@maudecode/kanvil 0.3.0 → 0.4.0

package/apps/server/dist/{config-D3cAABi7.mjs → config-DtNfVSnB.mjs}

@@ -1,3 +1,4 @@
+import { l as searchSettingsSchema, r as brokerSettingsSchema, s as s3SettingsSchema } from "./instance-CCeXRJ6m.mjs";
 import pg from "pg";
 import { drizzle } from "drizzle-orm/node-postgres";
 import { relations } from "drizzle-orm";
@@ -355,137 +356,6 @@ function createDatabase(url) {
 	};
 }
 //#endregion
-//#region ../../packages/contracts/src/instance.ts
-const endpoint = z.url({ protocol: /^https?$/ }).refine((value) => !/^https?:\/\/[^/]*@/.test(value) && !/[?#]/.test(value), "Use an HTTP(S) endpoint without embedded credentials");
-const s3SettingsSchema = z.object({
-	endpoint: z.union([endpoint, z.literal("")]).default(""),
-	region: z.string().min(1).max(100).default("us-east-1"),
-	bucket: z.string().min(3).max(255),
-	prefix: z.string().max(200).regex(/^[a-zA-Z0-9/_-]*$/).default("kanvil/"),
-	forcePathStyle: z.boolean().default(true),
-	accessKeyId: z.string().max(500).default(""),
-	secretAccessKey: z.string().max(2e3).optional()
-}).strict();
-const searchAuthenticationSchema = z.enum([
-	"none",
-	"apiKey",
-	"basic"
-]);
-const searchSettingsSchema = z.object({
-	url: endpoint,
-	auth: searchAuthenticationSchema.optional(),
-	index: z.string().regex(/^[a-z0-9][a-z0-9_-]{0,100}$/),
-	apiKey: z.string().max(4e3).optional(),
-	username: z.string().max(500).default(""),
-	password: z.string().max(2e3).optional()
-}).strict();
-const storageSettingsSchema = z.discriminatedUnion("provider", [z.object({ provider: z.literal("local") }).strict(), s3SettingsSchema.extend({ provider: z.literal("s3") })]);
-const externalSearchSettingsSchema = z.discriminatedUnion("provider", [z.object({ provider: z.literal("postgres") }).strict(), searchSettingsSchema.extend({ provider: z.literal("elasticsearch") })]);
-const brokerSettingsSchema = z.object({
-	url: z.url({ protocol: /^amqps?$/ }).max(4e3).optional(),
-	exchange: z.string().min(1).max(200).regex(/^[a-zA-Z0-9_.-]+$/).refine((value) => !value.startsWith("amq."), "Use an application exchange").default("kanvil.events")
-}).strict();
-const eventDeliverySettingsSchema = z.discriminatedUnion("provider", [z.object({ provider: z.literal("postgres") }).strict(), brokerSettingsSchema.extend({ provider: z.literal("rabbitmq") })]);
-const authenticationPolicySchema = z.object({
-	emailPasswordEnabled: z.boolean().default(true),
-	ssoAutoProvision: z.boolean().default(false)
-}).strict();
-const instanceUpdateSchema = z.object({
-	expectedVersion: z.number().int().positive(),
-	name: z.string().trim().min(1).max(100),
-	description: z.string().max(500),
-	storage: storageSettingsSchema,
-	search: externalSearchSettingsSchema,
-	broker: eventDeliverySettingsSchema.optional(),
-	authentication: authenticationPolicySchema.optional()
-}).strict();
-z.object({
-	name: z.string(),
-	description: z.string()
-});
-const adminInstanceSchema = z.object({
-	id: z.uuid(),
