@mxpicture/tesla-superchargers-http 0.1.10 → 0.1.12

package/dist/auth.d.ts

@@ -0,0 +1,7 @@
+/**
+ * True when the `Authorization` header carries the expected bearer token.
+ * Both sides are hashed before the constant-time compare so it never leaks the
+ * token length, and a missing or malformed header is simply unauthorized.
+ */
+export declare const isAuthorized: (header: string | undefined, token: string) => boolean;
+//# sourceMappingURL=auth.d.ts.map

package/dist/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAKA;;;;GAIG;AACH,eAAO,MAAM,YAAY,GACvB,QAAQ,MAAM,GAAG,SAAS,EAC1B,OAAO,MAAM,KACZ,OAIF,CAAC"}

package/dist/auth.js

@@ -0,0 +1,14 @@
+import { createHash, timingSafeEqual } from "node:crypto";
+const sha256 = (value) => createHash("sha256").update(value).digest();
+/**
+ * True when the `Authorization` header carries the expected bearer token.
+ * Both sides are hashed before the constant-time compare so it never leaks the
+ * token length, and a missing or malformed header is simply unauthorized.
+ */
+export const isAuthorized = (header, token) => {
+    const match = /^Bearer +(.+)$/i.exec((header ?? "").trim());
+    if (!match)
+        return false;
+    return timingSafeEqual(sha256(match[1]), sha256(token));
+};
+//# sourceMappingURL=auth.js.map

package/dist/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE1D,MAAM,MAAM,GAAG,CAAC,KAAa,EAAU,EAAE,CACvC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;AAE9C;;;;GAIG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAC1B,MAA0B,EAC1B,KAAa,EACJ,EAAE;IACX,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5D,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,OAAO,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AAC1D,CAAC,CAAC"}

package/dist/commands.d.ts

@@ -0,0 +1,8 @@
+import type { CommandRegistry } from "./types.js";
+/**
+ * The HTTP command registry, each entry wired to the api layer directly (never
+ * the CLI). Read-only lookups answer GET with query-string params; the
+ * side-effecting actions answer POST with a JSON body.
+ */
+export declare const buildCommands: () => CommandRegistry;
+//# sourceMappingURL=commands.d.ts.map

package/dist/commands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"commands.d.ts","sourceRoot":"","sources":["../src/commands.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,eAAe,EAAU,MAAM,YAAY,CAAC;AAwB1D;;;;GAIG;AACH,eAAO,MAAM,aAAa,QAAO,eA4C/B,CAAC"}

package/dist/commands.js

@@ -0,0 +1,63 @@
+import { chargersApi, chargingProcessesApi, failuresApi, invoicesApi, } from "@mxpicture/tesla-superchargers-api/api";
+import { HttpError } from "./errors.js";
+import { coordinate, flag, locale, optString, optTimestamp, radiusKm, source, threshold, } from "./params.js";
+/** reset-failures: exactly one of `id` (a single row) or `all` (the source). */
+const resetFailures = async (params) => {
+    const src = source(params);
+    const id = optString(params, "id");
+    const all = flag(params, "all");
+    if ((id !== undefined) === all)
+        throw new HttpError(400, "provide exactly one of 'id' or 'all'");
+    if (id !== undefined) {
+        if (src === "all")
+            throw new HttpError(400, "'id' requires a concrete 'source' (charges, chargers or slugs)");
+        await failuresApi().resetFailed(src, id);
+        return { source: src, id };
+    }
+    return await failuresApi().resetAllFailed(src);
+};
+/**
+ * The HTTP command registry, each entry wired to the api layer directly (never
+ * the CLI). Read-only lookups answer GET with query-string params; the
+ * side-effecting actions answer POST with a JSON body.
+ */
+export const buildCommands = () => ({
+    "find-charger": {
+        method: "GET",
+        run: (p) => chargersApi().find(coordinate(p), locale(p), radiusKm(p)),
+    },
+    "find-prices": {
+        method: "GET",
+        run: (p) => chargersApi().findPrices(coordinate(p), optTimestamp(p, "at") ?? new Date(), radiusKm(p)),
+    },
+    "find-unpriced-charges": {
+        method: "GET",
+        run: () => chargingProcessesApi().getUnpricedCharges(),
+    },
+    "find-failures": {
+        method: "GET",
+        run: (p) => failuresApi().getFailed(source(p), threshold(p)),
+    },
+    "find-unmatched-invoices": {
+        method: "GET",
+        run: () => invoicesApi().getUnmatched(),
+    },
+    "sync-invoices-dropbox": {
+        method: "POST",
+        run: () => invoicesApi().syncDropbox(),
+    },
+    "process-unpriced-charges": {
+        method: "POST",
+        run: () => chargingProcessesApi().runPricing(),
+    },
+    "reset-failures": { method: "POST", run: resetFailures },
+    "notify-failures": {
+        method: "POST",
+        run: (p) => failuresApi().notifyFailures(threshold(p), console.log),
+    },
+    "notify-unmatched-invoices": {
+        method: "POST",
+        run: () => invoicesApi().notifyUnmatched(console.log),
+    },
+});
+//# sourceMappingURL=commands.js.map

