@signstack/cli 0.1.1

package/dist/libs/signstack/base/src/lib/constants.d.ts

@@ -0,0 +1,123 @@
+export declare const CONST_BASE_TEST = "Const_Signstack";
+export declare const AUTH_HEADER = "Authorization";
+export declare const JWT_ISSUER = "https://api.signstack.ai";
+export declare const TRACE_ID_HEADER = "X-Cloud-Trace-Context";
+export declare const ETAG_HEADER = "ETag";
+export declare const IF_MATCH_HEADER = "If-Match";
+export declare const EXPOSE_HEADERS = "Access-Control-Expose-Headers";
+export declare const SEARCH_LIMIT = 15;
+export declare const DEFAULT_API_VERSION = "signstack/v1beta2";
+export declare const DEFAULT_SENDER_NAME = "Signstack";
+export declare const DEFAULT_SENDER_COMPANY = "Signstack Esignature Service";
+export declare const DEFAULT_SENDER_EMAIL = "secure@signstack.ai";
+export declare const DEFAULT_SUPPORT_EMAIL = "contact@signstack.ai";
+export declare const DEFAULT_SENDER_LOGO_URL = "https://storage.googleapis.com/signstack-prod/signstack-logo.png";
+export declare const DEFAULT_SIGNATURE_TEXT = "Signature";
+export declare const DEFAULT_INITIALS_TEXT = "IN";
+export declare const SCOPES: {
+    ORGANIZATION: {
+        READ: string;
+        UPDATE: string;
+    };
+    USER: {
+        READ: string;
+        CREATE: string;
+        UPDATE: string;
+    };
+    EMBED_TOKEN: {
+        CREATE: string;
+    };
+    BILLING: {
+        READ: string;
+        MANAGE: string;
+    };
+    WORKFLOW: {
+        READ: string;
+        CREATE: string;
+        UPDATE: string;
+        EXECUTE: string;
+        ACTION_URLS: string;
+        ALL: string;
+    };
+    RESOURCE: {
+        READ: string;
+        CREATE: string;
+        UPDATE: string;
+        DELETE: string;
+        ALL: string;
+    };
+    SCENARIO: {
+        READ: string;
+        CREATE: string;
+        UPDATE: string;
+        DELETE: string;
+        ALL: string;
+    };
+    SIGNING: {
+        SIGN: string;
+    };
+    API_KEY: {
+        READ: string;
+        CREATE: string;
+        DELETE: string;
+        ALL: string;
+    };
+    FILE: {
+        READ: string;
+        UPLOAD: string;
+    };
+    WEBHOOK: {
+        READ: string;
+        CREATE: string;
+        UPDATE: string;
+        DELETE: string;
+        ALL: string;
+    };
+    SHAREABLE_LINK: {
+        READ: string;
+        CREATE: string;
+        UPDATE: string;
+        DELETE: string;
+        ALL: string;
+    };
+    NAMESPACE: {
+        READ: string;
+        CREATE: string;
+        UPDATE: string;
+        ALL: string;
+    };
+    AI_CHAT: {
+        USE: string;
+    };
+    LIBRARY: {
+        PUBLISH: string;
+    };
+};
+export declare const WEBHOOK_PAYLOAD_SAMPLE: {
+    eventType: string;
+    eventId: string;
+    timestamp: string;
+    organizationId: string;
+    data: {
+        workflowId: string;
+        stepKey: string;
+        participantEmail: string;
+        participantId: string;
+        envelopeKey: string;
+        participantName: string;
+        signingUrl: string;
+        envelopeSummary: {
+            workflowId: string;
+            envelopeId: string;
+            envelopeKey: string;
+            subject: string;
+            status: string;
+            customFields: {
+                dealId: number;
+                propertyAddress: string;
+            };
+        };
+    };
+};
+export declare const DEFAULT_ENVELOPE_KEY = "default";
+export declare const DEFAULT_ENVELOPE_EMAIL_SLUG = "default";

