@powersync/service-core 0.0.2

package/dist/routes/admin.js

@@ -0,0 +1,192 @@
+import * as micro from '@journeyapps-platform/micro';
+import { SqlSyncRules, StaticSchema, isJsonValue, toSyncRulesValue } from '@powersync/service-sync-rules';
+import { internal_routes } from '@powersync/service-types';
+import * as api from '../api/api-index.js';
+import * as util from '../util/util-index.js';
+import { authApi } from './auth.js';
+const demoCredentials = (router) => router.post('/api/admin/v1/demo-credentials', {
+    authorize: authApi,
+    validator: micro.schema.createTsCodecValidator(internal_routes.DemoCredentialsRequest, { allowAdditional: true }),
+    handler: async (payload) => {
+        const connection = payload.context.system.config.connection;
+        if (connection == null || !connection.demo_database) {
+            return internal_routes.DemoCredentialsResponse.encode({});
+        }
+        const uri = util.buildDemoPgUri(connection);
+        return internal_routes.DemoCredentialsResponse.encode({
+            credentials: {
+                postgres_uri: uri
+            }
+        });
+    }
+});
+export const executeSql = (router) => router.post('/api/admin/v1/execute-sql', {
+    authorize: authApi,
+    validator: micro.schema.createTsCodecValidator(internal_routes.ExecuteSqlRequest, { allowAdditional: true }),
+    handler: async (payload) => {
+        const connection = payload.context.system.config.connection;
+        if (connection == null || !connection.debug_api) {
+            return internal_routes.ExecuteSqlResponse.encode({
+                results: {
+                    columns: [],
+                    rows: []
+                },
+                success: false,
+                error: 'SQL querying is not enabled'
+            });
+        }
+        const pool = payload.context.system.requirePgPool();
+        const { query, args } = payload.params.sql;
+        try {
+            const result = await pool.query({
+                statement: query,
+                params: args.map(util.autoParameter)
+            });
+            return internal_routes.ExecuteSqlResponse.encode({
+                success: true,
+                results: {
+                    columns: result.columns.map((c) => c.name),
+                    rows: result.rows.map((row) => {
+                        return row.map((value) => mapColumnValue(toSyncRulesValue(value)));
+                    })
+                }
+            });
+        }
+        catch (e) {
+            return internal_routes.ExecuteSqlResponse.encode({
+                results: {
+                    columns: [],
+                    rows: []
+                },
+                success: false,
+                error: e.message
+            });
+        }
+    }
+});
+export const diagnostics = (router) => router.post('/api/admin/v1/diagnostics', {
+    authorize: authApi,
+    validator: micro.schema.createTsCodecValidator(internal_routes.DiagnosticsRequest, { allowAdditional: true }),
+    handler: async (payload) => {
+        const include_content = payload.params.sync_rules_content ?? false;
+        const system = payload.context.system;
+        const status = await api.getConnectionStatus(system);
+        if (status == null) {
+            return internal_routes.DiagnosticsResponse.encode({
+                connections: []
+            });
+        }
+        const { storage } = system;
+        const active = await storage.getActiveSyncRulesContent();
+        const next = await storage.getNextSyncRulesContent();
+        const active_status = await api.getSyncRulesStatus(active, system, {
+            include_content,
+            check_connection: status.connected,
+            live_status: true
+        });
+        const next_status = await api.getSyncRulesStatus(next, system, {
+            include_content,
+            check_connection: status.connected,
+            live_status: true
+        });
+        return internal_routes.DiagnosticsResponse.encode({
+            connections: [status],
+            active_sync_rules: active_status,
+            deploying_sync_rules: next_status
+        });
+    }
+});
+export const getSchema = (router) => router.post('/api/admin/v1/schema', {
+    authorize: authApi,
+    validator: micro.schema.createTsCodecValidator(internal_routes.GetSchemaRequest, { allowAdditional: true }),
+    handler: async (payload) => {
+        const system = payload.context.system;
+        return internal_routes.GetSchemaResponse.encode(await api.getConnectionsSchema(system));
+    }
+});
+export const reprocess = (router) => router.post('/api/admin/v1/reprocess', {
+    authorize: authApi,
+    validator: micro.schema.createTsCodecValidator(internal_routes.ReprocessRequest, { allowAdditional: true }),
+    handler: async (payload) => {
+        const system = payload.context.system;
+        const storage = system.storage;
+        const next = await storage.getNextSyncRules();
+        if (next != null) {
+            throw new Error(`Busy processing sync rules - cannot reprocess`);
+        }
+        const active = await storage.getActiveSyncRules();
+        if (active == null) {
+            throw new micro.errors.JourneyError({
+                status: 422,
+                code: 'NO_SYNC_RULES',
+                description: 'No active sync rules'
+            });
+        }
+        const new_rules = await storage.updateSyncRules({
+            content: active.sync_rules.content
+        });
+        return internal_routes.ReprocessResponse.encode({
+            connections: [
+                {
+                    tag: system.config.connection.tag,
+                    id: system.config.connection.id,
+                    slot_name: new_rules.slot_name
+                }
+            ]
+        });
+    }
+});
+export const validate = (router) => router.post('/api/admin/v1/validate', {
+    authorize: authApi,
+    validator: micro.schema.createTsCodecValidator(internal_routes.ValidateRequest, { allowAdditional: true }),
+    handler: async (payload) => {
+        const system = payload.context.system;
+        const content = payload.params.sync_rules;
+        const schemaData = await api.getConnectionsSchema(system);
+        const schema = new StaticSchema(schemaData.connections);
+        const sync_rules = {
+            // Dummy values
+            id: 0,
+            slot_name: '',
+            parsed() {
+                return {
+                    ...this,
+                    sync_rules: SqlSyncRules.fromYaml(content, { throwOnError: false, schema })
+                };
+            },
+            sync_rules_content: content,
+            async lock() {
+                throw new Error('Lock not implemented');
+            }
+        };
+        const connectionStatus = await api.getConnectionStatus(system);
+        if (connectionStatus == null) {
+            return internal_routes.ValidateResponse.encode({
+                errors: [{ level: 'fatal', message: 'No connection configured' }],
+                connections: []
+            });
+        }
+        const status = (await api.getSyncRulesStatus(sync_rules, system, {
+            include_content: false,
+            check_connection: connectionStatus?.connected,
+            live_status: false
+        }));
+        if (connectionStatus == null) {
+            status.errors.push({ level: 'fatal', message: 'No connection configured' });
+        }
+        return internal_routes.ValidateResponse.encode(status);
+    }
+});
+function mapColumnValue(value) {
+    if (typeof value == 'bigint') {
+        return Number(value);
+    }
+    else if (isJsonValue(value)) {
+        return value;
+    }
+    else {
+        return null;
+    }
+}
+export const admin_routes = [demoCredentials, executeSql, diagnostics, getSchema, reprocess, validate];
+//# sourceMappingURL=admin.js.map

