@vorionsys/security 1.0.0

package/dist/api/v1/intents.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"intents.d.ts","sourceRoot":"","sources":["../../../src/api/v1/intents.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAgC,MAAM,SAAS,CAAC;AAwE7E;;GAEG;AACH,wBAAsB,sBAAsB,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAgNpF"}

package/dist/api/v1/intents.js

@@ -0,0 +1,239 @@
+/**
+ * API v1 Intent Routes
+ *
+ * @packageDocumentation
+ */
+import { z } from 'zod';
+import { createLogger } from '../../common/logger.js';
+import { getConfig } from '../../common/config.js';
+import { createIntentService, intentSubmissionSchema, bulkIntentSubmissionSchema, } from '../../intent/index.js';
+import { enqueueIntentSubmission } from '../../intent/queues.js';
+import { sendSuccess, sendError, sendNotFound, sendCursorPaginated, } from '../../intent/response-middleware.js';
+import { HttpStatus } from '../../intent/response.js';
+import { INTENT_STATUSES } from '../../common/types.js';
+import { ForbiddenError } from '../../common/errors.js';
+import { requireTenantMembership } from '../../common/tenant-verification.js';
+import { recordAuditEvent } from '../middleware/audit.js';
+import { createEndpointRateLimit } from '../middleware/rate-limits.js';
+// Rate limit configurations for intent endpoints
+const intentRateLimits = {
+    create: createEndpointRateLimit({ max: 100, windowSeconds: 60 }),
+    bulkCreate: createEndpointRateLimit({ max: 5, windowSeconds: 60 }),
+    cancel: createEndpointRateLimit({ max: 30, windowSeconds: 60 }),
+    delete: createEndpointRateLimit({ max: 20, windowSeconds: 3600 }),
+    replay: createEndpointRateLimit({ max: 10, windowSeconds: 60 }),
+};
+const intentLogger = createLogger({ component: 'api-v1-intents' });
+const intentService = createIntentService();
+const config = getConfig();
+const intentIdParamsSchema = z.object({
+    id: z.string().uuid(),
+});
+const intentListQuerySchema = z.object({
+    entityId: z.string().uuid().optional(),
+    status: z
+        .string()
+        .refine((value) => INTENT_STATUSES.includes(value), {
+        message: 'Invalid status',
+    })
+        .optional(),
+    limit: z.coerce.number().int().min(1).max(100).optional(),
+    cursor: z.string().uuid().optional(),
+});
+const intentCancelBodySchema = z.object({
+    reason: z.string().min(1).max(500),
+});
+async function getTenantId(request) {
+    const payload = await request.jwtVerify();
+    if (!payload.tenantId) {
+        throw new ForbiddenError('Tenant context missing from token');
+    }
+    if (!payload.sub) {
+        throw new ForbiddenError('User identifier missing from token');
+    }
+    await requireTenantMembership(payload.sub, payload.tenantId);
+    return payload.tenantId;
+}
+/**
+ * Register v1 intent routes
+ */
+export async function registerIntentRoutesV1(fastify) {
+    // Create intent
+    fastify.post('/intents', {
+        preHandler: intentRateLimits.create,
+    }, async (request, reply) => {
+        const tenantId = await getTenantId(request);
+        const body = intentSubmissionSchema.parse(request.body ?? {});
+        const intent = await intentService.submit(body, { tenantId });
+        // Record audit event for intent creation
+        await recordAuditEvent(request, {
+            eventType: 'intent.created',
+            resourceType: 'intent',
+            resourceId: intent.id,
+            afterState: intent,
+            metadata: {
+                intentType: intent.intentType,
+                entityId: intent.entityId,
+            },
+        });
+        return sendSuccess(reply, intent, HttpStatus.ACCEPTED, request);
+    });
+    // Bulk create intents
+    fastify.post('/intents/bulk', {
+        preHandler: intentRateLimits.bulkCreate,
