@voyant-travel/apps 0.9.0 → 0.10.0

package/dist/routes-openapi.d.ts

@@ -89,6 +89,7 @@ export declare const authorizeAppOAuthRoute: {
                         release_id: z.ZodString;
                         redirect_uri: z.ZodString;
                         state: z.ZodString;
+                        nonce: z.ZodOptional<z.ZodString>;
                         code_challenge: z.ZodString;
                         code_challenge_method: z.ZodLiteral<"S256">;
                         actor_id: z.ZodOptional<z.ZodString>;
@@ -382,6 +383,106 @@ export declare const installAppRoute: {
 } & {
     getRoutingPath(): "/install";
 };
+export declare const resolveMarketplaceInstallIntentRoute: {
+    method: "post";
+    path: "/marketplace/install-intents/resolve";
+    request: {
+        body: {
+            required: boolean;
+            content: {
+                "application/json": {
+                    schema: z.ZodObject<{
+                        intent: z.ZodString;
+                    }, z.core.$strict>;
+                };
+            };
+        };
+    };
+    responses: {
+        201: {
+            description: string;
+            content: {
+                "application/json": {
+                    schema: z.ZodObject<{
+                        data: z.ZodObject<{
+                            appId: z.ZodString;
+                            releaseId: z.ZodString;
+                            acquisitionId: z.ZodString;
+                            created: z.ZodBoolean;
+                        }, z.core.$strict>;
+                    }, z.core.$strip>;
+                };
+            };
+        };
+        404: {
+            description: string;
+            content: {
+                "application/json": {
+                    schema: z.ZodObject<{
+                        error: z.ZodString;
+                    }, z.core.$strip>;
+                };
+            };
+        };
+        501: {
+            description: string;
+            content: {
+                "application/json": {
+                    schema: z.ZodObject<{
+                        error: z.ZodString;
+                    }, z.core.$strip>;
+                };
+            };
+        };
+    };
+} & {
+    getRoutingPath(): "/marketplace/install-intents/resolve";
+};
+export declare const createMarketplaceSetupHandoffRoute: {
+    method: "post";
+    path: "/installations/{installationId}/setup-handoff";
+    request: {
+        params: z.ZodObject<{
+            installationId: z.ZodString;
+        }, z.core.$strip>;
+    };
+    responses: {
+        201: {
+            description: string;
+            content: {
+                "application/json": {
+                    schema: z.ZodObject<{
+                        data: z.ZodObject<{
+                            redirectUrl: z.ZodString;
+                        }, z.core.$strict>;
+                    }, z.core.$strip>;
+                };
+            };
+        };
+        404: {
+            description: string;
+            content: {
+                "application/json": {
+                    schema: z.ZodObject<{
+                        error: z.ZodString;
+                    }, z.core.$strip>;
+                };
+            };
+        };
+        501: {
+            description: string;
+            content: {
+                "application/json": {
+                    schema: z.ZodObject<{
+                        error: z.ZodString;
+                    }, z.core.$strip>;
+                };
+            };
+        };
+    };
+} & {
+    getRoutingPath(): "/installations/:installationId/setup-handoff";
+};
 export declare const listAppInstallationsRoute: {
     method: "get";
     path: "/installations";

