@antelopejs/interface-dms 0.10.4 → 0.12.0

package/CHANGELOG.md

@@ -1,5 +1,24 @@
 # Changelog
 
+## v0.12.0
+
+[compare changes](https://github.com/AntelopeJS/dms/compare/interface-v0.10.4...v0.12.0)
+
+### 📖 Documentation
+
+- **readme:** Start the demos with npx @antelopejs/core ([#753](https://github.com/AntelopeJS/dms/pull/753))
+- **readme:** Show the Meet and DMS films, with new GIFs ([1e3f7694](https://github.com/AntelopeJS/dms/commit/1e3f7694))
+- **readme:** Link the read-only live demo ([#665](https://github.com/AntelopeJS/dms/pull/665))
+
+### 🏡 Chore
+
+- **release:** @antelopejs/dms v0.15.1 ([c8651b86](https://github.com/AntelopeJS/dms/commit/c8651b86))
+- Land the cleanup campaign on main ([#761](https://github.com/AntelopeJS/dms/pull/761))
+
+### ❤️ Contributors
+
+- Antony Rizzitelli ([@Upd4ting](http://github.com/Upd4ting))
+
 ## v0.10.4
 
 [compare changes](https://github.com/AntelopeJS/dms/compare/interface-v0.10.3...v0.10.4)

package/README.md

@@ -1,11 +1,11 @@
 <div align="center">
 
-# @antelopejs/interface-dms
+# `@antelopejs/interface-dms`
 
-<a href="https://www.npmjs.com/package/@antelopejs/interface-dms"><img alt="npm" src="https://img.shields.io/npm/v/@antelopejs/interface-dms?style=for-the-badge&labelColor=000000&color=000000"></a>
-<a href="./LICENSE"><img alt="License" src="https://img.shields.io/npm/l/@antelopejs/interface-dms?style=for-the-badge&labelColor=000000&color=000000"></a>
-<a href="https://discord.gg/g4pFt6eXqu"><img alt="Discord" src="https://img.shields.io/badge/Discord-18181B?logo=discord&style=for-the-badge&color=000000"></a>
-<a href="https://dms.antelopejs.com/docs/interfaces"><img alt="Documentation" src="https://img.shields.io/badge/Docs-18181B?style=for-the-badge&color=000000"></a>
+<a href="https://www.npmjs.com/package/@antelopejs/interface-dms"><img alt="npm" src="https://img.shields.io/npm/v/@antelopejs/interface-dms?style=for-the-badge&labelColor=000000&color=000000" data-illustration></a>
+<a href="./LICENSE"><img alt="License" src="https://img.shields.io/npm/l/@antelopejs/interface-dms?style=for-the-badge&labelColor=000000&color=000000" data-illustration></a>
+<a href="https://discord.gg/g4pFt6eXqu"><img alt="Discord" src="https://img.shields.io/badge/Discord-18181B?logo=discord&style=for-the-badge&color=000000" data-illustration></a>
+<a href="https://dms.antelopejs.com/docs/interfaces"><img alt="Documentation" src="https://img.shields.io/badge/Docs-18181B?style=for-the-badge&color=000000" data-illustration></a>
 
 The public contracts of the AntelopeJS DMS: pages and components, permissions and tenancy, authentication, notifications and HTML rendering.
 
@@ -27,7 +27,7 @@ Add the interface to the module that extends the DMS:
 pnpm add @antelopejs/interface-dms
 ```
 
-Depend on it with a wide range, such as `>=0.7.0 <1.0.0`, and never bundle or vendor it: the host and every module must resolve the same installed copy, since the package holds live registries. `@antelopejs/core` fails at startup with `Incompatible interface package resolution` when a module resolves another copy.
+Depend on it with a range wide enough that every module shares one installed copy, and never bundle or vendor it: the host and every module must resolve the same installed copy, since the package holds live registries. `@antelopejs/core` fails at startup with `Incompatible interface package resolution` when a module resolves another copy.
 
 ## Quick start
 
@@ -56,10 +56,21 @@ export class SalesPage extends PageController("sales", {
 
 ## Compatibility
 
-| `@antelopejs/interface-dms` | `@antelopejs/dms` (implementation) |
-| --- | --- |
-| 0.7 | 0.9 |
-| 0.6 | 0.8 |
+<!-- antelopejs-docs-compat:start -->
+
+| Package                                     | Supported         | Tested with |
+| ------------------------------------------- | ----------------- | ----------- |
+| `@antelopejs/interface-api`                 | `>=0.3.0 <1.0.0`  | `0.2.0`     |
+| `@antelopejs/interface-api-util`            | `>=0.1.3 <1.0.0`  | `0.3.0`     |
+| `@antelopejs/interface-core`                | `>=0.4.0 <1.0.0`  | `0.4.0`     |
+| `@antelopejs/interface-data-api`            | `>=0.6.0 <1.0.0`  | `0.6.0`     |
+| `@antelopejs/interface-database`            | `>=0.1.11 <1.0.0` | `0.3.0`     |
+| `@antelopejs/interface-database-decorators` | `>=0.1.12 <1.0.0` | `0.2.0`     |
+| `@antelopejs/interface-file-storage`        | `>=0.1.4 <1.0.0`  | `0.1.4`     |
+
+<!-- antelopejs-docs-compat:end -->
+
+A `@antelopejs/dms` release implements the `@antelopejs/interface-dms` range listed in the compatibility block of the [`dms` README](../dms/README.md#compatibility).
 
 ## Documentation
 

package/dist/attachments.d.ts

@@ -23,9 +23,19 @@ export interface AttachmentSaveRequest {
     submitted: Record<string, unknown>;
     before: Record<string, unknown>;
 }
-/** @internal */
+/**
+ * Table-view proxy that promotes the files of a `new`, `edit` or `delete` route.
+ * It answers nothing: the wrapper returns the wrapped route's own answer.
+ * A declared attachment field that nests more than 64 levels deep (the body is
+ * level 1) is refused with a 400 "The JSON body nests more than 64 levels deep."
+ * at every depth. The attachment save path checks it, and the guard decoder
+ * counts depth iteratively before any schema parse. Measured on a table-view
+ * `new`, arrays and objects answered 400 from 65 levels up to 100,000.
+ *
+ * @internal
+ */
 export declare namespace internal {
-    const SaveTableViewAttachments: (request: TableViewAttachmentSaveRequest) => Promise<unknown>;
+    const SaveTableViewAttachments: (request: TableViewAttachmentSaveRequest) => Promise<void>;
 }
 type AttachmentSaver = <T>(request: AttachmentSaveRequest, save: (promoted: Record<string, unknown>) => Promise<AttachmentSaveResult<T>>) => Promise<T>;
 /**
@@ -36,6 +46,9 @@ type AttachmentSaver = <T>(request: AttachmentSaveRequest, save: (promoted: Reco
  * another save may reference them. Retained objects keep their declared visibility.
  * Removed files are deleted after successful persistence; cleanup errors are logged.
  * This is not reference-counted cleanup: callers own the risk of shared keys.
+ * A declared attachment field that nests more than 64 levels deep (the body is
+ * level 1) is refused with a 400 "The JSON body nests more than 64 levels deep."
+ * before any file is touched.
  */
 export declare const SaveComponentFiles: AttachmentSaver;
 /**

package/dist/attachments.js

@@ -2,7 +2,17 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.GetAttachmentValidationMetadata = exports.SaveComponentFiles = exports.internal = void 0;
 const interface_core_1 = require("@antelopejs/interface-core");
-/** @internal */
+/**
+ * Table-view proxy that promotes the files of a `new`, `edit` or `delete` route.
+ * It answers nothing: the wrapper returns the wrapped route's own answer.
+ * A declared attachment field that nests more than 64 levels deep (the body is
+ * level 1) is refused with a 400 "The JSON body nests more than 64 levels deep."
+ * at every depth. The attachment save path checks it, and the guard decoder
+ * counts depth iteratively before any schema parse. Measured on a table-view
+ * `new`, arrays and objects answered 400 from 65 levels up to 100,000.
+ *
+ * @internal
+ */
 var internal;
 (function (internal) {
     internal.SaveTableViewAttachments = (0, interface_core_1.InterfaceFunction)();
@@ -15,6 +25,9 @@ var internal;
  * another save may reference them. Retained objects keep their declared visibility.
  * Removed files are deleted after successful persistence; cleanup errors are logged.
  * This is not reference-counted cleanup: callers own the risk of shared keys.
+ * A declared attachment field that nests more than 64 levels deep (the body is
+ * level 1) is refused with a 400 "The JSON body nests more than 64 levels deep."
+ * before any file is touched.
  */
 exports.SaveComponentFiles = 
 // oxlint-disable-next-line anti-slop/require-safety-comment-for-type-assertion -- InterfaceFunction erases the callback/result generic correlation; the published proxy must retain AttachmentSaver's generic call signature.

