mindoodb 0.0.85 → 0.0.88

package/dist/node/server/expressAdapter.js

@@ -0,0 +1,108 @@
+"use strict";
+/**
+ * Glue between Express and the platform-neutral handlers in
+ * {@link MindooDBServerCore}: turns an Express request into a
+ * {@link ServerRequest} and writes a {@link ServerResponse} back.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.toServerRequest = toServerRequest;
+exports.sendServerResponse = sendServerResponse;
+exports.route = route;
+exports.guard = guard;
+const types_1 = require("../../server/http/types");
+const compressionMiddleware_1 = require("./compressionMiddleware");
+/** Snapshot of an Express request, including what earlier guards resolved. */
+function toServerRequest(req) {
+    const rawBody = Buffer.isBuffer(req.body)
+        ? new Uint8Array(req.body.buffer, req.body.byteOffset, req.body.byteLength)
+        : undefined;
+    return {
+        method: req.method.toUpperCase(),
+        path: req.path,
+        params: req.params,
+        query: req.query,
+        headers: req.headers,
+        body: rawBody ? {} : req.body,
+        rawBody,
+        jsonBodyBytes: req.jsonBodyBytes,
+        httpVersion: req.httpVersion,
+        clientIp: req.ip,
+        tenantId: req.tenantId,
+        systemAdmin: req.systemAdmin,
+        syncPrincipal: req.syncPrincipal,
+        timestampPrincipal: req.timestampPrincipal,
+        peerName: req.peerName,
+    };
+}
+/** Copy what a guard resolved back onto the Express request for later middleware. */
+function applyGuardResults(req, serverRequest) {
+    req.tenantId = serverRequest.tenantId;
+    req.systemAdmin = serverRequest.systemAdmin;
+    req.syncPrincipal = serverRequest.syncPrincipal;
+    req.timestampPrincipal = serverRequest.timestampPrincipal;
+    req.peerName = serverRequest.peerName;
+}
+/** Write a JSON or binary response. Event streams are the caller's business. */
+async function sendServerResponse(req, res, response) {
+    if ((0, types_1.isJsonResponse)(response)) {
+        for (const [name, value] of Object.entries(response.headers ?? {})) {
+            res.setHeader(name, value);
+        }
+        res.status(response.status).json(response.json);
+        return;
+    }
+    if ((0, types_1.isBytesResponse)(response)) {
+        for (const [name, value] of Object.entries(response.headers)) {
+            res.setHeader(name, value);
+        }
+        res.status(response.status);
+        if (response.binaryEntryFrameBytes !== undefined) {
+            await (0, compressionMiddleware_1.sendBinaryEntryBody)(req, res, response.bytes, response.binaryEntryFrameBytes);
+            return;
+        }
+        const bytes = response.bytes;
+        res.send(Buffer.from(bytes.buffer, bytes.byteOffset, bytes.byteLength));
+        return;
+    }
+    throw new Error("Event stream responses must be handled by the route");
+}
+/**
+ * Express route handler running a core handler. Anything the handler did not
+ * turn into a response goes to the Express error handler, as a throw from a
+ * synchronous handler would.
+ */
+function route(handler) {
+    return async (req, res, next) => {
+        try {
+            const response = await handler(toServerRequest(req));
+            await sendServerResponse(req, res, response);
+        }
+        catch (error) {
+            next(error);
+        }
+    };
+}
+/**
+ * Express middleware running a core guard: a returned response ends the
+ * request, null continues with the guard's results on the request.
+ */
+function guard(check) {
+    return async (req, res, next) => {
+        const serverRequest = toServerRequest(req);
+        let rejection;
+        try {
+            rejection = await check(serverRequest);
+        }
+        catch (error) {
+            next(error);
+            return;
+        }
+        if (rejection) {
+            await sendServerResponse(req, res, rejection);
+            return;
+        }
+        applyGuardResults(req, serverRequest);
+        next();
+    };
+}
+//# sourceMappingURL=expressAdapter.js.map

