@wizeworks/lens-cloud 0.0.0-stage → 0.3.0-alpha.2

package/dist/routes/mcp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.d.ts","sourceRoot":"","sources":["../../src/routes/mcp.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAGrC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AA2ChD,wBAAgB,SAAS,CAAC,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAE9C"}

package/dist/routes/mcp.js

@@ -0,0 +1,52 @@
+import { toSummary } from "@wizeworks/lens-core";
+import { parseJson, readBody } from "@wizeworks/lens-hub/kit";
+import { DEFAULT_N_PLUS_ONE, DEFAULT_SLOW_QUERY_MS, handleMcp } from "@wizeworks/lens-node/kit";
+import { principalOf, requireProject } from "../auth/principal.js";
+import { fail } from "../http/http.js";
+import { audit } from "../repo/audit.js";
+import { getTrace, queryTraces } from "../repo/trace-read.js";
+import { projectMetrics } from "./metrics.js";
+/** Traces the MCP tools search through, newest first. */
+const MCP_RECENT = 500;
+/** The project to read: `?project=`, or the only project of the read key. */
+async function projectId(ctx) {
+    const id = ctx.url.searchParams.get("project");
+    if (id)
+        return id;
+    const p = await principalOf(ctx);
+    if (p?.kind === "key" && p.key.projectIds.length === 1)
+        return p.key.projectIds[0];
+    return fail(400, "Add ?project=<project id>. Read keys for one project do not need it.");
+}
+/** `POST /_wizelens/mcp`: the same read-only tools as the add-ons, for one project. Needs a read key: agents get only what it allows. */
+async function mcp(ctx) {
+    if ((await principalOf(ctx))?.kind !== "key")
+        fail(401, "Send a read key: Authorization: Bearer wl_rk_...");
+    const access = await requireProject(ctx, await projectId(ctx));
+    const { project, actor } = access;
+    const db = ctx.app.db;
+    const recent = await queryTraces(db, { projectId: project.id, limit: MCP_RECENT });
+    const writes = [];
+    const data = {
+        service: project.name,
+        version: ctx.app.version,
+        slowQueryMs: DEFAULT_SLOW_QUERY_MS,
+        nPlusOneThreshold: DEFAULT_N_PLUS_ONE,
+        list: (limit) => recent.slice(0, limit).map(toSummary),
+        all: () => recent,
+        get: (traceId) => getTrace(db, project.id, traceId),
+        metrics: (range, params) => projectMetrics(db, project.id, range, params, { now: ctx.app.config.now() }),
+        // Every tool call is kept in the organization's audit log.
+        audit: (line) => void writes.push(audit(db, project.orgId, actor, "mcp.call", { projectId: project.id, line }, ctx.app.config.now())),
+    };
+    const body = ctx.req.method === "POST" ? parseJson(await readBody(ctx.req)) : undefined;
+    await handleMcp(data, ctx.req, ctx.res, body);
+    // The audit lines are written before this request is done; a failed write is logged, never lost silently.
+    for (const r of await Promise.allSettled(writes))
+        if (r.status === "rejected")
+            console.error("[wizelens-cloud] audit write failed:", r.reason);
+}
+export function mcpRoutes(r) {
+    r.on("POST", "mcp", mcp).on("GET", "mcp", mcp).on("DELETE", "mcp", mcp);
+}
+//# sourceMappingURL=mcp.js.map

package/dist/routes/mcp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.js","sourceRoot":"","sources":["../../src/routes/mcp.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,SAAS,EAAsB,MAAM,0BAA0B,CAAC;AAEpH,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACnE,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AAEvC,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAE9C,yDAAyD;AACzD,MAAM,UAAU,GAAG,GAAG,CAAC;AAEvB,6EAA6E;AAC7E,KAAK,UAAU,SAAS,CAAC,GAAQ;IAC/B,MAAM,EAAE,GAAG,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAC/C,IAAI,EAAE;QAAE,OAAO,EAAE,CAAC;IAClB,MAAM,CAAC,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,CAAC,EAAE,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAE,CAAC;IACpF,OAAO,IAAI,CAAC,GAAG,EAAE,sEAAsE,CAAC,CAAC;AAC3F,CAAC;AAED,yIAAyI;AACzI,KAAK,UAAU,GAAG,CAAC,GAAQ;IACzB,IAAI,CAAC,MAAM,WAAW,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,KAAK,KAAK;QAAE,IAAI,CAAC,GAAG,EAAE,kDAAkD,CAAC,CAAC;IAC5G,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/D,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC;IAClC,MAAM,EAAE,GAAG,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;IACtB,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;IACnF,MAAM,MAAM,GAAoB,EAAE,CAAC;IACnC,MAAM,IAAI,GAAkB;QAC1B,OAAO,EAAE,OAAO,CAAC,IAAI;QACrB,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC,OAAO;QACxB,WAAW,EAAE,qBAAqB;QAClC,iBAAiB,EAAE,kBAAkB;QACrC,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC;QACtD,GAAG,EAAE,GAAG,EAAE,CAAC,MAAM;QACjB,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC;QACnD,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,cAAc,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC;QACxG,2DAA2D;QAC3D,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;KACtI,CAAC;IACF,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACxF,MAAM,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC9C,0GAA0G;IAC1G,KAAK,MAAM,CAAC,IAAI,MAAM,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,IAAI,CAAC,CAAC,MAAM,KAAK,UAAU;YAAE,OAAO,CAAC,KAAK,CAAC,sCAAsC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;AACjJ,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,CAAc;IACtC,CAAC,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;AAC1E,CAAC"}

package/dist/routes/me.d.ts

@@ -0,0 +1,4 @@
+import type { Ctx } from "../app.js";
+import type { Router } from "../http/router.js";
+export declare function meRoutes(r: Router<Ctx>): void;
+//# sourceMappingURL=me.d.ts.map

package/dist/routes/me.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"me.d.ts","sourceRoot":"","sources":["../../src/routes/me.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAIrC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAqChD,wBAAgB,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAE7C"}

