@owox/backend 0.26.0 → 0.27.0-next-20260528140925

package/dist/src/data-marts/controllers/project-member-api-keys.controller.d.ts

@@ -0,0 +1,19 @@
+import { AuthorizationContext } from '../../idp';
+import { CreateProjectMemberApiKeyRequestDto, CreateProjectMemberApiKeyResponseDto, ProjectMemberApiKeyResponseDto, UpdateProjectMemberApiKeyRequestDto } from '../dto/presentation/project-member-api-key-api.dto';
+import { ListProjectMemberApiKeysService } from '../use-cases/project-member-api-keys/list-project-member-api-keys.service';
+import { CreateProjectMemberApiKeyService } from '../use-cases/project-member-api-keys/create-project-member-api-key.service';
+import { UpdateProjectMemberApiKeyService } from '../use-cases/project-member-api-keys/update-project-member-api-key.service';
+import { RevokeProjectMemberApiKeyService } from '../use-cases/project-member-api-keys/revoke-project-member-api-key.service';
+import { ProjectMemberApiKeysMapper } from '../mappers/project-member-api-keys.mapper';
+export declare class ProjectMemberApiKeysController {
+    private readonly listKeys;
+    private readonly createKey;
+    private readonly updateKey;
+    private readonly revokeKey;
+    private readonly mapper;
+    constructor(listKeys: ListProjectMemberApiKeysService, createKey: CreateProjectMemberApiKeyService, updateKey: UpdateProjectMemberApiKeyService, revokeKey: RevokeProjectMemberApiKeyService, mapper: ProjectMemberApiKeysMapper);
+    list(context: AuthorizationContext, includeRevoked?: string): Promise<ProjectMemberApiKeyResponseDto[]>;
+    create(context: AuthorizationContext, dto: CreateProjectMemberApiKeyRequestDto): Promise<CreateProjectMemberApiKeyResponseDto>;
+    update(context: AuthorizationContext, apiKeyId: string, dto: UpdateProjectMemberApiKeyRequestDto): Promise<ProjectMemberApiKeyResponseDto>;
+    revoke(context: AuthorizationContext, apiKeyId: string): Promise<void>;
+}

