@decaf-ts/integrations 0.11.0 → 0.12.0

package/lib/esm/io/google-sheets/index.js

@@ -0,0 +1,7 @@
+/**
+ * @module integrations/io/google-sheets
+ * @summary Google Sheets REST v4 service (values read/write/append/clear, spreadsheet creation).
+ * @description Re-exports the Google Sheets client-based service and its types.
+ */
+export * from "./GoogleSheetsService.js";
+//# sourceMappingURL=index.js.map

package/lib/esm/io/google-sheets/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/io/google-sheets/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,yCAAsC"}

package/lib/esm/io/graphql/GraphqlService.js

@@ -0,0 +1,138 @@
+import { InternalError } from "@decaf-ts/db-decorators";
+import { IoEnvironment } from "./../environment.js";
+import { envNumber, envString } from "./../../shared/environmentValue.js";
+import { HttpApiService, httpError, } from "./../../shared/http/index.js";
+/**
+ * @description Generic GraphQL endpoint integration service
+ * @summary An undecorated HTTP service that `POST`s GraphQL
+ * documents to any endpoint. Unlike the other integration services there is
+ * no default base URL — the endpoint must come from the config (`endpoint` or
+ * `baseUrl`) or the `io.graphql` environment slice. Initialization normalizes
+ * the `endpoint` alias to `baseUrl` before delegating to the shared
+ * {@link HttpApiService.initialize}; the optional token is sent as a bearer
+ * header and per-request headers extend it. Transport failures are mapped to
+ * decaf errors via {@link httpError}, while GraphQL field-level `errors` are
+ * returned in the response for the caller to interpret.
+ * @class GraphqlService
+ * @category IO
+ * @example
+ * ```ts
+ * import { GraphqlService } from "@decaf-ts/integrations/io/graphql";
+ *
+ * const graphql = new GraphqlService();
+ * await graphql.initialize({
+ *   endpoint: "https://api.example.com/graphql",
+ *   token: process.env.GRAPH_CREDENTIAL_GRAPHQL_TOKEN,
+ * });
+ * const response = await graphql.request<{ user: { name: string } }>({
+ *   query: `query GetUser($id: ID!) {
+ *     user(id: $id) { name }
+ *   }`,
+ *   variables: { id: "123" },
+ * });
+ * ```
+ * @memberOf module:integrations/io/graphql/service
+ */
+export class GraphqlService extends HttpApiService {
+    constructor() {
+        super(...arguments);
+        /**
+         * @description The provider name used in error messages
+         */
+        this.serviceName = "GraphQL";
+    }
+    /**
+     * @description The absence of a default GraphQL endpoint
+     * @summary Returns an empty string because GraphQL endpoints are
+     * provider-specific; {@link GraphqlService.request} rejects execution when
+     * no endpoint was configured.
+     * @returns {string} An empty string.
+     */
+    defaultBaseUrl() {
+        return "";
+    }
+    /**
+     * @description Normalizes the `endpoint` alias before shared initialization
+     * @summary When the provided config carries no `baseUrl` but an `endpoint`,
+     * copies `endpoint` into `baseUrl` and delegates to
+     * {@link HttpApiService.initialize}, which merges the environment slice and
+     * builds the Axios client.
+     * @param {...MaybeContextualArg<any>} args - An optional `Partial<GraphqlServiceConfig>`, optionally followed by a decaf `Context`.
+     * @returns {Promise<{config: GraphqlServiceConfig, client: AxiosInstance}>} The merged configuration and the configured Axios instance.
+     * @throws {InternalError} When no base URL can be resolved from the config or environment.
+     */
+    async initialize(...args) {
+        const provided = (args[0] ?? {});
+        if (!provided.baseUrl && provided.endpoint) {
+            args[0] = { ...provided, baseUrl: provided.endpoint };
+        }
+        return super.initialize(...args);
+    }
+    /**
+     * @description Builds the GraphQL bearer authorization headers
+     * @summary Returns the `Authorization: Bearer <token>` header when the
+     * config carries a token, and no headers otherwise.
+     * @param {GraphqlServiceConfig} config - The resolved service configuration.
+     * @returns {Record<string, string>} The authorization headers (empty without a token).
+     */
+    authHeaders(config) {
+        return config.token ? { Authorization: `Bearer ${config.token}` } : {};
+    }
+    /**
+     * @description Reads the GraphQL endpoint and token from the environment
+     * @summary Reads the `io.graphql` environment slice and returns a partial
+     * config (with `endpoint` also mirrored to `baseUrl`) when an endpoint is
+     * configured, `undefined` otherwise. Values pass through
+     * `envString`/`envNumber` to reject unset-leaf proxies.
+     * @returns {Partial<GraphqlServiceConfig> | undefined} A partial config, or `undefined` when no GraphQL endpoint is configured.
+     */
+    configFromEnvironment() {
+        const env = IoEnvironment.io.graphql;
+        const endpoint = envString(env?.endpoint);
+        if (!endpoint)
+            return undefined;
+        return {
+            endpoint,
+            baseUrl: endpoint,
+            token: envString(env.token),
+            timeout: envNumber(env.timeout),
+        };
+    }
+    /**
+     * @description Executes a GraphQL query or mutation against the configured endpoint
+     * @summary `POST`s the standard GraphQL request body (`query`,
+     * `variables`, `operationName`) to the resolved endpoint with the optional
+     * per-request headers merged over the client defaults. Requires a
+     * non-empty query and a configured endpoint. Returns the raw execution
+     * envelope: field-level `errors` are reported in `GraphqlResponse.errors`
+     * rather than thrown, so callers must inspect them for partial failures.
+     * @template T - The expected type of the `data` payload.
+     * @param {GraphqlRequest} input - The query document, variables, operation name, and per-request headers.
+     * @returns {Promise<GraphqlResponse<T>>} The execution envelope with `data`, `errors`, and `extensions`.
+     * @throws {InternalError} When the query is empty or no endpoint is configured.
+     * @throws {NotFoundError} When the endpoint answers with HTTP 404.
+     * @throws {ConflictError} When the endpoint answers with HTTP 409.
+     * @throws {BadRequestError} When the endpoint answers with any other HTTP error status.
+     */
+    async request(input) {
+        if (!input.query || input.query.trim().length === 0) {
+            throw new InternalError("GraphQL request requires a query");
+        }
+        const endpoint = this.config.endpoint ?? this.config.baseUrl;
+        if (!endpoint) {
+            throw new InternalError("GraphQL requires an endpoint");
+        }
+        try {
+            const response = await this.client.post(endpoint, {
+                query: input.query,
+                variables: input.variables,
+                operationName: input.operationName,
+            }, { headers: input.headers });
+            return response.data;
+        }
+        catch (error) {
+            throw httpError("GraphQL", "request", error);
+        }
+    }
+}
+//# sourceMappingURL=GraphqlService.js.map

