@positronic/spec 0.0.71 → 0.0.72

package/dist/api/index.d.ts

@@ -10,6 +10,7 @@ export { bundle } from './bundle.js';
 export { users } from './users.js';
 export { auth } from './auth.js';
 export { scoping } from './scoping.js';
+export { store } from './store.js';
 export type { User, UserKey } from './users.js';
 export type { AuthSetupResponse } from './auth.js';
 export type { Fetch, FetchFactory } from './types.js';

package/dist/api/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/api/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAChD,YAAY,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AACnD,YAAY,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/api/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAChD,YAAY,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AACnD,YAAY,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC"}

package/dist/api/index.js

@@ -10,4 +10,5 @@ export { bundle } from './bundle.js';
 export { users } from './users.js';
 export { auth } from './auth.js';
 export { scoping } from './scoping.js';
+export { store } from './store.js';
 //# sourceMappingURL=index.js.map

package/dist/api/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/api/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/api/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC"}

package/dist/api/store.d.ts

@@ -0,0 +1,40 @@
+import type { Fetch, FetchFactory } from './types.js';
+export declare const store: {
+    /**
+     * Test GET /store - List brains with store data
+     */
+    listBrains(fetch: Fetch): Promise<boolean>;
+    /**
+     * Test GET /store/:brainTitle - List keys for a brain
+     */
+    listKeys(fetch: Fetch, brainTitle: string): Promise<boolean>;
+    /**
+     * Test GET /store/:brainTitle/shared/:key - Get shared key value
+     */
+    getSharedValue(fetch: Fetch, brainTitle: string, key: string): Promise<boolean>;
+    /**
+     * Test GET /store/:brainTitle/user/:key - Get per-user key value
+     */
+    getUserValue(fetch: Fetch, brainTitle: string, key: string): Promise<boolean>;
+    /**
+     * Test DELETE /store/:brainTitle/shared/:key - Delete shared key
+     */
+    deleteSharedKey(fetch: Fetch, brainTitle: string, key: string): Promise<boolean>;
+    /**
+     * Test DELETE /store/:brainTitle/user/:key - Delete per-user key
+     */
+    deleteUserKey(fetch: Fetch, brainTitle: string, key: string): Promise<boolean>;
+    /**
+     * Test DELETE /store/:brainTitle - Clear all accessible keys for a brain
+     */
+    clearBrainStore(fetch: Fetch, brainTitle: string): Promise<boolean>;
+    /**
+     * Test that shared endpoints require root access - non-root gets 403
+     */
+    sharedKeyRequiresRoot(fetchFactory: FetchFactory): Promise<boolean>;
+    /**
+     * Test that userA cannot read userB's per-user keys
+     */
+    userKeyIsolation(rootFetch: Fetch, fetchFactory: FetchFactory): Promise<boolean>;
+};
+//# sourceMappingURL=store.d.ts.map

package/dist/api/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/api/store.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAEtD,eAAO,MAAM,KAAK;IAChB;;OAEG;sBACqB,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC;IAqChD;;OAEG;oBACmB,KAAK,cAAc,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAiElE;;OAEG;0BAEM,KAAK,cACA,MAAM,OACb,MAAM,GACV,OAAO,CAAC,OAAO,CAAC;IA+CnB;;OAEG;wBAEM,KAAK,cACA,MAAM,OACb,MAAM,GACV,OAAO,CAAC,OAAO,CAAC;IAqDnB;;OAEG;2BAEM,KAAK,cACA,MAAM,OACb,MAAM,GACV,OAAO,CAAC,OAAO,CAAC;IA0BnB;;OAEG;yBAEM,KAAK,cACA,MAAM,OACb,MAAM,GACV,OAAO,CAAC,OAAO,CAAC;IA0BnB;;OAEG;2BAEM,KAAK,cACA,MAAM,GACjB,OAAO,CAAC,OAAO,CAAC;IAmCnB;;OAEG;wCACuC,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC;IAyBzE;;OAEG;gCAEU,KAAK,gBACF,YAAY,GACzB,OAAO,CAAC,OAAO,CAAC;CA4BpB,CAAC"}