package/dist/src/data-marts/controllers/project-member-api-keys.controller.js

@@ -0,0 +1,115 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ProjectMemberApiKeysController = void 0;
+const common_1 = require("@nestjs/common");
+const swagger_1 = require("@nestjs/swagger");
+const idp_1 = require("../../idp");
+const project_member_api_key_api_dto_1 = require("../dto/presentation/project-member-api-key-api.dto");
+const list_project_member_api_keys_service_1 = require("../use-cases/project-member-api-keys/list-project-member-api-keys.service");
+const create_project_member_api_key_service_1 = require("../use-cases/project-member-api-keys/create-project-member-api-key.service");
+const update_project_member_api_key_service_1 = require("../use-cases/project-member-api-keys/update-project-member-api-key.service");
+const revoke_project_member_api_key_service_1 = require("../use-cases/project-member-api-keys/revoke-project-member-api-key.service");
+const project_member_api_keys_mapper_1 = require("../mappers/project-member-api-keys.mapper");
+const project_member_api_keys_api_1 = require("./spec/project-member-api-keys.api");
+let ProjectMemberApiKeysController = class ProjectMemberApiKeysController {
+    listKeys;
+    createKey;
+    updateKey;
+    revokeKey;
+    mapper;
+    constructor(listKeys, createKey, updateKey, revokeKey, mapper) {
+        this.listKeys = listKeys;
+        this.createKey = createKey;
+        this.updateKey = updateKey;
+        this.revokeKey = revokeKey;
+        this.mapper = mapper;
+    }
+    async list(context, includeRevoked) {
+        const command = this.mapper.toListCommand(context, includeRevoked === 'true');
+        const keys = await this.listKeys.run(command);
+        return keys.map(k => this.mapper.toApiResponse(k));
+    }
+    async create(context, dto) {
+        const command = this.mapper.toCreateCommand(context, dto);
+        const result = await this.createKey.run(command);
+        return this.mapper.toCreateApiResponse({
+            ...result.apiKey,
+            apiKeySecret: result.apiKeySecret,
+        });
+    }
+    async update(context, apiKeyId, dto) {
+        const command = this.mapper.toUpdateCommand(context, apiKeyId, dto);
+        const updated = await this.updateKey.run(command);
+        return this.mapper.toApiResponse(updated);
+    }
+    async revoke(context, apiKeyId) {
+        const command = this.mapper.toRevokeCommand(context, apiKeyId);
+        return this.revokeKey.run(command);
+    }
+};
+exports.ProjectMemberApiKeysController = ProjectMemberApiKeysController;
+__decorate([
+    (0, idp_1.Auth)(idp_1.Role.viewer(idp_1.Strategy.PARSE)),
+    (0, project_member_api_keys_api_1.ListProjectMemberApiKeysSpec)(),
+    (0, common_1.Get)(),
+    __param(0, (0, idp_1.AuthContext)()),
+    __param(1, (0, common_1.Query)('includeRevoked')),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, String]),
+    __metadata("design:returntype", Promise)
+], ProjectMemberApiKeysController.prototype, "list", null);
+__decorate([
+    (0, idp_1.Auth)(idp_1.Role.viewer(idp_1.Strategy.INTROSPECT)),
+    (0, project_member_api_keys_api_1.CreateProjectMemberApiKeySpec)(),
+    (0, common_1.Post)(),
+    (0, common_1.HttpCode)(201),
+    __param(0, (0, idp_1.AuthContext)()),
+    __param(1, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, project_member_api_key_api_dto_1.CreateProjectMemberApiKeyRequestDto]),
+    __metadata("design:returntype", Promise)
+], ProjectMemberApiKeysController.prototype, "create", null);
+__decorate([
+    (0, idp_1.Auth)(idp_1.Role.viewer(idp_1.Strategy.INTROSPECT)),
+    (0, project_member_api_keys_api_1.UpdateProjectMemberApiKeySpec)(),
+    (0, common_1.Patch)(':apiKeyId'),
+    __param(0, (0, idp_1.AuthContext)()),
+    __param(1, (0, common_1.Param)('apiKeyId')),
+    __param(2, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, String, project_member_api_key_api_dto_1.UpdateProjectMemberApiKeyRequestDto]),
+    __metadata("design:returntype", Promise)
+], ProjectMemberApiKeysController.prototype, "update", null);
+__decorate([
+    (0, idp_1.Auth)(idp_1.Role.viewer(idp_1.Strategy.INTROSPECT)),
+    (0, project_member_api_keys_api_1.RevokeProjectMemberApiKeySpec)(),
+    (0, common_1.Delete)(':apiKeyId'),
+    (0, common_1.HttpCode)(204),
+    __param(0, (0, idp_1.AuthContext)()),
+    __param(1, (0, common_1.Param)('apiKeyId')),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, String]),
+    __metadata("design:returntype", Promise)
+], ProjectMemberApiKeysController.prototype, "revoke", null);
+exports.ProjectMemberApiKeysController = ProjectMemberApiKeysController = __decorate([
+    (0, common_1.Controller)('project-member-api-keys'),
+    (0, swagger_1.ApiTags)('Project Member API Keys'),
+    __metadata("design:paramtypes", [list_project_member_api_keys_service_1.ListProjectMemberApiKeysService,
+        create_project_member_api_key_service_1.CreateProjectMemberApiKeyService,
+        update_project_member_api_key_service_1.UpdateProjectMemberApiKeyService,
+        revoke_project_member_api_key_service_1.RevokeProjectMemberApiKeyService,
+        project_member_api_keys_mapper_1.ProjectMemberApiKeysMapper])
+], ProjectMemberApiKeysController);
+//# sourceMappingURL=project-member-api-keys.controller.js.map

package/dist/src/data-marts/controllers/spec/project-member-api-keys.api.d.ts

@@ -0,0 +1,4 @@
+export declare function ListProjectMemberApiKeysSpec(): <TFunction extends Function, Y>(target: TFunction | object, propertyKey?: string | symbol, descriptor?: TypedPropertyDescriptor<Y>) => void;
+export declare function CreateProjectMemberApiKeySpec(): <TFunction extends Function, Y>(target: TFunction | object, propertyKey?: string | symbol, descriptor?: TypedPropertyDescriptor<Y>) => void;
+export declare function UpdateProjectMemberApiKeySpec(): <TFunction extends Function, Y>(target: TFunction | object, propertyKey?: string | symbol, descriptor?: TypedPropertyDescriptor<Y>) => void;
+export declare function RevokeProjectMemberApiKeySpec(): <TFunction extends Function, Y>(target: TFunction | object, propertyKey?: string | symbol, descriptor?: TypedPropertyDescriptor<Y>) => void;

