@archlast/server 0.0.1

package/dist/config/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/config/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC"}

package/dist/config/index.js

@@ -0,0 +1,20 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./paths.js"), exports);
+__exportStar(require("./schema.js"), exports);
+__exportStar(require("./service.js"), exports);
+//# sourceMappingURL=index.js.map

package/dist/config/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/config/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,6CAA2B;AAC3B,8CAA4B;AAC5B,+CAA6B"}

package/dist/config/paths.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Ensure the parent directory of a file path exists.
+ */
+export declare function ensureDirectoryFor(filePath: string): void;
+/**
+ * Ensure all db directories exist for the given paths.
+ */
+export declare function ensureAllDbDirectories(paths: {
+    mainDb: string;
+    jobsDb: string;
+    storageDb: string;
+    ipcDb: string;
+    logDb: string;
+    storageStagingDir: string;
+}): void;
+//# sourceMappingURL=paths.d.ts.map

package/dist/config/paths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../../src/config/paths.ts"],"names":[],"mappings":"AAGA;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,QAIlD;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE;IAC1C,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,iBAAiB,EAAE,MAAM,CAAC;CAC7B,QASA"}

package/dist/config/paths.js

@@ -0,0 +1,29 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ensureDirectoryFor = ensureDirectoryFor;
+exports.ensureAllDbDirectories = ensureAllDbDirectories;
+const fs_1 = require("fs");
+const path_1 = require("path");
+/**
+ * Ensure the parent directory of a file path exists.
+ */
+function ensureDirectoryFor(filePath) {
+    const dir = (0, path_1.dirname)(filePath).replace(/\\/g, "/");
+    if (!dir || dir === "." || dir === "/")
+        return;
+    (0, fs_1.mkdirSync)(dir, { recursive: true });
+}
+/**
+ * Ensure all db directories exist for the given paths.
+ */
+function ensureAllDbDirectories(paths) {
+    [
+        paths.mainDb,
+        paths.jobsDb,
+        paths.storageDb,
+        paths.ipcDb,
+        paths.logDb,
+        paths.storageStagingDir,
+    ].forEach(ensureDirectoryFor);
+}
+//# sourceMappingURL=paths.js.map

package/dist/config/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../src/config/paths.ts"],"names":[],"mappings":";;AAMA,gDAIC;AAKD,wDAgBC;AA/BD,2BAA+B;AAC/B,+BAA+B;AAE/B;;GAEG;AACH,SAAgB,kBAAkB,CAAC,QAAgB;IAC/C,MAAM,GAAG,GAAG,IAAA,cAAO,EAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAClD,IAAI,CAAC,GAAG,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,GAAG;QAAE,OAAO;IAC/C,IAAA,cAAS,EAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AACxC,CAAC;AAED;;GAEG;AACH,SAAgB,sBAAsB,CAAC,KAOtC;IACG;QACI,KAAK,CAAC,MAAM;QACZ,KAAK,CAAC,MAAM;QACZ,KAAK,CAAC,SAAS;QACf,KAAK,CAAC,KAAK;QACX,KAAK,CAAC,KAAK;QACX,KAAK,CAAC,iBAAiB;KAC1B,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;AAClC,CAAC"}

