@qelos/integrator-nest 4.0.0

package/LICENSE

@@ -0,0 +1,20 @@
+Polyform Shield License 1.0.0
+
+Copyright (c) 2025 Velocitech LTD
+
+Your use of this software is governed by the Polyform Shield License 1.0.0.
+
+You may obtain a copy of the License at:
+https://polyformproject.org/licenses/shield/1.0.0
+
+Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+
+Additional Terms – Exception Notice:
+
+The author of this software grants additional permissions beyond the Polyform Shield License 1.0.0:
+
+✅ All uses of the software are permitted — including modification, distribution, commercial use, and sublicensing — as long as the software is not used to create, offer, or operate any product or service that competes directly with Qelos (https://qelos.io), a no-code platform for building AI-assisted SaaS applications.
+
+❌ "Direct competition" includes platforms, tools, or services that enable users to visually or programmatically create SaaS applications with the assistance of artificial intelligence.
+
+This exception does not modify the terms of the original Polyform Shield License for other users and applies only by explicit permission of the licensor.

package/README.md

@@ -0,0 +1,211 @@
+# @qelos/integrator-nest
+
+NestJS module that calls the Qelos SDK to identify the current user and their
+active workspace before your route handler runs, exposing them on
+`request.qelos.user` / `request.qelos.workspace`.
+
+This is the NestJS implementation of the Qelos integrator contract — the same
+shape exposed by `@qelos/integrator-express`, `@qelos/integrator-fastify`,
+`@qelos/integrator-nuxt`, `@qelos/plugin-netlify-api`, etc. It works with
+both Nest's Express adapter and its Fastify adapter.
+
+## Install
+
+```sh
+npm install @qelos/integrator-nest @qelos/sdk
+# Nest is a peer dependency
+npm install @nestjs/common @nestjs/core
+```
+
+## Quick start
+
+```ts
+// app.module.ts
+import { Module } from '@nestjs/common';
+import { QelosModule } from '@qelos/integrator-nest';
+
+@Module({
+  imports: [
+    QelosModule.forRoot({
+      config: {
+        appUrl: process.env.QELOS_APP_URL!, // e.g. https://yourdomain.com
+      },
+    }),
+  ],
+})
+export class AppModule {}
+```
+
+`forRoot` registers `QelosMiddleware` on every route by default. To restrict
+its scope, import the module without `forRoot` and apply the middleware
+yourself in `configure`:
+
+```ts
+import {
+  QelosMiddleware,
+  QelosModule,
+  type QelosModuleOptions,
+} from '@qelos/integrator-nest';
+import { type MiddlewareConsumer, Module, type NestModule } from '@nestjs/common';
+
+const options: QelosModuleOptions = {
+  config: { appUrl: process.env.QELOS_APP_URL! },
+};
+
+@Module({
+  imports: [QelosModule.forRoot(options)],
+})
+export class AppModule implements NestModule {
+  configure(consumer: MiddlewareConsumer) {
+    consumer.apply(QelosMiddleware).forRoutes('api/*');
+  }
+}
+```
+
+## Use in controllers
+
+```ts
+import { Controller, Get, UseGuards } from '@nestjs/common';
+import {
+  QelosAuthGuard,
+  QelosUser,
+  QelosWorkspace,
+  QelosCtx,
+  type QelosRequestContext,
+} from '@qelos/integrator-nest';
+import type { IUser } from '@qelos/sdk/dist/authentication';
+import type { IWorkspace } from '@qelos/sdk/workspaces';
+
+@Controller()
+export class AppController {
+  @Get('me')
+  // user/workspace are null when the request is anonymous
+  me(
+    @QelosUser() user: IUser | null,
+    @QelosWorkspace() workspace: IWorkspace | null,
+  ) {
+    return { user, workspace };
+  }
+
+  // Short-circuit with 401 when there is no authenticated user.
+  @Get('private')
+  @UseGuards(QelosAuthGuard)
+  private(@QelosCtx() ctx: QelosRequestContext) {
+    return ctx.user;
+  }
+}
+```
+
+## What the middleware does
+
+1. Reads the access token from `Authorization: Bearer ...` or the
+   `q_access_token` cookie, and the refresh token from `q_refresh_token`.
+2. Builds a per-request Qelos SDK instance bound to those tokens.
+3. Calls `sdk.authentication.getLoggedInUser()` and
+   `sdk.workspaces.getList()`.
+4. Picks the active workspace (first by default — override with
+   `resolveWorkspace`).
+5. Attaches everything to `request.qelos`.
+
+The middleware never throws for anonymous requests by default — it just
+leaves `request.qelos.user` and `request.qelos.workspace` as `null`. Pass
+`requireAuth: true` to short-circuit anonymous requests with `401`, or use
+the per-route `QelosAuthGuard` for finer-grained control.
+
+## Token refresh
+
+When the access token is rejected, the SDK tries to recover, in order:
+
+1. The **refresh token** (`q_refresh_token`) via
+   `sdk.authentication.refreshToken()` — issues a new access + refresh pair.
+2. The **cookie token** (the access token cookie itself) via
+   `sdk.authentication.refreshCookieToken()` — used for cookie-only sessions
+   that do not carry a separate refresh token (e.g. social-auth flows).
+
+After a successful refresh the middleware fires the `onTokenRefresh` hook.
+The default implementation writes the new tokens back to the response cookies
+(`HttpOnly`, `SameSite=Lax`, `Secure` whenever `appUrl` is `https://...`).
+
+You can supply your own — for example, to mint your own session cookie or
+push the new tokens into a session store:
+
+```ts
+QelosModule.forRoot({
+  config: { appUrl: process.env.QELOS_APP_URL! },
+  onTokenRefresh: async ({ request, response, newTokens }) => {
+    await sessionStore.rotate(request.session.id, newTokens);
+  },
+});
+```
+
+The hook receives `{ request, response, oldTokens, newTokens, sdk }`. The
+`request` and `response` types are intentionally generic since Nest can run
+on either Express or Fastify.
+
+### Manual cookie refresh
+
+Long-lived integrator-hosted sessions can also call the SDK directly to
+proactively refresh the cookie token:
+
+```ts
+@Get('refresh-session')
+async refresh(@QelosCtx() ctx: QelosRequestContext) {
+  const result = await ctx.sdk.authentication.refreshCookieToken();
+  // result.headers['set-cookie'] — fresh cookie value to forward
+  return { user: result.payload.user };
+}
+```
+
+## Async configuration
+
+```ts
+import { ConfigModule, ConfigService } from '@nestjs/config';
+
+QelosModule.forRootAsync({
+  imports: [ConfigModule],
+  inject: [ConfigService],
+  useFactory: (config: ConfigService) => ({
+    config: {
+      appUrl: config.getOrThrow('QELOS_APP_URL'),
+      apiToken: config.get('QELOS_API_TOKEN'),
+    },
+  }),
+});
+```
+
+## Configuration
+
+```ts
+QelosModule.forRoot({
+  config: {
+    appUrl: 'https://yourdomain.com', // required
+
+    // Service-to-service: use a static API token instead of cookies/refresh.
+    apiToken: process.env.QELOS_API_TOKEN,
+
+    // Cookie names. Defaults shown.
+    accessTokenCookie: 'q_access_token',
+    refreshTokenCookie: 'q_refresh_token',
+
+    // Reject anonymous requests with 401. Defaults to false.
+    requireAuth: false,
+
+    // Skip the middleware entirely for these path prefixes.
+    skipPaths: ['/health', '/metrics'],
+
+    // Anything you want passed through to the per-request SDK.
+    sdkOptions: {},
+  },
+
+  // Override workspace selection. Defaults to `workspaces[0]`.
+  resolveWorkspace: ({ request, user, workspaces }) => {
+    const headerId = request.headers['x-qelos-workspace'];
+    return workspaces.find((w) => w._id === headerId) || workspaces[0] || null;
+  },
+});
+```
+
+## Requirements
+
+- Node.js >= 18 (uses the global `fetch`).
+- NestJS 9, 10, or 11.

