@brightchain/brightchain-api-lib 0.14.0 → 0.15.0

package/src/lib/controllers/identity/deviceController.js

@@ -0,0 +1,355 @@
+"use strict";
+/**
+ * DeviceController — REST API for device provisioning and management.
+ *
+ * Routes:
+ *   POST /provision              — Provision a new device via paper key
+ *   GET  /list                   — List devices for the authenticated member
+ *   POST /:id/revoke             — Revoke a provisioned device
+ *   PUT  /:id/rename             — Rename a provisioned device
+ *
+ * Requirements: 3.1-3.8
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DeviceController = void 0;
+const deviceType_1 = require("@brightchain/brightchain-lib/lib/enumerations/deviceType");
+const identity_1 = require("@brightchain/brightchain-lib/lib/services/identity");
+const node_express_suite_1 = require("@digitaldefiance/node-express-suite");
+const errorResponse_1 = require("../../utils/errorResponse");
+const base_1 = require("../base");
+// ─── Controller ─────────────────────────────────────────────────────────────
+/**
+ * Controller for device provisioning and management.
+ *
+ * Delegates to {@link DeviceProvisioningService} in brightchain-lib for
+ * core provisioning logic and uses an {@link IDeviceKeyStorage} implementation
+ * for persistence.
+ *
+ * @requirements 3.1, 3.2, 3.3, 3.4, 3.5, 3.6, 3.7, 3.8
+ */
+class DeviceController extends base_1.BaseController {
+    constructor(application) {
+        super(application);
+        this.deviceStorage = null;
+        this.eciesService = null;
+    }
+    /**
+     * Inject the device key storage implementation.
+     * Must be called during application initialisation before handling requests.
+     */
+    setDeviceStorage(storage) {
+        this.deviceStorage = storage;
+    }
+    /**
+     * Inject the ECIES service for cryptographic operations.
+     * Must be called during application initialisation before handling requests.
+     */
+    setEciesService(service) {
+        this.eciesService = service;
+    }
+    getDeviceStorage() {
+        if (!this.deviceStorage) {
+            throw new Error('DeviceKeyStorage not initialized');
+        }
+        return this.deviceStorage;
+    }
+    getEciesService() {
+        if (!this.eciesService) {
+            throw new Error('ECIESService not initialized');
+        }
+        return this.eciesService;
+    }
+    /**
+     * Extract the authenticated member ID from the request.
+     * Falls back to body/query memberId for testing.
+     */
+    getMemberId(req) {
+        const body = req.body;
+        if (body && typeof body === 'object') {
+            const rec = body;
+            if (typeof rec['memberId'] === 'string')
+                return rec['memberId'];
+        }
+        const query = req.query;
+        if (query && typeof query.memberId === 'string')
+            return query.memberId;
+        throw new Error('No authenticated user');
+    }
+    // ─── Route definitions ──────────────────────────────────────────────────
+    initRouteDefinitions() {
+        const noAuth = {
+            useAuthentication: false,
+            useCryptoAuthentication: false,
+        };
+        this.routeDefinitions = [
+            (0, node_express_suite_1.routeConfig)('post', '/provision', {
+                ...noAuth,
+                handlerKey: 'provisionDevice',
+                openapi: {
+                    summary: 'Provision a new device',
+                    description: 'Validates a paper key, recovers the member identity, generates device-specific keys, and stores device metadata.',
+                    tags: ['Devices'],
+                    responses: {
+                        201: {
+                            schema: 'ProvisionDeviceResponse',
+                            description: 'Device provisioned successfully',
+                        },
+                        400: {
+                            schema: 'ApiErrorResponse',
+                            description: 'Invalid paper key or missing fields',
+                        },
+                    },
+                },
+            }),
+            (0, node_express_suite_1.routeConfig)('get', '/list', {
+                ...noAuth,
+                handlerKey: 'listDevices',
+                openapi: {
+                    summary: 'List devices for a member',
+                    description: 'Returns all provisioned devices for the authenticated member.',
+                    tags: ['Devices'],
+                    responses: {
+                        200: {
+                            schema: 'ListDevicesResponse',
+                            description: 'List of devices',
+                        },
+                    },
+                },
+            }),
+            (0, node_express_suite_1.routeConfig)('post', '/:id/revoke', {
+                ...noAuth,
+                handlerKey: 'revokeDevice',
+                openapi: {
+                    summary: 'Revoke a device',
