@xemahq/platform-common 0.29.0 → 0.30.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (215) hide show
  1. package/dist/database/biome-database.d.ts +2 -11
  2. package/dist/database/biome-database.d.ts.map +1 -1
  3. package/dist/database/biome-database.js +4 -24
  4. package/dist/database/biome-database.js.map +1 -1
  5. package/dist/database/idempotency-record-schema.d.ts +6 -0
  6. package/dist/database/idempotency-record-schema.d.ts.map +1 -0
  7. package/dist/database/idempotency-record-schema.js +102 -0
  8. package/dist/database/idempotency-record-schema.js.map +1 -0
  9. package/dist/database/release-intent-schema.d.ts +6 -0
  10. package/dist/database/release-intent-schema.d.ts.map +1 -0
  11. package/dist/database/release-intent-schema.js +129 -0
  12. package/dist/database/release-intent-schema.js.map +1 -0
  13. package/dist/database/schema-source-reader.d.ts +7 -0
  14. package/dist/database/schema-source-reader.d.ts.map +1 -0
  15. package/dist/database/schema-source-reader.js +49 -0
  16. package/dist/database/schema-source-reader.js.map +1 -0
  17. package/dist/index.d.ts +4 -6
  18. package/dist/index.d.ts.map +1 -1
  19. package/dist/index.js +4 -29
  20. package/dist/index.js.map +1 -1
  21. package/dist/lib/agent-session.types.d.ts +0 -9
  22. package/dist/lib/agent-session.types.d.ts.map +1 -1
  23. package/dist/lib/agent-session.types.js +1 -11
  24. package/dist/lib/agent-session.types.js.map +1 -1
  25. package/dist/lib/auth/org-authority-observations.d.ts +2 -0
  26. package/dist/lib/auth/org-authority-observations.d.ts.map +1 -1
  27. package/dist/lib/auth/org-authority-observations.js +31 -12
  28. package/dist/lib/auth/org-authority-observations.js.map +1 -1
  29. package/dist/lib/auth/org-authority.d.ts +8 -11
  30. package/dist/lib/auth/org-authority.d.ts.map +1 -1
  31. package/dist/lib/auth/org-authority.js +12 -31
  32. package/dist/lib/auth/org-authority.js.map +1 -1
  33. package/dist/lib/auth/org-claim.d.ts.map +1 -1
  34. package/dist/lib/auth/org-claim.js.map +1 -1
  35. package/dist/lib/auth/org-role.d.ts +2 -6
  36. package/dist/lib/auth/org-role.d.ts.map +1 -1
  37. package/dist/lib/auth/org-role.js +10 -19
  38. package/dist/lib/auth/org-role.js.map +1 -1
  39. package/dist/lib/edge-stream/index.d.ts.map +1 -1
  40. package/dist/lib/edge-stream/index.js.map +1 -1
  41. package/dist/lib/errors/artifact-store-errors.d.ts +14 -0
  42. package/dist/lib/errors/artifact-store-errors.d.ts.map +1 -0
  43. package/dist/lib/errors/artifact-store-errors.js +41 -0
  44. package/dist/lib/errors/artifact-store-errors.js.map +1 -0
  45. package/dist/lib/errors/index.d.ts +3 -0
  46. package/dist/lib/errors/index.d.ts.map +1 -0
  47. package/dist/lib/{interaction-widgets → errors}/index.js +2 -3
  48. package/dist/lib/errors/index.js.map +1 -0
  49. package/dist/lib/errors/knowledge-graph-errors.d.ts +5 -0
  50. package/dist/lib/errors/knowledge-graph-errors.d.ts.map +1 -0
  51. package/dist/lib/errors/knowledge-graph-errors.js +17 -0
  52. package/dist/lib/errors/knowledge-graph-errors.js.map +1 -0
  53. package/dist/lib/manifest/manifest.enums.d.ts.map +1 -1
  54. package/dist/lib/manifest/manifest.enums.js.map +1 -1
  55. package/dist/lib/mcp-bridge-token.d.ts +0 -2
  56. package/dist/lib/mcp-bridge-token.d.ts.map +1 -1
  57. package/dist/lib/mcp-bridge-token.js +0 -8
  58. package/dist/lib/mcp-bridge-token.js.map +1 -1
  59. package/dist/lib/request-context.d.ts.map +1 -1
  60. package/dist/lib/request-context.js.map +1 -1
  61. package/dist/lib/to-json-column-value.d.ts +6 -0
  62. package/dist/lib/to-json-column-value.d.ts.map +1 -1
  63. package/dist/lib/to-json-column-value.js +19 -2
  64. package/dist/lib/to-json-column-value.js.map +1 -1
  65. package/dist/nestjs/auth/actor-classification.d.ts +4 -4
  66. package/dist/nestjs/auth/actor-classification.d.ts.map +1 -1
  67. package/dist/nestjs/auth/actor-classification.js +19 -11
  68. package/dist/nestjs/auth/actor-classification.js.map +1 -1
  69. package/dist/nestjs/auth/holds-org-authority.d.ts +12 -0
  70. package/dist/nestjs/auth/holds-org-authority.d.ts.map +1 -0
  71. package/dist/nestjs/auth/holds-org-authority.js +20 -0
  72. package/dist/nestjs/auth/holds-org-authority.js.map +1 -0
  73. package/dist/nestjs/auth/index.d.ts +4 -3
  74. package/dist/nestjs/auth/index.d.ts.map +1 -1
  75. package/dist/nestjs/auth/index.js +8 -6
  76. package/dist/nestjs/auth/index.js.map +1 -1
  77. package/dist/nestjs/auth/org-role.guard.d.ts.map +1 -1
  78. package/dist/nestjs/auth/org-role.guard.js +2 -2
  79. package/dist/nestjs/auth/org-role.guard.js.map +1 -1
  80. package/dist/nestjs/auth/service-or-org-role.guard.d.ts.map +1 -1
  81. package/dist/nestjs/auth/service-or-org-role.guard.js +2 -2
  82. package/dist/nestjs/auth/service-or-org-role.guard.js.map +1 -1
  83. package/dist/nestjs/capability-edge-tenancy.d.ts +16 -0
  84. package/dist/nestjs/capability-edge-tenancy.d.ts.map +1 -0
  85. package/dist/nestjs/capability-edge-tenancy.js +44 -0
  86. package/dist/nestjs/capability-edge-tenancy.js.map +1 -0
  87. package/dist/nestjs/global-exception.filter.d.ts +1 -4
  88. package/dist/nestjs/global-exception.filter.d.ts.map +1 -1
  89. package/dist/nestjs/global-exception.filter.js +53 -179
  90. package/dist/nestjs/global-exception.filter.js.map +1 -1
  91. package/dist/nestjs/idempotency/idempotency.service.d.ts.map +1 -1
  92. package/dist/nestjs/idempotency/idempotency.service.js +2 -1
  93. package/dist/nestjs/idempotency/idempotency.service.js.map +1 -1
  94. package/dist/nestjs/index.d.ts +11 -7
  95. package/dist/nestjs/index.d.ts.map +1 -1
  96. package/dist/nestjs/index.js +31 -10
  97. package/dist/nestjs/index.js.map +1 -1
  98. package/dist/nestjs/jwt-verification.guard.d.ts +4 -1
  99. package/dist/nestjs/jwt-verification.guard.d.ts.map +1 -1
  100. package/dist/nestjs/jwt-verification.guard.js +17 -4
  101. package/dist/nestjs/jwt-verification.guard.js.map +1 -1
  102. package/dist/nestjs/org-scope.d.ts +9 -0
  103. package/dist/nestjs/org-scope.d.ts.map +1 -0
  104. package/dist/nestjs/org-scope.js +26 -0
  105. package/dist/nestjs/org-scope.js.map +1 -0
  106. package/dist/nestjs/pagination.d.ts +20 -3
  107. package/dist/nestjs/pagination.d.ts.map +1 -1
  108. package/dist/nestjs/pagination.js +90 -13
  109. package/dist/nestjs/pagination.js.map +1 -1
  110. package/dist/nestjs/problem-details.dto.d.ts +15 -0
  111. package/dist/nestjs/problem-details.dto.d.ts.map +1 -0
  112. package/dist/nestjs/problem-details.dto.js +103 -0
  113. package/dist/nestjs/problem-details.dto.js.map +1 -0
  114. package/dist/nestjs/refusal.d.ts +27 -0
  115. package/dist/nestjs/refusal.d.ts.map +1 -0
  116. package/dist/nestjs/refusal.js +231 -0
  117. package/dist/nestjs/refusal.js.map +1 -0
  118. package/dist/nestjs/request-context.middleware.d.ts +1 -0
  119. package/dist/nestjs/request-context.middleware.d.ts.map +1 -1
  120. package/dist/nestjs/request-context.middleware.js +48 -19
  121. package/dist/nestjs/request-context.middleware.js.map +1 -1
  122. package/dist/nestjs/swagger.decorators.d.ts +1 -0
  123. package/dist/nestjs/swagger.decorators.d.ts.map +1 -1
  124. package/dist/nestjs/swagger.decorators.js +22 -2
  125. package/dist/nestjs/swagger.decorators.js.map +1 -1
  126. package/package.json +9 -3
  127. package/prisma-url.d.ts +38 -0
  128. package/prisma-url.js +84 -0
  129. package/dist/lib/briefcase/index.d.ts +0 -18
  130. package/dist/lib/briefcase/index.d.ts.map +0 -1
  131. package/dist/lib/briefcase/index.js +0 -72
  132. package/dist/lib/briefcase/index.js.map +0 -1
  133. package/dist/lib/errors/pipeline-errors.d.ts +0 -178
  134. package/dist/lib/errors/pipeline-errors.d.ts.map +0 -1
  135. package/dist/lib/errors/pipeline-errors.js +0 -316
  136. package/dist/lib/errors/pipeline-errors.js.map +0 -1
  137. package/dist/lib/interaction-widgets/factories.d.ts +0 -83
  138. package/dist/lib/interaction-widgets/factories.d.ts.map +0 -1
  139. package/dist/lib/interaction-widgets/factories.js +0 -173
  140. package/dist/lib/interaction-widgets/factories.js.map +0 -1
  141. package/dist/lib/interaction-widgets/index.d.ts +0 -4
  142. package/dist/lib/interaction-widgets/index.d.ts.map +0 -1
  143. package/dist/lib/interaction-widgets/index.js.map +0 -1
  144. package/dist/lib/interaction-widgets/validation.d.ts +0 -10
  145. package/dist/lib/interaction-widgets/validation.d.ts.map +0 -1
  146. package/dist/lib/interaction-widgets/validation.js +0 -214
  147. package/dist/lib/interaction-widgets/validation.js.map +0 -1
  148. package/dist/lib/interaction-widgets/widget-types.d.ts +0 -163
  149. package/dist/lib/interaction-widgets/widget-types.d.ts.map +0 -1
  150. package/dist/lib/interaction-widgets/widget-types.js +0 -22
  151. package/dist/lib/interaction-widgets/widget-types.js.map +0 -1
  152. package/dist/lib/run-events/action-types.d.ts +0 -40
  153. package/dist/lib/run-events/action-types.d.ts.map +0 -1
  154. package/dist/lib/run-events/action-types.js +0 -40
  155. package/dist/lib/run-events/action-types.js.map +0 -1
  156. package/dist/lib/run-events/event-families.d.ts +0 -95
  157. package/dist/lib/run-events/event-families.d.ts.map +0 -1
  158. package/dist/lib/run-events/event-families.js +0 -282
  159. package/dist/lib/run-events/event-families.js.map +0 -1
  160. package/dist/lib/run-events/index.d.ts +0 -7
  161. package/dist/lib/run-events/index.d.ts.map +0 -1
  162. package/dist/lib/run-events/index.js +0 -23
  163. package/dist/lib/run-events/index.js.map +0 -1
  164. package/dist/lib/run-events/run-event.types.d.ts +0 -60
  165. package/dist/lib/run-events/run-event.types.d.ts.map +0 -1
  166. package/dist/lib/run-events/run-event.types.js +0 -57
  167. package/dist/lib/run-events/run-event.types.js.map +0 -1
  168. package/dist/lib/run-events/run-live-snapshot.types.d.ts +0 -69
  169. package/dist/lib/run-events/run-live-snapshot.types.d.ts.map +0 -1
  170. package/dist/lib/run-events/run-live-snapshot.types.js +0 -17
  171. package/dist/lib/run-events/run-live-snapshot.types.js.map +0 -1
  172. package/dist/lib/run-events/snapshot-reducer.d.ts +0 -4
  173. package/dist/lib/run-events/snapshot-reducer.d.ts.map +0 -1
  174. package/dist/lib/run-events/snapshot-reducer.js +0 -313
  175. package/dist/lib/run-events/snapshot-reducer.js.map +0 -1
  176. package/dist/lib/run-events/stream-contracts.d.ts +0 -79
  177. package/dist/lib/run-events/stream-contracts.d.ts.map +0 -1
  178. package/dist/lib/run-events/stream-contracts.js +0 -27
  179. package/dist/lib/run-events/stream-contracts.js.map +0 -1
  180. package/dist/lib/tag-taxonomy/concern-tags.d.ts +0 -3
  181. package/dist/lib/tag-taxonomy/concern-tags.d.ts.map +0 -1
  182. package/dist/lib/tag-taxonomy/concern-tags.js +0 -26
  183. package/dist/lib/tag-taxonomy/concern-tags.js.map +0 -1
  184. package/dist/lib/tag-taxonomy/index.d.ts +0 -14
  185. package/dist/lib/tag-taxonomy/index.d.ts.map +0 -1
  186. package/dist/lib/tag-taxonomy/index.js +0 -59
  187. package/dist/lib/tag-taxonomy/index.js.map +0 -1
  188. package/dist/lib/tag-taxonomy/lifecycle-tags.d.ts +0 -3
  189. package/dist/lib/tag-taxonomy/lifecycle-tags.d.ts.map +0 -1
  190. package/dist/lib/tag-taxonomy/lifecycle-tags.js +0 -57
  191. package/dist/lib/tag-taxonomy/lifecycle-tags.js.map +0 -1
  192. package/dist/lib/tag-taxonomy/stack-tags.d.ts +0 -3
  193. package/dist/lib/tag-taxonomy/stack-tags.d.ts.map +0 -1
  194. package/dist/lib/tag-taxonomy/stack-tags.js +0 -26
  195. package/dist/lib/tag-taxonomy/stack-tags.js.map +0 -1
