wizards 0.2.1 → 0.2.3

package/apps/runtime/dist/services/projects.js

@@ -1,11 +1,12 @@
 import { FACT_TYPES, PROJECT_LIMITS } from "@engenty-wizards/shared/projects";
-import { and, count, eq } from "drizzle-orm";
+import { and, count, eq, isNull } from "drizzle-orm";
 import { nanoid } from "nanoid";
 import { z } from "zod";
 import { db, schema } from "../db/client.js";
 import { env } from "../env.js";
 import { managed, tenantInfo } from "../manage.js";
 import { currentTenant } from "../tenants/tenant.js";
+import { mayBuild, requireBuild, requireWritable } from "./access.js";
 import { notFound, ServiceError } from "./errors.js";
 import { forgetWizardLinks } from "./links.js";
 import { removeProjectFiles } from "./project-files.js";
@@ -61,22 +62,33 @@ export async function ownedProject(_userId, projectId) {
     }
     return p;
 }
-/** A tenant always has a project: the first one is made when its studio is first opened. */
+/** The tenant's projects that were made here, not synced from a local install. */
+const madeHere = () => and(eq(schema.project.tenantId, currentTenant()), isNull(schema.project.origin));
+/** The tenant's projects a local install synced. */
+const synced = () => and(eq(schema.project.tenantId, currentTenant()), eq(schema.project.origin, "local"));
+/**
+ * A tenant that builds here always has a project of its own: the first one is made when its
+ * studio is first opened.
+ */
 async function ensureProject() {
-    const any = await db.query.project.findFirst({
-        where: eq(schema.project.tenantId, currentTenant()),
-    });
+    const any = await db.query.project.findFirst({ where: madeHere() });
     if (!any) {
         await db
             .insert(schema.project)
             .values({ id: nanoid(12), tenantId: currentTenant(), name: "Meine Wizards" });
     }
 }
-/** The project a wizard lands in when the caller names none: the oldest one. */
+/**
+ * The project a caller means when it names none: the oldest one made here, where a wizard
+ * lands; for a tenant that builds nothing here, the one its local install synced.
+ */
 export async function defaultProject(_userId) {
-    await ensureProject();
+    const build = await mayBuild();
+    if (build) {
+        await ensureProject();
+    }
     const p = await db.query.project.findFirst({
-        where: eq(schema.project.tenantId, currentTenant()),
+        where: build ? madeHere() : synced(),
         orderBy: [schema.project.createdAt],
     });
     if (!p) {
@@ -84,11 +96,18 @@ export async function defaultProject(_userId) {
     }
     return p;
 }
+/**
+ * The projects the studio shows. A tenant that builds here: its own and the synced ones, up to
+ * its number. One that does not: only what its local install synced — possibly nothing yet.
+ */
 export async function listProjects(_userId) {
-    await ensureProject();
+    const build = await mayBuild();
+    if (build) {
+        await ensureProject();
+    }
     // The oldest come first: with a limit of one, that is the project everything lands in.
     const projects = await db.query.project.findMany({
-        where: eq(schema.project.tenantId, currentTenant()),
+        where: build ? eq(schema.project.tenantId, currentTenant()) : synced(),
         orderBy: [schema.project.createdAt],
         limit: await projectLimit(),
     });
@@ -112,6 +131,7 @@ export function maskedServers(p) {
     }));
 }
 export async function createProject(_userId, name) {
+    await requireBuild();
     const [{ n }] = await db
         .select({ n: count() })
         .from(schema.project)
@@ -128,6 +148,7 @@ export async function createProject(_userId, name) {
 }
 export async function updateProject(userId, projectId, patch) {
     const p = await ownedProject(userId, projectId);
+    await requireWritable(p);
     const mcpServers = patch.mcpServers?.map((s) => {
         const before = p.mcpServers.find((x) => x.id === s.id);
         const headers = s.headers
@@ -160,13 +181,16 @@ export function projectProfile(p) {
         facts: p.facts.filter((f) => f.value.trim()),
     };
 }
-export async function deleteProject(_userId, projectId) {
-    const all = await db.query.project.findMany({
-        where: eq(schema.project.tenantId, currentTenant()),
-    });
+export async function deleteProject(userId, projectId) {
+    await requireWritable(await ownedProject(userId, projectId));
+    const all = await db.query.project.findMany({ where: madeHere() });
     if (all.length <= 1) {
         throw new ServiceError("refused", "Das letzte Projekt bleibt.");
     }
+    await removeProject(projectId);
+}
+/** Takes a project away with its wizards' links and its files. */
+export async function removeProject(projectId) {
     const wizards = await db
         .select({ id: schema.wizard.id })
         .from(schema.wizard)

package/apps/runtime/dist/services/spaces.js

@@ -0,0 +1,400 @@
+import { createHash } from "node:crypto";
+import { PROJECT_LIMITS } from "@engenty-wizards/shared/projects";
+import { WORKSPACE_LIMITS } from "@engenty-wizards/shared/workspace";
