@fivepixels-js/lite-api 0.2.1

package/dist/community/schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schemas.d.ts","sourceRoot":"","sources":["../../src/community/schemas.ts"],"names":[],"mappings":"AAcA,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAU/B,CAAC;AAEX,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAe1B,CAAC;AAEX,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAY1G;AAED,eAAO,MAAM,UAAU;;;CAA8C,CAAC;AACtE,eAAO,MAAM,oBAAoB;;;;;;CAA6D,CAAC;AAC/F,eAAO,MAAM,kBAAkB;;;;;;;CAAqD,CAAC;AAErF,eAAO,MAAM,gBAAgB;;;CAA0D,CAAC;AAExF,eAAO,MAAM,cAAc;;;CAAmD,CAAC;AAE/E,eAAO,MAAM,iBAAiB;;;;;;CAIpB,CAAC;AAEX,eAAO,MAAM,mBAAmB;;;;;;;;;;;CAStB,CAAC;AAEX,eAAO,MAAM,eAAe;;;;;;;;;;;;;CAOlB,CAAC;AAEX,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAOrE;AAED,eAAO,MAAM,MAAM,GAAI,YAAY,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,mBAAkC;;;;;CACrB,CAAC;AAE1E,eAAO,MAAM,KAAK,GAAI,OAAO,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;;;CAA+B,CAAC;AAEpF,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAAqD,CAAC;AAE7E,eAAO,MAAM,QAAQ;;;;;CAA6D,CAAC;AAEnF,eAAO,MAAM,oBAAoB;;;;;;;;;CAGhC,CAAC;AAEF,eAAO,MAAM,gBAAgB;;;;;CAAuD,CAAC;AAErF,eAAO,MAAM,kBAAkB;;;;;CAAiD,CAAC"}

package/dist/community/schemas.js

@@ -0,0 +1,100 @@
+const emptyPaginationSchema = {
+    type: 'object',
+    additionalProperties: false,
+    required: ['page', 'pageSize', 'totalCount', 'totalPages', 'hasNext', 'hasPrevious'],
+    properties: {
+        page: { type: 'integer', minimum: 0 },
+        pageSize: { type: 'integer', minimum: 0 },
+        totalCount: { type: 'integer', minimum: 0 },
+        totalPages: { type: 'integer', minimum: 0 },
+        hasNext: { type: 'boolean' },
+        hasPrevious: { type: 'boolean' },
+    },
+};
+export const communityErrorResponseSchema = {
+    type: 'object',
+    additionalProperties: false,
+    required: ['resultCode', 'resultMessage', 'result', 'pagination'],
+    properties: {
+        resultCode: { type: 'string' },
+        resultMessage: { type: 'string' },
+        result: { type: 'null' },
+        pagination: emptyPaginationSchema,
+    },
+};
+export const communityErrorResponses = {
+    400: communityErrorResponseSchema,
+    401: communityErrorResponseSchema,
+    403: communityErrorResponseSchema,
+    404: communityErrorResponseSchema,
+    409: communityErrorResponseSchema,
+    410: communityErrorResponseSchema,
+    412: communityErrorResponseSchema,
+    413: communityErrorResponseSchema,
+    422: communityErrorResponseSchema,
+    423: communityErrorResponseSchema,
+    428: communityErrorResponseSchema,
+    429: communityErrorResponseSchema,
+    500: communityErrorResponseSchema,
+    503: communityErrorResponseSchema,
+};
+export function communityResponseSchema(result) {
+    return {
+        type: 'object',
+        additionalProperties: false,
+        required: ['resultCode', 'resultMessage', 'result', 'pagination'],
+        properties: {
+            resultCode: { type: 'string' },
+            resultMessage: { type: 'string' },
+            result,
+            pagination: emptyPaginationSchema,
+        },
+    };
+}
+export const uuidSchema = { type: 'string', format: 'uuid' };
+export const nullableStringSchema = { anyOf: [{ type: 'string' }, { type: 'null' }] };
+export const nullableUuidSchema = { anyOf: [uuidSchema, { type: 'null' }] };
+export const jsonObjectSchema = { type: 'object', additionalProperties: true };
+export const dateTimeSchema = { type: 'string', format: 'date-time' };
+export const attachmentsSchema = {
+    type: 'array',
+    maxItems: 0,
+    items: { type: 'object' },
+};
+export const attachmentIdsSchema = {
+    anyOf: [
+        {
+            type: 'array',
+            maxItems: 10,
+            items: uuidSchema,
+        },
+        { type: 'null' },
+    ],
+};
+export const pageQuerySchema = {
+    type: 'object',
+    additionalProperties: false,
+    properties: {
+        page: { type: 'integer', default: 1 },
+        pageSize: { type: 'integer', default: 20 },
+    },
+};
+export function paramsSchema(names) {
+    return {
+        type: 'object',
+        additionalProperties: false,
+        required: names,
+        properties: Object.fromEntries(names.map((name) => [name, uuidSchema])),
+    };
+}
+export const object = (properties, required = Object.keys(properties)) => ({ type: 'object', additionalProperties: false, properties, required });
+export const array = (items) => ({ type: 'array', items });
+export const pagination = communityErrorResponseSchema.properties.pagination;
+export const pageSize = { type: 'integer', minimum: 1, maximum: 100, default: 20 };
+export const ifMatchHeadersSchema = {
+    type: 'object', required: ['if-match'],
+    properties: { 'if-match': { type: 'string', description: '현재 리소스의 ETag 값' } },
+};
+export const statusBodySchema = object({ status: { type: 'string', minLength: 1 } });
+export const assigneeBodySchema = object({ assigneeId: nullableUuidSchema }, []);
+//# sourceMappingURL=schemas.js.map

