@stratum-hq/control-plane 0.1.0

package/dist/__tests__/test-helpers.js

@@ -0,0 +1,172 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SAMPLE_CHILD_TENANT = exports.SAMPLE_TENANT = exports.setupWriteApiKey = exports.setupReadOnlyApiKey = exports.setupAdminApiKey = exports.jwtHeaders = exports.authHeaders = exports.buildTestApp = exports.createMockStratum = exports.TEST_JWT_SECRET = void 0;
+const fastify_1 = __importDefault(require("fastify"));
+const vitest_1 = require("vitest");
+const jsonwebtoken_1 = __importDefault(require("jsonwebtoken"));
+const error_handler_js_1 = require("../middleware/error-handler.js");
+const auth_js_1 = require("../middleware/auth.js");
+const authorize_js_1 = require("../middleware/authorize.js");
+const health_js_1 = require("../routes/health.js");
+const tenants_js_1 = require("../routes/tenants.js");
+const config_js_1 = require("../routes/config.js");
+const api_keys_js_1 = require("../routes/api-keys.js");
+// The JWT secret used in dev mode (from config.ts fallback)
+exports.TEST_JWT_SECRET = "dev-secret-change-in-production";
+/**
+ * Create a mock Stratum instance with all methods stubbed via vi.fn().
+ * Tests override individual method implementations as needed.
+ */
+function createMockStratum() {
+    return {
+        // Tenant methods
+        createTenant: vitest_1.vi.fn(),
+        getTenant: vitest_1.vi.fn(),
+        listTenants: vitest_1.vi.fn(),
+        updateTenant: vitest_1.vi.fn(),
+        deleteTenant: vitest_1.vi.fn(),
+        batchCreateTenants: vitest_1.vi.fn(),
+        moveTenant: vitest_1.vi.fn(),
+        getAncestors: vitest_1.vi.fn(),
+        getDescendants: vitest_1.vi.fn(),
+        getChildren: vitest_1.vi.fn(),
+        purgeTenant: vitest_1.vi.fn(),
+        exportTenantData: vitest_1.vi.fn(),
+        migrateRegion: vitest_1.vi.fn(),
+        // Config methods
+        resolveConfig: vitest_1.vi.fn(),
+        setConfig: vitest_1.vi.fn(),
+        deleteConfig: vitest_1.vi.fn(),
+        batchSetConfig: vitest_1.vi.fn(),
+        getConfigWithInheritance: vitest_1.vi.fn(),
+        // Permission methods
+        resolvePermissions: vitest_1.vi.fn(),
+        // API key methods
+        createApiKey: vitest_1.vi.fn(),
+        validateApiKey: vitest_1.vi.fn(),
+        revokeApiKey: vitest_1.vi.fn(),
+        rotateApiKey: vitest_1.vi.fn(),
+        listApiKeys: vitest_1.vi.fn(),
+        listDormantKeys: vitest_1.vi.fn(),
+    };
+}
+exports.createMockStratum = createMockStratum;
+/**
+ * Build a test Fastify app with routes registered and middleware wired up.
+ * Uses the provided mock Stratum instance.
+ *
+ * We skip OpenAPI/swagger, helmet, cors, and rate-limit plugins to keep tests fast
+ * and focused on the HTTP/route/middleware layer.
+ */
+async function buildTestApp(stratum) {
+    const app = (0, fastify_1.default)({ logger: false });
+    // Wire up the same middleware chain as the real app
+    app.addHook("preHandler", (0, auth_js_1.createAuthMiddleware)(stratum));
+    app.addHook("preHandler", (0, authorize_js_1.createAuthorizeMiddleware)());
+    app.setErrorHandler(error_handler_js_1.errorHandler);
+    // Register routes (pass a stub Redis health checker — Redis is not used in tests)
+    const noopRedisHealth = async () => "not_configured";
+    await app.register((0, health_js_1.healthRoutes)(noopRedisHealth));
+    await app.register((0, tenants_js_1.createTenantRoutes)(stratum), { prefix: "/api/v1/tenants" });
+    await app.register((0, config_js_1.createConfigRoutes)(stratum), { prefix: "/api/v1/tenants/:id/config" });
+    await app.register((0, api_keys_js_1.createApiKeyRoutes)(stratum), { prefix: "/api/v1/api-keys" });
+    await app.ready();
+    return app;
+}
+exports.buildTestApp = buildTestApp;
+/**
+ * Helper: returns headers object with a valid API key authentication.
+ * The mock stratum.validateApiKey must be configured to accept this key.
+ */
+function authHeaders(apiKey = "sk_test_valid_key") {
+    return { "x-api-key": apiKey };
+}
+exports.authHeaders = authHeaders;
+/**
+ * Helper: returns headers object with a valid JWT Bearer token.
+ */
+function jwtHeaders(payload = {}, secret = exports.TEST_JWT_SECRET) {
+    const token = jsonwebtoken_1.default.sign({
+        sub: "test-user-id",
+        scopes: ["read", "write", "admin"],
+        ...payload,
+    }, secret, { algorithm: "HS256", expiresIn: "1h" });
+    return { authorization: `Bearer ${token}` };
+}
+exports.jwtHeaders = jwtHeaders;
+/**
+ * Configure the mock stratum to accept the default test API key
+ * with admin scopes (read + write + admin). This is the common case.
+ */
+function setupAdminApiKey(stratum) {
+    stratum.validateApiKey.mockResolvedValue({
+        key_id: "test-key-id",
+        tenant_id: null,
+        scopes: ["read", "write", "admin"],
+        rate_limit_max: null,
+        rate_limit_window: null,
+    });
+}
+exports.setupAdminApiKey = setupAdminApiKey;
+/**
+ * Configure the mock stratum to accept the default test API key
+ * with read-only scope.
+ */
+function setupReadOnlyApiKey(stratum) {
+    stratum.validateApiKey.mockResolvedValue({
+        key_id: "test-key-id-readonly",
+        tenant_id: null,
+        scopes: ["read"],
+        rate_limit_max: null,
+        rate_limit_window: null,
+    });
+}
+exports.setupReadOnlyApiKey = setupReadOnlyApiKey;
+/**
+ * Configure the mock stratum to accept the default test API key
+ * with write scope (read + write but not admin).
+ */
+function setupWriteApiKey(stratum) {
+    stratum.validateApiKey.mockResolvedValue({
+        key_id: "test-key-id-write",
+        tenant_id: null,
+        scopes: ["read", "write"],
+        rate_limit_max: null,
+        rate_limit_window: null,
+    });
+}
+exports.setupWriteApiKey = setupWriteApiKey;
+/** A sample tenant object for test assertions */
+exports.SAMPLE_TENANT = {
+    id: "t-uuid-1",
+    slug: "acme-corp",
+    name: "Acme Corp",
+    parent_id: null,
+    ancestry_path: "/t-uuid-1",
+    depth: 0,
+    metadata: {},
+    isolation_strategy: "SHARED_RLS",
+    region_id: null,
+    created_at: new Date("2025-01-01").toISOString(),
+    updated_at: new Date("2025-01-01").toISOString(),
+    deleted_at: null,
+};
+/** A second sample tenant (child) */
+exports.SAMPLE_CHILD_TENANT = {
+    id: "t-uuid-2",
+    slug: "acme-division",
+    name: "Acme Division",
+    parent_id: "t-uuid-1",
+    ancestry_path: "/t-uuid-1/t-uuid-2",
+    depth: 1,
+    metadata: {},
+    isolation_strategy: "SHARED_RLS",
+    region_id: null,
+    created_at: new Date("2025-01-02").toISOString(),
+    updated_at: new Date("2025-01-02").toISOString(),
+    deleted_at: null,
+};
+//# sourceMappingURL=test-helpers.js.map

