sipgate-mcp 0.1.0 → 0.2.0

package/CHANGELOG.md

@@ -0,0 +1,17 @@
+# Changelog
+
+## 0.2.0 - 2026-08-30
+
+- Default to MCP-level user scope resolved from sipgate's authenticated user.
+- Restrict user-scoped users, numbers, devices, phonelines, settings, and call
+  history to the authenticated user's resources.
+- Validate user-scoped write targets and outbound caller identities before
+  sending changes or chargeable actions to sipgate.
+- Avoid account-wide number and active-call snapshots in user-scoped actions.
+- Add explicit account scope that requires a verified sipgate administrator.
+- Advertise active scope and read-only behavior through MCP server instructions.
+
+## 0.1.0 - 2026-08-30
+
+- Initial local stdio MCP server with focused sipgate read and write tools.
+- Personal Access Token authentication and optional read-only mode.

package/README.md

@@ -2,6 +2,10 @@
 
 `sipgate-mcp` is an open-source, self-hosted Model Context Protocol server for inspecting and configuring a sipgate account. It exposes the sipgate REST API v2 as focused tools for agents such as Claude Code, Claude Desktop, and Codex.
 
+Version 0.2 defaults to user-scoped access: tools are constrained to the
+authenticated sipgate user's resources. Account-wide access is an explicit
+administrator-only mode.
+
 The server uses stdio only. It does not start an HTTP server or route credentials
 through a third-party service. It sends authentication only from the local MCP
 process directly to `https://api.sipgate.com/v2`.
@@ -12,8 +16,7 @@ process directly to `https://api.sipgate.com/v2`.
 - A sipgate account with a Personal Access Token (PAT)
 - An MCP client with stdio support
 
