@syncular/server-hono 0.0.1-60

package/dist/api-key-auth.d.ts

@@ -0,0 +1,49 @@
+/**
+ * @syncular/server-hono - API Key Authentication Helper
+ *
+ * Provides utilities for validating API keys in relay/proxy routes.
+ */
+import type { ServerSyncDialect } from '@syncular/server';
+import type { Context } from 'hono';
+import { type Kysely } from 'kysely';
+import { type ApiKeyType } from './console/schemas';
+interface SyncApiKeysTable {
+    key_id: string;
+    key_hash: string;
+    key_prefix: string;
+    name: string;
+    key_type: string;
+    scope_keys: unknown | null;
+    actor_id: string | null;
+    created_at: string;
+    expires_at: string | null;
+    last_used_at: string | null;
+    revoked_at: string | null;
+}
+type ApiKeyDb = {
+    sync_api_keys: SyncApiKeysTable;
+};
+interface ValidateApiKeyResult {
+    keyId: string;
+    keyType: ApiKeyType;
+    actorId: string | null;
+    scopeKeys: string[];
+}
+/**
+ * Validates an API key from Authorization header.
+ * Updates last_used_at on successful validation.
+ */
+export declare function validateApiKey<DB extends ApiKeyDb>(db: Kysely<DB>, dialect: ServerSyncDialect, authHeader: string | undefined): Promise<ValidateApiKeyResult | null>;
+/**
+ * Creates an authenticator for relay/proxy routes.
+ * Returns actorId from the API key if valid and allowed.
+ */
+export declare function createApiKeyAuthenticator<DB extends ApiKeyDb>(db: Kysely<DB>, dialect: ServerSyncDialect, allowedTypes: ApiKeyType[]): (c: Context) => Promise<{
+    actorId: string;
+} | null>;
+/**
+ * Middleware that validates API key and attaches result to context.
+ */
+export declare function apiKeyAuthMiddleware<DB extends ApiKeyDb>(db: Kysely<DB>, dialect: ServerSyncDialect, allowedTypes: ApiKeyType[]): (c: Context<any, any, {}>, next: () => Promise<void>) => Promise<Response | undefined>;
+export {};
+//# sourceMappingURL=api-key-auth.d.ts.map

package/dist/api-key-auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-key-auth.d.ts","sourceRoot":"","sources":["../src/api-key-auth.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACpC,OAAO,EAAE,KAAK,MAAM,EAAO,MAAM,QAAQ,CAAC;AAC1C,OAAO,EAAE,KAAK,UAAU,EAAoB,MAAM,mBAAmB,CAAC;AAEtE,UAAU,gBAAgB;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,OAAO,GAAG,IAAI,CAAC;IAC3B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,KAAK,QAAQ,GAAG;IACd,aAAa,EAAE,gBAAgB,CAAC;CACjC,CAAC;AAEF,UAAU,oBAAoB;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,UAAU,CAAC;IACpB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB;AAED;;;GAGG;AACH,wBAAsB,cAAc,CAAC,EAAE,SAAS,QAAQ,EACtD,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC,EACd,OAAO,EAAE,iBAAiB,EAC1B,UAAU,EAAE,MAAM,GAAG,SAAS,GAC7B,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAkEtC;AAED;;;GAGG;AACH,wBAAgB,yBAAyB,CAAC,EAAE,SAAS,QAAQ,EAC3D,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC,EACd,OAAO,EAAE,iBAAiB,EAC1B,YAAY,EAAE,UAAU,EAAE,GACzB,CAAC,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAAC,CAmBrD;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,EAAE,SAAS,QAAQ,EACtD,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC,EACd,OAAO,EAAE,iBAAiB,EAC1B,YAAY,EAAE,UAAU,EAAE,0FAsB3B"}

