@x12i/catalox-api 5.9.8

package/dist/authix-verify.d.ts

@@ -0,0 +1,7 @@
+import type { AuthixTokenPayload } from "@x12i/authix-types";
+import type { CataloxApiConfig } from "./config.js";
+/** Test/staging tokens: `test.<base64url(JSON AuthixTokenPayload)>` */
+export declare function parseTestAuthixToken(token: string): AuthixTokenPayload | null;
+export declare function encodeTestAuthixToken(payload: AuthixTokenPayload): string;
+export declare function verifyAuthixToken(token: string, config: CataloxApiConfig): Promise<AuthixTokenPayload | null>;
+//# sourceMappingURL=authix-verify.d.ts.map

package/dist/authix-verify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authix-verify.d.ts","sourceRoot":"","sources":["../src/authix-verify.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAE7D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEpD,uEAAuE;AACvE,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,kBAAkB,GAAG,IAAI,CAS7E;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,kBAAkB,GAAG,MAAM,CAOzE;AAED,wBAAsB,iBAAiB,CACrC,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,gBAAgB,GACvB,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAoBpC"}

package/dist/authix-verify.js

@@ -0,0 +1,44 @@
+/** Test/staging tokens: `test.<base64url(JSON AuthixTokenPayload)>` */
+export function parseTestAuthixToken(token) {
+    if (!token.startsWith("test."))
+        return null;
+    try {
+        const b64 = token.slice(5).replace(/-/g, "+").replace(/_/g, "/");
+        const json = Buffer.from(b64, "base64").toString("utf8");
+        return JSON.parse(json);
+    }
+    catch {
+        return null;
+    }
+}
+export function encodeTestAuthixToken(payload) {
+    const b64 = Buffer.from(JSON.stringify(payload), "utf8")
+        .toString("base64")
+        .replace(/\+/g, "-")
+        .replace(/\//g, "_")
+        .replace(/=+$/, "");
+    return `test.${b64}`;
+}
+export async function verifyAuthixToken(token, config) {
+    const testPayload = parseTestAuthixToken(token);
+    if (testPayload)
+        return testPayload;
+    const introspectUrl = config.authix?.introspectUrl;
+    if (!introspectUrl)
+        return null;
+    const headers = { "content-type": "application/json" };
+    if (config.authix?.apiKey)
+        headers.authorization = `Bearer ${config.authix.apiKey}`;
+    const res = await fetch(introspectUrl, {
+        method: "POST",
+        headers,
+        body: JSON.stringify({ token, appId: config.authix?.appId }),
+    });
+    if (!res.ok)
+        return null;
+    const body = (await res.json());
+    if (!body.active || !body.payload)
+        return null;
+    return body.payload;
+}
+//# sourceMappingURL=authix-verify.js.map

package/dist/authix-verify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authix-verify.js","sourceRoot":"","sources":["../src/authix-verify.ts"],"names":[],"mappings":"AAIA,uEAAuE;AACvE,MAAM,UAAU,oBAAoB,CAAC,KAAa;IAChD,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACjE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACzD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAuB,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAA2B;IAC/D,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;SACrD,QAAQ,CAAC,QAAQ,CAAC;SAClB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACtB,OAAO,QAAQ,GAAG,EAAE,CAAC;AACvB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,KAAa,EACb,MAAwB;IAExB,MAAM,WAAW,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAChD,IAAI,WAAW;QAAE,OAAO,WAAW,CAAC;IAEpC,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC;IACnD,IAAI,CAAC,aAAa;QAAE,OAAO,IAAI,CAAC;IAEhC,MAAM,OAAO,GAA2B,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;IAC/E,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM;QAAE,OAAO,CAAC,aAAa,GAAG,UAAU,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;IAEpF,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,aAAa,EAAE;QACrC,MAAM,EAAE,MAAM;QACd,OAAO;QACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC;KAC7D,CAAC,CAAC;IAEH,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IACzB,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAuD,CAAC;IACtF,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC/C,OAAO,IAAI,CAAC,OAAO,CAAC;AACtB,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,17 @@
+export type CataloxAuthMode = "open" | "authix";
+export type CataloxApiConfig = {
+    authMode: CataloxAuthMode;
+    version: string;
+    defaultSuperAdmin: boolean;
+    internalAppId?: string;
+    privateMode: boolean;
+    authix?: {
+        appId: string;
+        appSecretKey: string;
+        introspectUrl?: string;
+        apiKey?: string;
+        issuer: string;
+    };
+};
+export declare function loadCataloxApiConfig(env?: NodeJS.ProcessEnv): CataloxApiConfig;
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,QAAQ,CAAC;AAEhD,MAAM,MAAM,gBAAgB,GAAG;IAC7B,QAAQ,EAAE,eAAe,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,OAAO,CAAC;IACrB,MAAM,CAAC,EAAE;QACP,KAAK,EAAE,MAAM,CAAC;QACd,YAAY,EAAE,MAAM,CAAC;QACrB,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;CACH,CAAC;AAEF,wBAAgB,oBAAoB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,gBAAgB,CA4B3F"}

package/dist/config.js

@@ -0,0 +1,28 @@
+export function loadCataloxApiConfig(env = process.env) {
+    const authMode = (env.CATALOX_AUTH_MODE ?? "open");
+    const config = {
+        authMode: authMode === "authix" ? "authix" : "open",
+        version: env.CATALOX_VERSION ?? "5.9.7",
+        defaultSuperAdmin: env.CATALOX_DEFAULT_SUPER_ADMIN !== "false",
+        privateMode: env.CATALOX_PRIVATE_MODE !== "false",
+        ...(env.CATALOX_INTERNAL_APP_ID?.trim()
+            ? { internalAppId: env.CATALOX_INTERNAL_APP_ID.trim() }
+            : {}),
+    };
+    if (config.authMode === "authix") {
+        const appId = env.AUTHIX_APP_ID?.trim();
+        const appSecretKey = env.AUTHIX_APP_SECRET_KEY?.trim();
+        if (!appId || !appSecretKey) {
+            throw new Error("AUTHIX_APP_ID and AUTHIX_APP_SECRET_KEY are required when CATALOX_AUTH_MODE=authix");
+        }
+        config.authix = {
+            appId,
+            appSecretKey,
+            issuer: env.AUTHIX_ISSUER?.trim() || "authix",
+            ...(env.AUTHIX_INTROSPECT_URL?.trim() ? { introspectUrl: env.AUTHIX_INTROSPECT_URL.trim() } : {}),
+            ...(env.AUTHIX_API_KEY?.trim() ? { apiKey: env.AUTHIX_API_KEY.trim() } : {}),
+        };
+    }
+    return config;
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAiBA,MAAM,UAAU,oBAAoB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACvE,MAAM,QAAQ,GAAG,CAAC,GAAG,CAAC,iBAAiB,IAAI,MAAM,CAAoB,CAAC;IACtE,MAAM,MAAM,GAAqB;QAC/B,QAAQ,EAAE,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM;QACnD,OAAO,EAAE,GAAG,CAAC,eAAe,IAAI,OAAO;QACvC,iBAAiB,EAAE,GAAG,CAAC,2BAA2B,KAAK,OAAO;QAC9D,WAAW,EAAE,GAAG,CAAC,oBAAoB,KAAK,OAAO;QACjD,GAAG,CAAC,GAAG,CAAC,uBAAuB,EAAE,IAAI,EAAE;YACrC,CAAC,CAAC,EAAE,aAAa,EAAE,GAAG,CAAC,uBAAuB,CAAC,IAAI,EAAE,EAAE;YACvD,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;IAEF,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,GAAG,CAAC,aAAa,EAAE,IAAI,EAAE,CAAC;QACxC,MAAM,YAAY,GAAG,GAAG,CAAC,qBAAqB,EAAE,IAAI,EAAE,CAAC;QACvD,IAAI,CAAC,KAAK,IAAI,CAAC,YAAY,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,oFAAoF,CAAC,CAAC;QACxG,CAAC;QACD,MAAM,CAAC,MAAM,GAAG;YACd,KAAK;YACL,YAAY;YACZ,MAAM,EAAE,GAAG,CAAC,aAAa,EAAE,IAAI,EAAE,IAAI,QAAQ;YAC7C,GAAG,CAAC,GAAG,CAAC,qBAAqB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,GAAG,CAAC,qBAAqB,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjG,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7E,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/feature-gates.d.ts

