@adonis-agora/telescope 0.18.0 → 0.20.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +67 -0
- package/dist/providers/telescope_provider.d.ts +16 -0
- package/dist/providers/telescope_provider.d.ts.map +1 -1
- package/dist/providers/telescope_provider.js +39 -1
- package/dist/providers/telescope_provider.js.map +1 -1
- package/dist/src/ai/index.d.ts +1 -1
- package/dist/src/ai/index.js +1 -1
- package/dist/src/alerts/index.d.ts +1 -1
- package/dist/src/alerts/index.js +1 -1
- package/dist/src/define_config.d.ts +64 -0
- package/dist/src/define_config.d.ts.map +1 -1
- package/dist/src/define_config.js +18 -0
- package/dist/src/define_config.js.map +1 -1
- package/dist/src/diagnostics_registry.d.ts +9 -0
- package/dist/src/diagnostics_registry.d.ts.map +1 -1
- package/dist/src/diagnostics_registry.js +2 -1
- package/dist/src/diagnostics_registry.js.map +1 -1
- package/dist/src/diagnostics_watcher.d.ts +5 -0
- package/dist/src/diagnostics_watcher.d.ts.map +1 -1
- package/dist/src/diagnostics_watcher.js +6 -0
- package/dist/src/diagnostics_watcher.js.map +1 -1
- package/dist/src/index.d.ts +1 -1
- package/dist/src/index.js +1 -1
- package/dist/src/mcp/index.d.ts +1 -1
- package/dist/src/mcp/index.js +1 -1
- package/dist/src/otel/index.d.ts +11 -0
- package/dist/src/otel/index.d.ts.map +1 -0
- package/dist/src/otel/index.js +11 -0
- package/dist/src/otel/index.js.map +1 -0
- package/dist/src/otel/mapper.d.ts +118 -0
- package/dist/src/otel/mapper.d.ts.map +1 -0
- package/dist/src/otel/mapper.js +205 -0
- package/dist/src/otel/mapper.js.map +1 -0
- package/dist/src/otel/otel_exporter.d.ts +17 -0
- package/dist/src/otel/otel_exporter.d.ts.map +1 -0
- package/dist/src/otel/otel_exporter.js +107 -0
- package/dist/src/otel/otel_exporter.js.map +1 -0
- package/dist/src/otel/otel_exporting_store.d.ts +49 -0
- package/dist/src/otel/otel_exporting_store.d.ts.map +1 -0
- package/dist/src/otel/otel_exporting_store.js +83 -0
- package/dist/src/otel/otel_exporting_store.js.map +1 -0
- package/dist/src/profiling/index.d.ts +1 -1
- package/dist/src/profiling/index.js +1 -1
- package/dist/src/ui/define_config.d.ts +40 -4
- package/dist/src/ui/define_config.d.ts.map +1 -1
- package/dist/src/ui/define_config.js.map +1 -1
- package/dist/src/ui/guard.d.ts +13 -4
- package/dist/src/ui/guard.d.ts.map +1 -1
- package/dist/src/ui/guard.js +21 -6
- package/dist/src/ui/guard.js.map +1 -1
- package/dist/src/ui/index.d.ts +1 -1
- package/dist/src/ui/index.js +1 -1
- package/dist/src/watchers/index.d.ts +1 -1
- package/dist/src/watchers/index.js +1 -1
- package/package.json +40 -2
|
@@ -12,13 +12,49 @@ import type { UiHttpContext } from './http.js';
|
|
|
12
12
|
export type AccessDeniedRenderer = GenericAccessDeniedRenderer<UiHttpContext>;
|
|
13
13
|
/** `accessDenied` in either form — an options object for the built-in page, or a renderer. */
|
|
14
14
|
export type AccessDeniedOption = GenericAccessDeniedOption<UiHttpContext>;
|
|
15
|
+
/**
|
|
16
|
+
* The enriched form of an {@link AuthorizeHook}'s return value: a plain `allowed` plus an OPTIONAL
|
|
17
|
+
* `reason` telling the guard exactly which denial this is, instead of it having to guess.
