@thingd/sdk 0.31.0

package/dist/client/in-memory-thing-store.js

@@ -0,0 +1,270 @@
+const DEFAULT_LEASE_MS = 30_000;
+function uid() {
+    return typeof crypto !== "undefined" && typeof crypto.randomUUID === "function"
+        ? crypto.randomUUID()
+        : `${Date.now()}-${Math.random().toString(36).slice(2, 10)}`;
+}
+function now() {
+    return new Date().toISOString();
+}
+export class InMemoryThingStore {
+    objects = new Map();
+    events = new Map();
+    jobs = new Map();
+    links = new Map();
+    linkCounter = 0;
+    async put(collection, object) {
+        const key = `${collection}:${object.id}`;
+        const existing = this.objects.get(key);
+        const timestamp = now();
+        const stored = {
+            ...object,
+            id: object.id,
+            collection,
+            createdAt: existing?.data.createdAt ?? timestamp,
+            updatedAt: timestamp,
+            version: (existing?.data.version ?? 0) + 1,
+        };
+        this.objects.set(key, { collection, data: stored });
+        return stored;
+    }
+    async get(collection, id) {
+        const row = this.objects.get(`${collection}:${id}`);
+        return row ? row.data : null;
+    }
+    async delete(_collection, _id) {
+        const deleted = this.objects.delete(`${_collection}:${_id}`);
+        return { deleted };
+    }
+    async listObjects(collection, options) {
+        let items = Array.from(this.objects.values())
+            .filter((r) => r.collection === collection)
+            .map((r) => r.data);
+        if (options?.filter) {
+            const filter = options.filter;
+            items = items.filter((obj) => Object.entries(filter).every(([k, v]) => obj[k] === v));
+        }
+        if (options?.sortBy) {
+            const field = options.sortBy.field === "created_at"
+                ? "createdAt"
+                : options.sortBy.field === "updated_at"
+                    ? "updatedAt"
+                    : options.sortBy.field;
+            const dir = options.sortBy.direction === "desc" ? -1 : 1;
+            items.sort((a, b) => {
+                const va = a[field];
+                const vb = b[field];
+                if (va == null) {
+                    return 1;
+                }
+                if (vb == null) {
+                    return -1;
+                }
+                return va < vb ? -dir : va > vb ? dir : 0;
+            });
+        }
+        if (options?.offset) {
+            items = items.slice(options.offset);
+        }
+        if (options?.limit) {
+            items = items.slice(0, options.limit);
+        }
+        return items;
+    }
+    async appendEvent(stream, event) {
+        const streamEvents = this.events.get(stream) ?? [];
+        const sequence = streamEvents.length + 1;
+        const stored = {
+            ...event,
+            id: String(sequence),
+            stream,
+            sequence,
+            createdAt: now(),
+        };
+        streamEvents.push(stored);
+        this.events.set(stream, streamEvents);
+        return stored;
+    }
+    async listEvents(stream, options) {
+        let items;
+        if (stream) {
+            items = this.events.get(stream) ?? [];
+        }
+        else {
+            items = Array.from(this.events.values()).flat();
+        }
+        if (options?.fromSequence) {
+            items = items.filter((e) => e.sequence > (options.fromSequence ?? 0));
+        }
+        if (options?.limit) {
+            items = items.slice(0, options.limit);
+        }
+        return items;
+    }
+    async pushJob(queue, payload, options = {}) {
+        const timestamp = now();
+        const job = {
+            id: options.idempotencyKey ?? uid(),
+            queue,
+            payload,
+            status: "ready",
+            attempts: 0,
+            maxAttempts: options.maxAttempts ?? 3,
+            createdAt: timestamp,
+            availableAt: new Date(Date.now() + (options.delayMs ?? 0)).toISOString(),
+        };
+        const queueJobs = this.jobs.get(queue) ?? [];
+        queueJobs.push(job);
+        this.jobs.set(queue, queueJobs);
+        return job;
+    }
+    async claimJob(queue, options = {}) {
+        const queueJobs = this.jobs.get(queue);
+        if (!queueJobs) {
+            return null;
+        }
+        const now_ = new Date();
+        const idx = queueJobs.findIndex((c) => c.status === "ready" && c.availableAt <= now_.toISOString());
+        if (idx === -1) {
+            return null;
