@indecisivedev/openplan 0.2.0-alpha.2

package/dist/db.js

@@ -0,0 +1,388 @@
+import { config } from "./config.js";
+import { sha256 } from "./crypto.js";
+import { database } from "./database.js";
+import { newInternalId } from "./ids.js";
+export const publicUploadAuth = {
+    keyHash: "",
+    id: "key_public_upload",
+    account_id: "acct_public_upload",
+    name: "Public Uploads",
+    account_name: "Public Uploads"
+};
+export const pool = database;
+export async function initDb() {
+    await database.init();
+    if (database.kind === "sqlite") {
+        await ensurePublicUploadApiKey();
+        return;
+    }
+    await pool.query(`
+    CREATE TABLE IF NOT EXISTS accounts (
+      id TEXT PRIMARY KEY,
+      name TEXT NOT NULL,
+      created_at TIMESTAMPTZ NOT NULL DEFAULT now(),
+      updated_at TIMESTAMPTZ NOT NULL DEFAULT now()
+    );
+
+    CREATE TABLE IF NOT EXISTS draft_access_policies (
+      id TEXT PRIMARY KEY,
+      mode TEXT NOT NULL CHECK (mode IN ('private', 'password', 'public')),
+      password_algorithm TEXT,
+      password_iterations INTEGER,
+      password_salt TEXT,
+      password_hash TEXT,
+      credential_revision INTEGER NOT NULL DEFAULT 1,
+      created_by_account_id TEXT NOT NULL REFERENCES accounts(id),
+      created_at TIMESTAMPTZ NOT NULL DEFAULT now(),
+      CHECK (
+        (mode = 'password' AND password_algorithm IS NOT NULL AND password_iterations IS NOT NULL
+          AND password_salt IS NOT NULL AND password_hash IS NOT NULL)
+        OR
+        (mode <> 'password' AND password_algorithm IS NULL AND password_iterations IS NULL
+          AND password_salt IS NULL AND password_hash IS NULL)
+      )
+    );
+
+    CREATE TABLE IF NOT EXISTS api_keys (
+      id TEXT PRIMARY KEY,
+      account_id TEXT NOT NULL REFERENCES accounts(id),
+      name TEXT NOT NULL,
+      key_hash TEXT NOT NULL UNIQUE,
+      created_at TIMESTAMPTZ NOT NULL DEFAULT now(),
+      last_used_at TIMESTAMPTZ,
+      revoked_at TIMESTAMPTZ
+    );
+
+    CREATE TABLE IF NOT EXISTS drafts (
+      id TEXT PRIMARY KEY,
+      account_id TEXT NOT NULL REFERENCES accounts(id),
+      title TEXT NOT NULL,
+      description TEXT,
+      current_version_id TEXT,
+      repo_org TEXT,
+      repo_name TEXT,
+      repo_host TEXT,
+      created_at TIMESTAMPTZ NOT NULL DEFAULT now(),
+      updated_at TIMESTAMPTZ NOT NULL DEFAULT now(),
+      deleted_at TIMESTAMPTZ,
+      disabled_at TIMESTAMPTZ,
+      disabled_reason TEXT,
+      default_access_policy_id TEXT REFERENCES draft_access_policies(id)
+    );
+
+    CREATE TABLE IF NOT EXISTS draft_versions (
+      id TEXT PRIMARY KEY,
+      draft_id TEXT NOT NULL REFERENCES drafts(id),
+      version_number INTEGER NOT NULL,
+      object_key TEXT NOT NULL,
+      content_hash TEXT NOT NULL,
+      file_size INTEGER NOT NULL,
+      created_at TIMESTAMPTZ NOT NULL DEFAULT now(),
+      created_by_api_key_id TEXT NOT NULL REFERENCES api_keys(id),
+      source_ip TEXT,
+      user_agent TEXT,
+      cli_version TEXT,
+      git_branch TEXT,
+      git_commit_sha TEXT,
+      git_commit_subject TEXT,
+      git_dirty BOOLEAN,
+      original_filename TEXT,
+      request_id TEXT,
+      has_inline_script BOOLEAN,
+      external_image_hosts JSONB,
