@archlast/server 0.0.1

package/dist/controllers/admin/data.controller.js

@@ -0,0 +1,240 @@
+"use strict";
+/**
+ * Admin Data Controller (Elysia Plugin)
+ *
+ * NOTE: Document CRUD operations have been moved to WebSocket-based sys.* functions:
+ * - sys.listCollections, sys.listDocuments (queries)
+ * - sys.createDocument, sys.updateDocument, sys.deleteDocument (mutations)
+ *
+ * This controller now only provides the collections endpoint for backward compatibility,
+ * plus the Action Editor script execution endpoints.
+ * Consider migrating to WebSocket-based queries for better real-time reactivity.
+ *
+ * Business logic has been extracted to AdminDataService.
+ * This controller handles HTTP concerns only.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.adminDataController = void 0;
+const elysia_1 = require("elysia");
+const role_helpers_js_1 = require("../../auth/role-helpers.js");
+const data_service_js_1 = require("../../services/admin/data.service.js");
+const context_helper_js_1 = require("../../http/context-helper.js");
+// Input schemas
+const CreateDocumentSchema = elysia_1.t.Object({
+    collection: elysia_1.t.String(),
+    data: elysia_1.t.Record(elysia_1.t.String(), elysia_1.t.Any()),
+});
+const UpdateDocumentSchema = elysia_1.t.Object({
+    collection: elysia_1.t.String(),
+    data: elysia_1.t.Record(elysia_1.t.String(), elysia_1.t.Any()),
+});
+const BulkDeleteSchema = elysia_1.t.Object({
+    collection: elysia_1.t.String(),
+    ids: elysia_1.t.Array(elysia_1.t.String()),
+});
+const ExecuteScriptSchema = elysia_1.t.Object({
+    code: elysia_1.t.String(),
+    timeout: elysia_1.t.Optional(elysia_1.t.Number()),
+});
+// Create singleton service instance
+const adminDataService = (0, data_service_js_1.createAdminDataService)();
+exports.adminDataController = new elysia_1.Elysia({ tags: ["Admin Data"] })
+    /**
+     * GET /_archlast/admin/collections
+     * List all collections with counts
+     *
+     * @deprecated Use sys.listCollections via WebSocket instead for real-time updates
+     */
+    .get("/collections", async (ctx) => {
+    const { db, deploymentHandler } = (0, context_helper_js_1.getCtx)(ctx);
+    const { request, set } = ctx;
+    const auth = await (0, role_helpers_js_1.requireAdmin)((0, context_helper_js_1.getBetterAuth)(), request);
+    if (!auth) {
+        set.status = 401;
+        return { error: "Unauthorized" };
+    }
+    const collections = await adminDataService.listCollections({ db, deploymentHandler });
+    return { collections };
+}, {
+    detail: { summary: "List collections" },
+})
+    /**
+     * GET /_archlast/admin/documents
+     * List documents in a collection
+     */
+    .get("/documents", async (ctx) => {
+    const { db } = (0, context_helper_js_1.getCtx)(ctx);
+    const { query: queryParams, request, set } = ctx;
+    const auth = await (0, role_helpers_js_1.requireAdmin)((0, context_helper_js_1.getBetterAuth)(), request);
+    if (!auth) {
+        set.status = 401;
+        return { error: "Unauthorized" };
+    }
+    const collection = queryParams.collection;
+    if (!collection) {
+        set.status = 400;
+        return { error: "Missing collection" };
+    }
+    const limit = Math.min(100, Math.max(1, Number(queryParams.limit ?? "20")));
+    const offset = Math.max(0, Number(queryParams.offset ?? "0"));
+    const result = await adminDataService.listDocuments({
+        db,
+        collection,
+        limit,
+        offset,
+        sort: queryParams.sort,
+        filter: queryParams.filter,
+    });
+    return result;
+}, {
+    query: elysia_1.t.Object({
+        collection: elysia_1.t.Optional(elysia_1.t.String()),
+        limit: elysia_1.t.Optional(elysia_1.t.String()),
+        offset: elysia_1.t.Optional(elysia_1.t.String()),
+        sort: elysia_1.t.Optional(elysia_1.t.String()),
+        filter: elysia_1.t.Optional(elysia_1.t.String()),
+    }),
+    detail: { summary: "List documents" },
+})
+    /**
+     * POST /_archlast/admin/documents/create
+     * Create a new document
+     */
+    .post("/documents/create", async (ctx) => {
+    const { engine, wsHandler } = (0, context_helper_js_1.getCtx)(ctx);
+    const { body, request, set } = ctx;