package/dist/attachments.js.map

@@ -1 +1 @@
-{"version":3,"file":"attachments.js","sourceRoot":"","sources":["../src/attachments.ts"],"names":[],"mappings":";;;AACA,+DAA+D;AAmC/D,gBAAgB;AAChB,IAAiB,QAAQ,CAKxB;AALD,WAAiB,QAAQ;IACV,iCAAwB,GAAG,IAAA,kCAAiB,GAGtD,CAAC;AACN,CAAC,EALgB,QAAQ,wBAAR,QAAQ,QAKxB;AAQD;;;;;;;;GAQG;AACU,QAAA,kBAAkB;AAC7B,8NAA8N;AAC9N,IAAA,kCAAiB,GAAsC,CAAC;AAE1D;;;;GAIG;AACU,QAAA,+BAA+B,GAC1C,IAAA,kCAAiB,GAEd,CAAC"}
+{"version":3,"file":"attachments.js","sourceRoot":"","sources":["../src/attachments.ts"],"names":[],"mappings":";;;AACA,+DAA+D;AAmC/D;;;;;;;;;;GAUG;AACH,IAAiB,QAAQ,CAKxB;AALD,WAAiB,QAAQ;IACV,iCAAwB,GACnC,IAAA,kCAAiB,GAEd,CAAC;AACR,CAAC,EALgB,QAAQ,wBAAR,QAAQ,QAKxB;AAQD;;;;;;;;;;;GAWG;AACU,QAAA,kBAAkB;AAC7B,8NAA8N;AAC9N,IAAA,kCAAiB,GAAsC,CAAC;AAE1D;;;;GAIG;AACU,QAAA,+BAA+B,GAC1C,IAAA,kCAAiB,GAEd,CAAC"}

package/dist/auth/db/models/sessions.model.d.ts

@@ -12,18 +12,20 @@ declare const SessionModel_base: {
         readonly table: import("@antelopejs/interface-database").Table<Session>;
         readonly database: import("@antelopejs/interface-database").SchemaInstance<any>;
         get(id: string): PromiseLike<Session | undefined>;
-        getBy(index: keyof Session, ...keys: any[]): PromiseLike<Session[]>;
+        getBy(index: keyof Session, ...keys: import("@antelopejs/interface-database-decorators").IndexKey[]): PromiseLike<Session[]>;
         getAll(): PromiseLike<Session[]>;
         insert(obj: import("@antelopejs/interface-database-decorators").DeepPartial<Session> | import("@antelopejs/interface-database-decorators").DeepPartial<Session>[], options?: import("@antelopejs/interface-database-decorators").ValidateOptions): Promise<string[]>;
         update(id: string, obj: import("@antelopejs/interface-database-decorators").DeepPartial<Session>, options?: import("@antelopejs/interface-database-decorators").ValidateOptions): Promise<number>;
-        update(obj: import("@antelopejs/interface-database-decorators").DeepPartial<Session>, options?: import("@antelopejs/interface-database-decorators").ValidateOptions): Promise<number>;
+        update(obj: import("@antelopejs/interface-database-decorators").DeepPartial<Session> & {
+            _id: string;
+        }, options?: import("@antelopejs/interface-database-decorators").ValidateOptions): Promise<number>;
         delete(id: string): Promise<number>;
     };
-    readonly schemaName: string;
+    readonly schemaName: string | undefined;
     readonly tableClass: import("@antelopejs/interface-database-decorators").Constructible<Session>;
-    fromPlainData(obj: any): Session;
+    fromPlainData(obj: Session | import("@antelopejs/interface-database-decorators").PlainData<Session>): Session;
     fromDatabase(obj: any): Session | undefined;
-    toDatabase(obj: any): Record<string, any>;
+    toDatabase(obj: Session | import("@antelopejs/interface-database-decorators").PlainData<Session>): import("@antelopejs/interface-database-decorators").StoredRow<Session>;
     validate(obj: unknown, options?: import("@antelopejs/interface-database-decorators").ValidateInputOptions): import("@antelopejs/interface-database-decorators").ValidationResult;
 };
 export declare class SessionModel extends SessionModel_base {

package/dist/auth/db/models/sessions.model.js

@@ -6,13 +6,6 @@ const node_crypto_1 = require("node:crypto");
 const interface_database_decorators_1 = require("@antelopejs/interface-database-decorators");
 const sessions_table_1 = require("../tables/sessions.table");
 const sessions_model_1 = require("../internal/sessions.model");
-function updatedRows(result) {
-    // oxlint-disable-next-line anti-slop/no-runtime-typeof -- Database adapters return either a numeric count or a write result; preserve both accepted result representations.
-    if (typeof result === "number")
-        return result;
-    const counts = result;
-    return Number(counts?.replaced ?? counts?.modifiedCount ?? 0);
-}
 const SEAL_ALGORITHM = "aes-256-gcm";
 const SEAL_IV_BYTES = 12;
 const SEAL_ENCODING = "base64";
@@ -70,7 +63,7 @@ function recoverSuccessor(session, presentedToken) {
 class SessionModel extends (0, interface_database_decorators_1.BasicDataModel)(sessions_table_1.Session, sessions_table_1.SESSIONS_TABLE_NAME) {
     /** Atomically rotates a token or resolves its immediate predecessor. */
     async rotateRefreshToken(sessionId, presentedToken, refreshToken, rotatedAt = new Date()) {
-        const result = await this.table
+        const modified = await this.table
             .getAll(sessionId)
             .filter((row) => row.key("refreshTokenHash").eq((0, sessions_model_1.hashRefreshToken)(presentedToken)))
             .update({
@@ -81,7 +74,7 @@ class SessionModel extends (0, interface_database_decorators_1.BasicDataModel)(s
             lastActiveAt: rotatedAt,
         })
             .run();
-        if (updatedRows(result) > 0)
+        if (modified > 0)
             return refreshToken;
         const session = await this.get(sessionId);
         if (!session ||

package/dist/auth/db/models/sessions.model.js.map

@@ -1 +1 @@
-{"version":3,"file":"sessions.model.js","sourceRoot":"","sources":["../../../../src/auth/db/models/sessions.model.ts"],"names":[],"mappings":";;;AA6EA,sDAQC;AArFD,6CAKqB;AACrB,6FAA2E;AAC3E,6DAAwE;AACxE,+DAIoC;AAOpC,SAAS,WAAW,CAClB,MAEC;IAED,4KAA4K;IAC5K,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC;IAC9C,MAAM,MAAM,GAA6B,MAAM,CAAC;IAChD,OAAO,MAAM,CAAC,MAAM,EAAE,QAAQ,IAAI,MAAM,EAAE,aAAa,IAAI,CAAC,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,cAAc,GAAG,aAAa,CAAC;AACrC,MAAM,aAAa,GAAG,EAAE,CAAC;AACzB,MAAM,aAAa,GAAG,QAAQ,CAAC;AAC/B,MAAM,cAAc,GAAG,GAAG,CAAC;AAC3B,MAAM,eAAe,GAAG,wBAAwB,CAAC;AACjD,MAAM,oBAAoB,GAAG,cAAc,CAAC;AAC5C,MAAM,iBAAiB,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;AAEtC,SAAS,OAAO,CAAC,WAAmB;IAClC,OAAO,IAAA,wBAAU,EAAC,QAAQ,CAAC;SACxB,MAAM,CAAC,eAAe,GAAG,WAAW,CAAC;SACrC,MAAM,EAAE,CAAC;AACd,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa,EAAE,WAAmB;IAC1D,MAAM,EAAE,GAAG,IAAA,yBAAW,EAAC,aAAa,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,IAAA,4BAAc,EAAC,cAAc,EAAE,OAAO,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC,CAAC;IACxE,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAC7E,OAAO,CAAC,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE,EAAE,MAAM,CAAC;SACrC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;SAC3C,IAAI,CAAC,cAAc,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAc,EAAE,WAAmB;IAC3D,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,UAAU,CAAC,GAAG,MAAM;SACrC,KAAK,CAAC,cAAc,CAAC;SACrB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC;IACnD,IAAI,CAAC,EAAE,IAAI,CAAC,OAAO,IAAI,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IAChD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAA,8BAAgB,EAAC,cAAc,EAAE,OAAO,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC,CAAC;QAC5E,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAC7B,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC;YAC3B,QAAQ,CAAC,KAAK,EAAE;SACjB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,qBAAqB,CACnC,OAAgB,EAChB,cAAsB;IAEtB,OAAO,CACL,CAAC,CAAC,OAAO,CAAC,gBAAgB;QAC1B,IAAA,4BAAW,EAAC,OAAO,CAAC,gBAAgB,EAAE,IAAA,iCAAgB,EAAC,cAAc,CAAC,CAAC,CACxE,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CACvB,OAAgB,EAChB,cAAsB;IAEtB,IAAI,CAAC,OAAO,CAAC,kBAAkB;QAAE,OAAO,IAAI,CAAC;IAC7C,OAAO,gBAAgB,CAAC,OAAO,CAAC,kBAAkB,EAAE,cAAc,CAAC,CAAC;AACtE,CAAC;AAED,MAAa,YAAa,SAAQ,IAAA,8CAAc,EAAC,wBAAO,EAAE,oCAAmB,CAAC;IAC5E,wEAAwE;IACxE,KAAK,CAAC,kBAAkB,CACtB,SAAiB,EACjB,cAAsB,EACtB,YAAoB,EACpB,SAAS,GAAG,IAAI,IAAI,EAAE;QAEtB,MAAM,MAAM,GAAY,MAAM,IAAI,CAAC,KAAK;aACrC,MAAM,CAAC,SAAS,CAAC;aACjB,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CACd,GAAG,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,EAAE,CAAC,IAAA,iCAAgB,EAAC,cAAc,CAAC,CAAC,CACjE;aACA,MAAM,CAAC;YACN,gBAAgB,EAAE,IAAA,iCAAgB,EAAC,YAAY,CAAC;YAChD,kBAAkB,EAAE,gBAAgB,CAAC,YAAY,EAAE,cAAc,CAAC;YAClE,wBAAwB,EAAE,IAAA,iCAAgB,EAAC,cAAc,CAAC;YAC1D,qBAAqB,EAAE,SAAS;YAChC,YAAY,EAAE,SAAS;SACxB,CAAC;aACD,GAAG,EAAE,CAAC;QACT,IAAI,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC;YAAE,OAAO,YAAY,CAAC;QAEjD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC1C,IACE,CAAC,OAAO;YACR,CAAC,IAAA,mDAAkC,EAAC,OAAO,EAAE,cAAc,EAAE,SAAS,CAAC,EACvE,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,gBAAgB,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IACnD,CAAC;IAED,0EAA0E;IAC1E,KAAK,CAAC,mBAAmB,CACvB,SAAiB,EACjB,YAAoB;QAEpB,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE;YAC3B,gBAAgB,EAAE,IAAA,iCAAgB,EAAC,YAAY,CAAC;YAChD,kBAAkB,EAAE,IAAI;YACxB,wBAAwB,EAAE,IAAI;YAC9B,qBAAqB,EAAE,IAAI;SAC5B,CAAC,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,mBAAmB,CAAC,SAAe;QACvC,MAAM,IAAI,CAAC,KAAK;aACb,OAAO,CAAC,oBAAoB,EAAE,iBAAiB,EAAE,SAAS,CAAC;aAC3D,MAAM,EAAE;aACR,GAAG,EAAE,CAAC;IACX,CAAC;IAED,WAAW,CAAC,MAAc;QACxB,OAAO,IAAI,CAAC,KAAK;aACd,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC;aACxB,GAAG,EAAE;aACL,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CACZ,GAAG;aACA,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;aACxC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAClC,CAAC;IACN,CAAC;IAED,cAAc,CAAC,MAAc;QAC3B,OAAO,IAAI,CAAC,KAAK;aACd,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC;aACxB,MAAM,EAAE;aACR,GAAG,EAAE;aACL,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC3B,CAAC;CACF;AA9ED,oCA8EC"}
+{"version":3,"file":"sessions.model.js","sourceRoot":"","sources":["../../../../src/auth/db/models/sessions.model.ts"],"names":[],"mappings":";;;AA6DA,sDAQC;AArED,6CAKqB;AACrB,6FAA2E;AAC3E,6DAAwE;AACxE,+DAIoC;AAEpC,MAAM,cAAc,GAAG,aAAa,CAAC;AACrC,MAAM,aAAa,GAAG,EAAE,CAAC;AACzB,MAAM,aAAa,GAAG,QAAQ,CAAC;AAC/B,MAAM,cAAc,GAAG,GAAG,CAAC;AAC3B,MAAM,eAAe,GAAG,wBAAwB,CAAC;AACjD,MAAM,oBAAoB,GAAG,cAAc,CAAC;AAC5C,MAAM,iBAAiB,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;AAEtC,SAAS,OAAO,CAAC,WAAmB;IAClC,OAAO,IAAA,wBAAU,EAAC,QAAQ,CAAC;SACxB,MAAM,CAAC,eAAe,GAAG,WAAW,CAAC;SACrC,MAAM,EAAE,CAAC;AACd,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa,EAAE,WAAmB;IAC1D,MAAM,EAAE,GAAG,IAAA,yBAAW,EAAC,aAAa,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,IAAA,4BAAc,EAAC,cAAc,EAAE,OAAO,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC,CAAC;IACxE,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAC7E,OAAO,CAAC,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE,EAAE,MAAM,CAAC;SACrC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;SAC3C,IAAI,CAAC,cAAc,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAc,EAAE,WAAmB;IAC3D,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,UAAU,CAAC,GAAG,MAAM;SACrC,KAAK,CAAC,cAAc,CAAC;SACrB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC;IACnD,IAAI,CAAC,EAAE,IAAI,CAAC,OAAO,IAAI,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IAChD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAA,8BAAgB,EAAC,cAAc,EAAE,OAAO,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC,CAAC;QAC5E,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAC7B,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC;YAC3B,QAAQ,CAAC,KAAK,EAAE;SACjB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,qBAAqB,CACnC,OAAgB,EAChB,cAAsB;IAEtB,OAAO,CACL,CAAC,CAAC,OAAO,CAAC,gBAAgB;QAC1B,IAAA,4BAAW,EAAC,OAAO,CAAC,gBAAgB,EAAE,IAAA,iCAAgB,EAAC,cAAc,CAAC,CAAC,CACxE,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CACvB,OAAgB,EAChB,cAAsB;IAEtB,IAAI,CAAC,OAAO,CAAC,kBAAkB;QAAE,OAAO,IAAI,CAAC;IAC7C,OAAO,gBAAgB,CAAC,OAAO,CAAC,kBAAkB,EAAE,cAAc,CAAC,CAAC;AACtE,CAAC;AAED,MAAa,YAAa,SAAQ,IAAA,8CAAc,EAAC,wBAAO,EAAE,oCAAmB,CAAC;IAC5E,wEAAwE;IACxE,KAAK,CAAC,kBAAkB,CACtB,SAAiB,EACjB,cAAsB,EACtB,YAAoB,EACpB,SAAS,GAAG,IAAI,IAAI,EAAE;QAEtB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK;aAC9B,MAAM,CAAC,SAAS,CAAC;aACjB,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CACd,GAAG,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,EAAE,CAAC,IAAA,iCAAgB,EAAC,cAAc,CAAC,CAAC,CACjE;aACA,MAAM,CAAC;YACN,gBAAgB,EAAE,IAAA,iCAAgB,EAAC,YAAY,CAAC;YAChD,kBAAkB,EAAE,gBAAgB,CAAC,YAAY,EAAE,cAAc,CAAC;YAClE,wBAAwB,EAAE,IAAA,iCAAgB,EAAC,cAAc,CAAC;YAC1D,qBAAqB,EAAE,SAAS;YAChC,YAAY,EAAE,SAAS;SACxB,CAAC;aACD,GAAG,EAAE,CAAC;QACT,IAAI,QAAQ,GAAG,CAAC;YAAE,OAAO,YAAY,CAAC;QAEtC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC1C,IACE,CAAC,OAAO;YACR,CAAC,IAAA,mDAAkC,EAAC,OAAO,EAAE,cAAc,EAAE,SAAS,CAAC,EACvE,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,gBAAgB,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IACnD,CAAC;IAED,0EAA0E;IAC1E,KAAK,CAAC,mBAAmB,CACvB,SAAiB,EACjB,YAAoB;QAEpB,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE;YAC3B,gBAAgB,EAAE,IAAA,iCAAgB,EAAC,YAAY,CAAC;YAChD,kBAAkB,EAAE,IAAI;YACxB,wBAAwB,EAAE,IAAI;YAC9B,qBAAqB,EAAE,IAAI;SAC5B,CAAC,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,mBAAmB,CAAC,SAAe;QACvC,MAAM,IAAI,CAAC,KAAK;aACb,OAAO,CAAC,oBAAoB,EAAE,iBAAiB,EAAE,SAAS,CAAC;aAC3D,MAAM,EAAE;aACR,GAAG,EAAE,CAAC;IACX,CAAC;IAED,WAAW,CAAC,MAAc;QACxB,OAAO,IAAI,CAAC,KAAK;aACd,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC;aACxB,GAAG,EAAE;aACL,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CACZ,GAAG;aACA,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;aACxC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAClC,CAAC;IACN,CAAC;IAED,cAAc,CAAC,MAAc;QAC3B,OAAO,IAAI,CAAC,KAAK;aACd,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC;aACxB,MAAM,EAAE;aACR,GAAG,EAAE;aACL,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC3B,CAAC;CACF;AA9ED,oCA8EC"}

package/dist/auth/db/models/userExternalIdentities.model.d.ts

@@ -9,18 +9,20 @@ declare const UserExternalIdentityModel_base: {
         readonly table: import("@antelopejs/interface-database").Table<UserExternalIdentity>;
         readonly database: import("@antelopejs/interface-database").SchemaInstance<any>;
         get(id: string): PromiseLike<UserExternalIdentity | undefined>;
-        getBy(index: keyof UserExternalIdentity, ...keys: any[]): PromiseLike<UserExternalIdentity[]>;
+        getBy(index: keyof UserExternalIdentity, ...keys: import("@antelopejs/interface-database-decorators").IndexKey[]): PromiseLike<UserExternalIdentity[]>;
         getAll(): PromiseLike<UserExternalIdentity[]>;
         insert(obj: import("@antelopejs/interface-database-decorators").DeepPartial<UserExternalIdentity> | import("@antelopejs/interface-database-decorators").DeepPartial<UserExternalIdentity>[], options?: import("@antelopejs/interface-database-decorators").ValidateOptions): Promise<string[]>;
         update(id: string, obj: import("@antelopejs/interface-database-decorators").DeepPartial<UserExternalIdentity>, options?: import("@antelopejs/interface-database-decorators").ValidateOptions): Promise<number>;
-        update(obj: import("@antelopejs/interface-database-decorators").DeepPartial<UserExternalIdentity>, options?: import("@antelopejs/interface-database-decorators").ValidateOptions): Promise<number>;
+        update(obj: import("@antelopejs/interface-database-decorators").DeepPartial<UserExternalIdentity> & {
+            _id: string;
+        }, options?: import("@antelopejs/interface-database-decorators").ValidateOptions): Promise<number>;
         delete(id: string): Promise<number>;
     };
-    readonly schemaName: string;
+    readonly schemaName: string | undefined;
     readonly tableClass: import("@antelopejs/interface-database-decorators").Constructible<UserExternalIdentity>;
-    fromPlainData(obj: any): UserExternalIdentity;
+    fromPlainData(obj: UserExternalIdentity | import("@antelopejs/interface-database-decorators").PlainData<UserExternalIdentity>): UserExternalIdentity;
     fromDatabase(obj: any): UserExternalIdentity | undefined;
-    toDatabase(obj: any): Record<string, any>;
+    toDatabase(obj: UserExternalIdentity | import("@antelopejs/interface-database-decorators").PlainData<UserExternalIdentity>): import("@antelopejs/interface-database-decorators").StoredRow<UserExternalIdentity>;
     validate(obj: unknown, options?: import("@antelopejs/interface-database-decorators").ValidateInputOptions): import("@antelopejs/interface-database-decorators").ValidationResult;
 };
 export declare class UserExternalIdentityModel extends UserExternalIdentityModel_base {

package/dist/auth/db/models/users.model.d.ts

@@ -12,18 +12,20 @@ declare const UserModel_base: {
         readonly table: import("@antelopejs/interface-database").Table<User>;
         readonly database: import("@antelopejs/interface-database").SchemaInstance<any>;
         get(id: string): PromiseLike<User | undefined>;
-        getBy(index: keyof User, ...keys: any[]): PromiseLike<User[]>;
+        getBy(index: "_id" | "createdAt" | "updatedAt" | "email" | "name" | "avatar" | "language" | "timeZone" | "weekStart" | "timeFormat" | "dateFormat" | "password" | "passwordChangedAt" | "authKey" | "isValidated" | "validationToken" | "validationRequestedAt" | "forgotPasswordToken" | "forgotPasswordRequestedAt" | "owner" | "lastActiveAt" | "twoFactorMethods" | "twoFactorSecret" | "twoFactorPendingSecret" | "twoFactorTotpLastStep" | "twoFactorBackupCodes" | "twoFactorBackupCodesGeneratedAt" | "twoFactorBackupCodesSavedAt" | "twoFactorEmailCode" | "twoFactorEmailCodeRequestedAt" | "testHash" | "testHashAsync" | "isHashOutdated", ...keys: import("@antelopejs/interface-database-decorators").IndexKey[]): PromiseLike<User[]>;
         getAll(): PromiseLike<User[]>;
         insert(obj: import("@antelopejs/interface-database-decorators").DeepPartial<User> | import("@antelopejs/interface-database-decorators").DeepPartial<User>[], options?: import("@antelopejs/interface-database-decorators").ValidateOptions): Promise<string[]>;
         update(id: string, obj: import("@antelopejs/interface-database-decorators").DeepPartial<User>, options?: import("@antelopejs/interface-database-decorators").ValidateOptions): Promise<number>;
-        update(obj: import("@antelopejs/interface-database-decorators").DeepPartial<User>, options?: import("@antelopejs/interface-database-decorators").ValidateOptions): Promise<number>;
+        update(obj: import("@antelopejs/interface-database-decorators").DeepPartial<User> & {
+            _id: string;
+        }, options?: import("@antelopejs/interface-database-decorators").ValidateOptions): Promise<number>;
         delete(id: string): Promise<number>;
     };
-    readonly schemaName: string;
+    readonly schemaName: string | undefined;
     readonly tableClass: import("@antelopejs/interface-database-decorators").Constructible<User>;
-    fromPlainData(obj: any): User;
+    fromPlainData(obj: User | import("@antelopejs/interface-database-decorators").PlainData<User>): User;
     fromDatabase(obj: any): User | undefined;
-    toDatabase(obj: any): Record<string, any>;
