@selvajs/server 1.1.0 → 1.3.0

package/dist/testing/scenarios.d.ts

@@ -0,0 +1,67 @@
+/**
+ * The shared cast the handler tests are written against.
+ *
+ * These compose only the seeders in `./harness.ts`, so they run on whatever
+ * provider stack the host built its {@link TestHarness} around. They live here
+ * rather than in a host's fixtures because a handler test that travels with its
+ * handler needs the same two tenants wherever it runs — a host that reseeds its
+ * own Acme with different roles gets different results from the same test.
+ */
+import type { Organization, Project } from '@selvajs/platform';
+import type { SeededDefinition, SeededUser, TestHarness } from './harness.js';
+export interface AcmeFixture {
+    acme: Organization;
+    alice: SeededUser;
+    bob: SeededUser;
+    alicesPrivate: Project;
+    acmeOrg: Project;
+    acmePublic: Project;
+}
+/**
+ * The primary tenant.
+ *
+ * **Alice is the org's `ownerId` but her membership row is `admin`.** Those are
+ * separate fields and this fixture deliberately makes them disagree, because
+ * production can too. Every org-role gate reads the **membership row**, so a
+ * test that treats `alice` as "the owner" will invert its own result and pass
+ * for the wrong reason — seed an explicit `role: 'owner'` member instead.
+ */
+export declare function seedAcme(h: TestHarness): Promise<AcmeFixture>;
+export interface BigClientFixture {
+    bigClient: Organization;
+    carol: SeededUser;
+}
+/**
+ * Second tenant. Carol is a member of BigClient — used for cross-org rejection
+ * scenarios (Carol acting in BigClient context cannot view Acme data).
+ */
+export declare function seedBigClient(h: TestHarness): Promise<BigClientFixture>;
+export interface ThirdOrgFixture {
+    initech: Organization;
+    dave: SeededUser;
+}
+/**
+ * Third tenant. Dave is a member of Initech — used for cross-org public-visibility
+ * scenarios (any authenticated user from any org can view a public project when
+ * cross-org public access is enabled).
+ */
+export declare function seedThirdOrg(h: TestHarness): Promise<ThirdOrgFixture>;
+export interface CommonsFixture {
+    commonsProject: Project;
+    alicesCommonsDef: SeededDefinition;
+    peter: SeededUser;
+}
+/**
+ * Commons-mode project (`autoJoinOnUpload=true`) inside Acme with Alice's
+ * pre-existing definition. Peter is a separate authenticated user — *not* a
+ * project member — who is allowed to upload his own new definitions but cannot
+ * touch Alice's existing one.
+ *
+ * Requires {@link seedAcme} to have run first (uses Alice as project owner +
+ * existing-def owner).
+ */
+export declare function seedCommons(h: TestHarness, opts: {
+    acmeId: string;
+    aliceId: string;
+}): Promise<CommonsFixture>;
+//# sourceMappingURL=scenarios.d.ts.map

package/dist/testing/scenarios.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scenarios.d.ts","sourceRoot":"","sources":["../../src/testing/scenarios.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAE/D,OAAO,KAAK,EAAE,gBAAgB,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE9E,MAAM,WAAW,WAAW;IAC3B,IAAI,EAAE,YAAY,CAAC;IACnB,KAAK,EAAE,UAAU,CAAC;IAClB,GAAG,EAAE,UAAU,CAAC;IAChB,aAAa,EAAE,OAAO,CAAC;IACvB,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,OAAO,CAAC;CACpB;AAED;;;;;;;;GAQG;AACH,wBAAsB,QAAQ,CAAC,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC,CA8BnE;AAED,MAAM,WAAW,gBAAgB;IAChC,SAAS,EAAE,YAAY,CAAC;IACxB,KAAK,EAAE,UAAU,CAAC;CAClB;AAED;;;GAGG;AACH,wBAAsB,aAAa,CAAC,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAS7E;AAED,MAAM,WAAW,eAAe;IAC/B,OAAO,EAAE,YAAY,CAAC;IACtB,IAAI,EAAE,UAAU,CAAC;CACjB;AAED;;;;GAIG;AACH,wBAAsB,YAAY,CAAC,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,eAAe,CAAC,CAS3E;AAED,MAAM,WAAW,cAAc;IAC9B,cAAc,EAAE,OAAO,CAAC;IACxB,gBAAgB,EAAE,gBAAgB,CAAC;IACnC,KAAK,EAAE,UAAU,CAAC;CAClB;AAED;;;;;;;;GAQG;AACH,wBAAsB,WAAW,CAChC,CAAC,EAAE,WAAW,EACd,IAAI,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACvC,OAAO,CAAC,cAAc,CAAC,CAgBzB"}

