@xemahq/platform-common 0.1.3

package/dist/nestjs/pagination.js

@@ -0,0 +1,73 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PaginationMeta = exports.PaginationQueryDto = void 0;
+exports.parsePagination = parsePagination;
+exports.buildPaginatedResponse = buildPaginatedResponse;
+const swagger_1 = require("@nestjs/swagger");
+class PaginationQueryDto {
+    page = 1;
+    limit = 20;
+}
+exports.PaginationQueryDto = PaginationQueryDto;
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({
+        description: 'Page number (1-indexed)',
+        example: 1,
+        minimum: 1,
+        default: 1,
+        type: Number,
+    }),
+    __metadata("design:type", Number)
+], PaginationQueryDto.prototype, "page", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({
+        description: 'Items per page',
+        example: 20,
+        minimum: 1,
+        maximum: 100,
+        default: 20,
+        type: Number,
+    }),
+    __metadata("design:type", Number)
+], PaginationQueryDto.prototype, "limit", void 0);
+class PaginationMeta {
+    total;
+    page;
+    limit;
+    totalPages;
+    hasMore;
+}
+exports.PaginationMeta = PaginationMeta;
+function parsePagination(query) {
+    const page = Math.max(1, Math.floor(Number(query.page) || 1));
+    const limit = Math.min(100, Math.max(1, Math.floor(Number(query.limit) || 20)));
+    return {
+        skip: (page - 1) * limit,
+        take: limit,
+        page,
+        limit,
+    };
+}
+function buildPaginatedResponse(items, total, page, limit) {
+    const totalPages = Math.ceil(total / limit);
+    return {
+        data: items,
+        pagination: {
+            total,
+            page,
+            limit,
+            totalPages,
+            hasMore: page < totalPages,
+        },
+    };
+}
+//# sourceMappingURL=pagination.js.map

package/dist/nestjs/pagination.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pagination.js","sourceRoot":"","sources":["../../src/nestjs/pagination.ts"],"names":[],"mappings":";;;;;;;;;;;;AAmEA,0CAiBC;AAOD,wDAiBC;AA5GD,6CAAsD;AAsBtD,MAAa,kBAAkB;IAQ7B,IAAI,GAAY,CAAC,CAAC;IAUlB,KAAK,GAAY,EAAE,CAAC;CACrB;AAnBD,gDAmBC;AAXC;IAPC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,yBAAyB;QACtC,OAAO,EAAE,CAAC;QACV,OAAO,EAAE,CAAC;QACV,OAAO,EAAE,CAAC;QACV,IAAI,EAAE,MAAM;KACb,CAAC;;gDACgB;AAUlB;IARC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,gBAAgB;QAC7B,OAAO,EAAE,EAAE;QACX,OAAO,EAAE,CAAC;QACV,OAAO,EAAE,GAAG;QACZ,OAAO,EAAE,EAAE;QACX,IAAI,EAAE,MAAM;KACb,CAAC;;iDACkB;AAMtB,MAAa,cAAc;IACzB,KAAK,CAAU;IACf,IAAI,CAAU;IACd,KAAK,CAAU;IACf,UAAU,CAAU;IACpB,OAAO,CAAW;CACnB;AAND,wCAMC;AAeD,SAAgB,eAAe,CAAC,KAAwC;IAMtE,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC9D,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CACpB,GAAG,EACH,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CACnD,CAAC;IACF,OAAO;QACL,IAAI,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,KAAK;QACxB,IAAI,EAAE,KAAK;QACX,IAAI;QACJ,KAAK;KACN,CAAC;AACJ,CAAC;AAOD,SAAgB,sBAAsB,CACpC,KAAU,EACV,KAAa,EACb,IAAY,EACZ,KAAa;IAEb,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC;IAC5C,OAAO;QACL,IAAI,EAAE,KAAK;QACX,UAAU,EAAE;YACV,KAAK;YACL,IAAI;YACJ,KAAK;YACL,UAAU;YACV,OAAO,EAAE,IAAI,GAAG,UAAU;SAC3B;KACF,CAAC;AACJ,CAAC"}

package/dist/nestjs/public.decorator.d.ts

@@ -0,0 +1,3 @@
+export declare const IS_PUBLIC_KEY = "isPublic";
+export declare const Public: () => import("@nestjs/common").CustomDecorator<string>;
+//# sourceMappingURL=public.decorator.d.ts.map

package/dist/nestjs/public.decorator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"public.decorator.d.ts","sourceRoot":"","sources":["../../src/nestjs/public.decorator.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,aAAa,aAAa,CAAC;AAYxC,eAAO,MAAM,MAAM,wDAAyC,CAAC"}

package/dist/nestjs/public.decorator.js

@@ -0,0 +1,8 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Public = exports.IS_PUBLIC_KEY = void 0;
+const common_1 = require("@nestjs/common");
+exports.IS_PUBLIC_KEY = 'isPublic';
+const Public = () => (0, common_1.SetMetadata)(exports.IS_PUBLIC_KEY, true);
+exports.Public = Public;
+//# sourceMappingURL=public.decorator.js.map

package/dist/nestjs/public.decorator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"public.decorator.js","sourceRoot":"","sources":["../../src/nestjs/public.decorator.ts"],"names":[],"mappings":";;;AAAA,2CAA6C;AAEhC,QAAA,aAAa,GAAG,UAAU,CAAC;AAYjC,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,IAAA,oBAAW,EAAC,qBAAa,EAAE,IAAI,CAAC,CAAC;AAAhD,QAAA,MAAM,UAA0C"}

package/dist/nestjs/raw-response.decorator.d.ts

@@ -0,0 +1,3 @@
+export declare const RAW_RESPONSE_KEY = "RAW_RESPONSE";
+export declare const RawResponse: () => import("@nestjs/common").CustomDecorator<string>;
+//# sourceMappingURL=raw-response.decorator.d.ts.map

