captify 0.1.15 → 0.1.18

package/dist/api/dynamodb-ontology/handlers.js

@@ -1,95 +0,0 @@
-import { getDynamoDbOntologyService } from "../../services/dynamodb-ontology/services";
-import { getUserAwsCredentials, handleApi, withAuth } from "../../utils/api";
-import { listTablesQuerySchema, describeTableParamsSchema, buildGraphQuerySchema } from "./schema";
-/**
- * GET /api/dynamodb-ontology/tables
- *
- * Lists DynamoDB tables in the configured region.
- *
- * @query limit - Maximum number of tables to return (default: 100, max: 100)
- * @query exclusiveStartTableName - Table name to start listing from (for pagination)
- * @query tableNamePrefix - Filter tables by name prefix
- *
- * @returns List of table names and optional pagination token
- *
- * @example
- * GET /api/dynamodb-ontology/tables
- * GET /api/dynamodb-ontology/tables?limit=10&tableNamePrefix=prod_
- */
-export const listTables = withAuth(async (req, { idToken, tenantId }) => handleApi(async () => {
-    var _a, _b, _c;
-    const url = new URL(req.url);
-    const query = listTablesQuerySchema.parse({
-        limit: (_a = url.searchParams.get("limit")) !== null && _a !== void 0 ? _a : undefined,
-        exclusiveStartTableName: (_b = url.searchParams.get("exclusiveStartTableName")) !== null && _b !== void 0 ? _b : undefined,
-        tableNamePrefix: (_c = url.searchParams.get("tableNamePrefix")) !== null && _c !== void 0 ? _c : undefined,
-    });
-    const userCredentials = await getUserAwsCredentials(idToken);
-    return getDynamoDbOntologyService().listTables(Object.assign(Object.assign({ tenantId }, query), { userCredentials }));
-}));
-/**
- * GET /api/dynamodb-ontology/tables/:tableName
- *
- * Gets detailed metadata for a specific DynamoDB table.
- *
- * @param tableName - Name of the table to describe
- *
- * @returns Table metadata including attributes, keys, and indexes
- *
- * @throws NotFoundError if table doesn't exist
- *
- * @example
- * GET /api/dynamodb-ontology/tables/Users
- */
-export const describeTable = withAuth(async (_req, { idToken, tenantId }, { params }) => handleApi(async () => {
-    const { tableName } = describeTableParamsSchema.parse(await params);
-    const userCredentials = await getUserAwsCredentials(idToken);
-    return getDynamoDbOntologyService().describeTable({
-        tenantId,
-        tableName,
-        userCredentials,
-    });
-}));
-/**
- * GET /api/dynamodb-ontology/graph
- *
- * Builds an ontology graph from DynamoDB tables for visualization.
- *
- * @query tableNames - Comma-separated list of specific table names to include
- * @query tableNamePrefix - Filter tables by name prefix
- * @query includeAttributes - Whether to include attribute nodes (default: true)
- * @query includeGlobalSecondaryIndexes - Whether to include GSI nodes (default: true)
- * @query includeLocalSecondaryIndexes - Whether to include LSI nodes (default: true)
- * @query inferRelationships - Whether to infer relationships between tables (default: true)
- *
- * @returns OntologyGraphData with nodes and links for visualization
- *
- * @example
- * GET /api/dynamodb-ontology/graph
- * GET /api/dynamodb-ontology/graph?tableNames=Users,Orders
- * GET /api/dynamodb-ontology/graph?tableNamePrefix=prod_&includeAttributes=false
- * GET /api/dynamodb-ontology/graph?inferRelationships=true
- */
-export const buildGraph = withAuth(async (req, { idToken, tenantId }) => handleApi(async () => {
-    var _a, _b, _c, _d, _e, _f;
-    const url = new URL(req.url);
-    const query = buildGraphQuerySchema.parse({
-        tableNames: (_a = url.searchParams.get("tableNames")) !== null && _a !== void 0 ? _a : undefined,
-        tableNamePrefix: (_b = url.searchParams.get("tableNamePrefix")) !== null && _b !== void 0 ? _b : undefined,
-        includeAttributes: (_c = url.searchParams.get("includeAttributes")) !== null && _c !== void 0 ? _c : undefined,
-        includeGlobalSecondaryIndexes: (_d = url.searchParams.get("includeGlobalSecondaryIndexes")) !== null && _d !== void 0 ? _d : undefined,
-        includeLocalSecondaryIndexes: (_e = url.searchParams.get("includeLocalSecondaryIndexes")) !== null && _e !== void 0 ? _e : undefined,
-        inferRelationships: (_f = url.searchParams.get("inferRelationships")) !== null && _f !== void 0 ? _f : undefined,
-    });
-    const userCredentials = await getUserAwsCredentials(idToken);
-    return getDynamoDbOntologyService().buildOntologyGraph(Object.assign(Object.assign({ tenantId }, query), { userCredentials }));
-}));
-/**
- * Semantic grouped handlers for DynamoDB Ontology API
- */
-export const dynamoDbOntologyHandlers = {
-    listTables,
-    describeTable,
-    buildGraph,
-};
-//# sourceMappingURL=handlers.js.map