package/dist/routes/admin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin.js","sourceRoot":"","sources":["../../src/routes/admin.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,6BAA6B,CAAC;AACrD,OAAO,EAAE,YAAY,EAAe,YAAY,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACvH,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAE3D,OAAO,KAAK,GAAG,MAAM,oBAAoB,CAAC;AAC1C,OAAO,KAAK,IAAI,MAAM,sBAAsB,CAAC;AAI7C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,MAAM,eAAe,GAAmB,CAAC,MAAM,EAAE,EAAE,CACjD,MAAM,CAAC,IAAI,CAAC,gCAAgC,EAAE;IAC5C,SAAS,EAAE,OAAO;IAClB,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,sBAAsB,CAAC,eAAe,CAAC,sBAAsB,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;IACjH,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QACzB,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC;QAC5D,IAAI,UAAU,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,aAAa,EAAE,CAAC;YACpD,OAAO,eAAe,CAAC,uBAAuB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC5D,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;QAC5C,OAAO,eAAe,CAAC,uBAAuB,CAAC,MAAM,CAAC;YACpD,WAAW,EAAE;gBACX,YAAY,EAAE,GAAG;aAClB;SACF,CAAC,CAAC;IACL,CAAC;CACF,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,UAAU,GAAmB,CAAC,MAAM,EAAE,EAAE,CACnD,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE;IACvC,SAAS,EAAE,OAAO;IAClB,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,sBAAsB,CAAC,eAAe,CAAC,iBAAiB,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;IAC5G,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QACzB,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC;QAC5D,IAAI,UAAU,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC;YAChD,OAAO,eAAe,CAAC,kBAAkB,CAAC,MAAM,CAAC;gBAC/C,OAAO,EAAE;oBACP,OAAO,EAAE,EAAE;oBACX,IAAI,EAAE,EAAE;iBACT;gBACD,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,6BAA6B;aACrC,CAAC,CAAC;QACL,CAAC;QAED,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;QAEpD,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC;QAE3C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC;gBAC9B,SAAS,EAAE,KAAK;gBAChB,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC;aACrC,CAAC,CAAC;YAEH,OAAO,eAAe,CAAC,kBAAkB,CAAC,MAAM,CAAC;gBAC/C,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE;oBACP,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;oBAC1C,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;wBAC5B,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;oBACrE,CAAC,CAAC;iBACH;aACF,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,eAAe,CAAC,kBAAkB,CAAC,MAAM,CAAC;gBAC/C,OAAO,EAAE;oBACP,OAAO,EAAE,EAAE;oBACX,IAAI,EAAE,EAAE;iBACT;gBACD,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,CAAC,CAAC,OAAO;aACjB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,WAAW,GAAmB,CAAC,MAAM,EAAE,EAAE,CACpD,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE;IACvC,SAAS,EAAE,OAAO;IAClB,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,sBAAsB,CAAC,eAAe,CAAC,kBAAkB,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;IAC7G,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QACzB,MAAM,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,kBAAkB,IAAI,KAAK,CAAC;QACnE,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;QAEtC,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;QACrD,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;YACnB,OAAO,eAAe,CAAC,mBAAmB,CAAC,MAAM,CAAC;gBAChD,WAAW,EAAE,EAAE;aAChB,CAAC,CAAC;QACL,CAAC;QAED,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;QAC3B,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,yBAAyB,EAAE,CAAC;QACzD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,uBAAuB,EAAE,CAAC;QAErD,MAAM,aAAa,GAAG,MAAM,GAAG,CAAC,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE;YACjE,eAAe;YACf,gBAAgB,EAAE,MAAM,CAAC,SAAS;YAClC,WAAW,EAAE,IAAI;SAClB,CAAC,CAAC;QAEH,MAAM,WAAW,GAAG,MAAM,GAAG,CAAC,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE;YAC7D,eAAe;YACf,gBAAgB,EAAE,MAAM,CAAC,SAAS;YAClC,WAAW,EAAE,IAAI;SAClB,CAAC,CAAC;QAEH,OAAO,eAAe,CAAC,mBAAmB,CAAC,MAAM,CAAC;YAChD,WAAW,EAAE,CAAC,MAAM,CAAC;YACrB,iBAAiB,EAAE,aAAa;YAChC,oBAAoB,EAAE,WAAW;SAClC,CAAC,CAAC;IACL,CAAC;CACF,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,SAAS,GAAmB,CAAC,MAAM,EAAE,EAAE,CAClD,MAAM,CAAC,IAAI,CAAC,sBAAsB,EAAE;IAClC,SAAS,EAAE,OAAO;IAClB,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,sBAAsB,CAAC,eAAe,CAAC,gBAAgB,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;IAC3G,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QACzB,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;QAEtC,OAAO,eAAe,CAAC,iBAAiB,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1F,CAAC;CACF,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,SAAS,GAAmB,CAAC,MAAM,EAAE,EAAE,CAClD,MAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE;IACrC,SAAS,EAAE,OAAO;IAClB,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,sBAAsB,CAAC,eAAe,CAAC,gBAAgB,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;IAC3G,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QACzB,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;QAEtC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAC/B,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,gBAAgB,EAAE,CAAC;QAC9C,IAAI,IAAI,IAAI,IAAI,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACnE,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,kBAAkB,EAAE,CAAC;QAClD,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC;gBAClC,MAAM,EAAE,GAAG;gBACX,IAAI,EAAE,eAAe;gBACrB,WAAW,EAAE,sBAAsB;aACpC,CAAC,CAAC;QACL,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,eAAe,CAAC;YAC9C,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO;SACnC,CAAC,CAAC;QAEH,OAAO,eAAe,CAAC,iBAAiB,CAAC,MAAM,CAAC;YAC9C,WAAW,EAAE;gBACX;oBACE,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,UAAW,CAAC,GAAG;oBAClC,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,UAAW,CAAC,EAAE;oBAChC,SAAS,EAAE,SAAS,CAAC,SAAS;iBAC/B;aACF;SACF,CAAC,CAAC;IACL,CAAC;CACF,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,QAAQ,GAAmB,CAAC,MAAM,EAAE,EAAE,CACjD,MAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE;IACpC,SAAS,EAAE,OAAO;IAClB,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,sBAAsB,CAAC,eAAe,CAAC,eAAe,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;IAC1G,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QACzB,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;QAEtC,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC;QAE1C,MAAM,UAAU,GAAG,MAAM,GAAG,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;QAExD,MAAM,UAAU,GAA8B;YAC5C,eAAe;YACf,EAAE,EAAE,CAAC;YACL,SAAS,EAAE,EAAE;YAEb,MAAM;gBACJ,OAAO;oBACL,GAAG,IAAI;oBACP,UAAU,EAAE,YAAY,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;iBAC5E,CAAC;YACJ,CAAC;YACD,kBAAkB,EAAE,OAAO;YAC3B,KAAK,CAAC,IAAI;gBACR,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;YAC1C,CAAC;SACF,CAAC;QAEF,MAAM,gBAAgB,GAAG,MAAM,GAAG,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;QAC/D,IAAI,gBAAgB,IAAI,IAAI,EAAE,CAAC;YAC7B,OAAO,eAAe,CAAC,gBAAgB,CAAC,MAAM,CAAC;gBAC7C,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC;gBACjE,WAAW,EAAE,EAAE;aAChB,CAAC,CAAC;QACL,CAAC;QAED,MAAM,MAAM,GAAG,CAAC,MAAM,GAAG,CAAC,kBAAkB,CAAC,UAAU,EAAE,MAAM,EAAE;YAC/D,eAAe,EAAE,KAAK;YACtB,gBAAgB,EAAE,gBAAgB,EAAE,SAAS;YAC7C,WAAW,EAAE,KAAK;SACnB,CAAC,CAAE,CAAC;QAEL,IAAI,gBAAgB,IAAI,IAAI,EAAE,CAAC;YAC7B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC,CAAC;QAC9E,CAAC;QAED,OAAO,eAAe,CAAC,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACzD,CAAC;CACF,CAAC,CAAC;AAEL,SAAS,cAAc,CAAC,KAAkB;IACxC,IAAI,OAAO,KAAK,IAAI,QAAQ,EAAE,CAAC;QAC7B,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;SAAM,IAAI,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC;SAAM,CAAC;QACN,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,eAAe,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC"}

