was-teaching-server 0.9.1

package/dist/routes.js

@@ -0,0 +1,306 @@
+import { SpacesRepositoryRequest } from './requests/SpacesRepositoryRequest.js';
+import { SpaceRequest } from './requests/SpaceRequest.js';
+import { handleError } from './errors.js';
+import { ResourceRequest } from './requests/ResourceRequest.js';
+import { CollectionRequest } from './requests/CollectionRequest.js';
+import { PolicyRequest } from './requests/PolicyRequest.js';
+import { BackendRequest } from './requests/BackendRequest.js';
+import { KeystoreRequest } from './requests/KeystoreRequest.js';
+import { KeyRequest } from './requests/KeyRequest.js';
+import { RevocationRequest } from './requests/RevocationRequest.js';
+import { parseAuthHeaders, requireAuthHeaders, requireAuthHeadersOrPublicRead } from './auth-header-hooks.js';
+import { captureRawBody, verifyBodyDigest } from './digest.js';
+import { provisioningGate } from './provisioning.js';
+/**
+ * Toggles the trailing slash on the request's actual path (preserving any query
+ * string), returning the canonical target for a slash/no-slash redirect. Built
+ * from `request.url` rather than the route template so the `Location` carries
+ * the concrete ids (`/space/abc123`), not the literal `/space/:spaceId` -- which
+ * a client cannot follow.
+ * @param url {string}   the request URL (path plus optional query string)
+ * @param addSlash {boolean}   append (true) or strip (false) the trailing slash
+ * @returns {string}
+ */
+function toggleTrailingSlash(url, addSlash) {
+    const queryIndex = url.indexOf('?');
+    const pathPart = queryIndex === -1 ? url : url.slice(0, queryIndex);
+    const query = queryIndex === -1 ? '' : url.slice(queryIndex);
+    const canonical = addSlash
+        ? pathPart.endsWith('/')
+            ? pathPart
+            : `${pathPart}/`
+        : pathPart.endsWith('/')
+            ? pathPart.slice(0, -1)
+            : pathPart;
+    return `${canonical}${query}`;
+}
+/**
+ * Redirects to the trailing-slash canonical form of the request URL with a
+ * `308` (Permanent Redirect), which -- unlike the default `302` -- requires the
+ * client to replay the same method and body, so a redirected POST/PUT is not
+ * silently downgraded to GET.
+ * @param request {import('fastify').FastifyRequest}
+ * @param reply {import('fastify').FastifyReply}
+ * @returns {FastifyReply}
+ */
+function redirectAddSlash(request, reply) {
+    return reply.redirect(toggleTrailingSlash(request.url, true), 308);
+}
+/**
+ * Redirects to the no-trailing-slash canonical form of the request URL (see
+ * {@link redirectAddSlash} for the `308` rationale).
+ * @param request {import('fastify').FastifyRequest}
+ * @param reply {import('fastify').FastifyReply}
+ * @returns {FastifyReply}
+ */
+function redirectStripSlash(request, reply) {
+    return reply.redirect(toggleTrailingSlash(request.url, false), 308);
+}
+/**
+ * Registers SpacesRepository routes (POST/GET /spaces). Installs the
+ * `requireAuthHeadersOrPublicRead` then `parseAuthHeaders` onRequest hooks and
+ * the `handleError` error handler.
+ * @param app {import('fastify').FastifyInstance}
+ * @param options {object}   Fastify plugin options
+ * @returns {Promise<void>}
+ */
+export async function initSpacesRepositoryRoutes(app, _options) {
+    app.setErrorHandler(handleError);
+    // Gate provisioning (Create Space): the configured policy may grant/deny, or
+    // (the default) allow -- in which case the normal zcap path below runs.
+    app.addHook('onRequest', provisioningGate);
+    // Create Space (POST) requires auth-related headers (401 otherwise); a List
+    // Spaces read may proceed unauthenticated -- an anonymous list is the spec's
+    // empty-items 200, never an error (the exception to 404 masking).
+    app.addHook('onRequest', requireAuthHeadersOrPublicRead);
+    // Parse the relevant request headers, set the request.zcap parameter
+    app.addHook('onRequest', parseAuthHeaders);
+    // Capture raw body bytes (JSON/text) so the digest can be recomputed against
+    // exactly what the client signed (spec "Request Body Integrity").
+    app.addHook('preParsing', captureRawBody);
+    // Enforce the Digest header binding: require it covered by the signature and,
+    // when the raw body is available, recompute and compare it.
+    app.addHook('preValidation', verifyBodyDigest);
+    // Add a Space to a SpacesRepository (Create Space)
+    app.post('/spaces', redirectAddSlash);
+    app.post('/spaces/', SpacesRepositoryRequest.post);
+    // List Spaces
+    app.get('/spaces', redirectAddSlash);
+    app.get('/spaces/', SpacesRepositoryRequest.get);
+}
+/**
+ * Registers Space routes (get/update/delete a Space, add/list Collections,
+ * export/import). Installs the auth hooks and the `handleError` error handler.
+ * @param app {import('fastify').FastifyInstance}
+ * @param options {object}   Fastify plugin options
+ * @returns {Promise<void>}
+ */
+export async function initSpaceRoutes(app, _options) {
+    app.setErrorHandler(handleError);
+    // Writes require auth; reads (GET/HEAD) may proceed unauthenticated so the
+    // handler can fall back to an access-control policy (e.g. a public Space).
+    app.addHook('onRequest', requireAuthHeadersOrPublicRead);
+    // Parse the relevant request headers, set the request.zcap parameter
+    app.addHook('onRequest', parseAuthHeaders);
+    // Capture raw body bytes (JSON/text) so the digest can be recomputed against
+    // exactly what the client signed (spec "Request Body Integrity").
+    app.addHook('preParsing', captureRawBody);
+    // Enforce the Digest header binding: require it covered by the signature and,
+    // when the raw body is available, recompute and compare it.
+    app.addHook('preValidation', verifyBodyDigest);
+    // Get Space description object
+    app.get('/space/:spaceId', SpaceRequest.get);