package/dist/api/dynamodb-ontology/handlers.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"handlers.js","sourceRoot":"","sources":["../../../lib/api/dynamodb-ontology/handlers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,MAAM,2CAA2C,CAAC;AACvF,OAAO,EAAE,qBAAqB,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC7E,OAAO,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,qBAAqB,EAAE,MAAM,UAAU,CAAC;AAEnG;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,QAAQ,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,CACtE,SAAS,CAAC,KAAK,IAAI,EAAE;;IACnB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC7B,MAAM,KAAK,GAAG,qBAAqB,CAAC,KAAK,CAAC;QACxC,KAAK,EAAE,MAAA,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,mCAAI,SAAS;QACjD,uBAAuB,EAAE,MAAA,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,yBAAyB,CAAC,mCAAI,SAAS;QACrF,eAAe,EAAE,MAAA,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,iBAAiB,CAAC,mCAAI,SAAS;KACtE,CAAC,CAAC;IAEH,MAAM,eAAe,GAAG,MAAM,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAC7D,OAAO,0BAA0B,EAAE,CAAC,UAAU,+BAC5C,QAAQ,IACL,KAAK,KACR,eAAe,IACf,CAAC;AACL,CAAC,CAAC,CACH,CAAC;AAEF;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,QAAQ,CACnC,KAAK,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAA8C,EAAE,EAAE,CAC5F,SAAS,CAAC,KAAK,IAAI,EAAE;IACnB,MAAM,EAAE,SAAS,EAAE,GAAG,yBAAyB,CAAC,KAAK,CAAC,MAAM,MAAM,CAAC,CAAC;IAEpE,MAAM,eAAe,GAAG,MAAM,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAC7D,OAAO,0BAA0B,EAAE,CAAC,aAAa,CAAC;QAChD,QAAQ;QACR,SAAS;QACT,eAAe;KAChB,CAAC,CAAC;AACL,CAAC,CAAC,CACL,CAAC;AAEF;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,QAAQ,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,CACtE,SAAS,CAAC,KAAK,IAAI,EAAE;;IACnB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC7B,MAAM,KAAK,GAAG,qBAAqB,CAAC,KAAK,CAAC;QACxC,UAAU,EAAE,MAAA,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,mCAAI,SAAS;QAC3D,eAAe,EAAE,MAAA,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,iBAAiB,CAAC,mCAAI,SAAS;QACrE,iBAAiB,EAAE,MAAA,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,mBAAmB,CAAC,mCAAI,SAAS;QACzE,6BAA6B,EAC3B,MAAA,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,+BAA+B,CAAC,mCAAI,SAAS;QACpE,4BAA4B,EAC1B,MAAA,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,8BAA8B,CAAC,mCAAI,SAAS;QACnE,kBAAkB,EAAE,MAAA,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,oBAAoB,CAAC,mCAAI,SAAS;KAC5E,CAAC,CAAC;IAEH,MAAM,eAAe,GAAG,MAAM,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAC7D,OAAO,0BAA0B,EAAE,CAAC,kBAAkB,+BACpD,QAAQ,IACL,KAAK,KACR,eAAe,IACf,CAAC;AACL,CAAC,CAAC,CACH,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,UAAU;IACV,aAAa;IACb,UAAU;CACX,CAAC"}

package/dist/api/dynamodb-ontology/index.d.ts

@@ -1,4 +0,0 @@
-export { dynamoDbOntologyHandlers } from "./handlers";
-export * from "./client";
-export * from "./schema";
-//# sourceMappingURL=index.d.ts.map

package/dist/api/dynamodb-ontology/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../lib/api/dynamodb-ontology/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAC;AACtD,cAAc,UAAU,CAAC;AACzB,cAAc,UAAU,CAAC"}

