@contember/engine-tenant-api 2.1.0-rc.3 → 2.2.0-alpha.10

package/dist/types/resolvers/mutation/identity/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/resolvers/mutation/identity/index.ts"],"names":[],"mappings":"AAAA,cAAc,+BAA+B,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/resolvers/mutation/identity/index.ts"],"names":[],"mappings":"AAAA,cAAc,kCAAkC,CAAA"}

package/dist/types/resolvers/mutation/idp/AddIDPMutationResolver.d.ts

@@ -1,6 +1,6 @@
-import { AddIdpResponse, MutationAddIdpArgs, MutationResolvers } from '../../../schema';
-import { IDPManager } from '../../../model/service/idp/IDPManager';
-import { TenantResolverContext } from '../../TenantResolverContext';
+import { AddIdpResponse, MutationAddIdpArgs, MutationResolvers } from '../../../schema/index.js';
+import { IDPManager } from '../../../model/service/idp/IDPManager.js';
+import { TenantResolverContext } from '../../TenantResolverContext.js';
 export declare class AddIDPMutationResolver implements MutationResolvers {
     private readonly idpManager;
     constructor(idpManager: IDPManager);

package/dist/types/resolvers/mutation/idp/AddIDPMutationResolver.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AddIDPMutationResolver.d.ts","sourceRoot":"","sources":["../../../../../src/resolvers/mutation/idp/AddIDPMutationResolver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AAEvF,OAAO,EAAE,UAAU,EAAE,MAAM,uCAAuC,CAAA;AAElE,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAA;AAEnE,qBAAa,sBAAuB,YAAW,iBAAiB;IACnD,OAAO,CAAC,QAAQ,CAAC,UAAU;gBAAV,UAAU,EAAE,UAAU;IAG7C,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,cAAc,CAAC;CAqBhH"}
+{"version":3,"file":"AddIDPMutationResolver.d.ts","sourceRoot":"","sources":["../../../../../src/resolvers/mutation/idp/AddIDPMutationResolver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAA;AAEhG,OAAO,EAAE,UAAU,EAAE,MAAM,0CAA0C,CAAA;AAErE,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAA;AAKtE,qBAAa,sBAAuB,YAAW,iBAAiB;IACnD,OAAO,CAAC,QAAQ,CAAC,UAAU;IAAvC,YAA6B,UAAU,EAAE,UAAU,EAClD;IAEK,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,cAAc,CAAC,CAkC/G;CACD"}

package/dist/types/resolvers/mutation/idp/DisableIDPMutationResolver.d.ts

@@ -1,6 +1,6 @@
-import { DisableIdpResponse, MutationDisableIdpArgs, MutationResolvers } from '../../../schema';
-import { IDPManager } from '../../../model/service/idp/IDPManager';
-import { TenantResolverContext } from '../../TenantResolverContext';
+import { DisableIdpResponse, MutationDisableIdpArgs, MutationResolvers } from '../../../schema/index.js';
+import { IDPManager } from '../../../model/service/idp/IDPManager.js';
+import { TenantResolverContext } from '../../TenantResolverContext.js';
 export declare class DisableIDPMutationResolver implements MutationResolvers {
     private readonly idpManager;
     constructor(idpManager: IDPManager);

package/dist/types/resolvers/mutation/idp/DisableIDPMutationResolver.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"DisableIDPMutationResolver.d.ts","sourceRoot":"","sources":["../../../../../src/resolvers/mutation/idp/DisableIDPMutationResolver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AAE/F,OAAO,EAAE,UAAU,EAAE,MAAM,uCAAuC,CAAA;AAElE,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAA;AAEnE,qBAAa,0BAA2B,YAAW,iBAAiB;IACvD,OAAO,CAAC,QAAQ,CAAC,UAAU;gBAAV,UAAU,EAAE,UAAU;IAG7C,UAAU,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,sBAAsB,EAAE,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,kBAAkB,CAAC;CAYxH"}
+{"version":3,"file":"DisableIDPMutationResolver.d.ts","sourceRoot":"","sources":["../../../../../src/resolvers/mutation/idp/DisableIDPMutationResolver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAA;AAExG,OAAO,EAAE,UAAU,EAAE,MAAM,0CAA0C,CAAA;AAErE,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAA;AAGtE,qBAAa,0BAA2B,YAAW,iBAAiB;IACvD,OAAO,CAAC,QAAQ,CAAC,UAAU;IAAvC,YAA6B,UAAU,EAAE,UAAU,EAClD;IAEK,UAAU,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,sBAAsB,EAAE,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAiBvH;CACD"}

package/dist/types/resolvers/mutation/idp/DisconnectMyIdentityProviderMutationResolver.d.ts

@@ -0,0 +1,9 @@
+import { DisconnectIdpResponse, MutationDisconnectMyIdentityProviderArgs, MutationResolvers } from '../../../schema/index.js';
+import { PersonIdentityProviderManager } from '../../../model/index.js';
+import { TenantResolverContext } from '../../TenantResolverContext.js';
+export declare class DisconnectMyIdentityProviderMutationResolver implements Pick<MutationResolvers, 'disconnectMyIdentityProvider'> {
+    private readonly personIdentityProviderManager;
+    constructor(personIdentityProviderManager: PersonIdentityProviderManager);
+    disconnectMyIdentityProvider(parent: unknown, args: MutationDisconnectMyIdentityProviderArgs, context: TenantResolverContext): Promise<DisconnectIdpResponse>;
+}
+//# sourceMappingURL=DisconnectMyIdentityProviderMutationResolver.d.ts.map

package/dist/types/resolvers/mutation/idp/DisconnectMyIdentityProviderMutationResolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"DisconnectMyIdentityProviderMutationResolver.d.ts","sourceRoot":"","sources":["../../../../../src/resolvers/mutation/idp/DisconnectMyIdentityProviderMutationResolver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,wCAAwC,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAA;AAC7H,OAAO,EAAqB,6BAA6B,EAAe,MAAM,yBAAyB,CAAA;AAEvG,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAA;AAGtE,qBAAa,4CAA6C,YAAW,IAAI,CAAC,iBAAiB,EAAE,8BAA8B,CAAC;IAE1H,OAAO,CAAC,QAAQ,CAAC,6BAA6B;IAD/C,YACkB,6BAA6B,EAAE,6BAA6B,EAE7E;IAEK,4BAA4B,CACjC,MAAM,EAAE,OAAO,EACf,IAAI,EAAE,wCAAwC,EAC9C,OAAO,EAAE,qBAAqB,GAC5B,OAAO,CAAC,qBAAqB,CAAC,CAwBhC;CACD"}

package/dist/types/resolvers/mutation/idp/EnableIDPMutationResolver.d.ts

@@ -1,6 +1,6 @@
-import { EnableIdpResponse, MutationEnableIdpArgs, MutationResolvers } from '../../../schema';
-import { IDPManager } from '../../../model/service/idp/IDPManager';
-import { TenantResolverContext } from '../../TenantResolverContext';
+import { EnableIdpResponse, MutationEnableIdpArgs, MutationResolvers } from '../../../schema/index.js';
+import { IDPManager } from '../../../model/service/idp/IDPManager.js';
+import { TenantResolverContext } from '../../TenantResolverContext.js';
 export declare class EnableIDPMutationResolver implements MutationResolvers {
     private readonly idpManager;
     constructor(idpManager: IDPManager);

package/dist/types/resolvers/mutation/idp/EnableIDPMutationResolver.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"EnableIDPMutationResolver.d.ts","sourceRoot":"","sources":["../../../../../src/resolvers/mutation/idp/EnableIDPMutationResolver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AAG7F,OAAO,EAAE,UAAU,EAAE,MAAM,uCAAuC,CAAA;AAElE,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAA;AAEnE,qBAAa,yBAA0B,YAAW,iBAAiB;IACtD,OAAO,CAAC,QAAQ,CAAC,UAAU;gBAAV,UAAU,EAAE,UAAU;IAG7C,SAAS,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,iBAAiB,CAAC;CAYrH"}
+{"version":3,"file":"EnableIDPMutationResolver.d.ts","sourceRoot":"","sources":["../../../../../src/resolvers/mutation/idp/EnableIDPMutationResolver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAA;AAGtG,OAAO,EAAE,UAAU,EAAE,MAAM,0CAA0C,CAAA;AAErE,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAA;AAGtE,qBAAa,yBAA0B,YAAW,iBAAiB;IACtD,OAAO,CAAC,QAAQ,CAAC,UAAU;IAAvC,YAA6B,UAAU,EAAE,UAAU,EAClD;IAEK,SAAS,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAiBpH;CACD"}

package/dist/types/resolvers/mutation/idp/UpdateIDPMutationResolver.d.ts

@@ -1,6 +1,6 @@
-import { MutationResolvers, MutationUpdateIdpArgs, UpdateIdpResponse } from '../../../schema';
-import { IDPManager } from '../../../model/service/idp/IDPManager';
-import { TenantResolverContext } from '../../TenantResolverContext';
+import { MutationResolvers, MutationUpdateIdpArgs, UpdateIdpResponse } from '../../../schema/index.js';
+import { IDPManager } from '../../../model/service/idp/IDPManager.js';
+import { TenantResolverContext } from '../../TenantResolverContext.js';
 export declare class UpdateIDPMutationResolver implements MutationResolvers {
     private readonly idpManager;
     constructor(idpManager: IDPManager);

