@decaf-ts/integrations 0.3.5 → 0.3.7

package/lib/types/namespaces/services/tenant-membership.service.d.mts

@@ -0,0 +1,11 @@
+import { BaseModelService } from "../utils.d.mts";
+import { MembershipStatus } from "../types.d.mts";
+import { TenantMembership } from "../models/tenant-membership.model.d.mts";
+export declare class TenantMembershipService extends BaseModelService<TenantMembership> {
+    constructor();
+    addUserToTenant(tenantId: string, userId: string, status?: MembershipStatus, ...args: any[]): Promise<TenantMembership>;
+    setStatus(membershipId: string, status: MembershipStatus, ...args: any[]): Promise<TenantMembership>;
+    listUserTenants(userId: string, ...args: any[]): Promise<TenantMembership[]>;
+    listTenantUsers(tenantId: string, ...args: any[]): Promise<TenantMembership[]>;
+    removeUserFromTenant(membershipId: string, ...args: any[]): Promise<void>;
+}

package/lib/types/namespaces/services/tenant-profile.service.d.cts

@@ -0,0 +1,8 @@
+import { BaseModelService } from "../utils.d.cts";
+import { TenantProfile } from "../models/tenant-profile.model.d.cts";
+export declare class TenantProfileService extends BaseModelService<TenantProfile> {
+    constructor();
+    createProfile(tenantId: string, profileKey: string, metadata?: Record<string, unknown>, ...args: any[]): Promise<TenantProfile>;
+    listForTenant(tenantId: string, ...args: any[]): Promise<TenantProfile[]>;
+    deleteForTenant(tenantId: string, ...args: any[]): Promise<void>;
+}

package/lib/types/namespaces/services/tenant-profile.service.d.mts

@@ -0,0 +1,8 @@
+import { BaseModelService } from "../utils.d.mts";
+import { TenantProfile } from "../models/tenant-profile.model.d.mts";
+export declare class TenantProfileService extends BaseModelService<TenantProfile> {
+    constructor();
+    createProfile(tenantId: string, profileKey: string, metadata?: Record<string, unknown>, ...args: any[]): Promise<TenantProfile>;
+    listForTenant(tenantId: string, ...args: any[]): Promise<TenantProfile[]>;
+    deleteForTenant(tenantId: string, ...args: any[]): Promise<void>;
+}

package/lib/types/namespaces/services/tenant.service.d.cts

@@ -0,0 +1,12 @@
+import { BaseModelService } from "../utils.d.cts";
+import { IsolationTier, CreateTenantInput } from "../types.d.cts";
+import { Tenant } from "../models/tenant.model.d.cts";
+export declare class TenantService extends BaseModelService<Tenant> {
+    constructor();
+    createTenant(input: CreateTenantInput, ...args: any[]): Promise<Tenant>;
+    getBySlug(slug: string, ...args: any[]): Promise<Tenant>;
+    renameTenant(tenantId: string, name: string, ...args: any[]): Promise<Tenant>;
+    changeSlug(tenantId: string, slug: string, ...args: any[]): Promise<Tenant>;
+    setIsolationTier(tenantId: string, isolationTier: IsolationTier, ...args: any[]): Promise<Tenant>;
+    deleteTenantControlled(tenantId: string, ...args: any[]): Promise<void>;
+}

package/lib/types/namespaces/services/tenant.service.d.mts

@@ -0,0 +1,12 @@
+import { BaseModelService } from "../utils.d.mts";
+import { IsolationTier, CreateTenantInput } from "../types.d.mts";
+import { Tenant } from "../models/tenant.model.d.mts";
+export declare class TenantService extends BaseModelService<Tenant> {
+    constructor();
+    createTenant(input: CreateTenantInput, ...args: any[]): Promise<Tenant>;
+    getBySlug(slug: string, ...args: any[]): Promise<Tenant>;
+    renameTenant(tenantId: string, name: string, ...args: any[]): Promise<Tenant>;
+    changeSlug(tenantId: string, slug: string, ...args: any[]): Promise<Tenant>;
+    setIsolationTier(tenantId: string, isolationTier: IsolationTier, ...args: any[]): Promise<Tenant>;
+    deleteTenantControlled(tenantId: string, ...args: any[]): Promise<void>;
+}

