@antelopejs/dms 0.5.6 → 0.6.1

package/dist/utils/sign-in-devices.js

@@ -0,0 +1,43 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.describeSignInDevice = describeSignInDevice;
+exports.classifySignIn = classifySignIn;
+const FINGERPRINT_SEPARATOR = "|";
+const DEVICE_PART_COUNT = 3;
+function describeSignInDevice(parsed, country) {
+    const browser = parsed.browserName.trim();
+    const os = parsed.osName.trim();
+    const parts = [browser, os, parsed.deviceType];
+    if (country)
+        parts.push(country);
+    const fingerprint = parts
+        .map((part) => part.toLowerCase())
+        .join(FINGERPRINT_SEPARATOR);
+    return { fingerprint, browser, os, country };
+}
+function splitFingerprint(fingerprint) {
+    const parts = fingerprint.split(FINGERPRINT_SEPARATOR);
+    return {
+        device: parts.slice(0, DEVICE_PART_COUNT).join(FINGERPRINT_SEPARATOR),
+        country: parts[DEVICE_PART_COUNT] || undefined,
+    };
+}
+function vouchesFor(entry, signIn) {
+    const known = splitFingerprint(entry);
+    return (known.device === signIn.device &&
+        (signIn.country === undefined || known.country === signIn.country));
+}
+function classifySignIn(fingerprint, history) {
+    const signIn = splitFingerprint(fingerprint);
+    const isKnown = [
+        ...history.knownFingerprints,
+        ...history.sessionFingerprints,
+    ].some((entry) => vouchesFor(entry, signIn));
+    if (isKnown)
+        return "known";
+    const hasHistory = history.hasBeenActive ||
+        history.knownFingerprints.length > 0 ||
+        history.sessionFingerprints.length > 0;
+    return hasHistory ? "new" : "first";
+}
+//# sourceMappingURL=sign-in-devices.js.map

package/dist/utils/sign-in-devices.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sign-in-devices.js","sourceRoot":"","sources":["../../src/utils/sign-in-devices.ts"],"names":[],"mappings":";;AAkDA,oDAYC;AAqBD,wCAeC;AA7FD,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAElC,MAAM,iBAAiB,GAAG,CAAC,CAAC;AA2C5B,SAAgB,oBAAoB,CAClC,MAAuB,EACvB,OAAgB;IAEhB,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;IAC1C,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAChC,MAAM,KAAK,GAAG,CAAC,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;IAC/C,IAAI,OAAO;QAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACjC,MAAM,WAAW,GAAG,KAAK;SACtB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;SACjC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IAC/B,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC;AAC/C,CAAC;AAED,SAAS,gBAAgB,CAAC,WAAmB;IAC3C,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;IACvD,OAAO;QACL,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC;QACrE,OAAO,EAAE,KAAK,CAAC,iBAAiB,CAAC,IAAI,SAAS;KAC/C,CAAC;AACJ,CAAC;AAKD,SAAS,UAAU,CAAC,KAAa,EAAE,MAAwB;IACzD,MAAM,KAAK,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACtC,OAAO,CACL,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM;QAC9B,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO,CAAC,CACnE,CAAC;AACJ,CAAC;AAED,SAAgB,cAAc,CAC5B,WAAmB,EACnB,OAAsB;IAEtB,MAAM,MAAM,GAAG,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAC7C,MAAM,OAAO,GAAG;QACd,GAAG,OAAO,CAAC,iBAAiB;QAC5B,GAAG,OAAO,CAAC,mBAAmB;KAC/B,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;IAC7C,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC;IAC5B,MAAM,UAAU,GACd,OAAO,CAAC,aAAa;QACrB,OAAO,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC;QACpC,OAAO,CAAC,mBAAmB,CAAC,MAAM,GAAG,CAAC,CAAC;IACzC,OAAO,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC;AACtC,CAAC"}

package/dist/utils/sign-in-monitor.d.ts

@@ -0,0 +1,6 @@
+import { type User } from "@antelopejs/interface-dms/auth/db";
+import { type ClientOrigin } from "./sign-in-country";
+export declare function recordSignIn(user: User, userAgent: string, origin: ClientOrigin): Promise<void>;
+export declare function rememberSignInDevice(userId: string, userAgent: string, origin: ClientOrigin): Promise<void>;
+export declare function recordFailedPassword(user: User): Promise<void>;
+export declare function clearFailedPasswords(userId: string): Promise<void>;

