@softacus-software/elwis-mcp-core 0.1.0

package/README.md

@@ -0,0 +1,120 @@
+# @softacus-software/elwis-mcp-core
+
+Shared ELWIS domain logic — entity resolution, application scoping, and the access contract —
+consumed by the ELWIS backend assistant and by the ELWIS MCP servers, so all three run the
+same code instead of three divergent copies.
+
+This package contains **no transport**. It never opens a socket, reads an environment
+variable, or knows what MCP is. Everything it does goes through a port that the consumer
+implements.
+
+## The seam
+
+Domain logic takes its data access as a parameter:
+
+```ts
+ResolveEntity(api, kind, applicationId, nameOrAlias)
+```
+
+`api` satisfies `ElwisReadPort`. The MCP servers implement it over HTTP; the backend
+implements it in-process against tenant services. Same logic, different adapter.
+
+```
+ElwisReadPort      whoAmI · systemAttributes · list · getOne · listRecords
+ElwisWritePort     create · update · softDelete · createArtifact · updateArtifact ·
+                   softDeleteArtifact · createLinks
+ElwisApiPort       both
+```
+
+Only the read port is exercised by the current conformance suite. Write coverage lands with
+the write slice.
+
+## Install and build
+
+```bash
+npm install
+npm run verify     # build + tests + dual-module consumption check
+```
+
+`npm run build` emits `dist/esm` and `dist/cjs`, each stamped with its own `type` field.
+
+**TypeScript is pinned to `~5.9.3` on purpose.** The ELWIS backend is on 5.9 and the Data MCP
+on 6.0; declarations are emitted by the lower compiler so both consumers can read them.
+
+**`main` and `types` are set alongside `exports` on purpose.** The backend compiles with
+`module: commonjs` and no `moduleResolution`, which defaults to node10 — and node10 ignores
+`exports` entirely. Removing the legacy fields silently breaks that consumer.
+
+## The conformance suite
+
+The point of this package is that two adapters behave identically. `RunReadPortConformance`
+is how you prove it — the same cases run against the HTTP adapter and the in-process adapter.
+
+```ts
+import { RunReadPortConformance } from '@softacus-software/elwis-mcp-core';
+
+const results = await RunReadPortConformance(myAdapter, {
+  applicationId, applicationName, kind: 'data-type', knownEntityName, knownEntityId,
+});
+const failed = results.filter(r => !r.passed);
+```
+
+It is framework-agnostic: no test runner is imported, cases return results rather than
+asserting, so consumers can drive it from jest, node:test, or a script.
+
+Every case carries a `why`. The load-bearing one is `excludes-soft-deleted`: the HTTP adapter
+gets soft-delete filtering for free because it injects `deleted: null` into every filter, while
+an adapter reading collections directly does not. Without that case, an in-process adapter
+would quietly surface deleted entities into resolution and into user-facing pickers.
+
+The suite is itself tested: `test/conformance.test.ts` runs it against a deliberately broken
+adapter and asserts that it fails.
+
+## Resolution behaviour
+
+`ResolveEntity` and `ResolveOneId` are ported verbatim from `elwis-data-mcp`, including the
+`$or`-to-name fallback for backends that reject `$or` with a 400. That fidelity is deliberate:
+the extraction has to be provably behaviour-neutral before anything consumes it.
+
+`ResolveOneStrict` is new and nothing calls it yet. It exists because the current assistant
+answers a missed lookup with a raw validator message:
+
+```
+That answer won't work — Invalid string: must match pattern /^[a-f\d]{24}$/i
+```
+
+`ResolveOneStrict` instead throws `NotFoundError` carrying the entities that *do* exist, so a
+caller can say "no data type called X here — did you mean one of these, or shall I create it?"
+`AmbiguityError` covers the multiple-match case.
+
+## HTTP host (`./host`)
+
+The `./host` subpath (`ServeMcpHttp`, `ElwisJwtVerifier`) is the one exception to "no
+transport" above: it is an actual `node:http` listener. `elwis-docs-mcp` and `elwis-data-mcp`
+use it to serve MCP over HTTP with a bearer token instead of stdio.
+
+It binds `127.0.0.1` unless the caller passes a different `host`; accepts only `POST /mcp` (a
+`GET` is answered `405 Allow: POST` — neither server sends server-initiated messages, so the
+standing `text/event-stream` a `GET` would otherwise open carries nothing and exists only to
+be held open); and caps both concurrent token verifications (`maxConcurrentVerifications`) and
+concurrent live sessions (`maxConcurrentSessions`), so a caller with no valid credential at all
+cannot force unbounded verification work, and a caller who does verify cannot hold an unbounded
+number of built servers open. Neither cap, nor the bind address, is read from an environment
+variable by this package itself — each server that embeds `ServeMcpHttp` wires its own env
+vars for these and documents them in its own README's operator section.
+
+This is a library entry point, not a runnable server on its own: nothing in this package
+listens by itself outside of a test.
+
+## Errors
+
+`ElwisApiError` carries `status`, so shared logic can branch on an HTTP status without
+importing a transport. `IsElwisApiError` also accepts the Data MCP's existing `ElwisHttpError`
+by shape, so the standalone server does not have to change its error class to adopt this
+package.
+
+## Status
+
+Phase 1 of the capability-layer plan: extracted, tested, buildable, with no consumer yet.
+Phase 2 switches `elwis-data-mcp` over and deletes its copies — until that lands, the logic
+exists twice, which is the one thing this package is meant to prevent.

