@package-broker/runtime-node 0.0.0-stage → 2.0.0-rc.2

package/dist/entry.js

@@ -0,0 +1,158 @@
+import { realpathSync } from 'node:fs';
+import { fileURLToPath } from 'node:url';
+import { looksLikeCredential } from '@package-broker/core/platform/credential';
+import { safeErrorName, safeRecord } from '@package-broker/core/platform/observability';
+import { SecretsConfigError } from '@package-broker/core/secrets/master-key';
+import { startNode, StartupConfigError } from './startup.js';
+const DEFAULT_PORT = 8787;
+const DEFAULT_SHUTDOWN_TIMEOUT_MS = 8000;
+export function describeError(error) {
+    return error instanceof Error ? `${error.name}: ${error.message}` : String(error);
+}
+export function parsePort(raw) {
+    if (raw === undefined)
+        return DEFAULT_PORT;
+    if (/^\d+$/.test(raw)) {
+        const port = Number(raw);
+        if (port >= 1 && port <= 65535)
+            return port;
+    }
+    throw new Error('PORT must be an integer between 1 and 65535');
+}
+function parseShutdownTimeout(raw) {
+    if (raw === undefined)
+        return DEFAULT_SHUTDOWN_TIMEOUT_MS;
+    if (/^\d+$/.test(raw)) {
+        const timeout = Number(raw);
+        if (timeout >= 1000 && timeout <= 120000)
+            return timeout;
+    }
+    throw new Error('PB_SHUTDOWN_TIMEOUT_MS must be an integer between 1000 and 120000');
+}
+export function createShutdown(close, exit, code = 0, options = {}) {
+    let closing = false;
+    return () => {
+        if (closing)
+            return;
+        closing = true;
+        let finished = false;
+        const timeoutMs = options.timeoutMs ?? DEFAULT_SHUTDOWN_TIMEOUT_MS;
+        const timer = setTimeout(() => {
+            if (finished)
+                return;
+            finished = true;
+            (options.error ?? console.error)(JSON.stringify({ level: 'error', event: 'shutdown.forced', timeout_ms: timeoutMs }));
+            exit(1);
+        }, timeoutMs);
+        const finish = (exitCode) => {
+            if (finished)
+                return;
+            finished = true;
+            clearTimeout(timer);
+            exit(exitCode);
+        };
+        try {
+            close().then(() => finish(code), () => finish(1));
+        }
+        catch {
+            finish(1);
+        }
+    };
+}
+export async function runEntry(manifest, env, runtime) {
+    let broker;
+    let port;
+    let timeoutMs;
+    try {
+        const { plugins, migrations, platformPorts, observability, registry, tokens, vulnerability, mcp, } = await manifest;
+        try {
+            port = parsePort(env['PORT']);
+            timeoutMs = parseShutdownTimeout(env['PB_SHUTDOWN_TIMEOUT_MS']);
+        }
+        catch (error) {
+            runtime.error(describeError(error));
+            runtime.exit(1);
+            return;
+        }
+        broker = await runtime.start({
+            plugins,
+            migrations,
+            env,
+            log: (entry) => console.log(JSON.stringify(entry)),
+            ...(platformPorts == null ? {} : { platformPorts }),
+            ...(observability === undefined ? {} : { observability }),
+            ...(registry === undefined ? {} : { registry }),
+            ...(tokens === undefined ? {} : { tokens }),
+            ...(vulnerability === undefined ? {} : { vulnerability }),
+            ...(mcp === undefined ? {} : { mcp }),
+        });
+    }
+    catch (error) {
+        runtime.error(failureRecord('startup.failed', error));
+        runtime.exit(1);
+        return;
+    }
+    broker.server.listen(port);
+    let processFailed = false;
+    const stop = createShutdown(() => broker.close(), (code) => runtime.exit(processFailed ? 1 : code), 0, { timeoutMs, error: runtime.error });
+    runtime.onSignal('SIGTERM', stop);
+    runtime.onSignal('SIGINT', stop);
+    for (const [event, recordEvent] of [
+        ['uncaughtException', 'process.uncaught_exception'],
+        ['unhandledRejection', 'process.unhandled_rejection'],
+    ]) {
+        runtime.onProcessError?.(event, (error) => {
+            runtime.error(failureRecord(recordEvent, error));
