axvault 1.13.0 → 1.14.0

package/dist/db/repositories/api-key-utilities.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api-key-utilities.d.ts","sourceRoot":"","sources":["../../../src/db/repositories/api-key-utilities.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAOH,gCAAgC;AAChC,iBAAS,aAAa,IAAI,MAAM,CAE/B;AAED,oCAAoC;AACpC,iBAAS,iBAAiB,IAAI,MAAM,CAEnC;AAED,kCAAkC;AAClC,iBAAS,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEvC;AAED,6EAA6E;AAC7E,iBAAS,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAG7C;AAED,4CAA4C;AAC5C,UAAU,WAAW;IACnB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAOD,uDAAuD;AACvD,iBAAS,aAAa,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAEjE;AAED,wDAAwD;AACxD,iBAAS,cAAc,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAElE;AAED,wDAAwD;AACxD,iBAAS,cAAc,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAElE;AAED,OAAO,EACL,gBAAgB,EAChB,aAAa,EACb,iBAAiB,EACjB,UAAU,EACV,cAAc,EACd,aAAa,EACb,cAAc,GACf,CAAC"}
+{"version":3,"file":"api-key-utilities.d.ts","sourceRoot":"","sources":["../../../src/db/repositories/api-key-utilities.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAQH,gCAAgC;AAChC,iBAAS,aAAa,IAAI,MAAM,CAE/B;AAOD,6EAA6E;AAC7E,iBAAS,mBAAmB,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,CAYjD;AAED,kCAAkC;AAClC,iBAAS,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEvC;AAED,6EAA6E;AAC7E,iBAAS,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAG7C;AAED,4CAA4C;AAC5C,UAAU,WAAW;IACnB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAOD,uDAAuD;AACvD,iBAAS,aAAa,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAEjE;AAED,wDAAwD;AACxD,iBAAS,cAAc,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAElE;AAED,wDAAwD;AACxD,iBAAS,cAAc,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAElE;AAED,OAAO,EACL,gBAAgB,EAChB,aAAa,EACb,UAAU,EACV,cAAc,EACd,aAAa,EACb,cAAc,EACd,mBAAmB,GACpB,CAAC"}

package/dist/db/repositories/api-key-utilities.js

@@ -6,6 +6,7 @@
 import { createHash, randomBytes } from "node:crypto";
 /** Key prefix for identification (e.g., "axv_sk_01234567") */
 const KEY_PREFIX_LENGTH = 8;
+const API_KEY_SECRET_PATTERN = /^axv_sk_[0-9a-f]{32}$/u;
 /** Generate a new API key ID */
 function generateKeyId() {
     return `k_${randomBytes(6).toString("hex")}`;
@@ -14,6 +15,16 @@ function generateKeyId() {
 function generateKeySecret() {
     return `axv_sk_${randomBytes(16).toString("hex")}`;
 }
+/** Generate or validate an API key secret for deterministic provisioning. */
+function resolveApiKeySecret(key) {
+    if (key === undefined) {
+        return generateKeySecret();
+    }
+    if (!API_KEY_SECRET_PATTERN.test(key)) {
+        throw new Error("Invalid API key secret: expected axv_sk_ followed by 32 lowercase hexadecimal characters.");
+    }
+    return key;
+}
 /** Hash an API key for storage */
 function hashApiKey(key) {
     return createHash("sha256").update(key).digest("hex");
@@ -39,5 +50,5 @@ function hasWriteAccess(apiKey, name) {
 function hasGrantAccess(apiKey, name) {
     return hasAccess(apiKey.grantAccess, name);
 }
-export { extractKeyPrefix, generateKeyId, generateKeySecret, hashApiKey, hasGrantAccess, hasReadAccess, hasWriteAccess, };
+export { extractKeyPrefix, generateKeyId, hashApiKey, hasGrantAccess, hasReadAccess, hasWriteAccess, resolveApiKeySecret, };
 //# sourceMappingURL=api-key-utilities.js.map

package/dist/db/repositories/api-key-utilities.js.map

@@ -1 +1 @@
-{"version":3,"file":"api-key-utilities.js","sourceRoot":"","sources":["../../../src/db/repositories/api-key-utilities.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAEtD,8DAA8D;AAC9D,MAAM,iBAAiB,GAAG,CAAC,CAAC;AAE5B,gCAAgC;AAChC,SAAS,aAAa;IACpB,OAAO,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;AAC/C,CAAC;AAED,oCAAoC;AACpC,SAAS,iBAAiB;IACxB,OAAO,UAAU,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;AACrD,CAAC;AAED,kCAAkC;AAClC,SAAS,UAAU,CAAC,GAAW;IAC7B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACxD,CAAC;AAED,6EAA6E;AAC7E,SAAS,gBAAgB,CAAC,GAAW;IACnC,qCAAqC;IACrC,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,iBAAiB,CAAC,CAAC,CAAC,0BAA0B;AACxE,CAAC;AASD,8DAA8D;AAC9D,SAAS,SAAS,CAAC,UAAoB,EAAE,IAAY;IACnD,OAAO,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAC/D,CAAC;AAED,uDAAuD;AACvD,SAAS,aAAa,CAAC,MAAmB,EAAE,IAAY;IACtD,OAAO,SAAS,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;AAC5C,CAAC;AAED,wDAAwD;AACxD,SAAS,cAAc,CAAC,MAAmB,EAAE,IAAY;IACvD,OAAO,SAAS,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;AAC7C,CAAC;AAED,wDAAwD;AACxD,SAAS,cAAc,CAAC,MAAmB,EAAE,IAAY;IACvD,OAAO,SAAS,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;AAC7C,CAAC;AAED,OAAO,EACL,gBAAgB,EAChB,aAAa,EACb,iBAAiB,EACjB,UAAU,EACV,cAAc,EACd,aAAa,EACb,cAAc,GACf,CAAC"}
+{"version":3,"file":"api-key-utilities.js","sourceRoot":"","sources":["../../../src/db/repositories/api-key-utilities.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAEtD,8DAA8D;AAC9D,MAAM,iBAAiB,GAAG,CAAC,CAAC;AAC5B,MAAM,sBAAsB,GAAG,wBAAwB,CAAC;AAExD,gCAAgC;AAChC,SAAS,aAAa;IACpB,OAAO,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;AAC/C,CAAC;AAED,oCAAoC;AACpC,SAAS,iBAAiB;IACxB,OAAO,UAAU,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;AACrD,CAAC;AAED,6EAA6E;AAC7E,SAAS,mBAAmB,CAAC,GAAY;IACvC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,OAAO,iBAAiB,EAAE,CAAC;IAC7B,CAAC;IAED,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CACb,2FAA2F,CAC5F,CAAC;IACJ,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED,kCAAkC;AAClC,SAAS,UAAU,CAAC,GAAW;IAC7B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACxD,CAAC;AAED,6EAA6E;AAC7E,SAAS,gBAAgB,CAAC,GAAW;IACnC,qCAAqC;IACrC,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,iBAAiB,CAAC,CAAC,CAAC,0BAA0B;AACxE,CAAC;AASD,8DAA8D;AAC9D,SAAS,SAAS,CAAC,UAAoB,EAAE,IAAY;IACnD,OAAO,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAC/D,CAAC;AAED,uDAAuD;AACvD,SAAS,aAAa,CAAC,MAAmB,EAAE,IAAY;IACtD,OAAO,SAAS,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;AAC5C,CAAC;AAED,wDAAwD;AACxD,SAAS,cAAc,CAAC,MAAmB,EAAE,IAAY;IACvD,OAAO,SAAS,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;AAC7C,CAAC;AAED,wDAAwD;AACxD,SAAS,cAAc,CAAC,MAAmB,EAAE,IAAY;IACvD,OAAO,SAAS,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;AAC7C,CAAC;AAED,OAAO,EACL,gBAAgB,EAChB,aAAa,EACb,UAAU,EACV,cAAc,EACd,aAAa,EACb,cAAc,EACd,mBAAmB,GACpB,CAAC"}

package/dist/db/repositories/api-keys.d.ts

@@ -11,13 +11,15 @@ declare function findApiKeyByKey(database: Queryable, key: string): Promise<ApiK
 declare function findApiKeyById(database: Queryable, id: string): Promise<ApiKeyRecord | undefined>;
 /** List all API keys (without revealing the raw key values) */
 declare function listApiKeys(database: Queryable): Promise<ApiKeyRecord[]>;
+/** Count API keys without loading full records. */
+declare function countApiKeys(database: Queryable): Promise<number>;
 /** Update last used timestamp */
 declare function updateLastUsed(database: Queryable, id: string): Promise<void>;
 /** Delete an API key */
 declare function deleteApiKey(database: Queryable, id: string): Promise<boolean>;
-export { deleteApiKey, findApiKeyById, findApiKeyByKey, listApiKeys, updateLastUsed, };
+export { countApiKeys, deleteApiKey, findApiKeyById, findApiKeyByKey, listApiKeys, updateLastUsed, };
 export { createApiKey } from "./create-api-key.js";
-export { hasGrantAccess, hasReadAccess, hasWriteAccess, } from "./api-key-utilities.js";
+export { hasGrantAccess, hasReadAccess, hasWriteAccess, resolveApiKeySecret, } from "./api-key-utilities.js";
 export { updateApiKeyAccess } from "./update-api-key-access.js";
 export type { ApiKeyRecord, ApiKeyWithSecret } from "./create-api-key.js";
 //# sourceMappingURL=api-keys.d.ts.map