+    toDatabase(obj: User | import("@antelopejs/interface-database-decorators").PlainData<User>): import("@antelopejs/interface-database-decorators").StoredRow<User>;
     validate(obj: unknown, options?: import("@antelopejs/interface-database-decorators").ValidateInputOptions): import("@antelopejs/interface-database-decorators").ValidationResult;
 };
 export declare class UserModel extends UserModel_base {

package/dist/auth/db/tables/users.table.d.ts

@@ -1,5 +1,5 @@
 import { Table } from "@antelopejs/interface-database-decorators";
-import type { DefaultDataTypes } from "../../../base/data-types/default-types";
+import type { ImageValue } from "../../../types";
 export declare const USERS_TABLE_NAME = "users";
 /** First day of the week: 0 Sunday, 1 Monday, 6 Saturday. */
 export type UserWeekStart = 0 | 1 | 6;
@@ -22,7 +22,7 @@ export declare class User extends User_base {
      * Profile picture as an image value ({ key, alt? }) in the default storage,
      * downscaled client-side to a square of at most 100x100 pixels.
      */
-    avatar: DefaultDataTypes.ImageValue | null;
+    avatar: ImageValue | null;
     /**
      * User's preferred language/locale (e.g., 'en', 'fr')
      */

package/dist/auth/db/tables/users.table.js.map

@@ -1 +1 @@
-{"version":3,"file":"users.table.js","sourceRoot":"","sources":["../../../../src/auth/db/tables/users.table.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6FASmD;AACnD,kDAAsD;AAGzC,QAAA,gBAAgB,GAAG,OAAO,CAAC;AAYjC,IAAM,IAAI,GAAV,MAAM,IAAK,SAAQ,qCAAK,CAAC,IAAI,CAAC,4CAAY,CAAC;CAwJjD,CAAA;AAxJY,oBAAI;AAEP;IADP,IAAA,qCAAK,EAAC,QAAQ,CAAC;;iCACI;AAKZ;IAHP,IAAA,qCAAK,GAAE;IACP,IAAA,4CAAY,GAAE;IACd,IAAA,qCAAK,EAAC,MAAM,CAAC;8BACK,IAAI;uCAAC;AAKhB;IAHP,IAAA,qCAAK,GAAE;IACP,IAAA,0CAAU,GAAE;IACZ,IAAA,qCAAK,EAAC,MAAM,CAAC;8BACK,IAAI;uCAAC;AAIhB;IAFP,IAAA,qCAAK,GAAE;IACP,IAAA,qCAAK,EAAC,QAAQ,CAAC;;mCACM;AAGd;IADP,IAAA,qCAAK,EAAC,QAAQ,CAAC;;kCACK;AAOb;IADP,IAAA,qCAAK,EAAC,KAAK,CAAC;;oCACsC;AAO3C;IAFP,IAAA,qCAAK,GAAE;IACP,IAAA,qCAAK,EAAC,QAAQ,CAAC;;sCACS;AAIjB;IADP,IAAA,qCAAK,EAAC,QAAQ,CAAC;;sCACiB;AAIzB;IADP,IAAA,qCAAK,EAAC,QAAQ,CAAC;;uCACyB;AAIjC;IADP,IAAA,qCAAK,EAAC,QAAQ,CAAC;;wCAC2B;AAInC;IADP,IAAA,qCAAK,EAAC,QAAQ,CAAC;;wCAC2B;AAInC;IAFP,IAAA,sCAAM,GAAE;IACR,IAAA,qCAAK,EAAC,QAAQ,CAAC;;sCACgB;AAOxB;IADP,IAAA,qCAAK,EAAC,MAAM,CAAC;;+CACyB;AAM/B;IADP,IAAA,qCAAK,EAAC,QAAQ,CAAC;;qCACQ;AAOhB;IAFP,IAAA,qCAAK,GAAE;IACP,IAAA,qCAAK,EAAC,SAAS,CAAC;;yCACY;AAOrB;IAFP,IAAA,qCAAK,GAAE;IACP,IAAA,qCAAK,EAAC,QAAQ,CAAC;;6CACuB;AAM/B;IADP,IAAA,qCAAK,EAAC,MAAM,CAAC;;mDAC6B;AAOnC;IAFP,IAAA,qCAAK,GAAE;IACP,IAAA,qCAAK,EAAC,QAAQ,CAAC;;iDAC2B;AAMnC;IADP,IAAA,qCAAK,EAAC,MAAM,CAAC;;uDACiC;AAMvC;IADP,IAAA,qCAAK,EAAC,SAAS,CAAC;;mCACM;AAQf;IADP,IAAA,qCAAK,EAAC,MAAM,CAAC;;0CACoB;AAG1B;IADP,IAAA,qCAAK,EAAC,CAAC,QAAQ,CAAC,CAAC;;8CACiB;AAG3B;IADP,IAAA,qCAAK,EAAC,QAAQ,CAAC;;6CACuB;AAG/B;IADP,IAAA,qCAAK,EAAC,QAAQ,CAAC;;oDAC8B;AAQtC;IADP,IAAA,qCAAK,EAAC,QAAQ,CAAC;;mDAC8B;AAGtC;IADP,IAAA,qCAAK,EAAC,CAAC,QAAQ,CAAC,CAAC;;kDACqB;AAI/B;IADP,IAAA,qCAAK,EAAC,MAAM,CAAC;;6DACuC;AAO7C;IADP,IAAA,qCAAK,EAAC,MAAM,CAAC;;yDACmC;AAIzC;IADP,IAAA,qCAAK,EAAC,QAAQ,CAAC;;gDAC0B;AAGlC;IADP,IAAA,qCAAK,EAAC,MAAM,CAAC;;2DACqC;eAvJxC,IAAI;IADhB,IAAA,6CAAa,EAAC,wBAAgB,EAAE,4BAAgB,CAAC;GACrC,IAAI,CAwJhB"}
+{"version":3,"file":"users.table.js","sourceRoot":"","sources":["../../../../src/auth/db/tables/users.table.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6FASmD;AACnD,kDAAsD;AAGzC,QAAA,gBAAgB,GAAG,OAAO,CAAC;AAYjC,IAAM,IAAI,GAAV,MAAM,IAAK,SAAQ,qCAAK,CAAC,IAAI,CAAC,4CAAY,CAAC;CAwJjD,CAAA;AAxJY,oBAAI;AAEP;IADP,IAAA,qCAAK,EAAC,QAAQ,CAAC;;iCACI;AAKZ;IAHP,IAAA,qCAAK,GAAE;IACP,IAAA,4CAAY,GAAE;IACd,IAAA,qCAAK,EAAC,MAAM,CAAC;8BACK,IAAI;uCAAC;AAKhB;IAHP,IAAA,qCAAK,GAAE;IACP,IAAA,0CAAU,GAAE;IACZ,IAAA,qCAAK,EAAC,MAAM,CAAC;8BACK,IAAI;uCAAC;AAIhB;IAFP,IAAA,qCAAK,GAAE;IACP,IAAA,qCAAK,EAAC,QAAQ,CAAC;;mCACM;AAGd;IADP,IAAA,qCAAK,EAAC,QAAQ,CAAC;;kCACK;AAOb;IADP,IAAA,qCAAK,EAAC,KAAK,CAAC;;oCACqB;AAO1B;IAFP,IAAA,qCAAK,GAAE;IACP,IAAA,qCAAK,EAAC,QAAQ,CAAC;;sCACS;AAIjB;IADP,IAAA,qCAAK,EAAC,QAAQ,CAAC;;sCACiB;AAIzB;IADP,IAAA,qCAAK,EAAC,QAAQ,CAAC;;uCACyB;AAIjC;IADP,IAAA,qCAAK,EAAC,QAAQ,CAAC;;wCAC2B;AAInC;IADP,IAAA,qCAAK,EAAC,QAAQ,CAAC;;wCAC2B;AAInC;IAFP,IAAA,sCAAM,GAAE;IACR,IAAA,qCAAK,EAAC,QAAQ,CAAC;;sCACgB;AAOxB;IADP,IAAA,qCAAK,EAAC,MAAM,CAAC;;+CACyB;AAM/B;IADP,IAAA,qCAAK,EAAC,QAAQ,CAAC;;qCACQ;AAOhB;IAFP,IAAA,qCAAK,GAAE;IACP,IAAA,qCAAK,EAAC,SAAS,CAAC;;yCACY;AAOrB;IAFP,IAAA,qCAAK,GAAE;IACP,IAAA,qCAAK,EAAC,QAAQ,CAAC;;6CACuB;AAM/B;IADP,IAAA,qCAAK,EAAC,MAAM,CAAC;;mDAC6B;AAOnC;IAFP,IAAA,qCAAK,GAAE;IACP,IAAA,qCAAK,EAAC,QAAQ,CAAC;;iDAC2B;AAMnC;IADP,IAAA,qCAAK,EAAC,MAAM,CAAC;;uDACiC;AAMvC;IADP,IAAA,qCAAK,EAAC,SAAS,CAAC;;mCACM;AAQf;IADP,IAAA,qCAAK,EAAC,MAAM,CAAC;;0CACoB;AAG1B;IADP,IAAA,qCAAK,EAAC,CAAC,QAAQ,CAAC,CAAC;;8CACiB;AAG3B;IADP,IAAA,qCAAK,EAAC,QAAQ,CAAC;;6CACuB;AAG/B;IADP,IAAA,qCAAK,EAAC,QAAQ,CAAC;;oDAC8B;AAQtC;IADP,IAAA,qCAAK,EAAC,QAAQ,CAAC;;mDAC8B;AAGtC;IADP,IAAA,qCAAK,EAAC,CAAC,QAAQ,CAAC,CAAC;;kDACqB;AAI/B;IADP,IAAA,qCAAK,EAAC,MAAM,CAAC;;6DACuC;AAO7C;IADP,IAAA,qCAAK,EAAC,MAAM,CAAC;;yDACmC;AAIzC;IADP,IAAA,qCAAK,EAAC,QAAQ,CAAC;;gDAC0B;AAGlC;IADP,IAAA,qCAAK,EAAC,MAAM,CAAC;;2DACqC;eAvJxC,IAAI;IADhB,IAAA,6CAAa,EAAC,wBAAgB,EAAE,4BAAgB,CAAC;GACrC,IAAI,CAwJhB"}

package/dist/auth/index.d.ts

@@ -40,17 +40,17 @@ export declare namespace internal {
 /**
  * Authentication decorator that returns raw user data, ignoring email validation.
  */
-export declare const AuthRawUser: (validator?: ((data: TenantTokenInput) => boolean | User | Promise<boolean | User>) | undefined) => import("@antelopejs/interface-core/decorators").ClassDecorator<import("@antelopejs/interface-core/decorators").Class<any, any[]>> & import("@antelopejs/interface-core/decorators").PropertyDecorator & import("@antelopejs/interface-core/decorators").ParameterDecorator;
+export declare const AuthRawUser: (validator?: ((data: TenantTokenInput) => boolean | User | Promise<boolean | User>) | undefined) => import("@antelopejs/interface-core/decorators").PropertyDecorator & import("@antelopejs/interface-core/decorators").ClassDecorator<import("@antelopejs/interface-core/decorators").Class<object, any[]>> & import("@antelopejs/interface-core/decorators").ParameterDecorator;
 /**
  * Authentication decorator that provides the `User` instance and enforces email validation
  * if required by the configuration.