package/lib/esm/io/graphql/GraphqlService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"GraphqlService.js","sourceRoot":"","sources":["../../../../src/io/graphql/GraphqlService.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAExD,OAAO,EAAE,aAAa,EAAE,4BAAuB;AAC/C,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,2CAAsC;AACrE,OAAO,EACL,cAAc,EAEd,SAAS,GACV,qCAA0B;AAmE3B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,MAAM,OAAO,cAAe,SAAQ,cAAoC;IAAxE;;QACE;;WAEG;QACgB,gBAAW,GAAG,SAAS,CAAC;IAyG7C,CAAC;IAvGC;;;;;;OAMG;IACO,cAAc;QACtB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,UAAU,CACd,GAAG,IAA6B;QAEhC,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAkC,CAAC;QAClE,IAAI,CAAC,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YAC3C,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACxD,CAAC;QACD,OAAO,KAAK,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC;IACnC,CAAC;IAED;;;;;;OAMG;IACO,WAAW,CAAC,MAA4B;QAChD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACzE,CAAC;IAED;;;;;;;OAOG;IACO,qBAAqB;QAC7B,MAAM,GAAG,GAAG,aAAa,CAAC,EAAE,CAAC,OAAO,CAAC;QACrC,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC1C,IAAI,CAAC,QAAQ;YAAE,OAAO,SAAS,CAAC;QAChC,OAAO;YACL,QAAQ;YACR,OAAO,EAAE,QAAQ;YACjB,KAAK,EAAE,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC;YAC3B,OAAO,EAAE,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC;SAChC,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACH,KAAK,CAAC,OAAO,CACX,KAAqB;QAErB,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,aAAa,CAAC,kCAAkC,CAAC,CAAC;QAC9D,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;QAC7D,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,aAAa,CAAC,8BAA8B,CAAC,CAAC;QAC1D,CAAC;QACD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CACrC,QAAQ,EACR;gBACE,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,aAAa,EAAE,KAAK,CAAC,aAAa;aACnC,EACD,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAC3B,CAAC;YACF,OAAO,QAAQ,CAAC,IAAI,CAAC;QACvB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,SAAS,CAAC,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;CACF"}

package/lib/esm/io/graphql/index.js

@@ -0,0 +1,7 @@
+/**
+ * @module integrations/io/graphql
+ * @summary Generic GraphQL endpoint client (queries and mutations).
+ * @description Re-exports the GraphQL client-based service and its types.
+ */
+export * from "./GraphqlService.js";
+//# sourceMappingURL=index.js.map

package/lib/esm/io/graphql/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/io/graphql/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,oCAAiC"}

package/lib/esm/io/index.js

@@ -0,0 +1,13 @@
+/**
+ * @module integrations/io
+ * @summary IO integration services (Google Sheets, Airtable, GraphQL, Spreadsheet).
+ * @description Re-exports the data-source services, their per-service modules,
+ * and the shared `io` environment slice. Each sub-module is also available
+ * through its own package subpath export.
+ */
+export * from "./airtable/index.js";
+export * from "./google-sheets/index.js";
+export * from "./graphql/index.js";
+export * from "./spreadsheet/index.js";
+export * from "./environment.js";
+//# sourceMappingURL=index.js.map

package/lib/esm/io/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/io/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,oCAA2B;AAC3B,yCAAgC;AAChC,mCAA0B;AAC1B,uCAA8B;AAC9B,iCAA8B"}

