@webiny/api-core 0.0.0-unstable.61c048f412

package/features/logger/abstractions.d.ts

@@ -0,0 +1,13 @@
+export interface ILogger {
+    trace(objOrMsg: object | string, ...args: any[]): void;
+    debug(objOrMsg: object | string, ...args: any[]): void;
+    info(objOrMsg: object | string, ...args: any[]): void;
+    warn(objOrMsg: object | string, ...args: any[]): void;
+    error(objOrMsg: object | string, ...args: any[]): void;
+    fatal(objOrMsg: object | string, ...args: any[]): void;
+    log(objOrMsg: object | string, ...args: any[]): void;
+}
+export declare const Logger: import("@webiny/di").Abstraction<ILogger>;
+export declare namespace Logger {
+    type Interface = ILogger;
+}

package/features/logger/abstractions.js

@@ -0,0 +1,4 @@
+import { createAbstraction } from "@webiny/feature/api";
+export const Logger = createAbstraction("Logger");
+
+//# sourceMappingURL=abstractions.js.map

package/features/logger/abstractions.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["createAbstraction","Logger"],"sources":["abstractions.ts"],"sourcesContent":["import { createAbstraction } from \"@webiny/feature/api\";\n\nexport interface ILogger {\n    // Basic logging levels\n    trace(objOrMsg: object | string, ...args: any[]): void;\n    debug(objOrMsg: object | string, ...args: any[]): void;\n    info(objOrMsg: object | string, ...args: any[]): void;\n    warn(objOrMsg: object | string, ...args: any[]): void;\n    error(objOrMsg: object | string, ...args: any[]): void;\n    fatal(objOrMsg: object | string, ...args: any[]): void;\n\n    // Generic log (defaults to 'info')\n    log(objOrMsg: object | string, ...args: any[]): void;\n}\n\nexport const Logger = createAbstraction<ILogger>(\"Logger\");\n\nexport namespace Logger {\n    export type Interface = ILogger;\n}\n"],"mappings":"AAAA,SAASA,iBAAiB,QAAQ,qBAAqB;AAevD,OAAO,MAAMC,MAAM,GAAGD,iBAAiB,CAAU,QAAQ,CAAC","ignoreList":[]}

package/features/logger/feature.d.ts

@@ -0,0 +1 @@
+export declare const LoggerFeature: import("@webiny/feature/api/createFeature.js").FeatureDefinition<unknown>;

package/features/logger/feature.js

@@ -0,0 +1,10 @@
+import { createFeature } from "@webiny/feature/api";
+import { Logger } from "./LoggerService.js";
+export const LoggerFeature = createFeature({
+  name: "LoggerFeature",
+  register(container) {
+    container.register(Logger);
+  }
+});
+
+//# sourceMappingURL=feature.js.map

package/features/logger/feature.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["createFeature","Logger","LoggerFeature","name","register","container"],"sources":["feature.ts"],"sourcesContent":["import { createFeature } from \"@webiny/feature/api\";\nimport { Logger } from \"./LoggerService.js\";\n\nexport const LoggerFeature = createFeature({\n    name: \"LoggerFeature\",\n    register(container) {\n        container.register(Logger);\n    }\n});\n"],"mappings":"AAAA,SAASA,aAAa,QAAQ,qBAAqB;AACnD,SAASC,MAAM;AAEf,OAAO,MAAMC,aAAa,GAAGF,aAAa,CAAC;EACvCG,IAAI,EAAE,eAAe;EACrBC,QAAQA,CAACC,SAAS,EAAE;IAChBA,SAAS,CAACD,QAAQ,CAACH,MAAM,CAAC;EAC9B;AACJ,CAAC,CAAC","ignoreList":[]}

package/features/logger/index.d.ts

@@ -0,0 +1 @@
+export { Logger } from "./abstractions.js";

package/features/logger/index.js

@@ -0,0 +1,3 @@
+export { Logger } from "./abstractions.js";
+
+//# sourceMappingURL=index.js.map

package/features/logger/index.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["Logger"],"sources":["index.ts"],"sourcesContent":["export { Logger } from \"./abstractions.js\";\n"],"mappings":"AAAA,SAASA,MAAM","ignoreList":[]}

package/features/security/IdentityContext/AnonymousIdentity.d.ts

@@ -0,0 +1,9 @@
+import { Identity } from "./Identity.js";
+/**
+ * Represents an anonymous (unauthenticated) user.
+ * This identity has no permissions by default.
+ */
+export declare class AnonymousIdentity extends Identity {
+    constructor();
+    isAnonymous(): boolean;
+}

package/features/security/IdentityContext/AnonymousIdentity.js

@@ -0,0 +1,20 @@
+import { Identity } from "./Identity.js";
+
+/**
+ * Represents an anonymous (unauthenticated) user.
+ * This identity has no permissions by default.
+ */
+export class AnonymousIdentity extends Identity {
+  constructor() {
+    super({
+      id: "anonymous",
+      displayName: "Anonymous",
+      type: "anonymous"
+    });
+  }
+  isAnonymous() {
+    return true;
+  }
+}
+
+//# sourceMappingURL=AnonymousIdentity.js.map

package/features/security/IdentityContext/AnonymousIdentity.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["Identity","AnonymousIdentity","constructor","id","displayName","type","isAnonymous"],"sources":["AnonymousIdentity.ts"],"sourcesContent":["import { Identity } from \"./Identity.js\";\n\n/**\n * Represents an anonymous (unauthenticated) user.\n * This identity has no permissions by default.\n */\nexport class AnonymousIdentity extends Identity {\n    constructor() {\n        super({\n            id: \"anonymous\",\n            displayName: \"Anonymous\",\n            type: \"anonymous\"\n        });\n    }\n\n    isAnonymous(): boolean {\n        return true;\n    }\n}\n"],"mappings":"AAAA,SAASA,QAAQ;;AAEjB;AACA;AACA;AACA;AACA,OAAO,MAAMC,iBAAiB,SAASD,QAAQ,CAAC;EAC5CE,WAAWA,CAAA,EAAG;IACV,KAAK,CAAC;MACFC,EAAE,EAAE,WAAW;MACfC,WAAW,EAAE,WAAW;MACxBC,IAAI,EAAE;IACV,CAAC,CAAC;EACN;EAEAC,WAAWA,CAAA,EAAY;IACnB,OAAO,IAAI;EACf;AACJ","ignoreList":[]}