@@ -0,0 +1,5 @@
+import type { AuthixTokenPayload } from "@x12i/authix-types";
+import { CATALOX_FEATURES } from "@x12i/catalox-authix-bridge";
+import type { CataloxApiConfig } from "./config.js";
+export declare function gateFeature(config: CataloxApiConfig, token: AuthixTokenPayload | undefined, featureId: (typeof CATALOX_FEATURES)[keyof typeof CATALOX_FEATURES]): void;
+//# sourceMappingURL=feature-gates.d.ts.map

package/dist/feature-gates.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"feature-gates.d.ts","sourceRoot":"","sources":["../src/feature-gates.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,EACL,gBAAgB,EAGjB,MAAM,6BAA6B,CAAC;AAErC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEpD,wBAAgB,WAAW,CACzB,MAAM,EAAE,gBAAgB,EACxB,KAAK,EAAE,kBAAkB,GAAG,SAAS,EACrC,SAAS,EAAE,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,OAAO,gBAAgB,CAAC,GAClE,IAAI,CAaN"}

package/dist/feature-gates.js

@@ -0,0 +1,18 @@
+import { CATALOX_FEATURES, requireCataloxFeature, CataloxFeatureDeniedError, } from "@x12i/catalox-authix-bridge";
+export function gateFeature(config, token, featureId) {
+    if (config.authMode !== "authix")
+        return;
+    if (!token) {
+        throw Object.assign(new Error("Unauthorized"), { statusCode: 401 });
+    }
+    try {
+        requireCataloxFeature(token, featureId);
+    }
+    catch (e) {
+        if (e instanceof CataloxFeatureDeniedError) {
+            throw Object.assign(e, { statusCode: 403 });
+        }
+        throw e;
+    }
+}
+//# sourceMappingURL=feature-gates.js.map

package/dist/feature-gates.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"feature-gates.js","sourceRoot":"","sources":["../src/feature-gates.ts"],"names":[],"mappings":"AACA,OAAO,EACL,gBAAgB,EAChB,qBAAqB,EACrB,yBAAyB,GAC1B,MAAM,6BAA6B,CAAC;AAIrC,MAAM,UAAU,WAAW,CACzB,MAAwB,EACxB,KAAqC,EACrC,SAAmE;IAEnE,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO;IACzC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,cAAc,CAAC,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,CAAC;QACH,qBAAqB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IAC1C,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,yBAAyB,EAAE,CAAC;YAC3C,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;QAC9C,CAAC;QACD,MAAM,CAAC,CAAC;IACV,CAAC;AACH,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,17 @@
+import Fastify, { type FastifyInstance } from "fastify";
+import type { AuthixTokenPayload } from "@x12i/authix-types";
+import type { Catalox } from "@x12i/catalox-engine/embedder";
+import { type CataloxApiConfig } from "./config.js";
+export { loadCataloxApiConfig, type CataloxApiConfig, type CataloxAuthMode } from "./config.js";
+export { resolveRequestContext } from "./resolve-request-context.js";
+export { encodeTestAuthixToken, parseTestAuthixToken } from "./authix-verify.js";
+export { listOutcomeToHttp, getItemOutcomeToHttp } from "./outcome-to-http.js";
+declare module "fastify" {
+    interface FastifyRequest {
+        authixToken?: AuthixTokenPayload;
+    }
+}
+export declare function registerCataloxRoutes(app: FastifyInstance, catalox: Catalox, config: CataloxApiConfig): Promise<void>;
+export declare function createCataloxApiApp(catalox: Catalox, config?: CataloxApiConfig): Promise<FastifyInstance>;
+export { Fastify };
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,EAAE,EAAE,KAAK,eAAe,EAAE,MAAM,SAAS,CAAC;AACxD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,+BAA+B,CAAC;AAG7D,OAAO,EAAwB,KAAK,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAO1E,OAAO,EAAE,oBAAoB,EAAE,KAAK,gBAAgB,EAAE,KAAK,eAAe,EAAE,MAAM,aAAa,CAAC;AAChG,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AACjF,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAE/E,OAAO,QAAQ,SAAS,CAAC;IACvB,UAAU,cAAc;QACtB,WAAW,CAAC,EAAE,kBAAkB,CAAC;KAClC;CACF;AAED,wBAAsB,qBAAqB,CACzC,GAAG,EAAE,eAAe,EACpB,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,gBAAgB,GACvB,OAAO,CAAC,IAAI,CAAC,CA4Bf;AAED,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,OAAO,EAChB,MAAM,CAAC,EAAE,gBAAgB,GACxB,OAAO,CAAC,eAAe,CAAC,CAI1B;AAED,OAAO,EAAE,OAAO,EAAE,CAAC"}

