@powerhousedao/reactor-api 6.0.0-dev.153 → 6.0.0-dev.155

package/dist/src/graphql/auth/resolvers.js

@@ -1,227 +0,0 @@
-import { GraphQLError } from "graphql";
-export async function documentAccess(service, args) {
-    const permissions = await service.getDocumentPermissions(args.documentId);
-    const groupPermissions = await service.getDocumentGroupPermissions(args.documentId);
-    return {
-        documentId: args.documentId,
-        permissions,
-        groupPermissions,
-    };
-}
-export async function userDocumentPermissions(service, userAddress) {
-    return service.getUserDocuments(userAddress);
-}
-export async function grantDocumentPermission(service, args, grantedByAddress, isGlobalAdmin) {
-    // Check authorization: must be global admin or document admin
-    if (!grantedByAddress) {
-        throw new GraphQLError("Authentication required");
-    }
-    if (!isGlobalAdmin) {
-        const canManage = await service.canManageDocument(args.documentId, grantedByAddress);
-        if (!canManage) {
-            throw new GraphQLError("Forbidden: You must be an admin of this document to grant permissions");
-        }
-    }
-    return service.grantPermission(args.documentId, args.userAddress, args.permission, grantedByAddress);
-}
-export async function revokeDocumentPermission(service, args, revokedByAddress, isGlobalAdmin) {
-    // Check authorization: must be global admin or document admin
-    if (!revokedByAddress) {
-        throw new GraphQLError("Authentication required");
-    }
-    if (!isGlobalAdmin) {
-        const canManage = await service.canManageDocument(args.documentId, revokedByAddress);
-        if (!canManage) {
-            throw new GraphQLError("Forbidden: You must be an admin of this document to revoke permissions");
-        }
-    }
-    await service.revokePermission(args.documentId, args.userAddress);
-    return true;
-}
-/**
- * Create a getParentIds function using the reactor client
- */
-export function createGetParentIdsFn(reactorClient) {
-    return async (documentId) => {
-        try {
-            const result = await reactorClient.getParents(documentId);
-            return result.results.map((doc) => doc.header.id);
-        }
-        catch {
-            // If document has no parents or error, return empty array
-            return [];
-        }
-    };
-}
-export async function groups(service) {
-    return service.listGroups();
-}
-export async function group(service, args) {
-    return service.getGroup(args.id);
-}
-export async function userGroups(service, args) {
-    return service.getUserGroups(args.userAddress);
-}
-export async function createGroup(service, args) {
-    return service.createGroup(args.name, args.description ?? undefined);
-}
-export async function deleteGroup(service, args) {
-    await service.deleteGroup(args.id);
-    return true;
-}
-export async function addUserToGroup(service, args) {
-    await service.addUserToGroup(args.userAddress, args.groupId);
-    return true;
-}
-export async function removeUserFromGroup(service, args) {
-    await service.removeUserFromGroup(args.userAddress, args.groupId);
-    return true;
-}
-export async function getGroupMembers(service, groupId) {
-    return service.getGroupMembers(groupId);
-}
-export async function grantGroupPermission(service, args, grantedByAddress, isGlobalAdmin) {
-    // Check authorization: must be global admin or document admin
-    if (!grantedByAddress) {
-        throw new GraphQLError("Authentication required");
-    }
-    if (!isGlobalAdmin) {
-        const canManage = await service.canManageDocument(args.documentId, grantedByAddress);
-        if (!canManage) {
-            throw new GraphQLError("Forbidden: You must be an admin of this document to grant permissions");
-        }
-    }
-    return service.grantGroupPermission(args.documentId, args.groupId, args.permission, grantedByAddress);
-}
-export async function revokeGroupPermission(service, args, revokedByAddress, isGlobalAdmin) {
-    // Check authorization: must be global admin or document admin
-    if (!revokedByAddress) {
-        throw new GraphQLError("Authentication required");
-    }
-    if (!isGlobalAdmin) {
-        const canManage = await service.canManageDocument(args.documentId, revokedByAddress);
-        if (!canManage) {
-            throw new GraphQLError("Forbidden: You must be an admin of this document to revoke permissions");
-        }
-    }
-    await service.revokeGroupPermission(args.documentId, args.groupId);
-    return true;
-}
-export async function operationPermissions(service, args) {
-    const userPermissions = await service.getOperationUserPermissions(args.documentId, args.operationType);
-    const groupPermissions = await service.getOperationGroupPermissions(args.documentId, args.operationType);
-    return {
-        documentId: args.documentId,
-        operationType: args.operationType,
