@capxul/cli 4.20.0-beta.3 → 4.20.0-beta.30

package/dist/permission-approvals-C3cUSQeT.mjs

@@ -0,0 +1,139 @@
+import { W as abandonPrepared, a as verifiedConfiguration, cr as CapxulError, d as verifiedPreparation, et as asCapxulError, f as buildCommand, gn as CAPXUL_OPERATIONS, i as prepareConfiguration, l as preparePermission, m as validateReplacementInput, or as Errors, r as authorInvitation, sr as absurd, u as preparedIdentity } from "./organizations-Dkb73lVO.mjs";
+//#region ../../packages/sdk/src/accounts/permission-approvals.ts
+/** Prepare a Permission write or an invitation's configuration for `signerAddress`, checked. */
+function prepareVerifiedPermissionChange(deps, input, signerAddress, signal) {
+	return "permission" in input ? prepareVerifiedPermissionWrite(deps, input, signerAddress, signal) : prepareVerifiedInvitation(deps, input, signerAddress, signal);
+}
+/**
+* Hand the verified identity to the caller before the approval opens. A
+* caller that refuses it has not authorized the command: close the prepared
+* command, so its nonce lane is free again.
+*/
+async function delivered(deps, executionId, deliver) {
+	let refused;
+	try {
+		const result = await deliver();
+		if (result !== void 0 && !result.ok) refused = result;
+	} catch (cause) {
+		refused = {
+			ok: false,
+			error: asCapxulError(cause)
+		};
+	}
+	return refused === void 0 ? {
+		ok: true,
+		value: { executionId }
+	} : abandonPrepared(deps, executionId, "prepared_mismatch", refused);
+}
+/** The command a write sends, decoded exactly as its `org(id).permissions` method decodes it. */
+function command(write) {
+	try {
+		switch (write.operation) {
+			case "create": return {
+				ok: true,
+				value: buildCommand.create(write)
+			};
+			case "change": return {
+				ok: true,
+				value: buildCommand.change(write)
+			};
+			case "assign": return {
+				ok: true,
+				value: buildCommand.assign(write)
+			};
+			case "revoke": return {
+				ok: true,
+				value: buildCommand.revoke(write)
+			};
+			case "replace": return {
+				ok: true,
+				value: {
+					operation: "replace",
+					requestKey: write.requestKey
+				}
+			};
+			default: return absurd(write);
+		}
+	} catch (cause) {
+		return {
+			ok: false,
+			error: asCapxulError(cause)
+		};
+	}
+}
+async function prepareVerifiedPermissionWrite(deps, input, signerAddress, signal) {
+	const session = deps.actor?.authSession() ?? null;
+	if (session === null || deps.chainId === void 0) return {
+		ok: false,
+		error: Errors.notAuthenticated()
+	};
+	const built = command(input.permission);
+	if (!built.ok) return built;
+	const orgId = input.organizationId;
+	const expectedSnapshotHash = input.permission.operation === "replace" ? input.permission.expectedSnapshotHash : void 0;
+	const admitted = validateReplacementInput(orgId, built.value, expectedSnapshotHash);
+	if (!admitted.ok) return admitted;
+	const preparation = {
+		orgId,
+		command: built.value,
+		signerAddress,
+		email: session.email,
+		chainId: deps.chainId,
+		expectedSnapshotHash
+	};
+	const prepared = await preparePermission(deps, preparation, signal, void 0);
+	if (!prepared.ok) return prepared;
+	const executionId = prepared.value.executionId;
+	const verified = verifiedPreparation(prepared.value, preparation);
+	if (!verified.ok) return abandonPrepared(deps, executionId, "prepared_mismatch", verified);
