@opendatalabs/personal-server-ts-server 1.33.7 → 1.34.0

package/dist/routes/pdpp-declarations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pdpp-declarations.js","sourceRoot":"","sources":["../../src/routes/pdpp-declarations.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAqB9C,MAAM,UAAU,qBAAqB,CAAC,IAA8B;IAClE,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IAEvB,GAAG,CAAC,IAAI,CAAC,eAAe,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACpC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;YACnE,OAAO,CAAC,CAAC,IAAI,CACX;gBACE,KAAK,EAAE,cAAc;gBACrB,iBAAiB,EACf,yDAAyD;aAC5D,EACD,GAAG,EACH,EAAE,eAAe,EAAE,UAAU,EAAE,CAChC,CAAC;QACJ,CAAC;QAED,0EAA0E;QAC1E,wEAAwE;QACxE,kEAAkE;QAClE,mDAAmD;QACnD,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAEpC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,EAC7D,0BAA0B,CAC3B,CAAC;YACF,OAAO,CAAC,CAAC,IAAI,CACX;gBACE,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI;gBAC1B,iBAAiB,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO;aAC1C,EACD,GAAG,EACH,EAAE,eAAe,EAAE,UAAU,EAAE,CAChC,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,IAAI,CACd;YACE,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,SAAS;YACnC,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO;YAChC,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;SAC5C,EACD,2BAA2B,CAC5B,CAAC;QAEF,0EAA0E;QAC1E,kDAAkD;QAClD,OAAO,CAAC,CAAC,IAAI,CACX;YACE,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,SAAS;YACpC,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,WAAW;YACxC,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO;YAChC,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM;YAC9B,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;SACpD,EACD,GAAG,EACH,EAAE,eAAe,EAAE,UAAU,EAAE,CAChC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,SAAS,UAAU,CAAC,MAA0B,EAAE,QAAiB;IAC/D,IAAI,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5B,IAAI,CAAC,MAAM,EAAE,WAAW,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/D,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrC,IAAI,SAAS,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACrD,OAAO,eAAe,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;AAC5C,CAAC"}

package/dist/routes/pdpp-instance-bindings.d.ts

@@ -0,0 +1,26 @@
+import { Hono } from "hono";
+import type { PdppAuthorizationService } from "@opendatalabs/personal-server-ts-core/ports/pdpp-auth";
+import { type PdppInstanceBinding } from "../storage/pdpp-records-sqlite-store.js";
+interface InstanceBindingStore {
+    getInstanceBinding(instance: string): PdppInstanceBinding;
+    resetInstanceBinding(input: {
+        instance: string;
+        expectedMethod: string | null;
+        expectedGeneration: number;
+        nextMethod: string | null;
+    }): {
+        binding: PdppInstanceBinding;
+        alreadyReset: boolean;
+    };
+}
+export interface PdppInstanceBindingRouteDeps {
+    store: InstanceBindingStore;
+    auth: PdppAuthorizationService;
+    ownerSubjectId: string;
+    instancesForSubject(subjectId: string): string[];
+    instancesForSource?(subjectId: string, sourceId: string): string[];
+    configuredMethods: Map<string, string[]>;
+}
+export declare function pdppInstanceBindingRoutes(deps: PdppInstanceBindingRouteDeps): Hono;
+export {};
+//# sourceMappingURL=pdpp-instance-bindings.d.ts.map

package/dist/routes/pdpp-instance-bindings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pdpp-instance-bindings.d.ts","sourceRoot":"","sources":["../../src/routes/pdpp-instance-bindings.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,uDAAuD,CAAC;AACtG,OAAO,EAEL,KAAK,mBAAmB,EACzB,MAAM,yCAAyC,CAAC;AAEjD,UAAU,oBAAoB;IAC5B,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,mBAAmB,CAAC;IAC1D,oBAAoB,CAAC,KAAK,EAAE;QAC1B,QAAQ,EAAE,MAAM,CAAC;QACjB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;QAC9B,kBAAkB,EAAE,MAAM,CAAC;QAC3B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;KAC3B,GAAG;QAAE,OAAO,EAAE,mBAAmB,CAAC;QAAC,YAAY,EAAE,OAAO,CAAA;KAAE,CAAC;CAC7D;AAED,MAAM,WAAW,4BAA4B;IAC3C,KAAK,EAAE,oBAAoB,CAAC;IAC5B,IAAI,EAAE,wBAAwB,CAAC;IAC/B,cAAc,EAAE,MAAM,CAAC;IACvB,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IACjD,kBAAkB,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IACnE,iBAAiB,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;CAC1C;AAaD,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,4BAA4B,GACjC,IAAI,CA6JN"}

