@airdraft/cloud 0.1.0

package/dist/team.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"team.js","sourceRoot":"","sources":["../src/team.ts"],"names":[],"mappings":"AAGA,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,SAAS,IAAI,CAAC,IAAa,EAAE,MAAM,GAAG,GAAG;IACvC,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE;QACxC,MAAM;QACN,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;KAChD,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,GAAG,CAAC,IAAY,EAAE,OAAe,EAAE,MAAc;IACxD,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,CAAA;AACnD,CAAC;AAED,8EAA8E;AAC9E,kBAAkB;AAClB,8EAA8E;AAE9E;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,GAAY,EACZ,EAAW,EACX,IAAsB;IAEtB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAA;IAC9C,IAAI,CAAC,QAAQ;QAAE,OAAO,GAAG,CAAC,cAAc,EAAE,mBAAmB,EAAE,GAAG,CAAC,CAAA;IAEnE,MAAM,WAAW,GAAG,MAAM,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAA;IACpF,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;IAEhD,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAA;IAC5C,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,KAAK;SACzB,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,QAAQ,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC;SAC7D,OAAO,EAAE,CAAA;IAEZ,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;AAC9B,CAAC;AAED,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,GAAY,EACZ,EAAW,EACX,IAAsB;IAEtB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAA;IAC9C,IAAI,CAAC,QAAQ;QAAE,OAAO,GAAG,CAAC,cAAc,EAAE,mBAAmB,EAAE,GAAG,CAAC,CAAA;IAEnE,IAAI,IAAwB,CAAA;IAC5B,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC,cAAc,EAAE,2BAA2B,EAAE,GAAG,CAAC,CAAA;IAC9D,CAAC;IAED,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;IAClE,IAAI,CAAC,IAAI;QAAE,OAAO,GAAG,CAAC,cAAc,EAAE,uBAAuB,EAAE,GAAG,CAAC,CAAA;IAEnE,mCAAmC;IACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAA;IACrF,IAAI,CAAC,QAAQ;QAAE,OAAO,GAAG,CAAC,cAAc,EAAE,gDAAgD,EAAE,GAAG,CAAC,CAAA;IAEhG,yBAAyB;IACzB,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAA;IAC3D,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,QAAQ,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAA;IAE3E,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAA;IACtB,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAA;IAC5C,MAAM,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAA;IAE7B,MAAM,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;QACvB,GAAG,EAAE,MAAM;QACX,IAAI;QACJ,IAAI;QACJ,OAAO,EAAE,QAAQ,CAAC,MAAM;QACxB,QAAQ,EAAE,MAAM;QAChB,SAAS,EAAE,GAAG;KACf,CAAC,CAAA;IAEF,MAAM,EAAE,CAAC,WAAW,CAAC,SAAS,CAAC;QAC7B,GAAG,EAAE,IAAI,QAAQ,EAAE;QACnB,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE;QACzB,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,IAAI,EAAE,OAAO;QACb,SAAS,EAAE,GAAG;KACf,CAAC,CAAA;IAEF,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAA;IACpD,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,CAAA;AAClC,CAAC;AAED,8EAA8E;AAC9E,gBAAgB;AAChB,8EAA8E;AAE9E;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,GAAY,EACZ,EAAW,EACX,IAAsB,EACtB,QAAgB;IAEhB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAA;IAC9C,IAAI,CAAC,QAAQ;QAAE,OAAO,GAAG,CAAC,cAAc,EAAE,mBAAmB,EAAE,GAAG,CAAC,CAAA;IAEnE,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAA;IACvD,IAAI,CAAC,IAAI;QAAE,OAAO,GAAG,CAAC,gBAAgB,EAAE,gBAAgB,EAAE,GAAG,CAAC,CAAA;IAE9D,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC;QAC9C,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE;QAC3B,MAAM,EAAE,QAAQ,CAAC,MAAM;KACxB,CAAC,CAAA;IACF,IAAI,CAAC,UAAU;QAAE,OAAO,GAAG,CAAC,WAAW,EAAE,2BAA2B,EAAE,GAAG,CAAC,CAAA;IAE1E,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;AAC7B,CAAC;AAED,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,GAAY,EACZ,EAAW,EACX,IAAsB,EACtB,QAAgB;IAEhB