@portaidentity/server 1.7.0

package/dist/applications/service.js

@@ -0,0 +1,388 @@
+/**
+ * Application service — business logic orchestrator.
+ *
+ * Composes the repository, cache, slug utilities, and audit log
+ * to provide the complete application management API. All write
+ * operations follow the pattern:
+ *   1. Validate inputs
+ *   2. Perform DB operation (via repository)
+ *   3. Invalidate + re-cache (via cache)
+ *   4. Write audit log (fire-and-forget)
+ *
+ * Read operations check cache first, fall back to DB on miss.
+ *
+ * Status lifecycle rules (different from organizations):
+ *   - deactivate: active → inactive
+ *   - activate:   inactive → active
+ *   - archive:    active|inactive → archived (permanent, cannot be restored)
+ *
+ * Module management:
+ *   - Modules belong to an application (parent must exist)
+ *   - Module slugs are unique within their parent application
+ *   - Module deactivation sets status to inactive
+ */
+import { insertApplication, findApplicationById, findApplicationBySlug, updateApplication as repoUpdateApp, listApplications as repoListApps, listApplicationsCursor as repoListAppsCursor, slugExists, insertModule, findModuleById, updateModule as repoUpdateModule, listModules as repoListModules, moduleSlugExists, } from './repository.js';
+import { getCachedApplicationById, getCachedApplicationBySlug, cacheApplication, invalidateApplicationCache, } from './cache.js';
+import { generateSlug, validateSlug } from './slugs.js';
+import { writeAuditLog } from '../lib/audit-log.js';
+import { ApplicationNotFoundError, ApplicationValidationError } from './errors.js';
+// ===========================================================================
+// Application CRUD
+// ===========================================================================
+// ---------------------------------------------------------------------------
+// Create
+// ---------------------------------------------------------------------------
+/**
+ * Create a new application.
+ *
+ * 1. Generate slug from name if not provided
+ * 2. Validate slug format and reserved words
+ * 3. Check slug uniqueness in the database
+ * 4. Insert application via repository
+ * 5. Cache the new application
+ * 6. Write audit log entry
+ *
+ * @param input - Application creation data
+ * @param actorId - UUID of the user performing the action (for audit)
+ * @returns Created application
+ * @throws ApplicationValidationError if slug is invalid or already taken
+ */
+export async function createApplication(input, actorId) {
+    // Generate or use provided slug
+    const slug = input.slug ?? generateSlug(input.name);
+    // Validate slug format and reserved words
+    const validation = validateSlug(slug);
+    if (!validation.isValid) {
+        throw new ApplicationValidationError(validation.error);
+    }
+    // Check uniqueness
+    const taken = await slugExists(slug);
+    if (taken) {
+        throw new ApplicationValidationError('Slug already in use');
+    }
+    // Insert into database
+    const app = await insertApplication({
+        name: input.name,
+        slug,
+        description: input.description,
+    });
+    // Cache the new application
+    await cacheApplication(app);
+    // Audit log (fire-and-forget)
+    await writeAuditLog({
+        eventType: 'app.created',
+        eventCategory: 'admin',
+        actorId,
+        metadata: { applicationId: app.id, slug: app.slug, name: app.name },
+    });
+    return app;
+}
+// ---------------------------------------------------------------------------
+// Read
+// ---------------------------------------------------------------------------
+/**
+ * Find an application by ID.
+ * Checks Redis cache first, falls back to database on miss.
+ *
+ * @param id - Application UUID
+ * @returns Application or null if not found
+ */
+export async function getApplicationById(id) {
+    // Try cache first
+    const cached = await getCachedApplicationById(id);
+    if (cached)
+        return cached;
+    // Fall back to database
+    const app = await findApplicationById(id);
+    if (app) {
+        await cacheApplication(app);
+    }
+    return app;
+}
+/**
+ * Find an application by slug.
+ * Checks Redis cache first, falls back to database on miss.
