whale-code 6.5.6 → 6.5.8

package/dist/server/handlers/nodes-routes-channels.d.ts

@@ -0,0 +1,9 @@
+import type { SupabaseClient } from "@supabase/supabase-js";
+export declare function handleChannelRoutes(pathname: string, method: string, body: Record<string, unknown> | null, supabase: SupabaseClient, auth: {
+    userId?: string;
+    isServiceRole: boolean;
+    rawToken: string;
+}, queryParams?: URLSearchParams): Promise<{
+    status: number;
+    body: Record<string, unknown>;
+} | null>;

package/dist/server/handlers/nodes-routes-channels.js

@@ -0,0 +1,217 @@
+// handlers/nodes-routes-channels.ts — Channel CRUD and list endpoints
+
+import { userHasStoreAccess, logNodeEvent } from "./nodes-types.js";
+export async function handleChannelRoutes(pathname, method, body, supabase, auth, queryParams) {
+  // ── POST /channels ───────────────────────────────────────────
+  // User auth OR node API key. Registers a channel on a node.
+  if (pathname === "/channels" && method === "POST") {
+    if (!body) return {
+      status: 400,
+      body: {
+        error: "Request body required"
+      }
+    };
+    const reg = body;
+    if (!reg.store_id || !reg.node_id || !reg.type || !reg.name) {
+      return {
+        status: 400,
+        body: {
+          error: "store_id, node_id, type, and name required"
+        }
+      };
+    }
+
+    // Verify node exists and belongs to store
+    const {
+      data: node
+    } = await supabase.from("nodes").select("id, store_id").eq("id", reg.node_id).eq("store_id", reg.store_id).single();
+    if (!node) {
+      return {
+        status: 404,
+        body: {
+          error: "Node not found in this store"
+        }
+      };
+    }
+
+    // Check channel-per-node limit against store plan
+    const {
+      data: chanPlanRow
+    } = await supabase.from("store_plans").select("plan, limits").eq("store_id", reg.store_id).single();
+    const chanPlanLimits = chanPlanRow?.limits;
+    const channelsPerNode = chanPlanLimits?.channels_per_node ?? 2; // free plan default
+
+    const {
+      count: existingChannels
+    } = await supabase.from("channels").select("id", {
+      count: "exact",
+      head: true
+    }).eq("node_id", reg.node_id);
+    if ((existingChannels || 0) >= channelsPerNode) {
+      return {
+        status: 429,
+        body: {
+          error: `Channel limit reached (${existingChannels}/${channelsPerNode} per node on ${chanPlanRow?.plan || "free"} plan)`
+        }
+      };
+    }
+    const {
+      data: channel,
+      error
+    } = await supabase.from("channels").insert({
+      store_id: reg.store_id,
+      node_id: reg.node_id,
+      type: reg.type,
+      name: reg.name,
+      config: reg.config || {},
+      agent_id: reg.agent_id || null,
+      status: "inactive"
+    }).select("id, type, name, status, created_at").single();
+    if (error) {
+      return {
+        status: 500,
+        body: {
+          error: error.message
+        }
+      };
+    }
+    await logNodeEvent(supabase, reg.store_id, reg.node_id, "channel_added", {
+      channel_id: channel.id,
+      type: reg.type,
+      name: reg.name
+    });
+    return {
+      status: 201,
+      body: {
+        success: true,
+        channel
+      }
+    };
+  }
+
+  // ── GET|POST /channels/list ──────────────────────────────────
+  // User auth. Lists channels for a store.
+  if (pathname === "/channels/list" && (method === "GET" || method === "POST")) {
+    const storeId = body?.store_id || queryParams?.get("store_id");
+    if (!storeId) {
+      return {
+        status: 400,
+        body: {
+          error: "store_id required"
+        }
+      };
+    }
+
+    // Verify user has access to the requested store
+    if (auth.userId) {
+      const hasAccess = await userHasStoreAccess(supabase, auth.userId, storeId);
+      if (!hasAccess) {
+        return {
+          status: 403,
+          body: {
+            error: "Not authorized to access this store's channels"
+          }
+        };
+      }
+    } else if (!auth.isServiceRole) {
+      return {
+        status: 401,
+        body: {
+          error: "Authentication required"
+        }
+      };
+    }
+    const {
+      data: channels,
+      error
+    } = await supabase.from("channels").select(`
+        id, node_id, type, name, status, config, agent_id, stats,
+        error_message, created_at, updated_at,
+        nodes!inner(id, name, status)
+      `).eq("store_id", storeId).order("created_at", {
+      ascending: false
+    });
+    if (error) {
+      return {
+        status: 500,
+        body: {
+          error: error.message
+        }
+      };
+    }
+    return {
+      status: 200,
+      body: {
+        success: true,
+        channels: channels || []
+      }
+    };
+  }
+
+  // ── PATCH /channels/:id ────────────────────────────────────────
+  // User auth. Update channel config/agent assignment.
+  const channelPatchMatch = pathname.match(/^\/channels\/([a-f0-9-]+)$/);
+  if (channelPatchMatch && (method === "PUT" || method === "POST") && body?._method === "PATCH") {
+    const channelId = channelPatchMatch[1];
+
+    // Fetch the channel first to verify ownership
+    const {
+      data: existingChannel
+    } = await supabase.from("channels").select("id, store_id").eq("id", channelId).single();
+    if (!existingChannel) {
+      return {
+        status: 404,
+        body: {
+          error: "Channel not found"
+        }
+      };
+    }
+
+    // Verify the user has access to this channel's store
