@digitaldefiance/node-express-suite-mongo 4.23.0

package/src/services/mongo-authentication-provider.js

@@ -0,0 +1,97 @@
+"use strict";
+/**
+ * @fileoverview Mongoose-backed implementation of IAuthenticationProvider.
+ * Delegates user lookup, role resolution, and credential verification
+ * to the existing Mongoose models and services.
+ * @module services/mongo-authentication-provider
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MongoAuthenticationProvider = void 0;
+const suite_core_lib_1 = require("@digitaldefiance/suite-core-lib");
+const base_model_name_1 = require("../enumerations/base-model-name");
+const model_registry_1 = require("../model-registry");
+const jwt_1 = require("./jwt");
+const request_user_1 = require("./request-user");
+const role_1 = require("./role");
+const mongo_transaction_1 = require("../utils/mongo-transaction");
+const node_express_suite_1 = require("@digitaldefiance/node-express-suite");
+/**
+ * Mongoose-backed authentication provider.
+ * Uses ModelRegistry, JwtService, RoleService, and UserService
+ * to implement the storage-agnostic IAuthenticationProvider interface.
+ */
+class MongoAuthenticationProvider {
+    application;
+    constructor(application) {
+        this.application = application;
+    }
+    async findUserById(userId) {
+        const UserModel = model_registry_1.ModelRegistry.instance.getTypedModel(base_model_name_1.BaseModelName.User);
+        const userDoc = await UserModel.findById(userId).select('-password').exec();
+        if (!userDoc)
+            return null;
+        return {
+            id: String(userDoc._id),
+            accountStatus: userDoc.accountStatus,
+            email: userDoc.email,
+            siteLanguage: userDoc.siteLanguage,
+            timezone: userDoc.timezone,
+            lastLogin: userDoc.lastLogin?.toString(),
+        };
+    }
+    async buildRequestUserDTO(userId) {
+        const UserModel = model_registry_1.ModelRegistry.instance.getTypedModel(base_model_name_1.BaseModelName.User);
+        return await (0, mongo_transaction_1.withMongoTransaction)(this.application.db.connection, this.application.environment.mongo.useTransactions, undefined, async (_sess) => {
+            const sess = _sess;
+            const userDoc = await UserModel.findById(userId)
+                .select('-password')
+                .session(sess ?? null)
+                .exec();
+            if (!userDoc || userDoc.accountStatus !== suite_core_lib_1.AccountStatus.Active) {
+                return null;
+            }
+            const roleService = new role_1.RoleService(this
+                .application);
+            const roles = await roleService.getUserRoles(userDoc._id, sess);
+            const tokenRoles = roleService.rolesToTokenRoles(roles);
+            return request_user_1.RequestUserService.makeRequestUserDTO(userDoc, tokenRoles);
+        }, {
+            timeoutMs: this.application.environment.mongo
+                .transactionTimeout,
+        });
+    }
+    async verifyToken(token) {
+        const jwtService = new jwt_1.JwtService(this.application);
+        return (await jwtService.verifyToken(token));
+    }
+    async authenticateWithMnemonic(email, mnemonic) {
+        const userService = this.application.services.get(node_express_suite_1.ServiceKeys.USER);
+        const result = await (0, mongo_transaction_1.withMongoTransaction)(this.application.db.connection, this.application.environment.mongo.useTransactions, undefined, async (_sess) => {
+            const sess = _sess;
+            return await userService.loginWithMnemonic(email, mnemonic, sess);
+        }, {
+            timeoutMs: this.application.environment.mongo
+                .transactionTimeout,
+        });
+        return {
+            userId: String(result.userDoc._id),
+            userMember: result.userMember,
+        };
+    }
+    async authenticateWithPassword(email, password) {
+        const userService = this.application.services.get(node_express_suite_1.ServiceKeys.USER);
+        const result = await (0, mongo_transaction_1.withMongoTransaction)(this.application.db.connection, this.application.environment.mongo.useTransactions, undefined, async (_sess) => {
+            const sess = _sess;
+            return await userService.loginWithPassword(email, password, sess);
+        }, {
+            timeoutMs: this.application.environment.mongo
+                .transactionTimeout,
+        });
+        return {
+            userId: String(result.userDoc._id),
+            userMember: result.userMember,
+        };
+    }
+}
+exports.MongoAuthenticationProvider = MongoAuthenticationProvider;
+//# sourceMappingURL=mongo-authentication-provider.js.map

