@contember/engine-tenant-api 2.1.0-rc.3 → 2.2.0-alpha.10

package/dist/development/index.js

@@ -4,23 +4,40 @@ import { ProjectAwareIdentity, StaticIdentity } from "./src/model/authorization/
 import { IdentityFactory } from "./src/model/authorization/IdentityFactory.js";
 import { IdentityScope } from "./src/model/authorization/IdentityScope.js";
 import { MembershipMatcher } from "./src/model/authorization/MembershipMatcher.js";
+import { CustomRoleAuthorizator, CustomRolePermissionCache } from "./src/model/authorization/CustomRoleAuthorizator.js";
+import { BUILTIN_TENANT_ROLES, CustomRoleGrantValidationError, GLOBALLY_ASSIGNABLE_BUILTIN_ROLES, buildCustomRolePermissions, getGrantablePermissions, isConfigurationRequired, parseCustomRoleGrants, parsePersistedCustomRoleGrants, parsePersistedCustomRoleReferences } from "./src/model/authorization/CustomRolePermissions.js";
 import { PermissionActions } from "./src/model/authorization/PermissionActions.js";
 import { PermissionContext } from "./src/model/authorization/PermissionContext.js";
 import { PermissionContextFactory } from "./src/model/authorization/PermissionContextFactory.js";
+import { createPersonPermissionTarget, createTargetIdentityPermissionTarget, targetIdentityLoader } from "./src/model/authorization/TargetIdentityPermission.js";
 import { PermissionsFactory } from "./src/model/authorization/PermissionsFactory.js";
 import { ProjectScope } from "./src/model/authorization/ProjectScope.js";
 import { ProjectScopeFactory } from "./src/model/authorization/ProjectScopeFactory.js";
-import { TenantRole } from "./src/model/authorization/Roles.js";
+import { NON_DELEGABLE_TENANT_ROLES, ROLE_SLUG_PATTERN, TenantRole } from "./src/model/authorization/Roles.js";
 import { CreateApiKeyCommand, CreateApiKeyCommandResult } from "./src/model/commands/apiKey/CreateApiKeyCommand.js";
 import { DisableApiKeyCommand } from "./src/model/commands/apiKey/DisableApiKeyCommand.js";
 import { DisableIdentityApiKeysCommand } from "./src/model/commands/apiKey/DisableIdentityApiKeysCommand.js";
 import { DisableOneOffApiKeyCommand } from "./src/model/commands/apiKey/DisableOneOffApiKeyCommand.js";
-import { ProlongApiKeyCommand } from "./src/model/commands/apiKey/ProlongApiKeyCommand.js";
+import { PROLONG_THROTTLE_MS, ProlongApiKeyCommand } from "./src/model/commands/apiKey/ProlongApiKeyCommand.js";
+import { CreateAuthPolicyCommand } from "./src/model/commands/authPolicy/CreateAuthPolicyCommand.js";
+import { UpdateAuthPolicyCommand } from "./src/model/commands/authPolicy/UpdateAuthPolicyCommand.js";
+import { DeleteAuthPolicyCommand } from "./src/model/commands/authPolicy/DeleteAuthPolicyCommand.js";
+import { CreateCustomRoleCommand } from "./src/model/commands/customRole/CreateCustomRoleCommand.js";
+import { DeleteCustomRoleCommand } from "./src/model/commands/customRole/DeleteCustomRoleCommand.js";
+import { RemoveCustomRoleAssignmentsCommand } from "./src/model/commands/customRole/RemoveCustomRoleAssignmentsCommand.js";
+import { UpdateCustomRoleCommand } from "./src/model/commands/customRole/UpdateCustomRoleCommand.js";
+import { ConsumeBackupCodeCommand } from "./src/model/commands/backupCode/ConsumeBackupCodeCommand.js";
+import { CreateBackupCodeCommand } from "./src/model/commands/backupCode/CreateBackupCodeCommand.js";
