@rockster/core 0.0.4 → 0.1.0

package/access/functions/assert-scope-action-access.d.ts

@@ -0,0 +1,32 @@
+import { Dictionary } from "@rockster/common";
+import { PropertyNote } from "@rockster/class-memory";
+import { IControllerProperty } from "../../controllers/interfaces/controller-property";
+import { PendingAction } from "../../core/interfaces/pending-action";
+import { IRequestContext } from "../../core/interfaces/request-context";
+export type ScopeActionKeySlot = "query" | "create" | "modify" | "remove" | "default";
+/**
+ * Enforces scope authorization for an action slot.
+ *
+ * A slot may carry one OR many keys ("a door with several locks"): the user must
+ * satisfy EVERY key (AND). Keys may belong to different scope contexts — each
+ * key resolves its own context id. Being the owner of a context satisfies that
+ * context's keys. Context-id / owner / user-key lookups are memoized within the
+ * call so keys sharing a context don't hit the DB twice; resolvers may also
+ * cache loaded data on `context.scopeStore` for the handler to reuse.
+ *
+ * Invoke it either with a `pending` action (default / query / post / remove
+ * builders) or with an explicit `requestPayload` (restful @Get/@Post… routes).
+ */
+export declare function assertScopeActionAccess(options: {
+    property: PropertyNote<IControllerProperty>;
+    slot: ScopeActionKeySlot;
+    context: IRequestContext;
+    /** Action flow: payload + annotations are read from the pending action. */
+    pending?: PendingAction;
+    /** Restful flow: payload provided explicitly (e.g. merged route params). */
+    requestPayload?: unknown;
+    annotations?: Dictionary<unknown>;
+    postType?: "create" | "modify";
+    /** Entity id for modify/remove when it is not the request body itself. */
+    entityId?: string;
+}): Promise<void>;

package/access/functions/assert-scope-action-access.js

@@ -0,0 +1,189 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.assertScopeActionAccess = assertScopeActionAccess;
+const common_1 = require("@rockster/common");
+const get_is_owner_1 = require("./get-is-owner");
+const get_user_keys_1 = require("./get-user-keys");
+const resolve_scope_context_id_1 = require("./resolve-scope-context-id");
+const env_1 = require("../env");
+function resolveRemoveIdValue(requestPayload) {
+    if (requestPayload == null) {
+        return undefined;
+    }
+    if (typeof requestPayload === "string" || typeof requestPayload === "number") {
+        return String(requestPayload);
+    }
+    if (typeof requestPayload === "object") {
+        const record = requestPayload;
+        const id = record.id ?? record.Id;
+        if (id != null && String(id).trim() !== "") {
+            return String(id);
+        }
+    }
+    return undefined;
+}
+function slotToActionKind(slot) {
+    if (slot === "query") {
+        return "query";
+    }
+    if (slot === "create" || slot === "modify") {
+        return "post";
+    }
+    if (slot === "remove") {
+        return "remove";
+    }
+    return "default";
+}
+/**
+ * Enforces scope authorization for an action slot.
+ *
+ * A slot may carry one OR many keys ("a door with several locks"): the user must
+ * satisfy EVERY key (AND). Keys may belong to different scope contexts — each
+ * key resolves its own context id. Being the owner of a context satisfies that
+ * context's keys. Context-id / owner / user-key lookups are memoized within the
+ * call so keys sharing a context don't hit the DB twice; resolvers may also
+ * cache loaded data on `context.scopeStore` for the handler to reuse.
+ *
+ * Invoke it either with a `pending` action (default / query / post / remove
+ * builders) or with an explicit `requestPayload` (restful @Get/@Post… routes).
+ */
+async function assertScopeActionAccess(options) {
+    const { property, slot, context, pending, postType, entityId } = options;
+    const keys = property.keys?.get(slot);
+    if (!keys || keys.length === 0) {
+        return;
+    }
+    const userId = context.session?.userId;
+    if (!userId) {
+        throw new common_1.UnauthorizedError();
+    }
+    const requestPayload = pending
+        ? context.request[pending.requestRef]
+        : options.requestPayload;
+    const annotations = pending?.annotations ?? options.annotations;
+    const actionKind = slotToActionKind(slot);
+    const idValue = entityId
+        ?? (actionKind === "remove"
+            ? resolveRemoveIdValue(requestPayload)
+            : undefined);
+    // Per-request store: resolvers may stash loaded data here so later resolvers
+    // (and the handler) reuse it instead of querying the DB again.
+    const store = (context.scopeStore ?? (context.scopeStore = new Map()));
+    // Per-call memo so several keys on the same context resolve/lookup only once.
