@servicelabsco/slabs-access-manager 3.0.3 → 3.0.4

package/dist/accessUtility/libraries/process.remote.file.rule.data.d.ts

@@ -0,0 +1,15 @@
+import { AccessBusinessEntity } from '../../access/entities/access.business.entity';
+import { AddRemoteFileRuleDto } from '../dtos/add.remote.file.rule.dto';
+import { RemoteFileRuleEntity } from '../entities/remote.file.rule.entity';
+import { ProcessCommonData } from './process.common.data';
+export declare class ProcessRemoteFileRuleData extends ProcessCommonData {
+    private readonly business;
+    protected payload: AddRemoteFileRuleDto;
+    constructor(business: AccessBusinessEntity);
+    process(payload: AddRemoteFileRuleDto): Promise<RemoteFileRuleEntity>;
+    private load;
+    private set;
+    private setScript;
+    private validate;
+    private validateUnique;
+}

package/dist/accessUtility/libraries/process.remote.file.rule.data.js

@@ -0,0 +1,60 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ProcessRemoteFileRuleData = void 0;
+const nestjs_utility_services_1 = require("@servicelabsco/nestjs-utility-services");
+const typeorm_1 = require("typeorm");
+const SourceHash = require("../../config/source.hash");
+const remote_file_rule_entity_1 = require("../entities/remote.file.rule.entity");
+const process_common_data_1 = require("./process.common.data");
+const SCRIPT_TYPE_ID = 14;
+class ProcessRemoteFileRuleData extends process_common_data_1.ProcessCommonData {
+    constructor(business) {
+        super();
+        this.business = business;
+    }
+    async process(payload) {
+        this.payload = payload;
+        const entity = await this.load();
+        await this.validate();
+        return this.set(entity);
+    }
+    async load() {
+        if (!this.payload.id)
+            return remote_file_rule_entity_1.RemoteFileRuleEntity.create({ business_id: this.business.id, active: true, attributes: {} });
+        const entity = await remote_file_rule_entity_1.RemoteFileRuleEntity.findOne({ where: { id: this.payload.id, business_id: this.business.id, deleted_at: (0, typeorm_1.IsNull)() } });
+        if (!entity)
+            throw new nestjs_utility_services_1.AccessException();
+        return entity;
+    }
+    async set(entity) {
+        entity.name = this.payload.name;
+        entity.description = this.payload.description ?? null;
+        entity.priority = this.payload.priority;
+        entity.filter_condition = this.payload.filter_condition;
+        if (this.payload.active !== undefined)
+            entity.active = this.payload.active;
+        await entity.save();
+        const script = await this.setScript(entity);
+        entity.script_id = script.id;
+        return entity.save();
+    }
+    async setScript(rule) {
+        const script = await nestjs_utility_services_1.SystemScriptEntity.firstOrNew({ source_type: SourceHash.remoteFileRule, source_id: rule.id });
+        script.type_id = SCRIPT_TYPE_ID;
+        script.name = rule.name;
+        script.script = this.payload.script;
+        return script.save();
+    }
+    async validate() {
+        await this.validateUnique('name', (0, typeorm_1.ILike)(this.payload.name), 'Duplicate name');
+        await this.validateUnique('priority', this.payload.priority, 'Another rule with same priority already exists');
+        this.throwExceptionOnError();
+    }
+    async validateUnique(column, value, message) {
+        const record = await remote_file_rule_entity_1.RemoteFileRuleEntity.findOne({ where: { business_id: this.business.id, [column]: value, deleted_at: (0, typeorm_1.IsNull)() } });
+        if (record && record.id !== this.payload.id)
+            this.setColumnError(column, message);
+    }
+}
+exports.ProcessRemoteFileRuleData = ProcessRemoteFileRuleData;
+//# sourceMappingURL=process.remote.file.rule.data.js.map

package/dist/accessUtility/libraries/process.remote.file.rule.data.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"process.remote.file.rule.data.js","sourceRoot":"","sources":["../../../src/accessUtility/libraries/process.remote.file.rule.data.ts"],"names":[],"mappings":";;;AAAA,oFAA6F;AAC7F,qCAAwC;AAExC,uDAAwD;AAExD,iFAA2E;AAC3E,+DAA0D;AAG1D,MAAM,cAAc,GAAG,EAAE,CAAC;AAS1B,MAAa,yBAA0B,SAAQ,uCAAiB;IAG5D,YAA6B,QAA8B;QACvD,KAAK,EAAE,CAAC;QADiB,aAAQ,GAAR,QAAQ,CAAsB;IAE3D,CAAC;IAOD,KAAK,CAAC,OAAO,CAAC,OAA6B;QACvC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QAEvB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QACjC,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QAEtB,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC;IAEO,KAAK,CAAC,IAAI;QACd,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,OAAO,8CAAoB,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC;QAE1H,MAAM,MAAM,GAAG,MAAM,8CAAoB,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,UAAU,EAAE,IAAA,gBAAM,GAAE,EAAE,EAAE,CAAC,CAAC;QAC3I,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,yCAAe,EAAE,CAAC;QAEzC,OAAO,MAAM,CAAC;IAClB,CAAC;IAEO,KAAK,CAAC,GAAG,CAAC,MAA4B;QAC1C,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;QAChC,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,IAAI,IAAI,CAAC;QACtD,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;QACxC,MAAM,CAAC,gBAAgB,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC;QACxD,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS;YAAE,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;QAE3E,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QAEpB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC5C,MAAM,CAAC,SAAS,GAAG,MAAM,CAAC,EAAE,CAAC;QAE7B,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;IACzB,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,IAA0B;QAC9C,MAAM,MAAM,GAAG,MAAM,4CAAkB,CAAC,UAAU,CAAC,EAAE,WAAW,EAAE,UAAU,CAAC,cAAc,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QACnH,MAAM,CAAC,OAAO,GAAG,cAAc,CAAC;QAChC,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACxB,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;QAEpC,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;IACzB,CAAC;IAEO,KAAK,CAAC,QAAQ;QAClB,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,IAAA,eAAK,EAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,gBAAgB,CAAC,CAAC;QAC9E,MAAM,IAAI,CAAC,cAAc,CAAC,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,gDAAgD,CAAC,CAAC;QAE/G,IAAI,CAAC,qBAAqB,EAAE,CAAC;IACjC,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,MAA2B,EAAE,KAAU,EAAE,OAAe;QACjF,MAAM,MAAM,GAAG,MAAM,8CAAoB,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,IAAA,gBAAM,GAAE,EAAE,EAAE,CAAC,CAAC;QACvI,IAAI,MAAM,IAAI,MAAM,CAAC,EAAE,KAAK,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtF,CAAC;CACJ;AAjED,8DAiEC"}