+import { and, count, eq, inArray, sql } from "drizzle-orm";
+import { nanoid } from "nanoid";
+import { z } from "zod";
+import { db, schema } from "../db/client.js";
+import { missingModels, unavoidableSteps } from "../engine/requirements.js";
+import { env } from "../env.js";
+import { codeOf, putLink } from "../tenants/control.js";
+import { currentTenant } from "../tenants/tenant.js";
+import { asSync, mayBuild } from "./access.js";
+import { emitDraftChanged } from "./draft-events.js";
+import { notFound, ServiceError } from "./errors.js";
+import { draftFiles, writeFile } from "./files.js";
+import { addProjectFile, projectFiles, removeProjectFile } from "./project-files.js";
+import { brandColorSchema, projectFactSchema, projectLimit, removeProject, } from "./projects.js";
+import { deleteWizard, draftIssues, parseDraft, shareUrl } from "./wizards.js";
+/**
+ * A local install's project on this runtime (docs/manage-contract.md, "Spaces of a local
+ * install"). The install sends a wizard when it publishes it: the published version and its
+ * workspace, under the ids they have there. Here the project is shown and its wizards run; it
+ * is changed only by the next sync. The share link is this runtime's own.
+ */
+/** Ids as the local install makes them (nanoid); nothing else is taken as a key. */
+const syncedId = z.string().regex(/^[A-Za-z0-9_-]{8,40}$/);
+const spaceSchema = z.object({
+    name: z.string().min(1).max(80),
+    brand: z
+        .object({
+        name: z.string().max(120).optional(),
+        about: z.string().max(8000).optional(),
+        colors: z.array(brandColorSchema).max(PROJECT_LIMITS.colors).optional(),
+    })
+        .default({}),
+    facts: z.array(projectFactSchema).max(PROJECT_LIMITS.facts).default([]),
+    /** The logo end users see; null for none. */
+    logo: z
+        .object({
+        name: z.string().min(1).max(120),
+        mime: z.string().max(100),
+        description: z.string().max(600).default(""),
+        data: z.string(),
+    })
+        .nullable()
+        .default(null),
+});
+export const syncWizardSchema = z.object({
+    space: spaceSchema,
+    /** The version the install published, as it counts them. */
+    version: z.number().int().min(1).max(1_000_000),
+    definition: z.unknown(),
+    files: z
+        .array(z.object({
+        path: z.string().max(300),
+        mime: z.string().max(100).optional(),
+        data: z.string(),
+    }))
+        .max(WORKSPACE_LIMITS.files)
+        .default([]),
+    shareEnabled: z.boolean().default(true),
+    dailyRunLimit: z.number().int().min(1).max(10_000).optional(),
+});
+export const syncSettingsSchema = z.object({
+    shareEnabled: z.boolean().optional(),
+    dailyRunLimit: z.number().int().min(1).max(10_000).optional(),
+});
+export const checkSchema = z.object({
+    definition: z.unknown(),
+    /** Paths of the wizard's workspace files. */
+    files: z.array(z.string().max(300)).max(WORKSPACE_LIMITS.files).default([]),
+});
+const stepsWith = (def, has) => def.steps.filter(has).map((s) => ({ id: s.id, title: s.title }));
+/**
+ * What of a wizard does not work on this runtime: what its validator says here (a connector
+ * the project lacks, a plugin's tool), model classes nothing is bound to, the sandbox where
+ * there is none, MCP servers the project does not know.
+ */
+export async function serverProblems(def, issues, mcpServers) {
+    const problems = issues.map((issue) => ({
+        code: /connector/i.test(issue.message) ? "connector" : "invalid",
+        blocking: true,
+        steps: stepsWith(def, (s) => s.id === issue.stepId),
+        detail: issue.message,
+    }));
+    for (const missing of await missingModels(def)) {
+        problems.push({
+            code: "model",
+            blocking: missing.blocking,
+            steps: missing.steps,
+            detail: `${missing.cls}: ${missing.problem}`,
+        });
+    }
+    if (env.sandbox === "off") {
+        const steps = stepsWith(def, (s) => s.type === "agent" && s.tools.includes("sandbox"));
+        if (steps.length) {
+            problems.push({ code: "sandbox", blocking: false, steps, detail: "" });
+        }
+    }
+    const unknown = new Set();
+    const steps = stepsWith(def, (s) => {
+        const lacking = s.type === "agent" ? (s.mcp ?? []).filter((id) => !mcpServers.includes(id)) : [];
+        for (const id of lacking) {
+            unknown.add(id);
+        }
+        return lacking.length > 0;
+    });
+    if (steps.length) {
+        const unavoidable = unavoidableSteps(def);
+        problems.push({
+            code: "mcp",
+            blocking: steps.some((s) => unavoidable.has(s.id)),
+            steps,
+            detail: [...unknown].join(", "),
+        });
+    }
+    return problems;
+}
+/** What a wizard would lack here, asked before it is sent: no project is touched. */
+export async function checkOnServer(input) {
+    const { draft, issues } = parseDraft(input.definition, input.files);
+    // Connectors are a project's; a project that is not here yet has none.
