@powerhousedao/reactor-api 6.2.2-dev.81 → 6.2.2-dev.82

package/dist/index.mjs

@@ -1,5 +1,5 @@
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="0d1c78be-0026-5af3-b8dd-9282b69fde6d")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="a3bbf8ae-c16f-5c87-aaf9-23e0709811cd")}catch(e){}}();
 import { _ as createAuthorizationService, a as isSubgraphClass, b as MalformedStoredOperationError, d as loadSubgraphs, f as BaseSubgraph, g as AuthorizedDocumentHandle, h as AuthorizationPolicy, i as buildGraphqlOperations, l as loadDocumentModels, m as createCanonicalDocumentIdResolver, n as buildGraphQlDriveDocument, o as debounce, p as CanonicalDocumentIdResolutionError, r as buildGraphqlOperation, s as extractUpgradeManifests, t as buildGraphQlDocument, u as loadProcessors, v as AuthEvaluationUnsupportedError, y as ForbiddenError } from "./utils-lHoPB-ft.mjs";
 import { AnalyticsQueryEngine } from "@powerhousedao/analytics-engine-core";
 import { AnalyticsModel, AnalyticsResolvers, typedefs } from "@powerhousedao/analytics-engine-graphql";
@@ -3219,6 +3219,7 @@ var GraphQLManager = class {
 	subgraphs = /* @__PURE__ */ new Map();
 	subgraphWsDisposers = /* @__PURE__ */ new Map();
 	#authMiddleware;
+	#requireAuthMiddleware;
 	#driveMiddleware;
 	driveOwnershipCache;
 	/** Cached document models for schema generation - updated on init and regenerate */
@@ -3256,8 +3257,9 @@ var GraphQLManager = class {
 		this.driveOwnershipCache = new DriveOwnershipCache(this.reactorClient);
 		this.wsServer.setMaxListeners(0);
 	}
-	async init(coreSubgraphs, authMiddleware) {
+	async init(coreSubgraphs, authMiddleware, requireAuthMiddleware) {
 		this.#authMiddleware = authMiddleware;
+		this.#requireAuthMiddleware = requireAuthMiddleware;
 		this.logger.debug(`Initializing Subgraph Manager...`);
 		await this.driveOwnershipCache.init();
 		this.#driveMiddleware = createDriveFetchMiddleware(this.driveOwnershipCache);
@@ -3653,11 +3655,14 @@ var GraphQLManager = class {
 	/**
 	* Compose the request-level fetch middleware chain. Auth runs first
 	* (so we don't validate shard before knowing the request is even
-	* authorized), drive-ownership validation runs after.
+	* authorized); the require-authenticated-caller middleware runs next,
+	* before shard validation, so an anonymous caller is rejected with a
+	* 401 rather than a 421; drive-ownership validation runs last.
 	*/
 	#composeFetchMiddleware(rawHandler) {
 		let handler = rawHandler;
 		if (this.#driveMiddleware) handler = this.#driveMiddleware(handler);
+		if (this.#requireAuthMiddleware) handler = this.#requireAuthMiddleware(handler);
 		if (this.#authMiddleware) handler = this.#authMiddleware(handler);
 		return handler;
 	}
@@ -4735,10 +4740,10 @@ const ADMIN_USERS = getAdminUsers();
 //#endregion
 //#region src/graphql/system/version.ts
 function getVersion() {
-	return "6.2.2-dev.81";
+	return "6.2.2-dev.82";
 }
 function getGitHash() {
-	return "af4dc4166fc39d356f4a5b3bba4ac147ee72a8ac";
+	return "1ddf2464b2544e64cc972b68a1380c152b7f78e4";
 }
 function getGitUrl() {
 	return buildTreeUrl(getGitHash());
@@ -5359,6 +5364,40 @@ function normalizeAttachmentRef(value) {
 	return createRef(hash, version);
 }
 //#endregion
+//#region src/graphql/gateway/require-auth-middleware.ts
+/**
+* Returns a fetch middleware that rejects anonymous callers with a 401.
+*
+* This is the enforcement half of the resolve-and-don't-enforce split set up
+* by `RESOLVE_CALLER_IDENTITY`: the auth middleware must run before this
+* one — it verifies the bearer (an invalid token is still a 401 from
+* there) and records the resolved caller on the request. This middleware
+* then refuses the request when no caller was resolved, so under `OPEN`
+* (or `AUTH_ENABLED` with identity resolution) the whole generic surface —
+* document CRUD, sync, every custom subgraph — is reachable only by
+* authenticated callers, without locking out non-admins the way
+* `ADMIN_ONLY` does.
