@haverstack/server 0.8.0 → 0.9.0

package/dist/stack.js

@@ -0,0 +1,50 @@
+import { LocalAdapter, NativeTokenStore, defaultTokenStorePath } from '@haverstack/adapter-local';
+import { ARTICLE, BOOKMARK, CONTACT, NOTE, PAGE, PHOTO, PLACE, TASK, defineCommonsTypes, } from '@haverstack/commons';
+import { Stack } from '@haverstack/core';
+import { AuthNonceStore, defaultNonceStorePath } from './lib/nonceStore.js';
+import { QueryWorkerPool } from './lib/queryWorker/pool.js';
+import { ChangeStreamRegistry } from './lib/changeStreams.js';
+export async function initStack(config, logger) {
+    // openOrInitialize() decides between open and create without a TOCTOU
+    // gap. entityId goes in as a lazy provider so openOrInitialize()'s own
+    // owner-mismatch check, which throws, never runs on the open path —
+    // ENTITY_ID divergence is a warning below, not a failure — and so a
+    // missing ENTITY_ID is an error only when creating a database.
+    const adapter = await LocalAdapter.openOrInitialize({
+        path: config.dbPath,
+        entityId: () => {
+            if (!config.entityId) {
+                throw new Error('ENTITY_ID is required when initializing a new database (DB_PATH does not exist yet)');
+            }
+            return config.entityId;
+        },
+        timezone: config.timezone,
+    });
+    if (config.entityId && config.entityId !== adapter.ownerEntityId) {
+        logger.warn({ configuredEntityId: config.entityId, storedOwnerEntityId: adapter.ownerEntityId }, "ENTITY_ID does not match the stack's stored owner; the configured value is ignored");
+    }
+    const stack = await Stack.create(adapter, config.ownerName
+        ? { ownerProfile: { name: config.ownerName, handle: config.ownerHandle ?? undefined } }
+        : undefined);
+    // Opt-in (SEED_COMMONS_TYPES). defineType() is idempotent — an identical
+    // schema is a no-op preserving createdAt — so this is safe every boot.
+    if (config.seedCommonsTypes) {
+        await defineCommonsTypes(stack, [NOTE, BOOKMARK, TASK, CONTACT, ARTICLE, PLACE, PAGE, PHOTO]);
+    }
+    // Composed as a separate part rather than sniffed off the adapter: auth
+    // material lives in its own file beside stack.db (not inside the
+    // portable stack export) per docs/spec/wire-format.md § Authentication.
+    const tokens = await NativeTokenStore.open({ path: defaultTokenStorePath(config.dbPath) });
+    const nonces = AuthNonceStore.open(defaultNonceStorePath(config.dbPath));
+    // Spawned only once the adapter has opened and seeded stack.db: each
+    // worker opens its own connection to that same file, and idempotent
+    // seeding makes the race survivable rather than worth running.
+    const queryWorker = new QueryWorkerPool({
+        init: { dbPath: config.dbPath },
+        poolSize: config.queryWorkerPoolSize,
+        queueLimit: config.queryQueueLimit,
+        logger,
+    });
+    return { adapter, stack, tokens, nonces, queryWorker, changeStreams: new ChangeStreamRegistry() };
+}
+//# sourceMappingURL=stack.js.map

