Feat/cli autogen

.env.example

@@ -2,6 +2,7 @@ DATABASE_URL=postgres://postgres:postgres@localhost:5432/scrawn
 CLICKHOUSE_URL=http://default:clickhouse@localhost:8123/scrawn
 
 HMAC_SECRET=
+MASTER_API_KEY_HASH= # hex(HMAC-SHA256(HMAC_SECRET, <raw master key>)) — computed with HMAC_SECRET as the signing key (used for project creation during onboarding)
 APP_URL=http://localhost:8060 # URL the Scrawn backend is hosted on
 
 # SENTRY_DSN=

docker-compose.yml

@@ -60,6 +60,7 @@ services:
       NODE_ENV: production
       HMAC_SECRET: ${HMAC_SECRET}
       APP_URL: ${APP_URL}
+      MASTER_API_KEY_HASH: ${MASTER_API_KEY_HASH}
 
   dashboard:
     profiles:
@@ -77,6 +78,6 @@ services:
       BETTER_AUTH_URL: http://localhost:3000
       SCRAWN_BASE_URL: http://server:8060
       SCRAWN_HTTP_URL: http://server:8060
-      SCRAWN_KEY: ${SCRAWN_KEY}
+      MASTER_API_KEY: ${MASTER_API_KEY}
 
 

src/__tests__/auth.test.ts

@@ -15,11 +15,12 @@ import { getPostgresDB } from "../storage/db/postgres/db";
 import { webhookEndpointsTable } from "../storage/db/postgres/schema";
 import { DateTime } from "luxon";
 import { clearDatabase } from "./db";
-import { insertKey } from "./fixtures/apiKey";
+import { insertKey, TEST_PROJECT_ID } from "./fixtures/apiKey";
 
 async function insertWebhookEndpoint(apiKeyId: string): Promise<void> {
   const db = getPostgresDB();
   await db.insert(webhookEndpointsTable).values({
+    projectId: TEST_PROJECT_ID,
     apiKeyId,
     url: "https://example.com/webhook",
     privateKey: "test-private-key",

src/__tests__/createAPIKey.test.ts

@@ -14,7 +14,7 @@ import {
   registerEvent,
 } from "./fixtures/grpc";
 import { verifyApiKeyCreated } from "./assertions/events";
-import { createTestApiKey } from "./fixtures/apiKey";
+import { createTestApiKey, TEST_PROJECT_ID } from "./fixtures/apiKey";
 import { getPostgresDB } from "../storage/db/postgres/db";
 import { hashAPIKey } from "../utils/hashAPIKey";
 import {
@@ -44,6 +44,7 @@ async function createDashboardApiKey(): Promise<{
       key: hashAPIKey(rawKey),
       role: "dashboard",
       expiresAt: DateTime.utc().plus({ years: 1 }).toISO(),
+      projectId: TEST_PROJECT_ID,
     })
     .returning({ id: apiKeysTable.id });
   return { rawKey, id: key!.id };
@@ -149,6 +150,7 @@ describe("AuthService", () => {
 
       const db = getPostgresDB();
       await db.insert(webhookEndpointsTable).values({
+        projectId: TEST_PROJECT_ID,
         apiKeyId: res.apiKeyId,
         url: "https://example.com/webhook",
         privateKey: "test-private-key",

src/__tests__/db/index.ts

@@ -31,7 +31,8 @@ export async function clearDatabase() {
       users,
       tags,
       metadata,
-      expressions
+      expressions,
+      projects
     RESTART IDENTITY CASCADE
   `);
 

src/__tests__/fixtures/apiKey.ts

@@ -1,16 +1,35 @@
 import { getPostgresDB } from "../../storage/db/postgres/db";
 import {
+  projectsTable,
   apiKeysTable,
   webhookEndpointsTable,
 } from "../../storage/db/postgres/schema";
+import { eq } from "drizzle-orm";
 import { hashAPIKey } from "../../utils/hashAPIKey";
 import { DateTime } from "luxon";
 
+export const TEST_PROJECT_ID = "00000000-0000-0000-0000-000000000001";
+
+async function ensureTestProject(): Promise<void> {
+  const db = getPostgresDB();
+  const [existing] = await db
+    .select({ id: projectsTable.id })
+    .from(projectsTable)
+    .where(eq(projectsTable.id, TEST_PROJECT_ID))
+    .limit(1);
+  if (existing) return;
+  await db.insert(projectsTable).values({
+    id: TEST_PROJECT_ID,
+    name: "test-project",
+  });
+}
+
 export async function createTestApiKey(): Promise<{
   rawKey: string;
   id: string;
 }> {
   const db = getPostgresDB();
+  await ensureTestProject();
   const rawKey = `scrn_test_${crypto.randomUUID().replace(/-/g, "").slice(0, 32)}`;
   const [key] = await db
     .insert(apiKeysTable)
@@ -19,10 +38,12 @@ export async function createTestApiKey(): Promise<{
       key: hashAPIKey(rawKey),
       role: "test",
       expiresAt: DateTime.utc().plus({ years: 1 }).toISO(),
+      projectId: TEST_PROJECT_ID,
     })
     .returning({ id: apiKeysTable.id });
 
   await db.insert(webhookEndpointsTable).values({
+    projectId: TEST_PROJECT_ID,
     apiKeyId: key!.id,
     url: "https://example.com/webhook",
     privateKey: "test-private-key",
@@ -38,6 +59,7 @@ export async function insertKey(
   overrides: Partial<{ revoked: boolean; expiresAt: string }> = {}
 ): Promise<string> {
   const db = getPostgresDB();
+  await ensureTestProject();
   const [key] = await db
     .insert(apiKeysTable)
     .values({
@@ -47,6 +69,7 @@ export async function insertKey(
       expiresAt:
         overrides.expiresAt ?? DateTime.utc().plus({ years: 1 }).toISO(),
       revoked: overrides.revoked ?? false,
+      projectId: TEST_PROJECT_ID,
     })
     .returning({ id: apiKeysTable.id });
   return key!.id;

src/context/auth.ts

@@ -6,4 +6,5 @@ export interface AuthContext {
   apiKeyId: string;
   role: ApiKeyRole;
   mode: "production" | "test" | null;
+  projectId: string;
 }