@noy-db/in-rest 0.5.0 → 0.6.0-pre.1

package/README.md

@@ -14,7 +14,44 @@ pnpm add @noy-db/hub @noy-db/in-rest
 
 ## What it is
 
-Framework-neutral REST API integration for noy-db — createRestHandler with Hono, Express, Fastify, and Nitro subpath adapters.
+A framework-neutral HTTP server that exposes a noy-db **store** — and nothing more.
+`createRestHandler` turns any `NoydbStore` into a single `POST {basePath}/rpc` endpoint
+that proxies the six store methods (`get`/`put`/`delete`/`list`/`loadAll`/`saveAll`, plus
+optional `ping`/`listSince`/`listPage`/`listVaults`) over the wire. Hono, Express, Fastify,
+and Nitro subpath adapters marshal your framework's request/response into it.
+
+**The server only ever sees ciphertext.** It never receives the vault passphrase, never
+unlocks a vault, and never runs a query — it forwards `EncryptedEnvelope`s straight to the
+store and returns them unchanged. Unlock, decryption, and the query DSL all happen in the
+**client**, exactly as with every other noy-db storage backend. The REST server is a dumb,
+untrusted ciphertext relay, consistent with the zero-knowledge model.
+
+The matching client — a `to-rest` `NoydbStore` that POSTs to this endpoint and re-hydrates
+`ConflictError` from a `409` — lives in the [`noy-db-to`](https://github.com/vLannaAi/noy-db-to)
+companion repo (the `to-*` store family), so it never has to ship here.
+
+## Usage
+
+```ts
+import { createRestHandler } from '@noy-db/in-rest'
+import { honoAdapter } from '@noy-db/in-rest/hono'
+
+// `store` is any ciphertext NoydbStore (to-file, to-postgres, to-aws-s3, …).
+const handler = createRestHandler({
+  store,
+  // Authorization is FAIL-CLOSED: with no `authorize`, every request is 401.
+  // You own the policy — check a bearer token, an mTLS header, a JWT, whatever.
+  authorize: (req) => req.headers['authorization'] === `Bearer ${process.env.REST_TOKEN}`,
+  // Optional: restrict to a read-only relay.
+  // allow: new Set(['get', 'list', 'loadAll']),
+})
+
+app.route('/', honoAdapter(handler)) // or expressAdapter / fastifyPlugin / nitroAdapter
+```
+
+`RestHandlerOptions`: `{ store, authorize?, allow?, basePath? }`. Success → `200` with the
+raw store result; a CAS conflict → `409 { error: { name: 'ConflictError', version } }`;
+unauthorized → `401`; unknown/malformed → `400`; disallowed method → `403`.
 
 ## Status
 

package/dist/index.d.ts

@@ -3,12 +3,22 @@ import { NoydbStore } from '@noy-db/hub';
 /**
  * **@noy-db/in-rest** — Framework-neutral REST API integration for noy-db.
  *
+ * A thin RPC dispatcher — the HTTP twin of `@noy-db/by-peer`'s
+ * `servePeerStore` — that forwards the 6 `NoydbStore` methods straight to
+ * the caller's ciphertext store. The server NEVER sees a passphrase, never
+ * calls `createNoydb`/`openVault`, and never decrypts anything: every
+ * request/response body is an `EncryptedEnvelope` (or a plain id/list of
+ * one) round-tripped as-is.
+ *
  * @example
  * ```ts
  * import { createRestHandler } from '@noy-db/in-rest'
  * import { honoAdapter } from '@noy-db/in-rest/hono'
  *
- * const handler = createRestHandler({ store, user: 'api' })
+ * const handler = createRestHandler({
+ *   store,
+ *   authorize: (req) => req.headers['authorization'] === `Bearer ${API_KEY}`,
+ * })
  * app.route('/api/noydb', honoAdapter(handler))
  * ```
  *
@@ -32,8 +42,17 @@ interface NoydbRestHandler {
 }
 interface RestHandlerOptions {
     readonly store: NoydbStore;
-    readonly user: string;
-    readonly ttlSeconds?: number;
+    /**
+     * Authorize each request. Return `true` to allow. If OMITTED, the
+     * handler is FAIL-CLOSED — every `/rpc` request is rejected with 401.
+     * The caller MUST supply an authorizer to accept any traffic.
+     */
+    readonly authorize?: (req: RestRequest) => boolean | Promise<boolean>;
+    /**
+     * Optional method allowlist (e.g. a read-only relay). When set, a
+     * method not in the set is rejected with 403.
+     */
+    readonly allow?: ReadonlySet<string>;
     readonly basePath?: string;
 }
 declare function createRestHandler(options: RestHandlerOptions): NoydbRestHandler;

package/dist/index.js

@@ -1,165 +1,5 @@
-// src/sessions.ts
-var DEFAULT_SWEEP_INTERVAL_MS = 5 * 60 * 1e3;
-var SessionStore = class {
-  sessions = /* @__PURE__ */ new Map();
-  ttlMs;
-  sweepTimer;
-  constructor(ttlSeconds, options = {}) {
-    this.ttlMs = ttlSeconds * 1e3;
-    const sweepMs = options.sweepIntervalMs ?? DEFAULT_SWEEP_INTERVAL_MS;
-    if (sweepMs > 0) {
-      const timer = setInterval(() => this.sweep(), sweepMs);
-      if (typeof timer.unref === "function") {
-        timer.unref();
-      }
-      this.sweepTimer = timer;
-    } else {
-      this.sweepTimer = null;
-    }
-  }
-  create(db) {
-    const token = crypto.randomUUID();
-    this.sessions.set(token, { db, expiresAt: Date.now() + this.ttlMs });
-    return token;
-  }
-  /**
-   * Look up a session and refresh its sliding-window TTL. Call from
-   * auth-guarded routes that are treated as "activity".
-   */
-  get(token) {
-    const session = this.sessions.get(token);
-    if (!session) return null;
-    if (Date.now() > session.expiresAt) {
-      this.sessions.delete(token);
-      return null;
-    }
-    session.expiresAt = Date.now() + this.ttlMs;
-    return session.db;
-  }
-  delete(token) {
-    this.sessions.delete(token);
-  }
-  /**
-   * Non-refreshing existence check. Used by polling endpoints like
-   * `GET /sessions/current` that should not extend the session merely
-   * by being queried.
-   */
-  peek(token) {
-    const session = this.sessions.get(token);
-    if (!session) return false;
-    if (Date.now() > session.expiresAt) {
-      this.sessions.delete(token);
-      return false;
-    }
-    return true;
-  }
-  /**
-   * Drop every session whose TTL has elapsed. Called automatically by
-   * the internal interval timer; exposed so tests can deterministically
-   * trigger the sweep without waiting. Returns the count of entries
-   * removed — useful for logging / metrics hooks.
-   */
-  sweep() {
-    const now = Date.now();
-    let removed = 0;
-    for (const [token, session] of this.sessions) {
-      if (now > session.expiresAt) {
-        this.sessions.delete(token);
-        removed++;
-      }
-    }
-    return removed;
-  }
-  /**
-   * Current number of tracked sessions (expired or not). Primarily for
-   * tests that verify the sweep is working; operators wanting live
-   * metrics should wrap the store or emit their own counters.
-   */
-  size() {
-    return this.sessions.size;
-  }
-  /**
-   * Stop the background sweep timer and drop every session. Call this
-   * on shutdown to allow the event loop to exit cleanly — `unref()`
-   * handles most cases, but explicit cleanup is cheaper than relying
-   * on finalization.