package/lib/types/namespaces/services/user.service.d.cts

@@ -0,0 +1,11 @@
+import { BaseModelService } from "../utils.d.cts";
+import { CreateUserInput } from "../types.d.cts";
+import { User } from "../models/user.model.d.cts";
+export declare class UserService extends BaseModelService<User> {
+    constructor();
+    createUser(input: CreateUserInput, ...args: any[]): Promise<User>;
+    getByEmail(email: string, ...args: any[]): Promise<User>;
+    updateDisplayName(userId: string, displayName: string, ...args: any[]): Promise<User>;
+    updateEmail(userId: string, email: string | undefined, ...args: any[]): Promise<User>;
+    updatePhone(userId: string, phone: string | undefined, ...args: any[]): Promise<User>;
+}

package/lib/types/namespaces/services/user.service.d.mts

@@ -0,0 +1,11 @@
+import { BaseModelService } from "../utils.d.mts";
+import { CreateUserInput } from "../types.d.mts";
+import { User } from "../models/user.model.d.mts";
+export declare class UserService extends BaseModelService<User> {
+    constructor();
+    createUser(input: CreateUserInput, ...args: any[]): Promise<User>;
+    getByEmail(email: string, ...args: any[]): Promise<User>;
+    updateDisplayName(userId: string, displayName: string, ...args: any[]): Promise<User>;
+    updateEmail(userId: string, email: string | undefined, ...args: any[]): Promise<User>;
+    updatePhone(userId: string, phone: string | undefined, ...args: any[]): Promise<User>;
+}

