@sudobility/shapeshyft_service 1.0.4 → 1.0.6

package/CLAUDE.md

@@ -31,6 +31,17 @@ private peer (our proxy), preferring `CF-Connecting-IP`, then `X-Forwarded-For`
 right to left. Unknown peer means deny. Trusting `CF-Connecting-IP` assumes the
 origin accepts traffic only through Cloudflare and the internal proxy.
 
+## Process bootstrap (`src/server/`)
+
+What the API shells used to duplicate, as factories they configure:
+`createApiServer` (logger, CORS, 50 MB body limit, `/`, `/health`,
+`/health/ready`, the `/api/v1` mount, and the Bun `fetch` that lifts the idle
+timeout per request for long provider calls), `createLazyDatabase`,
+`createEnvReader` (the shell passes `process.env`), `createFirebaseAuth`, and
+`createInvitationEmailSender` (Resend; entity names are HTML-escaped). A shell
+keeps only its product name, pg schema, key prefixes, and provider key
+management.
+
 ## Rules
 
 - No `process.env`. Add a field to `ShapeshyftServiceConfig` instead.

package/dist/index.d.ts

@@ -16,4 +16,9 @@ export { DEFAULT_RATE_LIMITS_CONFIG, DEFAULT_ENTITLEMENT_DISPLAY_NAMES, } from "
 export * from "./schemas/index.js";
 export { collectForwardingHeaders, FORWARDING_HEADERS, isIpLiteral, isIpv4, isIpv6, isRoutableClientIp, normalizeClientIp, resolveAllowlistIp, resolveCallerIp, } from "./lib/client-ip.js";
 export type { AuthContextVariables } from "./hono-context.js";
+export { createEnvReader, parseEnvFile, type EnvReader } from "./server/env.js";
+export { createLazyDatabase, type LazyDatabase } from "./server/database.js";
+export { createFirebaseAuth, type FirebaseAuthConfig, } from "./server/firebase-auth.js";
+export { createInvitationEmailSender, renderInvitationEmail, escapeHtml, type InvitationEmailConfig, } from "./server/invitation-email.js";
+export { createApiServer, DEFAULT_BODY_LIMIT_BYTES, type ApiServer, type ApiServerConfig, } from "./server/api-server.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EACL,uBAAuB,EACvB,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,GACvB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,YAAY,EACZ,KAAK,cAAc,EACnB,KAAK,uBAAuB,GAC7B,MAAM,cAAc,CAAC;AACtB,YAAY,EACV,WAAW,EACX,aAAa,EACb,WAAW,EACX,eAAe,EACf,cAAc,EACd,WAAW,EACX,SAAS,EACT,WAAW,EACX,MAAM,EACN,UAAU,EACV,0BAA0B,EAC1B,kBAAkB,EAClB,eAAe,EACf,SAAS,GACV,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,KAAK,aAAa,GACnB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EACL,gBAAgB,EAChB,qBAAqB,EACrB,KAAK,UAAU,GAChB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EACL,QAAQ,EACR,wBAAwB,EACxB,SAAS,EACT,0BAA0B,EAC1B,KAAK,YAAY,EACjB,KAAK,WAAW,EAChB,KAAK,sBAAsB,GAC5B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,0BAA0B,EAC1B,iCAAiC,GAClC,MAAM,2BAA2B,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,OAAO,EACL,wBAAwB,EACxB,kBAAkB,EAClB,WAAW,EACX,MAAM,EACN,MAAM,EACN,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,EAClB,eAAe,GAChB,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EACL,uBAAuB,EACvB,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,GACvB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,YAAY,EACZ,KAAK,cAAc,EACnB,KAAK,uBAAuB,GAC7B,MAAM,cAAc,CAAC;AACtB,YAAY,EACV,WAAW,EACX,aAAa,EACb,WAAW,EACX,eAAe,EACf,cAAc,EACd,WAAW,EACX,SAAS,EACT,WAAW,EACX,MAAM,EACN,UAAU,EACV,0BAA0B,EAC1B,kBAAkB,EAClB,eAAe,EACf,SAAS,GACV,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,KAAK,aAAa,GACnB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EACL,gBAAgB,EAChB,qBAAqB,EACrB,KAAK,UAAU,GAChB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EACL,QAAQ,EACR,wBAAwB,EACxB,SAAS,EACT,0BAA0B,EAC1B,KAAK,YAAY,EACjB,KAAK,WAAW,EAChB,KAAK,sBAAsB,GAC5B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,0BAA0B,EAC1B,iCAAiC,GAClC,MAAM,2BAA2B,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,OAAO,EACL,wBAAwB,EACxB,kBAAkB,EAClB,WAAW,EACX,MAAM,EACN,MAAM,EACN,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,EAClB,eAAe,GAChB,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAG9D,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,KAAK,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAChF,OAAO,EAAE,kBAAkB,EAAE,KAAK,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAC7E,OAAO,EACL,kBAAkB,EAClB,KAAK,kBAAkB,GACxB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,2BAA2B,EAC3B,qBAAqB,EACrB,UAAU,EACV,KAAK,qBAAqB,GAC3B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,eAAe,EACf,wBAAwB,EACxB,KAAK,SAAS,EACd,KAAK,eAAe,GACrB,MAAM,wBAAwB,CAAC"}