|
|
18
|
+
*
|
|
19
|
+
* Return this instead of a bare `boolean` when your hook authenticates some way the guard cannot see
|
|
20
|
+
* by inspecting the request itself — most commonly a session cookie (e.g.
|
|
21
|
+
* `@adonis-agora/authz`'s `authorizeByRoles`, which reads `ctx.auth`). Without a `reason` the guard
|
|
22
|
+
* falls back to its request-shape heuristic (see {@link AuthorizeHook}), which only recognizes the
|
|
23
|
+
* built-in `credentials.token`/`credentials.basic` gate — a session-authenticated-but-wrong-role
|
|
24
|
+
* request would otherwise come back `401` ("please authenticate") when it should be `403`
|
|
25
|
+
* ("you're signed in, but not allowed").
|
|
26
|
+
*
|
|
27
|
+
* `reason` reuses the same vocabulary as {@link AccessDeniedInfo.reason}, so a hook and a custom
|
|
28
|
+
* `accessDenied` renderer speak the same two words:
|
|
29
|
+
* - `'unauthenticated'` → the guard answers `401` (nobody is signed in).
|
|
30
|
+
* - `'forbidden'` → the guard answers `403` (signed in, but not authorized).
|
|
31
|
+
*/
|
|
32
|
+
export interface AuthorizeDecision {
|
|
33
|
+
/** Whether the request may proceed. */
|
|
34
|
+
allowed: boolean;
|
|
35
|
+
/**
|
|
36
|
+
* Why `allowed` is `false`. Omit it to fall back to the guard's request-shape heuristic (the same
|
|
37
|
+
* one a bare `false` return gets) — useful when the hook itself doesn't know which case applies.
|
|
38
|
+
*/
|
|
39
|
+
reason?: 'unauthenticated' | 'forbidden';
|
|
40
|
+
}
|
|
41
|
+
/** What an {@link AuthorizeHook} may return: either form, sync or async. */
|
|
42
|
+
export type AuthorizeResult = boolean | AuthorizeDecision;
|
|
15
43
|
/**
|
|
16
44
|
* The decision hook gating the dashboard + JSON API. Return `true` to allow the
|
|
17
|
-
* request through, `false` to reject it
|
|
18
|
-
*
|
|
19
|
-
*
|
|
45
|
+
* request through, `false` to reject it. It receives the (framework-light) HTTP
|
|
46
|
+
* context, so a host can inspect headers, a session, an injected user — whatever
|
|
47
|
+
* its own auth exposes. Sync or async.
|
|
48
|
+
*
|
|
49
|
+
* A bare `false` denial is translated to `401`/`403` by a heuristic: `401` when the request presents
|
|
50
|
+
* no `Authorization` header and no `?token`, `403` otherwise. That heuristic was built for this
|
|
51
|
+
* library's OWN `credentials: { token, basic }` gate, where "no credential in the request" and "not
|
|
52
|
+
* authenticated" are the same fact. A host authenticating some other way — a session cookie, most
|
|
53
|
+
* commonly — can return an {@link AuthorizeDecision} (`{ allowed, reason }`) instead of a bare
|
|
54
|
+
* boolean to tell the guard precisely which denial this is, bypassing the heuristic entirely. See
|
|
55
|
+
* {@link AuthorizeDecision} and the "Delegate to your app's auth" doc section.
