@eaera-com/cms-sdk 0.1.77 → 0.1.79
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/chunks/{_shared-DZlTUzoa.js → _shared-Dyz_Ya9z.js} +0 -1
- package/dist/chunks/{authz.constant-BAarvacV.js → authz.constant-BqX8Nzw6.js} +1 -1
- package/dist/common/constants/authz.constant.d.ts +11 -6
- package/dist/common/constants/authz.constant.d.ts.map +1 -1
- package/dist/common/constants/people.constant.d.ts +8 -0
- package/dist/common/constants/people.constant.d.ts.map +1 -1
- package/dist/common/utils/permission.d.ts +9 -0
- package/dist/common/utils/permission.d.ts.map +1 -0
- package/dist/core/createCmsSDK.d.ts.map +1 -1
- package/dist/core/sdk.type.d.ts +0 -6
- package/dist/core/sdk.type.d.ts.map +1 -1
- package/dist/index.d.ts +1 -1
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +67 -63
- package/dist/nuxt.d.ts +0 -6
- package/dist/nuxt.d.ts.map +1 -1
- package/dist/runtime/plugin.js +2 -8
- package/dist/server/auth/cbs-callback.post.js +1 -1
- package/dist/server/auth/cbs-start.post.js +1 -1
- package/dist/server/auth/idp-callback.get.js +1 -1
- package/dist/server/auth/idp-link-callback.get.js +1 -1
- package/dist/server/auth/idp-link-start.get.js +1 -1
- package/dist/server/auth/idp-link.post.js +1 -1
- package/dist/server/auth/idp-login.get.js +1 -1
- package/dist/server/auth/idp-me.get.js +1 -1
- package/dist/server/auth/idp-unlink.delete.js +1 -1
- package/dist/server/auth/login.post.js +1 -1
- package/dist/server/auth/logout.post.js +1 -1
- package/dist/server/auth/refresh.post.js +1 -1
- package/dist/server/authz/portal-access.get.js +5 -13
- package/dist/services/authz/authz.type.d.ts +5 -6
- package/dist/services/authz/authz.type.d.ts.map +1 -1
- package/dist/services/authz/index.d.ts +9 -10
- package/dist/services/authz/index.d.ts.map +1 -1
- package/dist/services/people/identity/actions.d.ts +66 -0
- package/dist/services/people/identity/actions.d.ts.map +1 -1
- package/dist/services/people/identity/ct.types.d.ts +51 -1
- package/dist/services/people/identity/ct.types.d.ts.map +1 -1
- package/dist/services/people/identity/index.d.ts +3 -3
- package/dist/services/people/identity/index.d.ts.map +1 -1
- package/dist/services/people/identity/projections.d.ts +17 -0
- package/dist/services/people/identity/projections.d.ts.map +1 -1
- package/dist/services/people/index.d.ts +3 -1
- package/dist/services/people/index.d.ts.map +1 -1
- package/dist/stores/authz.d.ts +18 -32
- package/dist/stores/authz.d.ts.map +1 -1
- package/dist/stores/content.d.ts +1 -1
- package/dist/stores/llm-providers.d.ts +1 -1
- package/dist/stores/llm.d.ts +1 -1
- package/dist/stores/people.d.ts.map +1 -1
- package/dist/stores/rules.d.ts +1 -1
- package/package.json +1 -1
|
@@ -2,7 +2,7 @@ import { defineEventHandler, createError, getQuery, parseCookies } from 'h3';
|
|
|
2
2
|
import { $fetch } from 'ofetch';
|
|
3
3
|
import { a as AUTH_ENDPOINT } from '../../chunks/auth.constant-CnGo0q42.js';
|
|
4
4
|
import { b as HTTP_HEADER } from '../../chunks/http.constant-BzH5tJTG.js';
|
|
5
|
-
import { r as readSdkConfig } from '../../chunks/_shared-
|
|
5
|
+
import { r as readSdkConfig } from '../../chunks/_shared-Dyz_Ya9z.js';
|
|
6
6
|
import { T as TOKEN_STORAGE_KEY } from '../../chunks/storage.constant-CVWam5ls.js';
|
|
7
7
|
|
|
8
8
|
