@decaf-ts/integrations 0.4.0 → 0.4.1-0

package/lib/esm/nest/keycloakAuthHandler.js

@@ -1,45 +1,84 @@
-import { AuthorizationError } from "@decaf-ts/core";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+/**
+ * @module integrations/nest/keycloakAuthHandler
+ * @summary Keycloak request auth handler.
+ * @description Translates Keycloak JWT payloads into Decaf-friendly auth data.
+ * The base implementation handles the request-to-context plumbing, logger binding,
+ * and role checks. Namespace extraction is intentionally split into a dedicated
+ * subclass so provider-specific scope handling can be swapped independently.
+ */
+import { AuthorizationError, service } from "@decaf-ts/core";
+import { InternalError } from "@decaf-ts/db-decorators";
 import { AuthHandler } from "@decaf-ts/for-http/server";
-import { AuthService } from "./authService.js";
-import { getRealmFromIssuer, getTokenPayload, extractKeycloakRoles, getClientRoles, } from "./utils.js";
+import { JwtService } from "@decaf-ts/crypto/integration/services/jwt";
+import { extractKeycloakRoles, extractKeycloakNamespaces, getRealmFromIssuer, } from "./utils.js";
 export class KeycloakAuthHandler extends AuthHandler {
-    /**
-     * @param authService  An {@link AuthService} configured with JWKS verification
-     *                     options.  When omitted a default decode-only service is
-     *                     used.
-     * @param authServiceOptions  Convenience: if `authService` is omitted, these
-     *                     options are used to construct one.
-     */
-    constructor(authService, authServiceOptions) {
+    constructor() {
         super();
-        this.authService =
-            authService ?? new AuthService(authServiceOptions ?? {});
     }
-    extractFromAuth(ctx) {
-        const request = ctx.switchToHttp().getRequest();
+    jwt() {
+        if (!this.jwtService) {
+            throw new InternalError("JwtService is not available. Make sure the handler is created through Decaf service injection or assign a test double explicitly.");
+        }
+        return this.jwtService;
+    }
+    requestFromContext(ctx) {
+        return ctx.switchToHttp().getRequest();
+    }
+    isPublicRequest(request) {
+        return isPublicRoute(request);
+    }
+    parseFromRequest(request) {
         if (isPublicRoute(request)) {
             return { roles: [], token: "", isPublic: true };
         }
         const token = getToken(request);
         if (!token)
             throw new AuthorizationError("Token not found");
-        // Decode only — validation happens in `validate`
-        const payload = getTokenPayload(token);
+        const payload = this.jwt().decodePayload(token);
+        if (!payload)
+            throw new AuthorizationError("Invalid token");
         const roles = extractKeycloakRoles(payload);
-        const organization = resolveOrganization(payload, token);
+        const organization = payload.aud || payload.azp || getRealmFromIssuer(token);
         const user = payload?.email ?? payload?.preferred_username;
         return { user, organization, roles, token, isPublic: false };
     }
-    /**
-     * Validates the JWT against the Keycloak instance (signature, expiry, etc.)
-     * via {@link AuthService.assertValidToken}, then delegates to the base class
-     * for route-level and model-level role checks. Skips entirely for public routes.
-     */
-    async validate(data, routeRoles, model, ...args) {
+    extractFromRequest(request) {
+        return this.parseFromRequest(request);
+    }
+    async validateAuth(data, _request) {
         if (data.isPublic)
             return;
-        await this.authService.assertValidToken(data.token);
-        await super.validate(data, routeRoles, model, ...args);
+        if (!data.token)
+            throw new AuthorizationError("Token not found");
+        await this.jwt().decodeAuthToken(data.token);
+    }
+}
+__decorate([
+    service(JwtService),
+    __metadata("design:type", JwtService)
+], KeycloakAuthHandler.prototype, "jwtService", void 0);
+/**
+ * Keycloak handler variant that also extracts namespace scopes from the token.
+ */
+export class KeycloakNamespaceAuthHandler extends KeycloakAuthHandler {
+    parseFromRequest(request) {
+        const data = super.parseFromRequest(request);
+        if (data.isPublic)
+            return data;
+        const payload = this.jwt().decodePayload(data.token);
+        return {
+            ...data,
+            namespaces: extractKeycloakNamespaces(payload),
+        };
     }
 }
 function isPublicRoute(req) {
@@ -54,12 +93,5 @@ function getToken(req) {
         return undefined;
     return token.startsWith("Bearer ") ? token.slice("Bearer ".length) : token;
 }
-function resolveOrganization(payload, token) {
