@fhirfly-io/shl 0.1.0

package/dist/server.cjs

@@ -0,0 +1,166 @@
+'use strict';
+
+var chunkKI44MYPE_cjs = require('./chunk-KI44MYPE.cjs');
+var chunkCNVYKA4D_cjs = require('./chunk-CNVYKA4D.cjs');
+require('./chunk-Q7SFCCGT.cjs');
+var fs = require('fs');
+var path = require('path');
+
+var ServerLocalStorage = class extends chunkKI44MYPE_cjs.LocalStorage {
+  constructor(config) {
+    super(config);
+  }
+  async read(key) {
+    const filePath = path.join(this.config.directory, key);
+    if (!fs.existsSync(filePath)) {
+      return null;
+    }
+    try {
+      return fs.readFileSync(filePath, "utf8");
+    } catch {
+      return null;
+    }
+  }
+  async updateMetadata(shlId, updater) {
+    const key = `${shlId}/metadata.json`;
+    const raw = await this.read(key);
+    if (raw === null) return null;
+    const current = JSON.parse(raw);
+    const updated = updater(current);
+    if (updated === null) return null;
+    await this.store(key, JSON.stringify(updated));
+    return updated;
+  }
+};
+var _s3Module;
+async function getS3Module() {
+  if (_s3Module) return _s3Module;
+  try {
+    _s3Module = await import('@aws-sdk/client-s3');
+    return _s3Module;
+  } catch {
+    throw new chunkKI44MYPE_cjs.StorageError(
+      "@aws-sdk/client-s3 is required for ServerS3Storage. Install it: npm install @aws-sdk/client-s3",
+      "import"
+    );
+  }
+}
+var ServerS3Storage = class {
+  _config;
+  _client;
+  constructor(config) {
+    this._config = config;
+  }
+  get baseUrl() {
+    return this._config.baseUrl.replace(/\/+$/, "");
+  }
+  async store(key, content) {
+    try {
+      const s3 = await getS3Module();
+      const client = this._getClient(s3);
+      const body = typeof content === "string" ? Buffer.from(content, "utf8") : content;
+      const command = new s3.PutObjectCommand({
+        Bucket: this._config.bucket,
+        Key: this._s3Key(key),
+        Body: body,
+        ContentType: this._contentType(key)
+      });
+      await client.send(command);
+    } catch (err) {
+      if (err instanceof chunkKI44MYPE_cjs.StorageError) throw err;
+      throw new chunkKI44MYPE_cjs.StorageError(
+        `Failed to store ${key}: ${err instanceof Error ? err.message : String(err)}`,
+        "store"
+      );
+    }
+  }
+  async delete(prefix) {
+    try {
+      const s3 = await getS3Module();
+      const client = this._getClient(s3);
+      const s3Prefix = this._s3Key(prefix);
+      let continuationToken;
+      do {
+        const listInput = {
+          Bucket: this._config.bucket,
+          Prefix: s3Prefix
+        };
+        if (continuationToken) listInput["ContinuationToken"] = continuationToken;
+        const listCommand = new s3.ListObjectsV2Command(listInput);
+        const response = await client.send(listCommand);
+        const objects = response.Contents;
+        if (!objects || objects.length === 0) break;
+        const deleteCommand = new s3.DeleteObjectsCommand({
+          Bucket: this._config.bucket,
+          Delete: {
+            Objects: objects.map((obj) => ({ Key: obj.Key })),
+            Quiet: true
+          }
+        });
+        await client.send(deleteCommand);
+        continuationToken = response.IsTruncated ? response.NextContinuationToken : void 0;
+      } while (continuationToken);
+    } catch (err) {
+      if (err instanceof chunkKI44MYPE_cjs.StorageError) throw err;
+      throw new chunkKI44MYPE_cjs.StorageError(
+        `Failed to delete ${prefix}: ${err instanceof Error ? err.message : String(err)}`,
+        "delete"
+      );
+    }
+  }
+  async read(key) {
+    try {
+      const s3 = await getS3Module();
+      const client = this._getClient(s3);
+      const command = new s3.GetObjectCommand({
+        Bucket: this._config.bucket,
+        Key: this._s3Key(key)
+      });
+      const response = await client.send(command);
+      if (!response.Body) return null;
+      return response.Body.transformToString();
+    } catch (err) {
+      const code = err.name;
+      if (code === "NoSuchKey") return null;
+      if (err instanceof chunkKI44MYPE_cjs.StorageError) throw err;
+      throw new chunkKI44MYPE_cjs.StorageError(
+        `Failed to read ${key}: ${err instanceof Error ? err.message : String(err)}`,
+        "read"
+      );
+    }
+  }
+  async updateMetadata(shlId, updater) {
+    const key = `${shlId}/metadata.json`;
+    const raw = await this.read(key);
+    if (raw === null) return null;
+    const current = JSON.parse(raw);
+    const updated = updater(current);
+    if (updated === null) return null;
+    await this.store(key, JSON.stringify(updated));
+    return updated;
+  }
+  _getClient(s3) {
+    if (!this._client) {
+      this._client = new s3.S3Client({ region: this._config.region });
+    }
+    return this._client;
+  }
+  _s3Key(key) {
+    const prefix = this._config.prefix?.replace(/\/+$/, "");
+    return prefix ? `${prefix}/${key}` : key;
+  }
+  _contentType(key) {
+    if (key.endsWith(".jwe")) return "application/jose";
+    if (key.endsWith(".json")) return "application/json";
+    return "application/octet-stream";
+  }
+};
+
+Object.defineProperty(exports, "createHandler", {
+  enumerable: true,
+  get: function () { return chunkCNVYKA4D_cjs.createHandler; }
+});
+exports.ServerLocalStorage = ServerLocalStorage;
+exports.ServerS3Storage = ServerS3Storage;
+//# sourceMappingURL=server.cjs.map
+//# sourceMappingURL=server.cjs.map

