@xapps-platform/backend-kit 0.1.1

package/dist/backend/routes/gateway/hostApiBridge.js

@@ -0,0 +1,61 @@
+import {
+  normalizeBridgeRefreshInput,
+  normalizeBridgeVendorAssertionInput
+} from "./hostContractBoundary.js";
+import {
+  applyHostApiCorsHeaders,
+  ensureHostApiOriginAllowed,
+  readBodyRecord,
+  readHostBootstrapContext,
+  requireHostProxyService,
+  sendServiceError
+} from "./shared.js";
+async function hostApiBridgeRoutes(fastify, { hostProxyService, allowedOrigins = [], bootstrap = {} } = {}) {
+  const service = requireHostProxyService(hostProxyService);
+  fastify.post("/api/bridge/token-refresh", async (request, reply) => {
+    if (!ensureHostApiOriginAllowed(request, reply, allowedOrigins)) return;
+    try {
+      const body = readBodyRecord(request.body);
+      const bootstrapContext = readHostBootstrapContext(request, bootstrap);
+      applyHostApiCorsHeaders(reply, request, allowedOrigins);
+      const input = normalizeBridgeRefreshInput(body, request);
+      if (bootstrapContext?.subjectId) {
+        input.subjectId = bootstrapContext.subjectId;
+      }
+      return reply.send(await service.refreshWidgetToken(input));
+    } catch (err) {
+      return sendServiceError(request, reply, err, "bridge token-refresh failed");
+    }
+  });
+  fastify.post("/api/bridge/sign", async (request, reply) => {
+    if (!ensureHostApiOriginAllowed(request, reply, allowedOrigins)) return;
+    try {
+      const body = readBodyRecord(request.body);
+      applyHostApiCorsHeaders(reply, request, allowedOrigins);
+      return reply.send(
+        await service.bridgeSign({
+          envelope: body.envelope && typeof body.envelope === "object" && !Array.isArray(body.envelope) ? body.envelope : null,
+          data: body
+        })
+      );
+    } catch (err) {
+      return sendServiceError(request, reply, err, "bridge sign failed");
+    }
+  });
+  fastify.post("/api/bridge/vendor-assertion", async (request, reply) => {
+    if (!ensureHostApiOriginAllowed(request, reply, allowedOrigins)) return;
+    try {
+      const body = readBodyRecord(request.body);
+      applyHostApiCorsHeaders(reply, request, allowedOrigins);
+      return reply.send(
+        await service.bridgeVendorAssertion(normalizeBridgeVendorAssertionInput(body))
+      );
+    } catch (err) {
+      return sendServiceError(request, reply, err, "bridge vendor-assertion failed");
+    }
+  });
+}
+export {
+  hostApiBridgeRoutes as default
+};
+//# sourceMappingURL=hostApiBridge.js.map

package/dist/backend/routes/gateway/hostApiBridge.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/backend/routes/gateway/hostApiBridge.ts"],
+  "sourcesContent": ["// @ts-nocheck\nimport {\n  normalizeBridgeRefreshInput,\n  normalizeBridgeVendorAssertionInput,\n} from \"./hostContractBoundary.js\";\nimport {\n  applyHostApiCorsHeaders,\n  ensureHostApiOriginAllowed,\n  readBodyRecord,\n  readHostBootstrapContext,\n  requireHostProxyService,\n  sendServiceError,\n} from \"./shared.js\";\n\nexport default async function hostApiBridgeRoutes(\n  fastify,\n  { hostProxyService, allowedOrigins = [], bootstrap = {} } = {},\n) {\n  const service = requireHostProxyService(hostProxyService);\n  fastify.post(\"/api/bridge/token-refresh\", async (request, reply) => {\n    if (!ensureHostApiOriginAllowed(request, reply, allowedOrigins)) return;\n    try {\n      const body = readBodyRecord(request.body);\n      const bootstrapContext = readHostBootstrapContext(request, bootstrap);\n      applyHostApiCorsHeaders(reply, request, allowedOrigins);\n      const input = normalizeBridgeRefreshInput(body, request);\n      if (bootstrapContext?.subjectId) {\n        input.subjectId = bootstrapContext.subjectId;\n      }\n      return reply.send(await service.refreshWidgetToken(input));\n    } catch (err) {\n      return sendServiceError(request, reply, err, \"bridge token-refresh failed\");\n    }\n  });\n\n  fastify.post(\"/api/bridge/sign\", async (request, reply) => {\n    if (!ensureHostApiOriginAllowed(request, reply, allowedOrigins)) return;\n    try {\n      const body = readBodyRecord(request.body);\n      applyHostApiCorsHeaders(reply, request, allowedOrigins);\n      return reply.send(\n        await service.bridgeSign({\n          envelope:\n            body.envelope && typeof body.envelope === \"object\" && !Array.isArray(body.envelope)\n              ? body.envelope\n              : null,\n          data: body,\n        }),\n      );\n    } catch (err) {\n      return sendServiceError(request, reply, err, \"bridge sign failed\");\n    }\n  });\n\n  fastify.post(\"/api/bridge/vendor-assertion\", async (request, reply) => {\n    if (!ensureHostApiOriginAllowed(request, reply, allowedOrigins)) return;\n    try {\n      const body = readBodyRecord(request.body);\n      applyHostApiCorsHeaders(reply, request, allowedOrigins);\n      return reply.send(\n        await service.bridgeVendorAssertion(normalizeBridgeVendorAssertionInput(body)),\n      );\n    } catch (err) {\n      return sendServiceError(request, reply, err, \"bridge vendor-assertion failed\");\n    }\n  });\n}\n"],
+  "mappings": "AACA;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,eAAO,oBACL,SACA,EAAE,kBAAkB,iBAAiB,CAAC,GAAG,YAAY,CAAC,EAAE,IAAI,CAAC,GAC7D;AACA,QAAM,UAAU,wBAAwB,gBAAgB;AACxD,UAAQ,KAAK,6BAA6B,OAAO,SAAS,UAAU;AAClE,QAAI,CAAC,2BAA2B,SAAS,OAAO,cAAc,EAAG;AACjE,QAAI;AACF,YAAM,OAAO,eAAe,QAAQ,IAAI;AACxC,YAAM,mBAAmB,yBAAyB,SAAS,SAAS;AACpE,8BAAwB,OAAO,SAAS,cAAc;AACtD,YAAM,QAAQ,4BAA4B,MAAM,OAAO;AACvD,UAAI,kBAAkB,WAAW;AAC/B,cAAM,YAAY,iBAAiB;AAAA,MACrC;AACA,aAAO,MAAM,KAAK,MAAM,QAAQ,mBAAmB,KAAK,CAAC;AAAA,IAC3D,SAAS,KAAK;AACZ,aAAO,iBAAiB,SAAS,OAAO,KAAK,6BAA6B;AAAA,IAC5E;AAAA,EACF,CAAC;AAED,UAAQ,KAAK,oBAAoB,OAAO,SAAS,UAAU;AACzD,QAAI,CAAC,2BAA2B,SAAS,OAAO,cAAc,EAAG;AACjE,QAAI;AACF,YAAM,OAAO,eAAe,QAAQ,IAAI;AACxC,8BAAwB,OAAO,SAAS,cAAc;AACtD,aAAO,MAAM;AAAA,QACX,MAAM,QAAQ,WAAW;AAAA,UACvB,UACE,KAAK,YAAY,OAAO,KAAK,aAAa,YAAY,CAAC,MAAM,QAAQ,KAAK,QAAQ,IAC9E,KAAK,WACL;AAAA,UACN,MAAM;AAAA,QACR,CAAC;AAAA,MACH;AAAA,IACF,SAAS,KAAK;AACZ,aAAO,iBAAiB,SAAS,OAAO,KAAK,oBAAoB;AAAA,IACnE;AAAA,EACF,CAAC;AAED,UAAQ,KAAK,gCAAgC,OAAO,SAAS,UAAU;AACrE,QAAI,CAAC,2BAA2B,SAAS,OAAO,cAAc,EAAG;AACjE,QAAI;AACF,YAAM,OAAO,eAAe,QAAQ,IAAI;AACxC,8BAAwB,OAAO,SAAS,cAAc;AACtD,aAAO,MAAM;AAAA,QACX,MAAM,QAAQ,sBAAsB,oCAAoC,IAAI,CAAC;AAAA,MAC/E;AAAA,IACF,SAAS,KAAK;AACZ,aAAO,iBAAiB,SAAS,OAAO,KAAK,gCAAgC;AAAA,IAC/E;AAAA,EACF,CAAC;AACH;",
+  "names": []
+}

