@de-otio/trellis 0.4.0

package/dist/lib/region-detection.d.ts

@@ -0,0 +1,110 @@
+/**
+ * Region Detection Module
+ *
+ * Detects user region using multiple sources with priority ordering:
+ * 1. User preference (from authenticated session) - Most trusted
+ * 2. IP geolocation - Automatic detection
+ * 3. Accept-Language header - Fallback
+ * 4. Default to 'EU' - Safe fallback
+ *
+ * Security: All detected regions are validated against known regions list.
+ */
+import type { Env } from "../env";
+import { Session, SessionManager } from "./session-manager";
+/**
+ * Valid regions supported by the application
+ */
+declare const VALID_REGIONS: readonly ["US", "EU", "CN"];
+export type Region = (typeof VALID_REGIONS)[number];
+/**
+ * Region Detector class
+ */
+export declare class RegionDetector {
+    private env;
+    private logger;
+    constructor(env: Env);
+    /**
+     * Validate region against known regions list
+     *
+     * Security: Prevents region spoofing by only allowing known regions
+     *
+     * @param region - Region code to validate
+     * @returns true if region is valid, false otherwise
+     */
+    isValidRegion(region: string): region is Region;
+    /**
+     * Get region from Accept-Language header
+     * Maps language codes to regions (e.g., 'zh-CN' -> 'CN')
+     *
+     * @param acceptLanguage - Accept-Language header value
+     * @returns Region code or null if not detected
+     */
+    private getRegionFromLanguage;
+    /**
+     * Geolocate IP address using CDN-provided geolocation headers
+     *
+     * Supports both CloudFront (CloudFront-Viewer-Country) and Cloudflare (CF-IPCountry).
+     * CloudFront adds CloudFront-Viewer-Country automatically when the distribution is
+     * configured to forward it. CF-IPCountry is kept as a fallback for local development
+     * or non-CloudFront environments.
+     *
+     * @param request - Request object (contains geo headers from CloudFront or Cloudflare)
+     * @returns Region code or null if not detected
+     */
+    private geolocateIPFromHeaders;
+    /**
+     * Geolocate IP address using external service (fallback)
+     *
+     * Only used if CDN geolocation headers are not available
+     *
+     * @param ip - IP address to geolocate
+     * @returns Region code or null if not detected
+     */
+    private geolocateIPExternal;
+    /**
+     * Detect user region from request (optimized async version)
+     *
+     * Priority order (most trusted first):
+     * 1. User preference (from authenticated session) - Currently deferred
+     * 2. IP geolocation (CloudFront-Viewer-Country / CF-IPCountry header) - Synchronous, fast
+     * 3. Accept-Language header - Synchronous, fast
+     * 4. Default to 'EU' - Synchronous, fast
+     *
+     * Performance: This function is optimized to avoid async operations when possible.
+     * Since user preference is deferred, it only uses async for external IP geolocation
+     * (which is rarely needed since CloudFront provides CloudFront-Viewer-Country automatically).
+     *
+     * Security: All detected regions are validated against known regions list
+     *
+     * @param request - Request object
+     * @param sessionManager - Session manager instance (optional, for user preference)
+     * @param session - Existing session (optional, to avoid re-fetching)
+     * @returns Detected region code (always valid)
+     */
+    detectRegion(request: Request, sessionManager?: SessionManager, session?: Session | null): Promise<Region>;
+    /**
+     * Synchronous version of detectRegion (for cases where async is not needed)
+     *
+     * Uses only:
+     * - CloudFront-Viewer-Country / CF-IPCountry header (synchronous)
+     * - Accept-Language header (synchronous)
+     * - Default region (synchronous)
+     *
+     * Does NOT use:
+     * - User session (requires async)
+     * - External IP geolocation (requires async)
+     *
+     * @param request - Request object
+     * @returns Detected region code (always valid)
+     */
+    detectRegionSync(request: Request): Region;
+}
+/**
+ * Legacy functions for backward compatibility
+ * @deprecated Use new RegionDetector class instead
+ */
+export declare function isValidRegion(region: string): region is Region;