package/dist/commands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"commands.js","sourceRoot":"","sources":["../src/commands.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,WAAW,EACX,oBAAoB,EACpB,WAAW,EACX,WAAW,GACZ,MAAM,wCAAwC,CAAC;AAChD,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EACL,UAAU,EACV,IAAI,EACJ,MAAM,EACN,SAAS,EACT,YAAY,EACZ,QAAQ,EACR,MAAM,EACN,SAAS,GACV,MAAM,aAAa,CAAC;AAGrB,gFAAgF;AAChF,MAAM,aAAa,GAAG,KAAK,EAAE,MAAc,EAAoB,EAAE;IAC/D,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAC3B,MAAM,EAAE,GAAG,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACnC,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAEhC,IAAI,CAAC,EAAE,KAAK,SAAS,CAAC,KAAK,GAAG;QAC5B,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,sCAAsC,CAAC,CAAC;IAEnE,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;QACrB,IAAI,GAAG,KAAK,KAAK;YACf,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,gEAAgE,CACjE,CAAC;QACJ,MAAM,WAAW,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACzC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC;IAC7B,CAAC;IAED,OAAO,MAAM,WAAW,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;AACjD,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,GAAoB,EAAE,CAAC,CAAC;IACnD,cAAc,EAAE;QACd,MAAM,EAAE,KAAK;QACb,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;KACtE;IACD,aAAa,EAAE;QACb,MAAM,EAAE,KAAK;QACb,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CACT,WAAW,EAAE,CAAC,UAAU,CACtB,UAAU,CAAC,CAAC,CAAC,EACb,YAAY,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,IAAI,IAAI,EAAE,EACnC,QAAQ,CAAC,CAAC,CAAC,CACZ;KACJ;IACD,uBAAuB,EAAE;QACvB,MAAM,EAAE,KAAK;QACb,GAAG,EAAE,GAAG,EAAE,CAAC,oBAAoB,EAAE,CAAC,kBAAkB,EAAE;KACvD;IACD,eAAe,EAAE;QACf,MAAM,EAAE,KAAK;QACb,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;KAC7D;IACD,yBAAyB,EAAE;QACzB,MAAM,EAAE,KAAK;QACb,GAAG,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,YAAY,EAAE;KACxC;IAED,uBAAuB,EAAE;QACvB,MAAM,EAAE,MAAM;QACd,GAAG,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,WAAW,EAAE;KACvC;IACD,0BAA0B,EAAE;QAC1B,MAAM,EAAE,MAAM;QACd,GAAG,EAAE,GAAG,EAAE,CAAC,oBAAoB,EAAE,CAAC,UAAU,EAAE;KAC/C;IACD,gBAAgB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,aAAa,EAAE;IACxD,iBAAiB,EAAE;QACjB,MAAM,EAAE,MAAM;QACd,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,GAAG,CAAC;KACpE;IACD,2BAA2B,EAAE;QAC3B,MAAM,EAAE,MAAM;QACd,GAAG,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC;KACtD;CACF,CAAC,CAAC"}

