@powerhousedao/reactor-api 6.0.2-staging.2 → 6.0.2-staging.3

package/dist/src/server.js

@@ -1,365 +0,0 @@
-import { PostgresAnalyticsStore } from "@powerhousedao/analytics-engine-pg";
-import { getConfig } from "@powerhousedao/config/node";
-import { setupMcpServer } from "@powerhousedao/reactor-mcp";
-import devcert from "devcert";
-import { childLogger, createRelationalDbLegacy } from "document-drive";
-import express from "express";
-import fs from "node:fs";
-import https from "node:https";
-import path from "node:path";
-import { WebSocketServer } from "ws";
-import { config, DefaultCoreSubgraphs } from "./config.js";
-import { AuthSubgraph } from "./graphql/auth/subgraph.js";
-import { GraphQLManager } from "./graphql/graphql-manager.js";
-import { renderGraphqlPlayground } from "./graphql/playground.js";
-import { ReactorSubgraph } from "./graphql/reactor/subgraph.js";
-import { runMigrations } from "./migrations/index.js";
-import { ImportPackageLoader } from "./packages/import-loader.js";
-import { PackageManager } from "./packages/package-manager.js";
-import { AuthService } from "./services/auth.service.js";
-import { AuthorizationService } from "./services/authorization.service.js";
-import { DocumentPermissionService } from "./services/document-permission.service.js";
-import { initTracing, isTracingEnabled, trace } from "./tracing.js";
-import { getDbClient, initAnalyticsStoreSql, } from "./utils/db.js";
-const defaultLogger = childLogger(["reactor-api", "server"]);
-const DEFAULT_PORT = 4000;
-/**
- * Sets up the Express app with necessary routes
- */
-function setupGraphQlExplorer(router) {
-    router.get("/explorer/:endpoint?", (req, res) => {
-        res.setHeader("Content-Type", "text/html");
-        const endpoint = req.params.endpoint !== undefined
-            ? `/${req.params.endpoint}`
-            : "/graphql";
-        const { query } = req.query;
-        if (query && typeof query !== "string") {
-            throw new Error("Invalid query");
-        }
-        res.send(renderGraphqlPlayground(endpoint, query));
-    });
-}
-/**
- * Initializes the database and analytics store
- */
-async function initializeDatabaseAndAnalytics(dbPath) {
-    const { db, knex } = getDbClient(dbPath);
-    const relationalDb = createRelationalDbLegacy(db);
-    const analyticsStore = new PostgresAnalyticsStore({
-        knex,
-    });
-    for (const sql of initAnalyticsStoreSql) {
-        await knex.raw(sql);
-    }
-    return { relationalDb, analyticsStore };
-}
-/**
- * Sets up the subgraph manager and registers subgraphs
- */
-async function setupGraphQLManager(app, httpServer, wsServer, client, relationalDb, analyticsStore, syncManager, subgraphs, logger, auth, documentPermissionService, enableDocumentModelSubgraphs, port, authorizationService) {
-    const graphqlManager = new GraphQLManager(config.basePath, app, httpServer, wsServer, client, relationalDb, analyticsStore, syncManager, logger, {
-        enabled: auth?.enabled ?? false,
-        admins: auth?.admins ?? [],
-    }, documentPermissionService, {
-        enableDocumentModelSubgraphs,
-    }, port, authorizationService);
-    await graphqlManager.init(subgraphs.core);
-    for (const [, collection] of subgraphs.extended.entries()) {
-        for (const subgraph of collection) {
-            await graphqlManager.registerSubgraph(subgraph, "graphql");
-        }
-    }
-    await graphqlManager.updateRouter();
-    return graphqlManager;
-}
-/**
- * Sets up event listeners for package manager changes
- */
-function setupEventListeners(pkgManager, graphqlManager, reactorProcessorManager, module) {
-    pkgManager.onDocumentModelsChange(async () => {
-        await graphqlManager.updateRouter();
-    });
-    pkgManager.onSubgraphsChange(async (packagedSubgraphs) => {
-        for (const [, subgraphs] of packagedSubgraphs) {
-            for (const subgraph of subgraphs) {
-                await graphqlManager.registerSubgraph(subgraph, "graphql");
-            }
-        }
-        await graphqlManager.updateRouter();
-    });
-    pkgManager.onProcessorsChange(async (processors) => {
-        for (const [packageName, fns] of processors) {
-            await reactorProcessorManager.unregisterFactory(packageName);
-            const factories = fns.map((fn) => fn(module));
-            const validFactories = factories.filter((factory) => factory !== null && typeof factory === "function");
-            if (!validFactories.length) {
-                continue;
-            }
-            await reactorProcessorManager.registerFactory(packageName, async (driveHeader) => (await Promise.all(validFactories.map(async (factory) => {
-                try {
-                    const result = await factory(driveHeader);
-                    return result;
-                }
-                catch (e) {
-                    const logger = defaultLogger;
-                    logger.error(`Error creating processor for drive ${driveHeader.id}:`, e);
-                    return [];
-                }
-            }))).flat());
-        }
-    });
-}
-/**
- * Starts the server (HTTP or HTTPS) and attaches WebSocket server
- */
-async function startServer(app, port, httpsOptions, logger) {
-    let httpServer;
-    if (httpsOptions) {
-        const currentDir = process.cwd();
-        if (typeof httpsOptions === "object") {
-            httpServer = https.createServer({
-                key: fs.readFileSync(path.join(currentDir, httpsOptions.keyPath)),
-                cert: fs.readFileSync(path.join(currentDir, httpsOptions.certPath)),
-            }, app);
-        }
-        else {
-            try {
-                const { cert, key } = (await devcert.certificateFor("localhost"));
-                if (!cert || !key) {
-                    throw new Error("Invalid certificate generated");
-                }
-                httpServer = https.createServer({ cert, key }, app);
-            }
-            catch (err) {
-                console.error("Failed to get HTTPS certificate:", err);
-                throw new Error("Failed to start HTTPS server");
-            }
-        }
-        httpServer.listen(port);
-    }
-    else {
-        httpServer = app.listen(port);
-    }
-    const wsServer = new WebSocketServer({
-        server: httpServer,
-        path: "/graphql/subscriptions",
-    });
-    logger.info("WebSocket server available at /graphql/subscriptions");
-    return { httpServer, wsServer };
-}
-/**
- * Private helper function that sets up common infrastructure before API initialization.