package/dist/index.js

@@ -0,0 +1,45 @@
+import Fastify, {} from "fastify";
+import { verifyAuthixToken } from "./authix-verify.js";
+import { loadCataloxApiConfig } from "./config.js";
+import { registerAppRoutes } from "./routes/apps.js";
+import { registerHealthRoutes } from "./routes/health.js";
+import { registerItemRoutes } from "./routes/items.js";
+import { registerOperatorRoutes } from "./routes/operator.js";
+import { registerSearchRoutes } from "./routes/search.js";
+export { loadCataloxApiConfig } from "./config.js";
+export { resolveRequestContext } from "./resolve-request-context.js";
+export { encodeTestAuthixToken, parseTestAuthixToken } from "./authix-verify.js";
+export { listOutcomeToHttp, getItemOutcomeToHttp } from "./outcome-to-http.js";
+export async function registerCataloxRoutes(app, catalox, config) {
+    if (config.authMode === "authix") {
+        app.addHook("onRequest", async (req, reply) => {
+            if (req.url === "/health" || req.url.startsWith("/health?"))
+                return;
+            const auth = req.headers.authorization;
+            if (!auth?.startsWith("Bearer ")) {
+                return reply.status(401).send({ outcome: "error", error: { message: "Unauthorized" } });
+            }
+            const token = auth.slice("Bearer ".length).trim();
+            const payload = await verifyAuthixToken(token, config);
+            if (!payload) {
+                return reply.status(401).send({ outcome: "error", error: { message: "Invalid token" } });
+            }
+            req.authixToken = payload;
+        });
+    }
+    if (!config.privateMode) {
+        app.log.warn("Catalox API: CATALOX_PRIVATE_MODE is not set — ensure this service is not exposed publicly without authix mode");
+    }
+    await registerHealthRoutes(app, config);
+    await registerAppRoutes(app, catalox, config);
+    await registerItemRoutes(app, catalox, config);
+    await registerSearchRoutes(app, catalox, config);
+    await registerOperatorRoutes(app, catalox, config);
+}
+export async function createCataloxApiApp(catalox, config) {
+    const app = Fastify({ logger: false });
+    await registerCataloxRoutes(app, catalox, config ?? loadCataloxApiConfig());
+    return app;
+}
+export { Fastify };
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,EAAE,EAAwB,MAAM,SAAS,CAAC;AAIxD,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,oBAAoB,EAAyB,MAAM,aAAa,CAAC;AAC1E,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAE1D,OAAO,EAAE,oBAAoB,EAA+C,MAAM,aAAa,CAAC;AAChG,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AACjF,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAQ/E,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,GAAoB,EACpB,OAAgB,EAChB,MAAwB;IAExB,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACjC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;YAC5C,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC;gBAAE,OAAO;YACpE,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC;YACvC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBACjC,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,EAAE,CAAC,CAAC;YAC1F,CAAC;YACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;YAClD,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YACvD,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,eAAe,EAAE,EAAE,CAAC,CAAC;YAC3F,CAAC;YACD,GAAG,CAAC,WAAW,GAAG,OAAO,CAAC;QAC5B,CAAC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QACxB,GAAG,CAAC,GAAG,CAAC,IAAI,CACV,gHAAgH,CACjH,CAAC;IACJ,CAAC;IAED,MAAM,oBAAoB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACxC,MAAM,iBAAiB,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IAC9C,MAAM,kBAAkB,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IAC/C,MAAM,oBAAoB,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IACjD,MAAM,sBAAsB,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,OAAgB,EAChB,MAAyB;IAEzB,MAAM,GAAG,GAAG,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IACvC,MAAM,qBAAqB,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,IAAI,oBAAoB,EAAE,CAAC,CAAC;IAC5E,OAAO,GAAG,CAAC;AACb,CAAC;AAED,OAAO,EAAE,OAAO,EAAE,CAAC"}

package/dist/outcome-to-http.d.ts

@@ -0,0 +1,9 @@
+import type { CataloxOutcome } from "@x12i/catalox-contracts";
+export type OutcomeHttpResult = {
+    statusCode: number;
+    body: Record<string, unknown>;
+};
+export declare function listOutcomeToHttp(outcome: CataloxOutcome, result?: Record<string, unknown>, error?: Record<string, unknown>): OutcomeHttpResult;
+export declare function getItemOutcomeToHttp(outcome: CataloxOutcome, payload?: Record<string, unknown>): OutcomeHttpResult;
+export declare function getItemByFieldOutcomeToHttp(outcome: CataloxOutcome | "ambiguous" | "field_not_queryable", payload?: Record<string, unknown>): OutcomeHttpResult;
+//# sourceMappingURL=outcome-to-http.d.ts.map

package/dist/outcome-to-http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"outcome-to-http.d.ts","sourceRoot":"","sources":["../src/outcome-to-http.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAE9D,MAAM,MAAM,iBAAiB,GAAG;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B,CAAC;AAEF,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,cAAc,EACvB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,iBAAiB,CAcnB;AAED,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,cAAc,EACvB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAChC,iBAAiB,CAEnB;AAED,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,cAAc,GAAG,WAAW,GAAG,qBAAqB,EAC7D,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAChC,iBAAiB,CAkBnB"}

package/dist/outcome-to-http.js

@@ -0,0 +1,38 @@
+export function listOutcomeToHttp(outcome, result, error) {
+    switch (outcome) {
+        case "ok":
+        case "empty":
+            return { statusCode: 200, body: { outcome, result: result ?? {} } };
+        case "denied":
+            return { statusCode: 403, body: { outcome, error: error ?? { message: "denied" } } };
+        case "misconfigured":
+            return { statusCode: 409, body: { outcome, error: error ?? { message: "misconfigured" } } };
+        case "mapping_blocked":
+            return { statusCode: 422, body: { outcome, error: error ?? { message: "mapping_blocked" } } };
+        default:
+            return { statusCode: 500, body: { outcome, error: { message: String(outcome) } } };
+    }
+}
+export function getItemOutcomeToHttp(outcome, payload) {
+    return listOutcomeToHttp(outcome, payload);
+}
+export function getItemByFieldOutcomeToHttp(outcome, payload) {
+    switch (outcome) {
+        case "ok":
+        case "empty":
+            return { statusCode: 200, body: { outcome, result: payload ?? {} } };
+        case "denied":
+            return { statusCode: 403, body: { outcome, error: payload?.error ?? { message: "denied" } } };
+        case "misconfigured":
+            return { statusCode: 409, body: { outcome, error: payload?.error ?? { message: "misconfigured" } } };
+        case "mapping_blocked":
+            return { statusCode: 422, body: { outcome, error: payload?.error ?? { message: "mapping_blocked" } } };
+        case "ambiguous":
+            return { statusCode: 409, body: { outcome, result: payload ?? {} } };
+        case "field_not_queryable":
+            return { statusCode: 422, body: { outcome, result: payload ?? {} } };
+        default:
+            return { statusCode: 500, body: { outcome, error: { message: String(outcome) } } };
+    }
+}
+//# sourceMappingURL=outcome-to-http.js.map

