@maudecode/kanvil 0.2.1 → 0.4.0

package/apps/server/dist/{config-CbNqtJEj.mjs → config-DtNfVSnB.mjs}

@@ -1,3 +1,4 @@
+import { l as searchSettingsSchema, r as brokerSettingsSchema, s as s3SettingsSchema } from "./instance-CCeXRJ6m.mjs";
 import pg from "pg";
 import { drizzle } from "drizzle-orm/node-postgres";
 import { relations } from "drizzle-orm";
@@ -51,7 +52,8 @@ const user = pgTable("user", {
 	role: text("role"),
 	banned: boolean("banned").default(false),
 	banReason: text("ban_reason"),
-	banExpires: timestamp("ban_expires")
+	banExpires: timestamp("ban_expires"),
+	deletedAt: timestamp("deleted_at")
 });
 const session = pgTable("session", {
 	id: text("id").primaryKey(),
@@ -354,137 +356,6 @@ function createDatabase(url) {
 	};
 }
 //#endregion
-//#region ../../packages/contracts/src/instance.ts
-const endpoint = z.url({ protocol: /^https?$/ }).refine((value) => !/^https?:\/\/[^/]*@/.test(value) && !/[?#]/.test(value), "Use an HTTP(S) endpoint without embedded credentials");
-const s3SettingsSchema = z.object({
-	endpoint: z.union([endpoint, z.literal("")]).default(""),
-	region: z.string().min(1).max(100).default("us-east-1"),
-	bucket: z.string().min(3).max(255),
-	prefix: z.string().max(200).regex(/^[a-zA-Z0-9/_-]*$/).default("kanvil/"),
-	forcePathStyle: z.boolean().default(true),
-	accessKeyId: z.string().max(500).default(""),
-	secretAccessKey: z.string().max(2e3).optional()
-}).strict();
-const searchAuthenticationSchema = z.enum([
-	"none",
-	"apiKey",
-	"basic"
-]);
-const searchSettingsSchema = z.object({
-	url: endpoint,
-	auth: searchAuthenticationSchema.optional(),
-	index: z.string().regex(/^[a-z0-9][a-z0-9_-]{0,100}$/),
-	apiKey: z.string().max(4e3).optional(),
-	username: z.string().max(500).default(""),
-	password: z.string().max(2e3).optional()
-}).strict();
-const storageSettingsSchema = z.discriminatedUnion("provider", [z.object({ provider: z.literal("local") }).strict(), s3SettingsSchema.extend({ provider: z.literal("s3") })]);
-const externalSearchSettingsSchema = z.discriminatedUnion("provider", [z.object({ provider: z.literal("postgres") }).strict(), searchSettingsSchema.extend({ provider: z.literal("elasticsearch") })]);
-const brokerSettingsSchema = z.object({
-	url: z.url({ protocol: /^amqps?$/ }).max(4e3).optional(),
-	exchange: z.string().min(1).max(200).regex(/^[a-zA-Z0-9_.-]+$/).refine((value) => !value.startsWith("amq."), "Use an application exchange").default("kanvil.events")
-}).strict();
-const eventDeliverySettingsSchema = z.discriminatedUnion("provider", [z.object({ provider: z.literal("postgres") }).strict(), brokerSettingsSchema.extend({ provider: z.literal("rabbitmq") })]);
-const authenticationPolicySchema = z.object({
-	emailPasswordEnabled: z.boolean().default(true),
-	ssoAutoProvision: z.boolean().default(false)
-}).strict();
-const instanceUpdateSchema = z.object({
-	expectedVersion: z.number().int().positive(),
-	name: z.string().trim().min(1).max(100),
-	description: z.string().max(500),
-	storage: storageSettingsSchema,
-	search: externalSearchSettingsSchema,
-	broker: eventDeliverySettingsSchema.optional(),
-	authentication: authenticationPolicySchema.optional()
-}).strict();
-z.object({
-	name: z.string(),
-	description: z.string()
-});
-const adminInstanceSchema = z.object({
-	id: z.uuid(),
-	version: z.number().int(),
-	name: z.string(),
-	description: z.string(),
-	authentication: authenticationPolicySchema.default(() => authenticationPolicySchema.parse({})),
-	storage: z.object({
-		provider: z.enum(["local", "s3"]),
-		source: z.enum(["deployment", "admin"]),
-		settings: s3SettingsSchema.omit({ secretAccessKey: true }).nullable(),
-		secretConfigured: z.boolean(),
-		pending: z.number().int(),
-		status: z.enum([
-			"ready",
-			"transferring",
-			"unavailable"
-		]),
-		error: z.string().nullable()
-	}),
-	search: z.object({
-		provider: z.enum(["postgres", "elasticsearch"]),
-		source: z.enum(["deployment", "admin"]),
-		settings: searchSettingsSchema.omit({
-			apiKey: true,
-			password: true
-		}).nullable(),
-		secretConfigured: z.boolean(),
-		status: z.enum([
