@webda/core 4.0.0-beta.1 → 4.0.0-beta.3

package/lib/models/aclmodel.js

@@ -1,223 +1,46 @@
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-import { User, WebdaError } from "../index.js";
-import { Action, CoreModel } from "./coremodel.js";
 /**
- * Object that contains ACL to define its own permissions
+ * Allow to define ACLs for the object
+ *
+ * It is used as an attribute in the model so
+ * you can add it later on to existing models
  *
- * @WebdaModel
  */
-export default class AclModel extends CoreModel {
-    constructor() {
-        super(...arguments);
-        /**
-         * Permissions on the object
-         */
-        this.__acl = {};
-    }
-    /**
-     * Ensure creator has all permissions by default
-     */
-    async _onSave() {
-        await super._onSave();
-        this._creator = this.getContext().getCurrentUserId();
-        if (Object.keys(this.__acl).length === 0 && this._creator) {
-            this.__acl[this._creator] = "all";
-        }
-    }
-    /**
-     * Add the permissions for current user
-     */
-    async _onGet() {
-        const ctx = this.getContext();
-        if (!ctx.isGlobal()) {
-            this._permissions = await this.getPermissions(ctx);
-        }
-        else {
-            this._permissions = [];
-        }
-    }
-    /**
-     * Return object ACLs
-     * @returns
-     */
-    getAcl() {
-        return this.__acl;
-    }
-    /**
-     * Set object ACLs
-     * @param acl
-     */
-    setAcl(acl) {
-        this.__acl = acl;
-    }
-    /**
-     * Manage the ACL REST api actions
-     * @param ctx
-     * @returns
-     */
-    async acl(ctx) {
-        if (ctx.getHttpContext().getMethod() === "PUT") {
-            return this._httpPutAcls(ctx);
-        }
-        else if (ctx.getHttpContext().getMethod() === "GET") {
-            return this._httpGetAcls(ctx);
-        }
-    }
+export class ResourceAcl extends Array {
     /**
-     * GET
-     * @param ctx
+     * Serialize the ACL to a plain array of ACEs
+     * @returns the list of results
      */
-    async _httpGetAcls(ctx) {
-        return {
-            raw: this.__acl,
-            resolved: await Promise.all(Object.keys(this.__acl).map(async (ace) => {
-                return {
-                    permission: this.__acl[ace],
-                    actor: await this.getUserPublicEntry(ace)
-                };
-            }))
-        };
+    toDto() {
+        return this;
     }
     /**
-     * Get the user public entry
-     *
-     * Override if using a custom User without backward compatibility
-     * @param ace
-     * @returns
+     * Replace the ACL entries from a DTO array
+     * @param dto - the data transfer object
      */
-    async getUserPublicEntry(ace) {
-        return (await User.ref(ace).get())?.toPublicEntry();
-    }
-    /**
-     *
-     */
-    async _httpPutAcls(ctx) {
-        let acl = await ctx.getInput();
-        // This looks like a bad request
-        if (acl.raw) {
-            throw new WebdaError.BadRequest("ACL should have raw field");
-        }
-        this.__acl = acl;
-        await this.save();
-    }
-    // Should cache the user role in the session
-    getGroups(_ctx, user) {
-        if (!user) {
-            return [];
+    fromDto(dto) {
+        this.length = 0;
+        for (const ace of dto) {
+            this.push(ace);
         }
-        let groups = user.getGroups();
-        if (!groups) {
-            groups = [];
-        }
-        groups = groups.slice(0);
-        groups.push(user.getUuid());
-        return groups;
     }
     /**
-     * Get Permissions for one object
-     * @param ctx
-     * @param user
-     * @returns
+     * ACLs for the object
+     * @param action - the action to check
+     * @param user - the user object
+     * @returns the result
      */
-    async getPermissions(ctx, user) {
-        if (!user) {
-            user = await ctx.getCurrentUser();
-        }
-        let permissions = new Set();
-        let groups = this.getGroups(ctx, user);
-        for (let i in this.__acl) {
-            if (groups.indexOf(i) >= 0) {
-                this.__acl[i].split(",").forEach(p => permissions.add(p));
+    async canAct(action, user) {
+        for (const ace of this.filter(a => !a.allow)) {
+            if (ace.action === action) {
+                return "explicitly denied by resource ACL";
             }
         }
-        return [...permissions.values()];
-    }
-    async hasPermission(ctx, user, action) {
-        let groups = this.getGroups(ctx, user);
-        for (let i in this.__acl) {
-            if (groups.indexOf(i) >= 0) {
-                if (this.__acl[i] === "all" || this.__acl[i].split(",").indexOf(action) >= 0) {
-                    return true;
-                }
+        for (const ace of this.filter(a => a.allow)) {
+            if (ace.action === action) {
+                return true;
             }
         }
-        return false;
-    }
-    async canAct(ctx, action) {
-        if (action === "create" && ctx.getCurrentUserId()) {
-            return true;
-        }
-        if (!this.getAcl() || !ctx.getCurrentUserId()) {
-            return "No ACL or user";
-        }
-        let user = await ctx.getCurrentUser();
-        if (await this.hasPermission(ctx, user, action)) {
-            return true;
-        }
-        return "No permission";
+        return "no matching ACE in resource ACL";
     }
 }
-__decorate([
-    Action({
-        methods: ["GET", "PUT"],
-        openapi: {
-            get: {
-                summary: "Get ACLs",
-                responses: {
-                    "200": {
-                        content: {
-                            "application/json": {
-                                schema: {
-                                    type: "object",
-                                    properties: {
-                                        raw: {
-                                            type: "object"
-                                        },
-                                        resolved: {
-                                            type: "array",
-                                            items: {
-                                                type: "object",
-                                                properties: {
-                                                    permission: {
-                                                        type: "string"
-                                                    },
-                                                    actor: {
-                                                        type: "object"
-                                                    }
-                                                }
-                                            }
-                                        }
-                                    }
-                                }
-                            }
-                        }
-                    }
-                }
-            },
-            put: {
-                summary: "Update ACLs",
-                requestBody: {
-                    content: {
-                        "application/json": {
-                            schema: {
-                                type: "object",
-                                properties: {
-                                    raw: {
-                                        type: "object"
-                                    }
-                                }
-                            }
-                        }
-                    }
-                }
-            }
-        }
-    })
-], AclModel.prototype, "acl", null);
-export { AclModel };
 //# sourceMappingURL=aclmodel.js.map