package/lib/types/namespaces/types.d.cts

@@ -0,0 +1,230 @@
+export declare enum IsolationTier {
+    Pooled = "pooled",
+    Bridge = "bridge",
+    Silo = "silo"
+}
+export declare enum MembershipStatus {
+    Invited = "invited",
+    Active = "active",
+    Suspended = "suspended",
+    Removed = "removed"
+}
+export declare enum PrincipalKind {
+    User = "user",
+    Group = "group",
+    ServiceAccount = "service_account",
+    Agent = "agent",
+    ApiKey = "api_key"
+}
+export declare enum ScopeKind {
+    Tenant = "tenant",
+    OrgUnit = "org_unit",
+    Resource = "resource"
+}
+export declare enum PermissionCategory {
+    Admin = "admin",
+    ContentRead = "content_read",
+    ContentWrite = "content_write",
+    Memory = "memory",
+    Graph = "graph",
+    Vector = "vector",
+    Export = "export",
+    Billing = "billing",
+    Audit = "audit",
+    Security = "security",
+    Data = "data",
+    Automation = "automation"
+}
+export declare enum ResourceVisibility {
+    Private = "private",
+    ResourceAcl = "resource_acl",
+    OrgUnit = "org_unit",
+    OrgSubtree = "org_subtree",
+    Tenant = "tenant"
+}
+export declare enum StorageKind {
+    Postgres = "postgres",
+    Arango = "arango",
+    Qdrant = "qdrant",
+    ObjectStorage = "object_storage"
+}
+export declare enum StorageBindingKind {
+    Shared = "shared",
+    Dedicated = "dedicated"
+}
+export declare const IsolationTierOptions: IsolationTier[];
+export declare const MembershipStatusOptions: MembershipStatus[];
+export declare const PrincipalKindOptions: PrincipalKind[];
+export declare const ScopeKindOptions: ScopeKind[];
+export declare const PermissionCategoryOptions: PermissionCategory[];
+export declare const ResourceVisibilityOptions: ResourceVisibility[];
+export declare const StorageKindOptions: StorageKind[];
+export declare const StorageBindingKindOptions: StorageBindingKind[];
+export type TxArgs = any[];
+export interface CreateTenantInput {
+    slug: string;
+    name: string;
+    isolationTier?: IsolationTier;
+    profileKey?: string;
+    profileMetadata?: Record<string, unknown>;
+}
+export interface CreateUserInput {
+    email?: string;
+    phone?: string;
+    displayName: string;
+}
+export interface CreateOrgUnitInput {
+    tenantId: string;
+    parentOrgUnitId?: string;
+    name: string;
+    metadata?: Record<string, unknown>;
+    profileKey?: string;
+    profileMetadata?: Record<string, unknown>;
+}
+export interface CreateRoleInput {
+    tenantId?: string;
+    key: string;
+    name: string;
+    description?: string;
+    metadata?: Record<string, unknown>;
+}
+export interface CreatePermissionInput {
+    key: string;
+    category: PermissionCategory;
+    description?: string;
+}
+export interface AssignRoleInput {
+    tenantId: string;
+    principalId: string;
+    roleId: string;
+    scopeKind: ScopeKind;
+    scopeId: string;
+    inheritDown?: boolean;
+    startsAt?: Date;
+    expiresAt?: Date;
+    conditions?: Record<string, unknown>;
+}
+export interface RegisterResourceInput {
+    tenantId: string;
+    orgUnitId: string;
+    resourceType: string;
+    resourceId: string;
+    visibility: ResourceVisibility;
+    ownerPrincipalId?: string;
+    sensitivity?: string;
+    metadata?: Record<string, unknown>;
+}
+export interface GrantResourceInput {
+    tenantId: string;
+    resourceId: string;
+    principalId: string;
+    permissionKey: string;
+    startsAt?: Date;
+    expiresAt?: Date;
+    conditions?: Record<string, unknown>;
+    createdByPrincipalId?: string;
+}
+export interface CanAccessInput {
+    tenantId: string;
+    principalId: string;
+    permissionKey: string;
+    resourceProtectedId?: string;
+    scopeKind?: ScopeKind;
+    scopeId?: string;
+    at?: Date;
+}
+export interface AccessContext {
+    tenantId: string;
+    principalId: string;
+    permissionsByScope: Record<string, string[]>;
+    allowedOrgUnitIdsByPermission: Record<string, string[]>;
+    resourceGrants: Array<{
+        resourceId: string;
+        permissionKey: string;
+    }>;
+}
+export interface ArangoAuthContext {
+    tenantId: string;
+    principalId: string;
+    permissionKey: string;
+    allowedOrgUnitIds: string[];
+    allowedResourceIds: string[];
+}
+export interface QdrantAuthFilter {
+    must: Array<Record<string, unknown>>;
+    must_not?: Array<Record<string, unknown>>;
+}
+export interface CreateStorageBindingInput {
+    tenantId: string;
+    storageKind: StorageKind;
+    bindingKind: StorageBindingKind;
+    bindingKey: string;
+    region: string;
+    config?: Record<string, unknown>;
+}
+export interface BootstrapPermission {
+    key: string;
+    category: PermissionCategory;
+    description?: string;
+}
+export interface BootstrapRole {
+    key: string;
+    name: string;
+    description?: string;
+    permissionKeys: string[];
+}
+export interface BootstrapOrgUnit {
+    name: string;
+    profileKey?: string;
+    metadata?: Record<string, unknown>;
+    children?: BootstrapOrgUnit[];
+}
+export interface BootstrapTemplate {
+    tenant: CreateTenantInput;
+    rootOrgUnit: BootstrapOrgUnit;
+    permissions: BootstrapPermission[];
+    roles: BootstrapRole[];
+    ownerUser: CreateUserInput;
+    ownerRoleKey: string;
+}
+export interface ResourceSnapshot {
+    id: string;
+    tenantId: string;
+    orgUnitId: string;
+    resourceType: string;
+    resourceId: string;
+    visibility: ResourceVisibility;
+    ownerPrincipalId?: string;
+    sensitivity?: string;
+    metadata?: Record<string, unknown>;
+}
+export interface GrantSnapshot {
+    id: string;
+    tenantId: string;
+    resourceId: string;
+    principalId: string;
+    permissionKey: string;
+    startsAt?: Date;
+    expiresAt?: Date;
+    conditions?: Record<string, unknown>;
+    createdByPrincipalId?: string;
+}
+export interface EffectivePermissionSnapshot {
+    id: string;
+    tenantId: string;
+    principalId: string;
+    permissionKey: string;
+    scopeKind: ScopeKind;
+    scopeId: string;
+    sourceKind: string;
+    sourceId: string;
+    startsAt?: Date;
+    expiresAt?: Date;
+}
+export interface AuthzDataSources {
+    loadResource?: (tenantId: string, protectedResourceId: string) => Promise<ResourceSnapshot | undefined>;
+    listResourceGrants?: (tenantId: string, protectedResourceId: string) => Promise<GrantSnapshot[]>;
+    listPrincipalGrants?: (tenantId: string, principalId: string) => Promise<GrantSnapshot[]>;
+    listEffectivePermissions?: (tenantId: string, principalId: string) => Promise<EffectivePermissionSnapshot[]>;
+    listEffectivePermissionsForScope?: (tenantId: string, scopeKind: ScopeKind, scopeId: string) => Promise<EffectivePermissionSnapshot[]>;
+}

