@degenerate/endpoints 0.1.7 → 0.4.0

package/dist/routes/rules/v1/rule-set.routes.js

@@ -85,7 +85,7 @@ router.get('/', async (req, res, next) => {
  */
 router.get('/:rulesetsid', async (req, res, next) => {
     try {
-        const rulesSetsId = (0, generic_1.getParamRuleSetsId)(req); // get the rules id.
+        const rulesSetsId = (0, generic_1.getRuleSetsId)(req); // get the rules id.
         const ruleSets = ruleSetManager.getRuleSetById(rulesSetsId); // add the rule set to the rule set manager
         const returnItem = { successful: true };
         if (ruleSets) {
@@ -103,7 +103,7 @@ router.get('/:rulesetsid', async (req, res, next) => {
 router.patch('/:rulesetsid', validate_request_body_1.validateRequestBody, // make sure this is a valid request body
 (0, validate_incoming_request_data_1.validateIncomingRequestData)(generic_1.ISAFETransactionRuleSetUpdateSchema), async (req, res, next) => {
     try {
-        const rulesId = (0, generic_1.getParamRuleSetsId)(req); // get the rules id.
+        const rulesId = (0, generic_1.getRuleSetsId)(req); // get the rules id.
         const ruleSet = req.body.transaction.data.ruleSet; // get the rule set;
         if (ruleSet.id !== rulesId) {
             throw new Error('Rule set id does not match');
@@ -121,7 +121,7 @@ router.patch('/:rulesetsid', validate_request_body_1.validateRequestBody, // mak
 router.delete('/:rulesetsid', validate_request_body_1.validateRequestBody, // make sure this is a valid request body
 (0, validate_incoming_request_data_1.validateIncomingRequestData)(generic_1.ISAFETransactionRuleSetDeleteSchema), async (req, res, next) => {
     try {
-        const rulesId = (0, generic_1.getParamRuleSetsId)(req); // get the rules id.
+        const rulesId = (0, generic_1.getRuleSetsId)(req); // get the rules id.
         const ruleSet = req.body.transaction.data.ruleSet; // get the rule set;
         if (ruleSet.id !== rulesId) {
             throw new Error('Rule set id does not match');

package/dist/routes/share-data.routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"share-data.routes.d.ts","sourceRoot":"","sources":["../../src/routes/share-data.routes.ts"],"names":[],"mappings":"AAmCA,eAAO,MAAM,SAAS,4CAAS,CAAC"}
+{"version":3,"file":"share-data.routes.d.ts","sourceRoot":"","sources":["../../src/routes/share-data.routes.ts"],"names":[],"mappings":"AAsBA,eAAO,MAAM,SAAS,4CAAS,CAAC"}

package/dist/routes/share-data.routes.js

@@ -1,66 +1,24 @@
 "use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.shareData = void 0;
-const express = __importStar(require("express"));
+const express_1 = __importDefault(require("express"));
 const get_set_audiences_1 = require("../cors/authority/audience/get-set-audiences");
+const request_logging_1 = require("../cors/logging/request-logging");
+const v1_routes_1 = require("./sharedata/v1.routes");
+const validate_jwt_share_data_1 = require("../cors/authority/jwt/validate-jwt-share-data");
+const all_error_handler_1 = require("../cors/errors/all-error-handler");
+const bad_request_handler_1 = require("../cors/errors/bad-request-handler");
+const unauthorized_handler_1 = require("../cors/errors/unauthorized-handler");
 // eslint-disable-next-line new-cap
-const router = express.Router({ mergeParams: true });
+const router = express_1.default.Router({ mergeParams: true });
+router.use(request_logging_1.requestLogging); // log the request
 router.use(get_set_audiences_1.setAudienceShareData); // set the audience to share data (this will throw an error if the audience is not set)
-/**
- * This creates a new sharedata object.
- */
-router.post('/', async (req, res) => {
-    return res.status(200).send({ successful: true });
-});
-/**
- * This gets the sharedata object.
- */
-router.get('/', async (req, res) => {
-    return res.status(200).send({ successful: true });
-});
-/**
- * This updates the sharedata object.
- */
-router.patch('/', async (req, res) => {
-    return res.status(200).send({ successful: true });
-});
-/**
- * This deletes the sharedata object.
- */
-router.delete('/', async (req, res) => {
-    return res.status(200).send({ successful: true });
-});
+router.use(validate_jwt_share_data_1.validateJWTShareData); // get the audience authority
+router.use('/v1', v1_routes_1.v1); // use the v1 routes
+router.use(unauthorized_handler_1.unauthorizedHandler); // the unauthorized handler should be the first error handler
+router.use(bad_request_handler_1.badRequestHandler); // the bad request handler should be the second error handler
+router.use(all_error_handler_1.allErrorHandler); // the all error handler catches all remaining errors
 exports.shareData = router;