package/dist/node/server/expressAdapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"expressAdapter.js","sourceRoot":"","sources":["../../../src/node/server/expressAdapter.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;AAaH,0CAqBC;AAYD,gDA0BC;AAOD,sBAWC;AAMD,sBAmBC;AA/GD,mDAKiC;AACjC,mEAA8D;AAE9D,8EAA8E;AAC9E,SAAgB,eAAe,CAAC,GAAY;IAC1C,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;QACvC,CAAC,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC;QAC3E,CAAC,CAAC,SAAS,CAAC;IACd,OAAO;QACL,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE;QAChC,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,KAAK,EAAE,GAAG,CAAC,KAAgC;QAC3C,OAAO,EAAE,GAAG,CAAC,OAA6C;QAC1D,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI;QAC7B,OAAO;QACP,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,QAAQ,EAAE,GAAG,CAAC,EAAE;QAChB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,kBAAkB,EAAE,GAAG,CAAC,kBAAkB;QAC1C,QAAQ,EAAE,GAAG,CAAC,QAAQ;KACvB,CAAC;AACJ,CAAC;AAED,qFAAqF;AACrF,SAAS,iBAAiB,CAAC,GAAY,EAAE,aAA4B;IACnE,GAAG,CAAC,QAAQ,GAAG,aAAa,CAAC,QAAQ,CAAC;IACtC,GAAG,CAAC,WAAW,GAAG,aAAa,CAAC,WAAW,CAAC;IAC5C,GAAG,CAAC,aAAa,GAAG,aAAa,CAAC,aAAa,CAAC;IAChD,GAAG,CAAC,kBAAkB,GAAG,aAAa,CAAC,kBAAkB,CAAC;IAC1D,GAAG,CAAC,QAAQ,GAAG,aAAa,CAAC,QAAQ,CAAC;AACxC,CAAC;AAED,gFAAgF;AACzE,KAAK,UAAU,kBAAkB,CACtC,GAAY,EACZ,GAAa,EACb,QAAwB;IAExB,IAAI,IAAA,sBAAc,EAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;YACnE,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC7B,CAAC;QACD,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAChD,OAAO;IACT,CAAC;IACD,IAAI,IAAA,uBAAe,EAAC,QAAQ,CAAC,EAAE,CAAC;QAC9B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7D,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC7B,CAAC;QACD,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC5B,IAAI,QAAQ,CAAC,qBAAqB,KAAK,SAAS,EAAE,CAAC;YACjD,MAAM,IAAA,2CAAmB,EAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,qBAAqB,CAAC,CAAC;YACpF,OAAO;QACT,CAAC;QACD,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;QAC7B,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;QACxE,OAAO;IACT,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;AACzE,CAAC;AAED;;;;GAIG;AACH,SAAgB,KAAK,CACnB,OAA6E;IAE7E,OAAO,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAiB,EAAE;QAC9E,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC;YACrD,MAAM,kBAAkB,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,KAAK,CAAC,CAAC;QACd,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAgB,KAAK,CACnB,KAAyF;IAEzF,OAAO,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAiB,EAAE;QAC9E,MAAM,aAAa,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QAC3C,IAAI,SAAgC,CAAC;QACrC,IAAI,CAAC;YACH,SAAS,GAAG,MAAM,KAAK,CAAC,aAAa,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,KAAK,CAAC,CAAC;YACZ,OAAO;QACT,CAAC;QACD,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,kBAAkB,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;YAC9C,OAAO;QACT,CAAC;QACD,iBAAiB,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;QACtC,IAAI,EAAE,CAAC;IACT,CAAC,CAAC;AACJ,CAAC"}

package/dist/node/server/nativeIrohStreamIO.d.ts

@@ -1,5 +1,5 @@
 import { type IrohStreamIO } from "../../core/appendonlystores/network/IrohStreamIO";
-import type { ServerIrohConfig } from "./types";
+import type { ServerIrohConfig } from "../../server/types";
 export interface NativeIrohStreamIO extends IrohStreamIO {
     endpointId?: string;
     close?(): Promise<void>;

package/dist/node/server/nativeIrohStreamIO.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"nativeIrohStreamIO.d.ts","sourceRoot":"","sources":["../../../src/node/server/nativeIrohStreamIO.ts"],"names":[],"mappings":"AAIA,OAAO,EAML,KAAK,YAAY,EAClB,MAAM,kDAAkD,CAAC;AAC1D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAEhD,MAAM,WAAW,kBAAmB,SAAQ,YAAY;IACtD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACzB;AA6BD,wBAAsB,oBAAoB,IAAI,OAAO,CAAC,cAAc,eAAe,CAAC,GAAG,IAAI,CAAC,CAM3F;AAED;;;GAGG;AACH,wBAAsB,wBAAwB,CAC5C,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,gBAAgB,GACvB,OAAO,CAAC,kBAAkB,CAAC,CAwE7B"}
+{"version":3,"file":"nativeIrohStreamIO.d.ts","sourceRoot":"","sources":["../../../src/node/server/nativeIrohStreamIO.ts"],"names":[],"mappings":"AAIA,OAAO,EAML,KAAK,YAAY,EAClB,MAAM,kDAAkD,CAAC;AAC1D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAE3D,MAAM,WAAW,kBAAmB,SAAQ,YAAY;IACtD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACzB;AA6BD,wBAAsB,oBAAoB,IAAI,OAAO,CAAC,cAAc,eAAe,CAAC,GAAG,IAAI,CAAC,CAM3F;AAED;;;GAGG;AACH,wBAAsB,wBAAwB,CAC5C,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,gBAAgB,GACvB,OAAO,CAAC,kBAAkB,CAAC,CAwE7B"}