-   */
-  close() {
-    if (this.sweepTimer !== null) clearInterval(this.sweepTimer);
-    this.sessions.clear();
-  }
-};
-
-// src/router.ts
-import { createNoydb, PermissionDeniedError, NotFoundError, ConflictError, ValidationError } from "@noy-db/hub";
-
-// src/query-params.ts
-var OP_MAP = {
-  eq: "==",
-  neq: "!=",
-  gt: ">",
-  gte: ">=",
-  lt: "<",
-  lte: "<="
-};
-function parseQueryParams(searchParams) {
-  const wheres = searchParams.getAll("where");
-  const orderByParam = searchParams.get("orderBy");
-  const limitParam = searchParams.get("limit");
-  const whereClauses = [];
-  for (const clause of wheres) {
-    const parts = clause.split(":");
-    if (parts.length < 3) {
-      return {
-        error: { error: "invalid_where", op: clause },
-        apply: (q) => q,
-        limit: null
-      };
-    }
-    const field = parts[0];
-    const opStr = parts[1];
-    const value = parts.slice(2).join(":");
-    const op = OP_MAP[opStr];
-    if (!op) {
-      return {
-        error: { error: "invalid_op", op: opStr },
-        apply: (q) => q,
-        limit: null
-      };
-    }
-    whereClauses.push({ field, op, value: coerce(value) });
-  }
-  let orderBy = null;
-  if (orderByParam) {
-    const obParts = orderByParam.split(":");
-    const obField = obParts[0];
-    const obDir = obParts[1];
-    orderBy = { field: obField, dir: obDir === "desc" ? "desc" : "asc" };
-  }
-  const limit = limitParam ? parseInt(limitParam, 10) : null;
-  return {
-    apply(q) {
-      let result = q;
-      for (const { field, op, value } of whereClauses) {
-        result = result.where(field, op, value);
-      }
-      if (orderBy) {
-        result = result.orderBy(orderBy.field, orderBy.dir);
-      }
-      return result;
-    },
-    limit
-  };
-}
-function coerce(raw) {
-  if (raw === "true") return true;
-  if (raw === "false") return false;
-  const n = Number(raw);
-  if (!isNaN(n) && raw.trim() !== "") return n;
-  return raw;
-}
-
 // src/router.ts
+import { isConflictError } from "@noy-db/hub";
 function json(status, body) {
   return {
     status,
@@ -167,12 +7,75 @@ function json(status, body) {
     body: JSON.stringify(body)
   };
 }
-function extractToken(req) {
-  const auth = req.headers["authorization"] ?? req.headers["Authorization"];
-  if (!auth?.startsWith("Bearer ")) return null;
-  return auth.slice(7);
+var CORE_METHODS = /* @__PURE__ */ new Set([
+  "get",
+  "put",
+  "delete",
+  "list",
+  "loadAll",
+  "saveAll",
+  "ping",
+  "listSince",
+  "listPage",
+  "listVaults"
+]);
+var UnknownMethodError = class extends Error {
+};
+var UnsupportedMethodError = class extends Error {
+};
+async function dispatch(store, method, args) {
+  switch (method) {
+    case "get": {
+      const [vault, collection, id] = args;
+      return store.get(vault, collection, id);
+    }
+    case "put": {
+      const [vault, collection, id, envelope, expectedVersion] = args;
+      await store.put(vault, collection, id, envelope, expectedVersion);
+      return null;
+    }
+    case "delete": {
+      const [vault, collection, id] = args;
+      await store.delete(vault, collection, id);
+      return null;
+    }
+    case "list": {
+      const [vault, collection] = args;
+      return store.list(vault, collection);
+    }
+    case "loadAll": {
+      const [vault] = args;
+      return store.loadAll(vault);
+    }
+    case "saveAll": {
+      const [vault, data] = args;
+      await store.saveAll(vault, data);
+      return null;
+    }
+    case "ping": {
+      if (!store.ping) return true;
+      return store.ping();
+    }
+    case "listSince": {
+      if (!store.listSince) throw new UnsupportedMethodError("listSince not supported by this store");
+      const [vault, collection, since] = args;
+      return store.listSince(vault, collection, since);
+    }
+    case "listPage": {
+      if (!store.listPage) throw new UnsupportedMethodError("listPage not supported by this store");
+      const [vault, collection, cursor, limit] = args;
+      return store.listPage(vault, collection, cursor, limit);
+    }
+    case "listVaults": {
+      if (!store.listVaults) throw new UnsupportedMethodError("listVaults not supported by this store");
+      return store.listVaults();
+    }
+  }
+  throw new UnknownMethodError(`Unhandled method: ${method}`);
 }
-function buildRouter(store, user, sessions, basePath) {
+function buildRouter(opts) {
+  const { store, authorize, allow } = opts;
+  const basePath = opts.basePath ?? "";
   function stripBase(pathname) {
     if (!basePath) return pathname;
     if (pathname === basePath) return "/";
@@ -182,130 +85,54 @@ function buildRouter(store, user, sessions, basePath) {
   return async function route(req) {
     const path = stripBase(req.pathname);
     const method = req.method.toUpperCase();
-    if (method === "POST" && path === "/sessions/unlock/secret") {
-      let body;
-      try {
-        body = await req.json();
-      } catch {
-        return json(400, { error: "invalid_json" });
-      }
-      const secret = body?.secret;
-      if (typeof secret !== "string" || !secret) {
-        return json(400, { error: "secret_required" });
-      }
-      try {
-        const db2 = await createNoydb({ store, user, secret });
-        const token2 = sessions.create(db2);
-        return json(200, { token: token2 });
-      } catch (err) {
-        if (err instanceof ValidationError) {
-          return json(400, { error: "weak_secret", message: err.message });
-        }
-        return json(401, { error: "invalid_secret" });
-      }
+    if (method !== "POST" || path !== "/rpc") {
+      return json(404, { error: { name: "NotFound", message: "no such route" } });
     }
-    if (method === "GET" && path === "/sessions/current") {
-      const token2 = extractToken(req);
-      const active = token2 !== null && sessions.peek(token2);
-      return json(200, { active });
+    let authorized;
+    try {
+      authorized = authorize ? await authorize(req) : false;
+    } catch {
+      return json(500, { error: { name: "Error", message: "authorization failed" } });
     }
-    if (method === "DELETE" && path === "/sessions/current") {
-      const token2 = extractToken(req);
-      if (!token2 || !sessions.peek(token2)) return json(401, { error: "unauthorized" });
-      sessions.delete(token2);
-      return { status: 204, headers: {}, body: null };
+    if (!authorized) {
