@xapps-platform/backend-kit 0.1.1

package/dist/backend/routes/reference.js

@@ -0,0 +1,414 @@
+import fs from "node:fs";
+import {
+  getBackendModeEndpointGroups,
+  getBackendModeReferenceDetails,
+  normalizeEnabledBackendModes
+} from "../modes/index.js";
+const BASE_ENDPOINT_GROUPS = [
+  {
+    key: "core_health",
+    label: "Core health",
+    when_to_use: "Always present in the reference backend.",
+    endpoints: [{ method: "GET", path: "/health", purpose: "Basic backend health." }]
+  },
+  {
+    key: "guard_execution",
+    label: "Tenant guard execution reference",
+    when_to_use: "Needed when the tenant owns payment-policy or subject-profile policy execution.",
+    endpoints: [
+      {
+        method: "POST",
+        path: "/xapps/requests",
+        purpose: "Receives tenant-owned guard/policy tool execution."
+      }
+    ]
+  },
+  {
+    key: "tenant_subject_profile_reference",
+    label: "Tenant subject-profile reference seam",
+    when_to_use: "Optional seam when the tenant wants to provide tenant-owned billing profile candidates.",
+    endpoints: [
+      {
+        method: "POST",
+        path: "/guard/subject-profiles/tenant-candidates",
+        purpose: "Returns tenant-owned billing/profile candidates for the guard."
+      }
+    ]
+  },
+  {
+    key: "reference_assets",
+    label: "Reference assets",
+    when_to_use: "Only for the current local/reference browser flow.",
+    endpoints: [
+      { method: "GET", path: "/", purpose: "Entry page for the marketplace host reference." },
+      {
+        method: "GET",
+        path: "/marketplace.html",
+        purpose: "Marketplace host shell with single-panel and split-panel embed modes."
+      },
+      {
+        method: "GET",
+        path: "/single-xapp.html",
+        purpose: "Focused single-xapp host surface using the same shared host/runtime contract."
+      },
+      {
+        method: "GET",
+        path: "/embed/sdk/xapps-embed-sdk.esm.js",
+        purpose: "Serves the embed SDK bundle used by the local reference host surfaces."
+      },
+      {
+        method: "GET",
+        path: "/host/marketplace-host.js",
+        purpose: "Browser bootstrap for the marketplace host reference."
+      },
+      {
+        method: "GET",
+        path: "/host/single-xapp-host.js",
+        purpose: "Browser bootstrap for the single-xapp host reference."
+      },
+      {
+        method: "GET",
+        path: "/host/host-shell.js",
+        purpose: "Shared host-shell rendering helpers for marketplace and single-xapp surfaces."
+      },
+      {
+        method: "GET",
+        path: "/host/marketplace-runtime.js",
+        purpose: "Shared marketplace runtime wiring over the browser SDK contract."
+      },
+      {
+        method: "GET",
+        path: "/host/reference-runtime.js",
+        purpose: "Reference theme/runtime helpers for the standard marketplace host flow."
+      },
+      {
+        method: "GET",
+        path: "/host/host-status.js",
+        purpose: "Shared host proof/status renderer used by tenant host surfaces."
+      }
+    ]
+  },
+  {
+    key: "reference_marketplace_host_core",
+    label: "Reference marketplace host proxy: core contract",
+    when_to_use: "Use this first. It is the core tenant browser->backend contract for the marketplace host.",
+    endpoints: [
+      {
+        method: "GET",
+        path: "/api/host-config",
+        purpose: "Returns current host config such as gateway base URL and supported embed modes."
+      },
+      {
+        method: "POST",
+        path: "/api/resolve-subject",
+        purpose: "Resolves a stable subject id from email for the stateless host bootstrap."
+      },
+      {
+        method: "POST",
+        path: "/api/create-catalog-session",
+        purpose: "Proxies catalog session creation for the host page."
+      },
+      {
+        method: "POST",
+        path: "/api/create-widget-session",
+        purpose: "Proxies widget session creation for the host page."
+      }
+    ]
+  },
+  {
+    key: "reference_marketplace_host_lifecycle",
+    label: "Reference marketplace host proxy: lifecycle",
+    when_to_use: "Required for a real tenant marketplace host, while still kept as a separate layer for clarity.",
+    endpoints: [
+      {
+        method: "GET",
+        path: "/api/installations",
+        purpose: "Lists installations for the current subject in the host page."
+      },
+      {
+        method: "POST",
+        path: "/api/install",
+        purpose: "Install mutation proxy used by the host page."
+      },
+      {
+        method: "POST",
+        path: "/api/update",
+        purpose: "Update mutation proxy used by the host page."
+      },
+      {
+        method: "POST",
+        path: "/api/uninstall",
+        purpose: "Uninstall mutation proxy used by the host page."
+      }
+    ]
+  },
+  {
+    key: "reference_marketplace_host_bridge",
+    label: "Reference marketplace host proxy: advanced bridge",
+    when_to_use: "Add these only when the tenant host needs bridge renewal or advanced signing seams.",
+    endpoints: [
+      {
+        method: "POST",
+        path: "/api/bridge/token-refresh",
+        purpose: "Bridge v2 token-refresh helper for widget session renewal."
+      },
+      {
+        method: "POST",
+        path: "/api/bridge/sign",
+        purpose: "Optional bridge signing seam for advanced host integrations."
+      },
+      {
+        method: "POST",
+        path: "/api/bridge/vendor-assertion",
+        purpose: "Optional vendor assertion seam for advanced linked integrations."
+      }
+    ]
+  }
+];
+const OPTION_GROUPS = [
+  {
+    key: "lean_managed_first_lane",
+    label: "Lean first version",
+    recommended: true,
+    platform_managed: ["payments: stripe gateway-managed", "invoicing", "notifications"],
+    tenant_must_own: [
+      "tenant identity/bootstrap",
+      "core marketplace host proxy contract",
+      "marketplace lifecycle routes",
+      "payment return signing configuration",
+      "guard execution endpoint",
+      "tenant configuration for the chosen gateway lane"
+    ],
+    reference_endpoint_groups: [
+      "core_health",
+      "guard_execution",
+      "gateway_managed_payment_reference",
+      "reference_marketplace_host_core",
+      "reference_marketplace_host_lifecycle",
+      "tenant_subject_profile_reference"
+    ]
+  },
+  {
+    key: "tenant_payment_control",
+    label: "Tenant payment method / delegated evolution",
+    recommended: false,
+    platform_managed: ["invoicing", "notifications"],
+    tenant_must_own: [
+      "payment lane selection/configuration",
+      "core marketplace host proxy contract",
+      "marketplace lifecycle routes",
+      "payment return signing policy",
+      "tenant payment page or equivalent UX if owner-managed mode is selected"
+    ],
+    reference_endpoint_groups: [
+      "core_health",
+      "guard_execution",
+      "tenant_delegated_payment_reference",
+      "owner_managed_payment_reference",
+      "reference_marketplace_host_core",
+      "reference_marketplace_host_lifecycle",
+      "reference_marketplace_host_bridge",
+      "tenant_subject_profile_reference"
+    ],
+    notes: [
+      "Current tenant backend is the reference seam for tenant-controlled payment evolution.",
+      "The tenant may keep the same contract in Node or reimplement it in PHP/Laravel via xapps/xapps-php."
+    ]
+  },
+  {
+    key: "tenant_own_invoicing",
+    label: "Tenant-owned invoicing later",
+    recommended: false,
+    platform_managed: [],
+    tenant_must_own: [
+      "tenant invoice provider configuration",
+      "invoice execution policy/refs on the gateway lane"
+    ],
+    reference_endpoint_groups: [],
+    notes: [
+      "No dedicated tenant backend endpoint is required in the current lean lane for managed invoicing.",
+      "If tenant-owned invoicing is selected later, follow docs/specifications/expansions/09-invoicing-hook-provider-model.md."
