@abyss-project/main 27.8.1 → 28.0.0

package/dist/server/demo/route-manifest.js

@@ -0,0 +1,71 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.checkDemoRouteManifest = exports.listRegisteredRoutes = void 0;
+require("reflect-metadata");
+const CONTROLLER_WATERMARK = '__controller__';
+const PATH_WATERMARK = '__path__';
+const METHOD_WATERMARK = '__method__';
+const OPTIONS_WATERMARK = '__OPTIONS__';
+const ROUTE_WATERMARK = '__route__';
+const MIDDLEWARE_HOOK_WATERMARK = '__middleware_hook__';
+const API_METHOD_NAMES = {
+    1: 'GET',
+    2: 'POST',
+    3: 'DELETE',
+    4: 'PUT',
+    5: 'PATCH',
+};
+const ADMIN_MIDDLEWARE = 'AdminMiddleware';
+const AUTH_MIDDLEWARE = /^Auth|AuthMiddleware$/;
+const joinPath = (...parts) => {
+    const joined = `/${parts.join('/')}`.replace(/\/{2,}/g, '/');
+    return joined.length > 1 ? joined.replace(/\/$/, '') : joined;
+};
+const classify = (hooks, userMiddlewares) => {
+    if (hooks.includes(ADMIN_MIDDLEWARE)) {
+        return 'admin';
+    }
+    return hooks.some((hook) => AUTH_MIDDLEWARE.test(hook) || userMiddlewares.includes(hook))
+        ? 'user'
+        : 'public';
+};
+const listRegisteredRoutes = (controllers, { prefix = '/api', userMiddlewares = [], } = {}) => {
+    const routes = [];
+    for (const controller of controllers) {
+        if (!Reflect.getMetadata(CONTROLLER_WATERMARK, controller)) {
+            continue;
+        }
+        const controllerPrefix = Reflect.getMetadata(PATH_WATERMARK, controller) ?? '/';
+        const controllerHooks = Reflect.getMetadata(MIDDLEWARE_HOOK_WATERMARK, controller) ?? [];
+        for (const name of Object.getOwnPropertyNames(controller.prototype)) {
+            if (!Reflect.getMetadata(ROUTE_WATERMARK, controller.prototype, name)) {
+                continue;
+            }
+            const options = Reflect.getMetadata(OPTIONS_WATERMARK, controller.prototype, name) ?? {};
+            const path = Reflect.getMetadata(PATH_WATERMARK, controller.prototype, name) ?? '';
+            const method = API_METHOD_NAMES[Reflect.getMetadata(METHOD_WATERMARK, controller.prototype, name)];
+            if (!method) {
+                throw new Error(`Route ${controller.name}.${name} has no known HTTP method`);
+            }
+            const routeHooks = Reflect.getMetadata(MIDDLEWARE_HOOK_WATERMARK, controller.prototype, name) ?? [];
+            const skip = options.shouldSkipController === true;
+            routes.push({
+                key: `${method} ${joinPath(prefix, skip ? '' : controllerPrefix, path)}`,
+                access: classify(skip ? routeHooks : [...controllerHooks, ...routeHooks], userMiddlewares),
+            });
+        }
+    }
+    return routes;
+};
+exports.listRegisteredRoutes = listRegisteredRoutes;
+const checkDemoRouteManifest = (routes, manifest) => {
+    const registered = new Set(routes.map((route) => route.key));
+    return {
+        unclassified: routes
+            .filter((route) => route.access === 'user' && !(route.key in manifest))
+            .map((route) => route.key),
+        stale: Object.keys(manifest).filter((key) => !registered.has(key)),
+    };
+};
+exports.checkDemoRouteManifest = checkDemoRouteManifest;
+//# sourceMappingURL=route-manifest.js.map

package/dist/server/demo/route-manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"route-manifest.js","sourceRoot":"","sources":["../../../src/server/demo/route-manifest.ts"],"names":[],"mappings":";;;AAAA,4BAA0B;AAwB1B,MAAM,oBAAoB,GAAG,gBAAgB,CAAC;AAC9C,MAAM,cAAc,GAAG,UAAU,CAAC;AAClC,MAAM,gBAAgB,GAAG,YAAY,CAAC;AACtC,MAAM,iBAAiB,GAAG,aAAa,CAAC;AACxC,MAAM,eAAe,GAAG,WAAW,CAAC;AACpC,MAAM,yBAAyB,GAAG,qBAAqB,CAAC;AAGxD,MAAM,gBAAgB,GAA2B;IAC/C,CAAC,EAAE,KAAK;IACR,CAAC,EAAE,MAAM;IACT,CAAC,EAAE,QAAQ;IACX,CAAC,EAAE,KAAK;IACR,CAAC,EAAE,OAAO;CACX,CAAC;AAOF,MAAM,gBAAgB,GAAG,iBAAiB,CAAC;AAC3C,MAAM,eAAe,GAAG,uBAAuB,CAAC;AAGhD,MAAM,QAAQ,GAAG,CAAC,GAAG,KAAe,EAAU,EAAE;IAC9C,MAAM,MAAM,GAAG,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IAC7D,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;AAChE,CAAC,CAAC;AAEF,MAAM,QAAQ,GAAG,CAAC,KAAe,EAAE,eAAkC,EAAmB,EAAE;IAGxF,IAAI,KAAK,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACrC,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACvF,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,QAAQ,CAAC;AACf,CAAC,CAAC;AAQK,MAAM,oBAAoB,GAAG,CAElC,WAAuB,EACvB,EACE,MAAM,GAAG,MAAM,EACf,eAAe,GAAG,EAAE,MAQlB,EAAE,EACc,EAAE;IACtB,MAAM,MAAM,GAAuB,EAAE,CAAC;IAEtC,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACrC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,oBAAoB,EAAE,UAAU,CAAC,EAAE,CAAC;YAC3D,SAAS;QACX,CAAC;QACD,MAAM,gBAAgB,GAAW,OAAO,CAAC,WAAW,CAAC,cAAc,EAAE,UAAU,CAAC,IAAI,GAAG,CAAC;QACxF,MAAM,eAAe,GACnB,OAAO,CAAC,WAAW,CAAC,yBAAyB,EAAE,UAAU,CAAC,IAAI,EAAE,CAAC;QAEnE,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,mBAAmB,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACpE,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,eAAe,EAAE,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,CAAC;gBACtE,SAAS;YACX,CAAC;YACD,MAAM,OAAO,GACX,OAAO,CAAC,WAAW,CAAC,iBAAiB,EAAE,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;YAC3E,MAAM,IAAI,GAAW,OAAO,CAAC,WAAW,CAAC,cAAc,EAAE,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;YAC3F,MAAM,MAAM,GACV,gBAAgB,CAAC,OAAO,CAAC,WAAW,CAAC,gBAAgB,EAAE,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC;YACtF,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,IAAI,KAAK,CAAC,SAAS,UAAU,CAAC,IAAI,IAAI,IAAI,2BAA2B,CAAC,CAAC;YAC/E,CAAC;YACD,MAAM,UAAU,GACd,OAAO,CAAC,WAAW,CAAC,yBAAyB,EAAE,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;YACnF,MAAM,IAAI,GAAG,OAAO,CAAC,oBAAoB,KAAK,IAAI,CAAC;YAEnD,MAAM,CAAC,IAAI,CAAC;gBACV,GAAG,EAAE,GAAG,MAAM,IAAI,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,gBAAgB,EAAE,IAAI,CAAC,EAAE;gBACxE,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,eAAe,EAAE,GAAG,UAAU,CAAC,EAAE,eAAe,CAAC;aAC3F,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAjDW,QAAA,oBAAoB,wBAiD/B;AAMK,MAAM,sBAAsB,GAAG,CACpC,MAAmC,EACnC,QAA2B,EACkB,EAAE;IAC/C,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7D,OAAO;QACL,YAAY,EAAE,MAAM;aACjB,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,IAAI,QAAQ,CAAC,CAAC;aACtE,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC;QAC5B,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;KACnE,CAAC;AACJ,CAAC,CAAC;AAXW,QAAA,sBAAsB,0BAWjC"}

