@xemahq/platform-common 0.29.0 → 0.30.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/database/biome-database.d.ts +2 -11
- package/dist/database/biome-database.d.ts.map +1 -1
- package/dist/database/biome-database.js +4 -24
- package/dist/database/biome-database.js.map +1 -1
- package/dist/database/idempotency-record-schema.d.ts +6 -0
- package/dist/database/idempotency-record-schema.d.ts.map +1 -0
- package/dist/database/idempotency-record-schema.js +102 -0
- package/dist/database/idempotency-record-schema.js.map +1 -0
- package/dist/database/release-intent-schema.d.ts +6 -0
- package/dist/database/release-intent-schema.d.ts.map +1 -0
- package/dist/database/release-intent-schema.js +129 -0
- package/dist/database/release-intent-schema.js.map +1 -0
- package/dist/database/schema-source-reader.d.ts +7 -0
- package/dist/database/schema-source-reader.d.ts.map +1 -0
- package/dist/database/schema-source-reader.js +49 -0
- package/dist/database/schema-source-reader.js.map +1 -0
- package/dist/index.d.ts +4 -6
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +4 -29
- package/dist/index.js.map +1 -1
- package/dist/lib/agent-session.types.d.ts +0 -9
- package/dist/lib/agent-session.types.d.ts.map +1 -1
- package/dist/lib/agent-session.types.js +1 -11
- package/dist/lib/agent-session.types.js.map +1 -1
- package/dist/lib/auth/org-authority-observations.d.ts +2 -0
- package/dist/lib/auth/org-authority-observations.d.ts.map +1 -1
- package/dist/lib/auth/org-authority-observations.js +31 -12
- package/dist/lib/auth/org-authority-observations.js.map +1 -1
- package/dist/lib/auth/org-authority.d.ts +8 -11
- package/dist/lib/auth/org-authority.d.ts.map +1 -1
- package/dist/lib/auth/org-authority.js +12 -31
- package/dist/lib/auth/org-authority.js.map +1 -1
- package/dist/lib/auth/org-claim.d.ts.map +1 -1
- package/dist/lib/auth/org-claim.js.map +1 -1
- package/dist/lib/auth/org-role.d.ts +2 -6
- package/dist/lib/auth/org-role.d.ts.map +1 -1
- package/dist/lib/auth/org-role.js +10 -19
- package/dist/lib/auth/org-role.js.map +1 -1
- package/dist/lib/edge-stream/index.d.ts.map +1 -1
- package/dist/lib/edge-stream/index.js.map +1 -1
- package/dist/lib/errors/artifact-store-errors.d.ts +14 -0
- package/dist/lib/errors/artifact-store-errors.d.ts.map +1 -0
- package/dist/lib/errors/artifact-store-errors.js +41 -0
- package/dist/lib/errors/artifact-store-errors.js.map +1 -0
- package/dist/lib/errors/index.d.ts +3 -0
- package/dist/lib/errors/index.d.ts.map +1 -0
- package/dist/lib/{interaction-widgets → errors}/index.js +2 -3
- package/dist/lib/errors/index.js.map +1 -0
- package/dist/lib/errors/knowledge-graph-errors.d.ts +5 -0
- package/dist/lib/errors/knowledge-graph-errors.d.ts.map +1 -0
- package/dist/lib/errors/knowledge-graph-errors.js +17 -0
- package/dist/lib/errors/knowledge-graph-errors.js.map +1 -0
- package/dist/lib/manifest/manifest.enums.d.ts.map +1 -1
- package/dist/lib/manifest/manifest.enums.js.map +1 -1
- package/dist/lib/mcp-bridge-token.d.ts +0 -2
- package/dist/lib/mcp-bridge-token.d.ts.map +1 -1
- package/dist/lib/mcp-bridge-token.js +0 -8
- package/dist/lib/mcp-bridge-token.js.map +1 -1
- package/dist/lib/request-context.d.ts.map +1 -1
- package/dist/lib/request-context.js.map +1 -1
- package/dist/lib/to-json-column-value.d.ts +6 -0
- package/dist/lib/to-json-column-value.d.ts.map +1 -1
- package/dist/lib/to-json-column-value.js +19 -2
- package/dist/lib/to-json-column-value.js.map +1 -1
- package/dist/nestjs/auth/actor-classification.d.ts +4 -4
- package/dist/nestjs/auth/actor-classification.d.ts.map +1 -1
- package/dist/nestjs/auth/actor-classification.js +19 -11
- package/dist/nestjs/auth/actor-classification.js.map +1 -1
- package/dist/nestjs/auth/holds-org-authority.d.ts +12 -0
- package/dist/nestjs/auth/holds-org-authority.d.ts.map +1 -0
- package/dist/nestjs/auth/holds-org-authority.js +20 -0
- package/dist/nestjs/auth/holds-org-authority.js.map +1 -0
- package/dist/nestjs/auth/index.d.ts +4 -3
- package/dist/nestjs/auth/index.d.ts.map +1 -1
- package/dist/nestjs/auth/index.js +8 -6
- package/dist/nestjs/auth/index.js.map +1 -1
- package/dist/nestjs/auth/org-role.guard.d.ts.map +1 -1
- package/dist/nestjs/auth/org-role.guard.js +2 -2
- package/dist/nestjs/auth/org-role.guard.js.map +1 -1
- package/dist/nestjs/auth/service-or-org-role.guard.d.ts.map +1 -1
- package/dist/nestjs/auth/service-or-org-role.guard.js +2 -2
- package/dist/nestjs/auth/service-or-org-role.guard.js.map +1 -1
- package/dist/nestjs/capability-edge-tenancy.d.ts +16 -0
- package/dist/nestjs/capability-edge-tenancy.d.ts.map +1 -0
- package/dist/nestjs/capability-edge-tenancy.js +44 -0
- package/dist/nestjs/capability-edge-tenancy.js.map +1 -0
- package/dist/nestjs/global-exception.filter.d.ts +1 -4
- package/dist/nestjs/global-exception.filter.d.ts.map +1 -1
- package/dist/nestjs/global-exception.filter.js +53 -179
- package/dist/nestjs/global-exception.filter.js.map +1 -1
- package/dist/nestjs/idempotency/idempotency.service.d.ts.map +1 -1
- package/dist/nestjs/idempotency/idempotency.service.js +2 -1
- package/dist/nestjs/idempotency/idempotency.service.js.map +1 -1
- package/dist/nestjs/index.d.ts +11 -7
- package/dist/nestjs/index.d.ts.map +1 -1
- package/dist/nestjs/index.js +31 -10
- package/dist/nestjs/index.js.map +1 -1
- package/dist/nestjs/jwt-verification.guard.d.ts +4 -1
- package/dist/nestjs/jwt-verification.guard.d.ts.map +1 -1
- package/dist/nestjs/jwt-verification.guard.js +17 -4
- package/dist/nestjs/jwt-verification.guard.js.map +1 -1
- package/dist/nestjs/org-scope.d.ts +9 -0
- package/dist/nestjs/org-scope.d.ts.map +1 -0
- package/dist/nestjs/org-scope.js +26 -0
- package/dist/nestjs/org-scope.js.map +1 -0
- package/dist/nestjs/pagination.d.ts +20 -3
- package/dist/nestjs/pagination.d.ts.map +1 -1
- package/dist/nestjs/pagination.js +90 -13
- package/dist/nestjs/pagination.js.map +1 -1
- package/dist/nestjs/problem-details.dto.d.ts +15 -0
- package/dist/nestjs/problem-details.dto.d.ts.map +1 -0
- package/dist/nestjs/problem-details.dto.js +103 -0
- package/dist/nestjs/problem-details.dto.js.map +1 -0
- package/dist/nestjs/refusal.d.ts +27 -0
- package/dist/nestjs/refusal.d.ts.map +1 -0
- package/dist/nestjs/refusal.js +231 -0
- package/dist/nestjs/refusal.js.map +1 -0
- package/dist/nestjs/request-context.middleware.d.ts +1 -0
- package/dist/nestjs/request-context.middleware.d.ts.map +1 -1
- package/dist/nestjs/request-context.middleware.js +48 -19
- package/dist/nestjs/request-context.middleware.js.map +1 -1
- package/dist/nestjs/swagger.decorators.d.ts +1 -0
- package/dist/nestjs/swagger.decorators.d.ts.map +1 -1
- package/dist/nestjs/swagger.decorators.js +22 -2
- package/dist/nestjs/swagger.decorators.js.map +1 -1
- package/package.json +9 -3
- package/prisma-url.d.ts +38 -0
- package/prisma-url.js +84 -0
- package/dist/lib/briefcase/index.d.ts +0 -18
- package/dist/lib/briefcase/index.d.ts.map +0 -1
- package/dist/lib/briefcase/index.js +0 -72
- package/dist/lib/briefcase/index.js.map +0 -1
- package/dist/lib/errors/pipeline-errors.d.ts +0 -178
- package/dist/lib/errors/pipeline-errors.d.ts.map +0 -1
- package/dist/lib/errors/pipeline-errors.js +0 -316
- package/dist/lib/errors/pipeline-errors.js.map +0 -1
- package/dist/lib/interaction-widgets/factories.d.ts +0 -83
- package/dist/lib/interaction-widgets/factories.d.ts.map +0 -1
- package/dist/lib/interaction-widgets/factories.js +0 -173
- package/dist/lib/interaction-widgets/factories.js.map +0 -1
- package/dist/lib/interaction-widgets/index.d.ts +0 -4
- package/dist/lib/interaction-widgets/index.d.ts.map +0 -1
- package/dist/lib/interaction-widgets/index.js.map +0 -1
- package/dist/lib/interaction-widgets/validation.d.ts +0 -10
- package/dist/lib/interaction-widgets/validation.d.ts.map +0 -1
- package/dist/lib/interaction-widgets/validation.js +0 -214
- package/dist/lib/interaction-widgets/validation.js.map +0 -1
- package/dist/lib/interaction-widgets/widget-types.d.ts +0 -163
- package/dist/lib/interaction-widgets/widget-types.d.ts.map +0 -1
- package/dist/lib/interaction-widgets/widget-types.js +0 -22
- package/dist/lib/interaction-widgets/widget-types.js.map +0 -1
- package/dist/lib/run-events/action-types.d.ts +0 -40
- package/dist/lib/run-events/action-types.d.ts.map +0 -1
- package/dist/lib/run-events/action-types.js +0 -40
- package/dist/lib/run-events/action-types.js.map +0 -1
- package/dist/lib/run-events/event-families.d.ts +0 -95
- package/dist/lib/run-events/event-families.d.ts.map +0 -1
- package/dist/lib/run-events/event-families.js +0 -282
- package/dist/lib/run-events/event-families.js.map +0 -1
- package/dist/lib/run-events/index.d.ts +0 -7
- package/dist/lib/run-events/index.d.ts.map +0 -1
- package/dist/lib/run-events/index.js +0 -23
- package/dist/lib/run-events/index.js.map +0 -1
- package/dist/lib/run-events/run-event.types.d.ts +0 -60
- package/dist/lib/run-events/run-event.types.d.ts.map +0 -1
- package/dist/lib/run-events/run-event.types.js +0 -57
- package/dist/lib/run-events/run-event.types.js.map +0 -1
- package/dist/lib/run-events/run-live-snapshot.types.d.ts +0 -69
- package/dist/lib/run-events/run-live-snapshot.types.d.ts.map +0 -1
- package/dist/lib/run-events/run-live-snapshot.types.js +0 -17
- package/dist/lib/run-events/run-live-snapshot.types.js.map +0 -1
- package/dist/lib/run-events/snapshot-reducer.d.ts +0 -4
- package/dist/lib/run-events/snapshot-reducer.d.ts.map +0 -1
