@actuate-media/cms-core 0.83.0 → 0.85.0

package/dist/__tests__/auth/roles.test.js

@@ -1,60 +0,0 @@
-import { describe, expect, it } from 'vitest';
-import { toDisplayRole, enumRolesForDisplay, normalizeAssignableRole, isOwnerRole, roleRank, permissionsForRole, ASSIGNABLE_ROLES, } from '../../auth/roles.js';
-describe('role display mapping', () => {
-    it('maps legacy roles to product display roles', () => {
-        expect(toDisplayRole('OWNER')).toBe('Owner');
-        expect(toDisplayRole('ADMIN')).toBe('Admin');
-        expect(toDisplayRole('EDITOR')).toBe('Editor');
-        expect(toDisplayRole('AUTHOR')).toBe('Editor');
-        expect(toDisplayRole('CLIENT')).toBe('Viewer');
-        expect(toDisplayRole('VIEWER')).toBe('Viewer');
-        expect(toDisplayRole('garbage')).toBe('Viewer');
-    });
-    it('maps a display filter to the enum values it covers', () => {
-        expect(enumRolesForDisplay('Editor')).toEqual(['EDITOR', 'AUTHOR']);
-        expect(enumRolesForDisplay('Viewer')).toEqual(['VIEWER', 'CLIENT']);
-        expect(enumRolesForDisplay('Owner')).toEqual(['OWNER']);
-        expect(enumRolesForDisplay('all')).toBeNull();
-    });
-});
-describe('assignable roles', () => {
-    it('only allows the four product roles', () => {
-        expect(ASSIGNABLE_ROLES).toEqual(['OWNER', 'ADMIN', 'EDITOR', 'VIEWER']);
-        expect(normalizeAssignableRole('admin')).toBe('ADMIN');
-        expect(normalizeAssignableRole('AUTHOR')).toBeNull();
-        expect(normalizeAssignableRole('CLIENT')).toBeNull();
-        expect(normalizeAssignableRole('nope')).toBeNull();
-    });
-});
-describe('role rank + owner check', () => {
-    it('ranks Owner above Admin above Editor above Viewer', () => {
-        expect(roleRank('OWNER')).toBeGreaterThan(roleRank('ADMIN'));
-        expect(roleRank('ADMIN')).toBeGreaterThan(roleRank('EDITOR'));
-        expect(roleRank('EDITOR')).toBeGreaterThan(roleRank('VIEWER'));
-        expect(roleRank('AUTHOR')).toBe(roleRank('EDITOR'));
-    });
-    it('detects the Owner role', () => {
-        expect(isOwnerRole('OWNER')).toBe(true);
-        expect(isOwnerRole('owner')).toBe(true);
-        expect(isOwnerRole('ADMIN')).toBe(false);
-    });
-});
-describe('permissions for role', () => {
-    it('grants Owner everything and Admin everything except owner-only scopes', () => {
-        expect(permissionsForRole('OWNER')).toContain('billing.manage');
-        expect(permissionsForRole('OWNER')).toContain('workspace.delete');
-        const admin = permissionsForRole('ADMIN');
-        expect(admin).toContain('users.invite');
-        expect(admin).not.toContain('billing.manage');
-        expect(admin).not.toContain('workspace.delete');
-    });
-    it('limits Editor to content and Viewer to read-only', () => {
-        const editor = permissionsForRole('EDITOR');
-        expect(editor).toContain('content.publish');
-        expect(editor).not.toContain('users.invite');
-        expect(editor).not.toContain('settings.manage');
-        expect(permissionsForRole('VIEWER')).toEqual(['dashboard.view', 'content.view']);
-        expect(permissionsForRole('AUTHOR')).toEqual(permissionsForRole('EDITOR'));
-    });
-});
-//# sourceMappingURL=roles.test.js.map

package/dist/__tests__/auth/roles.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"roles.test.js","sourceRoot":"","sources":["../../../src/__tests__/auth/roles.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAC7C,OAAO,EACL,aAAa,EACb,mBAAmB,EACnB,uBAAuB,EACvB,WAAW,EACX,QAAQ,EACR,kBAAkB,EAClB,gBAAgB,GACjB,MAAM,qBAAqB,CAAA;AAE5B,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QAC5C,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QAC5C,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAC9C,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAC9C,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAC9C,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAC9C,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IACjD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAA;QACnE,MAAM,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAA;QACnE,MAAM,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,CAAA;QACvD,MAAM,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;IAC/C,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,CAAC,gBAAgB,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAA;QACxE,MAAM,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACtD,MAAM,CAAC,uBAAuB,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;QACpD,MAAM,CAAC,uBAAuB,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