- * This includes auth configuration, database setup, and package manager initialization.
- */
-async function _setupCommonInfrastructure(options) {
-    // Initialize OpenTelemetry tracing
-    if (isTracingEnabled()) {
-        await initTracing();
-    }
-    const port = options.port ?? DEFAULT_PORT;
-    const app = options.express ?? express();
-    // Setup auth configuration
-    let admins = [];
-    let authEnabled = false;
-    if (options.configFile) {
-        const config = getConfig(options.configFile);
-        admins = config.auth?.admins?.map((a) => a.toLowerCase()) ?? [];
-        authEnabled = config.auth?.enabled ?? false;
-    }
-    else if (options.auth) {
-        admins = options.auth?.admins?.map((a) => a.toLowerCase()) ?? [];
-        authEnabled = options.auth?.enabled ?? false;
-    }
-    const { AUTH_ENABLED, ADMINS, DEFAULT_PROTECTION, DOCUMENT_PERMISSIONS_ENABLED, SKIP_CREDENTIAL_VERIFICATION, } = process.env;
-    if (AUTH_ENABLED !== undefined) {
-        authEnabled = AUTH_ENABLED === "true";
-    }
-    if (ADMINS !== undefined) {
-        admins = ADMINS.split(",").map((a) => a.toLowerCase());
-    }
-    let defaultProtection = false;
-    if (DEFAULT_PROTECTION !== undefined) {
-        defaultProtection = DEFAULT_PROTECTION.toLowerCase() === "true";
-    }
-    // Warn about deprecated env vars
-    const { USERS, GUESTS, FREE_ENTRY } = process.env;
-    if (USERS || GUESTS || FREE_ENTRY) {
-        console.warn("[DEPRECATION WARNING] The USERS, GUESTS, and FREE_ENTRY environment variables are no longer supported. " +
-            "Access control is now managed per-document via the DocumentProtection system. " +
-            "Use DEFAULT_PROTECTION=true for strict mode, or manage protection per document via the GraphQL API. " +
-            "See the auth documentation for migration guidance.");
-    }
-    let skipCredentialVerification = false;
-    if (SKIP_CREDENTIAL_VERIFICATION !== undefined) {
-        skipCredentialVerification = SKIP_CREDENTIAL_VERIFICATION === "true";
-    }
-    // Health check endpoint (before auth middleware)
-    app.get("/health", (_req, res) => {
-        res.status(200).send("OK");
-    });
-    const logger = options.logger ?? defaultLogger;
-    // add auth middleware if auth is enabled
-    if (authEnabled) {
-        logger.info("Setting up Auth middleware");
-        const authService = new AuthService({
-            enabled: authEnabled,
-            admins,
-            skipCredentialVerification,
-        });
-        // Apply auth middleware to all routes including GraphQL
-        app.use((req, res, next) => {
-            authService.authenticate(req, res, next);
-        });
-    }
-    const defaultRouter = express.Router();
-    setupGraphQlExplorer(defaultRouter);
-    app.use(config.basePath, defaultRouter);
-    // Initialize database and analytics store
-    const { relationalDb, analyticsStore } = await trace("reactor-api.init.database", { tags: { "resource.name": "database" } }, () => initializeDatabaseAndAnalytics(options.dbPath));
-    // Use provided document permission service, or create one if env var is set
-    let documentPermissionService = options.documentPermissionService;
-    if (!documentPermissionService && DOCUMENT_PERMISSIONS_ENABLED === "true") {
-        const { db } = getDbClient(options.dbPath);
-        // Run document permission migrations
-        await runMigrations(db);
-        logger.info("Document permission migrations completed");
-        documentPermissionService = new DocumentPermissionService(db, { defaultProtection });
-        logger.info("Document permission service initialized");
-    }
-    // Create AuthorizationService when document permission service is available
-    let authorizationService;
-    if (documentPermissionService) {
-        authorizationService = new AuthorizationService(documentPermissionService, {
-            admins,
-            defaultProtection,
-        });
-        logger.info("Authorization service initialized");
-    }
-    // Initialize package manager
-    const packageLoader = options.packageLoader ?? new ImportPackageLoader();
-    const loaders = [packageLoader];
-    const packages = new PackageManager(loaders, {
-        configFile: options.configFile,
-        packages: options.packages ?? [],
-    });
-    return {
-        port,
-        app,
-        auth: {
-            enabled: authEnabled,
-            admins,
-        },
-        relationalDb,
-        analyticsStore,
-        documentPermissionService,
-        authorizationService,
-        packages,
-    };
-}
-/**
- * Private helper function containing common setup logic for API initialization
- */
-async function _setupAPI(reactorClient, syncManager, reactorProcessorManager, app, port, packages, relationalDb, analyticsStore, documentPermissionService, processors, subgraphs, options, auth, processorApp, authorizationService) {
-    const module = {
-        relationalDb,
-        analyticsStore,
-        processorApp,
-        config: options.processorConfig,
-    };
-    const mcpServerEnabled = options.mcp ?? true;
-    const logger = options.logger ?? defaultLogger;
-    // initialize processors
-    for (const [packageName, fns] of [
-        ...processors.entries(),
-        ...Object.entries(options.processors ?? {}),
-    ]) {
-        const factories = fns.map((fn) => {
-            try {
-                return fn(module);
-            }
-            catch (e) {
-                logger.error(`Error initializing processor factory for package ${packageName}:`, e);
-                return null;
-            }
-        });
-        const validFactories = factories.filter((factory) => factory !== null && typeof factory === "function");
-        if (!validFactories.length) {
-            continue;
-        }
-        // Register with the reactor ProcessorManager
-        // Cast the results to ReactorProcessorRecord since the loaded factories
-        // implement the reactor interface
-        await reactorProcessorManager.registerFactory(packageName, async (driveHeader) => (await Promise.all(validFactories.map(async (factory) => {
-            try {
-                const result = await factory(driveHeader);
-                return result;
-            }
-            catch (e) {
-                logger.error(`Error creating processor for drive ${driveHeader.id}:`, e);
-                return [];
-            }
-        }))).flat());
-    }
-    // Start the server
-    const { httpServer, wsServer } = await startServer(app, port, options.https, logger);
-    // set up subgraph manager
-    const coreSubgraphs = DefaultCoreSubgraphs.slice();
-    coreSubgraphs.push(ReactorSubgraph);
-    // Register Auth subgraph when document permission service is available
-    if (documentPermissionService) {
-        coreSubgraphs.push(AuthSubgraph);
-        logger.info("Auth subgraph registered (document permissions enabled)");
-    }
-    const graphqlManager = await setupGraphQLManager(app, httpServer, wsServer, reactorClient, relationalDb, analyticsStore, syncManager, {
-        extended: subgraphs,
-        core: coreSubgraphs,
-    }, logger.child(["graphql-manager"]), auth, documentPermissionService, options.enableDocumentModelSubgraphs, port, authorizationService);
-    // Set up event listeners
-    setupEventListeners(packages, graphqlManager, reactorProcessorManager, module);
-    if (mcpServerEnabled) {
-        await setupMcpServer({ client: reactorClient, syncManager }, app);
-        logger.info(`MCP server available at http://localhost:${port}/mcp`);
-    }
-    return {
-        app,
-        graphqlManager,
-        packages,
-    };
-}
-/**
- * Initializes and starts the API server using an initializer function.
