@tstdl/base 0.93.77 → 0.93.80

package/authentication/server/drizzle/meta/0000_snapshot.json

@@ -1,5 +1,5 @@
 {
-  "id": "b41cc4f0-eadb-406c-a969-a21f01b60268",
+  "id": "c88f8c29-7029-4da0-b085-bd866a480533",
   "prevId": "00000000-0000-0000-0000-000000000000",
   "version": "7",
   "dialect": "postgresql",
@@ -17,7 +17,7 @@
         },
         "subject": {
           "name": "subject",
-          "type": "text",
+          "type": "uuid",
           "primaryKey": false,
           "notNull": true
         },
@@ -72,7 +72,22 @@
         }
       },
       "indexes": {},
-      "foreignKeys": {},
+      "foreignKeys": {
+        "credentials_subject_subject_id_fk": {
+          "name": "credentials_subject_subject_id_fk",
+          "tableFrom": "credentials",
+          "tableTo": "subject",
+          "schemaTo": "authentication",
+          "columnsFrom": [
+            "subject"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "no action",
+          "onUpdate": "no action"
+        }
+      },
       "compositePrimaryKeys": {},
       "uniqueConstraints": {
         "credentials_subject_unique": {
@@ -100,7 +115,7 @@
         },
         "subject": {
           "name": "subject",
-          "type": "text",
+          "type": "uuid",
           "primaryKey": false,
           "notNull": true
         },
@@ -167,15 +182,494 @@
         }
       },
       "indexes": {},
-      "foreignKeys": {},
+      "foreignKeys": {
+        "session_subject_subject_id_fk": {
+          "name": "session_subject_subject_id_fk",
+          "tableFrom": "session",
+          "tableTo": "subject",
+          "schemaTo": "authentication",
+          "columnsFrom": [
+            "subject"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "no action",
+          "onUpdate": "no action"
+        }
+      },
       "compositePrimaryKeys": {},
       "uniqueConstraints": {},
       "policies": {},
       "checkConstraints": {},
       "isRLSEnabled": false
+    },
+    "authentication.service_account": {
+      "name": "service_account",
+      "schema": "authentication",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "tenant_id": {
+          "name": "tenant_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "description": {
+          "name": "description",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "parent": {
+          "name": "parent",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "revision": {
+          "name": "revision",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "revision_timestamp": {
+          "name": "revision_timestamp",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "create_timestamp": {
+          "name": "create_timestamp",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "delete_timestamp": {
+          "name": "delete_timestamp",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "attributes": {
+          "name": "attributes",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'{}'::jsonb"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "service_account_id_subject_fkey": {
+          "name": "service_account_id_subject_fkey",
+          "tableFrom": "service_account",
+          "tableTo": "subject",
+          "schemaTo": "authentication",
+          "columnsFrom": [
+            "tenant_id",
+            "parent"
+          ],
+          "columnsTo": [
+            "tenant_id",
+            "id"
+          ],
+          "onDelete": "no action",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "service_account_tenant_id_id_pk": {
+          "name": "service_account_tenant_id_id_pk",
+          "columns": [
+            "tenant_id",
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "authentication.subject": {
+      "name": "subject",
+      "schema": "authentication",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "tenant_id": {
+          "name": "tenant_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "type": {
+          "name": "type",
+          "type": "subject_type",
+          "typeSchema": "authentication",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "display_name": {
+          "name": "display_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "system_account_id": {
+          "name": "system_account_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "service_account_id": {
+          "name": "service_account_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "revision": {
+          "name": "revision",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "revision_timestamp": {
+          "name": "revision_timestamp",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "create_timestamp": {
+          "name": "create_timestamp",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "delete_timestamp": {
+          "name": "delete_timestamp",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "attributes": {
+          "name": "attributes",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'{}'::jsonb"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "subject_id_system_account_fkey": {
+          "name": "subject_id_system_account_fkey",
+          "tableFrom": "subject",
+          "tableTo": "system_account",
+          "schemaTo": "authentication",
+          "columnsFrom": [
+            "tenant_id",
+            "system_account_id"
+          ],
+          "columnsTo": [
+            "tenant_id",
+            "id"
+          ],
+          "onDelete": "no action",
+          "onUpdate": "no action"
+        },
+        "subject_id_user_fkey": {
+          "name": "subject_id_user_fkey",
+          "tableFrom": "subject",
+          "tableTo": "user",
+          "schemaTo": "authentication",
+          "columnsFrom": [
+            "tenant_id",
+            "user_id"
+          ],
+          "columnsTo": [
+            "tenant_id",
+            "id"
+          ],
+          "onDelete": "no action",
+          "onUpdate": "no action"
+        },
+        "subject_id_service_account_fkey": {
+          "name": "subject_id_service_account_fkey",
+          "tableFrom": "subject",
+          "tableTo": "service_account",
+          "schemaTo": "authentication",
+          "columnsFrom": [
+            "tenant_id",
+            "service_account_id"
+          ],
+          "columnsTo": [
+            "tenant_id",
+            "id"
+          ],
+          "onDelete": "no action",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "subject_tenant_id_id_pk": {
+          "name": "subject_tenant_id_id_pk",
+          "columns": [
+            "tenant_id",
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {
+        "subject_system_account_id_unique": {
+          "name": "subject_system_account_id_unique",
+          "nullsNotDistinct": false,
+          "columns": [
+            "system_account_id"
+          ]
+        },
+        "subject_user_id_unique": {
+          "name": "subject_user_id_unique",
+          "nullsNotDistinct": false,
+          "columns": [
+            "user_id"
+          ]
+        },
+        "subject_service_account_id_unique": {
+          "name": "subject_service_account_id_unique",
+          "nullsNotDistinct": false,
+          "columns": [
+            "service_account_id"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {
+        "authentication_subject_reference_check": {
+          "name": "authentication_subject_reference_check",
+          "value": "num_nonnulls(\"authentication\".\"subject\".\"system_account_id\", \"authentication\".\"subject\".\"user_id\", \"authentication\".\"subject\".\"service_account_id\") = 1"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "authentication.system_account": {
+      "name": "system_account",
+      "schema": "authentication",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "tenant_id": {
+          "name": "tenant_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "identifier": {
+          "name": "identifier",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "revision": {
+          "name": "revision",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "revision_timestamp": {
+          "name": "revision_timestamp",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "create_timestamp": {
+          "name": "create_timestamp",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "delete_timestamp": {
+          "name": "delete_timestamp",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "attributes": {
+          "name": "attributes",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'{}'::jsonb"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {
+        "system_account_tenant_id_id_pk": {
+          "name": "system_account_tenant_id_id_pk",
+          "columns": [
+            "tenant_id",
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {
+        "system_account_identifier_unique": {
+          "name": "system_account_identifier_unique",
+          "nullsNotDistinct": false,
+          "columns": [
+            "identifier"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "authentication.user": {
+      "name": "user",
+      "schema": "authentication",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "tenant_id": {
+          "name": "tenant_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "status": {
+          "name": "status",
+          "type": "user_status",
+          "typeSchema": "authentication",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "email": {
+          "name": "email",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "first_name": {
+          "name": "first_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "last_name": {
+          "name": "last_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "revision": {
+          "name": "revision",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "revision_timestamp": {
+          "name": "revision_timestamp",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "create_timestamp": {
+          "name": "create_timestamp",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "delete_timestamp": {
+          "name": "delete_timestamp",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "attributes": {
+          "name": "attributes",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'{}'::jsonb"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {
+        "user_tenant_id_id_pk": {
+          "name": "user_tenant_id_id_pk",
+          "columns": [
+            "tenant_id",
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {
+        "user_tenant_id_email_unique": {
+          "name": "user_tenant_id_email_unique",
+          "nullsNotDistinct": false,
+          "columns": [
+            "tenant_id",
+            "email"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    }
+  },
+  "enums": {
+    "authentication.subject_type": {
+      "name": "subject_type",
+      "schema": "authentication",
+      "values": [
+        "system",
+        "user",
+        "service-account"
+      ]
+    },
+    "authentication.user_status": {
+      "name": "user_status",
+      "schema": "authentication",
+      "values": [
+        "active",
+        "suspended",
+        "pending-approval",
+        "invited"
+      ]
     }
   },
-  "enums": {},
   "schemas": {},
   "sequences": {},
   "roles": {},