;QACpD,MAAM,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;IACpD,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACvC,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAA;QAC5D,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAA;QAC7D,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAA;QAC9D,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAA;IACrD,CAAC,CAAC,CAAA;IACF,EAAE,CAAC,wBAAwB,EAAE,GAAG,EAAE;QAChC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACvC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACvC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC1C,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,uEAAuE,EAAE,GAAG,EAAE;QAC/E,MAAM,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAA;QAC/D,MAAM,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAA;QACjE,MAAM,KAAK,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAA;QACzC,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAA;QACvC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAA;QAC7C,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAA;IACjD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,MAAM,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAA;QAC3C,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAA;QAC3C,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,cAAc,CAAC,CAAA;QAC5C,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAA;QAC/C,MAAM,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAA;QAChF,MAAM,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAA;IAC5E,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/__tests__/auth/session.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=session.test.d.ts.map

package/dist/__tests__/auth/session.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"session.test.d.ts","sourceRoot":"","sources":["../../../src/__tests__/auth/session.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/auth/session.test.js

@@ -1,119 +0,0 @@
-import { describe, it, expect } from 'vitest';
-import * as jose from 'jose';
-import { createSession, verifySession, refreshSession, InvalidSessionPayloadError, } from '../../auth/session.js';
-const TEST_SECRET = 'a-secret-key-that-is-at-least-32-chars-long!!';
-const TEST_PAYLOAD = {
-    userId: 'user_001',
-    role: 'admin',
-    sessionId: 'sess_abc123',
-};
-describe('createSession', () => {
-    it('creates a valid JWT string', async () => {
-        const token = await createSession(TEST_PAYLOAD, { secret: TEST_SECRET });
-        expect(typeof token).toBe('string');
-        const parts = token.split('.');
-        expect(parts).toHaveLength(3);
-    });
-    it('creates tokens that can be verified', async () => {
-        const token = await createSession(TEST_PAYLOAD, { secret: TEST_SECRET });
-        const decoded = await verifySession(token, { secret: TEST_SECRET });
-        expect(decoded.userId).toBe(TEST_PAYLOAD.userId);
-        expect(decoded.role).toBe(TEST_PAYLOAD.role);
-        expect(decoded.sessionId).toBe(TEST_PAYLOAD.sessionId);
-    });
-});
-describe('verifySession', () => {
-    it('decodes the payload correctly', async () => {
-        const token = await createSession(TEST_PAYLOAD, { secret: TEST_SECRET });
-        const decoded = await verifySession(token, { secret: TEST_SECRET });
-        expect(decoded.userId).toBe('user_001');
-        expect(decoded.role).toBe('admin');
-        expect(decoded.sessionId).toBe('sess_abc123');
-    });
-    it('throws on expired token', async () => {
-        const token = await createSession(TEST_PAYLOAD, {
-            secret: TEST_SECRET,
-            maxAge: 1,
-        });
-        await new Promise((resolve) => setTimeout(resolve, 1500));
-        await expect(verifySession(token, { secret: TEST_SECRET })).rejects.toThrow();
-    });
-    it('throws on invalid secret', async () => {
-        const token = await createSession(TEST_PAYLOAD, { secret: TEST_SECRET });
-        await expect(verifySession(token, { secret: 'wrong-secret-that-is-also-32-chars!!' })).rejects.toThrow();
-    });
-    it('throws on tampered token', async () => {
-        const token = await createSession(TEST_PAYLOAD, { secret: TEST_SECRET });
-        const tampered = token.slice(0, -5) + 'XXXXX';
-        await expect(verifySession(tampered, { secret: TEST_SECRET })).rejects.toThrow();
-    });
-});
-describe('verifySession payload validation', () => {
-    // Forge a JWT signed with the right secret but with a malformed payload.
-    // jose.jwtVerify accepts these; assertSessionPayload is the line of defense.