package/dist/utils/sign-in-monitor.js

@@ -0,0 +1,90 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.recordSignIn = recordSignIn;
+exports.rememberSignInDevice = rememberSignInDevice;
+exports.recordFailedPassword = recordFailedPassword;
+exports.clearFailedPasswords = clearFailedPasswords;
+const logging_1 = require("@antelopejs/interface-core/logging");
+const interface_database_decorators_1 = require("@antelopejs/interface-database-decorators");
+const db_1 = require("@antelopejs/interface-dms/auth/db");
+const signInAttempts_model_1 = require("../db/models/signInAttempts.model");
+const userKnownDevices_model_1 = require("../db/models/userKnownDevices.model");
+const account_notifications_1 = require("./account-notifications");
+const failed_sign_ins_1 = require("./failed-sign-ins");
+const sign_in_country_1 = require("./sign-in-country");
+const sign_in_devices_1 = require("./sign-in-devices");
+const user_agent_1 = require("./user-agent");
+const fire_and_forget_1 = require("@antelopejs/interface-dms/utils/fire-and-forget");
+const MS_PER_MINUTE = 60 * 1000;
+const ATTEMPT_RETENTION_MS = 24 * 60 * MS_PER_MINUTE;
+function logFailure(what, userId, error) {
+    logging_1.Logging.Error(`[DMS] Could not ${what} for "${userId}": ${String(error)}`);
+}
+async function openSessionFingerprints(userId) {
+    const sessions = await (0, interface_database_decorators_1.GetModel)(db_1.SessionModel).getByUserId(userId);
+    return sessions.map((session) => (0, sign_in_devices_1.describeSignInDevice)((0, user_agent_1.parseUserAgent)(session.userAgent), (0, sign_in_country_1.lookupCountry)(session.ip)).fingerprint);
+}
+async function recordSignIn(user, userAgent, origin) {
+    try {
+        const device = (0, sign_in_devices_1.describeSignInDevice)((0, user_agent_1.parseUserAgent)(userAgent), origin.country);
+        const [knownFingerprints, sessionFingerprints] = await Promise.all([
+            (0, interface_database_decorators_1.GetModel)(userKnownDevices_model_1.UserKnownDevicesModel).listFingerprints(user._id),
+            openSessionFingerprints(user._id),
+        ]);
+        const kind = (0, sign_in_devices_1.classifySignIn)(device.fingerprint, {
+            knownFingerprints,
+            sessionFingerprints,
+            hasBeenActive: Boolean(user.lastActiveAt),
+        });
+        await (0, interface_database_decorators_1.GetModel)(userKnownDevices_model_1.UserKnownDevicesModel).remember(user._id, device.fingerprint, new Date());
+        if (kind === "new")
+            (0, fire_and_forget_1.fireAndForget)((0, account_notifications_1.notifyNewLogin)(user, device), "new sign-in notification");
+    }
+    catch (error) {
+        logFailure("record the sign-in device", user._id, error);
+    }
+}
+async function rememberSignInDevice(userId, userAgent, origin) {
+    try {
+        const device = (0, sign_in_devices_1.describeSignInDevice)((0, user_agent_1.parseUserAgent)(userAgent), origin.country);
+        await (0, interface_database_decorators_1.GetModel)(userKnownDevices_model_1.UserKnownDevicesModel).remember(userId, device.fingerprint, new Date());
+    }
+    catch (error) {
+        logFailure("remember the sign-up device", userId, error);
+    }
+}
+async function alertOnBurst(user, now) {
+    const attempts = (0, interface_database_decorators_1.GetModel)(signInAttempts_model_1.SignInAttemptsModel);
+    const records = await attempts.listBurst(user._id, new Date(now.getTime() - failed_sign_ins_1.FAILED_SIGN_IN_WINDOW_MS), failed_sign_ins_1.FAILED_SIGN_IN_THRESHOLD);
+    const { failures, alertKey } = (0, failed_sign_ins_1.evaluateFailedSignIns)(records, now);
+    if (alertKey === undefined)
+        return;
+    if (!(await attempts.claimAlert(user._id, alertKey, now)))
+        return;
+    await (0, account_notifications_1.notifyFailedSignIns)(user._id, {
+        count: failures,
+        windowMinutes: failed_sign_ins_1.FAILED_SIGN_IN_WINDOW_MS / MS_PER_MINUTE,
+        hasTwoFactor: (user.twoFactorMethods?.length ?? 0) > 0,
+    });
+}
+async function recordFailedPassword(user) {
+    try {
+        const now = new Date();
+        const attempts = (0, interface_database_decorators_1.GetModel)(signInAttempts_model_1.SignInAttemptsModel);
+        await attempts.recordFailure(user._id, now);
+        await attempts.pruneBefore(user._id, new Date(now.getTime() - ATTEMPT_RETENTION_MS));
+        await alertOnBurst(user, now);
+    }
+    catch (error) {
+        logFailure("record the failed sign-in", user._id, error);
+    }
+}
+async function clearFailedPasswords(userId) {
+    try {
+        await (0, interface_database_decorators_1.GetModel)(signInAttempts_model_1.SignInAttemptsModel).clearFailures(userId);
+    }
+    catch (error) {
+        logFailure("clear the failed sign-ins", userId, error);
+    }
+}
+//# sourceMappingURL=sign-in-monitor.js.map

package/dist/utils/sign-in-monitor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sign-in-monitor.js","sourceRoot":"","sources":["../../src/utils/sign-in-monitor.ts"],"names":[],"mappings":";;AA6CA,oCA6BC;AAGD,oDAkBC;AAyBD,oDAaC;AAGD,oDAMC;AA9ID,gEAA6D;AAC7D,6FAAqE;AACrE,0DAA4E;AAC5E,4EAAwE;AACxE,gFAA4E;AAC5E,mEAA8E;AAC9E,uDAI2B;AAC3B,uDAAqE;AACrE,uDAAyE;AACzE,6CAA8C;AAC9C,qFAAgF;AAEhF,MAAM,aAAa,GAAG,EAAE,GAAG,IAAI,CAAC;AAEhC,MAAM,oBAAoB,GAAG,EAAE,GAAG,EAAE,GAAG,aAAa,CAAC;AAErD,SAAS,UAAU,CAAC,IAAY,EAAE,MAAc,EAAE,KAAc;IAC9D,iBAAO,CAAC,KAAK,CAAC,mBAAmB,IAAI,SAAS,MAAM,MAAM,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AAC7E,CAAC;AAED,KAAK,UAAU,uBAAuB,CAAC,MAAc;IACnD,MAAM,QAAQ,GAAG,MAAM,IAAA,wCAAQ,EAAC,iBAAY,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAClE,OAAO,QAAQ,CAAC,GAAG,CACjB,CAAC,OAAO,EAAE,EAAE,CACV,IAAA,sCAAoB,EAClB,IAAA,2BAAc,EAAC,OAAO,CAAC,SAAS,CAAC,EACjC,IAAA,+BAAa,EAAC,OAAO,CAAC,EAAE,CAAC,CAC1B,CAAC,WAAW,CAChB,CAAC;AACJ,CAAC;AAYM,KAAK,UAAU,YAAY,CAChC,IAAU,EACV,SAAiB,EACjB,MAAoB;IAEpB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAA,sCAAoB,EACjC,IAAA,2BAAc,EAAC,SAAS,CAAC,EACzB,MAAM,CAAC,OAAO,CACf,CAAC;QACF,MAAM,CAAC,iBAAiB,EAAE,mBAAmB,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACjE,IAAA,wCAAQ,EAAC,8CAAqB,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC;YAC1D,uBAAuB,CAAC,IAAI,CAAC,GAAG,CAAC;SAClC,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,IAAA,gCAAc,EAAC,MAAM,CAAC,WAAW,EAAE;YAC9C,iBAAiB;YACjB,mBAAmB;YACnB,aAAa,EAAE,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC;SAC1C,CAAC,CAAC;QACH,MAAM,IAAA,wCAAQ,EAAC,8CAAqB,CAAC,CAAC,QAAQ,CAC5C,IAAI,CAAC,GAAG,EACR,MAAM,CAAC,WAAW,EAClB,IAAI,IAAI,EAAE,CACX,CAAC;QACF,IAAI,IAAI,KAAK,KAAK;YAChB,IAAA,+BAAa,EAAC,IAAA,sCAAc,EAAC,IAAI,EAAE,MAAM,CAAC,EAAE,0BAA0B,CAAC,CAAC;IAC5E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,UAAU,CAAC,2BAA2B,EAAE,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC3D,CAAC;AACH,CAAC;AAGM,KAAK,UAAU,oBAAoB,CACxC,MAAc,EACd,SAAiB,EACjB,MAAoB;IAEpB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAA,sCAAoB,EACjC,IAAA,2BAAc,EAAC,SAAS,CAAC,EACzB,MAAM,CAAC,OAAO,CACf,CAAC;QACF,MAAM,IAAA,wCAAQ,EAAC,8CAAqB,CAAC,CAAC,QAAQ,CAC5C,MAAM,EACN,MAAM,CAAC,WAAW,EAClB,IAAI,IAAI,EAAE,CACX,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,UAAU,CAAC,6BAA6B,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IAC3D,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAAU,EAAE,GAAS;IAC/C,MAAM,QAAQ,GAAG,IAAA,wCAAQ,EAAC,0CAAmB,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,SAAS,CACtC,IAAI,CAAC,GAAG,EACR,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,0CAAwB,CAAC,EAClD,0CAAwB,CACzB,CAAC;IACF,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,IAAA,uCAAqB,EAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACnE,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO;IACnC,IAAI,CAAC,CAAC,MAAM,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;QAAE,OAAO;IAClE,MAAM,IAAA,2CAAmB,EAAC,IAAI,CAAC,GAAG,EAAE;QAClC,KAAK,EAAE,QAAQ;QACf,aAAa,EAAE,0CAAwB,GAAG,aAAa;QACvD,YAAY,EAAE,CAAC,IAAI,CAAC,gBAAgB,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC;KACvD,CAAC,CAAC;AACL,CAAC;AAQM,KAAK,UAAU,oBAAoB,CAAC,IAAU;IACnD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,IAAA,wCAAQ,EAAC,0CAAmB,CAAC,CAAC;QAC/C,MAAM,QAAQ,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC5C,MAAM,QAAQ,CAAC,WAAW,CACxB,IAAI,CAAC,GAAG,EACR,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,oBAAoB,CAAC,CAC/C,CAAC;QACF,MAAM,YAAY,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAChC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,UAAU,CAAC,2BAA2B,EAAE,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC3D,CAAC;AACH,CAAC;AAGM,KAAK,UAAU,oBAAoB,CAAC,MAAc;IACvD,IAAI,CAAC;QACH,MAAM,IAAA,wCAAQ,EAAC,0CAAmB,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;IAC5D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,UAAU,CAAC,2BAA2B,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IACzD,CAAC;AACH,CAAC"}