package/dist/server/demo/tests/demo-guard.spec.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/server/demo/tests/demo-guard.spec.js

@@ -0,0 +1,142 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const __1 = require("../../..");
+const demo_scenarios_constants_1 = require("../../../constants/demo-scenarios.constants");
+const api_error_enum_1 = require("../../../types/enum/api-error.enum");
+const __2 = require("..");
+const MANIFEST = {
+    'POST /api/organization/:organizationId/billing/subscribe': 'block',
+    'GET /api/organization/:organizationId/note/:noteId': 'allow',
+    'GET /api/organization/:organizationId/note/export': 'block',
+};
+const run = (guard, method, originalUrl) => {
+    const json = jest.fn();
+    const res = { status: jest.fn().mockReturnValue({ json }) };
+    const next = jest.fn();
+    guard({ method, originalUrl }, res, next);
+    return { res, json, next };
+};
+describe('createDemoRouteGuard', () => {
+    const demoGuard = (0, __2.createDemoRouteGuard)(MANIFEST, () => true);
+    const realGuard = (0, __2.createDemoRouteGuard)(MANIFEST, () => false);
+    it('answers 403 DEMO_ACTION_BLOCKED to a demo actor on a blocked route', () => {
+        const { res, json, next } = run(demoGuard, 'POST', '/api/organization/6f1c/billing/subscribe');
+        expect(res.status).toHaveBeenCalledWith(403);
+        expect(json).toHaveBeenCalledWith({ code: api_error_enum_1.Code.demoActionBlocked });
+        expect(json).toHaveBeenCalledWith({ code: 'DEMO_ACTION_BLOCKED' });
+        expect(next).not.toHaveBeenCalled();
+    });
+    it('blocks a route the manifest does not list', () => {
+        const { res, next } = run(demoGuard, 'DELETE', '/api/organization/6f1c/everything');
+        expect(res.status).toHaveBeenCalledWith(403);
+        expect(next).not.toHaveBeenCalled();
+    });
+    it('blocks a listed path served with another method', () => {
+        const { res, next } = run(demoGuard, 'DELETE', '/api/organization/6f1c/note/9');
+        expect(res.status).toHaveBeenCalledWith(403);
+        expect(next).not.toHaveBeenCalled();
+    });
+    it('lets a demo actor through an allowed route, query string and trailing slash included', () => {
+        const { res, next } = run(demoGuard, 'GET', '/api/organization/6f1c/note/9/?page=2');
+        expect(next).toHaveBeenCalledTimes(1);
+        expect(res.status).not.toHaveBeenCalled();
+    });
+    it('blocks when an allowed pattern and a blocked one both match the path', () => {
+        const { res, next } = run(demoGuard, 'GET', '/api/organization/6f1c/note/export');
+        expect(res.status).toHaveBeenCalledWith(403);
+        expect(next).not.toHaveBeenCalled();
+    });
+    it('never touches a real actor, on blocked, allowed and unlisted routes', () => {
+        for (const [method, url] of [
+            ['POST', '/api/organization/6f1c/billing/subscribe'],
+            ['GET', '/api/organization/6f1c/note/9'],
+            ['DELETE', '/api/anything/else'],
+        ]) {
+            const { res, next } = run(realGuard, method, url);
+            expect(next).toHaveBeenCalledTimes(1);
+            expect(res.status).not.toHaveBeenCalled();
+        }
+    });
+    it('asks isDemo about the response of the request', () => {
+        const isDemo = jest.fn().mockReturnValue(false);
+        const res = {};
+        (0, __2.createDemoRouteGuard)(MANIFEST, isDemo)({ method: 'GET', originalUrl: '/api/x' }, res, jest.fn());
+        expect(isDemo).toHaveBeenCalledWith(res);
+    });
+});
+describe('skipIfDemo', () => {
+    it('does not call send for a demo actor, logs the drop and returns null', async () => {
+        const send = jest.fn().mockResolvedValue('sent');
+        const log = jest.fn();
+        await expect((0, __2.skipIfDemo)(true, send, log)).resolves.toBeNull();
+        expect(send).not.toHaveBeenCalled();
+        expect(log).toHaveBeenCalledTimes(1);
+    });
+    it('sends and returns the result for a real actor', async () => {
+        const send = jest.fn().mockResolvedValue('sent');
+        const log = jest.fn();
+        await expect((0, __2.skipIfDemo)(false, send, log)).resolves.toBe('sent');
+        expect(log).not.toHaveBeenCalled();
+    });
+});
+describe('DemoOutboundBlockedError', () => {
+    it('is an Error carrying its own name', () => {
+        const error = new __2.DemoOutboundBlockedError();
+        expect(error).toBeInstanceOf(Error);
+        expect(error.name).toBe('DemoOutboundBlockedError');
+    });
+});
+describe('isDemoEmail', () => {
+    it('recognises the internal demo domain, whatever the case', () => {
+        expect((0, __2.isDemoEmail)(`demo-abcd2345@${demo_scenarios_constants_1.DEMO_EMAIL_DOMAIN}`)).toBe(true);
+        expect((0, __2.isDemoEmail)(` Demo-ABCD2345@${demo_scenarios_constants_1.DEMO_EMAIL_DOMAIN.toUpperCase()} `)).toBe(true);
+    });
+    it('refuses a real address and a lookalike domain', () => {
+        expect((0, __2.isDemoEmail)('someone@example.com')).toBe(false);
+        expect((0, __2.isDemoEmail)(`someone@evil-${demo_scenarios_constants_1.DEMO_EMAIL_DOMAIN}`)).toBe(false);
+        expect((0, __2.isDemoEmail)(`${demo_scenarios_constants_1.DEMO_EMAIL_DOMAIN}@example.com`)).toBe(false);
+    });
+});
+describe('createDemoOrganizationResolver', () => {
+    afterEach(() => {
+        jest.restoreAllMocks();
+    });
+    const mockOrganization = (demoGroupId) => jest
+        .spyOn(__1.AbyssCore.sdk.organization.admin, 'get')
+        .mockResolvedValue({ data: { organization: { demoGroupId } } });
+    it('asks abyss-main once for an organisation asked twice', async () => {
+        const get = mockOrganization('group-1');
+        const isDemoOrganization = (0, __2.createDemoOrganizationResolver)();
+        await expect(isDemoOrganization('org-1')).resolves.toBe(true);
+        await expect(isDemoOrganization('org-1')).resolves.toBe(true);
+        expect(get).toHaveBeenCalledTimes(1);
+        expect(get).toHaveBeenCalledWith({ organizationId: 'org-1' });
+    });
+    it('shares one call between concurrent questions', async () => {
+        const get = mockOrganization(null);
+        const isDemoOrganization = (0, __2.createDemoOrganizationResolver)();
+        const answers = await Promise.all([isDemoOrganization('org-1'), isDemoOrganization('org-1')]);
+        expect(answers).toEqual([false, false]);
+        expect(get).toHaveBeenCalledTimes(1);
+    });
+    it('keeps a separate answer per organisation', async () => {
+        const get = jest.spyOn(__1.AbyssCore.sdk.organization.admin, 'get').mockImplementation(async ({ organizationId }) => ({
+            data: { organization: { demoGroupId: organizationId === 'demo-org' ? 'g' : null } },
+        }));
+        const isDemoOrganization = (0, __2.createDemoOrganizationResolver)();
+        await expect(isDemoOrganization('demo-org')).resolves.toBe(true);
+        await expect(isDemoOrganization('real-org')).resolves.toBe(false);
+        expect(get).toHaveBeenCalledTimes(2);
+    });
+    it('does not keep a failed lookup: the next question asks again', async () => {
+        const get = jest
+            .spyOn(__1.AbyssCore.sdk.organization.admin, 'get')
+            .mockRejectedValueOnce(new Error('network'))
+            .mockResolvedValueOnce({ data: { organization: { demoGroupId: 'g' } } });
+        const isDemoOrganization = (0, __2.createDemoOrganizationResolver)();
+        await expect(isDemoOrganization('org-1')).rejects.toThrow('network');
+        await expect(isDemoOrganization('org-1')).resolves.toBe(true);
+        expect(get).toHaveBeenCalledTimes(2);
+    });
+});
+//# sourceMappingURL=demo-guard.spec.js.map

