@rockster/core 0.0.2 → 0.1.0

package/access/functions/assert-scope-action-access.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assert-scope-action-access.js","sourceRoot":"./","sources":["access/functions/assert-scope-action-access.ts"],"names":[],"mappings":";;AAiEA,0DAqKC;AAtOD,6CAAiF;AAMjF,iDAA4C;AAC5C,mDAA8C;AAC9C,yEAAmE;AAEnE,gCAA6B;AAS7B,SAAS,oBAAoB,CAAC,cAAuB;IAClD,IAAI,cAAc,IAAI,IAAI,EAAE,CAAC;QAC1B,OAAO,SAAS,CAAC;IACpB,CAAC;IAED,IAAI,OAAO,cAAc,KAAK,QAAQ,IAAI,OAAO,cAAc,KAAK,QAAQ,EAAE,CAAC;QAC5E,OAAO,MAAM,CAAC,cAAc,CAAC,CAAC;IACjC,CAAC;IAED,IAAI,OAAO,cAAc,KAAK,QAAQ,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,cAAyC,CAAC;QACzD,MAAM,EAAE,GAAG,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,EAAE,CAAC;QAClC,IAAI,EAAE,IAAI,IAAI,IAAI,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YAC1C,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC;QACrB,CAAC;IACJ,CAAC;IAED,OAAO,SAAS,CAAC;AACpB,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAwB;IAC/C,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACpB,OAAO,OAAO,CAAC;IAClB,CAAC;IACD,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC1C,OAAO,MAAM,CAAC;IACjB,CAAC;IACD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACrB,OAAO,QAAQ,CAAC;IACnB,CAAC;IACD,OAAO,SAAS,CAAC;AACpB,CAAC;AAED;;;;;;;;;;;;GAYG;AACI,KAAK,UAAU,uBAAuB,CAAC,OAY7C;IACE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;IACzE,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAA4B,CAAC;IAEjE,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO;IACV,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC;IACvC,IAAI,CAAC,MAAM,EAAE,CAAC;QACX,MAAM,IAAI,0BAAiB,EAAE,CAAC;IACjC,CAAC;IAED,MAAM,cAAc,GAAG,OAAO;QAC3B,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC;QACrC,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC;IAC5B,MAAM,WAAW,GAAG,OAAO,EAAE,WAAW,IAAI,OAAO,CAAC,WAAW,CAAC;IAEhE,MAAM,UAAU,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,QAAQ;WAClB,CAAC,UAAU,KAAK,QAAQ;YACxB,CAAC,CAAC,oBAAoB,CAAC,cAAc,CAAC;YACtC,CAAC,CAAC,SAAS,CAAC,CAAC;IAEnB,6EAA6E;IAC7E,+DAA+D;IAC/D,MAAM,KAAK,GAAG,CAAC,OAAO,CAAC,UAAU,KAAlB,OAAO,CAAC,UAAU,GAAK,IAAI,GAAG,EAAmB,EAAC,CAAC;IAElE,8EAA8E;IAC9E,MAAM,cAAc,GAAG,IAAI,GAAG,EAA8B,CAAC;IAC7D,MAAM,UAAU,GAAG,IAAI,GAAG,EAAmB,CAAC;IAC9C,MAAM,aAAa,GAAG,IAAI,GAAG,EAAoB,CAAC;IAClD,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAA8B,CAAC;IAEjE,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACtB,MAAM,gBAAgB,GAAG,GAAG,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,eAAe,IAAI,EAAE,EAAE,CAAC;QAE3E,IAAI,SAA6B,CAAC;QAClC,IAAI,cAAc,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACxC,SAAS,GAAG,cAAc,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QACpD,CAAC;aAAM,CAAC;YACL,SAAS,GAAG,MAAM,IAAA,gDAAqB,EAAC;gBACrC,WAAW,EAAE,GAAG,CAAC,WAAW;gBAC5B,cAAc;gBACd,UAAU;gBACV,QAAQ;gBACR,OAAO;gBACP,YAAY,EAAE,QAAQ,CAAC,IAAI;gBAC3B,aAAa,EAAE,OAAO,CAAC,aAAa;gBACpC,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,eAAe,EAAE,GAAG,CAAC,eAAe;gBACpC,cAAc,EAAE,OAAO;gBACvB,kBAAkB,EAAE,WAAW;gBAC/B,KAAK;aACP,CAAC,CAAC;YACH,cAAc,CAAC,GAAG,CAAC,gBAAgB,EAAE,SAAS,CAAC,CAAC;QACnD,CAAC;QAED,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,SAAS,IAAI,IAAI,IAAI,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;YAChE,MAAM,IAAI,uBAAc,CAAC;gBACtB,OAAO,EAAE,+BAA+B,GAAG,CAAC,WAAW,GAAG;aAC5D,CAAC,CAAC;QACN,CAAC;QAED,MAAM,aAAa,GAAG,GAAG,GAAG,CAAC,WAAW,IAAI,SAAS,IAAI,EAAE,EAAE,CAAC;QAC9D,IAAI,OAAgB,CAAC;QACrB,IAAI,UAAU,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;YACjC,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,aAAa,CAAY,CAAC;QACtD,CAAC;aAAM,CAAC;YACL,OAAO,GAAG,MAAM,IAAA,yBAAU,EAAC,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;YAC/D,UAAU,CAAC,GAAG,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;QAC1C,CAAC;QAED,IAAI,OAAO,EAAE,CAAC;YACX,SAAS;QACZ,CAAC;QAED,MAAM,gBAAgB,GAAG,SAAS,IAAI,EAAE,CAAC;QACzC,IAAI,QAAkB,CAAC;QACvB,IAAI,aAAa,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACvC,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,gBAAgB,CAAa,CAAC;QAC9D,CAAC;aAAM,CAAC;YACL,QAAQ,GAAG,SAAS;gBACjB,CAAC,CAAC,MAAM,IAAA,2BAAW,EAAC,MAAM,EAAE,SAAS,CAAC;gBACtC,CAAC,CAAC,MAAM,IAAA,2BAAW,EAAC,MAAM,CAAC,CAAC;YAC/B,aAAa,CAAC,GAAG,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC;QACjD,CAAC;QAED,gBAAgB;QAChB,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,SAAS;QACZ,CAAC;QAED,MAAM,QAAQ,GAAG,SAAG,CAAC,oBAAoB,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAE/D,wEAAwE;QACxE,IAAI,QAAQ,EAAE,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC9D,SAAS;QACZ,CAAC;QAED,uEAAuE;QACvE,0EAA0E;QAC1E,0EAA0E;QAC1E,yCAAyC;QACzC,IAAI,aAAiC,CAAC;QACtC,IAAI,SAA6B,CAAC;QAClC,IAAI,QAAQ,EAAE,IAAI,EAAE,CAAC;YAClB,aAAa,GAAG,SAAS,CAAC;YAC1B,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAC;QAClC,CAAC;aAAM,IAAI,QAAQ,EAAE,SAAS,EAAE,CAAC;YAC9B,SAAS,GAAG,SAAG,CAAC,oBAAoB,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC;YACxE,IAAI,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC9C,aAAa,GAAG,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;YAC9D,CAAC;iBAAM,CAAC;gBACL,aAAa,GAAG,MAAM,IAAA,gDAAqB,EAAC;oBACzC,WAAW,EAAE,QAAQ,CAAC,SAAS;oBAC/B,cAAc;oBACd,UAAU;oBACV,QAAQ;oBACR,OAAO;oBACP,YAAY,EAAE,QAAQ,CAAC,IAAI;oBAC3B,aAAa,EAAE,OAAO,CAAC,aAAa;oBACpC,MAAM,EAAE,IAAI;oBACZ,cAAc,EAAE,OAAO;oBACvB,kBAAkB,EAAE,WAAW;oBAC/B,KAAK;iBACP,CAAC,CAAC;gBACH,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;YAC7D,CAAC;QACJ,CAAC;QAED,IAAI,SAAS,IAAI,aAAa,EAAE,CAAC;YAC9B,IAAI,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;YAChD,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACb,QAAQ,GAAG,MAAM,IAAA,2BAAW,EAAC,MAAM,EAAE,aAAa,CAAC,CAAC;gBACpD,aAAa,CAAC,GAAG,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;YAC9C,CAAC;YACD,IAAI,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;gBAChC,SAAS;YACZ,CAAC;QACJ,CAAC;QAED,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,uBAAc,CAAC;YACtB,OAAO,EAAE,uCAAuC;YAChD,YAAY,EAAE,OAAO;SACvB,CAAC,CAAC;IACN,CAAC;AACJ,CAAC"}

