feat: complete TASK-WP2-01 project foundations

apps/api/src/main.ts

@@ -7,6 +7,7 @@ import { createApp } from "./app.js";
 import { readBrowserSupportRelease } from "./browser-support.js";
 import { defaultInstanceConfigPath, readConfiguredLocalDataRoot } from "./local-data-root.js";
 import { ManagedStorage } from "./managed-storage.js";
+import { ProjectService } from "./projects.js";
 import { RegistrationService } from "./registration.js";
 import { MockResendAdapter } from "./resend-adapter.js";
 import { readSecureConfigCandidate } from "./secure-config.js";
@@ -15,6 +16,7 @@ import { attachApiSupervisorControl, initializeApiCredentialClients, receiveApiC
 
 const credentialChannelEnabled = process.argv.includes("--dada-credential-stdin");
 let registration: RegistrationService | undefined;
+let projects: ProjectService | undefined;
 const instanceConfigPath = process.env.DADA_INSTANCE_CONFIG_PATH ?? defaultInstanceConfigPath();
 if (credentialChannelEnabled) {
   const clients = initializeApiCredentialClients(await receiveApiCredentials());
@@ -23,17 +25,21 @@ if (credentialChannelEnabled) {
       .update(`Dada/P0A/${purpose}/v1`, "utf8")
       .digest();
     const dataRoot = readConfiguredLocalDataRoot(instanceConfigPath);
+    const databasePath = join(dataRoot, "db", "dada.sqlite3");
     registration = new RegistrationService({
       adminAllowlistPepper: Buffer.from(clients.adminAllowlistPepper),
       challengePepper: derivePepper("challenge-pepper"),
       currentPrivacyNoticeVersion: registrationNotice.version,
-      databasePath: join(dataRoot, "db", "dada.sqlite3"),
+      databasePath,
       invitePepper: derivePepper("invite-pepper"),
       resend: new MockResendAdapter(),
       sessionPepper: derivePepper("session-pepper"),
     });
+    projects = new ProjectService({ databasePath });
     registration.applySecureConfig(readSecureConfigCandidate(instanceConfigPath));
   } catch (error) {
+    projects?.close();
+    projects = undefined;
     registration?.close();
     registration = undefined;
     throw error;
@@ -45,6 +51,7 @@ if (credentialChannelEnabled) {
 const browserSupportRelease = readBrowserSupportRelease(resolve("RELEASE.json"));
 const app = await createApp({
   ...(browserSupportRelease ? { browserSupportRelease } : {}),
+  ...(projects ? { projects } : {}),
   ...(registration ? { registration } : {}),
 });
 
@@ -60,6 +67,7 @@ if (controlPipeIndex >= 0) {
   let storage: ManagedStorage | undefined;
   const control = attachApiSupervisorControl(controlPipe, async () => {
     await app.close();
+    projects?.close();
     registration?.close();
     storage?.close();
   });