-After the first npm release, install the command globally with any of the
-supported package managers:
+Install the command globally with any of the supported package managers:
 
 ```bash
 npm install --global sipgate-mcp
@@ -26,13 +29,12 @@ Then start it with:
 ```bash
 export SIPGATE_TOKEN_ID="your-token-id"
 export SIPGATE_TOKEN="your-token"
+export SIPGATE_MCP_SCOPE="user"
 sipgate-mcp
 ```
 
 For clients that manage MCP commands on demand, `npx -y sipgate-mcp` remains
-supported without a global installation. The package name was available when
-checked on 2026-08-30; this repository is configured for `sipgate-mcp`, but the
-initial npm publish still needs to be completed.
+supported without a global installation.
 
 ## Create a Personal Access Token
 
@@ -45,30 +47,58 @@ sipgate PAT authentication uses HTTP Basic Auth with `token-id:token` as the cre
 
 Do not put either value in this repository, an MCP config committed to source control, command output, or an issue report.
 
+## MCP access scopes
+
+`SIPGATE_MCP_SCOPE` controls the resource boundary enforced by the MCP in
+addition to sipgate's own user role and PAT scopes:
+
+| Value | Behavior |
+| --- | --- |
+| `user` (default) | Resolves the authenticated user through `/authorization/userinfo`; returns only that user and their assigned numbers; forces user-specific device, routing, and settings reads; constrains call history to owned connection IDs; and validates every write target against owned numbers, phonelines, or devices. |
+| `account` | Enables account-wide reads and writes. Startup fails unless `/users/{authenticatedUserId}` reports `admin: true`. Requires `users:read` for the administrator check. |
+
+Token scopes are permission ceilings, not role elevation. For example,
+`numbers:write` does not turn a regular sipgate user into an administrator.
+The effective permission is the intersection of the sipgate user role, PAT
+scopes, MCP access scope, and read-only mode.
+
+Use account scope only when account-wide administration is intended:
+
+```bash
+export SIPGATE_MCP_SCOPE="account"
+npx -y sipgate-mcp
+```
+
 ## Tools and PAT scopes
 
-The table lists the non-`all` scopes named by sipgate's live Swagger document, plus scopes required by this server's pre/post state reads. sipgate also exposes broader parent scopes such as `sessions:write`; select the listed specific and parent scopes offered by the PAT UI when in doubt.
+Every mode identifies the authenticated user with `GET /authorization/userinfo`.
+The table lists the non-`all` scopes named by sipgate's live Swagger document,
+including ownership checks performed in user scope and pre/post state reads.
+sipgate also exposes broader parent scopes such as `sessions:write`; select the
+listed specific and parent scopes offered by the PAT UI when in doubt.
 
 | Tool | Access | sipgate API calls | PAT scopes |
 | --- | --- | --- | --- |
-| `account_info` | Read | `GET /account`, `GET /authorization/userinfo` | `account:read` (`userinfo` has no scope declaration in Swagger) |
-| `list_users` | Read | `GET /users` | `users:read` |
-| `list_numbers` | Read | `GET /numbers` | `numbers:read` |
-| `list_devices` | Read | `GET /users`, `GET /{userId}/devices` | `devices:read`; `users:read` when `user_id` is omitted |
-| `get_routing` | Read | `GET /numbers`, `GET /users`, `GET /{userId}/phonelines`, `GET /{userId}/phonelines/{phonelineId}/numbers`, `GET /{userId}/phonelines/{phonelineId}/forwardings` | `numbers:read`, `phonelines:read`, `phonelines:numbers:read`, `phonelines:forwardings:read`; `users:read` when `user_id` is omitted |
-| `call_history` | Read | `GET /history` | `history:read` |
+| `account_info` | Read | User: cached `/authorization/userinfo`; account: plus `GET /account` | Account: `account:read` (`userinfo` has no scope declaration in Swagger) |
+| `list_users` | Read | User: `GET /users/{self}`; account: `GET /users` | `users:read` |
+| `list_numbers` | Read | User: `GET /{self}/phonelines` and each phoneline's `/numbers`; account: `GET /numbers` | User: `phonelines:read`, `phonelines:numbers:read`; account: `numbers:read` |
+| `list_devices` | Read | User: `GET /{self}/devices`; account: `GET /users`, `GET /{userId}/devices` | `devices:read`; account also needs `users:read` when `user_id` is omitted |