- package/dist/lib/run-events/snapshot-reducer.js +0 -313
- package/dist/lib/run-events/snapshot-reducer.js.map +0 -1
- package/dist/lib/run-events/stream-contracts.d.ts +0 -79
- package/dist/lib/run-events/stream-contracts.d.ts.map +0 -1
- package/dist/lib/run-events/stream-contracts.js +0 -27
- package/dist/lib/run-events/stream-contracts.js.map +0 -1
- package/dist/lib/tag-taxonomy/concern-tags.d.ts +0 -3
- package/dist/lib/tag-taxonomy/concern-tags.d.ts.map +0 -1
- package/dist/lib/tag-taxonomy/concern-tags.js +0 -26
- package/dist/lib/tag-taxonomy/concern-tags.js.map +0 -1
- package/dist/lib/tag-taxonomy/index.d.ts +0 -14
- package/dist/lib/tag-taxonomy/index.d.ts.map +0 -1
- package/dist/lib/tag-taxonomy/index.js +0 -59
- package/dist/lib/tag-taxonomy/index.js.map +0 -1
- package/dist/lib/tag-taxonomy/lifecycle-tags.d.ts +0 -3
- package/dist/lib/tag-taxonomy/lifecycle-tags.d.ts.map +0 -1
- package/dist/lib/tag-taxonomy/lifecycle-tags.js +0 -57
- package/dist/lib/tag-taxonomy/lifecycle-tags.js.map +0 -1
- package/dist/lib/tag-taxonomy/stack-tags.d.ts +0 -3
- package/dist/lib/tag-taxonomy/stack-tags.d.ts.map +0 -1
- package/dist/lib/tag-taxonomy/stack-tags.js +0 -26
- package/dist/lib/tag-taxonomy/stack-tags.js.map +0 -1
- package/dist/lib/tag-taxonomy/team-tags.d.ts +0 -3
- package/dist/lib/tag-taxonomy/team-tags.d.ts.map +0 -1
- package/dist/lib/tag-taxonomy/team-tags.js +0 -84
- package/dist/lib/tag-taxonomy/team-tags.js.map +0 -1
- package/dist/lib/tag-taxonomy/types.d.ts +0 -14
- package/dist/lib/tag-taxonomy/types.d.ts.map +0 -1
- package/dist/lib/tag-taxonomy/types.js +0 -3
- package/dist/lib/tag-taxonomy/types.js.map +0 -1
- package/dist/nestjs/error-response.dto.d.ts +0 -10
- package/dist/nestjs/error-response.dto.d.ts.map +0 -1
- package/dist/nestjs/error-response.dto.js +0 -46
- package/dist/nestjs/error-response.dto.js.map +0 -1
- package/dist/schemas/xema/analysis.json +0 -51
- package/dist/schemas/xema/clarification-contract.json +0 -49
- package/dist/schemas/xema/context.json +0 -79
- package/dist/schemas/xema/index.d.ts +0 -8
- package/dist/schemas/xema/index.d.ts.map +0 -1
- package/dist/schemas/xema/index.js +0 -28
- package/dist/schemas/xema/index.js.map +0 -1
- package/dist/schemas/xema/review-history.json +0 -42
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"mcp-bridge-token.js","sourceRoot":"","sources":["../../src/lib/mcp-bridge-token.ts"],"names":[],"mappings":";;;
|
|
1
|
+
{"version":3,"file":"mcp-bridge-token.js","sourceRoot":"","sources":["../../src/lib/mcp-bridge-token.ts"],"names":[],"mappings":";;;AAwLA,gDAqBC;AA+BD,oDAcC;AAvOD,6CAA0D;AAE1D,0EAIgD;AAChD,oEAI6C;AAC7C,0FAA0F;AAa1F,IAAY,kBASX;AATD,WAAY,kBAAkB;IAQ5B,4DAAsC,CAAA;AACxC,CAAC,EATW,kBAAkB,kCAAlB,kBAAkB,QAS7B;AA+GY,QAAA,gCAAgC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAQlD,QAAA,uBAAuB,GAAG,oBAAoB,CAAC;AAE5D,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;AACjE,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;AASrE,SAAgB,kBAAkB,CAChC,MAAc,EACd,MAAgE,EAChE,OAAiC;IAEjC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IACjD,MAAM,GAAG,GAAG,OAAO,EAAE,UAAU,IAAI,wCAAgC,CAAC;IACpE,MAAM,OAAO,GAAyB;QACpC,GAAG,MAAM;QACT,GAAG,EAAE,UAAU;QACf,GAAG,EAAE,UAAU,GAAG,GAAG;KACE,CAAC;IAC1B,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IACjF,MAAM,YAAY,GAAG,GAAG,UAAU,IAAI,UAAU,EAAE,CAAC;IACnD,MAAM,GAAG,GAAG,eAAe,CACzB,IAAA,wBAAU,EAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,EAAE,CAC3D,CAAC;IACF,OAAO,GAAG,YAAY,IAAI,GAAG,EAAE,CAAC;AAClC,CAAC;AAWD,MAAa,mBAAoB,SAAQ,KAAK;IAE1B;IADlB,YACkB,MAMD,EACf,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QATC,WAAM,GAAN,MAAM,CAMP;QAIf,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAdD,kDAcC;AAMD,SAAgB,oBAAoB,CAClC,KAAa,EACb,MAAc,EACd,OAAqC;IAErC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,UAAU,GAAG,gCAAgC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACnE,MAAM,GAAG,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAChC,gBAAgB,CAAC,MAAM,EAAE,OAAO,EAAE,gBAAgB,IAAI,EAAE,CAAC,CAAC;IAC1D,gBAAgB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,gCAAgC,CAAC,KAAa,EAAE,MAAc;IACrE,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAE,gCAAgC,CAAC,CAAC;IAC/E,CAAC;IACD,MAAM,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,CAAC,GAAG,KAAiC,CAAC;IAC1E,MAAM,YAAY,GAAG,GAAG,SAAS,IAAI,UAAU,EAAE,CAAC;IAClD,MAAM,WAAW,GAAG,IAAA,wBAAU,EAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,EAAE,CAAC;IAC/E,MAAM,WAAW,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IAC5C,IACE,WAAW,CAAC,MAAM,KAAK,WAAW,CAAC,MAAM;QACzC,CAAC,IAAA,6BAAe,EAAC,WAAW,EAAE,WAAW,CAAC,EAC1C,CAAC;QACD,MAAM,IAAI,mBAAmB,CAAC,eAAe,EAAE,oBAAoB,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,iBAAiB,CAAC,UAAkB;IAC3C,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CACf,eAAe,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAClB,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAE,2BAA2B,CAAC,CAAC;IAC1E,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,GAA4B;IAC/C,IACE,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ;QACjC,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ;QAC7B,CAAC,GAAG,CAAC,SAAS,KAAK,IAAI,IAAI,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,CAAC;QAC7D,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ;QAC3B,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,EAC3B,CAAC;QACD,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAE,gCAAgC,CAAC,CAAC;IAC/E,CAAC;IAID,IACE,CAAC,CAAC,cAAc,IAAI,GAAG,CAAC;QACxB,CAAC,GAAG,CAAC,YAAY,KAAK,IAAI,IAAI,OAAO,GAAG,CAAC,YAAY,KAAK,QAAQ,CAAC,EACnE,CAAC;QACD,MAAM,IAAI,mBAAmB,CAC3B,WAAW,EACX,4EAA4E,CAC7E,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,cAAc,KAAK,SAAS,IAAI,OAAO,GAAG,CAAC,cAAc,KAAK,QAAQ,EAAE,CAAC;QAC/E,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAE,iCAAiC,CAAC,CAAC;IAChF,CAAC;IACD,IACE,GAAG,CAAC,gBAAgB,KAAK,SAAS;QAClC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;YACnC,GAAG,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,EAC1D,CAAC;QACD,MAAM,IAAI,mBAAmB,CAC3B,WAAW,EACX,mCAAmC,CACpC,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,IAAI,KAAK,kBAAkB,CAAC,gBAAgB,EAAE,CAAC;QACrD,OAAO;YACL,IAAI,EAAE,kBAAkB,CAAC,gBAAgB;YACzC,GAAG,iBAAiB,CAAC,GAAG,CAAC;SAC1B,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,mBAAmB,CAC3B,WAAW,EACX,kCACE,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,WAC5C,mBAAmB,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;QACjE,sEAAsE;QACtE,sCAAsC,CACzC,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,GAA4B;IACrD,MAAM,uBAAuB,GAAG,gBAAgB,CAC9C,GAAG,CAAC,uBAAuB,EAC3B,yBAAyB,CAC1B,CAAC;IACF,MAAM,sBAAsB,GAAG,gBAAgB,CAC7C,GAAG,CAAC,sBAAsB,EAC1B,wBAAwB,CACzB,CAAC;IACF,MAAM,cAAc,GAAG,qCAAwB,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACxE,IACE,CAAC,cAAc,CAAC,OAAO;QACvB,cAAc,CAAC,IAAI,CAAC,IAAI,KAAK,mCAAsB,CAAC,KAAK,EACzD,CAAC;QACD,MAAM,IAAI,mBAAmB,CAC3B,WAAW,EACX,oDAAoD,CACrD,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,cAAc,CAAC,IAA+B,CAAC;IAChE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,mBAAmB,CAC3B,WAAW,EACX,8DAA8D,CAC/D,CAAC;IACJ,CAAC;IACD,MAAM,sBAAsB,GAAG,2CAA2B,CAAC,KAAK,EAAE;SAC/D,QAAQ,EAAE;SACV,SAAS,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IACnC,IAAI,CAAC,sBAAsB,CAAC,OAAO,EAAE,CAAC;QACpC,MAAM,IAAI,mBAAmB,CAC3B,WAAW,EACX,kCAAkC,sBAAsB,CAAC,KAAK,CAAC,OAAO,EAAE,CACzE,CAAC;IACJ,CAAC;IACD,MAAM,UAAU,GAAG,sBAAsB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACzE,IACE,UAAU,CAAC,MAAM,KAAK,QAAQ,CAAC,IAAI,CAAC,MAAM;QAC1C,UAAU,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAC7D,CAAC;QACD,MAAM,IAAI,mBAAmB,CAC3B,WAAW,EACX,mEAAmE,CACpE,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAA6B;QACrC,SAAS,EAAE,GAAG,CAAC,SAAmB;QAClC,KAAK,EAAE,GAAG,CAAC,KAAe;QAC1B,SAAS,EAAE,GAAG,CAAC,SAA0B;QACzC,YAAY,EAAE,GAAG,CAAC,YAA6B;QAC/C,uBAAuB;QACvB,sBAAsB;QACtB,QAAQ;QACR,gBAAgB,EAAE,sBAAsB,CAAC,IAAI;QAC7C,GAAG,EAAE,GAAG,CAAC,GAAa;QACtB,GAAG,EAAE,GAAG,CAAC,GAAa;KACvB,CAAC;IACF,IAAI,OAAO,GAAG,CAAC,cAAc,KAAK,QAAQ,EAAE,CAAC;QAC3C,IAAI,CAAC,cAAc,GAAG,GAAG,CAAC,cAAc,CAAC;IAC3C,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACxC,IAAI,CAAC,gBAAgB,GAAG,GAAG,CAAC,gBAAqC,CAAC;IACpE,CAAC;IACD,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAChC,IAAI,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,IAAI,GAAG,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpE,MAAM,IAAI,mBAAmB,CAC3B,WAAW,EACX,mDAAmD,CACpD,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC;IACjC,CAAC;IACD,IAAI,GAAG,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QAClC,IACE,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ;YACnC,CAAC,MAAM,CAAC,MAAM,CAAC,gDAAwB,CAAC,CAAC,QAAQ,CAC/C,GAAG,CAAC,WAAuC,CAC5C,EACD,CAAC;YACD,MAAM,IAAI,mBAAmB,CAC3B,WAAW,EACX,+BAA+B,MAAM,CAAC,MAAM,CAAC,gDAAwB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACpF,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,WAAW,GAAG,GAAG,CAAC,WAAuC,CAAC;IACjE,CAAC;IACD,IAAI,GAAG,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;QACtC,IACE,OAAO,GAAG,CAAC,eAAe,KAAK,QAAQ;YACvC,CAAC,MAAM,CAAC,MAAM,CAAC,sCAAsB,CAAC,CAAC,QAAQ,CAC7C,GAAG,CAAC,eAAyC,CAC9C,EACD,CAAC;YACD,MAAM,IAAI,mBAAmB,CAC3B,WAAW,EACX,mCAAmC,MAAM,CAAC,MAAM,CAAC,sCAAsB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACtF,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,eAAe,GAAG,GAAG,CAAC,eAAyC,CAAC;IACvE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc,EAAE,KAAa;IACrD