@harborclient/team-hub 0.4.0 → 0.4.1

package/dist/cli.js

@@ -6865,7 +6865,7 @@ function denyUnlessAllowed(reply, allowed) {
 }
 
 // src/server/routes/schemas/admin.ts
-import { z as z8 } from "zod/v4";
+import { z as z9 } from "zod/v4";
 
 // src/server/routes/schemas/auth.ts
 import { z as z6 } from "zod/v4";
@@ -6932,283 +6932,154 @@ var llmUsageSummaryResponseSchema = z7.object({
   limit: z7.number().int().positive().nullable()
 });
 
-// src/server/routes/schemas/admin.ts
-var adminResourceOptionSchema = z8.object({
-  id: z8.string(),
-  name: z8.string(),
-  deletionLocked: z8.boolean()
-});
-var adminEntityConfigSchema = z8.object({
+// src/server/routes/schemas/entities.ts
+import { z as z8 } from "zod/v4";
+var collectionRecordSchema = z8.object({
   id: z8.string(),
   name: z8.string(),
+  variables: z8.array(variableSchema),
+  headers: z8.array(keyValueSchema),
+  auth: authConfigSchema,
+  preRequestScript: z8.string(),
+  postRequestScript: z8.string(),
+  createdAt: timestampSchema,
+  updatedAt: timestampSchema,
+  createdByUserId: z8.string().nullable(),
+  updatedByUserId: z8.string().nullable(),
   deletionLocked: z8.boolean()
 });
-var updateAdminCollectionBodySchema = z8.object({
-  deletionLocked: z8.boolean()
-});
-var updateAdminEnvironmentBodySchema = z8.object({
-  deletionLocked: z8.boolean()
-});
-var updateAdminSnippetBodySchema = z8.object({
-  deletionLocked: z8.boolean()
-});
-var listAdminCollectionsResponseSchema = z8.object({
-  collections: z8.array(adminResourceOptionSchema)
-});
-var listAdminEnvironmentsResponseSchema = z8.object({
-  environments: z8.array(adminResourceOptionSchema)
-});
-var listAdminSnippetsResponseSchema = z8.object({
-  snippets: z8.array(adminResourceOptionSchema)
-});
-var listAdminLlmModelsResponseSchema = listLlmModelsResponseSchema;
-var hubUserRecordSchema = z8.object({
+var environmentRecordSchema = z8.object({
   id: z8.string(),
   name: z8.string(),
-  role: userRoleSchema,
-  collectionAccess: z8.array(z8.string()),
-  environmentAccess: z8.array(z8.string()),
-  snippetAccess: z8.array(z8.string()),
-  llmAccess: z8.boolean(),
-  llmModels: z8.array(z8.string()),
-  llmMonthlyTokenLimit: z8.number().int().nonnegative().nullable(),
+  variables: z8.array(variableSchema),
   createdAt: timestampSchema,
-  updatedAt: timestampSchema
-});
-var adminUserListEntrySchema = hubUserRecordSchema.extend({
-  warnings: z8.array(z8.string())
-});
-var listAdminUsersResponseSchema = z8.object({
-  users: z8.array(adminUserListEntrySchema)
-});
-var updateAdminUserBodySchema = z8.object({
-  name: z8.string().trim().min(1).optional(),
-  role: userRoleSchema.optional(),
-  collectionAccess: z8.array(z8.string()).optional(),
-  environmentAccess: z8.array(z8.string()).optional(),
-  snippetAccess: z8.array(z8.string()).optional(),
-  llmAccess: z8.boolean().optional(),
-  llmModels: z8.array(z8.string()).optional(),
-  llmMonthlyTokenLimit: z8.number().int().nonnegative().nullable().optional()
-});
-var createAdminUserBodySchema = z8.object({
-  name: z8.string().trim().min(1),
-  role: userRoleSchema,
-  collectionAccess: z8.array(z8.string()).optional(),
-  environmentAccess: z8.array(z8.string()).optional(),
-  snippetAccess: z8.array(z8.string()).optional(),
-  llmAccess: z8.boolean().optional(),
-  llmModels: z8.array(z8.string()).optional(),
-  llmMonthlyTokenLimit: z8.number().int().nonnegative().nullable().optional()
+  updatedAt: timestampSchema,
+  createdByUserId: z8.string().nullable(),
+  updatedByUserId: z8.string().nullable(),
+  deletionLocked: z8.boolean()
 });
-var hubApiTokenRecordSchema = z8.object({