+        }
+        const job = queueJobs[idx];
+        job.status = "leased";
+        job.attempts += 1;
+        job.leasedAt = now_.toISOString();
+        job.leaseExpiresAt = new Date(now_.getTime() + (options.leaseMs ?? DEFAULT_LEASE_MS)).toISOString();
+        return job;
+    }
+    async ackJob(queue, jobId) {
+        const job = this.findJob(queue, jobId);
+        if (!job) {
+            return { ok: false, reason: "not_found" };
+        }
+        if (job.status !== "leased") {
+            return { ok: false, reason: "not_leased" };
+        }
+        job.status = "completed";
+        job.completedAt = now();
+        return { ok: true, job };
+    }
+    async nackJob(queue, jobId, options = {}) {
+        const job = this.findJob(queue, jobId);
+        if (!job) {
+            return { ok: false, reason: "not_found" };
+        }
+        if (job.status !== "leased") {
+            return { ok: false, reason: "not_leased" };
+        }
+        job.lastError = options.error;
+        if (job.attempts >= job.maxAttempts) {
+            job.status = "dead";
+            job.deadAt = now();
+        }
+        else {
+            job.status = "ready";
+            job.availableAt = new Date(Date.now() + (options.delayMs ?? 0)).toISOString();
+        }
+        return { ok: true, job };
+    }
+    async listJobs(queue) {
+        return this.jobs.get(queue) ?? [];
+    }
+    async listDeadJobs(queue) {
+        return (this.jobs.get(queue) ?? []).filter((j) => j.status === "dead");
+    }
+    async search(_query, _options = {}) {
+        return [];
+    }
+    async putBatch(collection, objects) {
+        return Promise.all(objects.map((obj) => this.put(collection, obj)));
+    }
+    async deleteBatch(collection, ids) {
+        let count = 0;
+        for (const id of ids) {
+            const result = await this.delete(collection, id);
+            if (result.deleted) {
+                count++;
+            }
+        }
+        return count;
+    }
+    async createLink(fromRef, linkType, toRef, weight, metadataJson) {
+        this.linkCounter++;
+        const link = {
+            id: uid(),
+            fromRef,
+            linkType,
+            toRef,
+            weight,
+            metadataJson: metadataJson ?? "{}",
+            createdAt: now(),
+        };
+        this.links.set(link.id, link);
+        return link;
+    }
+    async deleteLink(id) {
+        return this.links.delete(id);
+    }
+    async getLink(id) {
+        return this.links.get(id) ?? null;
+    }
+    async getNeighbors(reference, direction = "Both", options = {}) {
+        let items = Array.from(this.links.values()).filter((l) => {
+            if (direction === "Outgoing" || direction === "Both") {
+                if (l.fromRef === reference) {
+                    return true;
+                }
+            }
+            if (direction === "Incoming" || direction === "Both") {
+                if (l.toRef === reference) {
+                    return true;
+                }
+            }
+            return false;
+        });
+        if (options.linkType) {
+            items = items.filter((l) => l.linkType === options.linkType);
+        }
+        if (options.limit) {
+            items = items.slice(0, options.limit);
+        }
+        return items;
+    }
+    async countObjects() {
+        return this.objects.size;
+    }
+    async countEvents() {
+        return Array.from(this.events.values()).reduce((acc, e) => acc + e.length, 0);
+    }
+    async countActiveJobs() {
+        let active = 0;
+        for (const jobs of this.jobs.values()) {
+            active += jobs.filter((j) => j.status === "ready" || j.status === "leased").length;
+        }
+        return active;
+    }
+    async countDeadJobs() {
+        let dead = 0;
+        for (const jobs of this.jobs.values()) {
+            dead += jobs.filter((j) => j.status === "dead").length;
+        }
+        return dead;
+    }
+    async countLinks() {
+        return this.links.size;
+    }
+    async listCollections() {
+        const collections = new Set(Array.from(this.objects.values()).map((r) => r.collection));
+        return Array.from(collections);
+    }
+    async listStreams() {
+        return Array.from(this.events.keys());
+    }
+    async listQueues() {
+        return Array.from(this.jobs.keys());
+    }
+    async close() { }
+    findJob(queue, jobId) {
+        return (this.jobs.get(queue) ?? []).find((j) => j.id === jobId);
+    }
+}