-    if (payload?.aud)
-        return payload.aud;
-    if (payload?.azp)
-        return payload.azp;
-    return getRealmFromIssuer(token);
-}
-export { getClientRoles };
-//# sourceMappingURL=keycloakAuthHandler.js.map
+export { getClientRoles } from "./utils.js";
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoia2V5Y2xvYWtBdXRoSGFuZGxlci5qcyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uLy4uLy4uL3NyYy9uZXN0L2tleWNsb2FrQXV0aEhhbmRsZXIudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7Ozs7Ozs7O0FBQUE7Ozs7Ozs7R0FPRztBQUNILE9BQU8sRUFBRSxrQkFBa0IsRUFBRSxPQUFPLEVBQUUsTUFBTSxnQkFBZ0IsQ0FBQztBQUM3RCxPQUFPLEVBQUUsYUFBYSxFQUFFLE1BQU0seUJBQXlCLENBQUM7QUFDeEQsT0FBTyxFQUFFLFdBQVcsRUFBWSxNQUFNLDJCQUEyQixDQUFDO0FBRWxFLE9BQU8sRUFBRSxVQUFVLEVBQUUsTUFBTSwyQ0FBMkMsQ0FBQztBQU92RSxPQUFPLEVBQ0wsb0JBQW9CLEVBQ3BCLHlCQUF5QixFQUN6QixrQkFBa0IsR0FDbkIsbUJBQWdCO0FBWWpCLE1BQU0sT0FBTyxtQkFBb0IsU0FBUSxXQUl4QztJQUNDO1FBQ0UsS0FBSyxFQUFFLENBQUM7SUFDVixDQUFDO0lBS1MsR0FBRztRQUNYLElBQUksQ0FBQyxJQUFJLENBQUMsVUFBVSxFQUFFLENBQUM7WUFDckIsTUFBTSxJQUFJLGFBQWEsQ0FDckIsbUlBQW1JLENBQ3BJLENBQUM7UUFDSixDQUFDO1FBQ0QsT0FBTyxJQUFJLENBQUMsVUFBVSxDQUFDO0lBQ3pCLENBQUM7SUFFUyxrQkFBa0IsQ0FBQyxHQUE2QjtRQUN4RCxPQUFPLEdBQUcsQ0FBQyxZQUFZLEVBQUUsQ0FBQyxVQUFVLEVBQW1CLENBQUM7SUFDMUQsQ0FBQztJQUVrQixlQUFlLENBQUMsT0FBd0I7UUFDekQsT0FBTyxhQUFhLENBQUMsT0FBTyxDQUFDLENBQUM7SUFDaEMsQ0FBQztJQUVTLGdCQUFnQixDQUFDLE9BQXdCO1FBQ2pELElBQUksYUFBYSxDQUFDLE9BQU8sQ0FBQyxFQUFFLENBQUM7WUFDM0IsT0FBTyxFQUFFLEtBQUssRUFBRSxFQUFFLEVBQUUsS0FBSyxFQUFFLEVBQUUsRUFBRSxRQUFRLEVBQUUsSUFBSSxFQUFFLENBQUM7UUFDbEQsQ0FBQztRQUVELE1BQU0sS0FBSyxHQUFHLFFBQVEsQ0FBQyxPQUFPLENBQUMsQ0FBQztRQUNoQyxJQUFJLENBQUMsS0FBSztZQUFFLE1BQU0sSUFBSSxrQkFBa0IsQ0FBQyxpQkFBaUIsQ0FBQyxDQUFDO1FBRTVELE1BQU0sT0FBTyxHQUFHLElBQUksQ0FBQyxHQUFHLEVBQUUsQ0FBQyxhQUFhLENBQTZCLEtBQUssQ0FBQyxDQUFDO1FBQzVFLElBQUksQ0FBQyxPQUFPO1lBQUUsTUFBTSxJQUFJLGtCQUFrQixDQUFDLGVBQWUsQ0FBQyxDQUFDO1FBRTVELE1BQU0sS0FBSyxHQUFHLG9CQUFvQixDQUFDLE9BQU8sQ0FBQyxDQUFDO1FBQzVDLE1BQU0sWUFBWSxHQUFHLE9BQU8sQ0FBQyxHQUFHLElBQUksT0FBTyxDQUFDLEdBQUcsSUFBSSxrQkFBa0IsQ0FBQyxLQUFLLENBQUMsQ0FBQztRQUM3RSxNQUFNLElBQUksR0FBRyxPQUFPLEVBQUUsS0FBSyxJQUFJLE9BQU8sRUFBRSxrQkFBa0IsQ0FBQztRQUUzRCxPQUFPLEVBQUUsSUFBSSxFQUFFLFlBQVksRUFBRSxLQUFLLEVBQUUsS0FBSyxFQUFFLFFBQVEsRUFBRSxLQUFLLEVBQUUsQ0FBQztJQUMvRCxDQUFDO0lBRVMsa0JBQWtCLENBQUMsT0FBd0I7UUFDbkQsT0FBTyxJQUFJLENBQUMsZ0JBQWdCLENBQUMsT0FBTyxDQUFDLENBQUM7SUFDeEMsQ0FBQztJQUVrQixLQUFLLENBQUMsWUFBWSxDQUNuQyxJQUFzQixFQUN0QixRQUF5QjtRQUV6QixJQUFJLElBQUksQ0FBQyxRQUFRO1lBQUUsT0FBTztRQUMxQixJQUFJLENBQUMsSUFBSSxDQUFDLEtBQUs7WUFBRSxNQUFNLElBQUksa0JBQWtCLENBQUMsaUJBQWlCLENBQUMsQ0FBQztRQUNqRSxNQUFNLElBQUksQ0FBQyxHQUFHLEVBQUUsQ0FBQyxlQUFlLENBQTZCLElBQUksQ0FBQyxLQUFLLENBQUMsQ0FBQztJQUMzRSxDQUFDO0NBQ0Y7QUFqRG9CO0lBRGxCLE9BQU8sQ0FBQyxVQUFVLENBQUM7OEJBQ1ksVUFBVTt1REFBQztBQW1EN0M7O0dBRUc7QUFDSCxNQUFNLE9BQU8sNEJBQTZCLFNBQVEsbUJBQW1CO0lBQ3pELGdCQUFnQixDQUFDLE9BQXdCO1FBQ2pELE1BQU0sSUFBSSxHQUFHLEtBQUssQ0FBQyxnQkFBZ0IsQ0FBQyxPQUFPLENBQUMsQ0FBQztRQUM3QyxJQUFJLElBQUksQ0FBQyxRQUFRO1lBQUUsT0FBTyxJQUFJLENBQUM7UUFFL0IsTUFBTSxPQUFPLEdBQUcsSUFBSSxDQUFDLEdBQUcsRUFBRSxDQUFDLGFBQWEsQ0FBNkIsSUFBSSxDQUFDLEtBQUssQ0FBQyxDQUFDO1FBQ2pGLE9BQU87WUFDTCxHQUFHLElBQUk7WUFDUCxVQUFVLEVBQUUseUJBQXlCLENBQUMsT0FBTyxDQUFDO1NBQy9DLENBQUM7SUFDSixDQUFDO0NBQ0Y7QUFFRCxTQUFTLGFBQWEsQ0FBQyxHQUFvQjtJQUN6QyxJQUFJLEdBQUcsQ0FBQyxJQUFJLEVBQUUsVUFBVSxDQUFDLFNBQVMsQ0FBQztRQUFFLE9BQU8sSUFBSSxDQUFDO0lBQ2pELE9BQU8sS0FBSyxDQUFDO0FBQ2YsQ0FBQztBQUVELFNBQVMsUUFBUSxDQUFDLEdBQW9CO0lBQ3BDLE1BQU0sS0FBSyxHQUFHLENBQUMsR0FBRyxDQUFDLE9BQU8sRUFBRSxDQUFDLDZCQUE2QixDQUFDO1FBQ3pELEdBQUcsQ0FBQyxPQUFPLEVBQUUsQ0FBQyxlQUFlLENBQUMsQ0FBdUIsQ0FBQztJQUN4RCxJQUFJLENBQUMsS0FBSztRQUFFLE9BQU8sU0FBUyxDQUFDO0lBQzdCLE9BQU8sS0FBSyxDQUFDLFVBQVUsQ0FBQyxTQUFTLENBQUMsQ0FBQyxDQUFDLENBQUMsS0FBSyxDQUFDLEtBQUssQ0FBQyxTQUFTLENBQUMsTUFBTSxDQUFDLENBQUMsQ0FBQyxDQUFDLEtBQUssQ0FBQztBQUM3RSxDQUFDO0FBRUQsT0FBTyxFQUFFLGNBQWMsRUFBRSxtQkFBZ0IiLCJzb3VyY2VzQ29udGVudCI6WyIvKipcbiAqIEBtb2R1bGUgaW50ZWdyYXRpb25zL25lc3Qva2V5Y2xvYWtBdXRoSGFuZGxlclxuICogQHN1bW1hcnkgS2V5Y2xvYWsgcmVxdWVzdCBhdXRoIGhhbmRsZXIuXG4gKiBAZGVzY3JpcHRpb24gVHJhbnNsYXRlcyBLZXljbG9hayBKV1QgcGF5bG9hZHMgaW50byBEZWNhZi1mcmllbmRseSBhdXRoIGRhdGEuXG4gKiBUaGUgYmFzZSBpbXBsZW1lbnRhdGlvbiBoYW5kbGVzIHRoZSByZXF1ZXN0LXRvLWNvbnRleHQgcGx1bWJpbmcsIGxvZ2dlciBiaW5kaW5nLFxuICogYW5kIHJvbGUgY2hlY2tzLiBOYW1lc3BhY2UgZXh0cmFjdGlvbiBpcyBpbnRlbnRpb25hbGx5IHNwbGl0IGludG8gYSBkZWRpY2F0ZWRcbiAqIHN1YmNsYXNzIHNvIHByb3ZpZGVyLXNwZWNpZmljIHNjb3BlIGhhbmRsaW5nIGNhbiBiZSBzd2FwcGVkIGluZGVwZW5kZW50bHkuXG4gKi9cbmltcG9ydCB7IEF1dGhvcml6YXRpb25FcnJvciwgc2VydmljZSB9IGZyb20gXCJAZGVjYWYtdHMvY29yZVwiO1xuaW1wb3J0IHsgSW50ZXJuYWxFcnJvciB9IGZyb20gXCJAZGVjYWYtdHMvZGItZGVjb3JhdG9yc1wiO1xuaW1wb3J0IHsgQXV0aEhhbmRsZXIsIEF1dGhEYXRhIH0gZnJvbSBcIkBkZWNhZi10cy9mb3ItaHR0cC9zZXJ2ZXJcIjtcbmltcG9ydCB0eXBlIHsgQ29udGV4dCB9IGZyb20gXCJAZGVjYWYtdHMvY29yZVwiO