signing. */
+    privateKey: string;
+}
+export interface DiscoveryResponse {
+    v: 1;
+    platform: {
+        name: string;
+        version: string;
+    };
+    endpoints: {
+        authPublicKeyUrl: string;
+        scopedTokenUrl: string;
+        entityTokenPublicKeyUrl: string;
+        /** PR1 of phase2: events ingestion endpoint. Optional for back-compat
+         *  with older registries that don't expose it yet. */
+        eventsUrl?: string;
+        gatewayUrl: string;
+        /** Registry HTTP API root with /registry suffix already appended.
+         *  Existing callers expect this exact shape. */
+        registryUrl: string;
+        /** PR3 of phase2: registry HOST root WITHOUT /registry suffix.
+         *  Optional for back-compat with older registries. */
+        registryBaseUrl?: string;
+        tenantServiceUrl: string;
+        eventRouterUrl: string;
+    };
+    cacheTtlSeconds: number;
+}
+export interface CachedBootstrap {
+    /** When the discovery response was fetched (ISO 8601). */
+    fetchedAt: string;
+    /** When this cache entry should be considered stale (ISO 8601). */
+    staleAt: string;
+    discovery: DiscoveryResponse;
+    /** PEM string of the auth-service public key (RS256). */
+    authPublicKeyPem: string;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/cjs/bootstrap/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/bootstrap/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,eAAO,MAAM,iBAAiB,aAAa,CAAC;AAE5C,MAAM,WAAW,YAAY;IAC3B,CAAC,EAAE,CAAC,CAAC;IACL,KAAK,EAAE,MAAM,CAAC;IACd,sEAAsE;IACtE,WAAW,EAAE,MAAM,CAAC;IACpB,sEAAsE;IACtE,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,iBAAiB;IAChC,CAAC,EAAE,CAAC,CAAC;IACL,QAAQ,EAAE;QACR,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,SAAS,EAAE;QACT,gBAAgB,EAAE,MAAM,CAAC;QACzB,cAAc,EAAE,MAAM,CAAC;QACvB,uBAAuB,EAAE,MAAM,CAAC;QAChC;8DACsD;QACtD,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,UAAU,EAAE,MAAM,CAAC;QACnB;wDACgD;QAChD,WAAW,EAAE,MAAM,CAAC;QACpB;8DACsD;QACtD,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,gBAAgB,EAAE,MAAM,CAAC;QACzB,cAAc,EAAE,MAAM,CAAC;KACxB,CAAC;IACF,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,eAAe;IAC9B,0DAA0D;IAC1D,SAAS,EAAE,MAAM,CAAC;IAClB,mEAAmE;IACnE,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,iBAAiB,CAAC;IAC7B,yDAAyD;IACzD,gBAAgB,EAAE,MAAM,CAAC;CAC1B"}

package/dist/cjs/bootstrap/types.js

@@ -0,0 +1,14 @@
+"use strict";
+/**
+ * Types for the third-party app bootstrap flow
+ * (PLAN-app-bootstrap.md PR2).
+ *
+ * `AnbyAppToken` is the parsed payload of the `ANBY_APP_TOKEN` env var.
+ * The wire format is `anby_v1_<base64url(json(AnbyAppToken))>`.
+ *
+ * `DiscoveryResponse` is what `GET /registry/discovery` returns.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ANBY_TOKEN_PREFIX = void 0;
+exports.ANBY_TOKEN_PREFIX = 'anby_v1_';
+//# sourceMappingURL=types.js.map

package/dist/cjs/bootstrap/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/bootstrap/types.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;;AAEU,QAAA,iBAAiB,GAAG,UAAU,CAAC"}

