@vertesia/common 1.5.0-dev.20260807.073259Z → 1.5.0-dev.20260826.064249Z

package/lib/access-control.d.ts

@@ -42,22 +42,8 @@ export type AceConditions = z.infer<typeof AceConditionsSchema>;
 export type AccessControlEntry = z.infer<typeof AccessControlEntrySchema>;
 export type ACECreatePayload = z.infer<typeof ACECreatePayloadSchema>;
 export type ACEUpdatePayload = z.infer<typeof ACEUpdatePayloadSchema>;
-/**
- * Default sensitivity/clearance levels for the Bell-LaPadula security model.
- * The numeric value is the index in the array (0 = lowest, 4 = highest).
- * Projects can override these labels via project settings.
- */
-export declare enum SecurityLevel {
-    public = 0,
-    internal = 1,
-    confidential = 2,
-    restricted = 3,
-    secret = 4
-}
 /** Human-readable labels for each security level, indexed by numeric value. */
 export declare const SecurityLevelLabels: readonly string[];
-/** Get the label for a security level value. Returns "Unknown" for out-of-range values. */
-export declare function getSecurityLevelLabel(level: number): string;
 export interface AcesQueryOptions {
     level?: 'resource' | 'project' | 'projects' | 'account';
     resource?: string;

package/lib/access-control.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"access-control.d.ts","sourceRoot":"","sources":["../src/access-control.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAC7B;;;;GAIG;AAEH,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AAC5E,OAAO,KAAK,EACR,sBAAsB,EACtB,sBAAsB,EACtB,wBAAwB,EACxB,mBAAmB,EACnB,wBAAwB,EACxB,4BAA4B,EAC/B,MAAM,iCAAiC,CAAC;AAEzC;;;GAGG;AACH,cAAc,4BAA4B,CAAC;AAE3C;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAClF,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E;;;;;;;;;GASG;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAChE,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAC1E,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AACtE,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAUtE;;;;GAIG;AACH,oBAAY,aAAa;IACrB,MAAM,IAAI;IACV,QAAQ,IAAI;IACZ,YAAY,IAAI;IAChB,UAAU,IAAI;IACd,MAAM,IAAI;CACb;AAED,+EAA+E;AAC/E,eAAO,MAAM,mBAAmB,EAAE,SAAS,MAAM,EAAmE,CAAC;AAErH,2FAA2F;AAC3F,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE3D;AAED,MAAM,WAAW,gBAAgB;IAC7B,KAAK,CAAC,EAAE,UAAU,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,CAAC;IACxD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,yBAAyB,CAAC;CACpC"}
+{"version":3,"file":"access-control.d.ts","sourceRoot":"","sources":["../src/access-control.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAC7B;;;;GAIG;AAEH,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AAC5E,OAAO,KAAK,EACR,sBAAsB,EACtB,sBAAsB,EACtB,wBAAwB,EACxB,mBAAmB,EACnB,wBAAwB,EACxB,4BAA4B,EAC/B,MAAM,iCAAiC,CAAC;AAEzC;;;GAGG;AACH,cAAc,4BAA4B,CAAC;AAE3C;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAClF,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E;;;;;;;;;GASG;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAChE,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAC1E,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AACtE,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE,+EAA+E;AAC/E,eAAO,MAAM,mBAAmB,EAAE,SAAS,MAAM,EAAmE,CAAC;AAErH,MAAM,WAAW,gBAAgB;IAC7B,KAAK,CAAC,EAAE,UAAU,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,CAAC;IACxD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,yBAAyB,CAAC;CACpC"}