package/lib/esm/io/spreadsheet/SpreadsheetService.js

@@ -0,0 +1,200 @@
+import { InternalError } from "@decaf-ts/db-decorators";
+const DELIMITERS = {
+    csv: ",",
+    tsv: "\t",
+    json: "",
+};
+function resolveFormat(format, delimiter) {
+    if (format)
+        return format;
+    if (delimiter === "\t")
+        return "tsv";
+    return "csv";
+}
+function parseDelimited(content, delimiter) {
+    const rows = [];
+    let row = [];
+    let field = "";
+    let quoted = false;
+    for (let index = 0; index < content.length; index += 1) {
+        const character = content[index];
+        if (quoted) {
+            if (character === '"') {
+                if (content[index + 1] === '"') {
+                    field += '"';
+                    index += 1;
+                }
+                else {
+                    quoted = false;
+                }
+            }
+            else {
+                field += character;
+            }
+            continue;
+        }
+        if (character === '"' && field.length === 0) {
+            quoted = true;
+            continue;
+        }
+        if (character === delimiter) {
+            row.push(field);
+            field = "";
+            continue;
+        }
+        if (character === "\n") {
+            row.push(field.replace(/\r$/, ""));
+            rows.push(row);
+            row = [];
+            field = "";
+            continue;
+        }
+        field += character;
+    }
+    if (field.length > 0 || row.length > 0) {
+        row.push(field.replace(/\r$/, ""));
+        rows.push(row);
+    }
+    return rows.filter((entry) => entry.length > 1 || (entry[0] ?? "").trim().length > 0);
+}
+function quoteField(value, delimiter) {
+    if (value.includes(delimiter) ||
+        value.includes('"') ||
+        value.includes("\n") ||
+        value.includes("\r")) {
+        return `"${value.replace(/"/g, '""')}"`;
+    }
+    return value;
+}
+function cell(value) {
+    if (value === undefined || value === null)
+        return "";
+    if (typeof value === "object") {
+        try {
+            return JSON.stringify(value);
+        }
+        catch {
+            return String(value);
+        }
+    }
+    return String(value);
+}
+/**
+ * @description Dependency-free spreadsheet parsing and serialization service
+ * @summary A stateless (no configuration, no HTTP client) service that
+ * converts between tabular strings and row arrays. `parse` handles CSV and
+ * TSV with a quoted-field parser (double-quote escaping, CRLF stripping,
+ * blank-row filtering) and JSON arrays of rows or records; `serialize`
+ * writes CSV/TSV with RFC 4180-style quoting of fields containing the
+ * delimiter, quotes, or line breaks, or pretty-printed JSON records. Values
+ * are stringified with `null`/`undefined` as empty cells and objects as JSON.
+ * @class SpreadsheetService
+ * @category IO
+ * @example
+ * ```ts
+ * import { SpreadsheetService } from "@decaf-ts/integrations/io/spreadsheet";
+ *
+ * const spreadsheets = new SpreadsheetService();
+ * const parsed = spreadsheets.parse("name,count\nalpha,1\nbeta,2", {
+ *   format: "csv",
+ * });
+ * // parsed.header === ["name", "count"], parsed.rows === [["alpha", "1"], ["beta", "2"]]
+ * ```
+ * @memberOf module:integrations/io/spreadsheet/service
+ */
+export class SpreadsheetService {
+    /**
+     * @description Parses spreadsheet text into a header and data rows
+     * @summary Dispatches on the resolved format. `"json"` content must be an
+     * array: either an array of arrays (the first row becomes the header unless
+     * `header: false`) or an array of records (the union of the first record's
+     * keys becomes the header). CSV/TSV content is parsed with a quoted-field
+     * parser honoring `""` escapes and CR/LF line endings, dropping blank rows;
+     * the first row becomes the header unless `header: false`.
+     * @param {string} content - The spreadsheet text content to parse.
+     * @param {SpreadsheetParseOptions} [options] - Format, delimiter, and header options.
+     * @returns {SpreadsheetParseResult} The resolved format, header row, and data rows.
+     * @throws {InternalError} When the content is not a string, the JSON payload is invalid, or the JSON payload is not an array.
+     * @example
+     * ```ts
+     * // TSV with an explicit delimiter and no header row
+     * const tsv = spreadsheets.parse("alpha\t1\nbeta\t2", { delimiter: "\t", header: false });
+     * // JSON records infer the header from the first record's keys
+     * const json = spreadsheets.parse('[{"name":"alpha","count":1}]', { format: "json" });
+     * ```
+     */
+    parse(content, options = {}) {
+        if (typeof content !== "string") {
+            throw new InternalError("Spreadsheet parse requires text content");
+        }
+        const format = resolveFormat(options.format, options.delimiter);
+        if (format === "json") {
+            let parsed;
+            try {
+                parsed = JSON.parse(content);
+            }
+            catch (error) {
+                throw new InternalError(`Spreadsheet JSON parse failed: ${error instanceof Error ? error.message : String(error)}`);
+            }
+            if (!Array.isArray(parsed)) {
+                throw new InternalError("Spreadsheet JSON content must be an array of rows or records");
+            }
+            if (parsed.length === 0)
+                return { format, header: [], rows: [] };
+            if (Array.isArray(parsed[0])) {
+                const rows = parsed.map((row) => row.map(cell));
+                const header = options.header === false ? [] : (rows.shift() ?? []);
+                return { format, header: header.map(cell), rows };
+            }
+            const records = parsed;
+            const header = Object.keys(records[0] ?? {});
+            const rows = records.map((record) => header.map((field) => cell(record[field])));
+            return { format, header, rows };
+        }
+        const delimiter = options.delimiter ?? DELIMITERS[format];
+        const rows = parseDelimited(content, delimiter);
+        const header = options.header === false ? [] : (rows.shift() ?? []);
+        return { format, header: header.map(cell), rows };
+    }
+    /**
+     * @description Serializes rows into spreadsheet text
+     * @summary Stringifies each cell (objects become JSON, `null`/`undefined`
+     * become empty cells) and dispatches on the resolved format. For `"json"`,
+     * the optional `header` values (or the first data row) become the record
+     * keys and the output is pretty-printed JSON records. For `"csv"`/`"tsv"`,
+     * fields containing the delimiter, quotes, or line breaks are wrapped in
+     * double quotes with inner quotes escaped, and the optional `header` row is
+     * written first. Non-array rows are treated as single-cell rows.
+     * @param {unknown[][]} rows - The data rows to serialize.
+     * @param {SpreadsheetWriteOptions} [options] - Format, delimiter, and header options.
+     * @returns {string} The serialized spreadsheet content.
+     * @throws {InternalError} When `rows` is not an array.
+     * @example
+     * ```ts
+     * const csv = spreadsheets.serialize(
+     *   [["alpha", 1], ["beta, gamma", 2]],
+     *   { format: "csv", header: ["name", "count"] }
+     * );
+     * // "name,count\nalpha,1\n\"beta, gamma\",2"
+     * ```
+     */
+    serialize(rows, options = {}) {
+        if (!Array.isArray(rows)) {
+            throw new InternalError("Spreadsheet write requires rows as an array of arrays");
+        }
+        const format = resolveFormat(options.format, options.delimiter);
+        const header = options.header;
+        const materialized = rows.map((row) => Array.isArray(row) ? row.map(cell) : [cell(row)]);
+        if (format === "json") {
+            const fields = header ?? materialized.shift() ?? [];
+            return JSON.stringify(materialized.map((row) => Object.fromEntries(fields.map((field, index) => [field, row[index] ?? ""]))), null, 2);
+        }
+        const delimiter = options.delimiter ?? DELIMITERS[format];
+        const lines = [
+            ...(header ? [header] : []),
+            ...materialized,
+        ].map((row) => row.map((value) => quoteField(cell(value), delimiter)).join(delimiter));
+        return lines.join("\n");
+    }
+}
+//# sourceMappingURL=SpreadsheetService.js.map