package/dist/nestjs/raw-response.decorator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"raw-response.decorator.d.ts","sourceRoot":"","sources":["../../src/nestjs/raw-response.decorator.ts"],"names":[],"mappings":"AASA,eAAO,MAAM,gBAAgB,iBAAiB,CAAC;AAC/C,eAAO,MAAM,WAAW,wDAA4C,CAAC"}

package/dist/nestjs/raw-response.decorator.js

@@ -0,0 +1,8 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RawResponse = exports.RAW_RESPONSE_KEY = void 0;
+const common_1 = require("@nestjs/common");
+exports.RAW_RESPONSE_KEY = 'RAW_RESPONSE';
+const RawResponse = () => (0, common_1.SetMetadata)(exports.RAW_RESPONSE_KEY, true);
+exports.RawResponse = RawResponse;
+//# sourceMappingURL=raw-response.decorator.js.map

package/dist/nestjs/raw-response.decorator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"raw-response.decorator.js","sourceRoot":"","sources":["../../src/nestjs/raw-response.decorator.ts"],"names":[],"mappings":";;;AAAA,2CAA6C;AAShC,QAAA,gBAAgB,GAAG,cAAc,CAAC;AACxC,MAAM,WAAW,GAAG,GAAG,EAAE,CAAC,IAAA,oBAAW,EAAC,wBAAgB,EAAE,IAAI,CAAC,CAAC;AAAxD,QAAA,WAAW,eAA6C"}

package/dist/nestjs/request-context.middleware.d.ts

@@ -0,0 +1,27 @@
+import { NestMiddleware } from '@nestjs/common';
+import type { Request, Response, NextFunction } from 'express';
+import type { RequestContext } from '../lib/request-context';
+import { REQUEST_CONTEXT } from '../lib/request-context';
+interface RequestWithContext extends Request {
+    [REQUEST_CONTEXT]?: RequestContext;
+}
+export declare class RequestContextMiddleware implements NestMiddleware {
+    private readonly logger;
+    use(req: RequestWithContext, _res: Response, next: NextFunction): void;
+    private extractBearerToken;
+    private decodeJwtPayload;
+    private assertOrgClaimMatchesHeader;
+    private resolveActorId;
+    private resolveActAs;
+    private resolveRoles;
+    private resolveActorType;
+    private resolveSubjectAndClass;
+    private subjectKindForTokenClass;
+    private resolveActorChain;
+    private extractProjectIdFromPath;
+    private parseApprovalMode;
+    private asNonEmptyString;
+    private extractRealmFromIssuer;
+}
+export {};
+//# sourceMappingURL=request-context.middleware.d.ts.map

package/dist/nestjs/request-context.middleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-context.middleware.d.ts","sourceRoot":"","sources":["../../src/nestjs/request-context.middleware.ts"],"names":[],"mappings":"AAAA,OAAO,EAKL,cAAc,EACf,MAAM,gBAAgB,CAAC;AAExB,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC/D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAYzD,UAAU,kBAAmB,SAAQ,OAAO;IAC1C,CAAC,eAAe,CAAC,CAAC,EAAE,cAAc,CAAC;CACpC;AAED,qBACa,wBAAyB,YAAW,cAAc;IAC7D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA6C;IAEpE,GAAG,CAAC,GAAG,EAAE,kBAAkB,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,GAAG,IAAI;IAiHtE,OAAO,CAAC,kBAAkB;IAc1B,OAAO,CAAC,gBAAgB;IAgCxB,OAAO,CAAC,2BAA2B;IAwBnC,OAAO,CAAC,cAAc;IActB,OAAO,CAAC,YAAY;IAQpB,OAAO,CAAC,YAAY;IAcpB,OAAO,CAAC,gBAAgB;IAkCxB,OAAO,CAAC,sBAAsB;IA0B9B,OAAO,CAAC,wBAAwB;IAwBhC,OAAO,CAAC,iBAAiB;IAYzB,OAAO,CAAC,wBAAwB;IAKhC,OAAO,CAAC,iBAAiB;IAazB,OAAO,CAAC,gBAAgB;IAMxB,OAAO,CAAC,sBAAsB;CAK/B"}