package/dist/server/demo/tests/demo-guard.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"demo-guard.spec.js","sourceRoot":"","sources":["../../../../src/server/demo/tests/demo-guard.spec.ts"],"names":[],"mappings":";;AACA,gCAAqC;AACrC,0FAAgF;AAChF,uEAA0D;AAC1D,0BAMY;AAGZ,MAAM,QAAQ,GAAsB;IAClC,0DAA0D,EAAE,OAAO;IACnE,oDAAoD,EAAE,OAAO;IAC7D,mDAAmD,EAAE,OAAO;CAC7D,CAAC;AAEF,MAAM,GAAG,GAAG,CACV,KAA8C,EAC9C,MAAc,EACd,WAAmB,EACnB,EAAE;IACF,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC;IACvB,MAAM,GAAG,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,EAAE,IAAI,EAAE,CAAC,EAAyB,CAAC;IACnF,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,EAAE,WAAW,EAAa,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IACrD,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AAC7B,CAAC,CAAC;AAEF,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,MAAM,SAAS,GAAG,IAAA,wBAAoB,EAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IAC7D,MAAM,SAAS,GAAG,IAAA,wBAAoB,EAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;IAE9D,EAAE,CAAC,oEAAoE,EAAE,GAAG,EAAE;QAC5E,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,0CAA0C,CAAC,CAAC;QAE/F,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;QAC7C,MAAM,CAAC,IAAI,CAAC,CAAC,oBAAoB,CAAC,EAAE,IAAI,EAAE,qBAAI,CAAC,iBAAiB,EAAE,CAAC,CAAC;QACpE,MAAM,CAAC,IAAI,CAAC,CAAC,oBAAoB,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC,CAAC;QACnE,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC,SAAS,EAAE,QAAQ,EAAE,mCAAmC,CAAC,CAAC;QAEpF,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;QAC7C,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC,SAAS,EAAE,QAAQ,EAAE,+BAA+B,CAAC,CAAC;QAEhF,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;QAC7C,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sFAAsF,EAAE,GAAG,EAAE;QAC9F,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,uCAAuC,CAAC,CAAC;QAErF,MAAM,CAAC,IAAI,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QACtC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sEAAsE,EAAE,GAAG,EAAE;QAC9E,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,oCAAoC,CAAC,CAAC;QAElF,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;QAC7C,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,GAAG,EAAE;QAC7E,KAAK,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI;YAC1B,CAAC,MAAM,EAAE,0CAA0C,CAAC;YACpD,CAAC,KAAK,EAAE,+BAA+B,CAAC;YACxC,CAAC,QAAQ,EAAE,oBAAoB,CAAC;SACjC,EAAE,CAAC;YACF,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;YAClD,MAAM,CAAC,IAAI,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;YACtC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAC5C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAChD,MAAM,GAAG,GAAG,EAAc,CAAC;QAE3B,IAAA,wBAAoB,EAAC,QAAQ,EAAE,MAAM,CAAC,CACpC,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAa,EACnD,GAAG,EACH,IAAI,CAAC,EAAE,EAAE,CACV,CAAC;QAEF,MAAM,CAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE;IAC1B,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACnF,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACjD,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC;QAEtB,MAAM,MAAM,CAAC,IAAA,cAAU,EAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;QAE9D,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACpC,MAAM,CAAC,GAAG,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACjD,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC;QAEtB,MAAM,MAAM,CAAC,IAAA,cAAU,EAAC,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAEjE,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACrC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;IACxC,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,KAAK,GAAG,IAAI,4BAAwB,EAAE,CAAC;QAE7C,MAAM,CAAC,KAAK,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QACpC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;IAC3B,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,CAAC,IAAA,eAAW,EAAC,iBAAiB,4CAAiB,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrE,MAAM,CAAC,IAAA,eAAW,EAAC,kBAAkB,4CAAiB,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,CAAC,IAAA,eAAW,EAAC,qBAAqB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvD,MAAM,CAAC,IAAA,eAAW,EAAC,gBAAgB,4CAAiB,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrE,MAAM,CAAC,IAAA,eAAW,EAAC,GAAG,4CAAiB,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,gCAAgC,EAAE,GAAG,EAAE;IAC9C,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,eAAe,EAAE,CAAC;IACzB,CAAC,CAAC,CAAC;IAEH,MAAM,gBAAgB,GAAG,CAAC,WAA0B,EAAE,EAAE,CACtD,IAAI;SACD,KAAK,CAAC,aAAS,CAAC,GAAG,CAAC,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC;SAC9C,iBAAiB,CAAC,EAAE,IAAI,EAAE,EAAE,YAAY,EAAE,EAAE,WAAW,EAAE,EAAE,EAAW,CAAC,CAAC;IAE7E,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,GAAG,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;QACxC,MAAM,kBAAkB,GAAG,IAAA,kCAA8B,GAAE,CAAC;QAE5D,MAAM,MAAM,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9D,MAAM,MAAM,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAE9D,MAAM,CAAC,GAAG,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QACrC,MAAM,CAAC,GAAG,CAAC,CAAC,oBAAoB,CAAC,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC5D,MAAM,GAAG,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,kBAAkB,GAAG,IAAA,kCAA8B,GAAE,CAAC;QAE5D,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,kBAAkB,CAAC,OAAO,CAAC,EAAE,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAE9F,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;QACxC,MAAM,CAAC,GAAG,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;QACxD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,aAAS,CAAC,GAAG,CAAC,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,kBAAkB,CAChF,KAAK,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE,CAC3B,CAAC;YACC,IAAI,EAAE,EAAE,YAAY,EAAE,EAAE,WAAW,EAAE,cAAc,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE;SAC1E,CAAA,CACd,CAAC;QACF,MAAM,kBAAkB,GAAG,IAAA,kCAA8B,GAAE,CAAC;QAE5D,MAAM,MAAM,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjE,MAAM,MAAM,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClE,MAAM,CAAC,GAAG,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QAC3E,MAAM,GAAG,GAAG,IAAI;aACb,KAAK,CAAC,aAAS,CAAC,GAAG,CAAC,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC;aAC9C,qBAAqB,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC;aAC3C,qBAAqB,CAAC,EAAE,IAAI,EAAE,EAAE,YAAY,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,EAAE,EAAW,CAAC,CAAC;QACpF,MAAM,kBAAkB,GAAG,IAAA,kCAA8B,GAAE,CAAC;QAE5D,MAAM,MAAM,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACrE,MAAM,MAAM,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9D,MAAM,CAAC,GAAG,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/server/demo/tests/model-manifest.spec.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/server/demo/tests/model-manifest.spec.js