package/dist/community/schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schemas.js","sourceRoot":"","sources":["../../src/community/schemas.ts"],"names":[],"mappings":"AAAA,MAAM,qBAAqB,GAAG;IAC5B,IAAI,EAAE,QAAQ;IACd,oBAAoB,EAAE,KAAK;IAC3B,QAAQ,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,YAAY,EAAE,SAAS,EAAE,aAAa,CAAC;IACpF,UAAU,EAAE;QACV,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE;QACrC,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE;QACzC,UAAU,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE;QAC3C,UAAU,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE;QAC3C,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;QAC5B,WAAW,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;KACjC;CACO,CAAC;AAEX,MAAM,CAAC,MAAM,4BAA4B,GAAG;IAC1C,IAAI,EAAE,QAAQ;IACd,oBAAoB,EAAE,KAAK;IAC3B,QAAQ,EAAE,CAAC,YAAY,EAAE,eAAe,EAAE,QAAQ,EAAE,YAAY,CAAC;IACjE,UAAU,EAAE;QACV,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC9B,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACjC,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;QACxB,UAAU,EAAE,qBAAqB;KAClC;CACO,CAAC;AAEX,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,GAAG,EAAE,4BAA4B;IACjC,GAAG,EAAE,4BAA4B;IACjC,GAAG,EAAE,4BAA4B;IACjC,GAAG,EAAE,4BAA4B;IACjC,GAAG,EAAE,4BAA4B;IACjC,GAAG,EAAE,4BAA4B;IACjC,GAAG,EAAE,4BAA4B;IACjC,GAAG,EAAE,4BAA4B;IACjC,GAAG,EAAE,4BAA4B;IACjC,GAAG,EAAE,4BAA4B;IACjC,GAAG,EAAE,4BAA4B;IACjC,GAAG,EAAE,4BAA4B;IACjC,GAAG,EAAE,4BAA4B;IACjC,GAAG,EAAE,4BAA4B;CACzB,CAAC;AAEX,MAAM,UAAU,uBAAuB,CAAC,MAAyC;IAC/E,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,oBAAoB,EAAE,KAAK;QAC3B,QAAQ,EAAE,CAAC,YAAY,EAAE,eAAe,EAAE,QAAQ,EAAE,YAAY,CAAC;QACjE,UAAU,EAAE;YACV,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC9B,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACjC,MAAM;YACN,UAAU,EAAE,qBAAqB;SAClC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,UAAU,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAW,CAAC;AACtE,MAAM,CAAC,MAAM,oBAAoB,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAW,CAAC;AAC/F,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,KAAK,EAAE,CAAC,UAAU,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAW,CAAC;AAErF,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,oBAAoB,EAAE,IAAI,EAAW,CAAC;AAExF,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAW,CAAC;AAE/E,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,IAAI,EAAE,OAAO;IACb,QAAQ,EAAE,CAAC;IACX,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;CACjB,CAAC;AAEX,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,KAAK,EAAE;QACL;YACE,IAAI,EAAE,OAAO;YACb,QAAQ,EAAE,EAAE;YACZ,KAAK,EAAE,UAAU;SAClB;QACD,EAAE,IAAI,EAAE,MAAM,EAAE;KACjB;CACO,CAAC;AAEX,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,IAAI,EAAE,QAAQ;IACd,oBAAoB,EAAE,KAAK;IAC3B,UAAU,EAAE;QACV,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE;QACrC,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,EAAE;KAC3C;CACO,CAAC;AAEX,MAAM,UAAU,YAAY,CAAC,KAAe;IAC1C,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,oBAAoB,EAAE,KAAK;QAC3B,QAAQ,EAAE,KAAK;QACf,UAAU,EAAE,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC;KACxE,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,UAAmC,EAAE,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAChG,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,oBAAoB,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC;AAE1E,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,KAA8B,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;AAEpF,MAAM,CAAC,MAAM,UAAU,GAAG,4BAA4B,CAAC,UAAU,CAAC,UAAU,CAAC;AAE7E,MAAM,CAAC,MAAM,QAAQ,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;AAEnF,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,UAAU,CAAC;IACtC,UAAU,EAAE,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,gBAAgB,EAAE,EAAE;CAC9E,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;AAErF,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC,EAAE,UAAU,EAAE,kBAAkB,EAAE,EAAE,EAAE,CAAC,CAAC"}

package/dist/community/system.schemas.d.ts

@@ -0,0 +1,40 @@
+export declare const errorResponseSchema: {
+    readonly type: "object";
+    readonly additionalProperties: false;
+    readonly required: readonly ["error"];
+    readonly properties: {
+        readonly error: {
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["code", "message", "requestId"];
+            readonly properties: {
+                readonly code: {
+                    readonly type: "string";
+                };
+                readonly message: {
+                    readonly type: "string";
+                };
+                readonly requestId: {
+                    readonly type: "string";
+                };
+                readonly details: {
+                    readonly type: "array";
+                    readonly items: {
+                        readonly type: "object";
+                        readonly additionalProperties: false;
+                        readonly required: readonly ["path", "message"];
+                        readonly properties: {
+                            readonly path: {
+                                readonly type: "string";
+                            };
+                            readonly message: {
+                                readonly type: "string";
+                            };
+                        };
+                    };
+                };
+            };
+        };
+    };
+};
+//# sourceMappingURL=system.schemas.d.ts.map

package/dist/community/system.schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"system.schemas.d.ts","sourceRoot":"","sources":["../../src/community/system.schemas.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4BtB,CAAC"}