package/dist/client/index.d.ts

@@ -0,0 +1,5 @@
+export type { Link, LinkDirection, LinkQueryOptions, ListEventsOptions, ListObjectsOptions, MemoryEvent, MemoryObject, MemoryQueue, MemorySearchOptions, MemorySearchResult, QueueClaimOptions, QueueJob, QueueJobOptions, QueueJobPayload, QueueJobResult, QueueJobStatus, QueueNackOptions, SortBy, SortDirection, StoredMemoryEvent, StoredMemoryObject, ThingDConnection, ThingDeleteResult, ThingStore, } from "../types.js";
+export { HttpThingStore, type HttpThingStoreOptions } from "./http-thing-store.js";
+export { InMemoryThingStore } from "./in-memory-thing-store.js";
+export { ThingD, type ThingDDriver, type ThingDOpenConfig, type ThingDOpenOptions, } from "./thingd.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/client/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/client/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,IAAI,EACJ,aAAa,EACb,gBAAgB,EAChB,iBAAiB,EACjB,kBAAkB,EAClB,WAAW,EACX,YAAY,EACZ,WAAW,EACX,mBAAmB,EACnB,kBAAkB,EAClB,iBAAiB,EACjB,QAAQ,EACR,eAAe,EACf,eAAe,EACf,cAAc,EACd,cAAc,EACd,gBAAgB,EAChB,MAAM,EACN,aAAa,EACb,iBAAiB,EACjB,kBAAkB,EAClB,gBAAgB,EAChB,iBAAiB,EACjB,UAAU,GACX,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,cAAc,EAAE,KAAK,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AACnF,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EACL,MAAM,EACN,KAAK,YAAY,EACjB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,GACvB,MAAM,aAAa,CAAC"}

package/dist/client/index.js

@@ -0,0 +1,3 @@
+export { HttpThingStore } from "./http-thing-store.js";
+export { InMemoryThingStore } from "./in-memory-thing-store.js";
+export { ThingD, } from "./thingd.js";

package/dist/client/thingd.d.ts

@@ -0,0 +1,46 @@
+import type { ListEventsOptions, ListObjectsOptions, MemoryEvent, MemoryObject, MemoryQueue, MemorySearchOptions, MemorySearchResult, StoredMemoryEvent, StoredMemoryObject, ThingDConnection, ThingDeleteResult, ThingStore } from "../types.js";
+export type ThingDDriver = "memory" | "http";
+export type ThingDOpenOptions = {
+    driver?: ThingDDriver;
+    store?: ThingStore;
+    authToken?: string;
+};
+export type ThingDOpenConfig = ThingDOpenOptions & {
+    path?: string;
+    url?: string;
+};
+export declare class ThingD implements ThingDConnection {
+    readonly path: string;
+    private readonly store;
+    static open(pathOrConfig?: string | ThingDOpenConfig, options?: ThingDOpenOptions): Promise<ThingD>;
+    private constructor();
+    put(collection: string, object: MemoryObject): Promise<StoredMemoryObject>;
+    get<T = StoredMemoryObject>(collection: string, id: string): Promise<T | null>;
+    delete(collection: string, id: string): Promise<ThingDeleteResult>;
+    listObjects<T = StoredMemoryObject>(collection: string, options?: ListObjectsOptions): Promise<T[]>;
+    search(query: string, options?: MemorySearchOptions): Promise<MemorySearchResult[]>;
+    searchObjects<T = StoredMemoryObject>(query: string, options?: MemorySearchOptions): Promise<T[]>;
+    putBatch(collection: string, objects: MemoryObject[]): Promise<StoredMemoryObject[]>;
+    deleteBatch(collection: string, ids: string[]): Promise<number>;
+    readonly events: {
+        append: (stream: string, event: MemoryEvent) => Promise<StoredMemoryEvent>;
+        list: <T = StoredMemoryEvent>(stream?: string, options?: ListEventsOptions) => Promise<T[]>;
+    };
+    queue(name: string): MemoryQueue;
+    readonly links: {
+        create: (fromRef: string, linkType: string, toRef: string, weight?: number, metadataJson?: string) => Promise<import("../types.js").Link>;
+        delete: (id: string) => Promise<boolean>;
+        get: (id: string) => Promise<import("../types.js").Link | null>;
+        neighbors: (reference: string, direction?: import("../types.js").LinkDirection, options?: import("../types.js").LinkQueryOptions) => Promise<import("../types.js").Link[]>;
+    };
+    close(): Promise<void>;
+    countObjects(): Promise<number>;
+    countEvents(): Promise<number>;
+    countActiveJobs(): Promise<number>;
+    countDeadJobs(): Promise<number>;
+    countLinks(): Promise<number>;
+    listCollections(): Promise<string[]>;
+    listStreams(): Promise<string[]>;
+    listQueues(): Promise<string[]>;
+}
+//# sourceMappingURL=thingd.d.ts.map