package/authentication/server/drizzle/meta/_journal.json

@@ -5,8 +5,8 @@
     {
       "idx": 0,
       "version": "7",
-      "when": 1740059137940,
-      "tag": "0000_calm_warlock",
+      "when": 1767826939668,
+      "tag": "0000_violet_callisto",
       "breakpoints": true
     }
   ]

package/authentication/server/index.d.ts

@@ -6,3 +6,4 @@ export * from './authentication.service.js';
 export * from './helper.js';
 export * from './module.js';
 export * from './schemas.js';
+export * from './subject.service.js';

package/authentication/server/index.js

@@ -6,3 +6,4 @@ export * from './authentication.service.js';
 export * from './helper.js';
 export * from './module.js';
 export * from './schemas.js';
+export * from './subject.service.js';

package/authentication/server/schemas.d.ts

@@ -1,4 +1,19 @@
-import { AuthenticationCredentials, AuthenticationSession } from '../models/index.js';
+import { AuthenticationCredentials, AuthenticationSession, ServiceAccount, Subject, SystemAccount, User } from '../models/index.js';
 export declare const authenticationSchema: import("../../orm/server/index.js").DatabaseSchema<"authentication">;
+export declare const subjectType: import("../../orm/enums.js").PgEnumFromEnumeration<{
+    readonly System: "system";
+    readonly User: "user";
+    readonly ServiceAccount: "service-account";
+}>;
+export declare const userStatus: import("../../orm/enums.js").PgEnumFromEnumeration<{
+    readonly Active: "active";
+    readonly Suspended: "suspended";
+    readonly PendingApproval: "pending-approval";
+    readonly Invited: "invited";
+}>;
 export declare const authenticationCredentials: import("../../orm/server/types.js").PgTableFromType<typeof AuthenticationCredentials, "authentication">;
 export declare const authenticationSession: import("../../orm/server/types.js").PgTableFromType<typeof AuthenticationSession, "authentication">;
+export declare const serviceAccount: import("../../orm/server/types.js").PgTableFromType<typeof ServiceAccount, "authentication">;
+export declare const subject: import("../../orm/server/types.js").PgTableFromType<typeof Subject, "authentication">;
+export declare const systemAccount: import("../../orm/server/types.js").PgTableFromType<typeof SystemAccount, "authentication">;
+export declare const user: import("../../orm/server/types.js").PgTableFromType<typeof User, "authentication">;

