@devxcrew/platform 0.1.2 → 0.1.6

package/dist/modules/identity/identity.administration-service.js

@@ -1,517 +0,0 @@
-import { validateDeclaredPermissions } from "./identity.permission-declarations.js";
-import { randomUUID } from "node:crypto";
-import { IdentityAdministrationRepository } from "./identity.administration-repository.js";
-import { IdentityRolesService } from "./identity.roles-service.js";
-import { protectAdministrators } from "./identity.membership-policy.js";
-import { IdentityPresentationService } from "./identity.presentation-service.js";
-import { checkIdentityRequest } from "./identity.request-context.js";
-import { sql } from "kysely";
-import { hashPassword } from "./identity.password.js";
-import { IdentityError } from "./identity.error.js";
-import { userCreateSchema, userUpdateSchema, organizationCreateSchema, organizationUpdateSchema, membershipSchema, roleUpdateSchema, profileSchema, settingsSchema, securitySettingsSchema, } from "./identity.administration-schema.js";
-export class IdentityAdministrationService {
-    db;
-    appName;
-    repository;
-    roles;
-    presentationService;
-    constructor(db, appName) {
-        this.db = db;
-        this.appName = appName;
-        this.repository = new IdentityAdministrationRepository(db);
-        this.roles = new IdentityRolesService(db);
-        this.presentationService = new IdentityPresentationService(db, appName);
-    }
-    async list(actor, resource, query) {
-        this.allow(actor, resource, false);
-        return this.repository.list(actor, resource, query);
-    }
-    async show(actor, resource, id) {
-        this.allow(actor, resource, false);
-        const row = await this.repository.show(actor, resource, id);
-        if (!row)
-            throw new IdentityError(404, "Resource not found.");
-        return row;
-    }
-    async create(actor, resource, raw) {
-        if (resource === "roles")
-            return this.roles.create(actor, raw);
-        this.allow(actor, resource, true);
-        if (resource === "users") {
-            const input = userCreateSchema.parse(raw);
-            const tenantId = this.tenant(actor, input.tenantId);
-            await this.roles.resolve(this.db, actor, input.roleId, tenantId);
-            const passwordHash = await hashPassword(input.password);
-            return this.mutate(actor, resource, randomUUID(), async (trx, id) => {
-                await this.activeTenant(trx, tenantId);
-                const selected = await this.roles.resolve(trx, actor, input.roleId, tenantId);
-                if (await trx
-                    .selectFrom("identity_users")
-                    .select("id")
-                    .where("email", "=", input.email)
-                    .executeTakeFirst())
-                    throw new IdentityError(409, "Email already exists.");
-                await trx
-                    .insertInto("identity_users")
-                    .values({
-                    id,
-                    email: input.email,
-                    name: input.name,
-                    active: 1,
-                    password_hash: passwordHash,
-                })
-                    .execute();
-                await trx
-                    .insertInto("identity_memberships")
-                    .values({
-                    user_id: id,
-                    tenant_id: tenantId,
-                    role_id: selected.portal,
-                    custom_role_id: selected.customRoleId,
-                })
-                    .execute();
-                return {
-                    id,
-                    email: input.email,
-                    name: input.name,
-                    active: true,
-                    version: 0,
-                };
-            }, tenantId);
-        }
-        if (resource === "organizations") {
-            const input = organizationCreateSchema.parse(raw);
-            return this.mutate(actor, resource, input.id, async (trx) => {
-                if (await trx
-                    .selectFrom("identity_tenants")
-                    .select("id")
-                    .where("id", "=", input.id)
-                    .executeTakeFirst())
-                    throw new IdentityError(409, "Organization already exists.");
-                await trx
-                    .insertInto("identity_tenants")
-                    .values({
-                    id: input.id,
-                    name: input.name,
-                    active: Number(input.active),
-                })
-                    .execute();
-                return { ...input, version: 0 };
-            });
-        }
-        if (resource === "memberships") {
-            const input = membershipSchema.parse(raw);
-            const tenantId = this.tenant(actor, input.tenantId);
-            const selected = await this.roles.resolve(this.db, actor, input.roleId, tenantId);
-            await this.show(actor, "users", input.userId);
-            const id = `${input.userId}~${tenantId}~${selected.portal}`;
-            return this.mutate(actor, resource, id, async (trx) => {
-                await this.activeTenant(trx, tenantId);
-                const currentRole = await this.roles.resolve(trx, actor, input.roleId, tenantId);
-                if (await trx
-                    .selectFrom("identity_memberships")
-                    .select("user_id")
-                    .where("user_id", "=", input.userId)
-                    .where("tenant_id", "=", tenantId)
-                    .where("role_id", "=", currentRole.portal)
-                    .executeTakeFirst())
-                    throw new IdentityError(409, "Membership already exists.");
-                await trx
-                    .insertInto("identity_memberships")
-                    .values({
-                    user_id: input.userId,
-                    tenant_id: tenantId,
-                    role_id: currentRole.portal,