package/features/security/IdentityContext/AuthenticatedIdentity.d.ts

@@ -0,0 +1,7 @@
+import { Identity } from "./Identity.js";
+/**
+ * Represents an authenticated user identity.
+ */
+export declare class AuthenticatedIdentity extends Identity {
+    isAnonymous(): boolean;
+}

package/features/security/IdentityContext/AuthenticatedIdentity.js

@@ -0,0 +1,12 @@
+import { Identity } from "./Identity.js";
+
+/**
+ * Represents an authenticated user identity.
+ */
+export class AuthenticatedIdentity extends Identity {
+  isAnonymous() {
+    return false;
+  }
+}
+
+//# sourceMappingURL=AuthenticatedIdentity.js.map

package/features/security/IdentityContext/AuthenticatedIdentity.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["Identity","AuthenticatedIdentity","isAnonymous"],"sources":["AuthenticatedIdentity.ts"],"sourcesContent":["import { Identity } from \"./Identity.js\";\n\n/**\n * Represents an authenticated user identity.\n */\nexport class AuthenticatedIdentity extends Identity {\n    isAnonymous(): boolean {\n        return false;\n    }\n}\n"],"mappings":"AAAA,SAASA,QAAQ;;AAEjB;AACA;AACA;AACA,OAAO,MAAMC,qBAAqB,SAASD,QAAQ,CAAC;EAChDE,WAAWA,CAAA,EAAY;IACnB,OAAO,KAAK;EAChB;AACJ","ignoreList":[]}

package/features/security/IdentityContext/Identity.d.ts

@@ -0,0 +1,79 @@
+import type { SecurityPermission } from "../../../types/security.js";
+export declare namespace Identity {
+    type Profile = IdentityProfile;
+}
+export interface IdentityContext {
+    /**
+     * Which tenant is the home tenant for this identity?
+     * If omitted, it will default to `root`.
+     */
+    defaultTenantId?: string;
+    /**
+     * Can this identity access the current tenant?
+     * If omitted, it will default to `true`.
+     */
+    canAccessTenant?: boolean;
+    /**
+     * Any other custom context data.
+     */
+    [key: string]: any;
+}
+interface IdentityProfileContext {
+    canAccessTenant?: boolean;
+    defaultTenantId?: string;
+    [key: string]: any;
+}
+export type IdentityData = {
+    id: string;
+    displayName: string;
+    type: string;
+    roles?: string[];
+    teams?: string[];
+    permissions?: SecurityPermission[];
+    profile?: IdentityProfileData;
+    context?: IdentityProfileContext;
+};
+/**
+ * Abstract base class for all identity types.
+ * Provides a common interface for identity checks across the codebase.
+ */
+export declare abstract class Identity {
+    private readonly data;
+    readonly profile: IdentityProfile;
+    readonly context: IdentityContext;
+    constructor(identityData: IdentityData);
+    get id(): string;
+    get displayName(): string;
+    get type(): string;
+    get permissions(): SecurityPermission[];
+    get roles(): string[];
+    get teams(): string[];
+    /**
+     * Check if this identity represents an anonymous (unauthenticated) user.
+     */
+    abstract isAnonymous(): boolean;
+    isAdmin(): boolean;
+    toJson(): Required<Omit<IdentityData, "context">>;
+}
+interface IdentityProfileData {
+    firstName?: string;
+    lastName?: string;
+    email?: string;
+    external?: boolean;
+}
+declare class IdentityProfile {
+    private id;
+    private data;
+    constructor(id: string, data: Partial<IdentityProfileData>);
+    get firstName(): string;
+    get lastName(): string;
+    get email(): string;
+    get external(): boolean;
+    toJson(): {
+        firstName: string;
+        lastName: string;
+        email: string;
+        external: boolean;
+    };
+}
+export {};

package/features/security/IdentityContext/Identity.js

@@ -0,0 +1,76 @@
+/**
+ * Abstract base class for all identity types.
+ * Provides a common interface for identity checks across the codebase.
+ */
+export class Identity {
+  constructor(identityData) {
+    this.data = identityData;
+    this.profile = new IdentityProfile(this.id, identityData.profile || {});
+    this.context = identityData.context ?? {};
+  }
+  get id() {
+    return this.data.id;
+  }
+  get displayName() {
+    return this.data.displayName;
+  }
+  get type() {
+    return this.data.type;
+  }
+  get permissions() {
+    return this.data.permissions ?? [];
+  }
+  get roles() {
+    return this.data.roles ?? [];
+  }
+  get teams() {
+    return this.data.teams ?? [];
+  }
+
+  /**
+   * Check if this identity represents an anonymous (unauthenticated) user.
+   */
+
+  isAdmin() {
+    return this.type === "admin";
+  }
+  toJson() {
+    return {
+      id: this.id,
+      displayName: this.displayName,
+      type: this.type,
+      roles: this.roles,
+      teams: this.teams,
+      permissions: this.permissions,
+      profile: this.profile.toJson()
+    };
+  }
+}
+class IdentityProfile {
+  constructor(id, data) {
+    this.id = id;
+    this.data = data;
+  }
+  get firstName() {
+    return this.data.firstName ?? "";
+  }
+  get lastName() {
+    return this.data.lastName ?? "";
+  }
+  get email() {
+    return this.data.email ?? `id:${this.id}`;
+  }
+  get external() {
+    return this.data.external ?? false;
+  }
+  toJson() {
+    return {
+      firstName: this.firstName,
+      lastName: this.lastName,
+      email: this.email,
+      external: this.external
+    };
+  }
+}
+
+//# sourceMappingURL=Identity.js.map