package/dist/errors.d.ts

@@ -0,0 +1,6 @@
+/** An error carrying the HTTP status to answer with; anything else is a 500. */
+export declare class HttpError extends Error {
+    readonly status: number;
+    constructor(status: number, message: string);
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,qBAAa,SAAU,SAAQ,KAAK;aAEhB,MAAM,EAAE,MAAM;gBAAd,MAAM,EAAE,MAAM,EAC9B,OAAO,EAAE,MAAM;CAKlB"}

package/dist/errors.js

@@ -0,0 +1,10 @@
+/** An error carrying the HTTP status to answer with; anything else is a 500. */
+export class HttpError extends Error {
+    status;
+    constructor(status, message) {
+        super(message);
+        this.status = status;
+        this.name = "HttpError";
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,MAAM,OAAO,SAAU,SAAQ,KAAK;IAEhB;IADlB,YACkB,MAAc,EAC9B,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAHC,WAAM,GAAN,MAAM,CAAQ;QAI9B,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC;IAC1B,CAAC;CACF"}

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":""}

package/dist/index.js

@@ -0,0 +1,44 @@
+#!/usr/bin/env node
+/**
+ * teslamate-superchargers-http
+ * ============================
+ * A small `node:http` server that exposes the same api the CLI drives (see
+ * `@mxpicture/tesla-superchargers-api`) as bearer-token-authenticated
+ * endpoints — one per command:
+ *
+ *   GET  /find-charger?lat&lon
+ *   GET  /find-prices?lat&lon[&at]
+ *   GET  /find-unpriced-charges
+ *   GET  /find-failures[?source&threshold]
+ *   GET  /find-unmatched-invoices
+ *   POST /sync-invoices-dropbox
+ *   POST /process-unpriced-charges
+ *   POST /reset-failures        body: { source, id } | { source, all: true }
+ *   POST /notify-failures       body: { threshold? }
+ *   POST /notify-unmatched-invoices
+ *   GET  /health                (unauthenticated liveness probe)
+ *
+ * The database connection comes from the standard `PG*` environment variables;
+ * alerts need `PUSHOVER_API_TOKEN` / `PUSHOVER_USER_KEY` (off when unset).
+ *
+ * Required: `HTTP_AUTH_TOKEN` (the bearer token clients must present).
+ * Optional: `HTTP_PORT` (default 8080).
+ */
+import { endSql } from "@mxpicture/tesla-superchargers-mate/store";
+import { buildCommands } from "./commands.js";
+import { createServer } from "./server.js";
+const token = process.env.HTTP_AUTH_TOKEN;
+if (!token) {
+    console.error("HTTP_AUTH_TOKEN is required (the bearer token clients must present)");
+    process.exit(1);
+}
+const port = Number(process.env.HTTP_PORT) || 8080;
+const server = createServer({ token, commands: buildCommands() });
+server.listen(port, () => console.log(`http server listening on :${port}`));
+// stop accepting requests, close the shared postgres pool, then exit
+const shutdown = () => {
+    server.close(() => void endSql().finally(() => process.exit(0)));
+};
+process.on("SIGINT", shutdown);
+process.on("SIGTERM", shutdown);
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;AAC1C,IAAI,CAAC,KAAK,EAAE,CAAC;IACX,OAAO,CAAC,KAAK,CACX,qEAAqE,CACtE,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC;AACnD,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,EAAE,CAAC,CAAC;AAElE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,6BAA6B,IAAI,EAAE,CAAC,CAAC,CAAC;AAE5E,qEAAqE;AACrE,MAAM,QAAQ,GAAG,GAAS,EAAE;IAC1B,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACnE,CAAC,CAAC;AACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;AAC/B,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC"}