+      ci_run_url TEXT,
+      ci_actor TEXT,
+      access_policy_id TEXT REFERENCES draft_access_policies(id),
+      UNIQUE (draft_id, version_number)
+    );
+
+    CREATE TABLE IF NOT EXISTS upload_events (
+      id TEXT PRIMARY KEY,
+      draft_id TEXT NOT NULL REFERENCES drafts(id),
+      draft_version_id TEXT REFERENCES draft_versions(id),
+      api_key_id TEXT NOT NULL REFERENCES api_keys(id),
+      event_type TEXT NOT NULL,
+      source_ip TEXT,
+      user_agent TEXT,
+      metadata_json JSONB NOT NULL DEFAULT '{}'::jsonb,
+      created_at TIMESTAMPTZ NOT NULL DEFAULT now()
+    );
+
+    CREATE TABLE IF NOT EXISTS identities (
+      id TEXT PRIMARY KEY,
+      account_id TEXT NOT NULL REFERENCES accounts(id),
+      provider TEXT NOT NULL,
+      subject TEXT NOT NULL,
+      email TEXT,
+      email_verified BOOLEAN,
+      display_name TEXT,
+      picture_url TEXT,
+      pii_subject TEXT,
+      created_at TIMESTAMPTZ NOT NULL DEFAULT now(),
+      last_login_at TIMESTAMPTZ,
+      UNIQUE (provider, subject)
+    );
+
+    CREATE TABLE IF NOT EXISTS account_access_grants (
+      viewer_account_id TEXT NOT NULL REFERENCES accounts(id),
+      resource_account_id TEXT NOT NULL REFERENCES accounts(id),
+      created_by_api_key_id TEXT NOT NULL REFERENCES api_keys(id),
+      created_at TIMESTAMPTZ NOT NULL DEFAULT now(),
+      PRIMARY KEY (viewer_account_id, resource_account_id),
+      CHECK (viewer_account_id <> resource_account_id)
+    );
+
+    CREATE TABLE IF NOT EXISTS access_policy_events (
+      id TEXT PRIMARY KEY,
+      draft_id TEXT NOT NULL REFERENCES drafts(id),
+      draft_version_id TEXT REFERENCES draft_versions(id),
+      actor_account_id TEXT NOT NULL REFERENCES accounts(id),
+      actor_api_key_id TEXT REFERENCES api_keys(id),
+      previous_mode TEXT,
+      new_mode TEXT NOT NULL,
+      policy_id TEXT REFERENCES draft_access_policies(id),
+      credential_revision INTEGER,
+      request_id TEXT,
+      created_at TIMESTAMPTZ NOT NULL DEFAULT now()
+    );
+
+    CREATE TABLE IF NOT EXISTS site_settings (
+      key TEXT PRIMARY KEY,
+      enabled BOOLEAN NOT NULL,
+      updated_by_account_id TEXT NOT NULL REFERENCES accounts(id),
+      updated_at TIMESTAMPTZ NOT NULL DEFAULT now()
+    );
+
+    CREATE TABLE IF NOT EXISTS admin_events (
+      id TEXT PRIMARY KEY,
+      actor_account_id TEXT NOT NULL REFERENCES accounts(id),
+      event_type TEXT NOT NULL,
+      setting_key TEXT NOT NULL,
+      previous_enabled BOOLEAN,
+      new_enabled BOOLEAN NOT NULL,
+      created_at TIMESTAMPTZ NOT NULL DEFAULT now()
+    );
+
+    CREATE INDEX IF NOT EXISTS draft_versions_draft_id_idx ON draft_versions(draft_id);
+    CREATE INDEX IF NOT EXISTS upload_events_draft_id_idx ON upload_events(draft_id);
+    CREATE INDEX IF NOT EXISTS drafts_account_id_idx ON drafts(account_id);
+    CREATE INDEX IF NOT EXISTS account_access_grants_resource_idx ON account_access_grants(resource_account_id, viewer_account_id);
+    CREATE INDEX IF NOT EXISTS access_policy_events_draft_idx ON access_policy_events(draft_id, created_at DESC);
+    CREATE INDEX IF NOT EXISTS admin_events_setting_idx ON admin_events(setting_key, created_at DESC);
+
+    -- Backfill columns for databases created before they were introduced.