package/dist/__tests__/test-helpers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"test-helpers.js","sourceRoot":"","sources":["../../src/__tests__/test-helpers.ts"],"names":[],"mappings":";;;;;;AAAA,sDAAmD;AACnD,mCAA4B;AAC5B,gEAA+B;AAC/B,qEAA8D;AAC9D,mDAA6D;AAC7D,6DAAuE;AACvE,mDAAmD;AACnD,qDAA0D;AAC1D,mDAAyD;AACzD,uDAA2D;AAG3D,4DAA4D;AAC/C,QAAA,eAAe,GAAG,iCAAiC,CAAC;AAEjE;;;GAGG;AACH,SAAgB,iBAAiB;IAC/B,OAAO;QACL,iBAAiB;QACjB,YAAY,EAAE,WAAE,CAAC,EAAE,EAAE;QACrB,SAAS,EAAE,WAAE,CAAC,EAAE,EAAE;QAClB,WAAW,EAAE,WAAE,CAAC,EAAE,EAAE;QACpB,YAAY,EAAE,WAAE,CAAC,EAAE,EAAE;QACrB,YAAY,EAAE,WAAE,CAAC,EAAE,EAAE;QACrB,kBAAkB,EAAE,WAAE,CAAC,EAAE,EAAE;QAC3B,UAAU,EAAE,WAAE,CAAC,EAAE,EAAE;QACnB,YAAY,EAAE,WAAE,CAAC,EAAE,EAAE;QACrB,cAAc,EAAE,WAAE,CAAC,EAAE,EAAE;QACvB,WAAW,EAAE,WAAE,CAAC,EAAE,EAAE;QACpB,WAAW,EAAE,WAAE,CAAC,EAAE,EAAE;QACpB,gBAAgB,EAAE,WAAE,CAAC,EAAE,EAAE;QACzB,aAAa,EAAE,WAAE,CAAC,EAAE,EAAE;QAEtB,iBAAiB;QACjB,aAAa,EAAE,WAAE,CAAC,EAAE,EAAE;QACtB,SAAS,EAAE,WAAE,CAAC,EAAE,EAAE;QAClB,YAAY,EAAE,WAAE,CAAC,EAAE,EAAE;QACrB,cAAc,EAAE,WAAE,CAAC,EAAE,EAAE;QACvB,wBAAwB,EAAE,WAAE,CAAC,EAAE,EAAE;QAEjC,qBAAqB;QACrB,kBAAkB,EAAE,WAAE,CAAC,EAAE,EAAE;QAE3B,kBAAkB;QAClB,YAAY,EAAE,WAAE,CAAC,EAAE,EAAE;QACrB,cAAc,EAAE,WAAE,CAAC,EAAE,EAAE;QACvB,YAAY,EAAE,WAAE,CAAC,EAAE,EAAE;QACrB,YAAY,EAAE,WAAE,CAAC,EAAE,EAAE;QACrB,WAAW,EAAE,WAAE,CAAC,EAAE,EAAE;QACpB,eAAe,EAAE,WAAE,CAAC,EAAE,EAAE;KACH,CAAC;AAC1B,CAAC;AAnCD,8CAmCC;AAED;;;;;;GAMG;AACI,KAAK,UAAU,YAAY,CAAC,OAAgB;IACjD,MAAM,GAAG,GAAG,IAAA,iBAAO,EAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IAEvC,oDAAoD;IACpD,GAAG,CAAC,OAAO,CAAC,YAAY,EAAE,IAAA,8BAAoB,EAAC,OAAO,CAAC,CAAC,CAAC;IACzD,GAAG,CAAC,OAAO,CAAC,YAAY,EAAE,IAAA,wCAAyB,GAAE,CAAC,CAAC;IACvD,GAAG,CAAC,eAAe,CAAC,+BAAY,CAAC,CAAC;IAElC,kFAAkF;IAClF,MAAM,eAAe,GAAG,KAAK,IAAI,EAAE,CAAC,gBAAyB,CAAC;IAC9D,MAAM,GAAG,CAAC,QAAQ,CAAC,IAAA,wBAAY,EAAC,eAAe,CAAC,CAAC,CAAC;IAClD,MAAM,GAAG,CAAC,QAAQ,CAAC,IAAA,+BAAkB,EAAC,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAC;IAC/E,MAAM,GAAG,CAAC,QAAQ,CAAC,IAAA,8BAAkB,EAAC,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC,CAAC;IAC1F,MAAM,GAAG,CAAC,QAAQ,CAAC,IAAA,gCAAkB,EAAC,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAC;IAEhF,