+	const { onPrepared } = input;
+	return onPrepared === void 0 ? {
+		ok: true,
+		value: { executionId }
+	} : delivered(deps, executionId, () => onPrepared(preparedIdentity(verified.value)));
+}
+async function prepareVerifiedInvitation(deps, input, signerAddress, signal) {
+	const session = deps.actor?.authSession() ?? null;
+	if (session === null || deps.chainId === void 0) return {
+		ok: false,
+		error: Errors.notAuthenticated()
+	};
+	const orgId = input.organizationId;
+	const authored = await authorInvitation(deps, orgId, input.invite, signal, void 0);
+	if (!authored.ok) return authored;
+	const view = authored.value;
+	if (view.phase !== "authorizing" || view.commandId === null) return {
+		ok: false,
+		error: new CapxulError("WRONG_STATE", "The invitation's rights are already set up, or it ended: nothing is left to sign.", { details: {
+			method: CAPXUL_OPERATIONS.approvals.prepare,
+			currentState: view.phase,
+			validStates: ["authorizing"],
+			invitationId: view.id
+		} })
+	};
+	const preparation = {
+		orgId,
+		view,
+		commandId: view.commandId,
+		signerAddress,
+		email: session.email,
+		chainId: deps.chainId
+	};
+	const built = await prepareConfiguration(deps, preparation, signal, void 0);
+	if (!built.ok) return built;
+	const { executionId, invitationId, commandId } = built.value;
+	const verified = verifiedConfiguration(built.value, preparation);
+	if (!verified.ok) return abandonPrepared(deps, executionId, "prepared_mismatch", verified);
+	const { onPrepared } = input;
+	return onPrepared === void 0 ? {
+		ok: true,
+		value: { executionId }
+	} : delivered(deps, executionId, () => onPrepared({
+		invitationId,
+		commandId
+	}));
+}
+//#endregion
+export { prepareVerifiedPermissionChange };
+
+//# sourceMappingURL=permission-approvals-C3cUSQeT.mjs.map

package/dist/permission-approvals-C3cUSQeT.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-approvals-C3cUSQeT.mjs","names":[],"sources":["../../../packages/sdk/src/accounts/permission-approvals.ts"],"sourcesContent":["// Approvals that change an Organization's Permissions and move no money: a\n// Permission command (create, change, assign, revoke or replace, Budgets\n// included) and the configuration an invitation's offered rights need. Each is\n// prepared for the signer the backend recorded when the Safe was claimed and\n// checked exactly as the signed path checks it, before any approval is opened.\n// The person's own key signs later, on the approval page.\n\nimport { Errors } from \"@capxul/protocol/errors/factories\";\nimport { CapxulError } from \"@capxul/protocol/errors/model\";\nimport { absurd } from \"@capxul/protocol/primitives/absurd\";\nimport { CAPXUL_OPERATIONS } from \"@capxul/observability\";\nimport type { InviteInput } from \"@capxul/protocol/organizations/invitation-schema\";\nimport type { PermissionCommand } from \"@capxul/protocol/permissions/command-schema\";\n\nimport {\n  authorInvitation,\n  prepareConfiguration,\n  verifiedConfiguration,\n  type InvitePrepared,\n} from \"#organizations\";\nimport { abandonPrepared } from \"#payments\";\nimport {\n  buildCommand,\n  preparePermission,\n  preparedIdentity,\n  validateReplacementInput,\n  verifiedPreparation,\n  type PermissionAssignInput,\n  type PermissionChangeInput,\n  type PermissionCreateInput,\n  type PermissionPrepared,\n  