package/src/services/mongo-authentication-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mongo-authentication-provider.js","sourceRoot":"","sources":["../../../../../packages/digitaldefiance-node-express-suite-mongo/src/services/mongo-authentication-provider.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAKH,oEAA4E;AAE5E,qEAAgE;AAOhE,sDAAkD;AAClD,+BAAmC;AACnC,iDAAoD;AACpD,iCAAqC;AACrC,kEAAkE;AAElE,4EAAkE;AAElE;;;;GAIG;AACH,MAAa,2BAA2B;IAIT;IAA7B,YAA6B,WAAmC;QAAnC,gBAAW,GAAX,WAAW,CAAwB;IAAG,CAAC;IAEpE,KAAK,CAAC,YAAY,CAChB,MAAc;QAEd,MAAM,SAAS,GAAG,8BAAa,CAAC,QAAQ,CAAC,aAAa,CAEpD,+BAAa,CAAC,IAAI,CAAC,CAAC;QAEtB,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC;QAE5E,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAE1B,OAAO;YACL,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC;YACvB,aAAa,EAAE,OAAO,CAAC,aAAa;YACpC,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,QAAQ,EAAE;SACzC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,MAAc;QACtC,MAAM,SAAS,GAAG,8BAAa,CAAC,QAAQ,CAAC,aAAa,CAEpD,+BAAa,CAAC,IAAI,CAAC,CAAC;QAEtB,OAAO,MAAM,IAAA,wCAAoB,EAC/B,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,UAAU,EAC9B,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,KAAK,CAAC,eAA0B,EAC7D,SAAS,EACT,KAAK,EAAE,KAAgC,EAAE,EAAE;YACzC,MAAM,IAAI,GAAG,KAAK,CAAC;YACnB,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC;iBAC7C,MAAM,CAAC,WAAW,CAAC;iBACnB,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC;iBACrB,IAAI,EAAE,CAAC;YAEV,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,aAAa,KAAK,8BAAa,CAAC,MAAM,EAAE,CAAC;gBAC/D,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,WAAW,GAAG,IAAI,kBAAW,CACjC,IAAI;iBACD,WAAyF,CAC7F,CAAC;YACF,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,YAAY,CAAC,OAAO,CAAC,GAAU,EAAE,IAAI,CAAC,CAAC;YACvE,MAAM,UAAU,GAAG,WAAW,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;YACxD,OAAO,iCAAkB,CAAC,kBAAkB,CAC1C,OAAO,EACP,UAGG,CACJ,CAAC;QACJ,CAAC,EACD;YACE,SAAS,EAAE,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,KAAK;iBAC1C,kBAA4B;SAChC,CACF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,WAAW,CACf,KAAa;QAEb,MAAM,UAAU,GAAG,IAAI,gBAAU,CAAM,IAAI,CAAC,WAAW,CAAC,CAAC;QACzD,OAAO,CAAC,MAAM,UAAU,CAAC,WAAW,CAAC,KAAK,CAAC,CAAsB,CAAC;IACpE,CAAC;IAED,KAAK,CAAC,wBAAwB,CAC5B,KAAa,EACb,QAAsB;QAEtB,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,gCAAW,CAAC,IAAI,CASjE,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,IAAA,wCAAoB,EACvC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,UAAU,EAC9B,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,KAAK,CAAC,eAA0B,EAC7D,SAAS,EACT,KAAK,EAAE,KAAgC,EAAE,EAAE;YACzC,MAAM,IAAI,GAAG,KAAK,CAAC;YACnB,OAAO,MAAM,WAAW,CAAC,iBAAiB,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;QACpE,CAAC,EACD;YACE,SAAS,EAAE,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,KAAK;iBAC1C,kBAA4B;SAChC,CACF,CAAC;QAEF,OAAO;YACL,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC;YAClC,UAAU,EAAE,MAAM,CAAC,UAAU;SAC9B,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,wBAAwB,CAC5B,KAAa,EACb,QAAgB;QAEhB,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,gCAAW,CAAC,IAAI,CASjE,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,IAAA,wCAAoB,EACvC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,UAAU,EAC9B,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,KAAK,CAAC,eAA0B,EAC7D,SAAS,EACT,KAAK,EAAE,KAAgC,EAAE,EAAE;YACzC,MAAM,IAAI,GAAG,KAAK,CAAC;YACnB,OAAO,MAAM,WAAW,CAAC,iBAAiB,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;QACpE,CAAC,EACD;YACE,SAAS,EAAE,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,KAAK;iBAC1C,kBAA4B;SAChC,CACF,CAAC;QAEF,OAAO;YACL,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC;YAClC,UAAU,EAAE,MAAM,CAAC,UAAU;SAC9B,CAAC;IACJ,CAAC;CACF;AAhJD,kEAgJC"}