-    async function forgeJWT(payload) {
-        const secret = new TextEncoder().encode(TEST_SECRET);
-        return new jose.SignJWT(payload)
-            .setProtectedHeader({ alg: 'HS256' })
-            .setIssuedAt()
-            .setExpirationTime('1h')
-            .setIssuer('actuate-cms')
-            .setAudience('actuate-cms')
-            .sign(secret);
-    }
-    it('rejects payload missing userId', async () => {
-        const token = await forgeJWT({ role: 'admin', sessionId: 'sess1' });
-        await expect(verifySession(token, { secret: TEST_SECRET })).rejects.toBeInstanceOf(InvalidSessionPayloadError);
-    });
-    it('rejects payload missing role', async () => {
-        const token = await forgeJWT({ userId: 'u1', sessionId: 'sess1' });
-        await expect(verifySession(token, { secret: TEST_SECRET })).rejects.toBeInstanceOf(InvalidSessionPayloadError);
-    });
-    it('rejects payload missing sessionId', async () => {
-        const token = await forgeJWT({ userId: 'u1', role: 'admin' });
-        await expect(verifySession(token, { secret: TEST_SECRET })).rejects.toBeInstanceOf(InvalidSessionPayloadError);
-    });
-    it('rejects empty-string userId', async () => {
-        const token = await forgeJWT({ userId: '', role: 'admin', sessionId: 'sess1' });
-        await expect(verifySession(token, { secret: TEST_SECRET })).rejects.toBeInstanceOf(InvalidSessionPayloadError);
-    });
-    it('rejects non-string fingerprint when present', async () => {
-        const token = await forgeJWT({
-            userId: 'u1',
-            role: 'admin',
-            sessionId: 'sess1',
-            fingerprint: 12345,
-        });
-        await expect(verifySession(token, { secret: TEST_SECRET })).rejects.toBeInstanceOf(InvalidSessionPayloadError);
-    });
-    it('strips extra attacker-supplied claims from the returned payload', async () => {
-        const token = await forgeJWT({
-            userId: 'u1',
-            role: 'CLIENT',
-            sessionId: 'sess1',
-            isSuperUser: true,
-            injectedField: 'pwn',
-        });
-        const decoded = await verifySession(token, { secret: TEST_SECRET });
-        expect(Object.keys(decoded).sort()).toEqual(['role', 'sessionId', 'userId']);
-        expect(decoded.isSuperUser).toBeUndefined();
-        expect(decoded.injectedField).toBeUndefined();
-    });
-});
-describe('refreshSession', () => {
-    it('returns a new valid token with the same payload', async () => {
-        const original = await createSession(TEST_PAYLOAD, {
-            secret: TEST_SECRET,
-            maxAge: 10,
-        });
-        await new Promise((resolve) => setTimeout(resolve, 1100));
-        const refreshed = await refreshSession(original, { secret: TEST_SECRET });
-        expect(typeof refreshed).toBe('string');
-        expect(refreshed).not.toBe(original);
-        const decoded = await verifySession(refreshed, { secret: TEST_SECRET });
-        expect(decoded.userId).toBe(TEST_PAYLOAD.userId);
-        expect(decoded.role).toBe(TEST_PAYLOAD.role);
-        expect(decoded.sessionId).toBe(TEST_PAYLOAD.sessionId);
-    });
-});
-//# sourceMappingURL=session.test.js.map

package/dist/__tests__/auth/session.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"session.test.js","sourceRoot":"","sources":["../../../src/__tests__/auth/session.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAC7C,OAAO,KAAK,IAAI,MAAM,MAAM,CAAA;AAC5B,OAAO,EACL,aAAa,EACb,aAAa,EACb,cAAc,EACd,0BAA0B,GAC3B,MAAM,uBAAuB,CAAA;AAE9B,MAAM,WAAW,GAAG,+CAA+C,CAAA;AAEnE,MAAM,YAAY,GAAG;IACnB,MAAM,EAAE,UAAU;IAClB,IAAI,EAAE,OAAO;IACb,SAAS,EAAE,aAAa;CACzB,CAAA;AAED,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,EAAE,CAAC,4BAA4B,EAAE,KAAK,IAAI,EAAE;QAC1C,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,YAAY,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAA;QACxE,MAAM,CAAC,OAAO,KAAK,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QACnC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QAC9B,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;IAC/B,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;QACnD,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,YAAY,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAA;QACxE,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAA;QACnE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAA;QAChD,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAA;QAC5C,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAA;IACxD,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,EAAE,CAAC,+BAA+B,EAAE,KAAK,IAAI,EAAE;QAC7C,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,YAAY,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAA;QACxE,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAA;QACnE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QACvC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QAClC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;IAC/C