|
|
20
56
|
*/
|
|
21
|
-
export type AuthorizeHook = (ctx: UiHttpContext) =>
|
|
57
|
+
export type AuthorizeHook = (ctx: UiHttpContext) => AuthorizeResult | Promise<AuthorizeResult>;
|
|
22
58
|
/**
|
|
23
59
|
* Built-in credential gate used by the default {@link AuthorizeHook} when no
|
|
24
60
|
* custom `authorize` is supplied. When set, a request is allowed in production
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"define_config.d.ts","sourceRoot":"","sources":["../../../src/ui/define_config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,
|
|
1
|
+
{"version":3,"file":"define_config.d.ts","sourceRoot":"","sources":["../../../src/ui/define_config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,kBAAkB,IAAI,yBAAyB,EAC/C,oBAAoB,IAAI,2BAA2B,EACpD,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAE3B,MAAM,WAAW,CAAC;AACnB,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAE/C;;;;;;;GAOG;AACH,MAAM,MAAM,oBAAoB,GAAG,2BAA2B,CAAC,aAAa,CAAC,CAAC;AAE9E,8FAA8F;AAC9F,MAAM,MAAM,kBAAkB,GAAG,yBAAyB,CAAC,aAAa,CAAC,CAAC;AAE1E;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,WAAW,iBAAiB;IAChC,uCAAuC;IACvC,OAAO,EAAE,OAAO,CAAC;IACjB;;;OAGG;IACH,MAAM,CAAC,EAAE,iBAAiB,GAAG,WAAW,CAAC;CAC1C;AAED,4EAA4E;AAC5E,MAAM,MAAM,eAAe,GAAG,OAAO,GAAG,iBAAiB,CAAC;AAE1D;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,GAAG,EAAE,aAAa,KAAK,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;AAE/F;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,2EAA2E;IAC3E,KAAK,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;CAChD;AAED;;;;;GAKG;AACH,MAAM,WAAW,iBAAiB;IAChC;;;OAGG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;;;;;;OASG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B;;;;OAIG;IACH,SAAS,CAAC,EAAE,aAAa,CAAC;IAC1B;;;OAGG;IACH,WAAW,CAAC,EAAE,aAAa,CAAC;IAE5B;;;;;;;;;;OAUG;IACH,aAAa,CAAC,EAAE,oBAAoB,CAAC;IAErC;;;;;;;;;;;OAWG;IACH,YAAY,CAAC,EAAE,kBAAkB,CAAC;IAGlC;;;;;;;OAOG;IACH,MAAM,CAAC,EAAE,YAAY,CAAC;IAGtB;;;;;;OAMG;IACH,YAAY,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IAGxC;;;;OAIG;IACH,YAAY,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;CACtC;AAED,2EAA2E;AAC3E,MAAM,WAAW,YAAY;IAC3B,yEAAyE;IACzE,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,6CAA6C;IAC7C,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,mFAAmF;AACnF,MAAM,WAAW,yBAAyB;IACxC,OAAO,EAAE,OAAO,CAAC;IACjB,2EAA2E;IAC3E,IAAI,EAAE,MAAM,CAAC;IACb,iBAAiB,EAAE,OAAO,CAAC;IAC3B,SAAS,EAAE,aAAa,CAAC;IACzB,WAAW,EAAE,aAAa,CAAC;IAC3B,sFAAsF;IACtF,aAAa,EAAE,qBAAqB,GAAG,IAAI,CAAC;IAC5C,gGAAgG;IAChG,YAAY,EAAE,kBAAkB,GAAG,IAAI,CAAC;IACxC,8DAA8D;IAC9D,MAAM,EAAE;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAChE,qEAAqE;IACrE,YAAY,EAAE;QAAE,UAAU,EAAE,OAAO,CAAA;KAAE,CAAC;IACtC,kEAAkE;IAClE,YAAY,EAAE;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC;CACpC;AAED;;;;;;;;GAQG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,iBAAiB,GAAG,iBAAiB,CAEzE;AAED,mFAAmF;AACnF,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAMlD;AAiDD;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,aAAa,GAAG,aAAa,CAS1E;AAED,qDAAqD;AACrD,wBAAgB,aAAa,CAAC,MAAM,GAAE,iBAAsB,GAAG,yBAAyB,CA2BvF"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"define_config.js","sourceRoot":"","sources":["../../../src/ui/define_config.