package/dist/db/repositories/api-keys.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api-keys.d.ts","sourceRoot":"","sources":["../../../src/db/repositories/api-keys.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAa,SAAS,EAAE,MAAM,aAAa,CAAC;AAExD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAmBxD,oCAAoC;AACpC,iBAAe,eAAe,CAC5B,QAAQ,EAAE,SAAS,EACnB,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CAOnC;AAED,yBAAyB;AACzB,iBAAe,cAAc,CAC3B,QAAQ,EAAE,SAAS,EACnB,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CAOnC;AAED,+DAA+D;AAC/D,iBAAe,WAAW,CAAC,QAAQ,EAAE,SAAS,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAKvE;AAED,iCAAiC;AACjC,iBAAe,cAAc,CAAC,QAAQ,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAK5E;AAED,wBAAwB;AACxB,iBAAe,YAAY,CAAC,QAAQ,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAK7E;AAED,OAAO,EACL,YAAY,EACZ,cAAc,EACd,eAAe,EACf,WAAW,EACX,cAAc,GACf,CAAC;AACF,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EACL,cAAc,EACd,aAAa,EACb,cAAc,GACf,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,YAAY,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC"}
+{"version":3,"file":"api-keys.d.ts","sourceRoot":"","sources":["../../../src/db/repositories/api-keys.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAa,SAAS,EAAE,MAAM,aAAa,CAAC;AAExD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAmBxD,oCAAoC;AACpC,iBAAe,eAAe,CAC5B,QAAQ,EAAE,SAAS,EACnB,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CAOnC;AAED,yBAAyB;AACzB,iBAAe,cAAc,CAC3B,QAAQ,EAAE,SAAS,EACnB,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CAOnC;AAED,+DAA+D;AAC/D,iBAAe,WAAW,CAAC,QAAQ,EAAE,SAAS,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAKvE;AAED,mDAAmD;AACnD,iBAAe,YAAY,CAAC,QAAQ,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAKhE;AAED,iCAAiC;AACjC,iBAAe,cAAc,CAAC,QAAQ,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAK5E;AAED,wBAAwB;AACxB,iBAAe,YAAY,CAAC,QAAQ,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAK7E;AAED,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,cAAc,EACd,eAAe,EACf,WAAW,EACX,cAAc,GACf,CAAC;AACF,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EACL,cAAc,EACd,aAAa,EACb,cAAc,EACd,mBAAmB,GACpB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,YAAY,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC"}

package/dist/db/repositories/api-keys.js

@@ -36,6 +36,11 @@ async function listApiKeys(database) {
     const result = await database.query(`SELECT ${SELECT_COLUMNS} FROM api_keys ORDER BY created_at DESC`);
     return result.rows.map((row) => rowToRecord(row));
 }
+/** Count API keys without loading full records. */
+async function countApiKeys(database) {
+    const result = await database.query("SELECT COUNT(*)::int AS count FROM api_keys");
+    return result.rows[0]?.count ?? 0;
+}
 /** Update last used timestamp */
 async function updateLastUsed(database, id) {
     await database.query(`UPDATE api_keys SET last_used_at = $1 WHERE id = $2`, [
@@ -50,8 +55,8 @@ async function deleteApiKey(database, id) {
     ]);
     return (result.rowCount ?? 0) > 0;
 }
-export { deleteApiKey, findApiKeyById, findApiKeyByKey, listApiKeys, updateLastUsed, };
+export { countApiKeys, deleteApiKey, findApiKeyById, findApiKeyByKey, listApiKeys, updateLastUsed, };
 export { createApiKey } from "./create-api-key.js";
-export { hasGrantAccess, hasReadAccess, hasWriteAccess, } from "./api-key-utilities.js";
+export { hasGrantAccess, hasReadAccess, hasWriteAccess, resolveApiKeySecret, } from "./api-key-utilities.js";
 export { updateApiKeyAccess } from "./update-api-key-access.js";
 //# sourceMappingURL=api-keys.js.map

package/dist/db/repositories/api-keys.js.map

@@ -1 +1 @@
-{"version":3,"file":"api-keys.js","sourceRoot":"","sources":["../../../src/db/repositories/api-keys.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAGpD,qCAAqC;AACrC,SAAS,WAAW,CAAC,GAAc;IACjC,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,SAAS,EAAE,GAAG,CAAC,UAAU,IAAI,SAAS;QACtC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAa;QACnD,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAa;QACrD,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAa;QACrD,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC;QACnC,UAAU,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS;KACtE,CAAC;AACJ,CAAC;AAED,MAAM,cAAc,GAAG,mGAAmG,CAAC;AAE3H,oCAAoC;AACpC,KAAK,UAAU,eAAe,CAC5B,QAAmB,EACnB,GAAW;IAEX,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,KAAK,CACjC,UAAU,cAAc,oCAAoC,EAC5D,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAClB,CAAC;IACF,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3B,OAAO,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC5C,CAAC;AAED,yBAAyB;AACzB,KAAK,UAAU,cAAc,CAC3B,QAAmB,EACnB,EAAU;IAEV,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,KAAK,CACjC,UAAU,cAAc,8BAA8B,EACtD,CAAC,EAAE,CAAC,CACL,CAAC;IACF,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3B,OAAO,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC5C,CAAC;AAED,+DAA+D;AAC/D,KAAK,UAAU,WAAW,CAAC,QAAmB;IAC5C,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,KAAK,CACjC,UAAU,cAAc,yCAAyC,CAClE,CAAC;IACF,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;AACpD,CAAC;AAED,iCAAiC;AACjC,KAAK,UAAU,cAAc,CAAC,QAAmB,EAAE,EAAU;IAC3D,MAAM,QAAQ,CAAC,KAAK,CAAC,qDAAqD,EAAE;QAC1E,IAAI,CAAC,GAAG,EAAE;QACV,EAAE;KACH,CAAC,CAAC;AACL,CAAC;AAED,wBAAwB;AACxB,KAAK,UAAU,YAAY,CAAC,QAAmB,EAAE,EAAU;IACzD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,oCAAoC,EAAE;QACxE,EAAE;KACH,CAAC,CAAC;IACH,OAAO,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;AACpC,CAAC;AAED,OAAO,EACL,YAAY,EACZ,cAAc,EACd,eAAe,EACf,WAAW,EACX,cAAc,GACf,CAAC;AACF,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EACL,cAAc,EACd,aAAa,EACb,cAAc,GACf,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC"}
+{"version":3,"file":"api-keys.js","sourceRoot":"","sources":["../../../src/db/repositories/api-keys.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAGpD,qCAAqC;AACrC,SAAS,WAAW,CAAC,GAAc;IACjC,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,SAAS,EAAE,GAAG,CAAC,UAAU,IAAI,SAAS;QACtC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAa;QACnD,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAa;QACrD,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAa;QACrD,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC;QACnC,UAAU,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS;KACtE,CAAC;AACJ,CAAC;AAED,MAAM,cAAc,GAAG,mGAAmG,CAAC;AAE3H,oCAAoC;AACpC,KAAK,UAAU,eAAe,CAC5B,QAAmB,EACnB,GAAW;IAEX,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,KAAK,CACjC,UAAU,cAAc,oCAAoC,EAC5D,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAClB,CAAC;IACF,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3B,OAAO,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC5C,CAAC;AAED,yBAAyB;AACzB,KAAK,UAAU,cAAc,CAC3B,QAAmB,EACnB,EAAU;IAEV,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,KAAK,CACjC,UAAU,cAAc,8BAA8B,EACtD,CAAC,EAAE,CAAC,CACL,CAAC;IACF,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3B,OAAO,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC5C,CAAC;AAED,+DAA+D;AAC/D,KAAK,UAAU,WAAW,CAAC,QAAmB;IAC5C,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,KAAK,CACjC,UAAU,cAAc,yCAAyC,CAClE,CAAC;IACF,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;AACpD,CAAC;AAED,mDAAmD;AACnD,KAAK,UAAU,YAAY,CAAC,QAAmB;IAC7C,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,KAAK,CACjC,6CAA6C,CAC9C,CAAC;IACF,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC;AACpC,CAAC;AAED,iCAAiC;AACjC,KAAK,UAAU,cAAc,CAAC,QAAmB,EAAE,EAAU;IAC3D,MAAM,QAAQ,CAAC,KAAK,CAAC,qDAAqD,EAAE;QAC1E,IAAI,CAAC,GAAG,EAAE;QACV,EAAE;KACH,CAAC,CAAC;AACL,CAAC;AAED,wBAAwB;AACxB,KAAK,UAAU,YAAY,CAAC,QAAmB,EAAE,EAAU;IACzD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,oCAAoC,EAAE;QACxE,EAAE;KACH,CAAC,CAAC;IACH,OAAO,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;AACpC,CAAC;AAED,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,cAAc,EACd,eAAe,EACf,WAAW,EACX,cAAc,GACf,CAAC;AACF,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EACL,cAAc,EACd,aAAa,EACb,cAAc,EACd,mBAAmB,GACpB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC"}