+*
+* It composes in one place in the fetch chain, so it covers every mounted
+* subgraph, the supergraph, and the SSE handler alike.
+*
+* OPTIONS is let through: a CORS preflight never carries a bearer, and
+* `AuthService.authenticateRequest` already answers it with an anonymous
+* context — refusing it would break every cross-origin client with a 401.
+*
+* Fails closed: a request that reaches this middleware without a resolved
+* context has no caller, and is rejected. The server never composes this
+* middleware without the auth middleware in the chain (see
+* `assertRequireAuthenticatedCallerAllowed` in `server.ts`).
+*/
+function createRequireAuthFetchMiddleware() {
+	return (next) => async (request) => {
+		if (request.method === "OPTIONS") return next(request);
+		if (getAuthContext(request)?.user === void 0) return new globalThis.Response(JSON.stringify({ error: "Authentication required" }), { status: 401 });
+		return next(request);
+	};
+}
+//#endregion
 //#region src/migrations/001_create_document_permissions.ts
 var _001_create_document_permissions_exports = /* @__PURE__ */ __exportAll({
 	down: () => down$2,
@@ -6238,6 +6277,17 @@ function assertSkipCredentialVerificationAllowed(resolvesCallerIdentity, skipCre
 	const acknowledged = env.ALLOW_INSECURE_SKIP_CREDENTIAL_VERIFICATION === "true";
 	if (!inAutomatedTest && !acknowledged) throw new Error("SKIP_CREDENTIAL_VERIFICATION is set but refused: it disables the live Renown credential check — the only check binding a token's claimed address to the key that signed it — so honoring it allows identity spoofing, including of admins. It is never safe in production. For local or sandbox use, also set ALLOW_INSECURE_SKIP_CREDENTIAL_VERIFICATION=true to acknowledge the risk; automated test runs (VITEST=true or NODE_ENV=test) are exempt.");
 }
+/**
+* Requiring an authenticated caller requires identity resolution to exist at
+* all: with neither AUTH_ENABLED nor RESOLVE_CALLER_IDENTITY the middleware
+* never reads a bearer, no `user` is ever resolved, and the
+* require-authenticated-caller middleware would reject every caller —
+* authenticated ones included. Refuse to boot rather than run broken.
+*/
+function assertRequireAuthenticatedCallerAllowed(requireAuthenticatedCaller, resolvesCallerIdentity) {
+	if (!requireAuthenticatedCaller || resolvesCallerIdentity) return;
+	throw new Error("REQUIRE_AUTHENTICATED_CALLER is set but refused: it rejects every request without a resolved caller, and with neither AUTH_ENABLED nor RESOLVE_CALLER_IDENTITY the server never reads a bearer, so it would reject every caller, including authenticated ones. Enable identity resolution first (RESOLVE_CALLER_IDENTITY=true or AUTH_ENABLED=true).");
+}
 function createReadinessGate() {
 	let ready = false;
 	return {
@@ -6306,9 +6356,9 @@ function buildSyncServingGate(reactorModule, authorizationConfig, logger) {
 /**
 * Sets up the subgraph manager and registers subgraphs
 */
-async function setupGraphQLManager(httpAdapter, authFetchMiddleware, httpServer, wsServer, client, relationalDb, analyticsStore, syncManager, subgraphs, logger, authorizationService, authService, documentPermissionService, enableDocumentModelSubgraphs, port, reactorDriveClient, syncServingGate) {
+async function setupGraphQLManager(httpAdapter, authFetchMiddleware, requireAuthFetchMiddleware, httpServer, wsServer, client, relationalDb, analyticsStore, syncManager, subgraphs, logger, authorizationService, authService, documentPermissionService, enableDocumentModelSubgraphs, port, reactorDriveClient, syncServingGate) {
 	const graphqlManager = new GraphQLManager(config.basePath, httpServer, wsServer, client, relationalDb, analyticsStore, syncManager, logger, httpAdapter, await createGatewayAdapter("apollo", logger), authService, documentPermissionService, { enableDocumentModelSubgraphs }, port, authorizationService, reactorDriveClient, syncServingGate);