package/lib/access-control.js

@@ -3,29 +3,6 @@
  * importing this module back. Re-exported here so every existing import path keeps working.
  */
 export * from './access-control-values.js';
-// RoleDefinition + SystemRoleDefinition now live in `./roles/types.js`, and are likewise inferred
-// from `./api-schemas/access-control.js`. They remain re-exported via the package's index.ts so
-// consumers see no path change.
-// ============================================================================
-// BLP Security Levels
-// ============================================================================
-/**
- * Default sensitivity/clearance levels for the Bell-LaPadula security model.
- * The numeric value is the index in the array (0 = lowest, 4 = highest).
- * Projects can override these labels via project settings.
- */
-export var SecurityLevel;
-(function (SecurityLevel) {
-    SecurityLevel[SecurityLevel["public"] = 0] = "public";
-    SecurityLevel[SecurityLevel["internal"] = 1] = "internal";
-    SecurityLevel[SecurityLevel["confidential"] = 2] = "confidential";
-    SecurityLevel[SecurityLevel["restricted"] = 3] = "restricted";
-    SecurityLevel[SecurityLevel["secret"] = 4] = "secret";
-})(SecurityLevel || (SecurityLevel = {}));
 /** Human-readable labels for each security level, indexed by numeric value. */
 export const SecurityLevelLabels = ['Public', 'Internal', 'Confidential', 'Restricted', 'Secret'];
-/** Get the label for a security level value. Returns "Unknown" for out-of-range values. */
-export function getSecurityLevelLabel(level) {
-    return SecurityLevelLabels[level] ?? 'Unknown';
-}
 //# sourceMappingURL=access-control.js.map

package/lib/access-control.js.map

@@ -1 +1 @@
-{"version":3,"file":"access-control.js","sourceRoot":"","sources":["../src/access-control.ts"],"names":[],"mappings":"AAiBA;;;GAGG;AACH,cAAc,4BAA4B,CAAC;AAmC3C,kGAAkG;AAClG,gGAAgG;AAChG,gCAAgC;AAEhC,+EAA+E;AAC/E,sBAAsB;AACtB,+EAA+E;AAE/E;;;;GAIG;AACH,MAAM,CAAN,IAAY,aAMX;AAND,WAAY,aAAa;IACrB,qDAAU,CAAA;IACV,yDAAY,CAAA;IACZ,iEAAgB,CAAA;IAChB,6DAAc,CAAA;IACd,qDAAU,CAAA;AACd,CAAC,EANW,aAAa,KAAb,aAAa,QAMxB;AAED,+EAA+E;AAC/E,MAAM,CAAC,MAAM,mBAAmB,GAAsB,CAAC,QAAQ,EAAE,UAAU,EAAE,cAAc,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC;AAErH,2FAA2F;AAC3F,MAAM,UAAU,qBAAqB,CAAC,KAAa;IAC/C,OAAO,mBAAmB,CAAC,KAAK,CAAC,IAAI,SAAS,CAAC;AACnD,CAAC"}
+{"version":3,"file":"access-control.js","sourceRoot":"","sources":["../src/access-control.ts"],"names":[],"mappings":"AAiBA;;;GAGG;AACH,cAAc,4BAA4B,CAAC;AAmC3C,+EAA+E;AAC/E,MAAM,CAAC,MAAM,mBAAmB,GAAsB,CAAC,QAAQ,EAAE,UAAU,EAAE,cAAc,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC"}

package/lib/account-values.d.ts

@@ -39,15 +39,5 @@ export declare enum QuotaTier {
     standard = "standard",
     enterprise = "enterprise"
 }
-/**
- * Default tier for an account that has no explicit `quota_tier`, derived from its `account_type`:
- * contracted customers and internal Vertesia accounts get `enterprise`; everyone else (partner,
- * free, prospect, unknown) gets the protective `standard` baseline.
- */
-export declare function quotaTierForAccountType(accountType: AccountType | undefined | null): QuotaTier;
-export declare const ACCOUNT_NAMESPACE_MAX_LENGTH = 63;
 export declare const ACCOUNT_APP_ACCESS_MESSAGE_MAX_LENGTH = 1000;
-export declare const RESERVED_ACCOUNT_NAMESPACES: readonly ['admin', 'api', 'apps', 'auth', 'cdn', 'docs', 'internal-auth', 'mcp', 'status', 'sts', 'www'];
-export declare function normalizeAccountNamespace(namespace: string): string;
-export declare function getAccountNamespaceValidationError(namespace: string): string | undefined;
 //# sourceMappingURL=account-values.d.ts.map