package/dist/nestjs/request-context.middleware.js

@@ -0,0 +1,252 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var RequestContextMiddleware_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RequestContextMiddleware = void 0;
+const common_1 = require("@nestjs/common");
+const node_crypto_1 = require("node:crypto");
+const request_context_1 = require("../lib/request-context");
+const subject_contracts_1 = require("@xemahq/subject-contracts");
+const approval_mode_1 = require("../lib/approval-mode");
+const org_claim_1 = require("./auth/org-claim");
+const org_role_1 = require("./auth/org-role");
+let RequestContextMiddleware = RequestContextMiddleware_1 = class RequestContextMiddleware {
+    logger = new common_1.Logger(RequestContextMiddleware_1.name);
+    use(req, _res, next) {
+        const canonicalOrgHeader = req.header(org_claim_1.OrgHeaderName.Canonical);
+        const legacyOrgHeader = req.header(org_claim_1.OrgHeaderName.Legacy);
+        const orgId = canonicalOrgHeader ?? legacyOrgHeader;
+        const orgHeaderName = canonicalOrgHeader
+            ? org_claim_1.OrgHeaderName.Canonical
+            : org_claim_1.OrgHeaderName.Legacy;
+        const projectId = req.header('X-Project-Id') ??
+            this.extractProjectIdFromPath(req.originalUrl);
+        const pipelineRunId = req.header('X-Pipeline-Run-Id') ?? undefined;
+        const pipelinePhaseKey = req.header('X-Pipeline-Phase-Key') ?? undefined;
+        const approvalModeOverride = this.parseApprovalMode(req.header('X-Approval-Mode-Override'));
+        const token = this.extractBearerToken(req);
+        const claims = this.decodeJwtPayload(token);
+        const actorId = this.resolveActorId(claims);
+        const actAs = this.resolveActAs(claims);
+        const roles = this.resolveRoles(claims);
+        const actorType = this.resolveActorType(roles, claims, actAs);
+        const { kind: subjectKind, tokenClass } = this.resolveSubjectAndClass(roles, claims, actAs);
+        const actorChain = this.resolveActorChain(claims);
+        const orgRoles = (0, org_role_1.resolveOrgRoles)(claims);
+        const correlationId = req.header('X-Correlation-Id') ?? (0, node_crypto_1.randomUUID)();
+        const causationId = req.header('X-Causation-Id') ?? undefined;
+        if (!orgId && actorType !== 'service') {
+            throw new common_1.BadRequestException(`Missing required header: ${org_claim_1.OrgHeaderName.Canonical}`);
+        }
+        const resolvedOrgId = orgId ?? '';
+        this.assertOrgClaimMatchesHeader(claims, resolvedOrgId, orgHeaderName);
+        if (actAs) {
+            this.logger.log({
+                message: 'DELEGATED_REQUEST',
+                actor: actorId,
+                actAs,
+                orgId,
+                projectId,
+                route: `${req.method} ${req.originalUrl}`,
+                correlationId,
+            });
+        }
+        const subject = {
+            kind: subjectKind,
+            id: actorId,
+            roles,
+            ...(actorChain.length > 0 ? { actingFor: actorChain[0] } : {}),
+        };
+        req[request_context_1.REQUEST_CONTEXT] = {
+            orgId: resolvedOrgId,
+            projectId,
+            subject,
+            tokenClass,
+            actorChain,
+            actorId,
+            actorType,
+            correlationId,
+            causationId,
+            authorization: `Bearer ${token}`,
+            bearerToken: token,
+            pipelineRunId,
+            pipelinePhaseKey,
+            approvalModeOverride,
+            roles,
+            realmId: this.extractRealmFromIssuer(claims.iss),
+            ...(Object.keys(orgRoles).length > 0 ? { orgRoles } : {}),
+            ...(orgRoles[resolvedOrgId] ? { orgRole: orgRoles[resolvedOrgId] } : {}),
+            ...(actAs !== undefined ? { actAs } : {}),
+        };
+        next();
+    }
+    extractBearerToken(req) {
+        const authorization = req.header('Authorization');
+        if (!authorization) {
+            throw new common_1.BadRequestException('Missing required header: Authorization');
+        }
+        const [scheme, token] = authorization.split(' ');
+        if (scheme !== 'Bearer' || !token) {
+            throw new common_1.BadRequestException('Invalid Authorization header format. Expected: Bearer <token>');
+        }
+        return token;
+    }
+    decodeJwtPayload(token) {
+        const parts = token.split('.');
+        if (parts.length !== 3 || !parts[1]) {
+            throw new common_1.BadRequestException(`Invalid JWT token format: expected 3 dot-separated base64url parts, got ${parts.length} ` +
+                `(token length=${token.length}, prefix='${token.slice(0, 8)}…')`);
+        }
+        try {
+            const payloadJson = Buffer.from(parts[1], 'base64url').toString('utf8');
+            const payload = JSON.parse(payloadJson);
+            if (!payload || typeof payload !== 'object') {
+                throw new Error('Invalid token payload');
+            }
+            return payload;
+        }
+        catch {
+            throw new common_1.BadRequestException('Invalid JWT token payload');
+        }
+    }
+    assertOrgClaimMatchesHeader(claims, headerValue, headerName) {
+        const resolved = (0, org_claim_1.resolveOrgClaim)(claims);
+        if (!resolved) {
+            return;
+        }
+        if (resolved.value.toLowerCase() !== headerValue.toLowerCase()) {
+            this.logger.warn({
+                message: 'tenant-claim-mismatch',
+                claim: resolved.key,
+                claimValue: resolved.value,
+                header: headerName,
+                headerValue,
+            });
+            throw new common_1.ForbiddenException(`${headerName} (${headerValue || '<empty>'}) does not match ` +
+                `the ${resolved.key} claim on the access token.`);
+        }
+    }
+    resolveActorId(claims) {
+        const actorId = this.asNonEmptyString(claims.sub);
+        if (!actorId) {
+            throw new common_1.BadRequestException('JWT token missing required "sub" claim');
+        }
+        return actorId;
+    }
+    resolveActAs(claims) {
+        const act = claims['act'];
+        if (!act || typeof act !== 'object' || Array.isArray(act)) {
+            return undefined;
+        }
+        return this.asNonEmptyString(act['sub']);
+    }
+    resolveRoles(claims) {
+        const realmAccess = claims.realm_access;
+        if (realmAccess &&
+            typeof realmAccess === 'object' &&
+            Array.isArray(realmAccess.roles)) {
+            return realmAccess.roles.filter((role) => typeof role === 'string');
+        }
+        return [];
+    }
+    resolveActorType(roles, claims, actAs) {
+        const explicitType = this.asNonEmptyString(claims.actor_type);
+        if (explicitType && ['human', 'agent', 'service'].includes(explicitType)) {
+            return explicitType;
+        }
+        if (actAs) {
+            return 'human';
+        }
+        if (roles.includes('micro-service') || roles.includes('service-account')) {
+            return 'service';
+        }
+        if (roles.includes('agent')) {
+            return 'agent';
+        }
+        return 'human';
+    }
+    resolveSubjectAndClass(roles, claims, actAs) {
+        const explicit = this.asNonEmptyString(claims.token_class);
+        if (explicit) {
+            const matched = Object.values(subject_contracts_1.TokenClass).includes(explicit)
+                ? explicit
+                : undefined;
+            if (matched) {
+                return { kind: this.subjectKindForTokenClass(matched), tokenClass: matched };
+            }
+        }
+        if (actAs) {
+            return { kind: subject_contracts_1.SubjectKind.User, tokenClass: subject_contracts_1.TokenClass.UserJwt };
+        }
+        if (roles.includes('micro-service') || roles.includes('service-account')) {
+            return { kind: subject_contracts_1.SubjectKind.Service, tokenClass: subject_contracts_1.TokenClass.ServiceJwt };
+        }
+        if (roles.includes('agent')) {
+            return { kind: subject_contracts_1.SubjectKind.Agent, tokenClass: subject_contracts_1.TokenClass.AgentRuntimeToken };
+        }
+        return { kind: subject_contracts_1.SubjectKind.User, tokenClass: subject_contracts_1.TokenClass.UserJwt };
+    }
+    subjectKindForTokenClass(tokenClass) {
+        switch (tokenClass) {
+            case subject_contracts_1.TokenClass.ServiceJwt:
+                return subject_contracts_1.SubjectKind.Service;
+            case subject_contracts_1.TokenClass.AgentRuntimeToken:
+                return subject_contracts_1.SubjectKind.Agent;
+            case subject_contracts_1.TokenClass.WorkflowRuntimeToken:
+                return subject_contracts_1.SubjectKind.Service;
+            case subject_contracts_1.TokenClass.ExternalSessionToken:
+                return subject_contracts_1.SubjectKind.ExternalSubject;
+            case subject_contracts_1.TokenClass.RunnerAttestationToken:
+                return subject_contracts_1.SubjectKind.Runner;
+            case subject_contracts_1.TokenClass.UserJwt:
+                return subject_contracts_1.SubjectKind.User;
+        }
+    }
+    resolveActorChain(claims) {
+        const chain = [];
+        let node = claims['act'];
+        while (node && typeof node === 'object' && !Array.isArray(node)) {
+            const sub = this.asNonEmptyString(node['sub']);
+            if (!sub)
+                break;
+            chain.push({ kind: subject_contracts_1.SubjectKind.Service, id: sub });
+            node = node['act'];
+        }
+        return chain;
+    }
+    extractProjectIdFromPath(path) {
+        const match = path.match(/^\/projects\/([^/]+)/);
+        return match?.[1];
+    }
+    parseApprovalMode(value) {
+        if (!value)
+            return undefined;
+        const upper = value.toUpperCase();
+        if (approval_mode_1.PIPELINE_APPROVAL_MODE_SET.has(upper)) {
+            return upper;
+        }
+        throw new common_1.BadRequestException(`Invalid X-Approval-Mode-Override value: "${value}". Must be "AUTO" or "HUMAN_REQUIRED"`);
+    }
+    asNonEmptyString(value) {
+        if (typeof value !== 'string')
+            return undefined;
+        const trimmed = value.trim();
+        return trimmed.length > 0 ? trimmed : undefined;
+    }
+    extractRealmFromIssuer(issuer) {
+        if (!issuer || typeof issuer !== 'string')
+            return undefined;
+        const match = issuer.match(/\/realms\/([^/]+)$/);
+        return match?.[1];
+    }
+};
+exports.RequestContextMiddleware = RequestContextMiddleware;
+exports.RequestContextMiddleware = RequestContextMiddleware = RequestContextMiddleware_1 = __decorate([
+    (0, common_1.Injectable)()
+], RequestContextMiddleware);
+//# sourceMappingURL=request-context.middleware.js.map

