@astram/guard 0.5.1 → 0.7.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (157) hide show
  1. package/dist/auth/account.controller.d.ts.map +1 -1
  2. package/dist/auth/account.controller.js +3 -0
  3. package/dist/auth/account.controller.js.map +1 -0
  4. package/dist/auth/auth.controller.d.ts +90 -1
  5. package/dist/auth/auth.controller.d.ts.map +1 -1
  6. package/dist/auth/auth.controller.js +245 -7
  7. package/dist/auth/auth.controller.js.map +1 -0
  8. package/dist/auth/auth.module.d.ts +21 -0
  9. package/dist/auth/auth.module.d.ts.map +1 -1
  10. package/dist/auth/auth.module.js +57 -0
  11. package/dist/auth/auth.module.js.map +1 -0
  12. package/dist/auth/connections.js.map +1 -0
  13. package/dist/auth/dto.d.ts +32 -0
  14. package/dist/auth/dto.d.ts.map +1 -1
  15. package/dist/auth/dto.js.map +1 -0
  16. package/dist/auth/pending-mfa-store.js.map +1 -0
  17. package/dist/auth/persistence.module.js.map +1 -0
  18. package/dist/auth/ports/audit-sink.js.map +1 -0
  19. package/dist/auth/ports/credential-writer.js.map +1 -0
  20. package/dist/auth/ports/email-sender.js.map +1 -0
  21. package/dist/auth/ports/membership-checker.d.ts +41 -0
  22. package/dist/auth/ports/membership-checker.d.ts.map +1 -0
  23. package/dist/auth/ports/membership-checker.js +32 -0
  24. package/dist/auth/ports/membership-checker.js.map +1 -0
  25. package/dist/auth/ports/mfa-device-store.js.map +1 -0
  26. package/dist/auth/ports/profile-writer.js.map +1 -0
  27. package/dist/auth/ports/recovery-code-store.js.map +1 -0
  28. package/dist/auth/ports/reset-token-store.js.map +1 -0
  29. package/dist/auth/ports/scope-subtree-resolver.d.ts +48 -0
  30. package/dist/auth/ports/scope-subtree-resolver.d.ts.map +1 -0
  31. package/dist/auth/ports/scope-subtree-resolver.js +38 -0
  32. package/dist/auth/ports/scope-subtree-resolver.js.map +1 -0
  33. package/dist/auth/ports/session-facts-projector.js.map +1 -0
  34. package/dist/auth/ports/session-sweeper.js.map +1 -0
  35. package/dist/auth/profile-resolver.js.map +1 -0
  36. package/dist/auth/rate-limit/attempt-limiter.js.map +1 -0
  37. package/dist/auth/tokens.d.ts +25 -0
  38. package/dist/auth/tokens.d.ts.map +1 -1
  39. package/dist/auth/tokens.js +26 -1
  40. package/dist/auth/tokens.js.map +1 -0
  41. package/dist/auth/totp-enrollment.js.map +1 -0
  42. package/dist/authentication/argon2id-password-hasher.js.map +1 -0
  43. package/dist/authentication/log-email-sender.js.map +1 -0
  44. package/dist/authentication/mariadb-api-key-store.d.ts +43 -0
  45. package/dist/authentication/mariadb-api-key-store.d.ts.map +1 -0
  46. package/dist/authentication/mariadb-api-key-store.js +87 -0
  47. package/dist/authentication/mariadb-credential-resolver.js.map +1 -0
  48. package/dist/authentication/mariadb-credential-writer.js.map +1 -0
  49. package/dist/authentication/mariadb-mfa-device-store.js.map +1 -0
  50. package/dist/authentication/mariadb-or-totp-verifier.js.map +1 -0
  51. package/dist/authentication/mariadb-profile-resolver.js.map +1 -0
  52. package/dist/authentication/mariadb-profile-writer.d.ts.map +1 -1
  53. package/dist/authentication/mariadb-profile-writer.js +10 -1
  54. package/dist/authentication/mariadb-profile-writer.js.map +1 -0
  55. package/dist/authentication/mariadb-recovery-code-store.js.map +1 -0
  56. package/dist/authentication/mariadb-reset-token-store.js.map +1 -0
  57. package/dist/authentication/mariadb-session-sweeper.js.map +1 -0