package/dist/api/dynamodb-ontology/index.js

@@ -1,4 +0,0 @@
-export { dynamoDbOntologyHandlers } from "./handlers";
-export * from "./client";
-export * from "./schema";
-//# sourceMappingURL=index.js.map

package/dist/api/dynamodb-ontology/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../lib/api/dynamodb-ontology/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAC;AACtD,cAAc,UAAU,CAAC;AACzB,cAAc,UAAU,CAAC"}

package/dist/api/dynamodb-ontology/schema.d.ts

@@ -1,32 +0,0 @@
-import { z } from "zod";
-/**
- * Schema for GET /api/dynamodb-ontology/tables query parameters
- *
- * API-level validation is minimal - detailed validation happens in the service layer
- */
-export declare const listTablesQuerySchema: z.ZodObject<{
-    limit: z.ZodPipe<z.ZodOptional<z.ZodString>, z.ZodTransform<number | undefined, string | undefined>>;
-    exclusiveStartTableName: z.ZodOptional<z.ZodString>;
-    tableNamePrefix: z.ZodOptional<z.ZodString>;
-}, z.core.$strip>;
-/**
- * Schema for GET /api/dynamodb-ontology/tables/:tableName path params
- */
-export declare const describeTableParamsSchema: z.ZodObject<{
-    tableName: z.ZodString;
-}, z.core.$strip>;
-/**
- * Schema for GET /api/dynamodb-ontology/graph query parameters
- */
-export declare const buildGraphQuerySchema: z.ZodObject<{
-    tableNames: z.ZodPipe<z.ZodOptional<z.ZodString>, z.ZodTransform<string[] | undefined, string | undefined>>;
-    tableNamePrefix: z.ZodOptional<z.ZodString>;
-    includeAttributes: z.ZodPipe<z.ZodOptional<z.ZodString>, z.ZodTransform<boolean | undefined, string | undefined>>;
-    includeGlobalSecondaryIndexes: z.ZodPipe<z.ZodOptional<z.ZodString>, z.ZodTransform<boolean | undefined, string | undefined>>;
-    includeLocalSecondaryIndexes: z.ZodPipe<z.ZodOptional<z.ZodString>, z.ZodTransform<boolean | undefined, string | undefined>>;
-    inferRelationships: z.ZodPipe<z.ZodOptional<z.ZodString>, z.ZodTransform<boolean | undefined, string | undefined>>;
-}, z.core.$strip>;
-export type ListTablesQuery = z.infer<typeof listTablesQuerySchema>;
-export type DescribeTableParams = z.infer<typeof describeTableParamsSchema>;
-export type BuildGraphQuery = z.infer<typeof buildGraphQuerySchema>;
-//# sourceMappingURL=schema.d.ts.map

package/dist/api/dynamodb-ontology/schema.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../lib/api/dynamodb-ontology/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;GAIG;AACH,eAAO,MAAM,qBAAqB;;;;iBAOhC,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,yBAAyB;;iBAEpC,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,qBAAqB;;;;;;;iBAuBhC,CAAC;AAMH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AACpE,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAC5E,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC"}

package/dist/api/dynamodb-ontology/schema.js

@@ -1,48 +0,0 @@
-import { z } from "zod";
-/**
- * Schema for GET /api/dynamodb-ontology/tables query parameters
- *
- * API-level validation is minimal - detailed validation happens in the service layer
- */
-export const listTablesQuerySchema = z.object({
-    limit: z
-        .string()
-        .optional()
-        .transform((val) => (val ? parseInt(val, 10) : undefined)),
-    exclusiveStartTableName: z.string().optional(),
-    tableNamePrefix: z.string().optional(),
-});
-/**
- * Schema for GET /api/dynamodb-ontology/tables/:tableName path params
- */
-export const describeTableParamsSchema = z.object({
-    tableName: z.string().min(1, "Table name is required"),
-});
-/**
- * Schema for GET /api/dynamodb-ontology/graph query parameters
- */
-export const buildGraphQuerySchema = z.object({
-    tableNames: z
-        .string()
-        .optional()
-        .transform((val) => (val ? val.split(",").filter(Boolean) : undefined)),
-    tableNamePrefix: z.string().optional(),
-    includeAttributes: z
-        .string()
-        .optional()
-        .transform((val) => (val === undefined ? undefined : val !== "false")),
-    includeGlobalSecondaryIndexes: z
-        .string()
-        .optional()
-        .transform((val) => (val === undefined ? undefined : val !== "false")),
-    includeLocalSecondaryIndexes: z
-        .string()
-        .optional()
-        .transform((val) => (val === undefined ? undefined : val !== "false")),
-    /** Whether to infer relationships between tables based on attribute naming patterns */
-    inferRelationships: z
-        .string()
-        .optional()
-        .transform((val) => (val === undefined ? undefined : val !== "false")),
-});
-//# sourceMappingURL=schema.js.map