package/dist/backend/routes/gateway/hostApiCore.d.ts

@@ -0,0 +1,5 @@
+export default function hostApiCoreRoutes(fastify: any, { hostProxyService, allowedOrigins, bootstrap }?: {
+    allowedOrigins?: any[];
+    bootstrap?: {};
+}): Promise<void>;
+//# sourceMappingURL=hostApiCore.d.ts.map

package/dist/backend/routes/gateway/hostApiCore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hostApiCore.d.ts","sourceRoot":"","sources":["../../../../src/backend/routes/gateway/hostApiCore.ts"],"names":[],"mappings":"AAaA,wBAA8B,iBAAiB,CAC7C,OAAO,KAAA,EACP,EAAE,gBAAgB,EAAE,cAAmB,EAAE,SAAc,EAAE;;;CAAK,iBAoF/D"}

package/dist/backend/routes/gateway/hostApiCore.js

@@ -0,0 +1,95 @@
+import { normalizeWidgetSessionInput } from "./hostContractBoundary.js";
+import {
+  applyHostApiCorsHeaders,
+  buildHostBootstrapResult,
+  ensureHostApiOriginAllowed,
+  readBodyRecord,
+  readHostBootstrapContext,
+  requireHostBootstrapRequest,
+  requireHostProxyService,
+  sendServiceError
+} from "./shared.js";
+async function hostApiCoreRoutes(fastify, { hostProxyService, allowedOrigins = [], bootstrap = {} } = {}) {
+  const service = requireHostProxyService(hostProxyService);
+  fastify.get("/api/host-config", async (request, reply) => {
+    if (!ensureHostApiOriginAllowed(request, reply, allowedOrigins)) return;
+    return reply.send({
+      ...service.getHostConfig()
+    });
+  });
+  fastify.post("/api/host-bootstrap", async (request, reply) => {
+    try {
+      const body = readBodyRecord(request.body);
+      const { signingSecret, ttlSeconds } = requireHostBootstrapRequest(request, bootstrap);
+      const resolved = await service.resolveSubject({
+        email: body.email,
+        name: body.name
+      });
+      return reply.send(
+        buildHostBootstrapResult({
+          subjectId: resolved.subjectId,
+          email: body.email,
+          name: body.name,
+          origin: body.origin,
+          signingSecret,
+          ttlSeconds
+        })
+      );
+    } catch (err) {
+      return sendServiceError(request, reply, err, "host bootstrap failed");
+    }
+  });
+  fastify.post("/api/resolve-subject", async (request, reply) => {
+    if (!ensureHostApiOriginAllowed(request, reply, allowedOrigins)) return;
+    try {
+      const body = readBodyRecord(request.body);
+      applyHostApiCorsHeaders(reply, request, allowedOrigins);
+      return reply.send(
+        await service.resolveSubject({
+          email: body.email,
+          name: body.name
+        })
+      );
+    } catch (err) {
+      return sendServiceError(request, reply, err, "resolve-subject failed");
+    }
+  });
+  fastify.post("/api/create-catalog-session", async (request, reply) => {
+    if (!ensureHostApiOriginAllowed(request, reply, allowedOrigins)) return;
+    try {
+      const body = readBodyRecord(request.body);
+      const bootstrapContext = readHostBootstrapContext(request, bootstrap);
+      applyHostApiCorsHeaders(reply, request, allowedOrigins);
+      return reply.code(201).send(
+        await service.createCatalogSession({
+          origin: body.origin,
+          subjectId: bootstrapContext?.subjectId || body.subjectId,
+          xappId: body.xappId,
+          publishers: body.publishers,
+          tags: body.tags
+        })
+      );
+    } catch (err) {
+      return sendServiceError(request, reply, err, "create-catalog-session failed");
+    }
+  });
+  fastify.post("/api/create-widget-session", async (request, reply) => {
+    if (!ensureHostApiOriginAllowed(request, reply, allowedOrigins)) return;
+    try {
+      const body = readBodyRecord(request.body);
+      const bootstrapContext = readHostBootstrapContext(request, bootstrap);
+      applyHostApiCorsHeaders(reply, request, allowedOrigins);
+      const input = normalizeWidgetSessionInput(body, request);
+      if (bootstrapContext?.subjectId) {
+        input.subjectId = bootstrapContext.subjectId;
+      }
+      return reply.send(await service.createWidgetSession(input));
+    } catch (err) {
+      return sendServiceError(request, reply, err, "create-widget-session failed");
+    }
+  });
+}
+export {
+  hostApiCoreRoutes as default
+};
+//# sourceMappingURL=hostApiCore.js.map