package/dist/cjs/app-scope.js

@@ -0,0 +1,81 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AppScope = void 0;
+exports.FilterApplicationId = FilterApplicationId;
+const errors_js_1 = require("./errors.js");
+const resolve_js_1 = require("./resolve.js");
+function FilterApplicationId(filter) {
+    const value = filter.applicationId;
+    if (typeof value === 'string')
+        return value;
+    if (value && typeof value === 'object' && typeof value.$oid === 'string') {
+        return value.$oid;
+    }
+    return undefined;
+}
+class AppScope {
+    api;
+    entries;
+    expectedTenant;
+    ids = null;
+    tenantVerified = false;
+    constructor(api, entries, expectedTenant) {
+        this.api = api;
+        this.entries = entries;
+        this.expectedTenant = expectedTenant;
+    }
+    get restricted() {
+        return this.entries.length > 0;
+    }
+    identity() {
+        return this.api.whoAmI().catch(() => null);
+    }
+    describe() {
+        return { restricted: this.restricted, entries: [...this.entries] };
+    }
+    async assertTenant() {
+        if (!this.expectedTenant || this.tenantVerified)
+            return;
+        const identity = await this.identity();
+        if (identity?.tenantId !== this.expectedTenant) {
+            throw new errors_js_1.TenantMismatchError(this.expectedTenant, identity?.tenantId ?? null);
+        }
+        this.tenantVerified = true;
+    }
+    async allowedIds() {
+        if (!this.restricted)
+            return null;
+        if (this.ids)
+            return this.ids;
+        const ids = new Set();
+        for (const entry of this.entries) {
+            if ((0, resolve_js_1.IsObjectId)(entry)) {
+                ids.add(entry);
+                continue;
+            }
+            const rows = await this.api.list('application', { name: entry });
+            for (const row of rows)
+                ids.add(row.id);
+        }
+        this.ids = ids;
+        return ids;
+    }
+    async assertAllowed(applicationId) {
+        await this.assertTenant();
+        const ids = await this.allowedIds();
+        if (ids && !ids.has(applicationId))
+            throw new errors_js_1.AppScopeError(applicationId);
+    }
+    async assertListAllowed(kind, filter) {
+        await this.assertTenant();
+        if (!this.restricted || kind === 'application')
+            return;
+        const applicationId = FilterApplicationId(filter);
+        if (!applicationId) {
+            throw new errors_js_1.AppScopeError('unspecified, when an application allowlist is set, list calls require an applicationId filter');
+        }
+        await this.assertAllowed(applicationId);
+    }
+}
+exports.AppScope = AppScope;
+//# sourceMappingURL=app-scope.js.map

package/dist/cjs/app-scope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-scope.js","sourceRoot":"","sources":["../../src/app-scope.ts"],"names":[],"mappings":";;;AAUA,kDAOC;AAjBD,2CAAiE;AAEjE,6CAA0C;AAQ1C,SAAgB,mBAAmB,CAAC,MAA+B;IACjE,MAAM,KAAK,GAAG,MAAM,CAAC,aAAa,CAAC;IACnC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAQ,KAA4B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACjG,OAAQ,KAA0B,CAAC,IAAI,CAAC;IAC1C,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAa,QAAQ;IACF,GAAG,CAAgB;IACnB,OAAO,CAAW;IAClB,cAAc,CAAU;IACjC,GAAG,GAAuB,IAAI,CAAC;IAC/B,cAAc,GAAG,KAAK,CAAC;IAE/B,YAAY,GAAkB,EAAE,OAAiB,EAAE,cAAuB;QACxE,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;IACvC,CAAC;IAED,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;IACjC,CAAC;IAED,QAAQ;QACN,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IAC7C,CAAC;IAED,QAAQ;QACN,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;IACrE,CAAC;IAED,KAAK,CAAC,YAAY;QAChB,IAAI,CAAC,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,cAAc;YAAE,OAAO;QACxD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACvC,IAAI,QAAQ,EAAE,QAAQ,KAAK,IAAI,CAAC,cAAc,EAAE,CAAC;YAC/C,MAAM,IAAI,+BAAmB,CAAC,IAAI,CAAC,cAAc,EAAE,QAAQ,EAAE,QAAQ,IAAI,IAAI,CAAC,CAAC;QACjF,CAAC;QACD,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,UAAU;QACd,IAAI,CAAC,IAAI,CAAC,UAAU;YAAE,OAAO,IAAI,CAAC;QAClC,IAAI,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC,GAAG,CAAC;QAC9B,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;QAC9B,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjC,IAAI,IAAA,uBAAU,EAAC,KAAK,CAAC,EAAE,CAAC;gBACtB,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBACf,SAAS;YACX,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACjE,KAAK,MAAM,GAAG,IAAI,IAAI;gBAAE,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC1C,CAAC;QACD,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,aAAqB;QACvC,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACpC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC;YAAE,MAAM,IAAI,yBAAa,CAAC,aAAa,CAAC,CAAC;IAC7E,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,IAAY,EAAE,MAA+B;QACnE,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAC1B,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,KAAK,aAAa;YAAE,OAAO;QACvD,MAAM,aAAa,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;QAClD,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,MAAM,IAAI,yBAAa,CAAC,+FAA+F,CAAC,CAAC;QAC3H,CAAC;QACD,MAAM,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC;IAC1C,CAAC;CACF;AAjED,4BAiEC"}

