@voyantjs/types 0.1.0

package/LICENSE

@@ -0,0 +1,109 @@
+# Functional Source License, Version 1.1, Apache 2.0 Future License
+
+## Abbreviation
+
+FSL-1.1-Apache-2.0
+
+## Notice
+
+Copyright 2026 PixelMakers Studio SRL
+
+## Terms and Conditions
+
+### Licensor ("We")
+
+The party offering the Software under these Terms and Conditions.
+
+### The Software
+
+The "Software" is each version of the software that we make available under
+these Terms and Conditions, as indicated by our inclusion of these Terms and
+Conditions with the Software.
+
+### License Grant
+
+Subject to your compliance with this License Grant and the Patents,
+Redistribution and Trademark clauses below, we hereby grant you the right to
+use, copy, modify, create derivative works, publicly perform, publicly
+display and redistribute the Software for any Permitted Purpose identified
+below.
+
+### Permitted Purpose
+
+A Permitted Purpose is any purpose other than a Competing Use. A Competing
+Use means making the Software available to others in a commercial product or
+service that:
+
+1. substitutes for the Software;
+
+2. substitutes for any other product or service we offer using the Software
+   that exists as of the date we make the Software available; or
+
+3. offers the same or substantially similar functionality as the Software.
+
+Permitted Purposes specifically include using the Software:
+
+1. for your internal use and access;
+
+2. for non-commercial education;
+
+3. for non-commercial research; and
+
+4. in connection with professional services that you provide to a licensee
+   using the Software in accordance with these Terms and Conditions.
+
+### Patents
+
+To the extent your use for a Permitted Purpose would necessarily infringe
+our patents, the license grant above includes a license under our patents.
+If you make a claim against any party that the Software infringes or
+contributes to the infringement of any patent, then your patent license to
+the Software ends immediately.
+
+### Redistribution
+
+The Terms and Conditions apply to all copies, modifications and derivatives
+of the Software.
+
+If you redistribute any copies, modifications or derivatives of the
+Software, you must include a copy of or a link to these Terms and Conditions
+and not remove any copyright notices provided in or with the Software.
+
+### Disclaimer
+
+THE SOFTWARE IS PROVIDED "AS IS" AND WITHOUT WARRANTIES OF ANY KIND, EXPRESS
+OR IMPLIED, INCLUDING WITHOUT LIMITATION WARRANTIES OF FITNESS FOR A
+PARTICULAR PURPOSE, MERCHANTABILITY, TITLE OR NON-INFRINGEMENT.
+
+IN NO EVENT WILL WE HAVE ANY LIABILITY TO YOU ARISING OUT OF OR RELATED TO
+THE SOFTWARE, INCLUDING INDIRECT, SPECIAL, INCIDENTAL OR CONSEQUENTIAL
+DAMAGES, EVEN IF WE HAVE BEEN INFORMED OF THEIR POSSIBILITY IN ADVANCE.
+
+### Trademarks
+
+Except for displaying the License Details and identifying us as the origin
+of the Software, you have no right under these Terms and Conditions to use
+our trademarks, trade names, service marks or product names.
+
+---
+
+## Grant of Future License
+
+We hereby irrevocably grant you an additional license to use the Software
+under the Apache License, Version 2.0 that is effective on the second
+anniversary of the date we make the Software available. On or after that
+date, you may use the Software under the Apache License, Version 2.0, in
+which case the following will apply:
+
+Licensed under the Apache License, Version 2.0 (the "License"); you may not
+use this file except in compliance with the License.
+
+You may obtain a copy of the License at
+
+http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
+WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
+License for the specific language governing permissions and limitations
+under the License.

package/README.md

@@ -0,0 +1,28 @@
+# @voyantjs/types
+
+Shared TypeScript types and Zod schemas for Voyant. Cross-package contracts that don't belong to any single domain module.
+
+## Install
+
+```bash
+pnpm add @voyantjs/types
+```
+
+## Usage
+
+```typescript
+import type { ApiKey } from "@voyantjs/types/api-keys"
+import { apiErrorSchema } from "@voyantjs/types/schemas/api-error"
+```
+
+## Exports
+
+| Entry | Description |
+| --- | --- |
+| `.` | Barrel re-exports |
+| `./api-keys` | API key types + envelope |
+| `./schemas/*` | Individual Zod schemas (API error, KMS codec/envelope, etc.) |
+
+## License
+
+FSL-1.1-Apache-2.0

