@xemahq/platform-common 0.1.3

package/dist/nestjs/integration-webhooks/api-integration-envelope.decorator.js

@@ -0,0 +1,27 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ApiIntegrationEnvelope = ApiIntegrationEnvelope;
+const common_1 = require("@nestjs/common");
+const swagger_1 = require("@nestjs/swagger");
+function ApiIntegrationEnvelope(options) {
+    const { variants, description } = options;
+    if (variants.length === 0) {
+        throw new Error('ApiIntegrationEnvelope requires at least one variant constructor.');
+    }
+    const variantList = [...variants];
+    return (0, common_1.applyDecorators)((0, swagger_1.ApiExtraModels)(...variantList), (0, swagger_1.ApiBody)({
+        description: description ??
+            'Normalized integration webhook envelope. One variant per entityKind discriminator.',
+        schema: {
+            oneOf: variantList.map((v) => ({ $ref: (0, swagger_1.getSchemaPath)(v) })),
+            discriminator: {
+                propertyName: 'entityKind',
+                mapping: variantList.reduce((acc, v) => {
+                    acc[v.ENTITY_KIND] = (0, swagger_1.getSchemaPath)(v);
+                    return acc;
+                }, {}),
+            },
+        },
+    }));
+}
+//# sourceMappingURL=api-integration-envelope.decorator.js.map

package/dist/nestjs/integration-webhooks/api-integration-envelope.decorator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-integration-envelope.decorator.js","sourceRoot":"","sources":["../../../src/nestjs/integration-webhooks/api-integration-envelope.decorator.ts"],"names":[],"mappings":";;AAoCA,wDAmCC;AAvED,2CAAiD;AACjD,6CAAyE;AAmCzE,SAAgB,sBAAsB,CACpC,OAAsC;IAEtC,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC;IAE1C,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CACb,mEAAmE,CACpE,CAAC;IACJ,CAAC;IAGD,MAAM,WAAW,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC;IAElC,OAAO,IAAA,wBAAe,EACpB,IAAA,wBAAc,EAAC,GAAG,WAAW,CAAC,EAC9B,IAAA,iBAAO,EAAC;QACN,WAAW,EACT,WAAW;YACX,oFAAoF;QACtF,MAAM,EAAE;YACN,KAAK,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAA,uBAAa,EAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC3D,aAAa,EAAE;gBACb,YAAY,EAAE,YAAY;gBAI1B,OAAO,EAAE,WAAW,CAAC,MAAM,CAAyB,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE;oBAC7D,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,IAAA,uBAAa,EAAC,CAAC,CAAC,CAAC;oBACtC,OAAO,GAAG,CAAC;gBACb,CAAC,EAAE,EAAE,CAAC;aACP;SACF;KACF,CAAC,CACH,CAAC;AACJ,CAAC"}

package/dist/nestjs/integration-webhooks/index.d.ts

@@ -0,0 +1,5 @@
+export { IntegrationWebhookEnvelopeDto } from './integration-webhook-envelope.dto';
+export { IntegrationEnvelopePipe } from './integration-envelope.pipe';
+export { ApiIntegrationEnvelope, type ApiIntegrationEnvelopeOptions, } from './api-integration-envelope.decorator';
+export type { IntegrationEnvelopeVariant } from './integration-envelope.types';
+//# sourceMappingURL=index.d.ts.map

package/dist/nestjs/integration-webhooks/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/nestjs/integration-webhooks/index.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,6BAA6B,EAAE,MAAM,oCAAoC,CAAC;AACnF,OAAO,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AACtE,OAAO,EACL,sBAAsB,EACtB,KAAK,6BAA6B,GACnC,MAAM,sCAAsC,CAAC;AAC9C,YAAY,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC"}

package/dist/nestjs/integration-webhooks/index.js

@@ -0,0 +1,10 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ApiIntegrationEnvelope = exports.IntegrationEnvelopePipe = exports.IntegrationWebhookEnvelopeDto = void 0;
+var integration_webhook_envelope_dto_1 = require("./integration-webhook-envelope.dto");
+Object.defineProperty(exports, "IntegrationWebhookEnvelopeDto", { enumerable: true, get: function () { return integration_webhook_envelope_dto_1.IntegrationWebhookEnvelopeDto; } });
+var integration_envelope_pipe_1 = require("./integration-envelope.pipe");
+Object.defineProperty(exports, "IntegrationEnvelopePipe", { enumerable: true, get: function () { return integration_envelope_pipe_1.IntegrationEnvelopePipe; } });
+var api_integration_envelope_decorator_1 = require("./api-integration-envelope.decorator");
+Object.defineProperty(exports, "ApiIntegrationEnvelope", { enumerable: true, get: function () { return api_integration_envelope_decorator_1.ApiIntegrationEnvelope; } });
+//# sourceMappingURL=index.js.map

package/dist/nestjs/integration-webhooks/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/nestjs/integration-webhooks/index.ts"],"names":[],"mappings":";;;AAQA,uFAAmF;AAA1E,iJAAA,6BAA6B,OAAA;AACtC,yEAAsE;AAA7D,oIAAA,uBAAuB,OAAA;AAChC,2FAG8C;AAF5C,4IAAA,sBAAsB,OAAA"}

