@memberjunction/lists 0.0.1 → 5.37.0

package/dist/ListSharing.js

@@ -0,0 +1,568 @@
+import { LogError, Metadata, RunView, } from '@memberjunction/core';
+import { AuditLogTypeEngine, CreateShareNotification, ResourceTypeEngine, } from '@memberjunction/core-entities';
+/**
+ * @memberjunction/lists — sharing surface.
+ *
+ * Sharing has two parallel paths:
+ *
+ *   1. **Direct share** — the recipient already has an MJ user account.
+ *      We write a row to `MJResourcePermission` immediately, scoped to
+ *      the List resource type. Either a user (`Type='User'`) or a role
+ *      (`Type='Role'`) target.
+ *
+ *   2. **Email invitation** — the recipient may or may not have an
+ *      account yet. We write a row to `MJ: List Invitations` with a
+ *      signed token + expiry; `AcceptInvitation` later promotes that
+ *      pending invite into a real `MJResourcePermission`.
+ *
+ * Every mutation also emits an `MJ: Audit Logs` entry — type names are
+ * resolved through `AuditLogTypeEngine.ByName(...)` at runtime so the
+ * seed data is the source of truth, not hardcoded UUIDs. Same pattern
+ * (`ResourceTypeEngine.ByName(...)`) for the `MJ: Resource Types` row
+ * that scopes `MJResourcePermission` records to the List resource type.
+ */
+/** Default invitation TTL: 7 days. The plan calls for tunable expiry but
+ * keeps the spec simple — overridable at call time. */
+export const DEFAULT_INVITATION_TTL_MS = 7 * 24 * 60 * 60 * 1000;
+/**
+ * Name of the row in `MJ: Resource Types` that scopes List shares.
+ * Centralized so a rename in the seed data is a one-line fix here, not
+ * a grep across the codebase.
+ */
+const LIST_RESOURCE_TYPE_NAME = 'Lists';
+/** Names of the rows in `MJ: Audit Log Types` for the seven list-sharing events. */
+const LIST_AUDIT_LOG_TYPE_NAMES = {
+    Shared: 'List Shared',
+    Unshared: 'List Unshared',
+    InvitationSent: 'List Invitation Sent',
+    InvitationAccepted: 'List Invitation Accepted',
+    InvitationRevoked: 'List Invitation Revoked',
+};
+// ---------------------------------------------------------------------------
+// ListSharing service
+// ---------------------------------------------------------------------------
+/**
+ * Sharing engine. Public methods follow MJ PascalCase convention; private
+ * helpers are camelCase. Mirrors the structure of `ListOperations`.
+ */
+export class ListSharing {
+    constructor(contextUser, provider) {
+        this.contextUser = contextUser;
+        this.provider = provider;
+    }
+    /**
+     * Grant a direct share on a list to a user or role. Idempotent at the
+     * (list, target) level — re-sharing the same target updates the
+     * existing permission row's level rather than creating duplicates.
+     */
+    async Share(args) {
+        try {
+            const md = this.metadata();
+            const existing = await this.findExistingPermission(args.ListID, args.Target);
+            const perm = existing ??
+                (await md.GetEntityObject('MJ: Resource Permissions', this.contextUser));
+            if (!existing) {
+                perm.NewRecord();
+                perm.ResourceTypeID = await this.getListResourceTypeId();
+                perm.ResourceRecordID = args.ListID;
+                perm.Type = args.Target.kind === 'user' ? 'User' : 'Role';
+                if (args.Target.kind === 'user')
+                    perm.UserID = args.Target.userId;
+                else
+                    perm.RoleID = args.Target.roleId;
+                perm.SharedByUserID = this.contextUser.ID;
+            }
+            perm.PermissionLevel = args.PermissionLevel;
+            perm.Status = 'Approved';
+            const ok = await perm.Save();
+            if (!ok) {
+                return this.shareFailure('UNEXPECTED_ERROR', `Failed to grant permission: ${perm.LatestResult?.CompleteMessage ?? 'unknown'}`);
+            }
+            await this.emitAuditLog({
+                Type: LIST_AUDIT_LOG_TYPE_NAMES.Shared,
+                ListID: args.ListID,
+                Description: `${this.contextUser.Name ?? this.contextUser.Email} shared list with ${args.Target.kind} ${this.targetId(args.Target)} as ${args.PermissionLevel}`,
+                Details: { TargetKind: args.Target.kind, TargetID: this.targetId(args.Target), Level: args.PermissionLevel },
+            });
+            // Direct user shares route through the platform-wide share-notification
+            // dispatcher — `@memberjunction/notifications` auto-registers a handler
+            // that fans this out across the user's notification preferences (in-app
+            // + email + SMS). Role-target shares are fan-out at the role level by
+            // a separate worker; we don't try to enumerate every role member here.
+            if (args.Target.kind === 'user' && args.Target.userId !== this.contextUser.ID) {
+                await this.dispatchShareNotification(args.ListID, args.Target.userId, args.PermissionLevel);
+            }
+            return { Success: true, ResultCode: 'SUCCESS', Message: 'Permission granted', PermissionID: perm.ID };
+        }
+        catch (e) {
+            const message = e instanceof Error ? e.message : String(e);
+            LogError(`ListSharing.Share failed: ${message}`);
+            return this.shareFailure('UNEXPECTED_ERROR', message);
+        }
+    }
+    /**
+     * Revoke a previously-granted permission. We soft-revoke (Status =
+     * 'Revoked') rather than hard-delete so the audit trail stays
+     * meaningful — `GetSharesForList` filters out revoked rows by default.