package/dist/constants.d.ts

@@ -0,0 +1,3 @@
+export declare const QELOS_MODULE_OPTIONS: unique symbol;
+/** Request-scoped injection token for the per-request Qelos SDK (`request.qelos.sdk`). */
+export declare const QELOS_SDK: unique symbol;

package/dist/constants.js

@@ -0,0 +1,7 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.QELOS_SDK = exports.QELOS_MODULE_OPTIONS = void 0;
+exports.QELOS_MODULE_OPTIONS = Symbol.for('@qelos/integrator-nest:module-options');
+/** Request-scoped injection token for the per-request Qelos SDK (`request.qelos.sdk`). */
+exports.QELOS_SDK = Symbol.for('@qelos/integrator-nest:sdk');
+//# sourceMappingURL=constants.js.map

package/dist/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":";;;AAAa,QAAA,oBAAoB,GAAG,MAAM,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC;AAExF,0FAA0F;AAC7E,QAAA,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC"}

package/dist/decorators.d.ts

@@ -0,0 +1,30 @@
+import { Inject } from '@nestjs/common';
+/**
+ * Inject the full Qelos request context attached by `QelosMiddleware`.
+ *
+ * ```ts
+ * @Get('ctx')
+ * ctx(@QelosCtx() ctx: QelosRequestContext) { ... }
+ * ```
+ */
+export declare const QelosCtx: (...dataOrPipes: unknown[]) => ParameterDecorator;
+/**
+ * Inject the authenticated user, or `null` for anonymous requests.
+ */
+export declare const QelosUser: (...dataOrPipes: unknown[]) => ParameterDecorator;
+/**
+ * Inject the active workspace, or `null` when none is active / the user is
+ * anonymous.
+ */
+export declare const QelosWorkspace: (...dataOrPipes: unknown[]) => ParameterDecorator;
+/**
+ * Inject the per-request Qelos SDK (`request.qelos.sdk`). Requires
+ * `QelosModule.forRoot` / `forRootAsync`. For constructor injection into your
+ * own providers, set `scope: Scope.REQUEST` on that provider (Nest propagates
+ * request scope from controllers).
+ *
+ * ```ts
+ * constructor(@QelosSdk() private readonly sdk: QelosSDK) {}
+ * ```
+ */
+export declare function QelosSdk(): ReturnType<typeof Inject>;

package/dist/decorators.js

@@ -0,0 +1,47 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.QelosWorkspace = exports.QelosUser = exports.QelosCtx = void 0;
+exports.QelosSdk = QelosSdk;
+const common_1 = require("@nestjs/common");
+const constants_1 = require("./constants");
+/**
+ * Inject the full Qelos request context attached by `QelosMiddleware`.
+ *
+ * ```ts
+ * @Get('ctx')
+ * ctx(@QelosCtx() ctx: QelosRequestContext) { ... }
+ * ```
+ */
+exports.QelosCtx = (0, common_1.createParamDecorator)((_data, ctx) => {
+    const request = ctx.switchToHttp().getRequest();
+    return request?.qelos;
+});
+/**
+ * Inject the authenticated user, or `null` for anonymous requests.
+ */
+exports.QelosUser = (0, common_1.createParamDecorator)((_data, ctx) => {
+    const request = ctx.switchToHttp().getRequest();
+    return request?.qelos?.user ?? null;
+});
+/**
+ * Inject the active workspace, or `null` when none is active / the user is
+ * anonymous.
+ */
+exports.QelosWorkspace = (0, common_1.createParamDecorator)((_data, ctx) => {
+    const request = ctx.switchToHttp().getRequest();
+    return request?.qelos?.workspace ?? null;
+});
+/**
+ * Inject the per-request Qelos SDK (`request.qelos.sdk`). Requires
+ * `QelosModule.forRoot` / `forRootAsync`. For constructor injection into your
+ * own providers, set `scope: Scope.REQUEST` on that provider (Nest propagates
+ * request scope from controllers).
+ *
+ * ```ts
+ * constructor(@QelosSdk() private readonly sdk: QelosSDK) {}
+ * ```
+ */
+function QelosSdk() {
+    return (0, common_1.Inject)(constants_1.QELOS_SDK);
+}
+//# sourceMappingURL=decorators.js.map

package/dist/decorators.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"decorators.js","sourceRoot":"","sources":["../src/decorators.ts"],"names":[],"mappings":";;;AAsDA,4BAEC;AAxDD,2CAIwB;AACxB,2CAAwC;AAGxC;;;;;;;GAOG;AACU,QAAA,QAAQ,GAAG,IAAA,6BAAoB,EAC1C,CAAC,KAAc,EAAE,GAAqB,EAAmC,EAAE;IACzE,MAAM,OAAO,GAAG,GAAG,CAAC,YAAY,EAAE,CAAC,UAAU,EAAc,CAAC;IAC5D,OAAO,OAAO,EAAE,KAAK,CAAC;AACxB,CAAC,CACF,CAAC;AAEF;;GAEG;AACU,QAAA,SAAS,GAAG,IAAA,6BAAoB,EAC3C,CAAC,KAAc,EAAE,GAAqB,EAAE,EAAE;IACxC,MAAM,OAAO,GAAG,GAAG,CAAC,YAAY,EAAE,CAAC,UAAU,EAAc,CAAC;IAC5D,OAAO,OAAO,EAAE,KAAK,EAAE,IAAI,IAAI,IAAI,CAAC;AACtC,CAAC,CACF,CAAC;AAEF;;;GAGG;AACU,QAAA,cAAc,GAAG,IAAA,6BAAoB,EAChD,CAAC,KAAc,EAAE,GAAqB,EAAE,EAAE;IACxC,MAAM,OAAO,GAAG,GAAG,CAAC,YAAY,EAAE,CAAC,UAAU,EAAc,CAAC;IAC5D,OAAO,OAAO,EAAE,KAAK,EAAE,SAAS,IAAI,IAAI,CAAC;AAC3C,CAAC,CACF,CAAC;AAEF;;;;;;;;;GASG;AACH,SAAgB,QAAQ;IACtB,OAAO,IAAA,eAAM,EAAC,qBAAS,CAAC,CAAC;AAC3B,CAAC"}

package/dist/guard.d.ts

@@ -0,0 +1,18 @@
+import { CanActivate, ExecutionContext } from '@nestjs/common';
+/**
+ * Route-level guard that requires `request.qelos.user` to be populated
+ * (same contract as Express `requireUser`).
+ *
+ * ```ts
+ * @UseGuards(QelosGuard)
+ * @Get('me')
+ * me() { ... }
+ * ```
+ *
+ * Requires `QelosMiddleware` to have run first.
+ */
+export declare class QelosGuard implements CanActivate {
+    canActivate(context: ExecutionContext): boolean;
+}
+/** Previous name for {@link QelosGuard}; kept for compatibility. */
+export { QelosGuard as QelosAuthGuard };

package/dist/guard.js

@@ -0,0 +1,37 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.QelosAuthGuard = exports.QelosGuard = void 0;
+const common_1 = require("@nestjs/common");
+/**
+ * Route-level guard that requires `request.qelos.user` to be populated
+ * (same contract as Express `requireUser`).
+ *
+ * ```ts
+ * @UseGuards(QelosGuard)
+ * @Get('me')
+ * me() { ... }
+ * ```
+ *
+ * Requires `QelosMiddleware` to have run first.
+ */
+let QelosGuard = class QelosGuard {
+    canActivate(context) {
+        const request = context.switchToHttp().getRequest();
+        if (!request?.qelos || !request.qelos.user) {
+            throw new common_1.UnauthorizedException();
+        }
+        return true;
+    }
+};
+exports.QelosGuard = QelosGuard;
+exports.QelosAuthGuard = QelosGuard;
+exports.QelosAuthGuard = exports.QelosGuard = QelosGuard = __decorate([
+    (0, common_1.Injectable)()
+], QelosGuard);
+//# sourceMappingURL=guard.js.map