type PermissionReplaceInput,\n  type PermissionRevokeInput,\n} from \"#permissions\";\nimport type { FinancialOpsDeps } from \"#platform/client/financial-ops\";\nimport { asCapxulError, type CapxulResult } from \"#platform/results\";\n\n/** One Permission write, as the matching `org(id).permissions` method takes it. */\nexport type PermissionWrite =\n  | ({ readonly operation: \"create\" } & PermissionCreateInput)\n  | ({ readonly operation: \"change\" } & PermissionChangeInput)\n  | ({ readonly operation: \"assign\" } & PermissionAssignInput)\n  | ({ readonly operation: \"revoke\" } & PermissionRevokeInput)\n  | ({ readonly operation: \"replace\" } & PermissionReplaceInput);\n\n/** Create, change, assign, revoke or replace an Organization's Permissions. */\nexport interface PermissionApprovalInput {\n  readonly organizationId: string;\n  readonly permission: PermissionWrite;\n  /**\n   * Receives the verified prepared command before its approval opens. A throw\n   * or a failed result opens no approval, and the prepared command is closed.\n   */\n  readonly onPrepared?: (\n    value: PermissionPrepared,\n  ) => void | CapxulResult<void> | Promise<void | CapxulResult<void>>;\n}\n\n/** Set up the rights an invitation offers, so its invitee can accept them. */\nexport interface InvitationApprovalInput {\n  readonly organizationId: string;\n  readonly invite: InviteInput;\n  /** Receives `{invitationId, commandId}` before the approval opens; a throw opens none. */\n  readonly onPrepared?: (value: InvitePrepared) => void | Promise<void>;\n}\n\nexport type PermissionChangeApprovalInput = PermissionApprovalInput | InvitationApprovalInput;\n\ntype Deps = Pick<FinancialOpsDeps, \"actor\" | \"chainId\" | \"convexCall\" | \"runPromise\">;\ntype Prepared = CapxulResult<{ readonly executionId: string }>;\n\n/** Prepare a Permission write or an invitation's configuration for `signerAddress`, checked. */\nexport function prepareVerifiedPermissionChange(\n  deps: Deps,\n  input: PermissionChangeApprovalInput,\n  signerAddress: string,\n  signal: AbortSignal | undefined,\n): Promise<Prepared> {\n  return \"permission\" in input\n    ? prepareVerifiedPermissionWrite(deps, input, signerAddress, signal)\n    : prepareVerifiedInvitation(deps, input, signerAddress, signal);\n}\n\n/**\n * Hand the verified identity to the caller before the approval opens. A\n * caller that refuses it has not authorized the command: close the prepared\n * command, so its nonce lane is free again.\n */\nasync function delivered(\n  deps: Deps,\n  executionId: string,\n  deliver: () => void | CapxulResult<void> | Promise<void | CapxulResult<void>>,\n): Promise<Prepared> {\n  let refused: CapxulResult<never> | undefined;\n  try {\n    const result = await deliver();\n    if (result !== undefined && !result.ok) refused = result;\n  } catch (cause) {\n    refused = { ok: false, error: asCapxulError(cause) };\n  }\n  return refused === undefined\n    ? { ok: true, value: { executionId } }\n    : abandonPrepared(deps, executionId, \"prepared_mismatch\", refused);\n}\n\n/** The command a write sends, decoded exactly as its `org(id).permissions` method decodes it. */\nfunction command(write: PermissionWrite): CapxulResult<PermissionCommand> {\n  try {\n    switch (write.operation) {\n      case \"create\":\n        return { ok: true, value: buildCommand.create(write) };\n      case \"change\":\n        return { ok: true, value: buildCommand.change(write) };\n      case \"assign\":\n        return { ok: true, value: buildCommand.assign(write) };\n      case \"revoke\":\n        return { ok: true, value: buildCommand.revoke(write) };\n      case \"replace\":\n        return { ok: true, value: { operation: \"replace\", requestKey: write.requestKey } };\n      default:\n        return absurd(write);\n    }\n  } catch (cause) {\n    return { ok: false, error: asCapxulError(cause) };\n  }\n}\n\nasync function prepareVerifiedPermissionWrite(\n  deps: Deps,\n  input: PermissionApprovalInput,\n  signerAddress: string,\n  signal: AbortSignal | undefined,\n): Promise<Prepared> {\n  const session = deps.actor?.authSession() ?? null;\n  if (session === null || deps.chainId === undefined)\n    return { ok: false, error: Errors.notAuthenticated() };\n  const built = command(input.permission);\n  if (!built.ok) return built;\n  const orgId = input.organizationId;\n  const expectedSnapshotHash =\n    input.permission.operation === \"replace\" ? input.permission.expectedSnapshotHash : undefined;\n  const admitted = validateReplacementInput(orgId, built.value, expectedSnapshotHash);\n  if (!admitted.ok) return admitted;\n  const preparation = {\n    orgId,\n    command: built.value,\n    signerAddress,\n    email: session.email,\n    chainId: deps.chainId,\n    expectedSnapshotHash,\n  };\n  const prepared = await preparePermission(deps, preparation, signal, undefined);\n  if (!prepared.ok) return prepared;\n  const executionId = prepared.value.executionId;\n  // A command built for another authority is closed unsent, as no approval names it.\n  const verified = verifiedPreparation(prepared.value, preparation);\n  if (!verified.ok) return abandonPrepared(deps, executionId, \"prepared_mismatch\", verified);\n  const { onPrepared } = input;\n  return onPrepared === undefined\n    ? { ok: true, value: { executionId } }\n    : delivered(deps, executionId, () => onPrepared(preparedIdentity(verified.value)));\n}\n\nasync function prepareVerifiedInvitation(\n  deps: Deps,\n  input: InvitationApprovalInput,\n  signerAddress: string,\n  signal: AbortSignal | undefined,\n): Promise<Prepared> {\n  const session = deps.actor?.authSession() ?? null;\n  if (session === null || deps.chainId === undefined)\n    return { ok: false, error: Errors.notAuthenticated() };\n  const orgId = input.organizationId;\n  const authored = await authorInvitation(deps, orgId, input.invite, signal, undefined);\n  if (!authored.ok) return authored;\n  const view = authored.value;\n  // The same request key returned an invitation whose rights are already set\n  // up, or that ended: there is nothing left to sign.\n  if (view.phase !== \"authorizing\" || view.commandId === null)\n    return {\n      ok: false,\n      error: new CapxulError(\n        \"WRONG_STATE\",\n        \"The invitation's rights are already set up, or it ended: nothing is left to sign.\",\n        {\n          details: {\n            method: CAPXUL_OPERATIONS.approvals.prepare,\n            currentState: view.phase,\n            validStates: [\"authorizing\"],\n            invitationId: view.id,\n          },\n        },\n      ),\n    };\n  const preparation = {\n    orgId,\n    view,\n    commandId: view.commandId,\n    signerAddress,\n    email: session.email,\n    chainId: deps.chainId,\n  };\n  const built = await prepareConfiguration(deps, preparation, signal, undefined);\n  if (!built.ok) return built;\n  const { executionId, invitationId, commandId } = built.value;\n  // A configuration built for another authority is closed unsent, as no approval names it.