@aruvili/api 0.1.0

package/src/integration.test.ts

@@ -0,0 +1,453 @@
+import { describe, it, expect, beforeAll, afterAll } from 'bun:test';
+import { Hono } from 'hono';
+import { query } from './db.js';
+import { registry } from './registry.js';
+import { generateCreateTableDDL } from '@aruvili/core';
+import { crudRouter } from './routes/crud.js';
+import { metaRouter } from './routes/meta.js';
+import { tenantMiddleware } from './middleware/tenant.js';
+import { DocTypeDefinition } from '@aruvili/core';
+
+describe('Real PostgreSQL Integration Tests', () => {
+  const app = new Hono<any>();
+
+  beforeAll(async () => {
+    (globalThis as any).dbMock = undefined;
+    // 1. Ensure system tables exist
+    await query(`CREATE TABLE IF NOT EXISTS _tenants (
+      id VARCHAR(100) PRIMARY KEY,
+      name VARCHAR(255) NOT NULL,
+      domain VARCHAR(255),
+      created_at TIMESTAMP WITH TIME ZONE DEFAULT NOW()
+    );`);
+
+    await query(`CREATE TABLE IF NOT EXISTS _doctype_meta (
+      name VARCHAR(255) PRIMARY KEY,
+      definition JSONB NOT NULL,
+      created_at TIMESTAMP WITH TIME ZONE DEFAULT NOW(),
+      updated_at TIMESTAMP WITH TIME ZONE DEFAULT NOW()
+    );`);
+
+    await query(`CREATE TABLE IF NOT EXISTS _naming_series (
+      prefix VARCHAR(100) PRIMARY KEY,
+      current_value INTEGER NOT NULL DEFAULT 0
+    );`);
+
+    await query(`CREATE TABLE IF NOT EXISTS _doctype_migration_history (
+      id SERIAL PRIMARY KEY, uuid UUID DEFAULT gen_random_uuid() UNIQUE NOT NULL,
+      doctype_name VARCHAR(255) NOT NULL, version INTEGER NOT NULL,
+      ddl_executed TEXT NOT NULL, executed_at TIMESTAMP WITH TIME ZONE DEFAULT NOW(),
+      executed_by VARCHAR(255)
+    );`);
+
+    await query(`CREATE TABLE IF NOT EXISTS _doctype_definition_history (
+      id SERIAL PRIMARY KEY,
+      doctype_name VARCHAR(255) REFERENCES _doctype_meta(name) ON DELETE CASCADE,
+      version INTEGER NOT NULL,
+      definition JSONB NOT NULL,
+      changed_by VARCHAR(255) NOT NULL,
+      changed_at TIMESTAMP WITH TIME ZONE DEFAULT NOW(),
+      ddl_applied TEXT,
+      notes TEXT
+    );`);
+
+    await query(`CREATE TABLE IF NOT EXISTS _audit_log (
+      id BIGSERIAL PRIMARY KEY,
+      doctype_name VARCHAR(255) NOT NULL,
+      docname VARCHAR(255) NOT NULL,
+      action VARCHAR(50) NOT NULL,
+      changed_by VARCHAR(255) NOT NULL,
+      changed_at TIMESTAMP WITH TIME ZONE DEFAULT NOW(),
+      diff JSONB NOT NULL
+    );`);
+
+    // Setup app route and mock user context
+    app.use('*', tenantMiddleware);
+    app.use('*', async (c, next) => {
+      c.set('user', { email: 'admin@aruvili.com', roles: ['System Manager'] });
+      await next();
+    });
+    app.route('/api/doctype/:doctype', crudRouter);
+    app.route('/api/meta', metaRouter);
+
+    // Clean any residual test state
+    await query(`DROP SCHEMA IF EXISTS tenant_alpha CASCADE;`);
+    await query(`DELETE FROM _tenants WHERE id = 'tenant_alpha';`);
+    await query(`DROP TABLE IF EXISTS dt_testtask CASCADE;`);
+    await query(`DROP TABLE IF EXISTS dt_testproject CASCADE;`);
+    await query(`DROP TABLE IF EXISTS dt_testschemahistory CASCADE;`);
+    await query(`DROP TABLE IF EXISTS dt_testmultitenantpost CASCADE;`);
+    await query(`DELETE FROM _doctype_meta WHERE name IN ('TestTask', 'TestProject', 'TestSchemaHistory', 'TestMultiTenantPost');`);
+    await query(`DELETE FROM _naming_series WHERE prefix = 'TSK-';`);
+  });
+
+  afterAll(async () => {
+    // Cleanup created test tables
+    await query(`DROP SCHEMA IF EXISTS tenant_alpha CASCADE;`);
+    await query(`DELETE FROM _tenants WHERE id = 'tenant_alpha';`);
+    await query(`DROP TABLE IF EXISTS dt_testtask CASCADE;`);
+    await query(`DROP TABLE IF EXISTS dt_testproject CASCADE;`);
