@ddd-ts-kit/kernel 0.6.0 → 0.8.0

package/dist/application/session/session-scopes.d.ts

@@ -0,0 +1,11 @@
+/**
+ * The vocabulary of the scopes a project grants its clients, by declaration merging, so that a
+ * guard names only scopes that exist:
+ *
+ *     declare module '@ddd-ts-kit/kernel' {
+ *       interface SessionScopes { readonly 'invoices:read': true; readonly 'invoices:write': true }
+ *     }
+ */
+export interface SessionScopes {
+}
+//# sourceMappingURL=session-scopes.d.ts.map

package/dist/application/session/session-scopes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-scopes.d.ts","sourceRoot":"","sources":["../../../src/application/session/session-scopes.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,MAAM,WAAW,aAAa;CAAG"}

package/dist/application/session/session-scopes.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=session-scopes.js.map

package/dist/application/session/session-scopes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-scopes.js","sourceRoot":"","sources":["../../../src/application/session/session-scopes.ts"],"names":[],"mappings":""}

package/dist/application/session/session.d.ts

@@ -22,6 +22,12 @@ export interface Session {
     /** IANA time zone, for example `Europe/Paris`. */
     readonly timeZone?: string;
     readonly client?: SessionClient;
+    /**
+     * What the credential allows whoever presents it (the OAuth 2.0 `scope` of the token): a
+     * limit on the client, checked at the edge (`HasScope`), never what the actor may do, which
+     * stays a permission of the use case. Absent when the credential carries none.
+     */
+    readonly scopes?: readonly string[];
     readonly extensions: SessionExtensionValues;
 }
 //# sourceMappingURL=session.d.ts.map

package/dist/application/session/session.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../../src/application/session/session.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AACvE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AAC3E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AAE5E;;;;GAIG;AACH,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC;IACxB,QAAQ,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC;IAC1B,QAAQ,CAAC,oBAAoB,EAAE,oBAAoB,CAAC;IACpD,QAAQ,CAAC,sBAAsB,CAAC,EAAE,sBAAsB,CAAC;IACzD,kFAAkF;IAClF,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,gDAAgD;IAChD,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,kDAAkD;IAClD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC;IAChC,QAAQ,CAAC,UAAU,EAAE,sBAAsB,CAAC;CAC7C"}
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../../src/application/session/session.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AACvE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AAC3E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AAE5E;;;;GAIG;AACH,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC;IACxB,QAAQ,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC;IAC1B,QAAQ,CAAC,oBAAoB,EAAE,oBAAoB,CAAC;IACpD,QAAQ,CAAC,sBAAsB,CAAC,EAAE,sBAAsB,CAAC;IACzD,kFAAkF;IAClF,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,gDAAgD;IAChD,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,kDAAkD;IAClD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC;IAChC;;;;OAIG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,UAAU,EAAE,sBAAsB,CAAC;CAC7C"}

package/dist/application/tenancy/across-tenants.d.ts

@@ -0,0 +1,12 @@
+import type { ElevationOptions } from './elevation-options.js';
+import type { TenantElevation } from './tenant-elevation.js';
+/** The action of the audit entry an elevation writes. */
+export declare const TENANT_ELEVATION_ACTION = "tenancy:elevate";
+/**
+ * Runs `work` with reads widened to the tenants of `elevation`, for platform staff. Never
+ * implicit: the platform calls it after the permission to elevate was decided, and the
+ * elevation is written to the audit trail before the work starts; a trail that fails refuses
+ * the elevation. Writes still name one tenant (`tenantScopeOf`).
+ */
+export declare function acrossTenants<T>(options: ElevationOptions, elevation: TenantElevation, work: () => Promise<T>): Promise<T>;
+//# sourceMappingURL=across-tenants.d.ts.map

package/dist/application/tenancy/across-tenants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"across-tenants.d.ts","sourceRoot":"","sources":["../../../src/application/tenancy/across-tenants.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAG/D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAE7D,yDAAyD;AACzD,eAAO,MAAM,uBAAuB,oBAAoB,CAAC;AAEzD;;;;;GAKG;AACH,wBAAsB,aAAa,CAAC,CAAC,EACnC,OAAO,EAAE,gBAAgB,EACzB,SAAS,EAAE,eAAe,EAC1B,IAAI,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GACrB,OAAO,CAAC,CAAC,CAAC,CAQZ"}