+export declare function detectRegion(request: Request, env: Env, sessionManager?: SessionManager, session?: Session | null): Promise<Region>;
+export declare function detectRegionSync(request: Request, env: Env): Region;
+export {};
+//# sourceMappingURL=region-detection.d.ts.map

package/dist/lib/region-detection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"region-detection.d.ts","sourceRoot":"","sources":["../../src/lib/region-detection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,QAAQ,CAAC;AAGlC,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAE5D;;GAEG;AACH,QAAA,MAAM,aAAa,6BAA8B,CAAC;AAElD,MAAM,MAAM,MAAM,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC;AAEpD;;GAEG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,GAAG,CAAM;IACjB,OAAO,CAAC,MAAM,CAAS;gBAEX,GAAG,EAAE,GAAG;IAKpB;;;;;;;OAOG;IACH,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,IAAI,MAAM;IAI/C;;;;;;OAMG;IACH,OAAO,CAAC,qBAAqB;IAsC7B;;;;;;;;;;OAUG;IACH,OAAO,CAAC,sBAAsB;IA6D9B;;;;;;;OAOG;YACW,mBAAmB;IA4EjC;;;;;;;;;;;;;;;;;;;OAmBG;IACG,YAAY,CAChB,OAAO,EAAE,OAAO,EAChB,cAAc,CAAC,EAAE,cAAc,EAC/B,OAAO,CAAC,EAAE,OAAO,GAAG,IAAI,GACvB,OAAO,CAAC,MAAM,CAAC;IAyHlB;;;;;;;;;;;;;;OAcG;IACH,gBAAgB,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM;CA2B3C;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,IAAI,MAAM,CAE9D;AAED,wBAAsB,YAAY,CAChC,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,GAAG,EACR,cAAc,CAAC,EAAE,cAAc,EAC/B,OAAO,CAAC,EAAE,OAAO,GAAG,IAAI,GACvB,OAAO,CAAC,MAAM,CAAC,CAGjB;AAED,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,GAAG,MAAM,CAGnE"}

package/dist/lib/region-detection.js

@@ -0,0 +1,408 @@
+"use strict";
+/**
+ * Region Detection Module
+ *
+ * Detects user region using multiple sources with priority ordering:
+ * 1. User preference (from authenticated session) - Most trusted
+ * 2. IP geolocation - Automatic detection
+ * 3. Accept-Language header - Fallback
+ * 4. Default to 'EU' - Safe fallback
+ *
+ * Security: All detected regions are validated against known regions list.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RegionDetector = void 0;
+exports.isValidRegion = isValidRegion;
+exports.detectRegion = detectRegion;
+exports.detectRegionSync = detectRegionSync;
+const ip_scrubber_1 = require("./ip-scrubber");
+const logger_1 = require("./logger");
+/**
+ * Valid regions supported by the application
+ */
+const VALID_REGIONS = ["US", "EU", "CN"];
+/**
+ * Region Detector class
+ */
+class RegionDetector {
+    env;
+    logger;
+    constructor(env) {
+        this.env = env;
+        this.logger = logger_1.Logger.getInstance(env);
+    }
+    /**
+     * Validate region against known regions list
+     *
+     * Security: Prevents region spoofing by only allowing known regions
+     *
+     * @param region - Region code to validate
+     * @returns true if region is valid, false otherwise
+     */
+    isValidRegion(region) {
+        return VALID_REGIONS.includes(region);
+    }
+    /**
+     * Get region from Accept-Language header
+     * Maps language codes to regions (e.g., 'zh-CN' -> 'CN')
+     *
+     * @param acceptLanguage - Accept-Language header value
+     * @returns Region code or null if not detected
+     */
+    getRegionFromLanguage(acceptLanguage) {
+        if (!acceptLanguage) {
+            return null;
+        }
+        // Parse Accept-Language header (e.g., "en-US,en;q=0.9,zh-CN;q=0.8")
+        const languages = acceptLanguage
+            .split(",")
+            .map((lang) => lang.split(";")[0].trim().toLowerCase());
+        // Check for China-specific language codes
+        if (languages.some((lang) => lang.startsWith("zh-cn") || lang.startsWith("zh-hans"))) {
+            return "CN";
+        }
+        // Check for other Chinese variants (may indicate China region)
+        if (languages.some((lang) => lang.startsWith("zh"))) {
+            // Could be CN, TW, HK, etc. - default to CN for now
+            // TODO: Add more specific detection if needed
+            return "CN";
+        }
+        // Check for European languages
+        if (languages.some((lang) => ["de", "fr", "es", "it", "pt", "nl"].includes(lang))) {
+            return "EU";
+        }
+        return null;
+    }
+    /**
+     * Geolocate IP address using CDN-provided geolocation headers
+     *
+     * Supports both CloudFront (CloudFront-Viewer-Country) and Cloudflare (CF-IPCountry).
