@noodleseed/one 0.161.2 → 0.162.0

package/node_modules/@noodle-borg/service/dist/oauth/store.d.ts

@@ -171,7 +171,7 @@ export interface OAuthStore extends DeviceAuthorizationStore {
     getClient(clientId: string): Promise<OAuthClientInformationFull | undefined>;
     putClient(client: OAuthClientInformationFull): Promise<OAuthClientInformationFull>;
     /** Atomically reserves or reconciles a server-owned client without taking over a DCR registration. */
-    putFirstPartyClient(owner: 'console', client: OAuthClientInformationFull): Promise<OAuthClientInformationFull>;
+    putFirstPartyClient(owner: 'console' | 'portal', client: OAuthClientInformationFull): Promise<OAuthClientInformationFull>;
     /** Pending authorization (single-use). A provider mismatch leaves the record live for its real callback. */
     createPendingAuthorization(record: PendingAuthorizationRecord): Promise<void>;
     consumePendingAuthorization(state: string, expectedUpstreamProvider: PendingAuthorizationCallbackKind): Promise<PendingAuthorizationRecord | undefined>;
@@ -220,7 +220,7 @@ export declare class InMemoryOAuthStore implements OAuthStore {
     #private;
     getClient(clientId: string): Promise<OAuthClientInformationFull | undefined>;
     putClient(client: OAuthClientInformationFull): Promise<OAuthClientInformationFull>;
-    putFirstPartyClient(owner: 'console', client: OAuthClientInformationFull): Promise<OAuthClientInformationFull>;
+    putFirstPartyClient(owner: 'console' | 'portal', client: OAuthClientInformationFull): Promise<OAuthClientInformationFull>;
     createPendingAuthorization(record: PendingAuthorizationRecord): Promise<void>;
     consumePendingAuthorization(state: string, expectedUpstreamProvider: PendingAuthorizationRecord['upstreamProvider']): Promise<PendingAuthorizationRecord | undefined>;
     createAuthorizationCode(record: AuthorizationCodeRecord): Promise<void>;

package/node_modules/@noodle-borg/service/dist/routes/business-information-dispatch.js

@@ -0,0 +1,48 @@
+import { respondRouteError } from '../http-util.js';
+import { handleBusinessGrants, handleManagedRecords, handlePublicSolutionIntake, handleSolutionCatalog, handleSolutionInstallations, } from './business-information.js';
+import { parsePublicSolutionIntakePath, parseSolutionInstallationPath, } from './business-information-paths.js';
+export function dispatchBusinessInformationRoutes(req, res, url, deps) {
+    if (url.pathname === '/v1/solutions/catalog') {
+        return run(req, res, deps, () => Promise.resolve(handleSolutionCatalog(req, res)));
+    }
+    const publicRef = parsePublicSolutionIntakePath(url.pathname);
+    if (publicRef !== undefined) {
+        deps.applySecurityHeaders(res, deps.tls);
+        if (deps.enforceHttps(req, res, deps.tls))
+            return true;
+        applyPublicIntakeCors(res);
+        if (req.method === 'OPTIONS') {
+            res.writeHead(204);
+            res.end();
+            return true;
+        }
+        void handlePublicSolutionIntake(req, res, publicRef, deps).catch((error) => respondRouteError(deps.logger, res, 'business_information.public_route.failed', error));
+        return true;
+    }
+    const installationRef = parseSolutionInstallationPath(url.pathname);
+    if (installationRef === undefined)
+        return false;
+    if (installationRef.action === 'grants') {
+        return run(req, res, deps, () => handleBusinessGrants(req, res, installationRef, deps));
+    }
+    if (installationRef.action === 'records' ||
+        installationRef.action === 'activity' ||
+        installationRef.action === 'export') {
+        return run(req, res, deps, () => handleManagedRecords(req, res, url, installationRef, deps));
+    }
+    return run(req, res, deps, () => handleSolutionInstallations(req, res, installationRef, deps));
+}
+function applyPublicIntakeCors(res) {
+    res.setHeader('access-control-allow-origin', '*');
+    res.setHeader('access-control-allow-methods', 'GET, POST, OPTIONS');
+    res.setHeader('access-control-allow-headers', 'Content-Type, Idempotency-Key');
+    res.setHeader('access-control-max-age', '600');
+}
+function run(req, res, deps, handle) {
+    deps.applySecurityHeaders(res, deps.tls);
+    if (deps.enforceHttps(req, res, deps.tls))
+        return true;
+    void handle().catch((error) => respondRouteError(deps.logger, res, 'business_information.route.failed', error));
+    return true;
+}
+//# sourceMappingURL=business-information-dispatch.js.map

package/node_modules/@noodle-borg/service/dist/routes/business-information-paths.js

