@env-hopper/backend-core 2.0.1-alpha → 2.0.1-alpha-20260224145405

package/src/generated/prisma/wasm.js

@@ -0,0 +1,234 @@
+
+/* !!! This is code generated by Prisma. Do not edit directly. !!!
+/* eslint-disable */
+
+Object.defineProperty(exports, "__esModule", { value: true });
+
+const {
+  PrismaClientKnownRequestError,
+  PrismaClientUnknownRequestError,
+  PrismaClientRustPanicError,
+  PrismaClientInitializationError,
+  PrismaClientValidationError,
+  getPrismaClient,
+  sqltag,
+  empty,
+  join,
+  raw,
+  skip,
+  Decimal,
+  Debug,
+  objectEnumValues,
+  makeStrictEnum,
+  Extensions,
+  warnOnce,
+  defineDmmfProperty,
+  Public,
+  getRuntime,
+  createParam,
+} = require('./runtime/wasm-engine-edge.js')
+
+
+const Prisma = {}
+
+exports.Prisma = Prisma
+exports.$Enums = {}
+
+/**
+ * Prisma Client JS version: 6.17.0
+ * Query Engine version: c0aafc03b8ef6cdced8654b9a817999e02457d6a
+ */
+Prisma.prismaVersion = {
+  client: "6.17.0",
+  engine: "c0aafc03b8ef6cdced8654b9a817999e02457d6a"
+}
+
+Prisma.PrismaClientKnownRequestError = PrismaClientKnownRequestError;
+Prisma.PrismaClientUnknownRequestError = PrismaClientUnknownRequestError
+Prisma.PrismaClientRustPanicError = PrismaClientRustPanicError
+Prisma.PrismaClientInitializationError = PrismaClientInitializationError
+Prisma.PrismaClientValidationError = PrismaClientValidationError
+Prisma.Decimal = Decimal
+
+/**
+ * Re-export of sql-template-tag
+ */
+Prisma.sql = sqltag
+Prisma.empty = empty
+Prisma.join = join
+Prisma.raw = raw
+Prisma.validator = Public.validator
+
+/**
+* Extensions
+*/
+Prisma.getExtensionContext = Extensions.getExtensionContext
+Prisma.defineExtension = Extensions.defineExtension
+
+/**
+ * Shorthand utilities for JSON filtering
+ */
+Prisma.DbNull = objectEnumValues.instances.DbNull
+Prisma.JsonNull = objectEnumValues.instances.JsonNull
+Prisma.AnyNull = objectEnumValues.instances.AnyNull
+
+Prisma.NullTypes = {
+  DbNull: objectEnumValues.classes.DbNull,
+  JsonNull: objectEnumValues.classes.JsonNull,
+  AnyNull: objectEnumValues.classes.AnyNull
+}
+
+
+
+
+
+/**
+ * Enums
+ */
+exports.Prisma.TransactionIsolationLevel = makeStrictEnum({
+  ReadUncommitted: 'ReadUncommitted',
+  ReadCommitted: 'ReadCommitted',
+  RepeatableRead: 'RepeatableRead',
+  Serializable: 'Serializable'
+});
+
+exports.Prisma.DbAppForCatalogScalarFieldEnum = {
+  id: 'id',
+  name: 'name',
+  description: 'description',
+  access: 'access',
+  teams: 'teams',
+  roles: 'roles',
+  approverName: 'approverName',
+  approverEmail: 'approverEmail',
+  notes: 'notes',
+  tags: 'tags',
+  appUrl: 'appUrl',
+  confluenceUrl: 'confluenceUrl',
+  createdAt: 'createdAt',
+  updatedAt: 'updatedAt'
+};
+
+exports.Prisma.IconScalarFieldEnum = {
+  id: 'id',
+  name: 'name',
+  svgContent: 'svgContent',
