@hilbras/keystone 1.1.0

package/dist/tests/featureFlags.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"featureFlags.test.js","sourceRoot":"","sources":["../../src/tests/featureFlags.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,uBAAuB,EAAE,yBAAyB,EAAE,MAAM,uCAAuC,CAAC;AAE3G,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,MAAM,QAAQ,GAAG,yBAAyB,EAAE,CAAC;QAC7C,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,aAAa,CAAC,CAAC,CAAC;QACxD,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,YAAY,CAAC,CAAC,CAAC;QACvD,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC;QACnD,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,gBAAgB,CAAC,CAAC,CAAC;QAC3D,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,YAAY,CAAC,CAAC,CAAC;QACvD,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,mBAAmB,CAAC,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,MAAM,OAAO,GAAG,uBAAuB,CAAC,aAAa,CAAC,CAAC;QACvD,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;QACnB,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;QAC3D,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,CAAC,WAAW,CAAC,uBAAuB,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/tests/integration/queue.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=queue.test.d.ts.map

package/dist/tests/integration/queue.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"queue.test.d.ts","sourceRoot":"","sources":["../../../src/tests/integration/queue.test.ts"],"names":[],"mappings":""}

package/dist/tests/integration/queue.test.js

@@ -0,0 +1,49 @@
+import { describe, it } from "node:test";
+import assert from "node:assert";
+import net from "node:net";
+process.env.DATABASE_URL = process.env.DATABASE_URL || "postgresql://hilbras:hilbras@localhost:5432/hilbras";
+function redisReachable(host = "localhost", port = 6379) {
+    return new Promise((resolve) => {
+        const socket = net.createConnection({ host, port });
+        socket.on("connect", () => {
+            socket.destroy();
+            resolve(true);
+        });
+        socket.on("error", () => resolve(false));
+        socket.setTimeout(1000, () => {
+            socket.destroy();
+            resolve(false);
+        });
+    });
+}
+const redisAvailable = await redisReachable();
+const { BullMQQueue } = await import("../../services/queue/bullmq.js");
+describe("Background job queue", () => {
+    (redisAvailable ? it : it.skip)("processes a job through BullMQ", async () => {
+        const queue = new BullMQQueue(process.env.REDIS_URL || "redis://localhost:6379");
+        const payload = { hello: "world" };
+        let received;
+        const processed = new Promise((resolve) => {
+            queue.process("integration_test", async (job) => {
+                received = job.payload;
+                resolve();
+            });
+        });
+        try {
+            await queue.enqueue({ id: `integration-test-${Date.now()}`, type: "integration_test", payload });
+            // Wait for the worker to pick up the job, bounded by a timeout so a slow
+            // or dead worker fails the test instead of hanging the process.
+            await Promise.race([
+                processed,
+                new Promise((resolve) => setTimeout(resolve, 5000)),
+            ]);
+            assert.deepStrictEqual(received, payload);
+        }
+        finally {
+            // Always release the worker + Redis connection, even on assertion failure,
+            // or open handles keep the node:test process alive indefinitely.
+            await queue.close();
+        }
+    });
+});
+//# sourceMappingURL=queue.test.js.map

package/dist/tests/integration/queue.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"queue.test.js","sourceRoot":"","sources":["../../../src/tests/integration/queue.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,GAAG,MAAM,UAAU,CAAC;AAE3B,OAAO,CAAC,GAAG,CAAC,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,qDAAqD,CAAC;AAE7G,SAAS,cAAc,CAAC,IAAI,GAAG,WAAW,EAAE,IAAI,GAAG,IAAI;IACrD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,MAAM,GAAG,GAAG,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;YACxB,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QACzC,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,EAAE;YAC3B,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,cAAc,GAAG,MAAM,cAAc,EAAE,CAAC;AAC9C,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,gCAAgC,CAAC,CAAC;AAEvE,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;QAC3E,MAAM,KAAK,GAAG,IAAI,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,wBAAwB,CAAC,CAAC;QACjF,MAAM,OAAO,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;QACnC,IAAI,QAAiB,CAAC;QACtB,MAAM,SAAS,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAC9C,KAAK,CAAC,OAAO,CAAC,kBAAkB,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;gBAC9C,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC;gBACvB,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,oBAAoB,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,CAAC,CAAC;YAEjG,yEAAyE;YACzE,gEAAgE;YAChE,MAAM,OAAO,CAAC,IAAI,CAAC;gBACjB,SAAS;gBACT,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;aACpD,CAAC,CAAC;YAEH,MAAM,CAAC,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC5C,CAAC;gBAAS,CAAC;YACT,2EAA2E;YAC3E,iEAAiE;YACjE,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;QACtB,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/tests/plugins.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=plugins.test.d.ts.map

