@trylight/app 0.1.9 → 0.2.0

package/dist/server/index.d.ts

@@ -1,14 +1,15 @@
 import { type PostgresJsDatabase } from "drizzle-orm/postgres-js";
-import { type Contracts } from "@shubh90/app-runtime/invoke/server";
+import { type Contracts } from "../invoke/server.js";
 export type { SessionState, SessionUser, SignIn } from "./session.js";
-export { cookieAttributes, safeNext, SESSION_COOKIE } from "@shubh90/app-runtime/auth/core";
-export { defineContracts, InvocationError, type Contracts } from "@shubh90/app-runtime/invoke/server";
-export { createHealthHandler, createSentryTunnelHandler } from "@shubh90/app-runtime/server";
+export { cookieAttributes, safeNext, SESSION_COOKIE } from "../auth/core.js";
+export { defineContracts, InvocationError, type Contracts } from "../invoke/server.js";
+export { createHealthHandler } from "./health.js";
+export { createSentryTunnelHandler } from "./sentry-tunnel.js";
 export declare function createLightServer<S extends Record<string, unknown>, C extends Contracts>(options: {
     schema: S;
     contracts: C;
 }): {
-    auth: import("@shubh90/app-runtime/auth/core").MiiAuthCore;
+    auth: import("../auth/core.js").MiiAuthCore;
     session: (request: Request) => Promise<import("./session.js").SessionState>;
     /** Whether sign-in is configured (a bare local dev server has none). */
     configured: () => boolean;
@@ -21,7 +22,7 @@ export declare function createLightServer<S extends Record<string, unknown>, C e
     /** `/api/light/image`: a row's photo or logo, from the app's own copy (kept on the first view). */
     image: (request: Request) => Promise<Response>;
     /** Server-side starts and reads of the app's contracts. */
-    invoke: import("@shubh90/app-runtime/invoke/server").MiiInvoke<C>;
+    invoke: import("../invoke/server.js").MiiInvoke<C>;
     /** `/api/mii/invoke/*`: the contract buttons, forwarded to the platform as the person. */
     invokeRoute: (request: Request) => Promise<Response>;
     /** `/api/mii/chat/*`: the chat bubble's calls to the org's agents. */

package/dist/server/index.js

@@ -3,16 +3,17 @@
 // images, contracts, chat). Server-only.
 import { drizzle } from "drizzle-orm/postgres-js";
 import postgres from "postgres";
-import { createMiiAuthCore } from "@shubh90/app-runtime/auth/core";
-import { createMiiChatHandler } from "@shubh90/app-runtime/chat/server";
-import { createMiiInvoke } from "@shubh90/app-runtime/invoke/server";
+import { createMiiAuthCore } from "../auth/core.js";
+import { createMiiChatHandler } from "../chat/server.js";
+import { createMiiInvoke } from "../invoke/server.js";
 import { createEntitiesHandler } from "./entities.js";
 import { env } from "./env.js";
 import { createImageHandler } from "./images.js";
 import { readSession, signIn } from "./session.js";
-export { cookieAttributes, safeNext, SESSION_COOKIE } from "@shubh90/app-runtime/auth/core";
-export { defineContracts, InvocationError } from "@shubh90/app-runtime/invoke/server";
-export { createHealthHandler, createSentryTunnelHandler } from "@shubh90/app-runtime/server";
+export { cookieAttributes, safeNext, SESSION_COOKIE } from "../auth/core.js";
+export { defineContracts, InvocationError } from "../invoke/server.js";
+export { createHealthHandler } from "./health.js";
+export { createSentryTunnelHandler } from "./sentry-tunnel.js";
 /** Connections one server process holds open to the app's database. */
 const POOL_MAX = 5;
 export function createLightServer(options) {

package/dist/server/sentry-tunnel.d.ts

@@ -0,0 +1,6 @@
+export type SentryTunnelOptions = {
+    /** Test hook; defaults to global fetch. */
+    readonly fetch?: typeof fetch;
+};
+/** POST for /monitoring: forward the envelope, answer what Sentry answered. */
+export declare function createSentryTunnelHandler({ fetch: doFetch }?: SentryTunnelOptions): (request: Request) => Promise<Response>;