package/dist/routes/pdpp-instance-bindings.js

@@ -0,0 +1,124 @@
+import { Hono } from "hono";
+import { randomUUID } from "node:crypto";
+import { PdppBindingError, } from "../storage/pdpp-records-sqlite-store.js";
+function errorResponse(code, message, status) {
+    return Response.json({ error: { code, message }, request_id: `req_${randomUUID()}` }, { status });
+}
+export function pdppInstanceBindingRoutes(deps) {
+    const app = new Hono();
+    async function ownerContext(request) {
+        const token = request.headers
+            .get("authorization")
+            ?.match(/^Bearer\s+(.+)$/i)?.[1];
+        if (!token)
+            return {
+                error: errorResponse("authentication_error", "Missing access token", 401),
+            };
+        const context = await deps.auth.resolveToken(token);
+        if (!context.active ||
+            context.tokenKind !== "owner" ||
+            !context.subjectId ||
+            context.subjectId.toLowerCase() !== deps.ownerSubjectId.toLowerCase()) {
+            return {
+                error: errorResponse("authentication_error", "Owner token required", 401),
+            };
+        }
+        return {
+            subjectId: context.subjectId,
+            instanceIds: context.instanceIds,
+            sourceId: context.sourceId,
+        };
+    }
+    function scopedOwnedInstances(owner) {
+        if (owner.sourceId) {
+            const current = deps.instancesForSource?.(owner.subjectId, owner.sourceId) ?? [];
+            if (!owner.instanceIds)
+                return current;
+            return owner.instanceIds.filter((instance) => current.includes(instance));
+        }
+        const current = deps.instancesForSubject(owner.subjectId);
+        if (!owner.instanceIds)
+            return [];
+        return owner.instanceIds.filter((instance) => current.includes(instance));
+    }
+    function canAccessInstance(instance, owner) {
+        return scopedOwnedInstances(owner).includes(instance);
+    }
+    function configuredActiveMethod(instance) {
+        const methods = deps.configuredMethods.get(instance) ?? [];
+        return methods.length === 1 ? methods[0] : null;
+    }
+    app.get("/pdpp/instances/:instance/binding", async (c) => {
+        const owner = await ownerContext(c.req.raw);
+        if ("error" in owner)
+            return owner.error;
+        const instance = c.req.param("instance");
+        if (!canAccessInstance(instance, owner)) {
+            return errorResponse("authentication_error", "Instance is not owned", 401);
+        }
+        const binding = deps.store.getInstanceBinding(instance);
+        return c.json({
+            method: binding.method,
+            generation: binding.generation,
+            empty: binding.empty === true,
+            configured_active_method: configuredActiveMethod(instance),
+        });
+    });
+    app.post("/pdpp/instances/:instance/reset", async (c) => {
+        const owner = await ownerContext(c.req.raw);
+        if ("error" in owner)
+            return owner.error;
+        const instance = c.req.param("instance");
+        if (!canAccessInstance(instance, owner)) {
+            return errorResponse("authentication_error", "Instance is not owned", 401);
+        }
+        let body;
+        try {
+            body = await c.req.json();
+        }
+        catch {
+            return errorResponse("invalid_request", "Reset body must be JSON", 400);
+        }
+        if (!body || typeof body !== "object" || Array.isArray(body)) {
+            return errorResponse("invalid_request", "Reset body must be an object", 400);
+        }
+        const input = body;
+        if (!(typeof input.expected_method === "string" ||
+            input.expected_method === null) ||
+            !Number.isSafeInteger(input.expected_generation) ||
+            typeof input.expected_generation !== "number" ||
+            input.expected_generation < 1 ||
+            !(typeof input.next_method === "string" || input.next_method === null)) {
+            return errorResponse("invalid_request", "Reset fields are invalid", 400);
+        }
+        // Reject malformed method ids here. Registered connections also enforce
+        // their fixed method in the store; the reset route cannot switch them.