package/dist/api/dynamodb-ontology/schema.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../../lib/api/dynamodb-ontology/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;GAIG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,KAAK,EAAE,CAAC;SACL,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,SAAS,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC5D,uBAAuB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9C,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACvC,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,wBAAwB,CAAC;CACvD,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,UAAU,EAAE,CAAC;SACV,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,SAAS,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACzE,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACtC,iBAAiB,EAAE,CAAC;SACjB,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,SAAS,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,KAAK,OAAO,CAAC,CAAC;IACxE,6BAA6B,EAAE,CAAC;SAC7B,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,SAAS,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,KAAK,OAAO,CAAC,CAAC;IACxE,4BAA4B,EAAE,CAAC;SAC5B,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,SAAS,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,KAAK,OAAO,CAAC,CAAC;IACxE,uFAAuF;IACvF,kBAAkB,EAAE,CAAC;SAClB,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,SAAS,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,KAAK,OAAO,CAAC,CAAC;CACzE,CAAC,CAAC"}

package/dist/api/file-download/handlers.d.ts

@@ -1,44 +0,0 @@
-import type { FileDownloadHandlers, FileDownloadHandlersConfig } from "./types";
-/**
- * Factory function to create file download API route handlers with custom configuration
- *
- * This factory allows consuming applications to quickly set up secure file download
- * API routes by providing their own authentication, S3 configuration, and audit logging.
- *
- * @param config - Configuration object
- * @returns Object containing generateUrl and logDownload API handlers
- *
- * @example
- * ```typescript
- * // In your consuming app's API route file (app/api/file-download/generate-url/route.ts)
- * import { createFileDownloadHandlers } from '@pitamber/captify-core/api/file-download';
- * import { auth } from '../../auth';
- * import { db } from '../../db';
- *
- * const { generateUrl } = createFileDownloadHandlers({
- *   authenticate: async () => {
- *     const session = await auth();
- *     if (!session?.user) {
- *       throw new Error('Not authenticated');
- *     }
- *     return {
- *       userId: session.user.id,
- *       tenantId: session.user.tenantId,
- *       email: session.user.email,
- *     };
- *   },
- *   s3Config: {
- *     region: process.env.AWS_REGION!,
- *     bucketName: process.env.S3_BUCKET_NAME!,
- *   },
- *   pathTemplate: 'users/{userId}/',
- *   auditLogger: async (event) => {
- *     await db.auditLogs.create({ data: event });
- *   },
- * });
- *
- * export { generateUrl as POST };
- * ```
- */
-export declare function createFileDownloadHandlers(config: FileDownloadHandlersConfig): FileDownloadHandlers;
-//# sourceMappingURL=handlers.d.ts.map

package/dist/api/file-download/handlers.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"handlers.d.ts","sourceRoot":"","sources":["../../../lib/api/file-download/handlers.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAEV,oBAAoB,EACpB,0BAA0B,EAK3B,MAAM,SAAS,CAAC;AAEjB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,0BAA0B,GACjC,oBAAoB,CA8PtB"}

