@x12i/memorix-service 3.3.0 → 3.6.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +23 -6
- package/dist/app.d.ts.map +1 -1
- package/dist/app.js +10 -0
- package/dist/app.js.map +1 -1
- package/dist/blob-store/config.d.ts +31 -0
- package/dist/blob-store/config.d.ts.map +1 -0
- package/dist/blob-store/config.js +68 -0
- package/dist/blob-store/config.js.map +1 -0
- package/dist/blob-store/disk.d.ts +10 -0
- package/dist/blob-store/disk.d.ts.map +1 -0
- package/dist/blob-store/disk.js +104 -0
- package/dist/blob-store/disk.js.map +1 -0
- package/dist/blob-store/index.d.ts +6 -0
- package/dist/blob-store/index.d.ts.map +1 -0
- package/dist/blob-store/index.js +6 -0
- package/dist/blob-store/index.js.map +1 -0
- package/dist/blob-store/memory.d.ts +4 -0
- package/dist/blob-store/memory.d.ts.map +1 -0
- package/dist/blob-store/memory.js +47 -0
- package/dist/blob-store/memory.js.map +1 -0
- package/dist/blob-store/s3.d.ts +52 -0
- package/dist/blob-store/s3.d.ts.map +1 -0
- package/dist/blob-store/s3.js +151 -0
- package/dist/blob-store/s3.js.map +1 -0
- package/dist/blob-store/types.d.ts +30 -0
- package/dist/blob-store/types.d.ts.map +1 -0
- package/dist/blob-store/types.js +38 -0
- package/dist/blob-store/types.js.map +1 -0
- package/dist/catalog-store-cli.d.ts.map +1 -1
- package/dist/catalog-store-cli.js +35 -4
- package/dist/catalog-store-cli.js.map +1 -1
- package/dist/connector-ops/checkpoint-store.d.ts +7 -0
- package/dist/connector-ops/checkpoint-store.d.ts.map +1 -0
- package/dist/connector-ops/checkpoint-store.js +135 -0
- package/dist/connector-ops/checkpoint-store.js.map +1 -0
- package/dist/connector-ops/checkpoint-types.d.ts +46 -0
- package/dist/connector-ops/checkpoint-types.d.ts.map +1 -0
- package/dist/connector-ops/checkpoint-types.js +14 -0
- package/dist/connector-ops/checkpoint-types.js.map +1 -0
- package/dist/connector-ops/continuous-types.d.ts +141 -0
- package/dist/connector-ops/continuous-types.d.ts.map +1 -0
- package/dist/connector-ops/continuous-types.js +13 -0
- package/dist/connector-ops/continuous-types.js.map +1 -0
- package/dist/connector-ops/coordinator.d.ts +88 -0
- package/dist/connector-ops/coordinator.d.ts.map +1 -0
- package/dist/connector-ops/coordinator.js +174 -0
- package/dist/connector-ops/coordinator.js.map +1 -0
- package/dist/connector-ops/index.d.ts +6 -0
- package/dist/connector-ops/index.d.ts.map +1 -1
- package/dist/connector-ops/index.js +6 -0
- package/dist/connector-ops/index.js.map +1 -1
- package/dist/connector-ops/run-store.d.ts +16 -0
- package/dist/connector-ops/run-store.d.ts.map +1 -0
- package/dist/connector-ops/run-store.js +249 -0
- package/dist/connector-ops/run-store.js.map +1 -0
- package/dist/connector-ops/schedule-lease-store.d.ts +8 -0
- package/dist/connector-ops/schedule-lease-store.d.ts.map +1 -0
- package/dist/connector-ops/schedule-lease-store.js +318 -0
- package/dist/connector-ops/schedule-lease-store.js.map +1 -0
- package/dist/incremental-state/index.d.ts +3 -0
- package/dist/incremental-state/index.d.ts.map +1 -0
- package/dist/incremental-state/index.js +3 -0
- package/dist/incremental-state/index.js.map +1 -0
- package/dist/incremental-state/state-store.d.ts +7 -0
- package/dist/incremental-state/state-store.d.ts.map +1 -0
- package/dist/incremental-state/state-store.js +183 -0
- package/dist/incremental-state/state-store.js.map +1 -0
- package/dist/incremental-state/types.d.ts +104 -0
- package/dist/incremental-state/types.d.ts.map +1 -0
- package/dist/incremental-state/types.js +8 -0
- package/dist/incremental-state/types.js.map +1 -0
- package/dist/index.d.ts +3 -0
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +3 -0
- package/dist/index.js.map +1 -1
- package/dist/integrations/index.d.ts +3 -0
- package/dist/integrations/index.d.ts.map +1 -0
- package/dist/integrations/index.js +3 -0
- package/dist/integrations/index.js.map +1 -0
- package/dist/integrations/instance-store.d.ts +5 -0
- package/dist/integrations/instance-store.d.ts.map +1 -0
- package/dist/integrations/instance-store.js +327 -0
- package/dist/integrations/instance-store.js.map +1 -0
- package/dist/integrations/types.d.ts +92 -0
- package/dist/integrations/types.d.ts.map +1 -0
- package/dist/integrations/types.js +40 -0
- package/dist/integrations/types.js.map +1 -0
- package/dist/magit/magit-pack-service.d.ts +187 -3
- package/dist/magit/magit-pack-service.d.ts.map +1 -1
- package/dist/magit/magit-pack-service.js +401 -8
- package/dist/magit/magit-pack-service.js.map +1 -1
- package/dist/openapi/openapi.json +1348 -2
- package/dist/platform.d.ts +44 -1
- package/dist/platform.d.ts.map +1 -1
- package/dist/platform.js +172 -1
- package/dist/platform.js.map +1 -1
- package/dist/restricted-store/crypto.d.ts +10 -0
- package/dist/restricted-store/crypto.d.ts.map +1 -0
- package/dist/restricted-store/crypto.js +43 -0
- package/dist/restricted-store/crypto.js.map +1 -0
- package/dist/restricted-store/index.d.ts +4 -0
- package/dist/restricted-store/index.d.ts.map +1 -0
- package/dist/restricted-store/index.js +4 -0
- package/dist/restricted-store/index.js.map +1 -0
- package/dist/restricted-store/object-store.d.ts +12 -0
- package/dist/restricted-store/object-store.d.ts.map +1 -0
- package/dist/restricted-store/object-store.js +233 -0
- package/dist/restricted-store/object-store.js.map +1 -0
- package/dist/restricted-store/types.d.ts +78 -0
- package/dist/restricted-store/types.d.ts.map +1 -0
- package/dist/restricted-store/types.js +12 -0
- package/dist/restricted-store/types.js.map +1 -0
- package/dist/routes/continuous-acquisition.d.ts +5 -0
- package/dist/routes/continuous-acquisition.d.ts.map +1 -0
- package/dist/routes/continuous-acquisition.js +259 -0
- package/dist/routes/continuous-acquisition.js.map +1 -0
- package/dist/routes/incremental-state.d.ts +5 -0
- package/dist/routes/incremental-state.d.ts.map +1 -0
- package/dist/routes/incremental-state.js +173 -0
- package/dist/routes/incremental-state.js.map +1 -0
- package/dist/routes/integrations.d.ts +5 -0
- package/dist/routes/integrations.d.ts.map +1 -0
- package/dist/routes/integrations.js +126 -0
- package/dist/routes/integrations.js.map +1 -0
- package/dist/routes/metadata.d.ts.map +1 -1
- package/dist/routes/metadata.js +328 -4
- package/dist/routes/metadata.js.map +1 -1
- package/dist/routes/restricted-store.d.ts +5 -0
- package/dist/routes/restricted-store.d.ts.map +1 -0
- package/dist/routes/restricted-store.js +117 -0
- package/dist/routes/restricted-store.js.map +1 -0
- package/openapi/openapi.json +1348 -2
- package/package.json +3 -2
|
@@ -0,0 +1,233 @@
|
|
|
1
|
+
import { randomUUID } from "node:crypto";
|
|
2
|
+
import { decryptRestrictedBody, encryptRestrictedBody, parseRestrictedKek, sha256Hex, } from "./crypto.js";
|
|
3
|
+
import { RESTRICTED_COLLECTIONS, } from "./types.js";