package/dist/db/repositories/create-api-key.d.ts

@@ -24,6 +24,7 @@ declare function createApiKey(database: Queryable, options: {
     readAccess: string[];
     writeAccess: string[];
     grantAccess: string[];
+    key?: string;
 }): Promise<ApiKeyWithSecret>;
 export { createApiKey };
 export type { ApiKeyRecord, ApiKeyWithSecret };

package/dist/db/repositories/create-api-key.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create-api-key.d.ts","sourceRoot":"","sources":["../../../src/db/repositories/create-api-key.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAQ7C,sCAAsC;AACtC,UAAU,YAAY;IACpB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,SAAS,EAAE,IAAI,CAAC;IAChB,UAAU,EAAE,IAAI,GAAG,SAAS,CAAC;CAC9B;AAED,2DAA2D;AAC3D,UAAU,gBAAiB,SAAQ,YAAY;IAC7C,GAAG,EAAE,MAAM,CAAC;CACb;AAED,2BAA2B;AAC3B,iBAAe,YAAY,CACzB,QAAQ,EAAE,SAAS,EACnB,OAAO,EAAE;IACP,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB,GACA,OAAO,CAAC,gBAAgB,CAAC,CAkC3B;AAED,OAAO,EAAE,YAAY,EAAE,CAAC;AACxB,YAAY,EAAE,YAAY,EAAE,gBAAgB,EAAE,CAAC"}
+{"version":3,"file":"create-api-key.d.ts","sourceRoot":"","sources":["../../../src/db/repositories/create-api-key.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAQ7C,sCAAsC;AACtC,UAAU,YAAY;IACpB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,SAAS,EAAE,IAAI,CAAC;IAChB,UAAU,EAAE,IAAI,GAAG,SAAS,CAAC;CAC9B;AAED,2DAA2D;AAC3D,UAAU,gBAAiB,SAAQ,YAAY;IAC7C,GAAG,EAAE,MAAM,CAAC;CACb;AAED,2BAA2B;AAC3B,iBAAe,YAAY,CACzB,QAAQ,EAAE,SAAS,EACnB,OAAO,EAAE;IACP,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,GACA,OAAO,CAAC,gBAAgB,CAAC,CAkC3B;AAED,OAAO,EAAE,YAAY,EAAE,CAAC;AACxB,YAAY,EAAE,YAAY,EAAE,gBAAgB,EAAE,CAAC"}

package/dist/db/repositories/create-api-key.js

@@ -1,11 +1,11 @@
 /**
  * Create a new API key.
  */
-import { extractKeyPrefix, generateKeyId, generateKeySecret, hashApiKey, } from "./api-key-utilities.js";
+import { extractKeyPrefix, generateKeyId, hashApiKey, resolveApiKeySecret, } from "./api-key-utilities.js";
 /** Create a new API key */
 async function createApiKey(database, options) {
     const id = generateKeyId();
-    const key = generateKeySecret();
+    const key = resolveApiKeySecret(options.key);
     const keyHash = hashApiKey(key);
     const keyPrefix = extractKeyPrefix(key);
     const now = Date.now();

package/dist/db/repositories/create-api-key.js.map

@@ -1 +1 @@
-{"version":3,"file":"create-api-key.js","sourceRoot":"","sources":["../../../src/db/repositories/create-api-key.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,EACL,gBAAgB,EAChB,aAAa,EACb,iBAAiB,EACjB,UAAU,GACX,MAAM,wBAAwB,CAAC;AAoBhC,2BAA2B;AAC3B,KAAK,UAAU,YAAY,CACzB,QAAmB,EACnB,OAKC;IAED,MAAM,EAAE,GAAG,aAAa,EAAE,CAAC;IAC3B,MAAM,GAAG,GAAG,iBAAiB,EAAE,CAAC;IAChC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,SAAS,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAEvB,MAAM,QAAQ,CAAC,KAAK,CAClB;6CACyC,EACzC;QACE,EAAE;QACF,OAAO,CAAC,IAAI;QACZ,OAAO;QACP,SAAS;QACT,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC;QAClC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC;QACnC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC;QACnC,GAAG;KACJ,CACF,CAAC;IAEF,OAAO;QACL,EAAE;QACF,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,GAAG;QACH,OAAO;QACP,SAAS;QACT,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC;QACxB,UAAU,EAAE,SAAS;KACtB,CAAC;AACJ,CAAC;AAED,OAAO,EAAE,YAAY,EAAE,CAAC"}
+{"version":3,"file":"create-api-key.js","sourceRoot":"","sources":["../../../src/db/repositories/create-api-key.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,EACL,gBAAgB,EAChB,aAAa,EACb,UAAU,EACV,mBAAmB,GACpB,MAAM,wBAAwB,CAAC;AAoBhC,2BAA2B;AAC3B,KAAK,UAAU,YAAY,CACzB,QAAmB,EACnB,OAMC;IAED,MAAM,EAAE,GAAG,aAAa,EAAE,CAAC;IAC3B,MAAM,GAAG,GAAG,mBAAmB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC7C,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,SAAS,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAEvB,MAAM,QAAQ,CAAC,KAAK,CAClB;6CACyC,EACzC;QACE,EAAE;QACF,OAAO,CAAC,IAAI;QACZ,OAAO;QACP,SAAS;QACT,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC;QAClC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC;QACnC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC;QACnC,GAAG;KACJ,CACF,CAAC;IAEF,OAAO;QACL,EAAE;QACF,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,GAAG;QACH,OAAO;QACP,SAAS;QACT,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC;QACxB,UAAU,EAAE,SAAS;KACtB,CAAC;AACJ,CAAC;AAED,OAAO,EAAE,YAAY,EAAE,CAAC"}

package/dist/db/verify-database-initialization.d.ts

@@ -0,0 +1,4 @@
+import type { Queryable } from "./types.js";
+declare function verifyDatabaseInitialization(database: Queryable): Promise<void>;
+export { verifyDatabaseInitialization };
+//# sourceMappingURL=verify-database-initialization.d.ts.map

package/dist/db/verify-database-initialization.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify-database-initialization.d.ts","sourceRoot":"","sources":["../../src/db/verify-database-initialization.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAwB5C,iBAAe,4BAA4B,CACzC,QAAQ,EAAE,SAAS,GAClB,OAAO,CAAC,IAAI,CAAC,CAsDf;AAED,OAAO,EAAE,4BAA4B,EAAE,CAAC"}

package/dist/db/verify-database-initialization.js

@@ -0,0 +1,66 @@
+const REQUIRED_CREDENTIAL_COLUMNS = [
+    "name",
+    "agent",
+    "provider",
+    "display_name",
+    "notes",
+    "encrypted_data",
+    "salt",
+    "iv",
+    "auth_tag",
+    "created_at",
+    "updated_at",
+];
+async function verifyDatabaseInitialization(database) {
+    const result = await database.query(`
+    SELECT
+      to_regclass('api_keys') IS NOT NULL AS has_api_keys,
+      to_regclass('credentials') IS NOT NULL AS has_credentials,
+      to_regclass('audit_log') IS NOT NULL AS has_audit_log,
+      EXISTS (
+        SELECT 1
+        FROM information_schema.columns
+        WHERE table_schema = current_schema()
+          AND table_name = 'audit_log'
+          AND column_name = 'detail'
+      ) AS has_audit_log_detail,
+      COALESCE(
+        ARRAY(
+          SELECT column_name
+          FROM information_schema.columns
+          WHERE table_schema = current_schema()
+            AND table_name = 'credentials'
+        ),
+        ARRAY[]::text[]
+      ) AS credential_columns
+  `);
+    const status = result.rows[0];
+    if (!status) {
+        throw new Error("Failed to inspect database schema.");
+    }
+    const missingParts = [];
+    if (!status.has_api_keys) {
+        missingParts.push("table api_keys");
+    }
+    if (status.has_credentials) {
+        for (const column of REQUIRED_CREDENTIAL_COLUMNS) {
+            if (!status.credential_columns.includes(column)) {
+                missingParts.push(`column credentials.${column}`);
+            }
+        }
+    }
+    else {
+        missingParts.push("table credentials");
+    }
+    if (!status.has_audit_log) {
+        missingParts.push("table audit_log");
+    }
+    else if (!status.has_audit_log_detail) {
+        missingParts.push("column audit_log.detail");
+    }
+    if (missingParts.length > 0) {
+        throw new Error(`Database schema is missing ${missingParts.join(", ")}.`);
+    }
+}
+export { verifyDatabaseInitialization };
+//# sourceMappingURL=verify-database-initialization.js.map