package/dist/src/data-marts/controllers/spec/project-member-api-keys.api.js

@@ -0,0 +1,36 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ListProjectMemberApiKeysSpec = ListProjectMemberApiKeysSpec;
+exports.CreateProjectMemberApiKeySpec = CreateProjectMemberApiKeySpec;
+exports.UpdateProjectMemberApiKeySpec = UpdateProjectMemberApiKeySpec;
+exports.RevokeProjectMemberApiKeySpec = RevokeProjectMemberApiKeySpec;
+const common_1 = require("@nestjs/common");
+const swagger_1 = require("@nestjs/swagger");
+const project_member_api_key_api_dto_1 = require("../../dto/presentation/project-member-api-key-api.dto");
+function ListProjectMemberApiKeysSpec() {
+    return (0, common_1.applyDecorators)((0, swagger_1.ApiOperation)({
+        summary: 'List API keys for the current project member',
+    }), (0, swagger_1.ApiQuery)({
+        name: 'includeRevoked',
+        required: false,
+        type: Boolean,
+        description: 'Include revoked keys in the response',
+    }), (0, swagger_1.ApiOkResponse)({ type: [project_member_api_key_api_dto_1.ProjectMemberApiKeyResponseDto] }));
+}
+function CreateProjectMemberApiKeySpec() {
+    return (0, common_1.applyDecorators)((0, swagger_1.ApiOperation)({
+        summary: 'Create a new API key for the current project member',
+    }), (0, swagger_1.ApiBody)({ type: project_member_api_key_api_dto_1.CreateProjectMemberApiKeyRequestDto }), (0, swagger_1.ApiCreatedResponse)({ type: project_member_api_key_api_dto_1.CreateProjectMemberApiKeyResponseDto }), (0, swagger_1.ApiResponse)({ status: 400, description: 'Invalid request body' }));
+}
+function UpdateProjectMemberApiKeySpec() {
+    return (0, common_1.applyDecorators)((0, swagger_1.ApiOperation)({
+        summary: 'Update an existing API key name',
+    }), (0, swagger_1.ApiParam)({ name: 'apiKeyId', description: 'API key identifier' }), (0, swagger_1.ApiBody)({ type: project_member_api_key_api_dto_1.UpdateProjectMemberApiKeyRequestDto }), (0, swagger_1.ApiOkResponse)({ type: project_member_api_key_api_dto_1.ProjectMemberApiKeyResponseDto }), (0, swagger_1.ApiResponse)({ status: 404, description: 'API key not found' }));
+}
+function RevokeProjectMemberApiKeySpec() {
+    return (0, common_1.applyDecorators)((0, swagger_1.ApiOperation)({
+        summary: 'Revoke an API key',
+        description: 'Permanently revokes the API key. Any integrations using this key will stop working immediately.',
+    }), (0, swagger_1.ApiParam)({ name: 'apiKeyId', description: 'API key identifier' }), (0, swagger_1.ApiNoContentResponse)({ description: 'API key revoked' }), (0, swagger_1.ApiResponse)({ status: 404, description: 'API key not found' }));
+}
+//# sourceMappingURL=project-member-api-keys.api.js.map

package/dist/src/data-marts/data-marts.module.js

@@ -360,6 +360,13 @@ const list_membership_requests_service_1 = require("./use-cases/project-members/
 const approve_membership_request_service_1 = require("./use-cases/project-members/approve-membership-request.service");
 const decline_membership_request_service_1 = require("./use-cases/project-members/decline-membership-request.service");
 const set_context_members_service_1 = require("./use-cases/contexts/set-context-members.service");
+const project_member_api_keys_controller_1 = require("./controllers/project-member-api-keys.controller");
+const list_project_member_api_keys_service_1 = require("./use-cases/project-member-api-keys/list-project-member-api-keys.service");
+const create_project_member_api_key_service_1 = require("./use-cases/project-member-api-keys/create-project-member-api-key.service");
+const update_project_member_api_key_service_1 = require("./use-cases/project-member-api-keys/update-project-member-api-key.service");
+const revoke_project_member_api_key_service_1 = require("./use-cases/project-member-api-keys/revoke-project-member-api-key.service");
+const project_member_api_keys_mapper_1 = require("./mappers/project-member-api-keys.mapper");
+const project_member_api_keys_module_1 = require("../project-member-api-keys/project-member-api-keys.module");
 let DataMartsModule = class DataMartsModule {
     configure(consumer) {
         consumer
@@ -375,6 +382,7 @@ exports.DataMartsModule = DataMartsModule;
 exports.DataMartsModule = DataMartsModule = __decorate([
     (0, common_1.Module)({
         imports: [
+            project_member_api_keys_module_1.ProjectMemberApiKeysModule,
             typeorm_1.TypeOrmModule.forFeature([
                 data_mart_entity_1.DataMart,
                 data_mart_business_owner_entity_1.DataMartBusinessOwner,
@@ -452,6 +460,7 @@ exports.DataMartsModule = DataMartsModule = __decorate([
             data_storage_relationship_controller_1.DataStorageRelationshipController,
             context_controller_1.ContextController,
             project_members_controller_1.ProjectMembersController,
+            project_member_api_keys_controller_1.ProjectMemberApiKeysController,
         ],
         providers: [
             ...data_storage_providers_1.dataStorageResolverProviders,
@@ -732,6 +741,11 @@ exports.DataMartsModule = DataMartsModule = __decorate([
             approve_membership_request_service_1.ApproveMembershipRequestService,
             decline_membership_request_service_1.DeclineMembershipRequestService,
             set_context_members_service_1.SetContextMembersService,
+            list_project_member_api_keys_service_1.ListProjectMemberApiKeysService,
+            create_project_member_api_key_service_1.CreateProjectMemberApiKeyService,
+            update_project_member_api_key_service_1.UpdateProjectMemberApiKeyService,
+            revoke_project_member_api_key_service_1.RevokeProjectMemberApiKeyService,
+            project_member_api_keys_mapper_1.ProjectMemberApiKeysMapper,
         ],
     })
 ], DataMartsModule);