package/lib/account-values.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"account-values.d.ts","sourceRoot":"","sources":["../src/account-values.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,oBAAY,WAAW;IACnB,GAAG,QAAQ;IACX,GAAG,QAAQ;IACX,KAAK,UAAU;CAClB;AAED,oBAAY,aAAa;IACrB,MAAM,WAAW;IACjB,OAAO,YAAY;CACtB;AAED,oBAAY,WAAW;IACnB,QAAQ,aAAa;IACrB,OAAO,YAAY;IACnB,IAAI,SAAS;IACb,QAAQ,aAAa;IACrB,QAAQ,aAAa;IACrB,OAAO,YAAY;CACtB;AAED;;;;;;;GAOG;AACH,oBAAY,SAAS;IACjB,QAAQ,aAAa;IACrB,UAAU,eAAe;CAC5B;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,WAAW,EAAE,WAAW,GAAG,SAAS,GAAG,IAAI,GAAG,SAAS,CAQ9F;AAED,eAAO,MAAM,4BAA4B,KAAK,CAAC;AAC/C,eAAO,MAAM,qCAAqC,OAAO,CAAC;AAC1D,eAAO,MAAM,2BAA2B,YACpC,OAAO,EACP,KAAK,EACL,MAAM,EACN,MAAM,EACN,KAAK,EACL,MAAM,EACN,eAAe,EACf,KAAK,EACL,QAAQ,EACR,KAAK,EACL,KAAK,CACC,CAAC;AAIX,wBAAgB,yBAAyB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAEnE;AAED,wBAAgB,kCAAkC,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAWxF"}
+{"version":3,"file":"account-values.d.ts","sourceRoot":"","sources":["../src/account-values.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,oBAAY,WAAW;IACnB,GAAG,QAAQ;IACX,GAAG,QAAQ;IACX,KAAK,UAAU;CAClB;AAED,oBAAY,aAAa;IACrB,MAAM,WAAW;IACjB,OAAO,YAAY;CACtB;AAED,oBAAY,WAAW;IACnB,QAAQ,aAAa;IACrB,OAAO,YAAY;IACnB,IAAI,SAAS;IACb,QAAQ,aAAa;IACrB,QAAQ,aAAa;IACrB,OAAO,YAAY;CACtB;AAED;;;;;;;GAOG;AACH,oBAAY,SAAS;IACjB,QAAQ,aAAa;IACrB,UAAU,eAAe;CAC5B;AACD,eAAO,MAAM,qCAAqC,OAAO,CAAC"}

package/lib/account-values.js

@@ -43,49 +43,5 @@ export var QuotaTier;
     QuotaTier["standard"] = "standard";
     QuotaTier["enterprise"] = "enterprise";
 })(QuotaTier || (QuotaTier = {}));
-/**
- * Default tier for an account that has no explicit `quota_tier`, derived from its `account_type`:
- * contracted customers and internal Vertesia accounts get `enterprise`; everyone else (partner,
- * free, prospect, unknown) gets the protective `standard` baseline.
- */
-export function quotaTierForAccountType(accountType) {
-    switch (accountType) {
-        case AccountType.customer:
-        case AccountType.vertesia:
-            return QuotaTier.enterprise;
-        default:
-            return QuotaTier.standard;
-    }
-}
-export const ACCOUNT_NAMESPACE_MAX_LENGTH = 63;
 export const ACCOUNT_APP_ACCESS_MESSAGE_MAX_LENGTH = 1000;
-export const RESERVED_ACCOUNT_NAMESPACES = [
-    'admin',
-    'api',
-    'apps',
-    'auth',
-    'cdn',
-    'docs',
-    'internal-auth',
-    'mcp',
-    'status',
-    'sts',
-    'www',
-];
-const ACCOUNT_NAMESPACE_PATTERN = /^[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?$/;
-export function normalizeAccountNamespace(namespace) {
-    return namespace.trim().toLowerCase();
-}
-export function getAccountNamespaceValidationError(namespace) {
-    if (!namespace) {
-        return 'Account namespace is required';
-    }
-    if (namespace.length > ACCOUNT_NAMESPACE_MAX_LENGTH || !ACCOUNT_NAMESPACE_PATTERN.test(namespace)) {
-        return 'Account namespace must be a lowercase DNS label containing only letters, numbers, and hyphens';
-    }
-    if (RESERVED_ACCOUNT_NAMESPACES.includes(namespace)) {
-        return `Account namespace '${namespace}' is reserved`;
-    }
-    return undefined;
-}
 //# sourceMappingURL=account-values.js.map