package/dist/backend/routes/gateway/hostApiCore.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/backend/routes/gateway/hostApiCore.ts"],
+  "sourcesContent": ["// @ts-nocheck\nimport { normalizeWidgetSessionInput } from \"./hostContractBoundary.js\";\nimport {\n  applyHostApiCorsHeaders,\n  buildHostBootstrapResult,\n  ensureHostApiOriginAllowed,\n  readBodyRecord,\n  readHostBootstrapContext,\n  requireHostBootstrapRequest,\n  requireHostProxyService,\n  sendServiceError,\n} from \"./shared.js\";\n\nexport default async function hostApiCoreRoutes(\n  fastify,\n  { hostProxyService, allowedOrigins = [], bootstrap = {} } = {},\n) {\n  const service = requireHostProxyService(hostProxyService);\n  fastify.get(\"/api/host-config\", async (request, reply) => {\n    if (!ensureHostApiOriginAllowed(request, reply, allowedOrigins)) return;\n    return reply.send({\n      ...service.getHostConfig(),\n    });\n  });\n\n  fastify.post(\"/api/host-bootstrap\", async (request, reply) => {\n    try {\n      const body = readBodyRecord(request.body);\n      const { signingSecret, ttlSeconds } = requireHostBootstrapRequest(request, bootstrap);\n      const resolved = await service.resolveSubject({\n        email: body.email,\n        name: body.name,\n      });\n      return reply.send(\n        buildHostBootstrapResult({\n          subjectId: resolved.subjectId,\n          email: body.email,\n          name: body.name,\n          origin: body.origin,\n          signingSecret,\n          ttlSeconds,\n        }),\n      );\n    } catch (err) {\n      return sendServiceError(request, reply, err, \"host bootstrap failed\");\n    }\n  });\n\n  fastify.post(\"/api/resolve-subject\", async (request, reply) => {\n    if (!ensureHostApiOriginAllowed(request, reply, allowedOrigins)) return;\n    try {\n      const body = readBodyRecord(request.body);\n      applyHostApiCorsHeaders(reply, request, allowedOrigins);\n      return reply.send(\n        await service.resolveSubject({\n          email: body.email,\n          name: body.name,\n        }),\n      );\n    } catch (err) {\n      return sendServiceError(request, reply, err, \"resolve-subject failed\");\n    }\n  });\n\n  fastify.post(\"/api/create-catalog-session\", async (request, reply) => {\n    if (!ensureHostApiOriginAllowed(request, reply, allowedOrigins)) return;\n    try {\n      const body = readBodyRecord(request.body);\n      const bootstrapContext = readHostBootstrapContext(request, bootstrap);\n      applyHostApiCorsHeaders(reply, request, allowedOrigins);\n      return reply.code(201).send(\n        await service.createCatalogSession({\n          origin: body.origin,\n          subjectId: bootstrapContext?.subjectId || body.subjectId,\n          xappId: body.xappId,\n          publishers: body.publishers,\n          tags: body.tags,\n        }),\n      );\n    } catch (err) {\n      