package/dist/api-key-auth.js

@@ -0,0 +1,110 @@
+/**
+ * @syncular/server-hono - API Key Authentication Helper
+ *
+ * Provides utilities for validating API keys in relay/proxy routes.
+ */
+import { sql } from 'kysely';
+import { ApiKeyTypeSchema } from './console/schemas';
+/**
+ * Validates an API key from Authorization header.
+ * Updates last_used_at on successful validation.
+ */
+export async function validateApiKey(db, dialect, authHeader) {
+    if (!authHeader?.startsWith('Bearer ')) {
+        return null;
+    }
+    const secretKey = authHeader.slice(7);
+    if (!secretKey || !secretKey.startsWith('sk_')) {
+        return null;
+    }
+    // Hash the provided key
+    const keyHash = await hashApiKey(secretKey);
+    // Look up key by hash
+    const rowResult = await sql `
+    select key_id, key_type, actor_id, scope_keys, expires_at, revoked_at
+    from ${sql.table('sync_api_keys')}
+    where key_hash = ${keyHash}
+    limit 1
+  `.execute(db);
+    const row = rowResult.rows[0];
+    if (!row) {
+        return null;
+    }
+    const parsedKeyType = ApiKeyTypeSchema.safeParse(row.key_type);
+    if (!parsedKeyType.success)
+        return null;
+    // Check if revoked
+    if (row.revoked_at) {
+        return null;
+    }
+    // Check if expired
+    if (row.expires_at) {
+        const expiresAt = new Date(row.expires_at);
+        if (expiresAt < new Date()) {
+            return null;
+        }
+    }
+    // Update last_used_at
+    const now = new Date().toISOString();
+    await sql `
+    update ${sql.table('sync_api_keys')}
+    set last_used_at = ${now}
+    where key_id = ${row.key_id}
+  `.execute(db);
+    // Parse scopes
+    const scopeKeys = dialect.dbToArray(row.scope_keys);
+    return {
+        keyId: row.key_id,
+        keyType: parsedKeyType.data,
+        actorId: row.actor_id,
+        scopeKeys,
+    };
+}
+/**
+ * Creates an authenticator for relay/proxy routes.
+ * Returns actorId from the API key if valid and allowed.
+ */
+export function createApiKeyAuthenticator(db, dialect, allowedTypes) {
+    return async (c) => {
+        const authHeader = c.req.header('Authorization');
+        const result = await validateApiKey(db, dialect, authHeader);
+        if (!result) {
+            return null;
+        }
+        // Check if key type is allowed
+        if (!allowedTypes.includes(result.keyType)) {
+            return null;
+        }
+        // Return actorId (use key's actorId if set, otherwise use a default)
+        return {
+            actorId: result.actorId ?? `api-key:${result.keyId}`,
+        };
+    };
+}
+/**
+ * Middleware that validates API key and attaches result to context.
+ */
+export function apiKeyAuthMiddleware(db, dialect, allowedTypes) {
+    return async (c, next) => {
+        const authHeader = c.req.header('Authorization');
+        const result = await validateApiKey(db, dialect, authHeader);
+        if (!result) {
+            return c.json({ error: 'UNAUTHENTICATED' }, 401);
+        }
+        if (!allowedTypes.includes(result.keyType)) {
+            return c.json({ error: 'FORBIDDEN', message: 'Invalid key type' }, 403);
+        }
+        // Attach to context for downstream handlers
+        c.set('apiKey', result);
+        await next();
+    };
+}
+// Hash function (same as in routes.ts)
+async function hashApiKey(secretKey) {
+    const encoder = new TextEncoder();
+    const data = encoder.encode(secretKey);
+    const hashBuffer = await crypto.subtle.digest('SHA-256', data);
+    const hashArray = new Uint8Array(hashBuffer);
+    return Array.from(hashArray, (b) => b.toString(16).padStart(2, '0')).join('');
+}
+//# sourceMappingURL=api-key-auth.js.map

package/dist/api-key-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-key-auth.js","sourceRoot":"","sources":["../src/api-key-auth.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,EAAe,GAAG,EAAE,MAAM,QAAQ,CAAC;AAC1C,OAAO,EAAmB,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AA2BtE;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,EAAc,EACd,OAA0B,EAC1B,UAA8B,EACQ;IACtC,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACvC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACtC,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,wBAAwB;IACxB,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,CAAC;IAE5C,sBAAsB;IACtB,MAAM,SAAS,GAAG,MAAM,GAAG,CAOzB;;WAEO,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC;uBACd,OAAO;;GAE3B,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACd,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAE9B,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,aAAa,GAAG,gBAAgB,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC/D,IAAI,CAAC,aAAa,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAExC,mBAAmB;IACnB,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,mBAAmB;IACnB,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;QACnB,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC3C,IAAI,SAAS,GAAG,IAAI,IAAI,EAAE,EAAE,CAAC;YAC3B,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,sBAAsB;IACtB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,GAAG,CAAA;aACE,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC;yBACd,GAAG;qBACP,GAAG,CAAC,MAAM;GAC5B,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAEd,eAAe;IACf,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAEpD,OAAO;QACL,KAAK,EAAE,GAAG,CAAC,MAAM;QACjB,OAAO,EAAE,aAAa,CAAC,IAAI;QAC3B,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,SAAS;KACV,CAAC;AAAA,CACH;AAED;;;GAGG;AACH,MAAM,UAAU,yBAAyB,CACvC,EAAc,EACd,OAA0B,EAC1B,YAA0B,EAC2B;IACrD,OAAO,KAAK,EAAE,CAAU,EAAE,EAAE,CAAC;QAC3B,MAAM,UAAU,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QACjD,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,EAAE,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;QAE7D,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,IAAI,CAAC;QACd,CAAC;QAED,+BAA+B;QAC/B,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3C,OAAO,IAAI,CAAC;QACd,CAAC;QAED,qEAAqE;QACrE,OAAO;YACL,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,WAAW,MAAM,CAAC,KAAK,EAAE;SACrD,CAAC;IAAA,CACH,CAAC;AAAA,CACH;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAClC,EAAc,EACd,OAA0B,EAC1B,YAA0B,EAC1B;IACA,OAAO,KAAK,EACV,CAAU,EACV,IAAyB,EACM,EAAE,CAAC;QAClC,MAAM,UAAU,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QACjD,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,EAAE,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;QAE7D,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,GAAG,CAAC,CAAC;QACnD,CAAC;QAED,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3C,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,kBAAkB,EAAE,EAAE,GAAG,CAAC,CAAC;QAC1E,CAAC;QAED,4CAA4C;QAC5C,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAExB,MAAM,IAAI,EAAE,CAAC;IAAA,CACd,CAAC;AAAA,CACH;AAED,uCAAuC;AACvC,KAAK,UAAU,UAAU,CAAC,SAAiB,EAAmB;IAC5D,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACvC,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC/D,MAAM,SAAS,GAAG,IAAI,UAAU,CAAC,UAAU,CAAC,CAAC;IAC7C,OAAO,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAAA,CAC/E"}

