@mbc-cqrs-serverless/core 1.3.2 → 1.3.3

package/dist/auth/auth.module.js

@@ -1,30 +0,0 @@
-"use strict";
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.AuthModule = void 0;
-const common_1 = require("@nestjs/common");
-const roles_guard_1 = require("../guard/roles.guard");
-const explorer_service_1 = require("../services/explorer.service");
-const authz_bootstrap_service_1 = require("./authz-bootstrap.service");
-const group_role_resolver_registry_1 = require("./group-role-resolver.registry");
-let AuthModule = class AuthModule {
-};
-exports.AuthModule = AuthModule;
-exports.AuthModule = AuthModule = __decorate([
-    (0, common_1.Global)(),
-    (0, common_1.Module)({
-        providers: [
-            explorer_service_1.ExplorerService,
-            group_role_resolver_registry_1.GroupRoleResolverRegistry,
-            authz_bootstrap_service_1.AuthzBootstrapService,
-            roles_guard_1.RolesGuard,
-        ],
-        exports: [group_role_resolver_registry_1.GroupRoleResolverRegistry, roles_guard_1.RolesGuard, explorer_service_1.ExplorerService],
-    })
-], AuthModule);
-//# sourceMappingURL=auth.module.js.map

package/dist/auth/auth.module.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth.module.js","sourceRoot":"","sources":["../../src/auth/auth.module.ts"],"names":[],"mappings":";;;;;;;;;AAAA,2CAA+C;AAE/C,sDAAiD;AACjD,mEAA8D;AAC9D,uEAAiE;AACjE,iFAA0E;AAYnE,IAAM,UAAU,GAAhB,MAAM,UAAU;CAAG,CAAA;AAAb,gCAAU;qBAAV,UAAU;IAVtB,IAAA,eAAM,GAAE;IACR,IAAA,eAAM,EAAC;QACN,SAAS,EAAE;YACT,kCAAe;YACf,wDAAyB;YACzB,+CAAqB;YACrB,wBAAU;SACX;QACD,OAAO,EAAE,CAAC,wDAAyB,EAAE,wBAAU,EAAE,kCAAe,CAAC;KAClE,CAAC;GACW,UAAU,CAAG"}

package/dist/auth/authz-bootstrap.service.d.ts

@@ -1,11 +0,0 @@
-import { OnApplicationBootstrap } from '@nestjs/common';
-import { ModuleRef } from '@nestjs/core';
-import { ExplorerService } from '../services/explorer.service';
-import { GroupRoleResolverRegistry } from './group-role-resolver.registry';
-export declare class AuthzBootstrapService implements OnApplicationBootstrap {
-    private readonly explorerService;
-    private readonly moduleRef;
-    private readonly registry;
-    constructor(explorerService: ExplorerService, moduleRef: ModuleRef, registry: GroupRoleResolverRegistry);
-    onApplicationBootstrap(): void;
-}

package/dist/auth/authz-bootstrap.service.js

@@ -1,47 +0,0 @@
-"use strict";
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __metadata = (this && this.__metadata) || function (k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.AuthzBootstrapService = void 0;
-const common_1 = require("@nestjs/common");
-const core_1 = require("@nestjs/core");
-const explorer_service_1 = require("../services/explorer.service");
-const group_role_resolver_registry_1 = require("./group-role-resolver.registry");
-let AuthzBootstrapService = class AuthzBootstrapService {
-    constructor(explorerService, moduleRef, registry) {
-        this.explorerService = explorerService;
-        this.moduleRef = moduleRef;
-        this.registry = registry;
-    }
-    onApplicationBootstrap() {
-        const types = this.explorerService.exploreGroupRoleResolvers();
-        if (types.length > 1) {
-            throw new Error('Only one @GroupRoleResolver() is allowed per application');
-        }
-        if (types.length === 0) {
-            return;
-        }
-        const instance = this.moduleRef.get(types[0], {
-            strict: false,
-        });
-        if (!instance) {
-            throw new Error(`GroupRoleResolver ${types[0].name} was discovered but could not be resolved from DI`);
-        }
-        this.registry.set(instance);
-    }
-};
-exports.AuthzBootstrapService = AuthzBootstrapService;
-exports.AuthzBootstrapService = AuthzBootstrapService = __decorate([
-    (0, common_1.Injectable)(),
-    __metadata("design:paramtypes", [explorer_service_1.ExplorerService,
-        core_1.ModuleRef,
-        group_role_resolver_registry_1.GroupRoleResolverRegistry])
-], AuthzBootstrapService);
-//# sourceMappingURL=authz-bootstrap.service.js.map