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAA;IAC9C,IAAI,CAAC,QAAQ;QAAE,OAAO,GAAG,CAAC,cAAc,EAAE,mBAAmB,EAAE,GAAG,CAAC,CAAA;IAEnE,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAA;IACvD,IAAI,CAAC,IAAI;QAAE,OAAO,GAAG,CAAC,gBAAgB,EAAE,gBAAgB,EAAE,GAAG,CAAC,CAAA;IAE9D,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC;QAC9C,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE;QAC3B,MAAM,EAAE,QAAQ,CAAC,MAAM;KACxB,CAAC,CAAA;IACF,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACjE,OAAO,GAAG,CAAC,WAAW,EAAE,8BAA8B,EAAE,GAAG,CAAC,CAAA;IAC9D,CAAC;IAED,IAAI,IAAwB,CAAA;IAC5B,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC,cAAc,EAAE,2BAA2B,EAAE,GAAG,CAAC,CAAA;IAC9D,CAAC;IAED,MAAM,OAAO,GAA8B,EAAE,CAAA;IAC7C,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;QACtD,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAA;IACjC,CAAC;IAED,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtC,OAAO,GAAG,CAAC,YAAY,EAAE,2BAA2B,EAAE,GAAG,CAAC,CAAA;IAC5D,CAAC;IAED,MAAM,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAA;IAC9D,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAA;IACzD,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAA;AAChC,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,161 @@
+import type { ObjectId, Collection } from 'mongodb';
+/**
+ * A GitHub App installation connection on a project.
+ * Stored as a sub-document on `ProjectDoc.github`.
+ */
+export interface GitHubConnection {
+    installationId: number;
+    /** "owner/repo" */
+    repo: string;
+    /** Write branch — one per project in v1. */
+    branch: string;
+    connectedAt: Date;
+    /** userId of the admin who initiated the connection. */
+    connectedBy: string;
+}
+/** Projects collection — one per team repository connection. */
+export interface ProjectDoc {
+    _id: ObjectId;
+    teamId: string;
+    name: string;
+    slug: string;
+    /** SHA-256 hash of the project API key (`ntk_*`). null = no key generated yet. */
+    apiKeyHash: string | null;
+    /** null = GitHub App not yet connected. */
+    github: GitHubConnection | null;
+    createdAt: Date;
+    updatedAt: Date;
+}
+/** Teams collection — an org/workspace that owns projects and members. */
+export interface TeamDoc {
+    _id: ObjectId;
+    name: string;
+    slug: string;
+    /** userId of the team creator. */
+    ownerId: string;
+    /** Slug referencing a PlanDoc (e.g. 'free', 'pro', 'team'). */
+    planSlug: string;
+    /** @untools/pay wallet ID for this team. Set on first billing event. */
+    walletId?: string;
+    createdAt: Date;
+}
+/** Memberships collection — links a user to a team with a role. */
+export interface MembershipDoc {
+    _id: ObjectId;
+    teamId: string;
+    userId: string;
+    role: 'owner' | 'admin' | 'editor' | 'viewer';
+    createdAt: Date;
+}
+/** Invites collection — pending email invitations to join a team. */
+export interface InviteDoc {
+    _id: ObjectId;
+    teamId: string;
+    email: string;
+    role: 'admin' | 'editor' | 'viewer';
+    /** userId of the member who sent the invite. */
+    invitedBy: string;
+    /** Single-use random token embedded in the invite email link. */
+    token: string;
+    expiresAt: Date;
+    createdAt: Date;
+}
+/** Custom domains collection — maps `content.yoursite.com` to a project. */
+export interface CustomDomainDoc {
+    _id: ObjectId;
+    projectId: string;
+    /** Full hostname, e.g. `content.yoursite.com`. */
+    hostname: string;
+    /** Cloudflare Custom Hostname ID for SSL provisioning. */
+    cfHostnameId?: string;
+    /** 'pending' | 'active' | 'error' */
+    status: 'pending' | 'active' | 'error';
+    createdAt: Date;
+    verifiedAt?: Date;
+}
+/**
+ * Plans collection — billing plan definitions. Never hard-coded in source.
