@iveri/contracts 0.4.0 → 0.6.0

package/dist/esm/enum/user-permission.enum.d.ts

@@ -89,7 +89,46 @@ export declare enum UserPermission {
      * read: it causes an outbound request rather than returning a row, and redriving a large
      * dead-letter backlog is a way to flood a customer's own service.
      */
-    CONDUIT_DELIVERY_OPERATE = "conduit:delivery:operate"
+    CONDUIT_DELIVERY_OPERATE = "conduit:delivery:operate",
+    /** Read connector manifests. They hold no credential, so this is configuration only. */
+    CONDUIT_CONNECTOR_READ = "conduit:connector:read",
+    /**
+     * Define or amend a connector manifest — **the list of hosts and paths Conduit may be asked
+     * to call**, and the token endpoint it will send a customer's client secret to.
+     *
+     * The most powerful permission in the outbound half. A dispatch cannot name a URL; it can
+     * only name an operation somebody with this permission wrote down, which is what keeps
+     * outbound from being an authenticated open proxy. Whoever holds this decides where the
+     * proxy may point.
+     */
+    CONDUIT_CONNECTOR_MANAGE = "conduit:connector:manage",
+    /** Read connections. Never exposes their stored credential values. */
+    CONDUIT_CONNECTION_READ = "conduit:connection:read",
+    /**
+     * Create, amend or delete a connection — the customer's own third-party credentials.
+     *
+     * Single manage permission rather than create/update/delete: the dangerous act is holding
+     * the credential at all, and the three carry the same risk.
+     */
+    CONDUIT_CONNECTION_MANAGE = "conduit:connection:manage",
+    /**
+     * Read the outbound log and its dead-letter queue, including each attempt's response.
+     *
+     * A dispatch record holds the payload a vertical asked to send — a customer's message text,
+     * an order — so this is a data-read permission, not a config one.
+     */
+    CONDUIT_DISPATCH_READ = "conduit:dispatch:read",
+    /**
+     * Submit an outbound request. **This is the permission a vertical holds**, and the only one
+     * it needs: `unibox-api` sending a reply presents this and nothing else.
+     *
+     * Separate from `CONDUIT_DISPATCH_OPERATE` because sending is the routine act and operating
+     * the queue is the exceptional one — a service principal that can send should not also be
+     * able to redrive a backlog.
+     */
+    CONDUIT_DISPATCH_SEND = "conduit:dispatch:send",
+    /** Redrive a dead-lettered dispatch, or cancel one still pending. */
+    CONDUIT_DISPATCH_OPERATE = "conduit:dispatch:operate"
 }
 /**
  * Every member, for seeding the owner role and validating custom-role input.