return sendServiceError(request, reply, err, \"create-catalog-session failed\");\n    }\n  });\n\n  fastify.post(\"/api/create-widget-session\", async (request, reply) => {\n    if (!ensureHostApiOriginAllowed(request, reply, allowedOrigins)) return;\n    try {\n      const body = readBodyRecord(request.body);\n      const bootstrapContext = readHostBootstrapContext(request, bootstrap);\n      applyHostApiCorsHeaders(reply, request, allowedOrigins);\n      const input = normalizeWidgetSessionInput(body, request);\n      if (bootstrapContext?.subjectId) {\n        input.subjectId = bootstrapContext.subjectId;\n      }\n      return reply.send(await service.createWidgetSession(input));\n    } catch (err) {\n      return sendServiceError(request, reply, err, \"create-widget-session failed\");\n    }\n  });\n}\n"],
+  "mappings": "AACA,SAAS,mCAAmC;AAC5C;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,eAAO,kBACL,SACA,EAAE,kBAAkB,iBAAiB,CAAC,GAAG,YAAY,CAAC,EAAE,IAAI,CAAC,GAC7D;AACA,QAAM,UAAU,wBAAwB,gBAAgB;AACxD,UAAQ,IAAI,oBAAoB,OAAO,SAAS,UAAU;AACxD,QAAI,CAAC,2BAA2B,SAAS,OAAO,cAAc,EAAG;AACjE,WAAO,MAAM,KAAK;AAAA,MAChB,GAAG,QAAQ,cAAc;AAAA,IAC3B,CAAC;AAAA,EACH,CAAC;AAED,UAAQ,KAAK,uBAAuB,OAAO,SAAS,UAAU;AAC5D,QAAI;AACF,YAAM,OAAO,eAAe,QAAQ,IAAI;AACxC,YAAM,EAAE,eAAe,WAAW,IAAI,4BAA4B,SAAS,SAAS;AACpF,YAAM,WAAW,MAAM,QAAQ,eAAe;AAAA,QAC5C,OAAO,KAAK;AAAA,QACZ,MAAM,KAAK;AAAA,MACb,CAAC;AACD,aAAO,MAAM;AAAA,QACX,yBAAyB;AAAA,UACvB,WAAW,SAAS;AAAA,UACpB,OAAO,KAAK;AAAA,UACZ,MAAM,KAAK;AAAA,UACX,QAAQ,KAAK;AAAA,UACb;AAAA,UACA;AAAA,QACF,CAAC;AAAA,MACH;AAAA,IACF,SAAS,KAAK;AACZ,aAAO,iBAAiB,SAAS,OAAO,KAAK,uBAAuB;AAAA,IACtE;AAAA,EACF,CAAC;AAED,UAAQ,KAAK,wBAAwB,OAAO,SAAS,UAAU;AAC7D,QAAI,CAAC,2BAA2B,SAAS,OAAO,cAAc,EAAG;AACjE,QAAI;AACF,YAAM,OAAO,eAAe,QAAQ,IAAI;AACxC,8BAAwB,OAAO,SAAS,cAAc;AACtD,aAAO,MAAM;AAAA,QACX,MAAM,QAAQ,eAAe;AAAA,UAC3B,OAAO,KAAK;AAAA,UACZ,MAAM,KAAK;AAAA,QACb,CAAC;AAAA,MACH;AAAA,IACF,SAAS,KAAK;AACZ,aAAO,iBAAiB,SAAS,OAAO,KAAK,wBAAwB;AAAA,IACvE;AAAA,EACF,CAAC;AAED,UAAQ,KAAK,+BAA+B,OAAO,SAAS,UAAU;AACpE,QAAI,CAAC,2BAA2B,SAAS,OAAO,cAAc,EAAG;AACjE,QAAI;AACF,YAAM,OAAO,eAAe,QAAQ,IAAI;AACxC,YAAM,mBAAmB,yBAAyB,SAAS,SAAS;AACpE,8BAAwB,OAAO,SAAS,cAAc;AACtD,aAAO,MAAM,KAAK,GAAG,EAAE;AAAA,QACrB,MAAM,QAAQ,qBAAqB;AAAA,UACjC,QAAQ,KAAK;AAAA,UACb,WAAW,kBAAkB,aAAa,KAAK;AAAA,UAC/C,QAAQ,KAAK;AAAA,UACb,YAAY,KAAK;AAAA,UACjB,MAAM,KAAK;AAAA,QACb,CAAC;AAAA,MACH;AAAA,IACF,SAAS,KAAK;AACZ,aAAO,iBAAiB,SAAS,OAAO,KAAK,+BAA+B;AAAA,IAC9E;AAAA,EACF,CAAC;AAED,UAAQ,KAAK,8BAA8B,OAAO,SAAS,UAAU;AACnE,QAAI,CAAC,2BAA2B,SAAS,OAAO,cAAc,EAAG;AACjE,QAAI;AACF,YAAM,OAAO,eAAe,QAAQ,IAAI;AACxC,YAAM,mBAAmB,yBAAyB,SAAS,SAAS;AACpE,8BAAwB,OAAO,SAAS,cAAc;AACtD,YAAM,QAAQ,4BAA4B,MAAM,OAAO;AACvD,UAAI,kBAAkB,WAAW;AAC/B,cAAM,YAAY,iBAAiB;AAAA,MACrC;AACA,aAAO,MAAM,KAAK,MAAM,QAAQ,oBAAoB,KAAK,CAAC;AAAA,IAC5D,SAAS,KAAK;AACZ,aAAO,iBAAiB,SAAS,OAAO,KAAK,8BAA8B;AAAA,IAC7E;AAAA,EACF,CAAC;AACH;",
+  "names": []
+}