-	await graphqlManager.init(subgraphs.core, authFetchMiddleware);
+	await graphqlManager.init(subgraphs.core, authFetchMiddleware, requireAuthFetchMiddleware);
 	for (const [, collection] of subgraphs.extended.entries()) for (const subgraph of collection) await graphqlManager.registerSubgraph(subgraph, "graphql");
 	await graphqlManager.updateRouter();
 	return graphqlManager;
@@ -6390,6 +6440,7 @@ async function _setupCommonInfrastructure(options) {
 	let admins = [];
 	let authEnabled = false;
 	let configuredResolveIdentity;
+	let configuredRequireAuth;
 	let configuredRenown;
 	if (options.configFile) {
 		const config = getConfig(options.configFile);
@@ -6400,8 +6451,9 @@ async function _setupCommonInfrastructure(options) {
 		admins = options.auth.admins.map((a) => a.toLowerCase());
 		authEnabled = options.auth.enabled;
 		configuredResolveIdentity = options.auth.resolveIdentity;
+		configuredRequireAuth = options.auth.requireAuthenticatedCaller;
 	}
-	const { AUTH_ENABLED, RESOLVE_CALLER_IDENTITY, ADMINS, DEFAULT_PROTECTION, DOCUMENT_PERMISSIONS_ENABLED, SKIP_CREDENTIAL_VERIFICATION, CREDENTIAL_VERIFICATION_CACHE_TTL_MS } = process.env;
+	const { AUTH_ENABLED, RESOLVE_CALLER_IDENTITY, REQUIRE_AUTHENTICATED_CALLER, ADMINS, DEFAULT_PROTECTION, DOCUMENT_PERMISSIONS_ENABLED, SKIP_CREDENTIAL_VERIFICATION, CREDENTIAL_VERIFICATION_CACHE_TTL_MS } = process.env;
 	if (AUTH_ENABLED !== void 0) authEnabled = AUTH_ENABLED === "true";
 	/**
 	* Whether the auth middleware reads the bearer and populates `ctx.user`,
@@ -6416,6 +6468,22 @@ async function _setupCommonInfrastructure(options) {
 	*/
 	let resolveCallerIdentity = configuredResolveIdentity ?? authEnabled;
 	if (RESOLVE_CALLER_IDENTITY !== void 0) resolveCallerIdentity = RESOLVE_CALLER_IDENTITY === "true";
+	/**
+	* Whether the require-authenticated-caller middleware is active: anonymous
+	* callers are rejected with a 401 before any subgraph sees the request.
+	*
+	* Off by default, so nothing changes for existing deployments. This is the
+	* enforcement half of the `RESOLVE_CALLER_IDENTITY` split: that one lets a
+	* server know who is calling while the policy stays `OPEN`, and this one
+	* closes the hole it leaves open — under `OPEN`, an anonymous caller
+	* reaches the whole generic surface (document CRUD, sync, every custom
+	* subgraph), because `OpenAuthorizationService` answers `true` to
+	* everything. `ADMIN_ONLY` is the only alternative today, and it locks
+	* out every non-admin; this expresses "authenticated callers allowed,
+	* anonymous not".
+	*/
+	let requireAuthenticatedCaller = configuredRequireAuth ?? false;
+	if (REQUIRE_AUTHENTICATED_CALLER !== void 0) requireAuthenticatedCaller = REQUIRE_AUTHENTICATED_CALLER === "true";
 	if (ADMINS !== void 0) admins = ADMINS.split(",").map((a) => a.toLowerCase());
 	let defaultProtection = false;
 	if (DEFAULT_PROTECTION !== void 0) defaultProtection = DEFAULT_PROTECTION.toLowerCase() === "true";
@@ -6430,6 +6498,7 @@ async function _setupCommonInfrastructure(options) {
 	const documentPermissionsRequested = options.documentPermissionService !== void 0 || DOCUMENT_PERMISSIONS_ENABLED === "true";
 	assertAuthRequiredForDocumentPermissions(authEnabled, documentPermissionsRequested);
 	assertSkipCredentialVerificationAllowed(resolveCallerIdentity, skipCredentialVerification, process.env);
+	assertRequireAuthenticatedCallerAllowed(requireAuthenticatedCaller, resolveCallerIdentity);
 	if (authEnabled && skipCredentialVerification) logger.warn("SECURITY: SKIP_CREDENTIAL_VERIFICATION is enabled — Renown credential verification is disabled and a bearer token's claimed address is NOT cryptographically bound to its signing key. Identity is unverifiable; use only in development or test.");