package/lib/account-values.js.map

@@ -1 +1 @@
-{"version":3,"file":"account-values.js","sourceRoot":"","sources":["../src/account-values.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,MAAM,CAAN,IAAY,WAIX;AAJD,WAAY,WAAW;IACnB,0BAAW,CAAA;IACX,0BAAW,CAAA;IACX,8BAAe,CAAA;AACnB,CAAC,EAJW,WAAW,KAAX,WAAW,QAItB;AAED,MAAM,CAAN,IAAY,aAGX;AAHD,WAAY,aAAa;IACrB,kCAAiB,CAAA;IACjB,oCAAmB,CAAA;AACvB,CAAC,EAHW,aAAa,KAAb,aAAa,QAGxB;AAED,MAAM,CAAN,IAAY,WAOX;AAPD,WAAY,WAAW;IACnB,oCAAqB,CAAA;IACrB,kCAAmB,CAAA;IACnB,4BAAa,CAAA;IACb,oCAAqB,CAAA;IACrB,oCAAqB,CAAA;IACrB,kCAAmB,CAAA;AACvB,CAAC,EAPW,WAAW,KAAX,WAAW,QAOtB;AAED;;;;;;;GAOG;AACH,MAAM,CAAN,IAAY,SAGX;AAHD,WAAY,SAAS;IACjB,kCAAqB,CAAA;IACrB,sCAAyB,CAAA;AAC7B,CAAC,EAHW,SAAS,KAAT,SAAS,QAGpB;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,WAA2C;IAC/E,QAAQ,WAAW,EAAE,CAAC;QAClB,KAAK,WAAW,CAAC,QAAQ,CAAC;QAC1B,KAAK,WAAW,CAAC,QAAQ;YACrB,OAAO,SAAS,CAAC,UAAU,CAAC;QAChC;YACI,OAAO,SAAS,CAAC,QAAQ,CAAC;IAClC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,MAAM,4BAA4B,GAAG,EAAE,CAAC;AAC/C,MAAM,CAAC,MAAM,qCAAqC,GAAG,IAAI,CAAC;AAC1D,MAAM,CAAC,MAAM,2BAA2B,GAAG;IACvC,OAAO;IACP,KAAK;IACL,MAAM;IACN,MAAM;IACN,KAAK;IACL,MAAM;IACN,eAAe;IACf,KAAK;IACL,QAAQ;IACR,KAAK;IACL,KAAK;CACC,CAAC;AAEX,MAAM,yBAAyB,GAAG,wCAAwC,CAAC;AAE3E,MAAM,UAAU,yBAAyB,CAAC,SAAiB;IACvD,OAAO,SAAS,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,kCAAkC,CAAC,SAAiB;IAChE,IAAI,CAAC,SAAS,EAAE,CAAC;QACb,OAAO,+BAA+B,CAAC;IAC3C,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,GAAG,4BAA4B,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAChG,OAAO,+FAA+F,CAAC;IAC3G,CAAC;IACD,IAAK,2BAAiD,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACzE,OAAO,sBAAsB,SAAS,eAAe,CAAC;IAC1D,CAAC;IACD,OAAO,SAAS,CAAC;AACrB,CAAC"}
+{"version":3,"file":"account-values.js","sourceRoot":"","sources":["../src/account-values.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,MAAM,CAAN,IAAY,WAIX;AAJD,WAAY,WAAW;IACnB,0BAAW,CAAA;IACX,0BAAW,CAAA;IACX,8BAAe,CAAA;AACnB,CAAC,EAJW,WAAW,KAAX,WAAW,QAItB;AAED,MAAM,CAAN,IAAY,aAGX;AAHD,WAAY,aAAa;IACrB,kCAAiB,CAAA;IACjB,oCAAmB,CAAA;AACvB,CAAC,EAHW,aAAa,KAAb,aAAa,QAGxB;AAED,MAAM,CAAN,IAAY,WAOX;AAPD,WAAY,WAAW;IACnB,oCAAqB,CAAA;IACrB,kCAAmB,CAAA;IACnB,4BAAa,CAAA;IACb,oCAAqB,CAAA;IACrB,oCAAqB,CAAA;IACrB,kCAAmB,CAAA;AACvB,CAAC,EAPW,WAAW,KAAX,WAAW,QAOtB;AAED;;;;;;;GAOG;AACH,MAAM,CAAN,IAAY,SAGX;AAHD,WAAY,SAAS;IACjB,kCAAqB,CAAA;IACrB,sCAAyB,CAAA;AAC7B,CAAC,EAHW,SAAS,KAAT,SAAS,QAGpB;AACD,MAAM,CAAC,MAAM,qCAAqC,GAAG,IAAI,CAAC"}