nolo-cli 0.1.31 → 0.1.32

package/server/authenticateToken.ts

@@ -1,118 +0,0 @@
-import { assertSessionTokenVersion } from "../auth/sessionTokenVersion";
-import { parseToken, verifyToken } from "../auth/token";
-import { NOLO_CLUSTER_SERVERS, normalizeKnownServerOrigin } from "../database/config";
-import { DB_PREFIX } from "../database/keys";
-import { getServerAuthorityStore } from "../database/server/db";
-import type { ApiError } from "./api/types";
-
-const unauthorized = (message: string): ApiError => ({
-  code: "unauthorized",
-  message,
-});
-
-const isOutsideTokenWindow = (payload: any): boolean => {
-  const now = Date.now();
-
-  if (payload?.exp != null) {
-    const expMs =
-      typeof payload.exp === "number"
-        ? payload.exp * 1000
-        : new Date(payload.exp).getTime();
-    if (Number.isFinite(expMs) && now > expMs) return true;
-  }
-
-  if (payload?.nbf != null) {
-    const nbfMs =
-      typeof payload.nbf === "number"
-        ? payload.nbf * 1000
-        : new Date(payload.nbf).getTime();
-    if (Number.isFinite(nbfMs) && now < nbfMs) return true;
-  }
-
-  return false;
-};
-
-const normalizeServerOrigin = (value: string | null | undefined): string | null => {
-  if (typeof value !== "string" || !value.trim()) return null;
-  return normalizeKnownServerOrigin(value);
-};
-
-const resolveAuthFallbackServers = (): string[] => {
-  const current = normalizeServerOrigin(process.env.APP_BASE_URL);
-  return NOLO_CLUSTER_SERVERS.filter((server) => normalizeServerOrigin(server) !== current);
-};
-
-const getAuthTokenStore = () => getServerAuthorityStore();
-
-const readUserFromClusterPeer = async (userId: string, token: string): Promise<any | null> => {
-  const store = getAuthTokenStore();
-  for (const server of resolveAuthFallbackServers()) {
-    try {
-      const res = await fetch(`${server}/api/v1/users/${encodeURIComponent(userId)}`, {
-        method: "GET",
-        headers: { Authorization: `Bearer ${token}` },
-      });
-      if (!res.ok) continue;
-      const data = await res.json().catch(() => null);
-      if (!data || typeof data !== "object") continue;
-      const record = { ...(data as Record<string, unknown>) };
-      delete (record as Record<string, unknown>).id;
-      if (typeof record.publicKey !== "string" || !record.publicKey) continue;
-      await store.put(`${DB_PREFIX.USER}${userId}`, record);
-      return record;
-    } catch {
-      // Try the next peer.
-    }
-  }
-  return null;
-};
-
-export async function authenticateToken(token?: string | null): Promise<{
-  userId: string;
-  payload: any;
-}> {
-  const store = getAuthTokenStore();
-  if (!token) {
-    throw unauthorized("Authentication required");
-  }
-
-  const parsed = parseToken(token);
-  const userId = parsed?.userId;
-  if (!userId || typeof userId !== "string") {
-    throw unauthorized("Invalid token payload");
-  }
-
-  let user: any;
-  try {
-    user = await store.get(`${DB_PREFIX.USER}${userId}`);
-  } catch {
-    user = null;
-  }
-
-  if (!user) {
-    user = await readUserFromClusterPeer(userId, token);
-  }
-
-  if (!user) {
-    throw unauthorized("User not found");
-  }
-
-  if (!user?.publicKey || user?.isDisabled) {
-    throw unauthorized("User is not allowed");
-  }
-
-  try {
-    const payload = verifyToken(token, user.publicKey);
-    assertSessionTokenVersion(payload, user);
-    if (!payload || payload.userId !== userId) {
-      throw unauthorized("Invalid token subject");
-    }
-    if (isOutsideTokenWindow(payload)) {
-      throw unauthorized("Token has expired");
-    }
-    return { userId, payload };
-  } catch (error: any) {
-    if (error?.code === "unauthorized") throw error;
-    throw unauthorized(error?.message || "Invalid token");
-  }
-}

