@clowder-ai/collective-connector 0.0.0-stage → 0.1.0-alpha.8

package/dist/business/service/github-human-auth-provider.js

@@ -0,0 +1,99 @@
+import { z } from 'zod';
+import { CollectiveServiceError } from './errors.js';
+const tokenResponseSchema = z.object({ access_token: z.string().min(1) }).passthrough();
+const userResponseSchema = z
+    .object({
+    id: z.number().int().positive(),
+    login: z.string().trim().min(1).max(160),
+    name: z.string().trim().min(1).max(160).nullable().optional(),
+    avatar_url: z.string().url().optional(),
+})
+    .passthrough();
+export function createGitHubHumanAuthProvider(options) {
+    return new ConfigurableGitHubHumanAuthProvider(options);
+}
+export class ConfigurableGitHubHumanAuthProvider {
+    id = 'github';
+    #fetchImpl;
+    #configuration;
+    constructor(options) {
+        this.#fetchImpl = options.fetchImpl ?? fetch;
+        this.configureIfComplete(options);
+    }
+    get readiness() {
+        return this.#configuration ? { ready: true } : { ready: false, reason: 'not_configured' };
+    }
+    configure(credentials) {
+        const clientId = credentials.clientId.trim();
+        const clientSecret = credentials.clientSecret.trim();
+        if (!clientId || !clientSecret) {
+            throw new CollectiveServiceError('AUTH_PROVIDER_NOT_READY', 'GitHub Human auth credentials are incomplete', 400);
+        }
+        this.#configuration = { clientId, clientSecret };
+    }
+    authorizationUrl({ state, redirectUri }) {
+        const configuration = this.requireConfiguration();
+        const url = new URL('https://github.com/login/oauth/authorize');
+        url.searchParams.set('client_id', configuration.clientId);
+        url.searchParams.set('redirect_uri', redirectUri);
+        url.searchParams.set('state', state);
+        return url.toString();
+    }
+    async authenticate({ code, redirectUri, }) {
+        const configuration = this.requireConfiguration();
+        const tokenResponse = await this.#fetchImpl('https://github.com/login/oauth/access_token', {
+            method: 'POST',
+            headers: {
+                accept: 'application/json',
+                'content-type': 'application/x-www-form-urlencoded',
+                'user-agent': 'collective-service',
+            },
+            body: new URLSearchParams({
+                client_id: configuration.clientId,
+                client_secret: configuration.clientSecret,
+                code,
+                redirect_uri: redirectUri,
+            }),
+        });
+        if (!tokenResponse.ok)
+            throw upstreamFailure('GitHub token exchange failed');
+        const token = tokenResponseSchema.safeParse(await tokenResponse.json());
+        if (!token.success)
+            throw upstreamFailure('GitHub token exchange returned an invalid response');
+        const userResponse = await this.#fetchImpl('https://api.github.com/user', {
+            headers: {
+                accept: 'application/vnd.github+json',
+                authorization: `Bearer ${token.data.access_token}`,
+                'user-agent': 'collective-service',
+                'x-github-api-version': '2022-11-28',
+            },
+        });
+        if (!userResponse.ok)
+            throw upstreamFailure('GitHub identity lookup failed');
+        const user = userResponseSchema.safeParse(await userResponse.json());
+        if (!user.success)
+            throw upstreamFailure('GitHub identity response is invalid');
+        return {
+            providerSubject: String(user.data.id),
+            handle: user.data.login,
+            displayName: user.data.name ?? user.data.login,
+            ...(user.data.avatar_url ? { avatarUrl: user.data.avatar_url } : {}),
+        };
+    }
+    configureIfComplete(options) {
+        const clientId = options.clientId?.trim();
+        const clientSecret = options.clientSecret?.trim();
+        if (clientId && clientSecret)
+            this.#configuration = { clientId, clientSecret };
+    }
+    requireConfiguration() {
+        if (!this.#configuration) {
+            throw new CollectiveServiceError('AUTH_PROVIDER_NOT_READY', 'GitHub Human auth is not configured', 503);
+        }
+        return this.#configuration;
+    }
+}
+function upstreamFailure(message) {
+    return new CollectiveServiceError('AUTH_IDENTITY_INVALID', message, 502);
+}
+//# sourceMappingURL=github-human-auth-provider.js.map

package/dist/business/service/github-human-auth-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-human-auth-provider.js","sourceRoot":"","sources":["../../../src/business/service/github-human-auth-provider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAGrD,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AACxF,MAAM,kBAAkB,GAAG,CAAC;KACzB,MAAM,CAAC;IACN,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC/B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACxC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC7D,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CACxC,CAAC;KACD,WAAW,EAAE,CAAC;AAQjB,MAAM,UAAU,6BAA6B,CAAC,OAAuC;IACnF,OAAO,IAAI,mCAAmC,CAAC,OAAO,CAAC,CAAC;AAC1D,CAAC;AAOD,MAAM,OAAO,mCAAmC;IACrC,EAAE,GAAG,QAAiB,CAAC;IACvB,UAAU,CAAe;IAClC,cAAc,CAA0B;IAExC,YAAY,OAAuC;QACjD,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;QAC7C,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;IACpC,CAAC;IAED,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,cAAc,CAAC,CAAC,CAAE,EAAE,KAAK,EAAE,IAAI,EAAY,CAAC,CAAC,CAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAY,CAAC;IAClH,CAAC;IAED,SAAS,CAAC,WAAmC;QAC3C,MAAM,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC7C,MAAM,YAAY,GAAG,WAAW,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;QACrD,IAAI,CAAC,QAAQ,IAAI,CAAC,YAAY,EAAE,CAAC;YAC/B,MAAM,IAAI,sBAAsB,CAAC,yBAAyB,EAAE,8CAA8C,EAAE,GAAG,CAAC,CAAC;QACnH,CAAC;QACD,IAAI,CAAC,cAAc,GAAG,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;IACnD,CAAC;IAED,gBAAgB,CAAC,EAAE,KAAK,EAAE,WAAW,EAA4D;QAC/F,MAAM,aAAa,GAAG,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAClD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,0CAA0C,CAAC,CAAC;QAChE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,aAAa,CAAC,QAAQ,CAAC,CAAC;QAC1D,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;QAClD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACrC,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,EACjB,IAAI,EACJ,WAAW,GAIZ;QACC,MAAM,aAAa,GAAG,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAClD,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,6CAA6C,EAAE;YACzF,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,MAAM,EAAE,kBAAkB;gBAC1B,cAAc,EAAE,mCAAmC;gBACnD,YAAY,EAAE,oBAAoB;aACnC;YACD,IAAI,EAAE,IAAI,eAAe,CAAC;gBACxB,SAAS,EAAE,aAAa,CAAC,QAAQ;gBACjC,aAAa,EAAE,aAAa,CAAC,YAAY;gBACzC,IAAI;gBACJ,YAAY,EAAE,WAAW;aAC1B,CAAC;SACH,CAAC,CAAC;QACH,IAAI,CAAC,aAAa,CAAC,EAAE;YAAE,MAAM,eAAe,CAAC,8BAA8B,CAAC,CAAC;QAC7E,MAAM,KAAK,GAAG,mBAAmB,CAAC,SAAS,CAAC,MAAM,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC;QACxE,IAAI,CAAC,KAAK,CAAC,OAAO;YAAE,MAAM,eAAe,CAAC,oDAAoD,CAAC,CAAC;QAChG,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,6BAA6B,EAAE;YACxE,OAAO,EAAE;gBACP,MAAM,EAAE,6BAA6B;gBACrC,aAAa,EAAE,UAAU,KAAK,CAAC,IAAI,CAAC,YAAY,EAAE;gBAClD,YAAY,EAAE,oBAAoB;gBAClC,sBAAsB,EAAE,YAAY;aACrC;SACF,CAAC,CAAC;QACH,IAAI,CAAC,YAAY,CAAC,EAAE;YAAE,MAAM,eAAe,CAAC,+BAA+B,CAAC,CAAC;QAC7E,MAAM,IAAI,GAAG,kBAAkB,CAAC,SAAS,CAAC,MAAM,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC;QACrE,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,MAAM,eAAe,CAAC,qCAAqC,CAAC,CAAC;QAChF,OAAO;YACL,eAAe,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACrC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK;YACvB,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK;YAC9C,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACrE,CAAC;IACJ,CAAC;IAEO,mBAAmB,CAAC,OAAuC;QACjE,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC;QAC1C,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC;QAClD,IAAI,QAAQ,IAAI,YAAY;YAAE,IAAI,CAAC,cAAc,GAAG,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;IACjF,CAAC;IAEO,oBAAoB;QAC1B,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YACzB,MAAM,IAAI,sBAAsB,CAAC,yBAAyB,EAAE,qCAAqC,EAAE,GAAG,CAAC,CAAC;QAC1G,CAAC;QACD,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;CACF;AAED,SAAS,eAAe,CAAC,OAAe;IACtC,OAAO,IAAI,sBAAsB,CAAC,uBAAuB,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;AAC3E,CAAC"}