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,mBAAmB,CAC3B,WAAW,EACX,GAAG,KAAK,mCAAmC,CAC5C,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,gBAAgB,CAAC,MAA4B,EAAE,WAAmB;IACzE,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IACjD,IAAI,MAAM,CAAC,GAAG,GAAG,WAAW,GAAG,UAAU,EAAE,CAAC;QAC1C,MAAM,IAAI,mBAAmB,CAAC,SAAS,EAAE,oBAAoB,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,MAAM,CAAC,GAAG,GAAG,WAAW,GAAG,UAAU,EAAE,CAAC;QAC1C,MAAM,IAAI,mBAAmB,CAAC,eAAe,EAAE,4BAA4B,CAAC,CAAC;IAC/E,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CACvB,MAA4B,EAC5B,OAAgD;IAEhD,IAAI,CAAC,OAAO,EAAE,CAAC;QAAA,OAAO;IAAA,CAAC;IACvB,IAAI,OAAO,CAAC,YAAY,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC,YAAY,EAAE,CAAC;QACjE,MAAM,IAAI,mBAAmB,CAC3B,YAAY,EACZ,cAAc,MAAM,CAAC,IAAI,2BAA2B,OAAO,CAAC,YAAY,EAAE,CAC3E,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,aAAa,IAAI,MAAM,CAAC,KAAK,KAAK,OAAO,CAAC,aAAa,EAAE,CAAC;QACpE,MAAM,IAAI,mBAAmB,CAC3B,WAAW,EACX,wBAAwB,MAAM,CAAC,KAAK,qBAAqB,OAAO,CAAC,aAAa,EAAE,CACjF,CAAC;IACJ,CAAC;AACH,CAAC;AAID,SAAS,eAAe,CAAC,GAAW;IAClC,OAAO,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACjG,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,MAAM,MAAM,GAAG,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC/D,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC7C,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,CAAC;AAC5D,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"request-context.d.ts","sourceRoot":"","sources":["../../src/lib/request-context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,kCAAkC,CAAC;AAC3E,OAAO,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AACjF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAChE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAE5D,MAAM,WAAW,cAAc;IAQ7B,KAAK,EAAE,MAAM,CAAC;
|
|
1
|
+
{"version":3,"file":"request-context.d.ts","sourceRoot":"","sources":["../../src/lib/request-context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,kCAAkC,CAAC;AAC3E,OAAO,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AACjF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAChE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAE5D,MAAM,WAAW,cAAc;IAQ7B,KAAK,EAAE,MAAM,CAAC;IAyBd,YAAY,CAAC,EAAE,mBAAmB,CAAC;IACnC,SAAS,CAAC,EAAE,MAAM,CAAC;IAMnB,OAAO,EAAE,UAAU,CAAC;IAOpB,UAAU,EAAE,UAAU,CAAC;IAMvB,UAAU,EAAE,YAAY,EAAE,CAAC;IAE3B,OAAO,EAAE,MAAM,CAAC;IAMhB,SAAS,EAAE,OAAO,GAAG,OAAO,GAAG,SAAS,CAAC;IASzC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IASnC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAE1B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,oBAAoB,CAAC,EAAE,oBAAoB,CAAC;IAmC5C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAyBlB,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,KAAK,EAAE,MAAM,EAAE,CAAC;IAEhB,OAAO,CAAC,EAAE,MAAM,CAAC;IAYjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAeD,eAAO,MAAM,eAAe,eAAqD,CAAC;AAalF,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,cAAc,CAQ7D;AASD,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CA+B5E;AAQD,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC;AACnC,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"request-context.js","sourceRoot":"","sources":["../../src/lib/request-context.ts"],"names":[],"mappings":";;;
|
|
1
|
+
{"version":3,"file":"request-context.js","sourceRoot":"","sources":["../../src/lib/request-context.ts"],"names":[],"mappings":";;;AAyMA,8CAQC;AASD,oDA+BC;AAzPD,8DAA2E;AAiQlE,4FAjQA,qBAAW,OAiQA;AAAE,2FAjQA,oBAAU,OAiQA;AArEnB,QAAA,eAAe,GAAG,MAAM,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;AAalF,SAAgB,iBAAiB,CAAC,GAAW;IAC3C,MAAM,GAAG,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CACb,kFAAkF,CACnF,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AASD,SAAgB,oBAAoB,CAAC,GAAW;IAC9C,MAAM,MAAM,GAAI,GAA+B,CAAC,uBAAe,CAAC,CAAC;IACjE,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,MAAwB,CAAC;IAClC,CAAC;IAoBD,MAAM,GAAG,GAAI,GAAyB,CAAC,GAAG,CAAC;IAC3C,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5C,OAAQ,GAA+B,CAAC,uBAAe,CAE1C,CAAC;IAChB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAUD,4CAA0C;AAAjC,mGAAA,OAAO,OAAA"}
|
|
@@ -1,4 +1,10 @@
|
|
|
1
|
+
import { XemaError } from '@xemahq/kernel-contracts/http';
|
|
1
2
|
import type { ZodType } from 'zod';
|
|
3
|
+
export declare class WorkItemPayloadInvalidError extends XemaError {
|
|
4
|
+
readonly workItemId: string;
|
|
5
|
+
readonly zodIssues: unknown;
|
|
6
|
+
constructor(message: string, workItemId: string, zodIssues: unknown);
|
|
7
|
+
}
|
|
2
8
|
export declare function toJsonColumnValue<T>(schema: ZodType<T>, value: T, context?: {
|
|
3
9
|
workItemId?: string;
|
|
4
10
|
hint?: string;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"to-json-column-value.d.ts","sourceRoot":"","sources":["../../src/lib/to-json-column-value.ts"],"names":[],"mappings":"AAsBA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,KAAK,CAAC;
|
|
1
|
+
{"version":3,"file":"to-json-column-value.d.ts","sourceRoot":"","sources":["../../src/lib/to-json-column-value.ts"],"names":[],"mappings":"AAsBA,OAAO,EAAE,SAAS,EAAE,MAAM,+BAA+B,CAAC;AAE1D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,KAAK,CAAC;AAgBnC,qBAAa,2BAA4B,SAAQ,SAAS;IAGtD,QAAQ,CAAC,UAAU,EAAE,MAAM;IAC3B,QAAQ,CAAC,SAAS,EAAE,OAAO;gBAF3B,OAAO,EAAE,MAAM,EACN,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,OAAO;CAU9B;AAiBD,wBAAgB,iBAAiB,CAAC,CAAC,EACjC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,EAClB,KAAK,EAAE,CAAC,EACR,OAAO,GAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAO,GACnD,OAAO,CAaT"}
|
|
@@ -1,11 +1,28 @@
|
|
|
1
1
|
"use strict";
|
|
2
2
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.WorkItemPayloadInvalidError = void 0;
|
|
3
4
|
exports.toJsonColumnValue = toJsonColumnValue;
|
|
4
|
-
const
|
|
5
|
+
const http_1 = require("@xemahq/kernel-contracts/http");
|
|
6
|
+
class WorkItemPayloadInvalidError extends http_1.XemaError {
|
|
7
|
+
workItemId;
|
|
8
|
+
zodIssues;
|
|
9
|
+
constructor(message, workItemId, zodIssues) {
|
|
10
|
+
super({
|
|
11
|
+
code: 'WORK_ITEM_PAYLOAD_INVALID',
|
|
12
|
+
title: 'Work-item payload invalid',
|
|
13
|
+
status: 400,
|
|
14
|
+
detail: message,
|
|
15
|
+
extensions: { workItemId },
|
|
16
|
+
});
|
|
17
|
+
this.workItemId = workItemId;
|
|
18
|
+
this.zodIssues = zodIssues;
|
|
19
|
+
}
|
|
20
|
+
}
|
|
21
|
+
exports.WorkItemPayloadInvalidError = WorkItemPayloadInvalidError;
|
|
5
22
|
function toJsonColumnValue(schema, value, context = {}) {
|
|
6
23
|
const parsed = schema.safeParse(value);
|
|
7
24
|
if (!parsed.success) {
|
|
8
|
-
throw new
|
|
25
|
+
throw new WorkItemPayloadInvalidError(`Work-item payload failed schema validation${context.hint ? ` (${context.hint})` : ''}`, context.workItemId ?? 'unknown', parsed.error.issues);
|
|
9
26
|
}
|
|
10
27
|
return structuredClone(parsed.data);
|
|
11
28
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"to-json-column-value.js","sourceRoot":"","sources":["../../src/lib/to-json-column-value.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"to-json-column-value.js","sourceRoot":"","sources":["../../src/lib/to-json-column-value.ts"],"names":[],"mappings":";;;AAuEA,8CAiBC;AAlED,wDAA0D;AAkB1D,MAAa,2BAA4B,SAAQ,gBAAS;IAG7C;IACA;IAHX,YACE,OAAe,EACN,UAAkB,EAClB,SAAkB;QAE3B,KAAK,CAAC;YACJ,IAAI,EAAE,2BAA2B;YACjC,KAAK,EAAE,2BAA2B;YAClC,MAAM,EAAE,GAAG;YACX,MAAM,EAAE,OAAO;YACf,UAAU,EAAE,EAAE,UAAU,EAAE;SAC3B,CAAC,CAAC;QATM,eAAU,GAAV,UAAU,CAAQ;QAClB,cAAS,GAAT,SAAS,CAAS;IAS7B,CAAC;CACF;AAdD,kEAcC;AAiBD,SAAgB,iBAAiB,CAC/B,MAAkB,EAClB,KAAQ,EACR,UAAkD,EAAE;IAEpD,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,2BAA2B,CACnC,6CAA6C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,EACvF,OAAO,CAAC,UAAU,IAAI,SAAS,EAC/B,MAAM,CAAC,KAAK,CAAC,MAAM,CACpB,CAAC;IACJ,CAAC;IAID,OAAO,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AACtC,CAAC"}
|
|
@@ -1,3 +1,4 @@
|
|
|
1
|
+
import { BadRequestException } from '@nestjs/common';
|
|
1
2
|
import { SubjectKind, TokenClass } from '@xemahq/kernel-contracts/subject';
|
|
2
3
|
import type { RequestContext } from '../../lib/request-context';
|
|
3
4
|
export interface ActorClassification {
|
|
@@ -14,14 +15,13 @@ export declare function resolvePrincipalIdFromClaims(claims: Record<string, unkn
|
|
|
14
15
|
export declare function resolveActAsFromClaims(claims: Record<string, unknown>): string | undefined;
|
|
15
16
|
export declare const SUBJECT_KIND_CLAIM = "subject_kind";
|
|
16
17
|
export declare function readDeclaredSubjectKind(claims: Record<string, unknown>): SubjectKind | null | undefined;
|
|
18
|
+
export declare class UnknownTokenClassError extends BadRequestException {
|
|
19
|
+
constructor(declared: string);
|
|
20
|
+
}
|
|
17
21
|
export declare function tryResolveSubjectAndClass(roles: string[], claims: Record<string, unknown>, actAs: string | undefined): {
|
|
18
22
|
kind: SubjectKind;
|
|
19
23
|
tokenClass: TokenClass;
|
|
20
24
|
} | undefined;
|
|
21
|
-
export declare function resolveSubjectAndClass(roles: string[], claims: Record<string, unknown>, actAs: string | undefined): {
|
|
22
|
-
kind: SubjectKind;
|
|
23
|
-
tokenClass: TokenClass;
|
|
24
|
-
};
|
|
25
25
|
export declare function actorTypeForSubjectKind(kind: SubjectKind): RequestContext['actorType'];
|
|
26
26
|
export declare function actorTypeFor(subjectKind: SubjectKind, actAs: string | undefined): RequestContext['actorType'];
|
|
27
27
|