package/dist/esm/enum/user-permission.enum.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"user-permission.enum.d.ts","sourceRoot":"","sources":["../../../src/enum/user-permission.enum.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,oBAAY,cAAc;IAItB,WAAW,gBAAgB;IAC3B,aAAa,kBAAkB;IAC/B,sFAAsF;IACtF,aAAa,kBAAkB;IAG/B,SAAS,cAAc;IACvB,WAAW,gBAAgB;IAC3B,WAAW,gBAAgB;IAC3B,WAAW,gBAAgB;IAG3B,eAAe,oBAAoB;IACnC,6EAA6E;IAC7E,iBAAiB,sBAAsB;IACvC;;;OAGG;IACH,sBAAsB,2BAA2B;IAGjD,SAAS,cAAc;IACvB,WAAW,gBAAgB;IAC3B,WAAW,gBAAgB;IAC3B,WAAW,gBAAgB;IAG3B,YAAY,iBAAiB;IAC7B,aAAa,kBAAkB;IAC/B,cAAc,mBAAmB;IAKjC,qEAAqE;IACrE,qBAAqB,0BAA0B;IAC/C,uBAAuB,4BAA4B;IACnD,uBAAuB,4BAA4B;IACnD,uBAAuB,4BAA4B;IAGnD;;;;OAIG;IACH,oBAAoB,yBAAyB;IAC7C,sBAAsB,2BAA2B;IAGjD;;;;OAIG;IACH,sBAAsB,2BAA2B;IAGjD,qBAAqB,0BAA0B;IAC/C,yFAAyF;IACzF,uBAAuB,4BAA4B;IAGnD,mEAAmE;IACnE,wBAAwB,6BAA6B;IACrD;;;;;;;OAOG;IACH,0BAA0B,+BAA+B;IAGzD,kBAAkB,uBAAuB;IACzC,2DAA2D;IAC3D,oBAAoB,yBAAyB;IAG7C;;;;;OAKG;IACH,qBAAqB,0BAA0B;IAC/C;;;;;;OAMG;IACH,wBAAwB,6BAA6B;CACxD;AAED;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB,EAAE,SAAS,cAAc,EAAiD,CAAC"}
+{"version":3,"file":"user-permission.enum.d.ts","sourceRoot":"","sources":["../../../src/enum/user-permission.enum.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,oBAAY,cAAc;IAItB,WAAW,gBAAgB;IAC3B,aAAa,kBAAkB;IAC/B,sFAAsF;IACtF,aAAa,kBAAkB;IAG/B,SAAS,cAAc;IACvB,WAAW,gBAAgB;IAC3B,WAAW,gBAAgB;IAC3B,WAAW,gBAAgB;IAG3B,eAAe,oBAAoB;IACnC,6EAA6E;IAC7E,iBAAiB,sBAAsB;IACvC;;;OAGG;IACH,sBAAsB,2BAA2B;IAGjD,SAAS,cAAc;IACvB,WAAW,gBAAgB;IAC3B,WAAW,gBAAgB;IAC3B,WAAW,gBAAgB;IAG3B,YAAY,iBAAiB;IAC7B,aAAa,kBAAkB;IAC/B,cAAc,mBAAmB;IAKjC,qEAAqE;IACrE,qBAAqB,0BAA0B;IAC/C,uBAAuB,4BAA4B;IACnD,uBAAuB,4BAA4B;IACnD,uBAAuB,4BAA4B;IAGnD;;;;OAIG;IACH,oBAAoB,yBAAyB;IAC7C,sBAAsB,2BAA2B;IAGjD;;;;OAIG;IACH,sBAAsB,2BAA2B;IAGjD,qBAAqB,0BAA0B;IAC/C,yFAAyF;IACzF,uBAAuB,4BAA4B;IAGnD,mEAAmE;IACnE,wBAAwB,6BAA6B;IACrD;;;;;;;OAOG;IACH,0BAA0B,+BAA+B;IAGzD,kBAAkB,uBAAuB;IACzC,2DAA2D;IAC3D,oBAAoB,yBAAyB;IAG7C;;;;;OAKG;IACH,qBAAqB,0BAA0B;IAC/C;;;;;;OAMG;IACH,wBAAwB,6BAA6B;IAGrD,wFAAwF;IACxF,sBAAsB,2BAA2B;IACjD;;;;;;;;OAQG;IACH,wBAAwB,6BAA6B;IAGrD,sEAAsE;IACtE,uBAAuB,4BAA4B;IACnD;;;;;OAKG;IACH,yBAAyB,8BAA8B;IAGvD;;;;;OAKG;IACH,qBAAqB,0BAA0B;IAC/C;;;;;;;OAOG;IACH,qBAAqB,0BAA0B;IAC/C,qEAAqE;IACrE,wBAAwB,6BAA6B;CACxD;AAED;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB,EAAE,SAAS,cAAc,EAAiD,CAAC"}