package/dist/auth/authz-bootstrap.service.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"authz-bootstrap.service.js","sourceRoot":"","sources":["../../src/auth/authz-bootstrap.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAAmE;AACnE,uCAAwC;AAExC,mEAA8D;AAE9D,iFAA0E;AAGnE,IAAM,qBAAqB,GAA3B,MAAM,qBAAqB;IAChC,YACmB,eAAgC,EAChC,SAAoB,EACpB,QAAmC;QAFnC,oBAAe,GAAf,eAAe,CAAiB;QAChC,cAAS,GAAT,SAAS,CAAW;QACpB,aAAQ,GAAR,QAAQ,CAA2B;IACnD,CAAC;IAEJ,sBAAsB;QACpB,MAAM,KAAK,GAAG,IAAI,CAAC,eAAe,CAAC,yBAAyB,EAAE,CAAA;QAE9D,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CACb,0DAA0D,CAC3D,CAAA;QACH,CAAC;QAED,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAM;QACR,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAqB,KAAK,CAAC,CAAC,CAAC,EAAE;YAChE,MAAM,EAAE,KAAK;SACd,CAAC,CAAA;QAEF,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CACb,qBAAqB,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,mDAAmD,CACtF,CAAA;QACH,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;IAC7B,CAAC;CACF,CAAA;AAhCY,sDAAqB;gCAArB,qBAAqB;IADjC,IAAA,mBAAU,GAAE;qCAGyB,kCAAe;QACrB,gBAAS;QACV,wDAAyB;GAJ3C,qBAAqB,CAgCjC"}

package/dist/auth/group-role-resolver.interface.d.ts

@@ -1,13 +0,0 @@
-import { JwtClaims } from '../context/invoke';
-export interface TenantGroupMembership {
-    tenant: string;
-    groups: string[];
-}
-export interface ResolveGroupRolesInput {
-    tenantCode: string;
-    groupIds: string[];
-    claims?: JwtClaims;
-}
-export interface IGroupRoleResolver {
-    resolveRoles(input: ResolveGroupRolesInput): Promise<string[]>;
-}

package/dist/auth/group-role-resolver.interface.js

@@ -1,3 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-//# sourceMappingURL=group-role-resolver.interface.js.map

package/dist/auth/group-role-resolver.interface.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"group-role-resolver.interface.js","sourceRoot":"","sources":["../../src/auth/group-role-resolver.interface.ts"],"names":[],"mappings":""}

package/dist/auth/group-role-resolver.registry.d.ts

@@ -1,6 +0,0 @@
-import { IGroupRoleResolver } from './group-role-resolver.interface';
-export declare class GroupRoleResolverRegistry {
-    private resolver?;
-    set(resolver: IGroupRoleResolver): void;
-    get(): IGroupRoleResolver | undefined;
-}

package/dist/auth/group-role-resolver.registry.js

@@ -1,26 +0,0 @@
-"use strict";
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.GroupRoleResolverRegistry = void 0;
-const common_1 = require("@nestjs/common");
-let GroupRoleResolverRegistry = class GroupRoleResolverRegistry {
-    set(resolver) {
-        if (this.resolver) {
-            throw new Error('Only one @GroupRoleResolver() is allowed per application');
-        }
-        this.resolver = resolver;
-    }
-    get() {
-        return this.resolver;
-    }
-};
-exports.GroupRoleResolverRegistry = GroupRoleResolverRegistry;
-exports.GroupRoleResolverRegistry = GroupRoleResolverRegistry = __decorate([
-    (0, common_1.Injectable)()
-], GroupRoleResolverRegistry);
-//# sourceMappingURL=group-role-resolver.registry.js.map

package/dist/auth/group-role-resolver.registry.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"group-role-resolver.registry.js","sourceRoot":"","sources":["../../src/auth/group-role-resolver.registry.ts"],"names":[],"mappings":";;;;;;;;;AAAA,2CAA2C;AAKpC,IAAM,yBAAyB,GAA/B,MAAM,yBAAyB;IAGpC,GAAG,CAAC,QAA4B;QAC9B,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CACb,0DAA0D,CAC3D,CAAA;QACH,CAAC;QACD,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAA;IAC1B,CAAC;IAED,GAAG;QACD,OAAO,IAAI,CAAC,QAAQ,CAAA;IACtB,CAAC;CACF,CAAA;AAfY,8DAAyB;oCAAzB,yBAAyB;IADrC,IAAA,mBAAU,GAAE;GACA,yBAAyB,CAerC"}

