@contember/engine-tenant-api 2.1.0-rc.3 → 2.2.0-alpha.10

package/dist/development/index.cjs

@@ -6,9 +6,12 @@ const Identity = require("./src/model/authorization/Identity.cjs");
 const IdentityFactory = require("./src/model/authorization/IdentityFactory.cjs");
 const IdentityScope = require("./src/model/authorization/IdentityScope.cjs");
 const MembershipMatcher = require("./src/model/authorization/MembershipMatcher.cjs");
+const CustomRoleAuthorizator = require("./src/model/authorization/CustomRoleAuthorizator.cjs");
+const CustomRolePermissions = require("./src/model/authorization/CustomRolePermissions.cjs");
 const PermissionActions = require("./src/model/authorization/PermissionActions.cjs");
 const PermissionContext = require("./src/model/authorization/PermissionContext.cjs");
 const PermissionContextFactory = require("./src/model/authorization/PermissionContextFactory.cjs");
+const TargetIdentityPermission = require("./src/model/authorization/TargetIdentityPermission.cjs");
 const PermissionsFactory = require("./src/model/authorization/PermissionsFactory.cjs");
 const ProjectScope = require("./src/model/authorization/ProjectScope.cjs");
 const ProjectScopeFactory = require("./src/model/authorization/ProjectScopeFactory.cjs");
@@ -18,11 +21,25 @@ const DisableApiKeyCommand = require("./src/model/commands/apiKey/DisableApiKeyC
 const DisableIdentityApiKeysCommand = require("./src/model/commands/apiKey/DisableIdentityApiKeysCommand.cjs");
 const DisableOneOffApiKeyCommand = require("./src/model/commands/apiKey/DisableOneOffApiKeyCommand.cjs");
 const ProlongApiKeyCommand = require("./src/model/commands/apiKey/ProlongApiKeyCommand.cjs");
+const CreateAuthPolicyCommand = require("./src/model/commands/authPolicy/CreateAuthPolicyCommand.cjs");
+const UpdateAuthPolicyCommand = require("./src/model/commands/authPolicy/UpdateAuthPolicyCommand.cjs");
+const DeleteAuthPolicyCommand = require("./src/model/commands/authPolicy/DeleteAuthPolicyCommand.cjs");
+const CreateCustomRoleCommand = require("./src/model/commands/customRole/CreateCustomRoleCommand.cjs");
+const DeleteCustomRoleCommand = require("./src/model/commands/customRole/DeleteCustomRoleCommand.cjs");
+const RemoveCustomRoleAssignmentsCommand = require("./src/model/commands/customRole/RemoveCustomRoleAssignmentsCommand.cjs");
+const UpdateCustomRoleCommand = require("./src/model/commands/customRole/UpdateCustomRoleCommand.cjs");
+const ConsumeBackupCodeCommand = require("./src/model/commands/backupCode/ConsumeBackupCodeCommand.cjs");
+const CreateBackupCodeCommand = require("./src/model/commands/backupCode/CreateBackupCodeCommand.cjs");
+const DeleteBackupCodesCommand = require("./src/model/commands/backupCode/DeleteBackupCodesCommand.cjs");
 const UpdateConfigurationCommand = require("./src/model/commands/configuration/UpdateConfigurationCommand.cjs");
 const ChangePasswordCommand = require("./src/model/commands/person/ChangePasswordCommand.cjs");
 const CreatePersonCommand = require("./src/model/commands/person/CreatePersonCommand.cjs");
+const ResetPersonMfaCommand = require("./src/model/commands/person/ResetPersonMfaCommand.cjs");
+const SetMfaGraceUntilCommand = require("./src/model/commands/person/SetMfaGraceUntilCommand.cjs");
 const CreatePersonIdentityProviderIdentifierCommand = require("./src/model/commands/person/CreatePersonIdentityProviderIdentifierCommand.cjs");
+const MarkEmailVerifiedCommand = require("./src/model/commands/person/MarkEmailVerifiedCommand.cjs");
 const TogglePersonPasswordlessCommand = require("./src/model/commands/person/TogglePersonPasswordlessCommand.cjs");
+const RecordRateLimitEventCommand = require("./src/model/commands/rateLimit/RecordRateLimitEventCommand.cjs");
 const CommandBus = require("./src/model/commands/CommandBus.cjs");
 const CreateIdentityCommand = require("./src/model/commands/identity/CreateIdentityCommand.cjs");
 const PatchIdentityGlobalRoles = require("./src/model/commands/identity/PatchIdentityGlobalRoles.cjs");
@@ -34,65 +51,113 @@ const RemoveMailTemplateCommand = require("./src/model/commands/mailTemplate/Rem
 const AddProjectMemberCommand = require("./src/model/commands/membership/AddProjectMemberCommand.cjs");
 const CreateOrUpdateProjectMembershipCommand = require("./src/model/commands/membership/CreateOrUpdateProjectMembershipCommand.cjs");
 const RemoveProjectMemberCommand = require("./src/model/commands/membership/RemoveProjectMemberCommand.cjs");
+const RemoveProjectMembershipCommand = require("./src/model/commands/membership/RemoveProjectMembershipCommand.cjs");
 const UpdateProjectMemberCommand = require("./src/model/commands/membership/UpdateProjectMemberCommand.cjs");