package/dist/stack.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stack.js","sourceRoot":"","sources":["../src/stack.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAClG,OAAO,EACL,OAAO,EACP,QAAQ,EACR,OAAO,EACP,IAAI,EACJ,IAAI,EACJ,KAAK,EACL,KAAK,EACL,IAAI,EACJ,kBAAkB,GACnB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAIzC,OAAO,EAAE,cAAc,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5E,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAqB9D,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,MAAc,EAAE,MAAc;IAC5D,sEAAsE;IACtE,uEAAuE;IACvE,oEAAoE;IACpE,oEAAoE;IACpE,+DAA+D;IAC/D,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,gBAAgB,CAAC;QAClD,IAAI,EAAE,MAAM,CAAC,MAAM;QACnB,QAAQ,EAAE,GAAG,EAAE;YACb,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACrB,MAAM,IAAI,KAAK,CACb,qFAAqF,CACtF,CAAC;YACJ,CAAC;YACD,OAAO,MAAM,CAAC,QAAQ,CAAC;QACzB,CAAC;QACD,QAAQ,EAAE,MAAM,CAAC,QAAQ;KAC1B,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,CAAC,aAAa,EAAE,CAAC;QACjE,MAAM,CAAC,IAAI,CACT,EAAE,kBAAkB,EAAE,MAAM,CAAC,QAAQ,EAAE,mBAAmB,EAAE,OAAO,CAAC,aAAa,EAAE,EACnF,oFAAoF,CACrF,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,MAAM,CAC9B,OAAO,EACP,MAAM,CAAC,SAAS;QACd,CAAC,CAAC,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,WAAW,IAAI,SAAS,EAAE,EAAE;QACvF,CAAC,CAAC,SAAS,CACd,CAAC;IAEF,yEAAyE;IACzE,uEAAuE;IACvE,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;QAC5B,MAAM,kBAAkB,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;IAChG,CAAC;IAED,wEAAwE;IACxE,iEAAiE;IACjE,wEAAwE;IACxE,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,qBAAqB,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC3F,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IAEzE,qEAAqE;IACrE,oEAAoE;IACpE,+DAA+D;IAC/D,MAAM,WAAW,GAAG,IAAI,eAAe,CAAC;QACtC,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE;QAC/B,QAAQ,EAAE,MAAM,CAAC,mBAAmB;QACpC,UAAU,EAAE,MAAM,CAAC,eAAe;QAClC,MAAM;KACP,CAAC,CAAC;IAEH,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,aAAa,EAAE,IAAI,oBAAoB,EAAE,EAAE,CAAC;AACpG,CAAC"}

package/dist/testing.d.ts

@@ -0,0 +1,49 @@
+/**
+ * Test-only building blocks for driving a real @haverstack/server. This
+ * package's own route tests use `createTestContext`/`testConfig` with
+ * `createApp` + Hono's in-process `app.request()` (no socket — see
+ * tests/setup.ts's `buildTestApp`/`req`); `startTestServer` goes one step
+ * further and actually listens, for a consumer whose client (APIAdapter or
+ * otherwise) needs a real URL to fetch against rather than a mocked one.
+ * Not for production use: fixed entity/token values, single-worker pool.
+ */
+import type { Logger } from 'pino';
+import type { Config } from './config.js';
+import type { StackContext } from './stack.js';
+export declare const TEST_ENTITY_ID = "did:key:test-entity-id-00000001";
+export declare const TEST_TOKEN = "test-bearer-token";
+export declare const OTHER_ENTITY_ID = "did:key:other-entity-id-00000002";
+export declare const TEST_BASE_URL = "https://stack.example.com";
+export declare const logger: Logger;
+/**
+ * Each caller gets its own isolated temp directory so the SQLiteAdapter's
+ * sibling `attachments/` folder never collides between parallel test runs.
+ */
+export declare function tempDbPath(): string;
+export type TestContextOpts = {
+    /**
+     * IANA timezone string, or `undefined` to opt out of one. Note: a plain
+     * default parameter can't tell "omitted" from "explicitly undefined"
+     * (both trigger the default), so this must be an options bag — pass
+     * `{ timezone: undefined }` deliberately, not the bare value.
+     */
+    timezone?: string;
+};
+export declare function createTestContext(dbPath: string, opts?: TestContextOpts): Promise<StackContext>;
+export declare function testConfig(dbPath: string, opts?: TestContextOpts): Config;
+export type TestServer = {
+    /** The real, reachable base URL — pass straight to APIAdapter.open({ url }). */
+    url: string;
+    ctx: StackContext;
+    config: Config;
+    /** Stops accepting connections and releases every resource, including the temp db. */
+    close(): Promise<void>;
+};
+/**
+ * Spins up a real, listening @haverstack/server on an ephemeral localhost
+ * port, backed by a throwaway LocalAdapter file — for exercising an HTTP
+ * client against the actual wire protocol rather than a mocked fetch.
+ * Owner auth: `Authorization: Bearer ${TEST_TOKEN}`.
+ */
+export declare function startTestServer(opts?: TestContextOpts): Promise<TestServer>;
+//# sourceMappingURL=testing.d.ts.map