package/dist/cjs/conformance/host.conformance.js

@@ -0,0 +1,98 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RunHostConformance = RunHostConformance;
+const serve_http_js_1 = require("../host/serve-http.js");
+function assert(condition, message) {
+    if (!condition)
+        throw new Error(message);
+}
+const FETCH_TIMEOUT_MS = 5_000;
+function ParseJsonRpcFrame(contentType, body) {
+    if (contentType?.includes('text/event-stream')) {
+        const dataLine = body.split('\n').find((line) => line.startsWith('data:'));
+        assert(dataLine, `expected an SSE data frame in the response, got: ${body}`);
+        return JSON.parse(dataLine.slice('data:'.length).trim());
+    }
+    return JSON.parse(body);
+}
+function AdvertisedMetadataPath(header) {
+    const match = /resource_metadata="([^"]+)"/.exec(header ?? '');
+    const url = match?.[1];
+    assert(url, 'the challenge did not advertise a resource_metadata url');
+    return new URL(url).pathname;
+}
+const HOST_CONFORMANCE = [
+    {
+        id: 'unauthenticated-call-challenged',
+        title: 'a call with no bearer token is challenged, not silently served',
+        why: 'A server that skips the challenge on a missing token would serve tool calls to anyone who can reach the port, defeating authentication entirely.',
+        async run(base) {
+            const res = await fetch(`${base}/mcp`, { method: 'POST', body: '{}', signal: AbortSignal.timeout(FETCH_TIMEOUT_MS) });
+            assert(res.status === 401, `expected 401 for an unauthenticated call, got ${res.status}`);
+            AdvertisedMetadataPath(res.headers.get('www-authenticate'));
+        },
+    },
+    {
+        id: 'metadata-discoverable-at-advertised-url',
+        title: 'the url the challenge advertises actually serves resource metadata',
+        why: 'A client discovers where to authenticate by following resource_metadata from the challenge. If that route is missing or disconnected from the advertised url, discovery dead-ends and no client can ever authenticate.',
+        async run(base) {
+            const challenged = await fetch(`${base}/mcp`, { method: 'POST', body: '{}', signal: AbortSignal.timeout(FETCH_TIMEOUT_MS) });
+            const metadataPath = AdvertisedMetadataPath(challenged.headers.get('www-authenticate'));
+            const metadata = await fetch(`${base}${metadataPath}`, { signal: AbortSignal.timeout(FETCH_TIMEOUT_MS) });
+            assert(metadata.status === 200, `expected 200 fetching the advertised metadata url, got ${metadata.status}`);
+            const body = await metadata.json();
+            assert(typeof body.resource === 'string', 'metadata document is missing a resource field');
+            assert(Array.isArray(body.authorization_servers), 'metadata document is missing authorization_servers');
+        },
+    },
+    {
+        id: 'authenticated-call-served',
+        title: 'a call bearing a token the verifier accepts is served',
+        why: 'This is the point of hosting a server at all: the transport must actually be wired to the factory-built server, not merely accept the connection and then never respond. A host that calls handleRequest without first connecting the server still answers 200 with SSE headers and then hangs, so the body must be read and parsed as JSON-RPC, not just the status code checked.',
+        async run(base) {
+            const listed = await fetch(`${base}/mcp`, {
+                method: 'POST',
+                headers: {
+                    authorization: 'Bearer conformance-token',
+                    'content-type': 'application/json',
+                    accept: 'application/json, text/event-stream',
+                },
+                body: JSON.stringify({ jsonrpc: '2.0', id: 1, method: 'tools/list' }),
+                signal: AbortSignal.timeout(FETCH_TIMEOUT_MS),
+            });
+            assert(listed.status === 200, `expected 200 for an authenticated call, got ${listed.status}`);
+            const body = await listed.text();
+            const frame = ParseJsonRpcFrame(listed.headers.get('content-type'), body);
+            assert(frame.jsonrpc === '2.0', `expected a jsonrpc 2.0 response, got: ${body}`);
+            assert(frame.id === 1, `expected the response to answer request id 1, got: ${body}`);
+            assert('result' in frame || 'error' in frame, `expected a result or error frame, got: ${body}`);
+        },
+    },
+];
+async function RunHostConformance(factory, verifier) {
+    const handle = await (0, serve_http_js_1.ServeMcpHttp)({
+        factory,
+        verifier,
+        resource: 'http://127.0.0.1/mcp',
+        authorizationServers: ['https://id.example.com'],
+        port: 0,
+    });
+    try {
+        const base = `http://127.0.0.1:${handle.port}`;
+        const failures = [];
+        for (const hostCase of HOST_CONFORMANCE) {
+            try {
+                await hostCase.run(base);
+            }
+            catch (error) {
+                failures.push(`${hostCase.id}: ${error instanceof Error ? error.message : String(error)}`);
+            }
+        }
+        assert(failures.length === 0, `host conformance failed:\n${failures.join('\n')}`);
+    }
+    finally {
+        await handle.close();
+    }
+}
+//# sourceMappingURL=host.conformance.js.map