-        userPermissions,
-        groupPermissions,
-    };
-}
-export async function canExecuteOperation(service, args, userAddress) {
-    return service.canExecuteOperation(args.documentId, args.operationType, userAddress);
-}
-export async function grantOperationPermission(service, args, grantedByAddress, isGlobalAdmin) {
-    if (!grantedByAddress) {
-        throw new GraphQLError("Authentication required");
-    }
-    if (!isGlobalAdmin) {
-        const canManage = await service.canManageDocument(args.documentId, grantedByAddress);
-        if (!canManage) {
-            throw new GraphQLError("Forbidden: You must be an admin of this document to grant operation permissions");
-        }
-    }
-    return service.grantOperationPermission(args.documentId, args.operationType, args.userAddress, grantedByAddress);
-}
-export async function revokeOperationPermission(service, args, revokedByAddress, isGlobalAdmin) {
-    if (!revokedByAddress) {
-        throw new GraphQLError("Authentication required");
-    }
-    if (!isGlobalAdmin) {
-        const canManage = await service.canManageDocument(args.documentId, revokedByAddress);
-        if (!canManage) {
-            throw new GraphQLError("Forbidden: You must be an admin of this document to revoke operation permissions");
-        }
-    }
-    await service.revokeOperationPermission(args.documentId, args.operationType, args.userAddress);
-    return true;
-}
-export async function grantGroupOperationPermission(service, args, grantedByAddress, isGlobalAdmin) {
-    if (!grantedByAddress) {
-        throw new GraphQLError("Authentication required");
-    }
-    if (!isGlobalAdmin) {
-        const canManage = await service.canManageDocument(args.documentId, grantedByAddress);
-        if (!canManage) {
-            throw new GraphQLError("Forbidden: You must be an admin of this document to grant operation permissions");
-        }
-    }
-    return service.grantGroupOperationPermission(args.documentId, args.operationType, args.groupId, grantedByAddress);
-}
-export async function revokeGroupOperationPermission(service, args, revokedByAddress, isGlobalAdmin) {
-    if (!revokedByAddress) {
-        throw new GraphQLError("Authentication required");
-    }
-    if (!isGlobalAdmin) {
-        const canManage = await service.canManageDocument(args.documentId, revokedByAddress);
-        if (!canManage) {
-            throw new GraphQLError("Forbidden: You must be an admin of this document to revoke operation permissions");
-        }
-    }
-    await service.revokeGroupOperationPermission(args.documentId, args.operationType, args.groupId);
-    return true;
-}
-export async function documentProtection(service, args) {
-    return service.getDocumentProtection(args.documentId);
-}
-export async function setDocumentProtection(service, authorizationService, args, userAddress, isGlobalAdmin) {
-    if (!userAddress) {
-        throw new GraphQLError("Authentication required");
-    }
-    // Check manage permission
-    if (!isGlobalAdmin) {
-        if (authorizationService) {
-            const canManage = await authorizationService.canManage(args.documentId, userAddress);
-            if (!canManage) {
-                throw new GraphQLError("Forbidden: You must be an admin of this document to change protection");
-            }
-        }
-        else {
-            const canManage = await service.canManageDocument(args.documentId, userAddress);
-            if (!canManage) {
-                throw new GraphQLError("Forbidden: You must be an admin of this document to change protection");
-            }
-        }
-    }
-    await service.setDocumentProtection(args.documentId, args.protected);
-    return service.getDocumentProtection(args.documentId);
-}
-export async function transferDocumentOwnership(service, authorizationService, args, userAddress, isGlobalAdmin) {
-    if (!userAddress) {
-        throw new GraphQLError("Authentication required");
-    }
-    // Check manage permission
-    if (!isGlobalAdmin) {
-        if (authorizationService) {
-            const canManage = await authorizationService.canManage(args.documentId, userAddress);
-            if (!canManage) {
-                throw new GraphQLError("Forbidden: You must be an admin of this document to transfer ownership");
-            }
-        }
-        else {
-            const canManage = await service.canManageDocument(args.documentId, userAddress);
-            if (!canManage) {
-                throw new GraphQLError("Forbidden: You must be an admin of this document to transfer ownership");
-            }
-        }
-    }
-    // Revoke old owner's explicit ADMIN grant before transferring
-    const previousOwner = await service.getDocumentOwner(args.documentId);
-    if (previousOwner) {
-        await service.revokePermission(args.documentId, previousOwner);
-    }