package/dist/routes-openapi.js

@@ -1,5 +1,6 @@
 import { createRoute, z } from "@hono/zod-openapi";
 import { activateInstallationBodySchema, appCredentialRevocationSchema, appInstallationAuditQuerySchema, appInstallationListQuerySchema, appListQuerySchema, appOAuthAuthorizeQuerySchema, appOAuthTokenSchema, appSessionTokenExchangeSchema, appSessionTokenIssueSchema, appWebhookReplaySchema, createCustomAppRegistrationSchema, installAppSchema, lifecycleActionBodySchema, releaseManifestFetchSchema, releaseManifestUploadSchema, } from "./contracts.js";
+import { marketplaceInstallIntentResultSchema, marketplaceSetupHandoffResultSchema, resolveMarketplaceInstallIntentSchema, } from "./marketplace-acquisition.js";
 const appIdParamSchema = z.object({ appId: z.string().min(1) });
 const installationIdParamSchema = z.object({ installationId: z.string().min(1) });
 const errorSchema = z.object({ error: z.string() });
@@ -100,6 +101,26 @@ export const installAppRoute = createRoute({
     request: { body: requiredJsonBody(installAppSchema) },
     responses: { 201: jsonContent(dataEnvelopeSchema, "Installed app") },
 });
+export const resolveMarketplaceInstallIntentRoute = createRoute({
+    method: "post",
+    path: "/marketplace/install-intents/resolve",
+    request: { body: requiredJsonBody(resolveMarketplaceInstallIntentSchema) },
+    responses: {
+        201: jsonContent(marketplaceInstallIntentResultSchema, "Admitted Marketplace install intent"),
+        404: jsonContent(errorSchema, "Install intent unavailable"),
+        501: jsonContent(errorSchema, "Managed Marketplace is not configured"),
+    },
+});
+export const createMarketplaceSetupHandoffRoute = createRoute({
+    method: "post",
+    path: "/installations/{installationId}/setup-handoff",
+    request: { params: installationIdParamSchema },
+    responses: {
+        201: jsonContent(marketplaceSetupHandoffResultSchema, "Created one-time app setup handoff"),
+        404: jsonContent(errorSchema, "Marketplace installation unavailable"),
+        501: jsonContent(errorSchema, "Managed Marketplace is not configured"),
+    },
+});
 export const listAppInstallationsRoute = createRoute({
     method: "get",
     path: "/installations",

package/dist/routes.d.ts

@@ -3,7 +3,7 @@ import type { EventBus } from "@voyant-travel/core/events";
 import type { createCustomFieldsService } from "@voyant-travel/custom-fields";
 import { type AccessCatalog } from "@voyant-travel/types/api-keys";
 import type { PostgresJsDatabase } from "drizzle-orm/postgres-js";
-import type { ManagedAppInstallationAuthority } from "./runtime-port.js";
+import type { ManagedAppInstallationAuthority, ManagedMarketplaceAcquisitionResolver } from "./runtime-port.js";
 import { type AppsServiceOptions } from "./service.js";
 type CustomFieldsService = ReturnType<typeof createCustomFieldsService>;
 type Env = {
@@ -38,6 +38,8 @@ export interface AppsAdminRouteOptions extends AppsServiceOptions {
     platformApiVersion?: string;
     eventBus?: EventBus;
     customFields?: CustomFieldsService;
+    /** Host-verified Marketplace acquisition and setup authority. */
+    managedMarketplace?: ManagedMarketplaceAcquisitionResolver;
 }
 export declare function createAppsAdminRoutes(options?: AppsAdminRouteOptions): OpenAPIHono<Env, {}, "/">;
 export declare function resolveViewerRemoteAppScopes(scopes: readonly string[], catalog: AccessCatalog | undefined): string[];

