@revisium/core 2.9.2 → 2.10.0-alpha.0

package/dist/src/features/api-key/commands/impl/create-api-key.command.d.ts

@@ -0,0 +1,37 @@
+import { ApiKeyType, Prisma } from '../../../../__generated__/client';
+export declare class CreateApiKeyCommand {
+    readonly data: {
+        readonly type: ApiKeyType;
+        readonly name: string;
+        readonly userId?: string;
+        readonly serviceId?: string;
+        readonly internalServiceName?: string;
+        readonly organizationId?: string;
+        readonly projectIds?: string[];
+        readonly branchNames?: string[];
+        readonly tableIds?: string[];
+        readonly permissions?: Prisma.InputJsonValue;
+        readonly readOnly?: boolean;
+        readonly allowedIps?: string[];
+        readonly expiresAt?: Date;
+    };
+    constructor(data: {
+        readonly type: ApiKeyType;
+        readonly name: string;
+        readonly userId?: string;
+        readonly serviceId?: string;
+        readonly internalServiceName?: string;
+        readonly organizationId?: string;
+        readonly projectIds?: string[];
+        readonly branchNames?: string[];
+        readonly tableIds?: string[];
+        readonly permissions?: Prisma.InputJsonValue;
+        readonly readOnly?: boolean;
+        readonly allowedIps?: string[];
+        readonly expiresAt?: Date;
+    });
+}
+export type CreateApiKeyCommandReturnType = {
+    id: string;
+    key: string;
+};

package/dist/src/features/api-key/commands/impl/create-api-key.command.js

@@ -0,0 +1,10 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CreateApiKeyCommand = void 0;
+class CreateApiKeyCommand {
+    constructor(data) {
+        this.data = data;
+    }
+}
+exports.CreateApiKeyCommand = CreateApiKeyCommand;
+//# sourceMappingURL=create-api-key.command.js.map

package/dist/src/features/api-key/commands/impl/create-api-key.command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-api-key.command.js","sourceRoot":"","sources":["../../../../../../src/features/api-key/commands/impl/create-api-key.command.ts"],"names":[],"mappings":";;;AAEA,MAAa,mBAAmB;IAC9B,YACkB,IAcf;QAde,SAAI,GAAJ,IAAI,CAcnB;IACA,CAAC;CACL;AAlBD,kDAkBC"}

package/dist/src/features/api-key/commands/impl/index.d.ts

@@ -0,0 +1,3 @@
+export * from '../../../../features/api-key/commands/impl/create-api-key.command';
+export * from '../../../../features/api-key/commands/impl/revoke-api-key.command';
+export * from '../../../../features/api-key/commands/impl/rotate-api-key.command';

package/dist/src/features/api-key/commands/impl/index.js

@@ -0,0 +1,20 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./create-api-key.command"), exports);
+__exportStar(require("./revoke-api-key.command"), exports);
+__exportStar(require("./rotate-api-key.command"), exports);
+//# sourceMappingURL=index.js.map

package/dist/src/features/api-key/commands/impl/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../src/features/api-key/commands/impl/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2DAA0E;AAC1E,2DAA0E;AAC1E,2DAA0E"}

package/dist/src/features/api-key/commands/impl/revoke-api-key.command.d.ts

@@ -0,0 +1,9 @@
+export declare class RevokeApiKeyCommand {
+    readonly data: {
+        readonly keyId: string;
+    };
+    constructor(data: {
+        readonly keyId: string;
+    });
+}
+export type RevokeApiKeyCommandReturnType = void;

package/dist/src/features/api-key/commands/impl/revoke-api-key.command.js

@@ -0,0 +1,10 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RevokeApiKeyCommand = void 0;
+class RevokeApiKeyCommand {
+    constructor(data) {
+        this.data = data;
+    }
+}
+exports.RevokeApiKeyCommand = RevokeApiKeyCommand;
+//# sourceMappingURL=revoke-api-key.command.js.map