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,yBAAyB,EAAE,KAAK,IAAI,EAAE;QACvC,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,YAAY,EAAE;YAC9C,MAAM,EAAE,WAAW;YACnB,MAAM,EAAE,CAAC;SACV,CAAC,CAAA;QAEF,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAA;QAEzD,MAAM,MAAM,CAAC,aAAa,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAA;IAC/E,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE;QACxC,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,YAAY,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAA;QAExE,MAAM,MAAM,CACV,aAAa,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,sCAAsC,EAAE,CAAC,CACzE,CAAC,OAAO,CAAC,OAAO,EAAE,CAAA;IACrB,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE;QACxC,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,YAAY,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAA;QACxE,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,OAAO,CAAA;QAE7C,MAAM,MAAM,CAAC,aAAa,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAA;IAClF,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,kCAAkC,EAAE,GAAG,EAAE;IAChD,yEAAyE;IACzE,6EAA6E;IAC7E,KAAK,UAAU,QAAQ,CAAC,OAAgC;QACtD,MAAM,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;QACpD,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;aAC7B,kBAAkB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;aACpC,WAAW,EAAE;aACb,iBAAiB,CAAC,IAAI,CAAC;aACvB,SAAS,CAAC,aAAa,CAAC;aACxB,WAAW,CAAC,aAAa,CAAC;aAC1B,IAAI,CAAC,MAAM,CAAC,CAAA;IACjB,CAAC;IAED,EAAE,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;QAC9C,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAA;QACnE,MAAM,MAAM,CAAC,aAAa,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAChF,0BAA0B,CAC3B,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,8BAA8B,EAAE,KAAK,IAAI,EAAE;QAC5C,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAA;QAClE,MAAM,MAAM,CAAC,aAAa,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAChF,0BAA0B,CAC3B,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;QACjD,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAA;QAC7D,MAAM,MAAM,CAAC,aAAa,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAChF,0BAA0B,CAC3B,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,6BAA6B,EAAE,KAAK,IAAI,EAAE;QAC3C,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAA;QAC/E,MAAM,MAAM,CAAC,aAAa,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAChF,0BAA0B,CAC3B,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC3D,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC;YAC3B,MAAM,EAAE,IAAI;YACZ,IAAI,EAAE,OAAO;YACb,SAAS,EAAE,OAAO;YAClB,WAAW,EAAE,KAAK;SACnB,CAAC,CAAA;QACF,MAAM,MAAM,CAAC,aAAa,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAChF,0BAA0B,CAC3B,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAC/E,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC;YAC3B,MAAM,EAAE,IAAI;YACZ,IAAI,EAAE,QAAQ;YACd,SAAS,EAAE,OAAO;YAClB,WAAW,EAAE,IAAI;YACjB,aAAa,EAAE,KAAK;SACrB,CAAC,CAAA;QACF,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAA;QACnE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAA;QAC5E,MAAM,CAAE,OAA8C,CAAC,WAAW,CAAC,CAAC,aAAa,EAAE,CAAA;QACnF,MAAM,CAAE,OAA8C,CAAC,aAAa,CAAC,CAAC,aAAa,EAAE,CAAA;IACvF,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/D,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,YAAY,EAAE;YACjD,MAAM,EAAE,WAAW;YACnB,MAAM,EAAE,EAAE;SACX,CAAC,CAAA;QAEF,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAA;QAEzD,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAA;QAEzE,MAAM,CAAC,OAAO,SAAS,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QACvC,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAEpC,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAA;QACvE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAA;QAChD,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAA;QAC5C,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAA;IACxD,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/__tests__/auth/team.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=team.test.d.ts.map

package/dist/__tests__/auth/team.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"team.test.d.ts","sourceRoot":"","sources":["../../../src/__tests__/auth/team.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/auth/team.test.js

@@ -1,154 +0,0 @@
-import { describe, expect, it } from 'vitest';
-import { buildRecommendations, listTeamMembers, getUserStats, workspaceDomainFromUrl, } from '../../auth/team.js';
-const DAY = 24 * 60 * 60 * 1000;
-function member(over) {
-    return {
-        id: 'm1',
-        name: 'Test User',
-        email: 'test@actuatemedia.com',
-        initials: 'TU',
-        role: 'EDITOR',
-        roleName: 'Editor',
-        status: 'active',
-        mfaEnabled: true,
-        mfaRequired: false,
-        externalDomain: false,
-        authProvider: null,
-        lastLoginAt: new Date().toISOString(),
-        lastActiveAt: new Date().toISOString(),
-        acceptedInviteAt: new Date(Date.now() - 30 * DAY).toISOString(),