package/dist/guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guard.js","sourceRoot":"","sources":["../src/guard.ts"],"names":[],"mappings":";;;;;;;;;AAAA,2CAKwB;AAGxB;;;;;;;;;;;GAWG;AAEI,IAAM,UAAU,GAAhB,MAAM,UAAU;IACrB,WAAW,CAAC,OAAyB;QACnC,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAAc,CAAC;QAChE,IAAI,CAAC,OAAO,EAAE,KAAK,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YAC3C,MAAM,IAAI,8BAAqB,EAAE,CAAC;QACpC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;CACF,CAAA;AARY,gCAAU;AAWA,oCAAc;8CAXxB,UAAU;IADtB,IAAA,mBAAU,GAAE;GACA,UAAU,CAQtB"}

package/dist/index.d.ts

@@ -0,0 +1,9 @@
+export { QELOS_MODULE_OPTIONS, QELOS_SDK } from './constants';
+export { QelosModule } from './module';
+export type { QelosModuleAsyncOptions, QelosOptionsFactory, } from './module';
+export { QelosMiddleware } from './middleware';
+export { QelosAuthGuard, QelosGuard } from './guard';
+export { QelosCtx, QelosSdk, QelosUser, QelosWorkspace } from './decorators';
+export { createRequestSdk } from './sdk-factory';
+export type { CreateSdkParams } from './sdk-factory';
+export type { AnyRequest, AnyResponse, QelosModuleOptions, QelosNestConfig, QelosRequestContext, QelosTokenPair, ResolvedTokens, TokenRefreshContext, TokenRefreshHook, WorkspaceResolver, } from './types';

package/dist/index.js

@@ -0,0 +1,21 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createRequestSdk = exports.QelosWorkspace = exports.QelosUser = exports.QelosSdk = exports.QelosCtx = exports.QelosGuard = exports.QelosAuthGuard = exports.QelosMiddleware = exports.QelosModule = exports.QELOS_SDK = exports.QELOS_MODULE_OPTIONS = void 0;
+var constants_1 = require("./constants");
+Object.defineProperty(exports, "QELOS_MODULE_OPTIONS", { enumerable: true, get: function () { return constants_1.QELOS_MODULE_OPTIONS; } });
+Object.defineProperty(exports, "QELOS_SDK", { enumerable: true, get: function () { return constants_1.QELOS_SDK; } });
+var module_1 = require("./module");
+Object.defineProperty(exports, "QelosModule", { enumerable: true, get: function () { return module_1.QelosModule; } });
+var middleware_1 = require("./middleware");
+Object.defineProperty(exports, "QelosMiddleware", { enumerable: true, get: function () { return middleware_1.QelosMiddleware; } });
+var guard_1 = require("./guard");
+Object.defineProperty(exports, "QelosAuthGuard", { enumerable: true, get: function () { return guard_1.QelosAuthGuard; } });
+Object.defineProperty(exports, "QelosGuard", { enumerable: true, get: function () { return guard_1.QelosGuard; } });
+var decorators_1 = require("./decorators");
+Object.defineProperty(exports, "QelosCtx", { enumerable: true, get: function () { return decorators_1.QelosCtx; } });
+Object.defineProperty(exports, "QelosSdk", { enumerable: true, get: function () { return decorators_1.QelosSdk; } });
+Object.defineProperty(exports, "QelosUser", { enumerable: true, get: function () { return decorators_1.QelosUser; } });
+Object.defineProperty(exports, "QelosWorkspace", { enumerable: true, get: function () { return decorators_1.QelosWorkspace; } });
+var sdk_factory_1 = require("./sdk-factory");
+Object.defineProperty(exports, "createRequestSdk", { enumerable: true, get: function () { return sdk_factory_1.createRequestSdk; } });
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAAA,yCAA8D;AAArD,iHAAA,oBAAoB,OAAA;AAAE,sGAAA,SAAS,OAAA;AACxC,mCAAuC;AAA9B,qGAAA,WAAW,OAAA;AAKpB,2CAA+C;AAAtC,6GAAA,eAAe,OAAA;AACxB,iCAAqD;AAA5C,uGAAA,cAAc,OAAA;AAAE,mGAAA,UAAU,OAAA;AACnC,2CAA6E;AAApE,sGAAA,QAAQ,OAAA;AAAE,sGAAA,QAAQ,OAAA;AAAE,uGAAA,SAAS,OAAA;AAAE,4GAAA,cAAc,OAAA;AACtD,6CAAiD;AAAxC,+GAAA,gBAAgB,OAAA"}

package/dist/middleware.d.ts

@@ -0,0 +1,7 @@
+import { type NestMiddleware } from '@nestjs/common';
+import type { QelosModuleOptions } from './types';
+export declare class QelosMiddleware implements NestMiddleware {
+    private readonly options;
+    constructor(options: QelosModuleOptions);
+    use(req: unknown, res: unknown, next: (err?: unknown) => void): Promise<void>;
+}

package/dist/middleware.js

@@ -0,0 +1,100 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.QelosMiddleware = void 0;
+const common_1 = require("@nestjs/common");
+const constants_1 = require("./constants");
+const sdk_factory_1 = require("./sdk-factory");
+const request_utils_1 = require("./request-utils");
+let QelosMiddleware = class QelosMiddleware {
+    constructor(options) {
+        this.options = options;
+    }
+    async use(req, res, next) {
+        const request = req;
+        const response = res;
+        const { config, resolveWorkspace } = this.options;
+        const onTokenRefresh = this.options.onTokenRefresh ||
+            (async ({ response: r, newTokens }) => {
+                (0, request_utils_1.writeTokensToCookies)(r, config, newTokens);
+            });
+        if ((0, request_utils_1.shouldSkip)(request, config)) {
+            next();
+            return;
+        }
+        const tokens = (0, request_utils_1.readTokens)(request, config);
+        const sdk = (0, sdk_factory_1.createRequestSdk)({
+            config,
+            tokens,
+            request,
+            response,
+            onTokenRefresh,
+        });
+        const ctx = {
+            user: null,
+            workspace: null,
+            workspaces: [],
+            sdk,
+            tokens,
+        };
+        request.qelos = ctx;
+        const hasAuthMaterial = Boolean(config.apiToken || tokens.accessToken || tokens.refreshToken);
+        if (!hasAuthMaterial) {
+            if (config.requireAuth) {
+                next(new common_1.UnauthorizedException());
+                return;
+            }
+            next();
+            return;
+        }
+        try {
+            ctx.user = await sdk.authentication.getLoggedInUser();
+        }
+        catch {
+            if (config.requireAuth) {
+                next(new common_1.UnauthorizedException());
+                return;
+            }
+            next();
+            return;
+        }
+        try {
+            ctx.workspaces = await sdk.workspaces.getList();
+        }
+        catch {
+            ctx.workspaces = [];
+        }
+        if (ctx.user && ctx.workspaces.length) {
+            if (resolveWorkspace) {
+                ctx.workspace =
+                    (await resolveWorkspace({
+                        request,
+                        user: ctx.user,
+                        workspaces: ctx.workspaces,
+                    })) || null;
+            }
+            else {
+                ctx.workspace = ctx.workspaces[0] || null;
+            }
+        }
+        next();
+    }
+};
+exports.QelosMiddleware = QelosMiddleware;
+exports.QelosMiddleware = QelosMiddleware = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, common_1.Inject)(constants_1.QELOS_MODULE_OPTIONS)),
+    __metadata("design:paramtypes", [Object])
+], QelosMiddleware);
+//# sourceMappingURL=middleware.js.map