1xuaW1wb3J0IHsgSnd0U2VydmljZSB9IGZyb20gXCJAZGVjYWYtdHMvY3J5cHRvL2ludGVncmF0aW9uL3NlcnZpY2VzL2p3dFwiO1xuXG5pbXBvcnQgdHlwZSB7XG4gIEF1dGhFeGVjdXRpb25Db250ZXh0TGlrZSxcbiAgQXV0aFJlcXVlc3RMaWtlLFxuICBLZXljbG9ha0FjY2Vzc1Rva2VuUGF5bG9hZCxcbn0gZnJvbSBcIi4vdHlwZXNcIjtcbmltcG9ydCB7XG4gIGV4dHJhY3RLZXljbG9ha1JvbGVzLFxuICBleHRyYWN0S2V5Y2xvYWtOYW1lc3BhY2VzLFxuICBnZXRSZWFsbUZyb21Jc3N1ZXIsXG59IGZyb20gXCIuL3V0aWxzXCI7XG5cbi8qKlxuICogQXV0aCBkYXRhIHJldHVybmVkIGJ5IHtAbGluayBLZXljbG9ha0F1dGhIYW5kbGVyLmV4dHJhY3RGcm9tUmVxdWVzdH0uXG4gKi9cbmV4cG9ydCBpbnRlcmZhY2UgS2V5Y2xvYWtBdXRoRGF0YSBleHRlbmRzIEF1dGhEYXRhIHtcbiAgLyoqIFRoZSByYXcgSldUIGV4dHJhY3RlZCBmcm9tIHRoZSByZXF1ZXN0LiBFbXB0eSBmb3IgcHVibGljIHJvdXRlcy4gKi9cbiAgdG9rZW46IHN0cmluZztcbiAgLyoqIFdoZXRoZXIgdGhlIHJlcXVlc3QgdGFyZ2V0cyBhIHB1YmxpYyByb3V0ZSAoc2tpcHMgdmFsaWRhdGlvbikuICovXG4gIGlzUHVibGljOiBib29sZWFuO1xufVxuXG5leHBvcnQgY2xhc3MgS2V5Y2xvYWtBdXRoSGFuZGxlciBleHRlbmRzIEF1dGhIYW5kbGVyPFxuICBBdXRoRXhlY3V0aW9uQ29udGV4dExpa2UsXG4gIENvbnRleHQsXG4gIEtleWNsb2FrQXV0aERhdGFcbj4ge1xuICBjb25zdHJ1Y3RvcigpIHtcbiAgICBzdXBlcigpO1xuICB9XG5cbiAgQHNlcnZpY2UoSnd0U2VydmljZSlcbiAgcHJvdGVjdGVkIHJlYWRvbmx5IGp3dFNlcnZpY2U/OiBKd3RTZXJ2aWNlO1xuXG4gIHByb3RlY3RlZCBqd3QoKTogSnd0U2VydmljZSB7XG4gICAgaWYgKCF0aGlzLmp3dFNlcnZpY2UpIHtcbiAgICAgIHRocm93IG5ldyBJbnRlcm5hbEVycm9yKFxuICAgICAgICBcIkp3dFNlcnZpY2UgaXMgbm90IGF2YWlsYWJsZS4gTWFrZSBzdXJlIHRoZSBoYW5kbGVyIGlzIGNyZWF0ZWQgdGhyb3VnaCBEZWNhZiBzZXJ2aWNlIGluamVjdGlvbiBvciBhc3NpZ24gYSB0ZXN0IGRvdWJsZSBleHBsaWNpdGx5LlwiXG4gICAgICApO1xuICAgIH1cbiAgICByZXR1cm4gdGhpcy5qd3RTZXJ2aWNlO1xuICB9XG5cbiAgcHJvdGVjdGVkIHJlcXVlc3RGcm9tQ29udGV4dChjdHg6IEF1dGhFeGVjdXRpb25Db250ZXh0TGlrZSk6IEF1dGhSZXF1ZXN0TGlrZSB7XG4gICAgcmV0dXJuIGN0eC5zd2l0Y2hUb0h0dHAoKS5nZXRSZXF1ZXN0PEF1dGhSZXF1ZXN0TGlrZT4oKTtcbiAgfVxuXG4gIHByb3RlY3RlZCBvdmVycmlkZSBpc1B1YmxpY1JlcXVlc3QocmVxdWVzdDogQXV0aFJlcXVlc3RMaWtlKTogYm9vbGVhbiB7XG4gICAgcmV0dXJuIGlzUHVibGljUm91dGUocmVxdWVzdCk7XG4gIH1cblxuICBwcm90ZWN0ZWQgcGFyc2VGcm9tUmVxdWVzdChyZXF1ZXN0OiBBdXRoUmVxdWVzdExpa2UpOiBLZXljbG9ha0F1dGhEYXRhIHtcbiAgICBpZiAoaXNQdWJsaWNSb3V0ZShyZXF1ZXN0KSkge1xuICAgICAgcmV0dXJuIHsgcm9sZXM6IFtdLCB0b2tlbjogXCJcIiwgaXNQdWJsaWM6IHRydWUgfTtcbiAgICB9XG5cbiAgICBjb25zdCB0b2tlbiA9IGdldFRva2VuKHJlcXVlc3QpO1xuICAgIGlmICghdG9rZW4pIHRocm93IG5ldyBBdXRob3JpemF0aW9uRXJyb3IoXCJUb2tlbiBub3QgZm91bmRcIik7XG5cbiAgICBjb25zdCBwYXlsb2FkID0gdGhpcy5qd3QoKS5kZWNvZGVQYXlsb2FkPEtleWNsb2FrQWNjZXNzVG9rZW5QYXlsb2FkPih0b2tlbik7XG4gICAgaWYgKCFwYXlsb2FkKSB0aHJvdyBuZXcgQXV0aG9yaXphdGlvbkVycm9yKFwiSW52YWxpZCB0b2tlblwiKTtcblxuICAgIGNvbnN0IHJvbGVzID0gZXh0cmFjdEtleWNsb2FrUm9sZXMocGF5bG9hZCk7XG4gICAgY29uc3Qgb3JnYW5pemF0aW9uID0gcGF5bG9hZC5hdWQgfHwgcGF5bG9hZC5henAgfHwgZ2V0UmVhbG1Gcm9tSXNzdWVyKHRva2VuKTtcbiAgICBjb25zdCB1c2VyID0gcGF5bG9hZD8uZW1haWwgPz8gcGF5bG9hZD8ucHJlZmVycmVkX3VzZXJuYW1lO1xuXG4gICAgcmV0dXJuIHsgdXNlciwgb3JnYW5pemF0aW9uLCByb2xlcywgdG9rZW4sIGlzUHVibGljOiBmYWxzZSB9O1xuICB9XG5cbiAgcHJvdGVjdGVkIGV4dHJhY3RGcm9tUmVxdWVzdChyZXF1ZXN0OiBBdXRoUmVxdWVzdExpa2UpOiBLZXljbG9ha0F1dGhEYXRhIHtcbiAgICByZXR1cm4gdGhpcy5wYXJzZUZyb21SZXF1ZXN0KHJlcXVlc3QpO1xuICB9XG5cbiAgcHJvdGVjdGVkIG92ZXJyaWRlIGFzeW5jIHZhbGlkYXRlQXV0aChcbiAgICBkYXRhOiBLZXljbG9ha0F1dGhEYXRhLFxuICAgIF9yZXF1ZXN0OiBBdXRoUmVxdWVzdExpa2VcbiAgKTogUHJvbWlzZTx2b2lkPiB7XG4gICAgaWYgKGRhdGEuaXNQdWJsaWMpIHJldHVybjtcbiAgICBpZiAoIWRhdGEudG9rZW4pIHRocm93IG5ldyBBdXRob3JpemF0aW9uRXJyb3IoXCJUb2tlbiBub3QgZm91bmRcIik7XG4gICAgYXdhaXQgdGhpcy5qd3QoKS5kZWNvZGVBdXRoVG9rZW48S2V5Y2xvYWtBY2Nlc3NUb2tlblBheWxvYWQ+KGRhdGEudG9rZW4pO1xuICB9XG59XG5cbi8qKlxuICogS2V5Y2xvYWsgaGFuZGxlciB2YXJpYW50IHRoYXQgYWxzbyBleHRyYWN0cyBuYW1lc3BhY2Ugc2NvcGVzIGZyb20gdGhlIHRva2VuLlxuICovXG5leHBvcnQgY2xhc3MgS2V5Y2xvYWtOYW1lc3BhY2VBdXRoSGFuZGxlciBleHRlbmRzIEtleWNsb2FrQXV0aEhhbmRsZXIge1xuICBwcm90ZWN0ZWQgcGFyc2VGcm9tUmVxdWVzdChyZXF1ZXN0OiBBdXRoUmVxdWVzdExpa2UpOiBLZXljbG9ha0F1dGhEYXRhIHtcbiAgICBjb25zdCBkYXRhID0gc3VwZXIucGFyc2VGcm9tUmVxdWVzdChyZXF1ZXN0KTtcbiAgICBpZiAoZGF0YS5pc1B1YmxpYykgcmV0dXJuIGRhdGE7XG5cbiAgICBjb25zdCBwYXlsb2FkID0gdGhpcy5qd3QoKS5kZWNvZGVQYXlsb2FkPEtleWNsb2FrQWNjZXNzVG9rZW5QYXlsb2FkPihkYXRhLnRva2VuKTtcbiAgICByZXR1cm4ge1xuICAgICAgLi4uZGF0YSxcbiAgICAgIG5hbWVzcGFjZXM6IGV4dHJhY3RLZXljbG9ha05hbWVzcGFjZXMocGF5bG9hZCksXG4gICAgfTtcbiAgfVxufVxuXG5mdW5jdGlvbiBpc1B1YmxpY1JvdXRlKHJlcTogQXV0aFJlcXVlc3RMaWtlKTogYm9vbGVhbiB7XG4gIGlmIChyZXEucGF0aD8uc3RhcnRzV2l0aChcIi9wdWJsaWNcIikpIHJldHVybiB0cnVlO1xuICByZXR1cm4gZmFsc2U7XG59XG5cbmZ1bmN0aW9uIGdldFRva2VuKHJlcTogQXV0aFJlcXVlc3RMaWtlKTogc3RyaW5nIHwgdW5kZWZpbmVkIHtcbiAgY29uc3QgdG9rZW4gPSAocmVxLmhlYWRlcnM/LltcIngtYXV0aC1yZXF1ZXN0LWFjY2Vzcy10b2tlblwiXSA/P1xuICAgIHJlcS5oZWFkZXJzPy5bXCJhdXRob3JpemF0aW9uXCJdKSBhcyBzdHJpbmcgfCB1bmRlZmluZWQ7XG4gIGlmICghdG9rZW4pIHJldHVybiB1bmRlZmluZWQ7XG4gIHJldHVybiB0b2tlbi5zdGFydHNXaXRoKFwiQmVhcmVyIFwiKSA/IHRva2VuLnNsaWNlKFwiQmVhcmVyIFwiLmxlbmd0aCkgOiB0b2tlbjtcbn1cblxuZXhwb3J0IHsgZ2V0Q2xpZW50Um9sZXMgfSBmcm9tIFwiLi91dGlsc1wiO1xuIl19

