@lyxa.ai/core 1.0.189 → 1.0.191

package/dist/libraries/trpc/middlewares/createRoleProtectedProcedure.d.ts

@@ -0,0 +1,15 @@
+import { AuthEntityType } from '../../auth';
+interface RoleProtectedOptions {
+    entityTypes: AuthEntityType[];
+    allowedRoles: string[];
+}
+export declare function createRoleProtectedProcedure(options: RoleProtectedOptions): import("@trpc/server").TRPCProcedureBuilder<import("../context").LyxaHTTPContext, object, {
+    res: import("http").ServerResponse<import("http").IncomingMessage>;
+    tokenType: import("../../auth").TokenType | undefined;
+    entity: import("../context").EntityContext | undefined;
+    req: import("http").IncomingMessage;
+    requestId: string | undefined;
+    usedRefreshToken: boolean | undefined;
+    tokenRenewed: boolean | undefined;
+}, import("@trpc/server").TRPCUnsetMarker, import("@trpc/server").TRPCUnsetMarker, import("@trpc/server").TRPCUnsetMarker, import("@trpc/server").TRPCUnsetMarker, false>;
+export {};

package/dist/libraries/trpc/middlewares/createRoleProtectedProcedure.js

@@ -0,0 +1,21 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createRoleProtectedProcedure = createRoleProtectedProcedure;
+const server_1 = require("@trpc/server");
+const auth_1 = require("./auth");
+function createRoleProtectedProcedure(options) {
+    return (0, auth_1.createAuthenticatedProcedure)({ entityTypes: options.entityTypes }).use(async ({ ctx, next }) => {
+        if (!ctx.entity) {
+            throw new server_1.TRPCError({ code: 'UNAUTHORIZED', message: 'User not authorized' });
+        }
+        const role = ctx.entity.parameters?.role;
+        if (typeof role !== 'string' || !options.allowedRoles.includes(role)) {
+            throw new server_1.TRPCError({
+                code: 'FORBIDDEN',
+                message: 'You do not have the required role to access this resource',
+            });
+        }
+        return next({ ctx });
+    });
+}
+//# sourceMappingURL=createRoleProtectedProcedure.js.map

package/dist/libraries/trpc/middlewares/createRoleProtectedProcedure.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"createRoleProtectedProcedure.js","sourceRoot":"/","sources":["libraries/trpc/middlewares/createRoleProtectedProcedure.ts"],"names":[],"mappings":";;AAYA,oEAgBC;AA5BD,yCAAyC;AACzC,iCAAsD;AAWtD,SAAgB,4BAA4B,CAAC,OAA6B;IACzE,OAAO,IAAA,mCAA4B,EAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE;QACrG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;YACjB,MAAM,IAAI,kBAAS,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,qBAAqB,EAAE,CAAC,CAAC;QAC/E,CAAC;QAED,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC;QACzC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACtE,MAAM,IAAI,kBAAS,CAAC;gBACnB,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE,2DAA2D;aACpE,CAAC,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;IACtB,CAAC,CAAC,CAAC;AACJ,CAAC","sourcesContent":["import { TRPCError } from '@trpc/server';\nimport { createAuthenticatedProcedure } from './auth';\nimport { AuthEntityType } from '../../auth';\n\ninterface RoleProtectedOptions {\n\tentityTypes: AuthEntityType[];\n\tallowedRoles: string[];\n}\n\n/**\n * Middleware that ensures the user has one of the allowed roles from ctx.entity.parameters.role\n */\nexport function createRoleProtectedProcedure(options: RoleProtectedOptions) {\n\treturn createAuthenticatedProcedure({ entityTypes: options.entityTypes }).use(async ({ ctx, next }) => {\n\t\tif (!ctx.entity) {\n\t\t\tthrow new TRPCError({ code: 'UNAUTHORIZED', message: 'User not authorized' });\n\t\t}\n\n\t\tconst role = ctx.entity.parameters?.role;\n\t\tif (typeof role !== 'string' || !options.allowedRoles.includes(role)) {\n\t\t\tthrow new TRPCError({\n\t\t\t\tcode: 'FORBIDDEN',\n\t\t\t\tmessage: 'You do not have the required role to access this resource',\n\t\t\t});\n\t\t}\n\n\t\treturn next({ ctx });\n\t});\n}\n"]}

package/dist/types/README.md

@@ -22,7 +22,7 @@ Perfect for sharing types between frontend and backend applications.
 
 ## Version
 
-Version: 1.0.189
+Version: 1.0.191
 
 ## Dependencies
 

package/dist/types/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lyxa.ai/types",
-  "version": "1.0.189",
+  "version": "1.0.191",
   "description": "Lyxa type definitions and validation schemas for both frontend and backend",
   "author": "elie <42282499+Internalizable@users.noreply.github.com>",
   "license": "MIT",

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@lyxa.ai/core",
-	"version": "1.0.189",
+	"version": "1.0.191",
 	"description": "The Core system of the Lyxa services.",
 	"author": "elie <42282499+Internalizable@users.noreply.github.com>",
 	"license": "MIT",