package/dist/blobs.d.ts

@@ -0,0 +1,69 @@
+/**
+ * @syncular/server-hono - Blob routes for media/binary handling
+ *
+ * Provides:
+ * - POST /blobs/upload - Initiate a blob upload (get presigned URL)
+ * - POST /blobs/:hash/complete - Complete a blob upload
+ * - GET /blobs/:hash/url - Get a presigned download URL
+ * - PUT /blobs/:hash/upload - Direct upload (for database adapter)
+ * - GET /blobs/:hash/download - Direct download (for database adapter)
+ */
+import type { BlobManager } from '@syncular/server';
+import { type BlobTokenSigner, type SyncBlobsDb } from '@syncular/server';
+import type { Context } from 'hono';
+import { Hono } from 'hono';
+import type { Kysely } from 'kysely';
+interface BlobAuthResult {
+    actorId: string;
+}
+export interface CreateBlobRoutesOptions<DB extends SyncBlobsDb = SyncBlobsDb> {
+    /** Blob manager instance */
+    blobManager: BlobManager;
+    /** Authentication function */
+    authenticate: (c: Context) => Promise<BlobAuthResult | null>;
+    /**
+     * Token signer for database adapter direct uploads/downloads.
+     * Required if using the database blob storage adapter.
+     */
+    tokenSigner?: BlobTokenSigner;
+    /**
+     * Database instance for direct blob storage.
+     * Required if using the database blob storage adapter.
+     */
+    db?: Kysely<DB>;
+    /**
+     * Optional: Check if actor can access a blob.
+     * By default, any authenticated actor can access any completed blob.
+     * Provide this to implement scope-based access control.
+     */
+    canAccessBlob?: (args: {
+        actorId: string;
+        hash: string;
+    }) => Promise<boolean>;
+    /**
+     * Maximum upload size in bytes.
+     * Default: 100MB (104857600)
+     */
+    maxUploadSize?: number;
+}
+/**
+ * Create blob routes for Hono.
+ *
+ * @example
+ * ```typescript
+ * const blobRoutes = createBlobRoutes({
+ *   blobManager,
+ *   authenticate: async (c) => {
+ *     const token = c.req.header('Authorization')?.replace('Bearer ', '');
+ *     if (!token) return null;
+ *     const user = await verifyToken(token);
+ *     return user ? { actorId: user.id } : null;
+ *   },
+ * });
+ *
+ * app.route('/api/sync', blobRoutes);
+ * ```
+ */
+export declare function createBlobRoutes<DB extends SyncBlobsDb>(options: CreateBlobRoutesOptions<DB>): Hono;
+export {};
+//# sourceMappingURL=blobs.d.ts.map

package/dist/blobs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"blobs.d.ts","sourceRoot":"","sources":["../src/blobs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AASH,OAAO,KAAK,EACV,WAAW,EAGZ,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,KAAK,eAAe,EAEpB,KAAK,WAAW,EAEjB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACpC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAGrC,UAAU,cAAc;IACtB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,uBAAuB,CAAC,EAAE,SAAS,WAAW,GAAG,WAAW;IAC3E,4BAA4B;IAC5B,WAAW,EAAE,WAAW,CAAC;IACzB,8BAA8B;IAC9B,YAAY,EAAE,CAAC,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAAC;IAC7D;;;OAGG;IACH,WAAW,CAAC,EAAE,eAAe,CAAC;IAC9B;;;OAGG;IACH,EAAE,CAAC,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;IAChB;;;;OAIG;IACH,aAAa,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9E;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAUD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,gBAAgB,CAAC,EAAE,SAAS,WAAW,EACrD,OAAO,EAAE,uBAAuB,CAAC,EAAE,CAAC,GACnC,IAAI,CAwZN"}