const idpLinkStart_get = defineEventHandler(async (event) => {
|
|
@@ -2,7 +2,7 @@ import { defineEventHandler, createError, readBody, parseCookies } from 'h3';
|
|
|
2
2
|
import { $fetch } from 'ofetch';
|
|
3
3
|
import { a as AUTH_ENDPOINT } from '../../chunks/auth.constant-CnGo0q42.js';
|
|
4
4
|
import { b as HTTP_HEADER } from '../../chunks/http.constant-BzH5tJTG.js';
|
|
5
|
-
import { r as readSdkConfig } from '../../chunks/_shared-
|
|
5
|
+
import { r as readSdkConfig } from '../../chunks/_shared-Dyz_Ya9z.js';
|
|
6
6
|
import { T as TOKEN_STORAGE_KEY } from '../../chunks/storage.constant-CVWam5ls.js';
|
|
7
7
|
|
|
8
8
|
const idpLink_post = defineEventHandler(async (event) => {
|
|
@@ -2,7 +2,7 @@ import { defineEventHandler, createError, getQuery, parseCookies, getRequestHead
|
|
|
2
2
|
import { $fetch } from 'ofetch';
|
|
3
3
|
import { a as AUTH_ENDPOINT } from '../../chunks/auth.constant-CnGo0q42.js';
|
|
4
4
|
import { b as HTTP_HEADER } from '../../chunks/http.constant-BzH5tJTG.js';
|
|
5
|
-
import { r as readSdkConfig } from '../../chunks/_shared-
|
|
5
|
+
import { r as readSdkConfig } from '../../chunks/_shared-Dyz_Ya9z.js';
|
|
6
6
|
|
|
7
7
|
const idpLogin_get = defineEventHandler(async (event) => {
|
|
8
8
|
const { cmsUrl, clientId } = readSdkConfig(event);
|
|
@@ -2,7 +2,7 @@ import { defineEventHandler, createError, parseCookies } from 'h3';
|
|
|
2
2
|
import { $fetch } from 'ofetch';
|
|
3
3
|
import { a as AUTH_ENDPOINT } from '../../chunks/auth.constant-CnGo0q42.js';
|
|
4
4
|
import { b as HTTP_HEADER } from '../../chunks/http.constant-BzH5tJTG.js';
|
|
5
|
-
import { r as readSdkConfig } from '../../chunks/_shared-
|
|
5
|
+
import { r as readSdkConfig } from '../../chunks/_shared-Dyz_Ya9z.js';
|
|
6
6
|
import { T as TOKEN_STORAGE_KEY } from '../../chunks/storage.constant-CVWam5ls.js';
|
|
7
7
|
|
|
8
8
|
const idpMe_get = defineEventHandler(async (event) => {
|
|
@@ -2,7 +2,7 @@ import { defineEventHandler, createError, getQuery, parseCookies } from 'h3';
|
|
|
2
2
|
import { $fetch } from 'ofetch';
|
|
3
3
|
import { a as AUTH_ENDPOINT } from '../../chunks/auth.constant-CnGo0q42.js';
|
|
4
4
|
import { b as HTTP_HEADER } from '../../chunks/http.constant-BzH5tJTG.js';
|
|
5
|
-
import { r as readSdkConfig } from '../../chunks/_shared-
|
|
5
|
+
import { r as readSdkConfig } from '../../chunks/_shared-Dyz_Ya9z.js';
|
|
6
6
|
import { T as TOKEN_STORAGE_KEY } from '../../chunks/storage.constant-CVWam5ls.js';
|
|
7
7
|
|
|
8
8
|
const idpUnlink_delete = defineEventHandler(async (event) => {
|
|
@@ -2,7 +2,7 @@ import { defineEventHandler, createError, readBody, parseCookies, getRequestHead
|
|
|
2
2
|
import { $fetch } from 'ofetch';
|
|
3
3
|
import { a as AUTH_ENDPOINT } from '../../chunks/auth.constant-CnGo0q42.js';
|
|
4
4
|
import { b as HTTP_HEADER } from '../../chunks/http.constant-BzH5tJTG.js';
|
|
5
|
-
import { r as readSdkConfig, T as TOKEN_COOKIE_OPTIONS } from '../../chunks/_shared-
|
|
5
|
+
import { r as readSdkConfig, T as TOKEN_COOKIE_OPTIONS } from '../../chunks/_shared-Dyz_Ya9z.js';
|
|
6
6
|
import { T as TOKEN_STORAGE_KEY, R as REFRESH_TOKEN_STORAGE_KEY } from '../../chunks/storage.constant-CVWam5ls.js';
|
|
7
7
|
|
|
8
8
|
const login_post = defineEventHandler(async (event) => {
