@xemahq/platform-common 0.23.0 → 0.25.0

package/dist/index.d.ts

@@ -13,6 +13,7 @@ export * from './lib/errors/pipeline-errors';
 export * from './lib/escape-for-prompt';
 export * from './lib/to-json-column-value';
 export * from './lib/enums/index';
+export * from './lib/growth/index';
 export * from './lib/file-share-token';
 export * from './lib/connector-webhooks/index';
 export * from './lib/json-extraction';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAQA,cAAc,yBAAyB,CAAC;AACxC,cAAc,qBAAqB,CAAC;AAMpC,cAAc,0BAA0B,CAAC;AACzC,cAAc,2BAA2B,CAAC;AAI1C,OAAO,KAAK,SAAS,MAAM,uBAAuB,CAAC;AACnD,cAAc,mCAAmC,CAAC;AAClD,cAAc,uCAAuC,CAAC;AACtD,cAAc,yBAAyB,CAAC;AACxC,cAAc,kBAAkB,CAAC;AACjC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,mBAAmB,CAAC;AAClC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,yBAAyB,CAAC;AACxC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,mBAAmB,CAAC;AAClC,cAAc,wBAAwB,CAAC;AACvC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,uBAAuB,CAAC;AACtC,cAAc,wBAAwB,CAAC;AACvC,cAAc,wBAAwB,CAAC;AACvC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,qBAAqB,CAAC;AACpC,cAAc,qBAAqB,CAAC;AACpC,cAAc,oCAAoC,CAAC;AACnD,cAAc,yBAAyB,CAAC;AAGxC,cAAc,iCAAiC,CAAC;AAChD,cAAc,sBAAsB,CAAC;AACrC,cAAc,0BAA0B,CAAC;AACzC,cAAc,2BAA2B,CAAC;AAG1C,cAAc,oCAAoC,CAAC;AAGnD,cAAc,wBAAwB,CAAC;AAGvC,cAAc,sBAAsB,CAAC;AAGrC,cAAc,gBAAgB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAQA,cAAc,yBAAyB,CAAC;AACxC,cAAc,qBAAqB,CAAC;AAMpC,cAAc,0BAA0B,CAAC;AACzC,cAAc,2BAA2B,CAAC;AAI1C,OAAO,KAAK,SAAS,MAAM,uBAAuB,CAAC;AACnD,cAAc,mCAAmC,CAAC;AAClD,cAAc,uCAAuC,CAAC;AACtD,cAAc,yBAAyB,CAAC;AACxC,cAAc,kBAAkB,CAAC;AACjC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,mBAAmB,CAAC;AAClC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,yBAAyB,CAAC;AACxC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,mBAAmB,CAAC;AAGlC,cAAc,oBAAoB,CAAC;AACnC,cAAc,wBAAwB,CAAC;AACvC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,uBAAuB,CAAC;AACtC,cAAc,wBAAwB,CAAC;AACvC,cAAc,wBAAwB,CAAC;AACvC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,qBAAqB,CAAC;AACpC,cAAc,qBAAqB,CAAC;AACpC,cAAc,oCAAoC,CAAC;AACnD,cAAc,yBAAyB,CAAC;AAGxC,cAAc,iCAAiC,CAAC;AAChD,cAAc,sBAAsB,CAAC;AACrC,cAAc,0BAA0B,CAAC;AACzC,cAAc,2BAA2B,CAAC;AAG1C,cAAc,oCAAoC,CAAC;AAGnD,cAAc,wBAAwB,CAAC;AAGvC,cAAc,sBAAsB,CAAC;AAGrC,cAAc,gBAAgB,CAAC"}

package/dist/index.js

@@ -52,6 +52,7 @@ __exportStar(require("./lib/errors/pipeline-errors"), exports);
 __exportStar(require("./lib/escape-for-prompt"), exports);
 __exportStar(require("./lib/to-json-column-value"), exports);
 __exportStar(require("./lib/enums/index"), exports);
+__exportStar(require("./lib/growth/index"), exports);
 __exportStar(require("./lib/file-share-token"), exports);
 __exportStar(require("./lib/connector-webhooks/index"), exports);
 __exportStar(require("./lib/json-extraction"), exports);

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAQA,0DAAwC;AACxC,sDAAoC;AAMpC,2DAAyC;AACzC,4DAA0C;AAI1C,mEAAmD;AACnD,oEAAkD;AAClD,wEAAsD;AACtD,0DAAwC;AACxC,mDAAiC;AACjC,4DAA0C;AAC1C,oDAAkC;AAClC,+DAA6C;AAC7C,0DAAwC;AACxC,6DAA2C;AAC3C,oDAAkC;AAClC,yDAAuC;AACvC,iEAA+C;AAC/C,wDAAsC;AACtC,yDAAuC;AACvC,yDAAuC;AACvC,gEAA8C;AAC9C,sDAAoC;AACpC,uDAAqC;AACrC,wDAAsC;AACtC,4DAA0C;AAC1C,4DAA0C;AAC1C,wDAAsC;AACtC,4DAA0C;AAC1C,sDAAoC;AACpC,sDAAoC;AACpC,qEAAmD;AACnD,0DAAwC;AAGxC,kEAAgD;AAChD,uDAAqC;AACrC,2DAAyC;AACzC,4DAA0C;AAG1C,qEAAmD;AAGnD,yDAAuC;AAGvC,uDAAqC;AAGrC,iDAA+B"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAQA,0DAAwC;AACxC,sDAAoC;AAMpC,2DAAyC;AACzC,4DAA0C;AAI1C,mEAAmD;AACnD,oEAAkD;AAClD,wEAAsD;AACtD,0DAAwC;AACxC,mDAAiC;AACjC,4DAA0C;AAC1C,oDAAkC;AAClC,+DAA6C;AAC7C,0DAAwC;AACxC,6DAA2C;AAC3C,oDAAkC;AAGlC,qDAAmC;AACnC,yDAAuC;AACvC,iEAA+C;AAC/C,wDAAsC;AACtC,yDAAuC;AACvC,yDAAuC;AACvC,gEAA8C;AAC9C,sDAAoC;AACpC,uDAAqC;AACrC,wDAAsC;AACtC,4DAA0C;AAC1C,4DAA0C;AAC1C,wDAAsC;AACtC,4DAA0C;AAC1C,sDAAoC;AACpC,sDAAoC;AACpC,qEAAmD;AACnD,0DAAwC;AAGxC,kEAAgD;AAChD,uDAAqC;AACrC,2DAAyC;AACzC,4DAA0C;AAG1C,qEAAmD;AAGnD,yDAAuC;AAGvC,uDAAqC;AAGrC,iDAA+B"}

package/dist/lib/growth/growth-gate.d.ts

@@ -0,0 +1,24 @@
+import { OrgRole } from '../auth/org-role';
+export interface GrowthGate {
+    readonly enabled?: boolean;
+    readonly minimumOrgRole?: OrgRole;
+    readonly restrictedToGroupIds?: readonly string[];
+}
+export interface GrowthGateSubject {
+    readonly orgRole: OrgRole | undefined;
+    readonly groupIds: readonly string[];
+}
+export declare enum GrowthGateRefusal {
+    Disabled = "disabled",
+    OrgRole = "org-role",
+    Group = "group"
+}
+export type GrowthGateVerdict = {
+    readonly allowed: true;
+} | {
+    readonly allowed: false;
+    readonly refusal: GrowthGateRefusal;
+};
+export declare function evaluateGrowthGate(gate: GrowthGate | undefined, subject: GrowthGateSubject): GrowthGateVerdict;
+export declare function growthGateSatisfiesFloor(candidate: GrowthGate | undefined, floor: GrowthGate): boolean;
+//# sourceMappingURL=growth-gate.d.ts.map

package/dist/lib/growth/growth-gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"growth-gate.d.ts","sourceRoot":"","sources":["../../../src/lib/growth/growth-gate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAoB,MAAM,kBAAkB,CAAC;AAgB7D,MAAM,WAAW,UAAU;IAEzB,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAE3B,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;IAKlC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACnD;AAGD,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,OAAO,EAAE,OAAO,GAAG,SAAS,CAAC;IAEtC,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;CACtC;AAGD,oBAAY,iBAAiB;IAC3B,QAAQ,aAAa;IACrB,OAAO,aAAa;IACpB,KAAK,UAAU;CAChB;AAED,MAAM,MAAM,iBAAiB,GACzB;IAAE,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAA;CAAE,GAC1B;IAAE,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAA;CAAE,CAAC;AAUrE,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,UAAU,GAAG,SAAS,EAC5B,OAAO,EAAE,iBAAiB,GACzB,iBAAiB,CAqBnB;AASD,wBAAgB,wBAAwB,CACtC,SAAS,EAAE,UAAU,GAAG,SAAS,EACjC,KAAK,EAAE,UAAU,GAChB,OAAO,CAoBT"}

package/dist/lib/growth/growth-gate.js

@@ -0,0 +1,46 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GrowthGateRefusal = void 0;
+exports.evaluateGrowthGate = evaluateGrowthGate;
+exports.growthGateSatisfiesFloor = growthGateSatisfiesFloor;
+const org_role_1 = require("../auth/org-role");
+var GrowthGateRefusal;
+(function (GrowthGateRefusal) {
+    GrowthGateRefusal["Disabled"] = "disabled";
+    GrowthGateRefusal["OrgRole"] = "org-role";
+    GrowthGateRefusal["Group"] = "group";
+})(GrowthGateRefusal || (exports.GrowthGateRefusal = GrowthGateRefusal = {}));
+function evaluateGrowthGate(gate, subject) {
+    if (gate === undefined) {
+        return { allowed: true };
+    }
+    if (gate.enabled === false) {
+        return { allowed: false, refusal: GrowthGateRefusal.Disabled };
+    }
+    if (gate.minimumOrgRole !== undefined &&
+        !(0, org_role_1.orgRoleSatisfies)(subject.orgRole, gate.minimumOrgRole)) {
+        return { allowed: false, refusal: GrowthGateRefusal.OrgRole };
+    }
+    const restricted = gate.restrictedToGroupIds;
+    if (restricted !== undefined && restricted.length > 0) {
+        const inGroup = restricted.some((id) => subject.groupIds.includes(id));
+        if (!inGroup) {
+            return { allowed: false, refusal: GrowthGateRefusal.Group };
+        }
+    }
+    return { allowed: true };
+}
+function growthGateSatisfiesFloor(candidate, floor) {
+    const effective = candidate ?? {};
+    if (floor.enabled === false && effective.enabled !== false) {
+        return false;
+    }
+    if (floor.minimumOrgRole !== undefined) {
+        if (effective.minimumOrgRole === undefined ||
+            !(0, org_role_1.orgRoleSatisfies)(effective.minimumOrgRole, floor.minimumOrgRole)) {
+            return false;
+        }
+    }
+    return true;
+}
+//# sourceMappingURL=growth-gate.js.map

package/dist/lib/growth/growth-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"growth-gate.js","sourceRoot":"","sources":["../../../src/lib/growth/growth-gate.ts"],"names":[],"mappings":";;;AAsDA,gDAwBC;AASD,4DAuBC;AA9GD,+CAA6D;AAoC7D,IAAY,iBAIX;AAJD,WAAY,iBAAiB;IAC3B,0CAAqB,CAAA;IACrB,yCAAoB,CAAA;IACpB,oCAAe,CAAA;AACjB,CAAC,EAJW,iBAAiB,iCAAjB,iBAAiB,QAI5B;AAcD,SAAgB,kBAAkB,CAChC,IAA4B,EAC5B,OAA0B;IAE1B,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IACD,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;QAC3B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,iBAAiB,CAAC,QAAQ,EAAE,CAAC;IACjE,CAAC;IACD,IACE,IAAI,CAAC,cAAc,KAAK,SAAS;QACjC,CAAC,IAAA,2BAAgB,EAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,cAAc,CAAC,EACvD,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,iBAAiB,CAAC,OAAO,EAAE,CAAC;IAChE,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,oBAAoB,CAAC;IAC7C,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtD,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;QACvE,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,iBAAiB,CAAC,KAAK,EAAE,CAAC;QAC9D,CAAC;IACH,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AASD,SAAgB,wBAAwB,CACtC,SAAiC,EACjC,KAAiB;IAIjB,MAAM,SAAS,GAAe,SAAS,IAAI,EAAE,CAAC;IAE9C,IAAI,KAAK,CAAC,OAAO,KAAK,KAAK,IAAI,SAAS,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;QAC3D,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QAIvC,IACE,SAAS,CAAC,cAAc,KAAK,SAAS;YACtC,CAAC,IAAA,2BAAgB,EAAC,SAAS,CAAC,cAAc,EAAE,KAAK,CAAC,cAAc,CAAC,EACjE,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/lib/growth/index.d.ts

@@ -0,0 +1,4 @@
+export { type GrowthGate, type GrowthGateSubject, type GrowthGateVerdict, GrowthGateRefusal, evaluateGrowthGate, growthGateSatisfiesFloor, } from './growth-gate';
+export { type OrgGrowthPolicy, EXTERNAL_PUBLISHING_FLOOR, EXTERNAL_PUBLISHING_ALWAYS_DECIDES, BACKGROUND_GRANTS_ALWAYS_DECIDE, MIN_INTERNAL_PUBLISH_REVIEW_QUORUM, MAX_INTERNAL_PUBLISH_REVIEW_QUORUM, allowListAdmits, internalPublishNeedsReview, } from './org-growth-policy';
+export { MemberShellMode, type MemberShellModeOverride, type OrgExperiencePolicy, resolveMemberShellMode, } from './member-shell-mode';
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/growth/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/lib/growth/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,UAAU,EACf,KAAK,iBAAiB,EACtB,KAAK,iBAAiB,EACtB,iBAAiB,EACjB,kBAAkB,EAClB,wBAAwB,GACzB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,KAAK,eAAe,EACpB,yBAAyB,EACzB,kCAAkC,EAClC,+BAA+B,EAC/B,kCAAkC,EAClC,kCAAkC,EAClC,eAAe,EACf,0BAA0B,GAC3B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,eAAe,EACf,KAAK,uBAAuB,EAC5B,KAAK,mBAAmB,EACxB,sBAAsB,GACvB,MAAM,qBAAqB,CAAC"}