+    const auth = await (0, role_helpers_js_1.requireAdmin)((0, context_helper_js_1.getBetterAuth)(), request);
+    if (!auth) {
+        set.status = 401;
+        return { error: "Unauthorized" };
+    }
+    const result = await adminDataService.createDocument({
+        engine,
+        wsHandler,
+        collection: body.collection,
+        data: body.data,
+    });
+    return result;
+}, {
+    body: CreateDocumentSchema,
+    detail: { summary: "Create document" },
+})
+    /**
+     * PATCH /_archlast/admin/documents/:id
+     * Update a document
+     */
+    .patch("/documents/:id", async (ctx) => {
+    const { engine, wsHandler } = (0, context_helper_js_1.getCtx)(ctx);
+    const { params, body, request, set } = ctx;
+    const auth = await (0, role_helpers_js_1.requireAdmin)((0, context_helper_js_1.getBetterAuth)(), request);
+    if (!auth) {
+        set.status = 401;
+        return { error: "Unauthorized" };
+    }
+    const result = await adminDataService.updateDocument({
+        engine,
+        wsHandler,
+        collection: body.collection,
+        id: params.id,
+        data: body.data,
+    });
+    return result;
+}, {
+    params: elysia_1.t.Object({ id: elysia_1.t.String() }),
+    body: UpdateDocumentSchema,
+    detail: { summary: "Update document" },
+})
+    /**
+     * DELETE /_archlast/admin/documents/:id
+     * Delete a document
+     */
+    .delete("/documents/:id", async (ctx) => {
+    const { engine, wsHandler } = (0, context_helper_js_1.getCtx)(ctx);
+    const { params, query: queryParams, request, set } = ctx;
+    const auth = await (0, role_helpers_js_1.requireAdmin)((0, context_helper_js_1.getBetterAuth)(), request);
+    if (!auth) {
+        set.status = 401;
+        return { error: "Unauthorized" };
+    }
+    const collection = queryParams.collection;
+    if (!collection) {
+        set.status = 400;
+        return { error: "Missing collection param" };
+    }
+    const result = await adminDataService.deleteDocument({
+        engine,
+        wsHandler,
+        collection,
+        id: params.id,
+    });
+    return result;
+}, {
+    params: elysia_1.t.Object({ id: elysia_1.t.String() }),
+    query: elysia_1.t.Object({ collection: elysia_1.t.Optional(elysia_1.t.String()) }),
+    detail: { summary: "Delete document" },
+})
+    /**
+     * POST /_archlast/admin/documents/bulk-delete
+     * Bulk delete documents
+     */
+    .post("/documents/bulk-delete", async (ctx) => {
+    const { engine, wsHandler, db } = (0, context_helper_js_1.getCtx)(ctx);
+    const { body, request, set } = ctx;
+    const auth = await (0, role_helpers_js_1.requireAdmin)((0, context_helper_js_1.getBetterAuth)(), request);
+    if (!auth) {
+        set.status = 401;
+        return { error: "Unauthorized" };
+    }
+    const result = await adminDataService.bulkDeleteDocuments({
+        engine,
+        wsHandler,
+        db,
+        collection: body.collection,
+        ids: body.ids,
+    });
+    return result;
+}, {
+    body: BulkDeleteSchema,
+    detail: { summary: "Bulk delete documents" },
+})
+    /**
+     * POST /_archlast/admin/execute-script
+     * Execute server-side admin script with typesafe ctx pattern
+     */
+    .post("/execute-script", async (ctx) => {
+    const { db, deploymentHandler, engine, wsHandler } = (0, context_helper_js_1.getCtx)(ctx);
+    const { body, request, set } = ctx;
+    const auth = await (0, role_helpers_js_1.requireAdmin)((0, context_helper_js_1.getBetterAuth)(), request);
+    if (!auth) {
+        set.status = 401;
+        return { error: "Unauthorized" };
+    }
+    const result = await adminDataService.executeScript({
+        db,
+        deploymentHandler,
+        wsHandler,
+        code: body.code,
+        timeout: body.timeout,
+    });
+    return result;
+}, {
+    body: ExecuteScriptSchema,
+    detail: { summary: "Execute admin script with typesafe ctx pattern" },
+})
+    /**
+     * GET /_archlast/admin/script-types
+     * Get TypeScript definitions for the Action Editor script context
+     */
+    .get("/script-types", async (ctx) => {
+    const { deploymentHandler } = (0, context_helper_js_1.getCtx)(ctx);
+    const { request, set } = ctx;