package/dist/utils/user-activity.d.ts

@@ -0,0 +1,4 @@
+import type { User, UserModel } from "@antelopejs/interface-dms/auth/db";
+export declare const USER_ACTIVITY_WRITE_INTERVAL_MS: number;
+export declare function isActivityWriteDue(lastActiveAt: Date | null | undefined, now: Date): boolean;
+export declare function recordUserActivity(userModel: UserModel, user: User, now?: Date): void;

package/dist/utils/user-activity.js

@@ -0,0 +1,22 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.USER_ACTIVITY_WRITE_INTERVAL_MS = void 0;
+exports.isActivityWriteDue = isActivityWriteDue;
+exports.recordUserActivity = recordUserActivity;
+const logging_1 = require("@antelopejs/interface-core/logging");
+exports.USER_ACTIVITY_WRITE_INTERVAL_MS = 60 * 1000;
+function isActivityWriteDue(lastActiveAt, now) {
+    if (!lastActiveAt)
+        return true;
+    const elapsed = now.getTime() - new Date(lastActiveAt).getTime();
+    return elapsed >= exports.USER_ACTIVITY_WRITE_INTERVAL_MS;
+}
+function recordUserActivity(userModel, user, now = new Date()) {
+    if (!isActivityWriteDue(user.lastActiveAt, now))
+        return;
+    user.lastActiveAt = now;
+    userModel.update(user).catch((error) => {
+        logging_1.Logging.Warn(`[dms] could not record the activity of "${user._id}"`, error);
+    });
+}
+//# sourceMappingURL=user-activity.js.map

package/dist/utils/user-activity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-activity.js","sourceRoot":"","sources":["../../src/utils/user-activity.ts"],"names":[],"mappings":";;;AAgBA,gDAOC;AAUD,gDAYC;AA7CD,gEAA6D;AAQhD,QAAA,+BAA+B,GAAG,EAAE,GAAG,IAAI,CAAC;AAQzD,SAAgB,kBAAkB,CAChC,YAAqC,EACrC,GAAS;IAET,IAAI,CAAC,YAAY;QAAE,OAAO,IAAI,CAAC;IAC/B,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE,CAAC;IACjE,OAAO,OAAO,IAAI,uCAA+B,CAAC;AACpD,CAAC;AAUD,SAAgB,kBAAkB,CAChC,SAAoB,EACpB,IAAU,EACV,MAAY,IAAI,IAAI,EAAE;IAEtB,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,CAAC;QAAE,OAAO;IACxD,IAAI,CAAC,YAAY,GAAG,GAAG,CAAC;IAGxB,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;QAC9C,iBAAO,CAAC,IAAI,CAAC,2CAA2C,IAAI,CAAC,GAAG,GAAG,EAAE,KAAK,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/utils/user-agent.d.ts

@@ -1,3 +1,3 @@
-import type { ParsedUserAgent } from "@antelopejs/interface-dms/auth";
-export type { DeviceType, ParsedUserAgent, } from "@antelopejs/interface-dms/auth";
+import type { ParsedUserAgent } from "@antelopejs/interface-dms/auth/internal/user-agent";
+export type { DeviceType, ParsedUserAgent, } from "@antelopejs/interface-dms/auth/internal/user-agent";
 export declare function parseUserAgent(userAgent: string): ParsedUserAgent;

package/dist/utils/workspace-notifications.d.ts

@@ -0,0 +1,28 @@
+export interface NotificationActor {
+    id: string;
+    name: string;
+}
+export declare function notifyCollaboratorJoined(ownerIds: string[], name: string, email: string): Promise<void>;
+export type NotifiedInviteOutcome = "accepted" | "expired";
+export declare function notifyInviteOutcome(tenantId: string, decisionId: string, outcome: NotifiedInviteOutcome): Promise<void>;
+export interface MemberRemoval {
+    tenantId: string;
+    removedUserId: string;
+    actor: NotificationActor;
+}
+export declare function notifyMemberRemoved({ tenantId, removedUserId, actor, }: MemberRemoval): Promise<void>;
+export interface MemberRolesChange {
+    tenantId: string;
+    userId: string;
+    roleIds: readonly string[];
+    actor: NotificationActor;
+}
+export declare function notifyRolesChanged({ tenantId, userId, roleIds, actor, }: MemberRolesChange): Promise<void>;
+export declare function notifyOwnershipChanged(userId: string, isOwner: boolean, actor: NotificationActor): Promise<void>;
+export interface RolePermissionsEdit {
+    tenantId: string;
+    roleId: string;
+    roleName: string;
+    actor: NotificationActor;
+}
+export declare function notifyRolePermissionsChanged(edit: RolePermissionsEdit): Promise<void>;

