@happyvertical/smrt-cli 0.53.3 → 0.53.5

package/dist/resolveIdentity-B-PK6RwU-C9ogf8YG.js

@@ -0,0 +1,269 @@
+import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
+import { l as withSystemContext } from "./dist-C87Ib9Vx.js";
+import { n as __exportAll$1, t as NostrIdentity, u as verifyAuthEvent } from "./NostrIdentity-n70E0vck-Di3_eNCq.js";
+import { t as ApiKey } from "./ApiKey-BZmbOTnL-BbZupUZ3.js";
+import { t as OidcIdentity } from "./OidcIdentity-Cb1bxreM-LXmC7uAf.js";
+import { c as coordinateOidcProvisioning, l as isOidcProvisioningRaceConflict, u as normalizeIdentityEmail } from "./ProfileCollection-DuJT7Mum-nXbHrPpX.js";
+import { a as createOidcProvisioningPerson, o as insertOidcProvisioningIdentity } from "./oidcProvisioningPrimitives-D9OYu5-F-T9KkkDCd.js";
+import { resolveDatabase } from "@happyvertical/smrt-core";
+//#region ../profiles/dist/chunks/resolveIdentity-B-PK6RwU.js
+var resolveIdentity_B_PK6RwU_exports = /* @__PURE__ */ __exportAll({
+	i: () => resolveIdentity_exports,
+	n: () => createProfileFromOidc,
+	r: () => resolveIdentity,
+	t: () => createProfileFromNostr
+});
+var resolveIdentity_exports = /* @__PURE__ */ __exportAll$1({
+	createProfileFromNostr: () => createProfileFromNostr,
+	createProfileFromOidc: () => createProfileFromOidc,
+	resolveIdentity: () => resolveIdentity,
+	reuseExistingOidcIdentityForProfile: () => reuseExistingOidcIdentityForProfile
+});
+async function resolveIdentity(context) {
+	const options = { db: context.db };
+	if (context.apiKey) {
+		const apiKey = await ApiKey.verify(context.apiKey, options);
+		if (apiKey) {
+			const profile = await apiKey.getProfile();
+			if (profile) return {
+				profile,
+				source: "api_key",
+				apiKey
+			};
+		}
+	}
+	if (context.oidcSession?.sub && context.oidcSession?.iss) {
+		const oidcIdentity = await OidcIdentity.findBySubject(context.oidcSession.iss, context.oidcSession.sub, options);
+		if (oidcIdentity) {
+			await oidcIdentity.recordUsage();
+			const profile = await oidcIdentity.getProfile();
+			if (profile) return {
+				profile,
+				source: "oidc",
+				oidcIdentity
+			};
+		}
+	}
+	if (context.nostrAuth?.event && context.nostrAuth?.challenge) {
+		const { event, challenge } = context.nostrAuth;
+		if (verifyAuthEvent(event, challenge).valid) {
+			const nostrIdentity = await NostrIdentity.findByPubkey(event.pubkey, options);
+			if (nostrIdentity) {
+				await nostrIdentity.recordUsage();
+				const profile = await nostrIdentity.getProfile();
+				if (profile) return {
+					profile,
+					source: "nostr",
+					nostrIdentity
+				};
+			}
+		}
+	}
+	if (context.actor) {
+		const profile = await findProfileByExternalId("github", context.actor, options);
+		if (profile) return {
+			profile,
+			source: "actor"
+		};
+	}
+	return {
+		profile: null,
+		source: "none"
+	};
+}
+async function findProfileByExternalId(provider, externalId, options) {
+	const { OidcIdentityCollection } = await import("./OidcIdentityCollection-TV8VdK69-Cv1ZTeuk.js").then((n) => n.r).then((n) => n.r);
+	const identities = await (await OidcIdentityCollection.create(options)).findByProvider(provider);
+	for (const identity of identities) if (identity.subject === externalId || identity.email?.includes(externalId)) {
+		const profile = await identity.getProfile();
+		if (profile) return profile;
+	}
+	const { ProfileCollection } = await import("./ProfileCollection-DuJT7Mum-nXbHrPpX.js").then((n) => n.o).then((n) => n.r);