package/dist/accessUtility/libraries/process.remote.file.rule.list.d.ts

@@ -0,0 +1,17 @@
+import { ListResponseDto } from '../../access/dtos/list.response.dto';
+import { AccessBusinessEntity } from '../../access/entities/access.business.entity';
+import { ProcessCommonList } from '../../access/libraries/process.common.list';
+import { ListingService } from '../../access/services/listing.service';
+import { RemoteFileRuleListFilterDto } from '../dtos/remote.file.rule.list.filter.dto';
+export declare class ProcessRemoteFileRuleList extends ProcessCommonList {
+    protected readonly business: AccessBusinessEntity;
+    protected readonly listingService: ListingService;
+    protected filter: RemoteFileRuleListFilterDto;
+    protected config: {
+        sql: string;
+        order: string;
+        columns: string[];
+    };
+    constructor(business: AccessBusinessEntity, listingService: ListingService);
+    process(filter: RemoteFileRuleListFilterDto): Promise<ListResponseDto>;
+}

package/dist/accessUtility/libraries/process.remote.file.rule.list.js

@@ -0,0 +1,29 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ProcessRemoteFileRuleList = void 0;
+const process_common_list_1 = require("../../access/libraries/process.common.list");
+class ProcessRemoteFileRuleList extends process_common_list_1.ProcessCommonList {
+    constructor(business, listingService) {
+        super();
+        this.business = business;
+        this.listingService = listingService;
+        this.config = {
+            sql: `bz_remote_file_rules a where a.deleted_at is null`,
+            order: 'sq.priority asc, sq.id asc',
+            columns: ['a.*'],
+        };
+    }
+    async process(filter) {
+        this.filter = filter;
+        await this.initialize();
+        this.restrictions.push(`a.business_id = ${Number(this.business.id)}`);
+        this.filterActive();
+        if (this.filter.search) {
+            const str = this.quote(`%${this.filter.search}%`);
+            this.restrictions.push(`(a.name ilike ${str} or a.description ilike ${str})`);
+        }
+        return this.handle();
+    }
+}
+exports.ProcessRemoteFileRuleList = ProcessRemoteFileRuleList;
+//# sourceMappingURL=process.remote.file.rule.list.js.map

package/dist/accessUtility/libraries/process.remote.file.rule.list.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"process.remote.file.rule.list.js","sourceRoot":"","sources":["../../../src/accessUtility/libraries/process.remote.file.rule.list.ts"],"names":[],"mappings":";;;AAEA,oFAA+E;AAW/E,MAAa,yBAA0B,SAAQ,uCAAiB;IAQ5D,YACuB,QAA8B,EAC9B,cAA8B;QAEjD,KAAK,EAAE,CAAC;QAHW,aAAQ,GAAR,QAAQ,CAAsB;QAC9B,mBAAc,GAAd,cAAc,CAAgB;QAR3C,WAAM,GAAG;YACf,GAAG,EAAE,mDAAmD;YACxD,KAAK,EAAE,4BAA4B;YACnC,OAAO,EAAE,CAAC,KAAK,CAAC;SACnB,CAAC;IAOF,CAAC;IAMD,KAAK,CAAC,OAAO,CAAC,MAAmC;QAC7C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QAExB,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,mBAAmB,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACtE,IAAI,CAAC,YAAY,EAAE,CAAC;QACpB,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACrB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;YAClD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,iBAAiB,GAAG,2BAA2B,GAAG,GAAG,CAAC,CAAC;QAClF,CAAC;QAED,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;IACzB,CAAC;CACJ;AAhCD,8DAgCC"}

package/dist/accessUtility/libraries/remote.file.path.setup.d.ts

@@ -0,0 +1,16 @@
+import { PropertyService } from '@servicelabsco/nestjs-utility-services';
+import { RemoteFilePathSetupDto } from '../dtos/remote.file.path.setup.dto';
+import { AwsIdentityService } from '../services/aws.identity.service';
+export declare const AWS_PRINCIPAL_PROPERTY = "remote.file.aws.principal";
+export declare class RemoteFilePathSetup {
+    private readonly propertyService;
+    private readonly awsIdentityService;
+    constructor(propertyService: PropertyService, awsIdentityService: AwsIdentityService);
+    all(): Promise<RemoteFilePathSetupDto[]>;
+    s3(location?: {
+        bucket?: string;
+        path?: string;
+    }): Promise<RemoteFilePathSetupDto>;
+    private principal;
+    private bucketPolicy;
+}