package/dist/types/resolvers/mutation/idp/UpdateIDPMutationResolver.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"UpdateIDPMutationResolver.d.ts","sourceRoot":"","sources":["../../../../../src/resolvers/mutation/idp/UpdateIDPMutationResolver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AAE7F,OAAO,EAAE,UAAU,EAAE,MAAM,uCAAuC,CAAA;AAElE,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAA;AAEnE,qBAAa,yBAA0B,YAAW,iBAAiB;IACtD,OAAO,CAAC,QAAQ,CAAC,UAAU;gBAAV,UAAU,EAAE,UAAU;IAG7C,SAAS,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,iBAAiB,CAAC;CAoBrH"}
+{"version":3,"file":"UpdateIDPMutationResolver.d.ts","sourceRoot":"","sources":["../../../../../src/resolvers/mutation/idp/UpdateIDPMutationResolver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAA;AAEtG,OAAO,EAAE,UAAU,EAAE,MAAM,0CAA0C,CAAA;AAErE,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAA;AAKtE,qBAAa,yBAA0B,YAAW,iBAAiB;IACtD,OAAO,CAAC,QAAQ,CAAC,UAAU;IAAvC,YAA6B,UAAU,EAAE,UAAU,EAClD;IAEK,SAAS,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAkCpH;CACD"}

package/dist/types/resolvers/mutation/idp/audit.d.ts

@@ -0,0 +1,4 @@
+import { JSONValue } from '@contember/schema';
+import { IdentityProviderRow } from '../../../model/queries/idp/types.js';
+export declare const idpRowToAuditSnapshot: (row: IdentityProviderRow | null) => JSONValue;
+//# sourceMappingURL=audit.d.ts.map

package/dist/types/resolvers/mutation/idp/audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../../../../src/resolvers/mutation/idp/audit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAA;AAC7C,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAA;AAEzE,eAAO,MAAM,qBAAqB,QAAS,mBAAmB,GAAG,IAAI,KAAG,SAgBvE,CAAA"}

package/dist/types/resolvers/mutation/idp/index.d.ts

@@ -1,4 +1,5 @@
-export * from './DisableIDPMutationResolver';
-export * from './EnableIDPMutationResolver';
-export * from './AddIDPMutationResolver';
+export * from './DisableIDPMutationResolver.js';
+export * from './EnableIDPMutationResolver.js';
+export * from './AddIDPMutationResolver.js';
+export * from './DisconnectMyIdentityProviderMutationResolver.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/types/resolvers/mutation/idp/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/resolvers/mutation/idp/index.ts"],"names":[],"mappings":"AAAA,cAAc,8BAA8B,CAAA;AAC5C,cAAc,6BAA6B,CAAA;AAC3C,cAAc,0BAA0B,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/resolvers/mutation/idp/index.ts"],"names":[],"mappings":"AAAA,cAAc,iCAAiC,CAAA;AAC/C,cAAc,gCAAgC,CAAA;AAC9C,cAAc,6BAA6B,CAAA;AAC3C,cAAc,mDAAmD,CAAA"}

package/dist/types/resolvers/mutation/index.d.ts

@@ -1,8 +1,8 @@
-export * from './apiKey';
-export * from './identity';
-export * from './idp';
-export * from './mailTemplates';
-export * from './person';
-export * from './project';
-export * from './projectMember';
+export * from './apiKey/index.js';
+export * from './identity/index.js';
+export * from './idp/index.js';
+export * from './mailTemplates/index.js';
+export * from './person/index.js';
+export * from './project/index.js';
+export * from './projectMember/index.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/types/resolvers/mutation/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/resolvers/mutation/index.ts"],"names":[],"mappings":"AAAA,cAAc,UAAU,CAAA;AACxB,cAAc,YAAY,CAAA;AAC1B,cAAc,OAAO,CAAA;AACrB,cAAc,iBAAiB,CAAA;AAC/B,cAAc,UAAU,CAAA;AACxB,cAAc,WAAW,CAAA;AACzB,cAAc,iBAAiB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/resolvers/mutation/index.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAA;AACjC,cAAc,qBAAqB,CAAA;AACnC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,0BAA0B,CAAA;AACxC,cAAc,mBAAmB,CAAA;AACjC,cAAc,oBAAoB,CAAA;AAClC,cAAc,0BAA0B,CAAA"}

package/dist/types/resolvers/mutation/mailTemplates/MailTemplateMutationResolver.d.ts

@@ -1,10 +1,12 @@
-import { AddMailTemplateResponse, MutationAddProjectMailTemplateArgs, MutationRemoveProjectMailTemplateArgs, MutationResolvers, RemoveMailTemplateResponse } from '../../../schema';
-import { TenantResolverContext } from '../../TenantResolverContext';
-import { MailTemplateManager, ProjectManager } from '../../../model';
+import { AddMailTemplateResponse, MutationAddProjectMailTemplateArgs, MutationRemoveProjectMailTemplateArgs, MutationResolvers, RemoveMailTemplateResponse } from '../../../schema/index.js';
+import { TenantResolverContext } from '../../TenantResolverContext.js';
+import { MailTemplateManager, ProjectManager } from '../../../model/index.js';
 export declare class MailTemplateMutationResolver implements MutationResolvers {
     private readonly projectManager;
     private readonly mailTemplateManager;
     constructor(projectManager: ProjectManager, mailTemplateManager: MailTemplateManager);
+    /** A mail template is either global or project-scoped; both the scope and the permission meta follow from that. */
+    private requireTemplateAccess;
     addMailTemplate(parent: any, { template: { content, projectSlug, subject, type, useLayout, variant, replyTo } }: MutationAddProjectMailTemplateArgs, context: TenantResolverContext): Promise<AddMailTemplateResponse>;
     removeMailTemplate(parent: any, { templateIdentifier: { projectSlug, type, variant } }: MutationRemoveProjectMailTemplateArgs, context: TenantResolverContext): Promise<RemoveMailTemplateResponse>;
 }

package/dist/types/resolvers/mutation/mailTemplates/MailTemplateMutationResolver.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"MailTemplateMutationResolver.d.ts","sourceRoot":"","sources":["../../../../../src/resolvers/mutation/mailTemplates/MailTemplateMutationResolver.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,uBAAuB,EACvB,kCAAkC,EAClC,qCAAqC,EACrC,iBAAiB,EACjB,0BAA0B,EAC1B,MAAM,iBAAiB,CAAA;AACxB,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAA;AACnE,OAAO,EAAE,mBAAmB,EAA6C,cAAc,EAAE,MAAM,gBAAgB,CAAA;AAI/G,qBAAa,4BAA6B,YAAW,iBAAiB;IAEpE,OAAO,CAAC,QAAQ,CAAC,cAAc;IAC/B,OAAO,CAAC,QAAQ,CAAC,mBAAmB;gBADnB,cAAc,EAAE,cAAc,EAC9B,mBAAmB,EAAE,mBAAmB;IAGpD,eAAe,CACpB,MAAM,EAAE,GAAG,EACX,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,kCAAkC,EACtH,OAAO,EAAE,qBAAqB,GAC5B,OAAO,CAAC,uBAAuB,CAAC;IA8B7B,kBAAkB,CACvB,MAAM,EAAE,GAAG,EACX,EAAE,kBAAkB,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,qCAAqC,EAC7F,OAAO,EAAE,qBAAqB,GAC5B,OAAO,CAAC,0BAA0B,CAAC;CAyBtC"}
+{"version":3,"file":"MailTemplateMutationResolver.d.ts","sourceRoot":"","sources":["../../../../../src/resolvers/mutation/mailTemplates/MailTemplateMutationResolver.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,uBAAuB,EAEvB,kCAAkC,EAClC,qCAAqC,EACrC,iBAAiB,EACjB,0BAA0B,EAC1B,MAAM,0BAA0B,CAAA;AACjC,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAA;AACtE,OAAO,EACN,mBAAmB,EAKnB,cAAc,EACd,MAAM,yBAAyB,CAAA;AAMhC,qBAAa,4BAA6B,YAAW,iBAAiB;IAEpE,OAAO,CAAC,QAAQ,CAAC,cAAc;IAC/B,OAAO,CAAC,QAAQ,CAAC,mBAAmB;IAFrC,YACkB,cAAc,EAAE,cAAc,EAC9B,mBAAmB,EAAE,mBAAmB,EACtD;IAEJ,mHAAmH;YACrG,qBAAqB;IAsB7B,eAAe,CACpB,MAAM,EAAE,GAAG,EACX,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,kCAAkC,EACtH,OAAO,EAAE,qBAAqB,GAC5B,OAAO,CAAC,uBAAuB,CAAC,CAwClC;IAEK,kBAAkB,CACvB,MAAM,EAAE,GAAG,EACX,EAAE,kBAAkB,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,qCAAqC,EAC7F,OAAO,EAAE,qBAAqB,GAC5B,OAAO,CAAC,0BAA0B,CAAC,CAoCrC;CACD"}

package/dist/types/resolvers/mutation/mailTemplates/index.d.ts

@@ -1,2 +1,2 @@
-export * from './MailTemplateMutationResolver';
+export * from './MailTemplateMutationResolver.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/types/resolvers/mutation/mailTemplates/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/resolvers/mutation/mailTemplates/index.ts"],"names":[],"mappings":"AAAA,cAAc,gCAAgC,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/resolvers/mutation/mailTemplates/index.ts"],"names":[],"mappings":"AAAA,cAAc,mCAAmC,CAAA"}