package/dist/routes.js

@@ -1,13 +1,17 @@
 import { OpenAPIHono } from "@hono/zod-openapi";
 import { openApiValidationHook, parseJsonBody, parseQuery, RequestValidationError, requireUserId, } from "@voyant-travel/hono";
 import { hasApiKeyPermission, permissionStringsToPermissions, } from "@voyant-travel/types/api-keys";
+import { eq } from "drizzle-orm";
 import { z } from "zod";
 import { grantableRemoteAppScopes } from "./consent.js";
 import { activateInstallationBodySchema, appCredentialRevocationSchema, appInstallationAuditQuerySchema, appInstallationListQuerySchema, appListQuerySchema, appOAuthAuthorizeQuerySchema, appOAuthTokenSchema, appSessionTokenExchangeSchema, appSessionTokenIssueSchema, appWebhookReplaySchema, createCustomAppRegistrationSchema, installAppSchema, lifecycleActionBodySchema, releaseManifestFetchSchema, releaseManifestUploadSchema, } from "./contracts.js";
 import { listAppReleases, listInstallationAudit, listInstallationSummaries, loadInstallationDetail, } from "./installation-read-model.js";
 import { createAppInstallationService } from "./installation-service.js";
+import { createMarketplaceAcquisitionService, resolveMarketplaceInstallIntentSchema, } from "./marketplace-acquisition.js";
+import { buildAppOAuthCallbackUrl } from "./oauth-redirect.js";
 import { createAppOAuthService } from "./oauth-service.js";
-import { activateAppInstallationRoute, authorizeAppOAuthRoute, createAppReleaseRoute, createCustomAppRoute, exchangeAppSessionTokenRoute, fetchAppReleaseRoute, getAppInstallationRoute, getAppRoute, installAppRoute, issueAppOAuthTokenRoute, issueAppSessionTokenRoute, listAppInstallationAuditRoute, listAppInstallationsRoute, listAppReleasesRoute, listAppsRoute, listAppWebhooksRoute, pauseAppInstallationRoute, previewAppInstallationPurgeRoute, replayAppWebhookRoute, resumeAppInstallationRoute, revokeAppInstallationCredentialsRoute, uninstallAppInstallationRoute, } from "./routes-openapi.js";
+import { activateAppInstallationRoute, authorizeAppOAuthRoute, createAppReleaseRoute, createCustomAppRoute, createMarketplaceSetupHandoffRoute, exchangeAppSessionTokenRoute, fetchAppReleaseRoute, getAppInstallationRoute, getAppRoute, installAppRoute, issueAppOAuthTokenRoute, issueAppSessionTokenRoute, listAppInstallationAuditRoute, listAppInstallationsRoute, listAppReleasesRoute, listAppsRoute, listAppWebhooksRoute, pauseAppInstallationRoute, previewAppInstallationPurgeRoute, replayAppWebhookRoute, resolveMarketplaceInstallIntentRoute, resumeAppInstallationRoute, revokeAppInstallationCredentialsRoute, uninstallAppInstallationRoute, } from "./routes-openapi.js";
+import { apps } from "./schema.js";
 import { createAppsService } from "./service.js";
 import { createAppSessionTokenService } from "./session-token-service.js";
 import { listAppWebhookHealth, replayAppWebhookDelivery } from "./webhook-delivery.js";
@@ -16,6 +20,13 @@ const installationIdParamSchema = z.object({ installationId: z.string().min(1) }
 export function createAppsAdminRoutes(options = {}) {
     const routes = new OpenAPIHono({ defaultHook: openApiValidationHook });
     const service = createAppsService(options);
+    const marketplace = options.managedMarketplace
+        ? createMarketplaceAcquisitionService({
+            eventCatalog: options.eventCatalog,
+            resolveAcquisitionIntent: options.managedMarketplace.resolveAcquisitionIntent,
+            createSetupHandoff: options.managedMarketplace.createSetupHandoff,
+        })
+        : null;
     const installations = createAppInstallationService({
         deploymentId: options.oauth?.deploymentId ?? options.deploymentId,
         managedInstallation: options.oauth?.managedInstallation,
@@ -62,9 +73,12 @@ export function createAppsAdminRoutes(options = {}) {
             operatorGrantedScopes: resolveOperatorGrantableRemoteAppScopes(c.get("scopes") ?? [], oauthAccessCatalog),
             grantedOptionalScopes: splitScopes(body.optional_scopes),
         });
-        const redirectUrl = new URL(result.redirectUri);
-        redirectUrl.searchParams.set("code", result.code);
-        redirectUrl.searchParams.set("state", result.state);
+        const redirectUrl = buildAppOAuthCallbackUrl({
+            redirectUri: result.redirectUri,
+            code: result.code,
+            state: result.state,
+            ...(body.nonce ? { nonce: body.nonce } : {}),
+        });
         return c.json({ data: { redirectUrl: redirectUrl.toString(), state: result.state } }, 200);
     });
     routes.openapi(issueAppOAuthTokenRoute, async (c) => {
@@ -144,6 +158,24 @@ export function createAppsAdminRoutes(options = {}) {
         });
         return c.json({ data: result }, 201);
     });
+    routes.openapi(resolveMarketplaceInstallIntentRoute, async (c) => {
+        if (!marketplace)
+            return c.json({ error: "Managed Marketplace is not configured" }, 501);
+        const body = await parseJsonBody(c, resolveMarketplaceInstallIntentSchema);
+        const data = await marketplace.resolveAndAcquire(c.get("db"), {
+            intent: body.intent,
+            actorId: requireUserId(c),
+        });
+        return c.json({ data }, 201);
+    });
+    routes.openapi(createMarketplaceSetupHandoffRoute, async (c) => {
+        if (!marketplace)
+            return c.json({ error: "Managed Marketplace is not configured" }, 501);
+        requireUserId(c);
+        const { installationId } = parseInstallationParams(c.req.param());
+        const data = await marketplace.createSetupHandoff(c.get("db"), installationId);
+        return c.json({ data }, 201);
+    });
     routes.openapi(listAppInstallationsRoute, async (c) => {
         const query = parseQuery(c, appInstallationListQuerySchema);
         return c.json(await listInstallationSummaries(c.get("db"), query), 200);
@@ -185,6 +217,22 @@ export function createAppsAdminRoutes(options = {}) {
             installationId,
             actorId: body.actorId,
         });
+        if (options.managedMarketplace) {
+            const [registration] = await c
+                .get("db")
+                .select({ distribution: apps.distribution })
+                .from(apps)
+                .where(eq(apps.id, result.installation.appId))
+                .limit(1);
+            if (registration?.distribution === "marketplace") {
+                await options.managedMarketplace.notifyInstallationLifecycle({
+                    event: "uninstalled",
+                    installationId: result.installation.id,
+                    appId: result.installation.appId,
+                    releaseId: result.installation.releaseId,
+                });
+            }
+        }
         return c.json({ data: result }, 200);
     });
     routes.openapi(activateAppInstallationRoute, async (c) => {

