@de-otio/trellis 0.7.1 → 0.10.0

package/dist/lib/schemas.js

@@ -1,30 +1,27 @@
-"use strict";
 /**
  * Validation Schemas
  *
  * Zod schemas for runtime input validation.
  * Used to validate request bodies and query parameters.
  */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.getSentimentUsersSchema = exports.feedQuerySchema = exports.emailRequestSchema = exports.friendRequestSchema = exports.connectionCodeSchema = exports.signupModeSchema = exports.featureToggleSchema = exports.deleteAccountConfirmationSchema = exports.validateInvitationSchema = exports.createInvitationSchema = exports.privacyPreferencesSchema = exports.badgeSchema = exports.sentimentSchema = exports.createCommentSchema = exports.editPostSchema = exports.createPostSchema = exports.paginationSchema = void 0;
-const zod_1 = require("zod");
+import { z } from "zod";
 /**
  * Pagination query parameters
  */
-exports.paginationSchema = zod_1.z.object({
-    limit: zod_1.z.coerce.number().int().min(1).max(100).default(20),
-    cursor: zod_1.z.string().optional(),
-    offset: zod_1.z.coerce.number().int().min(0).max(10000).optional(),
+export const paginationSchema = z.object({
+    limit: z.coerce.number().int().min(1).max(100).default(20),
+    cursor: z.string().optional(),
+    offset: z.coerce.number().int().min(0).max(10000).optional(),
 });
 /**
  * Create post request body
  */
-exports.createPostSchema = zod_1.z.object({
-    text: zod_1.z.string().min(1).max(3000).trim(),
-    visibility: zod_1.z.enum(["public", "friends-only", "private"]).optional(),
-    radius: zod_1.z.enum(["SHOUT", "LOUD", "NORMAL", "WHISPER"]).optional(),
-    entityRefs: zod_1.z
-        .array(zod_1.z
+export const createPostSchema = z.object({
+    text: z.string().min(1).max(3000).trim(),
+    visibility: z.enum(["public", "friends-only", "private"]).optional(),
+    radius: z.enum(["SHOUT", "LOUD", "NORMAL", "WHISPER"]).optional(),
+    entityRefs: z
+        .array(z
         .string()
         .trim()
         .min(1)
@@ -33,26 +30,26 @@ exports.createPostSchema = zod_1.z.object({
         .max(20) // Maximum 20 entities per post
         .optional()
         .default([]),
-    taxonomyTags: zod_1.z
-        .array(zod_1.z
+    taxonomyTags: z
+        .array(z
         .string()
         .trim()
         .regex(/^[a-z-]+:[a-z-]+:[a-z-]+$/, "Invalid taxon ID format"))
         .max(20) // Maximum 20 taxonomy tags per post
         .optional()
         .default([]),
-    geoData: zod_1.z
+    geoData: z
         .object({
-        lat: zod_1.z.number().min(-90).max(90),
-        lng: zod_1.z.number().min(-180).max(180),
-        place: zod_1.z.string().optional(),
+        lat: z.number().min(-90).max(90),
+        lng: z.number().min(-180).max(180),
+        place: z.string().optional(),
     })
         .optional(),
-    contentWarnings: zod_1.z.array(zod_1.z.string()).max(10).optional(),
-    media: zod_1.z
-        .array(zod_1.z.object({
-        id: zod_1.z.string(), // MediaFile ID
-        alt: zod_1.z.string().max(500).optional(), // Alt text for accessibility
+    contentWarnings: z.array(z.string()).max(10).optional(),
+    media: z
+        .array(z.object({
+        id: z.string(), // MediaFile ID
+        alt: z.string().max(500).optional(), // Alt text for accessibility
     }))
         .max(4) // Maximum 4 images per post
         .optional(),
@@ -63,17 +60,17 @@ exports.createPostSchema = zod_1.z.object({
  * Used for PATCH /api/posts/:postId endpoint.
  * Allows editing text, media, and visibility.
  */
-exports.editPostSchema = zod_1.z.object({
-    text: zod_1.z
+export const editPostSchema = z.object({
+    text: z
         .string()
         .min(1, "Post text is required")
         .max(3000, "Post text exceeds maximum length")
         .trim(),
-    visibility: zod_1.z.enum(["public", "friends-only", "private"]).optional(),
-    media: zod_1.z
-        .array(zod_1.z.object({
-        id: zod_1.z.string().optional(), // Existing media ID
-        alt: zod_1.z.string().max(500).optional(), // Alt text for accessibility
+    visibility: z.enum(["public", "friends-only", "private"]).optional(),
+    media: z
+        .array(z.object({
+        id: z.string().optional(), // Existing media ID
+        alt: z.string().max(500).optional(), // Alt text for accessibility
     }))
         .max(10) // Maximum 10 media attachments
         .optional(),
@@ -81,14 +78,14 @@ exports.editPostSchema = zod_1.z.object({
 /**
  * Create comment request body
  */
-exports.createCommentSchema = zod_1.z.object({
-    text: zod_1.z.string().min(1).max(3000).trim(),
+export const createCommentSchema = z.object({
+    text: z.string().min(1).max(3000).trim(),
 });
 /**
  * Update sentiment request body
  */
-exports.sentimentSchema = zod_1.z.object({
-    sentiment: zod_1.z.enum([
+export const sentimentSchema = z.object({
+    sentiment: z.enum([
         "joy",
         "gratitude",
         "calm",
@@ -105,92 +102,92 @@ exports.sentimentSchema = zod_1.z.object({
 /**
  * Badge visibility request body
  */
-exports.badgeSchema = zod_1.z.object({
-    showVerifiedBadge: zod_1.z.boolean(),
+export const badgeSchema = z.object({
+    showVerifiedBadge: z.boolean(),
 });
 /**