package/dist/routes/me.js

@@ -0,0 +1,37 @@
+import { blockingOrgs, ownedOrgs } from "../auth/delete-user.js";
+import { sessionOf } from "../auth/principal.js";
+import { fail, sendJson } from "../http/http.js";
+import { orgsOfUser } from "../repo/orgs.js";
+import { listProjects } from "../repo/projects.js";
+import { userCount } from "../repo/users.js";
+/** The signed-in person's organizations, each with its projects. */
+async function orgsWithProjects(ctx, userId) {
+    const orgs = await orgsOfUser(ctx.app.db, userId);
+    return Promise.all(orgs.map(async (o) => ({ ...o, projects: await listProjects(ctx.app.db, o.id) })));
+}
+/** True once any organization has an SSO provider with a proven domain, so the sign-in page offers single sign-on. */
+async function ssoReady(ctx) {
+    const [row] = await ctx.app.db.query("SELECT EXISTS (SELECT 1 FROM sso_providers WHERE domain_verified) AS ready");
+    return row?.ready === true;
+}
+/** Who is signed in, whether setup is needed, how sign-up works, whether mail goes out, and whether SSO is on. Sign-in itself is Better Auth's (api/auth/). */
+async function me(ctx) {
+    const s = await sessionOf(ctx);
+    const base = { signedIn: !!s, needsSetup: (await userCount(ctx.app.db)) === 0, signup: ctx.app.config.signup, mail: ctx.app.mailer.live, sso: await ssoReady(ctx) };
+    if (!s)
+        return sendJson(ctx.res, 200, base);
+    const owned = await ownedOrgs(ctx.app.db, s.user.id);
+    sendJson(ctx.res, 200, { ...base, user: s.user, sessionId: s.sessionId, orgs: await orgsWithProjects(ctx, s.user.id), blockingOrgs: blockingOrgs(owned).map((o) => o.name) });
+}
+/** Who sent an invite and for which email, so the sign-up form can show it. The id is the link's secret. */
+async function invitePreview(ctx) {
+    const [row] = await ctx.app.db.query(`SELECT o.name AS "orgName", i.email, i.role, u.name AS inviter FROM invites i JOIN orgs o ON o.id = i.org_id JOIN users u ON u.id = i.inviter_id
+     WHERE i.id = $1 AND i.status = 'pending' AND i.expires_at > now()`, [ctx.params.id]);
+    if (!row)
+        return fail(404, "This invite link is not valid any more.");
+    sendJson(ctx.res, 200, row);
+}
+export function meRoutes(r) {
+    r.on("GET", "api/me", me).on("GET", "api/invites/:id", invitePreview);
+}
+//# sourceMappingURL=me.js.map

package/dist/routes/me.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"me.js","sourceRoot":"","sources":["../../src/routes/me.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAEjD,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAE7C,oEAAoE;AACpE,KAAK,UAAU,gBAAgB,CAAC,GAAQ,EAAE,MAAc;IACtD,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IAClD,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AACxG,CAAC;AAED,sHAAsH;AACtH,KAAK,UAAU,QAAQ,CAAC,GAAQ;IAC9B,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAqB,4EAA4E,CAAC,CAAC;IACvI,OAAO,GAAG,EAAE,KAAK,KAAK,IAAI,CAAC;AAC7B,CAAC;AAED,+JAA+J;AAC/J,KAAK,UAAU,EAAE,CAAC,GAAQ;IACxB,MAAM,CAAC,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC;IAC/B,MAAM,IAAI,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,MAAM,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;IACpK,IAAI,CAAC,CAAC;QAAE,OAAO,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IAC5C,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrD,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,YAAY,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAChL,CAAC;AAED,4GAA4G;AAC5G,KAAK,UAAU,aAAa,CAAC,GAAQ;IACnC,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAClC;uEACmE,EACnE,CAAC,GAAG,CAAC,MAAM,CAAC,EAAG,CAAC,CACjB,CAAC;IACF,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC,GAAG,EAAE,yCAAyC,CAAC,CAAC;IACtE,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,CAAc;IACrC,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,iBAAiB,EAAE,aAAa,CAAC,CAAC;AACxE,CAAC"}

package/dist/routes/metrics.d.ts

@@ -0,0 +1,13 @@
+import { type MetricsModel, type TimeRange } from "@wizeworks/lens-core";
+import type { Ctx } from "../app.js";
+import type { Queryable } from "../db/db.js";
+/** Model parameters from the query: the metric, service, grouping, stat, and search. */
+export declare function metricParamsOf(p: URLSearchParams): Record<string, string>;
+/** The metrics page for one project, from the metric rollup tiers. */
+export declare function projectMetrics(db: Queryable, projectId: string, range: TimeRange, params: Record<string, string>, o: {
+    now: number;
+    env?: string;
+}): Promise<MetricsModel>;
+/** The range from the query, checked against the organization's retention. */
+export declare function metricRange(ctx: Ctx, retentionDays: number): TimeRange;
+//# sourceMappingURL=metrics.d.ts.map

package/dist/routes/metrics.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"metrics.d.ts","sourceRoot":"","sources":["../../src/routes/metrics.ts"],"names":[],"mappings":"AAAA,OAAO,EAAe,KAAK,YAAY,EAAkB,KAAK,SAAS,EAAe,MAAM,sBAAsB,CAAC;AACnH,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAO7C,wFAAwF;AACxF,wBAAgB,cAAc,CAAC,CAAC,EAAE,eAAe,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAOzE;AAED,sEAAsE;AACtE,wBAAsB,cAAc,CAClC,EAAE,EAAE,SAAS,EACb,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,SAAS,EAChB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC9B,CAAC,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAC/B,OAAO,CAAC,YAAY,CAAC,CAEvB;AAED,8EAA8E;AAC9E,wBAAgB,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,aAAa,EAAE,MAAM,GAAG,SAAS,CAKtE"}

package/dist/routes/metrics.js

@@ -0,0 +1,29 @@
+import { isTimeRange, metricsModelOf, TIME_RANGES } from "@wizeworks/lens-core";
+import { fail } from "../http/http.js";
+import { loadMetricData } from "../repo/metric-read.js";
+const DAY_MS = 86_400_000;
+const PARAMS = ["metric", "service", "group", "stat", "q"];
+/** Model parameters from the query: the metric, service, grouping, stat, and search. */
+export function metricParamsOf(p) {
+    const out = {};
+    for (const k of PARAMS) {
+        const v = p.get(k);
+        if (v)
+            out[k] = v.slice(0, 200);
+    }
+    return out;
+}
+/** The metrics page for one project, from the metric rollup tiers. */
+export async function projectMetrics(db, projectId, range, params, o) {
+    return metricsModelOf(await loadMetricData(db, { projectId, env: o.env }, range, params, o.now));
+}
+/** The range from the query, checked against the organization's retention. */
+export function metricRange(ctx, retentionDays) {
+    const range = ctx.url.searchParams.get("range") ?? "1h";
+    if (!isTimeRange(range))
+        return fail(400, `Unknown range "${range}".`);
+    if (TIME_RANGES[range].ms > retentionDays * DAY_MS)
+        fail(400, "This range is longer than the organization keeps data.");
+    return range;
+}
+//# sourceMappingURL=metrics.js.map

