@dyrected/core 2.13.6 → 2.15.0

package/dist/server.js

@@ -2308,6 +2308,12 @@ var init_chunker = __esm({
 import { createGoogleGenerativeAI } from "@ai-sdk/google";
 import { createOpenAI } from "@ai-sdk/openai";
 import { embed, embedMany } from "ai";
+function hasEmbeddingApiKey(config) {
+  const ai = config?.ai;
+  return Boolean(
+    ai?.apiKey || process.env.OPENROUTER_API_KEY || process.env.OPENAI_API_KEY || process.env.GEMINI_API_KEY || process.env.GOOGLE_GENERATIVE_AI_API_KEY
+  );
+}
 function getEmbeddingModel(config) {
   const ai = config?.ai;
   const provider = ai?.provider;
@@ -2647,6 +2653,9 @@ var init_rag_service = __esm({
         if (!col || !this.isCollectionRAGEnabled(config, col)) {
           return { indexed: 0, skipped: 0 };
         }
+        if (!hasEmbeddingApiKey(config)) {
+          return { indexed: 0, skipped: 0 };
+        }
         const docId = String(doc.id || doc._id || "");
         if (!docId) return { indexed: 0, skipped: 0 };
         const ragConfig = col.ai?.rag;
@@ -4793,6 +4802,14 @@ function getSecret() {
   return new TextEncoder().encode(secret);
 }
 var DEFAULT_EXPIRY = "7d";
+var DEFAULT_SESSION_EXPIRY = DEFAULT_EXPIRY;
+function resolveSessionTokenExpiry(collection) {
+  const auth = collection.auth;
+  if (auth && typeof auth === "object" && typeof auth.tokenExpiration === "string" && auth.tokenExpiration.length > 0) {
+    return auth.tokenExpiration;
+  }
+  return DEFAULT_SESSION_EXPIRY;
+}
 async function signCollectionToken(payload, expiresIn = DEFAULT_EXPIRY) {
   return new SignJWT({ ...payload }).setProtectedHeader({ alg: "HS256" }).setIssuedAt().setExpirationTime(expiresIn).sign(getSecret());
 }
@@ -7747,13 +7764,13 @@ var CollectionController = class {
     const config = c.get("config");
     const db = config.db;
     if (!db) return c.json({ message: "Database not configured" }, 500);
-    if (!this.collection.views?.length) {
-      return c.json({ error: true, message: `Collection ${this.collection.slug} has no views` }, 404);
+    if (!this.collection.views?.length && !this.collection.actions?.length) {
+      return c.json({ error: true, message: `Collection ${this.collection.slug} has no views or actions` }, 404);
     }
     const actionName = c.req.param("action");
     const viewSlugParam = c.req.param("viewSlug");
     let action;
-    for (const view2 of this.collection.views) {
+    for (const view2 of this.collection.views ?? []) {
       if (viewSlugParam && view2.slug !== viewSlugParam) continue;
       const match = view2.actions?.find((candidate) => candidate.name === actionName);
       if (match) {
@@ -7761,6 +7778,9 @@ var CollectionController = class {
         break;
       }
     }
+    if (!action && !viewSlugParam) {
+      action = this.collection.actions?.find((candidate) => candidate.name === actionName);
+    }
     if (!action) {
       return c.json(
         { error: true, message: `Action "${actionName}" was not found${viewSlugParam ? ` in view "${viewSlugParam}"` : ""}` },
@@ -7778,7 +7798,7 @@ var CollectionController = class {
     const input = body?.input ?? {};
     const user = c.get("user");
     const accessArgs = { user, req: this.toHookRequestContext(c) };
-    const view = viewSlugParam ? this.collection.views.find((candidate) => candidate.slug === viewSlugParam) : void 0;
+    const view = viewSlugParam ? this.collection.views?.find((candidate) => candidate.slug === viewSlugParam) : void 0;
     if (view?.access) {
       const allowed = await resolveBooleanAccess(config, view.access.update ?? view.access.read ?? true, {
         ...accessArgs,
@@ -7816,7 +7836,8 @@ var CollectionController = class {
           });
           resolvedData = handlerResult ?? {};
         } catch (error) {
-          results.push({ id, ok: false, status: 500, error: error instanceof Error ? error.message : String(error) });
+          const status = typeof error.statusCode === "number" ? error.statusCode : 500;
+          results.push({ id, ok: false, status, error: error instanceof Error ? error.message : String(error) });
           continue;
         }
       } else {
@@ -7839,7 +7860,8 @@ var CollectionController = class {
     if (requestedIds.length === 1) {
       const single = results[0];
       if (!single.ok) {
-        return c.json(single.error ?? { error: true, message: "Action failed" }, single.status ?? 500);
+        const body2 = typeof single.error === "string" ? { error: true, message: single.error } : single.error ?? { error: true, message: "Action failed" };
+        return c.json(body2, single.status ?? 500);
       }
       return c.json(single.doc);
     }
@@ -9644,6 +9666,7 @@ var AuthController = class {
       userId: user.id,
       email: user.email,
       collection: this.collection.slug,