+var snippetScopeSchema = z8.enum(["pre-request", "post-request", "any"]);
+var snippetRecordSchema = z8.object({
   id: z8.string(),
-  userId: z8.string(),
   name: z8.string(),
-  tokenPrefix: z8.string(),
-  createdAt: timestampSchema,
-  lastUsedAt: timestampSchema.nullable(),
-  revokedAt: timestampSchema.nullable()
-});
-var createAdminUserResponseSchema = z8.object({
-  user: hubUserRecordSchema,
-  token: hubApiTokenRecordSchema,
-  secret: z8.string()
-});
-var createAdminTokenBodySchema = z8.object({
-  name: z8.string().trim().min(1)
-});
-var createdApiTokenResponseSchema = z8.object({
-  token: hubApiTokenRecordSchema,
-  secret: z8.string()
-});
-var listAdminTokensResponseSchema = z8.object({
-  tokens: z8.array(hubApiTokenRecordSchema)
-});
-var reloadConfigSectionResultSchema = z8.object({
-  section: z8.enum(["db", "redis", "llm", "plugins", "server"]),
-  status: z8.enum(["reloaded", "unchanged", "failed", "restart-required"]),
-  error: z8.string().optional()
-});
-var reloadConfigResponseSchema = z8.object({
-  sections: z8.array(reloadConfigSectionResultSchema),
-  fatalError: z8.string().optional()
-});
-function serializeHubUser(user) {
-  return {
-    id: user.id,
-    name: user.name,
-    role: user.role,
-    collectionAccess: user.collectionAccess,
-    environmentAccess: user.environmentAccess,
-    snippetAccess: user.snippetAccess,
-    llmAccess: user.llmAccess,
-    llmModels: user.llmModels,
-    llmMonthlyTokenLimit: user.llmMonthlyTokenLimit,
-    createdAt: user.createdAt.toISOString(),
-    updatedAt: user.updatedAt.toISOString()
-  };
-}
-function serializeApiToken(token) {
-  return {
-    id: token.id,
-    userId: token.userId,
-    name: token.name,
-    tokenPrefix: token.tokenPrefix,
-    createdAt: token.createdAt.toISOString(),
-    lastUsedAt: token.lastUsedAt ? token.lastUsedAt.toISOString() : null,
-    revokedAt: token.revokedAt ? token.revokedAt.toISOString() : null
-  };
-}
-
-// src/server/routes/schemas/entities.ts
-import { z as z9 } from "zod/v4";
-var collectionRecordSchema = z9.object({
-  id: z9.string(),
-  name: z9.string(),
-  variables: z9.array(variableSchema),
-  headers: z9.array(keyValueSchema),
-  auth: authConfigSchema,
-  preRequestScript: z9.string(),
-  postRequestScript: z9.string(),
-  createdAt: timestampSchema,
-  updatedAt: timestampSchema,
-  createdByUserId: z9.string().nullable(),
-  updatedByUserId: z9.string().nullable(),
-  deletionLocked: z9.boolean()
-});
-var environmentRecordSchema = z9.object({
-  id: z9.string(),
-  name: z9.string(),
-  variables: z9.array(variableSchema),
-  createdAt: timestampSchema,
-  updatedAt: timestampSchema,
-  createdByUserId: z9.string().nullable(),
-  updatedByUserId: z9.string().nullable(),
-  deletionLocked: z9.boolean()
-});
-var snippetScopeSchema = z9.enum(["pre-request", "post-request", "any"]);
-var snippetRecordSchema = z9.object({
-  id: z9.string(),
-  name: z9.string(),
-  code: z9.string(),
+  code: z8.string(),
   scope: snippetScopeSchema,
-  sortOrder: z9.number().int(),
+  sortOrder: z8.number().int(),
   createdAt: timestampSchema,
   updatedAt: timestampSchema,
-  createdByUserId: z9.string().nullable(),
-  updatedByUserId: z9.string().nullable(),
-  deletionLocked: z9.boolean()
+  createdByUserId: z8.string().nullable(),
+  updatedByUserId: z8.string().nullable(),
+  deletionLocked: z8.boolean()
 });
-var folderRecordSchema = z9.object({
-  id: z9.string(),
-  collectionId: z9.string(),
-  name: z9.string(),
-  sortOrder: z9.number().int(),
+var folderRecordSchema = z8.object({
+  id: z8.string(),
+  collectionId: z8.string(),
+  name: z8.string(),
+  sortOrder: z8.number().int(),
   createdAt: timestampSchema,