package/dist/auth/index.d.ts

@@ -1,4 +0,0 @@
-export * from './auth.module';
-export * from './authz-bootstrap.service';
-export * from './group-role-resolver.interface';
-export * from './group-role-resolver.registry';

package/dist/auth/index.js

@@ -1,21 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __exportStar = (this && this.__exportStar) || function(m, exports) {
-    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./auth.module"), exports);
-__exportStar(require("./authz-bootstrap.service"), exports);
-__exportStar(require("./group-role-resolver.interface"), exports);
-__exportStar(require("./group-role-resolver.registry"), exports);
-//# sourceMappingURL=index.js.map

package/dist/auth/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,gDAA6B;AAC7B,4DAAyC;AACzC,kEAA+C;AAC/C,iEAA8C"}

package/dist/decorators/group-role-resolver.decorator.d.ts

@@ -1,9 +0,0 @@
-/**
- * Marks a class as the application's `IGroupRoleResolver` (exactly one per app).
- * Discovered at bootstrap and registered in `GroupRoleResolverRegistry`.
- *
- * Applies `@Injectable()` with default (singleton) scope. Do **not** add `@Injectable()`
- * on the same class — a second decorator can override scope (e.g. `REQUEST`) and break
- * bootstrap, which resolves one instance at application startup.
- */
-export declare function GroupRoleResolver(): ClassDecorator;

package/dist/decorators/group-role-resolver.decorator.js

@@ -1,17 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.GroupRoleResolver = GroupRoleResolver;
-const common_1 = require("@nestjs/common");
-const constants_1 = require("./constants");
-/**
- * Marks a class as the application's `IGroupRoleResolver` (exactly one per app).
- * Discovered at bootstrap and registered in `GroupRoleResolverRegistry`.
- *
- * Applies `@Injectable()` with default (singleton) scope. Do **not** add `@Injectable()`
- * on the same class — a second decorator can override scope (e.g. `REQUEST`) and break
- * bootstrap, which resolves one instance at application startup.
- */
-function GroupRoleResolver() {
-    return (0, common_1.applyDecorators)((0, common_1.SetMetadata)(constants_1.GROUP_ROLE_RESOLVER_METADATA, true), (0, common_1.Injectable)());
-}
-//# sourceMappingURL=group-role-resolver.decorator.js.map

package/dist/decorators/group-role-resolver.decorator.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"group-role-resolver.decorator.js","sourceRoot":"","sources":["../../src/decorators/group-role-resolver.decorator.ts"],"names":[],"mappings":";;AAYA,8CAKC;AAjBD,2CAAyE;AAEzE,2CAA0D;AAE1D;;;;;;;GAOG;AACH,SAAgB,iBAAiB;IAC/B,OAAO,IAAA,wBAAe,EACpB,IAAA,oBAAW,EAAC,wCAA4B,EAAE,IAAI,CAAC,EAC/C,IAAA,mBAAU,GAAE,CACK,CAAA;AACrB,CAAC"}

package/dist/decorators/notification-transport.decorator.d.ts

@@ -1,6 +0,0 @@
-/**
- * Decorator to register a class as a Notification Transport.
- * Automatically marks the class as an @Injectable() provider.
- * @param name The unique identifier for this transport (e.g., 'pusher', 'appsync-event')
- */
-export declare function NotificationTransport(name: string): ClassDecorator;

package/dist/decorators/notification-transport.decorator.js

@@ -1,14 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.NotificationTransport = NotificationTransport;
-const common_1 = require("@nestjs/common");
-const constants_1 = require("./constants");
-/**
- * Decorator to register a class as a Notification Transport.
- * Automatically marks the class as an @Injectable() provider.
- * @param name The unique identifier for this transport (e.g., 'pusher', 'appsync-event')
- */
-function NotificationTransport(name) {
-    return (0, common_1.applyDecorators)((0, common_1.SetMetadata)(constants_1.NOTIFICATION_TRANSPORT_METADATA, name), (0, common_1.Injectable)());
-}
-//# sourceMappingURL=notification-transport.decorator.js.map