package/dist/params.d.ts

@@ -0,0 +1,20 @@
+import type { FailureSource } from "@mxpicture/tesla-superchargers-api/types";
+import type { Params } from "./types.js";
+/** A present, non-empty scalar as a string; absent/empty → undefined. */
+export declare const optString: (params: Params, key: string) => string | undefined;
+/** The `lat`/`lon` pair as a coordinate; missing or non-numeric → 400. */
+export declare const coordinate: (params: Params) => {
+    latitude: number;
+    longitude: number;
+};
+export declare const radiusKm: (params: Params) => number;
+export declare const locale: (params: Params) => string;
+/** An optional ISO-8601 timestamp; present but unparseable → 400. */
+export declare const optTimestamp: (params: Params, key: string) => Date | undefined;
+/** The failure source, defaulting to "all"; an unknown value → 400. */
+export declare const source: (params: Params) => FailureSource | "all";
+/** The minimum failure count, defaulting to the deprioritize threshold. */
+export declare const threshold: (params: Params) => number;
+/** A boolean flag: true only for an explicit true / "true" / "1". */
+export declare const flag: (params: Params, key: string) => boolean;
+//# sourceMappingURL=params.d.ts.map

package/dist/params.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"params.d.ts","sourceRoot":"","sources":["../src/params.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,0CAA0C,CAAC;AAE9E,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAMzC,yEAAyE;AACzE,eAAO,MAAM,SAAS,GAAI,QAAQ,MAAM,EAAE,KAAK,MAAM,KAAG,MAAM,GAAG,SAOhE,CAAC;AAcF,0EAA0E;AAC1E,eAAO,MAAM,UAAU,GACrB,QAAQ,MAAM,KACb;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAGtC,CAAC;AAEH,eAAO,MAAM,QAAQ,GAAI,QAAQ,MAAM,KAAG,MACT,CAAC;AAElC,eAAO,MAAM,MAAM,GAAI,QAAQ,MAAM,KAAG,MACF,CAAC;AAEvC,qEAAqE;AACrE,eAAO,MAAM,YAAY,GAAI,QAAQ,MAAM,EAAE,KAAK,MAAM,KAAG,IAAI,GAAG,SASjE,CAAC;AAIF,uEAAuE;AACvE,eAAO,MAAM,MAAM,GAAI,QAAQ,MAAM,KAAG,aAAa,GAAG,KAMvD,CAAC;AAEF,2EAA2E;AAC3E,eAAO,MAAM,SAAS,GAAI,QAAQ,MAAM,KAAG,MAQ1C,CAAC;AAEF,qEAAqE;AACrE,eAAO,MAAM,IAAI,GAAI,QAAQ,MAAM,EAAE,KAAK,MAAM,KAAG,OAGlD,CAAC"}