package/dist/blobs.js

@@ -0,0 +1,383 @@
+/**
+ * @syncular/server-hono - Blob routes for media/binary handling
+ *
+ * Provides:
+ * - POST /blobs/upload - Initiate a blob upload (get presigned URL)
+ * - POST /blobs/:hash/complete - Complete a blob upload
+ * - GET /blobs/:hash/url - Get a presigned download URL
+ * - PUT /blobs/:hash/upload - Direct upload (for database adapter)
+ * - GET /blobs/:hash/download - Direct download (for database adapter)
+ */
+import { BlobUploadCompleteResponseSchema, BlobUploadInitRequestSchema, BlobUploadInitResponseSchema, ErrorResponseSchema, parseBlobHash, } from '@syncular/core';
+import { readBlobFromDatabase, storeBlobInDatabase, } from '@syncular/server';
+import { Hono } from 'hono';
+import { describeRoute, resolver, validator as zValidator } from 'hono-openapi';
+import { z } from 'zod';
+const hashParamsSchema = z.object({
+    hash: z.string().min(1),
+});
+const tokenQuerySchema = z.object({
+    token: z.string().min(1),
+});
+/**
+ * Create blob routes for Hono.
+ *
+ * @example
+ * ```typescript
+ * const blobRoutes = createBlobRoutes({
+ *   blobManager,
+ *   authenticate: async (c) => {
+ *     const token = c.req.header('Authorization')?.replace('Bearer ', '');
+ *     if (!token) return null;
+ *     const user = await verifyToken(token);
+ *     return user ? { actorId: user.id } : null;
+ *   },
+ * });
+ *
+ * app.route('/api/sync', blobRoutes);
+ * ```
+ */
+export function createBlobRoutes(options) {
+    const { blobManager, authenticate, tokenSigner, db, canAccessBlob, maxUploadSize = 100 * 1024 * 1024, // 100MB
+     } = options;
+    const routes = new Hono();
+    // -------------------------------------------------------------------------
+    // POST /blobs/upload - Initiate upload
+    // -------------------------------------------------------------------------
+    routes.post('/blobs/upload', describeRoute({
+        tags: ['blobs'],
+        summary: 'Initiate blob upload',
+        description: 'Initiates a blob upload and returns a presigned URL for uploading',
+        responses: {
+            200: {
+                description: 'Upload initiated (or blob already exists)',
+                content: {
+                    'application/json': {
+                        schema: resolver(BlobUploadInitResponseSchema),
+                    },
+                },
+            },
+            400: {
+                description: 'Invalid request',
+                content: {
+                    'application/json': { schema: resolver(ErrorResponseSchema) },
+                },
+            },
+            401: {
+                description: 'Unauthenticated',
+                content: {
+                    'application/json': { schema: resolver(ErrorResponseSchema) },
+                },
+            },
+        },
+    }), zValidator('json', BlobUploadInitRequestSchema), async (c) => {
+        const auth = await authenticate(c);
+        if (!auth)
+            return c.json({ error: 'UNAUTHENTICATED' }, 401);
+        const body = c.req.valid('json');
+        // Validate size
+        if (body.size > maxUploadSize) {
+            return c.json({
+                error: 'BLOB_TOO_LARGE',
+                message: `Maximum upload size is ${maxUploadSize} bytes`,
+            }, 400);
+        }
+        try {
+            const result = await blobManager.initiateUpload({
+                hash: body.hash,
+                size: body.size,
+                mimeType: body.mimeType,
+                actorId: auth.actorId,
+            });
+            return c.json(result, 200);
+        }
+        catch (err) {
+            if (isBlobValidationError(err)) {
+                return c.json({ error: 'INVALID_REQUEST', message: err.message }, 400);
+            }
+            throw err;
+        }
+    });
+    // -------------------------------------------------------------------------
+    // POST /blobs/:hash/complete - Complete upload
+    // -------------------------------------------------------------------------
+    routes.post('/blobs/:hash/complete', describeRoute({
+        tags: ['blobs'],
+        summary: 'Complete blob upload',
+        description: 'Marks a blob upload as complete after the client has uploaded to the presigned URL',
+        responses: {
+            200: {
+                description: 'Upload completed',
+                content: {
+                    'application/json': {
+                        schema: resolver(BlobUploadCompleteResponseSchema),
+                    },
+                },
+            },
+            400: {
+                description: 'Invalid request or upload failed',
+                content: {
+                    'application/json': { schema: resolver(ErrorResponseSchema) },
+                },
+            },
+            401: {
+                description: 'Unauthenticated',
+                content: {
+                    'application/json': { schema: resolver(ErrorResponseSchema) },
+                },
+            },
+        },
+    }), zValidator('param', hashParamsSchema), async (c) => {
+        const auth = await authenticate(c);
+        if (!auth)
+            return c.json({ error: 'UNAUTHENTICATED' }, 401);
+        const { hash } = c.req.valid('param');
+        // Validate hash format
+        if (!parseBlobHash(hash)) {
+            return c.json({ error: 'INVALID_REQUEST', message: 'Invalid blob hash format' }, 400);
+        }
+        const result = await blobManager.completeUpload(hash);
+        if (!result.ok) {
+            return c.json({ error: 'UPLOAD_FAILED', message: result.error }, 400);
+        }
+        return c.json(result, 200);
+    });
+    // -------------------------------------------------------------------------
+    // GET /blobs/:hash/url - Get download URL
+    // -------------------------------------------------------------------------
+    routes.get('/blobs/:hash/url', describeRoute({
+        tags: ['blobs'],
+        summary: 'Get blob download URL',
+        description: 'Returns a presigned URL for downloading a blob',
+        responses: {
+            200: {
+                description: 'Download URL',
+                content: {
+                    'application/json': {
+                        schema: resolver(z.object({
+                            url: z.string().url(),
+                            expiresAt: z.string(),
+                            metadata: z.object({
+                                hash: z.string(),
+                                size: z.number(),
+                                mimeType: z.string(),
+                                createdAt: z.string(),
+                                uploadComplete: z.boolean(),
+                            }),
+                        })),
+                    },
+                },
+            },
+            401: {
+                description: 'Unauthenticated',
+                content: {
+                    'application/json': { schema: resolver(ErrorResponseSchema) },
+                },
+            },
+            403: {
+                description: 'Forbidden',
+                content: {
+                    'application/json': { schema: resolver(ErrorResponseSchema) },
+                },
+            },
+            404: {
+                description: 'Not found',
+                content: {
+                    'application/json': { schema: resolver(ErrorResponseSchema) },
+                },
+            },
+        },
+    }), zValidator('param', hashParamsSchema), async (c) => {
+        const auth = await authenticate(c);
+        if (!auth)
+            return c.json({ error: 'UNAUTHENTICATED' }, 401);
+        const { hash } = c.req.valid('param');
+        // Validate hash format
+        if (!parseBlobHash(hash)) {
+            return c.json({ error: 'NOT_FOUND' }, 404);