  * Privacy preferences request body
  */
-exports.privacyPreferencesSchema = zod_1.z.object({
-    profileVisibility: zod_1.z.enum(["public", "followers", "private"]).optional(),
-    showEmail: zod_1.z.boolean().optional(),
-    showLocation: zod_1.z.boolean().optional(),
-    allowFriendRequests: zod_1.z.boolean().optional(),
+export const privacyPreferencesSchema = z.object({
+    profileVisibility: z.enum(["public", "followers", "private"]).optional(),
+    showEmail: z.boolean().optional(),
+    showLocation: z.boolean().optional(),
+    allowFriendRequests: z.boolean().optional(),
 });
 /**
  * Invitation creation request body
  */
-exports.createInvitationSchema = zod_1.z.object({
-    email: zod_1.z.string().email().toLowerCase().optional(),
-    expiresInDays: zod_1.z.coerce.number().int().min(1).max(365).default(30),
-    recaptchaToken: zod_1.z.string().optional(),
+export const createInvitationSchema = z.object({
+    email: z.string().email().toLowerCase().optional(),
+    expiresInDays: z.coerce.number().int().min(1).max(365).default(30),
+    recaptchaToken: z.string().optional(),
 });
 /**
  * Validate invitation request body
  */
-exports.validateInvitationSchema = zod_1.z.object({
-    code: zod_1.z.string().min(1).max(100).trim().toUpperCase(),
-    email: zod_1.z.string().email().toLowerCase().optional(),
+export const validateInvitationSchema = z.object({
+    code: z.string().min(1).max(100).trim().toUpperCase(),
+    email: z.string().email().toLowerCase().optional(),
 });
 /**
  * Delete account confirmation request body
  */
-exports.deleteAccountConfirmationSchema = zod_1.z.object({
-    confirmationCode: zod_1.z.string().min(1).max(100).trim(),
+export const deleteAccountConfirmationSchema = z.object({
+    confirmationCode: z.string().min(1).max(100).trim(),
 });
 /**
  * Feature toggle request body
  */
-exports.featureToggleSchema = zod_1.z.object({
-    enabled: zod_1.z.boolean(),
+export const featureToggleSchema = z.object({
+    enabled: z.boolean(),
 });
 /**
  * User signup mode request body
  */
-exports.signupModeSchema = zod_1.z.object({
-    mode: zod_1.z.enum(["open", "invitation_only"]),
+export const signupModeSchema = z.object({
+    mode: z.enum(["open", "invitation_only"]),
 });
 /**
  * Connection code request body
  */
-exports.connectionCodeSchema = zod_1.z.object({
-    code: zod_1.z.string().min(1).max(100).trim(),
+export const connectionCodeSchema = z.object({
+    code: z.string().min(1).max(100).trim(),
 });
 /**
  * Friend request body
  */
-exports.friendRequestSchema = zod_1.z.object({
-    inviterId: zod_1.z.string().min(1).max(200).optional(),
+export const friendRequestSchema = z.object({
+    inviterId: z.string().min(1).max(200).optional(),
 });
 /**
  * Email request body (for password reset, etc.)
  */
-exports.emailRequestSchema = zod_1.z.object({
-    email: zod_1.z.string().email().toLowerCase(),
+export const emailRequestSchema = z.object({
+    email: z.string().email().toLowerCase(),
 });
 /**
  * Feed query parameters (extends pagination)
  */
-exports.feedQuerySchema = exports.paginationSchema.extend({
-    entityRef: zod_1.z.string().optional(), // Filter by single entity (for backward compatibility with existing queries)
-    entityRefs: zod_1.z.array(zod_1.z.string()).max(20).optional(), // Filter by multiple entities
-    taxonomyTags: zod_1.z
-        .array(zod_1.z
+export const feedQuerySchema = paginationSchema.extend({
+    entityRef: z.string().optional(), // Filter by single entity (for backward compatibility with existing queries)
+    entityRefs: z.array(z.string()).max(20).optional(), // Filter by multiple entities
+    taxonomyTags: z
+        .array(z
         .string()
         .trim()
         .regex(/^[a-z-]+:[a-z-]+:[a-z-]+$/, "Invalid taxon ID format"))
         .max(20)
         .optional(), // Filter by taxonomy tags (taxonIds)
-    personalized: zod_1.z.coerce.boolean().optional(), // Enable personalization based on user's entity tags
-    personalizationEntityIds: zod_1.z.array(zod_1.z.string()).max(20).optional(), // Specific entity IDs for personalization
+    personalized: z.coerce.boolean().optional(), // Enable personalization based on user's entity tags
+    personalizationEntityIds: z.array(z.string()).max(20).optional(), // Specific entity IDs for personalization
 });
 /**
  * Get sentiment users query parameters
  * For "who reacted" feature - returns users who reacted with specific sentiments
  */
-exports.getSentimentUsersSchema = zod_1.z.object({
-    postId: zod_1.z.string().uuid("Post ID must be a valid UUID"),
-    sentiment: zod_1.z
+export const getSentimentUsersSchema = z.object({
+    postId: z.string().uuid("Post ID must be a valid UUID"),
+    sentiment: z
         .enum([
         "joy",
         "gratitude",
@@ -205,13 +202,13 @@ exports.getSentimentUsersSchema = zod_1.z.object({
         "insightful",
     ])
         .optional(),
-    limit: zod_1.z.coerce
+    limit: z.coerce
         .number()
         .int("Limit must be an integer")
         .min(1, "Limit must be at least 1")
         .max(100, "Limit must not exceed 100")
         .default(20),
-    cursor: zod_1.z
+    cursor: z
         .string()
         .refine((c) => {
         try {