package/dist/testing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"testing.d.ts","sourceRoot":"","sources":["../src/testing.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAaH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,MAAM,CAAC;AAMnC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/C,eAAO,MAAM,cAAc,oCAAoC,CAAC;AAChE,eAAO,MAAM,UAAU,sBAAsB,CAAC;AAC9C,eAAO,MAAM,eAAe,qCAAqC,CAAC;AAMlE,eAAO,MAAM,aAAa,8BAA8B,CAAC;AAEzD,eAAO,MAAM,MAAM,EAAE,MAAkC,CAAC;AAExD;;;GAGG;AACH,wBAAgB,UAAU,IAAI,MAAM,CAInC;AAED,MAAM,MAAM,eAAe,GAAG;IAC5B;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,MAAM,EACd,IAAI,GAAE,eAAqC,GAC1C,OAAO,CAAC,YAAY,CAAC,CAgBvB;AAED,wBAAgB,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,GAAE,eAAqC,GAAG,MAAM,CAoB9F;AAkBD,MAAM,MAAM,UAAU,GAAG;IACvB,gFAAgF;IAChF,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,YAAY,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,sFAAsF;IACtF,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB,CAAC;AAEF;;;;;GAKG;AACH,wBAAsB,eAAe,CACnC,IAAI,GAAE,eAAqC,GAC1C,OAAO,CAAC,UAAU,CAAC,CA0BrB"}