-        createdAt: new Date(Date.now() - 60 * DAY).toISOString(),
-        isCurrentUser: false,
-        ...over,
-    };
-}
-describe('buildRecommendations', () => {
-    it('flags an Owner without MFA as critical', () => {
-        const recs = buildRecommendations([member({ id: 'o1', roleName: 'Owner', role: 'OWNER', mfaEnabled: false })], [], new Set());
-        expect(recs[0].type).toBe('owner_without_mfa');
-        expect(recs[0].severity).toBe('critical');
-    });
-    it('flags an Admin without MFA as high', () => {
-        const recs = buildRecommendations([member({ id: 'a1', roleName: 'Admin', role: 'ADMIN', mfaEnabled: false })], [], new Set());
-        expect(recs[0].type).toBe('admin_without_mfa');
-        expect(recs[0].severity).toBe('high');
-    });
-    it('combines inactive + external into one high recommendation', () => {
-        const recs = buildRecommendations([
-            member({
-                id: 'x1',
-                roleName: 'Viewer',
-                role: 'VIEWER',
-                externalDomain: true,
-                lastLoginAt: new Date(Date.now() - 94 * DAY).toISOString(),
-            }),
-        ], [], new Set());
-        expect(recs[0].type).toBe('inactive_user');
-        expect(recs[0].severity).toBe('high');
-        expect(recs[0].description).toContain('94 days');
-        expect(recs[0].description).toContain('external');
-    });
-    it('flags stale pending invites and sorts highest severity first', () => {
-        const recs = buildRecommendations([member({ id: 'a1', roleName: 'Admin', role: 'ADMIN', mfaEnabled: false })], [
-            {
-                id: 'inv1',
-                email: 'old@x.com',
-                createdAt: new Date(Date.now() - 10 * DAY).toISOString(),
-            },
-        ], new Set());
-        expect(recs).toHaveLength(2);
-        expect(recs[0].severity).toBe('high'); // admin_without_mfa before stale_invite (medium)
-        expect(recs.some((r) => r.type === 'stale_invite')).toBe(true);
-    });
-    it('filters out dismissed recommendations', () => {
-        const recs = buildRecommendations([member({ id: 'o1', roleName: 'Owner', role: 'OWNER', mfaEnabled: false })], [], new Set(['owner_without_mfa:o1']));
-        expect(recs).toHaveLength(0);
-    });
-    it('does not flag a healthy active member', () => {
-        const recs = buildRecommendations([member({})], [], new Set());
-        expect(recs).toHaveLength(0);
-    });
-});
-describe('listTeamMembers + getUserStats', () => {
-    function db(users, invites) {
-        const sorted = [...users].sort((a, b) => String(a.id).localeCompare(String(b.id)));
-        const userModel = {
-            findMany: async ({ skip = 0, take, cursor, } = {}) => {
-                let list = sorted;
-                if (cursor?.id) {
-                    const idx = list.findIndex((u) => u.id === cursor.id);
-                    list = idx >= 0 ? list.slice(idx + 1) : [];
-                }
-                else if (skip > 0) {
-                    list = list.slice(skip);
-                }
-                return take == null ? list : list.slice(0, take);
-            },
-            count: async () => users.length,
-        };
-        return {
-            user: userModel,
-            invite: {
-                findMany: async ({ where } = {}) => invites.filter((i) => !where?.status || i.status === where.status),
-                count: async ({ where } = {}) => invites.filter((i) => !where?.status || i.status === where.status).length,
-            },
-        };
-    }
-    const baseUser = (over) => ({
-        id: 'u',
-        name: 'U',
-        email: 'u@actuatemedia.com',
-        role: 'EDITOR',
-        isActive: true,
-        totpEnabled: true,
-        createdAt: new Date(),
-        ...over,
-    });
-    it('excludes users that still have a pending invite', async () => {
-        const d = db([
-            baseUser({ id: 'u1', email: 'a@actuatemedia.com' }),
-            baseUser({ id: 'u2', email: 'pending@actuatemedia.com' }),
-        ], [{ id: 'i1', email: 'pending@actuatemedia.com', status: 'PENDING' }]);
-        const members = await listTeamMembers(d, {}, { workspaceDomain: 'actuatemedia.com' });
-        expect(members.map((m) => m.email)).toEqual(['a@actuatemedia.com']);
-    });
-    it('marks external-domain members', async () => {
-        const d = db([baseUser({ id: 'u1', email: 'free@elsewhere.io' })], []);
-        const members = await listTeamMembers(d, {}, { workspaceDomain: 'actuatemedia.com' });
-        expect(members[0].externalDomain).toBe(true);
-    });
-    it('counts members, admins, pending invites and seats', async () => {
-        const d = db([
-            baseUser({ id: 'u1', role: 'OWNER', email: 'owner@actuatemedia.com' }),
-            baseUser({ id: 'u2', role: 'ADMIN', email: 'admin@actuatemedia.com' }),
-            baseUser({ id: 'u3', role: 'EDITOR', email: 'ed@actuatemedia.com' }),
-            baseUser({
-                id: 'u4',