|
|
4
|
+
function operationalDbName(orgId) {
|
|
5
|
+
return `${orgId}_operational`;
|
|
6
|
+
}
|
|
7
|
+
function assertClassification(raw) {
|
|
8
|
+
if (raw === "restricted" || raw === "config-backup")
|
|
9
|
+
return raw;
|
|
10
|
+
throw new Error("classification must be restricted|config-backup");
|
|
11
|
+
}
|
|
12
|
+
function createStoreCore(orgId, blobs, kek, meta) {
|
|
13
|
+
return {
|
|
14
|
+
async put(input) {
|
|
15
|
+
const classification = assertClassification(input.classification);
|
|
16
|
+
if (!input.bodyBase64?.trim()) {
|
|
17
|
+
throw new Error("bodyBase64 required");
|
|
18
|
+
}
|
|
19
|
+
let plain;
|
|
20
|
+
try {
|
|
21
|
+
plain = Buffer.from(input.bodyBase64, "base64");
|
|
22
|
+
}
|
|
23
|
+
catch {
|
|
24
|
+
throw new Error("bodyBase64 invalid");
|
|
25
|
+
}
|
|
26
|
+
if (plain.byteLength === 0)
|
|
27
|
+
throw new Error("body empty");
|
|
28
|
+
const contentHash = sha256Hex(plain);
|
|
29
|
+
const objectId = input.objectId?.trim() || `rso_${randomUUID().replace(/-/g, "").slice(0, 24)}`;
|
|
30
|
+
const blobKey = `restricted/${objectId}`;
|
|
31
|
+
let storeBody = plain;
|
|
32
|
+
let encryptedAtRest = false;
|
|
33
|
+
if (kek) {
|
|
34
|
+
storeBody = encryptRestrictedBody(plain, kek);
|
|
35
|
+
encryptedAtRest = true;
|
|
36
|
+
}
|
|
37
|
+
await blobs.put(orgId, blobKey, storeBody, {
|
|
38
|
+
contentType: input.contentType ?? "application/octet-stream",
|
|
39
|
+
});
|
|
40
|
+
const now = new Date().toISOString();
|
|
41
|
+
const doc = {
|
|
42
|
+
orgId,
|
|
43
|
+
objectId,
|
|
44
|
+
classification,
|
|
45
|
+
contentHash,
|
|
46
|
+
sizeBytes: plain.byteLength,
|
|
47
|
+
blobKey,
|
|
48
|
+
blobBackend: blobs.backend,
|
|
49
|
+
encryptedAtRest,
|
|
50
|
+
createdAt: now,
|
|
51
|
+
...(input.deviceId != null ? { deviceId: String(input.deviceId) } : {}),
|
|
52
|
+
...(input.vdom != null ? { vdom: String(input.vdom) } : {}),
|
|
53
|
+
...(input.sourceRunId != null
|
|
54
|
+
? { sourceRunId: String(input.sourceRunId) }
|
|
55
|
+
: {}),
|
|
56
|
+
...(input.contentType != null
|
|
57
|
+
? { contentType: String(input.contentType) }
|
|
58
|
+
: {}),
|
|
59
|
+
...(input.version != null ? { version: String(input.version) } : {}),
|
|
60
|
+
...(input.createdBy != null ? { createdBy: String(input.createdBy) } : {}),
|
|
61
|
+
...(input.retainUntil !== undefined
|
|
62
|
+
? { retainUntil: input.retainUntil }
|
|
63
|
+
: {}),
|
|
64
|
+
};
|
|
65
|
+
await meta.upsert(doc);
|
|
66
|
+
await meta.insertAudit({
|
|
67
|
+
auditId: randomUUID(),
|
|
68
|
+
orgId,
|
|
69
|
+
objectId,
|
|
70
|
+
contentHash,
|
|
71
|
+
at: now,
|
|
72
|
+
actor: input.createdBy,
|
|
73
|
+
action: "put",
|
|
74
|
+
});
|
|
75
|
+
return doc;
|
|
76
|
+
},
|
|
77
|
+
async getMeta(objectId) {
|
|
78
|
+
return meta.get(objectId);
|
|
79
|
+
},
|
|
80
|
+
async getContent(objectId) {
|
|
81
|
+
const m = await meta.get(objectId);
|
|
82
|
+
if (!m)
|
|
83
|
+
return null;
|
|
84
|
+
const raw = await blobs.get(orgId, m.blobKey);
|
|
85
|
+
if (!raw)
|
|
86
|
+
return null;
|
|
87
|
+
let body = raw;
|
|
88
|
+
if (m.encryptedAtRest) {
|
|
89
|
+
if (!kek) {
|
|
90
|
+
throw new Error("restricted body is encrypted but MEMORIX_RESTRICTED_KEK is not configured");
|
|
91
|
+
}
|
|
92
|
+
body = decryptRestrictedBody(raw, kek);
|
|
93
|
+
}
|
|
94
|
+
const hash = sha256Hex(body);
|
|
95
|
+
if (hash !== m.contentHash) {
|
|
96
|
+
throw new Error("restricted body contentHash mismatch");
|
|
97
|
+
}
|
|
98
|
+
return { meta: m, body };
|
|
99
|
+
},
|
|
100
|
+
async delete(objectId) {
|
|
101
|
+
const m = await meta.get(objectId);
|
|
102
|
+
if (!m)
|
|
103
|
+
return false;
|
|
104
|
+
await blobs.delete(orgId, m.blobKey);
|
|
105
|
+
await meta.delete(objectId);
|
|
106
|
+
await meta.insertAudit({
|
|
107
|
+
auditId: randomUUID(),
|
|
108
|
+
orgId,
|
|
109
|
+
objectId,
|
|
110
|
+
contentHash: m.contentHash,
|
|
111
|
+
at: new Date().toISOString(),
|
|
112
|
+
action: "delete",
|
|
113
|
+
});
|
|
114
|
+
return true;
|
|
115
|
+
},
|
|
116
|
+
async purgeExpired(now = new Date()) {
|
|
117
|
+
const all = await meta.list();
|
|
118
|
+
const iso = now.toISOString();
|
|
119
|
+
let n = 0;
|
|
120
|
+
for (const m of all) {
|
|
121
|
+
if (m.retainUntil && m.retainUntil <= iso) {
|
|
122
|
+
await blobs.delete(orgId, m.blobKey);
|
|
123
|
+
await meta.delete(m.objectId);
|
|
124
|
+
await meta.insertAudit({
|
|
125
|
+
auditId: randomUUID(),
|
|
126
|
+
orgId,
|
|
127
|
+
objectId: m.objectId,
|
|
128
|
+
contentHash: m.contentHash,
|
|
129
|
+
at: iso,
|
|
130
|
+
action: "purge",
|
|
131
|
+
});
|
|
132
|
+
n += 1;
|
|
133
|
+
}
|
|
134
|
+
}
|
|
135
|
+
return n;
|
|
136
|
+
},
|
|
137
|
+
async recordAccessAudit(entry) {
|
|
138
|
+
const row = {
|
|
139
|
+
auditId: randomUUID(),
|
|
140
|
+
orgId,
|
|
141
|
+
objectId: entry.objectId,
|
|
142
|
+
contentHash: entry.contentHash,
|
|
143
|
+
at: entry.at ?? new Date().toISOString(),
|
|
144
|
+
actor: entry.actor,
|
|
145
|
+
reason: entry.reason,
|
|
146
|
+
action: entry.action,
|
|
147
|
+
};
|
|
148
|
+
await meta.insertAudit(row);
|
|
149
|
+
return row;
|
|
150
|
+
},
|
|
151
|
+
async listAccessAudits(opts) {
|
|
152
|
+
return meta.listAudits(opts);
|
|
153
|
+
},
|
|
154
|
+
};
|
|
155
|
+
}
|
|
156
|
+
export function createInMemoryRestrictedObjectStore(orgId, blobs, opts) {
|
|
157
|
+
const map = new Map();
|
|
158
|
+
const audits = [];
|
|
159
|
+
const kek = opts?.kek !== undefined
|
|
160
|
+
? opts.kek
|
|
161
|
+
: parseRestrictedKek(opts?.kekEnv);
|
|
162
|
+
return createStoreCore(orgId, blobs, kek, {
|
|
163
|
+
async get(objectId) {
|
|
164
|
+
return map.get(objectId) ?? null;
|
|
165
|
+
},
|
|
166
|
+
async upsert(doc) {
|
|
167
|
+
map.set(doc.objectId, doc);
|
|
168
|
+
},
|
|
169
|
+
async delete(objectId) {
|
|
170
|
+
return map.delete(objectId);
|
|
171
|
+
},
|
|
172
|
+
async list() {
|
|
173
|
+
return [...map.values()];
|
|
174
|
+
},
|
|
175
|
+
async insertAudit(row) {
|
|
176
|
+
audits.unshift(row);
|
|
177
|
+
},
|
|
178
|
+
async listAudits(opts) {
|
|
179
|
+
let rows = audits;
|
|
180
|
+
if (opts?.objectId) {
|
|
181
|
+
rows = rows.filter((a) => a.objectId === opts.objectId);
|
|
182
|
+
}
|
|
183
|
+
const limit = Math.min(Math.max(opts?.limit ?? 50, 1), 200);
|
|
184
|
+
return rows.slice(0, limit);
|
|
185
|
+
},
|
|
186
|
+
});
|
|
187
|
+
}
|
|
188
|
+
export function createMongoRestrictedObjectStore(client, orgId, blobs, opts) {
|
|
189
|
+
const db = client.db(operationalDbName(orgId));
|
|
190
|
+
const col = db.collection(RESTRICTED_COLLECTIONS.objects);
|
|
191
|
+
const auditCol = db.collection(RESTRICTED_COLLECTIONS.audits);
|
|
192
|
+
const kek = opts?.kek !== undefined
|
|
193
|
+
? opts.kek
|
