@babelpeak/babel-suite-server-sdk 0.2.0 → 0.3.0

package/dist/index.d.ts

@@ -1,2 +1,3 @@
 export { suiteAuth, type SuiteAuthOptions } from './plugin.js';
+export { DEFAULT_LOGIN_SCOPE, SuiteLogin, SuiteLoginError, returnToFrom, safeReturnTo, type SuiteLoginErrorCode, type SuiteLoginOptions, type SuiteLoginResult, type SuiteLoginTokens, } from './login.js';
 export { DEFAULT_IN_CLUSTER_SUITE_URL, DEFAULT_SA_TOKEN_FILE, EVENT_TOKEN_TYP, SERVICE_TOKEN_TYP, SUITE_INTERNAL_AUDIENCE, ScopeError, SuiteClient, SuiteError, TokenError, defaultInternalUrl, type AcceptsFrom, type LlmConfig, type ServiceAuth, type SuiteWebhookEvent, type OrgMember, type PermissionDefinition, type SuiteAuth, type SuiteClientOptions, } from './client.js';

package/dist/index.js

@@ -1,3 +1,4 @@
 export { suiteAuth } from './plugin.js';
+export { DEFAULT_LOGIN_SCOPE, SuiteLogin, SuiteLoginError, returnToFrom, safeReturnTo, } from './login.js';
 export { DEFAULT_IN_CLUSTER_SUITE_URL, DEFAULT_SA_TOKEN_FILE, EVENT_TOKEN_TYP, SERVICE_TOKEN_TYP, SUITE_INTERNAL_AUDIENCE, ScopeError, SuiteClient, SuiteError, TokenError, defaultInternalUrl, } from './client.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAyB,MAAM,aAAa,CAAC;AAC/D,OAAO,EACL,4BAA4B,EAC5B,qBAAqB,EACrB,eAAe,EACf,iBAAiB,EACjB,uBAAuB,EACvB,UAAU,EACV,WAAW,EACX,UAAU,EACV,UAAU,EACV,kBAAkB,GASnB,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAyB,MAAM,aAAa,CAAC;AAC/D,OAAO,EACL,mBAAmB,EACnB,UAAU,EACV,eAAe,EACf,YAAY,EACZ,YAAY,GAKb,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,4BAA4B,EAC5B,qBAAqB,EACrB,eAAe,EACf,iBAAiB,EACjB,uBAAuB,EACvB,UAAU,EACV,WAAW,EACX,UAAU,EACV,UAAU,EACV,kBAAkB,GASnB,MAAM,aAAa,CAAC"}

package/dist/login.d.ts

@@ -0,0 +1,97 @@
+import { type JWTPayload } from 'jose';
+/**
+ * Login con Babel Suite per app con backend (Authorization Code + PKCE), indipendente dal
+ * framework: genera l'URL di autorizzazione e un cookie con state, nonce, verifier e la pagina
+ * da cui l'utente è partito; al callback verifica tutto e restituisce token e `returnTo`.
