@dyrected/core 2.5.49 → 2.5.52

package/dist/auth/token.d.ts

@@ -4,6 +4,8 @@ export interface CollectionTokenPayload extends JWTPayload {
     email: string;
     collection: string;
     purpose?: 'invite' | 'reset';
+    providerId?: string;
+    authSource?: 'local' | 'external';
 }
 /**
  * Issue a signed JWT for a user document in an auth collection.

package/dist/auth/token.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"token.d.ts","sourceRoot":"","sources":["../../src/auth/token.ts"],"names":[],"mappings":"AAAA,OAAO,EAAiC,KAAK,UAAU,EAAE,MAAM,MAAM,CAAC;AAGtE,MAAM,WAAW,sBAAuB,SAAQ,UAAU;IACxD,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,QAAQ,GAAG,OAAO,CAAC;CAC9B;AAeD;;GAEG;AACH,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,IAAI,CAAC,sBAAsB,EAAE,KAAK,GAAG,KAAK,CAAC,EACpD,SAAS,GAAE,MAAuB,GACjC,OAAO,CAAC,MAAM,CAAC,CAMjB;AAED;;GAEG;AACH,wBAAsB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAG1F;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,sBAAsB,GAAG,IAAI,CAMlF"}
+{"version":3,"file":"token.d.ts","sourceRoot":"","sources":["../../src/auth/token.ts"],"names":[],"mappings":"AAAA,OAAO,EAAiC,KAAK,UAAU,EAAE,MAAM,MAAM,CAAC;AAGtE,MAAM,WAAW,sBAAuB,SAAQ,UAAU;IACxD,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,QAAQ,GAAG,OAAO,CAAC;IAC7B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,OAAO,GAAG,UAAU,CAAC;CACnC;AAeD;;GAEG;AACH,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,IAAI,CAAC,sBAAsB,EAAE,KAAK,GAAG,KAAK,CAAC,EACpD,SAAS,GAAE,MAAuB,GACjC,OAAO,CAAC,MAAM,CAAC,CAMjB;AAED;;GAEG;AACH,wBAAsB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAG1F;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,sBAAsB,GAAG,IAAI,CAMlF"}

package/dist/auth/token.js.map

@@ -1 +1 @@
-{"version":3,"file":"token.js","sourceRoot":"","sources":["../../src/auth/token.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAmB,MAAM,MAAM,CAAC;AACtE,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AASxC,SAAS,SAAS;IAChB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;IACzE,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,kDAAkD;YAClD,kEAAkE,CACnE,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,cAAc,GAAG,IAAI,CAAC;AAE5B;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,OAAoD,EACpD,YAAoB,cAAc;IAElC,OAAO,IAAI,OAAO,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC;SAC/B,kBAAkB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;SACpC,WAAW,EAAE;SACb,iBAAiB,CAAC,SAAS,CAAC;SAC5B,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;AACvB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,KAAa;IACvD,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IACxD,OAAO,OAAiC,CAAC;AAC3C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAa;IACjD,IAAI,CAAC;QACH,OAAO,SAAS,CAAC,KAAK,CAA2B,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}
+{"version":3,"file":"token.js","sourceRoot":"","sources":["../../src/auth/token.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAmB,MAAM,MAAM,CAAC;AACtE,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAWxC,SAAS,SAAS;IAChB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;IACzE,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,kDAAkD;YAClD,kEAAkE,CACnE,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,cAAc,GAAG,IAAI,CAAC;AAE5B;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,OAAoD,EACpD,YAAoB,cAAc;IAElC,OAAO,IAAI,OAAO,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC;SAC/B,kBAAkB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;SACpC,WAAW,EAAE;SACb,iBAAiB,CAAC,SAAS,CAAC;SAC5B,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;AACvB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,KAAa;IACvD,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IACxD,OAAO,OAAiC,CAAC;AAC3C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAa;IACjD,IAAI,CAAC;QACH,OAAO,SAAS,CAAC,KAAK,CAA2B,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/controllers/admin-auth.controller.d.ts

@@ -0,0 +1,68 @@
+import type { Context } from "hono";
+import type { DyrectedContext } from "../app.js";
+import type { AdminAuthProvider, DyrectedConfig } from "../types/index.js";
+export declare class AdminAuthController {
+    private readonly config;
+    constructor(config: DyrectedConfig);
+    providers(c: Context<DyrectedContext>): Promise<Response & import("hono").TypedResponse<{
+        mode: "local" | "external";
+        collectionSlug?: string | undefined;
+        provisioningMode?: import("../types/admin-auth.js").AdminAuthProvisioningMode | undefined;
+        providers: {
+            id: string;
+            type: AdminAuthProvider["type"];
+            displayName: string;
+            autoRedirect?: boolean | undefined;
+        }[];
+    }, import("hono/utils/http-status").ContentfulStatusCode, "json">>;
+    start(c: Context<DyrectedContext>): Promise<(Response & import("hono").TypedResponse<{
+        error: true;
+        message: string;
+    }, 404, "json">) | (Response & import("hono").TypedResponse<undefined, 302, "redirect">) | (Response & import("hono").TypedResponse<{
+        error: true;
+        message: string;
+    }, 400, "json">) | (Response & import("hono").TypedResponse<{
+        error: true;
+        message: string;
+    }, 500, "json">)>;
+    callback(c: Context<DyrectedContext>): Promise<(Response & import("hono").TypedResponse<undefined, 302, "redirect">) | (Response & import("hono").TypedResponse<{
+        error: true;
+        message: string;
+    }, 404, "json">)>;
+    exchange(c: Context<DyrectedContext>): Promise<(Response & import("hono").TypedResponse<{
+        error: true;
+        message: string;
+    }, 404, "json">) | (Response & import("hono").TypedResponse<{
+        token: string;
+        collectionSlug: string;
+        providerId: string;
+    }, import("hono/utils/http-status").ContentfulStatusCode, "json">) | (Response & import("hono").TypedResponse<{
+        error: true;
+        message: string;
+    }, 403 | 401, "json">)>;
+    logout(c: Context<DyrectedContext>): Promise<Response & import("hono").TypedResponse<{
+        success: true;
+        message: string;
+    }, import("hono/utils/http-status").ContentfulStatusCode, "json">>;
+    private getProvider;
+    private completeProviderAuth;
+    private resolveAccess;
+    private buildUserData;
+    private findUserByExternalIdentity;
+    private getSiteId;
+    private getRequestConfig;
+    private buildOidcStartUrl;
+    private resolveOidcIdentity;
+    private resolveCustomIdentity;
+    private mapClaims;
+    private readStringClaim;