package/dist/cjs/events/http-transport.d.ts

@@ -0,0 +1,38 @@
+import type { AnbyEvent } from '@anby/contracts';
+import { type AppIdentity } from '../entities/identity.js';
+import type { EventTransport } from './index.js';
+/**
+ * HttpEventTransport (PLAN-app-bootstrap-phase2 PR2).
+ *
+ * Replaces PostgresEventTransport for third-party apps. POSTs an AnbyEvent
+ * envelope (or array, batched) to the platform's POST /registry/events
+ * endpoint, signed with the app's per-request Ed25519 signature using the
+ * canonical scheme:
+ *
+ *   ANBY-APP-V1\n{appId}\n{tenantId}\n{iso}\n{bodySha256}
+ *
+ * Headers attached:
+ *   x-anby-app, x-anby-timestamp, x-anby-body-sha256, x-anby-signature
+ *
+ * Same scheme as POST /registry/scoped-token, so no scoped-token round-trip
+ * is needed.
+ *
+ * Configured automatically by `bootstrapFromToken` once the discovery
+ * response and the app's per-app private key are available. App code never
+ * instantiates this directly.
+ */
+export declare class HttpEventTransport implements EventTransport {
+    private readonly endpoint;
+    private readonly identity;
+    private readonly fetchImpl;
+    constructor(opts: {
+        /** Full URL of POST /registry/events on the registry. */
+        endpoint: string;
+        /** Per-app identity from ANBY_APP_TOKEN. */
+        identity: AppIdentity;
+        /** Override for tests. */
+        fetchImpl?: typeof fetch;
+    });
+    publish(event: AnbyEvent): Promise<void>;
+}
+//# sourceMappingURL=http-transport.d.ts.map

package/dist/cjs/events/http-transport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-transport.d.ts","sourceRoot":"","sources":["../../../src/events/http-transport.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAkB,KAAK,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAC3E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAEjD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,qBAAa,kBAAmB,YAAW,cAAc;IACvD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAc;IACvC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;gBAE7B,IAAI,EAAE;QAChB,yDAAyD;QACzD,QAAQ,EAAE,MAAM,CAAC;QACjB,4CAA4C;QAC5C,QAAQ,EAAE,WAAW,CAAC;QACtB,0BAA0B;QAC1B,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;KAC1B;IAWK,OAAO,CAAC,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC;CA6B/C"}

package/dist/cjs/events/http-transport.js

@@ -0,0 +1,63 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HttpEventTransport = void 0;
+const identity_js_1 = require("../entities/identity.js");
+/**
+ * HttpEventTransport (PLAN-app-bootstrap-phase2 PR2).
+ *
+ * Replaces PostgresEventTransport for third-party apps. POSTs an AnbyEvent
+ * envelope (or array, batched) to the platform's POST /registry/events
+ * endpoint, signed with the app's per-request Ed25519 signature using the
+ * canonical scheme:
+ *
+ *   ANBY-APP-V1\n{appId}\n{tenantId}\n{iso}\n{bodySha256}
+ *
+ * Headers attached:
+ *   x-anby-app, x-anby-timestamp, x-anby-body-sha256, x-anby-signature
+ *
+ * Same scheme as POST /registry/scoped-token, so no scoped-token round-trip
+ * is needed.
+ *
+ * Configured automatically by `bootstrapFromToken` once the discovery
+ * response and the app's per-app private key are available. App code never
+ * instantiates this directly.
+ */
+class HttpEventTransport {
+    endpoint;
+    identity;
+    fetchImpl;
+    constructor(opts) {
+        this.endpoint = opts.endpoint;
+        this.identity = opts.identity;
+        this.fetchImpl = opts.fetchImpl ?? globalThis.fetch;
+        if (!this.fetchImpl) {
+            throw new Error('HttpEventTransport: no fetch implementation. Run on Node 18+ or pass fetchImpl.');
+        }
+    }
+    async publish(event) {
+        // Body is the canonical JSON of the event envelope. The signed
+        // body-hash is computed over these EXACT bytes — the receiver hashes
+        // its raw request body and compares.
+        const body = JSON.stringify(event);
+        const headers = (0, identity_js_1.signAppRequest)({
+            identity: this.identity,
+            tenantId: event.tenantId,
+            body,
+        });
+        const res = await this.fetchImpl(this.endpoint, {
+            method: 'POST',
+            headers: {
+                'content-type': 'application/json',
+                accept: 'application/json',
+                ...headers,
+            },
+            body,
+        });
+        if (!res.ok) {
+            const text = await res.text().catch(() => '');
+            throw new Error(`HttpEventTransport: POST ${this.endpoint} failed with ${res.status}: ${text}`);
+        }
+    }
+}
+exports.HttpEventTransport = HttpEventTransport;
+//# sourceMappingURL=http-transport.js.map