+        config: {
+            rateLimit: {
+                max: config.api.bulkRateLimit ?? 10,
+                timeWindow: '1 minute',
+            },
+        },
+    }, async (request, reply) => {
+        const tenantId = await getTenantId(request);
+        const body = bulkIntentSubmissionSchema.parse(request.body ?? {});
+        const result = await intentService.submitBulk(body.intents, {
+            tenantId,
+            stopOnError: body.options?.stopOnError ?? false,
+        });
+        let status;
+        if (result.stats.failed === 0) {
+            status = HttpStatus.ACCEPTED;
+        }
+        else if (result.stats.succeeded > 0) {
+            status = 207;
+        }
+        else {
+            status = HttpStatus.BAD_REQUEST;
+        }
+        return reply.status(status).send({
+            data: result,
+            meta: {
+                requestId: request.id,
+                timestamp: new Date().toISOString(),
+            },
+        });
+    });
+    // Get intent by ID
+    fastify.get('/intents/:id', async (request, reply) => {
+        const tenantId = await getTenantId(request);
+        const params = intentIdParamsSchema.parse(request.params ?? {});
+        const result = await intentService.getWithEvents(params.id, tenantId);
+        if (!result) {
+            return sendNotFound(reply, 'Intent', request);
+        }
+        return sendSuccess(reply, {
+            ...result.intent,
+            events: result.events,
+            evaluations: result.evaluations ?? [],
+        }, HttpStatus.OK, request);
+    });
+    // List intents
+    fastify.get('/intents', async (request, reply) => {
+        const tenantId = await getTenantId(request);
+        const query = intentListQuerySchema.parse(request.query ?? {});
+        const listOptions = { tenantId };
+        if (query.entityId)
+            listOptions.entityId = query.entityId;
+        if (query.status)
+            listOptions.status = query.status;
+        if (query.limit)
+            listOptions.limit = query.limit;
+        if (query.cursor)
+            listOptions.cursor = query.cursor;
+        const result = await intentService.list(listOptions);
+        return sendCursorPaginated(reply, result.items, {
+            nextCursor: result.nextCursor,
+            hasMore: result.hasMore,
+        }, request);
+    });
+    // Cancel intent
+    fastify.post('/intents/:id/cancel', {
+        preHandler: intentRateLimits.cancel,
+    }, async (request, reply) => {
+        const tenantId = await getTenantId(request);
+        const params = intentIdParamsSchema.parse(request.params ?? {});
+        const body = intentCancelBodySchema.parse(request.body ?? {});
+        // Capture before state for audit logging
+        const beforeIntent = await intentService.get(params.id, tenantId);
+        const cancelledBy = request.user?.sub;
+        const intent = await intentService.cancel(params.id, cancelledBy
+            ? { tenantId, reason: body.reason, cancelledBy }
+            : { tenantId, reason: body.reason });
+        if (!intent) {
+            return sendError(reply, 'INTENT_NOT_FOUND_OR_NOT_CANCELLABLE', 'Intent not found or cannot be cancelled in current state', HttpStatus.NOT_FOUND, undefined, request);
+        }
+        // Record audit event for intent cancellation
+        await recordAuditEvent(request, {
+            eventType: 'intent.cancelled',
+            resourceType: 'intent',
+            resourceId: intent.id,
+            beforeState: beforeIntent,
+            afterState: intent,
+            reason: body.reason,
+            metadata: {
+                intentType: intent.intentType,
+                entityId: intent.entityId,
+                previousStatus: beforeIntent?.status,
+            },