package/dist/backend/routes/gateway/hostApiLifecycle.d.ts

@@ -0,0 +1,5 @@
+export default function hostApiLifecycleRoutes(fastify: any, { hostProxyService, allowedOrigins, bootstrap }?: {
+    allowedOrigins?: any[];
+    bootstrap?: {};
+}): Promise<void>;
+//# sourceMappingURL=hostApiLifecycle.d.ts.map

package/dist/backend/routes/gateway/hostApiLifecycle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hostApiLifecycle.d.ts","sourceRoot":"","sources":["../../../../src/backend/routes/gateway/hostApiLifecycle.ts"],"names":[],"mappings":"AAUA,wBAA8B,sBAAsB,CAClD,OAAO,KAAA,EACP,EAAE,gBAAgB,EAAE,cAAmB,EAAE,SAAc,EAAE;;;CAAK,iBAuE/D"}

package/dist/backend/routes/gateway/hostApiLifecycle.js

@@ -0,0 +1,80 @@
+import {
+  applyHostApiCorsHeaders,
+  ensureHostApiOriginAllowed,
+  readBodyRecord,
+  readHostBootstrapContext,
+  requireHostProxyService,
+  sendServiceError
+} from "./shared.js";
+async function hostApiLifecycleRoutes(fastify, { hostProxyService, allowedOrigins = [], bootstrap = {} } = {}) {
+  const service = requireHostProxyService(hostProxyService);
+  fastify.get("/api/installations", async (request, reply) => {
+    if (!ensureHostApiOriginAllowed(request, reply, allowedOrigins)) return;
+    try {
+      const query = readBodyRecord(request.query);
+      const bootstrapContext = readHostBootstrapContext(request, bootstrap);
+      applyHostApiCorsHeaders(reply, request, allowedOrigins);
+      return reply.send(
+        await service.listInstallations({
+          subjectId: bootstrapContext?.subjectId || query.subjectId
+        })
+      );
+    } catch (err) {
+      return sendServiceError(request, reply, err, "list installations failed");
+    }
+  });
+  fastify.post("/api/install", async (request, reply) => {
+    if (!ensureHostApiOriginAllowed(request, reply, allowedOrigins)) return;
+    try {
+      const body = readBodyRecord(request.body);
+      const bootstrapContext = readHostBootstrapContext(request, bootstrap);
+      applyHostApiCorsHeaders(reply, request, allowedOrigins);
+      return reply.send(
+        await service.installXapp({
+          xappId: body.xappId,
+          subjectId: bootstrapContext?.subjectId || body.subjectId,
+          termsAccepted: body.termsAccepted
+        })
+      );
+    } catch (err) {
+      return sendServiceError(request, reply, err, "install failed");
+    }
+  });
+  fastify.post("/api/update", async (request, reply) => {
+    if (!ensureHostApiOriginAllowed(request, reply, allowedOrigins)) return;
+    try {
+      const body = readBodyRecord(request.body);
+      const bootstrapContext = readHostBootstrapContext(request, bootstrap);
+      applyHostApiCorsHeaders(reply, request, allowedOrigins);
+      return reply.send(
+        await service.updateInstallation({
+          installationId: body.installationId,
+          subjectId: bootstrapContext?.subjectId || body.subjectId,
+          termsAccepted: body.termsAccepted
+        })
+      );
+    } catch (err) {
+      return sendServiceError(request, reply, err, "update failed");
+    }
+  });
+  fastify.post("/api/uninstall", async (request, reply) => {
+    if (!ensureHostApiOriginAllowed(request, reply, allowedOrigins)) return;
+    try {
+      const body = readBodyRecord(request.body);
+      const bootstrapContext = readHostBootstrapContext(request, bootstrap);
+      applyHostApiCorsHeaders(reply, request, allowedOrigins);
+      return reply.send(
+        await service.uninstallInstallation({
+          installationId: body.installationId,
+          subjectId: bootstrapContext?.subjectId || body.subjectId
+        })
+      );
+    } catch (err) {
+      return sendServiceError(request, reply, err, "uninstall failed");
+    }
+  });
+}
+export {
+  hostApiLifecycleRoutes as default
+};
+//# sourceMappingURL=hostApiLifecycle.js.map