package/dist/business/service/http-read-routes.d.ts

@@ -0,0 +1,5 @@
+import type { IncomingMessage, ServerResponse } from 'node:http';
+import type { CollectiveServiceStore } from './store.js';
+/** Read APIs retain their authentication and membership checks in the canonical Store. */
+export declare function routeCollectiveRead(store: CollectiveServiceStore, url: URL, request: IncomingMessage, response: ServerResponse): Promise<boolean>;
+//# sourceMappingURL=http-read-routes.d.ts.map

package/dist/business/service/http-read-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-read-routes.d.ts","sourceRoot":"","sources":["../../../src/business/service/http-read-routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAEjE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAEzD,0FAA0F;AAC1F,wBAAsB,mBAAmB,CACvC,KAAK,EAAE,sBAAsB,EAC7B,GAAG,EAAE,GAAG,EACR,OAAO,EAAE,eAAe,EACxB,QAAQ,EAAE,cAAc,GACvB,OAAO,CAAC,OAAO,CAAC,CA4GlB"}

package/dist/business/service/http-read-routes.js

@@ -0,0 +1,84 @@
+import { numberQuery, requireBearer, requiredQuery, writeJson } from './http-transport.js';
+/** Read APIs retain their authentication and membership checks in the canonical Store. */
+export async function routeCollectiveRead(store, url, request, response) {
+    if (url.pathname === '/api/me') {
+        writeJson(response, 200, await store.getHumanProjection(requireBearer(request)));
+        return true;
+    }
+    if (url.pathname === '/api/memberships/self-leave/readiness') {
+        writeJson(response, 200, store.readMembershipLeaveReadiness(requireBearer(request), requiredQuery(url, 'collectiveId')));
+        return true;
+    }
+    if (url.pathname === '/api/events/human') {
+        const collectiveId = requiredQuery(url, 'collectiveId');
+        writeJson(response, 200, {
+            serviceInstanceId: store.serviceInstanceId,
+            collectiveId,
+            events: await store.listEventsForHuman(requireBearer(request), collectiveId),
+        });
+        return true;
+    }
+    if (url.pathname === '/api/participants') {
+        writeJson(response, 200, {
+            participants: store.listParticipants(requireBearer(request), requiredQuery(url, 'collectiveId')),
+        });
+        return true;
+    }
+    if (url.pathname === '/api/members') {
+        writeJson(response, 200, store.listMembers(requireBearer(request), requiredQuery(url, 'collectiveId')));
+        return true;
+    }
+    if (url.pathname === '/api/collaboration') {
+        writeJson(response, 200, store.listCollectiveCollaboration(requireBearer(request), requiredQuery(url, 'collectiveId')));
+        return true;
+    }
+    if (url.pathname === '/api/collaboration/work/assigned') {
+        writeJson(response, 200, store.readAssignedWork(requireBearer(request), {
+            serviceInstanceId: requiredQuery(url, 'serviceInstanceId'),
+            collectiveId: requiredQuery(url, 'collectiveId'),
+            connectionId: requiredQuery(url, 'connectionId'),
+            workId: requiredQuery(url, 'workId'),
+        }));
+        return true;
+    }
+    if (url.pathname === '/api/collaboration/work/assigned-by-assignment') {
+        writeJson(response, 200, store.readAssignedWorkByAssignment(requireBearer(request), {
+            serviceInstanceId: requiredQuery(url, 'serviceInstanceId'),
+            collectiveId: requiredQuery(url, 'collectiveId'),
+            connectionId: requiredQuery(url, 'connectionId'),
+            assignmentEventId: requiredQuery(url, 'assignmentEventId'),
+        }));
+        return true;
+    }
+    if (url.pathname === '/api/collaboration/work/accountability/pending') {
+        writeJson(response, 200, store.readCollectiveAccountabilityAttention(requireBearer(request), {
+            serviceInstanceId: requiredQuery(url, 'serviceInstanceId'),
+            collectiveId: requiredQuery(url, 'collectiveId'),
+            connectionId: requiredQuery(url, 'connectionId'),
+            offset: numberQuery(url, 'offset', 0),
+            limit: numberQuery(url, 'limit', 50),
+            ...(url.searchParams.get('snapshot') ? { snapshot: url.searchParams.get('snapshot') } : {}),
+        }));
+        return true;
+    }
+    if (url.pathname === '/api/participation') {
+        writeJson(response, 200, store.readParticipationDeclaration(requireBearer(request), {
+            serviceInstanceId: requiredQuery(url, 'serviceInstanceId'),
+            collectiveId: requiredQuery(url, 'collectiveId'),
+            connectionId: requiredQuery(url, 'connectionId'),
+        }));
+        return true;
+    }
+    if (url.pathname === '/api/events/endpoint') {
+        writeJson(response, 200, await store.pollEvents(requireBearer(request), {
+            serviceInstanceId: requiredQuery(url, 'serviceInstanceId'),
+            collectiveId: requiredQuery(url, 'collectiveId'),
+            connectionId: requiredQuery(url, 'connectionId'),
+            afterSequence: numberQuery(url, 'afterSequence', 0),
+            limit: numberQuery(url, 'limit', 100),
+        }));
+        return true;
+    }
+    return false;
+}
+//# sourceMappingURL=http-read-routes.js.map