package/dist/community/system.schemas.js

@@ -0,0 +1,30 @@
+export const errorResponseSchema = {
+    type: 'object',
+    additionalProperties: false,
+    required: ['error'],
+    properties: {
+        error: {
+            type: 'object',
+            additionalProperties: false,
+            required: ['code', 'message', 'requestId'],
+            properties: {
+                code: { type: 'string' },
+                message: { type: 'string' },
+                requestId: { type: 'string' },
+                details: {
+                    type: 'array',
+                    items: {
+                        type: 'object',
+                        additionalProperties: false,
+                        required: ['path', 'message'],
+                        properties: {
+                            path: { type: 'string' },
+                            message: { type: 'string' },
+                        },
+                    },
+                },
+            },
+        },
+    },
+};
+//# sourceMappingURL=system.schemas.js.map

package/dist/community/system.schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"system.schemas.js","sourceRoot":"","sources":["../../src/community/system.schemas.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,IAAI,EAAE,QAAQ;IACd,oBAAoB,EAAE,KAAK;IAC3B,QAAQ,EAAE,CAAC,OAAO,CAAC;IACnB,UAAU,EAAE;QACV,KAAK,EAAE;YACL,IAAI,EAAE,QAAQ;YACd,oBAAoB,EAAE,KAAK;YAC3B,QAAQ,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,WAAW,CAAC;YAC1C,UAAU,EAAE;gBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACxB,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC3B,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC7B,OAAO,EAAE;oBACP,IAAI,EAAE,OAAO;oBACb,KAAK,EAAE;wBACL,IAAI,EAAE,QAAQ;wBACd,oBAAoB,EAAE,KAAK;wBAC3B,QAAQ,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC;wBAC7B,UAAU,EAAE;4BACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;4BACxB,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;yBAC5B;qBACF;iBACF;aACF;SACF;KACF;CACO,CAAC"}

package/dist/config/config.d.ts

@@ -0,0 +1,43 @@
+export declare const LOG_LEVELS: readonly ["fatal", "error", "warn", "info", "debug", "trace", "silent"];
+export type LogLevel = (typeof LOG_LEVELS)[number];
+export interface ConfigOverrides {
+    adminTokenFile?: string;
+    corsOrigin?: string;
+    dbPath?: string;
+    docsEnabled?: string;
+    host?: string;
+    jwtSecretFile?: string;
+    logLevel?: string;
+    port?: string;
+    registrationEnabled?: string;
+    trustProxy?: string;
+}
+export interface AppConfig {
+    accessTokenExpirationMinutes: number;
+    adminToken?: string;
+    adminTokenFile?: string;
+    corsOrigins: string[];
+    dbPath: string;
+    docsEnabled: boolean;
+    host: string;
+    jwtAudience: string;
+    jwtIssuer: string;
+    jwtSecret?: string;
+    jwtSecretFile?: string;
+    jwtSecretManaged: boolean;
+    lockoutMinutes: number;
+    logLevel: LogLevel;
+    maxFailedLoginAttempts: number;
+    port: number;
+    refreshTokenExpirationDays: number;
+    registrationEnabled: boolean;
+    trustedProxies: string[];
+}
+export declare class ConfigError extends Error {
+    constructor(message: string);
+}
+export declare function isLoopbackHost(host: string): boolean;
+export declare function validateJwtSecret(secret: string): void;
+export declare function loadConfig(overrides?: ConfigOverrides, environment?: NodeJS.ProcessEnv): AppConfig;
+export declare function assertStartSecurity(config: AppConfig): void;
+//# sourceMappingURL=config.d.ts.map

package/dist/config/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/config/config.ts"],"names":[],"mappings":"AAOA,eAAO,MAAM,UAAU,yEAA0E,CAAC;AAElG,MAAM,MAAM,QAAQ,GAAG,CAAC,OAAO,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC;AAEnD,MAAM,WAAW,eAAe;IAC9B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,SAAS;IACxB,4BAA4B,EAAE,MAAM,CAAC;IACrC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,OAAO,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,QAAQ,CAAC;IACnB,sBAAsB,EAAE,MAAM,CAAC;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,0BAA0B,EAAE,MAAM,CAAC;IACnC,mBAAmB,EAAE,OAAO,CAAC;IAC7B,cAAc,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED,qBAAa,WAAY,SAAQ,KAAK;gBACjB,OAAO,EAAE,MAAM;CAInC;AAID,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAMpD;AAmHD,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAOtD;AAwCD,wBAAgB,UAAU,CACxB,SAAS,GAAE,eAAoB,EAC/B,WAAW,GAAE,MAAM,CAAC,UAAwB,GAC3C,SAAS,CA6CX;AAED,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAI3D"}