package/dist/nestjs/request-context.middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-context.middleware.js","sourceRoot":"","sources":["../../src/nestjs/request-context.middleware.ts"],"names":[],"mappings":";;;;;;;;;;AAAA,2CAMwB;AACxB,6CAAyC;AAGzC,4DAAyD;AACzD,iEAKmC;AAEnC,wDAAkE;AAClE,gDAAkE;AAClE,8CAAkD;AAO3C,IAAM,wBAAwB,gCAA9B,MAAM,wBAAwB;IAClB,MAAM,GAAG,IAAI,eAAM,CAAC,0BAAwB,CAAC,IAAI,CAAC,CAAC;IAEpE,GAAG,CAAC,GAAuB,EAAE,IAAc,EAAE,IAAkB;QAI7D,MAAM,kBAAkB,GAAG,GAAG,CAAC,MAAM,CAAC,yBAAa,CAAC,SAAS,CAAC,CAAC;QAC/D,MAAM,eAAe,GAAG,GAAG,CAAC,MAAM,CAAC,yBAAa,CAAC,MAAM,CAAC,CAAC;QACzD,MAAM,KAAK,GAAG,kBAAkB,IAAI,eAAe,CAAC;QACpD,MAAM,aAAa,GAAG,kBAAkB;YACtC,CAAC,CAAC,yBAAa,CAAC,SAAS;YACzB,CAAC,CAAC,yBAAa,CAAC,MAAM,CAAC;QACzB,MAAM,SAAS,GACb,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC;YAC1B,IAAI,CAAC,wBAAwB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACjD,MAAM,aAAa,GAAG,GAAG,CAAC,MAAM,CAAC,mBAAmB,CAAC,IAAI,SAAS,CAAC;QACnE,MAAM,gBAAgB,GAAG,GAAG,CAAC,MAAM,CAAC,sBAAsB,CAAC,IAAI,SAAS,CAAC;QACzE,MAAM,oBAAoB,GAAG,IAAI,CAAC,iBAAiB,CACjD,GAAG,CAAC,MAAM,CAAC,0BAA0B,CAAC,CACvC,CAAC;QAEF,MAAM,KAAK,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QACxC,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QACxC,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QAC9D,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,sBAAsB,CACnE,KAAK,EACL,MAAM,EACN,KAAK,CACN,CAAC;QACF,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAClD,MAAM,QAAQ,GAAG,IAAA,0BAAe,EAAC,MAAM,CAAC,CAAC;QACzC,MAAM,aAAa,GAAG,GAAG,CAAC,MAAM,CAAC,kBAAkB,CAAC,IAAI,IAAA,wBAAU,GAAE,CAAC;QACrE,MAAM,WAAW,GAAG,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,IAAI,SAAS,CAAC;QAa9D,IAAI,CAAC,KAAK,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YACtC,MAAM,IAAI,4BAAmB,CAC3B,4BAA4B,yBAAa,CAAC,SAAS,EAAE,CACtD,CAAC;QACJ,CAAC;QACD,MAAM,aAAa,GAAG,KAAK,IAAI,EAAE,CAAC;QAWlC,IAAI,CAAC,2BAA2B,CAAC,MAAM,EAAE,aAAa,EAAE,aAAa,CAAC,CAAC;QAOvE,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC;gBACd,OAAO,EAAE,mBAAmB;gBAC5B,KAAK,EAAE,OAAO;gBACd,KAAK;gBACL,KAAK;gBACL,SAAS;gBACT,KAAK,EAAE,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,WAAW,EAAE;gBACzC,aAAa;aACd,CAAC,CAAC;QACL,CAAC;QAED,MAAM,OAAO,GAAe;YAC1B,IAAI,EAAE,WAAW;YACjB,EAAE,EAAE,OAAO;YACX,KAAK;YACL,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/D,CAAC;QAEF,GAAG,CAAC,iCAAe,CAAC,GAAG;YACrB,KAAK,EAAE,aAAa;YACpB,SAAS;YACT,OAAO;YACP,UAAU;YACV,UAAU;YACV,OAAO;YACP,SAAS;YACT,aAAa;YACb,WAAW;YACX,aAAa,EAAE,UAAU,KAAK,EAAE;YAChC,WAAW,EAAE,KAAK;YAClB,aAAa;YACb,gBAAgB;YAChB,oBAAoB;YACpB,KAAK;YACL,OAAO,EAAE,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,GAAyB,CAAC;YACtE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzD,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxE,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1C,CAAC;QAEF,IAAI,EAAE,CAAC;IACT,CAAC;IAEO,kBAAkB,CAAC,GAAY;QACrC,MAAM,aAAa,GAAG,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QAClD,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,MAAM,IAAI,4BAAmB,CAAC,wCAAwC,CAAC,CAAC;QAC1E,CAAC;QACD,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACjD,IAAI,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAC;YAClC,MAAM,IAAI,4BAAmB,CAC3B,+DAA+D,CAChE,CAAC;QACJ,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,gBAAgB,CAAC,KAAa;QACpC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YAKpC,MAAM,IAAI,4BAAmB,CAC3B,2EAA2E,KAAK,CAAC,MAAM,GAAG;gBACxF,iBAAiB,KAAK,CAAC,MAAM,aAAa,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CACnE,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACxE,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YACxC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;gBAC5C,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;YAC3C,CAAC;YACD,OAAO,OAAkC,CAAC;QAC5C,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,4BAAmB,CAAC,2BAA2B,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IAUO,2BAA2B,CACjC,MAA+B,EAC/B,WAAmB,EACnB,UAAyB;QAEzB,MAAM,QAAQ,GAAG,IAAA,2BAAe,EAAC,MAAM,CAAC,CAAC;QACzC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO;QACT,CAAC;QACD,IAAI,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,WAAW,CAAC,WAAW,EAAE,EAAE,CAAC;YAC/D,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;gBACf,OAAO,EAAE,uBAAuB;gBAChC,KAAK,EAAE,QAAQ,CAAC,GAAG;gBACnB,UAAU,EAAE,QAAQ,CAAC,KAAK;gBAC1B,MAAM