- * This function first loads packages to get document models, then calls the initializer function
- * to create the reactor client module with the appropriate dependencies.
- *
- * @param clientInitializer - Initializer function that creates the reactor client module with document models.
- * @param options - Additional options for server configuration.
- *
- * @returns The API server components along with the created client instances.
- */
-export async function initializeAndStartAPI(clientInitializer, options, processorApp) {
-    const { port, app, auth, relationalDb, analyticsStore, documentPermissionService, authorizationService, packages, } = await trace("reactor-api.setup.infrastructure", { tags: { "resource.name": "infrastructure" } }, () => _setupCommonInfrastructure(options));
-    const { documentModels, processors, subgraphs } = await trace("reactor-api.packages.init", { tags: { "resource.name": "packages" } }, () => packages.init());
-    const reactorClientModule = await trace("reactor-api.reactor-client.init", { tags: { "resource.name": "reactor-client" } }, () => clientInitializer(documentModels));
-    // Extract client and syncManager from the module
-    const reactorClient = reactorClientModule.client;
-    const syncManager = reactorClientModule.reactorModule?.syncModule?.syncManager;
-    if (!syncManager) {
-        throw new Error("SyncManager not available from ReactorClientModule");
-    }
-    const reactorProcessorManager = reactorClientModule.reactorModule?.processorManager;
-    if (!reactorProcessorManager) {
-        throw new Error("ProcessorManager not available from ReactorClientModule");
-    }
-    const api = await _setupAPI(reactorClient, syncManager, reactorProcessorManager, app, port, packages, relationalDb, analyticsStore, documentPermissionService, processors, subgraphs, options, auth, processorApp, authorizationService);
-    const documentModelRegistry = reactorClientModule.reactorModule?.documentModelRegistry;
-    if (!documentModelRegistry) {
-        throw new Error("DocumentModelRegistry not available from ReactorClientModule");
-    }
-    return {
-        ...api,
-        client: reactorClient,
-        syncManager,
-        documentModelRegistry,
-    };
-}
-//# sourceMappingURL=server.js.map

package/dist/src/server.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"server.js","sourceRoot":"","sources":["../../src/server.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,sBAAsB,EAAE,MAAM,oCAAoC,CAAC;AAC5E,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AASvD,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,OAAO,MAAM,SAAS,CAAC;AAO9B,OAAO,EAAE,WAAW,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAGvE,OAAO,OAAO,MAAM,SAAS,CAAC;AAE9B,OAAO,EAAE,MAAM,SAAS,CAAC;AAEzB,OAAO,KAAK,MAAM,YAAY,CAAC;AAC/B,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,OAAO,EAAE,eAAe,EAAE,MAAM,IAAI,CAAC;AAGrC,OAAO,EAAE,MAAM,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAClE,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAEhE,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAE/D,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAC3E,OAAO,EAAE,yBAAyB,EAAE,MAAM,2CAA2C,CAAC;AACtF,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AAEpE,OAAO,EACL,WAAW,EACX,qBAAqB,GAEtB,MAAM,eAAe,CAAC;AAEvB,MAAM,aAAa,GAAG,WAAW,CAAC,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC,CAAC;AAoC7D,MAAM,YAAY,GAAG,IAAI,CAAC;AAC1B;;GAEG;AACH,SAAS,oBAAoB,CAAC,MAAsB;IAClD,MAAM,CAAC,GAAG,CAAC,sBAAsB,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC9C,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;QAC3C,MAAM,QAAQ,GACZ,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS;YAC/B,CAAC,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE;YAC3B,CAAC,CAAC,UAAU,CAAC;QAEjB,MAAM,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC;QAC5B,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;QACnC,CAAC;QAED,GAAG,CAAC,IAAI,CAAC,uBAAuB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,8BAA8B,CAC3C,MAA0B;IAK1B,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IACzC,MAAM,YAAY,GAAG,wBAAwB,CAAU,EAAE,CAAC,CAAC;IAC3D,MAAM,cAAc,GAAG,IAAI,sBAAsB,CAAC;QAChD,IAAI;KACL,CAAC,CAAC;IAEH,KAAK,MAAM,GAAG,IAAI,qBAAqB,EAAE,CAAC;QACxC,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACtB,CAAC;IAED,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,CAAC;AAC1C,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,mBAAmB,CAChC,GAAY,EACZ,UAAuB,EACvB,QAAyB,EACzB,MAAsB,EACtB,YAAiC,EACjC,cAA+B,EAC/B,WAAyB,EACzB,SAGC,EACD,MAAe,EACf,IAGC,EACD,yBAAqD,EACrD,4BAAsC,EACtC,IAAa,EACb,oBAA2C;IAE3C,MAAM,cAAc,GAAG,IAAI,cAAc,CACvC,MAAM,CAAC,QAAQ,EACf,GAAG,EACH,UAAU,EACV,QAAQ,EACR,MAAM,EACN,YAAY,EACZ,cAAc,EACd,WAAW,EACX,MAAM,EACN;QACE,OAAO,EAAE,IAAI,EAAE,OAAO,IAAI,KAAK;QAC/B,MAAM,EAAE,IAAI,EAAE,MAAM,IAAI,EAAE;KAC3B,EACD,yBAAyB,EACzB;QACE,4BAA4B;KAC7B,EACD,IAAI,EACJ,oBAAoB,CACrB,CAAC;IAEF,MAAM,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAE1C,KAAK,MAAM,CAAC,EAAE,UAAU,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;QAC1D,KAAK,MAAM,QAAQ,IAAI,UAAU,EAAE,CAAC;YAClC,MAAM,cAAc,CAAC,gBAAgB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IAED,MAAM,cAAc,CAAC,YAAY,EAAE,CAAC;IAEpC,OAAO,cAAc,CAAC;AACxB,CAAC;AAED;;GAEG;AACH,SAAS,mBAAmB,CAC1B,UAA0B,EAC1B,cAA8B,EAC9B,uBAAiD,EACjD,MAAkC;IAElC,UAAU,CAAC,sBAAsB,CAAC,KAAK,IAAI,EAAE;QAC3C,MAAM,cAAc,CAAC,YAAY,EAAE,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,UAAU,CAAC,iBAAiB,CAAC,KAAK,EAAE,iBAAiB,EAAE,EAAE;QACvD,KAAK,MAAM,CAAC,EAAE,SAAS,CAAC,IAAI,iBAAiB,EAAE,CAAC;YAC9C,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;gBACjC,MAAM,cAAc,CAAC,gBAAgB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC;QACD,MAAM,cAAc,CAAC,YAAY,EAAE,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,UAAU,CAAC,kBAAkB,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE;QACjD,KAAK,MAAM,CAAC,WAAW,EAAE,GAAG,CAAC,IAAI,UAAU,EAAE,CAAC;YAC5C,MAAM,uBAAuB,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC;YAE7D,MAAM,SAAS,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;YAE9C,MAAM,cAAc,GAAG,SAAS,CAAC,MAAM,CACrC,CAAC,OAAO,EAAqC,EAAE,CAC7C,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,UAAU,CACpD,CAAC;YAEF,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC;gBAC3B,SAAS;YACX,CAAC;YAED,MAAM,uBAAuB,CAAC,eAAe,CAC3C,WAAW,EACX,KAAK,EAAE,WAAW,EAAE,EAAE,CACpB,CACE,MAAM,OAAO,CAAC,GAAG,CACf,cAAc,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;gBACnC,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,CAAC;oBAC1C,OAAO,MAA6C,CAAC;gBACvD,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,MAAM,MAAM,GAAG,aAAa,CAAC;oBAC7B,MAAM,CAAC,KAAK,CACV,sCAAsC,WAAW,CAAC,EAAE,GAAG,EACvD,CAAC,CACF,CAAC;oBACF,OAAO,EAAE,CAAC;gBACZ,CAAC;YACH,CAAC,CAAC,CACH,CACF,CAAC,IAAI,EAAE,CACX,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,WAAW,CACxB,GAAY,EACZ,IAAY,EACZ,YAA8B,EAC9B,MAAe;IAEf,IAAI,UAAuB,CAAC;IAE5B,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAEjC,IAAI,OAAO,YAAY,KAAK,QAAQ,EAAE,CAAC;YACrC,UAAU,GAAG,KAAK,CAAC,YAAY,CAC7B;gBACE,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,OAAO,CAAC,CAAC;gBACjE,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAC;aACpE,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,IAAI,CAAC;gBACH,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,OAAO,CAAC,cAAc,CACjD,WAAW,CACZ,CAAe,CAAC;gBACjB,IAAI,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;oBAClB,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;gBACnD,CAAC;gBACD,UAAU,GAAG,KAAK,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,GAAG,CAAC,CAAC;YACtD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,KAAK,CAAC,kCAAkC,EAAE,GAAG,CAAC,CAAC;gBACvD,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;QACD,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;SAAM,CAAC;QACN,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,eAAe,CAAC;QACnC,MAAM,EAAE,UAAU;QAClB,IAAI,EAAE,wBAAwB;KAC/B,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,sDAAsD,CAAC,CAAC;IAEpE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;AAClC,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,0BAA0B,CAAC,OAAgB;IAaxD,mCAAmC;IACnC,IAAI,gBAAgB,EAAE,EAAE,CAAC;QACvB,MAAM,WAAW,EAAE,CAAC;IACtB,CAAC;IAED,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,YAAY,CAAC;IAC1C,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,IAAI,OAAO,EAAE,CAAC;IAEzC,2BAA2B;IAC3B,IAAI,MAAM,GAAa,EAAE,CAAC;IAC1B,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC7C,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;QAChE,WAAW,GAAG,MAAM,CAAC,IAAI,EAAE,OAAO,IAAI,KAAK,CAAC;IAC9C,CAAC;SAAM,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACxB,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;QACjE,WAAW,GAAG,OAAO,CAAC,IAAI,EAAE,OAAO,IAAI,KAAK,CAAC;IAC/C,CAAC;IACD,MAAM,EACJ,YAAY,EACZ,MAAM,EACN,kBAAkB,EAClB,4BAA4B,EAC5B,4BAA4B,GAC7B,GAAG,OAAO,CAAC,GAAG,CAAC;IAChB,