@10x-media/impersonation 0.1.0-beta.0

package/dist/plugin/registerCollection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registerCollection.js","names":[],"sources":["../../src/plugin/registerCollection.ts"],"sourcesContent":["import type { CollectionConfig, CollectionSlug, Config } from 'payload'\n\nimport { keys } from '../translations/keys'\nimport { labelForKey } from '../translations/server'\nimport type { ResolvedOptions } from '../types'\nimport { ADMIN_GROUP } from './constants'\n\nconst deny = () => false\n\nexport const buildRecordsCollection = ({\n\tauthSlugs,\n\toptions,\n}: {\n\tauthSlugs: CollectionSlug[]\n\toptions: ResolvedOptions\n}): CollectionConfig => {\n\tconst relationTo: CollectionSlug[] = authSlugs.length > 0 ? authSlugs : ['users']\n\n\treturn {\n\t\tslug: options.collectionSlug,\n\t\taccess: {\n\t\t\tcreate: deny,\n\t\t\tdelete: deny,\n\t\t\tread: options.access.readRecords,\n\t\t\tupdate: deny,\n\t\t},\n\t\tadmin: {\n\t\t\tdefaultColumns: ['target', 'impersonator', 'startedAt', 'endedAt', 'endedBy'],\n\t\t\tgroup: ADMIN_GROUP,\n\t\t\thidden: !options.ui.sessionsCollection,\n\t\t\tuseAsTitle: 'targetTitle',\n\t\t\t...(options.ui.recordAction\n\t\t\t\t? {\n\t\t\t\t\t\tcomponents: {\n\t\t\t\t\t\t\tedit: {\n\t\t\t\t\t\t\t\tbeforeDocumentControls: ['@10x-media/impersonation/client#EndSessionMenuItem'],\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t},\n\t\t\t\t\t}\n\t\t\t\t: {}),\n\t\t},\n\t\tfields: [\n\t\t\t{\n\t\t\t\tname: 'impersonator',\n\t\t\t\ttype: 'relationship',\n\t\t\t\tlabel: labelForKey(keys.fieldImpersonator),\n\t\t\t\trelationTo,\n\t\t\t\trequired: true,\n\t\t\t},\n\t\t\t{\n\t\t\t\tname: 'target',\n\t\t\t\ttype: 'relationship',\n\t\t\t\tlabel: labelForKey(keys.fieldTarget),\n\t\t\t\trelationTo,\n\t\t\t\trequired: true,\n\t\t\t},\n\t\t\t{ name: 'impersonatorEmail', type: 'text', index: true },\n\t\t\t{ name: 'targetEmail', type: 'text', index: true },\n\t\t\t{ name: 'impersonatorTitle', type: 'text' },\n\t\t\t{ name: 'targetTitle', type: 'text' },\n\t\t\t{\n\t\t\t\tname: 'mode',\n\t\t\t\ttype: 'select',\n\t\t\t\tlabel: labelForKey(keys.fieldMode),\n\t\t\t\toptions: [\n\t\t\t\t\t{ label: 'swap', value: 'swap' },\n\t\t\t\t\t{ label: 'parallel', value: 'parallel' },\n\t\t\t\t],\n\t\t\t\trequired: true,\n\t\t\t},\n\t\t\t{ name: 'targetSid', type: 'text', index: true, required: true },\n\t\t\t{ name: 'impersonatorSid', type: 'text', index: true, required: true },\n\t\t\t{ name: 'impersonatorTenantCookie', type: 'text' },\n\t\t\t{\n\t\t\t\tname: 'startedAt',\n\t\t\t\ttype: 'date',\n\t\t\t\tlabel: labelForKey(keys.fieldStartedAt),\n\t\t\t\trequired: true,\n\t\t\t},\n\t\t\t{ name: 'endedAt', type: 'date', index: true, label: labelForKey(keys.fieldEndedAt) },\n\t\t\t{\n\t\t\t\tname: 'endedBy',\n\t\t\t\ttype: 'select',\n\t\t\t\tlabel: labelForKey(keys.fieldEndedBy),\n\t\t\t\toptions: [\n\t\t\t\t\t{ label: 'exit', value: 'exit' },\n\t\t\t\t\t{ label: 'logout', value: 'logout' },\n\t\t\t\t\t{ label: 'terminated', value: 'terminated' },\n\t\t\t\t\t{ label: 'expired', value: 'expired' },\n\t\t\t\t\t{ label: 'impersonatorGone', value: 'impersonatorGone' },\n\t\t\t\t\t{ label: 'targetGone', value: 'targetGone' },\n\t\t\t\t\t{ label: 'failed', value: 'failed' },\n\t\t\t\t],\n\t\t\t},\n\t\t\t{\n\t\t\t\tname: 'reason',\n\t\t\t\tmaxLength: 500,\n\t\t\t\ttype: 'text',\n\t\t\t\tlabel: labelForKey(keys.fieldReason),\n\t\t\t},\n\t\t\t{ name: 'ip', type: 'text' },\n\t\t\t{ name: 'userAgent', type: 'text' },\n\t\t\t{ name: 'impersonatorLocale', type: 'text' },\n\t\t\t{ name: 'absoluteExpiresAt', type: 'date' },\n\t\t\t{ name: 'targetLocked', type: 'checkbox' },\n\t\t],\n\t\tindexes: [{ fields: ['targetSid', 'endedAt'] }, { fields: ['impersonatorSid', 'endedAt'] }],\n\t\tlabels: {\n\t\t\tplural: labelForKey(keys.collectionPlural),\n\t\t\tsingular: labelForKey(keys.collectionSingular),\n\t\t},\n\t\ttimestamps: true,\n\t}\n}\n\nexport const registerCollection = (config: Config, options: ResolvedOptions): void => {\n\tconst authSlugs = (config.collections ?? [])\n\t\t.filter((collection) => Boolean(collection.auth))\n\t\t.map(({ slug }) => slug as CollectionSlug)\n\tconst built = buildRecordsCollection({ authSlugs, options })\n\tconfig.collections = [\n\t\t...(config.collections ?? []),\n\t\toptions.collectionOverrides ? options.collectionOverrides(built) : built,\n\t]\n}\n"],"mappings":";;;;AAOA,MAAM,aAAa;AAEnB,MAAa,0BAA0B,EACtC,WACA,cAIuB;CACvB,MAAM,aAA+B,UAAU,SAAS,IAAI,YAAY,CAAC,OAAO;CAEhF,OAAO;EACN,MAAM,QAAQ;EACd,QAAQ;GACP,QAAQ;GACR,QAAQ;GACR,MAAM,QAAQ,OAAO;GACrB,QAAQ;EACT;EACA,OAAO;GACN,gBAAgB;IAAC;IAAU;IAAgB;IAAa;IAAW;GAAS;GAC5E,OAAO;GACP,QAAQ,CAAC,QAAQ,GAAG;GACpB,YAAY;GACZ,GAAI,QAAQ,GAAG,eACZ,EACA,YAAY,EACX,MAAM,EACL,wBAAwB,CAAC,oDAAoD,EAC9E,EACD,EACD,IACC,CAAC;EACL;EACA,QAAQ;GACP;IACC,MAAM;IACN,MAAM;IACN,OAAO,YAAY,KAAK,iBAAiB;IACzC;IACA,UAAU;GACX;GACA;IACC,MAAM;IACN,MAAM;IACN,OAAO,YAAY,KAAK,WAAW;IACnC;IACA,UAAU;GACX;GACA;IAAE,MAAM;IAAqB,MAAM;IAAQ,OAAO;GAAK;GACvD;IAAE,MAAM;IAAe,MAAM;IAAQ,OAAO;GAAK;GACjD;IAAE,MAAM;IAAqB,MAAM;GAAO;GAC1C;IAAE,MAAM;IAAe,MAAM;GAAO;GACpC;IACC,MAAM;IACN,MAAM;IACN,OAAO,YAAY,KAAK,SAAS;IACjC,SAAS,CACR;KAAE,OAAO;KAAQ,OAAO;IAAO,GAC/B;KAAE,OAAO;KAAY,OAAO;IAAW,CACxC;IACA,UAAU;GACX;GACA;IAAE,MAAM;IAAa,MAAM;IAAQ,OAAO;IAAM,UAAU;GAAK;GAC/D;IAAE,MAAM;IAAmB,MAAM;IAAQ,OAAO;IAAM,UAAU;GAAK;GACrE;IAAE,MAAM;IAA4B,MAAM;GAAO;GACjD;IACC,MAAM;IACN,MAAM;IACN,OAAO,YAAY,KAAK,cAAc;IACtC,UAAU;GACX;GACA;IAAE,MAAM;IAAW,MAAM;IAAQ,OAAO;IAAM,OAAO,YAAY,KAAK,YAAY;GAAE;GACpF;IACC,MAAM;IACN,MAAM;IACN,OAAO,YAAY,KAAK,YAAY;IACpC,SAAS;KACR;MAAE,OAAO;MAAQ,OAAO;KAAO;KAC/B;MAAE,OAAO;MAAU,OAAO;KAAS;KACnC;MAAE,OAAO;MAAc,OAAO;KAAa;KAC3C;MAAE,OAAO;MAAW,OAAO;KAAU;KACrC;MAAE,OAAO;MAAoB,OAAO;KAAmB;KACvD;MAAE,OAAO;MAAc,OAAO;KAAa;KAC3C;MAAE,OAAO;MAAU,OAAO;KAAS;IACpC;GACD;GACA;IACC,MAAM;IACN,WAAW;IACX,MAAM;IACN,OAAO,YAAY,KAAK,WAAW;GACpC;GACA;IAAE,MAAM;IAAM,MAAM;GAAO;GAC3B;IAAE,MAAM;IAAa,MAAM;GAAO;GAClC;IAAE,MAAM;IAAsB,MAAM;GAAO;GAC3C;IAAE,MAAM;IAAqB,MAAM;GAAO;GAC1C;IAAE,MAAM;IAAgB,MAAM;GAAW;EAC1C;EACA,SAAS,CAAC,EAAE,QAAQ,CAAC,aAAa,SAAS,EAAE,GAAG,EAAE,QAAQ,CAAC,mBAAmB,SAAS,EAAE,CAAC;EAC1F,QAAQ;GACP,QAAQ,YAAY,KAAK,gBAAgB;GACzC,UAAU,YAAY,KAAK,kBAAkB;EAC9C;EACA,YAAY;CACb;AACD;AAEA,MAAa,sBAAsB,QAAgB,YAAmC;CAIrF,MAAM,QAAQ,uBAAuB;EAAE,YAHpB,OAAO,eAAe,CAAC,GACxC,QAAQ,eAAe,QAAQ,WAAW,IAAI,CAAC,EAC/C,KAAK,EAAE,WAAW,IAC2B;EAAG;CAAQ,CAAC;CAC3D,OAAO,cAAc,CACpB,GAAI,OAAO,eAAe,CAAC,GAC3B,QAAQ,sBAAsB,QAAQ,oBAAoB,KAAK,IAAI,KACpE;AACD"}