package/dist/index.js

@@ -14,4 +14,10 @@ export { getActor, getPermissionErrorStatus, userActor, ENTITY_API_KEY_PERMISSIO
 export { DEFAULT_RATE_LIMITS_CONFIG, DEFAULT_ENTITLEMENT_DISPLAY_NAMES, } from "./middleware/rateLimit.js";
 export * from "./schemas/index.js";
 export { collectForwardingHeaders, FORWARDING_HEADERS, isIpLiteral, isIpv4, isIpv6, isRoutableClientIp, normalizeClientIp, resolveAllowlistIp, resolveCallerIp, } from "./lib/client-ip.js";
+// Process bootstrap for the API shells: env, database, auth, email, server.
+export { createEnvReader, parseEnvFile } from "./server/env.js";
+export { createLazyDatabase } from "./server/database.js";
+export { createFirebaseAuth, } from "./server/firebase-auth.js";
+export { createInvitationEmailSender, renderInvitationEmail, escapeHtml, } from "./server/invitation-email.js";
+export { createApiServer, DEFAULT_BODY_LIMIT_BYTES, } from "./server/api-server.js";
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EACL,uBAAuB,GAGxB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,YAAY,GAGb,MAAM,cAAc,CAAC;AAiBtB,OAAO,EACL,mBAAmB,EACnB,mBAAmB,GAEpB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EACL,gBAAgB,EAChB,qBAAqB,GAEtB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EACL,QAAQ,EACR,wBAAwB,EACxB,SAAS,EACT,0BAA0B,GAI3B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,0BAA0B,EAC1B,iCAAiC,GAClC,MAAM,2BAA2B,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,OAAO,EACL,wBAAwB,EACxB,kBAAkB,EAClB,WAAW,EACX,MAAM,EACN,MAAM,EACN,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,EAClB,eAAe,GAChB,MAAM,oBAAoB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EACL,uBAAuB,GAGxB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,YAAY,GAGb,MAAM,cAAc,CAAC;AAiBtB,OAAO,EACL,mBAAmB,EACnB,mBAAmB,GAEpB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EACL,gBAAgB,EAChB,qBAAqB,GAEtB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EACL,QAAQ,EACR,wBAAwB,EACxB,SAAS,EACT,0BAA0B,GAI3B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,0BAA0B,EAC1B,iCAAiC,GAClC,MAAM,2BAA2B,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,OAAO,EACL,wBAAwB,EACxB,kBAAkB,EAClB,WAAW,EACX,MAAM,EACN,MAAM,EACN,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,EAClB,eAAe,GAChB,MAAM,oBAAoB,CAAC;AAG5B,4EAA4E;AAC5E,OAAO,EAAE,eAAe,EAAE,YAAY,EAAkB,MAAM,iBAAiB,CAAC;AAChF,OAAO,EAAE,kBAAkB,EAAqB,MAAM,sBAAsB,CAAC;AAC7E,OAAO,EACL,kBAAkB,GAEnB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,2BAA2B,EAC3B,qBAAqB,EACrB,UAAU,GAEX,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,eAAe,EACf,wBAAwB,GAGzB,MAAM,wBAAwB,CAAC"}

package/dist/server/api-server.d.ts

@@ -0,0 +1,43 @@
+/**
+ * @fileoverview The API process: Hono app, health checks, and Bun server options
+ * @description What every shell's `index.ts` used to build by hand: logging,
+ * CORS, a body limit sized for base64 media, liveness and readiness routes,
+ * the `/api/v1` mount, database initialization on boot, and a Bun `fetch`
+ * that lets a long provider call outlive the server's idle timer.
+ */
+import { Hono } from "hono";
+import { sql } from "drizzle-orm";
+import type { Logger } from "../contracts.js";
+/** 50 MB: base64-encoded media inflates payloads by a third. */
+export declare const DEFAULT_BODY_LIMIT_BYTES: number;
+export interface ApiServerConfig {
+    /** Shown by `GET /` and in the startup log, e.g. "ShapeShyft API". */
+    name: string;
+    version?: string;
+    /** Everything served under `/api/v1`. */
+    routes: Hono;
+    /** Used by `/health/ready`; anything with drizzle's `execute`. */
+    db: {
+        execute(query: ReturnType<typeof sql>): Promise<ArrayLike<unknown>>;
+    };
+    /** Creates and migrates the schema. Run on `start()`; a failure exits. */
+    initDatabase(): Promise<void>;
+    port: number;
+    bodyLimitBytes?: number;
+    logger?: Logger;
+}
+export interface ApiServer {
+    app: Hono;
+    /** Initialize the database, logging, and exit the process on failure. */
+    start(): Promise<void>;
+    /** Pass as the module's default export for `bun run`. */
+    bunServer: {
+        port: number;
+        idleTimeout: number;
+        fetch(request: Request, server: {
+            timeout: (req: Request, seconds: number) => void;
+        }): Response | Promise<Response>;
+    };
+}
+export declare function createApiServer(config: ApiServerConfig): ApiServer;
+//# sourceMappingURL=api-server.d.ts.map

