@degenerate/endpoints 0.1.7 → 0.4.0

package/dist/openapi/operations.d.ts

@@ -0,0 +1,8 @@
+import type { OperationDescriptor } from './types';
+/**
+ * Every mounted SAFE HTTP operation, one descriptor each. This is the single
+ * feed for `buildOpenApiDocument` and the subject the coverage test reconciles
+ * against the live Express route table.
+ */
+export declare const operations: OperationDescriptor[];
+//# sourceMappingURL=operations.d.ts.map

package/dist/openapi/operations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"operations.d.ts","sourceRoot":"","sources":["../../src/openapi/operations.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAC;AAQnD;;;;GAIG;AACH,eAAO,MAAM,UAAU,EAAE,mBAAmB,EAO3C,CAAC"}

package/dist/openapi/operations.js

@@ -0,0 +1,22 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.operations = void 0;
+const v1_openapi_1 = require("../routes/authorities/v1.openapi");
+const v1_openapi_2 = require("../routes/events/v1.openapi");
+const v1_openapi_3 = require("../routes/functions/v1.openapi");
+const rule_set_openapi_1 = require("../routes/rules/v1/rule-set.openapi");
+const v1_openapi_4 = require("../routes/sharedata/v1.openapi");
+const validate_rules_openapi_1 = require("../routes/validation/rules/validate-rules.openapi");
+/**
+ * Every mounted SAFE HTTP operation, one descriptor each. This is the single
+ * feed for `buildOpenApiDocument` and the subject the coverage test reconciles
+ * against the live Express route table.
+ */
+exports.operations = [
+    ...v1_openapi_1.authorityOperations,
+    ...v1_openapi_2.eventOperations,
+    ...v1_openapi_3.functionOperations,
+    ...rule_set_openapi_1.ruleSetOperations,
+    ...v1_openapi_4.shareDataOperations,
+    ...validate_rules_openapi_1.validateRulesOperations,
+];

package/dist/openapi/response-schemas.d.ts

@@ -0,0 +1,32 @@
+import { z } from 'zod';
+/**
+ * HTTP response envelopes for the SAFE endpoints surface. These describe the
+ * transport shape (`{ successful, … }`) the route handlers actually return —
+ * an HTTP concern specific to this API, deliberately kept out of
+ * `@degenerate/generic` (domain models). Payloads inside an envelope reuse
+ * generic domain schemas where one exists; otherwise the envelope is documented
+ * and the payload left loosely typed rather than fabricated.
+ *
+ * Define each schema once and reuse the instance so the OpenAPI generator
+ * dedupes it to a single `components.schemas` entry.
+ */
+/** Uniform error body emitted by the three error handlers at 400 / 403 / 404 / 500 / 501. */
+export declare const ErrorResponseSchema: z.ZodObject<{
+    successful: z.ZodLiteral<false>;
+    error: z.ZodString;
+}, z.core.$strip>;
+export type ErrorResponse = z.infer<typeof ErrorResponseSchema>;
+/** Bare success body: `{ successful: true }` with no additional payload. */
+export declare const SuccessResponseSchema: z.ZodObject<{
+    successful: z.ZodLiteral<true>;
+}, z.core.$strip>;
+export type SuccessResponse = z.infer<typeof SuccessResponseSchema>;
+/**
+ * Build a success envelope that carries extra fields alongside
+ * `successful: true`. Define the result as a module-level const in the group's
+ * descriptor file so the generator sees one stable instance per shape.
+ */
+export declare const successEnvelope: <Shape extends z.ZodRawShape>(payload: Shape) => z.ZodObject<{
+    successful: z.ZodLiteral<true>;
+} & Shape extends infer T ? { -readonly [P in keyof T]: T[P]; } : never, z.core.$strip>;
+//# sourceMappingURL=response-schemas.d.ts.map