package/dist/plugin/registerEndpoints.js

@@ -0,0 +1,19 @@
+import { currentEndpoint } from "../endpoints/current.js";
+import { exitEndpoint } from "../endpoints/exit.js";
+import { startEndpoint } from "../endpoints/start.js";
+import { terminateEndpoint } from "../endpoints/terminate.js";
+//#region src/plugin/registerEndpoints.ts
+const registerEndpoints = (config, options) => {
+	const base = options.apiPath.endsWith("/") ? options.apiPath.slice(0, -1) : options.apiPath;
+	config.endpoints = [
+		...config.endpoints ?? [],
+		startEndpoint(`${base}/start`),
+		exitEndpoint(`${base}/exit`),
+		currentEndpoint(base),
+		terminateEndpoint(`${base}/:id/end`)
+	];
+};
+//#endregion
+export { registerEndpoints };
+
+//# sourceMappingURL=registerEndpoints.js.map

package/dist/plugin/registerEndpoints.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registerEndpoints.js","names":[],"sources":["../../src/plugin/registerEndpoints.ts"],"sourcesContent":["import type { Config } from 'payload'\n\nimport { currentEndpoint } from '../endpoints/current'\nimport { exitEndpoint } from '../endpoints/exit'\nimport { startEndpoint } from '../endpoints/start'\nimport { terminateEndpoint } from '../endpoints/terminate'\nimport type { ResolvedOptions } from '../types'\n\nexport const registerEndpoints = (config: Config, options: ResolvedOptions): void => {\n\tconst base = options.apiPath.endsWith('/') ? options.apiPath.slice(0, -1) : options.apiPath\n\tconfig.endpoints = [\n\t\t...(config.endpoints ?? []),\n\t\tstartEndpoint(`${base}/start`),\n\t\texitEndpoint(`${base}/exit`),\n\t\tcurrentEndpoint(base),\n\t\tterminateEndpoint(`${base}/:id/end`),\n\t]\n}\n"],"mappings":";;;;;AAQA,MAAa,qBAAqB,QAAgB,YAAmC;CACpF,MAAM,OAAO,QAAQ,QAAQ,SAAS,GAAG,IAAI,QAAQ,QAAQ,MAAM,GAAG,EAAE,IAAI,QAAQ;CACpF,OAAO,YAAY;EAClB,GAAI,OAAO,aAAa,CAAC;EACzB,cAAc,GAAG,KAAK,OAAO;EAC7B,aAAa,GAAG,KAAK,MAAM;EAC3B,gBAAgB,IAAI;EACpB,kBAAkB,GAAG,KAAK,SAAS;CACpC;AACD"}

package/dist/plugin/registerHooks.js

@@ -0,0 +1,59 @@
+import { collectionBySlug } from "../ids.js";
+import { findOpenBySid } from "../session/resolve.js";
+import { expireCookie } from "../auth/cookies.js";
+import { closeAndRevoke } from "../session/close.js";
+import { boundSid } from "../types.js";
+import { releaseLocks } from "../session/locks.js";
+//#region src/plugin/registerHooks.ts
+const registerHooks = (config, options) => {
+	const afterLogout = async ({ req }) => {
+		try {
+			const user = req.user;
+			const sid = boundSid(user, options.session.binding);
+			if (!user || !sid) return;
+			const row = await findOpenBySid({
+				options,
+				payload: req.payload,
+				req,
+				sid
+			});
+			if (!row) return;
+			const closed = await closeAndRevoke({
+				endedBy: "logout",
+				options,
+				payload: req.payload,
+				record: row,
+				req
+			});
+			await releaseLocks({
+				payload: req.payload,
+				record: closed,
+				req
+			});
+			const authConfig = (user.collection ? collectionBySlug(req.payload, user.collection)?.config.auth : void 0) ?? collectionBySlug(req.payload, req.payload.config.admin.user)?.config.auth;
+			if (authConfig && req.responseHeaders) req.responseHeaders.append("Set-Cookie", expireCookie({
+				authConfig,
+				name: options.hintCookieName
+			}));
+		} catch (error) {
+			req.payload.logger.error({
+				err: error,
+				msg: "@10x-media/impersonation: afterLogout failed to close the session"
+			});
+		}
+	};
+	config.collections = (config.collections ?? []).map((collection) => {
+		if (!collection.auth) return collection;
+		return {
+			...collection,
+			hooks: {
+				...collection.hooks,
+				afterLogout: [...collection.hooks?.afterLogout ?? [], afterLogout]
+			}
+		};
+	});
+};
+//#endregion
+export { registerHooks };
+
+//# sourceMappingURL=registerHooks.js.map

package/dist/plugin/registerHooks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registerHooks.js","names":[],"sources":["../../src/plugin/registerHooks.ts"],"sourcesContent":["import type { CollectionAfterLogoutHook, Config } from 'payload'\n\nimport { expireCookie } from '../auth/cookies'\nimport { collectionBySlug } from '../ids'\nimport { closeAndRevoke } from '../session/close'\nimport { releaseLocks } from '../session/locks'\nimport { findOpenBySid } from '../session/resolve'\nimport type { ResolvedOptions } from '../types'\nimport { boundSid } from '../types'\n\nexport const registerHooks = (config: Config, options: ResolvedOptions): void => {\n\tconst afterLogout: CollectionAfterLogoutHook = async ({ req }) => {\n\t\ttry {\n\t\t\tconst user = req.user\n\t\t\tconst sid = boundSid(user, options.session.binding)\n\t\t\tif (!user || !sid) {\n\t\t\t\treturn\n\t\t\t}\n\t\t\tconst row = await findOpenBySid({\n\t\t\t\toptions,\n\t\t\t\tpayload: req.payload,\n\t\t\t\treq,\n\t\t\t\tsid,\n\t\t\t})\n\t\t\tif (!row) {\n\t\t\t\treturn\n\t\t\t}\n\t\t\tconst closed = await closeAndRevoke({\n\t\t\t\tendedBy: 'logout',\n\t\t\t\toptions,\n\t\t\t\tpayload: req.payload,\n\t\t\t\trecord: row,\n\t\t\t\treq,\n\t\t\t})\n\t\t\tawait releaseLocks({ payload: req.payload, record: closed, req })\n\t\t\tconst authConfig =\n\t\t\t\t(user.collection\n\t\t\t\t\t? collectionBySlug(req.payload, user.collection)?.config.auth\n\t\t\t\t\t: undefined) ?? collectionBySlug(req.payload, req.payload.config.admin.user)?.config.auth\n\t\t\tif (authConfig && req.responseHeaders) {\n\t\t\t\treq.responseHeaders.append(\n\t\t\t\t\t'Set-Cookie',\n\t\t\t\t\texpireCookie({ authConfig, name: options.hintCookieName })\n\t\t\t\t)\n\t\t\t}\n\t\t} catch (error) {\n\t\t\treq.payload.logger.error({\n\t\t\t\terr: error,\n\t\t\t\tmsg: '@10x-media/impersonation: afterLogout failed to close the session',\n\t\t\t})\n\t\t}\n\t}\n\n\tconfig.collections = (config.collections ?? []).map((collection) => {\n\t\tif (!collection.auth) {\n\t\t\treturn collection\n\t\t}\n\t\treturn {\n\t\t\t...collection,\n\t\t\thooks: {\n\t\t\t\t...collection.hooks,\n\t\t\t\tafterLogout: [...(collection.hooks?.afterLogout ?? []), afterLogout],\n\t\t\t},\n\t\t}\n\t})\n}\n"],"mappings":";;;;;;;AAUA,MAAa,iBAAiB,QAAgB,YAAmC;CAChF,MAAM,cAAyC,OAAO,EAAE,UAAU;EACjE,IAAI;GACH,MAAM,OAAO,IAAI;GACjB,MAAM,MAAM,SAAS,MAAM,QAAQ,QAAQ,OAAO;GAClD,IAAI,CAAC,QAAQ,CAAC,KACb;GAED,MAAM,MAAM,MAAM,cAAc;IAC/B;IACA,SAAS,IAAI;IACb;IACA;GACD,CAAC;GACD,IAAI,CAAC,KACJ;GAED,MAAM,SAAS,MAAM,eAAe;IACnC,SAAS;IACT;IACA,SAAS,IAAI;IACb,QAAQ;IACR;GACD,CAAC;GACD,MAAM,aAAa;IAAE,SAAS,IAAI;IAAS,QAAQ;IAAQ;GAAI,CAAC;GAChE,MAAM,cACJ,KAAK,aACH,iBAAiB,IAAI,SAAS,KAAK,UAAU,GAAG,OAAO,OACvD,KAAA,MAAc,iBAAiB,IAAI,SAAS,IAAI,QAAQ,OAAO,MAAM,IAAI,GAAG,OAAO;GACvF,IAAI,cAAc,IAAI,iBACrB,IAAI,gBAAgB,OACnB,cACA,aAAa;IAAE;IAAY,MAAM,QAAQ;GAAe,CAAC,CAC1D;EAEF,SAAS,OAAO;GACf,IAAI,QAAQ,OAAO,MAAM;IACxB,KAAK;IACL,KAAK;GACN,CAAC;EACF;CACD;CAEA,OAAO,eAAe,OAAO,eAAe,CAAC,GAAG,KAAK,eAAe;EACnE,IAAI,CAAC,WAAW,MACf,OAAO;EAER,OAAO;GACN,GAAG;GACH,OAAO;IACN,GAAG,WAAW;IACd,aAAa,CAAC,GAAI,WAAW,OAAO,eAAe,CAAC,GAAI,WAAW;GACpE;EACD;CACD,CAAC;AACF"}