package/dist/accessUtility/libraries/remote.file.path.setup.js

@@ -0,0 +1,83 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RemoteFilePathSetup = exports.AWS_PRINCIPAL_PROPERTY = void 0;
+const remote_file_provider_enum_1 = require("../enums/remote.file.provider.enum");
+const check_remote_file_path_access_1 = require("./check.remote.file.path.access");
+exports.AWS_PRINCIPAL_PROPERTY = 'remote.file.aws.principal';
+class RemoteFilePathSetup {
+    constructor(propertyService, awsIdentityService) {
+        this.propertyService = propertyService;
+        this.awsIdentityService = awsIdentityService;
+    }
+    async all() {
+        const s3 = await this.s3();
+        return [s3];
+    }
+    async s3(location = {}) {
+        const principal = await this.principal();
+        const bucket = (location.bucket || '').trim() || '<bucket>';
+        const path = check_remote_file_path_access_1.CheckRemoteFilePathAccess.normalizePath(location.path || '');
+        return {
+            provider: remote_file_provider_enum_1.RemoteFileProviderEnum.S3,
+            label: 'Amazon S3 bucket',
+            platform_identity: { type: 'aws_principal', label: 'Grant read access to', value: principal || null },
+            fields: [
+                {
+                    name: 'bucket',
+                    label: 'Bucket name',
+                    required: true,
+                    help: 'The bucket name only, without s3:// or a URL.',
+                    example: 'acme-invoices',
+                },
+                {
+                    name: 'path',
+                    label: 'Folder (prefix)',
+                    required: true,
+                    help: 'The folder inside the bucket to watch. Sub-folders are included.',
+                    example: 'incoming/invoices/',
+                },
+            ],
+            steps: [
+                `In the AWS console open S3 → ${bucket} → Permissions → Bucket policy.`,
+                `Add the statements below, which let ${principal || "the platform's AWS principal (ask the platform team for it)"} list the bucket and read files under ${path || 'the whole bucket'}. Keep any statements already there.`,
+                'If the bucket is encrypted with a KMS key (SSE-KMS), also allow the same principal kms:Decrypt on that key.',
+                'Enter the bucket name and folder, then run Verify.',
+            ],
+            policy: this.bucketPolicy(principal || '<platform AWS principal ARN>', bucket, path),
+            notes: [
+                "Listing is granted on the whole bucket because the platform lists the bucket and filters by folder; only the folder's files can be read.",
+                "The bucket must be in the same AWS region as the platform's storage; Verify reports a region mismatch.",
+            ],
+        };
+    }
+    async principal() {
+        const configured = await this.propertyService.get(exports.AWS_PRINCIPAL_PROPERTY, null);
+        if (configured)
+            return configured;
+        const identity = await this.awsIdentityService.get();
+        return identity?.principal || null;
+    }
+    bucketPolicy(principal, bucket, path) {
+        return {
+            Version: '2012-10-17',
+            Statement: [
+                {
+                    Sid: 'RemoteFileList',
+                    Effect: 'Allow',
+                    Principal: { AWS: principal },
+                    Action: 's3:ListBucket',
+                    Resource: `arn:aws:s3:::${bucket}`,
+                },
+                {
+                    Sid: 'RemoteFileRead',
+                    Effect: 'Allow',
+                    Principal: { AWS: principal },
+                    Action: 's3:GetObject',
+                    Resource: `arn:aws:s3:::${bucket}/${path}*`,
+                },
+            ],
+        };
+    }
+}
+exports.RemoteFilePathSetup = RemoteFilePathSetup;
+//# sourceMappingURL=remote.file.path.setup.js.map

package/dist/accessUtility/libraries/remote.file.path.setup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote.file.path.setup.js","sourceRoot":"","sources":["../../../src/accessUtility/libraries/remote.file.path.setup.ts"],"names":[],"mappings":";;;AAEA,kFAA4E;AAE5E,mFAA4E;AAG/D,QAAA,sBAAsB,GAAG,2BAA2B,CAAC;AAYlE,MAAa,mBAAmB;IAC5B,YACqB,eAAgC,EAChC,kBAAsC;QADtC,oBAAe,GAAf,eAAe,CAAiB;QAChC,uBAAkB,GAAlB,kBAAkB,CAAoB;IACxD,CAAC;IAKJ,KAAK,CAAC,GAAG;QACL,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,EAAE,EAAE,CAAC;QAE3B,OAAO,CAAC,EAAE,CAAC,CAAC;IAChB,CAAC;IAMD,KAAK,CAAC,EAAE,CAAC,WAA+C,EAAE;QACtD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACzC,MAAM,MAAM,GAAG,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,UAAU,CAAC;QAC5D,MAAM,IAAI,GAAG,yDAAyB,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAE1E,OAAO;YACH,QAAQ,EAAE,kDAAsB,CAAC,EAAE;YACnC,KAAK,EAAE,kBAAkB;YACzB,iBAAiB,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,sBAAsB,EAAE,KAAK,EAAE,SAAS,IAAI,IAAI,EAAE;YACrG,MAAM,EAAE;gBACJ;oBACI,IAAI,EAAE,QAAQ;oBACd,KAAK,EAAE,aAAa;oBACpB,QAAQ,EAAE,IAAI;oBACd,IAAI,EAAE,+CAA+C;oBACrD,OAAO,EAAE,eAAe;iBAC3B;gBACD;oBACI,IAAI,EAAE,MAAM;oBACZ,KAAK,EAAE,iBAAiB;oBACxB,QAAQ,EAAE,IAAI;oBACd,IAAI,EAAE,kEAAkE;oBACxE,OAAO,EAAE,oBAAoB;iBAChC;aACJ;YACD,KAAK,EAAE;gBACH,gCAAgC,MAAM,iCAAiC;gBACvE,uCAAuC,SAAS,IAAI,6DAA6D,yCAAyC,IAAI,IAAI,kBAAkB,sCAAsC;gBAC1N,6GAA6G;gBAC7G,oDAAoD;aACvD;YACD,MAAM,EAAE,IAAI,CAAC,YAAY,CAAC,SAAS,IAAI,8BAA8B,EAAE,MAAM,EAAE,IAAI,CAAC;YACpF,KAAK,EAAE;gBACH,0IAA0I;gBAC1I,wGAAwG;aAC3G;SACJ,CAAC;IACN,CAAC;IAGO,KAAK,CAAC,SAAS;QACnB,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,8BAAsB,EAAE,IAAI,CAAC,CAAC;QAChF,IAAI,UAAU;YAAE,OAAO,UAAU,CAAC;QAElC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC;QAErD,OAAO,QAAQ,EAAE,SAAS,IAAI,IAAI,CAAC;IACvC,CAAC;IAEO,YAAY,CAAC,SAAiB,EAAE,MAAc,EAAE,IAAY;QAChE,OAAO;YACH,OAAO,EAAE,YAAY;YACrB,SAAS,EAAE;gBACP;oBACI,GAAG,EAAE,gBAAgB;oBACrB,MAAM,EAAE,OAAO;oBACf,SAAS,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE;oBAC7B,MAAM,EAAE,eAAe;oBACvB,QAAQ,EAAE,gBAAgB,MAAM,EAAE;iBACrC;gBACD;oBACI,GAAG,EAAE,gBAAgB;oBACrB,MAAM,EAAE,OAAO;oBACf,SAAS,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE;oBAC7B,MAAM,EAAE,cAAc;oBACtB,QAAQ,EAAE,gBAAgB,MAAM,IAAI,IAAI,GAAG;iBAC9C;aACJ;SACJ,CAAC;IACN,CAAC;CACJ;AAzFD,kDAyFC"}