package/dist/decorators/notification-transport.decorator.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"notification-transport.decorator.js","sourceRoot":"","sources":["../../src/decorators/notification-transport.decorator.ts"],"names":[],"mappings":";;AASA,sDAKC;AAdD,2CAAyE;AAEzE,2CAA6D;AAE7D;;;;GAIG;AACH,SAAgB,qBAAqB,CAAC,IAAY;IAChD,OAAO,IAAA,wBAAe,EACpB,IAAA,oBAAW,EAAC,2CAA+B,EAAE,IAAI,CAAC,EAClD,IAAA,mBAAU,GAAE,CACK,CAAA;AACrB,CAAC"}

package/dist/notification-env.validation.d.ts

@@ -1,8 +0,0 @@
-/** Built-in transports and their required endpoint environment variables. */
-export declare const BUILTIN_NOTIFICATION_TRANSPORT_ENV: Record<string, string>;
-/**
- * Parses NOTIFICATION_TRANSPORTS the same way as NotificationEventHandler.
- * Defaults to appsync-graphql when unset or empty.
- */
-export declare function parseNotificationTransports(raw: string | undefined): string[];
-export declare function validateBuiltinNotificationTransportEnv(config: Record<string, unknown>): void;

package/dist/notification-env.validation.js

@@ -1,36 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.BUILTIN_NOTIFICATION_TRANSPORT_ENV = void 0;
-exports.parseNotificationTransports = parseNotificationTransports;
-exports.validateBuiltinNotificationTransportEnv = validateBuiltinNotificationTransportEnv;
-const enums_1 = require("./notifications/enums");
-/** Built-in transports and their required endpoint environment variables. */
-exports.BUILTIN_NOTIFICATION_TRANSPORT_ENV = {
-    [enums_1.NotificationTransports.APPSYNC_GRAPHQL]: 'APPSYNC_ENDPOINT',
-    [enums_1.NotificationTransports.APPSYNC_EVENT]: 'APPSYNC_EVENTS_ENDPOINT',
-};
-/**
- * Parses NOTIFICATION_TRANSPORTS the same way as NotificationEventHandler.
- * Defaults to appsync-graphql when unset or empty.
- */
-function parseNotificationTransports(raw) {
-    const names = (raw ?? '')
-        .split(',')
-        .map((s) => s.trim())
-        .filter(Boolean);
-    return names.length > 0 ? names : [enums_1.NotificationTransports.APPSYNC_GRAPHQL];
-}
-function validateBuiltinNotificationTransportEnv(config) {
-    const active = parseNotificationTransports(config.NOTIFICATION_TRANSPORTS);
-    for (const name of active) {
-        const envKey = exports.BUILTIN_NOTIFICATION_TRANSPORT_ENV[name];
-        if (!envKey) {
-            continue;
-        }
-        const value = config[envKey];
-        if (typeof value !== 'string' || !value.trim()) {
-            throw new Error(`Notification transport "${name}" is enabled (NOTIFICATION_TRANSPORTS) but ${envKey} is not set.`);
-        }
-    }
-}
-//# sourceMappingURL=notification-env.validation.js.map

package/dist/notification-env.validation.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"notification-env.validation.js","sourceRoot":"","sources":["../src/notification-env.validation.ts"],"names":[],"mappings":";;;AAYA,kEAMC;AAED,0FAoBC;AAxCD,iDAA8D;AAE9D,6EAA6E;AAChE,QAAA,kCAAkC,GAA2B;IACxE,CAAC,8BAAsB,CAAC,eAAe,CAAC,EAAE,kBAAkB;IAC5D,CAAC,8BAAsB,CAAC,aAAa,CAAC,EAAE,yBAAyB;CAClE,CAAA;AAED;;;GAGG;AACH,SAAgB,2BAA2B,CAAC,GAAuB;IACjE,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC;SACtB,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC,CAAA;IAClB,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,8BAAsB,CAAC,eAAe,CAAC,CAAA;AAC5E,CAAC;AAED,SAAgB,uCAAuC,CACrD,MAA+B;IAE/B,MAAM,MAAM,GAAG,2BAA2B,CACxC,MAAM,CAAC,uBAA6C,CACrD,CAAA;IAED,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,0CAAkC,CAAC,IAAI,CAAC,CAAA;QACvD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,SAAQ;QACV,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAA;QAC5B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;YAC/C,MAAM,IAAI,KAAK,CACb,2BAA2B,IAAI,8CAA8C,MAAM,cAAc,CAClG,CAAA;QACH,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/notifications/appsync-events.service.d.ts

