@robono/server 0.15.0 → 0.17.0

package/dist/screening.js

@@ -0,0 +1,52 @@
+import { createHash } from 'node:crypto';
+import { RobonoError } from './errors.js';
+/** Server-only. Existing connected networks use their Robono Processing API key. */
+export class RobonoScreening {
+    options;
+    url;
+    constructor(options) {
+        this.options = options;
+        const u = new URL(options.baseUrl ?? 'https://api.robono.com/v1/screening');
+        if (u.protocol !== 'https:' || u.username || u.password || !options.apiKey.trim())
+            throw Error('Use HTTPS and a server API key.');
+        this.url = u.href;
+    }
+    async request(operation, body) {
+        const r = await (this.options.fetch ?? fetch)(this.url, { method: 'POST', redirect: 'error', signal: AbortSignal.timeout(30000), headers: { authorization: 'Bearer ' + this.options.apiKey, 'content-type': 'application/json' }, body: JSON.stringify({ ...body, operation }) });
+        const data = await r.json().catch(() => null);
+        if (!r.ok)
+            throw new RobonoError(data?.error?.message ?? 'Screening request failed.', { status: r.status, code: data?.error?.code ?? 'screening_unavailable', retryable: r.status === 429 || r.status >= 500 });
+        if (!data?.id || !['uploading', 'queued', 'processing', 'allowed', 'blocked', 'failed'].includes(data.state))
+            throw Error('Invalid screening response');
+        return data;
+    }
+    prepare(requestId, file) { return this.request('prepare', { requestId, file }); }
+    submit(id) { return this.request('submit', { id }); }
+    status(id) { return this.request('status', { id }); }
+    /** Upload exactly the bytes to be published. Returns a job; never treats pending as approved. */
+    async upload(requestId, file, bytes) {
+        if (file.byteSize !== bytes.byteLength)
+            throw Error('File size does not match the supplied bytes.');
+        const digest = createHash('sha256').update(bytes).digest('hex');
+        const prepared = await this.prepare(requestId, file);
+        if (prepared.sha256 && prepared.sha256 !== digest)
+            throw Error('This request ID belongs to different file contents.');
+        if (prepared.upload) {
+            const destination = new URL(prepared.upload.url);
+            if (destination.protocol !== 'https:' || destination.username || destination.password)
+                throw Error('Invalid private upload URL');
+            const r = await (this.options.fetch ?? fetch)(destination, { method: 'PUT', redirect: 'error', headers: prepared.upload.headers, body: bytes, signal: AbortSignal.timeout(120000) });
+            if (!r.ok && r.status !== 412)
+                throw new RobonoError('Screening upload failed.', { status: r.status, code: 'screening_upload_failed', retryable: true });
+        }
+        return this.submit(prepared.id);
+    }
+    /** Call this before releasing bytes stored by your own application. */
+    async assertAllowed(id, bytes) {
+        const result = await this.status(id);
+        if (result.state !== 'allowed' || !result.sha256 || createHash('sha256').update(bytes).digest('hex') !== result.sha256)
+            throw new RobonoError('This file has not been approved for delivery.', { status: 409, code: result.state === 'blocked' ? 'content_blocked' : 'screening_not_approved', retryable: result.state === 'queued' || result.state === 'processing' });
+        return result;
+    }
+}
+//# sourceMappingURL=screening.js.map