package/dist/server.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/server/storage.ts"],"names":["LocalStorage","join","existsSync","readFileSync","StorageError"],"mappings":";;;;;;;;AA0BO,IAAM,kBAAA,GAAN,cAAiCA,8BAAA,CAAyC;AAAA,EAC/E,YAAY,MAAA,EAA4B;AACtC,IAAA,KAAA,CAAM,MAAM,CAAA;AAAA,EACd;AAAA,EAEA,MAAM,KAAK,GAAA,EAAkD;AAC3D,IAAA,MAAM,QAAA,GAAWC,SAAA,CAAK,IAAA,CAAK,MAAA,CAAO,WAAW,GAAG,CAAA;AAChD,IAAA,IAAI,CAACC,aAAA,CAAW,QAAQ,CAAA,EAAG;AACzB,MAAA,OAAO,IAAA;AAAA,IACT;AACA,IAAA,IAAI;AAEF,MAAA,OAAOC,eAAA,CAAa,UAAU,MAAM,CAAA;AAAA,IACtC,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO,IAAA;AAAA,IACT;AAAA,EACF;AAAA,EAEA,MAAM,cAAA,CACJ,KAAA,EACA,OAAA,EAC6B;AAC7B,IAAA,MAAM,GAAA,GAAM,GAAG,KAAK,CAAA,cAAA,CAAA;AACpB,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,IAAA,CAAK,GAAG,CAAA;AAC/B,IAAA,IAAI,GAAA,KAAQ,MAAM,OAAO,IAAA;AAEzB,IAAA,MAAM,OAAA,GAAU,IAAA,CAAK,KAAA,CAAM,GAAa,CAAA;AACxC,IAAA,MAAM,OAAA,GAAU,QAAQ,OAAO,CAAA;AAC/B,IAAA,IAAI,OAAA,KAAY,MAAM,OAAO,IAAA;AAE7B,IAAA,MAAM,KAAK,KAAA,CAAM,GAAA,EAAK,IAAA,CAAK,SAAA,CAAU,OAAO,CAAC,CAAA;AAC7C,IAAA,OAAO,OAAA;AAAA,EACT;AACF;AAcA,IAAI,SAAA;AACJ,eAAe,WAAA,GAAiC;AAC9C,EAAA,IAAI,WAAW,OAAO,SAAA;AACtB,EAAA,IAAI;AACF,IAAA,SAAA,GAAa,MAAM,OAAO,oBAAoB,CAAA;AAC9C,IAAA,OAAO,SAAA;AAAA,EACT,CAAA,CAAA,MAAQ;AACN,IAAA,MAAM,IAAIC,8BAAA;AAAA,MACR,gGAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AACF;AAqBO,IAAM,kBAAN,MAAkD;AAAA,EACtC,OAAA;AAAA,EACT,OAAA;AAAA,EAER,YAAY,MAAA,EAAyB;AACnC,IAAA,IAAA,CAAK,OAAA,GAAU,MAAA;AAAA,EACjB;AAAA,EAEA,IAAI,OAAA,GAAkB;AACpB,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,OAAA,CAAQ,OAAA,CAAQ,QAAQ,EAAE,CAAA;AAAA,EAChD;AAAA,EAEA,MAAM,KAAA,CAAM,GAAA,EAAa,OAAA,EAA6C;AACpE,IAAA,IAAI;AACF,MAAA,MAAM,EAAA,GAAK,MAAM,WAAA,EAAY;AAC7B,MAAA,MAAM,MAAA,GAAS,IAAA,CAAK,UAAA,CAAW,EAAE,CAAA;AACjC,MAAA,MAAM,IAAA,GAAO,OAAO,OAAA,KAAY,QAAA,GAAW,OAAO,IAAA,CAAK,OAAA,EAAS,MAAM,CAAA,GAAI,OAAA;AAE1E,MAAA,MAAM,OAAA,GAAU,IAAI,EAAA,CAAG,gBAAA,CAAiB;AAAA,QACtC,MAAA,EAAQ,KAAK,OAAA,CAAQ,MAAA;AAAA,QACrB,GAAA,EAAK,IAAA,CAAK,MAAA,CAAO,GAAG,CAAA;AAAA,QACpB,IAAA,EAAM,IAAA;AAAA,QACN,WAAA,EAAa,IAAA,CAAK,YAAA,CAAa,GAAG;AAAA,OACnC,CAAA;AAED,MAAA,MAAM,MAAA,CAAO,KAAK,OAAO,CAAA;AAAA,IAC3B,SAAS,GAAA,EAAK;AACZ,MAAA,IAAI,GAAA,YAAeA,gCAAc,MAAM,GAAA;AACvC,MAAA,MAAM,IAAIA,8BAAA;AAAA,QACR,CAAA,gBAAA,EAAmB,GAAG,CAAA,EAAA,EAAK,GAAA,YAAe,QAAQ,GAAA,CAAI,OAAA,GAAU,MAAA,CAAO,GAAG,CAAC,CAAA,CAAA;AAAA,QAC3E;AAAA,OACF;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,OAAO,MAAA,EAA+B;AAC1C,IAAA,IAAI;AACF,MAAA,MAAM,EAAA,GAAK,MAAM,WAAA,EAAY;AAC7B,MAAA,MAAM,MAAA,GAAS,IAAA,CAAK,UAAA,CAAW,EAAE,CAAA;AACjC,MAAA,MAAM,QAAA,GAAW,IAAA,CAAK,MAAA,CAAO,MAAM,CAAA;AAEnC,MAAA,IAAI,iBAAA;AACJ,MAAA,GAAG;AACD,QAAA,MAAM,SAAA,GAAqC;AAAA,UACzC,MAAA,EAAQ,KAAK,OAAA,CAAQ,MAAA;AAAA,UACrB,MAAA,EAAQ;AAAA,SACV;AACA,QAAA,IAAI,iBAAA,EAAmB,SAAA,CAAU,mBAAmB,CAAA,GAAI,iBAAA;AAExD,QAAA,MAAM,WAAA,GAAc,IAAI,EAAA,CAAG,oBAAA,CAAqB,SAAS,CAAA;AACzD,QAAA,MAAM,QAAA,GAAY,MAAM,MAAA,CAAO,IAAA,CAAK,WAAW,CAAA;AAM/C,QAAA,MAAM,UAAU,QAAA,CAAS,QAAA;AACzB,QAAA,IAAI,CAAC,OAAA,IAAW,OAAA,CAAQ,MAAA,KAAW,CAAA,EAAG;AAEtC,QAAA,MAAM,aAAA,GAAgB,IAAI,EAAA,CAAG,oBAAA,CAAqB;AAAA,UAChD,MAAA,EAAQ,KAAK,OAAA,CAAQ,MAAA;AAAA,UACrB,MAAA,EAAQ;AAAA,YACN,OAAA,EAAS,QAAQ,GAAA,CAAI,CAAC,SAAS,EAAE,GAAA,EAAK,GAAA,CAAI,GAAA,EAAI,CAAE,CAAA;AAAA,YAChD,KAAA,EAAO;AAAA;AACT,SACD,CAAA;AACD,QAAA,MAAM,MAAA,CAAO,KAAK,aAAa,CAAA;AAE/B,QAAA,iBAAA,GAAoB,QAAA,CAAS,WAAA,GACzB,QAAA,CAAS,qBAAA,GACT,KAAA,CAAA;AAAA,MACN,CAAA,QAAS,iBAAA;AAAA,IACX,SAAS,GAAA,EAAK;AACZ,MAAA,IAAI,GAAA,YAAeA,gCAAc,MAAM,GAAA;AACvC,MAAA,MAAM,IAAIA,8BAAA;AAAA,QACR,CAAA,iBAAA,EAAoB,MAAM,CAAA,EAAA,EAAK,GAAA,YAAe,QAAQ,GAAA,CAAI,OAAA,GAAU,MAAA,CAAO,GAAG,CAAC,CAAA,CAAA;AAAA,QAC/E;AAAA,OACF;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,KAAK,GAAA,EAAkD;AAC3D,IAAA,IAAI;AACF,MAAA,MAAM,EAAA,GAAK,MAAM,WAAA,EAAY;AAC7B,MAAA,MAAM,MAAA,GAAS,IAAA,CAAK,UAAA,CAAW,EAAE,CAAA;AAEjC,MAAA,MAAM,OAAA,GAAU,IAAI,EAAA,CAAG,gBAAA,CAAiB;AAAA,QACtC,MAAA,EAAQ,KAAK,OAAA,CAAQ,MAAA;AAAA,QACrB,GAAA,EAAK,IAAA,CAAK,MAAA,CAAO,GAAG;AAAA,OACrB,CAAA;AAED,MAAA,MAAM,QAAA,GAAY,MAAM,MAAA,CAAO,IAAA,CAAK,OAAO,CAAA;AAI3C,MAAA,IAAI,CAAC,QAAA,CAAS,IAAA,EAAM,OAAO,IAAA;AAC3B,MAAA,OAAO,QAAA,CAAS,KAAK,iBAAA,EAAkB;AAAA,IACzC,SAAS,GAAA,EAAK;AAEZ,MAAA,MAAM,OAAQ,GAAA,CAA0B,IAAA;AACxC,MAAA,IAAI,IAAA,KAAS,aAAa,OAAO,IAAA;AACjC,MAAA,IAAI,GAAA,YAAeA,gCAAc,MAAM,GAAA;AACvC,MAAA,MAAM,IAAIA,8BAAA;AAAA,QACR,CAAA,eAAA,EAAkB,GAAG,CAAA,EAAA,EAAK,GAAA,YAAe,QAAQ,GAAA,CAAI,OAAA,GAAU,MAAA,CAAO,GAAG,CAAC,CAAA,CAAA;AAAA,QAC1E;AAAA,OACF;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,cAAA,CACJ,KAAA,EACA,OAAA,EAC6B;AAC7B,IAAA,MAAM,GAAA,GAAM,GAAG,KAAK,CAAA,cAAA,CAAA;AACpB,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,IAAA,CAAK,GAAG,CAAA;AAC/B,IAAA,IAAI,GAAA,KAAQ,MAAM,OAAO,IAAA;AAEzB,IAAA,MAAM,OAAA,GAAU,IAAA,CAAK,KAAA,CAAM,GAAa,CAAA;AACxC,IAAA,MAAM,OAAA,GAAU,QAAQ,OAAO,CAAA;AAC/B,IAAA,IAAI,OAAA,KAAY,MAAM,OAAO,IAAA;AAE7B,IAAA,MAAM,KAAK,KAAA,CAAM,GAAA,EAAK,IAAA,CAAK,SAAA,CAAU,OAAO,CAAC,CAAA;AAC7C,IAAA,OAAO,OAAA;AAAA,EACT;AAAA,EAEQ,WAAW,EAAA,EAAgC;AACjD,IAAA,IAAI,CAAC,KAAK,OAAA,EAAS;AACjB,MAAA,IAAA,CAAK,OAAA,GAAU,IAAI,EAAA,CAAG,QAAA,CAAS,EAAE,MAAA,EAAQ,IAAA,CAAK,OAAA,CAAQ,MAAA,EAAQ,CAAA;AAAA,IAChE;AACA,IAAA,OAAO,IAAA,CAAK,OAAA;AAAA,EACd;AAAA,EAEQ,OAAO,GAAA,EAAqB;AAClC,IAAA,MAAM,SAAS,IAAA,CAAK,OAAA,CAAQ,MAAA,EAAQ,OAAA,CAAQ,QAAQ,EAAE,CAAA;AACtD,IAAA,OAAO,MAAA,GAAS,CAAA,EAAG,MAAM,CAAA,CAAA,EAAI,GAAG,CAAA,CAAA,GAAK,GAAA;AAAA,EACvC;AAAA,EAEQ,aAAa,GAAA,EAAqB;AACxC,IAAA,IAAI,GAAA,CAAI,QAAA,CAAS,MAAM,CAAA,EAAG,OAAO,kBAAA;AACjC,IAAA,IAAI,GAAA,CAAI,QAAA,CAAS,OAAO,CAAA,EAAG,OAAO,kBAAA;AAClC,IAAA,OAAO,0BAAA;AAAA,EACT;AACF","file":"server.cjs","sourcesContent":["// Copyright 2026 FHIRfly.io LLC. All rights reserved.\n// Licensed under the MIT License. See LICENSE file in the project root.\nimport { readFileSync, existsSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport { LocalStorage } from \"../shl/storage.js\";\nimport type { LocalStorageConfig, S3StorageConfig } from \"../shl/storage.js\";\nimport type { SHLServerStorage } from \"./types.js\";\nimport type { SHLMetadata } from \"../shl/types.js\";\nimport { StorageError } from \"../errors.js\";\n\n/**\n * Local filesystem server storage for SMART Health Links.