 const PatchProjectMembershipVariablesCommand = require("./src/model/commands/membership/variables/PatchProjectMembershipVariablesCommand.cjs");
+const SetProjectMembershipVariableValuesCommand = require("./src/model/commands/membership/variables/SetProjectMembershipVariableValuesCommand.cjs");
 const ConfirmOtpCommand = require("./src/model/commands/otp/ConfirmOtpCommand.cjs");
 const DisableOtpCommand = require("./src/model/commands/otp/DisableOtpCommand.cjs");
 const PrepareOtpCommand = require("./src/model/commands/otp/PrepareOtpCommand.cjs");
+const ReEncryptOtpSecretCommand = require("./src/model/commands/otp/ReEncryptOtpSecretCommand.cjs");
+const SetEmailOtpEnabledCommand = require("./src/model/commands/otp/SetEmailOtpEnabledCommand.cjs");
 const ActivateOtpCommand = require("./src/model/commands/personToken/ActivateOtpCommand.cjs");
 const CreatePersonTokenCommand = require("./src/model/commands/personToken/CreatePersonTokenCommand.cjs");
 const InvalidateTokenCommand = require("./src/model/commands/personToken/InvalidateTokenCommand.cjs");
+const InvalidateEmailOtpTokensCommand = require("./src/model/commands/personToken/InvalidateEmailOtpTokensCommand.cjs");
 const IncreaseOtpAttemptCommand = require("./src/model/commands/personToken/IncreaseOtpAttemptCommand.cjs");
+const ClaimOtpAttemptCommand = require("./src/model/commands/personToken/ClaimOtpAttemptCommand.cjs");
 const ResetPasswordCommand = require("./src/model/commands/personToken/ResetPasswordCommand.cjs");
 const SavePersonTokenCommand = require("./src/model/commands/personToken/SavePersonTokenCommand.cjs");
+const SaveEmailOtpTokenCommand = require("./src/model/commands/personToken/SaveEmailOtpTokenCommand.cjs");
 const Password = require("./src/model/dtos/Password.cjs");
 const ApiKeyQuery = require("./src/model/queries/apiKey/ApiKeyQuery.cjs");
+const ApiKeyListQuery = require("./src/model/queries/apiKey/ApiKeyListQuery.cjs");
+const ApiKeySessionsQuery = require("./src/model/queries/apiKey/ApiKeySessionsQuery.cjs");
+const AuthPoliciesQuery = require("./src/model/queries/authPolicy/AuthPoliciesQuery.cjs");
+const CustomRolesQuery = require("./src/model/queries/customRole/CustomRolesQuery.cjs");
 const ConfigurationQuery = require("./src/model/queries/configuration/ConfigurationQuery.cjs");
 const MailTemplateQuery = require("./src/model/queries/mailTemplate/MailTemplateQuery.cjs");
 const MailTemplateListQuery = require("./src/model/queries/mailTemplate/MailTemplateListQuery.cjs");
+const AllProjectRolesByIdentityQuery = require("./src/model/queries/membership/AllProjectRolesByIdentityQuery.cjs");
+const IdentityHasProjectMembershipsQuery = require("./src/model/queries/membership/IdentityHasProjectMembershipsQuery.cjs");
 const ProjectMembershipByIdentityQuery = require("./src/model/queries/membership/ProjectMembershipByIdentityQuery.cjs");
 const ProjectMembersQuery = require("./src/model/queries/membership/ProjectMembersQuery.cjs");
 const ProjectRolesByIdentityQuery = require("./src/model/queries/membership/ProjectRolesByIdentityQuery.cjs");
 const PersonByIdentityBatchQuery = require("./src/model/queries/person/PersonByIdentityBatchQuery.cjs");
 const PersonByIdPQuery = require("./src/model/queries/person/PersonByIdPQuery.cjs");
 const PersonQuery = require("./src/model/queries/person/PersonQuery.cjs");
+const PersonsQuery = require("./src/model/queries/person/PersonsQuery.cjs");
 const IdentityQuery = require("./src/model/queries/identity/IdentityQuery.cjs");
+const IdentitiesHoldingRoleCountQuery = require("./src/model/queries/identity/IdentitiesHoldingRoleCountQuery.cjs");
 const IdentityProviderBySlugQuery = require("./src/model/queries/idp/IdentityProviderBySlugQuery.cjs");
 const IdentityProvidersQuery = require("./src/model/queries/idp/IdentityProvidersQuery.cjs");
+const IdpSessionByApiKeyQuery = require("./src/model/queries/idp/IdpSessionByApiKeyQuery.cjs");
+const IdpSessionsBySidQuery = require("./src/model/queries/idp/IdpSessionsBySidQuery.cjs");
+const IdpSessionsBySubQuery = require("./src/model/queries/idp/IdpSessionsBySubQuery.cjs");
+const LocalAuthDisablingIdpsQuery = require("./src/model/queries/idp/LocalAuthDisablingIdpsQuery.cjs");
+const PersonIdentityProvidersQuery = require("./src/model/queries/idp/PersonIdentityProvidersQuery.cjs");
 const ProjectSecretsQuery = require("./src/model/queries/project/ProjectSecretsQuery.cjs");
+const ProjectSecretKeysQuery = require("./src/model/queries/project/ProjectSecretKeysQuery.cjs");
 const ProjectBySlugQuery = require("./src/model/queries/project/ProjectBySlugQuery.cjs");
 const ProjectsByIdentityQuery = require("./src/model/queries/project/ProjectsByIdentityQuery.cjs");