package/dist/db/verify-database-initialization.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify-database-initialization.js","sourceRoot":"","sources":["../../src/db/verify-database-initialization.ts"],"names":[],"mappings":"AAUA,MAAM,2BAA2B,GAAG;IAClC,MAAM;IACN,OAAO;IACP,UAAU;IACV,cAAc;IACd,OAAO;IACP,gBAAgB;IAChB,MAAM;IACN,IAAI;IACJ,UAAU;IACV,YAAY;IACZ,YAAY;CACJ,CAAC;AAEX,KAAK,UAAU,4BAA4B,CACzC,QAAmB;IAEnB,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,KAAK,CAA0B;;;;;;;;;;;;;;;;;;;;;GAqB5D,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC9B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACxD,CAAC;IAED,MAAM,YAAY,GAAa,EAAE,CAAC;IAElC,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;QACzB,YAAY,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACtC,CAAC;IAED,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;QAC3B,KAAK,MAAM,MAAM,IAAI,2BAA2B,EAAE,CAAC;YACjD,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBAChD,YAAY,CAAC,IAAI,CAAC,sBAAsB,MAAM,EAAE,CAAC,CAAC;YACpD,CAAC;QACH,CAAC;IACH,CAAC;SAAM,CAAC;QACN,YAAY,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IACzC,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;QAC1B,YAAY,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACvC,CAAC;SAAM,IAAI,CAAC,MAAM,CAAC,oBAAoB,EAAE,CAAC;QACxC,YAAY,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IAC/C,CAAC;IAED,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,8BAA8B,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5E,CAAC;AACH,CAAC;AAED,OAAO,EAAE,4BAA4B,EAAE,CAAC"}

package/dist/index.d.ts

@@ -7,6 +7,8 @@
  */
 export type { ServerConfig } from "./config.js";
 export type { BuildAppConfig } from "./config.js";
+export { createConfigData, resolveBuildAppConfig, serverConfigSchema, } from "./config.js";
+export { resolveDatabaseUrl } from "./resolve-database-url.js";
 export { buildApp } from "./server/server.js";
 export { default as configPlugin } from "./server/plugins/config.js";
 export { default as databasePlugin } from "./server/plugins/database.js";
@@ -15,10 +17,10 @@ export { default as healthRoutes } from "./server/routes/health.js";
 export { default as credentialRoutes } from "./server/routes/credentials.js";
 export { default as keyRoutes } from "./server/routes/keys.js";
 export { runMigrations } from "./db/run-migrations.js";
-export { bootstrapApiKey } from "./db/bootstrap-api-key.js";
+export { closePool, createPool } from "./db/create-pool.js";
 export type { Queryable } from "./db/types.js";
 export type { ApiKeyRecord, ApiKeyWithSecret, } from "./db/repositories/api-keys.js";
-export { createApiKey, deleteApiKey, findApiKeyById, findApiKeyByKey, hasGrantAccess, hasReadAccess, hasWriteAccess, listApiKeys, updateApiKeyAccess, updateLastUsed, } from "./db/repositories/api-keys.js";
+export { countApiKeys, createApiKey, deleteApiKey, findApiKeyById, findApiKeyByKey, hasGrantAccess, hasReadAccess, hasWriteAccess, listApiKeys, resolveApiKeySecret, updateApiKeyAccess, updateLastUsed, } from "./db/repositories/api-keys.js";
 export type { AuditLogEntry } from "./db/repositories/audit-log.js";
 export { getLogsForCredential, getRecentLogs, logAccess, pruneOldLogs, } from "./db/repositories/audit-log.js";
 export type { CredentialMetadata, CredentialRecord, } from "./db/repositories/credentials.js";

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,YAAY,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,YAAY,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAG9C,OAAO,EAAE,OAAO,IAAI,YAAY,EAAE,MAAM,4BAA4B,CAAC;AACrE,OAAO,EAAE,OAAO,IAAI,cAAc,EAAE,MAAM,8BAA8B,CAAC;AACzE,OAAO,EAAE,OAAO,IAAI,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAGjE,OAAO,EAAE,OAAO,IAAI,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,EAAE,OAAO,IAAI,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAC7E,OAAO,EAAE,OAAO,IAAI,SAAS,EAAE,MAAM,yBAAyB,CAAC;AAG/D,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,YAAY,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAG/C,YAAY,EACV,YAAY,EACZ,gBAAgB,GACjB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,cAAc,EACd,eAAe,EACf,cAAc,EACd,aAAa,EACb,cAAc,EACd,WAAW,EACX,kBAAkB,EAClB,cAAc,GACf,MAAM,+BAA+B,CAAC;AACvC,YAAY,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AACpE,OAAO,EACL,oBAAoB,EACpB,aAAa,EACb,SAAS,EACT,YAAY,GACb,MAAM,gCAAgC,CAAC;AACxC,YAAY,EACV,kBAAkB,EAClB,gBAAgB,GACjB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,gBAAgB,EAChB,aAAa,EACb,eAAe,EACf,wBAAwB,EACxB,wBAAwB,EACxB,gBAAgB,GACjB,MAAM,kCAAkC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,YAAY,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,YAAY,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EACL,gBAAgB,EAChB,qBAAqB,EACrB,kBAAkB,GACnB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAG9C,OAAO,EAAE,OAAO,IAAI,YAAY,EAAE,MAAM,4BAA4B,CAAC;AACrE,OAAO,EAAE,OAAO,IAAI,cAAc,EAAE,MAAM,8BAA8B,CAAC;AACzE,OAAO,EAAE,OAAO,IAAI,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAGjE,OAAO,EAAE,OAAO,IAAI,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,EAAE,OAAO,IAAI,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAC7E,OAAO,EAAE,OAAO,IAAI,SAAS,EAAE,MAAM,yBAAyB,CAAC;AAG/D,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAC5D,YAAY,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAG/C,YAAY,EACV,YAAY,EACZ,gBAAgB,GACjB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,YAAY,EACZ,cAAc,EACd,eAAe,EACf,cAAc,EACd,aAAa,EACb,cAAc,EACd,WAAW,EACX,mBAAmB,EACnB,kBAAkB,EAClB,cAAc,GACf,MAAM,+BAA+B,CAAC;AACvC,YAAY,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AACpE,OAAO,EACL,oBAAoB,EACpB,aAAa,EACb,SAAS,EACT,YAAY,GACb,MAAM,gCAAgC,CAAC;AACxC,YAAY,EACV,kBAAkB,EAClB,gBAAgB,GACjB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,gBAAgB,EAChB,aAAa,EACb,eAAe,EACf,wBAAwB,EACxB,wBAAwB,EACxB,gBAAgB,GACjB,MAAM,kCAAkC,CAAC"}

package/dist/index.js

@@ -5,6 +5,8 @@
  * The legacy createServer/createPool surface was intentionally removed; build
  * the app with `buildApp()` plus the exported Fastify plugins instead.
  */
+export { createConfigData, resolveBuildAppConfig, serverConfigSchema, } from "./config.js";
+export { resolveDatabaseUrl } from "./resolve-database-url.js";
 export { buildApp } from "./server/server.js";
 // Plugins
 export { default as configPlugin } from "./server/plugins/config.js";
@@ -16,8 +18,8 @@ export { default as credentialRoutes } from "./server/routes/credentials.js";
 export { default as keyRoutes } from "./server/routes/keys.js";
 // Database
 export { runMigrations } from "./db/run-migrations.js";
-export { bootstrapApiKey } from "./db/bootstrap-api-key.js";
-export { createApiKey, deleteApiKey, findApiKeyById, findApiKeyByKey, hasGrantAccess, hasReadAccess, hasWriteAccess, listApiKeys, updateApiKeyAccess, updateLastUsed, } from "./db/repositories/api-keys.js";
+export { closePool, createPool } from "./db/create-pool.js";
+export { countApiKeys, createApiKey, deleteApiKey, findApiKeyById, findApiKeyByKey, hasGrantAccess, hasReadAccess, hasWriteAccess, listApiKeys, resolveApiKeySecret, updateApiKeyAccess, updateLastUsed, } from "./db/repositories/api-keys.js";
 export { getLogsForCredential, getRecentLogs, logAccess, pruneOldLogs, } from "./db/repositories/audit-log.js";
 export { deleteCredential, getCredential, listCredentials, listCredentialsForApiKey, listCredentialsPaginated, upsertCredential, } from "./db/repositories/credentials.js";
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAE9C,UAAU;AACV,OAAO,EAAE,OAAO,IAAI,YAAY,EAAE,MAAM,4BAA4B,CAAC;AACrE,OAAO,EAAE,OAAO,IAAI,cAAc,EAAE,MAAM,8BAA8B,CAAC;AACzE,OAAO,EAAE,OAAO,IAAI,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAEjE,gBAAgB;AAChB,OAAO,EAAE,OAAO,IAAI,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,EAAE,OAAO,IAAI,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAC7E,OAAO,EAAE,OAAO,IAAI,SAAS,EAAE,MAAM,yBAAyB,CAAC;AAE/D,WAAW;AACX,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAQ5D,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,cAAc,EACd,eAAe,EACf,cAAc,EACd,aAAa,EACb,cAAc,EACd,WAAW,EACX,kBAAkB,EAClB,cAAc,GACf,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EACL,oBAAoB,EACpB,aAAa,EACb,SAAS,EACT,YAAY,GACb,MAAM,gCAAgC,CAAC;AAKxC,OAAO,EACL,gBAAgB,EAChB,aAAa,EACb,eAAe,EACf,wBAAwB,EACxB,wBAAwB,EACxB,gBAAgB,GACjB,MAAM,kCAAkC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,OAAO,EACL,gBAAgB,EAChB,qBAAqB,EACrB,kBAAkB,GACnB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAE9C,UAAU;AACV,OAAO,EAAE,OAAO,IAAI,YAAY,EAAE,MAAM,4BAA4B,CAAC;AACrE,OAAO,EAAE,OAAO,IAAI,cAAc,EAAE,MAAM,8BAA8B,CAAC;AACzE,OAAO,EAAE,OAAO,IAAI,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAEjE,gBAAgB;AAChB,OAAO,EAAE,OAAO,IAAI,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,EAAE,OAAO,IAAI,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAC7E,OAAO,EAAE,OAAO,IAAI,SAAS,EAAE,MAAM,yBAAyB,CAAC;AAE/D,WAAW;AACX,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAQ5D,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,YAAY,EACZ,cAAc,EACd,eAAe,EACf,cAAc,EACd,aAAa,EACb,cAAc,EACd,WAAW,EACX,mBAAmB,EACnB,kBAAkB,EAClB,cAAc,GACf,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EACL,oBAAoB,EACpB,aAAa,EACb,SAAS,EACT,YAAY,GACb,MAAM,gCAAgC,CAAC;AAKxC,OAAO,EACL,gBAAgB,EAChB,aAAa,EACb,eAAe,EACf,wBAAwB,EACxB,wBAAwB,EACxB,gBAAgB,GACjB,MAAM,kCAAkC,CAAC"}