package/lib/esm/nest/keycloakModule.js

@@ -1,21 +1,18 @@
 /**
  * @module integrations/nest/keycloakModule
  * @summary Nest module wiring for Keycloak auth.
- * @description Exposes the Nest module setup for the integration auth service and Keycloak handler.
+ * @description Exposes the Nest module setup for the Keycloak auth handlers.
  */
-import { AuthService } from "./authService.js";
-import { KeycloakAuthHandler } from "./keycloakAuthHandler.js";
+import { KeycloakNamespaceAuthHandler } from "./keycloakAuthHandler.js";
 export class KeycloakModule {
-    constructor(authService, authHandler) {
-        this.authService = authService;
+    constructor(authHandler) {
         this.authHandler = authHandler;
     }
-    static create(options) {
-        const authService = new AuthService(options);
-        const authHandler = new KeycloakAuthHandler(authService);
-        return new KeycloakModule(authService, authHandler);
+    static create() {
+        const authHandler = new KeycloakNamespaceAuthHandler();
+        return new KeycloakModule(authHandler);
     }
 }
 export class AuthModule extends KeycloakModule {
 }
-//# sourceMappingURL=keycloakModule.js.map
+//# sourceMappingURL=data:application/json;base64,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

package/lib/esm/nest/logging.js

@@ -35,4 +35,4 @@ logParameterRegistry
         return payload.applyTheme(rendered, "app");
     },
 });
-//# sourceMappingURL=logging.js.map
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoibG9nZ2luZy5qcyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uLy4uLy4uL3NyYy9uZXN0L2xvZ2dpbmcudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6IkFBQUE7Ozs7Ozs7Ozs7R0FVRztBQUNILE9BQU8sRUFBRSxvQkFBb0IsRUFBRSxNQUFNLG1CQUFtQixDQUFDO0FBRXpELG9CQUFvQjtLQUNqQixRQUFRLENBQUM7SUFDUixHQUFHLEVBQUUsTUFBTTtJQUNYLGFBQWEsQ0FBQyxPQUFPO1FBQ25CLE9BQU8sT0FBTyxDQUFFLE9BQU8sQ0FBQyxNQUFrQyxDQUFDLElBQUksQ0FBQyxDQUFDO0lBQ25FLENBQUM7SUFDRCxNQUFNLENBQUMsT0FBTztRQUNaLE9BQU8sTUFBTSxDQUFFLE9BQU8sQ0FBQyxNQUFrQyxDQUFDLElBQUksQ0FBQyxDQUFDO0lBQ2xFLENBQUM7SUFDRCxLQUFLLENBQUMsUUFBUSxFQUFFLE9BQU87UUFDckIsT0FBTyxPQUFPLENBQUMsVUFBVSxDQUFDLFFBQVEsRUFBRSxLQUFLLENBQUMsQ0FBQztJQUM3QyxDQUFDO0NBQ0YsQ0FBQztLQUNELFFBQVEsQ0FBQztJQUNSLEdBQUcsRUFBRSxjQUFjO0lBQ25CLGFBQWEsQ0FBQyxPQUFPO1FBQ25CLE9BQU8sT0FBTyxDQUFFLE9BQU8sQ0FBQyxNQUFrQyxDQUFDLFlBQVksQ0FBQyxDQUFDO0lBQzNFLENBQUM7SUFDRCxNQUFNLENBQUMsT0FBTztRQUNaLE9BQU8sTUFBTSxDQUFFLE9BQU8sQ0FBQyxNQUFrQyxDQUFDLFlBQVksQ0FBQyxDQUFDO0lBQzFFLENBQUM7SUFDRCxLQUFLLENBQUMsUUFBUSxFQUFFLE9BQU87UUFDckIsT0FBTyxPQUFPLENBQUMsVUFBVSxDQUFDLFFBQVEsRUFBRSxLQUFLLENBQUMsQ0FBQztJQUM3QyxDQUFDO0NBQ0YsQ0FBQyxDQUFDIiwic291cmNlc0NvbnRlbnQiOlsiLyoqXG4gKiBAbW9kdWxlIGludGVncmF0aW9ucy9uZXN0L2xvZ2dpbmdcbiAqIEBzdW1tYXJ5IEtleWNsb2FrIGF1dGggbG9nIHBhcmFtZXRlcnMuXG4gKiBAZGVzY3JpcHRpb24gUmVnaXN0ZXJzIGB1c2VyYCBhbmQgYG9yZ2FuaXphdGlvbmAgYXMgbG9nIHBhcmFtZXRlcnMgc291cmNlZCBmcm9tIHRoZVxuICogbG9nZ2luZyBjb25maWcgKHBvcHVsYXRlZCBieSB0aGUgYXV0aCBpbnRlcmNlcHRvcidzIGNoaWxkIGxvZ2dlciB2aWEgYExvZ2dpbmcuZm9yKHsgdXNlciwgb3JnYW5pemF0aW9uIH0pYCkuXG4gKlxuICogVGhlc2UgcGFyYW1ldGVycyBhcmUgcmVnaXN0ZXJlZCBoZXJlIOKAlCBpbiBgaW50ZWdyYXRpb25zL25lc3RgIOKAlCBiZWNhdXNlIHRoaXMgaXMgdGhlXG4gKiBsYXllciB0aGF0IGV4dHJhY3RzIHVzZXIvb3JnYW5pemF0aW9uIGlkZW50aXR5IGZyb20gS2V5Y2xvYWsgSldUcy4gVGhlIGBpcGAgcGFyYW1ldGVyLFxuICogYnkgY29udHJhc3QsIGlzIHJlZ2lzdGVyZWQgaW4gYEBkZWNhZi10cy9mb3ItaHR0cC9zZXJ2ZXJgIHdoZXJlIHRoZSBIVFRQIHJlcXVlc3QgSVAgaXNcbiAqIGF2YWlsYWJsZS5cbiAqL1xuaW1wb3J0IHsgbG9nUGFyYW1ldGVyUmVnaXN0cnkgfSBmcm9tIFwiQGRlY2FmLXRzL2xvZ2dpbmdcIjtcblxubG9nUGFyYW1ldGVyUmVnaXN0cnlcbiAgLnJlZ2lzdGVyKHtcbiAgICBrZXk6IFwidXNlclwiLFxuICAgIHNob3VsZEluY2x1ZGUocGF5bG9hZCkge1xuICAgICAgcmV0dXJuIEJvb2xlYW4oKHBheWxvYWQuY29uZmlnIGFzIFJlY29yZDxzdHJpbmcsIHVua25vd24+KS51c2VyKTtcbiAgICB9LFxuICAgIHJlbmRlcihwYXlsb2FkKSB7XG4gICAgICByZXR1cm4gU3RyaW5nKChwYXlsb2FkLmNvbmZpZyBhcyBSZWNvcmQ8c3RyaW5nLCB1bmtub3duPikudXNlcik7XG4gICAgfSxcbiAgICBzdHlsZShyZW5kZXJlZCwgcGF5bG9hZCkge1xuICAgICAgcmV0dXJuIHBheWxvYWQuYXBwbHlUaGVtZShyZW5kZXJlZCwgXCJhcHBcIik7XG4gICAgfSxcbiAgfSlcbiAgLnJlZ2lzdGVyKHtcbiAgICBrZXk6IFwib3JnYW5pemF0aW9uXCIsXG4gICAgc2hvdWxkSW5jbHVkZShwYXlsb2FkKSB7XG4gICAgICByZXR1cm4gQm9vbGVhbigocGF5bG9hZC5jb25maWcgYXMgUmVjb3JkPHN0cmluZywgdW5rbm93bj4pLm9yZ2FuaXphdGlvbik7XG4gICAgfSxcbiAgICByZW5kZXIocGF5bG9hZCkge1xuICAgICAgcmV0dXJuIFN0cmluZygocGF5bG9hZC5jb25maWcgYXMgUmVjb3JkPHN0cmluZywgdW5rbm93bj4pLm9yZ2FuaXphdGlvbik7XG4gICAgfSxcbiAgICBzdHlsZShyZW5kZXJlZCwgcGF5bG9hZCkge1xuICAgICAgcmV0dXJuIHBheWxvYWQuYXBwbHlUaGVtZShyZW5kZXJlZCwgXCJhcHBcIik7XG4gICAgfSxcbiAgfSk7XG4iXX0=