package/dist/routes/auth.d.ts

@@ -0,0 +1,58 @@
+import * as micro from '@journeyapps-platform/micro';
+import { FastifyRequest } from 'fastify';
+import * as auth from '../auth/auth-index.js';
+import * as util from '../util/util-index.js';
+import { Context } from './router.js';
+import { CorePowerSyncSystem } from '../system/CorePowerSyncSystem.js';
+export declare function endpoint(req: FastifyRequest): string;
+/**
+ * @deprecated
+ *
+ * Will be replaced by temporary tokens issued by PowerSync Management service.
+ */
+export declare function issueDevToken(req: FastifyRequest, user_id: string, config: util.ResolvedPowerSyncConfig): Promise<string>;
+/** @deprecated */
+export declare function issueLegacyDevToken(req: FastifyRequest, user_id: string, config: util.ResolvedPowerSyncConfig): Promise<string>;
+export declare function issuePowerSyncToken(req: FastifyRequest, user_id: string, config: util.ResolvedPowerSyncConfig): Promise<string>;
+export declare function getTokenFromHeader(authHeader?: string): string | null;
+export declare const authUser: (payload: micro.fastify.FastifyHandlerPayload<any, Context>) => Promise<{
+    authorized: boolean;
+    errors: any[];
+} | {
+    authorized: boolean;
+    errors?: undefined;
+}>;
+export declare function authorizeUser(context: Context, authHeader?: string): Promise<{
+    authorized: boolean;
+    errors: any[];
+} | {
+    authorized: boolean;
+    errors?: undefined;
+}>;
+export declare function generateContext(system: CorePowerSyncSystem, token: string): Promise<{
+    context: {
+        user_id: string;
+        token_payload: auth.JwtPayload;
+    };
+    errors?: undefined;
+} | {
+    context: null;
+    errors: any[];
+}>;
+/**
+ * @deprecated
+ */
+export declare const authDevUser: (payload: micro.fastify.FastifyHandlerPayload<any, Context>) => Promise<{
+    authorized: boolean;
+    errors: any[];
+} | {
+    authorized: boolean;
+    errors?: undefined;
+}>;
+export declare const authApi: (payload: micro.fastify.FastifyHandlerPayload<any, Context>) => {
+    authorized: boolean;
+    errors: string[];
+} | {
+    authorized: boolean;
+    errors?: undefined;
+};