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"define_config.js","sourceRoot":"","sources":["../../../src/ui/define_config.ts"],"names":[],"mappings":"AAKA,OAAO,EAGL,oBAAoB,GACrB,MAAM,WAAW,CAAC;AAgNnB;;;;;;;;GAQG;AACH,MAAM,UAAU,YAAY,CAAC,MAAyB;IACpD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IACpB,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,YAAY,CAAC;IAC/C,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC;IACpC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3D,OAAO,CAAC,CAAC;AACX,CAAC;AAED,4DAA4D;AAC5D,SAAS,YAAY;IACnB,OAAO,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,CAAC;AAC/C,CAAC;AAED;;;;GAIG;AACH,SAAS,SAAS,CAAC,CAAS,EAAE,CAAS;IACrC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,QAAQ,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IACjF,OAAO,QAAQ,KAAK,CAAC,CAAC;AACxB,CAAC;AAED,wEAAwE;AACxE,SAAS,SAAS,CAAC,GAAkB;IACnC,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IACjD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACnD,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACvD,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC;IACvC,OAAO,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3D,CAAC;AAED,kFAAkF;AAClF,SAAS,YAAY,CAAC,GAAkB,EAAE,KAA6C;IACrF,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IACjD,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACrC,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAClD,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC3C,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACpE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,GAAG,KAAK,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7B,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;IACxC,OAAO,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;AACpF,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,WAA0B;IACzD,OAAO,CAAC,GAAG,EAAE,EAAE;QACb,IAAI,WAAW,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YACpC,MAAM,SAAS,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;YACjC,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,CAAC,SAAS,EAAE,WAAW,CAAC,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;QACtF,CAAC;QACD,IAAI,WAAW,CAAC,KAAK,KAAK,SAAS,IAAI,YAAY,CAAC,GAAG,EAAE,WAAW,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACzF,OAAO,CAAC,YAAY,EAAE,CAAC;IACzB,CAAC,CAAC;AACJ,CAAC;AAED,qDAAqD;AACrD,MAAM,UAAU,aAAa,CAAC,MAAM,GAAsB,EAAE;IAC1D,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC;IAC7C,OAAO;QACL,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,IAAI;QAC/B,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,IAAI,IAAI,YAAY,CAAC;QAChD,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,IAAI,KAAK;QACpD,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,gBAAgB,CAAC,WAAW,CAAC;QAC5D,WAAW;QACX,gGAAgG;QAChG,8EAA8E;QAC9E,aAAa,EAAE,oBAAoB,CAAC,MAAM,CAAC,aAAa,CAAC;QACzD,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,IAAI;QACzC,MAAM,EAAE;YACN,qEAAqE;YACrE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,IAAI,KAAK;YACxC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1E,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1F;QACD,YAAY,EAAE;YACZ,qEAAqE;YACrE,UAAU,EAAE,MAAM,CAAC,YAAY,EAAE,UAAU,IAAI,KAAK;SACrD;QACD,YAAY,EAAE;YACZ,iFAAiF;YACjF,OAAO,EAAE,MAAM,CAAC,YAAY,EAAE,OAAO,IAAI,KAAK;SAC/C;KACF,CAAC;AACJ,CAAC"}
|
package/dist/src/ui/guard.d.ts
CHANGED
|
@@ -15,10 +15,19 @@ export interface GuardResult {
|
|
|
15
15
|
* decision into a {@link GuardResult}. Framework-light: takes the same minimal
|
|
16
16
|
* HTTP context the handlers do, so it is unit-testable without a server.
|
|
17
17
|
*
|
|
18
|
-
*
|
|
19
|
-
*
|
|
20
|
-
*
|
|
21
|
-
*
|
|
18
|
+
* The hook may return a bare `boolean` OR an {@link AuthorizeDecision}
|
|
19
|
+
* (`{ allowed, reason? }`) — see that type for the full rationale. A denial's status is decided,
|
|
20
|
+
* in order:
|
|
21
|
+
* 1. An explicit `reason` on an {@link AuthorizeDecision} wins outright: `'unauthenticated'` → `401`,
|
|
22
|
+
* `'forbidden'` → `403`. This is the escape hatch for a hook that authenticates some way the guard
|
|
23
|
+
* cannot see by inspecting the request (a session cookie, most commonly — e.g.
|
|
24
|
+
* `@adonis-agora/authz`'s `authorizeByRoles`).