+        if (typeof input.next_method === "string" &&
+            (!input.next_method.trim() ||
+                input.next_method !== input.next_method.trim())) {
+            return errorResponse("invalid_request", "next_method must be null or an unpadded, non-empty method id", 400);
+        }
+        try {
+            const result = deps.store.resetInstanceBinding({
+                instance,
+                expectedMethod: input.expected_method,
+                expectedGeneration: input.expected_generation,
+                nextMethod: input.next_method,
+            });
+            return c.json({
+                method: result.binding.method,
+                generation: result.binding.generation,
+                reset_clock: result.binding.resetClock,
+                ...(result.alreadyReset && { status: "already_reset" }),
+            });
+        }
+        catch (err) {
+            if (err instanceof PdppBindingError) {
+                return errorResponse(err.reason, err.reason, 409);
+            }
+            throw err;
+        }
+    });
+    return app;
+}
+//# sourceMappingURL=pdpp-instance-bindings.js.map

package/dist/routes/pdpp-instance-bindings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pdpp-instance-bindings.js","sourceRoot":"","sources":["../../src/routes/pdpp-instance-bindings.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EACL,gBAAgB,GAEjB,MAAM,yCAAyC,CAAC;AAqBjD,SAAS,aAAa,CACpB,IAAY,EACZ,OAAe,EACf,MAA6B;IAE7B,OAAO,QAAQ,CAAC,IAAI,CAClB,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,UAAU,EAAE,OAAO,UAAU,EAAE,EAAE,EAAE,EAC/D,EAAE,MAAM,EAAE,CACX,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,IAAkC;IAElC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IAEvB,KAAK,UAAU,YAAY,CAAC,OAAgB;QAC1C,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO;aAC1B,GAAG,CAAC,eAAe,CAAC;YACrB,EAAE,KAAK,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACnC,IAAI,CAAC,KAAK;YACR,OAAO;gBACL,KAAK,EAAE,aAAa,CAClB,sBAAsB,EACtB,sBAAsB,EACtB,GAAG,CACJ;aACF,CAAC;QACJ,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QACpD,IACE,CAAC,OAAO,CAAC,MAAM;YACf,OAAO,CAAC,SAAS,KAAK,OAAO;YAC7B,CAAC,OAAO,CAAC,SAAS;YAClB,OAAO,CAAC,SAAS,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,cAAc,CAAC,WAAW,EAAE,EACrE,CAAC;YACD,OAAO;gBACL,KAAK,EAAE,aAAa,CAClB,sBAAsB,EACtB,sBAAsB,EACtB,GAAG,CACJ;aACF,CAAC;QACJ,CAAC;QACD,OAAO;YACL,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,QAAQ,EAAE,OAAO,CAAC,QAAQ;SAC3B,CAAC;IACJ,CAAC;IAED,SAAS,oBAAoB,CAAC,KAI7B;QACC,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YACnB,MAAM,OAAO,GACX,IAAI,CAAC,kBAAkB,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnE,IAAI,CAAC,KAAK,CAAC,WAAW;gBAAE,OAAO,OAAO,CAAC;YACvC,OAAO,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC5E,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC1D,IAAI,CAAC,KAAK,CAAC,WAAW;YAAE,OAAO,EAAE,CAAC;QAClC,OAAO,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC5E,CAAC;IAED,SAAS,iBAAiB,CACxB,QAAgB,EAChB,KAAuE;QAEvE,OAAO,oBAAoB,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACxD,CAAC;IAED,SAAS,sBAAsB,CAAC,QAAgB;QAC9C,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC3D,OAAO,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAClD,CAAC;IAED,GAAG,CAAC,GAAG,CAAC,mCAAmC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACvD,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5C,IAAI,OAAO,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC,KAAK,CAAC;QACzC,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACzC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC;YACxC,OAAO,aAAa,CAClB,sBAAsB,EACtB,uBAAuB,EACvB,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QACxD,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,KAAK,EAAE,OAAO,CAAC,KAAK,KAAK,IAAI;YAC7B,wBAAwB,EAAE,sBAAsB,CAAC,QAAQ,CAAC;SAC3D,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,iCAAiC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACtD,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5C,IAAI,OAAO,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC,KAAK,CAAC;QACzC,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACzC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC;YACxC,OAAO,aAAa,CAClB,sBAAsB,EACtB,uBAAuB,EACvB,