package/src/services/mongo-backup-code-store.d.ts

@@ -0,0 +1,40 @@
+/**
+ * @fileoverview Mongoose/MongoDB implementation of IBackupCodeStore.
+ * Provides backward-compatible storage for the BackupCodeService using
+ * Mongoose UserDocument and ModelRegistry.
+ * @module services/mongo-backup-code-store
+ */
+import type { MemberType } from '@digitaldefiance/ecies-lib';
+import type { ClientSession } from '@digitaldefiance/mongoose-types';
+import type { PlatformID } from '@digitaldefiance/node-ecies-lib';
+import type { ITokenRole } from '@digitaldefiance/suite-core-lib';
+import type { IBackupCodeStore, IBackupCodeUserRecord, IBackupCodeUserUpdate } from '@digitaldefiance/node-express-suite';
+import type { IMongoApplication } from '../interfaces/mongo-application';
+import { RoleService } from './role';
+/**
+ * Mongoose-backed implementation of IBackupCodeStore.
+ *
+ * Delegates all persistence to the Mongoose UserModel and uses
+ * RoleService for member type resolution. This is the default store
+ * used when no custom store is provided to BackupCodeService.
+ *
+ * @template TID - Platform ID type
+ * @template TDate - Date type
+ * @template TTokenRole - Token role interface type
+ */
+export declare class MongoBackupCodeStore<TID extends PlatformID = Buffer, TDate extends Date = Date, TTokenRole extends ITokenRole<TID, TDate> = ITokenRole<TID, TDate>> implements IBackupCodeStore<TID> {
+    private readonly application;
+    private readonly roleService;
+    private readonly session?;
+    constructor(application: IMongoApplication<TID>, roleService: RoleService<TID, TDate, TTokenRole>, session?: ClientSession);
+    /**
+     * Create a new MongoBackupCodeStore bound to a specific session.
+     * Useful for transactional operations.
+     */
+    withSession(session: ClientSession): MongoBackupCodeStore<TID, TDate, TTokenRole>;
+    getUserRecord(userId: TID): Promise<IBackupCodeUserRecord<TID> | null>;
+    updateUserRecord(userId: TID, updates: IBackupCodeUserUpdate): Promise<void>;
+    getMemberType(userId: TID): Promise<MemberType>;
+    fetchBatch(afterId?: string, limit?: number): Promise<Array<IBackupCodeUserRecord<TID>>>;
+}
+//# sourceMappingURL=mongo-backup-code-store.d.ts.map

package/src/services/mongo-backup-code-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mongo-backup-code-store.d.ts","sourceRoot":"","sources":["../../../../../packages/digitaldefiance-node-express-suite-mongo/src/services/mongo-backup-code-store.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAClE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAElE,OAAO,KAAK,EACV,gBAAgB,EAChB,qBAAqB,EACrB,qBAAqB,EACtB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AAGzE,OAAO,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAErC;;;;;;;;;;GAUG;AACH,qBAAa,oBAAoB,CAC/B,GAAG,SAAS,UAAU,GAAG,MAAM,EAC/B,KAAK,SAAS,IAAI,GAAG,IAAI,EACzB,UAAU,SAAS,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,CAClE,YAAW,gBAAgB,CAAC,GAAG,CAAC;IAChC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAyB;IACrD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAsC;IAClE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAgB;gBAGvC,WAAW,EAAE,iBAAiB,CAAC,GAAG,CAAC,EACnC,WAAW,EAAE,WAAW,CAAC,GAAG,EAAE,KAAK,EAAE,UAAU,CAAC,EAChD,OAAO,CAAC,EAAE,aAAa;IAOzB;;;OAGG;IACI,WAAW,CAChB,OAAO,EAAE,aAAa,GACrB,oBAAoB,CAAC,GAAG,EAAE,KAAK,EAAE,UAAU,CAAC;IAQlC,aAAa,CACxB,MAAM,EAAE,GAAG,GACV,OAAO,CAAC,qBAAqB,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;IAqBhC,gBAAgB,CAC3B,MAAM,EAAE,GAAG,EACX,OAAO,EAAE,qBAAqB,GAC7B,OAAO,CAAC,IAAI,CAAC;IAsBH,aAAa,CAAC,MAAM,EAAE,GAAG,GAAG,OAAO,CAAC,UAAU,CAAC;IAa/C,UAAU,CACrB,OAAO,CAAC,EAAE,MAAM,EAChB,KAAK,SAAM,GACV,OAAO,CAAC,KAAK,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC,CAAC;CA2B9C"}

