@selvajs/selva 4.7.3 → 4.7.4-beta.0

package/build/server/chunks/chunks/token2.server.js-BcA0GWgF.js

@@ -0,0 +1,44 @@
+import { b as private_env } from './shared-server.js-BjFXsyhJ.js';
+import { c as createTokenCodec } from './token-codec.js-CxK2DiO-.js';
+
+//#region src/lib/server/invites/token.server.ts
+/**
+* Invite-token primitives — thin binding over `@selvajs/server/tokens`
+* (`createTokenCodec`), mirroring the share-link design (see
+* `shareLinks/token.server.ts`).
+*
+* ## Format
+*   raw    = `invite_<base64url(32 random bytes)>`
+*   hash   = base64url( HMAC-SHA256(INVITE_TOKEN_SECRET, raw) )
+*
+* `INVITE_TOKEN_SECRET` falls back to `SELVA_HMAC_KEY` so single-tenant
+* deployments don't have to manage a third secret. Multi-tenant / production
+* setups should set both `SHARE_LINK_SECRET` and `INVITE_TOKEN_SECRET`
+* explicitly so they can be rotated independently — rotating one shouldn't
+* invalidate the other.
+*/
+var TOKEN_PREFIX = "invite_";
+var cached = null;
+function getCodec() {
+	const secret = private_env.INVITE_TOKEN_SECRET || private_env.SELVA_HMAC_KEY;
+	if (!secret) throw new Error("Missing required env var: INVITE_TOKEN_SECRET (or SELVA_HMAC_KEY as fallback). Generate with: openssl rand -base64 32");
+	if (cached?.secret !== secret) cached = {
+		secret,
+		codec: createTokenCodec({
+			prefix: TOKEN_PREFIX,
+			secret
+		})
+	};
+	return cached.codec;
+}
+/** Mint: generate a fresh raw token. Show to the recipient exactly once. */
+function mintRawToken() {
+	return getCodec().mintRawToken();
+}
+/** Hash a raw token to its store-side representation. */
+function hashToken(raw) {
+	return getCodec().hashToken(raw);
+}
+
+export { hashToken as h, mintRawToken as m };
+//# sourceMappingURL=token2.server.js-BcA0GWgF.js.map

package/build/server/chunks/chunks/token2.server.js-BcA0GWgF.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token2.server.js-BcA0GWgF.js","sources":["../../../../.svelte-kit/output/server/chunks/token2.server.js"],"sourcesContent":["import { t as private_env } from \"./shared-server.js\";\nimport { t as createTokenCodec } from \"./token-codec.js\";\n//#region src/lib/server/invites/token.server.ts\n/**\n* Invite-token primitives — thin binding over `@selvajs/server/tokens`\n* (`createTokenCodec`), mirroring the share-link design (see\n* `shareLinks/token.server.ts`).\n*\n* ## Format\n*   raw    = `invite_<base64url(32 random bytes)>`\n*   hash   = base64url( HMAC-SHA256(INVITE_TOKEN_SECRET, raw) )\n*\n* `INVITE_TOKEN_SECRET` falls back to `SELVA_HMAC_KEY` so single-tenant\n* deployments don't have to manage a third secret. Multi-tenant / production\n* setups should set both `SHARE_LINK_SECRET` and `INVITE_TOKEN_SECRET`\n* explicitly so they can be rotated independently — rotating one shouldn't\n* invalidate the other.\n*/\nvar TOKEN_PREFIX = \"invite_\";\nvar cached = null;\nfunction getCodec() {\n\tconst secret = private_env.INVITE_TOKEN_SECRET || private_env.SELVA_HMAC_KEY;\n\tif (!secret) throw new Error(\"Missing required env var: INVITE_TOKEN_SECRET (or SELVA_HMAC_KEY as fallback). Generate with: openssl rand -base64 32\");\n\tif (cached?.secret !