+            processFailed = true;
+            stop();
+        });
+    }
+}
+function failureRecord(event, error) {
+    const variable = event === 'startup.failed' &&
+        (error instanceof StartupConfigError || error instanceof SecretsConfigError)
+        ? error.variable
+        : undefined;
+    const configKey = variable !== undefined &&
+        variable.length <= 64 &&
+        /^[A-Za-z_][A-Za-z0-9_.]*$/.test(variable) &&
+        !looksLikeCredential(variable)
+        ? variable
+        : undefined;
+    return JSON.stringify({
+        ...safeRecord({
+            level: 'error',
+            event,
+            service: 'package-broker',
+            runtime: 'node',
+            error_name: safeErrorName(error),
+        }),
+        ...(configKey === undefined ? {} : { config_key: configKey }),
+    });
+}
+export function isMainEntry(argv1, moduleUrl) {
+    if (argv1 === undefined)
+        return false;
+    try {
+        return realpathSync(argv1) === realpathSync(fileURLToPath(moduleUrl));
+    }
+    catch {
+        return false;
+    }
+}
+function isMainModule() {
+    return isMainEntry(process.argv[1], import.meta.url);
+}
+if (isMainModule()) {
+    void runEntry(import(/* @vite-ignore */ '#pb-manifest'), process.env, {
+        start: startNode,
+        exit: (code) => process.exit(code),
+        error: (message) => console.error(message),
+        onSignal: (signal, listener) => process.on(signal, listener),
+        onProcessError: (event, listener) => process.on(event, listener),
+    }).catch((error) => {
+        console.error(failureRecord('startup.failed', error));
+        process.exit(1);
+    });
+}
+//# sourceMappingURL=entry.js.map

package/dist/entry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"entry.js","sourceRoot":"","sources":["../src/entry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,mBAAmB,EAAE,MAAM,0CAA0C,CAAC;AAC/E,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,6CAA6C,CAAC;AAIxF,OAAO,EAAE,kBAAkB,EAAE,MAAM,yCAAyC,CAAC;AAE7E,OAAO,EAAE,SAAS,EAAE,kBAAkB,EAAqB,MAAM,cAAc,CAAC;AAEhF,MAAM,YAAY,GAAG,IAAI,CAAC;AAC1B,MAAM,2BAA2B,GAAG,IAAI,CAAC;AAwBzC,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACpF,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,GAAuB;IAC/C,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,YAAY,CAAC;IAC3C,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK;YAAE,OAAO,IAAI,CAAC;IAC9C,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,oBAAoB,CAAC,GAAuB;IACnD,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,2BAA2B,CAAC;IAC1D,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,OAAO,IAAI,IAAI,IAAI,OAAO,IAAI,MAAM;YAAE,OAAO,OAAO,CAAC;IAC3D,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;AACvF,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,KAA0B,EAC1B,IAA4B,EAC5B,IAAI,GAAG,CAAC,EACR,UAGI,EAAE;IAEN,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,OAAO,GAAG,EAAE;QACV,IAAI,OAAO;YAAE,OAAO;QACpB,OAAO,GAAG,IAAI,CAAC;QACf,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,2BAA2B,CAAC;QACnE,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,IAAI,QAAQ;gBAAE,OAAO;YACrB,QAAQ,GAAG,IAAI,CAAC;YAChB,CAAC,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC,CAC9B,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CACpF,CAAC;YACF,IAAI,CAAC,CAAC,CAAC,CAAC;QACV,CAAC,EAAE,SAAS,CAAC,CAAC;QACd,MAAM,MAAM,GAAG,CAAC,QAAgB,EAAQ,EAAE;YACxC,IAAI,QAAQ;gBAAE,OAAO;YACrB,QAAQ,GAAG,IAAI,CAAC;YAChB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,CAAC,QAAQ,CAAC,CAAC;QACjB,CAAC,CAAC;QACF,IAAI,CAAC;YACH,KAAK,EAAE,CAAC,IAAI,CACV,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAClB,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAChB,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,CAAC,CAAC,CAAC;QACZ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,QAAgC,EAChC,GAAiD,EACjD,OAAqB;IAErB,IAAI,MAAkB,CAAC;IACvB,IAAI,IAAY,CAAC;IACjB,IAAI,SAAiB,CAAC;IACtB,IAAI,CAAC;QACH,MAAM,EACJ,OAAO,EACP,UAAU,EACV,aAAa,EACb,aAAa,EACb,QAAQ,EACR,MAAM,EACN,aAAa,EACb,GAAG,GACJ,GAAG,MAAM,QAAQ,CAAC;QACnB,IAAI,CAAC;YACH,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