+    const auth = await (0, role_helpers_js_1.requireAdmin)((0, context_helper_js_1.getBetterAuth)(), request);
+    if (!auth) {
+        set.status = 401;
+        return { error: "Unauthorized" };
+    }
+    return adminDataService.getScriptTypes({ deploymentHandler });
+}, {
+    detail: { summary: "Get script type definitions for Monaco Editor" },
+});
+//# sourceMappingURL=data.controller.js.map

package/dist/controllers/admin/data.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"data.controller.js","sourceRoot":"","sources":["../../../src/controllers/admin/data.controller.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;GAaG;;;AAEH,mCAAmC;AACnC,gEAA0D;AAC1D,0EAA8F;AAC9F,oEAAqE;AAErE,gBAAgB;AAChB,MAAM,oBAAoB,GAAG,UAAC,CAAC,MAAM,CAAC;IAClC,UAAU,EAAE,UAAC,CAAC,MAAM,EAAE;IACtB,IAAI,EAAE,UAAC,CAAC,MAAM,CAAC,UAAC,CAAC,MAAM,EAAE,EAAE,UAAC,CAAC,GAAG,EAAE,CAAC;CACtC,CAAC,CAAC;AAEH,MAAM,oBAAoB,GAAG,UAAC,CAAC,MAAM,CAAC;IAClC,UAAU,EAAE,UAAC,CAAC,MAAM,EAAE;IACtB,IAAI,EAAE,UAAC,CAAC,MAAM,CAAC,UAAC,CAAC,MAAM,EAAE,EAAE,UAAC,CAAC,GAAG,EAAE,CAAC;CACtC,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG,UAAC,CAAC,MAAM,CAAC;IAC9B,UAAU,EAAE,UAAC,CAAC,MAAM,EAAE;IACtB,GAAG,EAAE,UAAC,CAAC,KAAK,CAAC,UAAC,CAAC,MAAM,EAAE,CAAC;CAC3B,CAAC,CAAC;AAEH,MAAM,mBAAmB,GAAG,UAAC,CAAC,MAAM,CAAC;IACjC,IAAI,EAAE,UAAC,CAAC,MAAM,EAAE;IAChB,OAAO,EAAE,UAAC,CAAC,QAAQ,CAAC,UAAC,CAAC,MAAM,EAAE,CAAC;CAClC,CAAC,CAAC;AAEH,oCAAoC;AACpC,MAAM,gBAAgB,GAAG,IAAA,wCAAsB,GAAE,CAAC;AAErC,QAAA,mBAAmB,GAAG,IAAI,eAAM,CAAC,EAAE,IAAI,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC;IACnE;;;;;OAKG;KACF,GAAG,CACA,cAAc,EACd,KAAK,EAAE,GAAQ,EAAE,EAAE;IACf,MAAM,EAAE,EAAE,EAAE,iBAAiB,EAAE,GAAG,IAAA,0BAAM,EAAC,GAAG,CAAC,CAAC;IAC9C,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC;IAE7B,MAAM,IAAI,GAAG,MAAM,IAAA,8BAAY,EAAC,IAAA,iCAAa,GAAE,EAAE,OAAO,CAAC,CAAC;IAC1D,IAAI,CAAC,IAAI,EAAE,CAAC;QACR,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC;QACjB,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;IACrC,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,gBAAgB,CAAC,eAAe,CAAC,EAAE,EAAE,EAAE,iBAAiB,EAAE,CAAC,CAAC;IACtF,OAAO,EAAE,WAAW,EAAE,CAAC;AAC3B,CAAC,EACD;IACI,MAAM,EAAE,EAAE,OAAO,EAAE,kBAAkB,EAAE;CAC1C,CACJ;IACD;;;OAGG;KACF,GAAG,CACA,YAAY,EACZ,KAAK,EAAE,GAAQ,EAAE,EAAE;IACf,MAAM,EAAE,EAAE,EAAE,GAAG,IAAA,0BAAM,EAAC,GAAG,CAAC,CAAC;IAC3B,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC;IAEjD,MAAM,IAAI,GAAG,MAAM,IAAA,8BAAY,EAAC,IAAA,iCAAa,GAAE,EAAE,OAAO,CAAC,CAAC;IAC1D,IAAI,CAAC,IAAI,EAAE,CAAC;QACR,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC;QACjB,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;IACrC,CAAC;IAED,MAAM,UAAU,GAAG,WAAW,CAAC,UAAU,CAAC;IAC1C,IAAI,CAAC,UAAU,EAAE,CAAC;QACd,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC;QACjB,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;IAC3C,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,WAAW,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5E,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC;IAE9D,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,aAAa,CAAC;QAChD,EAAE;QACF,UAAU;QACV,KAAK;QACL,MAAM;QACN,IAAI,EAAE,WAAW,CAAC,IAAI;QACtB,MAAM,EAAE,WAAW,CAAC,MAAM;KAC7B,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAClB,CAAC,EACD;IACI,KAAK,EAAE,UAAC,CAAC,MAAM,CAAC;QACZ,UAAU,EAAE,UAAC,CAAC,QAAQ,CAAC,UAAC,CAAC,MAAM,EAAE,CAAC;QAClC,KAAK,EAAE,UAAC,CAAC,QAAQ,CAAC,UAAC,CAAC,MAAM,EAAE,CAAC;QAC7B,MAAM,EAAE,UAAC,CAAC,QAAQ,CAAC,UAAC,CAAC,MAAM,EAAE,CAAC;QAC9B,IAAI,EAAE,UAAC,CAAC,QAAQ,CAAC,UAAC,CAAC,MAAM,EAAE,CAAC;QAC5B,MAAM,EAAE,UAAC,CAAC,QAAQ,CAAC,UAAC,CAAC,MAAM,EAAE,CAAC;KACjC,CAAC;IACF,MAAM,EAAE,EAAE,OAAO,EAAE,gBAAgB,EAAE;CACxC,CACJ;IACD;;;OAGG;KACF,IAAI,CACD,mBAAmB,EACnB,KAAK,EAAE,GAAQ,EAAE,EAAE;IACf,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,IAAA,0BAAM,EAAC,GAAG,CAAC,CAAC;IAC1C,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC;IAEnC,MAAM,IAAI,GAAG,MAAM,IAAA,8BAAY,EAAC,IAAA,iCAAa,GAAE,EAAE,OAAO,CAAC,CAAC;IAC1D,IAAI,CAAC,IAAI,EAAE,CAAC;QACR,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC;QACjB,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;IACrC,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,cAAc,CAAC;QACjD,MAAM;QACN,SAAS;QACT,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,IAAI,EAAE,IAAI,CAAC,IAAI;KAClB,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAClB,CAAC,EACD;IACI,IAAI,EAAE,oBAAoB;IAC1B,MAAM,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE;CACzC,CACJ;IACD;;;OAGG;KACF,KAAK,CACF,gBAAgB,EAChB,KAAK,EAAE,GAAQ,EAAE,EAAE;IACf,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,IAAA,0BAAM,EAAC,GAAG,CAAC,CAAC;IAC1C,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC;IAE3C,MAAM,IAAI,GAAG,MAAM,IAAA,8BAAY,EAAC,IAAA,iCAAa,GAAE,EAAE,OAAO,CAAC,CAAC;IAC1D,IAAI,CAAC,IAAI,EAAE,CAAC;QACR,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC;QACjB,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;IACrC,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,cAAc,CAAC;QACjD,MAAM;QACN,SAAS;QACT,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,IAAI,EAAE,IAAI,CAAC,IAAI;KAClB,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAClB,CAAC,EACD;IACI,MAAM,EAAE,UAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,UAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IACpC,IAAI,EAAE,oBAAoB;IAC1B,MAAM,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE;CACzC,CACJ;IACD;;;OAGG;KACF,MAAM,CACH,gBAAgB,EAChB,KAAK,EAAE,GAAQ,EAAE,EAAE;IACf,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,IAAA,0BAAM,EAAC,GAAG,CAAC,CAAC;IAC1C,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC;IAEzD,MAAM,IAAI,GAAG,MAAM,IAAA,8BAAY,EAAC,IAAA,iCAAa,GAAE,EAAE,OAAO,CAAC,CAAC;IAC1D,IAAI,CAAC,IAAI,EAAE,CAAC;QACR,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC;QACjB,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;IACrC,CAAC;IAED,MAAM,UAAU,GAAG,WAAW,CAAC,UAAU,CAAC;IAC1C,IAAI,CAAC,UAAU,EAAE,CAAC;QACd,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC;QACjB,OAAO,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC;IACjD,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,cAAc,CAAC;QACjD,MAAM;QACN,SAAS;QACT,UAAU;QACV,EAAE,EAAE,MAAM,CAAC,EAAE;KAChB,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAClB,CAAC,EACD;IACI,MAAM,EAAE,UAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,UAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IACpC,KAAK,EAAE,UAAC,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,UAAC,CAAC,QAAQ,CAAC,UAAC,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;IACvD,MAAM,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE;CACzC,CACJ;IACD;;;OAGG;KACF,IAAI,CACD,wBAAwB,EACxB,KAAK,EAAE,GAAQ,EAAE,EAAE;IACf,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,GAAG,IAAA,0BAAM,EAAC,GAAG,CAAC,CAAC;IAC9C,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC;IAEnC,MAAM,IAAI,GAAG,MAAM,IAAA,8BAAY,EAAC,IAAA,iCAAa,GAAE,EAAE,OAAO,CAAC,CAAC;IAC1D,IAAI,CAAC,IAAI,EAAE,CAAC;QACR,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC;QACjB,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;IACrC,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,mBAAmB,CAAC;QACtD,MAAM;QACN,SAAS;QACT,EAAE;QACF,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,GAAG,EAAE,IAAI,CAAC,GAAG;KAChB,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAClB,CAAC,EACD;IACI,IAAI,EAAE,gBAAgB;IACtB,MAAM,EAAE,EAAE,OAAO,EAAE,uBAAuB,EAAE;CAC/C,CACJ;IACD;;;OAGG;KACF,IAAI,CACD,iBAAiB,EACjB,KAAK,EAAE,GAAQ,EAAE,EAAE;IACf,MAAM,EAAE,EAAE,EAAE,iBAAiB,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,IAAA,0BAAM,EAAC,GAAG,CAAC,CAAC;IACjE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC;IAEnC,MAAM,IAAI,GAAG,MAAM,IAAA,8BAAY,EAAC,IAAA,iCAAa,GAAE,EAAE,OAAO,CAAC,CAAC;IAC1D,IAAI,CAAC,IAAI,EAAE,CAAC;QACR,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC;QACjB,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;IACrC,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,aAAa,CAAC;QAChD,EAAE;QACF,iBAAiB;QACjB,SAAS;QACT,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,OAAO,EAAE,IAAI,CAAC,OAAO;KACxB,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAClB,CAAC,EACD;IACI,IAAI,EAAE,mBAAmB;IACzB,MAAM,EAAE,EAAE,OAAO,EAAE,gDAAgD,EAAE;CACxE,CACJ;IACD;;;OAGG;KACF,GAAG,CACA,eAAe,EACf,KAAK,EAAE,GAAQ,EAAE,EAAE;IACf,MAAM,EAAE,iBAAiB,EAAE,GAAG,IAAA,0BAAM,EAAC,GAAG,CAAC,CAAC;IAC1C,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC;IAE7B,MAAM,IAAI,GAAG,MAAM,IAAA,8BAAY,EAAC,IAAA,iCAAa,GAAE,EAAE,OAAO,CAAC,CAAC;IAC1D,IAAI,CAAC,IAAI,EAAE,CAAC;QACR,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC;QACjB,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;IACrC,CAAC;IAED,OAAO,gBAAgB,CAAC,cAAc,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC;AAClE,CAAC,EACD;IACI,MAAM,EAAE,EAAE,OAAO,EAAE,+CAA+C,EAAE;CACvE,CACJ,CAAC"}