+	const profiles = await (await ProfileCollection.create(options)).list({
+		where: { email: `${externalId}@users.noreply.github.com` },
+		limit: 1
+	});
+	if (profiles.length > 0) return profiles[0];
+	return null;
+}
+async function createProfileFromOidc(claims, provider, options) {
+	return coordinateProfileOidcProvisioning(claims, provider, options);
+}
+async function reuseExistingOidcIdentityForProfile(profileId, claims, provider, options) {
+	const normalizedClaims = normalizeOidcProfileClaims(claims);
+	return coordinateOidcProvisioning({
+		db: await resolveOidcProfileDatabase(options.db),
+		lockKeys: [`identity:${OidcIdentity.buildIdentityKey(normalizedClaims.iss, normalizedClaims.sub)}`],
+		isRaceConflict: isOidcProvisioningRaceConflict,
+		createTransactionError: (message, cause) => new Error(message, cause === void 0 ? void 0 : { cause }),
+		createConcurrencyError: (cause) => new Error("Concurrent exact OIDC identity reuse did not converge.", cause === void 0 ? void 0 : { cause }),
+		rebindRootResult: rebindOidcProfileResult,
+		provision: (tx) => withSystemContext(async () => {
+			const { OidcIdentityCollection } = await import("./OidcIdentityCollection-TV8VdK69-Cv1ZTeuk.js").then((n) => n.r).then((n) => n.r);
+			const identity = await (await OidcIdentityCollection.create({ db: tx })).findBySubject(normalizedClaims.iss, normalizedClaims.sub);
+			if (!identity) throw new Error("OidcIdentity.findOrCreate() no longer creates authentication links; use UserCollection.getOrCreateFromOidc() or createProfileFromOidc().");
+			if (identity.profileId !== profileId) throw new Error(`OIDC identity ${normalizedClaims.iss} subject ${normalizedClaims.sub} belongs to a different Profile.`);
+			const profile = await identity.getProfile();
+			if (!profile) throw new Error("The exact OIDC identity has no linked Profile.");
+			identity.provider = provider;
+			if (normalizedClaims.email) identity.email = normalizedClaims.email;
+			identity.lastUsedAt = /* @__PURE__ */ new Date();
+			await identity.save();
+			return {
+				profile,
+				oidcIdentity: identity,
+				created: false
+			};
+		})
+	});
+}
+async function coordinateProfileOidcProvisioning(claims, provider, options) {
+	const normalizedClaims = normalizeOidcProfileClaims(claims);
+	return coordinateOidcProvisioning({
+		db: await resolveOidcProfileDatabase(options.db),
+		lockKeys: [`identity:${OidcIdentity.buildIdentityKey(normalizedClaims.iss, normalizedClaims.sub)}`, ...normalizedClaims.email ? [`email:${normalizedClaims.email}`] : []],
+		isRaceConflict: isOidcProvisioningRaceConflict,
+		createTransactionError: (message, cause) => new Error(message, cause === void 0 ? void 0 : { cause }),
+		createConcurrencyError: (cause) => new Error("Concurrent OIDC Profile provisioning did not converge.", cause === void 0 ? void 0 : { cause }),
+		rebindRootResult: rebindOidcProfileResult,
+		provision: (tx) => withSystemContext(() => provisionOidcProfile(normalizedClaims, provider, {
+			...options,
+			db: tx
+		}))
+	});
+}
+async function provisionOidcProfile(claims, provider, options) {
+	const { OidcIdentityCollection } = await import("./OidcIdentityCollection-TV8VdK69-Cv1ZTeuk.js").then((n) => n.r).then((n) => n.r);
+	const existingIdentity = await (await OidcIdentityCollection.create(options)).findBySubject(claims.iss, claims.sub);
+	if (existingIdentity) {
+		const profile2 = await existingIdentity.getProfile();
+		if (!profile2) throw new Error("The exact OIDC identity has no linked Profile.");