   updatedAt: timestampSchema,
-  createdByUserId: z9.string().nullable(),
-  updatedByUserId: z9.string().nullable()
+  createdByUserId: z8.string().nullable(),
+  updatedByUserId: z8.string().nullable()
 });
-var savedRequestRecordSchema = z9.object({
-  id: z9.string(),
-  collectionId: z9.string(),
-  name: z9.string(),
+var savedRequestRecordSchema = z8.object({
+  id: z8.string(),
+  collectionId: z8.string(),
+  name: z8.string(),
   method: httpMethodSchema,
-  url: z9.string(),
-  headers: z9.array(keyValueSchema),
-  params: z9.array(keyValueSchema),
+  url: z8.string(),
+  headers: z8.array(keyValueSchema),
+  params: z8.array(keyValueSchema),
   auth: authConfigSchema,
-  body: z9.string(),
+  body: z8.string(),
   bodyType: bodyTypeSchema,
-  preRequestScript: z9.string(),
-  postRequestScript: z9.string(),
-  comment: z9.string(),
-  folderId: z9.string().nullable(),
-  sortOrder: z9.number().int(),
+  preRequestScript: z8.string(),
+  postRequestScript: z8.string(),
+  comment: z8.string(),
+  folderId: z8.string().nullable(),
+  sortOrder: z8.number().int(),
   createdAt: timestampSchema,
   updatedAt: timestampSchema,
-  createdByUserId: z9.string().nullable(),
-  updatedByUserId: z9.string().nullable()
+  createdByUserId: z8.string().nullable(),
+  updatedByUserId: z8.string().nullable()
 });
-var createCollectionBodySchema = z9.object({
-  name: z9.string().trim().min(1)
+var createCollectionBodySchema = z8.object({
+  name: z8.string().trim().min(1)
 });
-var updateCollectionBodySchema = z9.object({
-  name: z9.string().trim().min(1),
-  variables: z9.array(variableSchema),
-  headers: z9.array(keyValueSchema),
-  preRequestScript: z9.string(),
-  postRequestScript: z9.string(),
+var updateCollectionBodySchema = z8.object({
+  name: z8.string().trim().min(1),
+  variables: z8.array(variableSchema),
+  headers: z8.array(keyValueSchema),
+  preRequestScript: z8.string(),
+  postRequestScript: z8.string(),
   auth: authConfigSchema
 });
-var createEnvironmentBodySchema = z9.object({
-  name: z9.string().trim().min(1)
+var createEnvironmentBodySchema = z8.object({
+  name: z8.string().trim().min(1)
 });
-var updateEnvironmentBodySchema = z9.object({
-  name: z9.string().trim().min(1),
-  variables: z9.array(variableSchema)
+var updateEnvironmentBodySchema = z8.object({
+  name: z8.string().trim().min(1),
+  variables: z8.array(variableSchema)
 });
-var createSnippetBodySchema = z9.object({
-  name: z9.string().trim().min(1),
-  code: z9.string().default(""),
+var createSnippetBodySchema = z8.object({
+  name: z8.string().trim().min(1),
+  code: z8.string().default(""),
   scope: snippetScopeSchema.default("any")
 });
-var updateSnippetBodySchema = z9.object({
-  name: z9.string().trim().min(1),
-  code: z9.string(),
+var updateSnippetBodySchema = z8.object({
+  name: z8.string().trim().min(1),
+  code: z8.string(),
   scope: snippetScopeSchema
 });
-var createFolderBodySchema = z9.object({
-  name: z9.string().trim().min(1)
+var createFolderBodySchema = z8.object({
+  name: z8.string().trim().min(1)
 });
-var renameFolderBodySchema = z9.object({
-  name: z9.string().trim().min(1)
+var renameFolderBodySchema = z8.object({
+  name: z8.string().trim().min(1)
 });
-var reorderFoldersBodySchema = z9.object({
-  orderedFolderIds: z9.array(z9.string().trim().min(1))
+var reorderFoldersBodySchema = z8.object({
+  orderedFolderIds: z8.array(z8.string().trim().min(1))
 });
-var saveRequestBodySchema = z9.object({
-  name: z9.string().trim().min(1),
+var saveRequestBodySchema = z8.object({
+  name: z8.string().trim().min(1),
   method: httpMethodSchema,
-  url: z9.string(),
-  headers: z9.array(keyValueSchema),