  196. package/dist/lib/tag-taxonomy/team-tags.d.ts +0 -3
  197. package/dist/lib/tag-taxonomy/team-tags.d.ts.map +0 -1
  198. package/dist/lib/tag-taxonomy/team-tags.js +0 -84
  199. package/dist/lib/tag-taxonomy/team-tags.js.map +0 -1
  200. package/dist/lib/tag-taxonomy/types.d.ts +0 -14
  201. package/dist/lib/tag-taxonomy/types.d.ts.map +0 -1
  202. package/dist/lib/tag-taxonomy/types.js +0 -3
  203. package/dist/lib/tag-taxonomy/types.js.map +0 -1
  204. package/dist/nestjs/error-response.dto.d.ts +0 -10
  205. package/dist/nestjs/error-response.dto.d.ts.map +0 -1
  206. package/dist/nestjs/error-response.dto.js +0 -46
  207. package/dist/nestjs/error-response.dto.js.map +0 -1
  208. package/dist/schemas/xema/analysis.json +0 -51
  209. package/dist/schemas/xema/clarification-contract.json +0 -49
  210. package/dist/schemas/xema/context.json +0 -79
  211. package/dist/schemas/xema/index.d.ts +0 -8
  212. package/dist/schemas/xema/index.d.ts.map +0 -1
  213. package/dist/schemas/xema/index.js +0 -28
  214. package/dist/schemas/xema/index.js.map +0 -1
  215. package/dist/schemas/xema/review-history.json +0 -42
@@ -1 +1 @@
1
- {"version":3,"file":"mcp-bridge-token.js","sourceRoot":"","sources":["../../src/lib/mcp-bridge-token.ts"],"names":[],"mappings":";;;AAmMA,gDAqBC;AA+BD,oDAcC;AAlPD,6CAA0D;AAE1D,kFAA4E;AAC5E,0EAIgD;AAChD,oEAI6C;AAC7C,0FAA0F;AAa1F,IAAY,kBASX;AATD,WAAY,kBAAkB;IAQ5B,4DAAsC,CAAA;AACxC,CAAC,EATW,kBAAkB,kCAAlB,kBAAkB,QAS7B;AAyHY,QAAA,gCAAgC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAQlD,QAAA,uBAAuB,GAAG,oBAAoB,CAAC;AAE5D,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;AACjE,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;AASrE,SAAgB,kBAAkB,CAChC,MAAc,EACd,MAAgE,EAChE,OAAiC;IAEjC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IACjD,MAAM,GAAG,GAAG,OAAO,EAAE,UAAU,IAAI,wCAAgC,CAAC;IACpE,MAAM,OAAO,GAAyB;QACpC,GAAG,MAAM;QACT,GAAG,EAAE,UAAU;QACf,GAAG,EAAE,UAAU,GAAG,GAAG;KACE,CAAC;IAC1B,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IACjF,MAAM,YAAY,GAAG,GAAG,UAAU,IAAI,UAAU,EAAE,CAAC;IACnD,MAAM,GAAG,GAAG,eAAe,CACzB,IAAA,wBAAU,EAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,EAAE,CAC3D,CAAC;IACF,OAAO,GAAG,YAAY,IAAI,GAAG,EAAE,CAAC;AAClC,CAAC;AAWD,MAAa,mBAAoB,SAAQ,KAAK;IAE1B;IADlB,YACkB,MAMD,EACf,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QATC,WAAM,GAAN,MAAM,CAMP;QAIf,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAdD,kDAcC;AAMD,SAAgB,oBAAoB,CAClC,KAAa,EACb,MAAc,EACd,OAAqC;IAErC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,UAAU,GAAG,gCAAgC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACnE,MAAM,GAAG,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAChC,gBAAgB,CAAC,MAAM,EAAE,OAAO,EAAE,gBAAgB,IAAI,EAAE,CAAC,CAAC;IAC1D,gBAAgB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,gCAAgC,CAAC,KAAa,EAAE,MAAc;IACrE,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAE,gCAAgC,CAAC,CAAC;IAC/E,CAAC;IACD,MAAM,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,CAAC,GAAG,KAAiC,CAAC;IAC1E,MAAM,YAAY,GAAG,GAAG,SAAS,IAAI,UAAU,EAAE,CAAC;IAClD,MAAM,WAAW,GAAG,IAAA,wBAAU,EAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,EAAE,CAAC;IAC/E,MAAM,WAAW,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IAC5C,IACE,WAAW,CAAC,MAAM,KAAK,WAAW,CAAC,MAAM;QACzC,CAAC,IAAA,6BAAe,EAAC,WAAW,EAAE,WAAW,CAAC,EAC1C,CAAC;QACD,MAAM,IAAI,mBAAmB,CAAC,eAAe,EAAE,oBAAoB,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,iBAAiB,CAAC,UAAkB;IAC3C,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CACf,eAAe,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAClB,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAE,2BAA2B,CAAC,CAAC;IAC1E,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,GAA4B;IAC/C,IACE,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ;QACjC,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ;QAC7B,CAAC,GAAG,CAAC,SAAS,KAAK,IAAI,IAAI,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,CAAC;QAC7D,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ;QAC3B,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,EAC3B,CAAC;QACD,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAE,gCAAgC,CAAC,CAAC;IAC/E,CAAC;IAID,IACE,CAAC,CAAC,cAAc,IAAI,GAAG,CAAC;QACxB,CAAC,GAAG,CAAC,YAAY,KAAK,IAAI,IAAI,OAAO,GAAG,CAAC,YAAY,KAAK,QAAQ,CAAC,EACnE,CAAC;QACD,MAAM,IAAI,mBAAmB,CAC3B,WAAW,EACX,4EAA4E,CAC7E,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,cAAc,KAAK,SAAS,IAAI,OAAO,GAAG,CAAC,cAAc,KAAK,QAAQ,EAAE,CAAC;QAC/E,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAE,iCAAiC,CAAC,CAAC;IAChF,CAAC;IACD,IACE,GAAG,CAAC,gBAAgB,KAAK,SAAS;QAClC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;YACnC,GAAG,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,EAC1D,CAAC;QACD,MAAM,IAAI,mBAAmB,CAC3B,WAAW,EACX,mCAAmC,CACpC,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,IAAI,KAAK,kBAAkB,CAAC,gBAAgB,EAAE,CAAC;QACrD,OAAO;YACL,IAAI,EAAE,kBAAkB,CAAC,gBAAgB;YACzC,GAAG,iBAAiB,CAAC,GAAG,CAAC;SAC1B,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,mBAAmB,CAC3B,WAAW,EACX,kCACE,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,WAC5C,mBAAmB,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;QACjE,sEAAsE;QACtE,sCAAsC,CACzC,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,GAA4B;IACrD,MAAM,uBAAuB,GAAG,gBAAgB,CAC9C,GAAG,CAAC,uBAAuB,EAC3B,yBAAyB,CAC1B,CAAC;IACF,MAAM,sBAAsB,GAAG,gBAAgB,CAC7C,GAAG,CAAC,sBAAsB,EAC1B,wBAAwB,CACzB,CAAC;IACF,MAAM,cAAc,GAAG,qCAAwB,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACxE,IACE,CAAC,cAAc,CAAC,OAAO;QACvB,cAAc,CAAC,IAAI,CAAC,IAAI,KAAK,mCAAsB,CAAC,KAAK,EACzD,CAAC;QACD,MAAM,IAAI,mBAAmB,CAC3B,WAAW,EACX,oDAAoD,CACrD,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,cAAc,CAAC,IAA+B,CAAC;IAChE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,mBAAmB,CAC3B,WAAW,EACX,8DAA8D,CAC/D,CAAC;IACJ,CAAC;IACD,MAAM,sBAAsB,GAAG,2CAA2B,CAAC,KAAK,EAAE;SAC/D,QAAQ,EAAE;SACV,SAAS,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IACnC,IAAI,CAAC,sBAAsB,CAAC,OAAO,EAAE,CAAC;QACpC,MAAM,IAAI,mBAAmB,CAC3B,WAAW,EACX,kCAAkC,sBAAsB,CAAC,KAAK,CAAC,OAAO,EAAE,CACzE,CAAC;IACJ,CAAC;IACD,MAAM,UAAU,GAAG,sBAAsB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACzE,IACE,UAAU,CAAC,MAAM,KAAK,QAAQ,CAAC,IAAI,CAAC,MAAM;QAC1C,UAAU,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAC7D,CAAC;QACD,MAAM,IAAI,mBAAmB,CAC3B,WAAW,EACX,mEAAmE,CACpE,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAA6B;QACrC,SAAS,EAAE,GAAG,CAAC,SAAmB;QAClC,KAAK,EAAE,GAAG,CAAC,KAAe;QAC1B,SAAS,EAAE,GAAG,CAAC,SAA0B;QACzC,YAAY,EAAE,GAAG,CAAC,YAA6B;QAC/C,uBAAuB;QACvB,sBAAsB;QACtB,QAAQ;QACR,gBAAgB,EAAE,sBAAsB,CAAC,IAAI;QAC7C,GAAG,EAAE,GAAG,CAAC,GAAa;QACtB,GAAG,EAAE,GAAG,CAAC,GAAa;KACvB,CAAC;IACF,IAAI,OAAO,GAAG,CAAC,cAAc,KAAK,QAAQ,EAAE,CAAC;QAC3C,IAAI,CAAC,cAAc,GAAG,GAAG,CAAC,cAAc,CAAC;IAC3C,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACxC,IAAI,CAAC,gBAAgB,GAAG,GAAG,CAAC,gBAAqC,CAAC;IACpE,CAAC;IACD,IAAI,GAAG,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QACrC,IACE,OAAO,GAAG,CAAC,cAAc,KAAK,QAAQ;YACtC,CAAC,MAAM,CAAC,MAAM,CAAC,kCAAc,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,cAAgC,CAAC,EAC7E,CAAC;YACD,MAAM,IAAI,mBAAmB,CAC3B,WAAW,EACX,kCAAkC,MAAM,CAAC,MAAM,CAAC,kCAAc,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC7E,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,cAAc,GAAG,GAAG,CAAC,cAAgC,CAAC;IAC7D,CAAC;IACD,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAChC,IAAI,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,IAAI,GAAG,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpE,MAAM,IAAI,mBAAmB,CAC3B,WAAW,EACX,mDAAmD,CACpD,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC;IACjC,CAAC;IACD,IAAI,GAAG,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QAClC,IACE,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ;YACnC,CAAC,MAAM,CAAC,MAAM,CAAC,gDAAwB,CAAC,CAAC,QAAQ,CAC/C,GAAG,CAAC,WAAuC,CAC5C,EACD,CAAC;YACD,MAAM,IAAI,mBAAmB,CAC3B,WAAW,EACX,+BAA+B,MAAM,CAAC,MAAM,CAAC,gDAAwB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACpF,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,WAAW,GAAG,GAAG,CAAC,WAAuC,CAAC;IACjE,CAAC;IACD,IAAI,GAAG,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;QACtC,IACE,OAAO,GAAG,CAAC,eAAe,KAAK,QAAQ;YACvC,CAAC,MAAM,CAAC,MAAM,CAAC,sCAAsB,CAAC,CAAC,QAAQ,CAC7C,GAAG,CAAC,eAAyC,CAC9C,EACD,CAAC;YACD,MAAM,IAAI,mBAAmB,CAC3B,WAAW,EACX,mCAAmC,MAAM,CAAC,MAAM,CAAC,sCAAsB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACtF,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,eAAe,GAAG,GAAG,CAAC,eAAyC,CAAC;IACvE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc,EAAE,KAAa;IACrD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,mBAAmB,CAC3B,WAAW,EACX,GAAG,KAAK,mCAAmC,CAC5C,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,gBAAgB,CAAC,MAA4B,EAAE,WAAmB;IACzE,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IACjD,IAAI,MAAM,CAAC,GAAG,GAAG,WAAW,GAAG,UAAU,EAAE,CAAC;QAC1C,MAAM,IAAI,mBAAmB,CAAC,SAAS,EAAE,oBAAoB,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,MAAM,CAAC,GAAG,GAAG,WAAW,GAAG,UAAU,EAAE,CAAC;QAC1C,MAAM,IAAI,mBAAmB,CAAC,eAAe,EAAE,4BAA4B,CAAC,CAAC;IAC/E,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CACvB,MAA4B,EAC5B,OAAgD;IAEhD,IAAI,CAAC,OAAO,EAAE,CAAC;QAAA,OAAO;IAAA,CAAC;IACvB,IAAI,OAAO,CAAC,YAAY,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC,YAAY,EAAE,CAAC;QACjE,MAAM,IAAI,mBAAmB,CAC3B,YAAY,EACZ,cAAc,MAAM,CAAC,IAAI,2BAA2B,OAAO,CAAC,YAAY,EAAE,CAC3E,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,aAAa,IAAI,MAAM,CAAC,KAAK,KAAK,OAAO,CAAC,aAAa,EAAE,CAAC;QACpE,MAAM,IAAI,mBAAmB,CAC3B,WAAW,EACX,wBAAwB,MAAM,CAAC,KAAK,qBAAqB,OAAO,CAAC,aAAa,EAAE,CACjF,CAAC;IACJ,CAAC;AACH,CAAC;AAID,SAAS,eAAe,CAAC,GAAW;IAClC,OAAO,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACjG,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,MAAM,MAAM,GAAG,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC/D,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC7C,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,CAAC;AAC5D,CAAC"}
1