|
|
25
|
+
* 2. Otherwise (a bare `false`, or `{ allowed: false }` with no `reason`) the REQUEST-SHAPE heuristic
|
|
26
|
+
* this guard has always used runs: **401** when the request presented NO credential at all (an
|
|
27
|
+
* `Authorization` header is absent and no `?token`) — prompts the host/browser to authenticate;
|
|
28
|
+
* **403** when a credential WAS presented but rejected (wrong token/password). Built for this
|
|
29
|
+
* library's own `credentials: { token, basic }` gate, where "no credential in the request" and
|
|
30
|
+
* "not authenticated" are the same fact — a hook authenticating another way should prefer (1).
|
|
22
31
|
*
|
|
23
32
|
* Any error thrown by a custom `authorize` hook fails closed (403) rather than
|
|
24
33
|
* leaking the dashboard.
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"guard.d.ts","sourceRoot":"","sources":["../../../src/ui/guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,kBAAkB,EAExB,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,aAAa,
|
|
1
|
+
{"version":3,"file":"guard.d.ts","sourceRoot":"","sources":["../../../src/ui/guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,kBAAkB,EAExB,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,aAAa,EAAmB,MAAM,oBAAoB,CAAC;AACzE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAE/C,6CAA6C;AAC7C,MAAM,WAAW,WAAW;IAC1B,sDAAsD;IACtD,OAAO,EAAE,OAAO,CAAC;IACjB,+EAA+E;IAC/E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,yCAAyC;IACzC,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAsB,QAAQ,CAAC,GAAG,EAAE,aAAa,EAAE,SAAS,EAAE,aAAa,GAAG,OAAO,CAAC,WAAW,CAAC,CAqBjG;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,YAAY,CAAC,GAAG,EAAE,aAAa,EAAE,SAAS,EAAE,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,CAWjG;AAED,yFAAyF;AACzF,MAAM,WAAW,gBAAgB;IAC/B,wFAAwF;IACxF,QAAQ,EAAE,MAAM,CAAC;IACjB,iGAAiG;IACjG,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,6FAA6F;IAC7F,YAAY,CAAC,EAAE,kBAAkB,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC;IACxD,uEAAuE;IACvE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;;OAKG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED;;;;;;;;GAQG;AACH,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,aAAa,EAClB,SAAS,EAAE,aAAa,EACxB,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,OAAO,CAAC,CAyBlB"}
|
package/dist/src/ui/guard.js
CHANGED
|
@@ -4,24 +4,39 @@ import { resolveAccessDeniedPage, } from './access_denied_page.js';
|
|
|
4
4
|
* decision into a {@link GuardResult}. Framework-light: takes the same minimal
|
|
5
5
|
* HTTP context the handlers do, so it is unit-testable without a server.
|
|
6
6
|
*
|
|
7
|
-
*
|
|
8
|
-
*
|
|
9
|
-
*
|
|
10
|
-
*
|
|
7
|
+
* The hook may return a bare `boolean` OR an {@link AuthorizeDecision}
|
|
8
|
+
* (`{ allowed, reason? }`) — see that type for the full rationale. A denial's status is decided,
|
|
9
|
+
* in order:
|
|
10
|
+
* 1. An explicit `reason` on an {@link AuthorizeDecision} wins outright: `'unauthenticated'` → `401`,
|
|
11
|
+
* `'forbidden'` → `403`. This is the escape hatch for a hook that authenticates some way the guard
|
|
12
|
+
* cannot see by inspecting the request (a session cookie, most commonly — e.g.
|
|
13
|
+
* `@adonis-agora/authz`'s `authorizeByRoles`).
|
|
14
|
+
* 2. Otherwise (a bare `false`, or `{ allowed: false }` with no `reason`) the REQUEST-SHAPE heuristic
|
|
15
|
+
* this guard has always used runs: **401** when the request presented NO credential at all (an
|
|
16
|
+
* `Authorization` header is absent and no `?token`) — prompts the host/browser to authenticate;
|
|
17
|
+
* **403** when a credential WAS presented but rejected (wrong token/password). Built for this
|
|
18
|
+
* library's own `credentials: { token, basic }` gate, where "no credential in the request" and
|
|
19
|
+
* "not authenticated" are the same fact — a hook authenticating another way should prefer (1).