+		profile2.id = requireOidcProfileId(existingIdentity.profileId);
+		if (claims.email) existingIdentity.email = claims.email;
+		existingIdentity.lastUsedAt = /* @__PURE__ */ new Date();
+		await existingIdentity.save();
+		return {
+			profile: profile2,
+			oidcIdentity: existingIdentity,
+			created: false
+		};
+	}
+	const { ProfileCollection } = await import("./ProfileCollection-DuJT7Mum-nXbHrPpX.js").then((n) => n.o).then((n) => n.r);
+	const profileCollection = await ProfileCollection.create(options);
+	if (claims.email) {
+		if (await profileCollection.findUniqueGlobalPersonByEmail(claims.email)) {
+			if (claims.email_verified !== true) throw new Error(`OIDC email ${claims.email} is not verified and already belongs to a Profile.`);
+			throw new Error(`OIDC email ${claims.email} already belongs to a Profile; createProfileFromOidc() cannot prove that Profile is unowned. Use UserCollection.getOrCreateFromOidc() for owner-aware linking.`);
+		}
+	}
+	const profile = await createOidcProvisioningPerson(options.db, {
+		email: claims.email ?? "",
+		name: claims.name,
+		preferredUsername: claims.preferred_username,
+		subject: claims.sub
+	});
+	return {
+		profile,
+		oidcIdentity: await insertOidcProvisioningIdentity(options.db, {
+			email: claims.email,
+			issuer: claims.iss,
+			profileId: requireOidcProfileId(profile.id),
+			provider,
+			subject: claims.sub
+		}),
+		created: true
+	};
+}
+async function rebindOidcProfileResult(result, rootDb) {
+	const { OidcIdentityCollection } = await import("./OidcIdentityCollection-TV8VdK69-Cv1ZTeuk.js").then((n) => n.r).then((n) => n.r);
+	const { ProfileCollection } = await import("./ProfileCollection-DuJT7Mum-nXbHrPpX.js").then((n) => n.o).then((n) => n.r);
+	const profileId = requireOidcProfileId(result.profile.id);
+	const identityId = requireOidcProfileId(result.oidcIdentity.id);
+	const [profile, oidcIdentity] = await withSystemContext(async () => {
+		const profiles = await ProfileCollection.create({ db: rootDb });
+		const identities = await OidcIdentityCollection.create({ db: rootDb });
+		return [await profiles.get({ id: profileId }), await identities.get({ id: identityId })];
+	});
+	if (!profile || !oidcIdentity) throw new Error("Committed OIDC Profile provisioning result was not found.");
+	profile.id = profileId;
+	oidcIdentity.id = identityId;
+	oidcIdentity.profileId = profileId;
+	return {
+		...result,
+		profile,
+		oidcIdentity
+	};
+}
+function normalizeOidcProfileClaims(claims) {
+	const sub = claims?.sub;
+	const iss = claims?.iss;
+	if (typeof sub !== "string" || sub.trim().length === 0 || typeof iss !== "string" || iss.trim().length === 0) throw new Error("Invalid OIDC claims: both \"sub\" and \"iss\" must be non-empty strings.");
+	const suppliedEmail = claims.email;
+	return {
+		...claims,
+		sub,
+		iss,
+		email: typeof suppliedEmail === "string" && suppliedEmail.trim() ? normalizeIdentityEmail(suppliedEmail) : void 0
+	};
+}
+function requireOidcProfileId(value) {
+	if (typeof value !== "string" || !value) throw new Error("OIDC Profile provisioning did not produce an id.");
+	return value;
+}
+async function resolveOidcProfileDatabase(db) {
+	if (!db) throw new Error("OIDC Profile provisioning requires an initialized database.");
+	return resolveDatabase(db);
+}
+async function createProfileFromNostr(email, nostrData, options) {
+	const normalizedEmail = normalizeIdentityEmail(email);
+	const existingIdentity = await NostrIdentity.findByEmail(normalizedEmail, options);