package/dist/api/store.js

@@ -0,0 +1,244 @@
+export const store = {
+    /**
+     * Test GET /store - List brains with store data
+     */
+    async listBrains(fetch) {
+        try {
+            const request = new Request('http://example.com/store', {
+                method: 'GET',
+            });
+            const response = await fetch(request);
+            if (!response.ok) {
+                console.error(`GET /store returned ${response.status}`);
+                return false;
+            }
+            const data = (await response.json());
+            if (!Array.isArray(data.brains)) {
+                console.error(`Expected brains to be an array, got ${typeof data.brains}`);
+                return false;
+            }
+            if (typeof data.count !== 'number') {
+                console.error(`Expected count to be number, got ${typeof data.count}`);
+                return false;
+            }
+            return true;
+        }
+        catch (error) {
+            console.error(`Failed to test GET /store:`, error);
+            return false;
+        }
+    },
+    /**
+     * Test GET /store/:brainTitle - List keys for a brain
+     */
+    async listKeys(fetch, brainTitle) {
+        try {
+            const request = new Request(`http://example.com/store/${encodeURIComponent(brainTitle)}`, { method: 'GET' });
+            const response = await fetch(request);
+            if (!response.ok) {
+                console.error(`GET /store/${brainTitle} returned ${response.status}`);
+                return false;
+            }
+            const data = (await response.json());
+            if (!Array.isArray(data.keys)) {
+                console.error(`Expected keys to be an array, got ${typeof data.keys}`);
+                return false;
+            }
+            if (typeof data.count !== 'number') {
+                console.error(`Expected count to be number, got ${typeof data.count}`);
+                return false;
+            }
+            for (const entry of data.keys) {
+                if (typeof entry.key !== 'string') {
+                    console.error(`Expected key to be string, got ${typeof entry.key}`);
+                    return false;
+                }
+                if (entry.scope !== 'shared' && entry.scope !== 'user') {
+                    console.error(`Expected scope to be 'shared' or 'user', got '${entry.scope}'`);
+                    return false;
+                }
+                if (typeof entry.size !== 'number') {
+                    console.error(`Expected size to be number, got ${typeof entry.size}`);
+                    return false;
+                }
+                if (typeof entry.lastModified !== 'string') {
+                    console.error(`Expected lastModified to be string, got ${typeof entry.lastModified}`);
+                    return false;
+                }
+            }
+            return true;
+        }
+        catch (error) {
+            console.error(`Failed to test GET /store/${brainTitle}:`, error);
+            return false;
+        }
+    },
+    /**
+     * Test GET /store/:brainTitle/shared/:key - Get shared key value
+     */
+    async getSharedValue(fetch, brainTitle, key) {
+        try {
+            const request = new Request(`http://example.com/store/${encodeURIComponent(brainTitle)}/shared/${encodeURIComponent(key)}`, { method: 'GET' });
+            const response = await fetch(request);
+            if (!response.ok) {
+                console.error(`GET /store/${brainTitle}/shared/${key} returned ${response.status}`);
+                return false;
+            }
+            const data = (await response.json());
+            if (data.key !== key) {
+                console.error(`Expected key '${key}', got '${data.key}'`);
+                return false;
+            }
+            if (data.scope !== 'shared') {
+                console.error(`Expected scope 'shared', got '${data.scope}'`);
+                return false;
+            }
+            if (data.value === undefined) {
+                console.error(`Expected value to be defined`);
+                return false;
+            }
+            return true;
+        }
+        catch (error) {
+            console.error(`Failed to test GET /store/${brainTitle}/shared/${key}:`, error);
+            return false;
+        }
+    },
+    /**
+     * Test GET /store/:brainTitle/user/:key - Get per-user key value
+     */
+    async getUserValue(fetch, brainTitle, key) {
+        try {
+            const request = new Request(`http://example.com/store/${encodeURIComponent(brainTitle)}/user/${encodeURIComponent(key)}`, { method: 'GET' });
+            const response = await fetch(request);
+            if (!response.ok) {
+                console.error(`GET /store/${brainTitle}/user/${key} returned ${response.status}`);
+                return false;
+            }
+            const data = (await response.json());
+            if (data.key !== key) {
+                console.error(`Expected key '${key}', got '${data.key}'`);
+                return false;
+            }
+            if (data.scope !== 'user') {
+                console.error(`Expected scope 'user', got '${data.scope}'`);
+                return false;
+            }
+            if (typeof data.userId !== 'string') {
+                console.error(`Expected userId to be string, got ${typeof data.userId}`);
+                return false;
+            }
+            if (data.value === undefined) {
+                console.error(`Expected value to be defined`);
+                return false;
+            }
+            return true;
+        }
+        catch (error) {
+            console.error(`Failed to test GET /store/${brainTitle}/user/${key}:`, error);
+            return false;
+        }
+    },
+    /**
+     * Test DELETE /store/:brainTitle/shared/:key - Delete shared key
+     */
+    async deleteSharedKey(fetch, brainTitle, key) {
+        try {
+            const request = new Request(`http://example.com/store/${encodeURIComponent(brainTitle)}/shared/${encodeURIComponent(key)}`, { method: 'DELETE' });
+            const response = await fetch(request);
+            if (response.status !== 204) {
+                console.error(`DELETE /store/${brainTitle}/shared/${key} returned ${response.status}, expected 204`);
+                return false;
+            }
+            return true;
+        }
+        catch (error) {
+            console.error(`Failed to test DELETE /store/${brainTitle}/shared/${key}:`, error);
+            return false;
+        }
+    },
+    /**
+     * Test DELETE /store/:brainTitle/user/:key - Delete per-user key
+     */
+    async deleteUserKey(fetch, brainTitle, key) {
+        try {
+            const request = new Request(`http://example.com/store/${encodeURIComponent(brainTitle)}/user/${encodeURIComponent(key)}`, { method: 'DELETE' });
+            const response = await fetch(request);
+            if (response.status !== 204) {
+                console.error(`DELETE /store/${brainTitle}/user/${key} returned ${response.status}, expected 204`);
+                return false;
+            }
+            return true;
+        }
+        catch (error) {
+            console.error(`Failed to test DELETE /store/${brainTitle}/user/${key}:`, error);
+            return false;
+        }
+    },
+    /**
+     * Test DELETE /store/:brainTitle - Clear all accessible keys for a brain
+     */
+    async clearBrainStore(fetch, brainTitle) {
+        try {
+            const request = new Request(`http://example.com/store/${encodeURIComponent(brainTitle)}`, { method: 'DELETE' });
+            const response = await fetch(request);
+            if (!response.ok) {
+                console.error(`DELETE /store/${brainTitle} returned ${response.status}`);
+                return false;
+            }
+            const data = (await response.json());
+            if (typeof data.deleted !== 'number') {
+                console.error(`Expected deleted to be number, got ${typeof data.deleted}`);
+                return false;
+            }
+            return true;
+        }
+        catch (error) {
+            console.error(`Failed to test DELETE /store/${brainTitle}:`, error);
+            return false;
+        }
+    },
+    /**
+     * Test that shared endpoints require root access - non-root gets 403
+     */
+    async sharedKeyRequiresRoot(fetchFactory) {
+        try {
+            const { fetch: userFetch } = await fetchFactory('non-root-user');
+            const request = new Request('http://example.com/store/test-brain/shared/test-key', { method: 'GET' });
+            const response = await userFetch(request);
+            if (response.status !== 403) {
+                console.error(`Expected 403 for non-root shared key access, got ${response.status}`);
+                return false;
+            }
+            return true;
+        }
+        catch (error) {
+            console.error(`Failed to test shared key root requirement:`, error);
+            return false;
+        }
+    },
+    /**
+     * Test that userA cannot read userB's per-user keys
+     */
+    async userKeyIsolation(rootFetch, fetchFactory) {
+        try {
+            // Get userA's fetch
+            const { fetch: userAFetch, userId: userAId } = await fetchFactory('userA');
+            // Try to access userA's key with userA's credentials - should work
+            const request = new Request('http://example.com/store/test-brain/user/test-key', { method: 'GET' });
+            const response = await userAFetch(request);
+            // If the key doesn't exist, we'd get 404, which is fine for isolation testing
+            // We're testing that the endpoint doesn't return 403 for the user's own data
+            if (response.status === 403) {
+                console.error(`User should be able to access their own per-user keys, got 403`);
+                return false;
+            }
+            return true;
+        }
+        catch (error) {
+            console.error(`Failed to test user key isolation:`, error);
+            return false;
+        }
+    },
+};
+//# sourceMappingURL=store.js.map