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;IAClB,OAAO,GAAG,CAAC;AACb,CAAC;AAjBD,oCAiBC;AAED;;;GAGG;AACH,SAAgB,WAAW,CAAC,SAAiB,mBAAmB;IAC9D,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC;AACjC,CAAC;AAFD,kCAEC;AAED;;GAEG;AACH,SAAgB,UAAU,CACxB,UAAmC,EAAE,EACrC,SAAiB,uBAAe;IAEhC,MAAM,KAAK,GAAG,sBAAG,CAAC,IAAI,CACpB;QACE,GAAG,EAAE,cAAc;QACnB,MAAM,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC;QAClC,GAAG,OAAO;KACX,EACD,MAAM,EACN,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CACxC,CAAC;IACF,OAAO,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,CAAC;AAC9C,CAAC;AAdD,gCAcC;AAED;;;GAGG;AACH,SAAgB,gBAAgB,CAAC,OAAgB;IAC9C,OAAO,CAAC,cAA2C,CAAC,iBAAiB,CAAC;QACrE,MAAM,EAAE,aAAa;QACrB,SAAS,EAAE,IAAI;QACf,MAAM,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC;QAClC,cAAc,EAAE,IAAI;QACpB,iBAAiB,EAAE,IAAI;KACxB,CAAC,CAAC;AACL,CAAC;AARD,4CAQC;AAED;;;GAGG;AACH,SAAgB,mBAAmB,CAAC,OAAgB;IACjD,OAAO,CAAC,cAA2C,CAAC,iBAAiB,CAAC;QACrE,MAAM,EAAE,sBAAsB;QAC9B,SAAS,EAAE,IAAI;QACf,MAAM,EAAE,CAAC,MAAM,CAAC;QAChB,cAAc,EAAE,IAAI;QACpB,iBAAiB,EAAE,IAAI;KACxB,CAAC,CAAC;AACL,CAAC;AARD,kDAQC;AAED;;;GAGG;AACH,SAAgB,gBAAgB,CAAC,OAAgB;IAC9C,OAAO,CAAC,cAA2C,CAAC,iBAAiB,CAAC;QACrE,MAAM,EAAE,mBAAmB;QAC3B,SAAS,EAAE,IAAI;QACf,MAAM,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC;QACzB,cAAc,EAAE,IAAI;QACpB,iBAAiB,EAAE,IAAI;KACxB,CAAC,CAAC;AACL,CAAC;AARD,4CAQC;AAED,iDAAiD;AACpC,QAAA,aAAa,GAAG;IAC3B,EAAE,EAAE,UAAU;IACd,IAAI,EAAE,WAAW;IACjB,IAAI,EAAE,WAAW;IACjB,SAAS,EAAE,IAAI;IACf,aAAa,EAAE,WAAW;IAC1B,KAAK,EAAE,CAAC;IACR,QAAQ,EAAE,EAAE;IACZ,kBAAkB,EAAE,YAAY;IAChC,SAAS,EAAE,IAAI;IACf,UAAU,EAAE,IAAI,IAAI,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE;IAChD,UAAU,EAAE,IAAI,IAAI,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE;IAChD,UAAU,EAAE,IAAI;CACjB,CAAC;AAEF,qCAAqC;AACxB,QAAA,mBAAmB,GAAG;IACjC,EAAE,EAAE,UAAU;IACd,IAAI,EAAE,eAAe;IACrB,IAAI,EAAE,eAAe;IACrB,SAAS,EAAE,UAAU;IACrB,aAAa,EAAE,oBAAoB;IACnC,KAAK,EAAE,CAAC;IACR,QAAQ,EAAE,EAAE;IACZ,kBAAkB,EAAE,YAAY;IAChC,SAAS,EAAE,IAAI;IACf,UAAU,EAAE,IAAI,IAAI,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE;IAChD,UAAU,EAAE,IAAI,IAAI,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE;IAChD,UAAU,EAAE,IAAI;CACjB,CAAC"}

