@solidxai/core 0.1.9-beta.7 → 0.1.9

package/dist/interfaces.js.map

@@ -1 +1 @@
-{"version":3,"file":"interfaces.js","sourceRoot":"","sources":["../src/interfaces.ts"],"names":[],"mappings":";;;AA+DA,IAAY,YAKX;AALD,WAAY,YAAY;IACtB,wCAAwB,CAAA;IACxB,6DAA6C,CAAA;IAC7C,6DAA6C,CAAA;IAC7C,8CAA8B,CAAA;AAChC,CAAC,EALW,YAAY,4BAAZ,YAAY,QAKvB;AA2HD,IAAY,SAEX;AAFD,WAAY,SAAS;IACnB,gDAAmC,CAAA;AACrC,CAAC,EAFW,SAAS,yBAAT,SAAS,QAEpB;AAED,MAAa,YAAY;IACvB,YACS,IAAS,EACT,OAAU;QADV,SAAI,GAAJ,IAAI,CAAK;QACT,YAAO,GAAP,OAAO,CAAG;IACf,CAAC;CACN;AALD,oCAKC;AAyED,IAAY,UAIX;AAJD,WAAY,UAAU;IACpB,mCAAqB,CAAA;IACrB,mCAAqB,CAAA;IACrB,6BAAe,CAAA;AACjB,CAAC,EAJW,UAAU,0BAAV,UAAU,QAIrB","sourcesContent":["import { Repository } from 'typeorm';\nimport { User } from 'src/entities/user.entity';\nimport { CreateUserDto } from 'src/dtos/create-user.dto';\nimport { CreateEmailTemplateDto } from 'src/dtos/create-email-template.dto';\nimport { CreateSmsTemplateDto } from 'src/dtos/create-sms-template.dto';\nimport { SignUpDto } from 'src/dtos/sign-up.dto';\nimport { Readable } from 'stream';\nimport { CreateMediaStorageProviderMetadataDto } from './dtos/create-media-storage-provider-metadata.dto';\nimport { DatasourceType } from './dtos/create-model-metadata.dto';\nimport { CreateModuleMetadataDto } from './dtos/create-module-metadata.dto';\nimport { CreateRoleMetadataDto } from './dtos/create-role-metadata.dto';\nimport { CreateSecurityRuleDto } from './dtos/create-security-rule.dto';\nimport { FieldMetadata } from './entities/field-metadata.entity';\nimport { Media } from './entities/media.entity';\nimport { DashboardQuestion } from './entities/dashboard-question.entity';\nimport { ComputedFieldMetadata } from './helpers/solid-registry';\nimport { SqlExpression } from './services/question-data-providers/chartjs-sql-data-provider.service';\nimport { CreateDashboardDto } from './dtos/create-dashboard.dto';\nimport { AiInteraction } from './entities/ai-interaction.entity';\nimport { ActiveUserData } from './interfaces/active-user-data.interface';\nimport { SecurityRuleConfig } from './dtos/security-rule-config.dto';\nimport { SecurityRule } from './entities/security-rule.entity';\n\nexport interface FieldCrudManager {\n  // fieldMetadata: FieldMetadata;\n  // entityManager?: EntityManager;\n  // createDto: any;\n  // files : Array<Express.Multer.File>;\n  validate(\n    dto: any,\n    files: Array<Express.Multer.File>,\n  ): ValidationError[] | Promise<ValidationError[]>;\n  transformForCreate(dto: any, ctxt?: any): any | Promise<any>;\n}\n\nexport interface ValidationError {\n  field: string;\n  error: string;\n}\n\n// export interface MediaStorage\nexport interface MediaStorageProvider<T> {\n  store(files: Express.Multer.File[], entity: T, mediaFieldMetadata: FieldMetadata): Promise<Media[]>;\n  delete(entity: T, mediaFieldMetadata: FieldMetadata): Promise<void>;\n  retrieve(entity: T, mediaFieldMetadata: FieldMetadata): Promise<Media[]>;\n  storeStreams(streamPairs: [Readable, string][], entity: T, mediaFieldMetadata: FieldMetadata): Promise<Media[]>;\n  // delete(file: string): Promise<void>;\n}\n\nexport interface ModuleMetadataConfiguration {\n  moduleMetadata?: CreateModuleMetadataDto,\n  roles?: CreateRoleMetadataDto[],\n  users?: SignUpDto[],\n  actions?: any[],\n  menus?: any[],\n  views?: any[],\n  emailTemplates?: CreateEmailTemplateDto[],\n  smsTemplates?: CreateSmsTemplateDto[],\n  mediaStorageProviders?: CreateMediaStorageProviderMetadataDto[]\n  securityRules?: CreateSecurityRuleDto[],\n  dashboards?: CreateDashboardDto[],\n}\n\nexport enum SettingLevel {\n  SystemEnv = 'system-env',\n  SystemAdminReadonly = 'system-admin-readonly',\n  SystemAdminEditable = 'system-admin-editable',\n  InternalUser = \"internal-user\"\n}\n\nexport interface SettingDefinition<T = any> {\n  moduleName: string;\n  key: string;\n  value: T;\n  level: SettingLevel;\n  encrypted?: boolean;\n}\n\n// solid-core/settings/settings-provider.interface.ts\nexport interface ISettingsProvider {\n  getSettings(): SettingDefinition[];\n}\n\nexport interface CodeGenerationOptions {\n  moduleId?: number;\n  moduleUserKey?: string;\n  modelId?: number;\n  modelUserKey?: string;\n  fieldIdsForRemoval?: number[];\n  fieldNamesForRemoval?: string[];\n  dryRun?: boolean;\n  fieldIdsForRefresh?: number[];\n  fieldNamesForRefresh?: string[];\n}\n\nexport interface TriggerMcpClientOptions {\n  aiInteractionId: number;\n  moduleName: string;\n}\n\nexport interface McpResponse {\n  success: boolean;\n  request: string;\n  response: string;\n  model?: string;\n  tools_invoked?: string[];\n  tool_calls?: any[];\n  duration_ms?: number;\n  errors?: string[];\n  error_trace?: string[];\n  content_type?: string;\n}\n\nexport interface ISelectionProviderContext {\n  limit: number;\n  offset: number;\n  formValues: Record<string, any>;\n  //Attribute to control the validation on creating the record\n  validateOnSave?: boolean;\n  // query: string;\n}\n\nexport interface ISelectionProviderValues {\n  label: string;\n  value: string;\n}\n\nexport interface ISelectionProvider<T extends ISelectionProviderContext> {\n  help(): string;\n\n  name(): string;\n\n  value(optionValue: string, ctxt: T): Promise<ISelectionProviderValues | any>;\n\n  values(query: any, ctxt: T): Promise<readonly ISelectionProviderValues[]>;\n}\n\nexport interface IDashboardVariableSelectionProvider<T extends ISelectionProviderContext> extends ISelectionProvider<T> {\n}\n\nexport interface IMcpToolResponseHandler {\n  apply(aiInteraction: AiInteraction);\n}\n\nexport interface QuestionSqlDataProviderContext {\n    // questionSqlDatasetConfig: QuestionSqlDatasetConfig;\n    // questionId: number;\n    // question: Question;\n    expressions?: SqlExpression[]\n}\nexport interface IDashboardQuestionDataProvider<TContext, TData> {\n  help(): string;\n\n  name(): string;\n\n  getData(question: DashboardQuestion, ctxt?: TContext): Promise<TData[] | TData>;\n}\n\n/**\n * @deprecated Use `IEntityComputedFieldProvider` instead.\n */\nexport interface IComputedFieldProvider<T> {\n  help(): string;\n\n  name(): string;\n\n  valueType(): string;\n\n  computeValue(dto: any, ctxt: T): Promise<string | number>; // FIXME : Improve the types to make it more specific using generics\n}\n\nexport interface IEntityComputedFieldProvider {\n  help(): string;\n\n  name(): string;\n}\n\nexport interface IEntityPreComputeFieldProvider<TTriggerEntity, TContext, TValue = void> extends IEntityComputedFieldProvider {\n  preComputeValue(triggerEntity: TTriggerEntity, computedFieldMetadata: ComputedFieldMetadata<TContext>): Promise<TValue>;\n}\n\nexport interface IEntityPostComputeFieldProvider<TTriggerEntity, TContext> extends IEntityComputedFieldProvider {\n  postComputeAndSaveValue(triggerEntity: TTriggerEntity, computedFieldMetadata: ComputedFieldMetadata<TContext>): Promise<void>;\n}\n\nexport interface ISolidDatabaseModule {\n  name(): string;\n\n  type(): DatasourceType;\n}\n\nexport enum EventType {\n  USER_REGISTERED = 'user.registered',\n}\n\nexport class EventDetails<T> {\n  constructor(\n    public type: any,\n    public payload: T,\n  ) { }\n}\n\nexport interface IExtensionUserCreationProvider<T extends User = User, TDto extends CreateUserDto = CreateUserDto> {\n  readonly repo: Repository<T>;\n  buildExtensionEntity(dto: TDto): Promise<T>;\n  roles(dto: TDto): string[];\n}\n\nexport interface IMail<TResponse = unknown> {\n  sendEmail(\n    to: string,\n    subject: string,\n    body: string,\n    shouldQueueEmails: boolean,\n    wrapperAttachments?: MailAttachmentWrapper[],\n    attachments?: MailAttachment[],\n    parentEntity?: any,\n    parentEntityId?: any,\n    cc?: string[],\n    bcc?: string[],\n    from?: string,\n  ): Promise<TResponse>;\n\n  sendEmailUsingTemplate(\n    to: string,\n    templateName: string,\n    templateParams: any,\n    shouldQueueEmails: boolean,\n    wrapperAttachments?: MailAttachmentWrapper[],\n    attachments?: MailAttachment[],\n    parentEntity?: any,\n    parentEntityId?: any,\n    cc?: string[],\n    bcc?: string[],\n    from?: string,\n  ): Promise<TResponse>;\n}\n\nexport interface ISMS {\n  sendSMS(to: string, body: string, shouldQueueSms: boolean): Promise<any>;\n\n  sendSMSUsingTemplate(\n    to: string,\n    templateName: string,\n    templateParams: any,\n    shouldQueueSms: boolean,\n  ): Promise<any>;\n}\n\nexport interface IWhatsAppTransport {\n  sendWhatsAppMessage(\n    to: string,\n    templateId: string,\n    parameters: any,\n    parentEntity?: any,\n    parentEntityId?: any\n  ): Promise<any>;\n}\n\nexport interface MailAttachmentWrapper {\n  relativePath?: string;\n  attachment?: MailAttachment;\n}\n\nexport interface MailAttachment {\n  filename: string;\n  templatePath?: string; // deprecated\n  templateParams?: any; // deprecated\n  content?: string | Buffer;\n  contentType?: string;\n  path?: string; //Filesystem absolute path or URL. \n}\n\nexport enum BrokerType {\n  RabbitMQ = 'rabbitmq',\n  Database = 'database',\n  Redis = 'redis',\n}\n\nexport interface QueuesModuleOptions {\n  name: string;\n  type: BrokerType;\n  queueName: string;\n  prefetch?: number;\n  persistToDatabase?: boolean;\n}\n\nexport type MediaWithFullUrl = Media & {\n  _full_url: string;\n};\n\n\nexport type ErrorCode = string;\n\nexport type ErrorMeta = {\n  message: string;\n  httpStatus?: number;\n};\n\nexport type ErrorRule = {\n  /** Canonical error code. Keep them kebab-case for consistency. */\n  code: ErrorCode;\n  /** Higher runs earlier. Defaults to 0 if not provided. */\n  priority?: number;\n  /** Return true if this rule matches the combined error text. */\n  match: (combinedErrorText: string) => boolean;\n  /** Display + HTTP mapping for this code. */\n  meta: ErrorMeta;\n};\n\nexport interface IErrorCodeProvider {\n  /** Used for registry identity & logs */\n  name(): string;\n\n  /**\n   * Return all rules this provider contributes.