+import { DeleteBackupCodesCommand } from "./src/model/commands/backupCode/DeleteBackupCodesCommand.js";
 import { UpdateConfigurationCommand } from "./src/model/commands/configuration/UpdateConfigurationCommand.js";
 import { ChangePasswordCommand } from "./src/model/commands/person/ChangePasswordCommand.js";
 import { CreatePersonCommand } from "./src/model/commands/person/CreatePersonCommand.js";
+import { ResetPersonMfaCommand } from "./src/model/commands/person/ResetPersonMfaCommand.js";
+import { SetMfaGraceUntilCommand } from "./src/model/commands/person/SetMfaGraceUntilCommand.js";
 import { CreatePersonIdentityProviderIdentifierCommand } from "./src/model/commands/person/CreatePersonIdentityProviderIdentifierCommand.js";
+import { MarkEmailVerifiedCommand } from "./src/model/commands/person/MarkEmailVerifiedCommand.js";
 import { TogglePersonPasswordlessCommand } from "./src/model/commands/person/TogglePersonPasswordlessCommand.js";
+import { RecordRateLimitEventCommand } from "./src/model/commands/rateLimit/RecordRateLimitEventCommand.js";
 import { CommandBus } from "./src/model/commands/CommandBus.js";
 import { CreateIdentityCommand } from "./src/model/commands/identity/CreateIdentityCommand.js";
 import { PatchIdentityGlobalRoles } from "./src/model/commands/identity/PatchIdentityGlobalRoles.js";
@@ -32,69 +49,117 @@ import { RemoveMailTemplateCommand } from "./src/model/commands/mailTemplate/Rem
 import { AddProjectMemberCommand } from "./src/model/commands/membership/AddProjectMemberCommand.js";
 import { CreateOrUpdateProjectMembershipCommand } from "./src/model/commands/membership/CreateOrUpdateProjectMembershipCommand.js";
 import { RemoveProjectMemberCommand } from "./src/model/commands/membership/RemoveProjectMemberCommand.js";
+import { RemoveProjectMembershipCommand } from "./src/model/commands/membership/RemoveProjectMembershipCommand.js";
 import { UpdateProjectMemberCommand } from "./src/model/commands/membership/UpdateProjectMemberCommand.js";
 import { PatchProjectMembershipVariablesCommand } from "./src/model/commands/membership/variables/PatchProjectMembershipVariablesCommand.js";
+import { SetProjectMembershipVariableValuesCommand } from "./src/model/commands/membership/variables/SetProjectMembershipVariableValuesCommand.js";
 import { ConfirmOtpCommand } from "./src/model/commands/otp/ConfirmOtpCommand.js";
 import { DisableOtpCommand } from "./src/model/commands/otp/DisableOtpCommand.js";
 import { PrepareOtpCommand } from "./src/model/commands/otp/PrepareOtpCommand.js";
+import { ReEncryptOtpSecretCommand } from "./src/model/commands/otp/ReEncryptOtpSecretCommand.js";
+import { SetEmailOtpEnabledCommand } from "./src/model/commands/otp/SetEmailOtpEnabledCommand.js";
 import { ActivateOtpCommand } from "./src/model/commands/personToken/ActivateOtpCommand.js";
 import { CreatePersonTokenCommand } from "./src/model/commands/personToken/CreatePersonTokenCommand.js";
 import { InvalidateTokenCommand } from "./src/model/commands/personToken/InvalidateTokenCommand.js";
+import { InvalidateEmailOtpTokensCommand } from "./src/model/commands/personToken/InvalidateEmailOtpTokensCommand.js";
 import { IncreaseOtpAttemptCommand } from "./src/model/commands/personToken/IncreaseOtpAttemptCommand.js";