package/dist/app.d.ts

@@ -0,0 +1,3 @@
+import { FastifyInstance } from "fastify";
+export declare function buildApp(): Promise<FastifyInstance>;
+//# sourceMappingURL=app.d.ts.map

package/dist/app.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../src/app.ts"],"names":[],"mappings":"AACA,OAAgB,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AA0CnD,wBAAsB,QAAQ,IAAI,OAAO,CAAC,eAAe,CAAC,CAyEzD"}

package/dist/app.js

@@ -0,0 +1,114 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildApp = void 0;
+const node_crypto_1 = __importDefault(require("node:crypto"));
+const fastify_1 = __importDefault(require("fastify"));
+const cors_1 = __importDefault(require("@fastify/cors"));
+const rate_limit_1 = __importDefault(require("@fastify/rate-limit"));
+const helmet_1 = __importDefault(require("@fastify/helmet"));
+const lib_1 = require("@stratum-hq/lib");
+const openapi_js_1 = require("./openapi.js");
+const error_handler_js_1 = require("./middleware/error-handler.js");
+const auth_js_1 = require("./middleware/auth.js");
+const authorize_js_1 = require("./middleware/authorize.js");
+const per_key_rate_limit_js_1 = require("./middleware/per-key-rate-limit.js");
+const rate_limit_redis_js_1 = require("./middleware/rate-limit-redis.js");
+const redis_js_1 = require("./redis.js");
+const health_js_1 = require("./routes/health.js");
+const tenants_js_1 = require("./routes/tenants.js");
+const config_js_1 = require("./routes/config.js");
+const permissions_js_1 = require("./routes/permissions.js");
+const api_keys_js_1 = require("./routes/api-keys.js");
+const webhooks_js_1 = require("./routes/webhooks.js");
+const audit_logs_js_1 = require("./routes/audit-logs.js");
+const consent_js_1 = require("./routes/consent.js");
+const maintenance_js_1 = require("./routes/maintenance.js");
+const regions_js_1 = require("./routes/regions.js");
+const roles_js_1 = require("./routes/roles.js");
+const config_diff_js_1 = require("./routes/config-diff.js");
+const telemetry_js_1 = require("./middleware/telemetry.js");
+const config_js_2 = require("./config.js");
+const connection_js_1 = require("./db/connection.js");
+/** Parse a duration string like "1 minute" into milliseconds. */
+function parseWindowForApp(window) {
+    const match = window.match(/^(\d+)\s*(second|minute|hour|day)s?$/i);
+    if (!match)
+        return 60_000;
+    const value = parseInt(match[1], 10);
+    switch (match[2].toLowerCase()) {
+        case "second": return value * 1_000;
+        case "minute": return value * 60_000;
+        case "hour": return value * 3_600_000;
+        case "day": return value * 86_400_000;
+        default: return 60_000;
+    }
+}
+async function buildApp() {
+    const app = (0, fastify_1.default)({
+        logger: {
+            level: config_js_2.config.nodeEnv === "production" ? "info" : "debug",
+            redact: ["req.headers.authorization", "req.headers['x-api-key']"],
+        },
+        genReqId: () => node_crypto_1.default.randomUUID(),
+    });
+    const stratum = new lib_1.Stratum({
+        pool: (0, connection_js_1.getPool)(),
+        keyPrefix: config_js_2.config.nodeEnv === "production" ? "sk_live_" : "sk_test_",
+    });
+    await app.register(helmet_1.default, {
+        contentSecurityPolicy: {
+            directives: {
+                defaultSrc: ["'self'"],
+                scriptSrc: ["'self'", "'unsafe-inline'"],
+                styleSrc: ["'self'", "'unsafe-inline'"],
+                imgSrc: ["'self'", "data:", "https://fastify.dev"],
+            },
+        },
+    });
+    await app.register(cors_1.default, {
+        origin: config_js_2.config.allowedOrigins,
+        credentials: true,
+    });
+    await app.register(rate_limit_1.default, {
+        max: config_js_2.config.rateLimitMax,
+        timeWindow: config_js_2.config.rateLimitWindow,
+    });
+    // OpenTelemetry request tracing (no-op if @opentelemetry/api is absent)
+    (0, telemetry_js_1.registerTelemetryHooks)(app);
+    await (0, openapi_js_1.registerOpenApi)(app);
+    app.addHook("preHandler", (0, auth_js_1.createAuthMiddleware)(stratum));
+    app.addHook("preHandler", (0, authorize_js_1.createAuthorizeMiddleware)());
+    // Use Redis-backed rate limiting when REDIS_URL is configured, otherwise in-memory
+    const redisClient = (0, redis_js_1.createRedisClient)();
+    if (redisClient) {
+        const windowMs = parseWindowForApp(config_js_2.config.rateLimitWindow);
+        app.addHook("preHandler", (0, rate_limit_redis_js_1.createRedisRateLimiter)(redisClient, {
+            maxRequests: config_js_2.config.rateLimitMax,
+            windowMs,
+        }));
+        app.log.info("Per-key rate limiting: Redis-backed (REDIS_URL configured)");
+    }
+    else {
+        app.addHook("preHandler", (0, per_key_rate_limit_js_1.createPerKeyRateLimitMiddleware)());
+        app.log.info("Per-key rate limiting: in-memory (no REDIS_URL)");
+    }
+    app.setErrorHandler(error_handler_js_1.errorHandler);
+    await app.register((0, health_js_1.healthRoutes)(redis_js_1.checkRedisHealth));
+    await app.register((0, tenants_js_1.createTenantRoutes)(stratum), { prefix: "/api/v1/tenants" });
+    await app.register((0, config_js_1.createConfigRoutes)(stratum), { prefix: "/api/v1/tenants/:id/config" });
+    await app.register((0, permissions_js_1.createPermissionRoutes)(stratum), { prefix: "/api/v1/tenants/:id/permissions" });
+    await app.register((0, api_keys_js_1.createApiKeyRoutes)(stratum), { prefix: "/api/v1/api-keys" });
+    await app.register((0, webhooks_js_1.createWebhookRoutes)(stratum), { prefix: "/api/v1/webhooks" });
+    await app.register((0, audit_logs_js_1.createAuditLogRoutes)(stratum), { prefix: "/api/v1/audit-logs" });
+    await app.register((0, consent_js_1.createConsentRoutes)(stratum), { prefix: "/api/v1/tenants/:tenantId/consent" });
+    await app.register((0, regions_js_1.createRegionRoutes)(stratum), { prefix: "/api/v1/regions" });
+    await app.register((0, roles_js_1.createRoleRoutes)(stratum), { prefix: "/api/v1/roles" });
+    await app.register((0, maintenance_js_1.createMaintenanceRoutes)(stratum), { prefix: "/api/v1/maintenance" });
+    await app.register((0, config_diff_js_1.createConfigDiffRoutes)(stratum), { prefix: "/api/v1/config" });
+    return app;
+}
+exports.buildApp = buildApp;
+//# sourceMappingURL=app.js.map