\n   * These will be merged with other providers’ rules, then sorted by priority.\n   */\n  rules(): ReadonlyArray<ErrorRule>;\n\n  /**\n   * Optional fallback meta for codes this provider owns (when called by getMessage/getHttpStatus).\n   * If omitted, the ErrorMapperService will rely on the rule.meta of the first matching rule.\n   */\n  resolve?(code: ErrorCode): ErrorMeta | undefined;\n}\n\n// MCP Tool Related\n\nexport type PlanStep = CreateNewFileStep | RegisterNestProviderStep | AddMethodToExistingClassStep | RegisterSolidXExtensionComponentStep | AddListViewButtonStep | AddFormViewButtonStep | AddImportStep;\nexport interface AddImportStep {\n  type: \"addImport\";\n  path: string;                 // e.g. apps/api/src/address-master/services/address-master.service.ts\n  importStatement: string;      // e.g. import { Something } from 'somewhere';\n  overwrite?: boolean;        // default=false\n  rationale?: string;           // optional, ignored by executor\n}\n\nexport interface CreateNewFileStep {\n  type: \"createNewFile\";\n  path: string;         // repo-relative e.g. solid-api/api/src/computed-providers/foo.provider.ts\n  content: string;      // full file content\n  overwrite?: boolean;  // default=false\n  rationale?: string;   // optional, ignored by executor\n}\n\nexport interface RegisterNestProviderStep {\n  type: \"registerNestProvider\";\n  modulePath: string;           // e.g. apps/api/src/address-master/address-master.module.ts\n  providerClassName: string;    // e.g. StateTotalCitiesComputedFieldProvider\n  importFrom: string;           // e.g. \"@/computed-providers/state-total-cities.provider\"\n  registerIn: Array<\"providers\" | \"exports\">; // which arrays to add to\n  uniqueGuard?: boolean;        // default=true\n  rationale?: string;           // optional, ignored by executor\n}\n\nexport interface AddMethodToExistingClassStep {\n  type: \"addMethodToExistingClass\";\n  path: string;                 // e.g. apps/api/src/address-master/services/address-master.service.ts\n  className: string             // e.g. CountryService\n  methodName: string            // e.g. addCountry\n  content: string               // Full Method Code\n  importStatements?: string[];  // e.g. [ \"import { X } from 'y';\" ]\n  rationale?: string;           // optional, ignored by executor\n}\n\nexport interface RegisterSolidXExtensionComponentStep {\n  type: \"registerSolidXExtensionComponent\";\n  path: string;                 // e.g. apps/api/src/address-master/services/address-master.service.ts\n  content?: string;               // Code\n  importExtensionComponent?: string;\n}\n\nexport interface AddListViewButtonStep {\n  type: \"addListViewButton\";\n  moduleName?: string;\n  modelName?: string;\n  buttonType?: string;\n  content?: string;            // Code\n}\n\nexport interface AddFormViewButtonStep {\n  type: \"addFormViewButton\";\n  moduleName?: string;\n  modelName?: string;\n  buttonType?: string;\n  content?: string;            // Code\n}\n\nexport interface McpComputedProviderResponse {\n  plan: PlanStep[];\n  // provider?: any;  // (intentionally ignored per your note)\n}\n\nexport interface ISecurityRuleConfigProvider {\n  securityRuleConfig(activeUser: ActiveUserData, securityRule: SecurityRule): Promise<SecurityRuleConfig>;\n}\n\n\nexport interface AwsS3Config {\n  S3_AWS_ACCESS_KEY: string;\n  S3_AWS_SECRET_KEY: string;\n  S3_AWS_REGION_NAME: string;\n}\n\n// Prevents inference so callers must provide explicit type arguments; reusable for other APIs.\nexport type NoInfer<T> = [T][T extends any ? 0 : never];\n\nexport type AuditEventType = 'insert' | 'update' | 'delete';\n\nexport interface AuditQueuePayload {\n    eventType: AuditEventType;\n    modelName: string;\n    entityId: string | number | null;\n    occurredAt: string;\n    after?: any;\n    before?: any;\n    updatedColumnNames?: string[];\n    userId?: number | null;\n}\n\n\n"]}
+{"version":3,"file":"interfaces.js","sourceRoot":"","sources":["../src/interfaces.ts"],"names":[],"mappings":";;;AA+DA,IAAY,YAKX;AALD,WAAY,YAAY;IACtB,wCAAwB,CAAA;IACxB,6DAA6C,CAAA;IAC7C,6DAA6C,CAAA;IAC7C,8CAA8B,CAAA;AAChC,CAAC,EALW,YAAY,4BAAZ,YAAY,QAKvB;AA2JD,IAAY,SAEX;AAFD,WAAY,SAAS;IACnB,gDAAmC,CAAA;AACrC,CAAC,EAFW,SAAS,yBAAT,SAAS,QAEpB;AAED,MAAa,YAAY;IACvB,YACS,IAAS,EACT,OAAU;QADV,SAAI,GAAJ,IAAI,CAAK;QACT,YAAO,GAAP,OAAO,CAAG;IACf,CAAC;CACN;AALD,oCAKC;AAyED,IAAY,UAIX;AAJD,WAAY,UAAU;IACpB,mCAAqB,CAAA;IACrB,mCAAqB,CAAA;IACrB,6BAAe,CAAA;AACjB,CAAC,EAJW,UAAU,0BAAV,UAAU,QAIrB","sourcesContent":["import { Repository } from 'typeorm';\nimport { User } from 'src/entities/user.entity';\nimport { CreateUserDto } from 'src/dtos/create-user.dto';\nimport { CreateEmailTemplateDto } from 'src/dtos/create-email-template.dto';\nimport { CreateSmsTemplateDto } from 'src/dtos/create-sms-template.dto';\nimport { SignUpDto } from 'src/dtos/sign-up.dto';\nimport { Readable } from 'stream';\nimport { CreateMediaStorageProviderMetadataDto } from './dtos/create-media-storage-provider-metadata.dto';\nimport { DatasourceType } from './dtos/create-model-metadata.dto';\nimport { CreateModuleMetadataDto } from './dtos/create-module-metadata.dto';\nimport { CreateRoleMetadataDto } from './dtos/create-role-metadata.dto';\nimport { CreateSecurityRuleDto } from './dtos/create-security-rule.dto';\nimport { FieldMetadata } from './entities/field-metadata.entity';\nimport { Media } from './entities/media.entity';\nimport { DashboardQuestion } from './entities/dashboard-question.entity';\nimport { ComputedFieldMetadata } from './helpers/solid-registry';\nimport { SqlExpression } from './services/question-data-providers/chartjs-sql-data-provider.service';\nimport { CreateDashboardDto } from './dtos/create-dashboard.dto';\nimport { AiInteraction } from './entities/ai-interaction.entity';\nimport { ActiveUserData } from './interfaces/active-user-data.interface';\nimport { SecurityRuleConfig } from './dtos/security-rule-config.dto';\nimport { SecurityRule } from './entities/security-rule.entity';\n\nexport interface FieldCrudManager {\n  // fieldMetadata: FieldMetadata;\n  // entityManager?: EntityManager;\n  // createDto: any;\n  // files : Array<Express.Multer.File>;\n  validate(\n    dto: any,\n    files: Array<Express.Multer.File>,\n  ): ValidationError[] | Promise<ValidationError[]>;\n  transformForCreate(dto: any, ctxt?: any): any | Promise<any>;\n}\n\nexport interface ValidationError {\n  field: string;\n  error: string;\n}\n\n// export interface MediaStorage\nexport interface MediaStorageProvider<T> {\n  store(files: Express.Multer.File[], entity: T, mediaFieldMetadata: FieldMetadata): Promise<Media[]>;\n  delete(entity: T, mediaFieldMetadata: FieldMetadata): Promise<void>;\n  retrieve(entity: T, mediaFieldMetadata: FieldMetadata): Promise<Media[]>;\n  storeStreams(streamPairs: [Readable, string][], entity: T, mediaFieldMetadata: FieldMetadata): Promise<Media[]>;\n  // delete(file: string): Promise<void>;\n}\n\nexport interface ModuleMetadataConfiguration {\n  moduleMetadata?: CreateModuleMetadataDto,\n  roles?: CreateRoleMetadataDto[],\n  users?: SignUpDto[],\n  actions?: any[],\n  menus?: any[],\n  views?: any[],\n  emailTemplates?: CreateEmailTemplateDto[],\n  smsTemplates?: CreateSmsTemplateDto[],\n  mediaStorageProviders?: CreateMediaStorageProviderMetadataDto[]\n  securityRules?: CreateSecurityRuleDto[],\n  dashboards?: CreateDashboardDto[],\n}\n\nexport enum SettingLevel {\n  SystemEnv = 'system-env',\n  SystemAdminReadonly = 'system-admin-readonly',\n  SystemAdminEditable = 'system-admin-editable',\n  InternalUser = \"internal-user\"\n}\n\nexport type SettingControlType =\n  | 'shortText'\n  | 'longText'\n  | 'numeric'\n  | 'boolean'\n  | 'date'\n  | 'datetime'\n  | 'mediaSingle'\n  | 'selectionStatic'\n  | 'custom';\n\nexport interface SettingOption {\n  label: string;\n  value: string | number | boolean;\n}\n\nexport interface SettingDefinition<T = any> {\n  moduleName: string;\n  key: string;\n  value: T;\n  level: SettingLevel;\n  encrypted?: boolean;\n  label?: string;\n  description?: string;\n  placeholder?: string;\n  group?: string;\n  sortOrder?: number;\n  controlType?: SettingControlType;\n  options?: SettingOption[];\n  settingsWidget?: string; // for custom controlType, specify the frontend widget to use\n}\n\nexport interface AdminSettingDefinition<T = any> extends SettingDefinition<T> {\n  editable: boolean;\n}\n\nexport interface AdminSettingsResponse<T = any> {\n  data: AdminSettingDefinition<T>[];\n}\n\n// solid-core/settings/settings-provider.interface.ts\nexport interface ISettingsProvider {\n  getSettings(): SettingDefinition[];\n}\n\nexport interface CodeGenerationOptions {\n  moduleId?: number;\n  moduleUserKey?: string;\n  modelId?: number;\n  modelUserKey?: string;\n  fieldIdsForRemoval?: number[];\n  fieldNamesForRemoval?: string[];\n  dryRun?: boolean;\n  fieldIdsForRefresh?: number[];\n  fieldNamesForRefresh?: string[];\n}\n\nexport interface TriggerMcpClientOptions {\n  