@crowdin/app-project-module 2.9.1 → 2.11.0

package/out/storage/drizzle/index.d.ts

@@ -28,6 +28,7 @@ export declare class DrizzleStorage implements Storage {
     updateIntegrationManagers(id: string, managers: string): Promise<void>;
     getIntegrationCredentials(id: string): Promise<IntegrationCredentials | undefined>;
     getAllIntegrationCredentials(crowdinId: string): Promise<IntegrationCredentials[]>;
+    getIntegrationCredentialsByProject(organization: string, projectId: number): Promise<IntegrationCredentials[]>;
     deleteIntegrationCredentials(id: string): Promise<void>;
     deleteAllIntegrationCredentials(crowdinId: string): Promise<void>;
     saveMetadata(id: string, metadata: any, crowdinId: string): Promise<void>;

package/out/storage/drizzle/index.js

@@ -13,6 +13,7 @@ exports.DrizzleStorage = void 0;
 const crypto_1 = require("crypto");
 const drizzle_orm_1 = require("drizzle-orm");
 const types_1 = require("../../modules/integration/util/types");
+const token_1 = require("../../util/app-functions/token");
 const d1_1 = require("./d1");
 const types_2 = require("./d1/types");
 const postgresql_1 = require("./postgresql");
@@ -274,6 +275,37 @@ class DrizzleStorage {
             }));
         });
     }
+    getIntegrationCredentialsByProject(organization, projectId) {
+        return __awaiter(this, void 0, void 0, function* () {
+            yield this.migrationPromise;
+            // id format: "{organization}__{projectId}__{userId}"
+            // parseCrowdinId is the authoritative parser; used as a post-filter in both paths.
+            const filterByProjectId = (item) => {
+                const { organization: itemOrganization, projectId: itemProjectId } = (0, token_1.parseCrowdinId)(item.id);
+                return itemOrganization === organization && itemProjectId === projectId;
+            };
+            // Org names with underscores make the LIKE pre-filter unreliable (SQL treats _ as a
+            // single-char wildcard), so fall back to a full org-level load + JS filter.
+            if (organization.includes('_')) {
+                const all = yield this.getAllIntegrationCredentials(organization);
+                return all.filter(filterByProjectId);
+            }
+            // LIKE narrows the DB scan to rows whose id starts with the right org and projectId prefix.
+            const res = yield this.db.query.integrationCredentials.findMany({
+                where: (0, drizzle_orm_1.and)((0, drizzle_orm_1.eq)(this.schema.integrationCredentials.crowdin_id, organization), (0, drizzle_orm_1.like)(this.schema.integrationCredentials.id, `${organization}__${projectId}__%`)),
+            });
+            return (res
+                .map((item) => ({
+                id: item.id,
+                credentials: item.credentials,
+                crowdinId: item.crowdin_id,
+                managers: item.managers,
+            }))
+                // SQL LIKE treats _ as a single-char wildcard, so "org__1__%" also matches "org__10__456".
+                // parseCrowdinId gives the exact match LIKE cannot guarantee.
+                .filter(filterByProjectId));
+        });
+    }
     deleteIntegrationCredentials(id) {
         return __awaiter(this, void 0, void 0, function* () {
             yield this.migrationPromise;

package/out/storage/types.d.ts

@@ -28,6 +28,7 @@ export interface Storage {
     updateIntegrationManagers(id: string, managers: string): Promise<void>;
     getIntegrationCredentials(id: string): Promise<IntegrationCredentials | undefined>;
     getAllIntegrationCredentials(crowdinId: string): Promise<IntegrationCredentials[]>;
+    getIntegrationCredentialsByProject(organization: string, projectId: number): Promise<IntegrationCredentials[]>;
     deleteIntegrationCredentials(id: string): Promise<void>;
     deleteAllIntegrationCredentials(crowdinId: string): Promise<void>;
     saveMetadata(id: string, metadata: any, crowdinId: string): Promise<void>;