-                    custom_role_id: currentRole.customRoleId,
-                })
-                    .execute();
-                return {
-                    id,
-                    userId: input.userId,
-                    tenantId,
-                    roleId: input.roleId,
-                    portal: currentRole.portal,
-                    active: true,
-                    version: 0,
-                };
-            });
-        }
-        throw new IdentityError(405, "Creation is not supported for this resource.");
-    }
-    async update(actor, resource, id, raw) {
-        if (resource === "memberships")
-            return this.roles.updateMembership(actor, id, raw);
-        if (resource === "roles" && !["user", "admin", "super-admin"].includes(id))
-            return this.roles.update(actor, id, raw);
-        this.allow(actor, resource, true);
-        await this.show(actor, resource, id);
-        if (resource === "users") {
-            const input = userUpdateSchema.parse(raw);
-            return this.mutate(actor, resource, id, async (trx) => {
-                const current = await trx
-                    .selectFrom("identity_users")
-                    .selectAll()
-                    .where("id", "=", id)
-                    .executeTakeFirstOrThrow();
-                this.revision(current.version, input.expectedVersion);
-                if (actor.portal !== "super-admin")
-                    await this.unprivilegedUser(trx, id);
-                if (input.active === false) {
-                    await protectAdministrators(trx, id);
-                    await trx
-                        .deleteFrom("identity_sessions")
-                        .where("user_id", "=", id)
-                        .execute();
-                }
-                if (input.email &&
-                    (await trx
-                        .selectFrom("identity_users")
-                        .select("id")
-                        .where("email", "=", input.email)
-                        .where("id", "!=", id)
-                        .executeTakeFirst()))
-                    throw new IdentityError(409, "Email already exists.");
-                const { expectedVersion, ...fields } = input;
-                await trx
-                    .updateTable("identity_users")
-                    .set({
-                    ...fields,
-                    version: sql `version + 1`,
-                    active: input.active === undefined
-                        ? current.active
-                        : Number(input.active),
-                })
-                    .where("id", "=", id)
-                    .execute();
-                return {
-                    id,
-                    name: input.name ?? current.name,
-                    email: input.email ?? current.email,
-                    active: input.active ?? Boolean(current.active),
-                    version: expectedVersion + 1,
-                };
-            });
-        }
-        if (resource === "organizations") {
-            const input = organizationUpdateSchema.parse(raw);
-            return this.mutate(actor, resource, id, async (trx) => {
-                const current = await trx
-                    .selectFrom("identity_tenants")
-                    .select("version")
-                    .where("id", "=", id)
-                    .executeTakeFirstOrThrow();
-                this.revision(current.version, input.expectedVersion);
-                if (input.active === false && id === actor.tenant.id)
-                    throw new IdentityError(409, "Cannot deactivate your current organization.");
-                const { expectedVersion, ...fields } = input;
-                await trx
-                    .updateTable("identity_tenants")
-                    .set({
-                    ...fields,
-                    version: sql `version + 1`,
-                    active: input.active === undefined ? undefined : Number(input.active),
-                })
-                    .where("id", "=", id)
-                    .execute();
-                if (input.active === false)
-                    await trx
-                        .deleteFrom("identity_sessions")
-                        .where("tenant_id", "=", id)
-                        .execute();
-                const row = await trx
-                    .selectFrom("identity_tenants")
-                    .selectAll()
-                    .where("id", "=", id)
-                    .executeTakeFirstOrThrow();
-                return {
-                    ...row,
-                    active: Boolean(row.active),
-                    version: Number(row.version),
-                };
-            });
-        }
-        if (resource === "roles") {
-            const input = roleUpdateSchema.parse(raw);
-            if (!input.permissionIds.includes(`desk.${id}`) ||
-                !input.permissionIds.includes("identity.password"))
-                throw new IdentityError(409, "Keep required portal and password permissions.");
-            if (id !== "user" && !input.permissionIds.includes("identity.manage"))
-                throw new IdentityError(409, "Keep administration permission on administrator roles.");
-            return this.mutate(actor, resource, id, async (trx) => {
-                const current = await trx
-                    .selectFrom("identity_roles")
-                    .select("version")
-                    .where("id", "=", id)
-                    .executeTakeFirstOrThrow();
-                this.revision(current.version, input.expectedVersion);
-                await validateDeclaredPermissions(trx, actor.appId, id, input.permissionIds);
-                const known = await trx
-                    .selectFrom("identity_permissions")
-                    .select("id")
-                    .execute();
-                if (input.permissionIds.some((permission) => !known.some((row) => row.id === permission)))