package/dist/libs/signstack/base/src/lib/constants.js

@@ -0,0 +1,131 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_ENVELOPE_EMAIL_SLUG = exports.DEFAULT_ENVELOPE_KEY = exports.WEBHOOK_PAYLOAD_SAMPLE = exports.SCOPES = exports.DEFAULT_INITIALS_TEXT = exports.DEFAULT_SIGNATURE_TEXT = exports.DEFAULT_SENDER_LOGO_URL = exports.DEFAULT_SUPPORT_EMAIL = exports.DEFAULT_SENDER_EMAIL = exports.DEFAULT_SENDER_COMPANY = exports.DEFAULT_SENDER_NAME = exports.DEFAULT_API_VERSION = exports.SEARCH_LIMIT = exports.EXPOSE_HEADERS = exports.IF_MATCH_HEADER = exports.ETAG_HEADER = exports.TRACE_ID_HEADER = exports.JWT_ISSUER = exports.AUTH_HEADER = exports.CONST_BASE_TEST = void 0;
+exports.CONST_BASE_TEST = 'Const_Signstack';
+exports.AUTH_HEADER = 'Authorization';
+exports.JWT_ISSUER = 'https://api.signstack.ai';
+exports.TRACE_ID_HEADER = 'X-Cloud-Trace-Context';
+exports.ETAG_HEADER = 'ETag';
+exports.IF_MATCH_HEADER = 'If-Match';
+exports.EXPOSE_HEADERS = 'Access-Control-Expose-Headers';
+exports.SEARCH_LIMIT = 15;
+exports.DEFAULT_API_VERSION = 'signstack/v1beta2';
+exports.DEFAULT_SENDER_NAME = 'Signstack';
+exports.DEFAULT_SENDER_COMPANY = 'Signstack Esignature Service';
+exports.DEFAULT_SENDER_EMAIL = 'secure@signstack.ai';
+exports.DEFAULT_SUPPORT_EMAIL = 'contact@signstack.ai';
+exports.DEFAULT_SENDER_LOGO_URL = 'https://storage.googleapis.com/signstack-prod/signstack-logo.png';
+exports.DEFAULT_SIGNATURE_TEXT = 'Signature';
+exports.DEFAULT_INITIALS_TEXT = 'IN';
+exports.SCOPES = {
+    ORGANIZATION: {
+        READ: 'organization:read',
+        UPDATE: 'organization:update',
+    },
+    USER: {
+        READ: 'user:read',
+        CREATE: 'user:create',
+        UPDATE: 'user:update',
+    },
+    EMBED_TOKEN: {
+        CREATE: 'embed-token:create',
+    },
+    BILLING: {
+        READ: 'billing:read',
+        MANAGE: 'billing:manage',
+    },
+    WORKFLOW: {
+        READ: 'workflow:read',
+        CREATE: 'workflow:create',
+        UPDATE: 'workflow:update',
+        EXECUTE: 'workflow:execute',
+        // Retrieving participant action URLs grants the ability to complete the
+        // action (e.g. sign) on a participant's behalf — the token in the URL is
+        // the sole credential — so it is a dedicated privileged scope; never
+        // bundle it into read-only access.
+        ACTION_URLS: 'workflow:action-urls',
+        ALL: 'workflow:*',
+    },
+    RESOURCE: {
+        READ: 'resource:read',
+        CREATE: 'resource:create',
+        UPDATE: 'resource:update',
+        DELETE: 'resource:delete',
+        ALL: 'resource:*',
+    },
+    SCENARIO: {
+        READ: 'scenario:read',
+        CREATE: 'scenario:create',
+        UPDATE: 'scenario:update',
+        DELETE: 'scenario:delete',
+        ALL: 'scenario:*',
+    },
+    SIGNING: {
+        SIGN: 'signing:sign',
+    },
+    API_KEY: {
+        READ: 'api-key:read',
+        CREATE: 'api-key:create',
+        DELETE: 'api-key:delete',
+        ALL: 'api-key:*',
+    },
+    FILE: {
+        READ: 'file:read',
+        UPLOAD: 'file:upload',
+    },
+    WEBHOOK: {
+        READ: 'webhook:read',
+        CREATE: 'webhook:create',
+        UPDATE: 'webhook:update',
+        DELETE: 'webhook:delete',
+        ALL: 'webhook:*',
+    },
+    SHAREABLE_LINK: {
+        READ: 'shareable-link:read',
+        CREATE: 'shareable-link:create',
+        UPDATE: 'shareable-link:update',
+        DELETE: 'shareable-link:delete',
+        ALL: 'shareable-link:*',
+    },
+    NAMESPACE: {
+        READ: 'namespace:read',
+        CREATE: 'namespace:create',
+        UPDATE: 'namespace:update',
+        ALL: 'namespace:*',
+    },
+    AI_CHAT: {
+        USE: 'ai-chat:use',
+    },
+    LIBRARY: {
+        PUBLISH: 'library:publish',
+    },
+};
+exports.WEBHOOK_PAYLOAD_SAMPLE = {
+    eventType: 'participant.task_assigned',
+    eventId: 'evt_xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx',
+    timestamp: '2024-11-20T18:23:36.680Z',
+    organizationId: 'org_xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx',
+    data: {
+        workflowId: 'wf_xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx',
+        stepKey: 'step_participant_1',
+        participantEmail: 'john.smith@example.com',
+        participantId: 'participant_key_1',
+        envelopeKey: 'envelope_1',
+        participantName: 'John Smith',
+        signingUrl: 'https://signstack.ai/sign?workflowId=wf_xxx&signerId=token_xxx',
+        envelopeSummary: {
+            workflowId: 'wf_xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx',
+            envelopeId: 'env_xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx',
+            envelopeKey: 'envelope_1',
+            subject: 'Please sign this document',
+            status: 'in_progress',
+            customFields: {
+                dealId: 12345,
+                propertyAddress: '123 Main St, San Francisco, CA 94103',
+            },
+        },
+    },
+};
+exports.DEFAULT_ENVELOPE_KEY = 'default';
+exports.DEFAULT_ENVELOPE_EMAIL_SLUG = 'default';
+//# sourceMappingURL=constants.js.map