  */
-export declare const AuthUser: (validator?: ((data: TenantTokenInput) => boolean | User | Promise<boolean | User>) | undefined) => import("@antelopejs/interface-core/decorators").ClassDecorator<import("@antelopejs/interface-core/decorators").Class<any, any[]>> & import("@antelopejs/interface-core/decorators").PropertyDecorator & import("@antelopejs/interface-core/decorators").ParameterDecorator;
+export declare const AuthUser: (validator?: ((data: TenantTokenInput) => boolean | User | Promise<boolean | User>) | undefined) => import("@antelopejs/interface-core/decorators").PropertyDecorator & import("@antelopejs/interface-core/decorators").ClassDecorator<import("@antelopejs/interface-core/decorators").Class<object, any[]>> & import("@antelopejs/interface-core/decorators").ParameterDecorator;
 /**
  * Optional authentication decorator that returns User | undefined without throwing 401
  * Use this for routes that work both when authenticated and unauthenticated
  */
-export declare const IfAuthUser: (validator?: ((data: TenantTokenInput | undefined) => User | Promise<User | undefined> | undefined) | undefined) => import("@antelopejs/interface-core/decorators").ClassDecorator<import("@antelopejs/interface-core/decorators").Class<any, any[]>> & import("@antelopejs/interface-core/decorators").PropertyDecorator & import("@antelopejs/interface-core/decorators").ParameterDecorator;
+export declare const IfAuthUser: (validator?: ((data: TenantTokenInput | undefined) => User | Promise<User | undefined> | undefined) | undefined) => import("@antelopejs/interface-core/decorators").PropertyDecorator & import("@antelopejs/interface-core/decorators").ClassDecorator<import("@antelopejs/interface-core/decorators").Class<object, any[]>> & import("@antelopejs/interface-core/decorators").ParameterDecorator;
 /**
  * Authentication decorator that requires the authenticated user to be a platform
  * owner (`User.owner === true`). Throws 401 when no token is provided and 403
@@ -61,7 +61,7 @@ export declare const IfAuthUser: (validator?: ((data: TenantTokenInput | undefin
  *
  * @returns Authentication decorator
  */
-export declare const AuthOwnerOnly: () => import("@antelopejs/interface-core/decorators").ClassDecorator<import("@antelopejs/interface-core/decorators").Class<any, any[]>> & import("@antelopejs/interface-core/decorators").PropertyDecorator & import("@antelopejs/interface-core/decorators").ParameterDecorator;
+export declare const AuthOwnerOnly: () => import("@antelopejs/interface-core/decorators").PropertyDecorator & import("@antelopejs/interface-core/decorators").ClassDecorator<import("@antelopejs/interface-core/decorators").Class<object, any[]>> & import("@antelopejs/interface-core/decorators").ParameterDecorator;
 /**
  * Generate an access token for a user
  * @param tenantId

package/dist/auth/internal/jwt-auth-decorator.d.ts

@@ -16,5 +16,5 @@ type Validator<T, R> = (data: T) => R | Promise<R>;
 export declare function CreateJwtAuthDecorator<T extends VerifiedToken | undefined, R>(callbacks: {
     authenticator: Authenticator<T>;
     validator: Validator<T, R>;
-}): (validator?: Validator<T, R> | undefined) => import("@antelopejs/interface-core/decorators").ClassDecorator<import("@antelopejs/interface-core/decorators").Class<any, any[]>> & import("@antelopejs/interface-core/decorators").PropertyDecorator & import("@antelopejs/interface-core/decorators").ParameterDecorator;
+}): (validator?: Validator<T, R> | undefined) => import("@antelopejs/interface-core/decorators").PropertyDecorator & import("@antelopejs/interface-core/decorators").ClassDecorator<import("@antelopejs/interface-core/decorators").Class<object, any[]>> & import("@antelopejs/interface-core/decorators").ParameterDecorator;
 export {};

package/dist/auth/internal/jwt-auth-decorator.js

@@ -4,6 +4,8 @@ exports.CreateJwtAuthDecorator = CreateJwtAuthDecorator;
 const interface_api_1 = require("@antelopejs/interface-api");
 const decorators_1 = require("@antelopejs/interface-core/decorators");
 const constants_1 = require("../../constants");
+const decorated_class_1 = require("../../utils/internal/decorated-class");
+const type_check_1 = require("../../utils/internal/type-check");
 const request_authenticators_1 = require("./request-authenticators");
 const CLASS_PROVIDER_DESCRIPTION = "authentication-class-provider";
 function bearerToken(ctx) {
@@ -12,11 +14,9 @@ function bearerToken(ctx) {
     return typeof header === "string" ? header.split(" ")[1] : undefined;
 }
 function isVerifiedUser(value) {
-    // oxlint-disable-next-line anti-slop/no-runtime-typeof -- A custom authenticator validator can return any value; only an object with a string id binds a principal.
     if (typeof value !== "object" || value === null)
         return false;
     const { _id } = value;
-    // oxlint-disable-next-line anti-slop/no-runtime-typeof -- The verified principal requires a string id rather than an arbitrary validator result.
     return typeof _id === "string";
 }
 /**
@@ -44,7 +44,10 @@ function CreateJwtAuthDecorator(callbacks) {
             return result;
         };
         if (key === undefined) {
-            (0, interface_api_1.SetParameterProvider)(target.prototype, Symbol(CLASS_PROVIDER_DESCRIPTION), undefined, provider);
+            if (!(0, type_check_1.isClass)(target)) {
+                throw new TypeError("A class decorator applies to a class.");
+            }
+            (0, interface_api_1.SetParameterProvider)((0, decorated_class_1.prototypeOf)(target), Symbol(CLASS_PROVIDER_DESCRIPTION), undefined, provider);
             return;
         }
         (0, interface_api_1.SetParameterProvider)(target, key, index, provider);

package/dist/auth/internal/jwt-auth-decorator.js.map

@@ -1 +1 @@
-{"version":3,"file":"jwt-auth-decorator.js","sourceRoot":"","sources":["../../../src/auth/internal/jwt-auth-decorator.ts"],"names":[],"mappings":";;AAuCA,wDA8BC;AApED,6DAAiE;AACjE,sEAAkG;AAClG,+CAAoD;AACpD,qEAAwE;AAExE,MAAM,0BAA0B,GAAG,+BAA+B,CAAC;AASnE,SAAS,WAAW,CAAC,GAAmB;IACtC,MAAM,MAAM,GAAG,GAAG,CAAC,UAAU,EAAE,OAAO,EAAE,aAAa,CAAC;IACtD,iKAAiK;IACjK,OAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACvE,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,oKAAoK;IACpK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,EAAE,GAAG,EAAE,GAAsB,KAAK,CAAC;IACzC,iJAAiJ;IACjJ,OAAO,OAAO,GAAG,KAAK,QAAQ,CAAC;AACjC,CAAC;AAED;;;;;;;;;GASG;AACH,SAAgB,sBAAsB,CAGpC,SAA0E;IAC1E,OAAO,IAAA,sDAAyC,EAC9C,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,SAA2B,EAAE,EAAE;QAClD,MAAM,QAAQ,GAAG,SAAS,IAAI,SAAS,CAAC,SAAS,CAAC;QAClD,MAAM,QAAQ,GAAG,KAAK,EAAE,GAAmB,EAAc,EAAE;YACzD,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,aAAa,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;YAC7D,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;YACpC,IAAI,CAAC,SAAS,IAAI,IAAI,IAAI,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;gBACjD,IAAA,qDAA4B,EAAC,GAAG,EAAE;oBAChC,MAAM,EAAE,MAAM,CAAC,GAAG;oBAClB,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,6BAAiB;iBAC7C,CAAC,CAAC;YACL,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC;QACF,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,IAAA,oCAAoB,EAClB,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,0BAA0B,CAAC,EAClC,SAAS,EACT,QAAQ,CACT,CAAC;YACF,OAAO;QACT,CAAC;QACD,IAAA,oCAAoB,EAAC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;IACrD,CAAC,CACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"jwt-auth-decorator.js","sourceRoot":"","sources":["../../../src/auth/internal/jwt-auth-decorator.ts"],"names":[],"mappings":";;AAuCA,wDAiCC;AAvED,6DAAiE;AACjE,sEAAkG;AAClG,+CAAoD;AACpD,0EAAmE;AACnE,gEAA0D;AAC1D,qEAAwE;AAExE,MAAM,0BAA0B,GAAG,+BAA+B,CAAC;AASnE,SAAS,WAAW,CAAC,GAAmB;IACtC,MAAM,MAAM,GAAG,GAAG,CAAC,UAAU,EAAE,OAAO,EAAE,aAAa,CAAC;IACtD,iKAAiK;IACjK,OAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACvE,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,EAAE,GAAG,EAAE,GAAsB,KAAK,CAAC;IACzC,OAAO,OAAO,GAAG,KAAK,QAAQ,CAAC;AACjC,CAAC;AAED;;;;;;;;;GASG;AACH,SAAgB,sBAAsB,CAGpC,SAA0E;IAC1E,OAAO,IAAA,sDAAyC,EAC9C,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,SAA2B,EAAE,EAAE;QAClD,MAAM,QAAQ,GAAG,SAAS,IAAI,SAAS,CAAC,SAAS,CAAC;QAClD,MAAM,QAAQ,GAAG,KAAK,EAAE,GAAmB,EAAc,EAAE;YACzD,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,aAAa,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;YAC7D,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;YACpC,IAAI,CAAC,SAAS,IAAI,IAAI,IAAI,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;gBACjD,IAAA,qDAA4B,EAAC,GAAG,EAAE;oBAChC,MAAM,EAAE,MAAM,CAAC,GAAG;oBAClB,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,6BAAiB;iBAC7C,CAAC,CAAC;YACL,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC;QACF,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,IAAI,CAAC,IAAA,oBAAO,EAAC,MAAM,CAAC,EAAE,CAAC;gBACrB,MAAM,IAAI,SAAS,CAAC,uCAAuC,CAAC,CAAC;YAC/D,CAAC;YACD,IAAA,oCAAoB,EAClB,IAAA,6BAAW,EAAC,MAAM,CAAC,EACnB,MAAM,CAAC,0BAA0B,CAAC,EAClC,SAAS,EACT,QAAQ,CACT,CAAC;YACF,OAAO;QACT,CAAC;QACD,IAAA,oCAAoB,EAAC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;IACrD,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/auth/internal/request-authenticators.d.ts

@@ -8,6 +8,18 @@ interface RequestIdentity {
 export declare function getAuthenticatedRequestTenantId(ctx: RequestContext): string | undefined;
 /** @internal Revalidate on every call; failures poison tenant resolution for this request. */
 export declare function resolveRequestPrincipal(ctx: RequestContext, authenticators: readonly RequestAuthenticator[], authenticateJwt: (token: string) => Promise<RequestPrincipal>): Promise<RequestPrincipal>;
+/**
+ * @internal The tenant of the request's credential, for a provider resolved
+ * alongside the route's guards. It waits for the authentications the
+ * request's other providers start in the same pass, then answers the tenant
+ * they bound. Without one it verifies the bearer token with `verifyToken` and
+ * binds its identity; a token it cannot verify reads as anonymous, and any
+ * identity bound to the request afterwards is refused.