-                    throw new IdentityError(422, "Unknown permission.");
-                if (id === "user" &&
-                    input.permissionIds.some((permission) => permission.startsWith("identity.manage")))
-                    throw new IdentityError(403, "User roles cannot receive administration permissions.");
-                await trx
-                    .deleteFrom("identity_role_permissions")
-                    .where("role_id", "=", id)
-                    .execute();
-                for (const permission of new Set(input.permissionIds))
-                    await trx
-                        .insertInto("identity_role_permissions")
-                        .values({ role_id: id, permission_id: permission })
-                        .execute();
-                await trx
-                    .updateTable("identity_roles")
-                    .set({ version: sql `version + 1` })
-                    .where("id", "=", id)
-                    .execute();
-                return {
-                    id,
-                    permissionIds: [...new Set(input.permissionIds)],
-                    version: input.expectedVersion + 1,
-                };
-            });
-        }
-        throw new IdentityError(405, "Update is not supported for this resource.");
-    }
-    async remove(actor, resource, id, expectedVersion) {
-        if (resource === "memberships")
-            return this.roles.removeMembership(actor, id, expectedVersion);
-        this.allow(actor, resource, true);
-        const row = await this.show(actor, resource, id);
-        if (resource === "sessions") {
-            await this.mutate(actor, resource, id, async (trx) => {
-                await trx
-                    .deleteFrom("identity_sessions")
-                    .where("token_hash", "=", id)
-                    .where("app_id", "=", actor.appId)
-                    .execute();
-            });
-            return;
-        }
-        throw new IdentityError(405, "Deletion is not supported for this resource.");
-    }
-    async profile(actor, raw) {
-        if (!actor.permissions.includes("identity.self"))
-            throw new IdentityError(403, "Access denied.");
-        if (raw !== undefined) {
-            const input = profileSchema.parse(raw);
-            await this.mutate(actor, "profile", actor.user.id, async (trx) => {
-                const changed = await trx
-                    .updateTable("identity_users")
-                    .set({ name: input.name, version: sql `version + 1` })
-                    .where("id", "=", actor.user.id)
-                    .where("version", "=", input.expectedVersion)
-                    .executeTakeFirst();
-                if (changed.numUpdatedRows !== 1n)
-                    throw new IdentityError(409, "This record changed. Reload before saving.");
-            });
-        }
-        const user = await this.db
-            .selectFrom("identity_users")
-            .select(["id", "name", "email", "active", "version"])
-            .where("id", "=", actor.user.id)
-            .executeTakeFirstOrThrow();
-        return {
-            ...user,
-            active: Boolean(user.active),
-            version: Number(user.version),
-        };
-    }
-    async settings(actor, raw) {
-        if (raw !== undefined) {
-            this.allow(actor, "settings", true);
-            const input = settingsSchema.parse(raw);
-            await this.mutate(actor, "settings", actor.tenant.id, async (trx) => {
-                const current = await trx
-                    .selectFrom("identity_settings")
-                    .select("version")
-                    .where("tenant_id", "=", actor.tenant.id)
-                    .executeTakeFirst();
-                this.revision(current?.version ?? 0, input.expectedVersion);
-                await trx
-                    .insertInto("identity_settings")
-                    .values({
-                    tenant_id: actor.tenant.id,
-                    display_name: input.displayName,
-                    locale: input.locale,
-                    time_zone: input.timeZone,
-                    version: input.expectedVersion + 1,
-                })
-                    .onConflict((c) => c.column("tenant_id").doUpdateSet({
-                    display_name: input.displayName,
-                    locale: input.locale,
-                    time_zone: input.timeZone,
-                    version: input.expectedVersion + 1,
-                }))
-                    .execute();
-            });
-        }
-        return this.presentationService.organizationSettings(actor);
-    }
-    async applicationSettings(actor, security, raw, fallbackSeconds) {
-        if (actor.portal === "user")
-            throw new IdentityError(403, "Access denied.");
-        if (raw !== undefined) {
-            if (actor.portal !== "super-admin" ||
-                !actor.permissions.includes("identity.manage"))
-                throw new IdentityError(403, "Access denied.");
-            const input = security
-                ? securitySettingsSchema.parse(raw)
-                : settingsSchema.parse(raw);
-            await this.mutate(actor, security ? "security-settings" : "application-settings", actor.appId, async (trx) => {
-                const current = await trx
-                    .selectFrom("identity_app_settings")
-                    .selectAll()
-                    .where("app_id", "=", actor.appId)
-                    .executeTakeFirst();
-                this.revision(current?.version ?? 0, input.expectedVersion);
-                const row = {
-                    app_id: actor.appId,
-                    display_name: current?.display_name ?? this.appName,
-                    locale: current?.locale ?? "en",
-                    time_zone: current?.time_zone ?? "UTC",
-                    session_seconds: current?.session_seconds ?? fallbackSeconds,