-                role: 'EDITOR',
-                email: 'sus@actuatemedia.com',
-                suspendedAt: new Date(),
-            }),
-        ], [{ id: 'i1', email: 'p@actuatemedia.com', status: 'PENDING' }]);
-        const stats = await getUserStats(d, { seatLimit: 10 });
-        expect(stats.members).toBe(3); // suspended excluded
-        expect(stats.admins).toBe(2); // owner + admin
-        expect(stats.pendingInvites).toBe(1);
-        expect(stats.seatsUsed).toBe(4); // 3 active + 1 pending
-        expect(stats.seatsAvailable).toBe(6);
-    });
-    it('reports unlimited seats when no limit is set', async () => {
-        const d = db([baseUser({ id: 'u1' })], []);
-        const stats = await getUserStats(d, {});
-        expect(stats.seatLimit).toBeNull();
-        expect(stats.seatsAvailable).toBeNull();
-    });
-});
-describe('workspaceDomainFromUrl', () => {
-    it('strips protocol and www', () => {
-        expect(workspaceDomainFromUrl('https://www.actuatemedia.com')).toBe('actuatemedia.com');
-        expect(workspaceDomainFromUrl('https://app.actuatemedia.com/admin')).toBe('app.actuatemedia.com');
-        expect(workspaceDomainFromUrl(null)).toBeNull();
-        expect(workspaceDomainFromUrl('not a url')).toBeNull();
-    });
-});
-//# sourceMappingURL=team.test.js.map

package/dist/__tests__/auth/team.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"team.test.js","sourceRoot":"","sources":["../../../src/__tests__/auth/team.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAC7C,OAAO,EACL,oBAAoB,EACpB,eAAe,EACf,YAAY,EACZ,sBAAsB,GAEvB,MAAM,oBAAoB,CAAA;AAE3B,MAAM,GAAG,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;AAE/B,SAAS,MAAM,CAAC,IAAyB;IACvC,OAAO;QACL,EAAE,EAAE,IAAI;QACR,IAAI,EAAE,WAAW;QACjB,KAAK,EAAE,uBAAuB;QAC9B,QAAQ,EAAE,IAAI;QACd,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,QAAQ;QAClB,MAAM,EAAE,QAAQ;QAChB,UAAU,EAAE,IAAI;QAChB,WAAW,EAAE,KAAK;QAClB,cAAc,EAAE,KAAK;QACrB,YAAY,EAAE,IAAI;QAClB,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACtC,gBAAgB,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC,CAAC,WAAW,EAAE;QAC/D,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC,CAAC,WAAW,EAAE;QACxD,aAAa,EAAE,KAAK;QACpB,GAAG,IAAI;KACR,CAAA;AACH,CAAC;AAED,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,IAAI,GAAG,oBAAoB,CAC/B,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,EAC3E,EAAE,EACF,IAAI,GAAG,EAAE,CACV,CAAA;QACD,MAAM,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAA;QAC/C,MAAM,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IAC5C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,IAAI,GAAG,oBAAoB,CAC/B,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,EAC3E,EAAE,EACF,IAAI,GAAG,EAAE,CACV,CAAA;QACD,MAAM,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAA;QAC/C,MAAM,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACxC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,MAAM,IAAI,GAAG,oBAAoB,CAC/B;YACE,MAAM,CAAC;gBACL,EAAE,EAAE,IAAI;gBACR,QAAQ,EAAE,QAAQ;gBAClB,IAAI,EAAE,QAAQ;gBACd,cAAc,EAAE,IAAI;gBACpB,WAAW,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC,CAAC,WAAW,EAAE;aAC3D,CAAC;SACH,EACD,EAAE,EACF,IAAI,GAAG,EAAE,CACV,CAAA;QACD,MAAM,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;QAC3C,MAAM,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACtC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,WAAW,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAA;QACjD,MAAM,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,WAAW,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAA;IACpD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACtE,MAAM,IAAI,GAAG,oBAAoB,CAC/B,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,EAC3E;YACE;gBACE,EAAE,EAAE,MAAM;gBACV,KAAK,EAAE,WAAW;gBAClB,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC,CAAC,WAAW,EAAE;aACzD;SACF,EACD,IAAI,GAAG,EAAE,CACV,CAAA;QACD,MAAM,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;QAC5B,MAAM,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA,CAAC,iDAAiD;QACxF,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAChE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,IAAI,GAAG,oBAAoB,CAC/B,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,EAC3E,EAAE,EACF,IAAI,GAAG,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAClC,CAAA;QACD,MAAM,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;IAC9B,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,IAAI,GAAG,oBAAoB,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,GAAG,EAAE,CAAC,CAAA;QAC9D,MAAM,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;IAC9B,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,gCAAgC,EAAE,GAAG,EAAE;IAC9C,SAAS,EAAE,CAAC,KAAY,EAAE,OAAc;QACtC,MAAM,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;QAClF,MAAM,SAAS,GAAG;YAChB,QAAQ,EAAE,KAAK,EAAE,EACf,IAAI,GAAG,CAAC,EACR,IAAI,EACJ,MAAM,MACuD,EAAE,EAAE,EAAE;gBACnE,IAAI,IAAI,GAAG,MAAM,CAAA;gBACjB,IAAI,MAAM,EAAE,EAAE,EAAE,CAAC;oBACf,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