package/dist/application/tenancy/across-tenants.js

@@ -0,0 +1,47 @@
+import { InvalidTenantElevationError } from './invalid-tenant-elevation-error.js';
+import { isTenantId } from './is-tenant-id.js';
+/** The action of the audit entry an elevation writes. */
+export const TENANT_ELEVATION_ACTION = 'tenancy:elevate';
+/**
+ * Runs `work` with reads widened to the tenants of `elevation`, for platform staff. Never
+ * implicit: the platform calls it after the permission to elevate was decided, and the
+ * elevation is written to the audit trail before the work starts; a trail that fails refuses
+ * the elevation. Writes still name one tenant (`tenantScopeOf`).
+ */
+export async function acrossTenants(options, elevation, work) {
+    assertValid(elevation);
+    const context = options.scope.require();
+    await options.trail.record(elevationRecord(options, context, elevation));
+    return options.scope.run(Object.freeze({ ...context, elevation }), work);
+}
+function assertValid({ reason, tenants }) {
+    if (reason.trim() === '') {
+        throw new InvalidTenantElevationError('it names no reason');
+    }
+    if (tenants !== 'all' && tenants.length === 0) {
+        throw new InvalidTenantElevationError('it names no tenant');
+    }
+    if (tenants !== 'all' && !tenants.every(isTenantId)) {
+        throw new InvalidTenantElevationError('it names a tenant id outside the grammar of isTenantId');
+    }
+}
+function elevationRecord(options, context, elevation) {
+    const { tenantId, session } = context;
+    return {
+        id: options.ids.next(),
+        occurredAt: options.clock.now(),
+        category: 'authorization',
+        action: TENANT_ELEVATION_ACTION,
+        outcome: 'allowed',
+        reason: elevation.reason,
+        actor: { id: context.actor.id, type: context.actor.type },
+        resource: { type: 'tenants', id: elevation.tenants === 'all' ? '*' : elevation.tenants.join(',') },
+        correlationId: context.correlationId,
+        origin: context.origin,
+        ...(tenantId === undefined ? {} : { tenantId }),
+        ...(session === undefined ? {} : { sessionId: session.id }),
+        ...(session?.impersonatedBy === undefined ? {} : { impersonatedBy: session.impersonatedBy }),
+        ...(context.causationId === undefined ? {} : { causationId: context.causationId }),
+    };
+}
+//# sourceMappingURL=across-tenants.js.map

package/dist/application/tenancy/across-tenants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"across-tenants.js","sourceRoot":"","sources":["../../../src/application/tenancy/across-tenants.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,2BAA2B,EAAE,MAAM,qCAAqC,CAAC;AAClF,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAG/C,yDAAyD;AACzD,MAAM,CAAC,MAAM,uBAAuB,GAAG,iBAAiB,CAAC;AAEzD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,OAAyB,EACzB,SAA0B,EAC1B,IAAsB;IAEtB,WAAW,CAAC,SAAS,CAAC,CAAC;IAEvB,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;IAExC,MAAM,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,eAAe,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;IAEzE,OAAO,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;AAC3E,CAAC;AAED,SAAS,WAAW,CAAC,EAAE,MAAM,EAAE,OAAO,EAAmB;IACvD,IAAI,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACzB,MAAM,IAAI,2BAA2B,CAAC,oBAAoB,CAAC,CAAC;IAC9D,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,2BAA2B,CAAC,oBAAoB,CAAC,CAAC;IAC9D,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,2BAA2B,CAAC,wDAAwD,CAAC,CAAC;IAClG,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CACtB,OAAyB,EACzB,OAAyB,EACzB,SAA0B;IAE1B,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;IAEtC,OAAO;QACL,EAAE,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE;QACtB,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE;QAC/B,QAAQ,EAAE,eAAe;QACzB,MAAM,EAAE,uBAAuB;QAC/B,OAAO,EAAE,SAAS;QAClB,MAAM,EAAE,SAAS,CAAC,MAAM;QACxB,KAAK,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE;QACzD,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;QAClG,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC;QAC/C,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC;QAC3D,GAAG,CAAC,OAAO,EAAE,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC;QAC5F,GAAG,CAAC,OAAO,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC;KACnF,CAAC;AACJ,CAAC"}

package/dist/application/tenancy/assert-tenant-id.d.ts

@@ -0,0 +1,3 @@
+/** The tenant id as it came in, refused (`InvalidTenantIdError`) when it is outside the grammar of `isTenantId`. */
+export declare function assertTenantId(tenantId: string): string;
+//# sourceMappingURL=assert-tenant-id.d.ts.map

package/dist/application/tenancy/assert-tenant-id.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"assert-tenant-id.d.ts","sourceRoot":"","sources":["../../../src/application/tenancy/assert-tenant-id.ts"],"names":[],"mappings":"AAGA,oHAAoH;AACpH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAMvD"}

package/dist/application/tenancy/assert-tenant-id.js

@@ -0,0 +1,10 @@
+import { InvalidTenantIdError } from './invalid-tenant-id-error.js';
+import { isTenantId } from './is-tenant-id.js';
+/** The tenant id as it came in, refused (`InvalidTenantIdError`) when it is outside the grammar of `isTenantId`. */
+export function assertTenantId(tenantId) {
+    if (!isTenantId(tenantId)) {
+        throw new InvalidTenantIdError(tenantId);
+    }
+    return tenantId;
+}
+//# sourceMappingURL=assert-tenant-id.js.map

package/dist/application/tenancy/assert-tenant-id.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assert-tenant-id.js","sourceRoot":"","sources":["../../../src/application/tenancy/assert-tenant-id.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAE/C,oHAAoH;AACpH,MAAM,UAAU,cAAc,CAAC,QAAgB;IAC7C,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IAC3C,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/application/tenancy/elevation-options.d.ts