package/access/functions/build-scope-resolver-initial-data.d.ts

@@ -0,0 +1,4 @@
+import { Dictionary } from "@rockster/common";
+import { IRequestContext } from "../../core/interfaces/request-context";
+import { IResolveScopeContextIdParams } from "../interfaces/resolve-scope-context-id";
+export declare function buildScopeResolverInitialData(params: IResolveScopeContextIdParams, requestContext?: IRequestContext, pendingAnnotations?: Dictionary<unknown>): Dictionary<unknown>;

package/access/functions/build-scope-resolver-initial-data.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildScopeResolverInitialData = buildScopeResolverInitialData;
+const constants_1 = require("../../command/constants");
+const constants_2 = require("../../controllers/constants");
+const constants_3 = require("../../query/constants");
+const constants_4 = require("../constants");
+function buildScopeResolverInitialData(params, requestContext, pendingAnnotations) {
+    return {
+        [constants_4.SCOPE_CONTEXT_PARAMS_KEY]: params,
+        [constants_2.REQUEST_CONTEXT_KEY]: requestContext,
+        [constants_3.QUERY_CONTENT_KEY]: pendingAnnotations?.[constants_3.QUERY_CONTENT_KEY],
+        [constants_1.POST_CONTENT_KEY]: pendingAnnotations?.[constants_1.POST_CONTENT_KEY],
+        [constants_1.REMOVE_CONTENT_KEY]: pendingAnnotations?.[constants_1.REMOVE_CONTENT_KEY],
+    };
+}
+//# sourceMappingURL=build-scope-resolver-initial-data.js.map

package/access/functions/build-scope-resolver-initial-data.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-scope-resolver-initial-data.js","sourceRoot":"./","sources":["access/functions/build-scope-resolver-initial-data.ts"],"names":[],"mappings":";;AAQA,sEAYC;AAnBD,uDAA+E;AAC/E,2DAAkE;AAClE,qDAA0D;AAE1D,4CAAwD;AAGxD,SAAgB,6BAA6B,CAC1C,MAAoC,EACpC,cAAgC,EAChC,kBAAwC;IAExC,OAAO;QACJ,CAAC,oCAAwB,CAAC,EAAE,MAAM;QAClC,CAAC,+BAAmB,CAAC,EAAE,cAAc;QACrC,CAAC,6BAAiB,CAAC,EAAE,kBAAkB,EAAE,CAAC,6BAAiB,CAAC;QAC5D,CAAC,4BAAgB,CAAC,EAAE,kBAAkB,EAAE,CAAC,4BAAgB,CAAC;QAC1D,CAAC,8BAAkB,CAAC,EAAE,kBAAkB,EAAE,CAAC,8BAAkB,CAAC;KAChE,CAAC;AACL,CAAC"}