package/out/types.d.ts

@@ -1,4 +1,5 @@
 import Crowdin from '@crowdin/crowdin-api-client';
+import type { AppStorage } from '@crowdin/apps-storage';
 import { Request } from 'express';
 import { ContextContent } from './modules/context-menu/types';
 import { CustomMTLogic } from './modules/custom-mt/types';
@@ -393,7 +394,8 @@ export declare enum Scope {
     AI_PROVIDERS = "ai.provider",
     AI_PROMPTS = "ai.prompt",
     AI_PROXIES = "ai.proxy",
-    APPLICATIONS = "application"
+    APPLICATIONS = "application",
+    APPLICATION_STORAGE = "application.storage"
 }
 export interface CrowdinClientRequest extends Request {
     crowdinApiClient: Crowdin;
@@ -478,6 +480,18 @@ export interface CrowdinAppUtilities extends CrowdinMetadataStore {
     }) => (req: any, res: any, next: any) => void;
     storage: Storage;
     cron: Cron;
+    /**
+     * Crowdin-hosted storage for this app installation (the `kv` key-value space).
+     * Unlike `storage` (the app's own database), this data lives on the Crowdin side
+     * and is shared across the installation. Requires the `crowdin_app` authentication
+     * type (the default) - the storage endpoints accept only the application's own
+     * token, so every other authentication type is rejected. `kv.user.*` records are
+     * private to the identity behind the stored credentials.
+     * Optionally enumerate the app's module keys in the type parameter
+     * (`crowdinStorage<'main' | 'reports'>(...)`) to get the full
+     * `module:{moduleKey}:` prefixes suggested in key positions.
+     */
+    crowdinStorage: <M extends string = never>(crowdinId: string) => Promise<AppStorage<M>>;
 }
 export interface CrowdinMetadataStore {
     saveMetadata: (options: {

package/out/types.js

@@ -36,6 +36,7 @@ var Scope;
     Scope["AI_PROMPTS"] = "ai.prompt";
     Scope["AI_PROXIES"] = "ai.proxy";
     Scope["APPLICATIONS"] = "application";
+    Scope["APPLICATION_STORAGE"] = "application.storage";
 })(Scope || (exports.Scope = Scope = {}));
 var AccountType;
 (function (AccountType) {

package/out/util/connection.js

@@ -266,10 +266,7 @@ function resolveIntegrationAccess(clientId) {
         const ownerIds = [];
         let projectIntegrationCredentials = [];
         if (!integrationCredentials) {
-            projectIntegrationCredentials = (yield (0, storage_1.getStorage)().getAllIntegrationCredentials(organization)).filter((item) => {
-                const { organization: itemOrganization, projectId: itemProjectId } = (0, token_1.parseCrowdinId)(item.id);
-                return itemOrganization === organization && itemProjectId === projectId;
-            });
+            projectIntegrationCredentials = yield (0, storage_1.getStorage)().getIntegrationCredentialsByProject(organization, projectId);
             for (const credentials of projectIntegrationCredentials) {
                 ownerIds.push((0, token_1.parseCrowdinId)(credentials.id).userId);
                 if (credentials.managers) {

package/out/util/cron.d.ts

@@ -12,8 +12,6 @@ export interface Cron {
  */
 export declare class NodeCron implements Cron {
     private cron;
-    private pendingSchedules;
-    private initialized;
     constructor();
     schedule(expression: string, task: () => Promise<void>): void;
 }