package/dist/cjs/conformance/host.conformance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host.conformance.js","sourceRoot":"","sources":["../../../src/conformance/host.conformance.ts"],"names":[],"mappings":";;AAyFA,gDAyBC;AAlHD,yDAAqD;AAGrD,SAAS,MAAM,CAAC,SAAkB,EAAE,OAAe;IACjD,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAS/B,SAAS,iBAAiB,CAAC,WAA0B,EAAE,IAAY;IACjE,IAAI,WAAW,EAAE,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;QAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;QAC3E,MAAM,CAAC,QAAQ,EAAE,oDAAoD,IAAI,EAAE,CAAC,CAAC;QAC7E,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAiB,CAAC;IAC3E,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAiB,CAAC;AAC1C,CAAC;AAED,SAAS,sBAAsB,CAAC,MAAqB;IACnD,MAAM,KAAK,GAAG,6BAA6B,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;IAC/D,MAAM,GAAG,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;IACvB,MAAM,CAAC,GAAG,EAAE,yDAAyD,CAAC,CAAC;IACvE,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;AAC/B,CAAC;AASD,MAAM,gBAAgB,GAA0B;IAC9C;QACE,EAAE,EAAE,iCAAiC;QACrC,KAAK,EAAE,gEAAgE;QACvE,GAAG,EAAE,kJAAkJ;QACvJ,KAAK,CAAC,GAAG,CAAC,IAAI;YACZ,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;YACtH,MAAM,CAAC,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,iDAAiD,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;YAC1F,sBAAsB,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC;QAC9D,CAAC;KACF;IACD;QACE,EAAE,EAAE,yCAAyC;QAC7C,KAAK,EAAE,oEAAoE;QAC3E,GAAG,EAAE,wNAAwN;QAC7N,KAAK,CAAC,GAAG,CAAC,IAAI;YACZ,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;YAC7H,MAAM,YAAY,GAAG,sBAAsB,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC;YACxF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,GAAG,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;YAC1G,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,0DAA0D,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YAC7G,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAA6D,CAAC;YAC9F,MAAM,CAAC,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,EAAE,+CAA+C,CAAC,CAAC;YAC3F,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,qBAAqB,CAAC,EAAE,oDAAoD,CAAC,CAAC;QAC1G,CAAC;KACF;IACD;QACE,EAAE,EAAE,2BAA2B;QAC/B,KAAK,EAAE,uDAAuD;QAC9D,GAAG,EAAE,oXAAoX;QACzX,KAAK,CAAC,GAAG,CAAC,IAAI;YACZ,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,MAAM,EAAE;gBACxC,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,aAAa,EAAE,0BAA0B;oBACzC,cAAc,EAAE,kBAAkB;oBAClC,MAAM,EAAE,qCAAqC;iBAC9C;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;gBACrE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,gBAAgB,CAAC;aAC9C,CAAC,CAAC;YACH,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,GAAG,EAAE,+CAA+C,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;YAC9F,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YACjC,MAAM,KAAK,GAAG,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,IAAI,CAAC,CAAC;YAC1E,MAAM,CAAC,KAAK,CAAC,OAAO,KAAK,KAAK,EAAE,yCAAyC,IAAI,EAAE,CAAC,CAAC;YACjF,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,EAAE,sDAAsD,IAAI,EAAE,CAAC,CAAC;YACrF,MAAM,CAAC,QAAQ,IAAI,KAAK,IAAI,OAAO,IAAI,KAAK,EAAE,0CAA0C,IAAI,EAAE,CAAC,CAAC;QAClG,CAAC;KACF;CACF,CAAC;AAEK,KAAK,UAAU,kBAAkB,CACtC,OAAsD,EACtD,QAAuB;IAEvB,MAAM,MAAM,GAAG,MAAM,IAAA,4BAAY,EAAC;QAChC,OAAO;QACP,QAAQ;QACR,QAAQ,EAAE,sBAAsB;QAChC,oBAAoB,EAAE,CAAC,wBAAwB,CAAC;QAChD,IAAI,EAAE,CAAC;KACR,CAAC,CAAC;IACH,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,oBAAoB,MAAM,CAAC,IAAI,EAAE,CAAC;QAC/C,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,KAAK,MAAM,QAAQ,IAAI,gBAAgB,EAAE,CAAC;YACxC,IAAI,CAAC;gBACH,MAAM,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC3B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,QAAQ,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,EAAE,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC7F,CAAC;QACH,CAAC;QACD,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,6BAA6B,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpF,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;AACH,CAAC"}