package/dist/routes/sharedata/v1.openapi.d.ts

@@ -0,0 +1,8 @@
+import type { OperationDescriptor } from '../../openapi/types';
+/**
+ * Operations under `/share-data` — gated by the SHAREDATA JWT audience, plus a
+ * per-resource (BOLA) check on create/delete: the verified token's
+ * `allowedSigningKeys` claim must vouch for the block's `creationPublicKey`.
+ */
+export declare const shareDataOperations: OperationDescriptor[];
+//# sourceMappingURL=v1.openapi.d.ts.map

package/dist/routes/sharedata/v1.openapi.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"v1.openapi.d.ts","sourceRoot":"","sources":["../../../src/routes/sharedata/v1.openapi.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAG/D;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,EAAE,mBAAmB,EAiDpD,CAAC"}

package/dist/routes/sharedata/v1.openapi.js

@@ -0,0 +1,60 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.shareDataOperations = void 0;
+const generic_1 = require("@degenerate/generic");
+const response_schemas_1 = require("../../openapi/response-schemas");
+/**
+ * Operations under `/share-data` — gated by the SHAREDATA JWT audience, plus a
+ * per-resource (BOLA) check on create/delete: the verified token's
+ * `allowedSigningKeys` claim must vouch for the block's `creationPublicKey`.
+ */
+exports.shareDataOperations = [
+    {
+        method: 'post',
+        path: '/share-data/v1',
+        security: generic_1.AuthorizationAudience.SHAREDATA,
+        summary: 'Create a ShareData block. The JWT allowedSigningKeys claim must authorize the block creationPublicKey.',
+        request: generic_1.ISAFETransactionShareDataAddSchema,
+        response: {
+            200: response_schemas_1.SuccessResponseSchema,
+            400: response_schemas_1.ErrorResponseSchema,
+            403: response_schemas_1.ErrorResponseSchema,
+        },
+    },
+    {
+        method: 'get',
+        path: '/share-data/v1',
+        security: generic_1.AuthorizationAudience.SHAREDATA,
+        summary: 'List ShareData blocks.',
+        response: {
+            200: response_schemas_1.SuccessResponseSchema,
+            403: response_schemas_1.ErrorResponseSchema,
+        },
+    },
+    {
+        method: 'patch',
+        path: '/share-data/v1/{sharedataid}',
+        security: generic_1.AuthorizationAudience.SHAREDATA,
+        summary: 'Unsupported. ShareData mutations must go through the rule-engine-verified proposal path, never a wholesale state replacement. Always returns 501.',
+        request: generic_1.ISAFETransactionShareDataUpdateSchema,
+        deprecated: true,
+        response: {
+            400: response_schemas_1.ErrorResponseSchema,
+            403: response_schemas_1.ErrorResponseSchema,
+            501: response_schemas_1.ErrorResponseSchema,
+        },
+    },
+    {
+        method: 'delete',
+        path: '/share-data/v1/{sharedataid}',
+        security: generic_1.AuthorizationAudience.SHAREDATA,
+        summary: 'Delete a ShareData block by id. The JWT must vouch for the stored block creationPublicKey (BOLA gate).',
+        request: generic_1.ISAFETransactionShareDataDeleteSchema,
+        response: {
+            200: response_schemas_1.SuccessResponseSchema,
+            400: response_schemas_1.ErrorResponseSchema,
+            403: response_schemas_1.ErrorResponseSchema,
+            404: response_schemas_1.ErrorResponseSchema,
+        },
+    },
+];