-  params: z9.array(keyValueSchema),
+  url: z8.string(),
+  headers: z8.array(keyValueSchema),
+  params: z8.array(keyValueSchema),
   auth: authConfigSchema,
-  body: z9.string(),
+  body: z8.string(),
   bodyType: bodyTypeSchema,
-  preRequestScript: z9.string(),
-  postRequestScript: z9.string(),
-  comment: z9.string(),
-  folderId: z9.string().nullable().optional()
+  preRequestScript: z8.string(),
+  postRequestScript: z8.string(),
+  comment: z8.string(),
+  folderId: z8.string().nullable().optional()
 });
 var updateSaveRequestBodySchema = saveRequestBodySchema.extend({
-  collectionId: z9.string().trim().min(1)
+  collectionId: z8.string().trim().min(1)
 });
-var reorderRequestsBodySchema = z9.object({
-  folderId: z9.string().nullable(),
-  orderedRequestIds: z9.array(z9.string().trim().min(1))
+var reorderRequestsBodySchema = z8.object({
+  folderId: z8.string().nullable(),
+  orderedRequestIds: z8.array(z8.string().trim().min(1))
 });
-var moveRequestBodySchema = z9.object({
-  folderId: z9.string().nullable(),
-  index: z9.number().int().min(0)
+var moveRequestBodySchema = z8.object({
+  folderId: z8.string().nullable(),
+  index: z8.number().int().min(0)
 });
-var listCollectionsResponseSchema = z9.object({
-  collections: z9.array(collectionRecordSchema)
+var listCollectionsResponseSchema = z8.object({
+  collections: z8.array(collectionRecordSchema)
 });
-var listEnvironmentsResponseSchema = z9.object({
-  environments: z9.array(environmentRecordSchema)
+var listEnvironmentsResponseSchema = z8.object({
+  environments: z8.array(environmentRecordSchema)
 });
-var listSnippetsResponseSchema = z9.object({
-  snippets: z9.array(snippetRecordSchema)
+var listSnippetsResponseSchema = z8.object({
+  snippets: z8.array(snippetRecordSchema)
 });
-var listFoldersResponseSchema = z9.object({
-  folders: z9.array(folderRecordSchema)
+var listFoldersResponseSchema = z8.object({
+  folders: z8.array(folderRecordSchema)
 });
-var listRequestsResponseSchema = z9.object({
-  requests: z9.array(savedRequestRecordSchema)
+var listRequestsResponseSchema = z8.object({
+  requests: z8.array(savedRequestRecordSchema)
 });
-var emptyResponseSchema = z9.null();
+var emptyResponseSchema = z8.null();
 function serializeCollection(record) {
   return {
     ...record,
@@ -7245,6 +7116,155 @@ function serializeSavedRequest(record) {
   };
 }
 
+// src/server/routes/schemas/admin.ts
+var adminResourceOptionSchema = z9.object({
+  id: z9.string(),
+  name: z9.string(),
+  deletionLocked: z9.boolean()
+});
+var adminEntityConfigSchema = z9.object({
+  id: z9.string(),
+  name: z9.string(),
+  deletionLocked: z9.boolean()
+});
+var updateAdminCollectionBodySchema = z9.object({
+  deletionLocked: z9.boolean()
+});
+var updateAdminEnvironmentBodySchema = z9.object({
+  deletionLocked: z9.boolean()
+});
+var updateAdminSnippetBodySchema = z9.object({
+  name: z9.string().trim().min(1).optional(),
+  code: z9.string().optional(),
+  scope: snippetScopeSchema.optional(),
+  deletionLocked: z9.boolean().optional()
+}).superRefine((body, ctx) => {
+  const hasContentFields = body.name !== void 0 || body.code !== void 0 || body.scope !== void 0;
+  const hasFullContent = body.name !== void 0 && body.code !== void 0 && body.scope !== void 0;
+  if (hasContentFields && !hasFullContent) {
+    ctx.addIssue({
+      code: "custom",
+      message: "name, code, and scope must be provided together"
+    });
+  }
+  if (!hasContentFields && body.deletionLocked === void 0) {
+    ctx.addIssue({
+      code: "custom",
+      message: "Provide snippet content (name, code, scope) and/or deletionLocked"
+    });
+  }
+});