+    if (auth.userId) {
+      const hasAccess = await userHasStoreAccess(supabase, auth.userId, existingChannel.store_id);
+      if (!hasAccess) {
+        return {
+          status: 403,
+          body: {
+            error: "Not authorized to modify this channel"
+          }
+        };
+      }
+    } else if (!auth.isServiceRole) {
+      return {
+        status: 401,
+        body: {
+          error: "Authentication required"
+        }
+      };
+    }
+    const updates = {};
+    if (body.agent_id !== undefined) updates.agent_id = body.agent_id;
+    if (body.config !== undefined) updates.config = body.config;
+    if (body.name !== undefined) updates.name = body.name;
+    if (body.status !== undefined) updates.status = body.status;
+    updates.updated_at = new Date().toISOString();
+    const {
+      data: channel,
+      error
+    } = await supabase.from("channels").update(updates).eq("id", channelId).select("id, type, name, status, agent_id, config, updated_at").single();
+    if (error) {
+      return {
+        status: 500,
+        body: {
+          error: error.message
+        }
+      };
+    }
+    return {
+      status: 200,
+      body: {
+        success: true,
+        channel
+      }
+    };
+  }
+  return null;
+}
+//# sourceMappingURL=nodes-routes-channels.js.map

package/dist/server/handlers/nodes-routes-channels.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nodes-routes-channels.js","names":["userHasStoreAccess","logNodeEvent","handleChannelRoutes","pathname","method","body","supabase","auth","queryParams","status","error","reg","store_id","node_id","type","name","data","node","from","select","eq","single","chanPlanRow","chanPlanLimits","limits","channelsPerNode","channels_per_node","count","existingChannels","head","plan","channel","insert","config","agent_id","message","channel_id","id","success","storeId","get","userId","hasAccess","isServiceRole","channels","order","ascending","channelPatchMatch","match","_method","channelId","existingChannel","updates","undefined","updated_at","Date","toISOString","update"],"sources":["../../../src/server/handlers/nodes-routes-channels.ts"],"sourcesContent":["// handlers/nodes-routes-channels.ts — Channel CRUD and list endpoints\nimport type { SupabaseClient } from \"@supabase/supabase-js\";\nimport { checkPlanLimits } from \"./billing.js\";\nimport {\n  type ChannelRegistration,\n  userHasStoreAccess, logNodeEvent,\n} from \"./nodes-types.js\";\n\nexport async function handleChannelRoutes(\n  pathname: string,\n  method: string,\n  body: Record<string, unknown> | null,\n  supabase: SupabaseClient,\n  auth: { userId?: string; isServiceRole: boolean; rawToken: string },\n  queryParams?: URLSearchParams,\n): Promise<{ status: number; body: Record<string, unknown> } | null> {\n  // ── POST /channels ───────────────────────────────────────────\n  // User auth OR node API key. Registers a channel on a node.\n  if (pathname === \"/channels\" && method === \"POST\") {\n    if (!body) return { status: 400, body: { error: \"Request body required\" } };\n    const reg = body as unknown as ChannelRegistration;\n    if (!reg.store_id || !reg.node_id || !reg.type || !reg.name) {\n      return { status: 400, body: { error: \"store_id, node_id, type, and name required\" } };\n    }\n\n    // Verify node exists and belongs to store\n    const { data: node } = await supabase\n      .from(\"nodes\")\n      .select(\"id, store_id\")\n      .eq(\"id\", reg.node_id)\n      .eq(\"store_id\", reg.store_id)\n      .single();\n    if (!node) {\n      return { status: 404, body: { error: \"Node not found in this store\" } };\n    }\n\n    // Check channel-per-node limit against store plan\n    const { data: chanPlanRow } = await supabase\n      .from(\"store_plans\")\n      .select(\"plan, limits\")\n      .eq(\"store_id\", reg.store_id)\n      .single();\n    const chanPlanLimits = chanPlanRow?.limits as { channels_per_node?: number } | null;\n    const channelsPerNode = chanPlanLimits?.channels_per_node ?? 2; // free plan default\n\n    const { count: existingChannels } = await supabase\n      .from(\"channels\")\n      .select(\"id\", { count: \"exact\", head: true })\n      .eq(\"node_id\", reg.node_id);\n    if ((existingChannels || 0) >= channelsPerNode) {\n      return { status: 429, body: { error: `Channel limit reached (${existingChannels}/${channelsPerNode} per node on ${chanPlanRow?.plan || \"free\"} plan)` } };\n    }\n\n    const { data: channel, error } = await supabase\n      .from(\"channels\")\n      .insert({\n        store_id: reg.store_id,\n        node_id: reg.node_id,\n        type: reg.type,\n        name: reg.name,\n        config: reg.config || {},\n        agent_id: reg.agent_id || null,\n        status: \"inactive\",\n      })\n      .select(\"id, type, name, status, created_at\")\n      .single();\n\n    if (error) {\n      return { status: 500, body: { error: error.message } };\n    }\n\n    await logNodeEvent(supabase, reg.store_id, reg.node_id, \"channel_added\", {\n      channel_id: channel.id,\n      type: reg.type,\n      name: reg.name,\n    });\n\n    return { status: 201, body: { success: true, channel } };\n  }\n\n  // ── GET|POST /channels/list ──────────────────────────────────\n  // User auth. Lists channels for a store.