package/dist/outcome-to-http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"outcome-to-http.js","sourceRoot":"","sources":["../src/outcome-to-http.ts"],"names":[],"mappings":"AAOA,MAAM,UAAU,iBAAiB,CAC/B,OAAuB,EACvB,MAAgC,EAChC,KAA+B;IAE/B,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,IAAI,CAAC;QACV,KAAK,OAAO;YACV,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,IAAI,EAAE,EAAE,EAAE,CAAC;QACtE,KAAK,QAAQ;YACX,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;QACvF,KAAK,eAAe;YAClB,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE,OAAO,EAAE,eAAe,EAAE,EAAE,EAAE,CAAC;QAC9F,KAAK,iBAAiB;YACpB,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE,OAAO,EAAE,iBAAiB,EAAE,EAAE,EAAE,CAAC;QAChG;YACE,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC;IACvF,CAAC;AACH,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,OAAuB,EACvB,OAAiC;IAEjC,OAAO,iBAAiB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,OAA6D,EAC7D,OAAiC;IAEjC,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,IAAI,CAAC;QACV,KAAK,OAAO;YACV,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,IAAI,EAAE,EAAE,EAAE,CAAC;QACvE,KAAK,QAAQ;YACX,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAG,OAAe,EAAE,KAAK,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;QACzG,KAAK,eAAe;YAClB,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAG,OAAe,EAAE,KAAK,IAAI,EAAE,OAAO,EAAE,eAAe,EAAE,EAAE,EAAE,CAAC;QAChH,KAAK,iBAAiB;YACpB,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAG,OAAe,EAAE,KAAK,IAAI,EAAE,OAAO,EAAE,iBAAiB,EAAE,EAAE,EAAE,CAAC;QAClH,KAAK,WAAW;YACd,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,IAAI,EAAE,EAAE,EAAE,CAAC;QACvE,KAAK,qBAAqB;YACxB,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,IAAI,EAAE,EAAE,EAAE,CAAC;QACvE;YACE,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC;IACvF,CAAC;AACH,CAAC"}

package/dist/resolve-request-context.d.ts

@@ -0,0 +1,10 @@
+import type { AuthixTokenPayload } from "@x12i/authix-types";
+import type { CataloxContext } from "@x12i/catalox-contracts";
+import type { CataloxApiConfig } from "./config.js";
+export type CataloxRequestLike = {
+    headers: Record<string, string | string[] | undefined>;
+    body?: unknown;
+    authixToken?: AuthixTokenPayload;
+};
+export declare function resolveRequestContext(req: CataloxRequestLike, config: CataloxApiConfig): CataloxContext;
+//# sourceMappingURL=resolve-request-context.d.ts.map

package/dist/resolve-request-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-request-context.d.ts","sourceRoot":"","sources":["../src/resolve-request-context.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,KAAK,EAAS,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAGrE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEpD,MAAM,MAAM,kBAAkB,GAAG;IAC/B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC;IACvD,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,WAAW,CAAC,EAAE,kBAAkB,CAAC;CAClC,CAAC;AAoBF,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,kBAAkB,EAAE,MAAM,EAAE,gBAAgB,GAAG,cAAc,CAkCvG"}

package/dist/resolve-request-context.js

@@ -0,0 +1,49 @@
+import { mapAuthixToCataloxContext } from "@x12i/catalox-authix-bridge";
+function headerJson(req, name) {
+    const raw = req.headers[name.toLowerCase()];
+    const v = Array.isArray(raw) ? raw[0] : raw;
+    if (!v?.trim())
+        return undefined;
+    try {
+        return JSON.parse(v);
+    }
+    catch {
+        return undefined;
+    }
+}
+function bodyContext(req) {
+    const body = req.body;
+    if (!body || typeof body !== "object")
+        return undefined;
+    const ctx = body.context;
+    return ctx && typeof ctx === "object" ? ctx : undefined;
+}
+export function resolveRequestContext(req, config) {
+    if (config.authMode === "authix") {
+        if (!req.authixToken) {
+            throw Object.assign(new Error("Missing Authix token"), { statusCode: 401 });
+        }
+        const headerCtx = headerJson(req, "x-catalox-context");
+        if (headerCtx) {
+            throw Object.assign(new Error("X-Catalox-Context is not allowed in authix mode"), { statusCode: 400 });
+        }
+        return mapAuthixToCataloxContext(req.authixToken);
+    }
+    const fromHeader = headerJson(req, "x-catalox-context");
+    const fromBody = bodyContext(req);
+    const merged = { ...(fromHeader ?? {}), ...(fromBody ?? {}) };
+    if (!merged.appId && config.internalAppId) {
+        merged.appId = config.internalAppId;
+    }
+    if (!merged.appId &&
+        !merged.superAdmin &&
+        config.defaultSuperAdmin &&
+        Object.keys(merged).length === 0) {
+        return { superAdmin: true, ...(config.internalAppId ? { appId: config.internalAppId } : {}) };
+    }
+    if (config.defaultSuperAdmin && merged.superAdmin === undefined && !fromHeader && !fromBody) {
+        merged.superAdmin = true;
+    }
+    return merged;
+}
+//# sourceMappingURL=resolve-request-context.js.map

package/dist/resolve-request-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-request-context.js","sourceRoot":"","sources":["../src/resolve-request-context.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC;AAUxE,SAAS,UAAU,CAAC,GAAuB,EAAE,IAAY;IACvD,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IAC5C,MAAM,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAC5C,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE;QAAE,OAAO,SAAS,CAAC;IACjC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,GAAuB;IAC1C,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;IACtB,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACxD,MAAM,GAAG,GAAI,IAAqC,CAAC,OAAO,CAAC;IAC3D,OAAO,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,GAAuB,EAAE,MAAwB;IACrF,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACjC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;YACrB,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,sBAAsB,CAAC,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;QAC9E,CAAC;QACD,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;QACvD,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,iDAAiD,CAAC,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;QACzG,CAAC;QACD,OAAO,yBAAyB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACpD,CAAC;IAED,MAAM,UAAU,GAAG,UAAU,CAAC,GAAG,EAAE,mBAAmB,CAA+B,CAAC;IACtF,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,MAAM,GAAmB,EAAE,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,CAAC;IAE9E,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;QAC1C,MAAM,CAAC,KAAK,GAAG,MAAM,CAAC,aAAsB,CAAC;IAC/C,CAAC;IAED,IACE,CAAC,MAAM,CAAC,KAAK;QACb,CAAC,MAAM,CAAC,UAAU;QAClB,MAAM,CAAC,iBAAiB;QACxB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC,EAChC,CAAC;QACD,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,aAAsB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACzG,CAAC;IAED,IAAI,MAAM,CAAC,iBAAiB,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,IAAI,CAAC,UAAU,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC5F,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC;IAC3B,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/routes/apps.d.ts