+    private readStringArrayClaim;
+    private getOidcDiscovery;
+    private defaultCallbackPath;
+    private buildCustomProviderStartUrl;
+    private signState;
+    private verifyState;
+    private getStateSecret;
+    private normalizeReturnTo;
+}
+//# sourceMappingURL=admin-auth.controller.d.ts.map

package/dist/controllers/admin-auth.controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-auth.controller.d.ts","sourceRoot":"","sources":["../../src/controllers/admin-auth.controller.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAQpC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAGjD,OAAO,KAAK,EACV,iBAAiB,EAGjB,cAAc,EAEf,MAAM,mBAAmB,CAAC;AAU3B,qBAAa,mBAAmB;IAClB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,cAAc;IAE7C,SAAS,CAAC,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC;;;;;;;;;;;IAKrC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC;;;;;;;;;;IAwCjC,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC;;;;IAsBpC,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC;;;;;;;;;;;IAqBpC,MAAM,CAAC,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC;;;;IAIxC,OAAO,CAAC,WAAW;YAKL,oBAAoB;YAgFpB,aAAa;YA0Bb,aAAa;YAkBb,0BAA0B;IAiBxC,OAAO,CAAC,SAAS;YAIH,gBAAgB;YAgBhB,iBAAiB;YAwBjB,mBAAmB;YAuDnB,qBAAqB;IA4CnC,OAAO,CAAC,SAAS;IA6BjB,OAAO,CAAC,eAAe;IAIvB,OAAO,CAAC,oBAAoB;YASd,gBAAgB;IAc9B,OAAO,CAAC,mBAAmB;IAI3B,OAAO,CAAC,2BAA2B;YAarB,SAAS;YAQT,WAAW;IASzB,OAAO,CAAC,cAAc;IAQtB,OAAO,CAAC,iBAAiB;CAK1B"}

package/dist/controllers/admin-auth.controller.js

@@ -0,0 +1,414 @@
+import { randomBytes } from "node:crypto";
+import { TextEncoder } from "node:util";
+import { SignJWT, createRemoteJWKSet, jwtVerify, decodeJwt, } from "jose";
+import { signCollectionToken } from "../auth/token.js";
+import { hashPassword } from "../auth/password.js";
+import { getAdminAuthCollection, getPublicAdminAuthConfig } from "../utils/admin-auth.js";
+export class AdminAuthController {
+    config;
+    constructor(config) {
+        this.config = config;
+    }
+    async providers(c) {
+        const requestConfig = await this.getRequestConfig(c);
+        return c.json(getPublicAdminAuthConfig(requestConfig.adminAuth, requestConfig.collections));
+    }
+    async start(c) {
+        const requestConfig = await this.getRequestConfig(c);
+        const provider = this.getProvider(requestConfig, c.req.param("provider"));
+        if (!provider) {
+            return c.json({ error: true, message: "Admin auth provider not found." }, 404);
+        }
+        const siteId = this.getSiteId(c);
+        const returnTo = this.normalizeReturnTo(c.req.query("returnTo"), c);
+        if (provider.type === "oidc") {
+            const redirectUrl = await this.buildOidcStartUrl(provider, returnTo, siteId, new URL(c.req.url).origin);
+            return c.redirect(redirectUrl, 302);
+        }
+        if (!provider.startUrl) {
+            return c.json({ error: true, message: "This provider does not expose a start URL." }, 400);
+        }
+        const url = this.buildCustomProviderStartUrl(provider.startUrl, new URL(c.req.url).origin);
+        if (!url) {
+            return c.json({
+                error: true,
+                message: `Admin auth provider "${provider.id}" has an invalid start URL.`,
+            }, 500);
+        }
+        url.searchParams.set("returnTo", returnTo);
+        if (siteId)
+            url.searchParams.set("siteId", siteId);
+        url.searchParams.set("provider", provider.id);
+        return c.redirect(url.toString(), 302);
+    }
+    async callback(c) {
+        const requestConfig = await this.getRequestConfig(c);
+        const provider = this.getProvider(requestConfig, c.req.param("provider"));
+        if (!provider) {
+            return c.json({ error: true, message: "Admin auth provider not found." }, 404);
+        }
+        try {
+            const exchange = await this.completeProviderAuth(requestConfig, provider, c);
+            const redirectUrl = new URL(exchange.returnTo);
+            redirectUrl.searchParams.set("dyrectedExternalToken", exchange.token);
+            redirectUrl.searchParams.set("dyrectedAdminCollection", exchange.collectionSlug);
+            return c.redirect(redirectUrl.toString(), 302);
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : "External authentication failed.";
+            const fallback = this.normalizeReturnTo(c.req.query("returnTo"), c);
+            const redirectUrl = new URL(fallback);
+            redirectUrl.searchParams.set("dyrectedExternalError", message);
+            return c.redirect(redirectUrl.toString(), 302);
+        }
+    }
+    async exchange(c) {
+        const requestConfig = await this.getRequestConfig(c);
+        const provider = this.getProvider(requestConfig, c.req.param("provider"));
+        if (!provider) {
+            return c.json({ error: true, message: "Admin auth provider not found." }, 404);
+        }
+        try {
+            const exchange = await this.completeProviderAuth(requestConfig, provider, c);
+            return c.json({
+                token: exchange.token,
+                collectionSlug: exchange.collectionSlug,
+                providerId: provider.id,
+            });
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : "External authentication failed.";
+            const status = message === "Access denied for this site." ? 403 : 401;
+            return c.json({ error: true, message }, status);
+        }
+    }
+    async logout(c) {
+        return c.json({ success: true, message: "Logged out. Discard your token." });
+    }
+    getProvider(config, id) {
+        if (config.adminAuth?.mode !== "external")
+            return undefined;
+        return config.adminAuth.providers.find((provider) => provider.id === id);
+    }
+    async completeProviderAuth(requestConfig, provider, c) {
+        const resolved = provider.type === "oidc"
+            ? await this.resolveOidcIdentity(provider, c)
+            : await this.resolveCustomIdentity(provider, c);
+        const identity = resolved.identity;
+        const siteId = this.getSiteId(c);
+        const adminCollection = getAdminAuthCollection(requestConfig);
+        if (!adminCollection?.auth) {
+            throw new Error("Admin auth collection is not configured.");
+        }
+        const db = c.get("config").db;
+        if (!db)
+            throw new Error("Database not configured.");
+        let user = (await this.findUserByExternalIdentity(db, adminCollection.slug, provider.id, identity.sub)) ??