package/dist/utils/workspace-notifications.js

@@ -0,0 +1,184 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.notifyCollaboratorJoined = notifyCollaboratorJoined;
+exports.notifyInviteOutcome = notifyInviteOutcome;
+exports.notifyMemberRemoved = notifyMemberRemoved;
+exports.notifyRolesChanged = notifyRolesChanged;
+exports.notifyOwnershipChanged = notifyOwnershipChanged;
+exports.notifyRolePermissionsChanged = notifyRolePermissionsChanged;
+const logging_1 = require("@antelopejs/interface-core/logging");
+const interface_database_1 = require("@antelopejs/interface-database");
+const interface_database_decorators_1 = require("@antelopejs/interface-database-decorators");
+const db_1 = require("@antelopejs/interface-dms/auth/db");
+const db_2 = require("@antelopejs/interface-dms/db");
+const inviteResolutions_model_1 = require("@antelopejs/interface-dms/db/internal/inviteResolutions.model");
+const notifications_1 = require("@antelopejs/interface-dms/notifications");
+const userNotifications_model_1 = require("../db/models/userNotifications.model");
+const notification_emitter_1 = require("./notification-emitter");
+const notification_rules_1 = require("./notification-rules");
+const notification_tones_1 = require("./notification-tones");
+const MESSAGES_PREFIX = "$dms.notifications.messages";
+const ROLE_NAME_SEPARATOR = ", ";
+const EDITING_SESSION_LOOKBACK_MS = 24 * 60 * 60 * 1000;
+function workspaceTemplate(messageId, icon, linkTo, { subject = notifications_1.CollaborationSubject, tone = "neutral" } = {}) {
+    return { icon, subject, messageId, linkTo, tone };
+}
+const templates = {
+    collaboratorJoined: workspaceTemplate("collaborator_joined", "i-ph-user-plus", notification_emitter_1.NOTIFICATION_LINKS.members),
+    inviteAccepted: workspaceTemplate("invite_accepted", "i-ph-user-check", notification_emitter_1.NOTIFICATION_LINKS.members, { tone: "success" }),
+    inviteExpired: workspaceTemplate("invite_expired", "i-ph-clock-countdown", notification_emitter_1.NOTIFICATION_LINKS.invites, { tone: "primary" }),
+    memberRemoved: workspaceTemplate("member_removed", "i-ph-user-minus", notification_emitter_1.NOTIFICATION_LINKS.members),
+    rolePermissionsChanged: workspaceTemplate("role_permissions_changed", "i-ph-key", notification_emitter_1.NOTIFICATION_LINKS.roles, { tone: "primary" }),
+    rolesChanged: workspaceTemplate("roles_changed", "i-ph-identification-badge", notification_emitter_1.NOTIFICATION_LINKS.settings, { subject: notifications_1.AccountSubject }),
+    ownershipGranted: workspaceTemplate("ownership_granted", "i-ph-crown", notification_emitter_1.NOTIFICATION_LINKS.members, { subject: notifications_1.AccountSubject }),
+    ownershipRemoved: workspaceTemplate("ownership_removed", "i-ph-crown-simple", notification_emitter_1.NOTIFICATION_LINKS.settings, { subject: notifications_1.AccountSubject, tone: "warning" }),
+};
+async function tenantOwnerIds(tenantId) {
+    const owners = await (0, interface_database_decorators_1.GetModel)(db_2.TenantMemberModel, tenantId).listOwners();
+    return owners.map((owner) => owner.userId);
+}
+async function resolveInviterToNotify(resolution) {
+    const inviterId = resolution.invite.invitedBy;
+    if (!inviterId || inviterId === resolution.userId)
+        return undefined;
+    const isMember = await (0, interface_database_decorators_1.GetModel)(db_2.TenantMemberModel, resolution.tenantId).existsByUser(inviterId);
+    return isMember ? inviterId : undefined;
+}
+async function findNotifiedInviters(userId) {
+    const memberships = await (0, interface_database_decorators_1.GetModel)(db_2.TenantMemberModel, interface_database_1.CROSS_INSTANCE).listByUserWithTenantIds(userId);
+    const inviters = await Promise.all(memberships.map(async ({ tenantId, member }) => {
+        if (!member.inviteDeliveryId)
+            return undefined;
+        const resolution = await (0, interface_database_decorators_1.GetModel)(inviteResolutions_model_1.InviteResolutionsModel, tenantId).get(member.inviteDeliveryId);
+        return resolution ? resolveInviterToNotify(resolution) : undefined;
+    }));
+    return inviters.filter((id) => id !== undefined);
+}
+async function ownersToTellOfJoin(ownerIds, email) {
+    try {
+        const joined = await (0, interface_database_decorators_1.GetModel)(db_1.UserModel).getByEmail(email.toLowerCase());
+        if (!joined)
+            return ownerIds;
+        const inviters = await findNotifiedInviters(joined._id);
+        return (0, notification_rules_1.ownersToNotifyOfJoin)(ownerIds, inviters, joined._id);
+    }
+    catch (error) {
+        logging_1.Logging.Error(`[DMS] Could not tell the inviter of "${email}" apart from the owners: ${String(error)}`);
+        return ownerIds;
+    }
+}
+async function notifyCollaboratorJoined(ownerIds, name, email) {
+    const recipients = await ownersToTellOfJoin(ownerIds, email);
+    await (0, notification_emitter_1.emitNotificationToEach)(recipients, templates.collaboratorJoined, {
+        params: { name: name || email, email },
+    });
+}
+function inviteeName(resolution, joinedName) {
+    const { firstname, lastname, email } = resolution.invite;
+    const invitedAs = [firstname, lastname].filter(Boolean).join(" ");
+    return joinedName || invitedAs || email;
+}
+async function notifyInviteAccepted(inviterId, resolution, idempotencyKey) {
+    const joined = resolution.userId
+        ? await (0, interface_database_decorators_1.GetModel)(db_1.UserModel).get(resolution.userId)
+        : undefined;
+    const email = joined?.email ?? resolution.invite.email;
+    await (0, notification_emitter_1.emitNotification)(inviterId, templates.inviteAccepted, {
+        params: { name: inviteeName(resolution, joined?.name), email },
+        idempotencyKey,
+    });
+}
+async function notifyInviteExpired(inviterId, resolution, idempotencyKey) {
+    await (0, notification_emitter_1.emitNotification)(inviterId, templates.inviteExpired, {
+        params: { email: resolution.invite.email },
+        idempotencyKey,
+    });
+}
+const INVITE_OUTCOME_SENDERS = {
+    accepted: notifyInviteAccepted,
+    expired: notifyInviteExpired,
+};
+async function notifyInviteOutcome(tenantId, decisionId, outcome) {
+    const resolution = await (0, interface_database_decorators_1.GetModel)(inviteResolutions_model_1.InviteResolutionsModel, tenantId).get(decisionId);
+    if (!resolution)
+        return;
+    const inviterId = await resolveInviterToNotify(resolution);
+    if (!inviterId)
+        return;
+    await INVITE_OUTCOME_SENDERS[outcome](inviterId, resolution, `dms:invite-${outcome}:${decisionId}`);
+}
+async function notifyMemberRemoved({ tenantId, removedUserId, actor, }) {
+    const recipients = (0, notification_rules_1.recipientsExcept)(await tenantOwnerIds(tenantId), [
+        actor.id,
+        removedUserId,
+    ]);
+    if (recipients.length === 0)
+        return;
+    const removed = await (0, interface_database_decorators_1.GetModel)(db_1.UserModel).get(removedUserId);
+    const email = removed?.email ?? "";
+    await (0, notification_emitter_1.emitNotificationToEach)(recipients, templates.memberRemoved, {
+        params: { name: removed?.name || email, email, actor: actor.name },
+    });
+}
+const ROLE_COUNT_TITLE_KEYS = {
+    0: "title_none",
+    1: "title_one",
+};
+async function roleNamesInOrder(tenantId, roleIds) {
+    if (roleIds.length === 0)
+        return [];
+    const roles = await (0, interface_database_decorators_1.GetModel)(db_2.RoleModel, tenantId).getBy("_id", ...roleIds);
+    const names = new Map(roles.map((role) => [role._id, role.name]));
+    return roleIds.flatMap((id) => names.get(id) ?? []);
+}
+async function notifyRolesChanged({ tenantId, userId, roleIds, actor, }) {
+    const names = await roleNamesInOrder(tenantId, roleIds);
+    const template = {
+        ...templates.rolesChanged,
+        tone: (0, notification_tones_1.rolesChangedTone)(names.length),
+    };
+    await (0, notification_emitter_1.emitNotification)(userId, template, {
+        titleKey: ROLE_COUNT_TITLE_KEYS[names.length] ?? "title",
+        params: { roles: names.join(ROLE_NAME_SEPARATOR), actor: actor.name },
+    });
+}
+async function notifyOwnershipChanged(userId, isOwner, actor) {
+    await (0, notification_emitter_1.emitNotification)(userId, isOwner ? templates.ownershipGranted : templates.ownershipRemoved, { params: { actor: actor.name } });
+}
+async function continueEditingSession(ownerId, edit, now) {
+    const [latest] = await (0, interface_database_decorators_1.GetModel)(userNotifications_model_1.UserNotificationsModel).findMatching(ownerId, `${MESSAGES_PREFIX}.${templates.rolePermissionsChanged.messageId}.title`, { roleId: edit.roleId, actorId: edit.actor.id }, new Date(now.getTime() - EDITING_SESSION_LOOKBACK_MS));
+    const editedAt = Number(latest?.params?.editedAt);
+    if (!latest || !(0, notification_rules_1.isWithinEditingSession)(new Date(editedAt), now)) {
+        return false;
+    }
+    await (0, interface_database_decorators_1.GetModel)(userNotifications_model_1.UserNotificationsModel).update(latest._id, {
+        params: { ...latest.params, role: edit.roleName, editedAt: now.getTime() },
+    });
+    return true;
+}
+async function notifyRoleOwner(ownerId, edit, now) {
+    if (await continueEditingSession(ownerId, edit, now))
+        return;
+    await (0, notification_emitter_1.emitNotification)(ownerId, templates.rolePermissionsChanged, {
+        params: {
+            role: edit.roleName,
+            actor: edit.actor.name,
+            roleId: edit.roleId,
+            actorId: edit.actor.id,
+            editedAt: now.getTime(),
+        },
+    });
+}
+async function notifyRolePermissionsChanged(edit) {
+    try {
+        const recipients = (0, notification_rules_1.recipientsExcept)(await tenantOwnerIds(edit.tenantId), [
+            edit.actor.id,
+        ]);
+        const now = new Date();
+        await Promise.all(recipients.map((ownerId) => notifyRoleOwner(ownerId, edit, now)));
+    }
+    catch (error) {
+        logging_1.Logging.Error(`[DMS] Could not tell the owners of "${edit.tenantId}" that role "${edit.roleId}" changed: ${String(error)}`);
+    }
+}
+//# sourceMappingURL=workspace-notifications.js.map

