@x12i/catalox-authix-bridge 5.9.8

package/dist/features.d.ts

@@ -0,0 +1,13 @@
+export declare const CATALOX_FEATURES: {
+    readonly discoveryRead: "catalox.discovery.read";
+    readonly catalogRead: "catalox.catalog.read";
+    readonly catalogWrite: "catalox.catalog.write";
+    readonly catalogAdmin: "catalox.catalog.admin";
+    readonly itemRead: "catalox.item.read";
+    readonly itemWrite: "catalox.item.write";
+    readonly itemSearch: "catalox.item.search";
+    readonly operatorRead: "catalox.operator.read";
+    readonly operatorSuper: "catalox.operator.super";
+};
+export type CataloxFeatureId = (typeof CATALOX_FEATURES)[keyof typeof CATALOX_FEATURES];
+//# sourceMappingURL=features.d.ts.map

package/dist/features.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"features.d.ts","sourceRoot":"","sources":["../src/features.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,gBAAgB;;;;;;;;;;CAUnB,CAAC;AAEX,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,OAAO,gBAAgB,CAAC,CAAC"}

package/dist/features.js

@@ -0,0 +1,12 @@
+export const CATALOX_FEATURES = {
+    discoveryRead: "catalox.discovery.read",
+    catalogRead: "catalox.catalog.read",
+    catalogWrite: "catalox.catalog.write",
+    catalogAdmin: "catalox.catalog.admin",
+    itemRead: "catalox.item.read",
+    itemWrite: "catalox.item.write",
+    itemSearch: "catalox.item.search",
+    operatorRead: "catalox.operator.read",
+    operatorSuper: "catalox.operator.super",
+};
+//# sourceMappingURL=features.js.map

package/dist/features.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features.js","sourceRoot":"","sources":["../src/features.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,aAAa,EAAE,wBAAwB;IACvC,WAAW,EAAE,sBAAsB;IACnC,YAAY,EAAE,uBAAuB;IACrC,YAAY,EAAE,uBAAuB;IACrC,QAAQ,EAAE,mBAAmB;IAC7B,SAAS,EAAE,oBAAoB;IAC/B,UAAU,EAAE,qBAAqB;IACjC,YAAY,EAAE,uBAAuB;IACrC,aAAa,EAAE,wBAAwB;CAC/B,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,5 @@
+export { CATALOX_FEATURES, type CataloxFeatureId } from "./features.js";
+export { mapAuthixToCataloxContext } from "./map-authix-to-catalox-context.js";
+export { requireCataloxFeature, hasCataloxFeature, CataloxFeatureDeniedError, } from "./require-catalox-feature.js";
+export { narrowScopeFromQuery } from "./narrow-scope-from-query.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,KAAK,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACxE,OAAO,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAC/E,OAAO,EACL,qBAAqB,EACrB,iBAAiB,EACjB,yBAAyB,GAC1B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC"}

package/dist/index.js

@@ -0,0 +1,5 @@
+export { CATALOX_FEATURES } from "./features.js";
+export { mapAuthixToCataloxContext } from "./map-authix-to-catalox-context.js";
+export { requireCataloxFeature, hasCataloxFeature, CataloxFeatureDeniedError, } from "./require-catalox-feature.js";
+export { narrowScopeFromQuery } from "./narrow-scope-from-query.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAyB,MAAM,eAAe,CAAC;AACxE,OAAO,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAC/E,OAAO,EACL,qBAAqB,EACrB,iBAAiB,EACjB,yBAAyB,GAC1B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC"}

package/dist/map-authix-to-catalox-context.d.ts

@@ -0,0 +1,4 @@
+import type { AuthixTokenPayload } from "@x12i/authix-types";
+import type { CataloxContext } from "@x12i/catalox-contracts/context.js";
+export declare function mapAuthixToCataloxContext(payload: AuthixTokenPayload): CataloxContext;
+//# sourceMappingURL=map-authix-to-catalox-context.d.ts.map

package/dist/map-authix-to-catalox-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"map-authix-to-catalox-context.d.ts","sourceRoot":"","sources":["../src/map-authix-to-catalox-context.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AAuBzE,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,kBAAkB,GAAG,cAAc,CAkCrF"}