package/dist/config/config.js

@@ -0,0 +1,208 @@
+import { existsSync, readFileSync } from 'node:fs';
+import { isIP } from 'node:net';
+import { dirname, isAbsolute, join, relative, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { getDefaultDataPath } from './data-path.js';
+export const LOG_LEVELS = ['fatal', 'error', 'warn', 'info', 'debug', 'trace', 'silent'];
+export class ConfigError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'ConfigError';
+    }
+}
+const packageRoot = fileURLToPath(new URL('../../', import.meta.url));
+export function isLoopbackHost(host) {
+    const normalized = host.trim().toLowerCase();
+    return normalized === 'localhost'
+        || normalized === '::1'
+        || normalized === '[::1]'
+        || /^127(?:\.\d{1,3}){3}$/.test(normalized);
+}
+function parsePort(value) {
+    if (!/^\d+$/.test(value)) {
+        throw new ConfigError('PORT must be an integer between 1 and 65535.');
+    }
+    const port = Number(value);
+    if (!Number.isSafeInteger(port) || port < 1 || port > 65_535) {
+        throw new ConfigError('PORT must be an integer between 1 and 65535.');
+    }
+    return port;
+}
+function parseBoolean(value, name) {
+    const normalized = value.trim().toLowerCase();
+    if (normalized === 'true')
+        return true;
+    if (normalized === 'false')
+        return false;
+    throw new ConfigError(`${name} must be true or false.`);
+}
+function parseLogLevel(value) {
+    if (LOG_LEVELS.includes(value))
+        return value;
+    throw new ConfigError(`LOG_LEVEL must be one of: ${LOG_LEVELS.join(', ')}.`);
+}
+function parseCorsOrigins(value) {
+    if (value === undefined || value.trim() === '')
+        return [];
+    const origins = value.split(',').map((origin) => origin.trim()).filter(Boolean);
+    const normalized = origins.map((origin) => {
+        if (origin === '*')
+            throw new ConfigError('CORS_ORIGIN must not contain a wildcard.');
+        let url;
+        try {
+            url = new URL(origin);
+        }
+        catch {
+            throw new ConfigError(`Invalid CORS origin: ${origin}`);
+        }
+        if (!['http:', 'https:'].includes(url.protocol) || url.username || url.password || url.search || url.hash) {
+            throw new ConfigError(`Invalid CORS origin: ${origin}`);
+        }
+        if (url.pathname !== '/' && url.pathname !== '') {
+            throw new ConfigError(`CORS origin must not include a path: ${origin}`);
+        }
+        return url.origin;
+    });
+    return [...new Set(normalized)];
+}
+function isValidIpOrCidr(value) {
+    const separator = value.indexOf('/');
+    if (separator === -1)
+        return isIP(value) !== 0;
+    if (value.indexOf('/', separator + 1) !== -1)
+        return false;
+    const address = value.slice(0, separator);
+    const prefixText = value.slice(separator + 1);
+    const version = isIP(address);
+    if (version === 0 || !/^\d+$/.test(prefixText))
+        return false;
+    const prefix = Number(prefixText);
+    return Number.isSafeInteger(prefix) && prefix >= 0 && prefix <= (version === 4 ? 32 : 128);
+}
+function parseTrustedProxies(value) {
+    if (value === undefined || value.trim() === '')
+        return [];
+    const proxies = value.split(',').map((proxy) => proxy.trim()).filter(Boolean);
+    for (const proxy of proxies) {
+        if (!isValidIpOrCidr(proxy)) {
+            throw new ConfigError(`TRUST_PROXY must contain only IP addresses or CIDR ranges: ${proxy}`);
+        }
+    }
+    return [...new Set(proxies)];
+}
+function resolveDatabasePath(value) {
+    const resolved = resolve(value);
+    const pathFromPackage = relative(packageRoot, resolved);
+    if (pathFromPackage === '' || (!pathFromPackage.startsWith('..') && !isAbsolute(pathFromPackage))) {
+        throw new ConfigError('DB_PATH must be outside the installed package directory.');
+    }
+    return resolved;
+}
+function loadToken(tokenFile, environmentToken) {
+    if (tokenFile !== undefined && tokenFile.trim() !== '') {
+        const resolvedTokenFile = resolve(tokenFile);
+        let token;
+        try {
+            token = readFileSync(resolvedTokenFile, 'utf8').trim();