@@ -0,0 +1,12 @@
+import type { AuditTrail } from '../ports/audit-trail.js';
+import type { Clock } from '../ports/clock.js';
+import type { ExecutionScope } from '../ports/execution-scope.js';
+import type { IdGenerator } from '../ports/id-generator.js';
+/** What `acrossTenants` needs: the scope it widens, and the trail it records the elevation in. */
+export interface ElevationOptions {
+    readonly scope: ExecutionScope;
+    readonly trail: AuditTrail;
+    readonly clock: Clock;
+    readonly ids: IdGenerator;
+}
+//# sourceMappingURL=elevation-options.d.ts.map

package/dist/application/tenancy/elevation-options.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"elevation-options.d.ts","sourceRoot":"","sources":["../../../src/application/tenancy/elevation-options.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAE5D,kGAAkG;AAClG,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAC;IAC/B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,WAAW,CAAC;CAC3B"}

package/dist/application/tenancy/elevation-options.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=elevation-options.js.map

package/dist/application/tenancy/elevation-options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"elevation-options.js","sourceRoot":"","sources":["../../../src/application/tenancy/elevation-options.ts"],"names":[],"mappings":""}

package/dist/application/tenancy/invalid-tenant-elevation-error.d.ts

@@ -0,0 +1,5 @@
+/** An elevation that names no reason or no tenant: refused before anything is recorded or run. */
+export declare class InvalidTenantElevationError extends Error {
+    constructor(detail: string);
+}
+//# sourceMappingURL=invalid-tenant-elevation-error.d.ts.map

package/dist/application/tenancy/invalid-tenant-elevation-error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"invalid-tenant-elevation-error.d.ts","sourceRoot":"","sources":["../../../src/application/tenancy/invalid-tenant-elevation-error.ts"],"names":[],"mappings":"AAAA,kGAAkG;AAClG,qBAAa,2BAA4B,SAAQ,KAAK;IACpD,YAAY,MAAM,EAAE,MAAM,EAGzB;CACF"}

package/dist/application/tenancy/invalid-tenant-elevation-error.js

@@ -0,0 +1,8 @@
+/** An elevation that names no reason or no tenant: refused before anything is recorded or run. */
+export class InvalidTenantElevationError extends Error {
+    constructor(detail) {
+        super(`Invalid tenant elevation: ${detail}`);
+        this.name = 'InvalidTenantElevationError';
+    }
+}
+//# sourceMappingURL=invalid-tenant-elevation-error.js.map

package/dist/application/tenancy/invalid-tenant-elevation-error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invalid-tenant-elevation-error.js","sourceRoot":"","sources":["../../../src/application/tenancy/invalid-tenant-elevation-error.ts"],"names":[],"mappings":"AAAA,kGAAkG;AAClG,MAAM,OAAO,2BAA4B,SAAQ,KAAK;IACpD,YAAY,MAAc;QACxB,KAAK,CAAC,6BAA6B,MAAM,EAAE,CAAC,CAAC;QAC7C,IAAI,CAAC,IAAI,GAAG,6BAA6B,CAAC;IAC5C,CAAC;CACF"}

package/dist/application/tenancy/invalid-tenant-id-error.d.ts

@@ -0,0 +1,6 @@
+/** A tenant id outside the grammar of `isTenantId`: refused where it comes in, never altered. */
+export declare class InvalidTenantIdError extends Error {
+    readonly tenantId: string;
+    constructor(tenantId: string);
+}
+//# sourceMappingURL=invalid-tenant-id-error.d.ts.map

package/dist/application/tenancy/invalid-tenant-id-error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"invalid-tenant-id-error.d.ts","sourceRoot":"","sources":["../../../src/application/tenancy/invalid-tenant-id-error.ts"],"names":[],"mappings":"AAAA,iGAAiG;AACjG,qBAAa,oBAAqB,SAAQ,KAAK;IACjC,QAAQ,CAAC,QAAQ,EAAE,MAAM;IAArC,YAAqB,QAAQ,EAAE,MAAM,EAGpC;CACF"}

package/dist/application/tenancy/invalid-tenant-id-error.js

@@ -0,0 +1,10 @@
+/** A tenant id outside the grammar of `isTenantId`: refused where it comes in, never altered. */
+export class InvalidTenantIdError extends Error {
+    tenantId;
+    constructor(tenantId) {
+        super(`Invalid tenant id ${JSON.stringify(tenantId.slice(0, 80))}: only letters, digits, "_" and "-", at most 63`);
+        this.tenantId = tenantId;
+        this.name = 'InvalidTenantIdError';
+    }
+}
+//# sourceMappingURL=invalid-tenant-id-error.js.map

package/dist/application/tenancy/invalid-tenant-id-error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invalid-tenant-id-error.js","sourceRoot":"","sources":["../../../src/application/tenancy/invalid-tenant-id-error.ts"],"names":[],"mappings":"AAAA,iGAAiG;AACjG,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IACxB,QAAQ;IAA7B,YAAqB,QAAgB;QACnC,KAAK,CAAC,qBAAqB,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,iDAAiD,CAAC,CAAC;wBADhG,QAAQ;QAE3B,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF"}

package/dist/application/tenancy/is-tenant-id.d.ts

@@ -0,0 +1,3 @@
+/** Whether a value is a tenant id of that grammar. */
+export declare function isTenantId(value: unknown): value is string;
+//# sourceMappingURL=is-tenant-id.d.ts.map