package/dist/config/schema.d.ts

@@ -0,0 +1,42 @@
+import { z } from "zod";
+/**
+ * Common environment options shared across all configurations.
+ */
+export declare const CommonEnvSchema: z.ZodObject<{
+    NODE_ENV: z.ZodDefault<z.ZodOptional<z.ZodEnum<{
+        production: "production";
+        development: "development";
+        test: "test";
+    }>>>;
+}, z.core.$strip>;
+/**
+ * Server configuration schema.
+ * Validates all server-side environment variables.
+ */
+export declare const ServerConfigSchema: z.ZodObject<{
+    NODE_ENV: z.ZodDefault<z.ZodOptional<z.ZodEnum<{
+        production: "production";
+        development: "development";
+        test: "test";
+    }>>>;
+    PORT: z.ZodDefault<z.ZodOptional<z.ZodCoercedNumber<unknown>>>;
+    ARCHLAST_DB_ROOT: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+    ARCHLAST_ALLOWED_ORIGINS: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+    ARCHLAST_CORS_ALLOW_CREDENTIALS: z.ZodPipe<z.ZodDefault<z.ZodOptional<z.ZodString>>, z.ZodTransform<boolean, string>>;
+    ARCHLAST_ADMIN_TOKEN: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+    ARCHLAST_ADMIN_USERNAME: z.ZodOptional<z.ZodString>;
+    ARCHLAST_ADMIN_PASSWORD: z.ZodOptional<z.ZodString>;
+    ARCHLAST_PROVISIONING_SECRET: z.ZodOptional<z.ZodString>;
+    ARCHLAST_AUTH_TOKEN_PEPPER: z.ZodOptional<z.ZodString>;
+    STORAGE_SIGNING_SECRET: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+    STORAGE_ROOT: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+    S3_ENABLED: z.ZodPipe<z.ZodDefault<z.ZodOptional<z.ZodString>>, z.ZodTransform<boolean, string>>;
+    S3_BUCKET: z.ZodOptional<z.ZodString>;
+    S3_REGION: z.ZodOptional<z.ZodString>;
+    AWS_ACCESS_KEY_ID: z.ZodOptional<z.ZodString>;
+    AWS_SECRET_ACCESS_KEY: z.ZodOptional<z.ZodString>;
+    IS_DEV: z.ZodPipe<z.ZodOptional<z.ZodString>, z.ZodTransform<boolean, string | undefined>>;
+    APP_ROOT: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+}, z.core.$strip>;
+export type ServerConfig = z.infer<typeof ServerConfigSchema>;
+//# sourceMappingURL=schema.d.ts.map

package/dist/config/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/config/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;GAEG;AACH,eAAO,MAAM,eAAe;;;;;;iBAE1B,CAAC;AAEH;;;GAGG;AACH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;iBAuD7B,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC"}

package/dist/config/schema.js

@@ -0,0 +1,62 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ServerConfigSchema = exports.CommonEnvSchema = void 0;
+const zod_1 = require("zod");
+/**
+ * Common environment options shared across all configurations.
+ */
+exports.CommonEnvSchema = zod_1.z.object({
+    NODE_ENV: zod_1.z.enum(["development", "production", "test"]).optional().default("development"),
+});
+/**
+ * Server configuration schema.
+ * Validates all server-side environment variables.
+ */
+exports.ServerConfigSchema = zod_1.z.object({
+    // Environment
+    NODE_ENV: zod_1.z.enum(["development", "production", "test"]).optional().default("development"),
+    // Server
+    PORT: zod_1.z.coerce.number().int().positive().optional().default(4000),
+    // Database paths
+    ARCHLAST_DB_ROOT: zod_1.z.string().optional().default("./data"),
+    // CORS
+    ARCHLAST_ALLOWED_ORIGINS: zod_1.z
+        .string()
+        .optional()
+        .default("http://localhost:3000,http://localhost:3001,http://localhost:4001"),
+    ARCHLAST_CORS_ALLOW_CREDENTIALS: zod_1.z
+        .string()
+        .optional()
+        .default("true")
+        .transform((v) => v === "true"),
+    // Admin authentication
+    // @deprecated Use Better Auth API keys (ARCHLAST_API_KEY) instead
+    // Better Auth API keys are managed via the admin dashboard or API
+    ARCHLAST_ADMIN_TOKEN: zod_1.z.string().optional().default(""),
+    ARCHLAST_ADMIN_USERNAME: zod_1.z.string().optional(),
+    ARCHLAST_ADMIN_PASSWORD: zod_1.z.string().optional(),
+    ARCHLAST_PROVISIONING_SECRET: zod_1.z.string().optional(),
+    // Auth system
+    ARCHLAST_AUTH_TOKEN_PEPPER: zod_1.z.string().optional(),
+    // Storage
+    STORAGE_SIGNING_SECRET: zod_1.z.string().optional().default("dev-secret"),
+    STORAGE_ROOT: zod_1.z.string().optional().default("./storage"),
+    // S3 Storage (optional)
+    S3_ENABLED: zod_1.z
+        .string()
+        .optional()
+        .default("false")
+        .transform((v) => v === "true"),
+    S3_BUCKET: zod_1.z.string().optional(),
+    S3_REGION: zod_1.z.string().optional(),
+    AWS_ACCESS_KEY_ID: zod_1.z.string().optional(),
+    AWS_SECRET_ACCESS_KEY: zod_1.z.string().optional(),
+    // Development
+    IS_DEV: zod_1.z
+        .string()
+        .optional()
+        .transform((v) => v === "true"),
+    // Application Root (for loading generated code)
+    APP_ROOT: zod_1.z.string().optional().default(process.cwd()),
+});
+//# sourceMappingURL=schema.js.map

