@mxpicture/print-backlog 0.0.0-stage → 0.0.2

package/dist/server/config.js

@@ -0,0 +1,63 @@
+import { z } from "zod";
+/**
+ * Environment -> typed config. The ansible role (ansible-playbook-contabo-vps,
+ * roles/print_backlog) renders it into app.env and the compose file. The
+ * database comes from the standard PG* variables (db.ts).
+ */
+const emptyAsUndefined = (v) => (v === "" ? undefined : v);
+const optionalString = z.preprocess(emptyAsUndefined, z.string().optional());
+const optionalUrl = z.preprocess(emptyAsUndefined, z.url().optional());
+const schema = z.object({
+    PORT: z.coerce.number().int().positive().default(8080),
+    // The page's own origin (https://backlog.mxpicture.de). Every write from the
+    // browser must carry exactly this Origin: the SSO cookie is valid on every
+    // sibling subdomain, so SameSite alone does not stop a cross-site write.
+    PUBLIC_ORIGIN: z.url(),
+    DATA_DIR: z.string().min(1).default("/data"),
+    // Set by Caddy's sso_policy (`inject headers with claims`). The container
+    // has no published port, so only Caddy can set it.
+    TRUST_USER_HEADER: z.string().min(1).default("X-Token-User-Name"),
+    // Development only: the user when no SSO proxy is in front. Refused unless
+    // PUBLIC_ORIGIN is a loopback origin, so it can never open a deployed app.
+    DEV_USER: optionalString,
+    // Bambuddy's webhook sends `Authorization: Bearer <token>`.
+    WEBHOOK_TOKEN: z
+        .string()
+        .min(16, "WEBHOOK_TOKEN must be at least 16 characters"),
+    // Send to Bambuddy. Empty = off (download only).
+    BAMBUDDY_URL: optionalUrl,
+    BAMBUDDY_API_KEY: optionalString,
+    BAMBUDDY_FOLDER: z.preprocess(emptyAsUndefined, z.string().default("From Backlog")),
+    MAX_UPLOAD_MB: z.coerce.number().int().positive().max(4096).default(512),
+    DEFAULT_QUEUE: z.preprocess(emptyAsUndefined, z.string().trim().min(1).default("default")),
+    TRASH_DAYS: z.coerce.number().int().nonnegative().default(30),
+});
+const LOOPBACK_HOSTS = new Set(["127.0.0.1", "localhost", "[::1]"]);
+export const loadConfig = (env = process.env) => {
+    const c = schema.parse(env);
+    // URL.origin drops a trailing slash or path someone put in the variable.
+    const origin = new URL(c.PUBLIC_ORIGIN);
+    if (c.DEV_USER && !LOOPBACK_HOSTS.has(origin.hostname))
+        throw new Error("DEV_USER is for development only: PUBLIC_ORIGIN must be a loopback origin");
+    if (c.BAMBUDDY_URL && !c.BAMBUDDY_API_KEY)
+        throw new Error("BAMBUDDY_API_KEY is required with BAMBUDDY_URL");
+    return {
+        port: c.PORT,
+        origin: origin.origin,
+        dataDir: c.DATA_DIR,
+        userHeader: c.TRUST_USER_HEADER.toLowerCase(),
+        devUser: c.DEV_USER ?? null,
+        webhookToken: c.WEBHOOK_TOKEN,
+        bambuddy: c.BAMBUDDY_URL
+            ? {
+                url: c.BAMBUDDY_URL.replace(/\/+$/, ""),
+                apiKey: c.BAMBUDDY_API_KEY,
+                folder: c.BAMBUDDY_FOLDER,
+            }
+            : null,
+        maxUploadBytes: c.MAX_UPLOAD_MB * 1024 * 1024,
+        defaultQueue: c.DEFAULT_QUEUE,
+        trashDays: c.TRASH_DAYS,
+    };
+};
+//# sourceMappingURL=config.js.map

package/dist/server/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/server/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;GAIG;AACH,MAAM,gBAAgB,GAAG,CAAC,CAAU,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACpE,MAAM,cAAc,GAAG,CAAC,CAAC,UAAU,CAAC,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC;AAC7E,MAAM,WAAW,GAAG,CAAC,CAAC,UAAU,CAAC,gBAAgB,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC;AAEvE,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;IACtB,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACtD,6EAA6E;IAC7E,2EAA2E;IAC3E,yEAAyE;IACzE,aAAa,EAAE,CAAC,CAAC,GAAG,EAAE;IACtB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IAC5C,0EAA0E;IAC1E,mDAAmD;IACnD,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC;IACjE,2EAA2E;IAC3E,2EAA2E;IAC3E,QAAQ,EAAE,cAAc;IACxB,4DAA4D;IAC5D,aAAa,EAAE,CAAC;SACb,MAAM,EAAE;SACR,GAAG,CAAC,EAAE,EAAE,8CAA8C,CAAC;IAC1D,iDAAiD;IACjD,YAAY,EAAE,WAAW;IACzB,gBAAgB,EAAE,cAAc;IAChC,eAAe,EAAE,CAAC,CAAC,UAAU,CAC3B,gBAAgB,EAChB,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,cAAc,CAAC,CACnC;IACD,aAAa,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;IACxE,aAAa,EAAE,CAAC,CAAC,UAAU,CACzB,gBAAgB,EAChB,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAC5C;IACD,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;CAC9D,CAAC,CAAC;AAgBH,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;AAEpE,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,MAAyB,OAAO,CAAC,GAAG,EAAU,EAAE;IACzE,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC5B,yEAAyE;IACzE,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;IACxC,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC;QACpD,MAAM,IAAI,KAAK,CACb,2EAA2E,CAC5E,CAAC;IACJ,IAAI,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,CAAC,gBAAgB;QACvC,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,OAAO;QACL,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,OAAO,EAAE,CAAC,CAAC,QAAQ;QACnB,UAAU,EAAE,CAAC,CAAC,iBAAiB,CAAC,WAAW,EAAE;QAC7C,OAAO,EAAE,CAAC,CAAC,QAAQ,IAAI,IAAI;QAC3B,YAAY,EAAE,CAAC,CAAC,aAAa;QAC7B,QAAQ,EAAE,CAAC,CAAC,YAAY;YACtB,CAAC,CAAC;gBACE,GAAG,EAAE,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;gBACvC,MAAM,EAAE,CAAC,CAAC,gBAAiB;gBAC3B,MAAM,EAAE,CAAC,CAAC,eAAe;aAC1B;YACH,CAAC,CAAC,IAAI;QACR,cAAc,EAAE,CAAC,CAAC,aAAa,GAAG,IAAI,GAAG,IAAI;QAC7C,YAAY,EAAE,CAAC,CAAC,aAAa;QAC7B,SAAS,EAAE,CAAC,CAAC,UAAU;KACxB,CAAC;AACJ,CAAC,CAAC"}