package/dist/lib/schemas.js.map

@@ -1 +1 @@
-{"version":3,"file":"schemas.js","sourceRoot":"","sources":["../../src/lib/schemas.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,6BAAwB;AAExB;;GAEG;AACU,QAAA,gBAAgB,GAAG,OAAC,CAAC,MAAM,CAAC;IACvC,KAAK,EAAE,OAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC1D,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,MAAM,EAAE,OAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE;CAC7D,CAAC,CAAC;AAEH;;GAEG;AACU,QAAA,gBAAgB,GAAG,OAAC,CAAC,MAAM,CAAC;IACvC,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE;IACxC,UAAU,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE;IACpE,MAAM,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE;IACjE,UAAU,EAAE,OAAC;SACV,KAAK,CACJ,OAAC;SACE,MAAM,EAAE;SACR,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,GAAG,CAAC;SACR,KAAK,CAAC,aAAa,EAAE,0BAA0B,CAAC,CACpD;SACA,GAAG,CAAC,EAAE,CAAC,CAAC,+BAA+B;SACvC,QAAQ,EAAE;SACV,OAAO,CAAC,EAAE,CAAC;IACd,YAAY,EAAE,OAAC;SACZ,KAAK,CACJ,OAAC;SACE,MAAM,EAAE;SACR,IAAI,EAAE;SACN,KAAK,CAAC,2BAA2B,EAAE,yBAAyB,CAAC,CACjE;SACA,GAAG,CAAC,EAAE,CAAC,CAAC,oCAAoC;SAC5C,QAAQ,EAAE;SACV,OAAO,CAAC,EAAE,CAAC;IACd,OAAO,EAAE,OAAC;SACP,MAAM,CAAC;QACN,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;QAChC,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;QAClC,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC7B,CAAC;SACD,QAAQ,EAAE;IACb,eAAe,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IACvD,KAAK,EAAE,OAAC;SACL,KAAK,CACJ,OAAC,CAAC,MAAM,CAAC;QACP,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,EAAE,eAAe;QAC/B,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,6BAA6B;KACnE,CAAC,CACH;SACA,GAAG,CAAC,CAAC,CAAC,CAAC,4BAA4B;SACnC,QAAQ,EAAE;CACd,CAAC,CAAC;AAEH;;;;;GAKG;AACU,QAAA,cAAc,GAAG,OAAC,CAAC,MAAM,CAAC;IACrC,IAAI,EAAE,OAAC;SACJ,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,EAAE,uBAAuB,CAAC;SAC/B,GAAG,CAAC,IAAI,EAAE,kCAAkC,CAAC;SAC7C,IAAI,EAAE;IACT,UAAU,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE;IACpE,KAAK,EAAE,OAAC;SACL,KAAK,CACJ,OAAC,CAAC,MAAM,CAAC;QACP,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,oBAAoB;QAC/C,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,6BAA6B;KACnE,CAAC,CACH;SACA,GAAG,CAAC,EAAE,CAAC,CAAC,+BAA+B;SACvC,QAAQ,EAAE;CACd,CAAC,CAAC;AAEH;;GAEG;AACU,QAAA,mBAAmB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC1C,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE;CACzC,CAAC,CAAC;AAEH;;GAEG;AACU,QAAA,eAAe,GAAG,OAAC,CAAC,MAAM,CAAC;IACtC,SAAS,EAAE,OAAC,CAAC,IAAI,CAAC;QAChB,KAAK;QACL,WAAW;QACX,MAAM;QACN,MAAM;QACN,MAAM;QACN,YAAY;QACZ,KAAK;QACL,SAAS;QACT,OAAO;QACP,MAAM;QACN,YAAY;KACb,CAAC;CACH,CAAC,CAAC;AAEH;;GAEG;AACU,QAAA,WAAW,GAAG,OAAC,CAAC,MAAM,CAAC;IAClC,iBAAiB,EAAE,OAAC,CAAC,OAAO,EAAE;CAC/B,CAAC,CAAC;AAEH;;GAEG;AACU,QAAA,wBAAwB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC/C,iBAAiB,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE;IACxE,SAAS,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACjC,YAAY,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACpC,mBAAmB,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAC5C,CAAC,CAAC;AAEH;;GAEG;AACU,QAAA,sBAAsB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC7C,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IAClD,aAAa,EAAE,OAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAClE,cAAc,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACtC,CAAC,CAAC;AAEH;;GAEG;AACU,QAAA,wBAAwB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC/C,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE;IACrD,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;CACnD,CAAC,CAAC;AAEH;;GAEG;AACU,QAAA,+BAA+B,GAAG,OAAC,CAAC,MAAM,CAAC;IACtD,gBAAgB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE;CACpD,CAAC,CAAC;AAEH;;GAEG;AACU,QAAA,mBAAmB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC1C,OAAO,EAAE,OAAC,CAAC,OAAO,EAAE;CACrB,CAAC,CAAC;AAEH;;GAEG;AACU,QAAA,gBAAgB,GAAG,OAAC,CAAC,MAAM,CAAC;IACvC,IAAI,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;CAC1C,CAAC,CAAC;AAEH;;GAEG;AACU,QAAA,oBAAoB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC3C,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE;CACxC,CAAC,CAAC;AAEH;;GAEG;AACU,QAAA,mBAAmB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC1C,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CACjD,CAAC,CAAC;AAEH;;GAEG;AACU,QAAA,kBAAkB,GAAG,OAAC,CAAC,MAAM,CAAC;IACzC,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE;CACxC,CAAC,CAAC;AAEH;;GAEG;AACU,QAAA,eAAe,GAAG,wBAAgB,CAAC,MAAM,CAAC;IACrD,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,6EAA6E;IAC/G,UAAU,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,8BAA8B;IAClF,YAAY,EAAE,OAAC;SACZ,KAAK,CACJ,OAAC;SACE,MAAM,EAAE;SACR,IAAI,EAAE;SACN,KAAK,CAAC,2BAA2B,EAAE,yBAAyB,CAAC,CACjE;SACA,GAAG,CAAC,EAAE,CAAC;SACP,QAAQ,EAAE,EAAE,qCAAqC;IACpD,YAAY,EAAE,OAAC,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,EAAE,qDAAqD;IAClG,wBAAwB,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,0CAA0C;CAC7G,CAAC,CAAC;AAEH;;;GAGG;AACU,QAAA,uBAAuB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC9C,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,8BAA8B,CAAC;IACvD,SAAS,EAAE,OAAC;SACT,IAAI,CAAC;QACJ,KAAK;QACL,WAAW;QACX,MAAM;QACN,MAAM;QACN,MAAM;QACN,YAAY;QACZ,KAAK;QACL,SAAS;QACT,OAAO;QACP,MAAM;QACN,YAAY;KACb,CAAC;SACD,QAAQ,EAAE;IACb,KAAK,EAAE,OAAC,CAAC,MAAM;SACZ,MAAM,EAAE;SACR,GAAG,CAAC,0BAA0B,CAAC;SAC/B,GAAG,CAAC,CAAC,EAAE,0BAA0B,CAAC;SAClC,GAAG,CAAC,GAAG,EAAE,2BAA2B,CAAC;SACrC,OAAO,CAAC,EAAE,CAAC;IACd,MAAM,EAAE,OAAC;SACN,MAAM,EAAE;SACR,MAAM,CACL,CAAC,CAAC,EAAE,EAAE;QACJ,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;YAChE,OAAO,CACL,OAAO,OAAO,KAAK,QAAQ;gBAC3B,OAAO,KAAK,IAAI;gBAChB,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ;gBAClC,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;gBACzB,OAAO,CAAC,MAAM,CAAC,MAAM,IAAI,GAAG;gBAC5B,OAAO,OAAO,CAAC,aAAa,KAAK,QAAQ;gBACzC,OAAO,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC;gBAChC,OAAO,CAAC,aAAa,CAAC,MAAM,IAAI,EAAE;gBAClC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,CAClC,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC,EACD,EAAE,OAAO,EAAE,uBAAuB,EAAE,CACrC;SACA,QAAQ,EAAE;CACd,CAAC,CAAC"}