-	version: z.number().int(),
-	name: z.string(),
-	description: z.string(),
-	authentication: authenticationPolicySchema.default(() => authenticationPolicySchema.parse({})),
-	storage: z.object({
-		provider: z.enum(["local", "s3"]),
-		source: z.enum(["deployment", "admin"]),
-		settings: s3SettingsSchema.omit({ secretAccessKey: true }).nullable(),
-		secretConfigured: z.boolean(),
-		pending: z.number().int(),
-		status: z.enum([
-			"ready",
-			"transferring",
-			"unavailable"
-		]),
-		error: z.string().nullable()
-	}),
-	search: z.object({
-		provider: z.enum(["postgres", "elasticsearch"]),
-		source: z.enum(["deployment", "admin"]),
-		settings: searchSettingsSchema.omit({
-			apiKey: true,
-			password: true
-		}).nullable(),
-		secretConfigured: z.boolean(),
-		status: z.enum([
-			"builtin",
-			"indexing",
-			"ready",
-			"unavailable"
-		]),
-		cursor: z.string(),
-		error: z.string().nullable()
-	}),
-	broker: z.object({
-		provider: z.enum(["postgres", "rabbitmq"]),
-		source: z.enum(["deployment", "admin"]),
-		settings: z.object({
-			endpoint: z.string(),
-			exchange: z.string()
-		}).nullable(),
-		secretConfigured: z.boolean(),
-		status: z.enum([
-			"builtin",
-			"connecting",
-			"ready",
-			"unavailable"
-		]),
-		error: z.string().nullable()
-	}),
-	deployment: z.object({
-		url: z.string(),
-		oidc: z.object({
-			name: z.string(),
-			discoveryUrl: z.string(),
-			clientId: z.string()
-		}).nullable(),
-		push: z.boolean(),
-		version: z.string()
-	}),
-	locations: z.array(z.object({
-		id: z.uuid(),
-		bucket: z.string(),
-		endpoint: z.string(),
-		prefix: z.string(),
-		objects: z.number().int()
-	}))
-});
-const photoInputSchema = z.object({
-	data: z.string().max(7e5),
-	contentType: z.enum([
-		"image/png",
-		"image/jpeg",
-		"image/webp"
-	])
-}).strict();
-const photoResultSchema = z.object({ image: z.string().nullable() });
-function searchAuthentication(settings) {
-	return settings.auth ?? (settings.apiKey ? "apiKey" : settings.username && settings.password ? "basic" : "none");
-}
-//#endregion
 //#region src/config.ts
 const optionalEnv = (schema) => z.preprocess((value) => value === "" ? void 0 : value, schema.optional());
 const envSchema = z.object({
@@ -603,4 +473,4 @@ function readConfig(env = process.env) {
 	};
 }
 //#endregion
-export { oauthConsent as _, instanceUpdateSchema as a, user as b, s3SettingsSchema as c, createDatabase as d, account as f, oauthClient as g, oauthAccessToken as h, brokerSettingsSchema as i, searchAuthentication as l, auth_schema_exports as m, adminInstanceSchema as n, photoInputSchema as o, apikey as p, authenticationPolicySchema as r, photoResultSchema as s, readConfig as t, searchSettingsSchema as u, oauthRefreshToken as v, session as y };
+export { auth_schema_exports as a, oauthConsent as c, user as d, apikey as i, oauthRefreshToken as l, createDatabase as n, oauthAccessToken as o, account as r, oauthClient as s, readConfig as t, session as u };