package/dist/screening.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"screening.js","sourceRoot":"","sources":["../src/screening.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,UAAU,EAAC,MAAM,aAAa,CAAC;AACvC,OAAO,EAAC,WAAW,EAAC,MAAM,aAAa,CAAC;AAGxC,oFAAoF;AACpF,MAAM,OAAO,eAAe;IAEP;IADZ,GAAG,CAAQ;IACnB,YAAoB,OAA2D;QAA3D,YAAO,GAAP,OAAO,CAAoD;QAC9E,MAAM,CAAC,GAAC,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,IAAE,qCAAqC,CAAC,CAAC;QACxE,IAAG,CAAC,CAAC,QAAQ,KAAG,QAAQ,IAAE,CAAC,CAAC,QAAQ,IAAE,CAAC,CAAC,QAAQ,IAAE,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE;YAAC,MAAM,KAAK,CAAC,iCAAiC,CAAC,CAAC;QAAA,IAAI,CAAC,GAAG,GAAC,CAAC,CAAC,IAAI,CAAC;IACzI,CAAC;IACO,KAAK,CAAC,OAAO,CAAC,SAAgB,EAAC,IAAW;QACjD,MAAM,CAAC,GAAC,MAAK,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,IAAE,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAC,EAAC,MAAM,EAAC,MAAM,EAAC,QAAQ,EAAC,OAAO,EAAC,MAAM,EAAC,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,EAAC,OAAO,EAAC,EAAC,aAAa,EAAC,SAAS,GAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAC,cAAc,EAAC,kBAAkB,EAAC,EAAC,IAAI,EAAC,IAAI,CAAC,SAAS,CAAC,EAAC,GAAG,IAAI,EAAC,SAAS,EAAC,CAAC,EAAC,CAAC,CAAC;QACvP,MAAM,IAAI,GAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAE,EAAE,CAAA,IAAI,CAAC,CAAC;QAC1C,IAAG,CAAC,CAAC,CAAC,EAAE;YAAC,MAAM,IAAI,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,IAAE,2BAA2B,EAAC,EAAC,MAAM,EAAC,CAAC,CAAC,MAAM,EAAC,IAAI,EAAC,IAAI,EAAE,KAAK,EAAE,IAAI,IAAE,uBAAuB,EAAC,SAAS,EAAC,CAAC,CAAC,MAAM,KAAG,GAAG,IAAE,CAAC,CAAC,MAAM,IAAE,GAAG,EAAC,CAAC,CAAC;QAC5L,IAAG,CAAC,IAAI,EAAE,EAAE,IAAE,CAAC,CAAC,WAAW,EAAC,QAAQ,EAAC,YAAY,EAAC,SAAS,EAAC,SAAS,EAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC;YAAC,MAAM,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAAA,OAAO,IAAI,CAAC;IAC5J,CAAC;IACD,OAAO,CAAC,SAAgB,EAAC,IAAkB,IAAE,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,EAAC,EAAC,SAAS,EAAC,IAAI,EAAC,CAAC,CAAC,CAAA,CAAC;IAC9F,MAAM,CAAC,EAAS,IAAE,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAC,EAAC,EAAE,EAAC,CAAC,CAAC,CAAA,CAAC;IACtD,MAAM,CAAC,EAAS,IAAE,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAC,EAAC,EAAE,EAAC,CAAC,CAAC,CAAA,CAAC;IACtD,iGAAiG;IACjG,KAAK,CAAC,MAAM,CAAC,SAAgB,EAAC,IAAkB,EAAC,KAAgB;QAChE,IAAG,IAAI,CAAC,QAAQ,KAAG,KAAK,CAAC,UAAU;YAAC,MAAM,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAChG,MAAM,MAAM,GAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC9D,MAAM,QAAQ,GAAC,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,EAAC,IAAI,CAAC,CAAC;QAClD,IAAG,QAAQ,CAAC,MAAM,IAAE,QAAQ,CAAC,MAAM,KAAG,MAAM;YAAC,MAAM,KAAK,CAAC,qDAAqD,CAAC,CAAC;QAChH,IAAG,QAAQ,CAAC,MAAM,EAAC,CAAC;YACnB,MAAM,WAAW,GAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAAA,IAAG,WAAW,CAAC,QAAQ,KAAG,QAAQ,IAAE,WAAW,CAAC,QAAQ,IAAE,WAAW,CAAC,QAAQ;gBAAC,MAAM,KAAK,CAAC,4BAA4B,CAAC,CAAC;YACxK,MAAM,CAAC,GAAC,MAAK,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,IAAE,KAAK,CAAC,CAAC,WAAW,EAAC,EAAC,MAAM,EAAC,KAAK,EAAC,QAAQ,EAAC,OAAO,EAAC,OAAO,EAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAC,IAAI,EAAC,KAAiB,EAAC,MAAM,EAAC,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,EAAC,CAAC,CAAC;YAChL,IAAG,CAAC,CAAC,CAAC,EAAE,IAAE,CAAC,CAAC,MAAM,KAAG,GAAG;gBAAC,MAAM,IAAI,WAAW,CAAC,0BAA0B,EAAC,EAAC,MAAM,EAAC,CAAC,CAAC,MAAM,EAAC,IAAI,EAAC,yBAAyB,EAAC,SAAS,EAAC,IAAI,EAAC,CAAC,CAAC;QAC5I,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACjC,CAAC;IACD,uEAAuE;IACvE,KAAK,CAAC,aAAa,CAAC,EAAS,EAAC,KAAgB;QAC7C,MAAM,MAAM,GAAC,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACnC,IAAG,MAAM,CAAC,KAAK,KAAG,SAAS,IAAE,CAAC,MAAM,CAAC,MAAM,IAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAG,MAAM,CAAC,MAAM;YAAC,MAAM,IAAI,WAAW,CAAC,+CAA+C,EAAC,EAAC,MAAM,EAAC,GAAG,EAAC,IAAI,EAAC,MAAM,CAAC,KAAK,KAAG,SAAS,CAAA,CAAC,CAAA,iBAAiB,CAAA,CAAC,CAAA,wBAAwB,EAAC,SAAS,EAAC,MAAM,CAAC,KAAK,KAAG,QAAQ,IAAE,MAAM,CAAC,KAAK,KAAG,YAAY,EAAC,CAAC,CAAC;QAC1U,OAAO,MAAM,CAAC;IACf,CAAC;CACD"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@robono/server",
-  "version": "0.15.0",
+  "version": "0.17.0",
   "description": "Provider-neutral server SDK for the Robono Bridge API.",
   "keywords": [
     "robono",
@@ -46,7 +46,10 @@
     "README.md",
     "CHANGELOG.md",
     "LICENSE",
-    "SBOM.spdx.json"
+    "SBOM.spdx.json",
+    "sql",
+    "NOTIFICATIONS.md",
+    "SCREENING.md"
   ],
   "scripts": {
     "build": "tsc -p tsconfig.json",

