@fidelios/server 0.0.1

package/dist/redaction.js

@@ -0,0 +1,63 @@
+const SECRET_PAYLOAD_KEY_RE = /(api[-_]?key|access[-_]?token|auth(?:_?token)?|authorization|bearer|secret|passwd|password|credential|jwt|private[-_]?key|cookie|connectionstring)/i;
+const JWT_VALUE_RE = /^[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+(?:\.[A-Za-z0-9_-]+)?$/;
+export const REDACTED_EVENT_VALUE = "***REDACTED***";
+function isPlainObject(value) {
+    if (typeof value !== "object" || value === null || Array.isArray(value))
+        return false;
+    const proto = Object.getPrototypeOf(value);
+    return proto === Object.prototype || proto === null;
+}
+function sanitizeValue(value) {
+    if (value === null || value === undefined)
+        return value;
+    if (Array.isArray(value))
+        return value.map(sanitizeValue);
+    if (isSecretRefBinding(value))
+        return value;
+    if (isPlainBinding(value))
+        return { type: "plain", value: sanitizeValue(value.value) };
+    if (!isPlainObject(value))
+        return value;
+    return sanitizeRecord(value);
+}
+function isSecretRefBinding(value) {
+    if (!isPlainObject(value))
+        return false;
+    return value.type === "secret_ref" && typeof value.secretId === "string";
+}
+function isPlainBinding(value) {
+    if (!isPlainObject(value))
+        return false;
+    return value.type === "plain" && "value" in value;
+}
+export function sanitizeRecord(record) {
+    const redacted = {};
+    for (const [key, value] of Object.entries(record)) {
+        if (SECRET_PAYLOAD_KEY_RE.test(key)) {
+            if (isSecretRefBinding(value)) {
+                redacted[key] = sanitizeValue(value);
+                continue;
+            }
+            if (isPlainBinding(value)) {
+                redacted[key] = { type: "plain", value: REDACTED_EVENT_VALUE };
+                continue;
+            }
+            redacted[key] = REDACTED_EVENT_VALUE;
+            continue;
+        }
+        if (typeof value === "string" && JWT_VALUE_RE.test(value)) {
+            redacted[key] = REDACTED_EVENT_VALUE;
+            continue;
+        }
+        redacted[key] = sanitizeValue(value);
+    }
+    return redacted;
+}
+export function redactEventPayload(payload) {
+    if (!payload)
+        return null;
+    if (!isPlainObject(payload))
+        return payload;
+    return sanitizeRecord(payload);
+}
+//# sourceMappingURL=redaction.js.map

package/dist/redaction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redaction.js","sourceRoot":"","sources":["../src/redaction.ts"],"names":[],"mappings":"AAAA,MAAM,qBAAqB,GACzB,qJAAqJ,CAAC;AACxJ,MAAM,YAAY,GAAG,uEAAuE,CAAC;AAC7F,MAAM,CAAC,MAAM,oBAAoB,GAAG,gBAAgB,CAAC;AAErD,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtF,MAAM,KAAK,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC3C,OAAO,KAAK,KAAK,MAAM,CAAC,SAAS,IAAI,KAAK,KAAK,IAAI,CAAC;AACtD,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACxD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAC1D,IAAI,kBAAkB,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,cAAc,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;IACvF,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxC,OAAO,cAAc,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxC,OAAO,KAAK,CAAC,IAAI,KAAK,YAAY,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC;AAC3E,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxC,OAAO,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,OAAO,IAAI,KAAK,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAA+B;IAC5D,MAAM,QAAQ,GAA4B,EAAE,CAAC;IAC7C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,IAAI,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACpC,IAAI,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC9B,QAAQ,CAAC,GAAG,CAAC,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;gBACrC,SAAS;YACX,CAAC;YACD,IAAI,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC1B,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;gBAC/D,SAAS;YACX,CAAC;YACD,QAAQ,CAAC,GAAG,CAAC,GAAG,oBAAoB,CAAC;YACrC,SAAS;QACX,CAAC;QACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1D,QAAQ,CAAC,GAAG,CAAC,GAAG,oBAAoB,CAAC;YACrC,SAAS;QACX,CAAC;QACD,QAAQ,CAAC,GAAG,CAAC,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAAuC;IACxE,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IAC5C,OAAO,cAAc,CAAC,OAAO,CAAC,CAAC;AACjC,CAAC"}