package/dist/node/server/peer/FileClusterAuditStorage.d.ts

@@ -0,0 +1,16 @@
+/**
+ * The cluster audit log on disk: `<dataDir>/cluster/audit.jsonl`, rotated to
+ * `audit.jsonl.<timestamp>` once it passes {@link DEFAULT_MAX_BYTES}. Only the
+ * active file is read back.
+ */
+import type { ClusterAuditStorage } from "../../../server/peer/ClusterAuditLog";
+export declare class FileClusterAuditStorage implements ClusterAuditStorage {
+    private readonly maxBytes;
+    private readonly dir;
+    private readonly file;
+    constructor(dataDir: string, maxBytes?: number);
+    appendLine(line: string): void;
+    readLines(): string[];
+    private rotateIfNeeded;
+}
+//# sourceMappingURL=FileClusterAuditStorage.d.ts.map

package/dist/node/server/peer/FileClusterAuditStorage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"FileClusterAuditStorage.d.ts","sourceRoot":"","sources":["../../../../src/node/server/peer/FileClusterAuditStorage.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sCAAsC,CAAC;AAKhF,qBAAa,uBAAwB,YAAW,mBAAmB;IAM/D,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAL3B,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;IAC7B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAS;gBAG5B,OAAO,EAAE,MAAM,EACE,QAAQ,GAAE,MAA0B;IAMvD,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAM9B,SAAS,IAAI,MAAM,EAAE;IAKrB,OAAO,CAAC,cAAc;CAKvB"}

package/dist/node/server/peer/FileClusterAuditStorage.js

@@ -0,0 +1,39 @@
+"use strict";
+/**
+ * The cluster audit log on disk: `<dataDir>/cluster/audit.jsonl`, rotated to
+ * `audit.jsonl.<timestamp>` once it passes {@link DEFAULT_MAX_BYTES}. Only the
+ * active file is read back.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FileClusterAuditStorage = void 0;
+const fs_1 = require("fs");
+const path_1 = require("path");
+/** Rotate once the active file passes this size. */
+const DEFAULT_MAX_BYTES = 5 * 1024 * 1024;
+class FileClusterAuditStorage {
+    constructor(dataDir, maxBytes = DEFAULT_MAX_BYTES) {
+        this.maxBytes = maxBytes;
+        this.dir = (0, path_1.join)(dataDir, "cluster");
+        this.file = (0, path_1.join)(this.dir, "audit.jsonl");
+    }
+    appendLine(line) {
+        if (!(0, fs_1.existsSync)(this.dir))
+            (0, fs_1.mkdirSync)(this.dir, { recursive: true });
+        this.rotateIfNeeded();
+        (0, fs_1.appendFileSync)(this.file, `${line}\n`, "utf8");
+    }
+    readLines() {
+        if (!(0, fs_1.existsSync)(this.file))
+            return [];
+        return (0, fs_1.readFileSync)(this.file, "utf8").split("\n");
+    }
+    rotateIfNeeded() {
+        if (!(0, fs_1.existsSync)(this.file))
+            return;
+        if ((0, fs_1.statSync)(this.file).size < this.maxBytes)
+            return;
+        (0, fs_1.renameSync)(this.file, `${this.file}.${Date.now()}`);
+    }
+}
+exports.FileClusterAuditStorage = FileClusterAuditStorage;
+//# sourceMappingURL=FileClusterAuditStorage.js.map

package/dist/node/server/peer/FileClusterAuditStorage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"FileClusterAuditStorage.js","sourceRoot":"","sources":["../../../../src/node/server/peer/FileClusterAuditStorage.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;AAEH,2BAA+F;AAC/F,+BAA4B;AAI5B,oDAAoD;AACpD,MAAM,iBAAiB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAE1C,MAAa,uBAAuB;IAIlC,YACE,OAAe,EACE,WAAmB,iBAAiB;QAApC,aAAQ,GAAR,QAAQ,CAA4B;QAErD,IAAI,CAAC,GAAG,GAAG,IAAA,WAAI,EAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,GAAG,IAAA,WAAI,EAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IAC5C,CAAC;IAED,UAAU,CAAC,IAAY;QACrB,IAAI,CAAC,IAAA,eAAU,EAAC,IAAI,CAAC,GAAG,CAAC;YAAE,IAAA,cAAS,EAAC,IAAI,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACpE,IAAI,CAAC,cAAc,EAAE,CAAC;QACtB,IAAA,mBAAc,EAAC,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,IAAI,EAAE,MAAM,CAAC,CAAC;IACjD,CAAC;IAED,SAAS;QACP,IAAI,CAAC,IAAA,eAAU,EAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,CAAC;QACtC,OAAO,IAAA,iBAAY,EAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACrD,CAAC;IAEO,cAAc;QACpB,IAAI,CAAC,IAAA,eAAU,EAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO;QACnC,IAAI,IAAA,aAAQ,EAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC,QAAQ;YAAE,OAAO;QACrD,IAAA,eAAU,EAAC,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACtD,CAAC;CACF;AA5BD,0DA4BC"}