package/dist/routes/sharedata/v1.routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"v1.routes.d.ts","sourceRoot":"","sources":["../../../src/routes/sharedata/v1.routes.ts"],"names":[],"mappings":"AAqEA,eAAO,MAAM,EAAE,4CAAS,CAAC"}
+{"version":3,"file":"v1.routes.d.ts","sourceRoot":"","sources":["../../../src/routes/sharedata/v1.routes.ts"],"names":[],"mappings":"AAwRA,eAAO,MAAM,EAAE,4CAAS,CAAC"}

package/dist/routes/sharedata/v1.routes.js

@@ -43,21 +43,153 @@ const all_error_handler_1 = require("../../cors/errors/all-error-handler");
 const bad_request_handler_1 = require("../../cors/errors/bad-request-handler");
 const unauthorized_handler_1 = require("../../cors/errors/unauthorized-handler");
 const generic_1 = require("@degenerate/generic");
+const shareblock_1 = require("@degenerate/shareblock");
 // eslint-disable-next-line new-cap
 const router = express.Router({ mergeParams: true });
+// The ShareDataManager is provided by the host application via
+// `app.set('shareDataManager', manager)`. Sharing the same instance across
+// HTTP and realtime is what makes route mutations broadcast to subscribed
+// WebSocket clients. Tests must `app.set('shareDataManager', new ShareDataManager())`
+// in their setup before mounting this router.
+const getManager = (req) => {
+    const manager = req.app.get('shareDataManager');
+    if (!manager) {
+        throw new Error('shareDataManager is not registered on the app — see createApp()');
+    }
+    return manager;
+};
+// Authorization claims ride on the verified JWT as loosely-typed custom
+// claims. Treat `allowedSigningKeys` as authoritative only when it is
+// genuinely an array of strings — a malformed token that supplied a bare
+// string would otherwise fall into String.prototype.includes substring
+// semantics and could wrongly authorize a partially-matching key. Both the
+// create and delete gates parse through here so they can't drift.
+const getAllowedSigningKeys = (req) => {
+    const raw = req.auth?.customClaims?.allowedSigningKeys;
+    return Array.isArray(raw) && raw.every((k) => typeof k === 'string')
+        ? raw
+        : undefined;
+};
 router.use(add_unique_tracking_1.addUniqueTracking); // add the unique tracking id to the request
 router.use(validate_jwt_share_data_1.validateJWTShareData); // validate the JWT token
-router.use(unauthorized_handler_1.unauthorizedHandler); // the unauthorized handler should be the first error handler
-router.use(bad_request_handler_1.badRequestHandler); // the bad request handler should be the second error handler
-router.use(all_error_handler_1.allErrorHandler); // the all error handler catches all remaining errors
 /**
  * This creates a new sharedata object.
  */
 router.post(// https://{hostname}/sharedata/v1
 '/', validate_request_body_1.validateRequestBody, // make sure this is a valid request body
 (0, validate_incoming_request_data_1.validateIncomingRequestData)(generic_1.ISAFETransactionShareDataAddSchema), async (req, res) => {
-    return res.status(200).send({ successful: true });
+    try {
+        const { metadata, initialState, initialCrypto, proofs } = req.body.transaction.data;
+        const creationPublicKey = initialCrypto.publicKey;
+        // Cross-check: the verified JWT must authorize the caller to sign
+        // as `creationPublicKey`. Token issuers attach
+        // `customClaims.allowedSigningKeys: string[]` listing the public
+        // keys the subject is vouched for — without this check, anyone
+        // holding a valid SHAREDATA JWT could create a block attributed to
+        // any key (since they generate the proofs themselves with their
+        // own keypair). The shared validateJWTShareData middleware has
+        // already verified signature/issuer/audience/expiry; this gate
+        // closes the subject → signing-key binding.
+        const allowedSigningKeys = getAllowedSigningKeys(req);
+        if (!allowedSigningKeys || !allowedSigningKeys.includes(creationPublicKey)) {
+            return res.status(403).send({
+                successful: false,
+                error: `creation-public-key-mismatch: JWT does not authorize signing as ${creationPublicKey}`,
+            });
+        }
+        // Cross-check: every proof in the bundle must be signed by the same
+        // key the initialCrypto attributes the block to. A mismatch means
+        // the client either swapped a proof in or supplied a forged
+        // creationPublicKey — reject early with one clear error rather
+        // than letting it surface as a verifyStructuralProof failure inside
+        // the factory.
+        for (const [purpose, proof] of Object.entries(proofs)) {