package/dist/src/features/api-key/commands/impl/revoke-api-key.command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"revoke-api-key.command.js","sourceRoot":"","sources":["../../../../../../src/features/api-key/commands/impl/revoke-api-key.command.ts"],"names":[],"mappings":";;;AAAA,MAAa,mBAAmB;IAC9B,YACkB,IAEf;QAFe,SAAI,GAAJ,IAAI,CAEnB;IACA,CAAC;CACL;AAND,kDAMC"}

package/dist/src/features/api-key/commands/impl/rotate-api-key.command.d.ts

@@ -0,0 +1,12 @@
+export declare class RotateApiKeyCommand {
+    readonly data: {
+        readonly keyId: string;
+    };
+    constructor(data: {
+        readonly keyId: string;
+    });
+}
+export type RotateApiKeyCommandReturnType = {
+    id: string;
+    key: string;
+};

package/dist/src/features/api-key/commands/impl/rotate-api-key.command.js

@@ -0,0 +1,10 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RotateApiKeyCommand = void 0;
+class RotateApiKeyCommand {
+    constructor(data) {
+        this.data = data;
+    }
+}
+exports.RotateApiKeyCommand = RotateApiKeyCommand;
+//# sourceMappingURL=rotate-api-key.command.js.map

package/dist/src/features/api-key/commands/impl/rotate-api-key.command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rotate-api-key.command.js","sourceRoot":"","sources":["../../../../../../src/features/api-key/commands/impl/rotate-api-key.command.ts"],"names":[],"mappings":";;;AAAA,MAAa,mBAAmB;IAC9B,YACkB,IAEf;QAFe,SAAI,GAAJ,IAAI,CAEnB;IACA,CAAC;CACL;AAND,kDAMC"}

package/dist/src/features/api-key/commands/index.d.ts

@@ -0,0 +1,2 @@
+import { CreateApiKeyHandler, RevokeApiKeyHandler, RotateApiKeyHandler } from '../../../features/api-key/commands/handlers';
+export declare const API_KEY_COMMANDS: (typeof CreateApiKeyHandler | typeof RevokeApiKeyHandler | typeof RotateApiKeyHandler)[];

package/dist/src/features/api-key/commands/index.js

@@ -0,0 +1,10 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.API_KEY_COMMANDS = void 0;
+const handlers_1 = require("./handlers");
+exports.API_KEY_COMMANDS = [
+    handlers_1.CreateApiKeyHandler,
+    handlers_1.RevokeApiKeyHandler,
+    handlers_1.RotateApiKeyHandler,
+];
+//# sourceMappingURL=index.js.map

package/dist/src/features/api-key/commands/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/features/api-key/commands/index.ts"],"names":[],"mappings":";;;AAAA,yCAIgD;AAEnC,QAAA,gBAAgB,GAAG;IAC9B,8BAAmB;IACnB,8BAAmB;IACnB,8BAAmB;CACpB,CAAC"}

package/dist/src/features/api-key/internal-key-bootstrap.service.d.ts

@@ -0,0 +1,23 @@
+import { OnModuleInit } from '@nestjs/common';
+import { ConfigService } from '@nestjs/config';
+import { ApiKeyService } from '../../features/api-key/api-key.service';
+import { AppOptions } from '../../app-mode';
+import { AuthCacheService } from '../../infrastructure/cache/services/auth-cache.service';
+import { PrismaService } from '../../infrastructure/database/prisma.service';
+export declare class InternalKeyBootstrapService implements OnModuleInit {
+    private readonly prisma;
+    private readonly apiKeyService;
+    private readonly authCache;
+    private readonly configService;
+    private readonly options;
+    private readonly logger;
+    constructor(prisma: PrismaService, apiKeyService: ApiKeyService, authCache: AuthCacheService, configService: ConfigService, options: AppOptions);
+    onModuleInit(): Promise<void>;
+    private resolveMonolithServices;
+    private bootstrapMonolith;
+    private bootstrapMicroservice;
+    private deriveKey;
+    private scanEnvForServices;
+    private warnIfEnvVarsSet;
+    private upsertInternalKey;
+}

