@superinterface/server 1.0.0

package/prisma/migrations/20251007163926_add_truncation_type/migration.sql

@@ -0,0 +1,6 @@
+-- CreateEnum
+CREATE TYPE "TruncationType" AS ENUM ('AUTO', 'LAST_MESSAGES', 'DISABLED');
+
+-- AlterTable
+ALTER TABLE "Assistant" ADD COLUMN     "truncationLastMessagesCount" INTEGER,
+ADD COLUMN     "truncationType" "TruncationType" NOT NULL DEFAULT 'AUTO';

package/prisma/migrations/20251007190703_add_organizations/migration.sql

@@ -0,0 +1,97 @@
+-- CreateEnum
+CREATE TYPE "OrganizationUserRoleType" AS ENUM ('ADMIN');
+
+-- AlterTable
+ALTER TABLE "Workspace" ADD COLUMN     "organizationId" UUID;
+
+-- CreateTable
+CREATE TABLE "Organization" (
+    "id" UUID NOT NULL DEFAULT gen_random_uuid(),
+    "name" TEXT NOT NULL DEFAULT '',
+    "createdAt" TIMESTAMPTZ(6) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updatedAt" TIMESTAMPTZ(6) NOT NULL,
+
+    CONSTRAINT "Organization_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "OrganizationApiKey" (
+    "id" UUID NOT NULL DEFAULT gen_random_uuid(),
+    "name" TEXT NOT NULL DEFAULT '',
+    "value" UUID NOT NULL DEFAULT gen_random_uuid(),
+    "organizationId" UUID NOT NULL,
+    "createdAt" TIMESTAMPTZ(6) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updatedAt" TIMESTAMPTZ(6) NOT NULL,
+
+    CONSTRAINT "OrganizationApiKey_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "OrganizationInvitation" (
+    "id" UUID NOT NULL DEFAULT gen_random_uuid(),
+    "email" TEXT NOT NULL,
+    "roleType" "OrganizationUserRoleType" NOT NULL DEFAULT 'ADMIN',
+    "createdByUserId" TEXT NOT NULL,
+    "organizationId" UUID NOT NULL,
+    "createdAt" TIMESTAMPTZ(6) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updatedAt" TIMESTAMPTZ(6) NOT NULL,
+
+    CONSTRAINT "OrganizationInvitation_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "OrganizationUserRole" (
+    "id" UUID NOT NULL DEFAULT gen_random_uuid(),
+    "type" "OrganizationUserRoleType" NOT NULL DEFAULT 'ADMIN',
+    "userId" TEXT NOT NULL,
+    "organizationId" UUID NOT NULL,
+    "createdAt" TIMESTAMPTZ(6) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updatedAt" TIMESTAMPTZ(6) NOT NULL,
+
+    CONSTRAINT "OrganizationUserRole_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateIndex
+CREATE UNIQUE INDEX "OrganizationApiKey_value_key" ON "OrganizationApiKey"("value");
+
+-- CreateIndex
+CREATE INDEX "OrganizationApiKey_value_idx" ON "OrganizationApiKey"("value");
+
+-- CreateIndex
+CREATE INDEX "OrganizationApiKey_organizationId_idx" ON "OrganizationApiKey"("organizationId");
+
+-- CreateIndex
+CREATE INDEX "OrganizationInvitation_createdByUserId_idx" ON "OrganizationInvitation"("createdByUserId");
+
+-- CreateIndex
+CREATE INDEX "OrganizationInvitation_organizationId_idx" ON "OrganizationInvitation"("organizationId");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "OrganizationInvitation_organizationId_email_key" ON "OrganizationInvitation"("organizationId", "email");
+
+-- CreateIndex
+CREATE INDEX "OrganizationUserRole_userId_idx" ON "OrganizationUserRole"("userId");
+
+-- CreateIndex
+CREATE INDEX "OrganizationUserRole_organizationId_idx" ON "OrganizationUserRole"("organizationId");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "OrganizationUserRole_organizationId_userId_key" ON "OrganizationUserRole"("organizationId", "userId");
+
+-- AddForeignKey
+ALTER TABLE "OrganizationApiKey" ADD CONSTRAINT "OrganizationApiKey_organizationId_fkey" FOREIGN KEY ("organizationId") REFERENCES "Organization"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "OrganizationInvitation" ADD CONSTRAINT "OrganizationInvitation_createdByUserId_fkey" FOREIGN KEY ("createdByUserId") REFERENCES "User"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "OrganizationInvitation" ADD CONSTRAINT "OrganizationInvitation_organizationId_fkey" FOREIGN KEY ("organizationId") REFERENCES "Organization"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "OrganizationUserRole" ADD CONSTRAINT "OrganizationUserRole_userId_fkey" FOREIGN KEY ("userId") REFERENCES "User"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "OrganizationUserRole" ADD CONSTRAINT "OrganizationUserRole_organizationId_fkey" FOREIGN KEY ("organizationId") REFERENCES "Organization"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "Workspace" ADD CONSTRAINT "Workspace_organizationId_fkey" FOREIGN KEY ("organizationId") REFERENCES "Organization"("id") ON DELETE SET NULL ON UPDATE CASCADE;