package/dist/ai.d.ts

@@ -0,0 +1,38 @@
+export type EntityType = "product" | "collection" | "tag" | "contract" | "booking" | "contact";
+export type Channel = "in_app" | "website" | "whatsapp" | "messenger" | "instagram";
+export interface ContextChunk<TMetadata extends Record<string, unknown> = Record<string, unknown>> {
+    id: string;
+    text: string;
+    score?: number;
+    metadata: TMetadata & {
+        type?: EntityType;
+        source?: string;
+        sourceId?: string | number;
+        locale?: string;
+        visibility?: string;
+        updatedAt?: string | number | Date;
+    };
+}
+export interface Citation {
+    id: string;
+    label: string;
+    sourceRef?: string;
+    preview?: string;
+    score?: number;
+}
+export interface RetrieverOptions {
+    query: string;
+    types?: Array<EntityType>;
+    topK?: number;
+    locale?: string;
+}
+export interface EmbedOptionsMany {
+    values: string[];
+    model?: string;
+}
+export interface EmbedOptionsOne {
+    value: string;
+    model?: string;
+}
+export type EmbedOptions = EmbedOptionsOne | EmbedOptionsMany;
+//# sourceMappingURL=ai.d.ts.map

package/dist/ai.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai.d.ts","sourceRoot":"","sources":["../src/ai.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,UAAU,GAAG,SAAS,GAAG,YAAY,GAAG,KAAK,GAAG,UAAU,GAAG,SAAS,GAAG,SAAS,CAAA;AAE9F,MAAM,MAAM,OAAO,GAAG,QAAQ,GAAG,SAAS,GAAG,UAAU,GAAG,WAAW,GAAG,WAAW,CAAA;AAEnF,MAAM,WAAW,YAAY,CAAC,SAAS,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAC/F,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,SAAS,GAAG;QACpB,IAAI,CAAC,EAAE,UAAU,CAAA;QACjB,MAAM,CAAC,EAAE,MAAM,CAAA;QACf,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;QAC1B,MAAM,CAAC,EAAE,MAAM,CAAA;QACf,UAAU,CAAC,EAAE,MAAM,CAAA;QACnB,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAA;KACnC,CAAA;CACF;AAED,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAA;IACV,KAAK,EAAE,MAAM,CAAA;IACb,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,CAAC,EAAE,KAAK,CAAC,UAAU,CAAC,CAAA;IACzB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,EAAE,CAAA;IAChB,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED,MAAM,MAAM,YAAY,GAAG,eAAe,GAAG,gBAAgB,CAAA"}

package/dist/ai.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=ai.js.map

package/dist/ai.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai.js","sourceRoot":"","sources":["../src/ai.ts"],"names":[],"mappings":""}