package/dist/tests/plugins.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugins.test.d.ts","sourceRoot":"","sources":["../../src/tests/plugins.test.ts"],"names":[],"mappings":""}

package/dist/tests/plugins.test.js

@@ -0,0 +1,56 @@
+import { describe, it } from "node:test";
+import assert from "node:assert";
+import { registerPlugin, unregisterPlugin, listRegisteredPlugins, listExtensionPoints, getConnectorFactory, getPluginWorkflowStep, getAuthenticationMethodFactory, } from "../services/plugins/registry.js";
+describe("Plugin registry", () => {
+    it("registers a plugin with metadata and extension points", () => {
+        const plugin = {
+            metadata: { name: "test-plugin", version: "1.0.0", description: "Test" },
+            connectors: {
+                test: () => ({
+                    id: "test",
+                    name: "Test",
+                    type: "test",
+                    getAuthorizeUrl: () => "",
+                    exchangeCode: async () => ({ sub: "1", email: "test@example.com" }),
+                }),
+            },
+            workflowSteps: {
+                testStep: () => ({ output: { done: "true" } }),
+            },
+            authenticationMethods: {
+                testAuth: () => ({
+                    id: "testAuth",
+                    name: "Test Auth",
+                    authenticate: async () => ({ success: false, error: { code: "test", message: "test" } }),
+                }),
+            },
+        };
+        registerPlugin(plugin);
+        const plugins = listRegisteredPlugins();
+        assert.ok(plugins.some((p) => p.metadata.name === "test-plugin"));
+        assert.deepStrictEqual(plugins.find((p) => p.metadata.name === "test-plugin")?.extensionPoints.sort(), [
+            "authenticationMethods",
+            "connectors",
+            "workflowSteps",
+        ]);
+        assert.ok(getConnectorFactory("test"));
+        assert.ok(getPluginWorkflowStep("testStep"));
+        assert.ok(getAuthenticationMethodFactory("testAuth"));
+    });
+    it("lists extension points with registered entries", () => {
+        const points = listExtensionPoints();
+        assert.ok(points.some((p) => p.name === "connectors" && p.registered.includes("test")));
+        assert.ok(points.some((p) => p.name === "workflowSteps" && p.registered.includes("testStep")));
+    });
+    it("unregisters a plugin and removes its extension points", () => {
+        const removed = unregisterPlugin("test-plugin");
+        assert.strictEqual(removed, true);
+        assert.strictEqual(getConnectorFactory("test"), undefined);
+        assert.strictEqual(getPluginWorkflowStep("testStep"), undefined);
+        assert.strictEqual(getAuthenticationMethodFactory("testAuth"), undefined);
+    });
+    it("returns false when unregistering an unknown plugin", () => {
+        assert.strictEqual(unregisterPlugin("does-not-exist"), false);
+    });
+});
+//# sourceMappingURL=plugins.test.js.map

package/dist/tests/plugins.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugins.test.js","sourceRoot":"","sources":["../../src/tests/plugins.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,qBAAqB,EACrB,mBAAmB,EACnB,mBAAmB,EACnB,qBAAqB,EACrB,8BAA8B,GAC/B,MAAM,iCAAiC,CAAC;AAIzC,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAC/D,MAAM,MAAM,GAAmB;YAC7B,QAAQ,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE;YACxE,UAAU,EAAE;gBACV,IAAI,EAAE,GAAG,EAAE,CACT,CAAC;oBACC,EAAE,EAAE,MAAM;oBACV,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,MAAM;oBACZ,eAAe,EAAE,GAAG,EAAE,CAAC,EAAE;oBACzB,YAAY,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC;iBACvC,CAAA;aACjC;YACD,aAAa,EAAE;gBACb,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC;aAC/C;YACD,qBAAqB,EAAE;gBACrB,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;oBACf,EAAE,EAAE,UAAU;oBACd,IAAI,EAAE,WAAW;oBACjB,YAAY,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC;iBACzF,CAAC;aACH;SACF,CAAC;QAEF,cAAc,CAAC,MAAM,CAAC,CAAC;QAEvB,MAAM,OAAO,GAAG,qBAAqB,EAAE,CAAC;QACxC,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC;QAClE,MAAM,CAAC,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,KAAK,aAAa,CAAC,EAAE,eAAe,CAAC,IAAI,EAAE,EAAE;YACrG,uBAAuB;YACvB,YAAY;YACZ,eAAe;SAChB,CAAC,CAAC;QAEH,MAAM,CAAC,EAAE,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC;QACvC,MAAM,CAAC,EAAE,CAAC,qBAAqB,CAAC,UAAU,CAAC,CAAC,CAAC;QAC7C,MAAM,CAAC,EAAE,CAAC,8BAA8B,CAAC,UAAU,CAAC,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,MAAM,GAAG,mBAAmB,EAAE,CAAC;QACrC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACxF,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,eAAe,IAAI,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IACjG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAC/D,MAAM,OAAO,GAAG,gBAAgB,CAAC,aAAa,CAAC,CAAC;QAChD,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAClC,MAAM,CAAC,WAAW,CAAC,mBAAmB,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC,CAAC;QAC3D,MAAM,CAAC,WAAW,CAAC,qBAAqB,CAAC,UAAU,CAAC,EAAE,SAAS,CAAC,CAAC;QACjE,MAAM,CAAC,WAAW,CAAC,8BAA8B,CAAC,UAAU,CAAC,EAAE,SAAS,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,CAAC,WAAW,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,EAAE,KAAK,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/tests/result.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=result.test.d.ts.map