package/dist/libs/signstack/base/src/lib/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../../../../../../libs/signstack/base/src/lib/constants.ts"],"names":[],"mappings":";;;AAAa,QAAA,eAAe,GAAG,iBAAiB,CAAC;AACpC,QAAA,WAAW,GAAG,eAAe,CAAC;AAC9B,QAAA,UAAU,GAAG,0BAA0B,CAAC;AAExC,QAAA,eAAe,GAAG,uBAAuB,CAAC;AAC1C,QAAA,WAAW,GAAG,MAAM,CAAC;AACrB,QAAA,eAAe,GAAG,UAAU,CAAC;AAC7B,QAAA,cAAc,GAAG,+BAA+B,CAAC;AAEjD,QAAA,YAAY,GAAG,EAAE,CAAC;AAElB,QAAA,mBAAmB,GAAG,mBAAmB,CAAC;AAE1C,QAAA,mBAAmB,GAAG,WAAW,CAAC;AAClC,QAAA,sBAAsB,GAAG,8BAA8B,CAAC;AACxD,QAAA,oBAAoB,GAAG,qBAAqB,CAAC;AAC7C,QAAA,qBAAqB,GAAG,sBAAsB,CAAC;AAC/C,QAAA,uBAAuB,GAClC,kEAAkE,CAAC;AACxD,QAAA,sBAAsB,GAAG,WAAW,CAAC;AACrC,QAAA,qBAAqB,GAAG,IAAI,CAAC;AAE7B,QAAA,MAAM,GAAG;IACpB,YAAY,EAAE;QACZ,IAAI,EAAE,mBAAmB;QACzB,MAAM,EAAE,qBAAqB;KAC9B;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,WAAW;QACjB,MAAM,EAAE,aAAa;QACrB,MAAM,EAAE,aAAa;KACtB;IACD,WAAW,EAAE;QACX,MAAM,EAAE,oBAAoB;KAC7B;IACD,OAAO,EAAE;QACP,IAAI,EAAE,cAAc;QACpB,MAAM,EAAE,gBAAgB;KACzB;IACD,QAAQ,EAAE;QACR,IAAI,EAAE,eAAe;QACrB,MAAM,EAAE,iBAAiB;QACzB,MAAM,EAAE,iBAAiB;QACzB,OAAO,EAAE,kBAAkB;QAC3B,wEAAwE;QACxE,yEAAyE;QACzE,qEAAqE;QACrE,mCAAmC;QACnC,WAAW,EAAE,sBAAsB;QACnC,GAAG,EAAE,YAAY;KAClB;IACD,QAAQ,EAAE;QACR,IAAI,EAAE,eAAe;QACrB,MAAM,EAAE,iBAAiB;QACzB,MAAM,EAAE,iBAAiB;QACzB,MAAM,EAAE,iBAAiB;QACzB,GAAG,EAAE,YAAY;KAClB;IACD,QAAQ,EAAE;QACR,IAAI,EAAE,eAAe;QACrB,MAAM,EAAE,iBAAiB;QACzB,MAAM,EAAE,iBAAiB;QACzB,MAAM,EAAE,iBAAiB;QACzB,GAAG,EAAE,YAAY;KAClB;IACD,OAAO,EAAE;QACP,IAAI,EAAE,cAAc;KACrB;IACD,OAAO,EAAE;QACP,IAAI,EAAE,cAAc;QACpB,MAAM,EAAE,gBAAgB;QACxB,MAAM,EAAE,gBAAgB;QACxB,GAAG,EAAE,WAAW;KACjB;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,WAAW;QACjB,MAAM,EAAE,aAAa;KACtB;IACD,OAAO,EAAE;QACP,IAAI,EAAE,cAAc;QACpB,MAAM,EAAE,gBAAgB;QACxB,MAAM,EAAE,gBAAgB;QACxB,MAAM,EAAE,gBAAgB;QACxB,GAAG,EAAE,WAAW;KACjB;IACD,cAAc,EAAE;QACd,IAAI,EAAE,qBAAqB;QAC3B,MAAM,EAAE,uBAAuB;QAC/B,MAAM,EAAE,uBAAuB;QAC/B,MAAM,EAAE,uBAAuB;QAC/B,GAAG,EAAE,kBAAkB;KACxB;IACD,SAAS,EAAE;QACT,IAAI,EAAE,gBAAgB;QACtB,MAAM,EAAE,kBAAkB;QAC1B,MAAM,EAAE,kBAAkB;QAC1B,GAAG,EAAE,aAAa;KACnB;IACD,OAAO,EAAE;QACP,GAAG,EAAE,aAAa;KACnB;IACD,OAAO,EAAE;QACP,OAAO,EAAE,iBAAiB;KAC3B;CACF,CAAC;AAEW,QAAA,sBAAsB,GAAG;IACpC,SAAS,EAAE,2BAA2B;IACtC,OAAO,EAAE,0CAA0C;IACnD,SAAS,EAAE,0BAA0B;IACrC,cAAc,EAAE,0CAA0C;IAC1D,IAAI,EAAE;QACJ,UAAU,EAAE,yCAAyC;QACrD,OAAO,EAAE,oBAAoB;QAC7B,gBAAgB,EAAE,wBAAwB;QAC1C,aAAa,EAAE,mBAAmB;QAClC,WAAW,EAAE,YAAY;QACzB,eAAe,EAAE,YAAY;QAC7B,UAAU,EACR,gEAAgE;QAClE,eAAe,EAAE;YACf,UAAU,EAAE,yCAAyC;YACrD,UAAU,EAAE,0CAA0C;YACtD,WAAW,EAAE,YAAY;YACzB,OAAO,EAAE,2BAA2B;YACpC,MAAM,EAAE,aAAa;YACrB,YAAY,EAAE;gBACZ,MAAM,EAAE,KAAK;gBACb,eAAe,EAAE,sCAAsC;aACxD;SACF;KACF;CACF,CAAC;AAEW,QAAA,oBAAoB,GAAG,SAAS,CAAC;AACjC,QAAA,2BAA2B,GAAG,SAAS,CAAC"}