@@ -1,44 +0,0 @@
-import { ConfigService } from '@nestjs/config';
-import { INotification } from '../interfaces';
-import { INotificationTransport } from './interfaces';
-export declare class AppSyncEventsService implements INotificationTransport {
-    private readonly config;
-    private readonly logger;
-    private readonly url;
-    private readonly namespace;
-    private readonly signer;
-    constructor(config: ConfigService);
-    /**
-     * Publish INotification to an AppSync Events channel via IAM SigV4.
-     *
-     * Channel structure (max 5 segments, seg 1 = namespace):
-     *   /{namespace}/{tenantCode}/{action}/{sanitizedId}
-     *
-     * Client subscription options (wildcard /* catches all sub-channels):
-     *   /{namespace}/{tenantCode}/*                  — all events for tenant
-     *   /{namespace}/{tenantCode}/{action}/*          — filtered by action
-     *   /{namespace}/{tenantCode}/{action}/{id}       — specific command
-     *
-     * Requires: Lambda execution role must have appsync:EventPublish permission.
-     */
-    sendMessage(notification: INotification): Promise<void>;
-    /**
-     * Resolves the most specific channel path for a notification.
-     * Non-alphanumeric characters (e.g. #, @) are sanitized to dashes
-     * since AppSync Events channel segments only allow [a-zA-Z0-9-].
-     */
-    resolveChannel(notification: INotification): string;
-    /**
-     * Formats a string to comply with AppSync Events API channel segment rules:
-     * 1. Only alphanumeric characters and dashes.
-     * 2. Cannot start or end with a dash.
-     * 3. Maximum length of 50 characters.
-     */
-    private sanitizeSegment;
-    private postToChannel;
-    /**
-     * Builds and signs an HttpRequest for the given channel and notification.
-     * Separating signing from the fetch call makes each step independently testable.
-     */
-    private signRequest;
-}