+    const connectors = (draft.connections ?? [])
+        .filter((c) => c.connector)
+        .map((c) => ({
+        message: `Connection "${c.id}" uses connector "${c.connector}", which this project has not imported.`,
+    }));
+    return serverProblems(draft, [...issues, ...connectors], []);
+}
+async function syncedProject(spaceId) {
+    const p = await db.query.project.findFirst({
+        where: and(eq(schema.project.id, spaceId), eq(schema.project.tenantId, currentTenant())),
+    });
+    return p ?? null;
+}
+/** Refuses a project beyond the tenant's number; a synced one counts like one made here. */
+async function requireRoom(spaceId) {
+    const mine = eq(schema.project.tenantId, currentTenant());
+    // What a tenant that builds nothing here once made here is not shown, so it takes no place.
+    const counted = (await mayBuild()) ? mine : and(mine, eq(schema.project.origin, "local"));
+    const others = await db
+        .select({ id: schema.project.id, name: schema.project.name, origin: schema.project.origin })
+        .from(schema.project)
+        .where(and(counted, sql `${schema.project.id} <> ${spaceId}`));
+    const limit = await projectLimit();
+    if (others.length >= limit) {
+        throw new ServiceError("refused", limit === 1
+            ? "Dieses Konto hat hier schon ein Projekt."
+            : `Dieses Konto hat hier schon ${limit} Projekte.`, {
+            reason: "space_limit",
+            limit,
+            spaces: others.filter((p) => p.origin === "local").map((p) => ({ id: p.id, name: p.name })),
+        });
+    }
+}
+/** A synced project holds so many wizards: each brings up to 25 MB of files to keep. */
+async function requireWizardRoom(spaceId) {
+    const [row] = await db
+        .select({ n: count() })
+        .from(schema.wizard)
+        .where(eq(schema.wizard.projectId, spaceId));
+    if ((row?.n ?? 0) >= env.limits.syncedWizards) {
+        throw new ServiceError("refused", `Hier haben höchstens ${env.limits.syncedWizards} veröffentlichte Wizards Platz.`, { reason: "wizard_limit", limit: env.limits.syncedWizards });
+    }
+}
+const hashOf = (data) => createHash("sha256").update(data).digest("hex");
+/** The project's logo follows the install's: kept when it is the same picture, else replaced. */
+async function syncLogo(projectId, logo) {
+    const here = await projectFiles(projectId, "logo");
+    const data = logo ? Buffer.from(logo.data, "base64") : null;
+    const mark = data ? `sync:${hashOf(data)}` : null;
+    if (mark && here.length === 1 && here[0].source === mark) {
+        return;
+    }
+    for (const old of here) {
+        await removeProjectFile(projectId, old.id);
+    }
+    if (logo && data && mark) {
+        await addProjectFile(projectId, {
+            kind: "logo",
+            name: logo.name,
+            mime: logo.mime,
+            data,
+            // With words of its own no model is asked to describe it.
+            description: logo.description || logo.name,
+            source: mark,
+        });
+    }
+}
+/** Makes or updates the synced project: its name, what it says about itself, its logo. */
+async function syncSpace(spaceId, space) {
+    const existing = await syncedProject(spaceId);
+    if (existing && existing.origin !== "local") {
+        throw new ServiceError("refused", "Ein Projekt mit dieser Kennung wurde hier angelegt.", {
+            reason: "id_taken",
+        });
+    }
+    if (!existing) {
+        await requireRoom(spaceId);
+    }
+    const now = new Date();
+    const values = { name: space.name, brand: space.brand, facts: space.facts, syncedAt: now };
+    if (existing) {
+        await db
+            .update(schema.project)
+            .set({ ...values, updatedAt: now })
+            .where(eq(schema.project.id, spaceId));
+    }
+    else {
+        await db.insert(schema.project).values({
+            id: spaceId,
+            tenantId: currentTenant(),
+            origin: "local",
+            mcpServers: [],
+            ...values,
+        });
+    }
+    await syncLogo(spaceId, space.logo);
+    const project = await syncedProject(spaceId);
+    if (!project) {
+        throw notFound();
+    }
+    return project;
+}
+/**
+ * Takes a wizard a local install published: the project it is in, the wizard under its id, its
+ * workspace, and the version — published here when a run of it can finish. Sending the same
+ * wizard again updates the copy; its link stays.
