@dyrected/core 2.6.3 → 2.6.4

package/dist/__tests__/access.test.js

@@ -0,0 +1,137 @@
+import { describe, expect, it, vi } from "vitest";
+import { isAccessAllowed, resolveAccess } from "../auth/access.js";
+import { defineCollection, defineConfig } from "../index.js";
+import { createDyrectedApp } from "../app.js";
+import { InMemoryAdapter } from "./mocks.js";
+const req = {
+    query: {},
+    headers: {},
+};
+describe("access resolution", () => {
+    it("allows named policies registered on the top-level config", async () => {
+        const config = defineConfig({
+            collections: [],
+            globals: [],
+            accessPolicies: {
+                isAdmin: ({ user }) => user?.roles?.includes("admin") ?? false,
+            },
+        });
+        const allowed = await isAccessAllowed(config, { policy: "isAdmin" }, {
+            user: { sub: "1", collection: "users", roles: ["admin"] },
+            req,
+        });
+        expect(allowed).toBe(true);
+    });
+    it("fails closed for unknown named policies", async () => {
+        const config = defineConfig({
+            collections: [],
+            globals: [],
+        });
+        const allowed = await isAccessAllowed(config, { policy: "missing" }, {
+            user: { sub: "1", collection: "users" },
+            req,
+        });
+        expect(allowed).toBe(false);
+    });
+    it("fails closed when a named policy throws", async () => {
+        const config = defineConfig({
+            collections: [],
+            globals: [],
+            accessPolicies: {
+                broken: vi.fn(() => {
+                    throw new Error("boom");
+                }),
+            },
+        });
+        const allowed = await isAccessAllowed(config, { policy: "broken" }, {
+            user: { sub: "1", collection: "users" },
+            req,
+        });
+        expect(allowed).toBe(false);
+    });
+    it("preserves object results returned by named policies", async () => {
+        const config = defineConfig({
+            collections: [],
+            globals: [],
+            accessPolicies: {
+                ownDocsOnly: ({ user }) => ({ owner: { equals: user?.sub } }),
+            },
+        });
+        const result = await resolveAccess(config, { policy: "ownDocsOnly" }, {
+            user: { sub: "abc", collection: "users" },
+            req,
+        });
+        expect(result).toEqual({ owner: { equals: "abc" } });
+    });
+    it("preserves object results returned by Jexl access rules", async () => {
+        const config = defineConfig({
+            collections: [],
+            globals: [],
+        });
+        const result = await resolveAccess(config, "{ owner: { equals: user.sub } }", {
+            user: { sub: "abc", collection: "users" },
+            req,
+        });
+        expect(result).toEqual({ owner: { equals: "abc" } });
+    });
+    it("lets Jexl access rules inspect incoming data", async () => {
+        const config = defineConfig({
+            collections: [],
+            globals: [],
+        });
+        const allowed = await isAccessAllowed(config, "data.locked != false", {
+            user: { sub: "1", collection: "users" },
+            data: { locked: true },
+            req,
+        });
+        expect(allowed).toBe(true);
+    });
+});
+describe("self-hosted access runtime", () => {
+    it("executes direct function access rules for CRUD routes", async () => {
+        const db = new InMemoryAdapter();
+        const posts = defineCollection({
+            slug: "posts",
+            access: {
+                create: () => true,
+            },
+            fields: [{ name: "title", type: "text" }],
+        });
+        const app = await createDyrectedApp(defineConfig({
+            collections: [posts],
+            globals: [],
+            db,
+        }));
+        const res = await app.request("/api/collections/posts", {
+            method: "POST",
+            headers: { "content-type": "application/json" },
+            body: JSON.stringify({ title: "hello" }),
+        });
+        expect(res.status).toBe(201);
+    });
+    it("executes named policies for CRUD routes", async () => {
+        const db = new InMemoryAdapter();
+        const posts = defineCollection({
+            slug: "posts",
+            access: {
+                create: { policy: "allowCreate" },
+            },
+            fields: [{ name: "title", type: "text" }],
+        });
+        const app = await createDyrectedApp(defineConfig({
+            collections: [posts],
+            globals: [],
+            db,
+            accessPolicies: {
+                allowCreate: () => true,
+            },
+        }));
+        const res = await app.request("/api/collections/posts", {
+            method: "POST",
+            headers: { "content-type": "application/json" },
+            body: JSON.stringify({ title: "hello" }),
+        });
