xytara 1.0.0

package/server.js

@@ -0,0 +1,626 @@
+"use strict";
+
+const http = require("http");
+const { URL } = require("url");
+const { readJsonBody, sendJson } = require("./lib/http_transport");
+const {
+  getCatalog,
+  getTaskDetail,
+  getWorkflowDetail,
+  getWorkflowList,
+  summarizeCatalog
+} = require("./lib/catalog_contract");
+const {
+  createCommandResult,
+  createDispute,
+  createQuote,
+  createRefund,
+  createRemediationTicket,
+  createRuntimeState,
+  hydrateQuoteStates,
+  hydratePendingExecutions,
+  actOnDispute,
+  actOnRefund,
+  actOnRemediationTicket,
+  listRecords
+} = require("./lib/commerce_runtime");
+const {
+  buildOperatorExportPack,
+  buildReconciliationReport
+} = require("./lib/commerce_reports");
+const {
+  summarizeOpenIssuesPayload,
+  summarizeExecutionExceptionsPayload,
+  summarizeOperationsDashboardPayload,
+  summarizeDisputePayload,
+  summarizeRefundPayload,
+  summarizeRemediationTicketPayload,
+  summarizeTransactionPayload,
+  summarizeReceiptPayload,
+  summarizeDeliveryPayload
+} = require("./lib/commerce_client");
+const {
+  buildMissingResponse,
+  buildNamedRecordListResponse,
+  buildNamedRecordResponse
+} = require("./lib/resource_views");
+const {
+  buildTaskDetailResponse,
+  buildWorkflowDetailResponse,
+  buildWorkflowListResponse
+} = require("./lib/catalog_views");
+const {
+  getDecodedActionTargetId,
+  getDecodedSuffixId,
+  getQueryFilters
+} = require("./lib/route_params");
+const {
+  isDisputeActionPath,
+  isDisputeDetailPath,
+  isRefundActionPath,
+  isRefundDetailPath,
+  isRemediationTicketActionPath,
+  isRemediationTicketDetailPath
+} = require("./lib/route_matchers");
+const { executeCommandRequest } = require("./lib/command_flow");
+
+const state = createRuntimeState();
+
+function buildNamedTaskPayload(taskRef, body, fallbackCommand) {
+  const requestBody = body && typeof body === "object" && !Array.isArray(body) ? body : {};
+  return {
+    command: requestBody.command || fallbackCommand,
+    task_ref: taskRef,
+    body: requestBody.body && typeof requestBody.body === "object" && !Array.isArray(requestBody.body)
+      ? requestBody.body
+      : requestBody,
+    callback_url: requestBody.callback_url || null,
+    account_id: requestBody.account_id || null,
+    defer_completion: requestBody.defer_completion === true,
+    quote_id: requestBody.quote_id || null,
+    settlement_mode: requestBody.settlement_mode || null,
+    settlement_preference: requestBody.settlement_preference || null,
+    settlement: requestBody.settlement || null
+  };
+}
+
+function listTransactionRecords(filters) {
+  const transactions = Array.from(state.transactions.values()).map((item) => item.transaction);
+  return listRecords(new Map(transactions.map((item) => [item.transaction_id, item])), filters);
+}
+
+function listReceiptRecords(filters) {
+  const receipts = Array.from(state.receipts.values()).map((item) => item.receipt);
+  return listRecords(new Map(receipts.map((item) => [item.receipt_id, item])), filters);
+}
+
+function listPaymentQuoteRecords(filters) {
+  return listRecords(state.quotes, filters);
+}
+
+function buildOperationsDashboard(filters) {
+  const disputes = listRecords(state.disputes, filters);
+  const refunds = listRecords(state.refunds, filters);
+  const remediationTickets = listRecords(state.remediationTickets, filters);
+  const transactions = listTransactionRecords(filters);
+  const receipts = listReceiptRecords(filters);
+  const deliveries = listRecords(state.deliveries, filters);
+  return summarizeOperationsDashboardPayload({
+    open_issues: {
+      disputes,
+      refunds,
+      remediation_tickets: remediationTickets
+    },
+    execution_exceptions: {