package/dist/plugin/registerRetention.js

@@ -0,0 +1,57 @@
+import { closeStaleImpersonations } from "../session/closeStale.js";
+//#region src/plugin/registerRetention.ts
+const DEFAULT_CRON = "0 3 * * *";
+const DEFAULT_QUEUE = "impersonation-retention";
+const PAGE = 100;
+/**
+* Opt-in job: close stale open rows, then delete closed rows older than
+* `deleteAfterDays`. The host must run the queue.
+*/
+const registerRetention = (config, options) => {
+	const retention = options.retention;
+	if (!retention) return;
+	const task = {
+		slug: "impersonationRetention",
+		schedule: [{
+			cron: retention.cron ?? DEFAULT_CRON,
+			queue: retention.queue ?? DEFAULT_QUEUE
+		}],
+		handler: async ({ req }) => {
+			const closed = await closeStaleImpersonations(req.payload);
+			const cutoff = (/* @__PURE__ */ new Date(Date.now() - retention.deleteAfterDays * 864e5)).toISOString();
+			let deleted = 0;
+			for (;;) {
+				const { docs } = await req.payload.find({
+					collection: options.collectionSlug,
+					depth: 0,
+					limit: PAGE,
+					overrideAccess: true,
+					pagination: false,
+					where: { and: [{ endedAt: { exists: true } }, { endedAt: { less_than_equal: cutoff } }] }
+				});
+				if (docs.length === 0) break;
+				for (const doc of docs) {
+					await req.payload.delete({
+						collection: options.collectionSlug,
+						id: doc.id,
+						overrideAccess: true
+					});
+					deleted += 1;
+				}
+				if (docs.length < PAGE) break;
+			}
+			return { output: {
+				closed,
+				deleted
+			} };
+		}
+	};
+	config.jobs = {
+		...config.jobs,
+		tasks: [...config.jobs?.tasks ?? [], task]
+	};
+};
+//#endregion
+export { registerRetention };
+
+//# sourceMappingURL=registerRetention.js.map

package/dist/plugin/registerRetention.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registerRetention.js","names":[],"sources":["../../src/plugin/registerRetention.ts"],"sourcesContent":["import type { Config, TaskConfig } from 'payload'\n\nimport { closeStaleImpersonations } from '../session/closeStale'\nimport type { ResolvedOptions } from '../types'\n\nconst DEFAULT_CRON = '0 3 * * *'\nconst DEFAULT_QUEUE = 'impersonation-retention'\nconst PAGE = 100\n\n/**\n * Opt-in job: close stale open rows, then delete closed rows older than\n * `deleteAfterDays`. The host must run the queue.\n */\nexport const registerRetention = (config: Config, options: ResolvedOptions): void => {\n\tconst retention = options.retention\n\tif (!retention) {\n\t\treturn\n\t}\n\n\tconst task = {\n\t\tslug: 'impersonationRetention',\n\t\tschedule: [{ cron: retention.cron ?? DEFAULT_CRON, queue: retention.queue ?? DEFAULT_QUEUE }],\n\t\thandler: async ({ req }) => {\n\t\t\tconst closed = await closeStaleImpersonations(req.payload)\n\t\t\tconst cutoff = new Date(Date.now() - retention.deleteAfterDays * 86_400_000).toISOString()\n\t\t\tlet deleted = 0\n\t\t\tfor (;;) {\n\t\t\t\tconst { docs } = await req.payload.find({\n\t\t\t\t\tcollection: options.collectionSlug,\n\t\t\t\t\tdepth: 0,\n\t\t\t\t\tlimit: PAGE,\n\t\t\t\t\toverrideAccess: true,\n\t\t\t\t\tpagination: false,\n\t\t\t\t\twhere: {\n\t\t\t\t\t\tand: [{ endedAt: { exists: true } }, { endedAt: { less_than_equal: cutoff } }],\n\t\t\t\t\t},\n\t\t\t\t})\n\t\t\t\tif (docs.length === 0) {\n\t\t\t\t\tbreak\n\t\t\t\t}\n\t\t\t\tfor (const doc of docs) {\n\t\t\t\t\tawait req.payload.delete({\n\t\t\t\t\t\tcollection: options.collectionSlug,\n\t\t\t\t\t\tid: doc.id,\n\t\t\t\t\t\toverrideAccess: true,\n\t\t\t\t\t})\n\t\t\t\t\tdeleted += 1\n\t\t\t\t}\n\t\t\t\tif (docs.length < PAGE) {\n\t\t\t\t\tbreak\n\t\t\t\t}\n\t\t\t}\n\t\t\treturn { output: { closed, deleted } }\n\t\t},\n\t} as TaskConfig\n\n\tconfig.jobs = {\n\t\t...config.jobs,\n\t\ttasks: [...(config.jobs?.tasks ?? []), task],\n\t}\n}\n"],"mappings":";;AAKA,MAAM,eAAe;AACrB,MAAM,gBAAgB;AACtB,MAAM,OAAO;;;;;AAMb,MAAa,qBAAqB,QAAgB,YAAmC;CACpF,MAAM,YAAY,QAAQ;CAC1B,IAAI,CAAC,WACJ;CAGD,MAAM,OAAO;EACZ,MAAM;EACN,UAAU,CAAC;GAAE,MAAM,UAAU,QAAQ;GAAc,OAAO,UAAU,SAAS;EAAc,CAAC;EAC5F,SAAS,OAAO,EAAE,UAAU;GAC3B,MAAM,SAAS,MAAM,yBAAyB,IAAI,OAAO;GACzD,MAAM,0BAAS,IAAI,KAAK,KAAK,IAAI,IAAI,UAAU,kBAAkB,KAAU,GAAE,YAAY;GACzF,IAAI,UAAU;GACd,SAAS;IACR,MAAM,EAAE,SAAS,MAAM,IAAI,QAAQ,KAAK;KACvC,YAAY,QAAQ;KACpB,OAAO;KACP,OAAO;KACP,gBAAgB;KAChB,YAAY;KACZ,OAAO,EACN,KAAK,CAAC,EAAE,SAAS,EAAE,QAAQ,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,iBAAiB,OAAO,EAAE,CAAC,EAC9E;IACD,CAAC;IACD,IAAI,KAAK,WAAW,GACnB;IAED,KAAK,MAAM,OAAO,MAAM;KACvB,MAAM,IAAI,QAAQ,OAAO;MACxB,YAAY,QAAQ;MACpB,IAAI,IAAI;MACR,gBAAgB;KACjB,CAAC;KACD,WAAW;IACZ;IACA,IAAI,KAAK,SAAS,MACjB;GAEF;GACA,OAAO,EAAE,QAAQ;IAAE;IAAQ;GAAQ,EAAE;EACtC;CACD;CAEA,OAAO,OAAO;EACb,GAAG,OAAO;EACV,OAAO,CAAC,GAAI,OAAO,MAAM,SAAS,CAAC,GAAI,IAAI;CAC5C;AACD"}

package/dist/plugin/registerTranslations.js

@@ -0,0 +1,19 @@
+import { toNested, translations } from "../translations/index.js";
+import { deepMergeSimple } from "payload/shared";
+//#region src/plugin/registerTranslations.ts
+/**
+* Merge this plugin's translations into the host config. Plugin-level
+* `overrides` win over the built-ins key-by-key and may add locales the plugin
+* does not ship. A host value wins over both (`deepMergeSimple` lets the second
+* argument override), so projects can override any string.
+*/
+const registerTranslations = (config, overrides) => {
+	const nested = {};
+	for (const [locale, flat] of Object.entries(overrides ?? {})) nested[locale] = toNested(flat);
+	config.i18n ??= {};
+	config.i18n.translations = deepMergeSimple(deepMergeSimple(translations, nested), config.i18n.translations ?? {});
+};
+//#endregion
+export { registerTranslations };
+
+//# sourceMappingURL=registerTranslations.js.map