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,IAAI,IAAa,CAAC;QAClB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,aAAa,CAAC,iBAAiB,EAAE,yBAAyB,EAAE,GAAG,CAAC,CAAC;QAC1E,CAAC;QACD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7D,OAAO,aAAa,CAClB,iBAAiB,EACjB,8BAA8B,EAC9B,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,IAA+B,CAAC;QAC9C,IACE,CAAC,CACC,OAAO,KAAK,CAAC,eAAe,KAAK,QAAQ;YACzC,KAAK,CAAC,eAAe,KAAK,IAAI,CAC/B;YACD,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,mBAAmB,CAAC;YAChD,OAAO,KAAK,CAAC,mBAAmB,KAAK,QAAQ;YAC7C,KAAK,CAAC,mBAAmB,GAAG,CAAC;YAC7B,CAAC,CAAC,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,IAAI,KAAK,CAAC,WAAW,KAAK,IAAI,CAAC,EACtE,CAAC;YACD,OAAO,aAAa,CAAC,iBAAiB,EAAE,0BAA0B,EAAE,GAAG,CAAC,CAAC;QAC3E,CAAC;QACD,wEAAwE;QACxE,uEAAuE;QACvE,IACE,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ;YACrC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE;gBACxB,KAAK,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,EACjD,CAAC;YACD,OAAO,aAAa,CAClB,iBAAiB,EACjB,8DAA8D,EAC9D,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC;gBAC7C,QAAQ;gBACR,cAAc,EAAE,KAAK,CAAC,eAAgC;gBACtD,kBAAkB,EAAE,KAAK,CAAC,mBAA6B;gBACvD,UAAU,EAAE,KAAK,CAAC,WAA4B;aAC/C,CAAC,CAAC;YACH,OAAO,CAAC,CAAC,IAAI,CAAC;gBACZ,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM;gBAC7B,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,UAAU;gBACrC,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,UAAU;gBACtC,GAAG,CAAC,MAAM,CAAC,YAAY,IAAI,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;aACxD,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,gBAAgB,EAAE,CAAC;gBACpC,OAAO,aAAa,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YACpD,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/routes/pdpp-records.d.ts

@@ -0,0 +1,158 @@
+import { Hono, type Context } from "hono";
+import { type createSqliteRecordStore } from "../storage/pdpp-records-sqlite-store.js";
+import type { PdppAuthorizationService } from "@opendatalabs/personal-server-ts-core/ports/pdpp-auth";
+import { type PdppRecordStore, type StreamDeclarationRegistry } from "@opendatalabs/personal-server-ts-core/storage/pdpp-records";
+export declare const MAX_BLOB_UPLOAD_BYTES: number;
+/** 512 MiB — max body size for PDPP record ingest and replace routes. */
+export declare const MAX_INGEST_BODY_BYTES: number;
+/** 64 KiB of UTF-8 — max body size for the completion metadata route. */
+export declare const MAX_COMPLETION_BODY_BYTES: number;
+export interface PdppRecordsRouteDeps {
+    store: PdppRecordStore;
+    bindingStore?: {
+        getInstanceBinding(instance: string): {
+            sourceId: string | null;
+            deletedAt: string | null;
+        };
+        storeBlobBytesForInstance(input: {
+            instance: string;
+            method: string;
+            generation: number;
+            bytes: Uint8Array;
+            mimeType: string;
+        }): ReturnType<PdppRecordStore["storeBlobBytes"]>;
+        replaceStream: ReturnType<typeof createSqliteRecordStore>["replaceStream"];
+        /** Absent on a store that cannot record completion metadata. */
+        completeStreams?: ReturnType<typeof createSqliteRecordStore>["completeStreams"];
+    };
+    configuredMethods?: Map<string, string[]>;
+    auth: PdppAuthorizationService;
+    declarations: StreamDeclarationRegistry;
+    /** The exact owner of this Personal Server; required for ingest. */
+    ownerSubjectId?: string;
+    /** Current ownership used to narrow the instance stored in an owner token. */
+    instancesForSubject?: (subjectId: string) => string[];
+    /** Active connections covered by a source-scoped owner token. */
+    instancesForSource?: (subjectId: string, sourceId: string) => string[];
+    /**
+     * Owner access feed. PDPP reads must appear in the SAME feed as legacy
+     * `/v1/data/{scope}` reads, or adopting PDPP would silently make an owner's
+     * access history less complete than it was before — the one thing a data
+     * portability product must not do.
+     *
+     * Optional so a deployment that has not wired a writer still boots; when it
+     * is absent no PDPP read is logged, which `records-bootstrap.ts` makes
+     * explicit rather than leaving to chance.