package/dist/src/features/api-key/internal-key-bootstrap.service.js

@@ -0,0 +1,170 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var InternalKeyBootstrapService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.InternalKeyBootstrapService = void 0;
+const common_1 = require("@nestjs/common");
+const config_1 = require("@nestjs/config");
+const node_crypto_1 = require("node:crypto");
+const nanoid_1 = require("nanoid");
+const client_1 = require("../../__generated__/client");
+const api_key_service_1 = require("./api-key.service");
+const app_mode_1 = require("../../app-mode");
+const auth_cache_service_1 = require("../../infrastructure/cache/services/auth-cache.service");
+const prisma_service_1 = require("../../infrastructure/database/prisma.service");
+const INTERNAL_KEY_ENV_PREFIX = 'INTERNAL_API_KEY_';
+const DEFAULT_SERVICES = ['endpoint'];
+let InternalKeyBootstrapService = InternalKeyBootstrapService_1 = class InternalKeyBootstrapService {
+    constructor(prisma, apiKeyService, authCache, configService, options) {
+        this.prisma = prisma;
+        this.apiKeyService = apiKeyService;
+        this.authCache = authCache;
+        this.configService = configService;
+        this.options = options;
+        this.logger = new common_1.Logger(InternalKeyBootstrapService_1.name);
+    }
+    async onModuleInit() {
+        if (this.options.mode === 'monolith') {
+            await this.bootstrapMonolith();
+        }
+        else {
+            await this.bootstrapMicroservice();
+        }
+    }
+    resolveMonolithServices() {
+        const override = this.configService.get('INTERNAL_MONOLITH_SERVICES');
+        if (!override) {
+            return DEFAULT_SERVICES;
+        }
+        const parsed = override
+            .split(',')
+            .map((s) => s.trim())
+            .filter(Boolean);
+        return parsed.length > 0 ? parsed : DEFAULT_SERVICES;
+    }
+    async bootstrapMonolith() {
+        this.warnIfEnvVarsSet();
+        const jwtSecret = this.configService.get('JWT_SECRET');
+        for (const serviceName of this.resolveMonolithServices()) {
+            let key;
+            if (jwtSecret) {
+                key = this.deriveKey(jwtSecret, serviceName);
+            }
+            else {
+                key = `rev_${(0, nanoid_1.nanoid)(22)}`;
+                this.logger.warn(`JWT_SECRET not set — generated random internal key for '${serviceName}'. ` +
+                    `Set JWT_SECRET for multi-replica deployments.`);
+            }
+            const envVar = `${INTERNAL_KEY_ENV_PREFIX}${serviceName.toUpperCase()}`;
+            process.env[envVar] = key;
+            await this.upsertInternalKey(key, serviceName);
+        }
+    }
+    async bootstrapMicroservice() {
+        const services = this.scanEnvForServices();
+        if (services.length === 0) {
+            return;
+        }
+        for (const { serviceName, key, envVar } of services) {
+            if (!this.apiKeyService.validateKeyFormat(key)) {
+                this.logger.error(`${envVar} has invalid format (expected rev_ + 22 chars). Skipping registration.`);
+                continue;
+            }
+            await this.upsertInternalKey(key, serviceName);
+        }
+    }
+    deriveKey(jwtSecret, serviceName) {
+        const hmac = (0, node_crypto_1.createHmac)('sha256', jwtSecret);
+        hmac.update(`revisium:internal-key:${serviceName}`);
+        return `rev_${hmac.digest('base64url').substring(0, 22)}`;
+    }
+    scanEnvForServices() {
+        const result = [];
+        for (const [envKey, value] of Object.entries(process.env)) {
+            if (envKey.startsWith(INTERNAL_KEY_ENV_PREFIX) && value) {
+                const suffix = envKey.slice(INTERNAL_KEY_ENV_PREFIX.length);
+                result.push({
+                    serviceName: suffix.toLowerCase(),
+                    key: value,
+                    envVar: envKey,
+                });
+            }
+        }
+        return result;
+    }
+    warnIfEnvVarsSet() {
+        for (const envKey of Object.keys(process.env)) {
+            if (envKey.startsWith(INTERNAL_KEY_ENV_PREFIX)) {
+                this.logger.warn(`${envKey} is set but ignored in monolith mode. Internal keys are derived from JWT_SECRET.`);
+            }
+        }
+    }
+    async upsertInternalKey(key, serviceName) {
+        const keyName = `internal-${serviceName}`;
+        const newHash = this.apiKeyService.hashKey(key);
+        const existing = await this.prisma.apiKey.findFirst({
+            where: {
+                type: client_1.ApiKeyType.INTERNAL,
+                internalServiceName: serviceName,
+                revokedAt: null,
+            },
+        });
+        if (existing?.keyHash === newHash) {
+            this.logger.log(`Internal API key for '${serviceName}' service initialized`);
+            return;
+        }
+        try {
+            await this.prisma.$transaction(async (tx) => {
+                if (existing) {
+                    await tx.apiKey.update({
+                        where: { id: existing.id },
+                        data: { revokedAt: new Date() },
+                    });
+                }
+                await tx.apiKey.create({
+                    data: {
+                        prefix: 'rev_',
+                        keyHash: newHash,
+                        type: client_1.ApiKeyType.INTERNAL,
+                        name: keyName,
+                        internalServiceName: serviceName,
+                    },
+                });
+            });
+            if (existing) {
+                await this.authCache.invalidateApiKeyByHash(existing.keyHash);
+                this.logger.log(`Revoked old internal API key for '${serviceName}' service`);
+            }
+            this.logger.log(`Internal API key for '${serviceName}' service initialized`);
+        }
+        catch (error) {
+            if (error instanceof client_1.Prisma.PrismaClientKnownRequestError &&
+                error.code === 'P2002') {
+                this.logger.log(`Internal API key for '${serviceName}' service already registered by another instance`);
+                return;
+            }
+            throw error;
+        }
+    }
+};
+exports.InternalKeyBootstrapService = InternalKeyBootstrapService;
+exports.InternalKeyBootstrapService = InternalKeyBootstrapService = InternalKeyBootstrapService_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __param(4, (0, common_1.Inject)(app_mode_1.APP_OPTIONS_TOKEN)),
+    __metadata("design:paramtypes", [prisma_service_1.PrismaService,
+        api_key_service_1.ApiKeyService,
+        auth_cache_service_1.AuthCacheService,
+        config_1.ConfigService, Object])
+], InternalKeyBootstrapService);
+//# sourceMappingURL=internal-key-bootstrap.service.js.map