package/dist/config/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/config/schema.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AAExB;;GAEG;AACU,QAAA,eAAe,GAAG,OAAC,CAAC,MAAM,CAAC;IACpC,QAAQ,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,aAAa,CAAC;CAC5F,CAAC,CAAC;AAEH;;;GAGG;AACU,QAAA,kBAAkB,GAAG,OAAC,CAAC,MAAM,CAAC;IACvC,cAAc;IACd,QAAQ,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,aAAa,CAAC;IAEzF,SAAS;IACT,IAAI,EAAE,OAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAEjE,iBAAiB;IACjB,gBAAgB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC;IAEzD,OAAO;IACP,wBAAwB,EAAE,OAAC;SACtB,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,OAAO,CAAC,mEAAmE,CAAC;IACjF,+BAA+B,EAAE,OAAC;SAC7B,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,OAAO,CAAC,MAAM,CAAC;SACf,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,MAAM,CAAC;IAEnC,uBAAuB;IACvB,kEAAkE;IAClE,kEAAkE;IAClE,oBAAoB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IACvD,uBAAuB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9C,uBAAuB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9C,4BAA4B,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAEnD,cAAc;IACd,0BAA0B,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAEjD,UAAU;IACV,sBAAsB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC;IACnE,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC;IAExD,wBAAwB;IACxB,UAAU,EAAE,OAAC;SACR,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,OAAO,CAAC,OAAO,CAAC;SAChB,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,MAAM,CAAC;IACnC,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,iBAAiB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACxC,qBAAqB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAE5C,cAAc;IACd,MAAM,EAAE,OAAC;SACJ,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,MAAM,CAAC;IAEnC,gDAAgD;IAChD,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;CACzD,CAAC,CAAC"}

package/dist/config/service.d.ts

@@ -0,0 +1,56 @@
+import { type ServerConfig } from "./schema.js";
+/**
+ * Generic configuration service for Archlast.
+ */
+export declare class ConfigService<T extends ServerConfig> {
+    protected readonly config: T;
+    constructor(config: T);
+    /**
+     * Get raw config for direct access.
+     */
+    get<K extends keyof T>(key: K): T[K];
+    /**
+     * Get all config as readonly object.
+     */
+    get raw(): Readonly<T>;
+}
+/**
+ * Server-specific configuration service with typed helpers.
+ */
+export declare class ServerConfigService extends ConfigService<ServerConfig> {
+    get port(): number;
+    get isDev(): boolean;
+    get nodeEnv(): string;
+    get paths(): {
+        root: string;
+        mainDb: string;
+        jobsDb: string;
+        storageDb: string;
+        ipcDb: string;
+        logDb: string;
+        storageStagingDir: string;
+    };
+    get auth(): {
+        adminToken: string;
+        tokenPepper: string | undefined;
+    };
+    get cors(): {
+        allowedOrigins: string[];
+        allowCredentials: boolean;
+    };
+    get storage(): {
+        root: string;
+        signingSecret: string;
+        s3Enabled: boolean;
+        s3Bucket: string | undefined;
+        s3Region: string | undefined;
+        awsAccessKeyId: string | undefined;
+        awsSecretAccessKey: string | undefined;
+    };
+    get appRoot(): string;
+}
+/**
+ * Load and validate server configuration from environment.
+ */
+export declare function loadServerConfig(): ServerConfigService;
+//# sourceMappingURL=service.d.ts.map

