Phase 1 of `docs/console.md` (builds on #6, whose docs commit it includes; merge #6 first). **API** - `permissions.ts`: `resource:action` permissions, built-in roles as bundles at a scope (hub, catalog, product), `can`/`require`, "may give" checks. A missing permission answers 403 with `missing: {permission, scope}`. - Catalog management: settings (incl. rating ceiling, upload policy, mirroring), key rotation, operators, membership (open / approval / invite links, bans), delisting, suspension by moderators, and `GET /api/v1/catalog/changes` for catalogs. - Membership is enforced: getting a product (403 `members_only` with the catalogs to join), the library list, and outfits relayed to others. Seeing products still needs no membership. - Console for everyone who controls a catalog, product or hosted room; `/console/audit` (tagged entries, scoped by permission, with filters), `/console/permissions`; `/me` says whether the console is for them. - Migration 0010: `role_assignment`, `catalog_member`, `catalog_invite`, `catalog_change`, catalog settings, audit `tags` (backfilled from old entries). **Website** - Console overview by what you manage; audit log page with filters; catalog list scoped to your teams; a catalog management page (settings, key, team, members, invitations, products, moderation, recent changes). - Public catalog pages with join / ask / accept invitation / leave; product pages say "members only" and link the catalogs. **Checked**: 43 API tests pass (8 new in `catalogs.test.ts`); API, web and db type checks; every new page rendered against a local hub for owner, operator, member, outsider and admin; the Eden DELETE-with-query calls tested against the API. Server-action forms weren't clicked through in a browser. Not in this PR (later phases): catalog deletion requests (with cases), drafts and moderator product edits, notifications, API tokens, two-factor, imports, charts. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Phase 1 of `docs/console.md` (builds on #6, whose docs commit it includes; merge #6 first). **API** - `permissions.ts`: `resource:action` permissions, built-in roles as bundles at a scope (hub, catalog, product), `can`/`require`, "may give" checks. A missing permission answers 403 with `missing: {permission, scope}`. - Catalog management: settings (incl. rating ceiling, upload policy, mirroring), key rotation, operators, membership (open / approval / invite links, bans), delisting, suspension by moderators, and `GET /api/v1/catalog/changes` for catalogs. - Membership is enforced: getting a product (403 `members_only` with the catalogs to join), the library list, and outfits relayed to others. Seeing products still needs no membership. - Console for everyone who controls a catalog, product or hosted room; `/console/audit` (tagged entries, scoped by permission, with filters), `/console/permissions`; `/me` says whether the console is for them. - Migration 0010: `role_assignment`, `catalog_member`, `catalog_invite`, `catalog_change`, catalog settings, audit `tags` (backfilled from old entries). **Website** - Console overview by what you manage; audit log page with filters; catalog list scoped to your teams; a catalog management page (settings, key, team, members, invitations, products, moderation, recent changes). - Public catalog pages with join / ask / accept invitation / leave; product pages say "members only" and link the catalogs. **Checked**: 43 API tests pass (8 new in `catalogs.test.ts`); API, web and db type checks; every new page rendered against a local hub for owner, operator, member, outsider and admin; the Eden DELETE-with-query calls tested against the API. Server-action forms weren't clicked through in a browser. Not in this PR (later phases): catalog deletion requests (with cases), drafts and moderator product edits, notifications, API tokens, two-factor, imports, charts. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-authored-by: dhkatz <[email protected]>
39 lines
1.8 KiB
TypeScript
39 lines
1.8 KiB
TypeScript
// The hub's database: Postgres in production (DATABASE_URL), or PGlite (Postgres compiled to WebAssembly, in
|
|
// process) for development and tests, so nothing needs installing.
|
|
import { drizzle as drizzleBun } from "drizzle-orm/bun-sql";
|
|
import { migrate as migrateBun } from "drizzle-orm/bun-sql/migrator";
|
|
import { drizzle as drizzlePglite } from "drizzle-orm/pglite";
|
|
import { migrate as migratePglite } from "drizzle-orm/pglite/migrator";
|
|
import { PGlite } from "@electric-sql/pglite";
|
|
import { SQL } from "bun";
|
|
import { mkdirSync } from "node:fs";
|
|
import { fileURLToPath } from "node:url";
|
|
import * as schema from "./schema";
|
|
|
|
export { schema };
|
|
export type { AuditTags, DecorationItem, FileEntry, ParentInfo, RoomModerator, SceneItem } from "./schema";
|
|
export * from "drizzle-orm";
|
|
|
|
const migrationsFolder = fileURLToPath(new URL("../drizzle", import.meta.url));
|
|
|
|
export type Database = ReturnType<typeof drizzlePglite<typeof schema>>;
|
|
|
|
/**
|
|
* Opens the database and brings its schema up to date.
|
|
* @param url a postgres:// URL, "memory" (a fresh in-process database), or a directory for PGlite's files.
|
|
*/
|
|
export async function openDatabase(url: string): Promise<{ db: Database; close: () => Promise<void> }> {
|
|
if (url.startsWith("postgres://") || url.startsWith("postgresql://")) {
|
|
const client = new SQL(url);
|
|
const db = drizzleBun({ client, schema });
|
|
await migrateBun(db, { migrationsFolder });
|
|
// Both drivers speak the same query builder; the PGlite type stands for both.
|
|
return { db: db as unknown as Database, close: async () => client.close() };
|
|
}
|
|
if (url !== "memory") mkdirSync(url, { recursive: true });
|
|
const client = url === "memory" ? new PGlite() : new PGlite(url);
|
|
const db = drizzlePglite({ client, schema });
|
|
await migratePglite(db, { migrationsFolder });
|
|
return { db, close: async () => client.close() };
|
|
}
|