package/dist/cjs/conformance/read-port.conformance.js

@@ -0,0 +1,131 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.READ_PORT_CONFORMANCE = void 0;
+exports.RunReadPortConformance = RunReadPortConformance;
+const errors_js_1 = require("../errors.js");
+const resolve_js_1 = require("../resolve.js");
+function assert(condition, message) {
+    if (!condition)
+        throw new Error(message);
+}
+exports.READ_PORT_CONFORMANCE = [
+    {
+        id: 'excludes-soft-deleted',
+        title: 'list never returns soft-deleted rows',
+        why: 'The HTTP adapter injects deleted:null for free. An adapter reading collections directly does not, and would leak deleted entities into resolution and into pickers.',
+        async run(api, fx) {
+            const rows = await api.list(fx.kind, { applicationId: { $oid: fx.applicationId } }, 200);
+            const leaked = rows.filter((row) => row.deleted !== null && row.deleted !== undefined);
+            assert(leaked.length === 0, `list returned ${leaked.length} soft-deleted ${fx.kind} rows`);
+        },
+    },
+    {
+        id: 'scopes-by-application',
+        title: 'list honours an applicationId filter',
+        why: 'Application scoping is the only thing preventing cross-application reads.',
+        async run(api, fx) {
+            const rows = await api.list(fx.kind, { applicationId: { $oid: fx.applicationId } }, 200);
+            const foreign = rows.filter((row) => row.applicationId !== undefined && String(row.applicationId) !== fx.applicationId);
+            assert(foreign.length === 0, `list returned ${foreign.length} rows from another application`);
+        },
+    },
+    {
+        id: 'honours-limit',
+        title: 'list honours the limit argument',
+        why: 'Silent over-return breaks pagination honesty and can blow the model context.',
+        async run(api, fx) {
+            const rows = await api.list(fx.kind, { applicationId: { $oid: fx.applicationId } }, 1);
+            assert(rows.length <= 1, `limit 1 returned ${rows.length} rows`);
+        },
+    },
+    {
+        id: 'or-filter-or-400',
+        title: 'list either supports $or on name/alias or rejects it with status 400',
+        why: 'ResolveEntity falls back to a name-only lookup on 400. An adapter that throws an untyped error, or silently returns nothing, breaks alias resolution without any signal.',
+        async run(api, fx) {
+            try {
+                const rows = await api.list(fx.kind, {
+                    applicationId: { $oid: fx.applicationId },
+                    $or: [{ name: fx.knownEntityName }, { alias: fx.knownEntityName }],
+                });
+                assert(Array.isArray(rows), '$or lookup did not return an array');
+            }
+            catch (error) {
+                assert((0, errors_js_1.ErrorStatus)(error) === 400, `$or lookup failed with a non-400, untyped error: ${String(error)}`);
+            }
+        },
+    },
+    {
+        id: 'get-one-addresses-entity',
+        title: 'getOne returns the addressed entity',
+        why: 'Read-back verification depends on addressing a single entity by id.',
+        async run(api, fx) {
+            const row = await api.getOne(fx.kind, fx.knownEntityId);
+            const id = row.id;
+            assert(String(id) === fx.knownEntityId, `getOne returned id ${String(id)}, expected ${fx.knownEntityId}`);
+        },
+    },
+    {
+        id: 'identity-has-tenant',
+        title: 'whoAmI reports a tenant and a role',
+        why: 'Every access decision keys off tenant and role. An adapter that leaves tenantId null degrades callers to an anonymous bucket.',
+        async run(api) {
+            const identity = await api.whoAmI();
+            assert(typeof identity.role === 'string', 'identity.role missing');
+            assert(identity.tenantId !== undefined, 'identity.tenantId missing');
+        },
+    },
+    {
+        id: 'resolve-by-name',
+        title: 'ResolveEntity finds a known entity by name',
+        why: 'Name resolution is the contract that lets a person type a name instead of an id.',
+        async run(api, fx) {
+            const { matches } = await (0, resolve_js_1.ResolveEntity)(api, fx.kind, fx.applicationId, fx.knownEntityName);
+            assert(matches.some((match) => match.id === fx.knownEntityId), `did not resolve "${fx.knownEntityName}" to ${fx.knownEntityId}`);
+        },
+    },
+    {
+        id: 'resolve-application-by-name',
+        title: 'ResolveApplicationId maps an application name to its id',
+        why: 'Every application-scoped call starts here.',
+        async run(api, fx) {
+            const id = await (0, resolve_js_1.ResolveApplicationId)(api, fx.applicationName);
+            assert(id === fx.applicationId, `resolved ${id}, expected ${fx.applicationId}`);
+        },
+    },
+    {
+        id: 'not-found-carries-candidates',
+        title: 'ResolveOneStrict reports a miss as NotFoundError with candidates',
+        why: 'A miss must offer what does exist. Surfacing a validator message instead is the defect that produced wrong-entity mutations.',
+        async run(api, fx) {
+            const absent = fx.absentEntityName ?? '__definitely_absent_entity__';
+            try {
+                await (0, resolve_js_1.ResolveOneStrict)(api, fx.kind, fx.applicationId, absent);
+                throw new Error('ResolveOneStrict resolved a name that should not exist');
+            }
+            catch (error) {
+                assert(error instanceof errors_js_1.NotFoundError, `expected NotFoundError, got ${String(error)}`);
+                assert(Array.isArray(error.candidates), 'NotFoundError carried no candidates array');
+            }
+        },
+    },
+];
+async function RunReadPortConformance(api, fixtures) {
+    const results = [];
+    for (const testCase of exports.READ_PORT_CONFORMANCE) {
+        try {
+            await testCase.run(api, fixtures);
+            results.push({ id: testCase.id, title: testCase.title, passed: true });
+        }
+        catch (error) {
+            results.push({
+                id: testCase.id,
+                title: testCase.title,
+                passed: false,
+                error: error instanceof Error ? error.message : String(error),
+            });
+        }
+    }
+    return results;
+}
+//# sourceMappingURL=read-port.conformance.js.map