package/dist/src/data-marts/dto/domain/create-project-member-api-key.command.d.ts

@@ -0,0 +1,9 @@
+import type { Role } from '@owox/idp-protocol';
+export declare class CreateProjectMemberApiKeyCommand {
+    readonly projectId: string;
+    readonly userId: string;
+    readonly name: string;
+    readonly role: Role | null;
+    readonly expiresAt: string | undefined;
+    constructor(projectId: string, userId: string, name: string, role: Role | null, expiresAt: string | undefined);
+}

package/dist/src/data-marts/dto/domain/create-project-member-api-key.command.js

@@ -0,0 +1,19 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CreateProjectMemberApiKeyCommand = void 0;
+class CreateProjectMemberApiKeyCommand {
+    projectId;
+    userId;
+    name;
+    role;
+    expiresAt;
+    constructor(projectId, userId, name, role, expiresAt) {
+        this.projectId = projectId;
+        this.userId = userId;
+        this.name = name;
+        this.role = role;
+        this.expiresAt = expiresAt;
+    }
+}
+exports.CreateProjectMemberApiKeyCommand = CreateProjectMemberApiKeyCommand;
+//# sourceMappingURL=create-project-member-api-key.command.js.map

package/dist/src/data-marts/dto/domain/list-project-member-api-keys.command.d.ts

@@ -0,0 +1,6 @@
+export declare class ListProjectMemberApiKeysCommand {
+    readonly projectId: string;
+    readonly userId: string;
+    readonly includeRevoked: boolean;
+    constructor(projectId: string, userId: string, includeRevoked: boolean);
+}

package/dist/src/data-marts/dto/domain/list-project-member-api-keys.command.js

@@ -0,0 +1,15 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ListProjectMemberApiKeysCommand = void 0;
+class ListProjectMemberApiKeysCommand {
+    projectId;
+    userId;
+    includeRevoked;
+    constructor(projectId, userId, includeRevoked) {
+        this.projectId = projectId;
+        this.userId = userId;
+        this.includeRevoked = includeRevoked;
+    }
+}
+exports.ListProjectMemberApiKeysCommand = ListProjectMemberApiKeysCommand;
+//# sourceMappingURL=list-project-member-api-keys.command.js.map

package/dist/src/data-marts/dto/domain/revoke-project-member-api-key.command.d.ts

@@ -0,0 +1,6 @@
+export declare class RevokeProjectMemberApiKeyCommand {
+    readonly projectId: string;
+    readonly userId: string;
+    readonly apiKeyId: string;
+    constructor(projectId: string, userId: string, apiKeyId: string);
+}

package/dist/src/data-marts/dto/domain/revoke-project-member-api-key.command.js

@@ -0,0 +1,15 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RevokeProjectMemberApiKeyCommand = void 0;
+class RevokeProjectMemberApiKeyCommand {
+    projectId;
+    userId;
+    apiKeyId;
+    constructor(projectId, userId, apiKeyId) {
+        this.projectId = projectId;
+        this.userId = userId;
+        this.apiKeyId = apiKeyId;
+    }
+}
+exports.RevokeProjectMemberApiKeyCommand = RevokeProjectMemberApiKeyCommand;
+//# sourceMappingURL=revoke-project-member-api-key.command.js.map

package/dist/src/data-marts/dto/domain/update-project-member-api-key.command.d.ts

