External/SnapOtter
1
0
Fork 0
mirror of https://github.com/snapotter-hq/SnapOtter.git synced 2026-08-03 07:46:42 +02:00
Code Issues Packages Projects Releases Wiki Activity

style: apply Biome formatting to enterprise files

Browse Source
This commit is contained in:
SnapOtter
2026-06-14 14:53:44 +08:00
parent 954cfb01a6
commit e7bef34918
23 changed files with 166 additions and 228 deletions
Download Patch File Download Diff File Expand all files Collapse all files
apps/api/drizzle/meta/0002_snapshot.json
+22 -69
View File
@@ -70,12 +70,8 @@
"name": "api_keys_user_id_users_id_fk",
"tableFrom": "api_keys",
"tableTo": "users",
"columnsFrom": [
"user_id"
],
"columnsTo": [
"id"
],
"columnsFrom": ["user_id"],
"columnsTo": ["id"],
"onDelete": "cascade",
"onUpdate": "no action"
}
@@ -209,12 +205,8 @@
"name": "audit_log_actor_id_users_id_fk",
"tableFrom": "audit_log",
"tableTo": "users",
"columnsFrom": [
"actor_id"
],
"columnsTo": [
"id"
],
"columnsFrom": ["actor_id"],
"columnsTo": ["id"],
"onDelete": "set null",
"onUpdate": "no action"
}
@@ -378,12 +370,8 @@
"name": "jobs_user_id_users_id_fk",
"tableFrom": "jobs",
"tableTo": "users",
"columnsFrom": [
"user_id"
],
"columnsTo": [
"id"
],
"columnsFrom": ["user_id"],
"columnsTo": ["id"],
"onDelete": "set null",
"onUpdate": "no action"
}
@@ -441,12 +429,8 @@
"name": "pipelines_user_id_users_id_fk",
"tableFrom": "pipelines",
"tableTo": "users",
"columnsFrom": [
"user_id"
],
"columnsTo": [
"id"
],
"columnsFrom": ["user_id"],
"columnsTo": ["id"],
"onDelete": "cascade",
"onUpdate": "no action"
}
@@ -518,12 +502,8 @@
"name": "roles_created_by_users_id_fk",
"tableFrom": "roles",
"tableTo": "users",
"columnsFrom": [
"created_by"
],
"columnsTo": [
"id"
],
"columnsFrom": ["created_by"],
"columnsTo": ["id"],
"onDelete": "set null",
"onUpdate": "no action"
}
@@ -533,9 +513,7 @@
"roles_name_unique": {
"name": "roles_name_unique",
"nullsNotDistinct": false,
"columns": [
"name"
]
"columns": ["name"]
}
},
"policies": {},
@@ -583,12 +561,8 @@
"name": "sessions_user_id_users_id_fk",
"tableFrom": "sessions",
"tableTo": "users",
"columnsFrom": [
"user_id"
],
"columnsTo": [
"id"
],
"columnsFrom": ["user_id"],
"columnsTo": ["id"],
"onDelete": "cascade",
"onUpdate": "no action"
}
@@ -660,9 +634,7 @@
"teams_name_unique": {
"name": "teams_name_unique",
"nullsNotDistinct": false,
"columns": [
"name"
]
"columns": ["name"]
}
},
"policies": {},
@@ -753,12 +725,8 @@
"name": "user_files_user_id_users_id_fk",
"tableFrom": "user_files",
"tableTo": "users",
"columnsFrom": [
"user_id"
],
"columnsTo": [
"id"
],
"columnsFrom": ["user_id"],
"columnsTo": ["id"],
"onDelete": "cascade",
"onUpdate": "no action"
}
@@ -805,12 +773,8 @@
"name": "user_preferences_user_id_users_id_fk",
"tableFrom": "user_preferences",
"tableTo": "users",
"columnsFrom": [
"user_id"
],
"columnsTo": [
"id"
],
"columnsFrom": ["user_id"],
"columnsTo": ["id"],
"onDelete": "cascade",
"onUpdate": "no action"
}
@@ -818,10 +782,7 @@
"compositePrimaryKeys": {
"user_preferences_user_id_key_pk": {
"name": "user_preferences_user_id_key_pk",
"columns": [
"user_id",
"key"
]
"columns": ["user_id", "key"]
}
},
"uniqueConstraints": {},
@@ -929,9 +890,7 @@
"users_username_unique": {
"name": "users_username_unique",
"nullsNotDistinct": false,
"columns": [
"username"
]
"columns": ["username"]
}
},
"policies": {},
@@ -943,13 +902,7 @@
"public.job_status": {
"name": "job_status",
"schema": "public",
"values": [
"queued",
"processing",
"completed",
"failed",
"canceled"
]
"values": ["queued", "processing", "completed", "failed", "canceled"]
}
},
"schemas": {},
@@ -962,4 +915,4 @@
"schemas": {},
"tables": {}
}
}
}
apps/api/drizzle/meta/0003_snapshot.json
+22 -69
View File
@@ -70,12 +70,8 @@
"name": "api_keys_user_id_users_id_fk",
"tableFrom": "api_keys",
"tableTo": "users",
"columnsFrom": [
"user_id"
],
"columnsTo": [
"id"
],
"columnsFrom": ["user_id"],
"columnsTo": ["id"],
