brains-mcp 1.61.2

package/dist/admin/seedUsers.js

@@ -0,0 +1,168 @@
+import { randomUUID } from "crypto";
+import { createScopedStorageClient } from "../storage/client.js";
+import { createPage } from "../tools/createPage.js";
+const TIER_ACCESS_LEVELS = {
+    free_beta: 1,
+    launch_user: 1,
+    solo: 5,
+    pro: 3,
+    team: 2,
+};
+// Synthetic users all land under this domain so they're easy to purge by prefix.
+export const SEED_DOMAIN = "brains.test";
+export function isSeedEnabled() {
+    return (process.env.BRAINS_ADMIN_SEED_ENABLED ?? "").trim().toLowerCase() === "true";
+}
+export function isGodModeSubject(subject) {
+    const godModeSubjects = (process.env.BRAINS_GOD_MODE_SUBJECTS ?? "")
+        .split(",").map((s) => s.trim()).filter(Boolean);
+    return godModeSubjects.includes(subject);
+}
+function seedSubject(prefix, i) {
+    return `${prefix}-${i}@${SEED_DOMAIN}`;
+}
+function seedClientId(prefix, i) {
+    return `seed-client-${prefix}-${i}`;
+}
+function supabaseHeaders(serviceRoleKey, extra) {
+    return {
+        apikey: serviceRoleKey,
+        authorization: `Bearer ${serviceRoleKey}`,
+        "content-type": "application/json",
+        prefer: "return=minimal",
+        ...extra,
+    };
+}
+async function upsertClient(supabaseUrl, serviceRoleKey, clientId) {
+    const body = JSON.stringify({
+        client_id: clientId,
+        redirect_uris: JSON.stringify([]),
+        scopes: "wiki.read wiki.write",
+        created_at: Date.now(),
+    });
+    const res = await fetch(`${supabaseUrl}/rest/v1/oauth_dynamic_clients`, {
+        method: "POST",
+        headers: supabaseHeaders(serviceRoleKey, { prefer: "resolution=merge-duplicates,return=minimal" }),
+        body,
+    });
+    if (!res.ok) {
+        const text = await res.text().catch(() => "");
+        throw new Error(`upsertClient failed (${res.status}): ${text}`);
+    }
+}
+async function upsertAccessToken(supabaseUrl, serviceRoleKey, subject, clientId) {
+    const token = randomUUID();
+    const expiresAt = Date.now() + 365 * 24 * 60 * 60 * 1000; // 1 year
+    const body = JSON.stringify({
+        type: "access_token",
+        token,
+        client_id: clientId,
+        subject,
+        scope: JSON.stringify(["wiki.read", "wiki.write"]),
+        expires_at: expiresAt,
+        redirect_uri: null,
+        code_challenge: null,
+        code_challenge_method: null,
+    });
+    const res = await fetch(`${supabaseUrl}/rest/v1/oauth_tokens`, {
+        method: "POST",
+        headers: supabaseHeaders(serviceRoleKey, { prefer: "resolution=merge-duplicates,return=minimal" }),
+        body,
+    });
+    if (!res.ok) {
+        const text = await res.text().catch(() => "");
+        throw new Error(`upsertAccessToken failed (${res.status}): ${text}`);
+    }
+    return token;
+}
+async function upsertAccessLevel(supabaseUrl, serviceRoleKey, subject, accessLevel) {
+    const body = JSON.stringify({
+        user_id: subject,
+        access_level: accessLevel,
+        updated_by: "seed",
+    });
+    const res = await fetch(`${supabaseUrl}/rest/v1/user_access_levels`, {
+        method: "POST",
+        headers: supabaseHeaders(serviceRoleKey, { prefer: "resolution=merge-duplicates,return=minimal" }),
+        body,
+    });
+    if (!res.ok) {
+        const text = await res.text().catch(() => "");
+        throw new Error(`upsertAccessLevel failed (${res.status}): ${text}`);
+    }
+}
+// PostgREST DELETE with count returned
+async function deleteByPattern(supabaseUrl, serviceRoleKey, table, column, pattern) {
+    // PostgREST like filter: * is the wildcard. We append * so it's a prefix match.