package/dist/application/tenancy/is-tenant-id.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"is-tenant-id.d.ts","sourceRoot":"","sources":["../../../src/application/tenancy/is-tenant-id.ts"],"names":[],"mappings":"AAQA,sDAAsD;AACtD,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAE1D"}

package/dist/application/tenancy/is-tenant-id.js

@@ -0,0 +1,12 @@
+/**
+ * The one grammar of a tenant id, wherever a tenant comes in: letters, digits, `_` and `-`, at
+ * most 63 characters (what a slug or a UUID is made of). Nothing in it can be read as a list,
+ * a wildcard, a key separator or a part of an SQL identifier, so no tenant id can ever widen
+ * what another tenant reaches.
+ */
+const TENANT_ID = /^[A-Za-z0-9_-]{1,63}$/;
+/** Whether a value is a tenant id of that grammar. */
+export function isTenantId(value) {
+    return typeof value === 'string' && TENANT_ID.test(value);
+}
+//# sourceMappingURL=is-tenant-id.js.map

package/dist/application/tenancy/is-tenant-id.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"is-tenant-id.js","sourceRoot":"","sources":["../../../src/application/tenancy/is-tenant-id.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,SAAS,GAAG,uBAAuB,CAAC;AAE1C,sDAAsD;AACtD,MAAM,UAAU,UAAU,CAAC,KAAc;IACvC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC5D,CAAC"}

package/dist/application/tenancy/is-tenant-member.d.ts

@@ -0,0 +1,4 @@
+import type { Actor } from '../actor/actor.js';
+/** Whether the actor belongs to the tenant, as its credential says: `tenantId` or the `tenants` attribute. */
+export declare function isTenantMember(actor: Actor, tenantId: string): boolean;
+//# sourceMappingURL=is-tenant-member.d.ts.map

package/dist/application/tenancy/is-tenant-member.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"is-tenant-member.d.ts","sourceRoot":"","sources":["../../../src/application/tenancy/is-tenant-member.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAG/C,8GAA8G;AAC9G,wBAAgB,cAAc,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAEtE"}

package/dist/application/tenancy/is-tenant-member.js

@@ -0,0 +1,6 @@
+import { tenantsOf } from './tenants-of.js';
+/** Whether the actor belongs to the tenant, as its credential says: `tenantId` or the `tenants` attribute. */
+export function isTenantMember(actor, tenantId) {
+    return tenantsOf(actor).includes(tenantId);
+}
+//# sourceMappingURL=is-tenant-member.js.map

package/dist/application/tenancy/is-tenant-member.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"is-tenant-member.js","sourceRoot":"","sources":["../../../src/application/tenancy/is-tenant-member.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAE5C,8GAA8G;AAC9G,MAAM,UAAU,cAAc,CAAC,KAAY,EAAE,QAAgB;IAC3D,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAC7C,CAAC"}

package/dist/application/tenancy/tenant-elevation.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Platform staff reaching tenants that are not theirs: said, never implied. Opened by
+ * `acrossTenants`, which records it in the audit trail before any work runs.
+ */
+export interface TenantElevation {
+    /** A stable code naming why (`SUPPORT_TICKET`, `BILLING_RECONCILIATION`), never a sentence: it is audited. */
+    readonly reason: string;
+    /** The tenants the work may read: `all`, or the list. */
+    readonly tenants: 'all' | readonly string[];
+}
+//# sourceMappingURL=tenant-elevation.d.ts.map

package/dist/application/tenancy/tenant-elevation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-elevation.d.ts","sourceRoot":"","sources":["../../../src/application/tenancy/tenant-elevation.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,8GAA8G;IAC9G,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,yDAAyD;IACzD,QAAQ,CAAC,OAAO,EAAE,KAAK,GAAG,SAAS,MAAM,EAAE,CAAC;CAC7C"}

package/dist/application/tenancy/tenant-elevation.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=tenant-elevation.js.map

package/dist/application/tenancy/tenant-elevation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-elevation.js","sourceRoot":"","sources":["../../../src/application/tenancy/tenant-elevation.ts"],"names":[],"mappings":""}

package/dist/application/tenancy/tenant-key.d.ts

@@ -0,0 +1,9 @@
+import type { ExecutionScope } from '../ports/execution-scope.js';
+/**
+ * A key of a shared store (a rate limit, a lock, a counter) confined to the tenant of the work
+ * in progress: `tenant:<id>:<segments>`, each segment percent-encoded so that no segment holds a
+ * `:` (`['a:b']` and `['a', 'b']` are two keys). Two tenants never share an entry, and work that
+ * names no tenant is refused instead of reaching a global entry by omission.
+ */
+export declare function tenantKey(scope: ExecutionScope, ...segments: readonly string[]): string;
+//# sourceMappingURL=tenant-key.d.ts.map

package/dist/application/tenancy/tenant-key.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-key.d.ts","sourceRoot":"","sources":["../../../src/application/tenancy/tenant-key.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAGlE;;;;;GAKG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,cAAc,EAAE,GAAG,QAAQ,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAEvF"}