package/prisma/migrations/migration_lock.toml

@@ -0,0 +1,3 @@
+# Please do not edit this file manually
+# It should be added in your version-control system (e.g., Git)
+provider = "postgresql"

package/prisma/schema.prisma

@@ -0,0 +1,13 @@
+generator client {
+  provider        = "prisma-client-js"
+}
+
+generator json {
+  provider = "prisma-json-types-generator"
+}
+
+datasource db {
+  provider = "postgresql"
+  url      = env("DATABASE_URL")
+  directUrl = env("DIRECT_URL")
+}

package/prisma.config.ts

@@ -0,0 +1,6 @@
+import path from 'node:path'
+import type { PrismaConfig } from 'prisma'
+
+export default {
+  schema: path.join('prisma'),
+} satisfies PrismaConfig

package/scripts/cli.ts

@@ -0,0 +1,84 @@
+#!/usr/bin/env node
+import process from 'node:process'
+import type { PrismaClient } from '@prisma/client'
+import { Command } from 'commander'
+import { createOrganization } from './commands/organizations/create'
+import { createOrganizationApiKey } from './commands/organizations/api-keys/create'
+import { CliError } from './utils/errors'
+import { ensureEnv, ensureDatabaseUrl } from './utils/env'
+
+const program = new Command()
+  .name('superinterface-cli')
+  .description('Administrative helpers for @superinterface/server')
+  .showHelpAfterError('(add --help for additional information)')
+
+type ActionOptions<Options> = Options & { prisma: PrismaClient }
+
+const withAction = <Options extends Record<string, unknown>>(
+  action: (options: ActionOptions<Options>) => Promise<void>,
+) => {
+  return async (options: Options) => {
+    let prisma: PrismaClient | undefined
+
+    try {
+      await ensureEnv()
+      ensureDatabaseUrl()
+
+      const prismaModule = await import('../src/lib/prisma')
+      prisma = prismaModule.prisma
+
+      const actionOptions = { ...options, prisma } as ActionOptions<Options>
+
+      await action(actionOptions)
+    } catch (error) {
+      if (error instanceof CliError) {
+        console.error(error.message)
+        if (error.cause) {
+          console.error(error.cause)
+        }
+      } else {
+        console.error(error)
+      }
+      process.exitCode = 1
+    } finally {
+      await prisma?.$disconnect()
+    }
+  }
+}
+
+const organizations = program
+  .command('organizations')
+  .description('Manage organizations')
+
+organizations
+  .command('create')
+  .description('Create a new organization')
+  .option('-n, --name <name>', 'Organization display name')
+  .action(withAction(createOrganization))
+
+const organizationApiKeys = organizations
+  .command('api-keys')
+  .description('Manage organization API keys')
+
+organizationApiKeys
+  .command('create')
+  .description('Create a new organization API key')
+  .option('-o, --organization-id <organizationId>', 'Organization UUID')
+  .option('-n, --name <name>', 'API key display name')
+  .action(withAction(createOrganizationApiKey))
+
+if (process.argv.length <= 2) {
+  program.outputHelp()
+}
+
+program.parseAsync(process.argv).catch((error) => {
+  if (error instanceof CliError) {
+    console.error(error.message)
+    if (error.cause) {
+      console.error(error.cause)
+    }
+  } else {
+    console.error(error)
+  }
+  process.exitCode = 1
+})