+        expect(res.status).toBe(201);
+    });
+});
+//# sourceMappingURL=access.test.js.map

package/dist/__tests__/access.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"access.test.js","sourceRoot":"","sources":["../../src/__tests__/access.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAE7C,MAAM,GAAG,GAAG;IACV,KAAK,EAAE,EAAE;IACT,OAAO,EAAE,EAAE;CACZ,CAAC;AAEF,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,MAAM,GAAG,YAAY,CAAC;YAC1B,WAAW,EAAE,EAAE;YACf,OAAO,EAAE,EAAE;YACX,cAAc,EAAE;gBACd,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK;aAC/D;SACF,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE;YACnE,IAAI,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE;YACzD,GAAG;SACJ,CAAC,CAAC;QAEH,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;QACvD,MAAM,MAAM,GAAG,YAAY,CAAC;YAC1B,WAAW,EAAE,EAAE;YACf,OAAO,EAAE,EAAE;SACZ,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE;YACnE,IAAI,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE;YACvC,GAAG;SACJ,CAAC,CAAC;QAEH,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;QACvD,MAAM,MAAM,GAAG,YAAY,CAAC;YAC1B,WAAW,EAAE,EAAE;YACf,OAAO,EAAE,EAAE;YACX,cAAc,EAAE;gBACd,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE;oBACjB,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC;gBAC1B,CAAC,CAAC;aACH;SACF,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE;YAClE,IAAI,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE;YACvC,GAAG;SACJ,CAAC,CAAC;QAEH,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,MAAM,GAAG,YAAY,CAAC;YAC1B,WAAW,EAAE,EAAE;YACf,OAAO,EAAE,EAAE;YACX,cAAc,EAAE;gBACd,WAAW,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC;aAC9D;SACF,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE;YACpE,IAAI,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE;YACzC,GAAG;SACJ,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,MAAM,GAAG,YAAY,CAAC;YAC1B,WAAW,EAAE,EAAE;YACf,OAAO,EAAE,EAAE;SACZ,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,iCAAiC,EAAE;YAC5E,IAAI,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE;YACzC,GAAG;SACJ,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC5D,MAAM,MAAM,GAAG,YAAY,CAAC;YAC1B,WAAW,EAAE,EAAE;YACf,OAAO,EAAE,EAAE;SACZ,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,sBAAsB,EAAE;YACpE,IAAI,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE;YACvC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;YACtB,GAAG;SACJ,CAAC,CAAC;QAEH,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,4BAA4B,EAAE,GAAG,EAAE;IAC1C,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,EAAE,GAAG,IAAI,eAAe,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,gBAAgB,CAAC;YAC7B,IAAI,EAAE,OAAO;YACb,MAAM,EAAE;gBACN,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI;aACnB;YACD,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;SAC1C,CAAC,CAAC;QAEH,MAAM,GAAG,GAAG,MAAM,iBAAiB,CACjC,YAAY,CAAC;YACX,WAAW,EAAE,CAAC,KAAK,CAAC;YACpB,OAAO,EAAE,EAAE;YACX,EAAE;SACH,CAAC,CACH,CAAC;QAEF,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,wBAAwB,EAAE;YACtD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;SACzC,CAAC,CAAC;QAEH,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;QACvD,MAAM,EAAE,GAAG,IAAI,eAAe,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,gBAAgB,CAAC;YAC7B,IAAI,EAAE,OAAO;YACb,MAAM,EAAE;gBACN,MAAM,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE;aAClC;YACD,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;SAC1C,CAAC,CAAC;QAEH,MAAM,GAAG,GAAG,MAAM,iBAAiB,CACjC,YAAY,CAAC;YACX,WAAW,EAAE,CAAC,KAAK,CAAC;YACpB,OAAO,EAAE,EAAE;YACX,EAAE;YACF,cAAc,EAAE;gBACd,WAAW,EAAE,GAAG,EAAE,CAAC,IAAI;aACxB;SACF,CAAC,CACH,CAAC;QAEF,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,wBAAwB,EAAE;YACtD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;SACzC,CAAC,CAAC;QAEH,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/admin-auth.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=admin-auth.test.d.ts.map

package/dist/__tests__/admin-auth.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-auth.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/admin-auth.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/admin-auth.test.js

@@ -0,0 +1,440 @@
+import { describe, expect, it, beforeEach } from "vitest";
+import { SignJWT } from "jose";
+import { TextEncoder } from "node:util";
+import { Hono } from "hono";
+import { createDyrectedApp } from "../app.js";
+import { defineCollection, defineConfig } from "../index.js";
+import { InMemoryAdapter } from "./mocks.js";
+const providerSecret = new TextEncoder().encode("provider-secret");
+async function signProviderToken(payload) {
+    return new SignJWT(payload)
+        .setProtectedHeader({ alg: "HS256" })
+        .setIssuedAt()
+        .setExpirationTime("1h")
+        .sign(providerSecret);
+}
+describe("external admin auth", () => {
+    beforeEach(() => {
+        process.env.DYRECTED_JWT_SECRET = "dyrected-test-secret";
+    });
+    it("exposes sanitized admin auth config in schemas", async () => {