|
194
|
+
: parseRestrictedKek(opts?.kekEnv ?? process.env.MEMORIX_RESTRICTED_KEK);
|
|
195
|
+
return createStoreCore(orgId, blobs, kek, {
|
|
196
|
+
async get(objectId) {
|
|
197
|
+
const doc = await col.findOne({ orgId, objectId });
|
|
198
|
+
if (!doc)
|
|
199
|
+
return null;
|
|
200
|
+
const { _id: _d, ...rest } = doc;
|
|
201
|
+
return rest;
|
|
202
|
+
},
|
|
203
|
+
async upsert(doc) {
|
|
204
|
+
await col.replaceOne({ orgId, objectId: doc.objectId }, doc, {
|
|
205
|
+
upsert: true,
|
|
206
|
+
});
|
|
207
|
+
},
|
|
208
|
+
async delete(objectId) {
|
|
209
|
+
const r = await col.deleteOne({ orgId, objectId });
|
|
210
|
+
return r.deletedCount > 0;
|
|
211
|
+
},
|
|
212
|
+
async list() {
|
|
213
|
+
const rows = await col.find({ orgId }).toArray();
|
|
214
|
+
return rows.map(({ _id: _d, ...rest }) => rest);
|
|
215
|
+
},
|
|
216
|
+
async insertAudit(row) {
|
|
217
|
+
await auditCol.insertOne(row);
|
|
218
|
+
},
|
|
219
|
+
async listAudits(opts) {
|
|
220
|
+
const filter = { orgId };
|
|
221
|
+
if (opts?.objectId)
|
|
222
|
+
filter.objectId = opts.objectId;
|
|
223
|
+
const limit = Math.min(Math.max(opts?.limit ?? 50, 1), 200);
|
|
224
|
+
const rows = await auditCol
|
|
225
|
+
.find(filter)
|
|
226
|
+
.sort({ at: -1 })
|
|
227
|
+
.limit(limit)
|
|
228
|
+
.toArray();
|
|
229
|
+
return rows.map(({ _id: _d, ...rest }) => rest);
|
|
230
|
+
},
|
|
231
|
+
});
|
|
232
|
+
}
|
|
233
|
+
//# sourceMappingURL=object-store.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"object-store.js","sourceRoot":"","sources":["../../src/restricted-store/object-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,kBAAkB,EAClB,SAAS,GACV,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,sBAAsB,GAMvB,MAAM,YAAY,CAAC;AAEpB,SAAS,iBAAiB,CAAC,KAAa;IACtC,OAAO,GAAG,KAAK,cAAc,CAAC;AAChC,CAAC;AAED,SAAS,oBAAoB,CAC3B,GAAW;IAEX,IAAI,GAAG,KAAK,YAAY,IAAI,GAAG,KAAK,eAAe;QAAE,OAAO,GAAG,CAAC;IAChE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,eAAe,CACtB,KAAa,EACb,KAAsB,EACtB,GAAkB,EAClB,IAUC;IAED,OAAO;QACL,KAAK,CAAC,GAAG,CAAC,KAAK;YACb,MAAM,cAAc,GAAG,oBAAoB,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;YAClE,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,IAAI,EAAE,EAAE,CAAC;gBAC9B,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;YACzC,CAAC;YACD,IAAI,KAAa,CAAC;YAClB,IAAI,CAAC;gBACH,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;YAClD,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;YACxC,CAAC;YACD,IAAI,KAAK,CAAC,UAAU,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,YAAY,CAAC,CAAC;YAE1D,MAAM,WAAW,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;YACrC,MAAM,QAAQ,GACZ,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,OAAO,UAAU,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;YACjF,MAAM,OAAO,GAAG,cAAc,QAAQ,EAAE,CAAC;YACzC,IAAI,SAAS,GAAG,KAAK,CAAC;YACtB,IAAI,eAAe,GAAG,KAAK,CAAC;YAC5B,IAAI,GAAG,EAAE,CAAC;gBACR,SAAS,GAAG,qBAAqB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC9C,eAAe,GAAG,IAAI,CAAC;YACzB,CAAC;YAED,MAAM,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE;gBACzC,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,0BAA0B;aAC7D,CAAC,CAAC;YAEH,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACrC,MAAM,GAAG,GAAyB;gBAChC,KAAK;gBACL,QAAQ;gBACR,cAAc;gBACd,WAAW;gBACX,SAAS,EAAE,KAAK,CAAC,UAAU;gBAC3B,OAAO;gBACP,WAAW,EAAE,KAAK,CAAC,OAAO;gBAC1B,eAAe;gBACf,SAAS,EAAE,GAAG;gBACd,GAAG,CAAC,KAAK,CAAC,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvE,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3D,GAAG,CAAC,KAAK,CAAC,WAAW,IAAI,IAAI;oBAC3B,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE;oBAC5C,CAAC,CAAC,EAAE,CAAC;gBACP,GAAG,CAAC,KAAK,CAAC,WAAW,IAAI,IAAI;oBAC3B,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE;oBAC5C,CAAC,CAAC,EAAE,CAAC;gBACP,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACpE,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1E,GAAG,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS;oBACjC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE;oBACpC,CAAC,CAAC,EAAE,CAAC;aACR,CAAC;YACF,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACvB,MAAM,IAAI,CAAC,WAAW,CAAC;gBACrB,OAAO,EAAE,UAAU,EAAE;gBACrB,KAAK;gBACL,QAAQ;gBACR,WAAW;gBACX,EAAE,EAAE,GAAG;gBACP,KAAK,EAAE,KAAK,CAAC,SAAS;gBACtB,MAAM,EAAE,KAAK;aACd,CAAC,CAAC;YACH,OAAO,GAAG,CAAC;QACb,CAAC;QAED,KAAK,CAAC,OAAO,CAAC,QAAQ;YACpB,OAAO,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC5B,CAAC;QAED,KAAK,CAAC,UAAU,CAAC,QAAQ;YACvB,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACnC,IAAI,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC;YACpB,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;YAC9C,IAAI,CAAC,GAAG;gBAAE,OAAO,IAAI,CAAC;YACtB,IAAI,IAAI,GAAG,GAAG,CAAC;YACf,IAAI,CAAC,CAAC,eAAe,EAAE,CAAC;gBACtB,IAAI,CAAC,GAAG,EAAE,CAAC;oBACT,MAAM,IAAI,KAAK,CACb,2EAA2E,CAC5E,CAAC;gBACJ,CAAC;gBACD,IAAI,GAAG,qBAAqB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACzC,CAAC;YACD,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;YAC7B,IAAI,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;gBAC3B,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;YAC1D,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,QAAQ;YACnB,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACnC,IAAI,CAAC,CAAC;gBAAE,OAAO,KAAK,CAAC;YACrB,MAAM,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;YACrC,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC5B,MAAM,IAAI,CAAC,WAAW,CAAC;gBACrB,OAAO,EAAE,UAAU,EAAE;gBACrB,KAAK;gBACL,QAAQ;gBACR,WAAW,EAAE,CAAC,CAAC,WAAW;gBAC1B,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBAC5B,MAAM,EAAE,QAAQ;aACjB,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QAED,KAAK,CAAC,YAAY,CAAC,GAAG,GAAG,IAAI,IAAI,EAAE;YACjC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;YAC9B,MAAM,GAAG,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;YAC9B,IAAI,CAAC,GAAG,CAAC,CAAC;YACV,KAAK,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;gBACpB,IAAI,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,WAAW,IAAI,GAAG,EAAE,CAAC;oBAC1C,MAAM,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;oBACrC,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;oBAC9B,MAAM,IAAI,CAAC,WAAW,CAAC;wBACrB,OAAO,EAAE,UAAU,EAAE;wBACrB,KAAK;wBACL,QAAQ,EAAE,CAAC,CAAC,QAAQ;wBACpB,WAAW,EAAE,CAAC,CAAC,WAAW;wBAC1B,EAAE,EAAE,GAAG;wBACP,MAAM,EAAE,OAAO;qBAChB,CAAC,CAAC;oBACH,CAAC,IAAI,CAAC,CAAC;gBACT,CAAC;YACH,CAAC;YACD,OAAO,CAAC,CAAC;QACX,CAAC;QAED,KAAK,CAAC,iBAAiB,CAAC,KAAK;YAC3B,MAAM,GAAG,GAA0B;gBACjC,OAAO,EAAE,UAAU,EAAE;gBACrB,KAAK;gBACL,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,EAAE,EAAE,KAAK,CAAC,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACxC,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB,CAAC;YACF,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YAC5B,OAAO,GAAG,CAAC;QACb,CAAC;QAED,KAAK,CAAC,