-    await service.setDocumentOwner(args.documentId, args.newOwnerAddress);
-    // Grant ADMIN to new owner
-    await service.grantPermission(args.documentId, args.newOwnerAddress, "ADMIN", userAddress);
-    return service.getDocumentProtection(args.documentId);
-}
-//# sourceMappingURL=resolvers.js.map

package/dist/src/graphql/auth/resolvers.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"resolvers.js","sourceRoot":"","sources":["../../../../src/graphql/auth/resolvers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAiCvC,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAAkC,EAClC,IAA4B;IAE5B,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,sBAAsB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC1E,MAAM,gBAAgB,GAAG,MAAM,OAAO,CAAC,2BAA2B,CAChE,IAAI,CAAC,UAAU,CAChB,CAAC;IAEF,OAAO;QACL,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,WAAW;QACX,gBAAgB;KACjB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,OAAkC,EAClC,WAAmB;IAWnB,OAAO,OAAO,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,OAAkC,EAClC,IAIC,EACD,gBAAoC,EACpC,aAAsB;IAStB,8DAA8D;IAC9D,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,MAAM,IAAI,YAAY,CAAC,yBAAyB,CAAC,CAAC;IACpD,CAAC;IAED,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAC/C,IAAI,CAAC,UAAU,EACf,gBAAgB,CACjB,CAAC;QACF,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,YAAY,CACpB,uEAAuE,CACxE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC,eAAe,CAC5B,IAAI,CAAC,UAAU,EACf,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,UAAU,EACf,gBAAgB,CACjB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,OAAkC,EAClC,IAAiD,EACjD,gBAAoC,EACpC,aAAsB;IAEtB,8DAA8D;IAC9D,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,MAAM,IAAI,YAAY,CAAC,yBAAyB,CAAC,CAAC;IACpD,CAAC;IAED,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAC/C,IAAI,CAAC,UAAU,EACf,gBAAgB,CACjB,CAAC;QACF,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,YAAY,CACpB,wEAAwE,CACzE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,OAAO,CAAC,gBAAgB,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;IAClE,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAClC,aAA6B;IAE7B,OAAO,KAAK,EAAE,UAAkB,EAAqB,EAAE;QACrD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;YAC1D,OAAO,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACpD,CAAC;QAAC,MAAM,CAAC;YACP,0DAA0D;YAC1D,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAcD,MAAM,CAAC,KAAK,UAAU,MAAM,CAC1B,OAAkC;IAElC,OAAO,OAAO,CAAC,UAAU,EAAE,CAAC;AAC9B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,KAAK,CACzB,OAAkC,EAClC,IAAoB;IAEpB,OAAO,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,OAAkC,EAClC,IAA6B;IAE7B,OAAO,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,OAAkC,EAClC,IAAmD;IAEnD,OAAO,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,IAAI,SAAS,CAAC,CAAC;AACvE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,OAAkC,EAClC,IAAoB;IAEpB,MAAM,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACnC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAAkC,EAClC,IAA8C;IAE9C,MAAM,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7D,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,OAAkC,EAClC,IAA8C;IAE9C,MAAM,OAAO,CAAC,mBAAmB,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAClE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,OAAkC,EAClC,OAAe;IAEf,OAAO,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;AAC1C,CAAC;AAeD,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,OAAkC,EAClC,IAIC,EACD,gBAAoC,EACpC,aAAsB;IAEtB,8DAA8D;IAC9D,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,MAAM,IAAI,YAAY,CAAC,yBAAyB,CAAC,CAAC;IACpD,CAAC;IAED,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAC/C,IAAI,CAAC,UAAU,EACf,gBAAgB,CACjB,CAAC;QACF,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,YAAY,CACpB,uEAAuE,CACxE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC,oBAAoB,CACjC,IAAI,CAAC,UAAU,EACf,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,UAAU,EACf,gBAAgB,CACjB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,OAAkC,EAClC,IAA6C,EAC7C,gBAAoC,EACpC,aAAsB;IAEtB,8DAA8D;IAC9D,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,MAAM,IAAI,YAAY,CAAC,yBAAyB,CAAC,CAAC;IACpD,CAAC;IAED,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAC/C,IAAI,CAAC,UAAU,EACf,gBAAgB,CACjB,CAAC;QACF,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,YAAY,CACpB,wEAAwE,CACzE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,OAAO,CAAC,qBAAqB,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACnE,OAAO,IAAI,CAAC;AACd,CAAC;AA6BD,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,OAAkC,EAClC,IAAmD;IAEnD,MAAM,eAAe,GAAG,MAAM,OAAO,CAAC,2BAA2B,CAC/D,IAAI,CAAC,UAAU,EACf,IAAI,CAAC,aAAa,CACnB,CAAC;IACF,MAAM,gBAAgB,GAAG,MAAM,OAAO,CAAC,4BAA4B,CACjE,IAAI,CAAC,UAAU,EACf,IAAI,CAAC,aAAa,CACnB,CAAC;IAEF,OAAO;QACL,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,eAAe;QACf,gBAAgB;KACjB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