|
|
@@ -2,7 +2,7 @@ import { defineEventHandler, parseCookies, deleteCookie } from 'h3';
|
|
|
2
2
|
import { $fetch } from 'ofetch';
|
|
3
3
|
import { a as AUTH_ENDPOINT } from '../../chunks/auth.constant-CnGo0q42.js';
|
|
4
4
|
import { b as HTTP_HEADER } from '../../chunks/http.constant-BzH5tJTG.js';
|
|
5
|
-
import { r as readSdkConfig, T as TOKEN_COOKIE_OPTIONS } from '../../chunks/_shared-
|
|
5
|
+
import { r as readSdkConfig, T as TOKEN_COOKIE_OPTIONS } from '../../chunks/_shared-Dyz_Ya9z.js';
|
|
6
6
|
import { T as TOKEN_STORAGE_KEY, R as REFRESH_TOKEN_STORAGE_KEY } from '../../chunks/storage.constant-CVWam5ls.js';
|
|
7
7
|
|
|
8
8
|
const logout_post = defineEventHandler(async (event) => {
|
|
@@ -2,7 +2,7 @@ import { defineEventHandler, createError, parseCookies, setCookie } from 'h3';
|
|
|
2
2
|
import { $fetch } from 'ofetch';
|
|
3
3
|
import { a as AUTH_ENDPOINT } from '../../chunks/auth.constant-CnGo0q42.js';
|
|
4
4
|
import { b as HTTP_HEADER, R as RESPONSE_CASING_VALUE } from '../../chunks/http.constant-BzH5tJTG.js';
|
|
5
|
-
import { r as readSdkConfig, T as TOKEN_COOKIE_OPTIONS } from '../../chunks/_shared-
|
|
5
|
+
import { r as readSdkConfig, T as TOKEN_COOKIE_OPTIONS } from '../../chunks/_shared-Dyz_Ya9z.js';
|
|
6
6
|
import { R as REFRESH_TOKEN_STORAGE_KEY, T as TOKEN_STORAGE_KEY } from '../../chunks/storage.constant-CVWam5ls.js';
|
|
7
7
|
|
|
8
8
|
const refresh_post = defineEventHandler(async (event) => {
|
|
@@ -1,26 +1,18 @@
|
|
|
1
|
-
import { defineEventHandler, createError,
|
|
1
|
+
import { defineEventHandler, createError, parseCookies } from 'h3';
|
|
2
2
|
import { $fetch } from 'ofetch';
|
|
3
|
-
import { a as AUTHZ_ENDPOINT } from '../../chunks/authz.constant-
|
|
3
|
+
import { a as AUTHZ_ENDPOINT } from '../../chunks/authz.constant-BqX8Nzw6.js';
|
|
4
4
|
import { b as HTTP_HEADER } from '../../chunks/http.constant-BzH5tJTG.js';
|
|
5
|
-
import { r as readSdkConfig } from '../../chunks/_shared-
|
|
5
|
+
import { r as readSdkConfig } from '../../chunks/_shared-Dyz_Ya9z.js';
|
|
6
6
|
import { T as TOKEN_STORAGE_KEY } from '../../chunks/storage.constant-CVWam5ls.js';
|
|
7
7
|
|
|
8
8
|
const portalAccess_get = defineEventHandler(async (event) => {
|
|
9
|
-
const { cmsUrl, clientId
|
|
9
|
+
const { cmsUrl, clientId } = readSdkConfig(event);
|
|
10
10
|
if (!cmsUrl) throw createError({ statusCode: 500, message: "CMS URL not configured" });
|
|
11
|
-
const query = getQuery(event);
|
|
12
|
-
const portal = String(query.portal ?? defaultPortal ?? "").trim();
|
|
13
|
-
if (!portal) {
|
|
14
|
-
throw createError({
|
|
15
|
-
statusCode: 400,
|
|
16
|
-
message: "portal is required (query param or cmsSdk.portal module option)"
|
|
17
|
-
});
|
|
18
|
-
}
|
|
19
11
|
const cookies = parseCookies(event);
|
|
20
12
|
const token = cookies[TOKEN_STORAGE_KEY] || "";
|
|
21
13
|
if (!token) throw createError({ statusCode: 401, message: "Not authenticated" });
|
|
22
14
|
try {
|
|
23
|
-
return await $fetch(AUTHZ_ENDPOINT.portalAccess(
|
|
15
|
+
return await $fetch(AUTHZ_ENDPOINT.portalAccess(), {
|
|
24
16
|
baseURL: cmsUrl,
|
|
25
17
|
headers: {
|
|
26
18
|
[HTTP_HEADER.CLIENT_ID]: clientId || "",
|
|
@@ -2,14 +2,13 @@
|
|
|
2
2
|
* Authz domain DTOs (engine RBAC surface).