+  pngBase64: 'pngBase64',
+  createdAt: 'createdAt',
+  updatedAt: 'updatedAt'
+};
+
+exports.Prisma.SortOrder = {
+  asc: 'asc',
+  desc: 'desc'
+};
+
+exports.Prisma.JsonNullValueInput = {
+  JsonNull: Prisma.JsonNull
+};
+
+exports.Prisma.NullableJsonNullValueInput = {
+  DbNull: Prisma.DbNull,
+  JsonNull: Prisma.JsonNull
+};
+
+exports.Prisma.QueryMode = {
+  default: 'default',
+  insensitive: 'insensitive'
+};
+
+exports.Prisma.JsonNullValueFilter = {
+  DbNull: Prisma.DbNull,
+  JsonNull: Prisma.JsonNull,
+  AnyNull: Prisma.AnyNull
+};
+
+exports.Prisma.NullsOrder = {
+  first: 'first',
+  last: 'last'
+};
+
+
+exports.Prisma.ModelName = {
+  DbAppForCatalog: 'DbAppForCatalog',
+  Icon: 'Icon'
+};
+/**
+ * Create the Client
+ */
+const config = {
+  "generator": {
+    "name": "client",
+    "provider": {
+      "fromEnvVar": null,
+      "value": "prisma-client-js"
+    },
+    "output": {
+      "value": "/Users/igolovin/src/umbrella/env-hopper/packages/backend-core/src/generated/prisma",
+      "fromEnvVar": null
+    },
+    "config": {
+      "engineType": "library"
+    },
+    "binaryTargets": [
+      {
+        "fromEnvVar": null,
+        "value": "darwin-arm64",
+        "native": true
+      }
+    ],
+    "previewFeatures": [],
+    "sourceFilePath": "/Users/igolovin/src/umbrella/env-hopper/packages/backend-core/prisma/schema.prisma",
+    "isCustomOutput": true
+  },
+  "relativeEnvPaths": {
+    "rootEnvPath": null
+  },
+  "relativePath": "../../../prisma",
+  "clientVersion": "6.17.0",
+  "engineVersion": "c0aafc03b8ef6cdced8654b9a817999e02457d6a",
+  "datasourceNames": [
+    "db"
+  ],
+  "activeProvider": "postgresql",
+  "postinstall": false,
+  "inlineDatasources": {
+    "db": {
+      "url": {
+        "fromEnvVar": "EH_CORE_DATABASE_URL",
+        "value": null
+      }
+    }
+  },
+  "inlineSchema": "// Prisma schema for backend-core library\n// Uses EH_CORE_DATABASE_URL environment variable\n\ndatasource db {\n  provider = \"postgresql\"\n  url      = env(\"EH_CORE_DATABASE_URL\")\n}\n\ngenerator client {\n  provider = \"prisma-client-js\"\n  output   = \"../src/generated/prisma\"\n}\n\ngenerator json {\n  provider = \"prisma-json-types-generator\"\n}\n\nmodel DbAppForCatalog {\n  id            String   @id @default(cuid())\n  name          String\n  description   String\n  /// [AccessMethod]\n  access        Json\n  teams         String[] @default([])\n  /// [AppRole]\n  roles         Json?\n  approverName  String?\n  approverEmail String?\n  notes         String?\n  tags          String[] @default([])\n  appUrl        String?\n  confluenceUrl String?\n  createdAt     DateTime @default(now())\n  updatedAt     DateTime @updatedAt\n\n  @@index([name])\n  @@index([tags])\n}\n\nmodel Icon {\n  id         String   @id @default(cuid())\n  name       String   @unique\n  svgContent String?  @db.Text\n  pngBase64  String?  @db.Text\n  createdAt  DateTime @default(now())\n  updatedAt  DateTime @updatedAt\n\n  @@index([name])\n}\n",