package/src/services/mongo-backup-code-store.js

@@ -0,0 +1,104 @@
+"use strict";
+/**
+ * @fileoverview Mongoose/MongoDB implementation of IBackupCodeStore.
+ * Provides backward-compatible storage for the BackupCodeService using
+ * Mongoose UserDocument and ModelRegistry.
+ * @module services/mongo-backup-code-store
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MongoBackupCodeStore = void 0;
+const base_model_name_1 = require("../enumerations/base-model-name");
+const model_registry_1 = require("../model-registry");
+/**
+ * Mongoose-backed implementation of IBackupCodeStore.
+ *
+ * Delegates all persistence to the Mongoose UserModel and uses
+ * RoleService for member type resolution. This is the default store
+ * used when no custom store is provided to BackupCodeService.
+ *
+ * @template TID - Platform ID type
+ * @template TDate - Date type
+ * @template TTokenRole - Token role interface type
+ */
+class MongoBackupCodeStore {
+    application;
+    roleService;
+    session;
+    constructor(application, roleService, session) {
+        this.application = application;
+        this.roleService = roleService;
+        this.session = session;
+    }
+    /**
+     * Create a new MongoBackupCodeStore bound to a specific session.
+     * Useful for transactional operations.
+     */
+    withSession(session) {
+        return new MongoBackupCodeStore(this.application, this.roleService, session);
+    }
+    async getUserRecord(userId) {
+        const UserModel = model_registry_1.ModelRegistry.instance.getTypedModel(base_model_name_1.BaseModelName.User);
+        const doc = await UserModel.findById(userId)
+            .session(this.session ?? null)
+            .exec();
+        if (!doc)
+            return null;
+        return {
+            _id: doc._id,
+            username: doc.username,
+            email: doc.email,
+            publicKey: doc.publicKey,
+            backupCodes: doc.backupCodes ?? [],
+            passwordWrappedPrivateKey: doc.passwordWrappedPrivateKey,
+            createdAt: doc.createdAt,
+            updatedAt: doc.updatedAt,
+        };
+    }
+    async updateUserRecord(userId, updates) {
+        const UserModel = model_registry_1.ModelRegistry.instance.getTypedModel(base_model_name_1.BaseModelName.User);
+        const $set = {};
+        if (updates.backupCodes !== undefined) {
+            $set['backupCodes'] = updates.backupCodes;
+        }
+        if (updates.passwordWrappedPrivateKey !== undefined) {
+            $set['passwordWrappedPrivateKey'] = updates.passwordWrappedPrivateKey;
+        }
+        if (Object.keys($set).length > 0) {
+            await UserModel.updateOne({ _id: userId }, { $set }, { session: this.session });
+        }
+    }
+    async getMemberType(userId) {
+        const UserModel = model_registry_1.ModelRegistry.instance.getTypedModel(base_model_name_1.BaseModelName.User);
+        const doc = await UserModel.findById(userId)
+            .session(this.session ?? null)
+            .exec();
+        if (!doc) {
+            throw new Error(`User not found: ${userId}`);
+        }
+        return await this.roleService.getMemberType(doc, this.session);
+    }
+    async fetchBatch(afterId, limit = 500) {
+        const UserModel = model_registry_1.ModelRegistry.instance.getTypedModel(base_model_name_1.BaseModelName.User);
+        const query = {};
+        if (afterId) {
+            query['_id'] = { $gt: afterId };
+        }
+        const docs = await UserModel.find(query)
+            .sort({ _id: 1 })
+            .limit(limit)
+            .session(this.session ?? null)
+            .exec();
+        return docs.map((doc) => ({
+            _id: doc._id,
+            username: doc.username,
+            email: doc.email,
+            publicKey: doc.publicKey,
+            backupCodes: doc.backupCodes ?? [],
+            passwordWrappedPrivateKey: doc.passwordWrappedPrivateKey,
+            createdAt: doc.createdAt,
+            updatedAt: doc.updatedAt,
+        }));
+    }
+}
+exports.MongoBackupCodeStore = MongoBackupCodeStore;
+//# sourceMappingURL=mongo-backup-code-store.js.map