package/dist/openapi/response-schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"response-schemas.d.ts","sourceRoot":"","sources":["../../src/openapi/response-schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;;;;;GAUG;AAEH,6FAA6F;AAC7F,eAAO,MAAM,mBAAmB;;;iBAEE,CAAC;AACnC,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE,4EAA4E;AAC5E,eAAO,MAAM,qBAAqB;;iBAEE,CAAC;AACrC,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE;;;;GAIG;AACH,eAAO,MAAM,eAAe,GAAI,KAAK,SAAS,CAAC,CAAC,WAAW,EAAE,SAAS,KAAK;;uFAClB,CAAC"}

package/dist/openapi/response-schemas.js

@@ -0,0 +1,30 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.successEnvelope = exports.SuccessResponseSchema = exports.ErrorResponseSchema = void 0;
+const zod_1 = require("zod");
+/**
+ * HTTP response envelopes for the SAFE endpoints surface. These describe the
+ * transport shape (`{ successful, … }`) the route handlers actually return —
+ * an HTTP concern specific to this API, deliberately kept out of
+ * `@degenerate/generic` (domain models). Payloads inside an envelope reuse
+ * generic domain schemas where one exists; otherwise the envelope is documented
+ * and the payload left loosely typed rather than fabricated.
+ *
+ * Define each schema once and reuse the instance so the OpenAPI generator
+ * dedupes it to a single `components.schemas` entry.
+ */
+/** Uniform error body emitted by the three error handlers at 400 / 403 / 404 / 500 / 501. */
+exports.ErrorResponseSchema = zod_1.z
+    .object({ successful: zod_1.z.literal(false), error: zod_1.z.string() })
+    .meta({ id: 'ErrorResponse' });
+/** Bare success body: `{ successful: true }` with no additional payload. */
+exports.SuccessResponseSchema = zod_1.z
+    .object({ successful: zod_1.z.literal(true) })
+    .meta({ id: 'SuccessResponse' });
+/**
+ * Build a success envelope that carries extra fields alongside
+ * `successful: true`. Define the result as a module-level const in the group's
+ * descriptor file so the generator sees one stable instance per shape.
+ */
+const successEnvelope = (payload) => zod_1.z.object({ successful: zod_1.z.literal(true), ...payload });
+exports.successEnvelope = successEnvelope;

package/dist/openapi/types.d.ts

@@ -0,0 +1,29 @@
+import type { z } from 'zod';
+import type { AuthorizationAudience } from '@degenerate/generic';
+/**
+ * One descriptor per mounted HTTP operation. This is the single place that
+ * records everything OpenAPI needs about an operation that Express does not
+ * expose introspectively: human summary, the JWT audience that gates it, and
+ * the Zod schemas bound to its request body and each response status.
+ *
+ * Descriptors live beside the route files they describe (one array per group,
+ * e.g. `routes/sharedata/v1.openapi.ts`) and are aggregated into a single
+ * `operations[]`. A coverage test reconciles `operations[]` against the live
+ * Express route table so the two cannot silently drift.
+ */
+export interface OperationDescriptor {
+    method: 'get' | 'post' | 'patch' | 'delete';
+    /** OpenAPI path template, e.g. `/share-data/v1/{sharedataid}`. */
+    path: string;
+    /** JWT audience that gates the operation, or `'public'` for no auth. */
+    security: AuthorizationAudience | 'public';
+    summary: string;
+    /** Request body schema; omit for operations that take no body. */
+    request?: z.ZodType;
+    /** Response schema per HTTP status — at minimum the success status. */
+    response: {
+        [status: number]: z.ZodType;
+    };
+    deprecated?: boolean;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/openapi/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/openapi/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAC7B,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAEjE;;;;;;;;;;GAUG;AACH,MAAM,WAAW,mBAAmB;IAChC,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,OAAO,GAAG,QAAQ,CAAC;IAC5C,kEAAkE;IAClE,IAAI,EAAE,MAAM,CAAC;IACb,wEAAwE;IACxE,QAAQ,EAAE,qBAAqB,GAAG,QAAQ,CAAC;IAC3C,OAAO,EAAE,MAAM,CAAC;IAChB,kEAAkE;IAClE,OAAO,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC;IACpB,uEAAuE;IACvE,QAAQ,EAAE;QAAE,CAAC,MAAM,EAAE,MAAM,GAAG,CAAC,CAAC,OAAO,CAAA;KAAE,CAAC;IAC1C,UAAU,CAAC,EAAE,OAAO,CAAC;CACxB"}

package/dist/openapi/types.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/routes/authorities/v1.openapi.d.ts