+            if (proof.publicKey !== creationPublicKey) {
+                return res.status(400).send({
+                    successful: false,
+                    error: `proof-public-key-mismatch: proof for '${purpose}' signed by ${proof.publicKey}, but initialCrypto attributes block to ${creationPublicKey}`,
+                });
+            }
+        }
+        // Cross-check: bundle covers every purpose the factory will request.
+        // Surfaces a missing proof once, here, instead of as the first
+        // MissingRequiredProofError thrown mid-construction.
+        const requiredPurposes = REQUIRED_PURPOSES_BY_BLOCK_TYPE[metadata.blockType];
+        for (const purpose of requiredPurposes) {
+            if (!(purpose in proofs)) {
+                return res.status(400).send({
+                    successful: false,
+                    error: `missing-proof: bundle is missing required proof for purpose '${purpose}' on ${metadata.blockType} ShareBlock`,
+                });
+            }
+        }
+        // Schema's literal union and the enum are the same string values —
+        // narrow once and reuse so we don't repeat the cast.
+        const blockType = metadata.blockType;
+        const proofFor = (0, shareblock_1.buildLookupProofFor)({
+            proofs,
+            initialCrypto,
+            blockType,
+        });
+        const factoryArgs = { metadata, creationPublicKey, initialState, proofFor };
+        let shareData;
+        switch (blockType) {
+            case generic_1.ShareBlockType.Clearing:
+                shareData = (0, shareblock_1.createClearingShareBlock)(factoryArgs);
+                break;
+            case generic_1.ShareBlockType.Funding:
+                shareData = (0, shareblock_1.createFundingShareBlock)(factoryArgs);
+                break;
+            case generic_1.ShareBlockType.Distribution:
+                shareData = (0, shareblock_1.createDistributionShareBlock)(factoryArgs);
+                break;
+            case generic_1.ShareBlockType.GraceRepayment:
+                // Not creatable through this generic route: a GraceRepayment
+                // block's initialState needs grace-specific fields
+                // (outstandingPrincipalCents, per-lender graceDecision) that the
+                // shared create payload doesn't carry. Reject explicitly rather
+                // than mis-constructing one from a partial payload.
+                return res.status(400).send({
+                    successful: false,
+                    error: 'unsupported-block-type: GraceRepayment blocks are not created via this route',
+                });
+            default: {
+                // Exhaustiveness check — schema validation should prevent
+                // reaching this, but TS doesn't know that. A runtime fallback
+                // makes the intent explicit and silences the unioned-undefined
+                // warning on `shareData`.
+                const _exhaustive = blockType;
+                return res.status(400).send({
+                    successful: false,
+                    error: `unknown blockType: ${_exhaustive}`,
+                });
+            }
+        }
+        // Carry the creation recipe so a repository-backed manager can persist
+        // this block and keep writing through as transactions accrue. The
+        // factory was handed exactly `{ metadata, creationPublicKey,
+        // initialState }`; the manager re-serializes from those.
+        await getManager(req).addShareData(shareData, {
+            blockType,
+            creationConfig: { metadata, creationPublicKey, initialState },
+        });
+        return res.status(200).send({ successful: true });
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : 'Unknown error';
+        return res.status(400).send({ successful: false, error: message });
+    }
 });
+// Coverage-check table — keeps the per-variant required-proof list lookup
+// in one place rather than hard-coding switches in the route body.
+const REQUIRED_PURPOSES_BY_BLOCK_TYPE = {
+    [generic_1.ShareBlockType.Clearing]: shareblock_1.CLEARING_REQUIRED_PROOF_PURPOSES,
+    [generic_1.ShareBlockType.Funding]: shareblock_1.FUNDING_REQUIRED_PROOF_PURPOSES,
+    [generic_1.ShareBlockType.Distribution]: shareblock_1.DISTRIBUTION_REQUIRED_PROOF_PURPOSES,
+    // Listed for type-completeness and to document the real proof set, even
+    // though the route currently rejects GraceRepayment creation above.
+    [generic_1.ShareBlockType.GraceRepayment]: shareblock_1.GRACE_REPAYMENT_REQUIRED_PROOF_PURPOSES,
+};
 /**