package/dist/middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.js","sourceRoot":"","sources":["../src/middleware.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAKwB;AACxB,2CAAmD;AACnD,+CAAiD;AACjD,mDAIyB;AAUlB,IAAM,eAAe,GAArB,MAAM,eAAe;IAC1B,YAEmB,OAA2B;QAA3B,YAAO,GAAP,OAAO,CAAoB;IAC3C,CAAC;IAEJ,KAAK,CAAC,GAAG,CAAC,GAAY,EAAE,GAAY,EAAE,IAA6B;QACjE,MAAM,OAAO,GAAG,GAAiB,CAAC;QAClC,MAAM,QAAQ,GAAG,GAAkB,CAAC;QACpC,MAAM,EAAE,MAAM,EAAE,gBAAgB,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC;QAClD,MAAM,cAAc,GAClB,IAAI,CAAC,OAAO,CAAC,cAAc;YAC3B,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE;gBACpC,IAAA,oCAAoB,EAAC,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;YAC7C,CAAC,CAAC,CAAC;QAEL,IAAI,IAAA,0BAAU,EAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC;YAChC,IAAI,EAAE,CAAC;YACP,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,IAAA,0BAAU,EAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC3C,MAAM,GAAG,GAAG,IAAA,8BAAgB,EAAC;YAC3B,MAAM;YACN,MAAM;YACN,OAAO;YACP,QAAQ;YACR,cAAc;SACf,CAAC,CAAC;QAEH,MAAM,GAAG,GAAwB;YAC/B,IAAI,EAAE,IAAI;YACV,SAAS,EAAE,IAAI;YACf,UAAU,EAAE,EAAE;YACd,GAAG;YACH,MAAM;SACP,CAAC;QACF,OAAO,CAAC,KAAK,GAAG,GAAG,CAAC;QAEpB,MAAM,eAAe,GAAG,OAAO,CAC7B,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,YAAY,CAC7D,CAAC;QACF,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;gBACvB,IAAI,CAAC,IAAI,8BAAqB,EAAE,CAAC,CAAC;gBAClC,OAAO;YACT,CAAC;YACD,IAAI,EAAE,CAAC;YACP,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,GAAG,CAAC,IAAI,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,eAAe,EAAE,CAAC;QACxD,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;gBACvB,IAAI,CAAC,IAAI,8BAAqB,EAAE,CAAC,CAAC;gBAClC,OAAO;YACT,CAAC;YACD,IAAI,EAAE,CAAC;YACP,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,GAAG,CAAC,UAAU,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;QAClD,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,CAAC,UAAU,GAAG,EAAE,CAAC;QACtB,CAAC;QAED,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;YACtC,IAAI,gBAAgB,EAAE,CAAC;gBACrB,GAAG,CAAC,SAAS;oBACX,CAAC,MAAM,gBAAgB,CAAC;wBACtB,OAAO;wBACP,IAAI,EAAE,GAAG,CAAC,IAAI;wBACd,UAAU,EAAE,GAAG,CAAC,UAAU;qBAC3B,CAAC,CAAC,IAAI,IAAI,CAAC;YAChB,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,SAAS,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;YAC5C,CAAC;QACH,CAAC;QAED,IAAI,EAAE,CAAC;IACT,CAAC;CACF,CAAA;AAnFY,0CAAe;0BAAf,eAAe;IAD3B,IAAA,mBAAU,GAAE;IAGR,WAAA,IAAA,eAAM,EAAC,gCAAoB,CAAC,CAAA;;GAFpB,eAAe,CAmF3B"}

package/dist/module-options.d.ts

@@ -0,0 +1,7 @@
+import type { QelosModuleOptions, QelosNestConfig } from './types';
+/**
+ * `forRoot` / `forRootAsync` accept either a full {@link QelosModuleOptions}
+ * object or a shorthand {@link QelosNestConfig} (same shape as Express
+ * `createQelosMiddleware({ config })`).
+ */
+export declare function normalizeModuleOptions(input: QelosNestConfig | QelosModuleOptions): QelosModuleOptions;

package/dist/module-options.js

@@ -0,0 +1,21 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.normalizeModuleOptions = normalizeModuleOptions;
+/**
+ * `forRoot` / `forRootAsync` accept either a full {@link QelosModuleOptions}
+ * object or a shorthand {@link QelosNestConfig} (same shape as Express
+ * `createQelosMiddleware({ config })`).
+ */
+function normalizeModuleOptions(input) {
+    if (input !== null &&
+        typeof input === 'object' &&
+        'config' in input &&
+        input.config !== undefined &&
+        typeof input.config === 'object' &&
+        input.config !== null &&
+        'appUrl' in input.config) {
+        return input;
+    }
+    return { config: input };
+}
+//# sourceMappingURL=module-options.js.map

package/dist/module-options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"module-options.js","sourceRoot":"","sources":["../src/module-options.ts"],"names":[],"mappings":";;AAOA,wDAeC;AApBD;;;;GAIG;AACH,SAAgB,sBAAsB,CACpC,KAA2C;IAE3C,IACE,KAAK,KAAK,IAAI;QACd,OAAO,KAAK,KAAK,QAAQ;QACzB,QAAQ,IAAI,KAAK;QAChB,KAA4B,CAAC,MAAM,KAAK,SAAS;QAClD,OAAQ,KAA4B,CAAC,MAAM,KAAK,QAAQ;QACvD,KAA4B,CAAC,MAAM,KAAK,IAAI;QAC7C,QAAQ,IAAK,KAA4B,CAAC,MAAM,EAChD,CAAC;QACD,OAAO,KAA2B,CAAC;IACrC,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,KAAwB,EAAE,CAAC;AAC9C,CAAC"}

package/dist/module.d.ts

@@ -0,0 +1,33 @@
+import { type DynamicModule, type FactoryProvider, type MiddlewareConsumer, type ModuleMetadata, type NestModule, type Type } from '@nestjs/common';
+import type { QelosModuleOptions, QelosNestConfig } from './types';
+export interface QelosModuleAsyncOptions extends Pick<ModuleMetadata, 'imports'> {
+    useFactory: (...args: unknown[]) => Promise<QelosNestConfig | QelosModuleOptions> | QelosNestConfig | QelosModuleOptions;
+    inject?: FactoryProvider['inject'];
+    useExisting?: Type<QelosOptionsFactory>;
+    useClass?: Type<QelosOptionsFactory>;
+}
+export interface QelosOptionsFactory {
+    createQelosOptions(): Promise<QelosNestConfig | QelosModuleOptions> | QelosNestConfig | QelosModuleOptions;
+}
+export declare class QelosModule implements NestModule {
+    private static readonly sdkProvider;
+    /**
+     * Register the module with statically-known options.
+     *
+     * Pass either a full {@link QelosModuleOptions} object or a shorthand
+     * {@link QelosNestConfig} (e.g. `{ appUrl, apiToken }`).
+     *
+     * The middleware is wired to `forRoutes('*')` by default. Override by
+     * importing the module without `forRoot` and applying `QelosMiddleware`
+     * directly inside your own `MiddlewareConsumer`.
+     */
+    static forRoot(config: QelosNestConfig): DynamicModule;
+    static forRoot(options: QelosModuleOptions): DynamicModule;
+    /**
+     * Register the module with options resolved asynchronously (e.g. via
+     * `ConfigService`).
+     */
+    static forRootAsync(options: QelosModuleAsyncOptions): DynamicModule;
+    private static createAsyncProviders;
+    configure(consumer: MiddlewareConsumer): void;
+}