package/dist/types/resolvers/mutation/person/ChangePasswordMutationResolver.d.ts

@@ -1,7 +1,7 @@
-import { ChangeMyPasswordResponse, ChangePasswordResponse, MutationChangeMyPasswordArgs, MutationChangePasswordArgs, MutationResolvers } from '../../../schema';
+import { ChangeMyPasswordResponse, ChangePasswordResponse, MutationChangeMyPasswordArgs, MutationChangePasswordArgs, MutationResolvers } from '../../../schema/index.js';
 import { GraphQLResolveInfo } from 'graphql';
-import { TenantResolverContext } from '../../TenantResolverContext';
-import { PasswordChangeManager } from '../../../model';
+import { TenantResolverContext } from '../../TenantResolverContext.js';
+import { PasswordChangeManager } from '../../../model/index.js';
 export declare class ChangePasswordMutationResolver implements MutationResolvers {
     private readonly passwordChangeManager;
     constructor(passwordChangeManager: PasswordChangeManager);

package/dist/types/resolvers/mutation/person/ChangePasswordMutationResolver.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ChangePasswordMutationResolver.d.ts","sourceRoot":"","sources":["../../../../../src/resolvers/mutation/person/ChangePasswordMutationResolver.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,wBAAwB,EACxB,sBAAsB,EACtB,4BAA4B,EAC5B,0BAA0B,EAC1B,iBAAiB,EACjB,MAAM,iBAAiB,CAAA;AACxB,OAAO,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAA;AAC5C,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAA;AACnE,OAAO,EAAiB,qBAAqB,EAAkC,MAAM,gBAAgB,CAAA;AAGrG,qBAAa,8BAA+B,YAAW,iBAAiB;IAEtE,OAAO,CAAC,QAAQ,CAAC,qBAAqB;gBAArB,qBAAqB,EAAE,qBAAqB;IAGxD,cAAc,CACnB,MAAM,EAAE,OAAO,EACf,IAAI,EAAE,0BAA0B,EAChC,OAAO,EAAE,qBAAqB,EAC9B,IAAI,EAAE,kBAAkB,GACtB,OAAO,CAAC,sBAAsB,CAAC;IAyB5B,gBAAgB,CACrB,MAAM,EAAE,OAAO,EACf,IAAI,EAAE,4BAA4B,EAClC,OAAO,EAAE,qBAAqB,EAC9B,IAAI,EAAE,kBAAkB,GACtB,OAAO,CAAC,wBAAwB,CAAC;CAsBpC"}
+{"version":3,"file":"ChangePasswordMutationResolver.d.ts","sourceRoot":"","sources":["../../../../../src/resolvers/mutation/person/ChangePasswordMutationResolver.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,wBAAwB,EACxB,sBAAsB,EACtB,4BAA4B,EAC5B,0BAA0B,EAC1B,iBAAiB,EACjB,MAAM,0BAA0B,CAAA;AACjC,OAAO,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAA;AAC5C,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAA;AACtE,OAAO,EAA+C,qBAAqB,EAAkC,MAAM,yBAAyB,CAAA;AAG5I,qBAAa,8BAA+B,YAAW,iBAAiB;IAEtE,OAAO,CAAC,QAAQ,CAAC,qBAAqB;IADvC,YACkB,qBAAqB,EAAE,qBAAqB,EAC1D;IAEE,cAAc,CACnB,MAAM,EAAE,OAAO,EACf,IAAI,EAAE,0BAA0B,EAChC,OAAO,EAAE,qBAAqB,EAC9B,IAAI,EAAE,kBAAkB,GACtB,OAAO,CAAC,sBAAsB,CAAC,CAuBjC;IAEK,gBAAgB,CACrB,MAAM,EAAE,OAAO,EACf,IAAI,EAAE,4BAA4B,EAClC,OAAO,EAAE,qBAAqB,EAC9B,IAAI,EAAE,kBAAkB,GACtB,OAAO,CAAC,wBAAwB,CAAC,CAqBnC;CACD"}

package/dist/types/resolvers/mutation/person/ChangeProfileMutationResolver.d.ts

@@ -1,11 +1,14 @@
-import { ChangeMyProfileResponse, ChangeProfileResponse, MutationChangeMyProfileArgs, MutationChangeProfileArgs, MutationResolvers } from '../../../schema';
+import { ChangeMyProfileResponse, ChangeProfileResponse, ConfirmEmailChangeResponse, MutationChangeMyProfileArgs, MutationChangeProfileArgs, MutationConfirmEmailChangeArgs, MutationResolvers } from '../../../schema/index.js';
 import { GraphQLResolveInfo } from 'graphql';
-import { TenantResolverContext } from '../../TenantResolverContext';
-import { PersonManager } from '../../../model';
-export declare class ChangeProfileMutationResolver implements Pick<MutationResolvers, 'changeMyProfile' | 'changeProfile'> {
+import { TenantResolverContext } from '../../TenantResolverContext.js';
+import { EmailChangeManager, PermissionContextFactory, PersonManager } from '../../../model/index.js';
+export declare class ChangeProfileMutationResolver implements Pick<MutationResolvers, 'changeMyProfile' | 'changeProfile' | 'confirmEmailChange'> {
     private readonly personManager;
-    constructor(personManager: PersonManager);
+    private readonly emailChangeManager;
+    private readonly permissionContextFactory;
+    constructor(personManager: PersonManager, emailChangeManager: EmailChangeManager, permissionContextFactory: PermissionContextFactory);
     changeProfile(parent: unknown, args: MutationChangeProfileArgs, context: TenantResolverContext, info: GraphQLResolveInfo): Promise<ChangeProfileResponse>;
     changeMyProfile(parent: unknown, args: MutationChangeMyProfileArgs, context: TenantResolverContext, info: GraphQLResolveInfo): Promise<ChangeMyProfileResponse>;
+    confirmEmailChange(parent: unknown, args: MutationConfirmEmailChangeArgs, context: TenantResolverContext, info: GraphQLResolveInfo): Promise<ConfirmEmailChangeResponse>;
 }
 //# sourceMappingURL=ChangeProfileMutationResolver.d.ts.map

package/dist/types/resolvers/mutation/person/ChangeProfileMutationResolver.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ChangeProfileMutationResolver.d.ts","sourceRoot":"","sources":["../../../../../src/resolvers/mutation/person/ChangeProfileMutationResolver.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,uBAAuB,EACvB,qBAAqB,EACrB,2BAA2B,EAC3B,yBAAyB,EACzB,iBAAiB,EACjB,MAAM,iBAAiB,CAAA;AACxB,OAAO,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAA;AAC5C,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAA;AACnE,OAAO,EAAoC,aAAa,EAAe,MAAM,gBAAgB,CAAA;AAG7F,qBAAa,6BAA8B,YAAW,IAAI,CAAC,iBAAiB,EAAE,iBAAiB,GAAG,eAAe,CAAC;IAEhH,OAAO,CAAC,QAAQ,CAAC,aAAa;gBAAb,aAAa,EAAE,aAAa;IAGxC,aAAa,CAClB,MAAM,EAAE,OAAO,EACf,IAAI,EAAE,yBAAyB,EAC/B,OAAO,EAAE,qBAAqB,EAC9B,IAAI,EAAE,kBAAkB,GACtB,OAAO,CAAC,qBAAqB,CAAC;IAgC3B,eAAe,CACpB,MAAM,EAAE,OAAO,EACf,IAAI,EAAE,2BAA2B,EACjC,OAAO,EAAE,qBAAqB,EAC9B,IAAI,EAAE,kBAAkB,GACtB,OAAO,CAAC,uBAAuB,CAAC;CAgCnC"}
+{"version":3,"file":"ChangeProfileMutationResolver.d.ts","sourceRoot":"","sources":["../../../../../src/resolvers/mutation/person/ChangeProfileMutationResolver.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,uBAAuB,EACvB,qBAAqB,EACrB,0BAA0B,EAC1B,2BAA2B,EAC3B,yBAAyB,EACzB,8BAA8B,EAC9B,iBAAiB,EACjB,MAAM,0BAA0B,CAAA;AACjC,OAAO,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAA;AAC5C,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAA;AACtE,OAAO,EAGN,kBAAkB,EAGlB,wBAAwB,EACxB,aAAa,EAGb,MAAM,yBAAyB,CAAA;AAIhC,qBAAa,6BAA8B,YAAW,IAAI,CAAC,iBAAiB,EAAE,iBAAiB,GAAG,eAAe,GAAG,oBAAoB,CAAC;IAEvI,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IACnC,OAAO,CAAC,QAAQ,CAAC,wBAAwB;IAH1C,YACkB,aAAa,EAAE,aAAa,EAC5B,kBAAkB,EAAE,kBAAkB,EACtC,wBAAwB,EAAE,wBAAwB,EAChE;IAEE,aAAa,CAClB,MAAM,EAAE,OAAO,EACf,IAAI,EAAE,yBAAyB,EAC/B,OAAO,EAAE,qBAAqB,EAC9B,IAAI,EAAE,kBAAkB,GACtB,OAAO,CAAC,qBAAqB,CAAC,CAkChC;IAEK,eAAe,CACpB,MAAM,EAAE,OAAO,EACf,IAAI,EAAE,2BAA2B,EACjC,OAAO,EAAE,qBAAqB,EAC9B,IAAI,EAAE,kBAAkB,GACtB,OAAO,CAAC,uBAAuB,CAAC,CAiFlC;IAEK,kBAAkB,CACvB,MAAM,EAAE,OAAO,EACf,IAAI,EAAE,8BAA8B,EACpC,OAAO,EAAE,qBAAqB,EAC9B,IAAI,EAAE,kBAAkB,GACtB,OAAO,CAAC,0BAA0B,CAAC,CAiBrC;CACD"}