+    // Update or Create Space by Id (only "no trailing slash" is valid)
+    app.put('/space/:spaceId/', redirectStripSlash);
+    app.put('/space/:spaceId', SpaceRequest.put);
+    // Delete Space
+    app.delete('/space/:spaceId', SpaceRequest.delete);
+    // List Collections for a space (the canonical form has a trailing slash;
+    // registered as GET so `GET /space/:spaceId/collections` redirects there
+    // rather than falling through to the Collection GET route).
+    app.get('/space/:spaceId/collections', redirectAddSlash);
+    app.get('/space/:spaceId/collections/', SpaceRequest.listCollections);
+    // Space access-control policy (reserved segment; Fastify routes static
+    // segments ahead of the `:collectionId` parameter, so this never collides).
+    app.get('/space/:spaceId/policy', PolicyRequest.get);
+    app.put('/space/:spaceId/policy', PolicyRequest.put);
+    app.delete('/space/:spaceId/policy', PolicyRequest.delete);
+    // Space linkset (RFC9264 policy discovery)
+    app.get('/space/:spaceId/linkset', SpaceRequest.linkset);
+    // Space Backends Available (reserved segment; static-beats-parametric routing
+    // keeps this ahead of the `:collectionId` parameter in the Collection routes).
+    app.get('/space/:spaceId/backends', SpaceRequest.listBackends);
+    // Register / replace / deregister an `external` backend record. Static
+    // `backends` beats the parametric `:collectionId` / `:resourceId` of the
+    // Collection/Resource route groups, so these resolve correctly (the same
+    // mechanism that keeps the GET above and the singular `/backend` working).
+    app.post('/space/:spaceId/backends', BackendRequest.post);
+    app.put('/space/:spaceId/backends/:backendId', BackendRequest.put);
+    app.delete('/space/:spaceId/backends/:backendId', BackendRequest.delete);
+    // Space Quota report (reserved segment; static-beats-parametric routing keeps
+    // this ahead of the `:collectionId` parameter). The per-Collection breakdown
+    // (spec's `?include=collections`) is opt-in via that query string -- see the
+    // handler note on the ZCap query-string limitation.
+    app.get('/space/:spaceId/quotas', SpaceRequest.quotas);
+    // Revoke a zcap delegated from this Space (`:revocationId` = the URL-encoded
+    // id of the capability being revoked, which is also the request body). Four
+    // segments deep, so it shadows no Collection or Resource route.
+    app.post('/space/:spaceId/zcaps/revocations/:revocationId', RevocationRequest.postSpace);
+    // Add Collection to a Space
+    app.post('/space/:spaceId', redirectAddSlash);
+    app.post('/space/:spaceId/', SpaceRequest.post);
+    // POST /space/12345/export
+    app.post('/space/:spaceId/export', SpaceRequest.export);
+    // POST /space/12345/import
+    app.addContentTypeParser('application/x-tar', (_req, body, done) => {
+        done(null, body);
+    });
+    app.post('/space/:spaceId/import', SpaceRequest.import);
+}
+/**
+ * Registers Collection routes (get/update/delete a Collection, list its items,
+ * add a Resource). Installs the auth hooks and the `handleError` error handler.
+ * @param app {import('fastify').FastifyInstance}
+ * @param options {object}   Fastify plugin options
+ * @returns {Promise<void>}
+ */
+export async function initCollectionRoutes(app, _options) {
+    app.setErrorHandler(handleError);
+    // Writes require auth; reads (GET/HEAD) may proceed unauthenticated so the
+    // handler can fall back to an access-control policy (e.g. a public Collection).
+    app.addHook('onRequest', requireAuthHeadersOrPublicRead);
+    // Parse the relevant request headers, set the request.zcap parameter
+    app.addHook('onRequest', parseAuthHeaders);
+    // Capture raw body bytes (JSON/text) so the digest can be recomputed against
+    // exactly what the client signed (spec "Request Body Integrity").
+    app.addHook('preParsing', captureRawBody);
+    // Enforce the Digest header binding: require it covered by the signature and,
+    // when the raw body is available, recompute and compare it.
+    app.addHook('preValidation', verifyBodyDigest);
+    // Get Collection description
+    app.get('/space/:spaceId/:collectionId', CollectionRequest.get);
+    // List Collection items
+    app.get('/space/:spaceId/:collectionId/', CollectionRequest.list);
+    // Collection access-control policy (reserved segment; static-beats-parametric
+    // routing keeps this ahead of the `:resourceId` parameter).
+    app.get('/space/:spaceId/:collectionId/policy', PolicyRequest.get);
+    app.put('/space/:spaceId/:collectionId/policy', PolicyRequest.put);
+    app.delete('/space/:spaceId/:collectionId/policy', PolicyRequest.delete);
+    // Collection linkset (RFC9264 policy discovery)
+    app.get('/space/:spaceId/:collectionId/linkset', CollectionRequest.linkset);
+    // Collection Backend Selected (reserved segment; static-beats-parametric
+    // routing keeps this ahead of the `:resourceId` parameter in Resource routes).
+    app.get('/space/:spaceId/:collectionId/backend', CollectionRequest.getBackend);
+    // Per-Collection Quota report (reserved segment; static-beats-parametric
+    // routing keeps this ahead of the `:resourceId` parameter in Resource routes).
+    app.get('/space/:spaceId/:collectionId/quota', CollectionRequest.getQuota);
+    // Collection query (reserved segment; spec "Collection-level reserved
+    // endpoints"). The WAS server serves the replication change feed as the
+    // `changes` profile; params ride the signed
+    // POST body. Static-beats-parametric routing keeps this ahead of the
+    // `:resourceId` parameter in Resource routes.
+    app.post('/space/:spaceId/:collectionId/query', CollectionRequest.query);
+    // Add Resource to a Collection
+    app.post('/space/:spaceId/:collectionId', redirectAddSlash);
+    app.post('/space/:spaceId/:collectionId/', CollectionRequest.post);