+      return json(401, { error: { name: "Unauthorized", message: "unauthorized" } });
     }
-    const token = extractToken(req);
-    const db = token ? sessions.get(token) : null;
-    if (!db) return json(401, { error: "unauthorized" });
-    if (method === "GET" && path === "/vaults") {
-      try {
-        if (typeof store.listVaults === "function") {
-          const vaults = await db.listAccessibleVaults();
-          return json(200, vaults.map((v) => v.id));
-        }
-        return json(200, []);
-      } catch {
-        return json(200, []);
-      }
+    let body;
+    try {
+      body = await req.json();
+    } catch {
+      return json(400, { error: { name: "BadRequest", message: "invalid JSON body" } });
     }
-    const recordMatch = path.match(/^\/vaults\/([^/]+)\/collections\/([^/]+)\/([^/]+)$/);
-    if (recordMatch) {
-      const vaultName = recordMatch[1];
-      const collName = recordMatch[2];
-      const id = recordMatch[3];
-      if (vaultName === void 0 || collName === void 0 || id === void 0) {
-        return json(500, { error: "internal_error" });
-      }
-      try {
-        const vault = await db.openVault(vaultName);
-        const coll = vault.collection(collName);
-        if (method === "GET") {
-          const record = await coll.get(id);
-          if (!record) return json(404, { error: "not_found" });
-          return json(200, record);
-        }
-        if (method === "POST") {
-          let body;
-          try {
-            body = await req.json();
-          } catch {
-            return json(400, { error: "invalid_json" });
-          }
-          await coll.put(id, body);
-          return json(200, { ok: true });
-        }
-        if (method === "DELETE") {
-          await coll.delete(id);
-          return json(200, { ok: true });
-        }
-        return {
-          status: 405,
-          headers: { "content-type": "application/json", allow: "GET, POST, DELETE" },
-          body: JSON.stringify({ error: "method_not_allowed" })
-        };
-      } catch (err) {
-        if (err instanceof PermissionDeniedError) return json(403, { error: "forbidden" });
-        if (err instanceof NotFoundError) return json(404, { error: "not_found" });
-        if (err instanceof ConflictError) return json(409, { error: "conflict" });
-        return json(500, { error: "internal_error" });
-      }
+    const rpcMethod = body?.method;
+    const rpcArgs = body?.args;
+    if (typeof rpcMethod !== "string" || !Array.isArray(rpcArgs)) {
+      return json(400, { error: { name: "BadRequest", message: "body must be { method: string, args: unknown[] }" } });
     }
-    const collMatch = path.match(/^\/vaults\/([^/]+)\/collections\/([^/]+)$/);
-    if (collMatch) {
-      if (method !== "GET") {
-        return {
-          status: 405,
-          headers: { "content-type": "application/json", allow: "GET" },
-          body: JSON.stringify({ error: "method_not_allowed" })
-        };
-      }
-      const vaultName = collMatch[1];
-      const collName = collMatch[2];
-      if (vaultName === void 0 || collName === void 0) {
-        return json(500, { error: "internal_error" });
+    if (!CORE_METHODS.has(rpcMethod)) {
+      return json(400, { error: { name: "BadRequest", message: `unknown method: ${rpcMethod}` } });
+    }
+    if (allow && !allow.has(rpcMethod)) {
+      return json(403, { error: { name: "Forbidden", message: `method not allowed: ${rpcMethod}` } });
+    }
+    try {
+      const result = await dispatch(store, rpcMethod, rpcArgs);
+      return json(200, result ?? null);
+    } catch (err) {
+      if (isConflictError(err)) {
+        return json(409, { error: { name: "ConflictError", message: err.message, version: err.version } });
       }
-      const params = parseQueryParams(req.searchParams);
-      if (params.error) return json(400, params.error);
-      try {
-        const vault = await db.openVault(vaultName);
-        const coll = vault.collection(collName);
-        let results = params.apply(coll.query()).toArray();
-        if (params.limit !== null) results = results.slice(0, params.limit);
-        return json(200, results);
-      } catch (err) {
-        if (err instanceof PermissionDeniedError) return json(403, { error: "forbidden" });
-        return json(500, { error: "internal_error" });
+      if (err instanceof UnsupportedMethodError) {
+        return json(501, { error: { name: "NotImplemented", message: err.message } });
       }
+      const e = err;
+      return json(500, { error: { name: e.name ?? "Error", message: "store error" } });
     }
-    return json(404, { error: "not_found" });
   };
 }
 
 // src/index.ts
 function createRestHandler(options) {
-  const sessions = new SessionStore(options.ttlSeconds ?? 900);
-  const route = buildRouter(options.store, options.user, sessions, options.basePath ?? "");
+  const route = buildRouter(options);
   return { handle: route };
 }
 export {

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/sessions.ts","../src/router.ts","../src/query-params.ts","../src/index.ts"],"sourcesContent":["import type { Noydb } from '@noy-db/hub'\n\ninterface Session {\n  db: Noydb\n  expiresAt: number\n}\n\n/**\n * Options for `SessionStore`.\n *\n * `sweepIntervalMs` controls the periodic background sweep that drops\n * expired sessions from the map. Without it, expired\n * tokens only clear when a matching `get()` / `peek()` call happens —\n * a long-running process with many short-lived sessions accumulates\n * dead entries unbounded. Default is 5 minutes; pass `0` to disable\n * the sweep (appropriate for tests or very short-lived CLI processes).\n */\nexport interface SessionStoreOptions {\n  sweepIntervalMs?: number\n}\n\nconst DEFAULT_SWEEP_INTERVAL_MS = 5 * 60 * 1000\n\nexport class SessionStore {\n  private readonly sessions = new Map<string, Session>()\n  private readonly ttlMs: number\n  private readonly sweepTimer: ReturnType<typeof setInterval> | null\n\n  constructor(ttlSeconds: number, options: SessionStoreOptions = {}) {\n    this.ttlMs = ttlSeconds * 1000\n    const sweepMs = options.sweepIntervalMs ?? DEFAULT_SWEEP_INTERVAL_MS\n    if (sweepMs > 0) {\n      // Node's setInterval returns a Timeout whose `.unref()` prevents\n      // the timer from keeping the event loop alive. That matters in\n      // CLI / serverless contexts where the Node process should exit\n      // cleanly once the request cycle ends.