package/dist/config/service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../src/config/service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsB,KAAK,YAAY,EAAE,MAAM,aAAa,CAAC;AAIpE;;GAEG;AACH,qBAAa,aAAa,CAAC,CAAC,SAAS,YAAY;IAC7C,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;gBAEjB,MAAM,EAAE,CAAC;IAIrB;;OAEG;IACH,GAAG,CAAC,CAAC,SAAS,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAIpC;;OAEG;IACH,IAAI,GAAG,IAAI,QAAQ,CAAC,CAAC,CAAC,CAErB;CACJ;AAED;;GAEG;AACH,qBAAa,mBAAoB,SAAQ,aAAa,CAAC,YAAY,CAAC;IAChE,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,IAAI,KAAK,IAAI,OAAO,CAKnB;IAED,IAAI,OAAO,IAAI,MAAM,CAEpB;IAED,IAAI,KAAK;;;;;;;;MAWR;IAED,IAAI,IAAI;;;MAKP;IAED,IAAI,IAAI;;;MAKP;IAED,IAAI,OAAO;;;;;;;;MAUV;IAED,IAAI,OAAO,IAAI,MAAM,CAEpB;CACJ;AAED;;GAEG;AACH,wBAAgB,gBAAgB,IAAI,mBAAmB,CAyBtD"}

package/dist/config/service.js

@@ -0,0 +1,108 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ServerConfigService = exports.ConfigService = void 0;
+exports.loadServerConfig = loadServerConfig;
+const schema_js_1 = require("./schema.js");
+const logger_js_1 = require("../logging/logger.js");
+/**
+ * Generic configuration service for Archlast.
+ */
+class ConfigService {
+    config;
+    constructor(config) {
+        this.config = config;
+    }
+    /**
+     * Get raw config for direct access.
+     */
+    get(key) {
+        return this.config[key];
+    }
+    /**
+     * Get all config as readonly object.
+     */
+    get raw() {
+        return this.config;
+    }
+}
+exports.ConfigService = ConfigService;
+/**
+ * Server-specific configuration service with typed helpers.
+ */
+class ServerConfigService extends ConfigService {
+    get port() {
+        return this.config.PORT;
+    }
+    get isDev() {
+        if (this.config.IS_DEV !== undefined) {
+            return this.config.IS_DEV;
+        }
+        return this.config.NODE_ENV !== "production";
+    }
+    get nodeEnv() {
+        return this.config.NODE_ENV;
+    }
+    get paths() {
+        const root = this.config.ARCHLAST_DB_ROOT;
+        return {
+            root,
+            mainDb: `${root}/main/archlast.sqlite`,
+            jobsDb: `${root}/jobs/archlast-jobs.sqlite`,
+            storageDb: `${root}/storage/archlast-storage.sqlite`,
+            ipcDb: `${root}/ipc/archlast-ipc.sqlite`,
+            logDb: `${root}/logs/archlast-logs.sqlite`,
+            storageStagingDir: `${root}/storage/.staging`,
+        };
+    }
+    get auth() {
+        return {
+            adminToken: this.config.ARCHLAST_ADMIN_TOKEN,
+            tokenPepper: this.config.ARCHLAST_AUTH_TOKEN_PEPPER,
+        };
+    }
+    get cors() {
+        return {
+            allowedOrigins: this.config.ARCHLAST_ALLOWED_ORIGINS.split(",").map((s) => s.trim()),
+            allowCredentials: this.config.ARCHLAST_CORS_ALLOW_CREDENTIALS,
+        };
+    }
+    get storage() {
+        return {
+            root: this.config.STORAGE_ROOT,
+            signingSecret: this.config.STORAGE_SIGNING_SECRET,
+            s3Enabled: this.config.S3_ENABLED,
+            s3Bucket: this.config.S3_BUCKET,
+            s3Region: this.config.S3_REGION,
+            awsAccessKeyId: this.config.AWS_ACCESS_KEY_ID,
+            awsSecretAccessKey: this.config.AWS_SECRET_ACCESS_KEY,
+        };
+    }
+    get appRoot() {
+        return this.config.APP_ROOT;
+    }
+}
+exports.ServerConfigService = ServerConfigService;
+/**
+ * Load and validate server configuration from environment.
+ */
+function loadServerConfig() {
+    const config = schema_js_1.ServerConfigSchema.parse(process.env);
+    // Production-specific validations
+    if (config.NODE_ENV === "production") {
+        if (!config.ARCHLAST_ADMIN_TOKEN) {
+            throw new Error("ARCHLAST_ADMIN_TOKEN is required in production mode. " +
+                "Please set a secure token in your environment variables.");
+        }
+        if (config.STORAGE_SIGNING_SECRET === "dev-secret") {
+            logger_js_1.logger.log({
+                timestamp: Date.now(),
+                level: "warn",
+                kind: "system",
+                message: "WARNING: Using default STORAGE_SIGNING_SECRET in production. " +
+                    "Please set a secure secret in your environment variables.",
+            });
+        }
+    }
+    return new ServerConfigService(config);
+}
+//# sourceMappingURL=service.js.map

package/dist/config/service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../../src/config/service.ts"],"names":[],"mappings":";;;AA+FA,4CAyBC;AAxHD,2CAAoE;AAEpE,oDAA8C;AAE9C;;GAEG;AACH,MAAa,aAAa;IACH,MAAM,CAAI;IAE7B,YAAY,MAAS;QACjB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACzB,CAAC;IAED;;OAEG;IACH,GAAG,CAAoB,GAAM;QACzB,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,IAAI,GAAG;QACH,OAAO,IAAI,CAAC,MAAM,CAAC;IACvB,CAAC;CACJ;AApBD,sCAoBC;AAED;;GAEG;AACH,MAAa,mBAAoB,SAAQ,aAA2B;IAChE,IAAI,IAAI;QACJ,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;IAC5B,CAAC;IAED,IAAI,KAAK;QACL,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACnC,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;QAC9B,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,KAAK,YAAY,CAAC;IACjD,CAAC;IAED,IAAI,OAAO;QACP,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;IAChC,CAAC;IAED,IAAI,KAAK;QACL,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC;QAC1C,OAAO;YACH,IAAI;YACJ,MAAM,EAAE,GAAG,IAAI,uBAAuB;YACtC,MAAM,EAAE,GAAG,IAAI,4BAA4B;YAC3C,SAAS,EAAE,GAAG,IAAI,kCAAkC;YACpD,KAAK,EAAE,GAAG,IAAI,0BAA0B;YACxC,KAAK,EAAE,GAAG,IAAI,4BAA4B;YAC1C,iBAAiB,EAAE,GAAG,IAAI,mBAAmB;SAChD,CAAC;IACN,CAAC;IAED,IAAI,IAAI;QACJ,OAAO;YACH,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,oBAAoB;YAC5C,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,0BAA0B;SACtD,CAAC;IACN,CAAC;IAED,IAAI,IAAI;QACJ,OAAO;YACH,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,wBAAwB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACpF,gBAAgB,EAAE,IAAI,CAAC,MAAM,CAAC,+BAA+B;SAChE,CAAC;IACN,CAAC;IAED,IAAI,OAAO;QACP,OAAO;YACH,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;YAC9B,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,sBAAsB;YACjD,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU;YACjC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;YAC/B,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;YAC/B,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,iBAAiB;YAC7C,kBAAkB,EAAE,IAAI,CAAC,MAAM,CAAC,qBAAqB;SACxD,CAAC;IACN,CAAC;IAED,IAAI,OAAO;QACP,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;IAChC,CAAC;CACJ;AA1DD,kDA0DC;AAED;;GAEG;AACH,SAAgB,gBAAgB;IAC5B,MAAM,MAAM,GAAG,8BAAkB,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAErD,kCAAkC;IAClC,IAAI,MAAM,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;QACnC,IAAI,CAAC,MAAM,CAAC,oBAAoB,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CACX,uDAAuD;gBACnD,0DAA0D,CACjE,CAAC;QACN,CAAC;QAED,IAAI,MAAM,CAAC,sBAAsB,KAAK,YAAY,EAAE,CAAC;YACjD,kBAAM,CAAC,GAAG,CAAC;gBACP,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;gBACrB,KAAK,EAAE,MAAM;gBACb,IAAI,EAAE,QAAQ;gBACd,OAAO,EACH,+DAA+D;oBAC/D,2DAA2D;aAClE,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IAED,OAAO,IAAI,mBAAmB,CAAC,MAAM,CAAC,CAAC;AAC3C,CAAC"}