+ */
+export async function syncWizard(userId, rawSpaceId, rawWizardId, input) {
+    const spaceId = syncedId.parse(rawSpaceId);
+    const wizardId = syncedId.parse(rawWizardId);
+    const paths = input.files.map((f) => f.path);
+    // The shape is checked before anything is written; a wrong one leaves nothing behind.
+    const { draft } = parseDraft(input.definition, paths);
+    return asSync(async () => {
+        const project = await syncSpace(spaceId, input.space);
+        const existing = await db.query.wizard.findFirst({
+            where: and(eq(schema.wizard.id, wizardId), eq(schema.wizard.tenantId, currentTenant())),
+        });
+        if (existing && existing.projectId !== spaceId) {
+            throw new ServiceError("refused", "Ein Wizard mit dieser Kennung gehört hier woanders hin.", {
+                reason: "id_taken",
+            });
+        }
+        const settings = {
+            title: draft.title,
+            draft,
+            shareEnabled: input.shareEnabled,
+            ...(input.dailyRunLimit ? { dailyRunLimit: input.dailyRunLimit } : {}),
+        };
+        if (!existing) {
+            await requireWizardRoom(spaceId);
+        }
+        let shareToken = existing?.shareToken;
+        if (existing) {
+            await db
+                .update(schema.wizard)
+                .set({ ...settings, revision: sql `${schema.wizard.revision} + 1`, updatedAt: new Date() })
+                .where(eq(schema.wizard.id, wizardId));
+        }
+        else {
+            // The link is made here: a token an install brought could be one another tenant holds.
+            shareToken = nanoid(14);
+            await db.insert(schema.wizard).values({
+                id: wizardId,
+                projectId: spaceId,
+                tenantId: currentTenant(),
+                shareToken,
+                dailyRunLimit: env.limits.defaultDailyRuns,
+                ...settings,
+            });
+            await putLink(shareToken, "wizard", wizardId);
+        }
+        // The workspace becomes what was sent: files that are gone there go here.
+        const before = await draftFiles(wizardId);
+        const gone = before.filter((f) => !paths.includes(f.path)).map((f) => f.path);
+        if (gone.length) {
+            await db
+                .delete(schema.wizardFile)
+                .where(and(eq(schema.wizardFile.wizardId, wizardId), inArray(schema.wizardFile.path, gone)));
+        }
+        for (const file of input.files) {
+            await writeFile(userId, wizardId, file.path, Buffer.from(file.data, "base64"), file.mime);
+        }
+        const row = await db.query.wizard.findFirst({ where: eq(schema.wizard.id, wizardId) });
+        if (!row) {
+            throw notFound();
+        }
+        const problems = await serverProblems(draft, await draftIssues(row), project.mcpServers.map((s) => s.id));
+        const runnable = !problems.some((p) => p.blocking);
+        let publishedVersion = row.publishedVersion;
+        if (runnable) {
+            const files = await draftFiles(wizardId);
+            await db
+                .insert(schema.wizardVersion)
+                .values({ id: nanoid(12), wizardId, version: input.version, definition: draft, files })
+                .onConflictDoUpdate({
+                target: [schema.wizardVersion.wizardId, schema.wizardVersion.version],
+                set: { definition: draft, files },
+            });
+            await db
+                .update(schema.wizard)
+                .set({ publishedVersion: input.version })
+                .where(eq(schema.wizard.id, wizardId));
+            publishedVersion = input.version;
+        }
+        emitDraftChanged({
+            wizardId,
+            kind: "draft",
+            revision: row.revision,
+            source: "mcp",
+            client: "sync",
+            note: null,
+            touched: [],
+        });
+        return {
+            wizardId,
+            shareUrl: shareUrl(shareToken ?? row.shareToken),
+            code: await codeOf(shareToken ?? row.shareToken),
+            shareEnabled: row.shareEnabled,
+            publishedVersion,
+            runnable,
+            problems,
+        };
+    });
+}
+async function syncedWizard(rawSpaceId, rawWizardId) {
+    const spaceId = syncedId.parse(rawSpaceId);
+    const wizardId = syncedId.parse(rawWizardId);
+    const project = await syncedProject(spaceId);