;YAC9B,SAAS,GAAG,oBAAoB,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC,CAAC;QAClE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;YACpC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAChB,OAAO;QACT,CAAC;QACD,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC;YAC3B,OAAO;YACP,UAAU;YACV,GAAG;YACH,GAAG,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YAClD,GAAG,CAAC,aAAa,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC;YACnD,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC;YACzD,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC;YAC/C,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;YAC3C,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC;YACzD,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC;SACtC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC,CAAC;QACtD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChB,OAAO;IACT,CAAC;IAED,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC3B,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,MAAM,IAAI,GAAG,cAAc,CACzB,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,EACpB,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAChD,CAAC,EACD,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CACpC,CAAC;IACF,OAAO,CAAC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAClC,OAAO,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACjC,KAAK,MAAM,CAAC,KAAK,EAAE,WAAW,CAAC,IAAI;QACjC,CAAC,mBAAmB,EAAE,4BAA4B,CAAC;QACnD,CAAC,oBAAoB,EAAE,6BAA6B,CAAC;KAC7C,EAAE,CAAC;QACX,OAAO,CAAC,cAAc,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE;YACxC,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC;YACjD,aAAa,GAAG,IAAI,CAAC;YACrB,IAAI,EAAE,CAAC;QACT,CAAC,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,KAAa,EAAE,KAAc;IAClD,MAAM,QAAQ,GACZ,KAAK,KAAK,gBAAgB;QAC1B,CAAC,KAAK,YAAY,kBAAkB,IAAI,KAAK,YAAY,kBAAkB,CAAC;QAC1E,CAAC,CAAC,KAAK,CAAC,QAAQ;QAChB,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,SAAS,GACb,QAAQ,KAAK,SAAS;QACtB,QAAQ,CAAC,MAAM,IAAI,EAAE;QACrB,2BAA2B,CAAC,IAAI,CAAC,QAAQ,CAAC;QAC1C,CAAC,mBAAmB,CAAC,QAAQ,CAAC;QAC5B,CAAC,CAAC,QAAQ;QACV,CAAC,CAAC,SAAS,CAAC;IAChB,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,GAAG,UAAU,CAAC;YACZ,KAAK,EAAE,OAAO;YACd,KAAK;YACL,OAAO,EAAE,gBAAgB;YACzB,OAAO,EAAE,MAAM;YACf,UAAU,EAAE,aAAa,CAAC,KAAK,CAAC;SACjC,CAAC;QACF,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;KAC9D,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAyB,EAAE,SAAiB;IACtE,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACtC,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,KAAK,CAAC,KAAK,YAAY,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC;IACxE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,YAAY;IACnB,OAAO,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACvD,CAAC;AAED,IAAI,YAAY,EAAE,EAAE,CAAC;IACnB,KAAK,QAAQ,CAAC,MAAM,CAAC,kBAAkB,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC,GAAG,EAAE;QACpE,KAAK,EAAE,SAAS;QAChB,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;QAClC,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;QAC1C,QAAQ,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC;QAC5D,cAAc,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC;KACjE,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;QAC1B,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC,CAAC;QACtD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/import-jobs.d.ts

@@ -0,0 +1,18 @@
+import type { ImportApplyStore } from '@package-broker/core/import/apply';
+import type { ImportRollbackStore } from '@package-broker/core/import/rollback';
+import type { ImportVerificationStore } from '@package-broker/core/import/verification';
+import type { RegisteredCoreJob } from '@package-broker/core/kernel/registry';
+import type { BlobStore } from '@package-broker/core/platform/blob';
+export interface ImportJobStores {
+    readonly verificationStore: ImportVerificationStore;
+    readonly applyStore: ImportApplyStore;
+    readonly rollbackStore: ImportRollbackStore;
+    readonly blobs: Pick<BlobStore, 'get'>;
+}
+export interface ImportJobHolder {
+    set(stores: ImportJobStores): void;
+    get(): ImportJobStores;