package/dist/api-keys.d.ts

@@ -0,0 +1,206 @@
+import { z } from "zod";
+/**
+ * API Key Scope Definitions
+ *
+ * Following resource:action pattern similar to Stripe/Shopify
+ * Format: "{resource}:{action}" or wildcards
+ */
+export declare const API_KEY_RESOURCES: readonly ["operators", "connections", "oauth-clients", "products", "availability", "bookings", "suppliers", "grants", "audit-logs"];
+export type ApiKeyResource = (typeof API_KEY_RESOURCES)[number];
+export declare const API_KEY_ACTIONS: readonly ["read", "write", "delete"];
+export type ApiKeyAction = (typeof API_KEY_ACTIONS)[number];
+/**
+ * Valid scope patterns:
+ * - Specific: "operators:read", "connections:write"
+ * - Resource wildcard: "operators:*" (all actions on operators)
+ * - Action wildcard: "*:read" (read all resources)
+ * - Full wildcard: "*" (all resources, all actions)
+ */
+export declare const VALID_SCOPES: readonly ["operators:read", "operators:write", "operators:delete", "operators:*", "connections:read", "connections:write", "connections:delete", "connections:*", "oauth-clients:read", "oauth-clients:write", "oauth-clients:delete", "oauth-clients:*", "products:read", "products:*", "availability:read", "availability:*", "bookings:read", "bookings:write", "bookings:delete", "bookings:*", "suppliers:read", "suppliers:*", "grants:read", "grants:write", "grants:delete", "grants:*", "audit-logs:read", "audit-logs:*", "*:read", "*:write", "*:delete", "*"];
+export type ApiKeyScope = (typeof VALID_SCOPES)[number];
+export declare const apiKeyScopeSchema: z.ZodEnum<{
+    "operators:read": "operators:read";
+    "operators:write": "operators:write";
+    "operators:delete": "operators:delete";
+    "operators:*": "operators:*";
+    "connections:read": "connections:read";
+    "connections:write": "connections:write";
+    "connections:delete": "connections:delete";
+    "connections:*": "connections:*";
+    "oauth-clients:read": "oauth-clients:read";
+    "oauth-clients:write": "oauth-clients:write";
+    "oauth-clients:delete": "oauth-clients:delete";
+    "oauth-clients:*": "oauth-clients:*";
+    "products:read": "products:read";
+    "products:*": "products:*";
+    "availability:read": "availability:read";
+    "availability:*": "availability:*";
+    "bookings:read": "bookings:read";
+    "bookings:write": "bookings:write";
+    "bookings:delete": "bookings:delete";
+    "bookings:*": "bookings:*";
+    "suppliers:read": "suppliers:read";
+    "suppliers:*": "suppliers:*";
+    "grants:read": "grants:read";
+    "grants:write": "grants:write";
+    "grants:delete": "grants:delete";
+    "grants:*": "grants:*";
+    "audit-logs:read": "audit-logs:read";
+    "audit-logs:*": "audit-logs:*";
+    "*:read": "*:read";
+    "*:write": "*:write";
+    "*:delete": "*:delete";
+    "*": "*";
+}>;
+export declare const apiKeyScopesSchema: z.ZodDefault<z.ZodArray<z.ZodEnum<{
+    "operators:read": "operators:read";
+    "operators:write": "operators:write";
+    "operators:delete": "operators:delete";
+    "operators:*": "operators:*";
+    "connections:read": "connections:read";
+    "connections:write": "connections:write";
+    "connections:delete": "connections:delete";
+    "connections:*": "connections:*";
+    "oauth-clients:read": "oauth-clients:read";
+    "oauth-clients:write": "oauth-clients:write";
+    "oauth-clients:delete": "oauth-clients:delete";
+    "oauth-clients:*": "oauth-clients:*";
+    "products:read": "products:read";
+    "products:*": "products:*";
+    "availability:read": "availability:read";
+    "availability:*": "availability:*";
+    "bookings:read": "bookings:read";
+    "bookings:write": "bookings:write";
+    "bookings:delete": "bookings:delete";
+    "bookings:*": "bookings:*";
+    "suppliers:read": "suppliers:read";
+    "suppliers:*": "suppliers:*";
+    "grants:read": "grants:read";
+    "grants:write": "grants:write";
+    "grants:delete": "grants:delete";
+    "grants:*": "grants:*";
+    "audit-logs:read": "audit-logs:read";
+    "audit-logs:*": "audit-logs:*";
+    "*:read": "*:read";
+    "*:write": "*:write";
+    "*:delete": "*:delete";
+    "*": "*";
+}>>>;
+/**