package/dist/plugin/registerTranslations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registerTranslations.js","names":[],"sources":["../../src/plugin/registerTranslations.ts"],"sourcesContent":["import type { Config } from 'payload'\nimport { deepMergeSimple } from 'payload/shared'\n\nimport { type TranslationsOption, toNested, translations } from '../translations'\n\ntype Translations = NonNullable<NonNullable<Config['i18n']>['translations']>\n\n/**\n * Merge this plugin's translations into the host config. Plugin-level\n * `overrides` win over the built-ins key-by-key and may add locales the plugin\n * does not ship. A host value wins over both (`deepMergeSimple` lets the second\n * argument override), so projects can override any string.\n */\nexport const registerTranslations = (config: Config, overrides?: TranslationsOption): void => {\n\tconst nested: Record<string, Record<string, Record<string, string>>> = {}\n\tfor (const [locale, flat] of Object.entries(overrides ?? {})) {\n\t\tnested[locale] = toNested(flat)\n\t}\n\tconfig.i18n ??= {}\n\tconfig.i18n.translations = deepMergeSimple<Translations>(\n\t\tdeepMergeSimple(translations, nested),\n\t\tconfig.i18n.translations ?? {}\n\t)\n}\n"],"mappings":";;;;;;;;;AAaA,MAAa,wBAAwB,QAAgB,cAAyC;CAC7F,MAAM,SAAiE,CAAC;CACxE,KAAK,MAAM,CAAC,QAAQ,SAAS,OAAO,QAAQ,aAAa,CAAC,CAAC,GAC1D,OAAO,UAAU,SAAS,IAAI;CAE/B,OAAO,SAAS,CAAC;CACjB,OAAO,KAAK,eAAe,gBAC1B,gBAAgB,cAAc,MAAM,GACpC,OAAO,KAAK,gBAAgB,CAAC,CAC9B;AACD"}

package/dist/plugin/registry.js

@@ -0,0 +1,11 @@
+import { REGISTRY_KEY } from "./constants.js";
+//#region src/plugin/registry.ts
+const setRegistry = (config, resolved) => {
+	config.custom ??= {};
+	config.custom[REGISTRY_KEY] = resolved;
+};
+const getRegistry = (config) => config.custom?.[REGISTRY_KEY];
+//#endregion
+export { getRegistry, setRegistry };
+
+//# sourceMappingURL=registry.js.map

package/dist/plugin/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","names":[],"sources":["../../src/plugin/registry.ts"],"sourcesContent":["import type { Config, SanitizedConfig } from 'payload'\n\nimport type { ResolvedOptions } from '../types'\nimport { REGISTRY_KEY } from './constants'\n\nexport const setRegistry = (config: Config, resolved: ResolvedOptions): void => {\n\tconfig.custom ??= {}\n\tconfig.custom[REGISTRY_KEY] = resolved\n}\n\nexport const getRegistry = (\n\tconfig: Pick<Config | SanitizedConfig, 'custom'>\n): ResolvedOptions | undefined =>\n\t(config.custom as Record<string, ResolvedOptions | undefined> | undefined)?.[REGISTRY_KEY]\n"],"mappings":";;AAKA,MAAa,eAAe,QAAgB,aAAoC;CAC/E,OAAO,WAAW,CAAC;CACnB,OAAO,OAAO,gBAAgB;AAC/B;AAEA,MAAa,eACZ,WAEC,OAAO,SAAqE"}

package/dist/plugin/startable.js

@@ -0,0 +1,21 @@
+//#region src/plugin/startable.ts
+/**
+* Auth collections start will actually mint. Explicit `targets` is an allow
+* list. Otherwise local-strategy + sessions, unless the host supplied all
+* three session seams.
+*/
+const isStartableAuthCollection = (collection, options) => {
+	if (!collection.auth || collection.slug === options.collectionSlug) return false;
+	if (options.targets) return options.targets.includes(collection.slug);
+	if (Boolean(options.session.issue && options.session.revoke && options.session.binding)) return true;
+	if (collection.auth !== true) {
+		if (collection.auth.disableLocalStrategy) return false;
+		if (collection.auth.useSessions === false) return false;
+	}
+	return true;
+};
+const startableCollectionSlugs = (collections, options) => (collections ?? []).filter((collection) => isStartableAuthCollection(collection, options)).map(({ slug }) => slug);
+//#endregion
+export { isStartableAuthCollection, startableCollectionSlugs };
+
+//# sourceMappingURL=startable.js.map

package/dist/plugin/startable.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"startable.js","names":[],"sources":["../../src/plugin/startable.ts"],"sourcesContent":["import type { CollectionSlug } from 'payload'\n\nimport type { ResolvedOptions } from '../types'\n\ntype Authish = boolean | { disableLocalStrategy?: unknown; useSessions?: boolean }\n\n/**\n * Auth collections start will actually mint. Explicit `targets` is an allow\n * list. Otherwise local-strategy + sessions, unless the host supplied all\n * three session seams.\n */\nexport const isStartableAuthCollection = (\n\tcollection: { auth?: Authish; slug: string },\n\toptions: Pick<ResolvedOptions, 'collectionSlug' | 'session' | 'targets'>\n): boolean => {\n\tif (!collection.auth || collection.slug === options.collectionSlug) {\n\t\treturn false\n\t}\n\tif (options.targets) {\n\t\treturn options.targets.includes(collection.slug as CollectionSlug)\n\t}\n\tconst hasSeams = Boolean(\n\t\toptions.session.issue && options.session.revoke && options.session.binding\n\t)\n\tif (hasSeams) {\n\t\treturn true\n\t}\n\tif (collection.auth !== true) {\n\t\tif (collection.auth.disableLocalStrategy) {\n\t\t\treturn false\n\t\t}\n\t\tif (collection.auth.useSessions === false) {\n\t\t\treturn false\n\t\t}\n\t}\n\treturn true\n}\n\nexport const startableCollectionSlugs = (\n\tcollections: { auth?: Authish; slug: string }[] | undefined,\n\toptions: Pick<ResolvedOptions, 'collectionSlug' | 'session' | 'targets'>\n): CollectionSlug[] =>\n\t(collections ?? [])\n\t\t.filter((collection) => isStartableAuthCollection(collection, options))\n\t\t.map(({ slug }) => slug as CollectionSlug)\n"],"mappings":";;;;;;AAWA,MAAa,6BACZ,YACA,YACa;CACb,IAAI,CAAC,WAAW,QAAQ,WAAW,SAAS,QAAQ,gBACnD,OAAO;CAER,IAAI,QAAQ,SACX,OAAO,QAAQ,QAAQ,SAAS,WAAW,IAAsB;CAKlE,IAHiB,QAChB,QAAQ,QAAQ,SAAS,QAAQ,QAAQ,UAAU,QAAQ,QAAQ,OAEzD,GACV,OAAO;CAER,IAAI,WAAW,SAAS,MAAM;EAC7B,IAAI,WAAW,KAAK,sBACnB,OAAO;EAER,IAAI,WAAW,KAAK,gBAAgB,OACnC,OAAO;CAET;CACA,OAAO;AACR;AAEA,MAAa,4BACZ,aACA,aAEC,eAAe,CAAC,GACf,QAAQ,eAAe,0BAA0B,YAAY,OAAO,CAAC,EACrE,KAAK,EAAE,WAAW,IAAsB"}

package/dist/session/close.js

@@ -0,0 +1,65 @@
+import { relationOf } from "./resolve.js";
+import { revokeSession } from "../auth/revoke.js";
+//#region src/session/close.ts
+const closeRecord = async ({ endedBy, options, payload, record, req }) => {
+	if (record.endedAt) return record;
+	const endedAt = (/* @__PURE__ */ new Date()).toISOString();
+	let updated;
+	try {
+		updated = await payload.update({
+			id: record.id,
+			collection: options.collectionSlug,
+			data: {
+				endedAt,
+				endedBy
+			},
+			depth: 0,
+			overrideAccess: true,
+			req
+		});
+	} catch {
+		await payload.db.updateOne({
+			id: record.id,
+			collection: options.collectionSlug,
+			data: {
+				endedAt,
+				endedBy
+			},
+			req,
+			returning: false
+		});
+		updated = {
+			...record,
+			endedAt,
+			endedBy
+		};
+	}
+	await options.onEnd?.({
+		endedBy,
+		payload,
+		record: updated,
+		req
+	});
+	return updated;
+};
+const closeAndRevoke = async ({ endedBy, options, payload, record, req }) => {
+	const target = relationOf(record.target);
+	if (target) await (options.session.revoke ?? revokeSession)({
+		collection: target.collection,
+		payload,
+		req,
+		sid: record.targetSid,
+		userId: target.id
+	});
+	return closeRecord({
+		endedBy,
+		options,
+		payload,
+		record,
+		req
+	});
+};
+//#endregion
+export { closeAndRevoke, closeRecord };
+
+//# sourceMappingURL=close.js.map