+    // Create a Collection by Id
+    app.put('/space/:spaceId/:collectionId/', // no trailing slash allowed
+    redirectStripSlash);
+    app.put('/space/:spaceId/:collectionId', CollectionRequest.put);
+    // Delete Collection by Id
+    app.delete('/space/:spaceId/:collectionId/', // no trailing slash allowed
+    redirectStripSlash);
+    app.delete('/space/:spaceId/:collectionId', CollectionRequest.delete);
+}
+/**
+ * Registers Resource routes (create-by-id, get, delete a Resource). Installs the
+ * auth hooks and the `handleError` error handler.
+ * @param app {import('fastify').FastifyInstance}
+ * @param options {object}   Fastify plugin options
+ * @returns {Promise<void>}
+ */
+export async function initResourceRoutes(app, _options) {
+    app.setErrorHandler(handleError);
+    // Writes require auth; reads (GET/HEAD) may proceed unauthenticated so the
+    // handler can fall back to an access-control policy (e.g. a public Resource).
+    app.addHook('onRequest', requireAuthHeadersOrPublicRead);
+    // Parse the relevant request headers, set the request.zcap parameter
+    app.addHook('onRequest', parseAuthHeaders);
+    // Capture raw body bytes (JSON/text) so the digest can be recomputed against
+    // exactly what the client signed (spec "Request Body Integrity").
+    app.addHook('preParsing', captureRawBody);
+    // Enforce the Digest header binding: require it covered by the signature and,
+    // when the raw body is available, recompute and compare it.
+    app.addHook('preValidation', verifyBodyDigest);
+    // Create a Resource by Id
+    app.put('/space/:spaceId/:collectionId/:resourceId/', // no trailing slash allowed
+    redirectStripSlash);
+    app.put('/space/:spaceId/:collectionId/:resourceId', ResourceRequest.put);
+    // Head Resource. Declared before the GET route so it overrides Fastify's
+    // auto-exposed HEAD (which would share the GET handler and stream the body
+    // without a Content-Length); this handler reads only the Metadata and sets
+    // Content-Type/Content-Length from it (spec "Content Types and Representations").
+    app.head('/space/:spaceId/:collectionId/:resourceId', ResourceRequest.head);
+    // Get Resource
+    app.get('/space/:spaceId/:collectionId/:resourceId', ResourceRequest.get);
+    // Delete Resource
+    app.delete('/space/:spaceId/:collectionId/:resourceId', ResourceRequest.delete);
+    // Resource access-control policy (reserved segment)
+    app.get('/space/:spaceId/:collectionId/:resourceId/policy', PolicyRequest.get);
+    app.put('/space/:spaceId/:collectionId/:resourceId/policy', PolicyRequest.put);
+    app.delete('/space/:spaceId/:collectionId/:resourceId/policy', PolicyRequest.delete);
+    // Resource metadata (reserved segment; spec "Resource Metadata Data Model")
+    app.get('/space/:spaceId/:collectionId/:resourceId/meta', ResourceRequest.getMeta);
+    // Update Resource Metadata (full replacement of the user-writable `custom`).
+    app.put('/space/:spaceId/:collectionId/:resourceId/meta', ResourceRequest.putMeta);
+}
+/**
+ * Registers the WebKMS keystore and key routes (the `/kms` facet).
+ * Installs the same hook chain as the WAS groups
+ * except that the auth requirement is the strict `requireAuthHeaders`: every
+ * webkms route, GETs included, is zcap-invoked -- the protocol has no public
+ * reads. No slash-redirect variants either; the protocol's URLs are exact --
+ * only these shapes are registered.
+ * @param app {import('fastify').FastifyInstance}
+ * @param options {object}   Fastify plugin options
+ * @returns {Promise<void>}
+ */
+export async function initKmsRoutes(app, _options) {
+    app.setErrorHandler(handleError);
+    // Gate provisioning (Create Keystore): the configured policy may grant/deny,
+    // or (the default) allow -- in which case the normal zcap path below runs.
+    app.addHook('onRequest', provisioningGate);
+    // Every operation is privileged: 401 when auth headers are absent.
+    app.addHook('onRequest', requireAuthHeaders);
+    // Parse the relevant request headers, set the request.zcap parameter
+    app.addHook('onRequest', parseAuthHeaders);
+    // Capture raw body bytes (JSON/text) so the digest can be recomputed against
+    // exactly what the client signed (spec "Request Body Integrity").
+    app.addHook('preParsing', captureRawBody);
+    // Enforce the Digest header binding: require it covered by the signature and,
+    // when the raw body is available, recompute and compare it.
+    app.addHook('preValidation', verifyBodyDigest);
+    // Create Keystore
+    app.post('/kms/keystores', KeystoreRequest.post);
+    // List Keystores by controller (`?controller=<did>`)
+    app.get('/kms/keystores', KeystoreRequest.list);
+    // Get Keystore config
+    app.get('/kms/keystores/:keystoreId', KeystoreRequest.get);
+    // Update Keystore config
+    app.post('/kms/keystores/:keystoreId', KeystoreRequest.update);
+    // Generate Key (GenerateKeyOperation)
+    app.post('/kms/keystores/:keystoreId/keys', KeyRequest.generate);
+    // List Keys (fork extension: enumerate the keystore's public key
+    // descriptions). Static `/keys` beats the parametric `/keys/:keyId` below,
+    // so this never collides with the key-description GET.
+    app.get('/kms/keystores/:keystoreId/keys', KeyRequest.list);
+    // Key operation dispatch by envelope type (Sign / Verify / DeriveSecret /
+    // WrapKey / UnwrapKey)
+    app.post('/kms/keystores/:keystoreId/keys/:keyId', KeyRequest.operation);
+    // Public key description
+    app.get('/kms/keystores/:keystoreId/keys/:keyId', KeyRequest.get);
+    // Revoke a delegated zcap (`:revocationId` = the URL-encoded id of the
+    // capability being revoked, which is also the request body)
+    app.post('/kms/keystores/:keystoreId/zcaps/revocations/:revocationId', RevocationRequest.post);
+}
+//# sourceMappingURL=routes.js.map