package/dist/nestjs/integration-webhooks/integration-envelope.pipe.d.ts

@@ -0,0 +1,9 @@
+import { PipeTransform } from '@nestjs/common';
+import type { IntegrationWebhookEnvelopeDto } from './integration-webhook-envelope.dto';
+import type { IntegrationEnvelopeVariant } from './integration-envelope.types';
+export declare class IntegrationEnvelopePipe<TVariant extends IntegrationWebhookEnvelopeDto<unknown>> implements PipeTransform<unknown, Promise<TVariant>> {
+    private readonly byEntityKind;
+    constructor(variants: readonly IntegrationEnvelopeVariant[]);
+    transform(value: unknown): Promise<TVariant>;
+}
+//# sourceMappingURL=integration-envelope.pipe.d.ts.map

package/dist/nestjs/integration-webhooks/integration-envelope.pipe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"integration-envelope.pipe.d.ts","sourceRoot":"","sources":["../../../src/nestjs/integration-webhooks/integration-envelope.pipe.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,aAAa,EACd,MAAM,gBAAgB,CAAC;AAMxB,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,oCAAoC,CAAC;AACxF,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AA6B/E,qBACa,uBAAuB,CAClC,QAAQ,SAAS,6BAA6B,CAAC,OAAO,CAAC,CACvD,YAAW,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IAEpD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAG3B;gBAEU,QAAQ,EAAE,SAAS,0BAA0B,EAAE;IAyBrD,SAAS,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC;CA8CnD"}

package/dist/nestjs/integration-webhooks/integration-envelope.pipe.js

@@ -0,0 +1,100 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.IntegrationEnvelopePipe = void 0;
+const common_1 = require("@nestjs/common");
+const class_transformer_1 = require("class-transformer");
+const class_validator_1 = require("class-validator");
+let IntegrationEnvelopePipe = class IntegrationEnvelopePipe {
+    byEntityKind;
+    constructor(variants) {
+        if (variants.length === 0) {
+            throw new Error('IntegrationEnvelopePipe requires at least one variant constructor.');
+        }
+        const map = new Map();
+        for (const ctor of variants) {
+            const entityKind = ctor.ENTITY_KIND;
+            if (entityKind === undefined) {
+                throw new Error(`IntegrationEnvelopePipe: variant ${ctor.name} is missing static ENTITY_KIND.`);
+            }
+            const existing = map.get(entityKind);
+            if (existing) {
+                throw new Error(`IntegrationEnvelopePipe: duplicate ENTITY_KIND "${entityKind}" shared by ${existing.name} and ${ctor.name}.`);
+            }
+            map.set(entityKind, ctor);
+        }
+        this.byEntityKind = map;
+    }
+    async transform(value) {
+        if (!isPlainObject(value)) {
+            throw new common_1.BadRequestException({
+                code: 'INVALID_ENVELOPE',
+                message: 'Webhook envelope body must be a JSON object.',
+            });
+        }
+        const rawEntityKind = value.entityKind;
+        if (typeof rawEntityKind !== 'string') {
+            throw new common_1.BadRequestException({
+                code: 'MISSING_ENTITY_KIND',
+                message: 'Webhook envelope is missing the required string field "entityKind".',
+            });
+        }
+        const ctor = this.byEntityKind.get(rawEntityKind);
+        if (!ctor) {
+            const accepted = [...this.byEntityKind.keys()].join(', ');
+            throw new common_1.BadRequestException({
+                code: 'UNKNOWN_ENTITY_KIND',
+                message: `Unknown entityKind "${rawEntityKind}". Expected one of: ${accepted}.`,
+            });
+        }
+        const instance = (0, class_transformer_1.plainToInstance)(ctor, value, {
+            enableImplicitConversion: false,
+        });
+        const errors = await (0, class_validator_1.validate)(instance, {
+            whitelist: true,
+            forbidNonWhitelisted: true,
+            forbidUnknownValues: true,
+        });
+        if (errors.length > 0) {
+            throw new common_1.BadRequestException({
+                code: 'INVALID_ENVELOPE',
+                message: `Webhook envelope failed validation (entityKind=${rawEntityKind}).`,
+                details: flattenValidationErrors(errors),
+            });
+        }
+        return instance;
+    }
+};
+exports.IntegrationEnvelopePipe = IntegrationEnvelopePipe;
+exports.IntegrationEnvelopePipe = IntegrationEnvelopePipe = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [Array])
+], IntegrationEnvelopePipe);
+function isPlainObject(value) {
+    return (typeof value === 'object' &&
+        value !== null &&
+        !Array.isArray(value) &&
+        Object.getPrototypeOf(value) === Object.prototype);
+}
+function flattenValidationErrors(errors, parentPath = '') {
+    const flat = [];
+    for (const err of errors) {
+        const path = parentPath ? `${parentPath}.${err.property}` : err.property;
+        if (err.constraints && Object.keys(err.constraints).length > 0) {
+            flat.push({ path, constraints: err.constraints });
+        }
+        if (err.children && err.children.length > 0) {
+            flat.push(...flattenValidationErrors(err.children, path));
+        }
+    }
+    return flat;
+}
+//# sourceMappingURL=integration-envelope.pipe.js.map