export declare function deriveActorClassification(claims: Record<string, unknown>): ActorClassification;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"actor-classification.d.ts","sourceRoot":"","sources":["../../../src/nestjs/auth/actor-classification.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"actor-classification.d.ts","sourceRoot":"","sources":["../../../src/nestjs/auth/actor-classification.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAErD,OAAO,EACL,WAAW,EAEX,UAAU,EACX,MAAM,kCAAkC,CAAC;AAC1C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAchE,MAAM,WAAW,mBAAmB;IAElC,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC;IAEzB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IAEnC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAElC,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAKhC,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC,WAAW,CAAC,CAAC;CACjD;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAInE;AAGD,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,MAAM,EAAE,CAYV;AAuBD,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,MAAM,GAAG,SAAS,CAEpB;AA+BD,wBAAgB,4BAA4B,CAC1C,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,MAAM,GAAG,SAAS,CAEpB;AAYD,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,MAAM,GAAG,SAAS,CAMpB;AAsBD,eAAO,MAAM,kBAAkB,iBAAiB,CAAC;AAajD,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,WAAW,GAAG,IAAI,GAAG,SAAS,CAMhC;AAiBD,qBAAa,sBAAuB,SAAQ,mBAAmB;gBACjD,QAAQ,EAAE,MAAM;CAQ7B;AA6CD,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,MAAM,EAAE,EACf,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,KAAK,EAAE,MAAM,GAAG,SAAS,GACxB;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,UAAU,EAAE,UAAU,CAAA;CAAE,GAAG,SAAS,CAqB3D;AAgDD,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,WAAW,GAChB,cAAc,CAAC,WAAW,CAAC,CAgB7B;AAUD,wBAAgB,YAAY,CAC1B,WAAW,EAAE,WAAW,EACxB,KAAK,EAAE,MAAM,GAAG,SAAS,GACxB,cAAc,CAAC,WAAW,CAAC,CAK7B;AAaD,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,mBAAmB,CAYrB"}
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
"use strict";
|
|
2
2
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
exports.SUBJECT_KIND_CLAIM = void 0;
|
|
3
|
+
exports.UnknownTokenClassError = exports.SUBJECT_KIND_CLAIM = void 0;
|
|
4
4
|
exports.asNonEmptyString = asNonEmptyString;
|
|
5
5
|
exports.resolveRolesFromClaims = resolveRolesFromClaims;
|
|
6
6
|
exports.resolveClientIdFromClaims = resolveClientIdFromClaims;
|
|
@@ -8,10 +8,10 @@ exports.resolvePrincipalIdFromClaims = resolvePrincipalIdFromClaims;
|
|
|
8
8
|
exports.resolveActAsFromClaims = resolveActAsFromClaims;
|
|
9
9
|
exports.readDeclaredSubjectKind = readDeclaredSubjectKind;
|
|
10
10
|
exports.tryResolveSubjectAndClass = tryResolveSubjectAndClass;
|
|
11
|
-
exports.resolveSubjectAndClass = resolveSubjectAndClass;
|
|
12
11
|
exports.actorTypeForSubjectKind = actorTypeForSubjectKind;
|
|
13
12
|
exports.actorTypeFor = actorTypeFor;
|
|
14
13
|
exports.deriveActorClassification = deriveActorClassification;
|
|
14
|
+
const common_1 = require("@nestjs/common");
|
|
15
15
|
const identity_client_1 = require("@xemahq/identity-client");
|
|
16
16
|
const subject_1 = require("@xemahq/kernel-contracts/subject");
|
|
17
17
|
function asNonEmptyString(value) {
|
|
@@ -50,6 +50,15 @@ function readDeclaredSubjectKind(claims) {
|
|
|
50
50
|
const parsed = subject_1.SubjectKindSchema.safeParse(claims[exports.SUBJECT_KIND_CLAIM]);
|
|
51
51
|
return parsed.success ? parsed.data : null;
|
|
52
52
|
}
|
|
53
|
+
class UnknownTokenClassError extends common_1.BadRequestException {
|
|
54
|
+
constructor(declared) {
|
|
55
|
+
super(`The access token declares "token_class": ${JSON.stringify(declared)}, ` +
|
|
56
|
+
`which is not a known TokenClass. The caller is refused rather than ` +
|
|
57
|
+
`classified from a weaker signal, which would name a different ` +
|
|
58
|
+
`principal than the issuer did.`);
|
|
59
|
+
}
|
|
60
|
+
}
|
|
61
|
+
exports.UnknownTokenClassError = UnknownTokenClassError;
|
|
53
62
|
function subjectKindForTokenClass(tokenClass) {
|
|
54
63
|
switch (tokenClass) {
|
|
55
64
|
case subject_1.TokenClass.ServiceJwt:
|
|
@@ -72,9 +81,10 @@ function tryResolveSubjectAndClass(roles, claims, actAs) {
|
|
|
72
81
|
const matched = Object.values(subject_1.TokenClass).includes(explicit)
|
|
73
82
|
? explicit
|
|
74
83
|
: undefined;
|
|
75
|
-
if (matched) {
|
|
76
|
-
|
|
84
|
+
if (!matched) {
|
|
85
|
+
throw new UnknownTokenClassError(explicit);
|
|
77
86
|
}
|
|
87
|
+
return { kind: subjectKindForTokenClass(matched), tokenClass: matched };
|
|
78
88
|
}
|
|
79
89
|
if (actAs) {
|
|
80
90
|
return { kind: subject_1.SubjectKind.User, tokenClass: subject_1.TokenClass.UserJwt };
|
|
@@ -87,12 +97,10 @@ function tryResolveSubjectAndClass(roles, claims, actAs) {
|
|
|
87
97
|
}
|
|
88
98
|
return undefined;
|
|
89
99
|
}
|
|
90
|
-
|
|
91
|
-
|
|
92
|
-
|
|
93
|
-
|
|
94
|
-
});
|
|
95
|
-
}
|
|
100
|
+
const UNSIGNALLED_REALM_BEARER = {
|
|
101
|
+
kind: subject_1.SubjectKind.User,
|
|
102
|
+
tokenClass: subject_1.TokenClass.UserJwt,
|
|
103
|
+
};
|
|
96
104
|
function actorTypeForSubjectKind(kind) {
|
|
97
105
|
switch (kind) {
|
|
98
106
|
case subject_1.SubjectKind.Service:
|
|
@@ -119,7 +127,7 @@ function actorTypeFor(subjectKind, actAs) {
|
|
|
119
127
|
function deriveActorClassification(claims) {
|
|
120
128
|
const roles = resolveRolesFromClaims(claims);
|
|
121
129
|
const actAs = resolveActAsFromClaims(claims);
|
|
122
|
-
const { kind: subjectKind, tokenClass } =
|
|
130
|
+
const { kind: subjectKind, tokenClass } = tryResolveSubjectAndClass(roles, claims, actAs) ?? UNSIGNALLED_REALM_BEARER;
|
|
123
131
|
return {
|
|
124
132
|
roles,
|
|
125
133
|
actAs,
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"actor-classification.js","sourceRoot":"","sources":["../../../src/nestjs/auth/actor-classification.ts"],"names":[],"mappings":";;;
|
|
1
|
+
{"version":3,"file":"actor-classification.js","sourceRoot":"","sources":["../../../src/nestjs/auth/actor-classification.ts"],"names":[],"mappings":";;;AAqCA,4CAIC;AAGD,wDAcC;AAuBD,8DAIC;AA+BD,oEAIC;AAYD,wDAQC;AAmCD,0DAQC;AAuED,8DAyBC;AAgDD,0DAkBC;AAUD,oCAQC;AAaD,8DAcC;AAtYD,2CAAqD;AACrD,6DAA6D;AAC7D,8DAI0C;AA+B1C,SAAgB,gBAAgB,CAAC,KAAc;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AAClD,CAAC;AAGD,SAAgB,sBAAsB,CACpC,MAA+B;IAE/B,MAAM,WAAW,GAAG,MAAM,CAAC,YAAY,CAAC;IACxC,IACE,WAAW;QACX,OAAO,WAAW,KAAK,QAAQ;QAC/B,KAAK,CAAC,OAAO,CAAE,WAAmC,CAAC,KAAK,CAAC,EACzD,CAAC;QACD,OAAQ,WAAoC,CAAC,KAAK,CAAC,MAAM,CACvD,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CACnD,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAuBD,SAAgB,yBAAyB,CACvC,MAA+B;IAE/B,OAAO,gBAAgB,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;AAC5E,CAAC;AA+BD,SAAgB,4BAA4B,CAC1C,MAA+B;IAE/B,OAAO,gBAAgB,CAAC,MAAM,CAAC,oCAAkB,CAAC,CAAC,CAAC;AACtD,CAAC;AAYD,SAAgB,sBAAsB,CACpC,MAA+B;IAE/B,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1B,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1D,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,gBAAgB,CAAE,GAA+B,CAAC,KAAK,CAAC,CAAC,CAAC;AACnE,CAAC;AAsBY,QAAA,kBAAkB,GAAG,cAAc,CAAC;AAajD,SAAgB,uBAAuB,CACrC,MAA+B;IAE/B,IAAI,CAAC,CAAC,0BAAkB,IAAI,MAAM,CAAC,EAAE,CAAC;QACpC,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,MAAM,GAAG,2BAAiB,CAAC,SAAS,CAAC,MAAM,CAAC,0BAAkB,CAAC,CAAC,CAAC;IACvE,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7C,CAAC;AAiBD,MAAa,sBAAuB,SAAQ,4BAAmB;IAC7D,YAAY,QAAgB;QAC1B,KAAK,CACH,4CAA4C,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI;YACtE,qEAAqE;YACrE,gEAAgE;YAChE,gCAAgC,CACnC,CAAC;IACJ,CAAC;CACF;AATD,wDASC;AAED,SAAS,wBAAwB,CAAC,UAAsB;IACtD,QAAQ,UAAU,EAAE,CAAC;QACnB,KAAK,oBAAU,CAAC,UAAU;YACxB,OAAO,qBAAW,CAAC,OAAO,CAAC;QAC7B,KAAK,oBAAU,CAAC,iBAAiB;YAC/B,OAAO,qBAAW,CAAC,KAAK,CAAC;QAC3B,KAAK,oBAAU,CAAC,oBAAoB;YAGlC,OAAO,qBAAW,CAAC,OAAO,CAAC;QAC7B,KAAK,oBAAU,CAAC,oBAAoB;YAClC,OAAO,qBAAW,CAAC,eAAe,CAAC;QACrC,KAAK,oBAAU,CAAC,sBAAsB;YACpC,OAAO,qBAAW,CAAC,MAAM,CAAC;QAC5B,KAAK,oBAAU,CAAC,OAAO;YACrB,OAAO,qBAAW,CAAC,IAAI,CAAC;IAC5B,CAAC;AACH,CAAC;AA0BD,SAAgB,yBAAyB,CACvC,KAAe,EACf,MAA+B,EAC/B,KAAyB;IAEzB,MAAM,QAAQ,GAAG,gBAAgB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACtD,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,OAAO,GAAI,MAAM,CAAC,MAAM,CAAC,oBAAU,CAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACxE,CAAC,CAAE,QAAuB;YAC1B,CAAC,CAAC,SAAS,CAAC;QACd,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,sBAAsB,CAAC,QAAQ,CAAC,CAAC;QAC7C,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,wBAAwB,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;IAC1E,CAAC;IACD,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,EAAE,IAAI,EAAE,qBAAW,CAAC,IAAI,EAAE,UAAU,EAAE,oBAAU,CAAC,OAAO,EAAE,CAAC;IACpE,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACzE,OAAO,EAAE,IAAI,EAAE,qBAAW,CAAC,OAAO,EAAE,UAAU,EAAE,oBAAU,CAAC,UAAU,EAAE,CAAC;IAC1E,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,OAAO,EAAE,IAAI,EAAE,qBAAW,CAAC,KAAK,EAAE,UAAU,EAAE,oBAAU,CAAC,iBAAiB,EAAE,CAAC;IAC/E,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAgCD,MAAM,wBAAwB,GAG1B;IACF,IAAI,EAAE,qBAAW,CAAC,IAAI;IACtB,UAAU,EAAE,oBAAU,CAAC,OAAO;CAC/B,CAAC;AAUF,SAAgB,uBAAuB,CACrC,IAAiB;IAEjB,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,qBAAW,CAAC,OAAO,CAAC;QACzB,KAAK,qBAAW,CAAC,MAAM;YACrB,OAAO,SAAS,CAAC;QACnB,KAAK,qBAAW,CAAC,KAAK;YACpB,OAAO,OAAO,CAAC;QACjB,KAAK,qBAAW,CAAC,IAAI,CAAC;QACtB,KAAK,qBAAW,CAAC,eAAe,CAAC;QACjC,KAAK,qBAAW,CAAC,GAAG,CAAC;QACrB,KAAK,qBAAW,CAAC,SAAS,CAAC;QAC3B,KAAK,qBAAW,CAAC,KAAK,CAAC;QACvB,KAAK,qBAAW,CAAC,IAAI,CAAC;QACtB,KAAK,qBAAW,CAAC,IAAI;YACnB,OAAO,OAAO,CAAC;IACnB,CAAC;AACH,CAAC;AAUD,SAAgB,YAAY,CAC1B,WAAwB,EACxB,KAAyB;IAEzB,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,OAAO,uBAAuB,CAAC,WAAW,CAAC,CAAC;AAC9C,CAAC;AAaD,SAAgB,yBAAyB,CACvC,MAA+B;IAE/B,MAAM,KAAK,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC;IAC7C,MAAM,KAAK,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC;IAC7C,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,GACrC,yBAAyB,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,wBAAwB,CAAC;IAC9E,OAAO;QACL,KAAK;QACL,KAAK;QACL,WAAW;QACX,UAAU;QACV,SAAS,EAAE,YAAY,CAAC,WAAW,EAAE,KAAK,CAAC;KAC5C,CAAC;AACJ,CAAC"}