package/features/security/IdentityContext/Identity.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["Identity","constructor","identityData","data","profile","IdentityProfile","id","context","displayName","type","permissions","roles","teams","isAdmin","toJson","firstName","lastName","email","external"],"sources":["Identity.ts"],"sourcesContent":["import type { SecurityPermission } from \"~/types/security.js\";\n\nexport namespace Identity {\n    export type Profile = IdentityProfile;\n}\n\nexport interface IdentityContext {\n    /**\n     * Which tenant is the home tenant for this identity?\n     * If omitted, it will default to `root`.\n     */\n    defaultTenantId?: string;\n    /**\n     * Can this identity access the current tenant?\n     * If omitted, it will default to `true`.\n     */\n    canAccessTenant?: boolean;\n    /**\n     * Any other custom context data.\n     */\n    [key: string]: any;\n}\n\ninterface IdentityProfileContext {\n    canAccessTenant?: boolean;\n    defaultTenantId?: string;\n    [key: string]: any;\n}\n\nexport type IdentityData = {\n    id: string;\n    displayName: string;\n    type: string;\n    roles?: string[];\n    teams?: string[];\n    permissions?: SecurityPermission[];\n    profile?: IdentityProfileData;\n    context?: IdentityProfileContext;\n};\n\n/**\n * Abstract base class for all identity types.\n * Provides a common interface for identity checks across the codebase.\n */\nexport abstract class Identity {\n    private readonly data: IdentityData;\n    public readonly profile: IdentityProfile;\n    public readonly context: IdentityContext;\n\n    constructor(identityData: IdentityData) {\n        this.data = identityData;\n        this.profile = new IdentityProfile(this.id, identityData.profile || {});\n        this.context = identityData.context ?? {};\n    }\n\n    get id() {\n        return this.data.id;\n    }\n\n    get displayName() {\n        return this.data.displayName;\n    }\n    get type() {\n        return this.data.type;\n    }\n\n    get permissions(): SecurityPermission[] {\n        return this.data.permissions ?? [];\n    }\n\n    get roles(): string[] {\n        return this.data.roles ?? [];\n    }\n\n    get teams(): string[] {\n        return this.data.teams ?? [];\n    }\n\n    /**\n     * Check if this identity represents an anonymous (unauthenticated) user.\n     */\n    abstract isAnonymous(): boolean;\n\n    isAdmin(): boolean {\n        return this.type === \"admin\";\n    }\n\n    toJson(): Required<Omit<IdentityData, \"context\">> {\n        return {\n            id: this.id,\n            displayName: this.displayName,\n            type: this.type,\n            roles: this.roles,\n            teams: this.teams,\n            permissions: this.permissions,\n            profile: this.profile.toJson()\n        };\n    }\n}\n\ninterface IdentityProfileData {\n    firstName?: string;\n    lastName?: string;\n    email?: string;\n    external?: boolean;\n}\n\nclass IdentityProfile {\n    constructor(\n        private id: string,\n        private data: Partial<IdentityProfileData>\n    ) {}\n\n    get firstName(): string {\n        return this.data.firstName ?? \"\";\n    }\n\n    get lastName(): string {\n        return this.data.lastName ?? \"\";\n    }\n\n    get email(): string {\n        return this.data.email ?? `id:${this.id}`;\n    }\n\n    get external(): boolean {\n        return this.data.external ?? false;\n    }\n\n    toJson() {\n        return {\n            firstName: this.firstName,\n            lastName: this.lastName,\n            email: this.email,\n            external: this.external\n        };\n    }\n}\n"],"mappings":"AAwCA;AACA;AACA;AACA;AACA,OAAO,MAAeA,QAAQ,CAAC;EAK3BC,WAAWA,CAACC,YAA0B,EAAE;IACpC,IAAI,CAACC,IAAI,GAAGD,YAAY;IACxB,IAAI,CAACE,OAAO,GAAG,IAAIC,eAAe,CAAC,IAAI,CAACC,EAAE,EAAEJ,YAAY,CAACE,OAAO,IAAI,CAAC,CAAC,CAAC;IACvE,IAAI,CAACG,OAAO,GAAGL,YAAY,CAACK,OAAO,IAAI,CAAC,CAAC;EAC7C;EAEA,IAAID,EAAEA,CAAA,EAAG;IACL,OAAO,IAAI,CAACH,IAAI,CAACG,EAAE;EACvB;EAEA,IAAIE,WAAWA,CAAA,EAAG;IACd,OAAO,IAAI,CAACL,IAAI,CAACK,WAAW;EAChC;EACA,IAAIC,IAAIA,CAAA,EAAG;IACP,OAAO,IAAI,CAACN,IAAI,CAACM,IAAI;EACzB;EAEA,IAAIC,WAAWA,CAAA,EAAyB;IACpC,OAAO,IAAI,CAACP,IAAI,CAACO,WAAW,IAAI,EAAE;EACtC;EAEA,IAAIC,KAAKA,CAAA,EAAa;IAClB,OAAO,IAAI,CAACR,IAAI,CAACQ,KAAK,IAAI,EAAE;EAChC;EAEA,IAAIC,KAAKA,CAAA,EAAa;IAClB,OAAO,IAAI,CAACT,IAAI,CAACS,KAAK,IAAI,EAAE;EAChC;;EAEA;AACJ;AACA;;EAGIC,OAAOA,CAAA,EAAY;IACf,OAAO,IAAI,CAACJ,IAAI,KAAK,OAAO;EAChC;EAEAK,MAAMA,CAAA,EAA4C;IAC9C,OAAO;MACHR,EAAE,EAAE,IAAI,CAACA,EAAE;MACXE,WAAW,EAAE,IAAI,CAACA,WAAW;MAC7BC,IAAI,EAAE,IAAI,CAACA,IAAI;MACfE,KAAK,EAAE,IAAI,CAACA,KAAK;MACjBC,KAAK,EAAE,IAAI,CAACA,KAAK;MACjBF,WAAW,EAAE,IAAI,CAACA,WAAW;MAC7BN,OAAO,EAAE,IAAI,CAACA,OAAO,CAACU,MAAM,CAAC;IACjC,CAAC;EACL;AACJ;AASA,MAAMT,eAAe,CAAC;EAClBJ,WAAWA,CACCK,EAAU,EACVH,IAAkC,EAC5C;IAAA,KAFUG,EAAU,GAAVA,EAAU;IAAA,KACVH,IAAkC,GAAlCA,IAAkC;EAC3C;EAEH,IAAIY,SAASA,CAAA,EAAW;IACpB,OAAO,IAAI,CAACZ,IAAI,CAACY,SAAS,IAAI,EAAE;EACpC;EAEA,IAAIC,QAAQA,CAAA,EAAW;IACnB,OAAO,IAAI,CAACb,IAAI,CAACa,QAAQ,IAAI,EAAE;EACnC;EAEA,IAAIC,KAAKA,CAAA,EAAW;IAChB,OAAO,IAAI,CAACd,IAAI,CAACc,KAAK,IAAI,MAAM,IAAI,CAACX,EAAE,EAAE;EAC7C;EAEA,IAAIY,QAAQA,CAAA,EAAY;IACpB,OAAO,IAAI,CAACf,IAAI,CAACe,QAAQ,IAAI,KAAK;EACtC;EAEAJ,MAAMA,CAAA,EAAG;IACL,OAAO;MACHC,SAAS,EAAE,IAAI,CAACA,SAAS;MACzBC,QAAQ,EAAE,IAAI,CAACA,QAAQ;MACvBC,KAAK,EAAE,IAAI,CAACA,KAAK;MACjBC,QAAQ,EAAE,IAAI,CAACA;IACnB,CAAC;EACL;AACJ","ignoreList":[]}