package/dist/controllers/admin/provisioning.controller.d.ts

@@ -0,0 +1,77 @@
+/**
+ * Provisioning Controller (Elysia Plugin) - Better-Auth Version
+ * Handles /_archlast/admin/provision endpoint for SaaS instance initialization
+ *
+ * Uses Better-Auth for creating admin users and API keys.
+ */
+import { Elysia } from "elysia";
+export declare const provisioningController: Elysia<"/provision", {
+    decorator: {};
+    store: {};
+    derive: {};
+    resolve: {};
+}, {
+    typebox: {};
+    error: {};
+}, {
+    schema: {};
+    standaloneSchema: {};
+    macro: {};
+    macroFn: {};
+    parser: {};
+    response: {};
+}, {
+    provision: {
+        post: {
+            body: {
+                name?: string | undefined;
+                generateApiKey?: boolean | undefined;
+                email: string;
+                password: string;
+            };
+            params: {};
+            query: unknown;
+            headers: unknown;
+            response: {
+                200: {
+                    error: string;
+                    success?: undefined;
+                    user?: undefined;
+                    apiKey?: undefined;
+                } | {
+                    success: boolean;
+                    user: {
+                        id: any;
+                        email: any;
+                        name: any;
+                        role: string;
+                    };
+                    apiKey: any;
+                    error?: undefined;
+                };
+                422: {
+                    type: "validation";
+                    on: string;
+                    summary?: string;
+                    message?: string;
+                    found?: unknown;
+                    property?: string;
+                    expected?: string;
+                };
+            };
+        };
+    };
+}, {
+    derive: {};
+    resolve: {};
+    schema: {};
+    standaloneSchema: {};
+    response: {};
+}, {
+    derive: {};
+    resolve: {};
+    schema: {};
+    standaloneSchema: {};
+    response: {};
+}>;
+//# sourceMappingURL=provisioning.controller.d.ts.map

package/dist/controllers/admin/provisioning.controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provisioning.controller.d.ts","sourceRoot":"","sources":["../../../src/controllers/admin/provisioning.controller.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,MAAM,EAAK,MAAM,QAAQ,CAAC;AAWnC,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA0I9B,CAAC"}

package/dist/controllers/admin/provisioning.controller.js

@@ -0,0 +1,141 @@
+"use strict";
+/**
+ * Provisioning Controller (Elysia Plugin) - Better-Auth Version
+ * Handles /_archlast/admin/provision endpoint for SaaS instance initialization
+ *
+ * Uses Better-Auth for creating admin users and API keys.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.provisioningController = void 0;
+const elysia_1 = require("elysia");
+const logger_js_1 = require("../../logging/logger.js");
+const context_helper_js_1 = require("../../http/context-helper.js");
+const ProvisionSchema = elysia_1.t.Object({
+    email: elysia_1.t.String({ format: "email" }),
+    password: elysia_1.t.String({ minLength: 8 }),
+    name: elysia_1.t.Optional(elysia_1.t.String()),
+    generateApiKey: elysia_1.t.Optional(elysia_1.t.Boolean()),
+});
+exports.provisioningController = new elysia_1.Elysia({
+    prefix: "/provision",
+    tags: ["Provisioning"],
+})
+    /**
+     * POST /_archlast/admin/provision
+     * One-time provisioning endpoint for SaaS platform
+     * Creates the first admin user during instance setup
+     */
+    .post("/", async (ctx) => {
+    const { body, request, set } = ctx;
+    const auth = (0, context_helper_js_1.getBetterAuth)();
+    // Verify provisioning secret
+    const secret = request.headers.get("x-provisioning-secret");
+    const expectedSecret = process.env.ARCHLAST_PROVISIONING_SECRET;
+    if (!expectedSecret || secret !== expectedSecret) {
+        logger_js_1.logger.log({
+            timestamp: Date.now(),
+            level: "warn",