package/dist/server/api-server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-server.d.ts","sourceRoot":"","sources":["../../src/server/api-server.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAI5B,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAKlC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAE9C,gEAAgE;AAChE,eAAO,MAAM,wBAAwB,QAAmB,CAAC;AAEzD,MAAM,WAAW,eAAe;IAC9B,sEAAsE;IACtE,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,yCAAyC;IACzC,MAAM,EAAE,IAAI,CAAC;IACb,kEAAkE;IAClE,EAAE,EAAE;QAAE,OAAO,CAAC,KAAK,EAAE,UAAU,CAAC,OAAO,GAAG,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAA;KAAE,CAAC;IAC5E,0EAA0E;IAC1E,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,SAAS;IACxB,GAAG,EAAE,IAAI,CAAC;IACV,yEAAyE;IACzE,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,yDAAyD;IACzD,SAAS,EAAE;QACT,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,KAAK,CACH,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE;YAAE,OAAO,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,CAAA;SAAE,GAC3D,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;KACjC,CAAC;CACH;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,eAAe,GAAG,SAAS,CAuFlE"}

package/dist/server/api-server.js

@@ -0,0 +1,85 @@
+/**
+ * @fileoverview The API process: Hono app, health checks, and Bun server options
+ * @description What every shell's `index.ts` used to build by hand: logging,
+ * CORS, a body limit sized for base64 media, liveness and readiness routes,
+ * the `/api/v1` mount, database initialization on boot, and a Bun `fetch`
+ * that lets a long provider call outlive the server's idle timer.
+ */
+import { Hono } from "hono";
+import { cors } from "hono/cors";
+import { logger as requestLogger } from "hono/logger";
+import { bodyLimit } from "hono/body-limit";
+import { sql } from "drizzle-orm";
+import { errorResponse, successResponse, } from "@sudobility/shapeshyft_engine/types";
+/** 50 MB: base64-encoded media inflates payloads by a third. */
+export const DEFAULT_BODY_LIMIT_BYTES = 50 * 1024 * 1024;
+export function createApiServer(config) {
+    const log = config.logger ?? console;
+    const maxSize = config.bodyLimitBytes ?? DEFAULT_BODY_LIMIT_BYTES;
+    const app = new Hono();
+    app.use("*", requestLogger());
+    app.use("*", cors());
+    app.use("*", bodyLimit({
+        maxSize,
+        onError: c => c.json(errorResponse(`Request body too large. Maximum size is ${Math.round(maxSize / (1024 * 1024))}MB.`), 413),
+    }));
+    app.get("/", c => c.json(successResponse({
+        name: config.name,
+        version: config.version ?? "1.0.0",
+        status: "healthy",
+    })));
+    // Liveness: the process answers. Public, no database.
+    app.get("/health", c => c.json(successResponse({ status: "healthy" })));
+    // Readiness: the database answers. Public; 503 until it does.
+    app.get("/health/ready", async (c) => {
+        try {
+            const result = await config.db.execute(sql `SELECT 1 as ok`);
+            if (result.length > 0) {
+                return c.json(successResponse({ status: "ready", database: "connected" }));
+            }
+            return c.json(errorResponse("Database check returned no rows"), 503);
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : "Unknown error";
+            log.error("Health check failed:", message);
+            return c.json(errorResponse(`Database not ready: ${message}`), 503);
+        }
+    });
+    app.route("/api/v1", config.routes);
+    return {
+        app,
+        async start() {
+            try {
+                await config.initDatabase();
+                log.log(`${config.name} running on http://localhost:${config.port}`);
+            }
+            catch (error) {
+                log.error("Failed to initialize database:", error);
+                process.exit(1);
+            }
+        },
+        bunServer: {
+            port: config.port,
+            /*
+              Long provider calls must not be cut off by the server's idle timer.
+      
+              Bun closes a connection after `idleTimeout` seconds of silence and caps
+              that value at 255 -- and a request here is silent for its whole life,
+              because the provider is generating and nothing is written back until it
+              finishes. A local model answering with a dense score takes longer than
+              that: measured against LM Studio, ordinary parts returned in 86-175s
+              while a drum kit, which writes three times the notes per bar, ran past
+              four minutes and the socket died under it.
+      
+              `server.timeout(req, 0)` lifts the limit for the request in hand rather
+              than for the process, so an ordinary request keeps the protection.
+            */
+            idleTimeout: 255,
+            fetch(request, server) {
+                server.timeout(request, 0);
+                return app.fetch(request, server);
+            },
+        },
+    };
+}
+//# sourceMappingURL=api-server.js.map