package/dist/utils/workspace-notifications.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-notifications.js","sourceRoot":"","sources":["../../src/utils/workspace-notifications.ts"],"names":[],"mappings":";;AAiKA,4DASC;AAqDD,kDAgBC;AAUD,kDAeC;AAyBD,gDAeC;AAGD,wDAUC;AA2DD,oEAgBC;AAxYD,gEAA6D;AAC7D,uEAAgE;AAChE,6FAAqE;AACrE,0DAA8D;AAC9D,qDAIsC;AACtC,2GAAuG;AACvG,2EAGiD;AAEjD,kFAA8E;AAC9E,iEAKgC;AAChC,6DAI8B;AAC9B,6DAAwD;AAExD,MAAM,eAAe,GAAG,6BAA6B,CAAC;AAOtD,MAAM,mBAAmB,GAAG,IAAI,CAAC;AAEjC,MAAM,2BAA2B,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAExD,SAAS,iBAAiB,CACxB,SAAiB,EACjB,IAAY,EACZ,MAAc,EACd,EAAE,OAAO,GAAG,oCAAoB,EAAE,IAAI,GAAG,SAAS,KAAsB,EAAE;IAE1E,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AACpD,CAAC;AAED,MAAM,SAAS,GAAG;IAChB,kBAAkB,EAAE,iBAAiB,CACnC,qBAAqB,EACrB,gBAAgB,EAChB,yCAAkB,CAAC,OAAO,CAC3B;IACD,cAAc,EAAE,iBAAiB,CAC/B,iBAAiB,EACjB,iBAAiB,EACjB,yCAAkB,CAAC,OAAO,EAC1B,EAAE,IAAI,EAAE,SAAS,EAAE,CACpB;IACD,aAAa,EAAE,iBAAiB,CAC9B,gBAAgB,EAChB,sBAAsB,EACtB,yCAAkB,CAAC,OAAO,EAC1B,EAAE,IAAI,EAAE,SAAS,EAAE,CACpB;IACD,aAAa,EAAE,iBAAiB,CAC9B,gBAAgB,EAChB,iBAAiB,EACjB,yCAAkB,CAAC,OAAO,CAC3B;IACD,sBAAsB,EAAE,iBAAiB,CACvC,0BAA0B,EAC1B,UAAU,EACV,yCAAkB,CAAC,KAAK,EACxB,EAAE,IAAI,EAAE,SAAS,EAAE,CACpB;IACD,YAAY,EAAE,iBAAiB,CAC7B,eAAe,EACf,2BAA2B,EAC3B,yCAAkB,CAAC,QAAQ,EAC3B,EAAE,OAAO,EAAE,8BAAc,EAAE,CAC5B;IACD,gBAAgB,EAAE,iBAAiB,CACjC,mBAAmB,EACnB,YAAY,EACZ,yCAAkB,CAAC,OAAO,EAC1B,EAAE,OAAO,EAAE,8BAAc,EAAE,CAC5B;IACD,gBAAgB,EAAE,iBAAiB,CACjC,mBAAmB,EACnB,mBAAmB,EACnB,yCAAkB,CAAC,QAAQ,EAC3B,EAAE,OAAO,EAAE,8BAAc,EAAE,IAAI,EAAE,SAAS,EAAE,CAC7C;CAC6C,CAAC;AAQjD,KAAK,UAAU,cAAc,CAAC,QAAgB;IAC5C,MAAM,MAAM,GAAG,MAAM,IAAA,wCAAQ,EAAC,sBAAiB,EAAE,QAAQ,CAAC,CAAC,UAAU,EAAE,CAAC;IACxE,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;AAC7C,CAAC;AAMD,KAAK,UAAU,sBAAsB,CACnC,UAA4B;IAE5B,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC;IAC9C,IAAI,CAAC,SAAS,IAAI,SAAS,KAAK,UAAU,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IACpE,MAAM,QAAQ,GAAG,MAAM,IAAA,wCAAQ,EAC7B,sBAAiB,EACjB,UAAU,CAAC,QAAQ,CACpB,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;IAC1B,OAAO,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1C,CAAC;AAGD,KAAK,UAAU,oBAAoB,CAAC,MAAc;IAChD,MAAM,WAAW,GAAG,MAAM,IAAA,wCAAQ,EAChC,sBAAiB,EACjB,mCAAc,CACf,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC;IAClC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAChC,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE;QAC7C,IAAI,CAAC,MAAM,CAAC,gBAAgB;YAAE,OAAO,SAAS,CAAC;QAC/C,MAAM,UAAU,GAAG,MAAM,IAAA,wCAAQ,EAAC,gDAAsB,EAAE,QAAQ,CAAC,CAAC,GAAG,CACrE,MAAM,CAAC,gBAAgB,CACxB,CAAC;QACF,OAAO,UAAU,CAAC,CAAC,CAAC,sBAAsB,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACrE,CAAC,CAAC,CACH,CAAC;IACF,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,EAAgB,EAAE,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC;AACjE,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,QAAkB,EAClB,KAAa;IAEb,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,IAAA,wCAAQ,EAAC,cAAS,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;QACzE,IAAI,CAAC,MAAM;YAAE,OAAO,QAAQ,CAAC;QAC7B,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACxD,OAAO,IAAA,yCAAoB,EAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;IAC9D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,iBAAO,CAAC,KAAK,CACX,wCAAwC,KAAK,4BAA4B,MAAM,CAAC,KAAK,CAAC,EAAE,CACzF,CAAC;QACF,OAAO,QAAQ,CAAC;IAClB,CAAC;AACH,CAAC;AAGM,KAAK,UAAU,wBAAwB,CAC5C,QAAkB,EAClB,IAAY,EACZ,KAAa;IAEb,MAAM,UAAU,GAAG,MAAM,kBAAkB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC7D,MAAM,IAAA,6CAAsB,EAAC,UAAU,EAAE,SAAS,CAAC,kBAAkB,EAAE;QACrE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,IAAI,KAAK,EAAE,KAAK,EAAE;KACvC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,WAAW,CAClB,UAA4B,EAC5B,UAAmB;IAEnB,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,UAAU,CAAC,MAAM,CAAC;IACzD,MAAM,SAAS,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAClE,OAAO,UAAU,IAAI,SAAS,IAAI,KAAK,CAAC;AAC1C,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,SAAiB,EACjB,UAA4B,EAC5B,cAAsB;IAEtB,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM;QAC9B,CAAC,CAAC,MAAM,IAAA,wCAAQ,EAAC,cAAS,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC;QAClD,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,KAAK,GAAG,MAAM,EAAE,KAAK,IAAI,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC;IACvD,MAAM,IAAA,uCAAgB,EAAC,SAAS,EAAE,SAAS,CAAC,cAAc,EAAE;QAC1D,MAAM,EAAE,EAAE,IAAI,EAAE,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,KAAK,EAAE;QAC9D,cAAc;KACf,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,mBAAmB,CAChC,SAAiB,EACjB,UAA4B,EAC5B,cAAsB;IAEtB,MAAM,IAAA,uCAAgB,EAAC,SAAS,EAAE,SAAS,CAAC,aAAa,EAAE;QACzD,MAAM,EAAE,EAAE,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE;QAC1C,cAAc;KACf,CAAC,CAAC;AACL,CAAC;AAKD,MAAM,sBAAsB,GAGxB;IACF,QAAQ,EAAE,oBAAoB;IAC9B,OAAO,EAAE,mBAAmB;CAC7B,CAAC;AAOK,KAAK,UAAU,mBAAmB,CACvC,QAAgB,EAChB,UAAkB,EAClB,OAA8B;IAE9B,MAAM,UAAU,GAAG,MAAM,IAAA,wCAAQ,EAAC,gDAAsB,EAAE,QAAQ,CAAC,CAAC,GAAG,CACrE,UAAU,CACX,CAAC;IACF,IAAI,CAAC,UAAU;QAAE,OAAO;IACxB,MAAM,SAAS,GAAG,MAAM,sBAAsB,CAAC,UAAU,CAAC,CAAC;IAC3D,IAAI,CAAC,SAAS;QAAE,OAAO;IACvB,MAAM,sBAAsB,CAAC,OAAO,CAAC,CACnC,SAAS,EACT,UAAU,EACV,cAAc,OAAO,IAAI,UAAU,EAAE,CACtC,CAAC;AACJ,CAAC;AAUM,KAAK,UAAU,mBAAmB,CAAC,EACxC,QAAQ,EACR,aAAa,EACb,KAAK,GACS;IACd,MAAM,UAAU,GAAG,IAAA,qCAAgB,EAAC,MAAM,cAAc,CAAC,QAAQ,CAAC,EAAE;QAClE,KAAK,CAAC,EAAE;QACR,aAAa;KACd,CAAC,CAAC;IACH,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IACpC,MAAM,OAAO,GAAG,MAAM,IAAA,wCAAQ,EAAC,cAAS,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAC7D,MAAM,KAAK,GAAG,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC;IACnC,MAAM,IAAA,6CAAsB,EAAC,UAAU,EAAE,SAAS,CAAC,aAAa,EAAE;QAChE,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,IAAI,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE;KACnE,CAAC,CAAC;AACL,CAAC;AAED,MAAM,qBAAqB,GAAqC;IAC9D,CAAC,EAAE,YAAY;IACf,CAAC,EAAE,WAAW;CACf,CAAC;AAEF,KAAK,UAAU,gBAAgB,CAC7B,QAAgB,EAChB,OAA0B;IAE1B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACpC,MAAM,KAAK,GAAG,MAAM,IAAA,wCAAQ,EAAC,cAAS,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,OAAO,CAAC,CAAC;IAC3E,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClE,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;AACtD,CAAC;AAUM,KAAK,UAAU,kBAAkB,CAAC,EACvC,QAAQ,EACR,MAAM,EACN,OAAO,EACP,KAAK,GACa;IAClB,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACxD,MAAM,QAAQ,GAAG;QACf,GAAG,SAAS,CAAC,YAAY;QACzB,IAAI,EAAE,IAAA,qCAAgB,EAAC,KAAK,CAAC,MAAM,CAAC;KACrC,CAAC;IACF,MAAM,IAAA,uCAAgB,EAAC,MAAM,EAAE,QAAQ,EAAE;QACvC,QAAQ,EAAE,qBAAqB,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,OAAO;QACxD,MAAM,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE;KACtE,CAAC,CAAC;AACL,CAAC;AAGM,KAAK,UAAU,sBAAsB,CAC1C,MAAc,EACd,OAAgB,EAChB,KAAwB;IAExB,MAAM,IAAA,uCAAgB,EACpB,MAAM,EACN,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC,gBAAgB,EACjE,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,CAClC,CAAC;AACJ,CAAC;AAgBD,KAAK,UAAU,sBAAsB,CACnC,OAAe,EACf,IAAyB,EACzB,GAAS;IAET,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,IAAA,wCAAQ,EAAC,gDAAsB,CAAC,CAAC,YAAY,CAClE,OAAO,EACP,GAAG,eAAe,IAAI,SAAS,CAAC,sBAAsB,CAAC,SAAS,QAAQ,EACxE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,EAC/C,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,2BAA2B,CAAC,CACtD,CAAC;IACF,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IAClD,IAAI,CAAC,MAAM,IAAI,CAAC,IAAA,2CAAsB,EAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;QAChE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,IAAA,wCAAQ,EAAC,gDAAsB,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE;QACxD,MAAM,EAAE,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE;KAC3E,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,OAAe,EACf,IAAyB,EACzB,GAAS;IAET,IAAI,MAAM,sBAAsB,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC;QAAE,OAAO;IAC7D,MAAM,IAAA,uCAAgB,EAAC,OAAO,EAAE,SAAS,CAAC,sBAAsB,EAAE;QAChE,MAAM,EAAE;YACN,IAAI,EAAE,IAAI,CAAC,QAAQ;YACnB,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI;YACtB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE;YACtB,QAAQ,EAAE,GAAG,CAAC,OAAO,EAAE;SACxB;KACF,CAAC,CAAC;AACL,CAAC;AAOM,KAAK,UAAU,4BAA4B,CAChD,IAAyB;IAEzB,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,IAAA,qCAAgB,EAAC,MAAM,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE;YACvE,IAAI,CAAC,KAAK,CAAC,EAAE;SACd,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,OAAO,CAAC,GAAG,CACf,UAAU,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,eAAe,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CACjE,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,iBAAO,CAAC,KAAK,CACX,uCAAuC,IAAI,CAAC,QAAQ,gBAAgB,IAAI,CAAC,MAAM,cAAc,MAAM,CAAC,KAAK,CAAC,EAAE,CAC7G,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/validation/account-deletion.schema.d.ts