+            (identity.email
+                ? (await db.find({
+                    collection: adminCollection.slug,
+                    where: { email: identity.email },
+                    limit: 1,
+                })).docs[0]
+                : null);
+        const provisioningMode = requestConfig.adminAuth?.provisioningMode ?? "jit_plus_membership_management";
+        const allowJitProvisioning = provisioningMode !== "preprovisioned_only" && provider.allowJitProvisioning !== false;
+        if (!user && !allowJitProvisioning) {
+            throw new Error("This account has not been provisioned for admin access.");
+        }
+        const access = await this.resolveAccess(requestConfig, identity, provider.id, siteId, c, user);
+        if (!access.allowed) {
+            throw new Error("Access denied for this site.");
+        }
+        if (!user && allowJitProvisioning) {
+            user = await db.create({
+                collection: adminCollection.slug,
+                data: {
+                    ...(await this.buildUserData(identity, provider.id, access.roles, access.data)),
+                    password: await hashPassword(randomBytes(32).toString("hex")),
+                },
+            });
+        }
+        else if (user) {
+            user = await db.update({
+                collection: adminCollection.slug,
+                id: user.id,
+                data: await this.buildUserData(identity, provider.id, access.roles, access.data),
+            });
+        }
+        if (!user?.email) {
+            throw new Error("Authenticated admin user is missing an email address.");
+        }
+        const token = await signCollectionToken({
+            sub: user.id,
+            email: user.email,
+            collection: adminCollection.slug,
+            providerId: provider.id,
+            authSource: "external",
+        });
+        return {
+            token,
+            collectionSlug: adminCollection.slug,
+            returnTo: resolved.returnTo,
+        };
+    }
+    async resolveAccess(requestConfig, identity, providerId, siteId, c, user) {
+        const resolved = await requestConfig.adminAuth?.resolveAccess?.({
+            identity,
+            providerId,
+            siteId,
+            workspaceId: c.get("workspaceId"),
+            req: {
+                method: c.req.method,
+                path: c.req.path,
+                url: c.req.url,
+                headers: Object.fromEntries(c.req.raw.headers.entries()),
+            },
+            user,
+        });
+        if (resolved)
+            return resolved;
+        return { allowed: true, roles: identity.roles, data: {} };
+    }
+    async buildUserData(identity, providerId, roles, extraData) {
+        return {
+            ...(identity.email ? { email: identity.email } : {}),
+            ...(identity.name ? { name: identity.name } : {}),
+            ...(roles ? { roles } : {}),
+            ...(extraData ?? {}),
+            authProvider: providerId,
+            externalSubject: identity.sub,
+            authSource: "external",
+            lastLoginAt: new Date().toISOString(),
+        };
+    }
+    async findUserByExternalIdentity(db, collection, providerId, externalSubject) {
+        const result = await db.find({
+            collection,
+            where: {
+                authProvider: providerId,
+                externalSubject,
+            },
+            limit: 1,
+        });
+        return result.docs[0] ?? null;
+    }
+    getSiteId(c) {
+        return c.req.header("X-Site-Id") || c.get("siteId");
+    }
+    async getRequestConfig(c) {
+        const siteId = this.getSiteId(c);
+        if (!siteId || !this.config.onSchemaFetch)
+            return this.config;
+        const dynamic = await this.config.onSchemaFetch(siteId);
+        return {
+            ...this.config,
+            ...(dynamic.admin ? { admin: { ...this.config.admin, ...dynamic.admin } } : {}),
+            ...(dynamic.adminAuth
+                ? { adminAuth: { ...this.config.adminAuth, ...dynamic.adminAuth } }
+                : {}),
+            collections: dynamic.collections ? [...this.config.collections, ...dynamic.collections] : this.config.collections,
+            globals: dynamic.globals ? [...this.config.globals, ...dynamic.globals] : this.config.globals,
+        };
+    }
+    async buildOidcStartUrl(provider, returnTo, siteId, origin) {
+        const discovery = await this.getOidcDiscovery(provider);
+        const nonce = randomBytes(16).toString("hex");
+        const state = await this.signState({
+            providerId: provider.id,
+            returnTo,
+            siteId,
+            nonce,
+        });
+        const url = new URL(provider.authorizationEndpoint || discovery.authorization_endpoint);
+        url.searchParams.set("response_type", "code");
+        url.searchParams.set("client_id", provider.clientId);
+        url.searchParams.set("redirect_uri", provider.redirectUri || this.defaultCallbackPath(provider.id, origin));
+        url.searchParams.set("scope", (provider.scopes ?? ["openid", "profile", "email"]).join(" "));
+        url.searchParams.set("state", state);
+        url.searchParams.set("nonce", nonce);
+        return url.toString();
+    }
+    async resolveOidcIdentity(provider, c) {
+        const code = c.req.query("code");
+        const state = c.req.query("state");
+        if (!code || !state)
+            throw new Error("Missing OIDC callback parameters.");
+        const parsedState = await this.verifyState(state, provider.id);
+        const discovery = await this.getOidcDiscovery(provider);
+        const redirectUri = provider.redirectUri || this.defaultCallbackPath(provider.id, new URL(c.req.url).origin);
+        const tokenResponse = await fetch(provider.tokenEndpoint || discovery.token_endpoint, {
+            method: "POST",
+            headers: { "Content-Type": "application/x-www-form-urlencoded" },
+            body: new URLSearchParams({
+                grant_type: "authorization_code",