package/dist/cjs/conformance/read-port.conformance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-port.conformance.js","sourceRoot":"","sources":["../../../src/conformance/read-port.conformance.ts"],"names":[],"mappings":";;;AAsIA,wDAmBC;AAzJD,4CAA0D;AAE1D,8CAAsF;AAkBtF,SAAS,MAAM,CAAC,SAAkB,EAAE,OAAe;IACjD,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;AAC3C,CAAC;AAEY,QAAA,qBAAqB,GAAsB;IACtD;QACE,EAAE,EAAE,uBAAuB;QAC3B,KAAK,EAAE,sCAAsC;QAC7C,GAAG,EAAE,qKAAqK;QAC1K,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE;YACf,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,aAAa,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;YACzF,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,KAAK,IAAI,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC;YACvF,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,iBAAiB,MAAM,CAAC,MAAM,iBAAiB,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC;QAC7F,CAAC;KACF;IACD;QACE,EAAE,EAAE,uBAAuB;QAC3B,KAAK,EAAE,sCAAsC;QAC7C,GAAG,EAAE,2EAA2E;QAChF,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE;YACf,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,aAAa,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;YACzF,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CACzB,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,aAAa,KAAK,SAAS,IAAI,MAAM,CAAE,GAAmC,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC,aAAa,CAC5H,CAAC;YACF,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,iBAAiB,OAAO,CAAC,MAAM,gCAAgC,CAAC,CAAC;QAChG,CAAC;KACF;IACD;QACE,EAAE,EAAE,eAAe;QACnB,KAAK,EAAE,iCAAiC;QACxC,GAAG,EAAE,8EAA8E;QACnF,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE;YACf,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,aAAa,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;YACvF,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,EAAE,oBAAoB,IAAI,CAAC,MAAM,OAAO,CAAC,CAAC;QACnE,CAAC;KACF;IACD;QACE,EAAE,EAAE,kBAAkB;QACtB,KAAK,EAAE,sEAAsE;QAC7E,GAAG,EAAE,0KAA0K;QAC/K,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE;YACf,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE;oBACnC,aAAa,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,aAAa,EAAE;oBACzC,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,eAAe,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,eAAe,EAAE,CAAC;iBACnE,CAAC,CAAC;gBACH,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,oCAAoC,CAAC,CAAC;YACpE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,IAAA,uBAAW,EAAC,KAAK,CAAC,KAAK,GAAG,EAAE,oDAAoD,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC1G,CAAC;QACH,CAAC;KACF;IACD;QACE,EAAE,EAAE,0BAA0B;QAC9B,KAAK,EAAE,qCAAqC;QAC5C,GAAG,EAAE,qEAAqE;QAC1E,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE;YACf,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC;YACxD,MAAM,EAAE,GAAI,GAAwB,CAAC,EAAE,CAAC;YACxC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,aAAa,EAAE,sBAAsB,MAAM,CAAC,EAAE,CAAC,cAAc,EAAE,CAAC,aAAa,EAAE,CAAC,CAAC;QAC5G,CAAC;KACF;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,KAAK,EAAE,oCAAoC;QAC3C,GAAG,EAAE,+HAA+H;QACpI,KAAK,CAAC,GAAG,CAAC,GAAG;YACX,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC;YACpC,MAAM,CAAC,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ,EAAE,uBAAuB,CAAC,CAAC;YACnE,MAAM,CAAC,QAAQ,CAAC,QAAQ,KAAK,SAAS,EAAE,2BAA2B,CAAC,CAAC;QACvE,CAAC;KACF;IACD;QACE,EAAE,EAAE,iBAAiB;QACrB,KAAK,EAAE,4CAA4C;QACnD,GAAG,EAAE,kFAAkF;QACvF,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE;YACf,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAA,0BAAa,EAAC,GAAG,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC;YAC5F,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC,aAAa,CAAC,EAAE,oBAAoB,EAAE,CAAC,eAAe,QAAQ,EAAE,CAAC,aAAa,EAAE,CAAC,CAAC;QACnI,CAAC;KACF;IACD;QACE,EAAE,EAAE,6BAA6B;QACjC,KAAK,EAAE,yDAAyD;QAChE,GAAG,EAAE,4CAA4C;QACjD,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE;YACf,MAAM,EAAE,GAAG,MAAM,IAAA,iCAAoB,EAAC,GAAG,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC;YAC/D,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,aAAa,EAAE,YAAY,EAAE,cAAc,EAAE,CAAC,aAAa,EAAE,CAAC,CAAC;QAClF,CAAC;KACF;IACD;QACE,EAAE,EAAE,8BAA8B;QAClC,KAAK,EAAE,kEAAkE;QACzE,GAAG,EAAE,8HAA8H;QACnI,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE;YACf,MAAM,MAAM,GAAG,EAAE,CAAC,gBAAgB,IAAI,8BAA8B,CAAC;YACrE,IAAI,CAAC;gBACH,MAAM,IAAA,6BAAgB,EAAC,GAAG,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;gBAC/D,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;YAC5E,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,YAAY,yBAAa,EAAE,+BAA+B,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBACvF,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,2CAA2C,CAAC,CAAC;YACvF,CAAC;QACH,CAAC;KACF;CACF,CAAC;AASK,KAAK,UAAU,sBAAsB,CAC1C,GAAkB,EAClB,QAA6B;IAE7B,MAAM,OAAO,GAAwB,EAAE,CAAC;IACxC,KAAK,MAAM,QAAQ,IAAI,6BAAqB,EAAE,CAAC;QAC7C,IAAI,CAAC;YACH,MAAM,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YAClC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACzE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,CAAC;gBACX,EAAE,EAAE,QAAQ,CAAC,EAAE;gBACf,KAAK,EAAE,QAAQ,CAAC,KAAK;gBACrB,MAAM,EAAE,KAAK;gBACb,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/cjs/errors.js