aiInteractionId: number;\n  moduleName: string;\n}\n\nexport interface McpResponse {\n  success: boolean;\n  request: string;\n  response: string;\n  model?: string;\n  tools_invoked?: string[];\n  tool_calls?: any[];\n  duration_ms?: number;\n  errors?: string[];\n  error_trace?: string[];\n  content_type?: string;\n}\n\nexport interface ISelectionProviderContext {\n  limit: number;\n  offset: number;\n  formValues: Record<string, any>;\n  //Attribute to control the validation on creating the record\n  validateOnSave?: boolean;\n  // query: string;\n}\n\nexport interface ISelectionProviderValues {\n  label: string;\n  value: string;\n}\n\nexport interface ISelectionProvider<T extends ISelectionProviderContext> {\n  help(): string;\n\n  name(): string;\n\n  value(optionValue: string, ctxt: T): Promise<ISelectionProviderValues | any>;\n\n  values(query: any, ctxt: T): Promise<readonly ISelectionProviderValues[]>;\n}\n\nexport interface IDashboardVariableSelectionProvider<T extends ISelectionProviderContext> extends ISelectionProvider<T> {\n}\n\nexport interface IMcpToolResponseHandler {\n  apply(aiInteraction: AiInteraction);\n}\n\nexport interface QuestionSqlDataProviderContext {\n    // questionSqlDatasetConfig: QuestionSqlDatasetConfig;\n    // questionId: number;\n    // question: Question;\n    expressions?: SqlExpression[]\n}\nexport interface IDashboardQuestionDataProvider<TContext, TData> {\n  help(): string;\n\n  name(): string;\n\n  getData(question: DashboardQuestion, ctxt?: TContext): Promise<TData[] | TData>;\n}\n\n/**\n * @deprecated Use `IEntityComputedFieldProvider` instead.\n */\nexport interface IComputedFieldProvider<T> {\n  help(): string;\n\n  name(): string;\n\n  valueType(): string;\n\n  computeValue(dto: any, ctxt: T): Promise<string | number>; // FIXME : Improve the types to make it more specific using generics\n}\n\nexport interface IEntityComputedFieldProvider {\n  help(): string;\n\n  name(): string;\n}\n\nexport interface IEntityPreComputeFieldProvider<TTriggerEntity, TContext, TValue = void> extends IEntityComputedFieldProvider {\n  preComputeValue(triggerEntity: TTriggerEntity, computedFieldMetadata: ComputedFieldMetadata<TContext>): Promise<TValue>;\n}\n\nexport interface IEntityPostComputeFieldProvider<TTriggerEntity, TContext> extends IEntityComputedFieldProvider {\n  postComputeAndSaveValue(triggerEntity: TTriggerEntity, computedFieldMetadata: ComputedFieldMetadata<TContext>): Promise<void>;\n}\n\nexport interface ISolidDatabaseModule {\n  name(): string;\n\n  type(): DatasourceType;\n}\n\nexport enum EventType {\n  USER_REGISTERED = 'user.registered',\n}\n\nexport class EventDetails<T> {\n  constructor(\n    public type: any,\n    public payload: T,\n  ) { }\n}\n\nexport interface IExtensionUserCreationProvider<T extends User = User, TDto extends CreateUserDto = CreateUserDto> {\n  readonly repo: Repository<T>;\n  buildExtensionEntity(dto: TDto): Promise<T>;\n  roles(dto: TDto): string[];\n}\n\nexport interface IMail<TResponse = unknown> {\n  sendEmail(\n    to: string,\n    subject: string,\n    body: string,\n    shouldQueueEmails: boolean,\n    wrapperAttachments?: MailAttachmentWrapper[],\n    attachments?: MailAttachment[],\n    parentEntity?: any,\n    parentEntityId?: any,\n    cc?: string[],\n    bcc?: string[],\n    from?: string,\n  ): Promise<TResponse>;\n\n  sendEmailUsingTemplate(\n    to: string,\n    templateName: string,\n    templateParams: any,\n    shouldQueueEmails: boolean,\n    wrapperAttachments?: MailAttachmentWrapper[],\n    attachments?: MailAttachment[],\n    parentEntity?: any,\n    parentEntityId?: any,\n    cc?: string[],\n    bcc?: string[],\n    from?: string,\n  ): Promise<TResponse>;\n}\n\nexport interface ISMS {\n  sendSMS(to: string, body: string, shouldQueueSms: boolean): Promise<any>;\n\n  sendSMSUsingTemplate(\n    to: string,\n    templateName: string,\n    templateParams: any,\n    shouldQueueSms: boolean,\n  ): Promise<any>;\n}\n\nexport interface IWhatsAppTransport {\n  sendWhatsAppMessage(\n    to: string,\n    templateId: string,\n    parameters: any,\n    parentEntity?: any,\n    parentEntityId?: any\n  ): Promise<any>;\n}\n\nexport interface MailAttachmentWrapper {\n  relativePath?: string;\n  attachment?: MailAttachment;\n}\n\nexport interface MailAttachment {\n  filename: string;\n  templatePath?: string; // deprecated\n  templateParams?: any; // deprecated\n  content?: string | Buffer;\n  contentType?: string;\n  path?: string; //Filesystem absolute path or URL. \n}\n\nexport enum BrokerType {\n  RabbitMQ = 'rabbitmq',\n  Database = 'database',\n  Redis = 'redis',\n}\n\nexport interface QueuesModuleOptions {\n  name: string;\n  type: BrokerType;\n  queueName: string;\n  prefetch?: number;\n  persistToDatabase?: boolean;\n}\n\nexport type MediaWithFullUrl = Media & {\n  _full_url: string;\n};\n\n\nexport type ErrorCode = string;\n\nexport type ErrorMeta = {\n  message: string;\n  httpStatus?: number;\n};\n\nexport type ErrorRule = {\n  /** Canonical error code. Keep them kebab-case for consistency. */\n  code: ErrorCode;\n  /** Higher runs earlier. Defaults to 0 if not provided. */\n  priority?: number;\n  /** Return true if this rule matches the combined error text. */\n  match: (combinedErrorText: string) => boolean;\n  /** Display + HTTP mapping for this code. */\n  meta: ErrorMeta;\n};\n\nexport interface IErrorCodeProvider {\n  /** Used for registry identity & logs */\n  name(): string;\n\n  /**\n   * Return all rules this provider contributes.\n   * These will be merged with other providers’ rules, then sorted by priority.\n   */\n  rules(): ReadonlyArray<ErrorRule>;\n\n  /**\n   * Optional fallback meta for codes this provider owns (when called by getMessage/getHttpStatus).\n   * If omitted, the ErrorMapperService will rely on the rule.meta of the first matching rule.\n   */\n  resolve?(code: ErrorCode): ErrorMeta | undefined;\n}\n\n// MCP Tool Related\n\nexport type PlanStep = CreateNewFileStep | RegisterNestProviderStep | AddMethodToExistingClassStep | RegisterSolidXExtensionComponentStep | AddListViewButtonStep | AddFormViewButtonStep | AddImportStep;\nexport interface AddImportStep {\n  type: \"addImport\";\n  path: string;                 // e.g. apps/api/src/address-master/services/address-master.service.ts\n  importStatement: string;      // e.g. import { Something } from 'somewhere';\n  overwrite?: boolean;        // default=false\n  rationale?: string;           // optional, ignored by executor\n}\n\nexport interface CreateNewFileStep {\n  type: \"createNewFile\";\n  path: string;         // repo-relative e.g. solid-api/api/src/computed-providers/foo.provider.ts\n  content: string;      // full file content\n  overwrite?: boolean;  // default=false\n  rationale?: string;   // optional, ignored by executor\n}\n\nexport interface RegisterNestProviderStep {\n  type: \"registerNestProvider\";\n  modulePath: string;           // e.g. apps/api/src/address-master/address-master.module.ts\n  providerClassName: string;    // e.g. StateTotalCitiesComputedFieldProvider\n  importFrom: string;           // e.g. \"@/computed-providers/state-total-cities.provider\"\n  registerIn: Array<\"providers\" | \"exports\">; // which arrays to add to\n  uniqueGuard?: boolean;        // default=true\n  rationale?: string;           // optional, ignored by executor\n}\n\nexport interface AddMethodToExistingClassStep {\n  type: \"addMethodToExistingClass\";\n  path: string;                 // e.g. apps/api/src/address-master/services/address-master.service.ts\n  className: string             // e.g. CountryService\n  methodName: string            // e.g. addCountry\n  content: string               // Full Method Code\n  importStatements?: string[];  // e.g. [ \"import { X } from 'y';\" ]\n  rationale?: string;           // optional, ignored by executor\n}\n\nexport interface RegisterSolidXExtensionComponentStep {\n  type: \"registerSolidXExtensionComponent\";\n  path: string;                 // e.g. apps/api/src/address-master/services/address-master.service.ts\n  content?: string;               // Code\n  importExtensionComponent?: string;\n}\n\nexport interface AddListViewButtonStep {\n  type: \"addListViewButton\";\n  moduleName?: string;\n  modelName?: string;\n  buttonType?: string;\n  content?: string;            // Code\n}\n\nexport interface AddFormViewButtonStep {\n  type: \"addFormViewButton\";\n  moduleName?: string;\n  modelName?: string;\n  buttonType?: string;\n  content?: string;            // Code\n}\n\nexport interface McpComputedProviderResponse {\n  plan: PlanStep[];\n  // provider?: any;  // (intentionally ignored per your note)\n}\n\nexport interface ISecurityRuleConfigProvider {\n  securityRuleConfig(activeUser: ActiveUserData, securityRule: SecurityRule): Promise<SecurityRuleConfig>;\n}\n\n\nexport interface AwsS3Config {\n  S3_AWS_ACCESS_KEY: string;\n  S3_AWS_SECRET_KEY: string;\n  S3_AWS_REGION_NAME: string;\n}\n\n// Prevents inference so callers must provide explicit type arguments; reusable for other APIs.\nexport type NoInfer<T> = [T][T extends any ? 0 : never];\n\nexport type AuditEventType = 'insert' | 'update' | 'delete';\n\nexport interface AuditQueuePayload {\n    eventType: AuditEventType;\n    modelName: string;\n    entityId: string | number | null;\n    occurredAt: string;\n    after?: any;\n    before?: any;\n    updatedColumnNames?: string[];\n    userId?: number | null;\n}\n\n"]}