+                code,
+                redirect_uri: redirectUri,
+                client_id: provider.clientId,
+                client_secret: provider.clientSecret,
+            }),
+        });
+        if (!tokenResponse.ok) {
+            throw new Error("OIDC token exchange failed.");
+        }
+        const tokenBody = await tokenResponse.json();
+        const idToken = tokenBody.id_token;
+        let claims = {};
+        if (idToken) {
+            const jwks = createRemoteJWKSet(new URL(discovery.jwks_uri));
+            const { payload } = await jwtVerify(idToken, jwks, {
+                issuer: provider.issuer,
+                audience: provider.clientId,
+            });
+            if (parsedState.nonce && payload.nonce !== parsedState.nonce) {
+                throw new Error("OIDC nonce verification failed.");
+            }
+            claims = payload;
+        }
+        else if (tokenBody.access_token && (provider.userInfoEndpoint || discovery.userinfo_endpoint)) {
+            const userInfo = await fetch(provider.userInfoEndpoint || discovery.userinfo_endpoint, {
+                headers: { Authorization: `Bearer ${tokenBody.access_token}` },
+            });
+            if (!userInfo.ok)
+                throw new Error("OIDC userinfo request failed.");
+            claims = await userInfo.json();
+        }
+        else {
+            throw new Error("OIDC provider did not return usable identity claims.");
+        }
+        return {
+            identity: this.mapClaims(claims, provider.claimMapping),
+            returnTo: parsedState.returnTo,
+        };
+    }
+    async resolveCustomIdentity(provider, c) {
+        const body = c.req.method === "POST" ? await c.req.json().catch(() => ({})) : {};
+        const tokenParam = provider.tokenParam || "token";
+        const token = body?.[tokenParam] || c.req.query(tokenParam);
+        if (!token) {
+            throw new Error(`Missing ${tokenParam} for external auth exchange.`);
+        }
+        let claims;
+        if (provider.secret) {
+            const secret = new TextEncoder().encode(provider.secret);
+            const verified = await jwtVerify(token, secret, {
+                issuer: provider.issuer,
+                audience: provider.audience,
+            });
+            claims = verified.payload;
+        }
+        else if (provider.jwksUri) {
+            const jwks = createRemoteJWKSet(new URL(provider.jwksUri));
+            const verified = await jwtVerify(token, jwks, {
+                issuer: provider.issuer,
+                audience: provider.audience,
+            });
+            claims = verified.payload;
+        }
+        else {
+            claims = decodeJwt(token);
+            if (provider.issuer && claims.iss !== provider.issuer) {
+                throw new Error("External auth issuer mismatch.");
+            }
+            if (provider.audience) {
+                const aud = claims.aud;
+                const matches = Array.isArray(aud) ? aud.includes(provider.audience) : aud === provider.audience;
+                if (!matches)
+                    throw new Error("External auth audience mismatch.");
+            }
+        }
+        return {
+            identity: this.mapClaims(claims, provider.claimMapping),
+            returnTo: this.normalizeReturnTo(body?.returnTo || c.req.query("returnTo"), c),
+        };
+    }
+    mapClaims(claims, mapping) {
+        const subKey = mapping?.sub || "sub";
+        const emailKey = mapping?.email || "email";
+        const nameKey = mapping?.name || "name";
+        const rolesKey = mapping?.roles;
+        const groupsKey = mapping?.groups;
+        const siteIdsKey = mapping?.siteIds;
+        const workspaceIdsKey = mapping?.workspaceIds;
+        const sub = claims[subKey];
+        if (typeof sub !== "string" || !sub) {
+            throw new Error("External identity is missing a subject.");
+        }
+        return {
+            sub,
+            email: this.readStringClaim(claims[emailKey]),
+            name: this.readStringClaim(claims[nameKey]),
+            roles: this.readStringArrayClaim(rolesKey ? claims[rolesKey] : undefined),
+            groups: this.readStringArrayClaim(groupsKey ? claims[groupsKey] : undefined),
+            siteIds: this.readStringArrayClaim(siteIdsKey ? claims[siteIdsKey] : undefined),
+            workspaceIds: this.readStringArrayClaim(workspaceIdsKey ? claims[workspaceIdsKey] : undefined),
+            rawClaims: claims,
+        };
+    }
+    readStringClaim(value) {
+        return typeof value === "string" ? value : undefined;
+    }
+    readStringArrayClaim(value) {
+        if (!value)
+            return undefined;
+        if (Array.isArray(value)) {
+            return value.filter((entry) => typeof entry === "string");
+        }
+        if (typeof value === "string")
+            return [value];
+        return undefined;
+    }
+    async getOidcDiscovery(provider) {
+        const discoveryUrl = new URL(provider.issuer.replace(/\/$/, "") + "/.well-known/openid-configuration");
+        const response = await fetch(discoveryUrl.toString());
+        if (!response.ok)
+            throw new Error("Failed to load OIDC discovery document.");
+        return response.json();
+    }
+    defaultCallbackPath(providerId, origin = "") {
+        return `${origin}/api/admin/auth/${providerId}/callback`;
+    }
+    buildCustomProviderStartUrl(startUrl, origin) {
+        const value = startUrl.trim();
+        if (!value || /^(undefined|null)(\/|$)/i.test(value))
+            return null;
+        try {
+            const url = new URL(value, origin);
+            if (url.protocol !== "http:" && url.protocol !== "https:")
+                return null;
+            return url;
+        }
+        catch {
+            return null;
+        }
+    }
+    async signState(payload) {
+        return new SignJWT(payload)
+            .setProtectedHeader({ alg: "HS256" })
+            .setIssuedAt()
+            .setExpirationTime("15m")
+            .sign(this.getStateSecret());