package/features/security/IdentityContext/IdentityContext.d.ts

@@ -0,0 +1,23 @@
+import { IdentityContext as Abstraction } from "./abstractions.js";
+import { Identity } from "./Identity.js";
+import { AuthorizationContext } from "../authorization/AuthorizationContext/index.js";
+import type { SecurityPermission } from "../../../types/security.js";
+import { WcpContext } from "../../wcp/WcpContext/index.js";
+declare class IdentityContextImpl implements Abstraction.Interface {
+    private authorizationContext;
+    private wcpContext;
+    private identity;
+    constructor(authorizationContext: AuthorizationContext.Interface, wcpContext: WcpContext.Interface);
+    getIdentity(): Identity;
+    setIdentity(identity: Identity | undefined): void;
+    withIdentity<T>(identity: Identity | undefined, cb: () => Promise<T>): Promise<T>;
+    withoutAuthorization<T>(cb: () => Promise<T>): Promise<T>;
+    isAuthorizationEnabled(): boolean;
+    getPermission<TPermission extends SecurityPermission = SecurityPermission>(name: string): Promise<TPermission | null>;
+    getPermissions<TPermission extends SecurityPermission = SecurityPermission>(name: string): Promise<TPermission[]>;
+    listPermissions(): Promise<SecurityPermission[]>;
+    hasFullAccess(): Promise<boolean>;
+    private applyAaclLogic;
+}
+export declare const IdentityContext: import("@webiny/di").Implementation<typeof IdentityContextImpl>;
+export {};

package/features/security/IdentityContext/IdentityContext.js

@@ -0,0 +1,125 @@
+import { AsyncLocalStorage } from "async_hooks";
+import minimatch from "minimatch";
+import { createImplementation } from "@webiny/di";
+import { IdentityContext as Abstraction } from "./abstractions.js";
+import { AnonymousIdentity } from "./AnonymousIdentity.js";
+import { AuthorizationContext } from "../authorization/AuthorizationContext/index.js";
+import { filterOutCustomWbyAppsPermissions } from "../utils/filterOutCustomWbyAppsPermissions.js";
+import { WcpContext } from "../../wcp/WcpContext/index.js";
+const identityStorage = new AsyncLocalStorage();
+class IdentityContextImpl {
+  identity = new AnonymousIdentity();
+  constructor(authorizationContext, wcpContext) {
+    this.authorizationContext = authorizationContext;
+    this.wcpContext = wcpContext;
+  }
+
+  // ========================================================================
+  // Identity Methods
+  // ========================================================================
+
+  getIdentity() {
+    // Check for identity override first (from withIdentity())
+    const override = identityStorage.getStore();
+    if (override !== undefined) {
+      return override;
+    }
+    return this.identity;
+  }
+  setIdentity(identity) {
+    // If undefined, set to anonymous identity
+    this.identity = identity ?? new AnonymousIdentity();
+
+    // Clear permissions cache when identity changes
+    this.authorizationContext.clearPermissionsCache();
+  }
+  withIdentity(identity, cb) {
+    return identityStorage.run(identity, cb);
+  }
+
+  // ========================================================================
+  // Authorization State Methods
+  // ========================================================================
+
+  withoutAuthorization(cb) {
+    return this.authorizationContext.withoutAuthorization(cb);
+  }
+  isAuthorizationEnabled() {
+    return this.authorizationContext.isAuthorizationEnabled();
+  }
+
+  // ========================================================================
+  // Permission Methods
+  // ========================================================================
+
+  async getPermission(name) {
+    if (!this.isAuthorizationEnabled()) {
+      return {
+        name: "*"
+      };
+    }
+    const permissions = await this.listPermissions();
+
+    // Try exact match first
+    const exactMatch = permissions.find(p => p.name === name);
+    if (exactMatch) {
+      return exactMatch;
+    }
+
+    // Try pattern matching
+    const patternMatch = permissions.find(p => minimatch(name, p.name));
+    if (patternMatch) {
+      return patternMatch;
+    }
+    return null;
+  }
+  async getPermissions(name) {
+    if (!this.isAuthorizationEnabled()) {
+      return [{
+        name: "*"
+      }];
+    }
+    const permissions = await this.listPermissions();
+    return permissions.filter(p => {
+      if (p.name === name) {
+        return true;
+      }
+      return minimatch(name, p.name);
+    });
+  }
+  async listPermissions() {
+    const permissions = await this.authorizationContext.loadPermissions(this.getIdentity());
+    // TODO: extract this into a decorator
+    return this.applyAaclLogic(permissions);
+  }
+  async hasFullAccess() {
+    const permissions = await this.listPermissions();
+    return permissions.some(p => p.name === "*");
+  }
+
+  // ========================================================================
+  // Private Helper Methods
+  // ========================================================================
+
+  applyAaclLogic(permissions) {
+    const aaclEnabled = this.wcpContext.canUseAacl();
+    const teamsEnabled = this.wcpContext.canUseTeams();
+    if (aaclEnabled) {
+      // Add AACL metadata permission
+      return [...permissions, {
+        name: "aacl",
+        teams: teamsEnabled
+      }];
+    }
+
+    // If AACL is not enabled, filter out custom Webiny apps permissions
+    return filterOutCustomWbyAppsPermissions(permissions);
+  }
+}
+export const IdentityContext = createImplementation({
+  abstraction: Abstraction,
+  implementation: IdentityContextImpl,
+  dependencies: [AuthorizationContext, WcpContext]
+});
+
+//# sourceMappingURL=IdentityContext.js.map