+var createAdminSnippetBodySchema = createSnippetBodySchema;
+var listAdminCollectionsResponseSchema = z9.object({
+  collections: z9.array(adminResourceOptionSchema)
+});
+var listAdminEnvironmentsResponseSchema = z9.object({
+  environments: z9.array(adminResourceOptionSchema)
+});
+var listAdminSnippetsResponseSchema = z9.object({
+  snippets: z9.array(snippetRecordSchema)
+});
+var adminSnippetRecordSchema = snippetRecordSchema;
+var listAdminLlmModelsResponseSchema = listLlmModelsResponseSchema;
+var hubUserRecordSchema = z9.object({
+  id: z9.string(),
+  name: z9.string(),
+  role: userRoleSchema,
+  collectionAccess: z9.array(z9.string()),
+  environmentAccess: z9.array(z9.string()),
+  snippetAccess: z9.array(z9.string()),
+  llmAccess: z9.boolean(),
+  llmModels: z9.array(z9.string()),
+  llmMonthlyTokenLimit: z9.number().int().nonnegative().nullable(),
+  createdAt: timestampSchema,
+  updatedAt: timestampSchema
+});
+var adminUserListEntrySchema = hubUserRecordSchema.extend({
+  warnings: z9.array(z9.string())
+});
+var listAdminUsersResponseSchema = z9.object({
+  users: z9.array(adminUserListEntrySchema)
+});
+var updateAdminUserBodySchema = z9.object({
+  name: z9.string().trim().min(1).optional(),
+  role: userRoleSchema.optional(),
+  collectionAccess: z9.array(z9.string()).optional(),
+  environmentAccess: z9.array(z9.string()).optional(),
+  snippetAccess: z9.array(z9.string()).optional(),
+  llmAccess: z9.boolean().optional(),
+  llmModels: z9.array(z9.string()).optional(),
+  llmMonthlyTokenLimit: z9.number().int().nonnegative().nullable().optional()
+});
+var createAdminUserBodySchema = z9.object({
+  name: z9.string().trim().min(1),
+  role: userRoleSchema,
+  collectionAccess: z9.array(z9.string()).optional(),
+  environmentAccess: z9.array(z9.string()).optional(),
+  snippetAccess: z9.array(z9.string()).optional(),
+  llmAccess: z9.boolean().optional(),
+  llmModels: z9.array(z9.string()).optional(),
+  llmMonthlyTokenLimit: z9.number().int().nonnegative().nullable().optional()
+});
+var hubApiTokenRecordSchema = z9.object({
+  id: z9.string(),
+  userId: z9.string(),
+  name: z9.string(),
+  tokenPrefix: z9.string(),
+  createdAt: timestampSchema,
+  lastUsedAt: timestampSchema.nullable(),
+  revokedAt: timestampSchema.nullable()
+});
+var createAdminUserResponseSchema = z9.object({
+  user: hubUserRecordSchema,
+  token: hubApiTokenRecordSchema,
+  secret: z9.string()
+});
+var createAdminTokenBodySchema = z9.object({
+  name: z9.string().trim().min(1)
+});
+var createdApiTokenResponseSchema = z9.object({
+  token: hubApiTokenRecordSchema,
+  secret: z9.string()
+});
+var listAdminTokensResponseSchema = z9.object({
+  tokens: z9.array(hubApiTokenRecordSchema)
+});
+var reloadConfigSectionResultSchema = z9.object({
+  section: z9.enum(["db", "redis", "llm", "plugins", "server"]),
+  status: z9.enum(["reloaded", "unchanged", "failed", "restart-required"]),
+  error: z9.string().optional()
+});
+var reloadConfigResponseSchema = z9.object({
+  sections: z9.array(reloadConfigSectionResultSchema),
+  fatalError: z9.string().optional()
+});
+function serializeHubUser(user) {
+  return {
+    id: user.id,
+    name: user.name,
+    role: user.role,
+    collectionAccess: user.collectionAccess,
+    environmentAccess: user.environmentAccess,
+    snippetAccess: user.snippetAccess,
+    llmAccess: user.llmAccess,
+    llmModels: user.llmModels,
+    llmMonthlyTokenLimit: user.llmMonthlyTokenLimit,
+    createdAt: user.createdAt.toISOString(),
+    updatedAt: user.updatedAt.toISOString()
+  };
+}
+function serializeApiToken(token) {
+  return {
+    id: token.id,
+    userId: token.userId,
+    name: token.name,