|
|
3
3
|
*
|
|
4
4
|
* Field names are camelCase per the SDK public-surface convention; the
|
|
5
|
-
* backend wire shape
|
|
6
|
-
*
|
|
5
|
+
* backend wire shape arrives camelCase too (`userId` — the CMS casing
|
|
6
|
+
* middleware rewrites response bodies). No tokens travel here — the
|
|
7
|
+
* access check is a pure read.
|
|
7
8
|
*/
|
|
8
9
|
export interface IPortalAccess {
|
|
9
|
-
/**
|
|
10
|
-
|
|
11
|
-
/** False only on an explicit deny — a denial status throws instead. */
|
|
12
|
-
hasAccess: boolean;
|
|
10
|
+
/** Caller id resolved by the engine (null when absent on the wire). */
|
|
11
|
+
userId: number | null;
|
|
13
12
|
/**
|
|
14
13
|
* Effective permission codes, e.g. `people:catalog:view`.
|
|
15
14
|
* `['*']` means wildcard (grant-all) — consumers should honour it.
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"authz.type.d.ts","sourceRoot":"","sources":["../../../src/services/authz/authz.type.ts"],"names":[],"mappings":"AAAA
|
|
1
|
+
{"version":3,"file":"authz.type.d.ts","sourceRoot":"","sources":["../../../src/services/authz/authz.type.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,MAAM,WAAW,aAAa;IAC5B,uEAAuE;IACvE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB;;;OAGG;IACH,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,sDAAsD;IACtD,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB"}
|
|
@@ -15,24 +15,23 @@ export interface IAuthzServiceOptions {
|
|
|
15
15
|
routeApi?: $Fetch;
|
|
16
16
|
/** Lazy flag — when true, the service returns fake data. */
|
|
17
17
|
mock: () => boolean;
|
|
18
|
-
/** Default portal id (Nuxt module option `cmsSdk.portal`). Per-call override wins. */
|
|
19
|
-
portal?: () => string | undefined;
|
|
20
18
|
}
|
|
21
19
|
export interface IAuthzService {
|
|
22
20
|
/**
|
|
23
|
-
* Resolve the caller's
|
|
24
|
-
*
|
|
21
|
+
* Resolve the caller's effective grants (`GET /api/v1/authz/me/portals`).
|
|
22
|
+
* Consumers decide access by checking their portal's gate key against
|
|
23
|
+
* `permissions` (e.g. via `useAuthzStore.can('people:portal:access')`).
|
|
25
24
|
*
|
|
26
25
|
* Throws on the documented error statuses so callers can branch:
|
|
27
|
-
* 401 `UNAUTHENTICATED` / `INVALID_TOKEN_AUDIENCE
|
|
28
|
-
*
|
|
29
|
-
* `
|
|
26
|
+
* 401 `UNAUTHENTICATED` / `INVALID_TOKEN_AUDIENCE`
|
|
27
|
+
* (codes survive in the error payload's `data` via the proxy's
|
|
28
|
+
* `authBackendError` / `extractAuthError`).