  58. package/dist/authz/cross-tenant-grant-writer.js.map +1 -0
  59. package/dist/authz/list-scope-sql.d.ts +125 -0
  60. package/dist/authz/list-scope-sql.d.ts.map +1 -0
  61. package/dist/authz/list-scope-sql.js +477 -0
  62. package/dist/authz/list-scope-sql.js.map +1 -0
  63. package/dist/authz/manifest-operation-authority-adapter.js.map +1 -0
  64. package/dist/authz/mariadb-cross-tenant-grant-adapter.d.ts +28 -0
  65. package/dist/authz/mariadb-cross-tenant-grant-adapter.d.ts.map +1 -1
  66. package/dist/authz/mariadb-cross-tenant-grant-adapter.js +49 -0
  67. package/dist/authz/mariadb-cross-tenant-grant-adapter.js.map +1 -0
  68. package/dist/authz/mariadb-list-scope-adapter.d.ts +61 -0
  69. package/dist/authz/mariadb-list-scope-adapter.d.ts.map +1 -0
  70. package/dist/authz/mariadb-list-scope-adapter.js +157 -0
  71. package/dist/authz/mariadb-list-scope-adapter.js.map +1 -0
  72. package/dist/authz/mariadb-policy-store.d.ts +118 -0
  73. package/dist/authz/mariadb-policy-store.d.ts.map +1 -0
  74. package/dist/authz/mariadb-policy-store.js +225 -0
  75. package/dist/authz/mariadb-policy-store.js.map +1 -0
  76. package/dist/authz/mariadb-record-rule-adapter.d.ts +7 -3
  77. package/dist/authz/mariadb-record-rule-adapter.d.ts.map +1 -1
  78. package/dist/authz/mariadb-record-rule-adapter.js +156 -13
  79. package/dist/authz/mariadb-record-rule-adapter.js.map +1 -0
  80. package/dist/authz/mariadb-record-share-adapter.js.map +1 -0
  81. package/dist/authz/record-share-cascade.js.map +1 -0
  82. package/dist/authz/record-share-writer.d.ts +22 -0
  83. package/dist/authz/record-share-writer.d.ts.map +1 -1
  84. package/dist/authz/record-share-writer.js +41 -0
  85. package/dist/authz/record-share-writer.js.map +1 -0
  86. package/dist/authz/wire-record-authorization.d.ts +35 -1
  87. package/dist/authz/wire-record-authorization.d.ts.map +1 -1
  88. package/dist/authz/wire-record-authorization.js +75 -0
  89. package/dist/authz/wire-record-authorization.js.map +1 -0
  90. package/dist/boot/boot-sequence.js.map +1 -0
  91. package/dist/boot/boot.module.js.map +1 -0
  92. package/dist/completeness/catalog-reconciler.js.map +1 -0
  93. package/dist/completeness/operation-inventory-scanner.js.map +1 -0
  94. package/dist/completeness/ports/catalog-store.js.map +1 -0
  95. package/dist/config/app-config.d.ts +16 -0
  96. package/dist/config/app-config.d.ts.map +1 -1
  97. package/dist/config/app-config.js +22 -0
  98. package/dist/config/app-config.js.map +1 -0
  99. package/dist/config/config.module.js.map +1 -0
  100. package/dist/encryption/local-kek-crypto.d.ts +15 -0
  101. package/dist/encryption/local-kek-crypto.d.ts.map +1 -0
  102. package/dist/encryption/local-kek-crypto.js +79 -0
  103. package/dist/enforcement/classification.decorator.js.map +1 -0
  104. package/dist/enforcement/core-seam.js.map +1 -0
  105. package/dist/enforcement/enforcement.module.js.map +1 -0
  106. package/dist/enforcement/global-enforcement.guard.d.ts +3 -1
  107. package/dist/enforcement/global-enforcement.guard.d.ts.map +1 -1
  108. package/dist/enforcement/global-enforcement.guard.js +7 -3
  109. package/dist/enforcement/global-enforcement.guard.js.map +1 -0
  110. package/dist/enforcement/reenroll-allowlist.js.map +1 -0
  111. package/dist/identity/auth-facts.controller.js.map +1 -0
  112. package/dist/identity/identity-actions.d.ts +16 -0
  113. package/dist/identity/identity-actions.d.ts.map +1 -1