+    ALTER TABLE identities ADD COLUMN IF NOT EXISTS email TEXT;
+    ALTER TABLE identities ADD COLUMN IF NOT EXISTS email_verified BOOLEAN;
+    ALTER TABLE identities ADD COLUMN IF NOT EXISTS display_name TEXT;
+    ALTER TABLE identities ADD COLUMN IF NOT EXISTS picture_url TEXT;
+    ALTER TABLE identities ADD COLUMN IF NOT EXISTS pii_subject TEXT;
+    ALTER TABLE drafts ADD COLUMN IF NOT EXISTS description TEXT;
+    ALTER TABLE drafts ADD COLUMN IF NOT EXISTS repo_host TEXT;
+    ALTER TABLE draft_versions ADD COLUMN IF NOT EXISTS git_commit_subject TEXT;
+    ALTER TABLE draft_versions ADD COLUMN IF NOT EXISTS git_dirty BOOLEAN;
+    ALTER TABLE draft_versions ADD COLUMN IF NOT EXISTS request_id TEXT;
+    ALTER TABLE draft_versions ADD COLUMN IF NOT EXISTS has_inline_script BOOLEAN;
+    ALTER TABLE draft_versions ADD COLUMN IF NOT EXISTS external_image_hosts JSONB;
+    ALTER TABLE draft_versions ADD COLUMN IF NOT EXISTS ci_run_url TEXT;
+    ALTER TABLE draft_versions ADD COLUMN IF NOT EXISTS ci_actor TEXT;
+    ALTER TABLE drafts ADD COLUMN IF NOT EXISTS default_access_policy_id TEXT REFERENCES draft_access_policies(id);
+    ALTER TABLE draft_versions ADD COLUMN IF NOT EXISTS access_policy_id TEXT REFERENCES draft_access_policies(id);
+    ALTER TABLE draft_versions ADD COLUMN IF NOT EXISTS status TEXT NOT NULL DEFAULT 'ready';
+    ALTER TABLE draft_versions ADD COLUMN IF NOT EXISTS failure_reason TEXT;
+    ALTER TABLE draft_versions ADD COLUMN IF NOT EXISTS finalized_at TIMESTAMPTZ;
+    ALTER TABLE draft_versions ADD COLUMN IF NOT EXISTS draft_metadata_json JSONB;
+    ALTER TABLE api_keys ADD COLUMN IF NOT EXISTS parent_api_key_id TEXT REFERENCES api_keys(id);
+    CREATE INDEX IF NOT EXISTS api_keys_parent_idx ON api_keys(parent_api_key_id);
+    CREATE INDEX IF NOT EXISTS draft_versions_status_idx ON draft_versions(status, created_at);
+  `);
+    await ensurePublicUploadApiKey();
+}
+export async function ensureBootstrapApiKey() {
+    if (!config.bootstrapApiKey)
+        return;
+    const accountId = "acct_bootstrap";
+    const apiKeyId = "key_bootstrap";
+    const keyHash = sha256(config.bootstrapApiKey);
+    await withTransaction(async (client) => {
+        // The account upsert locks the same row used by API mint/revoke operations.
+        await client.query(`
+      INSERT INTO accounts (id, name) VALUES ($1, $2)
+      ON CONFLICT (id) DO UPDATE SET updated_at = now()
+    `, [accountId, "Bootstrap Account"]);
+        const previous = await client.query("SELECT key_hash FROM api_keys WHERE id = $1", [apiKeyId]);
+        if (previous.rows[0] && previous.rows[0].key_hash !== keyHash) {
+            const descendants = `WITH RECURSIVE descendants(id) AS (
+        SELECT id FROM api_keys WHERE id = $1 AND account_id = $2
+        UNION
+        SELECT k.id FROM api_keys k JOIN descendants d ON k.parent_api_key_id = d.id
+        WHERE k.account_id = $2
+      )`;
+            // Remove grants before restoring the root so prior root grants cannot revive.
+            await client.query(`${descendants}
+        DELETE FROM account_access_grants
+        WHERE created_by_api_key_id IN (SELECT id FROM descendants)
+        RETURNING created_by_api_key_id
+      `, [apiKeyId, accountId]);
+            await client.query(`${descendants}
+        UPDATE api_keys SET revoked_at = now()
+        WHERE id IN (SELECT id FROM descendants) AND revoked_at IS NULL
+        RETURNING id
+      `, [apiKeyId, accountId]);
+        }
+        await client.query(`
+      INSERT INTO api_keys (id, account_id, name, key_hash)
+      VALUES ($1, $2, $3, $4)
+      ON CONFLICT (id) DO UPDATE SET
+        key_hash = EXCLUDED.key_hash,
+        name = EXCLUDED.name,
+        revoked_at = CASE WHEN api_keys.key_hash <> EXCLUDED.key_hash
+          THEN NULL ELSE api_keys.revoked_at END
+    `, [apiKeyId, accountId, "Bootstrap API Key", keyHash]);
+    });
+}
+export async function findApiKeyByToken(token) {
+    const keyHash = sha256(token);
+    const result = await pool.query(`
+      SELECT api_keys.id, api_keys.account_id, api_keys.name, accounts.name AS account_name
+      FROM api_keys
+      JOIN accounts ON accounts.id = api_keys.account_id
+      WHERE api_keys.key_hash = $1
+        AND api_keys.id <> $2
+        AND api_keys.revoked_at IS NULL
+      LIMIT 1
+    `, [keyHash, publicUploadAuth.id]);
+    const apiKey = result.rows[0] || null;
+    if (apiKey) {
+        Object.defineProperty(apiKey, "keyHash", { value: keyHash, enumerable: false });
+        await pool.query("UPDATE api_keys SET last_used_at = now() WHERE id = $1", [apiKey.id]);
+    }
+    return apiKey;
+}
+async function ensurePublicUploadApiKey() {
+    await pool.query(`
+      INSERT INTO accounts (id, name)
+      VALUES ($1, $2)
