@jazzmind/busibox-app 3.0.18

package/dist/lib/authz/rbac.js

@@ -0,0 +1,532 @@
+/**
+ * RBAC Client for busibox-app
+ *
+ * Centralized RBAC client that queries the authz service.
+ * All Busibox applications should use this client for role/permission checks.
+ *
+ * Authentication:
+ * - For self-service operations (user checking own access), pass the session JWT
+ *   as `accessToken` - authz accepts it directly, no token exchange required.
+ * - For admin operations (accessing other users' data), use an exchanged access
+ *   token with appropriate authz.bindings.* scopes.
+ *
+ * Usage:
+ * ```typescript
+ * import { hasRole, isAdmin, getUserRoles, getUserAccessibleResources } from 'busibox-app';
+ *
+ * // Self-service: pass session JWT directly
+ * const resources = await getUserAccessibleResources(userId, 'app', {
+ *   authzUrl: 'http://authz-api:8010',
+ *   accessToken: sessionJwt,
+ * });
+ *
+ * // Admin: use exchanged access token with scopes
+ * const roles = await getUserRoles('other-user-123', {
+ *   accessToken: adminAccessToken,
+ * });
+ * ```
+ */
+// Default to production authz service
+// For test environment, set AUTHZ_BASE_URL to your authz service URL
+const DEFAULT_AUTHZ_URL = process.env.AUTHZ_BASE_URL || process.env.AUTHZ_URL || 'http://authz-api:8010';
+/**
+ * Get authorization header for RBAC API calls.
+ * Zero Trust: Uses access token (JWT) for authentication.
+ */
+async function getAuthHeader(options) {
+    // Zero Trust: Access token (JWT) takes precedence
+    if (options.accessToken) {
+        return `Bearer ${options.accessToken}`;
+    }
+    // Server-side: use custom token acquisition
+    if (options.getAuthzToken && options.userId) {
+        const token = await options.getAuthzToken(options.userId, 'authz', []);
+        return `Bearer ${token}`;
+    }
+    // No authentication provided - some endpoints are public (e.g., role lookups)
+    return undefined;
+}
+/**
+ * Fetch from authz service with error handling
+ */
+async function authzFetch(path, options) {
+    const { userId, getAuthzToken, authzUrl, accessToken, ...fetchOptions } = options;
+    const baseUrl = authzUrl || DEFAULT_AUTHZ_URL;
+    const url = `${baseUrl}${path}`;
+    const authHeader = await getAuthHeader({ userId, getAuthzToken, accessToken });
+    const headers = {
+        'Content-Type': 'application/json',
+        ...fetchOptions.headers,
+    };
+    if (authHeader) {
+        headers['Authorization'] = authHeader;
+    }
+    const response = await fetch(url, {
+        ...fetchOptions,
+        headers,
+    });
+    if (!response.ok) {
+        const errorText = await response.text().catch(() => 'Unknown error');
+        throw new Error(`AuthZ RBAC error (${response.status}): ${errorText}`);
+    }
+    return response;
+}
+// ============================================================================
+// Role Query Functions
+// ============================================================================
+/**
+ * Get all roles from authz service
+ */
+export async function listRoles(options = {}) {
+    try {
+        const response = await authzFetch('/admin/roles', options);
+        return await response.json();
+    }
+    catch (error) {
+        console.error('[RBAC] Failed to list roles:', error);
+        return [];
+    }
+}
+/**
+ * Get a specific role by ID
+ */
+export async function getRole(roleId, options = {}) {
+    try {
+        const response = await authzFetch(`/admin/roles/${roleId}`, options);
+        return await response.json();
+    }
+    catch (error) {
+        console.error('[RBAC] Failed to get role:', error);
+        return null;
+    }
+}
+/**
+ * Get a role by name
+ */
+export async function getRoleByName(roleName, options = {}) {
+    try {
+        const roles = await listRoles(options);
+        return roles.find(r => r.name === roleName) || null;
+    }
+    catch (error) {
+        console.error('[RBAC] Failed to get role by name:', error);
+        return null;
+    }
+}
+// ============================================================================
+// User Query Functions
+// ============================================================================
+/**
+ * List users with pagination and filtering
+ */
+export async function listUsers(params = {}, options = {}) {
+    try {
+        const queryParams = new URLSearchParams();
+        if (params.page)
+            queryParams.set('page', params.page.toString());
+        if (params.limit)
+            queryParams.set('limit', params.limit.toString());
+        if (params.status)
+            queryParams.set('status', params.status);
+        if (params.search)
+            queryParams.set('search', params.search);
+        const queryString = queryParams.toString();
+        const path = `/admin/users${queryString ? `?${queryString}` : ''}`;
+        const response = await authzFetch(path, options);
+        return await response.json();
+    }
+    catch (error) {
+        console.error('[RBAC] Failed to list users:', error);
+        return { users: [], pagination: { page: 1, limit: 20, total_count: 0, total_pages: 0 } };
+    }
+}
+/**
+ * Get all users (convenience function that pages through all results)
+ */
+export async function getAllUsers(options = {}) {
+    const allUsers = [];
+    let page = 1;
+    const limit = 100;
+    while (true) {
+        const result = await listUsers({ page, limit }, options);
+        allUsers.push(...result.users);
+        if (page >= result.pagination.total_pages) {
+            break;
+        }
+        page++;
+    }
+    return allUsers;
+}
+/**
+ * Get a specific user by ID (includes roles)
+ */
+export async function getUser(userId, options = {}) {
+    try {
+        const response = await authzFetch(`/admin/users/${userId}`, options);
+        return await response.json();
+    }
+    catch (error) {
+        console.error('[RBAC] Failed to get user:', error);
+        return null;
+    }
+}
+/**
+ * Get a user by email address (includes roles)
+ * Returns null if user not found.
