@llmops/app 0.2.2 → 0.2.3

package/dist/index.cjs

@@ -11275,7 +11275,7 @@ function initializeContext(params) {
 		external: params?.external ?? void 0
 	};
 }
-function process(schema, ctx, _params = {
+function process$1(schema, ctx, _params = {
 	path: [],
 	schemaPath: []
 }) {
@@ -11312,7 +11312,7 @@ function process(schema, ctx, _params = {
 		const parent = schema._zod.parent;
 		if (parent) {
 			if (!result.ref) result.ref = parent;
-			process(parent, ctx, params);
+			process$1(parent, ctx, params);
 			ctx.seen.get(parent).isParent = true;
 		}
 	}
@@ -11524,7 +11524,7 @@ const createToJSONSchemaMethod = (schema, processors = {}) => (params) => {
 		...params,
 		processors
 	});
-	process(schema, ctx);
+	process$1(schema, ctx);
 	extractDefs(ctx, schema);
 	return finalize(ctx, schema);
 };
@@ -11536,7 +11536,7 @@ const createStandardJSONSchemaMethod = (schema, io, processors = {}) => (params)
 		io,
 		processors
 	});
-	process(schema, ctx);
+	process$1(schema, ctx);
 	extractDefs(ctx, schema);
 	return finalize(ctx, schema);
 };
@@ -11708,7 +11708,7 @@ const arrayProcessor = (schema, ctx, _json, params) => {
 	if (typeof minimum === "number") json$1.minItems = minimum;
 	if (typeof maximum === "number") json$1.maxItems = maximum;
 	json$1.type = "array";
-	json$1.items = process(def.element, ctx, {
+	json$1.items = process$1(def.element, ctx, {
 		...params,
 		path: [...params.path, "items"]
 	});
@@ -11719,7 +11719,7 @@ const objectProcessor = (schema, ctx, _json, params) => {
 	json$1.type = "object";
 	json$1.properties = {};
 	const shape = def.shape;
-	for (const key in shape) json$1.properties[key] = process(shape[key], ctx, {
+	for (const key in shape) json$1.properties[key] = process$1(shape[key], ctx, {
 		...params,
 		path: [
 			...params.path,
@@ -11737,7 +11737,7 @@ const objectProcessor = (schema, ctx, _json, params) => {
 	if (def.catchall?._zod.def.type === "never") json$1.additionalProperties = false;
 	else if (!def.catchall) {
 		if (ctx.io === "output") json$1.additionalProperties = false;
-	} else if (def.catchall) json$1.additionalProperties = process(def.catchall, ctx, {
+	} else if (def.catchall) json$1.additionalProperties = process$1(def.catchall, ctx, {
 		...params,
 		path: [...params.path, "additionalProperties"]
 	});
@@ -11745,7 +11745,7 @@ const objectProcessor = (schema, ctx, _json, params) => {
 const unionProcessor = (schema, ctx, json$1, params) => {
 	const def = schema._zod.def;
 	const isExclusive = def.inclusive === false;
-	const options = def.options.map((x, i) => process(x, ctx, {
+	const options = def.options.map((x, i) => process$1(x, ctx, {
 		...params,
 		path: [
 			...params.path,
@@ -11758,7 +11758,7 @@ const unionProcessor = (schema, ctx, json$1, params) => {
 };
 const intersectionProcessor = (schema, ctx, json$1, params) => {
 	const def = schema._zod.def;
-	const a = process(def.left, ctx, {
+	const a = process$1(def.left, ctx, {
 		...params,
 		path: [
 			...params.path,
@@ -11766,7 +11766,7 @@ const intersectionProcessor = (schema, ctx, json$1, params) => {
 			0
 		]
 	});
-	const b = process(def.right, ctx, {
+	const b = process$1(def.right, ctx, {
 		...params,
 		path: [
 			...params.path,
@@ -11783,7 +11783,7 @@ const tupleProcessor = (schema, ctx, _json, params) => {
 	json$1.type = "array";
 	const prefixPath = ctx.target === "draft-2020-12" ? "prefixItems" : "items";
 	const restPath = ctx.target === "draft-2020-12" ? "items" : ctx.target === "openapi-3.0" ? "items" : "additionalItems";