  * This gets the sharedata objects and their data.
  */
@@ -68,19 +200,73 @@ async (req, res) => {
     return;
 });
 /**
- * This updates the sharedata object.
+ * PATCH is intentionally unsupported. The previous handler replaced the
+ * stored ShareData wholesale with the request body — bypassing the rule
+ * engine and the structural-proof trust chain entirely. That is state
+ * forgery, not merely a missing access check: a caller could overwrite a
+ * block's canonical state with arbitrary JSON. In the SAFE model, state
+ * changes are signed PROPOSALS judged by `startRuleEvaluation` (the
+ * `ShareDataManager.applyTransaction` path), never client-uploaded blobs.
+ * Until a proposal-over-HTTP endpoint exists, PATCH stays closed. Body
+ * shape is still validated first, so malformed requests get 400 before 501.
  */
 router.patch(// https://{hostname}/sharedata/v1/{sharedataid}
 '/:sharedataid', add_unique_tracking_1.addUniqueTracking, // add a unique tracking id to the request
-validate_request_body_1.validateRequestBody, (0, validate_incoming_request_data_1.validateIncomingRequestData)(generic_1.ISAFETransactionShareDataUpdateSchema), async (req, res) => {
-    return res.status(200).send({ successful: true });
+validate_request_body_1.validateRequestBody, (0, validate_incoming_request_data_1.validateIncomingRequestData)(generic_1.ISAFETransactionShareDataUpdateSchema), async (_req, res) => {
+    return res.status(501).send({
+        successful: false,
+        error: 'patch-unsupported: ShareData mutations must go through the rule-engine-verified proposal path, not a wholesale state replacement.',
+    });
 });
 /**
  * This deletes the sharedata object.
  */
-router.delete(// https://{hostname}/sharedata/v1
+router.delete(// https://{hostname}/sharedata/v1/{sharedataid}
 '/:sharedataid', add_unique_tracking_1.addUniqueTracking, // add a unique tracking id to the request
 validate_request_body_1.validateRequestBody, (0, validate_incoming_request_data_1.validateIncomingRequestData)(generic_1.ISAFETransactionShareDataDeleteSchema), async (req, res) => {
-    return res.status(200).send({ successful: true });
+    try {
+        const shareDataId = req.params.sharedataid;
+        // Body/URL agreement: the wire payload names a target block; it must
+        // match the id in the URL path. A mismatch is a malformed request.
+        const bodyId = req.body
+            .transaction.data.metadata.shareBlockId;
+        if (bodyId !== shareDataId) {
+            return res.status(400).send({
+                successful: false,
+                error: `sharedata-id-mismatch: URL id ${shareDataId} does not match body id ${bodyId}`,
+            });
+        }
+        // Per-resource authorization (BOLA gate). The router-level
+        // validateJWTShareData only proves the caller holds a valid SHAREDATA
+        // token — it does NOT prove they may act on THIS block. Look up the
+        // target and require the verified JWT to vouch for the key that
+        // created it. Authorize against the stored block's creationPublicKey,
+        // never the client-supplied body. Mirrors the POST create gate.
+        const existing = getManager(req).getShareDataById(shareDataId);
+        if (!existing) {
+            return res.status(404).send({
+                successful: false,
+                error: `not-found: no ShareData with id ${shareDataId}`,
+            });
+        }
+        const allowedSigningKeys = getAllowedSigningKeys(req);
+        if (!allowedSigningKeys || !allowedSigningKeys.includes(existing.creationPublicKey)) {
+            return res.status(403).send({
+                successful: false,
+                error: `creation-public-key-mismatch: JWT does not authorize mutating block created by ${existing.creationPublicKey}`,
+            });
+        }
+        await getManager(req).removeShareDataById(shareDataId);
+        return res.status(200).send({ successful: true });
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : 'Unknown error';
+        return res.status(400).send({ successful: false, error: message });
+    }
 });
+// Error handlers must be registered AFTER routes — express only routes
+// errors to handlers that follow the throwing middleware in the chain.
+router.use(unauthorized_handler_1.unauthorizedHandler); // the unauthorized handler should be the first error handler
+router.use(bad_request_handler_1.badRequestHandler); // the bad request handler should be the second error handler
+router.use(all_error_handler_1.allErrorHandler); // the all error handler catches all remaining errors
 exports.v1 = router; // https://{hostname}/sharedata/v1