+      transactions,
+      receipts,
+      deliveries,
+      remediation_tickets: remediationTickets
+    }
+  });
+}
+
+function buildAttentionRecords(filters) {
+  const dashboard = buildOperationsDashboard(filters);
+  const refs = dashboard && dashboard.attention_refs ? dashboard.attention_refs : {};
+  const disputes = (Array.isArray(refs.dispute_ids) ? refs.dispute_ids : [])
+    .map((id) => summarizeDisputePayload(state.disputes.get(id)))
+    .filter((entry) => entry && entry.dispute_id);
+  const refunds = (Array.isArray(refs.refund_ids) ? refs.refund_ids : [])
+    .map((id) => summarizeRefundPayload(state.refunds.get(id)))
+    .filter((entry) => entry && entry.refund_id);
+  const remediationTickets = (Array.isArray(refs.ticket_ids) ? refs.ticket_ids : [])
+    .map((id) => summarizeRemediationTicketPayload(state.remediationTickets.get(id)))
+    .filter((entry) => entry && entry.ticket_id);
+  const transactions = (Array.isArray(refs.transaction_ids) ? refs.transaction_ids : [])
+    .map((id) => summarizeTransactionPayload(state.transactions.get(id)))
+    .filter((entry) => entry && entry.transaction_id);
+  const receipts = (Array.isArray(refs.receipt_ids) ? refs.receipt_ids : [])
+    .map((id) => summarizeReceiptPayload(state.receipts.get(id)))
+    .filter((entry) => entry && entry.receipt_id);
+  const deliveries = (Array.isArray(refs.delivery_ids) ? refs.delivery_ids : [])
+    .map((id) => summarizeDeliveryPayload(state.deliveries.get(id)))
+    .filter((entry) => entry && entry.delivery_id);
+  return {
+    dashboard,
+    disputes,
+    refunds,
+    remediation_tickets: remediationTickets,
+    transactions,
+    receipts,
+    deliveries
+  };
+}
+
+async function routeRequest(req, res) {
+  const url = new URL(req.url, "http://127.0.0.1");
+  hydrateQuoteStates(state);
+  hydratePendingExecutions(state);
+
+  if (req.method === "GET" && url.pathname === "/health") {
+    sendJson(res, 200, {
+      status: "ok",
+      service: "xytara",
+      readiness: "ready"
+    });
+    return;
+  }
+
+  if (req.method === "GET" && url.pathname === "/v1/catalog") {
+    sendJson(res, 200, getCatalog());
+    return;
+  }
+
+  if (req.method === "GET" && url.pathname === "/v1/catalog/summary") {
+    sendJson(res, 200, summarizeCatalog());
+    return;
+  }
+
+  if (req.method === "GET" && url.pathname === "/v1/catalog/task") {
+    const response = buildTaskDetailResponse(getTaskDetail(url.searchParams.get("ref")));
+    sendJson(res, response.status, response.payload);
+    return;
+  }
+
+  if (req.method === "GET" && url.pathname === "/v1/catalog/workflows") {
+    const response = buildWorkflowListResponse(getWorkflowList());
+    sendJson(res, response.status, response.payload);
+    return;
+  }
+
+  if (req.method === "GET" && url.pathname === "/v1/catalog/workflow") {
+    const response = buildWorkflowDetailResponse(getWorkflowDetail(url.searchParams.get("ref")));
+    sendJson(res, response.status, response.payload);
+    return;
+  }
+
+  if (req.method === "POST" && url.pathname === "/v1/payment-quotes") {
+    const body = await readJsonBody(req);
+    sendJson(res, 200, { ok: true, quote: createQuote(state, body) });
+    return;
+  }
+
+  if (req.method === "POST" && url.pathname === "/v1/admission/preview") {
+    const body = await readJsonBody(req);
+    const result = executeCommandRequest(state, buildNamedTaskPayload("admission.preview", body, "admission.preview"), req.headers);
+    sendJson(res, result.status, result.payload);
+    return;
+  }
+
+  if (req.method === "POST" && url.pathname === "/v1/trust/handoffs/emit") {
+    const body = await readJsonBody(req);
+    const result = executeCommandRequest(state, buildNamedTaskPayload("trust.handoff.emit", body, "trust.handoff.emit"), req.headers);