+      ON CONFLICT (id) DO UPDATE
+        SET name = EXCLUDED.name,
+            updated_at = now()
+    `, [publicUploadAuth.account_id, publicUploadAuth.account_name]);
+    await pool.query(`
+      INSERT INTO api_keys (id, account_id, name, key_hash)
+      VALUES ($1, $2, $3, $4)
+      ON CONFLICT (id) DO UPDATE
+        SET key_hash = EXCLUDED.key_hash,
+            name = EXCLUDED.name,
+            revoked_at = NULL
+    `, [
+        publicUploadAuth.id,
+        publicUploadAuth.account_id,
+        publicUploadAuth.name,
+        sha256("openplan-public-upload-sentinel")
+    ]);
+}
+export async function withTransaction(work) {
+    return database.transaction(work);
+}
+export function newEventId() {
+    return newInternalId();
+}
+export async function findOrCreateAccountForIdentity({ provider, subject, profile = {} }) {
+    try {
+        return await upsertIdentity({ provider, subject, profile });
+    }
+    catch (error) {
+        // Two concurrent first sign-ins (e.g. two devices) can both miss the
+        // SELECT and collide on UNIQUE(provider, subject). The loser's transaction
+        // rolled back entirely (including its orphan account), so one retry hits
+        // the existing-identity path and succeeds.
+        if (isPgError(error) && error.code === "23505") {
+            return upsertIdentity({ provider, subject, profile });
+        }
+        throw error;
+    }
+}
+async function upsertIdentity({ provider, subject, profile = {} }) {
+    const profileParams = [
+        profile.email ?? null,
+        profile.emailVerified ?? null,
+        profile.displayName ?? null,
+        profile.pictureUrl ?? null,
+        profile.piiSubject ?? null
+    ];
+    return withTransaction(async (client) => {
+        const existing = await client.query(`
+        SELECT identities.account_id, accounts.name AS account_name
+        FROM identities
+        JOIN accounts ON accounts.id = identities.account_id
+        WHERE identities.provider = $1 AND identities.subject = $2
+        LIMIT 1
+      `, [provider, subject]);
+        if (existing.rows[0]) {
+            const accountId = existing.rows[0].account_id;
+            // The verified token is authoritative for profile fields: a claim absent
+            // from this login (e.g. the user removed their Google picture) clears the
+            // stored value, so DB, session, and header always agree. pii_subject is
+            // the one exception — it is a stable identifier, not editable profile,
+            // and a transient absence must not unlink the account.
+            await client.query(`
+          UPDATE identities
+          SET last_login_at = now(),
+              email = $3,
+              email_verified = $4,
+              display_name = $5,
+              picture_url = $6,
+              pii_subject = COALESCE($7, pii_subject)
+          WHERE provider = $1 AND subject = $2
+        `, [provider, subject, ...profileParams]);
+            // Same authoritative-token rule for the derived account name: if the
+            // user clears their Google name/email, the account label degrades to the
+            // neutral fallback instead of retaining old PII.
+            const accountName = profile.displayName || profile.email || `Openplan ${subject.slice(-6)}`;
+            if (accountName !== existing.rows[0].account_name) {
+                await client.query("UPDATE accounts SET name = $2, updated_at = now() WHERE id = $1", [
+                    accountId,
+                    accountName
+                ]);
+            }
+            return { accountId, accountName, email: profile.email ?? null, pictureUrl: profile.pictureUrl ?? null };
+        }
+        const accountId = `acct_${newInternalId()}`;
+        const accountName = profile.displayName || profile.email || `Openplan ${subject.slice(-6)}`;
+        await client.query("INSERT INTO accounts (id, name) VALUES ($1, $2)", [
+            accountId,
+            accountName
+        ]);
+        await client.query(`
+        INSERT INTO identities (
+          id, account_id, provider, subject,
+          email, email_verified, display_name, picture_url, pii_subject,
+          last_login_at
+        )
+        VALUES ($1, $2, $3, $4, $5, $6, $7, $8, $9, now())
+      `, [newInternalId(), accountId, provider, subject, ...profileParams]);
+        return { accountId, accountName, email: profile.email ?? null, pictureUrl: profile.pictureUrl ?? null };
+    });
+}
+function isPgError(error) {
+    return error instanceof Error && "code" in error && typeof error.code === "string";
+}
+/** Revoking a key also invalidates every key minted through it. */
+export async function revokeApiKey(accountId, apiKeyId) {
+    // Serialize account-level mint/revoke operations, including concurrent siblings.