package/dist/app.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.js","sourceRoot":"","sources":["../src/app.ts"],"names":[],"mappings":";;;;;;AAAA,8DAAiC;AACjC,sDAAmD;AACnD,yDAAiC;AACjC,qEAA4C;AAC5C,6DAAqC;AACrC,yCAA0C;AAC1C,6CAA+C;AAC/C,oEAA6D;AAC7D,kDAA4D;AAC5D,4DAAsE;AACtE,8EAAqF;AACrF,0EAA0E;AAC1E,yCAAiE;AACjE,kDAAkD;AAClD,oDAAyD;AACzD,kDAAwD;AACxD,4DAAiE;AACjE,sDAA0D;AAC1D,sDAA2D;AAC3D,0DAA8D;AAC9D,oDAA0D;AAC1D,4DAAkE;AAClE,oDAAyD;AACzD,gDAAqD;AACrD,4DAAiE;AACjE,4DAAmE;AACnE,2CAAqC;AACrC,sDAA6C;AAE7C,iEAAiE;AACjE,SAAS,iBAAiB,CAAC,MAAc;IACvC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;IACpE,IAAI,CAAC,KAAK;QAAE,OAAO,MAAM,CAAC;IAC1B,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACrC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;QAC/B,KAAK,QAAQ,CAAC,CAAC,OAAO,KAAK,GAAG,KAAK,CAAC;QACpC,KAAK,QAAQ,CAAC,CAAC,OAAO,KAAK,GAAG,MAAM,CAAC;QACrC,KAAK,MAAM,CAAC,CAAG,OAAO,KAAK,GAAG,SAAS,CAAC;QACxC,KAAK,KAAK,CAAC,CAAI,OAAO,KAAK,GAAG,UAAU,CAAC;QACzC,OAAO,CAAC,CAAO,OAAO,MAAM,CAAC;IAC/B,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,QAAQ;IAC5B,MAAM,GAAG,GAAG,IAAA,iBAAO,EAAC;QAClB,MAAM,EAAE;YACN,KAAK,EAAE,kBAAM,CAAC,OAAO,KAAK,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO;YACzD,MAAM,EAAE,CAAC,2BAA2B,EAAE,0BAA0B,CAAC;SAClE;QACD,QAAQ,EAAE,GAAG,EAAE,CAAC,qBAAM,CAAC,UAAU,EAAE;KACpC,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,IAAI,aAAO,CAAC;QAC1B,IAAI,EAAE,IAAA,uBAAO,GAAE;QACf,SAAS,EAAE,kBAAM,CAAC,OAAO,KAAK,YAAY,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU;KACrE,CAAC,CAAC;IAEH,MAAM,GAAG,CAAC,QAAQ,CAAC,gBAAa,EAAE;QAChC,qBAAqB,EAAE;YACrB,UAAU,EAAE;gBACV,UAAU,EAAE,CAAC,QAAQ,CAAC;gBACtB,SAAS,EAAE,CAAC,QAAQ,EAAE,iBAAiB,CAAC;gBACxC,QAAQ,EAAE,CAAC,QAAQ,EAAE,iBAAiB,CAAC;gBACvC,MAAM,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,qBAAqB,CAAC;aACnD;SACF;KACF,CAAC,CAAC;IACH,MAAM,GAAG,CAAC,QAAQ,CAAC,cAAW,EAAE;QAC9B,MAAM,EAAE,kBAAM,CAAC,cAAc;QAC7B,WAAW,EAAE,IAAI;KAClB,CAAC,CAAC;IACH,MAAM,GAAG,CAAC,QAAQ,CAAC,oBAAgB,EAAE;QACnC,GAAG,EAAE,kBAAM,CAAC,YAAY;QACxB,UAAU,EAAE,kBAAM,CAAC,eAAe;KACnC,CAAC,CAAC;IAEH,wEAAwE;IACxE,IAAA,qCAAsB,EAAC,GAAG,CAAC,CAAC;IAE5B,MAAM,IAAA,4BAAe,EAAC,GAAG,CAAC,CAAC;IAC3B,GAAG,CAAC,OAAO,CAAC,YAAY,EAAE,IAAA,8BAAoB,EAAC,OAAO,CAAC,CAAC,CAAC;IACzD,GAAG,CAAC,OAAO,CAAC,YAAY,EAAE,IAAA,wCAAyB,GAAE,CAAC,CAAC;IAEvD,mFAAmF;IACnF,MAAM,WAAW,GAAG,IAAA,4BAAiB,GAAE,CAAC;IACxC,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,QAAQ,GAAG,iBAAiB,CAAC,kBAAM,CAAC,eAAe,CAAC,CAAC;QAC3D,GAAG,CAAC,OAAO,CACT,YAAY,EACZ,IAAA,4CAAsB,EAAC,WAAW,EAAE;YAClC,WAAW,EAAE,kBAAM,CAAC,YAAY;YAChC,QAAQ;SACT,CAAC,CACH,CAAC;QACF,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAC;IAC7E,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,OAAO,CAAC,YAAY,EAAE,IAAA,uDAA+B,GAAE,CAAC,CAAC;QAC7D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,iDAAiD,CAAC,CAAC;IAClE,CAAC;IAED,GAAG,CAAC,eAAe,CAAC,+BAAY,CAAC,CAAC;IAElC,MAAM,GAAG,CAAC,QAAQ,CAAC,IAAA,wBAAY,EAAC,2BAAgB,CAAC,CAAC,CAAC;IACnD,MAAM,GAAG,CAAC,QAAQ,CAAC,IAAA,+BAAkB,EAAC,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAC;IAC/E,MAAM,GAAG,CAAC,QAAQ,CAAC,IAAA,8BAAkB,EAAC,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC,CAAC;IAC1F,MAAM,GAAG,CAAC,QAAQ,CAAC,IAAA,uCAAsB,EAAC,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,iCAAiC,EAAE,CAAC,CAAC;IACnG,MAAM,GAAG,CAAC,QAAQ,CAAC,IAAA,gCAAkB,EAAC,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAC;IAChF,MAAM,GAAG,CAAC,QAAQ,CAAC,IAAA,iCAAmB,EAAC,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAC;IACjF,MAAM,GAAG,CAAC,QAAQ,CAAC,IAAA,oCAAoB,EAAC,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC,CAAC;IACpF,MAAM,GAAG,CAAC,QAAQ,CAAC,IAAA,gCAAmB,EAAC,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,mCAAmC,EAAE,CAAC,CAAC;IAClG,MAAM,GAAG,CAAC,QAAQ,CAAC,IAAA,+BAAkB,EAAC,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAC;IAC/E,MAAM,GAAG,CAAC,QAAQ,CAAC,IAAA,2BAAgB,EAAC,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC;IAC3E,MAAM,GAAG,CAAC,QAAQ,CAAC,IAAA,wCAAuB,EAAC,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC,CAAC;IACxF,MAAM,GAAG,CAAC,QAAQ,CAAC,IAAA,uCAAsB,EAAC,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC;IAElF,OAAO,GAAG,CAAC;AACb,CAAC;AAzED,4BAyEC"}