package/dist/cjs/events/http-transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-transport.js","sourceRoot":"","sources":["../../../src/events/http-transport.ts"],"names":[],"mappings":";;;AACA,yDAA2E;AAG3E;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAa,kBAAkB;IACZ,QAAQ,CAAS;IACjB,QAAQ,CAAc;IACtB,SAAS,CAAe;IAEzC,YAAY,IAOX;QACC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC9B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC9B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,UAAU,CAAC,KAAK,CAAC;QACpD,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CACb,iFAAiF,CAClF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAAgB;QAC5B,+DAA+D;QAC/D,qEAAqE;QACrE,qCAAqC;QACrC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAEnC,MAAM,OAAO,GAAG,IAAA,4BAAc,EAAC;YAC7B,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,IAAI;SACL,CAAC,CAAC;QAEH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE;YAC9C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,MAAM,EAAE,kBAAkB;gBAC1B,GAAG,OAAO;aACX;YACD,IAAI;SACL,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YAC9C,MAAM,IAAI,KAAK,CACb,4BAA4B,IAAI,CAAC,QAAQ,gBAAgB,GAAG,CAAC,MAAM,KAAK,IAAI,EAAE,CAC/E,CAAC;QACJ,CAAC;IACH,CAAC;CACF;AApDD,gDAoDC"}

package/dist/cjs/events/index.d.ts

@@ -1,4 +1,27 @@
 import type { AnbyEvent } from '@anby/contracts';
+/**
+ * PLAN-app-bootstrap-phase2 PR5: type-safe event registry.
+ *
+ * Codegen extends these interfaces via TypeScript declaration merging
+ * in `.anby/types.d.ts` (auto-generated by `@anby/platform-sdk/vite`
+ * from each app's `anby-app.manifest.json`). When empty (no codegen
+ * has run), `publishEvent` falls through to the loose `AnbyEvent`
+ * overload, so existing untyped callers keep working.
+ *
+ * Generated file looks like:
+ * ```ts
+ * declare module '@anby/platform-sdk' {
+ *   interface AppProvidedEvents {
+ *     'org.node.created': Record<string, unknown>;
+ *     'org.node.updated': Record<string, unknown>;
+ *   }
+ * }
+ * ```
+ */
+export interface AppProvidedEvents {
+}
+export interface AppRequiredEvents {
+}
 export interface EventTransport {
     publish(event: AnbyEvent): Promise<void>;
 }
@@ -20,6 +43,32 @@ export declare function createEvent<T>(params: {
     data: T;
     correlationId?: string;
 }): AnbyEvent<T>;
+/**
+ * Publish an event through the configured transport.
+ *
+ * Two overloads:
+ *  1. Strongly-typed shorthand — pass `{ type, tenantId, actor, data }`
+ *     where `type` is constrained to declared `AppProvidedEvents` keys
+ *     and `data` is narrowed to that key's payload type. Codegen sets up
+ *     this constraint by extending AppProvidedEvents in `.anby/types.d.ts`.
+ *     This overload only matches when codegen has run AND the type is a
+ *     known event name. Catches typos at compile time.
+ *
+ *  2. Loose escape hatch — pass a full AnbyEvent built via createEvent().
+ *     Always works, even without codegen. Use for events not declared in
+ *     the manifest, or for cross-app forwarding.
+ */
+export declare function publishEvent<K extends keyof AppProvidedEvents>(event: {
+    type: K;
+    tenantId: string;
+    source?: string;
+    actor: {
+        userId: string;
+        email: string;
+    };
+    data: AppProvidedEvents[K];
+    correlationId?: string;
+}): Promise<void>;
 export declare function publishEvent(event: AnbyEvent): Promise<void>;
 /**
  * PostgresEventTransport writes events to the app_events DB table.