package/dist/context.d.ts

@@ -0,0 +1,48 @@
+/**
+ * Server context contains all dependencies needed by route handlers
+ */
+import type { IDatabaseClient } from "./db/interfaces.js";
+import { CachedDatabaseClient } from "./db/cachedclient.js";
+import { AuthResolver } from "./auth/resolver.js";
+import { ExecutionEngine } from "./engine/runner.js";
+import { StorageManager } from "./storage/manager.js";
+import { DeploymentHandler } from "./deployment/handler.js";
+import { ArchlastWebSocketHandler } from "./websocket/server.js";
+import { LogService } from "./logging/logger.js";
+import { JobQueue } from "./jobs/queue.js";
+import type { ServerConfigService } from "./config/index.js";
+import type { IpcClient } from "./ipc/socket-bridge.js";
+import type { HttpRouter } from "./http/router.js";
+import type { RpcRouterRegistry } from "./rpc/router.js";
+import type { AnyRouter } from "@trpc/server";
+import type { Container } from "./di/container.js";
+import type { IMutableQueryable } from "./repository/interfaces.js";
+import type { EmailService } from "./email/service.js";
+import type { SettingsService } from "./settings/service.js";
+import { SchedulerClient } from "./jobs/scheduler-client.js";
+import type { BetterAuthInstance } from "./auth/better-auth-instance.js";
+export interface ServerContext {
+    config: ServerConfigService;
+    rawDb: IDatabaseClient;
+    db: CachedDatabaseClient;
+    authResolver: AuthResolver;
+    engine: ExecutionEngine;
+    storageManager: StorageManager;
+    storage: StorageManager;
+    deploymentHandler: DeploymentHandler;
+    wsHandler: ArchlastWebSocketHandler;
+    logger: LogService;
+    jobQueue: JobQueue;
+    scheduler: SchedulerClient;
+    ipcClient: IpcClient | null;
+    httpRouter?: HttpRouter;
+    rpcRouter?: RpcRouterRegistry | AnyRouter;
+    di: Container;
+    email: EmailService;
+    settings: SettingsService;
+    repository: Record<string, IMutableQueryable<any>>;
+    betterAuth?: BetterAuthInstance;
+    service<T>(token: string): T;
+    factory<T>(token: string, implementation?: string): T;
+}
+//# sourceMappingURL=context.d.ts.map

package/dist/context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../src/context.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AACjE,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACzD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AACpE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AAEzE,MAAM,WAAW,aAAa;IAC1B,MAAM,EAAE,mBAAmB,CAAC;IAC5B,KAAK,EAAE,eAAe,CAAC;IACvB,EAAE,EAAE,oBAAoB,CAAC;IACzB,YAAY,EAAE,YAAY,CAAC;IAC3B,MAAM,EAAE,eAAe,CAAC;IACxB,cAAc,EAAE,cAAc,CAAC;IAC/B,OAAO,EAAE,cAAc,CAAC;IACxB,iBAAiB,EAAE,iBAAiB,CAAC;IACrC,SAAS,EAAE,wBAAwB,CAAC;IACpC,MAAM,EAAE,UAAU,CAAC;IACnB,QAAQ,EAAE,QAAQ,CAAC;IACnB,SAAS,EAAE,eAAe,CAAC;IAC3B,SAAS,EAAE,SAAS,GAAG,IAAI,CAAC;IAC5B,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,SAAS,CAAC,EAAE,iBAAiB,GAAG,SAAS,CAAC;IAC1C,EAAE,EAAE,SAAS,CAAC;IAGd,KAAK,EAAE,YAAY,CAAC;IAGpB,QAAQ,EAAE,eAAe,CAAC;IAG1B,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC;IAGnD,UAAU,CAAC,EAAE,kBAAkB,CAAC;IAGhC,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,GAAG,CAAC,CAAC;IAC7B,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,CAAC,EAAE,MAAM,GAAG,CAAC,CAAC;CACzD"}