+        });
+        return sendSuccess(reply, intent, HttpStatus.OK, request);
+    });
+    // Delete intent (GDPR soft delete)
+    fastify.delete('/intents/:id', {
+        preHandler: intentRateLimits.delete,
+    }, async (request, reply) => {
+        const tenantId = await getTenantId(request);
+        const params = intentIdParamsSchema.parse(request.params ?? {});
+        const intent = await intentService.delete(params.id, tenantId);
+        if (!intent) {
+            return reply.status(404).send({
+                error: { code: 'INTENT_NOT_FOUND', message: 'Intent not found' },
+            });
+        }
+        return reply.status(204).send();
+    });
+    // Verify event chain integrity
+    fastify.get('/intents/:id/verify', async (request, reply) => {
+        const tenantId = await getTenantId(request);
+        const params = intentIdParamsSchema.parse(request.params ?? {});
+        const intent = await intentService.get(params.id, tenantId);
+        if (!intent) {
+            return reply.status(404).send({
+                error: { code: 'INTENT_NOT_FOUND', message: 'Intent not found' },
+            });
+        }
+        const verification = await intentService.verifyEventChain(params.id);
+        return reply.send(verification);
+    });
+    // Replay intent
+    fastify.post('/intents/:id/replay', {
+        preHandler: intentRateLimits.replay,
+    }, async (request, reply) => {
+        const tenantId = await getTenantId(request);
+        const params = intentIdParamsSchema.parse(request.params ?? {});
+        const intent = await intentService.get(params.id, tenantId);
+        if (!intent) {
+            return reply.status(404).send({
+                error: { code: 'INTENT_NOT_FOUND', message: 'Intent not found' },
+            });
+        }
+        if (!['failed', 'denied'].includes(intent.status)) {
+            return reply.status(400).send({
+                error: {
+                    code: 'INVALID_STATE',
+                    message: `Cannot replay intent in ${intent.status} status`,
+                },
+            });
+        }
+        await intentService.updateStatus(params.id, tenantId, 'pending', intent.status);
+        const enqueueOptions = intent.intentType
+            ? { namespace: intent.intentType }
+            : {};
+        await enqueueIntentSubmission(intent, enqueueOptions);
+        return reply.send({
+            message: 'Intent queued for replay',
+            intentId: params.id,
+        });
+    });
+    intentLogger.debug('Intent routes registered');
+}
+//# sourceMappingURL=intents.js.map

package/dist/api/v1/intents.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"intents.js","sourceRoot":"","sources":["../../../src/api/v1/intents.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,EACL,mBAAmB,EACnB,sBAAsB,EACtB,0BAA0B,GAC3B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EACL,WAAW,EACX,SAAS,EACT,YAAY,EACZ,mBAAmB,GACpB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAEtD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AAC9E,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAEvE,iDAAiD;AACjD,MAAM,gBAAgB,GAAG;IACvB,MAAM,EAAE,uBAAuB,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC;IAChE,UAAU,EAAE,uBAAuB,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC;IAClE,MAAM,EAAE,uBAAuB,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC;IAC/D,MAAM,EAAE,uBAAuB,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;IACjE,MAAM,EAAE,uBAAuB,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC;CAChE,CAAC;AAEF,MAAM,YAAY,GAAG,YAAY,CAAC,EAAE,SAAS,EAAE,gBAAgB,EAAE,CAAC,CAAC;AACnE,MAAM,aAAa,GAAG,mBAAmB,EAAE,CAAC;AAC5C,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;AAE3B,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