package/dist/notifications/appsync-events.service.js

@@ -1,147 +0,0 @@
-"use strict";
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __metadata = (this && this.__metadata) || function (k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-var AppSyncEventsService_1;
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.AppSyncEventsService = void 0;
-const node_crypto_1 = require("node:crypto");
-const sha256_js_1 = require("@aws-crypto/sha256-js");
-const credential_provider_node_1 = require("@aws-sdk/credential-provider-node");
-const common_1 = require("@nestjs/common");
-const config_1 = require("@nestjs/config");
-const protocol_http_1 = require("@smithy/protocol-http");
-const signature_v4_1 = require("@smithy/signature-v4");
-const node_fetch_1 = __importDefault(require("node-fetch"));
-const decorators_1 = require("../decorators");
-const enums_1 = require("./enums");
-/** Default headers required for AppSync Events API requests */
-const DEFAULT_HEADERS = {
-    accept: 'application/json, text/javascript',
-    'content-encoding': 'amz-1.0',
-    'content-type': 'application/json; charset=UTF-8',
-};
-let AppSyncEventsService = AppSyncEventsService_1 = class AppSyncEventsService {
-    constructor(config) {
-        this.config = config;
-        this.logger = new common_1.Logger(AppSyncEventsService_1.name);
-        const endpoint = config.get('APPSYNC_EVENTS_ENDPOINT');
-        this.namespace = config.get('APPSYNC_EVENTS_NAMESPACE') ?? 'default';
-        if (endpoint) {
-            this.url = new URL(endpoint);
-            // Region is parsed from the hostname automatically:
-            //   <id>.appsync-api.<region>.amazonaws.com → region
-            // Falls back to AWS_REGION env var (always set in Lambda runtime).
-            const match = this.url.hostname.match(/\w+\.appsync-api\.([\w-]+)\.amazonaws\.com/);
-            const region = match?.[1] ?? process.env.AWS_REGION ?? 'ap-northeast-1';
-            this.signer = new signature_v4_1.SignatureV4({
-                credentials: (0, credential_provider_node_1.defaultProvider)(),
-                service: 'appsync',
-                region,
-                sha256: sha256_js_1.Sha256,
-            });
-        }
-    }
-    /**
-     * Publish INotification to an AppSync Events channel via IAM SigV4.
-     *
-     * Channel structure (max 5 segments, seg 1 = namespace):
-     *   /{namespace}/{tenantCode}/{action}/{sanitizedId}
-     *
-     * Client subscription options (wildcard /* catches all sub-channels):
-     *   /{namespace}/{tenantCode}/*                  — all events for tenant
-     *   /{namespace}/{tenantCode}/{action}/*          — filtered by action
-     *   /{namespace}/{tenantCode}/{action}/{id}       — specific command
-     *
-     * Requires: Lambda execution role must have appsync:EventPublish permission.
-     */
-    async sendMessage(notification) {
-        if (!this.url || !this.signer) {
-            this.logger.warn('APPSYNC_EVENTS_ENDPOINT not set, skipping');
-            return;
-        }
-        const channel = this.resolveChannel(notification);
-        this.logger.debug(`sendMessage:: channel=${channel}`);
-        await this.postToChannel(channel, notification);
-    }
-    /**
-     * Resolves the most specific channel path for a notification.
-     * Non-alphanumeric characters (e.g. #, @) are sanitized to dashes
-     * since AppSync Events channel segments only allow [a-zA-Z0-9-].
-     */
-    resolveChannel(notification) {
-        const namespace = this.sanitizeSegment(this.namespace);
-        const tenantCode = this.sanitizeSegment(notification.tenantCode);
-        const action = this.sanitizeSegment(notification.action);
-        const id = this.sanitizeSegment(notification.id);
-        return `/${namespace}/${tenantCode}/${action}/${id}`;
-    }
-    /**
-     * Formats a string to comply with AppSync Events API channel segment rules:
-     * 1. Only alphanumeric characters and dashes.
-     * 2. Cannot start or end with a dash.
-     * 3. Maximum length of 50 characters.
-     */
-    sanitizeSegment(segment) {
-        if (!segment)
-            return 'none';
-        // Replace any non-alphanumeric character (like _, %, =) with a dash
-        let s = segment.replace(/[^a-zA-Z0-9]/g, '-');
-        // Truncate to AWS's strict 50 character limit
-        s = s.substring(0, 50);
-        // Strip out any dashes from the very beginning or end
-        s = s.replace(/^-+|-+$/g, '');
-        // Fallback if the string became empty after trimming
-        return s || 'none';
-    }
-    async postToChannel(channel, notification) {
-        const signedReq = await this.signRequest(channel, notification);
-        const res = await (0, node_fetch_1.default)(this.url.toString(), {
-            method: signedReq.method,
-            headers: signedReq.headers,
-            body: signedReq.body,
-        });
-        if (!res.ok) {
-            const text = await res.text();
-            throw new Error(`AppSync Events publish failed [${res.status}] on channel ${channel}: ${text}`);
-        }
-        this.logger.debug(`sendMessage:: published successfully to ${channel}`);
-    }
-    /**
-     * Builds and signs an HttpRequest for the given channel and notification.
-     * Separating signing from the fetch call makes each step independently testable.
-     */
-    async signRequest(channel, notification) {
-        const body = JSON.stringify({
-            id: (0, node_crypto_1.randomUUID)(),
-            channel,
-            events: [JSON.stringify(notification)],
-        });
-        const httpRequest = new protocol_http_1.HttpRequest({
-            method: 'POST',
-            headers: {
-                ...DEFAULT_HEADERS,
-                host: this.url.hostname,
-            },
-            body,
-            hostname: this.url.hostname,
-            path: this.url.pathname,
-        });
-        return this.signer.sign(httpRequest);
-    }
-};
-exports.AppSyncEventsService = AppSyncEventsService;
-exports.AppSyncEventsService = AppSyncEventsService = AppSyncEventsService_1 = __decorate([
-    (0, decorators_1.NotificationTransport)(enums_1.NotificationTransports.APPSYNC_EVENT),
-    __metadata("design:paramtypes", [config_1.ConfigService])
-], AppSyncEventsService);
-//# sourceMappingURL=appsync-events.service.js.map