@@ -0,0 +1,7 @@
+export declare class UpdateProjectMemberApiKeyCommand {
+    readonly projectId: string;
+    readonly userId: string;
+    readonly apiKeyId: string;
+    readonly name: string;
+    constructor(projectId: string, userId: string, apiKeyId: string, name: string);
+}

package/dist/src/data-marts/dto/domain/update-project-member-api-key.command.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UpdateProjectMemberApiKeyCommand = void 0;
+class UpdateProjectMemberApiKeyCommand {
+    projectId;
+    userId;
+    apiKeyId;
+    name;
+    constructor(projectId, userId, apiKeyId, name) {
+        this.projectId = projectId;
+        this.userId = userId;
+        this.apiKeyId = apiKeyId;
+        this.name = name;
+    }
+}
+exports.UpdateProjectMemberApiKeyCommand = UpdateProjectMemberApiKeyCommand;
+//# sourceMappingURL=update-project-member-api-key.command.js.map

package/dist/src/data-marts/dto/presentation/project-member-api-key-api.dto.d.ts

@@ -0,0 +1,17 @@
+export declare class CreateProjectMemberApiKeyRequestDto {
+    name: string;
+    expiresAt?: string;
+}
+export declare class UpdateProjectMemberApiKeyRequestDto {
+    name: string;
+}
+export declare class ProjectMemberApiKeyResponseDto {
+    apiKeyId: string;
+    name: string;
+    expiresAt: string | null;
+    createdAt: string;
+    lastAuthenticatedAt: string | null;
+}
+export declare class CreateProjectMemberApiKeyResponseDto extends ProjectMemberApiKeyResponseDto {
+    apiKeySecret: string;
+}

package/dist/src/data-marts/dto/presentation/project-member-api-key-api.dto.js

@@ -0,0 +1,80 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CreateProjectMemberApiKeyResponseDto = exports.ProjectMemberApiKeyResponseDto = exports.UpdateProjectMemberApiKeyRequestDto = exports.CreateProjectMemberApiKeyRequestDto = void 0;
+const swagger_1 = require("@nestjs/swagger");
+const class_validator_1 = require("class-validator");
+class CreateProjectMemberApiKeyRequestDto {
+    name;
+    expiresAt;
+}
+exports.CreateProjectMemberApiKeyRequestDto = CreateProjectMemberApiKeyRequestDto;
+__decorate([
+    (0, swagger_1.ApiProperty)({ description: 'User-facing name for the API key' }),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.IsNotEmpty)(),
+    (0, class_validator_1.MaxLength)(100),
+    __metadata("design:type", String)
+], CreateProjectMemberApiKeyRequestDto.prototype, "name", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({ description: 'Optional expiration date (ISO 8601)' }),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsISO8601)(),
+    __metadata("design:type", String)
+], CreateProjectMemberApiKeyRequestDto.prototype, "expiresAt", void 0);
+class UpdateProjectMemberApiKeyRequestDto {
+    name;
+}
+exports.UpdateProjectMemberApiKeyRequestDto = UpdateProjectMemberApiKeyRequestDto;
+__decorate([
+    (0, swagger_1.ApiProperty)({ description: 'New name for the API key' }),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.IsNotEmpty)(),
+    (0, class_validator_1.MaxLength)(100),
+    __metadata("design:type", String)
+], UpdateProjectMemberApiKeyRequestDto.prototype, "name", void 0);
+class ProjectMemberApiKeyResponseDto {
+    apiKeyId;
+    name;
+    expiresAt;
+    createdAt;
+    lastAuthenticatedAt;
+}
+exports.ProjectMemberApiKeyResponseDto = ProjectMemberApiKeyResponseDto;
+__decorate([
+    (0, swagger_1.ApiProperty)(),
+    __metadata("design:type", String)
+], ProjectMemberApiKeyResponseDto.prototype, "apiKeyId", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)(),
+    __metadata("design:type", String)
+], ProjectMemberApiKeyResponseDto.prototype, "name", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({ nullable: true }),
+    __metadata("design:type", Object)
+], ProjectMemberApiKeyResponseDto.prototype, "expiresAt", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)(),
+    __metadata("design:type", String)
+], ProjectMemberApiKeyResponseDto.prototype, "createdAt", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({ nullable: true }),
+    __metadata("design:type", Object)
+], ProjectMemberApiKeyResponseDto.prototype, "lastAuthenticatedAt", void 0);
+class CreateProjectMemberApiKeyResponseDto extends ProjectMemberApiKeyResponseDto {
+    apiKeySecret;
+}
+exports.CreateProjectMemberApiKeyResponseDto = CreateProjectMemberApiKeyResponseDto;
+__decorate([
+    (0, swagger_1.ApiProperty)({ description: 'Shown only once at creation time' }),
+    __metadata("design:type", String)
+], CreateProjectMemberApiKeyResponseDto.prototype, "apiKeySecret", void 0);
+//# sourceMappingURL=project-member-api-key-api.dto.js.map