package/dist/src/features/api-key/internal-key-bootstrap.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"internal-key-bootstrap.service.js","sourceRoot":"","sources":["../../../../src/features/api-key/internal-key-bootstrap.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAA0E;AAC1E,2CAA+C;AAC/C,6CAAyC;AACzC,mCAAgC;AAChC,uDAA8D;AAC9D,uDAAqE;AACrE,6CAA6D;AAC7D,+FAAwF;AACxF,iFAA2E;AAE3E,MAAM,uBAAuB,GAAG,mBAAmB,CAAC;AACpD,MAAM,gBAAgB,GAAG,CAAC,UAAU,CAAC,CAAC;AAG/B,IAAM,2BAA2B,mCAAjC,MAAM,2BAA2B;IAGtC,YACmB,MAAqB,EACrB,aAA4B,EAC5B,SAA2B,EAC3B,aAA4B,EAClB,OAAoC;QAJ9C,WAAM,GAAN,MAAM,CAAe;QACrB,kBAAa,GAAb,aAAa,CAAe;QAC5B,cAAS,GAAT,SAAS,CAAkB;QAC3B,kBAAa,GAAb,aAAa,CAAe;QACD,YAAO,GAAP,OAAO,CAAY;QAPhD,WAAM,GAAG,IAAI,eAAM,CAAC,6BAA2B,CAAC,IAAI,CAAC,CAAC;IAQpE,CAAC;IAEJ,KAAK,CAAC,YAAY;QAChB,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YACrC,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACjC,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,CAAC,qBAAqB,EAAE,CAAC;QACrC,CAAC;IACH,CAAC;IAEO,uBAAuB;QAK7B,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CACrC,4BAA4B,CAC7B,CAAC;QACF,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,gBAAgB,CAAC;QAC1B,CAAC;QACD,MAAM,MAAM,GAAG,QAAQ;aACpB,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;aACpB,MAAM,CAAC,OAAO,CAAC,CAAC;QACnB,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC;IACvD,CAAC;IAEO,KAAK,CAAC,iBAAiB;QAC7B,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAExB,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAS,YAAY,CAAC,CAAC;QAE/D,KAAK,MAAM,WAAW,IAAI,IAAI,CAAC,uBAAuB,EAAE,EAAE,CAAC;YACzD,IAAI,GAAW,CAAC;YAEhB,IAAI,SAAS,EAAE,CAAC;gBACd,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;YAC/C,CAAC;iBAAM,CAAC;gBACN,GAAG,GAAG,OAAO,IAAA,eAAM,EAAC,EAAE,CAAC,EAAE,CAAC;gBAC1B,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,2DAA2D,WAAW,KAAK;oBACzE,+CAA+C,CAClD,CAAC;YACJ,CAAC;YAED,MAAM,MAAM,GAAG,GAAG,uBAAuB,GAAG,WAAW,CAAC,WAAW,EAAE,EAAE,CAAC;YACxE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC;YAE1B,MAAM,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,qBAAqB;QACjC,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAE3C,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO;QACT,CAAC;QAED,KAAK,MAAM,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,QAAQ,EAAE,CAAC;YACpD,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/C,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,GAAG,MAAM,wEAAwE,CAClF,CAAC;gBACF,SAAS;YACX,CAAC;YAED,MAAM,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAEO,SAAS,CAAC,SAAiB,EAAE,WAAmB;QACtD,MAAM,IAAI,GAAG,IAAA,wBAAU,EAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAC7C,IAAI,CAAC,MAAM,CAAC,yBAAyB,WAAW,EAAE,CAAC,CAAC;QACpD,OAAO,OAAO,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;IAC5D,CAAC;IAEO,kBAAkB;QAKxB,MAAM,MAAM,GACV,EAAE,CAAC;QAEL,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1D,IAAI,MAAM,CAAC,UAAU,CAAC,uBAAuB,CAAC,IAAI,KAAK,EAAE,CAAC;gBACxD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC;gBAC5D,MAAM,CAAC,IAAI,CAAC;oBACV,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE;oBACjC,GAAG,EAAE,KAAK;oBACV,MAAM,EAAE,MAAM;iBACf,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,gBAAgB;QACtB,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9C,IAAI,MAAM,CAAC,UAAU,CAAC,uBAAuB,CAAC,EAAE,CAAC;gBAC/C,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,GAAG,MAAM,kFAAkF,CAC5F,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAC7B,GAAW,EACX,WAAmB;QAEnB,MAAM,OAAO,GAAG,YAAY,WAAW,EAAE,CAAC;QAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAEhD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC;YAClD,KAAK,EAAE;gBACL,IAAI,EAAE,mBAAU,CAAC,QAAQ;gBACzB,mBAAmB,EAAE,WAAW;gBAChC,SAAS,EAAE,IAAI;aAChB;SACF,CAAC,CAAC;QAEH,IAAI,QAAQ,EAAE,OAAO,KAAK,OAAO,EAAE,CAAC;YAClC,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,yBAAyB,WAAW,uBAAuB,CAC5D,CAAC;YACF,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;gBAC1C,IAAI,QAAQ,EAAE,CAAC;oBACb,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC;wBACrB,KAAK,EAAE,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE;wBAC1B,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE;qBAChC,CAAC,CAAC;gBACL,CAAC;gBAED,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC;oBACrB,IAAI,EAAE;wBACJ,MAAM,EAAE,MAAM;wBACd,OAAO,EAAE,OAAO;wBAChB,IAAI,EAAE,mBAAU,CAAC,QAAQ;wBACzB,IAAI,EAAE,OAAO;wBACb,mBAAmB,EAAE,WAAW;qBACjC;iBACF,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YAEH,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,IAAI,CAAC,SAAS,CAAC,sBAAsB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;gBAC9D,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,qCAAqC,WAAW,WAAW,CAC5D,CAAC;YACJ,CAAC;YAED,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,yBAAyB,WAAW,uBAAuB,CAC5D,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IACE,KAAK,YAAY,eAAM,CAAC,6BAA6B;gBACrD,KAAK,CAAC,IAAI,KAAK,OAAO,EACtB,CAAC;gBACD,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,yBAAyB,WAAW,kDAAkD,CACvF,CAAC;gBACF,OAAO;YACT,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;CACF,CAAA;AAxLY,kEAA2B;sCAA3B,2BAA2B;IADvC,IAAA,mBAAU,GAAE;IASR,WAAA,IAAA,eAAM,EAAC,4BAAiB,CAAC,CAAA;qCAJD,8BAAa;QACN,+BAAa;QACjB,qCAAgB;QACZ,sBAAa;GAPpC,2BAA2B,CAwLvC"}