package/dist/libs/signstack/base/src/lib/hash.util.d.ts

@@ -0,0 +1,58 @@
+import { AssetType } from './models/base';
+/**
+ * An asset-like structure used for consistent content hashing.
+ */
+export interface AssetLikeForHashing {
+    type: AssetType;
+    content?: string;
+    fileId?: string;
+    labels?: Record<string, unknown>;
+}
+/**
+ * Shared hash utility for computing content hashes.
+ * Works in both Node.js (backend) and browser (frontend) environments.
+ *
+ * Uses fast-json-stable-stringify for deterministic JSON serialization
+ * and a provided hash function for the actual hashing.
+ */
+export declare class HashUtil {
+    /**
+     * Computes SHA-256 hash of the given object.
+     * Uses fast-json-stable-stringify for deterministic key ordering.
+     *
+     * @param data - The data to hash
+     * @param hashFn - Environment-specific hash function that takes a string and returns hex hash
+     */
+    static computeHash(data: Record<string, unknown>, hashFn: (input: string) => string): string;
+    /**
+     * Async version for environments using Web Crypto API
+     */
+    static computeHashAsync(data: Record<string, unknown>, hashFn: (input: string) => Promise<string>): Promise<string>;
+    /**
+     * Prepares asset hash input structure.
+     * Ensures consistent structure between frontend and backend.
+     */
+    static getAssetHashInput(asset: AssetLikeForHashing): Record<string, unknown>;
+    /**
+     * Computes asset hash using provided hash function.
+     */
+    static computeAssetHash(asset: AssetLikeForHashing, hashFn: (input: string) => string): string;
+    /**
+     * Async version for computing asset hash (for Web Crypto API)
+     */
+    static computeAssetHashAsync(asset: AssetLikeForHashing, hashFn: (input: string) => Promise<string>): Promise<string>;
+    /**
+     * Computes hash for HTML/text assets (simplified version for common use case)
+     */
+    static computeContentHash(type: AssetType, content: string, hashFn: (input: string) => Promise<string>): Promise<string>;
+    /**
+     * Checks if content has changed by comparing hashes.
+     * Returns true if content has changed or if there's no original hash (new asset).
+     */
+    static hasContentChanged(type: AssetType, currentContent: string, originalHash: string | undefined, hashFn: (input: string) => Promise<string>): Promise<boolean>;
+}
+/**
+ * SHA-256 hash function for browser environment.
+ * Use this in frontend code.
+ */
+export declare function browserSha256(input: string): Promise<string>;