package/dist/nestjs/integration-webhooks/integration-envelope.pipe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"integration-envelope.pipe.js","sourceRoot":"","sources":["../../../src/nestjs/integration-webhooks/integration-envelope.pipe.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAIwB;AACxB,yDAAoD;AACpD,qDAA4D;AAmCrD,IAAM,uBAAuB,GAA7B,MAAM,uBAAuB;IAIjB,YAAY,CAG3B;IAEF,YAAY,QAA+C;QACzD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CACb,oEAAoE,CACrE,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,GAAG,EAAiD,CAAC;QACrE,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;YAC5B,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC;YACpC,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;gBAC7B,MAAM,IAAI,KAAK,CACb,oCAAoC,IAAI,CAAC,IAAI,iCAAiC,CAC/E,CAAC;YACJ,CAAC;YACD,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YACrC,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,IAAI,KAAK,CACb,mDAAmD,UAAU,eAAe,QAAQ,CAAC,IAAI,QAAQ,IAAI,CAAC,IAAI,GAAG,CAC9G,CAAC;YACJ,CAAC;YACD,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QAC5B,CAAC;QACD,IAAI,CAAC,YAAY,GAAG,GAAG,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,KAAc;QAC5B,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,4BAAmB,CAAC;gBAC5B,IAAI,EAAE,kBAAkB;gBACxB,OAAO,EAAE,8CAA8C;aACxD,CAAC,CAAC;QACL,CAAC;QAED,MAAM,aAAa,GAAG,KAAK,CAAC,UAAU,CAAC;QACvC,IAAI,OAAO,aAAa,KAAK,QAAQ,EAAE,CAAC;YACtC,MAAM,IAAI,4BAAmB,CAAC;gBAC5B,IAAI,EAAE,qBAAqB;gBAC3B,OAAO,EACL,qEAAqE;aACxE,CAAC,CAAC;QACL,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,aAAkC,CAAC,CAAC;QACvE,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC1D,MAAM,IAAI,4BAAmB,CAAC;gBAC5B,IAAI,EAAE,qBAAqB;gBAC3B,OAAO,EAAE,uBAAuB,aAAa,uBAAuB,QAAQ,GAAG;aAChF,CAAC,CAAC;QACL,CAAC;QAED,MAAM,QAAQ,GAAG,IAAA,mCAAe,EAAC,IAAI,EAAE,KAAK,EAAE;YAC5C,wBAAwB,EAAE,KAAK;SAChC,CAAa,CAAC;QAEf,MAAM,MAAM,GAAG,MAAM,IAAA,0BAAQ,EAAC,QAAkB,EAAE;YAChD,SAAS,EAAE,IAAI;YACf,oBAAoB,EAAE,IAAI;YAC1B,mBAAmB,EAAE,IAAI;SAC1B,CAAC,CAAC;QAEH,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,4BAAmB,CAAC;gBAC5B,IAAI,EAAE,kBAAkB;gBACxB,OAAO,EAAE,kDAAkD,aAAa,IAAI;gBAC5E,OAAO,EAAE,uBAAuB,CAAC,MAAM,CAAC;aACzC,CAAC,CAAC;QACL,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF,CAAA;AAhFY,0DAAuB;kCAAvB,uBAAuB;IADnC,IAAA,mBAAU,GAAE;;GACA,uBAAuB,CAgFnC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACrB,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,SAAS,CAClD,CAAC;AACJ,CAAC;AAOD,SAAS,uBAAuB,CAC9B,MAAkC,EAClC,UAAU,GAAG,EAAE;IAEf,MAAM,IAAI,GAA0B,EAAE,CAAC;IACvC,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,GAAG,UAAU,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;QACzE,IAAI,GAAG,CAAC,WAAW,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/D,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;QACpD,CAAC;QACD,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5C,IAAI,CAAC,IAAI,CAAC,GAAG,uBAAuB,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/nestjs/integration-webhooks/integration-envelope.types.d.ts

@@ -0,0 +1,7 @@
+import type { Type } from '@nestjs/common';
+import type { WebhookEntityKind } from '../../lib/integration-webhooks';
+import type { IntegrationWebhookEnvelopeDto } from './integration-webhook-envelope.dto';
+export type IntegrationEnvelopeVariant<TPayload = any> = Type<IntegrationWebhookEnvelopeDto<TPayload>> & {
+    readonly ENTITY_KIND: WebhookEntityKind;
+};
+//# sourceMappingURL=integration-envelope.types.d.ts.map

package/dist/nestjs/integration-webhooks/integration-envelope.types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"integration-envelope.types.d.ts","sourceRoot":"","sources":["../../../src/nestjs/integration-webhooks/integration-envelope.types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAE3C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AAExE,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,oCAAoC,CAAC;AAWxF,MAAM,MAAM,0BAA0B,CAAC,QAAQ,GAAG,GAAG,IAAI,IAAI,CAC3D,6BAA6B,CAAC,QAAQ,CAAC,CACxC,GAAG;IACF,QAAQ,CAAC,WAAW,EAAE,iBAAiB,CAAC;CACzC,CAAC"}

package/dist/nestjs/integration-webhooks/integration-envelope.types.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=integration-envelope.types.js.map