gBAAgB,CAAC,IAAI;YACzB,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mCAAmC,CACjD,KAAa,EACb,KAAsB,EACtB,IAA+C;IAE/C,MAAM,GAAG,GAAG,IAAI,GAAG,EAAgC,CAAC;IACpD,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,MAAM,GAAG,GACP,IAAI,EAAE,GAAG,KAAK,SAAS;QACrB,CAAC,CAAC,IAAI,CAAC,GAAG;QACV,CAAC,CAAC,kBAAkB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAEvC,OAAO,eAAe,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE;QACxC,KAAK,CAAC,GAAG,CAAC,QAAQ;YAChB,OAAO,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC;QACnC,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,GAAG;YACd,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QAC7B,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,QAAQ;YACnB,OAAO,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC9B,CAAC;QACD,KAAK,CAAC,IAAI;YACR,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3B,CAAC;QACD,KAAK,CAAC,WAAW,CAAC,GAAG;YACnB,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACtB,CAAC;QACD,KAAK,CAAC,UAAU,CAAC,IAAI;YACnB,IAAI,IAAI,GAAG,MAAM,CAAC;YAClB,IAAI,IAAI,EAAE,QAAQ,EAAE,CAAC;gBACnB,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC1D,CAAC;YACD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAC5D,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAC9B,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,gCAAgC,CAC9C,MAAmB,EACnB,KAAa,EACb,KAAsB,EACtB,IAA+C;IAE/C,MAAM,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/C,MAAM,GAAG,GAAG,EAAE,CAAC,UAAU,CACvB,sBAAsB,CAAC,OAAO,CAC/B,CAAC;IACF,MAAM,QAAQ,GAAG,EAAE,CAAC,UAAU,CAC5B,sBAAsB,CAAC,MAAM,CAC9B,CAAC;IACF,MAAM,GAAG,GACP,IAAI,EAAE,GAAG,KAAK,SAAS;QACrB,CAAC,CAAC,IAAI,CAAC,GAAG;QACV,CAAC,CAAC,kBAAkB,CAAC,IAAI,EAAE,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IAE7E,OAAO,eAAe,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE;QACxC,KAAK,CAAC,GAAG,CAAC,QAAQ;YAChB,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;YACnD,IAAI,CAAC,GAAG;gBAAE,OAAO,IAAI,CAAC;YACtB,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,IAAI,EAAE,GAAG,GAE5B,CAAC;YACF,OAAO,IAA4B,CAAC;QACtC,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,GAAG;YACd,MAAM,GAAG,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE;gBAC3D,MAAM,EAAE,IAAI;aACb,CAAC,CAAC;QACL,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,QAAQ;YACnB,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;YACnD,OAAO,CAAC,CAAC,YAAY,GAAG,CAAC,CAAC;QAC5B,CAAC;QACD,KAAK,CAAC,IAAI;YACR,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;YACjD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,CAAC,IAA4B,CAAC,CAAC;QAC1E,CAAC;QACD,KAAK,CAAC,WAAW,CAAC,GAAG;YACnB,MAAM,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAChC,CAAC;QACD,KAAK,CAAC,UAAU,CAAC,IAAI;YACnB,MAAM,MAAM,GAA4B,EAAE,KAAK,EAAE,CAAC;YAClD,IAAI,IAAI,EAAE,QAAQ;gBAAE,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;YACpD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAC5D,MAAM,IAAI,GAAG,MAAM,QAAQ;iBACxB,IAAI,CAAC,MAAM,CAAC;iBACZ,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC;iBAChB,KAAK,CAAC,KAAK,CAAC;iBACZ,OAAO,EAAE,CAAC;YACb,OAAO,IAAI,CAAC,GAAG,CACb,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,CAAC,IAA6B,CACxD,CAAC;QACJ,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}
|
|
@@ -0,0 +1,78 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* FG-A3 restricted / encrypted object store.
|
|
3
|
+
* Metadata (redacted) in Mongo; full body only in BlobObjectStore (s3|disk).
|
|
4
|
+
* Never lands full body into Memory raw or abstracts.
|
|
5
|
+
*/
|
|
6
|
+
import type { BlobBackendKind } from "../blob-store/types.js";
|
|
7
|
+
export declare const RESTRICTED_COLLECTIONS: {
|
|
8
|
+
readonly objects: "restricted_objects";
|
|
9
|
+
readonly audits: "restricted_access_audits";
|
|
10
|
+
};
|
|
11
|
+
export type RestrictedClassification = "restricted" | "config-backup";
|
|
12
|
+
export type RestrictedObjectMeta = {
|
|
13
|
+
orgId: string;
|
|
14
|
+
objectId: string;
|
|
15
|
+
classification: RestrictedClassification;
|
|
16
|
+
/** Content hash of plaintext body (sha256 hex). */
|
|
17
|
+
contentHash: string;
|
|
18
|
+
sizeBytes: number;
|
|
19
|
+
deviceId?: string;
|
|
20
|
+
vdom?: string;
|
|
21
|
+
sourceRunId?: string;
|
|
22
|
+
contentType?: string;
|
|
23
|
+
createdAt: string;
|
|
24
|
+
createdBy?: string;
|
|
25
|
+
/** Blob key within org partition. */
|
|
26
|
+
blobKey: string;
|
|
27
|
+
blobBackend: BlobBackendKind;
|
|
28
|
+
/** true when body was AES-GCM wrapped (on-prem KEK). */
|
|
29
|
+
encryptedAtRest: boolean;
|
|
30
|
+
/** Optional retention expiry ISO. */
|
|
31
|
+
retainUntil?: string | null;
|
|
32
|
+
version?: string;
|
|
33
|
+
};
|
|
34
|
+
export type RestrictedPutInput = {
|
|
35
|
+
classification: RestrictedClassification;
|
|
36
|
+
/** Raw body as base64 (JSON API). */
|
|
37
|
+
bodyBase64: string;
|
|
38
|
+
deviceId?: string;
|
|
39
|
+
vdom?: string;
|
|
40
|
+
sourceRunId?: string;
|
|
41
|
+
contentType?: string;
|
|
42
|
+
version?: string;
|
|
43
|
+
createdBy?: string;
|
|
44
|
+
retainUntil?: string | null;
|
|
45
|
+
/** Optional client-supplied object id; default random. */
|
|
46
|
+
objectId?: string;
|
|
47
|
+
};
|
|
48
|
+
export type RestrictedAccessAudit = {
|
|
49
|
+
auditId: string;
|
|
50
|
+
orgId: string;
|
|
51
|
+
objectId: string;
|
|
52
|
+
contentHash: string;
|
|
53
|
+
at: string;
|
|
54
|
+
actor?: string;
|
|
55
|
+
reason?: string;
|
|
56
|
+
action: "content-get" | "put" | "delete" | "purge";
|
|
57
|
+
};
|
|
58
|
+
export type RestrictedObjectStore = {
|
|
59
|
+
put(input: RestrictedPutInput): Promise<RestrictedObjectMeta>;
|
|
60
|
+
getMeta(objectId: string): Promise<RestrictedObjectMeta | null>;
|
|
61
|
+
/** Break-glass body read — caller must authorize + audit. */
|
|
62
|
+
getContent(objectId: string): Promise<{
|
|
63
|
+
meta: RestrictedObjectMeta;
|
|
64
|
+
body: Buffer;
|
|
65
|
+
} | null>;
|
|
66
|
+
delete(objectId: string): Promise<boolean>;
|
|
67
|
+
purgeExpired(now?: Date): Promise<number>;
|
|
68
|
+
recordAccessAudit(entry: Omit<RestrictedAccessAudit, "auditId" | "orgId" | "at"> & {
|
|
69
|
+
at?: string;
|
|
70
|
+
}): Promise<RestrictedAccessAudit>;
|
|
71
|
+
listAccessAudits(opts?: {
|
|
72
|
+
objectId?: string;
|
|
73
|
+
limit?: number;
|
|
74
|
+
}): Promise<RestrictedAccessAudit[]>;
|
|
75
|
+
};
|
|
76
|
+
export declare const BREAK_GLASS_HEADER = "x-memorix-break-glass";
|
|
77
|
+
export declare const BREAK_GLASS_REASON_HEADER = "x-memorix-break-glass-reason";
|
|
78
|
+