+}
+export declare function createImportJobHolder(): ImportJobHolder;
+export declare function importJobRegistrations(holder: ImportJobHolder): readonly RegisteredCoreJob[];
+//# sourceMappingURL=import-jobs.d.ts.map

package/dist/import-jobs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"import-jobs.d.ts","sourceRoot":"","sources":["../src/import-jobs.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AAM1E,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sCAAsC,CAAC;AAChF,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,0CAA0C,CAAC;AAExF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sCAAsC,CAAC;AAC9E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oCAAoC,CAAC;AAIpE,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,iBAAiB,EAAE,uBAAuB,CAAC;IACpD,QAAQ,CAAC,UAAU,EAAE,gBAAgB,CAAC;IACtC,QAAQ,CAAC,aAAa,EAAE,mBAAmB,CAAC;IAC5C,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;CACxC;AAED,MAAM,WAAW,eAAe;IAC9B,GAAG,CAAC,MAAM,EAAE,eAAe,GAAG,IAAI,CAAC;IACnC,GAAG,IAAI,eAAe,CAAC;CACxB;AAED,wBAAgB,qBAAqB,IAAI,eAAe,CAYvD;AASD,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,eAAe,GAAG,SAAS,iBAAiB,EAAE,CAyC5F"}

package/dist/import-jobs.js

@@ -0,0 +1,56 @@
+import { importApplyJob, importRollbackJob, importVerificationJob, } from '@package-broker/core/import/jobs';
+import { systemClock, ulid } from '@package-broker/core/ids';
+import { JobError } from '@package-broker/core/platform/jobs';
+import { registerCoreJob } from '@package-broker/core/runtime/core-jobs';
+export function createImportJobHolder() {
+    let current;
+    return {
+        set(stores) {
+            if (current !== undefined)
+                throw new Error('import job stores are already set');
+            current = stores;
+        },
+        get() {
+            if (current === undefined)
+                throw new JobError('handler_error');
+            return current;
+        },
+    };
+}
+function erased(definition) {
+    return {
+        ...definition,
+        handler: (payload, context) => definition.handler(definition.validate(payload), context),
+    };
+}
+export function importJobRegistrations(holder) {
+    return [
+        registerCoreJob(erased(importVerificationJob({
+            get store() {
+                return holder.get().verificationStore;
+            },
+            get blobs() {
+                return holder.get().blobs;
+            },
+            clock: systemClock,
+        }))),
+        registerCoreJob(erased(importApplyJob({
+            get store() {
+                return holder.get().applyStore;
+            },
+            get blobs() {
+                return holder.get().blobs;
+            },
+            clock: systemClock,
+            ids: { ulid },
+        }))),
+        registerCoreJob(erased(importRollbackJob({
+            get store() {
+                return holder.get().rollbackStore;
+            },
+            clock: systemClock,
+            ids: { ulid },
+        }))),
+    ];
+}
+//# sourceMappingURL=import-jobs.js.map

package/dist/import-jobs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"import-jobs.js","sourceRoot":"","sources":["../src/import-jobs.ts"],"names":[],"mappings":"AACA,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,qBAAqB,GACtB,MAAM,kCAAkC,CAAC;AAG1C,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,0BAA0B,CAAC;AAG7D,OAAO,EAAE,QAAQ,EAAsB,MAAM,oCAAoC,CAAC;AAClF,OAAO,EAAE,eAAe,EAAE,MAAM,wCAAwC,CAAC;AAczE,MAAM,UAAU,qBAAqB;IACnC,IAAI,OAAoC,CAAC;IACzC,OAAO;QACL,GAAG,CAAC,MAAM;YACR,IAAI,OAAO,KAAK,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;YAChF,OAAO,GAAG,MAAM,CAAC;QACnB,CAAC;QACD,GAAG;YACD,IAAI,OAAO,KAAK,SAAS;gBAAE,MAAM,IAAI,QAAQ,CAAC,eAAe,CAAC,CAAC;YAC/D,OAAO,OAAO,CAAC;QACjB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,MAAM,CAAI,UAA4B;IAC7C,OAAO;QACL,GAAG,UAAU;QACb,OAAO,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;KACzF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,MAAuB;IAC5D,OAAO;QACL,eAAe,CACb,MAAM,CACJ,qBAAqB,CAAC;YACpB,IAAI,KAAK;gBACP,OAAO,MAAM,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC;YACxC,CAAC;YACD,IAAI,KAAK;gBACP,OAAO,MAAM,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC;YAC5B,CAAC;YACD,KAAK,EAAE,WAAW;SACnB,CAAC,CACH,CACF;QACD,eAAe,CACb,MAAM,CACJ,cAAc,CAAC;YACb,IAAI,KAAK;gBACP,OAAO,MAAM,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC;YACjC,CAAC;YACD,IAAI,KAAK;gBACP,OAAO,MAAM,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC;YAC5B,CAAC;YACD,KAAK,EAAE,WAAW;YAClB,GAAG,EAAE,EAAE,IAAI,EAAE;SACd,CAAC,CACH,CACF;QACD,eAAe,CACb,MAAM,CACJ,iBAAiB,CAAC;YAChB,IAAI,KAAK;gBACP,OAAO,MAAM,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC;YACpC,CAAC;YACD,KAAK,EAAE,WAAW;YAClB,GAAG,EAAE,EAAE,IAAI,EAAE;SACd,CAAC,CACH,CACF;KACF,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,113 @@
+import type { MigrationSource } from '@package-broker/db-sqlite/migrations/source';
+import { parseSourceConfig } from '@package-broker/core/sources/config';
+import { type Server } from 'node:http';
+import type { SessionService } from '@package-broker/core/auth/session';
+import type { PersonalTokenService } from '@package-broker/core/authz/pat-service';
+import type { ProjectAdministration } from '@package-broker/core/authz/project-administration';
+import type { ProjectLister } from '@package-broker/core/authz/project-list';
+import type { ProjectService } from '@package-broker/core/authz/project-service';
+import type { ServicePrincipalService } from '@package-broker/core/authz/service-principal-service';
+import type { ServiceTokenService } from '@package-broker/core/authz/service-token-service';
+import type { TokenReader } from '@package-broker/core/authz/token-read';
+import type { TokenRevokeService } from '@package-broker/core/authz/token-revoke';
+import type { CatalogueReader, CatalogueWriter } from '@package-broker/core/db/catalogue';
+import { type PackageAccess } from '@package-broker/core/catalogue/package-access';
+import { type VisibilityService } from '@package-broker/core/catalogue/visibility-service';
+import { type DependencyClosureReport } from '@package-broker/core/catalogue/closure-report';
+import type { NameEcosystem } from '@package-broker/core/catalogue/names';
+import { type ActorContext, type Administration } from '@package-broker/core/authz/administration';
+import type { ProjectActor } from '@package-broker/core/authz/project-actor';
+import type { RegistryConfig } from '@package-broker/core/registry/registry-config';
+import { type TokenLifetimePolicy } from '@package-broker/core/authz/token-lifetime';
+import type { FetchLike } from '@package-broker/core/platform/tracing';
+import type { SourceRecord } from '@package-broker/core/db/source';
+import type { SqlExecutor } from '@package-broker/core/db/port';
+import type { ProviderAnchorReader } from '@package-broker/core/identity/provider-anchors';
+import type { AuthorizationEngine } from '@package-broker/core/kernel/authorize';
+import type { KernelLog } from '@package-broker/core/kernel/errors';
+import { type TrustedProxy } from './client-ip.js';
+import type { Kernel, KernelObservability } from '@package-broker/core/kernel/kernel';
+import type { PlatformServices } from '@package-broker/core/kernel/plugin-ports';
+import { type BrokerConfig } from '@package-broker/core/config';
+import type { PluginDefinition } from '@package-broker/core/plugin';
+import type { Keyring } from '@package-broker/core/secrets/keyring';
+export interface NodeAuthOptions {
+    readonly keyring: Keyring;
+    readonly publicOrigin: string;
+    readonly env: Readonly<Record<string, string | undefined>>;
+}
+export interface NodeServerOptions {
+    readonly migrations?: readonly Pick<MigrationSource, 'id' | 'checksum'>[];
+    /** Proxy header that carries the client address. `true` is the deprecated `PB_TRUSTED_PROXY=1`. */
+    readonly trustedProxy?: TrustedProxy | boolean;
+    readonly executor?: SqlExecutor;
+    readonly auth?: NodeAuthOptions;
+    readonly closeDatabase?: () => Promise<void>;
+    readonly log?: KernelLog;
+    readonly observability?: KernelObservability;
+    readonly platformServices?: PlatformServices;
+    readonly authorization?: AuthorizationEngine;