package/access/functions/describe-action-scope.d.ts

@@ -0,0 +1,9 @@
+import { PropertyNote } from "@rockster/class-memory";
+import { IControllerProperty } from "../../controllers/interfaces/controller-property";
+import { IActionDocsScopeKey } from "../../core/interfaces/action-docs";
+/**
+ * Flattens an action's scope keys (`Map<slot, IScopeKey[]>`) into a flat list
+ * for the generated docs/SDK, so consumers can see exactly which key(s) — and
+ * in which context — an endpoint requires. Empty list = login only.
+ */
+export declare function describeActionScopeKeys(property: PropertyNote<IControllerProperty>): IActionDocsScopeKey[];

package/access/functions/describe-action-scope.js

@@ -0,0 +1,27 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.describeActionScopeKeys = describeActionScopeKeys;
+/**
+ * Flattens an action's scope keys (`Map<slot, IScopeKey[]>`) into a flat list
+ * for the generated docs/SDK, so consumers can see exactly which key(s) — and
+ * in which context — an endpoint requires. Empty list = login only.
+ */
+function describeActionScopeKeys(property) {
+    const result = [];
+    const keys = property.keys;
+    if (!keys) {
+        return result;
+    }
+    for (const [slot, slotKeys] of keys.entries()) {
+        for (const key of (slotKeys ?? [])) {
+            result.push({
+                slot,
+                contextName: key.contextName,
+                name: key.name,
+                resolverHandler: key.resolverHandler,
+            });
+        }
+    }
+    return result;
+}
+//# sourceMappingURL=describe-action-scope.js.map

package/access/functions/describe-action-scope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"describe-action-scope.js","sourceRoot":"./","sources":["access/functions/describe-action-scope.ts"],"names":[],"mappings":";;AAUA,0DAqBC;AA1BD;;;;GAIG;AACH,SAAgB,uBAAuB,CACpC,QAA2C;IAE3C,MAAM,MAAM,GAA0B,EAAE,CAAC;IACzC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;IAC3B,IAAI,CAAC,IAAI,EAAE,CAAC;QACT,OAAO,MAAM,CAAC;IACjB,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;QAC7C,KAAK,MAAM,GAAG,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAgB,EAAE,CAAC;YACjD,MAAM,CAAC,IAAI,CAAC;gBACT,IAAI;gBACJ,WAAW,EAAE,GAAG,CAAC,WAAW;gBAC5B,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,eAAe,EAAE,GAAG,CAAC,eAAe;aACtC,CAAC,CAAC;QACN,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC;AACjB,CAAC"}

package/access/functions/get-context-id-service.d.ts

@@ -0,0 +1 @@
+export declare function getGetContextIdService(contextName: string): import("..").IScopeServiceRegistry;

package/access/functions/get-context-id-service.js

@@ -0,0 +1,8 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getGetContextIdService = getGetContextIdService;
+const env_1 = require("../env");
+function getGetContextIdService(contextName) {
+    return env_1.env.scopeServiceRegistry.get(contextName);
+}
+//# sourceMappingURL=get-context-id-service.js.map

package/access/functions/get-context-id-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-context-id-service.js","sourceRoot":"./","sources":["access/functions/get-context-id-service.ts"],"names":[],"mappings":";;AAEA,wDAEC;AAJD,gCAA6B;AAE7B,SAAgB,sBAAsB,CAAC,WAAmB;IACvD,OAAO,SAAG,CAAC,oBAAoB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;AACpD,CAAC"}

package/access/functions/get-is-owner.d.ts

@@ -0,0 +1 @@
+export declare function getIsOwner(contextName: string, userId: string, contextId?: string): Promise<boolean>;

package/access/functions/get-is-owner.js

@@ -0,0 +1,8 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getIsOwner = getIsOwner;
+const env_1 = require("../env");
+async function getIsOwner(contextName, userId, contextId) {
+    return env_1.env.scopeOwnerService.getIsOwner(contextName, userId, contextId);
+}
+//# sourceMappingURL=get-is-owner.js.map

package/access/functions/get-is-owner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-is-owner.js","sourceRoot":"./","sources":["access/functions/get-is-owner.ts"],"names":[],"mappings":";;AAEA,gCAUC;AAZD,gCAA6B;AAEtB,KAAK,UAAU,UAAU,CAC7B,WAAmB,EACnB,MAAc,EACd,SAAkB;IAElB,OAAO,SAAG,CAAC,iBAAiB,CAAC,UAAU,CACpC,WAAW,EACX,MAAM,EACN,SAAS,CACX,CAAC;AACL,CAAC"}

package/access/functions/get-user-keys.d.ts

@@ -0,0 +1,2 @@
+export declare function getUserKeys(userId: string): any;
+export declare function getUserKeys(userId: string, contextId: string): any;

package/access/functions/get-user-keys.js

@@ -0,0 +1,10 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getUserKeys = getUserKeys;
+const env_1 = require("../env");
+async function getUserKeys(arg1, arg2) {
+    return arg2
+        ? env_1.env.scopeAccessService.getKeysWithCtx(arg2, arg1)
+        : env_1.env.scopeAccessService.getAllUserKeys(arg1);
+}
+//# sourceMappingURL=get-user-keys.js.map

package/access/functions/get-user-keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-user-keys.js","sourceRoot":"./","sources":["access/functions/get-user-keys.ts"],"names":[],"mappings":";;AAIA,kCAIC;AARD,gCAA6B;AAItB,KAAK,UAAU,WAAW,CAAC,IAAY,EAAE,IAAa;IAC1D,OAAO,IAAI;QACR,CAAC,CAAC,SAAG,CAAC,kBAAkB,CAAC,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC;QACnD,CAAC,CAAC,SAAG,CAAC,kBAAkB,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;AACpD,CAAC"}

package/access/functions/index.d.ts

@@ -0,0 +1,8 @@
+export * from './get-context-id-service';
+export * from './get-user-keys';
+export * from './register-scope';
+export * from './normalize-scope-keys';
+export * from './resolve-scope-context-id';
+export * from './assert-scope-action-access';
+export * from './init-scope-service-executors';
+export * from './build-scope-resolver-initial-data';