@@ -0,0 +1,4 @@
+import type { OperationDescriptor } from '../../openapi/types';
+/** Operations under `/authorities` — all gated by the AUTHORITIES JWT audience. */
+export declare const authorityOperations: OperationDescriptor[];
+//# sourceMappingURL=v1.openapi.d.ts.map

package/dist/routes/authorities/v1.openapi.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"v1.openapi.d.ts","sourceRoot":"","sources":["../../../src/routes/authorities/v1.openapi.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAW/D,mFAAmF;AACnF,eAAO,MAAM,mBAAmB,EAAE,mBAAmB,EAyDpD,CAAC"}

package/dist/routes/authorities/v1.openapi.js

@@ -0,0 +1,68 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.authorityOperations = void 0;
+const zod_1 = require("zod");
+const generic_1 = require("@degenerate/generic");
+const response_schemas_1 = require("../../openapi/response-schemas");
+const AuthorityIdResponseSchema = (0, response_schemas_1.successEnvelope)({ authorityId: zod_1.z.string() }).meta({
+    id: 'AuthorityIdResponse',
+});
+/** Operations under `/authorities` — all gated by the AUTHORITIES JWT audience. */
+exports.authorityOperations = [
+    {
+        method: 'post',
+        path: '/authorities/v1',
+        security: generic_1.AuthorizationAudience.AUTHORITIES,
+        summary: 'Create an authority.',
+        request: generic_1.ISAFETransactionAuthorityAddSchema,
+        response: {
+            200: response_schemas_1.SuccessResponseSchema,
+            400: response_schemas_1.ErrorResponseSchema,
+            403: response_schemas_1.ErrorResponseSchema,
+        },
+    },
+    {
+        method: 'get',
+        path: '/authorities/v1',
+        security: generic_1.AuthorizationAudience.AUTHORITIES,
+        summary: 'List authorities.',
+        response: {
+            200: response_schemas_1.SuccessResponseSchema,
+            403: response_schemas_1.ErrorResponseSchema,
+        },
+    },
+    {
+        method: 'get',
+        path: '/authorities/v1/{authorityid}',
+        security: generic_1.AuthorizationAudience.AUTHORITIES,
+        summary: 'Get an authority by id.',
+        response: {
+            200: AuthorityIdResponseSchema,
+            403: response_schemas_1.ErrorResponseSchema,
+        },
+    },
+    {
+        method: 'patch',
+        path: '/authorities/v1/{authorityid}',
+        security: generic_1.AuthorizationAudience.AUTHORITIES,
+        summary: 'Update an authority by id.',
+        request: generic_1.ISAFETransactionAuthorityUpdateSchema,
+        response: {
+            200: AuthorityIdResponseSchema,
+            400: response_schemas_1.ErrorResponseSchema,
+            403: response_schemas_1.ErrorResponseSchema,
+        },
+    },
+    {
+        method: 'delete',
+        path: '/authorities/v1/{authorityid}',
+        security: generic_1.AuthorizationAudience.AUTHORITIES,
+        summary: 'Delete an authority by id.',
+        request: generic_1.ISAFETransactionAuthorityDeleteSchema,
+        response: {
+            200: AuthorityIdResponseSchema,
+            400: response_schemas_1.ErrorResponseSchema,
+            403: response_schemas_1.ErrorResponseSchema,
+        },
+    },
+];

