@syncular/server-hono 0.15.44 → 0.15.46

package/dist/admin-page.d.ts

@@ -1,10 +1,10 @@
 /**
- * The single static console page (TODO §2.5). Zero framework, no build
+ * The single static console page. Zero framework, no build
  * step, ~one file: it fetches the sibling JSON endpoints (relative to its
  * own mount path), renders tables, and offers an auto-refresh toggle —
  * 5% of the code a full console app would cost, the 80% operator value.
  *
- * Styling follows docs/DESIGN.md (the teletype theme): everything
+ * Styling follows docs/STYLE.md: everything
  * monospace, pure black, a single amber accent, 1px borders, sharp
  * corners, bracketed labels, inverse-video hover. The page ships as one
  * self-contained string, so it uses the system mono fallback stack.

package/dist/admin-page.js

@@ -1,10 +1,10 @@
 /**
- * The single static console page (TODO §2.5). Zero framework, no build
+ * The single static console page. Zero framework, no build
  * step, ~one file: it fetches the sibling JSON endpoints (relative to its
  * own mount path), renders tables, and offers an auto-refresh toggle —
  * 5% of the code a full console app would cost, the 80% operator value.
  *
- * Styling follows docs/DESIGN.md (the teletype theme): everything
+ * Styling follows docs/STYLE.md: everything
  * monospace, pure black, a single amber accent, 1px borders, sharp
  * corners, bracketed labels, inverse-video hover. The page ships as one
  * self-contained string, so it uses the system mono fallback stack.

package/dist/admin.d.ts

@@ -1,5 +1,5 @@
 /**
- * Admin / console HTTP surface (TODO §2.5) — a mountable Hono sub-app over a
+ * Admin / console HTTP surface: a mountable Hono sub-app over a
  * `SyncularAdmin`. JSON endpoints mirror the read surface; a single static
  * HTML page (zero framework, no build step) at `GET /` renders them.
  *
@@ -7,8 +7,8 @@
  * refuses to mount without a host-provided `authorize` guard (it throws at
  * construction). Every request runs the guard first; a falsy result is a
  * 401. Admin is a privileged surface (it reads every partition's clients,
- * commit metadata, and scope activity) and SPEC.md deliberately says nothing
- * about it — authorization is entirely the host's, and mandatory.
+ * commit metadata, scope activity, and reactions) and authorization is
+ * entirely the host's and mandatory.
  */
 import { type SyncularAdmin } from '@syncular/server';
 import { Hono } from 'hono';

package/dist/admin.js

@@ -1,5 +1,5 @@
 /**
- * Admin / console HTTP surface (TODO §2.5) — a mountable Hono sub-app over a
+ * Admin / console HTTP surface: a mountable Hono sub-app over a
  * `SyncularAdmin`. JSON endpoints mirror the read surface; a single static
  * HTML page (zero framework, no build step) at `GET /` renders them.
  *
@@ -7,8 +7,8 @@
  * refuses to mount without a host-provided `authorize` guard (it throws at
  * construction). Every request runs the guard first; a falsy result is a
  * 401. Admin is a privileged surface (it reads every partition's clients,
- * commit metadata, and scope activity) and SPEC.md deliberately says nothing
- * about it — authorization is entirely the host's, and mandatory.
+ * commit metadata, scope activity, and reactions) and authorization is
+ * entirely the host's and mandatory.
  */
 import { errorBody, matchesRingQuery, SyncError, } from '@syncular/server';
 import { Hono } from 'hono';
@@ -32,7 +32,7 @@ function intParam(value, fallback) {
  */
 export function createSyncularAdminRoutes(admin, options) {
     if (typeof options.authorize !== 'function') {
-        throw new Error('createSyncularAdminRoutes: an `authorize` guard is required — admin never mounts default-open (TODO §2.5)');
+        throw new Error('createSyncularAdminRoutes: an `authorize` guard is required — admin never mounts default-open');
     }
     const app = new Hono();
     /** Resolve the request's partition (query, else default) — required. */
@@ -113,6 +113,32 @@ export function createSyncularAdminRoutes(admin, options) {
             return jsonError(error);
         }
     });
+    app.get('/reactions', async (c) => {
+        try {
+            const status = c.req.query('status');
+            const type = c.req.query('type');
+            const allowed = new Set([
+                'pending',
+                'leased',
+                'completed',
+                'dead-letter',
+            ]);
+            if (status !== undefined && !allowed.has(status)) {
+                throw new SyncError('sync.invalid_request', 'invalid reaction status');
+            }
+            const reactions = await admin.listReactions(partitionOf(c), {
+                ...(status !== undefined
+                    ? { statuses: [status] }
+                    : {}),
+                ...(type !== undefined ? { types: [type] } : {}),
+                limit: intParam(c.req.query('limit'), 100),
+            });
+            return Response.json({ reactions });
+        }
+        catch (error) {
+            return jsonError(error);
+        }
+    });
     app.get('/rows/:table/:rowId', async (c) => {
         try {
             const row = await admin.inspectRow(partitionOf(c), c.req.param('table'), c.req.param('rowId'));

