@c15t/backend 2.0.0-rc.1 → 2.0.0-rc.10

package/src/handlers/status/status.handler.test.ts

@@ -1,155 +0,0 @@
-import { HTTPException } from 'hono/http-exception';
-import { afterEach, describe, expect, it, vi } from 'vitest';
-import { statusHandler } from './status.handler';
-
-describe('statusHandler', () => {
-	const mockLogger = {
-		debug: vi.fn(),
-		error: vi.fn(),
-		info: vi.fn(),
-		warn: vi.fn(),
-	};
-
-	const createMockContext = (db: unknown) => {
-		const headers = new Headers();
-		headers.set('cf-ipcountry', 'US');
-		headers.set('x-vercel-ip-country-region', 'CA');
-		headers.set('accept-language', 'en-US');
-
-		const ctx = {
-			db,
-			logger: mockLogger,
-			headers,
-			ipAddress: '192.168.1.100',
-			userAgent: 'Mozilla/5.0',
-		};
-
-		let jsonData: unknown;
-
-		return {
-			get: (key: string) => {
-				if (key === 'c15tContext') {
-					return ctx;
-				}
-				return undefined;
-			},
-			json: vi.fn((data) => {
-				jsonData = data;
-				return data;
-			}),
-			getJsonData: () => jsonData,
-			req: {
-				raw: { headers },
-			},
-		};
-	};
-
-	afterEach(() => {
-		vi.clearAllMocks();
-		vi.restoreAllMocks();
-	});
-
-	it('should return health info when database is working', async () => {
-		const db = {
-			findFirst: vi.fn().mockResolvedValue({ id: 'sub_123' }),
-		};
-
-		const mockCtx = createMockContext(db);
-		// @ts-expect-error - simplified test context
-		await statusHandler(mockCtx);
-
-		const result = mockCtx.getJsonData() as {
-			version: string;
-			timestamp: Date;
-			client: {
-				ip: string | null;
-				acceptLanguage: string | null;
-				userAgent: string | null;
-				region: {
-					countryCode: string | null;
-					regionCode: string | null;
-				};
-			};
-		};
-
-		expect(result.version).toBeDefined();
-		expect(result.timestamp).toBeInstanceOf(Date);
-		expect(result.client).toEqual({
-			ip: '192.168.1.100',
-			acceptLanguage: 'en-US',
-			userAgent: 'Mozilla/5.0',
-			region: {
-				countryCode: 'US',
-				regionCode: 'CA',
-			},
-		});
-		expect(db.findFirst).toHaveBeenCalledWith('subject', {});
-	});
-
-	it('should throw HTTPException when database query fails', async () => {
-		const db = {
-			findFirst: vi.fn().mockRejectedValue(new Error('DB Connection failed')),
-		};
-
-		const mockCtx = createMockContext(db);
-		// @ts-expect-error - simplified test context
-		const promise = statusHandler(mockCtx);
-
-		await expect(promise).rejects.toThrow(HTTPException);
-		await expect(promise).rejects.toMatchObject({
-			status: 503,
-		});
-
-		expect(mockLogger.error).toHaveBeenCalledWith(
-			'Database health check failed',
-			expect.objectContaining({ error: expect.any(Error) })
-		);
-	});
-
-	it('should handle missing geo headers', async () => {
-		const db = {
-			findFirst: vi.fn().mockResolvedValue({ id: 'sub_123' }),
-		};
-
-		const emptyHeaders = new Headers();
-		const ctx = {
-			db,
-			logger: mockLogger,
-			headers: emptyHeaders,
-			ipAddress: '1.2.3.4',
-			userAgent: 'Test Agent',
-		};
-
-		let jsonData: unknown;
-		const mockCtx = {
-			get: (key: string) => {
-				if (key === 'c15tContext') {
-					return ctx;
-				}
-				return undefined;
-			},
-			json: vi.fn((data) => {
-				jsonData = data;
-				return data;
-			}),
-			req: {
-				raw: { headers: emptyHeaders },
-			},
-		};
-
-		// @ts-expect-error - simplified test context
-		await statusHandler(mockCtx);
-
-		const result = jsonData as {
-			client: {
-				region: {
-					countryCode: string | null;
-					regionCode: string | null;
-				};
-			};
-		};
-
-		expect(result.client.region.countryCode).toBeNull();
-		expect(result.client.region.regionCode).toBeNull();
-	});
-});