package/dist/application/tenancy/tenant-key.js

@@ -0,0 +1,11 @@
+import { tenantScopeOf } from '../audit/tenant-scope-of.js';
+/**
+ * A key of a shared store (a rate limit, a lock, a counter) confined to the tenant of the work
+ * in progress: `tenant:<id>:<segments>`, each segment percent-encoded so that no segment holds a
+ * `:` (`['a:b']` and `['a', 'b']` are two keys). Two tenants never share an entry, and work that
+ * names no tenant is refused instead of reaching a global entry by omission.
+ */
+export function tenantKey(scope, ...segments) {
+    return ['tenant', tenantScopeOf(scope).tenantId, ...segments.map(encodeURIComponent)].join(':');
+}
+//# sourceMappingURL=tenant-key.js.map

package/dist/application/tenancy/tenant-key.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-key.js","sourceRoot":"","sources":["../../../src/application/tenancy/tenant-key.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAE5D;;;;;GAKG;AACH,MAAM,UAAU,SAAS,CAAC,KAAqB,EAAE,GAAG,QAA2B;IAC7E,OAAO,CAAC,QAAQ,EAAE,aAAa,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClG,CAAC"}

package/dist/application/tenancy/tenant-reach-of.d.ts

@@ -0,0 +1,9 @@
+import type { ExecutionScope } from '../ports/execution-scope.js';
+import type { TenantReach } from './tenant-reach.js';
+/**
+ * For an adapter scoping a read: the tenants it may see. An elevation opened by `acrossTenants`
+ * widens it; otherwise it is the tenant of the work, and work that names none is refused, so
+ * that no read runs unscoped by omission. Writes keep `tenantScopeOf`: one tenant, always.
+ */
+export declare function tenantReachOf(scope: ExecutionScope): TenantReach;
+//# sourceMappingURL=tenant-reach-of.d.ts.map

package/dist/application/tenancy/tenant-reach-of.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-reach-of.d.ts","sourceRoot":"","sources":["../../../src/application/tenancy/tenant-reach-of.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAElE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAErD;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,cAAc,GAAG,WAAW,CAYhE"}

package/dist/application/tenancy/tenant-reach-of.js

@@ -0,0 +1,18 @@
+import { NoCurrentTenantError } from '../audit/no-current-tenant-error.js';
+import { assertTenantId } from './assert-tenant-id.js';
+/**
+ * For an adapter scoping a read: the tenants it may see. An elevation opened by `acrossTenants`
+ * widens it; otherwise it is the tenant of the work, and work that names none is refused, so
+ * that no read runs unscoped by omission. Writes keep `tenantScopeOf`: one tenant, always.
+ */
+export function tenantReachOf(scope) {
+    const { tenantId, elevation } = scope.require();
+    if (elevation !== undefined) {
+        return { kind: 'elevated', tenants: elevation.tenants === 'all' ? 'all' : elevation.tenants.map(assertTenantId) };
+    }
+    if (tenantId === undefined) {
+        throw new NoCurrentTenantError();
+    }
+    return { kind: 'tenant', tenantId: assertTenantId(tenantId) };
+}
+//# sourceMappingURL=tenant-reach-of.js.map

package/dist/application/tenancy/tenant-reach-of.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-reach-of.js","sourceRoot":"","sources":["../../../src/application/tenancy/tenant-reach-of.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAE3E,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAGvD;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,KAAqB;IACjD,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;IAEhD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;IACpH,CAAC;IAED,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,IAAI,oBAAoB,EAAE,CAAC;IACnC,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC;AAChE,CAAC"}

package/dist/application/tenancy/tenant-reach.d.ts

@@ -0,0 +1,12 @@
+/**
+ * What a read may see: the one tenant of the work in progress, or, under an elevation, the
+ * tenants it names (`all` for every one).
+ */
+export type TenantReach = {
+    readonly kind: 'tenant';
+    readonly tenantId: string;
+} | {
+    readonly kind: 'elevated';
+    readonly tenants: 'all' | readonly string[];
+};
+//# sourceMappingURL=tenant-reach.d.ts.map

package/dist/application/tenancy/tenant-reach.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-reach.d.ts","sourceRoot":"","sources":["../../../src/application/tenancy/tenant-reach.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,MAAM,WAAW,GACnB;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GACtD;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,KAAK,GAAG,SAAS,MAAM,EAAE,CAAA;CAAE,CAAC"}

package/dist/application/tenancy/tenant-reach.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=tenant-reach.js.map

package/dist/application/tenancy/tenant-reach.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-reach.js","sourceRoot":"","sources":["../../../src/application/tenancy/tenant-reach.ts"],"names":[],"mappings":""}

package/dist/application/tenancy/tenants-of.d.ts

@@ -0,0 +1,8 @@
+import type { Actor } from '../actor/actor.js';
+/**
+ * The tenants an actor belongs to: its `tenantId`, and the `tenants` attribute for an actor
+ * that belongs to several (a consultant of two clinics). The authenticator fills both from
+ * the credential; nothing else may.
+ */
+export declare function tenantsOf(actor: Actor): readonly string[];
+//# sourceMappingURL=tenants-of.d.ts.map

package/dist/application/tenancy/tenants-of.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenants-of.d.ts","sourceRoot":"","sources":["../../../src/application/tenancy/tenants-of.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAE/C;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,KAAK,GAAG,SAAS,MAAM,EAAE,CAKzD"}