package/out/util/cron.js

@@ -1,72 +1,25 @@
 "use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.NodeCron = void 0;
 exports.initialize = initialize;
 exports.getCron = getCron;
+const logs_formatter_1 = require("@crowdin/logs-formatter");
 const logger_1 = require("./logger");
 /**
  * Default Node.js cron handler that uses node-cron
  */
 class NodeCron {
     constructor() {
-        this.pendingSchedules = [];
-        this.initialized = false;
-        // Dynamically import node-cron
-        Promise.resolve().then(() => __importStar(require('node-cron'))).then((nodeCron) => {
+        try {
+            const nodeCron = require('node-cron');
             this.cron = nodeCron.default || nodeCron;
-            this.initialized = true;
-            // Schedule all pending tasks
-            this.pendingSchedules.forEach(({ expression, task }) => {
-                this.cron.schedule(expression, task);
-            });
-            this.pendingSchedules = [];
-        })
-            .catch((error) => {
-            console.error('Failed to load node-cron:', error);
+        }
+        catch (error) {
             throw new Error('node-cron is required for the default cron. Please install it or provide a custom cron in config.');
-        });
+        }
     }
     schedule(expression, task) {
-        if (this.initialized && this.cron) {
-            this.cron.schedule(expression, task);
-        }
-        else {
-            // Queue the task until node-cron is loaded
-            this.pendingSchedules.push({ expression, task });
-        }
+        this.cron.schedule(expression, task);
     }
 }
 exports.NodeCron = NodeCron;
@@ -78,13 +31,22 @@ let cron;
 function initialize(config) {
     if (config.cron) {
         (0, logger_1.log)('Using custom cron implementation');
-        cron = config.cron;
+        cron = withContextScope(config.cron);
     }
     else {
         (0, logger_1.log)('Using default NodeCron implementation');
-        cron = new NodeCron();
+        cron = withContextScope(new NodeCron());
     }
 }
+/**
+ * Gives every scheduled run its own log context scope, isolating it from requests and other runs.
+ * A run that itself fans out across tenants opens per-branch scopes with `runWithContext`.
+ */
+function withContextScope(cron) {
+    return {
+        schedule: (expression, task) => cron.schedule(expression, () => (0, logs_formatter_1.runWithContext)({}, task)),
+    };
+}
 /**
  * Get the initialized cron instance
  * @returns The cron instance

package/out/util/crowdin-storage.d.ts

@@ -0,0 +1,7 @@
+import { type AppStorage, type StorageTransport } from '@crowdin/apps-storage';
+import { Config } from '../types';
+export declare function createCrowdinStorageTransport({ config, crowdinId, }: {
+    config: Config;
+    crowdinId: string;
+}): StorageTransport;
+export declare function createCrowdinStorage<M extends string = never>(config: Config, crowdinId: string): Promise<AppStorage<M>>;

package/out/util/crowdin-storage.js

@@ -0,0 +1,78 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createCrowdinStorageTransport = createCrowdinStorageTransport;
+exports.createCrowdinStorage = createCrowdinStorage;
+const axios_1 = __importDefault(require("axios"));
+const apps_storage_1 = require("@crowdin/apps-storage");
+const storage_1 = require("../storage");
+const types_1 = require("../types");
+const connection_1 = require("./connection");
+function loadCredentials(crowdinId) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const credentials = yield (0, storage_1.getStorage)().getCrowdinCredentials(crowdinId);
+        if (!credentials) {
+            throw new Error('Failed to find Crowdin credentials');
+        }
+        return credentials;
+    });
+}
+function createCrowdinStorageTransport({ config, crowdinId, }) {
+    const send = (request, token, apiUrl) => __awaiter(this, void 0, void 0, function* () {
+        const url = `${apiUrl}/applications/${encodeURIComponent(config.identifier)}/storage/${request.path}`;
+        return axios_1.default.request({
+            method: request.method,
+            url,
+            params: request.query,
+            data: request.body,
+            headers: { Authorization: `Bearer ${token}` },
+            validateStatus: () => true,
+        });
+    });
+    return (request) => __awaiter(this, void 0, void 0, function* () {
+        const initial = yield (0, connection_1.prepareCrowdinClient)({
+            config,
+            credentials: yield loadCredentials(crowdinId),
+            autoRenew: true,
+        });
+        let response = yield send(request, initial.token, initial.client.url);
+        if (response.status === 401) {
+            const refreshed = yield (0, connection_1.prepareCrowdinClient)({
+                config,
+                credentials: yield loadCredentials(crowdinId),
+                autoRenew: true,
+            });
+            response = yield send(request, refreshed.token, refreshed.client.url);
+        }
+        return { status: response.status, body: response.data };
+    });
+}
+function createCrowdinStorage(config, crowdinId) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const authenticationType = config.authenticationType || types_1.AuthenticationType.APP;
+        if (authenticationType !== types_1.AuthenticationType.APP) {
+            throw new Error(`Crowdin storage is not available for ${authenticationType} authentication because the storage endpoints accept only the application's own token`);
+        }
+        yield loadCredentials(crowdinId);
+        return (0, apps_storage_1.createStorage)({
+            transport: createCrowdinStorageTransport({ config, crowdinId }),
+            getUserId: () => __awaiter(this, void 0, void 0, function* () {
+                const credentials = yield loadCredentials(crowdinId);
+                return credentials.userId !== null && credentials.userId !== undefined
+                    ? String(credentials.userId)
+                    : undefined;
+            }),
+        });
+    });
+}