+import { ClaimOtpAttemptCommand } from "./src/model/commands/personToken/ClaimOtpAttemptCommand.js";
 import { ResetPasswordCommand } from "./src/model/commands/personToken/ResetPasswordCommand.js";
 import { SavePersonTokenCommand } from "./src/model/commands/personToken/SavePersonTokenCommand.js";
+import { SaveEmailOtpTokenCommand } from "./src/model/commands/personToken/SaveEmailOtpTokenCommand.js";
 import { NoPassword, PasswordHash, PasswordPlain } from "./src/model/dtos/Password.js";
 import { ApiKeyByIdQuery, ApiKeyByTokenQuery } from "./src/model/queries/apiKey/ApiKeyQuery.js";
+import { GlobalApiKeysQuery, ProjectApiKeysQuery } from "./src/model/queries/apiKey/ApiKeyListQuery.js";
+import { ApiKeySessionsByIdentityQuery } from "./src/model/queries/apiKey/ApiKeySessionsQuery.js";
+import { AuthPoliciesQuery } from "./src/model/queries/authPolicy/AuthPoliciesQuery.js";
+import { CustomRolesQuery } from "./src/model/queries/customRole/CustomRolesQuery.js";
 import { ConfigurationQuery } from "./src/model/queries/configuration/ConfigurationQuery.js";
 import { MailTemplateQuery } from "./src/model/queries/mailTemplate/MailTemplateQuery.js";
 import { MailTemplateListQuery } from "./src/model/queries/mailTemplate/MailTemplateListQuery.js";
+import { AllProjectRolesByIdentityQuery } from "./src/model/queries/membership/AllProjectRolesByIdentityQuery.js";
+import { IdentityHasProjectMembershipsQuery } from "./src/model/queries/membership/IdentityHasProjectMembershipsQuery.js";
 import { ProjectMembershipByIdentityQuery } from "./src/model/queries/membership/ProjectMembershipByIdentityQuery.js";
 import { ProjectMembersQuery } from "./src/model/queries/membership/ProjectMembersQuery.js";
 import { ProjectRolesByIdentityQuery } from "./src/model/queries/membership/ProjectRolesByIdentityQuery.js";
 import { PersonByIdentityBatchQuery } from "./src/model/queries/person/PersonByIdentityBatchQuery.js";
 import { PersonByIdPQuery } from "./src/model/queries/person/PersonByIdPQuery.js";
 import { PersonQuery } from "./src/model/queries/person/PersonQuery.js";
+import { PersonsQuery } from "./src/model/queries/person/PersonsQuery.js";
 import { IdentityQuery } from "./src/model/queries/identity/IdentityQuery.js";
+import { IdentitiesHoldingRoleCountQuery } from "./src/model/queries/identity/IdentitiesHoldingRoleCountQuery.js";
 import { IdentityProviderBySlugQuery } from "./src/model/queries/idp/IdentityProviderBySlugQuery.js";
 import { IdentityProvidersQuery } from "./src/model/queries/idp/IdentityProvidersQuery.js";
+import { IdpSessionByApiKeyQuery } from "./src/model/queries/idp/IdpSessionByApiKeyQuery.js";
+import { IdpSessionsBySidQuery } from "./src/model/queries/idp/IdpSessionsBySidQuery.js";
+import { IdpSessionsBySubQuery } from "./src/model/queries/idp/IdpSessionsBySubQuery.js";
+import { LocalAuthDisablingIdpsQuery } from "./src/model/queries/idp/LocalAuthDisablingIdpsQuery.js";
+import { PersonIdentityProvidersQuery } from "./src/model/queries/idp/PersonIdentityProvidersQuery.js";
 import { ProjectSecretsQuery } from "./src/model/queries/project/ProjectSecretsQuery.js";
+import { ProjectSecretKeysQuery } from "./src/model/queries/project/ProjectSecretKeysQuery.js";
 import { ProjectBySlugQuery } from "./src/model/queries/project/ProjectBySlugQuery.js";