package/dist/nestjs/integration-webhooks/integration-envelope.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"integration-envelope.types.js","sourceRoot":"","sources":["../../../src/nestjs/integration-webhooks/integration-envelope.types.ts"],"names":[],"mappings":""}

package/dist/nestjs/integration-webhooks/integration-webhook-envelope.dto.d.ts

@@ -0,0 +1,14 @@
+import { AdapterKey, ConnectorKind, WebhookEntityKind } from '../../lib/integration-webhooks';
+export declare class IntegrationWebhookEnvelopeDto<TPayload = unknown> {
+    provider: ConnectorKind;
+    adapterKey: AdapterKey;
+    event: string;
+    entityKind: WebhookEntityKind;
+    deliveryId: string;
+    occurredAt: string;
+    correlationId: string;
+    externalId?: string;
+    externalSpaceKey?: string;
+    payload: TPayload;
+}
+//# sourceMappingURL=integration-webhook-envelope.dto.d.ts.map

package/dist/nestjs/integration-webhooks/integration-webhook-envelope.dto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"integration-webhook-envelope.dto.d.ts","sourceRoot":"","sources":["../../../src/nestjs/integration-webhooks/integration-webhook-envelope.dto.ts"],"names":[],"mappings":"AASA,OAAO,EACL,UAAU,EACV,aAAa,EACb,iBAAiB,EAClB,MAAM,gCAAgC,CAAC;AAwBxC,qBAAa,6BAA6B,CAAC,QAAQ,GAAG,OAAO;IAQ3D,QAAQ,EAAG,aAAa,CAAC;IASzB,UAAU,EAAG,UAAU,CAAC;IAQxB,KAAK,EAAG,MAAM,CAAC;IAIf,UAAU,EAAG,iBAAiB,CAAC;IAQ/B,UAAU,EAAG,MAAM,CAAC;IAOpB,UAAU,EAAG,MAAM,CAAC;IAQpB,aAAa,EAAG,MAAM,CAAC;IASvB,UAAU,CAAC,EAAE,MAAM,CAAC;IASpB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAK1B,OAAO,EAAG,QAAQ,CAAC;CACpB"}

package/dist/nestjs/integration-webhooks/integration-webhook-envelope.dto.js

@@ -0,0 +1,97 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.IntegrationWebhookEnvelopeDto = void 0;
+const swagger_1 = require("@nestjs/swagger");
+const class_validator_1 = require("class-validator");
+const integration_webhooks_1 = require("../../lib/integration-webhooks");
+class IntegrationWebhookEnvelopeDto {
+    provider;
+    adapterKey;
+    event;
+    entityKind;
+    deliveryId;
+    occurredAt;
+    correlationId;
+    externalId;
+    externalSpaceKey;
+    payload;
+}
+exports.IntegrationWebhookEnvelopeDto = IntegrationWebhookEnvelopeDto;
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        enum: integration_webhooks_1.ConnectorKind,
+        enumName: 'ConnectorKind',
+        description: 'External provider that emitted the webhook.',
+        example: integration_webhooks_1.ConnectorKind.GITHUB,
+    }),
+    (0, class_validator_1.IsEnum)(integration_webhooks_1.ConnectorKind),
+    __metadata("design:type", String)
+], IntegrationWebhookEnvelopeDto.prototype, "provider", void 0);
+__decorate([
+    (0, class_validator_1.IsEnum)(integration_webhooks_1.AdapterKey),
+    __metadata("design:type", String)
+], IntegrationWebhookEnvelopeDto.prototype, "adapterKey", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'Canonical event name. Per-domain enums define the allowed values (ScmWebhookEvent, TrackerWebhookEvent, DocWebhookEvent).',
+        example: 'scm.issue.opened',
+    }),
+    (0, class_validator_1.IsString)(),
+    __metadata("design:type", String)
+], IntegrationWebhookEnvelopeDto.prototype, "event", void 0);
+__decorate([
+    (0, class_validator_1.IsEnum)(integration_webhooks_1.WebhookEntityKind),
+    __metadata("design:type", String)
+], IntegrationWebhookEnvelopeDto.prototype, "entityKind", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: "Provider-native delivery identifier. Stable across retries — the adapter's dedup table keys off (provider, deliveryId).",
+        example: '72d3162e-cc78-11e3-81ab-4c9367dc0958',
+    }),
+    (0, class_validator_1.IsString)(),
+    __metadata("design:type", String)
+], IntegrationWebhookEnvelopeDto.prototype, "deliveryId", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'ISO-8601 timestamp when the provider emitted this event.',
+        example: '2026-04-17T13:45:00.000Z',
+    }),
+    (0, class_validator_1.IsISO8601)(),
+    __metadata("design:type", String)
+], IntegrationWebhookEnvelopeDto.prototype, "occurredAt", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'Correlation id for tracing; propagated into domain service logs via X-Correlation-Id.',
+        example: '550e8400-e29b-41d4-a716-446655440000',
+    }),
+    (0, class_validator_1.IsUUID)(),
+    __metadata("design:type", String)
+], IntegrationWebhookEnvelopeDto.prototype, "correlationId", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({
+        description: 'External entity id in the provider (e.g. GitHub issue id, Jira issue key).',
+        example: '123456789',
+    }),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    __metadata("design:type", String)
+], IntegrationWebhookEnvelopeDto.prototype, "externalId", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({
+        description: 'Provider-native grouping key — repoSlug for SCM, spaceKey for Confluence, projectKey for Jira.',
+        example: 'acme/billing',
+    }),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    __metadata("design:type", String)
+], IntegrationWebhookEnvelopeDto.prototype, "externalSpaceKey", void 0);
+//# sourceMappingURL=integration-webhook-envelope.dto.js.map