-                    version: input.expectedVersion + 1,
-                };
-                if ("sessionSeconds" in input)
-                    row.session_seconds = input.sessionSeconds;
-                else {
-                    row.display_name = input.displayName;
-                    row.locale = input.locale;
-                    row.time_zone = input.timeZone;
-                }
-                await trx
-                    .insertInto("identity_app_settings")
-                    .values(row)
-                    .onConflict((c) => c.column("app_id").doUpdateSet(row))
-                    .execute();
-                if (security)
-                    await trx
-                        .deleteFrom("identity_sessions")
-                        .where("app_id", "=", actor.appId)
-                        .execute();
-            });
-        }
-        const row = await this.db
-            .selectFrom("identity_app_settings")
-            .selectAll()
-            .where("app_id", "=", actor.appId)
-            .executeTakeFirst();
-        return security
-            ? {
-                sessionSeconds: Number(row?.session_seconds ?? fallbackSeconds),
-                version: Number(row?.version ?? 0),
-            }
-            : {
-                displayName: row?.display_name ?? this.appName,
-                locale: row?.locale ?? "en",
-                timeZone: row?.time_zone ?? "UTC",
-                version: Number(row?.version ?? 0),
-            };
-    }
-    revision(current, expected) {
-        if (Number(current) !== expected)
-            throw new IdentityError(409, "This record changed. Reload before saving.");
-    }
-    async presentation(actor) {
-        return this.presentationService.presentation(actor);
-    }
-    async configuration(appId, requiresOrganizationId) {
-        return this.presentationService.configuration(appId, requiresOrganizationId);
-    }
-    allow(actor, resource, write) {
-        if (!write &&
-            ["roles", "permissions", "organizations"].includes(resource) &&
-            actor.portal !== "user")
-            return;
-        if (resource === "sessions" && actor.portal === "user")
-            return;
-        if (actor.portal === "user" ||
-            !actor.permissions.includes("identity.manage"))
-            throw new IdentityError(403, "Access denied.");
-        if (write &&
-            ["roles", "permissions", "organizations"].includes(resource) &&
-            actor.portal !== "super-admin")
-            throw new IdentityError(403, "Only super administrators can change this resource.");
-    }
-    tenant(actor, requested) {
-        if (requested &&
-            requested !== actor.tenant.id &&
-            actor.portal !== "super-admin")
-            throw new IdentityError(403, "Access denied.");
-        return requested ?? actor.tenant.id;
-    }
-    assignableRole(actor, role) {
-        if (actor.portal !== "super-admin" && role !== "user")
-            throw new IdentityError(403, "Only super administrators can assign privileged roles.");
-    }
-    async activeTenant(trx, id) {
-        if (!(await trx
-            .selectFrom("identity_tenants")
-            .select("id")
-            .where("id", "=", id)
-            .where("active", "=", 1)
-            .executeTakeFirst()))
-            throw new IdentityError(422, "Organization is inactive or unavailable.");
-    }
-    async unprivilegedUser(trx, id) {
-        const privileged = await trx
-            .selectFrom("identity_memberships")
-            .select("role_id")
-            .where("user_id", "=", id)
-            .where("role_id", "in", ["admin", "super-admin"])
-            .executeTakeFirst();
-        if (privileged)
-            throw new IdentityError(403, "Only super administrators can change privileged accounts.");
-        const tenants = await trx
-            .selectFrom("identity_memberships")
-            .select("tenant_id")
-            .where("user_id", "=", id)
-            .distinct()
-            .execute();
-        if (tenants.length > 1)
-            throw new IdentityError(403, "Only super administrators can change shared accounts.");
-    }
-    async mutate(actor, resource, id, action, affectedTenant) {
-        return this.db.transaction().execute(async (trx) => {
-            checkIdentityRequest();
-            const result = await action(trx, id);
-            checkIdentityRequest();
-            const targetTenant = affectedTenant ??
-                (resource === "organizations"
-                    ? id
-                    : resource === "memberships"
-                        ? id.split("~")[1]
-                        : actor.tenant.id);
-            let targets = [targetTenant];
-            if (!affectedTenant && ["users", "profile"].includes(resource))
-                targets = (await trx
-                    .selectFrom("identity_memberships")
-                    .select("tenant_id")
-                    .where("user_id", "=", id)
-                    .distinct()
-                    .execute()).map((row) => row.tenant_id);
-            if (["roles", "application-settings", "security-settings"].includes(resource))
-                targets = (await trx.selectFrom("identity_tenants").select("id").execute()).map((row) => row.id);
-            for (const tenant of new Set(targets))
-                await trx
-                    .insertInto("identity_audit_events")
-                    .values({
-                    id: randomUUID(),
-                    app_id: actor.appId,
-                    actor_id: actor.user.id,
-                    tenant_id: tenant,
-                    action: `identity.${resource}.changed`,
-                    resource_id: id,
-                    created_at: new Date().toISOString(),
-                })
-                    .execute();
-            checkIdentityRequest();
-            return result;
-        });
-    }
-}