+        }
+        // Check access if canAccessBlob is provided
+        if (canAccessBlob) {
+            const canAccess = await canAccessBlob({ actorId: auth.actorId, hash });
+            if (!canAccess) {
+                return c.json({ error: 'FORBIDDEN' }, 403);
+            }
+        }
+        try {
+            const result = await blobManager.getDownloadUrl({
+                hash,
+                actorId: auth.actorId,
+            });
+            return c.json(result, 200);
+        }
+        catch (err) {
+            if (isBlobNotFoundError(err)) {
+                return c.json({ error: 'NOT_FOUND' }, 404);
+            }
+            throw err;
+        }
+    });
+    // -------------------------------------------------------------------------
+    // PUT /blobs/:hash/upload - Direct upload (database adapter)
+    // -------------------------------------------------------------------------
+    if (tokenSigner && db) {
+        routes.put('/blobs/:hash/upload', describeRoute({
+            tags: ['blobs'],
+            summary: 'Direct blob upload',
+            description: 'Direct upload endpoint for database storage adapter. Requires a signed token.',
+            responses: {
+                200: {
+                    description: 'Upload successful',
+                },
+                400: {
+                    description: 'Invalid request',
+                    content: {
+                        'application/json': { schema: resolver(ErrorResponseSchema) },
+                    },
+                },
+                401: {
+                    description: 'Invalid or expired token',
+                    content: {
+                        'application/json': { schema: resolver(ErrorResponseSchema) },
+                    },
+                },
+            },
+        }), zValidator('param', hashParamsSchema), zValidator('query', tokenQuerySchema), async (c) => {
+            const { hash } = c.req.valid('param');
+            const { token } = c.req.valid('query');
+            // Verify token
+            const payload = await tokenSigner.verify(token);
+            if (!payload || payload.action !== 'upload' || payload.hash !== hash) {
+                return c.json({ error: 'INVALID_TOKEN' }, 401);
+            }
+            // Get upload metadata
+            const metadata = await blobManager.getMetadata(hash);
+            // Read body
+            const body = await c.req.arrayBuffer();
+            const bodyBytes = new Uint8Array(body);
+            // Verify size
+            const expectedSize = metadata?.size;
+            if (expectedSize !== undefined && bodyBytes.length !== expectedSize) {
+                return c.json({
+                    error: 'SIZE_MISMATCH',
+                    message: `Expected ${expectedSize} bytes, got ${bodyBytes.length}`,
+                }, 400);
+            }
+            // Verify hash
+            const computedHash = await computeSha256Hash(bodyBytes);
+            const expectedHex = parseBlobHash(hash);
+            if (computedHash !== expectedHex) {
+                return c.json({
+                    error: 'HASH_MISMATCH',
+                    message: 'Content hash does not match',
+                }, 400);
+            }
+            // Store via the blob adapter (R2, database, etc.)
+            const mimeType = c.req.header('Content-Type') ??
+                metadata?.mimeType ??
+                'application/octet-stream';
+            if (blobManager.adapter.put) {
+                await blobManager.adapter.put(hash, bodyBytes, { mimeType });
+            }
+            else {
+                await storeBlobInDatabase(db, {
+                    hash,
+                    size: bodyBytes.length,
+                    mimeType,
+                    body: bodyBytes,
+                });
+            }
+            return c.text('OK', 200);
+        });
+        // -------------------------------------------------------------------------
+        // GET /blobs/:hash/download - Direct download (database adapter)
+        // -------------------------------------------------------------------------
+        routes.get('/blobs/:hash/download', describeRoute({
+            tags: ['blobs'],
+            summary: 'Direct blob download',
+            description: 'Direct download endpoint for database storage adapter. Requires a signed token.',
+            responses: {
+                200: {
+                    description: 'Blob content',
+                },
+                401: {
+                    description: 'Invalid or expired token',
+                    content: {
+                        'application/json': { schema: resolver(ErrorResponseSchema) },
+                    },
+                },
+                404: {
+                    description: 'Not found',
+                    content: {
+                        'application/json': { schema: resolver(ErrorResponseSchema) },
+                    },
+                },
+            },
+        }), zValidator('param', hashParamsSchema), zValidator('query', tokenQuerySchema), async (c) => {
+            const { hash } = c.req.valid('param');
+            const { token } = c.req.valid('query');
+            // Verify token
+            const payload = await tokenSigner.verify(token);
+            if (!payload ||
+                payload.action !== 'download' ||
+                payload.hash !== hash) {
+                return c.json({ error: 'INVALID_TOKEN' }, 401);
+            }
+            // Read via the blob adapter (R2, database, etc.)
+            if (blobManager.adapter.get) {
+                const data = await blobManager.adapter.get(hash);
+                if (!data) {
+                    return c.json({ error: 'NOT_FOUND' }, 404);
+                }
+                const meta = blobManager.adapter.getMetadata
+                    ? await blobManager.adapter.getMetadata(hash)
+                    : null;
+                return new Response(data, {
+                    status: 200,
+                    headers: {
+                        'Content-Type': meta?.mimeType ?? 'application/octet-stream',
+                        'Content-Length': String(data.length),
+                        'Cache-Control': 'private, max-age=31536000, immutable',
+                    },
+                });
+            }
+            // Fallback: read from database directly
+            const blob = await readBlobFromDatabase(db, hash);
+            if (!blob) {
+                return c.json({ error: 'NOT_FOUND' }, 404);
+            }
+            return new Response(blob.body, {
+                status: 200,
+                headers: {
+                    'Content-Type': blob.mimeType,
+                    'Content-Length': String(blob.size),
+                    'Cache-Control': 'private, max-age=31536000, immutable',
+                },
+            });
+        });
+    }
+    return routes;
+}
+// ============================================================================
+// Helpers
+// ============================================================================
+function isBlobValidationError(err) {
+    return (typeof err === 'object' &&
+        err !== null &&
+        err.name === 'BlobValidationError');
+}
+function isBlobNotFoundError(err) {
+    return (typeof err === 'object' &&
+        err !== null &&
+        err.name === 'BlobNotFoundError');
+}
+async function computeSha256Hash(data) {
+    // Create a new ArrayBuffer copy to satisfy TypeScript's strict typing
+    const buffer = new Uint8Array(data).buffer;
+    const hashBuffer = await crypto.subtle.digest('SHA-256', buffer);
+    const hashArray = new Uint8Array(hashBuffer);
+    return Array.from(hashArray)
+        .map((b) => b.toString(16).padStart(2, '0'))
+        .join('');
+}
+//# sourceMappingURL=blobs.js.map