package/dist/types/resolvers/mutation/person/DisablePersonMutationResolver.d.ts

@@ -1,11 +1,11 @@
-import { DisablePersonResponse, MutationDisablePersonArgs, MutationResolvers } from '../../../schema';
-import { TenantResolverContext } from '../../TenantResolverContext';
-import { PersonAccessManager } from '../../../model';
-import { PersonManager } from '../../../model/service/PersonManager';
+import { DisablePersonResponse, MutationDisablePersonArgs, MutationResolvers } from '../../../schema/index.js';
+import { TenantResolverContext } from '../../TenantResolverContext.js';
+import { PersonAccessManager } from '../../../model/index.js';
+import { PersonManager } from '../../../model/service/PersonManager.js';
 export declare class DisablePersonMutationResolver implements MutationResolvers {
     private readonly personAccessManager;
     private readonly personManager;
     constructor(personAccessManager: PersonAccessManager, personManager: PersonManager);
-    disablePerson(parent: any, args: MutationDisablePersonArgs, context: TenantResolverContext): Promise<DisablePersonResponse>;
+    disablePerson(parent: unknown, args: MutationDisablePersonArgs, context: TenantResolverContext): Promise<DisablePersonResponse>;
 }
 //# sourceMappingURL=DisablePersonMutationResolver.d.ts.map

package/dist/types/resolvers/mutation/person/DisablePersonMutationResolver.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"DisablePersonMutationResolver.d.ts","sourceRoot":"","sources":["../../../../../src/resolvers/mutation/person/DisablePersonMutationResolver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AACrG,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAA;AACnE,OAAO,EAAqB,mBAAmB,EAAE,MAAM,gBAAgB,CAAA;AACvE,OAAO,EAAE,aAAa,EAAE,MAAM,sCAAsC,CAAA;AAGpE,qBAAa,6BAA8B,YAAW,iBAAiB;IAErE,OAAO,CAAC,QAAQ,CAAC,mBAAmB;IACpC,OAAO,CAAC,QAAQ,CAAC,aAAa;gBADb,mBAAmB,EAAE,mBAAmB,EACxC,aAAa,EAAE,aAAa;IAGxC,aAAa,CAClB,MAAM,EAAE,GAAG,EACX,IAAI,EAAE,yBAAyB,EAC/B,OAAO,EAAE,qBAAqB,GAC5B,OAAO,CAAC,qBAAqB,CAAC;CAgCjC"}
+{"version":3,"file":"DisablePersonMutationResolver.d.ts","sourceRoot":"","sources":["../../../../../src/resolvers/mutation/person/DisablePersonMutationResolver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAA;AAC9G,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAA;AACtE,OAAO,EAAmD,mBAAmB,EAAE,MAAM,yBAAyB,CAAA;AAC9G,OAAO,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAA;AAGvE,qBAAa,6BAA8B,YAAW,iBAAiB;IAErE,OAAO,CAAC,QAAQ,CAAC,mBAAmB;IACpC,OAAO,CAAC,QAAQ,CAAC,aAAa;IAF/B,YACkB,mBAAmB,EAAE,mBAAmB,EACxC,aAAa,EAAE,aAAa,EAC1C;IAEE,aAAa,CAClB,MAAM,EAAE,OAAO,EACf,IAAI,EAAE,yBAAyB,EAC/B,OAAO,EAAE,qBAAqB,GAC5B,OAAO,CAAC,qBAAqB,CAAC,CA+BhC;CACD"}

package/dist/types/resolvers/mutation/person/EmailOtpMutationResolver.d.ts

@@ -0,0 +1,14 @@
+import { ConfirmEmailOtpResponse, DisableEmailOtpResponse, InitEmailOtpResponse, MutationConfirmEmailOtpArgs, MutationResolvers } from '../../../schema/index.js';
+import { TenantResolverContext } from '../../TenantResolverContext.js';
+import { AuthPolicyResolver, BackupCodeManager, EmailOtpManager } from '../../../model/index.js';
+export declare class EmailOtpMutationResolver implements Pick<MutationResolvers, 'initEmailOtp' | 'confirmEmailOtp' | 'disableEmailOtp'> {
+    private readonly emailOtpManager;
+    private readonly backupCodeManager;
+    private readonly authPolicyResolver;
+    constructor(emailOtpManager: EmailOtpManager, backupCodeManager: BackupCodeManager, authPolicyResolver: AuthPolicyResolver);
+    initEmailOtp(parent: any, args: {}, context: TenantResolverContext): Promise<InitEmailOtpResponse>;
+    confirmEmailOtp(parent: any, args: MutationConfirmEmailOtpArgs, context: TenantResolverContext): Promise<ConfirmEmailOtpResponse>;
+    disableEmailOtp(parent: any, args: {}, context: TenantResolverContext): Promise<DisableEmailOtpResponse>;
+    private getPersonFromContext;
+}
+//# sourceMappingURL=EmailOtpMutationResolver.d.ts.map

package/dist/types/resolvers/mutation/person/EmailOtpMutationResolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"EmailOtpMutationResolver.d.ts","sourceRoot":"","sources":["../../../../../src/resolvers/mutation/person/EmailOtpMutationResolver.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,uBAAuB,EACvB,uBAAuB,EACvB,oBAAoB,EACpB,2BAA2B,EAC3B,iBAAiB,EACjB,MAAM,0BAA0B,CAAA;AACjC,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAA;AACtE,OAAO,EACN,kBAAkB,EAClB,iBAAiB,EAEjB,eAAe,EAIf,MAAM,yBAAyB,CAAA;AAMhC,qBAAa,wBAAyB,YAAW,IAAI,CAAC,iBAAiB,EAAE,cAAc,GAAG,iBAAiB,GAAG,iBAAiB,CAAC;IAE9H,OAAO,CAAC,QAAQ,CAAC,eAAe;IAChC,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAClC,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IAHpC,YACkB,eAAe,EAAE,eAAe,EAChC,iBAAiB,EAAE,iBAAiB,EACpC,kBAAkB,EAAE,kBAAkB,EACpD;IAEE,YAAY,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAcvG;IAEK,eAAe,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,2BAA2B,EAAE,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAwBtI;IAEK,eAAe,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,uBAAuB,CAAC,CA0B7G;YAEa,oBAAoB;CAYlC"}

package/dist/types/resolvers/mutation/person/EmailVerificationMutationResolver.d.ts

@@ -0,0 +1,14 @@
+import { MutationRequestEmailVerificationArgs, MutationResolvers, MutationVerifyEmailArgs, RequestEmailVerificationResponse, VerifyEmailResponse } from '../../../schema/index.js';
+import { GraphQLResolveInfo } from 'graphql';
+import { TenantResolverContext } from '../../TenantResolverContext.js';
+import { CaptchaValidator, EmailVerificationManager, PermissionContextFactory, RateLimiter } from '../../../model/index.js';
+export declare class EmailVerificationMutationResolver implements Pick<MutationResolvers, 'requestEmailVerification' | 'verifyEmail'> {
+    private readonly emailVerificationManager;
+    private readonly permissionContextFactory;
+    private readonly captchaValidator;
+    private readonly rateLimiter;
+    constructor(emailVerificationManager: EmailVerificationManager, permissionContextFactory: PermissionContextFactory, captchaValidator: CaptchaValidator, rateLimiter: RateLimiter);
+    requestEmailVerification(parent: unknown, args: MutationRequestEmailVerificationArgs, context: TenantResolverContext, info: GraphQLResolveInfo): Promise<RequestEmailVerificationResponse>;
+    verifyEmail(parent: unknown, args: MutationVerifyEmailArgs, context: TenantResolverContext, info: GraphQLResolveInfo): Promise<VerifyEmailResponse>;
+}
+//# sourceMappingURL=EmailVerificationMutationResolver.d.ts.map

package/dist/types/resolvers/mutation/person/EmailVerificationMutationResolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"EmailVerificationMutationResolver.d.ts","sourceRoot":"","sources":["../../../../../src/resolvers/mutation/person/EmailVerificationMutationResolver.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,oCAAoC,EACpC,iBAAiB,EACjB,uBAAuB,EACvB,gCAAgC,EAChC,mBAAmB,EACnB,MAAM,0BAA0B,CAAA;AACjC,OAAO,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAA;AAC5C,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAA;AACtE,OAAO,EACN,gBAAgB,EAEhB,wBAAwB,EAExB,wBAAwB,EAExB,WAAW,EACX,MAAM,yBAAyB,CAAA;AAIhC,qBAAa,iCAAkC,YAAW,IAAI,CAAC,iBAAiB,EAAE,0BAA0B,GAAG,aAAa,CAAC;IAE3H,OAAO,CAAC,QAAQ,CAAC,wBAAwB;IACzC,OAAO,CAAC,QAAQ,CAAC,wBAAwB;IACzC,OAAO,CAAC,QAAQ,CAAC,gBAAgB;IACjC,OAAO,CAAC,QAAQ,CAAC,WAAW;IAJ7B,YACkB,wBAAwB,EAAE,wBAAwB,EAClD,wBAAwB,EAAE,wBAAwB,EAClD,gBAAgB,EAAE,gBAAgB,EAClC,WAAW,EAAE,WAAW,EACtC;IAEE,wBAAwB,CAC7B,MAAM,EAAE,OAAO,EACf,IAAI,EAAE,oCAAoC,EAC1C,OAAO,EAAE,qBAAqB,EAC9B,IAAI,EAAE,kBAAkB,GACtB,OAAO,CAAC,gCAAgC,CAAC,CAkD3C;IAEK,WAAW,CAChB,MAAM,EAAE,OAAO,EACf,IAAI,EAAE,uBAAuB,EAC7B,OAAO,EAAE,qBAAqB,EAC9B,IAAI,EAAE,kBAAkB,GACtB,OAAO,CAAC,mBAAmB,CAAC,CAe9B;CACD"}