+     * CloudFront adds CloudFront-Viewer-Country automatically when the distribution is
+     * configured to forward it. CF-IPCountry is kept as a fallback for local development
+     * or non-CloudFront environments.
+     *
+     * @param request - Request object (contains geo headers from CloudFront or Cloudflare)
+     * @returns Region code or null if not detected
+     */
+    geolocateIPFromHeaders(request) {
+        // CloudFront-Viewer-Country is added by CloudFront; CF-IPCountry is Cloudflare legacy fallback
+        const countryCode = request.headers.get("CloudFront-Viewer-Country")
+            || request.headers.get("CF-IPCountry");
+        if (!countryCode || countryCode === "XX" || countryCode === "T1") {
+            // XX = Unknown, T1 = Tor exit node
+            return null;
+        }
+        // Map country codes to regions
+        // China
+        if (countryCode === "CN") {
+            return "CN";
+        }
+        // United States
+        if (countryCode === "US") {
+            return "US";
+        }
+        // European Union countries
+        const euCountries = [
+            "AT",
+            "BE",
+            "BG",
+            "HR",
+            "CY",
+            "CZ",
+            "DK",
+            "EE",
+            "FI",
+            "FR",
+            "DE",
+            "GR",
+            "HU",
+            "IE",
+            "IT",
+            "LV",
+            "LT",
+            "LU",
+            "MT",
+            "NL",
+            "PL",
+            "PT",
+            "RO",
+            "SK",
+            "SI",
+            "ES",
+            "SE",
+        ];
+        if (euCountries.includes(countryCode)) {
+            return "EU";
+        }
+        // POLICY: Default to EU for unlisted countries. EU provides the strictest
+        // data residency guarantees and is the safest default for GDPR compliance.
+        // If per-country routing is needed, add countries to the mapping above.
+        return "EU";
+    }
+    /**
+     * Geolocate IP address using external service (fallback)
+     *
+     * Only used if CDN geolocation headers are not available
+     *
+     * @param ip - IP address to geolocate
+     * @returns Region code or null if not detected
+     */
+    async geolocateIPExternal(ip) {
+        // Only use external service if explicitly configured
+        if (!this.env.IP_GEOLOCATION_API_KEY ||
+            this.env.IP_GEOLOCATION_SERVICE !== "ipapi") {
+            return null;
+        }
+        try {
+            // Example: ipapi.co (free tier: 1000 requests/day)
+            const response = await fetch(`https://ipapi.co/${ip}/country_code/`, {
+                headers: {
+                    "User-Agent": "Trellis-API/1.0",
+                },
+            });
+            if (!response.ok) {
+                return null;
+            }
+            const countryCode = (await response.text()).trim().toUpperCase();
+            // Map country codes to regions (same as CDN header mapping)
+            if (countryCode === "CN") {
+                return "CN";
+            }
+            // United States
+            if (countryCode === "US") {
+                return "US";
+            }
+            const euCountries = [
+                "AT",
+                "BE",
+                "BG",
+                "HR",
+                "CY",
+                "CZ",
+                "DK",
+                "EE",
+                "FI",
+                "FR",
+                "DE",
+                "GR",
+                "HU",
+                "IE",
+                "IT",
+                "LV",
+                "LT",
+                "LU",
+                "MT",
+                "NL",
+                "PL",
+                "PT",
+                "RO",
+                "SK",
+                "SI",
+                "ES",
+                "SE",
+            ];
+            if (euCountries.includes(countryCode)) {
+                return "EU";
+            }
+            return "EU";
+        }
+        catch (error) {
+            this.logger.error("[RegionDetection] External geolocation failed:", error);
+            return null;
+        }
+    }
+    /**
+     * Detect user region from request (optimized async version)
+     *
+     * Priority order (most trusted first):
+     * 1. User preference (from authenticated session) - Currently deferred
+     * 2. IP geolocation (CloudFront-Viewer-Country / CF-IPCountry header) - Synchronous, fast
+     * 3. Accept-Language header - Synchronous, fast
+     * 4. Default to 'EU' - Synchronous, fast
+     *
+     * Performance: This function is optimized to avoid async operations when possible.
