@mdbase-dev/connect-protocol 0.1.0-beta.176 → 0.1.0-beta.184

package/dist/application-contract.d.ts

@@ -7,6 +7,34 @@ export type MdbaseApplicationManifest = MdbaseAppManifest | LegacyMdbaseAppManif
 export type MdbaseApplicationRequirements = ApplicationRequirements | LegacyApplicationRequirements;
 export type MdbaseApplicationCapabilityRequirements = ApplicationCapabilityRequirements | LegacyApplicationCapabilityRequirements;
 export type MdbaseApplicationCapabilityId = ApplicationCapabilityId | LegacyApplicationCapabilityId;
+/**
+ * The declaration Connect registers and digests: the bundled manifest with its
+ * optional sections defaulted. Clients hash the same value to check that a
+ * registration describes the manifest they sent.
+ */
+export declare function normalizeApplicationManifest<T extends MdbaseApplicationManifest>(value: T): T & {
+    requirements: {
+        access: "full_collection";
+        contracts: [];
+        capabilities?: ApplicationCapabilityRequirements;
+        collection_kind?: "hosted";
+        people?: import("./people.js").ApplicationPeopleRequirement;
+        files?: import("./files.js").ApplicationFileRequirement;
+        configuration: import("./collection-setup.js").ConfigurationRequirement[];
+    } | {
+        contracts: import("./type-packs.js").ContractRequirement[];
+        collection_kind?: "hosted";
+        access: "full_collection";
+        capabilities?: LegacyApplicationCapabilityRequirements;
+        files?: import("./files.js").LegacyApplicationFileRequirement;
+        configuration: import("./collection-setup.js").ConfigurationRequirement[];
+    };
+    provisions: {
+        type_packs: import("./type-packs.js").TypePackProvision[];
+        configuration: import("./collection-setup.js").ConfigurationProvision[];
+    };
+    notifications: import("./application-declaration.js").ApplicationNotifications;
+};
 interface MdbaseAuthorizationSelection {
     operations?: CollectionOperation[];
     capabilities?: MdbaseApplicationCapabilityId[];

package/dist/application-contract.js

@@ -2,6 +2,27 @@ import { APPLICATION_SETUP_OPERATIONS, capabilityOperationsForContractVersion }
 import { applicationFileRequest } from "./files.js";
 import { connectError } from "./authorization-errors.js";
 export const DEFAULT_OPERATIONS = ["describe", "changes", "read", "query"];
+/**
+ * The declaration Connect registers and digests: the bundled manifest with its
+ * optional sections defaulted. Clients hash the same value to check that a
+ * registration describes the manifest they sent.
+ */
+export function normalizeApplicationManifest(value) {
+    const manifest = structuredClone(value);
+    return {
+        ...manifest,
+        requirements: {
+            configuration: [],
+            ...manifest.requirements
+        },
+        provisions: {
+            type_packs: [],
+            configuration: [],
+            ...manifest.provisions
+        },
+        notifications: manifest.notifications ?? { criteria: [] }
+    };
+}
 export function semanticContractVersion(requirements) {
     const version = requirements.capabilities === undefined ? 1 : requirements.capabilities?.contract_version;
     if (version !== 1 && version !== 2)