package/dist/passport-strategies/facebook-oauth.strategy.d.ts

@@ -0,0 +1,16 @@
+import { Strategy } from "passport-facebook";
+import { SettingService } from "../services/setting.service";
+import { UserService } from "../services/user.service";
+declare const FacebookOauthGuard_base: import("@nestjs/passport").Type<import("@nestjs/passport").IAuthGuard>;
+export declare class FacebookOauthGuard extends FacebookOauthGuard_base {
+}
+declare const FacebookOAuthStrategy_base: new (...args: any[]) => Strategy;
+export declare class FacebookOAuthStrategy extends FacebookOAuthStrategy_base {
+    private readonly userService;
+    private readonly settingService;
+    private readonly logger;
+    constructor(userService: UserService, settingService: SettingService);
+    validate(_accessToken: string, _refreshToken: string, profile: any, done: any): Promise<any>;
+}
+export {};
+//# sourceMappingURL=facebook-oauth.strategy.d.ts.map

package/dist/passport-strategies/facebook-oauth.strategy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"facebook-oauth.strategy.d.ts","sourceRoot":"","sources":["../../src/passport-strategies/facebook-oauth.strategy.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAO7C,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;;AAMvD,qBACa,kBAAmB,SAAQ,uBAAqB;CAAG;;AAEhE,qBACa,qBAAsB,SAAQ,0BAG1C;IAIG,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,cAAc;IAJjC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA0C;gBAG9C,WAAW,EAAE,WAAW,EACxB,cAAc,EAAE,cAAc;IAgD3C,QAAQ,CACZ,YAAY,EAAE,MAAM,EACpB,aAAa,EAAE,MAAM,EACrB,OAAO,EAAE,GAAG,EACZ,IAAI,EAAE,GAAG,GACR,OAAO,CAAC,GAAG,CAAC;CAiChB"}

package/dist/passport-strategies/facebook-oauth.strategy.js

@@ -0,0 +1,96 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var FacebookOAuthStrategy_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FacebookOAuthStrategy = exports.FacebookOauthGuard = void 0;
+const common_1 = require("@nestjs/common");
+const passport_1 = require("@nestjs/passport");
+const passport_facebook_1 = require("passport-facebook");
+const facebook_oauth_helper_1 = require("../helpers/facebook-oauth.helper");
+const uuid_1 = require("uuid");
+const setting_service_1 = require("../services/setting.service");
+const user_service_1 = require("../services/user.service");
+const DUMMY_CLIENT_ID = "DUMMY_CLIENT_ID";
+const DUMMY_CLIENT_SECRET = "DUMMY_CLIENT_SECRET";
+const DUMMY_CALLBACK_URL = "DUMMY_CALLBACK_URL";
+let FacebookOauthGuard = class FacebookOauthGuard extends (0, passport_1.AuthGuard)("facebook") {
+};
+exports.FacebookOauthGuard = FacebookOauthGuard;
+exports.FacebookOauthGuard = FacebookOauthGuard = __decorate([
+    (0, common_1.Injectable)()
+], FacebookOauthGuard);
+let FacebookOAuthStrategy = FacebookOAuthStrategy_1 = class FacebookOAuthStrategy extends (0, passport_1.PassportStrategy)(passport_facebook_1.Strategy, "facebook") {
+    constructor(userService, settingService) {
+        const clientID = settingService.getConfigValue("FACEBOOK_CLIENT_ID") ??
+            process.env.IAM_FACEBOOK_OAUTH_CLIENT_ID ??
+            DUMMY_CLIENT_ID;
+        const clientSecret = settingService.getConfigValue("FACEBOOK_CLIENT_SECRET") ??
+            process.env.IAM_FACEBOOK_OAUTH_CLIENT_SECRET ??
+            DUMMY_CLIENT_SECRET;
+        const callbackURL = settingService.getConfigValue("FACEBOOK_CALLBACK_URL") ??
+            process.env.IAM_FACEBOOK_OAUTH_CALLBACK_URL ??
+            DUMMY_CALLBACK_URL;
+        const redirectURL = settingService.getConfigValue("FACEBOOK_REDIRECT_URL") ?? process.env.IAM_FACEBOOK_OAUTH_REDIRECT_URL;
+        super({
+            clientID,
+            clientSecret,
+            callbackURL,
+            scope: ["email"],
+            profileFields: ["id", "name", "email", "picture.type(large)"],
+        });
+        this.userService = userService;
+        this.settingService = settingService;
+        this.logger = new common_1.Logger(FacebookOAuthStrategy_1.name);
+        const facebookOauth = {
+            clientID,
+            clientSecret,
+            callbackURL,
+            redirectURL,
+        };
+        if (!(0, facebook_oauth_helper_1.isFacebookOAuthConfigured)(facebookOauth)) {
+            this.logger.debug("Facebook OAuth strategy is not configured");
+        }
+        else {
+            this.logger.debug(`Facebook OAuth configured with callbackURL=${callbackURL}`);
+        }
+    }
+    async validate(_accessToken, _refreshToken, profile, done) {
+        const { id, name, emails, photos } = profile;
+        const loginAccessCode = (0, uuid_1.v4)();
+        const email = emails && emails.length > 0 ? emails[0].value : null;
+        const firstName = name?.givenName || "";
+        const lastName = name?.familyName || "";
+        const fullName = firstName || lastName
+            ? `${firstName} ${lastName}`.trim()
+            : profile.displayName;
+        const user = {
+            provider: "facebook",
+            providerId: id,
+            email: email,
+            name: `${name.givenName} ${name.familyName}`,
+            picture: photos?.[0]?.value,
+            accessCode: loginAccessCode,
+        };
+        await this.userService.resolveUserOnOauthFacebook({
+            ...user,
+            accessToken: _accessToken,
+            refreshToken: null,
+        });
+        done(null, user);
+    }
+};
+exports.FacebookOAuthStrategy = FacebookOAuthStrategy;
+exports.FacebookOAuthStrategy = FacebookOAuthStrategy = FacebookOAuthStrategy_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [user_service_1.UserService,
+        setting_service_1.SettingService])
+], FacebookOAuthStrategy);
+//# sourceMappingURL=facebook-oauth.strategy.js.map

package/dist/passport-strategies/facebook-oauth.strategy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"facebook-oauth.strategy.js","sourceRoot":"","sources":["../../src/passport-strategies/facebook-oauth.strategy.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,2CAAoD;AACpD,+CAA+D;AAC/D,yDAA6C;AAC7C,4EAG2C;AAC3C,+BAAkC;AAElC,iEAA6D;AAC7D,2DAAuD;AAEvD,MAAM,eAAe,GAAG,iBAAiB,CAAC;AAC1C,MAAM,mBAAmB,GAAG,qBAAqB,CAAC;AAClD,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AAGzC,IAAM,kBAAkB,GAAxB,MAAM,kBAAmB,SAAQ,IAAA,oBAAS,EAAC,UAAU,CAAC;CAAG,CAAA;AAAnD,gDAAkB;6BAAlB,kBAAkB;IAD9B,IAAA,mBAAU,GAAE;GACA,kBAAkB,CAAiC;AAGzD,IAAM,qBAAqB,6BAA3B,MAAM,qBAAsB,SAAQ,IAAA,2BAAgB,EACzD,4BAAQ,EACR,UAAU,CACX;IAGC,YACmB,WAAwB,EACxB,cAA8B;QAG/C,MAAM,QAAQ,GACZ,cAAc,CAAC,cAAc,CAAmB,oBAAoB,CAAC;YACrE,OAAO,CAAC,GAAG,CAAC,4BAA4B;YACxC,eAAe,CAAC;QAClB,MAAM,YAAY,GAChB,cAAc,CAAC,cAAc,CAC3B,wBAAwB,CACzB;YACD,OAAO,CAAC,GAAG,CAAC,gCAAgC;YAC5C,mBAAmB,CAAC;QACtB,MAAM,WAAW,GACf,cAAc,CAAC,cAAc,CAC3B,uBAAuB,CACxB;YACD,OAAO,CAAC,GAAG,CAAC,+BAA+B;YAC3C,kBAAkB,CAAC;QACrB,MAAM,WAAW,GACf,cAAc,CAAC,cAAc,CAC3B,uBAAuB,CACxB,IAAI,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC;QAEnD,KAAK,CAAC;YACJ,QAAQ;YACR,YAAY;YACZ,WAAW;YACX,KAAK,EAAE,CAAC,OAAO,CAAC;YAEhB,aAAa,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,qBAAqB,CAAC;SAC9D,CAAC,CAAC;QAhCc,gBAAW,GAAX,WAAW,CAAa;QACxB,mBAAc,GAAd,cAAc,CAAgB;QAJhC,WAAM,GAAG,IAAI,eAAM,CAAC,uBAAqB,CAAC,IAAI,CAAC,CAAC;QAqC/D,MAAM,aAAa,GAA8B;YAC/C,QAAQ;YACR,YAAY;YACZ,WAAW;YACX,WAAW;SACZ,CAAC;QACF,IAAI,CAAC,IAAA,iDAAyB,EAAC,aAAa,CAAC,EAAE,CAAC;YAC9C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;QACjE,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,8CAA8C,WAAW,EAAE,CAC5D,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CACZ,YAAoB,EACpB,aAAqB,EACrB,OAAY,EACZ,IAAS;QAET,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;QAG7C,MAAM,eAAe,GAAW,IAAA,SAAI,GAAE,CAAC;QAEvC,MAAM,KAAK,GAAG,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QAEnE,MAAM,SAAS,GAAG,IAAI,EAAE,SAAS,IAAI,EAAE,CAAC;QACxC,MAAM,QAAQ,GAAG,IAAI,EAAE,UAAU,IAAI,EAAE,CAAC;QACxC,MAAM,QAAQ,GACZ,SAAS,IAAI,QAAQ;YACnB,CAAC,CAAC,GAAG,SAAS,IAAI,QAAQ,EAAE,CAAC,IAAI,EAAE;YACnC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;QAE1B,MAAM,IAAI,GAAG;YACX,QAAQ,EAAE,UAAU;YACpB,UAAU,EAAE,EAAE;YACd,KAAK,EAAE,KAAK;YACZ,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,UAAU,EAAE;YAC5C,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK;YAC3B,UAAU,EAAE,eAAe;SAC5B,CAAC;QAGF,MAAM,IAAI,CAAC,WAAW,CAAC,0BAA0B,CAAC;YAChD,GAAG,IAAI;YACP,WAAW,EAAE,YAAY;YACzB,YAAY,EAAE,IAAI;SACnB,CAAC,CAAC;QAEH,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACnB,CAAC;CACF,CAAA;AA9FY,sDAAqB;gCAArB,qBAAqB;IADjC,IAAA,mBAAU,GAAE;qCAQqB,0BAAW;QACR,gCAAc;GARtC,qBAAqB,CA8FjC","sourcesContent":["import { Injectable, Logger } from \"@nestjs/common\";\nimport { AuthGuard, PassportStrategy } from \"@nestjs/passport\";\nimport { Strategy } from \"passport-facebook\";\nimport {\n  FacebookAuthConfiguration,\n  isFacebookOAuthConfigured,\n} from \"src/helpers/facebook-oauth.helper\";\nimport { v4 as uuid } from \"uuid\";\nimport type { SolidCoreSetting } from \"../services/settings/default-settings-provider.service\";\nimport { SettingService } from \"../services/setting.service\";\nimport { UserService } from \"../services/user.service\";\n\nconst DUMMY_CLIENT_ID = \"DUMMY_CLIENT_ID\";\nconst DUMMY_CLIENT_SECRET = \"DUMMY_CLIENT_SECRET\";\nconst DUMMY_CALLBACK_URL = \"DUMMY_CALLBACK_URL\";\n\n@Injectable()\nexport class FacebookOauthGuard extends AuthGuard(\"facebook\") {}\n\n@Injectable()\nexport class FacebookOAuthStrategy extends PassportStrategy(\n  Strategy,\n  \"facebook\",\n) {\n  private readonly logger = new Logger(FacebookOAuthStrategy.name);\n\n  constructor(\n    private readonly userService: UserService,\n    private readonly settingService: SettingService,\n  ) {\n    // Prefer settings cache (same source used by controller validation), fall back to env.\n    const clientID =\n      settingService.getConfigValue<SolidCoreSetting>(\"FACEBOOK_CLIENT_ID\") ??\n      process.env.IAM_FACEBOOK_OAUTH_CLIENT_ID ??\n      DUMMY_CLIENT_ID;\n    const clientSecret =\n      settingService.getConfigValue<SolidCoreSetting>(\n        \"FACEBOOK_CLIENT_SECRET\",\n      ) ??\n      process.env.IAM_FACEBOOK_OAUTH_CLIENT_SECRET ??\n      DUMMY_CLIENT_SECRET;\n    const callbackURL =\n      settingService.getConfigValue<SolidCoreSetting>(\n        \"FACEBOOK_CALLBACK_URL\",\n      ) ??\n      process.env.IAM_FACEBOOK_OAUTH_CALLBACK_URL ??\n      DUMMY_CALLBACK_URL;\n    const redirectURL =\n      settingService.getConfigValue<SolidCoreSetting>(\n        \"FACEBOOK_REDIRECT_URL\",\n      ) ?? process.env.IAM_FACEBOOK_OAUTH_REDIRECT_URL;\n\n    super({\n      clientID,\n      clientSecret,\n      callbackURL,\n      scope: [\"email\"],\n      // Facebook Graph API expects \"email\" and \"picture\", not \"emails\"/\"photos\".\n      profileFields: [\"id\", \"name\", \"email\", \"picture.type(large)\"],\n    });\n\n    const facebookOauth: FacebookAuthConfiguration = {\n      clientID,\n      clientSecret,\n      callbackURL,\n      redirectURL,\n    };\n    if (!isFacebookOAuthConfigured(facebookOauth)) {\n      this.logger.debug(\"Facebook OAuth strategy is not configured\");\n    } else {\n      this.logger.debug(\n        `Facebook OAuth configured with callbackURL=${callbackURL}`,\n      );\n    }\n  }\n\n  async validate(\n    _accessToken: string,\n    _refreshToken: string,\n    profile: any,\n    done: any,\n  ): Promise<any> {\n    const { id, name, emails, photos } = profile;\n\n    // generate a unique access code.\n    const loginAccessCode: string = uuid();\n\n    const email = emails && emails.length > 0 ? emails[0].value : null;\n\n    const firstName = name?.givenName || \"\";\n    const lastName = name?.familyName || \"\";\n    const fullName =\n      firstName || lastName\n        ? `${firstName} ${lastName}`.trim()\n        : profile.displayName;\n\n    const user = {\n      provider: \"facebook\",\n      providerId: id,\n      email: email,\n      name: `${name.givenName} ${name.familyName}`,\n      picture: photos?.[0]?.value,\n      accessCode: loginAccessCode,\n    };\n\n    // store the access code and the access token in the database.\n    await this.userService.resolveUserOnOauthFacebook({\n      ...user,\n      accessToken: _accessToken,\n      refreshToken: null,\n    });\n\n    done(null, user);\n  }\n}\n"]}