+ *
+ * @param slug - Application slug
+ * @returns Application or null if not found
+ */
+export async function getApplicationBySlug(slug) {
+    // Try cache first
+    const cached = await getCachedApplicationBySlug(slug);
+    if (cached)
+        return cached;
+    // Fall back to database
+    const app = await findApplicationBySlug(slug);
+    if (app) {
+        await cacheApplication(app);
+    }
+    return app;
+}
+// ---------------------------------------------------------------------------
+// Update
+// ---------------------------------------------------------------------------
+/**
+ * Update an application's basic fields (name, description).
+ *
+ * @param id - Application UUID
+ * @param input - Fields to update
+ * @param actorId - UUID of the user performing the action
+ * @returns Updated application
+ * @throws ApplicationNotFoundError if application not found
+ */
+export async function updateApplication(id, input, actorId) {
+    // Build update data from input
+    const updateData = {};
+    if (input.name !== undefined)
+        updateData.name = input.name;
+    if (input.description !== undefined)
+        updateData.description = input.description;
+    let app;
+    try {
+        app = await repoUpdateApp(id, updateData);
+    }
+    catch (err) {
+        if (err instanceof Error && err.message === 'Application not found') {
+            throw new ApplicationNotFoundError(id);
+        }
+        throw err;
+    }
+    // Invalidate old cache and re-cache the updated version
+    await invalidateApplicationCache(app.slug, app.id);
+    await cacheApplication(app);
+    // Audit log (fire-and-forget)
+    await writeAuditLog({
+        eventType: 'app.updated',
+        eventCategory: 'admin',
+        actorId,
+        metadata: { applicationId: app.id, fields: Object.keys(updateData) },
+    });
+    return app;
+}
+// ---------------------------------------------------------------------------
+// List
+// ---------------------------------------------------------------------------
+/**
+ * List applications with pagination and filtering.
+ * Delegates directly to the repository.
+ *
+ * @param options - Pagination, filter, and sort options
+ * @returns Paginated result
+ */
+export async function listApplications(options) {
+    return repoListApps(options);
+}
+/**
+ * List applications with cursor-based keyset pagination.
+ * Provides stable, efficient pagination without COUNT queries.
+ *
+ * @param options - Cursor, limit, filter, and sort options
+ * @returns Cursor-paginated result with nextCursor/hasMore
+ */
+export async function listApplicationsCursor(options) {
+    return repoListAppsCursor(options);
+}
+// ===========================================================================
+// Status lifecycle
+// ===========================================================================
+/**
+ * Load and validate an application exists before a status change.
+ * @throws ApplicationNotFoundError if not found
+ */
+async function loadAppForStatusChange(id) {
+    const app = await findApplicationById(id);
+    if (!app)
+        throw new ApplicationNotFoundError(id);
+    return app;
+}
+/**
+ * Deactivate an application (active → inactive).
+ *
+ * @param id - Application UUID
+ * @param actorId - UUID of the user performing the action
+ * @throws ApplicationNotFoundError if not found
+ * @throws ApplicationValidationError if not currently active
+ */
+export async function deactivateApplication(id, actorId) {
+    const app = await loadAppForStatusChange(id);
+    if (app.status !== 'active') {
+        throw new ApplicationValidationError(`Cannot deactivate application from status: ${app.status}`);
+    }
+    await repoUpdateApp(id, { status: 'inactive' });
+    await invalidateApplicationCache(app.slug, app.id);
+    await writeAuditLog({
+        eventType: 'app.deactivated',
+        eventCategory: 'admin',
+        actorId,
+        metadata: { applicationId: app.id },
+    });
+}
+/**
+ * Activate an application (inactive → active).
+ *
+ * @param id - Application UUID
+ * @param actorId - UUID of the user performing the action
+ * @throws ApplicationNotFoundError if not found
+ * @throws ApplicationValidationError if not currently inactive
+ */
+export async function activateApplication(id, actorId) {
+    const app = await loadAppForStatusChange(id);
+    if (app.status !== 'inactive') {
+        throw new ApplicationValidationError(`Cannot activate application from status: ${app.status}`);
+    }
+    await repoUpdateApp(id, { status: 'active' });
+    await invalidateApplicationCache(app.slug, app.id);
+    await writeAuditLog({
+        eventType: 'app.activated',
+        eventCategory: 'admin',
+        actorId,
+        metadata: { applicationId: app.id },
+    });
+}
+/**
+ * Archive an application (active or inactive → archived).