package/dist/testing.js

@@ -0,0 +1,130 @@
+/**
+ * Test-only building blocks for driving a real @haverstack/server. This
+ * package's own route tests use `createTestContext`/`testConfig` with
+ * `createApp` + Hono's in-process `app.request()` (no socket — see
+ * tests/setup.ts's `buildTestApp`/`req`); `startTestServer` goes one step
+ * further and actually listens, for a consumer whose client (APIAdapter or
+ * otherwise) needs a real URL to fetch against rather than a mocked one.
+ * Not for production use: fixed entity/token values, single-worker pool.
+ */
+import { tmpdir } from 'node:os';
+import { dirname, join } from 'node:path';
+import { randomBytes } from 'node:crypto';
+import { rm } from 'node:fs/promises';
+import { mkdirSync } from 'node:fs';
+import { createServer } from 'node:net';
+import { serve } from '@hono/node-server';
+import { LocalAdapter, NativeTokenStore, defaultTokenStorePath } from '@haverstack/adapter-local';
+import { Stack } from '@haverstack/core';
+import { authOriginFromUrl } from '@haverstack/core/wire';
+import pino from 'pino';
+import { createApp } from './app.js';
+import { createShutdownHandler } from './shutdown.js';
+import { AuthNonceStore, defaultNonceStorePath } from './lib/nonceStore.js';
+import { QueryWorkerPool } from './lib/queryWorker/pool.js';
+import { ChangeStreamRegistry } from './lib/changeStreams.js';
+export const TEST_ENTITY_ID = 'did:key:test-entity-id-00000001';
+export const TEST_TOKEN = 'test-bearer-token';
+export const OTHER_ENTITY_ID = 'did:key:other-entity-id-00000002';
+// Matches @haverstack/conformance-fixtures' AUTH_FIXTURE_ORIGIN — the auth
+// handshake fixtures carry real signatures over this exact origin, so
+// anything replaying them (createTestContext/testConfig, in-process
+// app.request()) must present itself as it. startTestServer, which actually
+// listens, uses its own real origin instead — see below.
+export const TEST_BASE_URL = 'https://stack.example.com';
+export const logger = pino({ level: 'silent' });
+/**
+ * Each caller gets its own isolated temp directory so the SQLiteAdapter's
+ * sibling `attachments/` folder never collides between parallel test runs.
+ */
+export function tempDbPath() {
+    const dir = join(tmpdir(), `haverstack-test-${randomBytes(8).toString('hex')}`);
+    mkdirSync(dir, { recursive: true });
+    return join(dir, 'stack.db');
+}
+export async function createTestContext(dbPath, opts = { timezone: 'UTC' }) {
+    const adapter = await LocalAdapter.initialize({
+        path: dbPath,
+        entityId: TEST_ENTITY_ID,
+        ...(opts.timezone !== undefined && { timezone: opts.timezone }),
+    });
+    const stack = await Stack.create(adapter);
+    const tokens = await NativeTokenStore.open({ path: defaultTokenStorePath(dbPath) });
+    const nonces = AuthNonceStore.open(defaultNonceStorePath(dbPath));
+    const queryWorker = new QueryWorkerPool({
+        init: { dbPath },
+        poolSize: 1,
+        queueLimit: 64,
+        logger,
+    });
+    return { adapter, stack, tokens, nonces, queryWorker, changeStreams: new ChangeStreamRegistry() };
+}
+export function testConfig(dbPath, opts = { timezone: 'UTC' }) {
+    return {
+        port: 3000,
+        dbPath,
+        entityId: TEST_ENTITY_ID,
+        ownerName: null,
+        ownerHandle: null,
+        timezone: opts.timezone,
+        ownerToken: TEST_TOKEN,
+        corsOrigins: '*',
+        baseUrl: TEST_BASE_URL,
+        authOrigin: authOriginFromUrl(TEST_BASE_URL),
+        maxAttachmentBytes: 50 * 1024 * 1024,
+        maxContentBytes: 1 * 1024 * 1024,
+        queryTimeoutMs: 10_000,
+        queryWorkerPoolSize: 1,
+        queryQueueLimit: 64,
+        seedCommonsTypes: false,
+        shutdownTimeoutMs: 10_000,
+    };
+}
+/** Asks the OS for a free localhost port, then immediately releases it. */
+async function getFreePort() {
+    return new Promise((resolve, reject) => {
+        const probe = createServer();
+        probe.once('error', reject);
+        probe.listen(0, '127.0.0.1', () => {
+            const address = probe.address();
+            const port = typeof address === 'object' && address ? address.port : undefined;
+            probe.close(() => {
+                if (port)
+                    resolve(port);
+                else
+                    reject(new Error('could not allocate a free port'));
+            });
+        });
+    });
+}
+/**
+ * Spins up a real, listening @haverstack/server on an ephemeral localhost
+ * port, backed by a throwaway LocalAdapter file — for exercising an HTTP
+ * client against the actual wire protocol rather than a mocked fetch.
+ * Owner auth: `Authorization: Bearer ${TEST_TOKEN}`.
+ */
+export async function startTestServer(opts = { timezone: 'UTC' }) {
+    const dbPath = tempDbPath();
+    const ctx = await createTestContext(dbPath, opts);
+    const port = await getFreePort();
+    const url = `http://127.0.0.1:${port}`;
+    const config = {
+        ...testConfig(dbPath, opts),
+        port,
+        baseUrl: url,
+        authOrigin: authOriginFromUrl(url),
+    };
+    const app = createApp(ctx, config, logger);
+    const server = await new Promise((resolve) => {
+        const s = serve({ fetch: app.fetch, port }, () => resolve(s));
+    });
+    // Reuses the exact production teardown sequence (see src/shutdown.ts) —
+    // a short grace period since a stuck test should fail fast, not hang.
+    const shutdown = createShutdownHandler(server, ctx, logger, 2_000);
+    const close = async () => {
+        await shutdown('test-teardown');
+        await rm(dirname(dbPath), { recursive: true, force: true }).catch(() => { });
+    };
+    return { url, ctx, config, close };
+}
+//# sourceMappingURL=testing.js.map