+    ]
+  },
+  {
+    key: "tenant_own_notifications",
+    label: "Tenant-owned notifications later",
+    recommended: false,
+    platform_managed: [],
+    tenant_must_own: [
+      "tenant notification provider configuration",
+      "notification execution policy/refs on the gateway lane"
+    ],
+    reference_endpoint_groups: [],
+    notes: [
+      "No dedicated tenant backend endpoint is required in the current lean lane for managed notifications.",
+      "If tenant-owned notifications are selected later, follow docs/specifications/expansions/08-notification-hook-provider-model.md."
+    ]
+  }
+];
+const PAYMENT_MODE_SUMMARY = [
+  {
+    key: "gateway_managed",
+    label: "Gateway managed",
+    default_for_first_lane: true,
+    page_owner: "gateway"
+  },
+  {
+    key: "tenant_delegated",
+    label: "Gateway delegated by tenant",
+    default_for_first_lane: false,
+    page_owner: "gateway"
+  },
+  {
+    key: "publisher_delegated",
+    label: "Gateway delegated by publisher",
+    default_for_first_lane: false,
+    page_owner: "gateway"
+  },
+  {
+    key: "owner_managed",
+    reference_key: "owner_managed",
+    label: "Owner managed",
+    default_for_first_lane: false,
+    page_owner: "owner"
+  }
+];
+function nowIso() {
+  return (/* @__PURE__ */ new Date()).toISOString();
+}
+function buildReferenceCapabilityState(options = {}) {
+  return {
+    enableReference: options.enableReference !== false,
+    enableLifecycle: options.enableLifecycle !== false,
+    enableBridge: options.enableBridge !== false,
+    enabledModes: normalizeEnabledBackendModes(options.enabledModes)
+  };
+}
+function filterEndpointGroups(capabilities) {
+  const filteredStaticGroups = BASE_ENDPOINT_GROUPS.filter((group) => {
+    if (group.key === "reference_marketplace_host_lifecycle") return capabilities.enableLifecycle;
+    if (group.key === "reference_marketplace_host_bridge") return capabilities.enableBridge;
+    if ([
+      "gateway_managed_payment_reference",
+      "tenant_delegated_payment_reference",
+      "publisher_delegated_payment_reference",
+      "owner_managed_payment_reference"
+    ].includes(group.key)) {
+      return false;
+    }
+    return true;
+  });
+  const modeGroups = getBackendModeEndpointGroups(capabilities.enabledModes);
+  const guardIndex = filteredStaticGroups.findIndex((group) => group.key === "guard_execution");
+  if (guardIndex === -1) return [...filteredStaticGroups, ...modeGroups];
+  return [
+    ...filteredStaticGroups.slice(0, guardIndex + 1),
+    ...modeGroups,
+    ...filteredStaticGroups.slice(guardIndex + 1)
+  ];
+}
+function filterIntegrationOptions(capabilities) {
+  const allowedGroupKeys = new Set(filterEndpointGroups(capabilities).map((group) => group.key));
+  return OPTION_GROUPS.map((option) => ({
+    ...option,
+    reference_endpoint_groups: (option.reference_endpoint_groups || []).filter(
+      (key) => allowedGroupKeys.has(key)
+    )
+  }));
+}
+function readReferenceConfig(options = {}) {
+  const reference = options.reference && typeof options.reference === "object" ? options.reference : {};
+  const branding = options.branding && typeof options.branding === "object" ? options.branding : {};
+  const gateway = options.gateway && typeof options.gateway === "object" ? options.gateway : {};
+  const rawAssets = reference.referenceAssets && typeof reference.referenceAssets === "object" ? reference.referenceAssets : {};
+  const assets = Array.isArray(rawAssets.endpoints) ? rawAssets.endpoints : BASE_ENDPOINT_GROUPS.find((group) => group.key === "reference_assets")?.endpoints || [];
+  return {
+    tenant: String(reference.tenant || "").trim() || "tenant",
+    workspace: String(reference.workspace || "").trim() || "tenant",
+    stack: String(reference.stack || "").trim() || "node",
+    mode: String(reference.mode || "").trim() || "reference-marketplace-tenant",
+    tenantPolicySlugs: Array.isArray(reference.tenantPolicySlugs) ? reference.tenantPolicySlugs : [],
+    proofSources: Array.isArray(reference.proofSources) ? reference.proofSources : ["/api/reference", "/api/host-config", "/api/installations?subjectId=..."],
+    sdkPaths: reference.sdkPaths && typeof reference.sdkPaths === "object" ? reference.sdkPaths : {
+      node: "@xapps/server-sdk",
+      php: "xapps/xapps-php",
+      browser: "@xapps/xapps-embed-sdk"
+    },
+    hostSurfaces: Array.isArray(reference.hostSurfaces) ? reference.hostSurfaces : [
+      { key: "single-panel", label: "Single panel", recommended_for_first_lane: true },
+      { key: "split-panel", label: "Split panel", recommended_for_first_lane: false },
+      { key: "single-xapp", label: "Single xapp", recommended_for_first_lane: false }
+    ],
+    notes: Array.isArray(reference.notes) ? reference.notes : [],
+    gatewayUrl: String(gateway.baseUrl || "").trim(),
+    displayName: String(branding.tenantName || "").trim(),
+    stackLabel: String(branding.stackLabel || "").trim(),
+    embedSdkCandidateFiles: Array.isArray(reference.embedSdkCandidateFiles) ? reference.embedSdkCandidateFiles : [],
+    referenceAssetEndpoints: assets
+  };
+}
+async function referenceRoutes(fastify, options = {}) {
+  const capabilities = buildReferenceCapabilityState(options);
+  const enabledModeSet = new Set(capabilities.enabledModes);
+  const reference = readReferenceConfig(options);
+  fastify.get("/embed/sdk/xapps-embed-sdk.esm.js", async (request, reply) => {
+    const localSdkFile = reference.embedSdkCandidateFiles.find(
+      (filePath) => fs.existsSync(filePath)
+    );
+    if (localSdkFile) {
+      return reply.code(200).type("application/javascript; charset=utf-8").send(fs.readFileSync(localSdkFile, "utf8"));
+    }
+    const upstreamUrl = `${String(reference.gatewayUrl || "").trim().replace(/\/+$/, "")}/embed/sdk/xapps-embed-sdk.esm.js`;
+    if (!upstreamUrl.startsWith("http://") && !upstreamUrl.startsWith("https://")) {
+      request.log.error(
+        { gatewayUrl: reference.gatewayUrl },
+        "invalid gateway URL for embed sdk fallback"
+      );
+      return reply.code(404).send({ ok: false, message: "embed sdk not built" });
+    }
+    try {
+      const upstream = await fetch(upstreamUrl);
+      if (!upstream.ok) {
+        request.log.error(