+ */
+export async function getUserByEmail(email, options = {}) {
+    try {
+        const response = await authzFetch(`/admin/users/by-email/${encodeURIComponent(email)}`, options);
+        return await response.json();
+    }
+    catch (error) {
+        // 404 means user not found - not an error
+        return null;
+    }
+}
+/**
+ * Get user's roles
+ */
+export async function getUserRoles(userId, options = {}) {
+    try {
+        const user = await getUser(userId, options);
+        return user?.roles || [];
+    }
+    catch (error) {
+        console.error('[RBAC] Failed to get user roles:', error);
+        return [];
+    }
+}
+/**
+ * Get user's role names
+ */
+export async function getUserRoleNames(userId, options = {}) {
+    const roles = await getUserRoles(userId, options);
+    return roles.map(r => r.name);
+}
+// ============================================================================
+// Permission Check Functions
+// ============================================================================
+/**
+ * Check if user has a specific role
+ */
+export async function hasRole(userId, roleName, options = {}) {
+    try {
+        const roles = await getUserRoles(userId, options);
+        return roles.some(r => r.name === roleName);
+    }
+    catch (error) {
+        console.error('[RBAC] Failed to check role:', error);
+        return false;
+    }
+}
+/**
+ * Check if user has any of the specified roles
+ */
+export async function hasAnyRole(userId, roleNames, options = {}) {
+    try {
+        const roles = await getUserRoles(userId, options);
+        const userRoleNames = roles.map(r => r.name);
+        return roleNames.some(roleName => userRoleNames.includes(roleName));
+    }
+    catch (error) {
+        console.error('[RBAC] Failed to check roles:', error);
+        return false;
+    }
+}
+/**
+ * Check if user has all of the specified roles
+ */
+export async function hasAllRoles(userId, roleNames, options = {}) {
+    try {
+        const roles = await getUserRoles(userId, options);
+        const userRoleNames = roles.map(r => r.name);
+        return roleNames.every(roleName => userRoleNames.includes(roleName));
+    }
+    catch (error) {
+        console.error('[RBAC] Failed to check roles:', error);
+        return false;
+    }
+}
+/**
+ * Check if user is an admin
+ */
+export async function isAdmin(userId, options = {}) {
+    return hasRole(userId, 'Admin', options);
+}
+/**
+ * Check if user is a guest
+ */
+export async function isGuest(userId, options = {}) {
+    return hasRole(userId, 'Guest', options);
+}
+// ============================================================================
+// Role Management Functions (Admin Only)
+// ============================================================================
+/**
+ * Create a new role (requires admin token)
+ *
+ * @param name - Role name
+ * @param description - Optional description
+ * @param scopes - Optional OAuth scopes for this role (e.g. ['data.read', 'search.write'])
+ * @param options - RBAC client options with adminToken
+ */
+export async function createRole(name, description, options, scopes) {
+    const response = await authzFetch('/admin/roles', {
+        ...options,
+        method: 'POST',
+        body: JSON.stringify({ name, description, scopes: scopes || [] }),
+    });
+    return await response.json();
+}
+/**
+ * Update a role (requires admin token)
+ *
+ * @param roleId - Role UUID
+ * @param updates - Fields to update (name, description, scopes)
+ * @param options - RBAC client options with adminToken
+ */
+export async function updateRole(roleId, updates, options) {
+    const response = await authzFetch(`/admin/roles/${roleId}`, {
+        ...options,
+        method: 'PUT',
+        body: JSON.stringify(updates),
+    });
+    return await response.json();
+}
+/**
+ * Delete a role (requires admin token)
+ */
+export async function deleteRole(roleId, options) {
+    await authzFetch(`/admin/roles/${roleId}`, {
+        ...options,
+        method: 'DELETE',
+    });
+}
+/**
+ * Add a role to a user (requires admin token)
+ */
+export async function addUserRole(userId, roleId, options) {
+    await authzFetch(`/admin/users/${userId}/roles/${roleId}`, {
+        ...options,
+        method: 'POST',
+    });
+}
+/**
+ * Remove a role from a user (requires admin token)
+ */
+export async function removeUserRole(userId, roleId, options) {
+    await authzFetch(`/admin/users/${userId}/roles/${roleId}`, {
+        ...options,
+        method: 'DELETE',
+    });
+}
+/**
+ * Delete a user (requires admin token)
+ */
+export async function deleteUser(userId, options) {
+    await authzFetch(`/admin/users/${userId}`, {
+        ...options,
+        method: 'DELETE',
+    });
+}
+// ============================================================================
+// User Management Functions (Admin Only)
+// ============================================================================
+/**
+ * Create a new user (requires admin token)
+ */
+export async function createUser(params, options) {
+    const response = await authzFetch('/admin/users', {
+        ...options,
+        method: 'POST',
+        body: JSON.stringify(params),
+    });
+    return await response.json();
+}
+/**
+ * Update a user (requires admin token)
+ */
+export async function updateUser(userId, updates, options) {