package/dist/client/thingd.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"thingd.d.ts","sourceRoot":"","sources":["../../src/client/thingd.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,iBAAiB,EACjB,kBAAkB,EAClB,WAAW,EACX,YAAY,EACZ,WAAW,EACX,mBAAmB,EACnB,kBAAkB,EAKlB,iBAAiB,EACjB,kBAAkB,EAClB,gBAAgB,EAChB,iBAAiB,EACjB,UAAU,EACX,MAAM,aAAa,CAAC;AAErB,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG,MAAM,CAAC;AAE7C,MAAM,MAAM,iBAAiB,GAAG;IAC9B,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG,iBAAiB,GAAG;IACjD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,qBAAa,MAAO,YAAW,gBAAgB;IAU3C,QAAQ,CAAC,IAAI,EAAE,MAAM;IACrB,OAAO,CAAC,QAAQ,CAAC,KAAK;WAVX,IAAI,CACf,YAAY,CAAC,EAAE,MAAM,GAAG,gBAAgB,EACxC,OAAO,GAAE,iBAAsB,GAC9B,OAAO,CAAC,MAAM,CAAC;IAKlB,OAAO;IAKP,GAAG,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAI1E,GAAG,CAAC,CAAC,GAAG,kBAAkB,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC;IAI9E,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAIlE,WAAW,CAAC,CAAC,GAAG,kBAAkB,EAChC,UAAU,EAAE,MAAM,EAClB,OAAO,CAAC,EAAE,kBAAkB,GAC3B,OAAO,CAAC,CAAC,EAAE,CAAC;IAIf,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,GAAE,mBAAwB,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC;IAIjF,aAAa,CAAC,CAAC,GAAG,kBAAkB,EACxC,KAAK,EAAE,MAAM,EACb,OAAO,GAAE,mBAAwB,GAChC,OAAO,CAAC,CAAC,EAAE,CAAC;IAOT,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC;IAOpF,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;IAOrE,QAAQ,CAAC,MAAM;yBACI,MAAM,SAAS,WAAW,KAAG,OAAO,CAAC,iBAAiB,CAAC;eAEjE,CAAC,+BAA+B,MAAM,YAAY,iBAAiB,KAAG,OAAO,CAAC,CAAC,EAAE,CAAC;MAEzF;IAEF,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW;IAYhC,QAAQ,CAAC,KAAK;0BAED,MAAM,YACL,MAAM,SACT,MAAM,WACJ,MAAM,iBACA,MAAM;qBAIV,MAAM;kBACT,MAAM;+BAEH,MAAM,cACN,OAAO,aAAa,EAAE,aAAa,YACrC,OAAO,aAAa,EAAE,gBAAgB;MAEjD;IAEI,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAItB,YAAY,IAAI,OAAO,CAAC,MAAM,CAAC;IAI/B,WAAW,IAAI,OAAO,CAAC,MAAM,CAAC;IAI9B,eAAe,IAAI,OAAO,CAAC,MAAM,CAAC;IAIlC,aAAa,IAAI,OAAO,CAAC,MAAM,CAAC;IAIhC,UAAU,IAAI,OAAO,CAAC,MAAM,CAAC;IAI7B,eAAe,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IAIpC,WAAW,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IAIhC,UAAU,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;CAGtC"}