//# sourceMappingURL=types.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/restricted-store/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAE9D,eAAO,MAAM,sBAAsB;;;CAGzB,CAAC;AAEX,MAAM,MAAM,wBAAwB,GAAG,YAAY,GAAG,eAAe,CAAC;AAEtE,MAAM,MAAM,oBAAoB,GAAG;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,wBAAwB,CAAC;IACzC,mDAAmD;IACnD,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,qCAAqC;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,eAAe,CAAC;IAC7B,wDAAwD;IACxD,eAAe,EAAE,OAAO,CAAC;IACzB,qCAAqC;IACrC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,cAAc,EAAE,wBAAwB,CAAC;IACzC,qCAAqC;IACrC,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,0DAA0D;IAC1D,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,aAAa,GAAG,KAAK,GAAG,QAAQ,GAAG,OAAO,CAAC;CACpD,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,GAAG,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAC9D,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAAC;IAChE,6DAA6D;IAC7D,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;QACpC,IAAI,EAAE,oBAAoB,CAAC;QAC3B,IAAI,EAAE,MAAM,CAAC;KACd,GAAG,IAAI,CAAC,CAAC;IACV,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3C,YAAY,CAAC,GAAG,CAAC,EAAE,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1C,iBAAiB,CACf,KAAK,EAAE,IAAI,CAAC,qBAAqB,EAAE,SAAS,GAAG,OAAO,GAAG,IAAI,CAAC,GAAG;QAC/D,EAAE,CAAC,EAAE,MAAM,CAAC;KACb,GACA,OAAO,CAAC,qBAAqB,CAAC,CAAC;IAClC,gBAAgB,CAAC,IAAI,CAAC,EAAE;QACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,GAAG,OAAO,CAAC,qBAAqB,EAAE,CAAC,CAAC;CACtC,CAAC;AAEF,eAAO,MAAM,kBAAkB,0BAA0B,CAAC;AAC1D,eAAO,MAAM,yBAAyB,iCAAiC,CAAC"}
|
|
@@ -0,0 +1,12 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* FG-A3 restricted / encrypted object store.
|
|
3
|
+
* Metadata (redacted) in Mongo; full body only in BlobObjectStore (s3|disk).
|
|
4
|
+
* Never lands full body into Memory raw or abstracts.
|
|
5
|
+
*/
|
|
6
|
+
export const RESTRICTED_COLLECTIONS = {
|
|
7
|
+
objects: "restricted_objects",
|
|
8
|
+
audits: "restricted_access_audits",
|
|
9
|
+
};
|
|
10
|
+
export const BREAK_GLASS_HEADER = "x-memorix-break-glass";
|
|
11
|
+
export const BREAK_GLASS_REASON_HEADER = "x-memorix-break-glass-reason";
|
|
12
|
+
//# sourceMappingURL=types.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/restricted-store/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,OAAO,EAAE,oBAAoB;IAC7B,MAAM,EAAE,0BAA0B;CAC1B,CAAC;AA0EX,MAAM,CAAC,MAAM,kBAAkB,GAAG,uBAAuB,CAAC;AAC1D,MAAM,CAAC,MAAM,yBAAyB,GAAG,8BAA8B,CAAC"}
|
|
@@ -0,0 +1,5 @@
|
|
|
1
|
+
import type { FastifyInstance } from "fastify";
|
|
2
|
+
import type { MemorixPlatform } from "../platform.js";
|
|
3
|
+
/** INC-01 checkpoints + MX-CONT-01 schedule/lease/runs/freshness/tick. */
|
|
4
|
+
export declare function registerContinuousAcquisitionRoutes(app: FastifyInstance, platform: MemorixPlatform): Promise<void>;
|
|
5
|
+
//# sourceMappingURL=continuous-acquisition.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"continuous-acquisition.d.ts","sourceRoot":"","sources":["../../src/routes/continuous-acquisition.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAqDtD,0EAA0E;AAC1E,wBAAsB,mCAAmC,CACvD,GAAG,EAAE,eAAe,EACpB,QAAQ,EAAE,eAAe,GACxB,OAAO,CAAC,IAAI,CAAC,CAsTf"}
|
|
@@ -0,0 +1,259 @@
|
|
|
1
|
+
import { ServiceError } from "../errors.js";
|
|
2
|
+
import { hasSecretPayload, ACQUISITION_RUNS_DEFAULT_LIMIT, ACQUISITION_RUNS_MAX_LIMIT, computeStreamFreshness, validatePutCheckpoint, validatePutSchedule, } from "../connector-ops/index.js";
|
|
3
|
+
import { resolveConnectorOpsOrg } from "./connector-ops.js";
|
|
4
|
+
function requireStreamIds(params) {
|
|
5
|
+
const connectorId = typeof params.connectorId === "string" ? params.connectorId.trim() : "";
|
|
6
|
+
const instanceId = typeof params.instanceId === "string" ? params.instanceId.trim() : "";
|
|
7
|
+
const streamId = typeof params.streamId === "string" ? params.streamId.trim() : "";
|
|
8
|
+
if (!connectorId || !instanceId || !streamId) {
|
|
9
|
+
throw new ServiceError("VALIDATION_ERROR", "connectorId, instanceId, and streamId required", 400);
|
|
10
|
+
}
|
|
11
|
+
return { connectorId, instanceId, streamId };
|
|
12
|
+
}
|
|
13
|
+
function parseRunLimit(raw) {
|
|
14
|
+
const n = Number(raw ?? ACQUISITION_RUNS_DEFAULT_LIMIT);
|
|
15
|
+
if (!Number.isFinite(n) || n < 1)
|
|
16
|
+
return ACQUISITION_RUNS_DEFAULT_LIMIT;
|
|
17
|
+
return Math.min(Math.floor(n), ACQUISITION_RUNS_MAX_LIMIT);
|
|
18
|
+
}
|
|
19
|
+
function mapStoreErr(err) {
|
|
20
|
+
if (err instanceof ServiceError)
|
|
21
|
+
throw err;
|
|
22
|
+
throw new ServiceError("VALIDATION_ERROR", err instanceof Error ? err.message : String(err), 400);
|
|
23
|
+
}
|
|
24
|
+
/** INC-01 checkpoints + MX-CONT-01 schedule/lease/runs/freshness/tick. */
|
|
25
|
+
export async function registerContinuousAcquisitionRoutes(app, platform) {
|
|
26
|
+
const prefix = "/api/connector-ops/v1";
|
|
27
|
+
const streamBase = `${prefix}/orgs/:orgId/connectors/:connectorId/instances/:instanceId/streams/:streamId`;
|
|
28
|
+
app.get(`${streamBase}/checkpoint`, async (req) => {
|
|
29
|
+
const orgId = resolveConnectorOpsOrg(req);
|
|
30
|
+
const { connectorId, instanceId, streamId } = requireStreamIds(req.params);
|
|
31
|
+
const doc = await platform
|
|
32
|
+
.streamCheckpointsFor(orgId)
|
|
33
|
+
.get(connectorId, instanceId, streamId);
|
|
34
|
+
if (!doc) {
|
|
35
|
+
throw new ServiceError("NOT_FOUND", "no checkpoint for this stream", 404);
|
|
36
|
+
}
|
|
37
|
+
return doc;
|
|
38
|
+
});
|
|
39
|
+
app.put(`${streamBase}/checkpoint`, async (req) => {
|
|
40
|
+
const orgId = resolveConnectorOpsOrg(req);
|
|
41
|
+
const { connectorId, instanceId, streamId } = requireStreamIds(req.params);
|
|
42
|
+
const body = (req.body ?? {});
|
|
43
|
+
if (hasSecretPayload(body)) {
|
|
44
|
+
throw new ServiceError("PAYLOAD_REJECTED", "checkpoint payload must not contain secrets or response bodies", 400);
|
|
45
|
+
}
|
|
46
|
+
try {
|
|
47
|
+
validatePutCheckpoint(body);
|
|
48
|
+
return await platform
|
|
49
|
+
.streamCheckpointsFor(orgId)
|
|
50
|
+
.put(connectorId, instanceId, streamId, body);
|
|
51
|
+
}
|
|
52
|
+
catch (err) {
|
|
53
|
+
mapStoreErr(err);
|
|
54
|
+
}
|
|
55
|
+
});
|
|
56
|
+
app.delete(`${streamBase}/checkpoint`, async (req, reply) => {
|
|
57
|
+
const orgId = resolveConnectorOpsOrg(req);
|
|
58
|
+
const { connectorId, instanceId, streamId } = requireStreamIds(req.params);
|
|
59
|
+
await platform
|
|
60
|
+
.streamCheckpointsFor(orgId)
|
|
61
|
+
.clear(connectorId, instanceId, streamId);
|
|
62
|
+
return reply.code(204).send();
|
|
63
|
+
});
|
|
64
|
+
app.get(`${streamBase}/schedule`, async (req) => {
|
|
65
|
+
const orgId = resolveConnectorOpsOrg(req);
|
|
66
|
+
const { connectorId, instanceId, streamId } = requireStreamIds(req.params);
|
|
67
|
+
const doc = await platform
|
|
68
|
+
.streamSchedulesFor(orgId)
|
|
69
|
+
.get(connectorId, instanceId, streamId);
|
|
70
|
+
if (!doc) {
|
|
71
|
+
throw new ServiceError("NOT_FOUND", "no schedule for this stream", 404);
|
|
72
|
+
}
|
|
73
|
+
return doc;
|
|
74
|
+
});