+ * Scope groups for UI display
+ * Grouped by resource for nested checkbox UX
+ */
+export declare const SCOPE_GROUPS: {
+    readonly operators: {
+        readonly label: "Operators";
+        readonly description: "Manage operator registrations and configuration";
+        readonly scopes: readonly ["operators:read", "operators:write", "operators:delete"];
+    };
+    readonly connections: {
+        readonly label: "Connections";
+        readonly description: "Manage supplier connections and credentials";
+        readonly scopes: readonly ["connections:read", "connections:write", "connections:delete"];
+    };
+    readonly "oauth-clients": {
+        readonly label: "OAuth Clients";
+        readonly description: "Manage OAuth client credentials for M2M access";
+        readonly scopes: readonly ["oauth-clients:read", "oauth-clients:write", "oauth-clients:delete"];
+    };
+    readonly products: {
+        readonly label: "Products";
+        readonly description: "Query supplier product catalogs via OCTO";
+        readonly scopes: readonly ["products:read"];
+    };
+    readonly availability: {
+        readonly label: "Availability";
+        readonly description: "Query supplier availability via OCTO";
+        readonly scopes: readonly ["availability:read"];
+    };
+    readonly bookings: {
+        readonly label: "Bookings";
+        readonly description: "Create, confirm, and cancel bookings via OCTO";
+        readonly scopes: readonly ["bookings:read", "bookings:write", "bookings:delete"];
+    };
+    readonly suppliers: {
+        readonly label: "Suppliers";
+        readonly description: "Query supplier information via OCTO";
+        readonly scopes: readonly ["suppliers:read"];
+    };
+    readonly grants: {
+        readonly label: "Grants";
+        readonly description: "Manage cross-organization operator access grants";
+        readonly scopes: readonly ["grants:read", "grants:write", "grants:delete"];
+    };
+    readonly "audit-logs": {
+        readonly label: "Audit Logs";
+        readonly description: "Query API audit logs for your organization";
+        readonly scopes: readonly ["audit-logs:read"];
+    };
+};
+export type ScopeGroupKey = keyof typeof SCOPE_GROUPS;
+/**
+ * Predefined scope templates for quick setup
+ */
+interface ScopeTemplate {
+    name: string;
+    description: string;
+    scopes: ApiKeyScope[];
+}
+export declare const SCOPE_TEMPLATES: Record<string, ScopeTemplate>;
+export type ScopeTemplateKey = "read-only" | "full-access" | "operator-admin" | "reseller";
+/**
+ * Expiration presets for key creation
+ */
+export declare const EXPIRATION_PRESETS: {
+    readonly never: {
+        readonly label: "Never";
+        readonly days: null;
+    };
+    readonly "7days": {
+        readonly label: "7 days";
+        readonly days: 7;
+    };
+    readonly "30days": {
+        readonly label: "30 days";
+        readonly days: 30;
+    };
+    readonly "90days": {
+        readonly label: "90 days";
+        readonly days: 90;
+    };
+    readonly "180days": {
+        readonly label: "6 months";
+        readonly days: 180;
+    };
+    readonly "365days": {
+        readonly label: "1 year";
+        readonly days: 365;
+    };
+    readonly custom: {
+        readonly label: "Custom date";
+        readonly days: null;
+    };
+};
+export type ExpirationPresetKey = keyof typeof EXPIRATION_PRESETS;
+/**
+ * Helper functions for scope validation
+ */
+/**
+ * Check if a scope pattern matches a required scope
+ * Handles wildcards: "operators:*", "*:read", "*"
+ */
+export declare function scopeMatches(userScope: string, requiredScope: string): boolean;
+/**
+ * Check if user has all required scopes
+ */
+export declare function hasScopes(userScopes: string[], requiredScopes: string[]): boolean;
+/**
+ * Get human-readable description of scopes
+ */
+export declare function describescopes(scopes: string[]): string;
+/**
+ * Calculate expiration date from preset
+ */
+export declare function calculateExpirationDate(preset: ExpirationPresetKey, customDate?: Date): Date | null;
+export {};
+//# sourceMappingURL=api-keys.d.ts.map