package/src/handlers/status/status.handler.ts

@@ -1,51 +0,0 @@
-/**
- * GET /status handler - Health check and status endpoint.
- *
- * @packageDocumentation
- */
-
-import type { Context } from 'hono';
-import { HTTPException } from 'hono/http-exception';
-import type { C15TContext } from '~/types';
-import { version } from '~/version';
-import { getHeaders } from '../init';
-
-/**
- * Handles the status request to check the health of the service and its dependencies.
- *
- * This handler performs a simple query to the database to ensure it is reachable and
- * functional. It also extracts client information from the request headers.
- */
-export const statusHandler = async (c: Context) => {
-	const ctx = c.get('c15tContext') as C15TContext;
-
-	const { countryCode, regionCode, acceptLanguage } = getHeaders(ctx.headers);
-
-	const clientInfo = {
-		ip: ctx.ipAddress ?? null,
-		acceptLanguage,
-		userAgent: ctx.userAgent ?? null,
-		region: {
-			countryCode,
-			regionCode,
-		},
-	};
-
-	try {
-		// Perform a simple query to verify database connectivity
-		await ctx.db.findFirst('subject', {});
-
-		return c.json({
-			version,
-			timestamp: new Date(),
-			client: clientInfo,
-		});
-	} catch (error) {
-		ctx.logger.error('Database health check failed', { error });
-
-		throw new HTTPException(503, {
-			message: 'Database health check failed',
-			cause: { code: 'SERVICE_UNAVAILABLE', error },
-		});
-	}
-};

package/src/handlers/subject/get.handler.ts

@@ -1,93 +0,0 @@
-/**
- * GET /subjects/:id handler - Check this device's consent status.
- *
- * @packageDocumentation
- */
-
-import type { Context } from 'hono';
-import { HTTPException } from 'hono/http-exception';
-import type { C15TContext } from '~/types';
-import { extractErrorMessage } from '~/utils/extract-error-message';
-import { enrichConsents } from '../utils/consent-enrichment';
-
-/**
- * Handles retrieving a subject's consent status.
- *
- * Returns the subject's information and their consent records,
- * optionally filtered by consent type(s).
- */
-export const getSubjectHandler = async (c: Context) => {
-	const ctx = c.get('c15tContext') as C15TContext;
-	const logger = ctx.logger;
-	logger.info('Handling GET /subjects/:id request');
-
-	const { db, registry } = ctx;
-
-	// Get input from validated params and query
-	const subjectId = c.req.param('id');
-	const type = c.req.query('type');
-	const typeFilter = type?.split(',').map((t) => t.trim()) || [];
-
-	logger.debug('Request parameters', { subjectId, typeFilter });
-
-	try {
-		// Find the subject
-		const subject = await db.findFirst('subject', {
-			where: (b) => b('id', '=', subjectId),
-		});
-
-		if (!subject) {
-			throw new HTTPException(404, {
-				message: 'Subject not found',
-				cause: { code: 'SUBJECT_NOT_FOUND', subjectId },
-			});
-		}
-
-		// Get all consents for this subject
-		const consents = await db.findMany('consent', {
-			where: (b) => b('subjectId', '=', subjectId),
-		});
-
-		const consentItems = await enrichConsents(consents, { db, registry });
-
-		// Filter by type if specified
-		const filteredConsents =
-			typeFilter.length > 0
-				? consentItems.filter((consent) => typeFilter.includes(consent.type))
-				: consentItems;
-
-		// Determine if consent is valid for requested types
-		const isValid =
-			typeFilter.length === 0 ||
-			typeFilter.every((t) =>
-				filteredConsents.some(
-					(consent) => consent.type === t && consent.isLatestPolicy
-				)
-			);
-
-		return c.json({
-			subject: {
-				id: subject.id,
-				externalId: subject.externalId ?? undefined,
-				isIdentified: subject.isIdentified,
-				createdAt: subject.createdAt,
-			},
-			consents: filteredConsents,
-			isValid,
-		});
-	} catch (error) {
-		logger.error('Error in GET /subjects/:id handler', {
-			error: extractErrorMessage(error),
-			errorType: error instanceof Error ? error.constructor.name : typeof error,
-		});
-
-		if (error instanceof HTTPException) {
-			throw error;
-		}
-
-		throw new HTTPException(500, {
-			message: 'Internal server error',
-			cause: { code: 'INTERNAL_SERVER_ERROR' },
-		});
-	}
-};