@@ -0,0 +1,92 @@
+function decoded(match, index) {
+    const raw = match[index];
+    if (raw === undefined)
+        return undefined;
+    try {
+        const value = decodeURIComponent(raw);
+        return value.length > 0 && value.length <= 128 ? value : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+export function parseSolutionInstallationPath(pathname) {
+    let match = /^\/v1\/orgs\/([^/]+)\/solution-installations$/.exec(pathname);
+    if (match !== null) {
+        const org = decoded(match, 1);
+        return org === undefined ? undefined : { org };
+    }
+    match = /^\/v1\/orgs\/([^/]+)\/solution-installations\/([^/]+)$/.exec(pathname);
+    if (match !== null) {
+        const org = decoded(match, 1);
+        const installationId = decoded(match, 2);
+        return org === undefined || installationId === undefined ? undefined : { org, installationId };
+    }
+    match = /^\/v1\/orgs\/([^/]+)\/solution-installations\/([^/]+)\/grants$/.exec(pathname);
+    if (match !== null) {
+        const org = decoded(match, 1);
+        const installationId = decoded(match, 2);
+        return org === undefined || installationId === undefined
+            ? undefined
+            : { org, installationId, action: 'grants' };
+    }
+    match = /^\/v1\/orgs\/([^/]+)\/solution-installations\/([^/]+)\/grants\/([^/]+)$/.exec(pathname);
+    if (match !== null) {
+        const org = decoded(match, 1);
+        const installationId = decoded(match, 2);
+        const subject = decoded(match, 3);
+        return org === undefined || installationId === undefined || subject === undefined
+            ? undefined
+            : { org, installationId, subject, action: 'grants' };
+    }
+    match =
+        /^\/v1\/orgs\/([^/]+)\/solution-installations\/([^/]+)\/collections\/([^/]+)\/records(?:\/(export))?$/.exec(pathname);
+    if (match !== null) {
+        const org = decoded(match, 1);
+        const installationId = decoded(match, 2);
+        const collection = decoded(match, 3);
+        return org === undefined || installationId === undefined || collection === undefined
+            ? undefined
+            : {
+                org,
+                installationId,
+                collection,
+                action: match[4] === 'export' ? 'export' : 'records',
+            };
+    }
+    match =
+        /^\/v1\/orgs\/([^/]+)\/solution-installations\/([^/]+)\/collections\/([^/]+)\/records\/([^/]+)(?:\/(activity))?$/.exec(pathname);
+    if (match !== null) {
+        const org = decoded(match, 1);
+        const installationId = decoded(match, 2);
+        const collection = decoded(match, 3);
+        const recordId = decoded(match, 4);
+        return org === undefined ||
+            installationId === undefined ||
+            collection === undefined ||
+            recordId === undefined
+            ? undefined
+            : {
+                org,
+                installationId,
+                collection,
+                recordId,
+                action: match[5] === 'activity' ? 'activity' : 'records',
+            };
+    }
+    return undefined;
+}
+export function parsePublicSolutionIntakePath(pathname) {
+    let match = /^\/v1\/solution-intake\/([^/]+)$/.exec(pathname);
+    if (match !== null) {
+        const publicId = decoded(match, 1);
+        return publicId === undefined ? undefined : { publicId };
+    }
+    match = /^\/v1\/solution-intake\/([^/]+)\/([^/]+)\/records$/.exec(pathname);
+    if (match === null)
+        return undefined;
+    const publicId = decoded(match, 1);
+    const collection = decoded(match, 2);
+    return publicId === undefined || collection === undefined ? undefined : { publicId, collection };
+}
+//# sourceMappingURL=business-information-paths.js.map

package/node_modules/@noodle-borg/service/dist/routes/business-information-wire.js