@@ -0,0 +1,5 @@
+import type { FastifyInstance } from "fastify";
+import type { Catalox } from "@x12i/catalox-engine/embedder";
+import type { CataloxApiConfig } from "../config.js";
+export declare function registerAppRoutes(app: FastifyInstance, catalox: Catalox, config: CataloxApiConfig): Promise<void>;
+//# sourceMappingURL=apps.d.ts.map

package/dist/routes/apps.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"apps.d.ts","sourceRoot":"","sources":["../../src/routes/apps.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,+BAA+B,CAAC;AAI7D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAIrD,wBAAsB,iBAAiB,CACrC,GAAG,EAAE,eAAe,EACpB,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,gBAAgB,GACvB,OAAO,CAAC,IAAI,CAAC,CA0Bf"}

package/dist/routes/apps.js

@@ -0,0 +1,32 @@
+import { CATALOX_FEATURES } from "@x12i/catalox-authix-bridge";
+import { gateFeature } from "../feature-gates.js";
+import { resolveRequestContext } from "../resolve-request-context.js";
+export async function registerAppRoutes(app, catalox, config) {
+    app.get("/v1/apps/:appId/catalogs", async (req, reply) => {
+        try {
+            gateFeature(config, req.authixToken, CATALOX_FEATURES.discoveryRead);
+            const context = resolveRequestContext(req, config);
+            const appId = req.params.appId;
+            const entries = await catalox.listAppCatalogs(context, { appId });
+            return reply.send({ outcome: "ok", result: { catalogs: entries } });
+        }
+        catch (e) {
+            const err = e;
+            return reply.status(err.statusCode ?? 500).send({ outcome: "error", error: { message: err.message } });
+        }
+    });
+    app.get("/v1/apps/:appId/bootstrap", async (req, reply) => {
+        try {
+            gateFeature(config, req.authixToken, CATALOX_FEATURES.discoveryRead);
+            const context = resolveRequestContext(req, config);
+            const appId = req.params.appId;
+            const bootstrap = await catalox.getAppCatalogBootstrap(context, appId);
+            return reply.send({ outcome: "ok", result: bootstrap });
+        }
+        catch (e) {
+            const err = e;
+            return reply.status(err.statusCode ?? 500).send({ outcome: "error", error: { message: err.message } });
+        }
+    });
+}
+//# sourceMappingURL=apps.js.map

package/dist/routes/apps.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"apps.js","sourceRoot":"","sources":["../../src/routes/apps.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAG/D,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,qBAAqB,EAA2B,MAAM,+BAA+B,CAAC;AAE/F,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,GAAoB,EACpB,OAAgB,EAChB,MAAwB;IAExB,GAAG,CAAC,GAAG,CAAgC,0BAA0B,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACtF,IAAI,CAAC;YACH,WAAW,CAAC,MAAM,EAAE,GAAG,CAAC,WAAW,EAAE,gBAAgB,CAAC,aAAa,CAAC,CAAC;YACrE,MAAM,OAAO,GAAG,qBAAqB,CAAC,GAAyB,EAAE,MAAM,CAAC,CAAC;YACzE,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,KAAc,CAAC;YACxC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,eAAe,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YAClE,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;QACtE,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,MAAM,GAAG,GAAG,CAA8C,CAAC;YAC3D,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACzG,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAgC,2BAA2B,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACvF,IAAI,CAAC;YACH,WAAW,CAAC,MAAM,EAAE,GAAG,CAAC,WAAW,EAAE,gBAAgB,CAAC,aAAa,CAAC,CAAC;YACrE,MAAM,OAAO,GAAG,qBAAqB,CAAC,GAAyB,EAAE,MAAM,CAAC,CAAC;YACzE,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,KAAc,CAAC;YACxC,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,sBAAsB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACvE,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QAC1D,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,MAAM,GAAG,GAAG,CAA8C,CAAC;YAC3D,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACzG,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/routes/health.d.ts

@@ -0,0 +1,4 @@
+import type { FastifyInstance } from "fastify";
+import type { CataloxApiConfig } from "../config.js";
+export declare function registerHealthRoutes(app: FastifyInstance, config: CataloxApiConfig): Promise<void>;
+//# sourceMappingURL=health.d.ts.map

package/dist/routes/health.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"health.d.ts","sourceRoot":"","sources":["../../src/routes/health.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAE/C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAErD,wBAAsB,oBAAoB,CAAC,GAAG,EAAE,eAAe,EAAE,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAExG"}

package/dist/routes/health.js

@@ -0,0 +1,4 @@
+export async function registerHealthRoutes(app, config) {
+    app.get("/health", async () => ({ status: "ok", version: config.version }));
+}
+//# sourceMappingURL=health.js.map

package/dist/routes/health.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"health.js","sourceRoot":"","sources":["../../src/routes/health.ts"],"names":[],"mappings":"AAIA,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,GAAoB,EAAE,MAAwB;IACvF,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;AAC9E,CAAC"}

package/dist/routes/items.d.ts

@@ -0,0 +1,5 @@
+import type { FastifyInstance } from "fastify";
+import type { Catalox } from "@x12i/catalox-engine/embedder";
+import type { CataloxApiConfig } from "../config.js";
+export declare function registerItemRoutes(app: FastifyInstance, catalox: Catalox, config: CataloxApiConfig): Promise<void>;
+//# sourceMappingURL=items.d.ts.map

package/dist/routes/items.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"items.d.ts","sourceRoot":"","sources":["../../src/routes/items.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,+BAA+B,CAAC;AAI7D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAKrD,wBAAsB,kBAAkB,CACtC,GAAG,EAAE,eAAe,EACpB,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,gBAAgB,GACvB,OAAO,CAAC,IAAI,CAAC,CA2If"}