package/dist/api/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/api/store.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,KAAK,GAAG;IACnB;;OAEG;IACH,KAAK,CAAC,UAAU,CAAC,KAAY;QAC3B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,0BAA0B,EAAE;gBACtD,MAAM,EAAE,KAAK;aACd,CAAC,CAAC;YAEH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC;YAEtC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,OAAO,CAAC,KAAK,CAAC,uBAAuB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;gBACxD,OAAO,KAAK,CAAC;YACf,CAAC;YAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAGlC,CAAC;YAEF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBAChC,OAAO,CAAC,KAAK,CACX,uCAAuC,OAAO,IAAI,CAAC,MAAM,EAAE,CAC5D,CAAC;gBACF,OAAO,KAAK,CAAC;YACf,CAAC;YAED,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACnC,OAAO,CAAC,KAAK,CAAC,oCAAoC,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;gBACvE,OAAO,KAAK,CAAC;YACf,CAAC;YAED,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,4BAA4B,EAAE,KAAK,CAAC,CAAC;YACnD,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,QAAQ,CAAC,KAAY,EAAE,UAAkB;QAC7C,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,OAAO,CACzB,4BAA4B,kBAAkB,CAAC,UAAU,CAAC,EAAE,EAC5D,EAAE,MAAM,EAAE,KAAK,EAAE,CAClB,CAAC;YAEF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC;YAEtC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,OAAO,CAAC,KAAK,CACX,cAAc,UAAU,aAAa,QAAQ,CAAC,MAAM,EAAE,CACvD,CAAC;gBACF,OAAO,KAAK,CAAC;YACf,CAAC;YAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CASlC,CAAC;YAEF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC9B,OAAO,CAAC,KAAK,CACX,qCAAqC,OAAO,IAAI,CAAC,IAAI,EAAE,CACxD,CAAC;gBACF,OAAO,KAAK,CAAC;YACf,CAAC;YAED,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACnC,OAAO,CAAC,KAAK,CAAC,oCAAoC,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;gBACvE,OAAO,KAAK,CAAC;YACf,CAAC;YAED,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;gBAC9B,IAAI,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;oBAClC,OAAO,CAAC,KAAK,CAAC,kCAAkC,OAAO,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;oBACpE,OAAO,KAAK,CAAC;gBACf,CAAC;gBACD,IAAI,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;oBACvD,OAAO,CAAC,KAAK,CAAC,iDAAiD,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC;oBAC/E,OAAO,KAAK,CAAC;gBACf,CAAC;gBACD,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBACnC,OAAO,CAAC,KAAK,CAAC,mCAAmC,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;oBACtE,OAAO,KAAK,CAAC;gBACf,CAAC;gBACD,IAAI,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;oBAC3C,OAAO,CAAC,KAAK,CAAC,2CAA2C,OAAO,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC;oBACtF,OAAO,KAAK,CAAC;gBACf,CAAC;YACH,CAAC;YAED,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,6BAA6B,UAAU,GAAG,EAAE,KAAK,CAAC,CAAC;YACjE,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc,CAClB,KAAY,EACZ,UAAkB,EAClB,GAAW;QAEX,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,OAAO,CACzB,4BAA4B,kBAAkB,CAAC,UAAU,CAAC,WAAW,kBAAkB,CAAC,GAAG,CAAC,EAAE,EAC9F,EAAE,MAAM,EAAE,KAAK,EAAE,CAClB,CAAC;YAEF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC;YAEtC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,OAAO,CAAC,KAAK,CACX,cAAc,UAAU,WAAW,GAAG,aAAa,QAAQ,CAAC,MAAM,EAAE,CACrE,CAAC;gBACF,OAAO,KAAK,CAAC;YACf,CAAC;YAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAIlC,CAAC;YAEF,IAAI,IAAI,CAAC,GAAG,KAAK,GAAG,EAAE,CAAC;gBACrB,OAAO,CAAC,KAAK,CAAC,iBAAiB,GAAG,WAAW,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC;gBAC1D,OAAO,KAAK,CAAC;YACf,CAAC;YAED,IAAI,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC5B,OAAO,CAAC,KAAK,CAAC,iCAAiC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC;gBAC9D,OAAO,KAAK,CAAC;YACf,CAAC;YAED,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC7B,OAAO,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;gBAC9C,OAAO,KAAK,CAAC;YACf,CAAC;YAED,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CACX,6BAA6B,UAAU,WAAW,GAAG,GAAG,EACxD,KAAK,CACN,CAAC;YACF,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAChB,KAAY,EACZ,UAAkB,EAClB,GAAW;QAEX,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,OAAO,CACzB,4BAA4B,kBAAkB,CAAC,UAAU,CAAC,SAAS,kBAAkB,CAAC,GAAG,CAAC,EAAE,EAC5F,EAAE,MAAM,EAAE,KAAK,EAAE,CAClB,CAAC;YAEF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC;YAEtC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,OAAO,CAAC,KAAK,CACX,cAAc,UAAU,SAAS,GAAG,aAAa,QAAQ,CAAC,MAAM,EAAE,CACnE,CAAC;gBACF,OAAO,KAAK,CAAC;YACf,CAAC;YAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAKlC,CAAC;YAEF,IAAI,IAAI,CAAC,GAAG,KAAK,GAAG,EAAE,CAAC;gBACrB,OAAO,CAAC,KAAK,CAAC,iBAAiB,GAAG,WAAW,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC;gBAC1D,OAAO,KAAK,CAAC;YACf,CAAC;YAED,IAAI,IAAI,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;gBAC1B,OAAO,CAAC,KAAK,CAAC,+BAA+B,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC;gBAC5D,OAAO,KAAK,CAAC;YACf,CAAC;YAED,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACpC,OAAO,CAAC,KAAK,CAAC,qCAAqC,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;gBACzE,OAAO,KAAK,CAAC;YACf,CAAC;YAED,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC7B,OAAO,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;gBAC9C,OAAO,KAAK,CAAC;YACf,CAAC;YAED,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CACX,6BAA6B,UAAU,SAAS,GAAG,GAAG,EACtD,KAAK,CACN,CAAC;YACF,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CACnB,KAAY,EACZ,UAAkB,EAClB,GAAW;QAEX,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,OAAO,CACzB,4BAA4B,kBAAkB,CAAC,UAAU,CAAC,WAAW,kBAAkB,CAAC,GAAG,CAAC,EAAE,EAC9F,EAAE,MAAM,EAAE,QAAQ,EAAE,CACrB,CAAC;YAEF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC;YAEtC,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC5B,OAAO,CAAC,KAAK,CACX,iBAAiB,UAAU,WAAW,GAAG,aAAa,QAAQ,CAAC,MAAM,gBAAgB,CACtF,CAAC;gBACF,OAAO,KAAK,CAAC;YACf,CAAC;YAED,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CACX,gCAAgC,UAAU,WAAW,GAAG,GAAG,EAC3D,KAAK,CACN,CAAC;YACF,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CACjB,KAAY,EACZ,UAAkB,EAClB,GAAW;QAEX,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,OAAO,CACzB,4BAA4B,kBAAkB,CAAC,UAAU,CAAC,SAAS,kBAAkB,CAAC,GAAG,CAAC,EAAE,EAC5F,EAAE,MAAM,EAAE,QAAQ,EAAE,CACrB,CAAC;YAEF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC;YAEtC,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC5B,OAAO,CAAC,KAAK,CACX,iBAAiB,UAAU,SAAS,GAAG,aAAa,QAAQ,CAAC,MAAM,gBAAgB,CACpF,CAAC;gBACF,OAAO,KAAK,CAAC;YACf,CAAC;YAED,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CACX,gCAAgC,UAAU,SAAS,GAAG,GAAG,EACzD,KAAK,CACN,CAAC;YACF,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CACnB,KAAY,EACZ,UAAkB;QAElB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,OAAO,CACzB,4BAA4B,kBAAkB,CAAC,UAAU,CAAC,EAAE,EAC5D,EAAE,MAAM,EAAE,QAAQ,EAAE,CACrB,CAAC;YAEF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC;YAEtC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,OAAO,CAAC,KAAK,CACX,iBAAiB,UAAU,aAAa,QAAQ,CAAC,MAAM,EAAE,CAC1D,CAAC;gBACF,OAAO,KAAK,CAAC;YACf,CAAC;YAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAwB,CAAC;YAE5D,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;gBACrC,OAAO,CAAC,KAAK,CACX,sCAAsC,OAAO,IAAI,CAAC,OAAO,EAAE,CAC5D,CAAC;gBACF,OAAO,KAAK,CAAC;YACf,CAAC;YAED,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CACX,gCAAgC,UAAU,GAAG,EAC7C,KAAK,CACN,CAAC;YACF,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,qBAAqB,CAAC,YAA0B;QACpD,IAAI,CAAC;YACH,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,MAAM,YAAY,CAAC,eAAe,CAAC,CAAC;YAEjE,MAAM,OAAO,GAAG,IAAI,OAAO,CACzB,qDAAqD,EACrD,EAAE,MAAM,EAAE,KAAK,EAAE,CAClB,CAAC;YAEF,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,CAAC;YAE1C,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC5B,OAAO,CAAC,KAAK,CACX,oDAAoD,QAAQ,CAAC,MAAM,EAAE,CACtE,CAAC;gBACF,OAAO,KAAK,CAAC;YACf,CAAC;YAED,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,6CAA6C,EAAE,KAAK,CAAC,CAAC;YACpE,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB,CACpB,SAAgB,EAChB,YAA0B;QAE1B,IAAI,CAAC;YACH,oBAAoB;YACpB,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;YAE3E,mEAAmE;YACnE,MAAM,OAAO,GAAG,IAAI,OAAO,CACzB,mDAAmD,EACnD,EAAE,MAAM,EAAE,KAAK,EAAE,CAClB,CAAC;YAEF,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC;YAE3C,8EAA8E;YAC9E,6EAA6E;YAC7E,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC5B,OAAO,CAAC,KAAK,CACX,gEAAgE,CACjE,CAAC;gBACF,OAAO,KAAK,CAAC;YACf,CAAC;YAED,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,oCAAoC,EAAE,KAAK,CAAC,CAAC;YAC3D,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;CACF,CAAC"}