@@ -0,0 +1,12 @@
+import * as z from "zod";
+export declare const accountDeletionSchema: z.ZodObject<{
+    password: z.ZodOptional<z.ZodString>;
+    confirmation: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    confirmation: string;
+    password?: string | undefined;
+}, {
+    confirmation: string;
+    password?: string | undefined;
+}>;
+export type AccountDeletionInput = z.infer<typeof accountDeletionSchema>;

package/dist/validation/account-deletion.schema.js

@@ -0,0 +1,44 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.accountDeletionSchema = void 0;
+const z = __importStar(require("zod"));
+const MAX_CURRENT_PASSWORD_LENGTH = 1024;
+const MAX_EMAIL_LENGTH = 320;
+exports.accountDeletionSchema = z.object({
+    password: z.string().min(1).max(MAX_CURRENT_PASSWORD_LENGTH).optional(),
+    confirmation: z.string().min(1).max(MAX_EMAIL_LENGTH),
+});
+//# sourceMappingURL=account-deletion.schema.js.map

package/dist/validation/account-deletion.schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-deletion.schema.js","sourceRoot":"","sources":["../../src/validation/account-deletion.schema.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,uCAAyB;AAGzB,MAAM,2BAA2B,GAAG,IAAI,CAAC;AAEzC,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAOhB,QAAA,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC,QAAQ,EAAE;IACvE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC;CACtD,CAAC,CAAC"}

package/dist/validation/auth.schema.d.ts

@@ -58,6 +58,13 @@ export declare const authSchema: {
     }, {
         token: string;
     }>;
+    sessionHandoff: z.ZodObject<{
+        token: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        token: string;
+    }, {
+        token: string;
+    }>;
     logout: z.ZodObject<{
         token: z.ZodString;
     }, "strip", z.ZodTypeAny, {

package/dist/validation/auth.schema.js

@@ -62,6 +62,9 @@ exports.authSchema = {
     refresh: z.object({
         token: z.string(),
     }),
+    sessionHandoff: z.object({
+        token: z.string().min(1),
+    }),
     logout: z.object({
         token: z.string(),
     }),