package/dist/resolve-database-url.d.ts

@@ -0,0 +1,4 @@
+declare const DEFAULT_DATABASE_URL = "postgresql://localhost:5432/axvault";
+declare function resolveDatabaseUrl(databaseUrl?: string): string;
+export { DEFAULT_DATABASE_URL, resolveDatabaseUrl };
+//# sourceMappingURL=resolve-database-url.d.ts.map

package/dist/resolve-database-url.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-database-url.d.ts","sourceRoot":"","sources":["../src/resolve-database-url.ts"],"names":[],"mappings":"AAAA,QAAA,MAAM,oBAAoB,wCAAwC,CAAC;AAEnE,iBAAS,kBAAkB,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,CAUxD;AAED,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,CAAC"}

package/dist/resolve-database-url.js

@@ -0,0 +1,11 @@
+const DEFAULT_DATABASE_URL = "postgresql://localhost:5432/axvault";
+function resolveDatabaseUrl(databaseUrl) {
+    const value = databaseUrl ?? process.env.AXVAULT_DATABASE_URL ?? DEFAULT_DATABASE_URL;
+    const trimmedValue = value.trim();
+    if (trimmedValue.length === 0) {
+        throw new Error("Database URL must not be empty.");
+    }
+    return trimmedValue;
+}
+export { DEFAULT_DATABASE_URL, resolveDatabaseUrl };
+//# sourceMappingURL=resolve-database-url.js.map

package/dist/resolve-database-url.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-database-url.js","sourceRoot":"","sources":["../src/resolve-database-url.ts"],"names":[],"mappings":"AAAA,MAAM,oBAAoB,GAAG,qCAAqC,CAAC;AAEnE,SAAS,kBAAkB,CAAC,WAAoB;IAC9C,MAAM,KAAK,GACT,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,oBAAoB,CAAC;IAC1E,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAElC,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IAED,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,CAAC"}

package/dist/resolve-secret-source.d.ts

@@ -0,0 +1,11 @@
+interface SecretSourceOptions {
+    directValue?: string;
+    envName?: string;
+    filePath?: string;
+    directOption: string;
+    envOption: string;
+    fileOption: string;
+}
+export declare function resolveSecretSource(options: SecretSourceOptions): Promise<string | undefined>;
+export {};
+//# sourceMappingURL=resolve-secret-source.d.ts.map

package/dist/resolve-secret-source.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-secret-source.d.ts","sourceRoot":"","sources":["../src/resolve-secret-source.ts"],"names":[],"mappings":"AAEA,UAAU,mBAAmB;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CA2C7B"}

package/dist/resolve-secret-source.js

@@ -0,0 +1,36 @@
+import { readFile } from "node:fs/promises";
+export async function resolveSecretSource(options) {
+    const configuredSources = [];
+    if (typeof options.directValue === "string") {
+        configuredSources.push(options.directOption);
+    }
+    if (typeof options.envName === "string") {
+        configuredSources.push(options.envOption);
+    }
+    if (typeof options.filePath === "string") {
+        configuredSources.push(options.fileOption);
+    }
+    if (configuredSources.length > 1) {
+        throw new Error(`Choose only one of ${configuredSources.join(", ")}.`);
+    }
+    if (typeof options.directValue === "string") {
+        return options.directValue;
+    }
+    if (typeof options.envName === "string") {
+        const value = process.env[options.envName]?.trim();
+        if (!value) {
+            throw new Error(`Environment variable ${options.envName} is not set or is empty.`);
+        }
+        return value;
+    }
+    if (typeof options.filePath === "string") {
+        const fileContents = await readFile(options.filePath, "utf8");
+        const value = fileContents.trim();
+        if (!value) {
+            throw new Error(`Secret file ${options.filePath} is empty.`);
+        }
+        return value;
+    }
+    return undefined;
+}
+//# sourceMappingURL=resolve-secret-source.js.map

package/dist/resolve-secret-source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-secret-source.js","sourceRoot":"","sources":["../src/resolve-secret-source.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAW5C,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,OAA4B;IAE5B,MAAM,iBAAiB,GAAa,EAAE,CAAC;IAEvC,IAAI,OAAO,OAAO,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;QAC5C,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAC/C,CAAC;IAED,IAAI,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACxC,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC5C,CAAC;IAED,IAAI,OAAO,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACzC,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC7C,CAAC;IAED,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,sBAAsB,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACzE,CAAC;IAED,IAAI,OAAO,OAAO,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;QAC5C,OAAO,OAAO,CAAC,WAAW,CAAC;IAC7B,CAAC;IAED,IAAI,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC;QACnD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CACb,wBAAwB,OAAO,CAAC,OAAO,0BAA0B,CAClE,CAAC;QACJ,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,OAAO,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACzC,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC9D,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC;QAClC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,eAAe,OAAO,CAAC,QAAQ,YAAY,CAAC,CAAC;QAC/D,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/server/plugins/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../src/server/plugins/auth.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,OAAO,EAIL,KAAK,YAAY,EAClB,MAAM,mCAAmC,CAAC;AAG3C,OAAO,QAAQ,SAAS,CAAC;IACvB,UAAU,cAAc;QACtB,MAAM,EAAE,YAAY,CAAC;KACtB;IAED,UAAU,eAAe;QACvB,YAAY,EAAE,CACZ,OAAO,EAAE,cAAc,EACvB,KAAK,EAAE,YAAY,KAChB,OAAO,CAAC,IAAI,CAAC,CAAC;QACnB,kBAAkB,EAAE,CAClB,OAAO,EAAE,cAAc,EACvB,KAAK,EAAE,YAAY,KAChB,OAAO,CAAC,IAAI,CAAC,CAAC;KACpB;CACF;;AAWD,wBA+CE"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../src/server/plugins/auth.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,OAAO,EAIL,KAAK,YAAY,EAClB,MAAM,mCAAmC,CAAC;AAG3C,OAAO,QAAQ,SAAS,CAAC;IACvB,UAAU,cAAc;QACtB,MAAM,EAAE,YAAY,CAAC;KACtB;IAED,UAAU,eAAe;QACvB,YAAY,EAAE,CACZ,OAAO,EAAE,cAAc,EACvB,KAAK,EAAE,YAAY,KAChB,OAAO,CAAC,IAAI,CAAC,CAAC;QACnB,kBAAkB,EAAE,CAClB,OAAO,EAAE,cAAc,EACvB,KAAK,EAAE,YAAY,KAChB,OAAO,CAAC,IAAI,CAAC,CAAC;KACpB;CACF;;AAWD,wBA8CE"}

package/dist/server/plugins/auth.js

@@ -14,9 +14,7 @@ function extractBearerToken(authorizationHeader) {
     const match = /^Bearer\s+(\S+)$/iu.exec(authorizationHeader);
     return match?.[1];
 }
-export default fp(
-// eslint-disable-next-line @typescript-eslint/require-await -- Fastify plugin signature requires async
-async function authPlugin(fastify) {
+export default fp(async function authPlugin(fastify) {
     // eslint-disable-next-line unicorn/no-null -- Fastify decorator requires an initial value
     fastify.decorateRequest("apiKey", null);
     fastify.decorate("authenticate", async (request, reply) => {