+        }
+        catch {
+            throw new ConfigError('ADMIN_TOKEN_FILE could not be read.');
+        }
+        validateToken(token);
+        return { adminToken: token, adminTokenFile: resolvedTokenFile };
+    }
+    if (environmentToken !== undefined && environmentToken !== '') {
+        validateToken(environmentToken);
+        return { adminToken: environmentToken };
+    }
+    return {};
+}
+function validateToken(token) {
+    if (token.length < 32) {
+        throw new ConfigError('ADMIN_TOKEN must be at least 32 characters long.');
+    }
+    if (/\s/.test(token)) {
+        throw new ConfigError('ADMIN_TOKEN must not contain whitespace.');
+    }
+}
+export function validateJwtSecret(secret) {
+    if (Buffer.byteLength(secret, 'utf8') < 32) {
+        throw new ConfigError('JWT_SECRET must be at least 32 bytes long.');
+    }
+    if (/\s/.test(secret)) {
+        throw new ConfigError('JWT_SECRET must not contain whitespace.');
+    }
+}
+function readJwtSecretFile(path) {
+    let secret;
+    try {
+        secret = readFileSync(path, 'utf8').trim();
+    }
+    catch {
+        throw new ConfigError('JWT_SECRET_FILE could not be read.');
+    }
+    validateJwtSecret(secret);
+    return secret;
+}
+function loadJwtSecret(dbPath, tokenFile, environmentToken) {
+    if (tokenFile !== undefined && tokenFile.trim() !== '') {
+        const resolvedTokenFile = resolve(tokenFile);
+        return {
+            jwtSecret: readJwtSecretFile(resolvedTokenFile),
+            jwtSecretFile: resolvedTokenFile,
+            jwtSecretManaged: false,
+        };
+    }
+    if (environmentToken !== undefined && environmentToken !== '') {
+        validateJwtSecret(environmentToken);
+        return { jwtSecret: environmentToken, jwtSecretManaged: false };
+    }
+    const managedPath = join(dirname(dbPath), 'jwt-secret');
+    return {
+        ...(existsSync(managedPath) ? { jwtSecret: readJwtSecretFile(managedPath) } : {}),
+        jwtSecretFile: managedPath,
+        jwtSecretManaged: true,
+    };
+}
+export function loadConfig(overrides = {}, environment = process.env) {
+    const host = (overrides.host ?? environment.HOST ?? '127.0.0.1').trim();
+    if (host === '')
+        throw new ConfigError('HOST must not be empty.');
+    const port = parsePort(overrides.port ?? environment.PORT ?? '3000');
+    const dbPath = resolveDatabasePath(overrides.dbPath ?? environment.DB_PATH ?? getDefaultDataPath(process.platform, environment));
+    const logLevel = parseLogLevel(overrides.logLevel ?? environment.LOG_LEVEL ?? 'info');
+    const corsOrigins = parseCorsOrigins(overrides.corsOrigin ?? environment.CORS_ORIGIN);
+    const docsSetting = overrides.docsEnabled ?? environment.DOCS_ENABLED;
+    const docsEnabled = docsSetting === undefined ? isLoopbackHost(host) : parseBoolean(docsSetting, 'DOCS_ENABLED');
+    const registrationSetting = overrides.registrationEnabled ?? environment.REGISTRATION_ENABLED;
+    const registrationEnabled = registrationSetting === undefined
+        ? isLoopbackHost(host)
+        : parseBoolean(registrationSetting, 'REGISTRATION_ENABLED');
+    const trustedProxies = parseTrustedProxies(overrides.trustProxy ?? environment.TRUST_PROXY);
+    const token = loadToken(overrides.adminTokenFile ?? environment.ADMIN_TOKEN_FILE, environment.ADMIN_TOKEN);
+    const jwtToken = loadJwtSecret(dbPath, overrides.jwtSecretFile ?? environment.JWT_SECRET_FILE, environment.JWT_SECRET);
+    return {
+        accessTokenExpirationMinutes: 120,
+        ...token,
+        corsOrigins,
+        dbPath,
+        docsEnabled,
+        host,
+        jwtAudience: 'fivepixels-clients',
+        jwtIssuer: 'fivepixels-api',
+        ...jwtToken,
+        lockoutMinutes: 15,
+        logLevel,
+        maxFailedLoginAttempts: 5,
+        port,
+        refreshTokenExpirationDays: 14,
+        registrationEnabled,
+        trustedProxies,
+    };
+}
+export function assertStartSecurity(config) {
+    if (!isLoopbackHost(config.host) && config.adminToken === undefined) {
+        throw new ConfigError('ADMIN_TOKEN or ADMIN_TOKEN_FILE is required when HOST is not loopback.');
+    }
+}
+//# sourceMappingURL=config.js.map