package/dist/params.js

@@ -0,0 +1,72 @@
+import { FAILURE_DEPRIORITIZE_THRESHOLD } from "@mxpicture/tesla-superchargers-api/common";
+import { HttpError } from "./errors.js";
+const bad = (message) => {
+    throw new HttpError(400, message);
+};
+/** A present, non-empty scalar as a string; absent/empty → undefined. */
+export const optString = (params, key) => {
+    const value = params[key];
+    if (value === undefined || value === null || value === "")
+        return undefined;
+    if (typeof value === "string")
+        return value;
+    if (typeof value === "number" || typeof value === "boolean")
+        return String(value);
+    return bad(`'${key}' must be a string`);
+};
+const numberValue = (params, key) => {
+    const value = params[key];
+    const n = typeof value === "number"
+        ? value
+        : typeof value === "string" && value.trim() !== ""
+            ? Number(value)
+            : NaN;
+    if (!Number.isFinite(n))
+        return bad(`'${key}' must be a number`);
+    return n;
+};
+/** The `lat`/`lon` pair as a coordinate; missing or non-numeric → 400. */
+export const coordinate = (params) => ({
+    latitude: numberValue(params, "lat"),
+    longitude: numberValue(params, "lon"),
+});
+export const radiusKm = (params) => numberValue(params, "radiusKm");
+export const locale = (params) => params.locale ?? "de-DE";
+/** An optional ISO-8601 timestamp; present but unparseable → 400. */
+export const optTimestamp = (params, key) => {
+    const value = params[key];
+    if (value === undefined || value === null || value === "")
+        return undefined;
+    if (typeof value !== "string" && typeof value !== "number")
+        return bad(`'${key}' must be an ISO 8601 timestamp`);
+    const date = new Date(value);
+    if (Number.isNaN(date.getTime()))
+        return bad(`'${key}' must be an ISO 8601 timestamp`);
+    return date;
+};
+const SOURCES = ["charges", "chargers", "slugs", "all"];
+/** The failure source, defaulting to "all"; an unknown value → 400. */
+export const source = (params) => {
+    const value = optString(params, "source");
+    if (value === undefined)
+        return "all";
+    if (SOURCES.includes(value))
+        return value;
+    return bad(`'source' must be one of ${SOURCES.join(", ")}`);
+};
+/** The minimum failure count, defaulting to the deprioritize threshold. */
+export const threshold = (params) => {
+    const value = params["threshold"];
+    if (value === undefined || value === null || value === "")
+        return FAILURE_DEPRIORITIZE_THRESHOLD;
+    const n = typeof value === "number" ? value : Number(value);
+    if (!Number.isInteger(n) || n < 0)
+        return bad("'threshold' must be a non-negative integer");
+    return n;
+};
+/** A boolean flag: true only for an explicit true / "true" / "1". */
+export const flag = (params, key) => {
+    const value = params[key];
+    return value === true || value === "true" || value === "1";
+};
+//# sourceMappingURL=params.js.map

package/dist/params.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"params.js","sourceRoot":"","sources":["../src/params.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,8BAA8B,EAAE,MAAM,2CAA2C,CAAC;AAE3F,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAGxC,MAAM,GAAG,GAAG,CAAC,OAAe,EAAS,EAAE;IACrC,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;AACpC,CAAC,CAAC;AAEF,yEAAyE;AACzE,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,MAAc,EAAE,GAAW,EAAsB,EAAE;IAC3E,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IAC5E,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS;QACzD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,OAAO,GAAG,CAAC,IAAI,GAAG,oBAAoB,CAAC,CAAC;AAC1C,CAAC,CAAC;AAEF,MAAM,WAAW,GAAG,CAAC,MAAc,EAAE,GAAW,EAAU,EAAE;IAC1D,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1B,MAAM,CAAC,GACL,OAAO,KAAK,KAAK,QAAQ;QACvB,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE;YAChD,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;YACf,CAAC,CAAC,GAAG,CAAC;IACZ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,GAAG,CAAC,IAAI,GAAG,oBAAoB,CAAC,CAAC;IACjE,OAAO,CAAC,CAAC;AACX,CAAC,CAAC;AAEF,0EAA0E;AAC1E,MAAM,CAAC,MAAM,UAAU,GAAG,CACxB,MAAc,EAC2B,EAAE,CAAC,CAAC;IAC7C,QAAQ,EAAE,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC;IACpC,SAAS,EAAE,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC;CACtC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,MAAc,EAAU,EAAE,CACjD,WAAW,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;AAElC,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,MAAc,EAAU,EAAE,CAC9C,MAAM,CAAC,MAAiB,IAAI,OAAO,CAAC;AAEvC,qEAAqE;AACrE,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,MAAc,EAAE,GAAW,EAAoB,EAAE;IAC5E,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IAC5E,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ;QACxD,OAAO,GAAG,CAAC,IAAI,GAAG,iCAAiC,CAAC,CAAC;IACvD,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7B,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAC9B,OAAO,GAAG,CAAC,IAAI,GAAG,iCAAiC,CAAC,CAAC;IACvD,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAEF,MAAM,OAAO,GAAG,CAAC,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,CAAU,CAAC;AAEjE,uEAAuE;AACvE,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,MAAc,EAAyB,EAAE;IAC9D,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC1C,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACtC,IAAK,OAA6B,CAAC,QAAQ,CAAC,KAAK,CAAC;QAChD,OAAO,KAA8B,CAAC;IACxC,OAAO,GAAG,CAAC,2BAA2B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC9D,CAAC,CAAC;AAEF,2EAA2E;AAC3E,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,MAAc,EAAU,EAAE;IAClD,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC;IAClC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE;QACvD,OAAO,8BAA8B,CAAC;IACxC,MAAM,CAAC,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5D,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;QAC/B,OAAO,GAAG,CAAC,4CAA4C,CAAC,CAAC;IAC3D,OAAO,CAAC,CAAC;AACX,CAAC,CAAC;AAEF,qEAAqE;AACrE,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,MAAc,EAAE,GAAW,EAAW,EAAE;IAC3D,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1B,OAAO,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,GAAG,CAAC;AAC7D,CAAC,CAAC"}