+     * Since user preference is deferred, it only uses async for external IP geolocation
+     * (which is rarely needed since CloudFront provides CloudFront-Viewer-Country automatically).
+     *
+     * Security: All detected regions are validated against known regions list
+     *
+     * @param request - Request object
+     * @param sessionManager - Session manager instance (optional, for user preference)
+     * @param session - Existing session (optional, to avoid re-fetching)
+     * @returns Detected region code (always valid)
+     */
+    async detectRegion(request, sessionManager, session) {
+        const defaultRegion = this.env.DEFAULT_REGION || "EU";
+        // Validate default region
+        if (!this.isValidRegion(defaultRegion)) {
+            this.logger.warn(`[RegionDetection] Invalid DEFAULT_REGION: ${defaultRegion}, using 'EU'`);
+            return "EU";
+        }
+        // Priority 1: User preference (from authenticated session) - Most trusted
+        // First, try to get session if not provided
+        let activeSession = session;
+        if (!activeSession && sessionManager) {
+            try {
+                const { SecretResolver } = await Promise.resolve().then(() => __importStar(require("./secret-resolver")));
+                const secretResolver = new SecretResolver(this.env);
+                const sessionSecret = secretResolver.getSessionSecret();
+                activeSession = await sessionManager.getSession(request, sessionSecret, this.env);
+            }
+            catch (error) {
+                // If session fetch fails, continue without user preference
+                this.logger.debug("[RegionDetection] Could not fetch session:", error);
+            }
+        }
+        // Priority 1: User preference (from authenticated session) - Most trusted
+        // Query database for user region preference if we have a session
+        if (activeSession?.userId && this.env.DATABASE_URL) {
+            try {
+                // Try to get user region preference from database
+                // We'll try EU region first (default), then fallback to others if needed
+                // Note: Type assertion needed since Prisma client hasn't been regenerated with region field
+                // TODO: Remove type assertion after running `npx prisma generate`
+                // Using retry logic with exponential backoff for connection resilience
+                const { sharedDatabaseConnectionManager } = await Promise.resolve().then(() => __importStar(require("./database-connection-manager")));
+                const { withQueryTimeoutAndRetry, QueryTimeoutPresets } = await Promise.resolve().then(() => __importStar(require("./db-query-helper")));
+                const user = await withQueryTimeoutAndRetry(sharedDatabaseConnectionManager, "EU", this.env, async (db) => {
+                    return await db.user.findUnique({
+                        where: { id: activeSession.userId },
+                        select: { region: true },
+                    });
+                }, {
+                    ...QueryTimeoutPresets.USER_FACING,
+                    maxRetries: 3,
+                    baseDelayMs: 100,
+                    context: {
+                        operation: "region_detection_getUserPreference",
+                        userId: activeSession.userId,
+                    },
+                });
+                if (user?.region && this.isValidRegion(user.region)) {
+                    // User preference takes highest priority
+                    return user.region;