== secret) cached = {\n\t\tsecret,\n\t\tcodec: createTokenCodec({\n\t\t\tprefix: TOKEN_PREFIX,\n\t\t\tsecret\n\t\t})\n\t};\n\treturn cached.codec;\n}\n/** Mint: generate a fresh raw token. Show to the recipient exactly once. */\nfunction mintRawToken() {\n\treturn getCodec().mintRawToken();\n}\n/** Hash a raw token to its store-side representation. */\nfunction hashToken(raw) {\n\treturn getCodec().hashToken(raw);\n}\n//#endregion\nexport { mintRawToken as n, hashToken as t };\n"],"names":[],"mappings":";;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,IAAI,YAAY,GAAG,SAAS;AAC5B,IAAI,MAAM,GAAG,IAAI;AACjB,SAAS,QAAQ,GAAG;AACpB,CAAC,MAAM,MAAM,GAAG,WAAW,CAAC,mBAAmB,IAAI,WAAW,CAAC,cAAc;AAC7E,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,IAAI,KAAK,CAAC,uHAAuH,CAAC;AACtJ,CAAC,IAAI,MAAM,EAAE,MAAM,KAAK,MAAM,EAAE,MAAM,GAAG;AACzC,EAAE,MAAM;AACR,EAAE,KAAK,EAAE,gBAAgB,CAAC;AAC1B,GAAG,MAAM,EAAE,YAAY;AACvB,GAAG;AACH,GAAG;AACH,EAAE;AACF,CAAC,OAAO,MAAM,CAAC,KAAK;AACpB;AACA;AACA,SAAS,YAAY,GAAG;AACxB,CAAC,OAAO,QAAQ,EAAE,CAAC,YAAY,EAAE;AACjC;AACA;AACA,SAAS,SAAS,CAAC,GAAG,EAAE;AACxB,CAAC,OAAO,QAAQ,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC;AACjC;;;;"}

package/build/server/chunks/chunks/updateCheck.server.js-BzBWX0HG.js

@@ -0,0 +1,97 @@
+import { b as private_env } from './shared-server.js-BjFXsyhJ.js';
+import { join } from 'path';
+import { existsSync, readFileSync, writeFileSync } from 'fs';
+
+//#region src/lib/server/releaseChannel.server.ts
+var CHANNEL_FILE = "selva-channel.json";
+function channelTag(channel) {
+	return channel === "beta" ? "beta" : "latest";
+}
+function channelRegistryUrl(channel) {
+	return `https://registry.npmjs.org/@selvajs%2Fselva/${channelTag(channel)}`;
+}
+function isChannel(v) {
+	return v === "stable" || v === "beta";
+}
+function deploymentDir() {
+	const candidates = [];
+	if (private_env.INSTALL_DIR) candidates.push(private_env.INSTALL_DIR);
+	let dir = process.cwd();
+	for (let i = 0; i < 6; i++) {
+		candidates.push(dir);
+		const parent = join(dir, "..");
+		if (parent === dir) break;
+		dir = parent;
+	}
+	for (const d of candidates) if (existsSync(join(d, "node_modules", "@selvajs", "selva", "package.json"))) return d;
+	return null;
+}
+function channelFilePath() {
+	return join(deploymentDir() ?? process.cwd(), CHANNEL_FILE);
+}
+function readChannel() {
+	const path = channelFilePath();
+	if (!existsSync(path)) return "stable";
+	try {
+		const parsed = JSON.parse(readFileSync(path, "utf8"));
+		return isChannel(parsed.channel) ? parsed.channel : "stable";
+	} catch {
+		return "stable";
+	}
+}
+function writeChannel(channel) {
+	if (!isChannel(channel)) throw new Error(`Invalid release channel: ${channel}`);
+	writeFileSync(channelFilePath(), JSON.stringify({ channel }, null, 2) + "\n", "utf8");
+}
+//#endregion
+//#region src/lib/server/updateCheck.server.ts
+function readInstalledVersion() {
+	const dirs = [];
+	if (private_env.INSTALL_DIR) dirs.push(private_env.INSTALL_DIR);
+	let dir = process.cwd();
+	for (let i = 0; i < 6; i++) {
+		dirs.push(dir);
+		const parent = join(dir, "..");
+		if (parent === dir) break;
+		dir = parent;
+	}
+	for (const d of dirs) {
+		const pkgPath = join(d, "node_modules", "@selvajs", "selva", "package.json");
+		if (!existsSync(pkgPath)) continue;
+		try {
+			const pkg = JSON.parse(readFileSync(pkgPath, "utf8"));
+			if (typeof pkg.version === "string") return pkg.version;
+		} catch {}
+	}
+	return null;
+}
+async function fetchLatestVersion(fetchImpl, channel = "stable") {
+	const ctrl = new AbortController();
+	const timer = setTimeout(() => ctrl.abort(), 5e3);
+	try {
+		const res = await fetchImpl(channelRegistryUrl(channel), {
+			headers: { Accept: "application/json" },
+			signal: ctrl.signal
+		});
+		if (!res.ok) return null;
+		const body = await res.json();
+		return typeof body.version === "string" ? body.version : null;
+	} catch {
+		return null;
+	} finally {
+		clearTimeout(timer);
+	}
+}
+async function checkForUpdate(fetchImpl, channel = "stable") {
+	const current = readInstalledVersion();
+	const latest = await fetchLatestVersion(fetchImpl, channel);
+	return {
+		channel,
+		current,
+		latest,
+		updateAvailable: !!(current && latest && latest !== current)
