@happyvertical/smrt-cli 0.51.14 → 0.51.16

package/AGENTS.md

@@ -18,6 +18,7 @@ smrt db:migrate --apply-unblocked / --null-orphans # agents/db-migrate-partial-a
 smrt db:migrate-uuid         # Convert schema-declared UUID text columns after data remap
 smrt db:migrate-int8
 smrt db:migrate-null-equal-indexes # ../core/agents/null-equal-indexes.md
+smrt db:materialize-tenant-hierarchy [--dry-run] # smrt-users tenant hierarchy_path backfill (#3036)
 smrt db:drop-framework-base-tables # One-time drop of the five #2644-orphaned framework-base tables
 smrt db:drop-framework-base-tables --dry-run # Print the drop plan without executing
 smrt db:diff                 # Show schema differences without generating migration files

package/dist/ApiKey-BZmbOTnL-Dz-PO2sa.js

@@ -0,0 +1,157 @@
+import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
+import { n as __exportAll$1 } from "./NostrIdentity-n70E0vck-CZwoR7Rs.js";
+import { SmrtObject, field, foreignKey, smrt } from "@happyvertical/smrt-core";
+import { createHash, randomBytes } from "node:crypto";
+//#region ../profiles/dist/chunks/ApiKey-BZmbOTnL.js
+var ApiKey_BZmbOTnL_exports = /* @__PURE__ */ __exportAll({
+	n: () => ApiKey_exports,
+	t: () => ApiKey
+});
+var ApiKey_exports = /* @__PURE__ */ __exportAll$1({ ApiKey: () => ApiKey });
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __decorateClass = (decorators, target, key, kind) => {
+	var result = kind > 1 ? void 0 : kind ? __getOwnPropDesc(target, key) : target;
+	for (var i = decorators.length - 1, decorator; i >= 0; i--) if (decorator = decorators[i]) result = (kind ? decorator(target, key, result) : decorator(result)) || result;
+	if (kind && result) __defProp(target, key, result);
+	return result;
+};
+var ApiKey = class extends SmrtObject {
+	profileId;
+	keyHash = "";
+	/**
+	* First 8 characters of the key for identification (e.g., "sk_live_a1b2...")
+	*/
+	keyPrefix = "";
+	/**
+	* Human-readable name for the key (e.g., "CI Bot", "Local CLI")
+	*/
+	name = "";
+	/**
+	* Scopes/permissions for this key
+	*/
+	scopes = [];
+	/**
+	* Last time this key was used
+	*/
+	lastUsedAt = null;
+	/**
+	* When this key expires (null = never)
+	*/
+	expiresAt = null;
+	/**
+	* When this key was revoked (null = active)
+	*/
+	revokedAt = null;
+	constructor(options = {}) {
+		super(options);
+		if (options.profileId) this.profileId = options.profileId;
+		if (options.name) this.name = options.name;
+		if (options.scopes) this.scopes = options.scopes;
+		if (options.expiresAt !== void 0) this.expiresAt = options.expiresAt;
+	}
+	/**
+	* Get the linked Profile
+	*/
+	async getProfile() {
+		return await this.getRelated("profileId");
+	}
+	/**
+	* Check if this key is valid (not expired, not revoked)
+	*/
+	isValid() {
+		if (this.revokedAt) return false;
+		if (this.expiresAt && this.expiresAt < /* @__PURE__ */ new Date()) return false;
+		return true;
+	}
+	/**
+	* Check if this key has a specific scope
+	*/
+	hasScope(scope) {
+		return this.scopes.includes(scope) || this.scopes.includes("*");
+	}
+	/**
+	* Revoke this key
+	*/
+	async revoke() {
+		this.revokedAt = /* @__PURE__ */ new Date();
+		await this.save();
+	}
+	/**
+	* Record usage of this key
+	*/
+	async recordUsage() {
+		for (let attempt = 0; attempt < 4; attempt += 1) {
+			if (this.isPersisted) await this.loadFromId();
+			if (!this.isValid()) return;
+			this.lastUsedAt = /* @__PURE__ */ new Date();
+			try {
+				await this.save();
+				return;
+			} catch (error) {
+				if (attempt === 3 || !(error instanceof Error && "code" in error && error.code === "RUNTIME_REVISION_CONFLICT")) throw error;
+			}
+		}
+	}
+	/**
+	* Hash an API key
+	*/
+	static hashKey(key) {
+		return createHash("sha256").update(key).digest("hex");
+	}
+	/**
+	* Generate a new API key for a profile
+	*/
+	static async generate(profile, options) {
+		const key = `sk_live_${randomBytes(32).toString("hex")}`;
+		const keyPrefix = key.substring(0, 16);
+		const keyHash = ApiKey.hashKey(key);
+		const apiKey = new ApiKey({
+			db: options.db || profile.options?.db,
+			profileId: profile.id,
+			name: options.name,
+			scopes: options.scopes || ["*"],
+			expiresAt: options.expiresAt ?? null
+		});
+		apiKey.keyHash = keyHash;
+		apiKey.keyPrefix = keyPrefix;
+		await apiKey.initialize();
+		await apiKey.save();
+		return {
+			key,
+			apiKey
+		};
+	}
+	/**
+	* Verify an API key and return the ApiKey record if valid
+	*/
+	static async verify(key, options = {}) {
+		const keyHash = ApiKey.hashKey(key);
+		const { ApiKeyCollection } = await import("./ApiKeyCollection-Bfb_nw81-Dks_0546.js").then((n) => n.n);
+		const apiKey = await (await ApiKeyCollection.create(options)).findOne({ where: { keyHash } });
+		if (!apiKey) return null;
+		if (!apiKey.isValid()) return null;
+		await apiKey.recordUsage();
+		if (!apiKey.isValid()) return null;
+		return apiKey;
+	}
+};
+__decorateClass([foreignKey("Profile", { required: true })], ApiKey.prototype, "profileId", 2);
+__decorateClass([field({ indexed: true })], ApiKey.prototype, "keyHash", 2);
+ApiKey = __decorateClass([smrt({
+	tableName: "api_keys",
+	sensitive: true,
+	api: { include: ["list", "get"] },
+	mcp: { include: ["list", "get"] },
+	cli: {
+		include: [
+			"list",
+			"get",
+			"create",
+			"revoke"
+		],
+		skipApiCheck: true
+	}
+})], ApiKey);
+//#endregion
+export { ApiKey_BZmbOTnL_exports as n, ApiKey as t };

package/dist/ApiKeyCollection-Bfb_nw81-Dks_0546.js

@@ -0,0 +1,2 @@
+import { j as ApiKeyCollection_exports } from "./dist-BIA7A6wF.js";
+export { ApiKeyCollection_exports as n };

package/dist/AuditLogCollection-B1YonCAP-Db9tLDtf.js

@@ -0,0 +1,2 @@
+import { k as AuditLogCollection_exports } from "./dist-BIA7A6wF.js";
+export { AuditLogCollection_exports as n };