package/dist/accessUtility/libraries/remote.file.sources.d.ts

@@ -0,0 +1,36 @@
+import { StorageService } from '@servicelabsco/nestjs-utility-services';
+import { GoogleDriveService } from '../services/google.drive.service';
+export interface RemoteFileLocation {
+    bucket: string;
+    path: string;
+    recursive?: boolean;
+    max_keys?: number;
+}
+export interface RemoteFileObject {
+    key: string;
+    name: string;
+    url: string | null;
+    etag: string | null;
+    size: number | null;
+    content_type: string | null;
+    modified_at: Date | null;
+    attributes?: Record<string, any>;
+}
+export interface RemoteFileListPage {
+    objects: RemoteFileObject[];
+    nextToken?: string;
+}
+export interface RemoteFileSourceInterface {
+    list(location: RemoteFileLocation, token?: string): Promise<RemoteFileListPage>;
+    check(location: RemoteFileLocation): Promise<{
+        sample_count?: number;
+        sample_key?: string;
+        name?: string;
+    }>;
+}
+export declare class RemoteFileSources {
+    private readonly storageService;
+    private readonly googleDriveService?;
+    constructor(storageService: StorageService, googleDriveService?: GoogleDriveService);
+    for(provider: string): RemoteFileSourceInterface;
+}

package/dist/accessUtility/libraries/remote.file.sources.js

@@ -0,0 +1,22 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RemoteFileSources = void 0;
+const nestjs_utility_services_1 = require("@servicelabsco/nestjs-utility-services");
+const remote_file_provider_enum_1 = require("../enums/remote.file.provider.enum");
+const google_drive_remote_file_source_1 = require("./google.drive.remote.file.source");
+const storage_remote_file_source_1 = require("./storage.remote.file.source");
+class RemoteFileSources {
+    constructor(storageService, googleDriveService) {
+        this.storageService = storageService;
+        this.googleDriveService = googleDriveService;
+    }
+    for(provider) {
+        if (provider === remote_file_provider_enum_1.RemoteFileProviderEnum.S3 || provider === remote_file_provider_enum_1.RemoteFileProviderEnum.R2)
+            return new storage_remote_file_source_1.StorageRemoteFileSource(this.storageService, provider);
+        if (provider === remote_file_provider_enum_1.RemoteFileProviderEnum.GOOGLE_DRIVE && this.googleDriveService)
+            return new google_drive_remote_file_source_1.GoogleDriveRemoteFileSource(this.googleDriveService);
+        throw new nestjs_utility_services_1.OperationException(`Unsupported remote file provider: ${provider}`);
+    }
+}
+exports.RemoteFileSources = RemoteFileSources;
+//# sourceMappingURL=remote.file.sources.js.map

package/dist/accessUtility/libraries/remote.file.sources.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote.file.sources.js","sourceRoot":"","sources":["../../../src/accessUtility/libraries/remote.file.sources.ts"],"names":[],"mappings":";;;AAAA,oFAA4F;AAC5F,kFAA4E;AAE5E,uFAAgF;AAChF,6EAAuE;AA8CvE,MAAa,iBAAiB;IAC1B,YACqB,cAA8B,EAC9B,kBAAuC;QADvC,mBAAc,GAAd,cAAc,CAAgB;QAC9B,uBAAkB,GAAlB,kBAAkB,CAAqB;IACzD,CAAC;IAOJ,GAAG,CAAC,QAAgB;QAChB,IAAI,QAAQ,KAAK,kDAAsB,CAAC,EAAE,IAAI,QAAQ,KAAK,kDAAsB,CAAC,EAAE;YAChF,OAAO,IAAI,oDAAuB,CAAC,IAAI,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;QACtE,IAAI,QAAQ,KAAK,kDAAsB,CAAC,YAAY,IAAI,IAAI,CAAC,kBAAkB;YAC3E,OAAO,IAAI,6DAA2B,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAEpE,MAAM,IAAI,4CAAkB,CAAC,qCAAqC,QAAQ,EAAE,CAAC,CAAC;IAClF,CAAC;CACJ;AAnBD,8CAmBC"}

package/dist/accessUtility/libraries/storage.remote.file.source.d.ts

@@ -0,0 +1,13 @@
+import { StorageService } from '@servicelabsco/nestjs-utility-services';
+import { RemoteFileListPage, RemoteFileLocation, RemoteFileSourceInterface } from './remote.file.sources';
+export declare class StorageRemoteFileSource implements RemoteFileSourceInterface {
+    private readonly storageService;
+    private readonly engine;
+    constructor(storageService: StorageService, engine: string);
+    list(location: RemoteFileLocation, token?: string): Promise<RemoteFileListPage>;
+    check(location: RemoteFileLocation): Promise<{
+        sample_count: number;
+        sample_key: string;
+    }>;
+    private toObject;
+}