package/scripts/commands/organizations/api-keys/create.ts

@@ -0,0 +1,159 @@
+import type { PrismaClient } from '@prisma/client'
+import {
+  intro,
+  outro,
+  text,
+  note,
+  spinner as createSpinner,
+  cancel,
+  isCancel,
+  select,
+} from '@clack/prompts'
+import { z } from 'zod'
+import { CliError } from '../../../utils/errors'
+
+export type CreateOrganizationApiKeyOptions = {
+  prisma: PrismaClient
+  organizationId?: string
+  name?: string
+}
+
+const organizationIdSchema = z
+  .string()
+  .trim()
+  .uuid('organization-id must be a valid UUID')
+const keyNameSchema = z.string().trim().min(1, 'Name is required')
+
+export const createOrganizationApiKey = async ({
+  prisma,
+  organizationId,
+  name,
+}: CreateOrganizationApiKeyOptions) => {
+  intro('Create organization API key')
+
+  let targetOrganizationId = organizationId?.trim()
+  let organizationName: string | undefined
+
+  if (targetOrganizationId) {
+    const parsedOrgId = organizationIdSchema.safeParse(targetOrganizationId)
+
+    if (!parsedOrgId.success) {
+      cancel(parsedOrgId.error.issues[0]?.message ?? 'Invalid organization id')
+      return
+    }
+
+    const organization = await prisma.organization.findUnique({
+      where: { id: parsedOrgId.data },
+      select: { id: true, name: true },
+    })
+
+    if (!organization) {
+      cancel('No organization found for the provided id')
+      return
+    }
+
+    targetOrganizationId = organization.id
+    organizationName = organization.name
+  } else {
+    const organizations = await prisma.organization.findMany({
+      orderBy: { createdAt: 'desc' },
+      select: { id: true, name: true },
+      take: 25,
+    })
+
+    if (organizations.length === 0) {
+      cancel('No organizations exist yet. Create one first.')
+      return
+    }
+
+    const selection = await select({
+      message: 'Select organization',
+      options: organizations.map((org) => ({
+        value: org.id,
+        label: `${org.name || '(unnamed)'} · ${org.id}`,
+      })),
+    })
+
+    if (isCancel(selection)) {
+      cancel('No API key created')
+      return
+    }
+
+    const selected = organizations.find((org) => org.id === selection)
+
+    if (!selected) {
+      cancel('No API key created')
+      return
+    }
+
+    targetOrganizationId = selected.id
+    organizationName = selected.name
+  }
+
+  if (!targetOrganizationId) {
+    cancel('No API key created')
+    return
+  }
+
+  let keyName = name?.trim()
+
+  if (!keyName) {
+    const input = await text({
+      message: 'API key name',
+      placeholder: 'Production key',
+      validate: (value) => {
+        const parsed = keyNameSchema.safeParse(value)
+        return parsed.success
+          ? undefined
+          : (parsed.error.issues[0]?.message ?? 'Invalid name')
+      },
+    })
+
+    if (!input || isCancel(input)) {
+      cancel('No API key created')
+      return
+    }
+
+    keyName = input
+  }
+
+  const parsedName = keyNameSchema.safeParse(keyName)
+
+  if (!parsedName.success) {
+    cancel(parsedName.error.issues[0]?.message ?? 'Name is required')
+    return
+  }
+
+  const spinner = createSpinner()
+  spinner.start('Creating organization API key')
+
+  try {
+    const apiKey = await prisma.organizationApiKey.create({
+      data: {
+        organizationId: targetOrganizationId,
+        name: parsedName.data,
+      },
+    })
+
+    spinner.stop('Organization API key created')
+
+    note(
+      [
+        `id: ${apiKey.id}`,
+        `name: ${apiKey.name}`,
+        `organizationId: ${apiKey.organizationId}`,
+        `organizationName: ${organizationName ?? '(unnamed)'}`,
+        `value: ${apiKey.value}`,
+        `createdAt: ${apiKey.createdAt.toISOString()}`,
+      ].join('\n'),
+      'Organization API Key',
+    )
+
+    outro('Done')
+  } catch (error) {
+    spinner.stop('Creation failed')
+    throw new CliError('Failed to create organization API key.', {
+      cause: error,
+    })
+  }
+}