+ *
+ *   const login = new SuiteLogin({ issuer, clientId, clientSecret, redirectUri });
+ *   // pagina protetta senza sessione:
+ *   redirect(`/login?return_to=${encodeURIComponent(returnToFrom(request.url))}`)
+ *   // GET /login
+ *   const { url, cookie } = await login.start({ returnTo: query.return_to });
+ *   // GET /callback
+ *   const { tokens, claims, returnTo, clearCookie } = await login.finish(request.url, cookieHeader);
+ */
+export interface SuiteLoginOptions {
+    /** URL di Suite (issuer OIDC). */
+    issuer: string;
+    clientId: string;
+    /** Client confidenziale (client_secret_basic). Senza: client pubblico, solo PKCE. */
+    clientSecret?: string;
+    /** Redirect URI registrata per il client: la rotta che chiama `finish`. */
+    redirectUri: string;
+    scope?: string;
+    /** Nome del cookie temporaneo del login (default `suite_login`). */
+    cookieName?: string;
+    /** Path del cookie: default il path della redirect URI, così viaggia solo verso il callback. */
+    cookiePath?: string;
+    /** Default: vero se la redirect URI è https. */
+    secureCookie?: boolean;
+    fetch?: typeof fetch;
+}
+export interface SuiteLoginTokens {
+    accessToken: string;
+    refreshToken?: string;
+    idToken: string;
+    expiresIn: number;
+}
+export interface SuiteLoginResult {
+    tokens: SuiteLoginTokens;
+    /** Claim dell'id token verificato (sub, sid, email, name, …). */
+    claims: JWTPayload & {
+        sid?: string;
+        email?: string;
+        name?: string;
+    };
+    /** Pagina da cui era partito il login, già validata come path relativo dell'app. */
+    returnTo: string;
+    /** Set-Cookie che cancella il cookie del login: va sempre inviato con la risposta. */
+    clearCookie: string;
+}
+export type SuiteLoginErrorCode = 'invalid_state' | 'access_denied' | 'provider_error' | 'token_error' | 'invalid_id_token';
+export declare class SuiteLoginError extends Error {
+    readonly code: SuiteLoginErrorCode;
+    constructor(code: SuiteLoginErrorCode, message?: string);
+}
+export declare const DEFAULT_LOGIN_SCOPE = "openid email profile offline_access orgs";
+/**
+ * Solo percorsi relativi della stessa app sopravvivono al giro di login: un valore assoluto,
+ * protocol-relative (`//host`) o con backslash diventa `/`. Evita gli open redirect.
+ */
+export declare function safeReturnTo(value: string | null | undefined, fallback?: string): string;
+/** Pagina corrente (path e query) da passare come `returnTo`, partendo dall'URL della richiesta. */
+export declare function returnToFrom(requestUrl: string | URL): string;
+export declare class SuiteLogin {
+    private readonly opts;
+    readonly issuer: string;
+    private readonly cookieName;
+    private readonly cookieAttrs;
+    private readonly doFetch;
+    private discovery?;
+    private jwks?;
+    constructor(opts: SuiteLoginOptions);
+    /** Set-Cookie che cancella lo stato del login (per esempio su un errore gestito a mano). */
+    get clearCookie(): string;
+    /** Avvia il login: redirect del browser a `url`, impostando `cookie` sulla stessa risposta. */
+    start(opts?: {
+        returnTo?: string | null;
+        loginHint?: string;
+    }): Promise<{
+        url: string;
+        cookie: string;
+    }>;
+    /**
+     * Chiude il login sul callback: controlla state e cookie, scambia il codice, verifica l'id token
+     * (firma, issuer, audience, nonce). Su errore lancia `SuiteLoginError`; in ogni caso la risposta
+     * deve includere `clearCookie`.
+     */
+    finish(callbackUrl: string | URL, cookieHeader: string | null | undefined): Promise<SuiteLoginResult>;
+    /** URL di logout di Suite (RP-initiated): chiude anche la sessione Suite. */
+    logoutUrl(opts?: {
+        idTokenHint?: string;
+        postLogoutRedirectUri?: string;
+    }): Promise<string>;
+    private readCookie;
+    private getDiscovery;
+    private getJwks;
+}

package/dist/login.js

@@ -0,0 +1,207 @@
+import { createHash, randomBytes } from 'node:crypto';
+import { createRemoteJWKSet, customFetch, jwtVerify } from 'jose';
+export class SuiteLoginError extends Error {
+    code;
+    constructor(code, message = code) {
+        super(message);
+        this.code = code;
+    }
+}
+export const DEFAULT_LOGIN_SCOPE = 'openid email profile offline_access orgs';
+const STATE_MAX_AGE = 600;
+const random = (bytes = 32) => randomBytes(bytes).toString('base64url');
+/**
+ * Solo percorsi relativi della stessa app sopravvivono al giro di login: un valore assoluto,
+ * protocol-relative (`//host`) o con backslash diventa `/`. Evita gli open redirect.
+ */
+export function safeReturnTo(value, fallback = '/') {
+    if (!value || !value.startsWith('/') || value.startsWith('//') || value.startsWith('/\\'))
+        return fallback;
+    // Caratteri di controllo (CR/LF, tab, …): il parser URL li scarterebbe cambiando il significato.