package/dist/client/thingd.js

@@ -0,0 +1,115 @@
+import { HttpThingStore } from "../client/http-thing-store.js";
+import { InMemoryThingStore } from "../client/in-memory-thing-store.js";
+export class ThingD {
+    path;
+    store;
+    static async open(pathOrConfig, options = {}) {
+        const resolved = resolveOpenOptions(pathOrConfig, options);
+        return new ThingD(resolved.path, await openStore(resolved.path, resolved));
+    }
+    constructor(path, store) {
+        this.path = path;
+        this.store = store;
+    }
+    put(collection, object) {
+        return this.store.put(collection, object);
+    }
+    get(collection, id) {
+        return this.store.get(collection, id);
+    }
+    delete(collection, id) {
+        return this.store.delete(collection, id);
+    }
+    listObjects(collection, options) {
+        return this.store.listObjects?.(collection, options) ?? Promise.resolve([]);
+    }
+    search(query, options = {}) {
+        return this.store.search(query, options);
+    }
+    async searchObjects(query, options = {}) {
+        const results = await this.search(query, options);
+        return results
+            .filter((r) => r.kind === "object")
+            .map((r) => r.value);
+    }
+    async putBatch(collection, objects) {
+        return (this.store.putBatch?.(collection, objects) ??
+            Promise.reject(new Error("Batch put not supported by this driver")));
+    }
+    async deleteBatch(collection, ids) {
+        return (this.store.deleteBatch?.(collection, ids) ??
+            Promise.reject(new Error("Batch delete not supported by this driver")));
+    }
+    events = {
+        append: (stream, event) => this.store.appendEvent(stream, event),
+        list: (stream, options) => this.store.listEvents(stream, options),
+    };
+    queue(name) {
+        return {
+            push: (payload, options) => this.store.pushJob(name, payload, options),
+            claim: (options) => this.store.claimJob(name, options),
+            ack: (jobId) => this.store.ackJob(name, jobId),
+            nack: (jobId, options) => this.store.nackJob(name, jobId, options),
+            list: () => this.store.listJobs(name),
+            dead: () => this.store.listDeadJobs(name),
+        };
+    }
+    links = {
+        create: (fromRef, linkType, toRef, weight, metadataJson) => this.store.createLink?.(fromRef, linkType, toRef, weight, metadataJson) ??
+            Promise.reject(new Error("Graph links not supported by this driver")),
+        delete: (id) => this.store.deleteLink?.(id) ?? Promise.resolve(false),
+        get: (id) => this.store.getLink?.(id) ?? Promise.resolve(null),
+        neighbors: (reference, direction = "Both", options = {}) => this.store.getNeighbors?.(reference, direction, options) ?? Promise.resolve([]),
+    };
+    async close() {
+        await this.store.close?.();
+    }
+    async countObjects() {
+        return this.store.countObjects?.() ?? 0;
+    }
+    async countEvents() {
+        return this.store.countEvents?.() ?? 0;
+    }
+    async countActiveJobs() {
+        return this.store.countActiveJobs?.() ?? 0;
+    }
+    async countDeadJobs() {
+        return this.store.countDeadJobs?.() ?? 0;
+    }
+    async countLinks() {
+        return this.store.countLinks?.() ?? 0;
+    }
+    async listCollections() {
+        return this.store.listCollections?.() ?? [];
+    }
+    async listStreams() {
+        return this.store.listStreams?.() ?? [];
+    }
+    async listQueues() {
+        return this.store.listQueues?.() ?? [];
+    }
+}
+function resolveOpenOptions(pathOrConfig, options) {
+    const config = typeof pathOrConfig === "string" ? { path: pathOrConfig } : (pathOrConfig ?? {});
+    const path = config.url ?? config.path ?? ":memory:";
+    const driver = options.driver ?? config.driver ?? (isHttpPath(path) ? "http" : "memory");
+    return {
+        ...config,
+        ...options,
+        path,
+        driver,
+        authToken: options.authToken ?? config.authToken,
+    };
+}
+function isHttpPath(path) {
+    return path.startsWith("http://") || path.startsWith("https://") || path.startsWith("thingd://");
+}
+async function openStore(path, options) {
+    if (options.store) {
+        return options.store;
+    }
+    if (options.driver === "http") {
+        return HttpThingStore.open({ url: path, authToken: options.authToken });
+    }
+    return new InMemoryThingStore();
+}