package/dist/validation/auth.schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.schema.js","sourceRoot":"","sources":["../../src/validation/auth.schema.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,uCAAyB;AAEzB,yCAA4C;AAE5C,MAAM,+BAA+B,GAAG,IAAI,CAAC;AAC7C,MAAM,uBAAuB,GAAG,EAAE,CAAC;AACnC,MAAM,uBAAuB,GAAG,GAAG,CAAC;AAEvB,QAAA,UAAU,GAAG;IACxB,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;QACzB,QAAQ,EAAE,yBAAc;QACxB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC3B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;KAClB,CAAC;IACF,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC;QACd,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;QACzB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;QACpB,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;KACnC,CAAC;IACF,aAAa,EAAE,CAAC,CAAC,MAAM,CAAC;QACtB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,+BAA+B,CAAC;QAC5D,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,+BAA+B,CAAC;QAC7D,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,+BAA+B,CAAC;QACpE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,QAAQ,EAAE;QAC5D,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,QAAQ,EAAE;KAC3D,CAAC;IACF,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;KAClB,CAAC;IACF,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;KAClB,CAAC;IACF,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;KAClB,CAAC;IACF,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;KAC1B,CAAC;IACF,2BAA2B,EAAE,CAAC,CAAC,MAAM,CAAC;QACpC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;QACjB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;KAC1B,CAAC;IACF,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC;QACd,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;QACjB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;QACzB,QAAQ,EAAE,yBAAc;KACzB,CAAC;IACF,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC;QAClB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;QACjB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;KAC5C,CAAC;IACF,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC;QACxB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;KAClB,CAAC;IACF,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;KACjB,CAAC;IACF,gBAAgB,EAAE,CAAC,CAAC,MAAM,CAAC;QACzB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACjC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;KACjB,CAAC;IACF,gBAAgB,EAAE,CAAC,CAAC,MAAM,CAAC;QACzB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;KACjB,CAAC;CACH,CAAC"}
+{"version":3,"file":"auth.schema.js","sourceRoot":"","sources":["../../src/validation/auth.schema.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,uCAAyB;AAEzB,yCAA4C;AAE5C,MAAM,+BAA+B,GAAG,IAAI,CAAC;AAC7C,MAAM,uBAAuB,GAAG,EAAE,CAAC;AACnC,MAAM,uBAAuB,GAAG,GAAG,CAAC;AAEvB,QAAA,UAAU,GAAG;IACxB,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;QACzB,QAAQ,EAAE,yBAAc;QACxB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC3B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;KAClB,CAAC;IACF,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC;QACd,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;QACzB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;QACpB,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;KACnC,CAAC;IACF,aAAa,EAAE,CAAC,CAAC,MAAM,CAAC;QACtB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,+BAA+B,CAAC;QAC5D,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,+BAA+B,CAAC;QAC7D,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,+BAA+B,CAAC;QACpE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,QAAQ,EAAE;QAC5D,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,QAAQ,EAAE;KAC3D,CAAC;IACF,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;KAClB,CAAC;IACF,cAAc,EAAE,CAAC,CAAC,MAAM,CAAC;QACvB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;KACzB,CAAC;IACF,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;KAClB,CAAC;IACF,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;KAClB,CAAC;IACF,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;KAC1B,CAAC;IACF,2BAA2B,EAAE,CAAC,CAAC,MAAM,CAAC;QACpC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;QACjB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;KAC1B,CAAC;IACF,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC;QACd,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;QACjB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;QACzB,QAAQ,EAAE,yBAAc;KACzB,CAAC;IACF,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC;QAClB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;QACjB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;KAC5C,CAAC;IACF,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC;QACxB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;KAClB,CAAC;IACF,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;KACjB,CAAC;IACF,gBAAgB,EAAE,CAAC,CAAC,MAAM,CAAC;QACzB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACjC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;KACjB,CAAC;IACF,gBAAgB,EAAE,CAAC,CAAC,MAAM,CAAC;QACzB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;KACjB,CAAC;CACH,CAAC"}

package/dist/validation/member-invite.schema.d.ts

@@ -1,7 +1,10 @@
 import { z } from "zod";
 export declare const INVITE_NAME_MAX_LENGTH = 100;
-export declare const memberInviteSchema: z.ZodEffects<z.ZodEffects<z.ZodObject<{
-    email: z.ZodString;
+export declare const INVITE_FULL_NAME_MAX_LENGTH: number;
+export declare const INVITE_EMAILS_MAX = 50;
+export declare const memberInviteSchema: z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodObject<{
+    emails: z.ZodArray<z.ZodString, "many">;
+    name: z.ZodOptional<z.ZodString>;
     firstname: z.ZodOptional<z.ZodString>;
     lastname: z.ZodOptional<z.ZodString>;
     roles: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
@@ -9,51 +12,73 @@ export declare const memberInviteSchema: z.ZodEffects<z.ZodEffects<z.ZodObject<{
     asTenantOwner: z.ZodBoolean;
     skipEmailValidation: z.ZodDefault<z.ZodBoolean>;
 }, "strip", z.ZodTypeAny, {
-    email: string;
     language: string;
     asTenantOwner: boolean;
     skipEmailValidation: boolean;
+    emails: string[];
+    name?: string | undefined;
     roles?: string[] | undefined;
     firstname?: string | undefined;
     lastname?: string | undefined;
 }, {
-    email: string;
     language: string;
     asTenantOwner: boolean;
+    emails: string[];
+    name?: string | undefined;
     roles?: string[] | undefined;
     firstname?: string | undefined;
     lastname?: string | undefined;
     skipEmailValidation?: boolean | undefined;
 }>, {
-    email: string;
     language: string;
     asTenantOwner: boolean;
     skipEmailValidation: boolean;
+    emails: string[];
+    name?: string | undefined;
     roles?: string[] | undefined;
     firstname?: string | undefined;
     lastname?: string | undefined;
 }, {
-    email: string;
     language: string;
     asTenantOwner: boolean;
+    emails: string[];
+    name?: string | undefined;
     roles?: string[] | undefined;
     firstname?: string | undefined;
     lastname?: string | undefined;
     skipEmailValidation?: boolean | undefined;
 }>, {
-    email: string;
     language: string;
     asTenantOwner: boolean;
     skipEmailValidation: boolean;
+    emails: string[];
+    name?: string | undefined;
     roles?: string[] | undefined;
     firstname?: string | undefined;
     lastname?: string | undefined;
 }, {
-    email: string;
     language: string;
     asTenantOwner: boolean;
+    emails: string[];
+    name?: string | undefined;
     roles?: string[] | undefined;
     firstname?: string | undefined;
     lastname?: string | undefined;
     skipEmailValidation?: boolean | undefined;
-}>;
+}>, {
+    language: string;
+    asTenantOwner: boolean;
+    skipEmailValidation: boolean;
+    emails: string[];
+    name?: string | undefined;
+    roles?: string[] | undefined;
+    firstname?: string | undefined;
+    lastname?: string | undefined;
+}, unknown>;
+export type MemberInvitePayload = z.infer<typeof memberInviteSchema>;
+export interface InviteeNameParts {
+    firstname?: string;
+    lastname?: string;
+}
+export declare function resolveInviteeNameParts(payload: Pick<MemberInvitePayload, "name" | "firstname" | "lastname">): InviteeNameParts;
+export declare function uniqueInviteEmails(emails: readonly string[]): string[];