package/features/security/IdentityContext/IdentityContext.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["AsyncLocalStorage","minimatch","createImplementation","IdentityContext","Abstraction","AnonymousIdentity","AuthorizationContext","filterOutCustomWbyAppsPermissions","WcpContext","identityStorage","IdentityContextImpl","identity","constructor","authorizationContext","wcpContext","getIdentity","override","getStore","undefined","setIdentity","clearPermissionsCache","withIdentity","cb","run","withoutAuthorization","isAuthorizationEnabled","getPermission","name","permissions","listPermissions","exactMatch","find","p","patternMatch","getPermissions","filter","loadPermissions","applyAaclLogic","hasFullAccess","some","aaclEnabled","canUseAacl","teamsEnabled","canUseTeams","teams","abstraction","implementation","dependencies"],"sources":["IdentityContext.ts"],"sourcesContent":["import { AsyncLocalStorage } from \"async_hooks\";\nimport minimatch from \"minimatch\";\nimport { createImplementation } from \"@webiny/di\";\nimport { IdentityContext as Abstraction } from \"./abstractions.js\";\nimport { Identity } from \"./Identity.js\";\nimport { AnonymousIdentity } from \"./AnonymousIdentity.js\";\nimport { AuthorizationContext } from \"../authorization/AuthorizationContext/index.js\";\nimport { filterOutCustomWbyAppsPermissions } from \"../utils/filterOutCustomWbyAppsPermissions.js\";\nimport type { SecurityPermission } from \"~/types/security.js\";\nimport type { AaclPermission } from \"../../wcp/WcpContext/types.js\";\nimport { WcpContext } from \"../../wcp/WcpContext/index.js\";\n\nconst identityStorage = new AsyncLocalStorage<Identity | undefined>();\n\nclass IdentityContextImpl implements Abstraction.Interface {\n    private identity: Identity = new AnonymousIdentity();\n\n    constructor(\n        private authorizationContext: AuthorizationContext.Interface,\n        private wcpContext: WcpContext.Interface\n    ) {}\n\n    // ========================================================================\n    // Identity Methods\n    // ========================================================================\n\n    getIdentity(): Identity {\n        // Check for identity override first (from withIdentity())\n        const override = identityStorage.getStore();\n        if (override !== undefined) {\n            return override;\n        }\n        return this.identity;\n    }\n\n    setIdentity(identity: Identity | undefined): void {\n        // If undefined, set to anonymous identity\n        this.identity = identity ?? new AnonymousIdentity();\n\n        // Clear permissions cache when identity changes\n        this.authorizationContext.clearPermissionsCache();\n    }\n\n    withIdentity<T>(identity: Identity | undefined, cb: () => Promise<T>): Promise<T> {\n        return identityStorage.run(identity, cb);\n    }\n\n    // ========================================================================\n    // Authorization State Methods\n    // ========================================================================\n\n    withoutAuthorization<T>(cb: () => Promise<T>): Promise<T> {\n        return this.authorizationContext.withoutAuthorization(cb);\n    }\n\n    isAuthorizationEnabled(): boolean {\n        return this.authorizationContext.isAuthorizationEnabled();\n    }\n\n    // ========================================================================\n    // Permission Methods\n    // ========================================================================\n\n    async getPermission<TPermission extends SecurityPermission = SecurityPermission>(\n        name: string\n    ): Promise<TPermission | null> {\n        if (!this.isAuthorizationEnabled()) {\n            return { name: \"*\" } as TPermission;\n        }\n\n        const permissions = await this.listPermissions();\n\n        // Try exact match first\n        const exactMatch = permissions.find(p => p.name === name);\n        if (exactMatch) {\n            return exactMatch as TPermission;\n        }\n\n        // Try pattern matching\n        const patternMatch = permissions.find(p => minimatch(name, p.name));\n        if (patternMatch) {\n            return patternMatch as TPermission;\n        }\n\n        return null;\n    }\n\n    async getPermissions<TPermission extends SecurityPermission = SecurityPermission>(\n        name: string\n    ): Promise<TPermission[]> {\n        if (!this.isAuthorizationEnabled()) {\n            return [{ name: \"*\" }] as TPermission[];\n        }\n\n        