package/lib/esm/nest/types.js

@@ -1,2 +1,2 @@
 export {};
-//# sourceMappingURL=types.js.map
+//# sourceMappingURL=data:application/json;base64,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

package/lib/esm/nest/utils.js

@@ -1,64 +1,50 @@
 import { AuthorizationError } from "@decaf-ts/core";
+import { getTokenPayload } from "@decaf-ts/crypto/integration/services/jwt";
 export const DECAF_ADAPTER_OPTIONS = Symbol("DecafAdapterForOptions");
-export function getTokenPayload(jwt) {
-    try {
-        return JSON.parse(Buffer.from(jwt.split(".")[1] ?? "", "base64url").toString("utf8"));
-    }
-    catch {
-        return null;
-    }
-}
 export function extractKeycloakRoles(payload) {
     const roles = new Set();
     if (Array.isArray(payload?.realm_access?.roles)) {
-        for (const role of payload.realm_access.roles)
-            roles.add(role);
+        for (const role of payload.realm_access.roles) {
+            if (!role?.startsWith("namespace:"))
+                roles.add(role);
+        }
     }
     if (payload?.resource_access && typeof payload.resource_access === "object") {
         for (const client of Object.keys(payload.resource_access)) {
             for (const role of payload.resource_access[client]?.roles ?? []) {
-                roles.add(role);
+                if (!role?.startsWith("namespace:"))
+                    roles.add(role);
             }
         }
     }
     return [...roles];
 }
-/**
- * Extracts roles from the `resource_access` claim only, optionally excluding
- * specified client IDs (e.g. `"account"`).  Unlike {@link extractKeycloakRoles}
- * this does NOT include `realm_access.roles`.
- *
- * @param payload   The decoded JWT payload.
- * @param excluded  Client IDs to skip.  @default ["account"]
- */
-export function getClientRoles(payload, excluded = ["account"]) {
-    const resourceAccess = payload?.resource_access;
-    if (!resourceAccess || typeof resourceAccess !== "object")
-        return [];
-    const roles = new Set();
-    for (const [clientId, data] of Object.entries(resourceAccess)) {
-        if (excluded.includes(clientId))
-            continue;
-        if (Array.isArray(data?.roles)) {
-            for (const role of data.roles)
-                roles.add(role);
+export function extractKeycloakNamespaces(payload) {
+    const namespaces = new Set();
+    const rawNamespaces = payload?.namespaces ?? payload?.namespace;
+    if (Array.isArray(rawNamespaces)) {
+        for (const namespace of rawNamespaces) {
+            if (namespace)
+                namespaces.add(namespace);
         }
     }
-    return [...roles];
-}
-export function getUser(jwt) {
-    const payload = getTokenPayload(jwt);
-    if (!payload)
-        return undefined;
-    return {
-        preferred_username: payload.preferred_username,
-        email: payload.email,
-        email_verified: payload.email_verified,
-        name: payload.name,
-        given_name: payload.given_name,
-        family_name: payload.family_name,
-        realm: getRealmFromIssuer(jwt),
-    };
+    else if (typeof rawNamespaces === "string" && rawNamespaces) {
+        namespaces.add(rawNamespaces);
+    }
+    const rawRoles = [
+        ...(Array.isArray(payload?.realm_access?.roles)
+            ? payload.realm_access.roles
+            : []),
+        ...(payload?.resource_access && typeof payload.resource_access === "object"
+            ? Object.values(payload.resource_access).flatMap((client) => client?.roles ?? [])
+            : []),
+    ];
+    for (const role of rawRoles) {
+        if (role?.startsWith("namespace:")) {
+            namespaces.add(role.slice("namespace:".length));
+        }
+    }
+    return [...namespaces];
 }
 export function getRealmFromIssuer(jwt) {
     const payload = getTokenPayload(jwt);
@@ -80,4 +66,27 @@ export function getRealmFromIssuer(jwt) {
     }
     return parts[realmsIndex + 1];
 }
-//# sourceMappingURL=utils.js.map
+/**
+ * Extracts roles from the `resource_access` claim only, optionally excluding
+ * specified client IDs (e.g. `"account"`).  Unlike {@link extractKeycloakRoles}
+ * this does NOT include `realm_access.roles`.
+ *
+ * @param payload   The decoded JWT payload.
+ * @param excluded  Client IDs to skip.  @default ["account"]
+ */
+export function getClientRoles(payload, excluded = ["account"]) {
+    const resourceAccess = payload?.resource_access;
+    if (!resourceAccess || typeof resourceAccess !== "object")
+        return [];
+    const roles = new Set();
+    for (const [clientId, data] of Object.entries(resourceAccess)) {
+        if (excluded.includes(clientId))
+            continue;
+        if (Array.isArray(data?.roles)) {