 import { ProjectsByIdentityQuery } from "./src/model/queries/project/ProjectsByIdentityQuery.js";
 import { ProjectsQuery } from "./src/model/queries/project/ProjectsQuery.js";
 import { ProjectUpdateTimestampQuery } from "./src/model/queries/project/ProjectUpdateTimestampQuery.js";
+import { RateLimitCountQuery } from "./src/model/queries/rateLimit/RateLimitCountQuery.js";
 import { UserMailer } from "./src/model/mailing/UserMailer.js";
 import { MailType, mailTypeFromDbToSchema, mailTypeFromSchemaToDb } from "./src/model/mailing/type.js";
 import { ApiKeyManager, VerifyErrorCode, VerifyResult } from "./src/model/service/apiKey/ApiKeyManager.js";
 import { ApiKeyService, CreateApiKeyResult } from "./src/model/service/apiKey/ApiKeyService.js";
+import { UNPERSISTED_LOGIN_IDENTITY_ID, UNPERSISTED_ROOT_IDENTITY_ID, UnpersistedApiKeyManager, createUnpersistedLoginVerifyResult, isUnpersistedIdentityId } from "./src/model/service/apiKey/UnpersistedApiKeyManager.js";
+import { CaptchaValidator } from "./src/model/service/captcha/CaptchaValidator.js";
+import { HCaptchaProvider } from "./src/model/service/captcha/HCaptchaProvider.js";
+import { RecaptchaV3Provider } from "./src/model/service/captcha/RecaptchaV3Provider.js";
+import { TurnstileProvider } from "./src/model/service/captcha/TurnstileProvider.js";
 import { IdentityProviderNotFoundError } from "./src/model/service/idp/IdentityProviderNotFoundError.js";
 import { IDPHandlerRegistry } from "./src/model/service/idp/IDPHandlerRegistry.js";
+import { IdpSessionRevalidator } from "./src/model/service/idp/IdpSessionRevalidator.js";
+import { BackchannelLogoutManager } from "./src/model/service/idp/BackchannelLogoutManager.js";
+import { IDPRevalidationConfig, REVALIDATION_DEFAULT_FALLBACK_INTERVAL, REVALIDATION_DEFAULT_MIN_INTERVAL, REVALIDATION_DEFAULT_SOFT_THRESHOLD } from "./src/model/service/idp/IDPRevalidation.js";
 import { IDPManager } from "./src/model/service/idp/IDPManager.js";
+import { PersonIdentityProviderManager } from "./src/model/service/idp/PersonIdentityProviderManager.js";
+import { ClaimMapping, ClaimMappingMembership, ClaimMappingRule, ClaimMappingVariable, ClaimValueSource, DEFAULT_SYNC_POLICY, DEFAULT_UNMATCHED, findClaimMappingShapeErrors, findRemovedRuleKeys, isRecord, parseClaimMapping } from "./src/model/service/idp/ClaimMapping.js";
+import { evaluateClaimMapping, extractClaimValues, resolveVariableValues } from "./src/model/service/idp/ClaimMappingEvaluator.js";
+import { ClaimMappingMembershipErrorType, validateClaimMappingMembership } from "./src/model/service/idp/ClaimMappingValidation.js";
+import { IDPClaimSyncService } from "./src/model/service/idp/IDPClaimSyncService.js";
 import { IDPResponseError } from "./src/model/service/idp/IDPResponseError.js";
 import { IDPValidationError } from "./src/model/service/idp/IDPValidationError.js";
 import { InvalidIDPConfigurationError } from "./src/model/service/idp/InvalidIDPConfigurationError.js";
 import { AppleConfiguration, AppleProvider } from "./src/model/service/idp/providers/AppleProvider.js";
 import { OIDCProvider } from "./src/model/service/idp/providers/OIDCProvider.js";
 import { FacebookProvider } from "./src/model/service/idp/providers/FacebookProvider.js";
+import { AuthLogService } from "./src/model/service/AuthLogService.js";