-			"builtin",
-			"indexing",
-			"ready",
-			"unavailable"
-		]),
-		cursor: z.string(),
-		error: z.string().nullable()
-	}),
-	broker: z.object({
-		provider: z.enum(["postgres", "rabbitmq"]),
-		source: z.enum(["deployment", "admin"]),
-		settings: z.object({
-			endpoint: z.string(),
-			exchange: z.string()
-		}).nullable(),
-		secretConfigured: z.boolean(),
-		status: z.enum([
-			"builtin",
-			"connecting",
-			"ready",
-			"unavailable"
-		]),
-		error: z.string().nullable()
-	}),
-	deployment: z.object({
-		url: z.string(),
-		oidc: z.object({
-			name: z.string(),
-			discoveryUrl: z.string(),
-			clientId: z.string()
-		}).nullable(),
-		push: z.boolean(),
-		version: z.string()
-	}),
-	locations: z.array(z.object({
-		id: z.uuid(),
-		bucket: z.string(),
-		endpoint: z.string(),
-		prefix: z.string(),
-		objects: z.number().int()
-	}))
-});
-const photoInputSchema = z.object({
-	data: z.string().max(7e5),
-	contentType: z.enum([
-		"image/png",
-		"image/jpeg",
-		"image/webp"
-	])
-}).strict();
-const photoResultSchema = z.object({ image: z.string().nullable() });
-function searchAuthentication(settings) {
-	return settings.auth ?? (settings.apiKey ? "apiKey" : settings.username && settings.password ? "basic" : "none");
-}
-//#endregion
 //#region src/config.ts
 const optionalEnv = (schema) => z.preprocess((value) => value === "" ? void 0 : value, schema.optional());
 const envSchema = z.object({
@@ -517,9 +388,21 @@ const envSchema = z.object({
 	OIDC_CLIENT_ID: optionalEnv(z.string().min(1)),
 	OIDC_CLIENT_SECRET: optionalEnv(z.string().min(1)),
 	OIDC_NAME: z.string().default("PocketID"),
+	GITHUB_CLIENT_ID: optionalEnv(z.string().min(1)),
+	GITHUB_CLIENT_SECRET: optionalEnv(z.string().min(1)),
+	GOOGLE_CLIENT_ID: optionalEnv(z.string().min(1)),
+	GOOGLE_CLIENT_SECRET: optionalEnv(z.string().min(1)),
+	DISCORD_CLIENT_ID: optionalEnv(z.string().min(1)),
+	DISCORD_CLIENT_SECRET: optionalEnv(z.string().min(1)),
 	KANVIL_SESSION_WRITE_LIMIT: z.coerce.number().int().min(1).max(1e5).default(120),
 	KANVIL_PUSH_ENABLED: z.enum(["true", "false"]).default("false").transform((value) => value === "true"),
 	EXPO_ACCESS_TOKEN: optionalEnv(z.string().min(1)),
+	SMTP_URL: optionalEnv(z.url({ protocol: /^smtps?$/ })),
+	SMTP_FROM: optionalEnv(z.string().min(3)),
+	KANVIL_DELIVERY_ALLOW_PRIVATE: z.enum(["true", "false"]).default("false").transform((value) => value === "true"),
+	KANVIL_GITHUB_API_URL: z.url({ protocol: /^https?$/ }).default("https://api.github.com"),
+	KANVIL_LINEAR_API_URL: z.url({ protocol: /^https?$/ }).default("https://api.linear.app/graphql"),
+	KANVIL_TRELLO_API_URL: z.url({ protocol: /^https?$/ }).default("https://api.trello.com").transform((value) => value.replace(/\/+$/, "")),
 	NODE_ENV: z.enum([
 		"development",
 		"test",
@@ -557,6 +440,18 @@ const envSchema = z.object({
 		code: "custom",
 		message: "Configure all three OIDC settings together"
 	});
+	for (const name of [
+		"GITHUB",
+		"GOOGLE",
+		"DISCORD"
+	]) if (!value[`${name}_CLIENT_ID`] !== !value[`${name}_CLIENT_SECRET`]) ctx.addIssue({
+		code: "custom",
+		message: `Configure ${name}_CLIENT_ID and ${name}_CLIENT_SECRET together`
+	});
+	if (value.SMTP_URL && !value.SMTP_FROM) ctx.addIssue({
+		code: "custom",
+		message: "SMTP_FROM is required with SMTP_URL"
+	});
 	if (!new URL(value.DATABASE_URL).protocol.startsWith("postgres")) ctx.addIssue({
 		code: "custom",
 		message: "DATABASE_URL must be PostgreSQL"
@@ -578,4 +473,4 @@ function readConfig(env = process.env) {
 	};
 }
 //#endregion
-export { instanceUpdateSchema as a, s3SettingsSchema as c, createDatabase as d, account as f, user as g, session as h, brokerSettingsSchema as i, searchAuthentication as l, auth_schema_exports as m, adminInstanceSchema as n, photoInputSchema as o, apikey as p, authenticationPolicySchema as r, photoResultSchema as s, readConfig as t, searchSettingsSchema as u };
+export { auth_schema_exports as a, oauthConsent as c, user as d, apikey as i, oauthRefreshToken as l, createDatabase as n, oauthAccessToken as o, account as r, oauthClient as s, readConfig as t, session as u };