+| `get_routing` | Read | User: own phonelines, numbers, and forwardings; account: also `GET /numbers` and `GET /users` | `phonelines:read`, `phonelines:numbers:read`, `phonelines:forwardings:read`; account also needs `numbers:read` and, when `user_id` is omitted, `users:read` |
+| `call_history` | Read | User: ownership reads for own phonelines/devices, then filtered `GET /history`; account: `GET /history` | `history:read`; user also needs `phonelines:read`, `devices:read` |
 | `get_settings` | Read | `GET /users[/userId]`, `GET /{userId}/devices`, `GET /{userId}/phonelines[/phonelineId]` | `users:read`, `devices:read`, `phonelines:read` |
-| `set_number_routing` | Write | pre/post `GET /numbers`, `PUT /numbers/{numberId}` | `numbers:read`, `numbers:write` |
-| `set_forwarding` | Write | pre/post `GET /{userId}/phonelines/{phonelineId}/forwardings`, `PUT` to the same path | `phonelines:read`, `phonelines:write`, `phonelines:forwardings:read`, `phonelines:forwardings:write` |
-| `set_dnd` | Write | pre/post `GET /devices/{deviceId}`, `PUT /devices/{deviceId}` | `devices:read`, `devices:write` |
+| `set_number_routing` | Write | User: pre/post reads through own phonelines; account: pre/post `GET /numbers`; all modes: `PUT /numbers/{numberId}` | `numbers:write`; user also needs `phonelines:read`, `phonelines:numbers:read`; account needs `numbers:read` |
+| `set_forwarding` | Write | User: phoneline ownership read; then pre/post forwarding reads and `PUT` | `phonelines:read`, `phonelines:write`, `phonelines:forwardings:read`, `phonelines:forwardings:write` |
+| `set_dnd` | Write | User: device ownership read; then pre/post `GET /devices/{deviceId}` and `PUT` | `devices:read`, `devices:write` |
 | `send_sms` | Write/action | `GET /{userId}/sms`, pre/post `GET /history`, `POST /sessions/sms` | `sms:read`, `history:read`, `sessions:write`, `sessions:sms:write` |
-| `initiate_call` | Write/action | pre/post `GET /calls`, `POST /sessions/calls` | `rtcm:read`, `sessions:write`, `sessions:calls:write` |
+| `initiate_call` | Write/action | User: device/number ownership reads, then `POST /sessions/calls`; account: pre/post `GET /calls` plus `POST` | `sessions:write`, `sessions:calls:write`; user also needs `devices:read`, `phonelines:read`, `phonelines:numbers:read`; account needs `rtcm:read` |
 
 Every write tool reads current state first and returns a JSON object with `before` and `after`. SMS history can update asynchronously, and `/calls` only contains established calls, so those action snapshots also include an acceptance/session marker.
 
 ### Tool notes
 
 - `list_devices` resolves devices through users because the documented account-wide route is `GET /{userId}/devices`; the live v2 Swagger document does not define `GET /devices`.
+- User scope resolves assigned numbers through the authenticated user's phonelines and never calls account-wide `GET /users` or `GET /numbers` for read tools.
+- User-scoped number-routing snapshots are also resolved through owned phonelines, and user-scoped Click2Dial deliberately omits account-wide `/calls` snapshots.
 - Number routing uses sipgate's documented `endpointId`. Obtain existing IDs from the read tools; a phoneline ID such as `p0` is the documented example.
 - `set_forwarding` replaces the complete phoneline forwarding list. Pass `forwardings: []` to remove all forwardings. A `timeout` of `0` represents immediate forwarding.
 - `send_sms` refuses to post unless `GET /{userId}/sms` returns the requested (or first available) SMS extension.
@@ -80,6 +110,7 @@ Set `SIPGATE_MCP_READONLY=1` to register only the seven read tools. Write tools
 
 ```bash
 export SIPGATE_MCP_READONLY=1
+export SIPGATE_MCP_SCOPE=user
 npx -y sipgate-mcp
 ```
 
@@ -95,12 +126,13 @@ Claude Code expands `${VAR}` references in MCP environment entries. Single quote
 claude mcp add \
   --env 'SIPGATE_TOKEN_ID=${SIPGATE_TOKEN_ID}' \
   --env 'SIPGATE_TOKEN=${SIPGATE_TOKEN}' \
+  --env SIPGATE_MCP_SCOPE=user \
   --transport stdio \
   --scope user \
   sipgate -- npx -y sipgate-mcp
 ```
 
-Add `--env SIPGATE_MCP_READONLY=1` before `--transport` for read-only mode. Verify the connection with `claude mcp get sipgate`. See the official [Claude Code MCP documentation](https://code.claude.com/docs/en/mcp).
+Add `--env SIPGATE_MCP_READONLY=1` before `--transport` for read-only mode. Replace the scope with `account` only for deliberate administrator access. Verify the connection with `claude mcp get sipgate`. See the official [Claude Code MCP documentation](https://code.claude.com/docs/en/mcp).
 