\n      const timer = setInterval(() => this.sweep(), sweepMs)\n      if (typeof (timer as { unref?: () => void }).unref === 'function') {\n        (timer as { unref: () => void }).unref()\n      }\n      this.sweepTimer = timer\n    } else {\n      this.sweepTimer = null\n    }\n  }\n\n  create(db: Noydb): string {\n    const token = crypto.randomUUID()\n    this.sessions.set(token, { db, expiresAt: Date.now() + this.ttlMs })\n    return token\n  }\n\n  /**\n   * Look up a session and refresh its sliding-window TTL. Call from\n   * auth-guarded routes that are treated as \"activity\".\n   */\n  get(token: string): Noydb | null {\n    const session = this.sessions.get(token)\n    if (!session) return null\n    if (Date.now() > session.expiresAt) {\n      this.sessions.delete(token)\n      return null\n    }\n    session.expiresAt = Date.now() + this.ttlMs\n    return session.db\n  }\n\n  delete(token: string): void {\n    this.sessions.delete(token)\n  }\n\n  /**\n   * Non-refreshing existence check. Used by polling endpoints like\n   * `GET /sessions/current` that should not extend the session merely\n   * by being queried.\n   */\n  peek(token: string): boolean {\n    const session = this.sessions.get(token)\n    if (!session) return false\n    if (Date.now() > session.expiresAt) {\n      this.sessions.delete(token)\n      return false\n    }\n    return true\n  }\n\n  /**\n   * Drop every session whose TTL has elapsed. Called automatically by\n   * the internal interval timer; exposed so tests can deterministically\n   * trigger the sweep without waiting. Returns the count of entries\n   * removed — useful for logging / metrics hooks.\n   */\n  sweep(): number {\n    const now = Date.now()\n    let removed = 0\n    for (const [token, session] of this.sessions) {\n      if (now > session.expiresAt) {\n        this.sessions.delete(token)\n        removed++\n      }\n    }\n    return removed\n  }\n\n  /**\n   * Current number of tracked sessions (expired or not). Primarily for\n   * tests that verify the sweep is working; operators wanting live\n   * metrics should wrap the store or emit their own counters.\n   */\n  size(): number {\n    return this.sessions.size\n  }\n\n  /**\n   * Stop the background sweep timer and drop every session. Call this\n   * on shutdown to allow the event loop to exit cleanly — `unref()`\n   * handles most cases, but explicit cleanup is cheaper than relying\n   * on finalization.\n   */\n  close(): void {\n    if (this.sweepTimer !== null) clearInterval(this.sweepTimer)\n    this.sessions.clear()\n  }\n}\n","import { createNoydb, PermissionDeniedError, NotFoundError, ConflictError, ValidationError } from '@noy-db/hub'\nimport type { NoydbStore } from '@noy-db/hub'\nimport type { RestRequest, RestResponse } from './index.js'\nimport type { SessionStore } from './sessions.js'\nimport { parseQueryParams } from './query-params.js'\n\nfunction json(status: number, body: unknown): RestResponse {\n  return {\n    status,\n    headers: { 'content-type': 'application/json' },\n    body: JSON.stringify(body),\n  }\n}\n\nfunction extractToken(req: RestRequest): string | null {\n  // HTTP headers are case-insensitive; check both common casings.\n  const auth = req.headers['authorization'] ?? req.headers['Authorization']\n  if (!auth?.startsWith('Bearer ')) return null\n  return auth.slice(7)\n}\n\nexport function buildRouter(store: NoydbStore, user: string, sessions: SessionStore, basePath: string) {\n  function stripBase(pathname: string): string {\n    // Segment-aware prefix match: basePath '/api' matches '/api' or '/api/...'\n    // but NOT '/apifoo' or '/api-other/...'.\n    if (!basePath) return pathname\n    if (pathname === basePath) return '/'\n    if (pathname.startsWith(basePath + '/')) return pathname.slice(basePath.length)\n    return pathname\n  }\n\n  return async function route(req: RestRequest): Promise<RestResponse> {\n    const path = stripBase(req.pathname)\n    const method = req.method.toUpperCase()\n\n    // ── Session routes (no auth required) ─────────────────────────\n\n    if (method === 'POST' && path === '/sessions/unlock/secret') {\n      let body: unknown\n      try { body = await req.json() } catch { return json(400, { error: 'invalid_json' }) }\n      const secret = (body as Record<string, unknown>)?.secret\n      if (typeof secret !== 'string' || !secret) {\n        return json(400, { error: 'secret_required' })\n      }\n      try {\n        const db = await createNoydb({ store, user, secret: secret })\n        const token = sessions.create(db)\n        return json(200, { token })\n      } catch (err) {\n        if (err instanceof ValidationError) {\n          return json(400, { error: 'weak_secret', message: err.message })\n        }\n        return json(401, { error: 'invalid_secret' })\n      }\n    }\n\n    if (method === 'GET' && path === '/sessions/current') {\n      const token = extractToken(req)\n      const active = token !== null && sessions.peek(token)\n      return json(200, { active })\n    }\n\n    if (method === 'DELETE' && path === '/sessions/current') {\n      const token = extractToken(req)\n      if (!token || !sessions.peek(token)) return json(401, { error: 'unauthorized' })\n      sessions.delete(token)\n      return { status: 204, headers: {}, body: null }\n    }\n\n    // ── Auth guard ────────────────────────────────────────────────\n\n    const token = extractToken(req)\n    const db = token ? sessions.get(token) : null\n    if (!db) return json(401, { error: 'unauthorized' })\n\n    // ── Vault routes ──────────────────────────────────────────────\n\n    if (method === 'GET' && path === '/vaults') {\n      try {\n        if (typeof store.listVaults === 'function') {\n          const vaults = await db.listAccessibleVaults()\n          return json(200, vaults.map(v => v.id))\n        }\n        return json(200, [])\n      } catch {\n        return json(200, [])\n      }\n    }\n\n    // Match /vaults/:vault/collections/:collection/:id\n    const recordMatch = path.match(/^\\/vaults\\/([^/]+)\\/collections\\/([^/]+)\\/([^/]+)$/)\n    if (recordMatch) {\n      const vaultName = recordMatch[1]\n      const collName = recordMatch[2]\n      const id = recordMatch[3]\n      if (vaultName === undefined || collName === undefined || id === undefined) {\n        return json(500, { error: 'internal_error' })\n      }\n      try {\n        const vault = await db.openVault(vaultName)\n        