package/dist/cjs/events/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/events/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAGjD,MAAM,WAAW,cAAc;IAC7B,OAAO,CAAC,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1C;AAED,cAAM,iBAAkB,YAAW,cAAc;IAC/C,OAAO,CAAC,MAAM,CAAmB;IAE3B,OAAO,CAAC,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC;IAI9C,SAAS,IAAI,SAAS,EAAE;IAIxB,KAAK,IAAI,IAAI;CAGd;AAID,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,cAAc,GAAG,IAAI,CAEvE;AAED,wBAAgB,WAAW,CAAC,CAAC,EAAE,MAAM,EAAE;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IACzC,IAAI,EAAE,CAAC,CAAC;IACR,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,GAAG,SAAS,CAAC,CAAC,CAAC,CAYf;AAED,wBAAsB,YAAY,CAAC,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAElE;AAED;;;;;GAKG;AACH,qBAAa,sBAAuB,YAAW,cAAc;IAG/C,OAAO,CAAC,gBAAgB;IAFpC,OAAO,CAAC,IAAI,CAAM;gBAEE,gBAAgB,EAAE,MAAM;YAE9B,OAAO;IAWf,OAAO,CAAC,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC;IASxC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAM7B;AAED,OAAO,EAAE,iBAAiB,EAAE,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/events/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAGjD;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,WAAW,iBAAiB;CAAG;AACrC,MAAM,WAAW,iBAAiB;CAAG;AAErC,MAAM,WAAW,cAAc;IAC7B,OAAO,CAAC,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1C;AAED,cAAM,iBAAkB,YAAW,cAAc;IAC/C,OAAO,CAAC,MAAM,CAAmB;IAE3B,OAAO,CAAC,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC;IAI9C,SAAS,IAAI,SAAS,EAAE;IAIxB,KAAK,IAAI,IAAI;CAGd;AAID,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,cAAc,GAAG,IAAI,CAEvE;AAED,wBAAgB,WAAW,CAAC,CAAC,EAAE,MAAM,EAAE;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IACzC,IAAI,EAAE,CAAC,CAAC;IACR,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,GAAG,SAAS,CAAC,CAAC,CAAC,CAYf;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,YAAY,CAChC,CAAC,SAAS,MAAM,iBAAiB,EACjC,KAAK,EAAE;IACP,IAAI,EAAE,CAAC,CAAC;IACR,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IACzC,IAAI,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC;IAC3B,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAClB,wBAAsB,YAAY,CAAC,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AA4BpE;;;;;GAKG;AACH,qBAAa,sBAAuB,YAAW,cAAc;IAG/C,OAAO,CAAC,gBAAgB;IAFpC,OAAO,CAAC,IAAI,CAAM;gBAEE,gBAAgB,EAAE,MAAM;YAE9B,OAAO;IAWf,OAAO,CAAC,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC;IASxC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAM7B;AAED,OAAO,EAAE,iBAAiB,EAAE,CAAC"}

package/dist/cjs/events/index.js

@@ -72,7 +72,20 @@ function createEvent(params) {
     };
 }
 async function publishEvent(event) {
-    await _transport.publish(event);
+    // If the caller passed a partial shape (no id/timestamp/version), build
+    // a full envelope on their behalf. Otherwise pass through unchanged.
+    const isFullEnvelope = 'id' in event && 'timestamp' in event && 'version' in event;
+    const envelope = isFullEnvelope
+        ? event
+        : createEvent({
+            type: event.type,
+            source: event.source ?? '',
+            tenantId: event.tenantId,
+            actor: event.actor,
+            data: event.data,
+            correlationId: event.correlationId,
+        });
+    await _transport.publish(envelope);
 }
 /**
  * PostgresEventTransport writes events to the app_events DB table.

