lsh-framework 3.1.6 → 3.1.7

package/dist/lib/saas-organizations.js

@@ -331,7 +331,22 @@ export class OrganizationService {
         }
     }
     /**
-     * Map database org to Organization type
+     * Transform Supabase organization record to domain model.
+     *
+     * Maps database snake_case columns to TypeScript camelCase properties:
+     * - `created_at` (ISO string) → `createdAt` (Date)
+     * - `subscription_tier` (string) → `subscriptionTier` (SubscriptionTier type)
+     * - `subscription_status` (string) → `subscriptionStatus` (SubscriptionStatus type)
+     * - `stripe_customer_id` → `stripeCustomerId`
+     * - `subscription_expires_at` → `subscriptionExpiresAt` (nullable Date)
+     * - `deleted_at` → `deletedAt` (nullable Date, for soft delete filtering)
+     *
+     * Settings are passed through as-is (JSONB column).
+     *
+     * @param dbOrg - Supabase record from 'organizations' table
+     * @returns Domain Organization object with validated types
+     * @see DbOrganizationRecord in database-types.ts for input shape
+     * @see Organization in saas-types.ts for output shape
      */
     // eslint-disable-next-line @typescript-eslint/no-explicit-any -- DB row type varies by schema
     mapDbOrgToOrg(dbOrg) {
@@ -352,7 +367,20 @@ export class OrganizationService {
         };
     }
     /**
-     * Map database member to OrganizationMember type
+     * Transform Supabase organization member record to domain model.
+     *
+     * Maps database snake_case columns to TypeScript camelCase properties:
+     * - `organization_id` → `organizationId`
+     * - `user_id` → `userId`
+     * - `role` (string) → `role` (OrganizationRole type)
+     * - `invited_by` → `invitedBy` (nullable, FK to users.id)
+     * - `invited_at` (ISO string) → `invitedAt` (Date)
+     * - `accepted_at` (ISO string) → `acceptedAt` (nullable Date)
+     *
+     * @param dbMember - Supabase record from 'organization_members' table
+     * @returns Domain OrganizationMember object
+     * @see DbOrganizationMemberRecord in database-types.ts for input shape
+     * @see OrganizationMember in saas-types.ts for output shape
      */
     // eslint-disable-next-line @typescript-eslint/no-explicit-any -- DB row type varies by schema
     mapDbMemberToMember(dbMember) {
@@ -369,7 +397,24 @@ export class OrganizationService {
         };
     }
     /**
-     * Map database member detailed to OrganizationMemberDetailed type
+     * Transform Supabase organization member detailed view record to domain model.
+     *
+     * This mapper handles records from the 'organization_members_detailed' view,
+     * which joins organization_members with users and organizations tables.
+     *
+     * Maps all OrganizationMember fields plus:
+     * - `email` (from users table)
+     * - `first_name` → `firstName` (from users table)
+     * - `last_name` → `lastName` (from users table)
+     * - `avatar_url` → `avatarUrl` (from users table)
+     * - `last_login_at` → `lastLoginAt` (from users table, nullable Date)
+     * - `organization_name` → `organizationName` (from organizations table)
+     * - `organization_slug` → `organizationSlug` (from organizations table)
+     *
+     * @param dbMember - Supabase record from 'organization_members_detailed' view
+     * @returns Domain OrganizationMemberDetailed object
+     * @see DbOrganizationMemberDetailedRecord in database-types.ts for input shape
+     * @see OrganizationMemberDetailed in saas-types.ts for output shape
      */
     // eslint-disable-next-line @typescript-eslint/no-explicit-any -- DB row with joined user data
     mapDbMemberDetailedToMemberDetailed(dbMember) {
@@ -560,7 +605,19 @@ export class TeamService {
         return data || [];
     }
     /**
-     * Map database team to Team type
+     * Transform Supabase team record to domain model.
+     *
+     * Maps database snake_case columns to TypeScript camelCase properties:
+     * - `organization_id` → `organizationId`
+     * - `encryption_key_id` → `encryptionKeyId` (FK to active team encryption key)
+     * - `created_at` (ISO string) → `createdAt` (Date)
+     * - `updated_at` (ISO string) → `updatedAt` (Date)
+     * - `deleted_at` (ISO string) → `deletedAt` (nullable Date, for soft delete)
+     *
+     * @param dbTeam - Supabase record from 'teams' table
+     * @returns Domain Team object
+     * @see DbTeamRecord in database-types.ts for input shape
+     * @see Team in saas-types.ts for output shape
      */
     // eslint-disable-next-line @typescript-eslint/no-explicit-any -- DB row type varies by schema
     mapDbTeamToTeam(dbTeam) {
@@ -577,7 +634,19 @@ export class TeamService {
         };
     }
     /**
-     * Map database team member to TeamMember type
+     * Transform Supabase team member record to domain model.
+     *
+     * Maps database snake_case columns to TypeScript camelCase properties:
+     * - `team_id` → `teamId`
+     * - `user_id` → `userId`
+     * - `role` (string) → `role` (TeamRole type: 'admin' | 'member' | 'viewer')
+     * - `created_at` (ISO string) → `createdAt` (Date)
+     * - `updated_at` (ISO string) → `updatedAt` (Date)
+     *
+     * @param dbMember - Supabase record from 'team_members' table
+     * @returns Domain TeamMember object
+     * @see DbTeamMemberRecord in database-types.ts for input shape
+     * @see TeamMember in saas-types.ts for output shape
      */
     // eslint-disable-next-line @typescript-eslint/no-explicit-any -- DB row type varies by schema
     mapDbTeamMemberToTeamMember(dbMember) {