package/dist/accessUtility/libraries/storage.remote.file.source.js

@@ -0,0 +1,42 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.StorageRemoteFileSource = void 0;
+const DEFAULT_MAX_KEYS = 200;
+class StorageRemoteFileSource {
+    constructor(storageService, engine) {
+        this.storageService = storageService;
+        this.engine = engine;
+    }
+    async list(location, token) {
+        const listed = await this.storageService.list({
+            engine: this.engine,
+            bucket: location.bucket,
+            prefix: location.path,
+            delimiter: location.recursive === false ? '/' : undefined,
+            maxKeys: location.max_keys || DEFAULT_MAX_KEYS,
+            continuationToken: token,
+        });
+        const objects = (listed.objects || [])
+            .filter((object) => object?.key && !object.key.endsWith('/'))
+            .map((object) => this.toObject(location, object));
+        return { objects, nextToken: listed.nextToken };
+    }
+    async check(location) {
+        const listed = await this.storageService.list({ engine: this.engine, bucket: location.bucket, prefix: location.path, maxKeys: 1 });
+        const sample = (listed.objects || []).find((object) => object?.key && !object.key.endsWith('/'));
+        return { sample_count: listed.objects?.length || 0, sample_key: sample?.key };
+    }
+    toObject(location, object) {
+        return {
+            key: object.key,
+            name: object.key.split('/').pop() || object.key,
+            url: object.url || this.storageService.publicUrl({ engine: this.engine, bucket: location.bucket, key: object.key }),
+            etag: object.etag || null,
+            size: object.size != null ? Number(object.size) : null,
+            content_type: object.contentType || null,
+            modified_at: object.lastModified || null,
+        };
+    }
+}
+exports.StorageRemoteFileSource = StorageRemoteFileSource;
+//# sourceMappingURL=storage.remote.file.source.js.map

package/dist/accessUtility/libraries/storage.remote.file.source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.remote.file.source.js","sourceRoot":"","sources":["../../../src/accessUtility/libraries/storage.remote.file.source.ts"],"names":[],"mappings":";;;AAGA,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAQ7B,MAAa,uBAAuB;IAChC,YACqB,cAA8B,EAC9B,MAAc;QADd,mBAAc,GAAd,cAAc,CAAgB;QAC9B,WAAM,GAAN,MAAM,CAAQ;IAChC,CAAC;IAEJ,KAAK,CAAC,IAAI,CAAC,QAA4B,EAAE,KAAc;QACnD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC;YAC1C,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,MAAM,EAAE,QAAQ,CAAC,IAAI;YACrB,SAAS,EAAE,QAAQ,CAAC,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS;YACzD,OAAO,EAAE,QAAQ,CAAC,QAAQ,IAAI,gBAAgB;YAC9C,iBAAiB,EAAE,KAAK;SAC3B,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;aACjC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;aAC5D,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;QAEtD,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;IACpD,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,QAA4B;QACpC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;QACnI,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;QAEjG,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IAClF,CAAC;IAEO,QAAQ,CAAC,QAA4B,EAAE,MAAW;QACtD,OAAO;YACH,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,MAAM,CAAC,GAAG;YAC/C,GAAG,EAAE,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC;YACnH,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,IAAI;YACzB,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;YACtD,YAAY,EAAE,MAAM,CAAC,WAAW,IAAI,IAAI;YACxC,WAAW,EAAE,MAAM,CAAC,YAAY,IAAI,IAAI;SAC3C,CAAC;IACN,CAAC;CACJ;AAzCD,0DAyCC"}

package/dist/accessUtility/libraries/verify.remote.file.path.d.ts

@@ -0,0 +1,21 @@
+import { StorageService } from '@servicelabsco/nestjs-utility-services';
+import { RemoteFilePathVerifyDto } from '../dtos/remote.file.path.verify.dto';
+import { CheckRemoteFilePathInput } from './check.remote.file.path.access';
+import { RemoteFilePathSetup } from './remote.file.path.setup';
+import { RemoteFileSources } from './remote.file.sources';
+export declare class VerifyRemoteFilePath {
+    private readonly sources;
+    private readonly setup;
+    private readonly storageService;
+    private checks;
+    constructor(sources: RemoteFileSources, setup: RemoteFilePathSetup, storageService: StorageService);
+    process(input: CheckRemoteFilePathInput): Promise<RemoteFilePathVerifyDto>;
+    private reach;
+    private succeed;
+    private fail;
+    private validateLocation;
+    private diagnose;
+    private pass;
+    private code;
+    private message;
+}