+    return withTransaction(async (client) => {
+        await client.query("SELECT id FROM accounts WHERE id = $1 FOR UPDATE", [accountId]);
+        const result = await client.query(`
+      WITH RECURSIVE descendants(id) AS (
+        SELECT id FROM api_keys WHERE id = $1 AND account_id = $2
+        UNION
+        SELECT k.id FROM api_keys k JOIN descendants d ON k.parent_api_key_id = d.id
+        WHERE k.account_id = $2
+      )
+      UPDATE api_keys SET revoked_at = now()
+      WHERE id IN (SELECT id FROM descendants) AND revoked_at IS NULL
+      RETURNING id
+    `, [apiKeyId, accountId]);
+        return result.rowCount > 0;
+    });
+}
+//# sourceMappingURL=db.js.map

package/dist/db.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"db.js","sourceRoot":"","sources":["../src/db.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAsC,MAAM,eAAe,CAAC;AAC7E,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAGzC,MAAM,CAAC,MAAM,gBAAgB,GAAgB;IAC3C,OAAO,EAAE,EAAE;IACX,EAAE,EAAE,mBAAmB;IACvB,UAAU,EAAE,oBAAoB;IAChC,IAAI,EAAE,gBAAgB;IACtB,YAAY,EAAE,gBAAgB;CAC/B,CAAC;AAEF,MAAM,CAAC,MAAM,IAAI,GAAG,QAAQ,CAAC;AAE7B,MAAM,CAAC,KAAK,UAAU,MAAM;IAC1B,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IACtB,IAAI,QAAQ,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC/B,MAAM,wBAAwB,EAAE,CAAC;QACjC,OAAO;IACT,CAAC;IACD,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkLhB,CAAC,CAAC;IAEH,MAAM,wBAAwB,EAAE,CAAC;AACnC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB;IACzC,IAAI,CAAC,MAAM,CAAC,eAAe;QAAE,OAAO;IAEpC,MAAM,SAAS,GAAG,gBAAgB,CAAC;IACnC,MAAM,QAAQ,GAAG,eAAe,CAAC;IACjC,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IAE/C,MAAM,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;QACrC,4EAA4E;QAC5E,MAAM,MAAM,CAAC,KAAK,CAAC;;;KAGlB,EAAE,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC,CAAC;QACrC,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,KAAK,CACjC,6CAA6C,EAAE,CAAC,QAAQ,CAAC,CAC1D,CAAC;QACF,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YAC9D,MAAM,WAAW,GAAG;;;;;QAKlB,CAAC;YACH,8EAA8E;YAC9E,MAAM,MAAM,CAAC,KAAK,CAAC,GAAG,WAAW;;;;OAIhC,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;YAC1B,MAAM,MAAM,CAAC,KAAK,CAAC,GAAG,WAAW;;;;OAIhC,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;QAC5B,CAAC;QACD,MAAM,MAAM,CAAC,KAAK,CAAC;;;;;;;;KAQlB,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,mBAAmB,EAAE,OAAO,CAAC,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,KAAa;IACnD,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAC7B;;;;;;;;KAQC,EACD,CAAC,OAAO,EAAE,gBAAgB,CAAC,EAAE,CAAC,CAC/B,CAAC;IAEF,MAAM,MAAM,GAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAA6B,IAAI,IAAI,CAAC;IACnE,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;QAChF,MAAM,IAAI,CAAC,KAAK,CAAC,wDAAwD,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAC1F,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,wBAAwB;IACrC,MAAM,IAAI,CAAC,KAAK,CACd;;;;;;KAMC,EACD,CAAC,gBAAgB,CAAC,UAAU,EAAE,gBAAgB,CAAC,YAAY,CAAC,CAC7D,CAAC;IAEF,MAAM,IAAI,CAAC,KAAK,CACd;;;;;;;KAOC,EACD;QACE,gBAAgB,CAAC,EAAE;QACnB,gBAAgB,CAAC,UAAU;QAC3B,gBAAgB,CAAC,IAAI;QACrB,MAAM,CAAC,iCAAiC,CAAC;KAC1C,CACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAI,IAA4C;IACnF,OAAO,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,UAAU;IACxB,OAAO,aAAa,EAAE,CAAC;AACzB,CAAC;AAgCD,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAAC,EACnD,QAAQ,EACR,OAAO,EACP,OAAO,GAAG,EAAE,EACE;IACd,IAAI,CAAC;QACH,OAAO,MAAM,cAAc,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;IAC9D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,qEAAqE;QACrE,2EAA2E;QAC3E,yEAAyE;QACzE,2CAA2C;QAC3C,IAAI,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC/C,OAAO,cAAc,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QACxD,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,EAC5B,QAAQ,EACR,OAAO,EACP,OAAO,GAAG,EAAE,EACE;IACd,MAAM,aAAa,GAAG;QACpB,OAAO,CAAC,KAAK,IAAI,IAAI;QACrB,OAAO,CAAC,aAAa,IAAI,IAAI;QAC7B,OAAO,CAAC,WAAW,IAAI,IAAI;QAC3B,OAAO,CAAC,UAAU,IAAI,IAAI;QAC1B,OAAO,CAAC,UAAU,IAAI,IAAI;KAC3B,CAAC;IAEF,OAAO,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;QACtC,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,KAAK,CACjC;;;;;;OAMC,EACD,CAAC,QAAQ,EAAE,OAAO,CAAC,CACpB,CAAC;QAEF,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YACrB,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;YAC9C,yEAAyE;YACzE,0EAA0E;YAC1E,wEAAwE;YACxE,uEAAuE;YACvE,uDAAuD;YACvD,MAAM,MAAM,CAAC,KAAK,CAChB;;;;;;;;;SASC,EACD,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,aAAa,CAAC,CACtC,CAAC;YAEF,qEAAqE;YACrE,yEAAyE;YACzE,iDAAiD;YACjD,MAAM,WAAW,GACf,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,KAAK,IAAI,YAAY,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1E,IAAI,WAAW,KAAK,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC;gBAClD,MAAM,MAAM,CAAC,KAAK,CAAC,iEAAiE,EAAE;oBACpF,SAAS;oBACT,WAAW;iBACZ,CAAC,CAAC;YACL,CAAC;YACD,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,IAAI,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,IAAI,EAAE,CAAC;QAC1G,CAAC;QAED,MAAM,SAAS,GAAG,QAAQ,aAAa,EAAE,EAAE,CAAC;QAC5C,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,KAAK,IAAI,YAAY,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5F,MAAM,MAAM,CAAC,KAAK,CAAC,iDAAiD,EAAE;YACpE,SAAS;YACT,WAAW;SACZ,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,KAAK,CAChB;;;;;;;OAOC,EACD,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,aAAa,CAAC,CAClE,CAAC;QACF,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,IAAI,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,IAAI,EAAE,CAAC;IAC1G,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,OAAO,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC;AACrF,CAAC;AAED,mEAAmE;AACnE,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,SAAiB,EAAE,QAAgB;IACpE,iFAAiF;IACjF,OAAO,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;QACtC,MAAM,MAAM,CAAC,KAAK,CAAC,kDAAkD,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;QACpF,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC;;;;;;;;;;KAUjC,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;QAC1B,OAAO,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/drafts.d.ts

@@ -0,0 +1,43 @@
+import type { QueryRow } from "./database.js";
+export type DateValue = Date | string;
+export interface DraftSummary {
+    draftId: string;
+    title: string;
+    description: string | null;
+    repoOrg: string | null;
+    repoName: string | null;
+    repoHost: string | null;
+    latestVersionNumber: number | null;
+    versionCount: number;
+    createdAt: DateValue;
+    updatedAt: DateValue;
+    latestVersionAt: DateValue | null;
+    disabled: boolean;
+    publicUrl: string;
+    rawUrl: string;
+}
+export interface DraftVersion extends QueryRow {
+    id: string;
+    version_number: number;
+    created_at: DateValue;
+    git_branch: string | null;
+    git_commit_sha: string | null;
+    git_commit_subject: string | null;
+    git_dirty: boolean | null;
+    file_size: number;
+}
+export interface DraftDetailResult {
+    draft: {
+        draftId: string;
+        title: string;
+        description: string | null;
+        publicUrl: string;
+    };
+    versions: DraftVersion[];
+}
+export declare function listAccountDrafts(accountId: string, { requestBaseUrl }: {
+    requestBaseUrl: string;
+}): Promise<DraftSummary[]>;
+export declare function getAccountDraftWithVersions(accountId: string, draftId: string, { requestBaseUrl }: {
+    requestBaseUrl: string;
+}): Promise<DraftDetailResult | null>;

package/dist/drafts.js

@@ -0,0 +1,90 @@
+import { pool } from "./db.js";
+import { config } from "./config.js";
+import { getDraftPublicUrl, getDraftRawUrl } from "./public-url.js";
+// The "my docs" feed: every draft owned by an account, newest first, with the
+// aggregates a dashboard needs (latest version, version count, repo). Shared
+// by GET /api/drafts and the server-rendered dashboard.