package/dist/libs/signstack/base/src/lib/hash.util.js

@@ -0,0 +1,90 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HashUtil = void 0;
+exports.browserSha256 = browserSha256;
+const tslib_1 = require("tslib");
+const fast_json_stable_stringify_1 = tslib_1.__importDefault(require("fast-json-stable-stringify"));
+/**
+ * Shared hash utility for computing content hashes.
+ * Works in both Node.js (backend) and browser (frontend) environments.
+ *
+ * Uses fast-json-stable-stringify for deterministic JSON serialization
+ * and a provided hash function for the actual hashing.
+ */
+class HashUtil {
+    /**
+     * Computes SHA-256 hash of the given object.
+     * Uses fast-json-stable-stringify for deterministic key ordering.
+     *
+     * @param data - The data to hash
+     * @param hashFn - Environment-specific hash function that takes a string and returns hex hash
+     */
+    static computeHash(data, hashFn) {
+        const json = (0, fast_json_stable_stringify_1.default)(data);
+        return hashFn(json);
+    }
+    /**
+     * Async version for environments using Web Crypto API
+     */
+    static async computeHashAsync(data, hashFn) {
+        const json = (0, fast_json_stable_stringify_1.default)(data);
+        return hashFn(json);
+    }
+    /**
+     * Prepares asset hash input structure.
+     * Ensures consistent structure between frontend and backend.
+     */
+    static getAssetHashInput(asset) {
+        return {
+            type: asset.type,
+            content: asset.content,
+            fileId: asset.fileId,
+            labels: asset.labels,
+        };
+    }
+    /**
+     * Computes asset hash using provided hash function.
+     */
+    static computeAssetHash(asset, hashFn) {
+        const hashInput = this.getAssetHashInput(asset);
+        return this.computeHash(hashInput, hashFn);
+    }
+    /**
+     * Async version for computing asset hash (for Web Crypto API)
+     */
+    static async computeAssetHashAsync(asset, hashFn) {
+        const hashInput = this.getAssetHashInput(asset);
+        return this.computeHashAsync(hashInput, hashFn);
+    }
+    /**
+     * Computes hash for HTML/text assets (simplified version for common use case)
+     */
+    static async computeContentHash(type, content, hashFn) {
+        return this.computeAssetHashAsync({ type, content }, hashFn);
+    }
+    /**
+     * Checks if content has changed by comparing hashes.
+     * Returns true if content has changed or if there's no original hash (new asset).
+     */
+    static async hasContentChanged(type, currentContent, originalHash, hashFn) {
+        if (!originalHash) {
+            // No original hash means it's a new asset
+            return true;
+        }
+        const currentHash = await this.computeContentHash(type, currentContent, hashFn);
+        return currentHash !== originalHash;
+    }
+}
+exports.HashUtil = HashUtil;
+/**
+ * SHA-256 hash function for browser environment.
+ * Use this in frontend code.
+ */
+async function browserSha256(input) {
+    const encoder = new TextEncoder();
+    const data = encoder.encode(input);
+    const hashBuffer = await crypto.subtle.digest('SHA-256', data);
+    const hashArray = Array.from(new Uint8Array(hashBuffer));
+    return hashArray.map((b) => b.toString(16).padStart(2, '0')).join('');
+}
+//# sourceMappingURL=hash.util.js.map

package/dist/libs/signstack/base/src/lib/hash.util.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hash.util.js","sourceRoot":"","sources":["../../../../../../../../libs/signstack/base/src/lib/hash.util.ts"],"names":[],"mappings":";;;AAwHA,sCAMC;;AA9HD,oGAAmD;AAanD;;;;;;GAMG;AACH,MAAa,QAAQ;IACnB;;;;;;OAMG;IACH,MAAM,CAAC,WAAW,CAChB,IAA6B,EAC7B,MAAiC;QAEjC,MAAM,IAAI,GAAG,IAAA,oCAAS,EAAC,IAAI,CAAC,CAAC;QAC7B,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAC3B,IAA6B,EAC7B,MAA0C;QAE1C,MAAM,IAAI,GAAG,IAAA,oCAAS,EAAC,IAAI,CAAC,CAAC;QAC7B,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,iBAAiB,CAAC,KAA0B;QACjD,OAAO;YACL,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,MAAM,EAAE,KAAK,CAAC,MAAM;SACrB,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,gBAAgB,CACrB,KAA0B,EAC1B,MAAiC;QAEjC,MAAM,SAAS,GAAG,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAChD,OAAO,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAC7C,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,qBAAqB,CAChC,KAA0B,EAC1B,MAA0C;QAE1C,MAAM,SAAS,GAAG,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAChD,OAAO,IAAI,CAAC,gBAAgB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAClD,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAC7B,IAAe,EACf,OAAe,EACf,MAA0C;QAE1C,OAAO,IAAI,CAAC,qBAAqB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,MAAM,CAAC,CAAC;IAC/D,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAC5B,IAAe,EACf,cAAsB,EACtB,YAAgC,EAChC,MAA0C;QAE1C,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,0CAA0C;YAC1C,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAC/C,IAAI,EACJ,cAAc,EACd,MAAM,CACP,CAAC;QACF,OAAO,WAAW,KAAK,YAAY,CAAC;IACtC,CAAC;CACF;AA9FD,4BA8FC;AAED;;;GAGG;AACI,KAAK,UAAU,aAAa,CAAC,KAAa;IAC/C,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACnC,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC/D,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC;IACzD,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACxE,CAAC"}