+	if (existingIdentity) {
+		const profile2 = await existingIdentity.getProfile();
+		if (profile2) return {
+			profile: profile2,
+			nostrIdentity: existingIdentity,
+			created: false
+		};
+	}
+	const { Person } = await import("./oidcProvisioningPrimitives-D9OYu5-F-T9KkkDCd.js").then((n) => n.s).then((n) => n.o);
+	const { ProfileTypeCollection } = await import("./oidcProvisioningPrimitives-D9OYu5-F-T9KkkDCd.js").then((n) => n.s).then((n) => n.c);
+	let personType = await (await ProfileTypeCollection.create(options)).getBySlug("person");
+	if (!personType) {
+		const { ProfileType } = await import("./ProfileCollection-DuJT7Mum-nXbHrPpX.js").then((n) => n.o).then((n) => n.h);
+		personType = new ProfileType({
+			...options,
+			slug: "person",
+			name: "Person",
+			description: "Individual person profile"
+		});
+		await personType.initialize();
+		await personType.save();
+	}
+	const profile = new Person({
+		...options,
+		typeId: personType.id,
+		email: normalizedEmail,
+		name: normalizedEmail.split("@")[0]
+	});
+	await profile.initialize();
+	await profile.save();
+	const nostrIdentity = new NostrIdentity({
+		...options,
+		profileId: profile.id,
+		pubkey: nostrData.pubkey,
+		encryptedPrivkey: nostrData.encryptedPrivkey,
+		encryptionIv: nostrData.encryptionIv,
+		encryptionTag: nostrData.encryptionTag,
+		email: normalizedEmail,
+		nip05Username: nostrData.nip05Username?.toLowerCase() || normalizedEmail.split("@")[0]
+	});
+	await nostrIdentity.initialize();
+	await nostrIdentity.save();
+	return {
+		profile,
+		nostrIdentity,
+		created: true
+	};
+}
+//#endregion
+export { resolveIdentity_B_PK6RwU_exports as i, createProfileFromOidc as n, resolveIdentity as r, createProfileFromNostr as t };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@happyvertical/smrt-cli",
-  "version": "0.53.3",
+  "version": "0.53.5",
   "description": "Developer CLI for SMRT framework - introspection, testing, and project management",
   "type": "module",
   "main": "./dist/index.js",
@@ -22,22 +22,27 @@
     ".": {
       "types": "./dist/index.d.ts",
       "import": "./dist/index.js"
+    },
+    "./app": {
+      "types": "./dist/app.d.ts",
+      "import": "./dist/app.js"
     }
   },
   "dependencies": {
-    "@happyvertical/ai": "^0.98.0",
-    "@happyvertical/files": "^0.98.0",
-    "@happyvertical/logger": "^0.98.0",
-    "@happyvertical/smrt-agents": "0.53.3",
-    "@happyvertical/smrt-config": "0.53.3",
-    "@happyvertical/smrt-core": "0.53.3",
-    "@happyvertical/smrt-dev-mcp": "0.53.3",
-    "@happyvertical/smrt-ledgers": "0.53.3",
-    "@happyvertical/smrt-playground": "0.53.3",
-    "@happyvertical/smrt-types": "0.53.3",
-    "@happyvertical/smrt-users": "0.53.3",
-    "@happyvertical/sql": "^0.98.0",
-    "@happyvertical/utils": "^0.98.0",
+    "@happyvertical/ai": "^0.100.3",
+    "@happyvertical/files": "^0.100.3",
+    "@happyvertical/logger": "^0.100.3",
+    "@happyvertical/smrt-agents": "0.53.5",
+    "@happyvertical/smrt-app-runtime": "0.53.5",
+    "@happyvertical/smrt-config": "0.53.5",
+    "@happyvertical/smrt-core": "0.53.5",
+    "@happyvertical/smrt-dev-mcp": "0.53.5",
+    "@happyvertical/smrt-ledgers": "0.53.5",
+    "@happyvertical/smrt-playground": "0.53.5",
+    "@happyvertical/smrt-types": "0.53.5",
+    "@happyvertical/smrt-users": "0.53.5",
+    "@happyvertical/sql": "^0.100.3",
+    "@happyvertical/utils": "^0.100.3",
     "acorn": "^8.18.0",
     "fast-glob": "3.3.3",
     "tar": "^7.5.22",