 const ProjectsQuery = require("./src/model/queries/project/ProjectsQuery.cjs");
 const ProjectUpdateTimestampQuery = require("./src/model/queries/project/ProjectUpdateTimestampQuery.cjs");
+const RateLimitCountQuery = require("./src/model/queries/rateLimit/RateLimitCountQuery.cjs");
 const UserMailer = require("./src/model/mailing/UserMailer.cjs");
 const type = require("./src/model/mailing/type.cjs");
 const ApiKeyManager = require("./src/model/service/apiKey/ApiKeyManager.cjs");
 const ApiKeyService = require("./src/model/service/apiKey/ApiKeyService.cjs");
+const UnpersistedApiKeyManager = require("./src/model/service/apiKey/UnpersistedApiKeyManager.cjs");
+const CaptchaValidator = require("./src/model/service/captcha/CaptchaValidator.cjs");
+const HCaptchaProvider = require("./src/model/service/captcha/HCaptchaProvider.cjs");
+const RecaptchaV3Provider = require("./src/model/service/captcha/RecaptchaV3Provider.cjs");
+const TurnstileProvider = require("./src/model/service/captcha/TurnstileProvider.cjs");
 const IdentityProviderNotFoundError = require("./src/model/service/idp/IdentityProviderNotFoundError.cjs");
 const IDPHandlerRegistry = require("./src/model/service/idp/IDPHandlerRegistry.cjs");
+const IdpSessionRevalidator = require("./src/model/service/idp/IdpSessionRevalidator.cjs");
+const BackchannelLogoutManager = require("./src/model/service/idp/BackchannelLogoutManager.cjs");
+const IDPRevalidation = require("./src/model/service/idp/IDPRevalidation.cjs");
 const IDPManager = require("./src/model/service/idp/IDPManager.cjs");
+const PersonIdentityProviderManager = require("./src/model/service/idp/PersonIdentityProviderManager.cjs");
+const ClaimMapping = require("./src/model/service/idp/ClaimMapping.cjs");
+const ClaimMappingEvaluator = require("./src/model/service/idp/ClaimMappingEvaluator.cjs");
+const ClaimMappingValidation = require("./src/model/service/idp/ClaimMappingValidation.cjs");
+const IDPClaimSyncService = require("./src/model/service/idp/IDPClaimSyncService.cjs");
 const IDPResponseError = require("./src/model/service/idp/IDPResponseError.cjs");
 const IDPValidationError = require("./src/model/service/idp/IDPValidationError.cjs");
 const InvalidIDPConfigurationError = require("./src/model/service/idp/InvalidIDPConfigurationError.cjs");
 const AppleProvider = require("./src/model/service/idp/providers/AppleProvider.cjs");
 const OIDCProvider = require("./src/model/service/idp/providers/OIDCProvider.cjs");
 const FacebookProvider = require("./src/model/service/idp/providers/FacebookProvider.cjs");
+const AuthLogService = require("./src/model/service/AuthLogService.cjs");
+const AuthPolicyManager = require("./src/model/service/AuthPolicyManager.cjs");
+const CustomRoleManager = require("./src/model/service/CustomRoleManager.cjs");
+const GlobalRoleValidator = require("./src/model/service/GlobalRoleValidator.cjs");
+const AuthPolicyResolver = require("./src/model/service/AuthPolicyResolver.cjs");
+const BackupCodeManager = require("./src/model/service/BackupCodeManager.cjs");
+const EmailChangeManager = require("./src/model/service/EmailChangeManager.cjs");
+const EmailOtpManager = require("./src/model/service/EmailOtpManager.cjs");
 const EmailValidator = require("./src/model/service/EmailValidator.cjs");
+const EmailVerificationManager = require("./src/model/service/EmailVerificationManager.cjs");
 const IDPSignInManager = require("./src/model/service/IDPSignInManager.cjs");
 const InviteManager = require("./src/model/service/InviteManager.cjs");
+const LoginRiskAnalyzer = require("./src/model/service/LoginRiskAnalyzer.cjs");
 const MailTemplateManager = require("./src/model/service/MailTemplateManager.cjs");
 const MembershipValidator = require("./src/model/service/MembershipValidator.cjs");
 const OtpAuthenticator = require("./src/model/service/OtpAuthenticator.cjs");
 const OtpManager = require("./src/model/service/OtpManager.cjs");
+const PanelAccessResolver = require("./src/model/service/PanelAccessResolver.cjs");
 const PasswordChangeManager = require("./src/model/service/PasswordChangeManager.cjs");
 const PasswordResetManager = require("./src/model/service/PasswordResetManager.cjs");
 const PersonAccessManager = require("./src/model/service/PersonAccessManager.cjs");
 const PersonManager = require("./src/model/service/PersonManager.cjs");
 const ProjectManager = require("./src/model/service/ProjectManager.cjs");
+const RateLimiter = require("./src/model/service/RateLimiter.cjs");
 const ProjectMemberManager = require("./src/model/service/ProjectMemberManager.cjs");
 const RolesManager = require("./src/model/service/RolesManager.cjs");