+            for (const role of data.roles)
+                roles.add(role);
+        }
+    }
+    return [...roles];
+}
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoidXRpbHMuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi9zcmMvbmVzdC91dGlscy50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiQUFNQSxPQUFPLEVBQUUsa0JBQWtCLEVBQUUsTUFBTSxnQkFBZ0IsQ0FBQztBQUNwRCxPQUFPLEVBQUUsZUFBZSxFQUFFLE1BQU0sMkNBQTJDLENBQUM7QUFFNUUsTUFBTSxDQUFDLE1BQU0scUJBQXFCLEdBQUcsTUFBTSxDQUFDLHdCQUF3QixDQUFDLENBQUM7QUFFdEUsTUFBTSxVQUFVLG9CQUFvQixDQUFDLE9BQTBDO0lBQzdFLE1BQU0sS0FBSyxHQUFHLElBQUksR0FBRyxFQUFVLENBQUM7SUFDaEMsSUFBSSxLQUFLLENBQUMsT0FBTyxDQUFDLE9BQU8sRUFBRSxZQUFZLEVBQUUsS0FBSyxDQUFDLEVBQUUsQ0FBQztRQUNoRCxLQUFLLE1BQU0sSUFBSSxJQUFJLE9BQU8sQ0FBQyxZQUFZLENBQUMsS0FBSyxFQUFFLENBQUM7WUFDOUMsSUFBSSxDQUFDLElBQUksRUFBRSxVQUFVLENBQUMsWUFBWSxDQUFDO2dCQUFFLEtBQUssQ0FBQyxHQUFHLENBQUMsSUFBSSxDQUFDLENBQUM7UUFDdkQsQ0FBQztJQUNILENBQUM7SUFDRCxJQUFJLE9BQU8sRUFBRSxlQUFlLElBQUksT0FBTyxPQUFPLENBQUMsZUFBZSxLQUFLLFFBQVEsRUFBRSxDQUFDO1FBQzVFLEtBQUssTUFBTSxNQUFNLElBQUksTUFBTSxDQUFDLElBQUksQ0FBQyxPQUFPLENBQUMsZUFBZSxDQUFDLEVBQUUsQ0FBQztZQUMxRCxLQUFLLE1BQU0sSUFBSSxJQUFJLE9BQU8sQ0FBQyxlQUFlLENBQUMsTUFBTSxDQUFDLEVBQUUsS0FBSyxJQUFJLEVBQUUsRUFBRSxDQUFDO2dCQUNoRSxJQUFJLENBQUMsSUFBSSxFQUFFLFVBQVUsQ0FBQyxZQUFZLENBQUM7b0JBQUUsS0FBSyxDQUFDLEdBQUcsQ0FBQyxJQUFJLENBQUMsQ0FBQztZQUN2RCxDQUFDO1FBQ0gsQ0FBQztJQUNILENBQUM7SUFDRCxPQUFPLENBQUMsR0FBRyxLQUFLLENBQUMsQ0FBQztBQUNwQixDQUFDO0FBRUQsTUFBTSxVQUFVLHlCQUF5QixDQUN2QyxPQUFzRDtJQUV0RCxNQUFNLFVBQVUsR0FBRyxJQUFJLEdBQUcsRUFBVSxDQUFDO0lBQ3JDLE1BQU0sYUFBYSxHQUFHLE9BQU8sRUFBRSxVQUFVLElBQUksT0FBTyxFQUFFLFNBQVMsQ0FBQztJQUNoRSxJQUFJLEtBQUssQ0FBQyxPQUFPLENBQUMsYUFBYSxDQUFDLEVBQUUsQ0FBQztRQUNqQyxLQUFLLE1BQU0sU0FBUyxJQUFJLGFBQWEsRUFBRSxDQUFDO1lBQ3RDLElBQUksU0FBUztnQkFBRSxVQUFVLENBQUMsR0FBRyxDQUFDLFNBQVMsQ0FBQyxDQUFDO1FBQzNDLENBQUM7SUFDSCxDQUFDO1NBQU0sSUFBSSxPQUFPLGFBQWEsS0FBSyxRQUFRLElBQUksYUFBYSxFQUFFLENBQUM7UUFDOUQsVUFBVSxDQUFDLEdBQUcsQ0FBQyxhQUFhLENBQUMsQ0FBQztJQUNoQyxDQUFDO0lBRUQsTUFBTSxRQUFRLEdBQUc7UUFDZixHQUFHLENBQUMsS0FBSyxDQUFDLE9BQU8sQ0FBQyxPQUFPLEVBQUUsWUFBWSxFQUFFLEtBQUssQ0FBQztZQUM3QyxDQUFDLENBQUMsT0FBTyxDQUFDLFlBQVksQ0FBQyxLQUFLO1lBQzVCLENBQUMsQ0FBQyxFQUFFLENBQUM7UUFDUCxHQUFHLENBQUMsT0FBTyxFQUFFLGVBQWUsSUFBSSxPQUFPLE9BQU8sQ0FBQyxlQUFlLEtBQUssUUFBUTtZQUN6RSxDQUFDLENBQUMsTUFBTSxDQUFDLE1BQU0sQ0FBQyxPQUFPLENBQUMsZUFBZSxDQUFDLENBQUMsT0FBTyxDQUM1QyxDQUFDLE1BQU0sRUFBRSxFQUFFLENBQUMsTUFBTSxFQUFFLEtBQUssSUFBSSxFQUFFLENBQ2hDO1lBQ0gsQ0FBQyxDQUFDLEVBQUUsQ0FBQztLQUNSLENBQUM7SUFDRixLQUFLLE1BQU0sSUFBSSxJQUFJLFFBQVEsRUFBRSxDQUFDO1FBQzVCLElBQUksSUFBSSxFQUFFLFVBQVUsQ0FBQyxZQUFZLENBQUMsRUFBRSxDQUFDO1lBQ25DLFVBQVUsQ0FBQyxHQUFHLENBQUMsSUFBSSxDQUFDLEtBQUssQ0FBQyxZQUFZLENBQUMsTUFBTSxDQUFDLENBQUMsQ0FBQztRQUNsRCxDQUFDO0lBQ0gsQ0FBQztJQUVELE9BQU8sQ0FBQyxHQUFHLFVBQVUsQ0FBQyxDQUFDO0FBQ3pCLENBQUM7QUFFRCxNQUFNLFVBQVUsa0JBQWtCLENBQUMsR0FBVztJQUM1QyxNQUFNLE9BQU8sR0FBRyxlQUFlLENBQW1CLEdBQUcsQ0FBQyxDQUFDO0lBQ3ZELE1BQU0sR0FBRyxHQUFHLE9BQU8sRUFBRSxHQUFHLENBQUM7SUFDekIsSUFBSSxDQUFDLEdBQUcsRUFBRSxDQUFDO1FBQ1QsTUFBTSxJQUFJLGtCQUFrQixDQUFDLHlCQUF5QixDQUFDLENBQUM7SUFDMUQsQ0FBQztJQUNELElBQUksR0FBUSxDQUFDO0lBQ2IsSUFBSSxDQUFDO1FBQ0gsR0FBRyxHQUFHLElBQUksR0FBRyxDQUFDLEdBQUcsQ0FBQyxDQUFDO0lBQ3JCLENBQUM7SUFBQyxNQUFNLENBQUM7UUFDUCxNQUFNLElBQUksa0JBQWtCLENBQUMsdUJBQXVCLEdBQUcsRUFBRSxDQUFDLENBQUM7SUFDN0QsQ0FBQztJQUNELE1BQU0sS0FBSyxHQUFHLEdBQUcsQ0FBQyxRQUFRLENBQUMsS0FBSyxDQUFDLEdBQUcsQ0FBQyxDQUFDLE1BQU0sQ0FBQyxPQUFPLENBQUMsQ0FBQztJQUN0RCxNQUFNLFdBQVcsR0FBRyxLQUFLLENBQUMsT0FBTyxDQUFDLFFBQVEsQ0FBQyxDQUFDO0lBQzVDLElBQUksV0FBVyxLQUFLLENBQUMsQ0FBQyxJQUFJLENBQUMsS0FBSyxDQUFDLFdBQVcsR0FBRyxDQUFDLENBQUMsRUFBRSxDQUFDO1FBQ2xELE1BQU0sSUFBSSxrQkFBa0IsQ0FBQyxxQ0FBcUMsR0FBRyxFQUFFLENBQUMsQ0FBQztJQUMzRSxDQUFDO0lBQ0QsT0FBTyxLQUFLLENBQUMsV0FBVyxHQUFHLENBQUMsQ0FBQyxDQUFDO0FBQ2hDLENBQUM7QUFFRDs7Ozs7OztHQU9HO0FBQ0gsTUFBTSxVQUFVLGNBQWMsQ0FDNUIsT0FBMEMsRUFDMUMsV0FBcUIsQ0FBQyxTQUFTLENBQUM7SUFFaEMsTUFBTSxjQUFjLEdBQUcsT0FBTyxFQUFFLGVBQWUsQ0FBQztJQUNoRCxJQUFJLENBQUMsY0FBYyxJQUFJLE9BQU8sY0FBYyxLQUFLLFFBQVE7UUFBRSxPQUFPLEVBQUUsQ0FBQztJQUNyRSxNQUFNLEtBQUssR0FBRyxJQUFJLEdBQUcsRUFBVSxDQUFDO0lBQ2hDLEtBQUssTUFBTSxDQUFDLFFBQVEsRUFBRSxJQUFJLENBQUMsSUFBSSxNQUFNLENBQUMsT0FBTyxDQUFDLGNBQWMsQ0FBQyxFQUFFLENBQUM7UUFDOUQsSUFBSSxRQUFRLENBQUMsUUFBUSxDQUFDLFFBQVEsQ0FBQztZQUFFLFNBQVM7UUFDMUMsSUFBSSxLQUFLLENBQUMsT0FBTyxDQUFDLElBQUksRUFBRSxLQUFLLENBQUMsRUFBRSxDQUFDO1lBQy9CLEtBQUssTUFBTSxJQUFJLElBQUksSUFBSSxDQUFDLEtBQUs7Z0JBQUUsS0FBSyxDQUFDLEdBQUcsQ0FBQyxJQUFJLENBQUMsQ0FBQztRQUNqRCxDQUFDO0lBQ0gsQ0FBQztJQUNELE9BQU8sQ0FBQyxHQUFHLEtBQUssQ0FBQyxDQUFDO0FBQ3BCLENBQUMiLCJzb3VyY2VzQ29udGVudCI6WyIvKipcbiAqIEBtb2R1bGUgaW50ZWdyYXRpb25zL25lc3QvdXRpbHNcbiAqIEBzdW1tYXJ5IE5lc3QgaW50ZWdyYXRpb24gdXRpbGl0aWVzLlxuICogQGRlc2NyaXB0aW9uIEhlbHBlciBmdW5jdGlvbnMgdXNlZCBieSB0aGUgTmVzdCBhdXRoIGFuZCByZXF1ZXN0LWNvbnRleHQgYWRhcHRlcnMuXG4gKi9cbmltcG9ydCB0eXBlIHsgS2V5Y2xvYWtBY2Nlc3NUb2tlblBheWxvYWQgfSBmcm9tIFwiLi90eXBlc1wiO1xuaW1wb3J0IHsgQXV0aG9yaXphdGlvbkVycm9yIH0gZnJvbSBcIkBkZWNhZi10cy9jb3JlXCI7XG5pbXBvcnQgeyBnZXRUb2tlblBheWxvYWQgfSBmcm9tIFwiQGRlY2FmLXRzL2NyeXB0by9pbnRlZ3JhdGlvbi9zZXJ2aWNlcy9qd3RcIjtcblxuZXhwb3J0IGNvbnN0IERFQ0FGX0FEQVBURVJfT1BUSU9OUyA9IFN5bWJvbChcIkRlY2FmQWRhcHRlckZvck9wdGlvbnNcIik7XG5cbmV4cG9ydCBmdW5jdGlvbiBleHRyYWN0S2V5Y2xvYWtSb2xlcyhwYXlsb2FkOiBLZXljbG9ha0FjY2Vzc1Rva2VuUGF5bG9hZCB8IG51bGwpOiBzdHJpbmdbXSB7XG4gIGNvbnN0IHJvbGVzID0gbmV3IFNldDxzdHJpbmc+KCk7XG4gIGlmIChBcnJheS5pc0FycmF5KHBheWxvYWQ/LnJlYWxtX2FjY2Vzcz8ucm9sZXMpKSB7XG4gICAgZm9yIChjb25zdCByb2xlIG9mIHBheWxvYWQucmVhbG1fYWNjZXNzLnJvbGVzKSB7XG4gICAgICBpZiAoIXJvbGU/LnN0YXJ0c1dpdGgoXCJuYW1lc3BhY2U6XCIpKSByb2xlcy5hZGQocm9sZSk7XG4gICAgfVxuICB9XG4gIGlmIChwYXlsb2FkPy5yZXNvdXJjZV9hY2Nlc3MgJiYgdHlwZW9mIHBheWxvYWQucmVzb3VyY2VfYWNjZXNzID09PSBcIm9iamVjdFwiKSB7XG4gICAgZm9yIChjb25zdCBjbGllbnQgb2YgT2JqZWN0LmtleXMocGF5bG9hZC5yZXNvdXJjZV9hY2Nlc3MpKSB7XG4gICAgICBmb3IgKGNvbnN0IHJvbGUgb2YgcGF5bG9hZC5yZXNvdXJjZV9hY2Nlc3NbY2xpZW50XT8ucm9sZXMgPz8gW10pIHtcbiAgICAgICAgaWYgKCFyb2xlPy5zdGFydHNXaXRoKFwibmFtZXNwYWNlOlwiKSkgcm9sZXMuYWRkKHJvbGUpO1xuICAgICAgfVxuICAgIH1cbiAgfVxuICByZXR1cm4gWy4uLnJvbGVzXTtcbn1cblxuZXhwb3J0IGZ1bmN0aW9uIGV4dHJhY3RLZXljbG9ha05hbWVzcGFjZXMoXG4gIHBheWxvYWQ6IEtleWNsb2FrQWNjZXNzVG9rZW5QYXlsb2FkIHwgbnVsbCB8IHVuZGVmaW5lZFxuKTogc3RyaW5nW10ge1xuICBjb25zdCBuYW1lc3BhY2VzID0gbmV3IFNldDxzdHJpbmc+KCk7XG4gIGNvbnN0IHJhd05hbWVzcGFjZXMgPSBwYXlsb2FkPy5uYW1lc3BhY2VzID8/IHBheWxvYWQ/Lm5hbWVzcGFjZTtcbiAgaWYgKEFycmF5LmlzQXJyYXkocmF3TmFtZXNwYWNlcykpIHtcbiAgICBmb3IgKGNvbnN0IG5hbWVzcGFjZSBvZiByYXdOYW1lc3BhY2VzKSB7XG4gICAgICBpZiAobmFtZXNwYWNlKSBuYW1lc3BhY2VzLmFkZChuYW1lc3BhY2UpO1xuICAgIH1cbiAgfSBlbHNlIGlmICh0eXBlb2YgcmF3TmFtZXNwYWNlcyA9PT0gXCJzdHJpbmdcIiAmJiByYXdOYW1lc3BhY2VzKSB7XG4gICAgbmFtZXNwYWNlcy5hZGQocmF3TmFtZXNwYWNlcyk7XG4gIH1cblxuICBjb25zdCByYXdSb2xlcyA9IFtcbiAgICAuLi4oQXJyYXkuaXNBcnJheShwYXlsb2FkPy5yZWFsbV9hY2Nlc3M/LnJvbGVzKVxuICAgICAgPyBwYXlsb2FkLnJlYWxtX2FjY2Vzcy5yb2xlc1xuICAgICAgOiBbXSksXG4gICAgLi4uKHBheWxvYWQ/LnJlc291cmNlX2FjY2VzcyAmJiB0eXBlb2YgcGF5bG9hZC5yZXNvdXJjZV9hY2Nlc3MgPT09IFwib2JqZWN0XCJcbiAgICAgID8gT2JqZWN0LnZhbHVlcyhwYXlsb2FkLnJlc291cmNlX2FjY2VzcykuZmxhdE1hcChcbiAgICAgICAgICAoY2xpZW50KSA9PiBjbGllbnQ/LnJvbGVzID8/IFtdXG4gICAgICAgIClcbiAgICAgIDogW10pLFxuICBdO1xuICBmb3IgKGNvbnN0IHJvbGUgb2YgcmF3Um9sZXMpIHtcbiAgICBpZiAocm9sZT8uc3RhcnRzV2l0aChcIm5hbWVzcGFjZTpcIikpIHtcbiAgICAgIG5hbWVzcGFjZXMuYWRkKHJvbGUuc2xpY2UoXCJuYW1lc3BhY2U6XCIubGVuZ3RoKSk7XG4gICAgfVxuICB9XG5cbiAgcmV0dXJuIFsuLi5uYW1lc3BhY2VzXTtcbn1cblxuZXhwb3J0IGZ1bmN0aW9uIGdldFJlYWxtRnJvbUlzc3Vlcihqd3Q6IHN0cmluZyk6IHN0cmluZyB7XG4gIGNvbnN0IHBheWxvYWQgPSBnZXRUb2tlblBheWxvYWQ8eyBpc3M/OiBzdHJpbmcgfT4oand0KTtcbiAgY29uc3QgaXNzID0gcGF5bG9hZD8uaXNzO1xuICBpZiAoIWlzcykge1xuICAgIHRocm93IG5ldyBBdXRob3JpemF0aW9uRXJyb3IoXCJJc3N1ZXIgKGlzcykgaXMgbWlzc2luZ1wiKTtcbiAgfVxuICBsZXQgdXJsOiBVUkw7XG4gIHRyeSB7XG4gICAgdXJsID0gbmV3IFVSTChpc3MpO1xuICB9IGNhdGNoIHtcbiAgICB0aHJvdyBuZXcgQXV0aG9yaXphdGlvbkVycm9yKGBJbnZhbGlkIGlzc3VlciBVUkw6ICR7aXNzfWApO1xuICB9XG4gIGNvbnN0IHBhcnRzID0gdXJsLnBhdGhuYW1lLnNwbGl0KFwiL1wiKS5maWx0ZXIoQm9vbGVhbik7XG4gIGNvbnN0IHJlYWxtc0luZGV4ID0gcGFydHMuaW5kZXhPZihcInJlYWxtc1wiKTtcbiAgaWYgKHJlYWxtc0luZGV4ID09PSAtMSB8fCAhcGFydHNbcmVhbG1zSW5kZXggKyAxXSkge1xuICAgIHRocm93IG5ldyBBdXRob3JpemF0aW9uRXJyb3IoYENhbm5vdCBleHRyYWN0IHJlYWxtIGZyb20gaXNzdWVyOiAke2lzc31gKTtcbiAgfVxuICByZXR1cm4gcGFydHNbcmVhbG1zSW5kZXggKyAxXTtcbn1cblxuLyoqXG4gKiBFeHRyYWN0cyByb2xlcyBmcm9tIHRoZSBgcmVzb3VyY2VfYWNjZXNzYCBjbGFpbSBvbmx5LCBvcHRpb25hbGx5IGV4Y2x1ZGluZ1xuICogc3BlY2lmaWVkIGNsaWVudCBJRHMgKGUuZy4gYFwiYWNjb3VudFwiYCkuICBVbmxpa2Uge0BsaW5rIGV4dHJhY3RLZXljbG9ha1JvbGVzfVxuICogdGhpcyBkb2VzIE5PVCBpbmNsdWRlIGByZWFsbV9hY2Nlc3Mucm9sZXNgLlxuICpcbiAqIEBwYXJhbSBwYXlsb2FkICAgVGhlIGRlY29kZWQgSldUIHBheWxvYWQuXG4gKiBAcGFyYW0gZXhjbHVkZWQgIENsaWVudCBJRHMgdG8gc2tpcC4gIEBkZWZhdWx0IFtcImFjY291bnRcIl1cbiAqL1xuZXhwb3J0IGZ1bmN0aW9uIGdldENsaWVudFJvbGVzKFxuICBwYXlsb2FkOiBLZXljbG9ha0FjY2Vzc1Rva2VuUGF5bG9hZCB8IG51bGwsXG4gIGV4Y2x1ZGVkOiBzdHJpbmdbXSA9IFtcImFjY291bnRcIl1cbik6IHN0cmluZ1tdIHtcbiAgY29uc3QgcmVzb3VyY2VBY2Nlc3MgPSBwYXlsb2FkPy5yZXNvdXJjZV9hY2Nlc3M7XG4gIGlmICghcmVzb3VyY2VBY2Nlc3MgfHwgdHlwZW9mIHJlc291cmNlQWNjZXNzICE9PSBcIm9iamVjdFwiKSByZXR1cm4gW107XG4gIGNvbnN0IHJvbGVzID0gbmV3IFNldDxzdHJpbmc+KCk7XG4gIGZvciAoY29uc3QgW2NsaWVudElkLCBkYXRhXSBvZiBPYmplY3QuZW50cmllcyhyZXNvdXJjZUFjY2VzcykpIHtcbiAgICBpZiAoZXhjbHVkZWQuaW5jbHVkZXMoY2xpZW50SWQpKSBjb250aW51ZTtcbiAgICBpZiAoQXJyYXkuaXNBcnJheShkYXRhPy5yb2xlcykpIHtcbiAgICAgIGZvciAoY29uc3Qgcm9sZSBvZiBkYXRhLnJvbGVzKSByb2xlcy5hZGQocm9sZSk7XG4gICAgfVxuICB9XG4gIHJldHVybiBbLi4ucm9sZXNdO1xufVxuIl19