+        const app = await createDyrectedApp(defineConfig({
+            collections: [
+                defineCollection({
+                    slug: "__admins",
+                    auth: true,
+                    fields: [{ name: "name", type: "text", label: "Name" }],
+                }),
+            ],
+            globals: [],
+            db: new InMemoryAdapter(),
+            adminAuth: {
+                mode: "external",
+                providers: [
+                    {
+                        id: "partner",
+                        type: "custom",
+                        displayName: "Partner SSO",
+                        secret: "provider-secret",
+                    },
+                ],
+            },
+        }));
+        const res = await app.request("/api/schemas");
+        const data = await res.json();
+        expect(res.status).toBe(200);
+        expect(data.adminAuth).toEqual({
+            mode: "external",
+            collectionSlug: "__admins",
+            provisioningMode: undefined,
+            providers: [
+                {
+                    id: "partner",
+                    type: "custom",
+                    displayName: "Partner SSO",
+                    autoRedirect: undefined,
+                },
+            ],
+        });
+    });
+    it("supports JIT external provisioning for admin users", async () => {
+        const db = new InMemoryAdapter();
+        const app = await createDyrectedApp(defineConfig({
+            collections: [
+                defineCollection({
+                    slug: "__admins",
+                    auth: true,
+                    fields: [{ name: "name", type: "text", label: "Name" }],
+                }),
+            ],
+            globals: [],
+            db,
+            adminAuth: {
+                mode: "external",
+                providers: [
+                    {
+                        id: "partner",
+                        type: "custom",
+                        displayName: "Partner SSO",
+                        secret: "provider-secret",
+                    },
+                ],
+                resolveAccess: ({ siteId }) => ({
+                    allowed: siteId === "site-a",
+                    roles: ["admin"],
+                }),
+            },
+        }));
+        const providerToken = await signProviderToken({
+            sub: "acct_123",
+            email: "owner@example.com",
+            name: "Owner",
+        });
+        const loginRes = await app.request("/api/admin/auth/partner/exchange", {
+            method: "POST",
+            headers: {
+                "content-type": "application/json",
+                "x-site-id": "site-a",
+            },
+            body: JSON.stringify({ token: providerToken }),
+        });
+        expect(loginRes.status).toBe(200);
+        const loginData = await loginRes.json();
+        expect(loginData.collectionSlug).toBe("__admins");
+        expect(loginData.providerId).toBe("partner");
+        const meRes = await app.request("/api/collections/__admins/me", {
+            headers: {
+                authorization: `Bearer ${loginData.token}`,
+            },
+        });
+        expect(meRes.status).toBe(200);
+        const me = await meRes.json();
+        expect(me.email).toBe("owner@example.com");
+        expect(me.authProvider).toBe("partner");
+        expect(me.externalSubject).toBe("acct_123");
+        const allAdmins = await db.find({ collection: "__admins", limit: 10 });
+        expect(allAdmins.total).toBe(1);
+        expect(allAdmins.docs[0].password).toBeTruthy();
+    });
+    it("starts a provider from dynamic site admin auth config", async () => {
+        const app = await createDyrectedApp(defineConfig({
+            collections: [],
+            globals: [],
+            db: new InMemoryAdapter(),
+            onSchemaFetch: async (siteId) => ({
+                collections: [
+                    defineCollection({
+                        slug: "__admins",
+                        auth: true,
+                        siteId,
+                        fields: [{ name: "name", type: "text", label: "Name" }],
+                    }),
+                ],
+                adminAuth: {
+                    mode: "external",
+                    providers: [
+                        {
+                            id: "cloud",
+                            type: "cloud",
+                            displayName: "Dyrected Cloud",
+                            startUrl: "https://dashboard.test/cloud/auth/admin/start",
+                            secret: "provider-secret",
+                        },
+                    ],
+                },
+            }),
+        }));
+        const host = new Hono();
+        host.use("/sites/:siteId/*", async (c, next) => {
+            c.set("siteId", c.req.param("siteId"));
+            await next();
+        });