package/dist/routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.js","sourceRoot":"","sources":["../src/routes.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,uBAAuB,EAAE,MAAM,uCAAuC,CAAA;AAC/E,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAA;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAA;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAA;AACnE,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAA;AAC3D,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAA;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAA;AAC/D,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAA;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAA;AACnE,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,8BAA8B,EAC/B,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAC9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAA;AAEpD;;;;;;;;;GASG;AACH,SAAS,mBAAmB,CAAC,GAAW,EAAE,QAAiB;IACzD,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IACnC,MAAM,QAAQ,GAAG,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAA;IACnE,MAAM,KAAK,GAAG,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;IAC5D,MAAM,SAAS,GAAG,QAAQ;QACxB,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC;YACtB,CAAC,CAAC,QAAQ;YACV,CAAC,CAAC,GAAG,QAAQ,GAAG;QAClB,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC;YACtB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACvB,CAAC,CAAC,QAAQ,CAAA;IACd,OAAO,GAAG,SAAS,GAAG,KAAK,EAAE,CAAA;AAC/B,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,gBAAgB,CACvB,OAAuB,EACvB,KAAmB;IAEnB,OAAO,KAAK,CAAC,QAAQ,CAAC,mBAAmB,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,GAAG,CAAC,CAAA;AACpE,CAAC;AAED;;;;;;GAMG;AACH,SAAS,kBAAkB,CACzB,OAAuB,EACvB,KAAmB;IAEnB,OAAO,KAAK,CAAC,QAAQ,CAAC,mBAAmB,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,GAAG,CAAC,CAAA;AACrE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,GAAoB,EACpB,QAA8B;IAE9B,GAAG,CAAC,eAAe,CAAC,WAAW,CAAC,CAAA;IAEhC,6EAA6E;IAC7E,wEAAwE;IACxE,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAA;IAC1C,4EAA4E;IAC5E,6EAA6E;IAC7E,kEAAkE;IAClE,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,8BAA8B,CAAC,CAAA;IACxD,qEAAqE;IACrE,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAA;IAC1C,6EAA6E;IAC7E,kEAAkE;IAClE,GAAG,CAAC,OAAO,CAAC,YAAY,EAAE,cAAc,CAAC,CAAA;IACzC,8EAA8E;IAC9E,4DAA4D;IAC5D,GAAG,CAAC,OAAO,CAAC,eAAe,EAAE,gBAAgB,CAAC,CAAA;IAE9C,mDAAmD;IACnD,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAA;IACrC,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,uBAAuB,CAAC,IAAI,CAAC,CAAA;IAElD,cAAc;IACd,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAA;IACpC,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,uBAAuB,CAAC,GAAG,CAAC,CAAA;AAClD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,GAAoB,EACpB,QAA8B;IAE9B,GAAG,CAAC,eAAe,CAAC,WAAW,CAAC,CAAA;IAEhC,2EAA2E;IAC3E,2EAA2E;IAC3E,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,8BAA8B,CAAC,CAAA;IACxD,qEAAqE;IACrE,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAA;IAC1C,6EAA6E;IAC7E,kEAAkE;IAClE,GAAG,CAAC,OAAO,CAAC,YAAY,EAAE,cAAc,CAAC,CAAA;IACzC,8EAA8E;IAC9E,4DAA4D;IAC5D,GAAG,CAAC,OAAO,CAAC,eAAe,EAAE,gBAAgB,CAAC,CAAA;IAE9C,+BAA+B;IAC/B,GAAG,CAAC,GAAG,CAAC,iBAAiB,EAAE,YAAY,CAAC,GAAG,CAAC,CAAA;IAE5C,mEAAmE;IACnE,GAAG,CAAC,GAAG,CAAC,kBAAkB,EAAE,kBAAkB,CAAC,CAAA;IAC/C,GAAG,CAAC,GAAG,CAAC,iBAAiB,EAAE,YAAY,CAAC,GAAG,CAAC,CAAA;IAE5C,eAAe;IACf,GAAG,CAAC,MAAM,CAAC,iBAAiB,EAAE,YAAY,CAAC,MAAM,CAAC,CAAA;IAElD,yEAAyE;IACzE,yEAAyE;IACzE,4DAA4D;IAC5D,GAAG,CAAC,GAAG,CAAC,6BAA6B,EAAE,gBAAgB,CAAC,CAAA;IACxD,GAAG,CAAC,GAAG,CAAC,8BAA8B,EAAE,YAAY,CAAC,eAAe,CAAC,CAAA;IAErE,uEAAuE;IACvE,4EAA4E;IAC5E,GAAG,CAAC,GAAG,CAAC,wBAAwB,EAAE,aAAa,CAAC,GAAG,CAAC,CAAA;IACpD,GAAG,CAAC,GAAG,CAAC,wBAAwB,EAAE,aAAa,CAAC,GAAG,CAAC,CAAA;IACpD,GAAG,CAAC,MAAM,CAAC,wBAAwB,EAAE,aAAa,CAAC,MAAM,CAAC,CAAA;IAE1D,2CAA2C;IAC3C,GAAG,CAAC,GAAG,CAAC,yBAAyB,EAAE,YAAY,CAAC,OAAO,CAAC,CAAA;IAExD,8EAA8E;IAC9E,+EAA+E;IAC/E,GAAG,CAAC,GAAG,CAAC,0BAA0B,EAAE,YAAY,CAAC,YAAY,CAAC,CAAA;IAE9D,uEAAuE;IACvE,yEAAyE;IACzE,yEAAyE;IACzE,2EAA2E;IAC3E,GAAG,CAAC,IAAI,CAAC,0BAA0B,EAAE,cAAc,CAAC,IAAI,CAAC,CAAA;IACzD,GAAG,CAAC,GAAG,CAAC,qCAAqC,EAAE,cAAc,CAAC,GAAG,CAAC,CAAA;IAClE,GAAG,CAAC,MAAM,CAAC,qCAAqC,EAAE,cAAc,CAAC,MAAM,CAAC,CAAA;IAExE,8EAA8E;IAC9E,6EAA6E;IAC7E,6EAA6E;IAC7E,oDAAoD;IACpD,GAAG,CAAC,GAAG,CAAC,wBAAwB,EAAE,YAAY,CAAC,MAAM,CAAC,CAAA;IAEtD,6EAA6E;IAC7E,4EAA4E;IAC5E,gEAAgE;IAChE,GAAG,CAAC,IAAI,CACN,iDAAiD,EACjD,iBAAiB,CAAC,SAAS,CAC5B,CAAA;IAED,4BAA4B;IAC5B,GAAG,CAAC,IAAI,CAAC,iBAAiB,EAAE,gBAAgB,CAAC,CAAA;IAC7C,GAAG,CAAC,IAAI,CAAC,kBAAkB,EAAE