package/dist/node/server/peer/IrohPeerLink.d.ts

@@ -3,7 +3,7 @@
  * change feed share the handshake; each in-flight call still owns its stream.
  */
 import { type IrohByteStream, type IrohRpcContext, type IrohStreamIO } from "../../../core/appendonlystores/network/IrohStreamIO";
-import type { SyncChangeEvent } from "../SyncEventBus";
+import type { SyncChangeEvent } from "../../../server/SyncEventBus";
 export declare class IrohPeerLink {
     private readonly io;
     private readonly ticket;

package/dist/node/server/peer/IrohPeerLink.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"IrohPeerLink.d.ts","sourceRoot":"","sources":["../../../../src/node/server/peer/IrohPeerLink.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAIL,KAAK,cAAc,EAEnB,KAAK,cAAc,EAEnB,KAAK,YAAY,EAClB,MAAM,qDAAqD,CAAC;AAI7D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAEvD,qBAAa,YAAY;IAKrB,OAAO,CAAC,QAAQ,CAAC,EAAE;IACnB,OAAO,CAAC,QAAQ,CAAC,MAAM;IALzB,OAAO,CAAC,UAAU,CAA8C;IAChE,OAAO,CAAC,MAAM,CAAK;gBAGA,EAAE,EAAE,YAAY,EAChB,MAAM,EAAE,MAAM;YAGnB,gBAAgB;IAUxB,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,GAAG,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC;IAUlF;;;OAGG;IACH,UAAU,IAAI,YAAY;IAWpB,eAAe,CACnB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,CAAC,KAAK,EAAE,eAAe,KAAK,IAAI,EACzC,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,IAAI,CAAC;IA4CV,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAO7B;AAkBD,YAAY,EAAE,cAAc,EAAE,CAAC"}
+{"version":3,"file":"IrohPeerLink.d.ts","sourceRoot":"","sources":["../../../../src/node/server/peer/IrohPeerLink.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAIL,KAAK,cAAc,EAEnB,KAAK,cAAc,EAEnB,KAAK,YAAY,EAClB,MAAM,qDAAqD,CAAC;AAI7D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAEpE,qBAAa,YAAY;IAKrB,OAAO,CAAC,QAAQ,CAAC,EAAE;IACnB,OAAO,CAAC,QAAQ,CAAC,MAAM;IALzB,OAAO,CAAC,UAAU,CAA8C;IAChE,OAAO,CAAC,MAAM,CAAK;gBAGA,EAAE,EAAE,YAAY,EAChB,MAAM,EAAE,MAAM;YAGnB,gBAAgB;IAUxB,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,GAAG,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC;IAUlF;;;OAGG;IACH,UAAU,IAAI,YAAY;IAWpB,eAAe,CACnB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,CAAC,KAAK,EAAE,eAAe,KAAK,IAAI,EACzC,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,IAAI,CAAC;IA4CV,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAO7B;AAkBD,YAAY,EAAE,cAAc,EAAE,CAAC"}

package/dist/node/server/peer/routes.d.ts

@@ -1,37 +1,12 @@
 /**
- * HTTP surface for clustering, in two strictly separated halves.
- *
- * - {@link createPeerRouter} serves `/system/peer/*`: the server-to-server
- *   protocol. Callers authenticate as a server listed in
- *   `trusted-servers.json` and receive a peer JWT. No route here can
- *   administer anything.
- * - {@link createClusterRouter} serves `/system/cluster/*`: the admin surface
- *   for humans and consoles. Callers authenticate with a system-admin JWT and
- *   pass the {@link CapabilityMatcher}. No route here can write entries.
- *
- * The split is the point. A peer must be able to replicate without being able
- * to reconfigure the node it replicates with, and an operator must be able to
- * administer without being able to forge data as a server identity.
- *
- * ## Fan-out, not proxy
- *
- * Every read endpoint answers for **this node only**. A console that wants a
- * cluster-wide view calls each node in turn and merges. The alternative — one
- * node proxying admin reads to its peers — would need an admin credential that
- * spans servers, and peers are separately administered by design: they trust
- * each other with encrypted data, not with each other's administration.
- *
- * ## Admin-blindness
- *
- * Nothing here returns a document id, an author key, or entry content. Status,
- * jobs and audit records carry counts, tenant/database ids and classified
- * reasons. A read-only auditor role must not become a metadata oracle over
- * data the server itself cannot decrypt.
+ * Express mounting of the cluster HTTP surface. The handlers, and the
+ * reasoning behind the split into `/system/peer/*` (server-to-server) and
+ * `/system/cluster/*` (administration), live in `server/peer/clusterHttp.ts`.
  */
 import { Router } from "express";
-import type { SyncEventBus } from "../SyncEventBus";
-import type { ClusterManager } from "./ClusterManager";
-import type { TrustedServer } from "../types";
+import type { SyncEventBus } from "../../../server/SyncEventBus";
+import type { ClusterManager } from "../../../server/peer/ClusterManager";
+import { type ClusterAdminDeps } from "../../../server/peer/clusterHttp";
 declare global {
     namespace Express {
         interface Request {
@@ -44,23 +19,14 @@ export interface PeerRouterDeps {
     cluster: ClusterManager;
     eventBus: SyncEventBus;
     listTenants(): string[];
-    listDatabases(tenantId: string): string[];
+    listDatabases(tenantId: string): string[] | Promise<string[]>;
 }
 export declare function createPeerRouter(deps: PeerRouterDeps): Router;
-export interface ClusterRouterDeps {
-    cluster: ClusterManager;
-    /** Read `trusted-servers.json`; used by peer CRUD. */
-    listTrustedServers(): TrustedServer[];
-    /** Persist a peer entry (add or replace by name). */
-    saveTrustedServer(peer: TrustedServer): void;
-    /** Remove a peer entry by name; false when it did not exist. */
-    removeTrustedServer(name: string): boolean;
-}
+export type ClusterRouterDeps = ClusterAdminDeps;
 /**
  * Admin surface. The caller mounts this behind the system-admin JWT
- * middleware, so capability rules in `config.json` decide who may read
- * (`GET /system/cluster/*`) and who may act (`POST`, `PATCH`, `DELETE`) —
- * that is how an auditor role gets status without getting control.
+ * middleware, so capability rules in `config.json` decide who may read and
+ * who may act.
  */
 export declare function createClusterRouter(deps: ClusterRouterDeps): Router;
 //# sourceMappingURL=routes.d.ts.map