package/dist/application/tenancy/tenants-of.js

@@ -0,0 +1,14 @@
+/**
+ * The tenants an actor belongs to: its `tenantId`, and the `tenants` attribute for an actor
+ * that belongs to several (a consultant of two clinics). The authenticator fills both from
+ * the credential; nothing else may.
+ */
+export function tenantsOf(actor) {
+    const listed = actor.attributes['tenants'];
+    const others = isTextList(listed) ? listed : [];
+    return [...new Set([...(actor.tenantId === undefined ? [] : [actor.tenantId]), ...others])];
+}
+function isTextList(value) {
+    return Array.isArray(value) && value.every((item) => typeof item === 'string');
+}
+//# sourceMappingURL=tenants-of.js.map

package/dist/application/tenancy/tenants-of.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenants-of.js","sourceRoot":"","sources":["../../../src/application/tenancy/tenants-of.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,MAAM,UAAU,SAAS,CAAC,KAAY;IACpC,MAAM,MAAM,GAAY,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAEhD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;AAC9F,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC;AACjF,CAAC"}

package/dist/declarations/decorators/domain-event-handler.d.ts

@@ -23,9 +23,10 @@ export type DomainEventHandler<E extends DomainEvent> = DomainEventHandlerShape<
 /**
  * A handler of a domain event of its own context, run at the end of the unit of work that
  * recorded the event, before the commit:
- * `@DomainEventHandler(OrderPaid, { name: 'ordering.order.paid' })`. One whose
+ * `@DomainEventHandler(OrderPaid, { name: OrderPaid.eventName })`, the name the event class
+ * declares once (`static readonly eventName = 'ordering.order.paid'`). One whose
  * effect is outside the transaction runs after it:
- * `@DomainEventHandler(OrderPaid, { name: 'ordering.order.paid', phase: 'after-commit' })`.
+ * `@DomainEventHandler(OrderPaid, { name: OrderPaid.eventName, phase: 'after-commit' })`.
  */
 export declare function DomainEventHandler<E extends DomainEvent, const Name extends string, const D extends DeclaredDependencies = DependenciesFromSignature>(event: DomainEventType<E>, options: DomainEventHandlerOptions<Name> & Named<Name, 'name'>, dependencies?: D): ClassDeclarator<DomainEventHandlerShape<E>, D>;
 //# sourceMappingURL=domain-event-handler.d.ts.map

package/dist/declarations/decorators/domain-event-handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"domain-event-handler.d.ts","sourceRoot":"","sources":["../../../src/declarations/decorators/domain-event-handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gDAAgD,CAAC;AACvF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAC;AAC3E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,0CAA0C,CAAC;AACrF,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,gDAAgD,CAAC;AAChG,OAAO,KAAK,EAAE,kBAAkB,IAAI,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AACtG,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAGrE,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAExC,MAAM,WAAW,yBAAyB,CAAC,IAAI,SAAS,MAAM,GAAG,MAAM;IACrE,+GAA+G;IAC/G,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IACpB;;;OAGG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,gBAAgB,CAAC;CACnC;AAED;;;GAGG;AACH,MAAM,MAAM,kBAAkB,CAAC,CAAC,SAAS,WAAW,IAAI,uBAAuB,CAAC,CAAC,CAAC,CAAC;AAEnF;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAChC,CAAC,SAAS,WAAW,EACrB,KAAK,CAAC,IAAI,SAAS,MAAM,EACzB,KAAK,CAAC,CAAC,SAAS,oBAAoB,GAAG,yBAAyB,EAEhE,KAAK,EAAE,eAAe,CAAC,CAAC,CAAC,EACzB,OAAO,EAAE,yBAAyB,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,EAC9D,YAAY,CAAC,EAAE,CAAC,GACf,eAAe,CAAC,uBAAuB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAehD"}
+{"version":3,"file":"domain-event-handler.d.ts","sourceRoot":"","sources":["../../../src/declarations/decorators/domain-event-handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gDAAgD,CAAC;AACvF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAC;AAC3E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,0CAA0C,CAAC;AACrF,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,gDAAgD,CAAC;AAChG,OAAO,KAAK,EAAE,kBAAkB,IAAI,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AACtG,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAGrE,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAExC,MAAM,WAAW,yBAAyB,CAAC,IAAI,SAAS,MAAM,GAAG,MAAM;IACrE,+GAA+G;IAC/G,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IACpB;;;OAGG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,gBAAgB,CAAC;CACnC;AAED;;;GAGG;AACH,MAAM,MAAM,kBAAkB,CAAC,CAAC,SAAS,WAAW,IAAI,uBAAuB,CAAC,CAAC,CAAC,CAAC;AAEnF;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAChC,CAAC,SAAS,WAAW,EACrB,KAAK,CAAC,IAAI,SAAS,MAAM,EACzB,KAAK,CAAC,CAAC,SAAS,oBAAoB,GAAG,yBAAyB,EAEhE,KAAK,EAAE,eAAe,CAAC,CAAC,CAAC,EACzB,OAAO,EAAE,yBAAyB,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,EAC9D,YAAY,CAAC,EAAE,CAAC,GACf,eAAe,CAAC,uBAAuB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAehD"}