+ *
+ * Archive is a permanent soft-delete — archived applications cannot
+ * be restored (unlike organizations which support restore).
+ *
+ * @param id - Application UUID
+ * @param actorId - UUID of the user performing the action
+ * @throws ApplicationNotFoundError if not found
+ * @throws ApplicationValidationError if already archived
+ */
+export async function archiveApplication(id, actorId) {
+    const app = await loadAppForStatusChange(id);
+    if (app.status === 'archived') {
+        throw new ApplicationValidationError('Application is already archived');
+    }
+    await repoUpdateApp(id, { status: 'archived' });
+    await invalidateApplicationCache(app.slug, app.id);
+    await writeAuditLog({
+        eventType: 'app.archived',
+        eventCategory: 'admin',
+        actorId,
+        metadata: { applicationId: app.id, previousStatus: app.status },
+    });
+}
+// ===========================================================================
+// Module management
+// ===========================================================================
+/**
+ * Create a new module within an application.
+ *
+ * 1. Validate the parent application exists
+ * 2. Generate slug from name if not provided
+ * 3. Validate slug format
+ * 4. Check module slug uniqueness within the application
+ * 5. Insert module via repository
+ * 6. Write audit log entry
+ *
+ * @param applicationId - Parent application UUID
+ * @param input - Module creation data
+ * @param actorId - UUID of the user performing the action
+ * @returns Created module
+ * @throws ApplicationNotFoundError if parent application not found
+ * @throws ApplicationValidationError if slug is invalid or taken within app
+ */
+export async function createModule(applicationId, input, actorId) {
+    // Validate parent application exists
+    const app = await findApplicationById(applicationId);
+    if (!app)
+        throw new ApplicationNotFoundError(applicationId);
+    // Generate or use provided slug
+    const slug = input.slug ?? generateSlug(input.name);
+    // Validate slug format and reserved words
+    const validation = validateSlug(slug);
+    if (!validation.isValid) {
+        throw new ApplicationValidationError(validation.error);
+    }
+    // Check uniqueness within the application
+    const taken = await moduleSlugExists(applicationId, slug);
+    if (taken) {
+        throw new ApplicationValidationError('Module slug already in use within this application');
+    }
+    // Insert into database
+    const mod = await insertModule({
+        applicationId,
+        name: input.name,
+        slug,
+        description: input.description,
+    });
+    // Audit log (fire-and-forget)
+    await writeAuditLog({
+        eventType: 'app.module.created',
+        eventCategory: 'admin',
+        actorId,
+        metadata: { applicationId, moduleId: mod.id, slug: mod.slug, name: mod.name },
+    });
+    return mod;
+}
+/**
+ * Update a module's basic fields (name, description).
+ *
+ * @param moduleId - Module UUID
+ * @param input - Fields to update
+ * @param actorId - UUID of the user performing the action
+ * @returns Updated module
+ * @throws ApplicationNotFoundError if module not found
+ */
+export async function updateModule(moduleId, input, actorId) {
+    // Build update data from input
+    const updateData = {};
+    if (input.name !== undefined)
+        updateData.name = input.name;
+    if (input.description !== undefined)
+        updateData.description = input.description;
+    let mod;
+    try {
+        mod = await repoUpdateModule(moduleId, updateData);
+    }
+    catch (err) {
+        if (err instanceof Error && err.message === 'Module not found') {
+            throw new ApplicationNotFoundError(moduleId);
+        }
+        throw err;
+    }
+    // Audit log (fire-and-forget)
+    await writeAuditLog({
+        eventType: 'app.module.updated',
+        eventCategory: 'admin',
+        actorId,
+        metadata: { moduleId: mod.id, applicationId: mod.applicationId, fields: Object.keys(updateData) },
+    });
+    return mod;
+}
+/**
+ * Deactivate a module (set status to inactive).