  114. package/dist/identity/identity-actions.js +23 -1
  115. package/dist/identity/identity-actions.js.map +1 -0
  116. package/dist/identity/module-registry.bridge.js.map +1 -0
  117. package/dist/identity/permission-facts.adapter.js.map +1 -0
  118. package/dist/index.d.ts +12 -2
  119. package/dist/index.d.ts.map +1 -1
  120. package/dist/index.js +64 -3
  121. package/dist/index.js.map +1 -0
  122. package/dist/migrations-dir.js.map +1 -0
  123. package/dist/module/shield-tokens.js.map +1 -0
  124. package/dist/module/shield.module.d.ts +33 -0
  125. package/dist/module/shield.module.d.ts.map +1 -1
  126. package/dist/module/shield.module.js +12 -0
  127. package/dist/module/shield.module.js.map +1 -0
  128. package/dist/request-auth/request-principal.d.ts +11 -3
  129. package/dist/request-auth/request-principal.d.ts.map +1 -1
  130. package/dist/request-auth/request-principal.js +70 -2
  131. package/dist/request-auth/request-principal.js.map +1 -0
  132. package/dist/request-auth/session-facts-als.js.map +1 -0
  133. package/dist/request-auth/session-token-binder.d.ts +35 -1
  134. package/dist/request-auth/session-token-binder.d.ts.map +1 -1
  135. package/dist/request-auth/session-token-binder.js +123 -8
  136. package/dist/request-auth/session-token-binder.js.map +1 -0
  137. package/dist/request-auth/tokens.d.ts +10 -0
  138. package/dist/request-auth/tokens.d.ts.map +1 -1
  139. package/dist/request-auth/tokens.js +11 -1
  140. package/dist/request-auth/tokens.js.map +1 -0
  141. package/dist/scope/closure-builder.d.ts +75 -0
  142. package/dist/scope/closure-builder.d.ts.map +1 -0
  143. package/dist/scope/closure-builder.js +134 -0
  144. package/dist/scope/closure-builder.js.map +1 -0
  145. package/dist/secrets/encrypted-file-secrets.d.ts +16 -0
  146. package/dist/secrets/encrypted-file-secrets.d.ts.map +1 -0
  147. package/dist/secrets/encrypted-file-secrets.js +92 -0
  148. package/dist/session/crypto-adapters.js.map +1 -0
  149. package/dist/session/index.js.map +1 -0
  150. package/dist/session/mariadb-session-record-store.js.map +1 -0
  151. package/dist/session/redis-hot-session-store.js.map +1 -0
  152. package/migrations/1710000000009-CreateRecordPermissionRule.cjs +56 -0
  153. package/migrations/1710000000014-CreateRecordShare.cjs +49 -0
  154. package/migrations/1710000000015-CreateScopeClosure.cjs +46 -0
  155. package/migrations/1710000000016-AlterCompanyParentFkRestrict.cjs +71 -0
  156. package/migrations/1710000000017-CreateServiceAccountKey.cjs +41 -0
  157. package/package.json +3 -3
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@astram/guard",
3
- "version": "0.5.1",
3
+ "version": "0.7.0",
4
4
  "license": "MIT",
5
5
  "description": "Astram framework — the enforcement guard + real-world adapters (the 'hands'). One global deny-by-default gate every request passes through (ADR-0002), classification decorators, boot-pool assertion (ADR-0018), the forRoot() registration seam, and the DB/Redis/crypto adapters that connect the sealed core to a real backend. Depends on @astram/core (ADR-0003, ADR-0023).",
6
6
  "type": "commonjs",
@@ -24,8 +24,8 @@
24
24
  "argon2": "^0.41.1",
25
25
  "ioredis": "^5.4.1",
26
26
  "mariadb": "^3.4.0",
27
- "@astram/core": "1.1.0",
28
- "@astram/engine": "0.1.4"
27
+ "@astram/core": "1.3.0",
28
+ "@astram/engine": "0.3.0"
29
29
  },
30
30
  "peerDependencies": {
31
31
  "@nestjs/common": "^11",