@hiai-gg/docsmint 0.5.1 → 0.5.3

package/dist/backend/index.js

@@ -42724,6 +42724,8 @@ __export(exports_schema, {
   shareRoleEnum: () => shareRoleEnum,
   shareLinks: () => shareLinks,
   shareLinkRelations: () => shareLinkRelations,
+  shareGrantStatusEnum: () => shareGrantStatusEnum,
+  shareAccessModeEnum: () => shareAccessModeEnum,
   sessions: () => sessions,
   pipelineStatusEnum: () => pipelineStatusEnum,
   pipelineStageEnum: () => pipelineStageEnum,
@@ -42754,7 +42756,7 @@ __export(exports_schema, {
   apiKeyRelations: () => apiKeyRelations,
   accounts: () => accounts
 });
-var vector4, tsvector, documentVisibilityEnum, shareRoleEnum, embeddingStatusEnum, pipelineStageEnum, pipelineStatusEnum, lifecycleOperationKindEnum, lifecycleOperationStatusEnum, users, sessions, accounts, verifications, folders, folderRelations, documents, documentRelations, documentPipelineRuns, documentPipelineBatches, tags, tagRelations, categories, categoryRelations, documentTags, documentTagRelations, shareLinks, shareLinkRelations, guestAccess, guestAccessRelations, attachments, attachmentRelations, versions, documentEmbeddings, documentEmbeddingRelations, apiKeys, apiKeyRelations, auditLog, lifecycleOperations, documentCreateOperations, versionRelations;
+var vector4, tsvector, documentVisibilityEnum, shareRoleEnum, shareAccessModeEnum, shareGrantStatusEnum, embeddingStatusEnum, pipelineStageEnum, pipelineStatusEnum, lifecycleOperationKindEnum, lifecycleOperationStatusEnum, users, sessions, accounts, verifications, folders, folderRelations, documents, documentRelations, documentPipelineRuns, documentPipelineBatches, tags, tagRelations, categories, categoryRelations, documentTags, documentTagRelations, shareLinks, shareLinkRelations, guestAccess, guestAccessRelations, attachments, attachmentRelations, versions, documentEmbeddings, documentEmbeddingRelations, apiKeys, apiKeyRelations, auditLog, lifecycleOperations, documentCreateOperations, versionRelations;
 var init_schema2 = __esm(() => {
   init_pg_core();
   init_drizzle_orm();
@@ -42778,6 +42780,8 @@ var init_schema2 = __esm(() => {
   });
   documentVisibilityEnum = pgEnum("document_visibility", ["private", "shared", "public"]);
   shareRoleEnum = pgEnum("share_role", ["viewer", "commenter", "editor"]);
+  shareAccessModeEnum = pgEnum("share_access_mode", ["public", "restricted"]);
+  shareGrantStatusEnum = pgEnum("share_grant_status", ["pending", "accepted", "revoked"]);
   embeddingStatusEnum = pgEnum("embedding_status", [
     "pending",
     "processing",
@@ -43069,6 +43073,9 @@ var init_schema2 = __esm(() => {
     token: text("token").notNull().unique(),
     passwordHash: text("password_hash"),
     role: shareRoleEnum("role").notNull().default("viewer"),
+    accessMode: shareAccessModeEnum("access_mode").notNull().default("public"),
+    allowPasswordFallback: boolean("allow_password_fallback").notNull().default(false),
+    policyVersion: integer("policy_version").notNull().default(1),
     expiresAt: timestamp("expires_at"),
     createdBy: uuid("created_by").notNull().references(() => users.id, { onDelete: "cascade" }),
     workspaceId: text("workspace_id"),
@@ -43104,8 +43111,15 @@ var init_schema2 = __esm(() => {
     shareLinkId: uuid("share_link_id").notNull().references(() => shareLinks.id, { onDelete: "cascade" }),
     workspaceId: text("workspace_id"),
     guestEmail: text("guest_email").notNull(),
-    grantedAt: timestamp("granted_at").defaultNow().notNull()
-  }, (table3) => [index("guest_access_share_link_idx").on(table3.shareLinkId)]);
+    role: shareRoleEnum("role").notNull().default("viewer"),
+    status: shareGrantStatusEnum("status").notNull().default("pending"),
+    grantedAt: timestamp("granted_at").defaultNow().notNull(),