package/lib/models/aclmodel.js.map

@@ -1 +1 @@
-{"version":3,"file":"aclmodel.js","sourceRoot":"","sources":["../../src/models/aclmodel.ts"],"names":[],"mappings":";;;;;;AAAA,OAAO,EAAoB,IAAI,EAAc,UAAU,EAAE,MAAM,UAAU,CAAC;AAC1E,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAIhD;;;;GAIG;AACH,MAAM,CAAC,OAAO,OAAO,QAAS,SAAQ,SAAS;IAA/C;;QAKE;;WAEG;QACH,UAAK,GAAQ,EAAE,CAAC;IAsNlB,CAAC;IAhNC;;OAEG;IACH,KAAK,CAAC,OAAO;QACX,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC;QACtB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC,gBAAgB,EAAE,CAAC;QACrD,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC1D,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC;QACpC,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM;QACV,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;QAC9B,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC;YACpB,IAAI,CAAC,YAAY,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QACrD,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,YAAY,GAAG,EAAE,CAAC;QACzB,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,MAAM;QACJ,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,GAAQ;QACb,IAAI,CAAC,KAAK,GAAG,GAAG,CAAC;IACnB,CAAC;IAED;;;;OAIG;IAwDG,AAAN,KAAK,CAAC,GAAG,CAAC,GAAe;QACvB,IAAI,GAAG,CAAC,cAAc,EAAE,CAAC,SAAS,EAAE,KAAK,KAAK,EAAE,CAAC;YAC/C,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QAChC,CAAC;aAAM,IAAI,GAAG,CAAC,cAAc,EAAE,CAAC,SAAS,EAAE,KAAK,KAAK,EAAE,CAAC;YACtD,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,YAAY,CAAC,GAAqB;QACtC,OAAO;YACL,GAAG,EAAE,IAAI,CAAC,KAAK;YACf,QAAQ,EAAE,MAAM,OAAO,CAAC,GAAG,CACzB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,KAAK,EAAC,GAAG,EAAC,EAAE;gBACtC,OAAO;oBACL,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;oBAC3B,KAAK,EAAE,MAAM,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC;iBAC1C,CAAC;YACJ,CAAC,CAAC,CACH;SACF,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,kBAAkB,CAAC,GAAW;QAClC,OAAO,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC;IACtD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAAC,GAAqB;QACtC,IAAI,GAAG,GAAG,MAAM,GAAG,CAAC,QAAQ,EAAE,CAAC;QAC/B,gCAAgC;QAChC,IAAI,GAAG,CAAC,GAAG,EAAE,CAAC;YACZ,MAAM,IAAI,UAAU,CAAC,UAAU,CAAC,2BAA2B,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,GAAG,CAAC;QACjB,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;IACpB,CAAC;IAED,4CAA4C;IAC5C,SAAS,CAAC,IAAsB,EAAE,IAAU;QAC1C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,IAAI,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC9B,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,GAAG,EAAE,CAAC;QACd,CAAC;QACD,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACzB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5B,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,cAAc,CAAC,GAAqB,EAAE,IAAW;QACrD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