package/dist/server/db.d.ts

@@ -0,0 +1,8 @@
+import postgres from "postgres";
+export type Sql = ReturnType<typeof postgres>;
+/**
+ * The pool, from the standard PG* variables. The app owns its database
+ * (print-backlog-db on mxpicture.de), so one role does everything.
+ */
+export declare const createSql: (max?: number) => Sql;
+//# sourceMappingURL=db.d.ts.map

package/dist/server/db.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"db.d.ts","sourceRoot":"","sources":["../../src/server/db.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,MAAM,UAAU,CAAC;AAEhC,MAAM,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,QAAQ,CAAC,CAAC;AAE9C;;;GAGG;AACH,eAAO,MAAM,SAAS,GAAI,YAAO,KAAG,GAYhC,CAAC"}

package/dist/server/db.js

@@ -0,0 +1,18 @@
+import postgres from "postgres";
+/**
+ * The pool, from the standard PG* variables. The app owns its database
+ * (print-backlog-db on mxpicture.de), so one role does everything.
+ */
+export const createSql = (max = 5) => postgres({
+    host: process.env.PGHOST,
+    port: Number(process.env.PGPORT) || 5432,
+    database: process.env.PGDATABASE,
+    username: process.env.PGUSER,
+    password: process.env.PGPASSWORD,
+    max,
+    idle_timeout: 60,
+    connect_timeout: 10,
+    connection: { application_name: "print-backlog" },
+    onnotice: () => { },
+});
+//# sourceMappingURL=db.js.map

package/dist/server/db.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"db.js","sourceRoot":"","sources":["../../src/server/db.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,MAAM,UAAU,CAAC;AAIhC;;;GAGG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,GAAG,GAAG,CAAC,EAAO,EAAE,CACxC,QAAQ,CAAC;IACP,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,MAAM;IACxB,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI;IACxC,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU;IAChC,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,MAAM;IAC5B,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU;IAChC,GAAG;IACH,YAAY,EAAE,EAAE;IAChB,eAAe,EAAE,EAAE;IACnB,UAAU,EAAE,EAAE,gBAAgB,EAAE,eAAe,EAAE;IACjD,QAAQ,EAAE,GAAG,EAAE,GAAE,CAAC;CACnB,CAAC,CAAC"}

package/dist/server/http.d.ts

@@ -0,0 +1,90 @@
+import type { IncomingMessage, ServerResponse } from "node:http";
+/** A handler's way to answer with a status other than 200/500. */
+export declare class HttpError extends Error {
+    readonly status: number;
+    constructor(status: number, message: string);
+}
+/**
+ * Who may call a route:
+ * - `sso`: a browser behind Caddy's SSO gate (the default). Writes must carry
+ *   the page's own Origin.
+ * - `webhook`: Bambuddy, with `Authorization: Bearer <WEBHOOK_TOKEN>`. Caddy
+ *   lets only /hooks/bambuddy through without SSO.
+ * - `public`: anyone (the Gatus health probe).
+ */
+export type Access = "sso" | "webhook" | "public";
+/**
+ * How a write's body is read: `json` (parsed, size-capped) or `stream` (left
+ * on ctx.req for the handler, e.g. a multipart upload).
+ */
+export type BodyKind = "json" | "stream";
+export interface Ctx {
+    req: IncomingMessage;
+    res: ServerResponse;
+    url: URL;
+    /** `:name` segments of the route */
+    params: Record<string, string>;
+    /** the parsed JSON body of a `json` write; undefined otherwise */
+    body: unknown;
+    /** the SSO user; "bambuddy" for the webhook, "-" for a public route */
+    user: string;
+}
+/** Returned by a handler that wrote the response itself (a download). */
+export declare const HANDLED: unique symbol;
+/** Returned by a handler that answers JSON with a status other than 200 (e.g. a failing health check). */
+export declare class Reply {
+    readonly status: number;
+    readonly body: unknown;
+    constructor(status: number, body: unknown);
+}
+export type Handler = (ctx: Ctx) => unknown;
+export type Method = "GET" | "POST" | "PATCH" | "DELETE";
+export interface RouteOptions {
+    access?: Access;
+    body?: BodyKind;
+}
+export interface Match {
+    handler: Handler;
+    params: Record<string, string>;
+    access: Access;
+    body: BodyKind;
+}
+/** Exact paths with `:name` segments; the first route that matches wins. */
+export declare class Router {
+    #private;
+    add(method: Method, path: string, handler: Handler, opts?: RouteOptions): this;
+    get: (path: string, handler: Handler, opts?: RouteOptions) => this;
+    post: (path: string, handler: Handler, opts?: RouteOptions) => this;
+    patch: (path: string, handler: Handler, opts?: RouteOptions) => this;
+    delete: (path: string, handler: Handler, opts?: RouteOptions) => this;
+    /** The route, "method" when only the method is wrong, or null. */
+    match(method: string, pathname: string): Match | "method" | null;
+}
+/** Sent with every response. Nothing is loaded from elsewhere. */
+export declare const SECURITY_HEADERS: Record<string, string>;
+export declare const sendJson: (res: ServerResponse, status: number, body: unknown) => void;
+export interface ServerDeps {
+    /** the only Origin a browser write may carry (Config.origin) */
+    origin: string;
+    /** the SSO user header, lower-case (Config.userHeader) */
+    userHeader: string;
+    /** development only (Config.devUser) */
+    devUser: string | null;
+    webhookToken: string;
+    router: Router;
+    /** the built front-end (dist/public); null = API only */
+    staticDir: string | null;
+    log: (line: string) => void;
+}
+/**
+ * One request.
+ * - The page and its assets are served without a user check: Caddy's SSO gate
+ *   covers every path but /health and /hooks/bambuddy.
+ * - `sso` API routes need the SSO user header (else 500: fail closed); their
+ *   writes must carry Origin == deps.origin, so neither a sibling subdomain's
+ *   script nor a plain HTML form can make one.
+ * - `webhook` routes need the bearer token.
+ * Each write leaves an audit line with the user.
+ */
+export declare const handle: (req: IncomingMessage, res: ServerResponse, deps: ServerDeps) => Promise<void>;
+//# sourceMappingURL=http.d.ts.map