|
|
@@ -0,0 +1,12 @@
|
|
|
1
|
+
import { AuditAuthorityKind } from '@xemahq/kernel-contracts/audit';
|
|
2
|
+
import { OrgRole } from '../../lib/auth/org-role';
|
|
3
|
+
import type { RequestContext } from '../../lib/request-context';
|
|
4
|
+
export type OrgAuthorityInstrument = {
|
|
5
|
+
readonly kind: AuditAuthorityKind.OrgRole;
|
|
6
|
+
readonly orgRole: OrgRole;
|
|
7
|
+
} | {
|
|
8
|
+
readonly kind: AuditAuthorityKind.PlatformAdmin;
|
|
9
|
+
};
|
|
10
|
+
export declare function resolveOrgAuthorityInstrument(ctx: Pick<RequestContext, 'roles' | 'orgRole'>, required: OrgRole): OrgAuthorityInstrument | undefined;
|
|
11
|
+
export declare function holdsOrgAuthority(ctx: Pick<RequestContext, 'roles' | 'orgRole'>, required: OrgRole): boolean;
|
|
12
|
+
//# sourceMappingURL=holds-org-authority.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"holds-org-authority.d.ts","sourceRoot":"","sources":["../../../src/nestjs/auth/holds-org-authority.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AAEpE,OAAO,EAAE,OAAO,EAAoB,MAAM,yBAAyB,CAAC;AAGpE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAchE,MAAM,MAAM,sBAAsB,GAC9B;IACE,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC,OAAO,CAAC;IAE1C,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC,aAAa,CAAA;CAAE,CAAC;AAuExD,wBAAgB,6BAA6B,CAC3C,GAAG,EAAE,IAAI,CAAC,cAAc,EAAE,OAAO,GAAG,SAAS,CAAC,EAC9C,QAAQ,EAAE,OAAO,GAChB,sBAAsB,GAAG,SAAS,CAQpC;AAuBD,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,IAAI,CAAC,cAAc,EAAE,OAAO,GAAG,SAAS,CAAC,EAC9C,QAAQ,EAAE,OAAO,GAChB,OAAO,CAET"}
|
|
@@ -0,0 +1,20 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.resolveOrgAuthorityInstrument = resolveOrgAuthorityInstrument;
|
|
4
|
+
exports.holdsOrgAuthority = holdsOrgAuthority;
|
|
5
|
+
const audit_1 = require("@xemahq/kernel-contracts/audit");
|
|
6
|
+
const org_role_1 = require("../../lib/auth/org-role");
|
|
7
|
+
const platform_role_1 = require("./platform-role");
|
|
8
|
+
function resolveOrgAuthorityInstrument(ctx, required) {
|
|
9
|
+
if (ctx.orgRole !== undefined && (0, org_role_1.orgRoleSatisfies)(ctx.orgRole, required)) {
|
|
10
|
+
return { kind: audit_1.AuditAuthorityKind.OrgRole, orgRole: ctx.orgRole };
|
|
11
|
+
}
|
|
12
|
+
if ((0, platform_role_1.hasPlatformRole)(ctx.roles)) {
|
|
13
|
+
return { kind: audit_1.AuditAuthorityKind.PlatformAdmin };
|
|
14
|
+
}
|
|
15
|
+
return undefined;
|
|
16
|
+
}
|
|
17
|
+
function holdsOrgAuthority(ctx, required) {
|
|
18
|
+
return resolveOrgAuthorityInstrument(ctx, required) !== undefined;
|
|
19
|
+
}
|
|
20
|
+
//# sourceMappingURL=holds-org-authority.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"holds-org-authority.js","sourceRoot":"","sources":["../../../src/nestjs/auth/holds-org-authority.ts"],"names":[],"mappings":";;AAgGA,sEAWC;AAuBD,8CAKC;AAvID,0DAAoE;AAEpE,sDAAoE;AACpE,mDAAkD;AA6FlD,SAAgB,6BAA6B,CAC3C,GAA8C,EAC9C,QAAiB;IAEjB,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS,IAAI,IAAA,2BAAgB,EAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC;QACzE,OAAO,EAAE,IAAI,EAAE,0BAAkB,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;IACpE,CAAC;IACD,IAAI,IAAA,+BAAe,EAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,EAAE,IAAI,EAAE,0BAAkB,CAAC,aAAa,EAAE,CAAC;IACpD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAuBD,SAAgB,iBAAiB,CAC/B,GAA8C,EAC9C,QAAiB;IAEjB,OAAO,6BAA6B,CAAC,GAAG,EAAE,QAAQ,CAAC,KAAK,SAAS,CAAC;AACpE,CAAC"}
|
|
@@ -8,14 +8,15 @@ export { OrgRoleGuard, RequireOrgRole, REQUIRE_ORG_ROLE, } from './org-role.guar
|
|
|
8
8
|
export { ServiceOrOrgRoleGuard } from './service-or-org-role.guard';
|
|
9
9
|
export { OrgRole, OrgRolesClaimKey, ORG_ROLES_CLAIM_KEYS, resolveOrgRoles, resolveOrgRoleForOrg, orgRoleSatisfies, } from '../../lib/auth/org-role';
|
|
10
10
|
export { PlatformRole, hasPlatformRole } from './platform-role';
|
|
11
|
+
export { holdsOrgAuthority, resolveOrgAuthorityInstrument, type OrgAuthorityInstrument, } from './holds-org-authority';
|
|
11
12
|
export { PlatformAdminGuard } from './platform-admin.guard';
|
|
12
13
|
export { configureAuthMiddleware, type ConfigureAuthMiddlewareOptions, } from './configure-auth-middleware';
|
|
13
14
|
export { OrgClaimKey, OrgHeaderName, ORG_CLAIM_KEYS, resolveOrgClaim, } from '../../lib/auth/org-claim';
|
|
14
15
|
export { RequireOrgClaim, REQUIRE_ORG_CLAIM } from './org-claim-required';
|
|
15
|
-
export { OrgAuthoritySource, type OrgAuthorityVerdict, type OrgAuthorityCallerFacts, resolveOrgAuthority, isOrgAuthorityProven, orgAuthorityRequiresProof,
|
|
16
|
-
export { ORG_AUTHORITY_OBSERVATION_LIMIT, UNKNOWN_CLIENT_ID, type OrgAuthorityObservation, type OrgAuthorityCensus, recordUnprovenOrgAuthority, orgAuthorityCensus, resetOrgAuthorityCensus, } from '../../lib/auth/org-authority-observations';
|
|
16
|
+
export { OrgAuthoritySource, type OrgAuthorityVerdict, type OrgAuthorityCaller, type OrgAuthorityCallerFacts, resolveOrgAuthority, isOrgAuthorityProven, orgAuthorityRequiresProof, } from '../../lib/auth/org-authority';
|
|
17
|
+
export { ORG_AUTHORITY_OBSERVATION_LIMIT, UNKNOWN_CLIENT_ID, type OrgAuthorityObservation, type OrgAuthorityCensus, recordUnprovenOrgAuthority, recordServiceRelayedOrgAuthority, orgAuthorityCensus, orgAuthorityRelayCensus, resetOrgAuthorityCensus, } from '../../lib/auth/org-authority-observations';
|
|
17
18
|
export { resolveActorChainFromClaims, UnclassifiableActorHopError, UnknownActorHopSubjectKindError, ContradictoryActorHopKindError, MalformedActorHopError, } from './delegation-chain';
|
|
18
|
-
export { SUBJECT_KIND_CLAIM, readDeclaredSubjectKind, } from './actor-classification';
|
|
19
|
+
export { SUBJECT_KIND_CLAIM, readDeclaredSubjectKind, UnknownTokenClassError, } from './actor-classification';
|
|
19
20
|
export { RealmTokenVerifier, type MultiRealmKeySource, type VerifiedTokenSource, } from './realm-token-verifier';
|
|
20
21
|
export { DEFAULT_TRUSTED_ISSUER_ALGORITHMS, TRUSTED_ISSUERS_ENV_VAR, TrustedIssuerConfigError, TrustedIssuerRegistry, parseTrustedIssuersFromEnv, type TrustedIssuerEntry, } from '@xemahq/oidc-guard';
|
|
21
22
|
//# sourceMappingURL=index.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/nestjs/auth/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EACL,mBAAmB,EACnB,KAAK,iBAAiB,EACtB,KAAK,sBAAsB,GAC5B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EACL,iBAAiB,EACjB,oBAAoB,GACrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,YAAY,EACZ,cAAc,EACd,gBAAgB,GACjB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACpE,OAAO,EACL,OAAO,EACP,gBAAgB,EAChB,oBAAoB,EACpB,eAAe,EACf,oBAAoB,EACpB,gBAAgB,GACjB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EACL,uBAAuB,EACvB,KAAK,8BAA8B,GACpC,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,WAAW,EACX,aAAa,EACb,cAAc,EACd,eAAe,GAChB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAC1E,OAAO,EACL,kBAAkB,EAClB,KAAK,mBAAmB,EACxB,KAAK,uBAAuB,EAC5B,mBAAmB,EACnB,oBAAoB,EACpB,yBAAyB,
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/nestjs/auth/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EACL,mBAAmB,EACnB,KAAK,iBAAiB,EACtB,KAAK,sBAAsB,GAC5B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EACL,iBAAiB,EACjB,oBAAoB,GACrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,YAAY,EACZ,cAAc,EACd,gBAAgB,GACjB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACpE,OAAO,EACL,OAAO,EACP,gBAAgB,EAChB,oBAAoB,EACpB,eAAe,EACf,oBAAoB,EACpB,gBAAgB,GACjB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAChE,OAAO,EACL,iBAAiB,EACjB,6BAA6B,EAC7B,KAAK,sBAAsB,GAC5B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EACL,uBAAuB,EACvB,KAAK,8BAA8B,GACpC,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,WAAW,EACX,aAAa,EACb,cAAc,EACd,eAAe,GAChB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAC1E,OAAO,EACL,kBAAkB,EAClB,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACvB,KAAK,uBAAuB,EAC5B,mBAAmB,EACnB,oBAAoB,EACpB,yBAAyB,GAC1B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,+BAA+B,EAC/B,iBAAiB,EACjB,KAAK,uBAAuB,EAC5B,KAAK,kBAAkB,EACvB,0BAA0B,EAC1B,gCAAgC,EAChC,kBAAkB,EAClB,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,2CAA2C,CAAC;AACnD,OAAO,EACL,2BAA2B,EAC3B,2BAA2B,EAC3B,+BAA+B,EAC/B,8BAA8B,EAC9B,sBAAsB,GACvB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,kBAAkB,EAClB,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,kBAAkB,EAClB,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,GACzB,MAAM,wBAAwB,CAAC;AAOhC,OAAO,EACL,iCAAiC,EACjC,uBAAuB,EACvB,wBAAwB,EACxB,qBAAqB,EACrB,0BAA0B,EAC1B,KAAK,kBAAkB,GACxB,MAAM,oBAAoB,CAAC"}
|
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
"use strict";
|
|
2
2
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
exports.