package/dist/routes/events/v1.openapi.d.ts

@@ -0,0 +1,4 @@
+import type { OperationDescriptor } from '../../openapi/types';
+/** Operations under `/events` — all gated by the EVENTS JWT audience. */
+export declare const eventOperations: OperationDescriptor[];
+//# sourceMappingURL=v1.openapi.d.ts.map

package/dist/routes/events/v1.openapi.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"v1.openapi.d.ts","sourceRoot":"","sources":["../../../src/routes/events/v1.openapi.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAG/D,yEAAyE;AACzE,eAAO,MAAM,eAAe,EAAE,mBAAmB,EA+ChD,CAAC"}

package/dist/routes/events/v1.openapi.js

@@ -0,0 +1,54 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.eventOperations = void 0;
+const generic_1 = require("@degenerate/generic");
+const response_schemas_1 = require("../../openapi/response-schemas");
+/** Operations under `/events` — all gated by the EVENTS JWT audience. */
+exports.eventOperations = [
+    {
+        method: 'post',
+        path: '/events/v1',
+        security: generic_1.AuthorizationAudience.EVENTS,
+        summary: 'Create an event.',
+        request: generic_1.ISAFETransactionEventAddSchema,
+        response: {
+            200: response_schemas_1.SuccessResponseSchema,
+            400: response_schemas_1.ErrorResponseSchema,
+            403: response_schemas_1.ErrorResponseSchema,
+        },
+    },
+    {
+        method: 'get',
+        path: '/events/v1',
+        security: generic_1.AuthorizationAudience.EVENTS,
+        summary: 'Get events.',
+        response: {
+            200: response_schemas_1.SuccessResponseSchema,
+            403: response_schemas_1.ErrorResponseSchema,
+        },
+    },
+    {
+        method: 'patch',
+        path: '/events/v1',
+        security: generic_1.AuthorizationAudience.EVENTS,
+        summary: 'Update an event.',
+        request: generic_1.ISAFETransactionEventUpdateSchema,
+        response: {
+            200: response_schemas_1.SuccessResponseSchema,
+            400: response_schemas_1.ErrorResponseSchema,
+            403: response_schemas_1.ErrorResponseSchema,
+        },
+    },
+    {
+        method: 'delete',
+        path: '/events/v1',
+        security: generic_1.AuthorizationAudience.EVENTS,
+        summary: 'Delete an event.',
+        request: generic_1.ISAFETransactionEventDeleteSchema,
+        response: {
+            200: response_schemas_1.SuccessResponseSchema,
+            400: response_schemas_1.ErrorResponseSchema,
+            403: response_schemas_1.ErrorResponseSchema,
+        },
+    },
+];

package/dist/routes/events/v1.routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"v1.routes.d.ts","sourceRoot":"","sources":["../../../src/routes/events/v1.routes.ts"],"names":[],"mappings":"AAkEA,eAAO,MAAM,EAAE,4CAAS,CAAC"}
+{"version":3,"file":"v1.routes.d.ts","sourceRoot":"","sources":["../../../src/routes/events/v1.routes.ts"],"names":[],"mappings":"AAqEA,eAAO,MAAM,EAAE,4CAAS,CAAC"}

package/dist/routes/events/v1.routes.js

@@ -47,9 +47,6 @@ const generic_1 = require("@degenerate/generic");
 const router = express.Router({ mergeParams: true });
 router.use(add_unique_tracking_1.addUniqueTracking); // add the unique tracking id to the request
 router.use(validate_jwt_events_1.validateJWTEvents); // validate the JWT token
-router.use(unauthorized_handler_1.unauthorizedHandler); // the unauthorized handler should be the first error handler
-router.use(bad_request_handler_1.badRequestHandler); // the bad request handler should be the second error handler
-router.use(all_error_handler_1.allErrorHandler); // the all error handler catches all remaining errors
 /**
  * This creates a new event object.
  */
@@ -82,4 +79,9 @@ router.delete(// https://{hostname}/events/v1
 (0, validate_incoming_request_data_1.validateIncomingRequestData)(generic_1.ISAFETransactionEventDeleteSchema), async (req, res) => {
     return res.status(200).send({ successful: true });
 });
+// Error handlers must be registered AFTER routes — express only routes
+// errors to handlers that follow the throwing middleware in the chain.
+router.use(unauthorized_handler_1.unauthorizedHandler); // the unauthorized handler should be the first error handler
+router.use(bad_request_handler_1.badRequestHandler); // the bad request handler should be the second error handler
+router.use(all_error_handler_1.allErrorHandler); // the all error handler catches all remaining errors
 exports.v1 = router; // https://{hostname}/events/v1