|
|
75
|
+
app.put(`${streamBase}/schedule`, async (req) => {
|
|
76
|
+
const orgId = resolveConnectorOpsOrg(req);
|
|
77
|
+
const { connectorId, instanceId, streamId } = requireStreamIds(req.params);
|
|
78
|
+
const body = (req.body ?? {});
|
|
79
|
+
try {
|
|
80
|
+
validatePutSchedule(body);
|
|
81
|
+
return await platform
|
|
82
|
+
.streamSchedulesFor(orgId)
|
|
83
|
+
.put(connectorId, instanceId, streamId, body);
|
|
84
|
+
}
|
|
85
|
+
catch (err) {
|
|
86
|
+
mapStoreErr(err);
|
|
87
|
+
}
|
|
88
|
+
});
|
|
89
|
+
app.delete(`${streamBase}/schedule`, async (req, reply) => {
|
|
90
|
+
const orgId = resolveConnectorOpsOrg(req);
|
|
91
|
+
const { connectorId, instanceId, streamId } = requireStreamIds(req.params);
|
|
92
|
+
await platform
|
|
93
|
+
.streamSchedulesFor(orgId)
|
|
94
|
+
.clear(connectorId, instanceId, streamId);
|
|
95
|
+
return reply.code(204).send();
|
|
96
|
+
});
|
|
97
|
+
app.get(`${streamBase}/lease`, async (req) => {
|
|
98
|
+
const orgId = resolveConnectorOpsOrg(req);
|
|
99
|
+
const { connectorId, instanceId, streamId } = requireStreamIds(req.params);
|
|
100
|
+
const doc = await platform
|
|
101
|
+
.streamLeasesFor(orgId)
|
|
102
|
+
.get(connectorId, instanceId, streamId);
|
|
103
|
+
if (!doc) {
|
|
104
|
+
throw new ServiceError("NOT_FOUND", "no active lease", 404);
|
|
105
|
+
}
|
|
106
|
+
return doc;
|
|
107
|
+
});
|
|
108
|
+
app.post(`${streamBase}/lease`, async (req, reply) => {
|
|
109
|
+
const orgId = resolveConnectorOpsOrg(req);
|
|
110
|
+
const { connectorId, instanceId, streamId } = requireStreamIds(req.params);
|
|
111
|
+
const body = (req.body ?? {});
|
|
112
|
+
if (!body.ownerId?.trim()) {
|
|
113
|
+
throw new ServiceError("VALIDATION_ERROR", "ownerId required", 400);
|
|
114
|
+
}
|
|
115
|
+
try {
|
|
116
|
+
const lease = await platform
|
|
117
|
+
.streamLeasesFor(orgId)
|
|
118
|
+
.acquire(connectorId, instanceId, streamId, body);
|
|
119
|
+
return reply.code(201).send(lease);
|
|
120
|
+
}
|
|
121
|
+
catch (err) {
|
|
122
|
+
mapStoreErr(err);
|
|
123
|
+
}
|
|
124
|
+
});
|
|
125
|
+
app.post(`${streamBase}/lease/renew`, async (req) => {
|
|
126
|
+
const orgId = resolveConnectorOpsOrg(req);
|
|
127
|
+
const { connectorId, instanceId, streamId } = requireStreamIds(req.params);
|
|
128
|
+
const body = (req.body ?? {});
|
|
129
|
+
if (!body.ownerId?.trim() || !body.leaseId?.trim()) {
|
|
130
|
+
throw new ServiceError("VALIDATION_ERROR", "ownerId and leaseId required", 400);
|
|
131
|
+
}
|
|
132
|
+
try {
|
|
133
|
+
return await platform.streamLeasesFor(orgId).renew(connectorId, instanceId, streamId, {
|
|
134
|
+
ownerId: body.ownerId,
|
|
135
|
+
leaseId: body.leaseId,
|
|
136
|
+
ttlMs: body.ttlMs,
|
|
137
|
+
});
|
|
138
|
+
}
|
|
139
|
+
catch (err) {
|
|
140
|
+
mapStoreErr(err);
|
|
141
|
+
}
|
|
142
|
+
});
|
|
143
|
+
app.delete(`${streamBase}/lease`, async (req, reply) => {
|
|
144
|
+
const orgId = resolveConnectorOpsOrg(req);
|
|
145
|
+
const { connectorId, instanceId, streamId } = requireStreamIds(req.params);
|
|
146
|
+
const body = (req.body ?? {});
|
|
147
|
+
if (!body.ownerId?.trim() || !body.leaseId?.trim()) {
|
|
148
|
+
throw new ServiceError("VALIDATION_ERROR", "ownerId and leaseId required in body", 400);
|
|
149
|
+
}
|
|
150
|
+
try {
|
|
151
|
+
await platform.streamLeasesFor(orgId).release(connectorId, instanceId, streamId, { ownerId: body.ownerId, leaseId: body.leaseId });
|
|
152
|
+
return reply.code(204).send();
|
|
153
|
+
}
|
|
154
|
+
catch (err) {
|
|
155
|
+
mapStoreErr(err);
|
|
156
|
+
}
|
|
157
|
+
});
|
|
158
|
+
app.post(`${streamBase}/runs`, async (req, reply) => {
|
|
159
|
+
const orgId = resolveConnectorOpsOrg(req);
|
|
160
|
+
const { connectorId, instanceId, streamId } = requireStreamIds(req.params);
|
|
161
|
+
const body = (req.body ?? {});
|
|
162
|
+
try {
|
|
163
|
+
const run = await platform
|
|
164
|
+
.acquisitionRunsFor(orgId)
|
|
165
|
+
.start(connectorId, instanceId, streamId, body);
|
|
166
|
+
return reply.code(201).send(run);
|
|
167
|
+
}
|
|
168
|
+
catch (err) {
|
|
169
|
+
mapStoreErr(err);
|
|
170
|
+
}
|
|
171
|
+
});
|
|
172
|
+
app.post(`${streamBase}/runs/:runId/end`, async (req) => {
|
|
173
|
+
const orgId = resolveConnectorOpsOrg(req);
|
|
174
|
+
const { connectorId, instanceId, streamId } = requireStreamIds(req.params);
|
|
175
|
+
const runId = String(req.params.runId ?? "").trim();
|
|
176
|
+
if (!runId) {
|
|
177
|
+
throw new ServiceError("VALIDATION_ERROR", "runId required", 400);
|
|
178
|
+
}
|
|
179
|
+
const body = (req.body ?? {});
|
|
180
|
+
if (!body.outcome) {
|
|
181
|
+
throw new ServiceError("VALIDATION_ERROR", "outcome required", 400);
|
|
182
|
+
}
|
|
183
|
+
try {
|
|
184
|
+
return await platform
|
|
185
|
+
.acquisitionRunsFor(orgId)
|
|
186
|
+
.end(connectorId, instanceId, streamId, runId, body);
|
|
187
|
+
}
|
|
188
|
+
catch (err) {
|
|
189
|
+
mapStoreErr(err);
|
|
190
|
+
}
|
|
191
|
+
});
|
|
192
|
+
app.post(`${streamBase}/runs/:runId/cancel`, async (req) => {
|
|
193
|
+
const orgId = resolveConnectorOpsOrg(req);
|
|
194
|
+
const { connectorId, instanceId, streamId } = requireStreamIds(req.params);
|
|
195
|
+
const runId = String(req.params.runId ?? "").trim();
|
|
196
|
+
const run = await platform
|
|
197
|
+
.acquisitionRunsFor(orgId)
|
|
198
|
+
.requestCancel(connectorId, instanceId, streamId, runId);
|
|
199
|
+
if (!run) {
|
|
200
|
+
throw new ServiceError("NOT_FOUND", `run ${runId} not found`, 404);
|
|
201
|
+
}
|
|
202
|
+
const lease = await platform
|
|
203
|
+
.streamLeasesFor(orgId)
|
|
204
|
+
.get(connectorId, instanceId, streamId);
|
|
205
|
+
if (lease) {
|
|
206
|
+
try {
|
|
207
|
+
await platform.streamLeasesFor(orgId).release(connectorId, instanceId, streamId, { ownerId: lease.ownerId, leaseId: lease.leaseId });
|
|
208
|
+
}
|
|
209
|
+
catch {
|
|
210
|
+
/* ignore */
|
|
211
|
+
}
|
|
212
|
+
}
|
|
213
|
+
return run;
|
|
214
|
+
});
|
|
215
|
+
app.get(`${streamBase}/runs`, async (req) => {
|
|
216
|
+
const orgId = resolveConnectorOpsOrg(req);
|
|
217
|
+
const { connectorId, instanceId, streamId } = requireStreamIds(req.params);
|
|
218
|
+
const q = (req.query ?? {});
|
|
219
|
+
const limit = parseRunLimit(q.limit);
|
|
220
|
+
const runs = await platform
|
|
221
|
+
.acquisitionRunsFor(orgId)
|
|
222
|
+
.list(connectorId, instanceId, streamId, { limit });
|
|
223
|
+
return { orgId, connectorId, instanceId, streamId, runs, limit };
|
|
224
|
+
});
|
|
225
|
+
app.get(`${streamBase}/freshness`, async (req) => {
|
|
226
|
+
const orgId = resolveConnectorOpsOrg(req);
|
|
227
|
+
const { connectorId, instanceId, streamId } = requireStreamIds(req.params);
|
|
228
|
+
const schedule = await platform
|
|
229
|
+
.streamSchedulesFor(orgId)
|
|
230
|
+
