@nocobase/app-plugin-projects 0.0.0-stage → 0.1.0-beta.2

package/dist/server/domains/plans/ports.d.ts

@@ -0,0 +1,91 @@
+/**
+ * The plan engine as other plugins and this plugin's routes use it (the contract is `shared/plans.ts`).
+ *
+ * - The browser goes through `/api/projects/plans` (`plan.routes.ts`), which calls the methods below with the request's
+ *   `Viewer`.
+ * - The agents plugin's bridge calls them with a `Viewer` it builds for the asker: the asker's own user id and their
+ *   permissions narrowed to what the agent is configured with, and an actor `{ type: 'user', id, via: 'agent', trace:
+ *   { agentId, runId, conversationId } }`. `rehearse` tells it whether a change may be a direct write (no risk flags,
+ *   at most two objects) or needs a plan; `create(…, { execute: true })` makes a direct write undoable like a plan.
+ * - A plugin proposing to someone else (a status rule suggesting executors to an issue's owner) uses `propose`: the
+ *   plan is rehearsed with the decider's own permissions (`ProjectsAccess.permissionsOfUser`).
+ * - `PlanHooks.onPlanDecided` (bound through `projectsPlanHooksToken`) hears every decision, in the transaction that
+ *   records it.
+ */
+import type { Page } from '../../../shared/common.js';
+import type { CreatePlanRequest, EditPlanRequest, Plan, PlanActionRequest, PlanDecided, PlanListQuery, PlanRehearsal, PlanSource, PlanUndoPreview } from '../../../shared/plans.js';
+import type { Context } from 'hono';
+import type { Viewer } from '../../access/viewer.js';
+import type { Actor } from '../../kernel/actor.js';
+import type { Tx } from '../../kernel/tx.js';
+export interface PlanHooks {
+    /**
+     * A plan was executed, failed, went stale, was voided by a person or was undone. Runs in the transaction that records
+     * the outcome (for `executed` and `undone`, the one that applied the rows or reverted them): what it writes commits with it. Throwing
+     * fails that transaction, so a hook should catch what it can live without.
+     */
+    onPlanDecided?(tx: Tx, decided: PlanDecided): Promise<void>;
+}
+/** A plan the person just executed, as a source's own follow-up sees it (`PlanDeps.onExecuted`). */
+export interface ExecutedPlan {
+    readonly sourceKind: string;
+    readonly sourceData: unknown;
+    /** Who executed it, as the rows ran. */
+    readonly viewer: Viewer;
+    /** Each row's ref and what it created, in order. */
+    readonly rows: readonly {
+        readonly ref: string | null;
+        readonly created: {
+            readonly type: string;
+            readonly id: string | null;
+        } | null;
+    }[];
+}
+/**
+ * Runs in the transaction that executed a plan, after its rows: what it writes commits with them, and
+ * throwing fails the execution.
+ */
+export type PlanExecutedHook = (tx: Tx, plan: ExecutedPlan) => Promise<void>;
+export interface CreatePlanOptions {
+    /** Executes the plan right after storing it, as the same viewer (a direct write that stays undoable). */
+    readonly execute?: boolean;
+}
+export interface PlanService {
+    /** Rehearses the rows as the viewer and stores nothing. */
+    rehearse(viewer: Viewer, input: CreatePlanRequest): Promise<PlanRehearsal>;
+    /**
+     * Rehearses and stores a plan the viewer decides; 400 `PLAN_INVALID` with every row's check when a row fails. Voids
+     * the viewer's open plans with the same `source.key`.
+     */
+    create(viewer: Viewer, input: CreatePlanRequest, options?: CreatePlanOptions): Promise<Plan>;
+    /** As `create`, for `input.deciderUserId`, rehearsed with that person's permissions; submitted by `by`. */
+    propose(input: CreatePlanRequest & {
+        readonly deciderUserId: string;
+    }, by?: Actor): Promise<Plan>;
+    get(viewer: Viewer, id: string): Promise<Plan>;
+    list(viewer: Viewer, query: PlanListQuery): Promise<Page<Plan>>;
+    edit(viewer: Viewer, id: string, input: EditPlanRequest): Promise<Plan>;
+    /** Executes it as the viewer; answers the plan `executed`, `stale` or `failed`. */
+    execute(viewer: Viewer, id: string, input: PlanActionRequest): Promise<Plan>;
+    /** Rehearses a `failed` or `stale` plan again, with fresh baselines; `pending` when every row passes. */
+    retry(viewer: Viewer, id: string, input: PlanActionRequest): Promise<Plan>;
+    void(viewer: Viewer, id: string, input: PlanActionRequest): Promise<Plan>;
+    /** What undoing an executed plan would revert now, and what it would leave alone; changes nothing. */
+    previewUndo(viewer: Viewer, id: string): Promise<PlanUndoPreview>;
+    /**
+     * Undoes an executed plan at once, in one transaction, as the viewer (the person who executed it): the rows the
+     * preview lists are reverted, the plan becomes `undone`. 409 `UNDO_STALE` when something changed meanwhile.
+     */
+    undo(viewer: Viewer, id: string): Promise<Plan>;
+    /** Marks open plans past their expiry `expired`; answers how many. Reads expire lazily too. */
+    expire(now?: Date): Promise<number>;
+}
+/**
+ * Where the plans a request proposes come from, when the application decides it from the request's credential (the assembling application:
+ * an agent's run in a person's conversation proposes as `conversation`, or `intake` from the AI draft tab, keyed
+ * `conversation:<id>`, so a newer plan replaces the open one). `null` refuses the request any plan (an agent working on
+ * an issue); undefined leaves the source to the request. `POST /plans` stores the plan with it, and `GET /plans` lists
+ * that source's plans unless asked for `all`.
+ */
+export type PlanSourceOf = (context: Context) => Promise<PlanSource | null | undefined>;
+//# sourceMappingURL=ports.d.ts.map