+     */
+    async Unshare(permissionId) {
+        try {
+            const md = this.metadata();
+            const perm = await md.GetEntityObject('MJ: Resource Permissions', this.contextUser);
+            const loaded = await perm.Load(permissionId);
+            if (!loaded)
+                return this.shareFailure('PERMISSION_NOT_FOUND', `Permission ${permissionId} not found`);
+            const listId = perm.ResourceRecordID;
+            const targetSnapshot = this.snapshotTarget(perm);
+            perm.Status = 'Revoked';
+            const ok = await perm.Save();
+            if (!ok) {
+                return this.shareFailure('UNEXPECTED_ERROR', `Failed to revoke: ${perm.LatestResult?.CompleteMessage ?? 'unknown'}`);
+            }
+            await this.emitAuditLog({
+                Type: LIST_AUDIT_LOG_TYPE_NAMES.Unshared,
+                ListID: listId,
+                Description: `${this.contextUser.Name ?? this.contextUser.Email} revoked permission ${permissionId}`,
+                Details: targetSnapshot,
+            });
+            return { Success: true, ResultCode: 'SUCCESS', Message: 'Permission revoked', PermissionID: perm.ID };
+        }
+        catch (e) {
+            const message = e instanceof Error ? e.message : String(e);
+            LogError(`ListSharing.Unshare failed: ${message}`);
+            return this.shareFailure('UNEXPECTED_ERROR', message);
+        }
+    }
+    /**
+     * Send an email invitation to share a list with someone — who may or
+     * may not already have an MJ user account. We persist the invitation
+     * with a random token + expiry; the recipient later calls
+     * `AcceptInvitation(token)` to promote it into a real
+     * `MJResourcePermission`.
+     */
+    async Invite(args) {
+        if (!args.Email || !args.Email.includes('@')) {
+            return { Success: false, ResultCode: 'INVALID_PARAMETER', Message: 'Email is required' };
+        }
+        try {
+            const md = this.metadata();
+            const inv = await md.GetEntityObject('MJ: List Invitations', this.contextUser);
+            inv.NewRecord();
+            inv.ListID = args.ListID;
+            inv.Email = args.Email;
+            inv.Role = args.Role;
+            inv.Token = this.generateInvitationToken();
+            inv.ExpiresAt = new Date(Date.now() + (args.TtlMs ?? DEFAULT_INVITATION_TTL_MS));
+            inv.CreatedByUserID = this.contextUser.ID;
+            inv.Status = 'Pending';
+            const ok = await inv.Save();
+            if (!ok) {
+                return {
+                    Success: false,
+                    ResultCode: 'UNEXPECTED_ERROR',
+                    Message: `Failed to create invitation: ${inv.LatestResult?.CompleteMessage ?? 'unknown'}`,
+                };
+            }
+            await this.emitAuditLog({
+                Type: LIST_AUDIT_LOG_TYPE_NAMES.InvitationSent,
+                ListID: args.ListID,
+                Description: `${this.contextUser.Name ?? this.contextUser.Email} invited ${args.Email} (${args.Role})`,
+                Details: { Email: args.Email, Role: args.Role, InvitationID: inv.ID },
+            });
+            return {
+                Success: true,
+                ResultCode: 'SUCCESS',
+                Message: `Invitation sent to ${args.Email}`,
+                InvitationID: inv.ID,
+                Token: inv.Token,
+                ExpiresAt: inv.ExpiresAt,
+            };
+        }
+        catch (e) {
+            const message = e instanceof Error ? e.message : String(e);
+            LogError(`ListSharing.Invite failed: ${message}`);
+            return { Success: false, ResultCode: 'UNEXPECTED_ERROR', Message: message };
+        }
+    }
+    /**
+     * Accept an invitation by its token. The caller becomes the recipient
+     * (we read `contextUser`); the invitation's email must match the
+     * caller's email — protects against token interception by a different
+     * MJ account.
+     *
+     * On success: creates the `MJResourcePermission` and marks the
+     * invitation `Accepted`.
+     */
+    async AcceptInvitation(token) {
+        try {
+            const md = this.metadata();
+            const rv = this.runView();
+            const lookup = await rv.RunView({
+                EntityName: 'MJ: List Invitations',
+                ExtraFilter: `Token='${this.escape(token)}'`,
+                ResultType: 'entity_object',
+            }, this.contextUser);
+            if (!lookup.Success || !lookup.Results || lookup.Results.length === 0) {
+                return { Success: false, ResultCode: 'INVITATION_NOT_FOUND', Message: 'Invitation not found' };
+            }
+            const inv = lookup.Results[0];
+            if (inv.Status === 'Revoked') {
+                return { Success: false, ResultCode: 'INVITATION_REVOKED', Message: 'Invitation has been revoked' };
+            }
+            if (inv.Status === 'Accepted') {
+                return { Success: false, ResultCode: 'INVITATION_ALREADY_USED', Message: 'Invitation has already been accepted' };
+            }
+            if (inv.ExpiresAt.getTime() < Date.now()) {
+                // Mark expired so subsequent reads see consistent state.
+                inv.Status = 'Expired';
+                await inv.Save();
+                return { Success: false, ResultCode: 'INVITATION_EXPIRED', Message: 'Invitation has expired' };
+            }
+            // Email-match check — best-effort: if context user has no email we
+            // skip and rely on the token itself as the auth gate.
+            const callerEmail = this.contextUser.Email?.toLowerCase();
+            if (callerEmail && inv.Email.toLowerCase() !== callerEmail) {
+                return {
+                    Success: false,
+                    ResultCode: 'EMAIL_RECIPIENT_NOT_FOUND',
+                    Message: `Invitation was for ${inv.Email} but caller is ${this.contextUser.Email}`,
+                };
+            }
+            const share = await this.Share({
+                ListID: inv.ListID,
+                Target: { kind: 'user', userId: this.contextUser.ID },
+                PermissionLevel: inv.Role === 'Editor' ? 'Edit' : 'View',
+            });
+            if (!share.Success) {
+                return { Success: false, ResultCode: share.ResultCode, Message: share.Message };
+            }
+            inv.Status = 'Accepted';
+            await inv.Save();
+            await this.emitAuditLog({
+                Type: LIST_AUDIT_LOG_TYPE_NAMES.InvitationAccepted,
+                ListID: inv.ListID,
+                Description: `${this.contextUser.Name ?? this.contextUser.Email} accepted invitation ${inv.ID}`,
+                Details: { InvitationID: inv.ID, GrantedPermissionID: share.PermissionID },
+            });
+            return {
+                Success: true,
+                ResultCode: 'SUCCESS',
+                Message: 'Invitation accepted',
+                PermissionID: share.PermissionID,
+                ListID: inv.ListID,
+            };
+        }
+        catch (e) {
+            const message = e instanceof Error ? e.message : String(e);
+            LogError(`ListSharing.AcceptInvitation failed: ${message}`);
+            return { Success: false, ResultCode: 'UNEXPECTED_ERROR', Message: message };
+        }
+    }
+    /**
+     * Revoke a pending invitation. No-op if already accepted (the resulting
+     * permission can still be `Unshare`d separately).