package/dist/api/file-download/handlers.js

@@ -1,227 +0,0 @@
-import { S3Service } from "../../services/s3";
-import { apiLogger, extractFilename, handleApi, sanitizeFilename, validateAndNormalizeKey, validateUserIdentifiers, } from "../../utils";
-/**
- * Factory function to create file download API route handlers with custom configuration
- *
- * This factory allows consuming applications to quickly set up secure file download
- * API routes by providing their own authentication, S3 configuration, and audit logging.
- *
- * @param config - Configuration object
- * @returns Object containing generateUrl and logDownload API handlers
- *
- * @example
- * ```typescript
- * // In your consuming app's API route file (app/api/file-download/generate-url/route.ts)
- * import { createFileDownloadHandlers } from '@pitamber/captify-core/api/file-download';
- * import { auth } from '../../auth';
- * import { db } from '../../db';
- *
- * const { generateUrl } = createFileDownloadHandlers({
- *   authenticate: async () => {
- *     const session = await auth();
- *     if (!session?.user) {
- *       throw new Error('Not authenticated');
- *     }
- *     return {
- *       userId: session.user.id,
- *       tenantId: session.user.tenantId,
- *       email: session.user.email,
- *     };
- *   },
- *   s3Config: {
- *     region: process.env.AWS_REGION!,
- *     bucketName: process.env.S3_BUCKET_NAME!,
- *   },
- *   pathTemplate: 'users/{userId}/',
- *   auditLogger: async (event) => {
- *     await db.auditLogs.create({ data: event });
- *   },
- * });
- *
- * export { generateUrl as POST };
- * ```
- */
-export function createFileDownloadHandlers(config) {
-    const { authenticate, s3Config, pathTemplate = "users/{userId}/", defaultExpiresIn = 300, // 5 minutes default
-    maxExpiresIn = 3600, // 1 hour default max
-    auditLogger, errorHandler, logger = apiLogger, } = config;
-    /**
-     * Helper to create audit events with common fields
-     */
-    function createAuditEvent(action, userId, tenantId, email, additionalFields = {}) {
-        return Object.assign({ action,
-            userId,
-            tenantId,
-            email, timestamp: new Date().toISOString() }, additionalFields);
-    }
-    /**
-     * POST /api/file-download/generate-url
-     *
-     * Generate a time-limited pre-signed URL for downloading a file
-     *
-     * Features:
-     * - Validates user authentication
-     * - Enforces tenant isolation based on path template
-     * - Generates pre-signed S3 URL with Content-Disposition header
-     * - Logs audit events
-     *
-     * @body fileId - Unique identifier for the file (used for audit logging)
-     * @body key - S3 object key (path to the file in S3)
-     * @body expiresIn - Optional URL expiry time in seconds (default from config)
-     * @returns Pre-signed URL and expiration timestamp
-     * @throws Error if user is not authenticated or doesn't have permission to access the file
-     */
-    async function generateUrl(request) {
-        return handleApi(async () => {
-            const body = await request.json();
-            const { fileId, key, expiresIn = defaultExpiresIn } = body;
-            if (!fileId || !key) {
-                throw new Error("Missing required fields: fileId and key are required");
-            }
-            try {
-                // Authenticate user
-                const user = await authenticate();
-                // Validate user identifiers
-                validateUserIdentifiers(user.userId, user.tenantId);
-                // Cap expiresIn to maxExpiresIn for security
-                const cappedExpiresIn = Math.min(expiresIn, maxExpiresIn);
-                // Build expected path from template
-                const expectedPath = pathTemplate
-                    .replace("{tenantId}", user.tenantId)
-                    .replace("{userId}", user.userId);
-                // Validate and normalize the S3 key
-                let normalizedKey;
-                try {
-                    normalizedKey = validateAndNormalizeKey(key, expectedPath);
-                }
-                catch (error) {
-                    const reason = error instanceof Error && error.message.includes("path traversal")
-                        ? "path_traversal_attempt"
-                        : error instanceof Error && error.message.includes("malformed encoding")
-                            ? "malformed_encoding"
-                            : "cross_tenant_access";
-                    const event = createAuditEvent("download_denied", user.userId, user.tenantId, user.email, {
-                        reason,
-                        attemptedKey: key,
-                        expectedPath,
-                    });
-                    if (auditLogger) {
-                        await auditLogger(event).catch((err) => {
-                            logger.error("[message]: audit logging failed", { error: err });
-                        });