package/dist/session/close.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"close.js","names":[],"sources":["../../src/session/close.ts"],"sourcesContent":["import type { CollectionSlug, Payload, PayloadRequest } from 'payload'\n\nimport { revokeSession } from '../auth/revoke'\nimport type { EndedBy, ImpersonationRecord, ResolvedOptions } from '../types'\nimport { relationOf } from './resolve'\n\nexport const closeRecord = async ({\n\tendedBy,\n\toptions,\n\tpayload,\n\trecord,\n\treq,\n}: {\n\tendedBy: EndedBy\n\toptions: ResolvedOptions\n\tpayload: Payload\n\trecord: ImpersonationRecord\n\treq?: PayloadRequest\n}): Promise<ImpersonationRecord> => {\n\tif (record.endedAt) {\n\t\treturn record\n\t}\n\n\tconst endedAt = new Date().toISOString()\n\tlet updated: ImpersonationRecord\n\ttry {\n\t\tupdated = (await payload.update({\n\t\t\tid: record.id,\n\t\t\tcollection: options.collectionSlug,\n\t\t\tdata: { endedAt, endedBy } as never,\n\t\t\tdepth: 0,\n\t\t\toverrideAccess: true,\n\t\t\treq,\n\t\t})) as unknown as ImpersonationRecord\n\t} catch {\n\t\t// Postgres CASCADE-deletes impersonation_sessions_rels when the\n\t\t// impersonator or target user is deleted. payload.update then fails\n\t\t// required-relationship validation. Close through the adapter instead.\n\t\tawait payload.db.updateOne({\n\t\t\tid: record.id,\n\t\t\tcollection: options.collectionSlug,\n\t\t\tdata: { endedAt, endedBy },\n\t\t\treq,\n\t\t\treturning: false,\n\t\t})\n\t\tupdated = { ...record, endedAt, endedBy }\n\t}\n\n\tawait options.onEnd?.({ endedBy, payload, record: updated, req })\n\treturn updated\n}\n\nexport const closeAndRevoke = async ({\n\tendedBy,\n\toptions,\n\tpayload,\n\trecord,\n\treq,\n}: {\n\tendedBy: EndedBy\n\toptions: ResolvedOptions\n\tpayload: Payload\n\trecord: ImpersonationRecord\n\treq?: PayloadRequest\n}): Promise<ImpersonationRecord> => {\n\tconst target = relationOf(record.target)\n\tif (target) {\n\t\tconst revoke = options.session.revoke ?? revokeSession\n\t\tawait revoke({\n\t\t\tcollection: target.collection as CollectionSlug,\n\t\t\tpayload,\n\t\t\treq,\n\t\t\tsid: record.targetSid,\n\t\t\tuserId: target.id,\n\t\t})\n\t}\n\treturn closeRecord({ endedBy, options, payload, record, req })\n}\n"],"mappings":";;;AAMA,MAAa,cAAc,OAAO,EACjC,SACA,SACA,SACA,QACA,UAOmC;CACnC,IAAI,OAAO,SACV,OAAO;CAGR,MAAM,2BAAU,IAAI,KAAK,GAAE,YAAY;CACvC,IAAI;CACJ,IAAI;EACH,UAAW,MAAM,QAAQ,OAAO;GAC/B,IAAI,OAAO;GACX,YAAY,QAAQ;GACpB,MAAM;IAAE;IAAS;GAAQ;GACzB,OAAO;GACP,gBAAgB;GAChB;EACD,CAAC;CACF,QAAQ;EAIP,MAAM,QAAQ,GAAG,UAAU;GAC1B,IAAI,OAAO;GACX,YAAY,QAAQ;GACpB,MAAM;IAAE;IAAS;GAAQ;GACzB;GACA,WAAW;EACZ,CAAC;EACD,UAAU;GAAE,GAAG;GAAQ;GAAS;EAAQ;CACzC;CAEA,MAAM,QAAQ,QAAQ;EAAE;EAAS;EAAS,QAAQ;EAAS;CAAI,CAAC;CAChE,OAAO;AACR;AAEA,MAAa,iBAAiB,OAAO,EACpC,SACA,SACA,SACA,QACA,UAOmC;CACnC,MAAM,SAAS,WAAW,OAAO,MAAM;CACvC,IAAI,QAEH,OADe,QAAQ,QAAQ,UAAU,eAC5B;EACZ,YAAY,OAAO;EACnB;EACA;EACA,KAAK,OAAO;EACZ,QAAQ,OAAO;CAChB,CAAC;CAEF,OAAO,YAAY;EAAE;EAAS;EAAS;EAAS;EAAQ;CAAI,CAAC;AAC9D"}

package/dist/session/closeStale.d.ts

@@ -0,0 +1,11 @@
+import { Payload } from "payload";
+
+//#region src/session/closeStale.d.ts
+/**
+ * Close open rows whose minted sid is gone, whose target is gone, or whose
+ * optional absolute cap has passed. Safe to run from a cron or `onInit`.
+ */
+declare const closeStaleImpersonations: (payload: Payload) => Promise<number>;
+//#endregion
+export { closeStaleImpersonations };
+//# sourceMappingURL=closeStale.d.ts.map

package/dist/session/closeStale.js

@@ -0,0 +1,65 @@
+import { collectionBySlug } from "../ids.js";
+import { isPastAbsoluteExpiry, relationOf } from "./resolve.js";
+import { getRegistry } from "../plugin/registry.js";
+import { closeAndRevoke } from "./close.js";
+//#region src/session/closeStale.ts
+const PAGE = 100;
+/**
+* Close open rows whose minted sid is gone, whose target is gone, or whose
+* optional absolute cap has passed. Safe to run from a cron or `onInit`.
+*/
+const closeStaleImpersonations = async (payload) => {
+	const options = getRegistry(payload.config);
+	if (!options) return 0;
+	let closed = 0;
+	let lastId;
+	for (;;) {
+		const open = await payload.find({
+			collection: options.collectionSlug,
+			depth: 0,
+			limit: PAGE,
+			overrideAccess: true,
+			sort: "id",
+			where: { and: [{ endedAt: { exists: false } }, ...lastId != null ? [{ id: { greater_than: lastId } }] : []] }
+		});
+		if (open.docs.length === 0) break;
+		for (const doc of open.docs) {
+			lastId = doc.id;
+			const reason = await staleReason(payload, doc);
+			if (!reason) continue;
+			await closeAndRevoke({
+				endedBy: reason,
+				options,
+				payload,
+				record: doc
+			});
+			closed += 1;
+		}
+		if (open.docs.length < PAGE) break;
+	}
+	return closed;
+};
+const staleReason = async (payload, record) => {
+	if (isPastAbsoluteExpiry(record)) return "expired";
+	const target = relationOf(record.target);
+	if (!target || !collectionBySlug(payload, target.collection)) return "targetGone";
+	try {
+		const user = await payload.db.findOne({
+			collection: target.collection,
+			where: { id: { equals: target.id } }
+		});
+		if (!user) return "targetGone";
+		if (!(user.sessions ?? []).some((session) => session.id === record.targetSid)) return "expired";
+	} catch (error) {
+		payload.logger.error({
+			err: error,
+			msg: "@10x-media/impersonation: closeStale skipped a row after a target lookup error"
+		});
+		return null;
+	}
+	return null;
+};
+//#endregion
+export { closeStaleImpersonations };
+
+//# sourceMappingURL=closeStale.js.map

package/dist/session/closeStale.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"closeStale.js","names":[],"sources":["../../src/session/closeStale.ts"],"sourcesContent":["import type { CollectionSlug, Payload } from 'payload'\n\nimport { collectionBySlug } from '../ids'\n\nimport { getRegistry } from '../plugin/registry'\nimport type { EndedBy, ImpersonationRecord } from '../types'\nimport { closeAndRevoke } from './close'\nimport { isPastAbsoluteExpiry, relationOf } from './resolve'\n\nconst PAGE = 100\n\n/**\n * Close open rows whose minted sid is gone, whose target is gone, or whose\n * optional absolute cap has passed. Safe to run from a cron or `onInit`.\n */\nexport const closeStaleImpersonations = async (payload: Payload): Promise<number> => {\n\tconst options = getRegistry(payload.config)\n\tif (!options) {\n\t\treturn 0\n\t}\n\n\tlet closed = 0\n\tlet lastId: number | string | undefined\n\n\tfor (;;) {\n\t\tconst open = await payload.find({\n\t\t\tcollection: options.collectionSlug,\n\t\t\tdepth: 0,\n\t\t\tlimit: PAGE,\n\t\t\toverrideAccess: true,\n\t\t\tsort: 'id',\n\t\t\twhere: {\n\t\t\t\tand: [\n\t\t\t\t\t{ endedAt: { exists: false } },\n\t\t\t\t\t...(lastId != null ? [{ id: { greater_than: lastId } }] : []),\n\t\t\t\t],\n\t\t\t},\n\t\t})\n\n\t\tif (open.docs.length === 0) {\n\t\t\tbreak\n\t\t}\n\n\t\tfor (const doc of open.docs as unknown as ImpersonationRecord[]) {\n\t\t\tlastId = doc.id\n\t\t\tconst reason = await staleReason(payload, doc)\n\t\t\tif (!reason) {\n\t\t\t\tcontinue\n\t\t\t}\n\t\t\tawait closeAndRevoke({ endedBy: reason, options, payload, record: doc })\n\t\t\tclosed += 1\n\t\t}\n\n\t\tif (open.docs.length < PAGE) {\n\t\t\tbreak\n\t\t}\n\t}\n\n\treturn closed\n}\n\nconst staleReason = async (\n\tpayload: Payload,\n\trecord: ImpersonationRecord\n): Promise<EndedBy | null> => {\n\tif (isPastAbsoluteExpiry(record)) {\n\t\treturn 'expired'\n\t}\n\n\tconst target = relationOf(record.target)\n\tif (!target || !collectionBySlug(payload, target.collection)) {\n\t\treturn 'targetGone'\n\t}\n\n\ttry {\n\t\tconst user = (await payload.db.findOne({\n\t\t\tcollection: target.collection as CollectionSlug,\n\t\t\twhere: { id: { equals: target.id } },\n\t\t})) as { sessions?: { id: string }[] } | null\n\n\t\tif (!user) {\n\t\t\treturn 'targetGone'\n\t\t}\n\n\t\tif (!(user.sessions ?? []).some((session) => session.id === record.targetSid)) {\n\t\t\treturn 'expired'\n\t\t}\n\t} catch (error) {\n\t\tpayload.logger.error({\n\t\t\terr: error,\n\t\t\tmsg: '@10x-media/impersonation: closeStale skipped a row after a target lookup error',\n\t\t})\n\t\treturn null\n\t}\n\n\treturn null\n}\n"],"mappings":";;;;;AASA,MAAM,OAAO;;;;;AAMb,MAAa,2BAA2B,OAAO,YAAsC;CACpF,MAAM,UAAU,YAAY,QAAQ,MAAM;CAC1C,IAAI,CAAC,SACJ,OAAO;CAGR,IAAI,SAAS;CACb,IAAI;CAEJ,SAAS;EACR,MAAM,OAAO,MAAM,QAAQ,KAAK;GAC/B,YAAY,QAAQ;GACpB,OAAO;GACP,OAAO;GACP,gBAAgB;GAChB,MAAM;GACN,OAAO,EACN,KAAK,CACJ,EAAE,SAAS,EAAE,QAAQ,MAAM,EAAE,GAC7B,GAAI,UAAU,OAAO,CAAC,EAAE,IAAI,EAAE,cAAc,OAAO,EAAE,CAAC,IAAI,CAAC,CAC5D,EACD;EACD,CAAC;EAED,IAAI,KAAK,KAAK,WAAW,GACxB;EAGD,KAAK,MAAM,OAAO,KAAK,MAA0C;GAChE,SAAS,IAAI;GACb,MAAM,SAAS,MAAM,YAAY,SAAS,GAAG;GAC7C,IAAI,CAAC,QACJ;GAED,MAAM,eAAe;IAAE,SAAS;IAAQ;IAAS;IAAS,QAAQ;GAAI,CAAC;GACvE,UAAU;EACX;EAEA,IAAI,KAAK,KAAK,SAAS,MACtB;CAEF;CAEA,OAAO;AACR;AAEA,MAAM,cAAc,OACnB,SACA,WAC6B;CAC7B,IAAI,qBAAqB,MAAM,GAC9B,OAAO;CAGR,MAAM,SAAS,WAAW,OAAO,MAAM;CACvC,IAAI,CAAC,UAAU,CAAC,iBAAiB,SAAS,OAAO,UAAU,GAC1D,OAAO;CAGR,IAAI;EACH,MAAM,OAAQ,MAAM,QAAQ,GAAG,QAAQ;GACtC,YAAY,OAAO;GACnB,OAAO,EAAE,IAAI,EAAE,QAAQ,OAAO,GAAG,EAAE;EACpC,CAAC;EAED,IAAI,CAAC,MACJ,OAAO;EAGR,IAAI,EAAE,KAAK,YAAY,CAAC,GAAG,MAAM,YAAY,QAAQ,OAAO,OAAO,SAAS,GAC3E,OAAO;CAET,SAAS,OAAO;EACf,QAAQ,OAAO,MAAM;GACpB,KAAK;GACL,KAAK;EACN,CAAC;EACD,OAAO;CACR;CAEA,OAAO;AACR"}