package/dist/backend/routes/gateway/hostApiLifecycle.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/backend/routes/gateway/hostApiLifecycle.ts"],
+  "sourcesContent": ["// @ts-nocheck\nimport {\n  applyHostApiCorsHeaders,\n  ensureHostApiOriginAllowed,\n  readBodyRecord,\n  readHostBootstrapContext,\n  requireHostProxyService,\n  sendServiceError,\n} from \"./shared.js\";\n\nexport default async function hostApiLifecycleRoutes(\n  fastify,\n  { hostProxyService, allowedOrigins = [], bootstrap = {} } = {},\n) {\n  const service = requireHostProxyService(hostProxyService);\n  fastify.get(\"/api/installations\", async (request, reply) => {\n    if (!ensureHostApiOriginAllowed(request, reply, allowedOrigins)) return;\n    try {\n      const query = readBodyRecord(request.query);\n      const bootstrapContext = readHostBootstrapContext(request, bootstrap);\n      applyHostApiCorsHeaders(reply, request, allowedOrigins);\n      return reply.send(\n        await service.listInstallations({\n          subjectId: bootstrapContext?.subjectId || query.subjectId,\n        }),\n      );\n    } catch (err) {\n      return sendServiceError(request, reply, err, \"list installations failed\");\n    }\n  });\n\n  fastify.post(\"/api/install\", async (request, reply) => {\n    if (!ensureHostApiOriginAllowed(request, reply, allowedOrigins)) return;\n    try {\n      const body = readBodyRecord(request.body);\n      const bootstrapContext = readHostBootstrapContext(request, bootstrap);\n      applyHostApiCorsHeaders(reply, request, allowedOrigins);\n      return reply.send(\n        await service.installXapp({\n          xappId: body.xappId,\n          subjectId: bootstrapContext?.subjectId || body.subjectId,\n          termsAccepted: body.termsAccepted,\n        }),\n      );\n    } catch (err) {\n      return sendServiceError(request, reply, err, \"install failed\");\n    }\n  });\n\n  fastify.post(\"/api/update\", async (request, reply) => {\n    if (!ensureHostApiOriginAllowed(request, reply, allowedOrigins)) return;\n    try {\n      const body = readBodyRecord(request.body);\n      const bootstrapContext = readHostBootstrapContext(request, bootstrap);\n      applyHostApiCorsHeaders(reply, request, allowedOrigins);\n      return reply.send(\n        await service.updateInstallation({\n          installationId: body.installationId,\n          subjectId: bootstrapContext?.subjectId || body.subjectId,\n          termsAccepted: body.termsAccepted,\n        }),\n      );\n    } catch (err) {\n      return sendServiceError(request, reply, err, \"update failed\");\n    }\n  });\n\n  fastify.post(\"/api/uninstall\", async (request, reply) => {\n    if (!ensureHostApiOriginAllowed(request, reply, allowedOrigins)) return;\n    try {\n      const body = readBodyRecord(request.body);\n      const bootstrapContext = readHostBootstrapContext(request, bootstrap);\n      applyHostApiCorsHeaders(reply, request, allowedOrigins);\n      return reply.send(\n        await service.uninstallInstallation({\n          installationId: body.installationId,\n          subjectId: bootstrapContext?.subjectId || body.subjectId,\n        }),\n      );\n    } catch (err) {\n      return sendServiceError(request, reply, err, \"uninstall failed\");\n    }\n  });\n}\n"],
+  "mappings": "AACA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,eAAO,uBACL,SACA,EAAE,kBAAkB,iBAAiB,CAAC,GAAG,YAAY,CAAC,EAAE,IAAI,CAAC,GAC7D;AACA,QAAM,UAAU,wBAAwB,gBAAgB;AACxD,UAAQ,IAAI,sBAAsB,OAAO,SAAS,UAAU;AAC1D,QAAI,CAAC,2BAA2B,SAAS,OAAO,cAAc,EAAG;AACjE,QAAI;AACF,YAAM,QAAQ,eAAe,QAAQ,KAAK;AAC1C,YAAM,mBAAmB,yBAAyB,SAAS,SAAS;AACpE,8BAAwB,OAAO,SAAS,cAAc;AACtD,aAAO,MAAM;AAAA,QACX,MAAM,QAAQ,kBAAkB;AAAA,UAC9B,WAAW,kBAAkB,aAAa,MAAM;AAAA,QAClD,CAAC;AAAA,MACH;AAAA,IACF,SAAS,KAAK;AACZ,aAAO,iBAAiB,SAAS,OAAO,KAAK,2BAA2B;AAAA,IAC1E;AAAA,EACF,CAAC;AAED,UAAQ,KAAK,gBAAgB,OAAO,SAAS,UAAU;AACrD,QAAI,CAAC,2BAA2B,SAAS,OAAO,cAAc,EAAG;AACjE,QAAI;AACF,YAAM,OAAO,eAAe,QAAQ,IAAI;AACxC,YAAM,mBAAmB,yBAAyB,SAAS,SAAS;AACpE,8BAAwB,OAAO,SAAS,cAAc;AACtD,aAAO,MAAM;AAAA,QACX,MAAM,QAAQ,YAAY;AAAA,UACxB,QAAQ,KAAK;AAAA,UACb,WAAW,kBAAkB,aAAa,KAAK;AAAA,UAC/C,eAAe,KAAK;AAAA,QACtB,CAAC;AAAA,MACH;AAAA,IACF,SAAS,KAAK;AACZ,aAAO,iBAAiB,SAAS,OAAO,KAAK,gBAAgB;AAAA,IAC/D;AAAA,EACF,CAAC;AAED,UAAQ,KAAK,eAAe,OAAO,SAAS,UAAU;AACpD,QAAI,CAAC,2BAA2B,SAAS,OAAO,cAAc,EAAG;AACjE,QAAI;AACF,YAAM,OAAO,eAAe,QAAQ,IAAI;AACxC,YAAM,mBAAmB,yBAAyB,SAAS,SAAS;AACpE,8BAAwB,OAAO,SAAS,cAAc;AACtD,aAAO,MAAM;AAAA,QACX,MAAM,QAAQ,mBAAmB;AAAA,UAC/B,gBAAgB,KAAK;AAAA,UACrB,WAAW,kBAAkB,aAAa,KAAK;AAAA,UAC/C,eAAe,KAAK;AAAA,QACtB,CAAC;AAAA,MACH;AAAA,IACF,SAAS,KAAK;AACZ,aAAO,iBAAiB,SAAS,OAAO,KAAK,eAAe;AAAA,IAC9D;AAAA,EACF,CAAC;AAED,UAAQ,KAAK,kBAAkB,OAAO,SAAS,UAAU;AACvD,QAAI,CAAC,2BAA2B,SAAS,OAAO,cAAc,EAAG;AACjE,QAAI;AACF,YAAM,OAAO,eAAe,QAAQ,IAAI;AACxC,YAAM,mBAAmB,yBAAyB,SAAS,SAAS;AACpE,8BAAwB,OAAO,SAAS,cAAc;AACtD,aAAO,MAAM;AAAA,QACX,MAAM,QAAQ,sBAAsB;AAAA,UAClC,gBAAgB,KAAK;AAAA,UACrB,WAAW,kBAAkB,aAAa,KAAK;AAAA,QACjD,CAAC;AAAA,MACH;AAAA,IACF,SAAS,KAAK;AACZ,aAAO,iBAAiB,SAAS,OAAO,KAAK,kBAAkB;AAAA,IACjE;AAAA,EACF,CAAC;AACH;",
+  "names": []
+}

package/dist/backend/routes/gateway/hostContractBoundary.d.ts

@@ -0,0 +1,25 @@
+export declare function normalizeWidgetSessionInput(body: any, request: any): {
+    installationId: any;
+    widgetId: any;
+    origin: any;
+    subjectId: any;
+    xappId: any;
+    requestId: any;
+    hostReturnUrl: string;
+    resultPresentation: any;
+    guardUi: any;
+};
+export declare function normalizeBridgeRefreshInput(body: any, request: any): {
+    installationId: any;
+    widgetId: any;
+    origin: any;
+    subjectId: any;
+    hostReturnUrl: string;
+};
+export declare function normalizeBridgeVendorAssertionInput(body: any): {
+    vendorId: any;
+    subjectId: any;
+    installationId: any;
+    data: any;
+};
+//# sourceMappingURL=hostContractBoundary.d.ts.map