package/access/functions/index.js

@@ -0,0 +1,25 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./get-context-id-service"), exports);
+__exportStar(require("./get-user-keys"), exports);
+__exportStar(require("./register-scope"), exports);
+__exportStar(require("./normalize-scope-keys"), exports);
+__exportStar(require("./resolve-scope-context-id"), exports);
+__exportStar(require("./assert-scope-action-access"), exports);
+__exportStar(require("./init-scope-service-executors"), exports);
+__exportStar(require("./build-scope-resolver-initial-data"), exports);
+//# sourceMappingURL=index.js.map

package/access/functions/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"./","sources":["access/functions/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2DAAyC;AACzC,kDAAgC;AAChC,mDAAiC;AACjC,yDAAuC;AACvC,6DAA2C;AAC3C,+DAA6C;AAC7C,iEAA+C;AAC/C,sEAAoD"}

package/access/functions/init-scope-service-executors.d.ts

@@ -0,0 +1,3 @@
+import { Instantiable } from "@rockster/common";
+export declare const DEFAULT_SCOPE_CONTEXT_RESOLVER = "resolveContextId";
+export declare function initScopeServiceExecutors(contextName: string, Service: Instantiable): Promise<void>;

package/access/functions/init-scope-service-executors.js

@@ -0,0 +1,38 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_SCOPE_CONTEXT_RESOLVER = void 0;
+exports.initScopeServiceExecutors = initScopeServiceExecutors;
+const class_injector_1 = require("@rockster/class-injector");
+const logger_1 = require("@rockster/logger");
+const env_1 = require("../env");
+exports.DEFAULT_SCOPE_CONTEXT_RESOLVER = "resolveContextId";
+async function initScopeServiceExecutors(contextName, Service) {
+    const registry = env_1.env.scopeServiceRegistry.get(contextName);
+    if (!registry) {
+        return;
+    }
+    const logger = new logger_1.Logger("Access");
+    if (registry.withId === false) {
+        registry.instance = await (0, class_injector_1.createInstance)(Service);
+        registry.resolvers = {};
+        logger.log(`[${Service.name}] initialized (scope without context id)`);
+        return;
+    }
+    const { instance, executors } = await (0, class_injector_1.createExecutors)(Service);
+    if (!executors[exports.DEFAULT_SCOPE_CONTEXT_RESOLVER]) {
+        logger.throw(new Error(`[${Service.name}] "${exports.DEFAULT_SCOPE_CONTEXT_RESOLVER}" must be decorated with @ScopeContextIdResolver({ default: true })`));
+    }
+    const resolverMethods = classInjector
+        .storage
+        .getProperties(Service)
+        .filter((property) => property.scopeContextIdResolver);
+    for (const property of resolverMethods) {
+        if (!executors[property.propertyKey]) {
+            logger.throw(new Error(`[${Service.name}] @ScopeContextIdResolver on "${property.propertyKey}" is not executable — check parameter injection decorators`));
+        }
+    }
+    registry.instance = instance;
+    registry.resolvers = executors;
+    logger.log(`[${Service.name}] scope resolvers initialized`);
+}
+//# sourceMappingURL=init-scope-service-executors.js.map

package/access/functions/init-scope-service-executors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"init-scope-service-executors.js","sourceRoot":"./","sources":["access/functions/init-scope-service-executors.ts"],"names":[],"mappings":";;;AASA,8DA0CC;AAnDD,6DAA2E;AAG3E,6CAA0C;AAC1C,gCAA6B;AAGhB,QAAA,8BAA8B,GAAG,kBAAkB,CAAC;AAE1D,KAAK,UAAU,yBAAyB,CAC5C,WAAmB,EACnB,OAAqB;IAErB,MAAM,QAAQ,GAAG,SAAG,CAAC,oBAAoB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC3D,IAAI,CAAC,QAAQ,EAAE,CAAC;QACb,OAAO;IACV,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,eAAM,CAAC,QAAQ,CAAC,CAAC;IAEpC,IAAI,QAAQ,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QAC7B,QAAQ,CAAC,QAAQ,GAAG,MAAM,IAAA,+BAAc,EAAC,OAAO,CAAkB,CAAC;QACnE,QAAQ,CAAC,SAAS,GAAG,EAAE,CAAC;QACxB,MAAM,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,IAAI,0CAA0C,CAAC,CAAC;QACvE,OAAO;IACV,CAAC;IAED,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,MAAM,IAAA,gCAAe,EAAC,OAAO,CAAC,CAAC;IAE/D,IAAI,CAAC,SAAS,CAAC,sCAA8B,CAAC,EAAE,CAAC;QAC9C,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,CACnB,IAAI,OAAO,CAAC,IAAI,MAAM,sCAA8B,qEAAqE,CAC3H,CAAC,CAAC;IACN,CAAC;IAED,MAAM,eAAe,GAAG,aAAa;SACjC,OAAO;SACP,aAAa,CAAC,OAAO,CAAC;SACtB,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC;IAE1D,KAAK,MAAM,QAAQ,IAAI,eAAe,EAAE,CAAC;QACtC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YACpC,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,CACnB,IAAI,OAAO,CAAC,IAAI,iCAAiC,QAAQ,CAAC,WAAW,4DAA4D,CACnI,CAAC,CAAC;QACN,CAAC;IACJ,CAAC;IAED,QAAQ,CAAC,QAAQ,GAAG,QAAyB,CAAC;IAC9C,QAAQ,CAAC,SAAS,GAAG,SAAqC,CAAC;IAC3D,MAAM,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,IAAI,+BAA+B,CAAC,CAAC;AAC/D,CAAC"}

