@aichatwar/shared 1.0.147 → 1.0.148

package/build/events/userEvents.d.ts

@@ -10,6 +10,7 @@ interface UserCreatedEvent extends BaseEvent {
         version: number;
         isAgent?: boolean;
         ownerUserId?: string;
+        role?: 'user' | 'admin';
     };
 }
 interface UserUpdatedEvent extends BaseEvent {
@@ -19,6 +20,7 @@ interface UserUpdatedEvent extends BaseEvent {
         email: string;
         status: UserStatus;
         version: number;
+        role?: 'user' | 'admin';
     };
 }
 interface UserSingedInEvent extends BaseEvent {

package/build/index.d.ts

@@ -7,6 +7,7 @@ export * from "./errors/requestValidationError";
 export * from "./middlewares/error-handler";
 export * from "./middlewares/jwt-extractor";
 export * from "./middlewares/login-required";
+export * from "./middlewares/require-role";
 export * from "./middlewares/validate-request";
 export * from "./observability/logger";
 export * from "./observability/correlation";

package/build/index.js

@@ -23,6 +23,7 @@ __exportStar(require("./errors/requestValidationError"), exports);
 __exportStar(require("./middlewares/error-handler"), exports);
 __exportStar(require("./middlewares/jwt-extractor"), exports);
 __exportStar(require("./middlewares/login-required"), exports);
+__exportStar(require("./middlewares/require-role"), exports);
 __exportStar(require("./middlewares/validate-request"), exports);
 // Observability (Phase 1)
 __exportStar(require("./observability/logger"), exports);

package/build/middlewares/jwt-extractor.d.ts

@@ -1,7 +1,8 @@
 import { Request, Response, NextFunction } from "express";
-interface JwtPayload {
+export interface JwtPayload {
     id: string;
     email: string;
+    role?: 'user' | 'admin';
 }
 declare global {
     namespace Express {

package/build/middlewares/require-role.d.ts

@@ -0,0 +1,21 @@
+import { Request, Response, NextFunction } from 'express';
+/**
+ * Middleware to require a specific role or roles
+ * Must be used after extractJWTPayload and loginRequired middleware
+ *
+ * @param allowedRoles - Single role string or array of role strings
+ * @returns Express middleware function
+ *
+ * @example
+ * router.get('/admin/users', extractJWTPayload, loginRequired, requireRole('admin'), handler);
+ * router.get('/moderator/content', extractJWTPayload, loginRequired, requireRole(['admin', 'moderator']), handler);
+ */
+export declare const requireRole: (allowedRoles: string | string[]) => (req: Request, res: Response, next: NextFunction) => void;
+/**
+ * Convenience middleware to require admin role
+ * Must be used after extractJWTPayload and loginRequired middleware
+ *
+ * @example
+ * router.get('/admin/users', extractJWTPayload, loginRequired, requireAdmin, handler);
+ */
+export declare const requireAdmin: (req: Request, res: Response, next: NextFunction) => void;

package/build/middlewares/require-role.js

@@ -0,0 +1,37 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.requireAdmin = exports.requireRole = void 0;
+const notAuthorizedError_1 = require("../errors/notAuthorizedError");
+/**
+ * Middleware to require a specific role or roles
+ * Must be used after extractJWTPayload and loginRequired middleware
+ *
+ * @param allowedRoles - Single role string or array of role strings
+ * @returns Express middleware function
+ *
+ * @example
+ * router.get('/admin/users', extractJWTPayload, loginRequired, requireRole('admin'), handler);
+ * router.get('/moderator/content', extractJWTPayload, loginRequired, requireRole(['admin', 'moderator']), handler);
+ */
+const requireRole = (allowedRoles) => {
+    return (req, res, next) => {
+        if (!req.jwtPayload) {
+            throw new notAuthorizedError_1.NotAuthorizedError(['Authentication required']);
+        }
+        const roles = Array.isArray(allowedRoles) ? allowedRoles : [allowedRoles];
+        const userRole = req.jwtPayload.role || 'user'; // Default to 'user' if role not set
+        if (!roles.includes(userRole)) {
+            throw new notAuthorizedError_1.NotAuthorizedError(['Insufficient permissions']);
+        }
+        next();
+    };
+};
+exports.requireRole = requireRole;
+/**
+ * Convenience middleware to require admin role
+ * Must be used after extractJWTPayload and loginRequired middleware
+ *
+ * @example
+ * router.get('/admin/users', extractJWTPayload, loginRequired, requireAdmin, handler);
+ */
+exports.requireAdmin = (0, exports.requireRole)('admin');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aichatwar/shared",
-  "version": "1.0.147",
+  "version": "1.0.148",
   "main": "./build/index.js",
   "typs": "./build/index.d.ts",
   "files": [