package/dist/types/resolvers/mutation/person/EnablePersonMutationResolver.d.ts

@@ -0,0 +1,11 @@
+import { EnablePersonResponse, MutationEnablePersonArgs, MutationResolvers } from '../../../schema/index.js';
+import { TenantResolverContext } from '../../TenantResolverContext.js';
+import { PersonAccessManager } from '../../../model/index.js';
+import { PersonManager } from '../../../model/service/PersonManager.js';
+export declare class EnablePersonMutationResolver implements MutationResolvers {
+    private readonly personAccessManager;
+    private readonly personManager;
+    constructor(personAccessManager: PersonAccessManager, personManager: PersonManager);
+    enablePerson(parent: unknown, args: MutationEnablePersonArgs, context: TenantResolverContext): Promise<EnablePersonResponse>;
+}
+//# sourceMappingURL=EnablePersonMutationResolver.d.ts.map

package/dist/types/resolvers/mutation/person/EnablePersonMutationResolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"EnablePersonMutationResolver.d.ts","sourceRoot":"","sources":["../../../../../src/resolvers/mutation/person/EnablePersonMutationResolver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,wBAAwB,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAA;AAC5G,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAA;AACtE,OAAO,EAAmD,mBAAmB,EAAE,MAAM,yBAAyB,CAAA;AAC9G,OAAO,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAA;AAGvE,qBAAa,4BAA6B,YAAW,iBAAiB;IAEpE,OAAO,CAAC,QAAQ,CAAC,mBAAmB;IACpC,OAAO,CAAC,QAAQ,CAAC,aAAa;IAF/B,YACkB,mBAAmB,EAAE,mBAAmB,EACxC,aAAa,EAAE,aAAa,EAC1C;IAEE,YAAY,CACjB,MAAM,EAAE,OAAO,EACf,IAAI,EAAE,wBAAwB,EAC9B,OAAO,EAAE,qBAAqB,GAC5B,OAAO,CAAC,oBAAoB,CAAC,CAgC/B;CACD"}

package/dist/types/resolvers/mutation/person/ForceSignOutMutationResolver.d.ts

@@ -0,0 +1,13 @@
+import { ForceSignOutPersonResponse, MutationForceSignOutPersonArgs, MutationResolvers } from '../../../schema/index.js';
+import { TenantResolverContext } from '../../TenantResolverContext.js';
+import { ApiKeyManager } from '../../../model/index.js';
+import { PersonManager } from '../../../model/service/PersonManager.js';
+import { UserMailer } from '../../../model/mailing/index.js';
+export declare class ForceSignOutMutationResolver implements Pick<MutationResolvers, 'forceSignOutPerson'> {
+    private readonly apiKeyManager;
+    private readonly personManager;
+    private readonly userMailer;
+    constructor(apiKeyManager: ApiKeyManager, personManager: PersonManager, userMailer: UserMailer);
+    forceSignOutPerson(parent: unknown, args: MutationForceSignOutPersonArgs, context: TenantResolverContext): Promise<ForceSignOutPersonResponse>;
+}
+//# sourceMappingURL=ForceSignOutMutationResolver.d.ts.map

package/dist/types/resolvers/mutation/person/ForceSignOutMutationResolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ForceSignOutMutationResolver.d.ts","sourceRoot":"","sources":["../../../../../src/resolvers/mutation/person/ForceSignOutMutationResolver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,8BAA8B,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAA;AACxH,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAA;AACtE,OAAO,EAAE,aAAa,EAAmD,MAAM,yBAAyB,CAAA;AACxG,OAAO,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAA;AAGvE,OAAO,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAA;AAE5D,qBAAa,4BAA6B,YAAW,IAAI,CAAC,iBAAiB,EAAE,oBAAoB,CAAC;IAEhG,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAH5B,YACkB,aAAa,EAAE,aAAa,EAC5B,aAAa,EAAE,aAAa,EAC5B,UAAU,EAAE,UAAU,EACpC;IAEE,kBAAkB,CACvB,MAAM,EAAE,OAAO,EACf,IAAI,EAAE,8BAA8B,EACpC,OAAO,EAAE,qBAAqB,GAC5B,OAAO,CAAC,0BAA0B,CAAC,CAyCrC;CACD"}

package/dist/types/resolvers/mutation/person/IDPMutationResolver.d.ts

@@ -1,7 +1,7 @@
-import { InitSignInIdpResponse, MutationInitSignInIdpArgs, MutationResolvers, MutationSignInIdpArgs, SignInIdpResponse } from '../../../schema';
-import { TenantResolverContext } from '../../TenantResolverContext';
-import { IDPSignInManager } from '../../../model';
-import { SignInResponseFactory } from '../../responseHelpers/SignInResponseFactory';
+import { InitSignInIdpResponse, MutationInitSignInIdpArgs, MutationResolvers, MutationSignInIdpArgs, SignInIdpResponse } from '../../../schema/index.js';
+import { TenantResolverContext } from '../../TenantResolverContext.js';
+import { IDPSignInManager } from '../../../model/index.js';
+import { SignInResponseFactory } from '../../responseHelpers/SignInResponseFactory.js';
 export declare class IDPMutationResolver implements MutationResolvers {
     private readonly idpSignInManager;
     private readonly signInResponseFactory;

package/dist/types/resolvers/mutation/person/IDPMutationResolver.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"IDPMutationResolver.d.ts","sourceRoot":"","sources":["../../../../../src/resolvers/mutation/person/IDPMutationResolver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AAC/I,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAA;AACnE,OAAO,EAAE,gBAAgB,EAAqB,MAAM,gBAAgB,CAAA;AAEpE,OAAO,EAAE,qBAAqB,EAAE,MAAM,6CAA6C,CAAA;AAEnF,qBAAa,mBAAoB,YAAW,iBAAiB;IAE3D,OAAO,CAAC,QAAQ,CAAC,gBAAgB;IACjC,OAAO,CAAC,QAAQ,CAAC,qBAAqB;gBADrB,gBAAgB,EAAE,gBAAgB,EAClC,qBAAqB,EAAE,qBAAqB;IAGxD,aAAa,CAClB,MAAM,EAAE,GAAG,EACX,IAAI,EAAE,yBAAyB,EAC/B,OAAO,EAAE,qBAAqB,GAC5B,OAAO,CAAC,qBAAqB,CAAC;IAkB3B,SAAS,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,iBAAiB,CAAC;CA+BrH"}
+{"version":3,"file":"IDPMutationResolver.d.ts","sourceRoot":"","sources":["../../../../../src/resolvers/mutation/person/IDPMutationResolver.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,qBAAqB,EACrB,yBAAyB,EACzB,iBAAiB,EACjB,qBAAqB,EACrB,iBAAiB,EACjB,MAAM,0BAA0B,CAAA;AACjC,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAA;AACtE,OAAO,EAAE,gBAAgB,EAAqB,MAAM,yBAAyB,CAAA;AAE7E,OAAO,EAAE,qBAAqB,EAAE,MAAM,gDAAgD,CAAA;AAGtF,qBAAa,mBAAoB,YAAW,iBAAiB;IAE3D,OAAO,CAAC,QAAQ,CAAC,gBAAgB;IACjC,OAAO,CAAC,QAAQ,CAAC,qBAAqB;IAFvC,YACkB,gBAAgB,EAAE,gBAAgB,EAClC,qBAAqB,EAAE,qBAAqB,EAC1D;IAEE,aAAa,CAClB,MAAM,EAAE,GAAG,EACX,IAAI,EAAE,yBAAyB,EAC/B,OAAO,EAAE,qBAAqB,GAC5B,OAAO,CAAC,qBAAqB,CAAC,CAgBhC;IAEK,SAAS,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CA8DpH;CACD"}

package/dist/types/resolvers/mutation/person/InviteMutationResolver.d.ts

@@ -1,6 +1,6 @@
-import { InviteResponse, MutationInviteArgs, MutationResolvers, MutationUnmanagedInviteArgs } from '../../../schema';
-import { TenantResolverContext } from '../../TenantResolverContext';
-import { InviteManager, MembershipValidator, ProjectManager } from '../../../model';
+import { InviteResponse, MutationInviteArgs, MutationResolvers, MutationUnmanagedInviteArgs } from '../../../schema/index.js';
+import { TenantResolverContext } from '../../TenantResolverContext.js';
+import { InviteManager, MembershipValidator, ProjectManager } from '../../../model/index.js';
 export declare class InviteMutationResolver implements MutationResolvers {
     private readonly inviteManager;
     private readonly projectManager;