+        host.route("/sites/:siteId", app);
+        const res = await host.request("/sites/site-a/api/admin/auth/cloud/start?returnTo=http%3A%2F%2Flocalhost%3A3000%2Fadmin");
+        expect(res.status).toBe(302);
+        const location = new URL(res.headers.get("location"));
+        expect(location.origin).toBe("https://dashboard.test");
+        expect(location.pathname).toBe("/cloud/auth/admin/start");
+        expect(location.searchParams.get("siteId")).toBe("site-a");
+        expect(location.searchParams.get("provider")).toBe("cloud");
+        expect(location.searchParams.get("returnTo")).toBe("http://localhost:3000/admin");
+    });
+    it("starts a provider with a relative start URL", async () => {
+        const app = await createDyrectedApp(defineConfig({
+            collections: [],
+            globals: [],
+            db: new InMemoryAdapter(),
+            adminAuth: {
+                mode: "external",
+                providers: [
+                    {
+                        id: "cloud",
+                        type: "cloud",
+                        displayName: "Dyrected Cloud",
+                        startUrl: "/cloud/auth/admin/start",
+                        secret: "provider-secret",
+                    },
+                ],
+            },
+        }));
+        const res = await app.request("https://dashboard.test/api/admin/auth/cloud/start?returnTo=http%3A%2F%2Flocalhost%3A3000%2Fadmin");
+        expect(res.status).toBe(302);
+        const location = new URL(res.headers.get("location"));
+        expect(location.origin).toBe("https://dashboard.test");
+        expect(location.pathname).toBe("/cloud/auth/admin/start");
+        expect(location.searchParams.get("provider")).toBe("cloud");
+        expect(location.searchParams.get("returnTo")).toBe("http://localhost:3000/admin");
+    });
+    it("returns a configuration error for unresolved provider start URLs", async () => {
+        const app = await createDyrectedApp(defineConfig({
+            collections: [],
+            globals: [],
+            db: new InMemoryAdapter(),
+            adminAuth: {
+                mode: "external",
+                providers: [
+                    {
+                        id: "cloud",
+                        type: "cloud",
+                        displayName: "Dyrected Cloud",
+                        startUrl: "undefined/cloud/auth/admin/start",
+                        secret: "provider-secret",
+                    },
+                ],
+            },
+        }));
+        const res = await app.request("/api/admin/auth/cloud/start");
+        expect(res.status).toBe(500);
+        expect(await res.json()).toEqual({
+            error: true,
+            message: 'Admin auth provider "cloud" has an invalid start URL.',
+        });
+    });
+    it("exchanges a token against dynamic site admin auth config", async () => {
+        const db = new InMemoryAdapter();
+        const app = await createDyrectedApp(defineConfig({
+            collections: [],
+            globals: [],
+            db,
+            onSchemaFetch: async (siteId) => ({
+                collections: [
+                    defineCollection({
+                        slug: "__admins",
+                        auth: true,
+                        siteId,
+                        fields: [{ name: "name", type: "text", label: "Name" }],
+                    }),
+                ],
+                adminAuth: {
+                    mode: "external",
+                    providers: [
+                        {
+                            id: "cloud",
+                            type: "cloud",
+                            displayName: "Dyrected Cloud",
+                            secret: "provider-secret",
+                        },
+                    ],
+                    resolveAccess: ({ siteId: resolvedSiteId }) => ({
+                        allowed: resolvedSiteId === "site-a",
+                        roles: ["admin"],
+                    }),
+                },
+            }),
+        }));
+        const providerToken = await signProviderToken({
+            sub: "acct_123",
+            email: "owner@example.com",
+            name: "Owner",
+        });
+        const loginRes = await app.request("/api/admin/auth/cloud/exchange", {
+            method: "POST",
+            headers: {
+                "content-type": "application/json",
+                "x-site-id": "site-a",
+            },
+            body: JSON.stringify({ token: providerToken }),
+        });
+        expect(loginRes.status).toBe(200);
+        const loginData = await loginRes.json();
+        expect(loginData.collectionSlug).toBe("__admins");
+        expect(loginData.providerId).toBe("cloud");
+        const allAdmins = await db.find({ collection: "__admins", limit: 10 });
+        expect(allAdmins.total).toBe(1);
+        expect(allAdmins.docs[0].email).toBe("owner@example.com");