package/dist/tests/result.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"result.test.d.ts","sourceRoot":"","sources":["../../src/tests/result.test.ts"],"names":[],"mappings":""}

package/dist/tests/result.test.js

@@ -0,0 +1,46 @@
+import { describe, it } from "node:test";
+import assert from "node:assert";
+import { ok, err, errFromMessage, mapResult, flatMapResult } from "../lib/result.js";
+describe("Result<T> helpers", () => {
+    it("ok wraps data in a success result", () => {
+        const result = ok(42);
+        assert.strictEqual(result.success, true);
+        assert.strictEqual(result.data, 42);
+        assert.strictEqual(result.error, undefined);
+    });
+    it("err wraps an error in a failure result", () => {
+        const result = err({ code: "FAIL", message: "failed" });
+        assert.strictEqual(result.success, false);
+        assert.strictEqual(result.error.code, "FAIL");
+        assert.strictEqual(result.error.message, "failed");
+    });
+    it("errFromMessage builds a failure result from code and message", () => {
+        const result = errFromMessage("NOT_FOUND", "missing", 404);
+        assert.strictEqual(result.success, false);
+        assert.strictEqual(result.error.code, "NOT_FOUND");
+        assert.strictEqual(result.error.statusCode, 404);
+    });
+    it("mapResult transforms success data", async () => {
+        const mapped = mapResult(ok(2), (n) => n * 3);
+        assert.strictEqual(mapped.success, true);
+        assert.strictEqual(mapped.data, 6);
+    });
+    it("mapResult propagates errors", async () => {
+        const error = errFromMessage("BAD", "bad");
+        const mapped = mapResult(error, (n) => n * 3);
+        assert.strictEqual(mapped.success, false);
+        assert.strictEqual(mapped.error.code, "BAD");
+    });
+    it("flatMapResult chains async results", async () => {
+        const chained = await flatMapResult(ok(2), async (n) => ok(n * 3));
+        assert.strictEqual(chained.success, true);
+        assert.strictEqual(chained.data, 6);
+    });
+    it("flatMapResult short-circuits on failure", async () => {
+        const error = errFromMessage("BAD", "bad");
+        const chained = await flatMapResult(error, async () => ok(99));
+        assert.strictEqual(chained.success, false);
+        assert.strictEqual(chained.error.code, "BAD");
+    });
+});
+//# sourceMappingURL=result.test.js.map

package/dist/tests/result.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"result.test.js","sourceRoot":"","sources":["../../src/tests/result.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,cAAc,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAErF,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,MAAM,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QACtB,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACzC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACpC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,MAAM,GAAG,GAAG,CAAS,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;QAChE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC1C,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC9C,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACtE,MAAM,MAAM,GAAG,cAAc,CAAS,WAAW,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;QACnE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC1C,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QACnD,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;QACjD,MAAM,MAAM,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9C,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACzC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6BAA6B,EAAE,KAAK,IAAI,EAAE;QAC3C,MAAM,KAAK,GAAG,cAAc,CAAS,KAAK,EAAE,KAAK,CAAC,CAAC;QACnD,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9C,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC1C,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;QAClD,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACnE,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC1C,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;QACvD,MAAM,KAAK,GAAG,cAAc,CAAS,KAAK,EAAE,KAAK,CAAC,CAAC;QACnD,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAC/D,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC3C,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/tests/setup/configWriter.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=configWriter.test.d.ts.map

package/dist/tests/setup/configWriter.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"configWriter.test.d.ts","sourceRoot":"","sources":["../../../src/tests/setup/configWriter.test.ts"],"names":[],"mappings":""}