package/dist/node/server/peer/routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../../../src/node/server/peer/routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,EAAE,MAAM,EAAkD,MAAM,SAAS,CAAC;AAGjF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAS9C,OAAO,CAAC,MAAM,CAAC;IAEb,UAAU,OAAO,CAAC;QAChB,UAAU,OAAO;YACf,qEAAqE;YACrE,QAAQ,CAAC,EAAE,MAAM,CAAC;SACnB;KACF;CACF;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,cAAc,CAAC;IACxB,QAAQ,EAAE,YAAY,CAAC;IACvB,WAAW,IAAI,MAAM,EAAE,CAAC;IACxB,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;CAC3C;AAKD,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,cAAc,GAAG,MAAM,CAyK7D;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,cAAc,CAAC;IACxB,sDAAsD;IACtD,kBAAkB,IAAI,aAAa,EAAE,CAAC;IACtC,qDAAqD;IACrD,iBAAiB,CAAC,IAAI,EAAE,aAAa,GAAG,IAAI,CAAC;IAC7C,gEAAgE;IAChE,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;CAC5C;AAUD;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,iBAAiB,GAAG,MAAM,CAoFnE"}
+{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../../../src/node/server/peer/routes.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,MAAM,EAA+B,MAAM,SAAS,CAAC;AAC9D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qCAAqC,CAAC;AAC1E,OAAO,EAIL,KAAK,gBAAgB,EACtB,MAAM,kCAAkC,CAAC;AAI1C,OAAO,CAAC,MAAM,CAAC;IAEb,UAAU,OAAO,CAAC;QAChB,UAAU,OAAO;YACf,qEAAqE;YACrE,QAAQ,CAAC,EAAE,MAAM,CAAC;SACnB;KACF;CACF;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,cAAc,CAAC;IACxB,QAAQ,EAAE,YAAY,CAAC;IACvB,WAAW,IAAI,MAAM,EAAE,CAAC;IACxB,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;CAC/D;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,cAAc,GAAG,MAAM,CAmD7D;AAED,MAAM,MAAM,iBAAiB,GAAG,gBAAgB,CAAC;AAEjD;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,iBAAiB,GAAG,MAAM,CAiBnE"}