+import { AuthPolicyManager } from "./src/model/service/AuthPolicyManager.js";
+import { CustomRoleManager } from "./src/model/service/CustomRoleManager.js";
+import { GlobalRoleValidator } from "./src/model/service/GlobalRoleValidator.js";
+import { AuthPolicyResolver } from "./src/model/service/AuthPolicyResolver.js";
+import { BackupCodeManager } from "./src/model/service/BackupCodeManager.js";
+import { EmailChangeManager } from "./src/model/service/EmailChangeManager.js";
+import { EmailOtpManager } from "./src/model/service/EmailOtpManager.js";
 import { EmailValidator } from "./src/model/service/EmailValidator.js";
+import { EmailVerificationManager } from "./src/model/service/EmailVerificationManager.js";
 import { IDPSignInManager } from "./src/model/service/IDPSignInManager.js";
 import { InviteManager, InviteResult } from "./src/model/service/InviteManager.js";
+import { BASELINE_SIGN_IN_TYPES, LoginRiskAnalyzer, RiskWeight, ipPrefix } from "./src/model/service/LoginRiskAnalyzer.js";
 import { MailTemplateManager } from "./src/model/service/MailTemplateManager.js";
 import { MembershipValidator } from "./src/model/service/MembershipValidator.js";
 import { OtpAuthenticator } from "./src/model/service/OtpAuthenticator.js";
 import { OtpError, OtpManager } from "./src/model/service/OtpManager.js";
+import { PanelAccessResolver } from "./src/model/service/PanelAccessResolver.js";
 import { PasswordChangeManager } from "./src/model/service/PasswordChangeManager.js";
 import { PasswordResetManager } from "./src/model/service/PasswordResetManager.js";
 import { PersonAccessManager } from "./src/model/service/PersonAccessManager.js";
 import { PersonManager } from "./src/model/service/PersonManager.js";
 import { CreateProjectResult, ProjectInitError, ProjectManager } from "./src/model/service/ProjectManager.js";
+import { RateLimiter } from "./src/model/service/RateLimiter.js";
 import { ProjectMemberManager } from "./src/model/service/ProjectMemberManager.js";
 import { RolesManager } from "./src/model/service/RolesManager.js";
 import { SecretsManager } from "./src/model/service/SecretsManager.js";
 import { SignInManager } from "./src/model/service/SignInManager.js";
+import { SignOutManager } from "./src/model/service/SignOutManager.js";
 import { SignUpManager, SignUpResult } from "./src/model/service/SignUpManager.js";
 import { ApiKey } from "./src/model/type/ApiKey.js";
 import { DatabaseContext } from "./src/model/utils/DatabaseContext.js";
-import { computeTokenHash, generateToken, isTokenHash, validateToken } from "./src/model/utils/token.js";
+import { MAX_OTP_ATTEMPTS, computeTokenHash, generateToken, isTokenHash, timingSafeCompareHash, validateToken } from "./src/model/utils/token.js";
 import { TenantContainerFactory } from "./src/TenantContainer.js";
 import { CreateApiKeyMutationResolver } from "./src/resolvers/mutation/apiKey/CreateApiKeyMutationResolver.js";
 import { DisableApiKeyMutationResolver } from "./src/resolvers/mutation/apiKey/DisableApiKeyMutationResolver.js";
@@ -102,12 +167,16 @@ import { IdentityGlobalRolesMutationResolver } from "./src/resolvers/mutation/id
 import { DisableIDPMutationResolver } from "./src/resolvers/mutation/idp/DisableIDPMutationResolver.js";