+  "inlineSchemaHash": "b83fbbc0d3c25dcdf35d0f9145415f8093b7124bc747546875740feee17ef2de",
+  "copyEngine": true
+}
+config.dirname = '/'
+
+config.runtimeDataModel = JSON.parse("{\"models\":{\"DbAppForCatalog\":{\"fields\":[{\"name\":\"id\",\"kind\":\"scalar\",\"type\":\"String\"},{\"name\":\"name\",\"kind\":\"scalar\",\"type\":\"String\"},{\"name\":\"description\",\"kind\":\"scalar\",\"type\":\"String\"},{\"name\":\"access\",\"kind\":\"scalar\",\"type\":\"Json\"},{\"name\":\"teams\",\"kind\":\"scalar\",\"type\":\"String\"},{\"name\":\"roles\",\"kind\":\"scalar\",\"type\":\"Json\"},{\"name\":\"approverName\",\"kind\":\"scalar\",\"type\":\"String\"},{\"name\":\"approverEmail\",\"kind\":\"scalar\",\"type\":\"String\"},{\"name\":\"notes\",\"kind\":\"scalar\",\"type\":\"String\"},{\"name\":\"tags\",\"kind\":\"scalar\",\"type\":\"String\"},{\"name\":\"appUrl\",\"kind\":\"scalar\",\"type\":\"String\"},{\"name\":\"confluenceUrl\",\"kind\":\"scalar\",\"type\":\"String\"},{\"name\":\"createdAt\",\"kind\":\"scalar\",\"type\":\"DateTime\"},{\"name\":\"updatedAt\",\"kind\":\"scalar\",\"type\":\"DateTime\"}],\"dbName\":null},\"Icon\":{\"fields\":[{\"name\":\"id\",\"kind\":\"scalar\",\"type\":\"String\"},{\"name\":\"name\",\"kind\":\"scalar\",\"type\":\"String\"},{\"name\":\"svgContent\",\"kind\":\"scalar\",\"type\":\"String\"},{\"name\":\"pngBase64\",\"kind\":\"scalar\",\"type\":\"String\"},{\"name\":\"createdAt\",\"kind\":\"scalar\",\"type\":\"DateTime\"},{\"name\":\"updatedAt\",\"kind\":\"scalar\",\"type\":\"DateTime\"}],\"dbName\":null}},\"enums\":{},\"types\":{}}")
+defineDmmfProperty(exports.Prisma, config.runtimeDataModel)
+config.engineWasm = {
+  getRuntime: async () => require('./query_engine_bg.js'),
+  getQueryEngineWasmModule: async () => {
+    const loader = (await import('#wasm-engine-loader')).default
+    const engine = (await loader).default
+    return engine
+  }
+}
+config.compilerWasm = undefined
+
+config.injectableEdgeEnv = () => ({
+  parsed: {
+    EH_CORE_DATABASE_URL: typeof globalThis !== 'undefined' && globalThis['EH_CORE_DATABASE_URL'] || typeof process !== 'undefined' && process.env && process.env.EH_CORE_DATABASE_URL || undefined
+  }
+})
+
+if (typeof globalThis !== 'undefined' && globalThis['DEBUG'] || typeof process !== 'undefined' && process.env && process.env.DEBUG || undefined) {
+  Debug.enable(typeof globalThis !== 'undefined' && globalThis['DEBUG'] || typeof process !== 'undefined' && process.env && process.env.DEBUG || undefined)
+}
+
+const PrismaClient = getPrismaClient(config)
+exports.PrismaClient = PrismaClient
+Object.assign(exports, Prisma)
+