package/dist/map-authix-to-catalox-context.js

@@ -0,0 +1,56 @@
+import { CATALOX_FEATURES } from "./features.js";
+function hasFeature(payload, featureId) {
+    return payload.features?.some((f) => f.featureId === featureId && f.enabled) ?? false;
+}
+function mapScope(scope) {
+    if (!scope)
+        return undefined;
+    const out = {};
+    if (scope.accountIds?.length)
+        out.accountIds = [...scope.accountIds];
+    if (scope.domainIds?.length)
+        out.domainIds = [...scope.domainIds];
+    if (scope.organizationIds?.length)
+        out.organizationIds = [...scope.organizationIds];
+    if (scope.workspaceIds?.length)
+        out.workspaceIds = [...scope.workspaceIds];
+    if (scope.custom && typeof scope.custom === "object") {
+        Object.assign(out, scope.custom);
+    }
+    return Object.keys(out).length ? out : undefined;
+}
+export function mapAuthixToCataloxContext(payload) {
+    const meta = payload.metadata?.catalox;
+    const scope = mapScope(payload.scope);
+    const subject = payload.subject;
+    const context = {
+        appId: payload.appId,
+        actor: {
+            type: subject.identityType === "user" ? "user" : subject.identityType === "service" ? "service" : "system",
+            id: subject.identityId,
+        },
+    };
+    if (scope)
+        context.scope = scope;
+    if (subject.identityType === "user")
+        context.userId = subject.identityId;
+    const accountId = scope?.accountIds?.[0];
+    const groupId = scope?.organizationIds?.[0];
+    const channelId = scope?.workspaceIds?.[0];
+    if (accountId)
+        context.accountId = accountId;
+    if (groupId)
+        context.groupId = groupId;
+    if (channelId)
+        context.channelId = channelId;
+    const rawStoreId = meta?.storeId;
+    if (typeof rawStoreId === "string") {
+        context.storeId = rawStoreId;
+    }
+    if (hasFeature(payload, CATALOX_FEATURES.operatorSuper) &&
+        subject.identityType === "service") {
+        context.superAdmin = true;
+    }
+    return context;
+}
+//# sourceMappingURL=map-authix-to-catalox-context.js.map

package/dist/map-authix-to-catalox-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"map-authix-to-catalox-context.js","sourceRoot":"","sources":["../src/map-authix-to-catalox-context.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEjD,SAAS,UAAU,CAAC,OAA2B,EAAE,SAAiB;IAChE,OAAO,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC;AACxF,CAAC;AAED,SAAS,QAAQ,CAAC,KAAkC;IAClD,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,MAAM,GAAG,GAAqB,EAAE,CAAC;IACjC,IAAI,KAAK,CAAC,UAAU,EAAE,MAAM;QAAE,GAAG,CAAC,UAAU,GAAG,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC;IACrE,IAAI,KAAK,CAAC,SAAS,EAAE,MAAM;QAAE,GAAG,CAAC,SAAS,GAAG,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC;IAClE,IAAI,KAAK,CAAC,eAAe,EAAE,MAAM;QAAE,GAAG,CAAC,eAAe,GAAG,CAAC,GAAG,KAAK,CAAC,eAAe,CAAC,CAAC;IACpF,IAAI,KAAK,CAAC,YAAY,EAAE,MAAM;QAAE,GAAG,CAAC,YAAY,GAAG,CAAC,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC;IAC3E,IAAI,KAAK,CAAC,MAAM,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACrD,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,OAA2B;IACnE,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,EAAE,OAA8C,CAAC;IAC9E,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAEhC,MAAM,OAAO,GAAmB;QAC9B,KAAK,EAAE,OAAO,CAAC,KAAc;QAC7B,KAAK,EAAE;YACL,IAAI,EAAE,OAAO,CAAC,YAAY,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ;YAC1G,EAAE,EAAE,OAAO,CAAC,UAAU;SACvB;KACF,CAAC;IAEF,IAAI,KAAK;QAAE,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC;IACjC,IAAI,OAAO,CAAC,YAAY,KAAK,MAAM;QAAE,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IACzE,MAAM,SAAS,GAAG,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3C,IAAI,SAAS;QAAE,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7C,IAAI,OAAO;QAAE,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC;IACvC,IAAI,SAAS;QAAE,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7C,MAAM,UAAU,GAAG,IAAI,EAAE,OAAO,CAAC;IACjC,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;QACnC,OAAO,CAAC,OAAO,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED,IACE,UAAU,CAAC,OAAO,EAAE,gBAAgB,CAAC,aAAa,CAAC;QACnD,OAAO,CAAC,YAAY,KAAK,SAAS,EAClC,CAAC;QACD,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAC5B,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/narrow-scope-from-query.d.ts