package/dist/api-keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-keys.d.ts","sourceRoot":"","sources":["../src/api-keys.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB;;;;;GAKG;AAGH,eAAO,MAAM,iBAAiB,qIAUpB,CAAA;AAEV,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAA;AAG/D,eAAO,MAAM,eAAe,sCAAuC,CAAA;AAEnE,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,CAAC,CAAA;AAE3D;;;;;;GAMG;AACH,eAAO,MAAM,YAAY,2iBAoDf,CAAA;AAEV,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,CAAA;AAGvD,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAAuB,CAAA;AAErD,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAAyC,CAAA;AAExE;;;GAGG;AACH,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA8Cf,CAAA;AAEV,MAAM,MAAM,aAAa,GAAG,MAAM,OAAO,YAAY,CAAA;AAErD;;GAEG;AACH,UAAU,aAAa;IACrB,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,EAAE,WAAW,EAAE,CAAA;CACtB;AAED,eAAO,MAAM,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CA4BzD,CAAA;AAED,MAAM,MAAM,gBAAgB,GAAG,WAAW,GAAG,aAAa,GAAG,gBAAgB,GAAG,UAAU,CAAA;AAE1F;;GAEG;AACH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6BrB,CAAA;AAEV,MAAM,MAAM,mBAAmB,GAAG,MAAM,OAAO,kBAAkB,CAAA;AAEjE;;GAEG;AAEH;;;GAGG;AACH,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAiB9E;AAED;;GAEG;AACH,wBAAgB,SAAS,CAAC,UAAU,EAAE,MAAM,EAAE,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,OAAO,CAIjF;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAuBvD;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,mBAAmB,EAC3B,UAAU,CAAC,EAAE,IAAI,GAChB,IAAI,GAAG,IAAI,CAUb"}

