@antseed/cli 0.1.179 → 0.1.180

package/dist/gateway/console-api/serialize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"serialize.js","sourceRoot":"","sources":["../../../src/gateway/console-api/serialize.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,eAAe,EAAsB,MAAM,gCAAgC,CAAA;AACrG,OAAO,EAAE,cAAc,EAAE,WAAW,EAAqB,MAAM,cAAc,CAAA;AAC7E,OAAO,EAAE,2BAA2B,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAA;AAG9F,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAG1C,MAAM,UAAU,UAAU,CAAC,OAAe,EAAE,IAAI,GAAG,iBAAiB;IAClE,OAAO,IAAI,YAAY,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,CAAA;AAC7C,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,IAAY;IACnC,OAAO,IAAI,YAAY,CAAC,GAAG,EAAE,WAAW,EAAE,GAAG,IAAI,YAAY,CAAC,CAAA;AAChE,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,IAAa;IACpC,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,EAAE,CAAA;IAClD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,MAAM,UAAU,CAAC,oBAAoB,CAAC,CAAA;IAC3F,OAAO,IAA+B,CAAA;AACxC,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAA6B,EAAE,KAAa,EAAE,GAAG,GAAG,GAAG;IACpF,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAA;IACzB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE;QAAE,MAAM,UAAU,CAAC,GAAG,KAAK,cAAc,CAAC,CAAA;IACxF,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,GAAG;QAAE,MAAM,UAAU,CAAC,GAAG,KAAK,mBAAmB,GAAG,aAAa,CAAC,CAAA;IAC5F,OAAO,KAAK,CAAC,IAAI,EAAE,CAAA;AACrB,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAA6B,EAAE,KAAa,EAAE,GAAG,GAAG,GAAG;IACpF,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAA;IACzB,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAA;IACzC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,IAAI,CAAA;IAC/C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,MAAM,UAAU,CAAC,GAAG,KAAK,mBAAmB,CAAC,CAAA;IAC5E,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG;QAAE,MAAM,UAAU,CAAC,GAAG,KAAK,mBAAmB,GAAG,aAAa,CAAC,CAAA;IACrF,OAAO,KAAK,CAAC,IAAI,EAAE,IAAI,IAAI,CAAA;AAC7B,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAA6B,EAAE,KAAa;IAC1E,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAA;IACzB,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAA;IACzC,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,MAAM,UAAU,CAAC,GAAG,KAAK,wBAAwB,CAAC,CAAA;IAClF,OAAO,KAAK,CAAA;AACd,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,aAAa,CAAC,KAA8B;IAC1D,OAAO,EAAE,YAAY,EAAE,eAAe,CAAC,KAAK,EAAE,cAAc,CAAC,EAAE,cAAc,EAAE,eAAe,CAAC,KAAK,EAAE,gBAAgB,CAAC,EAAE,CAAA;AAC3H,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAA6B,EAAE,KAAa;IAC5E,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAA;IACzB,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAA;IACzC,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IAC/B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;QAAE,MAAM,UAAU,CAAC,GAAG,KAAK,qCAAqC,CAAC,CAAA;IAC3I,OAAO,KAAK,CAAA;AACd,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAA6B,EAAE,KAAa;IACxE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAA;IACzB,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAA;IACzC,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IAC/B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;QAAE,MAAM,UAAU,CAAC,GAAG,KAAK,yCAAyC,CAAC,CAAA;IAC/I,OAAO,KAAK,CAAA;AACd,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,MAAoB;IAC/C,OAAO;QACL,KAAK,EAAE,2BAA2B,CAAC,MAAM,CAAC,KAAK,CAAC;QAChD,MAAM,EAAE,2BAA2B,CAAC,MAAM,CAAC,MAAM,CAAC;QAClD,OAAO,EAAE,2BAA2B,CAAC,MAAM,CAAC,OAAO,CAAC;QACpD,KAAK,EAAE,2BAA2B,CAAC,MAAM,CAAC,KAAK,CAAC;KACjD,CAAA;AACH,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAA;IACzC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,UAAU,CAAC,yCAAyC,CAAC,CAAA;IACpI,MAAM,KAAK,GAAG,KAAgC,CAAA;IAC9C,MAAM,MAAM,GAA0B,EAAE,CAAA;IACxC,KAAK,MAAM,MAAM,IAAI,cAAc,EAAE,CAAC;QACpC,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,CAAA;QACzB,IAAI,GAAG,KAAK,SAAS;YAAE,SAAQ;QAC/B,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;YAC/B,MAAM,CAAC,MAAM,CAAC,GAAG,IAAI,CAAA;YACrB,SAAQ;QACV,CAAC;QACD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,MAAM,UAAU,CAAC,UAAU,MAAM,+BAA+B,CAAC,CAAA;QACzH,IAAI,CAAC;YACH,MAAM,CAAC,MAAM,CAAC,GAAG,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAA;QAC9C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,UAAU,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,MAAM,aAAa,CAAC,CAAA;QAC1F,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAC/C,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,EAAE,CAAA;AACpG,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAc,EAAE,KAAK,GAAG,eAAe;IACpE,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAA;IACzC,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IAC/B,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC;QAAE,MAAM,UAAU,CAAC,GAAG,KAAK,gCAAgC,EAAE,wBAAwB,CAAC,CAAA;IACjH,OAAO,eAAe,CAAC,KAAK,CAAC,CAAA;AAC/B,CAAC;AAED,SAAS,gBAAgB,CAAC,SAA0B;IAClD,OAAO,EAAE,EAAE,EAAE,SAAS,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,SAAS,EAAE,CAAA;AACnF,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAmB,EAAE,SAA0B;IAC1E,OAAO;QACL,GAAG,gBAAgB,CAAC,SAAS,CAAC;QAC9B,aAAa,EAAE,SAAS,CAAC,aAAa;QACtC,aAAa,EAAE,SAAS,CAAC,aAAa;QACtC,MAAM,EAAE,YAAY,CAAC,SAAS,CAAC,MAAM,CAAC;QACtC,aAAa,EAAE,SAAS,CAAC,aAAa;QACtC,gBAAgB,EAAE,SAAS,CAAC,gBAAgB;QAC5C,WAAW,EAAE,KAAK,CAAC,qBAAqB,CAAC,SAAS,CAAC,EAAE,CAAC;QACtD,QAAQ,EAAE,KAAK,CAAC,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAAC;QAChD,SAAS,EAAE,SAAS,CAAC,SAAS;KAC/B,CAAA;AACH,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,IAAiB,EAAE,MAAoB;IAC/D,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,WAAW,EAAE,IAAI,CAAC,iBAAiB,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE;QACtD,MAAM,EAAE,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC;QACnC,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,SAAS,EAAE,MAAM,CAAC,SAAS;KAC5B,CAAA;AACH,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,MAAoB;IACnD,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAA;AAC/F,CAAC;AAED,4GAA4G;AAC5G,MAAM,UAAU,eAAe,CAAC,KAAmB,EAAE,MAAyB,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAC9F,OAAO,KAAK,CAAC,iBAAiB,CAAC,MAAM,EAAE,WAAW,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAA;AACrE,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,KAAmB,EAAE,GAAiB,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,QAAQ,eAAe,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAE;IAC5I,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,MAAM,EAAE,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC;QAChC,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,WAAW,EAAE,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC;QAC1C,kBAAkB,EAAE,GAAG,CAAC,kBAAkB;QAC1C,YAAY,EAAE,GAAG,CAAC,YAAY;QAC9B,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,KAAK,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,EAAE,mBAAmB,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,cAAc,EAAE,mBAAmB,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE;KAC5I,CAAA;AACH,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,UAAU,CAAC,IAAiB,EAAE,IAAwB,EAAE,IAAY;IAClF,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,UAAU,IAAI,IAAI,WAAW,EAAE,CAAA;IACnF,OAAO,GAAG,IAAI,WAAW,IAAI,EAAE,CAAA;AACjC,CAAC"}

package/dist/gateway/console-api/server.d.ts

@@ -0,0 +1,38 @@
+import type * as http from 'node:http';
+import type { ConsoleDeps } from './deps.js';
+import { ConsoleRouter, type ConsoleAuth } from './router.js';
+/**
+ * The console itself only calls its own API; the https:/wss: sources are for
+ * browser wallet connections, deliberately not a host list:
+ * - connect-src: the chain RPC is gateway configuration (`rpcUrl`, any public
+ *   endpoint) with the @antseed/wallet-config Base fallbacks, and the wallet
+ *   SDKs RainbowKit bundles talk to their own services (WalletConnect relay,
+ *   pulse and RPC on *.walletconnect.org/.com and api.web3modal.org, Coinbase
+ *   keys/rpc/analytics on *.coinbase.com, MetaMask SDK socket and analytics on
+ *   *.metamask.io), which move between SDK releases.