package/dist/business/service/http-read-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-read-routes.js","sourceRoot":"","sources":["../../../src/business/service/http-read-routes.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAG3F,0FAA0F;AAC1F,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,KAA6B,EAC7B,GAAQ,EACR,OAAwB,EACxB,QAAwB;IAExB,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC/B,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,KAAK,CAAC,kBAAkB,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACjF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,uCAAuC,EAAE,CAAC;QAC7D,SAAS,CACP,QAAQ,EACR,GAAG,EACH,KAAK,CAAC,4BAA4B,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,aAAa,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,CAC/F,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,mBAAmB,EAAE,CAAC;QACzC,MAAM,YAAY,GAAG,aAAa,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QACxD,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE;YACvB,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;YAC1C,YAAY;YACZ,MAAM,EAAE,MAAM,KAAK,CAAC,kBAAkB,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,YAAY,CAAC;SAC7E,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,mBAAmB,EAAE,CAAC;QACzC,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE;YACvB,YAAY,EAAE,KAAK,CAAC,gBAAgB,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,aAAa,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;SACjG,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,cAAc,EAAE,CAAC;QACpC,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,KAAK,CAAC,WAAW,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,aAAa,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC;QACxG,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,oBAAoB,EAAE,CAAC;QAC1C,SAAS,CACP,QAAQ,EACR,GAAG,EACH,KAAK,CAAC,2BAA2B,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,aAAa,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,CAC9F,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,kCAAkC,EAAE,CAAC;QACxD,SAAS,CACP,QAAQ,EACR,GAAG,EACH,KAAK,CAAC,gBAAgB,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE;YAC7C,iBAAiB,EAAE,aAAa,CAAC,GAAG,EAAE,mBAAmB,CAAC;YAC1D,YAAY,EAAE,aAAa,CAAC,GAAG,EAAE,cAAc,CAAC;YAChD,YAAY,EAAE,aAAa,CAAC,GAAG,EAAE,cAAc,CAAC;YAChD,MAAM,EAAE,aAAa,CAAC,GAAG,EAAE,QAAQ,CAAC;SACrC,CAAC,CACH,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,gDAAgD,EAAE,CAAC;QACtE,SAAS,CACP,QAAQ,EACR,GAAG,EACH,KAAK,CAAC,4BAA4B,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE;YACzD,iBAAiB,EAAE,aAAa,CAAC,GAAG,EAAE,mBAAmB,CAAC;YAC1D,YAAY,EAAE,aAAa,CAAC,GAAG,EAAE,cAAc,CAAC;YAChD,YAAY,EAAE,aAAa,CAAC,GAAG,EAAE,cAAc,CAAC;YAChD,iBAAiB,EAAE,aAAa,CAAC,GAAG,EAAE,mBAAmB,CAAC;SAC3D,CAAC,CACH,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,gDAAgD,EAAE,CAAC;QACtE,SAAS,CACP,QAAQ,EACR,GAAG,EACH,KAAK,CAAC,qCAAqC,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE;YAClE,iBAAiB,EAAE,aAAa,CAAC,GAAG,EAAE,mBAAmB,CAAC;YAC1D,YAAY,EAAE,aAAa,CAAC,GAAG,EAAE,cAAc,CAAC;YAChD,YAAY,EAAE,aAAa,CAAC,GAAG,EAAE,cAAc,CAAC;YAChD,MAAM,EAAE,WAAW,CAAC,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC;YACrC,KAAK,EAAE,WAAW,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC;YACpC,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5F,CAAC,CACH,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,oBAAoB,EAAE,CAAC;QAC1C,SAAS,CACP,QAAQ,EACR,GAAG,EACH,KAAK,CAAC,4BAA4B,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE;YACzD,iBAAiB,EAAE,aAAa,CAAC,GAAG,EAAE,mBAAmB,CAAC;YAC1D,YAAY,EAAE,aAAa,CAAC,GAAG,EAAE,cAAc,CAAC;YAChD,YAAY,EAAE,aAAa,CAAC,GAAG,EAAE,cAAc,CAAC;SACjD,CAAC,CACH,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,sBAAsB,EAAE,CAAC;QAC5C,SAAS,CACP,QAAQ,EACR,GAAG,EACH,MAAM,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE;YAC7C,iBAAiB,EAAE,aAAa,CAAC,GAAG,EAAE,mBAAmB,CAAC;YAC1D,YAAY,EAAE,aAAa,CAAC,GAAG,EAAE,cAAc,CAAC;YAChD,YAAY,EAAE,aAAa,CAAC,GAAG,EAAE,cAAc,CAAC;YAChD,aAAa,EAAE,WAAW,CAAC,GAAG,EAAE,eAAe,EAAE,CAAC,CAAC;YACnD,KAAK,EAAE,WAAW,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC;SACtC,CAAC,CACH,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/business/service/http-router.d.ts

@@ -0,0 +1,15 @@
+import type { CollectiveClientAssets } from '../../client-assets.js';
+import type { IncomingMessage, ServerResponse } from 'node:http';
+import type { GitHubAppManifestSetup } from './github-app-manifest-setup.js';
+import type { CollectiveServiceStore } from './store.js';
+interface CollectiveHttpHandlerOptions {
+    readonly store: CollectiveServiceStore;
+    readonly serviceOrigin?: string;
+    readonly allowedHostOrigins: readonly string[] | ReadonlySet<string>;
+    readonly clientAssets?: CollectiveClientAssets;
+    readonly bootstrapLinkPath?: string;
+    readonly githubAppSetup?: GitHubAppManifestSetup;
+}
+export declare function createCollectiveHttpHandler(options: CollectiveHttpHandlerOptions): (request: IncomingMessage, response: ServerResponse) => Promise<void>;
+export {};
+//# sourceMappingURL=http-router.d.ts.map

package/dist/business/service/http-router.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-router.d.ts","sourceRoot":"","sources":["../../../src/business/service/http-router.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAC,sBAAsB,EAAC,MAAM,wBAAwB,CAAC;AACnE,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAMjE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAqB7E,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAGzD,UAAU,4BAA4B;IACpC,QAAQ,CAAC,KAAK,EAAE,sBAAsB,CAAC;IACvC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,kBAAkB,EAAE,SAAS,MAAM,EAAE,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IACrE,QAAQ,CAAC,YAAY,CAAC,EAAE,sBAAsB,CAAC;IAC/C,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,cAAc,CAAC,EAAE,sBAAsB,CAAC;CAClD;AAED,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,4BAA4B,IAGjE,SAAS,eAAe,EAAE,UAAU,cAAc,mBAgCjE"}