-	const prefixItems = def.items.map((x, i) => process(x, ctx, {
+	const prefixItems = def.items.map((x, i) => process$1(x, ctx, {
 		...params,
 		path: [
 			...params.path,
@@ -11791,7 +11791,7 @@ const tupleProcessor = (schema, ctx, _json, params) => {
 			i
 		]
 	}));
-	const rest = def.rest ? process(def.rest, ctx, {
+	const rest = def.rest ? process$1(def.rest, ctx, {
 		...params,
 		path: [
 			...params.path,
@@ -11822,7 +11822,7 @@ const recordProcessor = (schema, ctx, _json, params) => {
 	const keyType = def.keyType;
 	const patterns = keyType._zod.bag?.patterns;
 	if (def.mode === "loose" && patterns && patterns.size > 0) {
-		const valueSchema = process(def.valueType, ctx, {
+		const valueSchema = process$1(def.valueType, ctx, {
 			...params,
 			path: [
 				...params.path,
@@ -11833,11 +11833,11 @@ const recordProcessor = (schema, ctx, _json, params) => {
 		json$1.patternProperties = {};
 		for (const pattern of patterns) json$1.patternProperties[pattern.source] = valueSchema;
 	} else {
-		if (ctx.target === "draft-07" || ctx.target === "draft-2020-12") json$1.propertyNames = process(def.keyType, ctx, {
+		if (ctx.target === "draft-07" || ctx.target === "draft-2020-12") json$1.propertyNames = process$1(def.keyType, ctx, {
 			...params,
 			path: [...params.path, "propertyNames"]
 		});
-		json$1.additionalProperties = process(def.valueType, ctx, {
+		json$1.additionalProperties = process$1(def.valueType, ctx, {
 			...params,
 			path: [...params.path, "additionalProperties"]
 		});
@@ -11850,7 +11850,7 @@ const recordProcessor = (schema, ctx, _json, params) => {
 };
 const nullableProcessor = (schema, ctx, json$1, params) => {
 	const def = schema._zod.def;
-	const inner = process(def.innerType, ctx, params);
+	const inner = process$1(def.innerType, ctx, params);
 	const seen = ctx.seen.get(schema);
 	if (ctx.target === "openapi-3.0") {
 		seen.ref = def.innerType;
@@ -11859,27 +11859,27 @@ const nullableProcessor = (schema, ctx, json$1, params) => {
 };
 const nonoptionalProcessor = (schema, ctx, _json, params) => {
 	const def = schema._zod.def;
-	process(def.innerType, ctx, params);
+	process$1(def.innerType, ctx, params);
 	const seen = ctx.seen.get(schema);
 	seen.ref = def.innerType;
 };
 const defaultProcessor = (schema, ctx, json$1, params) => {
 	const def = schema._zod.def;
-	process(def.innerType, ctx, params);
+	process$1(def.innerType, ctx, params);
 	const seen = ctx.seen.get(schema);
 	seen.ref = def.innerType;
 	json$1.default = JSON.parse(JSON.stringify(def.defaultValue));
 };
 const prefaultProcessor = (schema, ctx, json$1, params) => {
 	const def = schema._zod.def;
-	process(def.innerType, ctx, params);
+	process$1(def.innerType, ctx, params);
 	const seen = ctx.seen.get(schema);
 	seen.ref = def.innerType;
 	if (ctx.io === "input") json$1._prefault = JSON.parse(JSON.stringify(def.defaultValue));
 };
 const catchProcessor = (schema, ctx, json$1, params) => {
 	const def = schema._zod.def;
-	process(def.innerType, ctx, params);
+	process$1(def.innerType, ctx, params);
 	const seen = ctx.seen.get(schema);
 	seen.ref = def.innerType;
 	let catchValue;
@@ -11893,32 +11893,32 @@ const catchProcessor = (schema, ctx, json$1, params) => {
 const pipeProcessor = (schema, ctx, _json, params) => {
 	const def = schema._zod.def;
 	const innerType = ctx.io === "input" ? def.in._zod.def.type === "transform" ? def.out : def.in : def.out;
-	process(innerType, ctx, params);
+	process$1(innerType, ctx, params);
 	const seen = ctx.seen.get(schema);
 	seen.ref = innerType;
 };