package/lib/types/namespaces/types.d.mts

@@ -0,0 +1,230 @@
+export declare enum IsolationTier {
+    Pooled = "pooled",
+    Bridge = "bridge",
+    Silo = "silo"
+}
+export declare enum MembershipStatus {
+    Invited = "invited",
+    Active = "active",
+    Suspended = "suspended",
+    Removed = "removed"
+}
+export declare enum PrincipalKind {
+    User = "user",
+    Group = "group",
+    ServiceAccount = "service_account",
+    Agent = "agent",
+    ApiKey = "api_key"
+}
+export declare enum ScopeKind {
+    Tenant = "tenant",
+    OrgUnit = "org_unit",
+    Resource = "resource"
+}
+export declare enum PermissionCategory {
+    Admin = "admin",
+    ContentRead = "content_read",
+    ContentWrite = "content_write",
+    Memory = "memory",
+    Graph = "graph",
+    Vector = "vector",
+    Export = "export",
+    Billing = "billing",
+    Audit = "audit",
+    Security = "security",
+    Data = "data",
+    Automation = "automation"
+}
+export declare enum ResourceVisibility {
+    Private = "private",
+    ResourceAcl = "resource_acl",
+    OrgUnit = "org_unit",
+    OrgSubtree = "org_subtree",
+    Tenant = "tenant"
+}
+export declare enum StorageKind {
+    Postgres = "postgres",
+    Arango = "arango",
+    Qdrant = "qdrant",
+    ObjectStorage = "object_storage"
+}
+export declare enum StorageBindingKind {
+    Shared = "shared",
+    Dedicated = "dedicated"
+}
+export declare const IsolationTierOptions: IsolationTier[];
+export declare const MembershipStatusOptions: MembershipStatus[];
+export declare const PrincipalKindOptions: PrincipalKind[];
+export declare const ScopeKindOptions: ScopeKind[];
+export declare const PermissionCategoryOptions: PermissionCategory[];
+export declare const ResourceVisibilityOptions: ResourceVisibility[];
+export declare const StorageKindOptions: StorageKind[];
+export declare const StorageBindingKindOptions: StorageBindingKind[];
+export type TxArgs = any[];
+export interface CreateTenantInput {
+    slug: string;
+    name: string;
+    isolationTier?: IsolationTier;
+    profileKey?: string;
+    profileMetadata?: Record<string, unknown>;
+}
+export interface CreateUserInput {
+    email?: string;
+    phone?: string;
+    displayName: string;
+}
+export interface CreateOrgUnitInput {
+    tenantId: string;
+    parentOrgUnitId?: string;
+    name: string;
+    metadata?: Record<string, unknown>;
+    profileKey?: string;
+    profileMetadata?: Record<string, unknown>;
+}
+export interface CreateRoleInput {
+    tenantId?: string;
+    key: string;
+    name: string;
+    description?: string;
+    metadata?: Record<string, unknown>;
+}
+export interface CreatePermissionInput {
+    key: string;
+    category: PermissionCategory;
+    description?: string;
+}
+export interface AssignRoleInput {
+    tenantId: string;
+    principalId: string;
+    roleId: string;
+    scopeKind: ScopeKind;
+    scopeId: string;
+    inheritDown?: boolean;
+    startsAt?: Date;
+    expiresAt?: Date;
+    conditions?: Record<string, unknown>;
+}
+export interface RegisterResourceInput {
+    tenantId: string;
+    orgUnitId: string;
+    resourceType: string;
+    resourceId: string;
+    visibility: ResourceVisibility;
+    ownerPrincipalId?: string;
+    sensitivity?: string;
+    metadata?: Record<string, unknown>;
+}
+export interface GrantResourceInput {
+    tenantId: string;