package/lib/esm/io/spreadsheet/SpreadsheetService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SpreadsheetService.js","sourceRoot":"","sources":["../../../../src/io/spreadsheet/SpreadsheetService.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAkFxD,MAAM,UAAU,GAAsC;IACpD,GAAG,EAAE,GAAG;IACR,GAAG,EAAE,IAAI;IACT,IAAI,EAAE,EAAE;CACT,CAAC;AAEF,SAAS,aAAa,CACpB,MAAqC,EACrC,SAA6B;IAE7B,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACrC,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CACrB,OAAe,EACf,SAAiB;IAEjB,MAAM,IAAI,GAAe,EAAE,CAAC;IAC5B,IAAI,GAAG,GAAa,EAAE,CAAC;IACvB,IAAI,KAAK,GAAG,EAAE,CAAC;IACf,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,OAAO,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACvD,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;gBACtB,IAAI,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;oBAC/B,KAAK,IAAI,GAAG,CAAC;oBACb,KAAK,IAAI,CAAC,CAAC;gBACb,CAAC;qBAAM,CAAC;oBACN,MAAM,GAAG,KAAK,CAAC;gBACjB,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,KAAK,IAAI,SAAS,CAAC;YACrB,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,SAAS,KAAK,GAAG,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5C,MAAM,GAAG,IAAI,CAAC;YACd,SAAS;QACX,CAAC;QACD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAChB,KAAK,GAAG,EAAE,CAAC;YACX,SAAS;QACX,CAAC;QACD,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YACvB,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;YACnC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACf,GAAG,GAAG,EAAE,CAAC;YACT,KAAK,GAAG,EAAE,CAAC;YACX,SAAS;QACX,CAAC;QACD,KAAK,IAAI,SAAS,CAAC;IACrB,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;QACnC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjB,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,CAChB,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAClE,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,KAAa,EAAE,SAAiB;IAClD,IACE,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC;QACzB,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;QACnB,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QACpB,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EACpB,CAAC;QACD,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC;IAC1C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,IAAI,CAAC,KAAc;IAC1B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IACrD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,OAAO,kBAAkB;IAC7B;;;;;;;;;;;;;;;;;;;OAmBG;IACH,KAAK,CACH,OAAe,EACf,UAAmC,EAAE;QAErC,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAChC,MAAM,IAAI,aAAa,CAAC,yCAAyC,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QAChE,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,IAAI,MAAe,CAAC;YACpB,IAAI,CAAC;gBACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC/B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,aAAa,CACrB,kCACE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACvD,EAAE,CACH,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC3B,MAAM,IAAI,aAAa,CACrB,8DAA8D,CAC/D,CAAC;YACJ,CAAC;YACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;YACjE,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7B,MAAM,IAAI,GAAI,MAAsB,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;gBACjE,MAAM,MAAM,GACV,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBACvD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC;YACpD,CAAC;YACD,MAAM,OAAO,GAAG,MAAwC,CAAC;YACzD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YAC7C,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAClC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAC3C,CAAC;YACF,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QAClC,CAAC;QACD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;QAC1D,MAAM,IAAI,GAAG,cAAc,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACpE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC;IACpD,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,SAAS,CACP,IAAiB,EACjB,UAAmC,EAAE;QAErC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,aAAa,CACrB,uDAAuD,CACxD,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QAChE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC9B,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CACpC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CACjD,CAAC;QACF,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,MAAM,MAAM,GAAG,MAAM,IAAI,YAAY,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;YACpD,OAAO,IAAI,CAAC,SAAS,CACnB,YAAY,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CACvB,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAC5E,EACD,IAAI,EACJ,CAAC,CACF,CAAC;QACJ,CAAC;QACD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;QAC1D,MAAM,KAAK,GAAG;YACZ,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3B,GAAG,YAAY;SAChB,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CACZ,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CACvE,CAAC;QACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;CACF"}

package/lib/esm/io/spreadsheet/index.js

@@ -0,0 +1,8 @@
+/**
+ * @module integrations/io/spreadsheet
+ * @summary Tabular text parse/serialize service (CSV, TSV, JSON lines).
+ * @description Re-exports the offline spreadsheet service and its types; no
+ * network or credentials are involved.
+ */
+export * from "./SpreadsheetService.js";
+//# sourceMappingURL=index.js.map

package/lib/esm/io/spreadsheet/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/io/spreadsheet/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,wCAAqC"}

package/lib/esm/namespaces/index.js

@@ -6,4 +6,5 @@ export * from "./types.js";
 export * from "./utils.js";
 export * from "./models/index.js";
 export * from "./services/index.js";
+export * from "./rls/index.js";
 //# sourceMappingURL=index.js.map

package/lib/esm/namespaces/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/namespaces/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,2BAAwB;AACxB,2BAAwB;AACxB,kCAAyB;AACzB,oCAA2B"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/namespaces/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,2BAAwB;AACxB,2BAAwB;AACxB,kCAAyB;AACzB,oCAA2B;AAC3B,+BAAsB"}