\n  if (pathname === \"/channels/list\" && (method === \"GET\" || method === \"POST\")) {\n    const storeId = (body as any)?.store_id || queryParams?.get(\"store_id\");\n    if (!storeId) {\n      return { status: 400, body: { error: \"store_id required\" } };\n    }\n\n    // Verify user has access to the requested store\n    if (auth.userId) {\n      const hasAccess = await userHasStoreAccess(supabase, auth.userId, storeId);\n      if (!hasAccess) {\n        return { status: 403, body: { error: \"Not authorized to access this store's channels\" } };\n      }\n    } else if (!auth.isServiceRole) {\n      return { status: 401, body: { error: \"Authentication required\" } };\n    }\n\n    const { data: channels, error } = await supabase\n      .from(\"channels\")\n      .select(`\n        id, node_id, type, name, status, config, agent_id, stats,\n        error_message, created_at, updated_at,\n        nodes!inner(id, name, status)\n      `)\n      .eq(\"store_id\", storeId)\n      .order(\"created_at\", { ascending: false });\n\n    if (error) {\n      return { status: 500, body: { error: error.message } };\n    }\n\n    return { status: 200, body: { success: true, channels: channels || [] } };\n  }\n\n  // ── PATCH /channels/:id ────────────────────────────────────────\n  // User auth. Update channel config/agent assignment.\n  const channelPatchMatch = pathname.match(/^\\/channels\\/([a-f0-9-]+)$/);\n  if (channelPatchMatch && (method === \"PUT\" || method === \"POST\") && (body as any)?._method === \"PATCH\") {\n    const channelId = channelPatchMatch[1];\n\n    // Fetch the channel first to verify ownership\n    const { data: existingChannel } = await supabase\n      .from(\"channels\")\n      .select(\"id, store_id\")\n      .eq(\"id\", channelId)\n      .single();\n\n    if (!existingChannel) {\n      return { status: 404, body: { error: \"Channel not found\" } };\n    }\n\n    // Verify the user has access to this channel's store\n    if (auth.userId) {\n      const hasAccess = await userHasStoreAccess(supabase, auth.userId, existingChannel.store_id);\n      if (!hasAccess) {\n        return { status: 403, body: { error: \"Not authorized to modify this channel\" } };\n      }\n    } else if (!auth.isServiceRole) {\n      return { status: 401, body: { error: \"Authentication required\" } };\n    }\n\n    const updates: Record<string, unknown> = {};\n\n    if ((body as any).agent_id !== undefined) updates.agent_id = (body as any).agent_id;\n    if ((body as any).config !== undefined) updates.config = (body as any).config;\n    if ((body as any).name !== undefined) updates.name = (body as any).name;\n    if ((body as any).status !== undefined) updates.status = (body as any).status;\n    updates.updated_at = new Date().toISOString();\n\n    const { data: channel, error } = await supabase\n      .from(\"channels\")\n      .update(updates)\n      .eq(\"id\", channelId)\n      .select(\"id, type, name, status, agent_id, config, updated_at\")\n      .single();\n\n    if (error) {\n      return { status: 500, body: { error: error.message } };\n    }\n\n    return { status: 200, body: { success: true, channel } };\n  }\n  return null;\n}\n"],"mappings":"AAAA;;AAGA,SAEEA,kBAAkB,EAAEC,YAAY,QAC3B,kBAAkB;AAEzB,OAAO,eAAeC,mBAAmBA,CACvCC,QAAgB,EAChBC,MAAc,EACdC,IAAoC,EACpCC,QAAwB,EACxBC,IAAmE,EACnEC,WAA6B,EACsC;EACnE;EACA;EACA,IAAIL,QAAQ,KAAK,WAAW,IAAIC,MAAM,KAAK,MAAM,EAAE;IACjD,IAAI,CAACC,IAAI,EAAE,OAAO;MAAEI,MAAM,EAAE,GAAG;MAAEJ,IAAI,EAAE;QAAEK,KAAK,EAAE;MAAwB;IAAE,CAAC;IAC3E,MAAMC,GAAG,GAAGN,IAAsC;IAClD,IAAI,CAACM,GAAG,CAACC,QAAQ,IAAI,CAACD,GAAG,CAACE,OAAO,IAAI,CAACF,GAAG,CAACG,IAAI,IAAI,CAACH,GAAG,CAACI,IAAI,EAAE;MAC3D,OAAO;QAAEN,MAAM,EAAE,GAAG;QAAEJ,IAAI,EAAE;UAAEK,KAAK,EAAE;QAA6C;MAAE,CAAC;IACvF;;IAEA;IACA,MAAM;MAAEM,IAAI,EAAEC;IAAK,CAAC,GAAG,MAAMX,QAAQ,CAClCY,IAAI,CAAC,OAAO,CAAC,CACbC,MAAM,CAAC,cAAc,CAAC,CACtBC,EAAE,CAAC,IAAI,EAAET,GAAG,CAACE,OAAO,CAAC,CACrBO,EAAE,CAAC,UAAU,EAAET,GAAG,CAACC,QAAQ,CAAC,CAC5BS,MAAM,CAAC,CAAC;IACX,IAAI,CAACJ,IAAI,EAAE;MACT,OAAO;QAAER,MAAM,EAAE,GAAG;QAAEJ,IAAI,EAAE;UAAEK,KAAK,EAAE;QAA+B;MAAE,CAAC;IACzE;;IAEA;IACA,MAAM;MAAEM,IAAI,EAAEM;IAAY,CAAC,GAAG,MAAMhB,QAAQ,CACzCY,IAAI,CAAC,aAAa,CAAC,CACnBC,MAAM,CAAC,cAAc,CAAC,CACtBC,EAAE,CAAC,UAAU,EAAET,GAAG,CAACC,QAAQ,CAAC,CAC5BS,MAAM,CAAC,CAAC;IACX,MAAME,cAAc,GAAGD,WAAW,EAAEE,MAA+C;IACnF,MAAMC,eAAe,GAAGF,cAAc,EAAEG,iBAAiB,IAAI,CAAC,CAAC,CAAC;;IAEhE,MAAM;MAAEC,KAAK,EAAEC;IAAiB,CAAC,GAAG,MAAMtB,QAAQ,CAC/CY,IAAI,CAAC,UAAU,CAAC,CAChBC,MAAM,CAAC,IAAI,EAAE;MAAEQ,KAAK,EAAE,OAAO;MAAEE,IAAI,EAAE;IAAK,CAAC,CAAC,CAC5CT,EAAE,CAAC,SAAS,EAAET,GAAG,CAACE,OAAO,CAAC;IAC7B,IAAI,CAACe,gBAAgB,IAAI,CAAC,KAAKH,eAAe,EAAE;MAC9C,OAAO;QAAEhB,MAAM,EAAE,GAAG;QAAEJ,IAAI,EAAE;UAAEK,KAAK,EAAE,0BAA0BkB,gBAAgB,IAAIH,eAAe,gBAAgBH,WAAW,EAAEQ,IAAI,IAAI,MAAM;QAAS;MAAE,CAAC;IAC3J;IAEA,MAAM;MAAEd,IAAI,EAAEe,OAAO;MAAErB;IAAM,CAAC,GAAG,MAAMJ,QAAQ,CAC5CY,IAAI,CAAC,UAAU,CAAC,CAChBc,MAAM,CAAC;MACNpB,QAAQ,EAAED,GAAG,CAACC,QAAQ;MACtBC,OAAO,EAAEF,GAAG,CAACE,OAAO;MACpBC,IAAI,EAAEH,GAAG,CAACG,IAAI;MACdC,IAAI,EAAEJ,GAAG,CAACI,IAAI;MACdkB,MAAM,EAAEtB,GAAG,CAACsB,MAAM,IAAI,CAAC,CAAC;MACxBC,QAAQ,EAAEvB,GAAG,CAACuB,QAAQ,IAAI,IAAI;MAC9BzB,MAAM,EAAE;IACV,CAAC,CAAC,CACDU,MAAM,CAAC,oCAAoC,CAAC,CAC5CE,MAAM,CAAC,CAAC;IAEX,IAAIX,KAAK,EAAE;MACT,OAAO;QAAED,MAAM,EAAE,GAAG;QAAEJ,IAAI,EAAE;UAAEK,KAAK,EAAEA,KAAK,CAACyB;QAAQ;MAAE,CAAC;IACxD;IAEA,MAAMlC,YAAY,CAACK,QAAQ,EAAEK,GAAG,CAACC,QAAQ,EAAED,GAAG,CAACE,OAAO,EAAE,eAAe,EAAE;MACvEuB,UAAU,EAAEL,OAAO,CAACM,EAAE;MACtBvB,IAAI,EAAEH,GAAG,CAACG,IAAI;MACdC,IAAI,EAAEJ,GAAG,CAACI;IACZ,CAAC,CAAC;IAEF,OAAO;MAAEN,MAAM,EAAE,GAAG;MAAEJ,IAAI,EAAE;QAAEiC,OAAO,EAAE,IAAI;QAAEP;MAAQ;IAAE,CAAC;EAC1D;;EAEA;EACA;EACA,IAAI5B,QAAQ,KAAK,gBAAgB,KAAKC,MAAM,KAAK,KAAK,IAAIA,MAAM,KAAK,MAAM,CAAC,EAAE;IAC5E,MAAMmC,OAAO,GAAIlC,IAAI,EAAUO,QAAQ,IAAIJ,WAAW,EAAEgC,GAAG,CAAC,UAAU,CAAC;IACvE,IAAI,CAACD,OAAO,EAAE;MACZ,OAAO;QAAE9B,MAAM,EAAE,GAAG;QAAEJ,IAAI,EAAE;UAAEK,KAAK,EAAE;QAAoB;MAAE,CAAC;IAC9D;;IAEA;IACA,IAAIH,IAAI,CAACkC,MAAM,EAAE;MACf,MAAMC,SAAS,GAAG,MAAM1C,kBAAkB,CAACM,QAAQ,EAAEC,IAAI,CAACkC,MAAM,EAAEF,OAAO,CAAC;MAC1E,IAAI,CAACG,SAAS,EAAE;QACd,OAAO;UAAEjC,MAAM,EAAE,GAAG;UAAEJ,IAAI,EAAE;YAAEK,KAAK,EAAE;UAAiD;QAAE,CAAC;MAC3F;IACF,CAAC,MAAM,IAAI,CAACH,IAAI,CAACoC,aAAa,EAAE;MAC9B,OAAO;QAAElC,MAAM,EAAE,GAAG;QAAEJ,IAAI,EAAE;UAAEK,KAAK,EAAE;QAA0B;MAAE,CAAC;IACpE;IAEA,MAAM;MAAEM,IAAI,EAAE4B,QAAQ;MAAElC;IAAM,CAAC,GAAG,MAAMJ,QAAQ,CAC7CY,IAAI,CAAC,UAAU,CAAC,CAChBC,MAAM,CAAC;AACd;AACA;AACA;AACA,OAAO,CAAC,CACDC,EAAE,CAAC,UAAU,EAAEmB,OAAO,CAAC,CACvBM,KAAK,CAAC,YAAY,EAAE;MAAEC,SAAS,EAAE;IAAM,CAAC,CAAC;IAE5C,IAAIpC,KAAK,EAAE;MACT,OAAO;QAAED,MAAM,EAAE,GAAG;QAAEJ,IAAI,EAAE;UAAEK,KAAK,EAAEA,KAAK,CAACyB;QAAQ;MAAE,CAAC;IACxD;IAEA,OAAO;MAAE1B,MAAM,EAAE,GAAG;MAAEJ,IAAI,EAAE;QAAEiC,OAAO,EAAE,IAAI;QAAEM,QAAQ,EAAEA,QAAQ,IAAI;MAAG;IAAE,CAAC;EAC3E;;EAEA;EACA;EACA,MAAMG,iBAAiB,GAAG5C,QAAQ,CAAC6C,KAAK,CAAC,4BAA4B,CAAC;EACtE,IAAID,iBAAiB,KAAK3C,MAAM,KAAK,KAAK,IAAIA,MAAM,KAAK,MAAM,CAAC,IAAKC,IAAI,EAAU4C,OAAO,KAAK,OAAO,EAAE;IACtG,MAAMC,SAAS,GAAGH,iBAAiB,CAAC,CAAC,CAAC;;IAEtC;IACA,MAAM;MAAE/B,IAAI,EAAEmC;IAAgB,CAAC,GAAG,MAAM7C,QAAQ,CAC7CY,IAAI,CAAC,UAAU,CAAC,CAChBC,MAAM,CAAC,cAAc,CAAC,CACtBC,EAAE,CAAC,IAAI,EAAE8B,SAAS,CAAC,CACnB7B,MAAM,CAAC,CAAC;IAEX,IAAI,CAAC8B,eAAe,EAAE;MACpB,OAAO;QAAE1C,MAAM,EAAE,GAAG;QAAEJ,IAAI,EAAE;UAAEK,KAAK,EAAE;QAAoB;MAAE,CAAC;IAC9D;;IAEA;IACA,IAAIH,IAAI,CAACkC,MAAM,EAAE;MACf,MAAMC,SAAS,GAAG,MAAM1C,kBAAkB,CAACM,QAAQ,EAAEC,IAAI,CAACkC,MAAM,EAAEU,eAAe,CAACvC,QAAQ,CAAC;MAC3F,IAAI,CAAC8B,SAAS,EAAE;QACd,OAAO;UAAEjC,MAAM,EAAE,GAAG;UAAEJ,IAAI,EAAE;YAAEK,KAAK,EAAE;UAAwC;QAAE,CAAC;MAClF;IACF,CAAC,MAAM,IAAI,CAACH,IAAI,CAACoC,aAAa,EAAE;MAC9B,OAAO;QAAElC,MAAM,EAAE,GAAG;QAAEJ,IAAI,EAAE;UAAEK,KAAK,EAAE;QAA0B;MAAE,CAAC;IACpE;IAEA,MAAM0C,OAAgC,GAAG,CAAC,CAAC;IAE3C,IAAK/C,IAAI,CAAS6B,QAAQ,KAAKmB,SAAS,EAAED,OAAO,CAAClB,QAAQ,GAAI7B,IAAI,CAAS6B,QAAQ;IACnF,IAAK7B,IAAI,CAAS4B,MAAM,KAAKoB,SAAS,EAAED,OAAO,CAACnB,MAAM,GAAI5B,IAAI,CAAS4B,MAAM;IAC7E,IAAK5B,IAAI,CAASU,IAAI,KAAKsC,SAAS,EAAED,OAAO,CAACrC,IAAI,GAAIV,IAAI,CAASU,IAAI;IACvE,IAAKV,IAAI,CAASI,MAAM,KAAK4C,SAAS,EAAED,OAAO,CAAC3C,MAAM,GAAIJ,IAAI,CAASI,MAAM;IAC7E2C,OAAO,CAACE,UAAU,GAAG,IAAIC,IAAI,CAAC,CAAC,CAACC,WAAW,CAAC,CAAC;IAE7C,MAAM;MAAExC,IAAI,EAAEe,OAAO;MAAErB;IAAM,CAAC,GAAG,MAAMJ,QAAQ,CAC5CY,IAAI,CAAC,UAAU,CAAC,CAChBuC,MAAM,CAACL,OAAO,CAAC,CACfhC,EAAE,CAAC,IAAI,EAAE8B,SAAS,CAAC,CACnB/B,MAAM,CAAC,sDAAsD,CAAC,CAC9DE,MAAM,CAAC,CAAC;IAEX,IAAIX,KAAK,EAAE;MACT,OAAO;QAAED,MAAM,EAAE,GAAG;QAAEJ,IAAI,EAAE;UAAEK,KAAK,EAAEA,KAAK,CAACyB;QAAQ;MAAE,CAAC;IACxD;IAEA,OAAO;MAAE1B,MAAM,EAAE,GAAG;MAAEJ,IAAI,EAAE;QAAEiC,OAAO,EAAE,IAAI;QAAEP;MAAQ;IAAE,CAAC;EAC1D;EACA,OAAO,IAAI;AACb","ignoreList":[]}

package/dist/server/handlers/nodes-routes-crud.d.ts

@@ -0,0 +1,9 @@
+import type { SupabaseClient } from "@supabase/supabase-js";
+export declare function handleNodeCrudRoutes(pathname: string, method: string, body: Record<string, unknown> | null, supabase: SupabaseClient, auth: {
+    userId?: string;
+    isServiceRole: boolean;
+    rawToken: string;
+}): Promise<{
+    status: number;
+    body: Record<string, unknown>;
+} | null>;

package/dist/server/handlers/nodes-routes-crud.js

@@ -0,0 +1,290 @@
+// handlers/nodes-routes-crud.ts — Node CRUD, commands, and key rotation endpoints
+
+import { userHasStoreAccess, generateNodeApiKey, hashApiKey, logNodeEvent, nodeAuthCache } from "./nodes-types.js";
+export async function handleNodeCrudRoutes(pathname, method, body, supabase, auth) {
+  // ── PATCH /nodes/:id ──────────────────────────────────────────
+  // User auth. Update node name, capabilities, config.
+  const patchNodeMatch = pathname.match(/^\/nodes\/([a-f0-9-]+)$/);
+  if (patchNodeMatch && (method === "PUT" || method === "POST") && body?._method === "PATCH") {
+    const nodeId = patchNodeMatch[1];
+    if (!auth.userId && !auth.isServiceRole) {
+      return {
+        status: 401,
+        body: {
+          error: "User authentication required"
+        }
+      };
+    }
+
+    // Verify ownership
+    const {
+      data: nodeRow
+    } = await supabase.from("nodes").select("id, store_id, name").eq("id", nodeId).single();
+    if (!nodeRow) {
+      return {
+        status: 404,
+        body: {
+          error: "Node not found"
+        }
+      };
+    }
+    if (auth.userId) {
+      const hasAccess = await userHasStoreAccess(supabase, auth.userId, nodeRow.store_id);
+      if (!hasAccess) {
+        return {
+          status: 403,
+          body: {
+            error: "No access to this node"
+          }
+        };
+      }
+    }
+    const nodeUpdates = {
+      updated_at: new Date().toISOString()
+    };
+    if (body.name !== undefined) nodeUpdates.name = body.name;
+    if (body.capabilities !== undefined) nodeUpdates.capabilities = body.capabilities;
+    if (body.config !== undefined) nodeUpdates.config = body.config;
+    const {
+      data: updated,
+      error: updateErr
+    } = await supabase.from("nodes").update(nodeUpdates).eq("id", nodeId).select("id, name, status, capabilities, config, version, hardware, last_heartbeat, updated_at").single();
+    if (updateErr) {
+      return {
+        status: 500,
+        body: {
+          error: updateErr.message
+        }
+      };
+    }
+    return {
+      status: 200,
+      body: {
+        success: true,
+        node: updated
+      }
+    };
+  }
+
+  // ── POST /nodes/:id/commands ────────────────────────────────
+  // User auth. Queue a command for a node.