package/dist/node/server/peer/routes.js

@@ -1,126 +1,24 @@
 "use strict";
 /**
- * HTTP surface for clustering, in two strictly separated halves.
- *
- * - {@link createPeerRouter} serves `/system/peer/*`: the server-to-server
- *   protocol. Callers authenticate as a server listed in
- *   `trusted-servers.json` and receive a peer JWT. No route here can
- *   administer anything.
- * - {@link createClusterRouter} serves `/system/cluster/*`: the admin surface
- *   for humans and consoles. Callers authenticate with a system-admin JWT and
- *   pass the {@link CapabilityMatcher}. No route here can write entries.
- *
- * The split is the point. A peer must be able to replicate without being able
- * to reconfigure the node it replicates with, and an operator must be able to
- * administer without being able to forge data as a server identity.
- *
- * ## Fan-out, not proxy
- *
- * Every read endpoint answers for **this node only**. A console that wants a
- * cluster-wide view calls each node in turn and merges. The alternative — one
- * node proxying admin reads to its peers — would need an admin credential that
- * spans servers, and peers are separately administered by design: they trust
- * each other with encrypted data, not with each other's administration.
- *
- * ## Admin-blindness
- *
- * Nothing here returns a document id, an author key, or entry content. Status,
- * jobs and audit records carry counts, tenant/database ids and classified
- * reasons. A read-only auditor role must not become a metadata oracle over
- * data the server itself cannot decrypt.
+ * Express mounting of the cluster HTTP surface. The handlers, and the
+ * reasoning behind the split into `/system/peer/*` (server-to-server) and
+ * `/system/cluster/*` (administration), live in `server/peer/clusterHttp.ts`.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.createPeerRouter = createPeerRouter;
 exports.createClusterRouter = createClusterRouter;
 const express_1 = require("express");
-const bloom_1 = require("../../../core/appendonlystores/bloom");
-const types_1 = require("./types");
-/** Bound so a malicious or broken peer cannot make us allocate without limit. */
-const MAX_BLOOM_BITS = 1 << 22;
+const clusterHttp_1 = require("../../../server/peer/clusterHttp");
+const MindooDBServerCore_1 = require("../../../server/http/MindooDBServerCore");
+const expressAdapter_1 = require("../expressAdapter");
 function createPeerRouter(deps) {
     const router = (0, express_1.Router)();
-    const { cluster } = deps;
-    const requirePeer = async (req, res, next) => {
-        const auth = req.headers.authorization;
-        if (!auth?.startsWith("Bearer ")) {
-            res.status(401).json({ error: "Missing or invalid Authorization header" });
-            return;
-        }
-        const payload = await cluster.auth.validateToken(auth.substring(7));
-        if (!payload) {
-            res.status(401).json({ error: "Invalid or expired peer token" });
-            return;
-        }
-        req.peerName = payload.sub;
-        next();
-    };
-    router.post("/challenge", async (req, res) => {
-        const { publicsignkey } = req.body;
-        if (typeof publicsignkey !== "string" || publicsignkey.length === 0) {
-            res.status(400).json({ error: "publicsignkey is required" });
-            return;
-        }
-        try {
-            res.json({ challenge: await cluster.auth.generateChallenge(publicsignkey) });
-        }
-        catch {
-            // Deliberately the same shape as a signature failure: an unauthenticated
-            // caller must not be able to enumerate which servers we trust.
-            res.status(401).json({ error: "Unknown peer" });
-        }
-    });
-    router.post("/authenticate", async (req, res) => {
-        const { challenge, signature } = req.body;
-        if (typeof challenge !== "string" || typeof signature !== "string") {
-            res.status(400).json({ error: "challenge and signature are required" });
-            return;
-        }
-        const result = await cluster.auth.authenticate(challenge, new Uint8Array(Buffer.from(signature, "base64")));
-        if (!result.success) {
-            res.status(401).json({ error: result.error ?? "Authentication failed" });
-            return;
-        }
-        res.json({ success: true, token: result.token });
-    });
-    /**
-     * Tenant intersection.
-     *
-     * The caller sends a Bloom summary of the tenants it hosts; we answer with
-     * the ids on *our* side that the filter might contain. Neither server ever
-     * transmits its full tenant list, so a peer learns nothing about tenants it
-     * does not already host. False positives are harmless: the caller intersects
-     * the answer against its own authoritative list before replicating anything.
-     */
-    router.post("/tenant-bloom", requirePeer, (req, res) => {
-        const { bloom } = req.body;
-        if (!bloom || typeof bloom !== "object") {
-            res.status(400).json({ error: "bloom summary is required" });
-            return;
-        }
-        if (typeof bloom.bitCount !== "number" || bloom.bitCount <= 0 || bloom.bitCount > MAX_BLOOM_BITS) {
-            res.status(400).json({ error: "Invalid bloom summary" });
-            return;
-        }
-        const candidates = deps
-            .listTenants()
-            .filter((tenantId) => (0, bloom_1.bloomMightContainId)(bloom, tenantId));