+    /** Token lifetime maxima; an invalid value fails server creation. */
+    readonly tokens?: BrokerConfig['tokens'];
+    readonly vulnerability?: BrokerConfig['vulnerability'];
+    readonly mcp?: BrokerConfig['mcp'];
+    /** Resolves true once the broker may serve; a falsy answer refuses everything except liveness. */
+    readonly servingGate?: () => Promise<boolean>;
+    /** Registry routes need the database, auth, platform services and this input together. */
+    readonly registry?: NodeRegistryOptions;
+}
+export interface NodeRegistryOptions {
+    readonly config: RegistryConfig;
+    /** Registers the SSH git provider with archives kept under this directory. */
+    readonly sshArchiveRoot?: string;
+    /** Registers the generic Git provider with archives staged under this directory. */
+    readonly gitArchiveRoot?: string;
+}
+export interface NodeRegistryServices {
+    /** The transport every registry request leaves through. */
+    readonly outboundFetch: FetchLike;
+}
+/** The step 5 domain services; PB-32 resolves each one from here. */
+export interface NodeAccessServices {
+    readonly engine: AuthorizationEngine;
+    readonly sessions: SessionService;
+    readonly projects: ProjectService;
+    readonly administration: Administration;
+    readonly lifetime: TokenLifetimePolicy;
+    readonly projectGrants: ProjectAdministration;
+    readonly projectList: ProjectLister;
+    readonly personalTokens: PersonalTokenService;
+    readonly servicePrincipals: ServicePrincipalService;
+    readonly serviceTokens: ServiceTokenService;
+    readonly tokenRevoke: TokenRevokeService;
+    readonly tokenList: TokenReader;
+}
+export interface NodeCatalogueServices {
+    readonly reader: CatalogueReader;
+    readonly writer: CatalogueWriter;
+    readonly packageAccess: PackageAccess;
+    readonly visibility: VisibilityService;
+    readonly closureReport: (actor: ProjectActor, organizationPermissions: ActorContext['permissions'], ecosystem: NameEcosystem) => Promise<DependencyClosureReport>;
+}
+export interface NodeServices {
+    readonly providerAnchors: ProviderAnchorReader;
+    readonly dispatch: (run: () => Promise<void>) => void;
+    readonly catalogue: Pick<CatalogueReader, 'resolveVersions'>;
+    /** Null when the runtime has no auth options. */
+    readonly access: NodeAccessServices | null;
+    /** Null without a database or auth options. */
+    readonly packages: NodeCatalogueServices | null;
+    /** Present when the registry is wired. */
+    readonly registry?: NodeRegistryServices;
+}
+export interface NodeBroker {
+    readonly plugins: readonly PluginDefinition[];
+    readonly server: Server;
+    ready(): Promise<Kernel>;
+    /** The services of the application the server was built with. */
+    services(): Promise<NodeServices>;
+    close(): Promise<void>;
+}
+export declare function credentialOrigins(record: SourceRecord, policy: Parameters<typeof parseSourceConfig>[4]['policy']): readonly string[] | null;
+export declare function createNodeServer(plugins: readonly PluginDefinition[], options?: NodeServerOptions): NodeBroker;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,6CAA6C,CAAC;AAkBnF,OAAO,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AAsCxE,OAAO,EAAgB,KAAK,MAAM,EAAE,MAAM,WAAW,CAAC;AAGtD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AACxE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,wCAAwC,CAAC;AACnF,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,mDAAmD,CAAC;AAC/F,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAC;AAC7E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,4CAA4C,CAAC;AACjF,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,sDAAsD,CAAC;AACpG,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kDAAkD,CAAC;AAC5F,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uCAAuC,CAAC;AACzE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yCAAyC,CAAC;AAElF,OAAO,KAAK,EACV,eAAe,EACf,eAAe,EAEhB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAEL,KAAK,aAAa,EACnB,MAAM,+CAA+C,CAAC;AACvD,OAAO,EAEL,KAAK,iBAAiB,EACvB,MAAM,mDAAmD,CAAC;AAC3D,