+    const contextIdCache = new Map();
+    const ownerCache = new Map();
+    const userKeysCache = new Map();
+    const rootContextIdCache = new Map();
+    const missing = [];
+    for (const key of keys) {
+        const resolverCacheKey = `${key.contextName}|${key.resolverHandler ?? ""}`;
+        let contextId;
+        if (contextIdCache.has(resolverCacheKey)) {
+            contextId = contextIdCache.get(resolverCacheKey);
+        }
+        else {
+            contextId = await (0, resolve_scope_context_id_1.resolveScopeContextId)({
+                contextName: key.contextName,
+                requestPayload,
+                actionKind,
+                postType,
+                idValue,
+                entityTarget: property.data,
+                entityManager: context.entityManager,
+                withId: key.withId,
+                resolverHandler: key.resolverHandler,
+                requestContext: context,
+                pendingAnnotations: annotations,
+                store,
+            });
+            contextIdCache.set(resolverCacheKey, contextId);
+        }
+        if (key.withId && (contextId == null || contextId.trim() === "")) {
+            throw new common_1.ForbiddenError({
+                message: `Context id is required for [${key.contextName}]`,
+            });
+        }
+        const ownerCacheKey = `${key.contextName}|${contextId ?? ""}`;
+        let isOwner;
+        if (ownerCache.has(ownerCacheKey)) {
+            isOwner = ownerCache.get(ownerCacheKey);
+        }
+        else {
+            isOwner = await (0, get_is_owner_1.getIsOwner)(key.contextName, userId, contextId);
+            ownerCache.set(ownerCacheKey, isOwner);
+        }
+        if (isOwner) {
+            continue;
+        }
+        const userKeysCacheKey = contextId ?? "";
+        let userKeys;
+        if (userKeysCache.has(userKeysCacheKey)) {
+            userKeys = userKeysCache.get(userKeysCacheKey);
+        }
+        else {
+            userKeys = contextId
+                ? await (0, get_user_keys_1.getUserKeys)(userId, contextId)
+                : await (0, get_user_keys_1.getUserKeys)(userId);
+            userKeysCache.set(userKeysCacheKey, userKeys);
+        }
+        // Direct grant.
+        if (userKeys.includes(key.name)) {
+            continue;
+        }
+        const registry = env_1.env.scopeServiceRegistry.get(key.contextName);
+        // Context admin: holds this context's admin key → may do anything here.
+        if (registry?.adminKey && userKeys.includes(registry.adminKey)) {
+            continue;
+        }
+        // Platform master: holds the master key at the hierarchy ROOT → may do
+        // anything in any descendant scope. The root context is resolved from the
+        // same request (the root scope's resolver derives e.g. the workspace from
+        // the project/account being acted upon).
+        let rootContextId;
+        let masterKey;
+        if (registry?.root) {
+            rootContextId = contextId;
+            masterKey = registry.masterKey;
+        }
+        else if (registry?.rootScope) {
+            masterKey = env_1.env.scopeServiceRegistry.get(registry.rootScope)?.masterKey;
+            if (rootContextIdCache.has(registry.rootScope)) {
+                rootContextId = rootContextIdCache.get(registry.rootScope);
+            }
+            else {
+                rootContextId = await (0, resolve_scope_context_id_1.resolveScopeContextId)({
+                    contextName: registry.rootScope,
+                    requestPayload,
+                    actionKind,
+                    postType,
+                    idValue,
+                    entityTarget: property.data,
+                    entityManager: context.entityManager,
+                    withId: true,
+                    requestContext: context,
+                    pendingAnnotations: annotations,
+                    store,
+                });
+                rootContextIdCache.set(registry.rootScope, rootContextId);
+            }
+        }
+        if (masterKey && rootContextId) {
+            let rootKeys = userKeysCache.get(rootContextId);
+            if (!rootKeys) {
+                rootKeys = await (0, get_user_keys_1.getUserKeys)(userId, rootContextId);
+                userKeysCache.set(rootContextId, rootKeys);
+            }
+            if (rootKeys.includes(masterKey)) {
+                continue;
+            }
+        }
+        missing.push(key.name);
+    }
+    if (missing.length > 0) {
+        throw new common_1.ForbiddenError({
+            message: "Action require permissions to execute",
+            requirements: missing,
+        });
+    }
+}
+//# sourceMappingURL=assert-scope-action-access.js.map

