@flusys/nestjs-entity-builder 9.0.1 → 9.1.0

package/fesm/controllers/index.js

@@ -5,23 +5,24 @@ import { __webpack_require__ } from '../runtime.js';
 var __webpack_exec__ = function(moduleId) { return __webpack_require__(__webpack_require__.s = moduleId); }
 import * as __rspack_chunk_1 from '../21.js';
 __webpack_require__.C(__rspack_chunk_1);
-import * as __rspack_chunk_2 from '../582.js';
+import * as __rspack_chunk_2 from '../489.js';
 __webpack_require__.C(__rspack_chunk_2);
 import * as __rspack_chunk_3 from '../794.js';
 __webpack_require__.C(__rspack_chunk_3);
-import * as __rspack_chunk_4 from '../677.js';
+import * as __rspack_chunk_4 from '../996.js';
 __webpack_require__.C(__rspack_chunk_4);
 import * as __rspack_chunk_5 from '../362.js';
 __webpack_require__.C(__rspack_chunk_5);
 import * as __rspack_chunk_6 from '../719.js';
 __webpack_require__.C(__rspack_chunk_6);
-import * as __rspack_chunk_7 from '../913.js';
+import * as __rspack_chunk_7 from '../606.js';
 __webpack_require__.C(__rspack_chunk_7);
 import * as __rspack_chunk_8 from './index.js';
 __webpack_require__.C(__rspack_chunk_8);
-var __webpack_exports__ = __webpack_exec__(6384);var __webpack_exports__EntityDefinitionController = __webpack_exports__.hv;
+var __webpack_exports__ = __webpack_exec__(2517);var __webpack_exports__EntityDefinitionController = __webpack_exports__.hv;
 var __webpack_exports__FieldDefinitionController = __webpack_exports__.GX;
+var __webpack_exports__FlowApiKeyController = __webpack_exports__.Sv;
 var __webpack_exports__FlowDefinitionController = __webpack_exports__.W8;
 var __webpack_exports__FlowExecutionController = __webpack_exports__.VU;
 var __webpack_exports__FlowRuntimeController = __webpack_exports__.bw;
-export { __webpack_exports__EntityDefinitionController as EntityDefinitionController, __webpack_exports__FieldDefinitionController as FieldDefinitionController, __webpack_exports__FlowDefinitionController as FlowDefinitionController, __webpack_exports__FlowExecutionController as FlowExecutionController, __webpack_exports__FlowRuntimeController as FlowRuntimeController };
+export { __webpack_exports__EntityDefinitionController as EntityDefinitionController, __webpack_exports__FieldDefinitionController as FieldDefinitionController, __webpack_exports__FlowApiKeyController as FlowApiKeyController, __webpack_exports__FlowDefinitionController as FlowDefinitionController, __webpack_exports__FlowExecutionController as FlowExecutionController, __webpack_exports__FlowRuntimeController as FlowRuntimeController };

package/fesm/docs/index.js

@@ -36,7 +36,7 @@ Runtime-defined business entities backed by real database tables, whose records
 - Permissions per entity and action: \`entity_builder.entity.<entityCode>.<create|read|update|delete>\`, checked by flows running as the caller
 
 ### ⚙️ Automation
-- **Flows**: visual virtual APIs served at \`POST /api-flows/:slug[/:path]\` - each Request step sets its own access (jwt, permission, api_key or public), run-as, transaction, time limit and rate limit - validate, branch, loop, read/write entities, call other flows, HTTP requests and events
+- **Flows**: visual virtual APIs served at \`POST /api-flows/:slug\` (jwt, permission, api_key or public) - validate, branch, loop, read/write entities in one transaction, call other flows, HTTP requests and events
 
 ## Data Isolation
 
@@ -49,7 +49,7 @@ to a company or branch, add fields such as \`company_id\` / \`branch_id\` and ma
 