package/dist/lib/growth/index.js

@@ -0,0 +1,19 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveMemberShellMode = exports.MemberShellMode = exports.internalPublishNeedsReview = exports.allowListAdmits = exports.MAX_INTERNAL_PUBLISH_REVIEW_QUORUM = exports.MIN_INTERNAL_PUBLISH_REVIEW_QUORUM = exports.BACKGROUND_GRANTS_ALWAYS_DECIDE = exports.EXTERNAL_PUBLISHING_ALWAYS_DECIDES = exports.EXTERNAL_PUBLISHING_FLOOR = exports.growthGateSatisfiesFloor = exports.evaluateGrowthGate = exports.GrowthGateRefusal = void 0;
+var growth_gate_1 = require("./growth-gate");
+Object.defineProperty(exports, "GrowthGateRefusal", { enumerable: true, get: function () { return growth_gate_1.GrowthGateRefusal; } });
+Object.defineProperty(exports, "evaluateGrowthGate", { enumerable: true, get: function () { return growth_gate_1.evaluateGrowthGate; } });
+Object.defineProperty(exports, "growthGateSatisfiesFloor", { enumerable: true, get: function () { return growth_gate_1.growthGateSatisfiesFloor; } });
+var org_growth_policy_1 = require("./org-growth-policy");
+Object.defineProperty(exports, "EXTERNAL_PUBLISHING_FLOOR", { enumerable: true, get: function () { return org_growth_policy_1.EXTERNAL_PUBLISHING_FLOOR; } });
+Object.defineProperty(exports, "EXTERNAL_PUBLISHING_ALWAYS_DECIDES", { enumerable: true, get: function () { return org_growth_policy_1.EXTERNAL_PUBLISHING_ALWAYS_DECIDES; } });
+Object.defineProperty(exports, "BACKGROUND_GRANTS_ALWAYS_DECIDE", { enumerable: true, get: function () { return org_growth_policy_1.BACKGROUND_GRANTS_ALWAYS_DECIDE; } });
+Object.defineProperty(exports, "MIN_INTERNAL_PUBLISH_REVIEW_QUORUM", { enumerable: true, get: function () { return org_growth_policy_1.MIN_INTERNAL_PUBLISH_REVIEW_QUORUM; } });
+Object.defineProperty(exports, "MAX_INTERNAL_PUBLISH_REVIEW_QUORUM", { enumerable: true, get: function () { return org_growth_policy_1.MAX_INTERNAL_PUBLISH_REVIEW_QUORUM; } });
+Object.defineProperty(exports, "allowListAdmits", { enumerable: true, get: function () { return org_growth_policy_1.allowListAdmits; } });
+Object.defineProperty(exports, "internalPublishNeedsReview", { enumerable: true, get: function () { return org_growth_policy_1.internalPublishNeedsReview; } });
+var member_shell_mode_1 = require("./member-shell-mode");
+Object.defineProperty(exports, "MemberShellMode", { enumerable: true, get: function () { return member_shell_mode_1.MemberShellMode; } });
+Object.defineProperty(exports, "resolveMemberShellMode", { enumerable: true, get: function () { return member_shell_mode_1.resolveMemberShellMode; } });
+//# sourceMappingURL=index.js.map

package/dist/lib/growth/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/lib/growth/index.ts"],"names":[],"mappings":";;;AAAA,6CAOuB;AAHrB,gHAAA,iBAAiB,OAAA;AACjB,iHAAA,kBAAkB,OAAA;AAClB,uHAAA,wBAAwB,OAAA;AAE1B,yDAS6B;AAP3B,8HAAA,yBAAyB,OAAA;AACzB,uIAAA,kCAAkC,OAAA;AAClC,oIAAA,+BAA+B,OAAA;AAC/B,uIAAA,kCAAkC,OAAA;AAClC,uIAAA,kCAAkC,OAAA;AAClC,oHAAA,eAAe,OAAA;AACf,+HAAA,0BAA0B,OAAA;AAE5B,yDAK6B;AAJ3B,oHAAA,eAAe,OAAA;AAGf,2HAAA,sBAAsB,OAAA"}

package/dist/lib/growth/member-shell-mode.d.ts

@@ -0,0 +1,14 @@
+export declare enum MemberShellMode {
+    Full = "full",
+    PortalFocused = "portal-focused"
+}
+export interface MemberShellModeOverride {
+    readonly groupId: string;
+    readonly mode: MemberShellMode;
+}
+export interface OrgExperiencePolicy {
+    readonly memberShellMode?: MemberShellMode;
+    readonly shellModeOverrides?: readonly MemberShellModeOverride[];
+}
+export declare function resolveMemberShellMode(policy: OrgExperiencePolicy | undefined, subjectGroupIds: readonly string[]): MemberShellMode;
+//# sourceMappingURL=member-shell-mode.d.ts.map

package/dist/lib/growth/member-shell-mode.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"member-shell-mode.d.ts","sourceRoot":"","sources":["../../../src/lib/growth/member-shell-mode.ts"],"names":[],"mappings":"AAcA,oBAAY,eAAe;IAEzB,IAAI,SAAS;IAEb,aAAa,mBAAmB;CACjC;AAGD,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;CAChC;AASD,MAAM,WAAW,mBAAmB;IAElC,QAAQ,CAAC,eAAe,CAAC,EAAE,eAAe,CAAC;IAC3C,QAAQ,CAAC,kBAAkB,CAAC,EAAE,SAAS,uBAAuB,EAAE,CAAC;CAClE;AAeD,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,mBAAmB,GAAG,SAAS,EACvC,eAAe,EAAE,SAAS,MAAM,EAAE,GACjC,eAAe,CAUjB"}

package/dist/lib/growth/member-shell-mode.js

@@ -0,0 +1,21 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MemberShellMode = void 0;
+exports.resolveMemberShellMode = resolveMemberShellMode;
+var MemberShellMode;
+(function (MemberShellMode) {
+    MemberShellMode["Full"] = "full";
+    MemberShellMode["PortalFocused"] = "portal-focused";
+})(MemberShellMode || (exports.MemberShellMode = MemberShellMode = {}));
+function resolveMemberShellMode(policy, subjectGroupIds) {
+    if (policy === undefined) {
+        return MemberShellMode.Full;
+    }
+    for (const override of policy.shellModeOverrides ?? []) {
+        if (subjectGroupIds.includes(override.groupId)) {
+            return override.mode;
+        }
+    }
+    return policy.memberShellMode ?? MemberShellMode.Full;
+}
+//# sourceMappingURL=member-shell-mode.js.map

package/dist/lib/growth/member-shell-mode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"member-shell-mode.js","sourceRoot":"","sources":["../../../src/lib/growth/member-shell-mode.ts"],"names":[],"mappings":";;;AAqDA,wDAaC;AApDD,IAAY,eAKX;AALD,WAAY,eAAe;IAEzB,gCAAa,CAAA;IAEb,mDAAgC,CAAA;AAClC,CAAC,EALW,eAAe,+BAAf,eAAe,QAK1B;AAkCD,SAAgB,sBAAsB,CACpC,MAAuC,EACvC,eAAkC;IAElC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,eAAe,CAAC,IAAI,CAAC;IAC9B,CAAC;IACD,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,kBAAkB,IAAI,EAAE,EAAE,CAAC;QACvD,IAAI,eAAe,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/C,OAAO,QAAQ,CAAC,IAAI,CAAC;QACvB,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,eAAe,IAAI,eAAe,CAAC,IAAI,CAAC;AACxD,CAAC"}

package/dist/lib/growth/org-growth-policy.d.ts

@@ -0,0 +1,17 @@
+import type { GrowthGate } from './growth-gate';
+export interface OrgGrowthPolicy {
+    readonly authoring?: GrowthGate;
+    readonly publishToOrg?: GrowthGate;
+    readonly internalPublishReviewQuorum?: number;
+    readonly allowedCapabilityDomains?: readonly string[];
+    readonly allowedConnectorProviders?: readonly string[];
+    readonly externalPublishing?: GrowthGate;
+}
+export declare const EXTERNAL_PUBLISHING_FLOOR: GrowthGate;
+export declare const EXTERNAL_PUBLISHING_ALWAYS_DECIDES = true;
+export declare const BACKGROUND_GRANTS_ALWAYS_DECIDE = true;
+export declare const MIN_INTERNAL_PUBLISH_REVIEW_QUORUM = 1;
+export declare const MAX_INTERNAL_PUBLISH_REVIEW_QUORUM = 10;
+export declare function allowListAdmits(allowed: readonly string[] | undefined, value: string): boolean;
+export declare function internalPublishNeedsReview(policy: OrgGrowthPolicy | undefined): boolean;
+//# sourceMappingURL=org-growth-policy.d.ts.map

package/dist/lib/growth/org-growth-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"org-growth-policy.d.ts","sourceRoot":"","sources":["../../../src/lib/growth/org-growth-policy.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAkChD,MAAM,WAAW,eAAe;IAK9B,QAAQ,CAAC,SAAS,CAAC,EAAE,UAAU,CAAC;IAMhC,QAAQ,CAAC,YAAY,CAAC,EAAE,UAAU,CAAC;IAMnC,QAAQ,CAAC,2BAA2B,CAAC,EAAE,MAAM,CAAC;IAM9C,QAAQ,CAAC,wBAAwB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAEtD,QAAQ,CAAC,yBAAyB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAMvD,QAAQ,CAAC,kBAAkB,CAAC,EAAE,UAAU,CAAC;CAC1C;AAMD,eAAO,MAAM,yBAAyB,EAAE,UAEtC,CAAC;AAMH,eAAO,MAAM,kCAAkC,OAAO,CAAC;AAGvD,eAAO,MAAM,+BAA+B,OAAO,CAAC;AAEpD,eAAO,MAAM,kCAAkC,IAAI,CAAC;AACpD,eAAO,MAAM,kCAAkC,KAAK,CAAC;AAUrD,wBAAgB,eAAe,CAC7B,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,EACtC,KAAK,EAAE,MAAM,GACZ,OAAO,CAKT;AAQD,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,eAAe,GAAG,SAAS,GAClC,OAAO,CAGT"}

package/dist/lib/growth/org-growth-policy.js

@@ -0,0 +1,24 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MAX_INTERNAL_PUBLISH_REVIEW_QUORUM = exports.MIN_INTERNAL_PUBLISH_REVIEW_QUORUM = exports.BACKGROUND_GRANTS_ALWAYS_DECIDE = exports.EXTERNAL_PUBLISHING_ALWAYS_DECIDES = exports.EXTERNAL_PUBLISHING_FLOOR = void 0;
+exports.allowListAdmits = allowListAdmits;
+exports.internalPublishNeedsReview = internalPublishNeedsReview;
+const org_role_1 = require("../auth/org-role");
+exports.EXTERNAL_PUBLISHING_FLOOR = Object.freeze({
+    minimumOrgRole: org_role_1.OrgRole.Admin,
+});
+exports.EXTERNAL_PUBLISHING_ALWAYS_DECIDES = true;
+exports.BACKGROUND_GRANTS_ALWAYS_DECIDE = true;
+exports.MIN_INTERNAL_PUBLISH_REVIEW_QUORUM = 1;
+exports.MAX_INTERNAL_PUBLISH_REVIEW_QUORUM = 10;
+function allowListAdmits(allowed, value) {
+    if (allowed === undefined) {
+        return true;
+    }
+    return allowed.includes(value);
+}
+function internalPublishNeedsReview(policy) {
+    const quorum = policy?.internalPublishReviewQuorum;
+    return quorum !== undefined && quorum >= exports.MIN_INTERNAL_PUBLISH_REVIEW_QUORUM;
+}
+//# sourceMappingURL=org-growth-policy.js.map

package/dist/lib/growth/org-growth-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"org-growth-policy.js","sourceRoot":"","sources":["../../../src/lib/growth/org-growth-policy.ts"],"names":[],"mappings":";;;AAiGA,0CAQC;AAQD,gEAKC;AAtHD,+CAA2C;AAyE9B,QAAA,yBAAyB,GAAe,MAAM,CAAC,MAAM,CAAC;IACjE,cAAc,EAAE,kBAAO,CAAC,KAAK;CAC9B,CAAC,CAAC;AAMU,QAAA,kCAAkC,GAAG,IAAI,CAAC;AAG1C,QAAA,+BAA+B,GAAG,IAAI,CAAC;AAEvC,QAAA,kCAAkC,GAAG,CAAC,CAAC;AACvC,QAAA,kCAAkC,GAAG,EAAE,CAAC;AAUrD,SAAgB,eAAe,CAC7B,OAAsC,EACtC,KAAa;IAEb,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACjC,CAAC;AAQD,SAAgB,0BAA0B,CACxC,MAAmC;IAEnC,MAAM,MAAM,GAAG,MAAM,EAAE,2BAA2B,CAAC;IACnD,OAAO,MAAM,KAAK,SAAS,IAAI,MAAM,IAAI,0CAAkC,CAAC;AAC9E,CAAC"}

package/dist/nestjs/auth/index.d.ts

@@ -5,6 +5,7 @@ export { InternalCallerGuard } from './internal-caller.guard';
 export { ServiceActorGuard, isDirectServiceActor, } from './service-actor.guard';
 export { TokenClassGuard, RequireTokenClass, REQUIRE_TOKEN_CLASS, } from './token-class.guard';
 export { OrgRoleGuard, RequireOrgRole, REQUIRE_ORG_ROLE, } from './org-role.guard';
+export { ServiceOrOrgRoleGuard } from './service-or-org-role.guard';
 export { OrgRole, OrgRolesClaimKey, ORG_ROLES_CLAIM_KEYS, resolveOrgRoles, resolveOrgRoleForOrg, orgRoleSatisfies, } from '../../lib/auth/org-role';
 export { PlatformRole, hasPlatformRole } from './platform-role';
 export { PlatformAdminGuard } from './platform-admin.guard';

package/dist/nestjs/auth/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/nestjs/auth/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EACL,mBAAmB,EACnB,KAAK,iBAAiB,EACtB,KAAK,sBAAsB,GAC5B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EACL,iBAAiB,EACjB,oBAAoB,GACrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,YAAY,EACZ,cAAc,EACd,gBAAgB,GACjB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,OAAO,EACP,gBAAgB,EAChB,oBAAoB,EACpB,eAAe,EACf,oBAAoB,EACpB,gBAAgB,GACjB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EACL,uBAAuB,EACvB,KAAK,8BAA8B,GACpC,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,WAAW,EACX,aAAa,EACb,cAAc,EACd,eAAe,GAChB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAC1E,OAAO,EACL,kBAAkB,EAClB,KAAK,mBAAmB,EACxB,KAAK,uBAAuB,EAC5B,mBAAmB,EACnB,oBAAoB,EACpB,yBAAyB,EACzB,gBAAgB,EAChB,sBAAsB,EACtB,4BAA4B,EAC5B,uBAAuB,GACxB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,+BAA+B,EAC/B,iBAAiB,EACjB,KAAK,uBAAuB,EAC5B,KAAK,kBAAkB,EACvB,0BAA0B,EAC1B,kBAAkB,EAClB,uBAAuB,GACxB,MAAM,2CAA2C,CAAC;AACnD,OAAO,EACL,2BAA2B,EAC3B,2BAA2B,EAC3B,+BAA+B,EAC/B,8BAA8B,EAC9B,sBAAsB,GACvB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,kBAAkB,EAClB,uBAAuB,GACxB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,kBAAkB,EAClB,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,GACzB,MAAM,wBAAwB,CAAC;AAOhC,OAAO,EACL,iCAAiC,EACjC,uBAAuB,EACvB,wBAAwB,EACxB,qBAAqB,EACrB,0BAA0B,EAC1B,KAAK,kBAAkB,GACxB,MAAM,oBAAoB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/nestjs/auth/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EACL,mBAAmB,EACnB,KAAK,iBAAiB,EACtB,KAAK,sBAAsB,GAC5B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EACL,iBAAiB,EACjB,oBAAoB,GACrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,YAAY,EACZ,cAAc,EACd,gBAAgB,GACjB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACpE,OAAO,EACL,OAAO,EACP,gBAAgB,EAChB,oBAAoB,EACpB,eAAe,EACf,oBAAoB,EACpB,gBAAgB,GACjB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EACL,uBAAuB,EACvB,KAAK,8BAA8B,GACpC,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,WAAW,EACX,aAAa,EACb,cAAc,EACd,eAAe,GAChB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAC1E,OAAO,EACL,kBAAkB,EAClB,KAAK,mBAAmB,EACxB,KAAK,uBAAuB,EAC5B,mBAAmB,EACnB,oBAAoB,EACpB,yBAAyB,EACzB,gBAAgB,EAChB,sBAAsB,EACtB,4BAA4B,EAC5B,uBAAuB,GACxB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,+BAA+B,EAC/B,iBAAiB,EACjB,KAAK,uBAAuB,EAC5B,KAAK,kBAAkB,EACvB,0BAA0B,EAC1B,kBAAkB,EAClB,uBAAuB,GACxB,MAAM,2CAA2C,CAAC;AACnD,OAAO,EACL,2BAA2B,EAC3B,2BAA2B,EAC3B,+BAA+B,EAC/B,8BAA8B,EAC9B,sBAAsB,GACvB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,kBAAkB,EAClB,uBAAuB,GACxB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,kBAAkB,EAClB,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,GACzB,MAAM,wBAAwB,CAAC;AAOhC,OAAO,EACL,iCAAiC,EACjC,uBAAuB,EACvB,wBAAwB,EACxB,qBAAqB,EACrB,0BAA0B,EAC1B,KAAK,kBAAkB,GACxB,MAAM,oBAAoB,CAAC"}