-                    }
-                    throw error;
-                }
-                // Create S3 service instance
-                const s3Service = S3Service.create(s3Config);
-                // Extract and sanitize filename for Content-Disposition header
-                const rawFilename = extractFilename(normalizedKey);
-                const filename = sanitizeFilename(rawFilename);
-                // Generate pre-signed URL with proper headers
-                const url = await s3Service.generateSignedUrl({
-                    key: normalizedKey,
-                    operation: "getObject",
-                    expiresIn: cappedExpiresIn,
-                    responseContentDisposition: `attachment; filename="${filename}"`,
-                });
-                const expiresAt = new Date(Date.now() + cappedExpiresIn * 1000).toISOString();
-                // Audit log for successful URL generation
-                if (auditLogger) {
-                    const event = createAuditEvent("download_url_generated", user.userId, user.tenantId, user.email, {
-                        fileId,
-                        key: normalizedKey,
-                        expiresIn: cappedExpiresIn,
-                        expiresAt,
-                    });
-                    await auditLogger(event).catch((err) => {
-                        // Don't fail the request if audit logging fails
-                        logger.error("[message]: audit logging failed", { error: err });
-                    });
-                }
-                return {
-                    success: true,
-                    url,
-                    expiresAt,
-                };
-            }
-            catch (error) {
-                // Handle and log errors
-                const errorMessage = error instanceof Error ? error.message : "Unknown error";
-                const errorContext = {
-                    action: "download_url_generation",
-                    fileId,
-                    key,
-                    timestamp: new Date().toISOString(),
-                };
-                if (errorHandler) {
-                    await errorHandler(error instanceof Error ? error : new Error(errorMessage), errorContext).catch((err) => {
-                        logger.error("[message]: error handler failed", { error: err });
-                    });
-                }
-                // Re-throw the error for the API handler to handle
-                throw error;
-            }
-        });
-    }
-    /**
-     * POST /api/file-download/log
-     *
-     * Log when a user successfully completes a download
-     *
-     * This should be called after the file download completes on the client side.
-     * It's used for audit trail and analytics purposes.
-     *
-     * @body fileId - Unique identifier for the file
-     * @body key - S3 object key
-     * @returns Success status
-     */
-    async function logDownload(request) {
-        return handleApi(async () => {
-            const body = await request.json();
-            const { fileId, key } = body;
-            if (!fileId || !key) {
-                throw new Error("Missing required fields: fileId and key are required");
-            }
-            try {
-                // Authenticate user
-                const user = await authenticate();
-                // Audit log for completed download
-                if (auditLogger) {
-                    const event = createAuditEvent("download_completed", user.userId, user.tenantId, user.email, {
-                        fileId,
-                        key,
-                    });
-                    await auditLogger(event).catch((err) => {
-                        // Don't fail the request if audit logging fails
-                        logger.error("[message]: audit logging failed", { error: err });
-                    });
-                }
-                return { success: true };
-            }
-            catch (error) {
-                const errorMessage = error instanceof Error ? error.message : "Unknown error";
-                const errorContext = {
-                    action: "download_logging",
-                    fileId,
-                    key,
-                    timestamp: new Date().toISOString(),
-                };
-                if (errorHandler) {
-                    await errorHandler(error instanceof Error ? error : new Error(errorMessage), errorContext).catch((err) => {
-                        logger.error("[message]: error handler failed", { error: err });
-                    });
-                }
-                // Don't throw error for logging failures - return error status instead
-                return {
-                    success: false,
-                    error: errorMessage,
-                };
-            }
-        });
-    }
-    return {
-        generateUrl,
-        logDownload,
-    };
-}
-//# sourceMappingURL=handlers.js.map