+    acceptedAt: timestamp("accepted_at"),
+    revokedAt: timestamp("revoked_at")
+  }, (table3) => [
+    index("guest_access_share_link_idx").on(table3.shareLinkId),
+    uniqueIndex("guest_access_share_link_email_unique_idx").on(table3.shareLinkId, table3.guestEmail)
+  ]);
   guestAccessRelations = relations(guestAccess, ({ one }) => ({
     shareLink: one(shareLinks, {
       fields: [guestAccess.shareLinkId],
@@ -43121,7 +43135,10 @@ var init_schema2 = __esm(() => {
     size: bigint("size", { mode: "number" }).notNull(),
     storageKey: text("storage_key").notNull(),
     createdAt: timestamp("created_at").defaultNow().notNull()
-  }, (table3) => [index("attachments_document_id_idx").on(table3.documentId)]);
+  }, (table3) => [
+    index("attachments_document_id_idx").on(table3.documentId),
+    uniqueIndex("attachments_storage_key_unique").on(table3.storageKey)
+  ]);
   attachmentRelations = relations(attachments, ({ one }) => ({
     document: one(documents, {
       fields: [attachments.documentId],
@@ -194084,7 +194101,7 @@ function contentAccessForExternalContext(ctx) {
     userId: ctx.userId,
     categoryId: null,
     permissions,
-    restricted: true,
+    restricted: false,
     externalRole: ctx.actorRole
   };
 }
@@ -195878,6 +195895,20 @@ var attachmentRoutes = new Elysia({ prefix: "/api" }).post("/documents/:id/attac
     set2.status = 400;
     return { error: "quotaReservationId is required" };
   }
+  const existing = await withTenant(ctx, async (tx) => {
+    const [row] = await tx.select().from(attachments).where(and(eq(attachments.documentId, documentId), eq(attachments.storageKey, key))).limit(1);
+    return row ?? null;
+  });
+  if (existing) {
+    set2.status = 201;
+    return {
+      id: existing.id,
+      filename: existing.filename,
+      mimeType: existing.mimeType,
+      size: existing.size,
+      url: `/api/attachments/${existing.id}/raw`
+    };
+  }
   let headOutput;
   try {
     headOutput = await storage.send(new HeadObjectCommand({ Bucket: BUCKET, Key: key }));
@@ -195909,14 +195940,21 @@ var attachmentRoutes = new Elysia({ prefix: "/api" }).post("/documents/:id/attac
   }
   try {
     const created = await withTenant(ctx, async (tx) => {
+      await tx.execute(sql`SELECT pg_advisory_xact_lock(hashtextextended(${key}, 0))`);
+      const [raced] = await tx.select().from(attachments).where(and(eq(attachments.documentId, documentId), eq(attachments.storageKey, key))).limit(1);
+      if (raced)
+        return raced;
       const [row] = await tx.insert(attachments).values({
         documentId,
         filename,
         mimeType: contentType,
         size: storedSize,
         storageKey: key
-      }).returning();
-      return row ?? null;
+      }).onConflictDoNothing({ target: attachments.storageKey }).returning();
+      if (row)
+        return row;
+      const [winner] = await tx.select().from(attachments).where(and(eq(attachments.documentId, documentId), eq(attachments.storageKey, key))).limit(1);
+      return winner ?? null;
     });
     if (!created) {
       if (admission && quotaContext && quotaReservationId) {
@@ -230457,6 +230495,7 @@ async function searchDocuments(ctx, request, adapters = {}) {
     ...expansionModel ? { expansionModel } : {},
     graphAttempted,
     graphFailed,
+    graphContribution,
     confidenceReasons: confidence.reasons
   };
   return {
@@ -234240,7 +234279,7 @@ var swaggerConfig = {
     },
     info: {
       title: "DocsMint API",
-      version: "0.5.1",
+      version: "0.5.3",
       description: "Self-hosted AI-first documentation platform. Full-text + semantic search, version history, sharing, and folder organization.",
       contact: { name: "HiAi-gg", url: "https://github.com/HiAi-gg/docsmint" },
       license: {