package/dist/config/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/config/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzE,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAEpD,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAU,CAAC;AAuClG,MAAM,OAAO,WAAY,SAAQ,KAAK;IACpC,YAAmB,OAAe;QAChC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;IAC5B,CAAC;CACF;AAED,MAAM,WAAW,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAEtE,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC7C,OAAO,UAAU,KAAK,WAAW;WAC5B,UAAU,KAAK,KAAK;WACpB,UAAU,KAAK,OAAO;WACtB,uBAAuB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,SAAS,CAAC,KAAa;IAC9B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,WAAW,CAAC,8CAA8C,CAAC,CAAC;IACxE,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,MAAM,EAAE,CAAC;QAC7D,MAAM,IAAI,WAAW,CAAC,8CAA8C,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,YAAY,CAAC,KAAa,EAAE,IAAY;IAC/C,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9C,IAAI,UAAU,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IACvC,IAAI,UAAU,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IACzC,MAAM,IAAI,WAAW,CAAC,GAAG,IAAI,yBAAyB,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,IAAI,UAAU,CAAC,QAAQ,CAAC,KAAiB,CAAC;QAAE,OAAO,KAAiB,CAAC;IACrE,MAAM,IAAI,WAAW,CAAC,6BAA6B,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/E,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAyB;IACjD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,EAAE,CAAC;IAE1D,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAChF,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;QACxC,IAAI,MAAM,KAAK,GAAG;YAAE,MAAM,IAAI,WAAW,CAAC,0CAA0C,CAAC,CAAC;QACtF,IAAI,GAAQ,CAAC;QACb,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,WAAW,CAAC,wBAAwB,MAAM,EAAE,CAAC,CAAC;QAC1D,CAAC;QACD,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;YAC1G,MAAM,IAAI,WAAW,CAAC,wBAAwB,MAAM,EAAE,CAAC,CAAC;QAC1D,CAAC;QACD,IAAI,GAAG,CAAC,QAAQ,KAAK,GAAG,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,EAAE,CAAC;YAChD,MAAM,IAAI,WAAW,CAAC,wCAAwC,MAAM,EAAE,CAAC,CAAC;QAC1E,CAAC;QACD,OAAO,GAAG,CAAC,MAAM,CAAC;IACpB,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,SAAS,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAE/C,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3D,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IAC1C,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;IAC9B,IAAI,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7D,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;IAClC,OAAO,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,IAAI,MAAM,IAAI,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;AAC7F,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAyB;IACpD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,EAAE,CAAC;IAC1D,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC9E,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,WAAW,CAAC,8DAA8D,KAAK,EAAE,CAAC,CAAC;QAC/F,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAa;IACxC,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAChC,MAAM,eAAe,GAAG,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IACxD,IAAI,eAAe,KAAK,EAAE,IAAI,CAAC,CAAC,eAAe,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC;QAClG,MAAM,IAAI,WAAW,CAAC,0DAA0D,CAAC,CAAC;IACpF,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,SAAS,CAChB,SAA6B,EAC7B,gBAAoC;IAEpC,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACvD,MAAM,iBAAiB,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,KAAa,CAAC;QAClB,IAAI,CAAC;YACH,KAAK,GAAG,YAAY,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QACzD,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,WAAW,CAAC,qCAAqC,CAAC,CAAC;QAC/D,CAAC;QACD,aAAa,CAAC,KAAK,CAAC,CAAC;QACrB,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,cAAc,EAAE,iBAAiB,EAAE,CAAC;IAClE,CAAC;IAED,IAAI,gBAAgB,KAAK,SAAS,IAAI,gBAAgB,KAAK,EAAE,EAAE,CAAC;QAC9D,aAAa,CAAC,gBAAgB,CAAC,CAAC;QAChC,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,CAAC;IAC1C,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QACtB,MAAM,IAAI,WAAW,CAAC,kDAAkD,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,WAAW,CAAC,0CAA0C,CAAC,CAAC;IACpE,CAAC;AACH,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,MAAc;IAC9C,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC;QAC3C,MAAM,IAAI,WAAW,CAAC,4CAA4C,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,WAAW,CAAC,yCAAyC,CAAC,CAAC;IACnE,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY;IACrC,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,WAAW,CAAC,oCAAoC,CAAC,CAAC;IAC9D,CAAC;IACD,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC1B,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,aAAa,CACpB,MAAc,EACd,SAA6B,EAC7B,gBAAoC;IAEpC,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACvD,MAAM,iBAAiB,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;QAC7C,OAAO;YACL,SAAS,EAAE,iBAAiB,CAAC,iBAAiB,CAAC;YAC/C,aAAa,EAAE,iBAAiB;YAChC,gBAAgB,EAAE,KAAK;SACxB,CAAC;IACJ,CAAC;IAED,IAAI,gBAAgB,KAAK,SAAS,IAAI,gBAAgB,KAAK,EAAE,EAAE,CAAC;QAC9D,iBAAiB,CAAC,gBAAgB,CAAC,CAAC;QACpC,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC;IAClE,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC,CAAC;IACxD,OAAO;QACL,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,iBAAiB,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjF,aAAa,EAAE,WAAW;QAC1B,gBAAgB,EAAE,IAAI;KACvB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,UAAU,CACxB,YAA6B,EAAE,EAC/B,cAAiC,OAAO,CAAC,GAAG;IAE5C,MAAM,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,IAAI,WAAW,CAAC,IAAI,IAAI,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC;IACxE,IAAI,IAAI,KAAK,EAAE;QAAE,MAAM,IAAI,WAAW,CAAC,yBAAyB,CAAC,CAAC;IAElE,MAAM,IAAI,GAAG,SAAS,CAAC,SAAS,CAAC,IAAI,IAAI,WAAW,CAAC,IAAI,IAAI,MAAM,CAAC,CAAC;IACrE,MAAM,MAAM,GAAG,mBAAmB,CAChC,SAAS,CAAC,MAAM,IAAI,WAAW,CAAC,OAAO,IAAI,kBAAkB,CAAC,OAAO,CAAC,QAAQ,EAAE,WAAW,CAAC,CAC7F,CAAC;IACF,MAAM,QAAQ,GAAG,aAAa,CAAC,SAAS,CAAC,QAAQ,IAAI,WAAW,CAAC,SAAS,IAAI,MAAM,CAAC,CAAC;IACtF,MAAM,WAAW,GAAG,gBAAgB,CAAC,SAAS,CAAC,UAAU,IAAI,WAAW,CAAC,WAAW,CAAC,CAAC;IACtF,MAAM,WAAW,GAAG,SAAS,CAAC,WAAW,IAAI,WAAW,CAAC,YAAY,CAAC;IACtE,MAAM,WAAW,GAAG,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;IACjH,MAAM,mBAAmB,GAAG,SAAS,CAAC,mBAAmB,IAAI,WAAW,CAAC,oBAAoB,CAAC;IAC9F,MAAM,mBAAmB,GAAG,mBAAmB,KAAK,SAAS;QAC3D,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC;QACtB,CAAC,CAAC,YAAY,CAAC,mBAAmB,EAAE,sBAAsB,CAAC,CAAC;IAC9D,MAAM,cAAc,GAAG,mBAAmB,CAAC,SAAS,CAAC,UAAU,IAAI,WAAW,CAAC,WAAW,CAAC,CAAC;IAC5F,MAAM,KAAK,GAAG,SAAS,CACrB,SAAS,CAAC,cAAc,IAAI,WAAW,CAAC,gBAAgB,EACxD,WAAW,CAAC,WAAW,CACxB,CAAC;IACF,MAAM,QAAQ,GAAG,aAAa,CAC5B,MAAM,EACN,SAAS,CAAC,aAAa,IAAI,WAAW,CAAC,eAAe,EACtD,WAAW,CAAC,UAAU,CACvB,CAAC;IAEF,OAAO;QACL,4BAA4B,EAAE,GAAG;QACjC,GAAG,KAAK;QACR,WAAW;QACX,MAAM;QACN,WAAW;QACX,IAAI;QACJ,WAAW,EAAE,oBAAoB;QACjC,SAAS,EAAE,gBAAgB;QAC3B,GAAG,QAAQ;QACX,cAAc,EAAE,EAAE;QAClB,QAAQ;QACR,sBAAsB,EAAE,CAAC;QACzB,IAAI;QACJ,0BAA0B,EAAE,EAAE;QAC9B,mBAAmB;QACnB,cAAc;KACf,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAAiB;IACnD,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACpE,MAAM,IAAI,WAAW,CAAC,wEAAwE,CAAC,CAAC;IAClG,CAAC;AACH,CAAC"}

