@gelabs/ovr 0.4.2 → 0.4.3

package/dist/auth-rate-limit.d.ts

@@ -1,16 +1,25 @@
 /**
  * Fixed-window rate limiting backed by Redis. Used to throttle admin login
  * attempts (per username/IP) before the expensive argon2 verify runs.
+ *
+ * Toggle: set `EOVR_RATE_LIMIT_DISABLED` to a truthy value (`1`/`true`/`yes`/`on`)
+ * to bypass throttling entirely — every call is allowed and Redis is never
+ * touched. Intended for staging/QA where repeated login attempts must not lock
+ * you out. Leave it unset (the default) to keep throttling on in production.
  */
 
 interface RateLimitResult {
     allowed: boolean;
     remaining: number;
 }
+/** Whether rate limiting is switched off via `EOVR_RATE_LIMIT_DISABLED`. */
+declare function isRateLimitDisabled(): boolean;
 /**
  * Increment a counter for `key`; the first hit in a window sets its TTL. Returns
- * `allowed: false` once more than `max` hits occur within `windowSeconds`.
+ * `allowed: false` once more than `max` hits occur within `windowSeconds`. When
+ * `EOVR_RATE_LIMIT_DISABLED` is truthy this short-circuits to always-allowed and
+ * never touches Redis.
  */
 declare function rateLimit(key: string, max: number, windowSeconds: number): Promise<RateLimitResult>;
 
-export { type RateLimitResult, rateLimit };
+export { type RateLimitResult, isRateLimitDisabled, rateLimit };

package/dist/auth-rate-limit.js

@@ -1,2 +1,2 @@
-export { rateLimit } from './chunk-77ULDXQX.js';
+export { isRateLimitDisabled, rateLimit } from './chunk-6ZJSEM4Y.js';
 import './chunk-ASFB24ZY.js';

package/dist/auth.d.ts

@@ -1,6 +1,6 @@
 export { getRedis } from './auth-redis.js';
 export { SESSION_COOKIE, SessionData, cookieSecure, createSession, destroySession, getSession } from './auth-session.js';
-export { RateLimitResult, rateLimit } from './auth-rate-limit.js';
+export { RateLimitResult, isRateLimitDisabled, rateLimit } from './auth-rate-limit.js';
 export { ADMIN_COOKIE, Auth, AuthDeps, createAuth } from './auth-auth.js';
 import 'ioredis';
 import './schema-CdsFQxIg.js';

package/dist/auth.js

@@ -1,4 +1,4 @@
 export { ADMIN_COOKIE, createAuth } from './chunk-AJ2RZTVX.js';
-export { rateLimit } from './chunk-77ULDXQX.js';
+export { isRateLimitDisabled, rateLimit } from './chunk-6ZJSEM4Y.js';
 export { SESSION_COOKIE, cookieSecure, createSession, destroySession, getSession } from './chunk-KIKDXRM5.js';
 export { getRedis } from './chunk-ASFB24ZY.js';

package/dist/{chunk-77ULDXQX.js → chunk-6ZJSEM4Y.js}

@@ -1,7 +1,12 @@
 import { getRedis } from './chunk-ASFB24ZY.js';
 import 'server-only';
 
+function isRateLimitDisabled() {
+  const v = process.env.EOVR_RATE_LIMIT_DISABLED?.trim().toLowerCase();
+  return v === "1" || v === "true" || v === "yes" || v === "on";
+}
 async function rateLimit(key, max, windowSeconds) {
+  if (isRateLimitDisabled()) return { allowed: true, remaining: max };
   const redis = getRedis();
   const k = `eovr:rl:${key}`;
   const count = await redis.incr(k);
@@ -9,4 +14,4 @@ async function rateLimit(key, max, windowSeconds) {
   return { allowed: count <= max, remaining: Math.max(0, max - count) };
 }
 
-export { rateLimit };
+export { isRateLimitDisabled, rateLimit };

package/dist/generated/client/edge.js

@@ -242,7 +242,7 @@ const config = {
       "value": "prisma-client-js"
     },
     "output": {
-      "value": "/Volumes/satechi/Mac-Documents/GELABS/gelabs-ovr/packages/ovr-data/src/generated/client",
+      "value": "/private/tmp/claude-501/-Volumes-satechi-Mac-Documents-GELABS/e90bff27-fc99-4707-8f39-f7ce029d695f/scratchpad/gelabs-ovr-pub/packages/ovr-data/src/generated/client",
       "fromEnvVar": null
     },
     "config": {
@@ -260,7 +260,7 @@ const config = {
       }
     ],
     "previewFeatures": [],
-    "sourceFilePath": "/Volumes/satechi/Mac-Documents/GELABS/gelabs-ovr/packages/ovr-data/prisma/schema.prisma",
+    "sourceFilePath": "/private/tmp/claude-501/-Volumes-satechi-Mac-Documents-GELABS/e90bff27-fc99-4707-8f39-f7ce029d695f/scratchpad/gelabs-ovr-pub/packages/ovr-data/prisma/schema.prisma",
     "isCustomOutput": true
   },
   "relativeEnvPaths": {