 import { EnableIDPMutationResolver } from "./src/resolvers/mutation/idp/EnableIDPMutationResolver.js";
 import { AddIDPMutationResolver } from "./src/resolvers/mutation/idp/AddIDPMutationResolver.js";
+import { DisconnectMyIdentityProviderMutationResolver } from "./src/resolvers/mutation/idp/DisconnectMyIdentityProviderMutationResolver.js";
 import { MailTemplateMutationResolver } from "./src/resolvers/mutation/mailTemplates/MailTemplateMutationResolver.js";
 import { ChangeProfileMutationResolver } from "./src/resolvers/mutation/person/ChangeProfileMutationResolver.js";
 import { ChangePasswordMutationResolver } from "./src/resolvers/mutation/person/ChangePasswordMutationResolver.js";
+import { EmailVerificationMutationResolver } from "./src/resolvers/mutation/person/EmailVerificationMutationResolver.js";
 import { IDPMutationResolver } from "./src/resolvers/mutation/person/IDPMutationResolver.js";
 import { InviteMutationResolver } from "./src/resolvers/mutation/person/InviteMutationResolver.js";
 import { OtpMutationResolver } from "./src/resolvers/mutation/person/OtpMutationResolver.js";
+import { EmailOtpMutationResolver } from "./src/resolvers/mutation/person/EmailOtpMutationResolver.js";
+import { RegenerateBackupCodesMutationResolver } from "./src/resolvers/mutation/person/RegenerateBackupCodesMutationResolver.js";
 import { ResetPasswordMutationResolver } from "./src/resolvers/mutation/person/ResetPasswordMutationResolver.js";
 import { SignInMutationResolver } from "./src/resolvers/mutation/person/SignInMutationResolver.js";
 import { SignOutMutationResolver } from "./src/resolvers/mutation/person/SignOutMutationResolver.js";
@@ -118,11 +187,14 @@ import { UpdateProjectMutationResolver } from "./src/resolvers/mutation/project/
 import { AddProjectMemberMutationResolver } from "./src/resolvers/mutation/projectMember/AddProjectMemberMutationResolver.js";
 import { RemoveProjectMemberMutationResolver } from "./src/resolvers/mutation/projectMember/RemoveProjectMemberMutationResolver.js";
 import { UpdateProjectMemberMutationResolver } from "./src/resolvers/mutation/projectMember/UpdateProjectMemberMutationResolver.js";
+import { ApiKeyQueryResolver } from "./src/resolvers/query/ApiKeyQueryResolver.js";
+import { AuthLogQueryResolver } from "./src/resolvers/query/AuthLogQueryResolver.js";
 import { MeQueryResolver } from "./src/resolvers/query/MeQueryResolver.js";
 import { ProjectMembersQueryResolver } from "./src/resolvers/query/ProjectMembersQueryResolver.js";
 import { ProjectQueryResolver } from "./src/resolvers/query/ProjectQueryResolver.js";
 import { PersonQueryResolver } from "./src/resolvers/query/PersonQueryResolver.js";
 import { IdentityTypeResolver } from "./src/resolvers/types/IdentityTypeResolver.js";
+import { PersonTypeResolver } from "./src/resolvers/types/PersonTypeResolver.js";
 import { ProjectTypeResolver } from "./src/resolvers/types/ProjectTypeResolver.js";
 import { ResolverFactory } from "./src/resolvers/ResolverFactory.js";
 import { TenantResolverContextFactory, createResolverContext } from "./src/resolvers/TenantResolverContextFactory.js";
@@ -138,23 +210,47 @@ export {
   AddMailTemplateCommand,
   AddProjectMemberCommand,
   AddProjectMemberMutationResolver,
+  AllProjectRolesByIdentityQuery,
   ApiKey,
   ApiKeyByIdQuery,
   ApiKeyByTokenQuery,
   ApiKeyManager,