;CACtB,CAAC,CAAC;AAEH,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IACtC,MAAM,EAAE,CAAC;SACN,MAAM,EAAE;SACR,MAAM,CAAC,CAAC,KAAK,EAAyB,EAAE,CAAC,eAAe,CAAC,QAAQ,CAAC,KAAqB,CAAC,EAAE;QACzF,OAAO,EAAE,gBAAgB;KAC1B,CAAC;SACD,QAAQ,EAAE;IACb,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACzD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;CACrC,CAAC,CAAC;AAEH,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;CACnC,CAAC,CAAC;AAEH,KAAK,UAAU,WAAW,CAAC,OAAuB;IAChD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,SAAS,EAAuC,CAAC;IAE/E,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;QACtB,MAAM,IAAI,cAAc,CAAC,mCAAmC,CAAC,CAAC;IAChE,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;QACjB,MAAM,IAAI,cAAc,CAAC,oCAAoC,CAAC,CAAC;IACjE,CAAC;IAED,MAAM,uBAAuB,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC7D,OAAO,OAAO,CAAC,QAAQ,CAAC;AAC1B,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,OAAwB;IACnE,gBAAgB;IAChB,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE;QACvB,UAAU,EAAE,gBAAgB,CAAC,MAAM;KACpC,EAAE,KAAK,EAAE,OAAuB,EAAE,KAAmB,EAAE,EAAE;QACxD,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAC;QAC5C,MAAM,IAAI,GAAG,sBAAsB,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;QAE9D,yCAAyC;QACzC,MAAM,gBAAgB,CAAC,OAAO,EAAE;YAC9B,SAAS,EAAE,gBAAgB;YAC3B,YAAY,EAAE,QAAQ;YACtB,UAAU,EAAE,MAAM,CAAC,EAAE;YACrB,UAAU,EAAE,MAA4C;YACxD,QAAQ,EAAE;gBACR,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ;aAC1B;SACF,CAAC,CAAC;QAEH,OAAO,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,sBAAsB;IACtB,OAAO,CAAC,IAAI,CAAC,eAAe,EAAE;QAC5B,UAAU,EAAE,gBAAgB,CAAC,UAAU;QACvC,MAAM,EAAE;YACN,SAAS,EAAE;gBACT,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,aAAa,IAAI,EAAE;gBACnC,UAAU,EAAE,UAAU;aACvB;SACF;KACF,EAAE,KAAK,EAAE,OAAuB,EAAE,KAAmB,EAAE,EAAE;QACxD,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAC;QAC5C,MAAM,IAAI,GAAG,0BAA0B,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAElE,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE;YAC1D,QAAQ;YACR,WAAW,EAAE,IAAI,CAAC,OAAO,EAAE,WAAW,IAAI,KAAK;SAChD,CAAC,CAAC;QAEH,IAAI,MAAc,CAAC;QACnB,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9B,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC;QAC/B,CAAC;aAAM,IAAI,MAAM,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,EAAE,CAAC;YACtC,MAAM,GAAG,GAAG,CAAC;QACf,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,UAAU,CAAC,WAAW,CAAC;QAClC,CAAC;QAED,OAAO,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC;YAC/B,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE;gBACJ,SAAS,EAAE,OAAO,CAAC,EAAE;gBACrB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC;SACF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,mBAAmB;IACnB,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,KAAK,EAAE,OAAuB,EAAE,KAAmB,EAAE,EAAE;QACjF,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QAChE,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QACtE,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,YAAY,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QAChD,CAAC;QACD,OAAO,WAAW,CAAC,KAAK,EAAE;YACxB,GAAG,MAAM,CAAC,MAAM;YAChB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,EAAE;SACtC,EAAE,UAAU,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,eAAe;IACf,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,OAAuB,EAAE,KAAmB,EAAE,EAAE;QAC7E,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAG,qBAAqB,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QAC/D,MAAM,WAAW,GAA6C,EAAE,QAAQ,EAAE,CAAC;QAC3E,IAAI,KAAK,CAAC,QAAQ;YAAE,WAAW,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;QAC1D,IAAI,KAAK,CAAC,MAAM;YAAE,WAAW,CAAC,MAAM,GAAG,KAAK,CAAC,MAAsB,CAAC;QACpE,IAAI,KAAK,CAAC,KAAK;YAAE,WAAW,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;QACjD,IAAI,KAAK,CAAC,MAAM;YAAE,WAAW,