const coll = vault.collection<Record<string, unknown>>(collName)\n\n        if (method === 'GET') {\n          const record = await coll.get(id)\n          if (!record) return json(404, { error: 'not_found' })\n          return json(200, record)\n        }\n\n        if (method === 'POST') {\n          let body: unknown\n          try { body = await req.json() } catch { return json(400, { error: 'invalid_json' }) }\n          await coll.put(id, body as Record<string, unknown>)\n          return json(200, { ok: true })\n        }\n\n        if (method === 'DELETE') {\n          await coll.delete(id)\n          return json(200, { ok: true })\n        }\n\n        return {\n          status: 405,\n          headers: { 'content-type': 'application/json', allow: 'GET, POST, DELETE' },\n          body: JSON.stringify({ error: 'method_not_allowed' }),\n        }\n      } catch (err) {\n        if (err instanceof PermissionDeniedError) return json(403, { error: 'forbidden' })\n        if (err instanceof NotFoundError) return json(404, { error: 'not_found' })\n        if (err instanceof ConflictError) return json(409, { error: 'conflict' })\n        return json(500, { error: 'internal_error' })\n      }\n    }\n\n    // Match /vaults/:vault/collections/:collection (list)\n    const collMatch = path.match(/^\\/vaults\\/([^/]+)\\/collections\\/([^/]+)$/)\n    if (collMatch) {\n      if (method !== 'GET') {\n        return {\n          status: 405,\n          headers: { 'content-type': 'application/json', allow: 'GET' },\n          body: JSON.stringify({ error: 'method_not_allowed' }),\n        }\n      }\n      const vaultName = collMatch[1]\n      const collName = collMatch[2]\n      if (vaultName === undefined || collName === undefined) {\n        return json(500, { error: 'internal_error' })\n      }\n      const params = parseQueryParams(req.searchParams)\n      if (params.error) return json(400, params.error)\n      try {\n        const vault = await db.openVault(vaultName)\n        const coll = vault.collection<Record<string, unknown>>(collName)\n        let results = params.apply(coll.query()).toArray()\n        if (params.limit !== null) results = results.slice(0, params.limit)\n        return json(200, results)\n      } catch (err) {\n        if (err instanceof PermissionDeniedError) return json(403, { error: 'forbidden' })\n        return json(500, { error: 'internal_error' })\n      }\n    }\n\n    return json(404, { error: 'not_found' })\n  }\n}\n","import type { Query } from '@noy-db/hub'\n\ntype QueryOp = '==' | '!=' | '>' | '>=' | '<' | '<='\n\nconst OP_MAP: Record<string, QueryOp> = {\n  eq: '==',\n  neq: '!=',\n  gt: '>',\n  gte: '>=',\n  lt: '<',\n  lte: '<=',\n}\n\nexport interface ParsedQueryParams {\n  error?: { error: string; op?: string }\n  apply<T>(q: Query<T>): Query<T>\n  limit: number | null\n}\n\nexport function parseQueryParams(searchParams: URLSearchParams): ParsedQueryParams {\n  const wheres = searchParams.getAll('where')\n  const orderByParam = searchParams.get('orderBy')\n  const limitParam = searchParams.get('limit')\n\n  const whereClauses: Array<{ field: string; op: QueryOp; value: unknown }> = []\n\n  for (const clause of wheres) {\n    const parts = clause.split(':')\n    if (parts.length < 3) {\n      return {\n        error: { error: 'invalid_where', op: clause },\n        apply: (q) => q,\n        limit: null,\n      }\n    }\n    const field = parts[0] as string\n    const opStr = parts[1] as string\n    const value = parts.slice(2).join(':')\n    const op = OP_MAP[opStr]\n    if (!op) {\n      return {\n        error: { error: 'invalid_op', op: opStr },\n        apply: (q) => q,\n        limit: null,\n      }\n    }\n    whereClauses.push({ field, op, value: coerce(value) })\n  }\n\n  let orderBy: { field: string; dir: 'asc' | 'desc' } | null = null\n  if (orderByParam) {\n    const obParts = orderByParam.split(':')\n    const obField = obParts[0] as string\n    const obDir = obParts[1]\n    orderBy = { field: obField, dir: obDir === 'desc' ? 'desc' : 'asc' }\n  }\n\n  const limit = limitParam ? parseInt(limitParam, 10) : null\n\n  return {\n    apply<T>(q: Query<T>): Query<T> {\n      let result = q\n      for (const { field, op, value } of whereClauses) {\n        result = result.where(field, op, value as T[keyof T & string])\n      }\n      if (orderBy) {\n        result = result.orderBy(orderBy.field, orderBy.dir)\n      }\n      return result\n    },\n    limit,\n  }\n}\n\nfunction coerce(raw: string): unknown {\n  if (raw === 'true') return true\n  if (raw === 'false') return false\n  const n = Number(raw)\n  if (!isNaN(n) && raw.trim() !== '') return n\n  return raw\n}\n","/**\n * **@noy-db/in-rest** — Framework-neutral REST API integration for noy-db.\n *\n * @example\n * ```ts\n * import { createRestHandler } from '@noy-db/in-rest'\n * import { honoAdapter } from '@noy-db/in-rest/hono'\n *\n * const handler = createRestHandler({ store, user: 'api' })\n * app.route('/api/noydb', honoAdapter(handler))\n * ```\n *\n * @packageDocumentation\n */\n\nimport type { NoydbStore } from '@noy-db/hub'\nimport { SessionStore } from './sessions.js'\nimport { buildRouter } from './router.js'\n\nexport interface RestRequest {\n  readonly method: string\n  readonly pathname: string\n  readonly searchParams: URLSearchParams\n  readonly headers: Record<string, string>\n  json(): Promise<unknown>\n}\n\nexport interface RestResponse {\n  readonly status: number\n  readonly headers: Record<string, string>\n  readonly body: string | Uint8Array | null\n}\n\nexport interface NoydbRestHandler {\n  handle(req: RestRequest): Promise<RestResponse>\n}\n\nexport interface RestHandlerOptions {\n  readonly store: NoydbStore\n  readonly user: string\n  readonly ttlSeconds?: number\n  readonly basePath?: string\n}\n\nexport function createRestHandler(options: RestHandlerOptions): NoydbRestHandler {\n  const sessions = new SessionStore(options.ttlSeconds ?? 