+ *
+ * @param moduleId - Module UUID
+ * @param actorId - UUID of the user performing the action
+ * @throws ApplicationNotFoundError if module not found
+ * @throws ApplicationValidationError if not currently active
+ */
+export async function deactivateModule(moduleId, actorId) {
+    const mod = await findModuleById(moduleId);
+    if (!mod)
+        throw new ApplicationNotFoundError(moduleId);
+    if (mod.status !== 'active') {
+        throw new ApplicationValidationError(`Cannot deactivate module from status: ${mod.status}`);
+    }
+    await repoUpdateModule(moduleId, { status: 'inactive' });
+    await writeAuditLog({
+        eventType: 'app.module.deactivated',
+        eventCategory: 'admin',
+        actorId,
+        metadata: { moduleId: mod.id, applicationId: mod.applicationId },
+    });
+}
+/**
+ * List all modules for an application.
+ * Delegates directly to the repository.
+ *
+ * @param applicationId - Application UUID
+ * @returns Array of modules
+ */
+export async function listModules(applicationId) {
+    return repoListModules(applicationId);
+}
+//# sourceMappingURL=service.js.map

package/dist/applications/service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../../src/applications/service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAYH,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,qBAAqB,EACrB,iBAAiB,IAAI,aAAa,EAClC,gBAAgB,IAAI,YAAY,EAChC,sBAAsB,IAAI,kBAAkB,EAC5C,UAAU,EACV,YAAY,EACZ,cAAc,EACd,YAAY,IAAI,gBAAgB,EAChC,WAAW,IAAI,eAAe,EAC9B,gBAAgB,GACjB,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EACL,wBAAwB,EACxB,0BAA0B,EAC1B,gBAAgB,EAChB,0BAA0B,GAC3B,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,wBAAwB,EAAE,0BAA0B,EAAE,MAAM,aAAa,CAAC;AAEnF,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E,8EAA8E;AAC9E,SAAS;AACT,8EAA8E;AAE9E;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,KAA6B,EAC7B,OAAgB;IAEhB,gCAAgC;IAChC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAEpD,0CAA0C;IAC1C,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;QACxB,MAAM,IAAI,0BAA0B,CAAC,UAAU,CAAC,KAAM,CAAC,CAAC;IAC1D,CAAC;IAED,mBAAmB;IACnB,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;IACrC,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,IAAI,0BAA0B,CAAC,qBAAqB,CAAC,CAAC;IAC9D,CAAC;IAED,uBAAuB;IACvB,MAAM,GAAG,GAAG,MAAM,iBAAiB,CAAC;QAClC,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI;QACJ,WAAW,EAAE,KAAK,CAAC,WAAW;KAC/B,CAAC,CAAC;IAEH,4BAA4B;IAC5B,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAE5B,8BAA8B;IAC9B,MAAM,aAAa,CAAC;QAClB,SAAS,EAAE,aAAa;QACxB,aAAa,EAAE,OAAO;QACtB,OAAO;QACP,QAAQ,EAAE,EAAE,aAAa,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE;KACpE,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC;AAED,8EAA8E;AAC9E,OAAO;AACP,8EAA8E;AAE9E;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,EAAU;IACjD,kBAAkB;IAClB,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC,EAAE,CAAC,CAAC;IAClD,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAE1B,wBAAwB;IACxB,MAAM,GAAG,GAAG,MAAM,mBAAmB,CAAC,EAAE,CAAC,CAAC;IAC1C,IAAI,GAAG,EAAE,CAAC;QACR,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,IAAY;IACrD,kBAAkB;IAClB,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAAC,IAAI,CAAC,CAAC;IACtD,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAE1B,wBAAwB;IACxB,MAAM,GAAG,GAAG,MAAM,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAC9C,IAAI,GAAG,EAAE,CAAC;QACR,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