+            kind: "system",
+            message: "[Provisioning] Invalid provisioning secret attempt",
+        });
+        set.status = 403;
+        return { error: "Invalid provisioning secret" };
+    }
+    // Check if any admin users exist (one-time use)
+    const existingAdmins = await auth.api.listUsers({
+        query: { role: "admin" },
+        limit: 1,
+    });
+    if (existingAdmins && existingAdmins.length > 0) {
+        logger_js_1.logger.log({
+            timestamp: Date.now(),
+            level: "warn",
+            kind: "system",
+            message: "[Provisioning] Attempted to provision already provisioned instance",
+        });
+        set.status = 409;
+        return { error: "Instance already provisioned" };
+    }
+    // Validate password
+    if (body.password.length < 8) {
+        set.status = 400;
+        return { error: "Password must be at least 8 characters" };
+    }
+    try {
+        // Create first admin user using Better-Auth
+        const result = await auth.api.signUpEmail({
+            body: {
+                email: body.email,
+                password: body.password,
+                name: body.name || body.email.split("@")[0],
+            },
+        });
+        if (!result?.user) {
+            set.status = 500;
+            return { error: "Failed to create user" };
+        }
+        // Set admin role using Better-Auth admin plugin API
+        await auth.api.admin.setRole({
+            body: {
+                userId: result.user.id,
+                role: "admin",
+            },
+        });
+        logger_js_1.logger.log({
+            timestamp: Date.now(),
+            level: "info",
+            kind: "system",
+            message: "[Provisioning] Admin user created successfully",
+            context: { userId: result.user.id, email: body.email },
+        });
+        // Optionally generate an API key
+        let apiKey = null;
+        if (body.generateApiKey) {
+            const keyResult = await auth.api.createApiKey({
+                body: {
+                    name: "SaaS Control Plane API Key",
+                    userId: result.user.id,
+                    // No expiration for long-lived API key
+                },
+            });
+            if (keyResult?.apiKey) {
+                apiKey = keyResult.apiKey;
+                logger_js_1.logger.log({
+                    timestamp: Date.now(),
+                    level: "info",
+                    kind: "system",
+                    message: "[Provisioning] API key created",
+                    context: { keyPrefix: keyResult.keyPrefix },
+                });
+            }
+        }
+        return {
+            success: true,
+            user: {
+                id: result.user.id,
+                email: result.user.email,
+                name: result.user.name,
+                role: "admin",
+            },
+            apiKey, // Only returned if generateApiKey=true
+        };
+    }
+    catch (err) {
+        logger_js_1.logger.log({
+            timestamp: Date.now(),
+            level: "error",
+            kind: "system",
+            message: "[Provisioning] Failed to create admin user",
+            context: { err },
+        });
+        set.status = 500;
+        return { error: "Failed to provision instance" };
+    }
+}, {
+    body: ProvisionSchema,
+    detail: {
+        summary: "Provision admin user",
+        description: "One-time endpoint for SaaS platform to create the first admin user. Requires x-provisioning-secret header.",
+    },
+});
+//# sourceMappingURL=provisioning.controller.js.map