+{"version":3,"file":"schemas.js","sourceRoot":"","sources":["../../src/lib/schemas.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;GAEG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC1D,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE;CAC7D,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE;IACxC,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE;IACpE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE;IACjE,UAAU,EAAE,CAAC;SACV,KAAK,CACJ,CAAC;SACE,MAAM,EAAE;SACR,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,GAAG,CAAC;SACR,KAAK,CAAC,aAAa,EAAE,0BAA0B,CAAC,CACpD;SACA,GAAG,CAAC,EAAE,CAAC,CAAC,+BAA+B;SACvC,QAAQ,EAAE;SACV,OAAO,CAAC,EAAE,CAAC;IACd,YAAY,EAAE,CAAC;SACZ,KAAK,CACJ,CAAC;SACE,MAAM,EAAE;SACR,IAAI,EAAE;SACN,KAAK,CAAC,2BAA2B,EAAE,yBAAyB,CAAC,CACjE;SACA,GAAG,CAAC,EAAE,CAAC,CAAC,oCAAoC;SAC5C,QAAQ,EAAE;SACV,OAAO,CAAC,EAAE,CAAC;IACd,OAAO,EAAE,CAAC;SACP,MAAM,CAAC;QACN,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;QAChC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;QAClC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC7B,CAAC;SACD,QAAQ,EAAE;IACb,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IACvD,KAAK,EAAE,CAAC;SACL,KAAK,CACJ,CAAC,CAAC,MAAM,CAAC;QACP,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,eAAe;QAC/B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,6BAA6B;KACnE,CAAC,CACH;SACA,GAAG,CAAC,CAAC,CAAC,CAAC,4BAA4B;SACnC,QAAQ,EAAE;CACd,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,IAAI,EAAE,CAAC;SACJ,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,EAAE,uBAAuB,CAAC;SAC/B,GAAG,CAAC,IAAI,EAAE,kCAAkC,CAAC;SAC7C,IAAI,EAAE;IACT,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE;IACpE,KAAK,EAAE,CAAC;SACL,KAAK,CACJ,CAAC,CAAC,MAAM,CAAC;QACP,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,oBAAoB;QAC/C,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,6BAA6B;KACnE,CAAC,CACH;SACA,GAAG,CAAC,EAAE,CAAC,CAAC,+BAA+B;SACvC,QAAQ,EAAE;CACd,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE;CACzC,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC;QAChB,KAAK;QACL,WAAW;QACX,MAAM;QACN,MAAM;QACN,MAAM;QACN,YAAY;QACZ,KAAK;QACL,SAAS;QACT,OAAO;QACP,MAAM;QACN,YAAY;KACb,CAAC;CACH,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,iBAAiB,EAAE,CAAC,CAAC,OAAO,EAAE;CAC/B,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,iBAAiB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE;IACxE,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACjC,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACpC,mBAAmB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAC5C,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IAClD,aAAa,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAClE,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACtC,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE;IACrD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;CACnD,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,MAAM,CAAC;IACtD,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE;CACpD,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;CACrB,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;CAC1C,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE;CACxC,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CACjD,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE;CACxC,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,gBAAgB,CAAC,MAAM,CAAC;IACrD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,6EAA6E;IAC/G,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,8BAA8B;IAClF,YAAY,EAAE,CAAC;SACZ,KAAK,CACJ,CAAC;SACE,MAAM,EAAE;SACR,IAAI,EAAE;SACN,KAAK,CAAC,2BAA2B,EAAE,yBAAyB,CAAC,CACjE;SACA,GAAG,CAAC,EAAE,CAAC;SACP,QAAQ,EAAE,EAAE,qCAAqC;IACpD,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,EAAE,qDAAqD;IAClG,wBAAwB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,0CAA0C;CAC7G,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,8BAA8B,CAAC;IACvD,SAAS,EAAE,CAAC;SACT,IAAI,CAAC;QACJ,KAAK;QACL,WAAW;QACX,MAAM;QACN,MAAM;QACN,MAAM;QACN,YAAY;QACZ,KAAK;QACL,SAAS;QACT,OAAO;QACP,MAAM;QACN,YAAY;KACb,CAAC;SACD,QAAQ,EAAE;IACb,KAAK,EAAE,CAAC,CAAC,MAAM;SACZ,MAAM,EAAE;SACR,GAAG,CAAC,0BAA0B,CAAC;SAC/B,GAAG,CAAC,CAAC,EAAE,0BAA0B,CAAC;SAClC,GAAG,CAAC,GAAG,EAAE,2BAA2B,CAAC;SACrC,OAAO,CAAC,EAAE,CAAC;IACd,MAAM,EAAE,CAAC;SACN,MAAM,EAAE;SACR,MAAM,CACL,CAAC,CAAC,EAAE,EAAE;QACJ,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;YAChE,OAAO,CACL,OAAO,OAAO,KAAK,QAAQ;gBAC3B,OAAO,KAAK,IAAI;gBAChB,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ;gBAClC,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;gBACzB,OAAO,CAAC,MAAM,CAAC,MAAM,IAAI,GAAG;gBAC5B,OAAO,OAAO,CAAC,aAAa,KAAK,QAAQ;gBACzC,OAAO,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC;gBAChC,OAAO,CAAC,aAAa,CAAC,MAAM,IAAI,EAAE;gBAClC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,CAClC,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC,EACD,EAAE,OAAO,EAAE,uBAAuB,EAAE,CACrC;SACA,QAAQ,EAAE;CACd,CAAC,CAAC"}