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;QACpD,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAErD,OAAO,mBAAmB,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE;YAC9C,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,OAAO,EAAE,MAAM,CAAC,OAAO;SACxB,EAAE,OAAO,CAAC,CAAC;IACd,CAAC,CAAC,CAAC;IAEH,gBAAgB;IAChB,OAAO,CAAC,IAAI,CAAC,qBAAqB,EAAE;QAClC,UAAU,EAAE,gBAAgB,CAAC,MAAM;KACpC,EAAE,KAAK,EAAE,OAAuB,EAAE,KAAmB,EAAE,EAAE;QACxD,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QAChE,MAAM,IAAI,GAAG,sBAAsB,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAE9D,yCAAyC;QACzC,MAAM,YAAY,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QAElE,MAAM,WAAW,GAAI,OAAO,CAAC,IAAyB,EAAE,GAAG,CAAC;QAC5D,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,WAAW;YAC9D,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,WAAW,EAAE;YAChD,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CACpC,CAAC;QAEF,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,SAAS,CACd,KAAK,EACL,qCAAqC,EACrC,0DAA0D,EAC1D,UAAU,CAAC,SAAS,EACpB,SAAS,EACT,OAAO,CACR,CAAC;QACJ,CAAC;QAED,6CAA6C;QAC7C,MAAM,gBAAgB,CAAC,OAAO,EAAE;YAC9B,SAAS,EAAE,kBAAkB;YAC7B,YAAY,EAAE,QAAQ;YACtB,UAAU,EAAE,MAAM,CAAC,EAAE;YACrB,WAAW,EAAE,YAAkD;YAC/D,UAAU,EAAE,MAA4C;YACxD,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,QAAQ,EAAE;gBACR,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,cAAc,EAAE,YAAY,EAAE,MAAM;aACrC;SACF,CAAC,CAAC;QAEH,OAAO,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,mCAAmC;IACnC,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE;QAC7B,UAAU,EAAE,gBAAgB,CAAC,MAAM;KACpC,EAAE,KAAK,EAAE,OAAuB,EAAE,KAAmB,EAAE,EAAE;QACxD,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QAEhE,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QAE/D,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBAC5B,KAAK,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,kBAAkB,EAAE;aACjE,CAAC,CAAC;QACL,CAAC;QAED,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,+BAA+B;IAC/B,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,KAAK,EAAE,OAAuB,EAAE,KAAmB,EAAE,EAAE;QACxF,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QAEhE,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QAC5D,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBAC5B,KAAK,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,kBAAkB,EAAE;aACjE,CAAC,CAAC;QACL,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,aAAa,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACrE,OAAO,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,gBAAgB;IAChB,OAAO,CAAC,IAAI,CAAC,qBAAqB,EAAE;QAClC,UAAU,EAAE,gBAAgB,CAAC,MAAM;KACpC,EAAE,KAAK,EAAE,OAAuB,EAAE,KAAmB,EAAE,EAAE;QACxD,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QAEhE,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QAC5D,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBAC5B,KAAK,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,kBAAkB,EAAE;aACjE,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YAClD,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBAC5B,KAAK,EAAE;oBACL,IAAI,EAAE,eAAe;oBACrB,OAAO,EAAE,2BAA2B,MAAM,CAAC,MAAM,SAAS;iBAC3D;aACF,CAAC,CAAC;QACL,CAAC;QAED,MAAM,aAAa,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QAChF,MAAM,cAAc,GAAG,MAAM,CAAC,UAAU;YACtC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,UAAU,EAAE;YAClC,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,uBAAuB,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;QAEtD,OAAO,KAAK,CAAC,IAAI,CAAC;YAChB,OAAO,EAAE,0BAA0B;YACnC,QAAQ,EAAE,MAAM,CAAC,EAAE;SACpB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,YAAY,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;AACjD,CAAC"}

package/dist/api/v1/operations.d.ts

@@ -0,0 +1,21 @@
+/**
+ * API v1 Operation Status Routes
+ *
+ * Provides endpoints for tracking async operation status and progress.