package/dist/server/domains/plans/ports.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ports.d.ts","sourceRoot":"","sources":["../../../../server/domains/plans/ports.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,2BAA2B,CAAC;AACtD,OAAO,KAAK,EACV,iBAAiB,EACjB,eAAe,EACf,IAAI,EACJ,iBAAiB,EACjB,WAAW,EACX,aAAa,EACb,aAAa,EACb,UAAU,EACV,eAAe,EAChB,MAAM,0BAA0B,CAAC;AAClC,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAEpC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,oBAAoB,CAAC;AAE7C,MAAM,WAAW,SAAS;IACxB;;;;OAIG;IACH,aAAa,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7D;AAED,oGAAoG;AACpG,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,wCAAwC;IACxC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,oDAAoD;IACpD,QAAQ,CAAC,IAAI,EAAE,SAAS;QACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;QAC5B,QAAQ,CAAC,OAAO,EAAE;YAChB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;YACtB,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;SAC5B,GAAG,IAAI,CAAC;KACV,EAAE,CAAC;CACL;AAED;;;GAGG;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,YAAY,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;AAE7E,MAAM,WAAW,iBAAiB;IAChC,yGAAyG;IACzG,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,WAAW;IAC1B,2DAA2D;IAC3D,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAC3E;;;OAGG;IACH,MAAM,CACJ,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,iBAAiB,EACxB,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB,2GAA2G;IAC3G,OAAO,CACL,KAAK,EAAE,iBAAiB,GAAG;QAAE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;KAAE,EAC7D,EAAE,CAAC,EAAE,KAAK,GACT,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/C,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAChE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxE,mFAAmF;IACnF,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7E,yGAAyG;IACzG,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3E,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1E,sGAAsG;IACtG,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAClE;;;OAGG;IACH,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChD,+FAA+F;IAC/F,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CACrC;AAED;;;;;;GAMG;AACH,MAAM,MAAM,YAAY,GAAG,CACzB,OAAO,EAAE,OAAO,KACb,OAAO,CAAC,UAAU,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC"}

package/dist/server/domains/plans/ports.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=ports.js.map

package/dist/server/domains/plans/ports.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ports.js","sourceRoot":"","sources":["../../../../server/domains/plans/ports.ts"],"names":[],"mappings":""}

package/dist/server/domains/projects/index.d.ts

@@ -0,0 +1,6 @@
+export { createProjectService, type ProjectIssues, type ProjectWorkflowChoice, type ProjectService, } from './project.service.js';
+export { createProjectRoutes } from './project.routes.js';
+export { canManage as canManageProject, relationTo as projectRelation, visibleProjects, type ProjectRelation, } from './project.access.js';
+export { addMember as joinProject, findProject, listResources as projectResources, projectNames, updateProject, } from './project.store.js';
+export type { ProjectAccessInfo } from './project-resources.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/server/domains/projects/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../server/domains/projects/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oBAAoB,EACpB,KAAK,aAAa,EAClB,KAAK,qBAAqB,EAC1B,KAAK,cAAc,GACpB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EACL,SAAS,IAAI,gBAAgB,EAC7B,UAAU,IAAI,eAAe,EAC7B,eAAe,EACf,KAAK,eAAe,GACrB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,SAAS,IAAI,WAAW,EACxB,WAAW,EACX,aAAa,IAAI,gBAAgB,EACjC,YAAY,EACZ,aAAa,GACd,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC"}

package/dist/server/domains/projects/index.js

@@ -0,0 +1,5 @@
+export { createProjectService, } from './project.service.js';
+export { createProjectRoutes } from './project.routes.js';
+export { canManage as canManageProject, relationTo as projectRelation, visibleProjects, } from './project.access.js';
+export { addMember as joinProject, findProject, listResources as projectResources, projectNames, updateProject, } from './project.store.js';
+//# sourceMappingURL=index.js.map

package/dist/server/domains/projects/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../server/domains/projects/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oBAAoB,GAIrB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EACL,SAAS,IAAI,gBAAgB,EAC7B,UAAU,IAAI,eAAe,EAC7B,eAAe,GAEhB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,SAAS,IAAI,WAAW,EACxB,WAAW,EACX,aAAa,IAAI,gBAAgB,EACjC,YAAY,EACZ,aAAa,GACd,MAAM,oBAAoB,CAAC"}