package/dist/routes/events.routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"events.routes.d.ts","sourceRoot":"","sources":["../../src/routes/events.routes.ts"],"names":[],"mappings":"AAoCA,eAAO,MAAM,MAAM,4CAAS,CAAC"}
+{"version":3,"file":"events.routes.d.ts","sourceRoot":"","sources":["../../src/routes/events.routes.ts"],"names":[],"mappings":"AAYA,eAAO,MAAM,MAAM,4CAAS,CAAC"}

package/dist/routes/events.routes.js

@@ -1,66 +1,16 @@
 "use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.events = void 0;
-const express = __importStar(require("express"));
+const express_1 = __importDefault(require("express"));
 const get_set_audiences_1 = require("../cors/authority/audience/get-set-audiences");
+const request_logging_1 = require("../cors/logging/request-logging");
+const v1_routes_1 = require("./events/v1.routes");
 // eslint-disable-next-line new-cap
-const router = express.Router({ mergeParams: true });
-router.use(get_set_audiences_1.setAudienceEvents); // set the audience to events (this will throw an error if the audience is not set)
-/**
- * This creates a new event object.
- */
-router.post('/', async (req, res) => {
-    return res.status(200).send({ successful: true });
-});
-/**
- * This gets the event object.
- */
-router.get('/', async (req, res) => {
-    return res.status(200).send({ successful: true });
-});
-/**
- * This updates the event object.
- */
-router.patch('/', async (req, res) => {
-    return res.status(200).send({ successful: true });
-});
-/**
- * This deletes the event object.
- */
-router.delete('/', async (req, res) => {
-    return res.status(200).send({ successful: true });
-});
+const router = express_1.default.Router({ mergeParams: true });
+router.use(request_logging_1.requestLogging); // log the request
+router.use(get_set_audiences_1.setAudienceEvents); // set the audience to events
+router.use('/v1', v1_routes_1.v1); // JWT validation + handlers + error handlers live in v1
 exports.events = router;

package/dist/routes/functions/v1.openapi.d.ts

@@ -0,0 +1,4 @@
+import type { OperationDescriptor } from '../../openapi/types';
+/** Operations under `/functions` — all gated by the FUNCTIONS JWT audience. */
+export declare const functionOperations: OperationDescriptor[];
+//# sourceMappingURL=v1.openapi.d.ts.map

package/dist/routes/functions/v1.openapi.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"v1.openapi.d.ts","sourceRoot":"","sources":["../../../src/routes/functions/v1.openapi.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAW/D,+EAA+E;AAC/E,eAAO,MAAM,kBAAkB,EAAE,mBAAmB,EAyDnD,CAAC"}

