@spinajs/configuration-http 2.0.480 → 2.0.482

package/README.md

@@ -1,11 +1,34 @@
-# `@spinajs/configuration-common`
+# `@spinajs/configuration-http`
 
-> TODO: description
+HTTP API for reading and updating database-stored configuration values managed by
+[`@spinajs/configuration-db-source`](../configuration-db-source).
 
-## Usage
+It exposes a read + update CRUD surface over the `configuration` table. Entries
+themselves are created by code that exposes config options (`expose: true`), so
+this API intentionally does **not** create or delete arbitrary entries — it only
+lets operators tune existing values.
 
-```
-const configurationCommon = require('@spinajs/configuration-common');
+## Endpoints
 
-// TODO: DEMONSTRATE API
-```
+| Method | Path                     | Permission  | Description                                  |
+| ------ | ------------------------ | ----------- | -------------------------------------------- |
+| GET    | `/configuration`         | `readAny`   | List all entries (optional `?group=` filter) |
+| GET    | `/configuration/:slug`   | `readAny`   | Get a single entry by slug                   |
+| PATCH  | `/configuration/:slug`   | `updateAny` | Update an entry's `Value` (+ `Default`/`Watch`) |
+
+All routes require a valid session (`AuthorizedPolicy`) and are guarded by
+`RbacPolicy` on the `configuration` resource.
+
+Incoming values are validated against the entry `Type` and `Meta` constraints
+(min/max, oneOf/manyOf, date bounds) and stored in their canonical string form.
+
+## RBAC
+
+The package ships a dedicated `configuration` role granting `read:any` /
+`update:any` on the `configuration` resource, and extends `admin` with it. Grant
+the `configuration` role (or `admin`) to give an account access to the API.
+
+## Notes
+
+Writes are persisted to the database only. The running application picks up the
+change through the db-source watch poll, and only for entries with `Watch = true`.

package/lib/cjs/bootstrap.d.ts

@@ -0,0 +1,20 @@
+import { Bootstrapper } from '@spinajs/di';
+/**
+ * Ties the `DbConfig` model to the `configuration` RBAC resource.
+ *
+ * `DbConfig` lives in the persistence-only `@spinajs/configuration-db-source`
+ * package, which intentionally does not depend on rbac. Its `@Model('configuration')`
+ * only names the database table - that is NOT the RBAC resource. Set the model's
+ * `RbacResource` here ( this http package already depends on rbac ) so the
+ * `RbacModelPermissionMiddleware` enforces `configuration` grants on every
+ * DbConfig query, matching the route-level `@Resource('configuration')` on the
+ * controller.
+ *
+ * Without this the model descriptor has no `RbacResource`, so model-level
+ * permission checks are silently skipped ( the middleware's table-name fallback
+ * is disabled ) and only the route-level policy would guard the data.
+ */
+export declare class ConfigurationHttpBootstrapper extends Bootstrapper {
+    bootstrap(): void;
+}
+//# sourceMappingURL=bootstrap.d.ts.map

package/lib/cjs/bootstrap.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bootstrap.d.ts","sourceRoot":"","sources":["../../src/bootstrap.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAc,MAAM,aAAa,CAAC;AAKvD;;;;;;;;;;;;;;GAcG;AACH,qBACa,6BAA8B,SAAQ,YAAY;IACtD,SAAS,IAAI,IAAI;CAMzB"}

