@opengeni/core 0.21.10 → 0.28.0

package/dist/access/index.d.ts

@@ -2,7 +2,7 @@ import { type Settings } from "@opengeni/config";
 import { type AccountGrant, type AccessContext, type AccessGrant, type Permission } from "@opengeni/contracts";
 import { type Database } from "@opengeni/db";
 import type { Context } from "hono";
-import type { ManagedAuth } from "../managed-auth-type";
+import type { ManagedAuth } from "../managed-auth-type.js";
 export type AccessDeps = {
     db: Database;
     settings: Settings;

package/dist/application/new-session-drafts.d.ts

@@ -1,5 +1,5 @@
 import { type AccessGrant, type NewSessionDraft as NewSessionDraftValue } from "@opengeni/contracts";
-import type { AppDependencies } from "../dependencies";
+import type { AppDependencies } from "../dependencies.js";
 type NewSessionDraftDependencies = Pick<AppDependencies, "settings" | "db" | "objectStorage">;
 /** Read the authenticated actor's server-authoritative pre-session composer state. */
 export declare function getActorNewSessionDraft(deps: Pick<NewSessionDraftDependencies, "settings" | "db">, grant: AccessGrant, workspaceId: string): Promise<NewSessionDraftValue>;

package/dist/application/session-commands.d.ts

@@ -1,8 +1,8 @@
 import type { ComposerDraft, DeleteSessionQueueItemRequest, EditSessionQueueItemRequest, MoveSessionQueueItemRequest, SaveComposerDraftRequest, SessionAuthorizationPort, SessionAuthorizationSurface, SessionControlRequest, SessionControlResponse, SessionQueueMutationResponse, SteerSessionQueueItemRequest, WorkspaceInferenceControlRequest, WorkspaceInferenceControlResponse } from "@opengeni/contracts";
 import { type Database, type SessionCommandReceiptRow } from "@opengeni/db";
 import { type EventBus } from "@opengeni/events";
-import type { SessionWorkflowClient } from "../dependencies";
-import { type ResolvedSessionAuthorization } from "../session-authorization";
+import type { SessionWorkflowClient } from "../dependencies.js";
+import { type ResolvedSessionAuthorization } from "../session-authorization.js";
 export type HumanSessionCommandContext = {
     accountId: string;
     workspaceId: string;

package/dist/billing/limits.d.ts

@@ -1,5 +1,5 @@
 import type { LimitAction, LimitDecision, SessionTurnSource, TurnInitiator, TurnInitiatorContext } from "@opengeni/contracts";
-import type { ApiRouteDeps } from "../dependencies";
+import type { ApiRouteDeps } from "../dependencies.js";
 export type LimitDependencies = Pick<ApiRouteDeps, "db" | "settings">;
 export type LimitCheckInput = {
     accountId: string;

package/dist/canonical-human-identities.d.ts

@@ -0,0 +1,12 @@
+import type { Database } from "@opengeni/db";
+import type { Context } from "hono";
+import type { ManagedAuth } from "./managed-auth-type.js";
+export type CanonicalHumanRequestIdentity = {
+    authUserId: string;
+    authSessionId: string;
+};
+export declare function requireCanonicalHumanRequestIdentity(context: Context, input: {
+    db: Database;
+    managedAuth?: ManagedAuth | null;
+    allowRecovery?: boolean;
+}): Promise<CanonicalHumanRequestIdentity>;

package/dist/canonical-human-identities.js

@@ -0,0 +1,23 @@
+import {
+  getManagedSession
+} from "./chunk-IBOEYG6N.js";
+
+// src/canonical-human-identities.ts
+import { HTTPException } from "hono/http-exception";
+async function requireCanonicalHumanRequestIdentity(context, input) {
+  if (!input.managedAuth) {
+    throw new HTTPException(404, { message: "Canonical human identity is unavailable" });
+  }
+  const session = await getManagedSession(context, input.managedAuth, {
+    db: input.db,
+    ...input.allowRecovery === void 0 ? {} : { allowIdentityRecovery: input.allowRecovery }
+  });
+  if (!session?.user || typeof session.session?.id !== "string") {
+    throw new HTTPException(401, { message: "Managed human authentication required" });
+  }
+  return { authUserId: session.user.id, authSessionId: session.session.id };
+}
+export {
+  requireCanonicalHumanRequestIdentity
+};
+//# sourceMappingURL=canonical-human-identities.js.map

package/dist/canonical-human-identities.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/canonical-human-identities.ts"],"sourcesContent":["import type { Database } from \"@opengeni/db\";\nimport type { Context } from \"hono\";\nimport { HTTPException } from \"hono/http-exception\";\nimport type { ManagedAuth } from \"./managed-auth-type\";\nimport { getManagedSession } from \"./managed-session\";\n\nexport type CanonicalHumanRequestIdentity = {\n  authUserId: string;\n  authSessionId: string;\n};\n\nexport async function requireCanonicalHumanRequestIdentity(\n  context: Context,\n  input: { db: Database; managedAuth?: ManagedAuth | null; allowRecovery?: boolean },\n): Promise<CanonicalHumanRequestIdentity> {\n  if (!input.managedAuth) {\n    throw new HTTPException(404, { message: \"Canonical human identity is unavailable\" });\n  }\n  const session = await getManagedSession(context, input.managedAuth, {\n    db: input.db,\n    ...(input.allowRecovery === undefined ? {} : { allowIdentityRecovery: input.allowRecovery }),\n  });\n  if (!session?.user || typeof session.session?.id !== \"string\") {\n    throw new HTTPException(401, { message: \"Managed human authentication required\" });\n  }\n  return { authUserId: session.user.id, authSessionId: session.session.id };\n}\n"],"mappings":";;;;;AAEA,SAAS,qBAAqB;AAS9B,eAAsB,qCACpB,SACA,OACwC;AACxC,MAAI,CAAC,MAAM,aAAa;AACtB,UAAM,IAAI,cAAc,KAAK,EAAE,SAAS,0CAA0C,CAAC;AAAA,EACrF;AACA,QAAM,UAAU,MAAM,kBAAkB,SAAS,MAAM,aAAa;AAAA,IAClE,IAAI,MAAM;AAAA,IACV,GAAI,MAAM,kBAAkB,SAAY,CAAC,IAAI,EAAE,uBAAuB,MAAM,cAAc;AAAA,EAC5F,CAAC;AACD,MAAI,CAAC,SAAS,QAAQ,OAAO,QAAQ,SAAS,OAAO,UAAU;AAC7D,UAAM,IAAI,cAAc,KAAK,EAAE,SAAS,wCAAwC,CAAC;AAAA,EACnF;AACA,SAAO,EAAE,YAAY,QAAQ,KAAK,IAAI,eAAe,QAAQ,QAAQ,GAAG;AAC1E;","names":[]}