package/dist/tests/setup/configWriter.test.js

@@ -0,0 +1,55 @@
+import { describe, it } from "node:test";
+import assert from "node:assert";
+import fs from "node:fs/promises";
+import path from "node:path";
+import os from "node:os";
+import { EnvFileConfigWriter, JsonConfigWriter } from "../../services/setup/configWriter.js";
+describe("EnvFileConfigWriter", () => {
+    it("writes and reads values", async () => {
+        const dir = await fs.mkdtemp(path.join(os.tmpdir(), "keystone-env-"));
+        const file = path.join(dir, ".env");
+        const writer = new EnvFileConfigWriter(file);
+        const result = await writer.write({ DATABASE_URL: "postgres://localhost/db", REDIS_URL: "redis://localhost" });
+        assert.strictEqual(result.success, true);
+        const values = await writer.read();
+        assert.strictEqual(values.DATABASE_URL, "postgres://localhost/db");
+        assert.strictEqual(values.REDIS_URL, "redis://localhost");
+        await fs.rm(dir, { recursive: true, force: true });
+    });
+    it("preserves existing comments and ordering", async () => {
+        const dir = await fs.mkdtemp(path.join(os.tmpdir(), "keystone-env-"));
+        const file = path.join(dir, ".env");
+        await fs.writeFile(file, "# Database\nDATABASE_URL=old\n\n# Redis\nREDIS_URL=old\n");
+        const writer = new EnvFileConfigWriter(file);
+        await writer.write({ DATABASE_URL: "new" });
+        const content = await fs.readFile(file, "utf-8");
+        assert.ok(content.includes("# Database"));
+        assert.ok(content.includes("# Redis"));
+        assert.ok(content.includes("DATABASE_URL=new"));
+        assert.ok(content.includes("REDIS_URL=old"));
+        await fs.rm(dir, { recursive: true, force: true });
+    });
+    it("creates backups", async () => {
+        const dir = await fs.mkdtemp(path.join(os.tmpdir(), "keystone-env-"));
+        const file = path.join(dir, ".env");
+        await fs.writeFile(file, "DATABASE_URL=old\n");
+        const writer = new EnvFileConfigWriter(file);
+        const backup = await writer.backup();
+        assert.strictEqual(backup.success, true);
+        assert.ok(backup.data);
+        await fs.rm(dir, { recursive: true, force: true });
+    });
+});
+describe("JsonConfigWriter", () => {
+    it("writes and reads values", async () => {
+        const dir = await fs.mkdtemp(path.join(os.tmpdir(), "keystone-json-"));
+        const file = path.join(dir, "config.json");
+        const writer = new JsonConfigWriter(file);
+        const result = await writer.write({ DATABASE_URL: "postgres://localhost/db" });
+        assert.strictEqual(result.success, true);
+        const values = await writer.read();
+        assert.strictEqual(values.DATABASE_URL, "postgres://localhost/db");
+        await fs.rm(dir, { recursive: true, force: true });
+    });
+});
+//# sourceMappingURL=configWriter.test.js.map

package/dist/tests/setup/configWriter.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"configWriter.test.js","sourceRoot":"","sources":["../../../src/tests/setup/configWriter.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAC;AAE7F,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,yBAAyB,EAAE,KAAK,IAAI,EAAE;QACvC,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,eAAe,CAAC,CAAC,CAAC;QACtE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACpC,MAAM,MAAM,GAAG,IAAI,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAE7C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,EAAE,YAAY,EAAE,yBAAyB,EAAE,SAAS,EAAE,mBAAmB,EAAE,CAAC,CAAC;QAC/G,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAEzC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,YAAY,EAAE,yBAAyB,CAAC,CAAC;QACnE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;QAE1D,MAAM,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;QACxD,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,eAAe,CAAC,CAAC,CAAC;QACtE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACpC,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,0DAA0D,CAAC,CAAC;QAErF,MAAM,MAAM,GAAG,IAAI,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAC7C,MAAM,MAAM,CAAC,KAAK,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;QAE5C,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACjD,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC;QAC1C,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;QACvC,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC,CAAC;QAChD,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC;QAE7C,MAAM,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iBAAiB,EAAE,KAAK,IAAI,EAAE;QAC/B,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,eAAe,CAAC,CAAC,CAAC;QACtE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACpC,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,oBAAoB,CAAC,CAAC;QAE/C,MAAM,MAAM,GAAG,IAAI,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAC7C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;QACrC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACzC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAEvB,MAAM,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,yBAAyB,EAAE,KAAK,IAAI,EAAE;QACvC,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,gBAAgB,CAAC,CAAC,CAAC;QACvE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC;QAE1C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,EAAE,YAAY,EAAE,yBAAyB,EAAE,CAAC,CAAC;QAC/E,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAEzC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,YAAY,EAAE,yBAAyB,CAAC,CAAC;QAEnE,MAAM,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/tests/setup/validation.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=validation.test.d.ts.map