package/dist/server/plugins/auth.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../src/server/plugins/auth.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAEhC,OAAO,EACL,eAAe,EACf,cAAc,EACd,cAAc,GAEf,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,MAAM,oCAAoC,CAAC;AAmB/D,qDAAqD;AACrD,SAAS,kBAAkB,CACzB,mBAAuC;IAEvC,IAAI,CAAC,mBAAmB;QAAE,OAAO,SAAS,CAAC;IAC3C,MAAM,KAAK,GAAG,oBAAoB,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAC7D,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC;AAED,eAAe,EAAE;AACf,uGAAuG;AACvG,KAAK,UAAU,UAAU,CAAC,OAAO;IAC/B,0FAA0F;IAC1F,OAAO,CAAC,eAAe,CAAC,QAAQ,EAAE,IAAa,CAAC,CAAC;IAEjD,OAAO,CAAC,QAAQ,CACd,cAAc,EACd,KAAK,EAAE,OAAuB,EAAE,KAAmB,EAAiB,EAAE;QACpE,MAAM,KAAK,GAAG,kBAAkB,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QAEhE,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,EAAE;gBAC1B,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,KAAK;gBACd,YAAY,EAAE,8BAA8B;aAC7C,CAAC,CAAC;YACH,OAAO,KAAK,CAAC,YAAY,CAAC,8BAA8B,CAAC,CAAC;QAC5D,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAExD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,EAAE;gBAC1B,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,KAAK;gBACd,YAAY,EAAE,iBAAiB;aAChC,CAAC,CAAC;YACH,OAAO,KAAK,CAAC,YAAY,CAAC,iBAAiB,CAAC,CAAC;QAC/C,CAAC;QAED,MAAM,cAAc,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QAC5C,sGAAsG;QACtG,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC;IAC1B,CAAC,CACF,CAAC;IAEF,OAAO,CAAC,QAAQ,CACd,oBAAoB,EACpB,KAAK,EAAE,OAAuB,EAAE,KAAmB,EAAiB,EAAE;QACpE,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC;YACzC,OAAO,KAAK,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC;QAClD,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC,EACD,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,UAAU,CAAC,EAAE,CAC7C,CAAC"}
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../src/server/plugins/auth.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAEhC,OAAO,EACL,eAAe,EACf,cAAc,EACd,cAAc,GAEf,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,MAAM,oCAAoC,CAAC;AAmB/D,qDAAqD;AACrD,SAAS,kBAAkB,CACzB,mBAAuC;IAEvC,IAAI,CAAC,mBAAmB;QAAE,OAAO,SAAS,CAAC;IAC3C,MAAM,KAAK,GAAG,oBAAoB,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAC7D,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC;AAED,eAAe,EAAE,CACf,KAAK,UAAU,UAAU,CAAC,OAAO;IAC/B,0FAA0F;IAC1F,OAAO,CAAC,eAAe,CAAC,QAAQ,EAAE,IAAa,CAAC,CAAC;IAEjD,OAAO,CAAC,QAAQ,CACd,cAAc,EACd,KAAK,EAAE,OAAuB,EAAE,KAAmB,EAAiB,EAAE;QACpE,MAAM,KAAK,GAAG,kBAAkB,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QAEhE,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,EAAE;gBAC1B,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,KAAK;gBACd,YAAY,EAAE,8BAA8B;aAC7C,CAAC,CAAC;YACH,OAAO,KAAK,CAAC,YAAY,CAAC,8BAA8B,CAAC,CAAC;QAC5D,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAExD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,EAAE;gBAC1B,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,KAAK;gBACd,YAAY,EAAE,iBAAiB;aAChC,CAAC,CAAC;YACH,OAAO,KAAK,CAAC,YAAY,CAAC,iBAAiB,CAAC,CAAC;QAC/C,CAAC;QAED,MAAM,cAAc,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QAC5C,sGAAsG;QACtG,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC;IAC1B,CAAC,CACF,CAAC;IAEF,OAAO,CAAC,QAAQ,CACd,oBAAoB,EACpB,KAAK,EAAE,OAAuB,EAAE,KAAmB,EAAiB,EAAE;QACpE,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC;YACzC,OAAO,KAAK,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC;QAClD,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC,EACD,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,UAAU,CAAC,EAAE,CAC7C,CAAC"}

package/dist/server/routes/health.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"health.d.ts","sourceRoot":"","sources":["../../../src/server/routes/health.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AAK1E,QAAA,MAAM,YAAY,EAAE,wBAqBnB,CAAC;AAEF,eAAe,YAAY,CAAC"}
+{"version":3,"file":"health.d.ts","sourceRoot":"","sources":["../../../src/server/routes/health.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AAK1E,QAAA,MAAM,YAAY,EAAE,wBA2BnB,CAAC;AAEF,eAAe,YAAY,CAAC"}

package/dist/server/routes/health.js

@@ -7,7 +7,13 @@ const healthRoutes = function (fastify, _options, done) {
     fastify.route({
         method: "GET",
         url: "/api/v1/health",
-        config: { rateLimit: false },
+        config: {
+            rateLimit: false,
+            // This is a liveness probe, not a readiness gate: keep it green during
+            // transient overload so under-pressure sheds user traffic instead of
+            // turning back-pressure into orchestrator restarts.
+            pressureHandler: () => { },
+        },
         schema: {
             security: [],
             response: { 200: HealthResponse },

package/dist/server/routes/health.js.map

@@ -1 +1 @@
-{"version":3,"file":"health.js","sourceRoot":"","sources":["../../../src/server/routes/health.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,OAAO,WAAW,MAAM,uBAAuB,CAAC,OAAO,IAAI,EAAE,MAAM,EAAE,CAAC;AACtE,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAE3D,MAAM,YAAY,GAA6B,UAC7C,OAAO,EACP,QAAQ,EACR,IAAI;IAEJ,OAAO,CAAC,KAAK,CAAC;QACZ,MAAM,EAAE,KAAK;QACb,GAAG,EAAE,gBAAgB;QACrB,MAAM,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE;QAC5B,MAAM,EAAE;YACN,QAAQ,EAAE,EAAE;YACZ,QAAQ,EAAE,EAAE,GAAG,EAAE,cAAc,EAAE;SAClC;QACD,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE;YACjC,OAAO,KAAK,CAAC,IAAI,CAAC;gBAChB,MAAM,EAAE,IAAI;gBACZ,OAAO,EAAE,WAAW,CAAC,OAAO;aAC7B,CAAC,CAAC;QACL,CAAC;KACF,CAAC,CAAC;IACH,IAAI,EAAE,CAAC;AACT,CAAC,CAAC;AAEF,eAAe,YAAY,CAAC"}
+{"version":3,"file":"health.js","sourceRoot":"","sources":["../../../src/server/routes/health.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,OAAO,WAAW,MAAM,uBAAuB,CAAC,OAAO,IAAI,EAAE,MAAM,EAAE,CAAC;AACtE,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAE3D,MAAM,YAAY,GAA6B,UAC7C,OAAO,EACP,QAAQ,EACR,IAAI;IAEJ,OAAO,CAAC,KAAK,CAAC;QACZ,MAAM,EAAE,KAAK;QACb,GAAG,EAAE,gBAAgB;QACrB,MAAM,EAAE;YACN,SAAS,EAAE,KAAK;YAChB,uEAAuE;YACvE,qEAAqE;YACrE,oDAAoD;YACpD,eAAe,EAAE,GAAG,EAAE,GAAE,CAAC;SAC1B;QACD,MAAM,EAAE;YACN,QAAQ,EAAE,EAAE;YACZ,QAAQ,EAAE,EAAE,GAAG,EAAE,cAAc,EAAE;SAClC;QACD,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE;YACjC,OAAO,KAAK,CAAC,IAAI,CAAC;gBAChB,MAAM,EAAE,IAAI;gBACZ,OAAO,EAAE,WAAW,CAAC,OAAO;aAC7B,CAAC,CAAC;QACL,CAAC;KACF,CAAC,CAAC;IACH,IAAI,EAAE,CAAC;AACT,CAAC,CAAC;AAEF,eAAe,YAAY,CAAC"}

package/dist/server/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/server/server.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAQH,OAAgB,EAAqB,KAAK,eAAe,EAAE,MAAM,SAAS,CAAC;AAW3E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAGnD,iBAAS,QAAQ,CAAC,MAAM,EAAE,cAAc,GAAG,eAAe,CA+IzD;AAED,OAAO,EAAE,QAAQ,EAAE,CAAC"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/server/server.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAQH,OAAgB,EAAqB,KAAK,eAAe,EAAE,MAAM,SAAS,CAAC;AAW3E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAEnD,iBAAS,QAAQ,CAAC,MAAM,EAAE,cAAc,GAAG,eAAe,CAuJzD;AAED,OAAO,EAAE,QAAQ,EAAE,CAAC"}