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,+CAA+C,CAAC;AACvD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sCAAsC,CAAC;AAC1E,OAAO,EAAE,KAAK,YAAY,EAAE,KAAK,cAAc,EAAE,MAAM,2CAA2C,CAAC;AACnG,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,0CAA0C,CAAC;AAQ7E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,+CAA+C,CAAC;AAKpF,OAAO,EAGL,KAAK,mBAAmB,EACzB,MAAM,2CAA2C,CAAC;AAWnD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,uCAAuC,CAAC;AAavE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AASnE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,KAAK,EAEV,oBAAoB,EACrB,MAAM,gDAAgD,CAAC;AAGxD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,uCAAuC,CAAC;AAEjF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oCAAoC,CAAC;AASpE,OAAO,EAAgB,KAAK,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAQjE,OAAO,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AAEtF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0CAA0C,CAAC;AAEjF,OAAO,EAAc,KAAK,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAG5E,OAAO,KAAK,EACV,gBAAgB,EAGjB,MAAM,6BAA6B,CAAC;AACrC,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,sCAAsC,CAAC;AAuHpE,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;CAC5D;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,IAAI,CAAC,eAAe,EAAE,IAAI,GAAG,UAAU,CAAC,EAAE,CAAC;IAC1E,mGAAmG;IACnG,QAAQ,CAAC,YAAY,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC;IAC/C,QAAQ,CAAC,QAAQ,CAAC,EAAE,WAAW,CAAC;IAChC,QAAQ,CAAC,IAAI,CAAC,EAAE,eAAe,CAAC;IAChC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7C,QAAQ,CAAC,GAAG,CAAC,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,aAAa,CAAC,EAAE,mBAAmB,CAAC;IAC7C,QAAQ,CAAC,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IAC7C,QAAQ,CAAC,aAAa,CAAC,EAAE,mBAAmB,CAAC;IAC7C,qEAAqE;IACrE,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAC;IACzC,QAAQ,CAAC,aAAa,CAAC,EAAE,YAAY,CAAC,eAAe,CAAC,CAAC;IACvD,QAAQ,CAAC,GAAG,CAAC,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC;IACnC,kGAAkG;IAClG,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9C,0FAA0F;IAC1F,QAAQ,CAAC,QAAQ,CAAC,EAAE,mBAAmB,CAAC;CACzC;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,8EAA8E;IAC9E,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,oFAAoF;IACpF,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,oBAAoB;IACnC,2DAA2D;IAC3D,QAAQ,CAAC,aAAa,EAAE,SAAS,CAAC;CACnC;AAED,qEAAqE;AACrE,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;IACrC,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;IACxC,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAC;IACvC,QAAQ,CAAC,aAAa,EAAE,qBAAqB,CAAC;IAC9C,QAAQ,CAAC,WAAW,EAAE,aAAa,CAAC;IACpC,QAAQ,CAAC,cAAc,EAAE,oBAAoB,CAAC;IAC9C,QAAQ,CAAC,iBAAiB,EAAE,uBAAuB,CAAC;IACpD,QAAQ,CAAC,aAAa,EAAE,mBAAmB,CAAC;IAC5C,QAAQ,CAAC,WAAW,EAAE,kBAAkB,CAAC;IACzC,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC;CACjC;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;IACjC,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IACtC,QAAQ,CAAC,UAAU,EAAE,iBAAiB,CAAC;IACvC,QAAQ,CAAC,aAAa,EAAE,CACtB,KAAK,EAAE,YAAY,EACnB,uBAAuB,EAAE,YAAY,CAAC,aAAa,CAAC,EACpD,SAAS,EAAE,aAAa,KACrB,OAAO,CAAC,uBAAuB,CAAC,CAAC;CACvC;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,eAAe,EAAE,oBAAoB,CAAC;IAC/C,QAAQ,CAAC,QAAQ,EAAE,CAAC,GAAG,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC;IACtD,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAC;IAC7D,iDAAiD;IACjD,QAAQ,CAAC,MAAM,EAAE,kBAAkB,GAAG,IAAI,CAAC;IAC3C,+CAA+C;IAC/C,QAAQ,CAAC,QAAQ,EAAE,qBAAqB,GAAG,IAAI,CAAC;IAChD,0CAA0C;IAC1C,QAAQ,CAAC,QAAQ,CAAC,EAAE,oBAAoB,CAAC;CAC1C;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,OAAO,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAC9C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IACzB,iEAAiE;IACjE,QAAQ,IAAI,OAAO,CAAC,YAAY,CAAC,CAAC;IAClC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAyFD,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,YAAY,EACpB,MAAM,EAAE,UAAU,CAAC,OAAO,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GACxD,SAAS,MAAM,EAAE,GAAG,IAAI,CAE1B;AA6dD,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,SAAS,gBAAgB,EAAE,EACpC,OAAO,GAAE,iBAAsB,GAC9B,UAAU,CA6ZZ"}