 const readonlyProcessor = (schema, ctx, json$1, params) => {
 	const def = schema._zod.def;
-	process(def.innerType, ctx, params);
+	process$1(def.innerType, ctx, params);
 	const seen = ctx.seen.get(schema);
 	seen.ref = def.innerType;
 	json$1.readOnly = true;
 };
 const promiseProcessor = (schema, ctx, _json, params) => {
 	const def = schema._zod.def;
-	process(def.innerType, ctx, params);
+	process$1(def.innerType, ctx, params);
 	const seen = ctx.seen.get(schema);
 	seen.ref = def.innerType;
 };
 const optionalProcessor = (schema, ctx, _json, params) => {
 	const def = schema._zod.def;
-	process(def.innerType, ctx, params);
+	process$1(def.innerType, ctx, params);
 	const seen = ctx.seen.get(schema);
 	seen.ref = def.innerType;
 };
 const lazyProcessor = (schema, ctx, _json, params) => {
 	const innerType = schema._zod.innerType;
-	process(innerType, ctx, params);
+	process$1(innerType, ctx, params);
 	const seen = ctx.seen.get(schema);
 	seen.ref = innerType;
 };
@@ -11973,7 +11973,7 @@ function toJSONSchema(input, params) {
 		const defs = {};
 		for (const entry of registry$1._idmap.entries()) {
 			const [_, schema] = entry;
-			process(schema, ctx$1);
+			process$1(schema, ctx$1);
 		}
 		const schemas = {};
 		ctx$1.external = {
@@ -11993,7 +11993,7 @@ function toJSONSchema(input, params) {
 		...params,
 		processors: allProcessors
 	});
-	process(input, ctx);
+	process$1(input, ctx);
 	extractDefs(ctx, input);
 	return finalize(ctx, input);
 }
@@ -12070,7 +12070,7 @@ var JSONSchemaGenerator = class {
 		path: [],
 		schemaPath: []
 	}) {
-		return process(schema, this.ctx, _params);
+		return process$1(schema, this.ctx, _params);
 	}
 	/**
 	* Emit the final JSON Schema after processing.
@@ -12354,7 +12354,7 @@ var core_exports = /* @__PURE__ */ __export({
 	parse: () => parse$1,
 	parseAsync: () => parseAsync$1,
 	prettifyError: () => prettifyError,
-	process: () => process,
+	process: () => process$1,
 	regexes: () => regexes_exports,
 	registry: () => registry,
 	safeDecode: () => safeDecode$1,
@@ -16327,6 +16327,11 @@ const createMigrationMiddleware = (config$1) => {
 * with the correct schema (search_path) configuration.
 *
 * Only initializes the auth client for /api/* routes where it's actually needed.
+*
+* Origin validation:
+* - Local dev: Works automatically via baseURL derived from request
+* - Production: Set AUTH_TRUSTED_ORIGINS env var (comma-separated)
+*   e.g., AUTH_TRUSTED_ORIGINS=https://myapp.railway.app,https://myapp.com
 */
 const createAuthClientMiddleware = () => {
 	return async (c, next) => {
@@ -16339,13 +16344,15 @@ const createAuthClientMiddleware = () => {
 		const workspaceSettings = (0, __llmops_core.createWorkspaceSettingsDataLayer)(kyselyDb);
 		const url$2 = new URL(c.req.url);
 		const baseURL = `${url$2.protocol}//${url$2.host}`;
+		const trustedOriginsEnv = process.env.AUTH_TRUSTED_ORIGINS;
+		const trustedOrigins = trustedOriginsEnv ? trustedOriginsEnv.split(",").map((origin) => origin.trim()) : [];
 		const authClient = (0, better_auth.betterAuth)((0, __llmops_core.getAuthClientOptions)({
 			database: {
 				db: kyselyDb,
 				type: dbType
 			},
 			baseURL,
-			trustedOrigins: [baseURL],
+			trustedOrigins,
 			onUserCreated: async (userId) => {
 				await workspaceSettings.setSuperAdminId(userId);
 				await workspaceSettings.markSetupComplete();

package/dist/index.mjs

@@ -11249,7 +11249,7 @@ function initializeContext(params) {
 		external: params?.external ?? void 0
 	};
 }
-function process(schema, ctx, _params = {
+function process$1(schema, ctx, _params = {