package/dist/api-keys.js

@@ -0,0 +1,258 @@
+import { z } from "zod";
+/**
+ * API Key Scope Definitions
+ *
+ * Following resource:action pattern similar to Stripe/Shopify
+ * Format: "{resource}:{action}" or wildcards
+ */
+// Resource types
+export const API_KEY_RESOURCES = [
+    "operators",
+    "connections",
+    "oauth-clients",
+    "products",
+    "availability",
+    "bookings",
+    "suppliers",
+    "grants",
+    "audit-logs",
+];
+// Action types
+export const API_KEY_ACTIONS = ["read", "write", "delete"];
+/**
+ * Valid scope patterns:
+ * - Specific: "operators:read", "connections:write"
+ * - Resource wildcard: "operators:*" (all actions on operators)
+ * - Action wildcard: "*:read" (read all resources)
+ * - Full wildcard: "*" (all resources, all actions)
+ */
+export const VALID_SCOPES = [
+    // Operators
+    "operators:read",
+    "operators:write",
+    "operators:delete",
+    "operators:*",
+    // Connections
+    "connections:read",
+    "connections:write",
+    "connections:delete",
+    "connections:*",
+    // OAuth Clients
+    "oauth-clients:read",
+    "oauth-clients:write",
+    "oauth-clients:delete",
+    "oauth-clients:*",
+    // Products
+    "products:read",
+    "products:*",
+    // Availability
+    "availability:read",
+    "availability:*",
+    // Bookings
+    "bookings:read",
+    "bookings:write",
+    "bookings:delete",
+    "bookings:*",
+    // Suppliers
+    "suppliers:read",
+    "suppliers:*",
+    // Grants
+    "grants:read",
+    "grants:write",
+    "grants:delete",
+    "grants:*",
+    // Audit Logs
+    "audit-logs:read",
+    "audit-logs:*",
+    // Wildcard patterns
+    "*:read", // Read-only access to all resources
+    "*:write", // Write access to all resources
+    "*:delete", // Delete access to all resources
+    "*", // Full access (God mode)
+];
+// Zod schema for scope validation
+export const apiKeyScopeSchema = z.enum(VALID_SCOPES);
+export const apiKeyScopesSchema = z.array(apiKeyScopeSchema).default([]);
+/**
+ * Scope groups for UI display
+ * Grouped by resource for nested checkbox UX
+ */
+export const SCOPE_GROUPS = {
+    operators: {
+        label: "Operators",
+        description: "Manage operator registrations and configuration",
+        scopes: ["operators:read", "operators:write", "operators:delete"],
+    },
+    connections: {
+        label: "Connections",
+        description: "Manage supplier connections and credentials",
+        scopes: ["connections:read", "connections:write", "connections:delete"],
+    },
+    "oauth-clients": {
+        label: "OAuth Clients",
+        description: "Manage OAuth client credentials for M2M access",
+        scopes: ["oauth-clients:read", "oauth-clients:write", "oauth-clients:delete"],
+    },
+    products: {
+        label: "Products",
+        description: "Query supplier product catalogs via OCTO",
+        scopes: ["products:read"],
+    },
+    availability: {
+        label: "Availability",
+        description: "Query supplier availability via OCTO",
+        scopes: ["availability:read"],
+    },
+    bookings: {
+        label: "Bookings",
+        description: "Create, confirm, and cancel bookings via OCTO",
+        scopes: ["bookings:read", "bookings:write", "bookings:delete"],
+    },
+    suppliers: {
+        label: "Suppliers",
+        description: "Query supplier information via OCTO",
+        scopes: ["suppliers:read"],
+    },
+    grants: {
+        label: "Grants",
+        description: "Manage cross-organization operator access grants",
+        scopes: ["grants:read", "grants:write", "grants:delete"],
+    },
+    "audit-logs": {
+        label: "Audit Logs",
+        description: "Query API audit logs for your organization",
+        scopes: ["audit-logs:read"],
+    },
+};
+export const SCOPE_TEMPLATES = {
+    "read-only": {
+        name: "Read Only",
+        description: "Read-only access to all resources",
+        scopes: ["*:read"],
+    },
+    "full-access": {
+        name: "Full Access",
+        description: "Complete access to all resources and actions",
+        scopes: ["*"],
+    },
+    "operator-admin": {
+        name: "Operator Admin",
+        description: "Full operator and connection management",
+        scopes: ["operators:*", "connections:*", "oauth-clients:*"],
+    },
+    reseller: {
+        name: "OCTO Reseller",
+        description: "Full data-plane access for resellers",
+        scopes: [
+            "products:read",
+            "availability:read",
+            "bookings:read",
+            "bookings:write",
+            "bookings:delete",
+            "suppliers:read",
+        ],
+    },
+};
+/**
+ * Expiration presets for key creation
+ */
+export const EXPIRATION_PRESETS = {
+    never: {
+        label: "Never",
+        days: null,
+    },
+    "7days": {
+        label: "7 days",
+        days: 7,
+    },
+    "30days": {
+        label: "30 days",
+        days: 30,
+    },
+    "90days": {
+        label: "90 days",
+        days: 90,
+    },
+    "180days": {
+        label: "6 months",
+        days: 180,
+    },
+    "365days": {
+        label: "1 year",
+        days: 365,
+    },
+    custom: {
+        label: "Custom date",
+        days: null,
+    },
+};
+/**
+ * Helper functions for scope validation
+ */
+/**
+ * Check if a scope pattern matches a required scope
+ * Handles wildcards: "operators:*", "*:read", "*"
+ */
+export function scopeMatches(userScope, requiredScope) {
+    // Full wildcard
+    if (userScope === "*")
+        return true;
+    // Exact match
+    if (userScope === requiredScope)
+        return true;
+    const [userResource, userAction] = userScope.split(":");
+    const [reqResource, reqAction] = requiredScope.split(":");
+    // Resource wildcard (e.g., "operators:*" matches "operators:read")
+    if (userResource === reqResource && userAction === "*")
+        return true;
+    // Action wildcard (e.g., "*:read" matches "operators:read")
+    if (userResource === "*" && userAction === reqAction)
+        return true;
+    return false;
+}
+/**
+ * Check if user has all required scopes
+ */
+export function hasScopes(userScopes, requiredScopes) {
+    return requiredScopes.every((required) => userScopes.some((userScope) => scopeMatches(userScope, required)));
+}
+/**
+ * Get human-readable description of scopes
+ */
+export function describescopes(scopes) {
+    if (scopes.includes("*")) {
+        return "Full access to all resources";
+    }
+    if (scopes.includes("*:read") && scopes.length === 1) {
+        return "Read-only access to all resources";
+    }
+    const resources = new Set();
+    const actions = new Set();
+    for (const scope of scopes) {
+        const [resource, action] = scope.split(":");
+        if (resource && resource !== "*")
+            resources.add(resource);
+        if (action && action !== "*")
+            actions.add(action);
+    }
+    if (resources.size === 0) {
+        return `${actions.size} permission${actions.size > 1 ? "s" : ""}`;
+    }
+    return `${resources.size} resource${resources.size > 1 ? "s" : ""}`;
+}
+/**
+ * Calculate expiration date from preset
+ */
+export function calculateExpirationDate(preset, customDate) {
+    if (preset === "never")
+        return null;
+    if (preset === "custom")
+        return customDate || null;
+    const config = EXPIRATION_PRESETS[preset];
+    if (!config.days)
+        return null;
+    const expiresAt = new Date();
+    expiresAt.setDate(expiresAt.getDate() + config.days);
+    return expiresAt;
+}
+//# sourceMappingURL=api-keys.js.map