package/dist/lib/secrets/idp-secrets.d.ts

@@ -2,7 +2,7 @@
  * Secrets Manager wrapper for IdP client secrets.
  *
  * Naming convention: `tenant/{tenantId}/idp-client-secret`. The IAM policy
- * grants Skybber's task role only `secretsmanager:CreateSecret`,
+ * grants Trellis's task role only `secretsmanager:CreateSecret`,
  * `PutSecretValue`, `DeleteSecret`, `DescribeSecret`, `GetSecretValue` on
  * `arn:aws:secretsmanager:{region}:{account}:secret:tenant/*` so a leak in
  * the IdP CRUD path can never read or rewrite secrets outside that prefix.

package/dist/lib/secrets/idp-secrets.js

@@ -1,13 +1,8 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.IdpSecretsClient = exports.IDP_SECRET_SUFFIX = exports.IDP_SECRET_PREFIX = void 0;
-exports.idpSecretName = idpSecretName;
-exports.createIdpSecretsClient = createIdpSecretsClient;
 /**
  * Secrets Manager wrapper for IdP client secrets.
  *
  * Naming convention: `tenant/{tenantId}/idp-client-secret`. The IAM policy
- * grants Skybber's task role only `secretsmanager:CreateSecret`,
+ * grants Trellis's task role only `secretsmanager:CreateSecret`,
  * `PutSecretValue`, `DeleteSecret`, `DescribeSecret`, `GetSecretValue` on
  * `arn:aws:secretsmanager:{region}:{account}:secret:tenant/*` so a leak in
  * the IdP CRUD path can never read or rewrite secrets outside that prefix.
@@ -16,13 +11,13 @@ exports.createIdpSecretsClient = createIdpSecretsClient;
  * to Secrets Manager. It is never logged here. Callers must not log it
  * either.
  */
-const client_secrets_manager_1 = require("@aws-sdk/client-secrets-manager");
-exports.IDP_SECRET_PREFIX = "tenant/";
-exports.IDP_SECRET_SUFFIX = "/idp-client-secret";
-function idpSecretName(tenantId) {
-    return `${exports.IDP_SECRET_PREFIX}${tenantId}${exports.IDP_SECRET_SUFFIX}`;
+import { SecretsManagerClient, CreateSecretCommand, PutSecretValueCommand, DeleteSecretCommand, DescribeSecretCommand, } from "@aws-sdk/client-secrets-manager";
+export const IDP_SECRET_PREFIX = "tenant/";
+export const IDP_SECRET_SUFFIX = "/idp-client-secret";
+export function idpSecretName(tenantId) {
+    return `${IDP_SECRET_PREFIX}${tenantId}${IDP_SECRET_SUFFIX}`;
 }
-class IdpSecretsClient {
+export class IdpSecretsClient {
     client;
     constructor(client) {
         this.client = client;
@@ -35,7 +30,7 @@ class IdpSecretsClient {
      */
     async create(tenantId, plaintext) {
         const name = idpSecretName(tenantId);
-        const result = await this.client.send(new client_secrets_manager_1.CreateSecretCommand({
+        const result = await this.client.send(new CreateSecretCommand({
             Name: name,
             SecretString: plaintext,
             Tags: [
@@ -54,7 +49,7 @@ class IdpSecretsClient {
      */
     async rotate(tenantId, plaintext) {
         const name = idpSecretName(tenantId);
-        const result = await this.client.send(new client_secrets_manager_1.PutSecretValueCommand({
+        const result = await this.client.send(new PutSecretValueCommand({
             SecretId: name,
             SecretString: plaintext,
         }));
@@ -72,7 +67,7 @@ class IdpSecretsClient {
     async delete(tenantId) {
         const name = idpSecretName(tenantId);
         try {
-            await this.client.send(new client_secrets_manager_1.DeleteSecretCommand({
+            await this.client.send(new DeleteSecretCommand({
                 SecretId: name,
                 ForceDeleteWithoutRecovery: true,
             }));
@@ -91,7 +86,7 @@ class IdpSecretsClient {
     async describe(tenantId) {
         const name = idpSecretName(tenantId);
         try {
-            const result = await this.client.send(new client_secrets_manager_1.DescribeSecretCommand({ SecretId: name }));
+            const result = await this.client.send(new DescribeSecretCommand({ SecretId: name }));
             if (!result.ARN)
                 return null;
             return { arn: result.ARN };
@@ -104,8 +99,7 @@ class IdpSecretsClient {
         }
     }
 }
-exports.IdpSecretsClient = IdpSecretsClient;
-function createIdpSecretsClient(region) {
-    return new IdpSecretsClient(new client_secrets_manager_1.SecretsManagerClient({ region: region ?? process.env.AWS_REGION ?? "eu-central-1" }));
+export function createIdpSecretsClient(region) {
+    return new IdpSecretsClient(new SecretsManagerClient({ region: region ?? process.env.AWS_REGION ?? "eu-central-1" }));
 }
 //# sourceMappingURL=idp-secrets.js.map

package/dist/lib/secrets/idp-secrets.js.map

@@ -1 +1 @@
-{"version":3,"file":"idp-secrets.js","sourceRoot":"","sources":["../../../src/lib/secrets/idp-secrets.ts"],"names":[],"mappings":";;;AAwBA,sCAEC;AA8FD,wDAIC;AA5HD;;;;;;;;;;;;GAYG;AACH,4EAMyC;AAE5B,QAAA,iBAAiB,GAAG,SAAS,CAAC;AAC9B,QAAA,iBAAiB,GAAG,oBAAoB,CAAC;AAEtD,SAAgB,aAAa,CAAC,QAAgB;IAC5C,OAAO,GAAG,yBAAiB,GAAG,QAAQ,GAAG,yBAAiB,EAAE,CAAC;AAC/D,CAAC;AAOD,MAAa,gBAAgB;IACE;IAA7B,YAA6B,MAA4B;QAA5B,WAAM,GAAN,MAAM,CAAsB;IAAG,CAAC;IAE7D;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CAAC,QAAgB,EAAE,SAAiB;QAC9C,MAAM,IAAI,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;QACrC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CACnC,IAAI,4CAAmB,CAAC;YACtB,IAAI,EAAE,IAAI;YACV,YAAY,EAAE,SAAS;YACvB,IAAI,EAAE;gBACJ,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE;gBACpC,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,mBAAmB,EAAE;aAC/C;SACF,CAAC,CACH,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAClE,CAAC;QACD,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IAC3F,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,MAAM,CAAC,QAAgB,EAAE,SAAiB;QAC9C,MAAM,IAAI,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;QACrC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CACnC,IAAI,8CAAqB,CAAC;YACxB,QAAQ,EAAE,IAAI;YACd,YAAY,EAAE,SAAS;SACxB,CAAC,CACH,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACpE,CAAC;QACD,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IAC3F,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CAAC,QAAgB;QAC3B,MAAM,IAAI,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CACpB,IAAI,4CAAmB,CAAC;gBACtB,QAAQ,EAAE,IAAI;gBACd,0BAA0B,EAAE,IAAI;aACjC,CAAC,CACH,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAI,GAAyB,CAAC,IAAI,CAAC;YAChD,IAAI,OAAO,KAAK,2BAA2B;gBAAE,OAAO;YACpD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,QAAQ,CAAC,QAAgB;QAC7B,MAAM,IAAI,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CACnC,IAAI,8CAAqB,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAC9C,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,GAAG;gBAAE,OAAO,IAAI,CAAC;YAC7B,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC;QAC7B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAI,GAAyB,CAAC,IAAI,CAAC;YAChD,IAAI,OAAO,KAAK,2BAA2B;gBAAE,OAAO,IAAI,CAAC;YACzD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;CACF;AArFD,4CAqFC;AAED,SAAgB,sBAAsB,CAAC,MAAe;IACpD,OAAO,IAAI,gBAAgB,CACzB,IAAI,6CAAoB,CAAC,EAAE,MAAM,EAAE,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,cAAc,EAAE,CAAC,CACzF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"idp-secrets.js","sourceRoot":"","sources":["../../../src/lib/secrets/idp-secrets.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EACL,oBAAoB,EACpB,mBAAmB,EACnB,qBAAqB,EACrB,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,iCAAiC,CAAC;AAEzC,MAAM,CAAC,MAAM,iBAAiB,GAAG,SAAS,CAAC;AAC3C,MAAM,CAAC,MAAM,iBAAiB,GAAG,oBAAoB,CAAC;AAEtD,MAAM,UAAU,aAAa,CAAC,QAAgB;IAC5C,OAAO,GAAG,iBAAiB,GAAG,QAAQ,GAAG,iBAAiB,EAAE,CAAC;AAC/D,CAAC;AAOD,MAAM,OAAO,gBAAgB;IACE;IAA7B,YAA6B,MAA4B;QAA5B,WAAM,GAAN,MAAM,CAAsB;IAAG,CAAC;IAE7D;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CAAC,QAAgB,EAAE,SAAiB;QAC9C,MAAM,IAAI,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;QACrC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CACnC,IAAI,mBAAmB,CAAC;YACtB,IAAI,EAAE,IAAI;YACV,YAAY,EAAE,SAAS;YACvB,IAAI,EAAE;gBACJ,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE;gBACpC,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,mBAAmB,EAAE;aAC/C;SACF,CAAC,CACH,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAClE,CAAC;QACD,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IAC3F,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,MAAM,CAAC,QAAgB,EAAE,SAAiB;QAC9C,MAAM,IAAI,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;QACrC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CACnC,IAAI,qBAAqB,CAAC;YACxB,QAAQ,EAAE,IAAI;YACd,YAAY,EAAE,SAAS;SACxB,CAAC,CACH,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACpE,CAAC;QACD,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IAC3F,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CAAC,QAAgB;QAC3B,MAAM,IAAI,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CACpB,IAAI,mBAAmB,CAAC;gBACtB,QAAQ,EAAE,IAAI;gBACd,0BAA0B,EAAE,IAAI;aACjC,CAAC,CACH,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAI,GAAyB,CAAC,IAAI,CAAC;YAChD,IAAI,OAAO,KAAK,2BAA2B;gBAAE,OAAO;YACpD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,QAAQ,CAAC,QAAgB;QAC7B,MAAM,IAAI,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CACnC,IAAI,qBAAqB,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAC9C,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,GAAG;gBAAE,OAAO,IAAI,CAAC;YAC7B,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC;QAC7B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAI,GAAyB,CAAC,IAAI,CAAC;YAChD,IAAI,OAAO,KAAK,2BAA2B;gBAAE,OAAO,IAAI,CAAC;YACzD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;CACF;AAED,MAAM,UAAU,sBAAsB,CAAC,MAAe;IACpD,OAAO,IAAI,gBAAgB,CACzB,IAAI,oBAAoB,CAAC,EAAE,MAAM,EAAE,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,cAAc,EAAE,CAAC,CACzF,CAAC;AACJ,CAAC"}