package/lib/cjs/bootstrap.js

@@ -0,0 +1,40 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ConfigurationHttpBootstrapper = void 0;
+const di_1 = require("@spinajs/di");
+const orm_1 = require("@spinajs/orm");
+const configuration_db_source_1 = require("@spinajs/configuration-db-source");
+/**
+ * Ties the `DbConfig` model to the `configuration` RBAC resource.
+ *
+ * `DbConfig` lives in the persistence-only `@spinajs/configuration-db-source`
+ * package, which intentionally does not depend on rbac. Its `@Model('configuration')`
+ * only names the database table - that is NOT the RBAC resource. Set the model's
+ * `RbacResource` here ( this http package already depends on rbac ) so the
+ * `RbacModelPermissionMiddleware` enforces `configuration` grants on every
+ * DbConfig query, matching the route-level `@Resource('configuration')` on the
+ * controller.
+ *
+ * Without this the model descriptor has no `RbacResource`, so model-level
+ * permission checks are silently skipped ( the middleware's table-name fallback
+ * is disabled ) and only the route-level policy would guard the data.
+ */
+let ConfigurationHttpBootstrapper = class ConfigurationHttpBootstrapper extends di_1.Bootstrapper {
+    bootstrap() {
+        const descriptor = (0, orm_1.extractModelDescriptor)(configuration_db_source_1.DbConfig);
+        if (descriptor) {
+            descriptor.RbacResource = 'configuration';
+        }
+    }
+};
+exports.ConfigurationHttpBootstrapper = ConfigurationHttpBootstrapper;
+exports.ConfigurationHttpBootstrapper = ConfigurationHttpBootstrapper = __decorate([
+    (0, di_1.Injectable)(di_1.Bootstrapper)
+], ConfigurationHttpBootstrapper);
+//# sourceMappingURL=bootstrap.js.map

package/lib/cjs/bootstrap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bootstrap.js","sourceRoot":"","sources":["../../src/bootstrap.ts"],"names":[],"mappings":";;;;;;;;;AAAA,oCAAuD;AACvD,sCAAsD;AACtD,8EAA4D;AAG5D;;;;;;;;;;;;;;GAcG;AAEI,IAAM,6BAA6B,GAAnC,MAAM,6BAA8B,SAAQ,iBAAY;IACtD,SAAS;QACd,MAAM,UAAU,GAAG,IAAA,4BAAsB,EAAC,kCAAQ,CAAyB,CAAC;QAC5E,IAAI,UAAU,EAAE,CAAC;YACf,UAAU,CAAC,YAAY,GAAG,eAAe,CAAC;QAC5C,CAAC;IACH,CAAC;CACF,CAAA;AAPY,sEAA6B;wCAA7B,6BAA6B;IADzC,IAAA,eAAU,EAAC,iBAAY,CAAC;GACZ,6BAA6B,CAOzC"}

package/lib/cjs/config/configuration-http.d.ts

@@ -0,0 +1,34 @@
+declare const configurationHttp: {
+    system: {
+        dirs: {
+            controllers: string[];
+        };
+    };
+    rbac: {
+        grants: {
+            /**
+             * Dedicated admin sub-role granting full management over configuration
+             * entries. Mirrors the `admin.users` sub-role in @spinajs/rbac: only the
+             * `admin` role ( and `system`, which extends admin ) inherits it below, so
+             * the configuration HTTP api is an admin-only capability. The resource
+             * itself is named `configuration` ( see @Resource in the controller ).
+             */
+            'admin.configuration': {
+                configuration: {
+                    'read:any': string[];
+                    'update:any': string[];
+                };
+            };
+            /**
+             * Admin inherits configuration management. The config merge concatenates
+             * `$extend` arrays, so this is additive - it does not overwrite the base
+             * admin grants ( eg. `admin.users` ).
+             */
+            admin: {
+                $extend: string[];
+            };
+        };
+    };
+};
+export default configurationHttp;
+//# sourceMappingURL=configuration-http.d.ts.map

package/lib/cjs/config/configuration-http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"configuration-http.d.ts","sourceRoot":"","sources":["../../../src/config/configuration-http.ts"],"names":[],"mappings":"AAOA,QAAA,MAAM,iBAAiB;;;;;;;;YAQjB;;;;;;eAMG;;;;;;;YAQH;;;;eAIG;;;;;;CAMR,CAAC;AAEF,eAAe,iBAAiB,CAAC"}