package/dist/src/features/api-key/queries/handlers/get-api-key-by-id.handler.d.ts

@@ -0,0 +1,8 @@
+import { IQueryHandler } from '@nestjs/cqrs';
+import { GetApiKeyByIdQuery, GetApiKeyByIdQueryReturnType } from '../../../../features/api-key/queries/impl';
+import { PrismaService } from '../../../../infrastructure/database/prisma.service';
+export declare class GetApiKeyByIdHandler implements IQueryHandler<GetApiKeyByIdQuery, GetApiKeyByIdQueryReturnType> {
+    private readonly prisma;
+    constructor(prisma: PrismaService);
+    execute({ data, }: GetApiKeyByIdQuery): Promise<GetApiKeyByIdQueryReturnType>;
+}

package/dist/src/features/api-key/queries/handlers/get-api-key-by-id.handler.js

@@ -0,0 +1,37 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GetApiKeyByIdHandler = void 0;
+const common_1 = require("@nestjs/common");
+const cqrs_1 = require("@nestjs/cqrs");
+const impl_1 = require("../impl");
+const prisma_service_1 = require("../../../../infrastructure/database/prisma.service");
+let GetApiKeyByIdHandler = class GetApiKeyByIdHandler {
+    constructor(prisma) {
+        this.prisma = prisma;
+    }
+    async execute({ data, }) {
+        const apiKey = await this.prisma.apiKey.findUnique({
+            where: { id: data.keyId },
+            omit: { keyHash: true },
+        });
+        if (!apiKey) {
+            throw new common_1.NotFoundException('API key not found');
+        }
+        return apiKey;
+    }
+};
+exports.GetApiKeyByIdHandler = GetApiKeyByIdHandler;
+exports.GetApiKeyByIdHandler = GetApiKeyByIdHandler = __decorate([
+    (0, cqrs_1.QueryHandler)(impl_1.GetApiKeyByIdQuery),
+    __metadata("design:paramtypes", [prisma_service_1.PrismaService])
+], GetApiKeyByIdHandler);
+//# sourceMappingURL=get-api-key-by-id.handler.js.map

package/dist/src/features/api-key/queries/handlers/get-api-key-by-id.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-api-key-by-id.handler.js","sourceRoot":"","sources":["../../../../../../src/features/api-key/queries/handlers/get-api-key-by-id.handler.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAAmD;AACnD,uCAA2D;AAC3D,kCAG2C;AAC3C,uFAA2E;AAGpE,IAAM,oBAAoB,GAA1B,MAAM,oBAAoB;IAI/B,YAA6B,MAAqB;QAArB,WAAM,GAAN,MAAM,CAAe;IAAG,CAAC;IAEtD,KAAK,CAAC,OAAO,CAAC,EACZ,IAAI,GACe;QACnB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC;YACjD,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,KAAK,EAAE;YACzB,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;SACxB,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,0BAAiB,CAAC,mBAAmB,CAAC,CAAC;QACnD,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;CACF,CAAA;AApBY,oDAAoB;+BAApB,oBAAoB;IADhC,IAAA,mBAAY,EAAC,yBAAkB,CAAC;qCAKM,8BAAa;GAJvC,oBAAoB,CAoBhC"}