package/dist/lib/saas-secrets.js

@@ -341,7 +341,14 @@ export class SecretsService {
         }
     }
     /**
-     * Helper to get team
+     * Helper to get team record from database.
+     *
+     * Fetches raw team record from 'teams' table. Used internally to get
+     * organization_id for audit logging and tier limit checks.
+     *
+     * @param teamId - UUID of team to fetch
+     * @returns Raw Supabase team record or null if not found
+     * @see DbTeamRecord in database-types.ts for return shape
      */
     async getTeamById(teamId) {
         const { data } = await this.supabase
@@ -352,7 +359,28 @@ export class SecretsService {
         return data;
     }
     /**
-     * Map database secret to Secret type
+     * Transform Supabase secret record to domain model.
+     *
+     * Maps database snake_case columns to TypeScript camelCase properties:
+     * - `team_id` → `teamId`
+     * - `encrypted_value` → `encryptedValue` (AES-256 encrypted)
+     * - `encryption_key_id` → `encryptionKeyId` (FK to team's encryption key)
+     * - `last_rotated_at` → `lastRotatedAt` (nullable Date)
+     * - `rotation_interval_days` → `rotationIntervalDays` (nullable number)
+     * - `created_by` → `createdBy` (FK to users.id)
+     * - `updated_by` → `updatedBy` (FK to users.id)
+     * - `deleted_by` → `deletedBy` (FK to users.id, for soft delete audit)
+     *
+     * Special handling:
+     * - `tags`: Parses JSON string to string[] if stored as string, passes through if already array
+     *
+     * Note: The `encryptedValue` field contains the encrypted secret. Use
+     * `encryptionService.decryptForTeam()` to decrypt it when needed.
+     *
+     * @param dbSecret - Supabase record from 'secrets' table
+     * @returns Domain Secret object with parsed tags
+     * @see DbSecretRecord in database-types.ts for input shape
+     * @see Secret in saas-types.ts for output shape
      */
     // eslint-disable-next-line @typescript-eslint/no-explicit-any -- DB row type varies by schema
     mapDbSecretToSecret(dbSecret) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "lsh-framework",
-  "version": "3.1.6",
+  "version": "3.1.7",
   "description": "Simple, cross-platform encrypted secrets manager with automatic sync, IPFS audit logs, and multi-environment support. Just run lsh sync and start managing your secrets.",
   "main": "dist/app.js",
   "bin": {
@@ -71,7 +71,7 @@
     "commander": "^14.0.2",
     "cors": "^2.8.5",
     "dotenv": "^17.2.3",
-    "express": "^4.18.2",
+    "express": "^4.22.1",
     "express-rate-limit": "^8.2.1",
     "glob": "^13.0.0",
     "inquirer": "^9.2.12",
@@ -90,7 +90,7 @@
     "@types/jest": "^30.0.0",
     "@types/js-yaml": "^4.0.9",
     "@types/jsonwebtoken": "^9.0.5",
-    "@types/node": "^20.12.7",
+    "@types/node": "^20.19.27",
     "@typescript-eslint/eslint-plugin": "^8.44.1",
     "@typescript-eslint/parser": "^8.44.1",
     "eslint": "^9.36.0",