package/lib/cjs/config/configuration-http.js

@@ -0,0 +1,41 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const path_1 = require("path");
+function dir(path) {
+    const inCommonJs = typeof module !== 'undefined';
+    return (0, path_1.resolve)((0, path_1.normalize)((0, path_1.join)(process.env.WORKSPACE_ROOT_PATH ?? process.cwd(), 'node_modules', '@spinajs', 'configuration-http', 'lib', inCommonJs ? 'cjs' : 'mjs', path)));
+}
+const configurationHttp = {
+    system: {
+        dirs: {
+            controllers: [dir('controllers')],
+        },
+    },
+    rbac: {
+        grants: {
+            /**
+             * Dedicated admin sub-role granting full management over configuration
+             * entries. Mirrors the `admin.users` sub-role in @spinajs/rbac: only the
+             * `admin` role ( and `system`, which extends admin ) inherits it below, so
+             * the configuration HTTP api is an admin-only capability. The resource
+             * itself is named `configuration` ( see @Resource in the controller ).
+             */
+            'admin.configuration': {
+                configuration: {
+                    'read:any': ['*'],
+                    'update:any': ['*'],
+                },
+            },
+            /**
+             * Admin inherits configuration management. The config merge concatenates
+             * `$extend` arrays, so this is additive - it does not overwrite the base
+             * admin grants ( eg. `admin.users` ).
+             */
+            admin: {
+                $extend: ['admin.configuration'],
+            },
+        },
+    },
+};
+exports.default = configurationHttp;
+//# sourceMappingURL=configuration-http.js.map

package/lib/cjs/config/configuration-http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"configuration-http.js","sourceRoot":"","sources":["../../../src/config/configuration-http.ts"],"names":[],"mappings":";;AAAA,+BAAgD;AAEhD,SAAS,GAAG,CAAC,IAAY;IACvB,MAAM,UAAU,GAAG,OAAO,MAAM,KAAK,WAAW,CAAC;IACjD,OAAO,IAAA,cAAO,EAAC,IAAA,gBAAS,EAAC,IAAA,WAAI,EAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,OAAO,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,UAAU,EAAE,oBAAoB,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;AAC/K,CAAC;AAED,MAAM,iBAAiB,GAAG;IACxB,MAAM,EAAE;QACN,IAAI,EAAE;YACJ,WAAW,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;SAClC;KACF;IACD,IAAI,EAAE;QACJ,MAAM,EAAE;YACN;;;;;;eAMG;YACH,qBAAqB,EAAE;gBACrB,aAAa,EAAE;oBACb,UAAU,EAAE,CAAC,GAAG,CAAC;oBACjB,YAAY,EAAE,CAAC,GAAG,CAAC;iBACpB;aACF;YAED;;;;eAIG;YACH,KAAK,EAAE;gBACL,OAAO,EAAE,CAAC,qBAAqB,CAAC;aACjC;SACF;KACF;CACF,CAAC;AAEF,kBAAe,iBAAiB,CAAC"}

package/lib/cjs/controllers/Configuration.d.ts

@@ -0,0 +1,66 @@
+import { BadRequestResponse, BaseController, Ok } from '@spinajs/http';
+import { DataValidator } from '@spinajs/validation';
+import { DbConfig } from '@spinajs/configuration-db-source';
+import { UpdateConfigDto } from '../dto/update-config-dto.js';
+/**
+ * HTTP api for database stored configuration values.
+ *
+ * Exposes read and update operations over the `configuration` table managed by
+ * `@spinajs/configuration-db-source`. Entries themselves are created by code
+ * that exposes config options ( `expose: true` ), so this api intentionally does
+ * NOT allow creating or deleting arbitrary entries - only tuning their values.
+ *
+ * Writes are persisted to the database only. The running application picks up
+ * the change through the db-source watch poll, and only for entries with
+ * `Watch = true`.
+ *
+ * @tags Configuration
+ */
+export declare class ConfigurationController extends BaseController {
+    protected Validator: DataValidator;
+    /**
+     * List configuration entries
+     * Returns all database stored configuration entries, optionally filtered by group.
+     * @security cookieAuth
+     * @param group Optional group name to filter entries by
+     * @response 200 List of configuration entries
+     * @response 401 Unauthorized — valid session required
+     * @response 403 Forbidden — readAny permission required on configuration resource
+     */
+    list(group?: string): Promise<Ok<Record<string, unknown>[]>>;
+    /**
+     * Get configuration entry
+     * Returns a single configuration entry identified by its slug.
+     * @security cookieAuth
+     * @param slug Unique configuration entry slug
+     * @response 200 Configuration entry
+     * @response 401 Unauthorized — valid session required
+     * @response 403 Forbidden — readAny permission required on configuration resource
+     * @response 404 Configuration entry not found
+     */
+    get(entry: DbConfig): Promise<Ok<Record<string, unknown>>>;
+    /**
+     * Update configuration entry value
+     * Updates the value ( and optionally default/watch flag ) of an existing entry.
+     * The incoming value is validated against the entry `Type` and `Meta` constraints.
+     * Structural fields ( slug, group, type ) cannot be changed through this api.
+     * @security cookieAuth
+     * @param slug Unique configuration entry slug
+     * @response 200 Updated configuration entry
+     * @response 400 Invalid value for the entry type or constraints
+     * @response 401 Unauthorized — valid session required
+     * @response 403 Forbidden — updateAny permission required on configuration resource
+     * @response 404 Configuration entry not found
+     */
+    update(entry: DbConfig, data: UpdateConfigDto): Promise<Ok<Record<string, unknown>> | BadRequestResponse<any>>;
+    /**
+     * Validates a single value against the entry value schema, returning a 400
+     * response on failure or `null` when it passes.
+     *
+     * The value is wrapped in an object ( `{ [field]: value }` ) so it is always a
+     * non-null object for the validator - a bare `null` / scalar would otherwise
+     * confuse `tryValidate`'s schema-vs-data overload resolution.
+     */
+    private validateValue;
+}
+//# sourceMappingURL=Configuration.d.ts.map

