Colaberry·Library
🧩

Capabilities

Plugin registry — every operation the platform exposes.

9
showing
Filtering by tag: middleware ✕
Filter: All ✓ Colaberry vetted only 📁 source: execution/ops_platform/capability_registry.py 🌐 Ingest URL + Submit manually

📋 Capabilities inventory

9 entries
requireRole Colaberry vetted
RBAC middleware for role-based authorization. Validates req.admin?.role is one of allowedRoles. Must be used AFTER requireAdmin. Returns 403 if role missing or not in allowed set.
middlewarerbacauthorizationcolaberry
capabilities
v1.0
no ratings yet
ali@colaberry.com
requirePermission Colaberry vetted
Permission-based authorization middleware. Checks req.admin?.role has all requiredPermissions via roleService.hasPermission(). Must be used AFTER requireAdmin. Returns 403 if any permission missing.
middlewarerbacauthorizationcolaberry
capabilities
v1.0
no ratings yet
ali@colaberry.com
requireAdmin Colaberry vetted
Middleware for admin authentication. Validates Bearer token JWT, checks role is 'admin' or 'super_admin'. Populates req.admin with AuthPayload (sub, email, role). Used throughout admin routes. Fails f
middlewareauthenticationauthorizationcolaberry
capabilities
v1.0
no ratings yet
ali@colaberry.com
requireSalesOrAdmin Colaberry vetted
Middleware for sales+admin authentication. Validates Bearer token JWT, checks role is 'sales', 'admin', or 'super_admin'. Sales role explicitly does NOT reach PII export, delete, batch update, CSV imp
middlewareauthenticationrbaccolaberry
capabilities
v1.0
no ratings yet
ali@colaberry.com
errorHandler Colaberry vetted
Express error handler middleware. Catches AppError instances and returns typed JSON errors with status codes. Falls back to 500 with stack logging for unhandled errors. Includes stack trace in dev mod
middlewareerror-handlingcolaberry
capabilities
v1.0
no ratings yet
ali@colaberry.com
requireParticipant Colaberry vetted
Middleware for participant authentication. Validates Bearer token JWT, checks role === 'participant'. Populates req.participant with ParticipantPayload (sub, email, cohort_id, role). Used for particip
middlewareauthenticationparticipantcolaberry
capabilities
v1.0
no ratings yet
ali@colaberry.com
requireCoryAuthorized Colaberry vetted
Strict Cory-specific authorization. Accepts admin_token or participant_token matching email === 'ali@colaberry.com' OR role === 'super_admin'. Closes prior auth hole on Cory endpoints (command, hire-a
middlewareauthorizationcorycolaberry
capabilities
v1.0
no ratings yet
ali@colaberry.com
requireAlumni Colaberry vetted
Middleware for alumni authentication. Validates Bearer token JWT, checks role === 'alumni'. Populates req.alumni with AlumniPayload (sub, email, role). Used for alumni-facing routes (referral programs
middlewareauthenticationalumnicolaberry
capabilities
v1.0
no ratings yet
ali@colaberry.com
auditMiddleware Colaberry vetted
Write-operation audit logger. Hooks into response finish to log successful (2xx-3xx) admin mutations (POST, PUT, PATCH, DELETE) to AuditLog table. Extracts entity type/ID from URL path, logs action, b
middlewareauditloggingcolaberry
capabilities
v1.0
no ratings yet
ali@colaberry.com