package/dist/server/sentry-tunnel.js

@@ -0,0 +1,52 @@
+// The Sentry tunnel: browsers post error envelopes to this app's own
+// /monitoring route, which forwards them to Sentry — because ad-blockers
+// block *.sentry.io from the browser, and a platform whose error reporting
+// dies to a browser extension is blind exactly where it matters.
+//
+// The envelope's own header names the DSN, so the route needs no
+// configuration; it forwards only to hosts that are plainly Sentry's, so an
+// app cannot be turned into an open relay by a crafted envelope.
+import { z } from "zod/v4";
+const ALLOWED_HOST = /(^|\.)(sentry\.io|ingest\.sentry\.io|ingest\.[a-z0-9-]+\.sentry\.io)$/;
+/** The envelope's header line: the DSN it is for, whatever else it says. */
+const envelopeHeader = z.object({ dsn: z.string() });
+/** POST for /monitoring: forward the envelope, answer what Sentry answered. */
+export function createSentryTunnelHandler({ fetch: doFetch = fetch } = {}) {
+    return async function tunnel(request) {
+        const envelope = await request.text();
+        const newline = envelope.indexOf("\n");
+        const headerLine = newline === -1 ? envelope : envelope.slice(0, newline);
+        let parsed;
+        try {
+            parsed = JSON.parse(headerLine);
+        }
+        catch {
+            return Response.json({ error: "Not a Sentry envelope." }, { status: 400 });
+        }
+        const header = envelopeHeader.safeParse(parsed);
+        if (!header.success) {
+            return Response.json({ error: "Envelope names no DSN." }, { status: 400 });
+        }
+        let dsn;
+        try {
+            dsn = new URL(header.data.dsn);
+        }
+        catch {
+            return Response.json({ error: "Not a Sentry envelope." }, { status: 400 });
+        }
+        if (!ALLOWED_HOST.test(dsn.hostname)) {
+            // A DSN pointing anywhere else would make this route an open relay.
+            return Response.json({ error: "DSN host is not Sentry." }, { status: 400 });
+        }
+        const projectId = dsn.pathname.replace(/^\/+/, "");
+        if (!/^\d+$/.test(projectId)) {
+            return Response.json({ error: "DSN names no project." }, { status: 400 });
+        }
+        const upstream = await doFetch(`https://${dsn.hostname}/api/${projectId}/envelope/`, {
+            method: "POST",
+            headers: { "Content-Type": "application/x-sentry-envelope" },
+            body: envelope
+        });
+        return new Response(null, { status: upstream.status });
+    };
+}

package/dist/server/session.d.ts

@@ -1,4 +1,4 @@
-import { type MiiAuthCore, type MiiUser } from "@shubh90/app-runtime/auth/core";
+import { type MiiAuthCore, type MiiUser } from "../auth/core.js";
 export type SessionUser = Pick<MiiUser, "id" | "name" | "email" | "avatarUrl" | "role">;
 export type SessionState = {
     user: SessionUser | null;

package/dist/server/session.js

@@ -1,6 +1,6 @@
 // Who is asking, as the app's door sees it, and signing in through the platform.
-import { signInWithPlaza } from "@shubh90/app-runtime/auth/core";
-import { readCookie } from "@shubh90/app-runtime/chat/server";
+import { signInWithPlaza } from "../auth/core.js";
+import { readCookie } from "../chat/server.js";
 import { env } from "./env.js";
 /** The session a request's cookie names, and whether the app is members-only. */
 export async function readSession(auth, request) {

package/dist/uuid.d.ts

@@ -0,0 +1 @@
+export declare function isUuid(value: string): boolean;

