@wopr-network/platform-core 0.1.0 → 1.0.0

package/.github/workflows/ci.yml

@@ -0,0 +1,43 @@
+name: CI
+
+on:
+  merge_group:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+
+permissions: {}
+
+jobs:
+  ci:
+    permissions:
+      contents: read
+      pull-requests: write
+    runs-on: [self-hosted, Linux, X64]
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: pnpm/action-setup@v4
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: "24"
+          cache: "pnpm"
+
+      - run: pnpm install --frozen-lockfile
+
+      - name: Lint and Type Check
+        run: pnpm check
+
+      - name: Build
+        run: pnpm build
+
+      - name: Test
+        run: pnpm test -- --coverage
+
+      - name: Coverage Report
+        if: github.event_name == 'pull_request'
+        uses: davelosert/vitest-coverage-report-action@v2
+        with:
+          json-summary-path: coverage/coverage-summary.json

package/.github/workflows/dependabot-auto-merge.yml

@@ -0,0 +1,11 @@
+name: Dependabot Auto-Merge
+
+on:
+  pull_request:
+    types: [opened, synchronize, reopened]
+
+jobs:
+  auto-merge:
+    uses: wopr-network/.github/.github/workflows/dependabot-auto-merge.yml@main
+    secrets: inherit
+

package/.github/workflows/publish.yml

@@ -0,0 +1,12 @@
+name: Release
+
+on:
+  push:
+    branches: [main]
+  workflow_dispatch:
+
+jobs:
+  release:
+    uses: wopr-network/.github/.github/workflows/release.yml@main
+    secrets:
+      NPM_TOKEN: ${{ secrets.NPM_TOKEN }}

package/.pr_agent.toml

@@ -0,0 +1,10 @@
+[github_app]
+pr_commands = [
+  "/describe",
+  "/review",
+  "/improve",
+]
+push_commands = [
+  "/review",
+  "/improve",
+]

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wopr-network/platform-core",
-  "version": "0.1.0",
+  "version": "1.0.0",
   "type": "module",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -45,6 +45,7 @@
     "@trpc/server": "^11.12.0",
     "@types/node": "^25.4.0",
     "@types/pg": "^8.18.0",
+    "@wopr-network/semantic-release-config": "^1.0.0",
     "better-auth": "^1.5.4",
     "drizzle-kit": "^0.31.9",
     "drizzle-orm": "^0.45.1",
@@ -60,5 +61,12 @@
     "winston": "^3.19.0",
     "zod": "^4.3.6"
   },
+  "release": {
+    "extends": "@wopr-network/semantic-release-config"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/wopr-network/platform-core.git"
+  },
   "packageManager": "pnpm@10.31.0"
 }

package/dist/email/require-verified.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/email/require-verified.test.js

@@ -1,62 +0,0 @@
-import { Hono } from "hono";
-import { beforeEach, describe, expect, it } from "vitest";
-import { requireEmailVerified } from "./require-verified.js";
-describe("requireEmailVerified middleware", () => {
-    let verifiedUsers;
-    let app;
-    beforeEach(() => {
-        verifiedUsers = new Set();
-        const middleware = requireEmailVerified({
-            isVerified: async (userId) => verifiedUsers.has(userId),
-        });
-        app = new Hono();
-        // Simulate session auth middleware setting user context
-        app.use("/test/*", async (c, next) => {
-            const authMethod = (c.req.header("X-Auth-Method") || "session");
-            const userId = c.req.header("X-User-Id") || "user-1";
-            c.set("authMethod", authMethod);
-            c.set("user", { id: userId, roles: ["user"] });
-            return next();
-        });
-        app.use("/test/*", middleware);
-        app.post("/test/create", (c) => c.json({ ok: true }));
-        // Route without auth context — use a plain Hono app for this
-        const noauthApp = new Hono();
-        noauthApp.use("/noauth/*", middleware);
-        noauthApp.post("/noauth/create", (c) => c.json({ ok: true }));
-        // Mount the noauth app into the main app
-        app.route("/", noauthApp);
-    });
-    it("should block session-authenticated users without verified email", async () => {
-        const res = await app.request("/test/create", {
-            method: "POST",
-            headers: { "X-Auth-Method": "session", "X-User-Id": "user-1" },
-        });
-        expect(res.status).toBe(403);
-        const body = await res.json();
-        expect(body.code).toBe("EMAIL_NOT_VERIFIED");
-    });
-    it("should allow session-authenticated users with verified email", async () => {
-        verifiedUsers.add("user-1");
-        const res = await app.request("/test/create", {
-            method: "POST",
-            headers: { "X-Auth-Method": "session", "X-User-Id": "user-1" },
-        });
-        expect(res.status).toBe(200);
-        const body = await res.json();
-        expect(body.ok).toBe(true);
-    });
-    it("should always allow API token auth", async () => {
-        const res = await app.request("/test/create", {
-            method: "POST",
-            headers: { "X-Auth-Method": "api_key", "X-User-Id": "token:write" },
-        });
-        expect(res.status).toBe(200);
-        const body = await res.json();
-        expect(body.ok).toBe(true);
-    });
-    it("should pass through when no auth context is set", async () => {
-        const res = await app.request("/noauth/create", { method: "POST" });
-        expect(res.status).toBe(200);
-    });
-});