package/dist/testing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"testing.js","sourceRoot":"","sources":["../src/testing.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AACtC,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AACxC,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAClG,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,IAAI,MAAM,MAAM,CAAC;AAExB,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AACrC,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,EAAE,cAAc,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5E,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAI9D,MAAM,CAAC,MAAM,cAAc,GAAG,iCAAiC,CAAC;AAChE,MAAM,CAAC,MAAM,UAAU,GAAG,mBAAmB,CAAC;AAC9C,MAAM,CAAC,MAAM,eAAe,GAAG,kCAAkC,CAAC;AAClE,2EAA2E;AAC3E,sEAAsE;AACtE,oEAAoE;AACpE,4EAA4E;AAC5E,yDAAyD;AACzD,MAAM,CAAC,MAAM,aAAa,GAAG,2BAA2B,CAAC;AAEzD,MAAM,CAAC,MAAM,MAAM,GAAW,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;AAExD;;;GAGG;AACH,MAAM,UAAU,UAAU;IACxB,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,mBAAmB,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAChF,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,OAAO,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;AAC/B,CAAC;AAYD,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAAc,EACd,OAAwB,EAAE,QAAQ,EAAE,KAAK,EAAE;IAE3C,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,UAAU,CAAC;QAC5C,IAAI,EAAE,MAAM;QACZ,QAAQ,EAAE,cAAc;QACxB,GAAG,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;KAChE,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,qBAAqB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACpF,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC,CAAC;IAClE,MAAM,WAAW,GAAG,IAAI,eAAe,CAAC;QACtC,IAAI,EAAE,EAAE,MAAM,EAAE;QAChB,QAAQ,EAAE,CAAC;QACX,UAAU,EAAE,EAAE;QACd,MAAM;KACP,CAAC,CAAC;IACH,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,aAAa,EAAE,IAAI,oBAAoB,EAAE,EAAE,CAAC;AACpG,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,MAAc,EAAE,OAAwB,EAAE,QAAQ,EAAE,KAAK,EAAE;IACpF,OAAO;QACL,IAAI,EAAE,IAAI;QACV,MAAM;QACN,QAAQ,EAAE,cAAc;QACxB,SAAS,EAAE,IAAI;QACf,WAAW,EAAE,IAAI;QACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,UAAU,EAAE,UAAU;QACtB,WAAW,EAAE,GAAG;QAChB,OAAO,EAAE,aAAa;QACtB,UAAU,EAAE,iBAAiB,CAAC,aAAa,CAAC;QAC5C,kBAAkB,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;QACpC,eAAe,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI;QAChC,cAAc,EAAE,MAAM;QACtB,mBAAmB,EAAE,CAAC;QACtB,eAAe,EAAE,EAAE;QACnB,gBAAgB,EAAE,KAAK;QACvB,iBAAiB,EAAE,MAAM;KAC1B,CAAC;AACJ,CAAC;AAED,2EAA2E;AAC3E,KAAK,UAAU,WAAW;IACxB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC5B,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE;YAChC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;YAChC,MAAM,IAAI,GAAG,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YAC/E,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE;gBACf,IAAI,IAAI;oBAAE,OAAO,CAAC,IAAI,CAAC,CAAC;;oBACnB,MAAM,CAAC,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC,CAAC;YAC3D,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAWD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,OAAwB,EAAE,QAAQ,EAAE,KAAK,EAAE;IAE3C,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,MAAM,GAAG,GAAG,MAAM,iBAAiB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAClD,MAAM,IAAI,GAAG,MAAM,WAAW,EAAE,CAAC;IACjC,MAAM,GAAG,GAAG,oBAAoB,IAAI,EAAE,CAAC;IACvC,MAAM,MAAM,GAAW;QACrB,GAAG,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC;QAC3B,IAAI;QACJ,OAAO,EAAE,GAAG;QACZ,UAAU,EAAE,iBAAiB,CAAC,GAAG,CAAC;KACnC,CAAC;IACF,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IAE3C,MAAM,MAAM,GAAG,MAAM,IAAI,OAAO,CAA2B,CAAC,OAAO,EAAE,EAAE;QACrE,MAAM,CAAC,GAAG,KAAK,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,wEAAwE;IACxE,sEAAsE;IACtE,MAAM,QAAQ,GAAG,qBAAqB,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IACnE,MAAM,KAAK,GAAG,KAAK,IAAI,EAAE;QACvB,MAAM,QAAQ,CAAC,eAAe,CAAC,CAAC;QAChC,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAC9E,CAAC,CAAC;IAEF,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AACrC,CAAC"}

package/{src/types.ts → dist/types.d.ts}

@@ -1,9 +1,9 @@
 import type { TokenSession } from '@haverstack/core';
-
 /** Hono context variable map shared across all route files. */
 export type AppEnv = {
-  Variables: {
-    auth: TokenSession | null;
-    requestId: string;
-  };
+    Variables: {
+        auth: TokenSession | null;
+        requestId: string;
+    };
 };
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAErD,+DAA+D;AAC/D,MAAM,MAAM,MAAM,GAAG;IACnB,SAAS,EAAE;QACT,IAAI,EAAE,YAAY,GAAG,IAAI,CAAC;QAC1B,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;CACH,CAAC"}

package/dist/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/{src/wireError.ts → dist/wireError.d.ts}