package/dist/routes/metrics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"metrics.js","sourceRoot":"","sources":["../../src/routes/metrics.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAqB,cAAc,EAAkB,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAGnH,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AACvC,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAExD,MAAM,MAAM,GAAG,UAAU,CAAC;AAC1B,MAAM,MAAM,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;AAE3D,wFAAwF;AACxF,MAAM,UAAU,cAAc,CAAC,CAAkB;IAC/C,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACnB,IAAI,CAAC;YAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,sEAAsE;AACtE,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,EAAa,EACb,SAAiB,EACjB,KAAgB,EAChB,MAA8B,EAC9B,CAAgC;IAEhC,OAAO,cAAc,CAAC,MAAM,cAAc,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;AACnG,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,WAAW,CAAC,GAAQ,EAAE,aAAqB;IACzD,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC;IACxD,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,GAAG,EAAE,kBAAkB,KAAK,IAAI,CAAC,CAAC;IACvE,IAAI,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,aAAa,GAAG,MAAM;QAAE,IAAI,CAAC,GAAG,EAAE,wDAAwD,CAAC,CAAC;IACxH,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/routes/models.d.ts

@@ -0,0 +1,4 @@
+import type { Ctx } from "../app.js";
+import type { Router } from "../http/router.js";
+export declare function modelRoutes(r: Router<Ctx>): void;
+//# sourceMappingURL=models.d.ts.map

package/dist/routes/models.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"models.d.ts","sourceRoot":"","sources":["../../src/routes/models.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAErC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAmEhD,wBAAgB,WAAW,CAAC,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAEhD"}

package/dist/routes/models.js

@@ -0,0 +1,71 @@
+import { alignNow, FACT_SLOW_QUERY_MS, isPageName, isTimeRange, pageContext, runPage, TIME_RANGES } from "@wizeworks/lens-core";
+import { fail, sendJson } from "../http/http.js";
+import { cloudExecutor, cloudSettling } from "../scale-exec.js";
+import { projectOf } from "./data.js";
+import { metricParamsOf, metricRange, projectMetrics } from "./metrics.js";
+const CACHE_MS = 15_000;
+const CACHE_MAX = 500;
+const DAY_MS = 86_400_000;
+const RESERVED = new Set(["project", "range", "env"]);
+const cache = new Map();
+function cached(key, now) {
+    const hit = cache.get(key);
+    return hit && now - hit.atMs < CACHE_MS ? hit.value : undefined;
+}
+function remember(key, value, now) {
+    if (cache.size >= CACHE_MAX)
+        cache.delete(cache.keys().next().value);
+    cache.set(key, { atMs: now, value });
+}
+/** Model parameters: every query value except the ones that pick the data. */
+const paramsOf = (url) => Object.fromEntries([...url.searchParams].filter(([k]) => !RESERVED.has(k)).sort());
+async function retentionDays(ctx, orgId) {
+    const [row] = await ctx.app.db.query("SELECT retention_days AS d FROM orgs WHERE id = $1", [orgId]);
+    return row?.d ?? ctx.app.config.retentionDays;
+}
+/** `GET api/models/metrics?project=&range=&env=&metric=&service=&group=&stat=&q=`: the metrics page, from the newest points. */
+async function metrics(ctx) {
+    const { project } = await projectOf(ctx);
+    const range = metricRange(ctx, await retentionDays(ctx, project.orgId));
+    const now = alignNow(ctx.app.config.now());
+    const env = ctx.url.searchParams.get("env") || undefined;
+    const params = metricParamsOf(ctx.url.searchParams);
+    const key = JSON.stringify([project.id, "metrics", range, env, params, now]);
+    const hit = cached(key, ctx.app.config.now());
+    if (hit)
+        return sendJson(ctx.res, 200, hit);
+    const value = await projectMetrics(ctx.app.db, project.id, range, params, { now, env });
+    remember(key, value, ctx.app.config.now());
+    sendJson(ctx.res, 200, value);
+}
+/** `GET api/models/<page>?project=&range=&env=&...`: one page's numbers, from the project's stats tables. */
+async function model(ctx) {
+    const page = ctx.params.page;
+    if (page === "metrics")
+        return metrics(ctx);
+    if (!isPageName(page))
+        return fail(404, `No model named "${page}".`);
+    const { project } = await projectOf(ctx);
+    const range = ctx.url.searchParams.get("range") ?? "24h";
+    if (!isTimeRange(range))
+        return fail(400, `Unknown range "${range}".`);
+    const days = await retentionDays(ctx, project.orgId);
+    if (TIME_RANGES[range].ms > days * DAY_MS)
+        fail(400, "This range is longer than the organization keeps data.");
+    const now = alignNow(ctx.app.config.now());
+    const env = ctx.url.searchParams.get("env") || undefined;
+    const params = paramsOf(ctx.url);
+    const key = JSON.stringify([project.id, page, range, env, params, now]);
+    const hit = cached(key, ctx.app.config.now());
+    if (hit)
+        return sendJson(ctx.res, 200, hit);
+    const db = ctx.app.db;
+    const pc = pageContext(range, now, params, { slowQueryMs: FACT_SLOW_QUERY_MS }, await cloudSettling(db, project.id, env));
+    const value = await runPage(page, pc, cloudExecutor(db, project.id, days * DAY_MS, env));
+    remember(key, value, ctx.app.config.now());
+    sendJson(ctx.res, 200, value);
+}
+export function modelRoutes(r) {
+    r.on("GET", "api/models/:page", model);
+}
+//# sourceMappingURL=models.js.map