package/dist/passport-strategies/microsoft-oauth.strategy.d.ts

@@ -0,0 +1,14 @@
+import { Strategy } from 'passport-microsoft';
+import { UserService } from '../services/user.service';
+declare const MicrosoftOauthGuard_base: import("@nestjs/passport").Type<import("@nestjs/passport").IAuthGuard>;
+export declare class MicrosoftOauthGuard extends MicrosoftOauthGuard_base {
+}
+declare const MicrosoftOAuthStrategy_base: new (...args: any[]) => Strategy;
+export declare class MicrosoftOAuthStrategy extends MicrosoftOAuthStrategy_base {
+    private readonly userService;
+    private readonly logger;
+    constructor(userService: UserService);
+    validate(_accessToken: string, _refreshToken: string, profile: any, done: any): Promise<any>;
+}
+export {};
+//# sourceMappingURL=microsoft-oauth.strategy.d.ts.map

package/dist/passport-strategies/microsoft-oauth.strategy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"microsoft-oauth.strategy.d.ts","sourceRoot":"","sources":["../../src/passport-strategies/microsoft-oauth.strategy.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAG9C,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;;AAOvD,qBACa,mBAAoB,SAAQ,wBAAsB;CAAI;;AAEnE,qBACa,sBAAuB,SAAQ,2BAAuC;IAGrE,OAAO,CAAC,QAAQ,CAAC,WAAW;IAFxC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA2C;gBAErC,WAAW,EAAE,WAAW;IAuB/C,QAAQ,CAAC,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;CA2BnG"}

package/dist/passport-strategies/microsoft-oauth.strategy.js

@@ -0,0 +1,77 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var MicrosoftOAuthStrategy_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MicrosoftOAuthStrategy = exports.MicrosoftOauthGuard = void 0;
+const common_1 = require("@nestjs/common");
+const passport_1 = require("@nestjs/passport");
+const passport_microsoft_1 = require("passport-microsoft");
+const microsoft_oauth_helper_1 = require("../helpers/microsoft-oauth.helper");
+const uuid_1 = require("uuid");
+const user_service_1 = require("../services/user.service");
+const DUMMY_CLIENT_ID = 'DUMMY_CLIENT_ID';
+const DUMMY_CLIENT_SECRET = 'DUMMY_CLIENT_SECRET';
+const DUMMY_TENANT = 'common';
+const DUMMY_CALLBACK_URL = 'DUMMY_CALLBACK_URL';
+let MicrosoftOauthGuard = class MicrosoftOauthGuard extends (0, passport_1.AuthGuard)('microsoft') {
+};
+exports.MicrosoftOauthGuard = MicrosoftOauthGuard;
+exports.MicrosoftOauthGuard = MicrosoftOauthGuard = __decorate([
+    (0, common_1.Injectable)()
+], MicrosoftOauthGuard);
+let MicrosoftOAuthStrategy = MicrosoftOAuthStrategy_1 = class MicrosoftOAuthStrategy extends (0, passport_1.PassportStrategy)(passport_microsoft_1.Strategy, 'microsoft') {
+    constructor(userService) {
+        const clientID = process.env.IAM_MICROSOFT_OAUTH_CLIENT_ID ?? DUMMY_CLIENT_ID;
+        const clientSecret = process.env.IAM_MICROSOFT_OAUTH_CLIENT_SECRET ?? DUMMY_CLIENT_SECRET;
+        const tenant = process.env.IAM_MICROSOFT_OAUTH_TENANT_ID ?? DUMMY_TENANT;
+        const callbackURL = process.env.IAM_MICROSOFT_OAUTH_CALLBACK_URL ?? DUMMY_CALLBACK_URL;
+        const redirectURL = process.env.IAM_MICROSOFT_OAUTH_REDIRECT_URL;
+        super({
+            clientID,
+            clientSecret,
+            callbackURL,
+            tenant,
+            scope: ['user.read'],
+            addUPNAsEmail: true,
+        });
+        this.userService = userService;
+        this.logger = new common_1.Logger(MicrosoftOAuthStrategy_1.name);
+        const microsoftOauth = { clientID, clientSecret, tenant, callbackURL, redirectURL };
+        if (!(0, microsoft_oauth_helper_1.isMicrosoftOAuthConfigured)(microsoftOauth)) {
+            this.logger.debug('Microsoft OAuth strategy is not configured');
+        }
+    }
+    async validate(_accessToken, _refreshToken, profile, done) {
+        const { id, displayName, emails, photos } = profile;
+        const loginAccessCode = (0, uuid_1.v4)();
+        const email = emails?.[0]?.value || profile._json?.mail || profile._json?.userPrincipalName;
+        const user = {
+            provider: 'microsoft',
+            providerId: id,
+            email: email,
+            name: displayName,
+            picture: photos?.[0]?.value || null,
+            accessCode: loginAccessCode,
+        };
+        await this.userService.resolveUserOnOauthMicrosoft({
+            ...user,
+            accessToken: _accessToken,
+            refreshToken: null
+        });
+        done(null, user);
+    }
+};
+exports.MicrosoftOAuthStrategy = MicrosoftOAuthStrategy;
+exports.MicrosoftOAuthStrategy = MicrosoftOAuthStrategy = MicrosoftOAuthStrategy_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [user_service_1.UserService])
+], MicrosoftOAuthStrategy);
+//# sourceMappingURL=microsoft-oauth.strategy.js.map