package/dist/cjs/events/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/events/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAyBA,0DAEC;AAED,kCAmBC;AAED,oCAEC;AAnDD,oDAA4B;AAM5B,MAAM,iBAAiB;IACb,MAAM,GAAgB,EAAE,CAAC;IAEjC,KAAK,CAAC,OAAO,CAAC,KAAgB;QAC5B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IAED,SAAS;QACP,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1B,CAAC;IAED,KAAK;QACH,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC;IACnB,CAAC;CACF;AAwEQ,8CAAiB;AAtE1B,IAAI,UAAU,GAAmB,IAAI,iBAAiB,EAAE,CAAC;AAEzD,SAAgB,uBAAuB,CAAC,SAAyB;IAC/D,UAAU,GAAG,SAAS,CAAC;AACzB,CAAC;AAED,SAAgB,WAAW,CAAI,MAO9B;IACC,OAAO;QACL,EAAE,EAAE,gBAAM,CAAC,UAAU,EAAE;QACvB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,OAAO,EAAE,GAAG;QACZ,aAAa,EAAE,MAAM,CAAC,aAAa,IAAI,gBAAM,CAAC,UAAU,EAAE;QAC1D,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,IAAI,EAAE,MAAM,CAAC,IAAI;KAClB,CAAC;AACJ,CAAC;AAEM,KAAK,UAAU,YAAY,CAAC,KAAgB;IACjD,MAAM,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAClC,CAAC;AAED;;;;;GAKG;AACH,MAAa,sBAAsB;IAGb;IAFZ,IAAI,CAAM;IAElB,YAAoB,gBAAwB;QAAxB,qBAAgB,GAAhB,gBAAgB,CAAQ;IAAG,CAAC;IAExC,KAAK,CAAC,OAAO;QACnB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,6DAA6D;YAC7D,gEAAgE;YAChE,qDAAqD;YACrD,MAAM,EAAE,IAAI,EAAE,GAAG,wDAAa,IAAI,GAAC,CAAC;YACpC,IAAI,CAAC,IAAI,GAAG,IAAI,IAAI,CAAC,EAAE,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC;QACpE,CAAC;QACD,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAAgB;QAC5B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QAClC,MAAM,IAAI,CAAC,KAAK,CACd;iDAC2C,EAC3C,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAC5E,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;YACtB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACnB,CAAC;IACH,CAAC;CACF;AA/BD,wDA+BC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/events/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA+CA,0DAEC;AAED,kCAmBC;AA4BD,oCAyBC;AA1HD,oDAA4B;AA4B5B,MAAM,iBAAiB;IACb,MAAM,GAAgB,EAAE,CAAC;IAEjC,KAAK,CAAC,OAAO,CAAC,KAAgB;QAC5B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IAED,SAAS;QACP,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1B,CAAC;IAED,KAAK;QACH,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC;IACnB,CAAC;CACF;AAyHQ,8CAAiB;AAvH1B,IAAI,UAAU,GAAmB,IAAI,iBAAiB,EAAE,CAAC;AAEzD,SAAgB,uBAAuB,CAAC,SAAyB;IAC/D,UAAU,GAAG,SAAS,CAAC;AACzB,CAAC;AAED,SAAgB,WAAW,CAAI,MAO9B;IACC,OAAO;QACL,EAAE,EAAE,gBAAM,CAAC,UAAU,EAAE;QACvB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,OAAO,EAAE,GAAG;QACZ,aAAa,EAAE,MAAM,CAAC,aAAa,IAAI,gBAAM,CAAC,UAAU,EAAE;QAC1D,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,IAAI,EAAE,MAAM,CAAC,IAAI;KAClB,CAAC;AACJ,CAAC;AA4BM,KAAK,UAAU,YAAY,CAChC,KAOC;IAED,wEAAwE;IACxE,qEAAqE;IACrE,MAAM,cAAc,GAClB,IAAI,IAAI,KAAK,IAAI,WAAW,IAAI,KAAK,IAAI,SAAS,IAAI,KAAK,CAAC;IAC9D,MAAM,QAAQ,GAAc,cAAc;QACxC,CAAC,CAAE,KAAmB;QACtB,CAAC,CAAC,WAAW,CAAC;YACV,IAAI,EAAG,KAAa,CAAC,IAAI;YACzB,MAAM,EAAG,KAAa,CAAC,MAAM,IAAI,EAAE;YACnC,QAAQ,EAAG,KAAa,CAAC,QAAQ;YACjC,KAAK,EAAG,KAAa,CAAC,KAAK;YAC3B,IAAI,EAAG,KAAa,CAAC,IAAI;YACzB,aAAa,EAAG,KAAa,CAAC,aAAa;SAC5C,CAAC,CAAC;IACP,MAAM,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;AACrC,CAAC;AAED;;;;;GAKG;AACH,MAAa,sBAAsB;IAGb;IAFZ,IAAI,CAAM;IAElB,YAAoB,gBAAwB;QAAxB,qBAAgB,GAAhB,gBAAgB,CAAQ;IAAG,CAAC;IAExC,KAAK,CAAC,OAAO;QACnB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,6DAA6D;YAC7D,gEAAgE;YAChE,qDAAqD;YACrD,MAAM,EAAE,IAAI,EAAE,GAAG,wDAAa,IAAI,GAAC,CAAC;YACpC,IAAI,CAAC,IAAI,GAAG,IAAI,IAAI,CAAC,EAAE,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC;QACpE,CAAC;QACD,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAAgB;QAC5B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QAClC,MAAM,IAAI,CAAC,KAAK,CACd;iDAC2C,EAC3C,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAC5E,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;YACtB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACnB,CAAC;IACH,CAAC;CACF;AA/BD,wDA+BC"}