@@ -0,0 +1,29 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const demo_enum_1 = require("../../../types/enum/demo.enum");
+const model_manifest_1 = require("../model-manifest");
+describe('checkDemoModelManifest', () => {
+    const manifest = {
+        Note: { seeded: [demo_enum_1.DemoScenario.WORKSPACE, demo_enum_1.DemoScenario.FULL] },
+        AuditTrail: { excluded: 'technical log, carries no user content' },
+    };
+    it('accepts a manifest that matches the models', () => {
+        expect((0, model_manifest_1.checkDemoModelManifest)(['Note', 'AuditTrail'], manifest)).toEqual({
+            unclassified: [],
+            stale: [],
+        });
+    });
+    it('reports a model the manifest does not declare', () => {
+        expect((0, model_manifest_1.checkDemoModelManifest)(['Note', 'AuditTrail', 'Draft'], manifest)).toEqual({
+            unclassified: ['Draft'],
+            stale: [],
+        });
+    });
+    it('reports a declared model that no longer exists', () => {
+        expect((0, model_manifest_1.checkDemoModelManifest)(['Note'], manifest)).toEqual({
+            unclassified: [],
+            stale: ['AuditTrail'],
+        });
+    });
+});
+//# sourceMappingURL=model-manifest.spec.js.map

package/dist/server/demo/tests/model-manifest.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-manifest.spec.js","sourceRoot":"","sources":["../../../../src/server/demo/tests/model-manifest.spec.ts"],"names":[],"mappings":";;AAAA,6DAA6D;AAC7D,sDAA8E;AAE9E,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,MAAM,QAAQ,GAAsB;QAClC,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,wBAAY,CAAC,SAAS,EAAE,wBAAY,CAAC,IAAI,CAAC,EAAE;QAC7D,UAAU,EAAE,EAAE,QAAQ,EAAE,wCAAwC,EAAE;KACnE,CAAC;IAEF,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,CAAC,IAAA,uCAAsB,EAAC,CAAC,MAAM,EAAE,YAAY,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;YACvE,YAAY,EAAE,EAAE;YAChB,KAAK,EAAE,EAAE;SACV,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,CAAC,IAAA,uCAAsB,EAAC,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;YAChF,YAAY,EAAE,CAAC,OAAO,CAAC;YACvB,KAAK,EAAE,EAAE;SACV,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,CAAC,IAAA,uCAAsB,EAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;YACzD,YAAY,EAAE,EAAE;YAChB,KAAK,EAAE,CAAC,YAAY,CAAC;SACtB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/server/demo/tests/route-manifest.spec.d.ts