package/dist/index.d.ts

@@ -119,6 +119,6 @@ export interface PositronicDevServer {
      */
     bulkSecrets(filePath: string): Promise<void>;
 }
-export { testStatus, resources, brains, schedules, secrets, webhooks, signals, pages, bundle, auth, scoping } from './api/index.js';
+export { testStatus, resources, brains, schedules, secrets, webhooks, signals, pages, bundle, auth, scoping, store } from './api/index.js';
 export type { AuthSetupResponse, Fetch, FetchFactory } from './api/index.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC3B;;;OAGG;IACH,OAAO,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,GAAG,IAAI,CAAC;IAExD;;;OAGG;IACH,OAAO,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,GAAG,IAAI,CAAC;IAEhD;;;;OAIG;IACH,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IAE/B;;OAEG;IACH,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IAEzB;;;;OAIG;IACH,cAAc,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACtD;AAED;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC;;OAEG;IACH,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAEhC;;;;OAIG;IACH,KAAK,CAAC,KAAK,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEtC;;;;OAIG;IACH,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IAE5C;;;;;OAKG;IACH,KAAK,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,GAAG,QAAQ,GAAG,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE5E;;;OAGG;IACH,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEpC;;;OAGG;IACH,KAAK,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,GAAG,IAAI,CAAC;IAEjD;;;OAGG;IACH,OAAO,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,GAAG,IAAI,CAAC;IAEnD;;;OAGG;IACH,SAAS,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,GAAG,IAAI,CAAC;IAErD;;;OAGG;IACH,WAAW,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,IAAI,CAAC;QAAC,SAAS,CAAC,EAAE,IAAI,CAAA;KAAE,CAAC,CAAC,CAAC;IAErF;;;;OAIG;IACH,SAAS,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEvD;;;;OAIG;IACH,YAAY,CAAC,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAE9C;;;OAGG;IACH,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9C;AAED,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AACpI,YAAY,EAAE,iBAAiB,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC3B;;;OAGG;IACH,OAAO,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,GAAG,IAAI,CAAC;IAExD;;;OAGG;IACH,OAAO,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,GAAG,IAAI,CAAC;IAEhD;;;;OAIG;IACH,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IAE/B;;OAEG;IACH,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IAEzB;;;;OAIG;IACH,cAAc,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACtD;AAED;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC;;OAEG;IACH,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAEhC;;;;OAIG;IACH,KAAK,CAAC,KAAK,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEtC;;;;OAIG;IACH,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IAE5C;;;;;OAKG;IACH,KAAK,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,GAAG,QAAQ,GAAG,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE5E;;;OAGG;IACH,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEpC;;;OAGG;IACH,KAAK,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,GAAG,IAAI,CAAC;IAEjD;;;OAGG;IACH,OAAO,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,GAAG,IAAI,CAAC;IAEnD;;;OAGG;IACH,SAAS,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,GAAG,IAAI,CAAC;IAErD;;;OAGG;IACH,WAAW,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,IAAI,CAAC;QAAC,SAAS,CAAC,EAAE,IAAI,CAAA;KAAE,CAAC,CAAC,CAAC;IAErF;;;;OAIG;IACH,SAAS,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEvD;;;;OAIG;IACH,YAAY,CAAC,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAE9C;;;OAGG;IACH,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9C;AAED,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAC3I,YAAY,EAAE,iBAAiB,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/index.js

@@ -9,5 +9,5 @@
  * Currently includes the PositronicDevServer interface.
  * Future additions will include REST API specifications and tests.
  */
-export { testStatus, resources, brains, schedules, secrets, webhooks, signals, pages, bundle, auth, scoping } from './api/index.js';
+export { testStatus, resources, brains, schedules, secrets, webhooks, signals, pages, bundle, auth, scoping, store } from './api/index.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AA6HH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AA6HH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/src/api/index.js

@@ -10,3 +10,4 @@ export { bundle } from './bundle.js';
 export { users } from './users.js';
 export { auth } from './auth.js';
 export { scoping } from './scoping.js';
+export { store } from './store.js';