package/lib/esm/namespaces/models/credential.model.js

@@ -0,0 +1,106 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import { column, createdAt, manyToOne, pk, table, updatedAt, uuid, } from "@decaf-ts/core";
+import { description } from "@decaf-ts/decoration";
+import { model, option, required, type as typeOf, } from "@decaf-ts/decorator-validation";
+import { CredentialProvider, CredentialProviderOptions, } from "./../types.js";
+import { REL_NULLIFY, REL_RESTRICT } from "./../utils.js";
+import { AuthorizationModel } from "./authorization-model.js";
+import { Tenant } from "./tenant.model.js";
+import { OrgUnit } from "./org-unit.model.js";
+import { Principal } from "./principal.model.js";
+let Credential = class Credential extends AuthorizationModel {
+    constructor(data) {
+        super(data);
+        this.enabled = true;
+    }
+};
+__decorate([
+    pk({ type: String }),
+    uuid(),
+    __metadata("design:type", String)
+], Credential.prototype, "id", void 0);
+__decorate([
+    manyToOne(() => Tenant, REL_RESTRICT, false, undefined, "fk_credentials_tenant"),
+    required(),
+    __metadata("design:type", Object)
+], Credential.prototype, "tenant", void 0);
+__decorate([
+    manyToOne(() => OrgUnit, REL_NULLIFY, false, undefined, "fk_credentials_org_unit"),
+    __metadata("design:type", Object)
+], Credential.prototype, "orgUnit", void 0);
+__decorate([
+    manyToOne(() => Principal, REL_NULLIFY, false, undefined, "fk_credentials_owner"),
+    __metadata("design:type", Object)
+], Credential.prototype, "owner", void 0);
+__decorate([
+    required(),
+    typeOf(String),
+    column(),
+    __metadata("design:type", String)
+], Credential.prototype, "name", void 0);
+__decorate([
+    required(),
+    typeOf(String),
+    column(),
+    __metadata("design:type", String)
+], Credential.prototype, "credentialType", void 0);
+__decorate([
+    required(),
+    typeOf(String),
+    column(),
+    __metadata("design:type", String)
+], Credential.prototype, "secretName", void 0);
+__decorate([
+    required(),
+    typeOf(String),
+    option(CredentialProviderOptions),
+    column(),
+    __metadata("design:type", String)
+], Credential.prototype, "provider", void 0);
+__decorate([
+    typeOf(String),
+    column(),
+    __metadata("design:type", String)
+], Credential.prototype, "description", void 0);
+__decorate([
+    typeOf(Boolean),
+    column(),
+    __metadata("design:type", Boolean)
+], Credential.prototype, "enabled", void 0);
+__decorate([
+    typeOf(Object),
+    column(),
+    __metadata("design:type", Object)
+], Credential.prototype, "metadata", void 0);
+__decorate([
+    column(),
+    __metadata("design:type", Date)
+], Credential.prototype, "expiresAt", void 0);
+__decorate([
+    column(),
+    __metadata("design:type", Date)
+], Credential.prototype, "lastUsedAt", void 0);
+__decorate([
+    createdAt(),
+    __metadata("design:type", Date)
+], Credential.prototype, "createdAt", void 0);
+__decorate([
+    updatedAt(),
+    __metadata("design:type", Date)
+], Credential.prototype, "updatedAt", void 0);
+Credential = __decorate([
+    table("credentials"),
+    model(),
+    description("Namespaced credential metadata record referencing an encrypted secret value"),
+    __metadata("design:paramtypes", [Object])
+], Credential);
+export { Credential };
+//# sourceMappingURL=credential.model.js.map

package/lib/esm/namespaces/models/credential.model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential.model.js","sourceRoot":"","sources":["../../../../src/namespaces/models/credential.model.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EACL,MAAM,EACN,SAAS,EACT,SAAS,EACT,EAAE,EACF,KAAK,EACL,SAAS,EACT,IAAI,GACL,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EACL,KAAK,EACL,MAAM,EACN,QAAQ,EACR,IAAI,IAAI,MAAM,GACf,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,kBAAkB,EAClB,yBAAyB,GAC1B,sBAAiB;AAClB,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,sBAAiB;AACrD,OAAO,EAAE,kBAAkB,EAAE,iCAA8B;AAC3D,OAAO,EAAE,MAAM,EAAE,0BAAuB;AACxC,OAAO,EAAE,OAAO,EAAE,4BAAyB;AAC3C,OAAO,EAAE,SAAS,EAAE,6BAA0B;AAOvC,IAAM,UAAU,GAAhB,MAAM,UAAW,SAAQ,kBAAkB;IA8EhD,YAAY,IAAc;QACxB,KAAK,CAAC,IAAI,CAAC,CAAC;QAnBd,YAAO,GAAY,IAAI,CAAC;IAoBxB,CAAC;CACF,CAAA;AA9EC;IAFC,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACpB,IAAI,EAAE;;sCACK;AAUZ;IARC,SAAS,CACR,GAAG,EAAE,CAAC,MAAM,EACZ,YAAY,EACZ,KAAK,EACL,SAAS,EACT,uBAAuB,CACxB;IACA,QAAQ,EAAE;;0CACc;AASzB;IAPC,SAAS,CACR,GAAG,EAAE,CAAC,OAAO,EACb,WAAW,EACX,KAAK,EACL,SAAS,EACT,yBAAyB,CAC1B;;2CAC0B;AAS3B;IAPC,SAAS,CACR,GAAG,EAAE,CAAC,SAAS,EACf,WAAW,EACX,KAAK,EACL,SAAS,EACT,sBAAsB,CACvB;;yCAC0B;AAK3B;IAHC,QAAQ,EAAE;IACV,MAAM,CAAC,MAAM,CAAC;IACd,MAAM,EAAE;;wCACK;AAKd;IAHC,QAAQ,EAAE;IACV,MAAM,CAAC,MAAM,CAAC;IACd,MAAM,EAAE;;kDACe;AAKxB;IAHC,QAAQ,EAAE;IACV,MAAM,CAAC,MAAM,CAAC;IACd,MAAM,EAAE;;8CACW;AAMpB;IAJC,QAAQ,EAAE;IACV,MAAM,CAAC,MAAM,CAAC;IACd,MAAM,CAAC,yBAAyB,CAAC;IACjC,MAAM,EAAE;;4CACqB;AAI9B;IAFC,MAAM,CAAC,MAAM,CAAC;IACd,MAAM,EAAE;;+CACY;AAIrB;IAFC,MAAM,CAAC,OAAO,CAAC;IACf,MAAM,EAAE;;2CACe;AAIxB;IAFC,MAAM,CAAC,MAAM,CAAC;IACd,MAAM,EAAE;;4CAC0B;AAGnC;IADC,MAAM,EAAE;8BACG,IAAI;6CAAC;AAGjB;IADC,MAAM,EAAE;8BACI,IAAI;8CAAC;AAGlB;IADC,SAAS,EAAE;8BACA,IAAI;6CAAC;AAGjB;IADC,SAAS,EAAE;8BACA,IAAI;6CAAC;AA5EN,UAAU;IALtB,KAAK,CAAC,aAAa,CAAC;IACpB,KAAK,EAAE;IACP,WAAW,CACV,6EAA6E,CAC9E;;GACY,UAAU,CAiFtB"}