package/dist/src/data-marts/mappers/project-member-api-keys.mapper.d.ts

@@ -0,0 +1,18 @@
+import { CreateProjectMemberApiKeyResponseDto, ProjectMemberApiKeyResponseDto } from '../dto/presentation/project-member-api-key-api.dto';
+import type { CreateProjectMemberApiKeyRequestDto, UpdateProjectMemberApiKeyRequestDto } from '../dto/presentation/project-member-api-key-api.dto';
+import type { ProjectMemberApiKeyMetadata } from '../../project-member-api-keys/dto/domain/project-member-api-key-metadata.dto';
+import type { AuthorizationContext } from '../../idp';
+import { CreateProjectMemberApiKeyCommand } from '../dto/domain/create-project-member-api-key.command';
+import { ListProjectMemberApiKeysCommand } from '../dto/domain/list-project-member-api-keys.command';
+import { UpdateProjectMemberApiKeyCommand } from '../dto/domain/update-project-member-api-key.command';
+import { RevokeProjectMemberApiKeyCommand } from '../dto/domain/revoke-project-member-api-key.command';
+export declare class ProjectMemberApiKeysMapper {
+    toListCommand(context: AuthorizationContext, includeRevoked: boolean): ListProjectMemberApiKeysCommand;
+    toCreateCommand(context: AuthorizationContext, dto: CreateProjectMemberApiKeyRequestDto): CreateProjectMemberApiKeyCommand;
+    toUpdateCommand(context: AuthorizationContext, apiKeyId: string, dto: UpdateProjectMemberApiKeyRequestDto): UpdateProjectMemberApiKeyCommand;
+    toRevokeCommand(context: AuthorizationContext, apiKeyId: string): RevokeProjectMemberApiKeyCommand;
+    toApiResponse(data: ProjectMemberApiKeyMetadata): ProjectMemberApiKeyResponseDto;
+    toCreateApiResponse(data: ProjectMemberApiKeyMetadata & {
+        apiKeySecret: string;
+    }): CreateProjectMemberApiKeyResponseDto;
+}

package/dist/src/data-marts/mappers/project-member-api-keys.mapper.js

@@ -0,0 +1,49 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ProjectMemberApiKeysMapper = void 0;
+const common_1 = require("@nestjs/common");
+const project_member_api_key_api_dto_1 = require("../dto/presentation/project-member-api-key-api.dto");
+const create_project_member_api_key_command_1 = require("../dto/domain/create-project-member-api-key.command");
+const list_project_member_api_keys_command_1 = require("../dto/domain/list-project-member-api-keys.command");
+const update_project_member_api_key_command_1 = require("../dto/domain/update-project-member-api-key.command");
+const revoke_project_member_api_key_command_1 = require("../dto/domain/revoke-project-member-api-key.command");
+let ProjectMemberApiKeysMapper = class ProjectMemberApiKeysMapper {
+    toListCommand(context, includeRevoked) {
+        return new list_project_member_api_keys_command_1.ListProjectMemberApiKeysCommand(context.projectId, context.userId, includeRevoked);
+    }
+    toCreateCommand(context, dto) {
+        return new create_project_member_api_key_command_1.CreateProjectMemberApiKeyCommand(context.projectId, context.userId, dto.name, null, dto.expiresAt);
+    }
+    toUpdateCommand(context, apiKeyId, dto) {
+        return new update_project_member_api_key_command_1.UpdateProjectMemberApiKeyCommand(context.projectId, context.userId, apiKeyId, dto.name);
+    }
+    toRevokeCommand(context, apiKeyId) {
+        return new revoke_project_member_api_key_command_1.RevokeProjectMemberApiKeyCommand(context.projectId, context.userId, apiKeyId);
+    }
+    toApiResponse(data) {
+        return {
+            apiKeyId: data.apiKeyId,
+            name: data.name,
+            expiresAt: data.expiresAt?.toISOString() ?? null,
+            createdAt: data.createdAt.toISOString(),
+            lastAuthenticatedAt: data.lastAuthenticatedAt?.toISOString() ?? null,
+        };
+    }
+    toCreateApiResponse(data) {
+        const response = new project_member_api_key_api_dto_1.CreateProjectMemberApiKeyResponseDto();
+        Object.assign(response, this.toApiResponse(data));
+        response.apiKeySecret = data.apiKeySecret;
+        return response;
+    }
+};
+exports.ProjectMemberApiKeysMapper = ProjectMemberApiKeysMapper;
+exports.ProjectMemberApiKeysMapper = ProjectMemberApiKeysMapper = __decorate([
+    (0, common_1.Injectable)()
+], ProjectMemberApiKeysMapper);
+//# sourceMappingURL=project-member-api-keys.mapper.js.map

package/dist/src/data-marts/use-cases/project-member-api-keys/create-project-member-api-key.service.d.ts