package/dist/cjs/index.d.ts

@@ -1,7 +1,10 @@
-export { configureAuth, verifyJwt, verifyHmac, signHmac, authenticateRequest, requireAuth, type AuthUser, type AuthConfig, } from './auth/index.js';
-export { configureEventTransport, createEvent, publishEvent, InMemoryTransport, PostgresEventTransport, type EventTransport, } from './events/index.js';
+export { configureAuth, verifyUserJwt, verifyInternalJwt, verifyHmac, signHmac, authenticateRequest, requireAuth, JWT_ISSUER, JWT_AUDIENCE, TYP_USER, TYP_INTERNAL, TYP_OAUTH_STATE, type AuthUser, type AuthConfig, } from './auth/index.js';
+export { bootstrapFromToken, parseAppToken, ANBY_TOKEN_PREFIX, type AnbyAppToken, type DiscoveryResponse, type BootstrapOptions, } from './bootstrap/index.js';
+export { configureEventTransport, createEvent, publishEvent, InMemoryTransport, PostgresEventTransport, type EventTransport, type AppProvidedEvents, type AppRequiredEvents, } from './events/index.js';
+export { HttpEventTransport } from './events/http-transport.js';
+export { getDiscoveredEndpoints, getDiscoveredRegistryBaseUrl, } from './bootstrap/index.js';
 export { configurePlatform, getPlatformConfig, type PlatformConfig, } from './config/index.js';
-export { publishAppFromManifest, autoPublishOnBoot, type PublishAppOptions, type PublishAppResult, } from './apps/publish.js';
+export { publishAppFromManifest, autoPublishOnBoot, getInlinedManifest, type PublishAppOptions, type PublishAppResult, } from './apps/publish.js';
 export { getPreviewModeFromRequest, isPreviewMode, type PreviewMode, } from './preview.js';
 export * from './entities/index.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/cjs/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EACb,SAAS,EACT,UAAU,EACV,QAAQ,EACR,mBAAmB,EACnB,WAAW,EACX,KAAK,QAAQ,EACb,KAAK,UAAU,GAChB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,uBAAuB,EACvB,WAAW,EACX,YAAY,EACZ,iBAAiB,EACjB,sBAAsB,EACtB,KAAK,cAAc,GACpB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,KAAK,cAAc,GACpB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,sBAAsB,EACtB,iBAAiB,EACjB,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,GACtB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,yBAAyB,EACzB,aAAa,EACb,KAAK,WAAW,GACjB,MAAM,cAAc,CAAC;AAKtB,cAAc,qBAAqB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EACb,aAAa,EACb,iBAAiB,EACjB,UAAU,EACV,QAAQ,EACR,mBAAmB,EACnB,WAAW,EACX,UAAU,EACV,YAAY,EACZ,QAAQ,EACR,YAAY,EACZ,eAAe,EACf,KAAK,QAAQ,EACb,KAAK,UAAU,GAChB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,kBAAkB,EAClB,aAAa,EACb,iBAAiB,EACjB,KAAK,YAAY,EACjB,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,GACtB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,uBAAuB,EACvB,WAAW,EACX,YAAY,EACZ,iBAAiB,EACjB,sBAAsB,EACtB,KAAK,cAAc,EACnB,KAAK,iBAAiB,EACtB,KAAK,iBAAiB,GACvB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAKhE,OAAO,EACL,sBAAsB,EACtB,4BAA4B,GAC7B,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,KAAK,cAAc,GACpB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,sBAAsB,EACtB,iBAAiB,EACjB,kBAAkB,EAClB,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,GACtB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,yBAAyB,EACzB,aAAa,EACb,KAAK,WAAW,GACjB,MAAM,cAAc,CAAC;AAKtB,cAAc,qBAAqB,CAAC"}