package/dist/generated/client/index.js

@@ -243,7 +243,7 @@ const config = {
       "value": "prisma-client-js"
     },
     "output": {
-      "value": "/Volumes/satechi/Mac-Documents/GELABS/gelabs-ovr/packages/ovr-data/src/generated/client",
+      "value": "/private/tmp/claude-501/-Volumes-satechi-Mac-Documents-GELABS/e90bff27-fc99-4707-8f39-f7ce029d695f/scratchpad/gelabs-ovr-pub/packages/ovr-data/src/generated/client",
       "fromEnvVar": null
     },
     "config": {
@@ -261,7 +261,7 @@ const config = {
       }
     ],
     "previewFeatures": [],
-    "sourceFilePath": "/Volumes/satechi/Mac-Documents/GELABS/gelabs-ovr/packages/ovr-data/prisma/schema.prisma",
+    "sourceFilePath": "/private/tmp/claude-501/-Volumes-satechi-Mac-Documents-GELABS/e90bff27-fc99-4707-8f39-f7ce029d695f/scratchpad/gelabs-ovr-pub/packages/ovr-data/prisma/schema.prisma",
     "isCustomOutput": true
   },
   "relativeEnvPaths": {

package/dist/generated/client/wasm.js

@@ -242,7 +242,7 @@ const config = {
       "value": "prisma-client-js"
     },
     "output": {
-      "value": "/Volumes/satechi/Mac-Documents/GELABS/gelabs-ovr/packages/ovr-data/src/generated/client",
+      "value": "/private/tmp/claude-501/-Volumes-satechi-Mac-Documents-GELABS/e90bff27-fc99-4707-8f39-f7ce029d695f/scratchpad/gelabs-ovr-pub/packages/ovr-data/src/generated/client",
       "fromEnvVar": null
     },
     "config": {
@@ -260,7 +260,7 @@ const config = {
       }
     ],
     "previewFeatures": [],
-    "sourceFilePath": "/Volumes/satechi/Mac-Documents/GELABS/gelabs-ovr/packages/ovr-data/prisma/schema.prisma",
+    "sourceFilePath": "/private/tmp/claude-501/-Volumes-satechi-Mac-Documents-GELABS/e90bff27-fc99-4707-8f39-f7ce029d695f/scratchpad/gelabs-ovr-pub/packages/ovr-data/prisma/schema.prisma",
     "isCustomOutput": true
   },
   "relativeEnvPaths": {