package/scripts/commands/organizations/create.ts

@@ -0,0 +1,82 @@
+import type { PrismaClient } from '@prisma/client'
+import {
+  intro,
+  outro,
+  text,
+  note,
+  spinner as createSpinner,
+  cancel,
+  isCancel,
+} from '@clack/prompts'
+import { z } from 'zod'
+import { CliError } from '../../utils/errors'
+
+export type CreateOrganizationOptions = {
+  prisma: PrismaClient
+  name?: string
+}
+
+const nameSchema = z.string().trim().min(1, 'Name is required')
+
+export const createOrganization = async ({
+  name,
+  prisma,
+}: CreateOrganizationOptions) => {
+  intro('Create organization')
+
+  let organizationName = name?.trim()
+
+  if (!organizationName) {
+    const input = await text({
+      message: 'Organization name',
+      placeholder: 'Acme Inc',
+      validate: (value) => {
+        const parsed = nameSchema.safeParse(value)
+        return parsed.success
+          ? undefined
+          : (parsed.error.issues[0]?.message ?? 'Invalid name')
+      },
+    })
+
+    if (!input || isCancel(input)) {
+      cancel('No organization created')
+      return
+    }
+
+    organizationName = input
+  }
+
+  const parsedName = nameSchema.safeParse(organizationName)
+
+  if (!parsedName.success) {
+    cancel(parsedName.error.issues[0]?.message ?? 'Name is required')
+    return
+  }
+
+  const spinner = createSpinner()
+  spinner.start('Creating organization')
+
+  try {
+    const organization = await prisma.organization.create({
+      data: {
+        name: parsedName.data,
+      },
+    })
+
+    spinner.stop('Organization created')
+
+    note(
+      [
+        `id: ${organization.id}`,
+        `name: ${organization.name}`,
+        `createdAt: ${organization.createdAt.toISOString()}`,
+      ].join('\n'),
+      'Organization',
+    )
+
+    outro('Done')
+  } catch (error) {
+    spinner.stop('Creation failed')
+    throw new CliError('Failed to create organization.', { cause: error })
+  }
+}

package/scripts/utils/env.ts

@@ -0,0 +1,31 @@
+import process from 'node:process'
+
+type ProcessWithLoadEnvFile = NodeJS.Process & {
+  loadEnvFile?: () => void
+}
+
+let envLoaded = false
+
+export const ensureEnv = async () => {
+  if (envLoaded) return
+
+  const proc = process as ProcessWithLoadEnvFile
+
+  if (typeof proc.loadEnvFile === 'function') {
+    proc.loadEnvFile()
+    envLoaded = true
+    return
+  }
+
+  const dotenv = await import('dotenv')
+  dotenv.config({ path: '.env' })
+  envLoaded = true
+}
+
+export const ensureDatabaseUrl = () => {
+  if (!process.env.DATABASE_URL) {
+    throw new Error(
+      'DATABASE_URL environment variable is required to run this command.',
+    )
+  }
+}

package/scripts/utils/errors.ts

@@ -0,0 +1,6 @@
+export class CliError extends Error {
+  constructor(message: string, options?: { cause?: unknown }) {
+    super(message, options)
+    this.name = 'CliError'
+  }
+}