+    sendJson(res, result.status, result.payload);
+    return;
+  }
+
+  if (req.method === "POST" && url.pathname === "/v1/trust/handoffs/validate") {
+    const body = await readJsonBody(req);
+    const result = executeCommandRequest(state, buildNamedTaskPayload("trust.handoff.validate", body, "trust.handoff.validate"), req.headers);
+    sendJson(res, result.status, result.payload);
+    return;
+  }
+
+  if (req.method === "POST" && url.pathname === "/v1/execution-receipts/handoffs/emit") {
+    const body = await readJsonBody(req);
+    const result = executeCommandRequest(state, buildNamedTaskPayload("execution_receipt.handoff.emit", body, "execution_receipt.handoff.emit"), req.headers);
+    sendJson(res, result.status, result.payload);
+    return;
+  }
+
+  if (req.method === "POST" && url.pathname === "/v1/execution-receipts/handoffs/validate") {
+    const body = await readJsonBody(req);
+    const result = executeCommandRequest(state, buildNamedTaskPayload("execution_receipt.handoff.validate", body, "execution_receipt.handoff.validate"), req.headers);
+    sendJson(res, result.status, result.payload);
+    return;
+  }
+
+  if (req.method === "POST" && url.pathname === "/v1/receipt-ledger/handoffs/emit") {
+    const body = await readJsonBody(req);
+    const result = executeCommandRequest(state, buildNamedTaskPayload("receipt_ledger.handoff.emit", body, "receipt_ledger.handoff.emit"), req.headers);
+    sendJson(res, result.status, result.payload);
+    return;
+  }
+
+  if (req.method === "POST" && url.pathname === "/v1/receipt-ledger/handoffs/validate") {
+    const body = await readJsonBody(req);
+    const result = executeCommandRequest(state, buildNamedTaskPayload("receipt_ledger.handoff.validate", body, "receipt_ledger.handoff.validate"), req.headers);
+    sendJson(res, result.status, result.payload);
+    return;
+  }
+
+  if (req.method === "POST" && url.pathname === "/v1/runtime/emit") {
+    const body = await readJsonBody(req);
+    const result = executeCommandRequest(state, buildNamedTaskPayload("runtime.emit", body, "runtime.emit"), req.headers);
+    sendJson(res, result.status, result.payload);
+    return;
+  }
+
+  if (req.method === "POST" && url.pathname === "/v1/runtime/anchor") {
+    const body = await readJsonBody(req);
+    const result = executeCommandRequest(state, buildNamedTaskPayload("runtime.anchor", body, "runtime.anchor"), req.headers);
+    sendJson(res, result.status, result.payload);
+    return;
+  }
+
+  if (req.method === "POST" && url.pathname === "/v1/runtime/emit-anchor") {
+    const body = await readJsonBody(req);
+    const result = executeCommandRequest(state, buildNamedTaskPayload("runtime.emit_anchor", body, "runtime.emit_anchor"), req.headers);
+    sendJson(res, result.status, result.payload);
+    return;
+  }
+
+  if (req.method === "POST" && url.pathname === "/v1/registry/register") {
+    const body = await readJsonBody(req);
+    const result = executeCommandRequest(state, buildNamedTaskPayload("registry.register", body, "registry.register"), req.headers);
+    sendJson(res, result.status, result.payload);
+    return;
+  }
+
+  if (req.method === "POST" && url.pathname === "/v1/anchoring/submit") {
+    const body = await readJsonBody(req);
+    const result = executeCommandRequest(state, buildNamedTaskPayload("anchoring.submit", body, "anchoring.submit"), req.headers);
+    sendJson(res, result.status, result.payload);
+    return;
+  }
+
+  if (req.method === "POST" && url.pathname === "/v1/mcp/tools/invoke") {
+    const body = await readJsonBody(req);
+    const payload = {
+      command: body.command || `mcp.invoke:${body.tool_name || "tool"}`,
+      task_ref: "adapter.mcp.invoke",
+      body: {
+        tool_name: body.tool_name || null,
+        arguments: body.arguments && typeof body.arguments === "object" && !Array.isArray(body.arguments)
+          ? body.arguments
+          : {}
+      },
+      callback_url: body.callback_url || null
+    };
+    const result = executeCommandRequest(state, payload, req.headers);
+    sendJson(res, result.status, result.payload);
+    return;
+  }
+
+  if (req.method === "GET" && url.pathname === "/v1/payment-quotes") {
+    sendJson(
+      res,
+      200,
+      buildNamedRecordListResponse("quotes", listPaymentQuoteRecords(getQueryFilters(url))).payload
+    );
+    return;
+  }
+
+  if (req.method === "GET" && url.pathname.startsWith("/v1/payment-quotes/")) {
+    const quoteId = getDecodedSuffixId(url.pathname, "/v1/payment-quotes/");
+    const response = buildNamedRecordResponse("quote", state.quotes.get(quoteId), "quote_not_found");
+    sendJson(res, response.status, response.payload);
+    return;
+  }
+
+  if (req.method === "POST" && url.pathname === "/v1/commands/execute") {
+    const body = await readJsonBody(req);
+    const result = executeCommandRequest(state, body, req.headers);
+    sendJson(res, result.status, result.payload);
+    return;
+  }
+
+  if (req.method === "POST" && url.pathname === "/x402/commands/execute") {
+    const body = await readJsonBody(req);
+    if (!req.headers["payment-signature"]) {
+      const quote = createQuote(state, body);
+      sendJson(res, 402, {
+        ok: false,
+        payment_required: {
+          scheme: "exact",
+          quote
+        }
+      });
+      return;
+    }
+
+    const quote = body.quote_id && state.quotes.get(body.quote_id)
+      ? state.quotes.get(body.quote_id)
+      : createQuote(state, body);
+
+    if (quote && quote.status === "expired") {
+      sendJson(res, 409, {
+        ok: false,
+        reason: "quote_expired",
+        quote
+      });
+      return;
+    }
+
+    sendJson(res, 200, createCommandResult(state, body, quote));
+    return;
+  }
+
+  if (req.method === "POST" && url.pathname === "/x402/mcp/tools/invoke") {
+    const body = await readJsonBody(req);
+    const payload = {
+      account_id: body.account_id || null,
+      command: body.command || `mcp.invoke:${body.tool_name || "tool"}`,
+      task_ref: "adapter.mcp.invoke",
+      body: {
+        tool_name: body.tool_name || null,
+        arguments: body.arguments && typeof body.arguments === "object" && !Array.isArray(body.arguments)
+          ? body.arguments
+          : {}
+      },
+      callback_url: body.callback_url || null
+    };
+    if (!req.headers["payment-signature"]) {
+      const quote = createQuote(state, payload);
+      sendJson(res, 402, {
+        ok: false,
+        payment_required: {
+          scheme: "exact",
+          quote
+        }
+      });
+      return;
+    }
+
+    const quote = body.quote_id && state.quotes.get(body.quote_id)
+      ? state.quotes.get(body.quote_id)
+      : createQuote(state, payload);
+
+    if (quote && quote.status === "expired") {
+      sendJson(res, 409, {
+        ok: false,
+        reason: "quote_expired",
+        quote
+      });
+      return;
+    }
+
+    sendJson(res, 200, createCommandResult(state, payload, quote));
+    return;
+  }
+
+  if (req.method === "GET" && url.pathname === "/v1/governed-transactions") {
+    sendJson(
+      res,
+      200,
+      buildNamedRecordListResponse("transactions", listTransactionRecords(getQueryFilters(url))).payload
+    );
+    return;
+  }
+
+  if (req.method === "GET" && url.pathname.startsWith("/v1/governed-transactions/")) {
+    const transactionId = getDecodedSuffixId(url.pathname, "/v1/governed-transactions/");