+ * - img-src: the WalletConnect modal loads wallet logos from its explorer API.
+ *   Chat markdown never loads remote images (see the console's streamdown
+ *   rehype config), so this does not widen what seller output can fetch.
+ * - frame-src: the card checkout (Antseed Pay, `ANTSEED_PAY_URL`, configurable)
+ *   and the iframes the WalletConnect core and MetaMask SDK create.
+ * An allowlist would break wallet connections silently whenever an SDK or the
+ * configured RPC changes; script-src stays 'self', which is what keeps
+ * injected markup from running.
+ */
+export declare const CONSOLE_CSP: string;
+export type ConsoleRegistrar = (router: ConsoleRouter, deps: ConsoleDeps) => void;
+export interface ConsoleApi {
+    /** Handles `/console` and `/console/api/*`; false for any other path. */
+    handle(req: http.IncomingMessage, res: http.ServerResponse): Promise<boolean>;
+    router: ConsoleRouter;
+}
+/**
+ * The console's JSON API under `/console/api` and the web app under
+ * `/console`. `registrars` mount the feature routes; `auth` mounts
+ * `/auth/*` and resolves every request's principal. `sessions` on the deps
+ * handed to registrars is filled from `auth` when not set.
+ */
+export declare function createConsoleApi(deps: ConsoleDeps, auth: ConsoleAuth, registrars: ConsoleRegistrar[], options?: {
+    distDir?: string;
+}): ConsoleApi;
+//# sourceMappingURL=server.d.ts.map

package/dist/gateway/console-api/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../../src/gateway/console-api/server.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,IAAI,MAAM,WAAW,CAAA;AAOtC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,WAAW,CAAA;AAE5C,OAAO,EAAgB,aAAa,EAAE,KAAK,WAAW,EAAoD,MAAM,aAAa,CAAA;AAQ7H;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,WAAW,QAaZ,CAAA;AAwBZ,MAAM,MAAM,gBAAgB,GAAG,CAAC,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,WAAW,KAAK,IAAI,CAAA;AAEjF,MAAM,WAAW,UAAU;IACzB,yEAAyE;IACzE,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,eAAe,EAAE,GAAG,EAAE,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAC7E,MAAM,EAAE,aAAa,CAAA;CACtB;AAiGD;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,WAAW,EACjB,IAAI,EAAE,WAAW,EACjB,UAAU,EAAE,gBAAgB,EAAE,EAC9B,OAAO,GAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAA;CAAO,GACjC,UAAU,CA2IZ"}

package/dist/gateway/console-api/server.js

@@ -0,0 +1,308 @@
+import { createReadStream, existsSync, statSync } from 'node:fs';
+import { extname, join, normalize, sep } from 'node:path';
+import { pipeline } from 'node:stream';
+import { consoleDistDir } from '@antseed/gateway-console';
+import { errorMessage } from '../errors.js';
+import { PolicyProblemError } from '../services/context.js';
+import { buyerAddressBook } from '../services/wallet-address.js';
+import { ConsoleError, ConsoleRouter } from './router.js';
+import { CONSOLE_API_PATH, CONSOLE_BASE_PATH, CONSOLE_CSRF_HEADER } from './types.js';
+/** JSON bodies on the console API are small; anything bigger is refused. */
+const MAX_CONSOLE_BODY_BYTES = 1024 * 1024;
+const SAFE_METHODS = new Set(['GET', 'HEAD', 'OPTIONS']);
+/**
+ * The console itself only calls its own API; the https:/wss: sources are for
+ * browser wallet connections, deliberately not a host list:
+ * - connect-src: the chain RPC is gateway configuration (`rpcUrl`, any public
+ *   endpoint) with the @antseed/wallet-config Base fallbacks, and the wallet
+ *   SDKs RainbowKit bundles talk to their own services (WalletConnect relay,
+ *   pulse and RPC on *.walletconnect.org/.com and api.web3modal.org, Coinbase
+ *   keys/rpc/analytics on *.coinbase.com, MetaMask SDK socket and analytics on
+ *   *.metamask.io), which move between SDK releases.
+ * - img-src: the WalletConnect modal loads wallet logos from its explorer API.
+ *   Chat markdown never loads remote images (see the console's streamdown
+ *   rehype config), so this does not widen what seller output can fetch.
+ * - frame-src: the card checkout (Antseed Pay, `ANTSEED_PAY_URL`, configurable)
+ *   and the iframes the WalletConnect core and MetaMask SDK create.
+ * An allowlist would break wallet connections silently whenever an SDK or the
+ * configured RPC changes; script-src stays 'self', which is what keeps
+ * injected markup from running.