 const SecretsManager = require("./src/model/service/SecretsManager.cjs");
 const SignInManager = require("./src/model/service/SignInManager.cjs");
+const SignOutManager = require("./src/model/service/SignOutManager.cjs");
 const SignUpManager = require("./src/model/service/SignUpManager.cjs");
 const ApiKey = require("./src/model/type/ApiKey.cjs");
 const DatabaseContext = require("./src/model/utils/DatabaseContext.cjs");
@@ -104,12 +169,16 @@ const GlobalRolesMutationResolver = require("./src/resolvers/mutation/identity/G
 const DisableIDPMutationResolver = require("./src/resolvers/mutation/idp/DisableIDPMutationResolver.cjs");
 const EnableIDPMutationResolver = require("./src/resolvers/mutation/idp/EnableIDPMutationResolver.cjs");
 const AddIDPMutationResolver = require("./src/resolvers/mutation/idp/AddIDPMutationResolver.cjs");
+const DisconnectMyIdentityProviderMutationResolver = require("./src/resolvers/mutation/idp/DisconnectMyIdentityProviderMutationResolver.cjs");
 const MailTemplateMutationResolver = require("./src/resolvers/mutation/mailTemplates/MailTemplateMutationResolver.cjs");
 const ChangeProfileMutationResolver = require("./src/resolvers/mutation/person/ChangeProfileMutationResolver.cjs");
 const ChangePasswordMutationResolver = require("./src/resolvers/mutation/person/ChangePasswordMutationResolver.cjs");
+const EmailVerificationMutationResolver = require("./src/resolvers/mutation/person/EmailVerificationMutationResolver.cjs");
 const IDPMutationResolver = require("./src/resolvers/mutation/person/IDPMutationResolver.cjs");
 const InviteMutationResolver = require("./src/resolvers/mutation/person/InviteMutationResolver.cjs");
 const OtpMutationResolver = require("./src/resolvers/mutation/person/OtpMutationResolver.cjs");
+const EmailOtpMutationResolver = require("./src/resolvers/mutation/person/EmailOtpMutationResolver.cjs");
+const RegenerateBackupCodesMutationResolver = require("./src/resolvers/mutation/person/RegenerateBackupCodesMutationResolver.cjs");
 const ResetPasswordMutationResolver = require("./src/resolvers/mutation/person/ResetPasswordMutationResolver.cjs");
 const SignInMutationResolver = require("./src/resolvers/mutation/person/SignInMutationResolver.cjs");
 const SignOutMutationResolver = require("./src/resolvers/mutation/person/SignOutMutationResolver.cjs");
@@ -120,11 +189,14 @@ const UpdateProjectMutationResolver = require("./src/resolvers/mutation/project/
 const AddProjectMemberMutationResolver = require("./src/resolvers/mutation/projectMember/AddProjectMemberMutationResolver.cjs");
 const RemoveProjectMemberMutationResolver = require("./src/resolvers/mutation/projectMember/RemoveProjectMemberMutationResolver.cjs");
 const UpdateProjectMemberMutationResolver = require("./src/resolvers/mutation/projectMember/UpdateProjectMemberMutationResolver.cjs");
+const ApiKeyQueryResolver = require("./src/resolvers/query/ApiKeyQueryResolver.cjs");
+const AuthLogQueryResolver = require("./src/resolvers/query/AuthLogQueryResolver.cjs");
 const MeQueryResolver = require("./src/resolvers/query/MeQueryResolver.cjs");
 const ProjectMembersQueryResolver = require("./src/resolvers/query/ProjectMembersQueryResolver.cjs");
 const ProjectQueryResolver = require("./src/resolvers/query/ProjectQueryResolver.cjs");
 const PersonQueryResolver = require("./src/resolvers/query/PersonQueryResolver.cjs");
 const IdentityTypeResolver = require("./src/resolvers/types/IdentityTypeResolver.cjs");
+const PersonTypeResolver = require("./src/resolvers/types/PersonTypeResolver.cjs");
 const ProjectTypeResolver = require("./src/resolvers/types/ProjectTypeResolver.cjs");
 const ResolverFactory = require("./src/resolvers/ResolverFactory.cjs");
 const TenantResolverContextFactory = require("./src/resolvers/TenantResolverContextFactory.cjs");
@@ -140,27 +212,58 @@ exports.StaticIdentity = Identity.StaticIdentity;
 exports.IdentityFactory = IdentityFactory.IdentityFactory;
 exports.IdentityScope = IdentityScope.IdentityScope;
 exports.MembershipMatcher = MembershipMatcher.MembershipMatcher;
+exports.CustomRoleAuthorizator = CustomRoleAuthorizator.CustomRoleAuthorizator;
+exports.CustomRolePermissionCache = CustomRoleAuthorizator.CustomRolePermissionCache;
+exports.BUILTIN_TENANT_ROLES = CustomRolePermissions.BUILTIN_TENANT_ROLES;
+exports.CustomRoleGrantValidationError = CustomRolePermissions.CustomRoleGrantValidationError;
+exports.GLOBALLY_ASSIGNABLE_BUILTIN_ROLES = CustomRolePermissions.GLOBALLY_ASSIGNABLE_BUILTIN_ROLES;
+exports.buildCustomRolePermissions = CustomRolePermissions.buildCustomRolePermissions;
+exports.getGrantablePermissions = CustomRolePermissions.getGrantablePermissions;