package/dist/server/api-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-server.js","sourceRoot":"","sources":["../../src/server/api-server.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,MAAM,IAAI,aAAa,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,EACL,aAAa,EACb,eAAe,GAChB,MAAM,qCAAqC,CAAC;AAG7C,gEAAgE;AAChE,MAAM,CAAC,MAAM,wBAAwB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAgCzD,MAAM,UAAU,eAAe,CAAC,MAAuB;IACrD,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,IAAI,OAAO,CAAC;IACrC,MAAM,OAAO,GAAG,MAAM,CAAC,cAAc,IAAI,wBAAwB,CAAC;IAClE,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IAEvB,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,aAAa,EAAE,CAAC,CAAC;IAC9B,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;IACrB,GAAG,CAAC,GAAG,CACL,GAAG,EACH,SAAS,CAAC;QACR,OAAO;QACP,OAAO,EAAE,CAAC,CAAC,EAAE,CACX,CAAC,CAAC,IAAI,CACJ,aAAa,CACX,2CAA2C,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,KAAK,CACpF,EACD,GAAG,CACJ;KACJ,CAAC,CACH,CAAC;IAEF,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CACf,CAAC,CAAC,IAAI,CACJ,eAAe,CAAC;QACd,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,OAAO;QAClC,MAAM,EAAE,SAAS;KAClB,CAAC,CACH,CACF,CAAC;IAEF,sDAAsD;IACtD,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC;IAExE,8DAA8D;IAC9D,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;QACjC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAA,gBAAgB,CAAC,CAAC;YAC5D,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtB,OAAO,CAAC,CAAC,IAAI,CACX,eAAe,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAC5D,CAAC;YACJ,CAAC;YACD,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,iCAAiC,CAAC,EAAE,GAAG,CAAC,CAAC;QACvE,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YACzE,GAAG,CAAC,KAAK,CAAC,sBAAsB,EAAE,OAAO,CAAC,CAAC;YAC3C,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,uBAAuB,OAAO,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;QACtE,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAEpC,OAAO;QACL,GAAG;QACH,KAAK,CAAC,KAAK;YACT,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,YAAY,EAAE,CAAC;gBAC5B,GAAG,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,IAAI,gCAAgC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YACvE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,GAAG,CAAC,KAAK,CAAC,gCAAgC,EAAE,KAAK,CAAC,CAAC;gBACnD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;QACD,SAAS,EAAE;YACT,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB;;;;;;;;;;;;;cAaE;YACF,WAAW,EAAE,GAAG;YAChB,KAAK,CAAC,OAAO,EAAE,MAAM;gBACnB,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;gBAC3B,OAAO,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACpC,CAAC;SACF;KACF,CAAC;AACJ,CAAC"}

package/dist/server/database.d.ts

@@ -0,0 +1,22 @@
+/**
+ * @fileoverview Lazy PostgreSQL connection
+ * @description Nothing connects at import time: the client is created on first
+ * use, so scripts and tests can import a shell's `db` without `DATABASE_URL`.
+ */
+import { type PostgresJsDatabase } from "drizzle-orm/postgres-js";
+import { type Sql } from "postgres";
+export interface LazyDatabase<TSchema extends Record<string, unknown>> {
+    /** A drizzle instance that connects on first property access. */
+    db: PostgresJsDatabase<TSchema>;
+    /** The underlying postgres.js client, created on first call. */
+    client(): Sql;
+    /** Close the client, if one was created. The next use reconnects. */
+    close(): Promise<void>;
+}
+/**
+ * @param connectionString - Called on first use, so a missing URL fails then,
+ *   not at import.
+ * @param schema - The drizzle schema object.
+ */
+export declare function createLazyDatabase<TSchema extends Record<string, unknown>>(connectionString: () => string, schema: TSchema): LazyDatabase<TSchema>;
+//# sourceMappingURL=database.d.ts.map

package/dist/server/database.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"database.d.ts","sourceRoot":"","sources":["../../src/server/database.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAW,KAAK,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC3E,OAAiB,EAAE,KAAK,GAAG,EAAE,MAAM,UAAU,CAAC;AAE9C,MAAM,WAAW,YAAY,CAAC,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IACnE,iEAAiE;IACjE,EAAE,EAAE,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAChC,gEAAgE;IAChE,MAAM,IAAI,GAAG,CAAC;IACd,qEAAqE;IACrE,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACxE,gBAAgB,EAAE,MAAM,MAAM,EAC9B,MAAM,EAAE,OAAO,GACd,YAAY,CAAC,OAAO,CAAC,CAwBvB"}