+    const response = await authzFetch(`/admin/users/${userId}`, {
+        ...options,
+        method: 'PATCH',
+        body: JSON.stringify(updates),
+    });
+    return await response.json();
+}
+/**
+ * Activate a pending user (requires admin token)
+ */
+export async function activateUser(userId, options) {
+    const response = await authzFetch(`/admin/users/${userId}/activate`, {
+        ...options,
+        method: 'POST',
+    });
+    return await response.json();
+}
+/**
+ * Deactivate an active user (requires admin token)
+ */
+export async function deactivateUser(userId, options) {
+    const response = await authzFetch(`/admin/users/${userId}/deactivate`, {
+        ...options,
+        method: 'POST',
+    });
+    return await response.json();
+}
+/**
+ * Reactivate a deactivated user (requires admin token)
+ */
+export async function reactivateUser(userId, options) {
+    const response = await authzFetch(`/admin/users/${userId}/reactivate`, {
+        ...options,
+        method: 'POST',
+    });
+    return await response.json();
+}
+/**
+ * List email domain rules (requires admin token)
+ */
+export async function listEmailDomains(options) {
+    const response = await authzFetch('/admin/email-domains', options);
+    const result = await response.json();
+    return result.domains || [];
+}
+/**
+ * Add or update an email domain rule (requires admin token)
+ */
+export async function addEmailDomain(domain, isAllowed, options) {
+    const response = await authzFetch('/admin/email-domains', {
+        ...options,
+        method: 'POST',
+        body: JSON.stringify({ domain, is_allowed: isAllowed }),
+    });
+    return await response.json();
+}
+/**
+ * Remove an email domain rule (requires admin token)
+ */
+export async function removeEmailDomain(domain, options) {
+    await authzFetch(`/admin/email-domains/${encodeURIComponent(domain)}`, {
+        ...options,
+        method: 'DELETE',
+    });
+}
+/**
+ * Create a new role-resource binding (requires admin token)
+ */
+export async function createRoleBinding(params, options) {
+    const response = await authzFetch('/admin/bindings', {
+        ...options,
+        method: 'POST',
+        body: JSON.stringify(params),
+    });
+    return await response.json();
+}
+/**
+ * Get a role binding by ID (requires admin token)
+ */
+export async function getRoleBinding(bindingId, options) {
+    try {
+        const response = await authzFetch(`/admin/bindings/${bindingId}`, options);
+        return await response.json();
+    }
+    catch (error) {
+        console.error('[RBAC] Failed to get role binding:', error);
+        return null;
+    }
+}
+/**
+ * Delete a role binding by ID (requires admin token)
+ */
+export async function deleteRoleBinding(bindingId, options) {
+    await authzFetch(`/admin/bindings/${bindingId}`, {
+        ...options,
+        method: 'DELETE',
+    });
+}
+/**
+ * List role bindings with optional filters (requires admin token)
+ */
+export async function listRoleBindings(params = {}, options) {
+    const searchParams = new URLSearchParams();
+    if (params.role_id)
+        searchParams.set('role_id', params.role_id);
+    if (params.resource_type)
+        searchParams.set('resource_type', params.resource_type);
+    if (params.resource_id)
+        searchParams.set('resource_id', params.resource_id);
+    if (params.limit)
+        searchParams.set('limit', String(params.limit));
+    if (params.offset)
+        searchParams.set('offset', String(params.offset));
+    const queryString = searchParams.toString();
+    const url = queryString ? `/admin/bindings?${queryString}` : '/admin/bindings';
+    const response = await authzFetch(url, options);
+    return await response.json();
+}
+/**
+ * Get all bindings for a specific role (requires admin token)
+ */
+export async function getRoleResourceBindings(roleId, resourceType, options) {
+    if (!options) {
+        throw new Error('Admin token is required for getRoleResourceBindings');
+    }
+    const searchParams = new URLSearchParams();
+    if (resourceType)
+        searchParams.set('resource_type', resourceType);
+    const queryString = searchParams.toString();
+    const url = queryString
+        ? `/roles/${roleId}/bindings?${queryString}`
+        : `/roles/${roleId}/bindings`;
+    const response = await authzFetch(url, options);
+    return await response.json();
+}
+/**
+ * Get all roles that have access to a specific resource (requires admin token)
+ */
+export async function getResourceRoles(resourceType, resourceId, options) {
+    const response = await authzFetch(`/resources/${resourceType}/${resourceId}/roles`, options);
+    return await response.json();
+}
+/**
+ * Check if a user can access a specific resource (requires admin token)
+ */
+export async function userCanAccessResource(userId, resourceType, resourceId, options) {
+    const response = await authzFetch(`/users/${userId}/can-access/${resourceType}/${resourceId}`, options);
+    const result = await response.json();
+    return result.has_access === true;
+}
+/**
+ * Get all resource IDs of a given type that a user can access (requires admin token)
+ */
+export async function getUserAccessibleResources(userId, resourceType, options) {
+    const response = await authzFetch(`/users/${userId}/resources/${resourceType}`, options);