+    await query(`DROP TABLE IF EXISTS dt_testschemahistory CASCADE;`);
+    await query(`DROP TABLE IF EXISTS dt_testmultitenantpost CASCADE;`);
+    await query(`DELETE FROM _doctype_meta WHERE name IN ('TestTask', 'TestProject', 'TestSchemaHistory', 'TestMultiTenantPost');`);
+    await query(`DELETE FROM _naming_series WHERE prefix = 'TSK-';`);
+  });
+
+  it('should dynamically migrate, validate, and execute operations against real PostgreSQL tables', async () => {
+    // 1. Define TestProject (parent table)
+    const testProjectSchema: DocTypeDefinition = {
+      name: 'TestProject',
+      fields: [
+        { fieldname: 'project_name', label: 'Project Name', fieldtype: 'Text', required: true }
+      ],
+      permissions: [
+        { role: 'System Manager', create: true, read: true, update: true, delete: true }
+      ]
+    };
+
+    // 2. Define TestTask (child table linked to TestProject, supporting versioning & workflow)
+    const testTaskSchema: DocTypeDefinition = {
+      name: 'TestTask',
+      naming_rule: 'NamingSeries',
+      naming_series: 'TSK-.#####',
+      fields: [
+        { fieldname: 'title', label: 'Title', fieldtype: 'Text', required: true },
+        { fieldname: 'project', label: 'Project Link', fieldtype: 'Link', options: 'TestProject' },
+        { fieldname: 'status', label: 'Status', fieldtype: 'Select', options: 'Draft,In Progress,Done' }
+      ],
+      permissions: [
+        { role: 'System Manager', create: true, read: true, update: true, delete: true }
+      ],
+      workflow: {
+        fieldname: 'status',
+        initial_state: 'Draft',
+        transitions: [
+          { state: 'Draft', action: 'Start', next_state: 'In Progress', allowed_roles: ['System Manager'] },
+          { state: 'In Progress', action: 'Complete', next_state: 'Done', allowed_roles: ['System Manager'] }
+        ]
+      }
+    };
+
+    // Save definitions to _doctype_meta
+    await query(
+      `INSERT INTO _doctype_meta (name, definition) VALUES ($1, $2), ($3, $4)`,
+      ['TestProject', JSON.stringify(testProjectSchema), 'TestTask', JSON.stringify(testTaskSchema)]
+    );
+
+    // Invalidate cache in registry
+    registry.invalidate('TestProject');
+    registry.invalidate('TestTask');
+
+    // Run migrations using generated DDLs
+    const projectDDLs = generateCreateTableDDL(testProjectSchema);
+    for (const statement of projectDDLs) {
+      await query(statement);
+    }
+
+    const taskDDLs = generateCreateTableDDL(testTaskSchema);
+    for (const statement of taskDDLs) {
+      await query(statement);
+    }
+
+    // 3. Test insert parent document via HTTP router
+    const projectRes = await app.request('/api/doctype/TestProject', {
+      method: 'POST',
+      headers: { 'Content-Type': 'application/json' },
+      body: JSON.stringify({ name: 'PROJ-001', project_name: 'Aruvili Hardening' })
+    });
+    expect(projectRes.status).toBe(200);
+
+    // 4. Test link validation check: inserting task with wrong link must fail
+    const invalidTaskRes = await app.request('/api/doctype/TestTask', {
+      method: 'POST',
+      headers: { 'Content-Type': 'application/json' },
+      body: JSON.stringify({ title: 'Task with invalid link', project: 'NON_EXISTENT_PROJ' })
+    });
+    expect(invalidTaskRes.status).toBe(400);
+    const invalidJson = await invalidTaskRes.json();
+    expect(invalidJson.details).toContain('Link validation failed');
+
+    // 5. Insert task with valid link (naming series should generate TSK-00001)
+    const validTaskRes = await app.request('/api/doctype/TestTask', {
+      method: 'POST',
+      headers: { 'Content-Type': 'application/json' },
+      body: JSON.stringify({ title: 'Dynamic Task', project: 'PROJ-001' })
+    });