+    }
+    async verifyState(token, providerId) {
+        const { payload } = await jwtVerify(token, this.getStateSecret());
+        const state = payload;
+        if (state.providerId !== providerId) {
+            throw new Error("OIDC state verification failed.");
+        }
+        return state;
+    }
+    getStateSecret() {
+        const secret = process.env.DYRECTED_JWT_SECRET || process.env.JWT_SECRET;
+        if (!secret) {
+            throw new Error("[dyrected/core] DYRECTED_JWT_SECRET is not set.");
+        }
+        return new TextEncoder().encode(secret);
+    }
+    normalizeReturnTo(returnTo, c) {
+        if (returnTo)
+            return returnTo;
+        const url = new URL(c.req.url);
+        return `${url.origin}/admin`;
+    }
+}
+//# sourceMappingURL=admin-auth.controller.js.map

package/dist/controllers/admin-auth.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-auth.controller.js","sourceRoot":"","sources":["../../src/controllers/admin-auth.controller.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAExC,OAAO,EACL,OAAO,EACP,kBAAkB,EAClB,SAAS,EACT,SAAS,GAEV,MAAM,MAAM,CAAC;AAEd,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAQnD,OAAO,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAS1F,MAAM,OAAO,mBAAmB;IACD;IAA7B,YAA6B,MAAsB;QAAtB,WAAM,GAAN,MAAM,CAAgB;IAAG,CAAC;IAEvD,KAAK,CAAC,SAAS,CAAC,CAA2B;QACzC,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;QACrD,OAAO,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,aAAa,CAAC,SAAS,EAAE,aAAa,CAAC,WAAW,CAAC,CAAC,CAAC;IAC9F,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,CAA2B;QACrC,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;QACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,aAAa,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;QAC1E,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,gCAAgC,EAAE,EAAE,GAAG,CAAC,CAAC;QACjF,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;QAEpE,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC7B,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAC9C,QAAQ,EACR,QAAQ,EACR,MAAM,EACN,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAC1B,CAAC;YACF,OAAO,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;QACtC,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACvB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,4CAA4C,EAAE,EAAE,GAAG,CAAC,CAAC;QAC7F,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,2BAA2B,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;QAC3F,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,CAAC,CAAC,IAAI,CACX;gBACE,KAAK,EAAE,IAAI;gBACX,OAAO,EAAE,wBAAwB,QAAQ,CAAC,EAAE,6BAA6B;aAC1E,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAC3C,IAAI,MAAM;YAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACnD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC9C,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,GAAG,CAAC,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,CAA2B;QACxC,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;QACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,aAAa,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;QAC1E,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,gCAAgC,EAAE,EAAE,GAAG,CAAC,CAAC;QACjF,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,aAAa,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;YAC7E,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC/C,WAAW,CAAC,YAAY,CAAC,GAAG,CAAC,uBAAuB,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;YACtE,WAAW,CAAC,YAAY,CAAC,GAAG,CAAC,yBAAyB,EAAE,QAAQ,CAAC,cAAc,CAAC,CAAC;YACjF,OAAO,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,QAAQ,EAAE,EAAE,GAAG,CAAC,CAAC;QACjD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,iCAAiC,CAAC;YAC3F,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;YACpE,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;YACtC,WAAW,CAAC,YAAY,CAAC,GAAG,CAAC,uBAAuB,EAAE,OAAO,CAAC,CAAC;YAC/D,OAAO,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,QAAQ,EAAE,EAAE,GAAG,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,CAA2B;QACxC,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;QACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,aAAa,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;QAC1E,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,gCAAgC,EAAE,EAAE,GAAG,CAAC,CAAC;QACjF,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,aAAa,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;YAC7E,OAAO,CAAC,CAAC,IAAI,CAAC;gBACZ,KAAK,EAAE,QAAQ,CAAC,KAAK;gBACrB,cAAc,EAAE,QAAQ,CAAC,cAAc;gBACvC,UAAU,EAAE,QAAQ,CAAC,EAAE;aACxB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,iCAAiC,CAAC;YAC3F,MAAM,MAAM,GAAG,OAAO,KAAK,8BAA8B,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;YACtE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,MAAM,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,CAA2B;QACtC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,iCAAiC,EAAE,CAAC,CAAC;IAC/E,CAAC;IAEO,WAAW,CAAC,MAAsB,EAAE,EAAU;QACpD,IAAI,MAAM,CAAC,SAAS,EAAE,IAAI,KAAK,UAAU;YAAE,OAAO,SAAS,CAAC;QAC5D,OAAO,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3E,CAAC;IAEO,KAAK,CAAC,oBAAoB,CAChC,aAA6B,EAC7B,QAA2B,EAC3B,CAA2B;QAE3B,MAAM,QAAQ,GACZ,QAAQ,CAAC,IAAI,KAAK,MAAM;YACtB,CAAC,CAAC,MAAM,IAAI,CAAC,mBAAmB,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC7C,CAAC,CAAC,MAAM,IAAI,CAAC,qBAAqB,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QACpD,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC;QAEnC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,eAAe,GAAG,sBAAsB,CAAC,aAAa,CAAC,CAAC;QAC9D,IAAI,CAAC,eAAe,EAAE,IAAI,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC9D,CAAC;QAED,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QAC9B,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAErD,IAAI,IAAI,GACN,CAAC,MAAM,IAAI,CAAC,0BAA0B,CAAC,EAAE,EAAE,eAAe,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC5F,CAAC,QAAQ,CAAC,KAAK;gBACb,CAAC,CAAC,CACE,MAAM,EAAE,CAAC,IAAI,CAAC;oBACZ,UAAU,EAAE,eAAe,CAAC,IAAI;oBAChC,KAAK,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE;oBAChC,KAAK,EAAE,CAAC;