900)\n  const route = buildRouter(options.store, options.user, sessions, options.basePath ?? '')\n  return { handle: route }\n}\n"],"mappings":";AAqBA,IAAM,4BAA4B,IAAI,KAAK;AAEpC,IAAM,eAAN,MAAmB;AAAA,EACP,WAAW,oBAAI,IAAqB;AAAA,EACpC;AAAA,EACA;AAAA,EAEjB,YAAY,YAAoB,UAA+B,CAAC,GAAG;AACjE,SAAK,QAAQ,aAAa;AAC1B,UAAM,UAAU,QAAQ,mBAAmB;AAC3C,QAAI,UAAU,GAAG;AAKf,YAAM,QAAQ,YAAY,MAAM,KAAK,MAAM,GAAG,OAAO;AACrD,UAAI,OAAQ,MAAiC,UAAU,YAAY;AACjE,QAAC,MAAgC,MAAM;AAAA,MACzC;AACA,WAAK,aAAa;AAAA,IACpB,OAAO;AACL,WAAK,aAAa;AAAA,IACpB;AAAA,EACF;AAAA,EAEA,OAAO,IAAmB;AACxB,UAAM,QAAQ,OAAO,WAAW;AAChC,SAAK,SAAS,IAAI,OAAO,EAAE,IAAI,WAAW,KAAK,IAAI,IAAI,KAAK,MAAM,CAAC;AACnE,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,IAAI,OAA6B;AAC/B,UAAM,UAAU,KAAK,SAAS,IAAI,KAAK;AACvC,QAAI,CAAC,QAAS,QAAO;AACrB,QAAI,KAAK,IAAI,IAAI,QAAQ,WAAW;AAClC,WAAK,SAAS,OAAO,KAAK;AAC1B,aAAO;AAAA,IACT;AACA,YAAQ,YAAY,KAAK,IAAI,IAAI,KAAK;AACtC,WAAO,QAAQ;AAAA,EACjB;AAAA,EAEA,OAAO,OAAqB;AAC1B,SAAK,SAAS,OAAO,KAAK;AAAA,EAC5B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,KAAK,OAAwB;AAC3B,UAAM,UAAU,KAAK,SAAS,IAAI,KAAK;AACvC,QAAI,CAAC,QAAS,QAAO;AACrB,QAAI,KAAK,IAAI,IAAI,QAAQ,WAAW;AAClC,WAAK,SAAS,OAAO,KAAK;AAC1B,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,QAAgB;AACd,UAAM,MAAM,KAAK,IAAI;AACrB,QAAI,UAAU;AACd,eAAW,CAAC,OAAO,OAAO,KAAK,KAAK,UAAU;AAC5C,UAAI,MAAM,QAAQ,WAAW;AAC3B,aAAK,SAAS,OAAO,KAAK;AAC1B;AAAA,MACF;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,OAAe;AACb,WAAO,KAAK,SAAS;AAAA,EACvB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,QAAc;AACZ,QAAI,KAAK,eAAe,KAAM,eAAc,KAAK,UAAU;AAC3D,SAAK,SAAS,MAAM;AAAA,EACtB;AACF;;;AC3HA,SAAS,aAAa,uBAAuB,eAAe,eAAe,uBAAuB;;;ACIlG,IAAM,SAAkC;AAAA,EACtC,IAAI;AAAA,EACJ,KAAK;AAAA,EACL,IAAI;AAAA,EACJ,KAAK;AAAA,EACL,IAAI;AAAA,EACJ,KAAK;AACP;AAQO,SAAS,iBAAiB,cAAkD;AACjF,QAAM,SAAS,aAAa,OAAO,OAAO;AAC1C,QAAM,eAAe,aAAa,IAAI,SAAS;AAC/C,QAAM,aAAa,aAAa,IAAI,OAAO;AAE3C,QAAM,eAAsE,CAAC;AAE7E,aAAW,UAAU,QAAQ;AAC3B,UAAM,QAAQ,OAAO,MAAM,GAAG;AAC9B,QAAI,MAAM,SAAS,GAAG;AACpB,aAAO;AAAA,QACL,OAAO,EAAE,OAAO,iBAAiB,IAAI,OAAO;AAAA,QAC5C,OAAO,CAAC,MAAM;AAAA,QACd,OAAO;AAAA,MACT;AAAA,IACF;AACA,UAAM,QAAQ,MAAM,CAAC;AACrB,UAAM,QAAQ,MAAM,CAAC;AACrB,UAAM,QAAQ,MAAM,MAAM,CAAC,EAAE,KAAK,GAAG;AACrC,UAAM,KAAK,OAAO,KAAK;AACvB,QAAI,CAAC,IAAI;AACP,aAAO;AAAA,QACL,OAAO,EAAE,OAAO,cAAc,IAAI,MAAM;AAAA,QACxC,OAAO,CAAC,MAAM;AAAA,QACd,OAAO;AAAA,MACT;AAAA,IACF;AACA,iBAAa,KAAK,EAAE,OAAO,IAAI,OAAO,OAAO,KAAK,EAAE,CAAC;AAAA,EACvD;AAEA,MAAI,UAAyD;AAC7D,MAAI,cAAc;AAChB,UAAM,UAAU,aAAa,MAAM,GAAG;AACtC,UAAM,UAAU,QAAQ,CAAC;AACzB,UAAM,QAAQ,QAAQ,CAAC;AACvB,cAAU,EAAE,OAAO,SAAS,KAAK,UAAU,SAAS,SAAS,MAAM;AAAA,EACrE;AAEA,QAAM,QAAQ,aAAa,SAAS,YAAY,EAAE,IAAI;AAEtD,SAAO;AAAA,IACL,MAAS,GAAuB;AAC9B,UAAI,SAAS;AACb,iBAAW,EAAE,OAAO,IAAI,MAAM,KAAK,cAAc;AAC/C,iBAAS,OAAO,MAAM,OAAO,IAAI,KAA4B;AAAA,MAC/D;AACA,UAAI,SAAS;AACX,iBAAS,OAAO,QAAQ,QAAQ,OAAO,QAAQ,GAAG;AAAA,MACpD;AACA,aAAO;AAAA,IACT;AAAA,IACA;AAAA,EACF;AACF;AAEA,SAAS,OAAO,KAAsB;AACpC,MAAI,QAAQ,OAAQ,QAAO;AAC3B,MAAI,QAAQ,QAAS,QAAO;AAC5B,QAAM,IAAI,OAAO,GAAG;AACpB,MAAI,CAAC,MAAM,CAAC,KAAK,IAAI,KAAK,MAAM,GAAI,QAAO;AAC3C,SAAO;AACT;;;AD1EA,SAAS,KAAK,QAAgB,MAA6B;AACzD,SAAO;AAAA,IACL;AAAA,IACA,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,IAC9C,MAAM,KAAK,UAAU,IAAI;AAAA,EAC3B;AACF;AAEA,SAAS,aAAa,KAAiC;AAErD,QAAM,OAAO,IAAI,QAAQ,eAAe,KAAK,IAAI,QAAQ,eAAe;AACxE,MAAI,CAAC,MAAM,WAAW,SAAS,EAAG,QAAO;AACzC,SAAO,KAAK,MAAM,CAAC;AACrB;AAEO,SAAS,YAAY,OAAmB,MAAc,UAAwB,UAAkB;AACrG,WAAS,UAAU,UAA0B;AAG3C,QAAI,CAAC,SAAU,QAAO;AACtB,QAAI,aAAa,SAAU,QAAO;AAClC,QAAI,SAAS,WAAW,WAAW,GAAG,EAAG,QAAO,SAAS,MAAM,SAAS,MAAM;AAC9E,WAAO;AAAA,EACT;AAEA,SAAO,eAAe,MAAM,KAAyC;AACnE,UAAM,OAAO,UAAU,IAAI,QAAQ;AACnC,UAAM,SAAS,IAAI,OAAO,YAAY;AAItC,QAAI,WAAW,UAAU,SAAS,2BAA2B;AAC3D,UAAI;AACJ,UAAI;AAAE,eAAO,MAAM,IAAI,KAAK;AAAA,MAAE,QAAQ;AAAE,eAAO,KAAK,KAAK,EAAE,OAAO,eAAe,CAAC;AAAA,MAAE;AACpF,YAAM,SAAU,MAAkC;AAClD,UAAI,OAAO,WAAW,YAAY,CAAC,QAAQ;AACzC,eAAO,KAAK,KAAK,EAAE,OAAO,kBAAkB,CAAC;AAAA,MAC/C;AACA,UAAI;AACF,cAAMA,MAAK,MAAM,YAAY,EAAE,OAAO,MAAM,OAAe,CAAC;AAC5D,cAAMC,SAAQ,SAAS,OAAOD,GAAE;AAChC,eAAO,KAAK,KAAK,EAAE,OAAAC,OAAM,CAAC;AAAA,MAC5B,SAAS,KAAK;AACZ,YAAI,eAAe,iBAAiB;AAClC,iBAAO,KAAK,KAAK,EAAE,OAAO,eAAe,SAAS,IAAI,QAAQ,CAAC;AAAA,QACjE;AACA,eAAO,KAAK,KAAK,EAAE,OAAO,iBAAiB,CAAC;AAAA,MAC9C;AAAA,IACF;AAEA,QAAI,WAAW,SAAS,SAAS,qBAAqB;AACpD,YAAMA,SAAQ,aAAa,GAAG;AAC9B,YAAM,SAASA,WAAU,QAAQ,SAAS,KAAKA,MAAK;AACpD,aAAO,KAAK,KAAK,EAAE,OAAO,CAAC;AAAA,IAC7B;AAEA,QAAI,WAAW,YAAY,SAAS,qBAAqB;AACvD,YAAMA,SAAQ,aAAa,GAAG;AAC9B,UAAI,CAACA,UAAS,CAAC,SAAS,KAAKA,MAAK,EAAG,QAAO,KAAK,KAAK,EAAE,OAAO,eAAe,CAAC;AAC/E,eAAS,OAAOA,MAAK;AACrB,aAAO,EAAE,QAAQ,KAAK,SAAS,CAAC,GAAG,MAAM,KAAK;AAAA,IAChD;AAIA,UAAM,QAAQ,aAAa,GAAG;AAC9B,UAAM,KAAK,QAAQ,SAAS,IAAI,KAAK,IAAI;AACzC,QAAI,CAAC,GAAI,QAAO,KAAK,KAAK,EAAE,OAAO,eAAe,CAAC;AAInD,QAAI,WAAW,SAAS,SAAS,WAAW;AAC1C,UAAI;AACF,YAAI,OAAO,MAAM,eAAe,YAAY;AAC1C,gBAAM,SAAS,MAAM,GAAG,qBAAqB;AAC7C,iBAAO,KAAK,KAAK,OAAO,IAAI,OAAK,EAAE,EAAE,CAAC;AAAA,QACxC;AACA,eAAO,KAAK,KAAK,CAAC,CAAC;AAAA,MACrB,QAAQ;AACN,eAAO,KAAK,KAAK,CAAC,CAAC;AAAA,MACrB;AAAA,IACF;AAGA,UAAM,cAAc,KAAK,MAAM,oDAAoD;AACnF,QAAI,aAAa;AACf,YAAM,YAAY,YAAY,CAAC;AAC/B,YAAM,WAAW,YAAY,CAAC;AAC9B,YAAM,KAAK,YAAY,CAAC;AACxB,UAAI,cAAc,UAAa,aAAa,UAAa,OAAO,QAAW;AACzE,eAAO,KAAK,KAAK,EAAE,OAAO,iBAAiB,CAAC;AAAA,MAC9C;AACA,UAAI;AACF,cAAM,QAAQ,MAAM,GAAG,UAAU,SAAS;AAC1C,cAAM,OAAO,MAAM,WAAoC,QAAQ;AAE/D,YAAI,WAAW,OAAO;AACpB,gBAAM,SAAS,MAAM,KAAK,IAAI,EAAE;AAChC,cAAI,CAAC,OAAQ,QAAO,KAAK,KAAK,EAAE,OAAO,YAAY,CAAC;AACpD,iBAAO,KAAK,KAAK,MAAM;AAAA,QACzB;AAEA,YAAI,WAAW,QAAQ;AACrB,cAAI;AACJ,cAAI;AAAE,mBAAO,MAAM,IAAI,KAAK;AAAA,UAAE,QAAQ;AAAE,mBAAO,KAAK,KAAK,EAAE,OAAO,eAAe,CAAC;AAAA,UAAE;AACpF,gBAAM,KAAK,IAAI,IAAI,IAA+B;AAClD,iBAAO,KAAK,KAAK,EAAE,IAAI,KAAK,CAAC;AAAA,QAC/B;AAEA,YAAI,WAAW,UAAU;AACvB,gBAAM,KAAK,OAAO,EAAE;AACpB,iBAAO,KAAK,KAAK,EAAE,IAAI,KAAK,CAAC;AAAA,QAC/B;AAEA,eAAO;AAAA,UACL,QAAQ;AAAA,UACR,SAAS,EAAE,gBAAgB,oBAAoB,OAAO,oBAAoB;AAAA,UAC1E,MAAM,KAAK,UAAU,EAAE,OAAO,qBAAqB,CAAC;AAAA,QACtD;AAAA,MACF,SAAS,KAAK;AACZ,YAAI,eAAe,sBAAuB,QAAO,KAAK,KAAK,EAAE,OAAO,YAAY,CAAC;AACjF,YAAI,eAAe,cAAe,QAAO,KAAK,KAAK,EAAE,OAAO,YAAY,CAAC;AACzE,YAAI,eAAe,cAAe,QAAO,KAAK,KAAK,EAAE,OAAO,WAAW,CAAC;AACxE,eAAO,KAAK,KAAK,EAAE,OAAO,iBAAiB,CAAC;AAAA,MAC9C;AAAA,IACF;AAGA,UAAM,YAAY,KAAK,MAAM,2CAA2C;AACxE,QAAI,WAAW;AACb,UAAI,WAAW,OAAO;AACpB,eAAO;AAAA,UACL,QAAQ;AAAA,UACR,SAAS,EAAE,gBAAgB,oBAAoB,OAAO,MAAM;AAAA,UAC5D,MAAM,KAAK,UAAU,EAAE,OAAO,qBAAqB,CAAC;AAAA,QACtD;AAAA,MACF;AACA,YAAM,YAAY,UAAU,CAAC;AAC7B,YAAM,WAAW,UAAU,CAAC;AAC5B,UAAI,cAAc,UAAa,aAAa,QAAW;AACrD,eAAO,KAAK,KAAK,EAAE,OAAO,iBAAiB,CAAC;AAAA,MAC9C;AACA,YAAM,SAAS,iBAAiB,IAAI,YAAY;AAChD,UAAI,OAAO,MAAO,QAAO,KAAK,KAAK,OAAO,KAAK;AAC/C,UAAI;AACF,cAAM,QAAQ,MAAM,GAAG,UAAU,SAAS;AAC1C,cAAM,OAAO,MAAM,WAAoC,QAAQ;AAC/D,YAAI,UAAU,OAAO,MAAM,KAAK,MAAM,CAAC,EAAE,QAAQ;AACjD,YAAI,OAAO,UAAU,KAAM,WAAU,QAAQ,MAAM,GAAG,OAAO,KAAK;AAClE,eAAO,KAAK,KAAK,OAAO;AAAA,MAC1B,SAAS,KAAK;AACZ,YAAI,eAAe,sBAAuB,QAAO,KAAK,KAAK,EAAE,OAAO,YAAY,CAAC;AACjF,eAAO,KAAK,KAAK,EAAE,OAAO,iBAAiB,CAAC;AAAA,MAC9C;AAAA,IACF;AAEA,WAAO,KAAK,KAAK,EAAE,OAAO,YAAY,CAAC;AAAA,EACzC;AACF;;;AExHO,SAAS,kBAAkB,SAA+C;AAC/E,QAAM,WAAW,IAAI,aAAa,QAAQ,cAAc,GAAG;AAC3D,QAAM,QAAQ,YAAY,QAAQ,OAAO,QAAQ,MAAM,UAAU,QAAQ,YAAY,EAAE;AACvF,SAAO,EAAE,QAAQ,MAAM;AACzB;","names":["db","token"]}