+    tokenPrefix: token.tokenPrefix,
+    createdAt: token.createdAt.toISOString(),
+    lastUsedAt: token.lastUsedAt ? token.lastUsedAt.toISOString() : null,
+    revokedAt: token.revokedAt ? token.revokedAt.toISOString() : null
+  };
+}
+
 // src/server/routes/admin.ts
 function sendLlmUnavailable(reply) {
   return reply.code(503).send({
@@ -7553,11 +7573,7 @@ async function registerAdminRoutes(app, options) {
         }
         const snippets = await db.listSnippets();
         return reply.send({
-          snippets: snippets.map((snippet) => ({
-            id: snippet.id,
-            name: snippet.name,
-            deletionLocked: snippet.deletionLocked
-          }))
+          snippets: snippets.map((snippet) => serializeSnippet(snippet))
         });
       } catch (error) {
         if (handleDbError(reply, error)) {
@@ -7567,6 +7583,40 @@ async function registerAdminRoutes(app, options) {
       }
     }
   });
+  routes.route({
+    method: "POST",
+    url: "/admin/snippets",
+    schema: {
+      body: createAdminSnippetBodySchema,
+      response: {
+        201: adminSnippetRecordSchema,
+        403: errorResponseSchema
+      }
+    },
+    /**
+     * Creates a snippet through the management API.
+     */
+    handler: async (request, reply) => {
+      try {
+        const user = requireAuthenticatedUser(request);
+        if (denyUnlessAllowed(reply, canUseManagementApi(user))) {
+          return;
+        }
+        const snippet = await db.createSnippet(
+          request.body.name,
+          request.body.code,
+          request.body.scope,
+          user.id
+        );
+        return reply.code(201).send(serializeSnippet(snippet));
+      } catch (error) {
+        if (handleDbError(reply, error)) {
+          return;
+        }
+        throw error;
+      }
+    }
+  });
   routes.route({
     method: "DELETE",
     url: "/admin/collections/:id",
@@ -7679,13 +7729,13 @@ async function registerAdminRoutes(app, options) {
       params: idParamSchema,
       body: updateAdminSnippetBodySchema,
       response: {
-        200: adminEntityConfigSchema,
+        200: adminSnippetRecordSchema,
         403: errorResponseSchema,
         404: errorResponseSchema
       }
     },
     /**
-     * Updates admin configuration for a snippet.
+     * Updates snippet content and/or admin configuration.
      */
     handler: async (request, reply) => {
       try {
@@ -7693,16 +7743,20 @@ async function registerAdminRoutes(app, options) {
         if (denyUnlessAllowed(reply, canUseManagementApi(user))) {
           return;
         }
-        const snippet = await db.setSnippetDeletionLocked(
-          request.params.id,
-          request.body.deletionLocked,
-          user.id
-        );
-        return reply.send({
-          id: snippet.id,
-          name: snippet.name,
-          deletionLocked: snippet.deletionLocked
-        });
+        const existing = await db.findSnippetById(request.params.id);
+        if (!existing) {
+          void reply.code(404).send({ error: "Snippet not found" });
+          return;
+        }
+        let snippet = existing;
+        const { name, code, scope, deletionLocked } = request.body;
+        if (name !== void 0 && code !== void 0 && scope !== void 0) {
+          snippet = await db.updateSnippet(request.params.id, name, code, scope, user.id);
+        }
+        if (deletionLocked !== void 0) {
+          snippet = await db.setSnippetDeletionLocked(request.params.id, deletionLocked, user.id);
+        }
+        return reply.send(serializeSnippet(snippet));
       } catch (error) {
         if (handleDbError(reply, error)) {
           return;