package/server/billingLedgerRoutes.ts

@@ -1,63 +0,0 @@
-import { handleBillingLedgerAudit } from "./handlers/billingLedgerAuditHandler";
-import { handleBillingLedgerWitness } from "./handlers/billingLedgerWitnessHandler";
-import { handleBillingUsageReport } from "./handlers/billingUsageReportHandler";
-import { handleCreatorEarningsReport } from "./handlers/creatorEarningsReportHandler";
-import { handleCreatorSettlementReport } from "./handlers/creatorSettlementReportHandler";
-import { handleProviderCallsRecent } from "./handlers/providerCallsRecentHandler";
-import { handleProviderRequestIds } from "./handlers/providerRequestIdsHandler";
-import { handleProviderReconciliationRun } from "./handlers/providerReconciliationRunHandler";
-import { handleRevenueShareReport } from "./handlers/revenueShareReportHandler";
-
-const CORS_HEADERS: Record<string, string> = {
-  "Access-Control-Allow-Origin": "*",
-  "Access-Control-Allow-Methods": "GET, POST, OPTIONS",
-  "Access-Control-Allow-Headers":
-    "Content-Type, Authorization, x-billing-ledger-audit-secret, x-billing-ledger-witness-secret",
-  "Access-Control-Max-Age": "86400",
-};
-
-const options = () => new Response(null, { status: 204, headers: CORS_HEADERS });
-
-export const billingLedgerRoutes: Record<string, any> = {
-  "/api/admin/billing-ledger/audit": {
-    GET: handleBillingLedgerAudit,
-    OPTIONS: options,
-  },
-  "/api/admin/billing-ledger/witness": {
-    GET: handleBillingLedgerWitness,
-    POST: handleBillingLedgerWitness,
-    OPTIONS: options,
-  },
-  "/api/admin/billing-ledger/witness/import": {
-    POST: handleBillingLedgerWitness,
-    OPTIONS: options,
-  },
-  "/api/admin/billing-usage/report": {
-    GET: handleBillingUsageReport,
-    OPTIONS: options,
-  },
-  "/api/admin/provider-calls/recent": {
-    GET: handleProviderCallsRecent,
-    OPTIONS: options,
-  },
-  "/api/admin/provider-request-ids/recent": {
-    GET: handleProviderRequestIds,
-    OPTIONS: options,
-  },
-  "/api/admin/provider-reconciliation/run": {
-    POST: handleProviderReconciliationRun,
-    OPTIONS: options,
-  },
-  "/api/admin/revenue-share/report": {
-    GET: handleRevenueShareReport,
-    OPTIONS: options,
-  },
-  "/api/admin/creator-earnings/report": {
-    GET: handleCreatorEarningsReport,
-    OPTIONS: options,
-  },
-  "/api/admin/creator-settlement/report": {
-    GET: handleCreatorSettlementReport,
-    OPTIONS: options,
-  },
-};

package/server/buildManifest.ts

@@ -1,54 +0,0 @@
-import { readFileSync } from "node:fs";
-
-import { resolvePublicPath } from "./publicPaths";
-
-export type NoloBuildManifest = {
-  basePath: string | null;
-  timestamp: string | null;
-  buildSha: string | null;
-  buildTime: string | null;
-};
-
-export const EMPTY_BUILD_MANIFEST: NoloBuildManifest = {
-  basePath: null,
-  timestamp: null,
-  buildSha: null,
-  buildTime: null,
-};
-
-const readOptionalString = (value: unknown): string | null =>
-  typeof value === "string" && value.trim().length > 0 ? value : null;
-
-export function parseBuildManifestFromJson(rawValue: string): NoloBuildManifest {
-  try {
-    const parsed = JSON.parse(rawValue);
-    return {
-      basePath: readOptionalString(parsed?.basePath),
-      timestamp: readOptionalString(parsed?.timestamp),
-      buildSha: readOptionalString(parsed?.buildSha),
-      buildTime: readOptionalString(parsed?.buildTime),
-    };
-  } catch {
-    return EMPTY_BUILD_MANIFEST;
-  }
-}
-
-export function readBuildManifestSync(): NoloBuildManifest {
-  try {
-    return parseBuildManifestFromJson(
-      readFileSync(resolvePublicPath("latest-assets.json"), "utf8")
-    );
-  } catch {
-    return EMPTY_BUILD_MANIFEST;
-  }
-}
-
-export async function readBuildManifest(): Promise<NoloBuildManifest> {
-  try {
-    return parseBuildManifestFromJson(
-      await Bun.file(resolvePublicPath("latest-assets.json")).text()
-    );
-  } catch {
-    return EMPTY_BUILD_MANIFEST;
-  }
-}