package/dist/module.js

@@ -0,0 +1,88 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var QelosModule_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.QelosModule = void 0;
+const common_1 = require("@nestjs/common");
+const core_1 = require("@nestjs/core");
+const constants_1 = require("./constants");
+const module_options_1 = require("./module-options");
+const middleware_1 = require("./middleware");
+let QelosModule = QelosModule_1 = class QelosModule {
+    static forRoot(configOrOptions) {
+        const options = (0, module_options_1.normalizeModuleOptions)(configOrOptions);
+        const optionsProvider = {
+            provide: constants_1.QELOS_MODULE_OPTIONS,
+            useValue: options,
+        };
+        return {
+            module: QelosModule_1,
+            providers: [optionsProvider, middleware_1.QelosMiddleware, QelosModule_1.sdkProvider],
+            exports: [optionsProvider, middleware_1.QelosMiddleware, constants_1.QELOS_SDK],
+            global: true,
+        };
+    }
+    /**
+     * Register the module with options resolved asynchronously (e.g. via
+     * `ConfigService`).
+     */
+    static forRootAsync(options) {
+        const providers = [
+            ...this.createAsyncProviders(options),
+            middleware_1.QelosMiddleware,
+            QelosModule_1.sdkProvider,
+        ];
+        return {
+            module: QelosModule_1,
+            imports: options.imports || [],
+            providers,
+            exports: [constants_1.QELOS_MODULE_OPTIONS, middleware_1.QelosMiddleware, constants_1.QELOS_SDK],
+            global: true,
+        };
+    }
+    static createAsyncProviders(options) {
+        if (options.useFactory) {
+            const factoryProvider = {
+                provide: constants_1.QELOS_MODULE_OPTIONS,
+                useFactory: async (...args) => (0, module_options_1.normalizeModuleOptions)(await options.useFactory(...args)),
+                inject: options.inject || [],
+            };
+            return [factoryProvider];
+        }
+        const factoryClass = options.useExisting || options.useClass;
+        if (!factoryClass) {
+            throw new Error('@qelos/integrator-nest: forRootAsync requires useFactory, useClass or useExisting');
+        }
+        const optionsProvider = {
+            provide: constants_1.QELOS_MODULE_OPTIONS,
+            useFactory: async (factory) => (0, module_options_1.normalizeModuleOptions)(await factory.createQelosOptions()),
+            inject: [factoryClass],
+        };
+        if (options.useClass) {
+            return [
+                optionsProvider,
+                { provide: factoryClass, useClass: factoryClass },
+            ];
+        }
+        return [optionsProvider];
+    }
+    configure(consumer) {
+        consumer.apply(middleware_1.QelosMiddleware).forRoutes('*');
+    }
+};
+exports.QelosModule = QelosModule;
+QelosModule.sdkProvider = {
+    provide: constants_1.QELOS_SDK,
+    scope: common_1.Scope.REQUEST,
+    useFactory: (request) => request.qelos?.sdk,
+    inject: [core_1.REQUEST],
+};
+exports.QelosModule = QelosModule = QelosModule_1 = __decorate([
+    (0, common_1.Module)({})
+], QelosModule);
+//# sourceMappingURL=module.js.map

package/dist/module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.js","sourceRoot":"","sources":["../src/module.ts"],"names":[],"mappings":";;;;;;;;;;AAAA,2CAUwB;AACxB,uCAAuC;AACvC,2CAA8D;AAC9D,qDAA0D;AAC1D,6CAA+C;AAwBxC,IAAM,WAAW,mBAAjB,MAAM,WAAW;IAoBtB,MAAM,CAAC,OAAO,CAAC,eAAqD;QAClE,MAAM,OAAO,GAAG,IAAA,uCAAsB,EAAC,eAAe,CAAC,CAAC;QACxD,MAAM,eAAe,GAAa;YAChC,OAAO,EAAE,gCAAoB;YAC7B,QAAQ,EAAE,OAAO;SAClB,CAAC;QACF,OAAO;YACL,MAAM,EAAE,aAAW;YACnB,SAAS,EAAE,CAAC,eAAe,EAAE,4BAAe,EAAE,aAAW,CAAC,WAAW,CAAC;YACtE,OAAO,EAAE,CAAC,eAAe,EAAE,4BAAe,EAAE,qBAAS,CAAC;YACtD,MAAM,EAAE,IAAI;SACb,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,YAAY,CAAC,OAAgC;QAClD,MAAM,SAAS,GAAe;YAC5B,GAAG,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC;YACrC,4BAAe;YACf,aAAW,CAAC,WAAW;SACxB,CAAC;QACF,OAAO;YACL,MAAM,EAAE,aAAW;YACnB,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE;YAC9B,SAAS;YACT,OAAO,EAAE,CAAC,gCAAoB,EAAE,4BAAe,EAAE,qBAAS,CAAC;YAC3D,MAAM,EAAE,IAAI;SACb,CAAC;IACJ,CAAC;IAEO,MAAM,CAAC,oBAAoB,CACjC,OAAgC;QAEhC,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;YACvB,MAAM,eAAe,GAAwC;gBAC3D,OAAO,EAAE,gCAAoB;gBAC7B,UAAU,EAAE,KAAK,EAAE,GAAG,IAAe,EAAE,EAAE,CACvC,IAAA,uCAAsB,EAAC,MAAM,OAAO,CAAC,UAAW,CAAC,GAAG,IAAI,CAAC,CAAC;gBAC5D,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,EAAE;aAC7B,CAAC;YACF,OAAO,CAAC,eAAe,CAAC,CAAC;QAC3B,CAAC;QACD,MAAM,YAAY,GAAG,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,QAAQ,CAAC;QAC7D,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CACb,mFAAmF,CACpF,CAAC;QACJ,CAAC;QACD,MAAM,eAAe,GAAwC;YAC3D,OAAO,EAAE,gCAAoB;YAC7B,UAAU,EAAE,KAAK,EAAE,OAA4B,EAAE,EAAE,CACjD,IAAA,uCAAsB,EAAC,MAAM,OAAO,CAAC,kBAAkB,EAAE,CAAC;YAC5D,MAAM,EAAE,CAAC,YAAY,CAAC;SACvB,CAAC;QACF,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACrB,OAAO;gBACL,eAAe;gBACf,EAAE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,YAAY,EAAc;aAC9D,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,eAAe,CAAC,CAAC;IAC3B,CAAC;IAED,SAAS,CAAC,QAA4B;QACpC,QAAQ,CAAC,KAAK,CAAC,4BAAe,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACjD,CAAC;;AAxFU,kCAAW;AACE,uBAAW,GAAa;IAC9C,OAAO,EAAE,qBAAS;IAClB,KAAK,EAAE,cAAK,CAAC,OAAO;IACpB,UAAU,EAAE,CAAC,OAAmB,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG;IACvD,MAAM,EAAE,CAAC,cAAO,CAAC;CAClB,AALkC,CAKjC;sBANS,WAAW;IADvB,IAAA,eAAM,EAAC,EAAE,CAAC;GACE,WAAW,CAyFvB"}

package/dist/request-utils.d.ts

@@ -0,0 +1,7 @@
+import type { AnyRequest, AnyResponse, QelosNestConfig, QelosTokenPair, ResolvedTokens } from './types';
+export declare const DEFAULT_ACCESS_COOKIE = "q_access_token";
+export declare const DEFAULT_REFRESH_COOKIE = "q_refresh_token";
+export declare function readCookie(request: AnyRequest, name: string): string | undefined;
+export declare function readTokens(request: AnyRequest, config: QelosNestConfig): QelosTokenPair;
+export declare function writeTokensToCookies(response: AnyResponse, config: QelosNestConfig, tokens: ResolvedTokens): void;
+export declare function shouldSkip(request: AnyRequest, config: QelosNestConfig): boolean;