package/dist/modules/identity/identity.membership-policy.d.ts

@@ -1,3 +0,0 @@
-import type { Transaction } from "kysely";
-import type { IdentitySchema } from "./identity.types.js";
-export declare function protectAdministrators(trx: Transaction<IdentitySchema>, userId: string, tenantId?: string, roleId?: string): Promise<void>;

package/dist/modules/identity/identity.membership-policy.js

@@ -1,27 +0,0 @@
-import { IdentityError } from "./identity.error.js";
-export async function protectAdministrators(trx, userId, tenantId, roleId) {
-    let query = trx
-        .selectFrom("identity_memberships")
-        .selectAll()
-        .where("user_id", "=", userId)
-        .where("active", "=", 1)
-        .where("role_id", "in", ["admin", "super-admin"]);
-    if (tenantId)
-        query = query.where("tenant_id", "=", tenantId);
-    if (roleId)
-        query = query.where("role_id", "=", roleId);
-    for (const member of await query.execute()) {
-        const peer = await trx
-            .selectFrom("identity_memberships as m")
-            .innerJoin("identity_users as u", "u.id", "m.user_id")
-            .select("u.id")
-            .where("m.tenant_id", "=", member.tenant_id)
-            .where("m.role_id", "=", member.role_id)
-            .where("m.active", "=", 1)
-            .where("u.active", "=", 1)
-            .where("u.id", "!=", userId)
-            .executeTakeFirst();
-        if (!peer)
-            throw new IdentityError(409, "Keep at least one active administrator for this role and organization.");
-    }
-}

package/dist/modules/identity/identity.permission-declarations.d.ts

@@ -1,23 +0,0 @@
-import { z } from "zod";
-import type { Kysely, Transaction } from "kysely";
-import type { IdentitySchema, Portal } from "./identity.types.js";
-declare const declarationSchema: z.ZodObject<{
-    owner: z.ZodString;
-    permissions: z.ZodArray<z.ZodObject<{
-        id: z.ZodString;
-        portals: z.ZodArray<z.ZodEnum<{
-            admin: "admin";
-            "super-admin": "super-admin";
-            user: "user";
-        }>>;
-        label: z.ZodOptional<z.ZodString>;
-    }, z.core.$strict>>;
-}, z.core.$strict>;
-export type IdentityPermissionDeclaration = z.input<typeof declarationSchema>;
-export declare function registerIdentityPermissions(db: Kysely<IdentitySchema>, appId: string, raw: unknown): Promise<{
-    owner: string;
-    permissionIds: string[];
-}>;
-export declare function validateDeclaredPermissions(db: Kysely<IdentitySchema> | Transaction<IdentitySchema>, appId: string, portal: Portal, ids: string[]): Promise<void>;
-export declare function filterDeclaredPermissions(db: Kysely<IdentitySchema>, appId: string, portal: Portal, ids: string[]): Promise<string[]>;
-export {};