+    const w = project?.origin === "local"
+        ? await db.query.wizard.findFirst({
+            where: and(eq(schema.wizard.id, wizardId), eq(schema.wizard.projectId, spaceId)),
+        })
+        : null;
+    if (!w) {
+        throw notFound();
+    }
+    return w;
+}
+/** The install changed how a synced wizard is shared: its link on or off, its runs a day. */
+export async function patchSyncedWizard(spaceId, wizardId, patch) {
+    const w = await syncedWizard(spaceId, wizardId);
+    await db
+        .update(schema.wizard)
+        .set({ ...patch, updatedAt: new Date() })
+        .where(eq(schema.wizard.id, w.id));
+    return { ok: true };
+}
+/** The install deleted a wizard: its copy here goes, with its link and its runs. */
+export async function removeSyncedWizard(userId, spaceId, wizardId) {
+    const w = await syncedWizard(spaceId, wizardId);
+    await asSync(() => deleteWizard(userId, w.id));
+    return { ok: true };
+}
+/** The projects local installs synced, with their wizards: what an install compares itself to. */
+export async function listSyncedSpaces() {
+    const projects = await db.query.project.findMany({
+        where: and(eq(schema.project.tenantId, currentTenant()), eq(schema.project.origin, "local")),
+        orderBy: [schema.project.createdAt],
+    });
+    const wizards = projects.length
+        ? await db
+            .select({
+            id: schema.wizard.id,
+            projectId: schema.wizard.projectId,
+            title: schema.wizard.title,
+            publishedVersion: schema.wizard.publishedVersion,
+            shareToken: schema.wizard.shareToken,
+            shareEnabled: schema.wizard.shareEnabled,
+        })
+            .from(schema.wizard)
+            .where(inArray(schema.wizard.projectId, projects.map((p) => p.id)))
+        : [];
+    return projects.map((p) => ({
+        id: p.id,
+        name: p.name,
+        syncedAt: p.syncedAt?.toISOString() ?? null,
+        wizards: wizards
+            .filter((w) => w.projectId === p.id)
+            .map((w) => ({
+            id: w.id,
+            title: w.title,
+            publishedVersion: w.publishedVersion,
+            shareUrl: shareUrl(w.shareToken),
+            shareEnabled: w.shareEnabled,
+        })),
+    }));
+}
+/** Takes a synced project away from this runtime: its wizards, their links and runs, its files. */
+export async function removeSyncedSpace(rawSpaceId) {
+    const spaceId = syncedId.parse(rawSpaceId);
+    const project = await syncedProject(spaceId);
+    if (project?.origin !== "local") {
+        throw notFound();
+    }
+    await asSync(() => removeProject(spaceId));
+    return { ok: true };
+}

package/apps/runtime/dist/services/wizards.js

@@ -8,6 +8,7 @@ import { env } from "../env.js";
 import { pluginToolsOf } from "../plugins/registry.js";
 import { dropLinks, putLink } from "../tenants/control.js";
 import { currentTenant } from "../tenants/tenant.js";
+import { requireBuild, requireWritable, requireWritableProject } from "./access.js";
 import { changedSteps, emitDraftChanged } from "./draft-events.js";
 import { notFound, ServiceError } from "./errors.js";
 import { copyFiles, draftFiles, sameFiles, seedFiles } from "./files.js";
@@ -41,6 +42,12 @@ export async function ownedWizard(_userId, wizardId) {
     }
     return w;
 }
+/** The wizard, for a change: refused where its project is a local install's or nothing is built here. */
+export async function writableWizard(userId, wizardId) {
+    const w = await ownedWizard(userId, wizardId);
+    await requireWritableProject(w.projectId);
+    return w;
+}
 export function wizardSummary(w) {
     return {
         id: w.id,
@@ -193,9 +200,12 @@ export function shapeIssues(error, raw) {
     });
 }
 export async function createWizard(userId, input, writer = { source: "studio" }) {
+    // Asked first: a tenant that builds nothing here has no project of its own to name.
+    await requireBuild();
     const project = input.projectId
         ? await ownedProject(userId, input.projectId)
         : await defaultProject(userId);
+    await requireWritable(project);
     const starter = input.starterId
         ? await marketplaceWizard(input.starterId, asLang(input.lang))
         : undefined;
@@ -243,7 +253,7 @@ export async function createWizard(userId, input, writer = { source: "studio" })
  * architect, MCP — goes through here, so the revision counts all of them.