package/lib/cjs/controllers/Configuration.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Configuration.d.ts","sourceRoot":"","sources":["../../../src/controllers/Configuration.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAuB,EAAE,EAAwB,MAAM,eAAe,CAAC;AAGlH,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,OAAO,EAAE,QAAQ,EAAE,MAAM,kCAAkC,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAgB9D;;;;;;;;;;;;;GAaG;AACH,qBAGa,uBAAwB,SAAQ,cAAc;IAEzD,SAAS,CAAC,SAAS,EAAG,aAAa,CAAC;IAEpC;;;;;;;;OAQG;IAGU,IAAI,CAAU,KAAK,CAAC,EAAE,MAAM;IAKzC;;;;;;;;;OASG;IAGU,GAAG,CAAwD,KAAK,EAAE,QAAQ;IAIvF;;;;;;;;;;;;OAYG;IAGU,MAAM,CAAwD,KAAK,EAAE,QAAQ,EAAU,IAAI,EAAE,eAAe;IAmCzH;;;;;;;OAOG;IACH,OAAO,CAAC,aAAa;CActB"}

package/lib/cjs/controllers/Configuration.js

@@ -0,0 +1,170 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ConfigurationController = void 0;
+const http_1 = require("@spinajs/http");
+const rbac_http_1 = require("@spinajs/rbac-http");
+const di_1 = require("@spinajs/di");
+const validation_1 = require("@spinajs/validation");
+const orm_http_1 = require("@spinajs/orm-http");
+const configuration_db_source_1 = require("@spinajs/configuration-db-source");
+const update_config_dto_js_1 = require("../dto/update-config-dto.js");
+const validation_js_1 = require("../validation.js");
+/**
+ * Serializes an entry for the api. `DbConfig.dehydrate()` emits only the declared
+ * columns with Value / Default in their canonical stored form ( numbers as "10",
+ * booleans as "true"/"false", dates / times as ISO 8601 etc. ) produced by the
+ * DbConfigValueConverter, and Meta already parsed into an object by its @Json
+ * converter - the same representation they round-trip through on update.
+ */
+function present(entry) {
+    const out = entry.dehydrate();
+    out.Meta = entry.Meta ?? null;
+    return out;
+}
+/**
+ * HTTP api for database stored configuration values.
+ *
+ * Exposes read and update operations over the `configuration` table managed by
+ * `@spinajs/configuration-db-source`. Entries themselves are created by code
+ * that exposes config options ( `expose: true` ), so this api intentionally does
+ * NOT allow creating or deleting arbitrary entries - only tuning their values.
+ *
+ * Writes are persisted to the database only. The running application picks up
+ * the change through the db-source watch poll, and only for entries with
+ * `Watch = true`.
+ *
+ * @tags Configuration
+ */
+let ConfigurationController = class ConfigurationController extends http_1.BaseController {
+    /**
+     * List configuration entries
+     * Returns all database stored configuration entries, optionally filtered by group.
+     * @security cookieAuth
+     * @param group Optional group name to filter entries by
+     * @response 200 List of configuration entries
+     * @response 401 Unauthorized — valid session required
+     * @response 403 Forbidden — readAny permission required on configuration resource
+     */
+    async list(group) {
+        const entries = await (group ? configuration_db_source_1.DbConfig.where('Group', group) : configuration_db_source_1.DbConfig.all());
+        return new http_1.Ok(entries.map((e) => present(e)));
+    }
+    /**
+     * Get configuration entry
+     * Returns a single configuration entry identified by its slug.
+     * @security cookieAuth
+     * @param slug Unique configuration entry slug
+     * @response 200 Configuration entry
+     * @response 401 Unauthorized — valid session required
+     * @response 403 Forbidden — readAny permission required on configuration resource
+     * @response 404 Configuration entry not found
+     */
+    async get(entry) {
+        return new http_1.Ok(present(entry));
+    }
+    /**
+     * Update configuration entry value
+     * Updates the value ( and optionally default/watch flag ) of an existing entry.
+     * The incoming value is validated against the entry `Type` and `Meta` constraints.
+     * Structural fields ( slug, group, type ) cannot be changed through this api.
+     * @security cookieAuth
+     * @param slug Unique configuration entry slug
+     * @response 200 Updated configuration entry