package/dist/routes/validation/rules/validate-rules.openapi.d.ts

@@ -0,0 +1,8 @@
+import type { OperationDescriptor } from '../../../openapi/types';
+/**
+ * Operations under `/validation/v1/validate-rules` — public (no JWT). Each
+ * echoes `{ successful: true }` when the posted body parses against its domain
+ * schema, otherwise the shared 400 error envelope.
+ */
+export declare const validateRulesOperations: OperationDescriptor[];
+//# sourceMappingURL=validate-rules.openapi.d.ts.map

package/dist/routes/validation/rules/validate-rules.openapi.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-rules.openapi.d.ts","sourceRoot":"","sources":["../../../../src/routes/validation/rules/validate-rules.openapi.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAGlE;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,EAAE,mBAAmB,EAiExD,CAAC"}

package/dist/routes/validation/rules/validate-rules.openapi.js

@@ -0,0 +1,76 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.validateRulesOperations = void 0;
+const generic_1 = require("@degenerate/generic");
+const response_schemas_1 = require("../../../openapi/response-schemas");
+/**
+ * Operations under `/validation/v1/validate-rules` — public (no JWT). Each
+ * echoes `{ successful: true }` when the posted body parses against its domain
+ * schema, otherwise the shared 400 error envelope.
+ */
+exports.validateRulesOperations = [
+    {
+        method: 'get',
+        path: '/validation',
+        security: 'public',
+        summary: 'Liveness probe for the validation service.',
+        response: {
+            200: response_schemas_1.SuccessResponseSchema,
+        },
+    },
+    {
+        method: 'post',
+        path: '/validation/v1/validate-rules/rule-set',
+        security: 'public',
+        summary: 'Validate a rule set against its schema.',
+        request: generic_1.IShareRuleSetSchema,
+        response: {
+            200: response_schemas_1.SuccessResponseSchema,
+            400: response_schemas_1.ErrorResponseSchema,
+        },
+    },
+    {
+        method: 'post',
+        path: '/validation/v1/validate-rules/rule-group',
+        security: 'public',
+        summary: 'Validate a rule group against its schema.',
+        request: generic_1.IShareRuleGroupSchema,
+        response: {
+            200: response_schemas_1.SuccessResponseSchema,
+            400: response_schemas_1.ErrorResponseSchema,
+        },
+    },
+    {
+        method: 'post',
+        path: '/validation/v1/validate-rules/rule-applied',
+        security: 'public',
+        summary: 'Validate an applied rule against its schema.',
+        request: generic_1.IShareRuleAppliedSchema,
+        response: {
+            200: response_schemas_1.SuccessResponseSchema,
+            400: response_schemas_1.ErrorResponseSchema,