+    const result = await response.json();
+    return result.resource_ids || [];
+}
+/**
+ * Helper: Grant a role access to a resource (creates binding)
+ * Convenience wrapper around createRoleBinding
+ */
+export async function grantRoleResourceAccess(roleId, resourceType, resourceId, permissions, options) {
+    if (!options) {
+        throw new Error('Admin token is required for grantRoleResourceAccess');
+    }
+    return createRoleBinding({ role_id: roleId, resource_type: resourceType, resource_id: resourceId, permissions }, options);
+}
+/**
+ * Helper: Revoke a role's access to a resource (deletes binding)
+ * Finds and deletes the binding for the given role/resource combo
+ */
+export async function revokeRoleResourceAccess(roleId, resourceType, resourceId, options) {
+    // Find the binding first
+    const bindings = await listRoleBindings({ role_id: roleId, resource_type: resourceType, resource_id: resourceId }, options);
+    if (bindings.length === 0) {
+        return false; // No binding to delete
+    }
+    await deleteRoleBinding(bindings[0].id, options);
+    return true;
+}
+//# sourceMappingURL=rbac.js.map

package/dist/lib/authz/rbac.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rbac.js","sourceRoot":"","sources":["../../../src/lib/authz/rbac.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,sCAAsC;AACtC,qEAAqE;AACrE,MAAM,iBAAiB,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,uBAAuB,CAAC;AA8FzG;;;GAGG;AACH,KAAK,UAAU,aAAa,CAAC,OAA0B;IACrD,kDAAkD;IAClD,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;QACxB,OAAO,UAAU,OAAO,CAAC,WAAW,EAAE,CAAC;IACzC,CAAC;IAED,4CAA4C;IAC5C,IAAI,OAAO,CAAC,aAAa,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;QACvE,OAAO,UAAU,KAAK,EAAE,CAAC;IAC3B,CAAC;IAED,8EAA8E;IAC9E,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,UAAU,CACvB,IAAY,EACZ,OAAwC;IAExC,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,YAAY,EAAE,GAAG,OAAO,CAAC;IAClF,MAAM,OAAO,GAAG,QAAQ,IAAI,iBAAiB,CAAC;IAC9C,MAAM,GAAG,GAAG,GAAG,OAAO,GAAG,IAAI,EAAE,CAAC;IAEhC,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,CAAC,CAAC;IAE/E,MAAM,OAAO,GAA2B;QACtC,cAAc,EAAE,kBAAkB;QAClC,GAAI,YAAY,CAAC,OAAkC;KACpD,CAAC;IAEF,IAAI,UAAU,EAAE,CAAC;QACf,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,CAAC;IACxC,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAChC,GAAG,YAAY;QACf,OAAO;KACR,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,CAAC;QACrE,MAAM,IAAI,KAAK,CAAC,qBAAqB,QAAQ,CAAC,MAAM,MAAM,SAAS,EAAE,CAAC,CAAC;IACzE,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,+EAA+E;AAC/E,uBAAuB;AACvB,+EAA+E;AAE/E;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,UAA6B,EAAE;IAC7D,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;QAC3D,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC/B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,KAAK,CAAC,CAAC;QACrD,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,MAAc,EAAE,UAA6B,EAAE;IAC3E,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,gBAAgB,MAAM,EAAE,EAAE,OAAO,CAAC,CAAC;QACrE,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC/B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,4BAA4B,EAAE,KAAK,CAAC,CAAC;QACnD,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,QAAgB,EAAE,UAA6B,EAAE;IACnF,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,CAAC;QACvC,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,IAAI,CAAC;IACtD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,oCAAoC,EAAE,KAAK,CAAC,CAAC;QAC3D,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,uBAAuB;AACvB,+EAA+E;AAE/E;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,SAA0B,EAAE,EAC5B,UAA6B,EAAE;IAE/B,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,IAAI,eAAe,EAAE,CAAC;QAC1C,IAAI,MAAM,CAAC,IAAI;YAAE,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QACjE,IAAI,MAAM,CAAC,KAAK;YAAE,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;QACpE,IAAI,MAAM,CAAC,MAAM;YAAE,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QAC5D,IAAI,MAAM,CAAC,MAAM;YAAE,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QAE5D,MAAM,WAAW,GAAG,WAAW,CAAC,QAAQ,EAAE,CAAC;QAC3C,MAAM,IAAI,GAAG,eAAe,WAAW,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAEnE,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACjD,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC/B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,KAAK,CAAC,CAAC;QACrD,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,EAAE,CAAC;IAC3F,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,UAA6B,EAAE;IAC/D,MAAM,QAAQ,GAAW,EAAE,CAAC;IAC5B,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,MAAM,KAAK,GAAG,GAAG,CAAC;IAElB,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,OAAO,CAAC,CAAC;QACzD,QAAQ,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAE/B,IAAI,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC;YAC1C,MAAM;QACR,CAAC;QACD,IAAI,EAAE,CAAC;IACT,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,MAAc,EAAE,UAA6B,EAAE;IAC3E,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,gBAAgB,MAAM,EAAE,EAAE,OAAO,CAAC,CAAC;QACrE,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC/B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,4BAA4B,EAAE,KAAK,CAAC,CAAC;QACnD,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,KAAa,EAAE,UAA6B,EAAE;IACjF,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