package/dist/lib/security-event-cleaner.js

@@ -1,4 +1,3 @@
-"use strict";
 /**
  * Security Event Cleaner
  *
@@ -16,14 +15,12 @@
  *
  * @see doc/01-business/features/b2c-features/border-safety-mode/preparatory-design-changes/06-metadata.md
  */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.SecurityEventCleaner = void 0;
 /**
  * Security Event Cleaner
  *
  * Manages cleanup of expired security events. Currently a stub.
  */
-class SecurityEventCleaner {
+export class SecurityEventCleaner {
     /**
      * Clean up expired security events
      *
@@ -70,5 +67,4 @@ class SecurityEventCleaner {
         return 0;
     }
 }
-exports.SecurityEventCleaner = SecurityEventCleaner;
 //# sourceMappingURL=security-event-cleaner.js.map

package/dist/lib/security-event-cleaner.js.map

@@ -1 +1 @@
-{"version":3,"file":"security-event-cleaner.js","sourceRoot":"","sources":["../../src/lib/security-event-cleaner.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;GAgBG;;;AAEH;;;;GAIG;AACH,MAAa,oBAAoB;IAC/B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAkCG;IACH,KAAK,CAAC,oBAAoB;QACxB,wCAAwC;QACxC,iFAAiF;QACjF,aAAa;QACb,uEAAuE;QACvE,oEAAoE;QACpE,4BAA4B;QAC5B,oCAAoC;QAEpC,OAAO,CAAC,CAAC;IACX,CAAC;CACF;AA/CD,oDA+CC"}
+{"version":3,"file":"security-event-cleaner.js","sourceRoot":"","sources":["../../src/lib/security-event-cleaner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH;;;;GAIG;AACH,MAAM,OAAO,oBAAoB;IAC/B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAkCG;IACH,KAAK,CAAC,oBAAoB;QACxB,wCAAwC;QACxC,iFAAiF;QACjF,aAAa;QACb,uEAAuE;QACvE,oEAAoE;QACpE,4BAA4B;QAC5B,oCAAoC;QAEpC,OAAO,CAAC,CAAC;IACX,CAAC;CACF"}

package/dist/lib/security-headers.js

@@ -1,4 +1,3 @@
-"use strict";
 /**
  * Security Headers
  *
@@ -9,12 +8,10 @@
  * - CSP_SCRIPT_SRC: Override for CSP script-src directive
  * - CSP_STYLE_SRC: Override for CSP style-src directive
  */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.SecurityHeaders = void 0;
 /**
  * Security Headers manager class
  */
-class SecurityHeaders {
+export class SecurityHeaders {
     headers;
     constructor(env) {
         // Build CSP policy based on environment
@@ -83,5 +80,4 @@ class SecurityHeaders {
         return this.addSecurityHeaders(response);
     }
 }
-exports.SecurityHeaders = SecurityHeaders;
 //# sourceMappingURL=security-headers.js.map