package/dist/server/domains/projects/project-members.d.ts

@@ -0,0 +1,17 @@
+/** The members of a project. The lead is always a member, so the lead cannot be removed. */
+import type { UserRef } from '../../../shared/common.js';
+import type { AddProjectMemberRequest } from '../../../shared/projects.js';
+import type { Viewer } from '../../access/viewer.js';
+import type { IdSource } from '../../kernel/ids.js';
+import type { TxRunner } from '../../kernel/tx.js';
+import type { UserDirectory } from '../../kernel/users.js';
+export interface ProjectMembers {
+    addMember(viewer: Viewer, projectId: string, input: AddProjectMemberRequest): Promise<UserRef[]>;
+    removeMember(viewer: Viewer, projectId: string, userId: string): Promise<UserRef[]>;
+}
+export declare function createProjectMembers(deps: {
+    readonly tx: TxRunner;
+    readonly ids: IdSource;
+    readonly users: UserDirectory;
+}): ProjectMembers;
+//# sourceMappingURL=project-members.d.ts.map

package/dist/server/domains/projects/project-members.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-members.d.ts","sourceRoot":"","sources":["../../../../server/domains/projects/project-members.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AAC3E,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAErD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAI3D,MAAM,WAAW,cAAc;IAC7B,SAAS,CACP,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,uBAAuB,GAC7B,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IACtB,YAAY,CACV,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;CACvB;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE;IACzC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;CAC/B,GAAG,cAAc,CAwBjB"}

package/dist/server/domains/projects/project-members.js

@@ -0,0 +1,21 @@
+import { conflict, invalid } from '../../kernel/errors.js';
+import { managed } from './project.access.js';
+import { addMember, listMembers, removeMember } from './project.store.js';
+export function createProjectMembers(deps) {
+    return {
+        addMember: (viewer, projectId, input) => managed(deps.tx, viewer, projectId, async (tx) => {
+            if (typeof input.userId !== 'string' ||
+                !(await deps.users.isPerson(tx.conn, input.userId)))
+                throw invalid('INVALID_USER', 'userId is not an active user.');
+            await addMember(tx.conn, deps.ids.next(), projectId, input.userId);
+            return listMembers(tx.conn, projectId);
+        }),
+        removeMember: (viewer, projectId, userId) => managed(deps.tx, viewer, projectId, async (tx, { project }) => {
+            if (project.leadUserId === userId)
+                throw conflict('LEAD_MEMBER', 'Choose another project lead before removing this member.');
+            await removeMember(tx.conn, projectId, userId);
+            return listMembers(tx.conn, projectId);
+        }),
+    };
+}
+//# sourceMappingURL=project-members.js.map

package/dist/server/domains/projects/project-members.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-members.js","sourceRoot":"","sources":["../../../../server/domains/projects/project-members.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AAI3D,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAe1E,MAAM,UAAU,oBAAoB,CAAC,IAIpC;IACC,OAAO;QACL,SAAS,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,CACtC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;YAC/C,IACE,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;gBAChC,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;gBAEnD,MAAM,OAAO,CAAC,cAAc,EAAE,+BAA+B,CAAC,CAAC;YACjE,MAAM,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;YACnE,OAAO,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QACzC,CAAC,CAAC;QAEJ,YAAY,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,CAC1C,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;YAC5D,IAAI,OAAO,CAAC,UAAU,KAAK,MAAM;gBAC/B,MAAM,QAAQ,CACZ,aAAa,EACb,0DAA0D,CAC3D,CAAC;YACJ,MAAM,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;YAC/C,OAAO,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QACzC,CAAC,CAAC;KACL,CAAC;AACJ,CAAC"}

package/dist/server/domains/projects/project-resources.d.ts

@@ -0,0 +1,33 @@
+/**
+ * The working directories of a project, in their order: git repositories, and directories that already exist on one
+ * runner. Each may carry an initialization prompt.
+ */
+import { type CreateProjectResourceRequest, type ProjectResource, type UpdateProjectResourceRequest } from '../../../shared/projects.js';
+import type { Viewer } from '../../access/viewer.js';
+import type { IdSource } from '../../kernel/ids.js';
+import type { TxRunner } from '../../kernel/tx.js';
+/** What a viewer may do with a project: see it, and manage it (its settings, members and working directories). */
+export interface ProjectAccessInfo {
+    readonly projectId: string;
+    readonly visible: boolean;
+    readonly manage: boolean;
+}
+export interface ProjectResources {
+    /**
+     * What `viewer` may do with a project, or with the project a working directory belongs to; null when it does not
+     * exist. For plugins that keep settings of a project or of one of its working directories (variables, skills).
+     */
+    accessTo(viewer: Viewer, target: {
+        readonly projectId: string;
+    } | {
+        readonly resourceId: string;
+    }): Promise<ProjectAccessInfo | null>;
+    addResource(viewer: Viewer, projectId: string, input: CreateProjectResourceRequest): Promise<ProjectResource>;
+    updateResource(viewer: Viewer, projectId: string, resourceId: string, patch: UpdateProjectResourceRequest): Promise<ProjectResource>;
+    removeResource(viewer: Viewer, projectId: string, resourceId: string): Promise<void>;
+}
+export declare function createProjectResources(deps: {
+    readonly tx: TxRunner;
+    readonly ids: IdSource;
+}): ProjectResources;
+//# sourceMappingURL=project-resources.d.ts.map