@@ -0,0 +1,3 @@
+import type { CatalogItemScope } from "@x12i/catalox-contracts/items.js";
+export declare function narrowScopeFromQuery(tokenScope: CatalogItemScope | undefined, queryScope: CatalogItemScope | undefined): CatalogItemScope | undefined;
+//# sourceMappingURL=narrow-scope-from-query.d.ts.map

package/dist/narrow-scope-from-query.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"narrow-scope-from-query.d.ts","sourceRoot":"","sources":["../src/narrow-scope-from-query.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AAUzE,wBAAgB,oBAAoB,CAClC,UAAU,EAAE,gBAAgB,GAAG,SAAS,EACxC,UAAU,EAAE,gBAAgB,GAAG,SAAS,GACvC,gBAAgB,GAAG,SAAS,CAuB9B"}

package/dist/narrow-scope-from-query.js

@@ -0,0 +1,37 @@
+function intersectStringArrays(token, query) {
+    if (!query?.length)
+        return token?.length ? [...token] : undefined;
+    if (!token?.length)
+        return [...query];
+    const allowed = new Set(token);
+    const narrowed = query.filter((v) => allowed.has(v));
+    return narrowed.length ? narrowed : [];
+}
+export function narrowScopeFromQuery(tokenScope, queryScope) {
+    if (!queryScope)
+        return tokenScope;
+    if (!tokenScope)
+        return queryScope;
+    const out = { ...tokenScope };
+    for (const key of Object.keys(queryScope)) {
+        const q = queryScope[key];
+        if (q == null)
+            continue;
+        if (Array.isArray(q)) {
+            const t = tokenScope[key];
+            if (Array.isArray(t)) {
+                const narrowed = intersectStringArrays(t, q);
+                if (narrowed !== undefined)
+                    out[key] = narrowed;
+            }
+            else {
+                out[key] = [...q];
+            }
+        }
+        else if (typeof q === "object") {
+            out[key] = q;
+        }
+    }
+    return out;
+}
+//# sourceMappingURL=narrow-scope-from-query.js.map

package/dist/narrow-scope-from-query.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"narrow-scope-from-query.js","sourceRoot":"","sources":["../src/narrow-scope-from-query.ts"],"names":[],"mappings":"AAEA,SAAS,qBAAqB,CAAC,KAAgB,EAAE,KAAgB;IAC/D,IAAI,CAAC,KAAK,EAAE,MAAM;QAAE,OAAO,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAClE,IAAI,CAAC,KAAK,EAAE,MAAM;QAAE,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC/B,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACrD,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,UAAwC,EACxC,UAAwC;IAExC,IAAI,CAAC,UAAU;QAAE,OAAO,UAAU,CAAC;IACnC,IAAI,CAAC,UAAU;QAAE,OAAO,UAAU,CAAC;IAEnC,MAAM,GAAG,GAAqB,EAAE,GAAG,UAAU,EAAE,CAAC;IAEhD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAC1C,MAAM,CAAC,GAAI,UAAsC,CAAC,GAAG,CAAC,CAAC;QACvD,IAAI,CAAC,IAAI,IAAI;YAAE,SAAS;QACxB,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;YACrB,MAAM,CAAC,GAAI,UAAsC,CAAC,GAAG,CAAC,CAAC;YACvD,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrB,MAAM,QAAQ,GAAG,qBAAqB,CAAC,CAAa,EAAE,CAAa,CAAC,CAAC;gBACrE,IAAI,QAAQ,KAAK,SAAS;oBAAG,GAA+B,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC;YAC/E,CAAC;iBAAM,CAAC;gBACL,GAA+B,CAAC,GAAG,CAAC,GAAG,CAAC,GAAI,CAAc,CAAC,CAAC;YAC/D,CAAC;QACH,CAAC;aAAM,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;YAChC,GAA+B,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/require-catalox-feature.d.ts