package/dist/notifications/appsync-events.service.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"appsync-events.service.js","sourceRoot":"","sources":["../../src/notifications/appsync-events.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,6CAAwC;AAExC,qDAA8C;AAC9C,gFAAmE;AACnE,2CAAuC;AACvC,2CAA8C;AAC9C,yDAAmD;AACnD,uDAAkD;AAClD,4DAA8B;AAE9B,8CAAqD;AAErD,mCAAgD;AAGhD,+DAA+D;AAC/D,MAAM,eAAe,GAAG;IACtB,MAAM,EAAE,mCAAmC;IAC3C,kBAAkB,EAAE,SAAS;IAC7B,cAAc,EAAE,iCAAiC;CAClD,CAAA;AAGM,IAAM,oBAAoB,4BAA1B,MAAM,oBAAoB;IAO/B,YAA6B,MAAqB;QAArB,WAAM,GAAN,MAAM,CAAe;QANjC,WAAM,GAAG,IAAI,eAAM,CAAC,sBAAoB,CAAC,IAAI,CAAC,CAAA;QAO7D,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAS,yBAAyB,CAAC,CAAA;QAC9D,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,GAAG,CAAS,0BAA0B,CAAC,IAAI,SAAS,CAAA;QAE5E,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAA;YAE5B,oDAAoD;YACpD,qDAAqD;YACrD,mEAAmE;YACnE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CACnC,4CAA4C,CAC7C,CAAA;YACD,MAAM,MAAM,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,gBAAgB,CAAA;YAEvE,IAAI,CAAC,MAAM,GAAG,IAAI,0BAAW,CAAC;gBAC5B,WAAW,EAAE,IAAA,0CAAe,GAAE;gBAC9B,OAAO,EAAE,SAAS;gBAClB,MAAM;gBACN,MAAM,EAAE,kBAAM;aACf,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,KAAK,CAAC,WAAW,CAAC,YAA2B;QAC3C,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YAC9B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAA;YAC7D,OAAM;QACR,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,YAAY,CAAC,CAAA;QACjD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,yBAAyB,OAAO,EAAE,CAAC,CAAA;QAErD,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;IACjD,CAAC;IAED;;;;OAIG;IACH,cAAc,CAAC,YAA2B;QACxC,MAAM,SAAS,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QACtD,MAAM,UAAU,GAAG,IAAI,CAAC,eAAe,CAAC,YAAY,CAAC,UAAU,CAAC,CAAA;QAChE,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,YAAY,CAAC,MAAM,CAAC,CAAA;QACxD,MAAM,EAAE,GAAG,IAAI,CAAC,eAAe,CAAC,YAAY,CAAC,EAAE,CAAC,CAAA;QAChD,OAAO,IAAI,SAAS,IAAI,UAAU,IAAI,MAAM,IAAI,EAAE,EAAE,CAAA;IACtD,CAAC;IAED;;;;;OAKG;IACK,eAAe,CAAC,OAA2B;QACjD,IAAI,CAAC,OAAO;YAAE,OAAO,MAAM,CAAA;QAE3B,oEAAoE;QACpE,IAAI,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC,CAAA;QAE7C,8CAA8C;QAC9C,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;QAEtB,sDAAsD;QACtD,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAA;QAE7B,qDAAqD;QACrD,OAAO,CAAC,IAAI,MAAM,CAAA;IACpB,CAAC;IAEO,KAAK,CAAC,aAAa,CACzB,OAAe,EACf,YAA2B;QAE3B,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;QAE/D,MAAM,GAAG,GAAG,MAAM,IAAA,oBAAK,EAAC,IAAI,CAAC,GAAI,CAAC,QAAQ,EAAE,EAAE;YAC5C,MAAM,EAAE,SAAS,CAAC,MAAM;YACxB,OAAO,EAAE,SAAS,CAAC,OAAiC;YACpD,IAAI,EAAE,SAAS,CAAC,IAAI;SACrB,CAAC,CAAA;QAEF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;YAC7B,MAAM,IAAI,KAAK,CACb,kCAAkC,GAAG,CAAC,MAAM,gBAAgB,OAAO,KAAK,IAAI,EAAE,CAC/E,CAAA;QACH,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2CAA2C,OAAO,EAAE,CAAC,CAAA;IACzE,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,WAAW,CACvB,OAAe,EACf,YAA2B;QAE3B,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;YAC1B,EAAE,EAAE,IAAA,wBAAU,GAAE;YAChB,OAAO;YACP,MAAM,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;SACvC,CAAC,CAAA;QAEF,MAAM,WAAW,GAAG,IAAI,2BAAW,CAAC;YAClC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,GAAG,eAAe;gBAClB,IAAI,EAAE,IAAI,CAAC,GAAI,CAAC,QAAQ;aACzB;YACD,IAAI;YACJ,QAAQ,EAAE,IAAI,CAAC,GAAI,CAAC,QAAQ;YAC5B,IAAI,EAAE,IAAI,CAAC,GAAI,CAAC,QAAQ;SACzB,CAAC,CAAA;QAEF,OAAO,IAAI,CAAC,MAAO,CAAC,IAAI,CAAC,WAAW,CAAyB,CAAA;IAC/D,CAAC;CACF,CAAA;AA5IY,oDAAoB;+BAApB,oBAAoB;IADhC,IAAA,kCAAqB,EAAC,8BAAsB,CAAC,aAAa,CAAC;qCAQrB,sBAAa;GAPvC,oBAAoB,CA4IhC"}