+    const filterVal = encodeURIComponent(`${pattern}*`);
+    const url = `${supabaseUrl}/rest/v1/${table}?${column}=like.${filterVal}`;
+    const res = await fetch(url, {
+        method: "DELETE",
+        headers: supabaseHeaders(serviceRoleKey, {
+            prefer: "return=minimal,count=exact",
+        }),
+    });
+    if (!res.ok) {
+        const text = await res.text().catch(() => "");
+        throw new Error(`deleteByPattern(${table}.${column}) failed (${res.status}): ${text}`);
+    }
+    // PostgREST returns count in Content-Range header: e.g. "*/5"
+    const range = res.headers.get("content-range") ?? "";
+    const match = range.match(/\*\/(\d+)/);
+    return match ? parseInt(match[1] ?? "0", 10) : 0;
+}
+function sanitizeSubjectForPath(subject) {
+    const trimmed = subject.trim().toLowerCase();
+    const normalized = trimmed.replace(/[^a-z0-9._-]/g, "_").replace(/^_+|_+$/g, "");
+    return normalized.slice(0, 96) || "user";
+}
+export async function seedUsers(rootDrive, input) {
+    const supabaseUrl = (process.env.SUPABASE_URL ?? "").trim().replace(/\/$/, "");
+    const serviceRoleKey = (process.env.SUPABASE_SERVICE_ROLE_KEY ?? "").trim();
+    if (!supabaseUrl || !serviceRoleKey) {
+        throw new Error("seed-users requires SUPABASE_URL + SUPABASE_SERVICE_ROLE_KEY");
+    }
+    const { count, tier, prefix } = input;
+    if (count < 1 || count > 100) {
+        throw new Error("count must be between 1 and 100");
+    }
+    const accessLevel = TIER_ACCESS_LEVELS[tier];
+    const subjects = [];
+    for (let i = 1; i <= count; i++) {
+        const subject = seedSubject(prefix, i);
+        const clientId = seedClientId(prefix, i);
+        await upsertClient(supabaseUrl, serviceRoleKey, clientId);
+        await upsertAccessToken(supabaseUrl, serviceRoleKey, subject, clientId);
+        await upsertAccessLevel(supabaseUrl, serviceRoleKey, subject, accessLevel);
+        const subjectKey = sanitizeSubjectForPath(subject);
+        const userDrive = createScopedStorageClient(rootDrive, `users/${subjectKey}`);
+        await userDrive.verifyAccess();
+        await userDrive.bootstrapWikiFiles();
+        await createPage(userDrive, {
+            name: "welcome.md",
+            title: "Welcome",
+            body: `# Welcome\n\nSynthetic test user. Tier: **${tier}** (access level ${accessLevel}).`,
+        }, subject).catch(() => {
+            // page may already exist on re-seed — non-fatal
+        });
+        subjects.push(subject);
+    }
+    return { subjects };
+}
+export async function purgeSeedUsers(prefix) {
+    const supabaseUrl = (process.env.SUPABASE_URL ?? "").trim().replace(/\/$/, "");
+    const serviceRoleKey = (process.env.SUPABASE_SERVICE_ROLE_KEY ?? "").trim();
+    if (!supabaseUrl || !serviceRoleKey) {
+        throw new Error("purge-seed-users requires SUPABASE_URL + SUPABASE_SERVICE_ROLE_KEY");
+    }
+    // All synthetic subjects follow the pattern "{prefix}-{n}@brains.test"
+    const subjectPrefix = `${prefix}-`;
+    const clientPrefix = `seed-client-${prefix}-`;
+    const [tokens, clients, accessLevels] = await Promise.all([
+        deleteByPattern(supabaseUrl, serviceRoleKey, "oauth_tokens", "subject", subjectPrefix),
+        deleteByPattern(supabaseUrl, serviceRoleKey, "oauth_dynamic_clients", "client_id", clientPrefix),
+        deleteByPattern(supabaseUrl, serviceRoleKey, "user_access_levels", "user_id", subjectPrefix),
+    ]);