+ *
+ * @throws HTTPResult 401 when the request's authentication failed, its
+ * credential changed, or a verified identity conflicts with the bound one
+ */
+export declare function resolveRequestTenant(ctx: RequestContext, verifyToken: (token: string) => Promise<RequestIdentity | undefined>): Promise<string | undefined>;
 /**
  * @internal Records the identity a JWT auth decorator has just verified, so
  * `getRequestTenantId` reads the tenant of a checked credential. A request

package/dist/auth/internal/request-authenticators.js

@@ -2,9 +2,11 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.getAuthenticatedRequestTenantId = getAuthenticatedRequestTenantId;
 exports.resolveRequestPrincipal = resolveRequestPrincipal;
+exports.resolveRequestTenant = resolveRequestTenant;
 exports.bindVerifiedRequestPrincipal = bindVerifiedRequestPrincipal;
 const interface_api_1 = require("@antelopejs/interface-api");
 const HTTP_UNAUTHORIZED = 401;
+const BEARER_SCHEME = /^Bearer\s+(\S+)$/i;
 const requestPrincipals = new WeakMap();
 const pendingAuthentications = new WeakMap();
 function unauthorized() {
@@ -15,14 +17,17 @@ function getAuthenticatedRequestTenantId(ctx) {
     const state = requestPrincipals.get(ctx.rawRequest);
     if (!state)
         return undefined;
-    if (!state.principal ||
-        state.authorization !== ctx.rawRequest.headers.authorization) {
+    if (state.authorization !== ctx.rawRequest.headers.authorization) {
         throw unauthorized();
     }
+    if (state.anonymous)
+        return undefined;
+    if (!state.principal)
+        throw unauthorized();
     return state.principal.tenantId;
 }
 function readBearerToken(authorization) {
-    const match = authorization?.match(/^Bearer\s+(\S+)$/i);
+    const match = authorization?.match(BEARER_SCHEME);
     if (!match)
         throw unauthorized();
     return match[1];
@@ -43,20 +48,58 @@ function assertPrincipal(principal, previous) {
         throw unauthorized();
     }
 }
-/** @internal Revalidate on every call; failures poison tenant resolution for this request. */
-async function resolveRequestPrincipal(ctx, authenticators, authenticateJwt) {
-    const pending = pendingAuthentications.get(ctx.rawRequest) ?? Promise.resolve();
-    const result = pending.then(() => verifyRequestPrincipal(ctx, authenticators, authenticateJwt));
-    pendingAuthentications.set(ctx.rawRequest, result);
+/**
+ * Runs `step` once the request's authentications already in flight have
+ * settled, and holds back the ones started after it until it settles.
+ */
+async function serialized(request, step) {
+    const pending = pendingAuthentications.get(request) ?? Promise.resolve();
+    const result = pending.then(step);
+    pendingAuthentications.set(request, result);
     try {
         return await result;
     }
     finally {
-        if (pendingAuthentications.get(ctx.rawRequest) === result) {
-            pendingAuthentications.delete(ctx.rawRequest);
+        if (pendingAuthentications.get(request) === result) {
+            pendingAuthentications.delete(request);
         }
     }
 }
+/** @internal Revalidate on every call; failures poison tenant resolution for this request. */
+async function resolveRequestPrincipal(ctx, authenticators, authenticateJwt) {
+    return serialized(ctx.rawRequest, () => verifyRequestPrincipal(ctx, authenticators, authenticateJwt));
+}
+/**
+ * @internal The tenant of the request's credential, for a provider resolved
+ * alongside the route's guards. It waits for the authentications the
+ * request's other providers start in the same pass, then answers the tenant
+ * they bound. Without one it verifies the bearer token with `verifyToken` and
+ * binds its identity; a token it cannot verify reads as anonymous, and any
+ * identity bound to the request afterwards is refused.
+ *
+ * @throws HTTPResult 401 when the request's authentication failed, its
+ * credential changed, or a verified identity conflicts with the bound one
+ */
+async function resolveRequestTenant(ctx, verifyToken) {
+    await Promise.resolve();
+    return serialized(ctx.rawRequest, async () => {
+        const request = ctx.rawRequest;
+        if (requestPrincipals.has(request)) {
+            return getAuthenticatedRequestTenantId(ctx);
+        }
+        const authorization = request.headers.authorization;
+        const token = authorization?.match(BEARER_SCHEME)?.[1];
+        const identity = token ? await verifyToken(token) : undefined;
+        if (identity) {
+            bindVerifiedRequestPrincipal(ctx, identity);
+            return identity.tenantId;
+        }
+        if (requestPrincipals.has(request))
+            throw unauthorized();
+        requestPrincipals.set(request, { authorization, anonymous: true });
+        return undefined;
+    });
+}
 async function verifyRequestPrincipal(ctx, authenticators, authenticateJwt) {
     const request = ctx.rawRequest;
     const authorization = request.headers.authorization;

package/dist/auth/internal/request-authenticators.js.map

@@ -1 +1 @@
-{"version":3,"file":"request-authenticators.js","sourceRoot":"","sources":["../../../src/auth/internal/request-authenticators.ts"],"names":[],"mappings":";;AAiCA,0EAYC;AAgCD,0DAkBC;AA4CD,oEAmBC;AA7JD,6DAA4E;AAM5E,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAY9B,MAAM,iBAAiB,GAAG,IAAI,OAAO,EAGlC,CAAC;AACJ,MAAM,sBAAsB,GAAG,IAAI,OAAO,EAGvC,CAAC;AAEJ,SAAS,YAAY;IACnB,OAAO,IAAI,0BAAU,CAAC,iBAAiB,EAAE,cAAc,CAAC,CAAC;AAC3D,CAAC;AAED,oFAAoF;AACpF,SAAgB,+BAA+B,CAC7C,GAAmB;IAEnB,MAAM,KAAK,GAAG,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACpD,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,IACE,CAAC,KAAK,CAAC,SAAS;QAChB,KAAK,CAAC,aAAa,KAAK,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,aAAa,EAC5D,CAAC;QACD,MAAM,YAAY,EAAE,CAAC;IACvB,CAAC;IACD,OAAO,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC;AAClC,CAAC;AAED,SAAS,eAAe,CAAC,aAAiC;IACxD,MAAM,KAAK,GAAG,aAAa,EAAE,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACxD,IAAI,CAAC,KAAK;QAAE,MAAM,YAAY,EAAE,CAAC;IACjC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,SAAS,eAAe,CACtB,SAA2B,EAC3B,QAA0B;IAE1B;IACE,0LAA0L;IAC1L,OAAO,SAAS,EAAE,IAAI,EAAE,GAAG,KAAK,QAAQ;QACxC,CAAC,SAAS,EAAE,IAAI,EAAE,GAAG;QACrB,qJAAqJ;QACrJ,OAAO,SAAS,CAAC,QAAQ,KAAK,QAAQ;QACtC,CAAC,SAAS,CAAC,QAAQ,EACnB,CAAC;QACD,MAAM,YAAY,EAAE,CAAC;IACvB,CAAC;IACD,IACE,QAAQ;QACR,CAAC,QAAQ,CAAC,MAAM,KAAK,SAAS,CAAC,IAAI,CAAC,GAAG;YACrC,QAAQ,CAAC,QAAQ,KAAK,SAAS,CAAC,QAAQ,CAAC,EAC3C,CAAC;QACD,MAAM,YAAY,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAED,8FAA8F;AACvF,KAAK,UAAU,uBAAuB,CAC3C,GAAmB,EACnB,cAA+C,EAC/C,eAA6D;IAE7D,MAAM,OAAO,GACX,sBAAsB,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;IAClE,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAC/B,sBAAsB,CAAC,GAAG,EAAE,cAAc,EAAE,eAAe,CAAC,CAC7D,CAAC;IACF,sBAAsB,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACnD,IAAI,CAAC;QACH,OAAO,MAAM,MAAM,CAAC;IACtB,CAAC;YAAS,CAAC;QACT,IAAI,sBAAsB,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,MAAM,EAAE,CAAC;YAC1D,sBAAsB,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