,IAAI,GAAG,MAAM,GAAG,CAAC,cAAc,EAAE,CAAC;QACpC,CAAC;QACD,IAAI,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;QACpC,IAAI,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACvC,KAAK,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACzB,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC3B,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;QACD,OAAO,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,GAAqB,EAAE,IAAU,EAAE,MAAc;QACnE,IAAI,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACvC,KAAK,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACzB,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC3B,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC7E,OAAO,IAAI,CAAC;gBACd,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAqB,EAAE,MAAc;QAChD,IAAI,MAAM,KAAK,QAAQ,IAAI,GAAG,CAAC,gBAAgB,EAAE,EAAE,CAAC;YAClD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,gBAAgB,EAAE,EAAE,CAAC;YAC9C,OAAO,gBAAgB,CAAC;QAC1B,CAAC;QACD,IAAI,IAAI,GAAG,MAAM,GAAG,CAAC,cAAc,EAAE,CAAC;QACtC,IAAI,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;YAChD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,eAAe,CAAC;IACzB,CAAC;CACF;AA7GO;IAvDL,MAAM,CAAC;QACN,OAAO,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC;QACvB,OAAO,EAAE;YACP,GAAG,EAAE;gBACH,OAAO,EAAE,UAAU;gBACnB,SAAS,EAAE;oBACT,KAAK,EAAE;wBACL,OAAO,EAAE;4BACP,kBAAkB,EAAE;gCAClB,MAAM,EAAE;oCACN,IAAI,EAAE,QAAQ;oCACd,UAAU,EAAE;wCACV,GAAG,EAAE;4CACH,IAAI,EAAE,QAAQ;yCACf;wCACD,QAAQ,EAAE;4CACR,IAAI,EAAE,OAAO;4CACb,KAAK,EAAE;gDACL,IAAI,EAAE,QAAQ;gDACd,UAAU,EAAE;oDACV,UAAU,EAAE;wDACV,IAAI,EAAE,QAAQ;qDACf;oDACD,KAAK,EAAE;wDACL,IAAI,EAAE,QAAQ;qDACf;iDACF;6CACF;yCACF;qCACF;iCACF;6BACF;yBACF;qBACF;iBACF;aACF;YACD,GAAG,EAAE;gBACH,OAAO,EAAE,aAAa;gBACtB,WAAW,EAAE;oBACX,OAAO,EAAE;wBACP,kBAAkB,EAAE;4BAClB,MAAM,EAAE;gCACN,IAAI,EAAE,QAAQ;gCACd,UAAU,EAAE;oCACV,GAAG,EAAE;wCACH,IAAI,EAAE,QAAQ;qCACf;iCACF;6BACF;yBACF;qBACF;iBACF;aACF;SACF;KACF,CAAC;mCAOD;AAyGH,OAAO,EAAE,QAAQ,EAAE,CAAC"}
+{"version":3,"file":"aclmodel.js","sourceRoot":"","sources":["../../src/models/aclmodel.ts"],"names":[],"mappings":"AAMA;;;;;;GAMG;AACH,MAAM,OAAO,WAAY,SAAQ,KAAU;IACzC;;;OAGG;IACH,KAAK;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;OAGG;IACH,OAAO,CAAC,GAAU;QAChB,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;QAChB,KAAK,MAAM,GAAG,IAAI,GAAG,EAAE,CAAC;YACtB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjB,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CAAC,MAAc,EAAE,IAAU;QACrC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7C,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC1B,OAAO,mCAAmC,CAAC;YAC7C,CAAC;QACH,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5C,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC1B,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QACD,OAAO,iCAAiC,CAAC;IAC3C,CAAC;CACF"}