package/dist/src/features/api-key/queries/handlers/get-api-keys.handler.d.ts

@@ -0,0 +1,8 @@
+import { IQueryHandler } from '@nestjs/cqrs';
+import { GetApiKeysQuery, GetApiKeysQueryReturnType } from '../../../../features/api-key/queries/impl';
+import { PrismaService } from '../../../../infrastructure/database/prisma.service';
+export declare class GetApiKeysHandler implements IQueryHandler<GetApiKeysQuery, GetApiKeysQueryReturnType> {
+    private readonly prisma;
+    constructor(prisma: PrismaService);
+    execute({ data }: GetApiKeysQuery): Promise<GetApiKeysQueryReturnType>;
+}

package/dist/src/features/api-key/queries/handlers/get-api-keys.handler.js

@@ -0,0 +1,43 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GetApiKeysHandler = void 0;
+const cqrs_1 = require("@nestjs/cqrs");
+const impl_1 = require("../impl");
+const prisma_service_1 = require("../../../../infrastructure/database/prisma.service");
+let GetApiKeysHandler = class GetApiKeysHandler {
+    constructor(prisma) {
+        this.prisma = prisma;
+    }
+    async execute({ data }) {
+        const where = { revokedAt: null };
+        if (data.userId) {
+            where.userId = data.userId;
+        }
+        if (data.type) {
+            where.type = data.type;
+        }
+        if (data.organizationId) {
+            where.organizationId = data.organizationId;
+        }
+        return this.prisma.apiKey.findMany({
+            where,
+            omit: { keyHash: true, userId: true, lastUsedIp: true },
+            orderBy: { createdAt: 'desc' },
+        });
+    }
+};
+exports.GetApiKeysHandler = GetApiKeysHandler;
+exports.GetApiKeysHandler = GetApiKeysHandler = __decorate([
+    (0, cqrs_1.QueryHandler)(impl_1.GetApiKeysQuery),
+    __metadata("design:paramtypes", [prisma_service_1.PrismaService])
+], GetApiKeysHandler);
+//# sourceMappingURL=get-api-keys.handler.js.map

package/dist/src/features/api-key/queries/handlers/get-api-keys.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-api-keys.handler.js","sourceRoot":"","sources":["../../../../../../src/features/api-key/queries/handlers/get-api-keys.handler.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,uCAA2D;AAE3D,kCAG2C;AAC3C,uFAA2E;AAGpE,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;IAI5B,YAA6B,MAAqB;QAArB,WAAM,GAAN,MAAM,CAAe;IAAG,CAAC;IAEtD,KAAK,CAAC,OAAO,CAAC,EAAE,IAAI,EAAmB;QACrC,MAAM,KAAK,GAA4B,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QAE3D,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC7B,CAAC;QAED,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACzB,CAAC;QAED,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC;QAC7C,CAAC;QAED,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;YACjC,KAAK;YACL,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE;YACvD,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE;SAC/B,CAAC,CAAC;IACL,CAAC;CACF,CAAA;AA3BY,8CAAiB;4BAAjB,iBAAiB;IAD7B,IAAA,mBAAY,EAAC,sBAAe,CAAC;qCAKS,8BAAa;GAJvC,iBAAiB,CA2B7B"}

package/dist/src/features/api-key/queries/handlers/index.d.ts

@@ -0,0 +1,2 @@
+export * from '../../../../features/api-key/queries/handlers/get-api-keys.handler';
+export * from '../../../../features/api-key/queries/handlers/get-api-key-by-id.handler';

package/dist/src/features/api-key/queries/handlers/index.js

@@ -0,0 +1,19 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./get-api-keys.handler"), exports);
+__exportStar(require("./get-api-key-by-id.handler"), exports);
+//# sourceMappingURL=index.js.map

package/dist/src/features/api-key/queries/handlers/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../src/features/api-key/queries/handlers/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,yDAA2E;AAC3E,8DAAgF"}

package/dist/src/features/api-key/queries/impl/get-api-key-by-id.query.d.ts

@@ -0,0 +1,14 @@
+import { Prisma } from '../../../../__generated__/client';
+export declare class GetApiKeyByIdQuery {
+    readonly data: {
+        readonly keyId: string;
+    };
+    constructor(data: {
+        readonly keyId: string;
+    });
+}
+export type GetApiKeyByIdQueryReturnType = Prisma.ApiKeyGetPayload<{
+    omit: {
+        keyHash: true;
+    };
+}>;