  */
 export async function writeDraft(userId, wizardId, input, writer = { source: "studio" }) {
-    const w = await ownedWizard(userId, wizardId);
+    const w = await writableWizard(userId, wizardId);
     const files = await draftFiles(w.id);
     const paths = files.map((f) => f.path);
     const { draft } = parseDraft(input.definition, paths);
@@ -279,7 +289,7 @@ export async function writeDraft(userId, wizardId, input, writer = { source: "st
     return { revision: row.revision, issues, draft };
 }
 export async function editWizard(userId, wizardId, input, writer) {
-    const w = await ownedWizard(userId, wizardId);
+    const w = await writableWizard(userId, wizardId);
     if (w.revision !== input.baseRevision) {
         throw new ServiceError("revision_conflict", "Der Wizard wurde inzwischen geändert.", {
             revision: w.revision,
@@ -298,9 +308,9 @@ export async function editWizard(userId, wizardId, input, writer) {
     return writeDraft(userId, wizardId, { definition, baseRevision: input.baseRevision, note: input.note }, writer);
 }
 export async function updateWizardSettings(userId, wizardId, patch) {
-    const w = await ownedWizard(userId, wizardId);
+    const w = await writableWizard(userId, wizardId);
     if (patch.projectId) {
-        await ownedProject(userId, patch.projectId);
+        await requireWritable(await ownedProject(userId, patch.projectId));
     }
     await db
         .update(schema.wizard)
@@ -309,7 +319,7 @@ export async function updateWizardSettings(userId, wizardId, patch) {
     return wizardSummary(await ownedWizard(userId, wizardId));
 }
 export async function rotateShareLink(userId, wizardId) {
-    const w = await ownedWizard(userId, wizardId);
+    const w = await writableWizard(userId, wizardId);
     const token = newShareToken();
     await db
         .update(schema.wizard)
@@ -320,7 +330,7 @@ export async function rotateShareLink(userId, wizardId) {
     return { shareToken: token, shareUrl: shareUrl(token) };
 }
 export async function duplicateWizard(userId, wizardId) {
-    const w = await ownedWizard(userId, wizardId);
+    const w = await writableWizard(userId, wizardId);
     const id = nanoid(12);
     const draft = { ...w.draft, title: `${w.draft.title} (Kopie)` };
     const shareToken = newShareToken();
@@ -338,7 +348,8 @@ export async function duplicateWizard(userId, wizardId) {
     await copyFiles(w.id, id);
     return { id };
 }
-export async function deleteWizard(_userId, wizardId) {
+export async function deleteWizard(userId, wizardId) {
+    await writableWizard(userId, wizardId);
     await forgetWizardLinks(wizardId);
     await db
         .delete(schema.wizard)
@@ -354,7 +365,7 @@ export async function requireClean(w) {
     return { definition: w.draft, files };
 }
 export async function publishWizard(userId, wizardId) {
-    const w = await ownedWizard(userId, wizardId);
+    const w = await writableWizard(userId, wizardId);
     const { definition, files } = await requireClean(w);
     const version = (w.publishedVersion ?? 0) + 1;
     await db

package/apps/runtime/dist/tenants/control.js

@@ -12,10 +12,57 @@ export async function putLink(token, kind, ref) {
         set: { tenantId: currentTenant(), kind, ref },
     });
 }
+/** A token's link goes, and with a wizard's share token its ID. */
 export async function dropLinks(tokens) {
     if (tokens.length) {
         await controlDb.delete(control.link).where(inArray(control.link.token, tokens));
+        await controlDb
+            .delete(control.link)
+            .where(and(eq(control.link.kind, "code"), inArray(control.link.ref, tokens)));
+    }
+}
+// --- wizard IDs ----------------------------------------------------------------------
+// The share token is 14 characters of both cases, `_` and `-`: nobody types that on a phone.
+// The ID is 8 capitals and digits without look-alikes (no 0 O 1 I), made the first time someone
+// asks for it and gone when the share token rotates.