package/out/util/logger.d.ts

@@ -1,5 +1,6 @@
 import { AxiosError } from 'axios';
-import { Config, CrowdinClientRequest, CrowdinContextInfo, UnauthorizedConfig } from '../types';
+import { Context } from '@crowdin/logs-formatter';
+import { Config, CrowdinClientRequest, CrowdinContextInfo, CrowdinCredentials, UnauthorizedConfig } from '../types';
 import { IntegrationRequest } from '../modules/integration/types';
 import { Request } from 'express';
 export type LogFunction = (message: string) => void;
@@ -11,6 +12,27 @@ export type LogContext = {
 };
 export declare function initialize(config: Config | UnauthorizedConfig): void;
 export declare function prepareContext(context: CrowdinContextInfo): LogContext;
+/**
+ * Maps a framework object to the log context the formatter's record schema expects.
+ * A field the source has no value for is omitted, not `''` - the record would emit `''` verbatim.
+ * `appIdentifier` is not mapped: it is set once at startup via the formatter's `setup()`.
+ * @param source - A `CrowdinContextInfo` yields the full tenant. `CrowdinCredentials` carry no
+ * project, so that source yields the organization-level tenant - the shape the record's
+ * organization/user fallbacks read.
+ * @returns The mapped context. The `Context` return type is load-bearing: the formatter's
+ * `setContext()` takes `any` and drops a wrong shape silently.
+ */
+export declare function logContext(source: CrowdinContextInfo): Context;
+export declare function logContext(source: CrowdinCredentials): Context;
+/**
+ * Stamps the active scope's log context with the tenant of a Crowdin context - the one place a
+ * Crowdin context reaches the formatter. Guarded, so a disabled formatter is never touched (its
+ * out-of-scope warning included). Outside any scope the formatter ignores the write and warns once
+ * per call site; open one first with `runWithContext` when the work is not a request.
+ * @param context - The Crowdin context of the unit of work being logged.
+ * @returns The mapped log context, for callers that carry it onward.
+ */
+export declare function setLogCrowdinContext(context: CrowdinContextInfo): Context;
 export declare function withContext(context: CrowdinContextInfo): LogFunction;
 export declare function withContextError(context: CrowdinContextInfo): LogFunction;
 export declare function log(message: string, context?: CrowdinContextInfo): void;