+    expect(validTaskRes.status).toBe(200);
+    const taskData = await validTaskRes.json();
+    expect(taskData.name).toBe('TSK-00001');
+    expect(taskData.version).toBe(1);
+    expect(taskData.status).toBe('Draft');
+
+    // 6. Test Optimistic Concurrency Control (OCC)
+    // Update task to version 2
+    const updateRes = await app.request(`/api/doctype/TestTask/TSK-00001`, {
+      method: 'PUT',
+      headers: { 'Content-Type': 'application/json' },
+      body: JSON.stringify({
+        title: 'Updated Task Name',
+        version: 1
+      })
+    });
+    expect(updateRes.status).toBe(200);
+    const updatedData = await updateRes.json();
+    expect(updatedData.version).toBe(2);
+
+    // Trigger update with obsolete version (must fail)
+    const staleUpdateRes = await app.request(`/api/doctype/TestTask/TSK-00001`, {
+      method: 'PUT',
+      headers: { 'Content-Type': 'application/json' },
+      body: JSON.stringify({
+        title: 'Obsolete update description',
+        version: 1
+      })
+    });
+    expect(staleUpdateRes.status).toBe(409); // Conflict
+
+    // 7. Test Workflow transition via route
+    const workflowRes = await app.request(`/api/doctype/TestTask/TSK-00001/workflow`, {
+      method: 'POST',
+      headers: { 'Content-Type': 'application/json' },
+      body: JSON.stringify({ action: 'Start' })
+    });
+    expect(workflowRes.status).toBe(200);
+    const workflowData = await workflowRes.json();
+    expect(workflowData.status).toBe('In Progress');
+
+    // 8. Test Bulk Operations Rollback on error
+    // Insert a batch where 1st is valid, 2nd is invalid (fails link check)
+    const bulkRes = await app.request('/api/doctype/TestTask/bulk', {
+      method: 'POST',
+      headers: { 'Content-Type': 'application/json' },
+      body: JSON.stringify({
+        action: 'insert',
+        items: [
+          { title: 'Valid Bulk Task', project: 'PROJ-001' },
+          { title: 'Invalid Bulk Task', project: 'INVALID_PROJECT_NAME' }
+        ]
+      })
+    });
+    expect(bulkRes.status).toBe(500); // Transaction rolled back
+    const bulkJson = await bulkRes.json();
+    expect(bulkJson.error).toContain('Bulk transaction rolled back');
+
+    // Check that 'Valid Bulk Task' was NOT written to the DB (verifying atomicity)
+    const checkDbRes = await query(`SELECT * FROM dt_testtask WHERE title = 'Valid Bulk Task'`);
+    expect(checkDbRes.rows.length).toBe(0);
+  });
+
+  it('should run background tasks and enforce distributed locks across tick cycles', async () => {
+    const { scheduler } = await import('./scheduler.js');
+    let runCount = 0;
+
+    scheduler.register({
+      name: 'integration-test-task',
+      intervalSeconds: 5,
+      execute: async (client) => {
+        runCount++;
+      }
+    });
+
+    // Make sure scheduler table is initialized
+    await scheduler.start(999999);
+    scheduler.stop(); // Stop automatic interval tick
+
+    // Clear any leftover lock records from old test runs
+    await query(`DELETE FROM _scheduled_jobs WHERE name = 'integration-test-task'`);
+
+    // Tick 1: Should run because it hasn't started yet
+    await (scheduler as any).tick();
+    expect(runCount).toBe(1);
+
+    // Verify lock record in DB
+    const jobRes = await query(`SELECT status FROM _scheduled_jobs WHERE name = 'integration-test-task'`);
+    expect(jobRes.rows[0].status).toBe('SUCCESS');
+
+    // Tick 2: Should NOT run because interval (5s) has not passed yet
+    await (scheduler as any).tick();
+    expect(runCount).toBe(1); // Should still be 1
+  });
+
+  it('should support registering doctypes, handling naming conflicts, tracking history, and reverting schemas', async () => {
+    // 1. Create a new DocType via API
+    const schemaDef = {