+                }
+            }
+            catch (error) {
+                // If database query fails, fall through to other detection methods
+                // Don't log error here to avoid noise (database might not be available in all contexts)
+                this.logger.debug("[RegionDetection] Could not fetch user region preference from database:", error);
+            }
+        }
+        // Fast path: Use sync version if external IP geolocation is not configured
+        if (!this.env.IP_GEOLOCATION_API_KEY ||
+            this.env.IP_GEOLOCATION_SERVICE !== "ipapi") {
+            return this.detectRegionSync(request);
+        }
+        // Slow path: Only if external IP geolocation is configured (rare)
+        // Priority 2: IP geolocation
+        if (this.env.ENABLE_IP_GEOLOCATION !== "false") {
+            // Try CDN geolocation first (CloudFront-Viewer-Country / CF-IPCountry, synchronous)
+            const cloudflareRegion = this.geolocateIPFromHeaders(request);
+            if (cloudflareRegion && this.isValidRegion(cloudflareRegion)) {
+                return cloudflareRegion;
+            }
+            // Fallback to external service (only if configured and CDN headers unavailable)
+            const ip = (0, ip_scrubber_1.getIPAddress)(request);
+            if (ip && ip !== "unknown") {
+                const externalRegion = await this.geolocateIPExternal(ip);
+                if (externalRegion && this.isValidRegion(externalRegion)) {
+                    return externalRegion;
+                }
+            }
+        }
+        // Priority 3: Accept-Language header (least trusted)
+        const langRegion = this.getRegionFromLanguage(request.headers.get("Accept-Language"));
+        if (langRegion && this.isValidRegion(langRegion)) {
+            return langRegion;
+        }
+        // Priority 4: Default fallback
+        return defaultRegion;
+    }
+    /**
+     * Synchronous version of detectRegion (for cases where async is not needed)
+     *
+     * Uses only:
+     * - CloudFront-Viewer-Country / CF-IPCountry header (synchronous)
+     * - Accept-Language header (synchronous)
+     * - Default region (synchronous)
+     *
+     * Does NOT use:
+     * - User session (requires async)
+     * - External IP geolocation (requires async)
+     *
+     * @param request - Request object
+     * @returns Detected region code (always valid)
+     */
+    detectRegionSync(request) {
+        const defaultRegion = this.env.DEFAULT_REGION || "EU";
+        // Validate default region
+        if (!this.isValidRegion(defaultRegion)) {
+            return "EU";
+        }
+        // Try CDN geolocation (synchronous)
+        if (this.env.ENABLE_IP_GEOLOCATION !== "false") {
+            const cloudflareRegion = this.geolocateIPFromHeaders(request);
+            if (cloudflareRegion && this.isValidRegion(cloudflareRegion)) {
+                return cloudflareRegion;
+            }
+        }
+        // Try Accept-Language header
+        const langRegion = this.getRegionFromLanguage(request.headers.get("Accept-Language"));
+        if (langRegion && this.isValidRegion(langRegion)) {
+            return langRegion;
+        }
+        // Default fallback
+        return defaultRegion;
+    }
+}
+exports.RegionDetector = RegionDetector;
+/**
+ * Legacy functions for backward compatibility
+ * @deprecated Use new RegionDetector class instead
+ */
+function isValidRegion(region) {
+    return VALID_REGIONS.includes(region);
+}
+async function detectRegion(request, env, sessionManager, session) {