+  ApiKeyQueryResolver,
   ApiKeyService,
+  ApiKeySessionsByIdentityQuery,
   AppleConfiguration,
   AppleProvider,
+  AuthLogQueryResolver,
+  AuthLogService,
+  AuthPoliciesQuery,
+  AuthPolicyManager,
+  AuthPolicyResolver,
+  BASELINE_SIGN_IN_TYPES,
+  BUILTIN_TENANT_ROLES,
+  BackchannelLogoutManager,
+  BackupCodeManager,
+  CaptchaValidator,
   ChangePasswordCommand,
   ChangePasswordMutationResolver,
   ChangeProfileMutationResolver,
+  ClaimMapping,
+  ClaimMappingMembership,
+  ClaimMappingMembershipErrorType,
+  ClaimMappingRule,
+  ClaimMappingVariable,
+  ClaimOtpAttemptCommand,
+  ClaimValueSource,
   CommandBus,
   ConfigurationQuery,
   ConfirmOtpCommand,
+  ConsumeBackupCodeCommand,
   CreateApiKeyCommand,
   CreateApiKeyCommandResult,
   CreateApiKeyMutationResolver,
   CreateApiKeyResult,
+  CreateAuthPolicyCommand,
+  CreateBackupCodeCommand,
+  CreateCustomRoleCommand,
   CreateIdentityCommand,
   CreateOrUpdateProjectMembershipCommand,
   CreatePersonCommand,
@@ -163,46 +259,80 @@ export {
   CreateProjectCommand,
   CreateProjectMutationResolver,
   CreateProjectResult,
+  CustomRoleAuthorizator,
+  CustomRoleGrantValidationError,
+  CustomRoleManager,
+  CustomRolePermissionCache,
+  CustomRolesQuery,
+  DEFAULT_SYNC_POLICY,
+  DEFAULT_UNMATCHED,
   DatabaseContext,
+  DeleteAuthPolicyCommand,
+  DeleteBackupCodesCommand,
+  DeleteCustomRoleCommand,
   DisableApiKeyCommand,
   DisableApiKeyMutationResolver,
   DisableIDPMutationResolver,
   DisableIdentityApiKeysCommand,
   DisableOneOffApiKeyCommand,
   DisableOtpCommand,
+  DisconnectMyIdentityProviderMutationResolver,
+  EmailChangeManager,
+  EmailOtpManager,
+  EmailOtpMutationResolver,
   EmailValidator,
+  EmailVerificationManager,
+  EmailVerificationMutationResolver,
   EnableIDPMutationResolver,
   FacebookProvider,
+  GLOBALLY_ASSIGNABLE_BUILTIN_ROLES,
+  GlobalApiKeysQuery,
+  GlobalRoleValidator,
+  HCaptchaProvider,
+  IDPClaimSyncService,
   IDPHandlerRegistry,
   IDPManager,
   IDPMutationResolver,
   IDPResponseError,
+  IDPRevalidationConfig,
   IDPSignInManager,
   IDPValidationError,
+  IdentitiesHoldingRoleCountQuery,
   IdentityFactory,
   IdentityGlobalRolesMutationResolver,
+  IdentityHasProjectMembershipsQuery,
   IdentityProviderBySlugQuery,
   IdentityProviderNotFoundError,
   IdentityProvidersQuery,
   IdentityQuery,
   IdentityScope,
   IdentityTypeResolver,
+  IdpSessionByApiKeyQuery,
+  IdpSessionRevalidator,
+  IdpSessionsBySidQuery,
+  IdpSessionsBySubQuery,
   IncreaseOtpAttemptCommand,
   InvalidIDPConfigurationError,
+  InvalidateEmailOtpTokensCommand,
   InvalidateTokenCommand,
   InviteManager,
   InviteMutationResolver,
   InviteResult,
+  LocalAuthDisablingIdpsQuery,
+  LoginRiskAnalyzer,
+  MAX_OTP_ATTEMPTS,
   MailTemplateListQuery,
   MailTemplateManager,
   MailTemplateMutationResolver,
   MailTemplateQuery,
   MailType,
+  MarkEmailVerifiedCommand,
   MeQueryResolver,
   MembershipMatcher,
   MembershipValidationError,
   MembershipValidationErrorType,
   MembershipValidator,
+  NON_DELEGABLE_TENANT_ROLES,
   NoPassword,
   NodeMailer,
   OIDCProvider,
@@ -210,6 +340,8 @@ export {
   OtpError,
   OtpManager,
   OtpMutationResolver,
+  PROLONG_THROTTLE_MS,
+  PanelAccessResolver,
   PasswordChangeManager,
   PasswordHash,
   PasswordPlain,