package/dist/nestjs/auth/index.js

@@ -1,7 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.DEFAULT_TRUSTED_ISSUER_ALGORITHMS = exports.RealmTokenVerifier = exports.readDeclaredSubjectKind = exports.SUBJECT_KIND_CLAIM = exports.MalformedActorHopError = exports.ContradictoryActorHopKindError = exports.UnknownActorHopSubjectKindError = exports.UnclassifiableActorHopError = exports.resolveActorChainFromClaims = exports.resetOrgAuthorityCensus = exports.orgAuthorityCensus = exports.recordUnprovenOrgAuthority = exports.UNKNOWN_CLIENT_ID = exports.ORG_AUTHORITY_OBSERVATION_LIMIT = exports.resolveOrgAuthorityMode = exports.InvalidOrgAuthorityModeError = exports.ORG_AUTHORITY_MODE_ENV = exports.OrgAuthorityMode = exports.orgAuthorityRequiresProof = exports.isOrgAuthorityProven = exports.resolveOrgAuthority = exports.OrgAuthoritySource = exports.REQUIRE_ORG_CLAIM = exports.RequireOrgClaim = exports.resolveOrgClaim = exports.ORG_CLAIM_KEYS = exports.OrgHeaderName = exports.OrgClaimKey = exports.configureAuthMiddleware = exports.PlatformAdminGuard = exports.hasPlatformRole = exports.PlatformRole = exports.orgRoleSatisfies = exports.resolveOrgRoleForOrg = exports.resolveOrgRoles = exports.ORG_ROLES_CLAIM_KEYS = exports.OrgRolesClaimKey = exports.OrgRole = exports.REQUIRE_ORG_ROLE = exports.RequireOrgRole = exports.OrgRoleGuard = exports.REQUIRE_TOKEN_CLASS = exports.RequireTokenClass = exports.TokenClassGuard = exports.isDirectServiceActor = exports.ServiceActorGuard = exports.InternalCallerGuard = exports.ServiceTokenGuard = exports.AUTH_MODULE_OPTIONS = exports.AuthModule = void 0;
-exports.parseTrustedIssuersFromEnv = exports.TrustedIssuerRegistry = exports.TrustedIssuerConfigError = exports.TRUSTED_ISSUERS_ENV_VAR = void 0;
+exports.RealmTokenVerifier = exports.readDeclaredSubjectKind = exports.SUBJECT_KIND_CLAIM = exports.MalformedActorHopError = exports.ContradictoryActorHopKindError = exports.UnknownActorHopSubjectKindError = exports.UnclassifiableActorHopError = exports.resolveActorChainFromClaims = exports.resetOrgAuthorityCensus = exports.orgAuthorityCensus = exports.recordUnprovenOrgAuthority = exports.UNKNOWN_CLIENT_ID = exports.ORG_AUTHORITY_OBSERVATION_LIMIT = exports.resolveOrgAuthorityMode = exports.InvalidOrgAuthorityModeError = exports.ORG_AUTHORITY_MODE_ENV = exports.OrgAuthorityMode = exports.orgAuthorityRequiresProof = exports.isOrgAuthorityProven = exports.resolveOrgAuthority = exports.OrgAuthoritySource = exports.REQUIRE_ORG_CLAIM = exports.RequireOrgClaim = exports.resolveOrgClaim = exports.ORG_CLAIM_KEYS = exports.OrgHeaderName = exports.OrgClaimKey = exports.configureAuthMiddleware = exports.PlatformAdminGuard = exports.hasPlatformRole = exports.PlatformRole = exports.orgRoleSatisfies = exports.resolveOrgRoleForOrg = exports.resolveOrgRoles = exports.ORG_ROLES_CLAIM_KEYS = exports.OrgRolesClaimKey = exports.OrgRole = exports.ServiceOrOrgRoleGuard = exports.REQUIRE_ORG_ROLE = exports.RequireOrgRole = exports.OrgRoleGuard = exports.REQUIRE_TOKEN_CLASS = exports.RequireTokenClass = exports.TokenClassGuard = exports.isDirectServiceActor = exports.ServiceActorGuard = exports.InternalCallerGuard = exports.ServiceTokenGuard = exports.AUTH_MODULE_OPTIONS = exports.AuthModule = void 0;
+exports.parseTrustedIssuersFromEnv = exports.TrustedIssuerRegistry = exports.TrustedIssuerConfigError = exports.TRUSTED_ISSUERS_ENV_VAR = exports.DEFAULT_TRUSTED_ISSUER_ALGORITHMS = void 0;
 var auth_module_1 = require("./auth.module");
 Object.defineProperty(exports, "AuthModule", { enumerable: true, get: function () { return auth_module_1.AuthModule; } });
 var auth_module_options_1 = require("./auth-module-options");
@@ -21,6 +21,8 @@ var org_role_guard_1 = require("./org-role.guard");
 Object.defineProperty(exports, "OrgRoleGuard", { enumerable: true, get: function () { return org_role_guard_1.OrgRoleGuard; } });
 Object.defineProperty(exports, "RequireOrgRole", { enumerable: true, get: function () { return org_role_guard_1.RequireOrgRole; } });
 Object.defineProperty(exports, "REQUIRE_ORG_ROLE", { enumerable: true, get: function () { return org_role_guard_1.REQUIRE_ORG_ROLE; } });
+var service_or_org_role_guard_1 = require("./service-or-org-role.guard");
+Object.defineProperty(exports, "ServiceOrOrgRoleGuard", { enumerable: true, get: function () { return service_or_org_role_guard_1.ServiceOrOrgRoleGuard; } });
 var org_role_1 = require("../../lib/auth/org-role");
 Object.defineProperty(exports, "OrgRole", { enumerable: true, get: function () { return org_role_1.OrgRole; } });
 Object.defineProperty(exports, "OrgRolesClaimKey", { enumerable: true, get: function () { return org_role_1.OrgRolesClaimKey; } });

package/dist/nestjs/auth/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/nestjs/auth/index.ts"],"names":[],"mappings":";;;;AAAA,6CAA2C;AAAlC,yGAAA,UAAU,OAAA;AACnB,6DAI+B;AAH7B,0HAAA,mBAAmB,OAAA;AAIrB,6DAA0D;AAAjD,wHAAA,iBAAiB,OAAA;AAC1B,iEAA8D;AAArD,4HAAA,mBAAmB,OAAA;AAC5B,6DAG+B;AAF7B,wHAAA,iBAAiB,OAAA;AACjB,2HAAA,oBAAoB,OAAA;AAEtB,yDAI6B;AAH3B,oHAAA,eAAe,OAAA;AACf,sHAAA,iBAAiB,OAAA;AACjB,wHAAA,mBAAmB,OAAA;AAErB,mDAI0B;AAHxB,8GAAA,YAAY,OAAA;AACZ,gHAAA,cAAc,OAAA;AACd,kHAAA,gBAAgB,OAAA;AAElB,oDAOiC;AAN/B,mGAAA,OAAO,OAAA;AACP,4GAAA,gBAAgB,OAAA;AAChB,gHAAA,oBAAoB,OAAA;AACpB,2GAAA,eAAe,OAAA;AACf,gHAAA,oBAAoB,OAAA;AACpB,4GAAA,gBAAgB,OAAA;AAElB,iDAAgE;AAAvD,6GAAA,YAAY,OAAA;AAAE,gHAAA,eAAe,OAAA;AACtC,+DAA4D;AAAnD,0HAAA,kBAAkB,OAAA;AAC3B,yEAGqC;AAFnC,oIAAA,uBAAuB,OAAA;AAGzB,sDAKkC;AAJhC,wGAAA,WAAW,OAAA;AACX,0GAAA,aAAa,OAAA;AACb,2GAAA,cAAc,OAAA;AACd,4GAAA,eAAe,OAAA;AAEjB,2DAA0E;AAAjE,qHAAA,eAAe,OAAA;AAAE,uHAAA,iBAAiB,OAAA;AAC3C,8DAWsC;AAVpC,mHAAA,kBAAkB,OAAA;AAGlB,oHAAA,mBAAmB,OAAA;AACnB,qHAAA,oBAAoB,OAAA;AACpB,0HAAA,yBAAyB,OAAA;AACzB,iHAAA,gBAAgB,OAAA;AAChB,uHAAA,sBAAsB,OAAA;AACtB,6HAAA,4BAA4B,OAAA;AAC5B,wHAAA,uBAAuB,OAAA;AAEzB,wFAQmD;AAPjD,6IAAA,+BAA+B,OAAA;AAC/B,+HAAA,iBAAiB,OAAA;AAGjB,wIAAA,0BAA0B,OAAA;AAC1B,gIAAA,kBAAkB,OAAA;AAClB,qIAAA,uBAAuB,OAAA;AAEzB,uDAM4B;AAL1B,+HAAA,2BAA2B,OAAA;AAC3B,+HAAA,2BAA2B,OAAA;AAC3B,mIAAA,+BAA+B,OAAA;AAC/B,kIAAA,8BAA8B,OAAA;AAC9B,0HAAA,sBAAsB,OAAA;AAExB,+DAGgC;AAF9B,0HAAA,kBAAkB,OAAA;AAClB,+HAAA,uBAAuB,OAAA;AAEzB,+DAIgC;AAH9B,0HAAA,kBAAkB,OAAA;AAUpB,iDAO4B;AAN1B,+HAAA,iCAAiC,OAAA;AACjC,qHAAA,uBAAuB,OAAA;AACvB,sHAAA,wBAAwB,OAAA;AACxB,mHAAA,qBAAqB,OAAA;AACrB,wHAAA,0BAA0B,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/nestjs/auth/index.ts"],"names":[],"mappings":";;;;AAAA,6CAA2C;AAAlC,yGAAA,UAAU,OAAA;AACnB,6DAI+B;AAH7B,0HAAA,mBAAmB,OAAA;AAIrB,6DAA0D;AAAjD,wHAAA,iBAAiB,OAAA;AAC1B,iEAA8D;AAArD,4HAAA,mBAAmB,OAAA;AAC5B,6DAG+B;AAF7B,wHAAA,iBAAiB,OAAA;AACjB,2HAAA,oBAAoB,OAAA;AAEtB,yDAI6B;AAH3B,oHAAA,eAAe,OAAA;AACf,sHAAA,iBAAiB,OAAA;AACjB,wHAAA,mBAAmB,OAAA;AAErB,mDAI0B;AAHxB,8GAAA,YAAY,OAAA;AACZ,gHAAA,cAAc,OAAA;AACd,kHAAA,gBAAgB,OAAA;AAElB,yEAAoE;AAA3D,kIAAA,qBAAqB,OAAA;AAC9B,oDAOiC;AAN/B,mGAAA,OAAO,OAAA;AACP,4GAAA,gBAAgB,OAAA;AAChB,gHAAA,oBAAoB,OAAA;AACpB,2GAAA,eAAe,OAAA;AACf,gHAAA,oBAAoB,OAAA;AACpB,4GAAA,gBAAgB,OAAA;AAElB,iDAAgE;AAAvD,6GAAA,YAAY,OAAA;AAAE,gHAAA,eAAe,OAAA;AACtC,+DAA4D;AAAnD,0HAAA,kBAAkB,OAAA;AAC3B,yEAGqC;AAFnC,oIAAA,uBAAuB,OAAA;AAGzB,sDAKkC;AAJhC,wGAAA,WAAW,OAAA;AACX,0GAAA,aAAa,OAAA;AACb,2GAAA,cAAc,OAAA;AACd,4GAAA,eAAe,OAAA;AAEjB,2DAA0E;AAAjE,qHAAA,eAAe,OAAA;AAAE,uHAAA,iBAAiB,OAAA;AAC3C,8DAWsC;AAVpC,mHAAA,kBAAkB,OAAA;AAGlB,oHAAA,mBAAmB,OAAA;AACnB,qHAAA,oBAAoB,OAAA;AACpB,0HAAA,yBAAyB,OAAA;AACzB,iHAAA,gBAAgB,OAAA;AAChB,uHAAA,sBAAsB,OAAA;AACtB,6HAAA,4BAA4B,OAAA;AAC5B,wHAAA,uBAAuB,OAAA;AAEzB,wFAQmD;AAPjD,6IAAA,+BAA+B,OAAA;AAC/B,+HAAA,iBAAiB,OAAA;AAGjB,wIAAA,0BAA0B,OAAA;AAC1B,gIAAA,kBAAkB,OAAA;AAClB,qIAAA,uBAAuB,OAAA;AAEzB,uDAM4B;AAL1B,+HAAA,2BAA2B,OAAA;AAC3B,+HAAA,2BAA2B,OAAA;AAC3B,mIAAA,+BAA+B,OAAA;AAC/B,kIAAA,8BAA8B,OAAA;AAC9B,0HAAA,sBAAsB,OAAA;AAExB,+DAGgC;AAF9B,0HAAA,kBAAkB,OAAA;AAClB,+HAAA,uBAAuB,OAAA;AAEzB,+DAIgC;AAH9B,0HAAA,kBAAkB,OAAA;AAUpB,iDAO4B;AAN1B,+HAAA,iCAAiC,OAAA;AACjC,qHAAA,uBAAuB,OAAA;AACvB,sHAAA,wBAAwB,OAAA;AACxB,mHAAA,qBAAqB,OAAA;AACrB,wHAAA,0BAA0B,OAAA"}