package/dist/business/service/http-router.js

@@ -0,0 +1,264 @@
+import { rm } from 'node:fs/promises';
+import { maxCollectiveArtifactProposalEnvelopeBytes } from '../contracts/index.js';
+import { routeArtifactPost } from './artifact-http-routes.js';
+import { routeArtifactMediaHttp } from './artifact-media-http.js';
+import { routeCollaborationPost } from './collaboration-http-routes.js';
+import { CollectiveServiceError } from './errors.js';
+import { routeGitHubAppSetupGet, routeGitHubAppSetupPost } from './github-app-setup-routes.js';
+import { routeCollectiveRead } from './http-read-routes.js';
+import { applySecurityHeaders, clearHumanAuthCompletionCookie, forbiddenOrigin, normalizedOrigin, optionalBearer, parseHumanAuthIntent, readJsonBody, requireAllowedOrigin, requireBearer, requiredQuery, requiredString, requireFields, requireHumanAuthCompletionCookie, setHumanAuthCompletionCookie, writeError, writeJson, } from './http-transport.js';
+import { routeWorkResultFileGet } from './work-result-file-http.js';
+export function createCollectiveHttpHandler(options) {
+    const allowedOrigins = options.allowedHostOrigins instanceof Set ? options.allowedHostOrigins
+        : new Set([...options.allowedHostOrigins].map(origin => new URL(origin).origin));
+    return async (request, response) => {
+        try {
+            applySecurityHeaders(response, allowedOrigins);
+            const origin = normalizedOrigin(request.headers.origin);
+            if (origin && !allowedOrigins.has(origin))
+                forbiddenOrigin();
+            if (request.method === 'POST' && !origin && !request.headers.authorization)
+                forbiddenOrigin();
+            if (origin && allowedOrigins.has(origin))
+                response.setHeader('access-control-allow-origin', origin);
+            if (request.method === 'OPTIONS') {
+                response.setHeader('access-control-allow-methods', 'GET,POST,OPTIONS');
+                response.setHeader('access-control-allow-headers', 'authorization,content-type');
+                response.writeHead(origin && allowedOrigins.has(origin) ? 204 : 403).end();
+                return;
+            }
+            const assetPath = new URL(request.url ?? '/', 'http://collective.local').pathname;
+            const asset = options.clientAssets?.get(assetPath === '/' ? '/index.html' : assetPath);
+            if (request.method === 'GET' && asset) {
+                response.writeHead(200, { 'content-type': asset.contentType, 'content-length': asset.bytes.length, 'x-content-type-options': 'nosniff' }).end(asset.bytes);
+                return;
+            }
+            await routeRequest(options.store, options.serviceOrigin, allowedOrigins, options.bootstrapLinkPath, options.githubAppSetup, request, response);
+        }
+        catch (error) {
+            writeError(response, error);
+        }
+    };
+}
+async function routeRequest(store, serviceOrigin, allowedOrigins, bootstrapLinkPath, githubAppSetup, request, response) {
+    const url = new URL(request.url ?? '/', 'http://collective.local');
+    const method = request.method ?? 'GET';
+    if (await routeArtifactMediaHttp(store, url, request, response))
+        return;
+    if (method === 'GET') {
+        await routeGet(store, githubAppSetup, url, request, response);
+        return;
+    }
+    if (method !== 'POST') {
+        routeClientFallback(url, response);
+        return;
+    }
+    await routePost(store, serviceOrigin, allowedOrigins, bootstrapLinkPath, githubAppSetup, url, request, response);
+}
+async function routeGet(store, githubAppSetup, url, request, response) {
+    if (url.pathname === '/api/health') {
+        writeJson(response, 200, { ok: true, ...store.getMetadata() });
+        return;
+    }
+    if (url.pathname === '/api/meta') {
+        writeJson(response, 200, store.getMetadata());
+        return;
+    }
+    if (await routeGitHubAppSetupGet(store, githubAppSetup, url, response))
+        return;
+    if (url.pathname === '/api/auth/github/callback') {
+        if (url.searchParams.has('error')) {
+            redirectHumanAuthError(response, 'authorization_denied', humanAuthCookieIsSecure(store));
+            return;
+        }
+        try {
+            const completion = await store.completeHumanAuth({
+                provider: 'github',
+                state: requiredQuery(url, 'state'),
+                code: requiredQuery(url, 'code'),
+            });
+            setHumanAuthCompletionCookie(response, completion.completionToken, humanAuthCookieIsSecure(store));
+            response.setHeader('location', '/?authCompleted=1');
+            response.writeHead(303).end();
+        }
+        catch (error) {
+            redirectHumanAuthError(response, humanAuthErrorCode(error), humanAuthCookieIsSecure(store));
+        }
+        return;
+    }
+    if (routeWorkResultFileGet(store, url, request, response))
+        return;
+    if (await routeCollectiveRead(store, url, request, response))
+        return;
+    routeClientFallback(url, response);
+}
+function humanAuthErrorCode(error) {
+    if (!(error instanceof CollectiveServiceError))
+        return 'provider_unavailable';
+    if (error.code === 'AUTH_ATTEMPT_CONSUMED' ||
+        error.code === 'AUTH_ATTEMPT_EXPIRED' ||
+        error.code === 'INVITE_EXPIRED') {
+        return 'authorization_expired';
+    }
+    if (error.code === 'AUTH_IDENTITY_CONFLICT')
+        return 'identity_conflict';
+    if (error.code === 'AUTH_PROVIDER_NOT_READY' || error.code === 'AUTH_IDENTITY_INVALID') {
+        return 'provider_unavailable';
+    }
+    return 'authorization_failed';
+}
+function redirectHumanAuthError(response, code, secure) {
+    clearHumanAuthCompletionCookie(response, secure);
+    response.setHeader('location', `/?authError=${code}`);
+    response.writeHead(303).end();
+}
+async function routePost(store, serviceOrigin, allowedOrigins, bootstrapLinkPath, githubAppSetup, url, request, response) {
+    const body = await readJsonBody(request, url.pathname === '/api/artifacts/agent/request' ? maxCollectiveArtifactProposalEnvelopeBytes : undefined);
+    if (await routeArtifactPost(store, url.pathname, request, response, body))
+        return;
+    if (await routeGitHubAppSetupPost(store, githubAppSetup, url.pathname, request, response, body))