+      expiresIn: resolveSessionTokenExpiry(this.collection),
       ip: c.get("clientIp"),
       authSource: "local"
     });
@@ -9735,6 +9758,7 @@ var AuthController = class {
       userId: user.id,
       email: user.email,
       collection: this.collection.slug,
+      expiresIn: resolveSessionTokenExpiry(this.collection),
       ip: c.get("clientIp"),
       authSource: "local"
     });
@@ -9825,12 +9849,15 @@ var AuthController = class {
     }
     const tokenPayload = c.get("authTokenPayload");
     if (tokenPayload?.sid) {
-      const token2 = await signCollectionToken({
-        sub: requestUser.sub,
-        email: requestUser.email,
-        collection: this.collection.slug,
-        sid: tokenPayload.sid
-      });
+      const token2 = await signCollectionToken(
+        {
+          sub: requestUser.sub,
+          email: requestUser.email,
+          collection: this.collection.slug,
+          sid: tokenPayload.sid
+        },
+        resolveSessionTokenExpiry(this.collection)
+      );
       return c.json({ token: token2 });
     }
     const token = await issueAuthSessionToken({
@@ -10092,6 +10119,7 @@ var AuthController = class {
       userId: user.id,
       email: inviteeEmail,
       collection: this.collection.slug,
+      expiresIn: resolveSessionTokenExpiry(this.collection),
       ip: c.get("clientIp"),
       authSource: "local"
     });
@@ -10349,6 +10377,7 @@ var AdminAuthController = class {
       userId: user.id,
       email: user.email,
       collection: adminCollection.slug,
+      expiresIn: resolveSessionTokenExpiry(adminCollection),
       providerId: provider.id,
       authSource: "external",
       ip: c.get("clientIp")
@@ -14282,6 +14311,8 @@ function registerRoutes(app, config) {
     app.post(`${path}/aggregate`, (c) => controller.aggregate(c));
     if (collection.views?.length) {
       app.post(`${path}/views/:viewSlug/actions/:action`, optionalAuth(config), (c) => controller.runViewAction(c));
+    }
+    if (collection.views?.length || collection.actions?.length) {
       app.post(`${path}/actions/:action`, optionalAuth(config), (c) => controller.runViewAction(c));
     }
     if (collection.audit) {
@@ -15059,6 +15090,8 @@ async function createDyrectedApp(rawConfig) {
     if (err instanceof HTTPException6) {
       return c.json({ error: true, message: err.message }, err.status);
     }
+    const statusCode = err.statusCode;
+    const status = typeof statusCode === "number" && Number.isInteger(statusCode) && statusCode >= 400 && statusCode <= 599 ? statusCode : 500;
     const logger = getRequestLogger(c, "core");
     logger.error({
       err,
@@ -15071,9 +15104,10 @@ async function createDyrectedApp(rawConfig) {
       method: c.req.method
     });
     return c.json({
+      error: true,
       message: err.message || "Internal Server Error",
       stack: process.env.NODE_ENV === "development" ? err.stack : void 0
-    }, 500);
+    }, status);
   });
   registerRoutes(app, config);
   return app;
@@ -15088,8 +15122,12 @@ init_embedding_service();
 export {
   AIAgent,
   AIController,
+  AUTH_SESSIONS_COLLECTION,
   AuthController,
   CollectionController,
+  DEFAULT_LOCK_TIME_MS,
+  DEFAULT_MAX_LOGIN_ATTEMPTS,
+  DEFAULT_SESSION_EXPIRY,
   EmbeddingService,
   GlobalController,
   InMemoryRateLimitStore,
@@ -15100,7 +15138,11 @@ export {
   attachRequestMetrics,
   bindObservabilityRuntime,
   buildDyrectedSystemPrompt,
+  buildInviteEmail,
+  buildPasswordChangedEmail,
   buildRequestLogger,
+  buildResetPasswordEmail,
+  buildWelcomeEmail,
   captureRequestBody,
   chunkText,
   cosineSimilarity,
@@ -15108,24 +15150,40 @@ export {
   createDyrectedApp,
   createObservabilityRuntime,
   createRequestSpan,
+  decodeCollectionToken,
   endRequestSpan,
   estimateTokens,
   extractTextFromDoc,
   formatAIErrorMessage,
   getAIModel,
+  getAuthSession,
   getConfigLogger,
   getEmbeddingModel,
+  getLockedUntilMs,
   getObservabilityRuntime,
   getRequestLogger,
+  hasEmbeddingApiKey,
   hashContent,
+  hashPassword,
+  isAuthSessionActive,
+  issueAuthSessionToken,
   normalizeFieldValue,
   redactBody,
   redactHeaders,
   registerRoutes,
   renderPrometheusMetrics,
+  resolveAuthLockoutConfig,
   resolveObservabilityConfig,
+  resolveSessionTokenExpiry,
+  revokeAllAuthSessions,
+  revokeAuthSession,
+  sendEmail,
   serializeDetailForApi,
   serializeViewForApi,
   shouldSampleRequest,
-  validatePayloadAgainstFields
+  signCollectionToken,
+  touchAuthSession,
+  validatePayloadAgainstFields,
+  verifyCollectionToken,
+  verifyPassword
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dyrected/core",
-  "version": "2.13.6",
+  "version": "2.15.0",
   "type": "module",
   "main": "./dist/index.js",
   "module": "./dist/index.js",