package/dist/config.d.ts

@@ -0,0 +1,11 @@
+export declare const config: {
+    port: number;
+    databaseUrl: string;
+    nodeEnv: string;
+    jwtSecret: string;
+    allowedOrigins: string[];
+    rateLimitMax: number;
+    rateLimitWindow: string;
+    redisUrl: string | undefined;
+};
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAWA,eAAO,MAAM,MAAM;;;;;;;;;CAWlB,CAAC"}

package/dist/config.js

@@ -0,0 +1,26 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.config = void 0;
+const jwtSecretEnv = process.env.JWT_SECRET;
+const nodeEnv = process.env.NODE_ENV || "development";
+if (!jwtSecretEnv) {
+    if (nodeEnv === "production") {
+        throw new Error("FATAL: JWT_SECRET must be set in production. Refusing to start.");
+    }
+    else {
+        console.warn("[stratum] JWT_SECRET not set — using dev fallback. Set JWT_SECRET before deploying to production.");
+    }
+}
+exports.config = {
+    port: parseInt(process.env.PORT || "3001"),
+    databaseUrl: process.env.DATABASE_URL || "postgres://stratum:stratum_dev@localhost:5432/stratum",
+    nodeEnv,
+    jwtSecret: jwtSecretEnv || "dev-secret-change-in-production",
+    allowedOrigins: process.env.ALLOWED_ORIGINS
+        ? process.env.ALLOWED_ORIGINS.split(",").map((o) => o.trim())
+        : ["http://localhost:3000", "http://localhost:3300"],
+    rateLimitMax: parseInt(process.env.RATE_LIMIT_MAX || "100"),
+    rateLimitWindow: process.env.RATE_LIMIT_WINDOW || "1 minute",
+    redisUrl: process.env.REDIS_URL || undefined,
+};
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":";;;AAAA,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;AAC5C,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,aAAa,CAAC;AAEtD,IAAI,CAAC,YAAY,EAAE,CAAC;IAClB,IAAI,OAAO,KAAK,YAAY,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;IACrF,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,IAAI,CAAC,mGAAmG,CAAC,CAAC;IACpH,CAAC;AACH,CAAC;AAEY,QAAA,MAAM,GAAG;IACpB,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,MAAM,CAAC;IAC1C,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,uDAAuD;IAChG,OAAO;IACP,SAAS,EAAE,YAAY,IAAI,iCAAiC;IAC5D,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe;QACzC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7D,CAAC,CAAC,CAAC,uBAAuB,EAAE,uBAAuB,CAAC;IACtD,YAAY,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,KAAK,CAAC;IAC3D,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,UAAU;IAC5D,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,SAAS;CAC7C,CAAC"}

package/dist/db/connection.d.ts

@@ -0,0 +1,4 @@
+import pg from "pg";
+export declare function getPool(): pg.Pool;
+export declare function closePool(): Promise<void>;
+//# sourceMappingURL=connection.d.ts.map

package/dist/db/connection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connection.d.ts","sourceRoot":"","sources":["../../src/db/connection.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,CAAC;AAMpB,wBAAgB,OAAO,IAAI,EAAE,CAAC,IAAI,CAYjC;AAED,wBAAsB,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,CAK/C"}

package/dist/db/connection.js

@@ -0,0 +1,30 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.closePool = exports.getPool = void 0;
+const pg_1 = __importDefault(require("pg"));
+const { Pool } = pg_1.default;
+let pool = null;
+function getPool() {
+    if (!pool) {
+        pool = new Pool({
+            connectionString: process.env.DATABASE_URL ||
+                "postgres://stratum:stratum_dev@localhost:5432/stratum",
+            max: 20,
+            idleTimeoutMillis: 30000,
+            connectionTimeoutMillis: 5000,
+        });
+    }
+    return pool;
+}
+exports.getPool = getPool;
+async function closePool() {
+    if (pool) {
+        await pool.end();
+        pool = null;
+    }
+}
+exports.closePool = closePool;
+//# sourceMappingURL=connection.js.map

package/dist/db/connection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connection.js","sourceRoot":"","sources":["../../src/db/connection.ts"],"names":[],"mappings":";;;;;;AAAA,4CAAoB;AAEpB,MAAM,EAAE,IAAI,EAAE,GAAG,YAAE,CAAC;AAEpB,IAAI,IAAI,GAAmB,IAAI,CAAC;AAEhC,SAAgB,OAAO;IACrB,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,IAAI,GAAG,IAAI,IAAI,CAAC;YACd,gBAAgB,EACd,OAAO,CAAC,GAAG,CAAC,YAAY;gBACxB,uDAAuD;YACzD,GAAG,EAAE,EAAE;YACP,iBAAiB,EAAE,KAAK;YACxB,uBAAuB,EAAE,IAAI;SAC9B,CAAC,CAAC;IACL,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAZD,0BAYC;AAEM,KAAK,UAAU,SAAS;IAC7B,IAAI,IAAI,EAAE,CAAC;QACT,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC;QACjB,IAAI,GAAG,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AALD,8BAKC"}