@@ -0,0 +1 @@
+import 'reflect-metadata';

package/dist/server/demo/tests/route-manifest.spec.js

@@ -0,0 +1,256 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+require("reflect-metadata");
+const route_manifest_1 = require("../route-manifest");
+const Controller = (prefixPath, middlewares = []) => (target) => {
+    Reflect.defineMetadata('__controller__', true, target);
+    Reflect.defineMetadata('__path__', prefixPath, target);
+    Reflect.defineMetadata('__middleware_hook__', middlewares, target);
+};
+const Route = (method, path, options = {}, hooks = []) => (target, propertyKey) => {
+    Reflect.defineMetadata('__route__', true, target, propertyKey);
+    Reflect.defineMetadata('__path__', path, target, propertyKey);
+    Reflect.defineMetadata('__method__', method, target, propertyKey);
+    Reflect.defineMetadata('__OPTIONS__', { path, method, ...options }, target, propertyKey);
+    Reflect.defineMetadata('__middleware_hook__', hooks, target, propertyKey);
+};
+const GET = 1;
+const POST = 2;
+const DELETE = 3;
+let UserController = class UserController {
+    read() { }
+    sync() { }
+    notARoute() { }
+};
+__decorate([
+    Route(GET, '/note/:noteId'),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", void 0)
+], UserController.prototype, "read", null);
+__decorate([
+    Route(POST, '/webhook/organization/sync', { shouldSkipController: true }, ['AuthMiddleware']),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", void 0)
+], UserController.prototype, "sync", null);
+UserController = __decorate([
+    Controller('/organization/:organizationId', ['AuthMiddleware', 'OrganizationMiddleware'])
+], UserController);
+let AdminController = class AdminController {
+    remove() { }
+};
+__decorate([
+    Route(DELETE, '/group/:groupId'),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", void 0)
+], AdminController.prototype, "remove", null);
+AdminController = __decorate([
+    Controller('/demo/admin', ['AdminMiddleware'])
+], AdminController);
+let PublicController = class PublicController {
+    status() { }
+};
+__decorate([
+    Route(GET, '/status'),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", void 0)
+], PublicController.prototype, "status", null);
+PublicController = __decorate([
+    Controller('/', [])
+], PublicController);
+class NotAController {
+    ignored() { }
+}
+__decorate([
+    Route(GET, '/ignored'),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", void 0)
+], NotAController.prototype, "ignored", null);
+const CONTROLLERS = [UserController, AdminController, PublicController, NotAController];
+describe('listRegisteredRoutes', () => {
+    it('lists every route with its full served path and its access', () => {
+        expect((0, route_manifest_1.listRegisteredRoutes)(CONTROLLERS)).toEqual([
+            { key: 'GET /api/organization/:organizationId/note/:noteId', access: 'user' },
+            { key: 'POST /api/webhook/organization/sync', access: 'user' },
+            { key: 'DELETE /api/demo/admin/group/:groupId', access: 'admin' },
+            { key: 'GET /api/status', access: 'public' },
+        ]);
+    });
+    it('prefixes the paths with the given prefix', () => {
+        expect((0, route_manifest_1.listRegisteredRoutes)([PublicController], { prefix: '/' })).toEqual([
+            { key: 'GET /status', access: 'public' },
+        ]);
+    });
+    it('reads a skipped route from its own hooks only, not from the controller ones', () => {
+        let SkipController = class SkipController {
+            tick() { }
+        };
+        __decorate([
+            Route(POST, '/cron/tick', { shouldSkipController: true }),
+            __metadata("design:type", Function),
+            __metadata("design:paramtypes", []),
+            __metadata("design:returntype", void 0)
+        ], SkipController.prototype, "tick", null);
+        SkipController = __decorate([
+            Controller('/billing', ['AuthMiddleware'])
+        ], SkipController);
+        let SkipAdminController = class SkipAdminController {
+            tick() { }
+        };
+        __decorate([
+            Route(POST, '/cron/admin', { shouldSkipController: true }, ['AdminMiddleware']),
+            __metadata("design:type", Function),
+            __metadata("design:paramtypes", []),
+            __metadata("design:returntype", void 0)
+        ], SkipAdminController.prototype, "tick", null);
+        SkipAdminController = __decorate([
+            Controller('/billing', ['AdminMiddleware'])
+        ], SkipAdminController);
+        expect((0, route_manifest_1.listRegisteredRoutes)([SkipController, SkipAdminController])).toEqual([
+            { key: 'POST /api/cron/tick', access: 'public' },
+            { key: 'POST /api/cron/admin', access: 'admin' },
+        ]);
+    });
+    it('counts an optional authentication as an authentication', () => {
+        let OptionalController = class OptionalController {
+            feed() { }
+        };
+        __decorate([
+            Route(GET, '/'),
+            __metadata("design:type", Function),
+            __metadata("design:paramtypes", []),
+            __metadata("design:returntype", void 0)
+        ], OptionalController.prototype, "feed", null);
+        OptionalController = __decorate([
+            Controller('/feed', ['OptionalAuthMiddleware'])
+        ], OptionalController);
+        expect((0, route_manifest_1.listRegisteredRoutes)([OptionalController])).toEqual([
+            { key: 'GET /api/feed', access: 'user' },
+        ]);
+    });
+});
+describe('listRegisteredRoutes userMiddlewares', () => {
+    let ProjectController = class ProjectController {
+        read() { }
+        cron() { }
+    };
+    __decorate([
+        Route(GET, '/'),
+        __metadata("design:type", Function),
+        __metadata("design:paramtypes", []),
+        __metadata("design:returntype", void 0)
+    ], ProjectController.prototype, "read", null);
+    __decorate([
+        Route(POST, '/cron', { shouldSkipController: true }),
+        __metadata("design:type", Function),
+        __metadata("design:paramtypes", []),
+        __metadata("design:returntype", void 0)
+    ], ProjectController.prototype, "cron", null);
+    ProjectController = __decorate([
+        Controller('/project/:projectId', ['ProjectMiddleware'])
+    ], ProjectController);
+    it('reads a route behind a listed middleware as a user route', () => {
+        expect((0, route_manifest_1.listRegisteredRoutes)([ProjectController], { userMiddlewares: ['ProjectMiddleware'] })).toEqual([
+            { key: 'GET /api/project/:projectId', access: 'user' },
+            { key: 'POST /api/cron', access: 'public' },
+        ]);
+    });
+    it('keeps it public when the middleware is not listed', () => {
+        expect((0, route_manifest_1.listRegisteredRoutes)([ProjectController])).toEqual([
+            { key: 'GET /api/project/:projectId', access: 'public' },
+            { key: 'POST /api/cron', access: 'public' },
+        ]);
+    });
+    it('still lets an admin hook win over a listed middleware', () => {
+        let MixedController = class MixedController {
+            read() { }
+        };
+        __decorate([
+            Route(GET, '/'),
+            __metadata("design:type", Function),
+            __metadata("design:paramtypes", []),
+            __metadata("design:returntype", void 0)
+        ], MixedController.prototype, "read", null);
+        MixedController = __decorate([
+            Controller('/x', ['ProjectMiddleware', 'AdminMiddleware'])
+        ], MixedController);
+        expect((0, route_manifest_1.listRegisteredRoutes)([MixedController], { userMiddlewares: ['ProjectMiddleware'] })).toEqual([{ key: 'GET /api/x', access: 'admin' }]);
+    });
+});
+describe('listRegisteredRoutes scoped admin middlewares', () => {
+    it('reads a route behind a middleware merely named like AdminMiddleware as a user route', () => {
+        let OrgAdminController = class OrgAdminController {
+            settings() { }
+        };
+        __decorate([
+            Route(GET, '/scan/settings'),
+            __metadata("design:type", Function),
+            __metadata("design:paramtypes", []),
+            __metadata("design:returntype", void 0)
+        ], OrgAdminController.prototype, "settings", null);
+        OrgAdminController = __decorate([
+            Controller('/organization/:organizationId', ['AuthMiddleware', 'OrgAdminMiddleware'])
+        ], OrgAdminController);
+        let ScopeAdminController = class ScopeAdminController {
+            add() { }
+        };
+        __decorate([
+            Route(POST, '/member', {}, ['ResolveBankingScopeAdminMiddleware']),
+            __metadata("design:type", Function),
+            __metadata("design:paramtypes", []),
+            __metadata("design:returntype", void 0)
+        ], ScopeAdminController.prototype, "add", null);
+        ScopeAdminController = __decorate([
+            Controller('/banking/:scopeId', ['AuthMiddleware'])
+        ], ScopeAdminController);
+        expect((0, route_manifest_1.listRegisteredRoutes)([OrgAdminController, ScopeAdminController])).toEqual([
+            { key: 'GET /api/organization/:organizationId/scan/settings', access: 'user' },
+            { key: 'POST /api/banking/:scopeId/member', access: 'user' },
+        ]);
+    });
+});
+describe('checkDemoRouteManifest', () => {
+    const routes = (0, route_manifest_1.listRegisteredRoutes)(CONTROLLERS);
+    it('reports a user route the manifest does not classify', () => {
+        const manifest = {
+            'POST /api/webhook/organization/sync': 'block',
+        };
+        expect((0, route_manifest_1.checkDemoRouteManifest)(routes, manifest)).toEqual({
+            unclassified: ['GET /api/organization/:organizationId/note/:noteId'],
+            stale: [],
+        });
+    });
+    it('reports a manifest key no registered route serves any more', () => {
+        const manifest = {
+            'GET /api/organization/:organizationId/note/:noteId': 'allow',
+            'POST /api/webhook/organization/sync': 'block',
+            'GET /api/removed/route': 'allow',
+        };
+        expect((0, route_manifest_1.checkDemoRouteManifest)(routes, manifest)).toEqual({
+            unclassified: [],
+            stale: ['GET /api/removed/route'],
+        });
+    });
+    it('asks nothing of public and admin routes, and accepts them in the manifest', () => {
+        const manifest = {
+            'GET /api/organization/:organizationId/note/:noteId': 'allow',
+            'POST /api/webhook/organization/sync': 'block',
+            'GET /api/status': 'allow',
+        };
+        expect((0, route_manifest_1.checkDemoRouteManifest)(routes, manifest)).toEqual({ unclassified: [], stale: [] });
+    });
+});
+//# sourceMappingURL=route-manifest.spec.js.map