package/dist/ui-components-admin/accounts-manager.js

@@ -3,8 +3,8 @@ import { Card, CardContent } from '../chunk-SETIN6XP.js';
 import { usePagination, Pagination } from '../chunk-6YFZLXFP.js';
 import { Table, TableHeader, TableRow, TableHead, TableBody, TableCell } from '../chunk-OWCGEEAZ.js';
 import { Badge } from '../chunk-55FQP2DO.js';
-import { Dialog, DialogTrigger, DialogContent, DialogHeader, DialogTitle, DialogDescription, DialogFooter, DialogClose } from '../chunk-M35R6JLA.js';
 import { Label } from '../chunk-XQTVSNHC.js';
+import { Dialog, DialogTrigger, DialogContent, DialogHeader, DialogTitle, DialogDescription, DialogFooter, DialogClose } from '../chunk-M35R6JLA.js';
 import { Input } from '../chunk-K3KIBHJF.js';
 import { Button } from '../chunk-I4WDVYHX.js';
 import { useCopy, useOvrConfig } from '../chunk-TJSNVTVB.js';
@@ -150,15 +150,14 @@ function NewAccountDialog({
   onCreated
 }) {
   const t = useCopy().admin.accountsPage;
-  const assignableRoles = roles.filter((r) => r.name !== "SUPER_ADMIN");
-  const defaultRole = assignableRoles.find((r) => r.name === "ENFORCER")?.name ?? assignableRoles[0]?.name ?? "";
+  const defaultRole = roles.find((r) => r.name === "ENFORCER")?.name ?? roles[0]?.name ?? "";
   const [open, setOpen] = React.useState(false);
   const [username, setUsername] = React.useState("");
   const [password, setPassword] = React.useState("");
   const [role, setRole] = React.useState(defaultRole);
   const [officerId, setOfficerId] = React.useState("");
   const [submitting, setSubmitting] = React.useState(false);
-  const selectedRole = assignableRoles.find((r) => r.name === role);
+  const selectedRole = roles.find((r) => r.name === role);
   const showOfficer = hasPermission(selectedRole?.permissions, "tickets:create");
   function reset() {
     setUsername("");
@@ -238,7 +237,7 @@ function NewAccountDialog({
               value: role,
               onChange: (e) => setRole(e.target.value),
               className: fieldClass,
-              children: assignableRoles.map((r) => /* @__PURE__ */ jsx("option", { value: r.name, children: r.label }, r.name))
+              children: roles.map((r) => /* @__PURE__ */ jsx("option", { value: r.name, children: r.label }, r.name))
             }
           )
         ] }),
@@ -358,8 +357,6 @@ function EditAccountDialog({
   const [role, setRole] = React.useState(user.role);
   const [officerId, setOfficerId] = React.useState(user.officerId ?? "");
   const [submitting, setSubmitting] = React.useState(false);
-  const isSuperAdmin = user.role === "SUPER_ADMIN";
-  const assignableRoles = roles.filter((r) => r.name !== "SUPER_ADMIN");
   const selectedRole = roles.find((r) => r.name === role);
   const showOfficer = hasPermission(selectedRole?.permissions, "tickets:create");
   async function submit(e) {
@@ -433,8 +430,7 @@ function EditAccountDialog({
                   value: role,
                   onChange: (e) => setRole(e.target.value),
                   className: fieldClass,
-                  disabled: isSuperAdmin,
-                  children: isSuperAdmin ? /* @__PURE__ */ jsx("option", { value: user.role, children: user.roleLabel ?? user.role }) : assignableRoles.map((r) => /* @__PURE__ */ jsx("option", { value: r.name, children: r.label }, r.name))
+                  children: roles.map((r) => /* @__PURE__ */ jsx("option", { value: r.name, children: r.label }, r.name))
                 }
               )
             ] }),

package/dist/ui-components-admin/admin-nav.js

@@ -1,8 +1,8 @@
 "use client";
-import { DropdownMenu, DropdownMenuTrigger, DropdownMenuContent, DropdownMenuItem, DropdownMenuSeparator } from '../chunk-V7VQVDWS.js';
 import { Sheet, SheetTrigger, SheetContent, SheetHeader, SheetTitle, SheetDescription, SheetFooter } from '../chunk-3YKVH4Y7.js';
-import { Dialog, DialogContent, DialogHeader, DialogTitle, DialogDescription, DialogFooter, DialogClose } from '../chunk-M35R6JLA.js';
+import { DropdownMenu, DropdownMenuTrigger, DropdownMenuContent, DropdownMenuItem, DropdownMenuSeparator } from '../chunk-V7VQVDWS.js';
 import { Label } from '../chunk-XQTVSNHC.js';
+import { Dialog, DialogContent, DialogHeader, DialogTitle, DialogDescription, DialogFooter, DialogClose } from '../chunk-M35R6JLA.js';
 import { Input } from '../chunk-K3KIBHJF.js';
 import { Button } from '../chunk-I4WDVYHX.js';
 import { useCopy } from '../chunk-TJSNVTVB.js';

package/dist/ui-components-admin/issuance-form.js

@@ -12,8 +12,8 @@ import '../chunk-BVI5XDDA.js';
 import { Card, CardHeader, CardTitle, CardContent, CardDescription } from '../chunk-SETIN6XP.js';
 import '../chunk-OWCGEEAZ.js';
 import '../chunk-55FQP2DO.js';
-import { Dialog, DialogContent, DialogHeader, DialogTitle, DialogDescription, DialogFooter, DialogClose } from '../chunk-M35R6JLA.js';
 import { Label } from '../chunk-XQTVSNHC.js';
+import { Dialog, DialogContent, DialogHeader, DialogTitle, DialogDescription, DialogFooter, DialogClose } from '../chunk-M35R6JLA.js';
 import { Input } from '../chunk-K3KIBHJF.js';
 import { Button } from '../chunk-I4WDVYHX.js';
 import { useFormatters, useOvrConfig } from '../chunk-TJSNVTVB.js';