+ {"version":3,"file":"mcp-bridge-token.js","sourceRoot":"","sources":["../../src/lib/mcp-bridge-token.ts"],"names":[],"mappings":";;;AAwLA,gDAqBC;AA+BD,oDAcC;AAvOD,6CAA0D;AAE1D,0EAIgD;AAChD,oEAI6C;AAC7C,0FAA0F;AAa1F,IAAY,kBASX;AATD,WAAY,kBAAkB;IAQ5B,4DAAsC,CAAA;AACxC,CAAC,EATW,kBAAkB,kCAAlB,kBAAkB,QAS7B;AA+GY,QAAA,gCAAgC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAQlD,QAAA,uBAAuB,GAAG,oBAAoB,CAAC;AAE5D,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;AACjE,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;AASrE,SAAgB,kBAAkB,CAChC,MAAc,EACd,MAAgE,EAChE,OAAiC;IAEjC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IACjD,MAAM,GAAG,GAAG,OAAO,EAAE,UAAU,IAAI,wCAAgC,CAAC;IACpE,MAAM,OAAO,GAAyB;QACpC,GAAG,MAAM;QACT,GAAG,EAAE,UAAU;QACf,GAAG,EAAE,UAAU,GAAG,GAAG;KACE,CAAC;IAC1B,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IACjF,MAAM,YAAY,GAAG,GAAG,UAAU,IAAI,UAAU,EAAE,CAAC;IACnD,MAAM,GAAG,GAAG,eAAe,CACzB,IAAA,wBAAU,EAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,EAAE,CAC3D,CAAC;IACF,OAAO,GAAG,YAAY,IAAI,GAAG,EAAE,CAAC;AAClC,CAAC;AAWD,MAAa,mBAAoB,SAAQ,KAAK;IAE1B;IADlB,YACkB,MAMD,EACf,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QATC,WAAM,GAAN,MAAM,CAMP;QAIf,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAdD,kDAcC;AAMD,SAAgB,oBAAoB,CAClC,KAAa,EACb,MAAc,EACd,OAAqC;IAErC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,UAAU,GAAG,gCAAgC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACnE,MAAM,GAAG,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAChC,gBAAgB,CAAC,MAAM,EAAE,OAAO,EAAE,gBAAgB,IAAI,EAAE,CAAC,CAAC;IAC1D,gBAAgB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,gCAAgC,CAAC,KAAa,EAAE,MAAc;IACrE,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAE,gCAAgC,CAAC,CAAC;IAC/E,CAAC;IACD,MAAM,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,CAAC,GAAG,KAAiC,CAAC;IAC1E,MAAM,YAAY,GAAG,GAAG,SAAS,IAAI,UAAU,EAAE,CAAC;IAClD,MAAM,WAAW,GAAG,IAAA,wBAAU,EAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,EAAE,CAAC;IAC/E,MAAM,WAAW,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IAC5C,IACE,WAAW,CAAC,MAAM,KAAK,WAAW,CAAC,MAAM;QACzC,CAAC,IAAA,6BAAe,EAAC,WAAW,EAAE,WAAW,CAAC,EAC1C,CAAC;QACD,MAAM,IAAI,mBAAmB,CAAC,eAAe,EAAE,oBAAoB,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,iBAAiB,CAAC,UAAkB;IAC3C,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CACf,eAAe,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAClB,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAE,2BAA2B,CAAC,CAAC;IAC1E,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,GAA4B;IAC/C,IACE,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ;QACjC,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ;QAC7B,CAAC,GAAG,CAAC,SAAS,KAAK,IAAI,IAAI,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,CAAC;QAC7D,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ;QAC3B,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,EAC3B,CAAC;QACD,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAE,gCAAgC,CAAC,CAAC;IAC/E,CAAC;IAID,IACE,CAAC,CAAC,cAAc,IAAI,GAAG,CAAC;QACxB,CAAC,GAAG,CAAC,YAAY,KAAK,IAAI,IAAI,OAAO,GAAG,CAAC,YAAY,KAAK,QAAQ,CAAC,EACnE,CAAC;QACD,MAAM,IAAI,mBAAmB,CAC3B,WAAW,EACX,4EAA4E,CAC7E,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,cAAc,KAAK,SAAS,IAAI,OAAO,GAAG,CAAC,cAAc,KAAK,QAAQ,EAAE,CAAC;QAC/E,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAE,iCAAiC,CAAC,CAAC;IAChF,CAAC;IACD,IACE,GAAG,CAAC,gBAAgB,KAAK,SAAS;QAClC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;YACnC,GAAG,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,EAC1D,CAAC;QACD,MAAM,IAAI,mBAAmB,CAC3B,WAAW,EACX,mCAAmC,CACpC,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,IAAI,KAAK,kBAAkB,CAAC,gBAAgB,EAAE,CAAC;QACrD,OAAO;YACL,IAAI,EAAE,kBAAkB,CAAC,gBAAgB;YACzC,GAAG,iBAAiB,CAAC,GAAG,CAAC;SAC1B,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,mBAAmB,CAC3B,WAAW,EACX,kCACE,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,WAC5C,mBAAmB,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;QACjE,sEAAsE;QACtE,sCAAsC,CACzC,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,GAA4B;IACrD,MAAM,uBAAuB,GAAG,gBAAgB,CAC9C,GAAG,CAAC,uBAAuB,EAC3B,yBAAyB,CAC1B,CAAC;IACF,MAAM,sBAAsB,GAAG,gBAAgB,CAC7C,GAAG,CAAC,sBAAsB,EAC1B,wBAAwB,CACzB,CAAC;IACF,MAAM,cAAc,GAAG,qCAAwB,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACxE,IACE,CAAC,cAAc,CAAC,OAAO;QACvB,cAAc,CAAC,IAAI,CAAC,IAAI,KAAK,mCAAsB,CAAC,KAAK,EACzD,CAAC;QACD,MAAM,IAAI,mBAAmB,CAC3B,WAAW,EACX,oDAAoD,CACrD,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,cAAc,CAAC,IAA+B,CAAC;IAChE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,mBAAmB,CAC3B,WAAW,EACX,8DAA8D,CAC/D,CAAC;IACJ,CAAC;IACD,MAAM,sBAAsB,GAAG,2CAA2B,CAAC,KAAK,EAAE;SAC/D,QAAQ,EAAE;SACV,SAAS,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IACnC,IAAI,CAAC,sBAAsB,CAAC,OAAO,EAAE,CAAC;QACpC,MAAM,IAAI,mBAAmB,CAC3B,WAAW,EACX,kCAAkC,sBAAsB,CAAC,KAAK,CAAC,OAAO,EAAE,CACzE,CAAC;IACJ,CAAC;IACD,MAAM,UAAU,GAAG,sBAAsB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACzE,IACE,UAAU,CAAC,MAAM,KAAK,QAAQ,CAAC,IAAI,CAAC,MAAM;QAC1C,UAAU,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAC7D,CAAC;QACD,MAAM,IAAI,mBAAmB,CAC3B,WAAW,EACX,mEAAmE,CACpE,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAA6B;QACrC,SAAS,EAAE,GAAG,CAAC,SAAmB;QAClC,KAAK,EAAE,GAAG,CAAC,KAAe;QAC1B,SAAS,EAAE,GAAG,CAAC,SAA0B;QACzC,YAAY,EAAE,GAAG,CAAC,YAA6B;QAC/C,uBAAuB;QACvB,sBAAsB;QACtB,QAAQ;QACR,gBAAgB,EAAE,sBAAsB,CAAC,IAAI;QAC7C,GAAG,EAAE,GAAG,CAAC,GAAa;QACtB,GAAG,EAAE,GAAG,CAAC,GAAa;KACvB,CAAC;IACF,IAAI,OAAO,GAAG,CAAC,cAAc,KAAK,QAAQ,EAAE,CAAC;QAC3C,IAAI,CAAC,cAAc,GAAG,GAAG,CAAC,cAAc,CAAC;IAC3C,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACxC,IAAI,CAAC,gBAAgB,GAAG,GAAG,CAAC,gBAAqC,CAAC;IACpE,CAAC;IACD,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAChC,IAAI,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,IAAI,GAAG,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpE,MAAM,IAAI,mBAAmB,CAC3B,WAAW,EACX,mDAAmD,CACpD,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC;IACjC,CAAC;IACD,IAAI,GAAG,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QAClC,IACE,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ;YACnC,CAAC,MAAM,CAAC,MAAM,CAAC,gDAAwB,CAAC,CAAC,QAAQ,CAC/C,GAAG,CAAC,WAAuC,CAC5C,EACD,CAAC;YACD,MAAM,IAAI,mBAAmB,CAC3B,WAAW,EACX,+BAA+B,MAAM,CAAC,MAAM,CAAC,gDAAwB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACpF,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,WAAW,GAAG,GAAG,CAAC,WAAuC,CAAC;IACjE,CAAC;IACD,IAAI,GAAG,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;QACtC,IACE,OAAO,GAAG,CAAC,eAAe,KAAK,QAAQ;YACvC,CAAC,MAAM,CAAC,MAAM,CAAC,sCAAsB,CAAC,CAAC,QAAQ,CAC7C,GAAG,CAAC,eAAyC,CAC9C,EACD,CAAC;YACD,MAAM,IAAI,mBAAmB,CAC3B,WAAW,EACX,mCAAmC,MAAM,CAAC,MAAM,CAAC,sCAAsB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACtF,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,eAAe,GAAG,GAAG,CAAC,eAAyC,CAAC;IACvE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc,EAAE,KAAa;IACrD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,mBAAmB,CAC3B,WAAW,EACX,GAAG,KAAK,mCAAmC,CAC5C,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,gBAAgB,CAAC,MAA4B,EAAE,WAAmB;IACzE,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IACjD,IAAI,MAAM,CAAC,GAAG,GAAG,WAAW,GAAG,UAAU,EAAE,CAAC;QAC1C,MAAM,IAAI,mBAAmB,CAAC,SAAS,EAAE,oBAAoB,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,MAAM,CAAC,GAAG,GAAG,WAAW,GAAG,UAAU,EAAE,CAAC;QAC1C,MAAM,IAAI,mBAAmB,CAAC,eAAe,EAAE,4BAA4B,CAAC,CAAC;IAC/E,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CACvB,MAA4B,EAC5B,OAAgD;IAEhD,IAAI,CAAC,OAAO,EAAE,CAAC;QAAA,OAAO;IAAA,CAAC;IACvB,IAAI,OAAO,CAAC,YAAY,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC,YAAY,EAAE,CAAC;QACjE,MAAM,IAAI,mBAAmB,CAC3B,YAAY,EACZ,cAAc,MAAM,CAAC,IAAI,2BAA2B,OAAO,CAAC,YAAY,EAAE,CAC3E,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,aAAa,IAAI,MAAM,CAAC,KAAK,KAAK,OAAO,CAAC,aAAa,EAAE,CAAC;QACpE,MAAM,IAAI,mBAAmB,CAC3B,WAAW,EACX,wBAAwB,MAAM,CAAC,KAAK,qBAAqB,OAAO,CAAC,aAAa,EAAE,CACjF,CAAC;IACJ,CAAC;AACH,CAAC;AAID,SAAS,eAAe,CAAC,GAAW;IAClC,OAAO,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACjG,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,MAAM,MAAM,GAAG,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC/D,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC7C,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,CAAC;AAC5D,CAAC"}
@@ -1 +1 @@
1
- {"version":3,"file":"request-context.d.ts","sourceRoot":"","sources":["../../src/lib/request-context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,kCAAkC,CAAC;AAC3E,OAAO,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AACjF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAChE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAE5D,MAAM,WAAW,cAAc;IAQ7B,KAAK,EAAE,MAAM,CAAC;IAuBd,YAAY,CAAC,EAAE,mBAAmB,CAAC;IACnC,SAAS,CAAC,EAAE,MAAM,CAAC;IAMnB,OAAO,EAAE,UAAU,CAAC;IAOpB,UAAU,EAAE,UAAU,CAAC;IAMvB,UAAU,EAAE,YAAY,EAAE,CAAC;IAE3B,OAAO,EAAE,MAAM,CAAC;IAMhB,SAAS,EAAE,OAAO,GAAG,OAAO,GAAG,SAAS,CAAC;IASzC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IASnC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAE1B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,oBAAoB,CAAC,EAAE,oBAAoB,CAAC;IAmC5C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAyBlB,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,KAAK,EAAE,MAAM,EAAE,CAAC;IAEhB,OAAO,CAAC,EAAE,MAAM,CAAC;IAYjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAeD,eAAO,MAAM,eAAe,eAAqD,CAAC;AAalF,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,cAAc,CAQ7D;AASD,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CA+B5E;AAQD,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC;AACnC,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC"}
1
+ {"version":3,"file":"request-context.d.ts","sourceRoot":"","sources":["../../src/lib/request-context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,kCAAkC,CAAC;AAC3E,OAAO,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AACjF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAChE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAE5D,MAAM,WAAW,cAAc;IAQ7B,KAAK,EAAE,MAAM,CAAC;IAyBd,YAAY,CAAC,EAAE,mBAAmB,CAAC;IACnC,SAAS,CAAC,EAAE,MAAM,CAAC;IAMnB,OAAO,EAAE,UAAU,CAAC;IAOpB,UAAU,EAAE,UAAU,CAAC;IAMvB,UAAU,EAAE,YAAY,EAAE,CAAC;IAE3B,OAAO,EAAE,MAAM,CAAC;IAMhB,SAAS,EAAE,OAAO,GAAG,OAAO,GAAG,SAAS,CAAC;IASzC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IASnC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAE1B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,oBAAoB,CAAC,EAAE,oBAAoB,CAAC;IAmC5C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAyBlB,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,KAAK,EAAE,MAAM,EAAE,CAAC;IAEhB,OAAO,CAAC,EAAE,MAAM,CAAC;IAYjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAeD,eAAO,MAAM,eAAe,eAAqD,CAAC;AAalF,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,cAAc,CAQ7D;AASD,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CA+B5E;AAQD,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC;AACnC,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC"}
@@ -1 +1 @@
1
- {"version":3,"file":"request-context.js","sourceRoot":"","sources":["../../src/lib/request-context.ts"],"names":[],"mappings":";;;AAuMA,8CAQC;AASD,oDA+BC;AAvPD,8DAA2E;AA+PlE,4FA/PA,qBAAW,OA+PA;AAAE,2FA/PA,oBAAU,OA+PA;AArEnB,QAAA,eAAe,GAAG,MAAM,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;AAalF,SAAgB,iBAAiB,CAAC,GAAW;IAC3C,MAAM,GAAG,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CACb,kFAAkF,CACnF,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AASD,SAAgB,oBAAoB,CAAC,GAAW;IAC9C,MAAM,MAAM,GAAI,GAA+B,CAAC,uBAAe,CAAC,CAAC;IACjE,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,MAAwB,CAAC;IAClC,CAAC;IAoBD,MAAM,GAAG,GAAI,GAAyB,CAAC,GAAG,CAAC;IAC3C,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5C,OAAQ,GAA+B,CAAC,uBAAe,CAE1C,CAAC;IAChB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAUD,4CAA0C;AAAjC,mGAAA,OAAO,OAAA"}
1
+ {"version":3,"file":"request-context.js","sourceRoot":"","sources":["../../src/lib/request-context.ts"],"names":[],"mappings":";;;AAyMA,8CAQC;AASD,oDA+BC;AAzPD,8DAA2E;AAiQlE,4FAjQA,qBAAW,OAiQA;AAAE,2FAjQA,oBAAU,OAiQA;AArEnB,QAAA,eAAe,GAAG,MAAM,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;AAalF,SAAgB,iBAAiB,CAAC,GAAW;IAC3C,MAAM,GAAG,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CACb,kFAAkF,CACnF,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AASD,SAAgB,oBAAoB,CAAC,GAAW;IAC9C,MAAM,MAAM,GAAI,GAA+B,CAAC,uBAAe,CAAC,CAAC;IACjE,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,MAAwB,CAAC;IAClC,CAAC;IAoBD,MAAM,GAAG,GAAI,GAAyB,CAAC,GAAG,CAAC;IAC3C,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5C,OAAQ,GAA+B,CAAC,uBAAe,CAE1C,CAAC;IAChB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAUD,4CAA0C;AAAjC,mGAAA,OAAO,OAAA"}
@@ -1,4 +1,10 @@
1
+ import { XemaError } from '@xemahq/kernel-contracts/http';
1
2
  import type { ZodType } from 'zod';
3
+ export declare class WorkItemPayloadInvalidError extends XemaError {
4
+ readonly workItemId: string;
5
+ readonly zodIssues: unknown;
6
+ constructor(message: string, workItemId: string, zodIssues: unknown);
7
+ }
2
8
  export declare function toJsonColumnValue<T>(schema: ZodType<T>, value: T, context?: {
3
9
  workItemId?: string;
4
10
  hint?: string;
@@ -1 +1 @@
1