+ * Managed via cloud admin or seeded on deploy.
+ */
+export interface PlanDoc {
+    _id: ObjectId;
+    slug: string;
+    displayName: string;
+    /** Price in minor units (e.g. kobo, cents). 0 = free. */
+    priceMonthly: number;
+    currency: string;
+    /** Numeric limits. -1 = unlimited. Keys match checkLimit() usage. */
+    limits: Record<string, number>;
+    /** Feature flags/values. Keys match checkFeature() usage. */
+    features: Record<string, boolean | number>;
+    isActive: boolean;
+    createdAt: Date;
+}
+/**
+ * Embed tokens collection — short-lived, origin-restricted tokens issued to
+ * allow embedding a project's editor in an iframe or Web Component.
+ * Stored so they can be revoked before expiry.
+ */
+export interface EmbedTokenDoc {
+    _id: ObjectId;
+    projectId: string;
+    /** SHA-256 hash of the plaintext embed token. */
+    tokenHash: string;
+    allowedOrigin: string;
+    expiresAt: Date;
+    createdAt: Date;
+    /** userId who issued the token. */
+    issuedBy: string;
+}
+/**
+ * Audit event record persisted by `withAuditLog` when a MongoDB persister
+ * is configured. Mirrors the `AuditEvent` shape from `@airdraft/core`.
+ */
+export interface AuditEventDoc {
+    _id: ObjectId;
+    projectId: string;
+    requestId: string;
+    timestamp: string;
+    durationMs: number;
+    method: string;
+    path: string;
+    action: string;
+    collection?: string;
+    slug?: string;
+    statusCode: number;
+    actor?: string;
+    request?: Record<string, unknown>;
+    response?: Record<string, unknown>;
+    error?: {
+        message: string;
+        code?: string;
+    };
+}
+/**
+ * Typed handle to all Airdraft Cloud MongoDB collections.
+ * Obtained via `createCloudDb()`.
+ */
+export interface CloudDb {
+    projects: Collection<ProjectDoc>;
+    teams: Collection<TeamDoc>;
+    memberships: Collection<MembershipDoc>;
+    invites: Collection<InviteDoc>;
+    plans: Collection<PlanDoc>;
+    customDomains: Collection<CustomDomainDoc>;
+    embedTokens: Collection<EmbedTokenDoc>;
+    /** Audit events persisted by the CMS runtime audit log plugin. */
+    auditEvents: Collection<AuditEventDoc>;
+}
+/**
+ * Pluggable token cache for GitHub installation access tokens.
+ * The default production implementation uses Upstash Redis (HTTP REST).
+ * Any object implementing this interface can be used (in-memory, Redis, etc.).
+ *
+ * Cache keys follow the pattern `github:token:{installationId}`.
+ */
+export interface TokenCache {
+    get(key: string): Promise<string | null>;
+    set(key: string, value: string, ttlSeconds: number): Promise<void>;
+    del(key: string): Promise<void>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AAMnD;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,cAAc,EAAE,MAAM,CAAA;IACtB,mBAAmB;IACnB,IAAI,EAAE,MAAM,CAAA;IACZ,4CAA4C;IAC5C,MAAM,EAAE,MAAM,CAAA;IACd,WAAW,EAAE,IAAI,CAAA;IACjB,wDAAwD;IACxD,WAAW,EAAE,MAAM,CAAA;CACpB;AAED,gEAAgE;AAChE,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE,QAAQ,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,kFAAkF;IAClF,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,2CAA2C;IAC3C,MAAM,EAAE,gBAAgB,