package/dist/routes/auth.js

@@ -0,0 +1,182 @@
+import * as jose from 'jose';
+export function endpoint(req) {
+    const protocol = req.headers['x-forwarded-proto'] ?? req.protocol;
+    const host = req.hostname;
+    return `${protocol}://${host}`;
+}
+function devAudience(req) {
+    return `${endpoint(req)}/dev`;
+}
+/**
+ * @deprecated
+ *
+ * Will be replaced by temporary tokens issued by PowerSync Management service.
+ */
+export async function issueDevToken(req, user_id, config) {
+    const iss = devAudience(req);
+    const aud = devAudience(req);
+    const key = config.dev.dev_key;
+    if (key == null) {
+        throw new Error('Auth disabled');
+    }
+    return await new jose.SignJWT({})
+        .setProtectedHeader({ alg: key.source.alg, kid: key.kid })
+        .setSubject(user_id)
+        .setIssuedAt()
+        .setIssuer(iss)
+        .setAudience(aud)
+        .setExpirationTime('30d')
+        .sign(key.key);
+}
+/** @deprecated */
+export async function issueLegacyDevToken(req, user_id, config) {
+    const iss = devAudience(req);
+    const aud = config.jwt_audiences[0];
+    const key = config.dev.dev_key;
+    if (key == null || aud == null) {
+        throw new Error('Auth disabled');
+    }
+    return await new jose.SignJWT({})
+        .setProtectedHeader({ alg: key.source.alg, kid: key.kid })
+        .setSubject(user_id)
+        .setIssuedAt()
+        .setIssuer(iss)
+        .setAudience(aud)
+        .setExpirationTime('60m')
+        .sign(key.key);
+}
+export async function issuePowerSyncToken(req, user_id, config) {
+    const iss = devAudience(req);
+    const aud = config.jwt_audiences[0];
+    const key = config.dev.dev_key;
+    if (key == null || aud == null) {
+        throw new Error('Auth disabled');
+    }
+    const jwt = await new jose.SignJWT({})
+        .setProtectedHeader({ alg: key.source.alg, kid: key.kid })
+        .setSubject(user_id)
+        .setIssuedAt()
+        .setIssuer(iss)
+        .setAudience(aud)
+        .setExpirationTime('5m')
+        .sign(key.key);
+    return jwt;
+}
+export function getTokenFromHeader(authHeader = '') {
+    const tokenMatch = /^(Token|Bearer) (\S+)$/.exec(authHeader);
+    if (!tokenMatch) {
+        return null;
+    }
+    const token = tokenMatch[2];
+    return token ?? null;
+}
+export const authUser = async (payload) => {
+    return authorizeUser(payload.context, payload.request.headers.authorization);
+};
+export async function authorizeUser(context, authHeader = '') {
+    const token = getTokenFromHeader(authHeader);
+    if (token == null) {
+        return {
+            authorized: false,
+            errors: ['Authentication required']
+        };
+    }
+    const { context: tokenContext, errors } = await generateContext(context.system, token);
+    if (!tokenContext) {
+        return {
+            authorized: false,
+            errors
+        };
+    }
+    Object.assign(context, tokenContext);
+    return { authorized: true };
+}
+export async function generateContext(system, token) {
+    const config = system.config;
+    let tokenPayload;
+    try {
+        const maxAge = config.token_max_expiration;
+        tokenPayload = await system.client_keystore.verifyJwt(token, {
+            defaultAudiences: config.jwt_audiences,
+            maxAge: maxAge
+        });
+        return {
+            context: {
+                user_id: tokenPayload.sub,
+                token_payload: tokenPayload
+            }
+        };
+    }
+    catch (err) {
+        return {
+            context: null,
+            errors: [err.message]
+        };
+    }
+}
+/**
+ * @deprecated
+ */
+export const authDevUser = async (payload) => {
+    const context = payload.context;
+    const token = getTokenFromHeader(payload.request.headers.authorization);
+    if (!context.system.config.dev.demo_auth) {
+        return {
+            authorized: false,
+            errors: ['Authentication disabled']
+        };
+    }
+    if (token == null) {
+        return {
+            authorized: false,
+            errors: ['Authentication required']
+        };
+    }
+    // Different from the configured audience.
+    // Should also not be changed by keys
+    const audience = [devAudience(payload.request)];
+    let tokenPayload;
+    try {
+        tokenPayload = await context.system.dev_client_keystore.verifyJwt(token, {
+            defaultAudiences: audience,
+            maxAge: '31d'
+        });
+    }
+    catch (err) {
+        return {
+            authorized: false,
+            errors: [err.message]
+        };
+    }
+    payload.context.user_id = tokenPayload.sub;
+    return { authorized: true };
+};
+export const authApi = (payload) => {
+    const context = payload.context;
+    const api_keys = context.system.config.api_tokens;
+    if (api_keys.length == 0) {
+        return {
+            authorized: false,
+            errors: ['Authentication disabled']
+        };
+    }
+    const auth = payload.request.headers.authorization ?? '';
+    const tokenMatch = /^(Token|Bearer) (\S+)$/.exec(auth);
+    if (!tokenMatch) {
+        return {
+            authorized: false,
+            errors: ['Authentication required']
+        };
+    }
+    const token = tokenMatch[2];
+    if (api_keys.includes(token)) {
+        return { authorized: true };
+    }
+    else {
+        return {
+            authorized: false,
+            errors: ['Authentication failed']
+        };
+    }
+};
+//# sourceMappingURL=auth.js.map