package/dist/config/data-path.d.ts

@@ -0,0 +1,2 @@
+export declare function getDefaultDataPath(platform?: NodeJS.Platform, environment?: NodeJS.ProcessEnv, userHome?: string): string;
+//# sourceMappingURL=data-path.d.ts.map

package/dist/config/data-path.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"data-path.d.ts","sourceRoot":"","sources":["../../src/config/data-path.ts"],"names":[],"mappings":"AAKA,wBAAgB,kBAAkB,CAChC,QAAQ,GAAE,MAAM,CAAC,QAA2B,EAC5C,WAAW,GAAE,MAAM,CAAC,UAAwB,EAC5C,QAAQ,GAAE,MAAkB,GAC3B,MAAM,CAcR"}

package/dist/config/data-path.js

@@ -0,0 +1,16 @@
+import { homedir } from 'node:os';
+import { posix, win32 } from 'node:path';
+const APPLICATION_DIRECTORY = 'fivepixels-api';
+export function getDefaultDataPath(platform = process.platform, environment = process.env, userHome = homedir()) {
+    const platformPath = platform === 'win32' ? win32 : posix;
+    if (platform === 'win32') {
+        const base = environment.LOCALAPPDATA ?? platformPath.join(userHome, 'AppData', 'Local');
+        return platformPath.join(base, APPLICATION_DIRECTORY, 'data.db');
+    }
+    if (platform === 'darwin') {
+        return platformPath.join(userHome, 'Library', 'Application Support', APPLICATION_DIRECTORY, 'data.db');
+    }
+    const base = environment.XDG_DATA_HOME ?? platformPath.join(userHome, '.local', 'share');
+    return platformPath.join(base, APPLICATION_DIRECTORY, 'data.db');
+}
+//# sourceMappingURL=data-path.js.map

package/dist/config/data-path.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"data-path.js","sourceRoot":"","sources":["../../src/config/data-path.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAEzC,MAAM,qBAAqB,GAAG,gBAAgB,CAAC;AAE/C,MAAM,UAAU,kBAAkB,CAChC,WAA4B,OAAO,CAAC,QAAQ,EAC5C,cAAiC,OAAO,CAAC,GAAG,EAC5C,WAAmB,OAAO,EAAE;IAE5B,MAAM,YAAY,GAAG,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;IAE1D,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,WAAW,CAAC,YAAY,IAAI,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QACzF,OAAO,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,qBAAqB,EAAE,SAAS,CAAC,CAAC;IACnE,CAAC;IAED,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,OAAO,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,SAAS,CAAC,CAAC;IACzG,CAAC;IAED,MAAM,IAAI,GAAG,WAAW,CAAC,aAAa,IAAI,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IACzF,OAAO,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,qBAAqB,EAAE,SAAS,CAAC,CAAC;AACnE,CAAC"}

package/dist/config/jwt-secret.d.ts

@@ -0,0 +1,3 @@
+import { type AppConfig } from './config.js';
+export declare function ensureJwtSecret(config: AppConfig): AppConfig;
+//# sourceMappingURL=jwt-secret.d.ts.map

package/dist/config/jwt-secret.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt-secret.d.ts","sourceRoot":"","sources":["../../src/config/jwt-secret.ts"],"names":[],"mappings":"AAYA,OAAO,EAEL,KAAK,SAAS,EAEf,MAAM,aAAa,CAAC;AAiBrB,wBAAgB,eAAe,CAAC,MAAM,EAAE,SAAS,GAAG,SAAS,CA8C5D"}

package/dist/config/jwt-secret.js

@@ -0,0 +1,67 @@
+import { chmodSync, existsSync, linkSync, mkdirSync, readFileSync, unlinkSync, writeFileSync, } from 'node:fs';
+import { randomBytes, randomUUID } from 'node:crypto';
+import { basename, dirname, join } from 'node:path';
+import { ConfigError, validateJwtSecret, } from './config.js';
+function readManagedSecret(config) {
+    if (config.jwtSecretFile === undefined) {
+        throw new ConfigError('A JWT secret is required to start the API.');
+    }
+    let secret;
+    try {
+        secret = readFileSync(config.jwtSecretFile, 'utf8').trim();
+    }
+    catch {
+        throw new ConfigError('Managed JWT secret file could not be read.');
+    }
+    validateJwtSecret(secret);
+    return { ...config, jwtSecret: secret };
+}
+export function ensureJwtSecret(config) {
+    if (!config.jwtSecretManaged) {
+        if (config.jwtSecret === undefined) {
+            throw new ConfigError('JWT_SECRET or JWT_SECRET_FILE is required.');
+        }
+        validateJwtSecret(config.jwtSecret);
+        return config;
+    }
+    if (config.jwtSecretFile === undefined) {
+        throw new ConfigError('JWT_SECRET or JWT_SECRET_FILE is required.');
+    }
+    if (existsSync(config.jwtSecretFile)) {
+        try {
+            if (process.platform !== 'win32')
+                chmodSync(config.jwtSecretFile, 0o600);
+        }
+        catch {
+            throw new ConfigError('Managed JWT secret file permissions could not be restricted.');
+        }
+        return readManagedSecret(config);
+    }
+    const directory = dirname(config.jwtSecretFile);
+    mkdirSync(directory, { mode: 0o700, recursive: true });
+    const secret = randomBytes(32).toString('base64url');
+    const temporaryPath = join(directory, `.${basename(config.jwtSecretFile)}.${process.pid}.${randomUUID()}.tmp`);
+    try {
+        writeFileSync(temporaryPath, `${secret}\n`, { flag: 'wx', mode: 0o600 });
+        try {
+            linkSync(temporaryPath, config.jwtSecretFile);
+        }
+        catch (error) {
+            if (!existsSync(config.jwtSecretFile))
+                throw error;
+        }
+        if (process.platform !== 'win32')
+            chmodSync(config.jwtSecretFile, 0o600);
+    }
+    catch {
+        throw new ConfigError('Managed JWT secret file could not be created.');
+    }
+    finally {
+        if (existsSync(temporaryPath))
+            unlinkSync(temporaryPath);
+    }
+    return existsSync(config.jwtSecretFile)
+        ? readManagedSecret(config)
+        : { ...config, jwtSecret: secret };
+}
+//# sourceMappingURL=jwt-secret.js.map