package/lib/esm/plugins/contract.js

@@ -0,0 +1,68 @@
+import { UnsupportedError } from "@decaf-ts/core";
+/**
+ * Message type constants shared between the embedded plugin and the host.
+ * The plugin is org-agnostic: there is never space switching; the current
+ * Kibana space comes from the request/session/proxy context.
+ */
+export const EMBED_MESSAGE_TYPE = {
+    SWITCH: "ORG_DASHBOARD_EMBED_SWITCH_DASHBOARD",
+    READY: "ORG_DASHBOARD_EMBED_READY",
+    RENDERED: "ORG_DASHBOARD_EMBED_RENDERED",
+    ERROR: "ORG_DASHBOARD_EMBED_ERROR",
+};
+/**
+ * Type guard for the switch-dashboard message received by the embedded plugin.
+ */
+export function isSwitchDashboardMessage(data) {
+    if (!data || typeof data !== "object") {
+        return false;
+    }
+    const msg = data;
+    return (msg.type === EMBED_MESSAGE_TYPE.SWITCH &&
+        typeof msg.dashboardId === "string" &&
+        msg.dashboardId.length > 0);
+}
+/**
+ * Type guard for parent-bound messages emitted by the embedded plugin.
+ */
+export function isEmbedParentMessage(data) {
+    if (!data || typeof data !== "object") {
+        return false;
+    }
+    const msg = data;
+    return (msg.type === EMBED_MESSAGE_TYPE.READY ||
+        msg.type === EMBED_MESSAGE_TYPE.RENDERED ||
+        msg.type === EMBED_MESSAGE_TYPE.ERROR);
+}
+/**
+ * Build a switch-dashboard message from a payload (shared by both plugins).
+ */
+export function createSwitchDashboardMessage(payload) {
+    return {
+        type: EMBED_MESSAGE_TYPE.SWITCH,
+        dashboardId: payload.dashboardId,
+        timeRange: payload.timeRange,
+        query: payload.query,
+        filters: payload.filters,
+        guestToken: payload.guestToken,
+    };
+}
+/**
+ * Send a switch-dashboard message to a DOM-free target.
+ *
+ * If the target supports `postMessage` (Kibana), the message is posted
+ * directly. If the target supports `switchDashboard` (Superset SDK handle),
+ * the SDK method is invoked instead. Both paths use the same payload shape.
+ */
+export function sendSwitchDashboardMessage(target, payload, targetOrigin) {
+    if (typeof target.switchDashboard === "function") {
+        void target.switchDashboard(payload.dashboardId, payload.guestToken);
+        return;
+    }
+    if (typeof target.postMessage === "function") {
+        target.postMessage(createSwitchDashboardMessage(payload), targetOrigin);
+        return;
+    }
+    throw new UnsupportedError("EmbedMessageTarget must provide either postMessage or switchDashboard");
+}
+//# sourceMappingURL=data:application/json;base64,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

package/lib/esm/plugins/index.js

@@ -0,0 +1,18 @@
+/**
+ * @module integrations/plugins
+ * @summary BI dashboard embed plugin surface.
+ * @description Aggregates the shared DOM-free contract and both BI tool
+ * plugins (Kibana + Superset). Both plugins implement the exact same
+ * `DashboardEmbedPlugin` API.
+ *
+ * - **Kibana:** generated plugin source + installer (writes files, optional build).
+ * - **Superset:** patch-and-build strategy (patches Superset's internal source,
+ *   builds SDK + frontend + optionally Docker image).
+ *
+ * Both are org-agnostic: there is never space switching. The current BI space
+ * comes from the request/session/proxy context, not from the plugin.
+ */
+export * from "./contract.js";
+export * from "./kibana/index.js";
+export * from "./superset/index.js";
+//# sourceMappingURL=data:application/json;base64,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

package/lib/esm/plugins/kibana/host.js

@@ -0,0 +1,19 @@
+/**
+ * @module integrations/plugins/kibana/host
+ * @summary Angular host-side helpers for the Kibana embed plugin.
+ * @description DOM-free convenience helpers the Angular host uses to build the
+ * stable iframe URL and send switch-dashboard messages to the embedded plugin.
+ */
+import { sendSwitchDashboardMessage as sendShared, } from "./../contract.js";
+import { buildKibanaEmbedUrl } from "./installer.js";
+export { buildKibanaEmbedUrl };
+/**
+ * Send a switch-dashboard message to the embedded Kibana plugin.
+ *
+ * The Angular host passes `iframe.contentWindow` (which satisfies
+ * `EmbedMessageTarget`) and the Kibana origin as `targetOrigin`.
+ */
+export function sendKibanaSwitchDashboardMessage(target, payload, targetOrigin) {
+    sendShared(target, payload, targetOrigin);
+}
+//# sourceMappingURL=data:application/json;base64,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

package/lib/esm/plugins/kibana/index.js

@@ -0,0 +1,14 @@
+/**
+ * @module integrations/plugins/kibana
+ * @summary Kibana dashboard embed plugin surface.
+ * @description Org-agnostic multi-tenant Kibana dashboard embed plugin,
+ * installer, and host helpers. There is never space switching; the current
+ * Kibana space comes from the request/session/proxy context.
+ */
+export * from "./../contract.js";
+export * from "./types.js";
+export * from "./manifest.js";
+export * from "./templates.js";
+export { KibanaDashboardEmbedPlugin, kibanaDashboardEmbedPlugin, createKibanaDashboardEmbedPlugin, buildKibanaEmbedUrl, KIBANA_DEFAULT_BASE_PATH, } from "./installer.js";
+export { sendKibanaSwitchDashboardMessage, } from "./host.js";
+//# sourceMappingURL=data:application/json;base64,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