package/src/services/mongo-backup-code-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mongo-backup-code-store.js","sourceRoot":"","sources":["../../../../../packages/digitaldefiance-node-express-suite-mongo/src/services/mongo-backup-code-store.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAMH,qEAAgE;AAOhE,sDAAkD;AAIlD;;;;;;;;;;GAUG;AACH,MAAa,oBAAoB;IAKd,WAAW,CAAyB;IACpC,WAAW,CAAsC;IACjD,OAAO,CAAiB;IAEzC,YACE,WAAmC,EACnC,WAAgD,EAChD,OAAuB;QAEvB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED;;;OAGG;IACI,WAAW,CAChB,OAAsB;QAEtB,OAAO,IAAI,oBAAoB,CAC7B,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,WAAW,EAChB,OAAO,CACR,CAAC;IACJ,CAAC;IAEM,KAAK,CAAC,aAAa,CACxB,MAAW;QAEX,MAAM,SAAS,GAAG,8BAAa,CAAC,QAAQ,CAAC,aAAa,CAEpD,+BAAa,CAAC,IAAI,CAAC,CAAC;QACtB,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC;aACzC,OAAO,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC;aAC7B,IAAI,EAAE,CAAC;QACV,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QAEtB,OAAO;YACL,GAAG,EAAE,GAAG,CAAC,GAAG;YACZ,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,EAAE;YAClC,yBAAyB,EAAE,GAAG,CAAC,yBAAyB;YACxD,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,SAAS,EAAE,GAAG,CAAC,SAAS;SACzB,CAAC;IACJ,CAAC;IAEM,KAAK,CAAC,gBAAgB,CAC3B,MAAW,EACX,OAA8B;QAE9B,MAAM,SAAS,GAAG,8BAAa,CAAC,QAAQ,CAAC,aAAa,CAEpD,+BAAa,CAAC,IAAI,CAAC,CAAC;QAEtB,MAAM,IAAI,GAA4B,EAAE,CAAC;QACzC,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YACtC,IAAI,CAAC,aAAa,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC;QAC5C,CAAC;QACD,IAAI,OAAO,CAAC,yBAAyB,KAAK,SAAS,EAAE,CAAC;YACpD,IAAI,CAAC,2BAA2B,CAAC,GAAG,OAAO,CAAC,yBAAyB,CAAC;QACxE,CAAC;QAED,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjC,MAAM,SAAS,CAAC,SAAS,CACvB,EAAE,GAAG,EAAE,MAAM,EAAS,EACtB,EAAE,IAAI,EAAE,EACR,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAC1B,CAAC;QACJ,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,aAAa,CAAC,MAAW;QACpC,MAAM,SAAS,GAAG,8BAAa,CAAC,QAAQ,CAAC,aAAa,CAEpD,+BAAa,CAAC,IAAI,CAAC,CAAC;QACtB,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC;aACzC,OAAO,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC;aAC7B,IAAI,EAAE,CAAC;QACV,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,KAAK,CAAC,mBAAmB,MAAM,EAAE,CAAC,CAAC;QAC/C,CAAC;QACD,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACjE,CAAC;IAEM,KAAK,CAAC,UAAU,CACrB,OAAgB,EAChB,KAAK,GAAG,GAAG;QAEX,MAAM,SAAS,GAAG,8BAAa,CAAC,QAAQ,CAAC,aAAa,CAEpD,+BAAa,CAAC,IAAI,CAAC,CAAC;QAEtB,MAAM,KAAK,GAA4B,EAAE,CAAC;QAC1C,IAAI,OAAO,EAAE,CAAC;YACZ,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;QAClC,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,KAAY,CAAC;aAC5C,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,EAAS,CAAC;aACvB,KAAK,CAAC,KAAK,CAAC;aACZ,OAAO,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC;aAC7B,IAAI,EAAE,CAAC;QAEV,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACxB,GAAG,EAAE,GAAG,CAAC,GAAG;YACZ,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,EAAE;YAClC,yBAAyB,EAAE,GAAG,CAAC,yBAAyB;YACxD,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,SAAS,EAAE,GAAG,CAAC,SAAS;SACzB,CAAC,CAAC,CAAC;IACN,CAAC;CACF;AA5HD,oDA4HC"}