+                    description: 'Marks a provisioned device as revoked so its keys are no longer trusted.',
+                    tags: ['Devices'],
+                    responses: {
+                        200: {
+                            schema: 'RevokeDeviceResponse',
+                            description: 'Device revoked',
+                        },
+                        404: {
+                            schema: 'ApiErrorResponse',
+                            description: 'Device not found',
+                        },
+                    },
+                },
+            }),
+            (0, node_express_suite_1.routeConfig)('put', '/:id/rename', {
+                ...noAuth,
+                handlerKey: 'renameDevice',
+                openapi: {
+                    summary: 'Rename a device',
+                    description: 'Updates the human-readable name of a provisioned device.',
+                    tags: ['Devices'],
+                    responses: {
+                        200: {
+                            schema: 'RenameDeviceResponse',
+                            description: 'Device renamed',
+                        },
+                        404: {
+                            schema: 'ApiErrorResponse',
+                            description: 'Device not found',
+                        },
+                    },
+                },
+            }),
+        ];
+        this.handlers = {
+            provisionDevice: this.handleProvisionDevice.bind(this),
+            listDevices: this.handleListDevices.bind(this),
+            revokeDevice: this.handleRevokeDevice.bind(this),
+            renameDevice: this.handleRenameDevice.bind(this),
+        };
+    }
+    // ─── Handlers ─────────────────────────────────────────────────────────
+    /**
+     * POST /provision — Provision a new device via paper key.
+     *
+     * Validates the paper key, recovers the member identity, generates
+     * device-specific keys, and stores device metadata.
+     *
+     * @requirements 3.1, 3.2, 3.3, 3.4, 3.5, 3.8
+     */
+    async handleProvisionDevice(req) {
+        try {
+            const { paperKey, deviceName, deviceType, deviceIndex } = req.body;
+            if (!paperKey || typeof paperKey !== 'string') {
+                return (0, errorResponse_1.validationError)('Missing required field: paperKey');
+            }
+            if (!deviceName || typeof deviceName !== 'string') {
+                return (0, errorResponse_1.validationError)('Missing required field: deviceName');
+            }
+            if (!deviceType || !Object.values(deviceType_1.DeviceType).includes(deviceType)) {
+                return (0, errorResponse_1.validationError)(`Missing or invalid field: deviceType (expected one of ${Object.values(deviceType_1.DeviceType).join(', ')})`);
+            }
+            if (deviceIndex === undefined || typeof deviceIndex !== 'number') {
+                return (0, errorResponse_1.validationError)('Missing required field: deviceIndex (non-negative integer)');
+            }
+            const eciesService = this.getEciesService();
+            const storage = this.getDeviceStorage();
+            const result = await identity_1.DeviceProvisioningService.provisionDevice(paperKey, deviceName, deviceType, eciesService, storage, deviceIndex);
+            // Requirement 3.5: paper key is marked as used inside provisionDevice
+            // Requirement 3.8: if provisioning throws, paper key is NOT marked
+            return {
+                statusCode: 201,
+                response: {
+                    status: 'success',
+                    data: {
+                        device: result.deviceMetadata,
+                        publicKeyHex: result.deviceKeys.publicKeyHex,
+                        derivationPath: result.deviceKeys.derivationPath,
+                    },
+                    message: 'Device provisioned successfully',
+                },
+            };
+        }
+        catch (error) {
+            return this.mapDeviceError(error);
+        }
+    }
+    /**
+     * GET /list — List all devices for the authenticated member.
+     *
+     * @requirements 3.7
+     */
+    async handleListDevices(req) {
+        try {
+            const memberId = this.getMemberId(req);
+            const storage = this.getDeviceStorage();
+            const devices = await storage.list(memberId);
+            return {
+                statusCode: 200,
+                response: {
+                    status: 'success',
+                    data: devices,
+                    message: `Found ${devices.length} device(s)`,
+                },
+            };
+        }
+        catch (error) {
+            return (0, errorResponse_1.handleError)(error);
+        }
+    }
+    /**
+     * POST /:id/revoke — Revoke a provisioned device.
+     *
+     * Marks the device as revoked so its keys are no longer trusted.
+     * The device metadata is updated in storage with a revokedAt timestamp.