+  const commandMatch = pathname.match(/^\/nodes\/([a-f0-9-]+)\/commands$/);
+  if (commandMatch && method === "POST") {
+    const nodeId = commandMatch[1];
+    if (!auth.userId && !auth.isServiceRole) {
+      return {
+        status: 401,
+        body: {
+          error: "User authentication required"
+        }
+      };
+    }
+    if (!body) return {
+      status: 400,
+      body: {
+        error: "Request body required"
+      }
+    };
+    const command = body.command;
+    const payload = body.payload || {};
+    if (!command) {
+      return {
+        status: 400,
+        body: {
+          error: "command is required"
+        }
+      };
+    }
+    const validCommands = ["restart", "shutdown", "rotate_key", "pause_all_channels", "resume_all_channels", "update"];
+    if (!validCommands.includes(command)) {
+      return {
+        status: 400,
+        body: {
+          error: `Invalid command. Valid: ${validCommands.join(", ")}`
+        }
+      };
+    }
+
+    // Verify node exists and get store_id
+    const {
+      data: targetNode
+    } = await supabase.from("nodes").select("id, store_id").eq("id", nodeId).single();
+    if (!targetNode) {
+      return {
+        status: 404,
+        body: {
+          error: "Node not found"
+        }
+      };
+    }
+    if (auth.userId) {
+      const hasAccess = await userHasStoreAccess(supabase, auth.userId, targetNode.store_id);
+      if (!hasAccess) {
+        return {
+          status: 403,
+          body: {
+            error: "No access to this node"
+          }
+        };
+      }
+    }
+    const {
+      data: cmd,
+      error: cmdErr
+    } = await supabase.from("node_commands").insert({
+      node_id: nodeId,
+      store_id: targetNode.store_id,
+      command,
+      payload,
+      status: "pending"
+    }).select("id, command, status, created_at").single();
+    if (cmdErr) {
+      return {
+        status: 500,
+        body: {
+          error: cmdErr.message
+        }
+      };
+    }
+    await logNodeEvent(supabase, targetNode.store_id, nodeId, "command_queued", {
+      command,
+      command_id: cmd.id,
+      queued_by: auth.userId
+    });
+    return {
+      status: 201,
+      body: {
+        success: true,
+        command: cmd
+      }
+    };
+  }
+
+  // ── POST /nodes/:id/rotate-key ─────────────────────────────
+  // User auth. Generate a new API key for a node.
+  const rotateMatch = pathname.match(/^\/nodes\/([a-f0-9-]+)\/rotate-key$/);
+  if (rotateMatch && method === "POST") {
+    const nodeId = rotateMatch[1];
+    if (!auth.userId && !auth.isServiceRole) {
+      return {
+        status: 401,
+        body: {
+          error: "User authentication required"
+        }
+      };
+    }
+
+    // Verify ownership
+    const {
+      data: rotateNode
+    } = await supabase.from("nodes").select("id, store_id, name").eq("id", nodeId).single();
+    if (!rotateNode) {
+      return {
+        status: 404,
+        body: {
+          error: "Node not found"
+        }
+      };
+    }
+    if (auth.userId) {
+      const hasAccess = await userHasStoreAccess(supabase, auth.userId, rotateNode.store_id);
+      if (!hasAccess) {
+        return {
+          status: 403,
+          body: {
+            error: "No access to this node"
+          }
+        };
+      }
+    }
+    const newApiKey = generateNodeApiKey();
+    const newHash = hashApiKey(newApiKey);
+    const {
+      error: rotateErr
+    } = await supabase.from("nodes").update({
+      api_key_hash: newHash,
+      updated_at: new Date().toISOString()
+    }).eq("id", nodeId);
+    if (rotateErr) {
+      return {
+        status: 500,
+        body: {
+          error: rotateErr.message
+        }
+      };
+    }
+
+    // Invalidate auth cache for old hash
+    for (const [hash, cached] of nodeAuthCache) {
+      if (cached.node.id === nodeId) {
+        nodeAuthCache.delete(hash);
+      }
+    }
+    await logNodeEvent(supabase, rotateNode.store_id, nodeId, "key_rotated", {
+      rotated_by: auth.userId
+    });
+    return {
+      status: 200,
+      body: {
+        success: true,
+        api_key: newApiKey,
+        message: "Save your new API key — it cannot be retrieved later. The old key is now invalid."
+      }
+    };
+  }
+
+  // ── DELETE /nodes/:id ─────────────────────────────────────────
+  // User auth. Deletes a node and all its channels.
+  const deleteMatch = pathname.match(/^\/nodes\/([a-f0-9-]+)$/);
+  if (deleteMatch && method === "DELETE") {
+    const nodeId = deleteMatch[1];
+
+    // Verify ownership
+    const {
+      data: node
+    } = await supabase.from("nodes").select("id, store_id, name").eq("id", nodeId).single();
+    if (!node) {
+      return {
+        status: 404,
+        body: {
+          error: "Node not found"
+        }
+      };
+    }
+    if (auth.userId) {
+      const hasAccess = await userHasStoreAccess(supabase, auth.userId, node.store_id);
+      if (!hasAccess) {
+        return {
+          status: 403,
+          body: {
+            error: "No access to this node"
+          }
+        };
+      }
+    }
+    await logNodeEvent(supabase, node.store_id, nodeId, "deleted", {
+      name: node.name,
+      deleted_by: auth.userId
+    });
+    const {
+      error
+    } = await supabase.from("nodes").delete().eq("id", nodeId);
+    if (error) {
+      return {
+        status: 500,