.get(connectorId, instanceId, streamId);
|
|
231
|
+
const runs = await platform
|
|
232
|
+
.acquisitionRunsFor(orgId)
|
|
233
|
+
.list(connectorId, instanceId, streamId, { limit: 1 });
|
|
234
|
+
const lastSuccess = await platform
|
|
235
|
+
.acquisitionRunsFor(orgId)
|
|
236
|
+
.latestSuccess(connectorId, instanceId, streamId);
|
|
237
|
+
const lease = await platform
|
|
238
|
+
.streamLeasesFor(orgId)
|
|
239
|
+
.get(connectorId, instanceId, streamId);
|
|
240
|
+
return computeStreamFreshness({
|
|
241
|
+
orgId,
|
|
242
|
+
connectorId,
|
|
243
|
+
instanceId,
|
|
244
|
+
streamId,
|
|
245
|
+
schedule,
|
|
246
|
+
lastSuccess,
|
|
247
|
+
lastRun: runs[0] ?? null,
|
|
248
|
+
lease,
|
|
249
|
+
});
|
|
250
|
+
});
|
|
251
|
+
app.post(`${prefix}/orgs/:orgId/continuous-acquisition/tick`, async (req) => {
|
|
252
|
+
const orgId = resolveConnectorOpsOrg(req);
|
|
253
|
+
const body = (req.body ?? {});
|
|
254
|
+
return platform.tickContinuousAcquisitionForOrg(orgId, {
|
|
255
|
+
ownerId: body.ownerId,
|
|
256
|
+
});
|
|
257
|
+
});
|
|
258
|
+
}
|
|
259
|
+
//# sourceMappingURL=continuous-acquisition.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"continuous-acquisition.js","sourceRoot":"","sources":["../../src/routes/continuous-acquisition.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EACL,gBAAgB,EAChB,8BAA8B,EAC9B,0BAA0B,EAM1B,sBAAsB,EACtB,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAE5D,SAAS,gBAAgB,CAAC,MAA+B;IAKvD,MAAM,WAAW,GACf,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1E,MAAM,UAAU,GACd,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACxE,MAAM,QAAQ,GACZ,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACpE,IAAI,CAAC,WAAW,IAAI,CAAC,UAAU,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC7C,MAAM,IAAI,YAAY,CACpB,kBAAkB,EAClB,gDAAgD,EAChD,GAAG,CACJ,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;AAC/C,CAAC;AAED,SAAS,aAAa,CAAC,GAAY;IACjC,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,IAAI,8BAA8B,CAAC,CAAC;IACxD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,8BAA8B,CAAC;IACxE,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,0BAA0B,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,WAAW,CAAC,GAAY;IAC/B,IAAI,GAAG,YAAY,YAAY;QAAE,MAAM,GAAG,CAAC;IAC3C,MAAM,IAAI,YAAY,CACpB,kBAAkB,EAClB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAChD,GAAG,CACJ,CAAC;AACJ,CAAC;AAED,0EAA0E;AAC1E,MAAM,CAAC,KAAK,UAAU,mCAAmC,CACvD,GAAoB,EACpB,QAAyB;IAEzB,MAAM,MAAM,GAAG,uBAAuB,CAAC;IACvC,MAAM,UAAU,GACd,GAAG,MAAM,8EAA8E,CAAC;IAE1F,GAAG,CAAC,GAAG,CAAC,GAAG,UAAU,aAAa,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAChD,MAAM,KAAK,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC;QAC1C,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,gBAAgB,CAC5D,GAAG,CAAC,MAAiC,CACtC,CAAC;QACF,MAAM,GAAG,GAAG,MAAM,QAAQ;aACvB,oBAAoB,CAAC,KAAK,CAAC;aAC3B,GAAG,CAAC,WAAW,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;QAC1C,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,YAAY,CAAC,WAAW,EAAE,+BAA+B,EAAE,GAAG,CAAC,CAAC;QAC5E,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,GAAG,UAAU,aAAa,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAChD,MAAM,KAAK,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC;QAC1C,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,gBAAgB,CAC5D,GAAG,CAAC,MAAiC,CACtC,CAAC;QACF,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAwB,CAAC;QACrD,IAAI,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,YAAY,CACpB,kBAAkB,EAClB,gEAAgE,EAChE,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,qBAAqB,CAAC,IAAI,CAAC,CAAC;YAC5B,OAAO,MAAM,QAAQ;iBAClB,oBAAoB,CAAC,KAAK,CAAC;iBAC3B,GAAG,CAAC,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,WAAW,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,MAAM,CAAC,GAAG,UAAU,aAAa,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QAC1D,MAAM,KAAK,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC;QAC1C,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,gBAAgB,CAC5D,GAAG,CAAC,MAAiC,CACtC,CAAC;QACF,MAAM,QAAQ;aACX,oBAAoB,CAAC,KAAK,CAAC;aAC3B,KAAK,CAAC,WAAW,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;QAC5C,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,GAAG,UAAU,WAAW,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAC9C,MAAM,KAAK,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC;QAC1C,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,gBAAgB,CAC5D,GAAG,CAAC,MAAiC,CACtC,CAAC;QACF,MAAM,GAAG,GAAG,MAAM,QAAQ;aACvB,kBAAkB,CAAC,KAAK,CAAC;aACzB,GAAG,CAAC,WAAW,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;QAC1C,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,YAAY,CAAC,WAAW,EAAE,6BAA6B,EAAE,GAAG,CAAC,CAAC;QAC1E,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,GAAG,UAAU,WAAW,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAC9C,MAAM,KAAK,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC;QAC1C,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,gBAAgB,CAC5D,GAAG,CAAC,MAAiC,CACtC,CAAC;QACF,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAsB,CAAC;QACnD,IAAI,CAAC;YACH,mBAAmB,CAAC,IAAI,CAAC,CAAC;YAC1B,OAAO,MAAM,QAAQ;iBAClB,kBAAkB,CAAC,KAAK,CAAC;iBACzB,GAAG,CAAC,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,WAAW,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,MAAM,CAAC,GAAG,UAAU,WAAW,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACxD,MAAM,KAAK,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC;QAC1C,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,gBAAgB,CAC5D,GAAG,CAAC,MAAiC,CACtC,CAAC;QACF,MAAM,QAAQ;aACX,kBAAkB,CAAC,KAAK,CAAC;aACzB,KAAK,CAAC,WAAW,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;QAC5C,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,GAAG,UAAU,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAC3C,MAAM,KAAK,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC;QAC1C,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,gBAAgB,CAC5D,GAAG,CAAC,MAAiC,CACtC,CAAC;QACF,MAAM,GAAG,GAAG,MAAM,QAAQ;aACvB,eAAe,CAAC,KAAK,CAAC;aACtB,GAAG,CAAC,WAAW,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;QAC1C,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,YAAY,CAAC,WAAW,EAAE,iBAAiB,EAAE,GAAG,CAAC,CAAC;QAC9D,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,GAAG,UAAU,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnD,MAAM,KAAK,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC;QAC1C,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,gBAAgB,CAC5D,GAAG,CAAC,MAAiC,CACtC,CAAC;QACF,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAsB,CAAC;QACnD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC;YAC1B,MAAM,IAAI,YAAY,CAAC,kBAAkB,EAAE,kBAAkB,EAAE,GAAG,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,QAAQ;iBACzB,eAAe,CAAC,KAAK,CAAC;iBACtB,OAAO,CAAC,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;YACpD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