,OAAkC,EAClC,IAAmD,EACnD,WAA+B;IAE/B,OAAO,OAAO,CAAC,mBAAmB,CAChC,IAAI,CAAC,UAAU,EACf,IAAI,CAAC,aAAa,EAClB,WAAW,CACZ,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,OAAkC,EAClC,IAAwE,EACxE,gBAAoC,EACpC,aAAsB;IAEtB,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,MAAM,IAAI,YAAY,CAAC,yBAAyB,CAAC,CAAC;IACpD,CAAC;IAED,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAC/C,IAAI,CAAC,UAAU,EACf,gBAAgB,CACjB,CAAC;QACF,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,YAAY,CACpB,iFAAiF,CAClF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC,wBAAwB,CACrC,IAAI,CAAC,UAAU,EACf,IAAI,CAAC,aAAa,EAClB,IAAI,CAAC,WAAW,EAChB,gBAAgB,CACjB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,OAAkC,EAClC,IAAwE,EACxE,gBAAoC,EACpC,aAAsB;IAEtB,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,MAAM,IAAI,YAAY,CAAC,yBAAyB,CAAC,CAAC;IACpD,CAAC;IAED,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAC/C,IAAI,CAAC,UAAU,EACf,gBAAgB,CACjB,CAAC;QACF,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,YAAY,CACpB,kFAAkF,CACnF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,OAAO,CAAC,yBAAyB,CACrC,IAAI,CAAC,UAAU,EACf,IAAI,CAAC,aAAa,EAClB,IAAI,CAAC,WAAW,CACjB,CAAC;IACF,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,OAAkC,EAClC,IAAoE,EACpE,gBAAoC,EACpC,aAAsB;IAEtB,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,MAAM,IAAI,YAAY,CAAC,yBAAyB,CAAC,CAAC;IACpD,CAAC;IAED,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAC/C,IAAI,CAAC,UAAU,EACf,gBAAgB,CACjB,CAAC;QACF,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,YAAY,CACpB,iFAAiF,CAClF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC,6BAA6B,CAC1C,IAAI,CAAC,UAAU,EACf,IAAI,CAAC,aAAa,EAClB,IAAI,CAAC,OAAO,EACZ,gBAAgB,CACjB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,OAAkC,EAClC,IAAoE,EACpE,gBAAoC,EACpC,aAAsB;IAEtB,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,MAAM,IAAI,YAAY,CAAC,yBAAyB,CAAC,CAAC;IACpD,CAAC;IAED,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAC/C,IAAI,CAAC,UAAU,EACf,gBAAgB,CACjB,CAAC;QACF,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,YAAY,CACpB,kFAAkF,CACnF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,OAAO,CAAC,8BAA8B,CAC1C,IAAI,CAAC,UAAU,EACf,IAAI,CAAC,aAAa,EAClB,IAAI,CAAC,OAAO,CACb,CAAC;IACF,OAAO,IAAI,CAAC;AACd,CAAC;AAYD,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,OAAkC,EAClC,IAA4B;IAE5B,OAAO,OAAO,CAAC,qBAAqB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,OAAkC,EAClC,oBAAsD,EACtD,IAAgD,EAChD,WAA+B,EAC/B,aAAsB;IAEtB,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,YAAY,CAAC,yBAAyB,CAAC,CAAC;IACpD,CAAC;IAED,0BAA0B;IAC1B,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,IAAI,oBAAoB,EAAE,CAAC;YACzB,MAAM,SAAS,GAAG,MAAM,oBAAoB,CAAC,SAAS,CACpD,IAAI,CAAC,UAAU,EACf,WAAW,CACZ,CAAC;YACF,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,MAAM,IAAI,YAAY,CACpB,uEAAuE,CACxE,CAAC;YACJ,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAC/C,IAAI,CAAC,UAAU,EACf,WAAW,CACZ,CAAC;YACF,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,MAAM,IAAI,YAAY,CACpB,uEAAuE,CACxE,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,OAAO,CAAC,qBAAqB,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IACrE,OAAO,OAAO,CAAC,qBAAqB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,OAAkC,EAClC,oBAAsD,EACtD,IAAqD,EACrD,WAA+B,EAC/B,aAAsB;IAEtB,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,YAAY,CAAC,yBAAyB,CAAC,CAAC;IACpD,CAAC;IAED,0BAA0B;IAC1B,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,IAAI,oBAAoB,EAAE,CAAC;YACzB,MAAM,SAAS,GAAG,MAAM,oBAAoB,CAAC,SAAS,CACpD,IAAI,CAAC,UAAU,EACf,WAAW,CACZ,CAAC;YACF,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,MAAM,IAAI,YAAY,CACpB,wEAAwE,CACzE,CAAC;YACJ,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAC/C,IAAI,CAAC,UAAU,EACf,WAAW,CACZ,CAAC;YACF,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,MAAM,IAAI,YAAY,CACpB,wEAAwE,CACzE,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,8DAA8D;IAC9D,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACtE,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,OAAO,CAAC,gBAAgB,CAAC,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;IACjE,CAAC;IAED,MAAM,OAAO,CAAC,gBAAgB,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;IAEtE,2BAA2B;IAC3B,MAAM,OAAO,CAAC,eAAe,CAC3B,IAAI,CAAC,UAAU,EACf,IAAI,CAAC,eAAe,EACpB,OAAO,EACP,WAAW,CACZ,CAAC;IAEF,OAAO,OAAO,CAAC,qBAAqB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;AACxD,CAAC"}

package/dist/src/graphql/auth/schema.graphql

@@ -1,195 +0,0 @@
-# Auth Subgraph Schema
-# Contains all document permission and authorization related types
-
-scalar DateTime
-
-# Permission levels for documents
-enum DocumentPermissionLevel {
-  # Can fetch and read the document
-  READ
-  # Can push updates and modify the document
-  WRITE
-  # Can manage document permissions and settings
-  ADMIN
-}
-
-# Document permission entry
-type DocumentPermissionEntry {
-  documentId: String!