 	path: [],
 	schemaPath: []
 }) {
@@ -11286,7 +11286,7 @@ function process(schema, ctx, _params = {
 		const parent = schema._zod.parent;
 		if (parent) {
 			if (!result.ref) result.ref = parent;
-			process(parent, ctx, params);
+			process$1(parent, ctx, params);
 			ctx.seen.get(parent).isParent = true;
 		}
 	}
@@ -11498,7 +11498,7 @@ const createToJSONSchemaMethod = (schema, processors = {}) => (params) => {
 		...params,
 		processors
 	});
-	process(schema, ctx);
+	process$1(schema, ctx);
 	extractDefs(ctx, schema);
 	return finalize(ctx, schema);
 };
@@ -11510,7 +11510,7 @@ const createStandardJSONSchemaMethod = (schema, io, processors = {}) => (params)
 		io,
 		processors
 	});
-	process(schema, ctx);
+	process$1(schema, ctx);
 	extractDefs(ctx, schema);
 	return finalize(ctx, schema);
 };
@@ -11682,7 +11682,7 @@ const arrayProcessor = (schema, ctx, _json, params) => {
 	if (typeof minimum === "number") json$1.minItems = minimum;
 	if (typeof maximum === "number") json$1.maxItems = maximum;
 	json$1.type = "array";
-	json$1.items = process(def.element, ctx, {
+	json$1.items = process$1(def.element, ctx, {
 		...params,
 		path: [...params.path, "items"]
 	});
@@ -11693,7 +11693,7 @@ const objectProcessor = (schema, ctx, _json, params) => {
 	json$1.type = "object";
 	json$1.properties = {};
 	const shape = def.shape;
-	for (const key in shape) json$1.properties[key] = process(shape[key], ctx, {
+	for (const key in shape) json$1.properties[key] = process$1(shape[key], ctx, {
 		...params,
 		path: [
 			...params.path,
@@ -11711,7 +11711,7 @@ const objectProcessor = (schema, ctx, _json, params) => {
 	if (def.catchall?._zod.def.type === "never") json$1.additionalProperties = false;
 	else if (!def.catchall) {
 		if (ctx.io === "output") json$1.additionalProperties = false;
-	} else if (def.catchall) json$1.additionalProperties = process(def.catchall, ctx, {
+	} else if (def.catchall) json$1.additionalProperties = process$1(def.catchall, ctx, {
 		...params,
 		path: [...params.path, "additionalProperties"]
 	});
@@ -11719,7 +11719,7 @@ const objectProcessor = (schema, ctx, _json, params) => {
 const unionProcessor = (schema, ctx, json$1, params) => {
 	const def = schema._zod.def;
 	const isExclusive = def.inclusive === false;
-	const options = def.options.map((x, i) => process(x, ctx, {
+	const options = def.options.map((x, i) => process$1(x, ctx, {
 		...params,
 		path: [
 			...params.path,
@@ -11732,7 +11732,7 @@ const unionProcessor = (schema, ctx, json$1, params) => {
 };
 const intersectionProcessor = (schema, ctx, json$1, params) => {
 	const def = schema._zod.def;
-	const a = process(def.left, ctx, {
+	const a = process$1(def.left, ctx, {
 		...params,
 		path: [
 			...params.path,
@@ -11740,7 +11740,7 @@ const intersectionProcessor = (schema, ctx, json$1, params) => {
 			0
 		]
 	});
-	const b = process(def.right, ctx, {
+	const b = process$1(def.right, ctx, {
 		...params,
 		path: [
 			...params.path,
@@ -11757,7 +11757,7 @@ const tupleProcessor = (schema, ctx, _json, params) => {
 	json$1.type = "array";
 	const prefixPath = ctx.target === "draft-2020-12" ? "prefixItems" : "items";
 	const restPath = ctx.target === "draft-2020-12" ? "items" : ctx.target === "openapi-3.0" ? "items" : "additionalItems";
-	const prefixItems = def.items.map((x, i) => process(x, ctx, {
+	const prefixItems = def.items.map((x, i) => process$1(x, ctx, {
 		...params,
 		path: [
 			...params.path,
@@ -11765,7 +11765,7 @@ const tupleProcessor = (schema, ctx, _json, params) => {
 			i
 		]
 	}));