,WAAW,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,GAAG,UAAU,cAAc,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAClD,MAAM,KAAK,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC;QAC1C,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,gBAAgB,CAC5D,GAAG,CAAC,MAAiC,CACtC,CAAC;QACF,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAI3B,CAAC;QACF,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC;YACnD,MAAM,IAAI,YAAY,CACpB,kBAAkB,EAClB,8BAA8B,EAC9B,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,OAAO,MAAM,QAAQ,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,KAAK,CAChD,WAAW,EACX,UAAU,EACV,QAAQ,EACR;gBACE,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,KAAK,EAAE,IAAI,CAAC,KAAK;aAClB,CACF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,WAAW,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,MAAM,CAAC,GAAG,UAAU,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACrD,MAAM,KAAK,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC;QAC1C,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,gBAAgB,CAC5D,GAAG,CAAC,MAAiC,CACtC,CAAC;QACF,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAA2C,CAAC;QACxE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC;YACnD,MAAM,IAAI,YAAY,CACpB,kBAAkB,EAClB,sCAAsC,EACtC,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,MAAM,QAAQ,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,OAAO,CAC3C,WAAW,EACX,UAAU,EACV,QAAQ,EACR,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CACjD,CAAC;YACF,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QAChC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,WAAW,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,GAAG,UAAU,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QAClD,MAAM,KAAK,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC;QAC1C,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,gBAAgB,CAC5D,GAAG,CAAC,MAAiC,CACtC,CAAC;QACF,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAA6B,CAAC;QAC1D,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,QAAQ;iBACvB,kBAAkB,CAAC,KAAK,CAAC;iBACzB,KAAK,CAAC,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;YAClD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,WAAW,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,GAAG,UAAU,kBAAkB,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACtD,MAAM,KAAK,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC;QAC1C,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,gBAAgB,CAC5D,GAAG,CAAC,MAAiC,CACtC,CAAC;QACF,MAAM,KAAK,GAAG,MAAM,CACjB,GAAG,CAAC,MAA6B,CAAC,KAAK,IAAI,EAAE,CAC/C,CAAC,IAAI,EAAE,CAAC;QACT,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,YAAY,CAAC,kBAAkB,EAAE,gBAAgB,EAAE,GAAG,CAAC,CAAC;QACpE,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAA2B,CAAC;QACxD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,MAAM,IAAI,YAAY,CAAC,kBAAkB,EAAE,kBAAkB,EAAE,GAAG,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,CAAC;YACH,OAAO,MAAM,QAAQ;iBAClB,kBAAkB,CAAC,KAAK,CAAC;iBACzB,GAAG,CAAC,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QACzD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,WAAW,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,GAAG,UAAU,qBAAqB,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACzD,MAAM,KAAK,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC;QAC1C,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,gBAAgB,CAC5D,GAAG,CAAC,MAAiC,CACtC,CAAC;QACF,MAAM,KAAK,GAAG,MAAM,CACjB,GAAG,CAAC,MAA6B,CAAC,KAAK,IAAI,EAAE,CAC/C,CAAC,IAAI,EAAE,CAAC;QACT,MAAM,GAAG,GAAG,MAAM,QAAQ;aACvB,kBAAkB,CAAC,KAAK,CAAC;aACzB,aAAa,CAAC,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC3D,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,YAAY,CAAC,WAAW,EAAE,OAAO,KAAK,YAAY,EAAE,GAAG,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,QAAQ;aACzB,eAAe,CAAC,KAAK,CAAC;aACtB,GAAG,CAAC,WAAW,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;QAC1C,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,CAAC;gBACH,MAAM,QAAQ,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,OAAO,CAC3C,WAAW,EACX,UAAU,EACV,QAAQ,EACR,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CACnD,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,YAAY;YACd,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,GAAG,UAAU,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAC1C,MAAM,KAAK,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC;QAC1C,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,gBAAgB,CAC5D,GAAG,CAAC,MAAiC,CACtC,CAAC;QACF,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAA4B,CAAC;QACvD,MAAM,KAAK,GAAG,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACrC,MAAM,IAAI,GAAG,MAAM,QAAQ;aACxB,kBAAkB,CAAC,KAAK,CAAC;aACzB,IAAI,CAAC,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACtD,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACnE,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,GAAG,UAAU,YAAY,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAC/C,MAAM,KAAK,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC;QAC1C,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,gBAAgB,CAC5D,GAAG,CAAC,MAAiC,CACtC,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,QAAQ;aAC5B,kBAAkB,CAAC,KAAK,CAAC;aACzB,GAAG,CAAC,WAAW,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAG,MAAM,QAAQ;aACxB,kBAAkB,CAAC,KAAK,CAAC;aACzB,IAAI,CAAC,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QACzD,MAAM,WAAW,GAAG,MAAM,QAAQ;aAC/B,kBAAkB,CAAC,KAAK,CAAC;aACzB,aAAa,CAAC,WAAW,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;QACpD,MAAM,KAAK,GAAG,MAAM,QAAQ;aACzB,eAAe,CAAC,KAAK,CAAC;aACtB,GAAG,CAAC,WAAW,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;QAC1C,OAAO,sBAAsB,CAAC;YAC5B,KAAK;YACL,WAAW;YACX,UAAU;YACV,QAAQ;YACR,QAAQ;YACR,WAAW;YACX,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI;YACxB,KAAK;SACN,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CACN,GAAG,MAAM,0CAA0C,EACnD,KAAK,EAAE,GAAG,EAAE,EAAE;QACZ,MAAM,KAAK,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAyB,CAAC;QACtD,OAAO,QAAQ,CAAC,+BAA+B,CAAC,KAAK,EAAE;YACrD,OAAO,EAAE,IAAI,CAAC,OAAO;SACtB,CAAC,CAAC;IACL,CAAC,CACF,CAAC;AACJ,CAAC"}
|
|
@@ -0,0 +1,5 @@
|
|
|
1
|
+
import type { FastifyInstance } from "fastify";
|
|
2
|
+
import type { MemorixPlatform } from "../platform.js";
|
|
3
|
+
/** MX-INC-01 versioned state refs + CAS + apply-commit. */
|
|
4
|
+
export declare function registerIncrementalStateRoutes(app: FastifyInstance, platform: MemorixPlatform): Promise<void>;
|
|
5
|
+
//# sourceMappingURL=incremental-state.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"incremental-state.d.ts","sourceRoot":"","sources":["../../src/routes/incremental-state.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAoCtD,2DAA2D;AAC3D,wBAAsB,8BAA8B,CAClD,GAAG,EAAE,eAAe,EACpB,QAAQ,EAAE,eAAe,GACxB,OAAO,CAAC,IAAI,CAAC,CAwMf"}
|