package/dist/routes/models.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"models.js","sourceRoot":"","sources":["../../src/routes/models.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,kBAAkB,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAEhI,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAEjD,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAE3E,MAAM,QAAQ,GAAG,MAAM,CAAC;AACxB,MAAM,SAAS,GAAG,GAAG,CAAC;AACtB,MAAM,MAAM,GAAG,UAAU,CAAC;AAC1B,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;AACtD,MAAM,KAAK,GAAG,IAAI,GAAG,EAA4C,CAAC;AAElE,SAAS,MAAM,CAAC,GAAW,EAAE,GAAW;IACtC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC3B,OAAO,GAAG,IAAI,GAAG,GAAG,GAAG,CAAC,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAClE,CAAC;AAED,SAAS,QAAQ,CAAC,GAAW,EAAE,KAAc,EAAE,GAAW;IACxD,IAAI,KAAK,CAAC,IAAI,IAAI,SAAS;QAAE,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAM,CAAC,CAAC;IACtE,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;AACvC,CAAC;AAED,8EAA8E;AAC9E,MAAM,QAAQ,GAAG,CAAC,GAAQ,EAA0B,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AAE1I,KAAK,UAAU,aAAa,CAAC,GAAQ,EAAE,KAAa;IAClD,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAgB,oDAAoD,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;IACnH,OAAO,GAAG,EAAE,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC;AAChD,CAAC;AAED,gIAAgI;AAChI,KAAK,UAAU,OAAO,CAAC,GAAQ;IAC7B,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,MAAM,aAAa,CAAC,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IACxE,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;IAC3C,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,SAAS,CAAC;IACzD,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACpD,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;IAC7E,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;IAC9C,IAAI,GAAG;QAAE,OAAO,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IAC5C,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;IACxF,QAAQ,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;IAC3C,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;AAChC,CAAC;AAED,6GAA6G;AAC7G,KAAK,UAAU,KAAK,CAAC,GAAQ;IAC3B,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,IAAK,CAAC;IAC9B,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC;IAC5C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,GAAG,EAAE,mBAAmB,IAAI,IAAI,CAAC,CAAC;IACrE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC;IACzD,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,GAAG,EAAE,kBAAkB,KAAK,IAAI,CAAC,CAAC;IACvE,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IACrD,IAAI,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,IAAI,GAAG,MAAM;QAAE,IAAI,CAAC,GAAG,EAAE,wDAAwD,CAAC,CAAC;IAC/G,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;IAC3C,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,SAAS,CAAC;IACzD,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;IACxE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;IAC9C,IAAI,GAAG;QAAE,OAAO,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IAC5C,MAAM,EAAE,GAAG,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;IACtB,MAAM,EAAE,GAAG,WAAW,CAAC,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,WAAW,EAAE,kBAAkB,EAAE,EAAE,MAAM,aAAa,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;IAC1H,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,EAAE,EAAE,aAAa,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,GAAG,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;IACzF,QAAQ,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;IAC3C,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,CAAc;IACxC,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,kBAAkB,EAAE,KAAK,CAAC,CAAC;AACzC,CAAC"}

package/dist/routes/notify.d.ts

@@ -0,0 +1,4 @@
+import type { Ctx } from "../app.js";
+import type { Router } from "../http/router.js";
+export declare function notifyRoutes(r: Router<Ctx>): void;
+//# sourceMappingURL=notify.d.ts.map

package/dist/routes/notify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"notify.d.ts","sourceRoot":"","sources":["../../src/routes/notify.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAGrC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAoDhD,wBAAgB,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAEjD"}

package/dist/routes/notify.js

@@ -0,0 +1,55 @@
+import { requireUser } from "../auth/principal.js";
+import { fail, readJsonBody, sendJson } from "../http/http.js";
+import { DEFAULT_DIGEST, DIGEST_PERIODS, digestPrefsOf, prefsOf, saveDigestPref, savePrefs } from "../repo/mail-prefs.js";
+const validZone = (tz) => {
+    try {
+        new Intl.DateTimeFormat("en-US", { timeZone: tz });
+        return tz.length <= 64;
+    }
+    catch {
+        return false;
+    }
+};
+/** Projects this person can see, each with its digest choices. */
+async function projectsOf(ctx, userId) {
+    const rows = await ctx.app.db.query("SELECT p.id, p.name, p.org_id, o.name AS org, m.role FROM members m JOIN orgs o ON o.id = m.org_id JOIN projects p ON p.org_id = o.id WHERE m.user_id = $1 ORDER BY o.name, p.name", [userId]);
+    const prefs = await digestPrefsOf(ctx.app.db, userId);
+    return rows.map((r) => ({ projectId: r.id, project: r.name, orgId: r.org_id, org: r.org, role: r.role, ...(prefs.get(r.id) ?? DEFAULT_DIGEST) }));
+}
+/** `GET api/me/notifications`: which emails this person gets. Security notices are always on, so they are not listed. */
+async function show(ctx) {
+    const user = await requireUser(ctx);
+    sendJson(ctx.res, 200, { mail: ctx.app.mailer.live, ...(await prefsOf(ctx.app.db, user.id)), projects: await projectsOf(ctx, user.id) });
+}
+function prefsPatch(b) {
+    const out = {};
+    for (const k of ["team", "health", "digests"])
+        if (typeof b[k] === "boolean")
+            out[k] = b[k];
+    if (b.timeZone !== undefined)
+        out.timeZone = typeof b.timeZone === "string" && validZone(b.timeZone) ? b.timeZone : fail(400, "Pick a time zone such as America/Los_Angeles.");
+    if (b.digestHour !== undefined)
+        out.digestHour = Number.isInteger(b.digestHour) && Number(b.digestHour) >= 0 && Number(b.digestHour) <= 23 ? Number(b.digestHour) : fail(400, "Pick an hour from 0 to 23.");
+    return out;
+}
+/** `PATCH api/me/notifications`: change only the fields sent. Projects must be ones this person can see. */
+async function change(ctx) {
+    const user = await requireUser(ctx);
+    const body = await readJsonBody(ctx.req);
+    const patch = prefsPatch(body);
+    const visible = new Set((await projectsOf(ctx, user.id)).map((p) => p.projectId));
+    const projects = Array.isArray(body.projects) ? body.projects : [];
+    if (projects.some((p) => typeof p?.projectId !== "string" || !visible.has(p.projectId)))
+        fail(404, "Project not found.");
+    if (Object.keys(patch).length)
+        await savePrefs(ctx.app.db, user.id, patch);
+    for (const p of projects) {
+        const periods = Object.fromEntries(DIGEST_PERIODS.filter((k) => typeof p[k] === "boolean").map((k) => [k, p[k]]));
+        await saveDigestPref(ctx.app.db, user.id, p.projectId, periods);
+    }
+    await show(ctx);
+}
+export function notifyRoutes(r) {
+    r.on("GET", "api/me/notifications", show).on("PATCH", "api/me/notifications", change);
+}
+//# sourceMappingURL=notify.js.map