,yBAAyB,kBAAkB,CAAC,KAAK,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QACjG,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC/B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,0CAA0C;QAC1C,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAAc,EAAE,UAA6B,EAAE;IAChF,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC5C,OAAO,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;IAC3B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,kCAAkC,EAAE,KAAK,CAAC,CAAC;QACzD,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,MAAc,EAAE,UAA6B,EAAE;IACpF,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClD,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AAChC,CAAC;AAED,+EAA+E;AAC/E,6BAA6B;AAC7B,+EAA+E;AAE/E;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,MAAc,EACd,QAAgB,EAChB,UAA6B,EAAE;IAE/B,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAClD,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;IAC9C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,KAAK,CAAC,CAAC;QACrD,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,MAAc,EACd,SAAmB,EACnB,UAA6B,EAAE;IAE/B,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAClD,MAAM,aAAa,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC7C,OAAO,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IACtE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,+BAA+B,EAAE,KAAK,CAAC,CAAC;QACtD,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,MAAc,EACd,SAAmB,EACnB,UAA6B,EAAE;IAE/B,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAClD,MAAM,aAAa,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC7C,OAAO,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IACvE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,+BAA+B,EAAE,KAAK,CAAC,CAAC;QACtD,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,MAAc,EAAE,UAA6B,EAAE;IAC3E,OAAO,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AAC3C,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,MAAc,EAAE,UAA6B,EAAE;IAC3E,OAAO,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AAC3C,CAAC;AAED,+EAA+E;AAC/E,yCAAyC;AACzC,+EAA+E;AAE/E;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,IAAY,EACZ,WAA0B,EAC1B,OAAyB,EACzB,MAAiB;IAEjB,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,cAAc,EAAE;QAChD,GAAG,OAAO;QACV,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,IAAI,EAAE,EAAE,CAAC;KAClE,CAAC,CAAC;IACH,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;AAC/B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,MAAc,EACd,OAA0E,EAC1E,OAAyB;IAEzB,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,gBAAgB,MAAM,EAAE,EAAE;QAC1D,GAAG,OAAO;QACV,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;KAC9B,CAAC,CAAC;IACH,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;AAC/B,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,MAAc,EACd,OAAyB;IAEzB,MAAM,UAAU,CAAC,gBAAgB,MAAM,EAAE,EAAE;QACzC,GAAG,OAAO;QACV,MAAM,EAAE,QAAQ;KACjB,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,MAAc,EACd,MAAc,EACd,OAAyB;IAEzB,MAAM,UAAU,CAAC,gBAAgB,MAAM,UAAU,MAAM,EAAE,EAAE;QACzD,GAAG,OAAO;QACV,MAAM,EAAE,MAAM;KACf,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,MAAc,EACd,MAAc,EACd,OAAyB;IAEzB,MAAM,UAAU,CAAC,gBAAgB,MAAM,UAAU,MAAM,EAAE,EAAE;QACzD,GAAG,OAAO;QACV,MAAM,EAAE,QAAQ;KACjB,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,MAAc,EACd,OAAyB;IAEzB,MAAM,UAAU,CAAC,gBAAgB,MAAM,EAAE,EAAE;QACzC,GAAG,OAAO;QACV,MAAM,EAAE,QAAQ;KACjB,CAAC,CAAC;AACL,CAAC;AAED,+EAA+E;AAC/E,yCAAyC;AACzC,+EAA+E;AAE/E;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,MAAwB,EACxB,OAAyB;IAEzB,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,cAAc,EAAE;QAChD,GAAG,OAAO;QACV,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;KAC7B,CAAC,CAAC;IACH,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;AAC/B,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,MAAc,EACd,OAAyB,EACzB,OAAyB;IAEzB,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,gBAAgB,MAAM,EAAE,EAAE;QAC1D,GAAG,OAAO;QACV,MAAM,EAAE,OAAO;QACf,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;KAC9B,CAAC,CAAC;IACH,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;AAC/B,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,MAAc,EACd,OAAyB;IAEzB,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,gBAAgB,MAAM,WAAW,EAAE;QACnE,GAAG,OAAO;QACV,MAAM,EAAE,MAAM;KACf,CAAC,CAAC;IACH,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;AAC/B,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,MAAc,EACd,OAAyB;IAEzB,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,gBAAgB,MAAM,aAAa,EAAE;QACrE,GAAG,OAAO;QACV,MAAM,EAAE,MAAM;KACf,CAAC,CAAC;IACH,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;AAC/B,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,MAAc,EACd,OAAyB;IAEzB,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,gBAAgB,MAAM,aAAa,EAAE;QACrE,GAAG,OAAO;QACV,MAAM,EAAE,MAAM;KACf,CAAC,CAAC;IACH,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;AAC/B,CAAC;AAcD;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAyB;IAEzB,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,sBAAsB,EAAE,OAAO,CAAC,CAAC;IACnE,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IACrC,OAAO,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;AAC9B,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,MAAc,EACd,SAAkB,EAClB,OAAyB;IAEzB,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,sBAAsB,EAAE;QACxD,GAAG,OAAO;QACV,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;KACxD,CAAC,CAAC;IACH,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;AAC/B,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAAc,EACd,OAAyB;IAEzB,MAAM,UAAU,CAAC,wBAAwB,kBAAkB,CAAC,MAAM,CAAC,EAAE,EAAE;QACrE,GAAG,OAAO;QACV,MAAM,EAAE,QAAQ;KACjB,CAAC,CAAC;AACL,CAAC;AA2CD;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAA+B,EAC/B,OAAyB;IAEzB,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,iBAAiB,EAAE;QACnD,GAAG,OAAO;QACV,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;KAC7B,CAAC,CAAC;IACH,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;AAC/B,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,SAAiB,EACjB,OAAyB;IAEzB,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,mBAAmB,SAAS,EAAE,EAAE,OAAO,CAAC,CAAC;QAC3E,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC/B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,oCAAoC,EAAE,KAAK,CAAC,CAAC;QAC3D,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,SAAiB,EACjB,OAAyB;IAEzB,MAAM,UAAU,CAAC,mBAAmB,SAAS,EAAE,EAAE;QAC/C,GAAG,OAAO;QACV,MAAM,EAAE,QAAQ;KACjB,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,SAAiC,EAAE,EACnC,OAAyB;IAEzB,MAAM,YAAY,GAAG,IAAI,eAAe,EAAE,CAAC;IAC3C,IAAI,MAAM,CAAC,OAAO;QAAE,YAAY,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IAChE,IAAI,MAAM,CAAC,aAAa;QAAE,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;IAClF,IAAI,MAAM,CAAC,WAAW;QAAE,YAAY,CAAC,GAAG,CAAC,aAAa,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;IAC5E,IAAI,MAAM,CAAC,KAAK;QAAE,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAClE,IAAI,MAAM,CAAC,MAAM;QAAE,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IAErE,MAAM,WAAW,GAAG,YAAY,CAAC,QAAQ,EAAE,CAAC;IAC5C,MAAM,GAAG,GAAG,WAAW,CAAC,CAAC,CAAC,mBAAmB,WAAW,EAAE,CAAC,CAAC,CAAC,iBAAiB,CAAC;IAE/E,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAChD,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;AAC/B,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,MAAc,EACd,YAA2B,EAC3B,OAA0B;IAE1B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IAED,MAAM,YAAY,GAAG,IAAI,eAAe,EAAE,CAAC;IAC3C,IAAI,YAAY;QAAE,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC;IAElE,MAAM,WAAW,GAAG,YAAY,CAAC,QAAQ,EAAE,CAAC;IAC5C,MAAM,GAAG,GAAG,WAAW;QACrB,CAAC,CAAC,UAAU,MAAM,aAAa,WAAW,EAAE;QAC5C,CAAC,CAAC,UAAU,MAAM,WAAW,CAAC;IAEhC,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAChD,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;AAC/B,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,YAA0B,EAC1B,UAAkB,EAClB,OAAyB;IAEzB,MAAM,QAAQ,GAAG,MAAM,UAAU,CAC/B,cAAc,YAAY,IAAI,UAAU,QAAQ,EAChD,OAAO,CACR,CAAC;IACF,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;AAC/B,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,MAAc,EACd,YAA0B,EAC1B,UAAkB,EAClB,OAAyB;IAEzB,MAAM,QAAQ,GAAG,MAAM,UAAU,CAC/B,UAAU,MAAM,eAAe,YAAY,IAAI,UAAU,EAAE,EAC3D,OAAO,CACR,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IACrC,OAAO,MAAM,CAAC,UAAU,KAAK,IAAI,CAAC;AACpC,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,MAAc,EACd,YAA0B,EAC1B,OAAyB;IAEzB,MAAM,QAAQ,GAAG,MAAM,UAAU,CAC/B,UAAU,MAAM,cAAc,YAAY,EAAE,EAC5C,OAAO,CACR,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IACrC,OAAO,MAAM,CAAC,YAAY,IAAI,EAAE,CAAC;AACnC,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,MAAc,EACd,YAA0B,EAC1B,UAAkB,EAClB,WAAqC,EACrC,OAA0B;IAE1B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,iBAAiB,CACtB,EAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,WAAW,EAAE,EACtF,OAAO,CACR,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,MAAc,EACd,YAA0B,EAC1B,UAAkB,EAClB,OAAyB;IAEzB,yBAAyB;IACzB,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CACrC,EAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,EACzE,OAAO,CACR,CAAC;IAEF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC,CAAC,uBAAuB;IACvC,CAAC;IAED,MAAM,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IACjD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/lib/authz/service-audit.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Audit Logging Utility (busibox-portal wrapper)
+ *
+ * This file re-exports audit functions from busibox-app.
+ * All audit events are now stored in the authz service.
+ *
+ * The Prisma AuditLog model has been removed from busibox-portal.
+ * All audit functionality is now centralized in authz.
+ */
+export { logAuditEvent, logUserLogin, logUserLogout, logLoginFailed, logPasswordResetRequest, logPasswordReset, logRoleAssigned, logRoleRemoved, logUserCreated, logUserDeleted, logUserStatusChanged, logDocumentUploaded, logDocumentDeleted, logDocumentAccessed, logConfigChanged, logApiKeyGenerated, logApiKeyRevoked, logAppRegistered, logAppUpdated, logAppDeleted, logMagicLinkSent, logMagicLinkUsed, logMagicLinkExpired, logTotpCodeSent, logTotpCodeUsed, logTotpCodeFailed, logPasskeyRegistered, logPasskeyRemoved, logPasskeyLogin, logPasskeyLoginFailed, logOAuthTokenGenerated, logOAuthTokenValidated, logOAuthTokenRejected, logRoleCreated, logRoleUpdated, logRoleDeleted, logPermissionGranted, logPermissionRevoked, logUserActivated, logUserDeactivated, } from './audit';
+export type { AuditEventParams, AuditClientOptions, } from './audit';
+/**
+ * Audit event type string union
+ *
+ * Previously this was imported from Prisma. Now it's a simple string union
+ * matching the event types supported by the authz service.