package/dist/index.d.ts

@@ -0,0 +1,11 @@
+export { appendMcpAuditEvent, createThingdMcpServer, jsonResult, parseCollectionAllowlist, parsePayloadSizeLimit, type RegisterThingdToolsOptions, readMcpHardeningOptionsFromEnv, registerThingdTools, resolveThingdMcpAuditOptions, type ThingdMcpAuditMetadata, type ThingdMcpAuditOptions, type ThingdMcpHardeningOptions, type ThingdMcpServerOptions, } from "./mcp/index.js";
+export { handleRestRequest, parseFilter, parseIntParam, parseSortBy, readBody, sendData, sendDataList, sendError, sendJson, } from "./rest/index.js";
+export type { CloudThingStoreOptions } from "./stores/cloud-thing-store.js";
+export { CloudThingStore } from "./stores/cloud-thing-store.js";
+export { InMemoryThingStore } from "./stores/in-memory-thing-store.js";
+export { NativeThingStore } from "./stores/native-thing-store.js";
+export type { ThingDDriver, ThingDOpenConfig, ThingDOpenOptions } from "./thingd.js";
+export { ThingD } from "./thingd.js";
+export type { Link, LinkDirection, LinkQueryOptions, ListEventsOptions, ListObjectsOptions, MemoryEvent, MemoryObject, MemoryQueue, MemorySearchOptions, MemorySearchResult, QueueClaimOptions, QueueJob, QueueJobOptions, QueueJobPayload, QueueJobResult, QueueJobStatus, QueueNackOptions, SortBy, SortDirection, StoredMemoryEvent, StoredMemoryObject, ThingDConnection, ThingDeleteResult, ThingStore, } from "./types.js";
+export { SDK_VERSION } from "./version.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EACL,mBAAmB,EACnB,qBAAqB,EACrB,UAAU,EACV,wBAAwB,EACxB,qBAAqB,EACrB,KAAK,0BAA0B,EAC/B,8BAA8B,EAC9B,mBAAmB,EACnB,4BAA4B,EAC5B,KAAK,sBAAsB,EAC3B,KAAK,qBAAqB,EAC1B,KAAK,yBAAyB,EAC9B,KAAK,sBAAsB,GAC5B,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,iBAAiB,EACjB,WAAW,EACX,aAAa,EACb,WAAW,EACX,QAAQ,EACR,QAAQ,EACR,YAAY,EACZ,SAAS,EACT,QAAQ,GACT,MAAM,iBAAiB,CAAC;AACzB,YAAY,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AAC5E,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AACvE,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAClE,YAAY,EAAE,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AACrF,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,YAAY,EACV,IAAI,EACJ,aAAa,EACb,gBAAgB,EAChB,iBAAiB,EACjB,kBAAkB,EAClB,WAAW,EACX,YAAY,EACZ,WAAW,EACX,mBAAmB,EACnB,kBAAkB,EAClB,iBAAiB,EACjB,QAAQ,EACR,eAAe,EACf,eAAe,EACf,cAAc,EACd,cAAc,EACd,gBAAgB,EAChB,MAAM,EACN,aAAa,EACb,iBAAiB,EACjB,kBAAkB,EAClB,gBAAgB,EAChB,iBAAiB,EACjB,UAAU,GACX,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC"}

package/dist/index.js

@@ -0,0 +1,9 @@
+// MCP server (tool handlers + factory)
+export { appendMcpAuditEvent, createThingdMcpServer, jsonResult, parseCollectionAllowlist, parsePayloadSizeLimit, readMcpHardeningOptionsFromEnv, registerThingdTools, resolveThingdMcpAuditOptions, } from "./mcp/index.js";
+// REST API (route handlers + helpers)
+export { handleRestRequest, parseFilter, parseIntParam, parseSortBy, readBody, sendData, sendDataList, sendError, sendJson, } from "./rest/index.js";
+export { CloudThingStore } from "./stores/cloud-thing-store.js";
+export { InMemoryThingStore } from "./stores/in-memory-thing-store.js";
+export { NativeThingStore } from "./stores/native-thing-store.js";
+export { ThingD } from "./thingd.js";
+export { SDK_VERSION } from "./version.js";

package/dist/mcp/audit.d.ts

@@ -0,0 +1,27 @@
+import type { ThingD } from "../thingd.js";
+export type ThingdMcpAuditOptions = {
+    enabled?: boolean;
+    actor?: string;
+    source?: string;
+    stream?: string;
+};
+export type ThingdMcpAuditMetadata = {
+    actor?: string;
+    source?: string;
+};
+type ResolvedThingdMcpAuditOptions = {
+    enabled: boolean;
+    actor: string;
+    source: string;
+    stream: string;
+};
+type ThingdMcpAuditEventOptions = {
+    action: string;
+    target: Record<string, unknown>;
+    metadata?: ThingdMcpAuditMetadata;
+    result?: Record<string, unknown>;
+};
+export declare function resolveThingdMcpAuditOptions(options: ThingdMcpAuditOptions | false | undefined): ResolvedThingdMcpAuditOptions;
+export declare function appendMcpAuditEvent(db: ThingD, options: ResolvedThingdMcpAuditOptions, event: ThingdMcpAuditEventOptions): Promise<void>;
+export {};
+//# sourceMappingURL=audit.d.ts.map