,EAAE,UAAU;gBAClB,WAAW;aACZ,CAAC,CAAC;YACH,MAAM,IAAI,2BAAkB,CAC1B,GAAG,UAAU,KAAK,WAAW,IAAI,SAAS,mBAAmB;gBAC3D,OAAO,QAAQ,CAAC,GAAG,6BAA6B,CACnD,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,cAAc,CAAC,MAA+B;QACpD,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAClD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,4BAAmB,CAAC,wCAAwC,CAAC,CAAC;QAC1E,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAQO,YAAY,CAAC,MAA+B;QAClD,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC1B,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1D,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,IAAI,CAAC,gBAAgB,CAAE,GAA+B,CAAC,KAAK,CAAC,CAAC,CAAC;IACxE,CAAC;IAEO,YAAY,CAAC,MAA+B;QAClD,MAAM,WAAW,GAAG,MAAM,CAAC,YAAY,CAAC;QACxC,IACE,WAAW;YACX,OAAO,WAAW,KAAK,QAAQ;YAC/B,KAAK,CAAC,OAAO,CAAE,WAAmC,CAAC,KAAK,CAAC,EACzD,CAAC;YACD,OAAQ,WAAoC,CAAC,KAAK,CAAC,MAAM,CACvD,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CACnD,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;IAEO,gBAAgB,CACtB,KAAe,EACf,MAA+B,EAC/B,KAAyB;QAEzB,MAAM,YAAY,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC9D,IAAI,YAAY,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;YACzE,OAAO,YAA2C,CAAC;QACrD,CAAC;QAID,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,IAAI,KAAK,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;YACzE,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5B,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAYO,sBAAsB,CAC5B,KAAe,EACf,MAA+B,EAC/B,KAAyB;QAEzB,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAC3D,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,OAAO,GAAI,MAAM,CAAC,MAAM,CAAC,8BAAU,CAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBACxE,CAAC,CAAE,QAAuB;gBAC1B,CAAC,CAAC,SAAS,CAAC;YACd,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,wBAAwB,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;YAC/E,CAAC;QACH,CAAC;QACD,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,EAAE,IAAI,EAAE,+BAAW,CAAC,IAAI,EAAE,UAAU,EAAE,8BAAU,CAAC,OAAO,EAAE,CAAC;QACpE,CAAC;QACD,IAAI,KAAK,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;YACzE,OAAO,EAAE,IAAI,EAAE,+BAAW,CAAC,OAAO,EAAE,UAAU,EAAE,8BAAU,CAAC,UAAU,EAAE,CAAC;QAC1E,CAAC;QACD,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5B,OAAO,EAAE,IAAI,EAAE,+BAAW,CAAC,KAAK,EAAE,UAAU,EAAE,8BAAU,CAAC,iBAAiB,EAAE,CAAC;QAC/E,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,+BAAW,CAAC,IAAI,EAAE,UAAU,EAAE,8BAAU,CAAC,OAAO,EAAE,CAAC;IACpE,CAAC;IAEO,wBAAwB,CAAC,UAAsB;QACrD,QAAQ,UAAU,EAAE,CAAC;YACnB,KAAK,8BAAU,CAAC,UAAU;gBACxB,OAAO,+BAAW,CAAC,OAAO,CAAC;YAC7B,KAAK,8BAAU,CAAC,iBAAiB;gBAC/B,OAAO,+BAAW,CAAC,KAAK,CAAC;YAC3B,KAAK,8BAAU,CAAC,oBAAoB;gBAGlC,OAAO,+BAAW,CAAC,OAAO,CAAC;YAC7B,KAAK,8BAAU,CAAC,oBAAoB;gBAClC,OAAO,+BAAW,CAAC,eAAe,CAAC;YACrC,KAAK,8BAAU,CAAC,sBAAsB;gBACpC,OAAO,+BAAW,CAAC,MAAM,CAAC;YAC5B,KAAK,8BAAU,CAAC,OAAO;gBACrB,OAAO,+BAAW,CAAC,IAAI,CAAC;QAC5B,CAAC;IACH,CAAC;IAOO,iBAAiB,CAAC,MAA+B;QACvD,MAAM,KAAK,GAAmB,EAAE,CAAC;QACjC,IAAI,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QACzB,OAAO,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAChE,MAAM,GAAG,GAAG,IAAI,CAAC,gBAAgB,CAAE,IAAgC,CAAC,KAAK,CAAC,CAAC,CAAC;YAC5E,IAAI,CAAC,GAAG;gBAAE,MAAM;YAChB,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,+BAAW,CAAC,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;YACnD,IAAI,GAAI,IAAgC,CAAC,KAAK,CAAC,CAAC;QAClD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,wBAAwB,CAAC,IAAY;QAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;QACjD,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;IAEO,iBAAiB,CACvB,KAAyB;QAEzB,IAAI,CAAC,KAAK;YAAE,OAAO,SAAS,CAAC;QAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;QAClC,IAAI,0CAA0B,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1C,OAAO,KAA6B,CAAC;QACvC,CAAC;QACD,MAAM,IAAI,4BAAmB,CAC3B,4CAA4C,KAAK,uCAAuC,CACzF,CAAC;IACJ,CAAC;IAEO,gBAAgB,CAAC,KAAc;QACrC,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QAChD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QAC7B,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAClD,CAAC;IAEO,sBAAsB,CAAC,MAA0B;QACvD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QAC5D,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACjD,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;CACF,CAAA;AA3VY,4DAAwB;mCAAxB,wBAAwB;IADpC,IAAA,mBAAU,GAAE;GACA,wBAAwB,CA2VpC"}