package/dist/nestjs/auth/service-or-org-role.guard.d.ts

@@ -0,0 +1,6 @@
+import { CanActivate, ExecutionContext } from '@nestjs/common';
+export declare class ServiceOrOrgRoleGuard implements CanActivate {
+    private readonly logger;
+    canActivate(context: ExecutionContext): boolean;
+}
+//# sourceMappingURL=service-or-org-role.guard.d.ts.map

package/dist/nestjs/auth/service-or-org-role.guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-or-org-role.guard.d.ts","sourceRoot":"","sources":["../../../src/nestjs/auth/service-or-org-role.guard.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,WAAW,EACX,gBAAgB,EAKjB,MAAM,gBAAgB,CAAC;AAiDxB,qBACa,qBAAsB,YAAW,WAAW;IACvD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA0C;IAEjE,WAAW,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO;CAgDhD"}

package/dist/nestjs/auth/service-or-org-role.guard.js

@@ -0,0 +1,61 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var ServiceOrOrgRoleGuard_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ServiceOrOrgRoleGuard = void 0;
+const common_1 = require("@nestjs/common");
+const decorator_metadata_1 = require("../decorator-metadata");
+const request_context_1 = require("../../lib/request-context");
+const org_role_1 = require("../../lib/auth/org-role");
+const service_actor_guard_1 = require("./service-actor.guard");
+const org_role_guard_1 = require("./org-role.guard");
+let ServiceOrOrgRoleGuard = ServiceOrOrgRoleGuard_1 = class ServiceOrOrgRoleGuard {
+    logger = new common_1.Logger(ServiceOrOrgRoleGuard_1.name);
+    canActivate(context) {
+        const required = (0, decorator_metadata_1.readDecoratorOverride)(org_role_guard_1.REQUIRE_ORG_ROLE, [
+            context.getHandler(),
+            context.getClass(),
+        ]);
+        if (!required) {
+            return true;
+        }
+        const request = context.switchToHttp().getRequest();
+        const ctx = request[request_context_1.REQUEST_CONTEXT];
+        if (!ctx) {
+            this.logger.error('RequestContext missing — ServiceOrOrgRoleGuard requires ' +
+                'RequestContextMiddleware (configureAuthMiddleware).');
+            throw new common_1.InternalServerErrorException({
+                code: 'REQUEST_CONTEXT_MISSING',
+                message: 'Internal route misconfigured: missing request context.',
+            });
+        }
+        if ((0, service_actor_guard_1.isDirectServiceActor)(ctx)) {
+            return true;
+        }
+        if (!(0, org_role_1.orgRoleSatisfies)(ctx.orgRole, required)) {
+            this.logger.warn({
+                message: 'service-or-org-role-denied',
+                route: `${request.method} ${request.originalUrl}`,
+                orgId: ctx.orgId,
+                actorId: ctx.actorId,
+                orgRole: ctx.orgRole ?? null,
+                requiredOrgRole: required,
+            });
+            throw new common_1.ForbiddenException({
+                code: 'ORG_ROLE_NOT_PERMITTED',
+                message: `This endpoint requires org role '${required}' or higher, or a platform service credential.`,
+            });
+        }
+        return true;
+    }
+};
+exports.ServiceOrOrgRoleGuard = ServiceOrOrgRoleGuard;
+exports.ServiceOrOrgRoleGuard = ServiceOrOrgRoleGuard = ServiceOrOrgRoleGuard_1 = __decorate([
+    (0, common_1.Injectable)()
+], ServiceOrOrgRoleGuard);
+//# sourceMappingURL=service-or-org-role.guard.js.map

package/dist/nestjs/auth/service-or-org-role.guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-or-org-role.guard.js","sourceRoot":"","sources":["../../../src/nestjs/auth/service-or-org-role.guard.ts"],"names":[],"mappings":";;;;;;;;;;AAAA,2CAOwB;AAExB,8DAA8D;AAC9D,+DAA4D;AAE5D,sDAAoE;AACpE,+DAA6D;AAC7D,qDAAoD;AA2C7C,IAAM,qBAAqB,6BAA3B,MAAM,qBAAqB;IACf,MAAM,GAAG,IAAI,eAAM,CAAC,uBAAqB,CAAC,IAAI,CAAC,CAAC;IAEjE,WAAW,CAAC,OAAyB;QACnC,MAAM,QAAQ,GAAG,IAAA,0CAAqB,EAAU,iCAAgB,EAAE;YAChE,OAAO,CAAC,UAAU,EAAE;YACpB,OAAO,CAAC,QAAQ,EAAE;SACnB,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAAW,CAAC;QAC7D,MAAM,GAAG,GAAI,OAA8C,CACzD,iCAAe,CACc,CAAC;QAEhC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,0DAA0D;gBACxD,qDAAqD,CACxD,CAAC;YACF,MAAM,IAAI,qCAA4B,CAAC;gBACrC,IAAI,EAAE,yBAAyB;gBAC/B,OAAO,EAAE,wDAAwD;aAClE,CAAC,CAAC;QACL,CAAC;QAGD,IAAI,IAAA,0CAAoB,EAAC,GAAG,CAAC,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAC;QACd,CAAC;QAGD,IAAI,CAAC,IAAA,2BAAgB,EAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC;YAC7C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;gBACf,OAAO,EAAE,4BAA4B;gBACrC,KAAK,EAAE,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,WAAW,EAAE;gBACjD,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,IAAI;gBAC5B,eAAe,EAAE,QAAQ;aAC1B,CAAC,CAAC;YACH,MAAM,IAAI,2BAAkB,CAAC;gBAC3B,IAAI,EAAE,wBAAwB;gBAC9B,OAAO,EAAE,oCAAoC,QAAQ,gDAAgD;aACtG,CAAC,CAAC;QACL,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;CACF,CAAA;AAnDY,sDAAqB;gCAArB,qBAAqB;IADjC,IAAA,mBAAU,GAAE;GACA,qBAAqB,CAmDjC"}

package/dist/nestjs/caller-org-scope.d.ts

@@ -0,0 +1,4 @@
+import { type CallerOrgScope } from '@xemahq/kernel-contracts/tenant';
+import type { RequestContext } from '../lib/request-context';
+export declare function resolveCallerOrgScope(ctx: RequestContext | undefined): CallerOrgScope;
+//# sourceMappingURL=caller-org-scope.d.ts.map

package/dist/nestjs/caller-org-scope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"caller-org-scope.d.ts","sourceRoot":"","sources":["../../src/nestjs/caller-org-scope.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,cAAc,EACpB,MAAM,iCAAiC,CAAC;AAEzC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AA0E7D,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,cAAc,GAAG,SAAS,GAC9B,cAAc,CAuBhB"}

package/dist/nestjs/caller-org-scope.js

@@ -0,0 +1,22 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveCallerOrgScope = resolveCallerOrgScope;
+const tenant_1 = require("@xemahq/kernel-contracts/tenant");
+function resolveCallerOrgScope(ctx) {
+    if (!ctx) {
+        throw new Error('RequestContext missing on an org-scoped route — RequestContextMiddleware ' +
+            'is not applied. Refusing to resolve a caller org scope without it.');
+    }
+    if (!ctx.orgId) {
+        return (0, tenant_1.callerOrgScope)(null);
+    }
+    const orgId = (0, tenant_1.toOrgId)(ctx.orgId);
+    if (orgId === null) {
+        throw new Error(`RequestContext carries a malformed organisation id "${ctx.orgId}". ` +
+            'Refusing to resolve a caller org scope: an unusable org id is NOT ' +
+            '"no org", and answering it with the cross-org platform scope would ' +
+            'grant it more authority than a well-formed one.');
+    }
+    return (0, tenant_1.callerOrgScope)(orgId);
+}
+//# sourceMappingURL=caller-org-scope.js.map

package/dist/nestjs/caller-org-scope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"caller-org-scope.js","sourceRoot":"","sources":["../../src/nestjs/caller-org-scope.ts"],"names":[],"mappings":";;AAgFA,sDAyBC;AAzGD,4DAIyC;AA4EzC,SAAgB,qBAAqB,CACnC,GAA+B;IAE/B,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CACb,2EAA2E;YACzE,oEAAoE,CACvE,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;QACf,OAAO,IAAA,uBAAc,EAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IAED,MAAM,KAAK,GAAG,IAAA,gBAAO,EAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACjC,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CACb,uDAAuD,GAAG,CAAC,KAAK,KAAK;YACnE,oEAAoE;YACpE,qEAAqE;YACrE,iDAAiD,CACpD,CAAC;IACJ,CAAC;IAED,OAAO,IAAA,uBAAc,EAAC,KAAK,CAAC,CAAC;AAC/B,CAAC"}

package/dist/nestjs/index.d.ts

@@ -28,9 +28,10 @@ export { fetchEnvelope, fetchEnvelopeOptional, fetchJson, } from './fetch-envelo
 export { Roles, ROLES_KEY } from './roles.decorator';
 export { RolesGuard } from './roles.guard';
 export { GlobalExceptionFilter } from './global-exception.filter';
-export { AuthModule, AUTH_MODULE_OPTIONS, type AuthModuleOptions, type AuthModuleAsyncOptions, ServiceTokenGuard, InternalCallerGuard, ServiceActorGuard, isDirectServiceActor, TokenClassGuard, RequireTokenClass, REQUIRE_TOKEN_CLASS, OrgRoleGuard, RequireOrgRole, REQUIRE_ORG_ROLE, OrgRolesClaimKey, ORG_ROLES_CLAIM_KEYS, resolveOrgRoles, resolveOrgRoleForOrg, orgRoleSatisfies, PlatformRole, hasPlatformRole, PlatformAdminGuard, configureAuthMiddleware, type ConfigureAuthMiddlewareOptions, OrgClaimKey, OrgHeaderName, ORG_CLAIM_KEYS, resolveOrgClaim, RequireOrgClaim, REQUIRE_ORG_CLAIM, OrgAuthoritySource, type OrgAuthorityVerdict, type OrgAuthorityCallerFacts, resolveOrgAuthority, isOrgAuthorityProven, orgAuthorityRequiresProof, OrgAuthorityMode, ORG_AUTHORITY_MODE_ENV, InvalidOrgAuthorityModeError, resolveOrgAuthorityMode, ORG_AUTHORITY_OBSERVATION_LIMIT, UNKNOWN_CLIENT_ID, type OrgAuthorityObservation, type OrgAuthorityCensus, recordUnprovenOrgAuthority, orgAuthorityCensus, resetOrgAuthorityCensus, } from './auth';
+export { AuthModule, AUTH_MODULE_OPTIONS, type AuthModuleOptions, type AuthModuleAsyncOptions, ServiceTokenGuard, InternalCallerGuard, ServiceActorGuard, isDirectServiceActor, TokenClassGuard, RequireTokenClass, REQUIRE_TOKEN_CLASS, OrgRoleGuard, RequireOrgRole, REQUIRE_ORG_ROLE, ServiceOrOrgRoleGuard, OrgRolesClaimKey, ORG_ROLES_CLAIM_KEYS, resolveOrgRoles, resolveOrgRoleForOrg, orgRoleSatisfies, PlatformRole, hasPlatformRole, PlatformAdminGuard, configureAuthMiddleware, type ConfigureAuthMiddlewareOptions, OrgClaimKey, OrgHeaderName, ORG_CLAIM_KEYS, resolveOrgClaim, RequireOrgClaim, REQUIRE_ORG_CLAIM, OrgAuthoritySource, type OrgAuthorityVerdict, type OrgAuthorityCallerFacts, resolveOrgAuthority, isOrgAuthorityProven, orgAuthorityRequiresProof, OrgAuthorityMode, ORG_AUTHORITY_MODE_ENV, InvalidOrgAuthorityModeError, resolveOrgAuthorityMode, ORG_AUTHORITY_OBSERVATION_LIMIT, UNKNOWN_CLIENT_ID, type OrgAuthorityObservation, type OrgAuthorityCensus, recordUnprovenOrgAuthority, orgAuthorityCensus, resetOrgAuthorityCensus, } from './auth';
 export { ConnectorWebhookEnvelopeDto, ConnectorEnvelopePipe, ApiConnectorEnvelope, type ApiConnectorEnvelopeOptions, type ConnectorEnvelopeVariant, } from './connector-webhooks';
 export { type IdempotencyService, type IdempotencyOutcome, IDEMPOTENCY_RECORD_MODEL, DataStoreIdempotencyService, IDEMPOTENCY_DATA_STORE_CLIENT, type IdempotencyDataStoreClient, type IdempotencyDataStoreDelegate, IDEMPOTENCY_SERVICE, } from './idempotency';
 export { RedactionService, RedactionInterceptor, RedactResponse, REDACT_RESPONSE_KEY, } from './redaction';
 export * from './llm-stream/anthropic-adapter';
+export { resolveCallerOrgScope } from './caller-org-scope';
 //# sourceMappingURL=index.d.ts.map