|
|
4
|
-
exports.parseTrustedIssuersFromEnv = exports.TrustedIssuerRegistry = exports.TrustedIssuerConfigError = exports.TRUSTED_ISSUERS_ENV_VAR = exports.DEFAULT_TRUSTED_ISSUER_ALGORITHMS = void 0;
|
|
3
|
+
exports.UnknownTokenClassError = exports.readDeclaredSubjectKind = exports.SUBJECT_KIND_CLAIM = exports.MalformedActorHopError = exports.ContradictoryActorHopKindError = exports.UnknownActorHopSubjectKindError = exports.UnclassifiableActorHopError = exports.resolveActorChainFromClaims = exports.resetOrgAuthorityCensus = exports.orgAuthorityRelayCensus = exports.orgAuthorityCensus = exports.recordServiceRelayedOrgAuthority = exports.recordUnprovenOrgAuthority = exports.UNKNOWN_CLIENT_ID = exports.ORG_AUTHORITY_OBSERVATION_LIMIT = exports.orgAuthorityRequiresProof = exports.isOrgAuthorityProven = exports.resolveOrgAuthority = exports.OrgAuthoritySource = exports.REQUIRE_ORG_CLAIM = exports.RequireOrgClaim = exports.resolveOrgClaim = exports.ORG_CLAIM_KEYS = exports.OrgHeaderName = exports.OrgClaimKey = exports.configureAuthMiddleware = exports.PlatformAdminGuard = exports.resolveOrgAuthorityInstrument = exports.holdsOrgAuthority = exports.hasPlatformRole = exports.PlatformRole = exports.orgRoleSatisfies = exports.resolveOrgRoleForOrg = exports.resolveOrgRoles = exports.ORG_ROLES_CLAIM_KEYS = exports.OrgRolesClaimKey = exports.OrgRole = exports.ServiceOrOrgRoleGuard = exports.REQUIRE_ORG_ROLE = exports.RequireOrgRole = exports.OrgRoleGuard = exports.REQUIRE_TOKEN_CLASS = exports.RequireTokenClass = exports.TokenClassGuard = exports.isDirectServiceActor = exports.ServiceActorGuard = exports.InternalCallerGuard = exports.ServiceTokenGuard = exports.AUTH_MODULE_OPTIONS = exports.AuthModule = void 0;
|
|
4
|
+
exports.parseTrustedIssuersFromEnv = exports.TrustedIssuerRegistry = exports.TrustedIssuerConfigError = exports.TRUSTED_ISSUERS_ENV_VAR = exports.DEFAULT_TRUSTED_ISSUER_ALGORITHMS = exports.RealmTokenVerifier = void 0;
|
|
5
5
|
var auth_module_1 = require("./auth.module");
|
|
6
6
|
Object.defineProperty(exports, "AuthModule", { enumerable: true, get: function () { return auth_module_1.AuthModule; } });
|
|
7
7
|
var auth_module_options_1 = require("./auth-module-options");
|
|
@@ -33,6 +33,9 @@ Object.defineProperty(exports, "orgRoleSatisfies", { enumerable: true, get: func
|
|
|
33
33
|
var platform_role_1 = require("./platform-role");
|
|
34
34
|
Object.defineProperty(exports, "PlatformRole", { enumerable: true, get: function () { return platform_role_1.PlatformRole; } });
|
|
35
35
|
Object.defineProperty(exports, "hasPlatformRole", { enumerable: true, get: function () { return platform_role_1.hasPlatformRole; } });
|
|
36
|
+
var holds_org_authority_1 = require("./holds-org-authority");
|
|
37
|
+
Object.defineProperty(exports, "holdsOrgAuthority", { enumerable: true, get: function () { return holds_org_authority_1.holdsOrgAuthority; } });
|
|
38
|
+
Object.defineProperty(exports, "resolveOrgAuthorityInstrument", { enumerable: true, get: function () { return holds_org_authority_1.resolveOrgAuthorityInstrument; } });
|
|
36
39
|
var platform_admin_guard_1 = require("./platform-admin.guard");
|
|
37
40
|
Object.defineProperty(exports, "PlatformAdminGuard", { enumerable: true, get: function () { return platform_admin_guard_1.PlatformAdminGuard; } });
|
|
38
41
|
var configure_auth_middleware_1 = require("./configure-auth-middleware");
|
|
@@ -50,15 +53,13 @@ Object.defineProperty(exports, "OrgAuthoritySource", { enumerable: true, get: fu
|
|
|
50
53
|
Object.defineProperty(exports, "resolveOrgAuthority", { enumerable: true, get: function () { return org_authority_1.resolveOrgAuthority; } });
|
|
51
54
|
Object.defineProperty(exports, "isOrgAuthorityProven", { enumerable: true, get: function () { return org_authority_1.isOrgAuthorityProven; } });
|
|
52
55
|
Object.defineProperty(exports, "orgAuthorityRequiresProof", { enumerable: true, get: function () { return org_authority_1.orgAuthorityRequiresProof; } });
|
|
53
|
-
Object.defineProperty(exports, "OrgAuthorityMode", { enumerable: true, get: function () { return org_authority_1.OrgAuthorityMode; } });
|
|
54
|
-
Object.defineProperty(exports, "ORG_AUTHORITY_MODE_ENV", { enumerable: true, get: function () { return org_authority_1.ORG_AUTHORITY_MODE_ENV; } });
|
|
55
|
-
Object.defineProperty(exports, "InvalidOrgAuthorityModeError", { enumerable: true, get: function () { return org_authority_1.InvalidOrgAuthorityModeError; } });
|
|
56
|
-
Object.defineProperty(exports, "resolveOrgAuthorityMode", { enumerable: true, get: function () { return org_authority_1.resolveOrgAuthorityMode; } });
|
|
57
56
|
var org_authority_observations_1 = require("../../lib/auth/org-authority-observations");
|
|
58
57
|
Object.defineProperty(exports, "ORG_AUTHORITY_OBSERVATION_LIMIT", { enumerable: true, get: function () { return org_authority_observations_1.ORG_AUTHORITY_OBSERVATION_LIMIT; } });
|
|
59
58
|
Object.defineProperty(exports, "UNKNOWN_CLIENT_ID", { enumerable: true, get: function () { return org_authority_observations_1.UNKNOWN_CLIENT_ID; } });
|
|
60
59
|
Object.defineProperty(exports, "recordUnprovenOrgAuthority", { enumerable: true, get: function () { return org_authority_observations_1.recordUnprovenOrgAuthority; } });
|
|
60
|
+
Object.defineProperty(exports, "recordServiceRelayedOrgAuthority", { enumerable: true, get: function () { return org_authority_observations_1.recordServiceRelayedOrgAuthority; } });
|
|
61
61
|
Object.defineProperty(exports, "orgAuthorityCensus", { enumerable: true, get: function () { return org_authority_observations_1.orgAuthorityCensus; } });
|
|
62
|
+
Object.defineProperty(exports, "orgAuthorityRelayCensus", { enumerable: true, get: function () { return org_authority_observations_1.orgAuthorityRelayCensus; } });
|
|
62
63
|
Object.defineProperty(exports, "resetOrgAuthorityCensus", { enumerable: true, get: function () { return org_authority_observations_1.resetOrgAuthorityCensus; } });
|
|
63
64
|
var delegation_chain_1 = require("./delegation-chain");
|
|
64
65
|
Object.defineProperty(exports, "resolveActorChainFromClaims", { enumerable: true, get: function () { return delegation_chain_1.resolveActorChainFromClaims; } });
|
|
@@ -69,6 +70,7 @@ Object.defineProperty(exports, "MalformedActorHopError", { enumerable: true, get
|
|
|
69
70
|
var actor_classification_1 = require("./actor-classification");
|
|
70
71
|
Object.defineProperty(exports, "SUBJECT_KIND_CLAIM", { enumerable: true, get: function () { return actor_classification_1.SUBJECT_KIND_CLAIM; } });
|
|
71
72
|
Object.defineProperty(exports, "readDeclaredSubjectKind", { enumerable: true, get: function () { return actor_classification_1.readDeclaredSubjectKind; } });
|
|
73
|
+
Object.defineProperty(exports, "UnknownTokenClassError", { enumerable: true, get: function () { return actor_classification_1.UnknownTokenClassError; } });
|
|
72
74
|
var realm_token_verifier_1 = require("./realm-token-verifier");
|
|
73
75
|
Object.defineProperty(exports, "RealmTokenVerifier", { enumerable: true, get: function () { return realm_token_verifier_1.RealmTokenVerifier; } });
|
|
74
76
|
var oidc_guard_1 = require("@xemahq/oidc-guard");