package/src/handlers/subject/list.handler.ts

@@ -1,93 +0,0 @@
-/**
- * GET /subjects handler - List subjects by externalId (requires API key).
- *
- * @packageDocumentation
- */
-
-import type { Context } from 'hono';
-import { HTTPException } from 'hono/http-exception';
-import type { C15TContext } from '~/types';
-import { extractErrorMessage } from '~/utils/extract-error-message';
-import { enrichConsents } from '../utils/consent-enrichment';
-
-/**
- * Handles listing all subjects linked to an external ID.
- *
- * This endpoint requires API key authentication and is intended
- * for server-side use only (Data Subject Access Requests).
- */
-export const listSubjectsHandler = async (c: Context) => {
-	const ctx = c.get('c15tContext') as C15TContext;
-	const logger = ctx.logger;
-	logger.info('Handling GET /subjects request');
-
-	const { db, registry } = ctx;
-
-	// Check API key authentication
-	if (!ctx.apiKeyAuthenticated) {
-		throw new HTTPException(401, {
-			message: 'API key required. Use Authorization: Bearer <api_key>',
-			cause: { code: 'UNAUTHORIZED' },
-		});
-	}
-
-	const externalId = c.req.query('externalId');
-
-	if (!externalId) {
-		throw new HTTPException(422, {
-			message: 'externalId query parameter is required',
-			cause: { code: 'EXTERNAL_ID_REQUIRED' },
-		});
-	}
-
-	logger.debug('Request parameters', { externalId });
-
-	try {
-		// Find all subjects with this externalId
-		const subjects = await db.findMany('subject', {
-			where: (b) => b('externalId', '=', externalId),
-		});
-
-		// Get consents for each subject
-		const subjectItems = await Promise.all(
-			subjects.map(async (subject) => {
-				const consents = await db.findMany('consent', {
-					where: (b) => b('subjectId', '=', subject.id),
-				});
-
-				const consentItems = await enrichConsents(consents, { db, registry });
-
-				return {
-					id: subject.id,
-					externalId: subject.externalId ?? externalId,
-					isIdentified: subject.isIdentified,
-					createdAt: subject.createdAt,
-					consents: consentItems,
-				};
-			})
-		);
-
-		logger.info('Found subjects for externalId', {
-			externalId,
-			count: subjectItems.length,
-		});
-
-		return c.json({
-			subjects: subjectItems,
-		});
-	} catch (error) {
-		logger.error('Error in GET /subjects handler', {
-			error: extractErrorMessage(error),
-			errorType: error instanceof Error ? error.constructor.name : typeof error,
-		});
-
-		if (error instanceof HTTPException) {
-			throw error;
-		}
-
-		throw new HTTPException(500, {
-			message: 'Internal server error',
-			cause: { code: 'INTERNAL_SERVER_ERROR' },
-		});
-	}
-};

package/src/handlers/subject/patch.handler.ts

@@ -1,122 +0,0 @@
-/**
- * PATCH /subjects/:id handler - Link external ID to subject.
- *
- * @packageDocumentation
- */
-
-import type { Context } from 'hono';
-import { HTTPException } from 'hono/http-exception';
-import { generateUniqueId } from '~/db/registry/utils';
-import type { C15TContext } from '~/types';
-import { extractErrorMessage } from '~/utils/extract-error-message';
-import { getMetrics } from '~/utils/metrics';
-
-/**
- * Handles linking an external ID to a subject.
- *
- * Unlike the legacy identify endpoint, this does NOT merge subjects.
- * Each device maintains its own independent consent history.
- * The externalId allows querying all subjects via GET /subjects.
- */
-export const patchSubjectHandler = async (c: Context) => {
-	const ctx = c.get('c15tContext') as C15TContext;
-	const logger = ctx.logger;
-	logger.info('Handling PATCH /subjects/:id request');
-
-	const { db } = ctx;
-
-	// Get input from validated params and body
-	const subjectId = c.req.param('id');
-	const body = await c.req.json<{
-		externalId: string;
-		identityProvider?: string;
-	}>();
-	const { externalId, identityProvider = 'external' } = body;
-
-	logger.debug('Request parameters', {
-		subjectId,
-		externalId,
-		identityProvider,
-	});
-
-	try {
-		// Find the subject
-		const subject = await db.findFirst('subject', {
-			where: (b) => b('id', '=', subjectId),
-		});
-
-		if (!subject) {
-			throw new HTTPException(404, {
-				message: 'Subject not found',
-				cause: { code: 'SUBJECT_NOT_FOUND', subjectId },
-			});
-		}
-
-		// Update the subject with externalId (no merge logic)
-		await db.transaction(async (tx) => {
-			await tx.updateMany('subject', {
-				where: (b) => b('id', '=', subjectId),
-				set: {
-					externalId,
-					identityProvider,
-					isIdentified: true,
-					updatedAt: new Date(),
-				},
-			});
-
-			// Create audit log
-			await tx.create('auditLog', {
-				id: await generateUniqueId(tx, 'auditLog', ctx),
-				subjectId,
-				entityType: 'subject',
-				entityId: subjectId,
-				actionType: 'identify_user',
-				ipAddress: ctx.ipAddress || null,
-				userAgent: ctx.userAgent || null,
-				changes: {
-					externalId: { from: subject.externalId, to: externalId },
-					identityProvider: {
-						from: subject.identityProvider,
-						to: identityProvider,
-					},
-					isIdentified: { from: subject.isIdentified, to: true },
-				},
-				metadata: {
-					externalId,
-					identityProvider,
-				},
-			});
-		});
-
-		logger.info('Subject linked to external ID', {
-			subjectId,
-			externalId,
-			identityProvider,
-		});
-
-		getMetrics()?.recordSubjectLinked(identityProvider);
-
-		return c.json({
-			success: true,
-			subject: {
-				id: subjectId,
-				externalId,
-				isIdentified: true,
-			},
-		});
-	} catch (error) {
-		logger.error('Error in PATCH /subjects/:id handler', {
-			error: extractErrorMessage(error),
-			errorType: error instanceof Error ? error.constructor.name : typeof error,
-		});
-
-		if (error instanceof HTTPException) {
-			throw error;
-		}
-
-		throw new HTTPException(500, {
-			message: 'Internal server error',
-			cause: { code: 'INTERNAL_SERVER_ERROR' },
-		});
-	}
-};