package/dist/server/domains/projects/project-resources.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-resources.d.ts","sourceRoot":"","sources":["../../../../server/domains/projects/project-resources.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAGL,KAAK,4BAA4B,EACjC,KAAK,eAAe,EAEpB,KAAK,4BAA4B,EAClC,MAAM,6BAA6B,CAAC;AACrC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAGrD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAYnD,kHAAkH;AAClH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,gBAAgB;IAC/B;;;OAGG;IACH,QAAQ,CACN,MAAM,EAAE,MAAM,EACd,MAAM,EAAE;QAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG;QAAE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;KAAE,GACvE,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAAC;IACrC,WAAW,CACT,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,4BAA4B,GAClC,OAAO,CAAC,eAAe,CAAC,CAAC;IAC5B,cAAc,CACZ,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,4BAA4B,GAClC,OAAO,CAAC,eAAe,CAAC,CAAC;IAC5B,cAAc,CACZ,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,IAAI,CAAC,CAAC;CAClB;AAqED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE;IAC3C,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC;CACxB,GAAG,gBAAgB,CAwGnB"}

package/dist/server/domains/projects/project-resources.js

@@ -0,0 +1,153 @@
+/**
+ * The working directories of a project, in their order: git repositories, and directories that already exist on one
+ * runner. Each may carry an initialization prompt.
+ */
+import { isAbsoluteDirectory, RESOURCE_INIT_PROMPT_MAX, } from '../../../shared/projects.js';
+import { canManage, relationTo } from './project.access.js';
+import { invalid, notFound } from '../../kernel/errors.js';
+import { optionalText } from '../../kernel/validate.js';
+import { managed } from './project.access.js';
+import { deleteResource, findResource, findResourceById, insertResource, nextResourcePosition, updateResource, } from './project.store.js';
+const REMOTE_URL = /^(https?:\/\/|ssh:\/\/|git@|file:\/\/)\S+$/u;
+function validUrl(value) {
+    const url = typeof value === 'string' ? value.trim() : '';
+    if (!url || url.length > 2000 || !REMOTE_URL.test(url))
+        throw invalid('INVALID_URL', 'url must be a git remote (https://, ssh://, git@ or file://).');
+    return url;
+}
+function validRunner(value) {
+    const runnerId = typeof value === 'string' ? value.trim() : '';
+    if (!runnerId || runnerId.length > 64)
+        throw invalid('INVALID_RUNNER', 'runnerId is required for a directory.');
+    return runnerId;
+}
+function validPath(value) {
+    const path = typeof value === 'string' ? value.trim() : '';
+    if (!isAbsoluteDirectory(path))
+        throw invalid('INVALID_PATH', 'path must be an absolute directory path.');
+    return path;
+}
+const BINDING_FIELDS = [
+    ['provider', 32],
+    ['connectionId', 64],
+    ['repoId', 64],
+    ['fullName', 255],
+];
+/** A repository's binding to its host: four short strings, stored as given; null unlinks it. */
+function bindingOf(value) {
+    if (value === null)
+        return null;
+    const record = value && typeof value === 'object' && !Array.isArray(value)
+        ? value
+        : null;
+    const fields = BINDING_FIELDS.map(([key, max]) => {
+        const field = record?.[key];
+        return typeof field === 'string' &&
+            field.trim() !== '' &&
+            field.trim().length <= max
+            ? field.trim()
+            : null;
+    });
+    if (!record || fields.some((field) => field === null))
+        throw invalid('INVALID_BINDING', 'binding is null or { provider, connectionId, repoId, fullName }, each a short string.');
+    const [provider, connectionId, repoId, fullName] = fields;
+    return {
+        provider: provider,
+        connectionId: connectionId,
+        repoId: repoId,
+        fullName: fullName,
+    };
+}
+function initPromptOf(value) {
+    const text = optionalText(value, 'initPrompt', RESOURCE_INIT_PROMPT_MAX);
+    return text?.trim() ? text.trim() : null;
+}
+export function createProjectResources(deps) {
+    return {
+        accessTo: async (viewer, target) => {
+            const conn = deps.tx.read();
+            const projectId = 'projectId' in target
+                ? target.projectId
+                : (await findResourceById(conn, target.resourceId))?.projectId;
+            if (!projectId)
+                return null;
+            const relation = await relationTo(conn, viewer, projectId);
+            if (!relation)
+                return null;
+            return {
+                projectId,
+                visible: relation.visible,
+                manage: relation.visible && canManage(viewer, relation),
+            };
+        },
+        addResource: (viewer, projectId, input) => managed(deps.tx, viewer, projectId, async (tx) => {
+            if (input.type !== 'gitRepo' && input.type !== 'directory')
+                throw invalid('INVALID_RESOURCE', 'type must be gitRepo or directory.');
+            const git = input.type === 'gitRepo';
+            const resource = {
+                id: deps.ids.next(),
+                projectId,
+                type: input.type,
+                url: git ? validUrl(input.url) : null,
+                defaultRef: git
+                    ? optionalText(input.defaultRef, 'defaultRef', 255)
+                    : null,
+                binding: git && input.binding !== undefined
+                    ? bindingOf(input.binding)
+                    : null,
+                runnerId: git ? null : validRunner(input.runnerId),
+                path: git ? null : validPath(input.path),
+                label: optionalText(input.label, 'label', 255),
+                initPrompt: initPromptOf(input.initPrompt),
+                position: await nextResourcePosition(tx.conn, projectId),
+            };
+            await insertResource(tx.conn, resource);
+            return resource;
+        }),
+        updateResource: (viewer, projectId, resourceId, patch) => managed(deps.tx, viewer, projectId, async (tx) => {
+            const existing = await findResource(tx.conn, projectId, resourceId);
+            if (!existing)
+                throw notFound('Resource');
+            if (patch.position !== undefined && !Number.isInteger(patch.position))
+                throw invalid('INVALID_POSITION', 'position must be an integer.');
+            const git = existing.type === 'gitRepo';
+            if (git
+                ? patch.runnerId !== undefined || patch.path !== undefined
+                : patch.url !== undefined ||
+                    patch.defaultRef !== undefined ||
+                    patch.binding !== undefined)
+                throw invalid('INVALID_RESOURCE', git
+                    ? 'A git repository has no runner or path.'
+                    : 'A directory has no url, default branch or binding.');
+            await updateResource(tx.conn, resourceId, {
+                ...(patch.url === undefined ? {} : { url: validUrl(patch.url) }),
+                ...(patch.defaultRef === undefined
+                    ? {}
+                    : {
+                        defaultRef: optionalText(patch.defaultRef, 'defaultRef', 255),
+                    }),
+                ...(patch.binding === undefined
+                    ? {}
+                    : { binding: bindingOf(patch.binding) }),
+                ...(patch.runnerId === undefined
+                    ? {}
+                    : { runnerId: validRunner(patch.runnerId) }),
+                ...(patch.path === undefined ? {} : { path: validPath(patch.path) }),
+                ...(patch.label === undefined
+                    ? {}
+                    : { label: optionalText(patch.label, 'label', 255) }),
+                ...(patch.initPrompt === undefined
+                    ? {}
+                    : { initPrompt: initPromptOf(patch.initPrompt) }),
+                ...(patch.position === undefined ? {} : { position: patch.position }),
+            });
+            return (await findResource(tx.conn, projectId, resourceId));
+        }),
+        removeResource: (viewer, projectId, resourceId) => managed(deps.tx, viewer, projectId, async (tx) => {
+            if (!(await findResource(tx.conn, projectId, resourceId)))
+                throw notFound('Resource');
+            await deleteResource(tx.conn, resourceId);
+        }),
+    };
+}
+//# sourceMappingURL=project-resources.js.map