package/dist/server/demo/tests/route-manifest.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"route-manifest.spec.js","sourceRoot":"","sources":["../../../../src/server/demo/tests/route-manifest.spec.ts"],"names":[],"mappings":";;;;;;;;;;;AAAA,4BAA0B;AAC1B,sDAAoG;AAMpG,MAAM,UAAU,GACd,CAAC,UAAkB,EAAE,cAAwB,EAAE,EAAE,EAAE,CACnD,CAAC,MAAc,EAAE,EAAE;IACjB,OAAO,CAAC,cAAc,CAAC,gBAAgB,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IACvD,OAAO,CAAC,cAAc,CAAC,UAAU,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;IACvD,OAAO,CAAC,cAAc,CAAC,qBAAqB,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;AACrE,CAAC,CAAC;AAEJ,MAAM,KAAK,GACT,CACE,MAAc,EACd,IAAY,EACZ,UAA8C,EAAE,EAChD,QAAkB,EAAE,EACpB,EAAE,CACJ,CAAC,MAAc,EAAE,WAAmB,EAAE,EAAE;IACtC,OAAO,CAAC,cAAc,CAAC,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;IAC/D,OAAO,CAAC,cAAc,CAAC,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;IAC9D,OAAO,CAAC,cAAc,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;IAClE,OAAO,CAAC,cAAc,CAAC,aAAa,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;IACzF,OAAO,CAAC,cAAc,CAAC,qBAAqB,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;AAC5E,CAAC,CAAC;AAEJ,MAAM,GAAG,GAAG,CAAC,CAAC;AACd,MAAM,IAAI,GAAG,CAAC,CAAC;AACf,MAAM,MAAM,GAAG,CAAC,CAAC;AAGjB,IAAM,cAAc,GAApB,MAAM,cAAc;IAElB,IAAI,KAAU,CAAC;IAIf,IAAI,KAAU,CAAC;IAEf,SAAS,KAAU,CAAC;CACrB,CAAA;AAPC;IADC,KAAK,CAAC,GAAG,EAAE,eAAe,CAAC;;;;0CACb;AAIf;IADC,KAAK,CAAC,IAAI,EAAE,4BAA4B,EAAE,EAAE,oBAAoB,EAAE,IAAI,EAAE,EAAE,CAAC,gBAAgB,CAAC,CAAC;;;;0CAC/E;AANX,cAAc;IADnB,UAAU,CAAC,+BAA+B,EAAE,CAAC,gBAAgB,EAAE,wBAAwB,CAAC,CAAC;GACpF,cAAc,CASnB;AAGD,IAAM,eAAe,GAArB,MAAM,eAAe;IAEnB,MAAM,KAAU,CAAC;CAClB,CAAA;AADC;IADC,KAAK,CAAC,MAAM,EAAE,iBAAiB,CAAC;;;;6CAChB;AAFb,eAAe;IADpB,UAAU,CAAC,aAAa,EAAE,CAAC,iBAAiB,CAAC,CAAC;GACzC,eAAe,CAGpB;AAGD,IAAM,gBAAgB,GAAtB,MAAM,gBAAgB;IAEpB,MAAM,KAAU,CAAC;CAClB,CAAA;AADC;IADC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC;;;;8CACL;AAFb,gBAAgB;IADrB,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC;GACd,gBAAgB,CAGrB;AAED,MAAM,cAAc;IAElB,OAAO,KAAU,CAAC;CACnB;AADC;IADC,KAAK,CAAC,GAAG,EAAE,UAAU,CAAC;;;;6CACL;AAGpB,MAAM,WAAW,GAAG,CAAC,cAAc,EAAE,eAAe,EAAE,gBAAgB,EAAE,cAAc,CAAC,CAAC;AAExF,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,MAAM,CAAC,IAAA,qCAAoB,EAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC;YAChD,EAAE,GAAG,EAAE,oDAAoD,EAAE,MAAM,EAAE,MAAM,EAAE;YAC7E,EAAE,GAAG,EAAE,qCAAqC,EAAE,MAAM,EAAE,MAAM,EAAE;YAC9D,EAAE,GAAG,EAAE,uCAAuC,EAAE,MAAM,EAAE,OAAO,EAAE;YACjE,EAAE,GAAG,EAAE,iBAAiB,EAAE,MAAM,EAAE,QAAQ,EAAE;SAC7C,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,CAAC,IAAA,qCAAoB,EAAC,CAAC,gBAAgB,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;YACxE,EAAE,GAAG,EAAE,aAAa,EAAE,MAAM,EAAE,QAAQ,EAAE;SACzC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6EAA6E,EAAE,GAAG,EAAE;QAErF,IAAM,cAAc,GAApB,MAAM,cAAc;YAElB,IAAI,KAAU,CAAC;SAChB,CAAA;QADC;YADC,KAAK,CAAC,IAAI,EAAE,YAAY,EAAE,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAC;;;;kDAC3C;QAFX,cAAc;YADnB,UAAU,CAAC,UAAU,EAAE,CAAC,gBAAgB,CAAC,CAAC;WACrC,cAAc,CAGnB;QAED,IAAM,mBAAmB,GAAzB,MAAM,mBAAmB;YAEvB,IAAI,KAAU,CAAC;SAChB,CAAA;QADC;YADC,KAAK,CAAC,IAAI,EAAE,aAAa,EAAE,EAAE,oBAAoB,EAAE,IAAI,EAAE,EAAE,CAAC,iBAAiB,CAAC,CAAC;;;;uDACjE;QAFX,mBAAmB;YADxB,UAAU,CAAC,UAAU,EAAE,CAAC,iBAAiB,CAAC,CAAC;WACtC,mBAAmB,CAGxB;QAED,MAAM,CAAC,IAAA,qCAAoB,EAAC,CAAC,cAAc,EAAE,mBAAmB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YAC1E,EAAE,GAAG,EAAE,qBAAqB,EAAE,MAAM,EAAE,QAAQ,EAAE;YAChD,EAAE,GAAG,EAAE,sBAAsB,EAAE,MAAM,EAAE,OAAO,EAAE;SACjD,