+     *
+     * @requirements 3.7
+     */
+    async handleRevokeDevice(req) {
+        try {
+            const { id } = req.params;
+            if (!id) {
+                return (0, errorResponse_1.validationError)('Missing required parameter: id');
+            }
+            const storage = this.getDeviceStorage();
+            const device = await storage.retrieve(id);
+            if (!device) {
+                return (0, errorResponse_1.notFoundError)('Device', id);
+            }
+            if (device.revokedAt) {
+                return (0, errorResponse_1.validationError)('Device is already revoked');
+            }
+            const revokedAt = new Date();
+            const updatedDevice = { ...device, revokedAt };
+            // Remove then re-store to update the record
+            await storage.remove(id);
+            await storage.store(updatedDevice);
+            return {
+                statusCode: 200,
+                response: {
+                    status: 'success',
+                    data: {
+                        revoked: true,
+                        revokedAt: revokedAt.toISOString(),
+                    },
+                    message: 'Device revoked',
+                },
+            };
+        }
+        catch (error) {
+            return (0, errorResponse_1.handleError)(error);
+        }
+    }
+    /**
+     * PUT /:id/rename — Rename a provisioned device.
+     *
+     * Updates the human-readable name of a provisioned device.
+     *
+     * @requirements 3.7
+     */
+    async handleRenameDevice(req) {
+        try {
+            const { id } = req.params;
+            const { deviceName } = req.body;
+            if (!id) {
+                return (0, errorResponse_1.validationError)('Missing required parameter: id');
+            }
+            if (!deviceName || typeof deviceName !== 'string') {
+                return (0, errorResponse_1.validationError)('Missing required field: deviceName');
+            }
+            const storage = this.getDeviceStorage();
+            const device = await storage.retrieve(id);
+            if (!device) {
+                return (0, errorResponse_1.notFoundError)('Device', id);
+            }
+            if (device.revokedAt) {
+                return (0, errorResponse_1.validationError)('Cannot rename a revoked device');
+            }
+            const updatedDevice = { ...device, deviceName };
+            // Remove then re-store to update the record
+            await storage.remove(id);
+            await storage.store(updatedDevice);
+            return {
+                statusCode: 200,
+                response: {
+                    status: 'success',
+                    data: updatedDevice,
+                    message: 'Device renamed',
+                },
+            };
+        }
+        catch (error) {
+            return (0, errorResponse_1.handleError)(error);
+        }
+    }
+    // ─── Error mapping ──────────────────────────────────────────────────
+    /**
+     * Map device-specific errors to appropriate HTTP responses.
+     */
+    mapDeviceError(error) {
+        if (error instanceof identity_1.InvalidPaperKeyError) {
+            return {
+                statusCode: 400,
+                response: {
+                    message: error.message,
+                    error: 'INVALID_PAPER_KEY',
+                },
+            };
+        }
+        if (error instanceof identity_1.DeviceKeyGenerationError) {
+            return {