package/dist/routes/notify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"notify.js","sourceRoot":"","sources":["../../src/routes/notify.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAE/D,OAAO,EAAE,cAAc,EAAE,cAAc,EAAqB,aAAa,EAAkB,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAE7J,MAAM,SAAS,GAAG,CAAC,EAAU,EAAE,EAAE;IAC/B,IAAI,CAAC;QACH,IAAI,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;QACnD,OAAO,EAAE,CAAC,MAAM,IAAI,EAAE,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC,CAAC;AAEF,kEAAkE;AAClE,KAAK,UAAU,UAAU,CAAC,GAAQ,EAAE,MAAc;IAChD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CACjC,oLAAoL,EACpL,CAAC,MAAM,CAAC,CACT,CAAC;IACF,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IACtD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC;AACpJ,CAAC;AAED,yHAAyH;AACzH,KAAK,UAAU,IAAI,CAAC,GAAQ;IAC1B,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,CAAC;IACpC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;AAC3I,CAAC;AAED,SAAS,UAAU,CAAC,CAA0B;IAC5C,MAAM,GAAG,GAAuB,EAAE,CAAC;IACnC,KAAK,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAU;QAAE,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS;YAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACrG,IAAI,CAAC,CAAC,QAAQ,KAAK,SAAS;QAAE,GAAG,CAAC,QAAQ,GAAG,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,+CAA+C,CAAC,CAAC;IAC/K,IAAI,CAAC,CAAC,UAAU,KAAK,SAAS;QAAE,GAAG,CAAC,UAAU,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,4BAA4B,CAAC,CAAC;IAC5M,OAAO,GAAG,CAAC;AACb,CAAC;AAED,4GAA4G;AAC5G,KAAK,UAAU,MAAM,CAAC,GAAQ;IAC5B,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;IAClF,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAE,IAAI,CAAC,QAAsC,CAAC,CAAC,CAAC,EAAE,CAAC;IAClG,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,SAAS,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAAE,IAAI,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;IACzH,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM;QAAE,MAAM,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IAC3E,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAY,CAAC,CAAC,CAA2C,CAAC;QACvK,MAAM,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,SAAmB,EAAE,OAAO,CAAC,CAAC;IAC5E,CAAC;IACD,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,CAAc;IACzC,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,sBAAsB,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,sBAAsB,EAAE,MAAM,CAAC,CAAC;AACxF,CAAC"}

package/dist/routes/orgs.d.ts

@@ -0,0 +1,4 @@
+import type { Ctx } from "../app.js";
+import type { Router } from "../http/router.js";
+export declare function orgRoutes(r: Router<Ctx>): void;
+//# sourceMappingURL=orgs.d.ts.map

package/dist/routes/orgs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"orgs.d.ts","sourceRoot":"","sources":["../../src/routes/orgs.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAIrC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AA+DhD,wBAAgB,SAAS,CAAC,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAM9C"}

package/dist/routes/orgs.js

@@ -0,0 +1,73 @@
+import { isAPIError } from "better-auth/api";
+import { fromNodeHeaders } from "better-auth/node";
+import { createOrgFor } from "../auth/auth.js";
+import { requireOrg, requireUser } from "../auth/principal.js";
+import { fail, readJsonBody, sendJson, str } from "../http/http.js";
+import { audit, listAudit } from "../repo/audit.js";
+import { orgDeletionNotice } from "../notify/team.js";
+import { deleteOrgEverything, listMembers, pendingInvites, setRetention } from "../repo/orgs.js";
+import { listKeys, listProjects } from "../repo/projects.js";
+// Members, roles, and invites change through Better Auth (`api/auth/organization/*`). These routes add what it does not have.
+const now = (ctx) => ctx.app.config.now();
+async function overview(ctx) {
+    const { role } = await requireOrg(ctx, ctx.params.org, "read");
+    const db = ctx.app.db;
+    const id = ctx.params.org;
+    const manage = role === "owner" || role === "admin";
+    sendJson(ctx.res, 200, {
+        role,
+        members: await listMembers(db, id),
+        projects: await listProjects(db, id),
+        invites: manage ? await pendingInvites(db, id) : [],
+        keys: manage ? await listKeys(db, id) : [],
+    });
+}
+async function newOrg(ctx) {
+    const user = await requireUser(ctx);
+    const name = str(await readJsonBody(ctx.req), "name");
+    sendJson(ctx.res, 201, await createOrgFor(ctx.app.auth, { db: ctx.app.db, retentionDays: ctx.app.config.retentionDays }, user.id, name));
+}
+async function changeOrg(ctx) {
+    const { user } = await requireOrg(ctx, ctx.params.org, "manage");
+    const body = await readJsonBody(ctx.req);
+    const days = body.retentionDays;
+    if (days !== undefined && (!Number.isInteger(days) || days < 1 || days > 400))
+        fail(400, "Retention is 1 to 400 days.");
+    const name = typeof body.name === "string" && body.name.trim() ? body.name.trim().slice(0, 100) : undefined;
+    if (name)
+        await ctx.app.db.query("UPDATE orgs SET name = $1 WHERE id = $2", [name, ctx.params.org]);
+    if (days !== undefined)
+        await setRetention(ctx.app.db, ctx.params.org, days);
+    await audit(ctx.app.db, ctx.params.org, `user:${user.id}`, "org.update", { name, retentionDays: days }, now(ctx));
+    sendJson(ctx.res, 200, { ok: true });
+}
+/** Owners only, with their password again: the organization and all of its data go at once. */
+async function deleteOrg(ctx) {
+    const { user } = await requireOrg(ctx, ctx.params.org, "own");
+    const password = str(await readJsonBody(ctx.req), "password");
+    try {
+        await ctx.app.auth.api.verifyPassword({ body: { password }, headers: fromNodeHeaders(ctx.req.headers) });
+    }
+    catch (err) {
+        if (isAPIError(err))
+            fail(400, "The password is not right.");
+        throw err;
+    }
+    const tell = await orgDeletionNotice(ctx.app, ctx.params.org, user.id);
+    await ctx.app.db.tx((q) => deleteOrgEverything(q, ctx.params.org));
+    tell();
+    sendJson(ctx.res, 200, { ok: true });
+}
+async function auditLog(ctx) {
+    await requireOrg(ctx, ctx.params.org, "manage");
+    const before = Number(ctx.url.searchParams.get("before")) || undefined;
+    sendJson(ctx.res, 200, await listAudit(ctx.app.db, ctx.params.org, 100, before));
+}
+export function orgRoutes(r) {
+    r.on("POST", "api/orgs", newOrg)
+        .on("GET", "api/orgs/:org", overview)
+        .on("PATCH", "api/orgs/:org", changeOrg)
+        .on("DELETE", "api/orgs/:org", deleteOrg)
+        .on("GET", "api/orgs/:org/audit", auditLog);
+}
+//# sourceMappingURL=orgs.js.map

