@astram/guard 0.19.0 → 0.20.1

package/dist/session/session-restriction.js

@@ -0,0 +1,23 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.restrictionOf = restrictionOf;
+exports.restrictionErrorCode = restrictionErrorCode;
+/** The session's effective restriction at `nowMs`, or `null` when unrestricted. */
+function restrictionOf(claims, nowMs) {
+    if (claims.mustReenroll === true || claims.restriction === 'reenroll')
+        return 'reenroll';
+    if (claims.restriction !== undefined && claims.restriction !== null)
+        return 'mfa_enrollment';
+    const deadline = claims.mfaEnrollmentDeadlineMs;
+    if (deadline !== undefined && deadline !== null) {
+        // A non-number deadline never loosens anything: it counts as passed (fail closed).
+        if (typeof deadline !== 'number' || !Number.isFinite(deadline) || nowMs >= deadline) {
+            return 'mfa_enrollment';
+        }
+    }
+    return null;
+}
+/** The 403 body code for a reason (`{ error: <code> }`). */
+function restrictionErrorCode(reason) {
+    return reason === 'reenroll' ? 'reenrollment_required' : 'mfa_enrollment_required';
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@astram/guard",
-  "version": "0.19.0",
+  "version": "0.20.1",
   "license": "MIT",
   "description": "Astram framework — the enforcement guard + real-world adapters (the 'hands'). One global deny-by-default gate every request passes through (ADR-0002), classification decorators, boot-pool assertion (ADR-0018), the forRoot() registration seam, and the DB/Redis/crypto adapters that connect the sealed core to a real backend. Depends on @astram/core (ADR-0003, ADR-0023).",
   "type": "commonjs",
@@ -36,8 +36,8 @@
     "argon2": "^0.41.1",
     "ioredis": "^5.4.1",
     "mariadb": "^3.5.4",
-    "@astram/core": "1.10.0",
-    "@astram/engine": "0.10.2"
+    "@astram/core": "1.11.0",
+    "@astram/engine": "0.12.0"
   },
   "peerDependencies": {
     "@nestjs/common": "^11",
@@ -45,7 +45,7 @@
     "@nestjs/platform-express": "^11",
     "reflect-metadata": "^0.2",
     "rxjs": "^7",
-    "@astram/messaging": "^0.1.2"
+    "@astram/messaging": "^0.1.4"
   },
   "peerDependenciesMeta": {
     "@astram/messaging": {
@@ -68,7 +68,7 @@
     "typescript": "^5.7.0",
     "unplugin-swc": "^1.5.1",
     "vitest": "^2.1.8",
-    "@astram/messaging": "0.1.2"
+    "@astram/messaging": "0.1.4"
   },
   "repository": {
     "type": "git",