@@ -0,0 +1,7 @@
+import type { CreateProjectMemberApiKeyCommand } from '../../dto/domain/create-project-member-api-key.command';
+import { ProjectMemberApiKeyService, type CreateProjectMemberApiKeyResult } from '../../../project-member-api-keys/services/project-member-api-key.service';
+export declare class CreateProjectMemberApiKeyService {
+    private readonly apiKeyService;
+    constructor(apiKeyService: ProjectMemberApiKeyService);
+    run(command: CreateProjectMemberApiKeyCommand): Promise<CreateProjectMemberApiKeyResult>;
+}

package/dist/src/data-marts/use-cases/project-member-api-keys/create-project-member-api-key.service.js

@@ -0,0 +1,30 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CreateProjectMemberApiKeyService = void 0;
+const common_1 = require("@nestjs/common");
+const project_member_api_key_service_1 = require("../../../project-member-api-keys/services/project-member-api-key.service");
+let CreateProjectMemberApiKeyService = class CreateProjectMemberApiKeyService {
+    apiKeyService;
+    constructor(apiKeyService) {
+        this.apiKeyService = apiKeyService;
+    }
+    async run(command) {
+        const expiresAt = command.expiresAt ? new Date(command.expiresAt) : null;
+        return this.apiKeyService.createForMember(command.projectId, command.userId, command.name, command.role, false, expiresAt);
+    }
+};
+exports.CreateProjectMemberApiKeyService = CreateProjectMemberApiKeyService;
+exports.CreateProjectMemberApiKeyService = CreateProjectMemberApiKeyService = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [project_member_api_key_service_1.ProjectMemberApiKeyService])
+], CreateProjectMemberApiKeyService);
+//# sourceMappingURL=create-project-member-api-key.service.js.map

package/dist/src/data-marts/use-cases/project-member-api-keys/list-project-member-api-keys.service.d.ts

@@ -0,0 +1,8 @@
+import type { ListProjectMemberApiKeysCommand } from '../../dto/domain/list-project-member-api-keys.command';
+import type { ProjectMemberApiKeyMetadata } from '../../../project-member-api-keys/dto/domain/project-member-api-key-metadata.dto';
+import { ProjectMemberApiKeyService } from '../../../project-member-api-keys/services/project-member-api-key.service';
+export declare class ListProjectMemberApiKeysService {
+    private readonly apiKeyService;
+    constructor(apiKeyService: ProjectMemberApiKeyService);
+    run(command: ListProjectMemberApiKeysCommand): Promise<ProjectMemberApiKeyMetadata[]>;
+}

package/dist/src/data-marts/use-cases/project-member-api-keys/list-project-member-api-keys.service.js

@@ -0,0 +1,29 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ListProjectMemberApiKeysService = void 0;
+const common_1 = require("@nestjs/common");
+const project_member_api_key_service_1 = require("../../../project-member-api-keys/services/project-member-api-key.service");
+let ListProjectMemberApiKeysService = class ListProjectMemberApiKeysService {
+    apiKeyService;
+    constructor(apiKeyService) {
+        this.apiKeyService = apiKeyService;
+    }
+    async run(command) {
+        return this.apiKeyService.listForMember(command.projectId, command.userId, command.includeRevoked);
+    }
+};
+exports.ListProjectMemberApiKeysService = ListProjectMemberApiKeysService;
+exports.ListProjectMemberApiKeysService = ListProjectMemberApiKeysService = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [project_member_api_key_service_1.ProjectMemberApiKeyService])
+], ListProjectMemberApiKeysService);
+//# sourceMappingURL=list-project-member-api-keys.service.js.map

package/dist/src/data-marts/use-cases/project-member-api-keys/revoke-project-member-api-key.service.d.ts

@@ -0,0 +1,7 @@
+import type { RevokeProjectMemberApiKeyCommand } from '../../dto/domain/revoke-project-member-api-key.command';
+import { ProjectMemberApiKeyService } from '../../../project-member-api-keys/services/project-member-api-key.service';
+export declare class RevokeProjectMemberApiKeyService {
+    private readonly apiKeyService;
+    constructor(apiKeyService: ProjectMemberApiKeyService);
+    run(command: RevokeProjectMemberApiKeyCommand): Promise<void>;
+}

package/dist/src/data-marts/use-cases/project-member-api-keys/revoke-project-member-api-key.service.js