+ */
+export const CONSOLE_CSP = [
+    "default-src 'self'",
+    "script-src 'self'",
+    "style-src 'self' 'unsafe-inline'",
+    "img-src 'self' data: blob: https:",
+    "font-src 'self' data:",
+    "connect-src 'self' https: wss:",
+    "frame-src 'self' https:",
+    "worker-src 'self' blob:",
+    "object-src 'none'",
+    "base-uri 'self'",
+    "form-action 'self'",
+    "frame-ancestors 'none'",
+].join('; ');
+const CONTENT_TYPES = {
+    '.html': 'text/html; charset=utf-8',
+    '.js': 'text/javascript; charset=utf-8',
+    '.mjs': 'text/javascript; charset=utf-8',
+    '.css': 'text/css; charset=utf-8',
+    '.json': 'application/json',
+    '.map': 'application/json',
+    '.svg': 'image/svg+xml',
+    '.png': 'image/png',
+    '.jpg': 'image/jpeg',
+    '.jpeg': 'image/jpeg',
+    '.gif': 'image/gif',
+    '.webp': 'image/webp',
+    '.ico': 'image/x-icon',
+    '.woff': 'font/woff',
+    '.woff2': 'font/woff2',
+    '.ttf': 'font/ttf',
+    '.txt': 'text/plain; charset=utf-8',
+    '.webmanifest': 'application/manifest+json',
+    '.wasm': 'application/wasm',
+};
+function setCommonHeaders(res) {
+    res.setHeader('x-content-type-options', 'nosniff');
+    res.setHeader('referrer-policy', 'no-referrer');
+    res.setHeader('x-frame-options', 'DENY');
+    res.setHeader('content-security-policy', CONSOLE_CSP);
+}
+function sendJson(res, status, body, extra = {}) {
+    if (res.headersSent) {
+        res.end();
+        return;
+    }
+    res.writeHead(status, { 'content-type': 'application/json; charset=utf-8', 'cache-control': 'no-store', ...extra });
+    res.end(body === undefined ? undefined : JSON.stringify(body));
+}
+function sendApiError(res, status, code, message, details) {
+    sendJson(res, status, { error: { code, message, ...(details ? { details } : {}) } });
+}
+function isConsoleResponse(value) {
+    return Boolean(value && typeof value === 'object' && value.__consoleResponse === true);
+}
+function bodyTooLarge() {
+    return new ConsoleError(413, 'request_too_large', `Request bodies are limited to ${MAX_CONSOLE_BODY_BYTES / 1024} KiB`);
+}
+async function readJsonBody(req) {
+    if (Number(req.headers['content-length']) > MAX_CONSOLE_BODY_BYTES) {
+        req.resume();
+        throw bodyTooLarge();
+    }
+    const chunks = [];
+    let size = 0;
+    for await (const chunk of req) {
+        size += chunk.length;
+        if (size > MAX_CONSOLE_BODY_BYTES)
+            continue;
+        chunks.push(chunk);
+    }
+    if (size > MAX_CONSOLE_BODY_BYTES)
+        throw bodyTooLarge();
+    if (size === 0)
+        return undefined;
+    const contentType = req.headers['content-type'] ?? '';
+    if (contentType && !contentType.includes('json'))
+        throw new ConsoleError(415, 'unsupported_media_type', 'Send JSON');
+    try {
+        return JSON.parse(Buffer.concat(chunks).toString('utf8'));
+    }
+    catch {
+        throw new ConsoleError(400, 'invalid_json', 'The request body is not valid JSON');
+    }
+}
+function usesBearer(req) {
+    return (req.headers.authorization ?? '').startsWith('Bearer ');
+}
+/** Refuses a request the route or the principal does not allow. The body is drained first, since no handler reads it. */
+function authorize(req, method, route, principal) {
+    const refuse = (status, code, message) => {
+        req.resume();
+        throw new ConsoleError(status, code, message);
+    };
+    if (!route.options.public) {
+        if (!principal)
+            return refuse(401, 'unauthorized', 'Sign in to continue');
+        const allowed = route.options.allow ?? ['member', 'token'];
+        if (!allowed.includes(principal.kind))
+            refuse(403, 'forbidden', 'This route is not available to this session');
+    }
+    if (principal?.kind === 'token' && principal.scope === 'read' && method !== 'GET' && method !== 'HEAD') {
+        refuse(403, 'read_only_token', 'This management token can only read');
+    }
+}
+/** Writes a handler's result: nothing more after it wrote `res` itself, 204 for undefined, JSON or a `ConsoleResponse` otherwise. */
+function sendResult(res, result) {
+    if (result === undefined) {
+        if (!res.headersSent && !res.writableEnded) {
+            res.writeHead(204, { 'cache-control': 'no-store' });
+            res.end();
+        }
+        return;
+    }
+    if (!isConsoleResponse(result)) {
+        sendJson(res, 200, result);
+        return;
+    }
+    if (result.contentType && !result.contentType.includes('json')) {
+        res.writeHead(result.status, { 'content-type': result.contentType, 'cache-control': 'no-store', ...(result.headers ?? {}) });
+        res.end(result.body === undefined ? undefined : String(result.body));
+    }
+    else if (result.body === undefined) {
+        res.writeHead(result.status, { 'cache-control': 'no-store', ...(result.headers ?? {}) });
+        res.end();
+    }
+    else {
+        sendJson(res, result.status, result.body, result.headers);
+    }
+}
+/**
+ * The console's JSON API under `/console/api` and the web app under
+ * `/console`. `registrars` mount the feature routes; `auth` mounts
+ * `/auth/*` and resolves every request's principal. `sessions` on the deps
+ * handed to registrars is filled from `auth` when not set.
+ */
+export function createConsoleApi(deps, auth, registrars, options = {}) {
+    const router = new ConsoleRouter();
+    const routeDeps = {
+        ...deps,
+        buyerAddresses: deps.buyerAddresses ?? buyerAddressBook(deps.buyerPort, deps.controlSecret),
+        sessions: deps.sessions ?? {
+            revokeMemberSessions: (memberId) => auth.revokeMemberSessions(memberId),
+            revokeKeySessions: (keyId) => auth.revokeKeySessions(keyId),
+        },
+    };
+    auth.registerRoutes(router);
+    for (const register of registrars)
+        register(router, routeDeps);
+    const distDir = options.distDir ?? consoleDistDir;
+    async function handleApi(req, res, url) {
+        setCommonHeaders(res);
+        const method = (req.method ?? 'GET').toUpperCase();
+        const path = url.pathname.slice(CONSOLE_API_PATH.length) || '/';
+        try {
+            const matched = router.match(method === 'HEAD' ? 'GET' : method, path);
+            if (!matched) {
+                req.resume();
+                throw new ConsoleError(404, 'not_found', 'No such console API route');
+            }
+            const { route, params } = matched;
+            const mutating = !SAFE_METHODS.has(method);
+            // Browsers cannot set custom headers cross-site without CORS, which
+            // this API never grants; bearer tokens are not sent automatically.
+            if (mutating && !usesBearer(req) && req.headers[CONSOLE_CSRF_HEADER] !== '1') {
+                req.resume();
+                throw new ConsoleError(403, 'csrf_required', `Mutating requests need the ${CONSOLE_CSRF_HEADER} header`);
+            }
+            const principal = await auth.authenticate(req);
+            authorize(req, method, route, principal);
+            let body;
+            if (mutating)
+                body = await readJsonBody(req);
+            else
+                req.resume();
+            const result = await route.handler({
+                method,
+                path,
+                params,
+                query: url.searchParams,
+                body,
+                headers: req.headers,
+                principal,
+                raw: req,
+                res,
+            });
+            sendResult(res, result);
+        }
+        catch (error) {
+            if (error instanceof PolicyProblemError) {
+                sendJson(res, error.status, error.body);
+                return;
+            }
+            if (error instanceof ConsoleError) {
+                sendApiError(res, error.status, error.code, error.message, error.details);
+                return;
+            }
+            deps.log(`console api error: ${method} ${path}: ${errorMessage(error)}`);
+            sendApiError(res, 500, 'internal_error', 'Console API error');
+        }
+    }
+    function serveFile(res, file, method, cache) {
+        const size = statSync(file).size;
+        res.writeHead(200, {
+            'content-type': CONTENT_TYPES[extname(file).toLowerCase()] ?? 'application/octet-stream',
+            'content-length': String(size),
+            'cache-control': cache,
+        });
+        if (method === 'HEAD') {
+            res.end();
+            return;
+        }
+        // A read error after the headers went out can only cut the response short (pipeline
+        // destroys it); it must not crash the gateway. A browser going away is not worth a log line.