package/access/functions/normalize-scope-keys.d.ts

@@ -0,0 +1,4 @@
+export declare function normalizeScopeKeys(keys: string[]): string[];
+export declare function filterScopeAccessRows<T extends {
+    key?: string | null;
+}>(rows: T[]): T[];

package/access/functions/normalize-scope-keys.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.normalizeScopeKeys = normalizeScopeKeys;
+exports.filterScopeAccessRows = filterScopeAccessRows;
+function normalizeScopeKeys(keys) {
+    const unique = new Set();
+    for (const key of keys) {
+        if (typeof key === "string" && key.trim() !== "") {
+            unique.add(key);
+        }
+    }
+    return [...unique];
+}
+function filterScopeAccessRows(rows) {
+    return rows.filter((row) => typeof row.key === "string" && row.key.trim() !== "");
+}
+//# sourceMappingURL=normalize-scope-keys.js.map

package/access/functions/normalize-scope-keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"normalize-scope-keys.js","sourceRoot":"./","sources":["access/functions/normalize-scope-keys.ts"],"names":[],"mappings":";;AAAA,gDAUC;AAED,sDAOC;AAnBD,SAAgB,kBAAkB,CAAC,IAAc;IAC9C,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IAEjC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACtB,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YAChD,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC;AACtB,CAAC;AAED,SAAgB,qBAAqB,CAClC,IAAS;IAET,OAAO,IAAI,CAAC,MAAM,CACf,CAAC,GAAG,EAA8B,EAAE,CACjC,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,CACzD,CAAC;AACL,CAAC"}

package/access/functions/register-scope.d.ts

@@ -0,0 +1,19 @@
+import { Instantiable } from "@rockster/common";
+import { IScopeService } from "../interfaces/scope-service";
+export type RegisterScopeOptions = {
+    /** This scope is the hierarchy root (e.g. workspace). */
+    root?: boolean;
+    /** Context name of the root scope this scope descends from. */
+    rootScope?: string;
+    /** Master key (set on the root) — grants everything in all descendants. */
+    masterKey?: string;
+    /** Admin key — grants everything within this context. */
+    adminKey?: string;
+};
+export declare function registerScope<T extends IScopeService>(contextName: string, Service: Instantiable<T>, withId?: boolean, options?: RegisterScopeOptions): {
+    ActionKey: (key: string | string[], resolverHandler?: keyof T & string) => MethodDecorator;
+    QueryActionKey: (key: string | string[], resolverHandler?: keyof T & string) => MethodDecorator;
+    CreateActionKey: (key: string | string[], resolverHandler?: keyof T & string) => MethodDecorator;
+    ModifyActionKey: (key: string | string[], resolverHandler?: keyof T & string) => MethodDecorator;
+    RemoveActionKey: (key: string | string[], resolverHandler?: keyof T & string) => MethodDecorator;
+};

package/access/functions/register-scope.js

@@ -0,0 +1,94 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerScope = registerScope;
+const env_1 = require("../env");
+function registerScope(contextName, Service, withId, options) {
+    const keys = [];
+    env_1.env.scopesKeys.set(contextName, keys);
+    if (Service) {
+        env_1.env.scopeServiceRegistry.set(contextName, {
+            Service: Service,
+            withId: withId !== false,
+            root: options?.root,
+            rootScope: options?.rootScope,
+            masterKey: options?.masterKey,
+            adminKey: options?.adminKey,
+        });
+    }
+    // Master/admin keys are grantable like any other key — list them in the catalog.
+    if (options?.adminKey) {
+        keys.push({ contextName, name: options.adminKey });
+    }
+    if (options?.root && options?.masterKey) {
+        keys.push({ contextName, name: options.masterKey });
+    }
+    const getProperty = (target, propertyKey) => {
+        const property = core
+            .storage
+            .createProperty(target, propertyKey);
+        if (!property.keys) {
+            property.keys = new Map();
+        }
+        return property;
+    };
+    /**
+     * Registers one OR many keys on a slot.
+     *
+     * Concept: "a key opens a door". Some endpoints are a door with several
+     * locks — pass an array and ALL keys become required (AND). Stacking the
+     * same-slot decorator also accumulates, so a slot may even combine keys from
+     * different scope contexts. The resolver handler is shared by the keys set in
+     * the same call.
+     */
+    const setScopeKey = (property, slot, key, type, resolverHandler) => {
+        const names = Array.isArray(key) ? key : [key];
+        const slotKeys = property.keys.get(slot) ?? [];
+        for (const name of names) {
+            keys.push({
+                contextName: contextName,
+                name: name,
+                type,
+            });
+            slotKeys.push({
+                contextName: contextName,
+                name: name,
+                withId: withId,
+                resolverHandler: resolverHandler,
+            });
+        }
+        property.keys.set(slot, slotKeys);
+    };
+    return {
+        ActionKey: function (key, resolverHandler) {
+            return function (target, propertyKey) {
+                const property = getProperty(target, propertyKey);
+                setScopeKey(property, "default", key, undefined, resolverHandler);
+            };
+        },
+        QueryActionKey: function (key, resolverHandler) {
+            return function (target, propertyKey) {
+                const property = getProperty(target, propertyKey);
+                setScopeKey(property, "query", key, undefined, resolverHandler);
+            };
+        },
+        CreateActionKey: function (key, resolverHandler) {
+            return function (target, propertyKey) {
+                const property = getProperty(target, propertyKey);
+                setScopeKey(property, "create", key, "create", resolverHandler);
+            };
+        },
+        ModifyActionKey: function (key, resolverHandler) {
+            return function (target, propertyKey) {
+                const property = getProperty(target, propertyKey);
+                setScopeKey(property, "modify", key, "modify", resolverHandler);
+            };
+        },
+        RemoveActionKey: function (key, resolverHandler) {
+            return function (target, propertyKey) {
+                const property = getProperty(target, propertyKey);
+                setScopeKey(property, "remove", key, "remove", resolverHandler);
+            };
+        },
+    };
+}
+//# sourceMappingURL=register-scope.js.map