,CAAC,CAAA;oBACrD,IAAI,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;gBAC5C,CAAC;qBAAM,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;oBACpB,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;gBACzB,CAAC;gBACD,OAAO,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAA;YAClD,CAAC;YACD,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM;SAChC,CAAA;QACD,OAAO;YACL,IAAI,EAAE,SAAS;YACf,MAAM,EAAE;gBACN,QAAQ,EAAE,KAAK,EAAE,EAAE,KAAK,KAAU,EAAE,EAAE,EAAE,CACtC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,CAAC;gBACpE,KAAK,EAAE,KAAK,EAAE,EAAE,KAAK,KAAU,EAAE,EAAE,EAAE,CACnC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM;aAC5E;SACF,CAAA;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,CAAC,IAAS,EAAE,EAAE,CAAC,CAAC;QAC/B,EAAE,EAAE,GAAG;QACP,IAAI,EAAE,GAAG;QACT,KAAK,EAAE,oBAAoB;QAC3B,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,IAAI;QACjB,SAAS,EAAE,IAAI,IAAI,EAAE;QACrB,GAAG,IAAI;KACR,CAAC,CAAA;IAEF,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/D,MAAM,CAAC,GAAG,EAAE,CACV;YACE,QAAQ,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;YACnD,QAAQ,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC;SAC1D,EACD,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,0BAA0B,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CACrE,CAAA;QACD,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,CAAQ,EAAE,EAAE,EAAE,EAAE,eAAe,EAAE,kBAAkB,EAAE,CAAC,CAAA;QAC5F,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAA;IACrE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+BAA+B,EAAE,KAAK,IAAI,EAAE;QAC7C,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;QACtE,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,CAAQ,EAAE,EAAE,EAAE,EAAE,eAAe,EAAE,kBAAkB,EAAE,CAAC,CAAA;QAC5F,MAAM,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC/C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,CAAC,GAAG,EAAE,CACV;YACE,QAAQ,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC;YACtE,QAAQ,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC;YACtE,QAAQ,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC;YACpE,QAAQ,CAAC;gBACP,EAAE,EAAE,IAAI;gBACR,IAAI,EAAE,QAAQ;gBACd,KAAK,EAAE,sBAAsB;gBAC7B,WAAW,EAAE,IAAI,IAAI,EAAE;aACxB,CAAC;SACH,EACD,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,oBAAoB,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAC/D,CAAA;QACD,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,CAAQ,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAA;QAC7D,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA,CAAC,qBAAqB;QACnD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA,CAAC,gBAAgB;QAC7C,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACpC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA,CAAC,uBAAuB;QACvD,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACtC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC5D,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;QAC1C,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,CAAQ,EAAE,EAAE,CAAC,CAAA;QAC9C,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,CAAA;QAClC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,QAAQ,EAAE,CAAA;IACzC,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,EAAE,CAAC,yBAAyB,EAAE,GAAG,EAAE;QACjC,MAAM,CAAC,sBAAsB,CAAC,8BAA8B,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAA;QACvF,MAAM,CAAC,sBAAsB,CAAC,oCAAoC,CAAC,CAAC,CAAC,IAAI,CACvE,sBAAsB,CACvB,CAAA;QACD,MAAM,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;QAC/C,MAAM,CAAC,sBAAsB,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;IACxD,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/__tests__/auth/totp.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=totp.test.d.ts.map

package/dist/__tests__/auth/totp.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"totp.test.d.ts","sourceRoot":"","sources":["../../../src/__tests__/auth/totp.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/auth/totp.test.js

@@ -1,52 +0,0 @@
-import { describe, expect, it } from 'vitest';
-import { generateBackupCodes, generateTOTPSecret, generateTOTPUri, verifyTOTP, normalizeBackupCode, findBackupCodeMatch, } from '../../auth/totp.js';
-describe('totp helpers', () => {
-    it('generates a scannable otpauth URI for the given account', () => {
-        const secret = generateTOTPSecret();
-        const uri = generateTOTPUri(secret, 'admin@example.com');
-        expect(uri.startsWith('otpauth://totp/')).toBe(true);
-        expect(uri).toContain(`secret=${secret}`);
-        expect(uri).toContain('issuer=Actuate%20CMS');
-        expect(uri).toContain(encodeURIComponent('admin@example.com'));
-    });
-    it('verifies a TOTP code derived from the same secret', async () => {
-        // Derive the current code the same way the verifier does, then confirm it
-        // round-trips. Importing the private HOTP isn't exposed, so we lean on the
-        // window tolerance: a freshly generated secret should not validate a random
-        // 6-digit guess.