+          { status: upstream.status, upstreamUrl },
+          "failed to fetch embed sdk from gateway fallback"
+        );
+        return reply.code(502).send({ ok: false, message: "embed sdk not available" });
+      }
+      return reply.code(200).type("application/javascript; charset=utf-8").send(await upstream.text());
+    } catch (err) {
+      request.log.error({ err, upstreamUrl }, "embed sdk fallback fetch failed");
+      return reply.code(502).send({ ok: false, message: "embed sdk not available" });
+    }
+  });
+  if (!capabilities.enableReference) return;
+  fastify.get("/api/reference", async () => {
+    const endpointGroups = filterEndpointGroups(capabilities).map(
+      (group) => group.key === "reference_assets" ? { ...group, endpoints: reference.referenceAssetEndpoints } : group
+    );
+    return {
+      ok: true,
+      tenant: reference.tenant,
+      workspace: reference.workspace,
+      stack: reference.stack,
+      mode: reference.mode,
+      time: nowIso(),
+      gateway_url: reference.gatewayUrl,
+      ...reference.displayName ? { display_name: reference.displayName } : {},
+      ...reference.stackLabel ? { stack_label: reference.stackLabel } : {},
+      tenant_policy_slugs: reference.tenantPolicySlugs,
+      proof_sources: reference.proofSources,
+      sdk_paths: reference.sdkPaths,
+      host_surfaces: reference.hostSurfaces,
+      payment_modes: PAYMENT_MODE_SUMMARY.filter((mode) => enabledModeSet.has(mode.key)),
+      payment_mode_reference_details: getBackendModeReferenceDetails(capabilities.enabledModes),
+      endpoint_groups: endpointGroups,
+      integration_options: filterIntegrationOptions(capabilities),
+      ...reference.notes.length > 0 ? { notes: reference.notes } : {}
+    };
+  });
+}
+export {
+  referenceRoutes as default
+};
+//# sourceMappingURL=reference.js.map

package/dist/backend/routes/reference.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/backend/routes/reference.ts"],
+  "sourcesContent": ["// @ts-nocheck\nimport fs from \"node:fs\";\nimport {\n  getBackendModeEndpointGroups,\n  getBackendModeReferenceDetails,\n  normalizeEnabledBackendModes,\n} from \"../modes/index.js\";\n\nconst BASE_ENDPOINT_GROUPS = [\n  {\n    key: \"core_health\",\n    label: \"Core health\",\n    when_to_use: \"Always present in the reference backend.\",\n    endpoints: [{ method: \"GET\", path: \"/health\", purpose: \"Basic backend health.\" }],\n  },\n  {\n    key: \"guard_execution\",\n    label: \"Tenant guard execution reference\",\n    when_to_use: \"Needed when the tenant owns payment-policy or subject-profile policy execution.\",\n    endpoints: [\n      {\n        method: \"POST\",\n        path: \"/xapps/requests\",\n        purpose: \"Receives tenant-owned guard/policy tool execution.\",\n      },\n    ],\n  },\n  {\n    key: \"tenant_subject_profile_reference\",\n    label: \"Tenant subject-profile reference seam\",\n    when_to_use:\n      \"Optional seam when the tenant wants to provide tenant-owned billing profile candidates.\",\n    endpoints: [\n      {\n        method: \"POST\",\n        path: \"/guard/subject-profiles/tenant-candidates\",\n        purpose: \"Returns tenant-owned billing/profile candidates for the guard.\",\n      },\n    ],\n  },\n  {\n    key: \"reference_assets\",\n    label: \"Reference assets\",\n    when_to_use: \"Only for the current local/reference browser flow.\",\n    endpoints: [\n      { method: \"GET\", path: \"/\", purpose: \"Entry page for the marketplace host reference.\" },\n      {\n        method: \"GET\",\n        path: \"/marketplace.html\",\n        purpose: \"Marketplace host shell with single-panel and split-panel embed modes.\",\n      },\n      {\n        method: \"GET\",\n        path: \"/single-xapp.html\",\n        purpose: \"Focused single-xapp host surface using the same shared host/runtime contract.\",\n      },\n      {\n        method: \"GET\",\n        path: \"/embed/sdk/xapps-embed-sdk.esm.js\",\n        purpose: \"Serves the embed SDK bundle used by the local reference host surfaces.\",\n      },\n      {\n        method: \"GET\",\n        path: \"/host/marketplace-host.js\",\n        purpose: \"Browser bootstrap for the marketplace host reference.\",\n      },\n      {\n        method: \"GET\",\n        path: \"/host/single-xapp-host.js\",\n        purpose: \"Browser bootstrap for the single-xapp host reference.\",\n      },\n      {\n        method: \"GET\",\n        path: \"/host/host-shell.js\",\n        purpose: \"Shared host-shell rendering helpers for marketplace and single-xapp surfaces.\",\n      },\n      {\n        method: \"GET\",\n        path: \"/host/marketplace-runtime.js\",\n        purpose: \"Shared marketplace runtime wiring over the browser SDK contract.\",\n      },\n      {\n        method: \"GET\",\n        path: \"/host/reference-runtime.js\",\n        purpose: \"Reference theme/runtime helpers for the standard marketplace host flow.\",\n      },\n      {\n        method: \"GET\",\n        path: \"/host/host-status.js\",\n        purpose: \"Shared host proof/status renderer used by tenant host surfaces.\",\n      },\n    ],\n  },\n  {\n    key: \"reference_marketplace_host_core\",\n    label: \"Reference marketplace host proxy: core contract\",\n    when_to_use:\n      \"Use this first. It is the core tenant browser->backend contract for the marketplace host.\",\n    endpoints: [\n      {\n        method: \"GET\",\n        path: \"/api/host-config\",\n        purpose: \"Returns current host config such as gateway base URL and supported embed modes.\",\n      },\n      {\n        method: \"POST\",\n        path: \"/api/resolve-subject\",\n        purpose: \"Resolves a stable subject id from email for the stateless host bootstrap.\",\n      },\n      {\n        method: \"POST\",\n        path: \"/api/create-catalog-session\",\n        purpose: \"Proxies catalog session creation for the host page.\",\n      },\n      {\n        method: \"POST\",\n        path: \"/api/create-widget-session\",\n        purpose: \"Proxies widget session creation for the host page.\",\n      },\n    ],\n  },\n  {\n    key: \"reference_marketplace_host_lifecycle\",\n    label: \"Reference marketplace host proxy: lifecycle\",\n    when_to_use:\n      \"Required for a real tenant marketplace host, while still kept as a separate layer for clarity.