\n *\n * Extends the base `LocalStorage` (write-only) with `read` and\n * `updateMetadata` methods needed for serving SHLs.\n *\n * @example\n * ```ts\n * import { ServerLocalStorage } from \"@fhirfly-io/shl/server\";\n *\n * const storage = new ServerLocalStorage({\n *   directory: \"./shl-data\",\n *   baseUrl: \"https://shl.example.com\",\n * });\n * ```\n */\nexport class ServerLocalStorage extends LocalStorage implements SHLServerStorage {\n  constructor(config: LocalStorageConfig) {\n    super(config);\n  }\n\n  async read(key: string): Promise<string | Uint8Array | null> {\n    const filePath = join(this.config.directory, key);\n    if (!existsSync(filePath)) {\n      return null;\n    }\n    try {\n      // Read as UTF-8 for JSON/JWE files, binary for others\n      return readFileSync(filePath, \"utf8\");\n    } catch {\n      return null;\n    }\n  }\n\n  async updateMetadata(\n    shlId: string,\n    updater: (current: SHLMetadata) => SHLMetadata | null,\n  ): Promise<SHLMetadata | null> {\n    const key = `${shlId}/metadata.json`;\n    const raw = await this.read(key);\n    if (raw === null) return null;\n\n    const current = JSON.parse(raw as string) as SHLMetadata;\n    const updated = updater(current);\n    if (updated === null) return null;\n\n    await this.store(key, JSON.stringify(updated));\n    return updated;\n  }\n}\n\n// Minimal S3 interfaces (same pattern as shl/storage.ts)\ninterface S3ClientInstance {\n  send(command: unknown): Promise<unknown>;\n}\ninterface S3Module {\n  S3Client: new (config: { region: string }) => S3ClientInstance;\n  PutObjectCommand: new (input: Record<string, unknown>) => unknown;\n  GetObjectCommand: new (input: Record<string, unknown>) => unknown;\n  ListObjectsV2Command: new (input: Record<string, unknown>) => unknown;\n  DeleteObjectsCommand: new (input: Record<string, unknown>) => unknown;\n}\n\nlet _s3Module: S3Module | undefined;\nasync function getS3Module(): Promise<S3Module> {\n  if (_s3Module) return _s3Module;\n  try {\n    _s3Module = (await import(\"@aws-sdk/client-s3\")) as unknown as S3Module;\n    return _s3Module;\n  } catch {\n    throw new StorageError(\n      \"@aws-sdk/client-s3 is required for ServerS3Storage. Install it: npm install @aws-sdk/client-s3\",\n      \"import\",\n    );\n  }\n}\n\n/**\n * S3-backed server storage for SMART Health Links.\n *\n * Implements the full `SHLServerStorage` interface with `read` and\n * `updateMetadata` on top of S3.\n *\n * Uses conditional PutObject for optimistic concurrency on metadata updates.\n *\n * @example\n * ```ts\n * import { ServerS3Storage } from \"@fhirfly-io/shl/server\";\n *\n * const storage = new ServerS3Storage({\n *   bucket: \"my-shl-bucket\",\n *   region: \"us-east-1\",\n *   baseUrl: \"https://shl.example.com\",\n * });\n * ```\n */\nexport class ServerS3Storage implements SHLServerStorage {\n  private readonly _config: S3StorageConfig;\n  private _client?: S3ClientInstance;\n\n  constructor(config: S3StorageConfig) {\n    this._config = config;\n  }\n\n  get baseUrl(): string {\n    return this._config.baseUrl.replace(/\\/+$/, \"\");\n  }\n\n  async store(key: string, content: string | Uint8Array): Promise<void> {\n    try {\n      const s3 = await getS3Module();\n      const client = this._getClient(s3);\n      const body = typeof content === \"string\" ? Buffer.from(content, \"utf8\") : content;\n\n      const command = new s3.PutObjectCommand({\n        Bucket: this._config.bucket,\n        Key: this._s3Key(key),\n        Body: body,\n        ContentType: this._contentType(key),\n      });\n\n      await client.send(command);\n    } catch (err) {\n      if (err instanceof StorageError) throw err;\n      throw new StorageError(\n        `Failed to store ${key}: ${err instanceof Error ? err.message : String(err)}`,\n        \"store\",\n      );\n    }\n  }\n\n  async delete(prefix: string): Promise<void> {\n    try {\n      const s3 = await getS3Module();\n      const client = this._getClient(s3);\n      const s3Prefix = this._s3Key(prefix);\n\n      let continuationToken: string | undefined;\n      do {\n        const listInput: Record<string, unknown> = {\n          Bucket: this._config.bucket,\n          Prefix: s3Prefix,\n        };\n        if (continuationToken) listInput[\"ContinuationToken\"] = continuationToken;\n\n        const listCommand = new s3.ListObjectsV2Command(listInput);\n        const response = (await client.send(listCommand)) as {\n          Contents?: Array<{ Key?: string }>;\n          IsTruncated?: boolean;\n          NextContinuationToken?: string;\n        };\n\n        const objects = response.Contents;\n        if (!objects || objects.length === 0) break;\n\n        const deleteCommand = new s3.DeleteObjectsCommand({\n          Bucket: this._config.bucket,\n          Delete: {\n            Objects: objects.map((obj) => ({ Key: obj.Key })),\n            Quiet: true,\n          },\n        });\n        await client.send(deleteCommand);\n\n        continuationToken = response.IsTruncated\n          ? response.NextContinuationToken\n          : undefined;\n      } while (continuationToken);\n    } catch (err) {\n      if (err instanceof StorageError) throw err;\n      throw new StorageError(\n        `Failed to delete ${prefix}: ${err instanceof Error ? err.message : String(err)}`,\n        \"delete\",\n      );\n    }\n  }\n\n  async read(key: string): Promise<string | Uint8Array | null> {\n    try {\n      const s3 = await getS3Module();\n      const client = this._getClient(s3);\n\n      const command = new s3.GetObjectCommand({\n        Bucket: this._config.bucket,\n        Key: this._s3Key(key),\n      });\n\n      const response = (await client.send(command)) as {\n        Body?: { transformToString(): Promise<string> };\n      };\n\n      if (!response.Body) return null;\n      return response.Body.transformToString();\n    } catch (err) {\n      // S3 returns NoSuchKey for missing objects\n      const code = (err as { name?: string }).name;\n      if (code === \"NoSuchKey\") return null;\n      if (err instanceof StorageError) throw err;\n      throw new StorageError(\n        `Failed to read ${key}: ${err instanceof Error ? err.message : String(err)}`,\n        \"read\",\n      );\n    }\n  }\n\n  async updateMetadata(\n    shlId: string,\n    updater: (current: SHLMetadata) => SHLMetadata | null,\n  ): Promise<SHLMetadata | null> {\n    const key = `${shlId}/metadata.json`;\n    const raw = await this.read(key);\n    if (raw === null) return null;\n\n    const current = JSON.parse(raw as string) as SHLMetadata;\n    const updated = updater(current);\n    if (updated === null) return null;\n\n    await this.store(key, JSON.stringify(updated));\n    return updated;\n  }\n\n  private _getClient(s3: S3Module): S3ClientInstance {\n    if (!this._client) {\n      this._client = new s3.S3Client({ region: this._config.region });\n    }\n    return this._client;\n  }\n\n  private _s3Key(key: string): string {\n    const prefix = this._config.prefix?.replace(/\\/+$/, \"\");\n    return prefix ? `${prefix}/${key}` : key;\n  }\n\n  private _contentType(key: string): string {\n    if (key.endsWith(\".jwe\")) return \"application/jose\";\n    if (key.endsWith(\".json\")) return \"application/json\";\n    return \"application/octet-stream\";\n  }\n}\n"]}

package/dist/server.d.cts

@@ -0,0 +1,85 @@
+import { S as SHLHandlerConfig, H as HandlerRequest, a as HandlerResponse, b as SHLServerStorage } from './types--f4ITgu9.cjs';
+export { A as AccessEvent } from './types--f4ITgu9.cjs';
+import { L as LocalStorage, a as LocalStorageConfig, b as S3StorageConfig } from './storage-CHi9vLD_.cjs';
+import { e as SHLMetadata } from './types-yk0mDByJ.cjs';
+
+/**
+ * Create a framework-agnostic SHL request handler.
+ *
+ * Returns an async function that processes incoming requests and returns
+ * responses. This handler implements two routes:
+ *
+ * - `POST /{shlId}` — Manifest endpoint (validates passcode, checks access limits)
+ * - `GET /{shlId}/content` — Content endpoint (serves encrypted JWE)
+ *
+ * Framework adapters (Express, Fastify, Lambda) translate their native
+ * request/response types to/from `HandlerRequest`/`HandlerResponse`.
+ *
+ * @example
+ * ```ts
+ * const handle = createHandler({ storage });
+ * const response = await handle({
+ *   method: "POST",
+ *   path: "/abc123",
+ *   body: { passcode: "1234" },
+ *   headers: { "content-type": "application/json" },
+ * });
+ * ```
+ */
+declare function createHandler(config: SHLHandlerConfig): (req: HandlerRequest) => Promise<HandlerResponse>;
+
+/**
+ * Local filesystem server storage for SMART Health Links.
+ *
+ * Extends the base `LocalStorage` (write-only) with `read` and
+ * `updateMetadata` methods needed for serving SHLs.
+ *
+ * @example
+ * ```ts
+ * import { ServerLocalStorage } from "@fhirfly-io/shl/server";
+ *
+ * const storage = new ServerLocalStorage({
+ *   directory: "./shl-data",
+ *   baseUrl: "https://shl.example.com",
+ * });
+ * ```
+ */
+declare class ServerLocalStorage extends LocalStorage implements SHLServerStorage {
+    constructor(config: LocalStorageConfig);
+    read(key: string): Promise<string | Uint8Array | null>;
+    updateMetadata(shlId: string, updater: (current: SHLMetadata) => SHLMetadata | null): Promise<SHLMetadata | null>;
+}
+/**
+ * S3-backed server storage for SMART Health Links.
+ *
+ * Implements the full `SHLServerStorage` interface with `read` and
+ * `updateMetadata` on top of S3.
+ *
+ * Uses conditional PutObject for optimistic concurrency on metadata updates.
+ *
+ * @example
+ * ```ts
+ * import { ServerS3Storage } from "@fhirfly-io/shl/server";
+ *
+ * const storage = new ServerS3Storage({
+ *   bucket: "my-shl-bucket",
+ *   region: "us-east-1",
+ *   baseUrl: "https://shl.example.com",
+ * });
+ * ```
+ */
+declare class ServerS3Storage implements SHLServerStorage {
+    private readonly _config;
+    private _client?;
+    constructor(config: S3StorageConfig);
+    get baseUrl(): string;
+    store(key: string, content: string | Uint8Array): Promise<void>;
+    delete(prefix: string): Promise<void>;
+    read(key: string): Promise<string | Uint8Array | null>;
+    updateMetadata(shlId: string, updater: (current: SHLMetadata) => SHLMetadata | null): Promise<SHLMetadata | null>;
+    private _getClient;
+    private _s3Key;
+    private _contentType;
+}
+
+export { HandlerRequest, HandlerResponse, SHLHandlerConfig, SHLServerStorage, ServerLocalStorage, ServerS3Storage, createHandler };

package/dist/server.d.ts

@@ -0,0 +1,85 @@
+import { S as SHLHandlerConfig, H as HandlerRequest, a as HandlerResponse, b as SHLServerStorage } from './types-DKtPO4DP.js';
+export { A as AccessEvent } from './types-DKtPO4DP.js';
+import { L as LocalStorage, a as LocalStorageConfig, b as S3StorageConfig } from './storage-iI_tyHcX.js';
+import { e as SHLMetadata } from './types-yk0mDByJ.js';
+
+/**
+ * Create a framework-agnostic SHL request handler.
+ *
+ * Returns an async function that processes incoming requests and returns
+ * responses. This handler implements two routes:
+ *
+ * - `POST /{shlId}` — Manifest endpoint (validates passcode, checks access limits)
+ * - `GET /{shlId}/content` — Content endpoint (serves encrypted JWE)
+ *
+ * Framework adapters (Express, Fastify, Lambda) translate their native
+ * request/response types to/from `HandlerRequest`/`HandlerResponse`.