@@ -1,7 +1,6 @@
 import type { Context } from 'hono';
 import type { ContentfulStatusCode } from 'hono/utils/http-status';
 import type { AppEnv } from './types.js';
-
 /**
  * `{ error: { code, message } }` responses for failures outside the core
  * `StackError` taxonomy — thrown core errors instead flow through
@@ -11,11 +10,5 @@ import type { AppEnv } from './types.js';
  * docs/spec/wire-format.md § Error responses ("no verified DID behind the
  * request at all" predates any Stack operation).
  */
-export function wireError(
-  c: Context<AppEnv>,
-  status: ContentfulStatusCode,
-  code: string,
-  message: string,
-): Response {
-  return c.json({ error: { code, message } }, status);
-}
+export declare function wireError(c: Context<AppEnv>, status: ContentfulStatusCode, code: string, message: string): Response;
+//# sourceMappingURL=wireError.d.ts.map

package/dist/wireError.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wireError.d.ts","sourceRoot":"","sources":["../src/wireError.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACpC,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AACnE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAEzC;;;;;;;;GAQG;AACH,wBAAgB,SAAS,CACvB,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,EAClB,MAAM,EAAE,oBAAoB,EAC5B,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,GACd,QAAQ,CAEV"}

package/dist/wireError.js

@@ -0,0 +1,13 @@
+/**
+ * `{ error: { code, message } }` responses for failures outside the core
+ * `StackError` taxonomy — thrown core errors instead flow through
+ * `errorMiddleware` via `serializeError()`. `code` is a server-local
+ * extension for these (not `WireErrorCode`): `unauthorized` for a missing
+ * or invalid bearer token has no core class, per
+ * docs/spec/wire-format.md § Error responses ("no verified DID behind the
+ * request at all" predates any Stack operation).
+ */
+export function wireError(c, status, code, message) {
+    return c.json({ error: { code, message } }, status);
+}
+//# sourceMappingURL=wireError.js.map

package/dist/wireError.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wireError.js","sourceRoot":"","sources":["../src/wireError.ts"],"names":[],"mappings":"AAIA;;;;;;;;GAQG;AACH,MAAM,UAAU,SAAS,CACvB,CAAkB,EAClB,MAA4B,EAC5B,IAAY,EACZ,OAAe;IAEf,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;AACtD,CAAC"}

package/package.json

@@ -1,11 +1,45 @@
 {
   "name": "@haverstack/server",
-  "version": "0.8.0",
+  "version": "0.9.0",
   "description": "Reference server implementation for Haverstack",
   "type": "module",
   "engines": {
     "node": ">=22.9"
   },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/haverstack/server.git"
+  },
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": "./dist/index.js",
+      "types": "./dist/index.d.ts"
+    },
+    "./testing": {
+      "import": "./dist/testing.js",
+      "types": "./dist/testing.d.ts"
+    },
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "dist"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "dev": "tsx watch --env-file-if-exists=.env src/main.ts",
+    "build": "tsc -p tsconfig.build.json",
+    "start": "node --env-file-if-exists=.env dist/main.js",
+    "prepublishOnly": "pnpm run build",
+    "test": "vitest run",
+    "typecheck": "tsc --noEmit",
+    "lint": "eslint src tests",
+    "format": "prettier --write .",
+    "format:check": "prettier --check ."
+  },
   "dependencies": {
     "@haverstack/adapter-local": "^0.30.0",
     "@haverstack/commons": "^0.25.0",
@@ -29,14 +63,5 @@
     "vite": "^8.2.1",
     "vitest": "^4.1.11"
   },
-  "scripts": {
-    "dev": "tsx watch --env-file-if-exists=.env src/index.ts",
-    "build": "tsc -p tsconfig.build.json",
-    "start": "node --env-file-if-exists=.env dist/index.js",
-    "test": "vitest run",
-    "typecheck": "tsc --noEmit",
-    "lint": "eslint src tests",
-    "format": "prettier --write .",
-    "format:check": "prettier --check ."
-  }
-}
+  "packageManager": "pnpm@11.24.0+sha512.bd27e345e976dcb0be0b7a1228217b049a817e21b1f355c90dbe7dc46671895a8bc1e6d06c24554505ea93ea0b45f489a27ec1bfbc8de6a9659fca0f16fa0000"
+}