+    resourceId: string;
+    principalId: string;
+    permissionKey: string;
+    startsAt?: Date;
+    expiresAt?: Date;
+    conditions?: Record<string, unknown>;
+    createdByPrincipalId?: string;
+}
+export interface CanAccessInput {
+    tenantId: string;
+    principalId: string;
+    permissionKey: string;
+    resourceProtectedId?: string;
+    scopeKind?: ScopeKind;
+    scopeId?: string;
+    at?: Date;
+}
+export interface AccessContext {
+    tenantId: string;
+    principalId: string;
+    permissionsByScope: Record<string, string[]>;
+    allowedOrgUnitIdsByPermission: Record<string, string[]>;
+    resourceGrants: Array<{
+        resourceId: string;
+        permissionKey: string;
+    }>;
+}
+export interface ArangoAuthContext {
+    tenantId: string;
+    principalId: string;
+    permissionKey: string;
+    allowedOrgUnitIds: string[];
+    allowedResourceIds: string[];
+}
+export interface QdrantAuthFilter {
+    must: Array<Record<string, unknown>>;
+    must_not?: Array<Record<string, unknown>>;
+}
+export interface CreateStorageBindingInput {
+    tenantId: string;
+    storageKind: StorageKind;
+    bindingKind: StorageBindingKind;
+    bindingKey: string;
+    region: string;
+    config?: Record<string, unknown>;
+}
+export interface BootstrapPermission {
+    key: string;
+    category: PermissionCategory;
+    description?: string;
+}
+export interface BootstrapRole {
+    key: string;
+    name: string;
+    description?: string;
+    permissionKeys: string[];
+}
+export interface BootstrapOrgUnit {
+    name: string;
+    profileKey?: string;
+    metadata?: Record<string, unknown>;
+    children?: BootstrapOrgUnit[];
+}
+export interface BootstrapTemplate {
+    tenant: CreateTenantInput;
+    rootOrgUnit: BootstrapOrgUnit;
+    permissions: BootstrapPermission[];
+    roles: BootstrapRole[];
+    ownerUser: CreateUserInput;
+    ownerRoleKey: string;
+}
+export interface ResourceSnapshot {
+    id: string;
+    tenantId: string;
+    orgUnitId: string;
+    resourceType: string;
+    resourceId: string;
+    visibility: ResourceVisibility;
+    ownerPrincipalId?: string;
+    sensitivity?: string;
+    metadata?: Record<string, unknown>;
+}
+export interface GrantSnapshot {
+    id: string;
+    tenantId: string;
+    resourceId: string;
+    principalId: string;
+    permissionKey: string;
+    startsAt?: Date;
+    expiresAt?: Date;
+    conditions?: Record<string, unknown>;
+    createdByPrincipalId?: string;
+}
+export interface EffectivePermissionSnapshot {
+    id: string;
+    tenantId: string;
+    principalId: string;
+    permissionKey: string;
+    scopeKind: ScopeKind;
+    scopeId: string;
+    sourceKind: string;
+    sourceId: string;
+    startsAt?: Date;
+    expiresAt?: Date;
+}
+export interface AuthzDataSources {
+    loadResource?: (tenantId: string, protectedResourceId: string) => Promise<ResourceSnapshot | undefined>;
+    listResourceGrants?: (tenantId: string, protectedResourceId: string) => Promise<GrantSnapshot[]>;
+    listPrincipalGrants?: (tenantId: string, principalId: string) => Promise<GrantSnapshot[]>;
+    listEffectivePermissions?: (tenantId: string, principalId: string) => Promise<EffectivePermissionSnapshot[]>;
+    listEffectivePermissionsForScope?: (tenantId: string, scopeKind: ScopeKind, scopeId: string) => Promise<EffectivePermissionSnapshot[]>;
+}