-  userAddress: String!
-  permission: DocumentPermissionLevel!
-  grantedBy: String!
-  createdAt: DateTime!
-  updatedAt: DateTime!
-}
-
-# Group type
-type Group {
-  id: Int!
-  name: String!
-  description: String
-  createdAt: DateTime!
-  updatedAt: DateTime!
-  members: [String!]!
-}
-
-# Document group permission entry
-type DocumentGroupPermission {
-  documentId: String!
-  groupId: Int!
-  group: Group!
-  permission: DocumentPermissionLevel!
-  grantedBy: String!
-  createdAt: DateTime!
-  updatedAt: DateTime!
-}
-
-# Operation user permission entry
-type OperationUserPermission {
-  documentId: String!
-  operationType: String!
-  userAddress: String!
-  grantedBy: String!
-  createdAt: DateTime!
-}
-
-# Operation group permission entry
-type OperationGroupPermission {
-  documentId: String!
-  operationType: String!
-  groupId: Int!
-  group: Group!
-  grantedBy: String!
-  createdAt: DateTime!
-}
-
-# Combined document access info
-type DocumentAccessInfo {
-  documentId: String!
-  permissions: [DocumentPermissionEntry!]!
-  groupPermissions: [DocumentGroupPermission!]!
-}
-
-# Operation permissions info
-type OperationPermissionsInfo {
-  documentId: String!
-  operationType: String!
-  userPermissions: [OperationUserPermission!]!
-  groupPermissions: [OperationGroupPermission!]!
-}
-
-# Document protection info
-type DocumentProtectionInfo {
-  documentId: String!
-  protected: Boolean!
-  ownerAddress: String
-}
-
-type Query {
-  # Get permissions for a document
-  documentAccess(documentId: String!): DocumentAccessInfo!
-
-  # Get protection status for a document
-  documentProtection(documentId: String!): DocumentProtectionInfo!
-
-  # Get all documents the current user has explicit access to
-  userDocumentPermissions: [DocumentPermissionEntry!]!
-
-  # Get all groups
-  groups: [Group!]!
-
-  # Get a specific group by ID
-  group(id: Int!): Group
-
-  # Get all groups a user belongs to
-  userGroups(userAddress: String!): [Group!]!
-
-  # Get operation permissions for a document and operation type
-  operationPermissions(
-    documentId: String!
-    operationType: String!
-  ): OperationPermissionsInfo!
-
-  # Check if the current user can execute a specific operation on a document
-  canExecuteOperation(documentId: String!, operationType: String!): Boolean!
-}
-
-type Mutation {
-  # Set document protection status (requires ADMIN permission or global admin)
-  setDocumentProtection(
-    documentId: String!
-    protected: Boolean!
-  ): DocumentProtectionInfo!
-
-  # Transfer document ownership (requires ADMIN permission or global admin)
-  transferDocumentOwnership(
-    documentId: String!
-    newOwnerAddress: String!
-  ): DocumentProtectionInfo!
-
-  # Grant a user permission on a document (requires ADMIN permission or global admin)
-  grantDocumentPermission(
-    documentId: String!
-    userAddress: String!
-    permission: DocumentPermissionLevel!
-  ): DocumentPermissionEntry!
-
-  # Revoke a user's permission on a document (requires ADMIN permission or global admin)
-  revokeDocumentPermission(documentId: String!, userAddress: String!): Boolean!
-
-  # --- Group Management ---
-
-  # Create a new group
-  createGroup(name: String!, description: String): Group!
-
-  # Delete a group and all its associations
-  deleteGroup(id: Int!): Boolean!
-
-  # Add a user to a group
-  addUserToGroup(userAddress: String!, groupId: Int!): Boolean!
-
-  # Remove a user from a group
-  removeUserFromGroup(userAddress: String!, groupId: Int!): Boolean!
-
-  # --- Group Document Permissions ---
-
-  # Grant a group permission on a document
-  grantGroupPermission(
-    documentId: String!
-    groupId: Int!
-    permission: DocumentPermissionLevel!
-  ): DocumentGroupPermission!
-
-  # Revoke a group's permission on a document
-  revokeGroupPermission(documentId: String!, groupId: Int!): Boolean!
-
-  # --- Operation Permissions ---
-
-  # Grant a user permission to execute an operation on a document
-  grantOperationPermission(
-    documentId: String!
-    operationType: String!