+      name: 'TestSchemaHistory',
+      fields: [
+        { fieldname: 'title', label: 'Title', fieldtype: 'Text', required: true }
+      ],
+      permissions: [
+        { role: 'System Manager', create: true, read: true, update: true, delete: true }
+      ]
+    };
+
+    const createRes = await app.request('/api/meta/doctypes', {
+      method: 'POST',
+      headers: { 'Content-Type': 'application/json' },
+      body: JSON.stringify(schemaDef)
+    });
+    expect(createRes.status).toBe(200);
+    const createData = await createRes.json();
+    expect(createData.action).toBe('CREATED');
+    expect(createData.version).toBe(1);
+
+    // 2. Test duplicate conflict: registering duplicate name must fail with 409
+    const conflictRes = await app.request('/api/meta/doctypes', {
+      method: 'POST',
+      headers: { 'Content-Type': 'application/json' },
+      body: JSON.stringify(schemaDef)
+    });
+    expect(conflictRes.status).toBe(409);
+    const conflictJson = await conflictRes.json();
+    expect(conflictJson.error).toContain('already exists');
+
+    // 3. Update the definition (version 2) using PUT
+    const updatedSchemaDef = {
+      ...schemaDef,
+      fields: [
+        { fieldname: 'title', label: 'Title', fieldtype: 'Text', required: true },
+        { fieldname: 'description', label: 'Description', fieldtype: 'Text' }
+      ]
+    };
+    const updateRes = await app.request('/api/meta/doctypes/TestSchemaHistory', {
+      method: 'PUT',
+      headers: { 'Content-Type': 'application/json' },
+      body: JSON.stringify(updatedSchemaDef)
+    });
+    expect(updateRes.status).toBe(200);
+    const updateData = await updateRes.json();
+    expect(updateData.action).toBe('MIGRATED');
+    expect(updateData.version).toBe(2);
+
+    // 4. Check configuration history log
+    const historyRes = await app.request('/api/meta/doctypes/TestSchemaHistory/history');
+    expect(historyRes.status).toBe(200);
+    const historyData = await historyRes.json();
+    expect(historyData.length).toBe(2);
+    expect(historyData[0].version).toBe(2);
+    expect(historyData[1].version).toBe(1);
+
+    // 5. Revert schema back to version 1 (which did not have the description field)
+    const revertRes = await app.request('/api/meta/doctypes/TestSchemaHistory/revert', {
+      method: 'POST',
+      headers: { 'Content-Type': 'application/json' },
+      body: JSON.stringify({ version: 1 })
+    });
+    expect(revertRes.status).toBe(200);
+    const revertData = await revertRes.json();
+    expect(revertData.action).toBe('REVERTED');
+    expect(revertData.version).toBe(3);
+
+    // Retrieve active definition to verify that reversion is reflected in registry
+    const currentMetaRes = await app.request('/api/meta/doctypes/TestSchemaHistory');
+    expect(currentMetaRes.status).toBe(200);
+    const currentMeta = await currentMetaRes.json();
+    
+    // The active definition fields should not contain the description field now
+    const fields = currentMeta.fields.map((f: any) => f.fieldname);
+    expect(fields).toContain('title');
+    expect(fields).not.toContain('description');
+  });
+
+  it('should isolate data using multi-tenant schemas and auto-sync schema modifications across all tenants', async () => {
+    // 1. Create a new tenant 'tenant_alpha'
+    const tenantRes = await app.request('/api/meta/tenants', {
+      method: 'POST',
+      headers: { 'Content-Type': 'application/json' },
+      body: JSON.stringify({ id: 'tenant_alpha', name: 'Tenant Alpha' })
+    });
+    expect(tenantRes.status).toBe(200);
+    const tenantData = await tenantRes.json();
+    expect(tenantData.tenantId).toBe('tenant_alpha');
+
+    // 2. Validate tenant list endpoint
+    const listRes = await app.request('/api/meta/tenants');