+     */
+    async RevokeInvitation(invitationId) {
+        try {
+            const md = this.metadata();
+            const inv = await md.GetEntityObject('MJ: List Invitations', this.contextUser);
+            const loaded = await inv.Load(invitationId);
+            if (!loaded)
+                return this.shareFailure('INVITATION_NOT_FOUND', `Invitation ${invitationId} not found`);
+            if (inv.Status === 'Accepted') {
+                return this.shareFailure('INVITATION_ALREADY_USED', 'Invitation already accepted — Unshare the resulting permission instead');
+            }
+            inv.Status = 'Revoked';
+            const ok = await inv.Save();
+            if (!ok) {
+                return this.shareFailure('UNEXPECTED_ERROR', `Failed to revoke: ${inv.LatestResult?.CompleteMessage ?? 'unknown'}`);
+            }
+            await this.emitAuditLog({
+                Type: LIST_AUDIT_LOG_TYPE_NAMES.InvitationRevoked,
+                ListID: inv.ListID,
+                Description: `${this.contextUser.Name ?? this.contextUser.Email} revoked invitation ${inv.ID}`,
+                Details: { InvitationID: inv.ID, Email: inv.Email },
+            });
+            return { Success: true, ResultCode: 'SUCCESS', Message: 'Invitation revoked' };
+        }
+        catch (e) {
+            const message = e instanceof Error ? e.message : String(e);
+            LogError(`ListSharing.RevokeInvitation failed: ${message}`);
+            return this.shareFailure('UNEXPECTED_ERROR', message);
+        }
+    }
+    /**
+     * Return the current (non-revoked) shares for a list — both user and
+     * role grants, mapped into the canonical `ListShareSummary` shape.
+     */
+    async GetSharesForList(listId) {
+        const resourceTypeId = await this.getListResourceTypeId();
+        const rv = this.runView();
+        const result = await rv.RunView({
+            EntityName: 'MJ: Resource Permissions',
+            ExtraFilter: `ResourceTypeID='${resourceTypeId}' AND ResourceRecordID='${this.escape(listId)}' AND Status<>'Revoked'`,
+            OrderBy: '__mj_CreatedAt DESC',
+            ResultType: 'entity_object',
+        }, this.contextUser);
+        if (!result.Success || !result.Results)
+            return [];
+        return result.Results.map((p) => this.toShareSummary(p));
+    }
+    /**
+     * Resolve the effective permission level the context user has on a
+     * list. Returns `'Owner'` if they created the list (UserID match);
+     * otherwise checks for a direct user share. Role-based shares are
+     * resolved by `ResourcePermissionEngine` server-side — we return null
+     * here to indicate "no direct share" and let the caller fall back if
+     * needed. Phase 2 ships with direct user-shares only.
+     */
+    async ResolveEffectivePermission(listId) {
+        try {
+            const md = this.metadata();
+            const list = await md.GetEntityObject('MJ: Lists', this.contextUser);
+            const loaded = await list.Load(listId);
+            if (!loaded)
+                return null;
+            if (list.UserID === this.contextUser.ID)
+                return 'Owner';
+            const resourceTypeId = await this.getListResourceTypeId();
+            const rv = this.runView();
+            const result = await rv.RunView({
+                EntityName: 'MJ: Resource Permissions',
+                ExtraFilter: `ResourceTypeID='${resourceTypeId}' AND ResourceRecordID='${this.escape(listId)}' AND Type='User' AND UserID='${this.contextUser.ID}' AND Status='Approved'`,
+                ResultType: 'entity_object',
+            }, this.contextUser);
+            if (!result.Success || !result.Results || result.Results.length === 0)
+                return null;
+            return (result.Results[0].PermissionLevel ?? null);
+        }
+        catch (e) {
+            LogError(`ResolveEffectivePermission failed for list ${listId}: ${e instanceof Error ? e.message : String(e)}`);
+            return null;
+        }
+    }
+    /**
+     * Return all lists currently shared with the context user. Role-based
+     * shares are deferred to a future iteration — Phase 2 ships with
+     * direct user-level shares only.
+     */
+    async GetListsSharedWithUser() {
+        const resourceTypeId = await this.getListResourceTypeId();
+        const rv = this.runView();
+        const result = await rv.RunView({
+            EntityName: 'MJ: Resource Permissions',
+            ExtraFilter: `ResourceTypeID='${resourceTypeId}' AND Type='User' AND UserID='${this.contextUser.ID}' AND Status='Approved'`,
+            OrderBy: '__mj_CreatedAt DESC',
+            ResultType: 'entity_object',
+        }, this.contextUser);
+        if (!result.Success || !result.Results)
+            return [];
+        // Resolve list names in one pass via a single RunView. Avoids an N+1.