package/dist/mcp/audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../src/mcp/audit.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAG3C,MAAM,MAAM,qBAAqB,GAAG;IAClC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,KAAK,6BAA6B,GAAG;IACnC,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,KAAK,0BAA0B,GAAG;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,QAAQ,CAAC,EAAE,sBAAsB,CAAC;IAClC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC,CAAC;AAMF,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,qBAAqB,GAAG,KAAK,GAAG,SAAS,GACjD,6BAA6B,CAgB/B;AAED,wBAAsB,mBAAmB,CACvC,EAAE,EAAE,MAAM,EACV,OAAO,EAAE,6BAA6B,EACtC,KAAK,EAAE,0BAA0B,GAChC,OAAO,CAAC,IAAI,CAAC,CAkBf"}

package/dist/mcp/audit.js

@@ -0,0 +1,36 @@
+const DEFAULT_AUDIT_STREAM = "__thingd:mcp:audit";
+const DEFAULT_AUDIT_ACTOR = "mcp-client";
+const DEFAULT_AUDIT_SOURCE = "thingd-mcp";
+export function resolveThingdMcpAuditOptions(options) {
+    if (options === false || options?.enabled === false) {
+        return {
+            enabled: false,
+            actor: DEFAULT_AUDIT_ACTOR,
+            source: DEFAULT_AUDIT_SOURCE,
+            stream: DEFAULT_AUDIT_STREAM,
+        };
+    }
+    return {
+        enabled: true,
+        actor: options?.actor ?? DEFAULT_AUDIT_ACTOR,
+        source: options?.source ?? DEFAULT_AUDIT_SOURCE,
+        stream: options?.stream ?? DEFAULT_AUDIT_STREAM,
+    };
+}
+export async function appendMcpAuditEvent(db, options, event) {
+    if (!options.enabled) {
+        return;
+    }
+    const actor = event.metadata?.actor ?? options.actor;
+    const source = event.metadata?.source ?? options.source;
+    const auditEvent = {
+        type: `mcp.${event.action}`,
+        text: `MCP ${event.action} by ${actor}`,
+        actor,
+        source,
+        target: event.target,
+        result: event.result,
+        at: new Date().toISOString(),
+    };
+    await db.events.append(options.stream, auditEvent);
+}

package/dist/mcp/config.d.ts

@@ -0,0 +1,22 @@
+export type ThingdMcpHardeningOptions = {
+    /** Comma-separated collection allowlist from THINGD_MCP_COLLECTIONS. Empty = all allowed. */
+    collectionAllowlist?: Set<string>;
+    /** When true, all write tools are rejected. Set via THINGD_MCP_READ_ONLY=true. */
+    readOnly?: boolean;
+    /** Maximum HTTP request body in bytes. Set via THINGD_MCP_MAX_PAYLOAD_BYTES. Default 512 KB. */
+    maxPayloadBytes?: number;
+};
+/**
+ * Parse THINGD_MCP_COLLECTIONS into a Set.
+ * An empty string or missing env var means all collections are allowed.
+ */
+export declare function parseCollectionAllowlist(value: string | undefined): Set<string> | undefined;
+/**
+ * Parse THINGD_MCP_MAX_PAYLOAD_BYTES. Defaults to 512 KB if unset or zero.
+ */
+export declare function parsePayloadSizeLimit(value: string | undefined, defaultBytes?: number): number;
+/**
+ * Read all Phase-6 MCP hardening options from the environment.
+ */
+export declare function readMcpHardeningOptionsFromEnv(env: Record<string, string | undefined>): ThingdMcpHardeningOptions;
+//# sourceMappingURL=config.d.ts.map

package/dist/mcp/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/mcp/config.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,yBAAyB,GAAG;IACtC,6FAA6F;IAC7F,mBAAmB,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAClC,kFAAkF;IAClF,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,gGAAgG;IAChG,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEF;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,SAAS,CAW3F;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAAE,YAAY,SAAU,GAAG,MAAM,CAW/F;AAmBD;;GAEG;AACH,wBAAgB,8BAA8B,CAC5C,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GACtC,yBAAyB,CAQ3B"}