package/dist/routes/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/routes/auth.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAO7B,MAAM,UAAU,QAAQ,CAAC,GAAmB;IAC1C,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC;IAClE,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC;IAC1B,OAAO,GAAG,QAAQ,MAAM,IAAI,EAAE,CAAC;AACjC,CAAC;AAED,SAAS,WAAW,CAAC,GAAmB;IACtC,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC;AAChC,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,GAAmB,EAAE,OAAe,EAAE,MAAoC;IAC5G,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAC7B,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAE7B,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC;IAC/B,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;IACnC,CAAC;IAED,OAAO,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;SAC9B,kBAAkB,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,GAAI,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC;SAC1D,UAAU,CAAC,OAAO,CAAC;SACnB,WAAW,EAAE;SACb,SAAS,CAAC,GAAG,CAAC;SACd,WAAW,CAAC,GAAG,CAAC;SAChB,iBAAiB,CAAC,KAAK,CAAC;SACxB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AACnB,CAAC;AAED,kBAAkB;AAClB,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,GAAmB,EAAE,OAAe,EAAE,MAAoC;IAClH,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAC7B,MAAM,GAAG,GAAG,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IAEpC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC;IAC/B,IAAI,GAAG,IAAI,IAAI,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;IACnC,CAAC;IAED,OAAO,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;SAC9B,kBAAkB,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,GAAI,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC;SAC1D,UAAU,CAAC,OAAO,CAAC;SACnB,WAAW,EAAE;SACb,SAAS,CAAC,GAAG,CAAC;SACd,WAAW,CAAC,GAAG,CAAC;SAChB,iBAAiB,CAAC,KAAK,CAAC;SACxB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AACnB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,GAAmB,EAAE,OAAe,EAAE,MAAoC;IAClH,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAC7B,MAAM,GAAG,GAAG,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IACpC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC;IAC/B,IAAI,GAAG,IAAI,IAAI,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;IACnC,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;SACnC,kBAAkB,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,GAAI,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC;SAC1D,UAAU,CAAC,OAAO,CAAC;SACnB,WAAW,EAAE;SACb,SAAS,CAAC,GAAG,CAAC;SACd,WAAW,CAAC,GAAG,CAAC;SAChB,iBAAiB,CAAC,IAAI,CAAC;SACvB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACjB,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,aAAqB,EAAE;IACxD,MAAM,UAAU,GAAG,wBAAwB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC7D,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;IAC5B,OAAO,KAAK,IAAI,IAAI,CAAC;AACvB,CAAC;AAED,MAAM,CAAC,MAAM,QAAQ,GAAG,KAAK,EAAE,OAA0D,EAAE,EAAE;IAC3F,OAAO,aAAa,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;AAC/E,CAAC,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAAgB,EAAE,aAAqB,EAAE;IAC3E,MAAM,KAAK,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAC7C,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;QAClB,OAAO;YACL,UAAU,EAAE,KAAK;YACjB,MAAM,EAAE,CAAC,yBAAyB,CAAC;SACpC,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAEvF,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO;YACL,UAAU,EAAE,KAAK;YACjB,MAAM;SACP,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IACrC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;AAC9B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,MAA2B,EAAE,KAAa;IAC9E,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAE7B,IAAI,YAA6B,CAAC;IAClC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,CAAC,oBAAoB,CAAC;QAC3C,YAAY,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,SAAS,CAAC,KAAK,EAAE;YAC3D,gBAAgB,EAAE,MAAM,CAAC,aAAa;YACtC,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;QACH,OAAO;YACL,OAAO,EAAE;gBACP,OAAO,EAAE,YAAY,CAAC,GAAG;gBACzB,aAAa,EAAE,YAAY;aAC5B;SACF,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC;SACtB,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,KAAK,EAAE,OAA0D,EAAE,EAAE;IAC9F,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAChC,MAAM,KAAK,GAAG,kBAAkB,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IACxE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;QACzC,OAAO;YACL,UAAU,EAAE,KAAK;YACjB,MAAM,EAAE,CAAC,yBAAyB,CAAC;SACpC,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;QAClB,OAAO;YACL,UAAU,EAAE,KAAK;YACjB,MAAM,EAAE,CAAC,yBAAyB,CAAC;SACpC,CAAC;IACJ,CAAC;IAED,0CAA0C;IAC1C,qCAAqC;IACrC,MAAM,QAAQ,GAAG,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;IAEhD,IAAI,YAA6B,CAAC;IAClC,IAAI,CAAC;QACH,YAAY,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC,SAAS,CAAC,KAAK,EAAE;YACvE,gBAAgB,EAAE,QAAQ;YAC1B,MAAM,EAAE,KAAK;SACd,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,UAAU,EAAE,KAAK;YACjB,MAAM,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC;SACtB,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,OAAO,CAAC,OAAO,GAAG,YAAY,CAAC,GAAG,CAAC;IAC3C,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;AAC9B,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,OAA0D,EAAE,EAAE;IACpF,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAChC,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC;IAClD,IAAI,QAAQ,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;QACzB,OAAO;YACL,UAAU,EAAE,KAAK;YACjB,MAAM,EAAE,CAAC,yBAAyB,CAAC;SACpC,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC;IAEzD,MAAM,UAAU,GAAG,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO;YACL,UAAU,EAAE,KAAK;YACjB,MAAM,EAAE,CAAC,yBAAyB,CAAC;SACpC,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;IAC5B,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IAC9B,CAAC;SAAM,CAAC;QACN,OAAO;YACL,UAAU,EAAE,KAAK;YACjB,MAAM,EAAE,CAAC,uBAAuB,CAAC;SAClC,CAAC;IACJ,CAAC;AACH,CAAC,CAAC"}

package/dist/routes/checkpointing.d.ts

@@ -0,0 +1,3 @@
+import { RouteGenerator } from './router.js';
+export declare const writeCheckpoint: RouteGenerator;
+export declare const writeCheckpoint2: RouteGenerator;