+     */
+    accessLog?: PdppAccessLogPort;
+    /**
+     * Vana chain enforcement for client reads. Absent by default, and absence
+     * is the chain-NEUTRAL path: a standalone PDPP deployment has no chain, so
+     * omitting this leaves the bearer path exactly as it was.
+     *
+     * When a deployment DOES set it, every client-token read must present a
+     * PDPP grant that is bound to a live chain permission. This is the gate the
+     * bearer path was missing: a PDPP token alone proved consent, but nothing
+     * checked the Vana permission that authorizes the read, so a chain-side
+     * revocation had no effect on a PDPP client and the ledger's authority was
+     * silently not enforced.
+     *
+     * It fails closed on purpose — see `PdppChainEnforcementPort`.
+     */
+    chainEnforcement?: PdppChainEnforcementPort;
+    /**
+     * Where an `api_error` (500) goes. Optional so a deployment that wires no
+     * logger still boots, but without one a genuine server fault on this
+     * surface leaves nothing behind but the client's 500 — the exact
+     * observability hole that made a missing-file read take a day to diagnose.
+     */
+    logger?: PdppRouteLogger;
+}
+export interface PdppRouteLogger {
+    error(payload: Record<string, unknown>, message: string): void;
+}
+/**
+ * The chain check a client read must pass, when a deployment enforces one.
+ *
+ * ## Why this is a port and not a direct chain call
+ *
+ * The route must not import a chain SDK: PDPP Core is chain-neutral, and a
+ * deployment with no chain must still serve reads. Keeping the dependency as
+ * an injected port is what lets standalone PDPP stay standalone while a Vana
+ * deployment enforces the ledger, without two code paths through the route.
+ *
+ * ## Fail closed, and the three outcomes are NOT interchangeable
+ *
+ * `authorize` answers one of three things, and the distinction matters
+ * because two of them deny while only one of those is worth retrying:
+ *
+ *   - `{ ok: true }` — a binding exists, the live chain grant is unrevoked,
+ *     the owner matches, and the grantee is this client's app.
+ *   - `{ ok: false, retryable: false }` — a definite denial. No binding, or
+ *     a revoked/mismatched one. The answer will not change by asking again.
+ *   - `{ ok: false, retryable: true }` — the chain or gateway could not be
+ *     reached, so we do not KNOW the answer.
+ *
+ * The third case is the one that decides whether this design is honest. Not
+ * knowing is not permission. Serving a read because the gateway was down
+ * would make an outage into an authorization bypass, and it would do so
+ * silently, which is worse than refusing. So an unknown answer denies, and
+ * is reported as `503` with `Retry-After` rather than `403`, because the
+ * client's grant may be perfectly valid and a permanent-looking refusal
+ * would send them to re-consent for no reason.
+ *
+ * This also means a binding is never accepted as nullable: a deployment that
+ * enforces the chain and cannot resolve a grant denies the read. There is no
+ * "no binding yet, allow it" state, because that state is indistinguishable
+ * from "never bound".
+ */
+export interface PdppChainEnforcementPort {
+    authorize(input: {
+        /** The PDPP grant presented by the client token. */
+        pdppGrantId: string;
+        /** The OAuth client the token was issued to. */
+        clientId: string;
+    }): Promise<PdppChainDecision>;
+}
+export type PdppChainDecision = {
+    ok: true;
+} | {
+    ok: false;
+    retryable: boolean;
+    reason: string;
+};
+/**
+ * The slice of the owner access feed a PDPP read can populate.
+ *
+ * Deliberately narrower than `AccessLogWriter`: this route knows the grant,
+ * the client, the stream and the outcome, and nothing about scopes or
+ * builders in the legacy sense. Keeping the port small is what lets the
+ * bootstrap adapt it onto the existing writer without this module importing
+ * the legacy entry shape.
+ */
+export interface PdppAccessLogPort {
+    record(entry: {
+        grantId: string;
+        clientId: string;
+        /** `{source}.{stream}` — the legacy feed's `scope` position. */
+        stream: string;
+        operation: "read";
+        outcome: "completed" | "denied" | "failed";
+        requestId: string;
+        ipAddress: string;
+        userAgent: string;
+    }): Promise<void>;
+}
+/**
+ * The RFC 9728 protected-resource metadata URL for THIS request's origin.
+ *
+ * RFC 9728 §5.1 requires `resource_metadata` to be a URI the client can
+ * dereference. A relative path only resolves if the client already knows the
+ * origin -- which an unauthenticated client bootstrapping discovery from a
+ * failed read cannot be assumed to have. Deriving it from the request also
+ * keeps it correct behind a tunnel or proxy, where a hardcoded origin would
+ * point the client somewhere it cannot reach.