package/lib/types/namespaces/utils.d.cts

@@ -0,0 +1,68 @@
+import { Cascade, ModelService, Repository } from "@decaf-ts/core";
+import { Model } from "@decaf-ts/decorator-validation";
+import { AccessContext, ArangoAuthContext, EffectivePermissionSnapshot, GrantSnapshot, QdrantAuthFilter } from "./types.d.cts";
+export declare const REL_RESTRICT: {
+    readonly update: Cascade.NONE;
+    readonly delete: Cascade.NONE;
+    readonly nullable: false;
+};
+export declare const REL_NULLIFY: {
+    readonly update: Cascade.NONE;
+    readonly delete: Cascade.NONE;
+    readonly nullable: true;
+};
+export declare const REL_CASCADE_DEPENDENT: {
+    readonly update: Cascade.CASCADE;
+    readonly delete: Cascade.CASCADE;
+    readonly nullable: false;
+};
+export declare const REL_CASCADE_INSERT_UPDATE: {
+    readonly update: Cascade.CASCADE;
+    readonly delete: Cascade.NONE;
+    readonly nullable: false;
+};
+export declare function buildArangoContext(options: {
+    tenantId: string;
+    principalId: string;
+    permissionKey: string;
+    allowedOrgUnitIds: string[];
+    allowedResourceIds: string[];
+}): ArangoAuthContext;
+export declare function buildQdrantFilter(options: {
+    tenantId: string;
+    principalId: string;
+    permissionKey: string;
+    allowedOrgUnitIds: string[];
+    allowedResourceIds: string[];
+}): QdrantAuthFilter;
+export declare function nowIso(): Date;
+export declare function asArray<T>(value: T[] | undefined): T[];
+export declare function sameTenant(rowTenant: unknown, tenantId: string): boolean;
+export declare function relationMatch(value: unknown, target: string | undefined): boolean;
+export declare function lowerSlug(value: string): string;
+export declare function isTimeValid(at: Date | undefined, startsAt?: Date, expiresAt?: Date): boolean;
+export declare function buildAccessContext(options: {
+    tenantId: string;
+    principalId: string;
+    permissions: EffectivePermissionSnapshot[];
+    grants: GrantSnapshot[];
+}): AccessContext;
+export declare abstract class BaseModelService<M extends Model<boolean> & {
+    id: string;
+}> extends ModelService<M, Repository<M, any>> {
+    protected constructor(clazz: new () => M);
+    protected newModel<T>(clazz: new () => T, data: Partial<T>): T;
+    create(data: Partial<M>, ...args: any[]): Promise<M>;
+    createOne(data: Partial<M>, ...args: any[]): Promise<M>;
+    getById(id: string, ...args: any[]): Promise<M>;
+    updateOne(id: string, patch: Partial<M>, ...args: any[]): Promise<M>;
+    deleteById(id: string, ...args: any[]): Promise<void>;
+    findOneBy<K extends keyof M & string>(key: K, value: M[K], ...args: any[]): Promise<M>;
+    findManyBy<K extends keyof M & string>(key: K, value: M[K], ...args: any[]): Promise<M[]>;
+    listAll(...args: any[]): Promise<M[]>;
+}
+export declare function id(): string;
+export declare function relationId(value: string | {
+    id: string;
+}): string;
+export { AuthorizationError, transactional } from "@decaf-ts/core";