+    for (const ch of value) {
+        const c = ch.charCodeAt(0);
+        if (c < 0x20 || c === 0x7f)
+            return fallback;
+    }
+    try {
+        const base = 'http://app.invalid';
+        const url = new URL(value, base);
+        if (url.origin !== base)
+            return fallback;
+        return url.pathname + url.search + url.hash;
+    }
+    catch {
+        return fallback;
+    }
+}
+/** Pagina corrente (path e query) da passare come `returnTo`, partendo dall'URL della richiesta. */
+export function returnToFrom(requestUrl) {
+    const url = new URL(String(requestUrl), 'http://app.invalid');
+    return safeReturnTo(url.pathname + url.search);
+}
+export class SuiteLogin {
+    opts;
+    issuer;
+    cookieName;
+    cookieAttrs;
+    doFetch;
+    discovery;
+    jwks;
+    constructor(opts) {
+        this.opts = opts;
+        this.issuer = opts.issuer.replace(/\/$/, '');
+        this.cookieName = opts.cookieName ?? 'suite_login';
+        const redirect = new URL(opts.redirectUri);
+        const secure = opts.secureCookie ?? redirect.protocol === 'https:';
+        // SameSite=Lax: il cookie deve arrivare con il redirect top-level di ritorno da Suite.
+        this.cookieAttrs = `Path=${opts.cookiePath ?? redirect.pathname}; HttpOnly; SameSite=Lax${secure ? '; Secure' : ''}`;
+        this.doFetch = opts.fetch ?? fetch;
+    }
+    /** Set-Cookie che cancella lo stato del login (per esempio su un errore gestito a mano). */
+    get clearCookie() {
+        return `${this.cookieName}=; ${this.cookieAttrs}; Max-Age=0`;
+    }
+    /** Avvia il login: redirect del browser a `url`, impostando `cookie` sulla stessa risposta. */
+    async start(opts = {}) {
+        const d = await this.getDiscovery();
+        const pending = {
+            state: random(),
+            nonce: random(),
+            verifier: random(48),
+            returnTo: safeReturnTo(opts.returnTo),
+        };
+        const url = new URL(d.authorization_endpoint);
+        url.search = new URLSearchParams({
+            client_id: this.opts.clientId,
+            redirect_uri: this.opts.redirectUri,
+            response_type: 'code',
+            scope: this.opts.scope ?? DEFAULT_LOGIN_SCOPE,
+            state: pending.state,
+            nonce: pending.nonce,
+            code_challenge: createHash('sha256').update(pending.verifier).digest('base64url'),
+            code_challenge_method: 'S256',
+            ...(opts.loginHint ? { login_hint: opts.loginHint } : {}),
+        }).toString();
+        const value = Buffer.from(JSON.stringify(pending)).toString('base64url');
+        return {
+            url: url.toString(),
+            cookie: `${this.cookieName}=${value}; ${this.cookieAttrs}; Max-Age=${STATE_MAX_AGE}`,
+        };
+    }
+    /**
+     * Chiude il login sul callback: controlla state e cookie, scambia il codice, verifica l'id token
+     * (firma, issuer, audience, nonce). Su errore lancia `SuiteLoginError`; in ogni caso la risposta
+     * deve includere `clearCookie`.