GAAG,IAAI,CAAA;IAC/B,SAAS,EAAE,IAAI,CAAA;IACf,SAAS,EAAE,IAAI,CAAA;CAChB;AAED,0EAA0E;AAC1E,MAAM,WAAW,OAAO;IACtB,GAAG,EAAE,QAAQ,CAAA;IACb,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,kCAAkC;IAClC,OAAO,EAAE,MAAM,CAAA;IACf,+DAA+D;IAC/D,QAAQ,EAAE,MAAM,CAAA;IAChB,wEAAwE;IACxE,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,IAAI,CAAA;CAChB;AAED,mEAAmE;AACnE,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,QAAQ,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,OAAO,GAAG,OAAO,GAAG,QAAQ,GAAG,QAAQ,CAAA;IAC7C,SAAS,EAAE,IAAI,CAAA;CAChB;AAED,qEAAqE;AACrE,MAAM,WAAW,SAAS;IACxB,GAAG,EAAE,QAAQ,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,OAAO,GAAG,QAAQ,GAAG,QAAQ,CAAA;IACnC,gDAAgD;IAChD,SAAS,EAAE,MAAM,CAAA;IACjB,iEAAiE;IACjE,KAAK,EAAE,MAAM,CAAA;IACb,SAAS,EAAE,IAAI,CAAA;IACf,SAAS,EAAE,IAAI,CAAA;CAChB;AAED,4EAA4E;AAC5E,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,QAAQ,CAAA;IACb,SAAS,EAAE,MAAM,CAAA;IACjB,kDAAkD;IAClD,QAAQ,EAAE,MAAM,CAAA;IAChB,0DAA0D;IAC1D,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,qCAAqC;IACrC,MAAM,EAAE,SAAS,GAAG,QAAQ,GAAG,OAAO,CAAA;IACtC,SAAS,EAAE,IAAI,CAAA;IACf,UAAU,CAAC,EAAE,IAAI,CAAA;CAClB;AAED;;;GAGG;AACH,MAAM,WAAW,OAAO;IACtB,GAAG,EAAE,QAAQ,CAAA;IACb,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,EAAE,MAAM,CAAA;IACnB,yDAAyD;IACzD,YAAY,EAAE,MAAM,CAAA;IACpB,QAAQ,EAAE,MAAM,CAAA;IAChB,qEAAqE;IACrE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC9B,6DAA6D;IAC7D,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,CAAC,CAAA;IAC1C,QAAQ,EAAE,OAAO,CAAA;IACjB,SAAS,EAAE,IAAI,CAAA;CAChB;AAED;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,QAAQ,CAAA;IACb,SAAS,EAAE,MAAM,CAAA;IACjB,iDAAiD;IACjD,SAAS,EAAE,MAAM,CAAA;IACjB,aAAa,EAAE,MAAM,CAAA;IACrB,SAAS,EAAE,IAAI,CAAA;IACf,SAAS,EAAE,IAAI,CAAA;IACf,mCAAmC;IACnC,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,QAAQ,CAAA;IACb,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,UAAU,EAAE,MAAM,CAAA;IAClB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACjC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAClC,KAAK,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAC3C;AAMD;;;GAGG;AACH,MAAM,WAAW,OAAO;IACtB,QAAQ,EAAE,UAAU,CAAC,UAAU,CAAC,CAAA;IAChC,KAAK,EAAE,UAAU,CAAC,OAAO,CAAC,CAAA;IAC1B,WAAW,EAAE,UAAU,CAAC,aAAa,CAAC,CAAA;IACtC,OAAO,EAAE,UAAU,CAAC,SAAS,CAAC,CAAA;IAC9B,KAAK,EAAE,UAAU,CAAC,OAAO,CAAC,CAAA;IAC1B,aAAa,EAAE,UAAU,CAAC,eAAe,CAAC,CAAA;IAC1C,WAAW,EAAE,UAAU,CAAC,aAAa,CAAC,CAAA;IACtC,kEAAkE;IAClE,WAAW,EAAE,UAAU,CAAC,aAAa,CAAC,CAAA;CACvC;AAMD;;;;;;GAMG;AACH,MAAM,WAAW,UAAU;IACzB,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;IACxC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAClE,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAChC"}

package/dist/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/dist/webhook.d.ts

@@ -0,0 +1,29 @@
+import type { CloudDb, TokenCache } from './types.js';
+export interface WebhookOptions {
+    /** `GITHUB_APP_WEBHOOK_SECRET` env var. */
+    webhookSecret: string;
+    db: CloudDb;
+    /** Optional L2 cache — used to invalidate cached tokens and schemas on uninstall. */
+    cache?: TokenCache;
+    /**
+     * Derives the Redis key for a project's schema cache.