package/dist/db/migrate.d.ts

@@ -0,0 +1,3 @@
+declare function migrate(): Promise<void>;
+export { migrate };
+//# sourceMappingURL=migrate.d.ts.map

package/dist/db/migrate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrate.d.ts","sourceRoot":"","sources":["../../src/db/migrate.ts"],"names":[],"mappings":"AAIA,iBAAe,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAmDtC;AAED,OAAO,EAAE,OAAO,EAAE,CAAC"}

package/dist/db/migrate.js

@@ -0,0 +1,56 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.migrate = void 0;
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_path_1 = __importDefault(require("node:path"));
+const connection_js_1 = require("./connection.js");
+async function migrate() {
+    const pool = (0, connection_js_1.getPool)();
+    // Create migrations tracking table
+    await pool.query(`
+    CREATE TABLE IF NOT EXISTS _migrations (
+      id SERIAL PRIMARY KEY,
+      name TEXT NOT NULL UNIQUE,
+      applied_at TIMESTAMPTZ NOT NULL DEFAULT now()
+    )
+  `);
+    // Get applied migrations
+    const { rows: applied } = await pool.query("SELECT name FROM _migrations ORDER BY id");
+    const appliedSet = new Set(applied.map((r) => r.name));
+    // Get migration files
+    const migrationsDir = node_path_1.default.resolve(__dirname, "migrations");
+    const files = node_fs_1.default
+        .readdirSync(migrationsDir)
+        .filter((f) => f.endsWith(".sql"))
+        .sort();
+    for (const file of files) {
+        if (appliedSet.has(file)) {
+            console.log(`  Skipping ${file} (already applied)`);
+            continue;
+        }
+        console.log(`  Applying ${file}...`);
+        const sql = node_fs_1.default.readFileSync(node_path_1.default.join(migrationsDir, file), "utf-8");
+        const client = await pool.connect();
+        try {
+            await client.query("BEGIN");
+            await client.query(sql);
+            await client.query("INSERT INTO _migrations (name) VALUES ($1)", [file]);
+            await client.query("COMMIT");
+            console.log(`  Applied ${file}`);
+        }
+        catch (err) {
+            await client.query("ROLLBACK");
+            console.error(`  Failed to apply ${file}:`, err);
+            throw err;
+        }
+        finally {
+            client.release();
+        }
+    }
+    console.log("Migrations complete.");
+}
+exports.migrate = migrate;
+//# sourceMappingURL=migrate.js.map

package/dist/db/migrate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrate.js","sourceRoot":"","sources":["../../src/db/migrate.ts"],"names":[],"mappings":";;;;;;AAAA,sDAAyB;AACzB,0DAA6B;AAC7B,mDAA0C;AAE1C,KAAK,UAAU,OAAO;IACpB,MAAM,IAAI,GAAG,IAAA,uBAAO,GAAE,CAAC;IAEvB,mCAAmC;IACnC,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;GAMhB,CAAC,CAAC;IAEH,yBAAyB;IACzB,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CACxC,0CAA0C,CAC3C,CAAC;IACF,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAmB,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAEzE,sBAAsB;IACtB,MAAM,aAAa,GAAG,mBAAI,CAAC,OAAO,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IAC5D,MAAM,KAAK,GAAG,iBAAE;SACb,WAAW,CAAC,aAAa,CAAC;SAC1B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;SACjC,IAAI,EAAE,CAAC;IAEV,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,oBAAoB,CAAC,CAAC;YACpD,SAAS;QACX,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,KAAK,CAAC,CAAC;QACrC,MAAM,GAAG,GAAG,iBAAE,CAAC,YAAY,CAAC,mBAAI,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;QAErE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC5B,MAAM,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACxB,MAAM,MAAM,CAAC,KAAK,CAAC,4CAA4C,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;YACzE,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC7B,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YAC/B,OAAO,CAAC,KAAK,CAAC,qBAAqB,IAAI,GAAG,EAAE,GAAG,CAAC,CAAC;YACjD,MAAM,GAAG,CAAC;QACZ,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;AACtC,CAAC;AAEQ,0BAAO"}

package/dist/db/regional-pool-router.d.ts

@@ -0,0 +1,9 @@
+import pg from "pg";
+export interface RegionalPoolRouter {
+    getPool(regionId: string): pg.Pool;
+    getGlobalPool(): pg.Pool;
+    registerPool(regionId: string, pool: pg.Pool): void;
+    close(): Promise<void>;
+}
+export declare function createRegionalPoolRouter(globalPool: pg.Pool): RegionalPoolRouter;
+//# sourceMappingURL=regional-pool-router.d.ts.map

package/dist/db/regional-pool-router.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"regional-pool-router.d.ts","sourceRoot":"","sources":["../../src/db/regional-pool-router.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,CAAC;AAEpB,MAAM,WAAW,kBAAkB;IACjC,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,EAAE,CAAC,IAAI,CAAC;IACnC,aAAa,IAAI,EAAE,CAAC,IAAI,CAAC;IACzB,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,GAAG,IAAI,CAAC;IACpD,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED,wBAAgB,wBAAwB,CAAC,UAAU,EAAE,EAAE,CAAC,IAAI,GAAG,kBAAkB,CAwBhF"}