package/dist/declarations/decorators/domain-event-handler.js

@@ -3,9 +3,10 @@ import { assertNamed } from './assert-named.js';
 /**
  * A handler of a domain event of its own context, run at the end of the unit of work that
  * recorded the event, before the commit:
- * `@DomainEventHandler(OrderPaid, { name: 'ordering.order.paid' })`. One whose
+ * `@DomainEventHandler(OrderPaid, { name: OrderPaid.eventName })`, the name the event class
+ * declares once (`static readonly eventName = 'ordering.order.paid'`). One whose
  * effect is outside the transaction runs after it:
- * `@DomainEventHandler(OrderPaid, { name: 'ordering.order.paid', phase: 'after-commit' })`.
+ * `@DomainEventHandler(OrderPaid, { name: OrderPaid.eventName, phase: 'after-commit' })`.
  */
 export function DomainEventHandler(event, options, dependencies) {
     const { name, phase = 'before-commit' } = options;

package/dist/declarations/decorators/domain-event-handler.js.map

@@ -1 +1 @@
-{"version":3,"file":"domain-event-handler.js","sourceRoot":"","sources":["../../../src/declarations/decorators/domain-event-handler.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAmBhD;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAKhC,KAAyB,EACzB,OAA8D,EAC9D,YAAgB;IAEhB,MAAM,EAAE,IAAI,EAAE,KAAK,GAAG,eAAe,EAAE,GAAG,OAAO,CAAC;IAElD,WAAW,CAAC,IAAI,EAAE,gBAAgB,KAAK,CAAC,IAAI,kCAAkC,CAAC,CAAC;IAEhF,OAAO,CAAC,MAAM,EAAE,EAAE;QAChB,MAAM,CAAC,MAAM,EAAE;YACb,IAAI,EAAE,sBAAsB;YAC5B,IAAI;YACJ,KAAK;YACL,KAAK;YACL,YAAY;YACZ,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC;SAClC,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"domain-event-handler.js","sourceRoot":"","sources":["../../../src/declarations/decorators/domain-event-handler.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAmBhD;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAKhC,KAAyB,EACzB,OAA8D,EAC9D,YAAgB;IAEhB,MAAM,EAAE,IAAI,EAAE,KAAK,GAAG,eAAe,EAAE,GAAG,OAAO,CAAC;IAElD,WAAW,CAAC,IAAI,EAAE,gBAAgB,KAAK,CAAC,IAAI,kCAAkC,CAAC,CAAC;IAEhF,OAAO,CAAC,MAAM,EAAE,EAAE;QAChB,MAAM,CAAC,MAAM,EAAE;YACb,IAAI,EAAE,sBAAsB;YAC5B,IAAI;YACJ,KAAK;YACL,KAAK;YACL,YAAY;YACZ,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC;SAClC,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC"}

package/dist/declarations/decorators/on.d.ts

@@ -9,7 +9,7 @@ type DomainEventName<Name extends string = string> = Pick<DomainEventHandlerOpti
 /**
  * On a method of a `@Projection` class: this method applies that event.
  * `@On(PractitionerRenamed)` for an integration event of an upstream context,
- * `@On(AppointmentBooked, { name: 'scheduling.appointment.booked' })` for a domain event of
+ * `@On(AppointmentBooked, { name: AppointmentBooked.eventName })` for a domain event of
  * the projection's own context. The method receives the event and answers what its store
  * answered.
  */

package/dist/domain/value-object.d.ts

@@ -1,6 +1,7 @@
 /**
- * Immutable, compared by value, valid at construction. Subclass with a private
- * constructor and a `create` factory that validates and returns a Result or throws.
+ * Immutable, compared by value, valid at construction. Subclass with a private constructor and
+ * a `create` factory that validates, then returns the value object or throws the refusal of its
+ * concept (or returns a `Result`, in a project that says `"stack.valueObjects": "result"`).
  */
 export declare abstract class ValueObject<Props extends Record<string, unknown>> {
     protected readonly props: Readonly<Props>;

package/dist/domain/value-object.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"value-object.d.ts","sourceRoot":"","sources":["../../src/domain/value-object.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,8BAAsB,WAAW,CAAC,KAAK,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IACrE,SAAS,CAAC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;IAE1C,SAAS,aAAa,KAAK,EAAE,KAAK,EAEjC;IAED,MAAM,CAAC,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC,GAAG,SAAS,GAAG,IAAI,GAAG,OAAO,CAM5D;IAED,MAAM,IAAI,KAAK,CAEd;CACF"}
+{"version":3,"file":"value-object.d.ts","sourceRoot":"","sources":["../../src/domain/value-object.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,8BAAsB,WAAW,CAAC,KAAK,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IACrE,SAAS,CAAC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;IAE1C,SAAS,aAAa,KAAK,EAAE,KAAK,EAEjC;IAED,MAAM,CAAC,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC,GAAG,SAAS,GAAG,IAAI,GAAG,OAAO,CAM5D;IAED,MAAM,IAAI,KAAK,CAEd;CACF"}

package/dist/domain/value-object.js

@@ -1,6 +1,7 @@
 /**
- * Immutable, compared by value, valid at construction. Subclass with a private
- * constructor and a `create` factory that validates and returns a Result or throws.
+ * Immutable, compared by value, valid at construction. Subclass with a private constructor and
+ * a `create` factory that validates, then returns the value object or throws the refusal of its
+ * concept (or returns a `Result`, in a project that says `"stack.valueObjects": "result"`).
  */
 export class ValueObject {
     props;