package/dist/api-keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-keys.js","sourceRoot":"","sources":["../src/api-keys.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB;;;;;GAKG;AAEH,iBAAiB;AACjB,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,WAAW;IACX,aAAa;IACb,eAAe;IACf,UAAU;IACV,cAAc;IACd,UAAU;IACV,WAAW;IACX,QAAQ;IACR,YAAY;CACJ,CAAA;AAIV,eAAe;AACf,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAU,CAAA;AAInE;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,YAAY;IACZ,gBAAgB;IAChB,iBAAiB;IACjB,kBAAkB;IAClB,aAAa;IAEb,cAAc;IACd,kBAAkB;IAClB,mBAAmB;IACnB,oBAAoB;IACpB,eAAe;IAEf,gBAAgB;IAChB,oBAAoB;IACpB,qBAAqB;IACrB,sBAAsB;IACtB,iBAAiB;IAEjB,WAAW;IACX,eAAe;IACf,YAAY;IAEZ,eAAe;IACf,mBAAmB;IACnB,gBAAgB;IAEhB,WAAW;IACX,eAAe;IACf,gBAAgB;IAChB,iBAAiB;IACjB,YAAY;IAEZ,YAAY;IACZ,gBAAgB;IAChB,aAAa;IAEb,SAAS;IACT,aAAa;IACb,cAAc;IACd,eAAe;IACf,UAAU;IAEV,aAAa;IACb,iBAAiB;IACjB,cAAc;IAEd,oBAAoB;IACpB,QAAQ,EAAE,oCAAoC;IAC9C,SAAS,EAAE,gCAAgC;IAC3C,UAAU,EAAE,iCAAiC;IAC7C,GAAG,EAAE,yBAAyB;CACtB,CAAA;AAIV,kCAAkC;AAClC,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;AAErD,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;AAExE;;;GAGG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,SAAS,EAAE;QACT,KAAK,EAAE,WAAW;QAClB,WAAW,EAAE,iDAAiD;QAC9D,MAAM,EAAE,CAAC,gBAAgB,EAAE,iBAAiB,EAAE,kBAAkB,CAAC;KAClE;IACD,WAAW,EAAE;QACX,KAAK,EAAE,aAAa;QACpB,WAAW,EAAE,6CAA6C;QAC1D,MAAM,EAAE,CAAC,kBAAkB,EAAE,mBAAmB,EAAE,oBAAoB,CAAC;KACxE;IACD,eAAe,EAAE;QACf,KAAK,EAAE,eAAe;QACtB,WAAW,EAAE,gDAAgD;QAC7D,MAAM,EAAE,CAAC,oBAAoB,EAAE,qBAAqB,EAAE,sBAAsB,CAAC;KAC9E;IACD,QAAQ,EAAE;QACR,KAAK,EAAE,UAAU;QACjB,WAAW,EAAE,0CAA0C;QACvD,MAAM,EAAE,CAAC,eAAe,CAAC;KAC1B;IACD,YAAY,EAAE;QACZ,KAAK,EAAE,cAAc;QACrB,WAAW,EAAE,sCAAsC;QACnD,MAAM,EAAE,CAAC,mBAAmB,CAAC;KAC9B;IACD,QAAQ,EAAE;QACR,KAAK,EAAE,UAAU;QACjB,WAAW,EAAE,+CAA+C;QAC5D,MAAM,EAAE,CAAC,eAAe,EAAE,gBAAgB,EAAE,iBAAiB,CAAC;KAC/D;IACD,SAAS,EAAE;QACT,KAAK,EAAE,WAAW;QAClB,WAAW,EAAE,qCAAqC;QAClD,MAAM,EAAE,CAAC,gBAAgB,CAAC;KAC3B;IACD,MAAM,EAAE;QACN,KAAK,EAAE,QAAQ;QACf,WAAW,EAAE,kDAAkD;QAC/D,MAAM,EAAE,CAAC,aAAa,EAAE,cAAc,EAAE,eAAe,CAAC;KACzD;IACD,YAAY,EAAE;QACZ,KAAK,EAAE,YAAY;QACnB,WAAW,EAAE,4CAA4C;QACzD,MAAM,EAAE,CAAC,iBAAiB,CAAC;KAC5B;CACO,CAAA;AAaV,MAAM,CAAC,MAAM,eAAe,GAAkC;IAC5D,WAAW,EAAE;QACX,IAAI,EAAE,WAAW;QACjB,WAAW,EAAE,mCAAmC;QAChD,MAAM,EAAE,CAAC,QAAQ,CAAC;KACnB;IACD,aAAa,EAAE;QACb,IAAI,EAAE,aAAa;QACnB,WAAW,EAAE,8CAA8C;QAC3D,MAAM,EAAE,CAAC,GAAG,CAAC;KACd;IACD,gBAAgB,EAAE;QAChB,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,yCAAyC;QACtD,MAAM,EAAE,CAAC,aAAa,EAAE,eAAe,EAAE,iBAAiB,CAAC;KAC5D;IACD,QAAQ,EAAE;QACR,IAAI,EAAE,eAAe;QACrB,WAAW,EAAE,sCAAsC;QACnD,MAAM,EAAE;YACN,eAAe;YACf,mBAAmB