package/dist/config/jwt-secret.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt-secret.js","sourceRoot":"","sources":["../../src/config/jwt-secret.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,SAAS,EACT,UAAU,EACV,QAAQ,EACR,SAAS,EACT,YAAY,EACZ,UAAU,EACV,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEpD,OAAO,EACL,WAAW,EAEX,iBAAiB,GAClB,MAAM,aAAa,CAAC;AAErB,SAAS,iBAAiB,CAAC,MAAiB;IAC1C,IAAI,MAAM,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QACvC,MAAM,IAAI,WAAW,CAAC,4CAA4C,CAAC,CAAC;IACtE,CAAC;IAED,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,WAAW,CAAC,4CAA4C,CAAC,CAAC;IACtE,CAAC;IACD,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC1B,OAAO,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,MAAiB;IAC/C,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;QAC7B,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACnC,MAAM,IAAI,WAAW,CAAC,4CAA4C,CAAC,CAAC;QACtE,CAAC;QACD,iBAAiB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACpC,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IAAI,MAAM,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QACvC,MAAM,IAAI,WAAW,CAAC,4CAA4C,CAAC,CAAC;IACtE,CAAC;IAED,IAAI,UAAU,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;QACrC,IAAI,CAAC;YACH,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;gBAAE,SAAS,CAAC,MAAM,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;QAC3E,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,WAAW,CAAC,8DAA8D,CAAC,CAAC;QACxF,CAAC;QACD,OAAO,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACnC,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IAChD,SAAS,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,MAAM,MAAM,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACrD,MAAM,aAAa,GAAG,IAAI,CACxB,SAAS,EACT,IAAI,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,OAAO,CAAC,GAAG,IAAI,UAAU,EAAE,MAAM,CACxE,CAAC;IAEF,IAAI,CAAC;QACH,aAAa,CAAC,aAAa,EAAE,GAAG,MAAM,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACzE,IAAI,CAAC;YACH,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,aAAa,CAAC;gBAAE,MAAM,KAAK,CAAC;QACrD,CAAC;QACD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;YAAE,SAAS,CAAC,MAAM,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;IAC3E,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,WAAW,CAAC,+CAA+C,CAAC,CAAC;IACzE,CAAC;YAAS,CAAC;QACT,IAAI,UAAU,CAAC,aAAa,CAAC;YAAE,UAAU,CAAC,aAAa,CAAC,CAAC;IAC3D,CAAC;IAED,OAAO,UAAU,CAAC,MAAM,CAAC,aAAa,CAAC;QACrC,CAAC,CAAC,iBAAiB,CAAC,MAAM,CAAC;QAC3B,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;AACvC,CAAC"}

package/dist/db/backup.d.ts

@@ -0,0 +1,10 @@
+import type { SqliteDatabase } from './connection.js';
+export interface BackupResult {
+    path: string;
+    totalPages: number;
+}
+export type BackupKind = 'auto' | 'manual';
+export declare function getDefaultBackupPath(dbPath: string, kind?: BackupKind): string;
+export declare function createBackup(database: SqliteDatabase, destination: string): Promise<BackupResult>;
+export declare function pruneAutomaticBackups(dbPath: string, retain?: number): string[];
+//# sourceMappingURL=backup.d.ts.map

package/dist/db/backup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup.d.ts","sourceRoot":"","sources":["../../src/db/backup.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEtD,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,QAAQ,CAAC;AAM3C,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,GAAE,UAAqB,GAAG,MAAM,CAExF;AAED,wBAAsB,YAAY,CAChC,QAAQ,EAAE,cAAc,EACxB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,YAAY,CAAC,CAwBvB;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,SAAI,GAAG,MAAM,EAAE,CAoB1E"}

package/dist/db/backup.js

@@ -0,0 +1,51 @@
+import { chmodSync, existsSync, mkdirSync, readdirSync, statSync, unlinkSync } from 'node:fs';
+import { dirname, join, resolve } from 'node:path';
+import BetterSqlite3 from 'better-sqlite3';
+function timestamp() {
+    return new Date().toISOString().replace(/[:.]/g, '-');
+}
+export function getDefaultBackupPath(dbPath, kind = 'manual') {
+    return join(dirname(dbPath), 'backups', `${kind}-${timestamp()}.db`);
+}
+export async function createBackup(database, destination) {
+    const resolvedDestination = resolve(destination);
+    if (existsSync(resolvedDestination)) {
+        throw new Error('Backup destination already exists.');
+    }
+    mkdirSync(dirname(resolvedDestination), { mode: 0o700, recursive: true });
+    const metadata = await database.backup(resolvedDestination);
+    chmodSync(resolvedDestination, 0o600);
+    const backupDatabase = new BetterSqlite3(resolvedDestination, { fileMustExist: true });
+    try {
+        backupDatabase.pragma('wal_checkpoint(TRUNCATE)');
+        backupDatabase.pragma('journal_mode = DELETE');
+        const rows = backupDatabase.pragma('integrity_check');
+        const values = rows.flatMap((row) => Object.values(row));
+        if (values.length !== 1 || values[0] !== 'ok') {
+            throw new Error('Backup integrity check failed.');
+        }
+    }
+    finally {
+        backupDatabase.close();
+    }
+    return { path: resolvedDestination, totalPages: metadata.totalPages };
+}
+export function pruneAutomaticBackups(dbPath, retain = 3) {
+    const backupDirectory = join(dirname(dbPath), 'backups');
+    if (!existsSync(backupDirectory))
+        return [];
+    const automaticBackups = readdirSync(backupDirectory)
+        .filter((name) => name.startsWith('auto-') && name.endsWith('.db'))
+        .map((name) => {
+        const path = join(backupDirectory, name);
+        return { path, modifiedAt: statSync(path).mtimeMs };
+    })
+        .sort((left, right) => (right.modifiedAt - left.modifiedAt || right.path.localeCompare(left.path)));
+    const removed = [];
+    for (const backup of automaticBackups.slice(retain)) {
+        unlinkSync(backup.path);
+        removed.push(backup.path);
+    }
+    return removed;
+}
+//# sourceMappingURL=backup.js.map