- {"version":3,"file":"to-json-column-value.d.ts","sourceRoot":"","sources":["../../src/lib/to-json-column-value.ts"],"names":[],"mappings":"AAsBA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,KAAK,CAAC;AAkBnC,wBAAgB,iBAAiB,CAAC,CAAC,EACjC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,EAClB,KAAK,EAAE,CAAC,EACR,OAAO,GAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAO,GACnD,OAAO,CAaT"}
1
+ {"version":3,"file":"to-json-column-value.d.ts","sourceRoot":"","sources":["../../src/lib/to-json-column-value.ts"],"names":[],"mappings":"AAsBA,OAAO,EAAE,SAAS,EAAE,MAAM,+BAA+B,CAAC;AAE1D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,KAAK,CAAC;AAgBnC,qBAAa,2BAA4B,SAAQ,SAAS;IAGtD,QAAQ,CAAC,UAAU,EAAE,MAAM;IAC3B,QAAQ,CAAC,SAAS,EAAE,OAAO;gBAF3B,OAAO,EAAE,MAAM,EACN,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,OAAO;CAU9B;AAiBD,wBAAgB,iBAAiB,CAAC,CAAC,EACjC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,EAClB,KAAK,EAAE,CAAC,EACR,OAAO,GAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAO,GACnD,OAAO,CAaT"}
@@ -1,11 +1,28 @@
1
1
  "use strict";
2
2
  Object.defineProperty(exports, "__esModule", { value: true });
3
+ exports.WorkItemPayloadInvalidError = void 0;
3
4
  exports.toJsonColumnValue = toJsonColumnValue;
4
- const pipeline_errors_1 = require("./errors/pipeline-errors");
5
+ const http_1 = require("@xemahq/kernel-contracts/http");
6
+ class WorkItemPayloadInvalidError extends http_1.XemaError {
7
+ workItemId;
8
+ zodIssues;
9
+ constructor(message, workItemId, zodIssues) {
10
+ super({
11
+ code: 'WORK_ITEM_PAYLOAD_INVALID',
12
+ title: 'Work-item payload invalid',
13
+ status: 400,
14
+ detail: message,
15
+ extensions: { workItemId },
16
+ });
17
+ this.workItemId = workItemId;
18
+ this.zodIssues = zodIssues;
19
+ }
20
+ }
21
+ exports.WorkItemPayloadInvalidError = WorkItemPayloadInvalidError;
5
22
  function toJsonColumnValue(schema, value, context = {}) {
6
23
  const parsed = schema.safeParse(value);
7
24
  if (!parsed.success) {
8
- throw new pipeline_errors_1.WorkItemPayloadInvalidError(`Work-item payload failed schema validation${context.hint ? ` (${context.hint})` : ''}`, context.workItemId ?? 'unknown', parsed.error.issues);
25
+ throw new WorkItemPayloadInvalidError(`Work-item payload failed schema validation${context.hint ? ` (${context.hint})` : ''}`, context.workItemId ?? 'unknown', parsed.error.issues);
9
26
  }
10
27
  return structuredClone(parsed.data);
11
28
  }
@@ -1 +1 @@
1
- {"version":3,"file":"to-json-column-value.js","sourceRoot":"","sources":["../../src/lib/to-json-column-value.ts"],"names":[],"mappings":";;AAwCA,8CAiBC;AAlCD,8DAAuE;AAiBvE,SAAgB,iBAAiB,CAC/B,MAAkB,EAClB,KAAQ,EACR,UAAkD,EAAE;IAEpD,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,6CAA2B,CACnC,6CAA6C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,EACvF,OAAO,CAAC,UAAU,IAAI,SAAS,EAC/B,MAAM,CAAC,KAAK,CAAC,MAAM,CACpB,CAAC;IACJ,CAAC;IAID,OAAO,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AACtC,CAAC"}
1
+ {"version":3,"file":"to-json-column-value.js","sourceRoot":"","sources":["../../src/lib/to-json-column-value.ts"],"names":[],"mappings":";;;AAuEA,8CAiBC;AAlED,wDAA0D;AAkB1D,MAAa,2BAA4B,SAAQ,gBAAS;IAG7C;IACA;IAHX,YACE,OAAe,EACN,UAAkB,EAClB,SAAkB;QAE3B,KAAK,CAAC;YACJ,IAAI,EAAE,2BAA2B;YACjC,KAAK,EAAE,2BAA2B;YAClC,MAAM,EAAE,GAAG;YACX,MAAM,EAAE,OAAO;YACf,UAAU,EAAE,EAAE,UAAU,EAAE;SAC3B,CAAC,CAAC;QATM,eAAU,GAAV,UAAU,CAAQ;QAClB,cAAS,GAAT,SAAS,CAAS;IAS7B,CAAC;CACF;AAdD,kEAcC;AAiBD,SAAgB,iBAAiB,CAC/B,MAAkB,EAClB,KAAQ,EACR,UAAkD,EAAE;IAEpD,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,2BAA2B,CACnC,6CAA6C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,EACvF,OAAO,CAAC,UAAU,IAAI,SAAS,EAC/B,MAAM,CAAC,KAAK,CAAC,MAAM,CACpB,CAAC;IACJ,CAAC;IAID,OAAO,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AACtC,CAAC"}
@@ -1,3 +1,4 @@
1
+ import { BadRequestException } from '@nestjs/common';
1
2
  import { SubjectKind, TokenClass } from '@xemahq/kernel-contracts/subject';
2
3
  import type { RequestContext } from '../../lib/request-context';
3
4
  export interface ActorClassification {
@@ -14,14 +15,13 @@ export declare function resolvePrincipalIdFromClaims(claims: Record<string, unkn
14
15
  export declare function resolveActAsFromClaims(claims: Record<string, unknown>): string | undefined;
15
16
  export declare const SUBJECT_KIND_CLAIM = "subject_kind";
16
17
  export declare function readDeclaredSubjectKind(claims: Record<string, unknown>): SubjectKind | null | undefined;
18
+ export declare class UnknownTokenClassError extends BadRequestException {
19
+ constructor(declared: string);
20
+ }
17
21
  export declare function tryResolveSubjectAndClass(roles: string[], claims: Record<string, unknown>, actAs: string | undefined): {
18
22
  kind: SubjectKind;
19
23
  tokenClass: TokenClass;
20
24
  } | undefined;
21
- export declare function resolveSubjectAndClass(roles: string[], claims: Record<string, unknown>, actAs: string | undefined): {
22
- kind: SubjectKind;
23
- tokenClass: TokenClass;
24
- };
25
25
  export declare function actorTypeForSubjectKind(kind: SubjectKind): RequestContext['actorType'];
26
26
  export declare function actorTypeFor(subjectKind: SubjectKind, actAs: string | undefined): RequestContext['actorType'];
27
27
  export declare function deriveActorClassification(claims: Record<string, unknown>): ActorClassification;
@@ -1 +1 @@
1
- {"version":3,"file":"actor-classification.d.ts","sourceRoot":"","sources":["../../../src/nestjs/auth/actor-classification.ts"],"names":[],"mappings":"AACA,OAAO,EACL,WAAW,EAEX,UAAU,EACX,MAAM,kCAAkC,CAAC;AAC1C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAchE,MAAM,WAAW,mBAAmB;IAElC,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC;IAEzB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IAEnC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAElC,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAKhC,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC,WAAW,CAAC,CAAC;CACjD;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAInE;AAGD,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,MAAM,EAAE,CAYV;AAuBD,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,MAAM,GAAG,SAAS,CAEpB;AA+BD,wBAAgB,4BAA4B,CAC1C,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,MAAM,GAAG,SAAS,CAEpB;AAYD,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,MAAM,GAAG,SAAS,CAMpB;AAsBD,eAAO,MAAM,kBAAkB,iBAAiB,CAAC;AAajD,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,WAAW,GAAG,IAAI,GAAG,SAAS,CAMhC;AAsCD,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,MAAM,EAAE,EACf,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,KAAK,EAAE,MAAM,GAAG,SAAS,GACxB;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,UAAU,EAAE,UAAU,CAAA;CAAE,GAAG,SAAS,CAoB3D;AAWD,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,MAAM,EAAE,EACf,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,KAAK,EAAE,MAAM,GAAG,SAAS,GACxB;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,UAAU,EAAE,UAAU,CAAA;CAAE,CAO/C;AAUD,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,WAAW,GAChB,cAAc,CAAC,WAAW,CAAC,CAgB7B;AAUD,wBAAgB,YAAY,CAC1B,WAAW,EAAE,WAAW,EACxB,KAAK,EAAE,MAAM,GAAG,SAAS,GACxB,cAAc,CAAC,WAAW,CAAC,CAK7B;AAOD,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,mBAAmB,CAerB"}
1
+ {"version":3,"file":"actor-classification.d.ts","sourceRoot":"","sources":["../../../src/nestjs/auth/actor-classification.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAErD,OAAO,EACL,WAAW,EAEX,UAAU,EACX,MAAM,kCAAkC,CAAC;AAC1C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAchE,MAAM,WAAW,mBAAmB;IAElC,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC;IAEzB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IAEnC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAElC,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAKhC,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC,WAAW,CAAC,CAAC;CACjD;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAInE;AAGD,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,MAAM,EAAE,CAYV;AAuBD,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,MAAM,GAAG,SAAS,CAEpB;AA+BD,wBAAgB,4BAA4B,CAC1C,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,MAAM,GAAG,SAAS,CAEpB;AAYD,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,MAAM,GAAG,SAAS,CAMpB;AAsBD,eAAO,MAAM,kBAAkB,iBAAiB,CAAC;AAajD,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,WAAW,GAAG,IAAI,GAAG,SAAS,CAMhC;AAiBD,qBAAa,sBAAuB,SAAQ,mBAAmB;gBACjD,QAAQ,EAAE,MAAM;CAQ7B;AA6CD,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,MAAM,EAAE,EACf,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,KAAK,EAAE,MAAM,GAAG,SAAS,GACxB;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,UAAU,EAAE,UAAU,CAAA;CAAE,GAAG,SAAS,CAqB3D;AAgDD,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,WAAW,GAChB,cAAc,CAAC,WAAW,CAAC,CAgB7B;AAUD,wBAAgB,YAAY,CAC1B,WAAW,EAAE,WAAW,EACxB,KAAK,EAAE,MAAM,GAAG,SAAS,GACxB,cAAc,CAAC,WAAW,CAAC,CAK7B;AAaD,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,mBAAmB,CAYrB"}
@@ -1,6 +1,6 @@
1
1
  "use strict";
2
2
  Object.defineProperty(exports, "__esModule", { value: true });
3
- exports.SUBJECT_KIND_CLAIM = void 0;
3
+ exports.UnknownTokenClassError = exports.SUBJECT_KIND_CLAIM = void 0;
4
4
  exports.asNonEmptyString = asNonEmptyString;
5
5
  exports.resolveRolesFromClaims = resolveRolesFromClaims;
6
6
  exports.resolveClientIdFromClaims = resolveClientIdFromClaims;
@@ -8,10 +8,10 @@ exports.resolvePrincipalIdFromClaims = resolvePrincipalIdFromClaims;
8
8
  exports.resolveActAsFromClaims = resolveActAsFromClaims;
9
9
  exports.readDeclaredSubjectKind = readDeclaredSubjectKind;
10
10
  exports.tryResolveSubjectAndClass = tryResolveSubjectAndClass;
11
- exports.resolveSubjectAndClass = resolveSubjectAndClass;
12
11
  exports.actorTypeForSubjectKind = actorTypeForSubjectKind;
13
12
  exports.actorTypeFor = actorTypeFor;
14
13
  exports.deriveActorClassification = deriveActorClassification;
14
+ const common_1 = require("@nestjs/common");
15
15
  const identity_client_1 = require("@xemahq/identity-client");
16
16
  const subject_1 = require("@xemahq/kernel-contracts/subject");
17
17
  function asNonEmptyString(value) {
@@ -50,6 +50,15 @@ function readDeclaredSubjectKind(claims) {
50
50
  const parsed = subject_1.SubjectKindSchema.safeParse(claims[exports.SUBJECT_KIND_CLAIM]);
51
51
  return parsed.success ? parsed.data : null;
52
52
  }
53
+ class UnknownTokenClassError extends common_1.BadRequestException {
54
+ constructor(declared) {
55
+ super(`The access token declares "token_class": ${JSON.stringify(declared)}, ` +
56
+ `which is not a known TokenClass. The caller is refused rather than ` +
57
+ `classified from a weaker signal, which would name a different ` +
58
+ `principal than the issuer did.`);
59
+ }
60
+ }
61
+ exports.UnknownTokenClassError = UnknownTokenClassError;
53
62
  function subjectKindForTokenClass(tokenClass) {
54
63
  switch (tokenClass) {
55
64
  case subject_1.TokenClass.ServiceJwt:
@@ -72,9 +81,10 @@ function tryResolveSubjectAndClass(roles, claims, actAs) {
72
81
  const matched = Object.values(subject_1.TokenClass).includes(explicit)
73
82
  ? explicit
74
83
  : undefined;
75
- if (matched) {
76
- return { kind: subjectKindForTokenClass(matched), tokenClass: matched };
84
+ if (!matched) {
85
+ throw new UnknownTokenClassError(explicit);
77
86
  }
87
+ return { kind: subjectKindForTokenClass(matched), tokenClass: matched };
78
88
  }
79
89
  if (actAs) {
80
90
  return { kind: subject_1.SubjectKind.User, tokenClass: subject_1.TokenClass.UserJwt };
@@ -87,12 +97,10 @@ function tryResolveSubjectAndClass(roles, claims, actAs) {
87
97
  }
88
98
  return undefined;
89
99
  }
90