package/dist/ui-components-admin/officers-manager.js

@@ -2,8 +2,8 @@
 import { Card, CardContent } from '../chunk-SETIN6XP.js';
 import { usePagination, Pagination } from '../chunk-6YFZLXFP.js';
 import { Table, TableHeader, TableRow, TableHead, TableBody, TableCell } from '../chunk-OWCGEEAZ.js';
-import { Dialog, DialogTrigger, DialogContent, DialogHeader, DialogTitle, DialogDescription, DialogFooter, DialogClose } from '../chunk-M35R6JLA.js';
 import { Label } from '../chunk-XQTVSNHC.js';
+import { Dialog, DialogTrigger, DialogContent, DialogHeader, DialogTitle, DialogDescription, DialogFooter, DialogClose } from '../chunk-M35R6JLA.js';
 import { Input } from '../chunk-K3KIBHJF.js';
 import { Button } from '../chunk-I4WDVYHX.js';
 import { useCopy } from '../chunk-TJSNVTVB.js';

package/dist/ui-components-admin/roles-manager.js

@@ -2,8 +2,8 @@
 import { Checkbox } from '../chunk-BBQBKQA4.js';
 import { Card, CardContent } from '../chunk-SETIN6XP.js';
 import { Badge } from '../chunk-55FQP2DO.js';
-import { Dialog, DialogTrigger, DialogContent, DialogHeader, DialogTitle, DialogDescription, DialogFooter, DialogClose } from '../chunk-M35R6JLA.js';
 import { Label } from '../chunk-XQTVSNHC.js';
+import { Dialog, DialogTrigger, DialogContent, DialogHeader, DialogTitle, DialogDescription, DialogFooter, DialogClose } from '../chunk-M35R6JLA.js';
 import { Input } from '../chunk-K3KIBHJF.js';
 import { Button } from '../chunk-I4WDVYHX.js';
 import { useCopy } from '../chunk-TJSNVTVB.js';

package/dist/ui-components-admin/violations-manager.js

@@ -5,8 +5,8 @@ import { Card, CardContent } from '../chunk-SETIN6XP.js';
 import { usePagination, Pagination } from '../chunk-6YFZLXFP.js';
 import { Table, TableHeader, TableRow, TableHead, TableBody, TableCell } from '../chunk-OWCGEEAZ.js';
 import { Badge } from '../chunk-55FQP2DO.js';
-import { Dialog, DialogTrigger, DialogContent, DialogHeader, DialogTitle, DialogDescription, DialogFooter, DialogClose } from '../chunk-M35R6JLA.js';
 import { Label } from '../chunk-XQTVSNHC.js';
+import { Dialog, DialogTrigger, DialogContent, DialogHeader, DialogTitle, DialogDescription, DialogFooter, DialogClose } from '../chunk-M35R6JLA.js';
 import { Input } from '../chunk-K3KIBHJF.js';
 import { Button } from '../chunk-I4WDVYHX.js';
 import { useCopy } from '../chunk-TJSNVTVB.js';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gelabs/ovr",
-  "version": "0.4.2",
+  "version": "0.4.3",
   "description": "The @gelabs/ovr SDK — one self-contained package over the OVR (Online Ordinance Violation Receipt) platform. A standalone per-LGU app installs ONLY this package and imports from @gelabs/ovr/{config,core,data,runtime,auth,ui,...}; the seven @gelabs/ovr-* implementation packages are bundled in at build time.",
   "type": "module",
   "license": "UNLICENSED",
@@ -158,14 +158,14 @@
     "react-dom": "19.2.4",
     "tsup": "^8.4.0",
     "typescript": "^5",
-    "@gelabs/ovr-auth": "0.0.0",
-    "@gelabs/ovr-data": "0.0.0",
     "@gelabs/ovr-types": "0.0.0",
-    "@gelabs/ovr-offline": "0.0.0",
+    "@gelabs/ovr-config": "0.0.0",
+    "@gelabs/ovr-data": "0.0.0",
     "@gelabs/ovr-core": "0.0.0",
+    "@gelabs/ovr-runtime": "0.0.0",
+    "@gelabs/ovr-auth": "0.0.0",
     "@gelabs/ovr-ui": "0.0.0",
-    "@gelabs/ovr-config": "0.0.0",
-    "@gelabs/ovr-runtime": "0.0.0"
+    "@gelabs/ovr-offline": "0.0.0"
   },
   "scripts": {
     "build": "tsup && node scripts/copy-assets.mjs",