+     * @response 400 Invalid value for the entry type or constraints
+     * @response 401 Unauthorized — valid session required
+     * @response 403 Forbidden — updateAny permission required on configuration resource
+     * @response 404 Configuration entry not found
+     */
+    async update(entry, data) {
+        // Build the value schema from the entry Type + Meta ( entry.Meta is already an
+        // object here, parsed by its @Json converter on load ) and validate the
+        // incoming value(s) against it. Validation can only happen here - not on the
+        // request DTO - because the entry Type isn't known until after this lookup.
+        const schema = (0, validation_js_1.valueSchema)(entry.Type, entry.Meta);
+        const valueError = this.validateValue(schema, 'Value', data.Value);
+        if (valueError) {
+            return valueError;
+        }
+        if (data.Default !== undefined) {
+            const defaultError = this.validateValue(schema, 'Default', data.Default);
+            if (defaultError) {
+                return defaultError;
+            }
+        }
+        // Assign the raw, validated value(s). The DbConfigValueConverter does all the
+        // type-based coercion into the canonical stored form on update().
+        entry.Value = data.Value;
+        if (data.Default !== undefined) {
+            entry.Default = data.Default;
+        }
+        if (data.Watch !== undefined) {
+            entry.Watch = data.Watch;
+        }
+        await entry.update();
+        return new http_1.Ok(present(entry));
+    }
+    /**
+     * Validates a single value against the entry value schema, returning a 400
+     * response on failure or `null` when it passes.
+     *
+     * The value is wrapped in an object ( `{ [field]: value }` ) so it is always a
+     * non-null object for the validator - a bare `null` / scalar would otherwise
+     * confuse `tryValidate`'s schema-vs-data overload resolution.
+     */
+    validateValue(valueSchema, field, value) {
+        const [isValid, errors] = this.Validator.tryValidate({ type: 'object', properties: { [field]: valueSchema }, required: [field] }, { [field]: value });
+        if (isValid) {
+            return null;
+        }
+        const message = (errors ?? []).map((e) => `${field}${e.instancePath ? e.instancePath.replace(`/${field}`, '') : ''} ${e.message ?? 'is invalid'}`.trim()).join('; ') || `invalid value for ${field}`;
+        return new http_1.BadRequestResponse({ error: { message } });
+    }
+};
+exports.ConfigurationController = ConfigurationController;
+__decorate([
+    (0, di_1.Autoinject)(),
+    __metadata("design:type", validation_1.DataValidator)
+], ConfigurationController.prototype, "Validator", void 0);
+__decorate([
+    (0, http_1.Get)('/'),
+    (0, rbac_http_1.Permission)(['readAny']),
+    __param(0, (0, http_1.Query)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String]),
+    __metadata("design:returntype", Promise)
+], ConfigurationController.prototype, "list", null);
+__decorate([
+    (0, http_1.Get)(':slug'),
+    (0, rbac_http_1.Permission)(['readAny']),
+    __param(0, (0, orm_http_1.FromModel)({ paramField: 'slug', queryField: 'Slug' })),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [configuration_db_source_1.DbConfig]),
+    __metadata("design:returntype", Promise)
+], ConfigurationController.prototype, "get", null);
+__decorate([
+    (0, http_1.Patch)(':slug'),
+    (0, rbac_http_1.Permission)(['updateAny']),
+    __param(0, (0, orm_http_1.FromModel)({ paramField: 'slug', queryField: 'Slug' })),
+    __param(1, (0, http_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [configuration_db_source_1.DbConfig, update_config_dto_js_1.UpdateConfigDto]),
+    __metadata("design:returntype", Promise)
+], ConfigurationController.prototype, "update", null);
+exports.ConfigurationController = ConfigurationController = __decorate([
+    (0, http_1.BasePath)('configuration'),
+    (0, http_1.Policy)(rbac_http_1.AuthorizedPolicy),
+    (0, rbac_http_1.Resource)('configuration')
+], ConfigurationController);
+//# sourceMappingURL=Configuration.js.map