package/dist/api/file-download/handlers.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"handlers.js","sourceRoot":"","sources":["../../../lib/api/file-download/handlers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EACL,SAAS,EACT,eAAe,EACf,SAAS,EACT,gBAAgB,EAChB,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,aAAa,CAAC;AAarB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,MAAM,UAAU,0BAA0B,CACxC,MAAkC;IAElC,MAAM,EACJ,YAAY,EACZ,QAAQ,EACR,YAAY,GAAG,iBAAiB,EAChC,gBAAgB,GAAG,GAAG,EAAE,oBAAoB;IAC5C,YAAY,GAAG,IAAI,EAAE,qBAAqB;IAC1C,WAAW,EACX,YAAY,EACZ,MAAM,GAAG,SAAS,GACnB,GAAG,MAAM,CAAC;IAEX;;OAEG;IACH,SAAS,gBAAgB,CACvB,MAAc,EACd,MAAc,EACd,QAAgB,EAChB,KAAyB,EACzB,mBAA4C,EAAE;QAE9C,uBACE,MAAM;YACN,MAAM;YACN,QAAQ;YACR,KAAK,EACL,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,IAChC,gBAAgB,EACnB;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACH,KAAK,UAAU,WAAW,CACxB,OAAoB;QAEpB,OAAO,SAAS,CAAC,KAAK,IAAI,EAAE;YAC1B,MAAM,IAAI,GAA+B,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;YAC9D,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,GAAG,gBAAgB,EAAE,GAAG,IAAI,CAAC;YAE3D,IAAI,CAAC,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC;gBACpB,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;YAC1E,CAAC;YAED,IAAI,CAAC;gBACH,oBAAoB;gBACpB,MAAM,IAAI,GAAG,MAAM,YAAY,EAAE,CAAC;gBAElC,4BAA4B;gBAC5B,uBAAuB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAEpD,6CAA6C;gBAC7C,MAAM,eAAe,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;gBAE1D,oCAAoC;gBACpC,MAAM,YAAY,GAAG,YAAY;qBAC9B,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC;qBACpC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;gBAEpC,oCAAoC;gBACpC,IAAI,aAAqB,CAAC;gBAC1B,IAAI,CAAC;oBACH,aAAa,GAAG,uBAAuB,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;gBAC7D,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,MAAM,GACV,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC;wBAChE,CAAC,CAAC,wBAAwB;wBAC1B,CAAC,CAAC,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAC;4BACtE,CAAC,CAAC,oBAAoB;4BACtB,CAAC,CAAC,qBAAqB,CAAC;oBAE9B,MAAM,KAAK,GAAG,gBAAgB,CAC5B,iBAAiB,EACjB,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,KAAK,EACV;wBACE,MAAM;wBACN,YAAY,EAAE,GAAG;wBACjB,YAAY;qBACb,CACF,CAAC;oBAEF,IAAI,WAAW,EAAE,CAAC;wBAChB,MAAM,WAAW,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;4BACrC,MAAM,CAAC,KAAK,CAAC,iCAAiC,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;wBAClE,CAAC,CAAC,CAAC;oBACL,CAAC;oBAED,MAAM,KAAK,CAAC;gBACd,CAAC;gBAED,6BAA6B;gBAC7B,MAAM,SAAS,GAAG,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBAE7C,+DAA+D;gBAC/D,MAAM,WAAW,GAAG,eAAe,CAAC,aAAa,CAAC,CAAC;gBACnD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,WAAW,CAAC,CAAC;gBAE/C,8CAA8C;gBAC9C,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,iBAAiB,CAAC;oBAC5C,GAAG,EAAE,aAAa;oBAClB,SAAS,EAAE,WAAW;oBACtB,SAAS,EAAE,eAAe;oBAC1B,0BAA0B,EAAE,yBAAyB,QAAQ,GAAG;iBACjE,CAAC,CAAC;gBAEH,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,eAAe,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;gBAE9E,0CAA0C;gBAC1C,IAAI,WAAW,EAAE,CAAC;oBAChB,MAAM,KAAK,GAAG,gBAAgB,CAC5B,wBAAwB,EACxB,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,KAAK,EACV;wBACE,MAAM;wBACN,GAAG,EAAE,aAAa;wBAClB,SAAS,EAAE,eAAe;wBAC1B,SAAS;qBACV,CACF,CAAC;oBAEF,MAAM,WAAW,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;wBACrC,gDAAgD;wBAChD,MAAM,CAAC,KAAK,CAAC,iCAAiC,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;oBAClE,CAAC,CAAC,CAAC;gBACL,CAAC;gBAED,OAAO;oBACL,OAAO,EAAE,IAAI;oBACb,GAAG;oBACH,SAAS;iBACV,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,wBAAwB;gBACxB,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;gBAC9E,MAAM,YAAY,GAAG;oBACnB,MAAM,EAAE,yBAAyB;oBACjC,MAAM;oBACN,GAAG;oBACH,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;iBACpC,CAAC;gBAEF,IAAI,YAAY,EAAE,CAAC;oBACjB,MAAM,YAAY,CAChB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,YAAY,CAAC,EACxD,YAAY,CACb,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;wBACd,MAAM,CAAC,KAAK,CAAC,iCAAiC,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;oBAClE,CAAC,CAAC,CAAC;gBACL,CAAC;gBAED,mDAAmD;gBACnD,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,UAAU,WAAW,CACxB,OAAoB;QAEpB,OAAO,SAAS,CAAC,KAAK,IAAI,EAAE;YAC1B,MAAM,IAAI,GAAuB,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;YACtD,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;YAE7B,IAAI,CAAC,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC;gBACpB,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;YAC1E,CAAC;YAED,IAAI,CAAC;gBACH,oBAAoB;gBACpB,MAAM,IAAI,GAAG,MAAM,YAAY,EAAE,CAAC;gBAElC,mCAAmC;gBACnC,IAAI,WAAW,EAAE,CAAC;oBAChB,MAAM,KAAK,GAAG,gBAAgB,CAC5B,oBAAoB,EACpB,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,KAAK,EACV;wBACE,MAAM;wBACN,GAAG;qBACJ,CACF,CAAC;oBAEF,MAAM,WAAW,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;wBACrC,gDAAgD;wBAChD,MAAM,CAAC,KAAK,CAAC,iCAAiC,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;oBAClE,CAAC,CAAC,CAAC;gBACL,CAAC;gBAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAC3B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;gBAC9E,MAAM,YAAY,GAAG;oBACnB,MAAM,EAAE,kBAAkB;oBAC1B,MAAM;oBACN,GAAG;oBACH,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;iBACpC,CAAC;gBAEF,IAAI,YAAY,EAAE,CAAC;oBACjB,MAAM,YAAY,CAChB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,YAAY,CAAC,EACxD,YAAY,CACb,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;wBACd,MAAM,CAAC,KAAK,CAAC,iCAAiC,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;oBAClE,CAAC,CAAC,CAAC;gBACL,CAAC;gBAED,uEAAuE;gBACvE,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,YAAY;iBACpB,CAAC;YACJ,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,WAAW;QACX,WAAW;KACZ,CAAC;AACJ,CAAC"}