package/dist/types/resolvers/mutation/person/InviteMutationResolver.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"InviteMutationResolver.d.ts","sourceRoot":"","sources":["../../../../../src/resolvers/mutation/person/InviteMutationResolver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAmB,cAAc,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,2BAA2B,EAAE,MAAM,iBAAiB,CAAA;AACrI,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAA;AACnE,OAAO,EAA+B,aAAa,EAAe,mBAAmB,EAAqB,cAAc,EAAE,MAAM,gBAAgB,CAAA;AAMhJ,qBAAa,sBAAuB,YAAW,iBAAiB;IAE9D,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,cAAc;IAC/B,OAAO,CAAC,QAAQ,CAAC,mBAAmB;gBAFnB,aAAa,EAAE,aAAa,EAC5B,cAAc,EAAE,cAAc,EAC9B,mBAAmB,EAAE,mBAAmB;IAGpD,MAAM,CACX,MAAM,EAAE,GAAG,EACX,EAAE,WAAW,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE,kBAAkB,EACtE,OAAO,EAAE,qBAAqB,GAC5B,OAAO,CAAC,cAAc,CAAC;IAoBpB,eAAe,CACpB,MAAM,EAAE,GAAG,EACX,EAAE,WAAW,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,2BAA2B,EACnF,OAAO,EAAE,qBAAqB,GAC5B,OAAO,CAAC,cAAc,CAAC;YAuBZ,QAAQ;CA6BtB"}
+{"version":3,"file":"InviteMutationResolver.d.ts","sourceRoot":"","sources":["../../../../../src/resolvers/mutation/person/InviteMutationResolver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAmB,cAAc,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,2BAA2B,EAAE,MAAM,0BAA0B,CAAA;AAC9I,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAA;AACtE,OAAO,EAAc,aAAa,EAAe,mBAAmB,EAAqB,cAAc,EAAE,MAAM,yBAAyB,CAAA;AAQxI,qBAAa,sBAAuB,YAAW,iBAAiB;IAE9D,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,cAAc;IAC/B,OAAO,CAAC,QAAQ,CAAC,mBAAmB;IAHrC,YACkB,aAAa,EAAE,aAAa,EAC5B,cAAc,EAAE,cAAc,EAC9B,mBAAmB,EAAE,mBAAmB,EACtD;IAEE,MAAM,CACX,MAAM,EAAE,GAAG,EACX,EAAE,WAAW,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE,kBAAkB,EACtE,OAAO,EAAE,qBAAqB,GAC5B,OAAO,CAAC,cAAc,CAAC,CAkBzB;IAEK,eAAe,CACpB,MAAM,EAAE,GAAG,EACX,EAAE,WAAW,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,2BAA2B,EACnF,OAAO,EAAE,qBAAqB,GAC5B,OAAO,CAAC,cAAc,CAAC,CAqBzB;YAEa,QAAQ;CA2CtB"}

package/dist/types/resolvers/mutation/person/OtpMutationResolver.d.ts

@@ -1,9 +1,11 @@
-import { ConfirmOtpResponse, DisableOtpResponse, MutationConfirmOtpArgs, MutationPrepareOtpArgs, MutationResolvers, PrepareOtpResponse } from '../../../schema';
-import { TenantResolverContext } from '../../TenantResolverContext';
-import { OtpManager } from '../../../model';
+import { ConfirmOtpResponse, DisableOtpResponse, MutationConfirmOtpArgs, MutationPrepareOtpArgs, MutationResolvers, PrepareOtpResponse } from '../../../schema/index.js';
+import { TenantResolverContext } from '../../TenantResolverContext.js';
+import { AuthPolicyResolver, BackupCodeManager, OtpManager } from '../../../model/index.js';
 export declare class OtpMutationResolver implements MutationResolvers {
     private readonly otpManager;
-    constructor(otpManager: OtpManager);
+    private readonly backupCodeManager;
+    private readonly authPolicyResolver;
+    constructor(otpManager: OtpManager, backupCodeManager: BackupCodeManager, authPolicyResolver: AuthPolicyResolver);
     prepareOtp(parent: any, args: MutationPrepareOtpArgs, context: TenantResolverContext): Promise<PrepareOtpResponse>;
     confirmOtp(parent: any, args: MutationConfirmOtpArgs, context: TenantResolverContext): Promise<ConfirmOtpResponse>;
     disableOtp(parent: any, args: {}, context: TenantResolverContext): Promise<DisableOtpResponse>;

package/dist/types/resolvers/mutation/person/OtpMutationResolver.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"OtpMutationResolver.d.ts","sourceRoot":"","sources":["../../../../../src/resolvers/mutation/person/OtpMutationResolver.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,kBAAkB,EAClB,kBAAkB,EAClB,sBAAsB,EACtB,sBAAsB,EACtB,iBAAiB,EACjB,kBAAkB,EAClB,MAAM,iBAAiB,CAAA;AACxB,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAA;AACnE,OAAO,EAAE,UAAU,EAA6C,MAAM,gBAAgB,CAAA;AAKtF,qBAAa,mBAAoB,YAAW,iBAAiB;IAChD,OAAO,CAAC,QAAQ,CAAC,UAAU;gBAAV,UAAU,EAAE,UAAU;IAE7C,UAAU,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,sBAAsB,EAAE,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAmBlH,UAAU,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,sBAAsB,EAAE,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IA6BlH,UAAU,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,kBAAkB,CAAC;YAiBtF,oBAAoB;CAYlC"}
+{"version":3,"file":"OtpMutationResolver.d.ts","sourceRoot":"","sources":["../../../../../src/resolvers/mutation/person/OtpMutationResolver.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,kBAAkB,EAClB,kBAAkB,EAClB,sBAAsB,EACtB,sBAAsB,EACtB,iBAAiB,EACjB,kBAAkB,EAClB,MAAM,0BAA0B,CAAA;AACjC,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAA;AACtE,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,UAAU,EAA6C,MAAM,yBAAyB,CAAA;AAKtI,qBAAa,mBAAoB,YAAW,iBAAiB;IAE3D,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAClC,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IAHpC,YACkB,UAAU,EAAE,UAAU,EACtB,iBAAiB,EAAE,iBAAiB,EACpC,kBAAkB,EAAE,kBAAkB,EACpD;IAEE,UAAU,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,sBAAsB,EAAE,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAUvH;IAEK,UAAU,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,sBAAsB,EAAE,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAqCvH;IAEK,UAAU,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAyBnG;YAEa,oBAAoB;CAYlC"}

package/dist/types/resolvers/mutation/person/PasswordlessMutationResolver.d.ts

@@ -1,11 +1,14 @@
-import { ActivatePasswordlessOtpResponse, InitSignInPasswordlessResponse, MutationActivatePasswordlessOtpArgs, MutationInitSignInPasswordlessArgs, MutationResolvers, MutationSignInPasswordlessArgs, SignInPasswordlessResponse } from '../../../schema';
-import { TenantResolverContext } from '../../TenantResolverContext';
-import { SignInResponseFactory } from '../../responseHelpers/SignInResponseFactory';
-import { PasswordlessSignInManager } from '../../../model/service/PasswordlessSignInManager';
+import { ActivatePasswordlessOtpResponse, InitSignInPasswordlessResponse, MutationActivatePasswordlessOtpArgs, MutationInitSignInPasswordlessArgs, MutationResolvers, MutationSignInPasswordlessArgs, SignInPasswordlessResponse } from '../../../schema/index.js';
+import { TenantResolverContext } from '../../TenantResolverContext.js';
+import { CaptchaValidator, RateLimiter } from '../../../model/index.js';
+import { SignInResponseFactory } from '../../responseHelpers/SignInResponseFactory.js';
+import { PasswordlessSignInManager } from '../../../model/service/PasswordlessSignInManager.js';
 export declare class PasswordlessMutationResolver implements Pick<MutationResolvers, 'initSignInPasswordless' | 'signInPasswordless' | 'activatePasswordlessOtp'> {
     private readonly passwordlessSignInManager;
     private readonly signInResponseFactory;
-    constructor(passwordlessSignInManager: PasswordlessSignInManager, signInResponseFactory: SignInResponseFactory);
+    private readonly captchaValidator;
+    private readonly rateLimiter;
+    constructor(passwordlessSignInManager: PasswordlessSignInManager, signInResponseFactory: SignInResponseFactory, captchaValidator: CaptchaValidator, rateLimiter: RateLimiter);
     initSignInPasswordless(parent: any, args: MutationInitSignInPasswordlessArgs, context: TenantResolverContext): Promise<InitSignInPasswordlessResponse>;
     signInPasswordless(parent: any, args: MutationSignInPasswordlessArgs, context: TenantResolverContext): Promise<SignInPasswordlessResponse>;
     activatePasswordlessOtp(parent: any, args: MutationActivatePasswordlessOtpArgs, context: TenantResolverContext): Promise<ActivatePasswordlessOtpResponse>;