|
|
11
20
|
*
|
|
12
21
|
* Any error thrown by a custom `authorize` hook fails closed (403) rather than
|
|
13
22
|
* leaking the dashboard.
|
|
14
23
|
*/
|
|
15
24
|
export async function runGuard(ctx, authorize) {
|
|
16
|
-
let
|
|
25
|
+
let result;
|
|
17
26
|
try {
|
|
18
|
-
|
|
27
|
+
result = await authorize(ctx);
|
|
19
28
|
}
|
|
20
29
|
catch {
|
|
21
30
|
return { allowed: false, status: 403, message: 'Forbidden' };
|
|
22
31
|
}
|
|
32
|
+
const allowed = typeof result === 'boolean' ? result : result.allowed;
|
|
23
33
|
if (allowed)
|
|
24
34
|
return { allowed: true };
|
|
35
|
+
const reason = typeof result === 'boolean' ? undefined : result.reason;
|
|
36
|
+
if (reason === 'unauthenticated')
|
|
37
|
+
return { allowed: false, status: 401, message: 'Unauthorized' };
|
|
38
|
+
if (reason === 'forbidden')
|
|
39
|
+
return { allowed: false, status: 403, message: 'Forbidden' };
|
|
25
40
|
const presentedCredential = ctx.request.header('authorization') !== undefined || typeof ctx.request.qs().token === 'string';
|
|
26
41
|
return presentedCredential
|
|
27
42
|
? { allowed: false, status: 403, message: 'Forbidden' }
|
package/dist/src/ui/guard.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"guard.js","sourceRoot":"","sources":["../../../src/ui/guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,uBAAuB,GACxB,MAAM,yBAAyB,CAAC;AAcjC
|
|
1
|
+
{"version":3,"file":"guard.js","sourceRoot":"","sources":["../../../src/ui/guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,uBAAuB,GACxB,MAAM,yBAAyB,CAAC;AAcjC;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,GAAkB,EAAE,SAAwB;IACzE,IAAI,MAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;IAC/D,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;IACtE,IAAI,OAAO;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAEtC,MAAM,MAAM,GAAG,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;IACvE,IAAI,MAAM,KAAK,iBAAiB;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC;IAClG,IAAI,MAAM,KAAK,WAAW;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;IAEzF,MAAM,mBAAmB,GACvB,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,SAAS,IAAI,OAAO,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,QAAQ,CAAC;IAElG,OAAO,mBAAmB;QACxB,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,WAAW,EAAE;QACvD,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC;AAC/D,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,GAAkB,EAAE,SAAwB;IAC7E,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAC9C,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAChC,IAAI,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,UAAU,CAAC;QAAE,OAAO,KAAK,CAAC;IACrD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC;IACpC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5B,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,kBAAkB,EAAE,iCAAiC,CAAC,CAAC;IAC7E,CAAC;IACD,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,OAAO,IAAI,WAAW,EAAE,CAAC,CAAC;IAC5D,OAAO,KAAK,CAAC;AACf,CAAC;AAqBD;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,GAAkB,EAClB,SAAwB,EACxB,OAAyB;IAEzB,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAC9C,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAChC,MAAM,QAAQ,GAAG,GAAG,EAAE,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAC7C,IAAI,QAAQ,EAAE;QAAE,OAAO,KAAK,CAAC;IAE7B,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;IACjD,MAAM,IAAI,GAAqB;QAC7B,MAAM;QACN,MAAM,EAAE,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,WAAW;QACxD,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5E,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACjE,CAAC;IACF,MAAM,IAAI,GAAG,MAAM,uBAAuB,CAAC,IAAI,EAAE,OAAO,CAAC,YAAY,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;IACtF,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAEhC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5B,IAAI,MAAM,KAAK,GAAG,IAAI,OAAO,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;QAClD,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,kBAAkB,EAAE,iCAAiC,CAAC,CAAC;IAC7E,CAAC;IACD,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,cAAc,EAAE,0BAA0B,CAAC,CAAC;IAChE,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,eAAe,EAAE,2BAA2B,CAAC,CAAC;IAClE,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxB,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,SAAS,gBAAgB,CAAC,GAAkB;IAC1C,IAAI,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IACpD,MAAM,QAAQ,GAAG,GAAG,CAAC,QAIpB,CAAC;IACF,OAAO,QAAQ,CAAC,WAAW,KAAK,IAAI,IAAI,QAAQ,CAAC,WAAW,KAAK,IAAI,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI,CAAC;AAClG,CAAC"}
|
package/dist/src/ui/index.d.ts
CHANGED
|
@@ -1,5 +1,5 @@
|
|
|
1
1
|
/** Keep in sync with this package's `version` in package.json. */
|
|
2
|
-
export declare const VERSION = "0.