package/dist/routes/orgs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"orgs.js","sourceRoot":"","sources":["../../src/routes/orgs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAEnD,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAC/D,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,iBAAiB,CAAC;AAEpE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,WAAW,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AACjG,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAE7D,8HAA8H;AAC9H,MAAM,GAAG,GAAG,CAAC,GAAQ,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;AAE/C,KAAK,UAAU,QAAQ,CAAC,GAAQ;IAC9B,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,GAAI,EAAE,MAAM,CAAC,CAAC;IAChE,MAAM,EAAE,GAAG,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;IACtB,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,GAAI,CAAC;IAC3B,MAAM,MAAM,GAAG,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,OAAO,CAAC;IACpD,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE;QACrB,IAAI;QACJ,OAAO,EAAE,MAAM,WAAW,CAAC,EAAE,EAAE,EAAE,CAAC;QAClC,QAAQ,EAAE,MAAM,YAAY,CAAC,EAAE,EAAE,EAAE,CAAC;QACpC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,cAAc,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE;QACnD,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE;KAC3C,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,GAAQ;IAC5B,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;IACtD,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,aAAa,EAAE,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC;AAC3I,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,GAAQ;IAC/B,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,GAAI,EAAE,QAAQ,CAAC,CAAC;IAClE,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,CAAC;IAChC,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAK,IAAe,GAAG,CAAC,IAAK,IAAe,GAAG,GAAG,CAAC;QAAE,IAAI,CAAC,GAAG,EAAE,6BAA6B,CAAC,CAAC;IAChJ,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5G,IAAI,IAAI;QAAE,MAAM,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,yCAAyC,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,GAAI,CAAC,CAAC,CAAC;IACrG,IAAI,IAAI,KAAK,SAAS;QAAE,MAAM,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,GAAI,EAAE,IAAc,CAAC,CAAC;IACxF,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,GAAI,EAAE,QAAQ,IAAI,CAAC,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IACnH,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;AACvC,CAAC;AAED,+FAA+F;AAC/F,KAAK,UAAU,SAAS,CAAC,GAAQ;IAC/B,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,GAAI,EAAE,KAAK,CAAC,CAAC;IAC/D,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,UAAU,CAAC,CAAC;IAC9D,IAAI,CAAC;QACH,MAAM,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC3G,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,UAAU,CAAC,GAAG,CAAC;YAAE,IAAI,CAAC,GAAG,EAAE,4BAA4B,CAAC,CAAC;QAC7D,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,GAAI,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;IACxE,MAAM,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,mBAAmB,CAAC,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,GAAI,CAAC,CAAC,CAAC;IACpE,IAAI,EAAE,CAAC;IACP,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;AACvC,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,GAAQ;IAC9B,MAAM,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,GAAI,EAAE,QAAQ,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,SAAS,CAAC;IACvE,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,GAAI,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;AACpF,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,CAAc;IACtC,CAAC,CAAC,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC;SAC7B,EAAE,CAAC,KAAK,EAAE,eAAe,EAAE,QAAQ,CAAC;SACpC,EAAE,CAAC,OAAO,EAAE,eAAe,EAAE,SAAS,CAAC;SACvC,EAAE,CAAC,QAAQ,EAAE,eAAe,EAAE,SAAS,CAAC;SACxC,EAAE,CAAC,KAAK,EAAE,qBAAqB,EAAE,QAAQ,CAAC,CAAC;AAChD,CAAC"}

package/dist/routes/projects.d.ts

@@ -0,0 +1,4 @@
+import type { Ctx } from "../app.js";
+import type { Router } from "../http/router.js";
+export declare function projectRoutes(r: Router<Ctx>): void;
+//# sourceMappingURL=projects.d.ts.map

package/dist/routes/projects.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"projects.d.ts","sourceRoot":"","sources":["../../src/routes/projects.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAGrC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAgDhD,wBAAgB,aAAa,CAAC,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAMlD"}

package/dist/routes/projects.js

@@ -0,0 +1,55 @@
+import { requireOrg } from "../auth/principal.js";
+import { fail, readJsonBody, sendJson, str } from "../http/http.js";
+import { audit } from "../repo/audit.js";
+import { createKey, createProject, deleteProject, deleteProjectData, listProjects, projectInOrg, revokeKey } from "../repo/projects.js";
+const now = (ctx) => ctx.app.config.now();
+async function newProject(ctx) {
+    const { user } = await requireOrg(ctx, ctx.params.org, "manage");
+    const p = await createProject(ctx.app.db, ctx.params.org, str(await readJsonBody(ctx.req), "name"), now(ctx));
+    await audit(ctx.app.db, ctx.params.org, `user:${user.id}`, "project.create", { projectId: p.id, name: p.name }, now(ctx));
+    sendJson(ctx.res, 201, p);
+}
+/** DELETE removes the project. POST .../clear removes its data and keeps the project. */
+async function dropProject(ctx) {
+    const { org, project } = ctx.params;
+    const { user } = await requireOrg(ctx, org, "manage");
+    const found = await projectInOrg(ctx.app.db, org, project);
+    if (!found)
+        return fail(404, "Project not found.");
+    const clearOnly = ctx.req.method === "POST";
+    await ctx.app.db.tx((q) => (clearOnly ? deleteProjectData(q, project) : deleteProject(q, project)));
+    await audit(ctx.app.db, org, `user:${user.id}`, clearOnly ? "project.clear" : "project.delete", { projectId: project, name: found.name }, now(ctx));
+    sendJson(ctx.res, 200, { ok: true });
+}
+/** Ingest keys belong to one project. Read keys name the projects they may read. */
+async function newKey(ctx) {
+    const org = ctx.params.org;
+    const { user } = await requireOrg(ctx, org, "manage");
+    const body = await readJsonBody(ctx.req);
+    const kind = body.kind;
+    if (kind !== "ingest" && kind !== "read")
+        fail(400, 'Set kind to "ingest" or "read".');
+    const known = new Set((await listProjects(ctx.app.db, org)).map((p) => p.id));
+    const ids = Array.isArray(body.projectIds) ? body.projectIds.filter((id) => typeof id === "string" && known.has(id)) : [];
+    if (ids.length === 0 || (kind === "ingest" && ids.length !== 1))
+        fail(400, "Pick one project for an ingest key, or one or more for a read key.");
+    const key = await createKey(ctx.app.db, org, kind, str(body, "name", false), ids, user.id, now(ctx));
+    await audit(ctx.app.db, org, `user:${user.id}`, "key.create", { keyId: key.id, kind, projectIds: ids }, now(ctx));
+    sendJson(ctx.res, 201, key);
+}
+async function dropKey(ctx) {
+    const { org, key } = ctx.params;
+    const { user } = await requireOrg(ctx, org, "manage");
+    if (!(await revokeKey(ctx.app.db, org, key, now(ctx))))
+        fail(404, "Key not found.");
+    await audit(ctx.app.db, org, `user:${user.id}`, "key.revoke", { keyId: key }, now(ctx));
+    sendJson(ctx.res, 200, { ok: true });
+}
+export function projectRoutes(r) {
+    r.on("POST", "api/orgs/:org/projects", newProject)
+        .on("DELETE", "api/orgs/:org/projects/:project", dropProject)
+        .on("POST", "api/orgs/:org/projects/:project/clear", dropProject)
+        .on("POST", "api/orgs/:org/keys", newKey)
+        .on("DELETE", "api/orgs/:org/keys/:key", dropKey);
+}
+//# sourceMappingURL=projects.js.map