+ */
+export type AuditEventType = 'USER_LOGIN' | 'USER_LOGIN_FAILED' | 'USER_LOGOUT' | 'PASSWORD_RESET_REQUEST' | 'PASSWORD_RESET' | 'ROLE_ASSIGNED' | 'ROLE_REMOVED' | 'USER_CREATED' | 'USER_DELETED' | 'USER_STATUS_CHANGED' | 'USER_ACTIVATED' | 'USER_DEACTIVATED' | 'DOCUMENT_UPLOADED' | 'DOCUMENT_DELETED' | 'DOCUMENT_ACCESSED' | 'CONFIG_CHANGED' | 'API_KEY_GENERATED' | 'API_KEY_REVOKED' | 'APP_REGISTERED' | 'APP_UPDATED' | 'APP_DELETED' | 'MAGIC_LINK_SENT' | 'MAGIC_LINK_USED' | 'MAGIC_LINK_EXPIRED' | 'TOTP_CODE_SENT' | 'TOTP_CODE_USED' | 'TOTP_CODE_FAILED' | 'PASSKEY_REGISTERED' | 'PASSKEY_REMOVED' | 'PASSKEY_LOGIN' | 'PASSKEY_LOGIN_FAILED' | 'OAUTH_TOKEN_GENERATED' | 'OAUTH_TOKEN_VALIDATED' | 'OAUTH_TOKEN_REJECTED' | 'ROLE_CREATED' | 'ROLE_UPDATED' | 'ROLE_DELETED' | 'PERMISSION_GRANTED' | 'PERMISSION_REVOKED' | 'ACCESS_DENIED' | 'SESSION_EXPIRED';
+export type AuditLogParams = {
+    eventType: AuditEventType | string;
+    userId?: string | null;
+    targetUserId?: string | null;
+    targetRoleId?: string | null;
+    targetAppId?: string | null;
+    action: string;
+    details?: Record<string, unknown> | null;
+    ipAddress?: string | null;
+    userAgent?: string | null;
+    success?: boolean;
+    errorMessage?: string | null;
+};
+/**
+ * Log a security or audit event
+ *
+ * This function provides backward compatibility with the old Prisma-based
+ * audit logging. It now writes directly to the authz service via busibox-app.
+ *
+ * @param params - Audit log parameters
+ */
+export declare function logEvent(params: AuditLogParams): Promise<void>;
+//# sourceMappingURL=service-audit.d.ts.map

package/dist/lib/authz/service-audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-audit.d.ts","sourceRoot":"","sources":["../../../src/lib/authz/service-audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EACL,aAAa,EACb,YAAY,EACZ,aAAa,EACb,cAAc,EACd,uBAAuB,EACvB,gBAAgB,EAChB,eAAe,EACf,cAAc,EACd,cAAc,EACd,cAAc,EACd,oBAAoB,EACpB,mBAAmB,EACnB,kBAAkB,EAClB,mBAAmB,EACnB,gBAAgB,EAChB,kBAAkB,EAClB,gBAAgB,EAEhB,gBAAgB,EAChB,aAAa,EACb,aAAa,EAEb,gBAAgB,EAChB,gBAAgB,EAChB,mBAAmB,EACnB,eAAe,EACf,eAAe,EACf,iBAAiB,EAEjB,oBAAoB,EACpB,iBAAiB,EACjB,eAAe,EACf,qBAAqB,EAErB,sBAAsB,EACtB,sBAAsB,EACtB,qBAAqB,EAErB,cAAc,EACd,cAAc,EACd,cAAc,EACd,oBAAoB,EACpB,oBAAoB,EAEpB,gBAAgB,EAChB,kBAAkB,GACnB,MAAM,SAAS,CAAC;AAEjB,YAAY,EACV,gBAAgB,EAChB,kBAAkB,GACnB,MAAM,SAAS,CAAC;AAMjB;;;;;GAKG;AACH,MAAM,MAAM,cAAc,GACtB,YAAY,GACZ,mBAAmB,GACnB,aAAa,GACb,wBAAwB,GACxB,gBAAgB,GAChB,eAAe,GACf,cAAc,GACd,cAAc,GACd,cAAc,GACd,qBAAqB,GACrB,gBAAgB,GAChB,kBAAkB,GAClB,mBAAmB,GACnB,kBAAkB,GAClB,mBAAmB,GACnB,gBAAgB,GAChB,mBAAmB,GACnB,iBAAiB,GACjB,gBAAgB,GAChB,aAAa,GACb,aAAa,GACb,iBAAiB,GACjB,iBAAiB,GACjB,oBAAoB,GACpB,gBAAgB,GAChB,gBAAgB,GAChB,kBAAkB,GAClB,oBAAoB,GACpB,iBAAiB,GACjB,eAAe,GACf,sBAAsB,GACtB,uBAAuB,GACvB,uBAAuB,GACvB,sBAAsB,GACtB,cAAc,GACd,cAAc,GACd,cAAc,GACd,oBAAoB,GACpB,oBAAoB,GACpB,eAAe,GACf,iBAAiB,CAAC;AAQtB,MAAM,MAAM,cAAc,GAAG;IAC3B,SAAS,EAAE,cAAc,GAAG,MAAM,CAAC;IACnC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACzC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B,CAAC;AAEF;;;;;;;GAOG;AACH,wBAAsB,QAAQ,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAsBpE"}

package/dist/lib/authz/service-audit.js

@@ -0,0 +1,60 @@
+/**
+ * Audit Logging Utility (busibox-portal wrapper)
+ *
+ * This file re-exports audit functions from busibox-app.