package/dist/src/features/api-key/queries/impl/get-api-key-by-id.query.js

@@ -0,0 +1,10 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GetApiKeyByIdQuery = void 0;
+class GetApiKeyByIdQuery {
+    constructor(data) {
+        this.data = data;
+    }
+}
+exports.GetApiKeyByIdQuery = GetApiKeyByIdQuery;
+//# sourceMappingURL=get-api-key-by-id.query.js.map

package/dist/src/features/api-key/queries/impl/get-api-key-by-id.query.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-api-key-by-id.query.js","sourceRoot":"","sources":["../../../../../../src/features/api-key/queries/impl/get-api-key-by-id.query.ts"],"names":[],"mappings":";;;AAEA,MAAa,kBAAkB;IAC7B,YACkB,IAEf;QAFe,SAAI,GAAJ,IAAI,CAEnB;IACA,CAAC;CACL;AAND,gDAMC"}

package/dist/src/features/api-key/queries/impl/get-api-keys.query.d.ts

@@ -0,0 +1,20 @@
+import { ApiKeyType, Prisma } from '../../../../__generated__/client';
+export declare class GetApiKeysQuery {
+    readonly data: {
+        readonly userId?: string;
+        readonly type?: ApiKeyType;
+        readonly organizationId?: string;
+    };
+    constructor(data: {
+        readonly userId?: string;
+        readonly type?: ApiKeyType;
+        readonly organizationId?: string;
+    });
+}
+export type GetApiKeysQueryReturnType = Array<Prisma.ApiKeyGetPayload<{
+    omit: {
+        keyHash: true;
+        userId: true;
+        lastUsedIp: true;
+    };
+}>>;

package/dist/src/features/api-key/queries/impl/get-api-keys.query.js

@@ -0,0 +1,10 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GetApiKeysQuery = void 0;
+class GetApiKeysQuery {
+    constructor(data) {
+        this.data = data;
+    }
+}
+exports.GetApiKeysQuery = GetApiKeysQuery;
+//# sourceMappingURL=get-api-keys.query.js.map

package/dist/src/features/api-key/queries/impl/get-api-keys.query.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-api-keys.query.js","sourceRoot":"","sources":["../../../../../../src/features/api-key/queries/impl/get-api-keys.query.ts"],"names":[],"mappings":";;;AAEA,MAAa,eAAe;IAC1B,YACkB,IAIf;QAJe,SAAI,GAAJ,IAAI,CAInB;IACA,CAAC;CACL;AARD,0CAQC"}

package/dist/src/features/api-key/queries/impl/index.d.ts

@@ -0,0 +1,2 @@
+export * from '../../../../features/api-key/queries/impl/get-api-keys.query';
+export * from '../../../../features/api-key/queries/impl/get-api-key-by-id.query';

package/dist/src/features/api-key/queries/impl/index.js

@@ -0,0 +1,19 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./get-api-keys.query"), exports);
+__exportStar(require("./get-api-key-by-id.query"), exports);
+//# sourceMappingURL=index.js.map

package/dist/src/features/api-key/queries/impl/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../src/features/api-key/queries/impl/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,uDAAqE;AACrE,4DAA0E"}

package/dist/src/features/api-key/queries/index.d.ts

@@ -0,0 +1,2 @@
+import { GetApiKeyByIdHandler, GetApiKeysHandler } from '../../../features/api-key/queries/handlers';
+export declare const API_KEY_QUERIES: (typeof GetApiKeysHandler | typeof GetApiKeyByIdHandler)[];

package/dist/src/features/api-key/queries/index.js

@@ -0,0 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.API_KEY_QUERIES = void 0;
+const handlers_1 = require("./handlers");
+exports.API_KEY_QUERIES = [handlers_1.GetApiKeysHandler, handlers_1.GetApiKeyByIdHandler];
+//# sourceMappingURL=index.js.map

package/dist/src/features/api-key/queries/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/features/api-key/queries/index.ts"],"names":[],"mappings":";;;AAAA,yCAG+C;AAElC,QAAA,eAAe,GAAG,CAAC,4BAAiB,EAAE,+BAAoB,CAAC,CAAC"}