- function resolveSubjectAndClass(roles, claims, actAs) {
91
- return (tryResolveSubjectAndClass(roles, claims, actAs) ?? {
92
- kind: subject_1.SubjectKind.User,
93
- tokenClass: subject_1.TokenClass.UserJwt,
94
- });
95
- }
100
+ const UNSIGNALLED_REALM_BEARER = {
101
+ kind: subject_1.SubjectKind.User,
102
+ tokenClass: subject_1.TokenClass.UserJwt,
103
+ };
96
104
  function actorTypeForSubjectKind(kind) {
97
105
  switch (kind) {
98
106
  case subject_1.SubjectKind.Service:
@@ -119,7 +127,7 @@ function actorTypeFor(subjectKind, actAs) {
119
127
  function deriveActorClassification(claims) {
120
128
  const roles = resolveRolesFromClaims(claims);
121
129
  const actAs = resolveActAsFromClaims(claims);
122
- const { kind: subjectKind, tokenClass } = resolveSubjectAndClass(roles, claims, actAs);
130
+ const { kind: subjectKind, tokenClass } = tryResolveSubjectAndClass(roles, claims, actAs) ?? UNSIGNALLED_REALM_BEARER;
123
131
  return {
124
132
  roles,
125
133
  actAs,
@@ -1 +1 @@
1
- {"version":3,"file":"actor-classification.js","sourceRoot":"","sources":["../../../src/nestjs/auth/actor-classification.ts"],"names":[],"mappings":";;;AAoCA,4CAIC;AAGD,wDAcC;AAuBD,8DAIC;AA+BD,oEAIC;AAYD,wDAQC;AAmCD,0DAQC;AAsCD,8DAwBC;AAWD,wDAWC;AAUD,0DAkBC;AAUD,oCAQC;AAOD,8DAiBC;AAhVD,6DAA6D;AAC7D,8DAI0C;AA+B1C,SAAgB,gBAAgB,CAAC,KAAc;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AAClD,CAAC;AAGD,SAAgB,sBAAsB,CACpC,MAA+B;IAE/B,MAAM,WAAW,GAAG,MAAM,CAAC,YAAY,CAAC;IACxC,IACE,WAAW;QACX,OAAO,WAAW,KAAK,QAAQ;QAC/B,KAAK,CAAC,OAAO,CAAE,WAAmC,CAAC,KAAK,CAAC,EACzD,CAAC;QACD,OAAQ,WAAoC,CAAC,KAAK,CAAC,MAAM,CACvD,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CACnD,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAuBD,SAAgB,yBAAyB,CACvC,MAA+B;IAE/B,OAAO,gBAAgB,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;AAC5E,CAAC;AA+BD,SAAgB,4BAA4B,CAC1C,MAA+B;IAE/B,OAAO,gBAAgB,CAAC,MAAM,CAAC,oCAAkB,CAAC,CAAC,CAAC;AACtD,CAAC;AAYD,SAAgB,sBAAsB,CACpC,MAA+B;IAE/B,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1B,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1D,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,gBAAgB,CAAE,GAA+B,CAAC,KAAK,CAAC,CAAC,CAAC;AACnE,CAAC;AAsBY,QAAA,kBAAkB,GAAG,cAAc,CAAC;AAajD,SAAgB,uBAAuB,CACrC,MAA+B;IAE/B,IAAI,CAAC,CAAC,0BAAkB,IAAI,MAAM,CAAC,EAAE,CAAC;QACpC,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,MAAM,GAAG,2BAAiB,CAAC,SAAS,CAAC,MAAM,CAAC,0BAAkB,CAAC,CAAC,CAAC;IACvE,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7C,CAAC;AAED,SAAS,wBAAwB,CAAC,UAAsB;IACtD,QAAQ,UAAU,EAAE,CAAC;QACnB,KAAK,oBAAU,CAAC,UAAU;YACxB,OAAO,qBAAW,CAAC,OAAO,CAAC;QAC7B,KAAK,oBAAU,CAAC,iBAAiB;YAC/B,OAAO,qBAAW,CAAC,KAAK,CAAC;QAC3B,KAAK,oBAAU,CAAC,oBAAoB;YAGlC,OAAO,qBAAW,CAAC,OAAO,CAAC;QAC7B,KAAK,oBAAU,CAAC,oBAAoB;YAClC,OAAO,qBAAW,CAAC,eAAe,CAAC;QACrC,KAAK,oBAAU,CAAC,sBAAsB;YACpC,OAAO,qBAAW,CAAC,MAAM,CAAC;QAC5B,KAAK,oBAAU,CAAC,OAAO;YACrB,OAAO,qBAAW,CAAC,IAAI,CAAC;IAC5B,CAAC;AACH,CAAC;AAmBD,SAAgB,yBAAyB,CACvC,KAAe,EACf,MAA+B,EAC/B,KAAyB;IAEzB,MAAM,QAAQ,GAAG,gBAAgB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACtD,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,OAAO,GAAI,MAAM,CAAC,MAAM,CAAC,oBAAU,CAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACxE,CAAC,CAAE,QAAuB;YAC1B,CAAC,CAAC,SAAS,CAAC;QACd,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,EAAE,IAAI,EAAE,wBAAwB,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;QAC1E,CAAC;IACH,CAAC;IACD,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,EAAE,IAAI,EAAE,qBAAW,CAAC,IAAI,EAAE,UAAU,EAAE,oBAAU,CAAC,OAAO,EAAE,CAAC;IACpE,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACzE,OAAO,EAAE,IAAI,EAAE,qBAAW,CAAC,OAAO,EAAE,UAAU,EAAE,oBAAU,CAAC,UAAU,EAAE,CAAC;IAC1E,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,OAAO,EAAE,IAAI,EAAE,qBAAW,CAAC,KAAK,EAAE,UAAU,EAAE,oBAAU,CAAC,iBAAiB,EAAE,CAAC;IAC/E,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAWD,SAAgB,sBAAsB,CACpC,KAAe,EACf,MAA+B,EAC/B,KAAyB;IAEzB,OAAO,CACL,yBAAyB,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI;QACjD,IAAI,EAAE,qBAAW,CAAC,IAAI;QACtB,UAAU,EAAE,oBAAU,CAAC,OAAO;KAC/B,CACF,CAAC;AACJ,CAAC;AAUD,SAAgB,uBAAuB,CACrC,IAAiB;IAEjB,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,qBAAW,CAAC,OAAO,CAAC;QACzB,KAAK,qBAAW,CAAC,MAAM;YACrB,OAAO,SAAS,CAAC;QACnB,KAAK,qBAAW,CAAC,KAAK;YACpB,OAAO,OAAO,CAAC;QACjB,KAAK,qBAAW,CAAC,IAAI,CAAC;QACtB,KAAK,qBAAW,CAAC,eAAe,CAAC;QACjC,KAAK,qBAAW,CAAC,GAAG,CAAC;QACrB,KAAK,qBAAW,CAAC,SAAS,CAAC;QAC3B,KAAK,qBAAW,CAAC,KAAK,CAAC;QACvB,KAAK,qBAAW,CAAC,IAAI,CAAC;QACtB,KAAK,qBAAW,CAAC,IAAI;YACnB,OAAO,OAAO,CAAC;IACnB,CAAC;AACH,CAAC;AAUD,SAAgB,YAAY,CAC1B,WAAwB,EACxB,KAAyB;IAEzB,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,OAAO,uBAAuB,CAAC,WAAW,CAAC,CAAC;AAC9C,CAAC;AAOD,SAAgB,yBAAyB,CACvC,MAA+B;IAE/B,MAAM,KAAK,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC;IAC7C,MAAM,KAAK,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC;IAC7C,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,sBAAsB,CAC9D,KAAK,EACL,MAAM,EACN,KAAK,CACN,CAAC;IACF,OAAO;QACL,KAAK;QACL,KAAK;QACL,WAAW;QACX,UAAU;QACV,SAAS,EAAE,YAAY,CAAC,WAAW,EAAE,KAAK,CAAC;KAC5C,CAAC;AACJ,CAAC"}
1
+ {"version":3,"file":"actor-classification.js","sourceRoot":"","sources":["../../../src/nestjs/auth/actor-classification.ts"],"names":[],"mappings":";;;AAqCA,4CAIC;AAGD,wDAcC;AAuBD,8DAIC;AA+BD,oEAIC;AAYD,wDAQC;AAmCD,0DAQC;AAuED,8DAyBC;AAgDD,0DAkBC;AAUD,oCAQC;AAaD,8DAcC;AAtYD,2CAAqD;AACrD,6DAA6D;AAC7D,8DAI0C;AA+B1C,SAAgB,gBAAgB,CAAC,KAAc;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AAClD,CAAC;AAGD,SAAgB,sBAAsB,CACpC,MAA+B;IAE/B,MAAM,WAAW,GAAG,MAAM,CAAC,YAAY,CAAC;IACxC,IACE,WAAW;QACX,OAAO,WAAW,KAAK,QAAQ;QAC/B,KAAK,CAAC,OAAO,CAAE,WAAmC,CAAC,KAAK,CAAC,EACzD,CAAC;QACD,OAAQ,WAAoC,CAAC,KAAK,CAAC,MAAM,CACvD,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CACnD,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAuBD,SAAgB,yBAAyB,CACvC,MAA+B;IAE/B,OAAO,gBAAgB,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;AAC5E,CAAC;AA+BD,SAAgB,4BAA4B,CAC1C,MAA+B;IAE/B,OAAO,gBAAgB,CAAC,MAAM,CAAC,oCAAkB,CAAC,CAAC,CAAC;AACtD,CAAC;AAYD,SAAgB,sBAAsB,CACpC,MAA+B;IAE/B,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1B,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1D,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,gBAAgB,CAAE,GAA+B,CAAC,KAAK,CAAC,CAAC,CAAC;AACnE,CAAC;AAsBY,QAAA,kBAAkB,GAAG,cAAc,CAAC;AAajD,SAAgB,uBAAuB,CACrC,MAA+B;IAE/B,IAAI,CAAC,CAAC,0BAAkB,IAAI,MAAM,CAAC,EAAE,CAAC;QACpC,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,MAAM,GAAG,2BAAiB,CAAC,SAAS,CAAC,MAAM,CAAC,0BAAkB,CAAC,CAAC,CAAC;IACvE,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7C,CAAC;AAiBD,MAAa,sBAAuB,SAAQ,4BAAmB;IAC7D,YAAY,QAAgB;QAC1B,KAAK,CACH,4CAA4C,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI;YACtE,qEAAqE;YACrE,gEAAgE;YAChE,gCAAgC,CACnC,CAAC;IACJ,CAAC;CACF;AATD,wDASC;AAED,SAAS,wBAAwB,CAAC,UAAsB;IACtD,QAAQ,UAAU,EAAE,CAAC;QACnB,KAAK,oBAAU,CAAC,UAAU;YACxB,OAAO,qBAAW,CAAC,OAAO,CAAC;QAC7B,KAAK,oBAAU,CAAC,iBAAiB;YAC/B,OAAO,qBAAW,CAAC,KAAK,CAAC;QAC3B,KAAK,oBAAU,CAAC,oBAAoB;YAGlC,OAAO,qBAAW,CAAC,OAAO,CAAC;QAC7B,KAAK,oBAAU,CAAC,oBAAoB;YAClC,OAAO,qBAAW,CAAC,eAAe,CAAC;QACrC,KAAK,oBAAU,CAAC,sBAAsB;YACpC,OAAO,qBAAW,CAAC,MAAM,CAAC;QAC5B,KAAK,oBAAU,CAAC,OAAO;YACrB,OAAO,qBAAW,CAAC,IAAI,CAAC;IAC5B,CAAC;AACH,CAAC;AA0BD,SAAgB,yBAAyB,CACvC,KAAe,EACf,MAA+B,EAC/B,KAAyB;IAEzB,MAAM,QAAQ,GAAG,gBAAgB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACtD,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,OAAO,GAAI,MAAM,CAAC,MAAM,CAAC,oBAAU,CAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACxE,CAAC,CAAE,QAAuB;YAC1B,CAAC,CAAC,SAAS,CAAC;QACd,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,sBAAsB,CAAC,QAAQ,CAAC,CAAC;QAC7C,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,wBAAwB,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;IAC1E,CAAC;IACD,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,EAAE,IAAI,EAAE,qBAAW,CAAC,IAAI,EAAE,UAAU,EAAE,oBAAU,CAAC,OAAO,EAAE,CAAC;IACpE,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACzE,OAAO,EAAE,IAAI,EAAE,qBAAW,CAAC,OAAO,EAAE,UAAU,EAAE,oBAAU,CAAC,UAAU,EAAE,CAAC;IAC1E,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,OAAO,EAAE,IAAI,EAAE,qBAAW,CAAC,KAAK,EAAE,UAAU,EAAE,oBAAU,CAAC,iBAAiB,EAAE,CAAC;IAC/E,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAgCD,MAAM,wBAAwB,GAG1B;IACF,IAAI,EAAE,qBAAW,CAAC,IAAI;IACtB,UAAU,EAAE,oBAAU,CAAC,OAAO;CAC/B,CAAC;AAUF,SAAgB,uBAAuB,CACrC,IAAiB;IAEjB,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,qBAAW,CAAC,OAAO,CAAC;QACzB,KAAK,qBAAW,CAAC,MAAM;YACrB,OAAO,SAAS,CAAC;QACnB,KAAK,qBAAW,CAAC,KAAK;YACpB,OAAO,OAAO,CAAC;QACjB,KAAK,qBAAW,CAAC,IAAI,CAAC;QACtB,KAAK,qBAAW,CAAC,eAAe,CAAC;QACjC,KAAK,qBAAW,CAAC,GAAG,CAAC;QACrB,KAAK,qBAAW,CAAC,SAAS,CAAC;QAC3B,KAAK,qBAAW,CAAC,KAAK,CAAC;QACvB,KAAK,qBAAW,CAAC,IAAI,CAAC;QACtB,KAAK,qBAAW,CAAC,IAAI;YACnB,OAAO,OAAO,CAAC;IACnB,CAAC;AACH,CAAC;AAUD,SAAgB,YAAY,CAC1B,WAAwB,EACxB,KAAyB;IAEzB,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,OAAO,uBAAuB,CAAC,WAAW,CAAC,CAAC;AAC9C,CAAC;AAaD,SAAgB,yBAAyB,CACvC,MAA+B;IAE/B,MAAM,KAAK,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC;IAC7C,MAAM,KAAK,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC;IAC7C,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,GACrC,yBAAyB,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,wBAAwB,CAAC;IAC9E,OAAO;QACL,KAAK;QACL,KAAK;QACL,WAAW;QACX,UAAU;QACV,SAAS,EAAE,YAAY,CAAC,WAAW,EAAE,KAAK,CAAC;KAC5C,CAAC;AACJ,CAAC"}
@@ -0,0 +1,12 @@
1
+ import { AuditAuthorityKind } from '@xemahq/kernel-contracts/audit';
2
+ import { OrgRole } from '../../lib/auth/org-role';
3
+ import type { RequestContext } from '../../lib/request-context';
4
+ export type OrgAuthorityInstrument = {
5
+ readonly kind: AuditAuthorityKind.OrgRole;
6
+ readonly orgRole: OrgRole;
7
+ } | {
8
+ readonly kind: AuditAuthorityKind.PlatformAdmin;
9
+ };
10
+ export declare function resolveOrgAuthorityInstrument(ctx: Pick<RequestContext, 'roles' | 'orgRole'>, required: OrgRole): OrgAuthorityInstrument | undefined;
11
+ export declare function holdsOrgAuthority(ctx: Pick<RequestContext, 'roles' | 'orgRole'>, required: OrgRole): boolean;
12
+ //# sourceMappingURL=holds-org-authority.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"holds-org-authority.d.ts","sourceRoot":"","sources":["../../../src/nestjs/auth/holds-org-authority.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AAEpE,OAAO,EAAE,OAAO,EAAoB,MAAM,yBAAyB,CAAC;AAGpE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAchE,MAAM,MAAM,sBAAsB,GAC9B;IACE,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC,OAAO,CAAC;IAE1C,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC,aAAa,CAAA;CAAE,CAAC;AAuExD,wBAAgB,6BAA6B,CAC3C,GAAG,EAAE,IAAI,CAAC,cAAc,EAAE,OAAO,GAAG,SAAS,CAAC,EAC9C,QAAQ,EAAE,OAAO,GAChB,sBAAsB,GAAG,SAAS,CAQpC;AAuBD,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,IAAI,CAAC,cAAc,EAAE,OAAO,GAAG,SAAS,CAAC,EAC9C,QAAQ,EAAE,OAAO,GAChB,OAAO,CAET"}
@@ -0,0 +1,20 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
3
+ exports.resolveOrgAuthorityInstrument = resolveOrgAuthorityInstrument;
4
+ exports.holdsOrgAuthority = holdsOrgAuthority;
5
+ const audit_1 = require("@xemahq/kernel-contracts/audit");
6
+ const org_role_1 = require("../../lib/auth/org-role");
7
+ const platform_role_1 = require("./platform-role");
8
+ function resolveOrgAuthorityInstrument(ctx, required) {
9
+ if (ctx.orgRole !== undefined && (0, org_role_1.orgRoleSatisfies)(ctx.orgRole, required)) {
10
+ return { kind: audit_1.AuditAuthorityKind.OrgRole, orgRole: ctx.orgRole };
11
+ }
12
+ if ((0, platform_role_1.hasPlatformRole)(ctx.roles)) {
13
+ return { kind: audit_1.AuditAuthorityKind.PlatformAdmin };
14