+const CODE_ALPHABET = "23456789ABCDEFGHJKLMNPQRSTUVWXYZ";
+const CODE_LENGTH = 8;
+function newCode() {
+    const bytes = crypto.getRandomValues(new Uint8Array(CODE_LENGTH));
+    return Array.from(bytes, (b) => CODE_ALPHABET[b % CODE_ALPHABET.length]).join("");
+}
+/** What a person typed, as stored: capitals, no spaces or dashes. */
+export const normalizeCode = (input) => input.toUpperCase().replace(/[\s-]/g, "");
+/** The ID of a wizard's share token; made on the first ask. */
+export async function codeOf(shareToken) {
+    const row = await controlDb.query.link.findFirst({
+        where: and(eq(control.link.kind, "code"), eq(control.link.ref, shareToken)),
+    });
+    if (row) {
+        return row.token;
     }
+    for (;;) {
+        const code = newCode();
+        const made = await controlDb
+            .insert(control.link)
+            .values({ token: code, tenantId: currentTenant(), kind: "code", ref: shareToken })
+            .onConflictDoNothing()
+            .returning({ token: control.link.token });
+        if (made.length) {
+            return code;
+        }
+    }
+}
+/** The share token behind an ID, and its tenant. */
+export async function tokenOfCode(input) {
+    const code = normalizeCode(input);
+    if (code.length !== CODE_LENGTH) {
+        return null;
+    }
+    const row = await controlDb.query.link.findFirst({
+        where: and(eq(control.link.kind, "code"), eq(control.link.token, code)),
+    });
+    return row ? { token: row.ref, tenantId: row.tenantId } : null;
 }
 export async function tenantOfLink(token, kind) {
     const row = await controlDb.query.link.findFirst({

package/apps/web/dist/assets/{ChangelogDialog-Co_9fs61.js → ChangelogDialog-CbZBUMRu.js}

@@ -1 +1 @@
-import{a as e,n as t,t as n}from"./jsx-runtime-D3jfb0Ew.js";import{t as r}from"./preload-helper-CNEI7N0N.js";import{a as i,d as a,h as o,i as s,s as c,y as l}from"./ui-Cs6lpsmj.js";var u=e(t(),1),d=e(n(),1);function f(e){switch(e.group){case`Added`:return{label:`NEW`,dot:`bg-moss`};case`Fixed`:return{label:`FIXED`,dot:`bg-amber`};case`Changed`:return{label:`CHANGED`,dot:`bg-cobalt`};case`Performance`:return{label:`PERFORMANCE`,dot:`bg-ember`};case`Deploy`:return{label:`DEPLOY`,dot:`bg-ink-4`};case`Docs`:return{label:`DOCS`,dot:`bg-ink-4`};default:return{label:`OTHER`,dot:`bg-ink-4`}}}var p=e=>e.version?e.version.replace(/^v/,``):l(`about.unreleased`),m=e=>e.timestamp?new Date(e.timestamp*1e3).toISOString().slice(0,10):``,h=e=>e.charAt(0).toUpperCase()+e.slice(1);function g(e,t){let n=t.trim().toLowerCase();if(!n)return e;let r=[];for(let t of e){if(`${p(t)} ${m(t)}`.toLowerCase().includes(n)){r.push(t);continue}let e=t.commits.filter(e=>`${f(e).label} ${e.scope??``} ${e.message}`.toLowerCase().includes(n));e.length>0&&r.push({...t,commits:e})}return r}function _({open:e,onClose:t}){let[n,_]=(0,u.useState)(null),[v,y]=(0,u.useState)(``);(0,u.useEffect)(()=>{if(!e||n)return;let t=!1;return r(()=>import(`./changelog-03JgixQA.js`).then(e=>{t||_(e.default)}),[]),()=>{t=!0}},[e,n]),(0,u.useEffect)(()=>{e||y(``)},[e]);let b=n?g(n,v):[];return(0,d.jsxs)(s,{open:e,onClose:t,title:l(`about.changelog`),wide:!0,children:[(0,d.jsx)(`p`,{className:`-mt-3 mb-4 text-[14px] text-ink-3`,children:l(`about.changelogHint`)}),n===null?(0,d.jsx)(`div`,{className:`flex justify-center py-10 text-ink-3`,children:(0,d.jsx)(a,{})}):n.length===0?(0,d.jsx)(i,{children:l(`about.changelogEmpty`)}):(0,d.jsxs)(d.Fragment,{children:[(0,d.jsx)(c,{type:`search`,value:v,placeholder:l(`about.search`),onChange:e=>y(e.target.value)}),b.length===0?