+	};
+}
+
+export { channelTag as a, checkForUpdate as c, readChannel as r, writeChannel as w };
+//# sourceMappingURL=updateCheck.server.js-BzBWX0HG.js.map

package/build/server/chunks/chunks/updateCheck.server.js-BzBWX0HG.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"updateCheck.server.js-BzBWX0HG.js","sources":["../../../../.svelte-kit/output/server/chunks/updateCheck.server.js"],"sourcesContent":["import { t as private_env } from \"./shared-server.js\";\nimport { join } from \"path\";\nimport { existsSync, readFileSync, writeFileSync } from \"fs\";\n//#region src/lib/server/releaseChannel.server.ts\nvar CHANNEL_FILE = \"selva-channel.json\";\nfunction channelTag(channel) {\n\treturn channel === \"beta\" ? \"beta\" : \"latest\";\n}\nfunction channelRegistryUrl(channel) {\n\treturn `https://registry.npmjs.org/@selvajs%2Fselva/${channelTag(channel)}`;\n}\nfunction isChannel(v) {\n\treturn v === \"stable\" || v === \"beta\";\n}\nfunction deploymentDir() {\n\tconst candidates = [];\n\tif (private_env.INSTALL_DIR) candidates.push(private_env.INSTALL_DIR);\n\tlet dir = process.cwd();\n\tfor (let i = 0; i < 6; i++) {\n\t\tcandidates.push(dir);\n\t\tconst parent = join(dir, \"..\");\n\t\tif (parent === dir) break;\n\t\tdir = parent;\n\t}\n\tfor (const d of candidates) if (existsSync(join(d, \"node_modules\", \"@selvajs\", \"selva\", \"package.json\"))) return d;\n\treturn null;\n}\nfunction channelFilePath() {\n\treturn join(deploymentDir() ?? process.cwd(), CHANNEL_FILE);\n}\nfunction readChannel() {\n\tconst path = channelFilePath();\n\tif (!existsSync(path)) return \"stable\";\n\ttry {\n\t\tconst parsed = JSON.parse(readFileSync(path, \"utf8\"));\n\t\treturn isChannel(parsed.channel) ? parsed.channel : \"stable\";\n\t} catch {\n\t\treturn \"stable\";\n\t}\n}\nfunction writeChannel(channel) {\n\tif (!isChannel(channel)) throw new Error(`Invalid release channel: ${channel}`);\n\twriteFileSync(channelFilePath(), JSON.stringify({ channel }, null, 2) + \"\\n\", \"utf8\");\n}\n//#endregion\n//#region src/lib/server/updateCheck.server.ts\nfunction readInstalledVersion() {\n\tconst dirs = [];\n\tif (private_env.INSTALL_DIR) dirs.push(private_env.INSTALL_DIR);\n\tlet dir = process.cwd();\n\tfor (let i = 0; i < 6; i++) {\n\t\tdirs.push(dir);\n\t\tconst parent = join(dir, \"..\");\n\t\tif (parent === dir) break;\n\t\tdir = parent;\n\t}\n\tfor (const d of dirs) {\n\t\tconst pkgPath = join(d, \"node_modules\", \"@selvajs\", \"selva\", \"package.json\");\n\t\tif (!existsSync(pkgPath)) continue;\n\t\ttry {\n\t\t\tconst pkg = JSON.parse(readFileSync(pkgPath, \"utf8\"));\n\t\t\tif (typeof pkg.version === \"string\") return pkg.version;\n\t\t} catch {}\n\t}\n\treturn null;\n}\nasync function fetchLatestVersion(fetchImpl, channel = \"stable\") {\n\tconst ctrl = new AbortController();\n\tconst timer = setTimeout(() => ctrl.abort(), 5e3);\n\ttry {\n\t\tconst res = await fetchImpl(channelRegistryUrl(channel), {\n\t\t\theaders: { Accept: \"application/json\" },\n\t\t\tsignal: ctrl.signal\n\t\t});\n\t\tif (!res.ok) return null;\n\t\tconst body = await res.json();\n\t\treturn typeof body.version === \"string\" ? body.version : null;\n\t} catch {\n\t\treturn null;\n\t} finally {\n\t\tclearTimeout(timer);\n\t}\n}\nasync function checkForUpdate(fetchImpl, channel = \"stable\") {\n\tconst current = readInstalledVersion();\n\tconst latest = await fetchLatestVersion(fetchImpl, channel);\n\treturn {\n\t\tchannel,\n\t\tcurrent,\n\t\tlatest,\n\t\tupdateAvailable: !!(current && latest && latest !