@@ -0,0 +1,117 @@
+export function profileToWire(profile) {
+    const collection = profile.collections[0];
+    if (collection === undefined)
+        throw new Error(`solution profile "${profile.key}" has no collection`);
+    return {
+        id: profile.key,
+        title: profile.label,
+        description: `Receive and operate ${collection.labels.plural.toLowerCase()}.`,
+        collection: collectionToWire(collection),
+    };
+}
+export function collectionToWire(collection) {
+    return {
+        key: collection.key,
+        title: collection.labels.plural,
+        singularTitle: collection.labels.singular,
+        schemaVersion: collection.schemaVersion,
+        schemaDigest: collection.schemaDigest.replace(/^sha256:/, ''),
+        recordSchema: { ...collection.schema },
+        summaryFields: collection.schema.required.slice(0, 6),
+    };
+}
+export function installationToWire(installation, profile, currentRole) {
+    const collection = profile.collections.find((candidate) => installation.managedCollections.includes(candidate.key));
+    if (collection === undefined)
+        throw new Error('solution installation has no active collection');
+    return {
+        id: installation.scope.installationId,
+        organizationId: installation.scope.org,
+        profileId: installation.profileKey,
+        appSlug: installation.scope.app,
+        environment: installation.scope.env,
+        retentionDays: installation.retentionDays,
+        publicId: installation.publicId,
+        active: true,
+        currentRole,
+        revision: installation.revision,
+        collection: collectionToWire(collection),
+        createdAt: installation.createdAt,
+        updatedAt: installation.updatedAt,
+        createdBySubject: installation.createdBySubject,
+    };
+}
+export function grantToWire(grant) {
+    if (grant.email === undefined)
+        throw new Error('business grant has no email');
+    return {
+        installationId: grant.scope.installationId,
+        subject: grant.subject,
+        email: grant.email,
+        role: grant.role,
+        revision: grant.revision,
+        createdAt: grant.createdAt,
+        createdBySubject: grant.createdBySubject,
+        ...(grant.revokedAt === undefined ? {} : { revokedAt: grant.revokedAt }),
+    };
+}
+export function recordToWire(record) {
+    if (record.deletedAt !== undefined || record.content === undefined) {
+        if (record.deletedAt === undefined || record.deletionReason === undefined) {
+            throw new Error('managed record tombstone is incomplete');
+        }
+        return {
+            id: record.id,
+            installationId: record.scope.installationId,
+            collection: record.collectionKey,
+            status: record.status,
+            revision: record.revision,
+            deletedAt: record.deletedAt,
+            deletionReason: record.deletionReason,
+        };
+    }
+    return {
+        id: record.id,
+        installationId: record.scope.installationId,
+        collection: record.collectionKey,
+        schemaVersion: record.schemaVersion,
+        schemaDigest: record.schemaDigest.replace(/^sha256:/, ''),
+        payload: record.content.payload,
+        status: record.status,
+        ...(record.assigneeSubject === undefined ? {} : { assigneeSubject: record.assigneeSubject }),
+        revision: record.revision,
+        origin: {
+            surface: record.origin.kind === 'embedded'
+                ? 'public'
+                : record.origin.kind === 'import'
+                    ? 'api'
+                    : record.origin.kind,
+            ...(record.createdBySubject === 'anonymous' ? {} : { subject: record.createdBySubject }),
+        },
+        createdAt: record.createdAt,
+        updatedAt: record.updatedAt,
+        retentionExpiresAt: record.retentionExpiresAt,
+    };
+}
+const ACTIVITY_OPERATION = {
+    created: 'create',
+    updated: 'update',
+    assigned: 'assign',
+    status_changed: 'set-status',
+    note_added: 'add-note',
+    deleted: 'delete',
+    retention_expired: 'delete',
+};
+export function activityToWire(activity) {
+    const note = activity.kind === 'note_added' ? activity.content?.notes.at(-1)?.text : undefined;
+    return {
+        id: `${activity.recordId}:${activity.revision}`,
+        recordId: activity.recordId,
+        revision: activity.revision,
+        operation: ACTIVITY_OPERATION[activity.kind],
+        actorSubject: activity.actorSubject,
+        createdAt: activity.occurredAt,
+        ...(note === undefined ? {} : { note }),
+    };
+}
+//# sourceMappingURL=business-information-wire.js.map