+ *
+ * @packageDocumentation
+ */
+import type { FastifyInstance } from 'fastify';
+/**
+ * Extend FastifyRequest to include JWT methods when JWT plugin is registered
+ */
+declare module 'fastify' {
+    interface FastifyRequest {
+        jwtVerify<T = Record<string, unknown>>(): Promise<T>;
+    }
+}
+/**
+ * Register v1 operation status routes
+ */
+export declare function registerOperationRoutesV1(fastify: FastifyInstance): Promise<void>;
+//# sourceMappingURL=operations.d.ts.map

package/dist/api/v1/operations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"operations.d.ts","sourceRoot":"","sources":["../../../src/api/v1/operations.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAgC,MAAM,SAAS,CAAC;AAO7E;;GAEG;AACH,OAAO,QAAQ,SAAS,CAAC;IACvB,UAAU,cAAc;QACtB,SAAS,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC;KACtD;CACF;AAsDD;;GAEG;AACH,wBAAsB,yBAAyB,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CA0FvF"}

package/dist/api/v1/operations.js

@@ -0,0 +1,140 @@
+/**
+ * API v1 Operation Status Routes
+ *
+ * Provides endpoints for tracking async operation status and progress.
+ *
+ * @packageDocumentation
+ */
+import { z } from 'zod';
+import { createLogger } from '../../common/logger.js';
+import { ForbiddenError } from '../../common/errors.js';
+import { requireTenantMembership } from '../../common/tenant-verification.js';
+import { getOperationTracker } from '../../common/operation-tracker.js';
+const operationsLogger = createLogger({ component: 'api-v1-operations' });
+const operationIdParamsSchema = z.object({
+    id: z.string().uuid(),
+});
+const operationQuerySchema = z.object({
+    wait: z.coerce.boolean().optional().default(false),
+    timeout: z.coerce.number().int().min(1000).max(30000).optional().default(30000),
+});
+async function getTenantId(request) {
+    const payload = await request.jwtVerify();
+    if (!payload.tenantId) {
+        throw new ForbiddenError('Tenant context missing from token');
+    }
+    if (!payload.sub) {
+        throw new ForbiddenError('User identifier missing from token');
+    }
+    await requireTenantMembership(payload.sub, payload.tenantId);
+    return payload.tenantId;
+}
+/**
+ * Format operation response
+ */
+function formatOperationResponse(operation, baseUrl) {
+    return {
+        id: operation.id,
+        type: operation.type,
+        status: operation.status,
+        progress: {
+            current: operation.progress.current,
+            total: operation.progress.total,
+            percentage: operation.progress.total > 0
+                ? Math.round((operation.progress.current / operation.progress.total) * 100)
+                : 0,
+        },
+        result: operation.result,
+        error: operation.error,
+        metadata: operation.metadata,
+        createdAt: operation.createdAt.toISOString(),
+        completedAt: operation.completedAt?.toISOString(),
+        _links: {
+            self: `${baseUrl}/api/v1/operations/${operation.id}`,
+        },
+    };
+}
+/**
+ * Register v1 operation status routes
+ */
+export async function registerOperationRoutesV1(fastify) {
+    const operationTracker = getOperationTracker();
+    /**
+     * Get operation status
+     *
+     * GET /operations/:id
+     *
+     * Query parameters:
+     * - wait: boolean - If true, long-poll until completion or timeout
+     * - timeout: number - Max wait time in ms (1000-30000, default 30000)
+     *
+     * Returns:
+     * - 200 OK with operation details
+     * - 404 Not Found if operation doesn't exist or belongs to different tenant
+     */
+    fastify.get('/operations/:id', async (request, reply) => {
+        const tenantId = await getTenantId(request);
+        const params = operationIdParamsSchema.parse(request.params ?? {});
+        const query = operationQuerySchema.parse(request.query ?? {});
+        const operation = query.wait
+            ? await operationTracker.getOperationWithWait(params.id, tenantId, true, query.timeout)
+            : await operationTracker.getOperation(params.id, tenantId);
+        if (!operation) {
+            return reply.status(404).send({
+                error: {
+                    code: 'OPERATION_NOT_FOUND',
+                    message: 'Operation not found',
+                },
+            });
+        }
+        // Get the protocol and host from the request
+        const protocol = request.headers['x-forwarded-proto'] ?? 'http';
+        const host = request.headers['x-forwarded-host'] ?? request.headers.host ?? 'localhost';
+        const baseUrl = `${protocol}://${host}`;
+        return reply.send(formatOperationResponse(operation, baseUrl));
+    });
+    /**
+     * Get operation progress (fast endpoint)
+     *
+     * GET /operations/:id/progress
+     *
+     * Returns just the progress information for fast polling.