package/src/index.ts

@@ -1,6 +1,6 @@
 // common
 
-export { trpcRouter } from './server/controller'
+export { createTrpcRouter } from './server/controller'
 export type { TRPCRouter } from './server/controller'
 export { createEhTrpcContext } from './server/ehTrpcContext'
 export type {
@@ -15,4 +15,112 @@ export type { EhStaticControllerContract } from './server/ehStaticControllerCont
 
 // backend-only
 
+export type { AppForCatalog } from './types/common/appCatalogTypes'
 export * from './types/index'
+
+// Auth
+export {
+  createAuth,
+  type AuthConfig,
+  type BetterAuth,
+} from './modules/auth/auth'
+
+export { registerAuthRoutes } from './modules/auth/registerAuthRoutes'
+
+export { createAuthRouter, type AuthRouter } from './modules/auth/authRouter'
+
+export {
+  getUserGroups,
+  isMemberOfAnyGroup,
+  isMemberOfAllGroups,
+  isAdmin,
+  requireAdmin,
+  requireGroups,
+  type UserWithGroups,
+} from './modules/auth/authorizationUtils'
+
+// Admin
+export {
+  createAdminChatHandler,
+  tool,
+  type AdminChatHandlerOptions,
+} from './modules/admin/chat/createAdminChatHandler'
+
+export {
+  createDatabaseTools,
+  createPrismaDatabaseClient,
+  DEFAULT_ADMIN_SYSTEM_PROMPT,
+  type DatabaseClient,
+} from './modules/admin/chat/createDatabaseTools'
+
+// Icon management
+export {
+  registerIconRestController,
+  type IconRestControllerConfig,
+} from './modules/icons/iconRestController'
+
+export {
+  getAssetByName,
+  upsertIcon,
+  upsertIcons,
+  type UpsertIconInput,
+} from './modules/icons/iconService'
+
+// Asset management (universal for icons, screenshots, etc.)
+export {
+  registerAssetRestController,
+  type AssetRestControllerConfig,
+} from './modules/assets/assetRestController'
+
+export {
+  registerScreenshotRestController,
+  type ScreenshotRestControllerConfig,
+} from './modules/assets/screenshotRestController'
+
+export { createScreenshotRouter } from './modules/assets/screenshotRouter'
+
+export { syncAssets, type SyncAssetsConfig } from './modules/assets/syncAssets'
+
+// App Catalog Admin
+export { createAppCatalogAdminRouter } from './modules/appCatalogAdmin/appCatalogAdminRouter'
+
+// Approval Methods
+export { createApprovalMethodRouter } from './modules/approvalMethod/approvalMethodRouter'
+export {
+  syncApprovalMethods,
+  type ApprovalMethodSyncInput,
+} from './modules/approvalMethod/syncApprovalMethods'
+
+// Database utilities
+export {
+  connectDb,
+  disconnectDb,
+  getDbClient,
+  setDbClient,
+  syncAppCatalog,
+  TABLE_SYNC_MAGAZINE,
+  tableSyncPrisma,
+  type MakeTFromPrismaModel,
+  type ObjectKeys,
+  type ScalarFilter,
+  type ScalarKeys,
+  type SyncAppCatalogResult,
+  type TableSyncMagazine,
+  type TableSyncMagazineModelNameKey,
+  type TableSyncParamsPrisma,
+} from './db'
+
+// Middleware (batteries-included backend setup)
+export {
+  createEhMiddleware,
+  EhDatabaseManager,
+  type EhDatabaseConfig,
+  type EhAuthConfig,
+  type EhAdminChatConfig,
+  type EhFeatureToggles,
+  type EhBackendProvider,
+  type EhLifecycleHooks,
+  type EhMiddlewareOptions,
+  type EhMiddlewareResult,
+  type MiddlewareContext,
+} from './middleware'

package/src/middleware/backendResolver.ts

@@ -0,0 +1,49 @@
+import type { EhBackendCompanySpecificBackend } from '../types/backend/companySpecificBackend'
+import type { EhBackendProvider } from './types'
+
+/**
+ * Type guard to check if an object implements EhBackendCompanySpecificBackend.
+ */
+function isBackendInstance(obj: unknown): obj is EhBackendCompanySpecificBackend {
+  return (
+    typeof obj === 'object' &&
+    obj !== null &&
+    typeof (obj as EhBackendCompanySpecificBackend).getBootstrapData === 'function' &&
+    typeof (obj as EhBackendCompanySpecificBackend).getAvailabilityMatrix ===
+      'function' &&
+    typeof (obj as EhBackendCompanySpecificBackend).getNameMigrations ===
+      'function' &&
+    typeof (obj as EhBackendCompanySpecificBackend).getResourceJumps ===
+      'function' &&
+    typeof (obj as EhBackendCompanySpecificBackend).getResourceJumpsExtended ===
+      'function'
+  )
+}
+
+/**
+ * Normalizes different backend provider types into a consistent async factory function.
+ * Supports:
+ * - Direct object implementing EhBackendCompanySpecificBackend
+ * - Sync factory function that returns the backend
+ * - Async factory function that returns the backend
+ */
+export function createBackendResolver(
+  provider: EhBackendProvider,
+): () => Promise<EhBackendCompanySpecificBackend> {
+  // If it's already an object with the required methods, wrap it
+  if (isBackendInstance(provider)) {
+    return async () => provider
+  }
+
+  // If it's a function, call it and handle both sync and async results
+  if (typeof provider === 'function') {
+    return async () => {
+      const result = provider()
+      return result instanceof Promise ? result : result
+    }
+  }
+
+  throw new Error(
+    'Invalid backend provider: must be an object implementing EhBackendCompanySpecificBackend or a factory function',
+  )
+}