+ }
15
+ return undefined;
16
+ }
17
+ function holdsOrgAuthority(ctx, required) {
18
+ return resolveOrgAuthorityInstrument(ctx, required) !== undefined;
19
+ }
20
+ //# sourceMappingURL=holds-org-authority.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"holds-org-authority.js","sourceRoot":"","sources":["../../../src/nestjs/auth/holds-org-authority.ts"],"names":[],"mappings":";;AAgGA,sEAWC;AAuBD,8CAKC;AAvID,0DAAoE;AAEpE,sDAAoE;AACpE,mDAAkD;AA6FlD,SAAgB,6BAA6B,CAC3C,GAA8C,EAC9C,QAAiB;IAEjB,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS,IAAI,IAAA,2BAAgB,EAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC;QACzE,OAAO,EAAE,IAAI,EAAE,0BAAkB,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;IACpE,CAAC;IACD,IAAI,IAAA,+BAAe,EAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,EAAE,IAAI,EAAE,0BAAkB,CAAC,aAAa,EAAE,CAAC;IACpD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAuBD,SAAgB,iBAAiB,CAC/B,GAA8C,EAC9C,QAAiB;IAEjB,OAAO,6BAA6B,CAAC,GAAG,EAAE,QAAQ,CAAC,KAAK,SAAS,CAAC;AACpE,CAAC"}
@@ -8,14 +8,15 @@ export { OrgRoleGuard, RequireOrgRole, REQUIRE_ORG_ROLE, } from './org-role.guar
8
8
  export { ServiceOrOrgRoleGuard } from './service-or-org-role.guard';
9
9
  export { OrgRole, OrgRolesClaimKey, ORG_ROLES_CLAIM_KEYS, resolveOrgRoles, resolveOrgRoleForOrg, orgRoleSatisfies, } from '../../lib/auth/org-role';
10
10
  export { PlatformRole, hasPlatformRole } from './platform-role';
11
+ export { holdsOrgAuthority, resolveOrgAuthorityInstrument, type OrgAuthorityInstrument, } from './holds-org-authority';
11
12
  export { PlatformAdminGuard } from './platform-admin.guard';
12
13
  export { configureAuthMiddleware, type ConfigureAuthMiddlewareOptions, } from './configure-auth-middleware';
13
14
  export { OrgClaimKey, OrgHeaderName, ORG_CLAIM_KEYS, resolveOrgClaim, } from '../../lib/auth/org-claim';
14
15
  export { RequireOrgClaim, REQUIRE_ORG_CLAIM } from './org-claim-required';
15
- export { OrgAuthoritySource, type OrgAuthorityVerdict, type OrgAuthorityCallerFacts, resolveOrgAuthority, isOrgAuthorityProven, orgAuthorityRequiresProof, OrgAuthorityMode, ORG_AUTHORITY_MODE_ENV, InvalidOrgAuthorityModeError, resolveOrgAuthorityMode, } from '../../lib/auth/org-authority';
16
- export { ORG_AUTHORITY_OBSERVATION_LIMIT, UNKNOWN_CLIENT_ID, type OrgAuthorityObservation, type OrgAuthorityCensus, recordUnprovenOrgAuthority, orgAuthorityCensus, resetOrgAuthorityCensus, } from '../../lib/auth/org-authority-observations';
16
+ export { OrgAuthoritySource, type OrgAuthorityVerdict, type OrgAuthorityCaller, type OrgAuthorityCallerFacts, resolveOrgAuthority, isOrgAuthorityProven, orgAuthorityRequiresProof, } from '../../lib/auth/org-authority';
17
+ export { ORG_AUTHORITY_OBSERVATION_LIMIT, UNKNOWN_CLIENT_ID, type OrgAuthorityObservation, type OrgAuthorityCensus, recordUnprovenOrgAuthority, recordServiceRelayedOrgAuthority, orgAuthorityCensus, orgAuthorityRelayCensus, resetOrgAuthorityCensus, } from '../../lib/auth/org-authority-observations';
17
18
  export { resolveActorChainFromClaims, UnclassifiableActorHopError, UnknownActorHopSubjectKindError, ContradictoryActorHopKindError, MalformedActorHopError, } from './delegation-chain';
18
- export { SUBJECT_KIND_CLAIM, readDeclaredSubjectKind, } from './actor-classification';
19
+ export { SUBJECT_KIND_CLAIM, readDeclaredSubjectKind, UnknownTokenClassError, } from './actor-classification';
19
20
  export { RealmTokenVerifier, type MultiRealmKeySource, type VerifiedTokenSource, } from './realm-token-verifier';
20
21
  export { DEFAULT_TRUSTED_ISSUER_ALGORITHMS, TRUSTED_ISSUERS_ENV_VAR, TrustedIssuerConfigError, TrustedIssuerRegistry, parseTrustedIssuersFromEnv, type TrustedIssuerEntry, } from '@xemahq/oidc-guard';
21
22
  //# sourceMappingURL=index.d.ts.map
@@ -1 +1 @@
1
- {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/nestjs/auth/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EACL,mBAAmB,EACnB,KAAK,iBAAiB,EACtB,KAAK,sBAAsB,GAC5B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EACL,iBAAiB,EACjB,oBAAoB,GACrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,YAAY,EACZ,cAAc,EACd,gBAAgB,GACjB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACpE,OAAO,EACL,OAAO,EACP,gBAAgB,EAChB,oBAAoB,EACpB,eAAe,EACf,oBAAoB,EACpB,gBAAgB,GACjB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EACL,uBAAuB,EACvB,KAAK,8BAA8B,GACpC,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,WAAW,EACX,aAAa,EACb,cAAc,EACd,eAAe,GAChB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAC1E,OAAO,EACL,kBAAkB,EAClB,KAAK,mBAAmB,EACxB,KAAK,uBAAuB,EAC5B,mBAAmB,EACnB,oBAAoB,EACpB,yBAAyB,EACzB,gBAAgB,EAChB,sBAAsB,EACtB,4BAA4B,EAC5B,uBAAuB,GACxB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,+BAA+B,EAC/B,iBAAiB,EACjB,KAAK,uBAAuB,EAC5B,KAAK,kBAAkB,EACvB,0BAA0B,EAC1B,kBAAkB,EAClB,uBAAuB,GACxB,MAAM,2CAA2C,CAAC;AACnD,OAAO,EACL,2BAA2B,EAC3B,2BAA2B,EAC3B,+BAA+B,EAC/B,8BAA8B,EAC9B,sBAAsB,GACvB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,kBAAkB,EAClB,uBAAuB,GACxB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,kBAAkB,EAClB,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,GACzB,MAAM,wBAAwB,CAAC;AAOhC,OAAO,EACL,iCAAiC,EACjC,uBAAuB,EACvB,wBAAwB,EACxB,qBAAqB,EACrB,0BAA0B,EAC1B,KAAK,kBAAkB,GACxB,MAAM,oBAAoB,CAAC"}
1
+ {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/nestjs/auth/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EACL,mBAAmB,EACnB,KAAK,iBAAiB,EACtB,KAAK,sBAAsB,GAC5B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EACL,iBAAiB,EACjB,oBAAoB,GACrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,YAAY,EACZ,cAAc,EACd,gBAAgB,GACjB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACpE,OAAO,EACL,OAAO,EACP,gBAAgB,EAChB,oBAAoB,EACpB,eAAe,EACf,oBAAoB,EACpB,gBAAgB,GACjB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAChE,OAAO,EACL,iBAAiB,EACjB,6BAA6B,EAC7B,KAAK,sBAAsB,GAC5B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EACL,uBAAuB,EACvB,KAAK,8BAA8B,GACpC,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,WAAW,EACX,aAAa,EACb,cAAc,EACd,eAAe,GAChB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAC1E,OAAO,EACL,kBAAkB,EAClB,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACvB,KAAK,uBAAuB,EAC5B,mBAAmB,EACnB,oBAAoB,EACpB,yBAAyB,GAC1B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,+BAA+B,EAC/B,iBAAiB,EACjB,KAAK,uBAAuB,EAC5B,KAAK,kBAAkB,EACvB,0BAA0B,EAC1B,gCAAgC,EAChC,kBAAkB,EAClB,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,2CAA2C,CAAC;AACnD,OAAO,EACL,2BAA2B,EAC3B,2BAA2B,EAC3B,+BAA+B,EAC/B,8BAA8B,EAC9B,sBAAsB,GACvB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,kBAAkB,EAClB,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,kBAAkB,EAClB,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,GACzB,MAAM,wBAAwB,CAAC;AAOhC,OAAO,EACL,iCAAiC,EACjC,uBAAuB,EACvB,wBAAwB,EACxB,qBAAqB,EACrB,0BAA0B,EAC1B,KAAK,kBAAkB,GACxB,MAAM,oBAAoB,CAAC"}
@@ -1,7 +1,7 @@
1
1
  "use strict";
2
2
  Object.defineProperty(exports, "__esModule", { value: true });
3
- exports.RealmTokenVerifier = exports.readDeclaredSubjectKind = exports.SUBJECT_KIND_CLAIM = exports.MalformedActorHopError = exports.ContradictoryActorHopKindError = exports.UnknownActorHopSubjectKindError = exports.UnclassifiableActorHopError = exports.resolveActorChainFromClaims = exports.resetOrgAuthorityCensus = exports.orgAuthorityCensus = exports.recordUnprovenOrgAuthority = exports.UNKNOWN_CLIENT_ID = exports.ORG_AUTHORITY_OBSERVATION_LIMIT = exports.resolveOrgAuthorityMode = exports.InvalidOrgAuthorityModeError = exports.ORG_AUTHORITY_MODE_ENV = exports.OrgAuthorityMode = exports.orgAuthorityRequiresProof = exports.isOrgAuthorityProven = exports.resolveOrgAuthority = exports.OrgAuthoritySource = exports.REQUIRE_ORG_CLAIM = exports.RequireOrgClaim = exports.resolveOrgClaim = exports.ORG_CLAIM_KEYS = exports.OrgHeaderName = exports.OrgClaimKey = exports.configureAuthMiddleware = exports.PlatformAdminGuard = exports.hasPlatformRole = exports.PlatformRole = exports.orgRoleSatisfies = exports.resolveOrgRoleForOrg = exports.resolveOrgRoles = exports.ORG_ROLES_CLAIM_KEYS = exports.OrgRolesClaimKey = exports.OrgRole = exports.ServiceOrOrgRoleGuard = exports.REQUIRE_ORG_ROLE = exports.RequireOrgRole = exports.OrgRoleGuard = exports.REQUIRE_TOKEN_CLASS = exports.RequireTokenClass = exports.TokenClassGuard = exports.isDirectServiceActor = exports.ServiceActorGuard = exports.InternalCallerGuard = exports.ServiceTokenGuard = exports.AUTH_MODULE_OPTIONS = exports.AuthModule = void 0;
4
- exports.parseTrustedIssuersFromEnv = exports.TrustedIssuerRegistry = exports.TrustedIssuerConfigError = exports.TRUSTED_ISSUERS_ENV_VAR = exports.DEFAULT_TRUSTED_ISSUER_ALGORITHMS = void 0;
3
+ exports.UnknownTokenClassError = exports.readDeclaredSubjectKind = exports.SUBJECT_KIND_CLAIM = exports.MalformedActorHopError = exports.ContradictoryActorHopKindError = exports.UnknownActorHopSubjectKindError = exports.UnclassifiableActorHopError = exports.resolveActorChainFromClaims = exports.resetOrgAuthorityCensus = exports.orgAuthorityRelayCensus = exports.orgAuthorityCensus = exports.recordServiceRelayedOrgAuthority = exports.recordUnprovenOrgAuthority = exports.UNKNOWN_CLIENT_ID = exports.ORG_AUTHORITY_OBSERVATION_LIMIT = exports.orgAuthorityRequiresProof = exports.isOrgAuthorityProven = exports.resolveOrgAuthority = exports.OrgAuthoritySource = exports.REQUIRE_ORG_CLAIM = exports.RequireOrgClaim = exports.resolveOrgClaim = exports.ORG_CLAIM_KEYS = exports.OrgHeaderName = exports.OrgClaimKey = exports.configureAuthMiddleware = exports.PlatformAdminGuard = exports.resolveOrgAuthorityInstrument = exports.holdsOrgAuthority = exports.hasPlatformRole = exports.PlatformRole = exports.orgRoleSatisfies = exports.resolveOrgRoleForOrg = exports.resolveOrgRoles = exports.ORG_ROLES_CLAIM_KEYS = exports.OrgRolesClaimKey = exports.OrgRole = exports.ServiceOrOrgRoleGuard = exports.REQUIRE_ORG_ROLE = exports.RequireOrgRole = exports.OrgRoleGuard = exports.REQUIRE_TOKEN_CLASS = exports.RequireTokenClass = exports.TokenClassGuard = exports.isDirectServiceActor = exports.ServiceActorGuard = exports.InternalCallerGuard = exports.ServiceTokenGuard = exports.AUTH_MODULE_OPTIONS = exports.AuthModule = void 0;
4
+ exports.parseTrustedIssuersFromEnv = exports.TrustedIssuerRegistry = exports.TrustedIssuerConfigError = exports.TRUSTED_ISSUERS_ENV_VAR = exports.DEFAULT_TRUSTED_ISSUER_ALGORITHMS = exports.RealmTokenVerifier = void 0;
5
5
  var auth_module_1 = require("./auth.module");
6
6
  Object.defineProperty(exports, "AuthModule", { enumerable: true, get: function () { return auth_module_1.AuthModule; } });
7
7
  var auth_module_options_1 = require("./auth-module-options");
@@ -33,6 +33,9 @@ Object.defineProperty(exports, "orgRoleSatisfies", { enumerable: true, get: func
33
33
  var platform_role_1 = require("./platform-role");
34
34
  Object.defineProperty(exports, "PlatformRole", { enumerable: true, get: function () { return platform_role_1.PlatformRole; } });
35
35
  Object.defineProperty(exports, "hasPlatformRole", { enumerable: true, get: function () { return platform_role_1.hasPlatformRole; } });
36
+ var holds_org_authority_1 = require("./holds-org-authority");
37
+ Object.defineProperty(exports, "holdsOrgAuthority", { enumerable: true, get: function () { return holds_org_authority_1.holdsOrgAuthority; } });
38
+ Object.defineProperty(exports, "resolveOrgAuthorityInstrument", { enumerable: true, get: function () { return holds_org_authority_1.resolveOrgAuthorityInstrument; } });
36
39
  var platform_admin_guard_1 = require("./platform-admin.guard");
37
40