package/lib/types/namespaces/utils.d.mts

@@ -0,0 +1,68 @@
+import { Cascade, ModelService, Repository } from "@decaf-ts/core";
+import { Model } from "@decaf-ts/decorator-validation";
+import { AccessContext, ArangoAuthContext, EffectivePermissionSnapshot, GrantSnapshot, QdrantAuthFilter } from "./types.d.mts";
+export declare const REL_RESTRICT: {
+    readonly update: Cascade.NONE;
+    readonly delete: Cascade.NONE;
+    readonly nullable: false;
+};
+export declare const REL_NULLIFY: {
+    readonly update: Cascade.NONE;
+    readonly delete: Cascade.NONE;
+    readonly nullable: true;
+};
+export declare const REL_CASCADE_DEPENDENT: {
+    readonly update: Cascade.CASCADE;
+    readonly delete: Cascade.CASCADE;
+    readonly nullable: false;
+};
+export declare const REL_CASCADE_INSERT_UPDATE: {
+    readonly update: Cascade.CASCADE;
+    readonly delete: Cascade.NONE;
+    readonly nullable: false;
+};
+export declare function buildArangoContext(options: {
+    tenantId: string;
+    principalId: string;
+    permissionKey: string;
+    allowedOrgUnitIds: string[];
+    allowedResourceIds: string[];
+}): ArangoAuthContext;
+export declare function buildQdrantFilter(options: {
+    tenantId: string;
+    principalId: string;
+    permissionKey: string;
+    allowedOrgUnitIds: string[];
+    allowedResourceIds: string[];
+}): QdrantAuthFilter;
+export declare function nowIso(): Date;
+export declare function asArray<T>(value: T[] | undefined): T[];
+export declare function sameTenant(rowTenant: unknown, tenantId: string): boolean;
+export declare function relationMatch(value: unknown, target: string | undefined): boolean;
+export declare function lowerSlug(value: string): string;
+export declare function isTimeValid(at: Date | undefined, startsAt?: Date, expiresAt?: Date): boolean;
+export declare function buildAccessContext(options: {
+    tenantId: string;
+    principalId: string;
+    permissions: EffectivePermissionSnapshot[];
+    grants: GrantSnapshot[];
+}): AccessContext;
+export declare abstract class BaseModelService<M extends Model<boolean> & {
+    id: string;
+}> extends ModelService<M, Repository<M, any>> {
+    protected constructor(clazz: new () => M);
+    protected newModel<T>(clazz: new () => T, data: Partial<T>): T;
+    create(data: Partial<M>, ...args: any[]): Promise<M>;
+    createOne(data: Partial<M>, ...args: any[]): Promise<M>;
+    getById(id: string, ...args: any[]): Promise<M>;
+    updateOne(id: string, patch: Partial<M>, ...args: any[]): Promise<M>;
+    deleteById(id: string, ...args: any[]): Promise<void>;
+    findOneBy<K extends keyof M & string>(key: K, value: M[K], ...args: any[]): Promise<M>;
+    findManyBy<K extends keyof M & string>(key: K, value: M[K], ...args: any[]): Promise<M[]>;
+    listAll(...args: any[]): Promise<M[]>;
+}
+export declare function id(): string;
+export declare function relationId(value: string | {
+    id: string;
+}): string;
+export { AuthorizationError, transactional } from "@decaf-ts/core";

package/lib/types/nest/authService.d.cts

@@ -33,6 +33,7 @@ export declare class AuthService {
     private readonly excludedClients;
     private jwks;
     constructor(options?: AuthServiceOptions);
+    isTokenVerificationEnabled(): boolean;
     getTokenPayload(jwt: string): KeycloakAccessTokenPayload | null;
     getRoles(jwt: string): string[];
     getUser(jwt: string): KeycloakUser | undefined;