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/nestjs/auth/index.ts"],"names":[],"mappings":";;;;AAAA,6CAA2C;AAAlC,yGAAA,UAAU,OAAA;AACnB,6DAI+B;AAH7B,0HAAA,mBAAmB,OAAA;AAIrB,6DAA0D;AAAjD,wHAAA,iBAAiB,OAAA;AAC1B,iEAA8D;AAArD,4HAAA,mBAAmB,OAAA;AAC5B,6DAG+B;AAF7B,wHAAA,iBAAiB,OAAA;AACjB,2HAAA,oBAAoB,OAAA;AAEtB,yDAI6B;AAH3B,oHAAA,eAAe,OAAA;AACf,sHAAA,iBAAiB,OAAA;AACjB,wHAAA,mBAAmB,OAAA;AAErB,mDAI0B;AAHxB,8GAAA,YAAY,OAAA;AACZ,gHAAA,cAAc,OAAA;AACd,kHAAA,gBAAgB,OAAA;AAElB,yEAAoE;AAA3D,kIAAA,qBAAqB,OAAA;AAC9B,oDAOiC;AAN/B,mGAAA,OAAO,OAAA;AACP,4GAAA,gBAAgB,OAAA;AAChB,gHAAA,oBAAoB,OAAA;AACpB,2GAAA,eAAe,OAAA;AACf,gHAAA,oBAAoB,OAAA;AACpB,4GAAA,gBAAgB,OAAA;AAElB,iDAAgE;AAAvD,6GAAA,YAAY,OAAA;AAAE,gHAAA,eAAe,OAAA;AACtC,+DAA4D;AAAnD,0HAAA,kBAAkB,OAAA;AAC3B,yEAGqC;AAFnC,oIAAA,uBAAuB,OAAA;AAGzB,sDAKkC;AAJhC,wGAAA,WAAW,OAAA;AACX,0GAAA,aAAa,OAAA;AACb,2GAAA,cAAc,OAAA;AACd,4GAAA,eAAe,OAAA;AAEjB,2DAA0E;AAAjE,qHAAA,eAAe,OAAA;AAAE,uHAAA,iBAAiB,OAAA;AAC3C,
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/nestjs/auth/index.ts"],"names":[],"mappings":";;;;AAAA,6CAA2C;AAAlC,yGAAA,UAAU,OAAA;AACnB,6DAI+B;AAH7B,0HAAA,mBAAmB,OAAA;AAIrB,6DAA0D;AAAjD,wHAAA,iBAAiB,OAAA;AAC1B,iEAA8D;AAArD,4HAAA,mBAAmB,OAAA;AAC5B,6DAG+B;AAF7B,wHAAA,iBAAiB,OAAA;AACjB,2HAAA,oBAAoB,OAAA;AAEtB,yDAI6B;AAH3B,oHAAA,eAAe,OAAA;AACf,sHAAA,iBAAiB,OAAA;AACjB,wHAAA,mBAAmB,OAAA;AAErB,mDAI0B;AAHxB,8GAAA,YAAY,OAAA;AACZ,gHAAA,cAAc,OAAA;AACd,kHAAA,gBAAgB,OAAA;AAElB,yEAAoE;AAA3D,kIAAA,qBAAqB,OAAA;AAC9B,oDAOiC;AAN/B,mGAAA,OAAO,OAAA;AACP,4GAAA,gBAAgB,OAAA;AAChB,gHAAA,oBAAoB,OAAA;AACpB,2GAAA,eAAe,OAAA;AACf,gHAAA,oBAAoB,OAAA;AACpB,4GAAA,gBAAgB,OAAA;AAElB,iDAAgE;AAAvD,6GAAA,YAAY,OAAA;AAAE,gHAAA,eAAe,OAAA;AACtC,6DAI+B;AAH7B,wHAAA,iBAAiB,OAAA;AACjB,oIAAA,6BAA6B,OAAA;AAG/B,+DAA4D;AAAnD,0HAAA,kBAAkB,OAAA;AAC3B,yEAGqC;AAFnC,oIAAA,uBAAuB,OAAA;AAGzB,sDAKkC;AAJhC,wGAAA,WAAW,OAAA;AACX,0GAAA,aAAa,OAAA;AACb,2GAAA,cAAc,OAAA;AACd,4GAAA,eAAe,OAAA;AAEjB,2DAA0E;AAAjE,qHAAA,eAAe,OAAA;AAAE,uHAAA,iBAAiB,OAAA;AAC3C,8DAQsC;AAPpC,mHAAA,kBAAkB,OAAA;AAIlB,oHAAA,mBAAmB,OAAA;AACnB,qHAAA,oBAAoB,OAAA;AACpB,0HAAA,yBAAyB,OAAA;AAE3B,wFAUmD;AATjD,6IAAA,+BAA+B,OAAA;AAC/B,+HAAA,iBAAiB,OAAA;AAGjB,wIAAA,0BAA0B,OAAA;AAC1B,8IAAA,gCAAgC,OAAA;AAChC,gIAAA,kBAAkB,OAAA;AAClB,qIAAA,uBAAuB,OAAA;AACvB,qIAAA,uBAAuB,OAAA;AAEzB,uDAM4B;AAL1B,+HAAA,2BAA2B,OAAA;AAC3B,+HAAA,2BAA2B,OAAA;AAC3B,mIAAA,+BAA+B,OAAA;AAC/B,kIAAA,8BAA8B,OAAA;AAC9B,0HAAA,sBAAsB,OAAA;AAExB,+DAIgC;AAH9B,0HAAA,kBAAkB,OAAA;AAClB,+HAAA,uBAAuB,OAAA;AACvB,8HAAA,sBAAsB,OAAA;AAExB,+DAIgC;AAH9B,0HAAA,kBAAkB,OAAA;AAUpB,iDAO4B;AAN1B,+HAAA,iCAAiC,OAAA;AACjC,qHAAA,uBAAuB,OAAA;AACvB,sHAAA,wBAAwB,OAAA;AACxB,mHAAA,qBAAqB,OAAA;AACrB,wHAAA,0BAA0B,OAAA"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"org-role.guard.d.ts","sourceRoot":"","sources":["../../../src/nestjs/auth/org-role.guard.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,WAAW,EACX,gBAAgB,EAMjB,MAAM,gBAAgB,CAAC;AAKxB,OAAO,EAAE,OAAO,
|
|
1
|
+
{"version":3,"file":"org-role.guard.d.ts","sourceRoot":"","sources":["../../../src/nestjs/auth/org-role.guard.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,WAAW,EACX,gBAAgB,EAMjB,MAAM,gBAAgB,CAAC;AAKxB,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAIlD,eAAO,MAAM,gBAAgB,0BAA0B,CAAC;AAqBxD,eAAO,MAAM,cAAc,GACzB,MAAM,OAAO,KACZ,eAAe,GAAG,cAAqD,CAAC;AAkB3E,qBACa,YAAa,YAAW,WAAW;IAC9C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiC;IAExD,WAAW,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO;CA0ChD"}
|
|
@@ -11,7 +11,7 @@ exports.OrgRoleGuard = exports.RequireOrgRole = exports.REQUIRE_ORG_ROLE = void
|
|
|
11
11
|
const common_1 = require("@nestjs/common");
|
|
12
12
|
const decorator_metadata_1 = require("../decorator-metadata");
|
|
13
13
|
const request_context_1 = require("../../lib/request-context");
|
|
14
|
-
const
|
|
14
|
+
const holds_org_authority_1 = require("./holds-org-authority");
|
|
15
15
|
exports.REQUIRE_ORG_ROLE = 'xema:require-org-role';
|
|
16
16
|
const RequireOrgRole = (role) => (0, common_1.SetMetadata)(exports.REQUIRE_ORG_ROLE, role);
|
|
17
17
|
exports.RequireOrgRole = RequireOrgRole;
|
|
@@ -35,7 +35,7 @@ let OrgRoleGuard = OrgRoleGuard_1 = class OrgRoleGuard {
|
|
|
35
35
|
message: 'Internal route misconfigured: missing request context.',
|
|
36
36
|
});
|
|
37
37
|
}
|
|
38
|
-
if (!(0,
|
|
38
|
+
if (!(0, holds_org_authority_1.holdsOrgAuthority)(ctx, required)) {
|
|
39
39
|
this.logger.warn({
|
|
40
40
|
message: 'org-role-denied',
|
|
41
41
|
route: `${request.method} ${request.originalUrl}`,
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"org-role.guard.js","sourceRoot":"","sources":["../../../src/nestjs/auth/org-role.guard.ts"],"names":[],"mappings":";;;;;;;;;;AAAA,2CAQwB;AAExB,8DAA8D;AAC9D,+DAA4D;
|
|
1
|
+
{"version":3,"file":"org-role.guard.js","sourceRoot":"","sources":["../../../src/nestjs/auth/org-role.guard.ts"],"names":[],"mappings":";;;;;;;;;;AAAA,2CAQwB;AAExB,8DAA8D;AAC9D,+DAA4D;AAG5D,+DAA0D;AAG7C,QAAA,gBAAgB,GAAG,uBAAuB,CAAC;AAqBjD,MAAM,cAAc,GAAG,CAC5B,IAAa,EACqB,EAAE,CAAC,IAAA,oBAAW,EAAC,wBAAgB,EAAE,IAAI,CAAC,CAAC;AAF9D,QAAA,cAAc,kBAEgD;AAmBpE,IAAM,YAAY,oBAAlB,MAAM,YAAY;IACN,MAAM,GAAG,IAAI,eAAM,CAAC,cAAY,CAAC,IAAI,CAAC,CAAC;IAExD,WAAW,CAAC,OAAyB;QACnC,MAAM,QAAQ,GAAG,IAAA,0CAAqB,EAAU,wBAAgB,EAAE;YAChE,OAAO,CAAC,UAAU,EAAE;YACpB,OAAO,CAAC,QAAQ,EAAE;SACnB,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAAW,CAAC;QAC7D,MAAM,GAAG,GAAI,OAA8C,CACzD,iCAAe,CACc,CAAC;QAEhC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,iDAAiD;gBAC/C,qDAAqD,CACxD,CAAC;YACF,MAAM,IAAI,qCAA4B,CAAC;gBACrC,IAAI,EAAE,yBAAyB;gBAC/B,OAAO,EAAE,wDAAwD;aAClE,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,IAAA,uCAAiB,EAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,CAAC;YACtC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;gBACf,OAAO,EAAE,iBAAiB;gBAC1B,KAAK,EAAE,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,WAAW,EAAE;gBACjD,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,IAAI;gBAC5B,eAAe,EAAE,QAAQ;aAC1B,CAAC,CAAC;YACH,MAAM,IAAI,2BAAkB,CAAC;gBAC3B,IAAI,EAAE,wBAAwB;gBAC9B,OAAO,EAAE,oCAAoC,QAAQ,cAAc;aACpE,CAAC,CAAC;QACL,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;CACF,CAAA;AA7CY,oCAAY;uBAAZ,YAAY;IADxB,IAAA,mBAAU,GAAE;GACA,YAAY,CA6CxB"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"service-or-org-role.guard.d.ts","sourceRoot":"","sources":["../../../src/nestjs/auth/service-or-org-role.guard.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,WAAW,EACX,gBAAgB,EAKjB,MAAM,gBAAgB,CAAC;
|
|
1
|
+
{"version":3,"file":"service-or-org-role.guard.d.ts","sourceRoot":"","sources":["../../../src/nestjs/auth/service-or-org-role.guard.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,WAAW,EACX,gBAAgB,EAKjB,MAAM,gBAAgB,CAAC;AAkDxB,qBACa,qBAAsB,YAAW,WAAW;IACvD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA0C;IAEjE,WAAW,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO;CAiDhD"}
|
|
@@ -11,7 +11,7 @@ exports.ServiceOrOrgRoleGuard = void 0;
|
|
|
11
11
|
const common_1 = require("@nestjs/common");
|
|
12
12
|
const decorator_metadata_1 = require("../decorator-metadata");
|
|
13
13
|
const request_context_1 = require("../../lib/request-context");
|
|
14
|
-
const
|
|
14
|
+
const holds_org_authority_1 = require("./holds-org-authority");
|
|
15
15
|
const service_actor_guard_1 = require("./service-actor.guard");
|
|
16
16
|
const org_role_guard_1 = require("./org-role.guard");
|
|
17
17
|
let ServiceOrOrgRoleGuard = ServiceOrOrgRoleGuard_1 = class ServiceOrOrgRoleGuard {
|
|
@@ -37,7 +37,7 @@ let ServiceOrOrgRoleGuard = ServiceOrOrgRoleGuard_1 = class ServiceOrOrgRoleGuar
|
|
|
37
37
|
if ((0, service_actor_guard_1.isDirectServiceActor)(ctx)) {
|
|
38
38
|
return true;
|
|
39
39
|
}
|
|
40
|
-
if (!(0,
|
|
40
|
+
if (!(0, holds_org_authority_1.holdsOrgAuthority)(ctx, required)) {
|
|
41
41
|
this.logger.warn({
|
|
42
42
|
message: 'service-or-org-role-denied',
|
|
43
43
|
route: `${request.method} ${request.originalUrl}`,
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"service-or-org-role.guard.js","sourceRoot":"","sources":["../../../src/nestjs/auth/service-or-org-role.guard.ts"],"names":[],"mappings":";;;;;;;;;;AAAA,2CAOwB;AAExB,8DAA8D;AAC9D,+DAA4D;
|
|
1