+    expect(listRes.status).toBe(200);
+    const listData = await listRes.json();
+    expect(listData.some((t: any) => t.id === 'tenant_alpha')).toBe(true);
+
+    // 3. Create document in tenant_alpha using X-Tenant-ID header
+    const createDocRes = await app.request('/api/doctype/TestSchemaHistory', {
+      method: 'POST',
+      headers: {
+        'Content-Type': 'application/json',
+        'X-Tenant-ID': 'tenant_alpha'
+      },
+      body: JSON.stringify({
+        name: 'DOC-ALPHA-01',
+        title: 'Hello from Tenant Alpha'
+      })
+    });
+    expect(createDocRes.status).toBe(200);
+
+    // 4. Verify data isolation: Get document from tenant_alpha should succeed
+    const getDocRes = await app.request('/api/doctype/TestSchemaHistory/DOC-ALPHA-01', {
+      headers: { 'X-Tenant-ID': 'tenant_alpha' }
+    });
+    expect(getDocRes.status).toBe(200);
+    const docData = await getDocRes.json();
+    expect(docData.title).toBe('Hello from Tenant Alpha');
+
+    // Get document from default schema (public) should fail/not be found
+    const getDocPublicRes = await app.request('/api/doctype/TestSchemaHistory/DOC-ALPHA-01');
+    expect(getDocPublicRes.status).toBe(404);
+
+    // 5. Test automatic schema synchronization:
+    // Create a NEW DocType definition globally
+    const newDocTypeDef = {
+      name: 'TestMultiTenantPost',
+      fields: [
+        { fieldname: 'headline', label: 'Headline', fieldtype: 'Text', required: true }
+      ],
+      permissions: [
+        { role: 'System Manager', create: true, read: true, update: true, delete: true }
+      ]
+    };
+
+    const newDocTypeRes = await app.request('/api/meta/doctypes', {
+      method: 'POST',
+      headers: { 'Content-Type': 'application/json' },
+      body: JSON.stringify(newDocTypeDef)
+    });
+    expect(newDocTypeRes.status).toBe(200);
+
+    // Verify we can insert record into TestMultiTenantPost in tenant_alpha
+    const insertDocAlpha = await app.request('/api/doctype/TestMultiTenantPost', {
+      method: 'POST',
+      headers: {
+        'Content-Type': 'application/json',
+        'X-Tenant-ID': 'tenant_alpha'
+      },
+      body: JSON.stringify({
+        name: 'POST-01',
+        headline: 'Tenant Alpha headline'
+      })
+    });
+    expect(insertDocAlpha.status).toBe(200);
+
+    // Verify we can insert record into TestMultiTenantPost in default (public) schema
+    const insertDocPublic = await app.request('/api/doctype/TestMultiTenantPost', {
+      method: 'POST',
+      headers: { 'Content-Type': 'application/json' },
+      body: JSON.stringify({
+        name: 'POST-01',
+        headline: 'Public schema headline'
+      })
+    });
+    expect(insertDocPublic.status).toBe(200);
+
+    // Verify values are isolated
+    const checkAlpha = await app.request('/api/doctype/TestMultiTenantPost/POST-01', {
+      headers: { 'X-Tenant-ID': 'tenant_alpha' }
+    });
+    const checkPublic = await app.request('/api/doctype/TestMultiTenantPost/POST-01');
+
+    expect(checkAlpha.status).toBe(200);
+    expect(checkPublic.status).toBe(200);
+
+    const dataAlpha = await checkAlpha.json();
+    const dataPublic = await checkPublic.json();
+
+    expect(dataAlpha.headline).toBe('Tenant Alpha headline');
+    expect(dataPublic.headline).toBe('Public schema headline');
+  });
+});

package/src/middleware/auth.d.ts

@@ -0,0 +1,15 @@
+import { Context, Next } from 'hono';
+export interface UserSession {
+    email: string;
+    roles: string[];
+    session_id: string;
+}
+/**
+ * Resolves request JWT signature and binds session properties to Hono request context.
+ * In production: validates HMAC-SHA256 signature against JWT_SECRET.
+ * In development: supports mock tokens for testing.