iBACT,CAAC,CACH,CAAC,IAAI,CAAC,CAAC,CAAC;gBACX,CAAC,CAAC,IAAI,CAAC,CAAC;QAEZ,MAAM,gBAAgB,GAAG,aAAa,CAAC,SAAS,EAAE,gBAAgB,IAAI,gCAAgC,CAAC;QACvG,MAAM,oBAAoB,GACxB,gBAAgB,KAAK,qBAAqB,IAAI,QAAQ,CAAC,oBAAoB,KAAK,KAAK,CAAC;QAExF,IAAI,CAAC,IAAI,IAAI,CAAC,oBAAoB,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;QAC7E,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,aAAa,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;QAC/F,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAClD,CAAC;QAED,IAAI,CAAC,IAAI,IAAI,oBAAoB,EAAE,CAAC;YAClC,IAAI,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC;gBACrB,UAAU,EAAE,eAAe,CAAC,IAAI;gBAChC,IAAI,EAAE;oBACJ,GAAG,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;oBAC/E,QAAQ,EAAE,MAAM,YAAY,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;iBAC9D;aACF,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,IAAI,EAAE,CAAC;YAChB,IAAI,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC;gBACrB,UAAU,EAAE,eAAe,CAAC,IAAI;gBAChC,EAAE,EAAE,IAAI,CAAC,EAAE;gBACX,IAAI,EAAE,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC;aACjF,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAC3E,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC;YACtC,GAAG,EAAE,IAAI,CAAC,EAAE;YACZ,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,UAAU,EAAE,eAAe,CAAC,IAAI;YAChC,UAAU,EAAE,QAAQ,CAAC,EAAE;YACvB,UAAU,EAAE,UAAU;SACvB,CAAC,CAAC;QAEH,OAAO;YACL,KAAK;YACL,cAAc,EAAE,eAAe,CAAC,IAAI;YACpC,QAAQ,EAAE,QAAQ,CAAC,QAAQ;SAC5B,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,aAAa,CACzB,aAA6B,EAC7B,QAAmC,EACnC,UAAkB,EAClB,MAA0B,EAC1B,CAA2B,EAC3B,IAAS;QAET,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,SAAS,EAAE,aAAa,EAAE,CAAC;YAC9D,QAAQ;YACR,UAAU;YACV,MAAM;YACN,WAAW,EAAE,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC;YACjC,GAAG,EAAE;gBACH,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM;gBACpB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI;gBAChB,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG;gBACd,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;aACzD;YACD,IAAI;SACL,CAAC,CAAC;QAEH,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAC9B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IAC5D,CAAC;IAEO,KAAK,CAAC,aAAa,CACzB,QAAmC,EACnC,UAAkB,EAClB,KAAgB,EAChB,SAAmC;QAEnC,OAAO;YACL,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpD,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3B,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC;YACpB,YAAY,EAAE,UAAU;YACxB,eAAe,EAAE,QAAQ,CAAC,GAAG;YAC7B,UAAU,EAAE,UAAU;YACtB,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACtC,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,0BAA0B,CACtC,EAAqC,EACrC,UAAkB,EAClB,UAAkB,EAClB,eAAuB;QAEvB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC;YAC3B,UAAU;YACV,KAAK,EAAE;gBACL,YAAY,EAAE,UAAU;gBACxB,eAAe;aAChB;YACD,KAAK,EAAE,CAAC;SACT,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IAChC,CAAC;IAEO,SAAS,CAAC,CAA2B;QAC3C,OAAO,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACtD,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,CAA2B;QACxD,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QACjC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa;YAAE,OAAO,IAAI,CAAC,MAAM,CAAC;QAE9D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QACxD,OAAO;YACL,GAAG,IAAI,CAAC,MAAM;YACd,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/E,GAAG,CAAC,OAAO,CAAC,SAAS;gBACnB,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE,EAAE;gBACnE,CAAC,CAAC,EAAE,CAAC;YACP,WAAW,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW;YACjH,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO;SAC9F,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAC7B,QAA+B,EAC/B,QAAgB,EAChB,MAAe,EACf,MAAe;QAEf,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QACxD,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC9C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC;YACjC,UAAU,EAAE,QAAQ,CAAC,EAAE;YACvB,QAAQ;YACR,MAAM;YACN,KAAK;SACN,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,qBAAqB,IAAI,SAAS,CAAC,sBAAsB,CAAC,CAAC;QACxF,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;QAC9C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACrD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,QAAQ,CAAC,WAAW,IAAI,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;QAC5G,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,MAAM,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC7F,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACrC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACrC,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;IACxB,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAAC,QAA+B,EAAE,CAA2B;QAC5F,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACjC,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QAE1E,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC/D,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QACxD,MAAM,WAAW,GAAG,QAAQ,CAAC,WAAW,IAAI,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;QAE7G,MAAM,aAAa,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,aAAa,IAAI,SAAS,CAAC,cAAc,EAAE;YACpF,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;YAChE,IAAI,EAAE,IAAI,eAAe,CAAC;gBACxB,UAAU,EAAE,oBAAoB;gBAChC,IAAI;gBACJ,YAAY,EAAE,WAAW;gBACzB,SAAS,EAAE,QAAQ,CAAC,QAAQ;gBAC5B,aAAa,EAAE,QAAQ,CAAC,YAAY;aACrC,CAAC;SACH,CAAC,CAAC;QAEH,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACjD,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,CAAC;QAC7C,MAAM,OAAO,GAAG,SAAS,CAAC,QAA8B,CAAC;QACzD,IAAI,MAAM,GAA4B,EAAE,CAAC;QAEzC,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,kBAAkB,CAAC,IAAI,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC7D,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE;gBACjD,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;aAC5B,CAAC,CAAC;YACH,IAAI,WAAW,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,KAAK,WAAW,CAAC,KAAK,EAAE,CAAC;gBAC7D,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;YACrD,CAAC;YACD,MAAM,GAAG,OAAkC,CAAC;QAC9C,CAAC;aAAM,IAAI,SAAS,CAAC,YAAY,IAAI,CAAC,QAAQ,CAAC,gBAAgB,IAAI,SAAS,CAAC,iBAAiB,CAAC,EAAE,CAAC;YAChG,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,gBAAgB,IAAI,SAAS,CAAC,iBAAiB,EAAE;gBACrF,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,SAAS,CAAC,YAAY,EAAE,EAAE;aAC/D,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;YACnE,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACjC,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC1E,CAAC;QAED,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,YAAY,CAAC;YACvD,QAAQ,EAAE,WAAW,CAAC,QAAQ;SAC/B,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,qBAAqB,CAAC,QAAiC,EAAE,CAA2B;QAChG,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACjF,MAAM,UAAU,GAAG,QAAQ,CAAC,UAAU,IAAI,OAAO,CAAC;QAClD,MAAM,KAAK,GAAI,IAAI,EAAE,CAAC,UAAU,CAAwB,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACpF,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,WAAW,UAAU,8BAA8B,CAAC,CAAC;QACvE,CAAC;QAED,IAAI,MAAkB,CAAC;QACvB,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;YACpB,MAAM,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACzD,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE;gBAC9C,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;aAC5B,CAAC,CAAC;YACH,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC;QAC5B,CAAC;aAAM,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;YAC5B,MAAM,IAAI,GAAG,kBAAkB,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;YAC3D,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE;gBAC5C,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;aAC5B,CAAC,CAAC;YACH,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC;QAC5B,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;YAC1B,IAAI,QAAQ,CAAC,MAAM,IAAI,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC;gBACtD,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;YACpD,CAAC;YACD,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;gBACtB,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;gBACvB,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,QAAQ,CAAC,QAAQ,CAAC;gBACjG,IAAI,CAAC,OAAO;oBAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;YACpE,CAAC;QACH,CAAC;QAED,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,MAAiC,EAAE,QAAQ,CAAC,YAAY,CAAC;YAClF,QAAQ,EAAE,IAAI,CAAC,iBAAiB,CAC7B,IAAI,EAAE,QAA+B,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,EACjE,CAAC,CACF;SACF,CAAC;IACJ,CAAC;IAEO,SAAS,CACf,MAA+B,EAC/B,OAA+C;QAE/C,MAAM,MAAM,GAAG,OAAO,EAAE,GAAG,IAAI,KAAK,CAAC;QACrC,MAAM,QAAQ,GAAG,OAAO,EAAE,KAAK,IAAI,OAAO,CAAC;QAC3C,MAAM,OAAO,GAAG,OAAO,EAAE,IAAI,IAAI,MAAM,CAAC;QACxC,MAAM,QAAQ,GAAG,OAAO,EAAE,KAAK,CAAC;QAChC,MAAM,SAAS,GAAG,OAAO,EAAE,MAAM,CAAC;QAClC,MAAM,UAAU,GAAG,OAAO,EAAE,OAAO,CAAC;QACpC,MAAM,eAAe,GAAG,OAAO,EAAE,YAAY,CAAC;QAE9C,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QAC3B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC7D,CAAC;QAED,OAAO;YACL,GAAG;YACH,KAAK,EAAE,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC7C,IAAI,EAAE,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAC3C,KAAK,EAAE,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACzE,MAAM,EAAE,IAAI,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,OAAO,EAAE,IAAI,CAAC,oBAAoB,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC/E,YAAY,EAAE,IAAI,CAAC,oBAAoB,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9F,SAAS,EAAE,MAAM;SAClB,CAAC;IACJ,CAAC;IAEO,eAAe,CAAC,KAAc;QACpC,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IACvD,CAAC;IAEO,oBAAoB,CAAC,KAAc;QACzC,IAAI,CAAC,KAAK;YAAE,OAAO,SAAS,CAAC;QAC7B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC;QAC7E,CAAC;QACD,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QAC9C,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,QAA+B;QAC5D,MAAM,YAAY,GAAG,IAAI,GAAG,CAC1B,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,mCAAmC,CACzE,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC,CAAC;QACtD,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC7E,OAAO,QAAQ,CAAC,IAAI,EAKlB,CAAC;IACL,CAAC;IAEO,mBAAmB,CAAC,UAAkB,EAAE,MAAM,GAAG,EAAE;QACzD,OAAO,GAAG,MAAM,mBAAmB,UAAU,WAAW,CAAC;IAC3D,CAAC;IAEO,2BAA2B,CAAC,QAAgB,EAAE,MAAc;QAClE,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,CAAC,KAAK,IAAI,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAElE,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YACnC,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC;YACvE,OAAO,GAAG,CAAC;QACb,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,OAAmD;QACzE,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC;aACxB,kBAAkB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;aACpC,WAAW,EAAE;aACb,iBAAiB,CAAC,KAAK,CAAC;aACxB,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;IACjC,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,KAAa,EAAE,UAAkB;QACzD,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;QAClE,MAAM,KAAK,GAAG,OAAgC,CAAC;QAC/C,IAAI,KAAK,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACrD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,cAAc;QACpB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;QACzE,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACrE,CAAC;QACD,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC1C,CAAC;IAEO,iBAAiB,CAAC,QAA4B,EAAE,CAA2B;QACjF,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAC9B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC/B,OAAO,GAAG,GAAG,CAAC,MAAM,QAAQ,CAAC;IAC/B,CAAC;CACF"}

package/dist/controllers/collection.controller.d.ts

@@ -4,9 +4,27 @@ import type { DyrectedContext } from '../app.js';
 export declare class CollectionController {
     private collection;
     constructor(collection: CollectionConfig);
+    private getDelegatedProvider;
+    private toHookRequestContext;
     find(c: Context<DyrectedContext>): Promise<(Response & import("hono").TypedResponse<{
         message: string;
     }, 500, "json">) | (Response & import("hono").TypedResponse<{
+        docs: {
+            id: string;
+            externalSubject: string;
+            email: string;
+            name?: string | undefined;
+            roles: string[];
+            siteAccess?: string[] | undefined;
+            status?: "active" | "pending" | undefined;
+        }[];