package/dist/server/server.js

@@ -14,7 +14,6 @@ import underPressure from "@fastify/under-pressure";
 import Fastify, {} from "fastify";
 import { hasZodFastifySchemaValidationErrors, isResponseSerializationError, jsonSchemaTransform, serializerCompiler, validatorCompiler, } from "fastify-type-provider-zod";
 import packageJson from "../../package.json" with { type: "json" };
-import { sendSensibleError } from "./send-sensible-error.js";
 function buildApp(config) {
     const app = Fastify({
         logger: {
@@ -101,23 +100,25 @@ function buildApp(config) {
             request.log.warn(logPayload, "Client error");
         }
         if (hasZodFastifySchemaValidationErrors(error)) {
-            return reply.badRequest("Validation failed");
+            return reply.send(app.httpErrors.badRequest("Validation failed"));
         }
         if (isResponseSerializationError(error)) {
-            return reply.internalServerError("Internal server error");
+            return reply.send(app.httpErrors.internalServerError("Internal server error"));
         }
         // Handle unsupported content types
         if (error.statusCode === 415 ||
             error.code === "FST_ERR_CTP_INVALID_MEDIA_TYPE") {
-            return reply.unsupportedMediaType("Unsupported media type");
+            return reply.send(app.httpErrors.unsupportedMediaType("Unsupported media type"));
         }
         // Handle malformed JSON bodies
         if (error.statusCode === 400 &&
             error.code === "FST_ERR_CTP_INVALID_JSON_BODY") {
-            return reply.badRequest("Invalid JSON");
+            return reply.send(app.httpErrors.badRequest("Invalid JSON"));
         }
-        const message = statusCode >= 500 ? "Internal server error" : error.message;
-        return sendSensibleError(reply, statusCode, message);
+        if (statusCode >= 500 && statusCode !== 503) {
+            return reply.send(app.httpErrors.internalServerError("Internal server error"));
+        }
+        return reply.send(error);
     });
     // 404 handler for unmatched routes (aggressive rate limit to prevent probing).
     // Must be set inside .after() so the rateLimit decorator from @fastify/rate-limit

package/dist/server/server.js.map

@@ -1 +1 @@
-{"version":3,"file":"server.js","sourceRoot":"","sources":["../../src/server/server.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,MAAM,MAAM,iBAAiB,CAAC;AACrC,OAAO,SAAS,MAAM,qBAAqB,CAAC;AAC5C,OAAO,QAAQ,MAAM,mBAAmB,CAAC;AACzC,OAAO,OAAO,MAAM,kBAAkB,CAAC;AACvC,OAAO,SAAS,MAAM,qBAAqB,CAAC;AAC5C,OAAO,aAAa,MAAM,yBAAyB,CAAC;AACpD,OAAO,OAAO,EAAE,EAA2C,MAAM,SAAS,CAAC;AAC3E,OAAO,EACL,mCAAmC,EACnC,4BAA4B,EAC5B,mBAAmB,EACnB,kBAAkB,EAElB,iBAAiB,GAClB,MAAM,2BAA2B,CAAC;AAEnC,OAAO,WAAW,MAAM,oBAAoB,CAAC,OAAO,IAAI,EAAE,MAAM,EAAE,CAAC;AAEnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAE7D,SAAS,QAAQ,CAAC,MAAsB;IACtC,MAAM,GAAG,GAAG,OAAO,CAAC;QAClB,MAAM,EAAE;YACN,KAAK,EAAE,MAAM,CAAC,QAAQ;YACtB,MAAM,EAAE;gBACN,2BAA2B;gBAC3B,oBAAoB;gBACpB,uBAAuB;gBACvB,gBAAgB;aACjB;SACF;QACD,iBAAiB,EAAE,MAAM;QACzB,cAAc,EAAE,MAAM;QACtB,SAAS,EAAE,SAAS,EAAE,OAAO;QAC7B,aAAa,EAAE;YACb,cAAc,EAAE,GAAG,EAAE,mEAAmE;SACzF;KACF,CAAC,CAAC;IAEH,GAAG,CAAC,oBAAoB,CAAC,iBAAiB,CAAC,CAAC;IAC5C,GAAG,CAAC,qBAAqB,CAAC,kBAAkB,CAAC,CAAC;IAC9C,KAAK,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAE5B,uEAAuE;IACvE,gEAAgE;IAChE,KAAK,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAE1B,2CAA2C;IAC3C,KAAK,GAAG,CAAC,QAAQ,CAAC,OAAO,EAAE;QACzB,OAAO,EAAE;YACP,IAAI,EAAE;gBACJ,KAAK,EAAE,WAAW,CAAC,IAAI;gBACvB,WAAW,EAAE,WAAW,CAAC,WAAW;gBACpC,OAAO,EAAE,WAAW,CAAC,OAAO;aAC7B;YACD,UAAU,EAAE;gBACV,eAAe,EAAE;oBACf,UAAU,EAAE;wBACV,IAAI,EAAE,MAAM;wBACZ,MAAM,EAAE,QAAQ;qBACjB;iBACF;aACF;YACD,QAAQ,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;SAC/B;QACD,SAAS,EAAE,mBAAmB;KAC/B,CAAC,CAAC;IAEH,KAAK,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE;QAC3B,WAAW,EAAE,OAAO;QACpB,kBAAkB,EAAE,CAAC,MAAM,EAAE,EAAE,CAC7B,MAAM,CAAC,OAAO,CAAC,mBAAmB,EAAE,mCAAmC,CAAC;KAC3E,CAAC,CAAC;IAEH,iFAAiF;IACjF,KAAK,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE;QAC3B,GAAG,EAAE,GAAG;QACR,UAAU,EAAE,UAAU;QACtB,oBAAoB,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE;YAC1C,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;YAC5C,KAAwC,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;YAC1E,OAAO,KAAK,CAAC;QACf,CAAC;KACF,CAAC,CAAC;IAEH,gEAAgE;IAChE,KAAK,GAAG,CAAC,QAAQ,CAAC,aAAa,EAAE;QAC/B,iBAAiB,EAAE,IAAI;QACvB,gBAAgB,EAAE,WAAW;QAC7B,UAAU,EAAE,EAAE;QACd,OAAO,EAAE,iCAAiC;KAC3C,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,GAAG,CAAC,gBAAgB,EAAmB,CAAC;IAEzD,QAAQ,CAAC,eAAe,CAAC,CAAC,KAAmB,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAC/D,MAAM,UAAU,GACd,KAAK,CAAC,UAAU,KAAK,SAAS,IAAI,KAAK,CAAC,UAAU,IAAI,GAAG;YACvD,CAAC,CAAC,KAAK,CAAC,UAAU;YAClB,CAAC,CAAC,GAAG,CAAC;QAEV,MAAM,UAAU,GAAG;YACjB,GAAG,EAAE,KAAK;YACV,OAAO,EAAE;gBACP,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,MAAM,EAAE,OAAO,CAAC,MAAM;aACvB;SACF,CAAC;QACF,IAAI,UAAU,IAAI,GAAG,EAAE,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;QAChD,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;QAC/C,CAAC;QAED,IAAI,mCAAmC,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/C,OAAO,KAAK,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAC;QAC/C,CAAC;QAED,IAAI,4BAA4B,CAAC,KAAK,CAAC,EAAE,CAAC;YACxC,OAAO,KAAK,CAAC,mBAAmB,CAAC,uBAAuB,CAAC,CAAC;QAC5D,CAAC;QAED,mCAAmC;QACnC,IACE,KAAK,CAAC,UAAU,KAAK,GAAG;YACxB,KAAK,CAAC,IAAI,KAAK,gCAAgC,EAC/C,CAAC;YACD,OAAO,KAAK,CAAC,oBAAoB,CAAC,wBAAwB,CAAC,CAAC;QAC9D,CAAC;QAED,+BAA+B;QAC/B,IACE,KAAK,CAAC,UAAU,KAAK,GAAG;YACxB,KAAK,CAAC,IAAI,KAAK,+BAA+B,EAC9C,CAAC;YACD,OAAO,KAAK,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;QAC1C,CAAC;QAED,MAAM,OAAO,GAAG,UAAU,IAAI,GAAG,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC;QAE5E,OAAO,iBAAiB,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,+EAA+E;IAC/E,kFAAkF;IAClF,oCAAoC;IACpC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE;QACb,QAAQ,CAAC,kBAAkB,CACzB;YACE,UAAU,EAAE,GAAG,CAAC,SAAS,CAAC;gBACxB,GAAG,EAAE,CAAC;gBACN,UAAU,EAAE,GAAG;aAChB,CAAC;SACH,EACD,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE;YACxB,OAAO,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACrC,CAAC,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC;AAED,OAAO,EAAE,QAAQ,EAAE,CAAC"}
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../src/server/server.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,MAAM,MAAM,iBAAiB,CAAC;AACrC,OAAO,SAAS,MAAM,qBAAqB,CAAC;AAC5C,OAAO,QAAQ,MAAM,mBAAmB,CAAC;AACzC,OAAO,OAAO,MAAM,kBAAkB,CAAC;AACvC,OAAO,SAAS,MAAM,qBAAqB,CAAC;AAC5C,OAAO,aAAa,MAAM,yBAAyB,CAAC;AACpD,OAAO,OAAO,EAAE,EAA2C,MAAM,SAAS,CAAC;AAC3E,OAAO,EACL,mCAAmC,EACnC,4BAA4B,EAC5B,mBAAmB,EACnB,kBAAkB,EAElB,iBAAiB,GAClB,MAAM,2BAA2B,CAAC;AAEnC,OAAO,WAAW,MAAM,oBAAoB,CAAC,OAAO,IAAI,EAAE,MAAM,EAAE,CAAC;AAGnE,SAAS,QAAQ,CAAC,MAAsB;IACtC,MAAM,GAAG,GAAG,OAAO,CAAC;QAClB,MAAM,EAAE;YACN,KAAK,EAAE,MAAM,CAAC,QAAQ;YACtB,MAAM,EAAE;gBACN,2BAA2B;gBAC3B,oBAAoB;gBACpB,uBAAuB;gBACvB,gBAAgB;aACjB;SACF;QACD,iBAAiB,EAAE,MAAM;QACzB,cAAc,EAAE,MAAM;QACtB,SAAS,EAAE,SAAS,EAAE,OAAO;QAC7B,aAAa,EAAE;YACb,cAAc,EAAE,GAAG,EAAE,mEAAmE;SACzF;KACF,CAAC,CAAC;IAEH,GAAG,CAAC,oBAAoB,CAAC,iBAAiB,CAAC,CAAC;IAC5C,GAAG,CAAC,qBAAqB,CAAC,kBAAkB,CAAC,CAAC;IAC9C,KAAK,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAE5B,uEAAuE;IACvE,gEAAgE;IAChE,KAAK,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAE1B,2CAA2C;IAC3C,KAAK,GAAG,CAAC,QAAQ,CAAC,OAAO,EAAE;QACzB,OAAO,EAAE;YACP,IAAI,EAAE;gBACJ,KAAK,EAAE,WAAW,CAAC,IAAI;gBACvB,WAAW,EAAE,WAAW,CAAC,WAAW;gBACpC,OAAO,EAAE,WAAW,CAAC,OAAO;aAC7B;YACD,UAAU,EAAE;gBACV,eAAe,EAAE;oBACf,UAAU,EAAE;wBACV,IAAI,EAAE,MAAM;wBACZ,MAAM,EAAE,QAAQ;qBACjB;iBACF;aACF;YACD,QAAQ,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;SAC/B;QACD,SAAS,EAAE,mBAAmB;KAC/B,CAAC,CAAC;IAEH,KAAK,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE;QAC3B,WAAW,EAAE,OAAO;QACpB,kBAAkB,EAAE,CAAC,MAAM,EAAE,EAAE,CAC7B,MAAM,CAAC,OAAO,CAAC,mBAAmB,EAAE,mCAAmC,CAAC;KAC3E,CAAC,CAAC;IAEH,iFAAiF;IACjF,KAAK,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE;QAC3B,GAAG,EAAE,GAAG;QACR,UAAU,EAAE,UAAU;QACtB,oBAAoB,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE;YAC1C,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;YAC5C,KAAwC,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;YAC1E,OAAO,KAAK,CAAC;QACf,CAAC;KACF,CAAC,CAAC;IAEH,gEAAgE;IAChE,KAAK,GAAG,CAAC,QAAQ,CAAC,aAAa,EAAE;QAC/B,iBAAiB,EAAE,IAAI;QACvB,gBAAgB,EAAE,WAAW;QAC7B,UAAU,EAAE,EAAE;QACd,OAAO,EAAE,iCAAiC;KAC3C,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,GAAG,CAAC,gBAAgB,EAAmB,CAAC;IAEzD,QAAQ,CAAC,eAAe,CAAC,CAAC,KAAmB,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAC/D,MAAM,UAAU,GACd,KAAK,CAAC,UAAU,KAAK,SAAS,IAAI,KAAK,CAAC,UAAU,IAAI,GAAG;YACvD,CAAC,CAAC,KAAK,CAAC,UAAU;YAClB,CAAC,CAAC,GAAG,CAAC;QAEV,MAAM,UAAU,GAAG;YACjB,GAAG,EAAE,KAAK;YACV,OAAO,EAAE;gBACP,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,MAAM,EAAE,OAAO,CAAC,MAAM;aACvB;SACF,CAAC;QACF,IAAI,UAAU,IAAI,GAAG,EAAE,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;QAChD,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;QAC/C,CAAC;QAED,IAAI,mCAAmC,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/C,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAC,CAAC;QACpE,CAAC;QAED,IAAI,4BAA4B,CAAC,KAAK,CAAC,EAAE,CAAC;YACxC,OAAO,KAAK,CAAC,IAAI,CACf,GAAG,CAAC,UAAU,CAAC,mBAAmB,CAAC,uBAAuB,CAAC,CAC5D,CAAC;QACJ,CAAC;QAED,mCAAmC;QACnC,IACE,KAAK,CAAC,UAAU,KAAK,GAAG;YACxB,KAAK,CAAC,IAAI,KAAK,gCAAgC,EAC/C,CAAC;YACD,OAAO,KAAK,CAAC,IAAI,CACf,GAAG,CAAC,UAAU,CAAC,oBAAoB,CAAC,wBAAwB,CAAC,CAC9D,CAAC;QACJ,CAAC;QAED,+BAA+B;QAC/B,IACE,KAAK,CAAC,UAAU,KAAK,GAAG;YACxB,KAAK,CAAC,IAAI,KAAK,+BAA+B,EAC9C,CAAC;YACD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,CAAC;QAC/D,CAAC;QAED,IAAI,UAAU,IAAI,GAAG,IAAI,UAAU,KAAK,GAAG,EAAE,CAAC;YAC5C,OAAO,KAAK,CAAC,IAAI,CACf,GAAG,CAAC,UAAU,CAAC,mBAAmB,CAAC,uBAAuB,CAAC,CAC5D,CAAC;QACJ,CAAC;QAED,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,+EAA+E;IAC/E,kFAAkF;IAClF,oCAAoC;IACpC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE;QACb,QAAQ,CAAC,kBAAkB,CACzB;YACE,UAAU,EAAE,GAAG,CAAC,SAAS,CAAC;gBACxB,GAAG,EAAE,CAAC;gBACN,UAAU,EAAE,GAAG;aAChB,CAAC;SACH,EACD,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE;YACxB,OAAO,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACrC,CAAC,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC;AAED,OAAO,EAAE,QAAQ,EAAE,CAAC"}