package/dist/index.d.ts

@@ -9,7 +9,7 @@ import type { ContractSetupChoice } from "./type-packs.js";
 import type { ApplicationAuthorizationProof } from "./application-authorization.js";
 export * from "./connect-problems.generated.js";
 export { MdbaseConnectError, connectError, connectProblem, type ConnectErrorContext } from "./authorization-errors.js";
-export { semanticContractVersion, authorizationOperations, authorizationFiles, validateAuthorizationSelection, declaredOperations, retainedCapabilities, DEFAULT_OPERATIONS, type MdbaseApplicationManifest, type MdbaseApplicationRequirements, type MdbaseApplicationCapabilityRequirements, type MdbaseApplicationCapabilityId } from "./application-contract.js";
+export { semanticContractVersion, authorizationOperations, authorizationFiles, validateAuthorizationSelection, declaredOperations, normalizeApplicationManifest, retainedCapabilities, DEFAULT_OPERATIONS, type MdbaseApplicationManifest, type MdbaseApplicationRequirements, type MdbaseApplicationCapabilityRequirements, type MdbaseApplicationCapabilityId } from "./application-contract.js";
 export * from "./files.js";
 export * from "./operations.js";
 export * from "./change-events.generated.js";
@@ -19,6 +19,7 @@ export * from "./capabilities.js";
 export * from "./application-authorization.js";
 export * from "./type-packs.js";
 export * from "./collection-setup.js";
+export { serviceUrl, validAuthorityTokenResponse } from "./service-urls.js";
 export declare const CONTROL_PROTOCOL_VERSION: 1;
 export { AUTHORIZATION_BINDING_PROTOCOL_VERSION as APPLICATION_AUTHORIZATION_PROTOCOL_VERSION } from "./compatibility.js";
 export declare const LOOPBACK_PROTOCOL_VERSION: 1;

package/dist/index.js

@@ -3,7 +3,7 @@ export * from "./records.js";
 import { YAML_DOCUMENT_RECORDS_CAPABILITY } from "./collection-setup.js";
 export * from "./connect-problems.generated.js";
 export { MdbaseConnectError, connectError, connectProblem } from "./authorization-errors.js";
-export { semanticContractVersion, authorizationOperations, authorizationFiles, validateAuthorizationSelection, declaredOperations, retainedCapabilities, DEFAULT_OPERATIONS } from "./application-contract.js";
+export { semanticContractVersion, authorizationOperations, authorizationFiles, validateAuthorizationSelection, declaredOperations, normalizeApplicationManifest, retainedCapabilities, DEFAULT_OPERATIONS } from "./application-contract.js";
 export * from "./files.js";
 export * from "./operations.js";
 export * from "./change-events.generated.js";
@@ -13,6 +13,7 @@ export * from "./capabilities.js";
 export * from "./application-authorization.js";
 export * from "./type-packs.js";
 export * from "./collection-setup.js";
+export { serviceUrl, validAuthorityTokenResponse } from "./service-urls.js";
 export const CONTROL_PROTOCOL_VERSION = 1;
 export { AUTHORIZATION_BINDING_PROTOCOL_VERSION as APPLICATION_AUTHORIZATION_PROTOCOL_VERSION } from "./compatibility.js";
 export const LOOPBACK_PROTOCOL_VERSION = 1;

package/dist/manifest.js

@@ -2,6 +2,7 @@ import { sha256 as sha256Bytes } from "@noble/hashes/sha2.js";
 import { bytesToHex, utf8ToBytes } from "@noble/hashes/utils.js";
 import { isMap, parseDocument } from "yaml";
 import { appManifestValidator as generatedAppManifestValidator, legacyAppManifestValidator as generatedLegacyAppManifestValidator } from "./manifest-validators.generated.js";
+import { normalizeApplicationManifest } from "./application-contract.js";
 import { RECORD_EXTENSIONS_CONFIGURATION_PATH } from "./collection-setup.js";
 import { isNativeRedirectUri } from "./index.js";
 export const APPLICATION_MANIFEST_MAX_BYTES = 524_288;
@@ -66,7 +67,7 @@ export function parseAppManifest(value, options = {}) {
     const result = validateAppManifest(value, options);
     if (!result.valid)
         throw new AppManifestValidationError(result.issues);
-    return normalizeManifest(value);
+    return normalizeApplicationManifest(value);
 }
 /** Validate and clone without changing capability IDs, file aliases, or version. */
 export function parseVersionedAppManifest(value, options = {}) {
@@ -74,24 +75,8 @@ export function parseVersionedAppManifest(value, options = {}) {
     if (!result.valid)
         throw new AppManifestValidationError(result.issues);
     return declaredContractVersion(value) === 1
-        ? { contractVersion: 1, manifest: normalizeManifest(value) }
-        : { contractVersion: 2, manifest: normalizeManifest(value) };
-}
-function normalizeManifest(value) {
-    const manifest = structuredClone(value);
-    return {
-        ...manifest,
-        requirements: {
-            configuration: [],
-            ...manifest.requirements
-        },
-        provisions: {
-            type_packs: [],
-            configuration: [],
-            ...manifest.provisions
-        },
-        notifications: manifest.notifications ?? { criteria: [] }
-    };
+        ? { contractVersion: 1, manifest: normalizeApplicationManifest(value) }
+        : { contractVersion: 2, manifest: normalizeApplicationManifest(value) };
 }
 export function formatManifestValidationIssues(issues) {
     return issues.map((issue) => `${issue.path || "/"} ${issue.message}`).join("; ");