+        return;
+    if (await routeIdentityPost(store, bootstrapLinkPath, url.pathname, request, response, body))
+        return;
+    if (await routeConnectionPost(store, allowedOrigins, url.pathname, request, response, body))
+        return;
+    if (await routeCollaborationPost(store, url.pathname, request, response, body))
+        return;
+    if (await routeEventPost(store, serviceOrigin, url.pathname, request, response, body))
+        return;
+    writeJson(response, 404, { error: { code: 'NOT_FOUND', message: 'Route not found' } });
+}
+async function routeIdentityPost(store, bootstrapLinkPath, pathname, request, response, body) {
+    if (pathname === '/api/bootstrap') {
+        const result = await store.consumeBootstrap(requireFields(body, ['secret', 'displayName']));
+        if (bootstrapLinkPath)
+            await rm(bootstrapLinkPath, { force: true }).catch(() => undefined);
+        writeJson(response, 201, result);
+    }
+    else if (pathname === '/api/collectives') {
+        writeJson(response, 201, await store.createCollective({
+            sessionToken: requireBearer(request),
+            name: requiredString(body, 'name'),
+        }));
+    }
+    else if (pathname === '/api/invites') {
+        writeJson(response, 201, await store.createInvite({
+            sessionToken: requireBearer(request),
+            collectiveId: requiredString(body, 'collectiveId'),
+        }));
+    }
+    else if (pathname === '/api/join') {
+        writeJson(response, 201, await store.joinInvite(requireFields(body, ['inviteToken', 'displayName'])));
+    }
+    else if (pathname === '/api/memberships/self-leave') {
+        writeJson(response, 200, await store.leaveCollective({
+            sessionToken: requireBearer(request),
+            collectiveId: requiredString(body, 'collectiveId'),
+        }));
+    }
+    else if (pathname === '/api/auth/github/begin') {
+        const result = await store.beginHumanAuth({
+            provider: 'github',
+            intent: parseHumanAuthIntent(body),
+            ...(optionalBearer(request) ? { sessionToken: optionalBearer(request) } : {}),
+        });
+        clearHumanAuthCompletionCookie(response, humanAuthCookieIsSecure(store));
+        writeJson(response, 201, result);
+    }
+    else if (pathname === '/api/auth/completions/exchange') {
+        const secure = humanAuthCookieIsSecure(store);
+        try {
+            const completionToken = requireHumanAuthCompletionCookie(request);
+            const result = await store.exchangeHumanAuthCompletion(completionToken);
+            clearHumanAuthCompletionCookie(response, secure);
+            writeJson(response, 200, result);
+        }
+        catch (error) {
+            clearHumanAuthCompletionCookie(response, secure);
+            throw error;
+        }
+    }
+    else {
+        return false;
+    }
+    return true;
+}
+function humanAuthCookieIsSecure(store) {
+    return new URL(store.getHumanAuthRedirectUri()).protocol === 'https:';
+}
+async function routeConnectionPost(store, allowedOrigins, pathname, request, response, body) {
+    if (pathname === '/api/pairing-intents') {
+        const hostOrigin = normalizedOrigin(requiredString(body, 'hostOrigin'));
+        requireAllowedOrigin(hostOrigin, allowedOrigins);
+        writeJson(response, 201, await store.createPairingIntent({
+            sessionToken: requireBearer(request),
+            collectiveId: requiredString(body, 'collectiveId'),
+            hostOrigin,
+            nonce: requiredString(body, 'nonce'),
+        }));
+    }
+    else if (pathname === '/api/connections/exchange') {
+        await exchangeConnection(store, allowedOrigins, request, response, body);
+    }
+    else if (pathname === '/api/connections/revoke') {
+        writeJson(response, 200, await store.revokeConnection({
+            sessionToken: requireBearer(request),
+            collectiveId: requiredString(body, 'collectiveId'),
+            connectionId: requiredString(body, 'connectionId'),
+        }));
+    }
+    else if (pathname === '/api/connections/self-revoke') {
+        writeJson(response, 200, await store.revokeOwnConnection(requireBearer(request), body));
+    }
+    else {
+        return false;
+    }
+    return true;
+}
+async function routeEventPost(store, serviceOrigin, pathname, request, response, body) {
+    if (pathname === '/api/events/human') {
+        writeJson(response, 201, await store.postHumanMessage(requireBearer(request), body));
+    }
+    else if (pathname === '/api/events/agent') {
+        writeJson(response, 201, await store.postAgentMessage(requireBearer(request), body, serviceOrigin));
+    }
+    else if (pathname === '/api/collaboration/work-result-files/bind') {
+        writeJson(response, 200, await store.bindAcceptedWorkResultFile(requireBearer(request), body));
+    }
+    else if (pathname === '/api/acks') {
+        writeJson(response, 200, await store.acknowledge(requireBearer(request), body));
+    }
+    else if (pathname === '/api/participation') {
+        writeJson(response, 200, await store.publishParticipation(requireBearer(request), body));
+    }
+    else if (pathname === '/api/participation/context') {
+        writeJson(response, 200, store.readParticipationContext(requireBearer(request), body));
+    }
+    else {
+        return false;
+    }
+    return true;
+}
+async function exchangeConnection(store, allowedOrigins, request, response, body) {
+    const origin = normalizedOrigin(request.headers.origin);
+    requireAllowedOrigin(origin, allowedOrigins);
+    const exchange = requireFields(body, [
+        'serviceInstanceId',
+        'collectiveId',
+        'pairingIntentId',
+        'hostOrigin',
+        'nonce',
+        'endpointLabel',
+    ]);
+    if (normalizedOrigin(exchange.hostOrigin) !== origin)
+        forbiddenOrigin();
+    writeJson(response, 201, await store.exchangePairingIntent(exchange));
+}
+function routeClientFallback(url, response) {
+    if (url.pathname.startsWith('/api/')) {
+        writeJson(response, 404, { error: { code: 'NOT_FOUND', message: 'Route not found' } });
+        return;
+    }
+    writeJson(response, 404, { error: { code: 'CLIENT_UNAVAILABLE', message: 'Client asset not found' } });
+}
+//# sourceMappingURL=http-router.js.map