package/dist/passport-strategies/microsoft-oauth.strategy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"microsoft-oauth.strategy.js","sourceRoot":"","sources":["../../src/passport-strategies/microsoft-oauth.strategy.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,2CAAoD;AACpD,+CAA+D;AAC/D,2DAA8C;AAC9C,8EAA4G;AAC5G,+BAAkC;AAClC,2DAAuD;AAEvD,MAAM,eAAe,GAAG,iBAAiB,CAAC;AAC1C,MAAM,mBAAmB,GAAG,qBAAqB,CAAC;AAClD,MAAM,YAAY,GAAG,QAAQ,CAAC;AAC9B,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AAGzC,IAAM,mBAAmB,GAAzB,MAAM,mBAAoB,SAAQ,IAAA,oBAAS,EAAC,WAAW,CAAC;CAAI,CAAA;AAAtD,kDAAmB;8BAAnB,mBAAmB;IAD/B,IAAA,mBAAU,GAAE;GACA,mBAAmB,CAAmC;AAG5D,IAAM,sBAAsB,8BAA5B,MAAM,sBAAuB,SAAQ,IAAA,2BAAgB,EAAC,6BAAQ,EAAE,WAAW,CAAC;IAGjF,YAA6B,WAAwB;QAEnD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,6BAA6B,IAAI,eAAe,CAAC;QAC9E,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,iCAAiC,IAAI,mBAAmB,CAAC;QAC1F,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,6BAA6B,IAAI,YAAY,CAAC;QACzE,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,gCAAgC,IAAI,kBAAkB,CAAC;QACvF,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC;QAEjE,KAAK,CAAC;YACJ,QAAQ;YACR,YAAY;YACZ,WAAW;YACX,MAAM;YACN,KAAK,EAAE,CAAC,WAAW,CAAC;YACpB,aAAa,EAAE,IAAI;SACpB,CAAC,CAAC;QAfwB,gBAAW,GAAX,WAAW,CAAa;QAFpC,WAAM,GAAG,IAAI,eAAM,CAAC,wBAAsB,CAAC,IAAI,CAAC,CAAC;QAmBhE,MAAM,cAAc,GAA+B,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC;QAChH,IAAI,CAAC,IAAA,mDAA0B,EAAC,cAAc,CAAC,EAAE,CAAC;YAChD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,YAAoB,EAAE,aAAqB,EAAE,OAAY,EAAE,IAAS;QACjF,MAAM,EAAE,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;QAGpD,MAAM,eAAe,GAAW,IAAA,SAAI,GAAE,CAAC;QAGvC,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,OAAO,CAAC,KAAK,EAAE,IAAI,IAAI,OAAO,CAAC,KAAK,EAAE,iBAAiB,CAAC;QAE5F,MAAM,IAAI,GAAG;YACX,QAAQ,EAAE,WAAW;YACrB,UAAU,EAAE,EAAE;YACd,KAAK,EAAE,KAAK;YACZ,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,IAAI;YACnC,UAAU,EAAE,eAAe;SAC5B,CAAC;QAGF,MAAM,IAAI,CAAC,WAAW,CAAC,2BAA2B,CAAC;YAC/C,GAAG,IAAI;YACP,WAAW,EAAE,YAAY;YACzB,YAAY,EAAE,IAAI;SACrB,CAAC,CAAC;QAEH,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACnB,CAAC;CACF,CAAA;AArDY,wDAAsB;iCAAtB,sBAAsB;IADlC,IAAA,mBAAU,GAAE;qCAI+B,0BAAW;GAH1C,sBAAsB,CAqDlC","sourcesContent":["import { Injectable, Logger } from '@nestjs/common';\nimport { AuthGuard, PassportStrategy } from '@nestjs/passport';\nimport { Strategy } from 'passport-microsoft';\nimport { MicrosoftAuthConfiguration, isMicrosoftOAuthConfigured } from 'src/helpers/microsoft-oauth.helper';\nimport { v4 as uuid } from 'uuid';\nimport { UserService } from '../services/user.service';\n\nconst DUMMY_CLIENT_ID = 'DUMMY_CLIENT_ID';\nconst DUMMY_CLIENT_SECRET = 'DUMMY_CLIENT_SECRET';\nconst DUMMY_TENANT = 'common';\nconst DUMMY_CALLBACK_URL = 'DUMMY_CALLBACK_URL';\n\n@Injectable()\nexport class MicrosoftOauthGuard extends AuthGuard('microsoft') { }\n\n@Injectable()\nexport class MicrosoftOAuthStrategy extends PassportStrategy(Strategy, 'microsoft') {\n  private readonly logger = new Logger(MicrosoftOAuthStrategy.name);\n\n  constructor(private readonly userService: UserService) {\n    // Reading configuration from environment variables (Static approach like Google)\n    const clientID = process.env.IAM_MICROSOFT_OAUTH_CLIENT_ID ?? DUMMY_CLIENT_ID;\n    const clientSecret = process.env.IAM_MICROSOFT_OAUTH_CLIENT_SECRET ?? DUMMY_CLIENT_SECRET;\n    const tenant = process.env.IAM_MICROSOFT_OAUTH_TENANT_ID ?? DUMMY_TENANT;\n    const callbackURL = process.env.IAM_MICROSOFT_OAUTH_CALLBACK_URL ?? DUMMY_CALLBACK_URL;\n    const redirectURL = process.env.IAM_MICROSOFT_OAUTH_REDIRECT_URL;\n\n    super({\n      clientID,\n      clientSecret,\n      callbackURL,\n      tenant,\n      scope: ['user.read'],\n      addUPNAsEmail: true,\n    });\n\n    const microsoftOauth: MicrosoftAuthConfiguration = { clientID, clientSecret, tenant, callbackURL, redirectURL };\n    if (!isMicrosoftOAuthConfigured(microsoftOauth)) {\n      this.logger.debug('Microsoft OAuth strategy is not configured');\n    }\n  }\n\n  async validate(_accessToken: string, _refreshToken: string, profile: any, done: any): Promise<any> {\n    const { id, displayName, emails, photos } = profile;\n\n    // generate a unique access code. \n    const loginAccessCode: string = uuid();\n\n    // Handle email fallback logic within the standard validate flow\n    const email = emails?.[0]?.value || profile._json?.mail || profile._json?.userPrincipalName;\n\n    const user = {\n      provider: 'microsoft',\n      providerId: id,\n      email: email,\n      name: displayName,\n      picture: photos?.[0]?.value || null,\n      accessCode: loginAccessCode,\n    };\n\n    // store the access code and the access token in the database. \n    await this.userService.resolveUserOnOauthMicrosoft({ \n        ...user, \n        accessToken: _accessToken, \n        refreshToken: null \n    });\n\n    done(null, user);\n  }\n}"]}

package/dist/seeders/seed-data/solid-core-metadata.json

@@ -1511,7 +1511,7 @@
                         "encrypt": false,
                         "relationType": "many-to-many",
                         "relationCoModelSingularName": "roleMetadata",
-                        "relationCoModelFieldName": "users",
+                        "relationCoModelFieldName": "menuItems",
                         "relationCreateInverse": true,
                         "relationCascade": "set null",
                         "relationModelModuleName": "solid-core",
@@ -3780,7 +3780,9 @@
                             "audit_insert:audit_insert",
                             "audit_update:audit_update",
                             "audit_delete:audit_delete",
-                            "custom:custom"
+                            "custom:custom",
+                            "note:note",
+                            "task:task"
                         ]
                     },
                     {
@@ -3891,6 +3893,21 @@
                         "private": false,
                         "encrypt": false,
                         "isSystem": false
+                    },
+                    {
+                        "name": "status",
+                        "displayName": "Message Status",
+                        "type": "selectionStatic",
+                        "defaultValue": "pending",
+                        "length": 256,
+                        "required": false,
+                        "index": false,
+                        "isSystem": false,
+                        "selectionValueType": "string",
+                        "selectionStaticValues": [
+                            "pending:pending",
+                            "completed:completed"
+                        ]
                     }
                 ]
             },
@@ -5907,7 +5924,8 @@
     },
     "permissions": [
         "mcp:invoke",
-        "agent:invoke"
+        "agent:invoke",
+        "settings:view_encrypted"
     ],
     "roles": [
         {
@@ -5951,6 +5969,7 @@
                 "ChatterMessageController.getChatterMessages",
                 "ChatterMessageController.postMessage",
                 "ChatterMessageController.findMany",
+                "ChatterMessageController.markCompleted",
                 "ImportTransactionController.getImportTemplate",
                 "ImportTransactionController.getImportInstructions",
                 "ImportTransactionController.getImportMappingInfo",
@@ -6408,38 +6427,12 @@
             "modelUserKey": "userActivityHistory"
         },
         {
-            "displayName": "App Settings",
-            "name": "appSettings-action",
-            "type": "custom",
-            "domain": "",
-            "context": "",
-            "customComponent": "/admin/core/solid-core/settings/app-settings",
-            "customIsModal": true,
-            "serverEndpoint": "",
-            "viewUserKey": "",
-            "moduleUserKey": "solid-core",
-            "modelUserKey": "setting"
-        },
-        {
-            "displayName": "Authentication Settings Action",
-            "name": "authenticationSettings-action",
-            "type": "custom",
-            "domain": "",
-            "context": "",
-            "customComponent": "/admin/core/solid-core/settings/authentication-settings",
-            "customIsModal": true,
-            "serverEndpoint": "",
-            "viewUserKey": "",
-            "moduleUserKey": "solid-core",
-            "modelUserKey": "setting"
-        },
-        {
-            "displayName": "Misc Action",
-            "name": "miscSettings-action",
+            "displayName": "Settings",
+            "name": "settings-action",
             "type": "custom",
             "domain": "",
             "context": "",
-            "customComponent": "/admin/core/solid-core/settings/misc-settings",
+            "customComponent": "/admin/core/settings",
             "customIsModal": true,
             "serverEndpoint": "",
             "viewUserKey": "",
@@ -6920,35 +6913,11 @@
             "displayName": "Settings",
             "name": "settings-menu-item",
             "sequenceNumber": 9,
-            "actionUserKey": "",
+            "actionUserKey": "settings-action",
             "moduleUserKey": "solid-core",
             "parentMenuItemUserKey": "",
             "iconName": "settings"
         },
-        {
-            "displayName": "App Settings",
-            "name": "appSettings-menu-item",
-            "sequenceNumber": 1,
-            "actionUserKey": "appSettings-action",
-            "moduleUserKey": "solid-core",
-            "parentMenuItemUserKey": "settings-menu-item"
-        },
-        {
-            "displayName": "Authentication Settings",
-            "name": "authenticationSettings-menu-item",
-            "sequenceNumber": 2,
-            "actionUserKey": "authenticationSettings-action",
-            "moduleUserKey": "solid-core",
-            "parentMenuItemUserKey": "settings-menu-item"
-        },
-        {
-            "displayName": "Misc",
-            "name": "miscSettings-menu-item",
-            "sequenceNumber": 3,
-            "actionUserKey": "miscSettings-action",
-            "moduleUserKey": "solid-core",
-            "parentMenuItemUserKey": "settings-menu-item"
-        },
         {
             "displayName": "Model Sequence",
             "name": "modelSequence-menu-item",
@@ -10518,7 +10487,7 @@
                     "edit": true,
                     "delete": true,
                     "groupBy": "stage",
-                    "draggable": true,
+                    "draggable": false,
                     "allowedViews": [
                         "list",
                         "kanban"

package/dist/services/api-key.service.d.ts

@@ -4,17 +4,33 @@ import { UserApiKey } from '../entities/user-api-key.entity';
 import { ActiveUserData } from '../interfaces/active-user-data.interface';
 import { UserApiKeyRepository } from '../repository/user-api-key.repository';
 import { PermissionMetadataService } from '../services/permission-metadata.service';
+import { AuthenticationService } from './authentication.service';
+import { UserRepository } from '../repository/user.repository';
 export declare class ApiKeyService {
     private readonly apiKeyRepository;
     private readonly permissionMetadataService;
+    private readonly authenticationService;
+    private readonly userRepository;
     private readonly logger;
-    constructor(apiKeyRepository: UserApiKeyRepository, permissionMetadataService: PermissionMetadataService);
+    constructor(apiKeyRepository: UserApiKeyRepository, permissionMetadataService: PermissionMetadataService, authenticationService: AuthenticationService, userRepository: UserRepository);
     generate(userId: number, dto: CreateApiKeyDto): Promise<{
         apiKey: string;
         record: UserApiKey;
     }>;
     validate(rawKey: string): Promise<ActiveUserData>;
     updateKey(id: number, userId: number, dto: UpdateApiKeyDto): Promise<void>;
+    apiKeyMe(apiKey: string): Promise<{
+        accessToken: string;
+        refreshToken: string;
+        user: {
+            email: string;
+            mobile: string;
+            username: string;
+            forcePasswordChange: boolean;
+            id: number;
+            roles: string[];
+        };
+    }>;
     private hash;
 }
 //# sourceMappingURL=api-key.service.d.ts.map

package/dist/services/api-key.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api-key.service.d.ts","sourceRoot":"","sources":["../../src/services/api-key.service.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,MAAM,kCAAkC,CAAC;AAE9D,OAAO,EAAE,cAAc,EAAE,MAAM,2CAA2C,CAAC;AAC3E,OAAO,EAAE,oBAAoB,EAAE,MAAM,wCAAwC,CAAC;AAC9E,OAAO,EAAE,yBAAyB,EAAE,MAAM,0CAA0C,CAAC;AAErF,qBACa,aAAa;IAIlB,OAAO,CAAC,QAAQ,CAAC,gBAAgB;IACjC,OAAO,CAAC,QAAQ,CAAC,yBAAyB;IAJ9C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAkC;gBAGpC,gBAAgB,EAAE,oBAAoB,EACtC,yBAAyB,EAAE,yBAAyB;IAGnE,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,UAAU,CAAA;KAAE,CAAC;IA+B/F,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IAkCjD,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;IAiBhF,OAAO,CAAC,IAAI;CAGf"}
+{"version":3,"file":"api-key.service.d.ts","sourceRoot":"","sources":["../../src/services/api-key.service.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,MAAM,kCAAkC,CAAC;AAE9D,OAAO,EAAE,cAAc,EAAE,MAAM,2CAA2C,CAAC;AAC3E,OAAO,EAAE,oBAAoB,EAAE,MAAM,wCAAwC,CAAC;AAC9E,OAAO,EAAE,yBAAyB,EAAE,MAAM,0CAA0C,CAAC;AACrF,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAEhE,qBACa,aAAa;IAIlB,OAAO,CAAC,QAAQ,CAAC,gBAAgB;IACjC,OAAO,CAAC,QAAQ,CAAC,yBAAyB;IAC1C,OAAO,CAAC,QAAQ,CAAC,qBAAqB;IACtC,OAAO,CAAC,QAAQ,CAAC,cAAc;IANnC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAkC;gBAGpC,gBAAgB,EAAE,oBAAoB,EACtC,yBAAyB,EAAE,yBAAyB,EACpD,qBAAqB,EAAE,qBAAqB,EAC5C,cAAc,EAAE,cAAc;IAG7C,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,eAAe,GAAG,OAAO,CAAG;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,UAAU,CAAA;KAAE,CAAE;IA+BlG,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAG,cAAc,CAAE;IAkCpD,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;IAkB1E,QAAQ,CAAC,MAAM,EAAE,MAAM;;;;;;;;;;;;IAoC7B,OAAO,CAAC,IAAI;CAGf"}