+     * Default: `schema:{projectId}`
+     */
+    schemaCacheKey?: (projectId: string) => string;
+}
+/**
+ * Handler for `POST /github/webhook`.
+ *
+ * Handles the GitHub App webhook events Airdraft cares about:
+ * - `installation.deleted` — disconnects the project, invalidates token + schema caches
+ * - `installation_repositories` — future: update accessible repo list
+ * - `push` — invalidates schema cache when `airdraft.config.json` changes
+ *
+ * ```ts
+ * export async function POST(req: Request) {
+ *   return handleWebhook(req, { webhookSecret: process.env.GITHUB_WEBHOOK_SECRET!, db, cache })
+ * }
+ * ```
+ */
+export declare function handleWebhook(req: Request, opts: WebhookOptions): Promise<Response>;
+//# sourceMappingURL=webhook.d.ts.map

package/dist/webhook.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook.d.ts","sourceRoot":"","sources":["../src/webhook.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAMrD,MAAM,WAAW,cAAc;IAC7B,2CAA2C;IAC3C,aAAa,EAAE,MAAM,CAAA;IACrB,EAAE,EAAE,OAAO,CAAA;IACX,qFAAqF;IACrF,KAAK,CAAC,EAAE,UAAU,CAAA;IAClB;;;OAGG;IACH,cAAc,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,MAAM,CAAA;CAC/C;AA2DD;;;;;;;;;;;;;GAaG;AACH,wBAAsB,aAAa,CACjC,GAAG,EAAE,OAAO,EACZ,IAAI,EAAE,cAAc,GACnB,OAAO,CAAC,QAAQ,CAAC,CA+FnB"}

package/dist/webhook.js

@@ -0,0 +1,125 @@
+import { createHmac, timingSafeEqual } from 'node:crypto';
+import { bustEngineCache } from './runtime.js';
+// ---------------------------------------------------------------------------
+// Helpers
+// ---------------------------------------------------------------------------
+const TOKEN_CACHE_KEY = (installationId) => `github:token:${installationId}`;
+const DEFAULT_SCHEMA_KEY = (projectId) => `schema:${projectId}`;
+function json(body, status = 200) {
+    return new Response(JSON.stringify(body), {
+        status,
+        headers: { 'Content-Type': 'application/json' },
+    });
+}
+/**
+ * Verifies a GitHub webhook HMAC-SHA256 signature.
+ * Returns false if the header is missing or the signature doesn't match.
+ */
+async function verifyWebhookSignature(body, signatureHeader, secret) {
+    if (!signatureHeader?.startsWith('sha256='))
+        return false;
+    const expected = 'sha256=' + createHmac('sha256', secret).update(body).digest('hex');
+    const expectedBuf = Buffer.from(expected);
+    const receivedBuf = Buffer.from(signatureHeader);
+    if (expectedBuf.length !== receivedBuf.length)
+        return false;
+    return timingSafeEqual(expectedBuf, receivedBuf);
+}
+// ---------------------------------------------------------------------------
+// handleWebhook
+// ---------------------------------------------------------------------------
+/**
+ * Handler for `POST /github/webhook`.