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC/B,WAAW,GAAG,YAAY,KAAK,MAAM,CAAC;IACxC,CAAC;IACD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IACzD,CAAC;IAED,IAAI,iBAAiB,GAAG,KAAK,CAAC;IAC9B,IAAI,kBAAkB,KAAK,SAAS,EAAE,CAAC;QACrC,iBAAiB,GAAG,kBAAkB,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC;IAClE,CAAC;IAED,iCAAiC;IACjC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC;IAClD,IAAI,KAAK,IAAI,MAAM,IAAI,UAAU,EAAE,CAAC;QAClC,OAAO,CAAC,IAAI,CACV,yGAAyG;YACvG,gFAAgF;YAChF,sGAAsG;YACtG,oDAAoD,CACvD,CAAC;IACJ,CAAC;IAED,IAAI,0BAA0B,GAAG,KAAK,CAAC;IACvC,IAAI,4BAA4B,KAAK,SAAS,EAAE,CAAC;QAC/C,0BAA0B,GAAG,4BAA4B,KAAK,MAAM,CAAC;IACvE,CAAC;IAED,iDAAiD;IACjD,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QAC/B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,aAAa,CAAC;IAE/C,yCAAyC;IACzC,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QAC1C,MAAM,WAAW,GAAG,IAAI,WAAW,CAAC;YAClC,OAAO,EAAE,WAAW;YACpB,MAAM;YACN,0BAA0B;SAC3B,CAAC,CAAC;QAEH,wDAAwD;QACxD,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YACzB,WAAW,CAAC,YAAY,CAAC,GAA2B,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QACnE,CAAC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IACvC,oBAAoB,CAAC,aAAa,CAAC,CAAC;IACpC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;IAExC,0CAA0C;IAC1C,MAAM,EAAE,YAAY,EAAE,cAAc,EAAE,GAAG,MAAM,KAAK,CAClD,2BAA2B,EAC3B,EAAE,IAAI,EAAE,EAAE,eAAe,EAAE,UAAU,EAAE,EAAE,EACzC,GAAG,EAAE,CAAC,8BAA8B,CAAC,OAAO,CAAC,MAAM,CAAC,CACrD,CAAC;IAEF,4EAA4E;IAC5E,IAAI,yBAAyB,GAAG,OAAO,CAAC,yBAAyB,CAAC;IAClE,IAAI,CAAC,yBAAyB,IAAI,4BAA4B,KAAK,MAAM,EAAE,CAAC;QAC1E,MAAM,EAAE,EAAE,EAAE,GAAG,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC3C,qCAAqC;QACrC,MAAM,aAAa,CAAC,EAAqB,CAAC,CAAC;QAC3C,MAAM,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;QACxD,yBAAyB,GAAG,IAAI,yBAAyB,CACvD,EAAwC,EACxC,EAAE,iBAAiB,EAAE,CACtB,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;IACzD,CAAC;IAED,4EAA4E;IAC5E,IAAI,oBAAsD,CAAC;IAC3D,IAAI,yBAAyB,EAAE,CAAC;QAC9B,oBAAoB,GAAG,IAAI,oBAAoB,CAAC,yBAAyB,EAAE;YACzE,MAAM;YACN,iBAAiB;SAClB,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;IACnD,CAAC;IAED,6BAA6B;IAC7B,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,IAAI,mBAAmB,EAAE,CAAC;IACzE,MAAM,OAAO,GAAqB,CAAC,aAAa,CAAC,CAAC;IAElD,MAAM,QAAQ,GAAG,IAAI,cAAc,CAAC,OAAO,EAAE;QAC3C,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,EAAE;KACjC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI;QACJ,GAAG;QACH,IAAI,EAAE;YACJ,OAAO,EAAE,WAAW;YACpB,MAAM;SACP;QACD,YAAY;QACZ,cAAc;QACd,yBAAyB;QACzB,oBAAoB;QACpB,QAAQ;KACT,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,SAAS,CACtB,aAA6B,EAC7B,WAAyB,EACzB,uBAAiD,EACjD,GAAY,EACZ,IAAY,EACZ,QAAwB,EACxB,YAAiC,EACjC,cAA+B,EAC/B,yBAAgE,EAChE,UAGC,EACD,SAAuC,EACvC,OAAgB,EAChB,IAGC,EACD,YAA0B,EAC1B,oBAA2C;IAE3C,MAAM,MAAM,GAA+B;QACzC,YAAY;QACZ,cAAc;QACd,YAAY;QACZ,MAAM,EAAE,OAAO,CAAC,eAAe;KAChC,CAAC;IACF,MAAM,gBAAgB,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC;IAE7C,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,aAAa,CAAC;IAE/C,wBAAwB;IACxB,KAAK,MAAM,CAAC,WAAW,EAAE,GAAG,CAAC,IAAI;QAC/B,GAAG,UAAU,CAAC,OAAO,EAAE;QACvB,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC;KAC5C,EAAE,CAAC;QACF,MAAM,SAAS,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE;YAC/B,IAAI,CAAC;gBACH,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC;YACpB,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,MAAM,CAAC,KAAK,CACV,oDAAoD,WAAW,GAAG,EAClE,CAAC,CACF,CAAC;gBAEF,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,MAAM,cAAc,GAAG,SAAS,CAAC,MAAM,CACrC,CAAC,OAAO,EAAqC,EAAE,CAC7C,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,UAAU,CACpD,CAAC;QAEF,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC;YAC3B,SAAS;QACX,CAAC;QAED,6CAA6C;QAC7C,wEAAwE;QACxE,kCAAkC;QAClC,MAAM,uBAAuB,CAAC,eAAe,CAC3C,WAAW,EACX,KAAK,EAAE,WAAW,EAAE,EAAE,CACpB,CACE,MAAM,OAAO,CAAC,GAAG,CACf,cAAc,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;YACnC,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,CAAC;gBAC1C,OAAO,MAA6C,CAAC;YACvD,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,MAAM,CAAC,KAAK,CACV,sCAAsC,WAAW,CAAC,EAAE,GAAG,EACvD,CAAC,CACF,CAAC;gBAEF,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC,CAAC,CACH,CACF,CAAC,IAAI,EAAE,CACX,CAAC;IACJ,CAAC;IAED,mBAAmB;IACnB,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,MAAM,WAAW,CAChD,GAAG,EACH,IAAI,EACJ,OAAO,CAAC,KAAK,EACb,MAAM,CACP,CAAC;IAEF,0BAA0B;IAC1B,MAAM,aAAa,GAAoB,oBAAoB,CAAC,KAAK,EAAE,CAAC;IACpE,aAAa,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAEpC,uEAAuE;IACvE,IAAI,yBAAyB,EAAE,CAAC;QAC9B,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACjC,MAAM,CAAC,IAAI,CAAC,yDAAyD,CAAC,CAAC;IACzE,CAAC;IAED,MAAM,cAAc,GAAG,MAAM,mBAAmB,CAC9C,GAAG,EACH,UAAU,EACV,QAAQ,EACR,aAAa,EACb,YAAY,EACZ,cAAc,EACd,WAAW,EACX;QACE,QAAQ,EAAE,SAAS;QACnB,IAAI,EAAE,aAAa;KACpB,EACD,MAAM,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,CAAC,EACjC,IAAI,EACJ,yBAAyB,EACzB,OAAO,CAAC,4BAA4B,EACpC,IAAI,EACJ,oBAAoB,CACrB,CAAC;IAEF,yBAAyB;IACzB,mBAAmB,CACjB,QAAQ,EACR,cAAc,EACd,uBAAuB,EACvB,MAAM,CACP,CAAC;IAEF,IAAI,gBAAgB,EAAE,CAAC;QACrB,MAAM,cAAc,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,EAAE,GAAG,CAAC,CAAC;QAClE,MAAM,CAAC,IAAI,CAAC,4CAA4C,IAAI,MAAM,CAAC,CAAC;IACtE,CAAC;IAED,OAAO;QACL,GAAG;QACH,cAAc;QACd,QAAQ;KACT,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,iBAEiC,EACjC,OAAgB,EAChB,YAA0B;IAQ1B,MAAM,EACJ,IAAI,EACJ,GAAG,EACH,IAAI,EACJ,YAAY,EACZ,cAAc,EACd,yBAAyB,EACzB,oBAAoB,EACpB,QAAQ,GACT,GAAG,MAAM,KAAK,CACb,kCAAkC,EAClC,EAAE,IAAI,EAAE,EAAE,eAAe,EAAE,gBAAgB,EAAE,EAAE,EAC/C,GAAG,EAAE,CAAC,0BAA0B,CAAC,OAAO,CAAC,CAC1C,CAAC;IAEF,MAAM,EAAE,cAAc,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,MAAM,KAAK,CAC3D,2BAA2B,EAC3B,EAAE,IAAI,EAAE,EAAE,eAAe,EAAE,UAAU,EAAE,EAAE,EACzC,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,CACtB,CAAC;IAEF,MAAM,mBAAmB,GAAG,MAAM,KAAK,CACrC,iCAAiC,EACjC,EAAE,IAAI,EAAE,EAAE,eAAe,EAAE,gBAAgB,EAAE,EAAE,EAC/C,GAAG,EAAE,CAAC,iBAAiB,CAAC,cAAc,CAAC,CACxC,CAAC;IAEF,iDAAiD;IACjD,MAAM,aAAa,GAAG,mBAAmB,CAAC,MAAM,CAAC;IACjD,MAAM,WAAW,GACf,mBAAmB,CAAC,aAAa,EAAE,UAAU,EAAE,WAAW,CAAC;IAC7D,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IAED,MAAM,uBAAuB,GAC3B,mBAAmB,CAAC,aAAa,EAAE,gBAAgB,CAAC;IACtD,IAAI,CAAC,uBAAuB,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,SAAS,CACzB,aAAa,EACb,WAAW,EACX,uBAAuB,EACvB,GAAG,EACH,IAAI,EACJ,QAAQ,EACR,YAAY,EACZ,cAAc,EACd,yBAAyB,EACzB,UAAU,EACV,SAAS,EACT,OAAO,EACP,IAAI,EACJ,YAAY,EACZ,oBAAoB,CACrB,CAAC;IAEF,MAAM,qBAAqB,GACzB,mBAAmB,CAAC,aAAa,EAAE,qBAAqB,CAAC;IAC3D,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CACb,8DAA8D,CAC/D,CAAC;IACJ,CAAC;IAED,OAAO;QACL,GAAG,GAAG;QACN,MAAM,EAAE,aAAa;QACrB,WAAW;QACX,qBAAqB;KACtB,CAAC;AACJ,CAAC"}

package/dist/src/services/auth.service.d.ts

@@ -1,56 +0,0 @@
-import type { NextFunction, Request, Response } from "express";
-export interface AuthConfig {
-    enabled: boolean;
-    admins: string[];
-    cacheTtl?: number;
-    skipCredentialVerification?: boolean;
-}
-export interface User {
-    address: string;
-    chainId: number;
-    networkId: string;
-}
-export interface AuthenticatedRequest extends Request {
-    user?: User;
-    admins: string[];
-}
-export declare class AuthService {
-    private readonly config;
-    constructor(config: AuthConfig);
-    /**
-     * Middleware function to authenticate requests
-     */
-    authenticate(req: AuthenticatedRequest, res: Response, next: NextFunction): Promise<void>;
-    authenticateWebSocketConnection(connectionParams: Record<string, unknown>): Promise<User | null>;
-    /**
-     * Verify the auth bearer token
-     */
-    private verifyToken;
-    /**
-     * Extract user information from verification result
-     */
-    private extractUserFromVerification;
-    /**
-     * Get additional context fields for GraphQL
-     */
-    getAdditionalContextFields(): {
-        isAdmin: (address: string) => boolean;
-    };
-    /**
-     * Get user context for GraphQL
-     */
-    getUserContext(user?: User): {
-        user?: undefined;
-    } | {
-        user: {
-            address: string;
-            chainId: number;
-            networkId: string;
-        };
-    };
-    /**
-     * Verify that the credential still exists on the Renown API
-     */
-    private verifyCredentialExists;
-}
-//# sourceMappingURL=auth.service.d.ts.map

package/dist/src/services/auth.service.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth.service.d.ts","sourceRoot":"","sources":["../../../src/services/auth.service.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAE/D,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,0BAA0B,CAAC,EAAE,OAAO,CAAC;CACtC;AAED,MAAM,WAAW,IAAI;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,oBAAqB,SAAQ,OAAO;IACnD,IAAI,CAAC,EAAE,IAAI,CAAC;IACZ,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAa;gBAExB,MAAM,EAAE,UAAU;IAI9B;;OAEG;IACG,YAAY,CAChB,GAAG,EAAE,oBAAoB,EACzB,GAAG,EAAE,QAAQ,EACb,IAAI,EAAE,YAAY,GACjB,OAAO,CAAC,IAAI,CAAC;IAiEV,+BAA+B,CACnC,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACxC,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IA4CvB;;OAEG;YACW,WAAW;IAIzB;;OAEG;IACH,OAAO,CAAC,2BAA2B;IAqBnC;;OAEG;IACH,0BAA0B;2BAQH,MAAM;;IAM7B;;OAEG;IACH,cAAc,CAAC,IAAI,CAAC,EAAE,IAAI;;;;;;;;;IAY1B;;OAEG;YACW,sBAAsB;CAgCrC"}