package/apps/server/dist/index.mjs

@@ -1,6 +1,8 @@
-import { a as instanceUpdateSchema, b as user$1, c as s3SettingsSchema, d as createDatabase, f as account, i as brokerSettingsSchema, m as auth_schema_exports, n as adminInstanceSchema, o as photoInputSchema, p as apikey, s as photoResultSchema, t as readConfig, u as searchSettingsSchema, y as session } from "./config-D3cAABi7.mjs";
+import { a as auth_schema_exports, d as user$1, i as apikey, n as createDatabase, r as account, t as readConfig, u as session } from "./config-DtNfVSnB.mjs";
+import { a as photoInputSchema, i as instanceUpdateSchema, l as searchSettingsSchema, o as photoResultSchema, r as brokerSettingsSchema, s as s3SettingsSchema, t as adminInstanceSchema } from "./instance-CCeXRJ6m.mjs";
 import { t as migrateDatabase } from "./migrate-C9f4ozB4.mjs";
-import { $ as subscriptions, A as createTicketSearch, B as blobObjects, C as DeliveryError, Ct as roles, D as requireInstanceAdmin, Dt as matchesOIDCBinding, E as createWriteLimiter, Et as ticketExportFormat, F as stagedUploadCutoff, G as members, H as eventClock, I as createObjectStore, J as profilePhotos, K as notificationPreferences, L as createPollingJob, M as createBlobStorage, N as decodeImage, O as requireSession, P as imageResponse, Q as storageBackends, R as attachmentContent, S as deliverBatch, St as pushDeviceInput, T as createAccess, Tt as stateLabels, U as events, V as deliveryCheckpoints, X as pushDevices, Y as projects, Z as stagedUploads, _ as recipientColumns, _t as notificationPreferencesSchema, a as deliverySecrets, at as credentialInput, b as receiveRepositoryWebhook, bt as operations, c as ownerBlocker, ct as hasAdminRole, d as createDomain, dt as isOperation, et as tickets, f as fail, ft as isPresetColor, g as reachable, gt as notificationPreferencesInput, h as one, ht as notificationIdsInput, i as createInstance, it as closedStates, j as createTicketIndex, k as readCalendarFeed, l as appendEvents, lt as importLimits, m as notify, mt as memberSchema, n as emailCodesAvailable, nt as workspaces, o as otherActiveAdministrator, ot as defaultWorkflow, p as json, pt as isPublicOperation, q as notifications, r as signInProviders, rt as ApiError, s as ownedWorkspaces, st as errorSchema, t as createAuth, tt as workspaceMembers, u as assertVersion, ut as importProviderDefinitions, v as requireRow, vt as notificationReadInput, w as createHttpSender, wt as scopes, x as defaultSenders, xt as publicOperations, y as processImports, yt as okSchema, z as attachments } from "./auth-JcS53IcO.mjs";
+import { $ as subscriptions, A as createTicketSearch, B as blobObjects, C as DeliveryError, D as requireInstanceAdmin, E as createWriteLimiter, F as stagedUploadCutoff, G as members, H as eventClock, I as createObjectStore, J as profilePhotos, K as notificationPreferences, L as createPollingJob, M as createBlobStorage, N as decodeImage, O as requireSession, P as imageResponse, Q as storageBackends, R as attachmentContent, S as deliverBatch, T as createAccess, U as events, V as deliveryCheckpoints, X as pushDevices, Y as projects, Z as stagedUploads, _ as recipientColumns, a as deliverySecrets, b as receiveRepositoryWebhook, c as ownerBlocker, d as createDomain, et as tickets, f as fail, g as reachable, h as one, i as createInstance, j as createTicketIndex, k as readCalendarFeed, l as appendEvents, m as notify, n as emailCodesAvailable, nt as workspaces, o as otherActiveAdministrator, p as json, q as notifications, r as signInProviders, rt as matchesOIDCBinding, s as ownedWorkspaces, t as createAuth, tt as workspaceMembers, u as assertVersion, v as requireRow, w as createHttpSender, x as defaultSenders, y as processImports, z as attachments } from "./auth-Cuo7ECLh.mjs";
+import { A as importProviderDefinitions, B as notificationIdsInput, F as isPresetColor, G as okSchema, H as notificationPreferencesSchema, I as isPublicOperation, O as hasAdminRole, P as isOperation, R as memberSchema, St as ticketExportFormat, U as notificationReadInput, V as notificationPreferencesInput, ft as roles, it as pushDeviceInput, k as importLimits, m as defaultWorkflow, o as closedStates, pt as scopes, q as operations, rt as publicOperations, s as credentialInput, t as ApiError, x as errorSchema, yt as stateLabels } from "./src-tQ82UI8k.mjs";
 import { serve } from "@hono/node-server";
 import pg from "pg";
 import { drizzle } from "drizzle-orm/node-postgres";
@@ -324,7 +326,7 @@ function createAccountAdministration(database, auth, config) {
 }
 //#endregion
 //#region src/version.ts
-const applicationVersion = "0.3.0";
+const applicationVersion = "0.4.0";
 //#endregion
 //#region src/realtime.ts
 async function createRealtime(config) {
@@ -3447,7 +3449,7 @@ async function createApplication(database, config, overrides = {}) {
 		const identity = c.get("actor");
 		if (identity.machine) fail(403, "forbidden", "Use a signed-in account to manage credentials");
 		const input = credentialInput.parse(await c.req.json()), allowed = await domain.accessibleProjects(identity);
-		if (input.projectIds.some((id) => !allowed.some((row) => row.id === id))) fail(403, "forbidden", "Choose projects you can access");
+		if (input.projectIds?.some((id) => !allowed.some((row) => row.id === id))) fail(403, "forbidden", "Choose projects you can access");
 		const key = await auth.api.createApiKey({ body: {
 			userId: identity.id,
 			name: input.name,