package/dist/libs/signstack/base/src/lib/is-schema-renderable.util.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Renderability predicate for the PUBLIC shareable-link form. Kept in lock-step
+ * with the frontend `isFlatSchema`
+ * (`libs/signstack/frontend/src/lib/formly/is-flat-schema.util.ts`) so the editor
+ * form and the public form agree on what can render — they must not diverge
+ * (a schema the editor renders but this rejects = a "form shows but create 400s"
+ * mismatch).
+ *
+ * Supported: nested objects (e.g. a `company` input with a nested `address`),
+ * **arrays** of scalars/enums/objects (rendered as an `ss-repeat`), enums, and a
+ * top-level **scalar** input (e.g. `type: string, format: email`). Read-only
+ * locking is by prefilled value, not dot-paths, so arrays no longer pose the v1
+ * lock-path problem they once did.
+ *
+ * Rejected: `$ref`, `oneOf`/`anyOf`/`allOf`, tuple-form arrays (no single
+ * `items`), and untyped / free-form (propertyless, typeless) objects.
+ */
+/**
+ * Returns true when a top-level input schema can be rendered on the public
+ * shareable-link form:
+ *  - an OBJECT whose properties are scalars, enums, nested objects, or arrays
+ *    (recursive) of the same; or
+ *  - a top-level SCALAR (`string` / `number` / `integer` / `boolean`, enums
+ *    included) — rendered as a single field.
+ *
+ * Anything else (`$ref`, `oneOf`/`anyOf`/`allOf`, tuple-form arrays, and
+ * untyped/typeless free-form schemas) is rejected at link-create time.
+ */
+export declare const isSchemaRenderable: (schema: unknown) => boolean;

package/dist/libs/signstack/base/src/lib/is-schema-renderable.util.js

@@ -0,0 +1,93 @@
+"use strict";
+/**
+ * Renderability predicate for the PUBLIC shareable-link form. Kept in lock-step
+ * with the frontend `isFlatSchema`
+ * (`libs/signstack/frontend/src/lib/formly/is-flat-schema.util.ts`) so the editor
+ * form and the public form agree on what can render — they must not diverge
+ * (a schema the editor renders but this rejects = a "form shows but create 400s"
+ * mismatch).
+ *
+ * Supported: nested objects (e.g. a `company` input with a nested `address`),
+ * **arrays** of scalars/enums/objects (rendered as an `ss-repeat`), enums, and a
+ * top-level **scalar** input (e.g. `type: string, format: email`). Read-only
+ * locking is by prefilled value, not dot-paths, so arrays no longer pose the v1
+ * lock-path problem they once did.
+ *
+ * Rejected: `$ref`, `oneOf`/`anyOf`/`allOf`, tuple-form arrays (no single
+ * `items`), and untyped / free-form (propertyless, typeless) objects.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isSchemaRenderable = void 0;
+const pickType = (s) => {
+    if (Array.isArray(s.type))
+        return s.type.find((t) => t !== 'null') ?? 'string';
+    if (s.type)
+        return s.type;
+    // JSON Schema allows `type` to be omitted when `properties` is present —
+    // treat that as an object so its nested fields are validated, not waved
+    // through as an implicit scalar.
+    if (s.properties)
+        return 'object';
+    return 'string';
+};
+const isPropertyRenderable = (prop) => {
+    if (!prop || typeof prop !== 'object')
+        return false;
+    if (prop.$ref)
+        return false;
+    if (prop.oneOf || prop.anyOf || prop.allOf)
+        return false;
+    const t = pickType(prop);
+    if (t === 'array') {
+        // Renderable when items are scalars/enums or objects of renderable props
+        // (rendered as an `ss-repeat`). Tuple-form (`items` is an ARRAY of schemas)
+        // and missing items are rejected — an array `items` would otherwise be
+        // mistaken for a typeless object and wrongly accepted.
+        return (!!prop.items &&
+            !Array.isArray(prop.items) &&
+            isPropertyRenderable(prop.items));
+    }
+    if (t === 'object') {
+        const props = prop.properties;
+        if (!props || Object.keys(props).length === 0)
+            return false;
+        return Object.values(props).every(isPropertyRenderable);
+    }
+    return ['string', 'number', 'integer', 'boolean'].includes(t);
+};
+/** The explicit (non-null) JSON-Schema `type`, or undefined when omitted. */
+const explicitType = (s) => Array.isArray(s.type) ? s.type.find((t) => t !== 'null') : s.type;
+/**
+ * Returns true when a top-level input schema can be rendered on the public
+ * shareable-link form:
+ *  - an OBJECT whose properties are scalars, enums, nested objects, or arrays
+ *    (recursive) of the same; or
+ *  - a top-level SCALAR (`string` / `number` / `integer` / `boolean`, enums
+ *    included) — rendered as a single field.
+ *
+ * Anything else (`$ref`, `oneOf`/`anyOf`/`allOf`, tuple-form arrays, and
+ * untyped/typeless free-form schemas) is rejected at link-create time.
+ */
+const isSchemaRenderable = (schema) => {
+    if (!schema || typeof schema !== 'object')
+        return false;
+    const s = schema;
+    if (s.$ref)
+        return false;
+    if (s.oneOf || s.anyOf || s.allOf)
+        return false;
+    // Object input: must carry renderable properties.
+    if (s.properties) {
+        const props = s.properties;
+        if (Object.keys(props).length === 0)
+            return false;
+        return Object.values(props).every(isPropertyRenderable);
+    }
+    // No properties → only an EXPLICIT scalar type is renderable (a single field).
+    // A typeless / free-form schema (`{}`, or `type: object` with no properties)
+    // stays rejected.
+    const t = explicitType(s);
+    return !!t && ['string', 'number', 'integer', 'boolean'].includes(t);
+};
+exports.isSchemaRenderable = isSchemaRenderable;
+//# sourceMappingURL=is-schema-renderable.util.js.map