package/dist/routes/functions/v1.openapi.js

@@ -0,0 +1,68 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.functionOperations = void 0;
+const zod_1 = require("zod");
+const generic_1 = require("@degenerate/generic");
+const response_schemas_1 = require("../../openapi/response-schemas");
+const FunctionIdResponseSchema = (0, response_schemas_1.successEnvelope)({ functionId: zod_1.z.string() }).meta({
+    id: 'FunctionIdResponse',
+});
+/** Operations under `/functions` — all gated by the FUNCTIONS JWT audience. */
+exports.functionOperations = [
+    {
+        method: 'post',
+        path: '/functions/v1',
+        security: generic_1.AuthorizationAudience.FUNCTIONS,
+        summary: 'Create a function.',
+        request: generic_1.ISAFETransactionFunctionAddSchema,
+        response: {
+            200: response_schemas_1.SuccessResponseSchema,
+            400: response_schemas_1.ErrorResponseSchema,
+            403: response_schemas_1.ErrorResponseSchema,
+        },
+    },
+    {
+        method: 'get',
+        path: '/functions/v1',
+        security: generic_1.AuthorizationAudience.FUNCTIONS,
+        summary: 'List functions.',
+        response: {
+            200: response_schemas_1.SuccessResponseSchema,
+            403: response_schemas_1.ErrorResponseSchema,
+        },
+    },
+    {
+        method: 'get',
+        path: '/functions/v1/{functionid}',
+        security: generic_1.AuthorizationAudience.FUNCTIONS,
+        summary: 'Get a function by id.',
+        response: {
+            200: FunctionIdResponseSchema,
+            403: response_schemas_1.ErrorResponseSchema,
+        },
+    },
+    {
+        method: 'patch',
+        path: '/functions/v1/{functionid}',
+        security: generic_1.AuthorizationAudience.FUNCTIONS,
+        summary: 'Update a function by id.',
+        request: generic_1.ISAFETransactionFunctionUpdateSchema,
+        response: {
+            200: FunctionIdResponseSchema,
+            400: response_schemas_1.ErrorResponseSchema,
+            403: response_schemas_1.ErrorResponseSchema,
+        },
+    },
+    {
+        method: 'delete',
+        path: '/functions/v1/{functionid}',
+        security: generic_1.AuthorizationAudience.FUNCTIONS,
+        summary: 'Delete a function by id.',
+        request: generic_1.ISAFETransactionFunctionDeleteSchema,
+        response: {
+            200: FunctionIdResponseSchema,
+            400: response_schemas_1.ErrorResponseSchema,
+            403: response_schemas_1.ErrorResponseSchema,
+        },
+    },
+];

package/dist/routes/functions.routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"functions.routes.d.ts","sourceRoot":"","sources":["../../src/routes/functions.routes.ts"],"names":[],"mappings":"AAmCA,eAAO,MAAM,SAAS,4CAAS,CAAC"}
+{"version":3,"file":"functions.routes.d.ts","sourceRoot":"","sources":["../../src/routes/functions.routes.ts"],"names":[],"mappings":"AAYA,eAAO,MAAM,SAAS,4CAAS,CAAC"}

package/dist/routes/functions.routes.js

@@ -1,66 +1,16 @@
 "use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.functions = void 0;
-const express = __importStar(require("express"));
+const express_1 = __importDefault(require("express"));
 const get_set_audiences_1 = require("../cors/authority/audience/get-set-audiences");
+const request_logging_1 = require("../cors/logging/request-logging");
+const v1_routes_1 = require("./functions/v1.routes");
 // eslint-disable-next-line new-cap
-const router = express.Router({ mergeParams: true });
-router.use(get_set_audiences_1.setAudienceFunctions); // set the audience to share data (this will throw an error if the audience is not set)
-/**
- * This creates a new sharedata object.
- */
-router.post('/', async (req, res) => {
-    return res.status(200).send({ successful: true });
-});
-/**
- * This gets the sharedata object.
- */
-router.get('/', async (req, res) => {
-    return res.status(200).send({ successful: true });
-});
-/**
- * This updates the sharedata object.
- */
-router.patch('/', async (req, res) => {
-    return res.status(200).send({ successful: true });
-});
-/**
- * This deletes the sharedata object.
- */
-router.delete('/', async (req, res) => {
-    return res.status(200).send({ successful: true });
-});
+const router = express_1.default.Router({ mergeParams: true });
+router.use(request_logging_1.requestLogging); // log the request
+router.use(get_set_audiences_1.setAudienceFunctions); // set the audience to functions
+router.use('/v1', v1_routes_1.v1); // JWT validation + handlers + error handlers live in v1
 exports.functions = router;