|
|
30
29
|
*/
|
|
31
|
-
portalAccess(
|
|
30
|
+
portalAccess(): Promise<IPortalAccess>;
|
|
32
31
|
}
|
|
33
32
|
/**
|
|
34
|
-
* Authz domain service. Mirrors the engine RBAC surface
|
|
35
|
-
*
|
|
33
|
+
* Authz domain service. Mirrors the engine RBAC surface: the caller's
|
|
34
|
+
* effective permissions and roles.
|
|
36
35
|
*
|
|
37
36
|
* The result is cheap to refetch and MUST be re-resolved on login and on
|
|
38
37
|
* session restore (page refresh) — caching across sessions is deliberately
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/services/authz/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAErC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAElD,YAAY,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAElD,MAAM,WAAW,oBAAoB;IACnC,qDAAqD;IACrD,GAAG,EAAE,MAAM,CAAC;IACZ;;;;;;;OAOG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,4DAA4D;IAC5D,IAAI,EAAE,MAAM,OAAO,CAAC;
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/services/authz/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAErC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAElD,YAAY,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAElD,MAAM,WAAW,oBAAoB;IACnC,qDAAqD;IACrD,GAAG,EAAE,MAAM,CAAC;IACZ;;;;;;;OAOG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,4DAA4D;IAC5D,IAAI,EAAE,MAAM,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,aAAa;IAC5B;;;;;;;;;OASG;IACH,YAAY,IAAI,OAAO,CAAC,aAAa,CAAC,CAAC;CACxC;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,oBAAoB,GAAG,aAAa,CAkB5E"}
|
|
@@ -87,7 +87,73 @@ export interface PeopleBuildPlanOutput {
|
|
|
87
87
|
plan: string;
|
|
88
88
|
planVersion: number;
|
|
89
89
|
}
|
|
90
|
+
/** `register_provider` (PIP-004 Track C factory action) — capability
|
|
91
|
+
* declarations may only DOWNGRADE from connector truth; the server
|
|
92
|
+
* rejects declared-lie-above-truth. */
|
|
93
|
+
export interface PeopleRegisterProviderParams {
|
|
94
|
+
providerKey: string;
|
|
95
|
+
providerType: 'entra' | 'github' | 'google_workspace' | 'm365' | 'scim_generic' | 'slack';
|
|
96
|
+
capabilities?: Record<string, {
|
|
97
|
+
support: string;
|
|
98
|
+
}>;
|
|
99
|
+
bindingPolicy?: 'account_per_employment' | 'shared_per_person';
|
|
100
|
+
retryPolicy?: {
|
|
101
|
+
maxAttempts?: number;
|
|
102
|
+
backoffBaseSeconds?: number;
|
|
103
|
+
respectRetryAfter?: boolean;
|
|
104
|
+
};
|
|
105
|
+
connection: {
|
|
106
|
+
tenantId?: string;
|
|
107
|
+
clientId?: string;
|
|
108
|
+
clientSecret?: string;
|
|
109
|
+
endpointBase?: string;
|
|
110
|
+
installationId?: string;
|
|
111
|
+
appId?: string;
|
|
112
|
+
[key: string]: unknown;
|
|
113
|
+
};
|
|
114
|
+
resourcePolicies?: Array<Record<string, unknown>>;
|
|
115
|
+
syncEnabled?: boolean;
|
|
116
|
+
orgMapping?: Record<string, unknown>;
|
|
117
|
+
}
|
|
118
|
+
export interface PeopleRegisterProviderOutput {
|
|
119
|
+
provider: string;
|
|
120
|
+
}
|
|
121
|
+
/** `import_directory` — manual per-provider directory import (Track D). */
|
|
122
|
+
export interface PeopleImportDirectoryOutput {
|
|
123
|
+
changeset: string;
|
|
124
|
+
directoryCount: number;
|
|
125
|
+
matched: number;
|
|
126
|
+
candidates: number;
|
|
127
|
+
}
|
|
128
|
+
/** `configure_sync` — set sync_enabled + org mapping (Track D). Enabling