package/dist/server/http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../src/server/http.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAKjE,kEAAkE;AAClE,qBAAa,SAAU,SAAQ,KAAK;IAEhC,QAAQ,CAAC,MAAM,EAAE,MAAM;gBAAd,MAAM,EAAE,MAAM,EACvB,OAAO,EAAE,MAAM;CAIlB;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,MAAM,GAAG,KAAK,GAAG,SAAS,GAAG,QAAQ,CAAC;AAElD;;;GAGG;AACH,MAAM,MAAM,QAAQ,GAAG,MAAM,GAAG,QAAQ,CAAC;AAEzC,MAAM,WAAW,GAAG;IAClB,GAAG,EAAE,eAAe,CAAC;IACrB,GAAG,EAAE,cAAc,CAAC;IACpB,GAAG,EAAE,GAAG,CAAC;IACT,oCAAoC;IACpC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,kEAAkE;IAClE,IAAI,EAAE,OAAO,CAAC;IACd,uEAAuE;IACvE,IAAI,EAAE,MAAM,CAAC;CACd;AAED,yEAAyE;AACzE,eAAO,MAAM,OAAO,eAAoB,CAAC;AAEzC,0GAA0G;AAC1G,qBAAa,KAAK;IAEd,QAAQ,CAAC,MAAM,EAAE,MAAM;IACvB,QAAQ,CAAC,IAAI,EAAE,OAAO;gBADb,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,OAAO;CAEzB;AAED,MAAM,MAAM,OAAO,GAAG,CAAC,GAAG,EAAE,GAAG,KAAK,OAAO,CAAC;AAE5C,MAAM,MAAM,MAAM,GAAG,KAAK,GAAG,MAAM,GAAG,OAAO,GAAG,QAAQ,CAAC;AAEzD,MAAM,WAAW,YAAY;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,QAAQ,CAAC;CACjB;AAUD,MAAM,WAAW,KAAK;IACpB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,QAAQ,CAAC;CAChB;AAED,4EAA4E;AAC5E,qBAAa,MAAM;;IAGjB,GAAG,CACD,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,OAAO,EAChB,IAAI,GAAE,YAAiB,GACtB,IAAI;IAUP,GAAG,GAAI,MAAM,MAAM,EAAE,SAAS,OAAO,EAAE,OAAO,YAAY,UACnB;IACvC,IAAI,GAAI,MAAM,MAAM,EAAE,SAAS,OAAO,EAAE,OAAO,YAAY,UACnB;IACxC,KAAK,GAAI,MAAM,MAAM,EAAE,SAAS,OAAO,EAAE,OAAO,YAAY,UACnB;IACzC,MAAM,GAAI,MAAM,MAAM,EAAE,SAAS,OAAO,EAAE,OAAO,YAAY,UACnB;IAE1C,kEAAkE;IAClE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,KAAK,GAAG,QAAQ,GAAG,IAAI;CAwBjE;AAED,kEAAkE;AAClE,eAAO,MAAM,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAKnD,CAAC;AAEF,eAAO,MAAM,QAAQ,GACnB,KAAK,cAAc,EACnB,QAAQ,MAAM,EACd,MAAM,OAAO,KACZ,IASF,CAAC;AA6CF,MAAM,WAAW,UAAU;IACzB,gEAAgE;IAChE,MAAM,EAAE,MAAM,CAAC;IACf,0DAA0D;IAC1D,UAAU,EAAE,MAAM,CAAC;IACnB,wCAAwC;IACxC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,yDAAyD;IACzD,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC7B;AAMD;;;;;;;;;GASG;AACH,eAAO,MAAM,MAAM,GACjB,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,MAAM,UAAU,KACf,OAAO,CAAC,IAAI,CAoFd,CAAC"}