package/lib/cjs/controllers/Configuration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Configuration.js","sourceRoot":"","sources":["../../../src/controllers/Configuration.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,wCAAkH;AAClH,kDAA4E;AAC5E,oCAAyC;AACzC,oDAAoD;AACpD,gDAA8C;AAC9C,8EAA4D;AAC5D,sEAA8D;AAC9D,oDAA+C;AAE/C;;;;;;GAMG;AACH,SAAS,OAAO,CAAC,KAAe;IAC9B,MAAM,GAAG,GAAG,KAAK,CAAC,SAAS,EAA6B,CAAC;IACzD,GAAG,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC;IAC9B,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;;;;;GAaG;AAII,IAAM,uBAAuB,GAA7B,MAAM,uBAAwB,SAAQ,qBAAc;IAIzD;;;;;;;;OAQG;IAGU,AAAN,KAAK,CAAC,IAAI,CAAU,KAAc;QACvC,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,kCAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,kCAAQ,CAAC,GAAG,EAAE,CAAC,CAAC;QAChF,OAAO,IAAI,SAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAChD,CAAC;IAED;;;;;;;;;OASG;IAGU,AAAN,KAAK,CAAC,GAAG,CAAwD,KAAe;QACrF,OAAO,IAAI,SAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IAChC,CAAC;IAED;;;;;;;;;;;;OAYG;IAGU,AAAN,KAAK,CAAC,MAAM,CAAwD,KAAe,EAAU,IAAqB;QACvH,+EAA+E;QAC/E,wEAAwE;QACxE,6EAA6E;QAC7E,4EAA4E;QAC5E,MAAM,MAAM,GAAG,IAAA,2BAAW,EAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAEnD,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QACnE,IAAI,UAAU,EAAE,CAAC;YACf,OAAO,UAAU,CAAC;QACpB,CAAC;QAED,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAC/B,MAAM,YAAY,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YACzE,IAAI,YAAY,EAAE,CAAC;gBACjB,OAAO,YAAY,CAAC;YACtB,CAAC;QACH,CAAC;QAED,8EAA8E;QAC9E,kEAAkE;QAClE,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,KAA2B,CAAC;QAC/C,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAC/B,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,OAA+B,CAAC;QACvD,CAAC;QAED,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC7B,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QAC3B,CAAC;QAED,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC;QAErB,OAAO,IAAI,SAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IAChC,CAAC;IAED;;;;;;;OAOG;IACK,aAAa,CAAC,WAAoC,EAAE,KAAa,EAAE,KAAc;QACvF,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,CAClD,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,EAAE,QAAQ,EAAE,CAAC,KAAK,CAAC,EAAE,EAC3E,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,CACnB,CAAC;QAEF,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,OAAO,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,OAAO,IAAI,YAAY,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,qBAAqB,KAAK,EAAE,CAAC;QAErM,OAAO,IAAI,yBAAkB,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;IACxD,CAAC;CACF,CAAA;AA5GY,0DAAuB;AAExB;IADT,IAAA,eAAU,GAAE;8BACS,0BAAa;0DAAC;AAavB;IAFZ,IAAA,UAAG,EAAC,GAAG,CAAC;IACR,IAAA,sBAAU,EAAC,CAAC,SAAS,CAAC,CAAC;IACL,WAAA,IAAA,YAAK,GAAE,CAAA;;;;mDAGzB;AAcY;IAFZ,IAAA,UAAG,EAAC,OAAO,CAAC;IACZ,IAAA,sBAAU,EAAC,CAAC,SAAS,CAAC,CAAC;IACN,WAAA,IAAA,oBAAS,EAAC,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAA;;qCAAQ,kCAAQ;;kDAEtF;AAiBY;IAFZ,IAAA,YAAK,EAAC,OAAO,CAAC;IACd,IAAA,sBAAU,EAAC,CAAC,WAAW,CAAC,CAAC;IACL,WAAA,IAAA,oBAAS,EAAC,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAA;IAAmB,WAAA,IAAA,WAAI,GAAE,CAAA;;qCAAjB,kCAAQ,EAAgB,sCAAe;;qDAiCxH;kCApFU,uBAAuB;IAHnC,IAAA,eAAQ,EAAC,eAAe,CAAC;IACzB,IAAA,aAAM,EAAC,4BAAgB,CAAC;IACxB,IAAA,oBAAQ,EAAC,eAAe,CAAC;GACb,uBAAuB,CA4GnC"}