package/dist/types/resolvers/mutation/person/PasswordlessMutationResolver.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"PasswordlessMutationResolver.d.ts","sourceRoot":"","sources":["../../../../../src/resolvers/mutation/person/PasswordlessMutationResolver.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,+BAA+B,EAC/B,8BAA8B,EAC9B,mCAAmC,EACnC,kCAAkC,EAClC,iBAAiB,EACjB,8BAA8B,EAC9B,0BAA0B,EAC1B,MAAM,iBAAiB,CAAA;AACxB,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAA;AAGnE,OAAO,EAAE,qBAAqB,EAAE,MAAM,6CAA6C,CAAA;AACnF,OAAO,EAAE,yBAAyB,EAAE,MAAM,kDAAkD,CAAA;AAE5F,qBAAa,4BACZ,YAAW,IAAI,CAAC,iBAAiB,EAAE,wBAAwB,GAAG,oBAAoB,GAAG,yBAAyB,CAAC;IAG9G,OAAO,CAAC,QAAQ,CAAC,yBAAyB;IAC1C,OAAO,CAAC,QAAQ,CAAC,qBAAqB;gBADrB,yBAAyB,EAAE,yBAAyB,EACpD,qBAAqB,EAAE,qBAAqB;IAGxD,sBAAsB,CAC3B,MAAM,EAAE,GAAG,EACX,IAAI,EAAE,kCAAkC,EACxC,OAAO,EAAE,qBAAqB,GAC5B,OAAO,CAAC,8BAA8B,CAAC;IA8BpC,kBAAkB,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,8BAA8B,EAAE,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,0BAA0B,CAAC;IA0B1I,uBAAuB,CAC5B,MAAM,EAAE,GAAG,EACX,IAAI,EAAE,mCAAmC,EACzC,OAAO,EAAE,qBAAqB,GAC5B,OAAO,CAAC,+BAA+B,CAAC;CAoB3C"}
+{"version":3,"file":"PasswordlessMutationResolver.d.ts","sourceRoot":"","sources":["../../../../../src/resolvers/mutation/person/PasswordlessMutationResolver.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,+BAA+B,EAC/B,8BAA8B,EAC9B,mCAAmC,EACnC,kCAAkC,EAClC,iBAAiB,EACjB,8BAA8B,EAC9B,0BAA0B,EAC1B,MAAM,0BAA0B,CAAA;AACjC,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAA;AACtE,OAAO,EAAE,gBAAgB,EAAyC,WAAW,EAAE,MAAM,yBAAyB,CAAA;AAE9G,OAAO,EAAE,qBAAqB,EAAE,MAAM,gDAAgD,CAAA;AACtF,OAAO,EAAE,yBAAyB,EAAE,MAAM,qDAAqD,CAAA;AAE/F,qBAAa,4BACZ,YAAW,IAAI,CAAC,iBAAiB,EAAE,wBAAwB,GAAG,oBAAoB,GAAG,yBAAyB,CAAC;IAG9G,OAAO,CAAC,QAAQ,CAAC,yBAAyB;IAC1C,OAAO,CAAC,QAAQ,CAAC,qBAAqB;IACtC,OAAO,CAAC,QAAQ,CAAC,gBAAgB;IACjC,OAAO,CAAC,QAAQ,CAAC,WAAW;IAJ7B,YACkB,yBAAyB,EAAE,yBAAyB,EACpD,qBAAqB,EAAE,qBAAqB,EAC5C,gBAAgB,EAAE,gBAAgB,EAClC,WAAW,EAAE,WAAW,EACtC;IAEE,sBAAsB,CAC3B,MAAM,EAAE,GAAG,EACX,IAAI,EAAE,kCAAkC,EACxC,OAAO,EAAE,qBAAqB,GAC5B,OAAO,CAAC,8BAA8B,CAAC,CAoDzC;IAEK,kBAAkB,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,8BAA8B,EAAE,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAkC/I;IAEK,uBAAuB,CAC5B,MAAM,EAAE,GAAG,EACX,IAAI,EAAE,mCAAmC,EACzC,OAAO,EAAE,qBAAqB,GAC5B,OAAO,CAAC,+BAA+B,CAAC,CAmB1C;CACD"}

package/dist/types/resolvers/mutation/person/RegenerateBackupCodesMutationResolver.d.ts

@@ -0,0 +1,10 @@
+import { MutationResolvers, RegenerateBackupCodesResponse } from '../../../schema/index.js';
+import { TenantResolverContext } from '../../TenantResolverContext.js';
+import { BackupCodeManager } from '../../../model/index.js';
+export declare class RegenerateBackupCodesMutationResolver implements Pick<MutationResolvers, 'regenerateBackupCodes'> {
+    private readonly backupCodeManager;
+    constructor(backupCodeManager: BackupCodeManager);
+    regenerateBackupCodes(parent: any, args: {}, context: TenantResolverContext): Promise<RegenerateBackupCodesResponse>;
+    private getPersonFromContext;
+}
+//# sourceMappingURL=RegenerateBackupCodesMutationResolver.d.ts.map

package/dist/types/resolvers/mutation/person/RegenerateBackupCodesMutationResolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"RegenerateBackupCodesMutationResolver.d.ts","sourceRoot":"","sources":["../../../../../src/resolvers/mutation/person/RegenerateBackupCodesMutationResolver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,6BAA6B,EAAE,MAAM,0BAA0B,CAAA;AAC3F,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAA;AACtE,OAAO,EAAE,iBAAiB,EAA6C,MAAM,yBAAyB,CAAA;AAKtG,qBAAa,qCAAsC,YAAW,IAAI,CAAC,iBAAiB,EAAE,uBAAuB,CAAC;IACjG,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAA9C,YAA6B,iBAAiB,EAAE,iBAAiB,EAAI;IAE/D,qBAAqB,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,6BAA6B,CAAC,CAkBzH;YAEa,oBAAoB;CAYlC"}

package/dist/types/resolvers/mutation/person/ResetPasswordMutationResolver.d.ts

@@ -1,11 +1,13 @@
-import { CreatePasswordResetRequestResponse, MutationCreateResetPasswordRequestArgs, MutationResetPasswordArgs, MutationResolvers, ResetPasswordResponse } from '../../../schema';
+import { CreatePasswordResetRequestResponse, MutationCreateResetPasswordRequestArgs, MutationResetPasswordArgs, MutationResolvers, ResetPasswordResponse } from '../../../schema/index.js';
 import { GraphQLResolveInfo } from 'graphql';
-import { TenantResolverContext } from '../../TenantResolverContext';
-import { PasswordResetManager, PermissionContextFactory } from '../../../model';
+import { TenantResolverContext } from '../../TenantResolverContext.js';
+import { CaptchaValidator, PasswordResetManager, PermissionContextFactory, RateLimiter } from '../../../model/index.js';
 export declare class ResetPasswordMutationResolver implements MutationResolvers {
     private readonly passwordResetManager;
     private readonly permissionContextFactory;
-    constructor(passwordResetManager: PasswordResetManager, permissionContextFactory: PermissionContextFactory);
+    private readonly captchaValidator;
+    private readonly rateLimiter;
+    constructor(passwordResetManager: PasswordResetManager, permissionContextFactory: PermissionContextFactory, captchaValidator: CaptchaValidator, rateLimiter: RateLimiter);
     createResetPasswordRequest(parent: any, args: MutationCreateResetPasswordRequestArgs, context: TenantResolverContext, info: GraphQLResolveInfo): Promise<CreatePasswordResetRequestResponse>;
     resetPassword(parent: any, args: MutationResetPasswordArgs, context: TenantResolverContext, info: GraphQLResolveInfo): Promise<ResetPasswordResponse>;
 }

package/dist/types/resolvers/mutation/person/ResetPasswordMutationResolver.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ResetPasswordMutationResolver.d.ts","sourceRoot":"","sources":["../../../../../src/resolvers/mutation/person/ResetPasswordMutationResolver.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,kCAAkC,EAClC,sCAAsC,EACtC,yBAAyB,EACzB,iBAAiB,EACjB,qBAAqB,EACrB,MAAM,iBAAiB,CAAA;AACxB,OAAO,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAA;AAC5C,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAA;AACnE,OAAO,EAAsB,oBAAoB,EAAqB,wBAAwB,EAAe,MAAM,gBAAgB,CAAA;AAInI,qBAAa,6BAA8B,YAAW,iBAAiB;IAErE,OAAO,CAAC,QAAQ,CAAC,oBAAoB;IACrC,OAAO,CAAC,QAAQ,CAAC,wBAAwB;gBADxB,oBAAoB,EAAE,oBAAoB,EAC1C,wBAAwB,EAAE,wBAAwB;IAG9D,0BAA0B,CAC/B,MAAM,EAAE,GAAG,EACX,IAAI,EAAE,sCAAsC,EAC5C,OAAO,EAAE,qBAAqB,EAC9B,IAAI,EAAE,kBAAkB,GACtB,OAAO,CAAC,kCAAkC,CAAC;IAwCxC,aAAa,CAClB,MAAM,EAAE,GAAG,EACX,IAAI,EAAE,yBAAyB,EAC/B,OAAO,EAAE,qBAAqB,EAC9B,IAAI,EAAE,kBAAkB,GACtB,OAAO,CAAC,qBAAqB,CAAC;CAgBjC"}
+{"version":3,"file":"ResetPasswordMutationResolver.d.ts","sourceRoot":"","sources":["../../../../../src/resolvers/mutation/person/ResetPasswordMutationResolver.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,kCAAkC,EAClC,sCAAsC,EACtC,yBAAyB,EACzB,iBAAiB,EACjB,qBAAqB,EACrB,MAAM,0BAA0B,CAAA;AACjC,OAAO,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAA;AAC5C,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAA;AACtE,OAAO,EACN,gBAAgB,EAEhB,oBAAoB,EAEpB,wBAAwB,EAExB,WAAW,EACX,MAAM,yBAAyB,CAAA;AAIhC,qBAAa,6BAA8B,YAAW,iBAAiB;IAErE,OAAO,CAAC,QAAQ,CAAC,oBAAoB;IACrC,OAAO,CAAC,QAAQ,CAAC,wBAAwB;IACzC,OAAO,CAAC,QAAQ,CAAC,gBAAgB;IACjC,OAAO,CAAC,QAAQ,CAAC,WAAW;IAJ7B,YACkB,oBAAoB,EAAE,oBAAoB,EAC1C,wBAAwB,EAAE,wBAAwB,EAClD,gBAAgB,EAAE,gBAAgB,EAClC,WAAW,EAAE,WAAW,EACtC;IAEE,0BAA0B,CAC/B,MAAM,EAAE,GAAG,EACX,IAAI,EAAE,sCAAsC,EAC5C,OAAO,EAAE,qBAAqB,EAC9B,IAAI,EAAE,kBAAkB,GACtB,OAAO,CAAC,kCAAkC,CAAC,CAyD7C;IAEK,aAAa,CAClB,MAAM,EAAE,GAAG,EACX,IAAI,EAAE,yBAAyB,EAC/B,OAAO,EAAE,qBAAqB,EAC9B,IAAI,EAAE,kBAAkB,GACtB,OAAO,CAAC,qBAAqB,CAAC,CAehC;CACD"}