package/dist/domain/value-object.js.map

@@ -1 +1 @@
-{"version":3,"file":"value-object.js","sourceRoot":"","sources":["../../src/domain/value-object.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,OAAgB,WAAW;IACZ,KAAK,CAAkB;IAE1C,YAAsB,KAAY;QAChC,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;IAC3C,CAAC;IAED,MAAM,CAAC,KAA4C;QACjD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,WAAW,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC;YACpF,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,iBAAiB,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IACpD,CAAC;IAED,MAAM;QACJ,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;CACF;AAED,SAAS,iBAAiB,CAAC,CAAU,EAAE,CAAU;IAC/C,IAAI,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QACpB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC;QAC3C,OAAO,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;IACrC,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACzC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACtF,CAAC;IAED,IAAI,QAAQ,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAE5B,OAAO,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACrH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC;AACrD,CAAC"}
+{"version":3,"file":"value-object.js","sourceRoot":"","sources":["../../src/domain/value-object.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,OAAgB,WAAW;IACZ,KAAK,CAAkB;IAE1C,YAAsB,KAAY;QAChC,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;IAC3C,CAAC;IAED,MAAM,CAAC,KAA4C;QACjD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,WAAW,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC;YACpF,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,iBAAiB,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IACpD,CAAC;IAED,MAAM;QACJ,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;CACF;AAED,SAAS,iBAAiB,CAAC,CAAU,EAAE,CAAU;IAC/C,IAAI,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QACpB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC;QAC3C,OAAO,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;IACrC,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACzC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACtF,CAAC;IAED,IAAI,QAAQ,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAE5B,OAAO,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACrH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC;AACrD,CAAC"}

package/dist/index.d.ts

@@ -57,6 +57,7 @@ export * from './application/audit/tenant-scope-of.js';
 export * from './application/audit/tenant-scoped.js';
 export * from './application/audit/update-stamp.js';
 export * from './application/cache/cache-key.js';
+export * from './application/cache/tenant-cache-key.js';
 export * from './application/dependency-kind.js';
 export * from './application/error-reporting/error-origin.js';
 export * from './application/error-reporting/error-report-extension-values.js';
@@ -205,6 +206,7 @@ export * from './application/ports/read-model-store.js';
 export * from './application/ports/read-model-table.js';
 export * from './application/ports/repository.js';
 export * from './application/ports/unit-of-work.js';
+export * from './application/ports/tenant-directory.js';
 export * from './application/rate-limit/rate-limit-decision-of.js';
 export * from './application/rate-limit/rate-limit-decision.js';
 export * from './application/rate-limit/rate-limit.js';
@@ -239,7 +241,22 @@ export * from './application/session/session-client.js';
 export * from './application/session/session-extension-values.js';
 export * from './application/session/session-extensions.js';
 export * from './application/session/session.js';
+export * from './application/session/session-scope.js';
+export * from './application/session/session-scopes.js';
+export * from './application/session/has-scope.js';
 export * from './application/session/system-session.js';
+export * from './application/tenancy/across-tenants.js';
+export * from './application/tenancy/assert-tenant-id.js';
+export * from './application/tenancy/elevation-options.js';
+export * from './application/tenancy/invalid-tenant-elevation-error.js';
+export * from './application/tenancy/invalid-tenant-id-error.js';
+export * from './application/tenancy/is-tenant-id.js';
+export * from './application/tenancy/is-tenant-member.js';
+export * from './application/tenancy/tenant-elevation.js';
+export * from './application/tenancy/tenant-key.js';
+export * from './application/tenancy/tenant-reach-of.js';
+export * from './application/tenancy/tenant-reach.js';
+export * from './application/tenancy/tenants-of.js';
 export * from './application/use-case.js';
 export * from './infrastructure/clock/fixed-clock.js';
 export * from './infrastructure/clock/system-clock.js';
@@ -277,6 +294,7 @@ export * from './infrastructure/in-memory/in-memory-rate-limiter.js';
 export * from './infrastructure/in-memory/in-memory-unit-of-work.js';
 export * from './infrastructure/in-memory/metric-sample.js';
 export * from './infrastructure/in-memory/unit-of-work-middleware.js';
+export * from './infrastructure/in-memory/in-memory-tenant-directory.js';
 export * from './infrastructure/read-model/postgres-read-model-rebuild.js';
 export * from './infrastructure/read-model/projection-rebuild.js';
 export * from './infrastructure/read-model/sql-run.js';
@@ -285,4 +303,8 @@ export * from './infrastructure/read-model/write-if-newer.js';
 export * from './infrastructure/noop/noop-error-reporter.js';
 export * from './infrastructure/noop/noop-logger.js';
 export * from './infrastructure/noop/noop-metrics.js';
+export * from './infrastructure/tenancy/tenant-settings.js';
+export * from './infrastructure/tenancy/tenant-setting-values.js';
+export * from './infrastructure/tenancy/tenant-isolation-policies.js';
+export * from './infrastructure/tenancy/tenant-policy-expressions.js';
 //# sourceMappingURL=index.d.ts.map