package/dist/api/file-download/index.d.ts

@@ -1,96 +0,0 @@
-/**
- * File Download API Routes
- *
- * This module provides API route handlers for secure file downloads from S3.
- *
- * ## Usage
- *
- * ### Quick Setup (Factory Approach)
- * ```typescript
- * // app/api/file-download/generate-url/route.ts
- * import { createFileDownloadHandlers } from '@pitamber/captify-core/api/file-download';
- * import { auth } from '../../auth';
- *
- * const { generateUrl } = createFileDownloadHandlers({
- *   authenticate: async () => {
- *     const session = await auth();
- *     if (!session?.user) {
- *       throw new Error('Not authenticated');
- *     }
- *     return {
- *       userId: session.user.id,
- *       tenantId: session.user.tenantId,
- *       email: session.user.email,
- *     };
- *   },
- *   s3Config: {
- *     region: process.env.AWS_REGION!,
- *     bucketName: process.env.S3_BUCKET_NAME!,
- *   },
- *   pathTemplate: 'users/{userId}/',
- * });
- *
- * export { generateUrl as POST };
- * ```
- *
- * ```typescript
- * // app/api/file-download/log/route.ts
- * import { createFileDownloadHandlers } from '@pitamber/captify-core/api/file-download';
- * import { auth } from '../../auth';
- *
- * const { logDownload } = createFileDownloadHandlers({
- *   authenticate: async () => {
- *     const session = await auth();
- *     if (!session?.user) {
- *       throw new Error('Not authenticated');
- *     }
- *     return {
- *       userId: session.user.id,
- *       tenantId: session.user.tenantId,
- *     };
- *   },
- *   s3Config: {
- *     region: process.env.AWS_REGION!,
- *     bucketName: process.env.S3_BUCKET_NAME!,
- *   },
- * });
- *
- * export { logDownload as POST };
- * ```
- *
- * ## Client-Side Usage
- *
- * ```typescript
- * import { FileDownload } from '@pitamber/captify-core/components/file-download';
- *
- * // Create API client functions
- * const generateDownloadUrl = async (fileId: string, key: string, expiresIn?: number) => {
- *   const response = await fetch('/api/file-download/generate-url', {
- *     method: 'POST',
- *     headers: { 'Content-Type': 'application/json' },
- *     body: JSON.stringify({ fileId, key, expiresIn }),
- *   });
- *   return response.json();
- * };
- *
- * const logDownload = async (fileId: string, key: string) => {
- *   const response = await fetch('/api/file-download/log', {
- *     method: 'POST',
- *     headers: { 'Content-Type': 'application/json' },
- *     body: JSON.stringify({ fileId, key }),
- *   });
- *   return response.json();
- * };
- *
- * // Use in component
- * <FileDownload
- *   file={file}
- *   canDownload={true}
- *   generateDownloadUrl={generateDownloadUrl}
- *   logDownload={logDownload}
- * />
- * ```
- */
-export { createFileDownloadHandlers } from "./handlers";
-export type { AuditEvent, AuthenticationResult, FileDownloadHandlers, FileDownloadHandlersConfig, GenerateDownloadUrlRequest, GenerateDownloadUrlResponse, LogDownloadRequest, LogDownloadResponse, } from "./types";
-//# sourceMappingURL=index.d.ts.map

package/dist/api/file-download/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../lib/api/file-download/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4FG;AAGH,OAAO,EAAE,0BAA0B,EAAE,MAAM,YAAY,CAAC;AAGxD,YAAY,EACV,UAAU,EACV,oBAAoB,EACpB,oBAAoB,EACpB,0BAA0B,EAC1B,0BAA0B,EAC1B,2BAA2B,EAC3B,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,SAAS,CAAC"}