+        expect(allAdmins.docs[0].authProvider).toBe("cloud");
+    });
+    it("prefers __admins over a stale configured adminAuth collection slug", async () => {
+        const db = new InMemoryAdapter();
+        const app = await createDyrectedApp(defineConfig({
+            collections: [],
+            globals: [],
+            db,
+            onSchemaFetch: async (siteId) => ({
+                collections: [
+                    defineCollection({
+                        slug: "__admins",
+                        auth: true,
+                        siteId,
+                        fields: [{ name: "name", type: "text", label: "Name" }],
+                    }),
+                    defineCollection({
+                        slug: "accounts",
+                        auth: true,
+                        siteId,
+                        fields: [{ name: "name", type: "text", label: "Name" }],
+                    }),
+                ],
+                adminAuth: {
+                    mode: "external",
+                    collectionSlug: "accounts",
+                    providers: [
+                        {
+                            id: "cloud",
+                            type: "cloud",
+                            displayName: "Dyrected Cloud",
+                            secret: "provider-secret",
+                        },
+                    ],
+                    resolveAccess: ({ siteId: resolvedSiteId }) => ({
+                        allowed: resolvedSiteId === "site-a",
+                        roles: ["admin"],
+                    }),
+                },
+            }),
+        }));
+        const schemasRes = await app.request("/api/schemas", {
+            headers: {
+                "x-site-id": "site-a",
+            },
+        });
+        const schemasData = await schemasRes.json();
+        expect(schemasRes.status).toBe(200);
+        expect(schemasData.adminAuth).toMatchObject({
+            mode: "external",
+            collectionSlug: "__admins",
+        });
+        const providerToken = await signProviderToken({
+            sub: "acct_123",
+            email: "owner@example.com",
+            name: "Owner",
+        });
+        const loginRes = await app.request("/api/admin/auth/cloud/exchange", {
+            method: "POST",
+            headers: {
+                "content-type": "application/json",
+                "x-site-id": "site-a",
+            },
+            body: JSON.stringify({ token: providerToken }),
+        });
+        expect(loginRes.status).toBe(200);
+        const loginData = await loginRes.json();
+        expect(loginData.collectionSlug).toBe("__admins");
+        const allAdmins = await db.find({ collection: "__admins", limit: 10 });
+        expect(allAdmins.total).toBe(1);
+        expect(allAdmins.docs[0].email).toBe("owner@example.com");
+    });
+    it("passes a normalized hook request context to delegated provider member handlers", async () => {
+        const app = await createDyrectedApp(defineConfig({
+            collections: [
+                defineCollection({
+                    slug: "__admins",
+                    auth: true,
+                    fields: [{ name: "name", type: "text", label: "Name" }],
+                }),
+            ],
+            globals: [],
+            db: new InMemoryAdapter(),
+            adminAuth: {
+                mode: "external",
+                collectionSlug: "__admins",
+                providers: [
+                    {
+                        id: "cloud",
+                        type: "cloud",
+                        displayName: "Dyrected Cloud",
+                        secret: "provider-secret",
+                        members: {
+                            list: async ({ req, limit, page, sort, where }) => {
+                                expect(req.headers["x-site-id"]).toBe("site-a");
+                                expect(req.query.limit).toBe("2");
+                                expect(req.query.page).toBe("3");
+                                expect(req.query.sort).toBe("-email");
+                                expect(req.query.where).toBe(JSON.stringify({ email: { equals: "owner@example.com" } }));
+                                expect(req.raw?.headers.get("x-site-id")).toBe("site-a");
+                                expect(limit).toBe(2);
+                                expect(page).toBe(3);
+                                expect(sort).toBe("-email");
+                                expect(where).toEqual({ email: { equals: "owner@example.com" } });
+                                return {
+                                    docs: [{ id: "acct_123", email: "owner@example.com", roles: ["admin"] }],
+                                    totalDocs: 1,
+                                    limit: limit ?? 10,
+                                    page: page ?? 1,
+                                    totalPages: 1,