+    const result = state.transactions.get(transactionId);
+    const response = result || buildMissingResponse("transaction_not_found");
+    sendJson(res, response.status || 200, response.payload || response);
+    return;
+  }
+
+  if (req.method === "GET" && url.pathname === "/v1/receipts") {
+    sendJson(
+      res,
+      200,
+      buildNamedRecordListResponse("receipts", listReceiptRecords(getQueryFilters(url))).payload
+    );
+    return;
+  }
+
+  if (req.method === "GET" && url.pathname.startsWith("/v1/receipts/")) {
+    const receiptId = getDecodedSuffixId(url.pathname, "/v1/receipts/");
+    const result = state.receipts.get(receiptId);
+    const response = result || buildMissingResponse("receipt_not_found");
+    sendJson(res, response.status || 200, response.payload || response);
+    return;
+  }
+
+  if (req.method === "GET" && url.pathname === "/v1/payment-ledger") {
+    const paymentLedger = Array.isArray(state.paymentLedger) ? state.paymentLedger : [];
+    sendJson(
+      res,
+      200,
+      buildNamedRecordListResponse(
+        "payment_ledger",
+        listRecords(new Map(paymentLedger.map((item) => [item.payment_id, item])), getQueryFilters(url))
+      ).payload
+    );
+    return;
+  }
+
+  if (req.method === "GET" && url.pathname.startsWith("/v1/payment-ledger/")) {
+    const paymentId = getDecodedSuffixId(url.pathname, "/v1/payment-ledger/");
+    const paymentLedger = Array.isArray(state.paymentLedger) ? state.paymentLedger : [];
+    const payment = paymentLedger.find((item) => item && item.payment_id === paymentId);
+    const response = buildNamedRecordResponse("payment", payment, "payment_not_found");
+    sendJson(res, response.status, response.payload);
+    return;
+  }
+
+  if (req.method === "GET" && url.pathname === "/v1/deliveries") {
+    sendJson(
+      res,
+      200,
+      buildNamedRecordListResponse("deliveries", listRecords(state.deliveries, getQueryFilters(url))).payload
+    );
+    return;
+  }
+
+  if (req.method === "GET" && url.pathname.startsWith("/v1/deliveries/")) {
+    const deliveryId = getDecodedSuffixId(url.pathname, "/v1/deliveries/");
+    const response = buildNamedRecordResponse("delivery", state.deliveries.get(deliveryId), "delivery_not_found");
+    sendJson(res, response.status, response.payload);
+    return;
+  }
+
+  if (req.method === "GET" && url.pathname === "/v1/disputes") {
+    sendJson(
+      res,
+      200,
+      buildNamedRecordListResponse("disputes", listRecords(state.disputes, getQueryFilters(url))).payload
+    );
+    return;
+  }
+
+  if (req.method === "POST" && url.pathname === "/v1/disputes") {
+    const body = await readJsonBody(req);
+    sendJson(res, 200, {
+      ok: true,
+      dispute: createDispute(state, body)
+    });
+    return;
+  }
+
+  if (req.method === "GET" && isDisputeDetailPath(url.pathname)) {
+    const disputeId = getDecodedSuffixId(url.pathname, "/v1/disputes/");
+    const response = buildNamedRecordResponse("dispute", state.disputes.get(disputeId), "dispute_not_found");
+    sendJson(res, response.status, response.payload);
+    return;
+  }
+
+  if (req.method === "POST" && isDisputeActionPath(url.pathname)) {
+    const disputeId = getDecodedActionTargetId(url.pathname, "/v1/disputes/");
+    const body = await readJsonBody(req);
+    const response = buildNamedRecordResponse("dispute", actOnDispute(state, disputeId, body), "dispute_not_found");
+    sendJson(res, response.status, response.payload);
+    return;
+  }
+
+  if (req.method === "GET" && url.pathname === "/v1/refunds") {
+    sendJson(
+      res,
+      200,
+      buildNamedRecordListResponse("refunds", listRecords(state.refunds, getQueryFilters(url))).payload