package/dist/nestjs/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/nestjs/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,wBAAwB,EACxB,KAAK,yBAAyB,GAC/B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,2BAA2B,EAAE,MAAM,iCAAiC,CAAC;AAC9E,OAAO,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AACxE,OAAO,EACL,yBAAyB,EACzB,uBAAuB,EACvB,YAAY,EACZ,sBAAsB,EACtB,yBAAyB,EACzB,sBAAsB,EACtB,sBAAsB,EAGtB,yBAAyB,EAGzB,kBAAkB,EAClB,uBAAuB,EACvB,gBAAgB,EAChB,KAAK,mBAAmB,GACzB,MAAM,6BAA6B,CAAC;AAKrC,OAAO,EACL,2BAA2B,EAC3B,2BAA2B,EAC3B,+BAA+B,EAC/B,8BAA8B,EAC9B,sBAAsB,GACvB,MAAM,yBAAyB,CAAC;AAIjC,OAAO,EACL,iCAAiC,EACjC,uBAAuB,EACvB,wBAAwB,EACxB,qBAAqB,EACrB,0BAA0B,EAC1B,KAAK,kBAAkB,GACxB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAC;AAC/E,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EACL,oBAAoB,EACpB,eAAe,EACf,oBAAoB,EACpB,sBAAsB,EACtB,uBAAuB,EACvB,oBAAoB,EACpB,iBAAiB,GAClB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,2BAA2B,EAC3B,KAAK,wBAAwB,GAC9B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,sBAAsB,EACtB,iCAAiC,EACjC,6BAA6B,EAC7B,KAAK,mBAAmB,EACxB,KAAK,gCAAgC,EACrC,KAAK,6BAA6B,EAClC,KAAK,wBAAwB,GAC9B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EACL,OAAO,EACP,gBAAgB,EAChB,oBAAoB,GACrB,MAAM,4BAA4B,CAAC;AAIpC,OAAO,EACL,YAAY,EACZ,qBAAqB,EACrB,sBAAsB,EACtB,iBAAiB,EACjB,4BAA4B,EAC5B,iCAAiC,EACjC,sBAAsB,EACtB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,oBAAoB,EACzB,KAAK,GAAG,EACR,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,GACtB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAG3D,OAAO,EACL,sBAAsB,EACtB,YAAY,EACZ,gBAAgB,EAChB,sBAAsB,EACtB,aAAa,GACd,MAAM,uBAAuB,CAAC;AAK/B,OAAO,EACL,8BAA8B,EAC9B,0BAA0B,GAC3B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AACzE,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,GAAG,EAAE,MAAM,iBAAiB,CAAC;AACtC,OAAO,EACL,kBAAkB,EAClB,cAAc,EACd,eAAe,EACf,sBAAsB,GACvB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,cAAc,EAAE,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACvE,OAAO,EACL,mBAAmB,EACnB,UAAU,EACV,UAAU,EACV,aAAa,GACd,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,aAAa,EACb,qBAAqB,EACrB,SAAS,GACV,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,EACL,UAAU,EACV,mBAAmB,EACnB,KAAK,iBAAiB,EACtB,KAAK,sBAAsB,EAC3B,iBAAiB,EACjB,mBAAmB,EACnB,iBAAiB,EACjB,oBAAoB,EAKpB,eAAe,EACf,iBAAiB,EACjB,mBAAmB,EAGnB,YAAY,EACZ,cAAc,EACd,gBAAgB,EAChB,gBAAgB,EAChB,oBAAoB,EACpB,eAAe,EACf,oBAAoB,EACpB,gBAAgB,EAIhB,YAAY,EACZ,eAAe,EACf,kBAAkB,EAClB,uBAAuB,EACvB,KAAK,8BAA8B,EAKnC,WAAW,EACX,aAAa,EACb,cAAc,EACd,eAAe,EAIf,eAAe,EACf,iBAAiB,EAOjB,kBAAkB,EAClB,KAAK,mBAAmB,EACxB,KAAK,uBAAuB,EAC5B,mBAAmB,EACnB,oBAAoB,EACpB,yBAAyB,EACzB,gBAAgB,EAChB,sBAAsB,EACtB,4BAA4B,EAC5B,uBAAuB,EACvB,+BAA+B,EAC/B,iBAAiB,EACjB,KAAK,uBAAuB,EAC5B,KAAK,kBAAkB,EACvB,0BAA0B,EAC1B,kBAAkB,EAClB,uBAAuB,GACxB,MAAM,QAAQ,CAAC;AAChB,OAAO,EACL,2BAA2B,EAC3B,qBAAqB,EACrB,oBAAoB,EACpB,KAAK,2BAA2B,EAChC,KAAK,wBAAwB,GAC9B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,wBAAwB,EACxB,2BAA2B,EAC3B,6BAA6B,EAC7B,KAAK,0BAA0B,EAC/B,KAAK,4BAA4B,EACjC,mBAAmB,GACpB,MAAM,eAAe,CAAC;AAGvB,OAAO,EACL,gBAAgB,EAChB,oBAAoB,EACpB,cAAc,EACd,mBAAmB,GACpB,MAAM,aAAa,CAAC;AAGrB,cAAc,gCAAgC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/nestjs/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,wBAAwB,EACxB,KAAK,yBAAyB,GAC/B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,2BAA2B,EAAE,MAAM,iCAAiC,CAAC;AAC9E,OAAO,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AACxE,OAAO,EACL,yBAAyB,EACzB,uBAAuB,EACvB,YAAY,EACZ,sBAAsB,EACtB,yBAAyB,EACzB,sBAAsB,EACtB,sBAAsB,EAGtB,yBAAyB,EAGzB,kBAAkB,EAClB,uBAAuB,EACvB,gBAAgB,EAChB,KAAK,mBAAmB,GACzB,MAAM,6BAA6B,CAAC;AAKrC,OAAO,EACL,2BAA2B,EAC3B,2BAA2B,EAC3B,+BAA+B,EAC/B,8BAA8B,EAC9B,sBAAsB,GACvB,MAAM,yBAAyB,CAAC;AAIjC,OAAO,EACL,iCAAiC,EACjC,uBAAuB,EACvB,wBAAwB,EACxB,qBAAqB,EACrB,0BAA0B,EAC1B,KAAK,kBAAkB,GACxB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAC;AAC/E,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EACL,oBAAoB,EACpB,eAAe,EACf,oBAAoB,EACpB,sBAAsB,EACtB,uBAAuB,EACvB,oBAAoB,EACpB,iBAAiB,GAClB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,2BAA2B,EAC3B,KAAK,wBAAwB,GAC9B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,sBAAsB,EACtB,iCAAiC,EACjC,6BAA6B,EAC7B,KAAK,mBAAmB,EACxB,KAAK,gCAAgC,EACrC,KAAK,6BAA6B,EAClC,KAAK,wBAAwB,GAC9B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EACL,OAAO,EACP,gBAAgB,EAChB,oBAAoB,GACrB,MAAM,4BAA4B,CAAC;AAIpC,OAAO,EACL,YAAY,EACZ,qBAAqB,EACrB,sBAAsB,EACtB,iBAAiB,EACjB,4BAA4B,EAC5B,iCAAiC,EACjC,sBAAsB,EACtB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,oBAAoB,EACzB,KAAK,GAAG,EACR,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,GACtB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAG3D,OAAO,EACL,sBAAsB,EACtB,YAAY,EACZ,gBAAgB,EAChB,sBAAsB,EACtB,aAAa,GACd,MAAM,uBAAuB,CAAC;AAK/B,OAAO,EACL,8BAA8B,EAC9B,0BAA0B,GAC3B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AACzE,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,GAAG,EAAE,MAAM,iBAAiB,CAAC;AACtC,OAAO,EACL,kBAAkB,EAClB,cAAc,EACd,eAAe,EACf,sBAAsB,GACvB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,cAAc,EAAE,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACvE,OAAO,EACL,mBAAmB,EACnB,UAAU,EACV,UAAU,EACV,aAAa,GACd,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,aAAa,EACb,qBAAqB,EACrB,SAAS,GACV,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,EACL,UAAU,EACV,mBAAmB,EACnB,KAAK,iBAAiB,EACtB,KAAK,sBAAsB,EAC3B,iBAAiB,EACjB,mBAAmB,EACnB,iBAAiB,EACjB,oBAAoB,EAKpB,eAAe,EACf,iBAAiB,EACjB,mBAAmB,EAGnB,YAAY,EACZ,cAAc,EACd,gBAAgB,EAGhB,qBAAqB,EACrB,gBAAgB,EAChB,oBAAoB,EACpB,eAAe,EACf,oBAAoB,EACpB,gBAAgB,EAIhB,YAAY,EACZ,eAAe,EACf,kBAAkB,EAClB,uBAAuB,EACvB,KAAK,8BAA8B,EAKnC,WAAW,EACX,aAAa,EACb,cAAc,EACd,eAAe,EAIf,eAAe,EACf,iBAAiB,EAOjB,kBAAkB,EAClB,KAAK,mBAAmB,EACxB,KAAK,uBAAuB,EAC5B,mBAAmB,EACnB,oBAAoB,EACpB,yBAAyB,EACzB,gBAAgB,EAChB,sBAAsB,EACtB,4BAA4B,EAC5B,uBAAuB,EACvB,+BAA+B,EAC/B,iBAAiB,EACjB,KAAK,uBAAuB,EAC5B,KAAK,kBAAkB,EACvB,0BAA0B,EAC1B,kBAAkB,EAClB,uBAAuB,GACxB,MAAM,QAAQ,CAAC;AAChB,OAAO,EACL,2BAA2B,EAC3B,qBAAqB,EACrB,oBAAoB,EACpB,KAAK,2BAA2B,EAChC,KAAK,wBAAwB,GAC9B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,wBAAwB,EACxB,2BAA2B,EAC3B,6BAA6B,EAC7B,KAAK,0BAA0B,EAC/B,KAAK,4BAA4B,EACjC,mBAAmB,GACpB,MAAM,eAAe,CAAC;AAGvB,OAAO,EACL,gBAAgB,EAChB,oBAAoB,EACpB,cAAc,EACd,mBAAmB,GACpB,MAAM,aAAa,CAAC;AAGrB,cAAc,gCAAgC,CAAC;AAK/C,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/nestjs/index.js

@@ -15,8 +15,8 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.extractRealmFromIssuer = exports.OidcDiscoveryIssuerTenantResolver = exports.KeycloakIssuerTenantResolver = exports.OidcTokenVerifier = exports.IssuerMetadataResolver = exports.JwksVerificationError = exports.JwksVerifier = exports.selectTenantResolver = exports.DEFAULT_IDP_KIND = exports.IdpKind = exports.JwtVerificationGuard = exports.buildKeycloakSwaggerUiOptions = exports.enrichOpenApiWithKeycloakSecurity = exports.getKeycloakSwaggerUrls = exports.enhanceOpenApiDocumentation = exports.ApiStandardErrors = exports.ApiPaginatedResponse = exports.ApiAcceptedDataResponse = exports.ApiCreatedDataResponse = exports.ApiDataArrayResponse = exports.ApiDataResponse = exports.ApiStandardOperation = exports.ErrorResponseDto = exports.AmbientOrgContextMiddleware = exports.parseTrustedIssuersFromEnv = exports.TrustedIssuerRegistry = exports.TrustedIssuerConfigError = exports.TRUSTED_ISSUERS_ENV_VAR = exports.DEFAULT_TRUSTED_ISSUER_ALGORITHMS = exports.MalformedActorHopError = exports.ContradictoryActorHopKindError = exports.UnknownActorHopSubjectKindError = exports.UnclassifiableActorHopError = exports.resolveActorChainFromClaims = exports.asNonEmptyString = exports.readDeclaredSubjectKind = exports.SUBJECT_KIND_CLAIM = exports.resolveClientIdFromClaims = exports.resolveActAsFromClaims = exports.resolveRolesFromClaims = exports.tryResolveSubjectAndClass = exports.resolveSubjectAndClass = exports.actorTypeFor = exports.actorTypeForSubjectKind = exports.deriveActorClassification = exports.RequestContextMiddleware = exports.ResponseEnvelopeInterceptor = exports.getEnvOrThrow = exports.getCorsConfig = exports.applyStandardBodyParsers = void 0;
-exports.PlatformAdminGuard = exports.hasPlatformRole = exports.PlatformRole = exports.orgRoleSatisfies = exports.resolveOrgRoleForOrg = exports.resolveOrgRoles = exports.ORG_ROLES_CLAIM_KEYS = exports.OrgRolesClaimKey = exports.REQUIRE_ORG_ROLE = exports.RequireOrgRole = exports.OrgRoleGuard = exports.REQUIRE_TOKEN_CLASS = exports.RequireTokenClass = exports.TokenClassGuard = exports.isDirectServiceActor = exports.ServiceActorGuard = exports.InternalCallerGuard = exports.ServiceTokenGuard = exports.AUTH_MODULE_OPTIONS = exports.AuthModule = exports.GlobalExceptionFilter = exports.RolesGuard = exports.ROLES_KEY = exports.Roles = exports.fetchJson = exports.fetchEnvelopeOptional = exports.fetchEnvelope = exports.SA_TOKEN_PATH = exports.SA_NS_PATH = exports.SA_CA_PATH = exports.ClusterCaDispatcher = exports.fetchWithRetry = exports.buildPaginatedResponse = exports.parsePagination = exports.PaginationMeta = exports.PaginationQueryDto = exports.Ctx = exports.requirePipelineRunId = exports.requireProjectId = exports.RAW_RESPONSE_KEY = exports.RawResponse = exports.collectPublicRouteExcludes = exports.registerPublicRouteDeclaration = exports.joinNestPaths = exports.readSwaggerOperationId = exports.readNestHttpVerb = exports.readNestPath = exports.readNestControllerPath = exports.IS_PUBLIC_KEY = exports.Public = void 0;
-exports.REDACT_RESPONSE_KEY = exports.RedactResponse = exports.RedactionInterceptor = exports.RedactionService = exports.IDEMPOTENCY_SERVICE = exports.IDEMPOTENCY_DATA_STORE_CLIENT = exports.DataStoreIdempotencyService = exports.IDEMPOTENCY_RECORD_MODEL = exports.ApiConnectorEnvelope = exports.ConnectorEnvelopePipe = exports.ConnectorWebhookEnvelopeDto = exports.resetOrgAuthorityCensus = exports.orgAuthorityCensus = exports.recordUnprovenOrgAuthority = exports.UNKNOWN_CLIENT_ID = exports.ORG_AUTHORITY_OBSERVATION_LIMIT = exports.resolveOrgAuthorityMode = exports.InvalidOrgAuthorityModeError = exports.ORG_AUTHORITY_MODE_ENV = exports.OrgAuthorityMode = exports.orgAuthorityRequiresProof = exports.isOrgAuthorityProven = exports.resolveOrgAuthority = exports.OrgAuthoritySource = exports.REQUIRE_ORG_CLAIM = exports.RequireOrgClaim = exports.resolveOrgClaim = exports.ORG_CLAIM_KEYS = exports.OrgHeaderName = exports.OrgClaimKey = exports.configureAuthMiddleware = void 0;
+exports.hasPlatformRole = exports.PlatformRole = exports.orgRoleSatisfies = exports.resolveOrgRoleForOrg = exports.resolveOrgRoles = exports.ORG_ROLES_CLAIM_KEYS = exports.OrgRolesClaimKey = exports.ServiceOrOrgRoleGuard = exports.REQUIRE_ORG_ROLE = exports.RequireOrgRole = exports.OrgRoleGuard = exports.REQUIRE_TOKEN_CLASS = exports.RequireTokenClass = exports.TokenClassGuard = exports.isDirectServiceActor = exports.ServiceActorGuard = exports.InternalCallerGuard = exports.ServiceTokenGuard = exports.AUTH_MODULE_OPTIONS = exports.AuthModule = exports.GlobalExceptionFilter = exports.RolesGuard = exports.ROLES_KEY = exports.Roles = exports.fetchJson = exports.fetchEnvelopeOptional = exports.fetchEnvelope = exports.SA_TOKEN_PATH = exports.SA_NS_PATH = exports.SA_CA_PATH = exports.ClusterCaDispatcher = exports.fetchWithRetry = exports.buildPaginatedResponse = exports.parsePagination = exports.PaginationMeta = exports.PaginationQueryDto = exports.Ctx = exports.requirePipelineRunId = exports.requireProjectId = exports.RAW_RESPONSE_KEY = exports.RawResponse = exports.collectPublicRouteExcludes = exports.registerPublicRouteDeclaration = exports.joinNestPaths = exports.readSwaggerOperationId = exports.readNestHttpVerb = exports.readNestPath = exports.readNestControllerPath = exports.IS_PUBLIC_KEY = exports.Public = void 0;
+exports.resolveCallerOrgScope = exports.REDACT_RESPONSE_KEY = exports.RedactResponse = exports.RedactionInterceptor = exports.RedactionService = exports.IDEMPOTENCY_SERVICE = exports.IDEMPOTENCY_DATA_STORE_CLIENT = exports.DataStoreIdempotencyService = exports.IDEMPOTENCY_RECORD_MODEL = exports.ApiConnectorEnvelope = exports.ConnectorEnvelopePipe = exports.ConnectorWebhookEnvelopeDto = exports.resetOrgAuthorityCensus = exports.orgAuthorityCensus = exports.recordUnprovenOrgAuthority = exports.UNKNOWN_CLIENT_ID = exports.ORG_AUTHORITY_OBSERVATION_LIMIT = exports.resolveOrgAuthorityMode = exports.InvalidOrgAuthorityModeError = exports.ORG_AUTHORITY_MODE_ENV = exports.OrgAuthorityMode = exports.orgAuthorityRequiresProof = exports.isOrgAuthorityProven = exports.resolveOrgAuthority = exports.OrgAuthoritySource = exports.REQUIRE_ORG_CLAIM = exports.RequireOrgClaim = exports.resolveOrgClaim = exports.ORG_CLAIM_KEYS = exports.OrgHeaderName = exports.OrgClaimKey = exports.configureAuthMiddleware = exports.PlatformAdminGuard = void 0;
 var body_parsers_1 = require("./body-parsers");
 Object.defineProperty(exports, "applyStandardBodyParsers", { enumerable: true, get: function () { return body_parsers_1.applyStandardBodyParsers; } });
 var cors_config_1 = require("./cors.config");
@@ -140,6 +140,7 @@ Object.defineProperty(exports, "REQUIRE_TOKEN_CLASS", { enumerable: true, get: f
 Object.defineProperty(exports, "OrgRoleGuard", { enumerable: true, get: function () { return auth_1.OrgRoleGuard; } });
 Object.defineProperty(exports, "RequireOrgRole", { enumerable: true, get: function () { return auth_1.RequireOrgRole; } });
 Object.defineProperty(exports, "REQUIRE_ORG_ROLE", { enumerable: true, get: function () { return auth_1.REQUIRE_ORG_ROLE; } });
+Object.defineProperty(exports, "ServiceOrOrgRoleGuard", { enumerable: true, get: function () { return auth_1.ServiceOrOrgRoleGuard; } });
 Object.defineProperty(exports, "OrgRolesClaimKey", { enumerable: true, get: function () { return auth_1.OrgRolesClaimKey; } });
 Object.defineProperty(exports, "ORG_ROLES_CLAIM_KEYS", { enumerable: true, get: function () { return auth_1.ORG_ROLES_CLAIM_KEYS; } });
 Object.defineProperty(exports, "resolveOrgRoles", { enumerable: true, get: function () { return auth_1.resolveOrgRoles; } });
@@ -183,4 +184,6 @@ Object.defineProperty(exports, "RedactionInterceptor", { enumerable: true, get:
 Object.defineProperty(exports, "RedactResponse", { enumerable: true, get: function () { return redaction_1.RedactResponse; } });
 Object.defineProperty(exports, "REDACT_RESPONSE_KEY", { enumerable: true, get: function () { return redaction_1.REDACT_RESPONSE_KEY; } });
 __exportStar(require("./llm-stream/anthropic-adapter"), exports);
+var caller_org_scope_1 = require("./caller-org-scope");
+Object.defineProperty(exports, "resolveCallerOrgScope", { enumerable: true, get: function () { return caller_org_scope_1.resolveCallerOrgScope; } });
 //# sourceMappingURL=index.js.map