package/dist/index.d.ts

@@ -1,14 +1,15 @@
 /**
- * Hono adapter (REVISE B2): a thin wrapper proving the embed boundary.
+ * Hono adapter: a thin wrapper proving the embed boundary.
  * Hono is a dependency of this adapter only, never of the server core.
- * Mounts the §1.1 routes: POST /sync and GET /segments/:segmentId
- * (realtime upgrades are runtime-specific and stay with the host).
+ * Mounts the §1.1 routes including sync, registered operations, segments, and
+ * blobs. Realtime upgrades are runtime-specific and stay with the host.
  */
-import { type SyncServerConfig } from '@syncular/server';
+import { type RemoteOperationRegistry, type SyncServerConfig } from '@syncular/server';
 import { Hono } from 'hono';
 export * from './admin.js';
 export interface SyncularHonoOptions {
     readonly config: SyncServerConfig;
+    readonly operations?: RemoteOperationRegistry;
     /** Host authentication (§1.1); `null` ⇒ 401 `sync.auth_required`. */
     readonly authenticate: (request: Request) => Promise<{
         actorId: string;

package/dist/index.js

@@ -1,10 +1,10 @@
 /**
- * Hono adapter (REVISE B2): a thin wrapper proving the embed boundary.
+ * Hono adapter: a thin wrapper proving the embed boundary.
  * Hono is a dependency of this adapter only, never of the server core.
- * Mounts the §1.1 routes: POST /sync and GET /segments/:segmentId
- * (realtime upgrades are runtime-specific and stay with the host).
+ * Mounts the §1.1 routes including sync, registered operations, segments, and
+ * blobs. Realtime upgrades are runtime-specific and stay with the host.
  */
-import { encodeSegmentBody, errorBody, handleBlobDownload, handleBlobUpload, handleBlobUploadGrant, handleSegmentDownload, handleSyncRequest, SSP2_CONTENT_TYPE, SyncError, } from '@syncular/server';
+import { encodeSegmentBody, errorBody, handleBlobDownload, handleBlobUpload, handleBlobUploadGrant, handleSegmentDownload, handleRemoteOperation, handleSyncRequest, SSP2_CONTENT_TYPE, SyncError, } from '@syncular/server';
 import { Hono } from 'hono';
 export * from './admin.js';
 function errorResponse(error) {
@@ -38,6 +38,23 @@ export function createSyncularHono(options) {
             return errorResponse(error);
         }
     });
+    app.post('/operations', async (c) => {
+        const contentType = c.req.header('content-type')?.split(';')[0]?.trim();
+        if (contentType !== 'application/vnd.syncular.operations.v1+json') {
+            return Response.json(errorBody(new SyncError('operation.invalid_request')), { status: 415 });
+        }
+        if (options.operations === undefined) {
+            return errorResponse(new SyncError('operation.unknown'));
+        }
+        const auth = await options.authenticate(c.req.raw);
+        if (auth === null)
+            return errorResponse(new SyncError('sync.auth_required'));
+        const bytes = new Uint8Array(await c.req.arrayBuffer());
+        const out = await handleRemoteOperation(bytes, { ...options.config, ...auth }, options.operations);
+        return c.body(out.slice().buffer, 200, {
+            'Content-Type': 'application/vnd.syncular.operations.v1+json',
+        });
+    });
     app.get('/segments/:segmentId', async (c) => {
         const auth = await options.authenticate(c.req.raw);
         if (auth === null)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@syncular/server-hono",
-  "version": "0.15.44",
+  "version": "0.15.46",
   "description": "Hono adapter for the Syncular sync server",
   "license": "Apache-2.0",
   "author": "Benjamin Kniffler",
@@ -45,10 +45,10 @@
     "!dist/**/*.test.d.ts"
   ],
   "dependencies": {
-    "@syncular/server": "0.15.44",
-    "hono": "^4.11.0"
+    "@syncular/server": "0.15.46",
+    "hono": "^4.12.34"
   },
   "devDependencies": {
-    "@syncular/core": "0.15.44"
+    "@syncular/core": "0.15.46"
   }
 }

package/src/admin-page.ts

@@ -1,10 +1,10 @@
 /**
- * The single static console page (TODO §2.5). Zero framework, no build
+ * The single static console page. Zero framework, no build
  * step, ~one file: it fetches the sibling JSON endpoints (relative to its
  * own mount path), renders tables, and offers an auto-refresh toggle —
  * 5% of the code a full console app would cost, the 80% operator value.
  *
- * Styling follows docs/DESIGN.md (the teletype theme): everything
+ * Styling follows docs/STYLE.md: everything
  * monospace, pure black, a single amber accent, 1px borders, sharp
  * corners, bracketed labels, inverse-video hover. The page ships as one
  * self-contained string, so it uses the system mono fallback stack.