+                statusCode: 500,
+                response: {
+                    message: error.message,
+                    error: 'DEVICE_KEY_GENERATION_FAILED',
+                },
+            };
+        }
+        if (error instanceof identity_1.DeviceKeyStorageError) {
+            return {
+                statusCode: 500,
+                response: {
+                    message: error.message,
+                    error: 'DEVICE_KEY_STORAGE_FAILED',
+                },
+            };
+        }
+        return (0, errorResponse_1.handleError)(error);
+    }
+}
+exports.DeviceController = DeviceController;
+//# sourceMappingURL=deviceController.js.map

package/src/lib/controllers/identity/deviceController.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deviceController.js","sourceRoot":"","sources":["../../../../../../brightchain-api-lib/src/lib/controllers/identity/deviceController.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;;AAEH,yFAAsF;AAQtF,iFAK4D;AAG5D,4EAK6C;AAG7C,6DAImC;AACnC,kCAAyC;AA+CzC,+EAA+E;AAE/E;;;;;;;;GAQG;AACH,MAAa,gBAEX,SAAQ,qBAKT;IAIC,YAAY,WAAyC;QACnD,KAAK,CAAC,WAAW,CAAC,CAAC;QAJb,kBAAa,GAA6B,IAAI,CAAC;QAC/C,iBAAY,GAA6B,IAAI,CAAC;IAItD,CAAC;IAED;;;OAGG;IACI,gBAAgB,CAAC,OAA0B;QAChD,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC;IAC/B,CAAC;IAED;;;OAGG;IACI,eAAe,CAAC,OAA0B;QAC/C,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC;IAC9B,CAAC;IAEO,gBAAgB;QACtB,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACtD,CAAC;QACD,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IAEO,eAAe;QACrB,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAClD,CAAC;QACD,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAED;;;OAGG;IACK,WAAW,CAAC,GAAY;QAC9B,MAAM,IAAI,GAAI,GAA2B,CAAC,IAAI,CAAC;QAC/C,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrC,MAAM,GAAG,GAAG,IAA+B,CAAC;YAC5C,IAAI,OAAO,GAAG,CAAC,UAAU,CAAC,KAAK,QAAQ;gBAAE,OAAO,GAAG,CAAC,UAAU,CAAC,CAAC;QAClE,CAAC;QACD,MAAM,KAAK,GAAI,GAAwB,CAAC,KAAK,CAAC;QAC9C,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC,QAAQ,CAAC;QAEvE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAC3C,CAAC;IAED,2EAA2E;IAEjE,oBAAoB;QAC5B,MAAM,MAAM,GAAG;YACb,iBAAiB,EAAE,KAAK;YACxB,uBAAuB,EAAE,KAAK;SAC/B,CAAC;QAEF,IAAI,CAAC,gBAAgB,GAAG;YACtB,IAAA,gCAAW,EAAC,MAAM,EAAE,YAAY,EAAE;gBAChC,GAAG,MAAM;gBACT,UAAU,EAAE,iBAAiB;gBAC7B,OAAO,EAAE;oBACP,OAAO,EAAE,wBAAwB;oBACjC,WAAW,EACT,kHAAkH;oBACpH,IAAI,EAAE,CAAC,SAAS,CAAC;oBACjB,SAAS,EAAE;wBACT,GAAG,EAAE;4BACH,MAAM,EAAE,yBAAyB;4BACjC,WAAW,EAAE,iCAAiC;yBAC/C;wBACD,GAAG,EAAE;4BACH,MAAM,EAAE,kBAAkB;4BAC1B,WAAW,EAAE,qCAAqC;yBACnD;qBACF;iBACF;aACF,CAAC;YACF,IAAA,gCAAW,EAAC,KAAK,EAAE,OAAO,EAAE;gBAC1B,GAAG,MAAM;gBACT,UAAU,EAAE,aAAa;gBACzB,OAAO,EAAE;oBACP,OAAO,EAAE,2BAA2B;oBACpC,WAAW,EACT,+DAA+D;oBACjE,IAAI,EAAE,CAAC,SAAS,CAAC;oBACjB,SAAS,EAAE;wBACT,GAAG,EAAE;4BACH,MAAM,EAAE,qBAAqB;4BAC7B,WAAW,EAAE,iBAAiB;yBAC/B;qBACF;iBACF;aACF,CAAC;YACF,IAAA,gCAAW,EAAC,MAAM,EAAE,aAAa,EAAE;gBACjC,GAAG,MAAM;gBACT,UAAU,EAAE,cAAc;gBAC1B,OAAO,EAAE;oBACP,OAAO,EAAE,iBAAiB;oBAC1B,WAAW,EACT,0EAA0E;oBAC5E,IAAI,EAAE,CAAC,SAAS,CAAC;oBACjB,SAAS,EAAE;wBACT,GAAG,EAAE;4BACH,MAAM,EAAE,sBAAsB;4BAC9B,WAAW,EAAE,gBAAgB;yBAC9B;wBACD,GAAG,EAAE;4BACH,MAAM,EAAE,kBAAkB;4BAC1B,WAAW,EAAE,kBAAkB;yBAChC;qBACF;iBACF;aACF,CAAC;YACF,IAAA,gCAAW,EAAC,KAAK,EAAE,aAAa,EAAE;gBAChC,GAAG,MAAM;gBACT,UAAU,EAAE,cAAc;gBAC1B,OAAO,EAAE;oBACP,OAAO,EAAE,iBAAiB;oBAC1B,WAAW,EACT,0DAA0D;oBAC5D,IAAI,EAAE,CAAC,SAAS,CAAC;oBACjB,SAAS,EAAE;wBACT,GAAG,EAAE;4BACH,MAAM,EAAE,sBAAsB;4BAC9B,WAAW,EAAE,gBAAgB;yBAC9B;wBACD,GAAG,EAAE;4BACH,MAAM,EAAE,kBAAkB;4BAC1B,WAAW,EAAE,kBAAkB;yBAChC;qBACF;iBACF;aACF,CAAC;SACH,CAAC;QAEF,IAAI,CAAC,QAAQ,GAAG;YACd,eAAe,EAAE,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC;YACtD,WAAW,EAAE,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC;YAC9C,YAAY,EAAE,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC;YAChD,YAAY,EAAE,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC;SACjD,CAAC;IACJ,CAAC;IAED,yEAAyE;IAEzE;;;;;;;OAOG;IACK,KAAK,CAAC,qBAAqB,CAAC,GAAY;QAI9C,IAAI,CAAC;YACH,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,GACrD,GACD,CAAC,IAAI,CAAC;YAEP,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBAC9C,OAAO,IAAA,+BAAe,EAAC,kCAAkC,CAAC,CAAC;YAC7D,CAAC;YACD,IAAI,CAAC,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;gBAClD,OAAO,IAAA,+BAAe,EAAC,oCAAoC,CAAC,CAAC;YAC/D,CAAC;YACD,IAAI,CAAC,UAAU,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,uBAAU,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;gBACnE,OAAO,IAAA,+BAAe,EACpB,yDAAyD,MAAM,CAAC,MAAM,CAAC,uBAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACjG,CAAC;YACJ,CAAC;YACD,IAAI,WAAW,KAAK,SAAS,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;gBACjE,OAAO,IAAA,+BAAe,EACpB,4DAA4D,CAC7D,CAAC;YACJ,CAAC;YAED,MAAM,YAAY,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;YAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAExC,MAAM,MAAM,GAAG,MAAM,oCAAyB,CAAC,eAAe,CAC5D,QAAQ,EACR,UAAU,EACV,UAAU,EACV,YAAY,EACZ,OAAO,EACP,WAAW,CACZ,CAAC;YAEF,sEAAsE;YACtE,mEAAmE;YAEnE,OAAO;gBACL,UAAU,EAAE,GAAG;gBACf,QAAQ,EAAE;oBACR,MAAM,EAAE,SAAS;oBACjB,IAAI,EAAE;wBACJ,MAAM,EAAE,MAAM,CAAC,cAAc;wBAC7B,YAAY,EAAE,MAAM,CAAC,UAAU,CAAC,YAAY;wBAC5C,cAAc,EAAE,MAAM,CAAC,UAAU,CAAC,cAAc;qBACjD;oBACD,OAAO,EAAE,iCAAiC;iBACR;aACrC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,iBAAiB,CAAC,GAAY;QAI1C,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACvC,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACxC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAE7C,OAAO;gBACL,UAAU,EAAE,GAAG;gBACf,QAAQ,EAAE;oBACR,MAAM,EAAE,SAAS;oBACjB,IAAI,EAAE,OAAO;oBACb,OAAO,EAAE,SAAS,OAAO,CAAC,MAAM,YAAY;iBACd;aACjC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,IAAA,2BAAW,EAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACK,KAAK,CAAC,kBAAkB,CAAC,GAAY;QAI3C,IAAI,CAAC;YACH,MAAM,EAAE,EAAE,EAAE,GAAI,GAAsB,CAAC,MAAM,CAAC;YAC9C,IAAI,CAAC,EAAE,EAAE,CAAC;gBACR,OAAO,IAAA,+BAAe,EAAC,gCAAgC,CAAC,CAAC;YAC3D,CAAC;YAED,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACxC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YAC1C,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO,IAAA,6BAAa,EAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YACrC,CAAC;YAED,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;gBACrB,OAAO,IAAA,+BAAe,EAAC,2BAA2B,CAAC,CAAC;YACtD,CAAC;YAED,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;YAC7B,MAAM,aAAa,GAAG,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,CAAC;YAC/C,4CAA4C;YAC5C,MAAM,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACzB,MAAM,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YAEnC,OAAO;gBACL,UAAU,EAAE,GAAG;gBACf,QAAQ,EAAE;oBACR,MAAM,EAAE,SAAS;oBACjB,IAAI,EAAE;wBACJ,OAAO,EAAE,IAAI;wBACb,SAAS,EAAE,SAAS,CAAC,WAAW,EAAE;qBACnC;oBACD,OAAO,EAAE,gBAAgB;iBACM;aAClC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,IAAA,2BAAW,EAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,kBAAkB,CAAC,GAAY;QAI3C,IAAI,CAAC;YACH,MAAM,EAAE,EAAE,EAAE,GAAI,GAAsB,CAAC,MAAM,CAAC;YAC9C,MAAM,EAAE,UAAU,EAAE,GAAI,GAAwB,CAAC,IAAI,CAAC;YAEtD,IAAI,CAAC,EAAE,EAAE,CAAC;gBACR,OAAO,IAAA,+BAAe,EAAC,gCAAgC,CAAC,CAAC;YAC3D,CAAC;YACD,IAAI,CAAC,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;gBAClD,OAAO,IAAA,+BAAe,EAAC,oCAAoC,CAAC,CAAC;YAC/D,CAAC;YAED,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACxC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YAC1C,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO,IAAA,6BAAa,EAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YACrC,CAAC;YAED,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;gBACrB,OAAO,IAAA,+BAAe,EAAC,gCAAgC,CAAC,CAAC;YAC3D,CAAC;YAED,MAAM,aAAa,GAAG,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,CAAC;YAChD,4CAA4C;YAC5C,MAAM,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACzB,MAAM,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YAEnC,OAAO;gBACL,UAAU,EAAE,GAAG;gBACf,QAAQ,EAAE;oBACR,MAAM,EAAE,SAAS;oBACjB,IAAI,EAAE,aAAa;oBACnB,OAAO,EAAE,gBAAgB;iBACM;aAClC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,IAAA,2BAAW,EAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IAED,uEAAuE;IAEvE;;OAEG;IACK,cAAc,CAAC,KAAc;QAInC,IAAI,KAAK,YAAY,+BAAoB,EAAE,CAAC;YAC1C,OAAO;gBACL,UAAU,EAAE,GAAG;gBACf,QAAQ,EAAE;oBACR,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,KAAK,EAAE,mBAAmB;iBAC3B;aACF,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,YAAY,mCAAwB,EAAE,CAAC;YAC9C,OAAO;gBACL,UAAU,EAAE,GAAG;gBACf,QAAQ,EAAE;oBACR,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,KAAK,EAAE,8BAA8B;iBACtC;aACF,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,YAAY,gCAAqB,EAAE,CAAC;YAC3C,OAAO;gBACL,UAAU,EAAE,GAAG;gBACf,QAAQ,EAAE;oBACR,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,KAAK,EAAE,2BAA2B;iBACnC;aACF,CAAC;QACJ,CAAC;QACD,OAAO,IAAA,2BAAW,EAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;CACF;AArYD,4CAqYC"}

package/src/lib/controllers/identity/directoryController.d.ts

@@ -0,0 +1,75 @@
+/**
+ * DirectoryController — REST API for the public key directory.
+ *
+ * Routes:
+ *   GET  /search              — Search the public key directory
+ *   GET  /profile/:memberId   — Get a member's public profile
+ *   PUT  /profile              — Create or update a public profile
+ *   POST /profile/:memberId/privacy — Toggle privacy mode
+ *
+ * Requirements: 5.1-5.10
+ */
+import type { IGetProfileResponse, ISearchDirectoryResponse, ITogglePrivacyResponse, IUpdateProfileResponse } from '@brightchain/brightchain-lib/lib/interfaces/responses/directoryResponses';
+import { PublicKeyDirectoryService } from '@brightchain/brightchain-lib/lib/services/identity';
+import { PlatformID } from '@digitaldefiance/ecies-lib';
+import { CoreLanguageCode } from '@digitaldefiance/i18n-lib';
+import { ApiErrorResponse, ApiRequestHandler, TypedHandlers } from '@digitaldefiance/node-express-suite';
+import { IBrightChainApplication } from '../../interfaces/application';
+import { DefaultBackendIdType } from '../../shared-types';
+import { BaseController } from '../base';
+type DirectoryApiResponse = ISearchDirectoryResponse | IGetProfileResponse | IUpdateProfileResponse | ITogglePrivacyResponse | ApiErrorResponse;
+interface DirectoryHandlers extends TypedHandlers {
+    searchDirectory: ApiRequestHandler<ISearchDirectoryResponse | ApiErrorResponse>;
+    getProfile: ApiRequestHandler<IGetProfileResponse | ApiErrorResponse>;
+    updateProfile: ApiRequestHandler<IUpdateProfileResponse | ApiErrorResponse>;
+    togglePrivacy: ApiRequestHandler<ITogglePrivacyResponse | ApiErrorResponse>;
+}
+/**
+ * Controller for the public key directory.