 ### Claude Desktop
 
@@ -127,18 +159,22 @@ Codex can forward named variables from its local environment without storing the
 [mcp_servers.sipgate]
 command = "npx"
 args = ["-y", "sipgate-mcp"]
-env_vars = ["SIPGATE_TOKEN_ID", "SIPGATE_TOKEN", "SIPGATE_MCP_READONLY"]
+env_vars = ["SIPGATE_TOKEN_ID", "SIPGATE_TOKEN", "SIPGATE_MCP_SCOPE", "SIPGATE_MCP_READONLY"]
 ```
 
 Export the variables before starting Codex, then use `/mcp` or `codex mcp list` to confirm the server. The `env_vars` forwarding form is documented in the [official OpenAI MCP documentation](https://developers.openai.com/codex/mcp/).
 
 ## Manual smoke test with MCP Inspector
 
-This test makes real sipgate API calls. Start with a PAT containing only `account:read` and `numbers:read`, plus the required environment variables:
+This test makes real sipgate API calls. Start in user/read-only mode with a PAT
+containing `phonelines:read` and `phonelines:numbers:read`, plus the required
+environment variables:
 
 ```bash
 export SIPGATE_TOKEN_ID="your-token-id"
 export SIPGATE_TOKEN="your-token"
+export SIPGATE_MCP_SCOPE="user"
+export SIPGATE_MCP_READONLY=1
 npx @modelcontextprotocol/inspector npx -y sipgate-mcp
 ```
 
@@ -158,10 +194,11 @@ The MCP layer depends only on the backend interface:
 ```text
 MCP stdio server
   -> validated tool definitions (Zod)
-    -> TelephonyBackend
-      -> SipgateBackend (v1 implementation)
-        -> SipgateClient
-          -> native fetch -> https://api.sipgate.com/v2
+    -> user/account access policy
+      -> TelephonyBackend
+        -> SipgateBackend
+          -> SipgateClient
+            -> native fetch -> https://api.sipgate.com/v2
 ```
 
 `TelephonyBackend` contains the stable, provider-neutral operations. `SipgateBackend` is the only v1 implementation, so a future second telephony provider can reuse the same MCP tool surface.
@@ -169,6 +206,8 @@ MCP stdio server
 ## Security
 
 - PAT values are read only from `SIPGATE_TOKEN_ID` and `SIPGATE_TOKEN`.
+- User scope is the default and validates user IDs plus number, phoneline, device, call, and history ownership before delegation.
+- Account scope fails startup unless the authenticated sipgate user reports `admin: true`.
 - The Basic Auth header exists only in memory and is sent only to the fixed sipgate API base URL.
 - API error bodies are discarded. User-facing errors never include request headers, response bodies, or credentials.
 - Potentially sensitive response properties such as `credentials`, `password`, `token`, and `secret` are redacted before tool output.
@@ -184,7 +223,7 @@ npm run build
 npm test
 ```
 
-Tests use `node:test` and mocked `fetch`; they never call the real sipgate API. The suite includes client authentication/error behavior, exact critical write payloads, credential redaction, one test per MCP tool, and read-only registration.
+Tests use `node:test` and mocked `fetch`; they never call the real sipgate API. The suite includes client authentication/error behavior, user/account access-policy enforcement, exact critical write payloads, credential redaction, one test per MCP tool, and read-only registration.
 
 ## Releases
 
@@ -203,8 +242,9 @@ The endpoint paths, query parameters, request bodies, response models, and scope
 
 ## Roadmap
 
-- v1: local self-hosted stdio server (this release)
-- v2: optional remote deployment, including a Cloudflare Workers backend, without changing the MCP tool surface
+- v0.1: local self-hosted stdio server and sipgate REST API tools
+- v0.2: user-scoped access by default plus explicit administrator-only account scope
+- Future: optional remote deployment, including a Cloudflare Workers backend, without changing the MCP tool surface
 - Additional `TelephonyBackend` implementation(s)
 - Product-aware Click2Dial behavior for classic and Neo PBX accounts
 

package/dist/backend/access-controlled-backend.d.ts

@@ -0,0 +1,57 @@
+import type { AccessScope, AuthenticatedUserContext, DeviceType, ForwardingRule, HistoryQuery, JsonValue, MutationResult, PaginationInput, TelephonyBackend } from "./telephony-backend.js";
+export declare class AccessPolicyError extends Error {
+    constructor(message: string);
+}
+/**
+ * Enforces MCP-level resource boundaries in addition to sipgate's own role and
+ * token-scope checks. Account scope is rejected unless sipgate identifies the
+ * authenticated user as an administrator.
+ */
+export declare class AccessControlledBackend implements TelephonyBackend {
+    private readonly delegate;
+    private readonly scope;
+    private readonly context;
+    constructor(delegate: TelephonyBackend, scope: AccessScope, context: AuthenticatedUserContext);
+    getAuthenticatedUser(): Promise<AuthenticatedUserContext>;
+    getUser(userId: string): Promise<JsonValue>;
+    getAccountInfo(): Promise<JsonValue>;
+    listUsers(): Promise<JsonValue>;
+    listNumbers({ offset, limit }: PaginationInput): Promise<JsonValue>;
+    listUserNumbers(userId: string, pagination: PaginationInput): Promise<JsonValue>;
+    listPhonelines(userId: string): Promise<JsonValue>;
+    listDevices(userId?: string, types?: DeviceType[]): Promise<JsonValue>;
+    getRouting(userId?: string): Promise<JsonValue>;
+    getCallHistory(query: HistoryQuery): Promise<JsonValue>;
+    getSettings(userId?: string): Promise<JsonValue>;
+    setNumberRouting(numberId: string, endpointId: string): Promise<MutationResult>;
+    setUserNumberRouting(userId: string, numberId: string, endpointId: string): Promise<MutationResult>;
+    setForwarding(userId: string, phonelineId: string, forwardings: ForwardingRule[]): Promise<MutationResult>;
+    setDnd(deviceId: string, enabled: boolean): Promise<MutationResult>;
+    sendSms(input: {
+        userId: string;
+        smsId?: string;
+        recipient: string;
+        message: string;
+        sendAt?: number;
+    }): Promise<MutationResult>;
+    initiateCall(input: {
+        caller: string;
+        callee: string;
+        callerId?: string;
+        deviceId?: string;
+    }): Promise<MutationResult>;
+    initiateUserCall(input: {
+        caller: string;
+        callee: string;
+        callerId?: string;
+        deviceId?: string;
+    }): Promise<MutationResult>;
+    private assertUser;
+    private assertOwned;
+    private ownedConnectionIds;
+    private ownedPhonelineIds;
+    private ownedDeviceIds;
+    private ownedNumbers;
+}
+export declare function createAccessControlledBackend(delegate: TelephonyBackend, scope: AccessScope): Promise<AccessControlledBackend>;
+//# sourceMappingURL=access-controlled-backend.d.ts.map