package/server/cliChatRoutes.ts

@@ -1,5 +0,0 @@
-import { handleCliChat } from "./handlers/cliChatHandler";
-
-export const cliChatRoutes: Record<string, any> = {
-  "/api/cli/chat": { POST: handleCliChat, OPTIONS: handleCliChat },
-};

package/server/cloudflareRoutes.ts

@@ -1,35 +0,0 @@
-import {
-  handleCloudflareCrawlStart,
-  handleCloudflareCrawlStatus,
-} from "./handlers/cloudflareCrawlHandler";
-import {
-  handleCfScreenshot,
-  handleCfMarkdown,
-  handleCfPdf,
-  handleCfJson,
-} from "./handlers/cloudflareBrowserHandler";
-import { handleCfSpeechToText } from "./handlers/cfWhisperHandler";
-import { handleCfTextToSpeech } from "./handlers/cfTextToSpeechHandler";
-
-const CORS_HEADERS: Record<string, string> = {
-  "Access-Control-Allow-Origin": "*",
-  "Access-Control-Allow-Methods": "POST, OPTIONS",
-  "Access-Control-Allow-Headers": "Content-Type, Authorization",
-  "Access-Control-Max-Age": "86400",
-};
-
-const options = () => new Response(null, { status: 204, headers: CORS_HEADERS });
-
-export const cloudflareRoutes: Record<string, any> = {
-  "/api/cloudflare-crawl": { POST: handleCloudflareCrawlStart, OPTIONS: options },
-  "/api/cloudflare-crawl/:jobId": {
-    GET: handleCloudflareCrawlStatus,
-    OPTIONS: options,
-  },
-  "/api/cf-screenshot": { POST: handleCfScreenshot, OPTIONS: options },
-  "/api/cf-markdown": { POST: handleCfMarkdown, OPTIONS: options },
-  "/api/cf-pdf": { POST: handleCfPdf, OPTIONS: options },
-  "/api/cf-json": { POST: handleCfJson, OPTIONS: options },
-  "/api/cf-speech-to-text": { POST: handleCfSpeechToText, OPTIONS: options },
-  "/api/cf-text-to-speech": { POST: handleCfTextToSpeech, OPTIONS: options },
-};

package/server/coreHeaders.ts

@@ -1,29 +0,0 @@
-export type NoloService = "core" | "preview";
-export type NoloOwner =
-  | "core-runtime"
-  | "core-route"
-  | "feature-route"
-  | "dev-tool";
-export type NoloRouteKind = "core" | "feature" | "tool";
-
-type ServiceHeaderMeta = {
-  service: NoloService;
-  owner: NoloOwner;
-  routeKind: NoloRouteKind;
-};
-
-export function withServiceHeaders(
-  response: Response,
-  meta: ServiceHeaderMeta
-): Response {
-  const headers = new Headers(response.headers);
-  headers.set("x-nolo-service", meta.service);
-  headers.set("x-nolo-owner", meta.owner);
-  headers.set("x-nolo-route-kind", meta.routeKind);
-
-  return new Response(response.body, {
-    status: response.status,
-    statusText: response.statusText,
-    headers,
-  });
-}

package/server/coreReadiness.ts

@@ -1,48 +0,0 @@
-import { withServiceHeaders } from "./coreHeaders";
-import { readBuildManifestSync } from "./buildManifest";
-import { getCoreRuntimeSnapshot } from "./coreRuntime";
-
-export function handleCoreReady(_req: Request) {
-  const snapshot = getCoreRuntimeSnapshot();
-  const buildManifest = readBuildManifestSync();
-  const body = {
-    ok: snapshot.ready,
-    ready: snapshot.ready,
-    status: snapshot.status,
-    role: snapshot.role,
-    buildSha: buildManifest.buildSha,
-    buildTime: buildManifest.buildTime,
-  };
-
-  return withServiceHeaders(
-    Response.json(body, {
-      status: snapshot.ready ? 200 : 503,
-    }),
-    {
-      service: "core",
-      owner: "core-runtime",
-      routeKind: "core",
-    }
-  );
-}
-
-export function handleCoreMeta(_req: Request) {
-  const snapshot = getCoreRuntimeSnapshot();
-  const buildManifest = readBuildManifestSync();
-
-  return withServiceHeaders(
-    Response.json({
-      service: "core",
-      status: snapshot.status,
-      ready: snapshot.ready,
-      role: snapshot.role,
-      buildSha: buildManifest.buildSha,
-      buildTime: buildManifest.buildTime,
-    }),
-    {
-      service: "core",
-      owner: "core-route",
-      routeKind: "core",
-    }
-  );
-}