-    userAddress: String!
-  ): OperationUserPermission!
-
-  # Revoke a user's permission to execute an operation
-  revokeOperationPermission(
-    documentId: String!
-    operationType: String!
-    userAddress: String!
-  ): Boolean!
-
-  # Grant a group permission to execute an operation on a document
-  grantGroupOperationPermission(
-    documentId: String!
-    operationType: String!
-    groupId: Int!
-  ): OperationGroupPermission!
-
-  # Revoke a group's permission to execute an operation
-  revokeGroupOperationPermission(
-    documentId: String!
-    operationType: String!
-    groupId: Int!
-  ): Boolean!
-}

package/dist/src/graphql/auth/subgraph.d.ts

@@ -1,202 +0,0 @@
-import { BaseSubgraph } from "../base-subgraph.js";
-import type { SubgraphArgs } from "../types.js";
-import * as resolvers from "./resolvers.js";
-/**
- * Auth Subgraph - handles all document permission and authorization operations
- *
- * This subgraph is conditionally registered based on the DOCUMENT_PERMISSIONS_ENABLED
- * feature flag. When enabled, it provides GraphQL operations for:
- * - Document permissions (grant/revoke user access)
- * - Group management (create/delete groups, manage membership)
- * - Group document permissions (grant/revoke group access)
- * - Operation-level permissions (fine-grained operation control)
- */
-export declare class AuthSubgraph extends BaseSubgraph {
-    private logger;
-    constructor(args: SubgraphArgs);
-    name: string;
-    hasSubscriptions: boolean;
-    typeDefs: import("graphql").DocumentNode;
-    resolvers: {
-        Query: {
-            documentAccess: (_parent: unknown, args: {
-                documentId: string;
-            }) => Promise<resolvers.DocumentAccessInfo>;
-            userDocumentPermissions: (_parent: unknown, _args: unknown, ctx: {
-                user?: {
-                    address: string;
-                };
-            }) => Promise<{
-                documentId: string;
-                userAddress: string;
-                permission: import("../../utils/db.js").DocumentPermissionLevel;
-                grantedBy: string;
-                createdAt: Date;
-                updatedAt: Date;
-            }[]>;
-            groups: () => Promise<resolvers.Group[]>;
-            group: (_parent: unknown, args: {
-                id: number;
-            }) => Promise<resolvers.Group | null>;
-            userGroups: (_parent: unknown, args: {
-                userAddress: string;
-            }) => Promise<resolvers.Group[]>;
-            operationPermissions: (_parent: unknown, args: {
-                documentId: string;
-                operationType: string;
-            }) => Promise<resolvers.OperationPermissionsInfo>;
-            canExecuteOperation: (_parent: unknown, args: {
-                documentId: string;
-                operationType: string;
-            }, ctx: {
-                user?: {
-                    address: string;
-                };
-            }) => Promise<boolean>;
-            documentProtection: (_parent: unknown, args: {
-                documentId: string;
-            }, ctx: {
-                user?: {
-                    address: string;
-                };
-            }) => Promise<resolvers.DocumentProtectionInfo>;
-        };
-        Mutation: {
-            setDocumentProtection: (_parent: unknown, args: {
-                documentId: string;
-                protected: boolean;
-            }, ctx: {
-                user?: {
-                    address: string;
-                };
-                isAdmin?: (address: string) => boolean;
-            }) => Promise<resolvers.DocumentProtectionInfo>;
-            transferDocumentOwnership: (_parent: unknown, args: {
-                documentId: string;
-                newOwnerAddress: string;
-            }, ctx: {
-                user?: {
-                    address: string;
-                };
-                isAdmin?: (address: string) => boolean;
-            }) => Promise<resolvers.DocumentProtectionInfo>;