package/dist/nestjs/integration-webhooks/integration-webhook-envelope.dto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"integration-webhook-envelope.dto.js","sourceRoot":"","sources":["../../../src/nestjs/integration-webhooks/integration-webhook-envelope.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6CAAmE;AACnE,qDAMyB;AAEzB,yEAIwC;AAwBxC,MAAa,6BAA6B;IAQxC,QAAQ,CAAiB;IASzB,UAAU,CAAc;IAQxB,KAAK,CAAU;IAIf,UAAU,CAAqB;IAQ/B,UAAU,CAAU;IAOpB,UAAU,CAAU;IAQpB,aAAa,CAAU;IASvB,UAAU,CAAU;IASpB,gBAAgB,CAAU;IAK1B,OAAO,CAAY;CACpB;AA5ED,sEA4EC;AApEC;IAPC,IAAA,qBAAW,EAAC;QACX,IAAI,EAAE,oCAAa;QACnB,QAAQ,EAAE,eAAe;QACzB,WAAW,EAAE,6CAA6C;QAC1D,OAAO,EAAE,oCAAa,CAAC,MAAM;KAC9B,CAAC;IACD,IAAA,wBAAM,EAAC,oCAAa,CAAC;;+DACG;AASzB;IADC,IAAA,wBAAM,EAAC,iCAAU,CAAC;;iEACK;AAQxB;IANC,IAAA,qBAAW,EAAC;QACX,WAAW,EACT,2HAA2H;QAC7H,OAAO,EAAE,kBAAkB;KAC5B,CAAC;IACD,IAAA,0BAAQ,GAAE;;4DACI;AAIf;IADC,IAAA,wBAAM,EAAC,wCAAiB,CAAC;;iEACK;AAQ/B;IANC,IAAA,qBAAW,EAAC;QACX,WAAW,EACT,yHAAyH;QAC3H,OAAO,EAAE,sCAAsC;KAChD,CAAC;IACD,IAAA,0BAAQ,GAAE;;iEACS;AAOpB;IALC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,0DAA0D;QACvE,OAAO,EAAE,0BAA0B;KACpC,CAAC;IACD,IAAA,2BAAS,GAAE;;iEACQ;AAQpB;IANC,IAAA,qBAAW,EAAC;QACX,WAAW,EACT,uFAAuF;QACzF,OAAO,EAAE,sCAAsC;KAChD,CAAC;IACD,IAAA,wBAAM,GAAE;;oEACc;AASvB;IAPC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EACT,4EAA4E;QAC9E,OAAO,EAAE,WAAW;KACrB,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;iEACS;AASpB;IAPC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EACT,gGAAgG;QAClG,OAAO,EAAE,cAAc;KACxB,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;uEACe"}

package/dist/nestjs/jwks/jwks-verifier.d.ts

@@ -0,0 +1,48 @@
+export interface DecodedJwtHeader {
+    alg: string;
+    typ?: string;
+    kid?: string;
+}
+export interface DecodedJwtPayload {
+    iss?: string;
+    sub?: string;
+    exp?: number;
+    iat?: number;
+    nbf?: number;
+    aud?: string | string[];
+    [key: string]: unknown;
+}
+export interface Jwk {
+    kty: string;
+    kid: string;
+    use?: string;
+    n?: string;
+    e?: string;
+    x5c?: string[];
+    alg?: string;
+}
+export declare class JwksVerificationError extends Error {
+    constructor(message: string);
+}
+export interface JwksVerifyOptions {
+    jwksUrl: string;
+    cacheKey: string;
+    expectedIssuers?: readonly string[];
+}
+export declare class JwksVerifier {
+    private readonly cacheTtlMs;
+    private readonly caches;
+    constructor(cacheTtlMs?: number);
+    decode(jwt: string): {
+        header: DecodedJwtHeader;
+        payload: DecodedJwtPayload;
+    };
+    verify(jwt: string, options: JwksVerifyOptions): Promise<DecodedJwtPayload>;
+    private assertIssuer;
+    private verifySignature;
+    private getSigningKey;
+    private fetchJwks;
+    private resolveKey;
+    private mapAlgorithm;
+}
+//# sourceMappingURL=jwks-verifier.d.ts.map