package/dist/server/domains/projects/project-resources.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-resources.js","sourceRoot":"","sources":["../../../../server/domains/projects/project-resources.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EACL,mBAAmB,EACnB,wBAAwB,GAKzB,MAAM,6BAA6B,CAAC;AAErC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAG3D,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAC9C,OAAO,EACL,cAAc,EACd,YAAY,EACZ,gBAAgB,EAChB,cAAc,EACd,oBAAoB,EACpB,cAAc,GACf,MAAM,oBAAoB,CAAC;AAoC5B,MAAM,UAAU,GAAG,6CAA6C,CAAC;AAEjE,SAAS,QAAQ,CAAC,KAAc;IAC9B,MAAM,GAAG,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1D,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC;QACpD,MAAM,OAAO,CACX,aAAa,EACb,+DAA+D,CAChE,CAAC;IACJ,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,MAAM,QAAQ,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/D,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,EAAE;QACnC,MAAM,OAAO,CAAC,gBAAgB,EAAE,uCAAuC,CAAC,CAAC;IAC3E,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,MAAM,IAAI,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3D,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC;QAC5B,MAAM,OAAO,CAAC,cAAc,EAAE,0CAA0C,CAAC,CAAC;IAC5E,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,cAAc,GAAG;IACrB,CAAC,UAAU,EAAE,EAAE,CAAC;IAChB,CAAC,cAAc,EAAE,EAAE,CAAC;IACpB,CAAC,QAAQ,EAAE,EAAE,CAAC;IACd,CAAC,UAAU,EAAE,GAAG,CAAC;CACT,CAAC;AAEX,gGAAgG;AAChG,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAChC,MAAM,MAAM,GACV,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACzD,CAAC,CAAE,KAAiC;QACpC,CAAC,CAAC,IAAI,CAAC;IACX,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE;QAC/C,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC;QAC5B,OAAO,OAAO,KAAK,KAAK,QAAQ;YAC9B,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE;YACnB,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,IAAI,GAAG;YAC1B,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE;YACd,CAAC,CAAC,IAAI,CAAC;IACX,CAAC,CAAC,CAAC;IACH,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,IAAI,CAAC;QACnD,MAAM,OAAO,CACX,iBAAiB,EACjB,uFAAuF,CACxF,CAAC;IACJ,MAAM,CAAC,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,QAAQ,CAAC,GAAG,MAAkB,CAAC;IACtE,OAAO;QACL,QAAQ,EAAE,QAAQ;QAClB,YAAY,EAAE,YAAY;QAC1B,MAAM,EAAE,MAAM;QACd,QAAQ,EAAE,QAAQ;KACnB,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,EAAE,YAAY,EAAE,wBAAwB,CAAC,CAAC;IACzE,OAAO,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,IAGtC;IACC,OAAO;QACL,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;YACjC,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;YAC5B,MAAM,SAAS,GACb,WAAW,IAAI,MAAM;gBACnB,CAAC,CAAC,MAAM,CAAC,SAAS;gBAClB,CAAC,CAAC,CAAC,MAAM,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,EAAE,SAAS,CAAC;YACnE,IAAI,CAAC,SAAS;gBAAE,OAAO,IAAI,CAAC;YAC5B,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;YAC3D,IAAI,CAAC,QAAQ;gBAAE,OAAO,IAAI,CAAC;YAC3B,OAAO;gBACL,SAAS;gBACT,OAAO,EAAE,QAAQ,CAAC,OAAO;gBACzB,MAAM,EAAE,QAAQ,CAAC,OAAO,IAAI,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC;aACxD,CAAC;QACJ,CAAC;QAED,WAAW,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,CACxC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;YAC/C,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;gBACxD,MAAM,OAAO,CACX,kBAAkB,EAClB,oCAAoC,CACrC,CAAC;YACJ,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC;YACrC,MAAM,QAAQ,GAAoB;gBAChC,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE;gBACnB,SAAS;gBACT,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI;gBACrC,UAAU,EAAE,GAAG;oBACb,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,UAAU,EAAE,YAAY,EAAE,GAAG,CAAC;oBACnD,CAAC,CAAC,IAAI;gBACR,OAAO,EACL,GAAG,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS;oBAChC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC;oBAC1B,CAAC,CAAC,IAAI;gBACV,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,QAAQ,CAAC;gBAClD,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC;gBACxC,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC;gBAC9C,UAAU,EAAE,YAAY,CAAC,KAAK,CAAC,UAAU,CAAC;gBAC1C,QAAQ,EAAE,MAAM,oBAAoB,CAAC,EAAE,CAAC,IAAI,EAAE,SAAS,CAAC;aACzD,CAAC;YACF,MAAM,cAAc,CAAC,EAAE,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YACxC,OAAO,QAAQ,CAAC;QAClB,CAAC,CAAC;QAEJ,cAAc,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,CACvD,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;YAC/C,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;YACpE,IAAI,CAAC,QAAQ;gBAAE,MAAM,QAAQ,CAAC,UAAU,CAAC,CAAC;YAC1C,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC;gBACnE,MAAM,OAAO,CAAC,kBAAkB,EAAE,8BAA8B,CAAC,CAAC;YACpE,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,KAAK,SAAS,CAAC;YACxC,IACE,GAAG;gBACD,CAAC,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;gBAC1D,CAAC,CAAC,KAAK,CAAC,GAAG,KAAK,SAAS;oBACvB,KAAK,CAAC,UAAU,KAAK,SAAS;oBAC9B,KAAK,CAAC,OAAO,KAAK,SAAS;gBAE/B,MAAM,OAAO,CACX,kBAAkB,EAClB,GAAG;oBACD,CAAC,CAAC,yCAAyC;oBAC3C,CAAC,CAAC,oDAAoD,CACzD,CAAC;YACJ,MAAM,cAAc,CAAC,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE;gBACxC,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;gBAChE,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS;oBAChC,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC;wBACE,UAAU,EAAE,YAAY,CAAC,KAAK,CAAC,UAAU,EAAE,YAAY,EAAE,GAAG,CAAC;qBAC9D,CAAC;gBACN,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS;oBAC7B,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC1C,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS;oBAC9B,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,QAAQ,EAAE,WAAW,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC9C,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBACpE,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS;oBAC3B,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC;gBACvD,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS;oBAChC,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,UAAU,EAAE,YAAY,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;gBACnD,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;aACtE,CAAC,CAAC;YACH,OAAO,CAAC,MAAM,YAAY,CACxB,EAAE,CAAC,IAAI,EACP,SAAS,EACT,UAAU,CACX,CAAoB,CAAC;QACxB,CAAC,CAAC;QAEJ,cAAc,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE,CAChD,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;YAC/C,IAAI,CAAC,CAAC,MAAM,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;gBACvD,MAAM,QAAQ,CAAC,UAAU,CAAC,CAAC;YAC7B,MAAM,cAAc,CAAC,EAAE,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC5C,CAAC,CAAC;KACL,CAAC;AACJ,CAAC"}