 	httpAdapter.getRoute("/health", () => new Response("OK", { status: 200 }));
 	const readiness = createReadinessGate();
@@ -6443,6 +6512,7 @@ async function _setupCommonInfrastructure(options) {
 		return new Response(renderGraphqlPlayground(endpoint, query), { headers: { "Content-Type": "text/html" } });
 	});
 	let authFetchMiddleware;
+	let requireAuthFetchMiddleware;
 	let authService;
 	if (resolveCallerIdentity || authEnabled) {
 		logger.info("Setting up Auth middleware (policy enforcement: @enabled, caller identity: @resolve)", authEnabled, resolveCallerIdentity);
@@ -6462,6 +6532,10 @@ async function _setupCommonInfrastructure(options) {
 			})
 		});
 		authFetchMiddleware = createAuthFetchMiddleware(authService);
+		if (requireAuthenticatedCaller) {
+			requireAuthFetchMiddleware = createRequireAuthFetchMiddleware();
+			logger.info("Require-authenticated-caller middleware enabled: anonymous callers are rejected with a 401 before any subgraph");
+		}
 	}
 	const dbClosers = [];
 	const { relationalDb, analyticsStore, closers: analyticsClosers } = await initializeDatabaseAndAnalytics(options.dbPath, options.pgliteFactory);
@@ -6504,6 +6578,7 @@ async function _setupCommonInfrastructure(options) {
 		port,
 		httpAdapter,
 		authFetchMiddleware,
+		requireAuthFetchMiddleware,
 		authService,
 		relationalDb,
 		analyticsStore,
@@ -6519,7 +6594,7 @@ async function _setupCommonInfrastructure(options) {
 /**
 * Private helper function containing common setup logic for API initialization
 */
-async function _setupAPI(reactorClient, syncManager, reactorProcessorManager, httpAdapter, authFetchMiddleware, authService, port, packages, relationalDb, analyticsStore, documentPermissionService, processors, subgraphs, options, processorApp, readModels, attachments, attachmentReferenceIndex, attachmentReferenceProjection, authorizationConfig, documentModelRegistry, dbClosers = [], reactorDriveClient, syncServingGate) {
+async function _setupAPI(reactorClient, syncManager, reactorProcessorManager, httpAdapter, authFetchMiddleware, requireAuthFetchMiddleware, authService, port, packages, relationalDb, analyticsStore, documentPermissionService, processors, subgraphs, options, processorApp, readModels, attachments, attachmentReferenceIndex, attachmentReferenceProjection, authorizationConfig, documentModelRegistry, dbClosers = [], reactorDriveClient, syncServingGate) {
 	const hostModule = {
 		...createReactorHostModuleBase({
 			client: reactorClient,
@@ -6564,7 +6639,7 @@ async function _setupAPI(reactorClient, syncManager, reactorProcessorManager, ht
 		coreSubgraphs.push(AuthSubgraph);
 		logger.info("Auth subgraph registered (document permissions enabled)");
 	}
-	const graphqlManager = await setupGraphQLManager(httpAdapter, authFetchMiddleware, httpServer, wsServer, reactorClient, relationalDb, analyticsStore, syncManager, {
+	const graphqlManager = await setupGraphQLManager(httpAdapter, authFetchMiddleware, requireAuthFetchMiddleware, httpServer, wsServer, reactorClient, relationalDb, analyticsStore, syncManager, {
 		extended: subgraphs,
 		core: coreSubgraphs
 	}, logger.child(["graphql-manager"]), authorizationService, authService, documentPermissionService, options.enableDocumentModelSubgraphs, port, reactorDriveClient, syncServingGate);
@@ -6632,7 +6707,7 @@ function buildApiDispose(args) {
 	};
 }
 async function initializeAndStartAPI(clientInitializer, options, processorApp) {
-	const { port, httpAdapter, authFetchMiddleware, authService, relationalDb, analyticsStore, documentPermissionService, authorizationConfig, attachments, attachmentReferenceIndex, packages, dbClosers, readiness } = await _setupCommonInfrastructure(options);