package/apps/server/dist/instance-CCeXRJ6m.mjs

@@ -0,0 +1,133 @@
+import { z } from "zod";
+//#region ../../packages/contracts/src/instance.ts
+const endpoint = z.url({ protocol: /^https?$/ }).refine((value) => !/^https?:\/\/[^/]*@/.test(value) && !/[?#]/.test(value), "Use an HTTP(S) endpoint without embedded credentials");
+const s3SettingsSchema = z.object({
+	endpoint: z.union([endpoint, z.literal("")]).default(""),
+	region: z.string().min(1).max(100).default("us-east-1"),
+	bucket: z.string().min(3).max(255),
+	prefix: z.string().max(200).regex(/^[a-zA-Z0-9/_-]*$/).default("kanvil/"),
+	forcePathStyle: z.boolean().default(true),
+	accessKeyId: z.string().max(500).default(""),
+	secretAccessKey: z.string().max(2e3).optional()
+}).strict();
+const searchAuthenticationSchema = z.enum([
+	"none",
+	"apiKey",
+	"basic"
+]);
+const searchSettingsSchema = z.object({
+	url: endpoint,
+	auth: searchAuthenticationSchema.optional(),
+	index: z.string().regex(/^[a-z0-9][a-z0-9_-]{0,100}$/),
+	apiKey: z.string().max(4e3).optional(),
+	username: z.string().max(500).default(""),
+	password: z.string().max(2e3).optional()
+}).strict();
+const storageSettingsSchema = z.discriminatedUnion("provider", [z.object({ provider: z.literal("local") }).strict(), s3SettingsSchema.extend({ provider: z.literal("s3") })]);
+const externalSearchSettingsSchema = z.discriminatedUnion("provider", [z.object({ provider: z.literal("postgres") }).strict(), searchSettingsSchema.extend({ provider: z.literal("elasticsearch") })]);
+const brokerSettingsSchema = z.object({
+	url: z.url({ protocol: /^amqps?$/ }).max(4e3).optional(),
+	exchange: z.string().min(1).max(200).regex(/^[a-zA-Z0-9_.-]+$/).refine((value) => !value.startsWith("amq."), "Use an application exchange").default("kanvil.events")
+}).strict();
+const eventDeliverySettingsSchema = z.discriminatedUnion("provider", [z.object({ provider: z.literal("postgres") }).strict(), brokerSettingsSchema.extend({ provider: z.literal("rabbitmq") })]);
+const authenticationPolicySchema = z.object({
+	emailPasswordEnabled: z.boolean().default(true),
+	ssoAutoProvision: z.boolean().default(false)
+}).strict();
+const instanceUpdateSchema = z.object({
+	expectedVersion: z.number().int().positive(),
+	name: z.string().trim().min(1).max(100),
+	description: z.string().max(500),
+	storage: storageSettingsSchema,
+	search: externalSearchSettingsSchema,
+	broker: eventDeliverySettingsSchema.optional(),
+	authentication: authenticationPolicySchema.optional()
+}).strict();
+z.object({
+	name: z.string(),
+	description: z.string()
+});
+const adminInstanceSchema = z.object({
+	id: z.uuid(),
+	version: z.number().int(),
+	name: z.string(),
+	description: z.string(),
+	authentication: authenticationPolicySchema.default(() => authenticationPolicySchema.parse({})),
+	storage: z.object({
+		provider: z.enum(["local", "s3"]),
+		source: z.enum(["deployment", "admin"]),
+		settings: s3SettingsSchema.omit({ secretAccessKey: true }).nullable(),