+        const listIds = result.Results.map((p) => p.ResourceRecordID);
+        if (listIds.length === 0)
+            return [];
+        const filter = listIds.map((id) => `'${this.escape(id)}'`).join(',');
+        const listLookup = await rv.RunView({
+            EntityName: 'MJ: Lists',
+            ExtraFilter: `ID IN (${filter})`,
+            Fields: ['ID', 'Name'],
+            ResultType: 'simple',
+        }, this.contextUser);
+        const nameById = new Map();
+        if (listLookup.Success && listLookup.Results) {
+            for (const row of listLookup.Results) {
+                nameById.set(String(row.ID), String(row.Name));
+            }
+        }
+        return result.Results.map((p) => ({
+            ListID: p.ResourceRecordID,
+            ListName: nameById.get(p.ResourceRecordID) ?? '(unknown list)',
+            PermissionLevel: (p.PermissionLevel ?? 'View'),
+            SharedByUserID: p.SharedByUserID,
+            SharedAt: p.__mj_CreatedAt,
+        }));
+    }
+    // ---------------------------------------------------------------------
+    // Private helpers
+    // ---------------------------------------------------------------------
+    async findExistingPermission(listId, target) {
+        const rv = this.runView();
+        const targetClause = target.kind === 'user'
+            ? `Type='User' AND UserID='${this.escape(target.userId)}'`
+            : `Type='Role' AND RoleID='${this.escape(target.roleId)}'`;
+        const resourceTypeId = await this.getListResourceTypeId();
+        const result = await rv.RunView({
+            EntityName: 'MJ: Resource Permissions',
+            ExtraFilter: `ResourceTypeID='${resourceTypeId}' AND ResourceRecordID='${this.escape(listId)}' AND ${targetClause}`,
+            ResultType: 'entity_object',
+        }, this.contextUser);
+        if (!result.Success || !result.Results || result.Results.length === 0)
+            return null;
+        return result.Results[0];
+    }
+    toShareSummary(p) {
+        const target = p.Type === 'User'
+            ? { kind: 'user', userId: p.UserID }
+            : { kind: 'role', roleId: p.RoleID };
+        return {
+            PermissionID: p.ID,
+            ListID: p.ResourceRecordID,
+            Target: target,
+            PermissionLevel: (p.PermissionLevel ?? 'View'),
+            Status: p.Status,
+            SharedByUserID: p.SharedByUserID,
+            CreatedAt: p.__mj_CreatedAt,
+        };
+    }
+    snapshotTarget(p) {
+        return {
+            TargetKind: p.Type === 'User' ? 'user' : 'role',
+            TargetID: p.Type === 'User' ? p.UserID : p.RoleID,
+            Level: p.PermissionLevel,
+        };
+    }
+    targetId(target) {
+        return target.kind === 'user' ? target.userId : target.roleId;
+    }
+    /**
+     * Generate a 32-byte URL-safe random token for invitations. 256 bits of
+     * entropy is overkill for a 7-day TTL but cheap, and keeps the token
+     * unguessable even if the database leaks Statuses/Emails separately.
+     *
+     * Uses the Web Crypto API (`globalThis.crypto.getRandomValues`) so the
+     * function works identically in Node 19+ and browser bundles — without
+     * the `node:crypto` import that breaks browser-side bundling.
+     */
+    generateInvitationToken() {
+        const bytes = new Uint8Array(32);
+        globalThis.crypto.getRandomValues(bytes);
+        // Base64-URL: standard base64 then swap `+` `/` and strip `=` padding.
+        let binary = '';
+        for (let i = 0; i < bytes.length; i++)
+            binary += String.fromCharCode(bytes[i]);
+        const b64 = (typeof btoa === 'function' ? btoa(binary) : Buffer.from(bytes).toString('base64'));
+        return b64.replace(/=+$/, '').replace(/\+/g, '-').replace(/\//g, '_');
+    }
+    /**
+     * Resolve the `MJ: Resource Types.ID` for the row named "Lists" via the
+     * shared `ResourceTypeEngine`. Throws if missing — that indicates a
+     * misconfigured environment (seed data never pushed) and we'd rather
+     * fail loud than write `MJResourcePermission` rows with an undefined
+     * `ResourceTypeID`. Engine `Config()` is idempotent.
+     */
+    async getListResourceTypeId() {
+        await ResourceTypeEngine.Instance.Config(false, this.contextUser, this.provider);
+        const rt = ResourceTypeEngine.Instance.ByName(LIST_RESOURCE_TYPE_NAME);
+        if (!rt) {
+            throw new Error(`MJ: Resource Types row "${LIST_RESOURCE_TYPE_NAME}" not found. ` +
+                `Seed metadata/resource-types/ via 'mj sync push' before using ListSharing.`);
+        }
+        return rt.ID;
+    }
+    /**
+     * Resolve an `MJ: Audit Log Types.ID` by row name via the shared
+     * `AuditLogTypeEngine`. Same fail-loud contract as
+     * {@link getListResourceTypeId}.
+     */
+    async getAuditLogTypeId(name) {
+        await AuditLogTypeEngine.Instance.Config(false, this.contextUser, this.provider);
+        const t = AuditLogTypeEngine.Instance.ByName(name);
+        if (!t) {
+            throw new Error(`MJ: Audit Log Types row "${name}" not found. ` +
+                `Seed metadata/audit-log-types/ via 'mj sync push' before using ListSharing.`);
+        }
+        return t.ID;
+    }
+    /**
+     * Best-effort audit-log emit. We never fail the parent operation on
+     * an audit-log failure; instead we LogError so the discrepancy is
+     * observable. Cross-cutting reliability concern.
+     *
+     * Takes the audit-log-type by NAME so call sites are grep-able and
+     * resilient to seed-UUID changes. Name → ID resolution goes through the
+     * `AuditLogTypeEngine`.
+     */
+    async emitAuditLog(args) {
+        try {
+            const typeId = await this.getAuditLogTypeId(args.Type);
+            const md = this.metadata();
+            const log = await md.GetEntityObject('MJ: Audit Logs', this.contextUser);
+            log.NewRecord();
+            log.UserID = this.contextUser.ID;
+            log.AuditLogTypeID = typeId;
+            log.Status = 'Success';
+            log.Description = args.Description;
+            log.Details = JSON.stringify(args.Details);
+            // EntityID for MJ: Lists via the O(1) by-name map. Entities.find
+            // is an O(N) scan and the documented anti-pattern.
+            const listEntity = md.EntityByName('MJ: Lists');
+            if (listEntity)
+                log.EntityID = listEntity.ID;
+            log.RecordID = args.ListID;
+            const ok = await log.Save();
+            if (!ok) {
+                LogError(`Audit log save failed: ${log.LatestResult?.CompleteMessage ?? 'unknown'}`);
+            }
+        }
+        catch (e) {
+            LogError(`emitAuditLog threw: ${e instanceof Error ? e.message : String(e)}`);
+        }
+    }
+    /**
+     * Fire-and-forget share notification via the platform-wide dispatcher.
+     * If the recipient has notification preferences for email, MJServer's
+     * registered handler will send an email; if they prefer in-app only,
+     * a `MJ: User Notifications` row is written instead. Either way the
+     * share itself has already succeeded — a notification failure is logged
+     * (inside `CreateShareNotification`) but does not propagate.
+     *
+     * Pre-condition: this is only called for `Target.kind === 'user'` and
+     * never for self-shares (the caller guards both).