package/dist/blobs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"blobs.js","sourceRoot":"","sources":["../src/blobs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EACL,gCAAgC,EAChC,2BAA2B,EAC3B,4BAA4B,EAC5B,mBAAmB,EACnB,aAAa,GACd,MAAM,gBAAgB,CAAC;AAMxB,OAAO,EAEL,oBAAoB,EAEpB,mBAAmB,GACpB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,SAAS,IAAI,UAAU,EAAE,MAAM,cAAc,CAAC;AAEhF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAkCxB,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACxB,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACzB,CAAC,CAAC;AAEH;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,gBAAgB,CAC9B,OAAoC,EAC9B;IACN,MAAM,EACJ,WAAW,EACX,YAAY,EACZ,WAAW,EACX,EAAE,EACF,aAAa,EACb,aAAa,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,EAAE,QAAQ;MAC5C,GAAG,OAAO,CAAC;IAEZ,MAAM,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;IAE1B,4EAA4E;IAC5E,uCAAuC;IACvC,4EAA4E;IAE5E,MAAM,CAAC,IAAI,CACT,eAAe,EACf,aAAa,CAAC;QACZ,IAAI,EAAE,CAAC,OAAO,CAAC;QACf,OAAO,EAAE,sBAAsB;QAC/B,WAAW,EACT,mEAAmE;QACrE,SAAS,EAAE;YACT,GAAG,EAAE;gBACH,WAAW,EAAE,2CAA2C;gBACxD,OAAO,EAAE;oBACP,kBAAkB,EAAE;wBAClB,MAAM,EAAE,QAAQ,CAAC,4BAA4B,CAAC;qBAC/C;iBACF;aACF;YACD,GAAG,EAAE;gBACH,WAAW,EAAE,iBAAiB;gBAC9B,OAAO,EAAE;oBACP,kBAAkB,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,mBAAmB,CAAC,EAAE;iBAC9D;aACF;YACD,GAAG,EAAE;gBACH,WAAW,EAAE,iBAAiB;gBAC9B,OAAO,EAAE;oBACP,kBAAkB,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,mBAAmB,CAAC,EAAE;iBAC9D;aACF;SACF;KACF,CAAC,EACF,UAAU,CAAC,MAAM,EAAE,2BAA2B,CAAC,EAC/C,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;QACX,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,CAAC,CAAC,CAAC;QACnC,IAAI,CAAC,IAAI;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,GAAG,CAAC,CAAC;QAE5D,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAEjC,gBAAgB;QAChB,IAAI,IAAI,CAAC,IAAI,GAAG,aAAa,EAAE,CAAC;YAC9B,OAAO,CAAC,CAAC,IAAI,CACX;gBACE,KAAK,EAAE,gBAAgB;gBACvB,OAAO,EAAE,0BAA0B,aAAa,QAAQ;aACzD,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,cAAc,CAAC;gBAC9C,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,OAAO,EAAE,IAAI,CAAC,OAAO;aACtB,CAAC,CAAC;YAEH,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC7B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,qBAAqB,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/B,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,iBAAiB,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,EAClD,GAAG,CACJ,CAAC;YACJ,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IAAA,CACF,CACF,CAAC;IAEF,4EAA4E;IAC5E,+CAA+C;IAC/C,4EAA4E;IAE5E,MAAM,CAAC,IAAI,CACT,uBAAuB,EACvB,aAAa,CAAC;QACZ,IAAI,EAAE,CAAC,OAAO,CAAC;QACf,OAAO,EAAE,sBAAsB;QAC/B,WAAW,EACT,oFAAoF;QACtF,SAAS,EAAE;YACT,GAAG,EAAE;gBACH,WAAW,EAAE,kBAAkB;gBAC/B,OAAO,EAAE;oBACP,kBAAkB,EAAE;wBAClB,MAAM,EAAE,QAAQ,CAAC,gCAAgC,CAAC;qBACnD;iBACF;aACF;YACD,GAAG,EAAE;gBACH,WAAW,EAAE,kCAAkC;gBAC/C,OAAO,EAAE;oBACP,kBAAkB,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,mBAAmB,CAAC,EAAE;iBAC9D;aACF;YACD,GAAG,EAAE;gBACH,WAAW,EAAE,iBAAiB;gBAC9B,OAAO,EAAE;oBACP,kBAAkB,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,mBAAmB,CAAC,EAAE;iBAC9D;aACF;SACF;KACF,CAAC,EACF,UAAU,CAAC,OAAO,EAAE,gBAAgB,CAAC,EACrC,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;QACX,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,CAAC,CAAC,CAAC;QACnC,IAAI,CAAC,IAAI;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,GAAG,CAAC,CAAC;QAE5D,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAEtC,uBAAuB;QACvB,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,iBAAiB,EAAE,OAAO,EAAE,0BAA0B,EAAE,EACjE,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QAEtD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC;QACxE,CAAC;QAED,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAAA,CAC5B,CACF,CAAC;IAEF,4EAA4E;IAC5E,0CAA0C;IAC1C,4EAA4E;IAE5E,MAAM,CAAC,GAAG,CACR,kBAAkB,EAClB,aAAa,CAAC;QACZ,IAAI,EAAE,CAAC,OAAO,CAAC;QACf,OAAO,EAAE,uBAAuB;QAChC,WAAW,EAAE,gDAAgD;QAC7D,SAAS,EAAE;YACT,GAAG,EAAE;gBACH,WAAW,EAAE,cAAc;gBAC3B,OAAO,EAAE;oBACP,kBAAkB,EAAE;wBAClB,MAAM,EAAE,QAAQ,CACd,CAAC,CAAC,MAAM,CAAC;4BACP,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;4BACrB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;4BACrB,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC;gCACjB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;gCAChB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;gCAChB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;gCACpB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;gCACrB,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE;6BAC5B,CAAC;yBACH,CAAC,CACH;qBACF;iBACF;aACF;YACD,GAAG,EAAE;gBACH,WAAW,EAAE,iBAAiB;gBAC9B,OAAO,EAAE;oBACP,kBAAkB,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,mBAAmB,CAAC,EAAE;iBAC9D;aACF;YACD,GAAG,EAAE;gBACH,WAAW,EAAE,WAAW;gBACxB,OAAO,EAAE;oBACP,kBAAkB,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,mBAAmB,CAAC,EAAE;iBAC9D;aACF;YACD,GAAG,EAAE;gBACH,WAAW,EAAE,WAAW;gBACxB,OAAO,EAAE;oBACP,kBAAkB,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,mBAAmB,CAAC,EAAE;iBAC9D;aACF;SACF;KACF,CAAC,EACF,UAAU,CAAC,OAAO,EAAE,gBAAgB,CAAC,EACrC,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;QACX,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,CAAC,CAAC,CAAC;QACnC,IAAI,CAAC,IAAI;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,GAAG,CAAC,CAAC;QAE5D,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAEtC,uBAAuB;QACvB,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,GAAG,CAAC,CAAC;QAC7C,CAAC;QAED,4CAA4C;QAC5C,IAAI,aAAa,EAAE,CAAC;YAClB,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YACvE,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,GAAG,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,cAAc,CAAC;gBAC9C,IAAI;gBACJ,OAAO,EAAE,IAAI,CAAC,OAAO;aACtB,CAAC,CAAC;YACH,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC7B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC7B,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,GAAG,CAAC,CAAC;YAC7C,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IAAA,CACF,CACF,CAAC;IAEF,4EAA4E;IAC5E,6DAA6D;IAC7D,4EAA4E;IAE5E,IAAI,WAAW,IAAI,EAAE,EAAE,CAAC;QACtB,MAAM,CAAC,GAAG,CACR,qBAAqB,EACrB,aAAa,CAAC;YACZ,IAAI,EAAE,CAAC,OAAO,CAAC;YACf,OAAO,EAAE,oBAAoB;YAC7B,WAAW,EACT,+EAA+E;YACjF,SAAS,EAAE;gBACT,GAAG,EAAE;oBACH,WAAW,EAAE,mBAAmB;iBACjC;gBACD,GAAG,EAAE;oBACH,WAAW,EAAE,iBAAiB;oBAC9B,OAAO,EAAE;wBACP,kBAAkB,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,mBAAmB,CAAC,EAAE;qBAC9D;iBACF;gBACD,GAAG,EAAE;oBACH,WAAW,EAAE,0BAA0B;oBACvC,OAAO,EAAE;wBACP,kBAAkB,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,mBAAmB,CAAC,EAAE;qBAC9D;iBACF;aACF;SACF,CAAC,EACF,UAAU,CAAC,OAAO,EAAE,gBAAgB,CAAC,EACrC,UAAU,CAAC,OAAO,EAAE,gBAAgB,CAAC,EACrC,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;YACX,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACtC,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAEvC,eAAe;YACf,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAChD,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;gBACrE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,GAAG,CAAC,CAAC;YACjD,CAAC;YAED,sBAAsB;YACtB,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YAErD,YAAY;YACZ,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;YACvC,MAAM,SAAS,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;YAEvC,cAAc;YACd,MAAM,YAAY,GAAG,QAAQ,EAAE,IAAI,CAAC;YACpC,IAAI,YAAY,KAAK,SAAS,IAAI,SAAS,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;gBACpE,OAAO,CAAC,CAAC,IAAI,CACX;oBACE,KAAK,EAAE,eAAe;oBACtB,OAAO,EAAE,YAAY,YAAY,eAAe,SAAS,CAAC,MAAM,EAAE;iBACnE,EACD,GAAG,CACJ,CAAC;YACJ,CAAC;YAED,cAAc;YACd,MAAM,YAAY,GAAG,MAAM,iBAAiB,CAAC,SAAS,CAAC,CAAC;YACxD,MAAM,WAAW,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;YACxC,IAAI,YAAY,KAAK,WAAW,EAAE,CAAC;gBACjC,OAAO,CAAC,CAAC,IAAI,CACX;oBACE,KAAK,EAAE,eAAe;oBACtB,OAAO,EAAE,6BAA6B;iBACvC,EACD,GAAG,CACJ,CAAC;YACJ,CAAC;YAED,kDAAkD;YAClD,MAAM,QAAQ,GACZ,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC;gBAC5B,QAAQ,EAAE,QAAQ;gBAClB,0BAA0B,CAAC;YAE7B,IAAI,WAAW,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