package/dist/controllers/admin/provisioning.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provisioning.controller.js","sourceRoot":"","sources":["../../../src/controllers/admin/provisioning.controller.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,mCAAmC;AACnC,uDAAiD;AACjD,oEAA6D;AAE7D,MAAM,eAAe,GAAG,UAAC,CAAC,MAAM,CAAC;IAC7B,KAAK,EAAE,UAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IACpC,QAAQ,EAAE,UAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IACpC,IAAI,EAAE,UAAC,CAAC,QAAQ,CAAC,UAAC,CAAC,MAAM,EAAE,CAAC;IAC5B,cAAc,EAAE,UAAC,CAAC,QAAQ,CAAC,UAAC,CAAC,OAAO,EAAE,CAAC;CAC1C,CAAC,CAAC;AAEU,QAAA,sBAAsB,GAAG,IAAI,eAAM,CAAC;IAC7C,MAAM,EAAE,YAAY;IACpB,IAAI,EAAE,CAAC,cAAc,CAAC;CACzB,CAAC;IACE;;;;OAIG;KACF,IAAI,CACD,GAAG,EACH,KAAK,EAAE,GAAQ,EAAE,EAAE;IACf,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC;IACnC,MAAM,IAAI,GAAG,IAAA,iCAAa,GAAE,CAAC;IAE7B,6BAA6B;IAC7B,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;IAC5D,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC;IAEhE,IAAI,CAAC,cAAc,IAAI,MAAM,KAAK,cAAc,EAAE,CAAC;QAC/C,kBAAM,CAAC,GAAG,CAAC;YACP,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,KAAK,EAAE,MAAM;YACb,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,oDAAoD;SAChE,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC;QACjB,OAAO,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC;IACpD,CAAC;IAED,gDAAgD;IAChD,MAAM,cAAc,GAAG,MAAO,IAAY,CAAC,GAAG,CAAC,SAAS,CAAC;QACrD,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;QACxB,KAAK,EAAE,CAAC;KACX,CAAC,CAAC;IAEH,IAAI,cAAc,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9C,kBAAM,CAAC,GAAG,CAAC;YACP,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,KAAK,EAAE,MAAM;YACb,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,oEAAoE;SAChF,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC;QACjB,OAAO,EAAE,KAAK,EAAE,8BAA8B,EAAE,CAAC;IACrD,CAAC;IAED,oBAAoB;IACpB,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC;QACjB,OAAO,EAAE,KAAK,EAAE,wCAAwC,EAAE,CAAC;IAC/D,CAAC;IAED,IAAI,CAAC;QACD,4CAA4C;QAC5C,MAAM,MAAM,GAAG,MAAO,IAAY,CAAC,GAAG,CAAC,WAAW,CAAC;YAC/C,IAAI,EAAE;gBACF,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;aAC9C;SACJ,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;YAChB,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC;YACjB,OAAO,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC;QAC9C,CAAC;QAED,oDAAoD;QACpD,MAAO,IAAY,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC;YAClC,IAAI,EAAE;gBACF,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE;gBACtB,IAAI,EAAE,OAAO;aAChB;SACJ,CAAC,CAAC;QAEH,kBAAM,CAAC,GAAG,CAAC;YACP,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,KAAK,EAAE,MAAM;YACb,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,gDAAgD;YACzD,OAAO,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE;SACzD,CAAC,CAAC;QAEH,iCAAiC;QACjC,IAAI,MAAM,GAAG,IAAI,CAAC;QAClB,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACtB,MAAM,SAAS,GAAG,MAAO,IAAY,CAAC,GAAG,CAAC,YAAY,CAAC;gBACnD,IAAI,EAAE;oBACF,IAAI,EAAE,4BAA4B;oBAClC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE;oBACtB,uCAAuC;iBAC1C;aACJ,CAAC,CAAC;YAEH,IAAI,SAAS,EAAE,MAAM,EAAE,CAAC;gBACpB,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC;gBAE1B,kBAAM,CAAC,GAAG,CAAC;oBACP,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;oBACrB,KAAK,EAAE,MAAM;oBACb,IAAI,EAAE,QAAQ;oBACd,OAAO,EAAE,gCAAgC;oBACzC,OAAO,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,SAAS,EAAE;iBAC9C,CAAC,CAAC;YACP,CAAC;QACL,CAAC;QAED,OAAO;YACH,OAAO,EAAE,IAAI;YACb,IAAI,EAAE;gBACF,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE;gBAClB,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK;gBACxB,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;gBACtB,IAAI,EAAE,OAAO;aAChB;YACD,MAAM,EAAE,uCAAuC;SAClD,CAAC;IACN,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,kBAAM,CAAC,GAAG,CAAC;YACP,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,KAAK,EAAE,OAAO;YACd,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,4CAA4C;YACrD,OAAO,EAAE,EAAE,GAAG,EAAE;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC;QACjB,OAAO,EAAE,KAAK,EAAE,8BAA8B,EAAE,CAAC;IACrD,CAAC;AACL,CAAC,EACD;IACI,IAAI,EAAE,eAAe;IACrB,MAAM,EAAE;QACJ,OAAO,EAAE,sBAAsB;QAC/B,WAAW,EACP,4GAA4G;KACnH;CACJ,CACJ,CAAC"}

package/dist/controllers/admin/settings.controller.d.ts

@@ -0,0 +1,153 @@
+/**
+ * Admin Settings Controller (Elysia Plugin)
+ * Handles /_archlast/admin/settings/* endpoints
+ */
+import { Elysia } from "elysia";
+export declare const adminSettingsController: Elysia<"/settings", {
+    decorator: {};
+    store: {};
+    derive: {};
+    resolve: {};
+}, {
+    typebox: {};
+    error: {};
+}, {
+    schema: {};
+    standaloneSchema: {};
+    macro: {};
+    macroFn: {};
+    parser: {};
+    response: {};
+}, {
+    settings: {
+        get: {
+            body: unknown;
+            params: {};
+            query: unknown;