package/dist/nestjs/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/nestjs/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;AAAA,+CAGwB;AAFtB,wHAAA,wBAAwB,OAAA;AAG1B,6CAA8C;AAArC,4GAAA,aAAa,OAAA;AACtB,uDAAmD;AAA1C,iHAAA,aAAa,OAAA;AACtB,iFAA8E;AAArE,4IAAA,2BAA2B,OAAA;AACpC,2EAAwE;AAA/D,sIAAA,wBAAwB,OAAA;AACjC,oEAiBqC;AAhBnC,iIAAA,yBAAyB,OAAA;AACzB,+HAAA,uBAAuB,OAAA;AACvB,oHAAA,YAAY,OAAA;AACZ,8HAAA,sBAAsB,OAAA;AACtB,iIAAA,yBAAyB,OAAA;AACzB,8HAAA,sBAAsB,OAAA;AACtB,8HAAA,sBAAsB,OAAA;AAGtB,iIAAA,yBAAyB,OAAA;AAGzB,0HAAA,kBAAkB,OAAA;AAClB,+HAAA,uBAAuB,OAAA;AACvB,wHAAA,gBAAgB,OAAA;AAOlB,4DAMiC;AAL/B,+HAAA,2BAA2B,OAAA;AAC3B,+HAAA,2BAA2B,OAAA;AAC3B,mIAAA,+BAA+B,OAAA;AAC/B,kIAAA,8BAA8B,OAAA;AAC9B,0HAAA,sBAAsB,OAAA;AAKxB,iDAO4B;AAN1B,+HAAA,iCAAiC,OAAA;AACjC,qHAAA,uBAAuB,OAAA;AACvB,sHAAA,wBAAwB,OAAA;AACxB,mHAAA,qBAAqB,OAAA;AACrB,wHAAA,0BAA0B,OAAA;AAG5B,mFAA+E;AAAtE,6IAAA,2BAA2B,OAAA;AACpC,2DAAwD;AAA/C,sHAAA,gBAAgB,OAAA;AACzB,2DAQ8B;AAP5B,0HAAA,oBAAoB,OAAA;AACpB,qHAAA,eAAe,OAAA;AACf,0HAAA,oBAAoB,OAAA;AACpB,4HAAA,sBAAsB,OAAA;AACtB,6HAAA,uBAAuB,OAAA;AACvB,0HAAA,oBAAoB,OAAA;AACpB,uHAAA,iBAAiB,OAAA;AAEnB,iEAGiC;AAF/B,oIAAA,2BAA2B,OAAA;AAG7B,uDAQ4B;AAP1B,0HAAA,sBAAsB,OAAA;AACtB,qIAAA,iCAAiC,OAAA;AACjC,iIAAA,6BAA6B,OAAA;AAM/B,mEAAgE;AAAvD,8HAAA,oBAAoB,OAAA;AAC7B,kEAIoC;AAHlC,8GAAA,OAAO,OAAA;AACP,uHAAA,gBAAgB,OAAA;AAChB,2HAAA,oBAAoB,OAAA;AAKtB,iDAc4B;AAb1B,0GAAA,YAAY,OAAA;AACZ,mHAAA,qBAAqB,OAAA;AACrB,oHAAA,sBAAsB,OAAA;AACtB,+GAAA,iBAAiB,OAAA;AACjB,0HAAA,4BAA4B,OAAA;AAC5B,+HAAA,iCAAiC,OAAA;AACjC,oHAAA,sBAAsB,OAAA;AAQxB,uDAA2D;AAAlD,0GAAA,MAAM,OAAA;AAAE,iHAAA,aAAa,OAAA;AAG9B,6DAM+B;AAL7B,6HAAA,sBAAsB,OAAA;AACtB,mHAAA,YAAY,OAAA;AACZ,uHAAA,gBAAgB,OAAA;AAChB,6HAAA,sBAAsB,OAAA;AACtB,oHAAA,aAAa,OAAA;AAMf,iEAGiC;AAF/B,uIAAA,8BAA8B,OAAA;AAC9B,mIAAA,0BAA0B,OAAA;AAE5B,mEAAyE;AAAhE,qHAAA,WAAW,OAAA;AAAE,0HAAA,gBAAgB,OAAA;AACtC,2DAAwD;AAA/C,sHAAA,gBAAgB,OAAA;AACzB,qEAAiE;AAAxD,+HAAA,oBAAoB,OAAA;AAC7B,iDAAsC;AAA7B,oGAAA,GAAG,OAAA;AACZ,2CAKsB;AAJpB,gHAAA,kBAAkB,OAAA;AAClB,4GAAA,cAAc,OAAA;AACd,6GAAA,eAAe,OAAA;AACf,oHAAA,sBAAsB,OAAA;AAExB,uDAAuE;AAA9D,kHAAA,cAAc,OAAA;AACvB,iEAKiC;AAJ/B,4HAAA,mBAAmB,OAAA;AACnB,mHAAA,UAAU,OAAA;AACV,mHAAA,UAAU,OAAA;AACV,sHAAA,aAAa,OAAA;AAEf,mDAI0B;AAHxB,+GAAA,aAAa,OAAA;AACb,uHAAA,qBAAqB,OAAA;AACrB,2GAAA,SAAS,OAAA;AAEX,qDAAqD;AAA5C,wGAAA,KAAK,OAAA;AAAE,4GAAA,SAAS,OAAA;AACzB,6CAA2C;AAAlC,yGAAA,UAAU,OAAA;AACnB,qEAAkE;AAAzD,gIAAA,qBAAqB,OAAA;AAC9B,+BAsEgB;AArEd,kGAAA,UAAU,OAAA;AACV,2GAAA,mBAAmB,OAAA;AAGnB,yGAAA,iBAAiB,OAAA;AACjB,2GAAA,mBAAmB,OAAA;AACnB,yGAAA,iBAAiB,OAAA;AACjB,4GAAA,oBAAoB,OAAA;AAKpB,uGAAA,eAAe,OAAA;AACf,yGAAA,iBAAiB,OAAA;AACjB,2GAAA,mBAAmB,OAAA;AAGnB,oGAAA,YAAY,OAAA;AACZ,sGAAA,cAAc,OAAA;AACd,wGAAA,gBAAgB,OAAA;AAChB,wGAAA,gBAAgB,OAAA;AAChB,4GAAA,oBAAoB,OAAA;AACpB,uGAAA,eAAe,OAAA;AACf,4GAAA,oBAAoB,OAAA;AACpB,wGAAA,gBAAgB,OAAA;AAIhB,oGAAA,YAAY,OAAA;AACZ,uGAAA,eAAe,OAAA;AACf,0GAAA,kBAAkB,OAAA;AAClB,+GAAA,uBAAuB,OAAA;AAMvB,mGAAA,WAAW,OAAA;AACX,qGAAA,aAAa,OAAA;AACb,sGAAA,cAAc,OAAA;AACd,uGAAA,eAAe,OAAA;AAIf,uGAAA,eAAe,OAAA;AACf,yGAAA,iBAAiB,OAAA;AAOjB,0GAAA,kBAAkB,OAAA;AAGlB,2GAAA,mBAAmB,OAAA;AACnB,4GAAA,oBAAoB,OAAA;AACpB,iHAAA,yBAAyB,OAAA;AACzB,wGAAA,gBAAgB,OAAA;AAChB,8GAAA,sBAAsB,OAAA;AACtB,oHAAA,4BAA4B,OAAA;AAC5B,+GAAA,uBAAuB,OAAA;AACvB,uHAAA,+BAA+B,OAAA;AAC/B,yGAAA,iBAAiB,OAAA;AAGjB,kHAAA,0BAA0B,OAAA;AAC1B,0GAAA,kBAAkB,OAAA;AAClB,+GAAA,uBAAuB,OAAA;AAEzB,2DAM8B;AAL5B,iIAAA,2BAA2B,OAAA;AAC3B,2HAAA,qBAAqB,OAAA;AACrB,0HAAA,oBAAoB,OAAA;AAItB,6CASuB;AANrB,uHAAA,wBAAwB,OAAA;AACxB,0HAAA,2BAA2B,OAAA;AAC3B,4HAAA,6BAA6B,OAAA;AAG7B,kHAAA,mBAAmB,OAAA;AAIrB,yCAKqB;AAJnB,6GAAA,gBAAgB,OAAA;AAChB,iHAAA,oBAAoB,OAAA;AACpB,2GAAA,cAAc,OAAA;AACd,gHAAA,mBAAmB,OAAA;AAIrB,iEAA+C"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/nestjs/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;AAAA,+CAGwB;AAFtB,wHAAA,wBAAwB,OAAA;AAG1B,6CAA8C;AAArC,4GAAA,aAAa,OAAA;AACtB,uDAAmD;AAA1C,iHAAA,aAAa,OAAA;AACtB,iFAA8E;AAArE,4IAAA,2BAA2B,OAAA;AACpC,2EAAwE;AAA/D,sIAAA,wBAAwB,OAAA;AACjC,oEAiBqC;AAhBnC,iIAAA,yBAAyB,OAAA;AACzB,+HAAA,uBAAuB,OAAA;AACvB,oHAAA,YAAY,OAAA;AACZ,8HAAA,sBAAsB,OAAA;AACtB,iIAAA,yBAAyB,OAAA;AACzB,8HAAA,sBAAsB,OAAA;AACtB,8HAAA,sBAAsB,OAAA;AAGtB,iIAAA,yBAAyB,OAAA;AAGzB,0HAAA,kBAAkB,OAAA;AAClB,+HAAA,uBAAuB,OAAA;AACvB,wHAAA,gBAAgB,OAAA;AAOlB,4DAMiC;AAL/B,+HAAA,2BAA2B,OAAA;AAC3B,+HAAA,2BAA2B,OAAA;AAC3B,mIAAA,+BAA+B,OAAA;AAC/B,kIAAA,8BAA8B,OAAA;AAC9B,0HAAA,sBAAsB,OAAA;AAKxB,iDAO4B;AAN1B,+HAAA,iCAAiC,OAAA;AACjC,qHAAA,uBAAuB,OAAA;AACvB,sHAAA,wBAAwB,OAAA;AACxB,mHAAA,qBAAqB,OAAA;AACrB,wHAAA,0BAA0B,OAAA;AAG5B,mFAA+E;AAAtE,6IAAA,2BAA2B,OAAA;AACpC,2DAAwD;AAA/C,sHAAA,gBAAgB,OAAA;AACzB,2DAQ8B;AAP5B,0HAAA,oBAAoB,OAAA;AACpB,qHAAA,eAAe,OAAA;AACf,0HAAA,oBAAoB,OAAA;AACpB,4HAAA,sBAAsB,OAAA;AACtB,6HAAA,uBAAuB,OAAA;AACvB,0HAAA,oBAAoB,OAAA;AACpB,uHAAA,iBAAiB,OAAA;AAEnB,iEAGiC;AAF/B,oIAAA,2BAA2B,OAAA;AAG7B,uDAQ4B;AAP1B,0HAAA,sBAAsB,OAAA;AACtB,qIAAA,iCAAiC,OAAA;AACjC,iIAAA,6BAA6B,OAAA;AAM/B,mEAAgE;AAAvD,8HAAA,oBAAoB,OAAA;AAC7B,kEAIoC;AAHlC,8GAAA,OAAO,OAAA;AACP,uHAAA,gBAAgB,OAAA;AAChB,2HAAA,oBAAoB,OAAA;AAKtB,iDAc4B;AAb1B,0GAAA,YAAY,OAAA;AACZ,mHAAA,qBAAqB,OAAA;AACrB,oHAAA,sBAAsB,OAAA;AACtB,+GAAA,iBAAiB,OAAA;AACjB,0HAAA,4BAA4B,OAAA;AAC5B,+HAAA,iCAAiC,OAAA;AACjC,oHAAA,sBAAsB,OAAA;AAQxB,uDAA2D;AAAlD,0GAAA,MAAM,OAAA;AAAE,iHAAA,aAAa,OAAA;AAG9B,6DAM+B;AAL7B,6HAAA,sBAAsB,OAAA;AACtB,mHAAA,YAAY,OAAA;AACZ,uHAAA,gBAAgB,OAAA;AAChB,6HAAA,sBAAsB,OAAA;AACtB,oHAAA,aAAa,OAAA;AAMf,iEAGiC;AAF/B,uIAAA,8BAA8B,OAAA;AAC9B,mIAAA,0BAA0B,OAAA;AAE5B,mEAAyE;AAAhE,qHAAA,WAAW,OAAA;AAAE,0HAAA,gBAAgB,OAAA;AACtC,2DAAwD;AAA/C,sHAAA,gBAAgB,OAAA;AACzB,qEAAiE;AAAxD,+HAAA,oBAAoB,OAAA;AAC7B,iDAAsC;AAA7B,oGAAA,GAAG,OAAA;AACZ,2CAKsB;AAJpB,gHAAA,kBAAkB,OAAA;AAClB,4GAAA,cAAc,OAAA;AACd,6GAAA,eAAe,OAAA;AACf,oHAAA,sBAAsB,OAAA;AAExB,uDAAuE;AAA9D,kHAAA,cAAc,OAAA;AACvB,iEAKiC;AAJ/B,4HAAA,mBAAmB,OAAA;AACnB,mHAAA,UAAU,OAAA;AACV,mHAAA,UAAU,OAAA;AACV,sHAAA,aAAa,OAAA;AAEf,mDAI0B;AAHxB,+GAAA,aAAa,OAAA;AACb,uHAAA,qBAAqB,OAAA;AACrB,2GAAA,SAAS,OAAA;AAEX,qDAAqD;AAA5C,wGAAA,KAAK,OAAA;AAAE,4GAAA,SAAS,OAAA;AACzB,6CAA2C;AAAlC,yGAAA,UAAU,OAAA;AACnB,qEAAkE;AAAzD,gIAAA,qBAAqB,OAAA;AAC9B,+BAyEgB;AAxEd,kGAAA,UAAU,OAAA;AACV,2GAAA,mBAAmB,OAAA;AAGnB,yGAAA,iBAAiB,OAAA;AACjB,2GAAA,mBAAmB,OAAA;AACnB,yGAAA,iBAAiB,OAAA;AACjB,4GAAA,oBAAoB,OAAA;AAKpB,uGAAA,eAAe,OAAA;AACf,yGAAA,iBAAiB,OAAA;AACjB,2GAAA,mBAAmB,OAAA;AAGnB,oGAAA,YAAY,OAAA;AACZ,sGAAA,cAAc,OAAA;AACd,wGAAA,gBAAgB,OAAA;AAGhB,6GAAA,qBAAqB,OAAA;AACrB,wGAAA,gBAAgB,OAAA;AAChB,4GAAA,oBAAoB,OAAA;AACpB,uGAAA,eAAe,OAAA;AACf,4GAAA,oBAAoB,OAAA;AACpB,wGAAA,gBAAgB,OAAA;AAIhB,oGAAA,YAAY,OAAA;AACZ,uGAAA,eAAe,OAAA;AACf,0GAAA,kBAAkB,OAAA;AAClB,+GAAA,uBAAuB,OAAA;AAMvB,mGAAA,WAAW,OAAA;AACX,qGAAA,aAAa,OAAA;AACb,sGAAA,cAAc,OAAA;AACd,uGAAA,eAAe,OAAA;AAIf,uGAAA,eAAe,OAAA;AACf,yGAAA,iBAAiB,OAAA;AAOjB,0GAAA,kBAAkB,OAAA;AAGlB,2GAAA,mBAAmB,OAAA;AACnB,4GAAA,oBAAoB,OAAA;AACpB,iHAAA,yBAAyB,OAAA;AACzB,wGAAA,gBAAgB,OAAA;AAChB,8GAAA,sBAAsB,OAAA;AACtB,oHAAA,4BAA4B,OAAA;AAC5B,+GAAA,uBAAuB,OAAA;AACvB,uHAAA,+BAA+B,OAAA;AAC/B,yGAAA,iBAAiB,OAAA;AAGjB,kHAAA,0BAA0B,OAAA;AAC1B,0GAAA,kBAAkB,OAAA;AAClB,+GAAA,uBAAuB,OAAA;AAEzB,2DAM8B;AAL5B,iIAAA,2BAA2B,OAAA;AAC3B,2HAAA,qBAAqB,OAAA;AACrB,0HAAA,oBAAoB,OAAA;AAItB,6CASuB;AANrB,uHAAA,wBAAwB,OAAA;AACxB,0HAAA,2BAA2B,OAAA;AAC3B,4HAAA,6BAA6B,OAAA;AAG7B,kHAAA,mBAAmB,OAAA;AAIrB,yCAKqB;AAJnB,6GAAA,gBAAgB,OAAA;AAChB,iHAAA,oBAAoB,OAAA;AACpB,2GAAA,cAAc,OAAA;AACd,gHAAA,mBAAmB,OAAA;AAIrB,iEAA+C;AAK/C,uDAA2D;AAAlD,yHAAA,qBAAqB,OAAA"}