 - \`/entity-builder/entity-definitions/*\` - Entities, schema changes, health and history
 - \`/entity-builder/field-definitions/*\` - Field metadata (read-only; changes go through schema changes)
-- \`/entity-builder/flows/*\`, \`/entity-builder/flow-executions/*\` - Flows
+- \`/entity-builder/flows/*\`, \`/entity-builder/flow-api-keys/*\`, \`/entity-builder/flow-executions/*\` - Flows
 - \`/api-flows/:slug\` - Call a flow
 
 ## Common Error Codes

package/fesm/entities/index.js

@@ -10,9 +10,9 @@ __webpack_require__.C(__rspack_chunk_2);
 var __webpack_exports__ = __webpack_exec__(665);var __webpack_exports__EntityBuilderEntities = __webpack_exports__.Ui;
 var __webpack_exports__EntityDefinition = __webpack_exports__.f6;
 var __webpack_exports__FieldDefinition = __webpack_exports__.ck;
+var __webpack_exports__FlowApiKey = __webpack_exports__.Sf;
 var __webpack_exports__FlowDefinition = __webpack_exports__.G;
 var __webpack_exports__FlowExecution = __webpack_exports__.j5;
-var __webpack_exports__FlowVersion = __webpack_exports__.pj;
 var __webpack_exports__SchemaChangeLog = __webpack_exports__.We;
 var __webpack_exports__getEntityBuilderEntities = __webpack_exports__.ac;
-export { __webpack_exports__EntityBuilderEntities as EntityBuilderEntities, __webpack_exports__EntityDefinition as EntityDefinition, __webpack_exports__FieldDefinition as FieldDefinition, __webpack_exports__FlowDefinition as FlowDefinition, __webpack_exports__FlowExecution as FlowExecution, __webpack_exports__FlowVersion as FlowVersion, __webpack_exports__SchemaChangeLog as SchemaChangeLog, __webpack_exports__getEntityBuilderEntities as getEntityBuilderEntities };
+export { __webpack_exports__EntityBuilderEntities as EntityBuilderEntities, __webpack_exports__EntityDefinition as EntityDefinition, __webpack_exports__FieldDefinition as FieldDefinition, __webpack_exports__FlowApiKey as FlowApiKey, __webpack_exports__FlowDefinition as FlowDefinition, __webpack_exports__FlowExecution as FlowExecution, __webpack_exports__SchemaChangeLog as SchemaChangeLog, __webpack_exports__getEntityBuilderEntities as getEntityBuilderEntities };

package/fesm/guards/index.js

@@ -24,8 +24,10 @@ var core_ = __webpack_require__(3075);
 
 // EXTERNAL MODULE: ./projects/nestjs-entity-builder/src/config/message-keys.ts
 var message_keys = __webpack_require__(5732);
-// EXTERNAL MODULE: ./projects/nestjs-entity-builder/src/services/flow-definition.service.ts + 1 modules
-var flow_definition_service = __webpack_require__(4921);
+// EXTERNAL MODULE: ./projects/nestjs-entity-builder/src/services/flow-definition.service.ts
+var flow_definition_service = __webpack_require__(5229);
+// EXTERNAL MODULE: ./projects/nestjs-entity-builder/src/services/flow-api-key.service.ts + 1 modules
+var flow_api_key_service = __webpack_require__(8888);
 // EXTERNAL MODULE: ./projects/nestjs-entity-builder/src/services/flow-runtime.service.ts
 var flow_runtime_service = __webpack_require__(2300);
 ;// CONCATENATED MODULE: ./projects/nestjs-entity-builder/src/flow-engine/flow-rate-limiter.ts
@@ -69,8 +71,6 @@ const DEFAULT_MAX_KEYS = 10_000;
     }
 }
 