+            headers: unknown;
+            response: {
+                200: {
+                    [x: string]: unknown;
+                };
+            };
+        };
+    };
+} & {
+    settings: {
+        smtp: {
+            get: {
+                body: unknown;
+                params: {};
+                query: unknown;
+                headers: unknown;
+                response: {
+                    200: {
+                        error: string;
+                        host?: undefined;
+                        port?: undefined;
+                        user?: undefined;
+                        pass?: undefined;
+                        from?: undefined;
+                        secure?: undefined;
+                        enabled?: undefined;
+                        configured?: undefined;
+                    } | {
+                        host: string;
+                        port: number;
+                        user: string;
+                        pass: string;
+                        from: string;
+                        secure: boolean;
+                        enabled: boolean;
+                        configured: boolean;
+                        error?: undefined;
+                    };
+                };
+            };
+        };
+    };
+} & {
+    settings: {
+        smtp: {
+            put: {
+                body: {
+                    user?: string | undefined;
+                    enabled?: boolean | undefined;
+                    secure?: boolean | undefined;
+                    host?: string | undefined;
+                    port?: string | number | undefined;
+                    from?: string | undefined;
+                    pass?: string | undefined;
+                };
+                params: {};
+                query: unknown;
+                headers: unknown;
+                response: {
+                    200: {
+                        error: string;
+                        success?: undefined;
+                        message?: undefined;
+                    } | {
+                        success: boolean;
+                        message: string;
+                        error?: undefined;
+                    };
+                    422: {
+                        type: "validation";
+                        on: string;
+                        summary?: string;
+                        message?: string;
+                        found?: unknown;
+                        property?: string;
+                        expected?: string;
+                    };
+                };
+            };
+        };
+    };
+} & {
+    settings: {
+        smtp: {
+            test: {
+                post: {
+                    body: {
+                        email: string;
+                    };
+                    params: {};
+                    query: unknown;
+                    headers: unknown;
+                    response: {
+                        200: {
+                            success: boolean;
+                            error?: string;
+                        } | {
+                            error: string;
+                        };
+                        422: {
+                            type: "validation";
+                            on: string;
+                            summary?: string;
+                            message?: string;
+                            found?: unknown;
+                            property?: string;
+                            expected?: string;
+                        };
+                    };
+                };
+            };
+        };
+    };
+}, {
+    derive: {};
+    resolve: {};
+    schema: {};
+    standaloneSchema: {};
+    response: {};
+}, {
+    derive: {};
+    resolve: {};
+    schema: {};
+    standaloneSchema: {};
+    response: {};
+}>;
+//# sourceMappingURL=settings.controller.d.ts.map

package/dist/controllers/admin/settings.controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings.controller.d.ts","sourceRoot":"","sources":["../../../src/controllers/admin/settings.controller.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,MAAM,EAAK,MAAM,QAAQ,CAAC;AAmBnC,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA4H/B,CAAC"}