package/dist/tests/setup/validation.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.test.d.ts","sourceRoot":"","sources":["../../../src/tests/setup/validation.test.ts"],"names":[],"mappings":""}

package/dist/tests/setup/validation.test.js

@@ -0,0 +1,26 @@
+import { describe, it } from "node:test";
+import assert from "node:assert";
+import { validateDatabase, validateRedis } from "../../services/setup/validation.js";
+describe("setup validation", () => {
+    it("rejects missing database URL", async () => {
+        const result = await validateDatabase({ databaseUrl: "" });
+        assert.strictEqual(result.success, false);
+        assert.strictEqual(result.error?.code, "MISSING_DATABASE_URL");
+    });
+    it("fails for unreachable database", async () => {
+        const result = await validateDatabase({ databaseUrl: "postgresql://invalid:5432/db" });
+        assert.strictEqual(result.success, false);
+        assert.strictEqual(result.error?.code, "DATABASE_VALIDATION_FAILED");
+    });
+    it("rejects missing redis URL", async () => {
+        const result = await validateRedis({ redisUrl: "" });
+        assert.strictEqual(result.success, false);
+        assert.strictEqual(result.error?.code, "MISSING_REDIS_URL");
+    });
+    it("fails for unreachable redis", async () => {
+        const result = await validateRedis({ redisUrl: "redis://invalid:6379" });
+        assert.strictEqual(result.success, false);
+        assert.strictEqual(result.error?.code, "REDIS_VALIDATION_FAILED");
+    });
+});
+//# sourceMappingURL=validation.test.js.map

package/dist/tests/setup/validation.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.test.js","sourceRoot":"","sources":["../../../src/tests/setup/validation.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,oCAAoC,CAAC;AAErF,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,8BAA8B,EAAE,KAAK,IAAI,EAAE;QAC5C,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;QAC3D,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC1C,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,sBAAsB,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;QAC9C,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,EAAE,WAAW,EAAE,8BAA8B,EAAE,CAAC,CAAC;QACvF,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC1C,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,4BAA4B,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2BAA2B,EAAE,KAAK,IAAI,EAAE;QACzC,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;QACrD,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC1C,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,mBAAmB,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6BAA6B,EAAE,KAAK,IAAI,EAAE;QAC3C,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,EAAE,QAAQ,EAAE,sBAAsB,EAAE,CAAC,CAAC;QACzE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC1C,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,yBAAyB,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/tests/smoke.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=smoke.test.d.ts.map

package/dist/tests/smoke.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"smoke.test.d.ts","sourceRoot":"","sources":["../../src/tests/smoke.test.ts"],"names":[],"mappings":""}