package/src/middleware/createEhMiddleware.ts

@@ -0,0 +1,171 @@
+import express, { Router } from 'express'
+import * as trpcExpress from '@trpc/server/adapters/express'
+import type {
+  EhMiddlewareOptions,
+  EhMiddlewareResult,
+  MiddlewareContext,
+} from './types'
+import { EhDatabaseManager } from './database'
+import { createBackendResolver } from './backendResolver'
+import { registerFeatures } from './featureRegistry'
+import { createTrpcRouter } from '../server/controller'
+import { createEhTrpcContext } from '../server/ehTrpcContext'
+import { createAuth } from '../modules/auth/auth'
+import { createMockUserFromDevConfig } from '../modules/auth/devMockUserUtils'
+
+export async function createEhMiddleware(
+  options: EhMiddlewareOptions,
+): Promise<EhMiddlewareResult> {
+  // Normalize options with defaults
+  const basePath = options.basePath ?? '/api'
+  const normalizedOptions = { ...options, basePath }
+
+  // Initialize database manager
+  const dbManager = new EhDatabaseManager(options.database)
+  // Initialize the client (which also sets the global singleton)
+  dbManager.getClient()
+
+  // Create auth instance
+  const auth = createAuth({
+    appName: options.auth.appName,
+    baseURL: options.auth.baseURL,
+    secret: options.auth.secret,
+    providers: options.auth.providers,
+    plugins: options.auth.plugins,
+    sessionExpiresIn: options.auth.sessionExpiresIn,
+    sessionUpdateAge: options.auth.sessionUpdateAge,
+  })
+
+  // Create tRPC router
+  const trpcRouter = createTrpcRouter(auth)
+
+  // Normalize backend provider to async factory function
+  const resolveBackend = createBackendResolver(options.backend)
+
+  // Get admin groups from config with default
+  const adminGroups = options.auth.adminGroups ?? ['env_hopper_ui_super_admins']
+
+  // Create tRPC context factory
+  const createContext = async ({
+    req,
+  }: trpcExpress.CreateExpressContextOptions) => {
+    const companySpecificBackend = await resolveBackend()
+
+    let user = null
+    let userGroups: Array<string> = []
+
+    // Check if dev mock user is configured
+    if (options.auth.devMockUser) {
+      user = createMockUserFromDevConfig(options.auth.devMockUser)
+      userGroups = options.auth.devMockUser.groups
+    } else {
+      // Extract user from session
+      try {
+        const session = await auth.api.getSession({
+          headers: req.headers as HeadersInit,
+        })
+        user = session?.user ?? null
+
+        // If user is authenticated and Okta is configured, decode groups from access token
+        if (user && options.auth.oktaGroupsClaim) {
+          try {
+            // Get the current access token (auto-refreshes if expired)
+            // Note: better-auth requires providerId, but we use 'okta' as default
+            const tokenResult = await auth.api.getAccessToken({
+              body: {
+                providerId: 'okta',
+              },
+              headers: req.headers as HeadersInit,
+            })
+
+            if (tokenResult.accessToken) {
+              // Decode JWT to extract groups claim
+              const parts = tokenResult.accessToken.split('.')
+              if (parts.length === 3 && parts[1]) {
+                const payload = JSON.parse(
+                  Buffer.from(parts[1], 'base64').toString(),
+                )
+                const groups = payload[options.auth.oktaGroupsClaim]
+                userGroups = Array.isArray(groups) ? groups : []
+              }
+            }
+          } catch (error) {
+            console.error('[tRPC Context] Failed to get access token:', error)
+          }
+        }
+      } catch (error) {
+        console.error('[tRPC Context] Failed to get session:', error)
+      }
+    }
+
+    // Attach groups to user object for authorization checks
+    const userWithGroups = user ? { ...user, groups: userGroups } : null
+
+    return createEhTrpcContext({
+      companySpecificBackend,
+      user: userWithGroups,
+      adminGroups,
+    })
+  }
+
+  // Create Express router
+  const router = Router()
+  router.use(express.json())
+
+  // Build middleware context for feature registration
+  const middlewareContext: MiddlewareContext = {
+    auth,
+    trpcRouter,
+    createContext: async () => {
+      const companySpecificBackend = await resolveBackend()
+      return createEhTrpcContext({
+        companySpecificBackend,
+        adminGroups,
+      })
+    },
+    authConfig: options.auth,
+  }
+
+  // Register tRPC middleware (if enabled)
+  if (normalizedOptions.features?.trpc !== false) {
+    router.use(
+      `${basePath}/trpc`,
+      trpcExpress.createExpressMiddleware({
+        router: trpcRouter,
+        createContext,
+      }),
+    )
+  }
+
+  // Register all enabled features
+  registerFeatures(router, normalizedOptions, middlewareContext)
+
+  // Call onRoutesRegistered hook if provided
+  if (options.hooks?.onRoutesRegistered) {
+    await options.hooks.onRoutesRegistered(router)
+  }
+
+  return {
+    router,
+    auth,
+    trpcRouter,
+
+    async connect(): Promise<void> {
+      await dbManager.connect()
+      if (options.hooks?.onDatabaseConnected) {
+        await options.hooks.onDatabaseConnected()
+      }
+    },
+
+    async disconnect(): Promise<void> {
+      if (options.hooks?.onDatabaseDisconnecting) {
+        await options.hooks.onDatabaseDisconnecting()
+      }
+      await dbManager.disconnect()
+    },
+
+    addRoutes(callback: (router: Router) => void): void {
+      callback(router)
+    },
+  }
+}