package/lib/esm/namespaces/models/effective-permission.model.js

@@ -7,6 +7,7 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 var __metadata = (this && this.__metadata) || function (k, v) {
     if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 };
+import { description } from "@decaf-ts/decoration";
 import { column, createdAt, manyToOne, pk, table, uuid } from "@decaf-ts/core";
 import { model, option, required, type as typeOf } from "@decaf-ts/decorator-validation";
 import { ScopeKind, ScopeKindOptions } from "./../types.js";
@@ -78,6 +79,7 @@ __decorate([
     __metadata("design:type", Date)
 ], EffectivePermission.prototype, "createdAt", void 0);
 EffectivePermission = __decorate([
+    description("Materialized effective permission granted to a principal within a scope"),
     table("effective_permissions"),
     model(),
     __metadata("design:paramtypes", [Object])

package/lib/esm/namespaces/models/effective-permission.model.js.map

@@ -1 +1 @@
-{"version":3,"file":"effective-permission.model.js","sourceRoot":"","sources":["../../../../src/namespaces/models/effective-permission.model.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAC/E,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,IAAI,MAAM,EAAE,MAAM,gCAAgC,CAAC;AACzF,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,sBAAiB;AACvD,OAAO,EAAE,qBAAqB,EAAE,sBAAiB;AACjD,OAAO,EAAE,kBAAkB,EAAE,iCAA8B;AAC3D,OAAO,EAAE,MAAM,EAAE,0BAAuB;AACxC,OAAO,EAAE,SAAS,EAAE,6BAA0B;AAIvC,IAAM,mBAAmB,GAAzB,MAAM,mBAAoB,SAAQ,kBAAkB;IACzD,YAAY,IAAc;QACxB,KAAK,CAAC,IAAI,CAAC,CAAC;IACd,CAAC;CAiBF,CAAA;AAf+B;IAA7B,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAAE,IAAI,EAAE;;+CAAa;AAG1C;IAFC,SAAS,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,qBAAqB,EAAE,KAAK,EAAE,SAAS,EAAE,iCAAiC,CAAC;IACnG,QAAQ,EAAE;;mDACc;AAGzB;IAFC,SAAS,CAAC,GAAG,EAAE,CAAC,SAAS,EAAE,qBAAqB,EAAE,KAAK,EAAE,SAAS,EAAE,oCAAoC,CAAC;IACzG,QAAQ,EAAE;;sDACoB;AACO;IAArC,QAAQ,EAAE;IAAE,MAAM,CAAC,MAAM,CAAC;IAAE,MAAM,EAAE;;0DAAwB;AACG;IAA/D,QAAQ,EAAE;IAAE,MAAM,CAAC,MAAM,CAAC;IAAE,MAAM,CAAC,gBAAgB,CAAC;IAAE,MAAM,EAAE;;sDAAuB;AAChD;IAArC,QAAQ,EAAE;IAAE,MAAM,CAAC,MAAM,CAAC;IAAE,MAAM,EAAE;;oDAAkB;AACjB;IAArC,QAAQ,EAAE;IAAE,MAAM,CAAC,MAAM,CAAC;IAAE,MAAM,EAAE;;uDAAqB;AACpB;IAArC,QAAQ,EAAE;IAAE,MAAM,CAAC,MAAM,CAAC;IAAE,MAAM,EAAE;;qDAAmB;AAC9C;IAAT,MAAM,EAAE;8BAAY,IAAI;qDAAC;AAChB;IAAT,MAAM,EAAE;8BAAa,IAAI;sDAAC;AACd;IAAZ,SAAS,EAAE;8BAAa,IAAI;sDAAC;AAnBnB,mBAAmB;IAF/B,KAAK,CAAC,uBAAuB,CAAC;IAC9B,KAAK,EAAE;;GACK,mBAAmB,CAoB/B"}
+{"version":3,"file":"effective-permission.model.js","sourceRoot":"","sources":["../../../../src/namespaces/models/effective-permission.model.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAC/E,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,IAAI,MAAM,EAAE,MAAM,gCAAgC,CAAC;AACzF,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,sBAAiB;AACvD,OAAO,EAAE,qBAAqB,EAAE,sBAAiB;AACjD,OAAO,EAAE,kBAAkB,EAAE,iCAA8B;AAC3D,OAAO,EAAE,MAAM,EAAE,0BAAuB;AACxC,OAAO,EAAE,SAAS,EAAE,6BAA0B;AAKvC,IAAM,mBAAmB,GAAzB,MAAM,mBAAoB,SAAQ,kBAAkB;IACzD,YAAY,IAAc;QACxB,KAAK,CAAC,IAAI,CAAC,CAAC;IACd,CAAC;CAiBF,CAAA;AAf+B;IAA7B,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAAE,IAAI,EAAE;;+CAAa;AAG1C;IAFC,SAAS,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,qBAAqB,EAAE,KAAK,EAAE,SAAS,EAAE,iCAAiC,CAAC;IACnG,QAAQ,EAAE;;mDACc;AAGzB;IAFC,SAAS,CAAC,GAAG,EAAE,CAAC,SAAS,EAAE,qBAAqB,EAAE,KAAK,EAAE,SAAS,EAAE,oCAAoC,CAAC;IACzG,QAAQ,EAAE;;sDACoB;AACO;IAArC,QAAQ,EAAE;IAAE,MAAM,CAAC,MAAM,CAAC;IAAE,MAAM,EAAE;;0DAAwB;AACG;IAA/D,QAAQ,EAAE;IAAE,MAAM,CAAC,MAAM,CAAC;IAAE,MAAM,CAAC,gBAAgB,CAAC;IAAE,MAAM,EAAE;;sDAAuB;AAChD;IAArC,QAAQ,EAAE;IAAE,MAAM,CAAC,MAAM,CAAC;IAAE,MAAM,EAAE;;oDAAkB;AACjB;IAArC,QAAQ,EAAE;IAAE,MAAM,CAAC,MAAM,CAAC;IAAE,MAAM,EAAE;;uDAAqB;AACpB;IAArC,QAAQ,EAAE;IAAE,MAAM,CAAC,MAAM,CAAC;IAAE,MAAM,EAAE;;qDAAmB;AAC9C;IAAT,MAAM,EAAE;8BAAY,IAAI;qDAAC;AAChB;IAAT,MAAM,EAAE;8BAAa,IAAI;sDAAC;AACd;IAAZ,SAAS,EAAE;8BAAa,IAAI;sDAAC;AAnBnB,mBAAmB;IAH/B,WAAW,CAAC,yEAAyE,CAAC;IACtF,KAAK,CAAC,uBAAuB,CAAC;IAC9B,KAAK,EAAE;;GACK,mBAAmB,CAoB/B"}