+export async function listAccountDrafts(accountId, { requestBaseUrl }) {
+    const result = await pool.query(`
+      SELECT
+        d.id,
+        d.title,
+        d.description,
+        d.repo_org,
+        d.repo_name,
+        d.repo_host,
+        d.created_at,
+        d.updated_at,
+        d.disabled_at,
+        cv.version_number AS latest_version_number,
+        cv.created_at AS latest_version_at,
+        COALESCE(vc.version_count, 0) AS version_count
+      FROM drafts d
+      LEFT JOIN draft_versions cv ON cv.id = d.current_version_id
+      LEFT JOIN (
+        SELECT draft_id, COUNT(*)::int AS version_count
+        FROM draft_versions
+        WHERE status = 'ready'
+        GROUP BY draft_id
+      ) vc ON vc.draft_id = d.id
+      WHERE d.account_id = $1
+        AND d.deleted_at IS NULL
+      ORDER BY d.updated_at DESC
+    `, [accountId]);
+    return result.rows.map((row) => ({
+        draftId: row.id,
+        title: row.title,
+        description: row.description,
+        repoOrg: row.repo_org,
+        repoName: row.repo_name,
+        repoHost: row.repo_host,
+        latestVersionNumber: row.latest_version_number === null ? null : Number(row.latest_version_number),
+        versionCount: Number(row.version_count),
+        createdAt: row.created_at,
+        updatedAt: row.updated_at,
+        latestVersionAt: row.latest_version_at,
+        disabled: Boolean(row.disabled_at),
+        publicUrl: getDraftPublicUrl({
+            draftId: row.id,
+            publicBaseUrl: config.publicBaseUrl,
+            requestBaseUrl
+        }),
+        rawUrl: getDraftRawUrl({
+            draftId: row.id,
+            publicBaseUrl: config.publicBaseUrl,
+            requestBaseUrl
+        })
+    }));
+}
+export async function getAccountDraftWithVersions(accountId, draftId, { requestBaseUrl }) {
+    const draftResult = await pool.query(`
+      SELECT *
+      FROM drafts
+      WHERE id = $1 AND account_id = $2 AND deleted_at IS NULL
+      LIMIT 1
+    `, [draftId, accountId]);
+    const draft = draftResult.rows[0];
+    if (!draft)
+        return null;
+    const versionsResult = await pool.query(`
+      SELECT id, version_number, created_at, git_branch, git_commit_sha,
+             git_commit_subject, git_dirty, file_size
+      FROM draft_versions
+      WHERE draft_id = $1 AND status = 'ready'
+      ORDER BY version_number DESC
+    `, [draftId]);
+    return {
+        draft: {
+            draftId: draft.id,
+            title: draft.title,
+            description: draft.description,
+            publicUrl: getDraftPublicUrl({
+                draftId: draft.id,
+                publicBaseUrl: config.publicBaseUrl,
+                requestBaseUrl
+            })
+        },
+        versions: versionsResult.rows
+    };
+}
+//# sourceMappingURL=drafts.js.map

package/dist/drafts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"drafts.js","sourceRoot":"","sources":["../src/drafts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAC/B,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AA+DpE,8EAA8E;AAC9E,6EAA6E;AAC7E,wDAAwD;AACxD,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,SAAiB,EACjB,EAAE,cAAc,EAA8B;IAE9C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAC7B;;;;;;;;;;;;;;;;;;;;;;;;;KAyBC,EACD,CAAC,SAAS,CAAC,CACZ,CAAC;IAEF,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAC/B,OAAO,EAAE,GAAG,CAAC,EAAE;QACf,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,QAAQ,EAAE,GAAG,CAAC,SAAS;QACvB,QAAQ,EAAE,GAAG,CAAC,SAAS;QACvB,mBAAmB,EACjB,GAAG,CAAC,qBAAqB,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,qBAAqB,CAAC;QAC/E,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC;QACvC,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,eAAe,EAAE,GAAG,CAAC,iBAAiB;QACtC,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;QAClC,SAAS,EAAE,iBAAiB,CAAC;YAC3B,OAAO,EAAE,GAAG,CAAC,EAAE;YACf,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,cAAc;SACf,CAAC;QACF,MAAM,EAAE,cAAc,CAAC;YACrB,OAAO,EAAE,GAAG,CAAC,EAAE;YACf,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,cAAc;SACf,CAAC;KACH,CAAC,CAAC,CAAC;AACN,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,SAAiB,EACjB,OAAe,EACf,EAAE,cAAc,EAA8B;IAE9C,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,KAAK,CAClC;;;;;KAKC,EACD,CAAC,OAAO,EAAE,SAAS,CAAC,CACrB,CAAC;IACF,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClC,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IAExB,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,KAAK,CACrC;;;;;;KAMC,EACD,CAAC,OAAO,CAAC,CACV,CAAC;IAEF,OAAO;QACL,KAAK,EAAE;YACL,OAAO,EAAE,KAAK,CAAC,EAAE;YACjB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,SAAS,EAAE,iBAAiB,CAAC;gBAC3B,OAAO,EAAE,KAAK,CAAC,EAAE;gBACjB,aAAa,EAAE,MAAM,CAAC,aAAa;gBACnC,cAAc;aACf,CAAC;SACH;QACD,QAAQ,EAAE,cAAc,CAAC,IAAI;KAC9B,CAAC;AACJ,CAAC"}

package/dist/feature-settings.d.ts

@@ -0,0 +1,7 @@
+export interface FeatureSetting {
+    enabled: boolean;
+    updatedByAccountId: string | null;
+    updatedAt: Date | string | null;
+}
+export declare function getBrowserLocalAnnotationsSetting(): Promise<FeatureSetting>;
+export declare function setBrowserLocalAnnotationsEnabled(actorAccountId: string, enabled: boolean): Promise<FeatureSetting>;

package/dist/feature-settings.js

@@ -0,0 +1,32 @@
+import { newEventId, pool, withTransaction } from "./db.js";
+const ANNOTATIONS_KEY = "browser_local_annotations";
+export async function getBrowserLocalAnnotationsSetting() {
+    const result = await pool.query("SELECT enabled, updated_by_account_id, updated_at FROM site_settings WHERE key = $1 LIMIT 1", [ANNOTATIONS_KEY]);
+    const row = result.rows[0];
+    return row
+        ? { enabled: row.enabled, updatedByAccountId: row.updated_by_account_id, updatedAt: row.updated_at }
+        : { enabled: false, updatedByAccountId: null, updatedAt: null };
+}
+export async function setBrowserLocalAnnotationsEnabled(actorAccountId, enabled) {
+    return withTransaction(async (client) => {
+        const previous = await client.query("SELECT enabled, updated_by_account_id, updated_at FROM site_settings WHERE key = $1 FOR UPDATE", [ANNOTATIONS_KEY]);
+        const previousEnabled = previous.rows[0]?.enabled ?? null;
+        const result = await client.query(`
+        INSERT INTO site_settings (key, enabled, updated_by_account_id)
+        VALUES ($1, $2, $3)
+        ON CONFLICT (key) DO UPDATE
+          SET enabled = EXCLUDED.enabled,
+              updated_by_account_id = EXCLUDED.updated_by_account_id,
+              updated_at = now()
+        RETURNING enabled, updated_by_account_id, updated_at
+      `, [ANNOTATIONS_KEY, enabled, actorAccountId]);
+        await client.query(`
+        INSERT INTO admin_events (
+          id, actor_account_id, event_type, setting_key, previous_enabled, new_enabled
+        ) VALUES ($1, $2, $3, $4, $5, $6)
+      `, [newEventId(), actorAccountId, "feature_setting_changed", ANNOTATIONS_KEY, previousEnabled, enabled]);
+        const row = result.rows[0];
+        return { enabled: row.enabled, updatedByAccountId: row.updated_by_account_id, updatedAt: row.updated_at };
+    });
+}
+//# sourceMappingURL=feature-settings.js.map

package/dist/feature-settings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"feature-settings.js","sourceRoot":"","sources":["../src/feature-settings.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAG5D,MAAM,eAAe,GAAG,2BAA2B,CAAC;AAcpD,MAAM,CAAC,KAAK,UAAU,iCAAiC;IACrD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAC7B,6FAA6F,EAC7F,CAAC,eAAe,CAAC,CAClB,CAAC;IACF,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3B,OAAO,GAAG;QACR,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,kBAAkB,EAAE,GAAG,CAAC,qBAAqB,EAAE,SAAS,EAAE,GAAG,CAAC,UAAU,EAAE;QACpG,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,kBAAkB,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AACpE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iCAAiC,CACrD,cAAsB,EACtB,OAAgB;IAEhB,OAAO,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;QACtC,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,KAAK,CACjC,gGAAgG,EAChG,CAAC,eAAe,CAAC,CAClB,CAAC;QACF,MAAM,eAAe,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,IAAI,CAAC;QAC1D,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAC/B;;;;;;;;OAQC,EACD,CAAC,eAAe,EAAE,OAAO,EAAE,cAAc,CAAC,CAC3C,CAAC;QACF,MAAM,MAAM,CAAC,KAAK,CAChB;;;;OAIC,EACD,CAAC,UAAU,EAAE,EAAE,cAAc,EAAE,yBAAyB,EAAE,eAAe,EAAE,eAAe,EAAE,OAAO,CAAC,CACrG,CAAC;QACF,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC;QAC5B,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,kBAAkB,EAAE,GAAG,CAAC,qBAAqB,EAAE,SAAS,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC;IAC5G,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/generated/annotation-client.d.ts

@@ -0,0 +1 @@
+export declare const ANNOTATION_CLIENT: string;