\",\n    endpoints: [\n      {\n        method: \"GET\",\n        path: \"/api/installations\",\n        purpose: \"Lists installations for the current subject in the host page.\",\n      },\n      {\n        method: \"POST\",\n        path: \"/api/install\",\n        purpose: \"Install mutation proxy used by the host page.\",\n      },\n      {\n        method: \"POST\",\n        path: \"/api/update\",\n        purpose: \"Update mutation proxy used by the host page.\",\n      },\n      {\n        method: \"POST\",\n        path: \"/api/uninstall\",\n        purpose: \"Uninstall mutation proxy used by the host page.\",\n      },\n    ],\n  },\n  {\n    key: \"reference_marketplace_host_bridge\",\n    label: \"Reference marketplace host proxy: advanced bridge\",\n    when_to_use:\n      \"Add these only when the tenant host needs bridge renewal or advanced signing seams.\",\n    endpoints: [\n      {\n        method: \"POST\",\n        path: \"/api/bridge/token-refresh\",\n        purpose: \"Bridge v2 token-refresh helper for widget session renewal.\",\n      },\n      {\n        method: \"POST\",\n        path: \"/api/bridge/sign\",\n        purpose: \"Optional bridge signing seam for advanced host integrations.\",\n      },\n      {\n        method: \"POST\",\n        path: \"/api/bridge/vendor-assertion\",\n        purpose: \"Optional vendor assertion seam for advanced linked integrations.\",\n      },\n    ],\n  },\n];\n\nconst OPTION_GROUPS = [\n  {\n    key: \"lean_managed_first_lane\",\n    label: \"Lean first version\",\n    recommended: true,\n    platform_managed: [\"payments: stripe gateway-managed\", \"invoicing\", \"notifications\"],\n    tenant_must_own: [\n      \"tenant identity/bootstrap\",\n      \"core marketplace host proxy contract\",\n      \"marketplace lifecycle routes\",\n      \"payment return signing configuration\",\n      \"guard execution endpoint\",\n      \"tenant configuration for the chosen gateway lane\",\n    ],\n    reference_endpoint_groups: [\n      \"core_health\",\n      \"guard_execution\",\n      \"gateway_managed_payment_reference\",\n      \"reference_marketplace_host_core\",\n      \"reference_marketplace_host_lifecycle\",\n      \"tenant_subject_profile_reference\",\n    ],\n  },\n  {\n    key: \"tenant_payment_control\",\n    label: \"Tenant payment method / delegated evolution\",\n    recommended: false,\n    platform_managed: [\"invoicing\", \"notifications\"],\n    tenant_must_own: [\n      \"payment lane selection/configuration\",\n      \"core marketplace host proxy contract\",\n      \"marketplace lifecycle routes\",\n      \"payment return signing policy\",\n      \"tenant payment page or equivalent UX if owner-managed mode is selected\",\n    ],\n    reference_endpoint_groups: [\n      \"core_health\",\n      \"guard_execution\",\n      \"tenant_delegated_payment_reference\",\n      \"owner_managed_payment_reference\",\n      \"reference_marketplace_host_core\",\n      \"reference_marketplace_host_lifecycle\",\n      \"reference_marketplace_host_bridge\",\n      \"tenant_subject_profile_reference\",\n    ],\n    notes: [\n      \"Current tenant backend is the reference seam for tenant-controlled payment evolution.\",\n      \"The tenant may keep the same contract in Node or reimplement it in PHP/Laravel via xapps/xapps-php.\",\n    ],\n  },\n  {\n    key: \"tenant_own_invoicing\",\n    label: \"Tenant-owned invoicing later\",\n    recommended: false,\n    platform_managed: [],\n    tenant_must_own: [\n      \"tenant invoice provider configuration\",\n      \"invoice execution policy/refs on the gateway lane\",\n    ],\n    reference_endpoint_groups: [],\n    notes: [\n      \"No dedicated tenant backend endpoint is required in the current lean lane for managed invoicing.\",\n      \"If tenant-owned invoicing is selected later, follow docs/specifications/expansions/09-invoicing-hook-provider-model.md.\",\n    ],\n  },\n  {\n    key: \"tenant_own_notifications\",\n    label: \"Tenant-owned notifications later\",\n    recommended: false,\n    platform_managed: [],\n    tenant_must_own: [\n      \"tenant notification provider configuration\",\n      \"notification execution policy/refs on the gateway lane\",\n    ],\n    reference_endpoint_groups: [],\n    notes: [\n      \"No dedicated tenant backend endpoint is required in the current lean lane for managed notifications.\",\n      \"If tenant-owned notifications are selected later, follow docs/specifications/expansions/08-notification-hook-provider-model.md.\",\n    ],\n  },\n];\n\nconst PAYMENT_MODE_SUMMARY = [\n  {\n    key: \"gateway_managed\",\n    label: \"Gateway managed\",\n    default_for_first_lane: true,\n    page_owner: \"gateway\",\n  },\n  {\n    key: \"tenant_delegated\",\n    label: \"Gateway delegated by tenant\",\n    default_for_first_lane: false,\n    page_owner: \"gateway\",\n  },\n  {\n    key: \"publisher_delegated\",\n    label: \"Gateway delegated by publisher\",\n    default_for_first_lane: false,\n    page_owner: \"gateway\",\n  },\n  {\n    key: \"owner_managed\",\n    reference_key: \"owner_managed\",\n    label: \"Owner managed\",\n    default_for_first_lane: false,\n    page_owner: \"owner\",\n  },\n];\n\nfunction nowIso() {\n  return new Date().toISOString();\n}\n\nfunction buildReferenceCapabilityState(options = {}) {\n  return {\n    enableReference: options.enableReference !== false,\n    enableLifecycle: options.enableLifecycle !== false,\n    enableBridge: options.enableBridge !