package/lib/esm/namespaces/models/group-membership.model.js

@@ -7,6 +7,7 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 var __metadata = (this && this.__metadata) || function (k, v) {
     if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 };
+import { description } from "@decaf-ts/decoration";
 import { column, createdAt, manyToOne, pk, table, uuid } from "@decaf-ts/core";
 import { model, required, type as typeOf } from "@decaf-ts/decorator-validation";
 import { REL_CASCADE_DEPENDENT } from "./../utils.js";
@@ -49,6 +50,7 @@ __decorate([
     __metadata("design:type", Date)
 ], GroupMembership.prototype, "createdAt", void 0);
 GroupMembership = __decorate([
+    description("Membership linking a principal to a group"),
     table("group_memberships"),
     model(),
     __metadata("design:paramtypes", [Object])

package/lib/esm/namespaces/models/group-membership.model.js.map

@@ -1 +1 @@
-{"version":3,"file":"group-membership.model.js","sourceRoot":"","sources":["../../../../src/namespaces/models/group-membership.model.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAC/E,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,IAAI,MAAM,EAAE,MAAM,gCAAgC,CAAC;AACjF,OAAO,EAAE,qBAAqB,EAAE,sBAAiB;AACjD,OAAO,EAAE,kBAAkB,EAAE,iCAA8B;AAC3D,OAAO,EAAE,MAAM,EAAE,0BAAuB;AACxC,OAAO,EAAE,KAAK,EAAE,yBAAsB;AACtC,OAAO,EAAE,SAAS,EAAE,6BAA0B;AAIvC,IAAM,eAAe,GAArB,MAAM,eAAgB,SAAQ,kBAAkB;IACrD,YAAY,IAAc;QACxB,KAAK,CAAC,IAAI,CAAC,CAAC;IACd,CAAC;CAcF,CAAA;AAZ+B;IAA7B,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAAE,IAAI,EAAE;;2CAAa;AAG1C;IAFC,SAAS,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,qBAAqB,EAAE,KAAK,EAAE,SAAS,EAAE,6BAA6B,CAAC;IAC/F,QAAQ,EAAE;;+CACc;AAGzB;IAFC,SAAS,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,qBAAqB,EAAE,KAAK,EAAE,SAAS,EAAE,4BAA4B,CAAC;IAC7F,QAAQ,EAAE;;8CACY;AAGvB;IAFC,SAAS,CAAC,GAAG,EAAE,CAAC,SAAS,EAAE,qBAAqB,EAAE,KAAK,EAAE,SAAS,EAAE,gCAAgC,CAAC;IACrG,QAAQ,EAAE;;kDACoB;AACL;IAAzB,MAAM,CAAC,MAAM,CAAC;IAAE,MAAM,EAAE;;iDAAoC;AAChD;IAAZ,SAAS,EAAE;8BAAa,IAAI;kDAAC;AAhBnB,eAAe;IAF3B,KAAK,CAAC,mBAAmB,CAAC;IAC1B,KAAK,EAAE;;GACK,eAAe,CAiB3B"}
+{"version":3,"file":"group-membership.model.js","sourceRoot":"","sources":["../../../../src/namespaces/models/group-membership.model.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAC/E,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,IAAI,MAAM,EAAE,MAAM,gCAAgC,CAAC;AACjF,OAAO,EAAE,qBAAqB,EAAE,sBAAiB;AACjD,OAAO,EAAE,kBAAkB,EAAE,iCAA8B;AAC3D,OAAO,EAAE,MAAM,EAAE,0BAAuB;AACxC,OAAO,EAAE,KAAK,EAAE,yBAAsB;AACtC,OAAO,EAAE,SAAS,EAAE,6BAA0B;AAKvC,IAAM,eAAe,GAArB,MAAM,eAAgB,SAAQ,kBAAkB;IACrD,YAAY,IAAc;QACxB,KAAK,CAAC,IAAI,CAAC,CAAC;IACd,CAAC;CAcF,CAAA;AAZ+B;IAA7B,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAAE,IAAI,EAAE;;2CAAa;AAG1C;IAFC,SAAS,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,qBAAqB,EAAE,KAAK,EAAE,SAAS,EAAE,6BAA6B,CAAC;IAC/F,QAAQ,EAAE;;+CACc;AAGzB;IAFC,SAAS,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,qBAAqB,EAAE,KAAK,EAAE,SAAS,EAAE,4BAA4B,CAAC;IAC7F,QAAQ,EAAE;;8CACY;AAGvB;IAFC,SAAS,CAAC,GAAG,EAAE,CAAC,SAAS,EAAE,qBAAqB,EAAE,KAAK,EAAE,SAAS,EAAE,gCAAgC,CAAC;IACrG,QAAQ,EAAE;;kDACoB;AACL;IAAzB,MAAM,CAAC,MAAM,CAAC;IAAE,MAAM,EAAE;;iDAAoC;AAChD;IAAZ,SAAS,EAAE;8BAAa,IAAI;kDAAC;AAhBnB,eAAe;IAH3B,WAAW,CAAC,2CAA2C,CAAC;IACxD,KAAK,CAAC,mBAAmB,CAAC;IAC1B,KAAK,EAAE;;GACK,eAAe,CAiB3B"}

package/lib/esm/namespaces/models/group.model.js

@@ -7,6 +7,7 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 var __metadata = (this && this.__metadata) || function (k, v) {
     if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 };
+import { description } from "@decaf-ts/decoration";
 import { column, createdAt, manyToOne, oneToMany, pk, table, updatedAt, uuid } from "@decaf-ts/core";
 import { model, required, type as typeOf } from "@decaf-ts/decorator-validation";
 import { REL_NULLIFY, REL_RESTRICT } from "./../utils.js";
@@ -57,6 +58,7 @@ __decorate([
     __metadata("design:type", Date)
 ], Group.prototype, "updatedAt", void 0);
 Group = __decorate([
+    description("Named group of principals within a tenant and organizational unit"),
     table("groups"),
     model(),
     __metadata("design:paramtypes", [Object])