package/dist/backend/access-controlled-backend.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"access-controlled-backend.d.ts","sourceRoot":"","sources":["../../src/backend/access-controlled-backend.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,WAAW,EACX,wBAAwB,EACxB,UAAU,EACV,cAAc,EACd,YAAY,EAEZ,SAAS,EACT,cAAc,EACd,eAAe,EACf,gBAAgB,EACjB,MAAM,wBAAwB,CAAC;AAEhC,qBAAa,iBAAkB,SAAQ,KAAK;IAC1C,YAAmB,OAAO,EAAE,MAAM,EAGjC;CACF;AAiCD;;;;GAIG;AACH,qBAAa,uBAAwB,YAAW,gBAAgB;IAE5D,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAH1B,YACmB,QAAQ,EAAE,gBAAgB,EAC1B,KAAK,EAAE,WAAW,EAClB,OAAO,EAAE,wBAAwB,EAChD;IAEG,oBAAoB,IAAI,OAAO,CAAC,wBAAwB,CAAC,CAE/D;IAEY,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAGvD;IAEY,cAAc,IAAI,OAAO,CAAC,SAAS,CAAC,CAQhD;IAEY,SAAS,IAAI,OAAO,CAAC,SAAS,CAAC,CAI3C;IAEY,WAAW,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAG/E;IAEM,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAGtF;IAEM,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAGxD;IAEM,WAAW,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAI5E;IAEM,UAAU,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAIrD;IAEY,cAAc,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,SAAS,CAAC,CAsBnE;IAEM,WAAW,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAItD;IAEY,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAY3F;IAEM,oBAAoB,CACzB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,cAAc,CAAC,CAGzB;IAEY,aAAa,CACxB,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,cAAc,EAAE,GAC5B,OAAO,CAAC,cAAc,CAAC,CAMzB;IAEY,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,cAAc,CAAC,CAK/E;IAEY,OAAO,CAAC,KAAK,EAAE;QAC1B,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,GAAG,OAAO,CAAC,cAAc,CAAC,CAG1B;IAEY,YAAY,CAAC,KAAK,EAAE;QAC/B,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,GAAG,OAAO,CAAC,cAAc,CAAC,CAmB1B;IAEM,gBAAgB,CAAC,KAAK,EAAE;QAC7B,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,GAAG,OAAO,CAAC,cAAc,CAAC,CAG1B;IAED,OAAO,CAAC,UAAU;IAOlB,OAAO,CAAC,WAAW;YAOL,kBAAkB;YAQlB,iBAAiB;YASjB,cAAc;YASd,YAAY;CAe3B;AAED,wBAAsB,6BAA6B,CACjD,QAAQ,EAAE,gBAAgB,EAC1B,KAAK,EAAE,WAAW,GACjB,OAAO,CAAC,uBAAuB,CAAC,CAWlC"}