package/dist/testing/scenarios.js

@@ -0,0 +1,104 @@
+/**
+ * The shared cast the handler tests are written against.
+ *
+ * These compose only the seeders in `./harness.ts`, so they run on whatever
+ * provider stack the host built its {@link TestHarness} around. They live here
+ * rather than in a host's fixtures because a handler test that travels with its
+ * handler needs the same two tenants wherever it runs — a host that reseeds its
+ * own Acme with different roles gets different results from the same test.
+ */
+import { seedDefinition, seedOrg, seedOrgMember, seedProject, seedUser } from './harness.js';
+/**
+ * The primary tenant.
+ *
+ * **Alice is the org's `ownerId` but her membership row is `admin`.** Those are
+ * separate fields and this fixture deliberately makes them disagree, because
+ * production can too. Every org-role gate reads the **membership row**, so a
+ * test that treats `alice` as "the owner" will invert its own result and pass
+ * for the wrong reason — seed an explicit `role: 'owner'` member instead.
+ */
+export async function seedAcme(h) {
+    const alice = await seedUser(h, 'alice@acme.test');
+    const bob = await seedUser(h, 'bob@acme.test');
+    const acme = await seedOrg(h, { name: 'Acme', slug: 'acme', ownerId: alice.id });
+    await seedOrgMember(h, { orgId: acme.id, userId: alice.id, role: 'admin' });
+    await seedOrgMember(h, { orgId: acme.id, userId: bob.id, role: 'member' });
+    const alicesPrivate = await seedProject(h, {
+        orgId: acme.id,
+        name: 'Alice Private',
+        slug: 'alice-private',
+        ownerId: alice.id,
+        visibility: 'private'
+    });
+    const acmeOrg = await seedProject(h, {
+        orgId: acme.id,
+        name: 'Acme Org Project',
+        slug: 'acme-org',
+        ownerId: alice.id,
+        visibility: 'org'
+    });
+    const acmePublic = await seedProject(h, {
+        orgId: acme.id,
+        name: 'Acme Public',
+        slug: 'acme-public',
+        ownerId: alice.id,
+        visibility: 'public'
+    });
+    return { acme, alice, bob, alicesPrivate, acmeOrg, acmePublic };
+}
+/**
+ * Second tenant. Carol is a member of BigClient — used for cross-org rejection
+ * scenarios (Carol acting in BigClient context cannot view Acme data).
+ */
+export async function seedBigClient(h) {
+    const carol = await seedUser(h, 'carol@bigclient.test');
+    const bigClient = await seedOrg(h, {
+        name: 'BigClient',
+        slug: 'bigclient',
+        ownerId: carol.id
+    });
+    await seedOrgMember(h, { orgId: bigClient.id, userId: carol.id, role: 'member' });
+    return { bigClient, carol };
+}
+/**
+ * Third tenant. Dave is a member of Initech — used for cross-org public-visibility
+ * scenarios (any authenticated user from any org can view a public project when
+ * cross-org public access is enabled).
+ */
+export async function seedThirdOrg(h) {
+    const dave = await seedUser(h, 'dave@initech.test');
+    const initech = await seedOrg(h, {
+        name: 'Initech',
+        slug: 'initech',
+        ownerId: dave.id
+    });
+    await seedOrgMember(h, { orgId: initech.id, userId: dave.id, role: 'member' });
+    return { initech, dave };
+}
+/**
+ * Commons-mode project (`autoJoinOnUpload=true`) inside Acme with Alice's
+ * pre-existing definition. Peter is a separate authenticated user — *not* a
+ * project member — who is allowed to upload his own new definitions but cannot
+ * touch Alice's existing one.
+ *
+ * Requires {@link seedAcme} to have run first (uses Alice as project owner +
+ * existing-def owner).
+ */
+export async function seedCommons(h, opts) {
+    const peter = await seedUser(h, 'peter@elsewhere.test');
+    const commonsProject = await seedProject(h, {
+        orgId: opts.acmeId,
+        name: 'Acme Commons',
+        slug: 'acme-commons',
+        ownerId: opts.aliceId,
+        visibility: 'public',
+        autoJoinOnUpload: true
+    });
+    const alicesCommonsDef = await seedDefinition(h, {
+        projectId: commonsProject.id,
+        ownerId: opts.aliceId,
+        displayName: "Alice's Commons Def"
+    });
+    return { commonsProject, alicesCommonsDef, peter };
+}
+//# sourceMappingURL=scenarios.js.map