+                                    hasNextPage: false,
+                                    hasPrevPage: false,
+                                };
+                            },
+                        },
+                    },
+                ],
+            },
+        }));
+        const res = await app.request(`/api/collections/__admins?limit=2&page=3&sort=-email&where=${encodeURIComponent(JSON.stringify({ email: { equals: "owner@example.com" } }))}`, {
+            headers: {
+                "x-site-id": "site-a",
+            },
+        });
+        expect(res.status).toBe(200);
+        const data = await res.json();
+        expect(data.docs).toHaveLength(1);
+        expect(data.docs[0]).toMatchObject({
+            id: "acct_123",
+            email: "owner@example.com",
+            externalSubject: "acct_123",
+        });
+    });
+    it("rejects unknown external users when provisioning is preprovisioned-only", async () => {
+        const app = await createDyrectedApp(defineConfig({
+            collections: [
+                defineCollection({
+                    slug: "__admins",
+                    auth: true,
+                    fields: [{ name: "name", type: "text", label: "Name" }],
+                }),
+            ],
+            globals: [],
+            db: new InMemoryAdapter(),
+            adminAuth: {
+                mode: "external",
+                provisioningMode: "preprovisioned_only",
+                providers: [
+                    {
+                        id: "partner",
+                        type: "custom",
+                        displayName: "Partner SSO",
+                        secret: "provider-secret",
+                    },
+                ],
+            },
+        }));
+        const providerToken = await signProviderToken({
+            sub: "acct_123",
+            email: "owner@example.com",
+        });
+        const loginRes = await app.request("/api/admin/auth/partner/exchange", {
+            method: "POST",
+            headers: {
+                "content-type": "application/json",
+            },
+            body: JSON.stringify({ token: providerToken }),
+        });
+        expect(loginRes.status).toBe(401);
+        expect(await loginRes.json()).toMatchObject({
+            error: true,
+            message: "This account has not been provisioned for admin access.",
+        });
+    });
+});
+//# sourceMappingURL=admin-auth.test.js.map

package/dist/__tests__/admin-auth.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-auth.test.js","sourceRoot":"","sources":["../../src/__tests__/admin-auth.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAC1D,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAC/B,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAE7C,MAAM,cAAc,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;AAEnE,KAAK,UAAU,iBAAiB,CAAC,OAAgC;IAC/D,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC;SACxB,kBAAkB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;SACpC,WAAW,EAAE;SACb,iBAAiB,CAAC,IAAI,CAAC;SACvB,IAAI,CAAC,cAAc,CAAC,CAAC;AAC1B,CAAC;AAED,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,UAAU,CAAC,GAAG,EAAE;QACd,OAAO,CAAC,GAAG,CAAC,mBAAmB,GAAG,sBAAsB,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,GAAG,GAAG,MAAM,iBAAiB,CACjC,YAAY,CAAC;YACX,WAAW,EAAE;gBACX,gBAAgB,CAAC;oBACf,IAAI,EAAE,UAAU;oBAChB,IAAI,EAAE,IAAI;oBACV,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;iBACxD,CAAC;aACH;YACD,OAAO,EAAE,EAAE;YACX,EAAE,EAAE,IAAI,eAAe,EAAE;YACzB,SAAS,EAAE;gBACT,IAAI,EAAE,UAAU;gBAChB,SAAS,EAAE;oBACT;wBACE,EAAE,EAAE,SAAS;wBACb,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,aAAa;wBAC1B,MAAM,EAAE,iBAAiB;qBAC1B;iBACF;aACF;SACF,CAAC,CACH,CAAC;QAEF,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QAC9C,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAE9B,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC;YAC7B,IAAI,EAAE,UAAU;YAChB,cAAc,EAAE,UAAU;YAC1B,gBAAgB,EAAE,SAAS;YAC3B,SAAS,EAAE;gBACT;oBACE,EAAE,EAAE,SAAS;oBACb,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,aAAa;oBAC1B,YAAY,EAAE,SAAS;iBACxB;aACF;SACF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QAClE,MAAM,EAAE,GAAG,IAAI,eAAe,EAAE,CAAC;QACjC,MAAM,GAAG,GAAG,MAAM,iBAAiB,CACjC,YAAY,CAAC;YACX,WAAW,EAAE;gBACX,gBAAgB,CAAC;oBACf,IAAI,EAAE,UAAU;oBAChB,IAAI,EAAE,IAAI;oBACV,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;iBACxD,CAAC;aACH;YACD,OAAO,EAAE,EAAE;YACX,EAAE;YACF,SAAS,EAAE;gBACT,IAAI,EAAE,UAAU;gBAChB,SAAS,EAAE;oBACT;wBACE,EAAE,EAAE,SAAS;wBACb,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,aAAa;wBAC1B,MAAM,EAAE,iBAAiB;qBAC1B;iBACF;gBACD,aAAa,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;oBAC9B,OAAO,EAAE,MAAM,KAAK,QAAQ;oBAC5B,KAAK,EAAE,CAAC,OAAO,CAAC;iBACjB,CAAC;aACH;SACF,CAAC,CACH,CAAC;QAEF,MAAM,aAAa,GAAG,MAAM,iBAAiB,CAAC;YAC5C,GAAG,EAAE,UAAU;YACf,KAAK,EAAE,mBAAmB;YAC1B,IAAI,EAAE,OAAO;SACd,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,kCAAkC,EAAE;YACrE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,WAAW,EAAE,QAAQ;aACtB;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;SAC/C,CAAC,CAAC;QAEH,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACxC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAClD,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAE7C,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,8BAA8B,EAAE;YAC9D,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,SAAS,CAAC,KAAK,EAAE;aAC3C;SACF,CAAC,CAAC;QAEH,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/B,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAC3C,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxC,MAAM,CAAC,EAAE,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAE5C,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;QACvE,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,UAAU,EAAE,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,GAAG,GAAG,MAAM,iBAAiB,CACjC,YAAY,CAAC;YACX,WAAW,EAAE,EAAE;YACf,OAAO,EAAE,EAAE;YACX,EAAE,EAAE,IAAI,eAAe,EAAE;YACzB,aAAa,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;gBAChC,WAAW,EAAE;oBACX,gBAAgB,CAAC;wBACf,IAAI,EAAE,UAAU;wBAChB,IAAI,EAAE,IAAI;wBACV,MAAM;wBACN,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;qBACxD,CAAC;iBACH;gBACD,SAAS,EAAE;oBACT,IAAI,EAAE,UAAU;oBAChB,SAAS,EAAE;wBACT;4BACE,EAAE,EAAE,OAAO;4BACX,IAAI,EAAE,OAAO;4BACb,WAAW,EAAE,gBAAgB;4BAC7B,QAAQ,EAAE,+CAA+C;4BACzD,MAAM,EAAE,iBAAiB;yBAC1B;qBACF;iBACF;aACF,CAAC;SACH,CAAC,CACH,CAAC;QAEF,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QACxB,IAAI,CAAC,GAAG,CAAC,kBAAkB,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;YAC7C,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;YACvC,MAAM,IAAI,EAAE,CAAC;QACf,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC;QAElC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAC5B,yFAAyF,CAC1F,CAAC;QAEF,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAE,CAAC,CAAC;QACvD,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QACvD,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QAC1D,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC3D,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC5D,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;IACpF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC3D,MAAM,GAAG,GAAG,MAAM,iBAAiB,CACjC,YAAY,CAAC;YACX,WAAW,EAAE,EAAE;YACf,OAAO,EAAE,EAAE;YACX,EAAE,EAAE,IAAI,eAAe,EAAE;YACzB,SAAS,EAAE;gBACT,IAAI,EAAE,UAAU;gBAChB,SAAS,EAAE;oBACT;wBACE,EAAE,EAAE,OAAO;wBACX,IAAI,EAAE,OAAO;wBACb,WAAW,EAAE,gBAAgB;wBAC7B,QAAQ,EAAE,yBAAyB;wBACnC,MAAM,EAAE,iBAAiB;qBAC1B;iBACF;aACF;SACF,CAAC,CACH,CAAC;QAEF,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,OAAO,CAC3B,kGAAkG,CACnG,CAAC;QAEF,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAE,CAAC,CAAC;QACvD,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QACvD,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QAC1D,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC5D,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;IACpF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;QAChF,MAAM,GAAG,GAAG,MAAM,iBAAiB,CACjC,YAAY,CAAC;YACX,WAAW,EAAE,EAAE;YACf,OAAO,EAAE,EAAE;YACX,EAAE,EAAE,IAAI,eAAe,EAAE;YACzB,SAAS,EAAE;gBACT,IAAI,EAAE,UAAU;gBAChB,SAAS,EAAE;oBACT;wBACE,EAAE,EAAE,OAAO;wBACX,IAAI,EAAE,OAAO;wBACb,WAAW,EAAE,gBAAgB;wBAC7B,QAAQ,EAAE,kCAAkC;wBAC5C,MAAM,EAAE,iBAAiB;qBAC1B;iBACF;aACF;SACF,CAAC,CACH,CAAC;QAEF,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC;QAE7D,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC;YAC/B,KAAK,EAAE,IAAI;YACX,OAAO,EAAE,uDAAuD;SACjE,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,EAAE,GAAG,IAAI,eAAe,EAAE,CAAC;QACjC,MAAM,GAAG,GAAG,MAAM,iBAAiB,CACjC,YAAY,CAAC;YACX,WAAW,EAAE,EAAE;YACf,OAAO,EAAE,EAAE;YACX,EAAE;YACF,aAAa,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;gBAChC,WAAW,EAAE;oBACX,gBAAgB,CAAC;wBACf,IAAI,EAAE,UAAU;wBAChB,IAAI,EAAE,IAAI;wBACV,MAAM;wBACN,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;qBACxD,CAAC;iBACH;gBACD,SAAS,EAAE;oBACT,IAAI,EAAE,UAAU;oBAChB,SAAS,EAAE;wBACT;4BACE,EAAE,EAAE,OAAO;4BACX,IAAI,EAAE,OAAO;4BACb,WAAW,EAAE,gBAAgB;4BAC7B,MAAM,EAAE,iBAAiB;yBAC1B;qBACF;oBACD,aAAa,EAAE,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC,CAAC;wBAC9C,OAAO,EAAE,cAAc,KAAK,QAAQ;wBACpC,KAAK,EAAE,CAAC,OAAO,CAAC;qBACjB,CAAC;iBACH;aACF,CAAC;SACH,CAAC,CACH,CAAC;QAEF,MAAM,aAAa,GAAG,MAAM,iBAAiB,CAAC;YAC5C,GAAG,EAAE,UAAU;YACf,KAAK,EAAE,mBAAmB;YAC1B,IAAI,EAAE,OAAO;SACd,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,gCAAgC,EAAE;YACnE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,WAAW,EAAE,QAAQ;aACtB;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;SAC/C,CAAC,CAAC;QAEH,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACxC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAClD,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAE3C,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;QACvE,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAC1D,