package/dist/tests/smoke.test.js

@@ -0,0 +1,124 @@
+import { describe, it, before, after } from "node:test";
+import assert from "node:assert";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+process.env.DATABASE_URL = process.env.DATABASE_URL || "postgresql://hilbras:hilbras@localhost:5432/hilbras";
+process.env.ZITADEL_DOMAIN = process.env.ZITADEL_DOMAIN || "http://localhost:8080";
+process.env.ZITADEL_CLIENT_ID = process.env.ZITADEL_CLIENT_ID || "test-client";
+process.env.ZITADEL_CLIENT_SECRET = process.env.ZITADEL_CLIENT_SECRET || "test-secret";
+// Generate an ephemeral JWT key pair so JWKS and auth tests don't need the secrets table.
+const { generateKeyPair, exportPKCS8, exportSPKI } = await import("jose");
+const jwtPair = await generateKeyPair("RS256", { extractable: true });
+process.env.JWT_PRIVATE_KEY = await exportPKCS8(jwtPair.privateKey);
+process.env.JWT_PUBLIC_KEY = await exportSPKI(jwtPair.publicKey);
+const __dirname = path.dirname(fileURLToPath(import.meta.url));
+let dbAvailable = false;
+before(async () => {
+    try {
+        const { migrate } = await import("drizzle-orm/postgres-js/migrator");
+        const { db } = await import("../db/index.js");
+        await migrate(db, { migrationsFolder: path.resolve(__dirname, "../db/migrations") });
+        dbAvailable = true;
+    }
+    catch (err) {
+        console.warn("Postgres not available; skipping DB-dependent smoke tests:", err.message);
+    }
+});
+const { buildApp } = await import("../index.js");
+// The postgres pool (db/index.ts) and the shared lazy ioredis client
+// (services/redis.ts, used by the global rate limiter on every request) are
+// process-wide singletons that app.close() does not release. Without this,
+// open sockets keep the node:test process alive after all tests finish.
+after(async () => {
+    const { closeDb } = await import("../db/index.js");
+    const { redis } = await import("../services/redis.js");
+    await closeDb().catch(() => { });
+    try {
+        if (redis.status !== "end")
+            await redis.quit();
+    }
+    catch {
+        redis.disconnect();
+    }
+});
+describe("Hilbras Keystone smoke test", () => {
+    it("boots and responds to /health", async () => {
+        const app = await buildApp();
+        const res = await app.inject({ method: "GET", url: "/health" });
+        assert.strictEqual(res.statusCode, 200);
+        const body = JSON.parse(res.body);
+        assert.strictEqual(body.status, "ok");
+        await app.close();
+    });
+    it("serves OIDC discovery document", async () => {
+        const app = await buildApp();
+        const res = await app.inject({ method: "GET", url: "/.well-known/openid-configuration" });
+        assert.strictEqual(res.statusCode, 200);
+        const body = JSON.parse(res.body);
+        assert.strictEqual(body.response_types_supported[0], "code");
+        assert.ok(body.token_endpoint_auth_methods_supported.includes("client_secret_basic"));
+        await app.close();
+    });
+    it("serves JWKS", async () => {
+        const app = await buildApp();
+        const res = await app.inject({ method: "GET", url: "/.well-known/jwks.json" });
+        assert.strictEqual(res.statusCode, 200);
+        const body = JSON.parse(res.body);
+        assert.ok(Array.isArray(body.keys));
+        await app.close();
+    });
+    it("serves Prometheus metrics", async () => {
+        const app = await buildApp();
+        const res = await app.inject({ method: "GET", url: "/metrics" });
+        assert.strictEqual(res.statusCode, 200);
+        assert.ok(res.body.includes("keystone_http_requests_total"));
+        await app.close();
+    });
+    it("requires authentication for /v1/authz/check", async () => {
+        const app = await buildApp();
+        const res = await app.inject({
+            method: "POST",
+            url: "/v1/authz/check",
+            payload: { resource: "application", action: "read" },
+        });
+        assert.strictEqual(res.statusCode, 401);
+        await app.close();
+    });
+    it("lists federation providers", async () => {
+        const app = await buildApp();
+        const res = await app.inject({ method: "GET", url: "/federation/providers" });
+        assert.strictEqual(res.statusCode, 200);
+        const body = JSON.parse(res.body);
+        assert.ok(Array.isArray(body.providers));
+        assert.ok(body.providers.some((p) => p.type === "google"));
+        await app.close();
+    });
+    it("exposes admin permissions endpoint", async () => {
+        const app = await buildApp();
+        const res = await app.inject({ method: "GET", url: "/v1/admin/permissions" });
+        assert.strictEqual(res.statusCode, 401);
+        await app.close();
+    });
+    (dbAvailable ? it : it.skip)("registers and logs in a local password user without Zitadel", async () => {
+        const app = await buildApp();
+        const email = `smoke-${Date.now()}@example.com`;
+        const registerRes = await app.inject({
+            method: "POST",
+            url: "/auth/register",
+            payload: { username: `smoke${Date.now()}`, email, password: "SmokeTest123!" },
+        });
+        assert.strictEqual(registerRes.statusCode, 200);
+        const registerBody = JSON.parse(registerRes.body);
+        assert.strictEqual(registerBody.user.email, email);
+        const loginRes = await app.inject({
+            method: "POST",
+            url: "/auth/login",
+            payload: { email, password: "SmokeTest123!" },
+        });
+        assert.strictEqual(loginRes.statusCode, 200);
+        const loginBody = JSON.parse(loginRes.body);
+        assert.strictEqual(loginBody.user.email, email);
+        await app.close();
+    });
+});
+//# sourceMappingURL=smoke.test.js.map