package/dist/backend/access-controlled-backend.js

@@ -0,0 +1,227 @@
+export class AccessPolicyError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "AccessPolicyError";
+    }
+}
+function asObject(value) {
+    return value && !Array.isArray(value) && typeof value === "object" ? value : undefined;
+}
+function objectArray(value) {
+    return Array.isArray(value)
+        ? value.filter((item) => Boolean(asObject(item)))
+        : [];
+}
+function stringField(value, key) {
+    const field = value[key];
+    return typeof field === "string" ? field : undefined;
+}
+function items(value) {
+    return objectArray(asObject(value)?.items);
+}
+function withAccessScope(value, context, scope) {
+    const object = asObject(value);
+    return object
+        ? { ...object, accessScope: scope }
+        : { value, authenticatedUser: context.identity, accessScope: scope };
+}
+/**
+ * Enforces MCP-level resource boundaries in addition to sipgate's own role and
+ * token-scope checks. Account scope is rejected unless sipgate identifies the
+ * authenticated user as an administrator.
+ */
+export class AccessControlledBackend {
+    delegate;
+    scope;
+    context;
+    constructor(delegate, scope, context) {
+        this.delegate = delegate;
+        this.scope = scope;
+        this.context = context;
+    }
+    getAuthenticatedUser() {
+        return Promise.resolve(this.context);
+    }
+    async getUser(userId) {
+        this.assertUser(userId);
+        return this.delegate.getUser(userId);
+    }
+    async getAccountInfo() {
+        if (this.scope === "user") {
+            return {
+                authenticatedUser: this.context.identity,
+                accessScope: this.scope,
+            };
+        }
+        return withAccessScope(await this.delegate.getAccountInfo(), this.context, this.scope);
+    }
+    async listUsers() {
+        if (this.scope === "account")
+            return this.delegate.listUsers();
+        const user = await this.delegate.getUser(this.context.userId);
+        return { items: [user] };
+    }
+    async listNumbers({ offset, limit }) {
+        if (this.scope === "account")
+            return this.delegate.listNumbers({ offset, limit });
+        return this.delegate.listUserNumbers(this.context.userId, { offset, limit });
+    }
+    listUserNumbers(userId, pagination) {
+        this.assertUser(userId);
+        return this.delegate.listUserNumbers(userId, pagination);
+    }
+    listPhonelines(userId) {
+        this.assertUser(userId);
+        return this.delegate.listPhonelines(userId);
+    }
+    listDevices(userId, types) {
+        if (this.scope === "account")
+            return this.delegate.listDevices(userId, types);
+        this.assertUser(userId);
+        return this.delegate.listDevices(this.context.userId, types);
+    }
+    getRouting(userId) {
+        if (this.scope === "account")
+            return this.delegate.getRouting(userId);
+        this.assertUser(userId);
+        return this.delegate.getRouting(this.context.userId);
+    }
+    async getCallHistory(query) {
+        if (this.scope === "account")
+            return this.delegate.getCallHistory(query);
+        const connectionIds = await this.ownedConnectionIds();
+        const requested = query.connectionIds;
+        if (requested) {
+            for (const connectionId of requested) {
+                this.assertOwned(connectionIds, connectionId, "connection");
+            }
+        }
+        const scopedConnectionIds = requested ?? [...connectionIds];
+        if (scopedConnectionIds.length === 0) {
+            return {
+                items: [],
+                pagination: {
+                    offset: query.offset,
+                    limit: query.limit,
+                    totalCount: 0,
+                    nextOffset: null,
+                },
+            };
+        }
+        return this.delegate.getCallHistory({ ...query, connectionIds: scopedConnectionIds });
+    }
+    getSettings(userId) {
+        if (this.scope === "account")
+            return this.delegate.getSettings(userId);
+        this.assertUser(userId);
+        return this.delegate.getSettings(this.context.userId);
+    }
+    async setNumberRouting(numberId, endpointId) {
+        if (this.scope === "user") {
+            const [numbers, phonelineIds] = await Promise.all([
+                this.ownedNumbers(),
+                this.ownedPhonelineIds(),
+            ]);
+            this.assertOwned(numbers.numberIds, numberId, "phone number");
+            this.assertOwned(phonelineIds, endpointId, "destination phoneline");
+        }
+        return this.scope === "user"
+            ? this.delegate.setUserNumberRouting(this.context.userId, numberId, endpointId)
+            : this.delegate.setNumberRouting(numberId, endpointId);
+    }
+    setUserNumberRouting(userId, numberId, endpointId) {
+        this.assertUser(userId);
+        return this.setNumberRouting(numberId, endpointId);
+    }
+    async setForwarding(userId, phonelineId, forwardings) {
+        if (this.scope === "user") {
+            this.assertUser(userId);
+            this.assertOwned(await this.ownedPhonelineIds(), phonelineId, "phoneline");
+        }
+        return this.delegate.setForwarding(userId, phonelineId, forwardings);
+    }
+    async setDnd(deviceId, enabled) {
+        if (this.scope === "user") {
+            this.assertOwned(await this.ownedDeviceIds(), deviceId, "device");
+        }
+        return this.delegate.setDnd(deviceId, enabled);
+    }
+    async sendSms(input) {
+        if (this.scope === "user")
+            this.assertUser(input.userId);
+        return this.delegate.sendSms(input);
+    }
+    async initiateCall(input) {
+        if (this.scope === "user") {
+            const [numbers, deviceIds] = await Promise.all([
+                this.ownedNumbers(),
+                this.ownedDeviceIds(),
+            ]);
+            const callerIsOwned = deviceIds.has(input.caller)
+                || numbers.phoneNumbers.has(input.caller);
+            if (!callerIsOwned) {
+                throw new AccessPolicyError("User scope only permits calls from the authenticated user's devices or phone numbers.");
+            }
+            if (input.deviceId)
+                this.assertOwned(deviceIds, input.deviceId, "device");
+            if (input.callerId)
+                this.assertOwned(numbers.phoneNumbers, input.callerId, "caller ID");
+        }
+        return this.scope === "user"
+            ? this.delegate.initiateUserCall(input)
+            : this.delegate.initiateCall(input);
+    }
+    initiateUserCall(input) {
+        if (this.scope === "account")
+            return this.delegate.initiateUserCall(input);
+        return this.initiateCall(input);
+    }
+    assertUser(userId) {
+        if (this.scope === "account" || userId === undefined || userId === this.context.userId)
+            return;
+        throw new AccessPolicyError(`User scope is restricted to the authenticated sipgate user ${this.context.userId}.`);
+    }
+    assertOwned(allowed, value, resource) {
+        if (allowed.has(value))
+            return;
+        throw new AccessPolicyError(`User scope does not permit access to the requested ${resource}.`);
+    }
+    async ownedConnectionIds() {
+        const [phonelineIds, deviceIds] = await Promise.all([
+            this.ownedPhonelineIds(),
+            this.ownedDeviceIds(),
+        ]);
+        return new Set([...phonelineIds, ...deviceIds]);
+    }
+    async ownedPhonelineIds() {
+        const phonelinesResponse = await this.delegate.listPhonelines(this.context.userId);
+        return new Set(items(phonelinesResponse)
+            .map((phoneline) => stringField(phoneline, "id"))
+            .filter((id) => Boolean(id)));
+    }
+    async ownedDeviceIds() {
+        const devicesResponse = await this.delegate.listDevices(this.context.userId);
+        return new Set(items(devicesResponse)
+            .map((device) => stringField(device, "id"))
+            .filter((id) => Boolean(id)));
+    }
+    async ownedNumbers() {
+        const numbersResponse = await this.delegate.listUserNumbers(this.context.userId, { offset: 0, limit: 1000 });
+        const numbers = items(numbersResponse);
+        return {
+            numberIds: new Set(numbers.map((number) => stringField(number, "id")).filter((id) => Boolean(id))),
+            phoneNumbers: new Set(numbers.map((number) => stringField(number, "number")).filter((number) => Boolean(number))),
+        };
+    }
+}
+export async function createAccessControlledBackend(delegate, scope) {
+    const context = await delegate.getAuthenticatedUser();
+    if (scope === "account") {
+        const user = asObject(await delegate.getUser(context.userId));
+        if (user?.admin !== true) {
+            throw new AccessPolicyError("Account scope requires the authenticated sipgate user to be an administrator.");
+        }
+    }
+    return new AccessControlledBackend(delegate, scope, context);
+}
+//# sourceMappingURL=access-controlled-backend.js.map