package/dist/server/http.js

@@ -0,0 +1,266 @@
+import { readFile, stat } from "node:fs/promises";
+import { extname, join, normalize, sep } from "node:path";
+import { ZodError } from "zod";
+import { bearerMatches, ssoUser } from "./auth.js";
+/** A handler's way to answer with a status other than 200/500. */
+export class HttpError extends Error {
+    status;
+    constructor(status, message) {
+        super(message);
+        this.status = status;
+    }
+}
+/** Returned by a handler that wrote the response itself (a download). */
+export const HANDLED = Symbol("handled");
+/** Returned by a handler that answers JSON with a status other than 200 (e.g. a failing health check). */
+export class Reply {
+    status;
+    body;
+    constructor(status, body) {
+        this.status = status;
+        this.body = body;
+    }
+}
+/** Exact paths with `:name` segments; the first route that matches wins. */
+export class Router {
+    #routes = [];
+    add(method, path, handler, opts = {}) {
+        this.#routes.push({
+            method,
+            parts: path.split("/"),
+            handler,
+            access: opts.access ?? "sso",
+            body: opts.body ?? "json",
+        });
+        return this;
+    }
+    get = (path, handler, opts) => this.add("GET", path, handler, opts);
+    post = (path, handler, opts) => this.add("POST", path, handler, opts);
+    patch = (path, handler, opts) => this.add("PATCH", path, handler, opts);
+    delete = (path, handler, opts) => this.add("DELETE", path, handler, opts);
+    /** The route, "method" when only the method is wrong, or null. */
+    match(method, pathname) {
+        const parts = pathname.split("/");
+        let wrongMethod = false;
+        for (const r of this.#routes) {
+            if (r.parts.length !== parts.length)
+                continue;
+            const params = {};
+            const ok = r.parts.every((p, i) => {
+                if (p.startsWith(":")) {
+                    try {
+                        params[p.slice(1)] = decodeURIComponent(parts[i]);
+                    }
+                    catch {
+                        return false;
+                    }
+                    return parts[i] !== "";
+                }
+                return p === parts[i];
+            });
+            if (!ok)
+                continue;
+            if (r.method === method || (method === "HEAD" && r.method === "GET"))
+                return { handler: r.handler, params, access: r.access, body: r.body };
+            wrongMethod = true;
+        }
+        return wrongMethod ? "method" : null;
+    }
+}
+/** Sent with every response. Nothing is loaded from elsewhere. */
+export const SECURITY_HEADERS = {
+    "Content-Security-Policy": "default-src 'self'; img-src 'self' data: blob:; object-src 'none'; base-uri 'none'; form-action 'self'; frame-ancestors 'none'",
+    "X-Content-Type-Options": "nosniff",
+    "Referrer-Policy": "same-origin",
+};
+export const sendJson = (res, status, body) => {
+    const data = JSON.stringify(body ?? null);
+    res.writeHead(status, {
+        ...SECURITY_HEADERS,
+        "Content-Type": "application/json; charset=utf-8",
+        "Content-Length": Buffer.byteLength(data),
+        "Cache-Control": "no-store",
+    });
+    res.end(data);
+};
+/** Large enough for any JSON body here (a webhook payload included), small enough not to buffer an attack. */
+const MAX_JSON_BYTES = 256 * 1024;
+const readJson = async (req) => {
+    const chunks = [];
+    let size = 0;
+    for await (const chunk of req) {
+        size += chunk.length;
+        if (size > MAX_JSON_BYTES)
+            throw new HttpError(413, "request body too large");
+        chunks.push(chunk);
+    }
+    if (size === 0)
+        return {};
+    try {
+        return JSON.parse(Buffer.concat(chunks).toString("utf8"));
+    }
+    catch {
+        throw new HttpError(400, "invalid JSON body");
+    }
+};
+/** Postgres error codes that are the caller's fault: a readable 4xx, not a 500. */
+const PG_CLIENT_ERRORS = {
+    "23505": 409, // unique_violation (a queue name that is taken)
+    "23503": 409, // foreign_key_violation
+    "23514": 400, // check_violation
+    "22P02": 400, // invalid_text_representation
+};
+const errorResponse = (e) => {
+    if (e instanceof HttpError)
+        return { status: e.status, message: e.message };
+    if (e instanceof ZodError)
+        return {
+            status: 400,
+            message: e.issues
+                .map((i) => `${i.path.join(".") || "body"}: ${i.message}`)
+                .join("; "),
+        };
+    const code = e?.code;
+    if (typeof code === "string" && PG_CLIENT_ERRORS[code])
+        return { status: PG_CLIENT_ERRORS[code], message: e.message };
+    return { status: 500, message: "internal error" };
+};
+const isWrite = (method) => method !== "GET" && method !== "HEAD";
+const isJson = (req) => /^application\/json\s*(;|$)/i.test(req.headers["content-type"] ?? "");
+/**
+ * One request.
+ * - The page and its assets are served without a user check: Caddy's SSO gate
+ *   covers every path but /health and /hooks/bambuddy.
+ * - `sso` API routes need the SSO user header (else 500: fail closed); their
+ *   writes must carry Origin == deps.origin, so neither a sibling subdomain's
+ *   script nor a plain HTML form can make one.
+ * - `webhook` routes need the bearer token.
+ * Each write leaves an audit line with the user.
+ */
+export const handle = async (req, res, deps) => {
+    const started = Date.now();
+    const method = req.method ?? "GET";
+    const url = new URL(req.url ?? "/", "http://localhost");
+    let user = "-";
+    const audit = (status, note = "") => deps.log(`user=${user} ${method} ${url.pathname}${url.search} ${status} ${Date.now() - started}ms${note}`);
+    try {
+        const isApi = url.pathname.startsWith("/api/") ||
+            url.pathname === "/health" ||
+            url.pathname.startsWith("/hooks/");
+        if (!isApi) {
+            if (isWrite(method))
+                throw new HttpError(405, "method not allowed");
+            return await serveStatic(req, res, deps.staticDir, url.pathname);
+        }
+        const match = deps.router.match(method, url.pathname);
+        if (match === null)
+            throw new HttpError(404, "not found");
+        if (match === "method")
+            throw new HttpError(405, "method not allowed");
+        if (match.access === "sso") {
+            const u = ssoUser(req, deps.userHeader, deps.devUser);
+            if (!u) {
+                deps.log(`${method} ${url.pathname}: no ${deps.userHeader} header; is the SSO gate in front?`);
+                throw new HttpError(500, "no SSO user: the request did not come through the SSO gate");
+            }
+            user = u;
+            if (isWrite(method) && req.headers.origin !== deps.origin) {
+                audit(403, ` (Origin ${JSON.stringify(req.headers.origin ?? null)})`);
+                return sendJson(res, 403, { error: "cross-origin write refused" });
+            }
+        }
+        else if (match.access === "webhook") {
+            if (!bearerMatches(req, deps.webhookToken)) {
+                audit(401);
+                return sendJson(res, 401, { error: "invalid or missing bearer token" });
+            }
+            user = "bambuddy";
+        }
+        let body;
+        if (isWrite(method) && match.body === "json") {
+            if (!isJson(req))
+                throw new HttpError(415, "a write must be Content-Type: application/json");
+            body = await readJson(req);
+        }
+        const result = await match.handler({
+            req,
+            res,
+            url,
+            params: match.params,
+            body,
+            user,
+        });
+        if (result === HANDLED)
+            return;
+        const [status, payload] = result instanceof Reply ? [result.status, result.body] : [200, result];
+        sendJson(res, status, payload);
+        if (isWrite(method))
+            audit(status);
+    }
+    catch (e) {
+        const { status, message } = errorResponse(e);
+        if (status >= 500)
+            deps.log(`${method} ${url.pathname}: ${e instanceof Error ? (e.stack ?? e.message) : String(e)}`);
+        if (res.headersSent) {
+            res.end();
+            return;
+        }
+        sendJson(res, status, { error: message });
+        if (isWrite(method) || status >= 500)
+            audit(status);
+    }
+};
+const CONTENT_TYPES = {
+    ".html": "text/html; charset=utf-8",
+    ".js": "text/javascript; charset=utf-8",
+    ".css": "text/css; charset=utf-8",
+    ".svg": "image/svg+xml",
+    ".png": "image/png",
+    ".ico": "image/x-icon",
+    ".json": "application/json",
+    ".woff2": "font/woff2",
+    ".txt": "text/plain; charset=utf-8",
+};
+const isFile = async (path) => {
+    try {
+        return (await stat(path)).isFile();
+    }
+    catch {
+        return false;
+    }
+};
+/**
+ * The built front-end. Vite's hashed files under /assets/ are cached for a
+ * year; everything else is revalidated. A path without an extension that is
+ * not a file is a page of the app (client-side routing): index.html.
+ */
+const serveStatic = async (req, res, dir, pathname) => {
+    if (!dir)
+        throw new HttpError(404, "not found");
+    let rel;
+    try {
+        rel = normalize(decodeURIComponent(pathname)).replace(/^([/\\])+/, "");
+    }
+    catch {
+        throw new HttpError(400, "bad path");
+    }
+    if (rel.includes("\0") || rel.split(sep).includes(".."))
+        throw new HttpError(400, "bad path");
+    let file = join(dir, rel);
+    if (rel === "" || !(await isFile(file))) {
+        if (extname(rel) !== "")
+            throw new HttpError(404, "not found");
+        file = join(dir, "index.html");
+    }
+    const data = await readFile(file);
+    res.writeHead(200, {
+        ...SECURITY_HEADERS,
+        "Content-Type": CONTENT_TYPES[extname(file)] ?? "application/octet-stream",
+        "Content-Length": data.length,
+        "Cache-Control": rel.startsWith("assets/")
+            ? "public, max-age=31536000, immutable"
+            : "no-cache",
+    });
+    res.end(req.method === "HEAD" ? undefined : data);
+};
+//# sourceMappingURL=http.js.map