== current)\n\t};\n}\n//#endregion\nexport { writeChannel as i, channelTag as n, readChannel as r, checkForUpdate as t };\n"],"names":[],"mappings":";;;;AAGA;AACA,IAAI,YAAY,GAAG,oBAAoB;AACvC,SAAS,UAAU,CAAC,OAAO,EAAE;AAC7B,CAAC,OAAO,OAAO,KAAK,MAAM,GAAG,MAAM,GAAG,QAAQ;AAC9C;AACA,SAAS,kBAAkB,CAAC,OAAO,EAAE;AACrC,CAAC,OAAO,CAAC,4CAA4C,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;AAC5E;AACA,SAAS,SAAS,CAAC,CAAC,EAAE;AACtB,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,MAAM;AACtC;AACA,SAAS,aAAa,GAAG;AACzB,CAAC,MAAM,UAAU,GAAG,EAAE;AACtB,CAAC,IAAI,WAAW,CAAC,WAAW,EAAE,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC;AACtE,CAAC,IAAI,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE;AACxB,CAAC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE;AAC7B,EAAE,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC;AACtB,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC;AAChC,EAAE,IAAI,MAAM,KAAK,GAAG,EAAE;AACtB,EAAE,GAAG,GAAG,MAAM;AACd,CAAC;AACD,CAAC,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,cAAc,EAAE,UAAU,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC,EAAE,OAAO,CAAC;AACnH,CAAC,OAAO,IAAI;AACZ;AACA,SAAS,eAAe,GAAG;AAC3B,CAAC,OAAO,IAAI,CAAC,aAAa,EAAE,IAAI,OAAO,CAAC,GAAG,EAAE,EAAE,YAAY,CAAC;AAC5D;AACA,SAAS,WAAW,GAAG;AACvB,CAAC,MAAM,IAAI,GAAG,eAAe,EAAE;AAC/B,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,OAAO,QAAQ;AACvC,CAAC,IAAI;AACL,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AACvD,EAAE,OAAO,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,CAAC,OAAO,GAAG,QAAQ;AAC9D,CAAC,CAAC,CAAC,MAAM;AACT,EAAE,OAAO,QAAQ;AACjB,CAAC;AACD;AACA,SAAS,YAAY,CAAC,OAAO,EAAE;AAC/B,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,IAAI,KAAK,CAAC,CAAC,yBAAyB,EAAE,OAAO,CAAC,CAAC,CAAC;AAChF,CAAC,aAAa,CAAC,eAAe,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC;AACtF;AACA;AACA;AACA,SAAS,oBAAoB,GAAG;AAChC,CAAC,MAAM,IAAI,GAAG,EAAE;AAChB,CAAC,IAAI,WAAW,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC;AAChE,CAAC,IAAI,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE;AACxB,CAAC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE;AAC7B,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;AAChB,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC;AAChC,EAAE,IAAI,MAAM,KAAK,GAAG,EAAE;AACtB,EAAE,GAAG,GAAG,MAAM;AACd,CAAC;AACD,CAAC,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE;AACvB,EAAE,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,EAAE,cAAc,EAAE,UAAU,EAAE,OAAO,EAAE,cAAc,CAAC;AAC9E,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE;AAC5B,EAAE,IAAI;AACN,GAAG,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;AACxD,GAAG,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,EAAE,OAAO,GAAG,CAAC,OAAO;AAC1D,EAAE,CAAC,CAAC,MAAM,CAAC;AACX,CAAC;AACD,CAAC,OAAO,IAAI;AACZ;AACA,eAAe,kBAAkB,CAAC,SAAS,EAAE,OAAO,GAAG,QAAQ,EAAE;AACjE,CAAC,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE;AACnC,CAAC,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,IAAI,CAAC,KAAK,EAAE,EAAE,GAAG,CAAC;AAClD,CAAC,IAAI;AACL,EAAE,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,kBAAkB,CAAC,OAAO,CAAC,EAAE;AAC3D,GAAG,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;AAC1C,GAAG,MAAM,EAAE,IAAI,CAAC;AAChB,GAAG,CAAC;AACJ,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,IAAI;AAC1B,EAAE,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE;AAC/B,EAAE,OAAO,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI;AAC/D,CAAC,CAAC,CAAC,MAAM;AACT,EAAE,OAAO,IAAI;AACb,CAAC,CAAC,SAAS;AACX,EAAE,YAAY,CAAC,KAAK,CAAC;AACrB,CAAC;AACD;AACA,eAAe,cAAc,CAAC,SAAS,EAAE,OAAO,GAAG,QAAQ,EAAE;AAC7D,CAAC,MAAM,OAAO,GAAG,oBAAoB,EAAE;AACvC,CAAC,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,SAAS,EAAE,OAAO,CAAC;AAC5D,CAAC,OAAO;AACR,EAAE,OAAO;AACT,EAAE,OAAO;AACT,EAAE,MAAM;AACR,EAAE,eAAe,EAAE,CAAC,EAAE,OAAO,IAAI,MAAM,IAAI,MAAM,KAAK,OAAO;AAC7D,EAAE;AACF;;;;"}