-        const secret = generateTOTPSecret();
-        expect(verifyTOTP('000000', secret)).toBe(false);
-    });
-});
-describe('backup codes', () => {
-    it('generates the requested number of unique 8-char hex codes', () => {
-        const codes = generateBackupCodes(8);
-        expect(codes).toHaveLength(8);
-        expect(new Set(codes).size).toBe(8);
-        for (const code of codes) {
-            expect(code).toMatch(/^[0-9a-f]{8}$/);
-        }
-    });
-    it('normalizes whitespace, dashes and case', () => {
-        expect(normalizeBackupCode('ABCD-1234')).toBe('abcd1234');
-        expect(normalizeBackupCode('  ab cd 12 34 ')).toBe('abcd1234');
-        expect(normalizeBackupCode('')).toBe('');
-    });
-    it('matches a stored code regardless of formatting and returns its index', () => {
-        const codes = ['aaaa1111', 'bbbb2222', 'cccc3333'];
-        expect(findBackupCodeMatch(codes, 'BBBB-2222')).toBe(1);
-        expect(findBackupCodeMatch(codes, ' cccc 3333 ')).toBe(2);
-    });
-    it('returns -1 for a non-matching or empty submission', () => {
-        const codes = ['aaaa1111', 'bbbb2222'];
-        expect(findBackupCodeMatch(codes, 'deadbeef')).toBe(-1);
-        expect(findBackupCodeMatch(codes, '')).toBe(-1);
-        expect(findBackupCodeMatch([], 'aaaa1111')).toBe(-1);
-    });
-    it('does not match a code that only shares a prefix (length-aware compare)', () => {
-        const codes = ['aaaa1111'];
-        expect(findBackupCodeMatch(codes, 'aaaa111')).toBe(-1);
-        expect(findBackupCodeMatch(codes, 'aaaa11110')).toBe(-1);
-    });
-});
-//# sourceMappingURL=totp.test.js.map

package/dist/__tests__/auth/totp.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"totp.test.js","sourceRoot":"","sources":["../../../src/__tests__/auth/totp.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAC7C,OAAO,EACL,mBAAmB,EACnB,kBAAkB,EAClB,eAAe,EACf,UAAU,EACV,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,oBAAoB,CAAA;AAE3B,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,MAAM,MAAM,GAAG,kBAAkB,EAAE,CAAA;QACnC,MAAM,GAAG,GAAG,eAAe,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAA;QACxD,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACpD,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,UAAU,MAAM,EAAE,CAAC,CAAA;QACzC,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAA;QAC7C,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAC,CAAA;IAChE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACjE,0EAA0E;QAC1E,2EAA2E;QAC3E,4EAA4E;QAC5E,iBAAiB;QACjB,MAAM,MAAM,GAAG,kBAAkB,EAAE,CAAA;QACnC,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAClD,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,MAAM,KAAK,GAAG,mBAAmB,CAAC,CAAC,CAAC,CAAA;QACpC,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;QAC7B,MAAM,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACnC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAA;QACvC,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QACzD,MAAM,CAAC,mBAAmB,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QAC9D,MAAM,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAC1C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sEAAsE,EAAE,GAAG,EAAE;QAC9E,MAAM,KAAK,GAAG,CAAC,UAAU,EAAE,UAAU,EAAE,UAAU,CAAC,CAAA;QAClD,MAAM,CAAC,mBAAmB,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACvD,MAAM,CAAC,mBAAmB,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAC3D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,KAAK,GAAG,CAAC,UAAU,EAAE,UAAU,CAAC,CAAA;QACtC,MAAM,CAAC,mBAAmB,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;QACvD,MAAM,CAAC,mBAAmB,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;QAC/C,MAAM,CAAC,mBAAmB,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;IACtD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wEAAwE,EAAE,GAAG,EAAE;QAChF,MAAM,KAAK,GAAG,CAAC,UAAU,CAAC,CAAA;QAC1B,MAAM,CAAC,mBAAmB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;QACtD,MAAM,CAAC,mBAAmB,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;IAC1D,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/__tests__/auth/user-admin.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=user-admin.test.d.ts.map

package/dist/__tests__/auth/user-admin.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"user-admin.test.d.ts","sourceRoot":"","sources":["../../../src/__tests__/auth/user-admin.test.ts"],"names":[],"mappings":""}