package/dist/server/domains/projects/project.access.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Who may see and manage a project (the `pm.projects` business actions of `shared/access.ts`).
+ *
+ * - See: every project, none, or for a set of users (`Scope`) the public ones and private ones a user of the set leads
+ *   or joined.
+ * - Manage (edit it, its members and resources): every project, none, or the ones a user of the set leads.
+ * - Delete: only `all`.
+ *
+ * A project the viewer may not see is 404, so its existence does not leak. Other domains reach these rules through
+ * `ProjectAccess` (`index.ts`), never by reading the project tables.
+ */
+import type { DatabaseConnection, FilterBuilder, FilterNode, RepositoryFilter } from '@nocobase/db';
+import { type Scope } from '../../../shared/access.js';
+import { type Viewer } from '../../access/viewer.js';
+import type { Tx, TxRunner } from '../../kernel/tx.js';
+import { type ProjectRecord, type ProjectWithLead } from './project.store.js';
+/**
+ * The projects visible at `scope`, as a filter on `pmProjects`; null when every project is visible. `none` matches
+ * nothing.
+ */
+export declare function visibleProjects(f: FilterBuilder, viewer: Viewer, scope?: Scope): FilterNode | null;
+/** `visibleProjects` as a whole filter; undefined when every project is visible. */
+export declare function visibleProjectsFilter(viewer: Viewer): RepositoryFilter<ProjectRecord> | undefined;
+export interface ProjectRelation {
+    readonly project: ProjectWithLead;
+    readonly visible: boolean;
+}
+/**
+ * The project as the viewer sees it at `scope`, or null when it does not exist. A project outside the viewer's key
+ * scope does not exist for them either.
+ */
+export declare function relationTo(conn: DatabaseConnection, viewer: Viewer, projectId: string, scope?: Scope): Promise<ProjectRelation | null>;
+/** Whether the viewer manages the project: every one, or one a user of their set leads. */
+export declare function canManage(viewer: Viewer, relation: ProjectRelation): boolean;
+/** The viewer's relation to the project; 404 unless they may see it. */
+export declare function requireVisible(conn: DatabaseConnection, viewer: Viewer, id: string): Promise<ProjectRelation>;
+/** Runs `fn` in a transaction, once the viewer is known to manage the project. */
+export declare function managed<T>(tx: TxRunner, viewer: Viewer, id: string, fn: (tx: Tx, relation: ProjectRelation) => Promise<T>): Promise<T>;
+//# sourceMappingURL=project.access.d.ts.map