package/dist/src/services/auth.service.js

@@ -1,172 +0,0 @@
-import { verifyAuthBearerToken, } from "@renown/sdk";
-export class AuthService {
-    config;
-    constructor(config) {
-        this.config = config;
-    }
-    /**
-     * Middleware function to authenticate requests
-     */
-    async authenticate(req, res, next) {
-        if (!this.config.enabled ||
-            req.method === "OPTIONS" ||
-            req.method === "GET") {
-            next();
-            return;
-        }
-        // Set auth lists on request
-        req.admins = this.config.admins;
-        req.auth_enabled = this.config.enabled;
-        const token = req.headers.authorization?.split(" ")[1];
-        if (!token) {
-            // Allow through without user — resolver layer enforces permissions
-            // This is critical: GraphQL queries are POST requests, so blocking
-            // unauthenticated POSTs would block all anonymous reads.
-            next();
-            return;
-        }
-        try {
-            const verified = await this.verifyToken(token);
-            if (!verified) {
-                res.status(401).json({ error: "Verification failed" });
-                return;
-            }
-            const user = this.extractUserFromVerification(verified);
-            if (!user) {
-                res.status(401).json({ error: "Missing credentials" });
-                return;
-            }
-            // Verify that the credentials still exist on the Renown API
-            // This can be skipped via config (useful for testing or when Renown API is unavailable)
-            if (!this.config.skipCredentialVerification) {
-                const credentialExists = await this.verifyCredentialExists(user.address, user.chainId, verified.issuer);
-                if (!credentialExists) {
-                    res.status(401).json({ error: "Credentials no longer valid" });
-                    return;
-                }
-            }
-            req.user = user;
-            // Note: We no longer block users here based on global allowed lists.
-            // The resolver layer handles authorization based on:
-            // 1. Global roles (admin/user/guest) for unrestricted access
-            // 2. Document-level permissions (direct or via groups) for specific documents
-            // This allows users who have document-specific permissions (e.g., via groups)
-            // to access those documents even if they're not in the global allowed lists.
-            next();
-        }
-        catch {
-            res.status(401).json({ error: "Authentication failed" });
-        }
-    }
-    async authenticateWebSocketConnection(connectionParams) {
-        if (!this.config.enabled) {
-            return null;
-        }
-        const authHeader = connectionParams.authorization;
-        if (!authHeader) {
-            throw new Error("Missing authorization in connection parameters");
-        }
-        const token = authHeader.split(" ")[1];
-        if (!token) {
-            throw new Error("Invalid authorization format");
-        }
-        const verified = await this.verifyToken(token);
-        if (!verified) {
-            throw new Error("Token verification failed");
-        }
-        const user = this.extractUserFromVerification(verified);
-        if (!user) {
-            throw new Error("Invalid credentials");
-        }
-        // Verify that the credentials still exist on the Renown API
-        // This can be skipped via config (useful for testing or when Renown API is unavailable)
-        if (!this.config.skipCredentialVerification) {
-            const credentialExists = await this.verifyCredentialExists(user.address, user.chainId, verified.issuer);
-            if (!credentialExists) {
-                throw new Error("Credentials no longer valid");
-            }
-        }
-        // Note: We no longer block based on global allowed lists.
-        // Authorization is handled at the resolver level based on document permissions.