  Object.defineProperty(exports, "PlatformAdminGuard", { enumerable: true, get: function () { return platform_admin_guard_1.PlatformAdminGuard; } });
38
41
  var configure_auth_middleware_1 = require("./configure-auth-middleware");
@@ -50,15 +53,13 @@ Object.defineProperty(exports, "OrgAuthoritySource", { enumerable: true, get: fu
50
53
  Object.defineProperty(exports, "resolveOrgAuthority", { enumerable: true, get: function () { return org_authority_1.resolveOrgAuthority; } });
51
54
  Object.defineProperty(exports, "isOrgAuthorityProven", { enumerable: true, get: function () { return org_authority_1.isOrgAuthorityProven; } });
52
55
  Object.defineProperty(exports, "orgAuthorityRequiresProof", { enumerable: true, get: function () { return org_authority_1.orgAuthorityRequiresProof; } });
53
- Object.defineProperty(exports, "OrgAuthorityMode", { enumerable: true, get: function () { return org_authority_1.OrgAuthorityMode; } });
54
- Object.defineProperty(exports, "ORG_AUTHORITY_MODE_ENV", { enumerable: true, get: function () { return org_authority_1.ORG_AUTHORITY_MODE_ENV; } });
55
- Object.defineProperty(exports, "InvalidOrgAuthorityModeError", { enumerable: true, get: function () { return org_authority_1.InvalidOrgAuthorityModeError; } });
56
- Object.defineProperty(exports, "resolveOrgAuthorityMode", { enumerable: true, get: function () { return org_authority_1.resolveOrgAuthorityMode; } });
57
56
  var org_authority_observations_1 = require("../../lib/auth/org-authority-observations");
58
57
  Object.defineProperty(exports, "ORG_AUTHORITY_OBSERVATION_LIMIT", { enumerable: true, get: function () { return org_authority_observations_1.ORG_AUTHORITY_OBSERVATION_LIMIT; } });
59
58
  Object.defineProperty(exports, "UNKNOWN_CLIENT_ID", { enumerable: true, get: function () { return org_authority_observations_1.UNKNOWN_CLIENT_ID; } });
60
59
  Object.defineProperty(exports, "recordUnprovenOrgAuthority", { enumerable: true, get: function () { return org_authority_observations_1.recordUnprovenOrgAuthority; } });
60
+ Object.defineProperty(exports, "recordServiceRelayedOrgAuthority", { enumerable: true, get: function () { return org_authority_observations_1.recordServiceRelayedOrgAuthority; } });
61
61
  Object.defineProperty(exports, "orgAuthorityCensus", { enumerable: true, get: function () { return org_authority_observations_1.orgAuthorityCensus; } });
62
+ Object.defineProperty(exports, "orgAuthorityRelayCensus", { enumerable: true, get: function () { return org_authority_observations_1.orgAuthorityRelayCensus; } });
62
63
  Object.defineProperty(exports, "resetOrgAuthorityCensus", { enumerable: true, get: function () { return org_authority_observations_1.resetOrgAuthorityCensus; } });
63
64
  var delegation_chain_1 = require("./delegation-chain");
64
65
  Object.defineProperty(exports, "resolveActorChainFromClaims", { enumerable: true, get: function () { return delegation_chain_1.resolveActorChainFromClaims; } });
@@ -69,6 +70,7 @@ Object.defineProperty(exports, "MalformedActorHopError", { enumerable: true, get
69
70
  var actor_classification_1 = require("./actor-classification");
70
71
  Object.defineProperty(exports, "SUBJECT_KIND_CLAIM", { enumerable: true, get: function () { return actor_classification_1.SUBJECT_KIND_CLAIM; } });
71
72
  Object.defineProperty(exports, "readDeclaredSubjectKind", { enumerable: true, get: function () { return actor_classification_1.readDeclaredSubjectKind; } });
73
+ Object.defineProperty(exports, "UnknownTokenClassError", { enumerable: true, get: function () { return actor_classification_1.UnknownTokenClassError; } });
72
74
  var realm_token_verifier_1 = require("./realm-token-verifier");
73
75
  Object.defineProperty(exports, "RealmTokenVerifier", { enumerable: true, get: function () { return realm_token_verifier_1.RealmTokenVerifier; } });
74
76
  var oidc_guard_1 = require("@xemahq/oidc-guard");
@@ -1 +1 @@
1
- {"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/nestjs/auth/index.ts"],"names":[],"mappings":";;;;AAAA,6CAA2C;AAAlC,yGAAA,UAAU,OAAA;AACnB,6DAI+B;AAH7B,0HAAA,mBAAmB,OAAA;AAIrB,6DAA0D;AAAjD,wHAAA,iBAAiB,OAAA;AAC1B,iEAA8D;AAArD,4HAAA,mBAAmB,OAAA;AAC5B,6DAG+B;AAF7B,wHAAA,iBAAiB,OAAA;AACjB,2HAAA,oBAAoB,OAAA;AAEtB,yDAI6B;AAH3B,oHAAA,eAAe,OAAA;AACf,sHAAA,iBAAiB,OAAA;AACjB,wHAAA,mBAAmB,OAAA;AAErB,mDAI0B;AAHxB,8GAAA,YAAY,OAAA;AACZ,gHAAA,cAAc,OAAA;AACd,kHAAA,gBAAgB,OAAA;AAElB,yEAAoE;AAA3D,kIAAA,qBAAqB,OAAA;AAC9B,oDAOiC;AAN/B,mGAAA,OAAO,OAAA;AACP,4GAAA,gBAAgB,OAAA;AAChB,gHAAA,oBAAoB,OAAA;AACpB,2GAAA,eAAe,OAAA;AACf,gHAAA,oBAAoB,OAAA;AACpB,4GAAA,gBAAgB,OAAA;AAElB,iDAAgE;AAAvD,6GAAA,YAAY,OAAA;AAAE,gHAAA,eAAe,OAAA;AACtC,+DAA4D;AAAnD,0HAAA,kBAAkB,OAAA;AAC3B,yEAGqC;AAFnC,oIAAA,uBAAuB,OAAA;AAGzB,sDAKkC;AAJhC,wGAAA,WAAW,OAAA;AACX,0GAAA,aAAa,OAAA;AACb,2GAAA,cAAc,OAAA;AACd,4GAAA,eAAe,OAAA;AAEjB,2DAA0E;AAAjE,qHAAA,eAAe,OAAA;AAAE,uHAAA,iBAAiB,OAAA;AAC3C,8DAWsC;AAVpC,mHAAA,kBAAkB,OAAA;AAGlB,oHAAA,mBAAmB,OAAA;AACnB,qHAAA,oBAAoB,OAAA;AACpB,0HAAA,yBAAyB,OAAA;AACzB,iHAAA,gBAAgB,OAAA;AAChB,uHAAA,sBAAsB,OAAA;AACtB,6HAAA,4BAA4B,OAAA;AAC5B,wHAAA,uBAAuB,OAAA;AAEzB,wFAQmD;AAPjD,6IAAA,+BAA+B,OAAA;AAC/B,+HAAA,iBAAiB,OAAA;AAGjB,wIAAA,0BAA0B,OAAA;AAC1B,gIAAA,kBAAkB,OAAA;AAClB,qIAAA,uBAAuB,OAAA;AAEzB,uDAM4B;AAL1B,+HAAA,2BAA2B,OAAA;AAC3B,+HAAA,2BAA2B,OAAA;AAC3B,mIAAA,+BAA+B,OAAA;AAC/B,kIAAA,8BAA8B,OAAA;AAC9B,0HAAA,sBAAsB,OAAA;AAExB,+DAGgC;AAF9B,0HAAA,kBAAkB,OAAA;AAClB,+HAAA,uBAAuB,OAAA;AAEzB,+DAIgC;AAH9B,0HAAA,kBAAkB,OAAA;AAUpB,iDAO4B;AAN1B,+HAAA,iCAAiC,OAAA;AACjC,qHAAA,uBAAuB,OAAA;AACvB,sHAAA,wBAAwB,OAAA;AACxB,mHAAA,qBAAqB,OAAA;AACrB,wHAAA,0BAA0B,OAAA"}
1
+ {"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/nestjs/auth/index.ts"],"names":[],"mappings":";;;;AAAA,6CAA2C;AAAlC,yGAAA,UAAU,OAAA;AACnB,6DAI+B;AAH7B,0HAAA,mBAAmB,OAAA;AAIrB,6DAA0D;AAAjD,wHAAA,iBAAiB,OAAA;AAC1B,iEAA8D;AAArD,4HAAA,mBAAmB,OAAA;AAC5B,6DAG+B;AAF7B,wHAAA,iBAAiB,OAAA;AACjB,2HAAA,oBAAoB,OAAA;AAEtB,yDAI6B;AAH3B,oHAAA,eAAe,OAAA;AACf,sHAAA,iBAAiB,OAAA;AACjB,wHAAA,mBAAmB,OAAA;AAErB,mDAI0B;AAHxB,8GAAA,YAAY,OAAA;AACZ,gHAAA,cAAc,OAAA;AACd,kHAAA,gBAAgB,OAAA;AAElB,yEAAoE;AAA3D,kIAAA,qBAAqB,OAAA;AAC9B,oDAOiC;AAN/B,mGAAA,OAAO,OAAA;AACP,4GAAA,gBAAgB,OAAA;AAChB,gHAAA,oBAAoB,OAAA;AACpB,2GAAA,eAAe,OAAA;AACf,gHAAA,oBAAoB,OAAA;AACpB,4GAAA,gBAAgB,OAAA;AAElB,iDAAgE;AAAvD,6GAAA,YAAY,OAAA;AAAE,gHAAA,eAAe,OAAA;AACtC,6DAI+B;AAH7B,wHAAA,iBAAiB,OAAA;AACjB,oIAAA,6BAA6B,OAAA;AAG/B,+DAA4D;AAAnD,0HAAA,kBAAkB,OAAA;AAC3B,yEAGqC;AAFnC,oIAAA,uBAAuB,OAAA;AAGzB,sDAKkC;AAJhC,wGAAA,WAAW,OAAA;AACX,0GAAA,aAAa,OAAA;AACb,2GAAA,cAAc,OAAA;AACd,4GAAA,eAAe,OAAA;AAEjB,2DAA0E;AAAjE,qHAAA,eAAe,OAAA;AAAE,uHAAA,iBAAiB,OAAA;AAC3C,8DAQsC;AAPpC,mHAAA,kBAAkB,OAAA;AAIlB,oHAAA,mBAAmB,OAAA;AACnB,qHAAA,oBAAoB,OAAA;AACpB,0HAAA,yBAAyB,OAAA;AAE3B,wFAUmD;AATjD,6IAAA,+BAA+B,OAAA;AAC/B,+HAAA,iBAAiB,OAAA;AAGjB,wIAAA,0BAA0B,OAAA;AAC1B,8IAAA,gCAAgC,OAAA;AAChC,gIAAA,kBAAkB,OAAA;AAClB,qIAAA,uBAAuB,OAAA;AACvB,qIAAA,uBAAuB,OAAA;AAEzB,uDAM4B;AAL1B,+HAAA,2BAA2B,OAAA;AAC3B,+HAAA,2BAA2B,OAAA;AAC3B,mIAAA,+BAA+B,OAAA;AAC/B,kIAAA,8BAA8B,OAAA;AAC9B,0HAAA,sBAAsB,OAAA;AAExB,+DAIgC;AAH9B,0HAAA,kBAAkB,OAAA;AAClB,+HAAA,uBAAuB,OAAA;AACvB,8HAAA,sBAAsB,OAAA;AAExB,+DAIgC;AAH9B,0HAAA,kBAAkB,OAAA;AAUpB,iDAO4B;AAN1B,+HAAA,iCAAiC,OAAA;AACjC,qHAAA,uBAAuB,OAAA;AACvB,sHAAA,wBAAwB,OAAA;AACxB,mHAAA,qBAAqB,OAAA;AACrB,wHAAA,0BAA0B,OAAA"}
@@ -1 +1 @@
1
- {"version":3,"file":"org-role.guard.d.ts","sourceRoot":"","sources":["../../../src/nestjs/auth/org-role.guard.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,WAAW,EACX,gBAAgB,EAMjB,MAAM,gBAAgB,CAAC;AAKxB,OAAO,EAAE,OAAO,EAAoB,MAAM,yBAAyB,CAAC;AAGpE,eAAO,MAAM,gBAAgB,0BAA0B,CAAC;AAqBxD,eAAO,MAAM,cAAc,GACzB,MAAM,OAAO,KACZ,eAAe,GAAG,cAAqD,CAAC;AAY3E,qBACa,YAAa,YAAW,WAAW;IAC9C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiC;IAExD,WAAW,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO;CA0ChD"}
1
+ {"version":3,"file":"org-role.guard.d.ts","sourceRoot":"","sources":["../../../src/nestjs/auth/org-role.guard.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,WAAW,EACX,gBAAgB,EAMjB,MAAM,gBAAgB,CAAC;AAKxB,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAIlD,eAAO,MAAM,gBAAgB,0BAA0B,CAAC;AAqBxD,eAAO,MAAM,cAAc,GACzB,MAAM,OAAO,KACZ,eAAe,GAAG,cAAqD,CAAC;AAkB3E,qBACa,YAAa,YAAW,WAAW;IAC9C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiC;IAExD,WAAW,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO;CA0ChD"}
@@ -11,7 +11,7 @@ exports.OrgRoleGuard = exports.RequireOrgRole = exports.REQUIRE_ORG_ROLE = void
11
11
  const common_1 = require("@nestjs/common");
12
12
  const decorator_metadata_1 = require("../decorator-metadata");
13
13
  const request_context_1 = require("../../lib/request-context");
14
- const org_role_1 = require("../../lib/auth/org-role");
14
+ const holds_org_authority_1 = require("./holds-org-authority");
15
15
  exports.REQUIRE_ORG_ROLE = 'xema:require-org-role';
16
16
  const RequireOrgRole = (role) => (0, common_1.SetMetadata)(exports.REQUIRE_ORG_ROLE, role);
17
17
  exports.RequireOrgRole = RequireOrgRole;
@@ -35,7 +35,7 @@ let OrgRoleGuard = OrgRoleGuard_1 = class OrgRoleGuard {
35
35
  message: 'Internal route misconfigured: missing request context.',
36
36
  });
37
37
  }
38
- if (!(0, org_role_1.orgRoleSatisfies)(ctx.orgRole, required)) {
38
+ if (!(0, holds_org_authority_1.holdsOrgAuthority)(ctx, required)) {
39
39
  this.logger.warn({
40
40
  message: 'org-role-denied',
41
41
  route: `${request.method} ${request.originalUrl}`,
@@ -1 +1 @@
1
- {"version":3,"file":"org-role.guard.js","sourceRoot":"","sources":["../../../src/nestjs/auth/org-role.guard.ts"],"names":[],"mappings":";;;;;;;;;;AAAA,2CAQwB;AAExB,8DAA8D;AAC9D,+DAA4D;AAE5D,sDAAoE;AAGvD,QAAA,gBAAgB,GAAG,uBAAuB,CAAC;AAqBjD,MAAM,cAAc,GAAG,CAC5B,IAAa,EACqB,EAAE,CAAC,IAAA,oBAAW,EAAC,wBAAgB,EAAE,IAAI,CAAC,CAAC;AAF9D,QAAA,cAAc,kBAEgD;AAapE,IAAM,YAAY,oBAAlB,MAAM,YAAY;IACN,MAAM,GAAG,IAAI,eAAM,CAAC,cAAY,CAAC,IAAI,CAAC,CAAC;IAExD,WAAW,CAAC,OAAyB;QACnC,MAAM,QAAQ,GAAG,IAAA,0CAAqB,EAAU,wBAAgB,EAAE;YAChE,OAAO,CAAC,UAAU,EAAE;YACpB,OAAO,CAAC,QAAQ,EAAE;SACnB,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAAW,CAAC;QAC7D,MAAM,GAAG,GAAI,OAA8C,CACzD,iCAAe,CACc,CAAC;QAEhC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,iDAAiD;gBAC/C,qDAAqD,CACxD,CAAC;YACF,MAAM,IAAI,qCAA4B,CAAC;gBACrC,IAAI,EAAE,yBAAyB;gBAC/B,OAAO,EAAE,wDAAwD;aAClE,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,IAAA,2BAAgB,EAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC;YAC7C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;gBACf,OAAO,EAAE,iBAAiB;gBAC1B,KAAK,EAAE,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,WAAW,EAAE;gBACjD,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,IAAI;gBAC5B,eAAe,EAAE,QAAQ;aAC1B,CAAC,CAAC;YACH,MAAM,IAAI,2BAAkB,CAAC;gBAC3B,IAAI,EAAE,wBAAwB;gBAC9B,OAAO,EAAE,oCAAoC,QAAQ,cAAc;aACpE,CAAC,CAAC;QACL,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;CACF,CAAA;AA7CY,oCAAY;uBAAZ,YAAY;IADxB,IAAA,mBAAU,GAAE;GACA,YAAY,CA6CxB"}
1
+ {"version":3,"file":"org-role.guard.js","sourceRoot":"","sources":["../../../src/nestjs/auth/org-role.guard.ts"],"names":[],"mappings":";;;;;;;;;;AAAA,2CAQwB;AAExB,8DAA8D;AAC9D,+DAA4D;AAG5D,+DAA0D;AAG7C,QAAA,gBAAgB,GAAG,uBAAuB,CAAC;AAqBjD,MAAM,cAAc,GAAG,CAC5B,IAAa,EACqB,EAAE,CAAC,IAAA,oBAAW,EAAC,wBAAgB,EAAE,IAAI,CAAC,CAAC;AAF9D,QAAA,cAAc,kBAEgD;AAmBpE,IAAM,YAAY,oBAAlB,MAAM,YAAY;IACN,MAAM,GAAG,IAAI,eAAM,CAAC,cAAY,CAAC,IAAI,CAAC,CAAC;IAExD,WAAW,CAAC,OAAyB;QACnC,MAAM,QAAQ,GAAG,IAAA,0CAAqB,EAAU,wBAAgB,EAAE;YAChE,OAAO,CAAC,UAAU,EAAE;YACpB,OAAO,CAAC,QAAQ,EAAE;SACnB,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAAW,CAAC;QAC7D,MAAM,GAAG,GAAI,OAA8C,CACzD,iCAAe,CACc,CAAC;QAEhC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,iDAAiD;gBAC/C,qDAAqD,CACxD,CAAC;YACF,MAAM,IAAI,qCAA4B,CAAC;gBACrC,IAAI,EAAE,yBAAyB;gBAC/B,OAAO,EAAE,wDAAwD;aAClE,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,IAAA,uCAAiB,EAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,CAAC;YACtC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;gBACf,OAAO,EAAE,iBAAiB;gBAC1B,KAAK,EAAE,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,WAAW,EAAE;gBACjD,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,IAAI;gBAC5B,eAAe,EAAE,QAAQ;aAC1B,CAAC,CAAC;YACH,MAAM,IAAI,2BAAkB,CAAC;gBAC3B,IAAI,EAAE,wBAAwB;gBAC9B,OAAO,EAAE,oCAAoC,QAAQ,cAAc;aACpE,CAAC,CAAC;QACL,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;CACF,CAAA;AA7CY,oCAAY;uBAAZ,YAAY;IADxB,IAAA,mBAAU,GAAE;GACA,YAAY,CA6CxB"}