package/dist/uuid.js

@@ -0,0 +1,7 @@
+import { z } from "zod/v4";
+const uuidSchema = z.uuid();
+// The platform's invocation ids are uuid columns: an id of any
+// other shape names nothing, so it is refused here rather than forwarded.
+export function isUuid(value) {
+    return uuidSchema.safeParse(value).success;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@trylight/app",
-  "version": "0.1.9",
+  "version": "0.2.0",
   "description": "The Light SDK every v2 org app depends on: entities (Drizzle tables with a typed client), sign-in, contracts and in-app chat.",
   "license": "UNLICENSED",
   "type": "module",
@@ -12,6 +12,7 @@
     "url": "https://github.com/shubh9/mii.git",
     "directory": "packages/app-sdk"
   },
+  "packageManager": "pnpm@11.0.9",
   "files": [
     "dist",
     "bin"
@@ -41,6 +42,15 @@
       "default": "./dist/vite.js"
     }
   },
+  "scripts": {
+    "build": "rm -rf dist && tsc -p tsconfig.build.json",
+    "typecheck": "tsc --noEmit",
+    "lint": "eslint src test --max-warnings 0",
+    "test": "node --test --import tsx \"test/**/*.test.ts\"",
+    "check": "tsx scripts/write-brand.ts --check && pnpm run typecheck && pnpm run lint && pnpm run test && pnpm run build",
+    "prepack": "pnpm run build",
+    "brand": "tsx scripts/write-brand.ts"
+  },
   "peerDependencies": {
     "@tanstack/react-query": ">=5.69",
     "drizzle-orm": ">=0.45",
@@ -51,7 +61,6 @@
     "zod": ">=4"
   },
   "dependencies": {
-    "@shubh90/app-runtime": "^0.10.3",
     "drizzle-kit": "0.31.11",
     "drizzle-zod": "^0.8.3",
     "ipaddr.js": "^2.5.0",
@@ -73,12 +82,5 @@
     "typescript-eslint": "^8.70.1",
     "vite": "^8.2.0",
     "zod": "^4.6.5"
-  },
-  "scripts": {
-    "build": "rm -rf dist && tsc -p tsconfig.build.json",
-    "typecheck": "tsc --noEmit",
-    "lint": "eslint src test --max-warnings 0",
-    "test": "node --test --import tsx \"test/**/*.test.ts\"",
-    "check": "pnpm run typecheck && pnpm run lint && pnpm run test && pnpm run build"
   }
-}
+}

package/dist/db/baseline.d.ts

@@ -1,36 +0,0 @@
-import { type Snapshot } from "./migrations.js";
-export type Baseline = {
-    /** Each app table written to db/schema as an entity(), with the entity() columns it lacks (the first sync adds them). */
-    tables: {
-        name: string;
-        lacks: string[];
-    }[];
-    /** App tables entity() can't key or say exactly, and why: plain tables in db/schema. */
-    plain: {
-        name: string;
-        why: string;
-    }[];
-    /** Platform tables left as they are. */
-    skipped: string[];
-    /** Other things drizzle-kit found (views, sequences…) that db/schema doesn't hold. */
-    leftOut: string[];
-    /** What the first `light-db sync` will apply. */
-    pending: string[];
-};
-/** Why the database can't become db/schema as it is; nothing was written. */
-export declare class BaselineRefused extends Error {
-}
-export declare function baseline(root: string, databaseUrl: string, schemaModule?: string): Promise<Baseline>;
-/** Runs drizzle-kit pull into a temporary folder: the tables as TypeScript, and drizzle's snapshot of them. */
-export declare function pull(databaseUrl: string): {
-    source: string;
-    snapshot: Snapshot;
-};
-/**
- * What drizzle-kit pull writes wrong: an empty-string default as `.default(')`,
- * and a column of a type it can't parse (tsvector, bytea) as `unknown(...)`
- * under a TODO naming the type, which becomes a custom type of that name.
- */
-export declare function repairPull(text: string): string;
-/** What a sync would run to make the `live` tables (as pulled) into `recorded`'s; none when they match. */
-export declare function driftFrom(live: Snapshot, recorded: Snapshot): Promise<string[]>;