"onDelete": "cascade",
"onUpdate": "no action"
}
@@ -209,12 +205,8 @@
"name": "audit_log_actor_id_users_id_fk",
"tableFrom": "audit_log",
"tableTo": "users",
"columnsFrom": [
"actor_id"
],
"columnsTo": [
"id"
],
"columnsFrom": ["actor_id"],
"columnsTo": ["id"],
"onDelete": "set null",
"onUpdate": "no action"
}
@@ -384,12 +376,8 @@
"name": "jobs_user_id_users_id_fk",
"tableFrom": "jobs",
"tableTo": "users",
"columnsFrom": [
"user_id"
],
"columnsTo": [
"id"
],
"columnsFrom": ["user_id"],
"columnsTo": ["id"],
"onDelete": "set null",
"onUpdate": "no action"
}
@@ -447,12 +435,8 @@
"name": "pipelines_user_id_users_id_fk",
"tableFrom": "pipelines",
"tableTo": "users",
"columnsFrom": [
"user_id"
],
"columnsTo": [
"id"
],
"columnsFrom": ["user_id"],
"columnsTo": ["id"],
"onDelete": "cascade",
"onUpdate": "no action"
}
@@ -524,12 +508,8 @@
"name": "roles_created_by_users_id_fk",
"tableFrom": "roles",
"tableTo": "users",
"columnsFrom": [
"created_by"
],
"columnsTo": [
"id"
],
"columnsFrom": ["created_by"],
"columnsTo": ["id"],
"onDelete": "set null",
"onUpdate": "no action"
}
@@ -539,9 +519,7 @@
"roles_name_unique": {
"name": "roles_name_unique",
"nullsNotDistinct": false,
"columns": [
"name"
]
"columns": ["name"]
}
},
"policies": {},
@@ -589,12 +567,8 @@
"name": "sessions_user_id_users_id_fk",
"tableFrom": "sessions",
"tableTo": "users",
"columnsFrom": [
"user_id"
],
"columnsTo": [
"id"
],
"columnsFrom": ["user_id"],
"columnsTo": ["id"],
"onDelete": "cascade",
"onUpdate": "no action"
}
@@ -685,9 +659,7 @@
"teams_name_unique": {
"name": "teams_name_unique",
"nullsNotDistinct": false,
"columns": [
"name"
]
"columns": ["name"]
}
},
"policies": {},
@@ -778,12 +750,8 @@
"name": "user_files_user_id_users_id_fk",
"tableFrom": "user_files",
"tableTo": "users",
"columnsFrom": [
"user_id"
],
"columnsTo": [
"id"
],
"columnsFrom": ["user_id"],
"columnsTo": ["id"],
"onDelete": "cascade",
"onUpdate": "no action"
}
@@ -830,12 +798,8 @@
"name": "user_preferences_user_id_users_id_fk",
"tableFrom": "user_preferences",
"tableTo": "users",
"columnsFrom": [
"user_id"
],
"columnsTo": [
"id"
],
"columnsFrom": ["user_id"],
"columnsTo": ["id"],
"onDelete": "cascade",
"onUpdate": "no action"
}
@@ -843,10 +807,7 @@
"compositePrimaryKeys": {
"user_preferences_user_id_key_pk": {
"name": "user_preferences_user_id_key_pk",
"columns": [
"user_id",
"key"
]
"columns": ["user_id", "key"]
}
},
"uniqueConstraints": {},
@@ -974,9 +935,7 @@
"users_username_unique": {
"name": "users_username_unique",
"nullsNotDistinct": false,
"columns": [
"username"
]
"columns": ["username"]
}
},
"policies": {},
@@ -988,13 +947,7 @@
"public.job_status": {
"name": "job_status",
"schema": "public",
"values": [
"queued",
"processing",
"completed",
"failed",
"canceled"
]
"values": ["queued", "processing", "completed", "failed", "canceled"]
}
},
"schemas": {},
@@ -1007,4 +960,4 @@
"schemas": {},
"tables": {}
}
}
}
apps/api/src/lib/audit-integrity.ts
+1 -5
View File
@@ -16,11 +16,7 @@ export function computeHmac(data: Record<string, unknown>, key: Buffer): string
return createHmac("sha256", key).update(canonicalize(data)).digest("hex");
}
export function verifyHmac(
data: Record<string, unknown>,
hmac: string,
key: Buffer,
): boolean {
export function verifyHmac(data: Record<string, unknown>, hmac: string, key: Buffer): boolean {
const computed = computeHmac(data, key);
return computed === hmac;
}
apps/api/src/lib/audit.ts
+1 -4
View File
@@ -100,10 +100,7 @@ export async function auditLog(
requestId,
};
const integrity = computeHmac(rowData, hmacKey);
await db
.update(schema.auditLog)
.set({ integrity })
.where(eq(schema.auditLog.id, id));
await db.update(schema.auditLog).set({ integrity }).where(eq(schema.auditLog.id, id));
}
} catch {
logger.warn({ event }, "Failed to compute audit HMAC");
apps/api/src/lib/encryption.ts
+1 -6
View File
@@ -1,9 +1,4 @@
import {
createCipheriv,
createDecipheriv,
randomBytes,