,8EAA8E;AAC9E,SAAS;AACT,8EAA8E;AAE9E;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,EAAU,EACV,KAA6B,EAC7B,OAAgB;IAEhB,+BAA+B;IAC/B,MAAM,UAAU,GAA4B,EAAE,CAAC;IAC/C,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;QAAE,UAAU,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IAC3D,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS;QAAE,UAAU,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;IAEhF,IAAI,GAAgB,CAAC;IACrB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,aAAa,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;IAC5C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,OAAO,KAAK,uBAAuB,EAAE,CAAC;YACpE,MAAM,IAAI,wBAAwB,CAAC,EAAE,CAAC,CAAC;QACzC,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,wDAAwD;IACxD,MAAM,0BAA0B,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IACnD,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAE5B,8BAA8B;IAC9B,MAAM,aAAa,CAAC;QAClB,SAAS,EAAE,aAAa;QACxB,aAAa,EAAE,OAAO;QACtB,OAAO;QACP,QAAQ,EAAE,EAAE,aAAa,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE;KACrE,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC;AAED,8EAA8E;AAC9E,OAAO;AACP,8EAA8E;AAE9E;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAgC;IAEhC,OAAO,YAAY,CAAC,OAAO,CAAC,CAAC;AAC/B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,OAAsC;IAEtC,OAAO,kBAAkB,CAAC,OAAO,CAAC,CAAC;AACrC,CAAC;AAED,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E;;;GAGG;AACH,KAAK,UAAU,sBAAsB,CAAC,EAAU;IAC9C,MAAM,GAAG,GAAG,MAAM,mBAAmB,CAAC,EAAE,CAAC,CAAC;IAC1C,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,wBAAwB,CAAC,EAAE,CAAC,CAAC;IACjD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,EAAU,EACV,OAAgB;IAEhB,MAAM,GAAG,GAAG,MAAM,sBAAsB,CAAC,EAAE,CAAC,CAAC;IAE7C,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC5B,MAAM,IAAI,0BAA0B,CAClC,8CAA8C,GAAG,CAAC,MAAM,EAAE,CAC3D,CAAC;IACJ,CAAC;IAED,MAAM,aAAa,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;IAChD,MAAM,0BAA0B,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IAEnD,MAAM,aAAa,CAAC;QAClB,SAAS,EAAE,iBAAiB;QAC5B,aAAa,EAAE,OAAO;QACtB,OAAO;QACP,QAAQ,EAAE,EAAE,aAAa,EAAE,GAAG,CAAC,EAAE,EAAE;KACpC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,EAAU,EACV,OAAgB;IAEhB,MAAM,GAAG,GAAG,MAAM,sBAAsB,CAAC,EAAE,CAAC,CAAC;IAE7C,IAAI,GAAG,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QAC9B,MAAM,IAAI,0BAA0B,CAClC,4CAA4C,GAAG,CAAC,MAAM,EAAE,CACzD,CAAC;IACJ,CAAC;IAED,MAAM,aAAa,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC9C,MAAM,0BAA0B,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IAEnD,MAAM,aAAa,CAAC;QAClB,SAAS,EAAE,eAAe;QAC1B,aAAa,EAAE,OAAO;QACtB,OAAO;QACP,QAAQ,EAAE,EAAE,aAAa,EAAE,GAAG,CAAC,EAAE,EAAE;KACpC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,EAAU,EACV,OAAgB;IAEhB,MAAM,GAAG,GAAG,MAAM,sBAAsB,CAAC,EAAE,CAAC,CAAC;IAE7C,IAAI,GAAG,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QAC9B,MAAM,IAAI,0BAA0B,CAAC,iCAAiC,CAAC,CAAC;IAC1E,CAAC;IAED,MAAM,aAAa,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;IAChD,MAAM,0BAA0B,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IAEnD,MAAM,aAAa,CAAC;QAClB,SAAS,EAAE,cAAc;QACzB,aAAa,EAAE,OAAO;QACtB,OAAO;QACP,QAAQ,EAAE,EAAE,aAAa,EAAE,GAAG,CAAC,EAAE,EAAE,cAAc,EAAE,GAAG,CAAC,MAAM,EAAE;KAChE,CAAC,CAAC;AACL,CAAC;AAED,8EAA8E;AAC9E,oBAAoB;AACpB,8EAA8E;AAE9E;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,aAAqB,EACrB,KAAwB,EACxB,OAAgB;IAEhB,qCAAqC;IACrC,MAAM,GAAG,GAAG,MAAM,mBAAmB,CAAC,aAAa,CAAC,CAAC;IACrD,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