package/dist/server/database.js

@@ -0,0 +1,35 @@
+/**
+ * @fileoverview Lazy PostgreSQL connection
+ * @description Nothing connects at import time: the client is created on first
+ * use, so scripts and tests can import a shell's `db` without `DATABASE_URL`.
+ */
+import { drizzle } from "drizzle-orm/postgres-js";
+import postgres from "postgres";
+/**
+ * @param connectionString - Called on first use, so a missing URL fails then,
+ *   not at import.
+ * @param schema - The drizzle schema object.
+ */
+export function createLazyDatabase(connectionString, schema) {
+    let sql = null;
+    let instance = null;
+    const client = () => (sql ??= postgres(connectionString()));
+    const db = new Proxy({}, {
+        get(_, prop) {
+            instance ??= drizzle(client(), { schema });
+            return instance[prop];
+        },
+    });
+    return {
+        db,
+        client,
+        async close() {
+            if (sql) {
+                await sql.end();
+                sql = null;
+                instance = null;
+            }
+        },
+    };
+}
+//# sourceMappingURL=database.js.map

package/dist/server/database.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"database.js","sourceRoot":"","sources":["../../src/server/database.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,OAAO,EAA2B,MAAM,yBAAyB,CAAC;AAC3E,OAAO,QAAsB,MAAM,UAAU,CAAC;AAW9C;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAChC,gBAA8B,EAC9B,MAAe;IAEf,IAAI,GAAG,GAAe,IAAI,CAAC;IAC3B,IAAI,QAAQ,GAAuC,IAAI,CAAC;IAExD,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,CAAC,GAAG,KAAK,QAAQ,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC;IAE5D,MAAM,EAAE,GAAG,IAAI,KAAK,CAAC,EAAiC,EAAE;QACtD,GAAG,CAAC,CAAC,EAAE,IAAI;YACT,QAAQ,KAAK,OAAO,CAAC,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;YAC3C,OAAQ,QAAwD,CAAC,IAAI,CAAC,CAAC;QACzE,CAAC;KACF,CAAC,CAAC;IAEH,OAAO;QACL,EAAE;QACF,MAAM;QACN,KAAK,CAAC,KAAK;YACT,IAAI,GAAG,EAAE,CAAC;gBACR,MAAM,GAAG,CAAC,GAAG,EAAE,CAAC;gBAChB,GAAG,GAAG,IAAI,CAAC;gBACX,QAAQ,GAAG,IAAI,CAAC;YAClB,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/server/env.d.ts

@@ -0,0 +1,31 @@
+/**
+ * @fileoverview Environment reader with `.env.local` priority
+ * @description The API shells read their configuration through this and pass
+ * values into the service factories. The shell supplies the environment
+ * itself, so this package still never reads `process.env`. `.env.local` is
+ * parsed once per reader and wins over that environment, which wins over a
+ * default.
+ */
+export interface EnvReader {
+    /** The value, or `defaultValue` when unset or empty. */
+    get(key: string, defaultValue?: string): string | undefined;
+    /** The value; throws when unset or empty. */
+    getRequired(key: string): string;
+    /** The value as a number, or undefined when unset. */
+    getNumber(key: string): number | undefined;
+}
+/** Parse `KEY=value` lines, skipping blanks and comments, unquoting values. */
+export declare function parseEnvFile(content: string): Record<string, string>;
+/**
+ * Create an environment reader.
+ *
+ * @param options.processEnv - The environment to fall back on; the shell passes
+ *   `process.env`.
+ * @param options.envFile - Path of the override file. Default: `.env.local` in
+ *   the working directory. A missing file is not an error.
+ */
+export declare function createEnvReader(options: {
+    processEnv: Record<string, string | undefined>;
+    envFile?: string;
+}): EnvReader;
+//# sourceMappingURL=env.d.ts.map

package/dist/server/env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../src/server/env.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAKH,MAAM,WAAW,SAAS;IACxB,wDAAwD;IACxD,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;IAC5D,6CAA6C;IAC7C,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC;IACjC,sDAAsD;IACtD,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;CAC5C;AAED,+EAA+E;AAC/E,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAYpE;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE;IACvC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IAC/C,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,GAAG,SAAS,CAyCZ"}

package/dist/server/env.js

@@ -0,0 +1,73 @@
+/**
+ * @fileoverview Environment reader with `.env.local` priority
+ * @description The API shells read their configuration through this and pass
+ * values into the service factories. The shell supplies the environment
+ * itself, so this package still never reads `process.env`. `.env.local` is
+ * parsed once per reader and wins over that environment, which wins over a
+ * default.
+ */
+import { readFileSync } from "fs";
+import { join } from "path";
+/** Parse `KEY=value` lines, skipping blanks and comments, unquoting values. */
+export function parseEnvFile(content) {
+    const values = {};
+    for (const line of content.split("\n")) {
+        const trimmed = line.trim();
+        if (!trimmed || trimmed.startsWith("#"))
+            continue;
+        const equals = trimmed.indexOf("=");
+        if (equals === -1)
+            continue;
+        const key = trimmed.slice(0, equals).trim();
+        const value = trimmed.slice(equals + 1).trim();
+        values[key] = value.replace(/^["']|["']$/g, "");
+    }
+    return values;
+}
+/**
+ * Create an environment reader.
+ *
+ * @param options.processEnv - The environment to fall back on; the shell passes
+ *   `process.env`.
+ * @param options.envFile - Path of the override file. Default: `.env.local` in
+ *   the working directory. A missing file is not an error.
+ */
+export function createEnvReader(options) {
+    let fileValues = null;
+    const fromFile = () => {
+        if (fileValues === null) {
+            try {
+                fileValues = parseEnvFile(readFileSync(options.envFile ?? join(process.cwd(), ".env.local"), "utf8"));
+            }
+            catch {
+                fileValues = {};
+            }
+        }
+        return fileValues;
+    };
+    const processEnv = options.processEnv;
+    const get = (key, defaultValue) => {
+        const local = fromFile()[key];
+        if (local !== undefined && local !== "")
+            return local;
+        const inherited = processEnv[key];
+        if (inherited !== undefined && inherited !== "")
+            return inherited;
+        return defaultValue;
+    };
+    return {
+        get,
+        getRequired(key) {
+            const value = get(key);
+            if (value === undefined || value === "") {
+                throw new Error(`Required environment variable ${key} is not set`);
+            }
+            return value;
+        },
+        getNumber(key) {
+            const value = get(key);
+            return value ? Number(value) : undefined;
+        },
+    };
+}
+//# sourceMappingURL=env.js.map