package/dist/services/api-key.service.js

@@ -13,14 +13,19 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.ApiKeyService = void 0;
 const common_1 = require("@nestjs/common");
 const crypto_1 = require("crypto");
+const error_messages_1 = require("../constants/error-messages");
 const user_api_key_entity_1 = require("../entities/user-api-key.entity");
 const user_entity_1 = require("../entities/user.entity");
 const user_api_key_repository_1 = require("../repository/user-api-key.repository");
 const permission_metadata_service_1 = require("./permission-metadata.service");
+const authentication_service_1 = require("./authentication.service");
+const user_repository_1 = require("../repository/user.repository");
 let ApiKeyService = ApiKeyService_1 = class ApiKeyService {
-    constructor(apiKeyRepository, permissionMetadataService) {
+    constructor(apiKeyRepository, permissionMetadataService, authenticationService, userRepository) {
         this.apiKeyRepository = apiKeyRepository;
         this.permissionMetadataService = permissionMetadataService;
+        this.authenticationService = authenticationService;
+        this.userRepository = userRepository;
         this.logger = new common_1.Logger(ApiKeyService_1.name);
     }
     async generate(userId, dto) {
@@ -85,6 +90,35 @@ let ApiKeyService = ApiKeyService_1 = class ApiKeyService {
             .where('id = :id', { id })
             .execute();
     }
+    async apiKeyMe(apiKey) {
+        const hasedKey = this.hash(apiKey);
+        const apiKeyRecord = await this.apiKeyRepository.findOne({
+            where: {
+                hashedKey: hasedKey,
+            },
+            relations: {
+                user: {
+                    roles: true
+                }
+            }
+        });
+        if (!apiKeyRecord) {
+            throw new common_1.UnauthorizedException(error_messages_1.ERROR_MESSAGES.INVALID_CREDENTIALS);
+        }
+        const user = apiKeyRecord.user;
+        const tokens = await this.authenticationService.generateTokens(user);
+        return {
+            user: {
+                email: user.email,
+                mobile: user.mobile,
+                username: user.username,
+                forcePasswordChange: user.forcePasswordChange,
+                id: user.id,
+                roles: user.roles.map((role) => role.name)
+            },
+            ...tokens
+        };
+    }
     hash(rawKey) {
         return (0, crypto_1.createHash)('sha256').update(rawKey).digest('hex');
     }
@@ -93,6 +127,8 @@ exports.ApiKeyService = ApiKeyService;
 exports.ApiKeyService = ApiKeyService = ApiKeyService_1 = __decorate([
     (0, common_1.Injectable)(),
     __metadata("design:paramtypes", [user_api_key_repository_1.UserApiKeyRepository,
-        permission_metadata_service_1.PermissionMetadataService])
+        permission_metadata_service_1.PermissionMetadataService,
+        authentication_service_1.AuthenticationService,
+        user_repository_1.UserRepository])
 ], ApiKeyService);
 //# sourceMappingURL=api-key.service.js.map