@@ -1 +1 @@
1
- {"version":3,"file":"service-or-org-role.guard.d.ts","sourceRoot":"","sources":["../../../src/nestjs/auth/service-or-org-role.guard.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,WAAW,EACX,gBAAgB,EAKjB,MAAM,gBAAgB,CAAC;AAiDxB,qBACa,qBAAsB,YAAW,WAAW;IACvD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA0C;IAEjE,WAAW,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO;CAgDhD"}
1
+ {"version":3,"file":"service-or-org-role.guard.d.ts","sourceRoot":"","sources":["../../../src/nestjs/auth/service-or-org-role.guard.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,WAAW,EACX,gBAAgB,EAKjB,MAAM,gBAAgB,CAAC;AAkDxB,qBACa,qBAAsB,YAAW,WAAW;IACvD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA0C;IAEjE,WAAW,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO;CAiDhD"}
@@ -11,7 +11,7 @@ exports.ServiceOrOrgRoleGuard = void 0;
11
11
  const common_1 = require("@nestjs/common");
12
12
  const decorator_metadata_1 = require("../decorator-metadata");
13
13
  const request_context_1 = require("../../lib/request-context");
14
- const org_role_1 = require("../../lib/auth/org-role");
14
+ const holds_org_authority_1 = require("./holds-org-authority");
15
15
  const service_actor_guard_1 = require("./service-actor.guard");
16
16
  const org_role_guard_1 = require("./org-role.guard");
17
17
  let ServiceOrOrgRoleGuard = ServiceOrOrgRoleGuard_1 = class ServiceOrOrgRoleGuard {
@@ -37,7 +37,7 @@ let ServiceOrOrgRoleGuard = ServiceOrOrgRoleGuard_1 = class ServiceOrOrgRoleGuar
37
37
  if ((0, service_actor_guard_1.isDirectServiceActor)(ctx)) {
38
38
  return true;
39
39
  }
40
- if (!(0, org_role_1.orgRoleSatisfies)(ctx.orgRole, required)) {
40
+ if (!(0, holds_org_authority_1.holdsOrgAuthority)(ctx, required)) {
41
41
  this.logger.warn({
42
42
  message: 'service-or-org-role-denied',
43
43
  route: `${request.method} ${request.originalUrl}`,
@@ -1 +1 @@
1
- {"version":3,"file":"service-or-org-role.guard.js","sourceRoot":"","sources":["../../../src/nestjs/auth/service-or-org-role.guard.ts"],"names":[],"mappings":";;;;;;;;;;AAAA,2CAOwB;AAExB,8DAA8D;AAC9D,+DAA4D;AAE5D,sDAAoE;AACpE,+DAA6D;AAC7D,qDAAoD;AA2C7C,IAAM,qBAAqB,6BAA3B,MAAM,qBAAqB;IACf,MAAM,GAAG,IAAI,eAAM,CAAC,uBAAqB,CAAC,IAAI,CAAC,CAAC;IAEjE,WAAW,CAAC,OAAyB;QACnC,MAAM,QAAQ,GAAG,IAAA,0CAAqB,EAAU,iCAAgB,EAAE;YAChE,OAAO,CAAC,UAAU,EAAE;YACpB,OAAO,CAAC,QAAQ,EAAE;SACnB,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAAW,CAAC;QAC7D,MAAM,GAAG,GAAI,OAA8C,CACzD,iCAAe,CACc,CAAC;QAEhC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,0DAA0D;gBACxD,qDAAqD,CACxD,CAAC;YACF,MAAM,IAAI,qCAA4B,CAAC;gBACrC,IAAI,EAAE,yBAAyB;gBAC/B,OAAO,EAAE,wDAAwD;aAClE,CAAC,CAAC;QACL,CAAC;QAGD,IAAI,IAAA,0CAAoB,EAAC,GAAG,CAAC,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAC;QACd,CAAC;QAGD,IAAI,CAAC,IAAA,2BAAgB,EAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC;YAC7C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;gBACf,OAAO,EAAE,4BAA4B;gBACrC,KAAK,EAAE,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,WAAW,EAAE;gBACjD,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,IAAI;gBAC5B,eAAe,EAAE,QAAQ;aAC1B,CAAC,CAAC;YACH,MAAM,IAAI,2BAAkB,CAAC;gBAC3B,IAAI,EAAE,wBAAwB;gBAC9B,OAAO,EAAE,oCAAoC,QAAQ,gDAAgD;aACtG,CAAC,CAAC;QACL,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;CACF,CAAA;AAnDY,sDAAqB;gCAArB,qBAAqB;IADjC,IAAA,mBAAU,GAAE;GACA,qBAAqB,CAmDjC"}
1
+ {"version":3,"file":"service-or-org-role.guard.js","sourceRoot":"","sources":["../../../src/nestjs/auth/service-or-org-role.guard.ts"],"names":[],"mappings":";;;;;;;;;;AAAA,2CAOwB;AAExB,8DAA8D;AAC9D,+DAA4D;AAG5D,+DAA0D;AAC1D,+DAA6D;AAC7D,qDAAoD;AA2C7C,IAAM,qBAAqB,6BAA3B,MAAM,qBAAqB;IACf,MAAM,GAAG,IAAI,eAAM,CAAC,uBAAqB,CAAC,IAAI,CAAC,CAAC;IAEjE,WAAW,CAAC,OAAyB;QACnC,MAAM,QAAQ,GAAG,IAAA,0CAAqB,EAAU,iCAAgB,EAAE;YAChE,OAAO,CAAC,UAAU,EAAE;YACpB,OAAO,CAAC,QAAQ,EAAE;SACnB,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAAW,CAAC;QAC7D,MAAM,GAAG,GAAI,OAA8C,CACzD,iCAAe,CACc,CAAC;QAEhC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,0DAA0D;gBACxD,qDAAqD,CACxD,CAAC;YACF,MAAM,IAAI,qCAA4B,CAAC;gBACrC,IAAI,EAAE,yBAAyB;gBAC/B,OAAO,EAAE,wDAAwD;aAClE,CAAC,CAAC;QACL,CAAC;QAGD,IAAI,IAAA,0CAAoB,EAAC,GAAG,CAAC,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAC;QACd,CAAC;QAID,IAAI,CAAC,IAAA,uCAAiB,EAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,CAAC;YACtC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;gBACf,OAAO,EAAE,4BAA4B;gBACrC,KAAK,EAAE,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,WAAW,EAAE;gBACjD,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,IAAI;gBAC5B,eAAe,EAAE,QAAQ;aAC1B,CAAC,CAAC;YACH,MAAM,IAAI,2BAAkB,CAAC;gBAC3B,IAAI,EAAE,wBAAwB;gBAC9B,OAAO,EAAE,oCAAoC,QAAQ,gDAAgD;aACtG,CAAC,CAAC;QACL,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;CACF,CAAA;AApDY,sDAAqB;gCAArB,qBAAqB;IADjC,IAAA,mBAAU,GAAE;GACA,qBAAqB,CAoDjC"}
@@ -0,0 +1,16 @@
1
+ import type { RequestContext } from '../lib/request-context';
2
+ export declare enum CapabilityEdgeTenancyError {
3
+ BodyOrgForbidden = "CAPABILITY_EDGE_BODY_ORG_FORBIDDEN",
4
+ MissingOrg = "CAPABILITY_EDGE_MISSING_ORG",
5
+ MissingProject = "CAPABILITY_EDGE_MISSING_PROJECT",
6
+ ProjectMismatch = "CAPABILITY_EDGE_PROJECT_MISMATCH"
7
+ }
8
+ export interface CapabilityTenancy {
9
+ readonly orgId: string;
10
+ readonly projectId: string;
11
+ }
12
+ export declare function resolveCapabilityTenancy(ctx: RequestContext, body: {
13
+ readonly orgId?: string;
14
+ readonly projectId?: string;
15
+ }): CapabilityTenancy;
16
+ //# sourceMappingURL=capability-edge-tenancy.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"capability-edge-tenancy.d.ts","sourceRoot":"","sources":["../../src/nestjs/capability-edge-tenancy.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAO7D,oBAAY,0BAA0B;IACpC,gBAAgB,uCAAuC;IACvD,UAAU,gCAAgC;IAC1C,cAAc,oCAAoC;IAClD,eAAe,qCAAqC;CACrD;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AA8CD,wBAAgB,wBAAwB,CACtC,GAAG,EAAE,cAAc,EACnB,IAAI,EAAE;IAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GAC7D,iBAAiB,CAkCnB"}
@@ -0,0 +1,44 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
3
+ exports.CapabilityEdgeTenancyError = void 0;
4
+ exports.resolveCapabilityTenancy = resolveCapabilityTenancy;
5
+ const common_1 = require("@nestjs/common");
6
+ var CapabilityEdgeTenancyError;
7
+ (function (CapabilityEdgeTenancyError) {
8
+ CapabilityEdgeTenancyError["BodyOrgForbidden"] = "CAPABILITY_EDGE_BODY_ORG_FORBIDDEN";
9
+ CapabilityEdgeTenancyError["MissingOrg"] = "CAPABILITY_EDGE_MISSING_ORG";
10
+ CapabilityEdgeTenancyError["MissingProject"] = "CAPABILITY_EDGE_MISSING_PROJECT";
11
+ CapabilityEdgeTenancyError["ProjectMismatch"] = "CAPABILITY_EDGE_PROJECT_MISMATCH";
12
+ })(CapabilityEdgeTenancyError || (exports.CapabilityEdgeTenancyError = CapabilityEdgeTenancyError = {}));
13
+ function resolveCapabilityTenancy(ctx, body) {
14
+ if (body.orgId !== undefined) {
15
+ throw new common_1.BadRequestException({
16
+ code: CapabilityEdgeTenancyError.BodyOrgForbidden,
17
+ message: 'The capability edge derives the tenant org from the authenticated ' +
18
+ 'request (X-Xema-Org-Id), never from the request body. Remove `orgId` ' +
19
+ 'from the payload.',
20
+ });
21
+ }
22
+ if (!ctx.orgId) {
23
+ throw new common_1.BadRequestException({
24
+ code: CapabilityEdgeTenancyError.MissingOrg,
25
+ message: 'The capability edge requires an authenticated tenant org (X-Xema-Org-Id).',
26
+ });
27
+ }
28
+ if (!ctx.projectId) {
29
+ throw new common_1.BadRequestException({
30
+ code: CapabilityEdgeTenancyError.MissingProject,
31
+ message: 'The capability edge requires a TRUSTED project scope (X-Project-Id), ' +
32
+ 'stamped by the capability-router from the verified connection scope.',
33
+ });
34
+ }
35
+ if (body.projectId !== undefined && body.projectId !== ctx.projectId) {
36
+ throw new common_1.BadRequestException({
37
+ code: CapabilityEdgeTenancyError.ProjectMismatch,
38
+ message: `Body projectId "${body.projectId}" disagrees with the authenticated ` +
39
+ `project scope "${ctx.projectId}".`,
40
+ });
41
+ }
42
+ return { orgId: ctx.orgId, projectId: ctx.projectId };
43
+ }
44
+ //# sourceMappingURL=capability-edge-tenancy.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"capability-edge-tenancy.js","sourceRoot":"","sources":["../../src/nestjs/capability-edge-tenancy.ts"],"names":[],"mappings":";;;AAiEA,4DAqCC;AAtGD,2CAAqD;AASrD,IAAY,0BAKX;AALD,WAAY,0BAA0B;IACpC,qFAAuD,CAAA;IACvD,wEAA0C,CAAA;IAC1C,gFAAkD,CAAA;IAClD,kFAAoD,CAAA;AACtD,CAAC,EALW,0BAA0B,0CAA1B,0BAA0B,QAKrC;AAmDD,SAAgB,wBAAwB,CACtC,GAAmB,EACnB,IAA8D;IAE9D,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,IAAI,4BAAmB,CAAC;YAC5B,IAAI,EAAE,0BAA0B,CAAC,gBAAgB;YACjD,OAAO,EACL,oEAAoE;gBACpE,uEAAuE;gBACvE,mBAAmB;SACtB,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,4BAAmB,CAAC;YAC5B,IAAI,EAAE,0BAA0B,CAAC,UAAU;YAC3C,OAAO,EACL,2EAA2E;SAC9E,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;QACnB,MAAM,IAAI,4BAAmB,CAAC;YAC5B,IAAI,EAAE,0BAA0B,CAAC,cAAc;YAC/C,OAAO,EACL,uEAAuE;gBACvE,sEAAsE;SACzE,CAAC,CAAC;IACL,CAAC;IACD,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,SAAS,KAAK,GAAG,CAAC,SAAS,EAAE,CAAC;QACrE,MAAM,IAAI,4BAAmB,CAAC;YAC5B,IAAI,EAAE,0BAA0B,CAAC,eAAe;YAChD,OAAO,EACL,mBAAmB,IAAI,CAAC,SAAS,qCAAqC;gBACtE,kBAAkB,GAAG,CAAC,SAAS,IAAI;SACtC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC;AACxD,CAAC"}
@@ -1,11 +1,8 @@
1
1
  import { ExceptionFilter, ArgumentsHost } from '@nestjs/common';
2
+ export declare function sendProblemResponse(host: ArgumentsHost, exception: unknown): void;
2
3
  export declare class GlobalExceptionFilter implements ExceptionFilter {
3
4
  private readonly logger;
4
5
  catch(exception: unknown, host: ArgumentsHost): void;
5
- private extractExceptionDetails;
6
- private handleTenancyError;
7
- private handleZodError;
8
- private handleDataStoreClientError;
9
6
  private logException;
10
7
  }
11
8
  //# sourceMappingURL=global-exception.filter.d.ts.map
@@ -1 +1 @@
1
- {"version":3,"file":"global-exception.filter.d.ts","sourceRoot":"","sources":["../../src/nestjs/global-exception.filter.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,EAEf,aAAa,EAId,MAAM,gBAAgB,CAAC;AAoJxB,qBACa,qBAAsB,YAAW,eAAe;IAC3D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA0C;IAEjE,KAAK,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,GAAG,IAAI;IAuBpD,OAAO,CAAC,uBAAuB;IAqF/B,OAAO,CAAC,kBAAkB;IAmD1B,OAAO,CAAC,cAAc;IAwBtB,OAAO,CAAC,0BAA0B;IAgElC,OAAO,CAAC,YAAY;CAqCrB"}
1
+ {"version":3,"file":"global-exception.filter.d.ts","sourceRoot":"","sources":["../../src/nestjs/global-exception.filter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAS,aAAa,EAAU,MAAM,gBAAgB,CAAC;AA2B/E,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,aAAa,EACnB,SAAS,EAAE,OAAO,GACjB,IAAI,CAoBN;AAkDD,qBACa,qBAAsB,YAAW,eAAe;IAC3D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA0C;IAEjE,KAAK,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,GAAG,IAAI;IAQpD,OAAO,CAAC,YAAY;CAkCrB"}