|
|
2
|
+
export declare const VERSION = "0.20.0";
|
|
3
3
|
export type { AccessDeniedInfo, AccessDeniedPageOptions, AccessDeniedReason, } from './access_denied_page.js';
|
|
4
4
|
export { CONSOLE as ACCESS_DENIED_CONSOLE, escapeHtml, renderAccessDeniedPage, resolveAccessDeniedPage, } from './access_denied_page.js';
|
|
5
5
|
export type { EntrySummary, RetentionInfo, RetentionOptions, RetentionPruneOptions, RetentionSamplingRate, } from './api.js';
|
package/dist/src/ui/index.js
CHANGED
|
@@ -1,5 +1,5 @@
|
|
|
1
1
|
/** Keep in sync with this package's `version` in package.json. */
|
|
2
|
-
export const VERSION = '0.
|
|
2
|
+
export const VERSION = '0.20.0';
|
|
3
3
|
// — the built-in "access denied" page (what a browser sees on a refused page navigation) —
|
|
4
4
|
export { CONSOLE as ACCESS_DENIED_CONSOLE, escapeHtml, renderAccessDeniedPage, resolveAccessDeniedPage, } from './access_denied_page.js';
|
|
5
5
|
// — JSON API —
|
|
@@ -1,5 +1,5 @@
|
|
|
1
1
|
/** Keep in sync with this package's `version` in package.json. */
|
|
2
|
-
export declare const VERSION = "0.
|
|
2
|
+
export declare const VERSION = "0.20.0";
|
|
3
3
|
export type { CacheEntryContent, CacheEventLike, CacheOperation } from './cache_watcher.js';
|
|
4
4
|
export { buildCacheEntry, CACHE_EVENTS, CacheWatcher } from './cache_watcher.js';
|
|
5
5
|
export { nextCronRunMs } from './cron_next_run.js';
|
|
@@ -1,5 +1,5 @@
|
|
|
1
1
|
/** Keep in sync with this package's `version` in package.json. */
|
|
2
|
-
export const VERSION = '0.
|
|
2
|
+
export const VERSION = '0.20.0';
|
|
3
3
|
// — cache watcher —
|
|
4
4
|
export { buildCacheEntry, CACHE_EVENTS, CacheWatcher } from './cache_watcher.js';
|
|
5
5
|
export { nextCronRunMs } from './cron_next_run.js';
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@adonis-agora/telescope",
|
|
3
|
-
"version": "0.