package/package.json

@@ -1,8 +1,25 @@
 {
+  "scripts": {
+    "prepack": "pnpm run rebuild",
+    "prepare": "git config core.hooksPath .githooks",
+    "build": "tsc -p tsconfig.app.json && cp -r src/db/migrations dist/db/migrations",
+    "clean": "rm -rf dist *.tsbuildinfo",
+    "format": "prettier --write .",
+    "format:check": "prettier --check .",
+    "fta": "fta-check",
+    "knip": "knip",
+    "lint": "eslint",
+    "rebuild": "pnpm run clean && pnpm run build",
+    "start": "pnpm -s run rebuild && node bin/axvault",
+    "test": "vitest run",
+    "test:coverage": "vitest run --coverage",
+    "test:watch": "vitest",
+    "typecheck": "tsc -b --noEmit"
+  },
   "name": "axvault",
   "author": "Łukasz Jerciński",
   "license": "MIT",
-  "version": "1.13.0",
+  "version": "1.14.0",
   "description": "Remote credential storage server for axkit",
   "repository": {
     "type": "git",
@@ -30,23 +47,6 @@
     "README.md",
     "LICENSE"
   ],
-  "scripts": {
-    "prepare": "git config core.hooksPath .githooks",
-    "prepack": "pnpm run rebuild",
-    "build": "tsc -p tsconfig.app.json && cp -r src/db/migrations dist/db/migrations",
-    "clean": "rm -rf dist *.tsbuildinfo",
-    "format": "prettier --write .",
-    "format:check": "prettier --check .",
-    "fta": "fta-check",
-    "knip": "knip",
-    "lint": "eslint",
-    "rebuild": "pnpm run clean && pnpm run build",
-    "start": "pnpm -s run rebuild && node bin/axvault",
-    "test": "vitest run",
-    "test:coverage": "vitest run --coverage",
-    "test:watch": "vitest",
-    "typecheck": "tsc -b --noEmit"
-  },
   "dependencies": {
     "@commander-js/extra-typings": "^14.0.0",
     "@fastify/env": "^6.0.0",

package/dist/server/send-sensible-error.d.ts

@@ -1,7 +0,0 @@
-/**
- * Map numeric HTTP status codes to @fastify/sensible reply methods.
- */
-import type { FastifyReply } from "fastify";
-declare function sendSensibleError(reply: FastifyReply, statusCode: number, message: string): FastifyReply<import("fastify").RouteGenericInterface, import("fastify").RawServerDefault, import("node:http").IncomingMessage, import("node:http").ServerResponse<import("node:http").IncomingMessage>, unknown, import("fastify").FastifySchema, import("fastify").FastifyTypeProviderDefault, unknown>;
-export { sendSensibleError };
-//# sourceMappingURL=send-sensible-error.d.ts.map

package/dist/server/send-sensible-error.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"send-sensible-error.d.ts","sourceRoot":"","sources":["../../src/server/send-sensible-error.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAE5C,iBAAS,iBAAiB,CACxB,KAAK,EAAE,YAAY,EACnB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM,4SAmChB;AAED,OAAO,EAAE,iBAAiB,EAAE,CAAC"}