+	const { port, httpAdapter, authFetchMiddleware, requireAuthFetchMiddleware, authService, relationalDb, analyticsStore, documentPermissionService, authorizationConfig, attachments, attachmentReferenceIndex, packages, dbClosers, readiness } = await _setupCommonInfrastructure(options);
 	const { documentModels, upgradeManifests, processors, subgraphs } = await packages.init();
 	const { module: reactorClientModule, reactorDriveClient, attachmentReferenceProjection = {
 		status: "unavailable",
@@ -6649,7 +6724,7 @@ async function initializeAndStartAPI(clientInitializer, options, processorApp) {
 	const documentModelRegistry = reactorClientModule.reactorModule?.documentModelRegistry;
 	if (!documentModelRegistry) throw new Error("DocumentModelRegistry not available from InProcessReactorClientModule");
 	return {
-		...await _setupAPI(reactorClient, syncManager, reactorProcessorManager, httpAdapter, authFetchMiddleware, authService, port, packages, relationalDb, analyticsStore, documentPermissionService, processors, subgraphs, options, processorApp, (reactorClientModule.reactorModule?.readModelCoordinator)?.readModels ?? [], attachments, attachmentReferenceIndex, attachmentReferenceProjection, authorizationConfig, documentModelRegistry, dbClosers, reactorDriveClient, buildSyncServingGate(reactorClientModule.reactorModule, authorizationConfig, options.logger ?? defaultLogger)),
+		...await _setupAPI(reactorClient, syncManager, reactorProcessorManager, httpAdapter, authFetchMiddleware, requireAuthFetchMiddleware, authService, port, packages, relationalDb, analyticsStore, documentPermissionService, processors, subgraphs, options, processorApp, (reactorClientModule.reactorModule?.readModelCoordinator)?.readModels ?? [], attachments, attachmentReferenceIndex, attachmentReferenceProjection, authorizationConfig, documentModelRegistry, dbClosers, reactorDriveClient, buildSyncServingGate(reactorClientModule.reactorModule, authorizationConfig, options.logger ?? defaultLogger)),
 		client: reactorClient,
 		syncManager,
 		documentModelRegistry,
@@ -6758,7 +6833,7 @@ var PackageManagementService = class {
 	}
 };
 //#endregion
-export { ADMIN_USERS, ActionCandidateInputSchema, ActionContextInputSchema, ActionInputSchema, AddRelationshipDocument, AnalyticsSubgraph, AttachmentAccessService, AuthDecision, AuthDecisionSchema, AuthService, AuthSubgraph, AuthorizationPolicy, AuthorizedDocumentHandle, BaseSubgraph, CanonicalDocumentIdResolutionError, ChannelMetaInputSchema, CreateDocumentDocument, CreateEmptyDocumentDocument, DeleteDocumentDocument, DeleteDocumentsDocument, DocumentChangeType, DocumentChangeTypeSchema, DocumentChangesDocument, DocumentOperationsFilterInputSchema, DocumentPermissionService, EvaluateActionsDocument, FindDocumentsDocument, GetDocumentDocument, GetDocumentIncomingRelationshipsDocument, GetDocumentModelsDocument, GetDocumentOperationsDocument, GetDocumentOutgoingRelationshipsDocument, GetDocumentWithOperationsDocument, GetJobStatusDocument, GraphQLManager, HttpDocumentModelLoader, HttpPackageLoader, ImportPackageLoader, InMemoryPackageStorage, JobChangesDocument, MoveRelationshipDocument, MutateDocumentAsyncDocument, MutateDocumentDocument, OperationContextInputSchema, OperationInputSchema, OperationWithContextInputSchema, OperationsFilterInputSchema, PGLITE_UTC_PARSERS, PackageManagementService, PackageManager, PackagesSubgraph, PagingInputSchema, PhDocumentFieldsFragmentDoc, PollSyncEnvelopesDocument, PropagationMode, PropagationModeSchema, PushSyncEnvelopesDocument, ReactorSignerAppInputSchema, ReactorSignerInputSchema, ReactorSignerUserInputSchema, ReactorSubgraph, RemoteCursorInputSchema, RemoteFilterInputSchema, RemoveRelationshipDocument, RenameDocumentDocument, SearchFilterInputSchema, SetPreferredEditorDocument, SyncEnvelopeInputSchema, SyncEnvelopeType, SyncEnvelopeTypeSchema, SystemSubgraph, TouchChannelDocument, TouchChannelInputSchema, ViewFilterInputSchema, assertAuthRequiredForDocumentPermissions, assertCredentialVerifierForSource, assertSkipCredentialVerificationAllowed, buildGraphQlDocument, buildGraphQlDriveDocument, buildGraphqlOperation, buildGraphqlOperations, buildSubgraphSchemaModule, createAuthFetchMiddleware, createCanonicalDocumentIdResolver, createGatewayAdapter, createHttpAdapter, createMergedSchema, createReactorGraphQLClient, createRenownCredentialVerifier, createSchema, definedNonNullAnySchema, driveIdFromUrl, extractSubgraphsFromModule, generateDocumentModelSchema, getAuthContext, getDbClient, getDocumentModelSchemaName, getDocumentModelTypeDefs, getGitHash, getGitUrl, getSdk, getUniqueDocumentModels, getUniqueUpgradeManifests, getVersion, initAnalyticsStoreSql, initializeAndStartAPI, isDefinedNonNullAny, isExpectedLoaderMiss, isSubgraphClass, parseDriveUrl, renderGraphqlPlayground, resolveRenownConfig };
+export { ADMIN_USERS, ActionCandidateInputSchema, ActionContextInputSchema, ActionInputSchema, AddRelationshipDocument, AnalyticsSubgraph, AttachmentAccessService, AuthDecision, AuthDecisionSchema, AuthService, AuthSubgraph, AuthorizationPolicy, AuthorizedDocumentHandle, BaseSubgraph, CanonicalDocumentIdResolutionError, ChannelMetaInputSchema, CreateDocumentDocument, CreateEmptyDocumentDocument, DeleteDocumentDocument, DeleteDocumentsDocument, DocumentChangeType, DocumentChangeTypeSchema, DocumentChangesDocument, DocumentOperationsFilterInputSchema, DocumentPermissionService, EvaluateActionsDocument, FindDocumentsDocument, GetDocumentDocument, GetDocumentIncomingRelationshipsDocument, GetDocumentModelsDocument, GetDocumentOperationsDocument, GetDocumentOutgoingRelationshipsDocument, GetDocumentWithOperationsDocument, GetJobStatusDocument, GraphQLManager, HttpDocumentModelLoader, HttpPackageLoader, ImportPackageLoader, InMemoryPackageStorage, JobChangesDocument, MoveRelationshipDocument, MutateDocumentAsyncDocument, MutateDocumentDocument, OperationContextInputSchema, OperationInputSchema, OperationWithContextInputSchema, OperationsFilterInputSchema, PGLITE_UTC_PARSERS, PackageManagementService, PackageManager, PackagesSubgraph, PagingInputSchema, PhDocumentFieldsFragmentDoc, PollSyncEnvelopesDocument, PropagationMode, PropagationModeSchema, PushSyncEnvelopesDocument, ReactorSignerAppInputSchema, ReactorSignerInputSchema, ReactorSignerUserInputSchema, ReactorSubgraph, RemoteCursorInputSchema, RemoteFilterInputSchema, RemoveRelationshipDocument, RenameDocumentDocument, SearchFilterInputSchema, SetPreferredEditorDocument, SyncEnvelopeInputSchema, SyncEnvelopeType, SyncEnvelopeTypeSchema, SystemSubgraph, TouchChannelDocument, TouchChannelInputSchema, ViewFilterInputSchema, assertAuthRequiredForDocumentPermissions, assertCredentialVerifierForSource, assertRequireAuthenticatedCallerAllowed, assertSkipCredentialVerificationAllowed, buildGraphQlDocument, buildGraphQlDriveDocument, buildGraphqlOperation, buildGraphqlOperations, buildSubgraphSchemaModule, createAuthFetchMiddleware, createCanonicalDocumentIdResolver, createGatewayAdapter, createHttpAdapter, createMergedSchema, createReactorGraphQLClient, createRenownCredentialVerifier, createSchema, definedNonNullAnySchema, driveIdFromUrl, extractSubgraphsFromModule, generateDocumentModelSchema, getAuthContext, getDbClient, getDocumentModelSchemaName, getDocumentModelTypeDefs, getGitHash, getGitUrl, getSdk, getUniqueDocumentModels, getUniqueUpgradeManifests, getVersion, initAnalyticsStoreSql, initializeAndStartAPI, isDefinedNonNullAny, isExpectedLoaderMiss, isSubgraphClass, parseDriveUrl, renderGraphqlPlayground, resolveRenownConfig };
 
 //# sourceMappingURL=index.mjs.map
-//# debugId=0d1c78be-0026-5af3-b8dd-9282b69fde6d
+//# debugId=a3bbf8ae-c16f-5c87-aaf9-23e0709811cd