package/dist/testing/scenarios.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scenarios.js","sourceRoot":"","sources":["../../src/testing/scenarios.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAY7F;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,CAAc;IAC5C,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC;IACnD,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC;IAC/C,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;IACjF,MAAM,aAAa,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IAC5E,MAAM,aAAa,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IAE3E,MAAM,aAAa,GAAG,MAAM,WAAW,CAAC,CAAC,EAAE;QAC1C,KAAK,EAAE,IAAI,CAAC,EAAE;QACd,IAAI,EAAE,eAAe;QACrB,IAAI,EAAE,eAAe;QACrB,OAAO,EAAE,KAAK,CAAC,EAAE;QACjB,UAAU,EAAE,SAAS;KACrB,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,CAAC,EAAE;QACpC,KAAK,EAAE,IAAI,CAAC,EAAE;QACd,IAAI,EAAE,kBAAkB;QACxB,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,KAAK,CAAC,EAAE;QACjB,UAAU,EAAE,KAAK;KACjB,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,MAAM,WAAW,CAAC,CAAC,EAAE;QACvC,KAAK,EAAE,IAAI,CAAC,EAAE;QACd,IAAI,EAAE,aAAa;QACnB,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,KAAK,CAAC,EAAE;QACjB,UAAU,EAAE,QAAQ;KACpB,CAAC,CAAC;IAEH,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,aAAa,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;AACjE,CAAC;AAOD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,CAAc;IACjD,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,CAAC,EAAE,sBAAsB,CAAC,CAAC;IACxD,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,CAAC,EAAE;QAClC,IAAI,EAAE,WAAW;QACjB,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE,KAAK,CAAC,EAAE;KACjB,CAAC,CAAC;IACH,MAAM,aAAa,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IAClF,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;AAC7B,CAAC;AAOD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,CAAc;IAChD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,CAAC,EAAE,mBAAmB,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,CAAC,EAAE;QAChC,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,IAAI,CAAC,EAAE;KAChB,CAAC,CAAC;IACH,MAAM,aAAa,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC/E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC1B,CAAC;AAQD;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAChC,CAAc,EACd,IAAyC;IAEzC,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,CAAC,EAAE,sBAAsB,CAAC,CAAC;IACxD,MAAM,cAAc,GAAG,MAAM,WAAW,CAAC,CAAC,EAAE;QAC3C,KAAK,EAAE,IAAI,CAAC,MAAM;QAClB,IAAI,EAAE,cAAc;QACpB,IAAI,EAAE,cAAc;QACpB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,UAAU,EAAE,QAAQ;QACpB,gBAAgB,EAAE,IAAI;KACtB,CAAC,CAAC;IACH,MAAM,gBAAgB,GAAG,MAAM,cAAc,CAAC,CAAC,EAAE;QAChD,SAAS,EAAE,cAAc,CAAC,EAAE;QAC5B,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,WAAW,EAAE,qBAAqB;KAClC,CAAC,CAAC;IACH,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC;AACpD,CAAC"}

package/dist/testing/seed-adapter.d.ts

@@ -0,0 +1,31 @@
+/**
+ * The one thing test fixtures cannot get from `SelvaConfig`: creating and
+ * reading identities.
+ *
+ * Everything else a fixture needs — orgs, projects, definitions, invites —
+ * lives behind `IDataProvider` and is portable as-is. Identity is not.
+ * `IAuthProvider` exposes user *creation* only through the optional
+ * `passwordAuth.createUserWithPassword`, and a provider that authenticates by
+ * OAuth or forwarded headers implements none of it, so there is no interface
+ * method every provider answers. Each provider also stores identity its own
+ * way — the local one in `auth-users.json`, Supabase in its own `auth.users`
+ * table — and seeding has to reach that store directly, not through a login
+ * flow no test wants to perform.
+ *
+ * So the host supplies this. Two methods, because that is all the shared
+ * fixtures use: `seedUser` creates, `actAs` reads back.
+ */
+import type { AuthUser } from '@selvajs/platform';
+export interface SeedAuthAdapter {
+    /**
+     * Create an identity and return it. Called before the data-layer row exists,
+     * so implementations must not assume `ensureUser` has run.
+     *
+     * The returned `id` is what every other seeder keys off, so it has to be the
+     * id the auth provider will report for this user later — not a fresh one.
+     */
+    createUser(email: string): Promise<AuthUser>;
+    /** Read an identity back. `null` when absent, so `actAs` can fail loudly. */
+    findById(id: string): Promise<AuthUser | null>;
+}
+//# sourceMappingURL=seed-adapter.d.ts.map