package/dist/server/env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.js","sourceRoot":"","sources":["../../src/server/env.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAW5B,+EAA+E;AAC/E,MAAM,UAAU,YAAY,CAAC,OAAe;IAC1C,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAClD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,MAAM,KAAK,CAAC,CAAC;YAAE,SAAS;QAC5B,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC/C,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAAC,OAG/B;IACC,IAAI,UAAU,GAAkC,IAAI,CAAC;IACrD,MAAM,QAAQ,GAAG,GAAG,EAAE;QACpB,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;YACxB,IAAI,CAAC;gBACH,UAAU,GAAG,YAAY,CACvB,YAAY,CACV,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,YAAY,CAAC,EACpD,MAAM,CACP,CACF,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,UAAU,GAAG,EAAE,CAAC;YAClB,CAAC;QACH,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC,CAAC;IACF,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;IAEtC,MAAM,GAAG,GAAG,CAAC,GAAW,EAAE,YAAqB,EAAE,EAAE;QACjD,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE;YAAE,OAAO,KAAK,CAAC;QACtD,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,EAAE;YAAE,OAAO,SAAS,CAAC;QAClE,OAAO,YAAY,CAAC;IACtB,CAAC,CAAC;IAEF,OAAO;QACL,GAAG;QACH,WAAW,CAAC,GAAG;YACb,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;YACvB,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;gBACxC,MAAM,IAAI,KAAK,CAAC,iCAAiC,GAAG,aAAa,CAAC,CAAC;YACrE,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,SAAS,CAAC,GAAG;YACX,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;YACvB,OAAO,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC3C,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/server/firebase-auth.d.ts

@@ -0,0 +1,20 @@
+/**
+ * @fileoverview Firebase-backed AuthAdapter
+ * @description Initializes `@sudobility/auth_service` and wraps its verifier in
+ * a 5-minute cache. Disabled (for tests) it initializes nothing and rejects
+ * every token, so a suite that forgets to mock auth fails loudly.
+ */
+import type { AuthAdapter } from "../contracts.js";
+export interface FirebaseAuthConfig {
+    /** False under test: no Firebase initialization, and tokens are rejected. */
+    enabled: boolean;
+    projectId?: string;
+    clientEmail?: string;
+    privateKey?: string;
+    /** Comma-separated site admin emails. */
+    siteAdminEmails?: string;
+    /** Verified-token cache lifetime. Default: 5 minutes. */
+    cacheTtlMs?: number;
+}
+export declare function createFirebaseAuth(config: FirebaseAuthConfig): AuthAdapter;
+//# sourceMappingURL=firebase-auth.d.ts.map

package/dist/server/firebase-auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"firebase-auth.d.ts","sourceRoot":"","sources":["../../src/server/firebase-auth.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AASH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAEnD,MAAM,WAAW,kBAAkB;IACjC,6EAA6E;IAC7E,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,yCAAyC;IACzC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,yDAAyD;IACzD,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,kBAAkB,GAAG,WAAW,CA8B1E"}

package/dist/server/firebase-auth.js

@@ -0,0 +1,35 @@
+/**
+ * @fileoverview Firebase-backed AuthAdapter
+ * @description Initializes `@sudobility/auth_service` and wraps its verifier in
+ * a 5-minute cache. Disabled (for tests) it initializes nothing and rejects
+ * every token, so a suite that forgets to mock auth fails loudly.
+ */
+import { createCachedVerifier, getUserInfo, initializeAuth, isAnonymousUser, isSiteAdmin, } from "@sudobility/auth_service";
+export function createFirebaseAuth(config) {
+    if (config.enabled) {
+        if (!config.projectId || !config.clientEmail || !config.privateKey) {
+            throw new Error("Firebase auth needs projectId, clientEmail and privateKey");
+        }
+        initializeAuth({
+            firebase: {
+                projectId: config.projectId,
+                clientEmail: config.clientEmail,
+                privateKey: config.privateKey,
+            },
+            siteAdminEmails: config.siteAdminEmails,
+        });
+    }
+    const verifier = createCachedVerifier(config.cacheTtlMs ?? 300_000);
+    return {
+        async verifyIdToken(token) {
+            if (!config.enabled) {
+                throw new Error("Firebase verification not available in test mode");
+            }
+            return verifier.verify(token);
+        },
+        isSiteAdmin,
+        isAnonymousUser,
+        getUserInfo,
+    };
+}
+//# sourceMappingURL=firebase-auth.js.map