package/access/functions/assert-scope-action-access.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assert-scope-action-access.js","sourceRoot":"./","sources":["access/functions/assert-scope-action-access.ts"],"names":[],"mappings":";;AAiEA,0DAqKC;AAtOD,6CAAiF;AAMjF,iDAA4C;AAC5C,mDAA8C;AAC9C,yEAAmE;AAEnE,gCAA6B;AAS7B,SAAS,oBAAoB,CAAC,cAAuB;IAClD,IAAI,cAAc,IAAI,IAAI,EAAE,CAAC;QAC1B,OAAO,SAAS,CAAC;IACpB,CAAC;IAED,IAAI,OAAO,cAAc,KAAK,QAAQ,IAAI,OAAO,cAAc,KAAK,QAAQ,EAAE,CAAC;QAC5E,OAAO,MAAM,CAAC,cAAc,CAAC,CAAC;IACjC,CAAC;IAED,IAAI,OAAO,cAAc,KAAK,QAAQ,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,cAAyC,CAAC;QACzD,MAAM,EAAE,GAAG,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,EAAE,CAAC;QAClC,IAAI,EAAE,IAAI,IAAI,IAAI,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YAC1C,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC;QACrB,CAAC;IACJ,CAAC;IAED,OAAO,SAAS,CAAC;AACpB,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAwB;IAC/C,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACpB,OAAO,OAAO,CAAC;IAClB,CAAC;IACD,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC1C,OAAO,MAAM,CAAC;IACjB,CAAC;IACD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACrB,OAAO,QAAQ,CAAC;IACnB,CAAC;IACD,OAAO,SAAS,CAAC;AACpB,CAAC;AAED;;;;;;;;;;;;GAYG;AACI,KAAK,UAAU,uBAAuB,CAAC,OAY7C;IACE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;IACzE,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAA4B,CAAC;IAEjE,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO;IACV,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC;IACvC,IAAI,CAAC,MAAM,EAAE,CAAC;QACX,MAAM,IAAI,0BAAiB,EAAE,CAAC;IACjC,CAAC;IAED,MAAM,cAAc,GAAG,OAAO;QAC3B,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC;QACrC,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC;IAC5B,MAAM,WAAW,GAAG,OAAO,EAAE,WAAW,IAAI,OAAO,CAAC,WAAW,CAAC;IAEhE,MAAM,UAAU,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,QAAQ;WAClB,CAAC,UAAU,KAAK,QAAQ;YACxB,CAAC,CAAC,oBAAoB,CAAC,cAAc,CAAC;YACtC,CAAC,CAAC,SAAS,CAAC,CAAC;IAEnB,6EAA6E;IAC7E,+DAA+D;IAC/D,MAAM,KAAK,GAAG,CAAC,OAAO,CAAC,UAAU,KAAlB,OAAO,CAAC,UAAU,GAAK,IAAI,GAAG,EAAmB,EAAC,CAAC;IAElE,8EAA8E;IAC9E,MAAM,cAAc,GAAG,IAAI,GAAG,EAA8B,CAAC;IAC7D,MAAM,UAAU,GAAG,IAAI,GAAG,EAAmB,CAAC;IAC9C,MAAM,aAAa,GAAG,IAAI,GAAG,EAAoB,CAAC;IAClD,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAA8B,CAAC;IAEjE,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACtB,MAAM,gBAAgB,GAAG,GAAG,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,eAAe,IAAI,EAAE,EAAE,CAAC;QAE3E,IAAI,SAA6B,CAAC;QAClC,IAAI,cAAc,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACxC,SAAS,GAAG,cAAc,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QACpD,CAAC;aAAM,CAAC;YACL,SAAS,GAAG,MAAM,IAAA,gDAAqB,EAAC;gBACrC,WAAW,EAAE,GAAG,CAAC,WAAW;gBAC5B,cAAc;gBACd,UAAU;gBACV,QAAQ;gBACR,OAAO;gBACP,YAAY,EAAE,QAAQ,CAAC,IAAI;gBAC3B,aAAa,EAAE,OAAO,CAAC,aAAa;gBACpC,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,eAAe,EAAE,GAAG,CAAC,eAAe;gBACpC,cAAc,EAAE,OAAO;gBACvB,kBAAkB,EAAE,WAAW;gBAC/B,KAAK;aACP,CAAC,CAAC;YACH,cAAc,CAAC,GAAG,CAAC,gBAAgB,EAAE,SAAS,CAAC,CAAC;QACnD,CAAC;QAED,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,SAAS,IAAI,IAAI,IAAI,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;YAChE,MAAM,IAAI,uBAAc,CAAC;gBACtB,OAAO,EAAE,+BAA+B,GAAG,CAAC,WAAW,GAAG;aAC5D,CAAC,CAAC;QACN,CAAC;QAED,MAAM,aAAa,GAAG,GAAG,GAAG,CAAC,WAAW,IAAI,SAAS,IAAI,EAAE,EAAE,CAAC;QAC9D,IAAI,OAAgB,CAAC;QACrB,IAAI,UAAU,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;YACjC,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,aAAa,CAAY,CAAC;QACtD,CAAC;aAAM,CAAC;YACL,OAAO,GAAG,MAAM,IAAA,yBAAU,EAAC,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;YAC/D,UAAU,CAAC,GAAG,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;QAC1C,CAAC;QAED,IAAI,OAAO,EAAE,CAAC;YACX,SAAS;QACZ,CAAC;QAED,MAAM,gBAAgB,GAAG,SAAS,IAAI,EAAE,CAAC;QACzC,IAAI,QAAkB,CAAC;QACvB,IAAI,aAAa,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACvC,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,gBAAgB,CAAa,CAAC;QAC9D,CAAC;aAAM,CAAC;YACL,QAAQ,GAAG,SAAS;gBACjB,CAAC,CAAC,MAAM,IAAA,2BAAW,EAAC,MAAM,EAAE,SAAS,CAAC;gBACtC,CAAC,CAAC,MAAM,IAAA,2BAAW,EAAC,MAAM,CAAC,CAAC;YAC/B,aAAa,CAAC,GAAG,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC;QACjD,CAAC;QAED,gBAAgB;QAChB,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,SAAS;QACZ,CAAC;QAED,MAAM,QAAQ,GAAG,SAAG,CAAC,oBAAoB,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAE/D,wEAAwE;QACxE,IAAI,QAAQ,EAAE,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC9D,SAAS;QACZ,CAAC;QAED,uEAAuE;QACvE,0EAA0E;QAC1E,0EAA0E;QAC1E,yCAAyC;QACzC,IAAI,aAAiC,CAAC;QACtC,IAAI,SAA6B,CAAC;QAClC,IAAI,QAAQ,EAAE,IAAI,EAAE,CAAC;YAClB,aAAa,GAAG,SAAS,CAAC;YAC1B,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAC;QAClC,CAAC;aAAM,IAAI,QAAQ,EAAE,SAAS,EAAE,CAAC;YAC9B,SAAS,GAAG,SAAG,CAAC,oBAAoB,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC;YACxE,IAAI,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC9C,aAAa,GAAG,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;YAC9D,CAAC;iBAAM,CAAC;gBACL,aAAa,GAAG,MAAM,IAAA,gDAAqB,EAAC;oBACzC,WAAW,EAAE,QAAQ,CAAC,SAAS;oBAC/B,cAAc;oBACd,UAAU;oBACV,QAAQ;oBACR,OAAO;oBACP,YAAY,EAAE,QAAQ,CAAC,IAAI;oBAC3B,aAAa,EAAE,OAAO,CAAC,aAAa;oBACpC,MAAM,EAAE,IAAI;oBACZ,cAAc,EAAE,OAAO;oBACvB,kBAAkB,EAAE,WAAW;oBAC/B,KAAK;iBACP,CAAC,CAAC;gBACH,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;YAC7D,CAAC;QACJ,CAAC;QAED,IAAI,SAAS,IAAI,aAAa,EAAE,CAAC;YAC9B,IAAI,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;YAChD,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACb,QAAQ,GAAG,MAAM,IAAA,2BAAW,EAAC,MAAM,EAAE,aAAa,CAAC,CAAC;gBACpD,aAAa,CAAC,GAAG,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;YAC9C,CAAC;YACD,IAAI,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;gBAChC,SAAS;YACZ,CAAC;QACJ,CAAC;QAED,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,uBAAc,CAAC;YACtB,OAAO,EAAE,uCAAuC;YAChD,YAAY,EAAE,OAAO;SACvB,CAAC,CAAC;IACN,CAAC;AACJ,CAAC"}