package/dist/libs/signstack/base/src/lib/is-schema-renderable.util.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"is-schema-renderable.util.js","sourceRoot":"","sources":["../../../../../../../../libs/signstack/base/src/lib/is-schema-renderable.util.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;GAgBG;;;AAYH,MAAM,QAAQ,GAAG,CAAC,CAAiB,EAAU,EAAE;IAC7C,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;QAAE,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC;IAC/E,IAAI,CAAC,CAAC,IAAI;QAAE,OAAO,CAAC,CAAC,IAAI,CAAC;IAC1B,yEAAyE;IACzE,wEAAwE;IACxE,iCAAiC;IACjC,IAAI,CAAC,CAAC,UAAU;QAAE,OAAO,QAAQ,CAAC;IAClC,OAAO,QAAQ,CAAC;AAClB,CAAC,CAAC;AAEF,MAAM,oBAAoB,GAAG,CAC3B,IAAuC,EAC9B,EAAE;IACX,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACpD,IAAI,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IAC5B,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IAEzD,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IACzB,IAAI,CAAC,KAAK,OAAO,EAAE,CAAC;QAClB,yEAAyE;QACzE,4EAA4E;QAC5E,uEAAuE;QACvE,uDAAuD;QACvD,OAAO,CACL,CAAC,CAAC,IAAI,CAAC,KAAK;YACZ,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;YAC1B,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,CACjC,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,KAAK,QAAQ,EAAE,CAAC;QACnB,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC;QAC9B,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAC5D,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AAChE,CAAC,CAAC;AAEF,6EAA6E;AAC7E,MAAM,YAAY,GAAG,CAAC,CAAiB,EAAsB,EAAE,CAC7D,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAEpE;;;;;;;;;;GAUG;AACI,MAAM,kBAAkB,GAAG,CAAC,MAAe,EAAW,EAAE;IAC7D,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACxD,MAAM,CAAC,GAAG,MAAwB,CAAC;IACnC,IAAI,CAAC,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACzB,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IAEhD,kDAAkD;IAClD,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC;QACjB,MAAM,KAAK,GAAG,CAAC,CAAC,UAAU,CAAC;QAC3B,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAClD,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;IAC1D,CAAC;IAED,+EAA+E;IAC/E,6EAA6E;IAC7E,kBAAkB;IAClB,MAAM,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;IAC1B,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AACvE,CAAC,CAAC;AAlBW,QAAA,kBAAkB,sBAkB7B"}

package/dist/libs/signstack/base/src/lib/models/ai-chat.d.ts

@@ -0,0 +1,41 @@
+export interface AiChatReq {
+    resourceKind: string;
+    resourceKey: string;
+    resourceVersion: string;
+    currentYaml: string;
+    message: string;
+    mode?: 'edit' | 'explain';
+    /** YAMLs of resources currently in the editor store (may not be persisted yet). */
+    inlineYamls?: string[];
+    /** Serialized scenario data (JSON) currently in the scenario store. */
+    scenarioJsons?: string[];
+}
+export interface AiChatStreamEvent {
+    type: 'status' | 'text' | 'done' | 'error';
+    content?: string;
+    error?: string;
+}
+export interface AiResourceChange {
+    resourceKind: string;
+    resourceKey: string;
+    resourceVersion: string;
+    updatedYaml: string;
+    isCurrent: boolean;
+}
+export interface AiScenarioChange {
+    scenarioKey: string;
+    name: string;
+    description: string;
+    entities: {
+        key: string;
+        data: Record<string, any>;
+    }[];
+}
+export interface AiChatHistoryEntry {
+    role: 'user' | 'assistant';
+    text: string;
+    createdAt: string;
+}
+export interface AiChatHistoryResp {
+    entries: AiChatHistoryEntry[];
+}