package/src/middleware/database.ts

@@ -0,0 +1,62 @@
+import { PrismaClient } from '@prisma/client'
+import type { EhDatabaseConfig } from './types'
+import { setDbClient } from '../db/client'
+
+/**
+ * Formats a database connection URL from structured config.
+ */
+function formatConnectionUrl(config: EhDatabaseConfig): string {
+  if ('url' in config) {
+    return config.url
+  }
+
+  const { host, port, database, username, password, schema = 'public' } = config
+  return `postgresql://${username}:${encodeURIComponent(password)}@${host}:${port}/${database}?schema=${schema}`
+}
+
+/**
+ * Internal database manager used by the middleware.
+ * Handles connection URL formatting and lifecycle.
+ */
+export class EhDatabaseManager {
+  private client: PrismaClient | null = null
+  private config: EhDatabaseConfig
+
+  constructor(config: EhDatabaseConfig) {
+    this.config = config
+  }
+
+  /**
+   * Get or create the Prisma client instance.
+   * Uses lazy initialization for flexibility.
+   */
+  getClient(): PrismaClient {
+    if (!this.client) {
+      const datasourceUrl = formatConnectionUrl(this.config)
+
+      this.client = new PrismaClient({
+        datasourceUrl,
+        log:
+          process.env.NODE_ENV === 'development'
+            ? ['warn', 'error']
+            : ['warn', 'error'],
+      })
+
+      // Bridge with existing backend-core getDbClient() usage
+      setDbClient(this.client)
+    }
+    return this.client
+  }
+
+  async connect(): Promise<void> {
+    const client = this.getClient()
+    await client.$connect()
+  }
+
+  async disconnect(): Promise<void> {
+    if (this.client) {
+      await this.client.$disconnect()
+      this.client = null
+    }
+  }
+}