-        // Remember what this peer may see, so the event stream can be filtered to
-        // the same set instead of announcing every tenant we host.
-        cluster.recordPeerIntersection(req.peerName, candidates);
-        res.json({ tenantIds: candidates });
-    });
-    router.get("/databases", requirePeer, (req, res) => {
-        const tenantId = typeof req.query.tenantId === "string" ? req.query.tenantId : "";
-        if (!tenantId) {
-            res.status(400).json({ error: "tenantId is required" });
-            return;
-        }
-        if (!cluster.peerMaySeeTenant(req.peerName, tenantId)) {
-            res.status(404).json({ error: "Tenant not found" });
-            return;
-        }
-        res.json({ databases: deps.listDatabases(tenantId) });
-    });
+    const handlers = new clusterHttp_1.PeerHttpHandlers(deps);
+    const requirePeer = (0, expressAdapter_1.guard)((req) => handlers.peerGuard(req));
+    router.post("/challenge", (0, expressAdapter_1.route)((req) => handlers.challenge(req)));
+    router.post("/authenticate", (0, expressAdapter_1.route)((req) => handlers.authenticate(req)));
+    router.post("/tenant-bloom", requirePeer, (0, expressAdapter_1.route)((req) => handlers.tenantBloom(req)));
+    router.get("/databases", requirePeer, (0, expressAdapter_1.route)((req) => handlers.databases(req)));
     /**
      * Change feed for peers, across every shared tenant.
      *
@@ -139,26 +37,15 @@ function createPeerRouter(deps) {
             res.setHeader("Connection", "keep-alive");
         }
         res.flushHeaders();
-        res.write(`event: hello\ndata: ${JSON.stringify({ protocolVersion: "sync-v5" })}\n\n`);
+        res.write((0, MindooDBServerCore_1.formatSyncHelloEvent)());
         const unsubscribe = deps.eventBus.subscribe((event) => {
-            // Never tell a peer about its own push: it would pull back what it just
-            // sent. The peer suppresses echoes too, but doing it here saves the
-            // round trip entirely.
-            if (event.originPeer === peerName)
-                return;
-            if (!cluster.peerMaySeeTenant(peerName, event.tenantId))
-                return;
-            res.write(`event: change\ndata: ${JSON.stringify({
-                tenantId: event.tenantId,
-                dbId: event.dbId,
-                storeKind: event.storeKind,
-                epoch: event.epoch,
-                maxReceiptOrder: event.maxReceiptOrder,
-            })}\n\n`);
+            const frame = (0, clusterHttp_1.formatPeerChangeEvent)(deps.cluster, peerName, event);
+            if (frame)
+                res.write(frame);
         });
         const heartbeat = setInterval(() => {
-            res.write(`: heartbeat ${Date.now()}\n\n`);
-        }, 30000);
+            res.write((0, MindooDBServerCore_1.formatSyncHeartbeat)(Date.now()));
+        }, MindooDBServerCore_1.SYNC_EVENT_HEARTBEAT_MS);
         const cleanup = () => {
             clearInterval(heartbeat);
             unsubscribe();
@@ -166,157 +53,28 @@ function createPeerRouter(deps) {
         req.on("close", cleanup);
         res.on("close", cleanup);
     });
-    /**
-     * Catch-up trigger from the calling peer.
-     *
-     * Peer A tells us "I have something for you"; we run our own replicator
-     * toward A, which pulls it. Doing it this way rather than having A push
-     * directly keeps one replicator per link in charge of cursors and ordering,
-     * so the invariants hold no matter which side noticed the change first.
-     */
-    router.post("/sync", requirePeer, (req, res) => {
-        const peerName = req.peerName;
-        const replicator = cluster.getReplicator(peerName);
-        if (!replicator) {
-            res.status(409).json({
-                error: `No outbound session configured for peer ${peerName} (missing url in trusted-servers.json)`,
-            });
-            return;
-        }
-        const { tenantId, dbId } = (req.body ?? {});
-        // Fire and forget: the caller only needs to know we accepted the hint, and
-        // holding the connection open for a full mirror would time out.
-        void replicator.syncNow({ tenantId, dbId }).catch(() => undefined);
-        res.status(202).json({ accepted: true });
-    });
+    router.post("/sync", requirePeer, (0, expressAdapter_1.route)((req) => handlers.sync(req)));
     return router;
 }
-const ACTION_KINDS = {
-    sync: "sync",
-    "retry-rejected": "retry-rejected",
-    "refresh-intersection": "refresh-intersection",
-    pause: "pause",
-    resume: "resume",
-};
 /**
  * Admin surface. The caller mounts this behind the system-admin JWT
- * middleware, so capability rules in `config.json` decide who may read
- * (`GET /system/cluster/*`) and who may act (`POST`, `PATCH`, `DELETE`) —
- * that is how an auditor role gets status without getting control.
+ * middleware, so capability rules in `config.json` decide who may read and
+ * who may act.
  */
 function createClusterRouter(deps) {
     const router = (0, express_1.Router)();
-    const { cluster } = deps;
-    const actor = (req) => req.systemAdmin?.username ?? "unknown";
-    router.get("/topology", (_req, res) => {
-        res.json(cluster.topology());
-    });
-    router.get("/status", (_req, res) => {
-        res.json(cluster.status());
-    });
-    router.get("/status/tenants/:tenantId", (req, res) => {