package/dist/esm/enum/user-permission.enum.js

@@ -105,6 +105,48 @@ export var UserPermission;
      * dead-letter backlog is a way to flood a customer's own service.
      */
     UserPermission["CONDUIT_DELIVERY_OPERATE"] = "conduit:delivery:operate";
+    // ── Connector (outbound) ────────────────────────────────────────────────
+    /** Read connector manifests. They hold no credential, so this is configuration only. */
+    UserPermission["CONDUIT_CONNECTOR_READ"] = "conduit:connector:read";
+    /**
+     * Define or amend a connector manifest — **the list of hosts and paths Conduit may be asked
+     * to call**, and the token endpoint it will send a customer's client secret to.
+     *
+     * The most powerful permission in the outbound half. A dispatch cannot name a URL; it can
+     * only name an operation somebody with this permission wrote down, which is what keeps
+     * outbound from being an authenticated open proxy. Whoever holds this decides where the
+     * proxy may point.
+     */
+    UserPermission["CONDUIT_CONNECTOR_MANAGE"] = "conduit:connector:manage";
+    // ── Connection (outbound) ───────────────────────────────────────────────
+    /** Read connections. Never exposes their stored credential values. */
+    UserPermission["CONDUIT_CONNECTION_READ"] = "conduit:connection:read";
+    /**
+     * Create, amend or delete a connection — the customer's own third-party credentials.
+     *
+     * Single manage permission rather than create/update/delete: the dangerous act is holding
+     * the credential at all, and the three carry the same risk.
+     */
+    UserPermission["CONDUIT_CONNECTION_MANAGE"] = "conduit:connection:manage";
+    // ── Dispatch (outbound) ─────────────────────────────────────────────────
+    /**
+     * Read the outbound log and its dead-letter queue, including each attempt's response.
+     *
+     * A dispatch record holds the payload a vertical asked to send — a customer's message text,
+     * an order — so this is a data-read permission, not a config one.
+     */
+    UserPermission["CONDUIT_DISPATCH_READ"] = "conduit:dispatch:read";
+    /**
+     * Submit an outbound request. **This is the permission a vertical holds**, and the only one
+     * it needs: `unibox-api` sending a reply presents this and nothing else.
+     *
+     * Separate from `CONDUIT_DISPATCH_OPERATE` because sending is the routine act and operating
+     * the queue is the exceptional one — a service principal that can send should not also be
+     * able to redrive a backlog.
+     */
+    UserPermission["CONDUIT_DISPATCH_SEND"] = "conduit:dispatch:send";
+    /** Redrive a dead-lettered dispatch, or cancel one still pending. */
+    UserPermission["CONDUIT_DISPATCH_OPERATE"] = "conduit:dispatch:operate";
 })(UserPermission || (UserPermission = {}));
 /**
  * Every member, for seeding the owner role and validating custom-role input.