,YAAY,CAAC,IAAI,CAAC,CAAA;IAE/C,2BAA2B;IAC3B,GAAG,CAAC,IAAI,CAAC,wBAAwB,EAAE,YAAY,CAAC,MAAM,CAAC,CAAA;IAEvD,2BAA2B;IAC3B,GAAG,CAAC,oBAAoB,CAAC,mBAAmB,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;QACjE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IAClB,CAAC,CAAC,CAAA;IACF,GAAG,CAAC,IAAI,CAAC,wBAAwB,EAAE,YAAY,CAAC,MAAM,CAAC,CAAA;AACzD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,GAAoB,EACpB,QAA8B;IAE9B,GAAG,CAAC,eAAe,CAAC,WAAW,CAAC,CAAA;IAEhC,2EAA2E;IAC3E,gFAAgF;IAChF,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,8BAA8B,CAAC,CAAA;IACxD,qEAAqE;IACrE,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAA;IAC1C,6EAA6E;IAC7E,kEAAkE;IAClE,GAAG,CAAC,OAAO,CAAC,YAAY,EAAE,cAAc,CAAC,CAAA;IACzC,8EAA8E;IAC9E,4DAA4D;IAC5D,GAAG,CAAC,OAAO,CAAC,eAAe,EAAE,gBAAgB,CAAC,CAAA;IAE9C,6BAA6B;IAC7B,GAAG,CAAC,GAAG,CAAC,+BAA+B,EAAE,iBAAiB,CAAC,GAAG,CAAC,CAAA;IAC/D,wBAAwB;IACxB,GAAG,CAAC,GAAG,CAAC,gCAAgC,EAAE,iBAAiB,CAAC,IAAI,CAAC,CAAA;IAEjE,8EAA8E;IAC9E,4DAA4D;IAC5D,GAAG,CAAC,GAAG,CAAC,sCAAsC,EAAE,aAAa,CAAC,GAAG,CAAC,CAAA;IAClE,GAAG,CAAC,GAAG,CAAC,sCAAsC,EAAE,aAAa,CAAC,GAAG,CAAC,CAAA;IAClE,GAAG,CAAC,MAAM,CAAC,sCAAsC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAA;IAExE,gDAAgD;IAChD,GAAG,CAAC,GAAG,CAAC,uCAAuC,EAAE,iBAAiB,CAAC,OAAO,CAAC,CAAA;IAE3E,yEAAyE;IACzE,+EAA+E;IAC/E,GAAG,CAAC,GAAG,CAAC,uCAAuC,EAAE,iBAAiB,CAAC,UAAU,CAAC,CAAA;IAE9E,yEAAyE;IACzE,+EAA+E;IAC/E,GAAG,CAAC,GAAG,CAAC,qCAAqC,EAAE,iBAAiB,CAAC,QAAQ,CAAC,CAAA;IAE1E,sEAAsE;IACtE,wEAAwE;IACxE,4CAA4C;IAC5C,qEAAqE;IACrE,8CAA8C;IAC9C,GAAG,CAAC,IAAI,CAAC,qCAAqC,EAAE,iBAAiB,CAAC,KAAK,CAAC,CAAA;IAExE,+BAA+B;IAC/B,GAAG,CAAC,IAAI,CAAC,+BAA+B,EAAE,gBAAgB,CAAC,CAAA;IAC3D,GAAG,CAAC,IAAI,CAAC,gCAAgC,EAAE,iBAAiB,CAAC,IAAI,CAAC,CAAA;IAElE,4BAA4B;IAC5B,GAAG,CAAC,GAAG,CACL,gCAAgC,EAAE,4BAA4B;IAC9D,kBAAkB,CACnB,CAAA;IACD,GAAG,CAAC,GAAG,CAAC,+BAA+B,EAAE,iBAAiB,CAAC,GAAG,CAAC,CAAA;IAE/D,0BAA0B;IAC1B,GAAG,CAAC,MAAM,CACR,gCAAgC,EAAE,4BAA4B;IAC9D,kBAAkB,CACnB,CAAA;IACD,GAAG,CAAC,MAAM,CAAC,+BAA+B,EAAE,iBAAiB,CAAC,MAAM,CAAC,CAAA;AACvE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,GAAoB,EACpB,QAA8B;IAE9B,GAAG,CAAC,eAAe,CAAC,WAAW,CAAC,CAAA;IAEhC,2EAA2E;IAC3E,8EAA8E;IAC9E,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,8BAA8B,CAAC,CAAA;IACxD,qEAAqE;IACrE,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAA;IAC1C,6EAA6E;IAC7E,kEAAkE;IAClE,GAAG,CAAC,OAAO,CAAC,YAAY,EAAE,cAAc,CAAC,CAAA;IACzC,8EAA8E;IAC9E,4DAA4D;IAC5D,GAAG,CAAC,OAAO,CAAC,eAAe,EAAE,gBAAgB,CAAC,CAAA;IAE9C,0BAA0B;IAC1B,GAAG,CAAC,GAAG,CACL,4CAA4C,EAAE,4BAA4B;IAC1E,kBAAkB,CACnB,CAAA;IACD,GAAG,CAAC,GAAG,CAAC,2CAA2C,EAAE,eAAe,CAAC,GAAG,CAAC,CAAA;IAEzE,yEAAyE;IACzE,2EAA2E;IAC3E,2EAA2E;IAC3E,kFAAkF;IAClF,GAAG,CAAC,IAAI,CAAC,2CAA2C,EAAE,eAAe,CAAC,IAAI,CAAC,CAAA;IAE3E,eAAe;IACf,GAAG,CAAC,GAAG,CAAC,2CAA2C,EAAE,eAAe,CAAC,GAAG,CAAC,CAAA;IAEzE,kBAAkB;IAClB,GAAG,CAAC,MAAM,CACR,2CAA2C,EAC3C,eAAe,CAAC,MAAM,CACvB,CAAA;IAED,oDAAoD;IACpD,GAAG,CAAC,GAAG,CAAC,kDAAkD,EAAE,aAAa,CAAC,GAAG,CAAC,CAAA;IAC9E,GAAG,CAAC,GAAG,CAAC,kDAAkD,EAAE,aAAa,CAAC,GAAG,CAAC,CAAA;IAC9E,GAAG,CAAC,MAAM,CACR,kDAAkD,EAClD,aAAa,CAAC,MAAM,CACrB,CAAA;IAED,4EAA4E;IAC5E,GAAG,CAAC,GAAG,CACL,gDAAgD,EAChD,eAAe,CAAC,OAAO,CACxB,CAAA;IACD,6EAA6E;IAC7E,GAAG,CAAC,GAAG,CACL,gDAAgD,EAChD,eAAe,CAAC,OAAO,CACxB,CAAA;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,GAAoB,EACpB,QAA8B;IAE9B,GAAG,CAAC,eAAe,CAAC,WAAW,CAAC,CAAA;IAEhC,6EAA6E;IAC7E,2EAA2E;IAC3E,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAA;IAC1C,mEAAmE;IACnE,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,kBAAkB,CAAC,CAAA;IAC5C,qEAAqE;IACrE,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAA;IAC1C,6EAA6E;IAC7E,kEAAkE;IAClE,GAAG,CAAC,OAAO,CAAC,YAAY,EAAE,cAAc,CAAC,CAAA;IACzC,8EAA8E;IAC9E,4DAA4D;IAC5D,GAAG,CAAC,OAAO,CAAC,eAAe,EAAE,gBAAgB,CAAC,CAAA;IAE9C,kBAAkB;IAClB,GAAG,CAAC,IAAI,CAAC,gBAAgB,EAAE,eAAe,CAAC,IAAI,CAAC,CAAA;IAEhD,qDAAqD;IACrD,GAAG,CAAC,GAAG,CAAC,gBAAgB,EAAE,eAAe,CAAC,IAAI,CAAC,CAAA;IAE/C,sBAAsB;IACtB,GAAG,CAAC,GAAG,CAAC,4BAA4B,EAAE,eAAe,CAAC,GAAG,CAAC,CAAA;IAE1D,yBAAyB;IACzB,GAAG,CAAC,IAAI,CAAC,4BAA4B,EAAE,eAAe,CAAC,MAAM,CAAC,CAAA;IAE9D,sCAAsC;IACtC,GAAG,CAAC,IAAI,CAAC,iCAAiC,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAA;IAEhE,iEAAiE;IACjE,2EAA2E;IAC3E,uDAAuD;IACvD,GAAG,CAAC,GAAG,CAAC,iCAAiC,EAAE,UAAU,CAAC,IAAI,CAAC,CAAA;IAE3D,0EAA0E;IAC1E,uBAAuB;IACvB,GAAG,CAAC,IAAI,CAAC,wCAAwC,EAAE,UAAU,CAAC,SAAS,CAAC,CAAA;IAExE,yBAAyB;IACzB,GAAG,CAAC,GAAG,CAAC,wCAAwC,EAAE,UAAU,CAAC,GAAG,CAAC,CAAA;IAEjE,uEAAuE;IACvE,4DAA4D;IAC5D,GAAG,CAAC,IAAI,CACN,4DAA4D,EAC5D,iBAAiB,CAAC,IAAI,CACvB,CAAA;AACH,CAAC"}