package/dist/types/resolvers/mutation/person/ResetPersonMfaMutationResolver.d.ts

@@ -0,0 +1,18 @@
+import { MutationResetPersonMfaArgs, MutationResolvers, ResetPersonMfaResponse } from '../../../schema/index.js';
+import { TenantResolverContext } from '../../TenantResolverContext.js';
+import { BackupCodeManager } from '../../../model/index.js';
+import { PersonManager } from '../../../model/service/PersonManager.js';
+/**
+ * Admin recovery for a locked-out user: clears the target person's MFA factors
+ * (active + pending TOTP, email OTP), deletes their backup codes, and clears the
+ * grace anchor, so they can re-enroll. Permission mirrors `forceSignOutPerson`
+ * (A21): PROJECT_ADMIN with the role-escalation verifier, plus SUPER_ADMIN.
+ * Audits `mfa_reset`.
+ */
+export declare class ResetPersonMfaMutationResolver implements Pick<MutationResolvers, 'resetPersonMfa'> {
+    private readonly personManager;
+    private readonly backupCodeManager;
+    constructor(personManager: PersonManager, backupCodeManager: BackupCodeManager);
+    resetPersonMfa(parent: unknown, args: MutationResetPersonMfaArgs, context: TenantResolverContext): Promise<ResetPersonMfaResponse>;
+}
+//# sourceMappingURL=ResetPersonMfaMutationResolver.d.ts.map

package/dist/types/resolvers/mutation/person/ResetPersonMfaMutationResolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ResetPersonMfaMutationResolver.d.ts","sourceRoot":"","sources":["../../../../../src/resolvers/mutation/person/ResetPersonMfaMutationResolver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAA;AAChH,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAA;AACtE,OAAO,EAAE,iBAAiB,EAAmD,MAAM,yBAAyB,CAAA;AAC5G,OAAO,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAA;AAKvE;;;;;;GAMG;AACH,qBAAa,8BAA+B,YAAW,IAAI,CAAC,iBAAiB,EAAE,gBAAgB,CAAC;IAE9F,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAFnC,YACkB,aAAa,EAAE,aAAa,EAC5B,iBAAiB,EAAE,iBAAiB,EAClD;IAEE,cAAc,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,0BAA0B,EAAE,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CA4BvI;CACD"}

package/dist/types/resolvers/mutation/person/RevokeSessionMutationResolver.d.ts

@@ -0,0 +1,9 @@
+import { MutationResolvers, MutationRevokeSessionArgs, RevokeSessionResponse } from '../../../schema/index.js';
+import { TenantResolverContext } from '../../TenantResolverContext.js';
+import { ApiKeyManager } from '../../../model/index.js';
+export declare class RevokeSessionMutationResolver implements Pick<MutationResolvers, 'revokeSession'> {
+    private readonly apiKeyManager;
+    constructor(apiKeyManager: ApiKeyManager);
+    revokeSession(parent: unknown, args: MutationRevokeSessionArgs, context: TenantResolverContext): Promise<RevokeSessionResponse>;
+}
+//# sourceMappingURL=RevokeSessionMutationResolver.d.ts.map

package/dist/types/resolvers/mutation/person/RevokeSessionMutationResolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"RevokeSessionMutationResolver.d.ts","sourceRoot":"","sources":["../../../../../src/resolvers/mutation/person/RevokeSessionMutationResolver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,yBAAyB,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAA;AAC9G,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAA;AACtE,OAAO,EAAU,aAAa,EAAkC,MAAM,yBAAyB,CAAA;AAI/F,qBAAa,6BAA8B,YAAW,IAAI,CAAC,iBAAiB,EAAE,eAAe,CAAC;IACjF,OAAO,CAAC,QAAQ,CAAC,aAAa;IAA1C,YAA6B,aAAa,EAAE,aAAa,EAAI;IAEvD,aAAa,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,yBAAyB,EAAE,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAmCpI;CACD"}

package/dist/types/resolvers/mutation/person/SignInMutationResolver.d.ts

@@ -1,11 +1,12 @@
-import { CreateSessionTokenResponse, MutationCreateSessionTokenArgs, MutationResolvers, MutationSignInArgs, SignInResponse } from '../../../schema';
-import { TenantResolverContext } from '../../TenantResolverContext';
-import { SignInManager } from '../../../model';
-import { SignInResponseFactory } from '../../responseHelpers/SignInResponseFactory';
+import { CreateSessionTokenResponse, MutationCreateSessionTokenArgs, MutationResolvers, MutationSignInArgs, SignInResponse } from '../../../schema/index.js';
+import { TenantResolverContext } from '../../TenantResolverContext.js';
+import { RateLimiter, SignInManager } from '../../../model/index.js';
+import { SignInResponseFactory } from '../../responseHelpers/SignInResponseFactory.js';
 export declare class SignInMutationResolver implements MutationResolvers {
     private readonly signInManager;
     private readonly signInResponseFactory;
-    constructor(signInManager: SignInManager, signInResponseFactory: SignInResponseFactory);
+    private readonly rateLimiter;
+    constructor(signInManager: SignInManager, signInResponseFactory: SignInResponseFactory, rateLimiter: RateLimiter);
     signIn(parent: any, args: MutationSignInArgs, context: TenantResolverContext): Promise<SignInResponse>;
     createSessionToken(parent: any, args: MutationCreateSessionTokenArgs, context: TenantResolverContext): Promise<CreateSessionTokenResponse>;
 }

package/dist/types/resolvers/mutation/person/SignInMutationResolver.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SignInMutationResolver.d.ts","sourceRoot":"","sources":["../../../../../src/resolvers/mutation/person/SignInMutationResolver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,8BAA8B,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAA;AACnJ,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAA;AACnE,OAAO,EAAiE,aAAa,EAAE,MAAM,gBAAgB,CAAA;AAE7G,OAAO,EAAE,qBAAqB,EAAE,MAAM,6CAA6C,CAAA;AAKnF,qBAAa,sBAAuB,YAAW,iBAAiB;IAE9D,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,qBAAqB;gBADrB,aAAa,EAAE,aAAa,EAC5B,qBAAqB,EAAE,qBAAqB;IAGxD,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,cAAc,CAAC;IA8CtG,kBAAkB,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,8BAA8B,EAAE,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,0BAA0B,CAAC;CAsChJ"}
+{"version":3,"file":"SignInMutationResolver.d.ts","sourceRoot":"","sources":["../../../../../src/resolvers/mutation/person/SignInMutationResolver.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,0BAA0B,EAC1B,8BAA8B,EAC9B,iBAAiB,EACjB,kBAAkB,EAClB,cAAc,EACd,MAAM,0BAA0B,CAAA;AACjC,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAA;AACtE,OAAO,EAKN,WAAW,EACX,aAAa,EACb,MAAM,yBAAyB,CAAA;AAEhC,OAAO,EAAE,qBAAqB,EAAE,MAAM,gDAAgD,CAAA;AAKtF,qBAAa,sBAAuB,YAAW,iBAAiB;IAE9D,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,qBAAqB;IACtC,OAAO,CAAC,QAAQ,CAAC,WAAW;IAH7B,YACkB,aAAa,EAAE,aAAa,EAC5B,qBAAqB,EAAE,qBAAqB,EAC5C,WAAW,EAAE,WAAW,EACtC;IAEE,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,cAAc,CAAC,CAgH3G;IAEK,kBAAkB,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,8BAA8B,EAAE,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,0BAA0B,CAAC,CA6C/I;CACD"}

package/dist/types/resolvers/mutation/person/SignOutMutationResolver.d.ts

@@ -1,9 +1,9 @@
-import { MutationResolvers, MutationSignOutArgs, SignOutResponse } from '../../../schema';
-import { TenantResolverContext } from '../../TenantResolverContext';
-import { ApiKeyManager } from '../../../model';
+import { MutationResolvers, MutationSignOutArgs, SignOutResponse } from '../../../schema/index.js';
+import { TenantResolverContext } from '../../TenantResolverContext.js';
+import { SignOutManager } from '../../../model/index.js';
 export declare class SignOutMutationResolver implements MutationResolvers {
-    private readonly apiKeyManager;
-    constructor(apiKeyManager: ApiKeyManager);
+    private readonly signOutManager;
+    constructor(signOutManager: SignOutManager);
     signOut(parent: any, args: MutationSignOutArgs, context: TenantResolverContext): Promise<SignOutResponse>;
 }
 //# sourceMappingURL=SignOutMutationResolver.d.ts.map