package/dist/services/api-key.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"api-key.service.js","sourceRoot":"","sources":["../../src/services/api-key.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,2CAMwB;AACxB,mCAAiD;AAGjD,yEAA8D;AAC9D,yDAAgD;AAEhD,mFAA8E;AAC9E,+EAAqF;AAG9E,IAAM,aAAa,qBAAnB,MAAM,aAAa;IAGtB,YACqB,gBAAsC,EACtC,yBAAoD;QADpD,qBAAgB,GAAhB,gBAAgB,CAAsB;QACtC,8BAAyB,GAAzB,yBAAyB,CAA2B;QAJxD,WAAM,GAAG,IAAI,eAAM,CAAC,eAAa,CAAC,IAAI,CAAC,CAAC;IAKtD,CAAC;IAEJ,KAAK,CAAC,QAAQ,CAAC,MAAc,EAAE,GAAoB;QAC/C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,OAAO,CAAC,kBAAI,EAAE;YAC3D,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE;YACrB,MAAM,EAAE,CAAC,IAAI,EAAE,4BAA4B,CAAC;SAC/C,CAAC,CAAC;QAEH,IAAI,CAAC,IAAI,EAAE,0BAA0B,EAAE,CAAC;YACpC,MAAM,IAAI,2BAAkB,CAAC,0CAA0C,CAAC,CAAC;QAC7E,CAAC;QAED,MAAM,MAAM,GAAG,OAAO,GAAG,IAAA,oBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACzD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACpC,MAAM,SAAS,GAAG,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAEjD,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC;YACxC,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,SAAS;YACT,SAAS;YACT,QAAQ,EAAE,IAAI;YACd,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI;YACzD,IAAI;SACP,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAGzC,OAAQ,MAAc,CAAC,SAAS,CAAC;QAEjC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,MAAc;QACzB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAGpC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC;YAClD,KAAK,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE;YACpC,SAAS,EAAE,CAAC,MAAM,EAAE,YAAY,CAAC;SACpC,CAAC,CAAC;QAEH,IAAI,CAAC,SAAS,EAAE,CAAC;YACb,MAAM,IAAI,8BAAqB,EAAE,CAAC;QACtC,CAAC;QAED,IAAI,SAAS,CAAC,SAAS,IAAI,SAAS,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,EAAE,CAAC;YAC1D,MAAM,IAAI,8BAAqB,CAAC,iBAAiB,CAAC,CAAC;QACvD,CAAC;QAGD,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACjF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uCAAuC,SAAS,CAAC,EAAE,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5F,CAAC,CAAC,CAAC;QAEH,MAAM,KAAK,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC9D,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,yBAAyB,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAElF,OAAO;YACH,GAAG,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE;YACtB,QAAQ,EAAE,SAAS,CAAC,IAAI,CAAC,QAAQ;YACjC,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC,KAAK;YAC3B,KAAK;YACL,WAAW,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;SAC9C,CAAC;IACN,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,EAAU,EAAE,MAAc,EAAE,GAAoB;QAC5D,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC;YAClD,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE;SACtC,CAAC,CAAC;QAEH,IAAI,CAAC,SAAS,EAAE,CAAC;YACb,MAAM,IAAI,0BAAiB,CAAC,mBAAmB,CAAC,CAAC;QACrD,CAAC;QAED,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO;aAC9B,kBAAkB,EAAE;aACpB,MAAM,CAAC,gCAAU,CAAC;aAClB,GAAG,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC;aAC/B,KAAK,CAAC,UAAU,EAAE,EAAE,EAAE,EAAE,CAAC;aACzB,OAAO,EAAE,CAAC;IACnB,CAAC;IAEO,IAAI,CAAC,MAAc;QACvB,OAAO,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7D,CAAC;CACJ,CAAA;AA7FY,sCAAa;wBAAb,aAAa;IADzB,IAAA,mBAAU,GAAE;qCAK8B,8CAAoB;QACX,uDAAyB;GALhE,aAAa,CA6FzB","sourcesContent":["import {\n    ForbiddenException,\n    Injectable,\n    Logger,\n    NotFoundException,\n    UnauthorizedException,\n} from '@nestjs/common';\nimport { createHash, randomBytes } from 'crypto';\nimport { CreateApiKeyDto } from 'src/dtos/create-api-key.dto';\nimport { UpdateApiKeyDto } from 'src/dtos/update-api-key.dto';\nimport { UserApiKey } from 'src/entities/user-api-key.entity';\nimport { User } from 'src/entities/user.entity';\nimport { ActiveUserData } from 'src/interfaces/active-user-data.interface';\nimport { UserApiKeyRepository } from 'src/repository/user-api-key.repository';\nimport { PermissionMetadataService } from 'src/services/permission-metadata.service';\n\n@Injectable()\nexport class ApiKeyService {\n    private readonly logger = new Logger(ApiKeyService.name);\n\n    constructor(\n        private readonly apiKeyRepository: UserApiKeyRepository,\n        private readonly permissionMetadataService: PermissionMetadataService,\n    ) {}\n\n    async generate(userId: number, dto: CreateApiKeyDto): Promise<{ apiKey: string; record: UserApiKey }> {\n        const user = await this.apiKeyRepository.manager.findOne(User, {\n            where: { id: userId },\n            select: ['id', 'isAllowedToGenerateApiKeys'],\n        });\n\n        if (!user?.isAllowedToGenerateApiKeys) {\n            throw new ForbiddenException('You are not allowed to generate API keys');\n        }\n\n        const rawKey = 'sldx_' + randomBytes(32).toString('hex');\n        const hashedKey = this.hash(rawKey);\n        const maskedKey = 'sldx_****' + rawKey.slice(-4);\n\n        const record = this.apiKeyRepository.create({\n            name: dto.name,\n            hashedKey,\n            maskedKey,\n            isActive: true,\n            expiresAt: dto.expiresAt ? new Date(dto.expiresAt) : null,\n            user,\n        });\n\n        await this.apiKeyRepository.save(record);\n\n        // Strip hashedKey from the returned record — maskedKey is all the UI needs\n        delete (record as any).hashedKey;\n\n        return { apiKey: rawKey, record };\n    }\n\n    async validate(rawKey: string): Promise<ActiveUserData> {\n        const hashedKey = this.hash(rawKey);\n\n        // Bypass security rules for auth validation — must find the key regardless of caller context\n        const keyRecord = await this.apiKeyRepository.findOne({\n            where: { hashedKey, isActive: true },\n            relations: ['user', 'user.roles'],\n        });\n\n        if (!keyRecord) {\n            throw new UnauthorizedException();\n        }\n\n        if (keyRecord.expiresAt && keyRecord.expiresAt < new Date()) {\n            throw new UnauthorizedException('API key expired');\n        }\n\n        // Fire-and-forget — does not need security rule context\n        this.apiKeyRepository.update(keyRecord.id, { lastUsedAt: new Date() }).catch((err) => {\n            this.logger.warn(`Failed to update lastUsedAt for key ${keyRecord.id}: ${err.message}`);\n        });\n\n        const roles = (keyRecord.user.roles ?? []).map((r) => r.name);\n        const permissions = await this.permissionMetadataService.findAllUsingRoles(roles);\n\n        return {\n            sub: keyRecord.user.id,\n            username: keyRecord.user.username,\n            email: keyRecord.user.email,\n            roles,\n            permissions: permissions.map((p) => p.name),\n        };\n    }\n\n    async updateKey(id: number, userId: number, dto: UpdateApiKeyDto): Promise<void> {\n        const keyRecord = await this.apiKeyRepository.findOne({\n            where: { id, user: { id: userId } },\n        });\n\n        if (!keyRecord) {\n            throw new NotFoundException('API key not found');\n        }\n\n        await this.apiKeyRepository.manager\n            .createQueryBuilder()\n            .update(UserApiKey)\n            .set({ isActive: dto.isActive })\n            .where('id = :id', { id })\n            .execute();\n    }\n\n    private hash(rawKey: string): string {\n        return createHash('sha256').update(rawKey).digest('hex');\n    }\n}\n"]}
+{"version":3,"file":"api-key.service.js","sourceRoot":"","sources":["../../src/services/api-key.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,2CAMwB;AACxB,mCAAiD;AACjD,gEAA8D;AAG9D,yEAA8D;AAC9D,yDAAgD;AAEhD,mFAA8E;AAC9E,+EAAqF;AACrF,qEAAiE;AACjE,mEAAgE;AAGzD,IAAM,aAAa,qBAAnB,MAAM,aAAa;IAGtB,YACqB,gBAAsC,EACtC,yBAAoD,EACpD,qBAA4C,EAC5C,cAA8B;QAH9B,qBAAgB,GAAhB,gBAAgB,CAAsB;QACtC,8BAAyB,GAAzB,yBAAyB,CAA2B;QACpD,0BAAqB,GAArB,qBAAqB,CAAuB;QAC5C,mBAAc,GAAd,cAAc,CAAgB;QANlC,WAAM,GAAG,IAAI,eAAM,CAAC,eAAa,CAAC,IAAI,CAAC,CAAC;IAOtD,CAAC;IAEJ,KAAK,CAAC,QAAQ,CAAC,MAAc,EAAE,GAAoB;QAC3C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,OAAO,CAAC,kBAAI,EAAE;YAC3D,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE;YACrB,MAAM,EAAE,CAAC,IAAI,EAAE,4BAA4B,CAAC;SAC/C,CAAC,CAAC;QAEH,IAAG,CAAC,IAAI,EAAE,0BAA0B,EAAE,CAAC;YACnC,MAAM,IAAI,2BAAkB,CAAC,0CAA0C,CAAC,CAAC;QAC7E,CAAC;QAEL,MAAM,MAAM,GAAG,OAAO,GAAG,IAAA,oBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACrD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACpC,MAAM,SAAS,GAAG,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAEjD,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC;YACxC,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,SAAS;YACT,SAAS;YACT,QAAQ,EAAE,IAAI;YACd,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI;YACzD,IAAI;SACP,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAGzC,OAAO,MAAc,CAAC,SAAS,CAAC;QAEhC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACtC,CAAC;IAEL,KAAK,CAAC,QAAQ,CAAC,MAAc;QACrB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAGpC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC;YAClD,KAAK,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE;YACpC,SAAS,EAAE,CAAC,MAAM,EAAE,YAAY,CAAC;SACpC,CAAC,CAAC;QAEH,IAAG,CAAC,SAAS,EAAE,CAAC;YACZ,MAAM,IAAI,8BAAqB,EAAE,CAAC;QACtC,CAAC;QAEL,IAAG,SAAS,CAAC,SAAS,IAAI,SAAS,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,EAAE,CAAC;YACzD,MAAM,IAAI,8BAAqB,CAAC,iBAAiB,CAAC,CAAC;QACvD,CAAC;QAGD,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACjF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uCAAuC,SAAS,CAAC,EAAE,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5F,CAAC,CAAC,CAAC;QAEH,MAAM,KAAK,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC9D,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,yBAAyB,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAElF,OAAO;YACH,GAAG,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE;YACtB,QAAQ,EAAE,SAAS,CAAC,IAAI,CAAC,QAAQ;YACjC,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC,KAAK;YAC3B,KAAK;YACL,WAAW,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;SAC9C,CAAC;IACN,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,EAAU,EAAE,MAAc,EAAE,GAAoB;QAC5D,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC;YAClD,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE;SACtC,CAAC,CAAC;QAEH,IAAI,CAAC,SAAS,EAAE,CAAC;YACb,MAAM,IAAI,0BAAiB,CAAC,mBAAmB,CAAC,CAAC;QACrD,CAAC;QAED,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO;aAC9B,kBAAkB,EAAE;aACpB,MAAM,CAAC,gCAAU,CAAC;aAClB,GAAG,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC;aAC/B,KAAK,CAAC,UAAU,EAAE,EAAE,EAAE,EAAE,CAAC;aACzB,OAAO,EAAE,CAAC;IACnB,CAAC;IAGD,KAAK,CAAC,QAAQ,CAAC,MAAc;QAEzB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnC,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC;YACrD,KAAK,EAAE;gBACH,SAAS,EAAE,QAAQ;aACtB;YACD,SAAS,EAAE;gBACP,IAAI,EAAE;oBACF,KAAK,EAAE,IAAI;iBACd;aACJ;SACJ,CAAC,CAAC;QAEH,IAAI,CAAC,YAAY,EAAE,CAAC;YAChB,MAAM,IAAI,8BAAqB,CAAC,+BAAc,CAAC,mBAAmB,CAAC,CAAC;QACxE,CAAC;QAED,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC;QAE/B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QAGrE,OAAO;YACH,IAAI,EAAE;gBACF,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;gBAC7C,EAAE,EAAE,IAAI,CAAC,EAAE;gBACX,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;aAC7C;YACD,GAAG,MAAM;SACZ,CAAA;IACL,CAAC;IAEO,IAAI,CAAC,MAAc;QACvB,OAAO,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7D,CAAC;CACJ,CAAA;AApIY,sCAAa;wBAAb,aAAa;IADzB,IAAA,mBAAU,GAAE;qCAK8B,8CAAoB;QACX,uDAAyB;QAC7B,8CAAqB;QAC5B,gCAAc;GAP1C,aAAa,CAoIzB","sourcesContent":["import {\n    ForbiddenException,\n    Injectable,\n    Logger,\n    NotFoundException,\n    UnauthorizedException,\n} from '@nestjs/common';\nimport { createHash, randomBytes } from 'crypto';\nimport { ERROR_MESSAGES } from 'src/constants/error-messages';\nimport { CreateApiKeyDto } from 'src/dtos/create-api-key.dto';\nimport { UpdateApiKeyDto } from 'src/dtos/update-api-key.dto';\nimport { UserApiKey } from 'src/entities/user-api-key.entity';\nimport { User } from 'src/entities/user.entity';\nimport { ActiveUserData } from 'src/interfaces/active-user-data.interface';\nimport { UserApiKeyRepository } from 'src/repository/user-api-key.repository';\nimport { PermissionMetadataService } from 'src/services/permission-metadata.service';\nimport { AuthenticationService } from './authentication.service';\nimport { UserRepository } from 'src/repository/user.repository';\n\n@Injectable()\nexport class ApiKeyService {\n    private readonly logger = new Logger(ApiKeyService.name);\n\n    constructor(\n        private readonly apiKeyRepository: UserApiKeyRepository,\n        private readonly permissionMetadataService: PermissionMetadataService,\n        private readonly authenticationService: AuthenticationService,\n        private readonly userRepository: UserRepository,\n    ) {}\n\n    async generate(userId: number, dto: CreateApiKeyDto): Promise < { apiKey: string; record: UserApiKey } > {\n            const user = await this.apiKeyRepository.manager.findOne(User, {\n                where: { id: userId },\n                select: ['id', 'isAllowedToGenerateApiKeys'],\n            });\n\n            if(!user?.isAllowedToGenerateApiKeys) {\n                throw new ForbiddenException('You are not allowed to generate API keys');\n            }\n\n        const rawKey = 'sldx_' + randomBytes(32).toString('hex');\n            const hashedKey = this.hash(rawKey);\n            const maskedKey = 'sldx_****' + rawKey.slice(-4);\n\n            const record = this.apiKeyRepository.create({\n                name: dto.name,\n                hashedKey,\n                maskedKey,\n                isActive: true,\n                expiresAt: dto.expiresAt ? new Date(dto.expiresAt) : null,\n                user,\n            });\n\n            await this.apiKeyRepository.save(record);\n\n            // Strip hashedKey from the returned record — maskedKey is all the UI needs\n            delete(record as any).hashedKey;\n\n            return { apiKey: rawKey, record };\n        }\n\n    async validate(rawKey: string): Promise < ActiveUserData > {\n            const hashedKey = this.hash(rawKey);\n\n            // Bypass security rules for auth validation — must find the key regardless of caller context\n            const keyRecord = await this.apiKeyRepository.findOne({\n                where: { hashedKey, isActive: true },\n                relations: ['user', 'user.roles'],\n            });\n\n            if(!keyRecord) {\n                throw new UnauthorizedException();\n            }\n\n        if(keyRecord.expiresAt && keyRecord.expiresAt < new Date()) {\n            throw new UnauthorizedException('API key expired');\n        }\n\n        // Fire-and-forget — does not need security rule context\n        this.apiKeyRepository.update(keyRecord.id, { lastUsedAt: new Date() }).catch((err) => {\n            this.logger.warn(`Failed to update lastUsedAt for key ${keyRecord.id}: ${err.message}`);\n        });\n\n        const roles = (keyRecord.user.roles ?? []).map((r) => r.name);\n        const permissions = await this.permissionMetadataService.findAllUsingRoles(roles);\n\n        return {\n            sub: keyRecord.user.id,\n            username: keyRecord.user.username,\n            email: keyRecord.user.email,\n            roles,\n            permissions: permissions.map((p) => p.name),\n        };\n    }\n\n    async updateKey(id: number, userId: number, dto: UpdateApiKeyDto): Promise<void> {\n        const keyRecord = await this.apiKeyRepository.findOne({\n            where: { id, user: { id: userId } },\n        });\n\n        if (!keyRecord) {\n            throw new NotFoundException('API key not found');\n        }\n\n        await this.apiKeyRepository.manager\n            .createQueryBuilder()\n            .update(UserApiKey)\n            .set({ isActive: dto.isActive })\n            .where('id = :id', { id })\n            .execute();\n    }\n\n\n    async apiKeyMe(apiKey: string) {\n\n        const hasedKey = this.hash(apiKey);\n        const apiKeyRecord = await this.apiKeyRepository.findOne({\n            where: {\n                hashedKey: hasedKey,\n            },\n            relations: {\n                user: {\n                    roles: true\n                }\n            }\n        });\n\n        if (!apiKeyRecord) {\n            throw new UnauthorizedException(ERROR_MESSAGES.INVALID_CREDENTIALS);\n        }\n\n        const user = apiKeyRecord.user;\n\n        const tokens = await this.authenticationService.generateTokens(user);\n\n\n        return {\n            user: {\n                email: user.email,\n                mobile: user.mobile,\n                username: user.username,\n                forcePasswordChange: user.forcePasswordChange,\n                id: user.id,\n                roles: user.roles.map((role) => role.name)\n            },\n            ...tokens\n        }\n    }\n\n    private hash(rawKey: string): string {\n        return createHash('sha256').update(rawKey).digest('hex');\n    }\n}\n"]}