== false,\n    enabledModes: normalizeEnabledBackendModes(options.enabledModes),\n  };\n}\n\nfunction filterEndpointGroups(capabilities) {\n  const filteredStaticGroups = BASE_ENDPOINT_GROUPS.filter((group) => {\n    if (group.key === \"reference_marketplace_host_lifecycle\") return capabilities.enableLifecycle;\n    if (group.key === \"reference_marketplace_host_bridge\") return capabilities.enableBridge;\n    if (\n      [\n        \"gateway_managed_payment_reference\",\n        \"tenant_delegated_payment_reference\",\n        \"publisher_delegated_payment_reference\",\n        \"owner_managed_payment_reference\",\n      ].includes(group.key)\n    ) {\n      return false;\n    }\n    return true;\n  });\n  const modeGroups = getBackendModeEndpointGroups(capabilities.enabledModes);\n  const guardIndex = filteredStaticGroups.findIndex((group) => group.key === \"guard_execution\");\n  if (guardIndex === -1) return [...filteredStaticGroups, ...modeGroups];\n  return [\n    ...filteredStaticGroups.slice(0, guardIndex + 1),\n    ...modeGroups,\n    ...filteredStaticGroups.slice(guardIndex + 1),\n  ];\n}\n\nfunction filterIntegrationOptions(capabilities) {\n  const allowedGroupKeys = new Set(filterEndpointGroups(capabilities).map((group) => group.key));\n  return OPTION_GROUPS.map((option) => ({\n    ...option,\n    reference_endpoint_groups: (option.reference_endpoint_groups || []).filter((key) =>\n      allowedGroupKeys.has(key),\n    ),\n  }));\n}\n\nfunction readReferenceConfig(options = {}) {\n  const reference =\n    options.reference && typeof options.reference === \"object\" ? options.reference : {};\n  const branding = options.branding && typeof options.branding === \"object\" ? options.branding : {};\n  const gateway = options.gateway && typeof options.gateway === \"object\" ? options.gateway : {};\n  const rawAssets =\n    reference.referenceAssets && typeof reference.referenceAssets === \"object\"\n      ? reference.referenceAssets\n      : {};\n  const assets = Array.isArray(rawAssets.endpoints)\n    ? rawAssets.endpoints\n    : BASE_ENDPOINT_GROUPS.find((group) => group.key === \"reference_assets\")?.endpoints || [];\n  return {\n    tenant: String(reference.tenant || \"\").trim() || \"tenant\",\n    workspace: String(reference.workspace || \"\").trim() || \"tenant\",\n    stack: String(reference.stack || \"\").trim() || \"node\",\n    mode: String(reference.mode || \"\").trim() || \"reference-marketplace-tenant\",\n    tenantPolicySlugs: Array.isArray(reference.tenantPolicySlugs)\n      ? reference.tenantPolicySlugs\n      : [],\n    proofSources: Array.isArray(reference.proofSources)\n      ? reference.proofSources\n      : [\"/api/reference\", \"/api/host-config\", \"/api/installations?subjectId=...\"],\n    sdkPaths:\n      reference.sdkPaths && typeof reference.sdkPaths === \"object\"\n        ? reference.sdkPaths\n        : {\n            node: \"@xapps/server-sdk\",\n            php: \"xapps/xapps-php\",\n            browser: \"@xapps/xapps-embed-sdk\",\n          },\n    hostSurfaces: Array.isArray(reference.hostSurfaces)\n      ? reference.hostSurfaces\n      : [\n          { key: \"single-panel\", label: \"Single panel\", recommended_for_first_lane: true },\n          { key: \"split-panel\", label: \"Split panel\", recommended_for_first_lane: false },\n          { key: \"single-xapp\", label: \"Single xapp\", recommended_for_first_lane: false },\n        ],\n    notes: Array.isArray(reference.notes) ? reference.notes : [],\n    gatewayUrl: String(gateway.baseUrl || \"\").trim(),\n    displayName: String(branding.tenantName || \"\").trim(),\n    stackLabel: String(branding.stackLabel || \"\").trim(),\n    embedSdkCandidateFiles: Array.isArray(reference.embedSdkCandidateFiles)\n      ? reference.embedSdkCandidateFiles\n      : [],\n    referenceAssetEndpoints: assets,\n  };\n}\n\nexport default async function referenceRoutes(fastify, options = {}) {\n  const capabilities = buildReferenceCapabilityState(options);\n  const enabledModeSet = new Set(capabilities.enabledModes);\n  const reference = readReferenceConfig(options);\n\n  fastify.get(\"/embed/sdk/xapps-embed-sdk.esm.js\", async (request, reply) => {\n    const localSdkFile = reference.embedSdkCandidateFiles.find((filePath) =>\n      fs.existsSync(filePath),\n    );\n    if (localSdkFile) {\n      return reply\n        .code(200)\n        .type(\"application/javascript; charset=utf-8\")\n        .send(fs.readFileSync(localSdkFile, \"utf8\"));\n    }\n\n    const upstreamUrl = `${String(reference.gatewayUrl || \"\")\n      .trim()\n      .replace(/\\/+$/, \"\")}/embed/sdk/xapps-embed-sdk.esm.js`;\n    if (!upstreamUrl.startsWith(\"http://\") && !upstreamUrl.startsWith(\"https://\")) {\n      request.log.error(\n        { gatewayUrl: reference.gatewayUrl },\n        \"invalid gateway URL for embed sdk fallback\",\n      );\n      return reply.code(404).send({ ok: false, message: \"embed sdk not built\" });\n    }\n\n    try {\n      const upstream = await fetch(upstreamUrl);\n      if (!upstream.ok) {\n        request.log.error(\n          { status: upstream.status, upstreamUrl },\n          \"failed to fetch embed sdk from gateway fallback\",\n        );\n        return reply.code(502).send({ ok: false, message: \"embed sdk not available\" });\n      }\n      return reply\n        .code(200)\n        .type(\"application/javascript; charset=utf-8\")\n        .send(await upstream.text());\n    } catch (err) {\n      request.log.error({ err, upstreamUrl }, \"embed sdk fallback fetch failed\");\n      return reply.code(502).send({ ok: false, message: \"embed sdk not available\" });\n    }\n  });\n\n  if (!capabilities.enableReference) return;\n\n  fastify.get(\"/api/reference\", async () => {\n    const endpointGroups = filterEndpointGroups(capabilities).map((group) =>\n      group.key === \"reference_assets\"\n        ? { ...group, endpoints: reference.referenceAssetEndpoints }\n        : group,\n    );\n    return {\n      ok: true,\n      tenant: reference.tenant,\n      workspace: reference.workspace,\n      stack: reference.stack,\n      mode: reference.mode,\n      time: nowIso(),\n      gateway_url: reference.gatewayUrl,\n      ...(reference.displayName ? { display_name: reference.displayName } : {}),\n      ...(reference.stackLabel ? { stack_label: reference.stackLabel } : {}),\n      tenant_policy_slugs: reference.tenantPolicySlugs,\n      proof_sources: reference.proofSources,\n      sdk_paths: reference.sdkPaths,\n      host_surfaces: reference.hostSurfaces,\n      payment_modes: PAYMENT_MODE_SUMMARY.filter((mode) => enabledModeSet.has(mode.key)),\n      payment_mode_reference_details: getBackendModeReferenceDetails(capabilities.enabledModes),\n      endpoint_groups: endpointGroups,\n      integration_options: filterIntegrationOptions(capabilities),\n      ...(reference.notes.length > 0 ? { notes: reference.notes } : {}),\n    };\n  });\n}\n"],