package/dist/nestjs/jwks/jwks-verifier.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwks-verifier.d.ts","sourceRoot":"","sources":["../../../src/nestjs/jwks/jwks-verifier.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,gBAAgB;IAC/B,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAOD,MAAM,WAAW,iBAAiB;IAChC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IACxB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAMD,MAAM,WAAW,GAAG;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,CAAC,CAAC,EAAE,MAAM,CAAC;IACX,CAAC,CAAC,EAAE,MAAM,CAAC;IACX,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAuBD,qBAAa,qBAAsB,SAAQ,KAAK;gBAClC,OAAO,EAAE,MAAM;CAI5B;AAKD,MAAM,WAAW,iBAAiB;IAKhC,OAAO,EAAE,MAAM,CAAC;IAMhB,QAAQ,EAAE,MAAM,CAAC;IASjB,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC;AAkBD,qBAAa,YAAY;IASX,OAAO,CAAC,QAAQ,CAAC,UAAU;IAPvC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAoC;gBAO9B,UAAU,GAAE,MAAgB;IAQzD,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG;QAAE,MAAM,EAAE,gBAAgB,CAAC;QAAC,OAAO,EAAE,iBAAiB,CAAA;KAAE;IAyBvE,MAAM,CACV,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,iBAAiB,CAAC;IAoC7B,OAAO,CAAC,YAAY;IAsBpB,OAAO,CAAC,eAAe;YAqBT,aAAa;YAsBb,SAAS;IAiCvB,OAAO,CAAC,UAAU;IAkBlB,OAAO,CAAC,YAAY;CAYrB"}

package/dist/nestjs/jwks/jwks-verifier.js

@@ -0,0 +1,177 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.JwksVerifier = exports.JwksVerificationError = void 0;
+const crypto = __importStar(require("node:crypto"));
+class JwksVerificationError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'JwksVerificationError';
+    }
+}
+exports.JwksVerificationError = JwksVerificationError;
+class JwksVerifier {
+    cacheTtlMs;
+    caches = new Map();
+    constructor(cacheTtlMs = 600_000) {
+        this.cacheTtlMs = cacheTtlMs;
+    }
+    decode(jwt) {
+        const [headerB64, payloadB64, signatureB64] = jwt.split('.');
+        if (!headerB64 || !payloadB64 || !signatureB64) {
+            throw new JwksVerificationError('Invalid token format');
+        }
+        let header;
+        let payload;
+        try {
+            header = JSON.parse(Buffer.from(headerB64, 'base64url').toString('utf8'));
+            payload = JSON.parse(Buffer.from(payloadB64, 'base64url').toString('utf8'));
+        }
+        catch {
+            throw new JwksVerificationError('Invalid token format');
+        }
+        return { header, payload };
+    }
+    async verify(jwt, options) {
+        const [headerB64, payloadB64, signatureB64] = jwt.split('.');
+        if (!headerB64 || !payloadB64 || !signatureB64) {
+            throw new JwksVerificationError('Invalid token format');
+        }
+        const { header, payload } = this.decode(jwt);
+        const nowMs = Date.now();
+        if (typeof payload.exp === 'number' && nowMs >= payload.exp * 1000) {
+            throw new JwksVerificationError('Token expired');
+        }
+        if (typeof payload.nbf === 'number' && nowMs < payload.nbf * 1000) {
+            throw new JwksVerificationError('Token not yet valid');
+        }
+        if (options.expectedIssuers && options.expectedIssuers.length > 0) {
+            this.assertIssuer(payload.iss, options.expectedIssuers);
+        }
+        const publicKey = await this.getSigningKey(options.cacheKey, options.jwksUrl, header.kid);
+        this.verifySignature(headerB64, payloadB64, signatureB64, header.alg, publicKey);
+        return payload;
+    }
+    assertIssuer(iss, expectedIssuers) {
+        if (!iss) {
+            throw new JwksVerificationError('Token missing required issuer claim');
+        }
+        const realmSuffixes = [
+            ...new Set(expectedIssuers
+                .map((candidate) => candidate.match(/(\/realms\/[^/]+)$/)?.[1])
+                .filter((suffix) => Boolean(suffix))),
+        ];
+        const matched = expectedIssuers.includes(iss) ||
+            realmSuffixes.some((suffix) => iss.endsWith(suffix));
+        if (!matched) {
+            throw new JwksVerificationError('Invalid token issuer');
+        }
+    }
+    verifySignature(headerB64, payloadB64, signatureB64, alg, publicKey) {
+        const data = `${headerB64}.${payloadB64}`;
+        const signature = Buffer.from(signatureB64, 'base64url');
+        const algorithm = this.mapAlgorithm(alg);
+        const isValid = crypto.verify(algorithm, Buffer.from(data), publicKey, signature);
+        if (!isValid) {
+            throw new JwksVerificationError('Invalid token signature');
+        }
+    }
+    async getSigningKey(cacheKey, jwksUrl, kid) {
+        let cache = this.caches.get(cacheKey);
+        if (cache &&
+            kid &&
+            cache.keys.has(kid) &&
+            Date.now() - cache.lastFetch < this.cacheTtlMs) {
+            return cache.keys.get(kid);
+        }
+        const keys = await this.fetchJwks(jwksUrl);
+        cache = { keys, lastFetch: Date.now() };
+        this.caches.set(cacheKey, cache);
+        return this.resolveKey(cache, kid);
+    }
+    async fetchJwks(jwksUrl) {
+        let response;
+        try {
+            response = await fetch(jwksUrl);
+        }
+        catch (error) {
+            const msg = error instanceof Error ? error.message : String(error);
+            throw new JwksVerificationError(`Failed to reach JWKS endpoint ${jwksUrl}: ${msg}`);
+        }
+        if (!response.ok) {
+            throw new JwksVerificationError(`Failed to fetch JWKS from ${jwksUrl}: ${response.status}`);
+        }
+        const jwks = (await response.json());
+        const keys = new Map();
+        for (const key of jwks.keys) {
+            if (key.kty === 'RSA' && key.n && key.e) {
+                const publicKey = crypto.createPublicKey({
+                    key: { kty: 'RSA', n: key.n, e: key.e },
+                    format: 'jwk',
+                });
+                keys.set(key.kid, publicKey);
+            }
+        }
+        return keys;
+    }
+    resolveKey(cache, kid) {
+        if (kid) {
+            const key = cache.keys.get(kid);
+            if (!key) {
+                throw new JwksVerificationError(`Signing key not found for kid: ${kid}`);
+            }
+            return key;
+        }
+        const firstKey = cache.keys.values().next().value;
+        if (!firstKey) {
+            throw new JwksVerificationError('No valid signing keys found in JWKS');
+        }
+        return firstKey;
+    }
+    mapAlgorithm(alg) {
+        switch (alg) {
+            case 'RS256':
+                return 'sha256';
+            case 'RS384':
+                return 'sha384';
+            case 'RS512':
+                return 'sha512';
+            default:
+                throw new JwksVerificationError(`Unsupported JWT algorithm: ${alg}`);
+        }
+    }
+}
+exports.JwksVerifier = JwksVerifier;
+//# sourceMappingURL=jwks-verifier.js.map