package/lib/models/coremodel.model.d.ts

@@ -0,0 +1,5 @@
+import { UuidModel } from "@webda/models";
+/** Base model class for Webda applications, extending UuidModel */
+export declare class CoreModel extends UuidModel {
+}
+//# sourceMappingURL=coremodel.model.d.ts.map

package/lib/models/coremodel.model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"coremodel.model.d.ts","sourceRoot":"","sources":["../../src/models/coremodel.model.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAE1C,mEAAmE;AACnE,qBAAa,SAAU,SAAQ,SAAS;CAEvC"}

package/lib/models/coremodel.model.js

@@ -0,0 +1,5 @@
+import { UuidModel } from "@webda/models";
+/** Base model class for Webda applications, extending UuidModel */
+export class CoreModel extends UuidModel {
+}
+//# sourceMappingURL=coremodel.model.js.map

package/lib/models/coremodel.model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"coremodel.model.js","sourceRoot":"","sources":["../../src/models/coremodel.model.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAE1C,mEAAmE;AACnE,MAAM,OAAO,SAAU,SAAQ,SAAS;CAEvC"}

package/lib/models/decorator.d.ts

@@ -0,0 +1,63 @@
+/**
+ * Options accepted by `@Action()` and `@Operation()`.
+ *
+ * The compiler scans for these decorators by name to populate model and
+ * Behavior metadata. The runtime decorator itself is a no-op pass-through —
+ * its only job is to make `@Action()` a valid runtime call so the source
+ * compiles. All actual action wiring is metadata-driven (see
+ * `compiler/src/metadata/actions.ts` and `metadata/behaviors.ts`).
+ */
+export interface ActionOptions {
+    /** Override the registered action name (defaults to the method name). */
+    name?: string;
+    /** OpenAPI overrides for the registered route. */
+    openapi?: any;
+    /** HTTP methods accepted by the action; defaults to `["PUT"]`. */
+    methods?: string[];
+    /** Mark the action as global (class-level) rather than instance-level. */
+    global?: boolean;
+    /**
+     * Behavior-only override for the REST route registration.
+     *
+     *   - `route: "."` ⇒ `/<plural>/{uuid}/<attribute>` (no extra segment)
+     *   - `route: "url"` ⇒ `/<plural>/{uuid}/<attribute>/url`
+     *   - `route: "{hash}"` ⇒ `/<plural>/{uuid}/<attribute>/{hash}`
+     *
+     * `method` overrides the HTTP verb; defaults to `"PUT"` when omitted.
+     */
+    rest?: {
+        route?: string;
+        method?: string;
+    };
+    /** Free-form description forwarded into operation metadata. */
+    description?: string;
+    /** Free-form summary forwarded into operation metadata. */
+    summary?: string;
+}
+/**
+ * Marker decorator used to expose a method as a model or Behavior action.
+ *
+ * The body is intentionally empty. The compiler discovers `@Action`-decorated
+ * methods by inspecting the AST during module generation, then writes the
+ * action metadata into `webda.module.json`. At runtime the decorator simply
+ * returns the method untouched, so applying or omitting it has no behavioural
+ * effect on the method itself.
+ *
+ * Both `@Action` (no parens) and `@Action({...})` are supported.
+ */
+export declare const Action: {
+    (value: any, context: any): any;
+    (_options?: ActionOptions): (value: any, context: any) => any;
+};
+/**
+ * Some simple annotations that can be used to add some behavior to attributes
+ */
+export declare const Masked: {
+    (initialValue: undefined, context: any): void;
+    (context: any, mask: string): (initialValue: undefined, context: any) => void;
+};
+export declare const Encrypted: {
+    (initialValue: undefined, context: any): void;
+    (context: any): (initialValue: undefined, context: any) => void;
+};
+//# sourceMappingURL=decorator.d.ts.map