package/dist/request-utils.js

@@ -0,0 +1,116 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_REFRESH_COOKIE = exports.DEFAULT_ACCESS_COOKIE = void 0;
+exports.readCookie = readCookie;
+exports.readTokens = readTokens;
+exports.writeTokensToCookies = writeTokensToCookies;
+exports.shouldSkip = shouldSkip;
+exports.DEFAULT_ACCESS_COOKIE = 'q_access_token';
+exports.DEFAULT_REFRESH_COOKIE = 'q_refresh_token';
+function readCookie(request, name) {
+    // Prefer cookie-parser / @fastify/cookie's parsed output when available.
+    if (request.cookies && typeof request.cookies[name] === 'string') {
+        return request.cookies[name];
+    }
+    const cookieHeader = request.headers.cookie;
+    const header = Array.isArray(cookieHeader) ? cookieHeader.join('; ') : cookieHeader;
+    if (!header)
+        return undefined;
+    const prefix = name + '=';
+    for (const part of header.split(';')) {
+        const trimmed = part.trim();
+        if (trimmed.startsWith(prefix)) {
+            try {
+                return decodeURIComponent(trimmed.slice(prefix.length));
+            }
+            catch {
+                return trimmed.slice(prefix.length);
+            }
+        }
+    }
+    return undefined;
+}
+function readTokens(request, config) {
+    const accessCookie = config.accessTokenCookie || exports.DEFAULT_ACCESS_COOKIE;
+    const refreshCookie = config.refreshTokenCookie || exports.DEFAULT_REFRESH_COOKIE;
+    const cookieAccess = readCookie(request, accessCookie);
+    const cookieRefresh = readCookie(request, refreshCookie);
+    const rawAuth = request.headers.authorization;
+    const authHeader = Array.isArray(rawAuth) ? rawAuth[0] : rawAuth;
+    const headerAccess = authHeader && authHeader.toLowerCase().startsWith('bearer ')
+        ? authHeader.slice(7).trim()
+        : undefined;
+    return {
+        accessToken: headerAccess || cookieAccess || undefined,
+        refreshToken: cookieRefresh || undefined,
+    };
+}
+function serializeCookie(name, value, secure) {
+    const parts = [
+        `${name}=${encodeURIComponent(value)}`,
+        'Path=/',
+        'HttpOnly',
+        'SameSite=Lax',
+    ];
+    if (secure)
+        parts.push('Secure');
+    return parts.join('; ');
+}
+function appendSetCookie(response, value) {
+    const setHeader = response.setHeader || response.header;
+    const getHeader = response.getHeader;
+    const existing = typeof getHeader === 'function' ? getHeader.call(response, 'set-cookie') : undefined;
+    let next;
+    if (Array.isArray(existing)) {
+        next = [...existing, value];
+    }
+    else if (typeof existing === 'string') {
+        next = [existing, value];
+    }
+    else {
+        next = [value];
+    }
+    if (typeof setHeader === 'function') {
+        setHeader.call(response, 'set-cookie', next);
+    }
+}
+function writeTokensToCookies(response, config, tokens) {
+    const accessCookie = config.accessTokenCookie || exports.DEFAULT_ACCESS_COOKIE;
+    const refreshCookie = config.refreshTokenCookie || exports.DEFAULT_REFRESH_COOKIE;
+    const secure = !/^http:\/\//i.test(config.appUrl);
+    const cookieOptions = {
+        httpOnly: true,
+        secure,
+        sameSite: 'lax',
+        path: '/',
+    };
+    // Express
+    if (typeof response.cookie === 'function') {
+        response.cookie(accessCookie, tokens.accessToken, cookieOptions);
+        if (tokens.refreshToken) {
+            response.cookie(refreshCookie, tokens.refreshToken, cookieOptions);
+        }
+        return;
+    }
+    // Fastify (with @fastify/cookie)
+    if (typeof response.setCookie === 'function') {
+        response.setCookie(accessCookie, tokens.accessToken, cookieOptions);
+        if (tokens.refreshToken) {
+            response.setCookie(refreshCookie, tokens.refreshToken, cookieOptions);
+        }
+        return;
+    }
+    appendSetCookie(response, serializeCookie(accessCookie, tokens.accessToken, secure));
+    if (tokens.refreshToken) {
+        appendSetCookie(response, serializeCookie(refreshCookie, tokens.refreshToken, secure));
+    }
+}
+function shouldSkip(request, config) {
+    if (!config.skipPaths?.length)
+        return false;
+    const url = request.path || request.url || '';
+    const queryIdx = url.indexOf('?');
+    const path = queryIdx >= 0 ? url.slice(0, queryIdx) : url;
+    return config.skipPaths.some((prefix) => path.startsWith(prefix));
+}
+//# sourceMappingURL=request-utils.js.map

package/dist/request-utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-utils.js","sourceRoot":"","sources":["../src/request-utils.ts"],"names":[],"mappings":";;;AAWA,gCAoBC;AAED,gCAkBC;AA+BD,oDAsCC;AAED,gCASC;AA3HY,QAAA,qBAAqB,GAAG,gBAAgB,CAAC;AACzC,QAAA,sBAAsB,GAAG,iBAAiB,CAAC;AAExD,SAAgB,UAAU,CAAC,OAAmB,EAAE,IAAY;IAC1D,yEAAyE;IACzE,IAAI,OAAO,CAAC,OAAO,IAAI,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,QAAQ,EAAE,CAAC;QACjE,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IACD,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;IAC5C,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC;IACpF,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,MAAM,MAAM,GAAG,IAAI,GAAG,GAAG,CAAC;IAC1B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/B,IAAI,CAAC;gBACH,OAAO,kBAAkB,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;YAC1D,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACtC,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAgB,UAAU,CACxB,OAAmB,EACnB,MAAuB;IAEvB,MAAM,YAAY,GAAG,MAAM,CAAC,iBAAiB,IAAI,6BAAqB,CAAC;IACvE,MAAM,aAAa,GAAG,MAAM,CAAC,kBAAkB,IAAI,8BAAsB,CAAC;IAC1E,MAAM,YAAY,GAAG,UAAU,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IACvD,MAAM,aAAa,GAAG,UAAU,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IACzD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC;IAC9C,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IACjE,MAAM,YAAY,GAChB,UAAU,IAAI,UAAU,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;QAC1D,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE;QAC5B,CAAC,CAAC,SAAS,CAAC;IAChB,OAAO;QACL,WAAW,EAAE,YAAY,IAAI,YAAY,IAAI,SAAS;QACtD,YAAY,EAAE,aAAa,IAAI,SAAS;KACzC,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,IAAY,EAAE,KAAa,EAAE,MAAe;IACnE,MAAM,KAAK,GAAG;QACZ,GAAG,IAAI,IAAI,kBAAkB,CAAC,KAAK,CAAC,EAAE;QACtC,QAAQ;QACR,UAAU;QACV,cAAc;KACf,CAAC;IACF,IAAI,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACjC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,eAAe,CAAC,QAAqB,EAAE,KAAa;IAC3D,MAAM,SAAS,GAAG,QAAQ,CAAC,SAAS,IAAI,QAAQ,CAAC,MAAM,CAAC;IACxD,MAAM,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAC;IACrC,MAAM,QAAQ,GACZ,OAAO,SAAS,KAAK,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACvF,IAAI,IAAc,CAAC;IACnB,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,IAAI,GAAG,CAAC,GAAG,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC9B,CAAC;SAAM,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACxC,IAAI,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC3B,CAAC;SAAM,CAAC;QACN,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IACjB,CAAC;IACD,IAAI,OAAO,SAAS,KAAK,UAAU,EAAE,CAAC;QACpC,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,EAAE,IAAI,CAAC,CAAC;IAC/C,CAAC;AACH,CAAC;AAED,SAAgB,oBAAoB,CAClC,QAAqB,EACrB,MAAuB,EACvB,MAAsB;IAEtB,MAAM,YAAY,GAAG,MAAM,CAAC,iBAAiB,IAAI,6BAAqB,CAAC;IACvE,MAAM,aAAa,GAAG,MAAM,CAAC,kBAAkB,IAAI,8BAAsB,CAAC;IAC1E,MAAM,MAAM,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAElD,MAAM,aAAa,GAAG;QACpB,QAAQ,EAAE,IAAI;QACd,MAAM;QACN,QAAQ,EAAE,KAAc;QACxB,IAAI,EAAE,GAAG;KACV,CAAC;IAEF,UAAU;IACV,IAAI,OAAO,QAAQ,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QAC1C,QAAQ,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;QACjE,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YACxB,QAAQ,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;QACrE,CAAC;QACD,OAAO;IACT,CAAC;IAED,iCAAiC;IACjC,IAAI,OAAO,QAAQ,CAAC,SAAS,KAAK,UAAU,EAAE,CAAC;QAC7C,QAAQ,CAAC,SAAS,CAAC,YAAY,EAAE,MAAM,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;QACpE,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YACxB,QAAQ,CAAC,SAAS,CAAC,aAAa,EAAE,MAAM,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;QACxE,CAAC;QACD,OAAO;IACT,CAAC;IAED,eAAe,CAAC,QAAQ,EAAE,eAAe,CAAC,YAAY,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;IACrF,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;QACxB,eAAe,CAAC,QAAQ,EAAE,eAAe,CAAC,aAAa,EAAE,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC;IACzF,CAAC;AACH,CAAC;AAED,SAAgB,UAAU,CACxB,OAAmB,EACnB,MAAuB;IAEvB,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM;QAAE,OAAO,KAAK,CAAC;IAC5C,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC;IAC9C,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,IAAI,GAAG,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAC1D,OAAO,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;AACpE,CAAC"}