package/dist/server/domains/projects/project.access.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"project.access.d.ts","sourceRoot":"","sources":["../../../../server/domains/projects/project.access.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,KAAK,EACV,kBAAkB,EAClB,aAAa,EACb,UAAU,EACV,gBAAgB,EACjB,MAAM,cAAc,CAAC;AAEtB,OAAO,EAAW,KAAK,KAAK,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,EAA2B,KAAK,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAG9E,OAAO,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAGL,KAAK,aAAa,EAClB,KAAK,eAAe,EACrB,MAAM,oBAAoB,CAAC;AAE5B;;;GAGG;AACH,wBAAgB,eAAe,CAC7B,CAAC,EAAE,aAAa,EAChB,MAAM,EAAE,MAAM,EACd,KAAK,GAAE,KAA8C,GACpD,UAAU,GAAG,IAAI,CAUnB;AAcD,oFAAoF;AACpF,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,MAAM,GACb,gBAAgB,CAAC,aAAa,CAAC,GAAG,SAAS,CAI7C;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;IAClC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAED;;;GAGG;AACH,wBAAsB,UAAU,CAC9B,IAAI,EAAE,kBAAkB,EACxB,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,KAAK,GAAE,KAA8C,GACpD,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAKjC;AAiBD,2FAA2F;AAC3F,wBAAgB,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,eAAe,GAAG,OAAO,CAK5E;AAED,wEAAwE;AACxE,wBAAsB,cAAc,CAClC,IAAI,EAAE,kBAAkB,EACxB,MAAM,EAAE,MAAM,EACd,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,eAAe,CAAC,CAI1B;AAED,kFAAkF;AAClF,wBAAgB,OAAO,CAAC,CAAC,EACvB,EAAE,EAAE,QAAQ,EACZ,MAAM,EAAE,MAAM,EACd,EAAE,EAAE,MAAM,EACV,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,eAAe,KAAK,OAAO,CAAC,CAAC,CAAC,GACpD,OAAO,CAAC,CAAC,CAAC,CASZ"}

package/dist/server/domains/projects/project.access.js

@@ -0,0 +1,83 @@
+import { reaches } from '../../../shared/access.js';
+import { inProjectScope, scopeOf } from '../../access/viewer.js';
+import { oneOf } from '../../kernel/db.js';
+import { forbidden, notFound } from '../../kernel/errors.js';
+import { findProject, hasMember, } from './project.store.js';
+/**
+ * The projects visible at `scope`, as a filter on `pmProjects`; null when every project is visible. `none` matches
+ * nothing.
+ */
+export function visibleProjects(f, viewer, scope = scopeOf(viewer, 'pm.projects', 'view')) {
+    const visible = byScope(f, scope);
+    if (!viewer.projectIds)
+        return visible;
+    // A scoped key limited to some projects reaches only those.
+    // `id` is never null, so `eq(null)` matches nothing without a placeholder value, which PostgreSQL may refuse.
+    const limited = viewer.projectIds.length === 0
+        ? f.string('id').eq(null)
+        : f.or(viewer.projectIds.map((id) => f.string('id').eq(id)));
+    return visible === null ? limited : f.and([visible, limited]);
+}
+function byScope(f, scope) {
+    if (scope === 'all')
+        return null;
+    if (scope === 'none')
+        return f.string('id').eq(null);
+    return f.or([
+        f.string('visibility').ne('members'),
+        oneOf(f, 'leadUserId', scope.users),
+        f
+            .relation('members')
+            .some((member) => oneOf(member, 'userId', scope.users)),
+    ]);
+}
+/** `visibleProjects` as a whole filter; undefined when every project is visible. */
+export function visibleProjectsFilter(viewer) {
+    const scope = scopeOf(viewer, 'pm.projects', 'view');
+    if (scope === 'all' && !viewer.projectIds)
+        return undefined;
+    return (f) => visibleProjects(f, viewer, scope);
+}
+/**
+ * The project as the viewer sees it at `scope`, or null when it does not exist. A project outside the viewer's key
+ * scope does not exist for them either.
+ */
+export async function relationTo(conn, viewer, projectId, scope = scopeOf(viewer, 'pm.projects', 'view')) {
+    if (!inProjectScope(viewer, projectId))
+        return null;
+    const project = await findProject(conn, projectId);
+    if (!project)
+        return null;
+    return { project, visible: await relates(conn, project, scope) };
+}
+/** Whether `scope` reaches the project for seeing it: public, or led or joined by a user of the set. */
+async function relates(conn, project, scope) {
+    if (scope === 'all')
+        return true;
+    if (scope === 'none')
+        return false;
+    return (project.visibility === 'everyone' ||
+        reaches(scope, project.leadUserId) ||
+        (await hasMember(conn, project.id, scope.users)));
+}
+/** Whether the viewer manages the project: every one, or one a user of their set leads. */
+export function canManage(viewer, relation) {
+    return reaches(scopeOf(viewer, 'pm.projects', 'manage'), relation.project.leadUserId);
+}
+/** The viewer's relation to the project; 404 unless they may see it. */
+export async function requireVisible(conn, viewer, id) {
+    const relation = await relationTo(conn, viewer, id);
+    if (!relation?.visible)
+        throw notFound('Project');
+    return relation;
+}
+/** Runs `fn` in a transaction, once the viewer is known to manage the project. */
+export function managed(tx, viewer, id, fn) {
+    return tx.run(async (unit) => {
+        const relation = await requireVisible(unit.conn, viewer, id);
+        if (!canManage(viewer, relation))
+            throw forbidden('Only the project lead or an administrator may change this project.');
+        return fn(unit, relation);
+    });
+}
+//# sourceMappingURL=project.access.js.map