package/lib/esm/namespaces/models/group.model.js.map

@@ -1 +1 @@
-{"version":3,"file":"group.model.js","sourceRoot":"","sources":["../../../../src/namespaces/models/group.model.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AACrG,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,IAAI,MAAM,EAAE,MAAM,gCAAgC,CAAC;AACjF,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,sBAAiB;AACrD,OAAO,EAAE,kBAAkB,EAAE,iCAA8B;AAC3D,OAAO,EAAE,MAAM,EAAE,0BAAuB;AACxC,OAAO,EAAE,OAAO,EAAE,4BAAyB;AAC3C,OAAO,EAAE,eAAe,EAAE,oCAAiC;AAIpD,IAAM,KAAK,GAAX,MAAM,KAAM,SAAQ,kBAAkB;IAC3C,YAAY,IAAc;QACxB,KAAK,CAAC,IAAI,CAAC,CAAC;IACd,CAAC;CAaF,CAAA;AAX+B;IAA7B,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAAE,IAAI,EAAE;;iCAAa;AAG1C;IAFC,SAAS,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,SAAS,EAAE,kBAAkB,CAAC;IAC3E,QAAQ,EAAE;;qCACc;AAEzB;IADC,SAAS,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE,oBAAoB,CAAC;;sCACnD;AACW;IAArC,QAAQ,EAAE;IAAE,MAAM,CAAC,MAAM,CAAC;IAAE,MAAM,EAAE;;mCAAe;AAC1B;IAAzB,MAAM,CAAC,MAAM,CAAC;IAAE,MAAM,EAAE;;uCAAoC;AACN;IAAtD,SAAS,CAAC,GAAG,EAAE,CAAC,eAAe,EAAE,YAAY,EAAE,KAAK,CAAC;;sCAAwC;AACjF;IAAZ,SAAS,EAAE;8BAAa,IAAI;wCAAC;AACjB;IAAZ,SAAS,EAAE;8BAAa,IAAI;wCAAC;AAfnB,KAAK;IAFjB,KAAK,CAAC,QAAQ,CAAC;IACf,KAAK,EAAE;;GACK,KAAK,CAgBjB"}
+{"version":3,"file":"group.model.js","sourceRoot":"","sources":["../../../../src/namespaces/models/group.model.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AACrG,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,IAAI,MAAM,EAAE,MAAM,gCAAgC,CAAC;AACjF,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,sBAAiB;AACrD,OAAO,EAAE,kBAAkB,EAAE,iCAA8B;AAC3D,OAAO,EAAE,MAAM,EAAE,0BAAuB;AACxC,OAAO,EAAE,OAAO,EAAE,4BAAyB;AAC3C,OAAO,EAAE,eAAe,EAAE,oCAAiC;AAKpD,IAAM,KAAK,GAAX,MAAM,KAAM,SAAQ,kBAAkB;IAC3C,YAAY,IAAc;QACxB,KAAK,CAAC,IAAI,CAAC,CAAC;IACd,CAAC;CAaF,CAAA;AAX+B;IAA7B,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAAE,IAAI,EAAE;;iCAAa;AAG1C;IAFC,SAAS,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,SAAS,EAAE,kBAAkB,CAAC;IAC3E,QAAQ,EAAE;;qCACc;AAEzB;IADC,SAAS,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE,oBAAoB,CAAC;;sCACnD;AACW;IAArC,QAAQ,EAAE;IAAE,MAAM,CAAC,MAAM,CAAC;IAAE,MAAM,EAAE;;mCAAe;AAC1B;IAAzB,MAAM,CAAC,MAAM,CAAC;IAAE,MAAM,EAAE;;uCAAoC;AACN;IAAtD,SAAS,CAAC,GAAG,EAAE,CAAC,eAAe,EAAE,YAAY,EAAE,KAAK,CAAC;;sCAAwC;AACjF;IAAZ,SAAS,EAAE;8BAAa,IAAI;wCAAC;AACjB;IAAZ,SAAS,EAAE;8BAAa,IAAI;wCAAC;AAfnB,KAAK;IAHjB,WAAW,CAAC,mEAAmE,CAAC;IAChF,KAAK,CAAC,QAAQ,CAAC;IACf,KAAK,EAAE;;GACK,KAAK,CAgBjB"}

package/lib/esm/namespaces/models/index.js

@@ -19,4 +19,5 @@ export * from "./protected-resource.model.js";
 export * from "./resource-grant.model.js";
 export * from "./effective-permission.model.js";
 export * from "./storage-binding.model.js";
+export * from "./credential.model.js";
 //# sourceMappingURL=index.js.map

package/lib/esm/namespaces/models/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/namespaces/models/index.ts"],"names":[],"mappings":"AAAA,yCAAsC;AACtC,kCAA+B;AAC/B,0CAAuC;AACvC,oCAAiC;AACjC,4CAAyC;AACzC,4CAAyC;AACzC,gCAA6B;AAC7B,iCAA8B;AAC9B,qCAAkC;AAClC,6CAA0C;AAC1C,+CAA4C;AAC5C,4CAAyC;AACzC,sCAAmC;AACnC,gCAA6B;AAC7B,2CAAwC;AACxC,2CAAwC;AACxC,6CAA0C;AAC1C,8CAA2C;AAC3C,0CAAuC;AACvC,gDAA6C;AAC7C,2CAAwC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/namespaces/models/index.ts"],"names":[],"mappings":"AAAA,yCAAsC;AACtC,kCAA+B;AAC/B,0CAAuC;AACvC,oCAAiC;AACjC,4CAAyC;AACzC,4CAAyC;AACzC,gCAA6B;AAC7B,iCAA8B;AAC9B,qCAAkC;AAClC,6CAA0C;AAC1C,+CAA4C;AAC5C,4CAAyC;AACzC,sCAAmC;AACnC,gCAA6B;AAC7B,2CAAwC;AACxC,2CAAwC;AACxC,6CAA0C;AAC1C,8CAA2C;AAC3C,0CAAuC;AACvC,gDAA6C;AAC7C,2CAAwC;AACxC,sCAAmC"}