package/dist/sdk-factory.d.ts

@@ -0,0 +1,15 @@
+import QelosSDK from '@qelos/sdk';
+import type { AnyRequest, AnyResponse, QelosNestConfig, QelosTokenPair, TokenRefreshHook } from './types';
+export interface CreateSdkParams {
+    config: QelosNestConfig;
+    /**
+     * Tokens for the current request. The factory mutates this object in place
+     * when a token refresh occurs, so callers can read the latest pair after
+     * the SDK has been used.
+     */
+    tokens: QelosTokenPair;
+    request: AnyRequest;
+    response: AnyResponse;
+    onTokenRefresh?: TokenRefreshHook;
+}
+export declare function createRequestSdk({ config, tokens, request, response, onTokenRefresh, }: CreateSdkParams): QelosSDK;

package/dist/sdk-factory.js

@@ -0,0 +1,97 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createRequestSdk = createRequestSdk;
+const sdk_1 = __importDefault(require("@qelos/sdk"));
+const NO_AUTH_URLS = new Set([
+    '/api/token/refresh',
+    '/api/cookie/refresh',
+    '/api/signin',
+    '/api/signup',
+]);
+function createRequestSdk({ config, tokens, request, response, onTokenRefresh, }) {
+    let sdk;
+    let refreshInFlight = null;
+    const baseOptions = config.sdkOptions || {};
+    async function performRefresh() {
+        if (!tokens.refreshToken && !tokens.accessToken) {
+            throw new Error('no refresh token available');
+        }
+        const previous = {
+            accessToken: tokens.accessToken,
+            refreshToken: tokens.refreshToken,
+        };
+        let refreshed;
+        if (tokens.refreshToken) {
+            const result = await sdk.authentication.refreshToken(tokens.refreshToken);
+            refreshed = {
+                accessToken: result.payload.token,
+                refreshToken: result.payload.refreshToken,
+            };
+        }
+        else {
+            const result = await sdk.authentication.refreshCookieToken(tokens.accessToken);
+            refreshed = {
+                accessToken: result.payload.cookieToken,
+            };
+        }
+        tokens.accessToken = refreshed.accessToken;
+        tokens.refreshToken = refreshed.refreshToken;
+        if (onTokenRefresh) {
+            await onTokenRefresh({
+                request,
+                response,
+                oldTokens: previous,
+                newTokens: refreshed,
+                sdk,
+            });
+        }
+    }
+    function ensureRefresh() {
+        if (!refreshInFlight) {
+            refreshInFlight = performRefresh().finally(() => {
+                refreshInFlight = null;
+            });
+        }
+        return refreshInFlight;
+    }
+    const options = {
+        appUrl: config.appUrl,
+        fetch: globalThis.fetch,
+        forceRefresh: !config.apiToken,
+        ...baseOptions,
+    };
+    if (config.apiToken) {
+        options.apiToken = config.apiToken;
+    }
+    else {
+        if (tokens.accessToken) {
+            options.accessToken = tokens.accessToken;
+        }
+        if (tokens.refreshToken) {
+            options.refreshToken = tokens.refreshToken;
+        }
+        options.extraHeaders = async (relativeUrl, forceRefresh) => {
+            const headers = {};
+            if (NO_AUTH_URLS.has(relativeUrl)) {
+                return headers;
+            }
+            if (forceRefresh && tokens.refreshToken) {
+                await ensureRefresh();
+            }
+            const token = sdk?.authentication?.accessToken || tokens.accessToken;
+            if (token) {
+                headers.authorization = 'Bearer ' + token;
+            }
+            return headers;
+        };
+        options.onFailedRefreshToken = async () => {
+            await ensureRefresh();
+        };
+    }
+    sdk = new sdk_1.default(options);
+    return sdk;
+}
+//# sourceMappingURL=sdk-factory.js.map