package/dist/server/firebase-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"firebase-auth.js","sourceRoot":"","sources":["../../src/server/firebase-auth.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EACL,oBAAoB,EACpB,WAAW,EACX,cAAc,EACd,eAAe,EACf,WAAW,GACZ,MAAM,0BAA0B,CAAC;AAelC,MAAM,UAAU,kBAAkB,CAAC,MAA0B;IAC3D,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;YACnE,MAAM,IAAI,KAAK,CACb,2DAA2D,CAC5D,CAAC;QACJ,CAAC;QACD,cAAc,CAAC;YACb,QAAQ,EAAE;gBACR,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,UAAU,EAAE,MAAM,CAAC,UAAU;aAC9B;YACD,eAAe,EAAE,MAAM,CAAC,eAAe;SACxC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,QAAQ,GAAG,oBAAoB,CAAC,MAAM,CAAC,UAAU,IAAI,OAAO,CAAC,CAAC;IAEpE,OAAO;QACL,KAAK,CAAC,aAAa,CAAC,KAAK;YACvB,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;YACtE,CAAC;YACD,OAAO,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAChC,CAAC;QACD,WAAW;QACX,eAAe;QACf,WAAW;KACZ,CAAC;AACJ,CAAC"}

package/dist/server/invitation-email.d.ts

@@ -0,0 +1,32 @@
+/**
+ * @fileoverview Invitation email sent through Resend
+ */
+import type { EmailSender, Logger } from "../contracts.js";
+export interface InvitationEmailConfig {
+    /** The product named in the email, e.g. "ShapeShyft". */
+    productName: string;
+    /** Without one, sending is skipped with a warning. */
+    resendApiKey?: string;
+    senderEmail?: string;
+    /** Default: `productName`. */
+    senderName?: string;
+    /** The web app's origin, for the dashboard link. */
+    appUrl?: string;
+    logger?: Logger;
+}
+/**
+ * Escape text for HTML. Entity names are chosen by users and land in an email
+ * sent to someone else, so they must not be able to inject markup or links.
+ */
+export declare function escapeHtml(text: string): string;
+/** Subject and HTML body of an invitation, exported for tests. */
+export declare function renderInvitationEmail(params: {
+    productName: string;
+    entityName: string;
+    appUrl: string;
+}): {
+    subject: string;
+    html: string;
+};
+export declare function createInvitationEmailSender(config: InvitationEmailConfig): EmailSender;
+//# sourceMappingURL=invitation-email.d.ts.map

package/dist/server/invitation-email.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"invitation-email.d.ts","sourceRoot":"","sources":["../../src/server/invitation-email.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAE3D,MAAM,WAAW,qBAAqB;IACpC,yDAAyD;IACzD,WAAW,EAAE,MAAM,CAAC;IACpB,sDAAsD;IACtD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,8BAA8B;IAC9B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,oDAAoD;IACpD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAUD;;;GAGG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE/C;AAED,kEAAkE;AAClE,wBAAgB,qBAAqB,CAAC,MAAM,EAAE;IAC5C,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;CAChB,GAAG;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAmCpC;AAED,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,qBAAqB,GAC5B,WAAW,CA6Bb"}