,sBAAsB,CACnC,GAAmB,EACnB,cAA+C,EAC/C,eAA6D;IAE7D,MAAM,OAAO,GAAG,GAAG,CAAC,UAAU,CAAC;IAC/B,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC;IACpD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,KAAK,GAA+B,EAAE,aAAa,EAAE,CAAC;IAC5D,iBAAiB,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACtC,IACE,QAAQ;QACR,CAAC,CAAC,QAAQ,CAAC,SAAS,IAAI,QAAQ,CAAC,aAAa,KAAK,aAAa,CAAC,EACjE,CAAC;QACD,MAAM,YAAY,EAAE,CAAC;IACvB,CAAC;IACD,MAAM,KAAK,GAAG,eAAe,CAAC,aAAa,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CACjD,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAC1B,CAAC;IACF,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,YAAY,EAAE,CAAC;IAC9C,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM;QAC/B,CAAC,CAAC,MAAM,QAAQ,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC;QACvC,CAAC,CAAC,MAAM,eAAe,CAAC,KAAK,CAAC,CAAC;IACjC,eAAe,CAAC,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;IAChD,IACE,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK;QACxC,OAAO,CAAC,OAAO,CAAC,aAAa,KAAK,aAAa,EAC/C,CAAC;QACD,MAAM,YAAY,EAAE,CAAC;IACvB,CAAC;IACD,MAAM,QAAQ,GAAG,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;IAC9E,iBAAiB,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;IACvE,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;GAKG;AACH,SAAgB,4BAA4B,CAC1C,GAAmB,EACnB,QAAyB;IAEzB,MAAM,OAAO,GAAG,GAAG,CAAC,UAAU,CAAC;IAC/B,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC;IACpD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAChD,IAAI,QAAQ,EAAE,CAAC;QACb,IACE,CAAC,QAAQ,CAAC,SAAS;YACnB,QAAQ,CAAC,aAAa,KAAK,aAAa;YACxC,QAAQ,CAAC,SAAS,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;YAC7C,QAAQ,CAAC,SAAS,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ,EACjD,CAAC;YACD,MAAM,YAAY,EAAE,CAAC;QACvB,CAAC;QACD,OAAO;IACT,CAAC;IACD,iBAAiB,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,SAAS,EAAE,EAAE,GAAG,QAAQ,EAAE,EAAE,CAAC,CAAC;AAChF,CAAC"}
+{"version":3,"file":"request-authenticators.js","sourceRoot":"","sources":["../../../src/auth/internal/request-authenticators.ts"],"names":[],"mappings":";;AAiCA,0EAWC;AAoDD,0DAQC;AAaD,oDAqBC;AA4CD,oEAmBC;AAxMD,6DAA4E;AAM5E,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAC9B,MAAM,aAAa,GAAG,mBAAmB,CAAC;AAc1C,MAAM,iBAAiB,GAAG,IAAI,OAAO,EAGlC,CAAC;AACJ,MAAM,sBAAsB,GAAG,IAAI,OAAO,EAAqC,CAAC;AAEhF,SAAS,YAAY;IACnB,OAAO,IAAI,0BAAU,CAAC,iBAAiB,EAAE,cAAc,CAAC,CAAC;AAC3D,CAAC;AAED,oFAAoF;AACpF,SAAgB,+BAA+B,CAC7C,GAAmB;IAEnB,MAAM,KAAK,GAAG,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACpD,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,IAAI,KAAK,CAAC,aAAa,KAAK,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;QACjE,MAAM,YAAY,EAAE,CAAC;IACvB,CAAC;IACD,IAAI,KAAK,CAAC,SAAS;QAAE,OAAO,SAAS,CAAC;IACtC,IAAI,CAAC,KAAK,CAAC,SAAS;QAAE,MAAM,YAAY,EAAE,CAAC;IAC3C,OAAO,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC;AAClC,CAAC;AAED,SAAS,eAAe,CAAC,aAAiC;IACxD,MAAM,KAAK,GAAG,aAAa,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;IAClD,IAAI,CAAC,KAAK;QAAE,MAAM,YAAY,EAAE,CAAC;IACjC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,SAAS,eAAe,CACtB,SAA2B,EAC3B,QAA0B;IAE1B;IACE,0LAA0L;IAC1L,OAAO,SAAS,EAAE,IAAI,EAAE,GAAG,KAAK,QAAQ;QACxC,CAAC,SAAS,EAAE,IAAI,EAAE,GAAG;QACrB,qJAAqJ;QACrJ,OAAO,SAAS,CAAC,QAAQ,KAAK,QAAQ;QACtC,CAAC,SAAS,CAAC,QAAQ,EACnB,CAAC;QACD,MAAM,YAAY,EAAE,CAAC;IACvB,CAAC;IACD,IACE,QAAQ;QACR,CAAC,QAAQ,CAAC,MAAM,KAAK,SAAS,CAAC,IAAI,CAAC,GAAG;YACrC,QAAQ,CAAC,QAAQ,KAAK,SAAS,CAAC,QAAQ,CAAC,EAC3C,CAAC;QACD,MAAM,YAAY,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,UAAU,CACvB,OAAwB,EACxB,IAAsB;IAEtB,MAAM,OAAO,GAAG,sBAAsB,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;IACzE,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClC,sBAAsB,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC5C,IAAI,CAAC;QACH,OAAO,MAAM,MAAM,CAAC;IACtB,CAAC;YAAS,CAAC;QACT,IAAI,sBAAsB,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,MAAM,EAAE,CAAC;YACnD,sBAAsB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;AACH,CAAC;AAED,8FAA8F;AACvF,KAAK,UAAU,uBAAuB,CAC3C,GAAmB,EACnB,cAA+C,EAC/C,eAA6D;IAE7D,OAAO,UAAU,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,EAAE,CACrC,sBAAsB,CAAC,GAAG,EAAE,cAAc,EAAE,eAAe,CAAC,CAC7D,CAAC;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACI,KAAK,UAAU,oBAAoB,CACxC,GAAmB,EACnB,WAAoE;IAEpE,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;IACxB,OAAO,UAAU,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,IAAI,EAAE;QAC3C,MAAM,OAAO,GAAG,GAAG,CAAC,UAAU,CAAC;QAC/B,IAAI,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YACnC,OAAO,+BAA+B,CAAC,GAAG,CAAC,CAAC;QAC9C,CAAC;QACD,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC;QACpD,MAAM,KAAK,GAAG,aAAa,EAAE,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACvD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,MAAM,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9D,IAAI,QAAQ,EAAE,CAAC;YACb,4BAA4B,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YAC5C,OAAO,QAAQ,CAAC,QAAQ,CAAC;QAC3B,CAAC;QACD,IAAI,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,MAAM,YAAY,EAAE,CAAC;QACzD,iBAAiB,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACnE,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,sBAAsB,CACnC,GAAmB,EACnB,cAA+C,EAC/C,eAA6D;IAE7D,MAAM,OAAO,GAAG,GAAG,CAAC,UAAU,CAAC;IAC/B,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC;IACpD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,KAAK,GAA+B,EAAE,aAAa,EAAE,CAAC;IAC5D,iBAAiB,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACtC,IACE,QAAQ;QACR,CAAC,CAAC,QAAQ,CAAC,SAAS,IAAI,QAAQ,CAAC,aAAa,KAAK,aAAa,CAAC,EACjE,CAAC;QACD,MAAM,YAAY,EAAE,CAAC;IACvB,CAAC;IACD,MAAM,KAAK,GAAG,eAAe,CAAC,aAAa,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CACjD,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAC1B,CAAC;IACF,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,YAAY,EAAE,CAAC;IAC9C,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM;QAC/B,CAAC,CAAC,MAAM,QAAQ,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC;QACvC,CAAC,CAAC,MAAM,eAAe,CAAC,KAAK,CAAC,CAAC;IACjC,eAAe,CAAC,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;IAChD,IACE,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK;QACxC,OAAO,CAAC,OAAO,CAAC,aAAa,KAAK,aAAa,EAC/C,CAAC;QACD,MAAM,YAAY,EAAE,CAAC;IACvB,CAAC;IACD,MAAM,QAAQ,GAAG,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;IAC9E,iBAAiB,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;IACvE,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;GAKG;AACH,SAAgB,4BAA4B,CAC1C,GAAmB,EACnB,QAAyB;IAEzB,MAAM,OAAO,GAAG,GAAG,CAAC,UAAU,CAAC;IAC/B,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC;IACpD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAChD,IAAI,QAAQ,EAAE,CAAC;QACb,IACE,CAAC,QAAQ,CAAC,SAAS;YACnB,QAAQ,CAAC,aAAa,KAAK,aAAa;YACxC,QAAQ,CAAC,SAAS,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;YAC7C,QAAQ,CAAC,SAAS,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ,EACjD,CAAC;YACD,MAAM,YAAY,EAAE,CAAC;QACvB,CAAC;QACD,OAAO;IACT,CAAC;IACD,iBAAiB,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,SAAS,EAAE,EAAE,GAAG,QAAQ,EAAE,EAAE,CAAC,CAAC;AAChF,CAAC"}