+ * All audit events are now stored in the authz service.
+ *
+ * The Prisma AuditLog model has been removed from busibox-portal.
+ * All audit functionality is now centralized in authz.
+ */
+// Re-export all audit functions from busibox-app
+export { logAuditEvent, logUserLogin, logUserLogout, logLoginFailed, logPasswordResetRequest, logPasswordReset, logRoleAssigned, logRoleRemoved, logUserCreated, logUserDeleted, logUserStatusChanged, logDocumentUploaded, logDocumentDeleted, logDocumentAccessed, logConfigChanged, logApiKeyGenerated, logApiKeyRevoked, 
+// App management
+logAppRegistered, logAppUpdated, logAppDeleted, 
+// Magic link & TOTP
+logMagicLinkSent, logMagicLinkUsed, logMagicLinkExpired, logTotpCodeSent, logTotpCodeUsed, logTotpCodeFailed, 
+// Passkey (WebAuthn)
+logPasskeyRegistered, logPasskeyRemoved, logPasskeyLogin, logPasskeyLoginFailed, 
+// OAuth
+logOAuthTokenGenerated, logOAuthTokenValidated, logOAuthTokenRejected, 
+// Roles & permissions
+logRoleCreated, logRoleUpdated, logRoleDeleted, logPermissionGranted, logPermissionRevoked, 
+// User status
+logUserActivated, logUserDeactivated, } from './audit';
+// ============================================================================
+// Legacy logEvent function - now just calls logAuditEvent
+// ============================================================================
+import { logAuditEvent } from './audit';
+/**
+ * Log a security or audit event
+ *
+ * This function provides backward compatibility with the old Prisma-based
+ * audit logging. It now writes directly to the authz service via busibox-app.
+ *
+ * @param params - Audit log parameters
+ */
+export async function logEvent(params) {
+    try {
+        await logAuditEvent({
+            actorId: params.userId || 'system',
+            action: params.action,
+            resourceType: params.eventType,
+            resourceId: params.targetUserId || params.targetRoleId || params.targetAppId || undefined,
+            details: {
+                ...params.details,
+                targetUserId: params.targetUserId,
+                targetRoleId: params.targetRoleId,
+                targetAppId: params.targetAppId,
+                ipAddress: params.ipAddress,
+                userAgent: params.userAgent,
+                success: params.success ?? true,
+                errorMessage: params.errorMessage,
+            },
+        });
+    }
+    catch (error) {
+        // Log to console if write fails (don't throw - audit logging shouldn't break the app)
+        console.error('[AUDIT] Failed to write audit log:', error);
+    }
+}
+//# sourceMappingURL=service-audit.js.map

package/dist/lib/authz/service-audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-audit.js","sourceRoot":"","sources":["../../../src/lib/authz/service-audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,iDAAiD;AACjD,OAAO,EACL,aAAa,EACb,YAAY,EACZ,aAAa,EACb,cAAc,EACd,uBAAuB,EACvB,gBAAgB,EAChB,eAAe,EACf,cAAc,EACd,cAAc,EACd,cAAc,EACd,oBAAoB,EACpB,mBAAmB,EACnB,kBAAkB,EAClB,mBAAmB,EACnB,gBAAgB,EAChB,kBAAkB,EAClB,gBAAgB;AAChB,iBAAiB;AACjB,gBAAgB,EAChB,aAAa,EACb,aAAa;AACb,oBAAoB;AACpB,gBAAgB,EAChB,gBAAgB,EAChB,mBAAmB,EACnB,eAAe,EACf,eAAe,EACf,iBAAiB;AACjB,qBAAqB;AACrB,oBAAoB,EACpB,iBAAiB,EACjB,eAAe,EACf,qBAAqB;AACrB,QAAQ;AACR,sBAAsB,EACtB,sBAAsB,EACtB,qBAAqB;AACrB,sBAAsB;AACtB,cAAc,EACd,cAAc,EACd,cAAc,EACd,oBAAoB,EACpB,oBAAoB;AACpB,cAAc;AACd,gBAAgB,EAChB,kBAAkB,GACnB,MAAM,SAAS,CAAC;AA4DjB,+EAA+E;AAC/E,0DAA0D;AAC1D,+EAA+E;AAE/E,OAAO,EAAE,aAAa,EAAyB,MAAM,SAAS,CAAC;AAgB/D;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,MAAsB;IACnD,IAAI,CAAC;QACH,MAAM,aAAa,CAAC;YAClB,OAAO,EAAE,MAAM,CAAC,MAAM,IAAI,QAAQ;YAClC,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,YAAY,EAAE,MAAM,CAAC,SAAS;YAC9B,UAAU,EAAE,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,WAAW,IAAI,SAAS;YACzF,OAAO,EAAE;gBACP,GAAG,MAAM,CAAC,OAAO;gBACjB,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,IAAI;gBAC/B,YAAY,EAAE,MAAM,CAAC,YAAY;aAClC;SACF,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,sFAAsF;QACtF,OAAO,CAAC,KAAK,CAAC,oCAAoC,EAAE,KAAK,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC"}