package/dist/accessUtility/libraries/verify.remote.file.path.js

@@ -0,0 +1,154 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.VerifyRemoteFilePath = void 0;
+const remote_file_provider_enum_1 = require("../enums/remote.file.provider.enum");
+const check_remote_file_path_access_1 = require("./check.remote.file.path.access");
+class VerifyRemoteFilePath {
+    constructor(sources, setup, storageService) {
+        this.sources = sources;
+        this.setup = setup;
+        this.storageService = storageService;
+        this.checks = [];
+    }
+    async process(input) {
+        this.checks = [];
+        const location = check_remote_file_path_access_1.CheckRemoteFilePathAccess.normalize(input);
+        const base = { ...location, found: {}, code: null, error: null };
+        const invalid = this.validateLocation(location);
+        if (invalid)
+            return this.fail(base, invalid);
+        this.pass('location', 'The location is well formed.');
+        let found;
+        try {
+            found = await this.reach(location);
+        }
+        catch (error) {
+            const diagnosis = await this.diagnose(location, error);
+            return this.fail({ ...base, code: this.code(error), error: this.message(error) }, diagnosis);
+        }
+        return this.succeed({ ...base, found });
+    }
+    async reach(location) {
+        const found = await this.sources.for(location.provider).check(location);
+        this.pass('list', 'The platform can list the bucket.');
+        if (!found.sample_key)
+            return found;
+        await this.storageService.head({ engine: location.provider, bucket: location.bucket, key: found.sample_key });
+        this.pass('read', 'The platform can read files under the path.');
+        return found;
+    }
+    succeed(result) {
+        if (result.found.sample_count)
+            return { ...result, ok: true, status: 'ok', checks: this.checks, suggestions: [] };
+        return {
+            ...result,
+            ok: true,
+            status: 'empty',
+            checks: this.checks,
+            suggestions: [
+                'No files found yet. Check the folder name; files added later are picked up on the next poll.',
+                'On the current storage version only the first 1000 files of the bucket are listed, so a folder whose files sort after them looks empty.',
+            ],
+        };
+    }
+    fail(result, diagnosis) {
+        this.checks.push({ name: diagnosis.check, ok: false, message: diagnosis.message });
+        return { ...result, ok: false, status: diagnosis.status, checks: this.checks, suggestions: diagnosis.suggestions };
+    }
+    validateLocation(location) {
+        if (!remote_file_provider_enum_1.SUPPORTED_REMOTE_FILE_PROVIDERS.includes(location.provider)) {
+            return {
+                status: 'invalid_location',
+                check: 'location',
+                message: `Provider ${location.provider} is not supported.`,
+                suggestions: ['Use an S3 bucket.'],
+            };
+        }
+        if (!location.bucket || /[\s/:]/.test(location.bucket)) {
+            return {
+                status: 'invalid_location',
+                check: 'location',
+                message: 'The bucket name is missing or not a bucket name.',
+                suggestions: ['Enter the bucket name only, without s3://, a URL or the folder.'],
+            };
+        }
+        return null;
+    }
+    async diagnose(location, error) {
+        const setup = await this.setup.s3(location);
+        const principal = setup.platform_identity.value || "the platform's AWS principal";
+        const code = (this.code(error) || '').toLowerCase();
+        const message = this.message(error);
+        const reading = this.checks.some((check) => check.name === 'list');
+        if (/unknown storage engine|invalidaccesskeyid|signaturedoesnotmatch|not working/i.test(`${code} ${message}`)) {
+            return {
+                status: 'not_configured',
+                check: 'configured',
+                message: "The platform's S3 access is not set up.",
+                suggestions: ['Ask the platform team to check the storage configuration.'],
+            };
+        }
+        if (code === 'nosuchbucket' || code === '404' || code === 'notfound') {
+            if (reading) {
+                return {
+                    status: 'read_denied',
+                    check: 'read',
+                    message: 'A listed file could not be read.',
+                    suggestions: ['Run Verify again; if it repeats, check the file was not deleted while verifying.'],
+                };
+            }
+            return {
+                status: 'not_found',
+                check: 'list',
+                message: `The bucket ${location.bucket} does not exist.`,
+                suggestions: ['Check the bucket name for typos.'],
+            };
+        }
+        if (['permanentredirect', '301', 'authorizationheadermalformed', 'illegallocationconstraintexception'].includes(code)) {
+            return {
+                status: 'wrong_region',
+                check: 'list',
+                message: "The bucket is in a different region than the platform's storage.",
+                suggestions: ["Use a bucket in the same region as the platform's storage, or ask the platform team."],
+            };
+        }
+        if (code === 'accessdenied' || code === '403' || code === 'forbidden' || /access denied/i.test(message)) {
+            if (reading) {
+                return {
+                    status: 'read_denied',
+                    check: 'read',
+                    message: 'The platform can list the bucket but not read its files.',
+                    suggestions: [
+                        `Allow s3:GetObject on arn:aws:s3:::${location.bucket}/${location.path}* for ${principal} (see the setup policy).`,
+                        'If the bucket uses a KMS key, allow the same principal kms:Decrypt on it.',
+                    ],
+                };
+            }
+            return {
+                status: 'access_denied',
+                check: 'list',
+                message: 'The platform is not allowed to list the bucket.',
+                suggestions: setup.steps.slice(0, 2),
+            };
+        }
+        return {
+            status: 'unknown_error',
+            check: reading ? 'read' : 'list',
+            message: message || 'S3 refused the request.',
+            suggestions: ['Check the bucket and folder, then try again; share the error with the platform team if it repeats.'],
+        };
+    }
+    pass(name, message) {
+        this.checks.push({ name, ok: true, message });
+    }
+    code(error) {
+        const name = error?.name && !/^(Error|.*Exception)$/.test(error.name) ? error.name : null;
+        const code = error?.Code || error?.code || name || error?.$metadata?.httpStatusCode || error?.response?.status;
+        return code != null ? String(code) : null;
+    }
+    message(error) {
+        return error?.message || error?.Message || String(error);
+    }
+}
+exports.VerifyRemoteFilePath = VerifyRemoteFilePath;
+//# sourceMappingURL=verify.remote.file.path.js.map