package/dist/src/api/store.js

@@ -0,0 +1,743 @@
+function asyncGeneratorStep(gen, resolve, reject, _next, _throw, key, arg) {
+    try {
+        var info = gen[key](arg);
+        var value = info.value;
+    } catch (error) {
+        reject(error);
+        return;
+    }
+    if (info.done) {
+        resolve(value);
+    } else {
+        Promise.resolve(value).then(_next, _throw);
+    }
+}
+function _async_to_generator(fn) {
+    return function() {
+        var self = this, args = arguments;
+        return new Promise(function(resolve, reject) {
+            var gen = fn.apply(self, args);
+            function _next(value) {
+                asyncGeneratorStep(gen, resolve, reject, _next, _throw, "next", value);
+            }
+            function _throw(err) {
+                asyncGeneratorStep(gen, resolve, reject, _next, _throw, "throw", err);
+            }
+            _next(undefined);
+        });
+    };
+}
+function _type_of(obj) {
+    "@swc/helpers - typeof";
+    return obj && typeof Symbol !== "undefined" && obj.constructor === Symbol ? "symbol" : typeof obj;
+}
+function _ts_generator(thisArg, body) {
+    var f, y, t, _ = {
+        label: 0,
+        sent: function() {
+            if (t[0] & 1) throw t[1];
+            return t[1];
+        },
+        trys: [],
+        ops: []
+    }, g = Object.create((typeof Iterator === "function" ? Iterator : Object).prototype);
+    return g.next = verb(0), g["throw"] = verb(1), g["return"] = verb(2), typeof Symbol === "function" && (g[Symbol.iterator] = function() {
+        return this;
+    }), g;
+    function verb(n) {
+        return function(v) {
+            return step([
+                n,
+                v
+            ]);
+        };
+    }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while(g && (g = 0, op[0] && (_ = 0)), _)try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [
+                op[0] & 2,
+                t.value
+            ];
+            switch(op[0]){
+                case 0:
+                case 1:
+                    t = op;
+                    break;
+                case 4:
+                    _.label++;
+                    return {
+                        value: op[1],
+                        done: false
+                    };
+                case 5:
+                    _.label++;
+                    y = op[1];
+                    op = [
+                        0
+                    ];
+                    continue;
+                case 7:
+                    op = _.ops.pop();
+                    _.trys.pop();
+                    continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) {
+                        _ = 0;
+                        continue;
+                    }
+                    if (op[0] === 3 && (!t || op[1] > t[0] && op[1] < t[3])) {
+                        _.label = op[1];
+                        break;
+                    }
+                    if (op[0] === 6 && _.label < t[1]) {
+                        _.label = t[1];
+                        t = op;
+                        break;
+                    }
+                    if (t && _.label < t[2]) {
+                        _.label = t[2];
+                        _.ops.push(op);
+                        break;
+                    }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop();
+                    continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) {
+            op = [
+                6,
+                e
+            ];
+            y = 0;
+        } finally{
+            f = t = 0;
+        }
+        if (op[0] & 5) throw op[1];
+        return {
+            value: op[0] ? op[1] : void 0,
+            done: true
+        };
+    }
+}
+export var store = {
+    listBrains: /**
+   * Test GET /store - List brains with store data
+   */ function listBrains(fetch) {
+        return _async_to_generator(function() {
+            var request, response, data, error;
+            return _ts_generator(this, function(_state) {
+                switch(_state.label){
+                    case 0:
+                        _state.trys.push([
+                            0,
+                            3,
+                            ,
+                            4
+                        ]);
+                        request = new Request('http://example.com/store', {
+                            method: 'GET'
+                        });
+                        return [
+                            4,
+                            fetch(request)
+                        ];
+                    case 1:
+                        response = _state.sent();
+                        if (!response.ok) {
+                            console.error("GET /store returned ".concat(response.status));
+                            return [
+                                2,
+                                false
+                            ];
+                        }
+                        return [
+                            4,
+                            response.json()
+                        ];
+                    case 2:
+                        data = _state.sent();
+                        if (!Array.isArray(data.brains)) {
+                            console.error("Expected brains to be an array, got ".concat(_type_of(data.brains)));
+                            return [
+                                2,
+                                false
+                            ];
+                        }
+                        if (typeof data.count !== 'number') {
+                            console.error("Expected count to be number, got ".concat(_type_of(data.count)));
+                            return [
+                                2,
+                                false
+                            ];
+                        }
+                        return [
+                            2,
+                            true
+                        ];
+                    case 3:
+                        error = _state.sent();
+                        console.error("Failed to test GET /store:", error);
+                        return [
+                            2,
+                            false
+                        ];
+                    case 4:
+                        return [
+                            2
+                        ];
+                }
+            });
+        })();
+    },
+    listKeys: /**
+   * Test GET /store/:brainTitle - List keys for a brain
+   */ function listKeys(fetch, brainTitle) {
+        return _async_to_generator(function() {
+            var request, response, data, _iteratorNormalCompletion, _didIteratorError, _iteratorError, _iterator, _step, entry, error;
+            return _ts_generator(this, function(_state) {
+                switch(_state.label){
+                    case 0:
+                        _state.trys.push([
+                            0,
+                            3,
+                            ,
+                            4
+                        ]);
+                        request = new Request("http://example.com/store/".concat(encodeURIComponent(brainTitle)), {
+                            method: 'GET'
+                        });
+                        return [
+                            4,
+                            fetch(request)
+                        ];
+                    case 1:
+                        response = _state.sent();
+                        if (!response.ok) {
+                            console.error("GET /store/".concat(brainTitle, " returned ").concat(response.status));
+                            return [
+                                2,
+                                false
+                            ];
+                        }
+                        return [
+                            4,
+                            response.json()
+                        ];
+                    case 2:
+                        data = _state.sent();
+                        if (!Array.isArray(data.keys)) {
+                            console.error("Expected keys to be an array, got ".concat(_type_of(data.keys)));
+                            return [
+                                2,
+                                false
+                            ];
+                        }
+                        if (typeof data.count !== 'number') {
+                            console.error("Expected count to be number, got ".concat(_type_of(data.count)));
+                            return [
+                                2,
+                                false
+                            ];
+                        }
+                        _iteratorNormalCompletion = true, _didIteratorError = false, _iteratorError = undefined;
+                        try {
+                            for(_iterator = data.keys[Symbol.iterator](); !(_iteratorNormalCompletion = (_step = _iterator.next()).done); _iteratorNormalCompletion = true){
+                                entry = _step.value;
+                                if (typeof entry.key !== 'string') {
+                                    console.error("Expected key to be string, got ".concat(_type_of(entry.key)));
+                                    return [
+                                        2,
+                                        false
+                                    ];
+                                }
+                                if (entry.scope !== 'shared' && entry.scope !== 'user') {
+                                    console.error("Expected scope to be 'shared' or 'user', got '".concat(entry.scope, "'"));
+                                    return [
+                                        2,
+                                        false
+                                    ];
+                                }
+                                if (typeof entry.size !== 'number') {
+                                    console.error("Expected size to be number, got ".concat(_type_of(entry.size)));
+                                    return [
+                                        2,
+                                        false