@@ -0,0 +1,74 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NoTenantError = exports.TenantMismatchError = exports.AppScopeError = exports.NotFoundError = exports.AmbiguityError = exports.ElwisApiError = void 0;
+exports.IsElwisApiError = IsElwisApiError;
+exports.ErrorStatus = ErrorStatus;
+class ElwisApiError extends Error {
+    status;
+    path;
+    body;
+    constructor(status, path, body) {
+        super(`ELWIS API ${status} for ${path}`);
+        this.name = 'ElwisApiError';
+        this.status = status;
+        this.path = path;
+        this.body = body;
+    }
+}
+exports.ElwisApiError = ElwisApiError;
+function IsElwisApiError(error) {
+    if (error instanceof ElwisApiError)
+        return true;
+    return (typeof error === 'object' &&
+        error !== null &&
+        typeof error.status === 'number' &&
+        typeof error.name === 'string' &&
+        /^Elwis(Api|Http)Error$/.test(error.name));
+}
+function ErrorStatus(error) {
+    return IsElwisApiError(error) ? error.status : undefined;
+}
+class AmbiguityError extends Error {
+    candidates;
+    constructor(message, candidates) {
+        super(message);
+        this.name = 'AmbiguityError';
+        this.candidates = candidates;
+    }
+}
+exports.AmbiguityError = AmbiguityError;
+class NotFoundError extends Error {
+    kind;
+    nameOrAlias;
+    candidates;
+    constructor(kind, nameOrAlias, candidates = []) {
+        super(`No active ${kind} named "${nameOrAlias}" in this application`);
+        this.name = 'NotFoundError';
+        this.kind = kind;
+        this.nameOrAlias = nameOrAlias;
+        this.candidates = candidates;
+    }
+}
+exports.NotFoundError = NotFoundError;
+class AppScopeError extends Error {
+    constructor(ref) {
+        super(`Application "${ref}" is outside the configured application allowlist`);
+        this.name = 'AppScopeError';
+    }
+}
+exports.AppScopeError = AppScopeError;
+class TenantMismatchError extends Error {
+    constructor(expected, actual) {
+        super(`No data was read or written. This connection is locked to tenant ${expected}, but the access token belongs to a different tenant (${actual ?? 'unknown'}).`);
+        this.name = 'TenantMismatchError';
+    }
+}
+exports.TenantMismatchError = TenantMismatchError;
+class NoTenantError extends Error {
+    constructor() {
+        super('No tenant is set, so there is no way to know which ELWIS environment to work in.');
+        this.name = 'NoTenantError';
+    }
+}
+exports.NoTenantError = NoTenantError;
+//# sourceMappingURL=errors.js.map

package/dist/cjs/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/errors.ts"],"names":[],"mappings":";;;AAcA,0CASC;AAED,kCAEC;AA3BD,MAAa,aAAc,SAAQ,KAAK;IAC7B,MAAM,CAAS;IACf,IAAI,CAAS;IACb,IAAI,CAAU;IAEvB,YAAY,MAAc,EAAE,IAAY,EAAE,IAAa;QACrD,KAAK,CAAC,aAAa,MAAM,QAAQ,IAAI,EAAE,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;QAC5B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAZD,sCAYC;AAED,SAAgB,eAAe,CAAC,KAAc;IAC5C,IAAI,KAAK,YAAY,aAAa;QAAE,OAAO,IAAI,CAAC;IAChD,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,OAAQ,KAA8B,CAAC,MAAM,KAAK,QAAQ;QAC1D,OAAQ,KAA4B,CAAC,IAAI,KAAK,QAAQ;QACtD,wBAAwB,CAAC,IAAI,CAAE,KAA0B,CAAC,IAAI,CAAC,CAChE,CAAC;AACJ,CAAC;AAED,SAAgB,WAAW,CAAC,KAAc;IACxC,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3D,CAAC;AAED,MAAa,cAAe,SAAQ,KAAK;IAC9B,UAAU,CAAsC;IAEzD,YAAY,OAAe,EAAE,UAA+C;QAC1E,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;QAC7B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;CACF;AARD,wCAQC;AAED,MAAa,aAAc,SAAQ,KAAK;IAC7B,IAAI,CAAS;IACb,WAAW,CAAS;IACpB,UAAU,CAAsC;IAEzD,YAAY,IAAY,EAAE,WAAmB,EAAE,aAAkD,EAAE;QACjG,KAAK,CAAC,aAAa,IAAI,WAAW,WAAW,uBAAuB,CAAC,CAAC;QACtE,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;QAC5B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;CACF;AAZD,sCAYC;AAED,MAAa,aAAc,SAAQ,KAAK;IACtC,YAAY,GAAW;QACrB,KAAK,CAAC,gBAAgB,GAAG,mDAAmD,CAAC,CAAC;QAC9E,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;IAC9B,CAAC;CACF;AALD,sCAKC;AAED,MAAa,mBAAoB,SAAQ,KAAK;IAC5C,YAAY,QAAgB,EAAE,MAAqB;QACjD,KAAK,CACH,oEAAoE,QAAQ,yDAAyD,MAAM,IAAI,SAAS,IAAI,CAC7J,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAPD,kDAOC;AAED,MAAa,aAAc,SAAQ,KAAK;IACtC;QACE,KAAK,CAAC,kFAAkF,CAAC,CAAC;QAC1F,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;IAC9B,CAAC;CACF;AALD,sCAKC"}