package/dist/session/locks.js

@@ -0,0 +1,32 @@
+import { collectionBySlug } from "../ids.js";
+import { relationOf } from "./resolve.js";
+//#region src/session/locks.ts
+const LOCKS = "payload-locked-documents";
+const releaseLocks = async ({ payload, record, req }) => {
+	if (!collectionBySlug(payload, LOCKS)) return;
+	const target = relationOf(record.target);
+	if (!target) return;
+	const endedAt = record.endedAt ?? (/* @__PURE__ */ new Date()).toISOString();
+	try {
+		await payload.delete({
+			collection: LOCKS,
+			overrideAccess: true,
+			req,
+			where: { and: [
+				{ "user.relationTo": { equals: target.collection } },
+				{ "user.value": { equals: target.id } },
+				{ createdAt: { greater_than_equal: record.startedAt } },
+				{ createdAt: { less_than_equal: endedAt } }
+			] }
+		});
+	} catch (error) {
+		payload.logger.error({
+			err: error,
+			msg: "@10x-media/impersonation: releaseLocks failed"
+		});
+	}
+};
+//#endregion
+export { releaseLocks };
+
+//# sourceMappingURL=locks.js.map

package/dist/session/locks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"locks.js","names":[],"sources":["../../src/session/locks.ts"],"sourcesContent":["import type { Payload, PayloadRequest } from 'payload'\n\nimport { collectionBySlug } from '../ids'\nimport type { ImpersonationRecord } from '../types'\nimport { relationOf } from './resolve'\n\nconst LOCKS = 'payload-locked-documents'\n\nexport const releaseLocks = async ({\n\tpayload,\n\trecord,\n\treq,\n}: {\n\tpayload: Payload\n\trecord: ImpersonationRecord\n\treq?: PayloadRequest\n}): Promise<void> => {\n\tif (!collectionBySlug(payload, LOCKS)) {\n\t\treturn\n\t}\n\n\tconst target = relationOf(record.target)\n\tif (!target) {\n\t\treturn\n\t}\n\n\tconst endedAt = record.endedAt ?? new Date().toISOString()\n\n\ttry {\n\t\tawait payload.delete({\n\t\t\tcollection: LOCKS,\n\t\t\toverrideAccess: true,\n\t\t\treq,\n\t\t\twhere: {\n\t\t\t\tand: [\n\t\t\t\t\t{ 'user.relationTo': { equals: target.collection } },\n\t\t\t\t\t{ 'user.value': { equals: target.id } },\n\t\t\t\t\t{ createdAt: { greater_than_equal: record.startedAt } },\n\t\t\t\t\t{ createdAt: { less_than_equal: endedAt } },\n\t\t\t\t],\n\t\t\t},\n\t\t})\n\t} catch (error) {\n\t\tpayload.logger.error({\n\t\t\terr: error,\n\t\t\tmsg: '@10x-media/impersonation: releaseLocks failed',\n\t\t})\n\t}\n}\n"],"mappings":";;;AAMA,MAAM,QAAQ;AAEd,MAAa,eAAe,OAAO,EAClC,SACA,QACA,UAKoB;CACpB,IAAI,CAAC,iBAAiB,SAAS,KAAK,GACnC;CAGD,MAAM,SAAS,WAAW,OAAO,MAAM;CACvC,IAAI,CAAC,QACJ;CAGD,MAAM,UAAU,OAAO,4BAAW,IAAI,KAAK,GAAE,YAAY;CAEzD,IAAI;EACH,MAAM,QAAQ,OAAO;GACpB,YAAY;GACZ,gBAAgB;GAChB;GACA,OAAO,EACN,KAAK;IACJ,EAAE,mBAAmB,EAAE,QAAQ,OAAO,WAAW,EAAE;IACnD,EAAE,cAAc,EAAE,QAAQ,OAAO,GAAG,EAAE;IACtC,EAAE,WAAW,EAAE,oBAAoB,OAAO,UAAU,EAAE;IACtD,EAAE,WAAW,EAAE,iBAAiB,QAAQ,EAAE;GAC3C,EACD;EACD,CAAC;CACF,SAAS,OAAO;EACf,QAAQ,OAAO,MAAM;GACpB,KAAK;GACL,KAAK;EACN,CAAC;CACF;AACD"}

package/dist/session/resolve.js

@@ -0,0 +1,91 @@
+import { idsEqual } from "../ids.js";
+import { parseCookies } from "payload/shared";
+import { cache } from "react";
+//#region src/session/resolve.ts
+const openByTargetSid = (sid) => ({ and: [{ endedAt: { exists: false } }, { targetSid: { equals: sid } }] });
+const openByImpersonatorSid = (sid) => ({ and: [{ endedAt: { exists: false } }, { impersonatorSid: { equals: sid } }] });
+const findOpenWhere = async ({ options, payload, req, where }) => {
+	try {
+		return (await payload.find({
+			collection: options.collectionSlug,
+			depth: 0,
+			limit: 1,
+			overrideAccess: true,
+			pagination: false,
+			req,
+			where
+		})).docs[0] ?? null;
+	} catch {
+		return (await payload.db.find({
+			collection: options.collectionSlug,
+			limit: 1,
+			req,
+			where
+		})).docs[0] ?? null;
+	}
+};
+const findOpenByTargetSid = async ({ options, payload, req, sid }) => findOpenWhere({
+	options,
+	payload,
+	req,
+	where: openByTargetSid(sid)
+});
+const findOpenByImpersonatorSid = async ({ options, payload, req, sid }) => findOpenWhere({
+	options,
+	payload,
+	req,
+	where: openByImpersonatorSid(sid)
+});
+const openBySid = (sid) => ({ and: [{ endedAt: { exists: false } }, { or: [{ targetSid: { equals: sid } }, { impersonatorSid: { equals: sid } }] }] });
+const findOpenBySid = async (args) => findOpenWhere({
+	...args,
+	where: openBySid(args.sid)
+});
+/**
+* One lookup per sid for a single admin render: the auth strategy, the provider,
+* and the header action share it. Outside a React render `cache` is a pass-through.
+*/
+const cachedFindOpenBySid = cache((sid, options, payload) => findOpenBySid({
+	options,
+	payload,
+	sid
+}));
+const impersonationSide = (row, sid) => row.targetSid === sid ? "target" : "impersonator";
+const rowMatchesSid = (row, sid) => row.targetSid === sid || row.impersonatorSid === sid;
+/** Hint cookie is a lookup aid. The open row must still match `sid`. */
+const resolveCurrent = async ({ headers, options, payload, req, sid }) => {
+	const hint = parseCookies(headers).get(options.hintCookieName);
+	if (hint) try {
+		const row = await payload.findByID({
+			id: hint,
+			collection: options.collectionSlug,
+			depth: 0,
+			overrideAccess: true,
+			req
+		});
+		if (row && !row.endedAt && rowMatchesSid(row, sid)) return row;
+	} catch {}
+	return findOpenBySid({
+		options,
+		payload,
+		req,
+		sid
+	});
+};
+const relationOf = (value) => {
+	if (value && typeof value === "object" && "relationTo" in value) return {
+		collection: value.relationTo,
+		id: value.value
+	};
+	return null;
+};
+const isPastAbsoluteExpiry = (row, now = Date.now()) => {
+	if (!row.absoluteExpiresAt) return false;
+	const expires = new Date(row.absoluteExpiresAt).getTime();
+	return Number.isFinite(expires) && expires <= now;
+};
+const sameUser = (left, rightCollection, rightId) => Boolean(left.collection) && left.collection === rightCollection && idsEqual(left.id, rightId);
+//#endregion
+export { cachedFindOpenBySid, findOpenByImpersonatorSid, findOpenBySid, findOpenByTargetSid, impersonationSide, isPastAbsoluteExpiry, openByImpersonatorSid, relationOf, resolveCurrent, sameUser };
+
+//# sourceMappingURL=resolve.js.map