package/dist/backend/access-controlled-backend.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"access-controlled-backend.js","sourceRoot":"","sources":["../../src/backend/access-controlled-backend.ts"],"names":[],"mappings":"AAaA,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAC1C,YAAmB,OAAe;QAChC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAOD,SAAS,QAAQ,CAAC,KAA4B;IAC5C,OAAO,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACzF,CAAC;AAED,SAAS,WAAW,CAAC,KAA4B;IAC/C,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACzB,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAsB,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QACrE,CAAC,CAAC,EAAE,CAAC;AACT,CAAC;AAED,SAAS,WAAW,CAAC,KAAiB,EAAE,GAAW;IACjD,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;IACzB,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACvD,CAAC;AAED,SAAS,KAAK,CAAC,KAAgB;IAC7B,OAAO,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,eAAe,CAAC,KAAgB,EAAE,OAAiC,EAAE,KAAkB;IAC9F,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC/B,OAAO,MAAM;QACX,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE;QACnC,CAAC,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,OAAO,CAAC,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;AACzE,CAAC;AAED;;;;GAIG;AACH,MAAM,OAAO,uBAAuB;IAEf,QAAQ;IACR,KAAK;IACL,OAAO;IAH1B,YACmB,QAA0B,EAC1B,KAAkB,EAClB,OAAiC;wBAFjC,QAAQ;qBACR,KAAK;uBACL,OAAO;IACvB,CAAC;IAEG,oBAAoB;QACzB,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACvC,CAAC;IAEM,KAAK,CAAC,OAAO,CAAC,MAAc;QACjC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACxB,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC;IAEM,KAAK,CAAC,cAAc;QACzB,IAAI,IAAI,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;YAC1B,OAAO;gBACL,iBAAiB,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ;gBACxC,WAAW,EAAE,IAAI,CAAC,KAAK;aACxB,CAAC;QACJ,CAAC;QACD,OAAO,eAAe,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IACzF,CAAC;IAEM,KAAK,CAAC,SAAS;QACpB,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;QAC/D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC9D,OAAO,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;IAC3B,CAAC;IAEM,KAAK,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,KAAK,EAAmB;QACzD,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAClF,OAAO,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/E,CAAC;IAEM,eAAe,CAAC,MAAc,EAAE,UAA2B;QAChE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACxB,OAAO,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAC3D,CAAC;IAEM,cAAc,CAAC,MAAc;QAClC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACxB,OAAO,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;IAC9C,CAAC;IAEM,WAAW,CAAC,MAAe,EAAE,KAAoB;QACtD,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC9E,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACxB,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC/D,CAAC;IAEM,UAAU,CAAC,MAAe;QAC/B,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACtE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACxB,OAAO,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACvD,CAAC;IAEM,KAAK,CAAC,cAAc,CAAC,KAAmB;QAC7C,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QACzE,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACtD,MAAM,SAAS,GAAG,KAAK,CAAC,aAAa,CAAC;QACtC,IAAI,SAAS,EAAE,CAAC;YACd,KAAK,MAAM,YAAY,IAAI,SAAS,EAAE,CAAC;gBACrC,IAAI,CAAC,WAAW,CAAC,aAAa,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC;QACD,MAAM,mBAAmB,GAAG,SAAS,IAAI,CAAC,GAAG,aAAa,CAAC,CAAC;QAC5D,IAAI,mBAAmB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrC,OAAO;gBACL,KAAK,EAAE,EAAE;gBACT,UAAU,EAAE;oBACV,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,KAAK,EAAE,KAAK,CAAC,KAAK;oBAClB,UAAU,EAAE,CAAC;oBACb,UAAU,EAAE,IAAI;iBACjB;aACF,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,GAAG,KAAK,EAAE,aAAa,EAAE,mBAAmB,EAAE,CAAC,CAAC;IACxF,CAAC;IAEM,WAAW,CAAC,MAAe;QAChC,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACvE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACxB,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACxD,CAAC;IAEM,KAAK,CAAC,gBAAgB,CAAC,QAAgB,EAAE,UAAkB;QAChE,IAAI,IAAI,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;YAC1B,MAAM,CAAC,OAAO,EAAE,YAAY,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBAChD,IAAI,CAAC,YAAY,EAAE;gBACnB,IAAI,CAAC,iBAAiB,EAAE;aACzB,CAAC,CAAC;YACH,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC;YAC9D,IAAI,CAAC,WAAW,CAAC,YAAY,EAAE,UAAU,EAAE,uBAAuB,CAAC,CAAC;QACtE,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,KAAK,MAAM;YAC1B,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,CAAC;YAC/E,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC3D,CAAC;IAEM,oBAAoB,CACzB,MAAc,EACd,QAAgB,EAChB,UAAkB;QAElB,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACxB,OAAO,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACrD,CAAC;IAEM,KAAK,CAAC,aAAa,CACxB,MAAc,EACd,WAAmB,EACnB,WAA6B;QAE7B,IAAI,IAAI,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;YAC1B,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YACxB,IAAI,CAAC,WAAW,CAAC,MAAM,IAAI,CAAC,iBAAiB,EAAE,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;QAC7E,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,MAAM,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;IACvE,CAAC;IAEM,KAAK,CAAC,MAAM,CAAC,QAAgB,EAAE,OAAgB;QACpD,IAAI,IAAI,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;YAC1B,IAAI,CAAC,WAAW,CAAC,MAAM,IAAI,CAAC,cAAc,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACpE,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACjD,CAAC;IAEM,KAAK,CAAC,OAAO,CAAC,KAMpB;QACC,IAAI,IAAI,CAAC,KAAK,KAAK,MAAM;YAAE,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACzD,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACtC,CAAC;IAEM,KAAK,CAAC,YAAY,CAAC,KAKzB;QACC,IAAI,IAAI,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;YAC1B,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBAC7C,IAAI,CAAC,YAAY,EAAE;gBACnB,IAAI,CAAC,cAAc,EAAE;aACtB,CAAC,CAAC;YACH,MAAM,aAAa,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC;mBAC5C,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAC5C,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnB,MAAM,IAAI,iBAAiB,CACzB,uFAAuF,CACxF,CAAC;YACJ,CAAC;YACD,IAAI,KAAK,CAAC,QAAQ;gBAAE,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YAC1E,IAAI,KAAK,CAAC,QAAQ;gBAAE,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,YAAY,EAAE,KAAK,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QAC1F,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,KAAK,MAAM;YAC1B,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,KAAK,CAAC;YACvC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IACxC,CAAC;IAEM,gBAAgB,CAAC,KAKvB;QACC,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAC3E,OAAO,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC;IAEO,UAAU,CAAC,MAA0B;QAC3C,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM;YAAE,OAAO;QAC/F,MAAM,IAAI,iBAAiB,CACzB,8DAA8D,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CACrF,CAAC;IACJ,CAAC;IAEO,WAAW,CAAC,OAAoB,EAAE,KAAa,EAAE,QAAgB;QACvE,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,OAAO;QAC/B,MAAM,IAAI,iBAAiB,CACzB,sDAAsD,QAAQ,GAAG,CAClE,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,kBAAkB;QAC9B,MAAM,CAAC,YAAY,EAAE,SAAS,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAClD,IAAI,CAAC,iBAAiB,EAAE;YACxB,IAAI,CAAC,cAAc,EAAE;SACtB,CAAC,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,CAAC,GAAG,YAAY,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC;IAClD,CAAC;IAEO,KAAK,CAAC,iBAAiB;QAC7B,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACnF,OAAO,IAAI,GAAG,CACZ,KAAK,CAAC,kBAAkB,CAAC;aACtB,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,WAAW,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;aAChD,MAAM,CAAC,CAAC,EAAE,EAAgB,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAC7C,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,cAAc;QAC1B,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC7E,OAAO,IAAI,GAAG,CACZ,KAAK,CAAC,eAAe,CAAC;aACnB,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;aAC1C,MAAM,CAAC,CAAC,EAAE,EAAgB,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAC7C,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,YAAY;QACxB,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,eAAe,CACzD,IAAI,CAAC,OAAO,CAAC,MAAM,EACnB,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAC3B,CAAC;QACF,MAAM,OAAO,GAAG,KAAK,CAAC,eAAe,CAAC,CAAC;QACvC,OAAO;YACL,SAAS,EAAE,IAAI,GAAG,CAChB,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAgB,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAC7F;YACD,YAAY,EAAE,IAAI,GAAG,CACnB,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAoB,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAC7G;SACF,CAAC;IACJ,CAAC;CACF;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,QAA0B,EAC1B,KAAkB;IAElB,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,oBAAoB,EAAE,CAAC;IACtD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;QAC9D,IAAI,IAAI,EAAE,KAAK,KAAK,IAAI,EAAE,CAAC;YACzB,MAAM,IAAI,iBAAiB,CACzB,+EAA+E,CAChF,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,IAAI,uBAAuB,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;AAC/D,CAAC"}