package/out/util/logger.js

@@ -45,6 +45,8 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.AppModuleAggregateError = exports.AppUserModuleError = exports.AppModuleError = void 0;
 exports.initialize = initialize;
 exports.prepareContext = prepareContext;
+exports.logContext = logContext;
+exports.setLogCrowdinContext = setLogCrowdinContext;
 exports.withContext = withContext;
 exports.withContextError = withContextError;
 exports.log = log;
@@ -58,9 +60,11 @@ const logsFormatter = __importStar(require("@crowdin/logs-formatter"));
 const storage_1 = require("../storage");
 let logConfig;
 let onError;
+let formatterDisabled = false;
 function initialize(config) {
     logConfig = config.logger;
     onError = config.onError;
+    formatterDisabled = Boolean(config.disableLogsFormatter);
 }
 function prepareContext(context) {
     return {
@@ -69,6 +73,36 @@ function prepareContext(context) {
         projectId: context.jwtPayload.context.project_id,
     };
 }
+function logContext(source) {
+    if (!('jwtPayload' in source)) {
+        return {
+            organization: Object.assign({ id: source.organizationId }, (source.domain && { domain: source.domain })),
+            user: { id: source.userId },
+        };
+    }
+    const payload = source.jwtPayload.context;
+    return {
+        project: Object.assign(Object.assign({ id: payload.project_id }, (payload.project_identifier && { identifier: payload.project_identifier })), { organization_id: payload.organization_id, user_id: payload.user_id }),
+        user: Object.assign({ id: payload.user_id }, (payload.user_login && { login: payload.user_login })),
+        // the cast: the formatter's type insists on `domain`, and an absent one must stay absent
+        organization: Object.assign({ id: payload.organization_id }, (payload.organization_domain && { domain: payload.organization_domain })),
+    };
+}
+/**
+ * Stamps the active scope's log context with the tenant of a Crowdin context - the one place a
+ * Crowdin context reaches the formatter. Guarded, so a disabled formatter is never touched (its
+ * out-of-scope warning included). Outside any scope the formatter ignores the write and warns once
+ * per call site; open one first with `runWithContext` when the work is not a request.
+ * @param context - The Crowdin context of the unit of work being logged.
+ * @returns The mapped log context, for callers that carry it onward.
+ */
+function setLogCrowdinContext(context) {
+    const mapped = logContext(context);
+    if (!formatterDisabled) {
+        logsFormatter.setContext(mapped);
+    }
+    return mapped;
+}
 function withContext(context) {
     return (message) => log(message, context);
 }
@@ -76,7 +110,6 @@ function withContextError(context) {
     return (e) => logError(e, context);
 }
 function log(message, context) {
-    var _a, _b, _c;
     if (logConfig === null || logConfig === void 0 ? void 0 : logConfig.enabled) {
         if (logConfig.log) {
             logConfig.log({ message, context });
@@ -84,24 +117,7 @@ function log(message, context) {
         else {
             let prefix = `[${new Date().toISOString()}]`;
             if (context) {
-                logsFormatter.resetContext();
-                logsFormatter.setContext({
-                    appIdentifier: context.appIdentifier || '',
-                    project: {
-                        id: context.jwtPayload.context.project_id,
-                        identifier: (_a = context.jwtPayload.context.project_identifier) !== null && _a !== void 0 ? _a : '',
-                        organization_id: context.jwtPayload.context.organization_id,
-                        user_id: context.jwtPayload.context.user_id,
-                    },
-                    user: {
-                        id: context.jwtPayload.context.user_id,
-                        login: (_b = context.jwtPayload.context.user_login) !== null && _b !== void 0 ? _b : '',
-                    },
-                    organization: {
-                        id: context.jwtPayload.context.organization_id,
-                        domain: (_c = context.jwtPayload.context.organization_domain) !== null && _c !== void 0 ? _c : '',
-                    },
-                });
+                setLogCrowdinContext(context);
                 prefix += ` Context [${JSON.stringify(prepareContext(context))}]`;