-            grantDocumentPermission: (_parent: unknown, args: {
-                documentId: string;
-                userAddress: string;
-                permission: string;
-            }, ctx: {
-                user?: {
-                    address: string;
-                };
-                isAdmin?: (address: string) => boolean;
-            }) => Promise<{
-                documentId: string;
-                userAddress: string;
-                permission: import("../../utils/db.js").DocumentPermissionLevel;
-                grantedBy: string;
-                createdAt: Date;
-                updatedAt: Date;
-            }>;
-            revokeDocumentPermission: (_parent: unknown, args: {
-                documentId: string;
-                userAddress: string;
-            }, ctx: {
-                user?: {
-                    address: string;
-                };
-                isAdmin?: (address: string) => boolean;
-            }) => Promise<boolean>;
-            createGroup: (_parent: unknown, args: {
-                name: string;
-                description?: string | null;
-            }) => Promise<resolvers.Group>;
-            deleteGroup: (_parent: unknown, args: {
-                id: number;
-            }) => Promise<boolean>;
-            addUserToGroup: (_parent: unknown, args: {
-                userAddress: string;
-                groupId: number;
-            }) => Promise<boolean>;
-            removeUserFromGroup: (_parent: unknown, args: {
-                userAddress: string;
-                groupId: number;
-            }) => Promise<boolean>;
-            grantGroupPermission: (_parent: unknown, args: {
-                documentId: string;
-                groupId: number;
-                permission: string;
-            }, ctx: {
-                user?: {
-                    address: string;
-                };
-                isAdmin?: (address: string) => boolean;
-            }) => Promise<resolvers.DocumentGroupPermission>;
-            revokeGroupPermission: (_parent: unknown, args: {
-                documentId: string;
-                groupId: number;
-            }, ctx: {
-                user?: {
-                    address: string;
-                };
-                isAdmin?: (address: string) => boolean;
-            }) => Promise<boolean>;
-            grantOperationPermission: (_parent: unknown, args: {
-                documentId: string;
-                operationType: string;
-                userAddress: string;
-            }, ctx: {
-                user?: {
-                    address: string;
-                };
-                isAdmin?: (address: string) => boolean;
-            }) => Promise<resolvers.OperationUserPermission>;
-            revokeOperationPermission: (_parent: unknown, args: {
-                documentId: string;
-                operationType: string;
-                userAddress: string;
-            }, ctx: {
-                user?: {
-                    address: string;
-                };
-                isAdmin?: (address: string) => boolean;
-            }) => Promise<boolean>;
-            grantGroupOperationPermission: (_parent: unknown, args: {
-                documentId: string;
-                operationType: string;
-                groupId: number;
-            }, ctx: {
-                user?: {
-                    address: string;
-                };
-                isAdmin?: (address: string) => boolean;
-            }) => Promise<resolvers.OperationGroupPermission>;
-            revokeGroupOperationPermission: (_parent: unknown, args: {
-                documentId: string;
-                operationType: string;
-                groupId: number;
-            }, ctx: {
-                user?: {
-                    address: string;
-                };
-                isAdmin?: (address: string) => boolean;
-            }) => Promise<boolean>;
-        };
-        Group: {
-            members: (parent: {
-                id: number;
-            }) => Promise<string[]>;
-        };
-        DocumentGroupPermission: {