package/dist/nestjs/request-context.middleware.d.ts

@@ -17,6 +17,7 @@ export declare class RequestContextMiddleware implements NestMiddleware {
     private readHeader;
     private extractBearerToken;
     private decodeJwtPayload;
+    private assertOrgHeaderGrammar;
     private assertOrgClaimMatchesHeader;
     private resolveAndRecordOrgAuthority;
     private resolveActorId;

package/dist/nestjs/request-context.middleware.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"request-context.middleware.d.ts","sourceRoot":"","sources":["../../src/nestjs/request-context.middleware.ts"],"names":[],"mappings":"AAAA,OAAO,EAKL,cAAc,EACf,MAAM,gBAAgB,CAAC;AAExB,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AACrD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAwCzD,UAAU,wBAAwB;IAChC,QAAQ,CAAC,OAAO,EAAE,mBAAmB,CAAC;IACtC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,UAAU,kBAAmB,SAAQ,wBAAwB;IAC3D,CAAC,eAAe,CAAC,CAAC,EAAE,cAAc,CAAC;CACpC;AAED,qBACa,wBAAyB,YAAW,cAAc;IAC7D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA6C;IAEpE,GAAG,CAAC,GAAG,EAAE,kBAAkB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,IAAI,GAAG,IAAI;IAoJnE,OAAO,CAAC,UAAU;IAWlB,OAAO,CAAC,kBAAkB;IAc1B,OAAO,CAAC,gBAAgB;IAgCxB,OAAO,CAAC,2BAA2B;IAsCnC,OAAO,CAAC,4BAA4B;IAkDpC,OAAO,CAAC,cAAc;IAQtB,OAAO,CAAC,wBAAwB;IAKhC,OAAO,CAAC,iBAAiB;IAazB,OAAO,CAAC,sBAAsB;CAK/B"}
+{"version":3,"file":"request-context.middleware.d.ts","sourceRoot":"","sources":["../../src/nestjs/request-context.middleware.ts"],"names":[],"mappings":"AAAA,OAAO,EAKL,cAAc,EACf,MAAM,gBAAgB,CAAC;AAExB,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AACrD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAyCzD,UAAU,wBAAwB;IAChC,QAAQ,CAAC,OAAO,EAAE,mBAAmB,CAAC;IACtC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,UAAU,kBAAmB,SAAQ,wBAAwB;IAC3D,CAAC,eAAe,CAAC,CAAC,EAAE,cAAc,CAAC;CACpC;AAED,qBACa,wBAAyB,YAAW,cAAc;IAC7D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA6C;IAEpE,GAAG,CAAC,GAAG,EAAE,kBAAkB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,IAAI,GAAG,IAAI;IAqJnE,OAAO,CAAC,UAAU;IAWlB,OAAO,CAAC,kBAAkB;IAc1B,OAAO,CAAC,gBAAgB;IA6ExB,OAAO,CAAC,sBAAsB;IA2B9B,OAAO,CAAC,2BAA2B;IAsCnC,OAAO,CAAC,4BAA4B;IAkDpC,OAAO,CAAC,cAAc;IAQtB,OAAO,CAAC,wBAAwB;IAKhC,OAAO,CAAC,iBAAiB;IAazB,OAAO,CAAC,sBAAsB;CAK/B"}

package/dist/nestjs/request-context.middleware.js

@@ -11,6 +11,7 @@ exports.RequestContextMiddleware = void 0;
 const common_1 = require("@nestjs/common");
 const node_crypto_1 = require("node:crypto");
 const request_context_1 = require("../lib/request-context");
+const space_1 = require("@xemahq/kernel-contracts/space");
 const approval_mode_1 = require("../lib/approval-mode");
 const org_claim_1 = require("../lib/auth/org-claim");
 const org_role_1 = require("../lib/auth/org-role");
@@ -42,6 +43,7 @@ let RequestContextMiddleware = RequestContextMiddleware_1 = class RequestContext
         if (!orgId && actorType !== 'service') {
             throw new common_1.BadRequestException(`Missing required header: ${org_claim_1.OrgHeaderName.Canonical}`);
         }
+        this.assertOrgHeaderGrammar(orgId);
         const resolvedOrgId = orgId ?? '';
         this.assertOrgClaimMatchesHeader(claims, resolvedOrgId, orgHeaderName);
         const orgAuthority = this.resolveAndRecordOrgAuthority(claims, resolvedOrgId, { tokenClass, subjectKind, clientId, delegated: actorChain.length > 0 }, `${requestMethod} ${requestUrl}`, correlationId);
@@ -123,6 +125,19 @@ let RequestContextMiddleware = RequestContextMiddleware_1 = class RequestContext
             throw new common_1.BadRequestException('Invalid JWT token payload');
         }
     }
+    assertOrgHeaderGrammar(orgId) {
+        if (orgId === undefined || orgId.length === 0) {
+            return;
+        }
+        if (space_1.SPACE_SEGMENT_ID_PATTERN.test(orgId)) {
+            return;
+        }
+        const shown = orgId.length > 64 ? `${orgId.slice(0, 64)}…` : orgId;
+        throw new common_1.BadRequestException(`Invalid ${org_claim_1.OrgHeaderName.Canonical} header: "${shown}" is not a legal ` +
+            `Space path segment. It must match ${space_1.SPACE_SEGMENT_ID_PATTERN} — ` +
+            `start alphanumeric, then alphanumerics plus "_", "." or "-". No "/", ` +
+            `no whitespace, no "@".`);
+    }
     assertOrgClaimMatchesHeader(claims, headerValue, headerName) {
         const resolved = (0, org_claim_1.resolveOrgClaim)(claims);
         if (!resolved) {