+exports.isConfigurationRequired = CustomRolePermissions.isConfigurationRequired;
+exports.parseCustomRoleGrants = CustomRolePermissions.parseCustomRoleGrants;
+exports.parsePersistedCustomRoleGrants = CustomRolePermissions.parsePersistedCustomRoleGrants;
+exports.parsePersistedCustomRoleReferences = CustomRolePermissions.parsePersistedCustomRoleReferences;
 Object.defineProperty(exports, "PermissionActions", {
   enumerable: true,
   get: () => PermissionActions.PermissionActions
 });
 exports.PermissionContext = PermissionContext.PermissionContext;
 exports.PermissionContextFactory = PermissionContextFactory.PermissionContextFactory;
+exports.createPersonPermissionTarget = TargetIdentityPermission.createPersonPermissionTarget;
+exports.createTargetIdentityPermissionTarget = TargetIdentityPermission.createTargetIdentityPermissionTarget;
+exports.targetIdentityLoader = TargetIdentityPermission.targetIdentityLoader;
 exports.PermissionsFactory = PermissionsFactory.PermissionsFactory;
 exports.ProjectScope = ProjectScope.ProjectScope;
 exports.ProjectScopeFactory = ProjectScopeFactory.ProjectScopeFactory;
+exports.NON_DELEGABLE_TENANT_ROLES = Roles.NON_DELEGABLE_TENANT_ROLES;
+exports.ROLE_SLUG_PATTERN = Roles.ROLE_SLUG_PATTERN;
 exports.TenantRole = Roles.TenantRole;
 exports.CreateApiKeyCommand = CreateApiKeyCommand.CreateApiKeyCommand;
 exports.CreateApiKeyCommandResult = CreateApiKeyCommand.CreateApiKeyCommandResult;
 exports.DisableApiKeyCommand = DisableApiKeyCommand.DisableApiKeyCommand;
 exports.DisableIdentityApiKeysCommand = DisableIdentityApiKeysCommand.DisableIdentityApiKeysCommand;
 exports.DisableOneOffApiKeyCommand = DisableOneOffApiKeyCommand.DisableOneOffApiKeyCommand;
+exports.PROLONG_THROTTLE_MS = ProlongApiKeyCommand.PROLONG_THROTTLE_MS;
 exports.ProlongApiKeyCommand = ProlongApiKeyCommand.ProlongApiKeyCommand;
+exports.CreateAuthPolicyCommand = CreateAuthPolicyCommand.CreateAuthPolicyCommand;
+exports.UpdateAuthPolicyCommand = UpdateAuthPolicyCommand.UpdateAuthPolicyCommand;
+exports.DeleteAuthPolicyCommand = DeleteAuthPolicyCommand.DeleteAuthPolicyCommand;
+exports.CreateCustomRoleCommand = CreateCustomRoleCommand.CreateCustomRoleCommand;
+exports.DeleteCustomRoleCommand = DeleteCustomRoleCommand.DeleteCustomRoleCommand;
+exports.RemoveCustomRoleAssignmentsCommand = RemoveCustomRoleAssignmentsCommand.RemoveCustomRoleAssignmentsCommand;
+exports.UpdateCustomRoleCommand = UpdateCustomRoleCommand.UpdateCustomRoleCommand;
+exports.ConsumeBackupCodeCommand = ConsumeBackupCodeCommand.ConsumeBackupCodeCommand;
+exports.CreateBackupCodeCommand = CreateBackupCodeCommand.CreateBackupCodeCommand;
+exports.DeleteBackupCodesCommand = DeleteBackupCodesCommand.DeleteBackupCodesCommand;
 exports.UpdateConfigurationCommand = UpdateConfigurationCommand.UpdateConfigurationCommand;
 exports.ChangePasswordCommand = ChangePasswordCommand.ChangePasswordCommand;
 exports.CreatePersonCommand = CreatePersonCommand.CreatePersonCommand;
+exports.ResetPersonMfaCommand = ResetPersonMfaCommand.ResetPersonMfaCommand;
+exports.SetMfaGraceUntilCommand = SetMfaGraceUntilCommand.SetMfaGraceUntilCommand;
 exports.CreatePersonIdentityProviderIdentifierCommand = CreatePersonIdentityProviderIdentifierCommand.CreatePersonIdentityProviderIdentifierCommand;
+exports.MarkEmailVerifiedCommand = MarkEmailVerifiedCommand.MarkEmailVerifiedCommand;
 exports.TogglePersonPasswordlessCommand = TogglePersonPasswordlessCommand.TogglePersonPasswordlessCommand;
+exports.RecordRateLimitEventCommand = RecordRateLimitEventCommand.RecordRateLimitEventCommand;
 exports.CommandBus = CommandBus.CommandBus;
 exports.CreateIdentityCommand = CreateIdentityCommand.CreateIdentityCommand;
 exports.PatchIdentityGlobalRoles = PatchIdentityGlobalRoles.PatchIdentityGlobalRoles;
@@ -172,39 +275,62 @@ exports.RemoveMailTemplateCommand = RemoveMailTemplateCommand.RemoveMailTemplate
 exports.AddProjectMemberCommand = AddProjectMemberCommand.AddProjectMemberCommand;
 exports.CreateOrUpdateProjectMembershipCommand = CreateOrUpdateProjectMembershipCommand.CreateOrUpdateProjectMembershipCommand;
 exports.RemoveProjectMemberCommand = RemoveProjectMemberCommand.RemoveProjectMemberCommand;
+exports.RemoveProjectMembershipCommand = RemoveProjectMembershipCommand.RemoveProjectMembershipCommand;
 exports.UpdateProjectMemberCommand = UpdateProjectMemberCommand.UpdateProjectMemberCommand;
 exports.PatchProjectMembershipVariablesCommand = PatchProjectMembershipVariablesCommand.PatchProjectMembershipVariablesCommand;
+exports.SetProjectMembershipVariableValuesCommand = SetProjectMembershipVariableValuesCommand.SetProjectMembershipVariableValuesCommand;