;gBAC5B,MAAM,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC/D,CAAC;iBAAM,CAAC;gBACN,MAAM,mBAAmB,CAAC,EAAE,EAAE;oBAC5B,IAAI;oBACJ,IAAI,EAAE,SAAS,CAAC,MAAM;oBACtB,QAAQ;oBACR,IAAI,EAAE,SAAS;iBAChB,CAAC,CAAC;YACL,CAAC;YAED,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAAA,CAC1B,CACF,CAAC;QAEF,4EAA4E;QAC5E,iEAAiE;QACjE,4EAA4E;QAE5E,MAAM,CAAC,GAAG,CACR,uBAAuB,EACvB,aAAa,CAAC;YACZ,IAAI,EAAE,CAAC,OAAO,CAAC;YACf,OAAO,EAAE,sBAAsB;YAC/B,WAAW,EACT,iFAAiF;YACnF,SAAS,EAAE;gBACT,GAAG,EAAE;oBACH,WAAW,EAAE,cAAc;iBAC5B;gBACD,GAAG,EAAE;oBACH,WAAW,EAAE,0BAA0B;oBACvC,OAAO,EAAE;wBACP,kBAAkB,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,mBAAmB,CAAC,EAAE;qBAC9D;iBACF;gBACD,GAAG,EAAE;oBACH,WAAW,EAAE,WAAW;oBACxB,OAAO,EAAE;wBACP,kBAAkB,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,mBAAmB,CAAC,EAAE;qBAC9D;iBACF;aACF;SACF,CAAC,EACF,UAAU,CAAC,OAAO,EAAE,gBAAgB,CAAC,EACrC,UAAU,CAAC,OAAO,EAAE,gBAAgB,CAAC,EACrC,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;YACX,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACtC,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAEvC,eAAe;YACf,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAChD,IACE,CAAC,OAAO;gBACR,OAAO,CAAC,MAAM,KAAK,UAAU;gBAC7B,OAAO,CAAC,IAAI,KAAK,IAAI,EACrB,CAAC;gBACD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,GAAG,CAAC,CAAC;YACjD,CAAC;YAED,iDAAiD;YACjD,IAAI,WAAW,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;gBAC5B,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACjD,IAAI,CAAC,IAAI,EAAE,CAAC;oBACV,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,GAAG,CAAC,CAAC;gBAC7C,CAAC;gBACD,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,WAAW;oBAC1C,CAAC,CAAC,MAAM,WAAW,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC;oBAC7C,CAAC,CAAC,IAAI,CAAC;gBACT,OAAO,IAAI,QAAQ,CAAC,IAAgB,EAAE;oBACpC,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE;wBACP,cAAc,EAAE,IAAI,EAAE,QAAQ,IAAI,0BAA0B;wBAC5D,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;wBACrC,eAAe,EAAE,sCAAsC;qBACxD;iBACF,CAAC,CAAC;YACL,CAAC;YAED,wCAAwC;YACxC,MAAM,IAAI,GAAG,MAAM,oBAAoB,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YAClD,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,GAAG,CAAC,CAAC;YAC7C,CAAC;YAED,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAgB,EAAE;gBACzC,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE;oBACP,cAAc,EAAE,IAAI,CAAC,QAAQ;oBAC7B,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;oBACnC,eAAe,EAAE,sCAAsC;iBACxD;aACF,CAAC,CAAC;QAAA,CACJ,CACF,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC;AAAA,CACf;AAED,+EAA+E;AAC/E,UAAU;AACV,+EAA+E;AAE/E,SAAS,qBAAqB,CAAC,GAAY,EAA8B;IACvE,OAAO,CACL,OAAO,GAAG,KAAK,QAAQ;QACvB,GAAG,KAAK,IAAI;QACX,GAAyB,CAAC,IAAI,KAAK,qBAAqB,CAC1D,CAAC;AAAA,CACH;AAED,SAAS,mBAAmB,CAAC,GAAY,EAA4B;IACnE,OAAO,CACL,OAAO,GAAG,KAAK,QAAQ;QACvB,GAAG,KAAK,IAAI;QACX,GAAyB,CAAC,IAAI,KAAK,mBAAmB,CACxD,CAAC;AAAA,CACH;AAED,KAAK,UAAU,iBAAiB,CAAC,IAAgB,EAAmB;IAClE,sEAAsE;IACtE,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,MAAqB,CAAC;IAC1D,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IACjE,MAAM,SAAS,GAAG,IAAI,UAAU,CAAC,UAAU,CAAC,CAAC;IAC7C,OAAO,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC;SACzB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;SAC3C,IAAI,CAAC,EAAE,CAAC,CAAC;AAAA,CACb"}

package/dist/console/index.d.ts

@@ -0,0 +1,8 @@
+/**
+ * @syncular/server-hono - Console API
+ *
+ * Provides monitoring and operations endpoints for the @syncular dashboard.
+ */
+export type { ConsoleAuthResult, ConsoleEventEmitter, CreateConsoleRoutesOptions, } from './routes';
+export { createConsoleEventEmitter, createConsoleRoutes, createTokenAuthenticator, } from './routes';
+//# sourceMappingURL=index.d.ts.map

package/dist/console/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/console/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,YAAY,EACV,iBAAiB,EACjB,mBAAmB,EACnB,0BAA0B,GAC3B,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,yBAAyB,EACzB,mBAAmB,EACnB,wBAAwB,GACzB,MAAM,UAAU,CAAC"}