\n  const verified = verifiedConfiguration(built.value, preparation);\n  if (!verified.ok) return abandonPrepared(deps, executionId, \"prepared_mismatch\", verified);\n  const { onPrepared } = input;\n  return onPrepared === undefined\n    ? { ok: true, value: { executionId } }\n    : delivered(deps, executionId, () => onPrepared({ invitationId, commandId }));\n}\n"],"mappings":";;;AAwEA,SAAgB,gCACd,MACA,OACA,eACA,QACmB;CACnB,OAAO,gBAAgB,QACnB,+BAA+B,MAAM,OAAO,eAAe,MAAM,IACjE,0BAA0B,MAAM,OAAO,eAAe,MAAM;AAClE;;;;;;AAOA,eAAe,UACb,MACA,aACA,SACmB;CACnB,IAAI;CACJ,IAAI;EACF,MAAM,SAAS,MAAM,QAAQ;EAC7B,IAAI,WAAW,KAAA,KAAa,CAAC,OAAO,IAAI,UAAU;CACpD,SAAS,OAAO;EACd,UAAU;GAAE,IAAI;GAAO,OAAO,cAAc,KAAK;EAAE;CACrD;CACA,OAAO,YAAY,KAAA,IACf;EAAE,IAAI;EAAM,OAAO,EAAE,YAAY;CAAE,IACnC,gBAAgB,MAAM,aAAa,qBAAqB,OAAO;AACrE;;AAGA,SAAS,QAAQ,OAAyD;CACxE,IAAI;EACF,QAAQ,MAAM,WAAd;GACE,KAAK,UACH,OAAO;IAAE,IAAI;IAAM,OAAO,aAAa,OAAO,KAAK;GAAE;GACvD,KAAK,UACH,OAAO;IAAE,IAAI;IAAM,OAAO,aAAa,OAAO,KAAK;GAAE;GACvD,KAAK,UACH,OAAO;IAAE,IAAI;IAAM,OAAO,aAAa,OAAO,KAAK;GAAE;GACvD,KAAK,UACH,OAAO;IAAE,IAAI;IAAM,OAAO,aAAa,OAAO,KAAK;GAAE;GACvD,KAAK,WACH,OAAO;IAAE,IAAI;IAAM,OAAO;KAAE,WAAW;KAAW,YAAY,MAAM;IAAW;GAAE;GACnF,SACE,OAAO,OAAO,KAAK;EACvB;CACF,SAAS,OAAO;EACd,OAAO;GAAE,IAAI;GAAO,OAAO,cAAc,KAAK;EAAE;CAClD;AACF;AAEA,eAAe,+BACb,MACA,OACA,eACA,QACmB;CACnB,MAAM,UAAU,KAAK,OAAO,YAAY,KAAK;CAC7C,IAAI,YAAY,QAAQ,KAAK,YAAY,KAAA,GACvC,OAAO;EAAE,IAAI;EAAO,OAAO,OAAO,iBAAiB;CAAE;CACvD,MAAM,QAAQ,QAAQ,MAAM,UAAU;CACtC,IAAI,CAAC,MAAM,IAAI,OAAO;CACtB,MAAM,QAAQ,MAAM;CACpB,MAAM,uBACJ,MAAM,WAAW,cAAc,YAAY,MAAM,WAAW,uBAAuB,KAAA;CACrF,MAAM,WAAW,yBAAyB,OAAO,MAAM,OAAO,oBAAoB;CAClF,IAAI,CAAC,SAAS,IAAI,OAAO;CACzB,MAAM,cAAc;EAClB;EACA,SAAS,MAAM;EACf;EACA,OAAO,QAAQ;EACf,SAAS,KAAK;EACd;CACF;CACA,MAAM,WAAW,MAAM,kBAAkB,MAAM,aAAa,QAAQ,KAAA,CAAS;CAC7E,IAAI,CAAC,SAAS,IAAI,OAAO;CACzB,MAAM,cAAc,SAAS,MAAM;CAEnC,MAAM,WAAW,oBAAoB,SAAS,OAAO,WAAW;CAChE,IAAI,CAAC,SAAS,IAAI,OAAO,gBAAgB,MAAM,aAAa,qBAAqB,QAAQ;CACzF,MAAM,EAAE,eAAe;CACvB,OAAO,eAAe,KAAA,IAClB;EAAE,IAAI;EAAM,OAAO,EAAE,YAAY;CAAE,IACnC,UAAU,MAAM,mBAAmB,WAAW,iBAAiB,SAAS,KAAK,CAAC,CAAC;AACrF;AAEA,eAAe,0BACb,MACA,OACA,eACA,QACmB;CACnB,MAAM,UAAU,KAAK,OAAO,YAAY,KAAK;CAC7C,IAAI,YAAY,QAAQ,KAAK,YAAY,KAAA,GACvC,OAAO;EAAE,IAAI;EAAO,OAAO,OAAO,iBAAiB;CAAE;CACvD,MAAM,QAAQ,MAAM;CACpB,MAAM,WAAW,MAAM,iBAAiB,MAAM,OAAO,MAAM,QAAQ,QAAQ,KAAA,CAAS;CACpF,IAAI,CAAC,SAAS,IAAI,OAAO;CACzB,MAAM,OAAO,SAAS;CAGtB,IAAI,KAAK,UAAU,iBAAiB,KAAK,cAAc,MACrD,OAAO;EACL,IAAI;EACJ,OAAO,IAAI,YACT,eACA,qFACA,EACE,SAAS;GACP,QAAQ,kBAAkB,UAAU;GACpC,cAAc,KAAK;GACnB,aAAa,CAAC,aAAa;GAC3B,cAAc,KAAK;EACrB,EACF,CACF;CACF;CACF,MAAM,cAAc;EAClB;EACA;EACA,WAAW,KAAK;EAChB;EACA,OAAO,QAAQ;EACf,SAAS,KAAK;CAChB;CACA,MAAM,QAAQ,MAAM,qBAAqB,MAAM,aAAa,QAAQ,KAAA,CAAS;CAC7E,IAAI,CAAC,MAAM,IAAI,OAAO;CACtB,MAAM,EAAE,aAAa,cAAc,cAAc,MAAM;CAEvD,MAAM,WAAW,sBAAsB,MAAM,OAAO,WAAW;CAC/D,IAAI,CAAC,SAAS,IAAI,OAAO,gBAAgB,MAAM,aAAa,qBAAqB,QAAQ;CACzF,MAAM,EAAE,eAAe;CACvB,OAAO,eAAe,KAAA,IAClB;EAAE,IAAI;EAAM,OAAO,EAAE,YAAY;CAAE,IACnC,UAAU,MAAM,mBAAmB,WAAW;EAAE;EAAc;CAAU,CAAC,CAAC;AAChF"}