package/access/functions/build-scope-resolver-initial-data.d.ts

@@ -0,0 +1,4 @@
+import { Dictionary } from "@rockster/common";
+import { IRequestContext } from "../../core/interfaces/request-context";
+import { IResolveScopeContextIdParams } from "../interfaces/resolve-scope-context-id";
+export declare function buildScopeResolverInitialData(params: IResolveScopeContextIdParams, requestContext?: IRequestContext, pendingAnnotations?: Dictionary<unknown>): Dictionary<unknown>;

package/access/functions/build-scope-resolver-initial-data.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildScopeResolverInitialData = buildScopeResolverInitialData;
+const constants_1 = require("../../command/constants");
+const constants_2 = require("../../controllers/constants");
+const constants_3 = require("../../query/constants");
+const constants_4 = require("../constants");
+function buildScopeResolverInitialData(params, requestContext, pendingAnnotations) {
+    return {
+        [constants_4.SCOPE_CONTEXT_PARAMS_KEY]: params,
+        [constants_2.REQUEST_CONTEXT_KEY]: requestContext,
+        [constants_3.QUERY_CONTENT_KEY]: pendingAnnotations?.[constants_3.QUERY_CONTENT_KEY],
+        [constants_1.POST_CONTENT_KEY]: pendingAnnotations?.[constants_1.POST_CONTENT_KEY],
+        [constants_1.REMOVE_CONTENT_KEY]: pendingAnnotations?.[constants_1.REMOVE_CONTENT_KEY],
+    };
+}
+//# sourceMappingURL=build-scope-resolver-initial-data.js.map

package/access/functions/build-scope-resolver-initial-data.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-scope-resolver-initial-data.js","sourceRoot":"./","sources":["access/functions/build-scope-resolver-initial-data.ts"],"names":[],"mappings":";;AAQA,sEAYC;AAnBD,uDAA+E;AAC/E,2DAAkE;AAClE,qDAA0D;AAE1D,4CAAwD;AAGxD,SAAgB,6BAA6B,CAC1C,MAAoC,EACpC,cAAgC,EAChC,kBAAwC;IAExC,OAAO;QACJ,CAAC,oCAAwB,CAAC,EAAE,MAAM;QAClC,CAAC,+BAAmB,CAAC,EAAE,cAAc;QACrC,CAAC,6BAAiB,CAAC,EAAE,kBAAkB,EAAE,CAAC,6BAAiB,CAAC;QAC5D,CAAC,4BAAgB,CAAC,EAAE,kBAAkB,EAAE,CAAC,4BAAgB,CAAC;QAC1D,CAAC,8BAAkB,CAAC,EAAE,kBAAkB,EAAE,CAAC,8BAAkB,CAAC;KAChE,CAAC;AACL,CAAC"}

package/access/functions/describe-action-scope.d.ts

@@ -0,0 +1,9 @@
+import { PropertyNote } from "@rockster/class-memory";
+import { IControllerProperty } from "../../controllers/interfaces/controller-property";
+import { IActionDocsScopeKey } from "../../core/interfaces/action-docs";
+/**
+ * Flattens an action's scope keys (`Map<slot, IScopeKey[]>`) into a flat list
+ * for the generated docs/SDK, so consumers can see exactly which key(s) — and
+ * in which context — an endpoint requires. Empty list = login only.
+ */
+export declare function describeActionScopeKeys(property: PropertyNote<IControllerProperty>): IActionDocsScopeKey[];

package/access/functions/describe-action-scope.js

@@ -0,0 +1,27 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.describeActionScopeKeys = describeActionScopeKeys;
+/**
+ * Flattens an action's scope keys (`Map<slot, IScopeKey[]>`) into a flat list
+ * for the generated docs/SDK, so consumers can see exactly which key(s) — and
+ * in which context — an endpoint requires. Empty list = login only.
+ */
+function describeActionScopeKeys(property) {
+    const result = [];
+    const keys = property.keys;
+    if (!keys) {
+        return result;
+    }
+    for (const [slot, slotKeys] of keys.entries()) {
+        for (const key of (slotKeys ?? [])) {
+            result.push({
+                slot,
+                contextName: key.contextName,
+                name: key.name,
+                resolverHandler: key.resolverHandler,
+            });
+        }
+    }
+    return result;
+}
+//# sourceMappingURL=describe-action-scope.js.map

package/access/functions/describe-action-scope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"describe-action-scope.js","sourceRoot":"./","sources":["access/functions/describe-action-scope.ts"],"names":[],"mappings":";;AAUA,0DAqBC;AA1BD;;;;GAIG;AACH,SAAgB,uBAAuB,CACpC,QAA2C;IAE3C,MAAM,MAAM,GAA0B,EAAE,CAAC;IACzC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;IAC3B,IAAI,CAAC,IAAI,EAAE,CAAC;QACT,OAAO,MAAM,CAAC;IACjB,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;QAC7C,KAAK,MAAM,GAAG,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAgB,EAAE,CAAC;YACjD,MAAM,CAAC,IAAI,CAAC;gBACT,IAAI;gBACJ,WAAW,EAAE,GAAG,CAAC,WAAW;gBAC5B,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,eAAe,EAAE,GAAG,CAAC,eAAe;aACtC,CAAC,CAAC;QACN,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC;AACjB,CAAC"}