|
|
129
|
+
* re-checks the directory-read capability gate server-side. */
|
|
130
|
+
export interface PeopleConfigureSyncParams {
|
|
131
|
+
syncEnabled: boolean;
|
|
132
|
+
orgMapping?: {
|
|
133
|
+
departmentField?: string;
|
|
134
|
+
jobTitleField?: string;
|
|
135
|
+
teamField?: string;
|
|
136
|
+
orgUnitStrategy?: 'per_department' | 'flat';
|
|
137
|
+
legalEntityRef?: string;
|
|
138
|
+
};
|
|
139
|
+
}
|
|
140
|
+
/** `apply_import_changeset` output (Track D). */
|
|
141
|
+
export interface PeopleApplyChangesetOutput {
|
|
142
|
+
orgUnitsCreated: number;
|
|
143
|
+
positionsCreated: number;
|
|
144
|
+
personsLinked: number;
|
|
145
|
+
}
|
|
90
146
|
export interface IdentityActions {
|
|
147
|
+
/** PIP-004 Track C — validated registration (connector truth, downgrades only). */
|
|
148
|
+
registerProvider(params: PeopleRegisterProviderParams, opts?: PeopleActionOpts): Promise<ActionResponse>;
|
|
149
|
+
/** PIP-004 Track D — manual directory import (draft changeset for review). */
|
|
150
|
+
importDirectory(providerUuid: string, opts?: PeopleActionOpts): Promise<ActionResponse>;
|
|
151
|
+
/** PIP-004 Track D — configure sync opt-in + org mapping. */
|
|
152
|
+
configureSync(providerUuid: string, params: PeopleConfigureSyncParams, opts?: PeopleActionOpts): Promise<ActionResponse>;
|
|
153
|
+
/** PIP-004 Track D — confirm a draft changeset (the only write path). */
|
|
154
|
+
applyImportChangeset(changesetUuid: string, opts?: PeopleActionOpts): Promise<ActionResponse>;
|
|
155
|
+
/** PIP-004 Track D — reject a draft changeset. */
|
|
156
|
+
discardImportChangeset(changesetUuid: string, opts?: PeopleActionOpts): Promise<ActionResponse>;
|
|
91
157
|
activateProvider(providerUuid: string, opts?: PeopleActionOpts): Promise<ActionResponse>;
|
|
92
158
|
disableProvider(providerUuid: string, opts?: PeopleActionOpts): Promise<ActionResponse>;
|
|
93
159
|
discardProvider(providerUuid: string, opts?: PeopleActionOpts): Promise<ActionResponse>;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"actions.d.ts","sourceRoot":"","sources":["../../../../src/services/people/identity/actions.ts"],"names":[],"mappings":"AAAA
|
|
1
|
+
{"version":3,"file":"actions.d.ts","sourceRoot":"","sources":["../../../../src/services/people/identity/actions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EAA0C,KAAK,UAAU,EAAE,MAAM,YAAY,CAAC;AAUrF,4EAA4E;AAC5E,MAAM,WAAW,0BAA0B;IACzC,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE;QACV,GAAG,EAAE,MAAM,CAAC;QACZ,KAAK,EAAE,MAAM,CAAC;QACd,WAAW,EAAE,MAAM,CAAC;QACpB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,0BAA0B;IACzC,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;2BAC2B;AAC3B,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE;QACP,KAAK,EAAE,MAAM,CAAC;QACd,GAAG,EAAE,MAAM,CAAC;QACZ,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC5B,mBAAmB,CAAC,EAAE,OAAO,CAAC;KAC/B,CAAC;CACH;AAED,kFAAkF;AAClF,MAAM,WAAW,2BAA2B;IAC1C,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC;CAChD;AAED;kCACkC;AAClC,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;gFACgF;AAChF,MAAM,WAAW,0BAA0B;IACzC,kBAAkB,EAAE,MAAM,CAAC;IAC3B,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,MAAM,2BAA2B,GACrC,iBAAiB,GAAG,qBAAqB,GAAG,aAAa,GAAG,YAAY,CAAC;AAE3E,8EAA8E;AAC9E,MAAM,WAAW,+BAA+