package/dist/business/service/http-router.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-router.js","sourceRoot":"","sources":["../../../src/business/service/http-router.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AAGtC,OAAO,EAAE,0CAA0C,EAAE,MAAM,uBAAuB,CAAC;AACnF,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAErD,OAAO,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAC/F,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EACL,oBAAoB,EACpB,8BAA8B,EAC9B,eAAe,EACf,gBAAgB,EAChB,cAAc,EACd,oBAAoB,EACpB,YAAY,EACZ,oBAAoB,EACpB,aAAa,EACb,aAAa,EACb,cAAc,EACd,aAAa,EACb,gCAAgC,EAChC,4BAA4B,EAC5B,UAAU,EACV,SAAS,GACV,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AAWpE,MAAM,UAAU,2BAA2B,CAAC,OAAqC;IAC/E,MAAM,cAAc,GAAG,OAAO,CAAC,kBAAkB,YAAY,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,kBAAkB;QAC3F,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IACnF,OAAO,KAAK,EAAE,OAAwB,EAAE,QAAwB,EAAE,EAAE;QAClE,IAAI,CAAC;YACH,oBAAoB,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;YAC/C,MAAM,MAAM,GAAG,gBAAgB,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACxD,IAAI,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC;gBAAE,eAAe,EAAE,CAAC;YAC7D,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa;gBAAE,eAAe,EAAE,CAAC;YAC9F,IAAI,MAAM,IAAI,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC;gBAAE,QAAQ,CAAC,SAAS,CAAC,6BAA6B,EAAE,MAAM,CAAC,CAAC;YACpG,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBACjC,QAAQ,CAAC,SAAS,CAAC,8BAA8B,EAAE,kBAAkB,CAAC,CAAC;gBACvE,QAAQ,CAAC,SAAS,CAAC,8BAA8B,EAAE,4BAA4B,CAAC,CAAC;gBACjF,QAAQ,CAAC,SAAS,CAAC,MAAM,IAAI,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;gBAC3E,OAAO;YACT,CAAC;YACD,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,GAAG,EAAE,yBAAyB,CAAC,CAAC,QAAQ,CAAC;YAClF,MAAM,KAAK,GAAG,OAAO,CAAC,YAAY,EAAE,GAAG,CAAC,SAAS,KAAK,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YACvF,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,KAAK,EAAE,CAAC;gBACtC,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,EAAC,cAAc,EAAE,KAAK,CAAC,WAAW,EAAE,gBAAgB,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,wBAAwB,EAAC,SAAS,EAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACxJ,OAAO;YACT,CAAC;YACD,MAAM,YAAY,CAChB,OAAO,CAAC,KAAK,EACb,OAAO,CAAC,aAAa,EACrB,cAAc,EACd,OAAO,CAAC,iBAAiB,EACzB,OAAO,CAAC,cAAc,EACtB,OAAO,EACP,QAAQ,CACT,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,UAAU,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,KAA6B,EAC7B,aAAiC,EACjC,cAAmC,EACnC,iBAAqC,EACrC,cAAkD,EAClD,OAAwB,EACxB,QAAwB;IAExB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,GAAG,EAAE,yBAAyB,CAAC,CAAC;IACnE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC;IACvC,IAAI,MAAM,sBAAsB,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,CAAC;QAAE,OAAO;IACxE,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QACrB,MAAM,QAAQ,CAAC,KAAK,EAAE,cAAc,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC9D,OAAO;IACT,CAAC;IACD,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,mBAAmB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACnC,OAAO;IACT,CAAC;IACD,MAAM,SAAS,CAAC,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,iBAAiB,EAAE,cAAc,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;AACnH,CAAC;AAED,KAAK,UAAU,QAAQ,CACrB,KAA6B,EAC7B,cAAkD,EAClD,GAAQ,EACR,OAAwB,EACxB,QAAwB;IAExB,IAAI,GAAG,CAAC,QAAQ,KAAK,aAAa,EAAE,CAAC;QACnC,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QAC/D,OAAO;IACT,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;QACjC,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;QAC9C,OAAO;IACT,CAAC;IACD,IAAI,MAAM,sBAAsB,CAAC,KAAK,EAAE,cAAc,EAAE,GAAG,EAAE,QAAQ,CAAC;QAAE,OAAO;IAC/E,IAAI,GAAG,CAAC,QAAQ,KAAK,2BAA2B,EAAE,CAAC;QACjD,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAClC,sBAAsB,CAAC,QAAQ,EAAE,sBAAsB,EAAE,uBAAuB,CAAC,KAAK,CAAC,CAAC,CAAC;YACzF,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,iBAAiB,CAAC;gBAC/C,QAAQ,EAAE,QAAQ;gBAClB,KAAK,EAAE,aAAa,CAAC,GAAG,EAAE,OAAO,CAAC;gBAClC,IAAI,EAAE,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC;aACjC,CAAC,CAAC;YACH,4BAA4B,CAAC,QAAQ,EAAE,UAAU,CAAC,eAAe,EAAE,uBAAuB,CAAC,KAAK,CAAC,CAAC,CAAC;YACnG,QAAQ,CAAC,SAAS,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAC;YACpD,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;QAChC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,sBAAsB,CAAC,QAAQ,EAAE,kBAAkB,CAAC,KAAK,CAAC,EAAE,uBAAuB,CAAC,KAAK,CAAC,CAAC,CAAC;QAC9F,CAAC;QACD,OAAO;IACT,CAAC;IACD,IAAI,sBAAsB,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,CAAC;QAAE,OAAO;IAClE,IAAI,MAAM,mBAAmB,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,CAAC;QAAE,OAAO;IACrE,mBAAmB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;AACrC,CAAC;AASD,SAAS,kBAAkB,CAAC,KAAc;IACxC,IAAI,CAAC,CAAC,KAAK,YAAY,sBAAsB,CAAC;QAAE,OAAO,sBAAsB,CAAC;IAC9E,IACE,KAAK,CAAC,IAAI,KAAK,uBAAuB;QACtC,KAAK,CAAC,IAAI,KAAK,sBAAsB;QACrC,KAAK,CAAC,IAAI,KAAK,gBAAgB,EAC/B,CAAC;QACD,OAAO,uBAAuB,CAAC;IACjC,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,wBAAwB;QAAE,OAAO,mBAAmB,CAAC;IACxE,IAAI,KAAK,CAAC,IAAI,KAAK,yBAAyB,IAAI,KAAK,CAAC,IAAI,KAAK,uBAAuB,EAAE,CAAC;QACvF,OAAO,sBAAsB,CAAC;IAChC,CAAC;IACD,OAAO,sBAAsB,CAAC;AAChC,CAAC;AAED,SAAS,sBAAsB,CAAC,QAAwB,EAAE,IAA4B,EAAE,MAAe;IACrG,8BAA8B,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACjD,QAAQ,CAAC,SAAS,CAAC,UAAU,EAAE,eAAe,IAAI,EAAE,CAAC,CAAC;IACtD,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;AAChC,CAAC;AAED,KAAK,UAAU,SAAS,CACtB,KAA6B,EAC7B,aAAiC,EACjC,cAAmC,EACnC,iBAAqC,EACrC,cAAkD,EAClD,GAAQ,EACR,OAAwB,EACxB,QAAwB;IAExB,MAAM,IAAI,GAAG,MAAM,YAAY,CAC7B,OAAO,EACP,GAAG,CAAC,QAAQ,KAAK,8BAA8B,CAAC,CAAC,CAAC,0CAA0C,CAAC,CAAC,CAAC,SAAS,CACzG,CAAC;IACF,IAAI,MAAM,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC;QAAE,OAAO;IAClF,IAAI,MAAM,uBAAuB,CAAC,KAAK,EAAE,cAAc,EAAE,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC;QAAE,OAAO;IACxG,IAAI,MAAM,iBAAiB,CAAC,KAAK,EAAE,iBAAiB,EAAE,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC;QAAE,OAAO;IACrG,IAAI,MAAM,mBAAmB,CAAC,KAAK,EAAE,cAAc,EAAE,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC;QAAE,OAAO;IACpG,IAAI,MAAM,sBAAsB,CAAC,KAAK,EAAE,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC;QAAE,OAAO;IACvF,IAAI,MAAM,cAAc,CAAC,KAAK,EAAE,aAAa,EAAE,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC;QAAE,OAAO;IAC9F,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,iBAAiB,EAAE,EAAE,CAAC,CAAC;AACzF,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,KAA6B,EAC7B,iBAAqC,EACrC,QAAgB,EAChB,OAAwB,EACxB,QAAwB,EACxB,IAA6B;IAE7B,IAAI,QAAQ,KAAK,gBAAgB,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,gBAAgB,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC;QAC5F,IAAI,iBAAiB;YAAE,MAAM,EAAE,CAAC,iBAAiB,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC3F,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;IACnC,CAAC;SAAM,IAAI,QAAQ,KAAK,kBAAkB,EAAE,CAAC;QAC3C,SAAS,CACP,QAAQ,EACR,GAAG,EACH,MAAM,KAAK,CAAC,gBAAgB,CAAC;YAC3B,YAAY,EAAE,aAAa,CAAC,OAAO,CAAC;YACpC,IAAI,EAAE,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC;SACnC,CAAC,CACH,CAAC;IACJ,CAAC;SAAM,IAAI,QAAQ,KAAK,cAAc,EAAE,CAAC;QACvC,SAAS,CACP,QAAQ,EACR,GAAG,EACH,MAAM,KAAK,CAAC,YAAY,CAAC;YACvB,YAAY,EAAE,aAAa,CAAC,OAAO,CAAC;YACpC,YAAY,EAAE,cAAc,CAAC,IAAI,EAAE,cAAc,CAAC;SACnD,CAAC,CACH,CAAC;IACJ,CAAC;SAAM,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;QACpC,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;IACxG,CAAC;SAAM,IAAI,QAAQ,KAAK,6BAA6B,EAAE,CAAC;QACtD,SAAS,CACP,QAAQ,EACR,GAAG,EACH,MAAM,KAAK,CAAC,eAAe,CAAC;YAC1B,YAAY,EAAE,aAAa,CAAC,OAAO,CAAC;YACpC,YAAY,EAAE,cAAc,CAAC,IAAI,EAAE,cAAc,CAAC;SACnD,CAAC,CACH,CAAC;IACJ,CAAC;SAAM,IAAI,QAAQ,KAAK,wBAAwB,EAAE,CAAC;QACjD,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,cAAc,CAAC;YACxC,QAAQ,EAAE,QAAQ;YAClB,MAAM,EAAE,oBAAoB,CAAC,IAAI,CAAC;YAClC,GAAG,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9E,CAAC,CAAC;QACH,8BAA8B,CAAC,QAAQ,EAAE,uBAAuB,CAAC,KAAK,CAAC,CAAC,CAAC;QACzE,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;IACnC,CAAC;SAAM,IAAI,QAAQ,KAAK,gCAAgC,EAAE,CAAC;QACzD,MAAM,MAAM,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC;QAC9C,IAAI,CAAC;YACH,MAAM,eAAe,GAAG,gCAAgC,CAAC,OAAO,CAAC,CAAC;YAClE,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,2BAA2B,CAAC,eAAe,CAAC,CAAC;YACxE,8BAA8B,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YACjD,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,8BAA8B,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YACjD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;SAAM,CAAC;QACN,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,uBAAuB,CAAC,KAA6B;IAC5D,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,uBAAuB,EAAE,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC;AACxE,CAAC;AAED,KAAK,UAAU,mBAAmB,CAChC,KAA6B,EAC7B,cAAmC,EACnC,QAAgB,EAChB,OAAwB,EACxB,QAAwB,EACxB,IAA6B;IAE7B,IAAI,QAAQ,KAAK,sBAAsB,EAAE,CAAC;QACxC,MAAM,UAAU,GAAG,gBAAgB,CAAC,cAAc,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC;QACxE,oBAAoB,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;QACjD,SAAS,CACP,QAAQ,EACR,GAAG,EACH,MAAM,KAAK,CAAC,mBAAmB,CAAC;YAC9B,YAAY,EAAE,aAAa,CAAC,OAAO,CAAC;YACpC,YAAY,EAAE,cAAc,CAAC,IAAI,EAAE,cAAc,CAAC;YAClD,UAAU;YACV,KAAK,EAAE,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC;SACrC,CAAC,CACH,CAAC;IACJ,CAAC;SAAM,IAAI,QAAQ,KAAK,2BAA2B,EAAE,CAAC;QACpD,MAAM,kBAAkB,CAAC,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC3E,CAAC;SAAM,IAAI,QAAQ,KAAK,yBAAyB,EAAE,CAAC;QAClD,SAAS,CACP,QAAQ,EACR,GAAG,EACH,MAAM,KAAK,CAAC,gBAAgB,CAAC;YAC3B,YAAY,EAAE,aAAa,CAAC,OAAO,CAAC;YACpC,YAAY,EAAE,cAAc,CAAC,IAAI,EAAE,cAAc,CAAC;YAClD,YAAY,EAAE,cAAc,CAAC,IAAI,EAAE,cAAc,CAAC;SACnD,CAAC,CACH,CAAC;IACJ,CAAC;SAAM,IAAI,QAAQ,KAAK,8BAA8B,EAAE,CAAC;QACvD,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,KAAK,CAAC,mBAAmB,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IAC1F,CAAC;SAAM,CAAC;QACN,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,KAA6B,EAC7B,aAAiC,EACjC,QAAgB,EAChB,OAAwB,EACxB,QAAwB,EACxB,IAA6B;IAE7B,IAAI,QAAQ,KAAK,mBAAmB,EAAE,CAAC;QACrC,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,KAAK,CAAC,gBAAgB,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IACvF,CAAC;SAAM,IAAI,QAAQ,KAAK,mBAAmB,EAAE,CAAC;QAC5C,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,KAAK,CAAC,gBAAgB,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC;IACtG,CAAC;SAAM,IAAI,QAAQ,KAAK,2CAA2C,EAAE,CAAC;QACpE,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,KAAK,CAAC,0BAA0B,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IACjG,CAAC;SAAM,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;QACpC,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,KAAK,CAAC,WAAW,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IAClF,CAAC;SAAM,IAAI,QAAQ,KAAK,oBAAoB,EAAE,CAAC;QAC7C,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,KAAK,CAAC,oBAAoB,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IAC3F,CAAC;SAAM,IAAI,QAAQ,KAAK,4BAA4B,EAAE,CAAC;QACrD,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,KAAK,CAAC,wBAAwB,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IACzF,CAAC;SAAM,CAAC;QACN,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,KAA6B,EAC7B,cAAmC,EACnC,OAAwB,EACxB,QAAwB,EACxB,IAA6B;IAE7B,MAAM,MAAM,GAAG,gBAAgB,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACxD,oBAAoB,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,EAAE;QACnC,mBAAmB;QACnB,cAAc;QACd,iBAAiB;QACjB,YAAY;QACZ,OAAO;QACP,eAAe;KAChB,CAAC,CAAC;IACH,IAAI,gBAAgB,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,MAAM;QAAE,eAAe,EAAE,CAAC;IACxE,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,KAAK,CAAC,qBAAqB,CAAC,QAAQ,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAQ,EAAE,QAAwB;IAC7D,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACrC,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,iBAAiB,EAAE,EAAE,CAAC,CAAC;QACvF,OAAO;IACT,CAAC;IACD,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,wBAAwB,EAAE,EAAE,CAAC,CAAC;AACzG,CAAC"}