package/dist/server/domains/projects/project.access.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project.access.js","sourceRoot":"","sources":["../../../../server/domains/projects/project.access.ts"],"names":[],"mappings":"AAkBA,OAAO,EAAE,OAAO,EAAc,MAAM,2BAA2B,CAAC;AAChE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAe,MAAM,wBAAwB,CAAC;AAC9E,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAE7D,OAAO,EACL,WAAW,EACX,SAAS,GAGV,MAAM,oBAAoB,CAAC;AAE5B;;;GAGG;AACH,MAAM,UAAU,eAAe,CAC7B,CAAgB,EAChB,MAAc,EACd,QAAe,OAAO,CAAC,MAAM,EAAE,aAAa,EAAE,MAAM,CAAC;IAErD,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAClC,IAAI,CAAC,MAAM,CAAC,UAAU;QAAE,OAAO,OAAO,CAAC;IACvC,4DAA4D;IAC5D,8GAA8G;IAC9G,MAAM,OAAO,GACX,MAAM,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC;QAC5B,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC;QACzB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACjE,OAAO,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,OAAO,CAAC,CAAgB,EAAE,KAAY;IAC7C,IAAI,KAAK,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IACjC,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;IACrD,OAAO,CAAC,CAAC,EAAE,CAAC;QACV,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC;QACpC,KAAK,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,KAAK,CAAC;QACnC,CAAC;aACE,QAAQ,CAAC,SAAS,CAAC;aACnB,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;KAC1D,CAAC,CAAC;AACL,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,qBAAqB,CACnC,MAAc;IAEd,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;IACrD,IAAI,KAAK,KAAK,KAAK,IAAI,CAAC,MAAM,CAAC,UAAU;QAAE,OAAO,SAAS,CAAC;IAC5D,OAAO,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAe,CAAC;AAChE,CAAC;AAOD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,IAAwB,EACxB,MAAc,EACd,SAAiB,EACjB,QAAe,OAAO,CAAC,MAAM,EAAE,aAAa,EAAE,MAAM,CAAC;IAErD,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IACpD,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACnD,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;AACnE,CAAC;AAED,wGAAwG;AACxG,KAAK,UAAU,OAAO,CACpB,IAAwB,EACxB,OAAwB,EACxB,KAAY;IAEZ,IAAI,KAAK,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IACjC,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,KAAK,CAAC;IACnC,OAAO,CACL,OAAO,CAAC,UAAU,KAAK,UAAU;QACjC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,UAAU,CAAC;QAClC,CAAC,MAAM,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CACjD,CAAC;AACJ,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,SAAS,CAAC,MAAc,EAAE,QAAyB;IACjE,OAAO,OAAO,CACZ,OAAO,CAAC,MAAM,EAAE,aAAa,EAAE,QAAQ,CAAC,EACxC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAC5B,CAAC;AACJ,CAAC;AAED,wEAAwE;AACxE,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,IAAwB,EACxB,MAAc,EACd,EAAU;IAEV,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IACpD,IAAI,CAAC,QAAQ,EAAE,OAAO;QAAE,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAC;IAClD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,OAAO,CACrB,EAAY,EACZ,MAAc,EACd,EAAU,EACV,EAAqD;IAErD,OAAO,EAAE,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QAC3B,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QAC7D,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC;YAC9B,MAAM,SAAS,CACb,oEAAoE,CACrE,CAAC;QACJ,OAAO,EAAE,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/server/domains/projects/project.routes.d.ts

@@ -0,0 +1,9 @@
+import type { Hono } from 'hono';
+import { type ViewerEnv } from '../../access/request.js';
+import type { ProjectService } from './project.service.js';
+/**
+ * `/api/projects` and `/api/projects/{projectId}`, mounted after every fixed segment of the namespace. Project ids are
+ * generated, so none can equal one. The list is bounded by what an organization runs and is answered whole.
+ */
+export declare function createProjectRoutes(projects: ProjectService): Hono<ViewerEnv>;
+//# sourceMappingURL=project.routes.d.ts.map

package/dist/server/domains/projects/project.routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"project.routes.d.ts","sourceRoot":"","sources":["../../../../server/domains/projects/project.routes.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAEjC,OAAO,EAGL,KAAK,SAAS,EACf,MAAM,yBAAyB,CAAC;AAsBjC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAY3D;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC,CA0U7E"}