+     */
+    fastify.get('/operations/:id/progress', async (request, reply) => {
+        const tenantId = await getTenantId(request);
+        const params = operationIdParamsSchema.parse(request.params ?? {});
+        // Verify operation belongs to tenant first
+        const operation = await operationTracker.getOperation(params.id, tenantId);
+        if (!operation) {
+            return reply.status(404).send({
+                error: {
+                    code: 'OPERATION_NOT_FOUND',
+                    message: 'Operation not found',
+                },
+            });
+        }
+        // Get fast progress from Redis
+        const progress = await operationTracker.getProgress(params.id);
+        if (!progress) {
+            return reply.status(404).send({
+                error: {
+                    code: 'OPERATION_NOT_FOUND',
+                    message: 'Operation not found',
+                },
+            });
+        }
+        return reply.send({
+            id: params.id,
+            status: progress.status,
+            progress: {
+                current: progress.current,
+                total: progress.total,
+                percentage: progress.total > 0
+                    ? Math.round((progress.current / progress.total) * 100)
+                    : 0,
+            },
+        });
+    });
+    operationsLogger.debug('Operation routes registered');
+}
+//# sourceMappingURL=operations.js.map

package/dist/api/v1/operations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"operations.js","sourceRoot":"","sources":["../../../src/api/v1/operations.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AAC9E,OAAO,EAAE,mBAAmB,EAAuB,MAAM,mCAAmC,CAAC;AAW7F,MAAM,gBAAgB,GAAG,YAAY,CAAC,EAAE,SAAS,EAAE,mBAAmB,EAAE,CAAC,CAAC;AAE1E,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;CACtB,CAAC,CAAC;AAEH,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAClD,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CAChF,CAAC,CAAC;AAEH,KAAK,UAAU,WAAW,CAAC,OAAuB;IAChD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,SAAS,EAAuC,CAAC;IAE/E,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;QACtB,MAAM,IAAI,cAAc,CAAC,mCAAmC,CAAC,CAAC;IAChE,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;QACjB,MAAM,IAAI,cAAc,CAAC,oCAAoC,CAAC,CAAC;IACjE,CAAC;IAED,MAAM,uBAAuB,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC7D,OAAO,OAAO,CAAC,QAAQ,CAAC;AAC1B,CAAC;AAED;;GAEG;AACH,SAAS,uBAAuB,CAAC,SAAyB,EAAE,OAAe;IACzE,OAAO;QACL,EAAE,EAAE,SAAS,CAAC,EAAE;QAChB,IAAI,EAAE,SAAS,CAAC,IAAI;QACpB,MAAM,EAAE,SAAS,CAAC,MAAM;QACxB,QAAQ,EAAE;YACR,OAAO,EAAE,SAAS,CAAC,QAAQ,CAAC,OAAO;YACnC,KAAK,EAAE,SAAS,CAAC,QAAQ,CAAC,KAAK;YAC/B,UAAU,EAAE,SAAS,CAAC,QAAQ,CAAC,KAAK,GAAG,CAAC;gBACtC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,GAAG,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC;gBAC3E,CAAC,CAAC,CAAC;SACN;QACD,MAAM,EAAE,SAAS,CAAC,MAAM;QACxB,KAAK,EAAE,SAAS,CAAC,KAAK;QACtB,QAAQ,EAAE,SAAS,CAAC,QAAQ;QAC5B,SAAS,EAAE,SAAS,CAAC,SAAS,