-	const rest = def.rest ? process(def.rest, ctx, {
+	const rest = def.rest ? process$1(def.rest, ctx, {
 		...params,
 		path: [
 			...params.path,
@@ -11796,7 +11796,7 @@ const recordProcessor = (schema, ctx, _json, params) => {
 	const keyType = def.keyType;
 	const patterns = keyType._zod.bag?.patterns;
 	if (def.mode === "loose" && patterns && patterns.size > 0) {
-		const valueSchema = process(def.valueType, ctx, {
+		const valueSchema = process$1(def.valueType, ctx, {
 			...params,
 			path: [
 				...params.path,
@@ -11807,11 +11807,11 @@ const recordProcessor = (schema, ctx, _json, params) => {
 		json$1.patternProperties = {};
 		for (const pattern of patterns) json$1.patternProperties[pattern.source] = valueSchema;
 	} else {
-		if (ctx.target === "draft-07" || ctx.target === "draft-2020-12") json$1.propertyNames = process(def.keyType, ctx, {
+		if (ctx.target === "draft-07" || ctx.target === "draft-2020-12") json$1.propertyNames = process$1(def.keyType, ctx, {
 			...params,
 			path: [...params.path, "propertyNames"]
 		});
-		json$1.additionalProperties = process(def.valueType, ctx, {
+		json$1.additionalProperties = process$1(def.valueType, ctx, {
 			...params,
 			path: [...params.path, "additionalProperties"]
 		});
@@ -11824,7 +11824,7 @@ const recordProcessor = (schema, ctx, _json, params) => {
 };
 const nullableProcessor = (schema, ctx, json$1, params) => {
 	const def = schema._zod.def;
-	const inner = process(def.innerType, ctx, params);
+	const inner = process$1(def.innerType, ctx, params);
 	const seen = ctx.seen.get(schema);
 	if (ctx.target === "openapi-3.0") {
 		seen.ref = def.innerType;
@@ -11833,27 +11833,27 @@ const nullableProcessor = (schema, ctx, json$1, params) => {
 };
 const nonoptionalProcessor = (schema, ctx, _json, params) => {
 	const def = schema._zod.def;
-	process(def.innerType, ctx, params);
+	process$1(def.innerType, ctx, params);
 	const seen = ctx.seen.get(schema);
 	seen.ref = def.innerType;
 };
 const defaultProcessor = (schema, ctx, json$1, params) => {
 	const def = schema._zod.def;
-	process(def.innerType, ctx, params);
+	process$1(def.innerType, ctx, params);
 	const seen = ctx.seen.get(schema);
 	seen.ref = def.innerType;
 	json$1.default = JSON.parse(JSON.stringify(def.defaultValue));
 };
 const prefaultProcessor = (schema, ctx, json$1, params) => {
 	const def = schema._zod.def;
-	process(def.innerType, ctx, params);
+	process$1(def.innerType, ctx, params);
 	const seen = ctx.seen.get(schema);
 	seen.ref = def.innerType;
 	if (ctx.io === "input") json$1._prefault = JSON.parse(JSON.stringify(def.defaultValue));
 };
 const catchProcessor = (schema, ctx, json$1, params) => {
 	const def = schema._zod.def;
-	process(def.innerType, ctx, params);
+	process$1(def.innerType, ctx, params);
 	const seen = ctx.seen.get(schema);
 	seen.ref = def.innerType;
 	let catchValue;
@@ -11867,32 +11867,32 @@ const catchProcessor = (schema, ctx, json$1, params) => {
 const pipeProcessor = (schema, ctx, _json, params) => {
 	const def = schema._zod.def;
 	const innerType = ctx.io === "input" ? def.in._zod.def.type === "transform" ? def.out : def.in : def.out;
-	process(innerType, ctx, params);
+	process$1(innerType, ctx, params);
 	const seen = ctx.seen.get(schema);
 	seen.ref = innerType;
 };
 const readonlyProcessor = (schema, ctx, json$1, params) => {
 	const def = schema._zod.def;
-	process(def.innerType, ctx, params);
+	process$1(def.innerType, ctx, params);
 	const seen = ctx.seen.get(schema);
 	seen.ref = def.innerType;
 	json$1.readOnly = true;
 };