package/dist/session/resolve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve.js","names":[],"sources":["../../src/session/resolve.ts"],"sourcesContent":["import type { Payload, PayloadRequest, Where } from 'payload'\nimport { parseCookies } from 'payload/shared'\nimport { cache } from 'react'\nimport { idsEqual } from '../ids'\nimport type { ImpersonationRecord, ResolvedOptions } from '../types'\n\nexport const openByTargetSid = (sid: string): Where => ({\n\tand: [{ endedAt: { exists: false } }, { targetSid: { equals: sid } }],\n})\n\nexport const openByImpersonatorSid = (sid: string): Where => ({\n\tand: [{ endedAt: { exists: false } }, { impersonatorSid: { equals: sid } }],\n})\n\nconst findOpenWhere = async ({\n\toptions,\n\tpayload,\n\treq,\n\twhere,\n}: {\n\toptions: ResolvedOptions\n\tpayload: Payload\n\treq?: PayloadRequest\n\twhere: Where\n}): Promise<ImpersonationRecord | null> => {\n\ttry {\n\t\tconst found = await payload.find({\n\t\t\tcollection: options.collectionSlug,\n\t\t\tdepth: 0,\n\t\t\tlimit: 1,\n\t\t\toverrideAccess: true,\n\t\t\tpagination: false,\n\t\t\treq,\n\t\t\twhere,\n\t\t})\n\t\treturn (found.docs[0] as unknown as ImpersonationRecord | undefined) ?? null\n\t} catch {\n\t\t// Postgres CASCADE on impersonation_sessions_rels can make payload.find\n\t\t// reject a row whose required impersonator or target relationship is gone.\n\t\tconst found = await payload.db.find({\n\t\t\tcollection: options.collectionSlug,\n\t\t\tlimit: 1,\n\t\t\treq,\n\t\t\twhere,\n\t\t})\n\t\treturn (found.docs[0] as unknown as ImpersonationRecord | undefined) ?? null\n\t}\n}\n\nexport const findOpenByTargetSid = async ({\n\toptions,\n\tpayload,\n\treq,\n\tsid,\n}: {\n\toptions: ResolvedOptions\n\tpayload: Payload\n\treq?: PayloadRequest\n\tsid: string\n}): Promise<ImpersonationRecord | null> =>\n\tfindOpenWhere({ options, payload, req, where: openByTargetSid(sid) })\n\nexport const findOpenByImpersonatorSid = async ({\n\toptions,\n\tpayload,\n\treq,\n\tsid,\n}: {\n\toptions: ResolvedOptions\n\tpayload: Payload\n\treq?: PayloadRequest\n\tsid: string\n}): Promise<ImpersonationRecord | null> =>\n\tfindOpenWhere({ options, payload, req, where: openByImpersonatorSid(sid) })\n\nexport const openBySid = (sid: string): Where => ({\n\tand: [\n\t\t{ endedAt: { exists: false } },\n\t\t{ or: [{ targetSid: { equals: sid } }, { impersonatorSid: { equals: sid } }] },\n\t],\n})\n\nexport const findOpenBySid = async (args: {\n\toptions: ResolvedOptions\n\tpayload: Payload\n\treq?: PayloadRequest\n\tsid: string\n}): Promise<ImpersonationRecord | null> => findOpenWhere({ ...args, where: openBySid(args.sid) })\n\n/**\n * One lookup per sid for a single admin render: the auth strategy, the provider,\n * and the header action share it. Outside a React render `cache` is a pass-through.\n */\nexport const cachedFindOpenBySid = cache(\n\t(sid: string, options: ResolvedOptions, payload: Payload): Promise<ImpersonationRecord | null> =>\n\t\tfindOpenBySid({ options, payload, sid })\n)\n\nexport const impersonationSide = (\n\trow: ImpersonationRecord,\n\tsid: string\n): 'impersonator' | 'target' => (row.targetSid === sid ? 'target' : 'impersonator')\n\nconst rowMatchesSid = (row: ImpersonationRecord, sid: string): boolean =>\n\trow.targetSid === sid || row.impersonatorSid === sid\n\n/** Hint cookie is a lookup aid. The open row must still match `sid`. */\nexport const resolveCurrent = async ({\n\theaders,\n\toptions,\n\tpayload,\n\treq,\n\tsid,\n}: {\n\theaders: Headers\n\toptions: ResolvedOptions\n\tpayload: Payload\n\treq?: PayloadRequest\n\tsid: string\n}): Promise<ImpersonationRecord | null> => {\n\tconst hint = parseCookies(headers).get(options.hintCookieName)\n\tif (hint) {\n\t\ttry {\n\t\t\tconst row = (await payload.findByID({\n\t\t\t\tid: hint,\n\t\t\t\tcollection: options.collectionSlug,\n\t\t\t\tdepth: 0,\n\t\t\t\toverrideAccess: true,\n\t\t\t\treq,\n\t\t\t})) as unknown as ImpersonationRecord\n\t\t\tif (row && !row.endedAt && rowMatchesSid(row, sid)) {\n\t\t\t\treturn row\n\t\t\t}\n\t\t} catch {\n\t\t\t// Forged or stale hint: fall through to the sid lookup.\n\t\t}\n\t}\n\n\treturn findOpenBySid({ options, payload, req, sid })\n}\n\nexport const relationOf = (\n\tvalue: ImpersonationRecord['impersonator']\n): { collection: string; id: number | string } | null => {\n\tif (value && typeof value === 'object' && 'relationTo' in value) {\n\t\treturn { collection: value.relationTo, id: value.value }\n\t}\n\treturn null\n}\n\nexport const isPastAbsoluteExpiry = (\n\trow: { absoluteExpiresAt?: null | string },\n\tnow = Date.now()\n): boolean => {\n\tif (!row.absoluteExpiresAt) {\n\t\treturn false\n\t}\n\tconst expires = new Date(row.absoluteExpiresAt).getTime()\n\treturn Number.isFinite(expires) && expires <= now\n}\n\nexport const sameUser = (\n\tleft: { collection?: string; id?: number | string },\n\trightCollection: string,\n\trightId: number | string\n): boolean =>\n\tBoolean(left.collection) && left.collection === rightCollection && idsEqual(left.id, rightId)\n"],"mappings":";;;;AAMA,MAAa,mBAAmB,SAAwB,EACvD,KAAK,CAAC,EAAE,SAAS,EAAE,QAAQ,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,QAAQ,IAAI,EAAE,CAAC,EACrE;AAEA,MAAa,yBAAyB,SAAwB,EAC7D,KAAK,CAAC,EAAE,SAAS,EAAE,QAAQ,MAAM,EAAE,GAAG,EAAE,iBAAiB,EAAE,QAAQ,IAAI,EAAE,CAAC,EAC3E;AAEA,MAAM,gBAAgB,OAAO,EAC5B,SACA,SACA,KACA,YAM0C;CAC1C,IAAI;EAUH,QAAQ,MATY,QAAQ,KAAK;GAChC,YAAY,QAAQ;GACpB,OAAO;GACP,OAAO;GACP,gBAAgB;GAChB,YAAY;GACZ;GACA;EACD,CAAC,GACa,KAAK,MAAqD;CACzE,QAAQ;EASP,QAAQ,MANY,QAAQ,GAAG,KAAK;GACnC,YAAY,QAAQ;GACpB,OAAO;GACP;GACA;EACD,CAAC,GACa,KAAK,MAAqD;CACzE;AACD;AAEA,MAAa,sBAAsB,OAAO,EACzC,SACA,SACA,KACA,UAOA,cAAc;CAAE;CAAS;CAAS;CAAK,OAAO,gBAAgB,GAAG;AAAE,CAAC;AAErE,MAAa,4BAA4B,OAAO,EAC/C,SACA,SACA,KACA,UAOA,cAAc;CAAE;CAAS;CAAS;CAAK,OAAO,sBAAsB,GAAG;AAAE,CAAC;AAE3E,MAAa,aAAa,SAAwB,EACjD,KAAK,CACJ,EAAE,SAAS,EAAE,QAAQ,MAAM,EAAE,GAC7B,EAAE,IAAI,CAAC,EAAE,WAAW,EAAE,QAAQ,IAAI,EAAE,GAAG,EAAE,iBAAiB,EAAE,QAAQ,IAAI,EAAE,CAAC,EAAE,CAC9E,EACD;AAEA,MAAa,gBAAgB,OAAO,SAKO,cAAc;CAAE,GAAG;CAAM,OAAO,UAAU,KAAK,GAAG;AAAE,CAAC;;;;;AAMhG,MAAa,sBAAsB,OACjC,KAAa,SAA0B,YACvC,cAAc;CAAE;CAAS;CAAS;AAAI,CAAC,CACzC;AAEA,MAAa,qBACZ,KACA,QACgC,IAAI,cAAc,MAAM,WAAW;AAEpE,MAAM,iBAAiB,KAA0B,QAChD,IAAI,cAAc,OAAO,IAAI,oBAAoB;;AAGlD,MAAa,iBAAiB,OAAO,EACpC,SACA,SACA,SACA,KACA,UAO0C;CAC1C,MAAM,OAAO,aAAa,OAAO,EAAE,IAAI,QAAQ,cAAc;CAC7D,IAAI,MACH,IAAI;EACH,MAAM,MAAO,MAAM,QAAQ,SAAS;GACnC,IAAI;GACJ,YAAY,QAAQ;GACpB,OAAO;GACP,gBAAgB;GAChB;EACD,CAAC;EACD,IAAI,OAAO,CAAC,IAAI,WAAW,cAAc,KAAK,GAAG,GAChD,OAAO;CAET,QAAQ,CAER;CAGD,OAAO,cAAc;EAAE;EAAS;EAAS;EAAK;CAAI,CAAC;AACpD;AAEA,MAAa,cACZ,UACwD;CACxD,IAAI,SAAS,OAAO,UAAU,YAAY,gBAAgB,OACzD,OAAO;EAAE,YAAY,MAAM;EAAY,IAAI,MAAM;CAAM;CAExD,OAAO;AACR;AAEA,MAAa,wBACZ,KACA,MAAM,KAAK,IAAI,MACF;CACb,IAAI,CAAC,IAAI,mBACR,OAAO;CAER,MAAM,UAAU,IAAI,KAAK,IAAI,iBAAiB,EAAE,QAAQ;CACxD,OAAO,OAAO,SAAS,OAAO,KAAK,WAAW;AAC/C;AAEA,MAAa,YACZ,MACA,iBACA,YAEA,QAAQ,KAAK,UAAU,KAAK,KAAK,eAAe,mBAAmB,SAAS,KAAK,IAAI,OAAO"}