+ */
+export declare function authMiddleware(c: Context, next: Next): Promise<(Response & import("hono").TypedResponse<{
+    error: string;
+}, 401, "json">) | undefined>;
+//# sourceMappingURL=auth.d.ts.map

package/src/middleware/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAGrC,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;;GAIG;AACH,wBAAsB,cAAc,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI;;8BA8F1D"}

package/src/middleware/auth.js

@@ -0,0 +1,93 @@
+import crypto from 'crypto';
+/**
+ * Resolves request JWT signature and binds session properties to Hono request context.
+ * In production: validates HMAC-SHA256 signature against JWT_SECRET.
+ * In development: supports mock tokens for testing.
+ */
+export async function authMiddleware(c, next) {
+    const authHeader = c.req.header('Authorization');
+    if (!authHeader || !authHeader.startsWith('Bearer ')) {
+        // If no auth token is provided, assign Guest role session context
+        c.set('user', {
+            email: 'guest@system.local',
+            roles: ['Guest'],
+            session_id: crypto.randomUUID()
+        });
+        await next();
+        return;
+    }
+    const token = authHeader.split(' ')[1];
+    if (!token || token.trim() === '') {
+        return c.json({ error: 'Unauthorized: Empty bearer token' }, 401);
+    }
+    // Enforce maximum token length to prevent abuse
+    if (token.length > 4096) {
+        return c.json({ error: 'Unauthorized: Token exceeds maximum allowed length' }, 401);
+    }
+    try {
+        const parts = token.split('.');
+        if (parts.length === 3) {
+            const jwtSecret = process.env.JWT_SECRET;
+            if (jwtSecret) {
+                // Production: Verify HMAC-SHA256 signature
+                const [headerB64, payloadB64, signatureB64] = parts;
+                const signatureInput = `${headerB64}.${payloadB64}`;
+                const expectedSignature = crypto
+                    .createHmac('sha256', jwtSecret)
+                    .update(signatureInput)
+                    .digest('base64url');
+                if (signatureB64 !== expectedSignature) {
+                    return c.json({ error: 'Unauthorized: Invalid token signature' }, 401);
+                }
+                // Decode and validate payload
+                const payloadJson = Buffer.from(payloadB64.replace(/-/g, '+').replace(/_/g, '/'), 'base64').toString('utf-8');
+                const payload = JSON.parse(payloadJson);
+                // Check token expiry
+                if (payload.exp && Date.now() / 1000 > payload.exp) {
+                    return c.json({ error: 'Unauthorized: Token has expired' }, 401);
+                }
+                // Check issued-at is not in the future (clock skew tolerance: 60s)
+                if (payload.iat && payload.iat > Date.now() / 1000 + 60) {
+                    return c.json({ error: 'Unauthorized: Token issued in the future' }, 401);
+                }
+                c.set('user', {
+                    email: payload.email || 'unknown@user.local',
+                    roles: Array.isArray(payload.roles) ? payload.roles : ['Guest'],
+                    session_id: crypto.randomUUID()
+                });
+            }
+            else {
+                // Development fallback: decode without verification (JWT_SECRET not set)
+                console.warn('[AUTH] JWT_SECRET not configured. Running in development mode - tokens are NOT verified.');
+                const payloadB64 = parts[1].replace(/-/g, '+').replace(/_/g, '/');
+                const payloadJson = Buffer.from(payloadB64, 'base64').toString('utf-8');
+                const payload = JSON.parse(payloadJson);
+                c.set('user', {
+                    email: payload.email || 'unknown@user.local',
+                    roles: Array.isArray(payload.roles) ? payload.roles : ['Guest'],
+                    session_id: crypto.randomUUID()
+                });
+            }
+        }
+        else {
+            // Mock/testing token support (non-JWT format)
+            if (process.env.NODE_ENV === 'production') {
+                return c.json({ error: 'Unauthorized: Invalid token format' }, 401);
+            }
+            if (token === 'admin-token') {