+        totalDocs: number;
+        limit: number;
+        page: number;
+        totalPages: number;
+        hasNextPage: boolean;
+        hasPrevPage: boolean;
+    }, import("hono/utils/http-status").ContentfulStatusCode, "json">) | (Response & import("hono").TypedResponse<{
         docs: {
             [x: string]: any;
         }[];
@@ -23,13 +41,25 @@ export declare class CollectionController {
     }, 500, "json">) | (Response & import("hono").TypedResponse<{
         message: string;
     }, 400, "json">) | (Response & import("hono").TypedResponse<{
+        message: string;
+    }, 413 | 415, "json">) | (Response & import("hono").TypedResponse<{
         [x: string]: import("hono/utils/types").JSONValue;
+    }, 201, "json">) | (Response & import("hono").TypedResponse<{
+        id: string;
+        externalSubject: string;
+        email: string;
+        name?: string | undefined;
+        roles: string[];
+        siteAccess?: string[] | undefined;
+        status?: "active" | "pending" | undefined;
     }, 201, "json">)>;
     upload(c: Context<DyrectedContext>): Promise<(Response & import("hono").TypedResponse<{
         message: string;
     }, 500, "json">) | (Response & import("hono").TypedResponse<{
         message: string;
     }, 400, "json">) | (Response & import("hono").TypedResponse<{
+        message: string;
+    }, 413 | 415, "json">) | (Response & import("hono").TypedResponse<{
         [x: string]: import("hono/utils/types").JSONValue;
     }, 201, "json">)>;
     update(c: Context<DyrectedContext>): Promise<(Response & import("hono").TypedResponse<{
@@ -39,8 +69,47 @@ export declare class CollectionController {
     }, 500, "json">) | (Response & import("hono").TypedResponse<{
         message: string;
     }, 400, "json">) | (Response & import("hono").TypedResponse<{
+        id: string;
+        externalSubject: string;
+        email: string;
+        name?: string | undefined;
+        roles: string[];
+        siteAccess?: string[] | undefined;
+        status?: "active" | "pending" | undefined;
+    }, import("hono/utils/http-status").ContentfulStatusCode, "json">) | (Response & import("hono").TypedResponse<{
         message: string;
     }, 404, "json">)>;
+    transition(c: Context<DyrectedContext>): Promise<(Response & import("hono").TypedResponse<{
+        message: string;
+    }, 500, "json">) | (Response & import("hono").TypedResponse<{
+        message: string;
+    }, 404, "json">) | (Response & import("hono").TypedResponse<{
+        [x: string]: any;
+        id: string;
+    } | null, import("hono/utils/http-status").ContentfulStatusCode, "json">) | (Response & import("hono").TypedResponse<{
+        error: true;
+        message: string;
+    }, 400, "json">)>;
+    workflowHistory(c: Context<DyrectedContext>): Promise<(Response & import("hono").TypedResponse<{
+        docs: {
+            [x: string]: any;
+        }[];
+        total: number;
+        limit: number;
+        page: number;
+        totalPages: number;
+        hasNextPage: boolean;
+        hasPrevPage: boolean;
+    }, import("hono/utils/http-status").ContentfulStatusCode, "json">) | (Response & import("hono").TypedResponse<{
+        message: string;
+    }, 500, "json">) | (Response & import("hono").TypedResponse<{
+        message: string;
+    }, 404, "json">) | (Response & import("hono").TypedResponse<{
+        message: string;
+    }, 400, "json">) | (Response & import("hono").TypedResponse<{
+        error: true;
+        message: string;
+    }, 403, "json">)>;
     /**
      * POST /api/collections/:slug/:id/change-password
      *

package/dist/controllers/collection.controller.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"collection.controller.d.ts","sourceRoot":"","sources":["../../src/controllers/collection.controller.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACpC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAQjD,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,UAAU,CAAmB;gBAEzB,UAAU,EAAE,gBAAgB;IAIlC,IAAI,CAAC,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC;;;;;;;;;;;;;IA8FhC,OAAO,CAAC,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC;IAuCnC,MAAM,CAAC,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC;;;;;;;IAwElC,MAAM,CAAC,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC;;;;;;;IAgFlC,MAAM,CAAC,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC;;;;;;;;;IA+ExC;;;;;;;;;;OAUG;IACG,cAAc,CAAC,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC;;;;;;;;;;;;;;IA2E1C,MAAM,CAAC,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC;;;IAqDlC,UAAU,CAAC,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC;;;;;;gBA2BtB,MAAM;mBAAS,MAAM;;;;;IA0DrC,IAAI,CAAC,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC;;;CA0BvC"}
+{"version":3,"file":"collection.controller.d.ts","sourceRoot":"","sources":["../../src/controllers/collection.controller.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACpC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAqBjD,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,UAAU,CAAmB;gBAEzB,UAAU,EAAE,gBAAgB;IAIxC,OAAO,CAAC,oBAAoB;IAS5B,OAAO,CAAC,oBAAoB;IAQtB,IAAI,CAAC,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAgJhC,OAAO,CAAC,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC;IAqEnC,MAAM,CAAC,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC;;;;;;;;;;;;;;;;;IAiGlC,MAAM,CAAC,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC;;;;;;;;;IA2FlC,MAAM,CAAC,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC;;;;;;;;;;;;;;;;;IAmGlC,UAAU,CAAC,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC;;;;;;;;;;;IA4BtC,eAAe,CAAC,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC;;;;;;;;;;;;;;;;;;;;IAkCjD;;;;;;;;;;OAUG;IACG,cAAc,CAAC,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC;;;;;;;;;;;;;;IA2E1C,MAAM,CAAC,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC;;;IAkElC,UAAU,CAAC,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC;;;;;;gBA2BtB,MAAM;mBAAS,MAAM;;;;;IA0DrC,IAAI,CAAC,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC;;;CA0BvC"}