package/dist/esm/enum/user-permission.enum.js.map

@@ -1 +1 @@
-{"version":3,"file":"user-permission.enum.js","sourceRoot":"","sources":["../../../src/enum/user-permission.enum.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAN,IAAY,cAqGX;AArGD,WAAY,cAAc;IACtB,4EAA4E;IAE5E,2EAA2E;IAC3E,6CAA2B,CAAA;IAC3B,iDAA+B,CAAA;IAC/B,sFAAsF;IACtF,iDAA+B,CAAA;IAE/B,2EAA2E;IAC3E,yCAAuB,CAAA;IACvB,6CAA2B,CAAA;IAC3B,6CAA2B,CAAA;IAC3B,6CAA2B,CAAA;IAE3B,2EAA2E;IAC3E,qDAAmC,CAAA;IACnC,6EAA6E;IAC7E,yDAAuC,CAAA;IACvC;;;OAGG;IACH,mEAAiD,CAAA;IAEjD,2EAA2E;IAC3E,yCAAuB,CAAA;IACvB,6CAA2B,CAAA;IAC3B,6CAA2B,CAAA;IAC3B,6CAA2B,CAAA;IAE3B,2EAA2E;IAC3E,+CAA6B,CAAA;IAC7B,iDAA+B,CAAA;IAC/B,mDAAiC,CAAA;IAEjC,4EAA4E;IAE5E,2EAA2E;IAC3E,qEAAqE;IACrE,iEAA+C,CAAA;IAC/C,qEAAmD,CAAA;IACnD,qEAAmD,CAAA;IACnD,qEAAmD,CAAA;IAEnD,2EAA2E;IAC3E;;;;OAIG;IACH,+DAA6C,CAAA;IAC7C,mEAAiD,CAAA;IAEjD,2EAA2E;IAC3E;;;;OAIG;IACH,mEAAiD,CAAA;IAEjD,2EAA2E;IAC3E,iEAA+C,CAAA;IAC/C,yFAAyF;IACzF,qEAAmD,CAAA;IAEnD,2EAA2E;IAC3E,mEAAmE;IACnE,uEAAqD,CAAA;IACrD;;;;;;;OAOG;IACH,2EAAyD,CAAA;IAEzD,2EAA2E;IAC3E,2DAAyC,CAAA;IACzC,2DAA2D;IAC3D,+DAA6C,CAAA;IAE7C,2EAA2E;IAC3E;;;;;OAKG;IACH,iEAA+C,CAAA;IAC/C;;;;;;OAMG;IACH,uEAAqD,CAAA;AACzD,CAAC,EArGW,cAAc,KAAd,cAAc,QAqGzB;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA8B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC"}
+{"version":3,"file":"user-permission.enum.js","sourceRoot":"","sources":["../../../src/enum/user-permission.enum.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAN,IAAY,cAkJX;AAlJD,WAAY,cAAc;IACtB,4EAA4E;IAE5E,2EAA2E;IAC3E,6CAA2B,CAAA;IAC3B,iDAA+B,CAAA;IAC/B,sFAAsF;IACtF,iDAA+B,CAAA;IAE/B,2EAA2E;IAC3E,yCAAuB,CAAA;IACvB,6CAA2B,CAAA;IAC3B,6CAA2B,CAAA;IAC3B,6CAA2B,CAAA;IAE3B,2EAA2E;IAC3E,qDAAmC,CAAA;IACnC,6EAA6E;IAC7E,yDAAuC,CAAA;IACvC;;;OAGG;IACH,mEAAiD,CAAA;IAEjD,2EAA2E;IAC3E,yCAAuB,CAAA;IACvB,6CAA2B,CAAA;IAC3B,6CAA2B,CAAA;IAC3B,6CAA2B,CAAA;IAE3B,2EAA2E;IAC3E,+CAA6B,CAAA;IAC7B,iDAA+B,CAAA;IAC/B,mDAAiC,CAAA;IAEjC,4EAA4E;IAE5E,2EAA2E;IAC3E,qEAAqE;IACrE,iEAA+C,CAAA;IAC/C,qEAAmD,CAAA;IACnD,qEAAmD,CAAA;IACnD,qEAAmD,CAAA;IAEnD,2EAA2E;IAC3E;;;;OAIG;IACH,+DAA6C,CAAA;IAC7C,mEAAiD,CAAA;IAEjD,2EAA2E;IAC3E;;;;OAIG;IACH,mEAAiD,CAAA;IAEjD,2EAA2E;IAC3E,iEAA+C,CAAA;IAC/C,yFAAyF;IACzF,qEAAmD,CAAA;IAEnD,2EAA2E;IAC3E,mEAAmE;IACnE,uEAAqD,CAAA;IACrD;;;;;;;OAOG;IACH,2EAAyD,CAAA;IAEzD,2EAA2E;IAC3E,2DAAyC,CAAA;IACzC,2DAA2D;IAC3D,+DAA6C,CAAA;IAE7C,2EAA2E;IAC3E;;;;;OAKG;IACH,iEAA+C,CAAA;IAC/C;;;;;;OAMG;IACH,uEAAqD,CAAA;IAErD,2EAA2E;IAC3E,wFAAwF;IACxF,mEAAiD,CAAA;IACjD;;;;;;;;OAQG;IACH,uEAAqD,CAAA;IAErD,2EAA2E;IAC3E,sEAAsE;IACtE,qEAAmD,CAAA;IACnD;;;;;OAKG;IACH,yEAAuD,CAAA;IAEvD,2EAA2E;IAC3E;;;;;OAKG;IACH,iEAA+C,CAAA;IAC/C;;;;;;;OAOG;IACH,iEAA+C,CAAA;IAC/C,qEAAqE;IACrE,uEAAqD,CAAA;AACzD,CAAC,EAlJW,cAAc,KAAd,cAAc,QAkJzB;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA8B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@iveri/contracts",
-  "version": "0.4.0",
+  "version": "0.6.0",
   "description": "Wire contracts shared by every Iveri backend and frontend. Zero runtime dependencies.",
   "license": "MIT",
   "repository": {