+  "mappings": "AACA,OAAO,QAAQ;AACf;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,MAAM,uBAAuB;AAAA,EAC3B;AAAA,IACE,KAAK;AAAA,IACL,OAAO;AAAA,IACP,aAAa;AAAA,IACb,WAAW,CAAC,EAAE,QAAQ,OAAO,MAAM,WAAW,SAAS,wBAAwB,CAAC;AAAA,EAClF;AAAA,EACA;AAAA,IACE,KAAK;AAAA,IACL,OAAO;AAAA,IACP,aAAa;AAAA,IACb,WAAW;AAAA,MACT;AAAA,QACE,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,SAAS;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,KAAK;AAAA,IACL,OAAO;AAAA,IACP,aACE;AAAA,IACF,WAAW;AAAA,MACT;AAAA,QACE,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,SAAS;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,KAAK;AAAA,IACL,OAAO;AAAA,IACP,aAAa;AAAA,IACb,WAAW;AAAA,MACT,EAAE,QAAQ,OAAO,MAAM,KAAK,SAAS,iDAAiD;AAAA,MACt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aACE;AAAA,IACF,WAAW;AAAA,MACT;AAAA,QACE,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,SAAS;AAAA,MACX;AAAA,MACA;AAAA,QACE,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,SAAS;AAAA,MACX;AAAA,MACA;AAAA,QACE,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,SAAS;AAAA,MACX;AAAA,MACA;AAAA,QACE,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,SAAS;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,KAAK;AAAA,IACL,OAAO;AAAA,IACP,aACE;AAAA,IACF,WAAW;AAAA,MACT;AAAA,QACE,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,SAAS;AAAA,MACX;AAAA,MACA;AAAA,QACE,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,SAAS;AAAA,MACX;AAAA,MACA;AAAA,QACE,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,SAAS;AAAA,MACX;AAAA,MACA;AAAA,QACE,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,SAAS;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,KAAK;AAAA,IACL,OAAO;AAAA,IACP,aACE;AAAA,IACF,WAAW;AAAA,MACT;AAAA,QACE,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,SAAS;AAAA,MACX;AAAA,MACA;AAAA,QACE,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,SAAS;AAAA,MACX;AAAA,MACA;AAAA,QACE,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,SAAS;AAAA,MACX;AAAA,IACF;AAAA,EACF;AACF;AAEA,MAAM,gBAAgB;AAAA,EACpB;AAAA,IACE,KAAK;AAAA,IACL,OAAO;AAAA,IACP,aAAa;AAAA,IACb,kBAAkB,CAAC,oCAAoC,aAAa,eAAe;AAAA,IACnF,iBAAiB;AAAA,MACf;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,2BAA2B;AAAA,MACzB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,KAAK;AAAA,IACL,OAAO;AAAA,IACP,aAAa;AAAA,IACb,kBAAkB,CAAC,aAAa,eAAe;AAAA,IAC/C,iBAAiB;AAAA,MACf;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,2BAA2B;AAAA,MACzB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,OAAO;AAAA,MACL;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,KAAK;AAAA,IACL,OAAO;AAAA,IACP,aAAa;AAAA,IACb,kBAAkB,CAAC;AAAA,IACnB,iBAAiB;AAAA,MACf;AAAA,MACA;AAAA,IACF;AAAA,IACA,2BAA2B,CAAC;AAAA,IAC5B,OAAO;AAAA,MACL;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,KAAK;AAAA,IACL,OAAO;AAAA,IACP,aAAa;AAAA,IACb,kBAAkB,CAAC;AAAA,IACnB,iBAAiB;AAAA,MACf;AAAA,MACA;AAAA,IACF;AAAA,IACA,2BAA2B,CAAC;AAAA,IAC5B,OAAO;AAAA,MACL;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACF;AAEA,MAAM,uBAAuB;AAAA,EAC3B;AAAA,IACE,KAAK;AAAA,IACL,OAAO;AAAA,IACP,wBAAwB;AAAA,IACxB,YAAY;AAAA,EACd;AAAA,EACA;AAAA,IACE,KAAK;AAAA,IACL,OAAO;AAAA,IACP,wBAAwB;AAAA,IACxB,YAAY;AAAA,EACd;AAAA,EACA;AAAA,IACE,KAAK;AAAA,IACL,OAAO;AAAA,IACP,wBAAwB;AAAA,IACxB,YAAY;AAAA,EACd;AAAA,EACA;AAAA,IACE,KAAK;AAAA,IACL,eAAe;AAAA,IACf,OAAO;AAAA,IACP,wBAAwB;AAAA,IACxB,YAAY;AAAA,EACd;AACF;AAEA,SAAS,SAAS;AAChB,UAAO,oBAAI,KAAK,GAAE,YAAY;AAChC;AAEA,SAAS,8BAA8B,UAAU,CAAC,GAAG;AACnD,SAAO;AAAA,IACL,iBAAiB,QAAQ,oBAAoB;AAAA,IAC7C,iBAAiB,QAAQ,oBAAoB;AAAA,IAC7C,cAAc,QAAQ,iBAAiB;AAAA,IACvC,cAAc,6BAA6B,QAAQ,YAAY;AAAA,EACjE;AACF;AAEA,SAAS,qBAAqB,cAAc;AAC1C,QAAM,uBAAuB,qBAAqB,OAAO,CAAC,UAAU;AAClE,QAAI,MAAM,QAAQ,uCAAwC,QAAO,aAAa;AAC9E,QAAI,MAAM,QAAQ,oCAAqC,QAAO,aAAa;AAC3E,QACE;AAAA,MACE;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,EAAE,SAAS,MAAM,GAAG,GACpB;AACA,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT,CAAC;AACD,QAAM,aAAa,6BAA6B,aAAa,YAAY;AACzE,QAAM,aAAa,qBAAqB,UAAU,CAAC,UAAU,MAAM,QAAQ,iBAAiB;AAC5F,MAAI,eAAe,GAAI,QAAO,CAAC,GAAG,sBAAsB,GAAG,UAAU;AACrE,SAAO;AAAA,IACL,GAAG,qBAAqB,MAAM,GAAG,aAAa,CAAC;AAAA,IAC/C,GAAG;AAAA,IACH,GAAG,qBAAqB,MAAM,aAAa,CAAC;AAAA,EAC9C;AACF;AAEA,SAAS,yBAAyB,cAAc;AAC9C,QAAM,mBAAmB,IAAI,IAAI,qBAAqB,YAAY,EAAE,IAAI,CAAC,UAAU,MAAM,GAAG,CAAC;AAC7F,SAAO,cAAc,IAAI,CAAC,YAAY;AAAA,IACpC,GAAG;AAAA,IACH,4BAA4B,OAAO,6BAA6B,CAAC,GAAG;AAAA,MAAO,CAAC,QAC1E,iBAAiB,IAAI,GAAG;AAAA,IAC1B;AAAA,EACF,EAAE;AACJ;AAEA,SAAS,oBAAoB,UAAU,CAAC,GAAG;AACzC,QAAM,YACJ,QAAQ,aAAa,OAAO,QAAQ,cAAc,WAAW,QAAQ,YAAY,CAAC;AACpF,QAAM,WAAW,QAAQ,YAAY,OAAO,QAAQ,aAAa,WAAW,QAAQ,WAAW,CAAC;AAChG,QAAM,UAAU,QAAQ,WAAW,OAAO,QAAQ,YAAY,WAAW,QAAQ,UAAU,CAAC;AAC5F,QAAM,YACJ,UAAU,mBAAmB,OAAO,UAAU,oBAAoB,WAC9D,UAAU,kBACV,CAAC;AACP,QAAM,SAAS,MAAM,QAAQ,UAAU,SAAS,IAC5C,UAAU,YACV,qBAAqB,KAAK,CAAC,UAAU,MAAM,QAAQ,kBAAkB,GAAG,aAAa,CAAC;AAC1F,SAAO;AAAA,IACL,QAAQ,OAAO,UAAU,UAAU,EAAE,EAAE,KAAK,KAAK;AAAA,IACjD,WAAW,OAAO,UAAU,aAAa,EAAE,EAAE,KAAK,KAAK;AAAA,IACvD,OAAO,OAAO,UAAU,SAAS,EAAE,EAAE,KAAK,KAAK;AAAA,IAC/C,MAAM,OAAO,UAAU,QAAQ,EAAE,EAAE,KAAK,KAAK;AAAA,IAC7C,mBAAmB,MAAM,QAAQ,UAAU,iBAAiB,IACxD,UAAU,oBACV,CAAC;AAAA,IACL,cAAc,MAAM,QAAQ,UAAU,YAAY,IAC9C,UAAU,eACV,CAAC,kBAAkB,oBAAoB,kCAAkC;AAAA,IAC7E,UACE,UAAU,YAAY,OAAO,UAAU,aAAa,WAChD,UAAU,WACV;AAAA,MACE,MAAM;AAAA,MACN,KAAK;AAAA,MACL,SAAS;AAAA,IACX;AAAA,IACN,cAAc,MAAM,QAAQ,UAAU,YAAY,IAC9C,UAAU,eACV;AAAA,MACE,EAAE,KAAK,gBAAgB,OAAO,gBAAgB,4BAA4B,KAAK;AAAA,MAC/E,EAAE,KAAK,eAAe,OAAO,eAAe,4BAA4B,MAAM;AAAA,MAC9E,EAAE,KAAK,eAAe,OAAO,eAAe,4BAA4B,MAAM;AAAA,IAChF;AAAA,IACJ,OAAO,MAAM,QAAQ,UAAU,KAAK,IAAI,UAAU,QAAQ,CAAC;AAAA,IAC3D,YAAY,OAAO,QAAQ,WAAW,EAAE,EAAE,KAAK;AAAA,IAC/C,aAAa,OAAO,SAAS,cAAc,EAAE,EAAE,KAAK;AAAA,IACpD,YAAY,OAAO,SAAS,cAAc,EAAE,EAAE,KAAK;AAAA,IACnD,wBAAwB,MAAM,QAAQ,UAAU,sBAAsB,IAClE,UAAU,yBACV,CAAC;AAAA,IACL,yBAAyB;AAAA,EAC3B;AACF;AAEA,eAAO,gBAAuC,SAAS,UAAU,CAAC,GAAG;AACnE,QAAM,eAAe,8BAA8B,OAAO;AAC1D,QAAM,iBAAiB,IAAI,IAAI,aAAa,YAAY;AACxD,QAAM,YAAY,oBAAoB,OAAO;AAE7C,UAAQ,IAAI,qCAAqC,OAAO,SAAS,UAAU;AACzE,UAAM,eAAe,UAAU,uBAAuB;AAAA,MAAK,CAAC,aAC1D,GAAG,WAAW,QAAQ;AAAA,IACxB;AACA,QAAI,cAAc;AAChB,aAAO,MACJ,KAAK,GAAG,EACR,KAAK,uCAAuC,EAC5C,KAAK,GAAG,aAAa,cAAc,MAAM,CAAC;AAAA,IAC/C;AAEA,UAAM,cAAc,GAAG,OAAO,UAAU,cAAc,EAAE,EACrD,KAAK,EACL,QAAQ,QAAQ,EAAE,CAAC;AACtB,QAAI,CAAC,YAAY,WAAW,SAAS,KAAK,CAAC,YAAY,WAAW,UAAU,GAAG;AAC7E,cAAQ,IAAI;AAAA,QACV,EAAE,YAAY,UAAU,WAAW;AAAA,QACnC;AAAA,MACF;AACA,aAAO,MAAM,KAAK,GAAG,EAAE,KAAK,EAAE,IAAI,OAAO,SAAS,sBAAsB,CAAC;AAAA,IAC3E;AAEA,QAAI;AACF,YAAM,WAAW,MAAM,MAAM,WAAW;AACxC,UAAI,CAAC,SAAS,IAAI;AAChB,gBAAQ,IAAI;AAAA,UACV,EAAE,QAAQ,SAAS,QAAQ,YAAY;AAAA,UACvC;AAAA,QACF;AACA,eAAO,MAAM,KAAK,GAAG,EAAE,KAAK,EAAE,IAAI,OAAO,SAAS,0BAA0B,CAAC;AAAA,MAC/E;AACA,aAAO,MACJ,KAAK,GAAG,EACR,KAAK,uCAAuC,EAC5C,KAAK,MAAM,SAAS,KAAK,CAAC;AAAA,IAC/B,SAAS,KAAK;AACZ,cAAQ,IAAI,MAAM,EAAE,KAAK,YAAY,GAAG,iCAAiC;AACzE,aAAO,MAAM,KAAK,GAAG,EAAE,KAAK,EAAE,IAAI,OAAO,SAAS,0BAA0B,CAAC;AAAA,IAC/E;AAAA,EACF,CAAC;AAED,MAAI,CAAC,aAAa,gBAAiB;AAEnC,UAAQ,IAAI,kBAAkB,YAAY;AACxC,UAAM,iBAAiB,qBAAqB,YAAY,EAAE;AAAA,MAAI,CAAC,UAC7D,MAAM,QAAQ,qBACV,EAAE,GAAG,OAAO,WAAW,UAAU,wBAAwB,IACzD;AAAA,IACN;AACA,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,QAAQ,UAAU;AAAA,MAClB,WAAW,UAAU;AAAA,MACrB,OAAO,UAAU;AAAA,MACjB,MAAM,UAAU;AAAA,MAChB,MAAM,OAAO;AAAA,MACb,aAAa,UAAU;AAAA,MACvB,GAAI,UAAU,cAAc,EAAE,cAAc,UAAU,YAAY,IAAI,CAAC;AAAA,MACvE,GAAI,UAAU,aAAa,EAAE,aAAa,UAAU,WAAW,IAAI,CAAC;AAAA,MACpE,qBAAqB,UAAU;AAAA,MAC/B,eAAe,UAAU;AAAA,MACzB,WAAW,UAAU;AAAA,MACrB,eAAe,UAAU;AAAA,MACzB,eAAe,qBAAqB,OAAO,CAAC,SAAS,eAAe,IAAI,KAAK,GAAG,CAAC;AAAA,MACjF,gCAAgC,+BAA+B,aAAa,YAAY;AAAA,MACxF,iBAAiB;AAAA,MACjB,qBAAqB,yBAAyB,YAAY;AAAA,MAC1D,GAAI,UAAU,MAAM,SAAS,IAAI,EAAE,OAAO,UAAU,MAAM,IAAI,CAAC;AAAA,IACjE;AAAA,EACF,CAAC;AACH;",
+  "names": []
+}

package/dist/index.d.ts

@@ -0,0 +1,10 @@
+import { createGatewayExecutionModule, createHostReferenceModule, createReferenceSurfaceModule, createHostProxyService } from "./backend/modules.js";
+import { buildHostedGatewayPaymentUrl, buildModeHostedGatewayPaymentUrl, createPaymentEvidenceHandler, createPaymentRuntime, extractHostedPaymentSessionId, registerPaymentPageApiRoutes, registerPaymentPageAssetRoute } from "./backend/paymentRuntime.js";
+import { normalizeBackendKitOptions, resolvePlatformSecretRefFromEnv } from "./backend/options.js";
+export declare function createBackendKit(input?: {}, deps?: {}): Promise<{
+    options: any;
+    registerRoutes(app: any): Promise<void>;
+    applyNotFoundHandler(app: any): void;
+}>;
+export { buildHostedGatewayPaymentUrl as buildHostedGatewayPaymentUrl, buildModeHostedGatewayPaymentUrl as buildModeHostedGatewayPaymentUrl, createGatewayExecutionModule, createHostReferenceModule, createReferenceSurfaceModule, createHostProxyService, createPaymentEvidenceHandler, createPaymentRuntime, extractHostedPaymentSessionId, normalizeBackendKitOptions, registerPaymentPageApiRoutes, registerPaymentPageAssetRoute, resolvePlatformSecretRefFromEnv, };
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EACL,4BAA4B,EAC5B,yBAAyB,EACzB,4BAA4B,EAC5B,sBAAsB,EACvB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,4BAA4B,EAC5B,gCAAgC,EAChC,4BAA4B,EAC5B,oBAAoB,EACpB,6BAA6B,EAC7B,4BAA4B,EAC5B,6BAA6B,EAC9B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,0BAA0B,EAAE,+BAA+B,EAAE,MAAM,sBAAsB,CAAC;AAEnG,wBAAsB,gBAAgB,CAAC,KAAK,KAAK,EAAE,IAAI,KAAK;;;;GA+D3D;AAED,OAAO,EACL,4BAA4B,IAAI,4BAA4B,EAC5D,gCAAgC,IAAI,gCAAgC,EACpE,4BAA4B,EAC5B,yBAAyB,EACzB,4BAA4B,EAC5B,sBAAsB,EACtB,4BAA4B,EAC5B,oBAAoB,EACpB,6BAA6B,EAC7B,0BAA0B,EAC1B,4BAA4B,EAC5B,6BAA6B,EAC7B,+BAA+B,GAChC,CAAC"}

package/dist/index.js

@@ -0,0 +1,81 @@
+import {
+  createGatewayExecutionModule,
+  createHostReferenceModule,
+  createReferenceSurfaceModule,
+  createHostProxyService
+} from "./backend/modules.js";
+import {
+  buildHostedGatewayPaymentUrl,
+  buildModeHostedGatewayPaymentUrl,
+  createPaymentEvidenceHandler,
+  createPaymentRuntime,
+  extractHostedPaymentSessionId,
+  registerPaymentPageApiRoutes,
+  registerPaymentPageAssetRoute
+} from "./backend/paymentRuntime.js";
+import { normalizeBackendKitOptions, resolvePlatformSecretRefFromEnv } from "./backend/options.js";
+async function createBackendKit(input = {}, deps = {}) {
+  const normalizeOptions = typeof deps.normalizeOptions === "function" ? deps.normalizeOptions : null;
+  const createReferenceSurfaceModule2 = typeof deps.createReferenceSurfaceModule === "function" ? deps.createReferenceSurfaceModule : null;
+  const createHostReferenceModule2 = typeof deps.createHostReferenceModule === "function" ? deps.createHostReferenceModule : null;
+  const createGatewayExecutionModule2 = typeof deps.createGatewayExecutionModule === "function" ? deps.createGatewayExecutionModule : null;
+  if (!normalizeOptions || !createReferenceSurfaceModule2 || !createHostReferenceModule2 || !createGatewayExecutionModule2) {
+    throw new TypeError("backend kit dependencies are incomplete");
+  }
+  const options = normalizeOptions(input);
+  const paymentRuntime = await createPaymentRuntime(options, deps);
+  const referenceSurfaceModule = createReferenceSurfaceModule2({
+    gateway: options.gateway,
+    branding: options.branding,
+    enableReference: options.host.enableReference,
+    enableLifecycle: options.host.enableLifecycle,
+    enableBridge: options.host.enableBridge,
+    enabledModes: options.payments.enabledModes,
+    reference: options.reference
+  });
+  const hostReferenceModule = createHostReferenceModule2({
+    gateway: options.gateway,
+    branding: options.branding,
+    reference: options.reference,
+    enableLifecycle: options.host.enableLifecycle,
+    enableBridge: options.host.enableBridge,
+    allowedOrigins: options.host.allowedOrigins,
+    bootstrap: options.host.bootstrap,
+    hostProxyService: options.overrides.hostProxyService
+  });
+  const gatewayExecutionModule = createGatewayExecutionModule2({
+    enabledModes: options.payments.enabledModes,
+    subjectProfiles: options.subjectProfiles,
+    paymentRuntime
+  });
+  return {
+    options,
+    async registerRoutes(app) {
+      await referenceSurfaceModule.registerRoutes(app);
+      await hostReferenceModule.registerRoutes(app);
+      await gatewayExecutionModule.registerRoutes(app);
+    },
+    applyNotFoundHandler(app) {
+      app.setNotFoundHandler(
+        async (_request, reply) => reply.code(404).send({ message: "Not found" })
+      );
+    }
+  };
+}
+export {
+  buildHostedGatewayPaymentUrl,
+  buildModeHostedGatewayPaymentUrl,
+  createBackendKit,
+  createGatewayExecutionModule,
+  createHostProxyService,
+  createHostReferenceModule,
+  createPaymentEvidenceHandler,
+  createPaymentRuntime,
+  createReferenceSurfaceModule,
+  extractHostedPaymentSessionId,
+  normalizeBackendKitOptions,
+  registerPaymentPageApiRoutes,
+  registerPaymentPageAssetRoute,