package/access/functions/index.d.ts

@@ -1,3 +1,8 @@
 export * from './get-context-id-service';
 export * from './get-user-keys';
 export * from './register-scope';
+export * from './normalize-scope-keys';
+export * from './resolve-scope-context-id';
+export * from './assert-scope-action-access';
+export * from './init-scope-service-executors';
+export * from './build-scope-resolver-initial-data';

package/access/functions/index.js

@@ -17,4 +17,9 @@ Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./get-context-id-service"), exports);
 __exportStar(require("./get-user-keys"), exports);
 __exportStar(require("./register-scope"), exports);
+__exportStar(require("./normalize-scope-keys"), exports);
+__exportStar(require("./resolve-scope-context-id"), exports);
+__exportStar(require("./assert-scope-action-access"), exports);
+__exportStar(require("./init-scope-service-executors"), exports);
+__exportStar(require("./build-scope-resolver-initial-data"), exports);
 //# sourceMappingURL=index.js.map

package/access/functions/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"./","sources":["access/functions/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2DAAyC;AACzC,kDAAgC;AAChC,mDAAiC"}
+{"version":3,"file":"index.js","sourceRoot":"./","sources":["access/functions/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2DAAyC;AACzC,kDAAgC;AAChC,mDAAiC;AACjC,yDAAuC;AACvC,6DAA2C;AAC3C,+DAA6C;AAC7C,iEAA+C;AAC/C,sEAAoD"}

package/access/functions/init-scope-service-executors.d.ts

@@ -0,0 +1,3 @@
+import { Instantiable } from "@rockster/common";
+export declare const DEFAULT_SCOPE_CONTEXT_RESOLVER = "resolveContextId";
+export declare function initScopeServiceExecutors(contextName: string, Service: Instantiable): Promise<void>;

package/access/functions/init-scope-service-executors.js

@@ -0,0 +1,38 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_SCOPE_CONTEXT_RESOLVER = void 0;
+exports.initScopeServiceExecutors = initScopeServiceExecutors;
+const class_injector_1 = require("@rockster/class-injector");
+const logger_1 = require("@rockster/logger");
+const env_1 = require("../env");
+exports.DEFAULT_SCOPE_CONTEXT_RESOLVER = "resolveContextId";
+async function initScopeServiceExecutors(contextName, Service) {
+    const registry = env_1.env.scopeServiceRegistry.get(contextName);
+    if (!registry) {
+        return;
+    }
+    const logger = new logger_1.Logger("Access");
+    if (registry.withId === false) {
+        registry.instance = await (0, class_injector_1.createInstance)(Service);
+        registry.resolvers = {};
+        logger.log(`[${Service.name}] initialized (scope without context id)`);
+        return;
+    }
+    const { instance, executors } = await (0, class_injector_1.createExecutors)(Service);
+    if (!executors[exports.DEFAULT_SCOPE_CONTEXT_RESOLVER]) {
+        logger.throw(new Error(`[${Service.name}] "${exports.DEFAULT_SCOPE_CONTEXT_RESOLVER}" must be decorated with @ScopeContextIdResolver({ default: true })`));
+    }
+    const resolverMethods = classInjector
+        .storage
+        .getProperties(Service)
+        .filter((property) => property.scopeContextIdResolver);
+    for (const property of resolverMethods) {
+        if (!executors[property.propertyKey]) {
+            logger.throw(new Error(`[${Service.name}] @ScopeContextIdResolver on "${property.propertyKey}" is not executable — check parameter injection decorators`));
+        }
+    }
+    registry.instance = instance;
+    registry.resolvers = executors;
+    logger.log(`[${Service.name}] scope resolvers initialized`);
+}
+//# sourceMappingURL=init-scope-service-executors.js.map

package/access/functions/init-scope-service-executors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"init-scope-service-executors.js","sourceRoot":"./","sources":["access/functions/init-scope-service-executors.ts"],"names":[],"mappings":";;;AASA,8DA0CC;AAnDD,6DAA2E;AAG3E,6CAA0C;AAC1C,gCAA6B;AAGhB,QAAA,8BAA8B,GAAG,kBAAkB,CAAC;AAE1D,KAAK,UAAU,yBAAyB,CAC5C,WAAmB,EACnB,OAAqB;IAErB,MAAM,QAAQ,GAAG,SAAG,CAAC,oBAAoB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC3D,IAAI,CAAC,QAAQ,EAAE,CAAC;QACb,OAAO;IACV,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,eAAM,CAAC,QAAQ,CAAC,CAAC;IAEpC,IAAI,QAAQ,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QAC7B,QAAQ,CAAC,QAAQ,GAAG,MAAM,IAAA,+BAAc,EAAC,OAAO,CAAkB,CAAC;QACnE,QAAQ,CAAC,SAAS,GAAG,EAAE,CAAC;QACxB,MAAM,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,IAAI,0CAA0C,CAAC,CAAC;QACvE,OAAO;IACV,CAAC;IAED,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,MAAM,IAAA,gCAAe,EAAC,OAAO,CAAC,CAAC;IAE/D,IAAI,CAAC,SAAS,CAAC,sCAA8B,CAAC,EAAE,CAAC;QAC9C,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,CACnB,IAAI,OAAO,CAAC,IAAI,MAAM,sCAA8B,qEAAqE,CAC3H,CAAC,CAAC;IACN,CAAC;IAED,MAAM,eAAe,GAAG,aAAa;SACjC,OAAO;SACP,aAAa,CAAC,OAAO,CAAC;SACtB,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC;IAE1D,KAAK,MAAM,QAAQ,IAAI,eAAe,EAAE,CAAC;QACtC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YACpC,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,CACnB,IAAI,OAAO,CAAC,IAAI,iCAAiC,QAAQ,CAAC,WAAW,4DAA4D,CACnI,CAAC,CAAC;QACN,CAAC;IACJ,CAAC;IAED,QAAQ,CAAC,QAAQ,GAAG,QAAyB,CAAC;IAC9C,QAAQ,CAAC,SAAS,GAAG,SAAqC,CAAC;IAC3D,MAAM,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,IAAI,+BAA+B,CAAC,CAAC;AAC/D,CAAC"}