CAAC,WAAW,EAAE;QAC5C,WAAW,EAAE,SAAS,CAAC,WAAW,EAAE,WAAW,EAAE;QACjD,MAAM,EAAE;YACN,IAAI,EAAE,GAAG,OAAO,sBAAsB,SAAS,CAAC,EAAE,EAAE;SACrD;KACF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,OAAwB;IACtE,MAAM,gBAAgB,GAAG,mBAAmB,EAAE,CAAC;IAE/C;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,KAAK,EAAE,OAAuB,EAAE,KAAmB,EAAE,EAAE;QACpF,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,uBAAuB,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QACnE,MAAM,KAAK,GAAG,oBAAoB,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QAE9D,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI;YAC1B,CAAC,CAAC,MAAM,gBAAgB,CAAC,oBAAoB,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC;YACvF,CAAC,CAAC,MAAM,gBAAgB,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QAE7D,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBAC5B,KAAK,EAAE;oBACL,IAAI,EAAE,qBAAqB;oBAC3B,OAAO,EAAE,qBAAqB;iBAC/B;aACF,CAAC,CAAC;QACL,CAAC;QAED,6CAA6C;QAC7C,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC,IAAI,MAAM,CAAC;QAChE,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,kBAAkB,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,CAAC;QACxF,MAAM,OAAO,GAAG,GAAG,QAAQ,MAAM,IAAI,EAAE,CAAC;QAExC,OAAO,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH;;;;;;OAMG;IACH,OAAO,CAAC,GAAG,CAAC,0BAA0B,EAAE,KAAK,EAAE,OAAuB,EAAE,KAAmB,EAAE,EAAE;QAC7F,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,uBAAuB,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QAEnE,2CAA2C;QAC3C,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QAC3E,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBAC5B,KAAK,EAAE;oBACL,IAAI,EAAE,qBAAqB;oBAC3B,OAAO,EAAE,qBAAqB;iBAC/B;aACF,CAAC,CAAC;QACL,CAAC;QAED,+BAA+B;QAC/B,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAE/D,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBAC5B,KAAK,EAAE;oBACL,IAAI,EAAE,qBAAqB;oBAC3B,OAAO,EAAE,qBAAqB;iBAC/B;aACF,CAAC,CAAC;QACL,CAAC;QAED,OAAO,KAAK,CAAC,IAAI,CAAC;YAChB,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,QAAQ,EAAE;gBACR,OAAO,EAAE,QAAQ,CAAC,OAAO;gBACzB,KAAK,EAAE,QAAQ,CAAC,KAAK;gBACrB,UAAU,EAAE,QAAQ,CAAC,KAAK,GAAG,CAAC;oBAC5B,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC;oBACvD,CAAC,CAAC,CAAC;aACN;SACF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,gBAAgB,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;AACxD,CAAC"}

package/dist/api/v1/policies.d.ts

@@ -0,0 +1,11 @@
+/**
+ * API v1 Policy Routes
+ *
+ * @packageDocumentation
+ */
+import type { FastifyInstance } from 'fastify';
+/**
+ * Register v1 policy routes
+ */
+export declare function registerPolicyRoutesV1(fastify: FastifyInstance): Promise<void>;
+//# sourceMappingURL=policies.d.ts.map

package/dist/api/v1/policies.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policies.d.ts","sourceRoot":"","sources":["../../../src/api/v1/policies.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAgC,MAAM,SAAS,CAAC;AA0I7E;;GAEG;AACH,wBAAsB,sBAAsB,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CA4xBpF"}