+  resolvePlatformSecretRefFromEnv
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/index.ts"],
+  "sourcesContent": ["// @ts-nocheck\nimport {\n  createGatewayExecutionModule,\n  createHostReferenceModule,\n  createReferenceSurfaceModule,\n  createHostProxyService,\n} from \"./backend/modules.js\";\nimport {\n  buildHostedGatewayPaymentUrl,\n  buildModeHostedGatewayPaymentUrl,\n  createPaymentEvidenceHandler,\n  createPaymentRuntime,\n  extractHostedPaymentSessionId,\n  registerPaymentPageApiRoutes,\n  registerPaymentPageAssetRoute,\n} from \"./backend/paymentRuntime.js\";\nimport { normalizeBackendKitOptions, resolvePlatformSecretRefFromEnv } from \"./backend/options.js\";\n\nexport async function createBackendKit(input = {}, deps = {}) {\n  const normalizeOptions =\n    typeof deps.normalizeOptions === \"function\" ? deps.normalizeOptions : null;\n  const createReferenceSurfaceModule =\n    typeof deps.createReferenceSurfaceModule === \"function\"\n      ? deps.createReferenceSurfaceModule\n      : null;\n  const createHostReferenceModule =\n    typeof deps.createHostReferenceModule === \"function\" ? deps.createHostReferenceModule : null;\n  const createGatewayExecutionModule =\n    typeof deps.createGatewayExecutionModule === \"function\"\n      ? deps.createGatewayExecutionModule\n      : null;\n  if (\n    !normalizeOptions ||\n    !createReferenceSurfaceModule ||\n    !createHostReferenceModule ||\n    !createGatewayExecutionModule\n  ) {\n    throw new TypeError(\"backend kit dependencies are incomplete\");\n  }\n\n  const options = normalizeOptions(input);\n  const paymentRuntime = await createPaymentRuntime(options, deps);\n\n  const referenceSurfaceModule = createReferenceSurfaceModule({\n    gateway: options.gateway,\n    branding: options.branding,\n    enableReference: options.host.enableReference,\n    enableLifecycle: options.host.enableLifecycle,\n    enableBridge: options.host.enableBridge,\n    enabledModes: options.payments.enabledModes,\n    reference: options.reference,\n  });\n  const hostReferenceModule = createHostReferenceModule({\n    gateway: options.gateway,\n    branding: options.branding,\n    reference: options.reference,\n    enableLifecycle: options.host.enableLifecycle,\n    enableBridge: options.host.enableBridge,\n    allowedOrigins: options.host.allowedOrigins,\n    bootstrap: options.host.bootstrap,\n    hostProxyService: options.overrides.hostProxyService,\n  });\n  const gatewayExecutionModule = createGatewayExecutionModule({\n    enabledModes: options.payments.enabledModes,\n    subjectProfiles: options.subjectProfiles,\n    paymentRuntime,\n  });\n\n  return {\n    options,\n    async registerRoutes(app) {\n      await referenceSurfaceModule.registerRoutes(app);\n      await hostReferenceModule.registerRoutes(app);\n      await gatewayExecutionModule.registerRoutes(app);\n    },\n    applyNotFoundHandler(app) {\n      app.setNotFoundHandler(async (_request, reply) =>\n        reply.code(404).send({ message: \"Not found\" }),\n      );\n    },\n  };\n}\n\nexport {\n  buildHostedGatewayPaymentUrl as buildHostedGatewayPaymentUrl,\n  buildModeHostedGatewayPaymentUrl as buildModeHostedGatewayPaymentUrl,\n  createGatewayExecutionModule,\n  createHostReferenceModule,\n  createReferenceSurfaceModule,\n  createHostProxyService,\n  createPaymentEvidenceHandler,\n  createPaymentRuntime,\n  extractHostedPaymentSessionId,\n  normalizeBackendKitOptions,\n  registerPaymentPageApiRoutes,\n  registerPaymentPageAssetRoute,\n  resolvePlatformSecretRefFromEnv,\n};\n"],
+  "mappings": "AACA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,4BAA4B,uCAAuC;AAE5E,eAAsB,iBAAiB,QAAQ,CAAC,GAAG,OAAO,CAAC,GAAG;AAC5D,QAAM,mBACJ,OAAO,KAAK,qBAAqB,aAAa,KAAK,mBAAmB;AACxE,QAAMA,gCACJ,OAAO,KAAK,iCAAiC,aACzC,KAAK,+BACL;AACN,QAAMC,6BACJ,OAAO,KAAK,8BAA8B,aAAa,KAAK,4BAA4B;AAC1F,QAAMC,gCACJ,OAAO,KAAK,iCAAiC,aACzC,KAAK,+BACL;AACN,MACE,CAAC,oBACD,CAACF,iCACD,CAACC,8BACD,CAACC,+BACD;AACA,UAAM,IAAI,UAAU,yCAAyC;AAAA,EAC/D;AAEA,QAAM,UAAU,iBAAiB,KAAK;AACtC,QAAM,iBAAiB,MAAM,qBAAqB,SAAS,IAAI;AAE/D,QAAM,yBAAyBF,8BAA6B;AAAA,IAC1D,SAAS,QAAQ;AAAA,IACjB,UAAU,QAAQ;AAAA,IAClB,iBAAiB,QAAQ,KAAK;AAAA,IAC9B,iBAAiB,QAAQ,KAAK;AAAA,IAC9B,cAAc,QAAQ,KAAK;AAAA,IAC3B,cAAc,QAAQ,SAAS;AAAA,IAC/B,WAAW,QAAQ;AAAA,EACrB,CAAC;AACD,QAAM,sBAAsBC,2BAA0B;AAAA,IACpD,SAAS,QAAQ;AAAA,IACjB,UAAU,QAAQ;AAAA,IAClB,WAAW,QAAQ;AAAA,IACnB,iBAAiB,QAAQ,KAAK;AAAA,IAC9B,cAAc,QAAQ,KAAK;AAAA,IAC3B,gBAAgB,QAAQ,KAAK;AAAA,IAC7B,WAAW,QAAQ,KAAK;AAAA,IACxB,kBAAkB,QAAQ,UAAU;AAAA,EACtC,CAAC;AACD,QAAM,yBAAyBC,8BAA6B;AAAA,IAC1D,cAAc,QAAQ,SAAS;AAAA,IAC/B,iBAAiB,QAAQ;AAAA,IACzB;AAAA,EACF,CAAC;AAED,SAAO;AAAA,IACL;AAAA,IACA,MAAM,eAAe,KAAK;AACxB,YAAM,uBAAuB,eAAe,GAAG;AAC/C,YAAM,oBAAoB,eAAe,GAAG;AAC5C,YAAM,uBAAuB,eAAe,GAAG;AAAA,IACjD;AAAA,IACA,qBAAqB,KAAK;AACxB,UAAI;AAAA,QAAmB,OAAO,UAAU,UACtC,MAAM,KAAK,GAAG,EAAE,KAAK,EAAE,SAAS,YAAY,CAAC;AAAA,MAC/C;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": ["createReferenceSurfaceModule", "createHostReferenceModule", "createGatewayExecutionModule"]
+}

package/package.json

@@ -0,0 +1,42 @@
+{
+  "name": "@xapps-platform/backend-kit",
+  "version": "0.1.1",
+  "license": "MIT",
+  "author": "Daniel Vladescu <daniel.vladescu@gmail.com>",
+  "description": "Modular Node backend kit for the current Xapps backend contract (tenant surface today, shared actor-adapter direction later)",
+  "type": "module",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": "./dist/index.js",
+    "./backend/modes": "./dist/backend/modes/index.js",
+    "./backend/policies/common": "./dist/backend/policies/common.js",
+    "./backend/routes/health": "./dist/backend/routes/health.js",
+    "./backend/routes/reference": "./dist/backend/routes/reference.js",
+    "./backend/routes/gateway/*": "./dist/backend/routes/gateway/*.js",
+    "./backend/modes/*/*": "./dist/backend/modes/*/*.js",
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/0x730/xapps-sdk-js.git",
+    "directory": "packages/backend-kit"
+  },
+  "homepage": "https://gateway.0x730.com",
+  "bugs": {
+    "url": "https://github.com/0x730/xapps-sdk-js/issues"
+  },
+  "scripts": {
+    "build": "node ../../scripts/build-backend-kit.mjs",
+    "smoke": "npm run build && node examples/smoke/smoke.mjs"
+  },
+  "dependencies": {
+    "@xapps-platform/server-sdk": "^0.1.0"
+  }
+}