package/dist/runtime-contributor.test.js

@@ -1,6 +1,6 @@
 import { describe, expect, it } from "vitest";
 import { createAppsRuntimePortContribution } from "./runtime-contributor.js";
-import { appsManagedAuthRuntimePort } from "./runtime-port.js";
+import { appsManagedAuthRuntimePort, appsManagedMarketplaceRuntimePort } from "./runtime-port.js";
 function host(values) {
     return {
         hasRuntimePort: () => false,
@@ -52,4 +52,39 @@ describe("createAppsRuntimePortContribution", () => {
             releaseId: "release_2",
         })).resolves.toEqual({ contractGeneration: 9 });
     });
+    it("requires both opaque acquisition resolution and trusted setup handoff", () => {
+        expect(() => appsManagedMarketplaceRuntimePort.test({
+            deploymentId: "deployment-1",
+            acquisitionResolver: {
+                resolveAcquisitionIntent: async () => null,
+                createSetupHandoff: async () => ({
+                    redirectUrl: "https://app.example.com/setup?code=opaque",
+                }),
+                notifyInstallationLifecycle: async () => undefined,
+            },
+        })).not.toThrow();
+        expect(() => appsManagedMarketplaceRuntimePort.test({
+            deploymentId: "deployment-1",
+            acquisitionResolver: { resolveAcquisitionIntent: async () => null },
+        })).toThrow(/createSetupHandoff/);
+        expect(() => appsManagedMarketplaceRuntimePort.test({
+            deploymentId: "deployment-1",
+            acquisitionResolver: {
+                resolveAcquisitionIntent: async () => null,
+                createSetupHandoff: async () => ({
+                    redirectUrl: "https://app.example.com/setup?code=opaque",
+                }),
+            },
+        })).toThrow(/notifyInstallationLifecycle/);
+        expect(() => appsManagedMarketplaceRuntimePort.test({
+            deploymentId: "",
+            acquisitionResolver: {
+                resolveAcquisitionIntent: async () => null,
+                createSetupHandoff: async () => ({
+                    redirectUrl: "https://app.example.com/setup?code=opaque",
+                }),
+                notifyInstallationLifecycle: async () => undefined,
+            },
+        })).toThrow(/deploymentId/);
+    });
 });