package/dist/server.d.ts

@@ -0,0 +1,20 @@
+/**
+ * App factory: createApp() is the community-edition composition. It builds the
+ * Fastify instance, registers the `fastifyWas` plugin (the whole WAS protocol
+ * surface -- see plugin.ts), and adds the teaching-server extras around it:
+ * static assets, the Handlebars-rendered welcome page, the `/health` probe,
+ * and the CORS proxy.
+ */
+import { type FastifyInstance } from 'fastify';
+import { type FastifyWasOptions } from './plugin.js';
+/**
+ * Builds the Fastify instance: registers the `fastifyWas` protocol plugin
+ * (which carries the storage/config decorations and all WAS + WebKMS routes;
+ * options are passed through -- see {@link FastifyWasOptions}), then the
+ * teaching-server extras (static files, welcome page, health probe, CORS
+ * proxy).
+ * @param options {FastifyWasOptions}
+ * @returns {import('fastify').FastifyInstance}
+ */
+export declare function createApp(options?: FastifyWasOptions): FastifyInstance;
+//# sourceMappingURL=server.d.ts.map

package/dist/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAgB,EAAE,KAAK,eAAe,EAAE,MAAM,SAAS,CAAA;AAMvD,OAAO,EAAc,KAAK,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAMhE;;;;;;;;GAQG;AACH,wBAAgB,SAAS,CAAC,OAAO,GAAE,iBAAsB,GAAG,eAAe,CAwC1E"}

package/dist/server.js

@@ -0,0 +1,60 @@
+/**
+ * App factory: createApp() is the community-edition composition. It builds the
+ * Fastify instance, registers the `fastifyWas` plugin (the whole WAS protocol
+ * surface -- see plugin.ts), and adds the teaching-server extras around it:
+ * static assets, the Handlebars-rendered welcome page, the `/health` probe,
+ * and the CORS proxy.
+ */
+import Fastify, {} from 'fastify';
+import fastifyView from '@fastify/view';
+import fastifyStatic from '@fastify/static';
+import handlebars from 'handlebars';
+import path from 'node:path';
+import { fastifyWas } from './plugin.js';
+import { initCorsProxyRoutes as initApiCorsProxyRoutes } from './corsProxy.js';
+import { SPEC_URL, SERVER_VERSION } from './config.default.js';
+// TODO: https://github.com/fastify/fastify-helmet
+/**
+ * Builds the Fastify instance: registers the `fastifyWas` protocol plugin
+ * (which carries the storage/config decorations and all WAS + WebKMS routes;
+ * options are passed through -- see {@link FastifyWasOptions}), then the
+ * teaching-server extras (static files, welcome page, health probe, CORS
+ * proxy).
+ * @param options {FastifyWasOptions}
+ * @returns {import('fastify').FastifyInstance}
+ */
+export function createApp(options = {}) {
+    // By default uses 'pino' logger
+    const fastify = Fastify({ logger: true });
+    // The WAS protocol surface (decorations, parsers, WAS + WebKMS route groups)
+    fastify.register(fastifyWas, options);
+    // Serve static files from the /common folder
+    fastify.register(fastifyStatic, {
+        root: path.join(import.meta.dirname, '..', 'common'),
+        prefix: '/common/'
+    });
+    // Use Handlebars as the rendering engine
+    fastify.register(fastifyView, {
+        engine: { handlebars },
+        root: path.join(import.meta.dirname, './views'),
+        layout: '/templates/main', // ./views/templates/main.hbs
+        viewExt: 'hbs'
+    });
+    // Add a human-readable 'Welcome' page
+    fastify.get('/', async (request, reply) => {
+        return reply.view('home', { title: 'Welcome', SPEC_URL, SERVER_VERSION });
+    });
+    // Operational liveness probe (not a WAS protocol feature). Public,
+    // unauthenticated, and side-effect-free so load balancers, uptime monitors,
+    // and orchestrators can poll it cheaply. Body follows the
+    // `application/health+json` shape from the IETF `draft-inadarei-api-health-check`
+    // draft; Fastify's implicit HEAD route serves bodyless probes for free.
+    fastify.get('/health', async (request, reply) => {
+        return reply
+            .type('application/health+json')
+            .send({ status: 'pass', version: SERVER_VERSION });
+    });
+    fastify.register(initApiCorsProxyRoutes);
+    return fastify;
+}
+//# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,OAAO,EAAE,EAAwB,MAAM,SAAS,CAAA;AACvD,OAAO,WAAW,MAAM,eAAe,CAAA;AACvC,OAAO,aAAa,MAAM,iBAAiB,CAAA;AAC3C,OAAO,UAAU,MAAM,YAAY,CAAA;AACnC,OAAO,IAAI,MAAM,WAAW,CAAA;AAE5B,OAAO,EAAE,UAAU,EAA0B,MAAM,aAAa,CAAA;AAChE,OAAO,EAAE,mBAAmB,IAAI,sBAAsB,EAAE,MAAM,gBAAgB,CAAA;AAC9E,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AAE9D,kDAAkD;AAElD;;;;;;;;GAQG;AACH,MAAM,UAAU,SAAS,CAAC,UAA6B,EAAE;IACvD,gCAAgC;IAChC,MAAM,OAAO,GAAG,OAAO,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;IAEzC,6EAA6E;IAC7E,OAAO,CAAC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAA;IAErC,6CAA6C;IAC7C,OAAO,CAAC,QAAQ,CAAC,aAAa,EAAE;QAC9B,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC;QACpD,MAAM,EAAE,UAAU;KACnB,CAAC,CAAA;IAEF,yCAAyC;IACzC,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE;QAC5B,MAAM,EAAE,EAAE,UAAU,EAAE;QACtB,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC;QAC/C,MAAM,EAAE,iBAAiB,EAAE,6BAA6B;QACxD,OAAO,EAAE,KAAK;KACf,CAAC,CAAA;IAEF,sCAAsC;IACtC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACxC,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC,CAAA;IAC3E,CAAC,CAAC,CAAA;IAEF,mEAAmE;IACnE,4EAA4E;IAC5E,0DAA0D;IAC1D,kFAAkF;IAClF,wEAAwE;IACxE,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAC9C,OAAO,KAAK;aACT,IAAI,CAAC,yBAAyB,CAAC;aAC/B,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,CAAA;IACtD,CAAC,CAAC,CAAA;IAEF,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAA;IAExC,OAAO,OAAO,CAAA;AAChB,CAAC"}