package/dist/routes/items.js

@@ -0,0 +1,127 @@
+import { CATALOX_FEATURES } from "@x12i/catalox-authix-bridge";
+import { gateFeature } from "../feature-gates.js";
+import { getItemOutcomeToHttp, getItemByFieldOutcomeToHttp, listOutcomeToHttp } from "../outcome-to-http.js";
+import { resolveRequestContext } from "../resolve-request-context.js";
+export async function registerItemRoutes(app, catalox, config) {
+    app.get("/v1/catalogs/:catalogId/items", async (req, reply) => {
+        try {
+            gateFeature(config, req.authixToken, CATALOX_FEATURES.itemRead);
+            const context = resolveRequestContext(req, config);
+            const catalogId = req.params.catalogId;
+            const options = {};
+            if (req.query.limit)
+                options.limit = Number(req.query.limit);
+            if (req.query.offset)
+                options.offset = Number(req.query.offset);
+            const res = await catalox.listCatalogItemsWithOutcome(context, catalogId, options);
+            const http = listOutcomeToHttp(res.outcome, res);
+            return reply.status(http.statusCode).send(http.body);
+        }
+        catch (e) {
+            const err = e;
+            return reply.status(err.statusCode ?? 500).send({ outcome: "error", error: { message: err.message } });
+        }
+    });
+    app.get("/v1/catalogs/:catalogId/items/:itemId", async (req, reply) => {
+        try {
+            gateFeature(config, req.authixToken, CATALOX_FEATURES.itemRead);
+            const context = resolveRequestContext(req, config);
+            const catalogId = req.params.catalogId;
+            const itemId = req.params.itemId;
+            const res = await catalox.getCatalogItemWithOutcome(context, catalogId, itemId);
+            const http = getItemOutcomeToHttp(res.outcome, res);
+            return reply.status(http.statusCode).send(http.body);
+        }
+        catch (e) {
+            const err = e;
+            return reply.status(err.statusCode ?? 500).send({ outcome: "error", error: { message: err.message } });
+        }
+    });
+    app.get("/v1/catalogs/:catalogId/items/by-field", async (req, reply) => {
+        try {
+            gateFeature(config, req.authixToken, CATALOX_FEATURES.itemRead);
+            const context = resolveRequestContext(req, config);
+            const catalogId = req.params.catalogId;
+            const fieldPath = req.query.fieldPath;
+            const value = req.query.value;
+            if (!fieldPath || value == null) {
+                return reply.status(400).send({
+                    outcome: "error",
+                    error: { message: "fieldPath and value query parameters are required." },
+                });
+            }
+            const res = await catalox.getCatalogItemByFieldWithOutcome(context, catalogId, fieldPath, value);
+            const http = getItemByFieldOutcomeToHttp(res.outcome, res);
+            return reply.status(http.statusCode).send(http.body);
+        }
+        catch (e) {
+            const err = e;
+            return reply.status(err.statusCode ?? 500).send({ outcome: "error", error: { message: err.message } });
+        }
+    });
+    app.put("/v1/catalogs/:catalogId/items/:itemId", async (req, reply) => {
+        try {
+            gateFeature(config, req.authixToken, CATALOX_FEATURES.itemWrite);
+            const context = resolveRequestContext(req, config);
+            const catalogId = req.params.catalogId;
+            const itemId = req.params.itemId;
+            const body = req.body ?? {};
+            const item = await catalox.upsertNativeCatalogItem(context, catalogId, {
+                itemId,
+                ...body,
+            });
+            return reply.send({ outcome: "ok", result: { item } });
+        }
+        catch (e) {
+            const err = e;
+            return reply.status(err.statusCode ?? 500).send({ outcome: "error", error: { message: err.message } });
+        }
+    });
+    app.patch("/v1/catalogs/:catalogId/items/:itemId", async (req, reply) => {
+        try {
+            gateFeature(config, req.authixToken, CATALOX_FEATURES.itemWrite);
+            const context = resolveRequestContext(req, config);
+            const catalogId = req.params.catalogId;
+            const itemId = req.params.itemId;
+            const item = await catalox.updateNativeCatalogItem(context, catalogId, itemId, req.body ?? {});
+            return reply.send({ outcome: "ok", result: { item } });
+        }
+        catch (e) {
+            const err = e;
+            return reply.status(err.statusCode ?? 500).send({ outcome: "error", error: { message: err.message } });
+        }
+    });
+    app.get("/v1/catalogs/:catalogId/items/:itemId/native-record", async (req, reply) => {
+        try {
+            gateFeature(config, req.authixToken, CATALOX_FEATURES.itemRead);
+            const context = resolveRequestContext(req, config);
+            const catalogId = req.params.catalogId;
+            const itemId = req.params.itemId;
+            const record = await catalox.getNativeCatalogItem(context, catalogId, itemId);
+            if (!record) {
+                return reply.status(404).send({ outcome: "not_found", error: { message: "Native catalog item not found" } });
+            }
+            return reply.send({ outcome: "ok", result: { record } });
+        }
+        catch (e) {
+            const err = e;
+            return reply.status(err.statusCode ?? 500).send({ outcome: "error", error: { message: err.message } });
+        }
+    });
+    app.put("/v1/catalogs/:catalogId/items/:itemId/native-record", async (req, reply) => {
+        try {
+            gateFeature(config, req.authixToken, CATALOX_FEATURES.itemWrite);
+            const context = resolveRequestContext(req, config);
+            const catalogId = req.params.catalogId;
+            const itemId = req.params.itemId;
+            const record = { ...(req.body ?? {}), itemId, catalogId };
+            await catalox.replaceNativeCatalogItem(context, catalogId, record);
+            return reply.send({ outcome: "ok", result: { itemId } });
+        }
+        catch (e) {
+            const err = e;
+            return reply.status(err.statusCode ?? 500).send({ outcome: "error", error: { message: err.message } });
+        }
+    });
+}
+//# sourceMappingURL=items.js.map