package/access/functions/register-scope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"register-scope.js","sourceRoot":"./","sources":["access/functions/register-scope.ts"],"names":[],"mappings":";;AAkBA,sCA8HC;AA/ID,gCAA6B;AAiB7B,SAAgB,aAAa,CAC1B,WAAmB,EACnB,OAAwB,EACxB,MAAgB,EAChB,OAA8B;IAE9B,MAAM,IAAI,GAAG,EAAiB,CAAC;IAC/B,SAAG,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;IAEtC,IAAI,OAAO,EAAE,CAAC;QACX,SAAG,CAAC,oBAAoB,CAAC,GAAG,CAAC,WAAW,EAAE;YACvC,OAAO,EAAE,OAAO;YAChB,MAAM,EAAE,MAAM,KAAK,KAAK;YACxB,IAAI,EAAE,OAAO,EAAE,IAAI;YACnB,SAAS,EAAE,OAAO,EAAE,SAAS;YAC7B,SAAS,EAAE,OAAO,EAAE,SAAS;YAC7B,QAAQ,EAAE,OAAO,EAAE,QAAQ;SAC7B,CAAC,CAAC;IACN,CAAC;IAED,iFAAiF;IACjF,IAAI,OAAO,EAAE,QAAQ,EAAE,CAAC;QACrB,IAAI,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,OAAO,EAAE,IAAI,IAAI,OAAO,EAAE,SAAS,EAAE,CAAC;QACvC,IAAI,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;IACvD,CAAC;IAED,MAAM,WAAW,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,EAAE;QACzC,MAAM,QAAQ,GAAG,IAAI;aACjB,OAAO;aACP,cAAc,CACZ,MAAsB,EACtB,WAAqB,CACc,CAAC;QAE1C,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YAClB,QAAQ,CAAC,IAAI,GAAG,IAAI,GAAG,EAAuB,CAAC;QAClD,CAAC;QACD,OAAO,QAAQ,CAAC;IACnB,CAAC,CAAC;IAEF;;;;;;;;OAQG;IACH,MAAM,WAAW,GAAG,CACjB,QAA2C,EAC3C,IAAY,EACZ,GAAsB,EACtB,IAAwB,EACxB,eAAkC,EACnC,EAAE;QACD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAC/C,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAE/C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACxB,IAAI,CAAC,IAAI,CAAC;gBACP,WAAW,EAAE,WAAW;gBACxB,IAAI,EAAE,IAAI;gBACV,IAAI;aACN,CAAC,CAAC;YAEH,QAAQ,CAAC,IAAI,CAAC;gBACX,WAAW,EAAE,WAAW;gBACxB,IAAI,EAAE,IAAI;gBACV,MAAM,EAAE,MAAM;gBACd,eAAe,EAAE,eAAe;aAClC,CAAC,CAAC;QACN,CAAC;QAED,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACrC,CAAC,CAAC;IAEF,OAAO;QACJ,SAAS,EAAE,UACR,GAAsB,EACtB,eAAkC;YAElC,OAAO,UAAU,MAAM,EAAE,WAAW;gBACjC,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;gBAClD,WAAW,CAAC,QAAQ,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;YACrE,CAAC,CAAC;QACL,CAAC;QACD,cAAc,EAAE,UACb,GAAsB,EACtB,eAAkC;YAElC,OAAO,UAAU,MAAM,EAAE,WAAW;gBACjC,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;gBAClD,WAAW,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;YACnE,CAAC,CAAC;QACL,CAAC;QACD,eAAe,EAAE,UACd,GAAsB,EACtB,eAAkC;YAElC,OAAO,UAAU,MAAM,EAAE,WAAW;gBACjC,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;gBAClD,WAAW,CAAC,QAAQ,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,eAAe,CAAC,CAAC;YACnE,CAAC,CAAC;QACL,CAAC;QACD,eAAe,EAAE,UACd,GAAsB,EACtB,eAAkC;YAElC,OAAO,UAAU,MAAM,EAAE,WAAW;gBACjC,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;gBAClD,WAAW,CAAC,QAAQ,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,eAAe,CAAC,CAAC;YACnE,CAAC,CAAC;QACL,CAAC;QACD,eAAe,EAAE,UACd,GAAsB,EACtB,eAAkC;YAElC,OAAO,UAAU,MAAM,EAAE,WAAW;gBACjC,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;gBAClD,WAAW,CAAC,QAAQ,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,eAAe,CAAC,CAAC;YACnE,CAAC,CAAC;QACL,CAAC;KACH,CAAC;AACL,CAAC"}

package/access/functions/resolve-scope-context-id.d.ts

@@ -0,0 +1,9 @@
+import { Dictionary } from "@rockster/common";
+import { IRequestContext } from "../../core/interfaces/request-context";
+import { IResolveScopeContextIdParams } from "../interfaces/resolve-scope-context-id";
+export type ResolveScopeContextIdParams = IResolveScopeContextIdParams & {
+    resolverHandler?: string;
+    requestContext?: IRequestContext;
+    pendingAnnotations?: Dictionary<unknown>;
+};
+export declare function resolveScopeContextId(params: ResolveScopeContextIdParams): Promise<string | undefined>;