package/dist/sdk-factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sdk-factory.js","sourceRoot":"","sources":["../src/sdk-factory.ts"],"names":[],"mappings":";;;;;AA+BA,4CA6FC;AA5HD,qDAAkC;AAWlC,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC;IAC3B,oBAAoB;IACpB,qBAAqB;IACrB,aAAa;IACb,aAAa;CACd,CAAC,CAAC;AAeH,SAAgB,gBAAgB,CAAC,EAC/B,MAAM,EACN,MAAM,EACN,OAAO,EACP,QAAQ,EACR,cAAc,GACE;IAChB,IAAI,GAAa,CAAC;IAClB,IAAI,eAAe,GAAyB,IAAI,CAAC;IAEjD,MAAM,WAAW,GAAG,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC;IAE5C,KAAK,UAAU,cAAc;QAC3B,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YAChD,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAChD,CAAC;QACD,MAAM,QAAQ,GAAmB;YAC/B,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,YAAY,EAAE,MAAM,CAAC,YAAY;SAClC,CAAC;QACF,IAAI,SAAyB,CAAC;QAC9B,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YACxB,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,YAAY,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YAC1E,SAAS,GAAG;gBACV,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK;gBACjC,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,YAAY;aAC1C,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,kBAAkB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YAC/E,SAAS,GAAG;gBACV,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,WAAW;aACxC,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,WAAW,GAAG,SAAS,CAAC,WAAW,CAAC;QAC3C,MAAM,CAAC,YAAY,GAAG,SAAS,CAAC,YAAY,CAAC;QAC7C,IAAI,cAAc,EAAE,CAAC;YACnB,MAAM,cAAc,CAAC;gBACnB,OAAO;gBACP,QAAQ;gBACR,SAAS,EAAE,QAAQ;gBACnB,SAAS,EAAE,SAAS;gBACpB,GAAG;aACJ,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,SAAS,aAAa;QACpB,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,eAAe,GAAG,cAAc,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;gBAC9C,eAAe,GAAG,IAAI,CAAC;YACzB,CAAC,CAAC,CAAC;QACL,CAAC;QACD,OAAO,eAAe,CAAC;IACzB,CAAC;IAED,MAAM,OAAO,GAAoB;QAC/B,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,KAAK,EAAE,UAAU,CAAC,KAAiC;QACnD,YAAY,EAAE,CAAC,MAAM,CAAC,QAAQ;QAC9B,GAAG,WAAW;KACf,CAAC;IAEF,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpB,OAAO,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;IACrC,CAAC;SAAM,CAAC;QACN,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YACvB,OAAO,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;QAC3C,CAAC;QACD,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YACxB,OAAO,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;QAC7C,CAAC;QACD,OAAO,CAAC,YAAY,GAAG,KAAK,EAAE,WAAmB,EAAE,YAAsB,EAAE,EAAE;YAC3E,MAAM,OAAO,GAA8B,EAAE,CAAC;YAC9C,IAAI,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;gBAClC,OAAO,OAAO,CAAC;YACjB,CAAC;YACD,IAAI,YAAY,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;gBACxC,MAAM,aAAa,EAAE,CAAC;YACxB,CAAC;YACD,MAAM,KAAK,GACT,GAAG,EAAE,cAAc,EAAE,WAAW,IAAI,MAAM,CAAC,WAAW,CAAC;YACzD,IAAI,KAAK,EAAE,CAAC;gBACV,OAAO,CAAC,aAAa,GAAG,SAAS,GAAG,KAAK,CAAC;YAC5C,CAAC;YACD,OAAO,OAAO,CAAC;QACjB,CAAC,CAAC;QACF,OAAO,CAAC,oBAAoB,GAAG,KAAK,IAAI,EAAE;YACxC,MAAM,aAAa,EAAE,CAAC;QACxB,CAAC,CAAC;IACJ,CAAC;IAED,GAAG,GAAG,IAAI,aAAQ,CAAC,OAAO,CAAC,CAAC;IAC5B,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,122 @@
+import type QelosSDK from '@qelos/sdk';
+import type { IUser } from '@qelos/sdk/dist/authentication';
+import type { IWorkspace } from '@qelos/sdk/workspaces';
+import type { QelosSDKOptions } from '@qelos/sdk/types';
+export interface QelosTokenPair {
+    accessToken?: string;
+    refreshToken?: string;
+}
+export interface ResolvedTokens {
+    accessToken: string;
+    refreshToken?: string;
+}
+/**
+ * A request-like object. NestJS can run on either Express or Fastify, so we
+ * type the bits we touch generically and feature-detect at runtime.
+ */
+export interface AnyRequest {
+    url?: string;
+    path?: string;
+    headers: Record<string, string | string[] | undefined>;
+    cookies?: Record<string, string | undefined>;
+    qelos?: QelosRequestContext;
+    [key: string]: unknown;
+}
+/**
+ * A response-like object (Express `Response` or Fastify `FastifyReply`).
+ */
+export interface AnyResponse {
+    cookie?: (name: string, value: string, options?: Record<string, unknown>) => unknown;
+    setCookie?: (name: string, value: string, options?: Record<string, unknown>) => unknown;
+    setHeader?: (name: string, value: string | string[]) => unknown;
+    header?: (name: string, value: string | string[]) => unknown;
+    getHeader?: (name: string) => string | string[] | number | undefined;
+    [key: string]: unknown;
+}
+export interface QelosNestConfig {
+    /**
+     * Base URL of the Qelos backend (e.g. https://yourdomain.com).
+     */
+    appUrl: string;
+    /**
+     * Static API token used for service-to-service calls. When provided, no
+     * cookie/refresh-token handling is performed.
+     */
+    apiToken?: string;
+    /**
+     * Cookie name carrying the Qelos access token. Defaults to `q_access_token`.
+     */
+    accessTokenCookie?: string;
+    /**
+     * Cookie name carrying the Qelos refresh token. Defaults to `q_refresh_token`.
+     */
+    refreshTokenCookie?: string;
+    /**
+     * If true, the middleware short-circuits with 401 when the user cannot be
+     * resolved. Defaults to `false` — anonymous requests pass through with
+     * `request.qelos.user = null`.
+     *
+     * For more granular control, prefer `QelosAuthGuard` on the routes that
+     * need authentication.
+     */
+    requireAuth?: boolean;
+    /**
+     * Skip the middleware entirely for requests whose path starts with any of
+     * these prefixes. Useful for `/health`, `/api/_auth`, etc.
+     */
+    skipPaths?: string[];
+    /**
+     * Optional extra options merged into the per-request SDK instance.
+     */
+    sdkOptions?: Partial<QelosSDKOptions>;
+}
+export type WorkspaceResolver = (params: {
+    request: AnyRequest;
+    user: IUser;
+    workspaces: IWorkspace[];
+}) => IWorkspace | null | Promise<IWorkspace | null>;
+export interface TokenRefreshContext {
+    request: AnyRequest;
+    response: AnyResponse;
+    oldTokens: QelosTokenPair;
+    newTokens: ResolvedTokens;
+    sdk: QelosSDK;
+}
+export type TokenRefreshHook = (ctx: TokenRefreshContext) => void | Promise<void>;
+export interface QelosRequestContext {
+    /**
+     * The authenticated user, or `null` when anonymous.
+     */
+    user: IUser | null;
+    /**
+     * The active workspace for the request, or `null` when none is active /
+     * the user is anonymous.
+     */
+    workspace: IWorkspace | null;
+    /**
+     * The full list of workspaces the user has access to.
+     */
+    workspaces: IWorkspace[];
+    /**
+     * SDK instance bound to the current request's tokens.
+     */
+    sdk: QelosSDK;
+    /**
+     * Tokens read from the request. Mutated in place when a refresh occurs so
+     * later code can read the current pair.
+     */
+    tokens: QelosTokenPair;
+}
+export interface QelosModuleOptions {
+    config: QelosNestConfig;
+    /**
+     * Hook invoked after a successful token refresh. The default implementation
+     * writes the new tokens back to the response cookies.
+     */
+    onTokenRefresh?: TokenRefreshHook;
+    /**
+     * Resolve the active workspace for a request. Defaults to picking the first
+     * workspace returned from `sdk.workspaces.getList()`.
+     */
+    resolveWorkspace?: WorkspaceResolver;
+}

package/dist/types.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/package.json

@@ -0,0 +1,80 @@
+{
+  "name": "@qelos/integrator-nest",
+  "version": "4.0.0",
+  "description": "NestJS module that identifies the Qelos user and active workspace before your route handlers run",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "require": "./dist/index.js",
+      "default": "./dist/index.js"
+    },
+    "./types": {
+      "types": "./dist/types.d.ts",
+      "import": "./dist/types.js",
+      "require": "./dist/types.js",
+      "default": "./dist/types.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "keywords": [
+    "qelos",
+    "nest",
+    "nestjs",
+    "middleware",
+    "guard",
+    "integrator",
+    "auth"
+  ],
+  "author": "David Meir-Levy <davidmeirlevy@gmail.com>",
+  "license": "MIT",
+  "publishConfig": {
+    "access": "public"
+  },
+  "engines": {
+    "node": ">=18"
+  },
+  "peerDependencies": {
+    "@nestjs/common": "^9.0.0 || ^10.0.0 || ^11.0.0",
+    "@nestjs/core": "^9.0.0 || ^10.0.0 || ^11.0.0",
+    "reflect-metadata": "^0.1.13 || ^0.2.0",
+    "rxjs": "^7.0.0"
+  },
+  "peerDependenciesMeta": {
+    "@nestjs/common": {
+      "optional": false
+    },
+    "@nestjs/core": {
+      "optional": false
+    },
+    "reflect-metadata": {
+      "optional": false
+    },
+    "rxjs": {
+      "optional": false
+    }
+  },
+  "dependencies": {
+    "@qelos/sdk": "^4.0.0"
+  },
+  "devDependencies": {
+    "@nestjs/common": "^10.4.5",
+    "@nestjs/core": "^10.4.5",
+    "reflect-metadata": "^0.2.2",
+    "rxjs": "^7.8.1",
+    "tsx": "^4.21.0",
+    "typescript": "^5.6.3"
+  },
+  "scripts": {
+    "type-check": "tsc --noEmit",
+    "build": "tsc",
+    "pre-build": "tsc",
+    "test": "node --import tsx --test test/**/*.test.ts"
+  }
+}