+        pipeline(createReadStream(file), res, (error) => {
+            if (error && error.code !== 'ERR_STREAM_PREMATURE_CLOSE') {
+                deps.log(`console: could not serve ${file}: ${errorMessage(error)}`);
+            }
+        });
+    }
+    function handleStatic(req, res, url) {
+        setCommonHeaders(res);
+        req.resume();
+        const method = (req.method ?? 'GET').toUpperCase();
+        if (method !== 'GET' && method !== 'HEAD') {
+            res.writeHead(405, { allow: 'GET, HEAD', 'content-type': 'text/plain; charset=utf-8' });
+            res.end('Method not allowed');
+            return;
+        }
+        const index = join(distDir, 'index.html');
+        if (!existsSync(index)) {
+            res.writeHead(503, { 'content-type': 'text/plain; charset=utf-8', 'cache-control': 'no-store' });
+            res.end('The gateway console is not built. Build it with `pnpm --filter @antseed/gateway-console build`, then reload.');
+            return;
+        }
+        let relative;
+        try {
+            relative = decodeURIComponent(url.pathname.slice(CONSOLE_BASE_PATH.length)).replace(/^\/+/, '');
+        }
+        catch {
+            res.writeHead(400, { 'content-type': 'text/plain; charset=utf-8' });
+            res.end('Bad path');
+            return;
+        }
+        const root = normalize(distDir.endsWith(sep) ? distDir : `${distDir}${sep}`);
+        const target = normalize(join(root, relative));
+        if (relative && !relative.includes('\0') && target.startsWith(root) && existsSync(target) && statSync(target).isFile()) {
+            // Vite fingerprints everything under assets/, so it can be cached forever.
+            const hashed = relative.startsWith('assets/');
+            serveFile(res, target, method, hashed ? 'public, max-age=31536000, immutable' : 'no-cache');
+            return;
+        }
+        if (extname(relative)) {
+            res.writeHead(404, { 'content-type': 'text/plain; charset=utf-8', 'cache-control': 'no-store' });
+            res.end('Not found');
+            return;
+        }
+        // Client-side routes all load the app shell.
+        serveFile(res, index, method, 'no-cache');
+    }
+    return {
+        router,
+        async handle(req, res) {
+            const url = new URL(req.url ?? '/', 'http://console.local');
+            const pathname = url.pathname;
+            if (pathname === CONSOLE_API_PATH || pathname.startsWith(`${CONSOLE_API_PATH}/`)) {
+                await handleApi(req, res, url);
+                return true;
+            }
+            if (pathname === CONSOLE_BASE_PATH || pathname.startsWith(`${CONSOLE_BASE_PATH}/`)) {
+                handleStatic(req, res, url);
+                return true;
+            }
+            return false;
+        },
+    };
+}
+//# sourceMappingURL=server.js.map

package/dist/gateway/console-api/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../../src/gateway/console-api/server.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AAChE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,WAAW,CAAA;AACzD,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AACtC,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAA;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAA;AAE3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAA;AAChE,OAAO,EAAE,YAAY,EAAE,aAAa,EAAsE,MAAM,aAAa,CAAA;AAC7H,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAA;AAErF,4EAA4E;AAC5E,MAAM,sBAAsB,GAAG,IAAI,GAAG,IAAI,CAAA;AAE1C,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAA;AAExD;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,oBAAoB;IACpB,mBAAmB;IACnB,kCAAkC;IAClC,mCAAmC;IACnC,uBAAuB;IACvB,gCAAgC;IAChC,yBAAyB;IACzB,yBAAyB;IACzB,mBAAmB;IACnB,iBAAiB;IACjB,oBAAoB;IACpB,wBAAwB;CACzB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AAEZ,MAAM,aAAa,GAA2B;IAC5C,OAAO,EAAE,0BAA0B;IACnC,KAAK,EAAE,gCAAgC;IACvC,MAAM,EAAE,gCAAgC;IACxC,MAAM,EAAE,yBAAyB;IACjC,OAAO,EAAE,kBAAkB;IAC3B,MAAM,EAAE,kBAAkB;IAC1B,MAAM,EAAE,eAAe;IACvB,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,YAAY;IACpB,OAAO,EAAE,YAAY;IACrB,MAAM,EAAE,WAAW;IACnB,OAAO,EAAE,YAAY;IACrB,MAAM,EAAE,cAAc;IACtB,OAAO,EAAE,WAAW;IACpB,QAAQ,EAAE,YAAY;IACtB,MAAM,EAAE,UAAU;IAClB,MAAM,EAAE,2BAA2B;IACnC,cAAc,EAAE,2BAA2B;IAC3C,OAAO,EAAE,kBAAkB;CAC5B,CAAA;AAUD,SAAS,gBAAgB,CAAC,GAAwB;IAChD,GAAG,CAAC,SAAS,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAA;IAClD,GAAG,CAAC,SAAS,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAA;IAC/C,GAAG,CAAC,SAAS,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAA;IACxC,GAAG,CAAC,SAAS,CAAC,yBAAyB,EAAE,WAAW,CAAC,CAAA;AACvD,CAAC;AAED,SAAS,QAAQ,CAAC,GAAwB,EAAE,MAAc,EAAE,IAAa,EAAE,QAAgC,EAAE;IAC3G,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;QACpB,GAAG,CAAC,GAAG,EAAE,CAAA;QACT,OAAM;IACR,CAAC;IACD,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,iCAAiC,EAAE,eAAe,EAAE,UAAU,EAAE,GAAG,KAAK,EAAE,CAAC,CAAA;IACnH,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAA;AAChE,CAAC;AAED,SAAS,YAAY,CAAC,GAAwB,EAAE,MAAc,EAAE,IAAY,EAAE,OAAe,EAAE,OAAiC;IAC9H,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAA;AACtF,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,OAAO,OAAO,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAK,KAAyC,CAAC,iBAAiB,KAAK,IAAI,CAAC,CAAA;AAC7H,CAAC;AAED,SAAS,YAAY;IACnB,OAAO,IAAI,YAAY,CAAC,GAAG,EAAE,mBAAmB,EAAE,iCAAiC,sBAAsB,GAAG,IAAI,MAAM,CAAC,CAAA;AACzH,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,GAAyB;IACnD,IAAI,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,GAAG,sBAAsB,EAAE,CAAC;QACnE,GAAG,CAAC,MAAM,EAAE,CAAA;QACZ,MAAM,YAAY,EAAE,CAAA;IACtB,CAAC;IACD,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,IAAI,IAAI,GAAG,CAAC,CAAA;IACZ,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;QAC9B,IAAI,IAAK,KAAgB,CAAC,MAAM,CAAA;QAChC,IAAI,IAAI,GAAG,sBAAsB;YAAE,SAAQ;QAC3C,MAAM,CAAC,IAAI,CAAC,KAAe,CAAC,CAAA;IAC9B,CAAC;IACD,IAAI,IAAI,GAAG,sBAAsB;QAAE,MAAM,YAAY,EAAE,CAAA;IACvD,IAAI,IAAI,KAAK,CAAC;QAAE,OAAO,SAAS,CAAA;IAChC,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,EAAE,CAAA;IACrD,IAAI,WAAW,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,wBAAwB,EAAE,WAAW,CAAC,CAAA;IACpH,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAY,CAAA;IACtE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,cAAc,EAAE,oCAAoC,CAAC,CAAA;IACnF,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,GAAyB;IAC3C,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,CAAA;AAChE,CAAC;AAED,yHAAyH;AACzH,SAAS,SAAS,CAAC,GAAyB,EAAE,MAAc,EAAE,KAAY,EAAE,SAA2B;IACrG,MAAM,MAAM,GAAG,CAAC,MAAc,EAAE,IAAY,EAAE,OAAe,EAAS,EAAE;QACtE,GAAG,CAAC,MAAM,EAAE,CAAA;QACZ,MAAM,IAAI,YAAY,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,CAAA;IAC/C,CAAC,CAAA;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QAC1B,IAAI,CAAC,SAAS;YAAE,OAAO,MAAM,CAAC,GAAG,EAAE,cAAc,EAAE,qBAAqB,CAAC,CAAA;QACzE,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;QAC1D,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC;YAAE,MAAM,CAAC,GAAG,EAAE,WAAW,EAAE,6CAA6C,CAAC,CAAA;IAChH,CAAC;IACD,IAAI,SAAS,EAAE,IAAI,KAAK,OAAO,IAAI,SAAS,CAAC,KAAK,KAAK,MAAM,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACvG,MAAM,CAAC,GAAG,EAAE,iBAAiB,EAAE,qCAAqC,CAAC,CAAA;IACvE,CAAC;AACH,CAAC;AAED,qIAAqI;AACrI,SAAS,UAAU,CAAC,GAAwB,EAAE,MAAe;IAC3D,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,IAAI,CAAC,GAAG,CAAC,WAAW,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;YAC3C,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC,CAAA;YACnD,GAAG,CAAC,GAAG,EAAE,CAAA;QACX,CAAC;QACD,OAAM;IACR,CAAC;IACD,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/B,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,CAAA;QAC1B,OAAM;IACR,CAAC;IACD,IAAI,MAAM,CAAC,WAAW,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/D,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,MAAM,CAAC,WAAW,EAAE,eAAe,EAAE,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC,CAAA;QAC5H,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA;IACtE,CAAC;SAAM,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACrC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,eAAe,EAAE,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC,CAAA;QACxF,GAAG,CAAC,GAAG,EAAE,CAAA;IACX,CAAC;SAAM,CAAC;QACN,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,CAAA;IAC3D,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAC9B,IAAiB,EACjB,IAAiB,EACjB,UAA8B,EAC9B,UAAgC,EAAE;IAElC,MAAM,MAAM,GAAG,IAAI,aAAa,EAAE,CAAA;IAClC,MAAM,SAAS,GAAgB;QAC7B,GAAG,IAAI;QACP,cAAc,EAAE,IAAI,CAAC,cAAc,IAAI,gBAAgB,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,aAAa,CAAC;QAC3F,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI;YACzB,oBAAoB,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC;YACvE,iBAAiB,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC;SAC5D;KACF,CAAA;IACD,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAA;IAC3B,KAAK,MAAM,QAAQ,IAAI,UAAU;QAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;IAC9D,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,cAAc,CAAA;IAEjD,KAAK,UAAU,SAAS,CAAC,GAAyB,EAAE,GAAwB,EAAE,GAAQ;QACpF,gBAAgB,CAAC,GAAG,CAAC,CAAA;QACrB,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAA;QAClD,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,IAAI,GAAG,CAAA;QAC/D,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;YACtE,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,GAAG,CAAC,MAAM,EAAE,CAAA;gBACZ,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,WAAW,EAAE,2BAA2B,CAAC,CAAA;YACvE,CAAC;YACD,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAA;YACjC,MAAM,QAAQ,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;YAC1C,oEAAoE;YACpE,mEAAmE;YACnE,IAAI,QAAQ,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,KAAK,GAAG,EAAE,CAAC;gBAC7E,GAAG,CAAC,MAAM,EAAE,CAAA;gBACZ,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,eAAe,EAAE,8BAA8B,mBAAmB,SAAS,CAAC,CAAA;YAC1G,CAAC;YACD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAA;YAC9C,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,CAAC,CAAA;YACxC,IAAI,IAAa,CAAA;YACjB,IAAI,QAAQ;gBAAE,IAAI,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAA;;gBACvC,GAAG,CAAC,MAAM,EAAE,CAAA;YACjB,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC;gBACjC,MAAM;gBACN,IAAI;gBACJ,MAAM;gBACN,KAAK,EAAE,GAAG,CAAC,YAAY;gBACvB,IAAI;gBACJ,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,SAAS;gBACT,GAAG,EAAE,GAAG;gBACR,GAAG;aACJ,CAAC,CAAA;YACF,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;QACzB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,kBAAkB,EAAE,CAAC;gBACxC,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;gBACvC,OAAM;YACR,CAAC;YACD,IAAI,KAAK,YAAY,YAAY,EAAE,CAAC;gBAClC,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAA;gBACzE,OAAM;YACR,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,sBAAsB,MAAM,IAAI,IAAI,KAAK,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;YACxE,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,gBAAgB,EAAE,mBAAmB,CAAC,CAAA;QAC/D,CAAC;IACH,CAAC;IAED,SAAS,SAAS,CAAC,GAAwB,EAAE,IAAY,EAAE,MAAc,EAAE,KAAa;QACtF,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAA;QAChC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;YACjB,cAAc,EAAE,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,0BAA0B;YACxF,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC;YAC9B,eAAe,EAAE,KAAK;SACvB,CAAC,CAAA;QACF,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,GAAG,CAAC,GAAG,EAAE,CAAA;YACT,OAAM;QACR,CAAC;QACD,oFAAoF;QACpF,6FAA6F;QAC7F,QAAQ,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,EAAE;YAC9C,IAAI,KAAK,IAAK,KAA+B,CAAC,IAAI,KAAK,4BAA4B,EAAE,CAAC;gBACpF,IAAI,CAAC,GAAG,CAAC,4BAA4B,IAAI,KAAK,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;YACtE,CAAC;QACH,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,SAAS,YAAY,CAAC,GAAyB,EAAE,GAAwB,EAAE,GAAQ;QACjF,gBAAgB,CAAC,GAAG,CAAC,CAAA;QACrB,GAAG,CAAC,MAAM,EAAE,CAAA;QACZ,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAA;QAClD,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YAC1C,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,2BAA2B,EAAE,CAAC,CAAA;YACvF,GAAG,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAA;YAC7B,OAAM;QACR,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;QACzC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YACvB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,2BAA2B,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC,CAAA;YAChG,GAAG,CAAC,GAAG,CAAC,8GAA8G,CAAC,CAAA;YACvH,OAAM;QACR,CAAC;QACD,IAAI,QAAgB,CAAA;QACpB,IAAI,CAAC;YACH,QAAQ,GAAG,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;QACjG,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,2BAA2B,EAAE,CAAC,CAAA;YACnE,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;YACnB,OAAM;QACR,CAAC;QACD,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,GAAG,GAAG,EAAE,CAAC,CAAA;QAC5E,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAA;QAC9C,IAAI,QAAQ,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;YACvH,2EAA2E;YAC3E,MAAM,MAAM,GAAG,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,CAAA;YAC7C,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,qCAAqC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAA;YAC3F,OAAM;QACR,CAAC;QACD,IAAI,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YACtB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,2BAA2B,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC,CAAA;YAChG,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;YACpB,OAAM;QACR,CAAC;QACD,6CAA6C;QAC7C,SAAS,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,CAAC,CAAA;IAC3C,CAAC;IAED,OAAO;QACL,MAAM;QACN,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG;YACnB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,sBAAsB,CAAC,CAAA;YAC3D,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAA;YAC7B,IAAI,QAAQ,KAAK,gBAAgB,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,gBAAgB,GAAG,CAAC,EAAE,CAAC;gBACjF,MAAM,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAA;gBAC9B,OAAO,IAAI,CAAA;YACb,CAAC;YACD,IAAI,QAAQ,KAAK,iBAAiB,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,iBAAiB,GAAG,CAAC,EAAE,CAAC;gBACnF,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAA;gBAC3B,OAAO,IAAI,CAAA;YACb,CAAC;YACD,OAAO,KAAK,CAAA;QACd,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/gateway/console-api/server.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=server.test.d.ts.map

package/dist/gateway/console-api/server.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.test.d.ts","sourceRoot":"","sources":["../../../src/gateway/console-api/server.test.ts"],"names":[],"mappings":""}

package/dist/gateway/console-api/server.test.js

@@ -0,0 +1,149 @@
+import assert from 'node:assert/strict';
+import { chmodSync, mkdirSync, mkdtempSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { test } from 'node:test';
+import { ConsoleError, respond } from './router.js';
+import { CONSOLE_CSP } from './server.js';
+import { FakeConsoleAuth, call, startConsole, tempDataDir, testDeps } from './test-support.js';
+function fakeDist() {
+    const root = mkdtempSync(join(tmpdir(), 'antseed-console-dist-'));
+    writeFileSync(join(root, 'secret.txt'), 'secret');
+    const dir = join(root, 'dist');
+    mkdirSync(join(dir, 'assets'), { recursive: true });
+    writeFileSync(join(dir, 'index.html'), '<!doctype html><title>Console</title>');
+    writeFileSync(join(dir, 'assets', 'app-abc123.js'), 'console.log(1)');