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAEhE,IAAM,kBAAkB,GAAxB,MAAM,kBAAkB;YAEtB,IAAI,KAAU,CAAC;SAChB,CAAA;QADC;YADC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC;;;;sDACD;QAFX,kBAAkB;YADvB,UAAU,CAAC,OAAO,EAAE,CAAC,wBAAwB,CAAC,CAAC;WAC1C,kBAAkB,CAGvB;QAED,MAAM,CAAC,IAAA,qCAAoB,EAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YACzD,EAAE,GAAG,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,EAAE;SACzC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,sCAAsC,EAAE,GAAG,EAAE;IAEpD,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;QAErB,IAAI,KAAU,CAAC;QAGf,IAAI,KAAU,CAAC;KAChB,CAAA;IAJC;QADC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC;;;;iDACD;IAGf;QADC,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAC;;;;iDACtC;IALX,iBAAiB;QADtB,UAAU,CAAC,qBAAqB,EAAE,CAAC,mBAAmB,CAAC,CAAC;OACnD,iBAAiB,CAMtB;IAED,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,CACJ,IAAA,qCAAoB,EAAC,CAAC,iBAAiB,CAAC,EAAE,EAAE,eAAe,EAAE,CAAC,mBAAmB,CAAC,EAAE,CAAC,CACtF,CAAC,OAAO,CAAC;YACR,EAAE,GAAG,EAAE,6BAA6B,EAAE,MAAM,EAAE,MAAM,EAAE;YACtD,EAAE,GAAG,EAAE,gBAAgB,EAAE,MAAM,EAAE,QAAQ,EAAE;SAC5C,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,CAAC,IAAA,qCAAoB,EAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YACxD,EAAE,GAAG,EAAE,6BAA6B,EAAE,MAAM,EAAE,QAAQ,EAAE;YACxD,EAAE,GAAG,EAAE,gBAAgB,EAAE,MAAM,EAAE,QAAQ,EAAE;SAC5C,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAE/D,IAAM,eAAe,GAArB,MAAM,eAAe;YAEnB,IAAI,KAAU,CAAC;SAChB,CAAA;QADC;YADC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC;;;;mDACD;QAFX,eAAe;YADpB,UAAU,CAAC,IAAI,EAAE,CAAC,mBAAmB,EAAE,iBAAiB,CAAC,CAAC;WACrD,eAAe,CAGpB;QACD,MAAM,CACJ,IAAA,qCAAoB,EAAC,CAAC,eAAe,CAAC,EAAE,EAAE,eAAe,EAAE,CAAC,mBAAmB,CAAC,EAAE,CAAC,CACpF,CAAC,OAAO,CAAC,CAAC,EAAE,GAAG,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,+CAA+C,EAAE,GAAG,EAAE;IAC7D,EAAE,CAAC,qFAAqF,EAAE,GAAG,EAAE;QAE7F,IAAM,kBAAkB,GAAxB,MAAM,kBAAkB;YAEtB,QAAQ,KAAU,CAAC;SACpB,CAAA;QADC;YADC,KAAK,CAAC,GAAG,EAAE,gBAAgB,CAAC;;;;0DACV;QAFf,kBAAkB;YADvB,UAAU,CAAC,+BAA+B,EAAE,CAAC,gBAAgB,EAAE,oBAAoB,CAAC,CAAC;WAChF,kBAAkB,CAGvB;QAED,IAAM,oBAAoB,GAA1B,MAAM,oBAAoB;YAExB,GAAG,KAAU,CAAC;SACf,CAAA;QADC;YADC,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,oCAAoC,CAAC,CAAC;;;;uDACrD;QAFV,oBAAoB;YADzB,UAAU,CAAC,mBAAmB,EAAE,CAAC,gBAAgB,CAAC,CAAC;WAC9C,oBAAoB,CAGzB;QAED,MAAM,CAAC,IAAA,qCAAoB,EAAC,CAAC,kBAAkB,EAAE,oBAAoB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YAC/E,EAAE,GAAG,EAAE,qDAAqD,EAAE,MAAM,EAAE,MAAM,EAAE;YAC9E,EAAE,GAAG,EAAE,mCAAmC,EAAE,MAAM,EAAE,MAAM,EAAE;SAC7D,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,MAAM,MAAM,GAAG,IAAA,qCAAoB,EAAC,WAAW,CAAC,CAAC;IAEjD,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,MAAM,QAAQ,GAAsB;YAClC,qCAAqC,EAAE,OAAO;SAC/C,CAAC;QAEF,MAAM,CAAC,IAAA,uCAAsB,EAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;YACvD,YAAY,EAAE,CAAC,oDAAoD,CAAC;YACpE,KAAK,EAAE,EAAE;SACV,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,MAAM,QAAQ,GAAsB;YAClC,oDAAoD,EAAE,OAAO;YAC7D,qCAAqC,EAAE,OAAO;YAC9C,wBAAwB,EAAE,OAAO;SAClC,CAAC;QAEF,MAAM,CAAC,IAAA,uCAAsB,EAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;YACvD,YAAY,EAAE,EAAE;YAChB,KAAK,EAAE,CAAC,wBAAwB,CAAC;SAClC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2EAA2E,EAAE,GAAG,EAAE;QACnF,MAAM,QAAQ,GAAsB;YAClC,oDAAoD,EAAE,OAAO;YAC7D,qCAAqC,EAAE,OAAO;YAC9C,iBAAiB,EAAE,OAAO;SAC3B,CAAC;QAEF,MAAM,CAAC,IAAA,uCAAsB,EAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;IAC5F,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/server/index.d.ts