package/dist/start.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Loads the validated env config, builds the app via createApp(), and starts
+ * listening. Exits the process with code 1 on startup failure.
+ * @returns {Promise<void>}
+ */
+export declare function startServer(): Promise<void>;
+//# sourceMappingURL=start.d.ts.map

package/dist/start.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"start.d.ts","sourceRoot":"","sources":["../src/start.ts"],"names":[],"mappings":"AAUA;;;;GAIG;AACH,wBAAsB,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC,CAqDjD"}

package/dist/start.js

@@ -0,0 +1,61 @@
+import { createApp } from './server.js';
+import { PostgresBackend } from './backends/postgres.js';
+import { loadConfigFromEnv } from './config.default.js';
+/**
+ * Loads the validated env config, builds the app via createApp(), and starts
+ * listening. Exits the process with code 1 on startup failure.
+ * @returns {Promise<void>}
+ */
+export async function startServer() {
+    let fastify;
+    try {
+        const config = loadConfigFromEnv();
+        // Backend selection: presence of DATABASE_URL selects the Postgres
+        // backend; otherwise createApp falls back to the default filesystem
+        // backend (rooted at data/). An injected backend carries its own quota
+        // configuration, so the per-Space/per-upload limits are passed to it
+        // directly rather than through the createApp options.
+        const backend = config.databaseUrl
+            ? new PostgresBackend({
+                connectionString: config.databaseUrl,
+                capacityBytes: config.storageLimitPerSpace,
+                maxUploadBytes: config.maxUploadBytes,
+                maxSpacesPerController: config.maxSpacesPerController,
+                maxCollectionsPerSpace: config.maxCollectionsPerSpace,
+                maxResourcesPerSpace: config.maxResourcesPerSpace
+            })
+            : undefined;
+        fastify = createApp({
+            serverUrl: config.serverUrl,
+            ...(backend && { backend }),
+            storageLimitPerSpace: config.storageLimitPerSpace,
+            maxUploadBytes: config.maxUploadBytes,
+            maxSpacesPerController: config.maxSpacesPerController,
+            maxCollectionsPerSpace: config.maxCollectionsPerSpace,
+            maxResourcesPerSpace: config.maxResourcesPerSpace,
+            enabledBackendProviders: config.enabledBackendProviders,
+            kmsRecordKek: config.kmsRecordKek,
+            onboardingToken: config.onboardingToken
+        });
+        // Warn (once, at startup, where the Fastify logger now exists) about limits
+        // left implicitly unbounded. These warnings live only here so library and
+        // test compositions of createApp() stay silent; an explicit `unlimited`
+        // (Infinity) or a finite value is a deliberate choice and warns nothing.
+        if (config.storageLimitPerSpace === undefined) {
+            fastify.log.warn('No per-Space storage quota configured; Spaces may grow without ' +
+                'bound. Set STORAGE_LIMIT_PER_SPACE (bytes), or ' +
+                'STORAGE_LIMIT_PER_SPACE=unlimited to acknowledge.');
+        }
+        if (config.maxUploadBytes === Infinity) {
+            fastify.log.warn('Per-upload size cap disabled (MAX_UPLOAD_BYTES=unlimited); a single ' +
+                'upload may consume unbounded memory on buffered write paths.');
+        }
+        await fastify.listen({ port: config.port, host: '0.0.0.0' });
+    }
+    catch (err) {
+        console.error('Server startup failed:', err);
+        process.exit(1);
+    }
+}
+startServer();
+//# sourceMappingURL=start.js.map

package/dist/start.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"start.js","sourceRoot":"","sources":["../src/start.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AACvC,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AACxD,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AAEvD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW;IAC/B,IAAI,OAAwB,CAAA;IAC5B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,iBAAiB,EAAE,CAAA;QAClC,mEAAmE;QACnE,oEAAoE;QACpE,uEAAuE;QACvE,qEAAqE;QACrE,sDAAsD;QACtD,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW;YAChC,CAAC,CAAC,IAAI,eAAe,CAAC;gBAClB,gBAAgB,EAAE,MAAM,CAAC,WAAW;gBACpC,aAAa,EAAE,MAAM,CAAC,oBAAoB;gBAC1C,cAAc,EAAE,MAAM,CAAC,cAAc;gBACrC,sBAAsB,EAAE,MAAM,CAAC,sBAAsB;gBACrD,sBAAsB,EAAE,MAAM,CAAC,sBAAsB;gBACrD,oBAAoB,EAAE,MAAM,CAAC,oBAAoB;aAClD,CAAC;YACJ,CAAC,CAAC,SAAS,CAAA;QACb,OAAO,GAAG,SAAS,CAAC;YAClB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,GAAG,CAAC,OAAO,IAAI,EAAE,OAAO,EAAE,CAAC;YAC3B,oBAAoB,EAAE,MAAM,CAAC,oBAAoB;YACjD,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,sBAAsB,EAAE,MAAM,CAAC,sBAAsB;YACrD,sBAAsB,EAAE,MAAM,CAAC,sBAAsB;YACrD,oBAAoB,EAAE,MAAM,CAAC,oBAAoB;YACjD,uBAAuB,EAAE,MAAM,CAAC,uBAAuB;YACvD,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,eAAe,EAAE,MAAM,CAAC,eAAe;SACxC,CAAC,CAAA;QACF,4EAA4E;QAC5E,0EAA0E;QAC1E,wEAAwE;QACxE,yEAAyE;QACzE,IAAI,MAAM,CAAC,oBAAoB,KAAK,SAAS,EAAE,CAAC;YAC9C,OAAO,CAAC,GAAG,CAAC,IAAI,CACd,iEAAiE;gBAC/D,iDAAiD;gBACjD,mDAAmD,CACtD,CAAA;QACH,CAAC;QACD,IAAI,MAAM,CAAC,cAAc,KAAK,QAAQ,EAAE,CAAC;YACvC,OAAO,CAAC,GAAG,CAAC,IAAI,CACd,sEAAsE;gBACpE,8DAA8D,CACjE,CAAA;QACH,CAAC;QACD,MAAM,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAA;IAC9D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,wBAAwB,EAAE,GAAG,CAAC,CAAA;QAC5C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;AACH,CAAC;AAED,WAAW,EAAE,CAAA"}