+{"version":3,"sources":["../src/router.ts","../src/index.ts"],"sourcesContent":["import { isConflictError } from '@noy-db/hub'\nimport type { NoydbStore, EncryptedEnvelope, VaultSnapshot } from '@noy-db/hub'\nimport type { RestRequest, RestResponse, RestHandlerOptions } from './index.js'\n\nfunction json(status: number, body: unknown): RestResponse {\n  return {\n    status,\n    headers: { 'content-type': 'application/json' },\n    body: JSON.stringify(body),\n  }\n}\n\n/**\n * The 6 required `NoydbStore` methods plus the optional sync/pagination\n * extensions — the exact set `by-peer`'s `servePeerStore` exposes. The\n * router never decrypts or interprets an argument; it forwards the\n * positional tuple straight to `store.*` and returns the raw result.\n */\nconst CORE_METHODS = new Set<string>([\n  'get',\n  'put',\n  'delete',\n  'list',\n  'loadAll',\n  'saveAll',\n  'ping',\n  'listSince',\n  'listPage',\n  'listVaults',\n])\n\nclass UnknownMethodError extends Error {}\nclass UnsupportedMethodError extends Error {}\n\nasync function dispatch(store: NoydbStore, method: string, args: readonly unknown[]): Promise<unknown> {\n  switch (method) {\n    case 'get': {\n      const [vault, collection, id] = args as [string, string, string]\n      return store.get(vault, collection, id)\n    }\n    case 'put': {\n      const [vault, collection, id, envelope, expectedVersion] = args as [\n        string,\n        string,\n        string,\n        EncryptedEnvelope,\n        number | undefined,\n      ]\n      await store.put(vault, collection, id, envelope, expectedVersion)\n      return null\n    }\n    case 'delete': {\n      const [vault, collection, id] = args as [string, string, string]\n      await store.delete(vault, collection, id)\n      return null\n    }\n    case 'list': {\n      const [vault, collection] = args as [string, string]\n      return store.list(vault, collection)\n    }\n    case 'loadAll': {\n      const [vault] = args as [string]\n      return store.loadAll(vault)\n    }\n    case 'saveAll': {\n      const [vault, data] = args as [string, VaultSnapshot]\n      await store.saveAll(vault, data)\n      return null\n    }\n    case 'ping': {\n      if (!store.ping) return true\n      return store.ping()\n    }\n    case 'listSince': {\n      if (!store.listSince) throw new UnsupportedMethodError('listSince not supported by this store')\n      const [vault, collection, since] = args as [string, string, string]\n      return store.listSince(vault, collection, since)\n    }\n    case 'listPage': {\n      if (!store.listPage) throw new UnsupportedMethodError('listPage not supported by this store')\n      const [vault, collection, cursor, limit] = args as [\n        string,\n        string,\n        string | undefined,\n        number | undefined,\n      ]\n      return store.listPage(vault, collection, cursor, limit)\n    }\n    case 'listVaults': {\n      if (!store.listVaults) throw new UnsupportedMethodError('listVaults not supported by this store')\n      return store.listVaults()\n    }\n  }\n  /* istanbul ignore next — CORE_METHODS gate makes this unreachable */\n  throw new UnknownMethodError(`Unhandled method: ${method}`)\n}\n\nexport function buildRouter(opts: RestHandlerOptions) {\n  const { store, authorize, allow } = opts\n  const basePath = opts.basePath ?? ''\n\n  function stripBase(pathname: string): string {\n    // Segment-aware prefix match: basePath '/api' matches '/api' or '/api/...'\n    // but NOT '/apifoo' or '/api-other/...'.\n    if (!basePath) return pathname\n    if (pathname === basePath) return '/'\n    if (pathname.startsWith(basePath + '/')) return pathname.slice(basePath.length)\n    return pathname\n  }\n\n  return async function route(req: RestRequest): Promise<RestResponse> {\n    const path = stripBase(req.pathname)\n    const method = req.method.toUpperCase()\n\n    if (method !== 'POST' || path !== '/rpc') {\n      return json(404, { error: { name: 'NotFound', message: 'no such route' } })\n    }\n\n    // Auth first, and fail-closed: an omitted authorizer denies every\n    // request. The caller MUST supply one to accept any traffic. A throwing\n    // authorizer also fails closed — a structured 500 with no leaked detail,\n    // never an open request or an uncaught rejection out of handle().\n    let authorized: boolean\n    try {\n      authorized = authorize ? await authorize(req) : false\n    } catch {\n      return json(500, { error: { name: 'Error', message: 'authorization failed' } })\n    }\n    if (!authorized) {\n      return json(401, { error: { name: 'Unauthorized', message: 'unauthorized' } })\n    }\n\n    let body: unknown\n    try {\n      body = await req.json()\n    } catch {\n      return json(400, { error: { name: 'BadRequest', message: 'invalid JSON body' } })\n    }\n    const rpcMethod = (body as Record<string, unknown> | null)?.method\n    const rpcArgs = (body as Record<string, unknown> | null)?.args\n    if (typeof rpcMethod !== 'string' || !Array.isArray(rpcArgs)) {\n      return json(400, { error: { name: 'BadRequest', message: 'body must be { method: string, args: unknown[] }' } })\n    }\n\n    if (!CORE_METHODS.has(rpcMethod)) {\n      return json(400, { error: { name: 'BadRequest', message: `unknown method: ${rpcMethod}` } })\n    }\n    if (allow && !allow.has(rpcMethod)) {\n      return json(403, { error: { name: 'Forbidden', message: `method not allowed: ${rpcMethod}` } })\n    }\n\n    try {\n      const result = await dispatch(store, rpcMethod, rpcArgs)\n      return json(200, result ?? null)\n    } catch (err) {\n      if (isConflictError(err)) {\n        return json(409, { error: { name: 'ConflictError', message: err.message, version: err.version } })\n      }\n      if (err instanceof UnsupportedMethodError) {\n        // The request was well-formed; the backing store just lacks this\n        // optional method. 501 (not 400) lets a client feature-detect.\n        return json(501, { error: { name: 'NotImplemented', message: err.message } })\n      }\n      // Preserve the error NAME so a client can branch / re-hydrate, but do\n      // NOT echo the raw store message — it may embed operational internals\n      // (connection strings, paths). Operators read the detail from logs.