 exports.ConfirmOtpCommand = ConfirmOtpCommand.ConfirmOtpCommand;
 exports.DisableOtpCommand = DisableOtpCommand.DisableOtpCommand;
 exports.PrepareOtpCommand = PrepareOtpCommand.PrepareOtpCommand;
+exports.ReEncryptOtpSecretCommand = ReEncryptOtpSecretCommand.ReEncryptOtpSecretCommand;
+exports.SetEmailOtpEnabledCommand = SetEmailOtpEnabledCommand.SetEmailOtpEnabledCommand;
 exports.ActivateOtpCommand = ActivateOtpCommand.ActivateOtpCommand;
 exports.CreatePersonTokenCommand = CreatePersonTokenCommand.CreatePersonTokenCommand;
 exports.InvalidateTokenCommand = InvalidateTokenCommand.InvalidateTokenCommand;
+exports.InvalidateEmailOtpTokensCommand = InvalidateEmailOtpTokensCommand.InvalidateEmailOtpTokensCommand;
 exports.IncreaseOtpAttemptCommand = IncreaseOtpAttemptCommand.IncreaseOtpAttemptCommand;
+exports.ClaimOtpAttemptCommand = ClaimOtpAttemptCommand.ClaimOtpAttemptCommand;
 exports.ResetPasswordCommand = ResetPasswordCommand.ResetPasswordCommand;
 exports.SavePersonTokenCommand = SavePersonTokenCommand.SavePersonTokenCommand;
+exports.SaveEmailOtpTokenCommand = SaveEmailOtpTokenCommand.SaveEmailOtpTokenCommand;
 exports.NoPassword = Password.NoPassword;
 exports.PasswordHash = Password.PasswordHash;
 exports.PasswordPlain = Password.PasswordPlain;
 exports.ApiKeyByIdQuery = ApiKeyQuery.ApiKeyByIdQuery;
 exports.ApiKeyByTokenQuery = ApiKeyQuery.ApiKeyByTokenQuery;
+exports.GlobalApiKeysQuery = ApiKeyListQuery.GlobalApiKeysQuery;
+exports.ProjectApiKeysQuery = ApiKeyListQuery.ProjectApiKeysQuery;
+exports.ApiKeySessionsByIdentityQuery = ApiKeySessionsQuery.ApiKeySessionsByIdentityQuery;
+exports.AuthPoliciesQuery = AuthPoliciesQuery.AuthPoliciesQuery;
+exports.CustomRolesQuery = CustomRolesQuery.CustomRolesQuery;
 exports.ConfigurationQuery = ConfigurationQuery.ConfigurationQuery;
 exports.MailTemplateQuery = MailTemplateQuery.MailTemplateQuery;
 exports.MailTemplateListQuery = MailTemplateListQuery.MailTemplateListQuery;
+exports.AllProjectRolesByIdentityQuery = AllProjectRolesByIdentityQuery.AllProjectRolesByIdentityQuery;
+exports.IdentityHasProjectMembershipsQuery = IdentityHasProjectMembershipsQuery.IdentityHasProjectMembershipsQuery;
 exports.ProjectMembershipByIdentityQuery = ProjectMembershipByIdentityQuery.ProjectMembershipByIdentityQuery;
 exports.ProjectMembersQuery = ProjectMembersQuery.ProjectMembersQuery;
 exports.ProjectRolesByIdentityQuery = ProjectRolesByIdentityQuery.ProjectRolesByIdentityQuery;
 exports.PersonByIdentityBatchQuery = PersonByIdentityBatchQuery.PersonByIdentityBatchQuery;
 exports.PersonByIdPQuery = PersonByIdPQuery.PersonByIdPQuery;
 exports.PersonQuery = PersonQuery.PersonQuery;
+exports.PersonsQuery = PersonsQuery.PersonsQuery;
 exports.IdentityQuery = IdentityQuery.IdentityQuery;
+exports.IdentitiesHoldingRoleCountQuery = IdentitiesHoldingRoleCountQuery.IdentitiesHoldingRoleCountQuery;
 exports.IdentityProviderBySlugQuery = IdentityProviderBySlugQuery.IdentityProviderBySlugQuery;
 exports.IdentityProvidersQuery = IdentityProvidersQuery.IdentityProvidersQuery;
+exports.IdpSessionByApiKeyQuery = IdpSessionByApiKeyQuery.IdpSessionByApiKeyQuery;
+exports.IdpSessionsBySidQuery = IdpSessionsBySidQuery.IdpSessionsBySidQuery;
+exports.IdpSessionsBySubQuery = IdpSessionsBySubQuery.IdpSessionsBySubQuery;
+exports.LocalAuthDisablingIdpsQuery = LocalAuthDisablingIdpsQuery.LocalAuthDisablingIdpsQuery;
+exports.PersonIdentityProvidersQuery = PersonIdentityProvidersQuery.PersonIdentityProvidersQuery;
 exports.ProjectSecretsQuery = ProjectSecretsQuery.ProjectSecretsQuery;
+exports.ProjectSecretKeysQuery = ProjectSecretKeysQuery.ProjectSecretKeysQuery;
 exports.ProjectBySlugQuery = ProjectBySlugQuery.ProjectBySlugQuery;
 exports.ProjectsByIdentityQuery = ProjectsByIdentityQuery.ProjectsByIdentityQuery;
 exports.ProjectsQuery = ProjectsQuery.ProjectsQuery;
 exports.ProjectUpdateTimestampQuery = ProjectUpdateTimestampQuery.ProjectUpdateTimestampQuery;
+exports.RateLimitCountQuery = RateLimitCountQuery.RateLimitCountQuery;
 exports.UserMailer = UserMailer.UserMailer;
 exports.MailType = type.MailType;
 exports.mailTypeFromDbToSchema = type.mailTypeFromDbToSchema;
@@ -214,9 +340,42 @@ exports.VerifyErrorCode = ApiKeyManager.VerifyErrorCode;
 exports.VerifyResult = ApiKeyManager.VerifyResult;
 exports.ApiKeyService = ApiKeyService.ApiKeyService;
 exports.CreateApiKeyResult = ApiKeyService.CreateApiKeyResult;
+exports.UNPERSISTED_LOGIN_IDENTITY_ID = UnpersistedApiKeyManager.UNPERSISTED_LOGIN_IDENTITY_ID;
+exports.UNPERSISTED_ROOT_IDENTITY_ID = UnpersistedApiKeyManager.UNPERSISTED_ROOT_IDENTITY_ID;
+exports.UnpersistedApiKeyManager = UnpersistedApiKeyManager.UnpersistedApiKeyManager;