+    writeFileSync(join(dir, 'favicon.svg'), '<svg/>');
+    return { dir, cleanup: () => rmSync(root, { recursive: true, force: true }) };
+}
+function testRoutes(router) {
+    router.add('GET', '/echo/:id', async ({ params, query, principal }) => ({ id: params['id'], q: query.get('q'), kind: principal?.kind }));
+    router.add('POST', '/echo', async ({ body }) => respond(201, { got: body }));
+    router.add('POST', '/fail', async () => { throw new ConsoleError(409, 'conflict_here', 'Nope'); });
+    router.add('GET', '/crash', async () => { throw new Error('secret internals'); });
+    router.add('GET', '/key-only', async () => ({ ok: true }), { allow: ['key'] });
+    router.add('DELETE', '/thing', async () => undefined);
+}
+test('console API: principals, CSRF, read tokens, body limits and JSON errors', async () => {
+    const { dir, store, cleanup } = tempDataDir();
+    const auth = new FakeConsoleAuth();
+    auth.as('admin', { kind: 'member', memberId: 'm1', orgRole: 'admin', workspaceRoles: new Map(), sessionId: 's' });
+    auth.as('reader', { kind: 'token', tokenId: 't1', scope: 'read' });
+    auth.as('writer', { kind: 'token', tokenId: 't2', scope: 'admin' });
+    auth.as('keyholder', { kind: 'key', keyId: 'k1', sessionId: 's2' });
+    const server = await startConsole(testDeps(store, dir), auth, [testRoutes]);
+    try {
+        const ok = await call(server.port, 'GET', '/console/api/echo/a%20b?q=1', { who: 'admin' });
+        assert.equal(ok.status, 200);
+        assert.deepEqual(ok.body, { id: 'a b', q: '1', kind: 'member' });
+        assert.equal(ok.headers['cache-control'], 'no-store');
+        assert.equal(ok.headers['access-control-allow-origin'], undefined);
+        assert.equal((await call(server.port, 'GET', '/console/api/echo/a')).status, 401);
+        assert.equal((await call(server.port, 'GET', '/console/api/auth/config')).status, 200, 'public route');
+        assert.equal((await call(server.port, 'GET', '/console/api/echo/a', { who: 'keyholder' })).status, 403, 'key sessions only where allowed');
+        assert.equal((await call(server.port, 'GET', '/console/api/key-only', { who: 'keyholder' })).status, 200);
+        assert.equal((await call(server.port, 'GET', '/console/api/nope', { who: 'admin' })).status, 404);
+        assert.equal((await call(server.port, 'GET', '/console/api/echo/%E0%A4%A', { who: 'admin' })).status, 404, 'a malformed escape is no route');
+        const noCsrf = await call(server.port, 'POST', '/console/api/echo', { who: 'admin', body: { a: 1 }, csrf: false });
+        assert.equal(noCsrf.status, 403);
+        assert.equal(noCsrf.body.error.code, 'csrf_required');
+        const created = await call(server.port, 'POST', '/console/api/echo', { who: 'admin', body: { a: 1 } });
+        assert.equal(created.status, 201);
+        assert.deepEqual(created.body, { got: { a: 1 } });
+        assert.equal((await call(server.port, 'POST', '/console/api/echo', { who: 'writer', bearer: true, body: {} })).status, 201, 'bearer tokens need no CSRF header');
+        const readOnly = await call(server.port, 'POST', '/console/api/echo', { who: 'reader', bearer: true, body: {} });
+        assert.equal(readOnly.status, 403);
+        assert.equal(readOnly.body.error.code, 'read_only_token');
+        assert.equal((await call(server.port, 'DELETE', '/console/api/thing', { who: 'reader', bearer: true })).status, 403);
+        assert.equal((await call(server.port, 'GET', '/console/api/echo/x', { who: 'reader', bearer: true })).status, 200);
+        assert.equal((await call(server.port, 'DELETE', '/console/api/thing', { who: 'writer', bearer: true })).status, 204);
+        const conflict = await call(server.port, 'POST', '/console/api/fail', { who: 'admin', body: {} });
+        assert.equal(conflict.status, 409);
+        assert.deepEqual(conflict.body, { error: { code: 'conflict_here', message: 'Nope' } });
+        const crash = await call(server.port, 'GET', '/console/api/crash', { who: 'admin' });
+        assert.equal(crash.status, 500);
+        assert.ok(!crash.text.includes('secret internals'));
+        const badJson = await call(server.port, 'POST', '/console/api/echo', { who: 'admin', headers: { 'content-type': 'application/json' }, body: undefined });
+        assert.equal(badJson.status, 201, 'an empty body is allowed');
+        const tooBig = await call(server.port, 'POST', '/console/api/echo', { who: 'admin', body: { pad: 'x'.repeat(1024 * 1024 + 10) } });
+        assert.equal(tooBig.status, 413);
+    }
+    finally {
+        await server.close();
+        cleanup();
+    }
+});
+test('console web app: assets, SPA fallback, caching, CSP and a missing build', async () => {
+    const { dir, store, cleanup } = tempDataDir();
+    const dist = fakeDist();
+    const auth = new FakeConsoleAuth();
+    const server = await startConsole(testDeps(store, dir), auth, [], { distDir: dist.dir });
+    const missing = await startConsole(testDeps(store, dir), auth, [], { distDir: join(dist.dir, 'does-not-exist') });
+    try {
+        const index = await call(server.port, 'GET', '/console');
+        assert.equal(index.status, 200);
+        assert.match(index.text, /<title>Console/);
+        assert.equal(index.headers['content-type'], 'text/html; charset=utf-8');
+        assert.equal(index.headers['cache-control'], 'no-cache');
+        assert.equal(index.headers['content-security-policy'], CONSOLE_CSP);
+        assert.match(CONSOLE_CSP, /frame-ancestors 'none'/);
+        assert.match(CONSOLE_CSP, /connect-src 'self' https: wss:/);
+        assert.equal(index.headers['x-frame-options'], 'DENY');
+        const route = await call(server.port, 'GET', '/console/workspaces/ws_1/keys');
+        assert.equal(route.status, 200);
+        assert.match(route.text, /<title>Console/);
+        const asset = await call(server.port, 'GET', '/console/assets/app-abc123.js');
+        assert.equal(asset.status, 200);
+        assert.equal(asset.headers['cache-control'], 'public, max-age=31536000, immutable');
+        assert.equal(asset.headers['content-type'], 'text/javascript; charset=utf-8');
+        assert.equal((await call(server.port, 'GET', '/console/favicon.svg')).headers['content-type'], 'image/svg+xml');
+        assert.equal((await call(server.port, 'GET', '/console/assets/missing.js')).status, 404);
+        for (const path of ['/console/..%2Fsecret.txt', '/console/%2e%2e/secret.txt', '/console/assets/..%2F..%2Fsecret.txt']) {
+            const traversal = await call(server.port, 'GET', path);
+            assert.notEqual(traversal.text, 'secret', path);
+        }
+        assert.equal((await call(server.port, 'POST', '/console/x', { csrf: false })).status, 405);
+        const notBuilt = await call(missing.port, 'GET', '/console');
+        assert.equal(notBuilt.status, 503);
+        assert.match(notBuilt.text, /not built/);
+    }
+    finally {
+        await server.close();
+        await missing.close();
+        dist.cleanup();
+        cleanup();
+    }
+});
+test('a static file that cannot be read cuts the response short without crashing', { skip: process.getuid?.() === 0 && 'root reads any file' }, async () => {
+    const { dir, store, cleanup } = tempDataDir();
+    const dist = fakeDist();
+    const logs = [];
+    const unreadable = join(dist.dir, 'assets', 'locked-abc123.js');
+    writeFileSync(unreadable, 'console.log(2)');
+    chmodSync(unreadable, 0o000);
+    const server = await startConsole(testDeps(store, dir, { log: (message) => logs.push(message) }), new FakeConsoleAuth(), [], { distDir: dist.dir });
+    try {