+ */
+export declare function resourceMetadataUrlFor(c: Context): string;
+export declare function pdppRecordsRoutes(deps: PdppRecordsRouteDeps): Hono;
+//# sourceMappingURL=pdpp-records.d.ts.map

package/dist/routes/pdpp-records.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pdpp-records.d.ts","sourceRoot":"","sources":["../../src/routes/pdpp-records.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,KAAK,OAAO,EAAE,MAAM,MAAM,CAAC;AAE1C,OAAO,EAGL,KAAK,uBAAuB,EAC7B,MAAM,yCAAyC,CAAC;AAGjD,OAAO,KAAK,EACV,wBAAwB,EAGzB,MAAM,uDAAuD,CAAC;AAC/D,OAAO,EAcL,KAAK,eAAe,EAEpB,KAAK,yBAAyB,EAC/B,MAAM,4DAA4D,CAAC;AASpE,eAAO,MAAM,qBAAqB,QAAoB,CAAC;AAgBvD,yEAAyE;AACzE,eAAO,MAAM,qBAAqB,QAAoB,CAAC;AACvD,yEAAyE;AACzE,eAAO,MAAM,yBAAyB,QAAY,CAAC;AAwJnD,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,eAAe,CAAC;IACvB,YAAY,CAAC,EAAE;QACb,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG;YACpC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;YACxB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;SAC1B,CAAC;QACF,yBAAyB,CAAC,KAAK,EAAE;YAC/B,QAAQ,EAAE,MAAM,CAAC;YACjB,MAAM,EAAE,MAAM,CAAC;YACf,UAAU,EAAE,MAAM,CAAC;YACnB,KAAK,EAAE,UAAU,CAAC;YAClB,QAAQ,EAAE,MAAM,CAAC;SAClB,GAAG,UAAU,CAAC,eAAe,CAAC,gBAAgB,CAAC,CAAC,CAAC;QAClD,aAAa,EAAE,UAAU,CAAC,OAAO,uBAAuB,CAAC,CAAC,eAAe,CAAC,CAAC;QAC3E,gEAAgE;QAChE,eAAe,CAAC,EAAE,UAAU,CAC1B,OAAO,uBAAuB,CAC/B,CAAC,iBAAiB,CAAC,CAAC;KACtB,CAAC;IACF,iBAAiB,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC1C,IAAI,EAAE,wBAAwB,CAAC;IAC/B,YAAY,EAAE,yBAAyB,CAAC;IACxC,oEAAoE;IACpE,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,8EAA8E;IAC9E,mBAAmB,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,MAAM,EAAE,CAAC;IACtD,iEAAiE;IACjE,kBAAkB,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,MAAM,EAAE,CAAC;IACvE;;;;;;;;;OASG;IACH,SAAS,CAAC,EAAE,iBAAiB,CAAC;IAC9B;;;;;;;;;;;;;OAaG;IACH,gBAAgB,CAAC,EAAE,wBAAwB,CAAC;IAC5C;;;;;OAKG;IACH,MAAM,CAAC,EAAE,eAAe,CAAC;CAC1B;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CAChE;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,MAAM,WAAW,wBAAwB;IACvC,SAAS,CAAC,KAAK,EAAE;QACf,oDAAoD;QACpD,WAAW,EAAE,MAAM,CAAC;QACpB,gDAAgD;QAChD,QAAQ,EAAE,MAAM,CAAC;KAClB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;CAChC;AAED,MAAM,MAAM,iBAAiB,GAC3B;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,SAAS,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEnE;;;;;;;;GAQG;AACH,MAAM,WAAW,iBAAiB;IAChC,MAAM,CAAC,KAAK,EAAE;QACZ,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,EAAE,MAAM,CAAC;QACjB,gEAAgE;QAChE,MAAM,EAAE,MAAM,CAAC;QACf,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,EAAE,WAAW,GAAG,QAAQ,GAAG,QAAQ,CAAC;QAC3C,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC;KACnB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACnB;AAyHD;;;;;;;;;GASG;AACH,wBAAgB,sBAAsB,CAAC,CAAC,EAAE,OAAO,GAAG,MAAM,CAKzD;AAqKD,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,oBAAoB,GAAG,IAAI,CAk3ClE"}