+exports.createUnpersistedLoginVerifyResult = UnpersistedApiKeyManager.createUnpersistedLoginVerifyResult;
+exports.isUnpersistedIdentityId = UnpersistedApiKeyManager.isUnpersistedIdentityId;
+exports.CaptchaValidator = CaptchaValidator.CaptchaValidator;
+exports.HCaptchaProvider = HCaptchaProvider.HCaptchaProvider;
+exports.RecaptchaV3Provider = RecaptchaV3Provider.RecaptchaV3Provider;
+exports.TurnstileProvider = TurnstileProvider.TurnstileProvider;
 exports.IdentityProviderNotFoundError = IdentityProviderNotFoundError.IdentityProviderNotFoundError;
 exports.IDPHandlerRegistry = IDPHandlerRegistry.IDPHandlerRegistry;
+exports.IdpSessionRevalidator = IdpSessionRevalidator.IdpSessionRevalidator;
+exports.BackchannelLogoutManager = BackchannelLogoutManager.BackchannelLogoutManager;
+exports.IDPRevalidationConfig = IDPRevalidation.IDPRevalidationConfig;
+exports.REVALIDATION_DEFAULT_FALLBACK_INTERVAL = IDPRevalidation.REVALIDATION_DEFAULT_FALLBACK_INTERVAL;
+exports.REVALIDATION_DEFAULT_MIN_INTERVAL = IDPRevalidation.REVALIDATION_DEFAULT_MIN_INTERVAL;
+exports.REVALIDATION_DEFAULT_SOFT_THRESHOLD = IDPRevalidation.REVALIDATION_DEFAULT_SOFT_THRESHOLD;
 exports.IDPManager = IDPManager.IDPManager;
+exports.PersonIdentityProviderManager = PersonIdentityProviderManager.PersonIdentityProviderManager;
+exports.ClaimMapping = ClaimMapping.ClaimMapping;
+exports.ClaimMappingMembership = ClaimMapping.ClaimMappingMembership;
+exports.ClaimMappingRule = ClaimMapping.ClaimMappingRule;
+exports.ClaimMappingVariable = ClaimMapping.ClaimMappingVariable;
+exports.ClaimValueSource = ClaimMapping.ClaimValueSource;
+exports.DEFAULT_SYNC_POLICY = ClaimMapping.DEFAULT_SYNC_POLICY;
+exports.DEFAULT_UNMATCHED = ClaimMapping.DEFAULT_UNMATCHED;
+exports.findClaimMappingShapeErrors = ClaimMapping.findClaimMappingShapeErrors;
+exports.findRemovedRuleKeys = ClaimMapping.findRemovedRuleKeys;
+exports.isRecord = ClaimMapping.isRecord;
+exports.parseClaimMapping = ClaimMapping.parseClaimMapping;
+exports.evaluateClaimMapping = ClaimMappingEvaluator.evaluateClaimMapping;
+exports.extractClaimValues = ClaimMappingEvaluator.extractClaimValues;
+exports.resolveVariableValues = ClaimMappingEvaluator.resolveVariableValues;
+exports.ClaimMappingMembershipErrorType = ClaimMappingValidation.ClaimMappingMembershipErrorType;
+exports.validateClaimMappingMembership = ClaimMappingValidation.validateClaimMappingMembership;
+exports.IDPClaimSyncService = IDPClaimSyncService.IDPClaimSyncService;
 exports.IDPResponseError = IDPResponseError.IDPResponseError;
 exports.IDPValidationError = IDPValidationError.IDPValidationError;
 exports.InvalidIDPConfigurationError = InvalidIDPConfigurationError.InvalidIDPConfigurationError;
@@ -224,15 +383,32 @@ exports.AppleConfiguration = AppleProvider.AppleConfiguration;
 exports.AppleProvider = AppleProvider.AppleProvider;
 exports.OIDCProvider = OIDCProvider.OIDCProvider;
 exports.FacebookProvider = FacebookProvider.FacebookProvider;
+Object.defineProperty(exports, "AuthLogService", {
+  enumerable: true,
+  get: () => AuthLogService.AuthLogService
+});
+exports.AuthPolicyManager = AuthPolicyManager.AuthPolicyManager;
+exports.CustomRoleManager = CustomRoleManager.CustomRoleManager;
+exports.GlobalRoleValidator = GlobalRoleValidator.GlobalRoleValidator;
+exports.AuthPolicyResolver = AuthPolicyResolver.AuthPolicyResolver;
+exports.BackupCodeManager = BackupCodeManager.BackupCodeManager;
+exports.EmailChangeManager = EmailChangeManager.EmailChangeManager;
+exports.EmailOtpManager = EmailOtpManager.EmailOtpManager;
 exports.EmailValidator = EmailValidator.EmailValidator;
+exports.EmailVerificationManager = EmailVerificationManager.EmailVerificationManager;
 exports.IDPSignInManager = IDPSignInManager.IDPSignInManager;
 exports.InviteManager = InviteManager.InviteManager;
 exports.InviteResult = InviteManager.InviteResult;
+exports.BASELINE_SIGN_IN_TYPES = LoginRiskAnalyzer.BASELINE_SIGN_IN_TYPES;
+exports.LoginRiskAnalyzer = LoginRiskAnalyzer.LoginRiskAnalyzer;
+exports.RiskWeight = LoginRiskAnalyzer.RiskWeight;
+exports.ipPrefix = LoginRiskAnalyzer.ipPrefix;
 exports.MailTemplateManager = MailTemplateManager.MailTemplateManager;
 exports.MembershipValidator = MembershipValidator.MembershipValidator;
 exports.OtpAuthenticator = OtpAuthenticator.OtpAuthenticator;
 exports.OtpError = OtpManager.OtpError;
 exports.OtpManager = OtpManager.OtpManager;
+exports.PanelAccessResolver = PanelAccessResolver.PanelAccessResolver;
 exports.PasswordChangeManager = PasswordChangeManager.PasswordChangeManager;
 exports.PasswordResetManager = PasswordResetManager.PasswordResetManager;