package/dist/server/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../../src/server/http.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAElD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAC1D,OAAO,EAAE,QAAQ,EAAE,MAAM,KAAK,CAAC;AAC/B,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEnD,kEAAkE;AAClE,MAAM,OAAO,SAAU,SAAQ,KAAK;IAEvB;IADX,YACW,MAAc,EACvB,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAHN,WAAM,GAAN,MAAM,CAAQ;IAIzB,CAAC;CACF;AA8BD,yEAAyE;AACzE,MAAM,CAAC,MAAM,OAAO,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;AAEzC,0GAA0G;AAC1G,MAAM,OAAO,KAAK;IAEL;IACA;IAFX,YACW,MAAc,EACd,IAAa;QADb,WAAM,GAAN,MAAM,CAAQ;QACd,SAAI,GAAJ,IAAI,CAAS;IACrB,CAAC;CACL;AA0BD,4EAA4E;AAC5E,MAAM,OAAO,MAAM;IACR,OAAO,GAAY,EAAE,CAAC;IAE/B,GAAG,CACD,MAAc,EACd,IAAY,EACZ,OAAgB,EAChB,OAAqB,EAAE;QAEvB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;YAChB,MAAM;YACN,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;YACtB,OAAO;YACP,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,KAAK;YAC5B,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,MAAM;SAC1B,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IACD,GAAG,GAAG,CAAC,IAAY,EAAE,OAAgB,EAAE,IAAmB,EAAE,EAAE,CAC5D,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IACvC,IAAI,GAAG,CAAC,IAAY,EAAE,OAAgB,EAAE,IAAmB,EAAE,EAAE,CAC7D,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IACxC,KAAK,GAAG,CAAC,IAAY,EAAE,OAAgB,EAAE,IAAmB,EAAE,EAAE,CAC9D,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IACzC,MAAM,GAAG,CAAC,IAAY,EAAE,OAAgB,EAAE,IAAmB,EAAE,EAAE,CAC/D,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IAE1C,kEAAkE;IAClE,KAAK,CAAC,MAAc,EAAE,QAAgB;QACpC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,WAAW,GAAG,KAAK,CAAC;QACxB,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAC7B,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;gBAAE,SAAS;YAC9C,MAAM,MAAM,GAA2B,EAAE,CAAC;YAC1C,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;gBAChC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBACtB,IAAI,CAAC;wBACH,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC;oBACrD,CAAC;oBAAC,MAAM,CAAC;wBACP,OAAO,KAAK,CAAC;oBACf,CAAC;oBACD,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;gBACzB,CAAC;gBACD,OAAO,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC;YACxB,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,EAAE;gBAAE,SAAS;YAClB,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC;gBAClE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YACxE,WAAW,GAAG,IAAI,CAAC;QACrB,CAAC;QACD,OAAO,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;IACvC,CAAC;CACF;AAED,kEAAkE;AAClE,MAAM,CAAC,MAAM,gBAAgB,GAA2B;IACtD,yBAAyB,EACvB,gIAAgI;IAClI,wBAAwB,EAAE,SAAS;IACnC,iBAAiB,EAAE,aAAa;CACjC,CAAC;AAEF,MAAM,CAAC,MAAM,QAAQ,GAAG,CACtB,GAAmB,EACnB,MAAc,EACd,IAAa,EACP,EAAE;IACR,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC;IAC1C,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE;QACpB,GAAG,gBAAgB;QACnB,cAAc,EAAE,iCAAiC;QACjD,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC;QACzC,eAAe,EAAE,UAAU;KAC5B,CAAC,CAAC;IACH,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC,CAAC;AAEF,8GAA8G;AAC9G,MAAM,cAAc,GAAG,GAAG,GAAG,IAAI,CAAC;AAElC,MAAM,QAAQ,GAAG,KAAK,EAAE,GAAoB,EAAoB,EAAE;IAChE,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,GAA4B,EAAE,CAAC;QACvD,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC;QACrB,IAAI,IAAI,GAAG,cAAc;YACvB,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,wBAAwB,CAAC,CAAC;QACrD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;IACD,IAAI,IAAI,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAC1B,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;IAChD,CAAC;AACH,CAAC,CAAC;AAEF,mFAAmF;AACnF,MAAM,gBAAgB,GAA2B;IAC/C,OAAO,EAAE,GAAG,EAAE,gDAAgD;IAC9D,OAAO,EAAE,GAAG,EAAE,wBAAwB;IACtC,OAAO,EAAE,GAAG,EAAE,kBAAkB;IAChC,OAAO,EAAE,GAAG,EAAE,8BAA8B;CAC7C,CAAC;AAEF,MAAM,aAAa,GAAG,CAAC,CAAU,EAAuC,EAAE;IACxE,IAAI,CAAC,YAAY,SAAS;QAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;IAC5E,IAAI,CAAC,YAAY,QAAQ;QACvB,OAAO;YACL,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,CAAC,CAAC,MAAM;iBACd,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,MAAM,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;iBACzD,IAAI,CAAC,IAAI,CAAC;SACd,CAAC;IACJ,MAAM,IAAI,GAAI,CAAwB,EAAE,IAAI,CAAC;IAC7C,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,gBAAgB,CAAC,IAAI,CAAC;QACpD,OAAO,EAAE,MAAM,EAAE,gBAAgB,CAAC,IAAI,CAAE,EAAE,OAAO,EAAG,CAAW,CAAC,OAAO,EAAE,CAAC;IAC5E,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC;AACpD,CAAC,CAAC;AAgBF,MAAM,OAAO,GAAG,CAAC,MAAc,EAAE,EAAE,CAAC,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM,CAAC;AAC1E,MAAM,MAAM,GAAG,CAAC,GAAoB,EAAE,EAAE,CACtC,6BAA6B,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC;AAExE;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