package/dist/routes/rules/v1/rule-set.openapi.d.ts

@@ -0,0 +1,4 @@
+import type { OperationDescriptor } from '../../../openapi/types';
+/** Operations under `/rules/v1/rule-sets` — all gated by the RULES JWT audience. */
+export declare const ruleSetOperations: OperationDescriptor[];
+//# sourceMappingURL=rule-set.openapi.d.ts.map

package/dist/routes/rules/v1/rule-set.openapi.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rule-set.openapi.d.ts","sourceRoot":"","sources":["../../../../src/routes/rules/v1/rule-set.openapi.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAelE,oFAAoF;AACpF,eAAO,MAAM,iBAAiB,EAAE,mBAAmB,EAyDlD,CAAC"}

package/dist/routes/rules/v1/rule-set.openapi.js

@@ -0,0 +1,72 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ruleSetOperations = void 0;
+const zod_1 = require("zod");
+const generic_1 = require("@degenerate/generic");
+const response_schemas_1 = require("../../../openapi/response-schemas");
+const RuleSetListResponseSchema = (0, response_schemas_1.successEnvelope)({ ruleSets: zod_1.z.array(generic_1.IShareRuleSetSchema) }).meta({
+    id: 'RuleSetListResponse',
+});
+const RuleSetItemResponseSchema = (0, response_schemas_1.successEnvelope)({ ruleSet: generic_1.IShareRuleSetSchema.optional() }).meta({
+    id: 'RuleSetItemResponse',
+});
+const RulesIdResponseSchema = (0, response_schemas_1.successEnvelope)({ rulesId: zod_1.z.string() }).meta({ id: 'RulesIdResponse' });
+/** Operations under `/rules/v1/rule-sets` — all gated by the RULES JWT audience. */
+exports.ruleSetOperations = [
+    {
+        method: 'post',
+        path: '/rules/v1/rule-sets',
+        security: generic_1.AuthorizationAudience.RULES,
+        summary: 'Create a rule set.',
+        request: generic_1.ISAFETransactionRuleSetAddSchema,
+        response: {
+            200: response_schemas_1.SuccessResponseSchema,
+            400: response_schemas_1.ErrorResponseSchema,
+            403: response_schemas_1.ErrorResponseSchema,
+        },
+    },
+    {
+        method: 'get',
+        path: '/rules/v1/rule-sets',
+        security: generic_1.AuthorizationAudience.RULES,
+        summary: 'List rule sets.',
+        response: {
+            200: RuleSetListResponseSchema,
+            403: response_schemas_1.ErrorResponseSchema,
+        },
+    },
+    {
+        method: 'get',
+        path: '/rules/v1/rule-sets/{rulesetsid}',
+        security: generic_1.AuthorizationAudience.RULES,
+        summary: 'Get a rule set by id.',
+        response: {
+            200: RuleSetItemResponseSchema,
+            403: response_schemas_1.ErrorResponseSchema,
+        },
+    },
+    {
+        method: 'patch',
+        path: '/rules/v1/rule-sets/{rulesetsid}',
+        security: generic_1.AuthorizationAudience.RULES,
+        summary: 'Update a rule set by id.',
+        request: generic_1.ISAFETransactionRuleSetUpdateSchema,
+        response: {
+            200: RulesIdResponseSchema,
+            400: response_schemas_1.ErrorResponseSchema,
+            403: response_schemas_1.ErrorResponseSchema,
+        },
+    },
+    {
+        method: 'delete',
+        path: '/rules/v1/rule-sets/{rulesetsid}',
+        security: generic_1.AuthorizationAudience.RULES,
+        summary: 'Delete a rule set by id.',
+        request: generic_1.ISAFETransactionRuleSetDeleteSchema,
+        response: {
+            200: RulesIdResponseSchema,
+            400: response_schemas_1.ErrorResponseSchema,
+            403: response_schemas_1.ErrorResponseSchema,
+        },
+    },
+];