package/lib/models/decorator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"decorator.d.ts","sourceRoot":"","sources":["../../src/models/decorator.ts"],"names":[],"mappings":"AAGA;;;;;;;;GAQG;AACH,MAAM,WAAW,aAAa;IAC5B,yEAAyE;IACzE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,kDAAkD;IAClD,OAAO,CAAC,EAAE,GAAG,CAAC;IACd,kEAAkE;IAClE,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,0EAA0E;IAC1E,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB;;;;;;;;OAQG;IACH,IAAI,CAAC,EAAE;QACL,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,+DAA+D;IAC/D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,2DAA2D;IAC3D,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;;;;;GAUG;AACH,eAAO,MAAM,MAAM;;;CAAwF,CAAC;AAE5G;;GAEG;AACH,eAAO,MAAM,MAAM;;;CA0BjB,CAAC;AAEH,eAAO,MAAM,SAAS;;;CAqBpB,CAAC"}

package/lib/models/decorator.js

@@ -0,0 +1,63 @@
+import { createMethodDecorator, createPropertyDecorator } from "@webda/tsc-esm";
+import { truncate } from "fs/promises";
+/**
+ * Marker decorator used to expose a method as a model or Behavior action.
+ *
+ * The body is intentionally empty. The compiler discovers `@Action`-decorated
+ * methods by inspecting the AST during module generation, then writes the
+ * action metadata into `webda.module.json`. At runtime the decorator simply
+ * returns the method untouched, so applying or omitting it has no behavioural
+ * effect on the method itself.
+ *
+ * Both `@Action` (no parens) and `@Action({...})` are supported.
+ */
+export const Action = createMethodDecorator((value, _context, _options) => value);
+/**
+ * Some simple annotations that can be used to add some behavior to attributes
+ */
+export const Masked = createPropertyDecorator((value, context, mask) => {
+    if (context.kind === "field") {
+        context.addInitializer(function maskedInit() {
+            const descriptor = Object.getOwnPropertyDescriptor(this, context.name) || {};
+            Object.defineProperty(this, context.name, {
+                ...descriptor,
+                get: function maskedGet() {
+                    return this[`__${context.name}`];
+                },
+                set: function maskedSet(value) {
+                    value = value.padEnd(mask.length, "?");
+                    for (let i = 0; i < mask.length; i++) {
+                        if (mask[i] === "X") {
+                            value = value.substring(0, i) + "X" + value.substring(i + 1);
+                        }
+                    }
+                    if (truncate) {
+                        value = value.substring(0, mask.length);
+                    }
+                    this[`__${context.name}`] = value;
+                }
+            });
+        });
+    }
+});
+export const Encrypted = createPropertyDecorator((value, context) => {
+    if (context.kind === "field") {
+        context.addInitializer(function encryptedInit() {
+            const descriptor = Object.getOwnPropertyDescriptor(this, context.name) || {};
+            Object.defineProperty(this, context.name, {
+                ...descriptor,
+                get: function encryptedGet() {
+                    const val = this[`__${context.name}`];
+                    if (val && val.startsWith("ENCRYPTED:")) {
+                        return val.substring("ENCRYPTED:".length);
+                    }
+                    return val;
+                },
+                set: function encryptedSet(value) {
+                    this[`__${context.name}`] = "ENCRYPTED:" + value;
+                }
+            });
+        });
+    }
+});
+//# sourceMappingURL=decorator.js.map