@@ -1,6 +1,7 @@
 export * from './safe-url.util';
 export * from './after-commit-emit.util';
 export * from './encrypt-secret.util';
+export * from './demo';
 export * from './explore/field-catalog.types';
 export * from './explore/sql-translator';
 export * from './explore/like-escape';

package/dist/server/index.js

@@ -17,6 +17,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./safe-url.util"), exports);
 __exportStar(require("./after-commit-emit.util"), exports);
 __exportStar(require("./encrypt-secret.util"), exports);
+__exportStar(require("./demo"), exports);
 __exportStar(require("./explore/field-catalog.types"), exports);
 __exportStar(require("./explore/sql-translator"), exports);
 __exportStar(require("./explore/like-escape"), exports);

package/dist/server/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAgBA,kDAAgC;AAGhC,2DAAyC;AAKzC,wDAAsC;AAItC,gEAA8C;AAC9C,2DAAyC;AACzC,wDAAsC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAgBA,kDAAgC;AAGhC,2DAAyC;AAKzC,wDAAsC;AAGtC,yCAAuB;AAIvB,gEAA8C;AAC9C,2DAAyC;AACzC,wDAAsC"}

package/dist/server/safe-url.util.d.ts

@@ -53,6 +53,7 @@ export interface SafeAxiosRequestOptions {
         hops: number;
         durationMs: number;
     }) => void;
+    demo?: boolean;
 }
 export declare const safeAxiosRequest: <T = unknown>(config: AxiosRequestConfig & {
     url: string;

package/dist/server/safe-url.util.js

@@ -37,6 +37,7 @@ exports.safeAxiosInstanceRequest = exports.safeAxiosGet = exports.safeAxiosReque
 const net_1 = require("net");
 const promises_1 = require("dns/promises");
 const axios_1 = __importStar(require("axios"));
+const demo_outbound_1 = require("./demo/demo-outbound");
 exports.SAFE_OUTBOUND_TIMEOUT_MS = 8000;
 exports.SAFE_OUTBOUND_MAX_REDIRECTS = 5;
 exports.ALLOW_PRIVATE_OUTBOUND_TARGETS_ENV = 'ABYSS_ALLOW_PRIVATE_OUTBOUND_TARGETS';
@@ -363,6 +364,9 @@ const isOutboundDeadlineError = (error) => (0, axios_1.isAxiosError)(error) &&
     DEADLINE_ERROR_CODES.has(error.code);
 exports.isOutboundDeadlineError = isOutboundDeadlineError;
 const runSafeChain = async (send, config, options = {}) => {
+    if (options.demo) {
+        throw new demo_outbound_1.DemoOutboundBlockedError();
+    }
     const deadlineMs = config.timeout || exports.SAFE_OUTBOUND_TIMEOUT_MS;
     const startedAt = Date.now();
     const attempt = new AbortController();