package/dist/routes/items.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"items.js","sourceRoot":"","sources":["../../src/routes/items.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAG/D,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,oBAAoB,EAAE,2BAA2B,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC7G,OAAO,EAAE,qBAAqB,EAA2B,MAAM,+BAA+B,CAAC;AAE/F,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,GAAoB,EACpB,OAAgB,EAChB,MAAwB;IAExB,GAAG,CAAC,GAAG,CAGJ,+BAA+B,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACvD,IAAI,CAAC;YACH,WAAW,CAAC,MAAM,EAAE,GAAG,CAAC,WAAW,EAAE,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YAChE,MAAM,OAAO,GAAG,qBAAqB,CAAC,GAAyB,EAAE,MAAM,CAAC,CAAC;YACzE,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,SAAsB,CAAC;YACpD,MAAM,OAAO,GAAwC,EAAE,CAAC;YACxD,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK;gBAAE,OAAO,CAAC,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC7D,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM;gBAAE,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAChE,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,2BAA2B,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;YACnF,MAAM,IAAI,GAAG,iBAAiB,CAAC,GAAG,CAAC,OAAO,EAAE,GAAyC,CAAC,CAAC;YACvF,OAAO,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,MAAM,GAAG,GAAG,CAA8C,CAAC;YAC3D,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACzG,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CACL,uCAAuC,EACvC,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,IAAI,CAAC;YACH,WAAW,CAAC,MAAM,EAAE,GAAG,CAAC,WAAW,EAAE,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YAChE,MAAM,OAAO,GAAG,qBAAqB,CAAC,GAAyB,EAAE,MAAM,CAAC,CAAC;YACzE,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,SAAsB,CAAC;YACpD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,MAAgB,CAAC;YAC3C,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,yBAAyB,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;YAChF,MAAM,IAAI,GAAG,oBAAoB,CAAC,GAAG,CAAC,OAAO,EAAE,GAAyC,CAAC,CAAC;YAC1F,OAAO,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,MAAM,GAAG,GAAG,CAA8C,CAAC;YAC3D,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACzG,CAAC;IACH,CAAC,CACF,CAAC;IAEF,GAAG,CAAC,GAAG,CAGJ,wCAAwC,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QAChE,IAAI,CAAC;YACH,WAAW,CAAC,MAAM,EAAE,GAAG,CAAC,WAAW,EAAE,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YAChE,MAAM,OAAO,GAAG,qBAAqB,CAAC,GAAyB,EAAE,MAAM,CAAC,CAAC;YACzE,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,SAAsB,CAAC;YACpD,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC;YACtC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC;YAC9B,IAAI,CAAC,SAAS,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;gBAChC,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBAC5B,OAAO,EAAE,OAAO;oBAChB,KAAK,EAAE,EAAE,OAAO,EAAE,oDAAoD,EAAE;iBACzE,CAAC,CAAC;YACL,CAAC;YACD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,gCAAgC,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;YACjG,MAAM,IAAI,GAAG,2BAA2B,CAAC,GAAG,CAAC,OAAO,EAAE,GAAyC,CAAC,CAAC;YACjG,OAAO,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,MAAM,GAAG,GAAG,CAA8C,CAAC;YAC3D,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACzG,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CACL,uCAAuC,EACvC,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,IAAI,CAAC;YACH,WAAW,CAAC,MAAM,EAAE,GAAG,CAAC,WAAW,EAAE,gBAAgB,CAAC,SAAS,CAAC,CAAC;YACjE,MAAM,OAAO,GAAG,qBAAqB,CAAC,GAAyB,EAAE,MAAM,CAAC,CAAC;YACzE,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,SAAsB,CAAC;YACpD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,MAAgB,CAAC;YAC3C,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;YAC5B,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,uBAAuB,CAAC,OAAO,EAAE,SAAS,EAAE;gBACrE,MAAM;gBACN,GAAI,IAAe;aACpB,CAAC,CAAC;YACH,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QACzD,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,MAAM,GAAG,GAAG,CAA8C,CAAC;YAC3D,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACzG,CAAC;IACH,CAAC,CACF,CAAC;IAEF,GAAG,CAAC,KAAK,CACP,uCAAuC,EACvC,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,IAAI,CAAC;YACH,WAAW,CAAC,MAAM,EAAE,GAAG,CAAC,WAAW,EAAE,gBAAgB,CAAC,SAAS,CAAC,CAAC;YACjE,MAAM,OAAO,GAAG,qBAAqB,CAAC,GAAyB,EAAE,MAAM,CAAC,CAAC;YACzE,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,SAAsB,CAAC;YACpD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,MAAgB,CAAC;YAC3C,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,uBAAuB,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;YAC/F,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QACzD,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,MAAM,GAAG,GAAG,CAA8C,CAAC;YAC3D,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACzG,CAAC;IACH,CAAC,CACF,CAAC;IAEF,GAAG,CAAC,GAAG,CACL,qDAAqD,EACrD,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,IAAI,CAAC;YACH,WAAW,CAAC,MAAM,EAAE,GAAG,CAAC,WAAW,EAAE,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YAChE,MAAM,OAAO,GAAG,qBAAqB,CAAC,GAAyB,EAAE,MAAM,CAAC,CAAC;YACzE,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,SAAsB,CAAC;YACpD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,MAAgB,CAAC;YAC3C,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,oBAAoB,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;YAC9E,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,+BAA+B,EAAE,EAAE,CAAC,CAAC;YAC/G,CAAC;YACD,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QAC3D,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,MAAM,GAAG,GAAG,CAA8C,CAAC;YAC3D,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACzG,CAAC;IACH,CAAC,CACF,CAAC;IAEF,GAAG,CAAC,GAAG,CACL,qDAAqD,EACrD,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,IAAI,CAAC;YACH,WAAW,CAAC,MAAM,EAAE,GAAG,CAAC,WAAW,EAAE,gBAAgB,CAAC,SAAS,CAAC,CAAC;YACjE,MAAM,OAAO,GAAG,qBAAqB,CAAC,GAAyB,EAAE,MAAM,CAAC,CAAC;YACzE,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,SAAsB,CAAC;YACpD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,MAAgB,CAAC;YAC3C,MAAM,MAAM,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,SAAS,EAA6B,CAAC;YACrF,MAAM,OAAO,CAAC,wBAAwB,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;YACnE,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QAC3D,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,MAAM,GAAG,GAAG,CAA8C,CAAC;YAC3D,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACzG,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/routes/operator.d.ts

@@ -0,0 +1,5 @@
+import type { FastifyInstance } from "fastify";
+import type { Catalox } from "@x12i/catalox-engine/embedder";
+import type { CataloxApiConfig } from "../config.js";
+export declare function registerOperatorRoutes(app: FastifyInstance, catalox: Catalox, config: CataloxApiConfig): Promise<void>;
+//# sourceMappingURL=operator.d.ts.map

package/dist/routes/operator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"operator.d.ts","sourceRoot":"","sources":["../../src/routes/operator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,+BAA+B,CAAC;AAI7D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAIrD,wBAAsB,sBAAsB,CAC1C,GAAG,EAAE,eAAe,EACpB,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,gBAAgB,GACvB,OAAO,CAAC,IAAI,CAAC,CAgDf"}

package/dist/routes/operator.js

@@ -0,0 +1,48 @@
+import { CATALOX_FEATURES } from "@x12i/catalox-authix-bridge";
+import { gateFeature } from "../feature-gates.js";
+import { resolveRequestContext } from "../resolve-request-context.js";
+export async function registerOperatorRoutes(app, catalox, config) {
+    app.get("/v1/catalogs", async (req, reply) => {
+        try {
+            gateFeature(config, req.authixToken, CATALOX_FEATURES.operatorRead);
+            const context = resolveRequestContext(req, config);
+            const catalogs = await catalox.listAllCatalogs(context);
+            return reply.send({ outcome: "ok", result: { catalogs } });
+        }
+        catch (e) {
+            const err = e;
+            return reply.status(err.statusCode ?? 500).send({ outcome: "error", error: { message: err.message } });
+        }
+    });
+    app.post("/v1/apps/:appId/catalogs/:catalogId/bind", async (req, reply) => {
+        try {
+            gateFeature(config, req.authixToken, CATALOX_FEATURES.catalogAdmin);
+            const context = resolveRequestContext(req, config);
+            const binding = await catalox.bindCatalogToApp(context, {
+                appId: req.params.appId,
+                catalogId: req.params.catalogId,
+                ...req.body,
+            });
+            return reply.send({ outcome: "ok", result: { binding } });
+        }
+        catch (e) {
+            const err = e;
+            return reply.status(err.statusCode ?? 500).send({ outcome: "error", error: { message: err.message } });
+        }
+    });
+    app.get("/v1/catalogs/:catalogId/export", async (req, reply) => {
+        try {
+            gateFeature(config, req.authixToken, CATALOX_FEATURES.operatorRead);
+            const context = resolveRequestContext(req, config);
+            const json = await catalox.exportCatalogSnapshotToJson(context, {
+                catalogIds: [req.params.catalogId],
+            });
+            return reply.send({ outcome: "ok", result: json });
+        }
+        catch (e) {
+            const err = e;
+            return reply.status(err.statusCode ?? 500).send({ outcome: "error", error: { message: err.message } });
+        }
+    });
+}
+//# sourceMappingURL=operator.js.map