+     */
+    async dispatchShareNotification(listId, granteeUserId, level) {
+        try {
+            const md = this.metadata();
+            // Resolve the list name for the notification copy. Best-effort — if
+            // it fails, the dispatcher falls back to a generic "shared a list".
+            let listName;
+            try {
+                const list = await md.GetEntityObject('MJ: Lists', this.contextUser);
+                const loaded = await list.Load(listId);
+                if (loaded)
+                    listName = list.Name;
+            }
+            catch {
+                // ignore — listName stays undefined
+            }
+            await CreateShareNotification({
+                Provider: this.metadata(),
+                ContextUser: this.contextUser,
+                GrantorUserID: this.contextUser.ID,
+                GranteeUserID: granteeUserId,
+                ResourceTypeLabel: 'List',
+                ResourceTypeName: 'Lists',
+                ResourceName: listName,
+                ResourceRecordID: listId,
+                ActionsSummary: `granted ${level} access`,
+                ExtraConfiguration: { PermissionLevel: level },
+            });
+        }
+        catch (e) {
+            LogError(`dispatchShareNotification failed for list ${listId}: ${e instanceof Error ? e.message : String(e)}`);
+        }
+    }
+    shareFailure(code, message) {
+        return { Success: false, ResultCode: code, Message: message };
+    }
+    /** Escape a value for inline-literal use in `ExtraFilter`. */
+    escape(value) {
+        return value.replace(/'/g, "''");
+    }
+    metadata() {
+        return this.provider ?? new Metadata();
+    }
+    runView() {
+        return this.provider ? RunView.FromMetadataProvider(this.provider) : new RunView();
+    }
+}
+//# sourceMappingURL=ListSharing.js.map

package/dist/ListSharing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ListSharing.js","sourceRoot":"","sources":["../src/ListSharing.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,QAAQ,EACR,QAAQ,EACR,OAAO,GAER,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,kBAAkB,EAClB,uBAAuB,EAMvB,kBAAkB,GACnB,MAAM,+BAA+B,CAAC;AAYvC;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH;uDACuD;AACvD,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEjE;;;;GAIG;AACH,MAAM,uBAAuB,GAAG,OAAO,CAAC;AAExC,oFAAoF;AACpF,MAAM,yBAAyB,GAAG;IAChC,MAAM,EAAE,aAAa;IACrB,QAAQ,EAAE,eAAe;IACzB,cAAc,EAAE,sBAAsB;IACtC,kBAAkB,EAAE,0BAA0B;IAC9C,iBAAiB,EAAE,yBAAyB;CACpC,CAAC;AAEX,8EAA8E;AAC9E,sBAAsB;AACtB,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,OAAO,WAAW;IAItB,YAAY,WAAqB,EAAE,QAA4B;QAC7D,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;IAED;;;;OAIG;IACI,KAAK,CAAC,KAAK,CAAC,IAIlB;QACC,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC3B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YAE7E,MAAM,IAAI,GACR,QAAQ;gBACR,CAAC,MAAM,EAAE,CAAC,eAAe,CAA6B,0BAA0B,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;YACvG,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,IAAI,CAAC,SAAS,EAAE,CAAC;gBACjB,IAAI,CAAC,cAAc,GAAG,MAAM,IAAI,CAAC,qBAAqB,EAAE,CAAC;gBACzD,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,MAAM,CAAC;gBACpC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;gBAC1D,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,MAAM;oBAAE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;;oBAC7D,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;gBACtC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;YAC5C,CAAC;YACD,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,eAAe,CAAC;YAC5C,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC;YAEzB,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;YAC7B,IAAI,CAAC,EAAE,EAAE,CAAC;gBACR,OAAO,IAAI,CAAC,YAAY,CAAC,kBAAkB,EAAE,+BAA+B,IAAI,CAAC,YAAY,EAAE,eAAe,IAAI,SAAS,EAAE,CAAC,CAAC;YACjI,CAAC;YAED,MAAM,IAAI,CAAC,YAAY,CAAC;gBACtB,IAAI,EAAE,yBAAyB,CAAC,MAAM;gBACtC,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,WAAW,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW,CAAC,KAAK,qBAAqB,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,eAAe,EAAE;gBAC/J,OAAO,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,eAAe,EAAE;aAC7G,CAAC,CAAC;YAEH,wEAAwE;YACxE,wEAAwE;YACxE,wEAAwE;YACxE,sEAAsE;YACtE,uEAAuE;YACvE,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC;gBAC9E,MAAM,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;YAC9F,CAAC;YAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,oBAAoB,EAAE,YAAY,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;QACxG,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,OAAO,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAC3D,QAAQ,CAAC,6BAA6B,OAAO,EAAE,CAAC,CAAC;YACjD,OAAO,IAAI,CAAC,YAAY,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAED;;;;OAIG;IACI,KAAK,CAAC,OAAO,CAAC,YAAoB;QACvC,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,eAAe,CAA6B,0BAA0B,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;YAChH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAC7C,IAAI,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAC,YAAY,CAAC,sBAAsB,EAAE,cAAc,YAAY,YAAY,CAAC,CAAC;YAEtG,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC;YACrC,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;YACjD,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;YACxB,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;YAC7B,IAAI,CAAC,EAAE,EAAE,CAAC;gBACR,OAAO,IAAI,CAAC,YAAY,CAAC,kBAAkB,EAAE,qBAAqB,IAAI,CAAC,YAAY,EAAE,eAAe,IAAI,SAAS,EAAE,CAAC,CAAC;YACvH,CAAC;YAED,MAAM,IAAI,CAAC,YAAY,CAAC;gBACtB,IAAI,EAAE,yBAAyB,CAAC,QAAQ;gBACxC,MAAM,EAAE,MAAM;gBACd,WAAW,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW,CAAC,KAAK,uBAAuB,YAAY,EAAE;gBACpG,OAAO,EAAE,cAAc;aACxB,CAAC,CAAC;YACH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,oBAAoB,EAAE,YAAY,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;QACxG,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,OAAO,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAC3D,QAAQ,CAAC,+BAA+B,OAAO,EAAE,CAAC,CAAC;YACnD,OAAO,IAAI,CAAC,YAAY,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACI,KAAK,CAAC,MAAM,CAAC,IAKnB;QACC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,mBAAmB,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC;QAC3F,CAAC;QACD,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC3B,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,eAAe,CAAyB,sBAAsB,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;YACvG,GAAG,CAAC,SAAS,EAAE,CAAC;YAChB,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;YACzB,GAAG,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;YACvB,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;YACrB,GAAG,CAAC,KAAK,GAAG,IAAI,CAAC,uBAAuB,EAAE,CAAC;YAC3C,GAAG,CAAC,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,yBAAyB,CAAC,CAAC,CAAC;YACjF,GAAG,CAAC,eAAe,GAAG,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;YAC1C,GAAG,CAAC,MAAM,GAAG,SAAS,CAAC;YAEvB,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YAC5B,IAAI,CAAC,EAAE,EAAE,CAAC;gBACR,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,UAAU,EAAE,kBAAkB;oBAC9B,OAAO,EAAE,gCAAgC,GAAG,CAAC,YAAY,EAAE,eAAe,IAAI,SAAS,EAAE;iBAC1F,CAAC;YACJ,CAAC;YAED,MAAM,IAAI,CAAC,YAAY,CAAC;gBACtB,IAAI,EAAE,yBAAyB,CAAC,cAAc;gBAC9C,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,WAAW,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW,CAAC,KAAK,YAAY,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,IAAI,GAAG;gBACtG,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,YAAY,EAAE,GAAG,CAAC,EAAE,EAAE;aACtE,CAAC,CAAC;YAEH,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,UAAU,EAAE,SAAS;gBACrB,OAAO,EAAE,sBAAsB,IAAI,CAAC,KAAK,EAAE;gBAC3C,YAAY,EAAE,GAAG,CAAC,EAAE;gBACpB,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,SAAS,EAAE,GAAG,CAAC,SAAS;aACzB,CAAC;QACJ,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,OAAO,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAC3D,QAAQ,CAAC,8BAA8B,OAAO,EAAE,CAAC,CAAC;YAClD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,kBAAkB,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;QAC9E,CAAC;IACH,CAAC;IAED;;;;;;;;OAQG;IACI,KAAK,CAAC,gBAAgB,CAAC,KAAa;QACzC,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC3B,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;YAC1B,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAAyB;gBACtD,UAAU,EAAE,sBAAsB;gBAClC,WAAW,EAAE,UAAU,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG;gBAC5C,UAAU,EAAE,eAAe;aAC5B,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;YAErB,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACtE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,sBAAsB,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC;YACjG,CAAC;YACD,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YAE9B,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC7B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,oBAAoB,EAAE,OAAO,EAAE,6BAA6B,EAAE,CAAC;YACtG,CAAC;YACD,IAAI,GAAG,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;gBAC9B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,yBAAyB,EAAE,OAAO,EAAE,sCAAsC,EAAE,CAAC;YACpH,CAAC;YACD,IAAI,GAAG,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;gBACzC,yDAAyD;gBACzD,GAAG,CAAC,MAAM,GAAG,SAAS,CAAC;gBACvB,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;gBACjB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,oBAAoB,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC;YACjG,CAAC;YAED,mEAAmE;YACnE,sDAAsD;YACtD,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,WAAW,EAAE,CAAC;YAC1D,IAAI,WAAW,IAAI,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,WAAW,EAAE,CAAC;gBAC3D,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,UAAU,EAAE,2BAA2B;oBACvC,OAAO,EAAE,sBAAsB,GAAG,CAAC,KAAK,kBAAkB,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE;iBACnF,CAAC;YACJ,CAAC;YAED,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC;gBAC7B,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE;gBACrD,eAAe,EAAE,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;aACzD,CAAC,CAAC;YACH,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;gBACnB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;YAClF,CAAC;YAED,GAAG,CAAC,MAAM,GAAG,UAAU,CAAC;YACxB,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YAEjB,MAAM,IAAI,CAAC,YAAY,CAAC;gBACtB,IAAI,EAAE,yBAAyB,CAAC,kBAAkB;gBAClD,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,WAAW,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW,CAAC,KAAK,wBAAwB,GAAG,CAAC,EAAE,EAAE;gBAC/F,OAAO,EAAE,EAAE,YAAY,EAAE,GAAG,CAAC,EAAE,EAAE,mBAAmB,EAAE,KAAK,CAAC,YAAY,EAAE;aAC3E,CAAC,CAAC;YAEH,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,UAAU,EAAE,SAAS;gBACrB,OAAO,EAAE,qBAAqB;gBAC9B,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,MAAM,EAAE,GAAG,CAAC,MAAM;aACnB,CAAC;QACJ,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,OAAO,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAC3D,QAAQ,CAAC,wCAAwC,OAAO,EAAE,CAAC,CAAC;YAC5D,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,kBAAkB,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;QAC9E,CAAC;IACH,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,gBAAgB,CAAC,YAAoB;QAChD,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC3B,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,eAAe,CAAyB,sBAAsB,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;YACvG,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAC5C,IAAI,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAC,YAAY,CAAC,sBAAsB,EAAE,cAAc,YAAY,YAAY,CAAC,CAAC;YACtG,IAAI,GAAG,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;gBAC9B,OAAO,IAAI,CAAC,YAAY,CACtB,yBAAyB,EACzB,wEAAwE,CACzE,CAAC;YACJ,CAAC;YACD,GAAG,CAAC,MAAM,GAAG,SAAS,CAAC;YACvB,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YAC5B,IAAI,CAAC,EAAE,EAAE,CAAC;gBACR,OAAO,IAAI,CAAC,YAAY,CAAC,kBAAkB,EAAE,qBAAqB,GAAG,CAAC,YAAY,EAAE,eAAe,IAAI,SAAS,EAAE,CAAC,CAAC;YACtH,CAAC;YACD,MAAM,IAAI,CAAC,YAAY,CAAC;gBACtB,IAAI,EAAE,yBAAyB,CAAC,iBAAiB;gBACjD,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,WAAW,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW,CAAC,KAAK,uBAAuB,GAAG,CAAC,EAAE,EAAE;gBAC9F,OAAO,EAAE,EAAE,YAAY,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE;aACpD,CAAC,CAAC;YACH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC;QACjF,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,OAAO,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAC3D,QAAQ,CAAC,wCAAwC,OAAO,EAAE,CAAC,CAAC;YAC5D,OAAO,IAAI,CAAC,YAAY,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,gBAAgB,CAAC,MAAc;QAC1C,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAC1D,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAA6B;YAC1D,UAAU,EAAE,0BAA0B;YACtC,WAAW,EAAE,mBAAmB,cAAc,2BAA2B,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,yBAAyB;YACrH,OAAO,EAAE,qBAAqB;YAC9B,UAAU,EAAE,eAAe;SAC5B,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QACrB,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,EAAE,CAAC;QAClD,OAAO,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3D,CAAC;IAED;;;;;;;OAOG;IACI,KAAK,CAAC,0BAA0B,CAAC,MAAc;QACpD,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,eAAe,CAAe,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;YACnF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACvC,IAAI,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAC;YACzB,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,WAAW,CAAC,EAAE;gBAAE,OAAO,OAAO,CAAC;YAExD,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,qBAAqB,EAAE,CAAC;YAC1D,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;YAC1B,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAA6B;gBAC1D,UAAU,EAAE,0BAA0B;gBACtC,WAAW,EAAE,mBAAmB,cAAc,2BAA2B,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,iCAAiC,IAAI,CAAC,WAAW,CAAC,EAAE,yBAAyB;gBACzK,UAAU,EAAE,eAAe;aAC5B,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;YACrB,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YACnF,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,eAAe,IAAI,IAAI,CAAgC,CAAC;QACpF,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,QAAQ,CAAC,8CAA8C,MAAM,KAAK,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAChH,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;OAIG;IACI,KAAK,CAAC,sBAAsB;QACjC,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAC1D,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAA6B;YAC1D,UAAU,EAAE,0BAA0B;YACtC,WAAW,EAAE,mBAAmB,cAAc,iCAAiC,IAAI,CAAC,WAAW,CAAC,EAAE,yBAAyB;YAC3H,OAAO,EAAE,qBAAqB;YAC9B,UAAU,EAAE,eAAe;SAC5B,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QACrB,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,EAAE,CAAC;QAClD,sEAAsE;QACtE,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;QAC9D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACrE,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC,OAAO,CAA+B;YAChE,UAAU,EAAE,WAAW;YACvB,WAAW,EAAE,UAAU,MAAM,GAAG;YAChC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC;YACtB,UAAU,EAAE,QAAQ;SACrB,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QACrB,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC3C,IAAI,UAAU,CAAC,OAAO,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;YAC7C,KAAK,MAAM,GAAG,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;gBACrC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;YACjD,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAChC,MAAM,EAAE,CAAC,CAAC,gBAAgB;YAC1B,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,gBAAgB;YAC9D,eAAe,EAAE,CAAC,CAAC,CAAC,eAAe,IAAI,MAAM,CAAyB;YACtE,cAAc,EAAE,CAAC,CAAC,cAAc;YAChC,QAAQ,EAAE,CAAC,CAAC,cAAc;SAC3B,CAAC,CAAC,CAAC;IACN,CAAC;IAED,wEAAwE;IACxE,kBAAkB;IAClB,wEAAwE;IAEhE,KAAK,CAAC,sBAAsB,CAClC,MAAc,EACd,MAAmB;QAEnB,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QAC1B,MAAM,YAAY,GAChB,MAAM,CAAC,IAAI,KAAK,MAAM;YACpB,CAAC,CAAC,2BAA2B,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG;YAC1D,CAAC,CAAC,2BAA2B,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC;QAC/D,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAC1D,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAA6B;YAC1D,UAAU,EAAE,0BAA0B;YACtC,WAAW,EAAE,mBAAmB,cAAc,2BAA2B,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,YAAY,EAAE;YACnH,UAAU,EAAE,eAAe;SAC5B,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QACrB,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACnF,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3B,CAAC;IAEO,cAAc,CAAC,CAA6B;QAClD,MAAM,MAAM,GACV,CAAC,CAAC,IAAI,KAAK,MAAM;YACf,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,MAAO,EAAE;YACrC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,MAAO,EAAE,CAAC;QAC1C,OAAO;YACL,YAAY,EAAE,CAAC,CAAC,EAAE;YAClB,MAAM,EAAE,CAAC,CAAC,gBAAgB;YAC1B,MAAM,EAAE,MAAM;YACd,eAAe,EAAE,CAAC,CAAC,CAAC,eAAe,IAAI,MAAM,CAAyB;YACtE,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,cAAc,EAAE,CAAC,CAAC,cAAc;YAChC,SAAS,EAAE,CAAC,CAAC,cAAc;SAC5B,CAAC;IACJ,CAAC;IAEO,cAAc,CAAC,CAA6B;QAClD,OAAO;YACL,UAAU,EAAE,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;YAC/C,QAAQ,EAAE,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM;YACjD,KAAK,EAAE,CAAC,CAAC,eAAe;SACzB,CAAC;IACJ,CAAC;IAEO,QAAQ,CAAC,MAAmB;QAClC,OAAO,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;IAChE,CAAC;IAED;;;;;;;;OAQG;IACK,uBAAuB;QAC7B,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;QACjC,UAAU,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QACzC,uEAAuE;QACvE,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE;YAAE,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/E,MAAM,GAAG,GAAG,CAAC,OAAO,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;QAChG,OAAO,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACxE,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,qBAAqB;QACjC,MAAM,kBAAkB,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QACjF,MAAM,EAAE,GAAG,kBAAkB,CAAC,QAAQ,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC;QACvE,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,MAAM,IAAI,KAAK,CACb,2BAA2B,uBAAuB,eAAe;gBAC/D,4EAA4E,CAC/E,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,CAAC,EAAE,CAAC;IACf,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,iBAAiB,CAAC,IAAY;QAC1C,MAAM,kBAAkB,