@@ -223,10 +355,15 @@ export {
   PersonAccessManager,
   PersonByIdPQuery,
   PersonByIdentityBatchQuery,
+  PersonIdentityProviderManager,
+  PersonIdentityProvidersQuery,
   PersonManager,
   PersonQuery,
   PersonQueryResolver,
+  PersonTypeResolver,
+  PersonsQuery,
   PrepareOtpCommand,
+  ProjectApiKeysQuery,
   ProjectAwareIdentity,
   ProjectBySlugQuery,
   ProjectInitError,
@@ -239,26 +376,46 @@ export {
   ProjectRolesByIdentityQuery,
   ProjectScope,
   ProjectScopeFactory,
+  ProjectSecretKeysQuery,
   ProjectSecretsQuery,
   ProjectTypeResolver,
   ProjectUpdateTimestampQuery,
   ProjectsByIdentityQuery,
   ProjectsQuery,
   ProlongApiKeyCommand,
+  REVALIDATION_DEFAULT_FALLBACK_INTERVAL,
+  REVALIDATION_DEFAULT_MIN_INTERVAL,
+  REVALIDATION_DEFAULT_SOFT_THRESHOLD,
+  ROLE_SLUG_PATTERN,
+  RateLimitCountQuery,
+  RateLimiter,
+  ReEncryptOtpSecretCommand,
+  RecaptchaV3Provider,
+  RecordRateLimitEventCommand,
+  RegenerateBackupCodesMutationResolver,
+  RemoveCustomRoleAssignmentsCommand,
   RemoveMailTemplateCommand,
   RemoveProjectMemberCommand,
   RemoveProjectMemberMutationResolver,
+  RemoveProjectMembershipCommand,
   ResetPasswordCommand,
   ResetPasswordMutationResolver,
+  ResetPersonMfaCommand,
   ResolverFactory,
+  RiskWeight,
   RolesManager,
+  SaveEmailOtpTokenCommand,
   SavePersonTokenCommand,
   index as Schema,
   SecretsManager,
+  SetEmailOtpEnabledCommand,
+  SetMfaGraceUntilCommand,
+  SetProjectMembershipVariableValuesCommand,
   SetProjectSecretCommand,
   SetProjectSecretMutationResolver,
   SignInManager,
   SignInMutationResolver,
+  SignOutManager,
   SignOutMutationResolver,
   SignUpManager,
   SignUpMutationResolver,
@@ -270,7 +427,13 @@ export {
   TenantResolverContextFactory,
   TenantRole,
   TogglePersonPasswordlessCommand,
+  TurnstileProvider,
+  UNPERSISTED_LOGIN_IDENTITY_ID,
+  UNPERSISTED_ROOT_IDENTITY_ID,
+  UnpersistedApiKeyManager,
+  UpdateAuthPolicyCommand,
   UpdateConfigurationCommand,
+  UpdateCustomRoleCommand,
   UpdateProjectCommand,
   UpdateProjectMemberCommand,
   UpdateProjectMemberMutationResolver,
@@ -279,14 +442,35 @@ export {
   VerifyErrorCode,
   VerifyResult,
   WebhookMailer,
+  buildCustomRolePermissions,
   computeTokenHash,
   createMailer,
+  createPersonPermissionTarget,
   createResolverContext,
+  createTargetIdentityPermissionTarget,
+  createUnpersistedLoginVerifyResult,
+  evaluateClaimMapping,
+  extractClaimValues,
+  findClaimMappingShapeErrors,
+  findRemovedRuleKeys,
   generateToken,
+  getGrantablePermissions,
+  ipPrefix,
+  isConfigurationRequired,
+  isRecord,
   isTokenHash,
+  isUnpersistedIdentityId,
   mailTypeFromDbToSchema,
   mailTypeFromSchemaToDb,
+  parseClaimMapping,
+  parseCustomRoleGrants,
+  parsePersistedCustomRoleGrants,
+  parsePersistedCustomRoleReferences,
+  resolveVariableValues,
+  targetIdentityLoader,
+  timingSafeCompareHash,
   default2 as typeDefs,
+  validateClaimMappingMembership,
   validateToken
 };
 //# sourceMappingURL=index.js.map

package/dist/development/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sources":[],"sourcesContent":[],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;"}
+{"version":3,"file":"index.js","sources":[],"sourcesContent":[],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;"}