package/dist/backend-account-runtime-cleanup.js

@@ -26,6 +26,8 @@ __export(exports_schema, {
   shareRoleEnum: () => shareRoleEnum,
   shareLinks: () => shareLinks,
   shareLinkRelations: () => shareLinkRelations,
+  shareGrantStatusEnum: () => shareGrantStatusEnum,
+  shareAccessModeEnum: () => shareAccessModeEnum,
   sessions: () => sessions,
   pipelineStatusEnum: () => pipelineStatusEnum,
   pipelineStageEnum: () => pipelineStageEnum,
@@ -78,6 +80,8 @@ var tsvector = customType({
 });
 var documentVisibilityEnum = pgEnum("document_visibility", ["private", "shared", "public"]);
 var shareRoleEnum = pgEnum("share_role", ["viewer", "commenter", "editor"]);
+var shareAccessModeEnum = pgEnum("share_access_mode", ["public", "restricted"]);
+var shareGrantStatusEnum = pgEnum("share_grant_status", ["pending", "accepted", "revoked"]);
 var embeddingStatusEnum = pgEnum("embedding_status", [
   "pending",
   "processing",
@@ -369,6 +373,9 @@ var shareLinks = pgTable("share_links", {
   token: text("token").notNull().unique(),
   passwordHash: text("password_hash"),
   role: shareRoleEnum("role").notNull().default("viewer"),
+  accessMode: shareAccessModeEnum("access_mode").notNull().default("public"),
+  allowPasswordFallback: boolean("allow_password_fallback").notNull().default(false),
+  policyVersion: integer("policy_version").notNull().default(1),
   expiresAt: timestamp("expires_at"),
   createdBy: uuid("created_by").notNull().references(() => users.id, { onDelete: "cascade" }),
   workspaceId: text("workspace_id"),
@@ -404,8 +411,15 @@ var guestAccess = pgTable("guest_access", {
   shareLinkId: uuid("share_link_id").notNull().references(() => shareLinks.id, { onDelete: "cascade" }),
   workspaceId: text("workspace_id"),
   guestEmail: text("guest_email").notNull(),
-  grantedAt: timestamp("granted_at").defaultNow().notNull()
-}, (table) => [index("guest_access_share_link_idx").on(table.shareLinkId)]);
+  role: shareRoleEnum("role").notNull().default("viewer"),
+  status: shareGrantStatusEnum("status").notNull().default("pending"),
+  grantedAt: timestamp("granted_at").defaultNow().notNull(),
+  acceptedAt: timestamp("accepted_at"),
+  revokedAt: timestamp("revoked_at")
+}, (table) => [
+  index("guest_access_share_link_idx").on(table.shareLinkId),
+  uniqueIndex("guest_access_share_link_email_unique_idx").on(table.shareLinkId, table.guestEmail)
+]);
 var guestAccessRelations = relations(guestAccess, ({ one }) => ({
   shareLink: one(shareLinks, {
     fields: [guestAccess.shareLinkId],
@@ -421,7 +435,10 @@ var attachments = pgTable("attachments", {
   size: bigint("size", { mode: "number" }).notNull(),
   storageKey: text("storage_key").notNull(),
   createdAt: timestamp("created_at").defaultNow().notNull()
-}, (table) => [index("attachments_document_id_idx").on(table.documentId)]);
+}, (table) => [
+  index("attachments_document_id_idx").on(table.documentId),
+  uniqueIndex("attachments_storage_key_unique").on(table.storageKey)
+]);
 var attachmentRelations = relations(attachments, ({ one }) => ({
   document: one(documents, {
     fields: [attachments.documentId],

package/dist/backend-api-key-facade.js

@@ -26,6 +26,8 @@ __export(exports_schema, {
   shareRoleEnum: () => shareRoleEnum,
   shareLinks: () => shareLinks,
   shareLinkRelations: () => shareLinkRelations,
+  shareGrantStatusEnum: () => shareGrantStatusEnum,
+  shareAccessModeEnum: () => shareAccessModeEnum,
   sessions: () => sessions,
   pipelineStatusEnum: () => pipelineStatusEnum,
   pipelineStageEnum: () => pipelineStageEnum,
@@ -78,6 +80,8 @@ var tsvector = customType({
 });
 var documentVisibilityEnum = pgEnum("document_visibility", ["private", "shared", "public"]);
 var shareRoleEnum = pgEnum("share_role", ["viewer", "commenter", "editor"]);
+var shareAccessModeEnum = pgEnum("share_access_mode", ["public", "restricted"]);
+var shareGrantStatusEnum = pgEnum("share_grant_status", ["pending", "accepted", "revoked"]);
 var embeddingStatusEnum = pgEnum("embedding_status", [
   "pending",
   "processing",
@@ -369,6 +373,9 @@ var shareLinks = pgTable("share_links", {
   token: text("token").notNull().unique(),
   passwordHash: text("password_hash"),
   role: shareRoleEnum("role").notNull().default("viewer"),
+  accessMode: shareAccessModeEnum("access_mode").notNull().default("public"),
+  allowPasswordFallback: boolean("allow_password_fallback").notNull().default(false),
+  policyVersion: integer("policy_version").notNull().default(1),
   expiresAt: timestamp("expires_at"),
   createdBy: uuid("created_by").notNull().references(() => users.id, { onDelete: "cascade" }),
   workspaceId: text("workspace_id"),
@@ -404,8 +411,15 @@ var guestAccess = pgTable("guest_access", {
   shareLinkId: uuid("share_link_id").notNull().references(() => shareLinks.id, { onDelete: "cascade" }),
   workspaceId: text("workspace_id"),
   guestEmail: text("guest_email").notNull(),
-  grantedAt: timestamp("granted_at").defaultNow().notNull()
-}, (table) => [index("guest_access_share_link_idx").on(table.shareLinkId)]);
+  role: shareRoleEnum("role").notNull().default("viewer"),
+  status: shareGrantStatusEnum("status").notNull().default("pending"),
+  grantedAt: timestamp("granted_at").defaultNow().notNull(),
+  acceptedAt: timestamp("accepted_at"),
+  revokedAt: timestamp("revoked_at")
+}, (table) => [
+  index("guest_access_share_link_idx").on(table.shareLinkId),
+  uniqueIndex("guest_access_share_link_email_unique_idx").on(table.shareLinkId, table.guestEmail)
+]);
 var guestAccessRelations = relations(guestAccess, ({ one }) => ({
   shareLink: one(shareLinks, {
     fields: [guestAccess.shareLinkId],
@@ -421,7 +435,10 @@ var attachments = pgTable("attachments", {
   size: bigint("size", { mode: "number" }).notNull(),
   storageKey: text("storage_key").notNull(),
   createdAt: timestamp("created_at").defaultNow().notNull()
-}, (table) => [index("attachments_document_id_idx").on(table.documentId)]);
+}, (table) => [
+  index("attachments_document_id_idx").on(table.documentId),
+  uniqueIndex("attachments_storage_key_unique").on(table.storageKey)
+]);
 var attachmentRelations = relations(attachments, ({ one }) => ({
   document: one(documents, {
     fields: [attachments.documentId],