package/dist/lib/security-headers.js.map

@@ -1 +1 @@
-{"version":3,"file":"security-headers.js","sourceRoot":"","sources":["../../src/lib/security-headers.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG;;;AAQH;;GAEG;AACH,MAAa,eAAe;IAClB,OAAO,CAAyB;IAExC,YAAY,GAAwB;QAClC,wCAAwC;QACxC,MAAM,aAAa,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC;QACnD,MAAM,YAAY,GAChB,GAAG,EAAE,cAAc,IAAI,gCAAgC,CAAC;QAC1D,2EAA2E;QAC3E,4EAA4E;QAC5E,MAAM,WAAW,GAAG,GAAG,EAAE,aAAa,IAAI,qCAAqC,CAAC;QAEhF,MAAM,GAAG,GAAG;YACV,oBAAoB;YACpB,cAAc,YAAY,EAAE;YAC5B,aAAa,WAAW,EAAE;YAC1B,6BAA6B;YAC7B,iDAAiD;YACjD,eAAe,aAAa,EAAE;YAC9B,wBAAwB;SACzB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEb,IAAI,CAAC,OAAO,GAAG;YACb,wBAAwB,EAAE,SAAS;YACnC,iBAAiB,EAAE,MAAM;YACzB,kBAAkB,EAAE,eAAe;YACnC,iBAAiB,EAAE,iCAAiC;YACpD,2BAA2B,EACzB,8CAA8C;YAChD,yBAAyB,EAAE,GAAG;SAC/B,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,kBAAkB,CAAC,GAAwB;QACjD,MAAM,QAAQ,GAAG;YACf,QAAQ;YACR,qBAAqB;YACrB,qBAAqB;YACrB,yBAAyB;SAC1B,CAAC;QAEF,IAAI,GAAG,EAAE,eAAe,EAAE,CAAC;YACzB,0CAA0C;YAC1C,MAAM,iBAAiB,GAAG,GAAG,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAClE,OAAO,CAAC,GAAG,QAAQ,EAAE,GAAG,iBAAiB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvD,CAAC;QAED,OAAO,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IAED;;;OAGG;IACH,kBAAkB,CAAC,QAAkB;QACnC,sDAAsD;QACtD,MAAM,WAAW,GAAG,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE;YAC9C,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,OAAO,EAAE,QAAQ,CAAC,OAAO;SAC1B,CAAC,CAAC;QAEH,kEAAkE;QAClE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE;YACpD,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;QAEH,OAAO,WAAW,CAAC;IACrB,CAAC;IAED;;OAEG;IACH,oBAAoB,CAAC,IAAqB,EAAE,IAAmB;QAC7D,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC1C,OAAO,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAC3C,CAAC;CACF;AAhFD,0CAgFC"}
+{"version":3,"file":"security-headers.js","sourceRoot":"","sources":["../../src/lib/security-headers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAQH;;GAEG;AACH,MAAM,OAAO,eAAe;IAClB,OAAO,CAAyB;IAExC,YAAY,GAAwB;QAClC,wCAAwC;QACxC,MAAM,aAAa,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC;QACnD,MAAM,YAAY,GAChB,GAAG,EAAE,cAAc,IAAI,gCAAgC,CAAC;QAC1D,2EAA2E;QAC3E,4EAA4E;QAC5E,MAAM,WAAW,GAAG,GAAG,EAAE,aAAa,IAAI,qCAAqC,CAAC;QAEhF,MAAM,GAAG,GAAG;YACV,oBAAoB;YACpB,cAAc,YAAY,EAAE;YAC5B,aAAa,WAAW,EAAE;YAC1B,6BAA6B;YAC7B,iDAAiD;YACjD,eAAe,aAAa,EAAE;YAC9B,wBAAwB;SACzB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEb,IAAI,CAAC,OAAO,GAAG;YACb,wBAAwB,EAAE,SAAS;YACnC,iBAAiB,EAAE,MAAM;YACzB,kBAAkB,EAAE,eAAe;YACnC,iBAAiB,EAAE,iCAAiC;YACpD,2BAA2B,EACzB,8CAA8C;YAChD,yBAAyB,EAAE,GAAG;SAC/B,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,kBAAkB,CAAC,GAAwB;QACjD,MAAM,QAAQ,GAAG;YACf,QAAQ;YACR,qBAAqB;YACrB,qBAAqB;YACrB,yBAAyB;SAC1B,CAAC;QAEF,IAAI,GAAG,EAAE,eAAe,EAAE,CAAC;YACzB,0CAA0C;YAC1C,MAAM,iBAAiB,GAAG,GAAG,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAClE,OAAO,CAAC,GAAG,QAAQ,EAAE,GAAG,iBAAiB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvD,CAAC;QAED,OAAO,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IAED;;;OAGG;IACH,kBAAkB,CAAC,QAAkB;QACnC,sDAAsD;QACtD,MAAM,WAAW,GAAG,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE;YAC9C,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,OAAO,EAAE,QAAQ,CAAC,OAAO;SAC1B,CAAC,CAAC;QAEH,kEAAkE;QAClE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE;YACpD,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;QAEH,OAAO,WAAW,CAAC;IACrB,CAAC;IAED;;OAEG;IACH,oBAAoB,CAAC,IAAqB,EAAE,IAAmB;QAC7D,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC1C,OAAO,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAC3C,CAAC;CACF"}

package/dist/lib/security-monitor.d.ts

@@ -1,4 +1,4 @@
-import type { AnalyticsEngineDataset } from "../types/cloudflare-compat";
+import type { AnalyticsEngineDataset } from "../types/cloudflare-compat.js";
 export type SecurityEventType = "sso_login" | "sso_failed" | "sso_config_error" | "rate_limit_exceeded" | "suspicious_activity" | "unauthorized_access" | "database_connection_failure";
 export type SecurityEventSeverity = "low" | "medium" | "high" | "critical";
 export interface SecurityEvent {
@@ -47,7 +47,9 @@ export declare class SecurityMonitor {
      * - low: 7 days
      *
      * @param severity - Event severity level
-     * @returns Date when the event should be deleted, or null if retention is disabled
+     * @returns Date when the event should be deleted (always set — the column is
+     *   NON-NULLABLE as of Surveillance-hardening Phase 0; a NULL would escape
+     *   the hourly-cron pruning forever).
      */
     private calculateRetentionUntil;
     /**