+ *
+ * @example
+ * ```ts
+ * const handle = createHandler({ storage });
+ * const response = await handle({
+ *   method: "POST",
+ *   path: "/abc123",
+ *   body: { passcode: "1234" },
+ *   headers: { "content-type": "application/json" },
+ * });
+ * ```
+ */
+declare function createHandler(config: SHLHandlerConfig): (req: HandlerRequest) => Promise<HandlerResponse>;
+
+/**
+ * Local filesystem server storage for SMART Health Links.
+ *
+ * Extends the base `LocalStorage` (write-only) with `read` and
+ * `updateMetadata` methods needed for serving SHLs.
+ *
+ * @example
+ * ```ts
+ * import { ServerLocalStorage } from "@fhirfly-io/shl/server";
+ *
+ * const storage = new ServerLocalStorage({
+ *   directory: "./shl-data",
+ *   baseUrl: "https://shl.example.com",
+ * });
+ * ```
+ */
+declare class ServerLocalStorage extends LocalStorage implements SHLServerStorage {
+    constructor(config: LocalStorageConfig);
+    read(key: string): Promise<string | Uint8Array | null>;
+    updateMetadata(shlId: string, updater: (current: SHLMetadata) => SHLMetadata | null): Promise<SHLMetadata | null>;
+}
+/**
+ * S3-backed server storage for SMART Health Links.
+ *
+ * Implements the full `SHLServerStorage` interface with `read` and
+ * `updateMetadata` on top of S3.
+ *
+ * Uses conditional PutObject for optimistic concurrency on metadata updates.
+ *
+ * @example
+ * ```ts
+ * import { ServerS3Storage } from "@fhirfly-io/shl/server";
+ *
+ * const storage = new ServerS3Storage({
+ *   bucket: "my-shl-bucket",
+ *   region: "us-east-1",
+ *   baseUrl: "https://shl.example.com",
+ * });
+ * ```
+ */
+declare class ServerS3Storage implements SHLServerStorage {
+    private readonly _config;
+    private _client?;
+    constructor(config: S3StorageConfig);
+    get baseUrl(): string;
+    store(key: string, content: string | Uint8Array): Promise<void>;
+    delete(prefix: string): Promise<void>;
+    read(key: string): Promise<string | Uint8Array | null>;
+    updateMetadata(shlId: string, updater: (current: SHLMetadata) => SHLMetadata | null): Promise<SHLMetadata | null>;
+    private _getClient;
+    private _s3Key;
+    private _contentType;
+}
+
+export { HandlerRequest, HandlerResponse, SHLHandlerConfig, SHLServerStorage, ServerLocalStorage, ServerS3Storage, createHandler };

package/dist/server.js

@@ -0,0 +1,159 @@
+import { LocalStorage, StorageError } from './chunk-XTLU6O32.js';
+export { createHandler } from './chunk-7WIM2QP5.js';
+import './chunk-PZ5AY32C.js';
+import { existsSync, readFileSync } from 'fs';
+import { join } from 'path';
+
+var ServerLocalStorage = class extends LocalStorage {
+  constructor(config) {
+    super(config);
+  }
+  async read(key) {
+    const filePath = join(this.config.directory, key);
+    if (!existsSync(filePath)) {
+      return null;
+    }
+    try {
+      return readFileSync(filePath, "utf8");
+    } catch {
+      return null;
+    }
+  }
+  async updateMetadata(shlId, updater) {
+    const key = `${shlId}/metadata.json`;
+    const raw = await this.read(key);
+    if (raw === null) return null;
+    const current = JSON.parse(raw);
+    const updated = updater(current);
+    if (updated === null) return null;
+    await this.store(key, JSON.stringify(updated));
+    return updated;
+  }
+};
+var _s3Module;
+async function getS3Module() {
+  if (_s3Module) return _s3Module;
+  try {
+    _s3Module = await import('@aws-sdk/client-s3');
+    return _s3Module;
+  } catch {
+    throw new StorageError(
+      "@aws-sdk/client-s3 is required for ServerS3Storage. Install it: npm install @aws-sdk/client-s3",
+      "import"
+    );
+  }
+}
+var ServerS3Storage = class {
+  _config;
+  _client;
+  constructor(config) {
+    this._config = config;
+  }
+  get baseUrl() {
+    return this._config.baseUrl.replace(/\/+$/, "");
+  }
+  async store(key, content) {
+    try {
+      const s3 = await getS3Module();
+      const client = this._getClient(s3);
+      const body = typeof content === "string" ? Buffer.from(content, "utf8") : content;
+      const command = new s3.PutObjectCommand({
+        Bucket: this._config.bucket,
+        Key: this._s3Key(key),
+        Body: body,
+        ContentType: this._contentType(key)
+      });
+      await client.send(command);
+    } catch (err) {
+      if (err instanceof StorageError) throw err;
+      throw new StorageError(
+        `Failed to store ${key}: ${err instanceof Error ? err.message : String(err)}`,
+        "store"
+      );
+    }
+  }
+  async delete(prefix) {
+    try {
+      const s3 = await getS3Module();
+      const client = this._getClient(s3);
+      const s3Prefix = this._s3Key(prefix);
+      let continuationToken;
+      do {
+        const listInput = {
+          Bucket: this._config.bucket,
+          Prefix: s3Prefix
+        };
+        if (continuationToken) listInput["ContinuationToken"] = continuationToken;
+        const listCommand = new s3.ListObjectsV2Command(listInput);
+        const response = await client.send(listCommand);
+        const objects = response.Contents;
+        if (!objects || objects.length === 0) break;
+        const deleteCommand = new s3.DeleteObjectsCommand({
+          Bucket: this._config.bucket,
+          Delete: {
+            Objects: objects.map((obj) => ({ Key: obj.Key })),
+            Quiet: true
+          }
+        });
+        await client.send(deleteCommand);
+        continuationToken = response.IsTruncated ? response.NextContinuationToken : void 0;
+      } while (continuationToken);
+    } catch (err) {
+      if (err instanceof StorageError) throw err;
+      throw new StorageError(
+        `Failed to delete ${prefix}: ${err instanceof Error ? err.message : String(err)}`,
+        "delete"
+      );
+    }
+  }
+  async read(key) {
+    try {