package/src/services/mongo-base.d.ts

@@ -0,0 +1,24 @@
+/**
+ * @fileoverview Mongoose-specific base service extending the database-agnostic BaseService.
+ * Constrains TApplication to IMongoApplication so subclasses get type-safe
+ * access to .db, .getModel(), and .environment.mongo.
+ * @module services/mongo-base
+ */
+import { IMongoApplication } from '../interfaces/mongo-application';
+import { BaseService } from '@digitaldefiance/node-express-suite';
+import type { PlatformID } from '@digitaldefiance/node-ecies-lib';
+/**
+ * Mongoose-specific base service.
+ * Extends BaseService with TApplication constrained to IMongoApplication.
+ *
+ * Use this for services that need Mongoose-specific access (application.db,
+ * application.getModel, application.environment.mongo). Services that are
+ * database-agnostic should extend BaseService directly.
+ *
+ * @template TID - Platform ID type (defaults to Buffer)
+ * @template TApplication - Must extend IMongoApplication
+ */
+export declare class MongoBaseService<TID extends PlatformID = Buffer, TApplication extends IMongoApplication<TID> = IMongoApplication<TID>> extends BaseService<TID, TApplication> {
+    constructor(application: TApplication);
+}
+//# sourceMappingURL=mongo-base.d.ts.map

package/src/services/mongo-base.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mongo-base.d.ts","sourceRoot":"","sources":["../../../../../packages/digitaldefiance-node-express-suite-mongo/src/services/mongo-base.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,EAAE,WAAW,EAAE,MAAM,qCAAqC,CAAC;AAClE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAElE;;;;;;;;;;GAUG;AACH,qBAAa,gBAAgB,CAC3B,GAAG,SAAS,UAAU,GAAG,MAAM,EAC/B,YAAY,SAAS,iBAAiB,CAAC,GAAG,CAAC,GAAG,iBAAiB,CAAC,GAAG,CAAC,CACpE,SAAQ,WAAW,CAAC,GAAG,EAAE,YAAY,CAAC;gBAC1B,WAAW,EAAE,YAAY;CAGtC"}

package/src/services/mongo-base.js

@@ -0,0 +1,28 @@
+"use strict";
+/**
+ * @fileoverview Mongoose-specific base service extending the database-agnostic BaseService.
+ * Constrains TApplication to IMongoApplication so subclasses get type-safe
+ * access to .db, .getModel(), and .environment.mongo.
+ * @module services/mongo-base
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MongoBaseService = void 0;
+const node_express_suite_1 = require("@digitaldefiance/node-express-suite");
+/**
+ * Mongoose-specific base service.
+ * Extends BaseService with TApplication constrained to IMongoApplication.
+ *
+ * Use this for services that need Mongoose-specific access (application.db,
+ * application.getModel, application.environment.mongo). Services that are
+ * database-agnostic should extend BaseService directly.
+ *
+ * @template TID - Platform ID type (defaults to Buffer)
+ * @template TApplication - Must extend IMongoApplication
+ */
+class MongoBaseService extends node_express_suite_1.BaseService {
+    constructor(application) {
+        super(application);
+    }
+}
+exports.MongoBaseService = MongoBaseService;
+//# sourceMappingURL=mongo-base.js.map

package/src/services/mongo-base.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mongo-base.js","sourceRoot":"","sources":["../../../../../packages/digitaldefiance-node-express-suite-mongo/src/services/mongo-base.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAGH,4EAAkE;AAGlE;;;;;;;;;;GAUG;AACH,MAAa,gBAGX,SAAQ,gCAA8B;IACtC,YAAY,WAAyB;QACnC,KAAK,CAAC,WAAW,CAAC,CAAC;IACrB,CAAC;CACF;AAPD,4CAOC"}