package/access/functions/resolve-scope-context-id.js

@@ -0,0 +1,71 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveScopeContextId = resolveScopeContextId;
+const env_1 = require("../env");
+const build_scope_resolver_initial_data_1 = require("./build-scope-resolver-initial-data");
+const init_scope_service_executors_1 = require("./init-scope-service-executors");
+const CONTEXT_ID_FIELDS = {
+    workspace: ["$workspaceId", "workspaceId"],
+    project: ["$projectId", "projectId"],
+    account: ["$accountId", "accountId"],
+    manager: ["$contextId", "contextId"],
+};
+function pickContextIdFromPayload(payload, contextName) {
+    if (!payload || typeof payload !== "object") {
+        return undefined;
+    }
+    const record = payload;
+    const fields = CONTEXT_ID_FIELDS[contextName] ?? ["$contextId", "contextId"];
+    for (const field of fields) {
+        const value = record[field];
+        if (value != null && String(value).trim() !== "") {
+            return String(value);
+        }
+    }
+    return undefined;
+}
+function normalizeRequestPayload(requestPayload, actionKind) {
+    if (actionKind === "remove") {
+        if (requestPayload == null
+            || typeof requestPayload === "string"
+            || typeof requestPayload === "number") {
+            return undefined;
+        }
+    }
+    return requestPayload;
+}
+async function resolveScopeContextId(params) {
+    const registry = env_1.env.scopeServiceRegistry.get(params.contextName);
+    if (registry?.withId === false) {
+        return undefined;
+    }
+    const handlerName = params.resolverHandler ?? init_scope_service_executors_1.DEFAULT_SCOPE_CONTEXT_RESOLVER;
+    const executor = registry?.resolvers?.[handlerName];
+    if (executor) {
+        const initialData = (0, build_scope_resolver_initial_data_1.buildScopeResolverInitialData)(params, params.requestContext, params.pendingAnnotations);
+        const resolved = await executor.handle(initialData);
+        if (resolved != null && String(resolved).trim() !== "") {
+            return String(resolved);
+        }
+        if (params.resolverHandler
+            && params.resolverHandler !== init_scope_service_executors_1.DEFAULT_SCOPE_CONTEXT_RESOLVER) {
+            return undefined;
+        }
+    }
+    else if (registry?.instance) {
+        throw new Error(`[${registry.Service.name}] scope resolver "${handlerName}" is not registered — decorate the method with @ScopeContextIdResolver()`);
+    }
+    const payload = normalizeRequestPayload(params.requestPayload, params.actionKind);
+    const fromPayload = pickContextIdFromPayload(payload, params.contextName);
+    if (fromPayload) {
+        return fromPayload;
+    }
+    if (params.actionKind === "remove" && params.idValue != null) {
+        const id = String(params.idValue).trim();
+        if (id !== "") {
+            return id;
+        }
+    }
+    return undefined;
+}
+//# sourceMappingURL=resolve-scope-context-id.js.map

package/access/functions/resolve-scope-context-id.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-scope-context-id.js","sourceRoot":"./","sources":["access/functions/resolve-scope-context-id.ts"],"names":[],"mappings":";;AA0DA,sDAsDC;AA9GD,gCAA6B;AAE7B,2FAAoF;AACpF,iFAAgF;AAEhF,MAAM,iBAAiB,GAA6B;IACjD,SAAS,EAAE,CAAC,cAAc,EAAE,aAAa,CAAC;IAC1C,OAAO,EAAE,CAAC,YAAY,EAAE,WAAW,CAAC;IACpC,OAAO,EAAE,CAAC,YAAY,EAAE,WAAW,CAAC;IACpC,OAAO,EAAE,CAAC,YAAY,EAAE,WAAW,CAAC;CACtC,CAAC;AAQF,SAAS,wBAAwB,CAC9B,OAAgB,EAChB,WAAmB;IAEnB,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC3C,OAAO,SAAS,CAAC;IACpB,CAAC;IAED,MAAM,MAAM,GAAG,OAAkC,CAAC;IAClD,MAAM,MAAM,GAAG,iBAAiB,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;IAE7E,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC1B,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5B,IAAI,KAAK,IAAI,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YAChD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;QACxB,CAAC;IACJ,CAAC;IAED,OAAO,SAAS,CAAC;AACpB,CAAC;AAED,SAAS,uBAAuB,CAC7B,cAAuB,EACvB,UAAsD;IAEtD,IAAI,UAAU,KAAK,QAAQ,EAAE,CAAC;QAC3B,IACG,cAAc,IAAI,IAAI;eACnB,OAAO,cAAc,KAAK,QAAQ;eAClC,OAAO,cAAc,KAAK,QAAQ,EACtC,CAAC;YACA,OAAO,SAAS,CAAC;QACpB,CAAC;IACJ,CAAC;IAED,OAAO,cAAc,CAAC;AACzB,CAAC;AAEM,KAAK,UAAU,qBAAqB,CACxC,MAAmC;IAEnC,MAAM,QAAQ,GAAG,SAAG,CAAC,oBAAoB,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAElE,IAAI,QAAQ,EAAE,MAAM,KAAK,KAAK,EAAE,CAAC;QAC9B,OAAO,SAAS,CAAC;IACpB,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,CAAC,eAAe,IAAI,6DAA8B,CAAC;IAC7E,MAAM,QAAQ,GAAG,QAAQ,EAAE,SAAS,EAAE,CAAC,WAAW,CAAC,CAAC;IAEpD,IAAI,QAAQ,EAAE,CAAC;QACZ,MAAM,WAAW,GAAG,IAAA,iEAA6B,EAC9C,MAAM,EACN,MAAM,CAAC,cAAc,EACrB,MAAM,CAAC,kBAAkB,CAC3B,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAEpD,IAAI,QAAQ,IAAI,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACtD,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC3B,CAAC;QAED,IACG,MAAM,CAAC,eAAe;eACnB,MAAM,CAAC,eAAe,KAAK,6DAA8B,EAC7D,CAAC;YACA,OAAO,SAAS,CAAC;QACpB,CAAC;IACJ,CAAC;SAAM,IAAI,QAAQ,EAAE,QAAQ,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CACZ,IAAI,QAAQ,CAAC,OAAO,CAAC,IAAI,qBAAqB,WAAW,0EAA0E,CACrI,CAAC;IACL,CAAC;IAED,MAAM,OAAO,GAAG,uBAAuB,CACpC,MAAM,CAAC,cAAc,EACrB,MAAM,CAAC,UAAU,CACnB,CAAC;IAEF,MAAM,WAAW,GAAG,wBAAwB,CAAC,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;IAC1E,IAAI,WAAW,EAAE,CAAC;QACf,OAAO,WAAW,CAAC;IACtB,CAAC;IAED,IAAI,MAAM,CAAC,UAAU,KAAK,QAAQ,IAAI,MAAM,CAAC,OAAO,IAAI,IAAI,EAAE,CAAC;QAC5D,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QACzC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACb,OAAO,EAAE,CAAC;QACb,CAAC;IACJ,CAAC;IAED,OAAO,SAAS,CAAC;AACpB,CAAC"}