+      const s3 = await getS3Module();
+      const client = this._getClient(s3);
+      const command = new s3.GetObjectCommand({
+        Bucket: this._config.bucket,
+        Key: this._s3Key(key)
+      });
+      const response = await client.send(command);
+      if (!response.Body) return null;
+      return response.Body.transformToString();
+    } catch (err) {
+      const code = err.name;
+      if (code === "NoSuchKey") return null;
+      if (err instanceof StorageError) throw err;
+      throw new StorageError(
+        `Failed to read ${key}: ${err instanceof Error ? err.message : String(err)}`,
+        "read"
+      );
+    }
+  }
+  async updateMetadata(shlId, updater) {
+    const key = `${shlId}/metadata.json`;
+    const raw = await this.read(key);
+    if (raw === null) return null;
+    const current = JSON.parse(raw);
+    const updated = updater(current);
+    if (updated === null) return null;
+    await this.store(key, JSON.stringify(updated));
+    return updated;
+  }
+  _getClient(s3) {
+    if (!this._client) {
+      this._client = new s3.S3Client({ region: this._config.region });
+    }
+    return this._client;
+  }
+  _s3Key(key) {
+    const prefix = this._config.prefix?.replace(/\/+$/, "");
+    return prefix ? `${prefix}/${key}` : key;
+  }
+  _contentType(key) {
+    if (key.endsWith(".jwe")) return "application/jose";
+    if (key.endsWith(".json")) return "application/json";
+    return "application/octet-stream";
+  }
+};
+
+export { ServerLocalStorage, ServerS3Storage };
+//# sourceMappingURL=server.js.map
+//# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/server/storage.ts"],"names":[],"mappings":";;;;;;AA0BO,IAAM,kBAAA,GAAN,cAAiC,YAAA,CAAyC;AAAA,EAC/E,YAAY,MAAA,EAA4B;AACtC,IAAA,KAAA,CAAM,MAAM,CAAA;AAAA,EACd;AAAA,EAEA,MAAM,KAAK,GAAA,EAAkD;AAC3D,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,IAAA,CAAK,MAAA,CAAO,WAAW,GAAG,CAAA;AAChD,IAAA,IAAI,CAAC,UAAA,CAAW,QAAQ,CAAA,EAAG;AACzB,MAAA,OAAO,IAAA;AAAA,IACT;AACA,IAAA,IAAI;AAEF,MAAA,OAAO,YAAA,CAAa,UAAU,MAAM,CAAA;AAAA,IACtC,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO,IAAA;AAAA,IACT;AAAA,EACF;AAAA,EAEA,MAAM,cAAA,CACJ,KAAA,EACA,OAAA,EAC6B;AAC7B,IAAA,MAAM,GAAA,GAAM,GAAG,KAAK,CAAA,cAAA,CAAA;AACpB,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,IAAA,CAAK,GAAG,CAAA;AAC/B,IAAA,IAAI,GAAA,KAAQ,MAAM,OAAO,IAAA;AAEzB,IAAA,MAAM,OAAA,GAAU,IAAA,CAAK,KAAA,CAAM,GAAa,CAAA;AACxC,IAAA,MAAM,OAAA,GAAU,QAAQ,OAAO,CAAA;AAC/B,IAAA,IAAI,OAAA,KAAY,MAAM,OAAO,IAAA;AAE7B,IAAA,MAAM,KAAK,KAAA,CAAM,GAAA,EAAK,IAAA,CAAK,SAAA,CAAU,OAAO,CAAC,CAAA;AAC7C,IAAA,OAAO,OAAA;AAAA,EACT;AACF;AAcA,IAAI,SAAA;AACJ,eAAe,WAAA,GAAiC;AAC9C,EAAA,IAAI,WAAW,OAAO,SAAA;AACtB,EAAA,IAAI;AACF,IAAA,SAAA,GAAa,MAAM,OAAO,oBAAoB,CAAA;AAC9C,IAAA,OAAO,SAAA;AAAA,EACT,CAAA,CAAA,MAAQ;AACN,IAAA,MAAM,IAAI,YAAA;AAAA,MACR,gGAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AACF;AAqBO,IAAM,kBAAN,MAAkD;AAAA,EACtC,OAAA;AAAA,EACT,OAAA;AAAA,EAER,YAAY,MAAA,EAAyB;AACnC,IAAA,IAAA,CAAK,OAAA,GAAU,MAAA;AAAA,EACjB;AAAA,EAEA,IAAI,OAAA,GAAkB;AACpB,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,OAAA,CAAQ,OAAA,CAAQ,QAAQ,EAAE,CAAA;AAAA,EAChD;AAAA,EAEA,MAAM,KAAA,CAAM,GAAA,EAAa,OAAA,EAA6C;AACpE,IAAA,IAAI;AACF,MAAA,MAAM,EAAA,GAAK,MAAM,WAAA,EAAY;AAC7B,MAAA,MAAM,MAAA,GAAS,IAAA,CAAK,UAAA,CAAW,EAAE,CAAA;AACjC,MAAA,MAAM,IAAA,GAAO,OAAO,OAAA,KAAY,QAAA,GAAW,OAAO,IAAA,CAAK,OAAA,EAAS,MAAM,CAAA,GAAI,OAAA;AAE1E,MAAA,MAAM,OAAA,GAAU,IAAI,EAAA,CAAG,gBAAA,CAAiB;AAAA,QACtC,MAAA,EAAQ,KAAK,OAAA,CAAQ,MAAA;AAAA,QACrB,GAAA,EAAK,IAAA,CAAK,MAAA,CAAO,GAAG,CAAA;AAAA,QACpB,IAAA,EAAM,IAAA;AAAA,QACN,WAAA,EAAa,IAAA,CAAK,YAAA,CAAa,GAAG;AAAA,OACnC,CAAA;AAED,MAAA,MAAM,MAAA,CAAO,KAAK,OAAO,CAAA;AAAA,IAC3B,SAAS,GAAA,EAAK;AACZ,MAAA,IAAI,GAAA,YAAe,cAAc,MAAM,GAAA;AACvC,MAAA,MAAM,IAAI,YAAA;AAAA,QACR,CAAA,gBAAA,EAAmB,GAAG,CAAA,EAAA,EAAK,GAAA,YAAe,QAAQ,GAAA,CAAI,OAAA,GAAU,MAAA,CAAO,GAAG,CAAC,CAAA,CAAA;AAAA,QAC3E;AAAA,OACF;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,OAAO,MAAA,EAA+B;AAC1C,IAAA,IAAI;AACF,MAAA,MAAM,EAAA,GAAK,MAAM,WAAA,EAAY;AAC7B,MAAA,MAAM,MAAA,GAAS,IAAA,CAAK,UAAA,CAAW,EAAE,CAAA;AACjC,MAAA,MAAM,QAAA,GAAW,IAAA,CAAK,MAAA,CAAO,MAAM,CAAA;AAEnC,MAAA,IAAI,iBAAA;AACJ,MAAA,GAAG;AACD,QAAA,MAAM,SAAA,GAAqC;AAAA,UACzC,MAAA,EAAQ,KAAK,OAAA,CAAQ,MAAA;AAAA,UACrB,MAAA,EAAQ;AAAA,SACV;AACA,QAAA,IAAI,iBAAA,EAAmB,SAAA,CAAU,mBAAmB,CAAA,GAAI,iBAAA;AAExD,QAAA,MAAM,WAAA,GAAc,IAAI,EAAA,CAAG,oBAAA,CAAqB,SAAS,CAAA;AACzD,QAAA,MAAM,QAAA,GAAY,MAAM,MAAA,CAAO,IAAA,CAAK,WAAW,CAAA;AAM/C,QAAA,MAAM,UAAU,QAAA,CAAS,QAAA;AACzB,QAAA,IAAI,CAAC,OAAA,IAAW,OAAA,CAAQ,MAAA,KAAW,CAAA,EAAG;AAEtC,QAAA,MAAM,aAAA,GAAgB,IAAI,EAAA,CAAG,oBAAA,CAAqB;AAAA,UAChD,MAAA,EAAQ,KAAK,OAAA,CAAQ,MAAA;AAAA,UACrB,MAAA,EAAQ;AAAA,YACN,OAAA,EAAS,QAAQ,GAAA,CAAI,CAAC,SAAS,EAAE,GAAA,EAAK,GAAA,CAAI,GAAA,EAAI,CAAE,CAAA;AAAA,YAChD,KAAA,EAAO;AAAA;AACT,SACD,CAAA;AACD,QAAA,MAAM,MAAA,CAAO,KAAK,aAAa,CAAA;AAE/B,QAAA,iBAAA,GAAoB,QAAA,CAAS,WAAA,GACzB,QAAA,CAAS,qBAAA,GACT,KAAA,CAAA;AAAA,MACN,CAAA,QAAS,iBAAA;AAAA,IACX,SAAS,GAAA,EAAK;AACZ,MAAA,IAAI,GAAA,YAAe,cAAc,MAAM,GAAA;AACvC,MAAA,MAAM,IAAI,YAAA;AAAA,QACR,CAAA,iBAAA,EAAoB,MAAM,CAAA,EAAA,EAAK,GAAA,YAAe,QAAQ,GAAA,CAAI,OAAA,GAAU,MAAA,CAAO,GAAG,CAAC,CAAA,CAAA;AAAA,QAC/E;AAAA,OACF;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,KAAK,GAAA,EAAkD;AAC3D,IAAA,IAAI;AACF,MAAA,MAAM,EAAA,GAAK,MAAM,WAAA,EAAY;AAC7B,MAAA,MAAM,MAAA,GAAS,IAAA,CAAK,UAAA,CAAW,EAAE,CAAA;AAEjC,MAAA,MAAM,OAAA,GAAU,IAAI,EAAA,CAAG,gBAAA,CAAiB;AAAA,QACtC,MAAA,EAAQ,KAAK,OAAA,CAAQ,MAAA;AAAA,QACrB,GAAA,EAAK,IAAA,CAAK,MAAA,CAAO,GAAG;AAAA,OACrB,CAAA;AAED,MAAA,MAAM,QAAA,GAAY,MAAM,MAAA,CAAO,IAAA,CAAK,OAAO,CAAA;AAI3C,MAAA,IAAI,CAAC,QAAA,CAAS,IAAA,EAAM,OAAO,IAAA;AAC3B,MAAA,OAAO,QAAA,CAAS,KAAK,iBAAA,EAAkB;AAAA,IACzC,SAAS,GAAA,EAAK;AAEZ,MAAA,MAAM,OAAQ,GAAA,CAA0B,IAAA;AACxC,MAAA,IAAI,IAAA,KAAS,aAAa,OAAO,IAAA;AACjC,MAAA,IAAI,GAAA,YAAe,cAAc,MAAM,GAAA;AACvC,MAAA,MAAM,IAAI,YAAA;AAAA,QACR,CAAA,eAAA,EAAkB,GAAG,CAAA,EAAA,EAAK,GAAA,YAAe,QAAQ,GAAA,CAAI,OAAA,GAAU,MAAA,CAAO,GAAG,CAAC,CAAA,CAAA;AAAA,QAC1E;AAAA,OACF;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,cAAA,CACJ,KAAA,EACA,OAAA,EAC6B;AAC7B,IAAA,MAAM,GAAA,GAAM,GAAG,KAAK,CAAA,cAAA,CAAA;AACpB,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,IAAA,CAAK,GAAG,CAAA;AAC/B,IAAA,IAAI,GAAA,KAAQ,MAAM,OAAO,IAAA;AAEzB,IAAA,MAAM,OAAA,GAAU,IAAA,CAAK,KAAA,CAAM,GAAa,CAAA;AACxC,IAAA,MAAM,OAAA,GAAU,QAAQ,OAAO,CAAA;AAC/B,IAAA,IAAI,OAAA,KAAY,MAAM,OAAO,IAAA;AAE7B,IAAA,MAAM,KAAK,KAAA,CAAM,GAAA,EAAK,IAAA,CAAK,SAAA,CAAU,OAAO,CAAC,CAAA;AAC7C,IAAA,OAAO,OAAA;AAAA,EACT;AAAA,EAEQ,WAAW,EAAA,EAAgC;AACjD,IAAA,IAAI,CAAC,KAAK,OAAA,EAAS;AACjB,MAAA,IAAA,CAAK,OAAA,GAAU,IAAI,EAAA,CAAG,QAAA,CAAS,EAAE,MAAA,EAAQ,IAAA,CAAK,OAAA,CAAQ,MAAA,EAAQ,CAAA;AAAA,IAChE;AACA,IAAA,OAAO,IAAA,CAAK,OAAA;AAAA,EACd;AAAA,EAEQ,OAAO,GAAA,EAAqB;AAClC,IAAA,MAAM,SAAS,IAAA,CAAK,OAAA,CAAQ,MAAA,EAAQ,OAAA,CAAQ,QAAQ,EAAE,CAAA;AACtD,IAAA,OAAO,MAAA,GAAS,CAAA,EAAG,MAAM,CAAA,CAAA,EAAI,GAAG,CAAA,CAAA,GAAK,GAAA;AAAA,EACvC;AAAA,EAEQ,aAAa,GAAA,EAAqB;AACxC,IAAA,IAAI,GAAA,CAAI,QAAA,CAAS,MAAM,CAAA,EAAG,OAAO,kBAAA;AACjC,IAAA,IAAI,GAAA,CAAI,QAAA,CAAS,OAAO,CAAA,EAAG,OAAO,kBAAA;AAClC,IAAA,OAAO,0BAAA;AAAA,EACT;AACF","file":"server.js","sourcesContent":["// Copyright 2026 FHIRfly.io LLC. All rights reserved.\n// Licensed under the MIT License. See LICENSE file in the project root.\nimport { readFileSync, existsSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport { LocalStorage } from \"../shl/storage.js\";\nimport type { LocalStorageConfig, S3StorageConfig } from \"../shl/storage.js\";\nimport type { SHLServerStorage } from \"./types.js\";\nimport type { SHLMetadata } from \"../shl/types.js\";\nimport { StorageError } from \"../errors.js\";\n\n/**\n * Local filesystem server storage for SMART Health Links.\n *\n * Extends the base `LocalStorage` (write-only) with `read` and\n * `updateMetadata` methods needed for serving SHLs.\n *\n * @example\n * ```ts\n * import { ServerLocalStorage } from \"@fhirfly-io/shl/server\";\n *\n * const storage = new ServerLocalStorage({\n *   directory: \"./shl-data\",\n *   baseUrl: \"https://shl.example.com\",\n * });\n * ```\n */\nexport class ServerLocalStorage extends LocalStorage implements SHLServerStorage {\n  constructor(config: LocalStorageConfig) {\n    super(config);\n  }\n\n  async read(key: string): Promise<string | Uint8Array | null> {\n    const filePath = join(this.config.directory, key);\n    if (!existsSync(filePath)) {\n      return null;\n    }\n    try {\n      // Read as UTF-8 for JSON/JWE files, binary for others\n      return readFileSync(filePath, \"utf8\");\n    } catch {\n      return null;\n    }\n  }\n\n  async updateMetadata(\n    shlId: string,\n    updater: (current: SHLMetadata) => SHLMetadata | null,\n  ): Promise<SHLMetadata | null> {\n    const key = `${shlId}/metadata.json`;\n    const raw = await this.read(key);\n    if (raw === null) return null;\n\n    const current = JSON.parse(raw as string) as SHLMetadata;\n    const updated = updater(current);\n    if (updated === null) return null;\n\n    await this.store(key, JSON.stringify(updated));\n    return updated;\n  }\n}\n\n// Minimal S3 interfaces (same pattern as shl/storage.ts)\ninterface S3ClientInstance {\n  send(command: unknown): Promise<unknown>;\n}\ninterface S3Module {\n  S3Client: new (config: { region: string }) => S3ClientInstance;\n  PutObjectCommand: new (input: Record<string, unknown>) => unknown;\n  GetObjectCommand: new (input: Record<string, unknown>) => unknown;\n  ListObjectsV2Command: new (input: Record<string, unknown>) => unknown;\n  DeleteObjectsCommand: new (input: Record<string, unknown>) => unknown;\n}\n\nlet _s3Module: S3Module | undefined;\nasync function getS3Module(): Promise<S3Module> {\n  if (_s3Module) return _s3Module;\n  try {\n    _s3Module = (await import(\"@aws-sdk/client-s3\")) as unknown as S3Module;\n    return _s3Module;\n  } catch {\n    throw new StorageError(\n      \"@aws-sdk/client-s3 is required for ServerS3Storage. Install it: npm install @aws-sdk/client-s3\",\n      \"import\",\n    );\n  }\n}\n\n/**\n * S3-backed server storage for SMART Health Links.\n *\n * Implements the full `SHLServerStorage` interface with `read` and\n * `updateMetadata` on top of S3.\n *\n * Uses conditional PutObject for optimistic concurrency on metadata updates.\n *\n * @example\n * ```ts\n * import { ServerS3Storage } from \"@fhirfly-io/shl/server\";\n *\n * const storage = new ServerS3Storage({\n *   bucket: \"my-shl-bucket\",\n *   region: \"us-east-1\",\n *   baseUrl: \"https://shl.example.com\",\n * });\n * ```\n */\nexport class ServerS3Storage implements SHLServerStorage {\n  private readonly _config: S3StorageConfig;\n  private _client?: S3ClientInstance;\n\n  constructor(config: S3StorageConfig) {\n    this._config = config;\n  }\n\n  get baseUrl(): string {\n    return this._config.baseUrl.replace(/\\/+$/, \"\");\n  }\n\n  async store(key: string, content: string | Uint8Array): Promise<void> {\n    try {\n      const s3 = await getS3Module();\n      const client = this._getClient(s3);\n      const body = typeof content === \"string\" ? Buffer.from(content, \"utf8\") : content;\n\n      const command = new s3.PutObjectCommand({\n        Bucket: this._config.bucket,\n        Key: this._s3Key(key),\n        Body: body,\n        ContentType: this._contentType(key),\n      });\n\n      await client.send(command);\n    } catch (err) {\n      if (err instanceof StorageError) throw err;\n      throw new StorageError(\n        `Failed to store ${key}: ${err instanceof Error ? err.message : String(err)}`,\n        \"store\",\n      );\n    }\n  }\n\n  async delete(prefix: string): Promise<void> {\n    try {\n      const s3 = await getS3Module();\n      const client = this._getClient(s3);\n      const s3Prefix = this._s3Key(prefix);\n\n      let continuationToken: string | undefined;\n      do {\n        const listInput: Record<string, unknown> = {\n          Bucket: this._config.bucket,\n          Prefix: s3Prefix,\n        };\n        if (continuationToken) listInput[\"ContinuationToken\"] = continuationToken;\n\n        const listCommand = new s3.ListObjectsV2Command(listInput);\n        const response = (await client.send(listCommand)) as {\n          Contents?: Array<{ Key?: string }>;\n          IsTruncated?: boolean;\n          NextContinuationToken?: string;\n        };\n\n        const objects = response.Contents;\n        if (!objects || objects.length === 0) break;\n\n        const deleteCommand = new s3.DeleteObjectsCommand({\n          Bucket: this._config.bucket,\n          Delete: {\n            Objects: objects.map((obj) => ({ Key: obj.Key })),\n            Quiet: true,\n          },\n        });\n        await client.send(deleteCommand);\n\n        continuationToken = response.IsTruncated\n          ? response.NextContinuationToken\n          : undefined;\n      } while (continuationToken);\n    } catch (err) {\n      if (err instanceof StorageError) throw err;\n      throw new StorageError(\n        `Failed to delete ${prefix}: ${err instanceof Error ? err.message : String(err)}`,\n        \"delete\",\n      );\n    }\n  }\n\n  async read(key: string): Promise<string | Uint8Array | null> {\n    try {\n      const s3 = await getS3Module();\n      const client = this._getClient(s3);\n\n      const command = new s3.GetObjectCommand({\n        Bucket: this._config.bucket,\n        Key: this._s3Key(key),\n      });\n\n      const response = (await client.send(command)) as {\n        Body?: { transformToString(): Promise<string> };\n      };\n\n      if (!response.Body) return null;\n      return response.Body.transformToString();\n    } catch (err) {\n      // S3 returns NoSuchKey for missing objects\n      const code = (err as { name?: string }).name;\n      if (code === \"NoSuchKey\") return null;\n      if (err instanceof StorageError) throw err;\n      throw new StorageError(\n        `Failed to read ${key}: ${err instanceof Error ? err.message : String(err)}`,\n        \"read\",\n      );\n    }\n  }\n\n  async updateMetadata(\n    shlId: string,\n    updater: (current: SHLMetadata) => SHLMetadata | null,\n  ): Promise<SHLMetadata | null> {\n    const key = `${shlId}/metadata.json`;\n    const raw = await this.read(key);\n    if (raw === null) return null;\n\n    const current = JSON.parse(raw as string) as SHLMetadata;\n    const updated = updater(current);\n    if (updated === null) return null;\n\n    await this.store(key, JSON.stringify(updated));\n    return updated;\n  }\n\n  private _getClient(s3: S3Module): S3ClientInstance {\n    if (!this._client) {\n      this._client = new s3.S3Client({ region: this._config.region });\n    }\n    return this._client;\n  }\n\n  private _s3Key(key: string): string {\n    const prefix = this._config.prefix?.replace(/\\/+$/, \"\");\n    return prefix ? `${prefix}/${key}` : key;\n  }\n\n  private _contentType(key: string): string {\n    if (key.endsWith(\".jwe\")) return \"application/jose\";\n    if (key.endsWith(\".json\")) return \"application/json\";\n    return \"application/octet-stream\";\n  }\n}\n"]}

package/dist/storage-CHi9vLD_.d.cts

@@ -0,0 +1,82 @@
+import { b as SHLStorage } from './types-yk0mDByJ.cjs';
+
+/**
+ * Configuration for local filesystem SHL storage.
+ */
+interface LocalStorageConfig {
+    /** Directory path for storing SHL files */
+    directory: string;
+    /** Base URL for serving the files (trailing slashes are stripped) */
+    baseUrl: string;
+}
+/**
+ * Local filesystem storage for SMART Health Links.
+ * Useful for development and testing.
+ *
+ * Files are written to `{directory}/{key}`. The user's server
+ * maps `{baseUrl}/{shlId}` to reads from this directory.
+ *
+ * @example
+ * ```ts
+ * const storage = new SHL.LocalStorage({
+ *   directory: "./shl-data",
+ *   baseUrl: "http://localhost:3000/shl",
+ * });
+ * ```
+ */
+declare class LocalStorage implements SHLStorage {
+    private readonly _config;
+    constructor(config: LocalStorageConfig);
+    /** Returns the storage configuration. */
+    get config(): LocalStorageConfig;
+    /** Base URL with trailing slashes stripped. */
+    get baseUrl(): string;
+    store(key: string, content: string | Uint8Array): Promise<void>;
+    delete(prefix: string): Promise<void>;
+}
+/**
+ * Configuration for S3-based SHL storage.
+ */
+interface S3StorageConfig {
+    /** S3 bucket name */
+    bucket: string;
+    /** AWS region */
+    region: string;
+    /** Optional key prefix */
+    prefix?: string;
+    /** Base URL for serving the files */
+    baseUrl: string;
+}
+/**
+ * S3-backed storage for SMART Health Links.
+ *
+ * Requires `@aws-sdk/client-s3` as a peer dependency — install it separately:
+ * ```
+ * npm install @aws-sdk/client-s3
+ * ```
+ *
+ * @example
+ * ```ts
+ * const storage = new SHL.S3Storage({
+ *   bucket: "my-shl-bucket",
+ *   region: "us-east-1",
+ *   baseUrl: "https://shl.example.com",
+ * });
+ * ```
+ */
+declare class S3Storage implements SHLStorage {
+    private readonly _config;
+    private _client?;
+    constructor(config: S3StorageConfig);
+    /** Returns the storage configuration. */
+    get config(): S3StorageConfig;
+    /** Base URL with trailing slashes stripped. */
+    get baseUrl(): string;
+    store(key: string, content: string | Uint8Array): Promise<void>;
+    delete(prefix: string): Promise<void>;
+    private _getClient;
+    private _s3Key;
+    private _contentType;
+}
+
+export { LocalStorage as L, S3Storage as S, type LocalStorageConfig as a, type S3StorageConfig as b };