package/access/functions/normalize-scope-keys.d.ts

@@ -0,0 +1,4 @@
+export declare function normalizeScopeKeys(keys: string[]): string[];
+export declare function filterScopeAccessRows<T extends {
+    key?: string | null;
+}>(rows: T[]): T[];

package/access/functions/normalize-scope-keys.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.normalizeScopeKeys = normalizeScopeKeys;
+exports.filterScopeAccessRows = filterScopeAccessRows;
+function normalizeScopeKeys(keys) {
+    const unique = new Set();
+    for (const key of keys) {
+        if (typeof key === "string" && key.trim() !== "") {
+            unique.add(key);
+        }
+    }
+    return [...unique];
+}
+function filterScopeAccessRows(rows) {
+    return rows.filter((row) => typeof row.key === "string" && row.key.trim() !== "");
+}
+//# sourceMappingURL=normalize-scope-keys.js.map

package/access/functions/normalize-scope-keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"normalize-scope-keys.js","sourceRoot":"./","sources":["access/functions/normalize-scope-keys.ts"],"names":[],"mappings":";;AAAA,gDAUC;AAED,sDAOC;AAnBD,SAAgB,kBAAkB,CAAC,IAAc;IAC9C,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IAEjC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACtB,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YAChD,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC;AACtB,CAAC;AAED,SAAgB,qBAAqB,CAClC,IAAS;IAET,OAAO,IAAI,CAAC,MAAM,CACf,CAAC,GAAG,EAA8B,EAAE,CACjC,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,CACzD,CAAC;AACL,CAAC"}

package/access/functions/register-scope.d.ts

@@ -1,8 +1,19 @@
 import { Instantiable } from "@rockster/common";
 import { IScopeService } from "../interfaces/scope-service";
-export declare function registerScope(contextName: string, Service: Instantiable<IScopeService<any>>, withId?: boolean): {
-    ActionKey: (key: string) => MethodDecorator;
-    QueryActionKey: (key: string) => (target: any, propertyKey: any) => void;
-    CreateActionKey: (key: string) => MethodDecorator;
-    ModifyActionKey: (key: string) => MethodDecorator;
+export type RegisterScopeOptions = {
+    /** This scope is the hierarchy root (e.g. workspace). */
+    root?: boolean;
+    /** Context name of the root scope this scope descends from. */
+    rootScope?: string;
+    /** Master key (set on the root) — grants everything in all descendants. */
+    masterKey?: string;
+    /** Admin key — grants everything within this context. */
+    adminKey?: string;
+};
+export declare function registerScope<T extends IScopeService>(contextName: string, Service: Instantiable<T>, withId?: boolean, options?: RegisterScopeOptions): {
+    ActionKey: (key: string | string[], resolverHandler?: keyof T & string) => MethodDecorator;
+    QueryActionKey: (key: string | string[], resolverHandler?: keyof T & string) => MethodDecorator;
+    CreateActionKey: (key: string | string[], resolverHandler?: keyof T & string) => MethodDecorator;
+    ModifyActionKey: (key: string | string[], resolverHandler?: keyof T & string) => MethodDecorator;
+    RemoveActionKey: (key: string | string[], resolverHandler?: keyof T & string) => MethodDecorator;
 };

package/access/functions/register-scope.js

@@ -2,79 +2,91 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.registerScope = registerScope;
 const env_1 = require("../env");
-function registerScope(contextName, Service, withId) {
+function registerScope(contextName, Service, withId, options) {
     const keys = [];
     env_1.env.scopesKeys.set(contextName, keys);
     if (Service) {
         env_1.env.scopeServiceRegistry.set(contextName, {
-            Service: Service
+            Service: Service,
+            withId: withId !== false,
+            root: options?.root,
+            rootScope: options?.rootScope,
+            masterKey: options?.masterKey,
+            adminKey: options?.adminKey,
         });
     }
+    // Master/admin keys are grantable like any other key — list them in the catalog.
+    if (options?.adminKey) {
+        keys.push({ contextName, name: options.adminKey });
+    }
+    if (options?.root && options?.masterKey) {
+        keys.push({ contextName, name: options.masterKey });
+    }
     const getProperty = (target, propertyKey) => {
         const property = core
             .storage
             .createProperty(target, propertyKey);
-        if (!property.keys)
+        if (!property.keys) {
             property.keys = new Map();
+        }
         return property;
     };
+    /**
+     * Registers one OR many keys on a slot.
+     *
+     * Concept: "a key opens a door". Some endpoints are a door with several
+     * locks — pass an array and ALL keys become required (AND). Stacking the
+     * same-slot decorator also accumulates, so a slot may even combine keys from
+     * different scope contexts. The resolver handler is shared by the keys set in
+     * the same call.
+     */
+    const setScopeKey = (property, slot, key, type, resolverHandler) => {
+        const names = Array.isArray(key) ? key : [key];
+        const slotKeys = property.keys.get(slot) ?? [];
+        for (const name of names) {
+            keys.push({
+                contextName: contextName,
+                name: name,
+                type,
+            });
+            slotKeys.push({
+                contextName: contextName,
+                name: name,
+                withId: withId,
+                resolverHandler: resolverHandler,
+            });
+        }
+        property.keys.set(slot, slotKeys);
+    };
     return {
-        ActionKey: function (key) {
+        ActionKey: function (key, resolverHandler) {
+            return function (target, propertyKey) {
+                const property = getProperty(target, propertyKey);
+                setScopeKey(property, "default", key, undefined, resolverHandler);
+            };
+        },
+        QueryActionKey: function (key, resolverHandler) {
             return function (target, propertyKey) {
-                keys.push({
-                    contextName: contextName,
-                    name: key
-                });
                 const property = getProperty(target, propertyKey);
-                property.keys.set('default', {
-                    contextName: contextName,
-                    name: key,
-                    withId: withId
-                });
+                setScopeKey(property, "query", key, undefined, resolverHandler);
             };
         },
-        QueryActionKey: function (key) {
+        CreateActionKey: function (key, resolverHandler) {
             return function (target, propertyKey) {
-                keys.push({
-                    contextName: contextName,
-                    name: key
-                });
                 const property = getProperty(target, propertyKey);
-                property.keys.set('query', {
-                    contextName: contextName,
-                    name: key,
-                    withId: withId
-                });
+                setScopeKey(property, "create", key, "create", resolverHandler);
             };
         },
-        CreateActionKey: function (key) {
+        ModifyActionKey: function (key, resolverHandler) {
             return function (target, propertyKey) {
-                keys.push({
-                    contextName: contextName,
-                    type: 'create',
-                    name: key
-                });
                 const property = getProperty(target, propertyKey);
-                property.keys.set('create', {
-                    contextName: contextName,
-                    name: key,
-                    withId: withId
-                });
+                setScopeKey(property, "modify", key, "modify", resolverHandler);
             };
         },
-        ModifyActionKey: function (key) {
+        RemoveActionKey: function (key, resolverHandler) {
             return function (target, propertyKey) {
-                keys.push({
-                    contextName: contextName,
-                    type: 'modify',
-                    name: key
-                });
                 const property = getProperty(target, propertyKey);
-                property.keys.set('modify', {
-                    contextName: contextName,
-                    name: key,
-                    withId: withId
-                });
+                setScopeKey(property, "remove", key, "remove", resolverHandler);
             };
         },
     };