package/dist/storage.d.ts

@@ -0,0 +1,29 @@
+import type { StorageBackend } from './types.js';
+/**
+ * Builds the default filesystem-backed storage, rooted at the project `data/`
+ * directory. Used by `createApp()` when no backend is injected (production).
+ * @param options {object}
+ * @param [options.capacityBytes] {number}   per-Space storage limit in bytes
+ *   (spec "Quotas"); `undefined` (or `Infinity`) means each Space is unlimited.
+ * @param [options.maxUploadBytes] {number}   per-upload size cap in bytes (spec
+ *   "Quotas", `maxUploadBytes`); `undefined` applies the backend's default-on
+ *   cap, `Infinity` means no per-upload cap.
+ * @param [options.maxSpacesPerController] {number}   max Spaces per controller
+ *   (spec "Quotas"); `undefined` applies the backend's default-on limit,
+ *   `Infinity` means no cap.
+ * @param [options.maxCollectionsPerSpace] {number}   max Collections per Space
+ *   (spec "Quotas"); `undefined` applies the backend's default-on limit,
+ *   `Infinity` means no cap.
+ * @param [options.maxResourcesPerSpace] {number}   max live Resources per Space
+ *   (spec "Quotas"); `undefined` applies the backend's default-on limit,
+ *   `Infinity` means no cap.
+ * @returns {StorageBackend}
+ */
+export declare function defaultBackend({ capacityBytes, maxUploadBytes, maxSpacesPerController, maxCollectionsPerSpace, maxResourcesPerSpace }?: {
+    capacityBytes?: number;
+    maxUploadBytes?: number;
+    maxSpacesPerController?: number;
+    maxCollectionsPerSpace?: number;
+    maxResourcesPerSpace?: number;
+}): StorageBackend;
+//# sourceMappingURL=storage.d.ts.map

package/dist/storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../src/storage.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAEhD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,cAAc,CAAC,EAC7B,aAAa,EACb,cAAc,EACd,sBAAsB,EACtB,sBAAsB,EACtB,oBAAoB,EACrB,GAAE;IACD,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,sBAAsB,CAAC,EAAE,MAAM,CAAA;IAC/B,sBAAsB,CAAC,EAAE,MAAM,CAAA;IAC/B,oBAAoB,CAAC,EAAE,MAAM,CAAA;CACzB,GAAG,cAAc,CAStB"}

package/dist/storage.js

@@ -0,0 +1,47 @@
+/**
+ * Storage composition helper: builds the default StorageBackend used by the
+ * server when no backend is injected.
+ *
+ * This module only supplies the default backend for production / `start.ts`,
+ * where `createApp()` is called without an explicit backend.
+ * The active backend is injected into the Fastify instance via
+ * `createApp({ backend })` (see plugin.ts) and read in handlers as
+ * `request.server.storage`.
+ *
+ * The StorageBackend contract — including its invariants (getters resolve falsy
+ * for not-found, writes are upserts, deletes are idempotent) — is documented on
+ * the interface in src/types.ts.
+ */
+import path from 'node:path';
+import { FileSystemBackend } from './backends/filesystem.js';
+/**
+ * Builds the default filesystem-backed storage, rooted at the project `data/`
+ * directory. Used by `createApp()` when no backend is injected (production).
+ * @param options {object}
+ * @param [options.capacityBytes] {number}   per-Space storage limit in bytes
+ *   (spec "Quotas"); `undefined` (or `Infinity`) means each Space is unlimited.
+ * @param [options.maxUploadBytes] {number}   per-upload size cap in bytes (spec
+ *   "Quotas", `maxUploadBytes`); `undefined` applies the backend's default-on
+ *   cap, `Infinity` means no per-upload cap.
+ * @param [options.maxSpacesPerController] {number}   max Spaces per controller
+ *   (spec "Quotas"); `undefined` applies the backend's default-on limit,
+ *   `Infinity` means no cap.
+ * @param [options.maxCollectionsPerSpace] {number}   max Collections per Space
+ *   (spec "Quotas"); `undefined` applies the backend's default-on limit,
+ *   `Infinity` means no cap.
+ * @param [options.maxResourcesPerSpace] {number}   max live Resources per Space
+ *   (spec "Quotas"); `undefined` applies the backend's default-on limit,
+ *   `Infinity` means no cap.
+ * @returns {StorageBackend}
+ */
+export function defaultBackend({ capacityBytes, maxUploadBytes, maxSpacesPerController, maxCollectionsPerSpace, maxResourcesPerSpace } = {}) {
+    return new FileSystemBackend({
+        dataDir: path.join(import.meta.dirname, '..', 'data'),
+        capacityBytes,
+        maxUploadBytes,
+        maxSpacesPerController,
+        maxCollectionsPerSpace,
+        maxResourcesPerSpace
+    });
+}
+//# sourceMappingURL=storage.js.map

package/dist/storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.js","sourceRoot":"","sources":["../src/storage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,IAAI,MAAM,WAAW,CAAA;AAC5B,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAA;AAG5D;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,cAAc,CAAC,EAC7B,aAAa,EACb,cAAc,EACd,sBAAsB,EACtB,sBAAsB,EACtB,oBAAoB,KAOlB,EAAE;IACJ,OAAO,IAAI,iBAAiB,CAAC;QAC3B,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC;QACrD,aAAa;QACb,cAAc;QACd,sBAAsB;QACtB,sBAAsB;QACtB,oBAAoB;KACrB,CAAC,CAAA;AACJ,CAAC"}