 const promiseProcessor = (schema, ctx, _json, params) => {
 	const def = schema._zod.def;
-	process(def.innerType, ctx, params);
+	process$1(def.innerType, ctx, params);
 	const seen = ctx.seen.get(schema);
 	seen.ref = def.innerType;
 };
 const optionalProcessor = (schema, ctx, _json, params) => {
 	const def = schema._zod.def;
-	process(def.innerType, ctx, params);
+	process$1(def.innerType, ctx, params);
 	const seen = ctx.seen.get(schema);
 	seen.ref = def.innerType;
 };
 const lazyProcessor = (schema, ctx, _json, params) => {
 	const innerType = schema._zod.innerType;
-	process(innerType, ctx, params);
+	process$1(innerType, ctx, params);
 	const seen = ctx.seen.get(schema);
 	seen.ref = innerType;
 };
@@ -11947,7 +11947,7 @@ function toJSONSchema(input, params) {
 		const defs = {};
 		for (const entry of registry$1._idmap.entries()) {
 			const [_, schema] = entry;
-			process(schema, ctx$1);
+			process$1(schema, ctx$1);
 		}
 		const schemas = {};
 		ctx$1.external = {
@@ -11967,7 +11967,7 @@ function toJSONSchema(input, params) {
 		...params,
 		processors: allProcessors
 	});
-	process(input, ctx);
+	process$1(input, ctx);
 	extractDefs(ctx, input);
 	return finalize(ctx, input);
 }
@@ -12044,7 +12044,7 @@ var JSONSchemaGenerator = class {
 		path: [],
 		schemaPath: []
 	}) {
-		return process(schema, this.ctx, _params);
+		return process$1(schema, this.ctx, _params);
 	}
 	/**
 	* Emit the final JSON Schema after processing.
@@ -12328,7 +12328,7 @@ var core_exports = /* @__PURE__ */ __export({
 	parse: () => parse$1,
 	parseAsync: () => parseAsync$1,
 	prettifyError: () => prettifyError,
-	process: () => process,
+	process: () => process$1,
 	regexes: () => regexes_exports,
 	registry: () => registry,
 	safeDecode: () => safeDecode$1,
@@ -16301,6 +16301,11 @@ const createMigrationMiddleware = (config$1) => {
 * with the correct schema (search_path) configuration.
 *
 * Only initializes the auth client for /api/* routes where it's actually needed.
+*
+* Origin validation:
+* - Local dev: Works automatically via baseURL derived from request
+* - Production: Set AUTH_TRUSTED_ORIGINS env var (comma-separated)
+*   e.g., AUTH_TRUSTED_ORIGINS=https://myapp.railway.app,https://myapp.com
 */
 const createAuthClientMiddleware = () => {
 	return async (c, next) => {
@@ -16313,13 +16318,15 @@ const createAuthClientMiddleware = () => {
 		const workspaceSettings = createWorkspaceSettingsDataLayer(kyselyDb);
 		const url$1 = new URL(c.req.url);
 		const baseURL = `${url$1.protocol}//${url$1.host}`;
+		const trustedOriginsEnv = process.env.AUTH_TRUSTED_ORIGINS;
+		const trustedOrigins = trustedOriginsEnv ? trustedOriginsEnv.split(",").map((origin) => origin.trim()) : [];
 		const authClient = betterAuth(getAuthClientOptions({
 			database: {
 				db: kyselyDb,
 				type: dbType
 			},
 			baseURL,
-			trustedOrigins: [baseURL],
+			trustedOrigins,
 			onUserCreated: async (userId) => {
 				await workspaceSettings.setSuperAdminId(userId);
 				await workspaceSettings.markSetupComplete();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@llmops/app",
-  "version": "0.2.2",
+  "version": "0.2.3",
   "description": "LLMOps application with server and client",
   "type": "module",
   "license": "Apache-2.0",
@@ -66,8 +66,8 @@
     "react-aria-components": "^1.13.0",
     "react-hook-form": "^7.68.0",
     "recharts": "^3.6.0",
-    "@llmops/core": "^0.2.2",
-    "@llmops/gateway": "^0.2.2"
+    "@llmops/core": "^0.2.3",
+    "@llmops/gateway": "^0.2.3"
   },
   "peerDependencies": {
     "react": "^19.2.1",