package/sql/messaging-notifications.sql

@@ -0,0 +1,41 @@
+-- Apply to the CUSTOMER'S PostgreSQL database with the server's database role.
+-- Do not expose this schema through a public/client database API.
+begin;
+create schema if not exists robono_notifications;
+revoke all on schema robono_notifications from public;
+create table if not exists robono_notifications.devices (
+ scope text not null,device_id text not null,user_id text not null,
+ provider text not null check(provider in ('apns','fcm')),token text not null,
+ updated_at timestamptz not null default now(),
+ token_hash bytea not null check(octet_length(token_hash)=32),
+ primary key(scope,device_id,user_id),unique(scope,provider,token_hash)
+);
+create table if not exists robono_notifications.jobs (
+ id bigint generated always as identity primary key,scope text not null,event_id text not null,
+ device_id text not null,user_id text not null,provider text not null,token text not null,event jsonb not null,
+ state text not null default 'pending' check(state in ('pending','running','sent','skipped','failed')),
+ attempt integer not null default 0,next_attempt_at timestamptz not null default now(),
+ lease text,lease_until timestamptz,last_code text,finished_at timestamptz,
+ unique(scope,event_id,device_id,user_id)
+);
+create index if not exists jobs_ready on robono_notifications.jobs(scope,state,next_attempt_at);
+alter table robono_notifications.devices enable row level security;
+alter table robono_notifications.jobs enable row level security;
+revoke all on all tables in schema robono_notifications from public;
+revoke all on all sequences in schema robono_notifications from public;
+
+create or replace function robono_notifications.register_device(s text,d text,u text,p text,t text)
+returns void language plpgsql set search_path=pg_catalog,robono_notifications as $$
+begin
+ perform pg_advisory_xact_lock(hashtextextended('robono-notification:'||s,0));
+ delete from robono_notifications.devices where scope=s and provider=p and token=t and (device_id<>d or user_id<>u);
+ insert into robono_notifications.devices(scope,device_id,user_id,provider,token,token_hash)
+ values(s,d,u,p,t,sha256(convert_to(t,'UTF8'))) on conflict(scope,device_id,user_id) do update set provider=p,token=t,token_hash=excluded.token_hash,updated_at=now();
+end $$;
+revoke all on function robono_notifications.register_device(text,text,text,text,text) from public;
+commit;
+
+-- Retain completed job identities for seven days to deduplicate delivery retries.
+-- Schedule this cleanup daily with the same private server role:
+-- delete from robono_notifications.jobs where finished_at < now()-interval '7 days';
+-- delete from robono_notifications.devices where updated_at < now()-interval '90 days';