@freema/drobek-modules 0.3.3 → 0.4.0

package/dist/{chunk-WHKPW5MP.js → chunk-OCSLKNR2.js}

@@ -95,6 +95,8 @@ var CORE_ERROR_CODES = [
   "domain_taken",
   "domain_not_verified",
   "dns_unavailable",
+  // proxy upstreams (MCP upstream tools)
+  "upstream_already_registered",
   // compile.errors[]
   "build_error",
   "unresolved_import",
@@ -952,6 +954,20 @@ function hasControlBytes(chunk) {
   return false;
 }
 
+// packages/core/dist/cookies.js
+function readCookieValue(header, name) {
+  if (!header)
+    return null;
+  for (const part of header.split(";")) {
+    const eq20 = part.indexOf("=");
+    if (eq20 === -1)
+      continue;
+    if (part.slice(0, eq20).trim() === name)
+      return part.slice(eq20 + 1).trim();
+  }
+  return null;
+}
+
 // packages/core/dist/redis.js
 import { Redis } from "ioredis";
 var client = null;
@@ -2373,7 +2389,18 @@ var CONTROL_RE = new RegExp("[\\u0000-\\u001f\\u007f-\\u009f\\u2028\\u2029]+", "
 
 // packages/apps/dist/gallery.server.js
 import { and as and12, asc as asc3, desc as desc6, eq as eq12, isNotNull as isNotNull7, isNull as isNull5, sql as sql8 } from "drizzle-orm";
-var itemColumns = { slug: apps.slug, name: apps.name, description: apps.galleryDescription, publishedAt: apps.publishedAt };
+var itemColumns = {
+  slug: apps.slug,
+  name: apps.name,
+  description: apps.galleryDescription,
+  publishedAt: apps.publishedAt,
+  // Names only, from the current saved configuration. A correlated aggregate
+  // keeps pagination/counts intact and avoids a query per card. No extension
+  // or module runtime dependency is needed by this public core API.
+  modules: sql8`(select coalesce(jsonb_agg(${moduleConfigs.module} order by ${moduleConfigs.module}), '[]'::jsonb)
+    from ${moduleConfigs} where ${moduleConfigs.appId} = ${apps.id}
+    and jsonb_typeof(${moduleConfigs.config}) = 'object' and ${moduleConfigs.config} <> '{}'::jsonb)`
+};
 
 // packages/modules/dist/limits.js
 var LIMITS_CACHE_TTL_SEC = 60;
@@ -2570,20 +2597,8 @@ function endUserEpochKey(appId) {
 }
 var SESSION_PROVIDER_RE = /^[a-z][a-z0-9]{1,15}$/;
 var SESSION_CONNECTION_RE = /^[A-Za-z0-9_-]{16,64}$/;
-function readCookie(header, name) {
-  if (!header)
-    return null;
-  for (const part of header.split(";")) {
-    const eq20 = part.indexOf("=");
-    if (eq20 === -1)
-      continue;
-    if (part.slice(0, eq20).trim() === name)
-      return part.slice(eq20 + 1).trim();
-  }
-  return null;
-}
 function readEndUserToken(cookieHeader, secure) {
-  const token = readCookie(cookieHeader, endUserCookieName(secure));
+  const token = readCookieValue(cookieHeader, endUserCookieName(secure));
   return token && END_USER_TOKEN_RE.test(token) ? token : null;
 }
 function parseEndUserSession(raw) {

package/dist/index.js

@@ -132,7 +132,7 @@ import {
   stableJson,
   streamMultipartFile,
   submissionsAuthorityOf
-} from "./chunk-WHKPW5MP.js";
+} from "./chunk-OCSLKNR2.js";
 
 // packages/modules/dist/index.js
 import { z as z2 } from "zod";

package/dist/testing.js

@@ -23,7 +23,7 @@ import {
   runRoute,
   sanitizeSubject,
   workspaces
-} from "./chunk-WHKPW5MP.js";
+} from "./chunk-OCSLKNR2.js";
 