+     */
+    async finish(callbackUrl, cookieHeader) {
+        const params = new URL(String(callbackUrl), 'http://app.invalid').searchParams;
+        const error = params.get('error');
+        if (error) {
+            throw new SuiteLoginError(error === 'access_denied' ? 'access_denied' : 'provider_error', params.get('error_description') ?? error);
+        }
+        const pending = this.readCookie(cookieHeader);
+        const code = params.get('code');
+        if (!pending || !code || params.get('state') !== pending.state) {
+            throw new SuiteLoginError('invalid_state', 'state assente, scaduto o diverso');
+        }
+        const d = await this.getDiscovery();
+        const headers = {
+            'content-type': 'application/x-www-form-urlencoded',
+        };
+        const body = new URLSearchParams({
+            grant_type: 'authorization_code',
+            code,
+            redirect_uri: this.opts.redirectUri,
+            code_verifier: pending.verifier,
+        });
+        if (this.opts.clientSecret) {
+            const basic = Buffer.from(`${encodeURIComponent(this.opts.clientId)}:${encodeURIComponent(this.opts.clientSecret)}`).toString('base64');
+            headers.authorization = `Basic ${basic}`;
+        }
+        else {
+            body.set('client_id', this.opts.clientId);
+        }
+        const res = await this.doFetch(d.token_endpoint, { method: 'POST', headers, body });
+        const json = (await res.json().catch(() => ({})));
+        if (!res.ok || !json.access_token || !json.id_token) {
+            throw new SuiteLoginError('token_error', json.error_description ?? json.error ?? `token endpoint: HTTP ${res.status}`);
+        }
+        let claims;
+        try {
+            ({ payload: claims } = await jwtVerify(json.id_token, await this.getJwks(), {
+                issuer: d.issuer,
+                audience: this.opts.clientId,
+            }));
+        }
+        catch (err) {
+            throw new SuiteLoginError('invalid_id_token', err.message);
+        }
+        if (claims.nonce !== pending.nonce)
+            throw new SuiteLoginError('invalid_id_token', 'nonce');
+        return {
+            tokens: {
+                accessToken: json.access_token,
+                refreshToken: json.refresh_token,
+                idToken: json.id_token,
+                expiresIn: json.expires_in ?? 0,
+            },
+            claims,
+            returnTo: pending.returnTo,
+            clearCookie: this.clearCookie,
+        };
+    }
+    /** URL di logout di Suite (RP-initiated): chiude anche la sessione Suite. */
+    async logoutUrl(opts = {}) {
+        const d = await this.getDiscovery();
+        const url = new URL(d.end_session_endpoint ?? `${this.issuer}/auth/logout`);
+        url.searchParams.set('client_id', this.opts.clientId);
+        if (opts.idTokenHint)
+            url.searchParams.set('id_token_hint', opts.idTokenHint);
+        if (opts.postLogoutRedirectUri)
+            url.searchParams.set('post_logout_redirect_uri', opts.postLogoutRedirectUri);
+        return url.toString();
+    }
+    readCookie(header) {
+        const raw = (header ?? '')
+            .split(';')
+            .map((c) => c.trim())
+            .find((c) => c.startsWith(`${this.cookieName}=`))
+            ?.slice(this.cookieName.length + 1);
+        if (!raw)
+            return undefined;
+        try {
+            const v = JSON.parse(Buffer.from(raw, 'base64url').toString('utf8'));
+            if (!v.state || !v.nonce || !v.verifier)
+                return undefined;
+            // Il cookie arriva dal browser: il ritorno si rivalida comunque.
+            return { ...v, returnTo: safeReturnTo(v.returnTo) };
+        }
+        catch {
+            return undefined;
+        }
+    }
+    getDiscovery() {
+        this.discovery ??= (async () => {
+            const res = await this.doFetch(`${this.issuer}/.well-known/openid-configuration`);
+            if (!res.ok)
+                throw new SuiteLoginError('provider_error', `discovery: HTTP ${res.status}`);
+            return (await res.json());
+        })().catch((err) => {