,MAAM,GAAG,KAAK,EACzB,GAAoB,EACpB,GAAmB,EACnB,IAAgB,EACD,EAAE;IACjB,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3B,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC;IACnC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;IACxD,IAAI,IAAI,GAAG,GAAG,CAAC;IACf,MAAM,KAAK,GAAG,CAAC,MAAc,EAAE,IAAI,GAAG,EAAE,EAAE,EAAE,CAC1C,IAAI,CAAC,GAAG,CACN,QAAQ,IAAI,IAAI,MAAM,IAAI,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM,IAAI,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,KAAK,IAAI,EAAE,CACjG,CAAC;IAEJ,IAAI,CAAC;QACH,MAAM,KAAK,GACT,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC;YAChC,GAAG,CAAC,QAAQ,KAAK,SAAS;YAC1B,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QACrC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,IAAI,OAAO,CAAC,MAAM,CAAC;gBAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;YACpE,OAAO,MAAM,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;QACnE,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;QACtD,IAAI,KAAK,KAAK,IAAI;YAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QAC1D,IAAI,KAAK,KAAK,QAAQ;YAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;QAEvE,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YAC3B,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YACtD,IAAI,CAAC,CAAC,EAAE,CAAC;gBACP,IAAI,CAAC,GAAG,CACN,GAAG,MAAM,IAAI,GAAG,CAAC,QAAQ,QAAQ,IAAI,CAAC,UAAU,oCAAoC,CACrF,CAAC;gBACF,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,4DAA4D,CAC7D,CAAC;YACJ,CAAC;YACD,IAAI,GAAG,CAAC,CAAC;YACT,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;gBAC1D,KAAK,CAAC,GAAG,EAAE,YAAY,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC;gBACtE,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC,CAAC;YACrE,CAAC;QACH,CAAC;aAAM,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACtC,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;gBAC3C,KAAK,CAAC,GAAG,CAAC,CAAC;gBACX,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,iCAAiC,EAAE,CAAC,CAAC;YAC1E,CAAC;YACD,IAAI,GAAG,UAAU,CAAC;QACpB,CAAC;QAED,IAAI,IAAa,CAAC;QAClB,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC7C,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC;gBACd,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,gDAAgD,CACjD,CAAC;YACJ,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC7B,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC;YACjC,GAAG;YACH,GAAG;YACH,GAAG;YACH,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,IAAI;YACJ,IAAI;SACL,CAAC,CAAC;QACH,IAAI,MAAM,KAAK,OAAO;YAAE,OAAO;QAC/B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACrB,MAAM,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACzE,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QAC/B,IAAI,OAAO,CAAC,MAAM,CAAC;YAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;QAC7C,IAAI,MAAM,IAAI,GAAG;YACf,IAAI,CAAC,GAAG,CACN,GAAG,MAAM,IAAI,GAAG,CAAC,QAAQ,KAAK,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CACxF,CAAC;QACJ,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;YACpB,GAAG,CAAC,GAAG,EAAE,CAAC;YACV,OAAO;QACT,CAAC;QACD,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QAC1C,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,GAAG;YAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACtD,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,aAAa,GAA2B;IAC5C,OAAO,EAAE,0BAA0B;IACnC,KAAK,EAAE,gCAAgC;IACvC,MAAM,EAAE,yBAAyB;IACjC,MAAM,EAAE,eAAe;IACvB,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,cAAc;IACtB,OAAO,EAAE,kBAAkB;IAC3B,QAAQ,EAAE,YAAY;IACtB,MAAM,EAAE,2BAA2B;CACpC,CAAC;AAEF,MAAM,MAAM,GAAG,KAAK,EAAE,IAAY,EAAoB,EAAE;IACtD,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,WAAW,GAAG,KAAK,EACvB,GAAoB,EACpB,GAAmB,EACnB,GAAkB,EAClB,QAAgB,EACD,EAAE;IACjB,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAChD,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,SAAS,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IACzE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IACvC,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QACrD,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IAEvC,IAAI,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC1B,IAAI,GAAG,KAAK,EAAE,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QACxC,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE;YAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QAC/D,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IACjC,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;IAClC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;QACjB,GAAG,gBAAgB;QACnB,cAAc,EAAE,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,0BAA0B;QAC1E,gBAAgB,EAAE,IAAI,CAAC,MAAM;QAC7B,eAAe,EAAE,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC;YACxC,CAAC,CAAC,qCAAqC;YACvC,CAAC,CAAC,UAAU;KACf,CAAC,CAAC;IACH,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AACpD,CAAC,CAAC"}