-// EXTERNAL MODULE: ./projects/nestjs-entity-builder/src/flow-engine/flow-api-key.ts
-var flow_api_key = __webpack_require__(4816);
 // EXTERNAL MODULE: ./projects/nestjs-entity-builder/src/flow-engine/flow.types.ts
 var flow_types = __webpack_require__(6256);
 ;// CONCATENATED MODULE: ./projects/nestjs-entity-builder/src/guards/flow-access.guard.ts
@@ -127,27 +127,34 @@ class FlowAccessGuard {
         });
         const flow = slug ? await runtime.findActive(slug) : null;
         const endpoint = flow ? (0,flow_types/* .findEndpoint */.vS)(flow, request.params?.endpoint) : undefined;
-        // A Request step for other flows only has no URL: it looks the same as an unknown one.
-        if (!flow || !endpoint || endpoint.authMode === 'internal') throw new common_.NotFoundException({
+        if (!flow || !endpoint) throw new common_.NotFoundException({
             message: 'Not found',
             messageKey: message_keys/* .FLOW_MESSAGES.NOT_FOUND */.wu.NOT_FOUND
         });
         request.flowDefinition = flow;
         request.flowEndpoint = endpoint;
         const ip = request.ip ?? request.socket?.remoteAddress ?? 'unknown';
-        if (!limiter.hit(`${flow.id}|${endpoint.nodeId}|${ip}`, endpoint.rateLimitPerMinute)) {
+        if (!limiter.hit(`${flow.id}|${ip}`, flow.rateLimitPerMinute)) {
             throw new common_.HttpException({
                 message: 'Too many requests. Try again in a minute.',
                 messageKey: message_keys/* .FLOW_MESSAGES.RATE_LIMITED */.wu.RATE_LIMITED
             }, common_.HttpStatus.TOO_MANY_REQUESTS);
         }
-        switch(endpoint.authMode){
+        switch(flow.authMode){
             case 'public':
                 return true;
             case 'api_key':
                 {
+                    const keys = await this.moduleRef.resolve(flow_api_key_service/* .FlowApiKeyService */.T, contextId, {
+                        strict: false
+                    });
                     const header = request.headers?.['x-api-key'];
-                    if (!(0,flow_api_key/* .apiKeyOpens */.NT)(endpoint.apiKey, Array.isArray(header) ? header[0] : header)) {
+                    const check = await keys.verify(flow.id, Array.isArray(header) ? header[0] : header);
+                    if (check === 'expired') throw new common_.UnauthorizedException({
+                        message: 'This API key has expired.',
+                        messageKey: message_keys/* .FLOW_MESSAGES.API_KEY_EXPIRED */.wu.API_KEY_EXPIRED
+                    });
+                    if (check !== 'valid') {
                         throw new common_.UnauthorizedException({
                             message: 'A valid API key is required (x-api-key header).',
                             messageKey: message_keys/* .FLOW_MESSAGES.API_KEY_INVALID */.wu.API_KEY_INVALID
@@ -161,7 +168,7 @@ class FlowAccessGuard {
             case 'permission':
                 {
                     if (!await this.authenticate(context)) return false;
-                    await this.permissionCache.assertPermission(request.user, endpoint.permissionCode || (0,flow_definition_service/* .defaultFlowPermissionCode */.Er)(flow.slug));
+                    await this.permissionCache.assertPermission(request.user, flow.permissionCode || (0,flow_definition_service/* .defaultFlowPermissionCode */.Er)(flow.slug));
                     return true;
                 }
             default:
@@ -214,11 +221,11 @@ import { __webpack_require__ } from '../runtime.js';
 var __webpack_exec__ = function(moduleId) { return __webpack_require__(__webpack_require__.s = moduleId); }
 import * as __rspack_chunk_1 from '../21.js';
 __webpack_require__.C(__rspack_chunk_1);
-import * as __rspack_chunk_2 from '../582.js';
+import * as __rspack_chunk_2 from '../489.js';
 __webpack_require__.C(__rspack_chunk_2);
 import * as __rspack_chunk_3 from '../794.js';
 __webpack_require__.C(__rspack_chunk_3);
-import * as __rspack_chunk_4 from '../677.js';
+import * as __rspack_chunk_4 from '../996.js';
 __webpack_require__.C(__rspack_chunk_4);
 import * as __rspack_chunk_5 from './index.js';
 __webpack_require__.C(__rspack_chunk_5);