             }
             // eslint-disable-next-line no-console
@@ -110,30 +126,12 @@ function log(message, context) {
     }
 }
 function logError(e, context) {
-    var _a, _b, _c;
     if (onError) {
         onError({ error: e, context });
     }
     else {
         if (context) {
-            logsFormatter.resetContext();
-            logsFormatter.setContext({
-                appIdentifier: context.appIdentifier || '',
-                project: {
-                    id: context.jwtPayload.context.project_id,
-                    identifier: (_a = context.jwtPayload.context.project_identifier) !== null && _a !== void 0 ? _a : '',
-                    organization_id: context.jwtPayload.context.organization_id,
-                    user_id: context.jwtPayload.context.user_id,
-                },
-                user: {
-                    id: context.jwtPayload.context.user_id,
-                    login: (_b = context.jwtPayload.context.user_login) !== null && _b !== void 0 ? _b : '',
-                },
-                organization: {
-                    id: context.jwtPayload.context.organization_id,
-                    domain: (_c = context.jwtPayload.context.organization_domain) !== null && _c !== void 0 ? _c : '',
-                },
-            });
+            setLogCrowdinContext(context);
         }
         if (e instanceof AppModuleAggregateError) {
             if (e.errors && e.errors.length > 0) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@crowdin/app-project-module",
-  "version": "2.9.1",
+  "version": "2.11.0",
   "description": "Module that generates for you all common endpoints for serving standalone Crowdin App",
   "main": "out/index.js",
   "types": "out/index.d.ts",
@@ -38,12 +38,12 @@
   },
   "scripts": {
     "sandbox": "vite --config sandbox/vite.config.ts",
-    "build": "npm run build-css && npm run build-main && npm run build-ui",
+    "build": "pnpm run build-css && pnpm run build-main && pnpm run build-ui",
     "build-css": "tailwindcss -i ./ui/styles/tailwind.css -o ./static/css/styles.css --minify",
-    "build-main": "tsc -p ./ && cp -R static out && cp logo.png out && npm run copy-migrations",
+    "build-main": "tsc -p ./ && cp -R static out && cp logo.png out && pnpm run copy-migrations",
     "build-ui": "rollup -c rollup-ui.config.mjs",
     "watch-main": "tsc --watch -p ./ && cp -R static out && cp logo.png out",
-    "format": "npm run prettier && npm run lint",
+    "format": "pnpm run prettier && pnpm run lint",
     "lint": "eslint --fix \"{src,tests,ui}/**/*.{js,ts,tsx}\"",
     "prettier": "prettier --config .prettierrc {src,ui}/**/*.{ts,tsx} --write",
     "lint-ci": "eslint \"{src,tests}/**/*.{js,ts}\"",
@@ -57,11 +57,13 @@
     "out/**/*"
   ],
   "dependencies": {
+    "@crowdin/apps-storage": "0.x",
     "@crowdin/crowdin-api-client": "^1.56.1",
-    "@crowdin/logs-formatter": "^2.4.0",
+    "@crowdin/logs-formatter": "^3.0.0",
     "@godaddy/terminus": "^4.12.1",
     "ajv": "^8.20.0",
     "amqplib": "^2.0.1",
+    "axios": "^1.18.1",
     "better-sqlite3": "^13.0.2",
     "cors": "^2.8.6",
     "drizzle-orm": "^0.45.2",
@@ -97,6 +99,7 @@
     "@cloudflare/workers-types": "^4.20260228.0",
     "@eslint/eslintrc": "^3.3.3",
     "@eslint/js": "^10.0.1",
+    "@jest/globals": "^30.4.1",
     "@monaco-editor/react": "^4.7.0",
     "@rjsf/core": "^6.6.2",
     "@rjsf/shadcn": "^6.6.2",
@@ -111,6 +114,7 @@
     "@types/better-sqlite3": "^7.6.13",
     "@types/cors": "^2.8.19",
     "@types/express": "^5.0.3",
+    "@types/express-serve-static-core": "^5.1.2",
     "@types/jest": "^30.0.0",
     "@types/jsonwebtoken": "^9.0.10",
     "@types/minimatch": "^5.1.2",
@@ -118,6 +122,7 @@
     "@types/pg": "^8.16.0",
     "@types/react": "^19.2.18",
     "@types/react-dom": "^19.2.4",
+    "@types/serve-static": "^2.2.0",
     "@types/swagger-jsdoc": "^6.0.4",
     "@typescript-eslint/eslint-plugin": "^8.56.0",
     "@typescript-eslint/parser": "^8.56.0",
@@ -150,5 +155,6 @@
   "bugs": {
     "url": "https://github.com/crowdin/app-project-module/issues"
   },
-  "homepage": "https://crowdin.github.io/app-project-module"
+  "homepage": "https://crowdin.github.io/app-project-module",
+  "packageManager": "pnpm@11.20.0+sha512.9a6f330a95b66446ea088faf1521405a8a01f07fde7124cc9958dfed52d4bb436737e65b08f85f37b46fcba375092558ac51262b816844b22f63406ed166bfee"
 }