-            group: (parent: {
-                groupId: number;
-            }) => Promise<resolvers.Group>;
-        };
-        OperationGroupPermission: {
-            group: (parent: {
-                groupId: number;
-            }) => Promise<resolvers.Group>;
-        };
-    };
-    onSetup(): Promise<void>;
-}
-//# sourceMappingURL=subgraph.d.ts.map

package/dist/src/graphql/auth/subgraph.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"subgraph.d.ts","sourceRoot":"","sources":["../../../../src/graphql/auth/subgraph.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,KAAK,SAAS,MAAM,gBAAgB,CAAC;AAK5C;;;;;;;;;GASG;AACH,qBAAa,YAAa,SAAQ,YAAY;IAC5C,OAAO,CAAC,MAAM,CAAuC;gBAEzC,IAAI,EAAE,YAAY;IAK9B,IAAI,SAAU;IACd,gBAAgB,UAAS;IAGzB,QAAQ,iCAEN;IAEF,SAAS;;sCAGM,OAAO,QACV;gBAAE,UAAU,EAAE,MAAM,CAAA;aAAE;+CAkBnB,OAAO,SACT,OAAO,OACT;gBACH,IAAI,CAAC,EAAE;oBAAE,OAAO,EAAE,MAAM,CAAA;iBAAE,CAAC;aAC5B;;;;;;;;;6BAiCoB,OAAO,QAAQ;gBAAE,EAAE,EAAE,MAAM,CAAA;aAAE;kCAaxB,OAAO,QAAQ;gBAAE,WAAW,EAAE,MAAM,CAAA;aAAE;4CAiBvD,OAAO,QACV;gBAAE,UAAU,EAAE,MAAM,CAAC;gBAAC,aAAa,EAAE,MAAM,CAAA;aAAE;2CAkB1C,OAAO,QACV;gBAAE,UAAU,EAAE,MAAM,CAAC;gBAAC,aAAa,EAAE,MAAM,CAAA;aAAE,OAC9C;gBAAE,IAAI,CAAC,EAAE;oBAAE,OAAO,EAAE,MAAM,CAAA;iBAAE,CAAA;aAAE;0CAmB1B,OAAO,QACV;gBAAE,UAAU,EAAE,MAAM,CAAA;aAAE,OACvB;gBACH,IAAI,CAAC,EAAE;oBAAE,OAAO,EAAE,MAAM,CAAA;iBAAE,CAAC;aAC5B;;;6CAyBQ,OAAO,QACV;gBAAE,UAAU,EAAE,MAAM,CAAC;gBAAC,SAAS,EAAE,OAAO,CAAA;aAAE,OAC3C;gBACH,IAAI,CAAC,EAAE;oBAAE,OAAO,EAAE,MAAM,CAAA;iBAAE,CAAC;gBAC3B,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC;aACxC;iDAsBQ,OAAO,QACV;gBAAE,UAAU,EAAE,MAAM,CAAC;gBAAC,eAAe,EAAE,MAAM,CAAA;aAAE,OAChD;gBACH,IAAI,CAAC,EAAE;oBAAE,OAAO,EAAE,MAAM,CAAA;iBAAE,CAAC;gBAC3B,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC;aACxC;+CAsBQ,OAAO,QACV;gBAAE,UAAU,EAAE,MAAM,CAAC;gBAAC,WAAW,EAAE,MAAM,CAAC;gBAAC,UAAU,EAAE,MAAM,CAAA;aAAE,OAChE;gBACH,IAAI,CAAC,EAAE;oBAAE,OAAO,EAAE,MAAM,CAAA;iBAAE,CAAC;gBAC3B,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC;aACxC;;;;;;;;gDAyBQ,OAAO,QACV;gBAAE,UAAU,EAAE,MAAM,CAAC;gBAAC,WAAW,EAAE,MAAM,CAAA;aAAE,OAC5C;gBACH,IAAI,CAAC,EAAE;oBAAE,OAAO,EAAE,MAAM,CAAA;iBAAE,CAAC;gBAC3B,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC;aACxC;mCAsBQ,OAAO,QACV;gBAAE,IAAI,EAAE,MAAM,CAAC;gBAAC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;aAAE;mCAiBxB,OAAO,QAAQ;gBAAE,EAAE,EAAE,MAAM,CAAA;aAAE;sCAiB/C,OAAO,QACV;gBAAE,WAAW,EAAE,MAAM,CAAC;gBAAC,OAAO,EAAE,MAAM,CAAA;aAAE;2CAkBrC,OAAO,QACV;gBAAE,WAAW,EAAE,MAAM,CAAC;gBAAC,OAAO,EAAE,MAAM,CAAA;aAAE;4CAmBrC,OAAO,QACV;gBAAE,UAAU,EAAE,MAAM,CAAC;gBAAC,OAAO,EAAE,MAAM,CAAC;gBAAC,UAAU,EAAE,MAAM,CAAA;aAAE,OAC5D;gBACH,IAAI,CAAC,EAAE;oBAAE,OAAO,EAAE,MAAM,CAAA;iBAAE,CAAC;gBAC3B,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC;aACxC;6CAyBQ,OAAO,QACV;gBAAE,UAAU,EAAE,MAAM,CAAC;gBAAC,OAAO,EAAE,MAAM,CAAA;aAAE,OACxC;gBACH,IAAI,CAAC,EAAE;oBAAE,OAAO,EAAE,MAAM,CAAA;iBAAE,CAAC;gBAC3B,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC;aACxC;gDAsBQ,OAAO,QACV;gBACJ,UAAU,EAAE,MAAM,CAAC;gBACnB,aAAa,EAAE,MAAM,CAAC;gBACtB,WAAW,EAAE,MAAM,CAAC;aACrB,OACI;gBACH,IAAI,CAAC,EAAE;oBAAE,OAAO,EAAE,MAAM,CAAA;iBAAE,CAAC;gBAC3B,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC;aACxC;iDAqBQ,OAAO,QACV;gBACJ,UAAU,EAAE,MAAM,CAAC;gBACnB,aAAa,EAAE,MAAM,CAAC;gBACtB,WAAW,EAAE,MAAM,CAAC;aACrB,OACI;gBACH,IAAI,CAAC,EAAE;oBAAE,OAAO,EAAE,MAAM,CAAA;iBAAE,CAAC;gBAC3B,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC;aACxC;qDAqBQ,OAAO,QACV;gBAAE,UAAU,EAAE,MAAM,CAAC;gBAAC,aAAa,EAAE,MAAM,CAAC;gBAAC,OAAO,EAAE,MAAM,CAAA;aAAE,OAC/D;gBACH,IAAI,CAAC,EAAE;oBAAE,OAAO,EAAE,MAAM,CAAA;iBAAE,CAAC;gBAC3B,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC;aACxC;sDAqBQ,OAAO,QACV;gBAAE,UAAU,EAAE,MAAM,CAAC;gBAAC,aAAa,EAAE,MAAM,CAAC;gBAAC,OAAO,EAAE,MAAM,CAAA;aAAE,OAC/D;gBACH,IAAI,CAAC,EAAE;oBAAE,OAAO,EAAE,MAAM,CAAA;iBAAE,CAAC;gBAC3B,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC;aACxC;;;8BAuBqB;gBAAE,EAAE,EAAE,MAAM,CAAA;aAAE;;;4BAYhB;gBAAE,OAAO,EAAE,MAAM,CAAA;aAAE;;;4BAenB;gBAAE,OAAO,EAAE,MAAM,CAAA;aAAE;;MAa3C;IAEF,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;CAIzB"}