package/access/functions/warn-if-public.d.ts

@@ -0,0 +1,12 @@
+import { PropertyNote } from "@rockster/class-memory";
+import { IControllerProperty } from "../../controllers/interfaces/controller-property";
+/**
+ * Standing warning for every endpoint exposed without authentication
+ * (`public: true`). Endpoints that use a special auth strategy
+ * (`property.authenticated`, via `createAuthenticationInterceptor`) are exempt —
+ * they skip the default auth service but still authenticate.
+ *
+ * Called by every action builder at registration so a public route can never
+ * ship silently.
+ */
+export declare function warnIfPublic(label: string, property: PropertyNote<IControllerProperty>): void;

package/access/functions/warn-if-public.js

@@ -0,0 +1,20 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.warnIfPublic = warnIfPublic;
+const logger_1 = require("@rockster/logger");
+const logger = new logger_1.Logger("Security");
+/**
+ * Standing warning for every endpoint exposed without authentication
+ * (`public: true`). Endpoints that use a special auth strategy
+ * (`property.authenticated`, via `createAuthenticationInterceptor`) are exempt —
+ * they skip the default auth service but still authenticate.
+ *
+ * Called by every action builder at registration so a public route can never
+ * ship silently.
+ */
+function warnIfPublic(label, property) {
+    if (property.public && !property.authenticated) {
+        logger.warn(`[PUBLIC] ${label} — endpoint exposto sem autenticação (public:true)`);
+    }
+}
+//# sourceMappingURL=warn-if-public.js.map

package/access/functions/warn-if-public.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"warn-if-public.js","sourceRoot":"./","sources":["access/functions/warn-if-public.ts"],"names":[],"mappings":";;AAeA,oCASC;AAvBD,6CAA0C;AAG1C,MAAM,MAAM,GAAG,IAAI,eAAM,CAAC,UAAU,CAAC,CAAC;AAEtC;;;;;;;;GAQG;AACH,SAAgB,YAAY,CACzB,KAAa,EACb,QAA2C;IAE3C,IAAI,QAAQ,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;QAC9C,MAAM,CAAC,IAAI,CACR,YAAY,KAAK,oDAAoD,CACvE,CAAC;IACL,CAAC;AACJ,CAAC"}

package/access/index.d.ts

@@ -0,0 +1,7 @@
+export * from './entities';
+export * from './access.module';
+export * from './constants';
+export * from './decorators';
+export * from './functions';
+export * from './services';
+export * from './interfaces';

package/access/index.js

@@ -0,0 +1,24 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./entities"), exports);
+__exportStar(require("./access.module"), exports);
+__exportStar(require("./constants"), exports);
+__exportStar(require("./decorators"), exports);
+__exportStar(require("./functions"), exports);
+__exportStar(require("./services"), exports);
+__exportStar(require("./interfaces"), exports);
+//# sourceMappingURL=index.js.map

package/access/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"./","sources":["access/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,6CAA2B;AAC3B,kDAAgC;AAChC,8CAA4B;AAC5B,+CAA6B;AAC7B,8CAA4B;AAC5B,6CAA2B;AAC3B,+CAA6B"}

package/access/interfaces/index.d.ts

@@ -0,0 +1,3 @@
+export * from './scope-service-registry';
+export * from './scope-service';
+export * from './resolve-scope-context-id';

package/access/interfaces/index.js

@@ -0,0 +1,20 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./scope-service-registry"), exports);
+__exportStar(require("./scope-service"), exports);
+__exportStar(require("./resolve-scope-context-id"), exports);
+//# sourceMappingURL=index.js.map

package/access/interfaces/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"./","sources":["access/interfaces/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2DAAyC;AACzC,kDAAgC;AAChC,6DAA2C"}

package/access/interfaces/resolve-scope-context-id.d.ts

@@ -0,0 +1,21 @@
+import { EntityManager } from "typeorm";
+import { Instantiable } from "@rockster/common";
+export type ScopeActionKind = "query" | "post" | "remove" | "default";
+/** Params injected with @ContextParams() on @ScopeContextIdResolver methods. */
+export type IScopeContextParams = IResolveScopeContextIdParams;
+export interface IResolveScopeContextIdParams {
+    contextName: string;
+    requestPayload?: unknown;
+    actionKind: ScopeActionKind;
+    postType?: "create" | "modify";
+    idValue?: string;
+    entityTarget?: Instantiable;
+    entityManager?: EntityManager;
+    withId?: boolean;
+    /**
+     * Per-request store. Resolvers may stash loaded entities here (e.g. the
+     * project/account row fetched to resolve the context id) so other resolvers
+     * or the handler reuse them instead of hitting the DB again.
+     */
+    store?: Map<string, unknown>;
+}

package/access/interfaces/resolve-scope-context-id.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=resolve-scope-context-id.js.map

package/access/interfaces/resolve-scope-context-id.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-scope-context-id.js","sourceRoot":"./","sources":["access/interfaces/resolve-scope-context-id.ts"],"names":[],"mappings":""}