package/src/admin.ts

@@ -1,5 +1,5 @@
 /**
- * Admin / console HTTP surface (TODO §2.5) — a mountable Hono sub-app over a
+ * Admin / console HTTP surface: a mountable Hono sub-app over a
  * `SyncularAdmin`. JSON endpoints mirror the read surface; a single static
  * HTML page (zero framework, no build step) at `GET /` renders them.
  *
@@ -7,13 +7,14 @@
  * refuses to mount without a host-provided `authorize` guard (it throws at
  * construction). Every request runs the guard first; a falsy result is a
  * 401. Admin is a privileged surface (it reads every partition's clients,
- * commit metadata, and scope activity) and SPEC.md deliberately says nothing
- * about it — authorization is entirely the host's, and mandatory.
+ * commit metadata, scope activity, and reactions) and authorization is
+ * entirely the host's and mandatory.
  */
 import {
   errorBody,
   matchesRingQuery,
   type RingEventQuery,
+  type ReactionStatus,
   SyncError,
   type SyncularAdmin,
   type SyncularServerEvent,
@@ -67,7 +68,7 @@ export function createSyncularAdminRoutes(
 ): Hono {
   if (typeof options.authorize !== 'function') {
     throw new Error(
-      'createSyncularAdminRoutes: an `authorize` guard is required — admin never mounts default-open (TODO §2.5)',
+      'createSyncularAdminRoutes: an `authorize` guard is required — admin never mounts default-open',
     );
   }
   const app = new Hono();
@@ -159,6 +160,32 @@ export function createSyncularAdminRoutes(
     }
   });
 
+  app.get('/reactions', async (c) => {
+    try {
+      const status = c.req.query('status');
+      const type = c.req.query('type');
+      const allowed = new Set<ReactionStatus>([
+        'pending',
+        'leased',
+        'completed',
+        'dead-letter',
+      ]);
+      if (status !== undefined && !allowed.has(status as ReactionStatus)) {
+        throw new SyncError('sync.invalid_request', 'invalid reaction status');
+      }
+      const reactions = await admin.listReactions(partitionOf(c), {
+        ...(status !== undefined
+          ? { statuses: [status as ReactionStatus] }
+          : {}),
+        ...(type !== undefined ? { types: [type] } : {}),
+        limit: intParam(c.req.query('limit'), 100),
+      });
+      return Response.json({ reactions });
+    } catch (error) {
+      return jsonError(error);
+    }
+  });
+
   app.get('/rows/:table/:rowId', async (c) => {
     try {
       const row = await admin.inspectRow(

package/src/index.ts

@@ -1,8 +1,8 @@
 /**
- * Hono adapter (REVISE B2): a thin wrapper proving the embed boundary.
+ * Hono adapter: a thin wrapper proving the embed boundary.
  * Hono is a dependency of this adapter only, never of the server core.
- * Mounts the §1.1 routes: POST /sync and GET /segments/:segmentId
- * (realtime upgrades are runtime-specific and stay with the host).
+ * Mounts the §1.1 routes including sync, registered operations, segments, and
+ * blobs. Realtime upgrades are runtime-specific and stay with the host.
  */
 import {
   encodeSegmentBody,
@@ -11,6 +11,8 @@ import {
   handleBlobUpload,
   handleBlobUploadGrant,
   handleSegmentDownload,
+  handleRemoteOperation,
+  type RemoteOperationRegistry,
   handleSyncRequest,
   SSP2_CONTENT_TYPE,
   SyncError,
@@ -22,6 +24,7 @@ export * from './admin';
 
 export interface SyncularHonoOptions {
   readonly config: SyncServerConfig;
+  readonly operations?: RemoteOperationRegistry;
   /** Host authentication (§1.1); `null` ⇒ 401 `sync.auth_required`. */
   readonly authenticate: (
     request: Request,
@@ -67,6 +70,31 @@ export function createSyncularHono(options: SyncularHonoOptions): Hono {
     }
   });
 
+  app.post('/operations', async (c) => {
+    const contentType = c.req.header('content-type')?.split(';')[0]?.trim();
+    if (contentType !== 'application/vnd.syncular.operations.v1+json') {
+      return Response.json(
+        errorBody(new SyncError('operation.invalid_request')),
+        { status: 415 },
+      );
+    }
+    if (options.operations === undefined) {
+      return errorResponse(new SyncError('operation.unknown'));
+    }
+    const auth = await options.authenticate(c.req.raw);
+    if (auth === null)
+      return errorResponse(new SyncError('sync.auth_required'));
+    const bytes = new Uint8Array(await c.req.arrayBuffer());
+    const out = await handleRemoteOperation(
+      bytes,
+      { ...options.config, ...auth },
+      options.operations,
+    );
+    return c.body(out.slice().buffer as ArrayBuffer, 200, {
+      'Content-Type': 'application/vnd.syncular.operations.v1+json',
+    });
+  });
+
   app.get('/segments/:segmentId', async (c) => {
     const auth = await options.authenticate(c.req.raw);
     if (auth === null)