package/dist/nestjs/require-pipeline-run-id.d.ts

@@ -0,0 +1,3 @@
+import type { RequestContext } from '../lib/request-context';
+export declare function requirePipelineRunId(context: RequestContext): string;
+//# sourceMappingURL=require-pipeline-run-id.d.ts.map

package/dist/nestjs/require-pipeline-run-id.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"require-pipeline-run-id.d.ts","sourceRoot":"","sources":["../../src/nestjs/require-pipeline-run-id.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAQ7D,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,cAAc,GAAG,MAAM,CAOpE"}

package/dist/nestjs/require-pipeline-run-id.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.requirePipelineRunId = requirePipelineRunId;
+const common_1 = require("@nestjs/common");
+function requirePipelineRunId(context) {
+    if (!context.pipelineRunId) {
+        throw new common_1.BadRequestException('Missing required pipeline run context. Ensure the pipeline run is created before seeding work items.');
+    }
+    return context.pipelineRunId;
+}
+//# sourceMappingURL=require-pipeline-run-id.js.map

package/dist/nestjs/require-pipeline-run-id.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"require-pipeline-run-id.js","sourceRoot":"","sources":["../../src/nestjs/require-pipeline-run-id.ts"],"names":[],"mappings":";;AASA,oDAOC;AAhBD,2CAAqD;AASrD,SAAgB,oBAAoB,CAAC,OAAuB;IAC1D,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;QAC3B,MAAM,IAAI,4BAAmB,CAC3B,sGAAsG,CACvG,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC,aAAa,CAAC;AAC/B,CAAC"}

package/dist/nestjs/require-project-id.d.ts

@@ -0,0 +1,3 @@
+import type { RequestContext } from '../lib/request-context';
+export declare function requireProjectId(context: RequestContext): string;
+//# sourceMappingURL=require-project-id.d.ts.map

package/dist/nestjs/require-project-id.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"require-project-id.d.ts","sourceRoot":"","sources":["../../src/nestjs/require-project-id.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAQ7D,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,cAAc,GAAG,MAAM,CAOhE"}

package/dist/nestjs/require-project-id.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.requireProjectId = requireProjectId;
+const common_1 = require("@nestjs/common");
+function requireProjectId(context) {
+    if (!context.projectId) {
+        throw new common_1.BadRequestException('Missing required project context. Provide X-Project-Id header or include projectId in the URL path.');
+    }
+    return context.projectId;
+}
+//# sourceMappingURL=require-project-id.js.map