\n      const e = err as Error\n      return json(500, { error: { name: e.name ?? 'Error', message: 'store error' } })\n    }\n  }\n}\n","/**\n * **@noy-db/in-rest** — Framework-neutral REST API integration for noy-db.\n *\n * A thin RPC dispatcher — the HTTP twin of `@noy-db/by-peer`'s\n * `servePeerStore` — that forwards the 6 `NoydbStore` methods straight to\n * the caller's ciphertext store. The server NEVER sees a passphrase, never\n * calls `createNoydb`/`openVault`, and never decrypts anything: every\n * request/response body is an `EncryptedEnvelope` (or a plain id/list of\n * one) round-tripped as-is.\n *\n * @example\n * ```ts\n * import { createRestHandler } from '@noy-db/in-rest'\n * import { honoAdapter } from '@noy-db/in-rest/hono'\n *\n * const handler = createRestHandler({\n *   store,\n *   authorize: (req) => req.headers['authorization'] === `Bearer ${API_KEY}`,\n * })\n * app.route('/api/noydb', honoAdapter(handler))\n * ```\n *\n * @packageDocumentation\n */\n\nimport type { NoydbStore } from '@noy-db/hub'\nimport { buildRouter } from './router.js'\n\nexport interface RestRequest {\n  readonly method: string\n  readonly pathname: string\n  readonly searchParams: URLSearchParams\n  readonly headers: Record<string, string>\n  json(): Promise<unknown>\n}\n\nexport interface RestResponse {\n  readonly status: number\n  readonly headers: Record<string, string>\n  readonly body: string | Uint8Array | null\n}\n\nexport interface NoydbRestHandler {\n  handle(req: RestRequest): Promise<RestResponse>\n}\n\nexport interface RestHandlerOptions {\n  readonly store: NoydbStore\n  /**\n   * Authorize each request. Return `true` to allow. If OMITTED, the\n   * handler is FAIL-CLOSED — every `/rpc` request is rejected with 401.\n   * The caller MUST supply an authorizer to accept any traffic.\n   */\n  readonly authorize?: (req: RestRequest) => boolean | Promise<boolean>\n  /**\n   * Optional method allowlist (e.g. a read-only relay). When set, a\n   * method not in the set is rejected with 403.\n   */\n  readonly allow?: ReadonlySet<string>\n  readonly basePath?: string\n}\n\nexport function createRestHandler(options: RestHandlerOptions): NoydbRestHandler {\n  const route = buildRouter(options)\n  return { handle: route }\n}\n"],"mappings":";AAAA,SAAS,uBAAuB;AAIhC,SAAS,KAAK,QAAgB,MAA6B;AACzD,SAAO;AAAA,IACL;AAAA,IACA,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,IAC9C,MAAM,KAAK,UAAU,IAAI;AAAA,EAC3B;AACF;AAQA,IAAM,eAAe,oBAAI,IAAY;AAAA,EACnC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAED,IAAM,qBAAN,cAAiC,MAAM;AAAC;AACxC,IAAM,yBAAN,cAAqC,MAAM;AAAC;AAE5C,eAAe,SAAS,OAAmB,QAAgB,MAA4C;AACrG,UAAQ,QAAQ;AAAA,IACd,KAAK,OAAO;AACV,YAAM,CAAC,OAAO,YAAY,EAAE,IAAI;AAChC,aAAO,MAAM,IAAI,OAAO,YAAY,EAAE;AAAA,IACxC;AAAA,IACA,KAAK,OAAO;AACV,YAAM,CAAC,OAAO,YAAY,IAAI,UAAU,eAAe,IAAI;AAO3D,YAAM,MAAM,IAAI,OAAO,YAAY,IAAI,UAAU,eAAe;AAChE,aAAO;AAAA,IACT;AAAA,IACA,KAAK,UAAU;AACb,YAAM,CAAC,OAAO,YAAY,EAAE,IAAI;AAChC,YAAM,MAAM,OAAO,OAAO,YAAY,EAAE;AACxC,aAAO;AAAA,IACT;AAAA,IACA,KAAK,QAAQ;AACX,YAAM,CAAC,OAAO,UAAU,IAAI;AAC5B,aAAO,MAAM,KAAK,OAAO,UAAU;AAAA,IACrC;AAAA,IACA,KAAK,WAAW;AACd,YAAM,CAAC,KAAK,IAAI;AAChB,aAAO,MAAM,QAAQ,KAAK;AAAA,IAC5B;AAAA,IACA,KAAK,WAAW;AACd,YAAM,CAAC,OAAO,IAAI,IAAI;AACtB,YAAM,MAAM,QAAQ,OAAO,IAAI;AAC/B,aAAO;AAAA,IACT;AAAA,IACA,KAAK,QAAQ;AACX,UAAI,CAAC,MAAM,KAAM,QAAO;AACxB,aAAO,MAAM,KAAK;AAAA,IACpB;AAAA,IACA,KAAK,aAAa;AAChB,UAAI,CAAC,MAAM,UAAW,OAAM,IAAI,uBAAuB,uCAAuC;AAC9F,YAAM,CAAC,OAAO,YAAY,KAAK,IAAI;AACnC,aAAO,MAAM,UAAU,OAAO,YAAY,KAAK;AAAA,IACjD;AAAA,IACA,KAAK,YAAY;AACf,UAAI,CAAC,MAAM,SAAU,OAAM,IAAI,uBAAuB,sCAAsC;AAC5F,YAAM,CAAC,OAAO,YAAY,QAAQ,KAAK,IAAI;AAM3C,aAAO,MAAM,SAAS,OAAO,YAAY,QAAQ,KAAK;AAAA,IACxD;AAAA,IACA,KAAK,cAAc;AACjB,UAAI,CAAC,MAAM,WAAY,OAAM,IAAI,uBAAuB,wCAAwC;AAChG,aAAO,MAAM,WAAW;AAAA,IAC1B;AAAA,EACF;AAEA,QAAM,IAAI,mBAAmB,qBAAqB,MAAM,EAAE;AAC5D;AAEO,SAAS,YAAY,MAA0B;AACpD,QAAM,EAAE,OAAO,WAAW,MAAM,IAAI;AACpC,QAAM,WAAW,KAAK,YAAY;AAElC,WAAS,UAAU,UAA0B;AAG3C,QAAI,CAAC,SAAU,QAAO;AACtB,QAAI,aAAa,SAAU,QAAO;AAClC,QAAI,SAAS,WAAW,WAAW,GAAG,EAAG,QAAO,SAAS,MAAM,SAAS,MAAM;AAC9E,WAAO;AAAA,EACT;AAEA,SAAO,eAAe,MAAM,KAAyC;AACnE,UAAM,OAAO,UAAU,IAAI,QAAQ;AACnC,UAAM,SAAS,IAAI,OAAO,YAAY;AAEtC,QAAI,WAAW,UAAU,SAAS,QAAQ;AACxC,aAAO,KAAK,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,SAAS,gBAAgB,EAAE,CAAC;AAAA,IAC5E;AAMA,QAAI;AACJ,QAAI;AACF,mBAAa,YAAY,MAAM,UAAU,GAAG,IAAI;AAAA,IAClD,QAAQ;AACN,aAAO,KAAK,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,SAAS,uBAAuB,EAAE,CAAC;AAAA,IAChF;AACA,QAAI,CAAC,YAAY;AACf,aAAO,KAAK,KAAK,EAAE,OAAO,EAAE,MAAM,gBAAgB,SAAS,eAAe,EAAE,CAAC;AAAA,IAC/E;AAEA,QAAI;AACJ,QAAI;AACF,aAAO,MAAM,IAAI,KAAK;AAAA,IACxB,QAAQ;AACN,aAAO,KAAK,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,SAAS,oBAAoB,EAAE,CAAC;AAAA,IAClF;AACA,UAAM,YAAa,MAAyC;AAC5D,UAAM,UAAW,MAAyC;AAC1D,QAAI,OAAO,cAAc,YAAY,CAAC,MAAM,QAAQ,OAAO,GAAG;AAC5D,aAAO,KAAK,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,SAAS,mDAAmD,EAAE,CAAC;AAAA,IACjH;AAEA,QAAI,CAAC,aAAa,IAAI,SAAS,GAAG;AAChC,aAAO,KAAK,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,SAAS,mBAAmB,SAAS,GAAG,EAAE,CAAC;AAAA,IAC7F;AACA,QAAI,SAAS,CAAC,MAAM,IAAI,SAAS,GAAG;AAClC,aAAO,KAAK,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,SAAS,uBAAuB,SAAS,GAAG,EAAE,CAAC;AAAA,IAChG;AAEA,QAAI;AACF,YAAM,SAAS,MAAM,SAAS,OAAO,WAAW,OAAO;AACvD,aAAO,KAAK,KAAK,UAAU,IAAI;AAAA,IACjC,SAAS,KAAK;AACZ,UAAI,gBAAgB,GAAG,GAAG;AACxB,eAAO,KAAK,KAAK,EAAE,OAAO,EAAE,MAAM,iBAAiB,SAAS,IAAI,SAAS,SAAS,IAAI,QAAQ,EAAE,CAAC;AAAA,MACnG;AACA,UAAI,eAAe,wBAAwB;AAGzC,eAAO,KAAK,KAAK,EAAE,OAAO,EAAE,MAAM,kBAAkB,SAAS,IAAI,QAAQ,EAAE,CAAC;AAAA,MAC9E;AAIA,YAAM,IAAI;AACV,aAAO,KAAK,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,SAAS,SAAS,cAAc,EAAE,CAAC;AAAA,IACjF;AAAA,EACF;AACF;;;AC5GO,SAAS,kBAAkB,SAA+C;AAC/E,QAAM,QAAQ,YAAY,OAAO;AACjC,SAAO,EAAE,QAAQ,MAAM;AACzB;","names":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@noy-db/in-rest",
-  "version": "0.5.0",
+  "version": "0.6.0-pre.1",
   "description": "Framework-neutral REST API integration for noy-db — createRestHandler with Hono, Express, Fastify, and Nitro subpath adapters.",
   "license": "MIT",
   "author": "vLannaAi <vicio@lanna.ai>",
@@ -48,7 +48,7 @@
     "node": ">=22.0.0"
   },
   "peerDependencies": {
-    "@noy-db/hub": "0.5.0"
+    "@noy-db/hub": "0.6.0-pre.1"
   },
   "peerDependenciesMeta": {
     "hono": {
@@ -70,7 +70,7 @@
     "fastify": "^5.0.0",
     "h3": "^1.13.0",
     "hono": "^4.0.0",
-    "@noy-db/hub": "0.5.0"
+    "@noy-db/hub": "0.6.0-pre.1"
   },
   "keywords": [
     "noy-db",