const permissions = await this.listPermissions();\n\n        return permissions.filter(p => {\n            if (p.name === name) {\n                return true;\n            }\n            return minimatch(name, p.name);\n        }) as TPermission[];\n    }\n\n    async listPermissions(): Promise<SecurityPermission[]> {\n        const permissions = await this.authorizationContext.loadPermissions(this.getIdentity());\n        // TODO: extract this into a decorator\n        return this.applyAaclLogic(permissions);\n    }\n\n    async hasFullAccess(): Promise<boolean> {\n        const permissions = await this.listPermissions();\n        return permissions.some(p => p.name === \"*\");\n    }\n\n    // ========================================================================\n    // Private Helper Methods\n    // ========================================================================\n\n    private applyAaclLogic(permissions: SecurityPermission[]): SecurityPermission[] {\n        const aaclEnabled = this.wcpContext.canUseAacl();\n        const teamsEnabled = this.wcpContext.canUseTeams();\n\n        if (aaclEnabled) {\n            // Add AACL metadata permission\n            return [\n                ...permissions,\n                {\n                    name: \"aacl\",\n                    teams: teamsEnabled\n                } as AaclPermission\n            ];\n        }\n\n        // If AACL is not enabled, filter out custom Webiny apps permissions\n        return filterOutCustomWbyAppsPermissions(permissions);\n    }\n}\n\nexport const IdentityContext = createImplementation({\n    abstraction: Abstraction,\n    implementation: IdentityContextImpl,\n    dependencies: [AuthorizationContext, WcpContext]\n});\n"],"mappings":"AAAA,SAASA,iBAAiB,QAAQ,aAAa;AAC/C,OAAOC,SAAS,MAAM,WAAW;AACjC,SAASC,oBAAoB,QAAQ,YAAY;AACjD,SAASC,eAAe,IAAIC,WAAW;AAEvC,SAASC,iBAAiB;AAC1B,SAASC,oBAAoB;AAC7B,SAASC,iCAAiC;AAG1C,SAASC,UAAU;AAEnB,MAAMC,eAAe,GAAG,IAAIT,iBAAiB,CAAuB,CAAC;AAErE,MAAMU,mBAAmB,CAAkC;EAC/CC,QAAQ,GAAa,IAAIN,iBAAiB,CAAC,CAAC;EAEpDO,WAAWA,CACCC,oBAAoD,EACpDC,UAAgC,EAC1C;IAAA,KAFUD,oBAAoD,GAApDA,oBAAoD;IAAA,KACpDC,UAAgC,GAAhCA,UAAgC;EACzC;;EAEH;EACA;EACA;;EAEAC,WAAWA,CAAA,EAAa;IACpB;IACA,MAAMC,QAAQ,GAAGP,eAAe,CAACQ,QAAQ,CAAC,CAAC;IAC3C,IAAID,QAAQ,KAAKE,SAAS,EAAE;MACxB,OAAOF,QAAQ;IACnB;IACA,OAAO,IAAI,CAACL,QAAQ;EACxB;EAEAQ,WAAWA,CAACR,QAA8B,EAAQ;IAC9C;IACA,IAAI,CAACA,QAAQ,GAAGA,QAAQ,IAAI,IAAIN,iBAAiB,CAAC,CAAC;;IAEnD;IACA,IAAI,CAACQ,oBAAoB,CAACO,qBAAqB,CAAC,CAAC;EACrD;EAEAC,YAAYA,CAAIV,QAA8B,EAAEW,EAAoB,EAAc;IAC9E,OAAOb,eAAe,CAACc,GAAG,CAACZ,QAAQ,EAAEW,EAAE,CAAC;EAC5C;;EAEA;EACA;EACA;;EAEAE,oBAAoBA,CAAIF,EAAoB,EAAc;IACtD,OAAO,IAAI,CAACT,oBAAoB,CAACW,oBAAoB,CAACF,EAAE,CAAC;EAC7D;EAEAG,sBAAsBA,CAAA,EAAY;IAC9B,OAAO,IAAI,CAACZ,oBAAoB,CAACY,sBAAsB,CAAC,CAAC;EAC7D;;EAEA;EACA;EACA;;EAEA,MAAMC,aAAaA,CACfC,IAAY,EACe;IAC3B,IAAI,CAAC,IAAI,CAACF,sBAAsB,CAAC,CAAC,EAAE;MAChC,OAAO;QAAEE,IAAI,EAAE;MAAI,CAAC;IACxB;IAEA,MAAMC,WAAW,GAAG,MAAM,IAAI,CAACC,eAAe,CAAC,CAAC;;IAEhD;IACA,MAAMC,UAAU,GAAGF,WAAW,CAACG,IAAI,CAACC,CAAC,IAAIA,CAAC,CAACL,IAAI,KAAKA,IAAI,CAAC;IACzD,IAAIG,UAAU,EAAE;MACZ,OAAOA,UAAU;IACrB;;IAEA;IACA,MAAMG,YAAY,GAAGL,WAAW,CAACG,IAAI,CAACC,CAAC,IAAI/B,SAAS,CAAC0B,IAAI,EAAEK,CAAC,CAACL,IAAI,CAAC,CAAC;IACnE,IAAIM,YAAY,EAAE;MACd,OAAOA,YAAY;IACvB;IAEA,OAAO,IAAI;EACf;EAEA,MAAMC,cAAcA,CAChBP,IAAY,EACU;IACtB,IAAI,CAAC,IAAI,CAACF,sBAAsB,CAAC,CAAC,EAAE;MAChC,OAAO,CAAC;QAAEE,IAAI,EAAE;MAAI,CAAC,CAAC;IAC1B;IAEA,MAAMC,WAAW,GAAG,MAAM,IAAI,CAACC,eAAe,CAAC,CAAC;IAEhD,OAAOD,WAAW,CAACO,MAAM,CAACH,CAAC,IAAI;MAC3B,IAAIA,CAAC,CAACL,IAAI,KAAKA,IAAI,EAAE;QACjB,OAAO,IAAI;MACf;MACA,OAAO1B,SAAS,CAAC0B,IAAI,EAAEK,CAAC,CAACL,IAAI,CAAC;IAClC,CAAC,CAAC;EACN;EAEA,MAAME,eAAeA,CAAA,EAAkC;IACnD,MAAMD,WAAW,GAAG,MAAM,IAAI,CAACf,oBAAoB,CAACuB,eAAe,CAAC,IAAI,CAACrB,WAAW,CAAC,CAAC,CAAC;IACvF;IACA,OAAO,IAAI,CAACsB,cAAc,CAACT,WAAW,CAAC;EAC3C;EAEA,MAAMU,aAAaA,CAAA,EAAqB;IACpC,MAAMV,WAAW,GAAG,MAAM,IAAI,CAACC,eAAe,CAAC,CAAC;IAChD,OAAOD,WAAW,CAACW,IAAI,CAACP,CAAC,IAAIA,CAAC,CAACL,IAAI,KAAK,GAAG,CAAC;EAChD;;EAEA;EACA;EACA;;EAEQU,cAAcA,CAACT,WAAiC,EAAwB;IAC5E,MAAMY,WAAW,GAAG,IAAI,CAAC1B,UAAU,CAAC2B,UAAU,CAAC,CAAC;IAChD,MAAMC,YAAY,GAAG,IAAI,CAAC5B,UAAU,CAAC6B,WAAW,CAAC,CAAC;IAElD,IAAIH,WAAW,EAAE;MACb;MACA,OAAO,CACH,GAAGZ,WAAW,EACd;QACID,IAAI,EAAE,MAAM;QACZiB,KAAK,EAAEF;MACX,CAAC,CACJ;IACL;;IAEA;IACA,OAAOnC,iCAAiC,CAACqB,WAAW,CAAC;EACzD;AACJ;AAEA,OAAO,MAAMzB,eAAe,GAAGD,oBAAoB,CAAC;EAChD2C,WAAW,EAAEzC,WAAW;EACxB0C,cAAc,EAAEpC,mBAAmB;EACnCqC,YAAY,EAAE,CAACzC,oBAAoB,EAAEE,UAAU;AACnD,CAAC,CAAC","ignoreList":[]}