+        body: {
+          error: error.message
+        }
+      };
+    }
+    return {
+      status: 200,
+      body: {
+        success: true,
+        deleted: nodeId
+      }
+    };
+  }
+  return null;
+}
+//# sourceMappingURL=nodes-routes-crud.js.map

package/dist/server/handlers/nodes-routes-crud.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nodes-routes-crud.js","names":["userHasStoreAccess","generateNodeApiKey","hashApiKey","logNodeEvent","nodeAuthCache","handleNodeCrudRoutes","pathname","method","body","supabase","auth","patchNodeMatch","match","_method","nodeId","userId","isServiceRole","status","error","data","nodeRow","from","select","eq","single","hasAccess","store_id","nodeUpdates","updated_at","Date","toISOString","name","undefined","capabilities","config","updated","updateErr","update","message","success","node","commandMatch","command","payload","validCommands","includes","join","targetNode","cmd","cmdErr","insert","node_id","command_id","id","queued_by","rotateMatch","rotateNode","newApiKey","newHash","rotateErr","api_key_hash","hash","cached","delete","rotated_by","api_key","deleteMatch","deleted_by","deleted"],"sources":["../../../src/server/handlers/nodes-routes-crud.ts"],"sourcesContent":["// handlers/nodes-routes-crud.ts — Node CRUD, commands, and key rotation endpoints\nimport type { SupabaseClient } from \"@supabase/supabase-js\";\nimport {\n  userHasStoreAccess, generateNodeApiKey, hashApiKey,\n  logNodeEvent, nodeAuthCache,\n} from \"./nodes-types.js\";\n\nexport async function handleNodeCrudRoutes(\n  pathname: string,\n  method: string,\n  body: Record<string, unknown> | null,\n  supabase: SupabaseClient,\n  auth: { userId?: string; isServiceRole: boolean; rawToken: string },\n): Promise<{ status: number; body: Record<string, unknown> } | null> {\n  // ── PATCH /nodes/:id ──────────────────────────────────────────\n  // User auth. Update node name, capabilities, config.\n  const patchNodeMatch = pathname.match(/^\\/nodes\\/([a-f0-9-]+)$/);\n  if (patchNodeMatch && (method === \"PUT\" || method === \"POST\") && (body as any)?._method === \"PATCH\") {\n    const nodeId = patchNodeMatch[1];\n    if (!auth.userId && !auth.isServiceRole) {\n      return { status: 401, body: { error: \"User authentication required\" } };\n    }\n\n    // Verify ownership\n    const { data: nodeRow } = await supabase\n      .from(\"nodes\")\n      .select(\"id, store_id, name\")\n      .eq(\"id\", nodeId)\n      .single();\n    if (!nodeRow) {\n      return { status: 404, body: { error: \"Node not found\" } };\n    }\n\n    if (auth.userId) {\n      const hasAccess = await userHasStoreAccess(supabase, auth.userId, nodeRow.store_id);\n      if (!hasAccess) {\n        return { status: 403, body: { error: \"No access to this node\" } };\n      }\n    }\n\n    const nodeUpdates: Record<string, unknown> = { updated_at: new Date().toISOString() };\n    if ((body as any).name !== undefined) nodeUpdates.name = (body as any).name;\n    if ((body as any).capabilities !== undefined) nodeUpdates.capabilities = (body as any).capabilities;\n    if ((body as any).config !== undefined) nodeUpdates.config = (body as any).config;\n\n    const { data: updated, error: updateErr } = await supabase\n      .from(\"nodes\")\n      .update(nodeUpdates)\n      .eq(\"id\", nodeId)\n      .select(\"id, name, status, capabilities, config, version, hardware, last_heartbeat, updated_at\")\n      .single();\n\n    if (updateErr) {\n      return { status: 500, body: { error: updateErr.message } };\n    }\n\n    return { status: 200, body: { success: true, node: updated } };\n  }\n\n  // ── POST /nodes/:id/commands ────────────────────────────────\n  // User auth. Queue a command for a node.\n  const commandMatch = pathname.match(/^\\/nodes\\/([a-f0-9-]+)\\/commands$/);\n  if (commandMatch && method === \"POST\") {\n    const nodeId = commandMatch[1];\n    if (!auth.userId && !auth.isServiceRole) {\n      return { status: 401, body: { error: \"User authentication required\" } };\n    }\n    if (!body) return { status: 400, body: { error: \"Request body required\" } };\n\n    const command = (body as any).command as string;\n    const payload = (body as any).payload || {};\n    if (!command) {\n      return { status: 400, body: { error: \"command is required\" } };\n    }\n\n    const validCommands = [\"restart\", \"shutdown\", \"rotate_key\", \"pause_all_channels\", \"resume_all_channels\", \"update\"];\n    if (!validCommands.includes(command)) {\n      return { status: 400, body: { error: `Invalid command. Valid: ${validCommands.join(\", \")}` } };\n    }\n\n    // Verify node exists and get store_id\n    const { data: targetNode } = await supabase\n      .from(\"nodes\")\n      .select(\"id, store_id\")\n      .eq(\"id\", nodeId)\n      .single();\n    if (!targetNode) {\n      return { status: 404, body: { error: \"Node not found\" } };\n    }\n\n    if (auth.userId) {\n      const hasAccess = await userHasStoreAccess(supabase, auth.userId, targetNode.store_id);\n      if (!hasAccess) {\n        return { status: 403, body: { error: \"No access to this node\" } };\n      }\n    }\n\n    const { data: cmd, error: cmdErr } = await supabase\n      .from(\"node_commands\")\n      .insert({\n        node_id: nodeId,\n        store_id: targetNode.store_id,\n        command,\n        payload,\n        status: \"pending\",\n      })\n      .select(\"id, command, status, created_at\")\n      .single();\n\n    if (cmdErr) {\n      return { status: 500, body: { error: cmdErr.message } };\n    }\n\n    await logNodeEvent(supabase, targetNode.store_id, nodeId, \"command_queued\", {\n      command,\n      command_id: cmd.id,\n      queued_by: auth.userId,\n    });\n\n    return { status: 201, body: { success: true, command: cmd } };\n  }\n\n  // ── POST /nodes/:id/rotate-key ─────────────────────────────\n  // User auth. Generate a new API key for a node.