package/dist/context.js

@@ -0,0 +1,6 @@
+"use strict";
+/**
+ * Server context contains all dependencies needed by route handlers
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=context.js.map

package/dist/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../src/context.ts"],"names":[],"mappings":";AAAA;;GAEG"}

package/dist/controllers/admin/admin-tokens.controller.d.ts

@@ -0,0 +1,159 @@
+/**
+ * Admin Tokens Controller (Elysia Plugin)
+ * Handles /_archlast/admin/tokens/* endpoints for admin token management
+ */
+import { Elysia } from "elysia";
+export declare const adminTokensController: Elysia<"/tokens", {
+    decorator: {};
+    store: {};
+    derive: {};
+    resolve: {};
+}, {
+    typebox: {};
+    error: {};
+}, {
+    schema: {};
+    standaloneSchema: {};
+    macro: {};
+    macroFn: {};
+    parser: {};
+    response: {};
+}, {
+    tokens: {
+        get: {
+            body: unknown;
+            params: {};
+            query: unknown;
+            headers: unknown;
+            response: {
+                200: {
+                    error: string;
+                    tokens?: undefined;
+                } | {
+                    tokens: {
+                        tokenPreview: string;
+                        isExpired: boolean;
+                    }[];
+                    error?: undefined;
+                };
+            };
+        };
+    };
+} & {
+    tokens: {
+        post: {
+            body: {
+                expiresInDays?: number | undefined;
+                name: string;
+            };
+            params: {};
+            query: unknown;
+            headers: unknown;
+            response: {
+                200: {
+                    error: string;
+                    success?: undefined;
+                    token?: undefined;
+                } | {
+                    success: boolean;
+                    token: {
+                        id: string;
+                        token: string;
+                        name: string;
+                        expiresAt: number | null;
+                        createdAt: number;
+                    };
+                    error?: undefined;
+                };
+                422: {
+                    type: "validation";
+                    on: string;
+                    summary?: string;
+                    message?: string;
+                    found?: unknown;
+                    property?: string;
+                    expected?: string;
+                };
+            };
+        };
+    };
+} & {
+    tokens: {
+        ":id": {
+            delete: {
+                body: unknown;
+                params: {
+                    id: string;
+                };
+                query: unknown;
+                headers: unknown;
+                response: {
+                    200: {
+                        error: string;
+                        success?: undefined;
+                    } | {
+                        success: boolean;
+                        error?: undefined;
+                    };
+                    422: {
+                        type: "validation";
+                        on: string;
+                        summary?: string;
+                        message?: string;
+                        found?: unknown;
+                        property?: string;
+                        expected?: string;
+                    };
+                };
+            };
+        };
+    };
+} & {
+    tokens: {
+        ":id": {
+            reveal: {
+                get: {
+                    body: unknown;
+                    params: {
+                        id: string;
+                    };
+                    query: unknown;
+                    headers: unknown;
+                    response: {
+                        200: {
+                            error: string;
+                            success?: undefined;
+                            token?: undefined;
+                        } | {
+                            success: boolean;
+                            token: string;
+                            error?: undefined;
+                        };
+                        422: {
+                            type: "validation";
+                            on: string;
+                            summary?: string;
+                            message?: string;
+                            found?: unknown;
+                            property?: string;
+                            expected?: string;
+                        };
+                    };
+                };
+            };
+        };
+    };
+}, {
+    derive: {};
+    resolve: {};
+    schema: {};
+    standaloneSchema: {};
+    response: {};
+}, {
+    derive: {};
+    resolve: {};
+    schema: {};
+    standaloneSchema: {};
+    response: {};
+}>;
+//# sourceMappingURL=admin-tokens.controller.d.ts.map

package/dist/controllers/admin/admin-tokens.controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-tokens.controller.d.ts","sourceRoot":"","sources":["../../../src/controllers/admin/admin-tokens.controller.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,MAAM,EAAK,MAAM,QAAQ,CAAC;AAwBnC,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA4J7B,CAAC"}