package/.claude/settings.local.json

@@ -1,22 +0,0 @@
-{
-  "permissions": {
-    "allow": [
-      "Bash(openssl rand *)",
-      "Bash(pnpm ls *)",
-      "Bash(find / -path \"*haverstack/core*\" -name \"*.js\")",
-      "Read(//var/home/jen/Dev/haverstack/core/packages/core/**)",
-      "Bash(node -e \"const {generateId} = require\\('./dist/id.js'\\); console.log\\(generateId\\(\\)\\)\")",
-      "Bash(node --input-type=module -e \"import {generateId} from '/var/home/jen/Dev/haverstack/core/packages/core/dist/id.js'; console.log\\(generateId\\(\\)\\)\")",
-      "Bash(node *)",
-      "Bash(echo \"exit: $?\")",
-      "Bash(pnpm -v)",
-      "Bash(pnpm help *)",
-      "Bash(python3 -c ' *)",
-      "Bash(gh issue *)",
-      "Bash(pnpm typecheck *)",
-      "Bash(pnpm test *)",
-      "Bash(pnpm lint *)",
-      "Bash(pnpm format *)"
-    ]
-  }
-}

package/.dockerignore

@@ -1,10 +0,0 @@
-node_modules
-dist
-.git
-.github
-tests
-*.db
-attachments/
-.env
-.env.local
-coverage/

package/.env.example

@@ -1,90 +0,0 @@
-# Port to listen on (default: 3000)
-PORT=3000
-
-# Path to the SQLite database file.
-# On first run (file does not exist), the database is initialized.
-# On subsequent runs, the existing database is opened.
-DB_PATH=./stack.db
-
-# Owner entity ID. Required only on first run when the DB is being initialized.
-# Must be a DID (e.g. "did:key:z6Mk..."). Generate one with:
-#   node -e "require('@haverstack/core/did').generateDidKeypair().then(k => console.log(k.did))"
-# Keep the corresponding private key — this only prints the public DID.
-ENTITY_ID=
-
-# Owner's display name (optional). When set, the server ensures the owner's
-# own _entity profile record exists on every open — safe to leave set
-# permanently. No profile record is created if omitted.
-OWNER_NAME=
-
-# Owner's handle (optional). Only used alongside OWNER_NAME.
-OWNER_HANDLE=
-
-# IANA timezone string (optional). Used only on first run. No default — an
-# absent timezone stays absent (omitted from discovery), rather than
-# asserting a timezone the stack was never actually given.
-TIMEZONE=
-
-# Master bearer token for the stack owner. This is a break-glass credential:
-# the DID challenge-response handshake lets a client holding the owner's key
-# authenticate without it, but OWNER_TOKEN remains required to bootstrap the
-# server and manage other tokens via POST /tokens. Keep this secret and
-# treat it like a root password. All other tokens are issued via the API
-# and stored in the DB.
-# Generate with `openssl rand -hex 32`
-OWNER_TOKEN=
-
-# Allowed CORS origins. Default: empty (no cross-origin access).
-# Set to * to allow all origins, or a comma-separated list:
-#   CORS_ORIGINS=https://app.example.com,https://admin.example.com
-# See docs/deployment.md for guidance.
-CORS_ORIGINS=
-
-# Canonical public base URL of this server. Required: it's the origin the
-# DID challenge-response handshake (POST /auth/challenge, POST /auth/token)
-# signs and verifies against, and MUST be this server's own public origin —
-# never auto-detected from a request header, which a client controls.
-# Example: https://stack.example.com
-BASE_URL=
-
-# Maximum upload size for attachments in bytes (default: 52428800 = 50 MB).
-MAX_ATTACHMENT_BYTES=52428800
-
-# Maximum size of a JSON request body in bytes — record bodies, PATCH merge
-# patches, and every other JSON-accepting route (default: 1048576 = 1 MB).
-# Applies globally, except POST /attachments, which is bounded by
-# MAX_ATTACHMENT_BYTES instead. Declared to clients via maxContentBytes in
-# GET /.well-known/stack.
-MAX_CONTENT_BYTES=1048576
-
-# Deadline in milliseconds for a GET /records or POST /records/query search
-# (default: 10000 = 10s). Bounds execution only — the clock starts when the
-# search reaches a worker, so waiting for a free worker makes a request slow,
-# never failed. A query still executing past it is abandoned with 503 (code
-# "timeout"). See docs/deployment.md#bounding-query-cost.
-QUERY_TIMEOUT_MS=10000
-
-# Number of worker threads a slow search can occupy without blocking other
-# requests (default: 2, max 32). See docs/deployment.md#bounding-query-cost.
-QUERY_WORKER_POOL_SIZE=2
-
-# How many searches may queue for a free worker before the server sheds load
-# with 503 (code "timeout") rather than queueing further (default: 64). This
-# is what bounds the waiting that QUERY_TIMEOUT_MS deliberately does not.
-# See docs/deployment.md#bounding-query-cost.
-QUERY_QUEUE_LIMIT=64
-
-# Register the Schema Commons types (org.haverstack/note, bookmark, task,
-# contact, article, place, page, photo) from @haverstack/commons on startup
-# (default: false). Off by default because the package is Draft status and
-# registering types is not free — they show up in GET /types and in every
-# app's type cache. See docs/deployment.md#schema-commons-seeding.
-SEED_COMMONS_TYPES=false
-
-# How long shutdown waits (in milliseconds) for open/keep-alive connections
-# to drain on server.close() before forcing them closed and finishing the
-# flush/close sequence anyway (default: 10000 = 10s).
-SHUTDOWN_TIMEOUT_MS=10000
-
-# See docs/deployment.md for production deployment guidance (TLS, CORS,
-# rate limiting, and public endpoint exposure).