package/dist/backend-pipeline-cancellation.js

@@ -26,6 +26,8 @@ __export(exports_schema, {
   shareRoleEnum: () => shareRoleEnum,
   shareLinks: () => shareLinks,
   shareLinkRelations: () => shareLinkRelations,
+  shareGrantStatusEnum: () => shareGrantStatusEnum,
+  shareAccessModeEnum: () => shareAccessModeEnum,
   sessions: () => sessions,
   pipelineStatusEnum: () => pipelineStatusEnum,
   pipelineStageEnum: () => pipelineStageEnum,
@@ -78,6 +80,8 @@ var tsvector = customType({
 });
 var documentVisibilityEnum = pgEnum("document_visibility", ["private", "shared", "public"]);
 var shareRoleEnum = pgEnum("share_role", ["viewer", "commenter", "editor"]);
+var shareAccessModeEnum = pgEnum("share_access_mode", ["public", "restricted"]);
+var shareGrantStatusEnum = pgEnum("share_grant_status", ["pending", "accepted", "revoked"]);
 var embeddingStatusEnum = pgEnum("embedding_status", [
   "pending",
   "processing",
@@ -369,6 +373,9 @@ var shareLinks = pgTable("share_links", {
   token: text("token").notNull().unique(),
   passwordHash: text("password_hash"),
   role: shareRoleEnum("role").notNull().default("viewer"),
+  accessMode: shareAccessModeEnum("access_mode").notNull().default("public"),
+  allowPasswordFallback: boolean("allow_password_fallback").notNull().default(false),
+  policyVersion: integer("policy_version").notNull().default(1),
   expiresAt: timestamp("expires_at"),
   createdBy: uuid("created_by").notNull().references(() => users.id, { onDelete: "cascade" }),
   workspaceId: text("workspace_id"),
@@ -404,8 +411,15 @@ var guestAccess = pgTable("guest_access", {
   shareLinkId: uuid("share_link_id").notNull().references(() => shareLinks.id, { onDelete: "cascade" }),
   workspaceId: text("workspace_id"),
   guestEmail: text("guest_email").notNull(),
-  grantedAt: timestamp("granted_at").defaultNow().notNull()
-}, (table) => [index("guest_access_share_link_idx").on(table.shareLinkId)]);
+  role: shareRoleEnum("role").notNull().default("viewer"),
+  status: shareGrantStatusEnum("status").notNull().default("pending"),
+  grantedAt: timestamp("granted_at").defaultNow().notNull(),
+  acceptedAt: timestamp("accepted_at"),
+  revokedAt: timestamp("revoked_at")
+}, (table) => [
+  index("guest_access_share_link_idx").on(table.shareLinkId),
+  uniqueIndex("guest_access_share_link_email_unique_idx").on(table.shareLinkId, table.guestEmail)
+]);
 var guestAccessRelations = relations(guestAccess, ({ one }) => ({
   shareLink: one(shareLinks, {
     fields: [guestAccess.shareLinkId],
@@ -421,7 +435,10 @@ var attachments = pgTable("attachments", {
   size: bigint("size", { mode: "number" }).notNull(),
   storageKey: text("storage_key").notNull(),
   createdAt: timestamp("created_at").defaultNow().notNull()
-}, (table) => [index("attachments_document_id_idx").on(table.documentId)]);
+}, (table) => [
+  index("attachments_document_id_idx").on(table.documentId),
+  uniqueIndex("attachments_storage_key_unique").on(table.storageKey)
+]);
 var attachmentRelations = relations(attachments, ({ one }) => ({
   document: one(documents, {
     fields: [attachments.documentId],