package/dist/cjs/host/elwis-jwt-verifier.js

@@ -0,0 +1,40 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ElwisJwtVerifier = ElwisJwtVerifier;
+const TENANT_ID_PATTERN = /^[a-f0-9]{24}$/i;
+function AssertLooksLikeAToken(token) {
+    const parts = token.split('.');
+    const payload = parts[1];
+    if (parts.length !== 3 || payload === undefined) {
+        throw new Error('the bearer value is not a valid token');
+    }
+    try {
+        JSON.parse(Buffer.from(payload, 'base64url').toString('utf8'));
+    }
+    catch {
+        throw new Error('the bearer value is not a valid token');
+    }
+}
+function ElwisJwtVerifier(options) {
+    return {
+        async verify(token) {
+            AssertLooksLikeAToken(token);
+            let resolved;
+            try {
+                resolved = await options.resolveIdentity(token);
+            }
+            catch (e) {
+                throw new Error(`could not resolve the bearer token against ELWIS: ${e instanceof Error ? e.message : String(e)}`);
+            }
+            if (resolved.tenantId === null || !TENANT_ID_PATTERN.test(resolved.tenantId)) {
+                throw new Error(`the resolved identity has no valid tenant id (got: ${resolved.tenantId ?? 'null'})`);
+            }
+            return {
+                token,
+                baseUrl: options.baseUrl,
+                tenantId: resolved.tenantId,
+            };
+        },
+    };
+}
+//# sourceMappingURL=elwis-jwt-verifier.js.map

package/dist/cjs/host/elwis-jwt-verifier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"elwis-jwt-verifier.js","sourceRoot":"","sources":["../../../src/host/elwis-jwt-verifier.ts"],"names":[],"mappings":";;AAmBA,4CA0BC;AA3CD,MAAM,iBAAiB,GAAG,iBAAiB,CAAC;AAE5C,SAAS,qBAAqB,CAAC,KAAa;IAC1C,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACzB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,CAAC;QACH,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;AACH,CAAC;AAID,SAAgB,gBAAgB,CAAC,OAGhC;IACC,OAAO;QACL,KAAK,CAAC,MAAM,CAAC,KAAa;YACxB,qBAAqB,CAAC,KAAK,CAAC,CAAC;YAE7B,IAAI,QAAqC,CAAC;YAC1C,IAAI,CAAC;gBACH,QAAQ,GAAG,MAAM,OAAO,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;YAClD,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACrH,CAAC;YAED,IAAI,QAAQ,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC7E,MAAM,IAAI,KAAK,CAAC,sDAAsD,QAAQ,CAAC,QAAQ,IAAI,MAAM,GAAG,CAAC,CAAC;YACxG,CAAC;YAED,OAAO;gBACL,KAAK;gBACL,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;aAC5B,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/cjs/host/file-link-store.js

@@ -0,0 +1,60 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FileLinkStore = void 0;
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+const FILE_MODE = 0o600;
+const DIRECTORY_MODE = 0o700;
+class FileLinkStore {
+    path;
+    entries;
+    writing = Promise.resolve();
+    constructor(path) {
+        this.path = path;
+        this.entries = this.Load();
+    }
+    Load() {
+        let raw;
+        try {
+            raw = (0, node_fs_1.readFileSync)(this.path, 'utf8');
+        }
+        catch {
+            return {};
+        }
+        try {
+            const parsed = JSON.parse(raw);
+            if (typeof parsed !== 'object' || parsed === null || Array.isArray(parsed))
+                return {};
+            return parsed;
+        }
+        catch {
+            return {};
+        }
+    }
+    Flush() {
+        const snapshot = JSON.stringify(this.entries);
+        this.writing = this.writing.then(() => {
+            (0, node_fs_1.mkdirSync)((0, node_path_1.dirname)(this.path), { recursive: true, mode: DIRECTORY_MODE });
+            const temporary = `${this.path}.${process.pid}.tmp`;
+            (0, node_fs_1.writeFileSync)(temporary, snapshot, { mode: FILE_MODE });
+            (0, node_fs_1.renameSync)(temporary, this.path);
+        }, () => { });
+        return this.writing;
+    }
+    async get(key) {
+        return this.entries[key] ?? null;
+    }
+    async put(key, session) {
+        this.entries = { ...this.entries, [key]: session };
+        await this.Flush();
+    }
+    async delete(key) {
+        const { [key]: removed, ...rest } = this.entries;
+        if (removed === undefined)
+            return;
+        this.entries = rest;
+        await this.Flush();
+    }
+}
+exports.FileLinkStore = FileLinkStore;
+//# sourceMappingURL=file-link-store.js.map

package/dist/cjs/host/file-link-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-link-store.js","sourceRoot":"","sources":["../../../src/host/file-link-store.ts"],"names":[],"mappings":";;;AAAA,qCAA6E;AAC7E,yCAAoC;AAGpC,MAAM,SAAS,GAAG,KAAK,CAAC;AACxB,MAAM,cAAc,GAAG,KAAK,CAAC;AAE7B,MAAa,aAAa;IACP,IAAI,CAAS;IACtB,OAAO,CAAgC;IACvC,OAAO,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;IAEnD,YAAY,IAAY;QACtB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC7B,CAAC;IAEO,IAAI;QACV,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,IAAA,sBAAY,EAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;YAC1C,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;gBAAE,OAAO,EAAE,CAAC;YACtF,OAAO,MAAuC,CAAC;QACjD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAEO,KAAK;QACX,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC9C,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE;YACpC,IAAA,mBAAS,EAAC,IAAA,mBAAO,EAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;YACzE,MAAM,SAAS,GAAG,GAAG,IAAI,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;YACpD,IAAA,uBAAa,EAAC,SAAS,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;YACxD,IAAA,oBAAU,EAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACnC,CAAC,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACb,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,GAAW;QACnB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,GAAW,EAAE,OAAsB;QAC3C,IAAI,CAAC,OAAO,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC;QACnD,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAW;QACtB,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC;QACjD,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO;QAClC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;CACF;AApDD,sCAoDC"}

package/dist/cjs/host/identity.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=identity.js.map