,wBAAwB,CAAC,aAAa,CAAC,CAAC;IAE5D,gCAAgC;IAChC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAEpD,0CAA0C;IAC1C,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;QACxB,MAAM,IAAI,0BAA0B,CAAC,UAAU,CAAC,KAAM,CAAC,CAAC;IAC1D,CAAC;IAED,0CAA0C;IAC1C,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;IAC1D,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,IAAI,0BAA0B,CAAC,oDAAoD,CAAC,CAAC;IAC7F,CAAC;IAED,uBAAuB;IACvB,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC;QAC7B,aAAa;QACb,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI;QACJ,WAAW,EAAE,KAAK,CAAC,WAAW;KAC/B,CAAC,CAAC;IAEH,8BAA8B;IAC9B,MAAM,aAAa,CAAC;QAClB,SAAS,EAAE,oBAAoB;QAC/B,aAAa,EAAE,OAAO;QACtB,OAAO;QACP,QAAQ,EAAE,EAAE,aAAa,EAAE,QAAQ,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE;KAC9E,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,QAAgB,EAChB,KAAwB,EACxB,OAAgB;IAEhB,+BAA+B;IAC/B,MAAM,UAAU,GAA4B,EAAE,CAAC;IAC/C,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;QAAE,UAAU,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IAC3D,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS;QAAE,UAAU,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;IAEhF,IAAI,GAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,gBAAgB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACrD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,OAAO,KAAK,kBAAkB,EAAE,CAAC;YAC/D,MAAM,IAAI,wBAAwB,CAAC,QAAQ,CAAC,CAAC;QAC/C,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,8BAA8B;IAC9B,MAAM,aAAa,CAAC;QAClB,SAAS,EAAE,oBAAoB;QAC/B,aAAa,EAAE,OAAO;QACtB,OAAO;QACP,QAAQ,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,EAAE,EAAE,aAAa,EAAE,GAAG,CAAC,aAAa,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE;KAClG,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,QAAgB,EAChB,OAAgB;IAEhB,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,QAAQ,CAAC,CAAC;IAC3C,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,wBAAwB,CAAC,QAAQ,CAAC,CAAC;IAEvD,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC5B,MAAM,IAAI,0BAA0B,CAClC,yCAAyC,GAAG,CAAC,MAAM,EAAE,CACtD,CAAC;IACJ,CAAC;IAED,MAAM,gBAAgB,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;IAEzD,MAAM,aAAa,CAAC;QAClB,SAAS,EAAE,wBAAwB;QACnC,aAAa,EAAE,OAAO;QACtB,OAAO;QACP,QAAQ,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,EAAE,EAAE,aAAa,EAAE,GAAG,CAAC,aAAa,EAAE;KACjE,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,aAAqB;IACrD,OAAO,eAAe,CAAC,aAAa,CAAC,CAAC;AACxC,CAAC"}

package/dist/applications/slugs.d.ts

@@ -0,0 +1,61 @@
+/**
+ * Slug generation and validation utilities for applications.
+ *
+ * Application slugs are URL-safe identifiers used to reference
+ * applications in API paths and configuration. They must be
+ * 3–100 characters, lowercase alphanumeric with hyphens,
+ * and cannot be a reserved system word.
+ *
+ * This module provides:
+ * - `generateSlug(name)` — Derive a slug from an application name
+ * - `validateSlug(slug)` — Check format and reserved-word rules
+ * - `RESERVED_SLUGS` — The set of words that cannot be used as application slugs
+ *
+ * Note: Application reserved words differ from organization reserved words
+ * because app slugs appear in different contexts (e.g., app references in
+ * client metadata, module namespacing).
+ */
+/**
+ * Reserved slugs that cannot be used as application slugs.
+ * These conflict with system concepts, internal naming, or
+ * could cause confusion with infrastructure functionality.