|
+
{"version":3,"file":"service-or-org-role.guard.js","sourceRoot":"","sources":["../../../src/nestjs/auth/service-or-org-role.guard.ts"],"names":[],"mappings":";;;;;;;;;;AAAA,2CAOwB;AAExB,8DAA8D;AAC9D,+DAA4D;AAG5D,+DAA0D;AAC1D,+DAA6D;AAC7D,qDAAoD;AA2C7C,IAAM,qBAAqB,6BAA3B,MAAM,qBAAqB;IACf,MAAM,GAAG,IAAI,eAAM,CAAC,uBAAqB,CAAC,IAAI,CAAC,CAAC;IAEjE,WAAW,CAAC,OAAyB;QACnC,MAAM,QAAQ,GAAG,IAAA,0CAAqB,EAAU,iCAAgB,EAAE;YAChE,OAAO,CAAC,UAAU,EAAE;YACpB,OAAO,CAAC,QAAQ,EAAE;SACnB,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAAW,CAAC;QAC7D,MAAM,GAAG,GAAI,OAA8C,CACzD,iCAAe,CACc,CAAC;QAEhC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,0DAA0D;gBACxD,qDAAqD,CACxD,CAAC;YACF,MAAM,IAAI,qCAA4B,CAAC;gBACrC,IAAI,EAAE,yBAAyB;gBAC/B,OAAO,EAAE,wDAAwD;aAClE,CAAC,CAAC;QACL,CAAC;QAGD,IAAI,IAAA,0CAAoB,EAAC,GAAG,CAAC,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAC;QACd,CAAC;QAID,IAAI,CAAC,IAAA,uCAAiB,EAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,CAAC;YACtC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;gBACf,OAAO,EAAE,4BAA4B;gBACrC,KAAK,EAAE,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,WAAW,EAAE;gBACjD,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,IAAI;gBAC5B,eAAe,EAAE,QAAQ;aAC1B,CAAC,CAAC;YACH,MAAM,IAAI,2BAAkB,CAAC;gBAC3B,IAAI,EAAE,wBAAwB;gBAC9B,OAAO,EAAE,oCAAoC,QAAQ,gDAAgD;aACtG,CAAC,CAAC;QACL,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;CACF,CAAA;AApDY,sDAAqB;gCAArB,qBAAqB;IADjC,IAAA,mBAAU,GAAE;GACA,qBAAqB,CAoDjC"}
|
|
@@ -0,0 +1,16 @@
|
|
|
1
|
+
import type { RequestContext } from '../lib/request-context';
|
|
2
|
+
export declare enum CapabilityEdgeTenancyError {
|
|
3
|
+
BodyOrgForbidden = "CAPABILITY_EDGE_BODY_ORG_FORBIDDEN",
|
|
4
|
+
MissingOrg = "CAPABILITY_EDGE_MISSING_ORG",
|
|
5
|
+
MissingProject = "CAPABILITY_EDGE_MISSING_PROJECT",
|
|
6
|
+
ProjectMismatch = "CAPABILITY_EDGE_PROJECT_MISMATCH"
|
|
7
|
+
}
|
|
8
|
+
export interface CapabilityTenancy {
|
|
9
|
+
readonly orgId: string;
|
|
10
|
+
readonly projectId: string;
|
|
11
|
+
}
|
|
12
|
+
export declare function resolveCapabilityTenancy(ctx: RequestContext, body: {
|
|
13
|
+
readonly orgId?: string;
|
|
14
|
+
readonly projectId?: string;
|
|
15
|
+
}): CapabilityTenancy;
|
|
16
|
+
//# sourceMappingURL=capability-edge-tenancy.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"capability-edge-tenancy.d.ts","sourceRoot":"","sources":["../../src/nestjs/capability-edge-tenancy.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAO7D,oBAAY,0BAA0B;IACpC,gBAAgB,uCAAuC;IACvD,UAAU,gCAAgC;IAC1C,cAAc,oCAAoC;IAClD,eAAe,qCAAqC;CACrD;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AA8CD,wBAAgB,wBAAwB,CACtC,GAAG,EAAE,cAAc,EACnB,IAAI,EAAE;IAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GAC7D,iBAAiB,CAkCnB"}
|
|
@@ -0,0 +1,44 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.CapabilityEdgeTenancyError = void 0;
|
|
4
|
+
exports.resolveCapabilityTenancy = resolveCapabilityTenancy;
|
|
5
|
+
const common_1 = require("@nestjs/common");
|
|
6
|
+
var CapabilityEdgeTenancyError;
|
|
7
|
+
(function (CapabilityEdgeTenancyError) {
|
|
8
|
+
CapabilityEdgeTenancyError["BodyOrgForbidden"] = "CAPABILITY_EDGE_BODY_ORG_FORBIDDEN";
|
|
9
|
+
CapabilityEdgeTenancyError["MissingOrg"] = "CAPABILITY_EDGE_MISSING_ORG";
|
|
10
|
+
CapabilityEdgeTenancyError["MissingProject"] = "CAPABILITY_EDGE_MISSING_PROJECT";
|
|
11
|
+
CapabilityEdgeTenancyError["ProjectMismatch"] = "CAPABILITY_EDGE_PROJECT_MISMATCH";
|
|
12
|
+
})(CapabilityEdgeTenancyError || (exports.CapabilityEdgeTenancyError = CapabilityEdgeTenancyError = {}));
|
|
13
|
+
function resolveCapabilityTenancy(ctx, body) {
|
|
14
|
+
if (body.orgId !== undefined) {
|
|
15
|
+
throw new common_1.BadRequestException({
|
|
16
|
+
code: CapabilityEdgeTenancyError.BodyOrgForbidden,
|
|
17
|
+
message: 'The capability edge derives the tenant org from the authenticated ' +
|
|
18
|
+
'request (X-Xema-Org-Id), never from the request body. Remove `orgId` ' +
|
|
19
|
+
'from the payload.',
|
|
20
|
+
});
|
|
21
|
+
}
|
|
22
|
+
if (!ctx.orgId) {
|
|
23
|
+
throw new common_1.BadRequestException({
|
|
24
|
+
code: CapabilityEdgeTenancyError.MissingOrg,
|
|
25
|
+
message: 'The capability edge requires an authenticated tenant org (X-Xema-Org-Id).',
|
|
26
|
+
});
|
|
27
|
+
}
|
|
28
|
+
if (!ctx.projectId) {
|
|
29
|
+
throw new common_1.BadRequestException({
|
|
30
|
+
code: CapabilityEdgeTenancyError.MissingProject,
|
|
31
|
+
message: 'The capability edge requires a TRUSTED project scope (X-Project-Id), ' +
|
|
32
|
+
'stamped by the capability-router from the verified connection scope.',
|
|
33
|
+
});
|
|
34
|
+
}
|
|
35
|
+
if (body.projectId !== undefined && body.projectId !== ctx.projectId) {
|
|
36
|
+
throw new common_1.BadRequestException({
|
|
37
|
+
code: CapabilityEdgeTenancyError.ProjectMismatch,
|
|
38
|
+
message: `Body projectId "${body.projectId}" disagrees with the authenticated ` +
|
|
39
|
+
`project scope "${ctx.projectId}".`,
|
|
40
|
+
});
|
|
41
|
+
}
|
|
42
|
+
return { orgId: ctx.orgId, projectId: ctx.projectId };
|
|
43
|
+
}
|
|
44
|
+
//# sourceMappingURL=capability-edge-tenancy.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"capability-edge-tenancy.js","sourceRoot":"","sources":["../../src/nestjs/capability-edge-tenancy.ts"],"names":[],"mappings":";;;AAiEA,4DAqCC;AAtGD,2CAAqD;AASrD,IAAY,0BAKX;AALD,WAAY,0BAA0B;IACpC,qFAAuD,CAAA;IACvD,wEAA0C,CAAA;IAC1C,gFAAkD,CAAA;IAClD,kFAAoD,CAAA;AACtD,CAAC,EALW,0BAA0B,0CAA1B,0BAA0B,QAKrC;AAmDD,SAAgB,wBAAwB,CACtC,GAAmB,EACnB,IAA8D;IAE9D,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,IAAI,4BAAmB,CAAC;YAC5B,IAAI,EAAE,0BAA0B,CAAC,gBAAgB;YACjD,OAAO,EACL,oEAAoE;gBACpE,uEAAuE;gBACvE,mBAAmB;SACtB,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,4BAAmB,CAAC;YAC5B,IAAI,EAAE,0BAA0B,CAAC,UAAU;YAC3C,OAAO,EACL,2EAA2E;SAC9E,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;QACnB,MAAM,IAAI,4BAAmB,CAAC;YAC5B,IAAI,EAAE,0BAA0B,CAAC,cAAc;YAC/C,OAAO,EACL,uEAAuE;gBACvE,sEAAsE;SACzE,CAAC,CAAC;IACL,CAAC;IACD,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,SAAS,KAAK,GAAG,CAAC,SAAS,EAAE,CAAC;QACrE,MAAM,IAAI,4BAAmB,CAAC;YAC5B,IAAI,EAAE,0BAA0B,CAAC,eAAe;YAChD,OAAO,EACL,mBAAmB,IAAI,CAAC,SAAS,qCAAqC;gBACtE,kBAAkB,GAAG,CAAC,SAAS,IAAI;SACtC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC;AACxD,CAAC"}
|
|
@@ -1,11 +1,8 @@
|
|
|
1
1
|
import { ExceptionFilter, ArgumentsHost } from '@nestjs/common';
|
|
2
|
+
export declare function sendProblemResponse(host: ArgumentsHost, exception: unknown): void;
|
|
2
3
|
export declare class GlobalExceptionFilter implements ExceptionFilter {
|
|
3
4
|
private readonly logger;
|
|
4
5
|
catch(exception: unknown, host: ArgumentsHost): void;
|
|
5
|
-
private extractExceptionDetails;
|
|
6
|
-
private handleTenancyError;
|
|
7
|
-
private handleZodError;
|
|
8
|
-
private handleDataStoreClientError;
|
|
9
6
|
private logException;
|
|
10
7
|
}
|
|
11
8
|
//# sourceMappingURL=global-exception.filter.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"global-exception.filter.d.ts","sourceRoot":"","sources":["../../src/nestjs/global-exception.filter.ts"],"names":[],"mappings":"AAAA,OAAO,
|
|
1
|
+
{"version":3,"file":"global-exception.filter.d.ts","sourceRoot":"","sources":["../../src/nestjs/global-exception.filter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAS,aAAa,EAAU,MAAM,gBAAgB,CAAC;AA2B/E,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,aAAa,EACnB,SAAS,EAAE,OAAO,GACjB,IAAI,CAoBN;AAkDD,qBACa,qBAAsB,YAAW,eAAe;IAC3D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA0C;IAEjE,KAAK,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,GAAG,IAAI;IAQpD,OAAO,CAAC,YAAY;CAkCrB"}
|