package/dist/testing/seed-adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"seed-adapter.d.ts","sourceRoot":"","sources":["../../src/testing/seed-adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAElD,MAAM,WAAW,eAAe;IAC/B;;;;;;OAMG;IACH,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAE7C,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC;CAC/C"}

package/dist/testing/seed-adapter.js

@@ -0,0 +1,19 @@
+/**
+ * The one thing test fixtures cannot get from `SelvaConfig`: creating and
+ * reading identities.
+ *
+ * Everything else a fixture needs — orgs, projects, definitions, invites —
+ * lives behind `IDataProvider` and is portable as-is. Identity is not.
+ * `IAuthProvider` exposes user *creation* only through the optional
+ * `passwordAuth.createUserWithPassword`, and a provider that authenticates by
+ * OAuth or forwarded headers implements none of it, so there is no interface
+ * method every provider answers. Each provider also stores identity its own
+ * way — the local one in `auth-users.json`, Supabase in its own `auth.users`
+ * table — and seeding has to reach that store directly, not through a login
+ * flow no test wants to perform.
+ *
+ * So the host supplies this. Two methods, because that is all the shared
+ * fixtures use: `seedUser` creates, `actAs` reads back.
+ */
+export {};
+//# sourceMappingURL=seed-adapter.js.map

package/dist/testing/seed-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"seed-adapter.js","sourceRoot":"","sources":["../../src/testing/seed-adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@selvajs/server",
-  "version": "1.1.0",
+  "version": "1.3.0",
   "description": "Transport-agnostic server building blocks for apps built on the Selva engine (limits, rate limiting, SSRF guard, remote-definition fetch, definition service + render loader); the solve core lives in @selvajs/solve/server",
   "license": "MIT",
   "author": "VektorNode",
@@ -66,10 +66,40 @@
       "types": "./dist/access/index.d.ts",
       "import": "./dist/access/index.js"
     },
+    "./api": {
+      "selva-source": "./src/api/index.ts",
+      "types": "./dist/api/index.d.ts",
+      "import": "./dist/api/index.js"
+    },
+    "./handlers": {
+      "selva-source": "./src/handlers/index.ts",
+      "types": "./dist/handlers/index.d.ts",
+      "import": "./dist/handlers/index.js"
+    },
     "./ops": {
       "selva-source": "./src/ops/index.ts",
       "types": "./dist/ops/index.d.ts",
       "import": "./dist/ops/index.js"
+    },
+    "./projects": {
+      "selva-source": "./src/projects/index.ts",
+      "types": "./dist/projects/index.d.ts",
+      "import": "./dist/projects/index.js"
+    },
+    "./organizations": {
+      "selva-source": "./src/organizations/index.ts",
+      "types": "./dist/organizations/index.d.ts",
+      "import": "./dist/organizations/index.js"
+    },
+    "./notifications": {
+      "selva-source": "./src/notifications/index.ts",
+      "types": "./dist/notifications/index.d.ts",
+      "import": "./dist/notifications/index.js"
+    },
+    "./testing": {
+      "selva-source": "./src/testing/index.ts",
+      "types": "./dist/testing/index.d.ts",
+      "import": "./dist/testing/index.js"
     }
   },
   "files": [
@@ -79,27 +109,36 @@
     "!**/*.spec.*"
   ],
   "dependencies": {
-    "@selvajs/platform": "^0.19.1",
+    "zod": "^4.3.6",
     "@selvajs/compute": "^4.0.2",
+    "@selvajs/notifications": "^0.2.0",
+    "@selvajs/platform": "^0.20.0",
     "@selvajs/schemas": "^5.0.1"
   },
   "peerDependencies": {
     "@sentry/node": ">=8",
+    "nodemailer": ">=7",
     "pino": ">=9"
   },
   "peerDependenciesMeta": {
     "@sentry/node": {
       "optional": true
     },
+    "nodemailer": {
+      "optional": true
+    },
     "pino": {
       "optional": true
     }
   },
   "devDependencies": {
     "@types/node": "^26.2.0",
+    "@types/nodemailer": "^8.0.1",
+    "nodemailer": "^9.0.5",
     "typescript": "~6.0.3",
     "vitest": "^4.1.10",
-    "@selvajs/config": "0.0.4"
+    "@selvajs/config": "0.0.4",
+    "@selvajs/local-provider": "0.15.2"
   },
   "scripts": {
     "build": "tsc",