package/dist/server.d.ts

@@ -0,0 +1,9 @@
+import { type Server } from "node:http";
+import type { CommandRegistry } from "./types.js";
+export interface ServerOptions {
+    token: string;
+    commands: CommandRegistry;
+}
+/** A `node:http` server exposing the command registry behind bearer-token auth. */
+export declare const createServer: (opts: ServerOptions) => Server;
+//# sourceMappingURL=server.d.ts.map

package/dist/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,MAAM,EAEZ,MAAM,WAAW,CAAC;AAGnB,OAAO,KAAK,EAAE,eAAe,EAAU,MAAM,YAAY,CAAC;AAK1D,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,eAAe,CAAC;CAC3B;AA6DD,mFAAmF;AACnF,eAAO,MAAM,YAAY,GAAI,MAAM,aAAa,KAAG,MAQ/C,CAAC"}

package/dist/server.js

@@ -0,0 +1,59 @@
+import { createServer as createHttpServer, } from "node:http";
+import { isAuthorized } from "./auth.js";
+import { HttpError } from "./errors.js";
+/** Reject bodies larger than this (bytes) before buffering them. */
+const MAX_BODY_BYTES = 1_000_000;
+const sendJson = (res, status, payload) => {
+    res.writeHead(status, { "content-type": "application/json" });
+    res.end(JSON.stringify(payload ?? null));
+};
+/** Buffer and JSON-parse the request body into a params object ({} when empty). */
+const readJsonBody = async (req) => {
+    const chunks = [];
+    let size = 0;
+    for await (const chunk of req) {
+        size += chunk.length;
+        if (size > MAX_BODY_BYTES)
+            throw new HttpError(413, "request body too large");
+        chunks.push(chunk);
+    }
+    if (size === 0)
+        return {};
+    let parsed;
+    try {
+        parsed = JSON.parse(Buffer.concat(chunks).toString("utf8"));
+    }
+    catch {
+        throw new HttpError(400, "invalid JSON body");
+    }
+    if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed))
+        throw new HttpError(400, "request body must be a JSON object");
+    return parsed;
+};
+const handle = async (req, res, opts) => {
+    const url = new URL(req.url ?? "/", "http://localhost");
+    // unauthenticated liveness probe
+    if (req.method === "GET" && url.pathname === "/health")
+        return sendJson(res, 200, { status: "ok" });
+    if (!isAuthorized(req.headers.authorization, opts.token))
+        return sendJson(res, 401, { error: "unauthorized" });
+    const command = opts.commands[url.pathname.replace(/^\/+/, "")];
+    if (!command)
+        return sendJson(res, 404, { error: "not found" });
+    if (command.method !== req.method)
+        return sendJson(res, 405, { error: "method not allowed" });
+    const params = command.method === "GET"
+        ? Object.fromEntries(url.searchParams)
+        : await readJsonBody(req);
+    sendJson(res, 200, await command.run(params));
+};
+/** A `node:http` server exposing the command registry behind bearer-token auth. */
+export const createServer = (opts) => createHttpServer((req, res) => {
+    handle(req, res, opts).catch((error) => {
+        if (error instanceof HttpError)
+            return sendJson(res, error.status, { error: error.message });
+        console.error(error);
+        sendJson(res, 500, { error: "internal error" });
+    });
+});