(0,d.jsx)(i,{children:l(`about.noMatches`)}):null,b.map(e=>(0,d.jsxs)(`section`,{className:`mt-6`,children:[(0,d.jsxs)(`h3`,{className:`flex items-baseline gap-3 border-border-soft border-b pb-2 font-display font-semibold text-[16px]`,children:[p(e),(0,d.jsx)(`span`,{className:`font-normal font-sans text-[13px] text-ink-3 tabular-nums`,children:m(e)})]}),(0,d.jsx)(`ul`,{className:`mt-3 flex flex-col gap-2`,children:e.commits.map(e=>{let t=f(e);return(0,d.jsxs)(`li`,{className:`flex items-start gap-2.5 text-[14px]`,children:[(0,d.jsx)(`span`,{className:o(`mt-[7px] size-1.5 shrink-0 rounded-full`,t.dot)}),(0,d.jsxs)(`span`,{className:`min-w-0 text-ink-2`,children:[(0,d.jsxs)(`span`,{className:`font-semibold text-[12px] text-ink tracking-wide`,children:[t.label,e.scope?` [${e.scope}]`:``]}),` `,h(e.message),e.breaking?(0,d.jsx)(`span`,{className:`ml-1.5 rounded-full bg-rose-tint px-1.5 py-0.5 font-medium text-[12px] text-rose`,children:l(`about.breaking`)}):null]})]},e.id)})})]},e.version??`unreleased`))]})]})}export{_ as ChangelogDialog};
+import{a as e,n as t,t as n}from"./jsx-runtime-D3jfb0Ew.js";import{t as r}from"./preload-helper-CNEI7N0N.js";import{a as i,d as a,h as o,i as s,s as c,y as l}from"./ui-iTYHqwvY.js";var u=e(t(),1),d=e(n(),1);function f(e){switch(e.group){case`Added`:return{label:`NEW`,dot:`bg-moss`};case`Fixed`:return{label:`FIXED`,dot:`bg-amber`};case`Changed`:return{label:`CHANGED`,dot:`bg-cobalt`};case`Performance`:return{label:`PERFORMANCE`,dot:`bg-ember`};case`Deploy`:return{label:`DEPLOY`,dot:`bg-ink-4`};case`Docs`:return{label:`DOCS`,dot:`bg-ink-4`};default:return{label:`OTHER`,dot:`bg-ink-4`}}}var p=e=>e.version?e.version.replace(/^v/,``):l(`about.unreleased`),m=e=>e.timestamp?new Date(e.timestamp*1e3).toISOString().slice(0,10):``,h=e=>e.charAt(0).toUpperCase()+e.slice(1);function g(e,t){let n=t.trim().toLowerCase();if(!n)return e;let r=[];for(let t of e){if(`${p(t)} ${m(t)}`.toLowerCase().includes(n)){r.push(t);continue}let e=t.commits.filter(e=>`${f(e).label} ${e.scope??``} ${e.message}`.toLowerCase().includes(n));e.length>0&&r.push({...t,commits:e})}return r}function _({open:e,onClose:t}){let[n,_]=(0,u.useState)(null),[v,y]=(0,u.useState)(``);(0,u.useEffect)(()=>{if(!e||n)return;let t=!1;return r(()=>import(`./changelog-Cto0j5-V.js`).then(e=>{t||_(e.default)}),[]),()=>{t=!0}},[e,n]),(0,u.useEffect)(()=>{e||y(``)},[e]);let b=n?g(n,v):[];return(0,d.jsxs)(s,{open:e,onClose:t,title:l(`about.changelog`),wide:!0,children:[(0,d.jsx)(`p`,{className:`-mt-3 mb-4 text-[14px] text-ink-3`,children:l(`about.changelogHint`)}),n===null?(0,d.jsx)(`div`,{className:`flex justify-center py-10 text-ink-3`,children:(0,d.jsx)(a,{})}):n.length===0?(0,d.jsx)(i,{children:l(`about.changelogEmpty`)}):(0,d.jsxs)(d.Fragment,{children:[(0,d.jsx)(c,{type:`search`,value:v,placeholder:l(`about.search`),onChange:e=>y(e.target.value)}),b.length===0?(0,d.jsx)(i,{children:l(`about.noMatches`)}):null,b.map(e=>(0,d.jsxs)(`section`,{className:`mt-6`,children:[(0,d.jsxs)(`h3`,{className:`flex items-baseline gap-3 border-border-soft border-b pb-2 font-display font-semibold text-[16px]`,children:[p(e),(0,d.jsx)(`span`,{className:`font-normal font-sans text-[13px] text-ink-3 tabular-nums`,children:m(e)})]}),(0,d.jsx)(`ul`,{className:`mt-3 flex flex-col gap-2`,children:e.commits.map(e=>{let t=f(e);return(0,d.jsxs)(`li`,{className:`flex items-start gap-2.5 text-[14px]`,children:[(0,d.jsx)(`span`,{className:o(`mt-[7px] size-1.5 shrink-0 rounded-full`,t.dot)}),(0,d.jsxs)(`span`,{className:`min-w-0 text-ink-2`,children:[(0,d.jsxs)(`span`,{className:`font-semibold text-[12px] text-ink tracking-wide`,children:[t.label,e.scope?` [${e.scope}]`:``]}),` `,h(e.message),e.breaking?(0,d.jsx)(`span`,{className:`ml-1.5 rounded-full bg-rose-tint px-1.5 py-0.5 font-medium text-[12px] text-rose`,children:l(`about.breaking`)}):null]})]},e.id)})})]},e.version??`unreleased`))]})]})}export{_ as ChangelogDialog};