package/dist/db/regional-pool-router.js

@@ -0,0 +1,29 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createRegionalPoolRouter = void 0;
+function createRegionalPoolRouter(globalPool) {
+    const pools = new Map();
+    return {
+        getPool(regionId) {
+            const pool = pools.get(regionId);
+            if (!pool) {
+                // Fall back to global pool if region-specific pool not registered
+                return globalPool;
+            }
+            return pool;
+        },
+        getGlobalPool() {
+            return globalPool;
+        },
+        registerPool(regionId, pool) {
+            pools.set(regionId, pool);
+        },
+        async close() {
+            const closePromises = Array.from(pools.values()).map(p => p.end());
+            await Promise.all(closePromises);
+            pools.clear();
+        },
+    };
+}
+exports.createRegionalPoolRouter = createRegionalPoolRouter;
+//# sourceMappingURL=regional-pool-router.js.map

package/dist/db/regional-pool-router.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"regional-pool-router.js","sourceRoot":"","sources":["../../src/db/regional-pool-router.ts"],"names":[],"mappings":";;;AASA,SAAgB,wBAAwB,CAAC,UAAmB;IAC1D,MAAM,KAAK,GAAG,IAAI,GAAG,EAAmB,CAAC;IAEzC,OAAO;QACL,OAAO,CAAC,QAAgB;YACtB,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACjC,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,kEAAkE;gBAClE,OAAO,UAAU,CAAC;YACpB,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,aAAa;YACX,OAAO,UAAU,CAAC;QACpB,CAAC;QACD,YAAY,CAAC,QAAgB,EAAE,IAAa;YAC1C,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC5B,CAAC;QACD,KAAK,CAAC,KAAK;YACT,MAAM,aAAa,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;YACnE,MAAM,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;YACjC,KAAK,CAAC,KAAK,EAAE,CAAC;QAChB,CAAC;KACF,CAAC;AACJ,CAAC;AAxBD,4DAwBC"}

package/dist/index.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":""}

package/dist/index.js

@@ -0,0 +1,36 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const app_js_1 = require("./app.js");
+const config_js_1 = require("./config.js");
+const migrate_js_1 = require("./db/migrate.js");
+const connection_js_1 = require("./db/connection.js");
+async function main() {
+    // Run database migrations
+    console.log("Running migrations...");
+    await (0, migrate_js_1.migrate)();
+    // Build and start the app
+    const app = await (0, app_js_1.buildApp)();
+    await app.listen({ port: config_js_1.config.port, host: "0.0.0.0" });
+    console.log(`Stratum Control Plane listening on port ${config_js_1.config.port} (${config_js_1.config.nodeEnv})`);
+    // Graceful shutdown
+    const shutdown = async (signal) => {
+        console.log(`Received ${signal}, shutting down...`);
+        try {
+            await app.close();
+            await (0, connection_js_1.closePool)();
+            console.log("Shutdown complete.");
+            process.exit(0);
+        }
+        catch (err) {
+            console.error("Error during shutdown:", err);
+            process.exit(1);
+        }
+    };
+    process.on("SIGTERM", () => shutdown("SIGTERM"));
+    process.on("SIGINT", () => shutdown("SIGINT"));
+}
+main().catch((err) => {
+    console.error("Failed to start server:", err);
+    process.exit(1);
+});
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;AAAA,qCAAoC;AACpC,2CAAqC;AACrC,gDAA0C;AAC1C,sDAA+C;AAE/C,KAAK,UAAU,IAAI;IACjB,0BAA0B;IAC1B,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;IACrC,MAAM,IAAA,oBAAO,GAAE,CAAC;IAEhB,0BAA0B;IAC1B,MAAM,GAAG,GAAG,MAAM,IAAA,iBAAQ,GAAE,CAAC;IAE7B,MAAM,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,kBAAM,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;IACzD,OAAO,CAAC,GAAG,CAAC,2CAA2C,kBAAM,CAAC,IAAI,KAAK,kBAAM,CAAC,OAAO,GAAG,CAAC,CAAC;IAE1F,oBAAoB;IACpB,MAAM,QAAQ,GAAG,KAAK,EAAE,MAAc,EAAiB,EAAE;QACvD,OAAO,CAAC,GAAG,CAAC,YAAY,MAAM,oBAAoB,CAAC,CAAC;QACpD,IAAI,CAAC;YACH,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;YAClB,MAAM,IAAA,yBAAS,GAAE,CAAC;YAClB,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;YAClC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,wBAAwB,EAAE,GAAG,CAAC,CAAC;YAC7C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC;IAEF,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;IACjD,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;AACjD,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,KAAK,CAAC,yBAAyB,EAAE,GAAG,CAAC,CAAC;IAC9C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/middleware/auth.d.ts

@@ -0,0 +1,21 @@
+import { FastifyRequest, FastifyReply } from "fastify";
+import { Stratum } from "@stratum-hq/lib";
+interface ApiKeyRecord {
+    id: string;
+    tenant_id: string | null;
+    key_hash: string;
+    name: string;
+    created_at: Date;
+    scopes: string[];
+    rate_limit_max: number | null;
+    rate_limit_window: string | null;
+}
+declare module "fastify" {
+    interface FastifyRequest {
+        apiKey?: ApiKeyRecord;
+        authMethod?: "api_key" | "jwt";
+    }
+}
+export declare function createAuthMiddleware(stratum: Stratum): (request: FastifyRequest, reply: FastifyReply) => Promise<void>;
+export {};
+//# sourceMappingURL=auth.d.ts.map

package/dist/middleware/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/middleware/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAIvD,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAE1C,UAAU,YAAY;IACpB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,IAAI,CAAC;IACjB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;CAClC;AAED,OAAO,QAAQ,SAAS,CAAC;IACvB,UAAU,cAAc;QACtB,MAAM,CAAC,EAAE,YAAY,CAAC;QACtB,UAAU,CAAC,EAAE,SAAS,GAAG,KAAK,CAAC;KAChC;CACF;AAED,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,aAExC,cAAc,SAChB,YAAY,KAClB,QAAQ,IAAI,CAAC,CA+DjB"}