package/dist/routes/checkpointing.js

@@ -0,0 +1,30 @@
+import * as t from 'ts-codec';
+import * as micro from '@journeyapps-platform/micro';
+import * as util from '../util/util-index.js';
+import { authUser } from './auth.js';
+const WriteCheckpointRequest = t.object({});
+export const writeCheckpoint = (router) => router.get('/write-checkpoint.json', {
+    authorize: authUser,
+    validator: micro.schema.createTsCodecValidator(WriteCheckpointRequest, { allowAdditional: true }),
+    handler: async (payload) => {
+        const system = payload.context.system;
+        const storage = system.storage;
+        const checkpoint = await util.getClientCheckpoint(system.requirePgPool(), storage);
+        return {
+            checkpoint
+        };
+    }
+});
+export const writeCheckpoint2 = (router) => router.get('/write-checkpoint2.json', {
+    authorize: authUser,
+    validator: micro.schema.createTsCodecValidator(WriteCheckpointRequest, { allowAdditional: true }),
+    handler: async (payload) => {
+        const { user_id, system } = payload.context;
+        const storage = system.storage;
+        const write_checkpoint = await util.createWriteCheckpoint(system.requirePgPool(), storage, user_id);
+        return {
+            write_checkpoint: String(write_checkpoint)
+        };
+    }
+});
+//# sourceMappingURL=checkpointing.js.map

package/dist/routes/checkpointing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkpointing.js","sourceRoot":"","sources":["../../src/routes/checkpointing.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,UAAU,CAAC;AAC9B,OAAO,KAAK,KAAK,MAAM,6BAA6B,CAAC;AAErD,OAAO,KAAK,IAAI,MAAM,sBAAsB,CAAC;AAE7C,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAGrC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAE5C,MAAM,CAAC,MAAM,eAAe,GAAmB,CAAC,MAAM,EAAE,EAAE,CACxD,MAAM,CAAC,GAAG,CAAC,wBAAwB,EAAE;IACnC,SAAS,EAAE,QAAQ;IACnB,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,sBAAsB,CAAC,sBAAsB,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;IACjG,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QACzB,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;QACtC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAE/B,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,aAAa,EAAE,EAAE,OAAO,CAAC,CAAC;QACnF,OAAO;YACL,UAAU;SACX,CAAC;IACJ,CAAC;CACF,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,gBAAgB,GAAmB,CAAC,MAAM,EAAE,EAAE,CACzD,MAAM,CAAC,GAAG,CAAC,yBAAyB,EAAE;IACpC,SAAS,EAAE,QAAQ;IACnB,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,sBAAsB,CAAC,sBAAsB,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;IACjG,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QACzB,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC;QAC5C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAC/B,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,aAAa,EAAE,EAAE,OAAO,EAAE,OAAQ,CAAC,CAAC;QACrG,OAAO;YACL,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,CAAC;SAC3C,CAAC;IACJ,CAAC;CACF,CAAC,CAAC"}

package/dist/routes/dev.d.ts

@@ -0,0 +1,6 @@
+import { RouteGenerator } from './router.js';
+export declare const auth: RouteGenerator;
+export declare const auth2: RouteGenerator;
+export declare const token: RouteGenerator;
+export declare const crud: RouteGenerator;
+export declare const dev_routes: RouteGenerator[];