hkdf as hkdfCb,
} from "node:crypto";
import { createCipheriv, createDecipheriv, hkdf as hkdfCb, randomBytes } from "node:crypto";
import { promisify } from "node:util";
const hkdf = promisify(hkdfCb);
apps/api/src/lib/webhook-delivery.ts
+6 -1
View File
@@ -50,7 +50,12 @@ export async function deliverWebhook(
lastError = `HTTP ${response.status}`;
// Don't retry 4xx errors (client errors = won't succeed on retry)
if (response.status >= 400 && response.status < 500) {
return { success: false, statusCode: response.status, error: lastError, attempts: attempt + 1 };
return {
success: false,
statusCode: response.status,
error: lastError,
attempts: attempt + 1,
};
}
} catch (err) {
lastError = err instanceof Error ? err.message : String(err);
apps/api/src/routes/api-keys.ts
+5 -1
View File
@@ -86,7 +86,11 @@ export async function apiKeyRoutes(app: FastifyInstance): Promise<void> {
return reply.status(409).send({ error: "Failed to create API key" });
}
await auditFromRequest(request)("API_KEY_CREATED", { userId: user.id, keyId: id, keyName: name });
await auditFromRequest(request)("API_KEY_CREATED", {
userId: user.id,
keyId: id,
keyName: name,
});
// Return the raw key ONCE — it cannot be retrieved again
return reply.status(201).send({
apps/api/src/routes/enterprise/siem.ts
+10 -11
View File
@@ -35,9 +35,9 @@ export async function registerSiemRoutes(app: FastifyInstance): Promise<void> {
// Enterprise package not available
}
if (!featureEnabled) {
return reply
.status(403)
.send({ error: "SIEM forwarding requires an enterprise license with the siem_forwarding feature" });
return reply.status(403).send({
error: "SIEM forwarding requires an enterprise license with the siem_forwarding feature",
});
}
const [row] = await db
@@ -65,10 +65,7 @@ export async function registerSiemRoutes(app: FastifyInstance): Promise<void> {
// PUT /api/v1/enterprise/siem/config
app.put(
"/api/v1/enterprise/siem/config",
async (
request: FastifyRequest<{ Body: unknown }>,
reply: FastifyReply,
) => {
async (request: FastifyRequest<{ Body: unknown }>, reply: FastifyReply) => {
const user = await requirePermission("webhooks:manage")(request, reply);
if (!user) return;
@@ -81,14 +78,16 @@ export async function registerSiemRoutes(app: FastifyInstance): Promise<void> {
// Enterprise package not available
}
if (!featureEnabled) {
return reply
.status(403)
.send({ error: "SIEM forwarding requires an enterprise license with the siem_forwarding feature" });
return reply.status(403).send({
error: "SIEM forwarding requires an enterprise license with the siem_forwarding feature",
});
}
const parsed = configSchema.safeParse(request.body);
if (!parsed.success) {
return reply.status(400).send({ error: "Invalid SIEM config", details: parsed.error.issues });
return reply
.status(400)
.send({ error: "Invalid SIEM config", details: parsed.error.issues });
}
const config = { ...parsed.data };
apps/api/src/routes/settings.ts
+7 -4
View File
@@ -9,10 +9,10 @@
import { eq } from "drizzle-orm";
import type { FastifyInstance, FastifyReply, FastifyRequest } from "fastify";
import { z } from "zod";
import { env } from "../config.js";
import { db, schema } from "../db/index.js";
import { auditFromRequest } from "../lib/audit.js";
import { env } from "../config.js";
import { encrypt, decrypt, isEncrypted } from "../lib/encryption.js";
import { decrypt, encrypt, isEncrypted } from "../lib/encryption.js";
import { requirePermission } from "../permissions.js";
import { requireAuth } from "../plugins/auth.js";
@@ -37,8 +37,11 @@ async function decryptIfNeeded(value: string): Promise<string> {
if (!isEncrypted(value)) return value;
if (!env.DATA_ENCRYPTION_KEY) return value;
return (
(await decrypt(value, env.DATA_ENCRYPTION_KEY, env.DATA_ENCRYPTION_KEY_PREVIOUS || undefined)) ??
value
(await decrypt(
value,
env.DATA_ENCRYPTION_KEY,
env.DATA_ENCRYPTION_KEY_PREVIOUS || undefined,
)) ?? value
);
}