anbaric-tsapi 1.18.0 → 1.19.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "anbaric-tsapi",
-  "version": "1.18.0",
+  "version": "1.19.0",
   "description": "These are the shared libraries - types, classes, etc - that both the public state-machine and hosting services share",
   "license": "MIT",
   "author": "chris@anbaric.ai",

package/src/api/actors/Actor.ts

@@ -4,7 +4,7 @@ interface Actor {
 
     type : ActorType;
     id : string;
-    role : string;
+    roles : Array<string>;
 
 }
 

package/src/api/actors/SystemActor.ts

@@ -4,7 +4,7 @@ class SystemActor implements Actor {
 
     type : ActorType = "SYSTEM";
     id = "_SYSTEM";
-    role = "_SYSTEM";
+    roles = ["_SYSTEM"];
 
     static actor = new SystemActor();
 

package/src/api/actors/agents/Agent.ts

@@ -8,12 +8,12 @@ class Agent implements Actor {
 
     readonly type = "AGENT" as const;
     readonly id : string;
-    readonly role : string;
+    readonly roles : Array<string>;
     readonly client : Agent.Client;
 
-    constructor(id : string, role : string, client : Agent.Client) {
+    constructor(id : string, roles : Array<string> | string, client : Agent.Client) {
         this.id = id;
-        this.role = role;
+        this.roles = typeof roles === "string" ? [roles] : roles;
         this.client = client;
     }
 

package/src/api/cloud/WorkflowDefinition.ts

@@ -10,7 +10,7 @@ type WorkflowDefinition = {
     states : Array<{
         id : string,
         isTerminal : boolean,
-        actions : Array<{ name : string, description : string, actor : { id : string, type : string, role : string } }>,
+        actions : Array<{ name : string, description : string, actor : { id : string, type : string, roles : Array<string> } }>,
         transitions : Array<{ to : string }>,
     }>,
 

package/src/api/sessions/SessionResolver.ts

@@ -0,0 +1,20 @@
+/* The identity behind a platform session token, as resolved by the platform. */
+type ResolvedSession = {
+
+    id : string,
+    roles : Array<string>,
+    tenant? : string,
+
+};
+
+/* Resolves a platform session token (the anbaric_session cookie) into the
+   user's identity. A deployed app cannot verify the token itself - it is signed
+   with a platform-only secret - so the resolution is a call to the platform.
+   Returns undefined when the token is missing, invalid or expired. */
+interface SessionResolver {
+
+    resolve(sessionToken : string) : Promise<ResolvedSession | undefined>;
+
+}
+
+export type { SessionResolver, ResolvedSession }

package/src/index.ts

@@ -14,6 +14,7 @@ export * from "./api/auditing/NoOpAuditor"
 export * from "./api/transitions/Transition"
 export * from "./api/actors/Actor"
 export * from "./api/actors/SystemActor"
+export * from "./api/sessions/SessionResolver"
 export * from "./api/documents/JsonStore"
 export * from "./api/secrets/SecretStore"
 export * from "./api/sql/SqlStore"