package/dist/runtime-port.d.ts

@@ -1,3 +1,4 @@
+import type { HostVerifiedMarketplaceAcquisition } from "./marketplace-acquisition.js";
 /** Persisted host contract for one managed app installation. */
 export interface ManagedAppInstallationBinding {
     workloadEnvironmentId: string;
@@ -27,3 +28,38 @@ export interface AppsManagedAuthRuntime {
     sessionTokenTtlSeconds?: number;
 }
 export declare const appsManagedAuthRuntimePort: import("@voyant-travel/core/project").VoyantPort<AppsManagedAuthRuntime>;
+export interface ManagedMarketplaceAcquisitionResolver {
+    /**
+     * Resolve an opaque, single-purpose install intent through host authority.
+     * The public runtime never accepts catalog coordinates, artifact URLs, or
+     * publisher assertions from the browser.
+     */
+    resolveAcquisitionIntent(input: {
+        intent: string;
+    }): Promise<HostVerifiedMarketplaceAcquisition | null>;
+    /**
+     * Mint and deliver a short-lived, host-signed setup assertion. The browser
+     * receives only the resulting one-time redirect and never chooses OAuth
+     * coordinates or assertion claims.
+     */
+    createSetupHandoff(input: {
+        installationId: string;
+        appId: string;
+        releaseId: string;
+    }): Promise<{
+        redirectUrl: string;
+    }>;
+    /** Deliver an idempotent host-signed lifecycle assertion to the publisher. */
+    notifyInstallationLifecycle(input: {
+        event: "uninstalled";
+        installationId: string;
+        appId: string;
+        releaseId: string;
+    }): Promise<void>;
+}
+export interface AppsManagedMarketplaceRuntime {
+    /** Stable host deployment identity used for deployment-local installation rows. */
+    deploymentId: string;
+    acquisitionResolver: ManagedMarketplaceAcquisitionResolver;
+}
+export declare const appsManagedMarketplaceRuntimePort: import("@voyant-travel/core/project").VoyantPort<AppsManagedMarketplaceRuntime>;

package/dist/runtime-port.js

@@ -26,3 +26,23 @@ export const appsManagedAuthRuntimePort = definePort({
         }
     },
 });
+export const appsManagedMarketplaceRuntimePort = definePort({
+    id: "apps.managed-marketplace",
+    test(runtime) {
+        if (!runtime || typeof runtime !== "object") {
+            throw new TypeError("apps.managed-marketplace must be an object.");
+        }
+        if (typeof runtime.deploymentId !== "string" || runtime.deploymentId.trim().length === 0) {
+            throw new TypeError("apps.managed-marketplace deploymentId must be a non-empty string.");
+        }
+        if (typeof runtime.acquisitionResolver?.resolveAcquisitionIntent !== "function") {
+            throw new TypeError("apps.managed-marketplace acquisitionResolver.resolveAcquisitionIntent must be a function.");
+        }
+        if (typeof runtime.acquisitionResolver.createSetupHandoff !== "function") {
+            throw new TypeError("apps.managed-marketplace acquisitionResolver.createSetupHandoff must be a function.");
+        }
+        if (typeof runtime.acquisitionResolver.notifyInstallationLifecycle !== "function") {
+            throw new TypeError("apps.managed-marketplace acquisitionResolver.notifyInstallationLifecycle must be a function.");
+        }
+    },
+});