package/lib/models/decorator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"decorator.js","sourceRoot":"","sources":["../../src/models/decorator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAChF,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAuCvC;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,MAAM,GAAG,qBAAqB,CAAC,CAAC,KAAU,EAAE,QAAa,EAAE,QAAwB,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;AAE5G;;GAEG;AACH,MAAM,CAAC,MAAM,MAAM,GAAG,uBAAuB,CAAC,CAAC,KAAU,EAAE,OAAO,EAAE,IAAY,EAAE,EAAE;IAClF,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC7B,OAAO,CAAC,cAAc,CAAC,SAAS,UAAU;YACxC,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YAC7E,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE;gBACxC,GAAG,UAAU;gBAEb,GAAG,EAAE,SAAS,SAAS;oBACrB,OAAO,IAAI,CAAC,KAAK,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;gBACnC,CAAC;gBAED,GAAG,EAAE,SAAS,SAAS,CAAC,KAAK;oBAC3B,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;oBACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;wBACrC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;4BACpB,KAAK,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,GAAG,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;wBAC/D,CAAC;oBACH,CAAC;oBACD,IAAI,QAAQ,EAAE,CAAC;wBACb,KAAK,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;oBAC1C,CAAC;oBACD,IAAI,CAAC,KAAK,OAAO,CAAC,IAAI,EAAE,CAAC,GAAG,KAAK,CAAC;gBACpC,CAAC;aACF,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,SAAS,GAAG,uBAAuB,CAAC,CAAC,KAAU,EAAE,OAAO,EAAE,EAAE;IACvE,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC7B,OAAO,CAAC,cAAc,CAAC,SAAS,aAAa;YAC3C,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YAC7E,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE;gBACxC,GAAG,UAAU;gBAEb,GAAG,EAAE,SAAS,YAAY;oBACxB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;oBACtC,IAAI,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;wBACxC,OAAO,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;oBAC5C,CAAC;oBACD,OAAO,GAAG,CAAC;gBACb,CAAC;gBAED,GAAG,EAAE,SAAS,YAAY,CAAC,KAAK;oBAC9B,IAAI,CAAC,KAAK,OAAO,CAAC,IAAI,EAAE,CAAC,GAAG,YAAY,GAAG,KAAK,CAAC;gBACnD,CAAC;aACF,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC"}

package/lib/models/deployment.d.ts

@@ -20,4 +20,5 @@ export default interface Deployment {
     units: DeploymentUnit[];
     name?: string;
 }
-export { Deployment };
+export type { Deployment };
+//# sourceMappingURL=deployment.d.ts.map

package/lib/models/deployment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployment.d.ts","sourceRoot":"","sources":["../../src/models/deployment.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;GAIG;AACH,MAAM,CAAC,OAAO,WAAW,UAAU;IACjC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,GAAG,CAAC;IAChB,SAAS,EAAE,GAAG,CAAC;IACf,QAAQ,EAAE,GAAG,CAAC;IACd,KAAK,EAAE,cAAc,EAAE,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,YAAY,EAAE,UAAU,EAAE,CAAC"}

package/lib/models/ident.model.d.ts

@@ -0,0 +1,89 @@
+import type { Settable } from "@webda/models";
+import { OwnerModel } from "./ownermodel.model.js";
+import type { User } from "./user.model.js";
+/** OAuth tokens associated with an identity provider */
+export declare class IdentTokens {
+    refresh: string;
+    access: string;
+}
+/**
+ * First basic model for Ident
+ * @class
+ * @WebdaModel
+ */
+export declare class Ident extends OwnerModel {
+    /** Create a new Ident
+     * @param data - initial data
+     */
+    constructor(data?: Settable<Ident>);
+    /**
+     * Type of the ident
+     */
+    _type: string;
+    /**
+     * Uid on the provider
+     */
+    uid: string;
+    /**
+     * Provider profile
+     */
+    __profile: any;
+    /**
+     * Tokens for this ident
+     */
+    __tokens: IdentTokens;
+    /**
+     * Last time the ident was used
+     */
+    get _lastUsed(): Date;
+    set _lastUsed(value: string | number | Date);
+    /**
+     * If the ident is validated
+     */
+    _failedLogin: number;
+    /**
+     * If EmailIdent
+     */
+    _lastValidationEmail?: number;
+    /**
+     * When the ident was validated
+     */
+    get _validation(): Date;
+    set _validation(value: string | number | Date);
+    /**
+     * Email for this ident if it exist
+     */
+    email?: string;
+    /**
+     * Provider id
+     */
+    provider?: string;
+    /**
+     * Get the email for this ident
+     * @returns the result string
+     */
+    getEmail(): string;
+    /**
+     * Get the provider type
+     * @returns the result
+     */
+    getType(): string;
+    /**
+     * Set the provider type
+     * @param type - the type to look up
+     */
+    setType(type: any): void;
+    /**
+     * Get the user who owns this ident
+     * @returns the result
+     */
+    getUser(): import("@webda/models").ModelLink<User>;
+    /**
+     * Set the user who owns this ident
+     * @param uuid - the unique identifier
+     */
+    setUser(uuid: string | User): void;
+    /** Generated by @webda/content-mapper: include values held in WEBDA_STORAGE. */
+    toJSON(): any;
+}
+//# sourceMappingURL=ident.model.d.ts.map