package/dist/server/invitation-email.js

@@ -0,0 +1,80 @@
+/**
+ * @fileoverview Invitation email sent through Resend
+ */
+import { Resend } from "resend";
+const HTML_ESCAPES = {
+    "&": "&",
+    "<": "&lt;",
+    ">": "&gt;",
+    '"': "&quot;",
+    "'": "&#39;",
+};
+/**
+ * Escape text for HTML. Entity names are chosen by users and land in an email
+ * sent to someone else, so they must not be able to inject markup or links.
+ */
+export function escapeHtml(text) {
+    return text.replace(/[&<>"']/g, ch => HTML_ESCAPES[ch]);
+}
+/** Subject and HTML body of an invitation, exported for tests. */
+export function renderInvitationEmail(params) {
+    const product = escapeHtml(params.productName);
+    const entity = escapeHtml(params.entityName);
+    const appUrl = escapeHtml(params.appUrl);
+    const dashboardUrl = `${appUrl}/en/dashboard?redirect=/invitations`;
+    return {
+        // Plain text, since mail clients do not render markup in subjects; line
+        // breaks are removed so a name cannot spill into other headers.
+        subject: `You've been invited to join ${params.entityName} on ${params.productName}`.replace(/[\r\n]+/g, " "),
+        html: `
+      <div style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif; max-width: 560px; margin: 0 auto; padding: 40px 20px;">
+        <h2 style="color: #111; margin-bottom: 16px;">You're invited!</h2>
+        <p style="color: #333; font-size: 16px; line-height: 1.5;">
+          You've been invited to join <strong>${entity}</strong> on ${product}.
+        </p>
+        <p style="color: #333; font-size: 16px; line-height: 1.5;">
+          Sign in to your ${product} account to accept the invitation:
+        </p>
+        <a href="${dashboardUrl}"
+           style="display: inline-block; background: #111; color: #fff; padding: 12px 24px; border-radius: 6px; text-decoration: none; font-size: 16px; margin: 16px 0;">
+          Go to Dashboard
+        </a>
+        <p style="color: #666; font-size: 14px; line-height: 1.5; margin-top: 24px;">
+          This invitation will expire in 14 days. If you don't have an account yet, sign up at
+          <a href="${appUrl}" style="color: #111;">${appUrl}</a> using this email address
+          and the invitation will be automatically accepted.
+        </p>
+      </div>
+    `,
+    };
+}
+export function createInvitationEmailSender(config) {
+    const logger = config.logger ?? console;
+    const resend = config.resendApiKey ? new Resend(config.resendApiKey) : null;
+    if (!resend) {
+        logger.warn("RESEND_API_KEY not set — invitation emails will not be sent");
+    }
+    return {
+        async sendInvitationEmail({ recipientEmail, entityName }) {
+            if (!resend) {
+                logger.warn("Skipping invitation email — Resend not configured");
+                return;
+            }
+            const { subject, html } = renderInvitationEmail({
+                productName: config.productName,
+                entityName,
+                appUrl: config.appUrl ?? "http://localhost:5173",
+            });
+            const { error } = await resend.emails.send({
+                from: `${config.senderName ?? config.productName} <${config.senderEmail ?? "onboarding@resend.dev"}>`,
+                to: recipientEmail,
+                subject,
+                html,
+            });
+            if (error) {
+                throw new Error(`Resend error: ${error.message}`);
+            }
+        },
+    };
+}
+//# sourceMappingURL=invitation-email.js.map

package/dist/server/invitation-email.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invitation-email.js","sourceRoot":"","sources":["../../src/server/invitation-email.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAgBhC,MAAM,YAAY,GAA2B;IAC3C,GAAG,EAAE,OAAO;IACZ,GAAG,EAAE,MAAM;IACX,GAAG,EAAE,MAAM;IACX,GAAG,EAAE,QAAQ;IACb,GAAG,EAAE,OAAO;CACb,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,EAAE,CAAC,YAAY,CAAC,EAAE,CAAE,CAAC,CAAC;AAC3D,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,qBAAqB,CAAC,MAIrC;IACC,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACzC,MAAM,YAAY,GAAG,GAAG,MAAM,qCAAqC,CAAC;IAEpE,OAAO;QACL,wEAAwE;QACxE,gEAAgE;QAChE,OAAO,EACL,+BAA+B,MAAM,CAAC,UAAU,OAAO,MAAM,CAAC,WAAW,EAAE,CAAC,OAAO,CACjF,UAAU,EACV,GAAG,CACJ;QACH,IAAI,EAAE;;;;gDAIsC,MAAM,gBAAgB,OAAO;;;4BAGjD,OAAO;;mBAEhB,YAAY;;;;;;qBAMV,MAAM,0BAA0B,MAAM;;;;KAItD;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,MAA6B;IAE7B,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,OAAO,CAAC;IACxC,MAAM,MAAM,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5E,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,CAAC,IAAI,CAAC,6DAA6D,CAAC,CAAC;IAC7E,CAAC;IAED,OAAO;QACL,KAAK,CAAC,mBAAmB,CAAC,EAAE,cAAc,EAAE,UAAU,EAAE;YACtD,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;gBACjE,OAAO;YACT,CAAC;YACD,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,qBAAqB,CAAC;gBAC9C,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,UAAU;gBACV,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,uBAAuB;aACjD,CAAC,CAAC;YACH,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;gBACzC,IAAI,EAAE,GAAG,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW,IAAI,uBAAuB,GAAG;gBACrG,EAAE,EAAE,cAAc;gBAClB,OAAO;gBACP,IAAI;aACL,CAAC,CAAC;YACH,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,IAAI,KAAK,CAAC,iBAAiB,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACpD,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sudobility/shapeshyft_service",
-  "version": "1.0.4",
+  "version": "1.0.6",
   "description": "Shared tables, routes and middleware for ShapeShyft-style structured-output APIs",
   "type": "module",
   "main": "./dist/index.js",
@@ -32,7 +32,8 @@
   "license": "BUSL-1.1",
   "dependencies": {
     "@hono/zod-validator": "^0.7.5",
-    "@sudobility/shapeshyft_engine": "^1.0.3",
+    "@sudobility/shapeshyft_engine": "^1.0.4",
+    "resend": "^6.9.2",
     "zod": "^3.24.0"
   },
   "peerDependencies": {