package/src/services/mongoose-collection.d.ts

@@ -0,0 +1,52 @@
+/**
+ * @fileoverview Mongoose collection adapter implementing ICollection.
+ * Wraps a mongoose Model to conform to the shared ICollection interface
+ * from brightchain-lib.
+ * @module services/mongoose-collection
+ */
+import type { AggregationStage, BsonDocument, BulkWriteOperation, BulkWriteOptions, BulkWriteResult, ChangeListener, CollectionSchema, DeleteResult, DocumentId, FilterQuery, FindOptions, ICollection, IndexOptions, IndexSpec, InsertManyResult, InsertOneResult, ReadPreference, ReplaceResult, TextIndexOptions, UpdateOptions, UpdateQuery, UpdateResult, ValidationFieldError, WriteConcern, WriteOptions } from '@digitaldefiance/suite-core-lib';
+import type { Connection } from '@digitaldefiance/mongoose-types';
+/**
+ * Adapts a mongoose Model to the ICollection<T> interface.
+ * Delegates CRUD, query, index, and bulk operations to the underlying
+ * mongoose model. Schema validation methods are no-ops since mongoose
+ * handles schema validation internally.
+ */
+export declare class MongooseCollection<T extends BsonDocument = BsonDocument> implements ICollection<T> {
+    private _model;
+    private _writeConcern;
+    private _readPreference;
+    constructor(connection: Connection, collectionName: string);
+    insertOne(doc: T, options?: WriteOptions): Promise<InsertOneResult>;
+    insertMany(docs: T[], options?: WriteOptions): Promise<InsertManyResult>;
+    findOne(filter?: FilterQuery<T>, options?: FindOptions<T>): Promise<T | null>;
+    find(filter?: FilterQuery<T>, options?: FindOptions<T>): Promise<T[]>;
+    findById(id: DocumentId): Promise<T | null>;
+    updateOne(filter: FilterQuery<T>, update: UpdateQuery<T>, options?: UpdateOptions): Promise<UpdateResult>;
+    updateMany(filter: FilterQuery<T>, update: UpdateQuery<T>, options?: UpdateOptions): Promise<UpdateResult>;
+    deleteOne(filter: FilterQuery<T>, options?: WriteOptions): Promise<DeleteResult>;
+    deleteMany(filter: FilterQuery<T>, options?: WriteOptions): Promise<DeleteResult>;
+    replaceOne(filter: FilterQuery<T>, doc: T, options?: UpdateOptions): Promise<ReplaceResult>;
+    countDocuments(filter?: FilterQuery<T>): Promise<number>;
+    estimatedDocumentCount(): Promise<number>;
+    distinct<K extends keyof T>(field: K, filter?: FilterQuery<T>): Promise<Array<T[K]>>;
+    aggregate(pipeline: AggregationStage[]): Promise<BsonDocument[]>;
+    createIndex(spec: IndexSpec, options?: IndexOptions): Promise<string>;
+    dropIndex(name: string): Promise<void>;
+    listIndexes(): string[];
+    bulkWrite(operations: BulkWriteOperation<T>[], options?: BulkWriteOptions): Promise<BulkWriteResult>;
+    watch(listener: ChangeListener<T>): () => void;
+    setSchema(_schema: CollectionSchema): void;
+    getSchema(): CollectionSchema | undefined;
+    removeSchema(): void;
+    validateDoc(_doc: T): ValidationFieldError[];
+    getWriteConcern(): WriteConcern;
+    setWriteConcern(wc: WriteConcern): void;
+    getReadPreference(): ReadPreference;
+    setReadPreference(rp: ReadPreference): void;
+    createTextIndex(options: TextIndexOptions): string;
+    dropTextIndex(): void;
+    hasTextIndex(): boolean;
+    drop(): Promise<void>;
+}
+//# sourceMappingURL=mongoose-collection.d.ts.map