package/lib/models/ident.model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ident.model.d.ts","sourceRoot":"","sources":["../../src/models/ident.model.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAA8B,QAAQ,EAAE,MAAM,eAAe,CAAC;AAC1E,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AAE5C,wDAAwD;AACxD,qBAAa,WAAW;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;GAIG;AACH,qBAAa,KAAM,SAAQ,UAAU;IACnC;;OAEG;IACH,YAAY,IAAI,CAAC,EAAE,QAAQ,CAAC,KAAK,CAAC,EAEjC;IACD;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC;IACd;;OAEG;IACH,GAAG,EAAE,MAAM,CAAC;IACZ;;OAEG;IACH,SAAS,EAAE,GAAG,CAAC;IACf;;OAEG;IACH,QAAQ,EAAE,WAAW,CAAC;IACtB;;OAEG;IACH,IAAI,SAAS,IAAI,IAAI,CAEpB;IACD,IAAI,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,EAE1C;IACD;;OAEG;IACH,YAAY,EAAE,MAAM,CAAK;IACzB;;OAEG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAK;IAClC;;OAEG;IACH,IAAI,WAAW,IAAI,IAAI,CAEtB;IACD,IAAI,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,EAE5C;IACD;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB;;;OAGG;IACH,QAAQ,IAAI,MAAM,CAEjB;IAED;;;OAGG;IACH,OAAO,WAEN;IAED;;;OAGG;IACH,OAAO,CAAC,IAAI,KAAA,QAEX;IAED;;;OAGG;IACH,OAAO,4CAEN;IAED;;;OAGG;IACH,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,QAE1B;IAED,gFAAgF;IAChF,MAAM,IAAI,GAAG,CAOZ;CACF"}

package/lib/models/ident.model.js

@@ -0,0 +1,115 @@
+import { WEBDA_STORAGE } from "@webda/models";
+import { OwnerModel } from "./ownermodel.model.js";
+/** OAuth tokens associated with an identity provider */
+export class IdentTokens {
+    refresh;
+    access;
+}
+/**
+ * First basic model for Ident
+ * @class
+ * @WebdaModel
+ */
+export class Ident extends OwnerModel {
+    /** Create a new Ident
+     * @param data - initial data
+     */
+    constructor(data) {
+        super(data);
+    }
+    /**
+     * Type of the ident
+     */
+    _type;
+    /**
+     * Uid on the provider
+     */
+    uid;
+    /**
+     * Provider profile
+     */
+    __profile;
+    /**
+     * Tokens for this ident
+     */
+    __tokens;
+    /**
+     * Last time the ident was used
+     */
+    get _lastUsed() {
+        return this[WEBDA_STORAGE]["_lastUsed"] ?? undefined;
+    }
+    set _lastUsed(value) {
+        this[WEBDA_STORAGE]["_lastUsed"] = value !== undefined && value !== null ? new Date(value) : value;
+    }
+    /**
+     * If the ident is validated
+     */
+    _failedLogin = 0;
+    /**
+     * If EmailIdent
+     */
+    _lastValidationEmail = 0;
+    /**
+     * When the ident was validated
+     */
+    get _validation() {
+        return this[WEBDA_STORAGE]["_validation"];
+    }
+    set _validation(value) {
+        this[WEBDA_STORAGE]["_validation"] = value !== undefined && value !== null ? new Date(value) : value;
+    }
+    /**
+     * Email for this ident if it exist
+     */
+    email;
+    /**
+     * Provider id
+     */
+    provider;
+    /**
+     * Get the email for this ident
+     * @returns the result string
+     */
+    getEmail() {
+        return this.email;
+    }
+    /**
+     * Get the provider type
+     * @returns the result
+     */
+    getType() {
+        return this._type;
+    }
+    /**
+     * Set the provider type
+     * @param type - the type to look up
+     */
+    setType(type) {
+        this._type = type;
+    }
+    /**
+     * Get the user who owns this ident
+     * @returns the result
+     */
+    getUser() {
+        return this.getOwner();
+    }
+    /**
+     * Set the user who owns this ident
+     * @param uuid - the unique identifier
+     */
+    setUser(uuid) {
+        this.setOwner(typeof uuid === "string" ? uuid : uuid.getPrimaryKey());
+    }
+    /** Generated by @webda/content-mapper: include values held in WEBDA_STORAGE. */
+    toJSON() {
+        const result = super.toJSON ? super.toJSON() : {};
+        for (const key of Object.keys(this)) {
+            result[key] = this[key];
+        }
+        Object.assign(result, this[WEBDA_STORAGE]);
+        return result;
+    }
+}
+//# sourceMappingURL=ident.model.js.map