package/server/coreRoutes.ts

@@ -1,65 +0,0 @@
-import { API_ENDPOINTS, API_VERSION } from "../database/config";
-
-import {
-  handleVersionDelete,
-  handleVersionGet,
-  handleVersionLabel,
-  handleVersionList,
-  handleVersionPin,
-  handleVersionRestore,
-  handleVersionSave,
-} from "./handlers/versionHandler";
-import {
-  handleDeleteUserSecret,
-  handleGetUserSecrets,
-  handleSetUserSecret,
-} from "./handlers/userSecretsHandler";
-import { handleWereadGateway } from "./handlers/wereadGatewayHandler";
-import { handleAppDomainAllow } from "./handlers/appDomainHandler";
-import { withServiceHeaders } from "./coreHeaders";
-import { handleCoreMeta, handleCoreReady } from "./coreReadiness";
-
-const CORS_HEADERS: Record<string, string> = {
-  "Access-Control-Allow-Origin": "*",
-  "Access-Control-Allow-Methods": "POST, OPTIONS",
-  "Access-Control-Allow-Headers": "Content-Type, Authorization",
-  "Access-Control-Max-Age": "86400",
-};
-
-const options = () => new Response(null, { status: 204, headers: CORS_HEADERS });
-
-export const coreRoutes: Record<string, any> = {
-  "/health": () =>
-    withServiceHeaders(new Response("ok"), {
-      service: "core",
-      owner: "core-runtime",
-      routeKind: "core",
-    }),
-  "/ready": { GET: handleCoreReady },
-  "/api/core/meta": { GET: handleCoreMeta, OPTIONS: options },
-  [API_ENDPOINTS.HI]: {
-    GET: () =>
-      withServiceHeaders(
-        new Response(JSON.stringify({ API_VERSION }), {
-          headers: { "content-type": "application/json; charset=utf-8" },
-        }),
-        {
-          service: "core",
-          owner: "core-route",
-          routeKind: "core",
-        }
-      ),
-  },
-  "/api/version/save": { POST: handleVersionSave, OPTIONS: options },
-  "/api/version/list": { GET: handleVersionList, OPTIONS: options },
-  "/api/version/get": { GET: handleVersionGet, OPTIONS: options },
-  "/api/version/restore": { POST: handleVersionRestore, OPTIONS: options },
-  "/api/version/delete": { DELETE: handleVersionDelete, OPTIONS: options },
-  "/api/version/pin": { POST: handleVersionPin, OPTIONS: options },
-  "/api/version/label": { PATCH: handleVersionLabel, OPTIONS: options },
-  "/api/user-secrets": { GET: handleGetUserSecrets, OPTIONS: options },
-  "/api/user-secrets/set": { POST: handleSetUserSecret, OPTIONS: options },
-  "/api/user-secrets/delete": { POST: handleDeleteUserSecret, OPTIONS: options },
-  "/api/app/domain/allow": { GET: handleAppDomainAllow, OPTIONS: options },
-  "/api/weread/gateway": { POST: handleWereadGateway, OPTIONS: options },
-};