package/dist/tests/smoke.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"smoke.test.js","sourceRoot":"","sources":["../../src/tests/smoke.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AACxD,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,CAAC,GAAG,CAAC,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,qDAAqD,CAAC;AAC7G,OAAO,CAAC,GAAG,CAAC,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,uBAAuB,CAAC;AACnF,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,aAAa,CAAC;AAC/E,OAAO,CAAC,GAAG,CAAC,qBAAqB,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,aAAa,CAAC;AAEvF,0FAA0F;AAC1F,MAAM,EAAE,eAAe,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC;AAC1E,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;AACtE,OAAO,CAAC,GAAG,CAAC,eAAe,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;AACpE,OAAO,CAAC,GAAG,CAAC,cAAc,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;AAEjE,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAE/D,IAAI,WAAW,GAAG,KAAK,CAAC;AAExB,MAAM,CAAC,KAAK,IAAI,EAAE;IAChB,IAAI,CAAC;QACH,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,kCAAkC,CAAC,CAAC;QACrE,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAC9C,MAAM,OAAO,CAAC,EAAE,EAAE,EAAE,gBAAgB,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,kBAAkB,CAAC,EAAE,CAAC,CAAC;QACrF,WAAW,GAAG,IAAI,CAAC;IACrB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CAAC,4DAA4D,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;IACrG,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;AAEjD,qEAAqE;AACrE,4EAA4E;AAC5E,2EAA2E;AAC3E,wEAAwE;AACxE,KAAK,CAAC,KAAK,IAAI,EAAE;IACf,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAC;IACnD,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;IACvD,MAAM,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAChC,IAAI,CAAC;QACH,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK;YAAE,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,KAAK,CAAC,UAAU,EAAE,CAAC;IACrB,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE;IAC3C,EAAE,CAAC,+BAA+B,EAAE,KAAK,IAAI,EAAE;QAC7C,MAAM,GAAG,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC;QAChE,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QACxC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACtC,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;IACpB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;QAC9C,MAAM,GAAG,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,mCAAmC,EAAE,CAAC,CAAC;QAC1F,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QACxC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAC7D,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,qCAAqC,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAC,CAAC;QACtF,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;IACpB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,aAAa,EAAE,KAAK,IAAI,EAAE;QAC3B,MAAM,GAAG,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,wBAAwB,EAAE,CAAC,CAAC;QAC/E,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QACxC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACpC,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;IACpB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2BAA2B,EAAE,KAAK,IAAI,EAAE;QACzC,MAAM,GAAG,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC;QACjE,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QACxC,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,8BAA8B,CAAC,CAAC,CAAC;QAC7D,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;IACpB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC3D,MAAM,GAAG,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;YAC3B,MAAM,EAAE,MAAM;YACd,GAAG,EAAE,iBAAiB;YACtB,OAAO,EAAE,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE;SACrD,CAAC,CAAC;QACH,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QACxC,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;IACpB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,KAAK,IAAI,EAAE;QAC1C,MAAM,GAAG,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,uBAAuB,EAAE,CAAC,CAAC;QAC9E,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QACxC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;QACzC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAmB,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC;QAC7E,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;IACpB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;QAClD,MAAM,GAAG,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,uBAAuB,EAAE,CAAC,CAAC;QAC9E,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QACxC,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;IACpB,CAAC,CAAC,CAAC;IAEH,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QACrG,MAAM,GAAG,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,SAAS,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC;QAChD,MAAM,WAAW,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;YACnC,MAAM,EAAE,MAAM;YACd,GAAG,EAAE,gBAAgB;YACrB,OAAO,EAAE,EAAE,QAAQ,EAAE,QAAQ,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,eAAe,EAAE;SAC9E,CAAC,CAAC;QACH,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QAChD,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAClD,MAAM,CAAC,WAAW,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAEnD,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;YAChC,MAAM,EAAE,MAAM;YACd,GAAG,EAAE,aAAa;YAClB,OAAO,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,eAAe,EAAE;SAC9C,CAAC,CAAC;QACH,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QAC7C,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAChD,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;IACpB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,50 @@
+import type { User, Application, Organization, OrgMembership } from "./db/schema.js";
+import type { KeystonePlugin } from "./services/plugins/types.js";
+import type { Container } from "./container.js";
+declare module "fastify" {
+    interface FastifyRequest {
+        user?: User;
+        state: {
+            app?: Application;
+            org?: Organization;
+            membership?: OrgMembership;
+        };
+    }
+    interface FastifyInstance {
+        registerPlugin(plugin: KeystonePlugin): void;
+        container: Container;
+    }
+}
+export interface AuthCookiePayload {
+    accessToken: string;
+    refreshToken: string;
+}
+export interface TokenClaims {
+    sub: string;
+    email?: string;
+    username?: string;
+    name?: string;
+    plan?: string;
+    role?: string;
+    provider?: string;
+    org_id?: string;
+    app_id?: string;
+    client_id?: string;
+    device_fingerprint?: string;
+}
+export interface PublicUser {
+    id: string;
+    email: string;
+    username: string;
+    name: string | null;
+    avatarUrl: string | null;
+    emailVerified: boolean;
+    phoneNumber?: string | null;
+    phoneVerified?: boolean;
+    plan: string;
+    role: string;
+    provider: string;
+    metadata: Record<string, unknown>;
+}
+export declare function toPublicUser(user: User): PublicUser;
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AACrF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAEhD,OAAO,QAAQ,SAAS,CAAC;IACvB,UAAU,cAAc;QACtB,IAAI,CAAC,EAAE,IAAI,CAAC;QACZ,KAAK,EAAE;YACL,GAAG,CAAC,EAAE,WAAW,CAAC;YAClB,GAAG,CAAC,EAAE,YAAY,CAAC;YACnB,UAAU,CAAC,EAAE,aAAa,CAAC;SAC5B,CAAC;KACH;IAED,UAAU,eAAe;QACvB,cAAc,CAAC,MAAM,EAAE,cAAc,GAAG,IAAI,CAAC;QAC7C,SAAS,EAAE,SAAS,CAAC;KACtB;CACF;AAED,MAAM,WAAW,iBAAiB;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,aAAa,EAAE,OAAO,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,IAAI,GAAG,UAAU,CAenD"}