;YACnB,eAAe;YACf,gBAAgB;YAChB,iBAAiB;YACjB,gBAAgB;SACjB;KACF;CACF,CAAA;AAID;;GAEG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,KAAK,EAAE;QACL,KAAK,EAAE,OAAO;QACd,IAAI,EAAE,IAAI;KACX;IACD,OAAO,EAAE;QACP,KAAK,EAAE,QAAQ;QACf,IAAI,EAAE,CAAC;KACR;IACD,QAAQ,EAAE;QACR,KAAK,EAAE,SAAS;QAChB,IAAI,EAAE,EAAE;KACT;IACD,QAAQ,EAAE;QACR,KAAK,EAAE,SAAS;QAChB,IAAI,EAAE,EAAE;KACT;IACD,SAAS,EAAE;QACT,KAAK,EAAE,UAAU;QACjB,IAAI,EAAE,GAAG;KACV;IACD,SAAS,EAAE;QACT,KAAK,EAAE,QAAQ;QACf,IAAI,EAAE,GAAG;KACV;IACD,MAAM,EAAE;QACN,KAAK,EAAE,aAAa;QACpB,IAAI,EAAE,IAAI;KACX;CACO,CAAA;AAIV;;GAEG;AAEH;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,SAAiB,EAAE,aAAqB;IACnE,gBAAgB;IAChB,IAAI,SAAS,KAAK,GAAG;QAAE,OAAO,IAAI,CAAA;IAElC,cAAc;IACd,IAAI,SAAS,KAAK,aAAa;QAAE,OAAO,IAAI,CAAA;IAE5C,MAAM,CAAC,YAAY,EAAE,UAAU,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IACvD,MAAM,CAAC,WAAW,EAAE,SAAS,CAAC,GAAG,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAEzD,mEAAmE;IACnE,IAAI,YAAY,KAAK,WAAW,IAAI,UAAU,KAAK,GAAG;QAAE,OAAO,IAAI,CAAA;IAEnE,4DAA4D;IAC5D,IAAI,YAAY,KAAK,GAAG,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,IAAI,CAAA;IAEjE,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,SAAS,CAAC,UAAoB,EAAE,cAAwB;IACtE,OAAO,cAAc,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,EAAE,CACvC,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAClE,CAAA;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,MAAgB;IAC7C,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACzB,OAAO,8BAA8B,CAAA;IACvC,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrD,OAAO,mCAAmC,CAAA;IAC5C,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAA;IACnC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAA;IAEjC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QAC3C,IAAI,QAAQ,IAAI,QAAQ,KAAK,GAAG;YAAE,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QACzD,IAAI,MAAM,IAAI,MAAM,KAAK,GAAG;YAAE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IACnD,CAAC;IAED,IAAI,SAAS,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,GAAG,OAAO,CAAC,IAAI,cAAc,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAA;IACnE,CAAC;IAED,OAAO,GAAG,SAAS,CAAC,IAAI,YAAY,SAAS,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAA;AACrE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB,CACrC,MAA2B,EAC3B,UAAiB;IAEjB,IAAI,MAAM,KAAK,OAAO;QAAE,OAAO,IAAI,CAAA;IACnC,IAAI,MAAM,KAAK,QAAQ;QAAE,OAAO,UAAU,IAAI,IAAI,CAAA;IAElD,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAA;IACzC,IAAI,CAAC,MAAM,CAAC,IAAI;QAAE,OAAO,IAAI,CAAA;IAE7B,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAA;IAC5B,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAA;IACpD,OAAO,SAAS,CAAA;AAClB,CAAC"}