package/dist/accessUtility/libraries/verify.remote.file.path.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.remote.file.path.js","sourceRoot":"","sources":["../../../src/accessUtility/libraries/verify.remote.file.path.ts"],"names":[],"mappings":";;;AAEA,kFAAqF;AACrF,mFAAsG;AAqBtG,MAAa,oBAAoB;IAG7B,YACqB,OAA0B,EAC1B,KAA0B,EAC1B,cAA8B;QAF9B,YAAO,GAAP,OAAO,CAAmB;QAC1B,UAAK,GAAL,KAAK,CAAqB;QAC1B,mBAAc,GAAd,cAAc,CAAgB;QAL3C,WAAM,GAAmC,EAAE,CAAC;IAMjD,CAAC;IAMJ,KAAK,CAAC,OAAO,CAAC,KAA+B;QACzC,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC;QACjB,MAAM,QAAQ,GAAG,yDAAyB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC5D,MAAM,IAAI,GAAG,EAAE,GAAG,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QAEjE,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAChD,IAAI,OAAO;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC7C,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,8BAA8B,CAAC,CAAC;QAEtD,IAAI,KAAqD,CAAC;QAC1D,IAAI,CAAC;YACD,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YAClB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YACvD,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;QACjG,CAAC;QAED,OAAO,IAAI,CAAC,OAAO,CAAC,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5C,CAAC;IAGO,KAAK,CAAC,KAAK,CAAC,QAA4D;QAC5E,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACxE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,mCAAmC,CAAC,CAAC;QACvD,IAAI,CAAC,KAAK,CAAC,UAAU;YAAE,OAAO,KAAK,CAAC;QAEpC,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;QAC9G,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,6CAA6C,CAAC,CAAC;QAEjE,OAAO,KAAK,CAAC;IACjB,CAAC;IAEO,OAAO,CAAC,MAAW;QACvB,IAAI,MAAM,CAAC,KAAK,CAAC,YAAY;YAAE,OAAO,EAAE,GAAG,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;QAElH,OAAO;YACH,GAAG,MAAM;YACT,EAAE,EAAE,IAAI;YACR,MAAM,EAAE,OAAO;YACf,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,WAAW,EAAE;gBACT,8FAA8F;gBAC9F,yIAAyI;aAC5I;SACJ,CAAC;IACN,CAAC;IAEO,IAAI,CAAC,MAAW,EAAE,SAAoB;QAC1C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC;QAEnF,OAAO,EAAE,GAAG,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,WAAW,EAAE,SAAS,CAAC,WAAW,EAAE,CAAC;IACvH,CAAC;IAEO,gBAAgB,CAAC,QAA4D;QACjF,IAAI,CAAC,2DAA+B,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC/D,OAAO;gBACH,MAAM,EAAE,kBAAkB;gBAC1B,KAAK,EAAE,UAAU;gBACjB,OAAO,EAAE,YAAY,QAAQ,CAAC,QAAQ,oBAAoB;gBAC1D,WAAW,EAAE,CAAC,mBAAmB,CAAC;aACrC,CAAC;QACN,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACrD,OAAO;gBACH,MAAM,EAAE,kBAAkB;gBAC1B,KAAK,EAAE,UAAU;gBACjB,OAAO,EAAE,kDAAkD;gBAC3D,WAAW,EAAE,CAAC,iEAAiE,CAAC;aACnF,CAAC;QACN,CAAC;QAED,OAAO,IAAI,CAAC;IAChB,CAAC;IAEO,KAAK,CAAC,QAAQ,CAAC,QAA4D,EAAE,KAAU;QAC3F,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC;QAC5C,MAAM,SAAS,GAAG,KAAK,CAAC,iBAAiB,CAAC,KAAK,IAAI,8BAA8B,CAAC;QAClF,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QACpD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACpC,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;QAEnE,IAAI,8EAA8E,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,OAAO,EAAE,CAAC,EAAE,CAAC;YAC5G,OAAO;gBACH,MAAM,EAAE,gBAAgB;gBACxB,KAAK,EAAE,YAAY;gBACnB,OAAO,EAAE,yCAAyC;gBAClD,WAAW,EAAE,CAAC,2DAA2D,CAAC;aAC7E,CAAC;QACN,CAAC;QACD,IAAI,IAAI,KAAK,cAAc,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;YACnE,IAAI,OAAO,EAAE,CAAC;gBACV,OAAO;oBACH,MAAM,EAAE,aAAa;oBACrB,KAAK,EAAE,MAAM;oBACb,OAAO,EAAE,kCAAkC;oBAC3C,WAAW,EAAE,CAAC,kFAAkF,CAAC;iBACpG,CAAC;YACN,CAAC;YACD,OAAO;gBACH,MAAM,EAAE,WAAW;gBACnB,KAAK,EAAE,MAAM;gBACb,OAAO,EAAE,cAAc,QAAQ,CAAC,MAAM,kBAAkB;gBACxD,WAAW,EAAE,CAAC,kCAAkC,CAAC;aACpD,CAAC;QACN,CAAC;QACD,IAAI,CAAC,mBAAmB,EAAE,KAAK,EAAE,8BAA8B,EAAE,oCAAoC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACpH,OAAO;gBACH,MAAM,EAAE,cAAc;gBACtB,KAAK,EAAE,MAAM;gBACb,OAAO,EAAE,kEAAkE;gBAC3E,WAAW,EAAE,CAAC,sFAAsF,CAAC;aACxG,CAAC;QACN,CAAC;QACD,IAAI,IAAI,KAAK,cAAc,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,WAAW,IAAI,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACtG,IAAI,OAAO,EAAE,CAAC;gBACV,OAAO;oBACH,MAAM,EAAE,aAAa;oBACrB,KAAK,EAAE,MAAM;oBACb,OAAO,EAAE,0DAA0D;oBACnE,WAAW,EAAE;wBACT,sCAAsC,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,IAAI,SAAS,SAAS,0BAA0B;wBAClH,2EAA2E;qBAC9E;iBACJ,CAAC;YACN,CAAC;YACD,OAAO;gBACH,MAAM,EAAE,eAAe;gBACvB,KAAK,EAAE,MAAM;gBACb,OAAO,EAAE,iDAAiD;gBAC1D,WAAW,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;aACvC,CAAC;QACN,CAAC;QAED,OAAO;YACH,MAAM,EAAE,eAAe;YACvB,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;YAChC,OAAO,EAAE,OAAO,IAAI,yBAAyB;YAC7C,WAAW,EAAE,CAAC,oGAAoG,CAAC;SACtH,CAAC;IACN,CAAC;IAEO,IAAI,CAAC,IAAY,EAAE,OAAe;QACtC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IAClD,CAAC;IAEO,IAAI,CAAC,KAAU;QACnB,MAAM,IAAI,GAAG,KAAK,EAAE,IAAI,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;QAC1F,MAAM,IAAI,GAAG,KAAK,EAAE,IAAI,IAAI,KAAK,EAAE,IAAI,IAAI,IAAI,IAAI,KAAK,EAAE,SAAS,EAAE,cAAc,IAAI,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC;QAE/G,OAAO,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9C,CAAC;IAEO,OAAO,CAAC,KAAU;QACtB,OAAO,KAAK,EAAE,OAAO,IAAI,KAAK,EAAE,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7D,CAAC;CACJ;AAzKD,oDAyKC"}