package/src/app/api/api-keys/[apiKeyId]/route.ts

@@ -0,0 +1,178 @@
+import { type NextRequest, NextResponse } from 'next/server'
+import { ApiKeyType } from '@prisma/client'
+import { headers } from 'next/headers'
+import { cacheHeaders } from '@/lib/cache/cacheHeaders'
+import { prisma } from '@/lib/prisma'
+import { serializeApiKey } from '@/lib/apiKeys/serializeApiKey'
+import { z } from 'zod'
+import { getApiKey } from '@/lib/apiKeys/getApiKey'
+import { validate } from 'uuid'
+
+export const GET = async (
+  request: NextRequest,
+  props: {
+    params: Promise<{ apiKeyId: string }>
+  },
+) => {
+  const params = await props.params
+  const { apiKeyId } = params
+
+  const headersList = await headers()
+  const authorization = headersList.get('authorization')
+  if (!authorization) {
+    return NextResponse.json(
+      { error: 'No authorization header found' },
+      { status: 400 },
+    )
+  }
+
+  const privateApiKey = await getApiKey({
+    type: ApiKeyType.PRIVATE,
+    authorization,
+  })
+
+  if (!privateApiKey) {
+    return NextResponse.json({ error: 'Invalid api key' }, { status: 400 })
+  }
+
+  if (!validate(apiKeyId)) {
+    return NextResponse.json({ error: 'Invalid api key id' }, { status: 400 })
+  }
+
+  const apiKey = await prisma.apiKey.findFirst({
+    where: {
+      id: apiKeyId,
+      type: ApiKeyType.PUBLIC,
+      workspaceId: privateApiKey.workspaceId,
+    },
+  })
+
+  if (!apiKey) {
+    return NextResponse.json({ error: 'No api key found' }, { status: 400 })
+  }
+
+  return NextResponse.json(
+    { apiKey: serializeApiKey({ apiKey }) },
+    { headers: cacheHeaders },
+  )
+}
+
+export const PATCH = async (
+  request: NextRequest,
+  props: { params: Promise<{ apiKeyId: string }> },
+) => {
+  const params = await props.params
+  const { apiKeyId } = params
+
+  const headersList = await headers()
+  const authorization = headersList.get('authorization')
+  if (!authorization) {
+    return NextResponse.json(
+      { error: 'No authorization header found' },
+      { status: 400 },
+    )
+  }
+
+  const privateApiKey = await getApiKey({
+    authorization,
+    type: ApiKeyType.PRIVATE,
+  })
+
+  if (!privateApiKey) {
+    return NextResponse.json({ error: 'Invalid api key' }, { status: 400 })
+  }
+
+  if (!validate(apiKeyId)) {
+    return NextResponse.json({ error: 'Invalid api key id' }, { status: 400 })
+  }
+
+  const body = await request.json().catch(() => null)
+  const schema = z.object({ name: z.string().min(1) })
+  const parsed = schema.safeParse(body)
+
+  if (!parsed.success) {
+    return NextResponse.json({ error: 'No name found' }, { status: 400 })
+  }
+
+  const { name } = parsed.data
+
+  const existingApiKey = await prisma.apiKey.findFirst({
+    where: {
+      id: apiKeyId,
+      type: ApiKeyType.PUBLIC,
+      workspaceId: privateApiKey.workspaceId,
+    },
+  })
+
+  if (!existingApiKey) {
+    return NextResponse.json({ error: 'No api key found' }, { status: 400 })
+  }
+
+  const apiKey = await prisma.apiKey.update({
+    where: { id: apiKeyId },
+    data: { name },
+  })
+
+  return NextResponse.json(
+    { apiKey: serializeApiKey({ apiKey }) },
+    { headers: cacheHeaders },
+  )
+}
+
+export const DELETE = async (
+  request: NextRequest,
+  props: { params: Promise<{ apiKeyId: string }> },
+) => {
+  const params = await props.params
+  const { apiKeyId } = params
+
+  const headersList = await headers()
+  const authorization = headersList.get('authorization')
+  if (!authorization) {
+    return NextResponse.json(
+      { error: 'No authorization header found' },
+      { status: 400 },
+    )
+  }
+
+  const privateApiKey = await getApiKey({
+    type: ApiKeyType.PRIVATE,
+    authorization,
+  })
+
+  if (!privateApiKey) {
+    return NextResponse.json({ error: 'Invalid api key' }, { status: 400 })
+  }
+  if (!validate(apiKeyId)) {
+    return NextResponse.json({ error: 'Invalid api key id' }, { status: 400 })
+  }
+
+  const apiKey = await prisma.apiKey.findFirst({
+    where: {
+      id: apiKeyId,
+      type: ApiKeyType.PUBLIC,
+      workspaceId: privateApiKey.workspaceId,
+    },
+  })
+
+  if (!apiKey) {
+    return NextResponse.json({ error: 'No api key found' }, { status: 400 })
+  }
+
+  const deletedApiKey = await prisma.apiKey.delete({
+    where: { id: apiKey.id },
+  })
+
+  return NextResponse.json(
+    { apiKey: serializeApiKey({ apiKey: deletedApiKey }) },
+    { headers: cacheHeaders },
+  )
+}
+
+export const OPTIONS = () =>
+  NextResponse.json(
+    {},
+    {
+      headers: cacheHeaders,
+    },
+  )