package/dist/routes/dev.js

@@ -0,0 +1,163 @@
+import * as t from 'ts-codec';
+import * as micro from '@journeyapps-platform/micro';
+import * as util from '../util/util-index.js';
+import { authDevUser, authUser, endpoint, issueDevToken, issueLegacyDevToken, issuePowerSyncToken } from './auth.js';
+const AuthParams = t.object({
+    user: t.string,
+    password: t.string
+});
+// For legacy web client only. Remove soon.
+export const auth = (router) => router.post('/auth.json', {
+    validator: micro.schema.createTsCodecValidator(AuthParams, { allowAdditional: true }),
+    handler: async (payload) => {
+        const { user, password } = payload.params;
+        const config = payload.context.system.config;
+        if (config.dev.demo_auth == false || config.dev.demo_password == null) {
+            throw new micro.errors.AuthorizationError(['Demo auth disabled']);
+        }
+        if (password == config.dev.demo_password) {
+            const token = await issueLegacyDevToken(payload.request, user, payload.context.system.config);
+            return { token, user_id: user, endpoint: endpoint(payload.request) };
+        }
+        else {
+            throw new micro.errors.AuthorizationError(['Authentication failed']);
+        }
+    }
+});
+export const auth2 = (router) => router.post('/dev/auth.json', {
+    validator: micro.schema.createTsCodecValidator(AuthParams, { allowAdditional: true }),
+    handler: async (payload) => {
+        const { user, password } = payload.params;
+        const config = payload.context.system.config;
+        if (config.dev.demo_auth == false || config.dev.demo_password == null) {
+            throw new micro.errors.AuthorizationError(['Demo auth disabled']);
+        }
+        if (password == config.dev.demo_password) {
+            const token = await issueDevToken(payload.request, user, payload.context.system.config);
+            return { token, user_id: user };
+        }
+        else {
+            throw new micro.errors.AuthorizationError(['Authentication failed']);
+        }
+    }
+});
+const TokenParams = t.object({});
+export const token = (router) => router.post('/dev/token.json', {
+    validator: micro.schema.createTsCodecValidator(TokenParams, { allowAdditional: true }),
+    authorize: authDevUser,
+    handler: async (payload) => {
+        const { user_id } = payload.context;
+        const outToken = await issuePowerSyncToken(payload.request, user_id, payload.context.system.config);
+        return { token: outToken, user_id: user_id, endpoint: endpoint(payload.request) };
+    }
+});
+const OpType = {
+    PUT: 'PUT',
+    PATCH: 'PATCH',
+    DELETE: 'DELETE'
+};
+const CrudEntry = t.object({
+    op: t.Enum(OpType),
+    type: t.string,
+    id: t.string,
+    op_id: t.number.optional(),
+    data: t.any.optional()
+});
+const CrudRequest = t.object({
+    data: t.array(CrudEntry),
+    write_checkpoint: t.boolean.optional()
+});
+export const crud = (router) => router.post('/crud.json', {
+    validator: micro.schema.createTsCodecValidator(CrudRequest, { allowAdditional: true }),
+    authorize: authUser,
+    handler: async (payload) => {
+        const { user_id, system } = payload.context;
+        const pool = system.requirePgPool();
+        if (!system.config.dev.crud_api) {
+            throw new Error('CRUD api disabled');
+        }
+        const params = payload.params;
+        let statements = [];
+        // Implementation note:
+        // Postgres does automatic "assigment cast" for query literals,
+        // e.g. a string literal to uuid. However, the same doesn't apply
+        // to query parameters.
+        // To handle those automatically, we use `json_populate_record`
+        // to automatically cast to the correct types.
+        for (let op of params.data) {
+            const table = util.escapeIdentifier(op.type);
+            if (op.op == 'PUT') {
+                const data = op.data;
+                const with_id = { ...data, id: op.id };
+                const columnsEscaped = Object.keys(with_id).map(util.escapeIdentifier);
+                const columnsJoined = columnsEscaped.join(', ');
+                let updateClauses = [];
+                for (let key of Object.keys(data)) {
+                    updateClauses.push(`${util.escapeIdentifier(key)} = EXCLUDED.${util.escapeIdentifier(key)}`);
+                }
+                const updateClause = updateClauses.length > 0 ? `DO UPDATE SET ${updateClauses.join(', ')}` : `DO NOTHING`;
+                const statement = `
+          WITH data_row AS (
+              SELECT (json_populate_record(null::${table}, $1::json)).*
+          )
+          INSERT INTO ${table} (${columnsJoined})
+          SELECT ${columnsJoined} FROM data_row
+          ON CONFLICT(id) ${updateClause}`;
+                statements.push({
+                    statement: statement,
+                    params: [{ type: 'varchar', value: JSON.stringify(with_id) }]
+                });
+            }
+            else if (op.op == 'PATCH') {
+                const data = op.data;
+                const with_id = { ...data, id: op.id };
+                let updateClauses = [];
+                for (let key of Object.keys(data)) {
+                    updateClauses.push(`${util.escapeIdentifier(key)} = data_row.${util.escapeIdentifier(key)}`);
+                }
+                const statement = `
+          WITH data_row AS (
+              SELECT (json_populate_record(null::${table}, $1::json)).*
+          )
+          UPDATE ${table}
+          SET ${updateClauses.join(', ')}
+          FROM data_row
+          WHERE ${table}.id = data_row.id`;
+                statements.push({
+                    statement: statement,
+                    params: [{ type: 'varchar', value: JSON.stringify(with_id) }]
+                });
+            }
+            else if (op.op == 'DELETE') {
+                statements.push({
+                    statement: `
+          WITH data_row AS (
+            SELECT (json_populate_record(null::${table}, $1::json)).*
+          )
+          DELETE FROM ${table}
+          USING data_row
+          WHERE ${table}.id = data_row.id`,
+                    params: [{ type: 'varchar', value: JSON.stringify({ id: op.id }) }]
+                });
+            }
+        }
+        await pool.query(...statements);
+        const storage = system.storage;
+        if (payload.params.write_checkpoint === true) {
+            const write_checkpoint = await util.createWriteCheckpoint(pool, storage, payload.context.user_id);
+            return { write_checkpoint: String(write_checkpoint) };
+        }
+        else if (payload.params.write_checkpoint === false) {
+            return {};
+        }
+        else {
+            // Legacy
+            const checkpoint = await util.getClientCheckpoint(pool, storage);
+            return {
+                checkpoint
+            };
+        }
+    }
+});
+export const dev_routes = [auth, auth2, token, crud];
+//# sourceMappingURL=dev.js.map