+        await assert.rejects(call(server.port, 'GET', '/console/assets/locked-abc123.js'));
+        assert.equal((await call(server.port, 'GET', '/console')).status, 200);
+        assert.ok(logs.some((line) => line.includes('could not serve')));
+    }
+    finally {
+        await server.close();
+        chmodSync(unreadable, 0o600);
+        dist.cleanup();
+        cleanup();
+    }
+});
+test('paths outside /console are not handled', async () => {
+    const { dir, store, cleanup } = tempDataDir();
+    const server = await startConsole(testDeps(store, dir), new FakeConsoleAuth(), []);
+    try {
+        assert.equal((await call(server.port, 'GET', '/v1/models')).status, 404);
+        assert.equal((await call(server.port, 'GET', '/consolex')).status, 404);
+    }
+    finally {
+        await server.close();
+        cleanup();
+    }
+});
+//# sourceMappingURL=server.test.js.map

package/dist/gateway/console-api/server.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.test.js","sourceRoot":"","sources":["../../../src/gateway/console-api/server.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAA;AACvC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AAClF,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAChC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,YAAY,EAAE,OAAO,EAAsB,MAAM,aAAa,CAAA;AACvE,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAA;AAE9F,SAAS,QAAQ;IACf,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,uBAAuB,CAAC,CAAC,CAAA;IACjE,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,QAAQ,CAAC,CAAA;IACjD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IAC9B,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACnD,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,EAAE,uCAAuC,CAAC,CAAA;IAC/E,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,eAAe,CAAC,EAAE,gBAAgB,CAAC,CAAA;IACrE,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,EAAE,QAAQ,CAAC,CAAA;IACjD,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,CAAA;AAC/E,CAAC;AAED,SAAS,UAAU,CAAC,MAAqB;IACvC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;IACxI,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;IAC5E,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,IAAI,EAAE,GAAG,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,eAAe,EAAE,MAAM,CAAC,CAAA,CAAC,CAAC,CAAC,CAAA;IACjG,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,IAAI,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAA,CAAC,CAAC,CAAC,CAAA;IAChF,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,WAAW,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IAC9E,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS,CAAC,CAAA;AACvD,CAAC;AAED,IAAI,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;IACzF,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,WAAW,EAAE,CAAA;IAC7C,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAA;IAClC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,IAAI,GAAG,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAA;IACjH,IAAI,CAAC,EAAE,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAA;IAClE,IAAI,CAAC,EAAE,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAA;IACnE,IAAI,CAAC,EAAE,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACnE,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,UAAU,CAAC,CAAC,CAAA;IAC3E,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,6BAA6B,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAA;QAC1F,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QAC5B,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAA;QAChE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,UAAU,CAAC,CAAA;QACrD,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,6BAA6B,CAAC,EAAE,SAAS,CAAC,CAAA;QAElE,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,qBAAqB,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QACjF,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,0BAA0B,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,cAAc,CAAC,CAAA;QACtG,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,qBAAqB,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,iCAAiC,CAAC,CAAA;QAC1I,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,uBAAuB,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QACzG,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QACjG,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,4BAA4B,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,gCAAgC,CAAC,CAAA;QAE5I,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,mBAAmB,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QAClH,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QAChC,MAAM,CAAC,KAAK,CAAE,MAAM,CAAC,IAAY,CAAC,KAAK,CAAC,IAAI,EAAE,eAAe,CAAC,CAAA;QAC9D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,mBAAmB,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAA;QACtG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QACjC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAA;QACjD,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,mBAAmB,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,mCAAmC,CAAC,CAAA;QAEhK,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,mBAAmB,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAA;QAChH,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QAClC,MAAM,CAAC,KAAK,CAAE,QAAQ,CAAC,IAAY,CAAC,KAAK,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAA;QAClE,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,oBAAoB,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QACpH,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,qBAAqB,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QAClH,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,oBAAoB,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QAEpH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,mBAAmB,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAA;QACjG,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QAClC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAA;QACtF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAA;QACpF,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QAC/B,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC,CAAA;QAEnD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,mBAAmB,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAA;QACxJ,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,0BAA0B,CAAC,CAAA;QAC7D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,mBAAmB,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,IAAI,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,CAAA;QAClI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAClC,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;QACpB,OAAO,EAAE,CAAA;IACX,CAAC;AACH,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;IACzF,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,WAAW,EAAE,CAAA;IAC7C,MAAM,IAAI,GAAG,QAAQ,EAAE,CAAA;IACvB,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAA;IAClC,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAA;IACxF,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,gBAAgB,CAAC,EAAE,CAAC,CAAA;IACjH,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,UAAU,CAAC,CAAA;QACxD,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QAC/B,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAA;QAC1C,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,0BAA0B,CAAC,CAAA;QACvE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,UAAU,CAAC,CAAA;QACxD,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,yBAAyB,CAAC,EAAE,WAAW,CAAC,CAAA;QACnE,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,wBAAwB,CAAC,CAAA;QACnD,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,gCAAgC,CAAC,CAAA;QAC3D,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC,CAAA;QAEtD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,+BAA+B,CAAC,CAAA;QAC7E,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QAC/B,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAA;QAE1C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,+BAA+B,CAAC,CAAA;QAC7E,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QAC/B,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,qCAAqC,CAAC,CAAA;QACnF,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,gCAAgC,CAAC,CAAA;QAC7E,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,sBAAsB,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,eAAe,CAAC,CAAA;QAE/G,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,4BAA4B,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QACxF,KAAK,MAAM,IAAI,IAAI,CAAC,0BAA0B,EAAE,4BAA4B,EAAE,sCAAsC,CAAC,EAAE,CAAC;YACtH,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,CAAA;YACtD,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAA;QACjD,CAAC;QACD,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QAE1F,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,UAAU,CAAC,CAAA;QAC5D,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QAClC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC,CAAA;IAC1C,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;QACpB,MAAM,OAAO,CAAC,KAAK,EAAE,CAAA;QACrB,IAAI,CAAC,OAAO,EAAE,CAAA;QACd,OAAO,EAAE,CAAA;IACX,CAAC;AACH,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,4EAA4E,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,KAAK,CAAC,IAAI,qBAAqB,EAAE,EAAE,KAAK,IAAI,EAAE;IACzJ,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,WAAW,EAAE,CAAA;IAC7C,MAAM,IAAI,GAAG,QAAQ,EAAE,CAAA;IACvB,MAAM,IAAI,GAAa,EAAE,CAAA;IACzB,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,kBAAkB,CAAC,CAAA;IAC/D,aAAa,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAA;IAC3C,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAA;IAC5B,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,CAAC,OAAe,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,IAAI,eAAe,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAA;IAC3J,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,kCAAkC,CAAC,CAAC,CAAA;QAClF,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QACtE,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAA;IAClE,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;QACpB,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAA;QAC5B,IAAI,CAAC,OAAO,EAAE,CAAA;QACd,OAAO,EAAE,CAAA;IACX,CAAC;AACH,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;IACxD,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,WAAW,EAAE,CAAA;IAC7C,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,IAAI,eAAe,EAAE,EAAE,EAAE,CAAC,CAAA;IAClF,IAAI,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QACxE,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACzE,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;QACpB,OAAO,EAAE,CAAA;IACX,CAAC;AACH,CAAC,CAAC,CAAA"}

package/dist/gateway/console-api/test-support.d.ts

@@ -0,0 +1,59 @@
+import * as http from 'node:http';
+import { GatewayStore, type MemberRecord, type OrgRole, type WorkspaceRole } from '../store.js';
+import type { ConsoleDeps } from './deps.js';
+import type { ConsoleAuth, ConsoleRouter, Principal } from './router.js';
+import { type ConsoleRegistrar } from './server.js';
+/**
+ * Test-only fake auth: `Authorization: Bearer <name>` or `Cookie: who=<name>`
+ * selects a principal registered with `as(name, principal)`.
+ */
+export declare class FakeConsoleAuth implements ConsoleAuth {
+    readonly principals: Map<string, Principal>;
+    readonly revokedMembers: string[];
+    readonly revokedKeys: string[];
+    as(name: string, principal: Principal): void;
+    authenticate(req: http.IncomingMessage): Promise<Principal | null>;
+    registerRoutes(router: ConsoleRouter): void;
+    revokeMemberSessions(memberId: string): void;
+    revokeKeySessions(keyId: string): void;
+    me(): Promise<never>;
+}
+export declare function memberPrincipal(store: GatewayStore, memberId: string): Principal;
+/** A member who accepted an invite: active, with the invite's role and workspaces. */
+export declare function addActiveMember(store: GatewayStore, label: string, options?: {
+    orgRole?: OrgRole;
+    workspaces?: Array<{
+        workspaceId: string;
+        role: WorkspaceRole;
+    }>;
+    email?: string | null;
+    createdBy?: string | null;
+}): MemberRecord;
+export declare function tempDataDir(): {
+    dir: string;
+    store: GatewayStore;
+    cleanup: () => void;
+};
+export declare function testDeps(store: GatewayStore, dir: string, overrides?: Partial<ConsoleDeps>): ConsoleDeps;
+/** A console API on an ephemeral port. */
+export declare function startConsole(deps: ConsoleDeps, auth: ConsoleAuth, registrars: ConsoleRegistrar[], options?: {
+    distDir?: string;
+}): Promise<{
+    port: number;
+    close: () => Promise<void>;
+}>;
+export interface CallResult {
+    status: number;
+    body: unknown;
+    text: string;
+    headers: http.IncomingHttpHeaders;
+}
+/** `who` picks the fake principal; browser-style (cookie + CSRF header) unless `bearer`. */
+export declare function call(port: number, method: string, path: string, options?: {
+    who?: string;
+    body?: unknown;
+    bearer?: boolean;
+    csrf?: boolean;
+    headers?: http.OutgoingHttpHeaders;
+}): Promise<CallResult>;
+//# sourceMappingURL=test-support.d.ts.map

package/dist/gateway/console-api/test-support.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"test-support.d.ts","sourceRoot":"","sources":["../../../src/gateway/console-api/test-support.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AAIjC,OAAO,EAAE,YAAY,EAAE,KAAK,YAAY,EAAE,KAAK,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,aAAa,CAAA;AAC/F,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,WAAW,CAAA;AAC5C,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AACxE,OAAO,EAAoB,KAAK,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAErE;;;GAGG;AACH,qBAAa,eAAgB,YAAW,WAAW;IACjD,QAAQ,CAAC,UAAU,yBAA+B;IAClD,QAAQ,CAAC,cAAc,EAAE,MAAM,EAAE,CAAK;IACtC,QAAQ,CAAC,WAAW,EAAE,MAAM,EAAE,CAAK;IAEnC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,GAAG,IAAI;IAItC,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC;IAOxE,cAAc,CAAC,MAAM,EAAE,aAAa,GAAG,IAAI;IAI3C,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;IAI5C,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAIhC,EAAE,IAAI,OAAO,CAAC,KAAK,CAAC;CAG3B;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,GAAG,SAAS,CAGhF;AAED,sFAAsF;AACtF,wBAAgB,eAAe,CAC7B,KAAK,EAAE,YAAY,EACnB,KAAK,EAAE,MAAM,EACb,OAAO,GAAE;IAAE,OAAO,CAAC,EAAE,OAAO,CAAC;IAAC,UAAU,CAAC,EAAE,KAAK,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,aAAa,CAAA;KAAE,CAAC,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAO,GACtJ,YAAY,CAUd;AAED,wBAAgB,WAAW,IAAI;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,YAAY,CAAC;IAAC,OAAO,EAAE,MAAM,IAAI,CAAA;CAAE,CAIvF;AAED,wBAAgB,QAAQ,CAAC,KAAK,EAAE,YAAY,EAAE,GAAG,EAAE,MAAM,EAAE,SAAS,GAAE,OAAO,CAAC,WAAW,CAAM,GAAG,WAAW,CAa5G;AAED,0CAA0C;AAC1C,wBAAsB,YAAY,CAChC,IAAI,EAAE,WAAW,EACjB,IAAI,EAAE,WAAW,EACjB,UAAU,EAAE,gBAAgB,EAAE,EAC9B,OAAO,GAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAA;CAAO,GACjC,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,CAAC,CAYvD;AAED,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,OAAO,CAAA;IACb,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,IAAI,CAAC,mBAAmB,CAAA;CAClC;AAED,4FAA4F;AAC5F,wBAAsB,IAAI,CACxB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAAC,IAAI,CAAC,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,IAAI,CAAC,mBAAmB,CAAA;CAAO,GACnH,OAAO,CAAC,UAAU,CAAC,CAsBrB"}