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QACjF,MAAM,CAAC,GAAG,kBAAkB,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,CAAC,CAAC,EAAE,CAAC;YACP,MAAM,IAAI,KAAK,CACb,4BAA4B,IAAI,eAAe;gBAC7C,6EAA6E,CAChF,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,CAAC,EAAE,CAAC;IACd,CAAC;IAED;;;;;;;;OAQG;IACK,KAAK,CAAC,YAAY,CAAC,IAK1B;QACC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACvD,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC3B,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,eAAe,CAAmB,gBAAgB,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;YAC3F,GAAG,CAAC,SAAS,EAAE,CAAC;YAChB,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;YACjC,GAAG,CAAC,cAAc,GAAG,MAAM,CAAC;YAC5B,GAAG,CAAC,MAAM,GAAG,SAAS,CAAC;YACvB,GAAG,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;YACnC,GAAG,CAAC,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC3C,iEAAiE;YACjE,mDAAmD;YACnD,MAAM,UAAU,GAAG,EAAE,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;YAChD,IAAI,UAAU;gBAAE,GAAG,CAAC,QAAQ,GAAG,UAAU,CAAC,EAAE,CAAC;YAC7C,GAAG,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC;YAC3B,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YAC5B,IAAI,CAAC,EAAE,EAAE,CAAC;gBACR,QAAQ,CAAC,0BAA0B,GAAG,CAAC,YAAY,EAAE,eAAe,IAAI,SAAS,EAAE,CAAC,CAAC;YACvF,CAAC;QACH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,QAAQ,CAAC,uBAAuB,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;IAED;;;;;;;;;;OAUG;IACK,KAAK,CAAC,yBAAyB,CACrC,MAAc,EACd,aAAqB,EACrB,KAA2B;QAE3B,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC3B,oEAAoE;YACpE,oEAAoE;YACpE,IAAI,QAA4B,CAAC;YACjC,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,eAAe,CAAe,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;gBACnF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACvC,IAAI,MAAM;oBAAE,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC;YACnC,CAAC;YAAC,MAAM,CAAC;gBACP,oCAAoC;YACtC,CAAC;YACD,MAAM,uBAAuB,CAAC;gBAC5B,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAkC;gBACzD,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,aAAa,EAAE,IAAI,CAAC,WAAW,CAAC,EAAE;gBAClC,aAAa,EAAE,aAAa;gBAC5B,iBAAiB,EAAE,MAAM;gBACzB,gBAAgB,EAAE,OAAO;gBACzB,YAAY,EAAE,QAAQ;gBACtB,gBAAgB,EAAE,MAAM;gBACxB,cAAc,EAAE,WAAW,KAAK,SAAS;gBACzC,kBAAkB,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE;aAC/C,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,QAAQ,CAAC,6CAA6C,MAAM,KAAK,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACjH,CAAC;IACH,CAAC;IAEO,YAAY,CAAC,IAAqB,EAAE,OAAe;QACzD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;IAChE,CAAC;IAED,8DAA8D;IACtD,MAAM,CAAC,KAAa;QAC1B,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACnC,CAAC;IAEO,QAAQ;QACd,OAAQ,IAAI,CAAC,QAA4C,IAAI,IAAI,QAAQ,EAAE,CAAC;IAC9E,CAAC;IAEO,OAAO;QACb,OAAO,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC;IACrF,CAAC;CACF"}

package/dist/deltaToken.d.ts

@@ -0,0 +1,47 @@
+/**
+ * Server-signed token attached to every `ListDelta`. The token is the only
+ * thing `ApplyDelta` will accept as proof that:
+ *   - the preview was produced server-side (not forged by a client),
+ *   - the preview describes a known target + source pairing,
+ *   - the preview is fresh (within `TOKEN_TTL_MS`).
+ *
+ * Token format is `<base64url(payload-json)>.<base64url(hmac-sha256)>`. We
+ * deliberately avoid a JWT dependency — the payload shape is fixed, the
+ * algorithm is fixed, and we own both ends.
+ *
+ * Uses Node's built-in `node:crypto`. This module is server-only — clients
+ * never sign or verify tokens (they receive them inside a `ListDelta` and
+ * hand them back unchanged to `ApplyDelta`).
+ *
+ * Public functions remain async for backwards compatibility with callers
+ * that already `await` them; the underlying node:crypto APIs are synchronous,
+ * which is fine — HMAC on a tiny payload is sub-millisecond.
+ */
+import { type DeltaTokenError, type DeltaTokenPayload } from '@memberjunction/lists-base';
+export declare class DeltaTokenVerificationError extends Error {
+    readonly Code: DeltaTokenError;
+    constructor(code: DeltaTokenError, message: string);
+}
+/**
+ * Produce a deterministic fingerprint of a record-ID set. Used as the `ssig`
+ * field on the token payload — server-side `ApplyDelta` recomputes the
+ * fingerprint of the freshly resolved source and compares against the token
+ * to detect `STALE_DELTA`.
+ */
+export declare function ComputeSourceSignature(recordIds: readonly string[]): Promise<string>;
+export declare function SetDeltaTokenSecret(secret: string | undefined): void;
+/**
+ * Sign a payload. Callers should pass `iat: Date.now()` and an `ssig`
+ * computed via `ComputeSourceSignature`. Returns the wire form.
+ */
+export declare function SignDeltaToken(payload: DeltaTokenPayload): Promise<string>;
+/**
+ * Verify a token: checks structural shape, HMAC, and TTL. Returns the parsed
+ * payload on success; throws `DeltaTokenVerificationError` otherwise.
+ *
+ * `timingSafeEqual` compares in time independent of the mismatch position,
+ * so a token-fuzzing attacker can't learn the secret from comparison-time
+ * side channels.
+ */
+export declare function VerifyDeltaToken(token: string, now?: number): Promise<DeltaTokenPayload>;
+//# sourceMappingURL=deltaToken.d.ts.map

package/dist/deltaToken.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deltaToken.d.ts","sourceRoot":"","sources":["../src/deltaToken.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAIH,OAAO,EAEL,KAAK,eAAe,EACpB,KAAK,iBAAiB,EACvB,MAAM,4BAA4B,CAAC;AAEpC,qBAAa,2BAA4B,SAAQ,KAAK;IACpD,SAAgB,IAAI,EAAE,eAAe,CAAC;gBAC1B,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM;CAInD;AAED;;;;;GAKG;AACH,wBAAsB,sBAAsB,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAG1F;AASD,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAEpE;AA8BD;;;GAGG;AACH,wBAAsB,cAAc,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,MAAM,CAAC,CAKhF;AAED;;;;;;;GAOG;AACH,wBAAsB,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,GAAE,MAAmB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAsC1G"}