package/dist/voyant.js

@@ -1,7 +1,7 @@
 import { defineModule, providePort, requirePort } from "@voyant-travel/core/project";
 import { customFieldValueLifecycleRuntimePort, customFieldValueOperationsRuntimePort, } from "@voyant-travel/core/runtime-port";
 import { financeAppApiRuntimePort } from "@voyant-travel/finance-contracts/runtime-port";
-import { appsManagedAuthRuntimePort } from "./runtime-port.js";
+import { appsManagedAuthRuntimePort, appsManagedMarketplaceRuntimePort } from "./runtime-port.js";
 const appsAdminRuntime = {
     entry: "@voyant-travel/apps-react/admin",
     export: "createSelectedAppsAdminExtension",
@@ -31,9 +31,13 @@ export const appsVoyantModule = defineModule({
         }),
         requirePort(financeAppApiRuntimePort, { optional: true }),
         requirePort(appsManagedAuthRuntimePort, { optional: true }),
+        requirePort(appsManagedMarketplaceRuntimePort, { optional: true }),
     ],
     provides: {
-        ports: [providePort(appsManagedAuthRuntimePort)],
+        ports: [
+            providePort(appsManagedAuthRuntimePort),
+            providePort(appsManagedMarketplaceRuntimePort),
+        ],
     },
     api: [
         {

package/openapi/admin/apps.json

@@ -25,6 +25,9 @@
     "/v1/admin/apps/install": {
       "post": { "summary": "Install an app release" }
     },
+    "/v1/admin/apps/marketplace/install-intents/resolve": {
+      "post": { "summary": "Resolve and admit an opaque Marketplace install intent" }
+    },
     "/v1/admin/apps/installations": {
       "get": { "summary": "List app installations" }
     },
@@ -52,6 +55,9 @@
     "/v1/admin/apps/installations/{installationId}/session-token": {
       "post": { "summary": "Issue an app extension session token" }
     },
+    "/v1/admin/apps/installations/{installationId}/setup-handoff": {
+      "post": { "summary": "Create a one-time Marketplace app setup handoff" }
+    },
     "/v1/admin/apps/installations/{installationId}/webhooks": {
       "get": { "summary": "List app webhook delivery health" }
     },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@voyant-travel/apps",
-  "version": "0.9.0",
+  "version": "0.10.0",
   "license": "Apache-2.0",
   "type": "module",
   "exports": {
@@ -64,6 +64,11 @@
       "import": "./dist/locale-resolution.js",
       "default": "./dist/locale-resolution.js"
     },
+    "./marketplace-acquisition": {
+      "types": "./dist/marketplace-acquisition.d.ts",
+      "import": "./dist/marketplace-acquisition.js",
+      "default": "./dist/marketplace-acquisition.js"
+    },
     "./installation-service": {
       "types": "./dist/installation-service.d.ts",
       "import": "./dist/installation-service.js",
@@ -126,15 +131,15 @@
     "drizzle-orm": "^0.45.2",
     "hono": "^4.12.27",
     "zod": "^4.4.3",
-    "@voyant-travel/admin-extension-sdk": "^0.2.0",
-    "@voyant-travel/core": "^0.127.1",
     "@voyant-travel/admin": "^0.127.0",
-    "@voyant-travel/custom-fields": "^0.2.4",
+    "@voyant-travel/admin-extension-sdk": "^0.2.0",
+    "@voyant-travel/core": "^0.128.0",
+    "@voyant-travel/custom-fields": "^0.2.5",
     "@voyant-travel/finance-contracts": "^0.107.0",
-    "@voyant-travel/db": "^0.114.13",
-    "@voyant-travel/hono": "^0.129.2",
+    "@voyant-travel/db": "^0.114.14",
+    "@voyant-travel/hono": "^0.130.0",
     "@voyant-travel/types": "^0.109.4",
-    "@voyant-travel/webhook-delivery": "^0.4.2"
+    "@voyant-travel/webhook-delivery": "^0.4.3"
   },
   "devDependencies": {
     "@types/node": "^25.5.2",