package/server/coreRuntime.ts

@@ -1,98 +0,0 @@
-import { closeAllUserSqliteDbs } from "../database/sqliteDb";
-import { closeServerDb, openServerDb } from "../database/server/db";
-import {
-  applyEmailRuntimeConfigFromDb,
-  startEmailRuntimeConfigSync,
-  stopEmailRuntimeConfigSync,
-} from "../auth/server/emailDbConfig";
-import {
-  startEmailAutomationScheduler,
-  stopEmailAutomationScheduler,
-} from "../auth/server/emailAutomation";
-import {
-  startEmailRetryScheduler,
-  stopEmailRetryScheduler,
-} from "../auth/server/emailDelivery";
-
-import {
-  startAgentTaskScheduler,
-  stopAgentTaskScheduler,
-} from "./scheduler/schedulerService";
-import {
-  startCryptoUsdcBaseWatcher,
-  stopCryptoUsdcBaseWatcher,
-} from "./payments/crypto/cryptoUsdcBaseWatcher";
-import {
-  startCryptoUsdtTronWatcher,
-  stopCryptoUsdtTronWatcher,
-} from "./payments/crypto/cryptoUsdtTronWatcher";
-import { resolveRuntimeRole, shouldRunBackgroundWorkers } from "./runtimeRole";
-
-type CoreRuntimeStatus = "idle" | "starting" | "ready" | "stopping";
-
-let status: CoreRuntimeStatus = "idle";
-let startPromise: Promise<void> | null = null;
-let stopPromise: Promise<void> | null = null;
-
-const getRuntimeRole = () => resolveRuntimeRole(process.env);
-
-const backgroundWorkersDisabled = () =>
-  process.env.NOLO_DISABLE_BACKGROUND_WORKERS === "1" ||
-  !shouldRunBackgroundWorkers(getRuntimeRole());
-
-export function getCoreRuntimeSnapshot() {
-  return {
-    status,
-    ready: status === "ready",
-    role: getRuntimeRole(),
-  };
-}
-
-export async function startCoreRuntime() {
-  if (startPromise) return startPromise;
-
-  startPromise = (async () => {
-    status = "starting";
-    await openServerDb();
-    await applyEmailRuntimeConfigFromDb();
-    if (backgroundWorkersDisabled()) {
-      status = "ready";
-      return;
-    }
-    startEmailRuntimeConfigSync();
-    startEmailAutomationScheduler();
-    startEmailRetryScheduler();
-    startAgentTaskScheduler();
-    startCryptoUsdcBaseWatcher();
-    startCryptoUsdtTronWatcher();
-    status = "ready";
-  })();
-
-  return startPromise;
-}
-
-export async function stopCoreRuntime() {
-  if (stopPromise) return stopPromise;
-
-  stopPromise = (async () => {
-    status = "stopping";
-    if (!backgroundWorkersDisabled()) {
-      stopEmailAutomationScheduler();
-      stopEmailRetryScheduler();
-      stopEmailRuntimeConfigSync();
-      stopAgentTaskScheduler();
-      stopCryptoUsdcBaseWatcher();
-      stopCryptoUsdtTronWatcher();
-    }
-    await closeServerDb();
-    closeAllUserSqliteDbs();
-    status = "idle";
-    startPromise = null;
-  })();
-
-  try {
-    await stopPromise;
-  } finally {
-    stopPromise = null;
-  }
-}

package/server/createResponse.ts

@@ -1,68 +0,0 @@
-export function createResponse() {
-  let response: Response | null = null;
-  let statusCode: number = 200;
-  let headers: Headers = new Headers();
-  function json(data: object) {
-    headers.set("Content-Type", "application/json");
-    // Add CORS headers
-    headers.set("Access-Control-Allow-Origin", "*");
-    headers.set(
-      "Access-Control-Allow-Methods",
-      "OPTIONS, GET, POST, PUT, DELETE,PATCH"
-    );
-    headers.set(
-      "Access-Control-Allow-Headers",
-      "Content-Type, Authorization, Accept, X-Requested-With"
-    );
-    headers.set("Access-Control-Max-Age", "1800");
-    headers.set("X-Frame-Options", "DENY");
-    headers.set("X-XSS-Protection", "1; mode=block");
-
-    response = new Response(JSON.stringify(data), {
-      status: statusCode,
-      headers: headers,
-    });
-    return response;
-  }
-
-  function status(code: number) {
-    statusCode = code;
-    return {
-      response,
-      status,
-      json,
-      setHeader,
-      write,
-      end,
-    };
-  }
-
-  function setHeader(name: string, value: string) {
-    headers.set(name, value);
-    return response;
-  }
-
-  function write(data: string) {
-    if (response) {
-      let text = response.body ? response.body.toString() + data : data;
-      response = new Response(text, {
-        status: statusCode,
-        headers: headers,
-      });
-    }
-    return response;
-  }
-
-  function end() {
-    return response;
-  }
-
-  return {
-    response,
-    status,
-    json,
-    setHeader,
-    write,
-    end,
-  };
-}

package/server/cryptoPaymentRoutes.ts

@@ -1,8 +0,0 @@
-import { createPaymentProviderRoutes } from "./payments/paymentRoutes";
-import { cryptoUsdcBasePaymentProvider } from "./payments/crypto/cryptoUsdcBasePaymentProvider";
-import { cryptoUsdtTronPaymentProvider } from "./payments/crypto/cryptoUsdtTronPaymentProvider";
-
-export const cryptoPaymentRoutes: Record<string, any> = {
-  ...createPaymentProviderRoutes(cryptoUsdcBasePaymentProvider),
-  ...createPaymentProviderRoutes(cryptoUsdtTronPaymentProvider),
-};