package/dist/routes/access.d.ts

@@ -0,0 +1,61 @@
+import type { Request } from "express";
+import type { Db } from "@fidelios/db";
+import { invites, joinRequests } from "@fidelios/db";
+import { PERMISSION_KEYS } from "@fidelios/shared";
+import type { DeploymentExposure, DeploymentMode } from "@fidelios/shared";
+export declare function companyInviteExpiresAt(nowMs?: number): Date;
+type JoinDiagnostic = {
+    code: string;
+    level: "info" | "warn";
+    message: string;
+    hint?: string;
+};
+export declare function buildJoinDefaultsPayloadForAccept(input: {
+    adapterType: string | null;
+    defaultsPayload: unknown;
+    fideliosApiUrl?: unknown;
+    inboundOpenClawAuthHeader?: string | null;
+    inboundOpenClawTokenHeader?: string | null;
+}): unknown;
+export declare function mergeJoinDefaultsPayloadForReplay(existingDefaultsPayload: unknown, nextDefaultsPayload: unknown): unknown;
+export declare function canReplayOpenClawGatewayInviteAccept(input: {
+    requestType: "human" | "agent";
+    adapterType: string | null;
+    existingJoinRequest: Pick<typeof joinRequests.$inferSelect, "requestType" | "adapterType" | "status"> | null;
+}): boolean;
+export declare function normalizeAgentDefaultsForJoin(input: {
+    adapterType: string | null;
+    defaultsPayload: unknown;
+    deploymentMode: DeploymentMode;
+    deploymentExposure: DeploymentExposure;
+    bindHost: string;
+    allowedHostnames: string[];
+}): {
+    normalized: Record<string, unknown> | null;
+    diagnostics: JoinDiagnostic[];
+    fatalErrors: string[];
+};
+export declare function buildInviteOnboardingTextDocument(req: Request, token: string, invite: typeof invites.$inferSelect, opts: {
+    deploymentMode: DeploymentMode;
+    deploymentExposure: DeploymentExposure;
+    bindHost: string;
+    allowedHostnames: string[];
+}): string;
+export declare function agentJoinGrantsFromDefaults(defaultsPayload: Record<string, unknown> | null | undefined): Array<{
+    permissionKey: (typeof PERMISSION_KEYS)[number];
+    scope: Record<string, unknown> | null;
+}>;
+type JoinRequestManagerCandidate = {
+    id: string;
+    role: string;
+    reportsTo: string | null;
+};
+export declare function resolveJoinRequestAgentManagerId(candidates: JoinRequestManagerCandidate[]): string | null;
+export declare function accessRoutes(db: Db, opts: {
+    deploymentMode: DeploymentMode;
+    deploymentExposure: DeploymentExposure;
+    bindHost: string;
+    allowedHostnames: string[];
+}): import("express-serve-static-core").Router;
+export {};
+//# sourceMappingURL=access.d.ts.map

package/dist/routes/access.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"access.d.ts","sourceRoot":"","sources":["../../src/routes/access.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAEvC,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAGL,OAAO,EACP,YAAY,EACb,MAAM,cAAc,CAAC;AACtB,OAAO,EAUL,eAAe,EAChB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,KAAK,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AA+C3E,wBAAgB,sBAAsB,CAAC,KAAK,GAAE,MAAmB,QAEhE;AA0ID,KAAK,cAAc,GAAG;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,CAAC;AAuMF,wBAAgB,iCAAiC,CAAC,KAAK,EAAE;IACvD,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,eAAe,EAAE,OAAO,CAAC;IACzB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,yBAAyB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1C,0BAA0B,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5C,GAAG,OAAO,CAsDV;AAED,wBAAgB,iCAAiC,CAC/C,uBAAuB,EAAE,OAAO,EAChC,mBAAmB,EAAE,OAAO,GAC3B,OAAO,CAmCT;AAED,wBAAgB,oCAAoC,CAAC,KAAK,EAAE;IAC1D,WAAW,EAAE,OAAO,GAAG,OAAO,CAAC;IAC/B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,mBAAmB,EAAE,IAAI,CACvB,OAAO,YAAY,CAAC,YAAY,EAChC,aAAa,GAAG,aAAa,GAAG,QAAQ,CACzC,GAAG,IAAI,CAAC;CACV,GAAG,OAAO,CAoBV;AAmDD,wBAAgB,6BAA6B,CAAC,KAAK,EAAE;IACnD,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,eAAe,EAAE,OAAO,CAAC;IACzB,cAAc,EAAE,cAAc,CAAC;IAC/B,kBAAkB,EAAE,kBAAkB,CAAC;IACvC,QAAQ,EAAE,MAAM,CAAC;IACjB,gBAAgB,EAAE,MAAM,EAAE,CAAC;CAC5B;;;;EAoPA;AAoOD,wBAAgB,iCAAiC,CAC/C,GAAG,EAAE,OAAO,EACZ,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,OAAO,OAAO,CAAC,YAAY,EACnC,IAAI,EAAE;IACJ,cAAc,EAAE,cAAc,CAAC;IAC/B,kBAAkB,EAAE,kBAAkB,CAAC;IACvC,QAAQ,EAAE,MAAM,CAAC;IACjB,gBAAgB,EAAE,MAAM,EAAE,CAAC;CAC5B,UAgOF;AAmGD,wBAAgB,2BAA2B,CACzC,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,GAAG,SAAS,GAC1D,KAAK,CAAC;IACP,aAAa,EAAE,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC;IAChD,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CACvC,CAAC,CAYD;AAED,KAAK,2BAA2B,GAAG;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B,CAAC;AAEF,wBAAgB,gCAAgC,CAC9C,UAAU,EAAE,2BAA2B,EAAE,GACxC,MAAM,GAAG,IAAI,CASf;AAyGD,wBAAgB,YAAY,CAC1B,EAAE,EAAE,EAAE,EACN,IAAI,EAAE;IACJ,cAAc,EAAE,cAAc,CAAC;IAC/B,kBAAkB,EAAE,kBAAkB,CAAC;IACvC,QAAQ,EAAE,MAAM,CAAC;IACjB,gBAAgB,EAAE,MAAM,EAAE,CAAC;CAC5B,8CA6yCF"}