package/features/security/IdentityContext/abstractions.d.ts

@@ -0,0 +1,17 @@
+import type { Identity } from "./Identity.js";
+import type { SecurityPermission } from "../../../types/security.js";
+export interface IIdentityContext {
+    getIdentity(): Identity;
+    setIdentity(identity: Identity | undefined): void;
+    withIdentity<T>(identity: Identity | undefined, cb: () => Promise<T>): Promise<T>;
+    getPermission<TPermission extends SecurityPermission = SecurityPermission>(name: string): Promise<TPermission | null>;
+    getPermissions<TPermission extends SecurityPermission = SecurityPermission>(name: string): Promise<TPermission[]>;
+    listPermissions(): Promise<SecurityPermission[]>;
+    hasFullAccess(): Promise<boolean>;
+    withoutAuthorization<T>(cb: () => Promise<T>): Promise<T>;
+    isAuthorizationEnabled(): boolean;
+}
+export declare const IdentityContext: import("@webiny/di").Abstraction<IIdentityContext>;
+export declare namespace IdentityContext {
+    type Interface = IIdentityContext;
+}

package/features/security/IdentityContext/abstractions.js

@@ -0,0 +1,4 @@
+import { createAbstraction } from "@webiny/feature/api";
+export const IdentityContext = createAbstraction("IdentityContext");
+
+//# sourceMappingURL=abstractions.js.map

package/features/security/IdentityContext/abstractions.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["createAbstraction","IdentityContext"],"sources":["abstractions.ts"],"sourcesContent":["import { createAbstraction } from \"@webiny/feature/api\";\nimport type { Identity } from \"./Identity.js\";\nimport type { SecurityPermission } from \"~/types/security.js\";\n\nexport interface IIdentityContext {\n    // Identity methods\n    getIdentity(): Identity;\n    setIdentity(identity: Identity | undefined): void;\n    withIdentity<T>(identity: Identity | undefined, cb: () => Promise<T>): Promise<T>;\n\n    // Permission methods\n    getPermission<TPermission extends SecurityPermission = SecurityPermission>(\n        name: string\n    ): Promise<TPermission | null>;\n\n    getPermissions<TPermission extends SecurityPermission = SecurityPermission>(\n        name: string\n    ): Promise<TPermission[]>;\n\n    listPermissions(): Promise<SecurityPermission[]>;\n\n    hasFullAccess(): Promise<boolean>;\n\n    // Authorization context methods\n    withoutAuthorization<T>(cb: () => Promise<T>): Promise<T>;\n    isAuthorizationEnabled(): boolean;\n}\n\nexport const IdentityContext = createAbstraction<IIdentityContext>(\"IdentityContext\");\n\nexport namespace IdentityContext {\n    export type Interface = IIdentityContext;\n}\n"],"mappings":"AAAA,SAASA,iBAAiB,QAAQ,qBAAqB;AA4BvD,OAAO,MAAMC,eAAe,GAAGD,iBAAiB,CAAmB,iBAAiB,CAAC","ignoreList":[]}

package/features/security/IdentityContext/feature.d.ts

@@ -0,0 +1 @@
+export declare const IdentityContextFeature: import("@webiny/feature/api/createFeature.js").FeatureDefinition<unknown>;

package/features/security/IdentityContext/feature.js

@@ -0,0 +1,10 @@
+import { createFeature } from "@webiny/feature/api";
+import { IdentityContext } from "./IdentityContext.js";
+export const IdentityContextFeature = createFeature({
+  name: "IdentityContext",
+  register(container) {
+    container.register(IdentityContext).inSingletonScope();
+  }
+});
+
+//# sourceMappingURL=feature.js.map

package/features/security/IdentityContext/feature.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["createFeature","IdentityContext","IdentityContextFeature","name","register","container","inSingletonScope"],"sources":["feature.ts"],"sourcesContent":["import { createFeature } from \"@webiny/feature/api\";\nimport { IdentityContext } from \"./IdentityContext.js\";\n\nexport const IdentityContextFeature = createFeature({\n    name: \"IdentityContext\",\n    register(container) {\n        container.register(IdentityContext).inSingletonScope();\n    }\n});\n"],"mappings":"AAAA,SAASA,aAAa,QAAQ,qBAAqB;AACnD,SAASC,eAAe;AAExB,OAAO,MAAMC,sBAAsB,GAAGF,aAAa,CAAC;EAChDG,IAAI,EAAE,iBAAiB;EACvBC,QAAQA,CAACC,SAAS,EAAE;IAChBA,SAAS,CAACD,QAAQ,CAACH,eAAe,CAAC,CAACK,gBAAgB,CAAC,CAAC;EAC1D;AACJ,CAAC,CAAC","ignoreList":[]}

package/features/security/IdentityContext/index.d.ts

@@ -0,0 +1,6 @@
+export { IdentityContextFeature } from "./feature.js";
+export { IdentityContext } from "./abstractions.js";
+export type { IIdentityContext } from "./abstractions.js";
+export { Identity, type IdentityData } from "./Identity.js";
+export { AuthenticatedIdentity } from "./AuthenticatedIdentity.js";
+export { AnonymousIdentity } from "./AnonymousIdentity.js";

package/features/security/IdentityContext/index.js

@@ -0,0 +1,8 @@
+export { IdentityContextFeature } from "./feature.js";
+export { IdentityContext } from "./abstractions.js";
+// Export Identity classes
+export { Identity } from "./Identity.js";
+export { AuthenticatedIdentity } from "./AuthenticatedIdentity.js";
+export { AnonymousIdentity } from "./AnonymousIdentity.js";
+
+//# sourceMappingURL=index.js.map

package/features/security/IdentityContext/index.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["IdentityContextFeature","IdentityContext","Identity","AuthenticatedIdentity","AnonymousIdentity"],"sources":["index.ts"],"sourcesContent":["export { IdentityContextFeature } from \"./feature.js\";\nexport { IdentityContext } from \"./abstractions.js\";\nexport type { IIdentityContext } from \"./abstractions.js\";\n\n// Export Identity classes\nexport { Identity, type IdentityData } from \"./Identity.js\";\nexport { AuthenticatedIdentity } from \"./AuthenticatedIdentity.js\";\nexport { AnonymousIdentity } from \"./AnonymousIdentity.js\";\n"],"mappings":"AAAA,SAASA,sBAAsB;AAC/B,SAASC,eAAe;AAGxB;AACA,SAASC,QAAQ;AACjB,SAASC,qBAAqB;AAC9B,SAASC,iBAAiB","ignoreList":[]}

package/features/security/SecurityFeature.d.ts

@@ -0,0 +1,9 @@
+import type { SecurityStorageOperations as ISecurityStorageOperations } from "../../types/security.js";
+/**
+ * Setup all security features in the DI container.
+ * This is the main entry point for registering all security-related features.
+ *
+ * @param container - DI container instance
+ * @param storageOperations - Storage operations implementation
+ */
+export declare const SecurityFeature: import("@webiny/feature/api/createFeature.js").FeatureDefinition<ISecurityStorageOperations>;