+    return { deleted: { tokens, clients, accessLevels } };
+}
+//# sourceMappingURL=seedUsers.js.map

package/dist/admin/seedUsers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"seedUsers.js","sourceRoot":"","sources":["../../src/admin/seedUsers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,EAAE,yBAAyB,EAAsB,MAAM,sBAAsB,CAAC;AACrF,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAsBpD,MAAM,kBAAkB,GAA6B;IACnD,SAAS,EAAE,CAAC;IACZ,WAAW,EAAE,CAAC;IACd,IAAI,EAAE,CAAC;IACP,GAAG,EAAE,CAAC;IACN,IAAI,EAAE,CAAC;CACR,CAAC;AAEF,iFAAiF;AACjF,MAAM,CAAC,MAAM,WAAW,GAAG,aAAa,CAAC;AAEzC,MAAM,UAAU,aAAa;IAC3B,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAyB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC;AACvF,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAC9C,MAAM,eAAe,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,EAAE,CAAC;SACjE,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACnD,OAAO,eAAe,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,WAAW,CAAC,MAAc,EAAE,CAAS;IAC5C,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,WAAW,EAAE,CAAC;AACzC,CAAC;AAED,SAAS,YAAY,CAAC,MAAc,EAAE,CAAS;IAC7C,OAAO,eAAe,MAAM,IAAI,CAAC,EAAE,CAAC;AACtC,CAAC;AAED,SAAS,eAAe,CAAC,cAAsB,EAAE,KAA8B;IAC7E,OAAO;QACL,MAAM,EAAE,cAAc;QACtB,aAAa,EAAE,UAAU,cAAc,EAAE;QACzC,cAAc,EAAE,kBAAkB;QAClC,MAAM,EAAE,gBAAgB;QACxB,GAAG,KAAK;KACT,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,WAAmB,EACnB,cAAsB,EACtB,QAAgB;IAEhB,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;QAC1B,SAAS,EAAE,QAAQ;QACnB,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACjC,MAAM,EAAE,sBAAsB;QAC9B,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE;KACvB,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,WAAW,gCAAgC,EAAE;QACtE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,eAAe,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,4CAA4C,EAAE,CAAC;QAClG,IAAI;KACL,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,wBAAwB,GAAG,CAAC,MAAM,MAAM,IAAI,EAAE,CAAC,CAAC;IAClE,CAAC;AACH,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,WAAmB,EACnB,cAAsB,EACtB,OAAe,EACf,QAAgB;IAEhB,MAAM,KAAK,GAAG,UAAU,EAAE,CAAC;IAC3B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,SAAS;IACnE,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;QAC1B,IAAI,EAAE,cAAc;QACpB,KAAK;QACL,SAAS,EAAE,QAAQ;QACnB,OAAO;QACP,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;QAClD,UAAU,EAAE,SAAS;QACrB,YAAY,EAAE,IAAI;QAClB,cAAc,EAAE,IAAI;QACpB,qBAAqB,EAAE,IAAI;KAC5B,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,WAAW,uBAAuB,EAAE;QAC7D,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,eAAe,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,4CAA4C,EAAE,CAAC;QAClG,IAAI;KACL,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,6BAA6B,GAAG,CAAC,MAAM,MAAM,IAAI,EAAE,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,WAAmB,EACnB,cAAsB,EACtB,OAAe,EACf,WAAmB;IAEnB,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;QAC1B,OAAO,EAAE,OAAO;QAChB,YAAY,EAAE,WAAW;QACzB,UAAU,EAAE,MAAM;KACnB,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,WAAW,6BAA6B,EAAE;QACnE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,eAAe,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,4CAA4C,EAAE,CAAC;QAClG,IAAI;KACL,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,6BAA6B,GAAG,CAAC,MAAM,MAAM,IAAI,EAAE,CAAC,CAAC;IACvE,CAAC;AACH,CAAC;AAED,uCAAuC;AACvC,KAAK,UAAU,eAAe,CAC5B,WAAmB,EACnB,cAAsB,EACtB,KAAa,EACb,MAAc,EACd,OAAe;IAEf,gFAAgF;IAChF,MAAM,SAAS,GAAG,kBAAkB,CAAC,GAAG,OAAO,GAAG,CAAC,CAAC;IACpD,MAAM,GAAG,GAAG,GAAG,WAAW,YAAY,KAAK,IAAI,MAAM,SAAS,SAAS,EAAE,CAAC;IAC1E,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAC3B,MAAM,EAAE,QAAQ;QAChB,OAAO,EAAE,eAAe,CAAC,cAAc,EAAE;YACvC,MAAM,EAAE,4BAA4B;SACrC,CAAC;KACH,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,mBAAmB,KAAK,IAAI,MAAM,aAAa,GAAG,CAAC,MAAM,MAAM,IAAI,EAAE,CAAC,CAAC;IACzF,CAAC;IACD,8DAA8D;IAC9D,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC;IACrD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACvC,OAAO,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,sBAAsB,CAAC,OAAe;IAC7C,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC7C,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IACjF,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC;AAC3C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,SAAwB,EACxB,KAAqB;IAErB,MAAM,WAAW,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC/E,MAAM,cAAc,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAyB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5E,IAAI,CAAC,WAAW,IAAI,CAAC,cAAc,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAClF,CAAC;IAED,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;IACtC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,GAAG,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IAED,MAAM,WAAW,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACvC,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAEzC,MAAM,YAAY,CAAC,WAAW,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAC;QAC1D,MAAM,iBAAiB,CAAC,WAAW,EAAE,cAAc,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QACxE,MAAM,iBAAiB,CAAC,WAAW,EAAE,cAAc,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;QAE3E,MAAM,UAAU,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;QACnD,MAAM,SAAS,GAAG,yBAAyB,CAAC,SAAS,EAAE,SAAS,UAAU,EAAE,CAAC,CAAC;QAC9E,MAAM,SAAS,CAAC,YAAY,EAAE,CAAC;QAC/B,MAAM,SAAS,CAAC,kBAAkB,EAAE,CAAC;QACrC,MAAM,UAAU,CACd,SAAS,EACT;YACE,IAAI,EAAE,YAAY;YAClB,KAAK,EAAE,SAAS;YAChB,IAAI,EAAE,6CAA6C,IAAI,oBAAoB,WAAW,IAAI;SAC3F,EACD,OAAO,CACR,CAAC,KAAK,CAAC,GAAG,EAAE;YACX,gDAAgD;QAClD,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACzB,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,CAAC;AACtB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,MAAc;IACjD,MAAM,WAAW,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC/E,MAAM,cAAc,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAyB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5E,IAAI,CAAC,WAAW,IAAI,CAAC,cAAc,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;IACxF,CAAC;IAED,uEAAuE;IACvE,MAAM,aAAa,GAAG,GAAG,MAAM,GAAG,CAAC;IACnC,MAAM,YAAY,GAAG,eAAe,MAAM,GAAG,CAAC;IAE9C,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,YAAY,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACxD,eAAe,CAAC,WAAW,EAAE,cAAc,EAAE,cAAc,EAAE,SAAS,EAAE,aAAa,CAAC;QACtF,eAAe,CAAC,WAAW,EAAE,cAAc,EAAE,uBAAuB,EAAE,WAAW,EAAE,YAAY,CAAC;QAChG,eAAe,CAAC,WAAW,EAAE,cAAc,EAAE,oBAAoB,EAAE,SAAS,EAAE,aAAa,CAAC;KAC7F,CAAC,CAAC;IAEH,OAAO,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,EAAE,CAAC;AACxD,CAAC"}

package/dist/api/openapi.d.ts

@@ -0,0 +1,2 @@
+export declare function buildOpenApiSpec(): object;
+//# sourceMappingURL=openapi.d.ts.map

package/dist/api/openapi.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"openapi.d.ts","sourceRoot":"","sources":["../../src/api/openapi.ts"],"names":[],"mappings":"AA2BA,wBAAgB,gBAAgB,IAAI,MAAM,CA25BzC"}