|
|
3
|
+
"version": "0.20.0",
|
|
4
4
|
"description": "Laravel Telescope-style headless observability for AdonisJS — records HTTP requests and every Agora diagnostics event as queryable entries, plus opt-in subpaths for per-technology watchers, a web dashboard, AI exception diagnosis, and alerting.",
|
|
5
5
|
"license": "MIT",
|
|
6
6
|
"repository": {
|
|
@@ -92,6 +92,11 @@
|
|
|
92
92
|
"types": "./dist/providers/telescope_cpu_profiling_provider.d.ts",
|
|
93
93
|
"import": "./dist/providers/telescope_cpu_profiling_provider.js",
|
|
94
94
|
"default": "./dist/providers/telescope_cpu_profiling_provider.js"
|
|
95
|
+
},
|
|
96
|
+
"./otel": {
|
|
97
|
+
"types": "./dist/src/otel/index.d.ts",
|
|
98
|
+
"import": "./dist/src/otel/index.js",
|
|
99
|
+
"default": "./dist/src/otel/index.js"
|
|
95
100
|
}
|
|
96
101
|
},
|
|
97
102
|
"files": [
|
|
@@ -111,6 +116,12 @@
|
|
|
111
116
|
"@adonisjs/lucid": "^22.4.0",
|
|
112
117
|
"@adonisjs/mail": "^10.2.0",
|
|
113
118
|
"@anthropic-ai/sdk": ">=0.32.0 <1.0.0",
|
|
119
|
+
"@opentelemetry/api": "^1.9.0",
|
|
120
|
+
"@opentelemetry/exporter-logs-otlp-http": ">=0.200.0 <1.0.0",
|
|
121
|
+
"@opentelemetry/exporter-trace-otlp-http": ">=0.200.0 <1.0.0",
|
|
122
|
+
"@opentelemetry/resources": "^2.0.0",
|
|
123
|
+
"@opentelemetry/sdk-logs": ">=0.200.0 <1.0.0",
|
|
124
|
+
"@opentelemetry/sdk-trace-base": "^2.0.0",
|
|
114
125
|
"cron-parser": "^4.0.0 || ^5.0.0"
|
|
115
126
|
},
|
|
116
127
|
"peerDependenciesMeta": {
|
|
@@ -126,6 +137,24 @@
|
|
|
126
137
|
"@anthropic-ai/sdk": {
|
|
127
138
|
"optional": true
|
|
128
139
|
},
|
|
140
|
+
"@opentelemetry/api": {
|
|
141
|
+
"optional": true
|
|
142
|
+
},
|
|
143
|
+
"@opentelemetry/exporter-logs-otlp-http": {
|
|
144
|
+
"optional": true
|
|
145
|
+
},
|
|
146
|
+
"@opentelemetry/exporter-trace-otlp-http": {
|
|
147
|
+
"optional": true
|
|
148
|
+
},
|
|
149
|
+
"@opentelemetry/resources": {
|
|
150
|
+
"optional": true
|
|
151
|
+
},
|
|
152
|
+
"@opentelemetry/sdk-logs": {
|
|
153
|
+
"optional": true
|
|
154
|
+
},
|
|
155
|
+
"@opentelemetry/sdk-trace-base": {
|
|
156
|
+
"optional": true
|
|
157
|
+
},
|
|
129
158
|
"cron-parser": {
|
|
130
159
|
"optional": true
|
|
131
160
|
}
|
|
@@ -135,6 +164,12 @@
|
|
|
135
164
|
"@adonisjs/core": "7.5.0",
|
|
136
165
|
"@adonisjs/lucid": "22.4.2",
|
|
137
166
|
"@anthropic-ai/sdk": "0.122.0",
|
|
167
|
+
"@opentelemetry/api": "1.9.1",
|
|
168
|
+
"@opentelemetry/exporter-logs-otlp-http": "0.220.0",
|
|
169
|
+
"@opentelemetry/exporter-trace-otlp-http": "0.220.0",
|
|
170
|
+
"@opentelemetry/resources": "2.10.0",
|
|
171
|
+
"@opentelemetry/sdk-logs": "0.220.0",
|
|
172
|
+
"@opentelemetry/sdk-trace-base": "2.10.0",
|
|
138
173
|
"@tanstack/intent": "^0.3.7",
|
|
139
174
|
"@types/better-sqlite3": "9.6.0",
|
|
140
175
|
"@types/node": "26.4.0",
|
|
@@ -155,7 +190,10 @@
|
|
|
155
190
|
"diagnostics",
|
|
156
191
|
"tracing",
|
|
157
192
|
"agora",
|
|
158
|
-
"tanstack-intent"
|
|
193
|
+
"tanstack-intent",
|
|
194
|
+
"opentelemetry",
|
|
195
|
+
"otlp",
|
|
196
|
+
"grafana"
|
|
159
197
|
],
|
|
160
198
|
"scripts": {
|
|
161
199
|
"build": "tsc -p tsconfig.json && pnpm run copy:stubs",
|