\n  const rotateMatch = pathname.match(/^\\/nodes\\/([a-f0-9-]+)\\/rotate-key$/);\n  if (rotateMatch && method === \"POST\") {\n    const nodeId = rotateMatch[1];\n    if (!auth.userId && !auth.isServiceRole) {\n      return { status: 401, body: { error: \"User authentication required\" } };\n    }\n\n    // Verify ownership\n    const { data: rotateNode } = await supabase\n      .from(\"nodes\")\n      .select(\"id, store_id, name\")\n      .eq(\"id\", nodeId)\n      .single();\n    if (!rotateNode) {\n      return { status: 404, body: { error: \"Node not found\" } };\n    }\n\n    if (auth.userId) {\n      const hasAccess = await userHasStoreAccess(supabase, auth.userId, rotateNode.store_id);\n      if (!hasAccess) {\n        return { status: 403, body: { error: \"No access to this node\" } };\n      }\n    }\n\n    const newApiKey = generateNodeApiKey();\n    const newHash = hashApiKey(newApiKey);\n\n    const { error: rotateErr } = await supabase\n      .from(\"nodes\")\n      .update({ api_key_hash: newHash, updated_at: new Date().toISOString() })\n      .eq(\"id\", nodeId);\n\n    if (rotateErr) {\n      return { status: 500, body: { error: rotateErr.message } };\n    }\n\n    // Invalidate auth cache for old hash\n    for (const [hash, cached] of nodeAuthCache) {\n      if (cached.node.id === nodeId) {\n        nodeAuthCache.delete(hash);\n      }\n    }\n\n    await logNodeEvent(supabase, rotateNode.store_id, nodeId, \"key_rotated\", {\n      rotated_by: auth.userId,\n    });\n\n    return {\n      status: 200,\n      body: {\n        success: true,\n        api_key: newApiKey,\n        message: \"Save your new API key — it cannot be retrieved later. The old key is now invalid.\",\n      },\n    };\n  }\n\n  // ── DELETE /nodes/:id ─────────────────────────────────────────\n  // User auth. Deletes a node and all its channels.\n  const deleteMatch = pathname.match(/^\\/nodes\\/([a-f0-9-]+)$/);\n  if (deleteMatch && method === \"DELETE\") {\n    const nodeId = deleteMatch[1];\n\n    // Verify ownership\n    const { data: node } = await supabase\n      .from(\"nodes\")\n      .select(\"id, store_id, name\")\n      .eq(\"id\", nodeId)\n      .single();\n\n    if (!node) {\n      return { status: 404, body: { error: \"Node not found\" } };\n    }\n\n    if (auth.userId) {\n      const hasAccess = await userHasStoreAccess(supabase, auth.userId, node.store_id);\n      if (!hasAccess) {\n        return { status: 403, body: { error: \"No access to this node\" } };\n      }\n    }\n\n    await logNodeEvent(supabase, node.store_id, nodeId, \"deleted\", {\n      name: node.name,\n      deleted_by: auth.userId,\n    });\n\n    const { error } = await supabase.from(\"nodes\").delete().eq(\"id\", nodeId);\n    if (error) {\n      return { status: 500, body: { error: error.message } };\n    }\n\n    return { status: 200, body: { success: true, deleted: nodeId } };\n  }\n  return null;\n}\n"],"mappings":"AAAA;;AAEA,SACEA,kBAAkB,EAAEC,kBAAkB,EAAEC,UAAU,EAClDC,YAAY,EAAEC,aAAa,QACtB,kBAAkB;AAEzB,OAAO,eAAeC,oBAAoBA,CACxCC,QAAgB,EAChBC,MAAc,EACdC,IAAoC,EACpCC,QAAwB,EACxBC,IAAmE,EACA;EACnE;EACA;EACA,MAAMC,cAAc,GAAGL,QAAQ,CAACM,KAAK,CAAC,yBAAyB,CAAC;EAChE,IAAID,cAAc,KAAKJ,MAAM,KAAK,KAAK,IAAIA,MAAM,KAAK,MAAM,CAAC,IAAKC,IAAI,EAAUK,OAAO,KAAK,OAAO,EAAE;IACnG,MAAMC,MAAM,GAAGH,cAAc,CAAC,CAAC,CAAC;IAChC,IAAI,CAACD,IAAI,CAACK,MAAM,IAAI,CAACL,IAAI,CAACM,aAAa,EAAE;MACvC,OAAO;QAAEC,MAAM,EAAE,GAAG;QAAET,IAAI,EAAE;UAAEU,KAAK,EAAE;QAA+B;MAAE,CAAC;IACzE;;IAEA;IACA,MAAM;MAAEC,IAAI,EAAEC;IAAQ,CAAC,GAAG,MAAMX,QAAQ,CACrCY,IAAI,CAAC,OAAO,CAAC,CACbC,MAAM,CAAC,oBAAoB,CAAC,CAC5BC,EAAE,CAAC,IAAI,EAAET,MAAM,CAAC,CAChBU,MAAM,CAAC,CAAC;IACX,IAAI,CAACJ,OAAO,EAAE;MACZ,OAAO;QAAEH,MAAM,EAAE,GAAG;QAAET,IAAI,EAAE;UAAEU,KAAK,EAAE;QAAiB;MAAE,CAAC;IAC3D;IAEA,IAAIR,IAAI,CAACK,MAAM,EAAE;MACf,MAAMU,SAAS,GAAG,MAAMzB,kBAAkB,CAACS,QAAQ,EAAEC,IAAI,CAACK,MAAM,EAAEK,OAAO,CAACM,QAAQ,CAAC;MACnF,IAAI,CAACD,SAAS,EAAE;QACd,OAAO;UAAER,MAAM,EAAE,GAAG;UAAET,IAAI,EAAE;YAAEU,KAAK,EAAE;UAAyB;QAAE,CAAC;MACnE;IACF;IAEA,MAAMS,WAAoC,GAAG;MAAEC,UAAU,EAAE,IAAIC,IAAI,CAAC,CAAC,CAACC,WAAW,CAAC;IAAE,CAAC;IACrF,IAAKtB,IAAI,CAASuB,IAAI,KAAKC,SAAS,EAAEL,WAAW,CAACI,IAAI,GAAIvB,IAAI,CAASuB,IAAI;IAC3E,IAAKvB,IAAI,CAASyB,YAAY,KAAKD,SAAS,EAAEL,WAAW,CAACM,YAAY,GAAIzB,IAAI,CAASyB,YAAY;IACnG,IAAKzB,IAAI,CAAS0B,MAAM,KAAKF,SAAS,EAAEL,WAAW,CAACO,MAAM,GAAI1B,IAAI,CAAS0B,MAAM;IAEjF,MAAM;MAAEf,IAAI,EAAEgB,OAAO;MAAEjB,KAAK,EAAEkB;IAAU,CAAC,GAAG,MAAM3B,QAAQ,CACvDY,IAAI,CAAC,OAAO,CAAC,CACbgB,MAAM,CAACV,WAAW,CAAC,CACnBJ,EAAE,CAAC,IAAI,EAAET,MAAM,CAAC,CAChBQ,MAAM,CAAC,uFAAuF,CAAC,CAC/FE,MAAM,CAAC,CAAC;IAEX,IAAIY,SAAS,EAAE;MACb,OAAO;QAAEnB,MAAM,EAAE,GAAG;QAAET,IAAI,EAAE;UAAEU,KAAK,EAAEkB,SAAS,CAACE;QAAQ;MAAE,CAAC;IAC5D;IAEA,OAAO;MAAErB,MAAM,EAAE,GAAG;MAAET,IAAI,EAAE;QAAE+B,OAAO,EAAE,IAAI;QAAEC,IAAI,EAAEL;MAAQ;IAAE,CAAC;EAChE;;EAEA;EACA;EACA,MAAMM,YAAY,GAAGnC,QAAQ,CAACM,KAAK,CAAC,mCAAmC,CAAC;EACxE,IAAI6B,YAAY,IAAIlC,MAAM,KAAK,MAAM,EAAE;IACrC,MAAMO,MAAM,GAAG2B,YAAY,CAAC,CAAC,CAAC;IAC9B,IAAI,CAAC/B,IAAI,CAACK,MAAM,IAAI,CAACL,IAAI,CAACM,aAAa,EAAE;MACvC,OAAO;QAAEC,MAAM,EAAE,GAAG;QAAET,IAAI,EAAE;UAAEU,KAAK,EAAE;QAA+B;MAAE,CAAC;IACzE;IACA,IAAI,CAACV,IAAI,EAAE,OAAO;MAAES,MAAM,EAAE,GAAG;MAAET,IAAI,EAAE;QAAEU,KAAK,EAAE;MAAwB;IAAE,CAAC;IAE3E,MAAMwB,OAAO,GAAIlC,IAAI,CAASkC,OAAiB;IAC/C,MAAMC,OAAO,GAAInC,IAAI,CAASmC,OAAO,IAAI,CAAC,CAAC;IAC3C,IAAI,CAACD,OAAO,EAAE;MACZ,OAAO;QAAEzB,MAAM,EAAE,GAAG;QAAET,IAAI,EAAE;UAAEU,KAAK,EAAE;QAAsB;MAAE,CAAC;IAChE;IAEA,MAAM0B,aAAa,GAAG,CAAC,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,QAAQ,CAAC;IAClH,IAAI,CAACA,aAAa,CAACC,QAAQ,CAACH,OAAO,CAAC,EAAE;MACpC,OAAO;QAAEzB,MAAM,EAAE,GAAG;QAAET,IAAI,EAAE;UAAEU,KAAK,EAAE,2BAA2B0B,aAAa,CAACE,IAAI,CAAC,IAAI,CAAC;QAAG;MAAE,CAAC;IAChG;;IAEA;IACA,MAAM;MAAE3B,IAAI,EAAE4B;IAAW,CAAC,GAAG,MAAMtC,QAAQ,CACxCY,IAAI,CAAC,OAAO,CAAC,CACbC,MAAM,CAAC,cAAc,CAAC,CACtBC,EAAE,CAAC,IAAI,EAAET,MAAM,CAAC,CAChBU,MAAM,CAAC,CAAC;IACX,IAAI,CAACuB,UAAU,EAAE;MACf,OAAO;QAAE9B,MAAM,EAAE,GAAG;QAAET,IAAI,EAAE;UAAEU,KAAK,EAAE;QAAiB;MAAE,CAAC;IAC3D;IAEA,IAAIR,IAAI,CAACK,MAAM,EAAE;MACf,MAAMU,SAAS,GAAG,MAAMzB,kBAAkB,CAACS,QAAQ,EAAEC,IAAI,CAACK,MAAM,EAAEgC,UAAU,CAACrB,QAAQ,CAAC;MACtF,IAAI,CAACD,SAAS,EAAE;QACd,OAAO;UAAER,MAAM,EAAE,GAAG;UAAET,IAAI,EAAE;YAAEU,KAAK,EAAE;UAAyB;QAAE,CAAC;MACnE;IACF;IAEA,MAAM;MAAEC,IAAI,EAAE6B,GAAG;MAAE9B,KAAK,EAAE+B;IAAO,CAAC,GAAG,MAAMxC,QAAQ,CAChDY,IAAI,CAAC,eAAe,CAAC,CACrB6B,MAAM,CAAC;MACNC,OAAO,EAAErC,MAAM;MACfY,QAAQ,EAAEqB,UAAU,CAACrB,QAAQ;MAC7BgB,OAAO;MACPC,OAAO;MACP1B,MAAM,EAAE;IACV,CAAC,CAAC,CACDK,MAAM,CAAC,iCAAiC,CAAC,CACzCE,MAAM,CAAC,CAAC;IAEX,IAAIyB,MAAM,EAAE;MACV,OAAO;QAAEhC,MAAM,EAAE,GAAG;QAAET,IAAI,EAAE;UAAEU,KAAK,EAAE+B,MAAM,CAACX;QAAQ;MAAE,CAAC;IACzD;IAEA,MAAMnC,YAAY,CAACM,QAAQ,EAAEsC,UAAU,CAACrB,QAAQ,EAAEZ,MAAM,EAAE,gBAAgB,EAAE;MAC1E4B,OAAO;MACPU,UAAU,EAAEJ,GAAG,CAACK,EAAE;MAClBC,SAAS,EAAE5C,IAAI,CAACK;IAClB,CAAC,CAAC;IAEF,OAAO;MAAEE,MAAM,EAAE,GAAG;MAAET,IAAI,EAAE;QAAE+B,OAAO,EAAE,IAAI;QAAEG,OAAO,EAAEM;MAAI;IAAE,CAAC;EAC/D;;EAEA;EACA;EACA,MAAMO,WAAW,GAAGjD,QAAQ,CAACM,KAAK,CAAC,qCAAqC,CAAC;EACzE,IAAI2C,WAAW,IAAIhD,MAAM,KAAK,MAAM,EAAE;IACpC,MAAMO,MAAM,GAAGyC,WAAW,CAAC,CAAC,CAAC;IAC7B,IAAI,CAAC7C,IAAI,CAACK,MAAM,IAAI,CAACL,IAAI,CAACM,aAAa,EAAE;MACvC,OAAO;QAAEC,MAAM,EAAE,GAAG;QAAET,IAAI,EAAE;UAAEU,KAAK,EAAE;QAA+B;MAAE,CAAC;IACzE;;IAEA;IACA,MAAM;MAAEC,IAAI,EAAEqC;IAAW,CAAC,GAAG,MAAM/C,QAAQ,CACxCY,IAAI,CAAC,OAAO,CAAC,CACbC,MAAM,CAAC,oBAAoB,CAAC,CAC5BC,EAAE,CAAC,IAAI,EAAET,MAAM,CAAC,CAChBU,MAAM,CAAC,CAAC;IACX,IAAI,CAACgC,UAAU,EAAE;MACf,OAAO;QAAEvC,MAAM,EAAE,GAAG;QAAET,IAAI,EAAE;UAAEU,KAAK,EAAE;QAAiB;MAAE,CAAC;IAC3D;IAEA,IAAIR,IAAI,CAACK,MAAM,EAAE;MACf,MAAMU,SAAS,GAAG,MAAMzB,kBAAkB,CAACS,QAAQ,EAAEC,IAAI,CAACK,MAAM,EAAEyC,UAAU,CAAC9B,QAAQ,CAAC;MACtF,IAAI,CAACD,SAAS,EAAE;QACd,OAAO;UAAER,MAAM,EAAE,GAAG;UAAET,IAAI,EAAE;YAAEU,KAAK,EAAE;UAAyB;QAAE,CAAC;MACnE;IACF;IAEA,MAAMuC,SAAS,GAAGxD,kBAAkB,CAAC,CAAC;IACtC,MAAMyD,OAAO,GAAGxD,UAAU,CAACuD,SAAS,CAAC;IAErC,MAAM;MAAEvC,KAAK,EAAEyC;IAAU,CAAC,GAAG,MAAMlD,QAAQ,CACxCY,IAAI,CAAC,OAAO,CAAC,CACbgB,MAAM,CAAC;MAAEuB,YAAY,EAAEF,OAAO;MAAE9B,UAAU,EAAE,IAAIC,IAAI,CAAC,CAAC,CAACC,WAAW,CAAC;IAAE,CAAC,CAAC,CACvEP,EAAE,CAAC,IAAI,EAAET,MAAM,CAAC;IAEnB,IAAI6C,SAAS,EAAE;MACb,OAAO;QAAE1C,MAAM,EAAE,GAAG;QAAET,IAAI,EAAE;UAAEU,KAAK,EAAEyC,SAAS,CAACrB;QAAQ;MAAE,CAAC;IAC5D;;IAEA;IACA,KAAK,MAAM,CAACuB,IAAI,EAAEC,MAAM,CAAC,IAAI1D,aAAa,EAAE;MAC1C,IAAI0D,MAAM,CAACtB,IAAI,CAACa,EAAE,KAAKvC,MAAM,EAAE;QAC7BV,aAAa,CAAC2D,MAAM,CAACF,IAAI,CAAC;MAC5B;IACF;IAEA,MAAM1D,YAAY,CAACM,QAAQ,EAAE+C,UAAU,CAAC9B,QAAQ,EAAEZ,MAAM,EAAE,aAAa,EAAE;MACvEkD,UAAU,EAAEtD,IAAI,CAACK;IACnB,CAAC,CAAC;IAEF,OAAO;MACLE,MAAM,EAAE,GAAG;MACXT,IAAI,EAAE;QACJ+B,OAAO,EAAE,IAAI;QACb0B,OAAO,EAAER,SAAS;QAClBnB,OAAO,EAAE;MACX;IACF,CAAC;EACH;;EAEA;EACA;EACA,MAAM4B,WAAW,GAAG5D,QAAQ,CAACM,KAAK,CAAC,yBAAyB,CAAC;EAC7D,IAAIsD,WAAW,IAAI3D,MAAM,KAAK,QAAQ,EAAE;IACtC,MAAMO,MAAM,GAAGoD,WAAW,CAAC,CAAC,CAAC;;IAE7B;IACA,MAAM;MAAE/C,IAAI,EAAEqB;IAAK,CAAC,GAAG,MAAM/B,QAAQ,CAClCY,IAAI,CAAC,OAAO,CAAC,CACbC,MAAM,CAAC,oBAAoB,CAAC,CAC5BC,EAAE,CAAC,IAAI,EAAET,MAAM,CAAC,CAChBU,MAAM,CAAC,CAAC;IAEX,IAAI,CAACgB,IAAI,EAAE;MACT,OAAO;QAAEvB,MAAM,EAAE,GAAG;QAAET,IAAI,EAAE;UAAEU,KAAK,EAAE;QAAiB;MAAE,CAAC;IAC3D;IAEA,IAAIR,IAAI,CAACK,MAAM,EAAE;MACf,MAAMU,SAAS,GAAG,MAAMzB,kBAAkB,CAACS,QAAQ,EAAEC,IAAI,CAACK,MAAM,EAAEyB,IAAI,CAACd,QAAQ,CAAC;MAChF,IAAI,CAACD,SAAS,EAAE;QACd,OAAO;UAAER,MAAM,EAAE,GAAG;UAAET,IAAI,EAAE;YAAEU,KAAK,EAAE;UAAyB;QAAE,CAAC;MACnE;IACF;IAEA,MAAMf,YAAY,CAACM,QAAQ,EAAE+B,IAAI,CAACd,QAAQ,EAAEZ,MAAM,EAAE,SAAS,EAAE;MAC7DiB,IAAI,EAAES,IAAI,CAACT,IAAI;MACfoC,UAAU,EAAEzD,IAAI,CAACK;IACnB,CAAC,CAAC;IAEF,MAAM;MAAEG;IAAM,CAAC,GAAG,MAAMT,QAAQ,CAACY,IAAI,CAAC,OAAO,CAAC,CAAC0C,MAAM,CAAC,CAAC,CAACxC,EAAE,CAAC,IAAI,EAAET,MAAM,CAAC;IACxE,IAAII,KAAK,EAAE;MACT,OAAO;QAAED,MAAM,EAAE,GAAG;QAAET,IAAI,EAAE;UAAEU,KAAK,EAAEA,KAAK,CAACoB;QAAQ;MAAE,CAAC;IACxD;IAEA,OAAO;MAAErB,MAAM,EAAE,GAAG;MAAET,IAAI,EAAE;QAAE+B,OAAO,EAAE,IAAI;QAAE6B,OAAO,EAAEtD;MAAO;IAAE,CAAC;EAClE;EACA,OAAO,IAAI;AACb","ignoreList":[]}

package/dist/server/handlers/nodes-routes-delivery.d.ts

@@ -0,0 +1,9 @@
+import type { SupabaseClient } from "@supabase/supabase-js";
+export declare function handleDeliveryRoutes(pathname: string, method: string, body: Record<string, unknown> | null, supabase: SupabaseClient, auth: {
+    userId?: string;
+    isServiceRole: boolean;
+    rawToken: string;
+}, queryParams?: URLSearchParams): Promise<{
+    status: number;
+    body: Record<string, unknown>;
+} | null>;