+		secretConfigured: z.boolean(),
+		pending: z.number().int(),
+		status: z.enum([
+			"ready",
+			"transferring",
+			"unavailable"
+		]),
+		error: z.string().nullable()
+	}),
+	search: z.object({
+		provider: z.enum(["postgres", "elasticsearch"]),
+		source: z.enum(["deployment", "admin"]),
+		settings: searchSettingsSchema.omit({
+			apiKey: true,
+			password: true
+		}).nullable(),
+		secretConfigured: z.boolean(),
+		status: z.enum([
+			"builtin",
+			"indexing",
+			"ready",
+			"unavailable"
+		]),
+		cursor: z.string(),
+		error: z.string().nullable()
+	}),
+	broker: z.object({
+		provider: z.enum(["postgres", "rabbitmq"]),
+		source: z.enum(["deployment", "admin"]),
+		settings: z.object({
+			endpoint: z.string(),
+			exchange: z.string()
+		}).nullable(),
+		secretConfigured: z.boolean(),
+		status: z.enum([
+			"builtin",
+			"connecting",
+			"ready",
+			"unavailable"
+		]),
+		error: z.string().nullable()
+	}),
+	deployment: z.object({
+		url: z.string(),
+		oidc: z.object({
+			name: z.string(),
+			discoveryUrl: z.string(),
+			clientId: z.string()
+		}).nullable(),
+		push: z.boolean(),
+		version: z.string()
+	}),
+	locations: z.array(z.object({
+		id: z.uuid(),
+		bucket: z.string(),
+		endpoint: z.string(),
+		prefix: z.string(),
+		objects: z.number().int()
+	}))
+});
+const photoInputSchema = z.object({
+	data: z.string().max(7e5),
+	contentType: z.enum([
+		"image/png",
+		"image/jpeg",
+		"image/webp"
+	])
+}).strict();
+const photoResultSchema = z.object({ image: z.string().nullable() });
+function searchAuthentication(settings) {
+	return settings.auth ?? (settings.apiKey ? "apiKey" : settings.username && settings.password ? "basic" : "none");
+}
+//#endregion
+export { photoInputSchema as a, searchAuthentication as c, instanceUpdateSchema as i, searchSettingsSchema as l, authenticationPolicySchema as n, photoResultSchema as o, brokerSettingsSchema as r, s3SettingsSchema as s, adminInstanceSchema as t };

package/apps/server/dist/migrate.mjs

@@ -1,4 +1,4 @@
-import { d as createDatabase, t as readConfig } from "./config-D3cAABi7.mjs";
+import { n as createDatabase, t as readConfig } from "./config-DtNfVSnB.mjs";
 import { t as migrateDatabase } from "./migrate-C9f4ozB4.mjs";
 //#region src/cli/migrate.ts
 const database = createDatabase(readConfig().DATABASE_URL);

package/apps/server/dist/recover.mjs

@@ -1,5 +1,6 @@
-import { b as user, d as createDatabase, f as account, t as readConfig, y as session } from "./config-D3cAABi7.mjs";
-import { W as instanceSettings, ct as hasAdminRole, f as fail, t as createAuth } from "./auth-JcS53IcO.mjs";
+import { d as user, n as createDatabase, r as account, t as readConfig, u as session } from "./config-DtNfVSnB.mjs";
+import { W as instanceSettings, f as fail, t as createAuth } from "./auth-Cuo7ECLh.mjs";
+import { O as hasAdminRole } from "./src-tQ82UI8k.mjs";
 import { and, eq, isNull, sql } from "drizzle-orm";
 import { z } from "zod";
 import { parseArgs } from "node:util";