package/dist/types.js

@@ -0,0 +1,17 @@
+export function toPublicUser(user) {
+    return {
+        id: user.id,
+        email: user.email,
+        username: user.username,
+        name: user.name,
+        avatarUrl: user.avatarUrl,
+        emailVerified: user.emailVerified,
+        phoneNumber: user.phoneNumber,
+        phoneVerified: user.phoneVerified,
+        plan: user.plan,
+        role: user.role,
+        provider: user.provider,
+        metadata: (user.metadata ?? {}),
+    };
+}
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAsDA,MAAM,UAAU,YAAY,CAAC,IAAU;IACrC,OAAO;QACL,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,QAAQ,EAAE,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAA4B;KAC3D,CAAC;AACJ,CAAC"}

package/package.json

@@ -0,0 +1,69 @@
+{
+  "name": "@hilbras/keystone",
+  "version": "1.1.0",
+  "type": "module",
+  "files": [
+    "dist",
+    "src",
+    "CHANGELOG.md",
+    "README.md"
+  ],
+  "bin": {
+    "keystone": "./dist/cli.js"
+  },
+  "scripts": {
+    "dev": "tsx watch src/index.ts",
+    "dev:setup": "KEYSTONE_SETUP_MODE=true tsx watch src/setup-server.ts",
+    "dev:all": "./start.sh",
+    "build": "tsc && npm run copy:migrations",
+    "build:sdk": "cd packages/keystone-sdk && npm run build",
+    "build:all": "npm run build:sdk && npm run build && cd frontend && npm run build",
+    "copy:migrations": "mkdir -p dist/db/migrations && cp -r src/db/migrations/* dist/db/migrations/",
+    "start": "node dist/index.js",
+    "start:setup": "KEYSTONE_SETUP_MODE=true node dist/setup-server.js",
+    "typecheck": "tsc --noEmit",
+    "typecheck:all": "npm run typecheck && cd frontend && npm run build",
+    "db:generate": "drizzle-kit generate",
+    "db:migrate": "drizzle-kit migrate",
+    "db:studio": "drizzle-kit studio",
+    "db:seed": "tsx src/db/seed.ts",
+    "test": "node --test --test-force-exit --test-timeout=60000 dist/tests/*.test.js dist/tests/**/*.test.js",
+    "test:all": "npm test && cd frontend && npm run test:e2e",
+    "setup": "./install.sh",
+    "start:all": "./start.sh"
+  },
+  "dependencies": {
+    "@fastify/cookie": "^10.0.0",
+    "@fastify/cors": "^10.0.0",
+    "@fastify/static": "^8.3.0",
+    "@fastify/swagger": "^9.0.0",
+    "@fastify/swagger-ui": "^5.0.0",
+    "@opentelemetry/api": "^1.9.1",
+    "@opentelemetry/auto-instrumentations-node": "^0.78.0",
+    "@opentelemetry/sdk-node": "^0.220.0",
+    "@simplewebauthn/server": "^13.3.2",
+    "argon2": "^0.44.0",
+    "bullmq": "^5.80.2",
+    "commander": "^12.1.0",
+    "dotenv": "^16.4.5",
+    "drizzle-orm": "^0.31.2",
+    "fastify": "^5.0.0",
+    "fastify-plugin": "^5.0.0",
+    "ioredis": "^5.4.0",
+    "jose": "^5.6.0",
+    "nodemailer": "^9.0.3",
+    "otpauth": "^9.5.1",
+    "postgres": "^3.4.4",
+    "prom-client": "^15.1.3",
+    "samlify": "^2.13.1",
+    "zod": "^3.23.8"
+  },
+  "devDependencies": {
+    "@types/node": "^20.14.0",
+    "@types/nodemailer": "^8.0.1",
+    "drizzle-kit": "^0.22.0",
+    "light-my-request": "^6.0.0",
+    "tsx": "^4.15.0",
+    "typescript": "^5.4.0"
+  }
+}