package/dist/nestjs/jwks/jwks-verifier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwks-verifier.js","sourceRoot":"","sources":["../../../src/nestjs/jwks/jwks-verifier.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,oDAAsC;AA6DtC,MAAa,qBAAsB,SAAQ,KAAK;IAC9C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AALD,sDAKC;AA4CD,MAAa,YAAY;IASM;IAPZ,MAAM,GAAG,IAAI,GAAG,EAAyB,CAAC;IAO3D,YAA6B,aAAqB,OAAO;QAA5B,eAAU,GAAV,UAAU,CAAkB;IAAG,CAAC;IAQ7D,MAAM,CAAC,GAAW;QAChB,MAAM,CAAC,SAAS,EAAE,UAAU,EAAE,YAAY,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7D,IAAI,CAAC,SAAS,IAAI,CAAC,UAAU,IAAI,CAAC,YAAY,EAAE,CAAC;YAC/C,MAAM,IAAI,qBAAqB,CAAC,sBAAsB,CAAC,CAAC;QAC1D,CAAC;QACD,IAAI,MAAwB,CAAC;QAC7B,IAAI,OAA0B,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CACjB,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CACjC,CAAC;YACtB,OAAO,GAAG,IAAI,CAAC,KAAK,CAClB,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CACjC,CAAC;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,qBAAqB,CAAC,sBAAsB,CAAC,CAAC;QAC1D,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAC7B,CAAC;IAOD,KAAK,CAAC,MAAM,CACV,GAAW,EACX,OAA0B;QAE1B,MAAM,CAAC,SAAS,EAAE,UAAU,EAAE,YAAY,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7D,IAAI,CAAC,SAAS,IAAI,CAAC,UAAU,IAAI,CAAC,YAAY,EAAE,CAAC;YAC/C,MAAM,IAAI,qBAAqB,CAAC,sBAAsB,CAAC,CAAC;QAC1D,CAAC;QAED,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAE7C,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,IAAI,KAAK,IAAI,OAAO,CAAC,GAAG,GAAG,IAAI,EAAE,CAAC;YACnE,MAAM,IAAI,qBAAqB,CAAC,eAAe,CAAC,CAAC;QACnD,CAAC;QACD,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,IAAI,KAAK,GAAG,OAAO,CAAC,GAAG,GAAG,IAAI,EAAE,CAAC;YAClE,MAAM,IAAI,qBAAqB,CAAC,qBAAqB,CAAC,CAAC;QACzD,CAAC;QAED,IAAI,OAAO,CAAC,eAAe,IAAI,OAAO,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClE,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;QAC1D,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,aAAa,CACxC,OAAO,CAAC,QAAQ,EAChB,OAAO,CAAC,OAAO,EACf,MAAM,CAAC,GAAG,CACX,CAAC;QACF,IAAI,CAAC,eAAe,CAClB,SAAS,EACT,UAAU,EACV,YAAY,EACZ,MAAM,CAAC,GAAG,EACV,SAAS,CACV,CAAC;QAEF,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,YAAY,CAClB,GAAuB,EACvB,eAAkC;QAElC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,qBAAqB,CAAC,qCAAqC,CAAC,CAAC;QACzE,CAAC;QACD,MAAM,aAAa,GAAG;YACpB,GAAG,IAAI,GAAG,CACR,eAAe;iBACZ,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;iBAC9D,MAAM,CAAC,CAAC,MAAM,EAAoB,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CACzD;SACF,CAAC;QACF,MAAM,OAAO,GACX,eAAe,CAAC,QAAQ,CAAC,GAAG,CAAC;YAC7B,aAAa,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QACvD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,qBAAqB,CAAC,sBAAsB,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IAEO,eAAe,CACrB,SAAiB,EACjB,UAAkB,EAClB,YAAoB,EACpB,GAAW,EACX,SAA2B;QAE3B,MAAM,IAAI,GAAG,GAAG,SAAS,IAAI,UAAU,EAAE,CAAC;QAC1C,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;QACzD,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QACzC,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAC3B,SAAS,EACT,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EACjB,SAAS,EACT,SAAS,CACV,CAAC;QACF,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,qBAAqB,CAAC,yBAAyB,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,aAAa,CACzB,QAAgB,EAChB,OAAe,EACf,GAAuB;QAEvB,IAAI,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACtC,IACE,KAAK;YACL,GAAG;YACH,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YACnB,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,UAAU,EAC9C,CAAC;YACD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAE,CAAC;QAC9B,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAC3C,KAAK,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QACxC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAEjC,OAAO,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACrC,CAAC;IAEO,KAAK,CAAC,SAAS,CACrB,OAAe;QAEf,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,GAAG,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAEnE,MAAM,IAAI,qBAAqB,CAC7B,iCAAiC,OAAO,KAAK,GAAG,EAAE,CACnD,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,qBAAqB,CAC7B,6BAA6B,OAAO,KAAK,QAAQ,CAAC,MAAM,EAAE,CAC3D,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAiB,CAAC;QACrD,MAAM,IAAI,GAAG,IAAI,GAAG,EAA4B,CAAC;QACjD,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YAC5B,IAAI,GAAG,CAAC,GAAG,KAAK,KAAK,IAAI,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,EAAE,CAAC;gBACxC,MAAM,SAAS,GAAG,MAAM,CAAC,eAAe,CAAC;oBACvC,GAAG,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE;oBACvC,MAAM,EAAE,KAAK;iBACd,CAAC,CAAC;gBACH,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YAC/B,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,UAAU,CAChB,KAAoB,EACpB,GAAuB;QAEvB,IAAI,GAAG,EAAE,CAAC;YACR,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAChC,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,MAAM,IAAI,qBAAqB,CAAC,kCAAkC,GAAG,EAAE,CAAC,CAAC;YAC3E,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC;QACD,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;QAClD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,qBAAqB,CAAC,qCAAqC,CAAC,CAAC;QACzE,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,YAAY,CAAC,GAAW;QAC9B,QAAQ,GAAG,EAAE,CAAC;YACZ,KAAK,OAAO;gBACV,OAAO,QAAQ,CAAC;YAClB,KAAK,OAAO;gBACV,OAAO,QAAQ,CAAC;YAClB,KAAK,OAAO;gBACV,OAAO,QAAQ,CAAC;YAClB;gBACE,MAAM,IAAI,qBAAqB,CAAC,8BAA8B,GAAG,EAAE,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;CACF;AAjND,oCAiNC"}