package/dist/nestjs/require-project-id.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"require-project-id.js","sourceRoot":"","sources":["../../src/nestjs/require-project-id.ts"],"names":[],"mappings":";;AASA,4CAOC;AAhBD,2CAAqD;AASrD,SAAgB,gBAAgB,CAAC,OAAuB;IACtD,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;QACvB,MAAM,IAAI,4BAAmB,CAC3B,qGAAqG,CACtG,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC,SAAS,CAAC;AAC3B,CAAC"}

package/dist/nestjs/response-envelope.interceptor.d.ts

@@ -0,0 +1,6 @@
+import { CallHandler, ExecutionContext, NestInterceptor } from '@nestjs/common';
+import { Observable } from 'rxjs';
+export declare class ResponseEnvelopeInterceptor implements NestInterceptor {
+    intercept(context: ExecutionContext, next: CallHandler): Observable<unknown>;
+}
+//# sourceMappingURL=response-envelope.interceptor.d.ts.map

package/dist/nestjs/response-envelope.interceptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"response-envelope.interceptor.d.ts","sourceRoot":"","sources":["../../src/nestjs/response-envelope.interceptor.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,WAAW,EACX,gBAAgB,EAGhB,eAAe,EAChB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,UAAU,EAAO,MAAM,MAAM,CAAC;AAIvC,qBACa,2BAA4B,YAAW,eAAe;IACjE,SAAS,CAAC,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,WAAW,GAAG,UAAU,CAAC,OAAO,CAAC;CA6C7E"}

package/dist/nestjs/response-envelope.interceptor.js

@@ -0,0 +1,48 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ResponseEnvelopeInterceptor = void 0;
+const common_1 = require("@nestjs/common");
+const rxjs_1 = require("rxjs");
+const decorator_metadata_1 = require("./decorator-metadata");
+const raw_response_decorator_1 = require("./raw-response.decorator");
+let ResponseEnvelopeInterceptor = class ResponseEnvelopeInterceptor {
+    intercept(context, next) {
+        const isRaw = (0, decorator_metadata_1.readDecoratorOverride)(raw_response_decorator_1.RAW_RESPONSE_KEY, [
+            context.getHandler(),
+            context.getClass(),
+        ]);
+        if (isRaw) {
+            return next.handle();
+        }
+        const routeLabel = `${context.getClass().name}.${context.getHandler().name}`;
+        return next.handle().pipe((0, rxjs_1.map)((value) => {
+            if (value && typeof value === 'object') {
+                const obj = value;
+                if ('data' in obj || 'error' in obj) {
+                    return value;
+                }
+                if (Array.isArray(obj['items']) && 'pagination' in obj) {
+                    const { items, ...rest } = obj;
+                    return { data: items, ...rest };
+                }
+                if (Array.isArray(obj['items'])) {
+                    throw new common_1.InternalServerErrorException(`Response shape violates API_STANDARDS.md §3.2 at ${routeLabel}: ` +
+                        `controller returned { items: [...] } without pagination. ` +
+                        `Non-paginated lists must return the array directly so the envelope is { data: [...] }.`);
+                }
+            }
+            return { data: value };
+        }));
+    }
+};
+exports.ResponseEnvelopeInterceptor = ResponseEnvelopeInterceptor;
+exports.ResponseEnvelopeInterceptor = ResponseEnvelopeInterceptor = __decorate([
+    (0, common_1.Injectable)()
+], ResponseEnvelopeInterceptor);
+//# sourceMappingURL=response-envelope.interceptor.js.map

package/dist/nestjs/response-envelope.interceptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"response-envelope.interceptor.js","sourceRoot":"","sources":["../../src/nestjs/response-envelope.interceptor.ts"],"names":[],"mappings":";;;;;;;;;AAAA,2CAMwB;AACxB,+BAAuC;AACvC,6DAA6D;AAC7D,qEAA4D;AAGrD,IAAM,2BAA2B,GAAjC,MAAM,2BAA2B;IACtC,SAAS,CAAC,OAAyB,EAAE,IAAiB;QAEpD,MAAM,KAAK,GAAG,IAAA,0CAAqB,EAAU,yCAAgB,EAAE;YAC7D,OAAO,CAAC,UAAU,EAAE;YACpB,OAAO,CAAC,QAAQ,EAAE;SACnB,CAAC,CAAC;QACH,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;QACvB,CAAC;QAED,MAAM,UAAU,GAAG,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,IAAI,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,CAAC;QAE7E,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CACvB,IAAA,UAAG,EAAC,CAAC,KAAc,EAAE,EAAE;YACrB,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACvC,MAAM,GAAG,GAAG,KAAgC,CAAC;gBAG7C,IAAI,MAAM,IAAI,GAAG,IAAI,OAAO,IAAI,GAAG,EAAE,CAAC;oBACpC,OAAO,KAAK,CAAC;gBACf,CAAC;gBAID,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,YAAY,IAAI,GAAG,EAAE,CAAC;oBACvD,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,GAAG,CAAC;oBAC/B,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,CAAC;gBAClC,CAAC;gBAID,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;oBAChC,MAAM,IAAI,qCAA4B,CACpC,oDAAoD,UAAU,IAAI;wBAChE,2DAA2D;wBAC3D,wFAAwF,CAC3F,CAAC;gBACJ,CAAC;YACH,CAAC;YAGD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;QACzB,CAAC,CAAC,CACH,CAAC;IACJ,CAAC;CACF,CAAA;AA9CY,kEAA2B;sCAA3B,2BAA2B;IADvC,IAAA,mBAAU,GAAE;GACA,2BAA2B,CA8CvC"}