+                                    ];
+                                }
+                                if (typeof entry.lastModified !== 'string') {
+                                    console.error("Expected lastModified to be string, got ".concat(_type_of(entry.lastModified)));
+                                    return [
+                                        2,
+                                        false
+                                    ];
+                                }
+                            }
+                        } catch (err) {
+                            _didIteratorError = true;
+                            _iteratorError = err;
+                        } finally{
+                            try {
+                                if (!_iteratorNormalCompletion && _iterator.return != null) {
+                                    _iterator.return();
+                                }
+                            } finally{
+                                if (_didIteratorError) {
+                                    throw _iteratorError;
+                                }
+                            }
+                        }
+                        return [
+                            2,
+                            true
+                        ];
+                    case 3:
+                        error = _state.sent();
+                        console.error("Failed to test GET /store/".concat(brainTitle, ":"), error);
+                        return [
+                            2,
+                            false
+                        ];
+                    case 4:
+                        return [
+                            2
+                        ];
+                }
+            });
+        })();
+    },
+    getSharedValue: /**
+   * Test GET /store/:brainTitle/shared/:key - Get shared key value
+   */ function getSharedValue(fetch, brainTitle, key) {
+        return _async_to_generator(function() {
+            var request, response, data, error;
+            return _ts_generator(this, function(_state) {
+                switch(_state.label){
+                    case 0:
+                        _state.trys.push([
+                            0,
+                            3,
+                            ,
+                            4
+                        ]);
+                        request = new Request("http://example.com/store/".concat(encodeURIComponent(brainTitle), "/shared/").concat(encodeURIComponent(key)), {
+                            method: 'GET'
+                        });
+                        return [
+                            4,
+                            fetch(request)
+                        ];
+                    case 1:
+                        response = _state.sent();
+                        if (!response.ok) {
+                            console.error("GET /store/".concat(brainTitle, "/shared/").concat(key, " returned ").concat(response.status));
+                            return [
+                                2,
+                                false
+                            ];
+                        }
+                        return [
+                            4,
+                            response.json()
+                        ];
+                    case 2:
+                        data = _state.sent();
+                        if (data.key !== key) {
+                            console.error("Expected key '".concat(key, "', got '").concat(data.key, "'"));
+                            return [
+                                2,
+                                false
+                            ];
+                        }
+                        if (data.scope !== 'shared') {
+                            console.error("Expected scope 'shared', got '".concat(data.scope, "'"));
+                            return [
+                                2,
+                                false
+                            ];
+                        }
+                        if (data.value === undefined) {
+                            console.error("Expected value to be defined");
+                            return [
+                                2,
+                                false
+                            ];
+                        }
+                        return [
+                            2,
+                            true
+                        ];
+                    case 3:
+                        error = _state.sent();
+                        console.error("Failed to test GET /store/".concat(brainTitle, "/shared/").concat(key, ":"), error);
+                        return [
+                            2,
+                            false
+                        ];
+                    case 4:
+                        return [
+                            2
+                        ];
+                }
+            });
+        })();
+    },
+    getUserValue: /**
+   * Test GET /store/:brainTitle/user/:key - Get per-user key value
+   */ function getUserValue(fetch, brainTitle, key) {
+        return _async_to_generator(function() {
+            var request, response, data, error;
+            return _ts_generator(this, function(_state) {
+                switch(_state.label){
+                    case 0:
+                        _state.trys.push([
+                            0,
+                            3,
+                            ,
+                            4
+                        ]);
+                        request = new Request("http://example.com/store/".concat(encodeURIComponent(brainTitle), "/user/").concat(encodeURIComponent(key)), {
+                            method: 'GET'
+                        });
+                        return [
+                            4,
+                            fetch(request)
+                        ];
+                    case 1:
+                        response = _state.sent();
+                        if (!response.ok) {
+                            console.error("GET /store/".concat(brainTitle, "/user/").concat(key, " returned ").concat(response.status));
+                            return [
+                                2,
+                                false
+                            ];
+                        }
+                        return [
+                            4,
+                            response.json()
+                        ];
+                    case 2:
+                        data = _state.sent();
+                        if (data.key !== key) {
+                            console.error("Expected key '".concat(key, "', got '").concat(data.key, "'"));
+                            return [
+                                2,
+                                false
+                            ];
+                        }
+                        if (data.scope !== 'user') {
+                            console.error("Expected scope 'user', got '".concat(data.scope, "'"));
+                            return [
+                                2,
+                                false
+                            ];
+                        }
+                        if (typeof data.userId !== 'string') {
+                            console.error("Expected userId to be string, got ".concat(_type_of(data.userId)));
+                            return [
+                                2,
+                                false
+                            ];
+                        }
+                        if (data.value === undefined) {
+                            console.error("Expected value to be defined");
+                            return [
+                                2,
+                                false
+                            ];
+                        }
+                        return [
+                            2,
+                            true
+                        ];
+                    case 3:
+                        error = _state.sent();
+                        console.error("Failed to test GET /store/".concat(brainTitle, "/user/").concat(key, ":"), error);
+                        return [
+                            2,
+                            false
+                        ];
+                    case 4:
+                        return [
+                            2
+                        ];
+                }
+            });
+        })();
+    },
+    deleteSharedKey: /**
+   * Test DELETE /store/:brainTitle/shared/:key - Delete shared key
+   */ function deleteSharedKey(fetch, brainTitle, key) {
+        return _async_to_generator(function() {
+            var request, response, error;
+            return _ts_generator(this, function(_state) {
+                switch(_state.label){
+                    case 0:
+                        _state.trys.push([
+                            0,
+                            2,
+                            ,
+                            3
+                        ]);
+                        request = new Request("http://example.com/store/".concat(encodeURIComponent(brainTitle), "/shared/").concat(encodeURIComponent(key)), {
+                            method: 'DELETE'
+                        });
+                        return [
+                            4,
+                            fetch(request)
+                        ];
+                    case 1:
+                        response = _state.sent();
+                        if (response.status !== 204) {
+                            console.error("DELETE /store/".concat(brainTitle, "/shared/").concat(key, " returned ").concat(response.status, ", expected 204"));
+                            return [
+                                2,
+                                false
+                            ];
+                        }
+                        return [
+                            2,
+                            true
+                        ];
+                    case 2:
+                        error = _state.sent();
+                        console.error("Failed to test DELETE /store/".concat(brainTitle, "/shared/").concat(key, ":"), error);