+ *
+ * Delegates to {@link PublicKeyDirectoryService} in brightchain-lib for
+ * search, profile management, and privacy mode toggling.
+ *
+ * @requirements 5.1, 5.2, 5.3, 5.4, 5.5, 5.6, 5.7, 5.8, 5.9, 5.10
+ */
+export declare class DirectoryController<TID extends PlatformID = DefaultBackendIdType> extends BaseController<TID, DirectoryApiResponse, DirectoryHandlers, CoreLanguageCode> {
+    private directoryService;
+    constructor(application: IBrightChainApplication<TID>);
+    /**
+     * Inject the directory service instance.
+     * Must be called during application initialisation before handling requests.
+     */
+    setDirectoryService(service: PublicKeyDirectoryService): void;
+    private getDirectoryService;
+    protected initRouteDefinitions(): void;
+    /**
+     * GET /search — Search the public key directory.
+     *
+     * Query params: q (required), limit, offset, platformFilter
+     *
+     * @requirements 5.2, 5.3, 5.5, 5.9, 5.10
+     */
+    private handleSearch;
+    /**
+     * GET /profile/:memberId — Get a member's public profile.
+     *
+     * Returns the profile regardless of privacy mode (direct lookup).
+     *
+     * @requirements 5.1, 5.9
+     */
+    private handleGetProfile;
+    /**
+     * PUT /profile — Create or update a public profile.
+     *
+     * @requirements 5.1, 5.7, 5.8
+     */
+    private handleUpdateProfile;
+    /**
+     * POST /profile/:memberId/privacy — Toggle privacy mode.
+     *
+     * @requirements 5.6, 5.9
+     */
+    private handleTogglePrivacy;
+}
+export {};
+//# sourceMappingURL=directoryController.d.ts.map

package/src/lib/controllers/identity/directoryController.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"directoryController.d.ts","sourceRoot":"","sources":["../../../../../../brightchain-api-lib/src/lib/controllers/identity/directoryController.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH,OAAO,KAAK,EACV,mBAAmB,EACnB,wBAAwB,EACxB,sBAAsB,EACtB,sBAAsB,EACvB,MAAM,0EAA0E,CAAC;AAClF,OAAO,EAGL,yBAAyB,EAC1B,MAAM,oDAAoD,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,aAAa,EAEd,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AACvE,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAM1D,OAAO,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAIzC,KAAK,oBAAoB,GACrB,wBAAwB,GACxB,mBAAmB,GACnB,sBAAsB,GACtB,sBAAsB,GACtB,gBAAgB,CAAC;AAIrB,UAAU,iBAAkB,SAAQ,aAAa;IAC/C,eAAe,EAAE,iBAAiB,CAChC,wBAAwB,GAAG,gBAAgB,CAC5C,CAAC;IACF,UAAU,EAAE,iBAAiB,CAAC,mBAAmB,GAAG,gBAAgB,CAAC,CAAC;IACtE,aAAa,EAAE,iBAAiB,CAAC,sBAAsB,GAAG,gBAAgB,CAAC,CAAC;IAC5E,aAAa,EAAE,iBAAiB,CAAC,sBAAsB,GAAG,gBAAgB,CAAC,CAAC;CAC7E;AAuBD;;;;;;;GAOG;AACH,qBAAa,mBAAmB,CAC9B,GAAG,SAAS,UAAU,GAAG,oBAAoB,CAC7C,SAAQ,cAAc,CACtB,GAAG,EACH,oBAAoB,EACpB,iBAAiB,EACjB,gBAAgB,CACjB;IACC,OAAO,CAAC,gBAAgB,CAA0C;gBAEtD,WAAW,EAAE,uBAAuB,CAAC,GAAG,CAAC;IAIrD;;;OAGG;IACI,mBAAmB,CAAC,OAAO,EAAE,yBAAyB,GAAG,IAAI;IAIpE,OAAO,CAAC,mBAAmB;IAS3B,SAAS,CAAC,oBAAoB,IAAI,IAAI;IAmGtC;;;;;;OAMG;YACW,YAAY;IA+C1B;;;;;;OAMG;YACW,gBAAgB;IA8B9B;;;;OAIG;YACW,mBAAmB;IA0CjC;;;;OAIG;YACW,mBAAmB;CA+BlC"}