package/.github/pull_request_template.md

@@ -1,23 +0,0 @@
-## Summary
-
-<!-- What changed, and why. Link any issue this closes. -->
-
-## Docs
-
-<!-- Does this change observable behavior — a route, status code, error code,
-     auth rule, or environment variable? If so, link the docs/ sections updated
-     in this PR (docs/api.md, docs/deployment.md, README's config table,
-     .env.example). If not, say "No behavior change."
-
-     If the change is to the wire contract itself rather than to this server's
-     implementation of it, the spec and conformance fixtures live in
-     haverstack/core — link that PR here. -->
-
-## Verification
-
-<!-- What you ran, and anything you checked by hand.
-     pnpm run format:check && pnpm run lint && pnpm typecheck && pnpm test -->
-
-## Notes for reviewers
-
-<!-- Optional: trade-offs, alternatives considered, follow-up work worth filing. -->

package/.github/workflows/ci.yml

@@ -1,55 +0,0 @@
-name: CI
-
-on:
-  push:
-    branches: [main]
-  pull_request:
-
-jobs:
-  format:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-      - uses: pnpm/action-setup@v4
-      - uses: actions/setup-node@v4
-        with:
-          node-version: 22
-          cache: pnpm
-      - run: pnpm install --frozen-lockfile
-      - run: pnpm run format:check
-
-  lint:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-      - uses: pnpm/action-setup@v4
-      - uses: actions/setup-node@v4
-        with:
-          node-version: 22
-          cache: pnpm
-      - run: pnpm install --frozen-lockfile
-      - run: pnpm run lint
-
-  typecheck:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-      - uses: pnpm/action-setup@v4
-      - uses: actions/setup-node@v4
-        with:
-          node-version: 22
-          cache: pnpm
-      - run: pnpm install --frozen-lockfile
-      - run: pnpm run typecheck
-
-  test:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-      - uses: pnpm/action-setup@v4
-      - uses: actions/setup-node@v4
-        with:
-          node-version: 22
-          cache: pnpm
-      - run: pnpm install --frozen-lockfile
-      - run: pnpm test