+ *
+ * Handles the GitHub App webhook events Airdraft cares about:
+ * - `installation.deleted` — disconnects the project, invalidates token + schema caches
+ * - `installation_repositories` — future: update accessible repo list
+ * - `push` — invalidates schema cache when `airdraft.config.json` changes
+ *
+ * ```ts
+ * export async function POST(req: Request) {
+ *   return handleWebhook(req, { webhookSecret: process.env.GITHUB_WEBHOOK_SECRET!, db, cache })
+ * }
+ * ```
+ */
+export async function handleWebhook(req, opts) {
+    const body = await req.text();
+    const signature = req.headers.get('X-Hub-Signature-256');
+    const event = req.headers.get('X-GitHub-Event');
+    // Verify signature — invalid → 401
+    const valid = await verifyWebhookSignature(body, signature, opts.webhookSecret);
+    if (!valid) {
+        return json({ error: 'INVALID_SIGNATURE' }, 401);
+    }
+    let payload;
+    try {
+        payload = JSON.parse(body);
+    }
+    catch {
+        return json({ error: 'INVALID_PAYLOAD' }, 400);
+    }
+    const schemaCacheKey = opts.schemaCacheKey ?? DEFAULT_SCHEMA_KEY;
+    // -------------------------------------------------------------------------
+    // installation.deleted — disconnect project, bust caches
+    // -------------------------------------------------------------------------
+    if (event === 'installation') {
+        const { action, installation } = payload;
+        if (action === 'deleted') {
+            const installationId = installation.id;
+            // Find all projects with this installationId
+            const projects = await opts.db.projects
+                .find({ 'github.installationId': installationId })
+                .toArray();
+            if (projects.length > 0) {
+                // Disconnect all matching projects
+                await opts.db.projects.updateMany({ 'github.installationId': installationId }, { $set: { github: null, updatedAt: new Date() } });
+                // Invalidate caches
+                if (opts.cache) {
+                    await opts.cache.del(TOKEN_CACHE_KEY(installationId));
+                    for (const p of projects) {
+                        await opts.cache.del(schemaCacheKey(p._id.toString()));
+                    }
+                }
+            }
+        }
+        // installation.created → no-op (connection is written in callback, not here)
+        return json({ ok: true });
+    }
+    // -------------------------------------------------------------------------
+    // push — invalidate schema cache if airdraft.config.json changed
+    // -------------------------------------------------------------------------
+    if (event === 'push') {
+        const push = payload;
+        const changedFiles = push.commits.flatMap((c) => [
+            ...c.added,
+            ...c.removed,
+            ...c.modified,
+        ]);
+        const schemaChanged = changedFiles.includes('airdraft.schema.json') ||
+            changedFiles.includes('airdraft.config.json');
+        if (schemaChanged) {
+            const repo = push.repository.full_name;
+            // Find all projects connected to this repo
+            const projects = await opts.db.projects.find({ 'github.repo': repo }).toArray();
+            for (const p of projects) {
+                // Bust Redis schema cache
+                if (opts.cache) {
+                    await opts.cache.del(schemaCacheKey(p._id.toString()));
+                }
+                // Bust in-memory engine cache for immediate next-request refresh
+                bustEngineCache(p._id.toString());
+            }
+        }
+        return json({ ok: true });
+    }
+    // -------------------------------------------------------------------------
+    // installation_repositories — future: update stored accessible repos list
+    // -------------------------------------------------------------------------
+    if (event === 'installation_repositories') {
+        // Currently no persistent accessible-repo list — re-queried on demand
+        return json({ ok: true });
+    }
+    // Unknown event — acknowledge with 200 (GitHub retries on non-2xx)
+    return json({ ok: true });
+}
+//# sourceMappingURL=webhook.js.map