package/dist/nestjs/jwt-verification.guard.d.ts

@@ -0,0 +1,25 @@
+import { CanActivate, ExecutionContext } from '@nestjs/common';
+import type { AuthModuleOptions } from './auth/auth-module-options';
+export declare class JwtVerificationGuard implements CanActivate {
+    private readonly authOptions?;
+    private readonly logger;
+    private readonly jwks;
+    private static readonly SINGLE_REALM_CACHE_KEY;
+    private multiRealmConfig;
+    private resolvingConfig;
+    constructor(authOptions?: AuthModuleOptions | undefined);
+    canActivate(context: ExecutionContext): Promise<boolean>;
+    private verifyToken;
+    private decodeOrThrow;
+    private verifyWithJwks;
+    private verifyMultiRealm;
+    private verifySingleRealm;
+    private resolveMultiRealmConfig;
+    private resolveKeycloakBaseUrl;
+    private resolveAllowedRealms;
+    private appendIssuerBaseUrls;
+    private extractRealmFromIssuer;
+    private attachRealmToContext;
+    private isPublicPath;
+}
+//# sourceMappingURL=jwt-verification.guard.d.ts.map

package/dist/nestjs/jwt-verification.guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt-verification.guard.d.ts","sourceRoot":"","sources":["../../src/nestjs/jwt-verification.guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,WAAW,EACX,gBAAgB,EAKjB,MAAM,gBAAgB,CAAC;AAKxB,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAyCpE,qBACa,oBAAqB,YAAW,WAAW;IA6BpD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;IA5B/B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAyC;IAShE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAA6B;IAGlD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,sBAAsB,CAAgB;IAG9D,OAAO,CAAC,gBAAgB,CAGR;IAEhB,OAAO,CAAC,eAAe,CAGC;gBAKL,WAAW,CAAC,EAAE,iBAAiB,YAAA;IAG5C,WAAW,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC;YAwChD,WAAW;IAsBzB,OAAO,CAAC,aAAa;YAmBP,cAAc;YAed,gBAAgB;YAoChB,iBAAiB;YA0CjB,uBAAuB;YA4CvB,sBAAsB;YAQtB,oBAAoB;IAclC,OAAO,CAAC,oBAAoB;IAa5B,OAAO,CAAC,sBAAsB;IAM9B,OAAO,CAAC,oBAAoB;IAa5B,OAAO,CAAC,YAAY;CAYrB"}