package/dist/accessUtility/services/aws.identity.service.d.ts

@@ -0,0 +1,15 @@
+import { AwsClientFactory } from '@servicelabsco/nestjs-utility-services';
+export interface AwsIdentity {
+    arn: string;
+    account: string;
+    user_id: string;
+    principal: string;
+}
+export declare class AwsIdentityService {
+    private readonly awsClientFactory;
+    private identity;
+    private readonly logger;
+    constructor(awsClientFactory: AwsClientFactory);
+    get(): Promise<AwsIdentity | null>;
+    static principalOf(arn: string): string;
+}

package/dist/accessUtility/services/aws.identity.service.js

@@ -0,0 +1,56 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var AwsIdentityService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AwsIdentityService = void 0;
+const client_sts_1 = require("@aws-sdk/client-sts");
+const common_1 = require("@nestjs/common");
+const nestjs_utility_services_1 = require("@servicelabsco/nestjs-utility-services");
+let AwsIdentityService = AwsIdentityService_1 = class AwsIdentityService {
+    constructor(awsClientFactory) {
+        this.awsClientFactory = awsClientFactory;
+        this.identity = null;
+        this.logger = new common_1.Logger(AwsIdentityService_1.name);
+    }
+    async get() {
+        if (this.identity)
+            return this.identity;
+        try {
+            const client = await this.awsClientFactory.create(client_sts_1.STSClient);
+            const response = await client.send(new client_sts_1.GetCallerIdentityCommand({}));
+            if (!response.Arn)
+                return null;
+            this.identity = {
+                arn: response.Arn,
+                account: response.Account,
+                user_id: response.UserId,
+                principal: AwsIdentityService_1.principalOf(response.Arn),
+            };
+            return this.identity;
+        }
+        catch (error) {
+            this.logger.warn(`GetCallerIdentity failed: ${error?.message ?? error}`);
+            return null;
+        }
+    }
+    static principalOf(arn) {
+        const assumed = arn.match(/^arn:(aws[\w-]*):sts::(\d+):assumed-role\/([^/]+)\/.+$/);
+        if (assumed)
+            return `arn:${assumed[1]}:iam::${assumed[2]}:role/${assumed[3]}`;
+        return arn;
+    }
+};
+exports.AwsIdentityService = AwsIdentityService;
+exports.AwsIdentityService = AwsIdentityService = AwsIdentityService_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [nestjs_utility_services_1.AwsClientFactory])
+], AwsIdentityService);
+//# sourceMappingURL=aws.identity.service.js.map

package/dist/accessUtility/services/aws.identity.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aws.identity.service.js","sourceRoot":"","sources":["../../../src/accessUtility/services/aws.identity.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,oDAA0E;AAC1E,2CAAoD;AACpD,oFAA0E;AAkBnE,IAAM,kBAAkB,0BAAxB,MAAM,kBAAkB;IAI3B,YAA6B,gBAAkC;QAAlC,qBAAgB,GAAhB,gBAAgB,CAAkB;QAHvD,aAAQ,GAAuB,IAAI,CAAC;QAC3B,WAAM,GAAG,IAAI,eAAM,CAAC,oBAAkB,CAAC,IAAI,CAAC,CAAC;IAEI,CAAC;IAKnE,KAAK,CAAC,GAAG;QACL,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC,QAAQ,CAAC;QAExC,IAAI,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,sBAAS,CAAC,CAAC;YAC7D,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,qCAAwB,CAAC,EAAE,CAAC,CAAC,CAAC;YACrE,IAAI,CAAC,QAAQ,CAAC,GAAG;gBAAE,OAAO,IAAI,CAAC;YAE/B,IAAI,CAAC,QAAQ,GAAG;gBACZ,GAAG,EAAE,QAAQ,CAAC,GAAG;gBACjB,OAAO,EAAE,QAAQ,CAAC,OAAO;gBACzB,OAAO,EAAE,QAAQ,CAAC,MAAM;gBACxB,SAAS,EAAE,oBAAkB,CAAC,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC;aAC1D,CAAC;YACF,OAAO,IAAI,CAAC,QAAQ,CAAC;QACzB,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YAClB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,6BAA6B,KAAK,EAAE,OAAO,IAAI,KAAK,EAAE,CAAC,CAAC;YACzE,OAAO,IAAI,CAAC;QAChB,CAAC;IACL,CAAC;IAQD,MAAM,CAAC,WAAW,CAAC,GAAW;QAC1B,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,wDAAwD,CAAC,CAAC;QACpF,IAAI,OAAO;YAAE,OAAO,OAAO,OAAO,CAAC,CAAC,CAAC,SAAS,OAAO,CAAC,CAAC,CAAC,SAAS,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QAE9E,OAAO,GAAG,CAAC;IACf,CAAC;CACJ,CAAA;AA1CY,gDAAkB;6BAAlB,kBAAkB;IAD9B,IAAA,mBAAU,GAAE;qCAKsC,0CAAgB;GAJtD,kBAAkB,CA0C9B"}