package/dist/backend/routes/gateway/hostContractBoundary.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hostContractBoundary.d.ts","sourceRoot":"","sources":["../../../../src/backend/routes/gateway/hostContractBoundary.ts"],"names":[],"mappings":"AAWA,wBAAgB,2BAA2B,CAAC,IAAI,KAAA,EAAE,OAAO,KAAA;;;;;;;;;;EAaxD;AAED,wBAAgB,2BAA2B,CAAC,IAAI,KAAA,EAAE,OAAO,KAAA;;;;;;EASxD;AAED,wBAAgB,mCAAmC,CAAC,IAAI,KAAA;;;;;EAOvD"}

package/dist/backend/routes/gateway/hostContractBoundary.js

@@ -0,0 +1,43 @@
+function readString(...values) {
+  for (const value of values) {
+    const normalized = String(value ?? "").trim();
+    if (normalized) return normalized;
+  }
+  return "";
+}
+function normalizeWidgetSessionInput(body, request) {
+  return {
+    installationId: body.installationId,
+    widgetId: body.widgetId,
+    origin: body.origin,
+    subjectId: body.subjectId,
+    xappId: body.xappId,
+    requestId: body.requestId,
+    hostReturnUrl: readString(body.hostReturnUrl, body.host_return_url, request.headers.referer) || void 0,
+    resultPresentation: body.resultPresentation || body.result_presentation,
+    guardUi: body.guardUi || body.guard_ui
+  };
+}
+function normalizeBridgeRefreshInput(body, request) {
+  return {
+    installationId: body.installationId,
+    widgetId: body.widgetId,
+    origin: body.origin,
+    subjectId: body.subjectId,
+    hostReturnUrl: readString(body.hostReturnUrl, body.host_return_url, request.headers.referer) || void 0
+  };
+}
+function normalizeBridgeVendorAssertionInput(body) {
+  return {
+    vendorId: body.vendorId || body.vendor_id,
+    subjectId: body.subjectId || body.subject_id,
+    installationId: body.installationId || body.installation_id,
+    data: body
+  };
+}
+export {
+  normalizeBridgeRefreshInput,
+  normalizeBridgeVendorAssertionInput,
+  normalizeWidgetSessionInput
+};
+//# sourceMappingURL=hostContractBoundary.js.map

package/dist/backend/routes/gateway/hostContractBoundary.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/backend/routes/gateway/hostContractBoundary.ts"],
+  "sourcesContent": ["// @ts-nocheck\nfunction readString(...values) {\n  for (const value of values) {\n    const normalized = String(value ?? \"\").trim();\n    if (normalized) return normalized;\n  }\n  return \"\";\n}\n\n// Keep backward-compat aliases at the HTTP boundary only.\n// Tenant implementations should treat the camelCase shape below as canonical.\nexport function normalizeWidgetSessionInput(body, request) {\n  return {\n    installationId: body.installationId,\n    widgetId: body.widgetId,\n    origin: body.origin,\n    subjectId: body.subjectId,\n    xappId: body.xappId,\n    requestId: body.requestId,\n    hostReturnUrl:\n      readString(body.hostReturnUrl, body.host_return_url, request.headers.referer) || undefined,\n    resultPresentation: body.resultPresentation || body.result_presentation,\n    guardUi: body.guardUi || body.guard_ui,\n  };\n}\n\nexport function normalizeBridgeRefreshInput(body, request) {\n  return {\n    installationId: body.installationId,\n    widgetId: body.widgetId,\n    origin: body.origin,\n    subjectId: body.subjectId,\n    hostReturnUrl:\n      readString(body.hostReturnUrl, body.host_return_url, request.headers.referer) || undefined,\n  };\n}\n\nexport function normalizeBridgeVendorAssertionInput(body) {\n  return {\n    vendorId: body.vendorId || body.vendor_id,\n    subjectId: body.subjectId || body.subject_id,\n    installationId: body.installationId || body.installation_id,\n    data: body,\n  };\n}\n"],
+  "mappings": "AACA,SAAS,cAAc,QAAQ;AAC7B,aAAW,SAAS,QAAQ;AAC1B,UAAM,aAAa,OAAO,SAAS,EAAE,EAAE,KAAK;AAC5C,QAAI,WAAY,QAAO;AAAA,EACzB;AACA,SAAO;AACT;AAIO,SAAS,4BAA4B,MAAM,SAAS;AACzD,SAAO;AAAA,IACL,gBAAgB,KAAK;AAAA,IACrB,UAAU,KAAK;AAAA,IACf,QAAQ,KAAK;AAAA,IACb,WAAW,KAAK;AAAA,IAChB,QAAQ,KAAK;AAAA,IACb,WAAW,KAAK;AAAA,IAChB,eACE,WAAW,KAAK,eAAe,KAAK,iBAAiB,QAAQ,QAAQ,OAAO,KAAK;AAAA,IACnF,oBAAoB,KAAK,sBAAsB,KAAK;AAAA,IACpD,SAAS,KAAK,WAAW,KAAK;AAAA,EAChC;AACF;AAEO,SAAS,4BAA4B,MAAM,SAAS;AACzD,SAAO;AAAA,IACL,gBAAgB,KAAK;AAAA,IACrB,UAAU,KAAK;AAAA,IACf,QAAQ,KAAK;AAAA,IACb,WAAW,KAAK;AAAA,IAChB,eACE,WAAW,KAAK,eAAe,KAAK,iBAAiB,QAAQ,QAAQ,OAAO,KAAK;AAAA,EACrF;AACF;AAEO,SAAS,oCAAoC,MAAM;AACxD,SAAO;AAAA,IACL,UAAU,KAAK,YAAY,KAAK;AAAA,IAChC,WAAW,KAAK,aAAa,KAAK;AAAA,IAClC,gBAAgB,KAAK,kBAAkB,KAAK;AAAA,IAC5C,MAAM;AAAA,EACR;AACF;",
+  "names": []
+}

package/dist/backend/routes/gateway/payment.d.ts

@@ -0,0 +1,4 @@
+export default function paymentRoutes(fastify: any, { enabledModes, paymentRuntime }?: {
+    paymentRuntime?: {};
+}): Promise<void>;
+//# sourceMappingURL=payment.d.ts.map