+    const detector = new RegionDetector(env);
+    return detector.detectRegion(request, sessionManager, session);
+}
+function detectRegionSync(request, env) {
+    const detector = new RegionDetector(env);
+    return detector.detectRegionSync(request);
+}
+//# sourceMappingURL=region-detection.js.map

package/dist/lib/region-detection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"region-detection.js","sourceRoot":"","sources":["../../src/lib/region-detection.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAibH,sCAEC;AAED,oCAQC;AAED,4CAGC;AA9bD,+CAA6C;AAC7C,qCAAkC;AAGlC;;GAEG;AACH,MAAM,aAAa,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAU,CAAC;AAIlD;;GAEG;AACH,MAAa,cAAc;IACjB,GAAG,CAAM;IACT,MAAM,CAAS;IAEvB,YAAY,GAAQ;QAClB,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,MAAM,GAAG,eAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACxC,CAAC;IAED;;;;;;;OAOG;IACH,aAAa,CAAC,MAAc;QAC1B,OAAO,aAAa,CAAC,QAAQ,CAAC,MAAgB,CAAC,CAAC;IAClD,CAAC;IAED;;;;;;OAMG;IACK,qBAAqB,CAAC,cAA6B;QACzD,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,oEAAoE;QACpE,MAAM,SAAS,GAAG,cAAc;aAC7B,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QAE1D,0CAA0C;QAC1C,IACE,SAAS,CAAC,IAAI,CACZ,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CACjE,EACD,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,+DAA+D;QAC/D,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YACpD,oDAAoD;YACpD,8CAA8C;YAC9C,OAAO,IAAI,CAAC;QACd,CAAC;QAED,+BAA+B;QAC/B,IACE,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CACtB,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CACpD,EACD,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;;;;;OAUG;IACK,sBAAsB,CAAC,OAAgB;QAC7C,+FAA+F;QAC/F,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC;eAC/D,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAEzC,IAAI,CAAC,WAAW,IAAI,WAAW,KAAK,IAAI,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;YACjE,mCAAmC;YACnC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,+BAA+B;QAC/B,QAAQ;QACR,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;YACzB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,gBAAgB;QAChB,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;YACzB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,2BAA2B;QAC3B,MAAM,WAAW,GAAG;YAClB,IAAI;YACJ,IAAI;YACJ,IAAI;YACJ,IAAI;YACJ,IAAI;YACJ,IAAI;YACJ,IAAI;YACJ,IAAI;YACJ,IAAI;YACJ,IAAI;YACJ,IAAI;YACJ,IAAI;YACJ,IAAI;YACJ,IAAI;YACJ,IAAI;YACJ,IAAI;YACJ,IAAI;YACJ,IAAI;YACJ,IAAI;YACJ,IAAI;YACJ,IAAI;YACJ,IAAI;YACJ,IAAI;YACJ,IAAI;YACJ,IAAI;YACJ,IAAI;YACJ,IAAI;SACL,CAAC;QACF,IAAI,WAAW,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YACtC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,0EAA0E;QAC1E,2EAA2E;QAC3E,wEAAwE;QACxE,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;;OAOG;IACK,KAAK,CAAC,mBAAmB,CAAC,EAAU;QAC1C,qDAAqD;QACrD,IACE,CAAC,IAAI,CAAC,GAAG,CAAC,sBAAsB;YAChC,IAAI,CAAC,GAAG,CAAC,sBAAsB,KAAK,OAAO,EAC3C,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC;YACH,mDAAmD;YACnD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,oBAAoB,EAAE,gBAAgB,EAAE;gBACnE,OAAO,EAAE;oBACP,YAAY,EAAE,iBAAiB;iBAChC;aACF,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,WAAW,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAEjE,4DAA4D;YAC5D,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;gBACzB,OAAO,IAAI,CAAC;YACd,CAAC;YAED,gBAAgB;YAChB,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;gBACzB,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,WAAW,GAAG;gBAClB,IAAI;gBACJ,IAAI;gBACJ,IAAI;gBACJ,IAAI;gBACJ,IAAI;gBACJ,IAAI;gBACJ,IAAI;gBACJ,IAAI;gBACJ,IAAI;gBACJ,IAAI;gBACJ,IAAI;gBACJ,IAAI;gBACJ,IAAI;gBACJ,IAAI;gBACJ,IAAI;gBACJ,IAAI;gBACJ,IAAI;gBACJ,IAAI;gBACJ,IAAI;gBACJ,IAAI;gBACJ,IAAI;gBACJ,IAAI;gBACJ,IAAI;gBACJ,IAAI;gBACJ,IAAI;gBACJ,IAAI;gBACJ,IAAI;aACL,CAAC;YACF,IAAI,WAAW,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;gBACtC,OAAO,IAAI,CAAC;YACd,CAAC;YAED,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,gDAAgD,EAChD,KAAK,CACN,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;;;;;;;;OAmBG;IACH,KAAK,CAAC,YAAY,CAChB,OAAgB,EAChB,cAA+B,EAC/B,OAAwB;QAExB,MAAM,aAAa,GAAY,IAAI,CAAC,GAAG,CAAC,cAAyB,IAAI,IAAI,CAAC;QAE1E,0BAA0B;QAC1B,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,EAAE,CAAC;YACvC,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,6CAA6C,aAAa,cAAc,CACzE,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QAED,0EAA0E;QAC1E,4CAA4C;QAC5C,IAAI,aAAa,GAAG,OAAO,CAAC;QAC5B,IAAI,CAAC,aAAa,IAAI,cAAc,EAAE,CAAC;YACrC,IAAI,CAAC;gBACH,MAAM,EAAE,cAAc,EAAE,GAAG,wDAAa,mBAAmB,GAAC,CAAC;gBAC7D,MAAM,cAAc,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACpD,MAAM,aAAa,GAAG,cAAc,CAAC,gBAAgB,EAAE,CAAC;gBACxD,aAAa,GAAG,MAAM,cAAc,CAAC,UAAU,CAC7C,OAAO,EACP,aAAa,EACb,IAAI,CAAC,GAAG,CACT,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,2DAA2D;gBAC3D,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,4CAA4C,EAAE,KAAK,CAAC,CAAC;YACzE,CAAC;QACH,CAAC;QAED,0EAA0E;QAC1E,iEAAiE;QACjE,IAAI,aAAa,EAAE,MAAM,IAAI,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC;YACnD,IAAI,CAAC;gBACH,kDAAkD;gBAClD,yEAAyE;gBACzE,4FAA4F;gBAC5F,kEAAkE;gBAClE,uEAAuE;gBACvE,MAAM,EAAE,+BAA+B,EAAE,GAAG,wDAC1C,+BAA+B,GAChC,CAAC;gBACF,MAAM,EAAE,wBAAwB,EAAE,mBAAmB,EAAE,GAAG,wDACxD,mBAAmB,GACpB,CAAC;gBAEF,MAAM,IAAI,GAAG,MAAM,wBAAwB,CACzC,+BAA+B,EAC/B,IAAI,EACJ,IAAI,CAAC,GAAU,EACf,KAAK,EAAE,EAAE,EAAE,EAAE;oBACX,OAAO,MAAO,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC;wBAC/B,KAAK,EAAE,EAAE,EAAE,EAAE,aAAa,CAAC,MAAM,EAAE;wBACnC,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,EAAS;qBAChC,CAA0D,CAAC;gBAC9D,CAAC,EACD;oBACE,GAAG,mBAAmB,CAAC,WAAW;oBAClC,UAAU,EAAE,CAAC;oBACb,WAAW,EAAE,GAAG;oBAChB,OAAO,EAAE;wBACP,SAAS,EAAE,oCAAoC;wBAC/C,MAAM,EAAE,aAAa,CAAC,MAAM;qBAC7B;iBACF,CACF,CAAC;gBAEF,IAAI,IAAI,EAAE,MAAM,IAAI,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;oBACpD,yCAAyC;oBACzC,OAAO,IAAI,CAAC,MAAM,CAAC;gBACrB,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,mEAAmE;gBACnE,wFAAwF;gBACxF,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,yEAAyE,EACzE,KAAK,CACN,CAAC;YACJ,CAAC;QACH,CAAC;QAED,2EAA2E;QAC3E,IACE,CAAC,IAAI,CAAC,GAAG,CAAC,sBAAsB;YAChC,IAAI,CAAC,GAAG,CAAC,sBAAsB,KAAK,OAAO,EAC3C,CAAC;YACD,OAAO,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACxC,CAAC;QAED,kEAAkE;QAElE,6BAA6B;QAC7B,IAAI,IAAI,CAAC,GAAG,CAAC,qBAAqB,KAAK,OAAO,EAAE,CAAC;YAC/C,oFAAoF;YACpF,MAAM,gBAAgB,GAAG,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC;YAC9D,IAAI,gBAAgB,IAAI,IAAI,CAAC,aAAa,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBAC7D,OAAO,gBAAgB,CAAC;YAC1B,CAAC;YAED,gFAAgF;YAChF,MAAM,EAAE,GAAG,IAAA,0BAAY,EAAC,OAAO,CAAC,CAAC;YACjC,IAAI,EAAE,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;gBAC3B,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC;gBAC1D,IAAI,cAAc,IAAI,IAAI,CAAC,aAAa,CAAC,cAAc,CAAC,EAAE,CAAC;oBACzD,OAAO,cAAc,CAAC;gBACxB,CAAC;YACH,CAAC;QACH,CAAC;QAED,qDAAqD;QACrD,MAAM,UAAU,GAAG,IAAI,CAAC,qBAAqB,CAC3C,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CACvC,CAAC;QACF,IAAI,UAAU,IAAI,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,EAAE,CAAC;YACjD,OAAO,UAAU,CAAC;QACpB,CAAC;QAED,+BAA+B;QAC/B,OAAO,aAAa,CAAC;IACvB,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACH,gBAAgB,CAAC,OAAgB;QAC/B,MAAM,aAAa,GAAY,IAAI,CAAC,GAAG,CAAC,cAAyB,IAAI,IAAI,CAAC;QAE1E,0BAA0B;QAC1B,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,EAAE,CAAC;YACvC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,oCAAoC;QACpC,IAAI,IAAI,CAAC,GAAG,CAAC,qBAAqB,KAAK,OAAO,EAAE,CAAC;YAC/C,MAAM,gBAAgB,GAAG,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC;YAC9D,IAAI,gBAAgB,IAAI,IAAI,CAAC,aAAa,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBAC7D,OAAO,gBAAgB,CAAC;YAC1B,CAAC;QACH,CAAC;QAED,6BAA6B;QAC7B,MAAM,UAAU,GAAG,IAAI,CAAC,qBAAqB,CAC3C,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CACvC,CAAC;QACF,IAAI,UAAU,IAAI,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,EAAE,CAAC;YACjD,OAAO,UAAU,CAAC;QACpB,CAAC;QAED,mBAAmB;QACnB,OAAO,aAAa,CAAC;IACvB,CAAC;CACF;AAzZD,wCAyZC;AAED;;;GAGG;AACH,SAAgB,aAAa,CAAC,MAAc;IAC1C,OAAO,aAAa,CAAC,QAAQ,CAAC,MAAgB,CAAC,CAAC;AAClD,CAAC;AAEM,KAAK,UAAU,YAAY,CAChC,OAAgB,EAChB,GAAQ,EACR,cAA+B,EAC/B,OAAwB;IAExB,MAAM,QAAQ,GAAG,IAAI,cAAc,CAAC,GAAG,CAAC,CAAC;IACzC,OAAO,QAAQ,CAAC,YAAY,CAAC,OAAO,EAAE,cAAc,EAAE,OAAO,CAAC,CAAC;AACjE,CAAC;AAED,SAAgB,gBAAgB,CAAC,OAAgB,EAAE,GAAQ;IACzD,MAAM,QAAQ,GAAG,IAAI,cAAc,CAAC,GAAG,CAAC,CAAC;IACzC,OAAO,QAAQ,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;AAC5C,CAAC"}

package/dist/lib/relationship-handler.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Relationship Handler
+ *
+ * CRUD operations for scored user relationships (circles model).
+ * Replaces the old follow/unfollow system with scored, tiered relationships.
+ */
+import type { Env } from "../env";
+import type { RequestContext } from "./request-context";
+import type { Session } from "./session-manager";
+export declare class RelationshipHandler {
+    handleCreateRelationship(request: Request, session: Session, env: Env, _requestContext: RequestContext): Promise<Response>;
+    handleRemoveRelationship(request: Request, session: Session, env: Env, _requestContext: RequestContext): Promise<Response>;
+    handleUpdateScore(request: Request, session: Session, env: Env, _requestContext: RequestContext): Promise<Response>;
+    handleGetRelationship(request: Request, session: Session, env: Env, _requestContext: RequestContext): Promise<Response>;
+    handleGetRelationships(request: Request, session: Session, env: Env, _requestContext: RequestContext): Promise<Response>;
+    handleGetGraph(_request: Request, session: Session, env: Env, _requestContext: RequestContext): Promise<Response>;
+    private mapGraphError;
+}
+//# sourceMappingURL=relationship-handler.d.ts.map

package/dist/lib/relationship-handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"relationship-handler.d.ts","sourceRoot":"","sources":["../../src/lib/relationship-handler.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,QAAQ,CAAC;AAClC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAEjD,qBAAa,mBAAmB;IACxB,wBAAwB,CAC5B,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,GAAG,EACR,eAAe,EAAE,cAAc,GAC9B,OAAO,CAAC,QAAQ,CAAC;IA8Cd,wBAAwB,CAC5B,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,GAAG,EACR,eAAe,EAAE,cAAc,GAC9B,OAAO,CAAC,QAAQ,CAAC;IA4Bd,iBAAiB,CACrB,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,GAAG,EACR,eAAe,EAAE,cAAc,GAC9B,OAAO,CAAC,QAAQ,CAAC;IAsCd,qBAAqB,CACzB,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,GAAG,EACR,eAAe,EAAE,cAAc,GAC9B,OAAO,CAAC,QAAQ,CAAC;IAsCd,sBAAsB,CAC1B,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,GAAG,EACR,eAAe,EAAE,cAAc,GAC9B,OAAO,CAAC,QAAQ,CAAC;IA2Cd,cAAc,CAClB,QAAQ,EAAE,OAAO,EACjB,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,GAAG,EACR,eAAe,EAAE,cAAc,GAC9B,OAAO,CAAC,QAAQ,CAAC;YAsBN,aAAa;CA8C5B"}