package/dist/libs/signstack/base/src/lib/models/ai-chat.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=ai-chat.js.map

package/dist/libs/signstack/base/src/lib/models/ai-chat.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai-chat.js","sourceRoot":"","sources":["../../../../../../../../../libs/signstack/base/src/lib/models/ai-chat.ts"],"names":[],"mappings":""}

package/dist/libs/signstack/base/src/lib/models/api-key.d.ts

@@ -0,0 +1,54 @@
+import { ListResp } from './base';
+/**
+ * Discriminates which URL class an API key can authorize against.
+ * `'org'` keys may not call any URL carrying a `:namespaceKey` segment —
+ * enforced by `ScopesGuard`.
+ */
+export type ScopeLevel = 'namespace' | 'org';
+export interface CreateApiKeyReq {
+    name: string;
+    expiration: ApiKeyExpiration;
+    scopes: string[];
+}
+export interface ApiKeySummary {
+    keyId: string;
+    name: string;
+    status: ApiKeyStatus;
+    createdAt: string;
+    expiresAt?: string;
+    scopeLevel: ScopeLevel;
+}
+/**
+ * Returned by `POST /api-keys`. Carries the full key summary plus the raw
+ * `apiKey` secret. The secret is shown ONCE at create time and can never be
+ * retrieved again — store it immediately. To replace a lost secret, revoke
+ * the key and create a new one.
+ */
+export interface CreateApiKeyResp extends ApiKeySummary {
+    apiKey: string;
+}
+export interface ListApiKeysReq {
+    offset?: number;
+    limit?: number;
+    search?: string;
+    status?: ApiKeyStatus;
+}
+export type GetApiKeysResp = ListResp<ApiKeySummary>;
+export declare enum ApiKeyStatus {
+    Active = "Active",
+    Expired = "Expired",
+    Revoked = "Revoked"
+}
+export interface RevokeApiKeyReq {
+    keyId: string;
+}
+export interface RevokeApiKeyResp {
+    keyId: string;
+}
+export declare enum ApiKeyExpiration {
+    SevenDays = "7d",
+    ThirtyDays = "30d",
+    NinetyDays = "90d",
+    OneYear = "1y",
+    Never = "never"
+}

package/dist/libs/signstack/base/src/lib/models/api-key.js

@@ -0,0 +1,18 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ApiKeyExpiration = exports.ApiKeyStatus = void 0;
+var ApiKeyStatus;
+(function (ApiKeyStatus) {
+    ApiKeyStatus["Active"] = "Active";
+    ApiKeyStatus["Expired"] = "Expired";
+    ApiKeyStatus["Revoked"] = "Revoked";
+})(ApiKeyStatus || (exports.ApiKeyStatus = ApiKeyStatus = {}));
+var ApiKeyExpiration;
+(function (ApiKeyExpiration) {
+    ApiKeyExpiration["SevenDays"] = "7d";
+    ApiKeyExpiration["ThirtyDays"] = "30d";
+    ApiKeyExpiration["NinetyDays"] = "90d";
+    ApiKeyExpiration["OneYear"] = "1y";
+    ApiKeyExpiration["Never"] = "never";
+})(ApiKeyExpiration || (exports.ApiKeyExpiration = ApiKeyExpiration = {}));
+//# sourceMappingURL=api-key.js.map

package/dist/libs/signstack/base/src/lib/models/api-key.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-key.js","sourceRoot":"","sources":["../../../../../../../../../libs/signstack/base/src/lib/models/api-key.ts"],"names":[],"mappings":";;;AA2CA,IAAY,YAIX;AAJD,WAAY,YAAY;IACtB,iCAAiB,CAAA;IACjB,mCAAmB,CAAA;IACnB,mCAAmB,CAAA;AACrB,CAAC,EAJW,YAAY,4BAAZ,YAAY,QAIvB;AASD,IAAY,gBAMX;AAND,WAAY,gBAAgB;IAC1B,oCAAgB,CAAA;IAChB,sCAAkB,CAAA;IAClB,sCAAkB,CAAA;IAClB,kCAAc,CAAA;IACd,mCAAe,CAAA;AACjB,CAAC,EANW,gBAAgB,gCAAhB,gBAAgB,QAM3B"}