package/lib/cjs/dto/update-config-dto.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Body payload for updating a configuration entry value.
+ *
+ * Only the operationally meaningful fields are editable. Structural fields
+ * ( `Slug`, `Group`, `Type` ) are owned by code that exposes the option and
+ * cannot be changed through this api.
+ */
+export declare class UpdateConfigDto {
+    Value: any;
+    Default?: any;
+    Watch?: boolean;
+    constructor(data: Partial<UpdateConfigDto>);
+}
+//# sourceMappingURL=update-config-dto.d.ts.map

package/lib/cjs/dto/update-config-dto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-config-dto.d.ts","sourceRoot":"","sources":["../../../src/dto/update-config-dto.ts"],"names":[],"mappings":"AAEA;;;;;;GAMG;AACH,qBAYa,eAAe;IAEnB,KAAK,EAAE,GAAG,CAAC;IAGX,OAAO,CAAC,EAAE,GAAG,CAAC;IAEd,KAAK,CAAC,EAAE,OAAO,CAAC;gBAEX,IAAI,EAAE,OAAO,CAAC,eAAe,CAAC;CAG3C"}

package/lib/cjs/dto/update-config-dto.js

@@ -0,0 +1,42 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UpdateConfigDto = void 0;
+const validation_1 = require("@spinajs/validation");
+/**
+ * Body payload for updating a configuration entry value.
+ *
+ * Only the operationally meaningful fields are editable. Structural fields
+ * ( `Slug`, `Group`, `Type` ) are owned by code that exposes the option and
+ * cannot be changed through this api.
+ */
+let UpdateConfigDto = class UpdateConfigDto {
+    constructor(data) {
+        Object.assign(this, data);
+    }
+};
+exports.UpdateConfigDto = UpdateConfigDto;
+exports.UpdateConfigDto = UpdateConfigDto = __decorate([
+    (0, validation_1.Schema)({
+        type: 'object',
+        $id: 'configuration.http.updateConfigDTO',
+        properties: {
+            // value type varies with the entry `Type`, real validation happens against
+            // Type/Meta in the controller, so the schema only requires its presence
+            Value: {},
+            Default: {},
+            Watch: { type: 'boolean' },
+        },
+        required: ['Value'],
+    }),
+    __metadata("design:paramtypes", [Object])
+], UpdateConfigDto);
+//# sourceMappingURL=update-config-dto.js.map