package/dist/lib/security-monitor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"security-monitor.d.ts","sourceRoot":"","sources":["../../src/lib/security-monitor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AAWzE,MAAM,MAAM,iBAAiB,GACzB,WAAW,GACX,YAAY,GACZ,kBAAkB,GAClB,qBAAqB,GACrB,qBAAqB,GACrB,qBAAqB,GACrB,6BAA6B,CAAC;AAElC,MAAM,MAAM,qBAAqB,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;AAE3E,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,iBAAiB,CAAC;IACxB,QAAQ,EAAE,qBAAqB,CAAC;IAChC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;CAChC;AAED,MAAM,WAAW,GAAG;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,SAAS,CAAC,EAAE,sBAAsB,CAAC;IAGnC,yBAAyB,CAAC,EAAE,MAAM,CAAC;CACpC;AAED;;GAEG;AACH,qBAAa,eAAe;IAC1B;;OAEG;IACG,WAAW,CACf,KAAK,EAAE;QACL,IAAI,EAAE,WAAW,GAAG,YAAY,GAAG,kBAAkB,CAAC;QACtD,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,QAAQ,EAAE,MAAM,CAAC;QACjB,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,EAAE,OAAO,CAAC;QACjB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;KAChC,EACD,GAAG,EAAE,GAAG,GACP,OAAO,CAAC,IAAI,CAAC;IAkBhB;;;;;;;;;;;;;;OAcG;IACH,OAAO,CAAC,uBAAuB;IAgB/B;;;;OAIG;IACG,gBAAgB,CAAC,KAAK,EAAE,aAAa,EAAE,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC;IA+DrE;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAyBzB;;OAEG;YACW,uBAAuB;IAyDrC;;;;;;;;;;;;OAYG;YACW,mBAAmB;IA4BjC;;;;OAIG;YACW,gBAAgB;IA4C9B;;OAEG;YACW,SAAS;CAmCxB"}
+{"version":3,"file":"security-monitor.d.ts","sourceRoot":"","sources":["../../src/lib/security-monitor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AAW5E,MAAM,MAAM,iBAAiB,GACzB,WAAW,GACX,YAAY,GACZ,kBAAkB,GAClB,qBAAqB,GACrB,qBAAqB,GACrB,qBAAqB,GACrB,6BAA6B,CAAC;AAElC,MAAM,MAAM,qBAAqB,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;AAE3E,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,iBAAiB,CAAC;IACxB,QAAQ,EAAE,qBAAqB,CAAC;IAChC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;CAChC;AAED,MAAM,WAAW,GAAG;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,SAAS,CAAC,EAAE,sBAAsB,CAAC;IAGnC,yBAAyB,CAAC,EAAE,MAAM,CAAC;CACpC;AAED;;GAEG;AACH,qBAAa,eAAe;IAC1B;;OAEG;IACG,WAAW,CACf,KAAK,EAAE;QACL,IAAI,EAAE,WAAW,GAAG,YAAY,GAAG,kBAAkB,CAAC;QACtD,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,QAAQ,EAAE,MAAM,CAAC;QACjB,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,EAAE,OAAO,CAAC;QACjB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;KAChC,EACD,GAAG,EAAE,GAAG,GACP,OAAO,CAAC,IAAI,CAAC;IAkBhB;;;;;;;;;;;;;;;;OAgBG;IACH,OAAO,CAAC,uBAAuB;IAc/B;;;;OAIG;IACG,gBAAgB,CAAC,KAAK,EAAE,aAAa,EAAE,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC;IA+DrE;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAyBzB;;OAEG;YACW,uBAAuB;IAyDrC;;;;;;;;;;;;OAYG;YACW,mBAAmB;IA4BjC;;;;OAIG;YACW,gBAAgB;IA4C9B;;OAEG;YACW,SAAS;CAmCxB"}

package/dist/lib/security-monitor.js

@@ -1,17 +1,14 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.SecurityMonitor = void 0;
 /**
  * Security Monitor
  *
  * Handles security event logging, monitoring, and alerting for SSO authentication.
  */
-const db_1 = require("../db");
-const logger_1 = require("./logger");
+import { createPrisma } from "../db.js";
+import { getLogger } from "./logger.js";
 /**
  * Security Monitor class for logging and monitoring security events
  */
-class SecurityMonitor {
+export class SecurityMonitor {
     /**
      * Log SSO authentication event
      */
@@ -41,7 +38,9 @@ class SecurityMonitor {
      * - low: 7 days
      *
      * @param severity - Event severity level
-     * @returns Date when the event should be deleted, or null if retention is disabled
+     * @returns Date when the event should be deleted (always set — the column is
+     *   NON-NULLABLE as of Surveillance-hardening Phase 0; a NULL would escape
+     *   the hourly-cron pruning forever).
      */
     calculateRetentionUntil(severity) {
         const retentionDays = {
@@ -62,7 +61,7 @@ class SecurityMonitor {
      */
     async logSecurityEvent(event, env) {
         try {
-            const db = (0, db_1.createPrisma)(env);
+            const db = createPrisma(env);
             // PREPARATORY: Calculate retention date for future cleanup job
             // FUTURE USE: Cleanup job will delete events where retentionUntil < NOW()
             const retentionUntil = this.calculateRetentionUntil(event.severity);
@@ -95,7 +94,7 @@ class SecurityMonitor {
                 // Table might not exist yet - log to console for now
                 // This is expected until migration is run
                 // If retention_until column doesn't exist, the insert will fail - that's okay for now
-                logger_1.Logger.getInstance(env).warn("[SecurityMonitor] Database logging failed (table may not exist, migration needed):", dbError);
+                getLogger().warn("[SecurityMonitor] Database logging failed (table may not exist, migration needed):", dbError);
             }
             // Send to monitoring system
             await this.sendToMonitoring(event, env);
@@ -110,7 +109,7 @@ class SecurityMonitor {
         }
         catch (error) {
             // Don't fail the request if logging fails
-            logger_1.Logger.getInstance(env).error("[SecurityMonitor] Failed to log security event:", error);
+            getLogger().error("[SecurityMonitor] Failed to log security event:", error);
         }
     }
     /**
@@ -144,7 +143,7 @@ class SecurityMonitor {
         if (!event.ipAddress)
             return;
         try {
-            const db = (0, db_1.createPrisma)(env);
+            const db = createPrisma(env);
             // Check for multiple failed attempts from same IP in last 15 minutes
             try {
                 const recentFailures = await db.$queryRawUnsafe(`
@@ -173,11 +172,11 @@ class SecurityMonitor {
             }
             catch (error) {
                 // Table might not exist yet - skip pattern detection
-                logger_1.Logger.getInstance(env).warn("[SecurityMonitor] Failed to detect failed auth pattern (table may not exist):", error);
+                getLogger().warn("[SecurityMonitor] Failed to detect failed auth pattern (table may not exist):", error);
             }
         }
         catch (error) {
-            logger_1.Logger.getInstance(env).error("[SecurityMonitor] Failed to detect failed auth pattern:", error);
+            getLogger().error("[SecurityMonitor] Failed to detect failed auth pattern:", error);
         }
     }
     /**
@@ -242,12 +241,12 @@ class SecurityMonitor {
                 });
             }
             catch (error) {
-                logger_1.Logger.getInstance(env).error("[SecurityMonitor] Analytics write failed:", error);
+                getLogger().error("[SecurityMonitor] Analytics write failed:", error);
                 // Don't throw - analytics failures shouldn't break the app
             }
         }
         // Log to console for development
-        logger_1.Logger.getInstance(env).info("[SecurityMonitor]", {
+        getLogger().info("[SecurityMonitor]", {
             type: event.type,
             severity: event.severity,
             provider: event.provider,
@@ -261,7 +260,7 @@ class SecurityMonitor {
     async sendAlert(event, env) {
         if (!env.SECURITY_WEBHOOK_URL) {
             // No webhook configured - just log
-            logger_1.Logger.getInstance(env).warn("[SecurityMonitor] Security alert (no webhook configured):", event);
+            getLogger().warn("[SecurityMonitor] Security alert (no webhook configured):", event);
             return;
         }
         try {
@@ -284,9 +283,8 @@ class SecurityMonitor {
             });
         }
         catch (error) {
-            logger_1.Logger.getInstance(env).error("[SecurityMonitor] Failed to send alert:", error);
+            getLogger().error("[SecurityMonitor] Failed to send alert:", error);
         }
     }
 }
-exports.SecurityMonitor = SecurityMonitor;
 //# sourceMappingURL=security-monitor.js.map