+ */
+export declare const RESERVED_SLUGS: ReadonlySet<string>;
+/**
+ * Generate a URL-safe slug from an application name.
+ *
+ * Transformation rules:
+ * 1. Convert to lowercase
+ * 2. Replace non-alphanumeric characters with hyphens
+ * 3. Collapse multiple consecutive hyphens into one
+ * 4. Trim leading and trailing hyphens
+ * 5. Truncate to 100 characters (trimming trailing hyphens after truncation)
+ *
+ * Returns an empty string for empty/whitespace-only input — the caller
+ * (service layer) is responsible for validation.
+ *
+ * @param name - Application name to derive a slug from
+ * @returns Generated slug string
+ */
+export declare function generateSlug(name: string): string;
+/** Result of slug validation — isValid flag with optional error message */
+export interface SlugValidationResult {
+    isValid: boolean;
+    error?: string;
+}
+/**
+ * Validate a slug against format and reserved word rules.
+ *
+ * Checks (in order):
+ * 1. Minimum length (3 characters)
+ * 2. Maximum length (100 characters)
+ * 3. Format (lowercase alphanumeric + hyphens, no leading/trailing hyphens)
+ * 4. Not a reserved word
+ *
+ * Does NOT check uniqueness — that's the repository/service layer's job.
+ *
+ * @param slug - Slug string to validate
+ * @returns Object with isValid boolean and optional error message
+ */
+export declare function validateSlug(slug: string): SlugValidationResult;
+//# sourceMappingURL=slugs.d.ts.map

package/dist/applications/slugs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"slugs.d.ts","sourceRoot":"","sources":["../../src/applications/slugs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAMH;;;;GAIG;AACH,eAAO,MAAM,cAAc,EAAE,WAAW,CAAC,MAAM,CAQ7C,CAAC;AAiBH;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAgBjD;AAMD,2EAA2E;AAC3E,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,oBAAoB,CA2B/D"}

package/dist/applications/slugs.js

@@ -0,0 +1,115 @@
+/**
+ * Slug generation and validation utilities for applications.
+ *
+ * Application slugs are URL-safe identifiers used to reference
+ * applications in API paths and configuration. They must be
+ * 3–100 characters, lowercase alphanumeric with hyphens,
+ * and cannot be a reserved system word.
+ *
+ * This module provides:
+ * - `generateSlug(name)` — Derive a slug from an application name
+ * - `validateSlug(slug)` — Check format and reserved-word rules
+ * - `RESERVED_SLUGS` — The set of words that cannot be used as application slugs
+ *
+ * Note: Application reserved words differ from organization reserved words
+ * because app slugs appear in different contexts (e.g., app references in
+ * client metadata, module namespacing).
+ */
+// ---------------------------------------------------------------------------
+// Reserved slugs
+// ---------------------------------------------------------------------------
+/**
+ * Reserved slugs that cannot be used as application slugs.
+ * These conflict with system concepts, internal naming, or
+ * could cause confusion with infrastructure functionality.
+ */
+export const RESERVED_SLUGS = new Set([
+    'admin',
+    'api',
+    'system',
+    'internal',
+    'default',
+    'health',
+    'status',
+]);
+// ---------------------------------------------------------------------------
+// Slug format
+// ---------------------------------------------------------------------------
+/**
+ * Slug format regex: 3–100 characters, lowercase alphanumeric + hyphens.
+ * Must start and end with an alphanumeric character (no leading/trailing hyphens).
+ * The middle section allows 1–98 characters of alphanumeric + hyphens.
+ */
+const SLUG_REGEX = /^[a-z0-9][a-z0-9-]{1,98}[a-z0-9]$/;
+// ---------------------------------------------------------------------------
+// Slug generation
+// ---------------------------------------------------------------------------
+/**
+ * Generate a URL-safe slug from an application name.
+ *
+ * Transformation rules:
+ * 1. Convert to lowercase
+ * 2. Replace non-alphanumeric characters with hyphens
+ * 3. Collapse multiple consecutive hyphens into one
+ * 4. Trim leading and trailing hyphens
+ * 5. Truncate to 100 characters (trimming trailing hyphens after truncation)
+ *
+ * Returns an empty string for empty/whitespace-only input — the caller
+ * (service layer) is responsible for validation.