package/src/services/mongoose-collection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mongoose-collection.d.ts","sourceRoot":"","sources":["../../../../../packages/digitaldefiance-node-express-suite-mongo/src/services/mongoose-collection.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EACV,gBAAgB,EAChB,YAAY,EACZ,kBAAkB,EAClB,gBAAgB,EAChB,eAAe,EACf,cAAc,EACd,gBAAgB,EAChB,YAAY,EACZ,UAAU,EACV,WAAW,EACX,WAAW,EACX,WAAW,EACX,YAAY,EACZ,SAAS,EACT,gBAAgB,EAChB,eAAe,EACf,cAAc,EACd,aAAa,EACb,gBAAgB,EAChB,aAAa,EACb,WAAW,EACX,YAAY,EACZ,oBAAoB,EACpB,YAAY,EACZ,YAAY,EACb,MAAM,iCAAiC,CAAC;AACzC,OAAO,KAAK,EAAE,UAAU,EAAS,MAAM,iCAAiC,CAAC;AAoBzE;;;;;GAKG;AACH,qBAAa,kBAAkB,CAC7B,CAAC,SAAS,YAAY,GAAG,YAAY,CACrC,YAAW,WAAW,CAAC,CAAC,CAAC;IACzB,OAAO,CAAC,MAAM,CAAW;IACzB,OAAO,CAAC,aAAa,CAA0B;IAC/C,OAAO,CAAC,eAAe,CAA6B;gBAExC,UAAU,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM;IAapD,SAAS,CAAC,GAAG,EAAE,CAAC,EAAE,OAAO,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,eAAe,CAAC;IAUnE,UAAU,CACd,IAAI,EAAE,CAAC,EAAE,EACT,OAAO,CAAC,EAAE,YAAY,GACrB,OAAO,CAAC,gBAAgB,CAAC;IActB,OAAO,CACX,MAAM,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC,EACvB,OAAO,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC,GACvB,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC;IAcd,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC;IAoBrE,QAAQ,CAAC,EAAE,EAAE,UAAU,GAAG,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC;IAK3C,SAAS,CACb,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,EACtB,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,EACtB,OAAO,CAAC,EAAE,aAAa,GACtB,OAAO,CAAC,YAAY,CAAC;IAgBlB,UAAU,CACd,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,EACtB,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,EACtB,OAAO,CAAC,EAAE,aAAa,GACtB,OAAO,CAAC,YAAY,CAAC;IAgBlB,SAAS,CACb,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,EACtB,OAAO,CAAC,EAAE,YAAY,GACrB,OAAO,CAAC,YAAY,CAAC;IAYlB,UAAU,CACd,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,EACtB,OAAO,CAAC,EAAE,YAAY,GACrB,OAAO,CAAC,YAAY,CAAC;IAYlB,UAAU,CACd,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,EACtB,GAAG,EAAE,CAAC,EACN,OAAO,CAAC,EAAE,aAAa,GACtB,OAAO,CAAC,aAAa,CAAC;IAkBnB,cAAc,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;IAMxD,sBAAsB,IAAI,OAAO,CAAC,MAAM,CAAC;IAIzC,QAAQ,CAAC,CAAC,SAAS,MAAM,CAAC,EAC9B,KAAK,EAAE,CAAC,EACR,MAAM,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC,GACtB,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAOjB,SAAS,CAAC,QAAQ,EAAE,gBAAgB,EAAE,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IAWhE,WAAW,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC;IAWrE,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI5C,WAAW,IAAI,MAAM,EAAE;IASjB,SAAS,CACb,UAAU,EAAE,kBAAkB,CAAC,CAAC,CAAC,EAAE,EACnC,OAAO,CAAC,EAAE,gBAAgB,GACzB,OAAO,CAAC,eAAe,CAAC;IAsE3B,KAAK,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI;IAyB9C,SAAS,CAAC,OAAO,EAAE,gBAAgB,GAAG,IAAI;IAI1C,SAAS,IAAI,gBAAgB,GAAG,SAAS;IAKzC,YAAY,IAAI,IAAI;IAIpB,WAAW,CAAC,IAAI,EAAE,CAAC,GAAG,oBAAoB,EAAE;IAO5C,eAAe,IAAI,YAAY;IAI/B,eAAe,CAAC,EAAE,EAAE,YAAY,GAAG,IAAI;IAIvC,iBAAiB,IAAI,cAAc;IAInC,iBAAiB,CAAC,EAAE,EAAE,cAAc,GAAG,IAAI;IAM3C,eAAe,CAAC,OAAO,EAAE,gBAAgB,GAAG,MAAM;IAiBlD,aAAa,IAAI,IAAI;IAOrB,YAAY,IAAI,OAAO;IAQjB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;CAG5B"}