package/dist/routes/operator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"operator.js","sourceRoot":"","sources":["../../src/routes/operator.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAG/D,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,qBAAqB,EAA2B,MAAM,+BAA+B,CAAC;AAE/F,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,GAAoB,EACpB,OAAgB,EAChB,MAAwB;IAExB,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QAC3C,IAAI,CAAC;YACH,WAAW,CAAC,MAAM,EAAE,GAAG,CAAC,WAAW,EAAE,gBAAgB,CAAC,YAAY,CAAC,CAAC;YACpE,MAAM,OAAO,GAAG,qBAAqB,CAAC,GAAyB,EAAE,MAAM,CAAC,CAAC;YACzE,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;YACxD,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC7D,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,MAAM,GAAG,GAAG,CAA8C,CAAC;YAC3D,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACzG,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAGL,0CAA0C,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QAClE,IAAI,CAAC;YACH,WAAW,CAAC,MAAM,EAAE,GAAG,CAAC,WAAW,EAAE,gBAAgB,CAAC,YAAY,CAAC,CAAC;YACpE,MAAM,OAAO,GAAG,qBAAqB,CAAC,GAAyB,EAAE,MAAM,CAAC,CAAC;YACzE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,gBAAgB,CAAC,OAAO,EAAE;gBACtD,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,KAAc;gBAChC,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,SAAsB;gBAC5C,GAAI,GAAG,CAAC,IAAe;aACxB,CAAC,CAAC;YACH,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;QAC5D,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,MAAM,GAAG,GAAG,CAA8C,CAAC;YAC3D,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACzG,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CACL,gCAAgC,EAChC,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,IAAI,CAAC;YACH,WAAW,CAAC,MAAM,EAAE,GAAG,CAAC,WAAW,EAAE,gBAAgB,CAAC,YAAY,CAAC,CAAC;YACpE,MAAM,OAAO,GAAG,qBAAqB,CAAC,GAAyB,EAAE,MAAM,CAAC,CAAC;YACzE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,2BAA2B,CAAC,OAAO,EAAE;gBAC9D,UAAU,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,SAAsB,CAAC;aAChD,CAAC,CAAC;YACH,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,MAAM,GAAG,GAAG,CAA8C,CAAC;YAC3D,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACzG,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/routes/search.d.ts

@@ -0,0 +1,5 @@
+import type { FastifyInstance } from "fastify";
+import type { Catalox } from "@x12i/catalox-engine/embedder";
+import type { CataloxApiConfig } from "../config.js";
+export declare function registerSearchRoutes(app: FastifyInstance, catalox: Catalox, config: CataloxApiConfig): Promise<void>;
+//# sourceMappingURL=search.d.ts.map

package/dist/routes/search.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"search.d.ts","sourceRoot":"","sources":["../../src/routes/search.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,+BAA+B,CAAC;AAI7D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAIrD,wBAAsB,oBAAoB,CACxC,GAAG,EAAE,eAAe,EACpB,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,gBAAgB,GACvB,OAAO,CAAC,IAAI,CAAC,CAoBf"}

package/dist/routes/search.js

@@ -0,0 +1,23 @@
+import { CATALOX_FEATURES } from "@x12i/catalox-authix-bridge";
+import { gateFeature } from "../feature-gates.js";
+import { resolveRequestContext } from "../resolve-request-context.js";
+export async function registerSearchRoutes(app, catalox, config) {
+    app.post("/v1/catalogs/:catalogId/search", async (req, reply) => {
+        try {
+            gateFeature(config, req.authixToken, CATALOX_FEATURES.itemSearch);
+            const context = resolveRequestContext(req, config);
+            const catalogId = req.params.catalogId;
+            const body = req.body ?? {};
+            const results = await catalox.searchCatalogItems(context, catalogId, {
+                text: body.query ?? "",
+                ...(body.limit != null ? { limit: body.limit } : {}),
+            });
+            return reply.send({ outcome: "ok", result: { items: results } });
+        }
+        catch (e) {
+            const err = e;
+            return reply.status(err.statusCode ?? 500).send({ outcome: "error", error: { message: err.message } });
+        }
+    });
+}
+//# sourceMappingURL=search.js.map

package/dist/routes/search.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"search.js","sourceRoot":"","sources":["../../src/routes/search.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAG/D,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,qBAAqB,EAA2B,MAAM,+BAA+B,CAAC;AAE/F,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,GAAoB,EACpB,OAAgB,EAChB,MAAwB;IAExB,GAAG,CAAC,IAAI,CAGL,gCAAgC,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACxD,IAAI,CAAC;YACH,WAAW,CAAC,MAAM,EAAE,GAAG,CAAC,WAAW,EAAE,gBAAgB,CAAC,UAAU,CAAC,CAAC;YAClE,MAAM,OAAO,GAAG,qBAAqB,CAAC,GAAyB,EAAE,MAAM,CAAC,CAAC;YACzE,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,SAAsB,CAAC;YACpD,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;YAC5B,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,kBAAkB,CAAC,OAAO,EAAE,SAAS,EAAE;gBACnE,IAAI,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE;gBACtB,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACrD,CAAC,CAAC;YACH,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;QACnE,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,MAAM,GAAG,GAAG,CAA8C,CAAC;YAC3D,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACzG,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/package.json

@@ -0,0 +1,33 @@
+{
+  "name": "@x12i/catalox-api",
+  "version": "5.9.8",
+  "description": "HTTP route layer for Catalox",
+  "license": "MIT",
+  "type": "module",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "files": ["dist"],
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "clean": "node -e \"require('node:fs').rmSync('dist',{recursive:true,force:true})\"",
+    "test": "node --import tsx --test \"test/**/*.test.ts\""
+  },
+  "dependencies": {
+    "@x12i/authix-types": "^1.0.2",
+    "@x12i/catalox-authix-bridge": "5.9.8",
+    "@x12i/catalox-contracts": "5.9.8",
+    "@x12i/catalox-engine": "5.9.8",
+    "fastify": "^5.3.0"
+  },
+  "devDependencies": {
+    "@types/node": "^22.0.0",
+    "tsx": "^4.0.0",
+    "typescript": "^5.0.0"
+  }
+}