package/lib/models/ident.model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ident.model.js","sourceRoot":"","sources":["../../src/models/ident.model.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAE9C,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAGnD,wDAAwD;AACxD,MAAM,OAAO,WAAW;IACtB,OAAO,CAAS;IAChB,MAAM,CAAS;CAChB;AAED;;;;GAIG;AACH,MAAM,OAAO,KAAM,SAAQ,UAAU;IACnC;;OAEG;IACH,YAAY,IAAsB;QAChC,KAAK,CAAC,IAAI,CAAC,CAAC;IACd,CAAC;IACD;;OAEG;IACH,KAAK,CAAS;IACd;;OAEG;IACH,GAAG,CAAS;IACZ;;OAEG;IACH,SAAS,CAAM;IACf;;OAEG;IACH,QAAQ,CAAc;IACtB;;OAEG;IACH,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,aAAa,CAAC,CAAC,WAAW,CAAC,IAAI,SAAS,CAAC;IACvD,CAAC;IACD,IAAI,SAAS,CAAC,KAA6B;QACzC,IAAI,CAAC,aAAa,CAAC,CAAC,WAAW,CAAC,GAAG,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAA+B,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAC/H,CAAC;IACD;;OAEG;IACH,YAAY,GAAW,CAAC,CAAC;IACzB;;OAEG;IACH,oBAAoB,GAAY,CAAC,CAAC;IAClC;;OAEG;IACH,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,aAAa,CAAC,CAAC,aAAa,CAAC,CAAC;IAC5C,CAAC;IACD,IAAI,WAAW,CAAC,KAA6B;QAC3C,IAAI,CAAC,aAAa,CAAC,CAAC,aAAa,CAAC,GAAG,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAA+B,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IACjI,CAAC;IACD;;OAEG;IACH,KAAK,CAAU;IACf;;OAEG;IACH,QAAQ,CAAU;IAElB;;;OAGG;IACH,QAAQ;QACN,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED;;;OAGG;IACH,OAAO;QACL,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED;;;OAGG;IACH,OAAO,CAAC,IAAI;QACV,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED;;;OAGG;IACH,OAAO;QACL,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC;IACzB,CAAC;IAED;;;OAGG;IACH,OAAO,CAAC,IAAmB;QACzB,IAAI,CAAC,QAAQ,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;IACxE,CAAC;IAED,gFAAgF;IAChF,MAAM;QACJ,MAAM,MAAM,GAAS,KAAK,CAAC,MAAkB,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACpC,MAAM,CAAC,GAAG,CAAC,GAAI,IAAY,CAAC,GAAG,CAAC,CAAC;QACnC,CAAC;QACD,MAAM,CAAC,MAAM,CAAC,MAAM,EAAG,IAAY,CAAC,aAAa,CAAC,CAAC,CAAC;QACpD,OAAO,MAAM,CAAC;IAChB,CAAC;CACF"}