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;QAClF,MAAM,EAAE,GAAG,IAAI,eAAe,EAAE,CAAC;QACjC,MAAM,GAAG,GAAG,MAAM,iBAAiB,CACjC,YAAY,CAAC;YACX,WAAW,EAAE,EAAE;YACf,OAAO,EAAE,EAAE;YACX,EAAE;YACF,aAAa,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;gBAChC,WAAW,EAAE;oBACX,gBAAgB,CAAC;wBACf,IAAI,EAAE,UAAU;wBAChB,IAAI,EAAE,IAAI;wBACV,MAAM;wBACN,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;qBACxD,CAAC;oBACF,gBAAgB,CAAC;wBACf,IAAI,EAAE,UAAU;wBAChB,IAAI,EAAE,IAAI;wBACV,MAAM;wBACN,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;qBACxD,CAAC;iBACH;gBACD,SAAS,EAAE;oBACT,IAAI,EAAE,UAAU;oBAChB,cAAc,EAAE,UAAU;oBAC1B,SAAS,EAAE;wBACT;4BACE,EAAE,EAAE,OAAO;4BACX,IAAI,EAAE,OAAO;4BACb,WAAW,EAAE,gBAAgB;4BAC7B,MAAM,EAAE,iBAAiB;yBAC1B;qBACF;oBACD,aAAa,EAAE,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC,CAAC;wBAC9C,OAAO,EAAE,cAAc,KAAK,QAAQ;wBACpC,KAAK,EAAE,CAAC,OAAO,CAAC;qBACjB,CAAC;iBACH;aACF,CAAC;SACH,CAAC,CACH,CAAC;QAEF,MAAM,UAAU,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,cAAc,EAAE;YACnD,OAAO,EAAE;gBACP,WAAW,EAAE,QAAQ;aACtB;SACF,CAAC,CAAC;QACH,MAAM,WAAW,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,CAAC;QAE5C,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACpC,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,aAAa,CAAC;YAC1C,IAAI,EAAE,UAAU;YAChB,cAAc,EAAE,UAAU;SAC3B,CAAC,CAAC;QAEH,MAAM,aAAa,GAAG,MAAM,iBAAiB,CAAC;YAC5C,GAAG,EAAE,UAAU;YACf,KAAK,EAAE,mBAAmB;YAC1B,IAAI,EAAE,OAAO;SACd,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,gCAAgC,EAAE;YACnE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,WAAW,EAAE,QAAQ;aACtB;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;SAC/C,CAAC,CAAC;QAEH,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACxC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAElD,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;QACvE,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gFAAgF,EAAE,KAAK,IAAI,EAAE;QAC9F,MAAM,GAAG,GAAG,MAAM,iBAAiB,CACjC,YAAY,CAAC;YACX,WAAW,EAAE;gBACX,gBAAgB,CAAC;oBACf,IAAI,EAAE,UAAU;oBAChB,IAAI,EAAE,IAAI;oBACV,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;iBACxD,CAAC;aACH;YACD,OAAO,EAAE,EAAE;YACX,EAAE,EAAE,IAAI,eAAe,EAAE;YACzB,SAAS,EAAE;gBACT,IAAI,EAAE,UAAU;gBAChB,cAAc,EAAE,UAAU;gBAC1B,SAAS,EAAE;oBACT;wBACE,EAAE,EAAE,OAAO;wBACX,IAAI,EAAE,OAAO;wBACb,WAAW,EAAE,gBAAgB;wBAC7B,MAAM,EAAE,iBAAiB;wBACzB,OAAO,EAAE;4BACP,IAAI,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE;gCAChD,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gCAChD,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gCAClC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gCACjC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gCACtC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,mBAAmB,EAAE,EAAE,CAAC,CAAC,CAAC;gCACzF,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gCACzD,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gCACtB,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gCACrB,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gCAC5B,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,mBAAmB,EAAE,EAAE,CAAC,CAAC;gCAElE,OAAO;oCACL,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,mBAAmB,EAAE,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;oCACxE,SAAS,EAAE,CAAC;oCACZ,KAAK,EAAE,KAAK,IAAI,EAAE;oCAClB,IAAI,EAAE,IAAI,IAAI,CAAC;oCACf,UAAU,EAAE,CAAC;oCACb,WAAW,EAAE,KAAK;oCAClB,WAAW,EAAE,KAAK;iCACnB,CAAC;4BACJ,CAAC;yBACF;qBACF;iBACF;aACF;SACF,CAAC,CACH,CAAC;QAEF,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,OAAO,CAC3B,8DAA8D,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,mBAAmB,EAAE,EAAE,CAAC,CAAC,EAAE,EAC9I;YACE,OAAO,EAAE;gBACP,WAAW,EAAE,QAAQ;aACtB;SACF,CACF,CAAC;QAEF,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAClC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;YACjC,EAAE,EAAE,UAAU;YACd,KAAK,EAAE,mBAAmB;YAC1B,eAAe,EAAE,UAAU;SAC5B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;QACvF,MAAM,GAAG,GAAG,MAAM,iBAAiB,CACjC,YAAY,CAAC;YACX,WAAW,EAAE;gBACX,gBAAgB,CAAC;oBACf,IAAI,EAAE,UAAU;oBAChB,IAAI,EAAE,IAAI;oBACV,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;iBACxD,CAAC;aACH;YACD,OAAO,EAAE,EAAE;YACX,EAAE,EAAE,IAAI,eAAe,EAAE;YACzB,SAAS,EAAE;gBACT,IAAI,EAAE,UAAU;gBAChB,gBAAgB,EAAE,qBAAqB;gBACvC,SAAS,EAAE;oBACT;wBACE,EAAE,EAAE,SAAS;wBACb,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,aAAa;wBAC1B,MAAM,EAAE,iBAAiB;qBAC1B;iBACF;aACF;SACF,CAAC,CACH,CAAC;QAEF,MAAM,aAAa,GAAG,MAAM,iBAAiB,CAAC;YAC5C,GAAG,EAAE,UAAU;YACf,KAAK,EAAE,mBAAmB;SAC3B,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,kCAAkC,EAAE;YACrE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;SAC/C,CAAC,CAAC;QAEH,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,aAAa,CAAC;YAC1C,KAAK,EAAE,IAAI;YACX,OAAO,EAAE,yDAAyD;SACnE,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/app.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=app.test.d.ts.map

package/dist/__tests__/app.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/app.test.ts"],"names":[],"mappings":""}