package/dist/server/log.d.ts

@@ -0,0 +1,4 @@
+/** One line per event on stdout (Dozzle), with a timestamp. */
+export declare const log: (line: string) => void;
+export declare const errorMessage: (e: unknown) => string;
+//# sourceMappingURL=log.d.ts.map

package/dist/server/log.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"log.d.ts","sourceRoot":"","sources":["../../src/server/log.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,eAAO,MAAM,GAAG,GAAI,MAAM,MAAM,KAAG,IACiB,CAAC;AAErD,eAAO,MAAM,YAAY,GAAI,GAAG,OAAO,KAAG,MACE,CAAC"}

package/dist/server/log.js

@@ -0,0 +1,4 @@
+/** One line per event on stdout (Dozzle), with a timestamp. */
+export const log = (line) => console.log(`${new Date().toISOString()} ${line}`);
+export const errorMessage = (e) => e instanceof Error ? e.message : String(e);
+//# sourceMappingURL=log.js.map

package/dist/server/log.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"log.js","sourceRoot":"","sources":["../../src/server/log.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC,IAAY,EAAQ,EAAE,CACxC,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;AAErD,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAU,EAAU,EAAE,CACjD,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC"}

package/dist/server/schema.d.ts

@@ -0,0 +1,14 @@
+import type { Sql } from "./db.js";
+/**
+ * dbmate's bookkeeping table, schema-qualified so it never depends on
+ * search_path.
+ */
+export declare const MIGRATIONS_TABLE = "backlog.schema_migrations";
+/**
+ * Bring schema `backlog` up to date and make sure the default queue exists.
+ * Safe to re-run on every start; a second run changes nothing.
+ */
+export declare const applySchema: (sql: Sql, defaultQueue: string) => Promise<void>;
+/** The first queue, created only while there is none (it can be renamed later). */
+export declare const ensureDefaultQueue: (sql: Sql, name: string) => Promise<void>;
+//# sourceMappingURL=schema.d.ts.map

package/dist/server/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/server/schema.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,SAAS,CAAC;AAEnC;;;GAGG;AACH,eAAO,MAAM,gBAAgB,8BAA8B,CAAC;AAqD5D;;;GAGG;AACH,eAAO,MAAM,WAAW,GACtB,KAAK,GAAG,EACR,cAAc,MAAM,KACnB,OAAO,CAAC,IAAI,CAId,CAAC;AAEF,mFAAmF;AACnF,eAAO,MAAM,kBAAkB,GAC7B,KAAK,GAAG,EACR,MAAM,MAAM,KACX,OAAO,CAAC,IAAI,CAMd,CAAC"}