package/features/security/SecurityFeature.js

@@ -0,0 +1,33 @@
+import { createFeature } from "@webiny/feature/api";
+import { SecurityStorageOperations } from "./shared/abstractions.js";
+import { AuthenticationContextFeature } from "./authentication/AuthenticationContext/index.js";
+import { AuthorizationContextFeature } from "./authorization/AuthorizationContext/index.js";
+import { GroupsTeamsAuthorizerFeature } from "./authorization/GroupsTeamsAuthorizer/feature.js";
+import { IdentityContextFeature } from "./IdentityContext/index.js";
+import { ApiKeysFeature } from "./apiKeys/feature.js";
+import { TeamsFeature } from "./teams/feature.js";
+import { RolesFeature } from "./roles/feature.js";
+
+/**
+ * Setup all security features in the DI container.
+ * This is the main entry point for registering all security-related features.
+ *
+ * @param container - DI container instance
+ * @param storageOperations - Storage operations implementation
+ */
+export const SecurityFeature = createFeature({
+  name: "SecurityFeature",
+  register(container, storageOperations) {
+    // Register storage operations abstraction (singleton)
+    container.registerInstance(SecurityStorageOperations, storageOperations);
+    AuthorizationContextFeature.register(container);
+    AuthenticationContextFeature.register(container);
+    IdentityContextFeature.register(container);
+    ApiKeysFeature.register(container);
+    RolesFeature.register(container);
+    TeamsFeature.register(container);
+    GroupsTeamsAuthorizerFeature.register(container);
+  }
+});
+
+//# sourceMappingURL=SecurityFeature.js.map

package/features/security/SecurityFeature.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["createFeature","SecurityStorageOperations","AuthenticationContextFeature","AuthorizationContextFeature","GroupsTeamsAuthorizerFeature","IdentityContextFeature","ApiKeysFeature","TeamsFeature","RolesFeature","SecurityFeature","name","register","container","storageOperations","registerInstance"],"sources":["SecurityFeature.ts"],"sourcesContent":["import { createFeature } from \"@webiny/feature/api\";\nimport type { Container } from \"@webiny/di\";\nimport type { SecurityStorageOperations as ISecurityStorageOperations } from \"~/types/security.js\";\nimport { SecurityStorageOperations } from \"./shared/abstractions.js\";\nimport { AuthenticationContextFeature } from \"./authentication/AuthenticationContext/index.js\";\nimport { AuthorizationContextFeature } from \"./authorization/AuthorizationContext/index.js\";\nimport { GroupsTeamsAuthorizerFeature } from \"./authorization/GroupsTeamsAuthorizer/feature.js\";\nimport { IdentityContextFeature } from \"./IdentityContext/index.js\";\nimport { ApiKeysFeature } from \"./apiKeys/feature.js\";\nimport { TeamsFeature } from \"./teams/feature.js\";\nimport { RolesFeature } from \"~/features/security/roles/feature.js\";\n\n/**\n * Setup all security features in the DI container.\n * This is the main entry point for registering all security-related features.\n *\n * @param container - DI container instance\n * @param storageOperations - Storage operations implementation\n */\nexport const SecurityFeature = createFeature({\n    name: \"SecurityFeature\",\n    register(container: Container, storageOperations: ISecurityStorageOperations) {\n        // Register storage operations abstraction (singleton)\n        container.registerInstance(SecurityStorageOperations, storageOperations);\n\n        AuthorizationContextFeature.register(container);\n        AuthenticationContextFeature.register(container);\n        IdentityContextFeature.register(container);\n        ApiKeysFeature.register(container);\n        RolesFeature.register(container);\n        TeamsFeature.register(container);\n        GroupsTeamsAuthorizerFeature.register(container);\n    }\n});\n"],"mappings":"AAAA,SAASA,aAAa,QAAQ,qBAAqB;AAGnD,SAASC,yBAAyB;AAClC,SAASC,4BAA4B;AACrC,SAASC,2BAA2B;AACpC,SAASC,4BAA4B;AACrC,SAASC,sBAAsB;AAC/B,SAASC,cAAc;AACvB,SAASC,YAAY;AACrB,SAASC,YAAY;;AAErB;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMC,eAAe,GAAGT,aAAa,CAAC;EACzCU,IAAI,EAAE,iBAAiB;EACvBC,QAAQA,CAACC,SAAoB,EAAEC,iBAA6C,EAAE;IAC1E;IACAD,SAAS,CAACE,gBAAgB,CAACb,yBAAyB,EAAEY,iBAAiB,CAAC;IAExEV,2BAA2B,CAACQ,QAAQ,CAACC,SAAS,CAAC;IAC/CV,4BAA4B,CAACS,QAAQ,CAACC,SAAS,CAAC;IAChDP,sBAAsB,CAACM,QAAQ,CAACC,SAAS,CAAC;IAC1CN,cAAc,CAACK,QAAQ,CAACC,SAAS,CAAC;IAClCJ,YAAY,CAACG,QAAQ,CAACC,SAAS,CAAC;IAChCL,YAAY,CAACI,QAAQ,CAACC,SAAS,CAAC;IAChCR,4BAA4B,CAACO,QAAQ,CAACC,SAAS,CAAC;EACpD;AACJ,CAAC,CAAC","ignoreList":[]}

package/features/security/apiKeys/CreateApiKey/CreateApiKeyUseCase.d.ts

@@ -0,0 +1,17 @@
+import { Result } from "@webiny/feature/api";
+import { EventPublisher } from "../../../../features/eventPublisher/index.js";
+import { CreateApiKeyUseCase as CreateApiKeyUseCaseAbstraction } from "./abstractions.js";
+import { ApiKeysRepository } from "../shared/abstractions.js";
+import { IdentityContext } from "../../IdentityContext/abstractions.js";
+import type { ApiKey, CreateApiKeyInput } from "../shared/types.js";
+declare class CreateApiKeyUseCaseImpl implements CreateApiKeyUseCaseAbstraction.Interface {
+    private identityContext;
+    private eventPublisher;
+    private repository;
+    constructor(identityContext: IdentityContext.Interface, eventPublisher: EventPublisher.Interface, repository: ApiKeysRepository.Interface);
+    execute(input: CreateApiKeyInput): Promise<Result<ApiKey, CreateApiKeyUseCaseAbstraction.Error>>;
+}
+export declare const CreateApiKeyUseCase: typeof CreateApiKeyUseCaseImpl & {
+    __abstraction: import("@webiny/di").Abstraction<import("./abstractions.js").ICreateApiKey>;
+};
+export {};