-        res.json(cluster.tenantStatus(req.params.tenantId.toLowerCase()));
-    });
-    router.get("/jobs", (req, res) => {
-        const limit = Number.parseInt(String(req.query.limit ?? "50"), 10);
-        res.json({ jobs: cluster.jobs.list(Number.isFinite(limit) ? limit : 50) });
-    });
-    router.get("/jobs/:jobId", (req, res) => {
-        const job = cluster.jobs.get(req.params.jobId);
-        if (!job) {
-            res.status(404).json({ error: "Job not found" });
-            return;
-        }
-        res.json(job);
-    });
-    router.get("/audit", (req, res) => {
-        const limit = Number.parseInt(String(req.query.limit ?? "50"), 10);
-        const before = typeof req.query.before === "string" ? req.query.before : undefined;
-        res.json(cluster.audit.read({ limit: Number.isFinite(limit) ? limit : 50, before }));
-    });
-    router.post("/actions/:action", (req, res) => {
-        const kind = ACTION_KINDS[req.params.action];
-        if (!kind) {
-            res.status(404).json({ error: `Unknown action: ${req.params.action}` });
-            return;
-        }
-        const body = (req.body ?? {});
-        const scope = {
-            peer: typeof body.peer === "string" ? body.peer : undefined,
-            tenantId: typeof body.tenantId === "string" ? body.tenantId.toLowerCase() : undefined,
-            dbId: typeof body.dbId === "string" ? body.dbId : undefined,
-        };
-        const outcome = cluster.runAction(kind, scope, actor(req));
-        if (!outcome.accepted) {
-            res.status(400).json({ error: outcome.error });
-            return;
-        }
-        // 202: the job is queued, not finished. Poll GET /jobs/:jobId.
-        res.status(202).json({ jobId: outcome.job.id, job: outcome.job });
-    });
-    router.get("/peers", (_req, res) => {
-        res.json({ peers: cluster.topology().peers });
-    });
-    router.post("/peers/:name", (req, res) => {
-        upsertPeer(req, res, deps, "peer-create");
-    });
-    router.patch("/peers/:name", (req, res) => {
-        upsertPeer(req, res, deps, "peer-update");
-    });
-    router.delete("/peers/:name", (req, res) => {
-        const name = decodeURIComponent(req.params.name);
-        if (!deps.removeTrustedServer(name)) {
-            res.status(404).json({ error: "Peer not found" });
-            return;
-        }
-        cluster.syncReplicators();
-        cluster.auditPeerChange("peer-delete", name, actor(req));
-        res.json({ success: true });
-    });
+    const handlers = new clusterHttp_1.ClusterAdminHandlers(deps);
+    router.get("/topology", (0, expressAdapter_1.route)(() => handlers.topology()));
+    router.get("/status", (0, expressAdapter_1.route)(() => handlers.status()));
+    router.get("/status/tenants/:tenantId", (0, expressAdapter_1.route)((req) => handlers.tenantStatus(req)));
+    router.get("/jobs", (0, expressAdapter_1.route)((req) => handlers.jobs(req)));
+    router.get("/jobs/:jobId", (0, expressAdapter_1.route)((req) => handlers.job(req)));
+    router.get("/audit", (0, expressAdapter_1.route)((req) => handlers.audit(req)));
+    router.post("/actions/:action", (0, expressAdapter_1.route)((req) => handlers.action(req)));
+    router.get("/peers", (0, expressAdapter_1.route)(() => handlers.peers()));
+    router.post("/peers/:name", (0, expressAdapter_1.route)((req) => handlers.createPeer(req)));
+    router.patch("/peers/:name", (0, expressAdapter_1.route)((req) => handlers.updatePeer(req)));
+    router.delete("/peers/:name", (0, expressAdapter_1.route)((req) => handlers.deletePeer(req)));
     return router;
 }
-function upsertPeer(req, res, deps, action) {
-    const name = decodeURIComponent(req.params.name);
-    const existing = deps.listTrustedServers().find((peer) => peer.name === name);
-    if (action === "peer-create" && existing) {
-        res.status(409).json({ error: "Peer already exists" });
-        return;
-    }
-    if (action === "peer-update" && !existing) {
-        res.status(404).json({ error: "Peer not found" });
-        return;
-    }
-    const body = req.body;
-    const signingPublicKey = body.signingPublicKey ?? existing?.signingPublicKey;
-    const encryptionPublicKey = body.encryptionPublicKey ?? existing?.encryptionPublicKey;
-    if (!signingPublicKey || !encryptionPublicKey) {
-        res.status(400).json({ error: "signingPublicKey and encryptionPublicKey are required" });
-        return;
-    }
-    for (const [field, guard] of [
-        ["direction", types_1.isPeerSyncDirection],
-        ["role", types_1.isPeerRole],
-        ["attachments", types_1.isPeerAttachmentMode],
-    ]) {
-        const value = body[field];
-        if (value !== undefined && !guard(value)) {
-            res.status(400).json({ error: `Invalid ${field}: ${String(value)}` });
-            return;
-        }
-    }
-    const peer = {
-        ...existing,
-        name,
-        signingPublicKey,
-        encryptionPublicKey,
-        url: body.url ?? existing?.url,
-        direction: body.direction ?? existing?.direction,
-        role: body.role ?? existing?.role,
-        attachments: body.attachments ?? existing?.attachments,
-    };
-    deps.saveTrustedServer(peer);
-    deps.cluster.syncReplicators();
-    deps.cluster.auditPeerChange(action, name, req.systemAdmin?.username ?? "unknown");
-    res.status(action === "peer-create" ? 201 : 200).json({ success: true, peer });
-}
 //# sourceMappingURL=routes.js.map