package/dist/business/service/http-server.d.ts

@@ -0,0 +1,24 @@
+import { type Server } from 'node:http';
+import type { CollectiveClientAssets } from '../../client-assets.js';
+import type { GitHubAppManifestSetup } from './github-app-manifest-setup.js';
+import type { CollectiveServiceStore } from './store.js';
+export interface StartCollectiveServerOptions {
+    readonly store: CollectiveServiceStore;
+    readonly host?: string;
+    readonly port?: number;
+    /** Canonical browser-facing URL when TLS terminates before this listener. */
+    readonly publicUrl?: string;
+    readonly allowedHostOrigins?: readonly string[] | ReadonlySet<string>;
+    readonly clientAssets?: CollectiveClientAssets;
+    readonly bootstrapLinkPath?: string;
+    readonly githubAppSetup?: GitHubAppManifestSetup;
+}
+export interface RunningCollectiveServer {
+    readonly host: string;
+    readonly port: number;
+    readonly url: string;
+    readonly server: Server;
+    close(): Promise<void>;
+}
+export declare function startCollectiveServer(options: StartCollectiveServerOptions): Promise<RunningCollectiveServer>;
+//# sourceMappingURL=http-server.d.ts.map

package/dist/business/service/http-server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-server.d.ts","sourceRoot":"","sources":["../../../src/business/service/http-server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,KAAK,MAAM,EAAE,MAAM,WAAW,CAAC;AACtD,OAAO,KAAK,EAAC,sBAAsB,EAAC,MAAM,wBAAwB,CAAC;AACnE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAE7E,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAEzD,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,KAAK,EAAE,sBAAsB,CAAC;IACvC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,6EAA6E;IAC7E,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IACtE,QAAQ,CAAC,YAAY,CAAC,EAAE,sBAAsB,CAAC;IAC/C,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,cAAc,CAAC,EAAE,sBAAsB,CAAC;CAClD;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAID,wBAAsB,qBAAqB,CAAC,OAAO,EAAE,4BAA4B,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAyCnH"}

package/dist/business/service/http-server.js

@@ -0,0 +1,55 @@
+import { createServer } from 'node:http';
+import { createCollectiveHttpHandler } from './http-router.js';
+const RESERVED_RUNTIME_PORTS = new Set([3001, 3002]);
+export async function startCollectiveServer(options) {
+    const host = options.host ?? '127.0.0.1';
+    const requestedPort = options.port ?? 5201;
+    if (RESERVED_RUNTIME_PORTS.has(requestedPort)) {
+        throw new Error(`Port ${requestedPort} is reserved for the Clowder AI runtime`);
+    }
+    const allowedHostOrigins = options.allowedHostOrigins instanceof Set ? options.allowedHostOrigins : new Set(options.allowedHostOrigins ?? []);
+    const handler = createCollectiveHttpHandler({
+        store: options.store,
+        ...(options.publicUrl ? { serviceOrigin: new URL(options.publicUrl).origin } : {}),
+        clientAssets: options.clientAssets,
+        allowedHostOrigins,
+        bootstrapLinkPath: options.bootstrapLinkPath,
+        githubAppSetup: options.githubAppSetup,
+    });
+    const server = createServer(handler);
+    await new Promise((resolve, reject) => {
+        server.once('error', reject);
+        server.listen(requestedPort, host, () => {
+            server.off('error', reject);
+            resolve();
+        });
+    });
+    const address = server.address();
+    if (!address || typeof address === 'string') {
+        await closeServer(server);
+        throw new Error('Collective Service did not bind a TCP address');
+    }
+    const url = `http://${host}:${address.port}`;
+    allowedHostOrigins.add(url);
+    options.store.startArtifactOwnerRelay();
+    return {
+        host,
+        port: address.port,
+        url,
+        server,
+        close: () => {
+            options.store.stopArtifactOwnerRelay();
+            return closeServer(server);
+        },
+    };
+}
+function closeServer(server) {
+    return new Promise((resolve, reject) => {
+        if (!server.listening) {
+            resolve();
+            return;
+        }
+        server.close((error) => (error ? reject(error) : resolve()));
+    });
+}
+//# sourceMappingURL=http-server.js.map

package/dist/business/service/http-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-server.js","sourceRoot":"","sources":["../../../src/business/service/http-server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAe,MAAM,WAAW,CAAC;AAGtD,OAAO,EAAE,2BAA2B,EAAE,MAAM,kBAAkB,CAAC;AAuB/D,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;AAErD,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,OAAqC;IAC/E,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,WAAW,CAAC;IACzC,MAAM,aAAa,GAAG,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC;IAC3C,IAAI,sBAAsB,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,QAAQ,aAAa,yCAAyC,CAAC,CAAC;IAClF,CAAC;IACD,MAAM,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,YAAY,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC;IAC9I,MAAM,OAAO,GAAG,2BAA2B,CAAC;QAC1C,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClF,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,kBAAkB;QAClB,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;QAC5C,cAAc,EAAE,OAAO,CAAC,cAAc;KACvC,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,IAAI,EAAE,GAAG,EAAE;YACtC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC5B,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;IACjC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC5C,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,GAAG,GAAG,UAAU,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;IAC7C,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC5B,OAAO,CAAC,KAAK,CAAC,uBAAuB,EAAE,CAAC;IACxC,OAAO;QACL,IAAI;QACJ,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,GAAG;QACH,MAAM;QACN,KAAK,EAAE,GAAG,EAAE;YACV,OAAO,CAAC,KAAK,CAAC,sBAAsB,EAAE,CAAC;YACvC,OAAO,WAAW,CAAC,MAAM,CAAC,CAAC;QAC7B,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,MAAc;IACjC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YACtB,OAAO,EAAE,CAAC;YACV,OAAO;QACT,CAAC;QACD,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/business/service/http-transport.d.ts

@@ -0,0 +1,23 @@
+import type { IncomingMessage, ServerResponse } from 'node:http';
+import type { BeginHumanAuthIntent } from './identity-store.js';
+export declare function readJsonBody(request: IncomingMessage, maxBytes?: number): Promise<Record<string, unknown>>;
+export declare function requireBearer(request: IncomingMessage): string;
+export declare function optionalBearer(request: IncomingMessage): string | undefined;
+export declare function requireHumanAuthCompletionCookie(request: IncomingMessage): string;
+export declare function setHumanAuthCompletionCookie(response: ServerResponse, token: string, secure: boolean): void;
+export declare function clearHumanAuthCompletionCookie(response: ServerResponse, secure: boolean): void;
+export declare function parseHumanAuthIntent(body: Record<string, unknown>): BeginHumanAuthIntent;
+export declare function requiredString(body: Record<string, unknown>, key: string): string;
+export declare function requireFields<const Keys extends readonly string[]>(body: Record<string, unknown>, keys: Keys): {
+    [Key in Keys[number]]: string;
+};
+export declare function requiredQuery(url: URL, key: string): string;
+export declare function numberQuery(url: URL, key: string, fallback: number): number;
+export declare function normalizedOrigin(value: string | undefined): string | undefined;
+export declare function requestOrigin(request: IncomingMessage): string;
+export declare function requireAllowedOrigin(origin: string | undefined, allowedOrigins: ReadonlySet<string>): asserts origin is string;
+export declare function forbiddenOrigin(): never;
+export declare function writeJson(response: ServerResponse, status: number, value: unknown): void;
+export declare function writeError(response: ServerResponse, error: unknown): void;
+export declare function applySecurityHeaders(response: ServerResponse, allowedOrigins: ReadonlySet<string>): void;
+//# sourceMappingURL=http-transport.d.ts.map