package/dist/modules/identity/identity.permission-declarations.js

@@ -1,57 +0,0 @@
-import { z } from "zod";
-import { IdentityError } from "./identity.error.js";
-import { portalSchema } from "./identity.schema.js";
-const declarationSchema = z.object({
-    owner: z.string().regex(/^[a-z][a-z0-9-]{0,63}$/).refine((value) => !["identity", "desk"].includes(value)),
-    permissions: z.array(z.object({
-        id: z.string().regex(/^[a-z][a-z0-9-]*(?:\.[a-z][a-z0-9-]*){2,8}$/).max(250),
-        portals: z.array(portalSchema).min(1).max(3),
-        label: z.string().trim().min(1).max(100).regex(/^[^\x00-\x1f\x7f]+$/).optional(),
-    }).strict()).min(1).max(100),
-}).strict();
-export async function registerIdentityPermissions(db, appId, raw) {
-    const declaration = declarationSchema.parse(raw);
-    const ids = new Set();
-    for (const permission of declaration.permissions) {
-        if (!permission.id.startsWith(`${appId}.${declaration.owner}.`) || ids.has(permission.id))
-            throw new IdentityError(422, "Use unique permission IDs in this app and owner namespace.");
-        ids.add(permission.id);
-    }
-    return db.transaction().execute(async (trx) => {
-        for (const permission of declaration.permissions) {
-            const portals = JSON.stringify([...new Set(permission.portals)].sort());
-            const previous = await trx.selectFrom("identity_permission_declarations").selectAll()
-                .where("permission_id", "=", permission.id).executeTakeFirst();
-            if (previous) {
-                if (previous.app_id !== appId || previous.owner !== declaration.owner || previous.portals !== portals)
-                    throw new IdentityError(409, "Permission declaration conflicts with its registered owner or portal policy.");
-                if (permission.label !== undefined && permission.label !== previous.label)
-                    await trx.updateTable("identity_permission_declarations").set({ label: permission.label })
-                        .where("permission_id", "=", permission.id).execute();
-                continue;
-            }
-            if (await trx.selectFrom("identity_permissions").select("id").where("id", "=", permission.id).executeTakeFirst())
-                throw new IdentityError(409, "Permission already exists without this owner declaration.");
-            await trx.insertInto("identity_permissions").values({ id: permission.id }).execute();
-            await trx.insertInto("identity_permission_declarations").values({
-                permission_id: permission.id, app_id: appId, owner: declaration.owner, portals, label: permission.label ?? null,
-            }).execute();
-        }
-        return { owner: declaration.owner, permissionIds: [...ids] };
-    });
-}
-export async function validateDeclaredPermissions(db, appId, portal, ids) {
-    const declarations = await db.selectFrom("identity_permission_declarations").selectAll().execute();
-    for (const id of ids) {
-        const declaration = declarations.find((row) => row.permission_id === id);
-        if (declaration && (declaration.app_id !== appId || !JSON.parse(declaration.portals).includes(portal)))
-            throw new IdentityError(403, "Permission is unavailable in this app or portal.");
-    }
-}
-export async function filterDeclaredPermissions(db, appId, portal, ids) {
-    const declarations = await db.selectFrom("identity_permission_declarations").selectAll().execute();
-    return ids.filter((id) => {
-        const declaration = declarations.find((row) => row.permission_id === id);
-        return !declaration || (declaration.app_id === appId && JSON.parse(declaration.portals).includes(portal));
-    });
-}

package/dist/modules/identity/identity.presentation-service.d.ts

@@ -1,23 +0,0 @@
-import type { Kysely } from "kysely";
-import type { IdentitySchema, Principal } from "./identity.types.js";
-export declare class IdentityPresentationService {
-    private readonly db;
-    private readonly appName;
-    constructor(db: Kysely<IdentitySchema>, appName: string);
-    configuration(appId: string, requiresOrganizationId: boolean): Promise<{
-        displayName: string;
-        requiresOrganizationId: boolean;
-    }>;
-    presentation(actor: Principal): Promise<{
-        displayName: string;
-        organizationDisplayName: string;
-        locale: string;
-        timeZone: string;
-    }>;
-    organizationSettings(actor: Principal): Promise<{
-        displayName: string;
-        locale: string;
-        timeZone: string;
-        version: number;
-    }>;
-}