package/dist/ApiKeyCollection-Bfb_nw81-DR5XF_SZ.js

@@ -1,2 +0,0 @@
-import { L as ApiKeyCollection_exports } from "./dist-CL9KGm1j.js";
-export { ApiKeyCollection_exports as n };

package/dist/AuditLogCollection-B1YonCAP-PbzALncL.js

@@ -1,2 +0,0 @@
-import { F as AuditLogCollection_exports } from "./dist-CL9KGm1j.js";
-export { AuditLogCollection_exports as n };

package/dist/NostrIdentityCollection-Ca74dkaL-C2r-uDlC.js

@@ -1,2 +0,0 @@
-import { M as NostrIdentityCollection_exports } from "./dist-CL9KGm1j.js";
-export { NostrIdentityCollection_exports as n };

package/dist/OidcIdentityCollection-TV8VdK69-2fZROnih.js

@@ -1,2 +0,0 @@
-import { A as OidcIdentityCollection_exports } from "./dist-CL9KGm1j.js";
-export { OidcIdentityCollection_exports as r };

package/dist/ProfileAssetCollection-B9hacUJa-D33sifgF.js

@@ -1,2 +0,0 @@
-import { D as ProfileAssetCollection_exports } from "./dist-CL9KGm1j.js";
-export { ProfileAssetCollection_exports as n };

package/dist/ProfileLinkCollection-4uNURz32-CHDTinax.js

@@ -1,2 +0,0 @@
-import { S as ProfileLinkCollection_exports } from "./dist-CL9KGm1j.js";
-export { ProfileLinkCollection_exports as r };

package/dist/ProfileMetadataCollection-DQhbfEfa-BQTogfVX.js

@@ -1,2 +0,0 @@
-import { v as ProfileMetadataCollection_exports } from "./dist-CL9KGm1j.js";
-export { ProfileMetadataCollection_exports as n };

package/dist/ProfileMetafieldCollection-CoBuM_5G-BXtoIP02.js

@@ -1,2 +0,0 @@
-import { h as ProfileMetafieldCollection_exports } from "./dist-CL9KGm1j.js";
-export { ProfileMetafieldCollection_exports as n };

package/dist/ProfileRelationshipCollection-DUVgaIqf-CNMliUF3.js

@@ -1,2 +0,0 @@
-import { f as ProfileRelationshipCollection_exports } from "./dist-CL9KGm1j.js";
-export { ProfileRelationshipCollection_exports as n };

package/dist/ProfileRelationshipTermCollection-DtA9OM23-DPOMtMr7.js

@@ -1,2 +0,0 @@
-import { l as ProfileRelationshipTermCollection_exports } from "./dist-CL9KGm1j.js";
-export { ProfileRelationshipTermCollection_exports as n };

package/dist/ProfileRelationshipTypeCollection-BdXwd7Kf-Co3PdH01.js

@@ -1,2 +0,0 @@
-import { o as ProfileRelationshipTypeCollection_exports } from "./dist-CL9KGm1j.js";
-export { ProfileRelationshipTypeCollection_exports as n };

package/dist/resolveIdentity-B-PK6RwU-B306Ch1I.js

@@ -1,2 +0,0 @@
-import { i as resolveIdentity_exports } from "./dist-CL9KGm1j.js";
-export { resolveIdentity_exports as i };