+        },
+    },
+    {
+        method: 'post',
+        path: '/validation/v1/validate-rules/rule',
+        security: 'public',
+        summary: 'Validate a rule against its schema.',
+        request: generic_1.IShareRuleSchema,
+        response: {
+            200: response_schemas_1.SuccessResponseSchema,
+            400: response_schemas_1.ErrorResponseSchema,
+        },
+    },
+    {
+        method: 'post',
+        path: '/validation/v1/validate-rules/condition',
+        security: 'public',
+        summary: 'Validate a condition against its schema.',
+        request: generic_1.IConditionSchema,
+        response: {
+            200: response_schemas_1.SuccessResponseSchema,
+            400: response_schemas_1.ErrorResponseSchema,
+        },
+    },
+];

package/package.json

@@ -1,21 +1,31 @@
 {
   "name": "@degenerate/endpoints",
-  "version": "0.1.7",
+  "version": "0.4.0",
   "description": "This contains the ShareData Adaptive Framework Ecosystem (SAFE) network endpoint code",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "publishConfig": {
+    "access": "public"
+  },
   "devDependencies": {
-    "@types/jest": "^29.5.14",
-    "@types/node": "^22.9.0",
-    "jest": "^29.7.0",
-    "ts-jest": "^29.2.5",
-    "typescript": "^5.6.3"
+    "@types/express": "^5.0.6",
+    "@types/jest": "^30.0.0",
+    "@types/node": "^22.19.18",
+    "jest": "^30.4.2",
+    "ts-jest": "^29.4.9",
+    "typescript": "^6.0.3"
   },
   "scripts": {
     "build": "rm -rf dist/* && tsc -p tsconfig.pkg.json",
     "compile": "rm -rf dist/* && tsc -p tsconfig.pkg.json",
-    "test": "jest --forceExit --detectOpenHandles --verbose --silent=false --env node --config tsconfig.pkg.json",
-    "test:coverage": "jest --forceExit --coverage --detectOpenHandles --verbose --silent=false --env node  --config tsconfig.pkg.json",
+    "test": "jest --forceExit --detectOpenHandles --verbose --silent=false --env node",
+    "test:coverage": "jest --forceExit --coverage --detectOpenHandles --verbose --silent=false --env node ",
     "test:clearCache": "jest --clearCache"
   },
   "repository": {
@@ -40,14 +50,17 @@
   "author": "Degenerate Inc.",
   "license": "ISC",
   "dependencies": {
-    "@degenerate/generic": "^0.2.7",
-    "@types/supertest": "^6.0.2",
-    "express": "^4.21.1",
-    "supertest": "^7.0.0",
-    "zod": "^3.24.1"
+    "@degenerate/generic": "^0.4.0",
+    "@degenerate/realtime": "^0.4.0",
+    "@degenerate/shareblock": "^0.4.0",
+    "@degenerate/sharedata": "^0.4.0",
+    "@types/supertest": "^6.0.3",
+    "express": "^5.2.1",
+    "supertest": "^7.2.2",
+    "zod": "^4.4.3"
   },
-  "gitHead": "29034ad37b42e7ec71a842e679b6c8a257d7cb6a",
+  "gitHead": "9453d9ab785e03fd01eb5b408ed0e3ca22baefd5",
   "engines": {
-    "node": "22.x"
+    "node": ">=22"
   }
 }