package/dist/nestjs/request-context.middleware.js.map

@@ -1 +1 @@
-{"version":3,"file":"request-context.middleware.js","sourceRoot":"","sources":["../../src/nestjs/request-context.middleware.ts"],"names":[],"mappings":";;;;;;;;;;AAAA,2CAMwB;AACxB,6CAAyC;AAGzC,4DAAyD;AAOzD,wDAAkE;AAClE,qDAAoF;AACpF,mDAAuD;AACvD,6DAMmC;AACnC,uFAGgD;AAChD,sEAIqC;AACrC,8DAAsE;AA0B/D,IAAM,wBAAwB,gCAA9B,MAAM,wBAAwB;IAClB,MAAM,GAAG,IAAI,eAAM,CAAC,0BAAwB,CAAC,IAAI,CAAC,CAAC;IAEpE,GAAG,CAAC,GAAuB,EAAE,IAAa,EAAE,IAAgB;QAI1D,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,yBAAa,CAAC,SAAS,CAAC,CAAC;QAC5D,MAAM,aAAa,GAAG,yBAAa,CAAC,SAAS,CAAC;QAC9C,MAAM,UAAU,GAAG,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC;QACpD,MAAM,aAAa,GAAG,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC;QACvC,MAAM,SAAS,GACb,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,cAAc,CAAC;YACpC,IAAI,CAAC,wBAAwB,CAAC,UAAU,CAAC,CAAC;QAC5C,MAAM,aAAa,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,mBAAmB,CAAC,IAAI,SAAS,CAAC;QAC7E,MAAM,gBAAgB,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,sBAAsB,CAAC,IAAI,SAAS,CAAC;QACnF,MAAM,oBAAoB,GAAG,IAAI,CAAC,iBAAiB,CACjD,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,0BAA0B,CAAC,CACjD,CAAC;QAEF,MAAM,KAAK,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC;QAC3C,MAAM,aAAa,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,kBAAkB,CAAC,IAAI,IAAA,wBAAU,GAAE,CAAC;QAC/E,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,gBAAgB,CAAC,IAAI,SAAS,CAAC;QACxE,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAK5C,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,GACxD,IAAA,gDAAyB,EAAC,MAAM,CAAC,CAAC;QAIpC,MAAM,UAAU,GAAG,IAAA,8CAA2B,EAAC,MAAM,CAAC,CAAC;QAGvD,MAAM,QAAQ,GAAG,IAAA,gDAAyB,EAAC,MAAM,CAAC,CAAC;QACnD,MAAM,QAAQ,GAAG,IAAA,0BAAe,EAAC,MAAM,CAAC,CAAC;QAazC,IAAI,CAAC,KAAK,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YACtC,MAAM,IAAI,4BAAmB,CAC3B,4BAA4B,yBAAa,CAAC,SAAS,EAAE,CACtD,CAAC;QACJ,CAAC;QACD,MAAM,aAAa,GAAG,KAAK,IAAI,EAAE,CAAC;QAWlC,IAAI,CAAC,2BAA2B,CAAC,MAAM,EAAE,aAAa,EAAE,aAAa,CAAC,CAAC;QAavE,MAAM,YAAY,GAAG,IAAI,CAAC,4BAA4B,CACpD,MAAM,EACN,aAAa,EACb,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,EACvE,GAAG,aAAa,IAAI,UAAU,EAAE,EAChC,aAAa,CACd,CAAC;QAUF,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC;gBACd,OAAO,EAAE,mBAAmB;gBAC5B,KAAK,EAAE,OAAO;gBACd,KAAK;gBACL,KAAK;gBACL,SAAS;gBACT,KAAK,EAAE,GAAG,aAAa,IAAI,UAAU,EAAE;gBACvC,aAAa;aACd,CAAC,CAAC;QACL,CAAC;QAED,MAAM,OAAO,GAAe;YAC1B,IAAI,EAAE,WAAW;YACjB,EAAE,EAAE,OAAO;YACX,KAAK;YACL,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/D,CAAC;QAEF,GAAG,CAAC,iCAAe,CAAC,GAAG;YACrB,KAAK,EAAE,aAAa;YACpB,YAAY;YACZ,SAAS;YACT,OAAO;YACP,UAAU;YACV,UAAU;YACV,OAAO;YACP,SAAS;YACT,aAAa;YACb,WAAW;YACX,aAAa,EAAE,UAAU,KAAK,EAAE;YAChC,WAAW,EAAE,KAAK;YAClB,aAAa;YACb,gBAAgB;YAChB,oBAAoB;YACpB,KAAK;YACL,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/C,OAAO,EAAE,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,GAAyB,CAAC;YACtE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzD,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxE,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1C,CAAC;QAEF,IAAI,EAAE,CAAC;IACT,CAAC;IAWO,UAAU,CAChB,GAA6B,EAC7B,IAAY;QAEZ,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QAC5C,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAC3C,CAAC;IAEO,kBAAkB,CAAC,GAA6B;QACtD,MAAM,aAAa,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;QAC5D,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,MAAM,IAAI,4BAAmB,CAAC,wCAAwC,CAAC,CAAC;QAC1E,CAAC;QACD,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACjD,IAAI,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAC;YAClC,MAAM,IAAI,4BAAmB,CAC3B,+DAA+D,CAChE,CAAC;QACJ,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,gBAAgB,CAAC,KAAa;QACpC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YAKpC,MAAM,IAAI,4BAAmB,CAC3B,2EAA2E,KAAK,CAAC,MAAM,GAAG;gBACxF,iBAAiB,KAAK,CAAC,MAAM,aAAa,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CACnE,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACxE,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YACxC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;gBAC5C,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;YAC3C,CAAC;YACD,OAAO,OAAkC,CAAC;QAC5C,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,4BAAmB,CAAC,2BAA2B,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IAUO,2BAA2B,CACjC,MAA+B,EAC/B,WAAmB,EACnB,UAAyB;QAEzB,MAAM,QAAQ,GAAG,IAAA,2BAAe,EAAC,MAAM,CAAC,CAAC;QACzC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO;QACT,CAAC;QACD,IAAI,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,WAAW,CAAC,WAAW,EAAE,EAAE,CAAC;YAC/D,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;gBACf,OAAO,EAAE,uBAAuB;gBAChC,KAAK,EAAE,QAAQ,CAAC,GAAG;gBACnB,UAAU,EAAE,QAAQ,CAAC,KAAK;gBAC1B,MAAM,EAAE,UAAU;gBAClB,WAAW;aACZ,CAAC,CAAC;YACH,MAAM,IAAI,2BAAkB,CAC1B,GAAG,UAAU,KAAK,WAAW,IAAI,SAAS,mBAAmB;gBAC3D,OAAO,QAAQ,CAAC,GAAG,6BAA6B,CACnD,CAAC;QACJ,CAAC;IACH,CAAC;IAgBO,4BAA4B,CAClC,MAA+B,EAC/B,aAAqB,EACrB,KAKC,EACD,KAAa,EACb,aAAqB;QAErB,MAAM,OAAO,GAAG,IAAA,mCAAmB,EAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QAC3D,IAAI,CAAC,IAAA,yCAAyB,EAAC,OAAO,CAAC,EAAE,CAAC;YACxC,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,MAAM,IAAI,GAAG,IAAA,uCAAuB,GAAE,CAAC;QACvC,MAAM,WAAW,GAAG;YAClB,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,8CAAiB;YAC7C,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,SAAS,EAAE,KAAK,CAAC,SAAS;SAC3B,CAAC;QACF,IAAI,IAAA,uDAA0B,EAAC,WAAW,CAAC,EAAE,CAAC;YAC5C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;gBACf,OAAO,EAAE,wBAAwB;gBACjC,IAAI;gBACJ,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,KAAK,EAAE,OAAO,CAAC,aAAa;gBAC5B,GAAG,WAAW;gBACd,KAAK;gBACL,aAAa;aACd,CAAC,CAAC;QACL,CAAC;QAED,IAAI,IAAI,KAAK,gCAAgB,CAAC,OAAO,EAAE,CAAC;YACtC,MAAM,IAAI,2BAAkB,CAAC;gBAC3B,IAAI,EAAE,wBAAwB;gBAC9B,OAAO,EACL,uBAAuB,yBAAa,CAAC,SAAS,GAAG;oBACjD,IAAI,OAAO,CAAC,aAAa,4CAA4C;oBACrE,GAAG,uBAAW,CAAC,SAAS,uCAAuC;oBAC/D,6DAA6D;aAChE,CAAC,CAAC;QACL,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,cAAc,CAAC,MAA+B;QACpD,MAAM,OAAO,GAAG,IAAA,uCAAgB,EAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,4BAAmB,CAAC,wCAAwC,CAAC,CAAC;QAC1E,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,wBAAwB,CAAC,IAAY;QAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;QACjD,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;IAEO,iBAAiB,CACvB,KAAyB;QAEzB,IAAI,CAAC,KAAK;YAAE,OAAO,SAAS,CAAC;QAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;QAClC,IAAI,0CAA0B,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1C,OAAO,KAA6B,CAAC;QACvC,CAAC;QACD,MAAM,IAAI,4BAAmB,CAC3B,4CAA4C,KAAK,uCAAuC,CACzF,CAAC;IACJ,CAAC;IAEO,sBAAsB,CAAC,MAA0B;QACvD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QAC5D,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACjD,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;CACF,CAAA;AAvUY,4DAAwB;mCAAxB,wBAAwB;IADpC,IAAA,mBAAU,GAAE;GACA,wBAAwB,CAuUpC"}
+{"version":3,"file":"request-context.middleware.js","sourceRoot":"","sources":["../../src/nestjs/request-context.middleware.ts"],"names":[],"mappings":";;;;;;;;;;AAAA,2CAMwB;AACxB,6CAAyC;AAGzC,4DAAyD;AAMzD,0DAA0E;AAE1E,wDAAkE;AAClE,qDAAoF;AACpF,mDAAuD;AACvD,6DAMmC;AACnC,uFAGgD;AAChD,sEAIqC;AACrC,8DAAsE;AA0B/D,IAAM,wBAAwB,gCAA9B,MAAM,wBAAwB;IAClB,MAAM,GAAG,IAAI,eAAM,CAAC,0BAAwB,CAAC,IAAI,CAAC,CAAC;IAEpE,GAAG,CAAC,GAAuB,EAAE,IAAa,EAAE,IAAgB;QAI1D,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,yBAAa,CAAC,SAAS,CAAC,CAAC;QAC5D,MAAM,aAAa,GAAG,yBAAa,CAAC,SAAS,CAAC;QAC9C,MAAM,UAAU,GAAG,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC;QACpD,MAAM,aAAa,GAAG,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC;QACvC,MAAM,SAAS,GACb,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,cAAc,CAAC;YACpC,IAAI,CAAC,wBAAwB,CAAC,UAAU,CAAC,CAAC;QAC5C,MAAM,aAAa,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,mBAAmB,CAAC,IAAI,SAAS,CAAC;QAC7E,MAAM,gBAAgB,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,sBAAsB,CAAC,IAAI,SAAS,CAAC;QACnF,MAAM,oBAAoB,GAAG,IAAI,CAAC,iBAAiB,CACjD,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,0BAA0B,CAAC,CACjD,CAAC;QAEF,MAAM,KAAK,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC;QAC3C,MAAM,aAAa,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,kBAAkB,CAAC,IAAI,IAAA,wBAAU,GAAE,CAAC;QAC/E,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,gBAAgB,CAAC,IAAI,SAAS,CAAC;QACxE,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAK5C,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,GACxD,IAAA,gDAAyB,EAAC,MAAM,CAAC,CAAC;QAIpC,MAAM,UAAU,GAAG,IAAA,8CAA2B,EAAC,MAAM,CAAC,CAAC;QAGvD,MAAM,QAAQ,GAAG,IAAA,gDAAyB,EAAC,MAAM,CAAC,CAAC;QACnD,MAAM,QAAQ,GAAG,IAAA,0BAAe,EAAC,MAAM,CAAC,CAAC;QAazC,IAAI,CAAC,KAAK,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YACtC,MAAM,IAAI,4BAAmB,CAC3B,4BAA4B,yBAAa,CAAC,SAAS,EAAE,CACtD,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,aAAa,GAAG,KAAK,IAAI,EAAE,CAAC;QAWlC,IAAI,CAAC,2BAA2B,CAAC,MAAM,EAAE,aAAa,EAAE,aAAa,CAAC,CAAC;QAavE,MAAM,YAAY,GAAG,IAAI,CAAC,4BAA4B,CACpD,MAAM,EACN,aAAa,EACb,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,EACvE,GAAG,aAAa,IAAI,UAAU,EAAE,EAChC,aAAa,CACd,CAAC;QAUF,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC;gBACd,OAAO,EAAE,mBAAmB;gBAC5B,KAAK,EAAE,OAAO;gBACd,KAAK;gBACL,KAAK;gBACL,SAAS;gBACT,KAAK,EAAE,GAAG,aAAa,IAAI,UAAU,EAAE;gBACvC,aAAa;aACd,CAAC,CAAC;QACL,CAAC;QAED,MAAM,OAAO,GAAe;YAC1B,IAAI,EAAE,WAAW;YACjB,EAAE,EAAE,OAAO;YACX,KAAK;YACL,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/D,CAAC;QAEF,GAAG,CAAC,iCAAe,CAAC,GAAG;YACrB,KAAK,EAAE,aAAa;YACpB,YAAY;YACZ,SAAS;YACT,OAAO;YACP,UAAU;YACV,UAAU;YACV,OAAO;YACP,SAAS;YACT,aAAa;YACb,WAAW;YACX,aAAa,EAAE,UAAU,KAAK,EAAE;YAChC,WAAW,EAAE,KAAK;YAClB,aAAa;YACb,gBAAgB;YAChB,oBAAoB;YACpB,KAAK;YACL,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/C,OAAO,EAAE,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,GAAyB,CAAC;YACtE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzD,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxE,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1C,CAAC;QAEF,IAAI,EAAE,CAAC;IACT,CAAC;IAWO,UAAU,CAChB,GAA6B,EAC7B,IAAY;QAEZ,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QAC5C,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAC3C,CAAC;IAEO,kBAAkB,CAAC,GAA6B;QACtD,MAAM,aAAa,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;QAC5D,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,MAAM,IAAI,4BAAmB,CAAC,wCAAwC,CAAC,CAAC;QAC1E,CAAC;QACD,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACjD,IAAI,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAC;YAClC,MAAM,IAAI,4BAAmB,CAC3B,+DAA+D,CAChE,CAAC;QACJ,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,gBAAgB,CAAC,KAAa;QACpC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YAKpC,MAAM,IAAI,4BAAmB,CAC3B,2EAA2E,KAAK,CAAC,MAAM,GAAG;gBACxF,iBAAiB,KAAK,CAAC,MAAM,aAAa,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CACnE,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACxE,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YACxC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;gBAC5C,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;YAC3C,CAAC;YACD,OAAO,OAAkC,CAAC;QAC5C,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,4BAAmB,CAAC,2BAA2B,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IAuDO,sBAAsB,CAAC,KAAyB;QACtD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9C,OAAO;QACT,CAAC;QACD,IAAI,gCAAwB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACzC,OAAO;QACT,CAAC;QAID,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;QACnE,MAAM,IAAI,4BAAmB,CAC3B,WAAW,yBAAa,CAAC,SAAS,aAAa,KAAK,mBAAmB;YACrE,qCAAqC,gCAAwB,KAAK;YAClE,uEAAuE;YACvE,wBAAwB,CAC3B,CAAC;IACJ,CAAC;IAUO,2BAA2B,CACjC,MAA+B,EAC/B,WAAmB,EACnB,UAAyB;QAEzB,MAAM,QAAQ,GAAG,IAAA,2BAAe,EAAC,MAAM,CAAC,CAAC;QACzC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO;QACT,CAAC;QACD,IAAI,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,WAAW,CAAC,WAAW,EAAE,EAAE,CAAC;YAC/D,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;gBACf,OAAO,EAAE,uBAAuB;gBAChC,KAAK,EAAE,QAAQ,CAAC,GAAG;gBACnB,UAAU,EAAE,QAAQ,CAAC,KAAK;gBAC1B,MAAM,EAAE,UAAU;gBAClB,WAAW;aACZ,CAAC,CAAC;YACH,MAAM,IAAI,2BAAkB,CAC1B,GAAG,UAAU,KAAK,WAAW,IAAI,SAAS,mBAAmB;gBAC3D,OAAO,QAAQ,CAAC,GAAG,6BAA6B,CACnD,CAAC;QACJ,CAAC;IACH,CAAC;IAgBO,4BAA4B,CAClC,MAA+B,EAC/B,aAAqB,EACrB,KAKC,EACD,KAAa,EACb,aAAqB;QAErB,MAAM,OAAO,GAAG,IAAA,mCAAmB,EAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QAC3D,IAAI,CAAC,IAAA,yCAAyB,EAAC,OAAO,CAAC,EAAE,CAAC;YACxC,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,MAAM,IAAI,GAAG,IAAA,uCAAuB,GAAE,CAAC;QACvC,MAAM,WAAW,GAAG;YAClB,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,8CAAiB;YAC7C,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,SAAS,EAAE,KAAK,CAAC,SAAS;SAC3B,CAAC;QACF,IAAI,IAAA,uDAA0B,EAAC,WAAW,CAAC,EAAE,CAAC;YAC5C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;gBACf,OAAO,EAAE,wBAAwB;gBACjC,IAAI;gBACJ,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,KAAK,EAAE,OAAO,CAAC,aAAa;gBAC5B,GAAG,WAAW;gBACd,KAAK;gBACL,aAAa;aACd,CAAC,CAAC;QACL,CAAC;QAED,IAAI,IAAI,KAAK,gCAAgB,CAAC,OAAO,EAAE,CAAC;YACtC,MAAM,IAAI,2BAAkB,CAAC;gBAC3B,IAAI,EAAE,wBAAwB;gBAC9B,OAAO,EACL,uBAAuB,yBAAa,CAAC,SAAS,GAAG;oBACjD,IAAI,OAAO,CAAC,aAAa,4CAA4C;oBACrE,GAAG,uBAAW,CAAC,SAAS,uCAAuC;oBAC/D,6DAA6D;aAChE,CAAC,CAAC;QACL,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,cAAc,CAAC,MAA+B;QACpD,MAAM,OAAO,GAAG,IAAA,uCAAgB,EAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,4BAAmB,CAAC,wCAAwC,CAAC,CAAC;QAC1E,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,wBAAwB,CAAC,IAAY;QAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;QACjD,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;IAEO,iBAAiB,CACvB,KAAyB;QAEzB,IAAI,CAAC,KAAK;YAAE,OAAO,SAAS,CAAC;QAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;QAClC,IAAI,0CAA0B,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1C,OAAO,KAA6B,CAAC;QACvC,CAAC;QACD,MAAM,IAAI,4BAAmB,CAC3B,4CAA4C,KAAK,uCAAuC,CACzF,CAAC;IACJ,CAAC;IAEO,sBAAsB,CAAC,MAA0B;QACvD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QAC5D,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACjD,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;CACF,CAAA;AAhZY,4DAAwB;mCAAxB,wBAAwB;IADpC,IAAA,mBAAU,GAAE;GACA,wBAAwB,CAgZpC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xemahq/platform-common",
-  "version": "0.23.0",
+  "version": "0.25.0",
   "description": "Shared NestJS building blocks for Xema services — auth guards, response redaction, CORS configuration, and crypto helpers.",
   "license": "Apache-2.0",
   "author": "Neuralchowder Inc. <developer@xema.dev> (https://xema.dev)",
@@ -62,7 +62,7 @@
     "rxjs": "7.8.2",
     "ts-jest": "^29.4.9",
     "typescript": "5.9.3",
-    "@xemahq/kernel-contracts": "^30.1.0"
+    "@xemahq/kernel-contracts": "^30.3.0"
   },
   "exports": {
     ".": {