package/access/functions/register-scope.js.map

@@ -1 +1 @@
-{"version":3,"file":"register-scope.js","sourceRoot":"./","sources":["access/functions/register-scope.ts"],"names":[],"mappings":";;AAOA,sCA+GC;AArHD,gCAA6B;AAM7B,SAAgB,aAAa,CAC1B,WAAmB,EACnB,OAAyC,EACzC,MAAgB;IAGhB,MAAM,IAAI,GAAG,EAAiB,CAAC;IAC/B,SAAG,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;IAEtC,IAAI,OAAO,EAAE,CAAC;QACX,SAAG,CAAC,oBAAoB,CAAC,GAAG,CAAC,WAAW,EAAE;YACvC,OAAO,EAAE,OAAO;SAClB,CAAC,CAAC;IACN,CAAC;IAED,MAAM,WAAW,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,EAAE;QACzC,MAAM,QAAQ,GAAG,IAAI;aACjB,OAAO;aACP,cAAc,CACZ,MAAsB,EACtB,WAAqB,CACc,CAAC;QAE1C,IAAI,CAAC,QAAQ,CAAC,IAAI;YAAE,QAAQ,CAAC,IAAI,GAAG,IAAI,GAAG,EAAqB,CAAC;QACjE,OAAO,QAAQ,CAAC;IACnB,CAAC,CAAA;IAED,OAAO;QACJ,SAAS,EAAE,UAAU,GAAW;YAC7B,OAAO,UAAU,MAAM,EAAE,WAAW;gBAEjC,IAAI,CAAC,IAAI,CAAC;oBACP,WAAW,EAAE,WAAW;oBACxB,IAAI,EAAE,GAAG;iBACX,CAAC,CAAC;gBAEH,MAAM,QAAQ,GAAG,WAAW,CACzB,MAAM,EACN,WAAW,CACb,CAAC;gBAEF,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE;oBAC1B,WAAW,EAAE,WAAW;oBACxB,IAAI,EAAE,GAAG;oBACT,MAAM,EAAE,MAAM;iBAChB,CAAC,CAAC;YACN,CAAC,CAAA;QACJ,CAAC;QACD,cAAc,EAAE,UAAS,GAAW;YACjC,OAAO,UAAU,MAAM,EAAE,WAAW;gBAEjC,IAAI,CAAC,IAAI,CAAC;oBACP,WAAW,EAAE,WAAW;oBACxB,IAAI,EAAE,GAAG;iBACX,CAAC,CAAC;gBAEH,MAAM,QAAQ,GAAG,WAAW,CACzB,MAAM,EACN,WAAW,CACb,CAAC;gBAEF,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE;oBACxB,WAAW,EAAE,WAAW;oBACxB,IAAI,EAAE,GAAG;oBACT,MAAM,EAAE,MAAM;iBAChB,CAAC,CAAC;YACN,CAAC,CAAA;QACJ,CAAC;QACD,eAAe,EAAE,UAAU,GAAW;YACnC,OAAO,UAAU,MAAM,EAAE,WAAW;gBAEjC,IAAI,CAAC,IAAI,CAAC;oBACP,WAAW,EAAE,WAAW;oBACxB,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,GAAG;iBACX,CAAC,CAAC;gBAEH,MAAM,QAAQ,GAAG,WAAW,CACzB,MAAM,EACN,WAAW,CACb,CAAC;gBAEF,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE;oBACzB,WAAW,EAAE,WAAW;oBACxB,IAAI,EAAE,GAAG;oBACT,MAAM,EAAE,MAAM;iBAChB,CAAC,CAAC;YACN,CAAC,CAAA;QACJ,CAAC;QACD,eAAe,EAAE,UAAU,GAAW;YACnC,OAAO,UAAU,MAAM,EAAE,WAAW;gBAEjC,IAAI,CAAC,IAAI,CAAC;oBACP,WAAW,EAAE,WAAW;oBACxB,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,GAAG;iBACX,CAAC,CAAC;gBAEH,MAAM,QAAQ,GAAG,WAAW,CACzB,MAAM,EACN,WAAW,CACb,CAAC;gBAEF,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE;oBACzB,WAAW,EAAE,WAAW;oBACxB,IAAI,EAAE,GAAG;oBACT,MAAM,EAAE,MAAM;iBAChB,CAAC,CAAC;YACN,CAAC,CAAA;QACJ,CAAC;KACH,CAAC;AACL,CAAC"}
+{"version":3,"file":"register-scope.js","sourceRoot":"./","sources":["access/functions/register-scope.ts"],"names":[],"mappings":";;AAkBA,sCA8HC;AA/ID,gCAA6B;AAiB7B,SAAgB,aAAa,CAC1B,WAAmB,EACnB,OAAwB,EACxB,MAAgB,EAChB,OAA8B;IAE9B,MAAM,IAAI,GAAG,EAAiB,CAAC;IAC/B,SAAG,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;IAEtC,IAAI,OAAO,EAAE,CAAC;QACX,SAAG,CAAC,oBAAoB,CAAC,GAAG,CAAC,WAAW,EAAE;YACvC,OAAO,EAAE,OAAO;YAChB,MAAM,EAAE,MAAM,KAAK,KAAK;YACxB,IAAI,EAAE,OAAO,EAAE,IAAI;YACnB,SAAS,EAAE,OAAO,EAAE,SAAS;YAC7B,SAAS,EAAE,OAAO,EAAE,SAAS;YAC7B,QAAQ,EAAE,OAAO,EAAE,QAAQ;SAC7B,CAAC,CAAC;IACN,CAAC;IAED,iFAAiF;IACjF,IAAI,OAAO,EAAE,QAAQ,EAAE,CAAC;QACrB,IAAI,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,OAAO,EAAE,IAAI,IAAI,OAAO,EAAE,SAAS,EAAE,CAAC;QACvC,IAAI,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;IACvD,CAAC;IAED,MAAM,WAAW,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,EAAE;QACzC,MAAM,QAAQ,GAAG,IAAI;aACjB,OAAO;aACP,cAAc,CACZ,MAAsB,EACtB,WAAqB,CACc,CAAC;QAE1C,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YAClB,QAAQ,CAAC,IAAI,GAAG,IAAI,GAAG,EAAuB,CAAC;QAClD,CAAC;QACD,OAAO,QAAQ,CAAC;IACnB,CAAC,CAAC;IAEF;;;;;;;;OAQG;IACH,MAAM,WAAW,GAAG,CACjB,QAA2C,EAC3C,IAAY,EACZ,GAAsB,EACtB,IAAwB,EACxB,eAAkC,EACnC,EAAE;QACD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAC/C,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAE/C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACxB,IAAI,CAAC,IAAI,CAAC;gBACP,WAAW,EAAE,WAAW;gBACxB,IAAI,EAAE,IAAI;gBACV,IAAI;aACN,CAAC,CAAC;YAEH,QAAQ,CAAC,IAAI,CAAC;gBACX,WAAW,EAAE,WAAW;gBACxB,IAAI,EAAE,IAAI;gBACV,MAAM,EAAE,MAAM;gBACd,eAAe,EAAE,eAAe;aAClC,CAAC,CAAC;QACN,CAAC;QAED,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACrC,CAAC,CAAC;IAEF,OAAO;QACJ,SAAS,EAAE,UACR,GAAsB,EACtB,eAAkC;YAElC,OAAO,UAAU,MAAM,EAAE,WAAW;gBACjC,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;gBAClD,WAAW,CAAC,QAAQ,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;YACrE,CAAC,CAAC;QACL,CAAC;QACD,cAAc,EAAE,UACb,GAAsB,EACtB,eAAkC;YAElC,OAAO,UAAU,MAAM,EAAE,WAAW;gBACjC,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;gBAClD,WAAW,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;YACnE,CAAC,CAAC;QACL,CAAC;QACD,eAAe,EAAE,UACd,GAAsB,EACtB,eAAkC;YAElC,OAAO,UAAU,MAAM,EAAE,WAAW;gBACjC,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;gBAClD,WAAW,CAAC,QAAQ,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,eAAe,CAAC,CAAC;YACnE,CAAC,CAAC;QACL,CAAC;QACD,eAAe,EAAE,UACd,GAAsB,EACtB,eAAkC;YAElC,OAAO,UAAU,MAAM,EAAE,WAAW;gBACjC,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;gBAClD,WAAW,CAAC,QAAQ,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,eAAe,CAAC,CAAC;YACnE,CAAC,CAAC;QACL,CAAC;QACD,eAAe,EAAE,UACd,GAAsB,EACtB,eAAkC;YAElC,OAAO,UAAU,MAAM,EAAE,WAAW;gBACjC,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;gBAClD,WAAW,CAAC,QAAQ,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,eAAe,CAAC,CAAC;YACnE,CAAC,CAAC;QACL,CAAC;KACH,CAAC;AACL,CAAC"}

package/access/functions/resolve-scope-context-id.d.ts

@@ -0,0 +1,9 @@
+import { Dictionary } from "@rockster/common";
+import { IRequestContext } from "../../core/interfaces/request-context";
+import { IResolveScopeContextIdParams } from "../interfaces/resolve-scope-context-id";
+export type ResolveScopeContextIdParams = IResolveScopeContextIdParams & {
+    resolverHandler?: string;
+    requestContext?: IRequestContext;
+    pendingAnnotations?: Dictionary<unknown>;
+};
+export declare function resolveScopeContextId(params: ResolveScopeContextIdParams): Promise<string | undefined>;