package/dist/notifications/enums/index.d.ts

@@ -1 +0,0 @@
-export * from './notification-transport.enum';

package/dist/notifications/enums/index.js

@@ -1,18 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __exportStar = (this && this.__exportStar) || function(m, exports) {
-    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./notification-transport.enum"), exports);
-//# sourceMappingURL=index.js.map

package/dist/notifications/enums/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/notifications/enums/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,gEAA6C"}

package/dist/notifications/enums/notification-transport.enum.d.ts

@@ -1,4 +0,0 @@
-export declare enum NotificationTransports {
-    APPSYNC_GRAPHQL = "appsync-graphql",
-    APPSYNC_EVENT = "appsync-event"
-}

package/dist/notifications/enums/notification-transport.enum.js

@@ -1,9 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.NotificationTransports = void 0;
-var NotificationTransports;
-(function (NotificationTransports) {
-    NotificationTransports["APPSYNC_GRAPHQL"] = "appsync-graphql";
-    NotificationTransports["APPSYNC_EVENT"] = "appsync-event";
-})(NotificationTransports || (exports.NotificationTransports = NotificationTransports = {}));
-//# sourceMappingURL=notification-transport.enum.js.map

package/dist/notifications/enums/notification-transport.enum.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"notification-transport.enum.js","sourceRoot":"","sources":["../../../src/notifications/enums/notification-transport.enum.ts"],"names":[],"mappings":";;;AAAA,IAAY,sBAGX;AAHD,WAAY,sBAAsB;IAChC,6DAAmC,CAAA;IACnC,yDAA+B,CAAA;AACjC,CAAC,EAHW,sBAAsB,sCAAtB,sBAAsB,QAGjC"}

package/dist/notifications/interfaces/index.d.ts

@@ -1 +0,0 @@
-export * from './notification-transport.interface';

package/dist/notifications/interfaces/index.js

@@ -1,18 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __exportStar = (this && this.__exportStar) || function(m, exports) {
-    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./notification-transport.interface"), exports);
-//# sourceMappingURL=index.js.map

package/dist/notifications/interfaces/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/notifications/interfaces/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,qEAAkD"}

package/dist/notifications/interfaces/notification-transport.interface.d.ts

@@ -1,7 +0,0 @@
-import { INotification } from '../../interfaces';
-export declare const NOTIFICATION_TRANSPORT = "NOTIFICATION_TRANSPORT";
-export interface INotificationTransport {
-    name?: string;
-    sendMessage(notification: INotification): Promise<void>;
-}
-export type NotificationTransportMap = Map<string, INotificationTransport>;

package/dist/notifications/interfaces/notification-transport.interface.js

@@ -1,5 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.NOTIFICATION_TRANSPORT = void 0;
-exports.NOTIFICATION_TRANSPORT = 'NOTIFICATION_TRANSPORT';
-//# sourceMappingURL=notification-transport.interface.js.map

package/dist/notifications/interfaces/notification-transport.interface.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"notification-transport.interface.js","sourceRoot":"","sources":["../../../src/notifications/interfaces/notification-transport.interface.ts"],"names":[],"mappings":";;;AAEa,QAAA,sBAAsB,GAAG,wBAAwB,CAAA"}

package/dist/services/mocks/group-role-resolver.mock.d.ts

@@ -1,4 +0,0 @@
-import { IGroupRoleResolver } from '../../auth/group-role-resolver.interface';
-export declare class MockGroupRoleResolver implements IGroupRoleResolver {
-    resolveRoles(): Promise<any[]>;
-}

package/dist/services/mocks/group-role-resolver.mock.js

@@ -1,20 +0,0 @@
-"use strict";
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.MockGroupRoleResolver = void 0;
-const decorators_1 = require("../../decorators");
-let MockGroupRoleResolver = class MockGroupRoleResolver {
-    async resolveRoles() {
-        return [];
-    }
-};
-exports.MockGroupRoleResolver = MockGroupRoleResolver;
-exports.MockGroupRoleResolver = MockGroupRoleResolver = __decorate([
-    (0, decorators_1.GroupRoleResolver)()
-], MockGroupRoleResolver);
-//# sourceMappingURL=group-role-resolver.mock.js.map