package/dist/webhook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook.js","sourceRoot":"","sources":["../src/webhook.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AA0C9C,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,MAAM,eAAe,GAAG,CAAC,cAAsB,EAAE,EAAE,CAAC,gBAAgB,cAAc,EAAE,CAAA;AACpF,MAAM,kBAAkB,GAAG,CAAC,SAAiB,EAAE,EAAE,CAAC,UAAU,SAAS,EAAE,CAAA;AAEvE,SAAS,IAAI,CAAC,IAAa,EAAE,MAAM,GAAG,GAAG;IACvC,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE;QACxC,MAAM;QACN,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;KAChD,CAAC,CAAA;AACJ,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,sBAAsB,CACnC,IAAY,EACZ,eAA8B,EAC9B,MAAc;IAEd,IAAI,CAAC,eAAe,EAAE,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,KAAK,CAAA;IACzD,MAAM,QAAQ,GAAG,SAAS,GAAG,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IACpF,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IACzC,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;IAChD,IAAI,WAAW,CAAC,MAAM,KAAK,WAAW,CAAC,MAAM;QAAE,OAAO,KAAK,CAAA;IAC3D,OAAO,eAAe,CAAC,WAAW,EAAE,WAAW,CAAC,CAAA;AAClD,CAAC;AAED,8EAA8E;AAC9E,gBAAgB;AAChB,8EAA8E;AAE9E;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,GAAY,EACZ,IAAoB;IAEpB,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;IAC7B,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAA;IACxD,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAA;IAE/C,mCAAmC;IACnC,MAAM,KAAK,GAAG,MAAM,sBAAsB,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,aAAa,CAAC,CAAA;IAC/E,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,GAAG,CAAC,CAAA;IAClD,CAAC;IAED,IAAI,OAAgB,CAAA;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAA;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,GAAG,CAAC,CAAA;IAChD,CAAC;IAED,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,IAAI,kBAAkB,CAAA;IAEhE,4EAA4E;IAC5E,yDAAyD;IACzD,4EAA4E;IAC5E,IAAI,KAAK,KAAK,cAAc,EAAE,CAAC;QAC7B,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,OAA4B,CAAA;QAC7D,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,cAAc,GAAG,YAAY,CAAC,EAAE,CAAA;YAEtC,6CAA6C;YAC7C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,QAAQ;iBACpC,IAAI,CAAC,EAAE,uBAAuB,EAAE,cAAc,EAAE,CAAC;iBACjD,OAAO,EAAE,CAAA;YAEZ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,mCAAmC;gBACnC,MAAM,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,UAAU,CAC/B,EAAE,uBAAuB,EAAE,cAAc,EAAE,EAC3C,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,EAAE,CAClD,CAAA;gBAED,oBAAoB;gBACpB,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;oBACf,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,cAAc,CAAC,CAAC,CAAA;oBACrD,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;wBACzB,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAA;oBACxD,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QACD,6EAA6E;QAC7E,OAAO,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAA;IAC3B,CAAC;IAED,4EAA4E;IAC5E,iEAAiE;IACjE,4EAA4E;IAC5E,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QACrB,MAAM,IAAI,GAAG,OAAoB,CAAA;QACjC,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YAC/C,GAAG,CAAC,CAAC,KAAK;YACV,GAAG,CAAC,CAAC,OAAO;YACZ,GAAG,CAAC,CAAC,QAAQ;SACd,CAAC,CAAA;QACF,MAAM,aAAa,GACjB,YAAY,CAAC,QAAQ,CAAC,sBAAsB,CAAC;YAC7C,YAAY,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAA;QAE/C,IAAI,aAAa,EAAE,CAAC;YAClB,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAA;YAEtC,2CAA2C;YAC3C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAA;YAC/E,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;gBACzB,0BAA0B;gBAC1B,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;oBACf,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAA;gBACxD,CAAC;gBACD,iEAAiE;gBACjE,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAA;YACnC,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAA;IAC3B,CAAC;IAED,4EAA4E;IAC5E,0EAA0E;IAC1E,4EAA4E;IAC5E,IAAI,KAAK,KAAK,2BAA2B,EAAE,CAAC;QAC1C,sEAAsE;QACtE,OAAO,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAA;IAC3B,CAAC;IAED,mEAAmE;IACnE,OAAO,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAA;AAC3B,CAAC"}

package/package.json

@@ -0,0 +1,45 @@
+{
+  "name": "@airdraft/cloud",
+  "version": "0.1.0",
+  "description": "Airdraft Cloud — MongoDB schemas, GitHub App handlers (relay, callback, webhook)",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": "./dist/index.js",
+      "types": "./dist/index.d.ts"
+    }
+  },
+  "files": ["dist", "README.md", "CHANGELOG.md"],
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsc --watch",
+    "clean": "rm -rf dist",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "typecheck": "tsc --noEmit",
+    "prepublishOnly": "npm run build",
+    "release": "standard-version",
+    "release:patch": "standard-version --release-as patch",
+    "release:minor": "standard-version --release-as minor",
+    "release:major": "standard-version --release-as major"
+  },
+  "publishConfig": { "access": "public" },
+  "license": "MIT",
+  "dependencies": {
+    "@airdraft/auth": "*",
+    "@airdraft/cloud-auth": "*",
+    "@airdraft/core": "*",
+    "@airdraft/next": "*",
+    "@airdraft/plugin-auth": "*",
+    "mongodb": "^6.0.0"
+  },
+  "devDependencies": {
+    "@types/node": "^20.0.0",
+    "standard-version": "^9.5.0",
+    "typescript": "^5.4.0",
+    "vitest": "^1.5.0"
+  },
+  "engines": { "node": ">=18.0.0" }
+}