@@ -0,0 +1,32 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RevokeProjectMemberApiKeyService = void 0;
+const common_1 = require("@nestjs/common");
+const project_member_api_key_service_1 = require("../../../project-member-api-keys/services/project-member-api-key.service");
+let RevokeProjectMemberApiKeyService = class RevokeProjectMemberApiKeyService {
+    apiKeyService;
+    constructor(apiKeyService) {
+        this.apiKeyService = apiKeyService;
+    }
+    async run(command) {
+        const revoked = await this.apiKeyService.revoke(command.projectId, command.userId, command.apiKeyId);
+        if (!revoked) {
+            throw new common_1.NotFoundException('API key not found');
+        }
+    }
+};
+exports.RevokeProjectMemberApiKeyService = RevokeProjectMemberApiKeyService;
+exports.RevokeProjectMemberApiKeyService = RevokeProjectMemberApiKeyService = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [project_member_api_key_service_1.ProjectMemberApiKeyService])
+], RevokeProjectMemberApiKeyService);
+//# sourceMappingURL=revoke-project-member-api-key.service.js.map

package/dist/src/data-marts/use-cases/project-member-api-keys/update-project-member-api-key.service.d.ts

@@ -0,0 +1,8 @@
+import type { UpdateProjectMemberApiKeyCommand } from '../../dto/domain/update-project-member-api-key.command';
+import type { ProjectMemberApiKeyMetadata } from '../../../project-member-api-keys/dto/domain/project-member-api-key-metadata.dto';
+import { ProjectMemberApiKeyService } from '../../../project-member-api-keys/services/project-member-api-key.service';
+export declare class UpdateProjectMemberApiKeyService {
+    private readonly apiKeyService;
+    constructor(apiKeyService: ProjectMemberApiKeyService);
+    run(command: UpdateProjectMemberApiKeyCommand): Promise<ProjectMemberApiKeyMetadata>;
+}

package/dist/src/data-marts/use-cases/project-member-api-keys/update-project-member-api-key.service.js

@@ -0,0 +1,33 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UpdateProjectMemberApiKeyService = void 0;
+const common_1 = require("@nestjs/common");
+const project_member_api_key_service_1 = require("../../../project-member-api-keys/services/project-member-api-key.service");
+let UpdateProjectMemberApiKeyService = class UpdateProjectMemberApiKeyService {
+    apiKeyService;
+    constructor(apiKeyService) {
+        this.apiKeyService = apiKeyService;
+    }
+    async run(command) {
+        const updated = await this.apiKeyService.updateName(command.projectId, command.userId, command.apiKeyId, command.name);
+        if (!updated) {
+            throw new common_1.NotFoundException('API key not found');
+        }
+        return updated;
+    }
+};
+exports.UpdateProjectMemberApiKeyService = UpdateProjectMemberApiKeyService;
+exports.UpdateProjectMemberApiKeyService = UpdateProjectMemberApiKeyService = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [project_member_api_key_service_1.ProjectMemberApiKeyService])
+], UpdateProjectMemberApiKeyService);
+//# sourceMappingURL=update-project-member-api-key.service.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@owox/backend",
-  "version": "0.26.0",
+  "version": "0.27.0-next-20260528140925",
   "description": "OWOX Data Marts Backend - Full-stack data orchestration platform",
   "author": "OWOX",
   "license": "ELv2",
@@ -78,9 +78,9 @@
     "@nestjs/schedule": "^6.0.0",
     "@nestjs/swagger": "^11.2.0",
     "@nestjs/typeorm": "^11.0.0",
-    "@owox/connectors": "0.26.0",
-    "@owox/idp-protocol": "0.26.0",
-    "@owox/internal-helpers": "0.26.0",
+    "@owox/connectors": "0.27.0-next-20260528140925",
+    "@owox/idp-protocol": "0.27.0-next-20260528140925",
+    "@owox/internal-helpers": "0.27.0-next-20260528140925",
     "better-sqlite3": "^12.2.0",
     "class-transformer": "^0.5.1",
     "class-validator": "^0.14.2",
@@ -139,7 +139,7 @@
     "ts-node": "^10.9.2",
     "tsconfig-paths": "^4.2.0",
     "typeorm-ts-node-commonjs": "^0.3.20",
-    "@owox/test-utils": "*"
+    "@owox/test-utils": "6.0.0-next-20260528140925"
   },
   "jest": {
     "moduleFileExtensions": [