package/dist/mcp/config.js

@@ -0,0 +1,52 @@
+/**
+ * Parse THINGD_MCP_COLLECTIONS into a Set.
+ * An empty string or missing env var means all collections are allowed.
+ */
+export function parseCollectionAllowlist(value) {
+    if (!value?.trim()) {
+        return undefined;
+    }
+    const names = value
+        .split(",")
+        .map((s) => s.trim())
+        .filter(Boolean);
+    return names.length > 0 ? new Set(names) : undefined;
+}
+/**
+ * Parse THINGD_MCP_MAX_PAYLOAD_BYTES. Defaults to 512 KB if unset or zero.
+ */
+export function parsePayloadSizeLimit(value, defaultBytes = 524_288) {
+    if (!value) {
+        return defaultBytes;
+    }
+    const n = Number.parseInt(value, 10);
+    if (!Number.isInteger(n) || n <= 0) {
+        throw new Error(`Invalid THINGD_MCP_MAX_PAYLOAD_BYTES: ${value}`);
+    }
+    return n;
+}
+function parseBooleanFlag(value, name) {
+    if (!value) {
+        return false;
+    }
+    const normalized = value.toLowerCase();
+    if (["1", "true", "yes", "on"].includes(normalized)) {
+        return true;
+    }
+    if (["0", "false", "no", "off"].includes(normalized)) {
+        return false;
+    }
+    throw new Error(`Invalid ${name}: expected true or false`);
+}
+/**
+ * Read all Phase-6 MCP hardening options from the environment.
+ */
+export function readMcpHardeningOptionsFromEnv(env) {
+    return {
+        collectionAllowlist: parseCollectionAllowlist(env.THINGD_MCP_COLLECTIONS),
+        readOnly: env.THINGD_MCP_READ_ONLY
+            ? parseBooleanFlag(env.THINGD_MCP_READ_ONLY, "THINGD_MCP_READ_ONLY")
+            : undefined,
+        maxPayloadBytes: parsePayloadSizeLimit(env.THINGD_MCP_MAX_PAYLOAD_BYTES),
+    };
+}

package/dist/mcp/index.d.ts

@@ -0,0 +1,6 @@
+export { appendMcpAuditEvent, resolveThingdMcpAuditOptions, type ThingdMcpAuditMetadata, type ThingdMcpAuditOptions, } from "./audit.js";
+export { parseCollectionAllowlist, parsePayloadSizeLimit, readMcpHardeningOptionsFromEnv, type ThingdMcpHardeningOptions, } from "./config.js";
+export { jsonResult } from "./result.js";
+export { createThingdMcpServer, type ThingdMcpServerOptions } from "./server.js";
+export { type RegisterThingdToolsOptions, registerThingdTools } from "./tools.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/mcp/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/mcp/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,4BAA4B,EAC5B,KAAK,sBAAsB,EAC3B,KAAK,qBAAqB,GAC3B,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,wBAAwB,EACxB,qBAAqB,EACrB,8BAA8B,EAC9B,KAAK,yBAAyB,GAC/B,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,qBAAqB,EAAE,KAAK,sBAAsB,EAAE,MAAM,aAAa,CAAC;AACjF,OAAO,EAAE,KAAK,0BAA0B,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC"}

package/dist/mcp/index.js

@@ -0,0 +1,5 @@
+export { appendMcpAuditEvent, resolveThingdMcpAuditOptions, } from "./audit.js";
+export { parseCollectionAllowlist, parsePayloadSizeLimit, readMcpHardeningOptionsFromEnv, } from "./config.js";
+export { jsonResult } from "./result.js";
+export { createThingdMcpServer } from "./server.js";
+export { registerThingdTools } from "./tools.js";

package/dist/mcp/result.d.ts

@@ -0,0 +1,3 @@
+import type { CallToolResult } from "@modelcontextprotocol/sdk/types.js";
+export declare function jsonResult(value: unknown): CallToolResult;
+//# sourceMappingURL=result.d.ts.map

package/dist/mcp/result.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"result.d.ts","sourceRoot":"","sources":["../../src/mcp/result.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AAEzE,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,cAAc,CASzD"}