package/dist/translations/ar.js

@@ -0,0 +1,52 @@
+import { keys } from "./keys.js";
+//#region src/translations/ar.ts
+const ar = {
+	[keys.actingAs]: "يتصرف باسم {{name}}",
+	[keys.collectionPlural]: "جلسات انتحال الهوية",
+	[keys.collectionSingular]: "جلسة انتحال الهوية",
+	[keys.confirm]: "انتحال الهوية",
+	[keys.confirmTitle]: "انتحال هوية هذا المستخدم؟",
+	[keys.collapseBar]: "طي شريط انتحال الهوية",
+	[keys.expandBar]: "توسيع شريط انتحال الهوية",
+	[keys.endSession]: "إنهاء الجلسة",
+	[keys.endSessionBody]: "سينتهي انتحال الهوية. يعود الهدف إلى حسابه.",
+	[keys.errorAlreadyImpersonating]: "هناك انتحال هوية جارٍ",
+	[keys.errorFailed]: "فشل انتحال الهوية",
+	[keys.errorForbidden]: "غير مسموح",
+	[keys.errorImpersonatorGone]: "حسابك لم يعد متاحا",
+	[keys.errorImpersonatorSessionExpired]: "انتهت جلستك الأصلية. سجل الدخول مرة أخرى.",
+	[keys.errorInvalidBody]: "طلب غير صالح",
+	[keys.errorNotImpersonating]: "لا يوجد انتحال هوية نشط",
+	[keys.errorOrigin]: "رفضه فحص المصدر",
+	[keys.errorReasonRequired]: "السبب مطلوب",
+	[keys.errorSelfTarget]: "لا يمكن انتحال هويتك أنت",
+	[keys.errorTargetNotFound]: "المستخدم غير موجود",
+	[keys.errorTargetTrashed]: "المستخدم في سلة المهملات",
+	[keys.errorTargetUnverified]: "المستخدم غير موثق",
+	[keys.errorUnsupportedAuth]: "طريقة المصادقة هذه لا تدعم انتحال الهوية",
+	[keys.errorUnsupportedCollection]: "لا يمكن انتحال هوية هذه المجموعة",
+	[keys.fieldEndedAt]: "انتهت",
+	[keys.fieldEndedBy]: "أنهيت بواسطة",
+	[keys.fieldImpersonator]: "المنتحل",
+	[keys.fieldMode]: "الوضع",
+	[keys.fieldReason]: "السبب",
+	[keys.fieldStartedAt]: "بدأت",
+	[keys.fieldTarget]: "الهدف",
+	[keys.noResults]: "لا توجد نتائج",
+	[keys.openDocument]: "فتح المستند",
+	[keys.openDrawer]: "فتح في الدرج",
+	[keys.openWebsite]: "فتح الموقع",
+	[keys.pluginName]: "انتحال الهوية",
+	[keys.reasonLabel]: "السبب",
+	[keys.reasonPlaceholder]: "سبب اختياري",
+	[keys.returnTo]: "العودة إلى {{name}}",
+	[keys.searchByName]: "البحث بالاسم",
+	[keys.sessionActiveOnSite]: "جلسة {{name}} نشطة على الموقع",
+	[keys.sessionEndsAt]: "تنتهي الجلسة عند {{time}}",
+	[keys.sessionEndsIn]: "تنتهي الجلسة خلال {{countdown}}",
+	[keys.switchToUser]: "انتحال الهوية"
+};
+//#endregion
+export { ar };
+
+//# sourceMappingURL=ar.js.map

package/dist/translations/ar.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ar.js","names":[],"sources":["../../src/translations/ar.ts"],"sourcesContent":["import { keys, type TranslationKey } from './keys'\n\nexport const ar: Record<TranslationKey, string> = {\n\t[keys.actingAs]: 'يتصرف باسم {{name}}',\n\t[keys.collectionPlural]: 'جلسات انتحال الهوية',\n\t[keys.collectionSingular]: 'جلسة انتحال الهوية',\n\t[keys.confirm]: 'انتحال الهوية',\n\t[keys.confirmTitle]: 'انتحال هوية هذا المستخدم؟',\n\t[keys.collapseBar]: 'طي شريط انتحال الهوية',\n\t[keys.expandBar]: 'توسيع شريط انتحال الهوية',\n\t[keys.endSession]: 'إنهاء الجلسة',\n\t[keys.endSessionBody]: 'سينتهي انتحال الهوية. يعود الهدف إلى حسابه.',\n\t[keys.errorAlreadyImpersonating]: 'هناك انتحال هوية جارٍ',\n\t[keys.errorFailed]: 'فشل انتحال الهوية',\n\t[keys.errorForbidden]: 'غير مسموح',\n\t[keys.errorImpersonatorGone]: 'حسابك لم يعد متاحا',\n\t[keys.errorImpersonatorSessionExpired]: 'انتهت جلستك الأصلية. سجل الدخول مرة أخرى.',\n\t[keys.errorInvalidBody]: 'طلب غير صالح',\n\t[keys.errorNotImpersonating]: 'لا يوجد انتحال هوية نشط',\n\t[keys.errorOrigin]: 'رفضه فحص المصدر',\n\t[keys.errorReasonRequired]: 'السبب مطلوب',\n\t[keys.errorSelfTarget]: 'لا يمكن انتحال هويتك أنت',\n\t[keys.errorTargetNotFound]: 'المستخدم غير موجود',\n\t[keys.errorTargetTrashed]: 'المستخدم في سلة المهملات',\n\t[keys.errorTargetUnverified]: 'المستخدم غير موثق',\n\t[keys.errorUnsupportedAuth]: 'طريقة المصادقة هذه لا تدعم انتحال الهوية',\n\t[keys.errorUnsupportedCollection]: 'لا يمكن انتحال هوية هذه المجموعة',\n\t[keys.fieldEndedAt]: 'انتهت',\n\t[keys.fieldEndedBy]: 'أنهيت بواسطة',\n\t[keys.fieldImpersonator]: 'المنتحل',\n\t[keys.fieldMode]: 'الوضع',\n\t[keys.fieldReason]: 'السبب',\n\t[keys.fieldStartedAt]: 'بدأت',\n\t[keys.fieldTarget]: 'الهدف',\n\t[keys.noResults]: 'لا توجد نتائج',\n\t[keys.openDocument]: 'فتح المستند',\n\t[keys.openDrawer]: 'فتح في الدرج',\n\t[keys.openWebsite]: 'فتح الموقع',\n\t[keys.pluginName]: 'انتحال الهوية',\n\t[keys.reasonLabel]: 'السبب',\n\t[keys.reasonPlaceholder]: 'سبب اختياري',\n\t[keys.returnTo]: 'العودة إلى {{name}}',\n\t[keys.searchByName]: 'البحث بالاسم',\n\t[keys.sessionActiveOnSite]: 'جلسة {{name}} نشطة على الموقع',\n\t[keys.sessionEndsAt]: 'تنتهي الجلسة عند {{time}}',\n\t[keys.sessionEndsIn]: 'تنتهي الجلسة خلال {{countdown}}',\n\t[keys.switchToUser]: 'انتحال الهوية',\n}\n"],"mappings":";;AAEA,MAAa,KAAqC;EAChD,KAAK,WAAW;EAChB,KAAK,mBAAmB;EACxB,KAAK,qBAAqB;EAC1B,KAAK,UAAU;EACf,KAAK,eAAe;EACpB,KAAK,cAAc;EACnB,KAAK,YAAY;EACjB,KAAK,aAAa;EAClB,KAAK,iBAAiB;EACtB,KAAK,4BAA4B;EACjC,KAAK,cAAc;EACnB,KAAK,iBAAiB;EACtB,KAAK,wBAAwB;EAC7B,KAAK,kCAAkC;EACvC,KAAK,mBAAmB;EACxB,KAAK,wBAAwB;EAC7B,KAAK,cAAc;EACnB,KAAK,sBAAsB;EAC3B,KAAK,kBAAkB;EACvB,KAAK,sBAAsB;EAC3B,KAAK,qBAAqB;EAC1B,KAAK,wBAAwB;EAC7B,KAAK,uBAAuB;EAC5B,KAAK,6BAA6B;EAClC,KAAK,eAAe;EACpB,KAAK,eAAe;EACpB,KAAK,oBAAoB;EACzB,KAAK,YAAY;EACjB,KAAK,cAAc;EACnB,KAAK,iBAAiB;EACtB,KAAK,cAAc;EACnB,KAAK,YAAY;EACjB,KAAK,eAAe;EACpB,KAAK,aAAa;EAClB,KAAK,cAAc;EACnB,KAAK,aAAa;EAClB,KAAK,cAAc;EACnB,KAAK,oBAAoB;EACzB,KAAK,WAAW;EAChB,KAAK,eAAe;EACpB,KAAK,sBAAsB;EAC3B,KAAK,gBAAgB;EACrB,KAAK,gBAAgB;EACrB,KAAK,eAAe;AACtB"}