package/dist/nestjs/roles.decorator.d.ts

@@ -0,0 +1,3 @@
+export declare const ROLES_KEY = "platform_required_roles";
+export declare const Roles: (...roles: string[]) => MethodDecorator & ClassDecorator;
+//# sourceMappingURL=roles.decorator.d.ts.map

package/dist/nestjs/roles.decorator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"roles.decorator.d.ts","sourceRoot":"","sources":["../../src/nestjs/roles.decorator.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,SAAS,4BAA4B,CAAC;AAmBnD,eAAO,MAAM,KAAK,GAAI,GAAG,OAAO,MAAM,EAAE,KAAG,eAAe,GAAG,cAC9B,CAAC"}

package/dist/nestjs/roles.decorator.js

@@ -0,0 +1,8 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Roles = exports.ROLES_KEY = void 0;
+const common_1 = require("@nestjs/common");
+exports.ROLES_KEY = 'platform_required_roles';
+const Roles = (...roles) => (0, common_1.SetMetadata)(exports.ROLES_KEY, roles);
+exports.Roles = Roles;
+//# sourceMappingURL=roles.decorator.js.map

package/dist/nestjs/roles.decorator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"roles.decorator.js","sourceRoot":"","sources":["../../src/nestjs/roles.decorator.ts"],"names":[],"mappings":";;;AAAA,2CAA6C;AAKhC,QAAA,SAAS,GAAG,yBAAyB,CAAC;AAmB5C,MAAM,KAAK,GAAG,CAAC,GAAG,KAAe,EAAoC,EAAE,CAC5E,IAAA,oBAAW,EAAC,iBAAS,EAAE,KAAK,CAAC,CAAC;AADnB,QAAA,KAAK,SACc"}

package/dist/nestjs/roles.guard.d.ts

@@ -0,0 +1,6 @@
+import { CanActivate, ExecutionContext } from '@nestjs/common';
+export declare class RolesGuard implements CanActivate {
+    private readonly logger;
+    canActivate(context: ExecutionContext): boolean;
+}
+//# sourceMappingURL=roles.guard.d.ts.map

package/dist/nestjs/roles.guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"roles.guard.d.ts","sourceRoot":"","sources":["../../src/nestjs/roles.guard.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,WAAW,EACX,gBAAgB,EAIjB,MAAM,gBAAgB,CAAC;AA6BxB,qBACa,UAAW,YAAW,WAAW;IAC5C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA+B;IAEtD,WAAW,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO;CAoChD"}

package/dist/nestjs/roles.guard.js

@@ -0,0 +1,41 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var RolesGuard_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RolesGuard = void 0;
+const common_1 = require("@nestjs/common");
+const decorator_metadata_1 = require("./decorator-metadata");
+const roles_decorator_1 = require("./roles.decorator");
+const request_context_1 = require("../lib/request-context");
+let RolesGuard = RolesGuard_1 = class RolesGuard {
+    logger = new common_1.Logger(RolesGuard_1.name);
+    canActivate(context) {
+        const requiredRoles = (0, decorator_metadata_1.readDecoratorOverride)(roles_decorator_1.ROLES_KEY, [context.getHandler(), context.getClass()]);
+        if (!requiredRoles || requiredRoles.length === 0) {
+            return true;
+        }
+        const request = context.switchToHttp().getRequest();
+        const ctx = request[request_context_1.REQUEST_CONTEXT];
+        if (!ctx) {
+            this.logger.error('RequestContext missing — RolesGuard requires RequestContextMiddleware');
+            throw new common_1.ForbiddenException('Access denied: missing request context');
+        }
+        const hasRole = requiredRoles.some((role) => ctx.roles.includes(role));
+        if (!hasRole) {
+            this.logger.warn(`Access denied: actor ${ctx.actorId} roles=[${ctx.roles.join(',')}] ` +
+                `missing required=[${requiredRoles.join(',')}]`);
+            throw new common_1.ForbiddenException(`Access denied: requires one of [${requiredRoles.join(', ')}]`);
+        }
+        return true;
+    }
+};
+exports.RolesGuard = RolesGuard;
+exports.RolesGuard = RolesGuard = RolesGuard_1 = __decorate([
+    (0, common_1.Injectable)()
+], RolesGuard);
+//# sourceMappingURL=roles.guard.js.map

package/dist/nestjs/roles.guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"roles.guard.js","sourceRoot":"","sources":["../../src/nestjs/roles.guard.ts"],"names":[],"mappings":";;;;;;;;;;AAAA,2CAMwB;AAExB,6DAA6D;AAC7D,uDAA8C;AAC9C,4DAAyD;AA0BlD,IAAM,UAAU,kBAAhB,MAAM,UAAU;IACJ,MAAM,GAAG,IAAI,eAAM,CAAC,YAAU,CAAC,IAAI,CAAC,CAAC;IAEtD,WAAW,CAAC,OAAyB;QACnC,MAAM,aAAa,GAAG,IAAA,0CAAqB,EACzC,2BAAS,EACT,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAC3C,CAAC;QAGF,IAAI,CAAC,aAAa,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAAW,CAAC;QAC7D,MAAM,GAAG,GAAI,OAA8C,CACzD,iCAAe,CACc,CAAC;QAEhC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,uEAAuE,CACxE,CAAC;YACF,MAAM,IAAI,2BAAkB,CAAC,wCAAwC,CAAC,CAAC;QACzE,CAAC;QAED,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QACvE,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,wBAAwB,GAAG,CAAC,OAAO,WAAW,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI;gBACnE,qBAAqB,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAClD,CAAC;YACF,MAAM,IAAI,2BAAkB,CAC1B,mCAAmC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC/D,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;CACF,CAAA;AAvCY,gCAAU;qBAAV,UAAU;IADtB,IAAA,mBAAU,GAAE;GACA,UAAU,CAuCtB"}