+            this.discovery = undefined;
+            throw err;
+        });
+        return this.discovery;
+    }
+    async getJwks() {
+        if (!this.jwks) {
+            const d = await this.getDiscovery();
+            this.jwks = createRemoteJWKSet(new URL(d.jwks_uri), {
+                cooldownDuration: 30_000,
+                cacheMaxAge: 10 * 60_000,
+                ...(this.opts.fetch ? { [customFetch]: this.opts.fetch } : {}),
+            });
+        }
+        return this.jwks;
+    }
+}
+//# sourceMappingURL=login.js.map

package/dist/login.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.js","sourceRoot":"","sources":["../src/login.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,SAAS,EAAmB,MAAM,MAAM,CAAC;AAsDnF,MAAM,OAAO,eAAgB,SAAQ,KAAK;IAEtB;IADlB,YACkB,IAAyB,EACzC,UAAkB,IAAI;QAEtB,KAAK,CAAC,OAAO,CAAC,CAAC;QAHC,SAAI,GAAJ,IAAI,CAAqB;IAI3C,CAAC;CACF;AAED,MAAM,CAAC,MAAM,mBAAmB,GAAG,0CAA0C,CAAC;AAC9E,MAAM,aAAa,GAAG,GAAG,CAAC;AAiB1B,MAAM,MAAM,GAAG,CAAC,KAAK,GAAG,EAAE,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAExE;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,KAAgC,EAAE,QAAQ,GAAG,GAAG;IAC3E,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC;QACvF,OAAO,QAAQ,CAAC;IAClB,iGAAiG;IACjG,KAAK,MAAM,EAAE,IAAI,KAAK,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAC3B,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,KAAK,IAAI;YAAE,OAAO,QAAQ,CAAC;IAC9C,CAAC;IACD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,oBAAoB,CAAC;QAClC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACjC,IAAI,GAAG,CAAC,MAAM,KAAK,IAAI;YAAE,OAAO,QAAQ,CAAC;QACzC,OAAO,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,QAAQ,CAAC;IAClB,CAAC;AACH,CAAC;AAED,oGAAoG;AACpG,MAAM,UAAU,YAAY,CAAC,UAAwB;IACnD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,oBAAoB,CAAC,CAAC;IAC9D,OAAO,YAAY,CAAC,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,OAAO,UAAU;IAQQ;IAPpB,MAAM,CAAS;IACP,UAAU,CAAS;IACnB,WAAW,CAAS;IACpB,OAAO,CAAe;IAC/B,SAAS,CAAsB;IAC/B,IAAI,CAAyC;IAErD,YAA6B,IAAuB;QAAvB,SAAI,GAAJ,IAAI,CAAmB;QAClD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC7C,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,aAAa,CAAC;QACnD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,IAAI,QAAQ,CAAC,QAAQ,KAAK,QAAQ,CAAC;QACnE,uFAAuF;QACvF,IAAI,CAAC,WAAW,GAAG,QAAQ,IAAI,CAAC,UAAU,IAAI,QAAQ,CAAC,QAAQ,2BAA2B,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACrH,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC;IACrC,CAAC;IAED,4FAA4F;IAC5F,IAAI,WAAW;QACb,OAAO,GAAG,IAAI,CAAC,UAAU,MAAM,IAAI,CAAC,WAAW,aAAa,CAAC;IAC/D,CAAC;IAED,+FAA+F;IAC/F,KAAK,CAAC,KAAK,CAAC,OAAyD,EAAE;QACrE,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QACpC,MAAM,OAAO,GAAiB;YAC5B,KAAK,EAAE,MAAM,EAAE;YACf,KAAK,EAAE,MAAM,EAAE;YACf,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC;YACpB,QAAQ,EAAE,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC;SACtC,CAAC;QACF,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC;QAC9C,GAAG,CAAC,MAAM,GAAG,IAAI,eAAe,CAAC;YAC/B,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ;YAC7B,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW;YACnC,aAAa,EAAE,MAAM;YACrB,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,mBAAmB;YAC7C,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,cAAc,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC;YACjF,qBAAqB,EAAE,MAAM;YAC7B,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1D,CAAC,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACzE,OAAO;YACL,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE;YACnB,MAAM,EAAE,GAAG,IAAI,CAAC,UAAU,IAAI,KAAK,KAAK,IAAI,CAAC,WAAW,aAAa,aAAa,EAAE;SACrF,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,MAAM,CACV,WAAyB,EACzB,YAAuC;QAEvC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,oBAAoB,CAAC,CAAC,YAAY,CAAC;QAC/E,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,IAAI,eAAe,CACvB,KAAK,KAAK,eAAe,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,gBAAgB,EAC9D,MAAM,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,KAAK,CACzC,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;QAC9C,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAChC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,OAAO,CAAC,KAAK,EAAE,CAAC;YAC/D,MAAM,IAAI,eAAe,CAAC,eAAe,EAAE,kCAAkC,CAAC,CAAC;QACjF,CAAC;QAED,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QACpC,MAAM,OAAO,GAA2B;YACtC,cAAc,EAAE,mCAAmC;SACpD,CAAC;QACF,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;YAC/B,UAAU,EAAE,oBAAoB;YAChC,IAAI;YACJ,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW;YACnC,aAAa,EAAE,OAAO,CAAC,QAAQ;SAChC,CAAC,CAAC;QACH,IAAI,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YAC3B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CACvB,GAAG,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAC1F,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACrB,OAAO,CAAC,aAAa,GAAG,SAAS,KAAK,EAAE,CAAC;QAC3C,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC5C,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QACpF,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAO/C,CAAC;QACF,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACpD,MAAM,IAAI,eAAe,CACvB,aAAa,EACb,IAAI,CAAC,iBAAiB,IAAI,IAAI,CAAC,KAAK,IAAI,wBAAwB,GAAG,CAAC,MAAM,EAAE,CAC7E,CAAC;QACJ,CAAC;QAED,IAAI,MAAkC,CAAC;QACvC,IAAI,CAAC;YACH,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,IAAI,CAAC,OAAO,EAAE,EAAE;gBAC1E,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ;aAC7B,CAAC,CAAC,CAAC;QACN,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,eAAe,CAAC,kBAAkB,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;QACxE,CAAC;QACD,IAAI,MAAM,CAAC,KAAK,KAAK,OAAO,CAAC,KAAK;YAAE,MAAM,IAAI,eAAe,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC;QAE3F,OAAO;YACL,MAAM,EAAE;gBACN,WAAW,EAAE,IAAI,CAAC,YAAY;gBAC9B,YAAY,EAAE,IAAI,CAAC,aAAa;gBAChC,OAAO,EAAE,IAAI,CAAC,QAAQ;gBACtB,SAAS,EAAE,IAAI,CAAC,UAAU,IAAI,CAAC;aAChC;YACD,MAAM;YACN,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,WAAW,EAAE,IAAI,CAAC,WAAW;SAC9B,CAAC;IACJ,CAAC;IAED,6EAA6E;IAC7E,KAAK,CAAC,SAAS,CAAC,OAAiE,EAAE;QACjF,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QACpC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,oBAAoB,IAAI,GAAG,IAAI,CAAC,MAAM,cAAc,CAAC,CAAC;QAC5E,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACtD,IAAI,IAAI,CAAC,WAAW;YAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QAC9E,IAAI,IAAI,CAAC,qBAAqB;YAC5B,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,0BAA0B,EAAE,IAAI,CAAC,qBAAqB,CAAC,CAAC;QAC/E,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;IACxB,CAAC;IAEO,UAAU,CAAC,MAAiC;QAClD,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC;aACvB,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;aACpB,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC;YACjD,EAAE,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACtC,IAAI,CAAC,GAAG;YAAE,OAAO,SAAS,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAiB,CAAC;YACrF,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ;gBAAE,OAAO,SAAS,CAAC;YAC1D,iEAAiE;YACjE,OAAO,EAAE,GAAG,CAAC,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAEO,YAAY;QAClB,IAAI,CAAC,SAAS,KAAK,CAAC,KAAK,IAAI,EAAE;YAC7B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,mCAAmC,CAAC,CAAC;YAClF,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,MAAM,IAAI,eAAe,CAAC,gBAAgB,EAAE,mBAAmB,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;YAC1F,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAc,CAAC;QACzC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACjB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;YAC3B,MAAM,GAAG,CAAC;QACZ,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAEO,KAAK,CAAC,OAAO;QACnB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;YACpC,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE;gBAClD,gBAAgB,EAAE,MAAM;gBACxB,WAAW,EAAE,EAAE,GAAG,MAAM;gBACxB,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,WAAW,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC/D,CAAC,CAAC;QACL,CAAC;QACD,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;CACF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@babelpeak/babel-suite-server-sdk",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "description": "SDK Node per integrare un servizio con Babel Suite: auth JWT, permessi, config LLM",
   "license": "UNLICENSED",
   "repository": {