+                c.set('user', { email: 'admin@system.local', roles: ['System Manager'], session_id: crypto.randomUUID() });
+            }
+            else if (token === 'user-token') {
+                c.set('user', { email: 'user@system.local', roles: ['Employee'], session_id: crypto.randomUUID() });
+            }
+            else {
+                return c.json({ error: 'Unauthorized: Invalid authentication signature' }, 401);
+            }
+        }
+        await next();
+    }
+    catch (err) {
+        return c.json({ error: 'Unauthorized: Could not resolve session token' }, 401);
+    }
+}
+//# sourceMappingURL=auth.js.map

package/src/middleware/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["auth.ts"],"names":[],"mappings":"AACA,OAAO,MAAM,MAAM,QAAQ,CAAC;AAQ5B;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,CAAU,EAAE,IAAU;IACzD,MAAM,UAAU,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IAEjD,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACrD,kEAAkE;QAClE,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE;YACZ,KAAK,EAAE,oBAAoB;YAC3B,KAAK,EAAE,CAAC,OAAO,CAAC;YAChB,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE;SACjB,CAAC,CAAC;QAClB,MAAM,IAAI,EAAE,CAAC;QACb,OAAO;IACT,CAAC;IAED,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAEvC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAClC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kCAAkC,EAAE,EAAE,GAAG,CAAC,CAAC;IACpE,CAAC;IAED,gDAAgD;IAChD,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC;QACxB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oDAAoD,EAAE,EAAE,GAAG,CAAC,CAAC;IACtF,CAAC;IAED,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAE/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;YAEzC,IAAI,SAAS,EAAE,CAAC;gBACd,2CAA2C;gBAC3C,MAAM,CAAC,SAAS,EAAE,UAAU,EAAE,YAAY,CAAC,GAAG,KAAK,CAAC;gBACpD,MAAM,cAAc,GAAG,GAAG,SAAS,IAAI,UAAU,EAAE,CAAC;gBACpD,MAAM,iBAAiB,GAAG,MAAM;qBAC7B,UAAU,CAAC,QAAQ,EAAE,SAAS,CAAC;qBAC/B,MAAM,CAAC,cAAc,CAAC;qBACtB,MAAM,CAAC,WAAW,CAAC,CAAC;gBAEvB,IAAI,YAAY,KAAK,iBAAiB,EAAE,CAAC;oBACvC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uCAAuC,EAAE,EAAE,GAAG,CAAC,CAAC;gBACzE,CAAC;gBAED,8BAA8B;gBAC9B,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;gBAC9G,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;gBAExC,qBAAqB;gBACrB,IAAI,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;oBACnD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iCAAiC,EAAE,EAAE,GAAG,CAAC,CAAC;gBACnE,CAAC;gBAED,mEAAmE;gBACnE,IAAI,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,EAAE,EAAE,CAAC;oBACxD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,0CAA0C,EAAE,EAAE,GAAG,CAAC,CAAC;gBAC5E,CAAC;gBAED,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE;oBACZ,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,oBAAoB;oBAC5C,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;oBAC/D,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE;iBACjB,CAAC,CAAC;YACpB,CAAC;iBAAM,CAAC;gBACN,yEAAyE;gBACzE,OAAO,CAAC,IAAI,CAAC,0FAA0F,CAAC,CAAC;gBACzG,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;gBAClE,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;gBACxE,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;gBAExC,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE;oBACZ,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,oBAAoB;oBAC5C,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;oBAC/D,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE;iBACjB,CAAC,CAAC;YACpB,CAAC;QACH,CAAC;aAAM,CAAC;YACN,8CAA8C;YAC9C,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;gBAC1C,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oCAAoC,EAAE,EAAE,GAAG,CAAC,CAAC;YACtE,CAAC;YAED,IAAI,KAAK,KAAK,aAAa,EAAE,CAAC;gBAC5B,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAAC,gBAAgB,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,EAAiB,CAAC,CAAC;YAC5H,CAAC;iBAAM,IAAI,KAAK,KAAK,YAAY,EAAE,CAAC;gBAClC,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,KAAK,EAAE,CAAC,UAAU,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,EAAiB,CAAC,CAAC;YACrH,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gDAAgD,EAAE,EAAE,GAAG,CAAC,CAAC;YAClF,CAAC;QACH,CAAC;QACD,MAAM,IAAI,EAAE,CAAC;IACf,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,+CAA+C,EAAE,EAAE,GAAG,CAAC,CAAC;IACjF,CAAC;AACH,CAAC"}