package/lib/cjs/dto/update-config-dto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-config-dto.js","sourceRoot":"","sources":["../../../src/dto/update-config-dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,oDAA6C;AAE7C;;;;;;GAMG;AAaI,IAAM,eAAe,GAArB,MAAM,eAAe;IAS1B,YAAY,IAA8B;QACxC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC5B,CAAC;CACF,CAAA;AAZY,0CAAe;0BAAf,eAAe;IAZ3B,IAAA,mBAAM,EAAC;QACN,IAAI,EAAE,QAAQ;QACd,GAAG,EAAE,oCAAoC;QACzC,UAAU,EAAE;YACV,2EAA2E;YAC3E,wEAAwE;YACxE,KAAK,EAAE,EAAE;YACT,OAAO,EAAE,EAAE;YACX,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;SAC3B;QACD,QAAQ,EAAE,CAAC,OAAO,CAAC;KACpB,CAAC;;GACW,eAAe,CAY3B"}

package/lib/cjs/index.d.ts

@@ -0,0 +1,5 @@
+export * from './controllers/Configuration.js';
+export * from './dto/update-config-dto.js';
+export * from './validation.js';
+export * from './bootstrap.js';
+//# sourceMappingURL=index.d.ts.map

package/lib/cjs/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,gCAAgC,CAAC;AAC/C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC"}

package/lib/cjs/index.js

@@ -0,0 +1,21 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./controllers/Configuration.js"), exports);
+__exportStar(require("./dto/update-config-dto.js"), exports);
+__exportStar(require("./validation.js"), exports);
+__exportStar(require("./bootstrap.js"), exports);
+//# sourceMappingURL=index.js.map

package/lib/cjs/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,iEAA+C;AAC/C,6DAA2C;AAC3C,kDAAgC;AAChC,iDAA+B"}

package/lib/cjs/package.json

@@ -0,0 +1 @@
+{"type":"commonjs"}

package/lib/cjs/validation.d.ts

@@ -0,0 +1,29 @@
+import { ConfigurationEntryType, IConfigurationEntryMeta } from '@spinajs/configuration-db-source';
+/** A plain JSON Schema fragment. */
+type JsonSchema = Record<string, unknown>;
+/**
+ * Base JSON Schema per configuration `Type`. These shapes are constant - the
+ * per-entry `Meta` ( bounds / allowed values ) is folded on top at request time
+ * by {@link valueSchema}.
+ *
+ * Validation only - it asserts the incoming value is acceptable. Coercion into
+ * the typed / canonical stored form is the converter's job ( see
+ * DbConfigValueConverter ), so eg. a `date` is just a `format: date` string
+ * here, not a luxon DateTime.
+ */
+export declare const VALUE_SCHEMAS: Record<ConfigurationEntryType, JsonSchema>;
+/**
+ * Resolves the value schema for an entry: the constant base schema for its
+ * `Type` with the entry `Meta` constraints applied.
+ *
+ * The constraints target the schema "leaf" - the `items` schema for array types
+ * ( manyOf / *-range ), otherwise the schema itself - so allowed values and
+ * bounds land on the element being validated regardless of arity.
+ *
+ * Fed to `DataValidator` ( ajv ) in the controller, after the entry - and so its
+ * Type / Meta - has been loaded from the db. It can't live on the request DTO
+ * schema, which is validated before that lookup when the type is still unknown.
+ */
+export declare function valueSchema(type: ConfigurationEntryType, meta?: IConfigurationEntryMeta): JsonSchema;
+export {};
+//# sourceMappingURL=validation.d.ts.map

package/lib/cjs/validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../src/validation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAEnG,oCAAoC;AACpC,KAAK,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAE1C;;;;;;;;;GASG;AACH,eAAO,MAAM,aAAa,EAAE,MAAM,CAAC,sBAAsB,EAAE,UAAU,CAiBpE,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,sBAAsB,EAAE,IAAI,CAAC,EAAE,uBAAuB,GAAG,UAAU,CA8BpG"}