+ *
+ * @param name - Application name to derive a slug from
+ * @returns Generated slug string
+ */
+export function generateSlug(name) {
+    if (!name || !name.trim()) {
+        return '';
+    }
+    const slug = name
+        .toLowerCase()
+        // Replace any character that's not a-z, 0-9, or hyphen with a hyphen
+        .replace(/[^a-z0-9-]/g, '-')
+        // Collapse consecutive hyphens into a single hyphen
+        .replace(/-+/g, '-')
+        // Remove leading and trailing hyphens
+        .replace(/^-+|-+$/g, '');
+    // Truncate to 100 characters, then trim any trailing hyphen caused by truncation
+    return slug.slice(0, 100).replace(/-+$/, '');
+}
+/**
+ * Validate a slug against format and reserved word rules.
+ *
+ * Checks (in order):
+ * 1. Minimum length (3 characters)
+ * 2. Maximum length (100 characters)
+ * 3. Format (lowercase alphanumeric + hyphens, no leading/trailing hyphens)
+ * 4. Not a reserved word
+ *
+ * Does NOT check uniqueness — that's the repository/service layer's job.
+ *
+ * @param slug - Slug string to validate
+ * @returns Object with isValid boolean and optional error message
+ */
+export function validateSlug(slug) {
+    // Check minimum length
+    if (slug.length < 3) {
+        return { isValid: false, error: 'Slug must be at least 3 characters' };
+    }
+    // Check maximum length
+    if (slug.length > 100) {
+        return { isValid: false, error: 'Slug must be at most 100 characters' };
+    }
+    // Check format: lowercase alphanumeric + hyphens, no leading/trailing hyphens
+    if (!SLUG_REGEX.test(slug)) {
+        return {
+            isValid: false,
+            error: 'Slug must contain only lowercase letters, numbers, and hyphens, ' +
+                'and cannot start or end with a hyphen',
+        };
+    }
+    // Check reserved words
+    if (RESERVED_SLUGS.has(slug)) {
+        return { isValid: false, error: `Slug "${slug}" is reserved and cannot be used` };
+    }
+    return { isValid: true };
+}
+//# sourceMappingURL=slugs.js.map

package/dist/applications/slugs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"slugs.js","sourceRoot":"","sources":["../../src/applications/slugs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,8EAA8E;AAC9E,iBAAiB;AACjB,8EAA8E;AAE9E;;;;GAIG;AACH,MAAM,CAAC,MAAM,cAAc,GAAwB,IAAI,GAAG,CAAC;IACzD,OAAO;IACP,KAAK;IACL,QAAQ;IACR,UAAU;IACV,SAAS;IACT,QAAQ;IACR,QAAQ;CACT,CAAC,CAAC;AAEH,8EAA8E;AAC9E,cAAc;AACd,8EAA8E;AAE9E;;;;GAIG;AACH,MAAM,UAAU,GAAG,mCAAmC,CAAC;AAEvD,8EAA8E;AAC9E,kBAAkB;AAClB,8EAA8E;AAE9E;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;QAC1B,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,IAAI,GAAG,IAAI;SACd,WAAW,EAAE;QACd,qEAAqE;SACpE,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;QAC5B,oDAAoD;SACnD,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;QACpB,sCAAsC;SACrC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAE3B,iFAAiF;IACjF,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAC/C,CAAC;AAYD;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,uBAAuB;IACvB,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,oCAAoC,EAAE,CAAC;IACzE,CAAC;IAED,uBAAuB;IACvB,IAAI,IAAI,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QACtB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,qCAAqC,EAAE,CAAC;IAC1E,CAAC;IAED,8EAA8E;IAC9E,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3B,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EACH,kEAAkE;gBAClE,uCAAuC;SAC1C,CAAC;IACJ,CAAC;IAED,uBAAuB;IACvB,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,IAAI,kCAAkC,EAAE,CAAC;IACpF,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC"}