package/dist/backend/sipgate-backend.d.ts

@@ -1,16 +1,21 @@
 import { SipgateClient } from "./sipgate-client.js";
-import type { DeviceType, ForwardingRule, HistoryQuery, JsonValue, MutationResult, PaginationInput, TelephonyBackend } from "./telephony-backend.js";
+import type { AuthenticatedUserContext, DeviceType, ForwardingRule, HistoryQuery, JsonValue, MutationResult, PaginationInput, TelephonyBackend } from "./telephony-backend.js";
 export declare class SipgateBackend implements TelephonyBackend {
     private readonly client;
     constructor(client: SipgateClient);
+    getAuthenticatedUser(): Promise<AuthenticatedUserContext>;
+    getUser(userId: string): Promise<JsonValue>;
     getAccountInfo(): Promise<JsonValue>;
     listUsers(): Promise<JsonValue>;
     listNumbers({ offset, limit }: PaginationInput): Promise<JsonValue>;
+    listPhonelines(userId: string): Promise<JsonValue>;
+    listUserNumbers(userId: string, { offset, limit }: PaginationInput): Promise<JsonValue>;
     listDevices(userId?: string, types?: DeviceType[]): Promise<JsonValue>;
     getRouting(userId?: string): Promise<JsonValue>;
     getCallHistory(query: HistoryQuery): Promise<JsonValue>;
     getSettings(userId?: string): Promise<JsonValue>;
     setNumberRouting(numberId: string, endpointId: string): Promise<MutationResult>;
+    setUserNumberRouting(userId: string, numberId: string, endpointId: string): Promise<MutationResult>;
     setForwarding(userId: string, phonelineId: string, forwardings: ForwardingRule[]): Promise<MutationResult>;
     setDnd(deviceId: string, enabled: boolean): Promise<MutationResult>;
     sendSms(input: {
@@ -26,7 +31,14 @@ export declare class SipgateBackend implements TelephonyBackend {
         callerId?: string;
         deviceId?: string;
     }): Promise<MutationResult>;
+    initiateUserCall(input: {
+        caller: string;
+        callee: string;
+        callerId?: string;
+        deviceId?: string;
+    }): Promise<MutationResult>;
     private findNumber;
+    private findUserNumber;
     private latestHistory;
 }
 //# sourceMappingURL=sipgate-backend.d.ts.map

package/dist/backend/sipgate-backend.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sipgate-backend.d.ts","sourceRoot":"","sources":["../../src/backend/sipgate-backend.ts"],"names":[],"mappings":"AAAA,OAAO,EAAmB,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACrE,OAAO,KAAK,EACV,UAAU,EACV,cAAc,EACd,YAAY,EAEZ,SAAS,EACT,cAAc,EACd,eAAe,EACf,gBAAgB,EACjB,MAAM,wBAAwB,CAAC;AAqChC,qBAAa,cAAe,YAAW,gBAAgB;IAClC,OAAO,CAAC,QAAQ,CAAC,MAAM;IAA1C,YAAoC,MAAM,EAAE,aAAa,EAAI;IAEhD,cAAc,IAAI,OAAO,CAAC,SAAS,CAAC,CAMhD;IAEY,SAAS,IAAI,OAAO,CAAC,SAAS,CAAC,CAG3C;IAEY,WAAW,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAI/E;IAEY,WAAW,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAgBlF;IAEY,UAAU,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CA6B3D;IAEY,cAAc,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,SAAS,CAAC,CAqBnE;IAEY,WAAW,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CA8B5D;IAEY,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAQ3F;IAEY,aAAa,CACxB,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,cAAc,EAAE,GAC5B,OAAO,CAAC,cAAc,CAAC,CASzB;IAEY,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,cAAc,CAAC,CAM/E;IAEY,OAAO,CAAC,KAAK,EAAE;QAC1B,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,GAAG,OAAO,CAAC,cAAc,CAAC,CAqC1B;IAEY,YAAY,CAAC,KAAK,EAAE;QAC/B,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,GAAG,OAAO,CAAC,cAAc,CAAC,CAoB1B;YAEa,UAAU;YAOV,aAAa;CAY5B"}
+{"version":3,"file":"sipgate-backend.d.ts","sourceRoot":"","sources":["../../src/backend/sipgate-backend.ts"],"names":[],"mappings":"AAAA,OAAO,EAAmB,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACrE,OAAO,KAAK,EACV,wBAAwB,EACxB,UAAU,EACV,cAAc,EACd,YAAY,EAEZ,SAAS,EACT,cAAc,EACd,eAAe,EACf,gBAAgB,EACjB,MAAM,wBAAwB,CAAC;AAqChC,qBAAa,cAAe,YAAW,gBAAgB;IAClC,OAAO,CAAC,QAAQ,CAAC,MAAM;IAA1C,YAAoC,MAAM,EAAE,aAAa,EAAI;IAEhD,oBAAoB,IAAI,OAAO,CAAC,wBAAwB,CAAC,CAUrE;IAEY,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAGvD;IAEY,cAAc,IAAI,OAAO,CAAC,SAAS,CAAC,CAMhD;IAEY,SAAS,IAAI,OAAO,CAAC,SAAS,CAAC,CAG3C;IAEY,WAAW,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAI/E;IAEY,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAG9D;IAEY,eAAe,CAC1B,MAAM,EAAE,MAAM,EACd,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,eAAe,GACjC,OAAO,CAAC,SAAS,CAAC,CAuBpB;IAEY,WAAW,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAgBlF;IAEY,UAAU,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CA2C3D;IAEY,cAAc,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,SAAS,CAAC,CAqBnE;IAEY,WAAW,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CA8B5D;IAEY,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAQ3F;IAEY,oBAAoB,CAC/B,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,cAAc,CAAC,CAQzB;IAEY,aAAa,CACxB,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,cAAc,EAAE,GAC5B,OAAO,CAAC,cAAc,CAAC,CASzB;IAEY,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,cAAc,CAAC,CAM/E;IAEY,OAAO,CAAC,KAAK,EAAE;QAC1B,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,GAAG,OAAO,CAAC,cAAc,CAAC,CAqC1B;IAEY,YAAY,CAAC,KAAK,EAAE;QAC/B,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,GAAG,OAAO,CAAC,cAAc,CAAC,CAoB1B;IAEY,gBAAgB,CAAC,KAAK,EAAE;QACnC,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,GAAG,OAAO,CAAC,cAAc,CAAC,CAkB1B;YAEa,UAAU;YAOV,cAAc;YAOd,aAAa;CAiB5B"}