package/dist/routes/projects.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"projects.js","sourceRoot":"","sources":["../../src/routes/projects.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,iBAAiB,CAAC;AAEpE,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,aAAa,EAAE,iBAAiB,EAAgB,YAAY,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAEtJ,MAAM,GAAG,GAAG,CAAC,GAAQ,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;AAE/C,KAAK,UAAU,UAAU,CAAC,GAAQ;IAChC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,GAAI,EAAE,QAAQ,CAAC,CAAC;IAClE,MAAM,CAAC,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,GAAI,EAAE,GAAG,CAAC,MAAM,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/G,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,GAAI,EAAE,QAAQ,IAAI,CAAC,EAAE,EAAE,EAAE,gBAAgB,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3H,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;AAC5B,CAAC;AAED,yFAAyF;AACzF,KAAK,UAAU,WAAW,CAAC,GAAQ;IACjC,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC,MAA0C,CAAC;IACxE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;IACtD,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IAC3D,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;IACnD,MAAM,SAAS,GAAG,GAAG,CAAC,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC;IAC5C,MAAM,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IACpG,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,gBAAgB,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IACpJ,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;AACvC,CAAC;AAED,oFAAoF;AACpF,KAAK,UAAU,MAAM,CAAC,GAAQ;IAC5B,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,GAAI,CAAC;IAC5B,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;IACtD,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAe,CAAC;IAClC,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,MAAM;QAAE,IAAI,CAAC,GAAG,EAAE,iCAAiC,CAAC,CAAC;IACvF,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9E,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,EAAgB,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,IAAI,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACxI,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,CAAC;QAAE,IAAI,CAAC,GAAG,EAAE,oEAAoE,CAAC,CAAC;IACjJ,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IACrG,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IAClH,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;AAC9B,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,GAAQ;IAC7B,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC,MAAsC,CAAC;IAChE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;IACtD,IAAI,CAAC,CAAC,MAAM,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QAAE,IAAI,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;IACpF,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IACxF,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,CAAc;IAC1C,CAAC,CAAC,EAAE,CAAC,MAAM,EAAE,wBAAwB,EAAE,UAAU,CAAC;SAC/C,EAAE,CAAC,QAAQ,EAAE,iCAAiC,EAAE,WAAW,CAAC;SAC5D,EAAE,CAAC,MAAM,EAAE,uCAAuC,EAAE,WAAW,CAAC;SAChE,EAAE,CAAC,MAAM,EAAE,oBAAoB,EAAE,MAAM,CAAC;SACxC,EAAE,CAAC,QAAQ,EAAE,yBAAyB,EAAE,OAAO,CAAC,CAAC;AACtD,CAAC"}

package/dist/routes/shares.d.ts

@@ -0,0 +1,11 @@
+import type { Ctx } from "../app.js";
+import type { Router } from "../http/router.js";
+export interface Share {
+    id: string;
+    traceId: string;
+    createdMs: number;
+    expiresMs: number;
+    views: number;
+}
+export declare function shareRoutes(r: Router<Ctx>): void;
+//# sourceMappingURL=shares.d.ts.map

package/dist/routes/shares.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shares.d.ts","sourceRoot":"","sources":["../../src/routes/shares.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAGrC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAMhD,MAAM,WAAW,KAAK;IACpB,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;CACf;AAwDD,wBAAgB,WAAW,CAAC,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAKhD"}

package/dist/routes/shares.js

@@ -0,0 +1,61 @@
+import { hashToken, newId, newToken } from "../auth/crypto.js";
+import { requireProject } from "../auth/principal.js";
+import { fail, readJsonBody, sendJson, str } from "../http/http.js";
+import { audit } from "../repo/audit.js";
+import { getTrace } from "../repo/trace-read.js";
+const DAY_MS = 86_400_000;
+/** A read-only link to one trace, valid for 1 to 30 days. Only the token's hash is kept. */
+async function create(ctx) {
+    const { project, actor } = await requireProject(ctx, ctx.params.project, "write");
+    const body = await readJsonBody(ctx.req);
+    const traceId = str(body, "traceId");
+    const days = Number(body.days ?? 7);
+    if (!Number.isInteger(days) || days < 1 || days > 30)
+        fail(400, "A link lasts 1 to 30 days.");
+    if (!(await getTrace(ctx.app.db, project.id, traceId)))
+        fail(404, "Trace not found.");
+    const now = ctx.app.config.now();
+    const token = newToken("share");
+    await ctx.app.db.query("INSERT INTO shares (id, project_id, trace_id, token_hash, created_by, created_ms, expires_ms) VALUES ($1, $2, $3, $4, $5, $6, $7)", [
+        newId(),
+        project.id,
+        traceId,
+        hashToken(token),
+        actor,
+        now,
+        now + days * DAY_MS,
+    ]);
+    await audit(ctx.app.db, project.orgId, actor, "share.create", { projectId: project.id, traceId, days }, now);
+    sendJson(ctx.res, 201, { url: `${ctx.app.baseUrl(ctx.req)}/_wizelens/#/shared/${token}`, expiresMs: now + days * DAY_MS });
+}
+async function list(ctx) {
+    const { project } = await requireProject(ctx, ctx.params.project);
+    const rows = await ctx.app.db.query(`SELECT id, trace_id AS "traceId", created_ms AS "createdMs", expires_ms AS "expiresMs", views FROM shares
+     WHERE project_id = $1 AND revoked_ms IS NULL AND expires_ms > $2 ORDER BY created_ms DESC`, [project.id, ctx.app.config.now()]);
+    sendJson(ctx.res, 200, rows);
+}
+async function revoke(ctx) {
+    const { project, actor } = await requireProject(ctx, ctx.params.project, "write");
+    const now = ctx.app.config.now();
+    const rows = await ctx.app.db.query("UPDATE shares SET revoked_ms = $1 WHERE project_id = $2 AND id = $3 AND revoked_ms IS NULL RETURNING id", [now, project.id, ctx.params.id]);
+    if (rows.length === 0)
+        fail(404, "Link not found.");
+    await audit(ctx.app.db, project.orgId, actor, "share.revoke", { projectId: project.id, shareId: ctx.params.id }, now);
+    sendJson(ctx.res, 200, { ok: true });
+}
+/** Anyone with the link can read the trace while the link is valid. Nothing else is reachable with it. */
+async function open(ctx) {
+    const now = ctx.app.config.now();
+    const [row] = await ctx.app.db.query("UPDATE shares SET views = views + 1 WHERE token_hash = $1 AND revoked_ms IS NULL AND expires_ms > $2 RETURNING project_id, trace_id, expires_ms", [hashToken(ctx.params.token), now]);
+    const trace = row ? await getTrace(ctx.app.db, row.project_id, row.trace_id) : undefined;
+    if (!row || !trace)
+        return fail(404, "This link is not valid any more.");
+    sendJson(ctx.res, 200, { trace, expiresMs: row.expires_ms });
+}
+export function shareRoutes(r) {
+    r.on("POST", "api/projects/:project/shares", create)
+        .on("GET", "api/projects/:project/shares", list)
+        .on("DELETE", "api/projects/:project/shares/:id", revoke)
+        .on("GET", "api/shared/:token", open);
+}
+//# sourceMappingURL=shares.js.map

package/dist/routes/shares.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shares.js","sourceRoot":"","sources":["../../src/routes/shares.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE/D,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,iBAAiB,CAAC;AAEpE,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAEjD,MAAM,MAAM,GAAG,UAAU,CAAC;AAU1B,4FAA4F;AAC5F,KAAK,UAAU,MAAM,CAAC,GAAQ;IAC5B,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,OAAQ,EAAE,OAAO,CAAC,CAAC;IACnF,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC;IACpC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,EAAE;QAAE,IAAI,CAAC,GAAG,EAAE,4BAA4B,CAAC,CAAC;IAC9F,IAAI,CAAC,CAAC,MAAM,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QAAE,IAAI,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;IACtF,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;IACjC,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAChC,MAAM,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,mIAAmI,EAAE;QAC1J,KAAK,EAAE;QACP,OAAO,CAAC,EAAE;QACV,OAAO;QACP,SAAS,CAAC,KAAK,CAAC;QAChB,KAAK;QACL,GAAG;QACH,GAAG,GAAG,IAAI,GAAG,MAAM;KACpB,CAAC,CAAC;IACH,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;IAC7G,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,uBAAuB,KAAK,EAAE,EAAE,SAAS,EAAE,GAAG,GAAG,IAAI,GAAG,MAAM,EAAE,CAAC,CAAC;AAC7H,CAAC;AAED,KAAK,UAAU,IAAI,CAAC,GAAQ;IAC1B,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,OAAQ,CAAC,CAAC;IACnE,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CACjC;+FAC2F,EAC3F,CAAC,OAAO,CAAC,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CACnC,CAAC;IACF,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;AAC/B,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,GAAQ;IAC5B,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,OAAQ,EAAE,OAAO,CAAC,CAAC;IACnF,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;IACjC,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,yGAAyG,EAAE,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IACjL,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,IAAI,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;IACpD,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;IACtH,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;AACvC,CAAC;AAED,0GAA0G;AAC1G,KAAK,UAAU,IAAI,CAAC,GAAQ;IAC1B,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;IACjC,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAClC,iJAAiJ,EACjJ,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,KAAM,CAAC,EAAE,GAAG,CAAC,CACpC,CAAC;IACF,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACzF,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC,GAAG,EAAE,kCAAkC,CAAC,CAAC;IACzE,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,CAAc;IACxC,CAAC,CAAC,EAAE,CAAC,MAAM,EAAE,8BAA8B,EAAE,MAAM,CAAC;SACjD,EAAE,CAAC,KAAK,EAAE,8BAA8B,EAAE,IAAI,CAAC;SAC/C,EAAE,CAAC,QAAQ,EAAE,kCAAkC,EAAE,MAAM,CAAC;SACxD,EAAE,CAAC,KAAK,EAAE,mBAAmB,EAAE,IAAI,CAAC,CAAC;AAC1C,CAAC"}

package/dist/scale-exec.d.ts

@@ -0,0 +1,11 @@
+import { type Executor, type SqlRunner } from "@wizeworks/lens-core";
+import type { Queryable } from "./db/db.js";
+/** Reads for the SQL executor, on the cloud database. */
+export declare const pgRunner: (q: Queryable) => SqlRunner;
+/** How long a project's organization keeps data, in ms; `fallbackDays` when the project has no organization. */
+export declare function projectRetentionMs(q: Queryable, projectId: string, fallbackDays: number): Promise<number>;
+/** Page needs from a project's stats tables, optionally one environment. The 1 h tier keeps the organization's retention. */
+export declare function cloudExecutor(q: Queryable, projectId: string, retentionMs: number, env?: string): Executor;
+/** Traces of a project still waiting for their stats, for `pageContext(..., settling)`. Null when none. */
+export declare function cloudSettling(q: Queryable, projectId: string, env?: string): Promise<number | null>;
+//# sourceMappingURL=scale-exec.d.ts.map