 exports.PersonAccessManager = PersonAccessManager.PersonAccessManager;
@@ -240,10 +416,12 @@ exports.PersonManager = PersonManager.PersonManager;
 exports.CreateProjectResult = ProjectManager.CreateProjectResult;
 exports.ProjectInitError = ProjectManager.ProjectInitError;
 exports.ProjectManager = ProjectManager.ProjectManager;
+exports.RateLimiter = RateLimiter.RateLimiter;
 exports.ProjectMemberManager = ProjectMemberManager.ProjectMemberManager;
 exports.RolesManager = RolesManager.RolesManager;
 exports.SecretsManager = SecretsManager.SecretsManager;
 exports.SignInManager = SignInManager.SignInManager;
+exports.SignOutManager = SignOutManager.SignOutManager;
 exports.SignUpManager = SignUpManager.SignUpManager;
 exports.SignUpResult = SignUpManager.SignUpResult;
 Object.defineProperty(exports, "ApiKey", {
@@ -251,9 +429,11 @@ Object.defineProperty(exports, "ApiKey", {
   get: () => ApiKey.ApiKey
 });
 exports.DatabaseContext = DatabaseContext.DatabaseContext;
+exports.MAX_OTP_ATTEMPTS = token.MAX_OTP_ATTEMPTS;
 exports.computeTokenHash = token.computeTokenHash;
 exports.generateToken = token.generateToken;
 exports.isTokenHash = token.isTokenHash;
+exports.timingSafeCompareHash = token.timingSafeCompareHash;
 exports.validateToken = token.validateToken;
 exports.TenantContainerFactory = TenantContainer.TenantContainerFactory;
 exports.CreateApiKeyMutationResolver = CreateApiKeyMutationResolver.CreateApiKeyMutationResolver;
@@ -262,12 +442,16 @@ exports.IdentityGlobalRolesMutationResolver = GlobalRolesMutationResolver.Identi
 exports.DisableIDPMutationResolver = DisableIDPMutationResolver.DisableIDPMutationResolver;
 exports.EnableIDPMutationResolver = EnableIDPMutationResolver.EnableIDPMutationResolver;
 exports.AddIDPMutationResolver = AddIDPMutationResolver.AddIDPMutationResolver;
+exports.DisconnectMyIdentityProviderMutationResolver = DisconnectMyIdentityProviderMutationResolver.DisconnectMyIdentityProviderMutationResolver;
 exports.MailTemplateMutationResolver = MailTemplateMutationResolver.MailTemplateMutationResolver;
 exports.ChangeProfileMutationResolver = ChangeProfileMutationResolver.ChangeProfileMutationResolver;
 exports.ChangePasswordMutationResolver = ChangePasswordMutationResolver.ChangePasswordMutationResolver;
+exports.EmailVerificationMutationResolver = EmailVerificationMutationResolver.EmailVerificationMutationResolver;
 exports.IDPMutationResolver = IDPMutationResolver.IDPMutationResolver;
 exports.InviteMutationResolver = InviteMutationResolver.InviteMutationResolver;
 exports.OtpMutationResolver = OtpMutationResolver.OtpMutationResolver;
+exports.EmailOtpMutationResolver = EmailOtpMutationResolver.EmailOtpMutationResolver;
+exports.RegenerateBackupCodesMutationResolver = RegenerateBackupCodesMutationResolver.RegenerateBackupCodesMutationResolver;
 exports.ResetPasswordMutationResolver = ResetPasswordMutationResolver.ResetPasswordMutationResolver;
 exports.SignInMutationResolver = SignInMutationResolver.SignInMutationResolver;
 exports.SignOutMutationResolver = SignOutMutationResolver.SignOutMutationResolver;
@@ -278,11 +462,14 @@ exports.UpdateProjectMutationResolver = UpdateProjectMutationResolver.UpdateProj
 exports.AddProjectMemberMutationResolver = AddProjectMemberMutationResolver.AddProjectMemberMutationResolver;
 exports.RemoveProjectMemberMutationResolver = RemoveProjectMemberMutationResolver.RemoveProjectMemberMutationResolver;
 exports.UpdateProjectMemberMutationResolver = UpdateProjectMemberMutationResolver.UpdateProjectMemberMutationResolver;
+exports.ApiKeyQueryResolver = ApiKeyQueryResolver.ApiKeyQueryResolver;
+exports.AuthLogQueryResolver = AuthLogQueryResolver.AuthLogQueryResolver;
 exports.MeQueryResolver = MeQueryResolver.MeQueryResolver;
 exports.ProjectMembersQueryResolver = ProjectMembersQueryResolver.ProjectMembersQueryResolver;
 exports.ProjectQueryResolver = ProjectQueryResolver.ProjectQueryResolver;
 exports.PersonQueryResolver = PersonQueryResolver.PersonQueryResolver;
 exports.IdentityTypeResolver = IdentityTypeResolver.IdentityTypeResolver;
+exports.PersonTypeResolver = PersonTypeResolver.PersonTypeResolver;
 exports.ProjectTypeResolver = ProjectTypeResolver.ProjectTypeResolver;
 exports.ResolverFactory = ResolverFactory.ResolverFactory;
 exports.TenantResolverContextFactory = TenantResolverContextFactory.TenantResolverContextFactory;

package/dist/development/index.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.cjs","sources":[],"sourcesContent":[],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;"}
+{"version":3,"file":"index.cjs","sources":[],"sourcesContent":[],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;"}