+    );
+    return;
+  }
+
+  if (req.method === "POST" && url.pathname === "/v1/refunds") {
+    const body = await readJsonBody(req);
+    sendJson(res, 200, {
+      ok: true,
+      refund: createRefund(state, body)
+    });
+    return;
+  }
+
+  if (req.method === "GET" && isRefundDetailPath(url.pathname)) {
+    const refundId = getDecodedSuffixId(url.pathname, "/v1/refunds/");
+    const response = buildNamedRecordResponse("refund", state.refunds.get(refundId), "refund_not_found");
+    sendJson(res, response.status, response.payload);
+    return;
+  }
+
+  if (req.method === "POST" && isRefundActionPath(url.pathname)) {
+    const refundId = getDecodedActionTargetId(url.pathname, "/v1/refunds/");
+    const body = await readJsonBody(req);
+    const response = buildNamedRecordResponse("refund", actOnRefund(state, refundId, body), "refund_not_found");
+    sendJson(res, response.status, response.payload);
+    return;
+  }
+
+  if (req.method === "POST" && url.pathname === "/v1/remediation-tickets") {
+    const body = await readJsonBody(req);
+    sendJson(res, 200, {
+      ok: true,
+      remediation_ticket: createRemediationTicket(state, body)
+    });
+    return;
+  }
+
+  if (req.method === "GET" && url.pathname === "/v1/remediation-tickets") {
+    sendJson(
+      res,
+      200,
+      buildNamedRecordListResponse(
+        "remediation_tickets",
+        listRecords(state.remediationTickets, getQueryFilters(url))
+      ).payload
+    );
+    return;
+  }
+
+  if (req.method === "GET" && isRemediationTicketDetailPath(url.pathname)) {
+    const ticketId = getDecodedSuffixId(url.pathname, "/v1/remediation-tickets/");
+    const response = buildNamedRecordResponse(
+      "remediation_ticket",
+      state.remediationTickets.get(ticketId),
+      "remediation_ticket_not_found"
+    );
+    sendJson(res, response.status, response.payload);
+    return;
+  }
+
+  if (req.method === "POST" && isRemediationTicketActionPath(url.pathname)) {
+    const ticketId = getDecodedActionTargetId(url.pathname, "/v1/remediation-tickets/");
+    const body = await readJsonBody(req);
+    const response = buildNamedRecordResponse(
+      "remediation_ticket",
+      actOnRemediationTicket(state, ticketId, body),
+      "remediation_ticket_not_found"
+    );
+    sendJson(res, response.status, response.payload);
+    return;
+  }
+
+  if (req.method === "GET" && url.pathname === "/v1/reconciliation-report") {
+    sendJson(res, 200, buildReconciliationReport(state, getQueryFilters(url), listRecords));
+    return;
+  }
+
+  if (req.method === "GET" && url.pathname === "/v1/operator-export-pack") {
+    sendJson(res, 200, buildOperatorExportPack(state, getQueryFilters(url), listRecords));
+    return;
+  }
+
+  if (req.method === "GET" && url.pathname === "/v1/operations/dashboard") {
+    sendJson(res, 200, buildOperationsDashboard(getQueryFilters(url)));
+    return;
+  }
+
+  if (req.method === "GET" && url.pathname === "/v1/operations/attention-records") {
+    sendJson(res, 200, buildAttentionRecords(getQueryFilters(url)));
+    return;
+  }
+
+  sendJson(res, 404, { ok: false, reason: "not_found", path: url.pathname });
+}
+
+function createServer() {
+  return http.createServer((req, res) => {
+    routeRequest(req, res).catch((error) => {
+      sendJson(res, 500, { ok: false, reason: error.message });
+    });
+  });
+}
+
+if (require.main === module) {
+  const port = Number(process.env.XYTARA_PORT || 4320);
+  const host = process.env.XYTARA_HOST || "127.0.0.1";
+  const server = createServer();
+  server.listen(port, host, () => {
+    console.log(`xytara listening on http://${host}:${port}`);
+  });
+}
+
+module.exports = {
+  createServer
+};