feat(api): 🏷️ Only allow JSON values in JSON HTTP responses

drizzle/schema.ts

@@ -344,7 +344,7 @@ export const Instances = pgTable("Instances", {
     baseUrl: text("base_url").notNull(),
     name: text("name").notNull(),
     version: text("version").notNull(),
-    logo: jsonb("logo"),
+    logo: jsonb("logo").$type<ContentFormat>(),
     disableAutomoderation: boolean("disable_automoderation")
         .default(false)
         .notNull(),

server/api/api/v1/instance/index.ts

@@ -38,7 +38,7 @@ export default (app: Hono) =>
                 and(isNull(Users.instanceId), eq(Users.isAdmin, true)),
             );
 
-            const knownDomainsCount = Instance.getCount();
+            const knownDomainsCount = await Instance.getCount();
 
             // TODO: fill in more values
             return jsonResponse({

utils/response.ts

@@ -27,8 +27,17 @@ export const response = (
     });
 };
 
+export type Json =
+    | string
+    | number
+    | boolean
+    | null
+    | undefined
+    | Json[]
+    | { [key: string]: Json };
+
 export const jsonResponse = (
-    data: object,
+    data: Json,
     status = 200,
     headers: Record<string, string> = {},
 ) => {