package/authentication/server/schemas.js

@@ -1,5 +1,11 @@
 import { databaseSchema } from '../../orm/server/index.js';
-import { AuthenticationCredentials, AuthenticationSession } from '../models/index.js';
+import { AuthenticationCredentials, AuthenticationSession, ServiceAccount, Subject, SubjectType, SystemAccount, User, UserStatus } from '../models/index.js';
 export const authenticationSchema = databaseSchema('authentication');
+export const subjectType = authenticationSchema.getEnum(SubjectType);
+export const userStatus = authenticationSchema.getEnum(UserStatus);
 export const authenticationCredentials = authenticationSchema.getTable(AuthenticationCredentials);
 export const authenticationSession = authenticationSchema.getTable(AuthenticationSession);
+export const serviceAccount = authenticationSchema.getTable(ServiceAccount);
+export const subject = authenticationSchema.getTable(Subject);
+export const systemAccount = authenticationSchema.getTable(SystemAccount);
+export const user = authenticationSchema.getTable(User);

package/authentication/server/subject.service.d.ts

@@ -0,0 +1,6 @@
+import { Subject, SystemAccount } from '../models/index.js';
+export declare class SubjectService {
+    readonly subjectRepository: import("../../orm/server/index.js").EntityRepository<Subject>;
+    readonly systemAccountRepository: import("../../orm/server/index.js").EntityRepository<SystemAccount>;
+    getSystemAccountSubject(tenantId: string, identifier: string): Promise<Subject>;
+}

package/authentication/server/subject.service.js

@@ -0,0 +1,44 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+import { Singleton } from '../../injector/index.js';
+import { injectRepository } from '../../orm/server/index.js';
+import { isUndefined } from '../../utils/type-guards.js';
+import { Subject, SubjectType, SystemAccount } from '../models/index.js';
+let SubjectService = class SubjectService {
+    subjectRepository = injectRepository(Subject);
+    systemAccountRepository = injectRepository(SystemAccount);
+    async getSystemAccountSubject(tenantId, identifier) {
+        return await this.subjectRepository.transaction(async (tx) => {
+            let systemAccount = await this.systemAccountRepository.withTransaction(tx).tryLoadByQuery({
+                tenantId,
+                identifier,
+            });
+            if (isUndefined(systemAccount)) {
+                systemAccount = await this.systemAccountRepository.withTransaction(tx).insert({
+                    tenantId,
+                    identifier,
+                });
+                return await this.subjectRepository.withTransaction(tx).insert({
+                    type: SubjectType.System,
+                    tenantId,
+                    systemAccountId: systemAccount.id,
+                    displayName: `System: ${identifier}`,
+                    userId: null,
+                    serviceAccountId: null,
+                });
+            }
+            return await this.subjectRepository.withTransaction(tx).loadByQuery({
+                tenantId,
+                systemAccountId: systemAccount.id,
+            });
+        });
+    }
+};
+SubjectService = __decorate([
+    Singleton()
+], SubjectService);
+export { SubjectService };

package/circuit-breaker/circuit-breaker.d.ts

@@ -0,0 +1,32 @@
+import { type EnumType } from '../enumeration/enumeration.js';
+import { resolveArgumentType, type Resolvable } from '../injector/interfaces.js';
+export declare const CircuitBreakerState: {
+    readonly Closed: "closed";
+    readonly Open: "open";
+    readonly HalfOpen: "half-open";
+};
+export type CircuitBreakerState = EnumType<typeof CircuitBreakerState>;
+export interface CircuitBreakerConfig {
+    threshold: number;
+    resetTimeout: number;
+}
+export interface CircuitBreakerCheckResult {
+    allowed: boolean;
+    state: CircuitBreakerState;
+    isProbe?: boolean;
+}
+export type CircuitBreakerArgument = string | (CircuitBreakerConfig & {
+    key: string;
+});
+export declare abstract class CircuitBreaker implements Resolvable<CircuitBreakerArgument> {
+    readonly [resolveArgumentType]: CircuitBreakerArgument;
+    /**
+     * Checks if execution is allowed.
+     * Transitions from Open to Half-Open automatically if timeout passed.
+     */
+    abstract check(): Promise<CircuitBreakerCheckResult>;
+    /** Records a success, resetting the breaker to Closed. */
+    abstract recordSuccess(): Promise<void>;
+    /** Records a failure, potentially tripping the breaker to Open. */
+    abstract recordFailure(): Promise<void>;
+}