 // packages/modules/dist/testing.js
 import { existsSync } from "node:fs";
@@ -340,6 +340,48 @@ var TOOL_DOCS = [
     returns: "{ removed:host, was_verified, was_primary, note }",
     example: { app_id: "k3v9x0\u2026", host: "shop.example.com", user_confirmed: true }
   },
+  {
+    name: "list_upstreams",
+    title: "List a workspace's proxy upstreams",
+    scope: "read (workspace-admin role in the workspace)",
+    description: "The external APIs registered for the proxy module in one workspace \u2014 the dashboard's workspace \u2192 Upstreams page: per upstream its `name` (what apps call it by), `base_url`, `allowed_methods`, `allowed_path_prefixes`, `auth_type` (none | bearer | header), `auth_header_name`, `has_secret` (never the secret) and `apps` \u2014 the apps whose assignment a workspace admin confirmed. Plus `upstreams_url`, the dashboard page. Workspace admins only (forbidden otherwise); get_app \u2192 modules.proxy.info shows any editor what one app may call. Read-only.",
+    annotations: READ_ONLY,
+    fields: [{ name: "workspace", type: "string", required: true, description: "The workspace slug." }],
+    returns: '{ workspace, upstreams:[{ name, base_url, allowed_methods, allowed_path_prefixes, auth_type:"none"|"bearer"|"header", auth_header_name, has_secret, apps:[slug], created_at }], upstreams_url }',
+    example: { workspace: "acme-crew" }
+  },
+  {
+    name: "register_upstream",
+    title: "Register a proxy upstream",
+    scope: "write (workspace-admin role in the workspace)",
+    description: 'Register an external API for the proxy module in a workspace \u2014 what the dashboard\'s Upstreams page does, with the same checks: a public https or http base URL on port 80/443 (never a private address), the allowed HTTP methods and path prefixes apps may call under it. `auth_type: "none"` (an API without a key, e.g. https://pokeapi.co) registers at once. `bearer` / `header` need a key, and a key never passes through MCP: the answer is `registered: false` with `secret_url` \u2014 the Upstreams page with every field filled in; give the user that link, they paste the key and click Register. Never ask for the key in chat. A registered upstream does nothing yet: assign it to an app with configure_module(\'proxy\', { upstreams: { <name>: { rules: { call: "user" } } } }) \u2014 a workspace admin confirms that in the dashboard. A name the workspace already has answers upstream_already_registered.',
+    annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: true, openWorldHint: false },
+    fields: [
+      { name: "workspace", type: "string", required: true, description: "The workspace slug." },
+      { name: "name", type: "string", required: true, description: "The name apps call it by, e.g. pokeapi." },
+      { name: "base_url", type: "string", required: true, description: "The base URL, e.g. https://pokeapi.co." },
+      { name: "allowed_methods", type: "string[]", required: true, description: 'e.g. ["GET"].' },
+      { name: "allowed_path_prefixes", type: "string[]", required: true, description: 'e.g. ["/api/v2/"].' },
+      { name: "auth_type", type: '"none" | "bearer" | "header"', required: true, description: "none registers now; bearer / header answer secret_url." },
+      { name: "auth_header_name", type: "string (header only)", required: false, description: "The header that carries the key, e.g. X-Api-Key." }
+    ],
+    returns: "{ registered:true, upstream:{ name, base_url, allowed_methods, allowed_path_prefixes, auth_type, auth_header_name, has_secret, apps, created_at }, next } \u2014 or { registered:false, name, secret_url, note } for bearer / header",
+    example: { workspace: "acme-crew", name: "pokeapi", base_url: "https://pokeapi.co", allowed_methods: ["GET"], allowed_path_prefixes: ["/api/v2/"], auth_type: "none" }
+  },
+  {
+    name: "remove_upstream",
+    title: "Remove a proxy upstream",
+    scope: "write (workspace-admin role in the workspace)",
+    description: "Delete a registered upstream and its stored key \u2014 the dashboard's Delete on the Upstreams page. Every app that calls it gets 404 upstream_not_registered at once, so it needs `user_confirmed: true` \u2014 set it ONLY after the user explicitly said yes to removing exactly this upstream; without it the answer is user_confirmation_required with the `apps` that use it, and nothing changes. Registering the name again creates a new record: each app's assignment then needs a new confirmation.",
+    annotations: { readOnlyHint: false, destructiveHint: true, idempotentHint: true, openWorldHint: false },
+    fields: [
+      { name: "workspace", type: "string", required: true, description: "The workspace slug." },
+      { name: "name", type: "string", required: true, description: "A registered upstream (list_upstreams lists them)." },
+      { name: "user_confirmed", type: "boolean", required: false, description: "true ONLY after the user explicitly said yes to removing it." }
+    ],
+    returns: "{ removed:name, apps:[slug], note }",
+    example: { workspace: "acme-crew", name: "pokeapi", user_confirmed: true }
+  },
   {
     name: "set_workspace_publishing",
     title: "Set a workspace's publishing",
@@ -545,6 +587,12 @@ var ERROR_CATALOGUE = [
     meaning: "A DNS lookup timed out or the resolver failed (SERVFAIL, network), so the records could not be checked. Nothing changed \u2014 an existing verification is kept.",
     fix: "Try verify_domain again in a few minutes; if it keeps failing, the domain's DNS servers may be down \u2014 tell the user."
   },
+  {
+    code: "upstream_already_registered",
+    surface: "MCP tool isError (register_upstream)",
+    meaning: "The workspace already has an upstream with this name. Nothing changed.",
+    fix: "list_upstreams shows it; use it as it is, pick another name, or remove_upstream it first (the user confirms) and register it again."
+  },
   {
     code: "internal_error",
     surface: "MCP tool isError",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@freema/drobek-modules",
-  "version": "0.3.3",
+  "version": "0.4.0",
   "description": "The drobek platform module contract, registry and runtime: defineModule, the ModuleContext and the test kit (@drobek/modules/testing).",
   "license": "AGPL-3.0-only",
   "type": "module",
@@ -42,7 +42,7 @@
     "LICENSE"
   ],
   "dependencies": {
-    "@drobek/sdk": "npm:@freema/drobek-sdk@0.3.3",
+    "@drobek/sdk": "npm:@freema/drobek-sdk@0.4.0",
     "@paralleldrive/cuid2": "^2.2.2",
     "esbuild": "^0.25.0",
     "ioredis": "^5.6.0",