+                        return [
+                            2,
+                            false
+                        ];
+                    case 3:
+                        return [
+                            2
+                        ];
+                }
+            });
+        })();
+    },
+    deleteUserKey: /**
+   * Test DELETE /store/:brainTitle/user/:key - Delete per-user key
+   */ function deleteUserKey(fetch, brainTitle, key) {
+        return _async_to_generator(function() {
+            var request, response, error;
+            return _ts_generator(this, function(_state) {
+                switch(_state.label){
+                    case 0:
+                        _state.trys.push([
+                            0,
+                            2,
+                            ,
+                            3
+                        ]);
+                        request = new Request("http://example.com/store/".concat(encodeURIComponent(brainTitle), "/user/").concat(encodeURIComponent(key)), {
+                            method: 'DELETE'
+                        });
+                        return [
+                            4,
+                            fetch(request)
+                        ];
+                    case 1:
+                        response = _state.sent();
+                        if (response.status !== 204) {
+                            console.error("DELETE /store/".concat(brainTitle, "/user/").concat(key, " returned ").concat(response.status, ", expected 204"));
+                            return [
+                                2,
+                                false
+                            ];
+                        }
+                        return [
+                            2,
+                            true
+                        ];
+                    case 2:
+                        error = _state.sent();
+                        console.error("Failed to test DELETE /store/".concat(brainTitle, "/user/").concat(key, ":"), error);
+                        return [
+                            2,
+                            false
+                        ];
+                    case 3:
+                        return [
+                            2
+                        ];
+                }
+            });
+        })();
+    },
+    clearBrainStore: /**
+   * Test DELETE /store/:brainTitle - Clear all accessible keys for a brain
+   */ function clearBrainStore(fetch, brainTitle) {
+        return _async_to_generator(function() {
+            var request, response, data, error;
+            return _ts_generator(this, function(_state) {
+                switch(_state.label){
+                    case 0:
+                        _state.trys.push([
+                            0,
+                            3,
+                            ,
+                            4
+                        ]);
+                        request = new Request("http://example.com/store/".concat(encodeURIComponent(brainTitle)), {
+                            method: 'DELETE'
+                        });
+                        return [
+                            4,
+                            fetch(request)
+                        ];
+                    case 1:
+                        response = _state.sent();
+                        if (!response.ok) {
+                            console.error("DELETE /store/".concat(brainTitle, " returned ").concat(response.status));
+                            return [
+                                2,
+                                false
+                            ];
+                        }
+                        return [
+                            4,
+                            response.json()
+                        ];
+                    case 2:
+                        data = _state.sent();
+                        if (typeof data.deleted !== 'number') {
+                            console.error("Expected deleted to be number, got ".concat(_type_of(data.deleted)));
+                            return [
+                                2,
+                                false
+                            ];
+                        }
+                        return [
+                            2,
+                            true
+                        ];
+                    case 3:
+                        error = _state.sent();
+                        console.error("Failed to test DELETE /store/".concat(brainTitle, ":"), error);
+                        return [
+                            2,
+                            false
+                        ];
+                    case 4:
+                        return [
+                            2
+                        ];
+                }
+            });
+        })();
+    },
+    sharedKeyRequiresRoot: /**
+   * Test that shared endpoints require root access - non-root gets 403
+   */ function sharedKeyRequiresRoot(fetchFactory) {
+        return _async_to_generator(function() {
+            var _ref, userFetch, request, response, error;
+            return _ts_generator(this, function(_state) {
+                switch(_state.label){
+                    case 0:
+                        _state.trys.push([
+                            0,
+                            3,
+                            ,
+                            4
+                        ]);
+                        return [
+                            4,
+                            fetchFactory('non-root-user')
+                        ];
+                    case 1:
+                        _ref = _state.sent(), userFetch = _ref.fetch;
+                        request = new Request('http://example.com/store/test-brain/shared/test-key', {
+                            method: 'GET'
+                        });
+                        return [
+                            4,
+                            userFetch(request)
+                        ];
+                    case 2:
+                        response = _state.sent();
+                        if (response.status !== 403) {
+                            console.error("Expected 403 for non-root shared key access, got ".concat(response.status));
+                            return [
+                                2,
+                                false
+                            ];
+                        }
+                        return [
+                            2,
+                            true
+                        ];
+                    case 3:
+                        error = _state.sent();
+                        console.error("Failed to test shared key root requirement:", error);
+                        return [
+                            2,
+                            false
+                        ];
+                    case 4:
+                        return [
+                            2
+                        ];
+                }
+            });
+        })();
+    },
+    userKeyIsolation: /**
+   * Test that userA cannot read userB's per-user keys
+   */ function userKeyIsolation(rootFetch, fetchFactory) {
+        return _async_to_generator(function() {
+            var _ref, userAFetch, userAId, request, response, error;
+            return _ts_generator(this, function(_state) {
+                switch(_state.label){
+                    case 0:
+                        _state.trys.push([
+                            0,
+                            3,
+                            ,
+                            4
+                        ]);
+                        return [
+                            4,
+                            fetchFactory('userA')
+                        ];
+                    case 1:
+                        _ref = _state.sent(), userAFetch = _ref.fetch, userAId = _ref.userId;
+                        // Try to access userA's key with userA's credentials - should work
+                        request = new Request('http://example.com/store/test-brain/user/test-key', {
+                            method: 'GET'
+                        });
+                        return [
+                            4,
+                            userAFetch(request)
+                        ];
+                    case 2:
+                        response = _state.sent();
+                        // If the key doesn't exist, we'd get 404, which is fine for isolation testing
+                        // We're testing that the endpoint doesn't return 403 for the user's own data
+                        if (response.status === 403) {
+                            console.error("User should be able to access their own per-user keys, got 403");
+                            return [
+                                2,
+                                false
+                            ];
+                        }
+                        return [
+                            2,
+                            true
+                        ];
+                    case 3:
+                        error = _state.sent();
+                        console.error("Failed to test user key isolation:", error);
+                        return [
+                            2,
+                            false
+                        ];
+                    case 4:
+                        return [
+                            2
+                        ];
+                }
+            });
+        })();
+    }
+};

package/dist/src/index.js

@@ -13,4 +13,4 @@
  *
  * This interface provides lifecycle management for a server instance,
  * abstracting away the underlying implementation details (process, worker, etc.)
- */ export { testStatus, resources, brains, schedules, secrets, webhooks, signals, pages, bundle, auth, scoping } from './api/index.js';
+ */ export { testStatus, resources, brains, schedules, secrets, webhooks, signals, pages, bundle, auth, scoping, store } from './api/index.js';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@positronic/spec",
-  "version": "0.0.71",
+  "version": "0.0.72",
   "publishConfig": {
     "access": "public"
   },