+//# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,IAAI,gBAAgB,GAIjC,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAGxC,oEAAoE;AACpE,MAAM,cAAc,GAAG,SAAS,CAAC;AAOjC,MAAM,QAAQ,GAAG,CACf,GAAmB,EACnB,MAAc,EACd,OAAgB,EACV,EAAE;IACR,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;IAC9D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC;AAC3C,CAAC,CAAC;AAEF,mFAAmF;AACnF,MAAM,YAAY,GAAG,KAAK,EAAE,GAAoB,EAAmB,EAAE;IACnE,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,GAA4B,EAAE,CAAC;QACvD,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC;QACrB,IAAI,IAAI,GAAG,cAAc;YACvB,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,wBAAwB,CAAC,CAAC;QACrD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;IACD,IAAI,IAAI,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAE1B,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9D,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;IAChD,CAAC;IACD,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QACxE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,oCAAoC,CAAC,CAAC;IACjE,OAAO,MAAgB,CAAC;AAC1B,CAAC,CAAC;AAEF,MAAM,MAAM,GAAG,KAAK,EAClB,GAAoB,EACpB,GAAmB,EACnB,IAAmB,EACJ,EAAE;IACjB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;IAExD,iCAAiC;IACjC,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS;QACpD,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAE9C,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC;QACtD,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;IAEvD,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;IAChE,IAAI,CAAC,OAAO;QAAE,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;IAChE,IAAI,OAAO,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM;QAC/B,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;IAE7D,MAAM,MAAM,GACV,OAAO,CAAC,MAAM,KAAK,KAAK;QACtB,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC;QACtC,CAAC,CAAC,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC;IAE9B,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;AAChD,CAAC,CAAC;AAEF,mFAAmF;AACnF,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,IAAmB,EAAU,EAAE,CAC1D,gBAAgB,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;IAC5B,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;QAC9C,IAAI,KAAK,YAAY,SAAS;YAC5B,OAAO,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC/D,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACrB,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,14 @@
+/**
+ * A flat bag of request parameters: query-string values for GET commands
+ * (always strings) or JSON-body fields for POST commands (arbitrary JSON).
+ * The parsers in `params.ts` narrow individual fields.
+ */
+export type Params = Record<string, unknown>;
+/** One HTTP-exposed command: the method it answers and the work it runs. */
+export interface Command {
+    method: "GET" | "POST";
+    run: (params: Params) => unknown | Promise<unknown>;
+}
+/** Command name (the URL path without its leading slash) → command. */
+export type CommandRegistry = Record<string, Command>;
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAE7C,4EAA4E;AAC5E,MAAM,WAAW,OAAO;IACtB,MAAM,EAAE,KAAK,GAAG,MAAM,CAAC;IACvB,GAAG,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACrD;AAED,uEAAuE;AACvE,MAAM,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC"}

package/dist/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mxpicture/tesla-superchargers-http",
-  "version": "0.1.10",
+  "version": "0.1.12",
   "description": "Http server for interacting with superchargers",
   "type": "module",
   "author": "MXPicture",
@@ -32,8 +32,8 @@
     "access": "public"
   },
   "dependencies": {
-    "@mxpicture/tesla-superchargers-api": "workspace:*",
-    "@mxpicture/tesla-superchargers-mate": "workspace:*"
+    "@mxpicture/tesla-superchargers-api": "^0.1.12",
+    "@mxpicture/tesla-superchargers-mate": "^0.1.12"
   },
   "devDependencies": {
     "@types/node": "^25.2.3",