package/dist/server/schema.js

@@ -0,0 +1,67 @@
+import { spawnSync } from "node:child_process";
+import { createRequire } from "node:module";
+import { fileURLToPath } from "node:url";
+/**
+ * dbmate's bookkeeping table, schema-qualified so it never depends on
+ * search_path.
+ */
+export const MIGRATIONS_TABLE = "backlog.schema_migrations";
+/** The migrations ship inside the package (`files`: db); this module is <pkg>/dist/server/schema.js. */
+const migrationsDir = () => fileURLToPath(new URL("../../db/migrations", import.meta.url));
+/**
+ * dbmate's JS launcher, resolved inside the package: `npm install -g` links no
+ * `dbmate` onto PATH for a dependency. It picks the platform binary from
+ * dbmate's optionalDependencies at run time.
+ */
+const dbmateCli = () => createRequire(import.meta.url).resolve("dbmate/dist/cli.js");
+/** DATABASE_URL for dbmate from the same PG* variables postgres.js reads. */
+const databaseUrl = () => {
+    const enc = encodeURIComponent;
+    const user = enc(process.env.PGUSER ?? "");
+    const password = process.env.PGPASSWORD;
+    const auth = password ? `${user}:${enc(password)}` : user;
+    const host = process.env.PGHOST ?? "localhost";
+    const port = process.env.PGPORT ?? "5432";
+    const database = enc(process.env.PGDATABASE ?? "");
+    const sslmode = process.env.PGSSLMODE ?? "disable";
+    return `postgres://${auth}@${host}:${port}/${database}?sslmode=${sslmode}`;
+};
+const dbmateEnv = () => ({
+    ...process.env,
+    DATABASE_URL: databaseUrl(),
+    DBMATE_MIGRATIONS_DIR: migrationsDir(),
+    DBMATE_MIGRATIONS_TABLE: MIGRATIONS_TABLE,
+    // The image has no pg_dump, and the schema snapshot is not kept.
+    DBMATE_NO_DUMP_SCHEMA: "true",
+    // Refuse a pending migration that sorts before an applied one.
+    DBMATE_STRICT: "true",
+});
+/** One dbmate subcommand. Never `up` (CREATE DATABASE) and never `drop`. */
+const dbmate = (...args) => {
+    const { status, error } = spawnSync(process.execPath, [dbmateCli(), ...args], {
+        stdio: "inherit",
+        env: dbmateEnv(),
+    });
+    if (error)
+        throw error;
+    if (status !== 0)
+        throw new Error(`dbmate ${args.join(" ")} exited with ${status}`);
+};
+/**
+ * Bring schema `backlog` up to date and make sure the default queue exists.
+ * Safe to re-run on every start; a second run changes nothing.
+ */
+export const applySchema = async (sql, defaultQueue) => {
+    await sql `CREATE SCHEMA IF NOT EXISTS backlog`;
+    dbmate("migrate");
+    await ensureDefaultQueue(sql, defaultQueue);
+};
+/** The first queue, created only while there is none (it can be renamed later). */
+export const ensureDefaultQueue = async (sql, name) => {
+    await sql `
+    INSERT INTO backlog.queue (name, position)
+    SELECT ${name}, 1024
+    WHERE NOT EXISTS (SELECT 1 FROM backlog.queue)
+  `;
+};
+//# sourceMappingURL=schema.js.map

package/dist/server/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/server/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAGzC;;;GAGG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,2BAA2B,CAAC;AAE5D,wGAAwG;AACxG,MAAM,aAAa,GAAG,GAAW,EAAE,CACjC,aAAa,CAAC,IAAI,GAAG,CAAC,qBAAqB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAEjE;;;;GAIG;AACH,MAAM,SAAS,GAAG,GAAW,EAAE,CAC7B,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;AAE/D,6EAA6E;AAC7E,MAAM,WAAW,GAAG,GAAW,EAAE;IAC/B,MAAM,GAAG,GAAG,kBAAkB,CAAC;IAC/B,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;IACxC,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1D,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,IAAI,WAAW,CAAC;IAC/C,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,IAAI,MAAM,CAAC;IAC1C,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;IACnD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,SAAS,CAAC;IACnD,OAAO,cAAc,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,QAAQ,YAAY,OAAO,EAAE,CAAC;AAC7E,CAAC,CAAC;AAEF,MAAM,SAAS,GAAG,GAAsB,EAAE,CAAC,CAAC;IAC1C,GAAG,OAAO,CAAC,GAAG;IACd,YAAY,EAAE,WAAW,EAAE;IAC3B,qBAAqB,EAAE,aAAa,EAAE;IACtC,uBAAuB,EAAE,gBAAgB;IACzC,iEAAiE;IACjE,qBAAqB,EAAE,MAAM;IAC7B,+DAA+D;IAC/D,aAAa,EAAE,MAAM;CACtB,CAAC,CAAC;AAEH,4EAA4E;AAC5E,MAAM,MAAM,GAAG,CAAC,GAAG,IAAuB,EAAQ,EAAE;IAClD,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,SAAS,CACjC,OAAO,CAAC,QAAQ,EAChB,CAAC,SAAS,EAAE,EAAE,GAAG,IAAI,CAAC,EACtB;QACE,KAAK,EAAE,SAAS;QAChB,GAAG,EAAE,SAAS,EAAE;KACjB,CACF,CAAC;IACF,IAAI,KAAK;QAAE,MAAM,KAAK,CAAC;IACvB,IAAI,MAAM,KAAK,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,gBAAgB,MAAM,EAAE,CAAC,CAAC;AACtE,CAAC,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,KAAK,EAC9B,GAAQ,EACR,YAAoB,EACL,EAAE;IACjB,MAAM,GAAG,CAAA,qCAAqC,CAAC;IAC/C,MAAM,CAAC,SAAS,CAAC,CAAC;IAClB,MAAM,kBAAkB,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;AAC9C,CAAC,CAAC;AAEF,mFAAmF;AACnF,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,EACrC,GAAQ,EACR,IAAY,EACG,EAAE;IACjB,MAAM,GAAG,CAAA;;aAEE,IAAI;;GAEd,CAAC;AACJ,CAAC,CAAC"}

package/dist/server/version.d.ts

@@ -0,0 +1,3 @@
+/** This package's version, from its package.json (<pkg>/dist/server/version.js -> <pkg>/package.json). */
+export declare const VERSION: string;
+//# sourceMappingURL=version.d.ts.map

package/dist/server/version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../../src/server/version.ts"],"names":[],"mappings":"AAEA,0GAA0G;AAC1G,eAAO,MAAM,OAAO,EAAE,MAEb,CAAC"}

package/dist/server/version.js

@@ -0,0 +1,4 @@
+import { createRequire } from "node:module";
+/** This package's version, from its package.json (<pkg>/dist/server/version.js -> <pkg>/package.json). */
+export const VERSION = createRequire(import.meta.url)("../../package.json").version;
+//# sourceMappingURL=version.js.map

package/dist/server/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../../src/server/version.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,0GAA0G;AAC1G,MAAM,CAAC,MAAM,OAAO,GAClB,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,oBAAoB,CACpD,CAAC,OAAO,CAAC"}