package/dist/service-urls.d.ts

@@ -0,0 +1,11 @@
+/**
+ * A URL a client may send credentials or collection data to: HTTPS, or HTTP
+ * on a loopback host for development, with no embedded credentials.
+ */
+export declare function serviceUrl(value: unknown): URL | null;
+/**
+ * A token response's remote authority capability, bound to its collection:
+ * operation, sync and file endpoints on one service origin, each at the exact
+ * `/v1/authorities/<collection>/<endpoint>` path with no query or fragment.
+ */
+export declare function validAuthorityTokenResponse(value: unknown, collectionId: unknown): boolean;

package/dist/service-urls.js

@@ -0,0 +1,51 @@
+const LOOPBACK_HOSTS = new Set(["localhost", "127.0.0.1", "[::1]"]);
+const AUTHORITY_PATH = /^\/v1\/authorities\/([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})\/(operations|sync|files)$/i;
+/**
+ * A URL a client may send credentials or collection data to: HTTPS, or HTTP
+ * on a loopback host for development, with no embedded credentials.
+ */
+export function serviceUrl(value) {
+    if (typeof value !== "string")
+        return null;
+    let url;
+    try {
+        url = new URL(value);
+    }
+    catch {
+        return null;
+    }
+    const transport = url.protocol === "https:"
+        || (url.protocol === "http:" && LOOPBACK_HOSTS.has(url.hostname));
+    return transport && !url.username && !url.password ? url : null;
+}
+/**
+ * A token response's remote authority capability, bound to its collection:
+ * operation, sync and file endpoints on one service origin, each at the exact
+ * `/v1/authorities/<collection>/<endpoint>` path with no query or fragment.
+ */
+export function validAuthorityTokenResponse(value, collectionId) {
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        return false;
+    if (typeof collectionId !== "string")
+        return false;
+    const authority = value;
+    if (typeof authority.replica_id !== "string"
+        || authority.replica_id.length === 0
+        || typeof authority.access_token !== "string"
+        || authority.access_token.length === 0
+        || (authority.proof_public_key !== undefined
+            && (typeof authority.proof_public_key !== "string"
+                || authority.proof_public_key.length === 0)))
+        return false;
+    const endpoints = [
+        [authority.operations_url, "operations"],
+        [authority.sync_url, "sync"],
+        [authority.files_url, "files"]
+    ];
+    const urls = endpoints.map(([value, endpoint]) => {
+        const url = serviceUrl(value);
+        const path = url && !url.search && !url.hash ? AUTHORITY_PATH.exec(url.pathname) : null;
+        return path?.[1] === collectionId && path[2] === endpoint ? url : null;
+    });
+    return urls.every((url) => url !== null && url.origin === urls[0].origin);
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mdbase-dev/connect-protocol",
-  "version": "0.1.0-beta.176",
+  "version": "0.1.0-beta.184",
   "private": false,
   "type": "module",
   "license": "MIT",
@@ -47,6 +47,6 @@
     "typecheck": "tsc -p tsconfig.json --noEmit"
   },
   "mdbaseRelease": {
-    "commit": "f5992a321ec6e4b95575ba6463d7bc428bca22b2"
+    "commit": "69e517c21af2e9d3b723ff01fcd812e0a6d33db2"
   }
 }