package/dist/backend/routes/gateway/payment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"payment.d.ts","sourceRoot":"","sources":["../../../../src/backend/routes/gateway/payment.ts"],"names":[],"mappings":"AAGA,wBAA8B,aAAa,CAAC,OAAO,KAAA,EAAE,EAAE,YAAY,EAAE,cAAmB,EAAE;;CAAK,iBAI9F"}

package/dist/backend/routes/gateway/payment.js

@@ -0,0 +1,10 @@
+import { getBackendModeHandlers } from "../../modes/index.js";
+async function paymentRoutes(fastify, { enabledModes, paymentRuntime = {} } = {}) {
+  for (const backendModeHandler of Object.values(getBackendModeHandlers(enabledModes))) {
+    await backendModeHandler.registerRoutes(fastify, { paymentRuntime });
+  }
+}
+export {
+  paymentRoutes as default
+};
+//# sourceMappingURL=payment.js.map

package/dist/backend/routes/gateway/payment.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/backend/routes/gateway/payment.ts"],
+  "sourcesContent": ["// @ts-nocheck\nimport { getBackendModeHandlers } from \"../../modes/index.js\";\n\nexport default async function paymentRoutes(fastify, { enabledModes, paymentRuntime = {} } = {}) {\n  for (const backendModeHandler of Object.values(getBackendModeHandlers(enabledModes))) {\n    await backendModeHandler.registerRoutes(fastify, { paymentRuntime });\n  }\n}\n"],
+  "mappings": "AACA,SAAS,8BAA8B;AAEvC,eAAO,cAAqC,SAAS,EAAE,cAAc,iBAAiB,CAAC,EAAE,IAAI,CAAC,GAAG;AAC/F,aAAW,sBAAsB,OAAO,OAAO,uBAAuB,YAAY,CAAC,GAAG;AACpF,UAAM,mBAAmB,eAAe,SAAS,EAAE,eAAe,CAAC;AAAA,EACrE;AACF;",
+  "names": []
+}

package/dist/backend/routes/gateway/shared.d.ts

@@ -0,0 +1,36 @@
+export declare function readBodyRecord(value: any): any;
+export declare function requireHostProxyService(hostProxyService: any): any;
+export declare function readRequestOrigin(request: any): string;
+export declare function readHostBootstrapContext(request: any, bootstrap?: {}): {
+    subjectId: string;
+    email: string;
+    name: string;
+    origin: string;
+    token: string;
+};
+export declare function requireHostBootstrapRequest(request: any, bootstrap?: {}): {
+    apiKey: string;
+    signingSecret: string;
+    ttlSeconds: number;
+};
+export declare function buildHostBootstrapResult({ subjectId, email, name, origin, signingSecret, ttlSeconds, }: {
+    subjectId: any;
+    email: any;
+    name: any;
+    origin: any;
+    signingSecret: any;
+    ttlSeconds: any;
+}): {
+    subjectId: string;
+    email: string;
+    name: string;
+    bootstrapToken: string;
+    expiresIn: number;
+};
+export declare function isOriginAllowed(origin: any, allowedOrigins?: any[]): boolean;
+export declare function applyHostApiCorsHeaders(reply: any, request: any, allowedOrigins?: any[]): void;
+export declare function ensureHostApiOriginAllowed(request: any, reply: any, allowedOrigins?: any[]): boolean;
+export declare function sendHostApiPreflight(request: any, reply: any, allowedOrigins?: any[]): any;
+export declare function applyNoStoreHeaders(reply: any, hostProxyService: any): any;
+export declare function sendServiceError(request: any, reply: any, err: any, fallbackMessage: any): any;
+//# sourceMappingURL=shared.d.ts.map

package/dist/backend/routes/gateway/shared.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared.d.ts","sourceRoot":"","sources":["../../../../src/backend/routes/gateway/shared.ts"],"names":[],"mappings":"AA8BA,wBAAgB,cAAc,CAAC,KAAK,KAAA,OAEnC;AAED,wBAAgB,uBAAuB,CAAC,gBAAgB,KAAA,OAKvD;AAED,wBAAgB,iBAAiB,CAAC,OAAO,KAAA,UAExC;AA2CD,wBAAgB,wBAAwB,CAAC,OAAO,KAAA,EAAE,SAAS,KAAK;;;;;;EAiB/D;AAED,wBAAgB,2BAA2B,CAAC,OAAO,KAAA,EAAE,SAAS,KAAK;;;;EAoBlE;AAED,wBAAgB,wBAAwB,CAAC,EACvC,SAAS,EACT,KAAK,EACL,IAAI,EACJ,MAAM,EACN,aAAa,EACb,UAAU,GACX;;;;;;;CAAA;;;;;;EAuBA;AAED,wBAAgB,eAAe,CAAC,MAAM,KAAA,EAAE,cAAc,QAAK,WAQ1D;AAED,wBAAgB,uBAAuB,CAAC,KAAK,KAAA,EAAE,OAAO,KAAA,EAAE,cAAc,QAAK,QAQ1E;AAED,wBAAgB,0BAA0B,CAAC,OAAO,KAAA,EAAE,KAAK,KAAA,EAAE,cAAc,QAAK,WAS7E;AAED,wBAAgB,oBAAoB,CAAC,OAAO,KAAA,EAAE,KAAK,KAAA,EAAE,cAAc,QAAK,OAgBvE;AAED,wBAAgB,mBAAmB,CAAC,KAAK,KAAA,EAAE,gBAAgB,KAAA,OAO1D;AAED,wBAAgB,gBAAgB,CAAC,OAAO,KAAA,EAAE,KAAK,KAAA,EAAE,GAAG,KAAA,EAAE,eAAe,KAAA,OAapE"}