-        return user;
-    }
-    /**
-     * Verify the auth bearer token
-     */
-    async verifyToken(token) {
-        return await verifyAuthBearerToken(token);
-    }
-    /**
-     * Extract user information from verification result
-     */
-    extractUserFromVerification(verified) {
-        try {
-            const { address, chainId, networkId } = verified.verifiableCredential.credentialSubject;
-            if (!address || !chainId || !networkId) {
-                return null;
-            }
-            return {
-                address,
-                chainId,
-                networkId,
-            };
-        }
-        catch {
-            return null;
-        }
-    }
-    /**
-     * Get additional context fields for GraphQL
-     */
-    getAdditionalContextFields() {
-        if (!this.config.enabled) {
-            return {
-                isAdmin: () => true,
-            };
-        }
-        return {
-            isAdmin: (address) => this.config.enabled &&
-                this.config.admins?.includes(address.toLowerCase()),
-        };
-    }
-    /**
-     * Get user context for GraphQL
-     */
-    getUserContext(user) {
-        if (!user)
-            return {};
-        return {
-            user: {
-                address: user.address.toLowerCase(),
-                chainId: user.chainId,
-                networkId: user.networkId,
-            },
-        };
-    }
-    /**
-     * Verify that the credential still exists on the Renown API
-     */
-    async verifyCredentialExists(address, chainId, appId) {
-        const url = `https://www.renown.id/api/auth/credential?address=${address}&chainId=${chainId}&connectId=${appId}&appId=${appId}`;
-        try {
-            const response = await fetch(url, {
-                method: "GET",
-            });
-            const body = (await response.json());
-            const credential = body.credential;
-            const appIdVerfied = credential.credentialSubject.id;
-            const addressVerfied = credential.issuer.id.split(":")[4];
-            const chainIdVerfied = credential.issuer.id.split(":")[3];
-            if (response.status !== 200) {
-                return false;
-            }
-            return (appIdVerfied === appId &&
-                addressVerfied.toLocaleLowerCase() === address.toLocaleLowerCase() &&
-                chainIdVerfied === chainId.toString());
-        }
-        catch {
-            return false;
-        }
-    }
-}
-//# sourceMappingURL=auth.service.js.map

package/dist/src/services/auth.service.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth.service.js","sourceRoot":"","sources":["../../../src/services/auth.service.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qBAAqB,GAEtB,MAAM,aAAa,CAAC;AA0BrB,MAAM,OAAO,WAAW;IACL,MAAM,CAAa;IAEpC,YAAY,MAAkB;QAC5B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAChB,GAAyB,EACzB,GAAa,EACb,IAAkB;QAElB,IACE,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO;YACpB,GAAG,CAAC,MAAM,KAAK,SAAS;YACxB,GAAG,CAAC,MAAM,KAAK,KAAK,EACpB,CAAC;YACD,IAAI,EAAE,CAAC;YACP,OAAO;QACT,CAAC;QAED,4BAA4B;QAC5B,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;QAChC,GAAG,CAAC,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;QACvC,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACvD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,mEAAmE;YACnE,mEAAmE;YACnE,yDAAyD;YACzD,IAAI,EAAE,CAAC;YACP,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YAE/C,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC;gBACvD,OAAO;YACT,CAAC;YAED,MAAM,IAAI,GAAG,IAAI,CAAC,2BAA2B,CAAC,QAAQ,CAAC,CAAC;YACxD,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC;gBACvD,OAAO;YACT,CAAC;YAED,4DAA4D;YAC5D,wFAAwF;YACxF,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,0BAA0B,EAAE,CAAC;gBAC5C,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,sBAAsB,CACxD,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,OAAO,EACZ,QAAQ,CAAC,MAAM,CAChB,CAAC;gBACF,IAAI,CAAC,gBAAgB,EAAE,CAAC;oBACtB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC,CAAC;oBAC/D,OAAO;gBACT,CAAC;YACH,CAAC;YAED,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;YAEhB,qEAAqE;YACrE,qDAAqD;YACrD,6DAA6D;YAC7D,8EAA8E;YAC9E,8EAA8E;YAC9E,6EAA6E;YAE7E,IAAI,EAAE,CAAC;QACT,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAED,KAAK,CAAC,+BAA+B,CACnC,gBAAyC;QAEzC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACzB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,UAAU,GAAG,gBAAgB,CAAC,aAAmC,CAAC;QACxE,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACpE,CAAC;QAED,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACvC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAClD,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QAC/C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC/C,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,2BAA2B,CAAC,QAAQ,CAAC,CAAC;QACxD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;QACzC,CAAC;QAED,4DAA4D;QAC5D,wFAAwF;QACxF,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,0BAA0B,EAAE,CAAC;YAC5C,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,sBAAsB,CACxD,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,OAAO,EACZ,QAAQ,CAAC,MAAM,CAChB,CAAC;YACF,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACtB,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;YACjD,CAAC;QACH,CAAC;QAED,0DAA0D;QAC1D,gFAAgF;QAEhF,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,WAAW,CAAC,KAAa;QACrC,OAAO,MAAM,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAC5C,CAAC;IAED;;OAEG;IACK,2BAA2B,CACjC,QAA4B;QAE5B,IAAI,CAAC;YACH,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,GACnC,QAAQ,CAAC,oBAAoB,CAAC,iBAAiB,CAAC;YAElD,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,IAAI,CAAC,SAAS,EAAE,CAAC;gBACvC,OAAO,IAAI,CAAC;YACd,CAAC;YAED,OAAO;gBACL,OAAO;gBACP,OAAO;gBACP,SAAS;aACV,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACH,0BAA0B;QACxB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACzB,OAAO;gBACL,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI;aACpB,CAAC;QACJ,CAAC;QAED,OAAO;YACL,OAAO,EAAE,CAAC,OAAe,EAAE,EAAE,CAC3B,IAAI,CAAC,MAAM,CAAC,OAAO;gBACnB,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;SACtD,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,cAAc,CAAC,IAAW;QACxB,IAAI,CAAC,IAAI;YAAE,OAAO,EAAE,CAAC;QAErB,OAAO;YACL,IAAI,EAAE;gBACJ,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE;gBACnC,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,SAAS,EAAE,IAAI,CAAC,SAAS;aAC1B;SACF,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,sBAAsB,CAClC,OAAe,EACf,OAAe,EACf,KAAa;QAEb,MAAM,GAAG,GAAG,qDAAqD,OAAO,YAAY,OAAO,cAAc,KAAK,UAAU,KAAK,EAAE,CAAC;QAChI,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAChC,MAAM,EAAE,KAAK;aACd,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAElC,CAAC;YACF,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;YAEnC,MAAM,YAAY,GAAG,UAAU,CAAC,iBAAiB,CAAC,EAAE,CAAC;YACrD,MAAM,cAAc,GAAG,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1D,MAAM,cAAc,GAAG,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAE1D,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC5B,OAAO,KAAK,CAAC;YACf,CAAC;YAED,OAAO,CACL,YAAY,KAAK,KAAK;gBACtB,cAAc,CAAC,iBAAiB,EAAE,KAAK,OAAO,CAAC,iBAAiB,EAAE;gBAClE,cAAc,KAAK,OAAO,CAAC,QAAQ,EAAE,CACtC,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;CACF"}