@@ -0,0 +1,9 @@
+import type { AuthixTokenPayload } from "@x12i/authix-types";
+import type { CataloxFeatureId } from "./features.js";
+export declare class CataloxFeatureDeniedError extends Error {
+    readonly featureId: string;
+    constructor(featureId: string);
+}
+export declare function requireCataloxFeature(payload: AuthixTokenPayload, featureId: CataloxFeatureId): void;
+export declare function hasCataloxFeature(payload: AuthixTokenPayload, featureId: CataloxFeatureId): boolean;
+//# sourceMappingURL=require-catalox-feature.d.ts.map

package/dist/require-catalox-feature.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"require-catalox-feature.d.ts","sourceRoot":"","sources":["../src/require-catalox-feature.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAE7D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEtD,qBAAa,yBAA0B,SAAQ,KAAK;IAClD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;gBACf,SAAS,EAAE,MAAM;CAK9B;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,kBAAkB,EAAE,SAAS,EAAE,gBAAgB,GAAG,IAAI,CAGpG;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,kBAAkB,EAAE,SAAS,EAAE,gBAAgB,GAAG,OAAO,CAEnG"}

package/dist/require-catalox-feature.js

@@ -0,0 +1,17 @@
+export class CataloxFeatureDeniedError extends Error {
+    featureId;
+    constructor(featureId) {
+        super(`Missing required Catalox feature: ${featureId}`);
+        this.name = "CataloxFeatureDeniedError";
+        this.featureId = featureId;
+    }
+}
+export function requireCataloxFeature(payload, featureId) {
+    const ok = payload.features?.some((f) => f.featureId === featureId && f.enabled);
+    if (!ok)
+        throw new CataloxFeatureDeniedError(featureId);
+}
+export function hasCataloxFeature(payload, featureId) {
+    return payload.features?.some((f) => f.featureId === featureId && f.enabled) ?? false;
+}
+//# sourceMappingURL=require-catalox-feature.js.map

package/dist/require-catalox-feature.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"require-catalox-feature.js","sourceRoot":"","sources":["../src/require-catalox-feature.ts"],"names":[],"mappings":"AAIA,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IACzC,SAAS,CAAS;IAC3B,YAAY,SAAiB;QAC3B,KAAK,CAAC,qCAAqC,SAAS,EAAE,CAAC,CAAC;QACxD,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;QACxC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;CACF;AAED,MAAM,UAAU,qBAAqB,CAAC,OAA2B,EAAE,SAA2B;IAC5F,MAAM,EAAE,GAAG,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC;IACjF,IAAI,CAAC,EAAE;QAAE,MAAM,IAAI,yBAAyB,CAAC,SAAS,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,OAA2B,EAAE,SAA2B;IACxF,OAAO,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC;AACxF,CAAC"}

package/package.json

@@ -0,0 +1,30 @@
+{
+  "name": "@x12i/catalox-authix-bridge",
+  "version": "5.9.8",
+  "description": "Map Authix tokens to CataloxContext",
+  "license": "MIT",
+  "type": "module",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "files": ["dist"],
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "clean": "node -e \"require('node:fs').rmSync('dist',{recursive:true,force:true})\"",
+    "test": "node --import tsx --test \"test/**/*.test.ts\""
+  },
+  "dependencies": {
+    "@x12i/authix-types": "^1.0.2",
+    "@x12i/catalox-contracts": "5.9.8"
+  },
+  "devDependencies": {
+    "@types/node": "^22.0.0",
+    "tsx": "^4.0.0",
+    "typescript": "^5.0.0"
+  }
+}