B;IAC9C,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,IAAI,CAAC;IACf,0BAA0B,CAAC,EAAE,MAAM,CAAC;CACrC;AAED,kFAAkF;AAClF,MAAM,WAAW,2BAA2B;IAC1C,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE;QACT,KAAK,EAAE,MAAM,CAAC;QACd,UAAU,EAAE,MAAM,CAAC;QACnB,aAAa,EAAE,MAAM,CAAC;QACtB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,2BAA2B;IAC1C,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,6CAA6C;AAC7C,MAAM,WAAW,oBAAoB;IACnC,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,mFAAmF;AACnF,MAAM,WAAW,qBAAqB;IACpC,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE;QACX,GAAG,EAAE,MAAM,CAAC;QACZ,cAAc,EAAE,MAAM,CAAC;QACvB,QAAQ,EAAE,MAAM,CAAC;KAClB,CAAC;IACF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;CACrB;AAMD;;wCAEwC;AACxC,MAAM,WAAW,4BAA4B;IAC3C,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,OAAO,GAAG,QAAQ,GAAG,kBAAkB,GAAG,MAAM,GAAG,cAAc,GAAG,OAAO,CAAC;IAC1F,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACnD,aAAa,CAAC,EAAE,wBAAwB,GAAG,mBAAmB,CAAC;IAC/D,WAAW,CAAC,EAAE;QACZ,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,kBAAkB,CAAC,EAAE,MAAM,CAAC;QAC5B,iBAAiB,CAAC,EAAE,OAAO,CAAC;KAC7B,CAAC;IACF,UAAU,EAAE;QACV,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;KACxB,CAAC;IACF,gBAAgB,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAClD,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACtC;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,2EAA2E;AAC3E,MAAM,WAAW,2BAA2B;IAC1C,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;gEACgE;AAChE,MAAM,WAAW,yBAAyB;IACxC,WAAW,EAAE,OAAO,CAAC;IACrB,UAAU,CAAC,EAAE;QACX,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,eAAe,CAAC,EAAE,gBAAgB,GAAG,MAAM,CAAC;QAC5C,cAAc,CAAC,EAAE,MAAM,CAAC;KACzB,CAAC;CACH;AAED,iDAAiD;AACjD,MAAM,WAAW,0BAA0B;IACzC,eAAe,EAAE,MAAM,CAAC;IACxB,gBAAgB,EAAE,MAAM,CAAC;IACzB,aAAa,EAAE,MAAM,CAAC;CACvB;AAMD,MAAM,WAAW,eAAe;IAE9B,mFAAmF;IACnF,gBAAgB,CACd,MAAM,EAAE,4BAA4B,EACpC,IAAI,CAAC,EAAE,gBAAgB,GACtB,OAAO,CAAC,cAAc,CAAC,CAAC;IAC3B,8EAA8E;IAC9E,eAAe,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IACxF,6DAA6D;IAC7D,aAAa,CACX,YAAY,EAAE,MAAM,EACpB,MAAM,EAAE,yBAAyB,EACjC,IAAI,CAAC,EAAE,gBAAgB,GACtB,OAAO,CAAC,cAAc,CAAC,CAAC;IAC3B,yEAAyE;IACzE,oBAAoB,CAAC,aAAa,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAC9F,kDAAkD;IAClD,sBAAsB,CAAC,aAAa,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAChG,gBAAgB,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IACzF,eAAe,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IACxF,eAAe,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IACxF,KAAK,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAG9E,cAAc,CACZ,MAAM,EAAE,0BAA0B,EAClC,IAAI,CAAC,EAAE,gBAAgB,GACtB,OAAO,CAAC,cAAc,CAAC,CAAC;IAC3B,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAChF,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IACjF,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAC9E,eAAe,CACb,MAAM,EAAE,2BAA2B,EACnC,IAAI,CAAC,EAAE,gBAAgB,GACtB,OAAO,CAAC,cAAc,CAAC,CAAC;IAC3B,WAAW,CAAC,MAAM,EAAE,uBAAuB,EAAE,IAAI,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAC/F,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAC/E,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAGpF,cAAc,CACZ,MAAM,EAAE,0BAA0B,EAClC,IAAI,CAAC,EAAE,gBAAgB,GACtB,OAAO,CAAC,cAAc,CAAC,CAAC;IAC3B,mBAAmB,CACjB,MAAM,EAAE,+BAA+B,EACvC,IAAI,CAAC,EAAE,gBAAgB,GACtB,OAAO,CAAC,cAAc,CAAC,CAAC;IAG3B,WAAW,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IACnF,SAAS,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IACjF,eAAe,CACb,MAAM,EAAE,2BAA2B,EACnC,IAAI,CAAC,EAAE,gBAAgB,GACtB,OAAO,CAAC,cAAc,CAAC,CAAC;IAC3B,gBAAgB,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IACxF,QAAQ,CACN,WAAW,EAAE,MAAM,EACnB,MAAM,CAAC,EAAE,oBAAoB,EAC7B,IAAI,CAAC,EAAE,gBAAgB,GACtB,OAAO,CAAC,cAAc,CAAC,CAAC;IAG3B,SAAS,CAAC,MAAM,EAAE,qBAAqB,EAAE,IAAI,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAC3F,SAAS,CACP,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,qBAAqB,EAC7B,IAAI,CAAC,EAAE,gBAAgB,GACtB,OAAO,CAAC,cAAc,CAAC,CAAC;IAC3B,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAC/E,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;CAClF;AAMD,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,UAAU,GAAG,eAAe,CAmEtE"}
|
|
@@ -2,7 +2,7 @@ import { ContentItem } from '../../content/content.type';
|
|
|
2
2
|
/** `provider_config` (FEAT-009). Secrets encrypted at CT level (D2). ✅ */
|
|
3
3
|
export interface PeopleProviderConfigData {
|
|
4
4
|
providerKey: string;
|
|
5
|
-
providerType: 'entra' | '
|
|
5
|
+
providerType: 'entra' | 'github' | 'google_workspace' | 'm365' | 'scim_generic' | 'slack';
|
|
6
6
|
capabilities?: Record<string, {
|
|
7
7
|
support: 'supported' | 'unsupported' | 'manual' | 'partial';
|
|
8
8
|
executionMode?: string;
|
|
@@ -130,4 +130,54 @@ export interface PeopleDeprovisionPlanData {
|
|
|
130
130
|
state: 'draft' | 'active' | 'executing' | 'completed' | 'partially_completed' | 'failed' | 'superseded' | 'cancelled';
|
|
131
131
|
}
|
|
132
132
|
export type PeopleDeprovisionPlan = ContentItem<PeopleDeprovisionPlanData>;
|
|
133
|
+
/** `import_changeset` (PIP-004 Track D) — reviewable inbound-directory
|
|
134
|
+
* import draft; nothing applies until `apply_import_changeset`. */
|
|
135
|
+
export interface PeopleImportChangesetData {
|
|
136
|
+
providerRef: string;
|
|
137
|
+
runRef: string;
|
|
138
|
+
source?: 'manual' | 'cron';
|
|
139
|
+
directoryUsers?: Array<{
|
|
140
|
+
externalAccountId: string;
|
|
141
|
+
email?: string;
|
|
142
|
+
displayName?: string;
|
|
143
|
+
jobTitle?: string;
|
|
144
|
+
department?: string;
|
|
145
|
+
manager?: string;
|
|
146
|
+
teams?: string[];
|
|
147
|
+
directoryRoles?: string[];
|
|
148
|
+
enabled?: boolean;
|
|
149
|
+
}>;
|
|
150
|
+
matches?: Array<{
|
|
151
|
+
externalAccountId: string;
|
|
152
|
+
personRef: string;
|
|
153
|
+
matchBy: 'email' | 'upn' | 'external_binding';
|
|
154
|
+
email?: string;
|
|
155
|
+
jobTitle?: string;
|
|
156
|
+
department?: string;
|
|
157
|
+
teams?: string[];
|
|
158
|
+
directoryRoles?: string[];
|
|
159
|
+
action: 'link' | 'update';
|
|
160
|
+
}>;
|
|
161
|
+
candidates?: Array<{
|
|
162
|
+
externalAccountId: string;
|
|
163
|
+
email?: string;
|
|
164
|
+
displayName?: string;
|
|
165
|
+
jobTitle?: string;
|
|
166
|
+
department?: string;
|
|
167
|
+
teams?: string[];
|
|
168
|
+
suggestedAction: 'create_person' | 'ignore';
|
|
169
|
+
}>;
|
|
170
|
+
orgMapping?: Record<string, unknown>;
|
|
171
|
+
stats?: {
|
|
172
|
+
directoryCount?: number;
|
|
173
|
+
matched?: number;
|
|
174
|
+
candidates?: number;
|
|
175
|
+
orgUnitsCreated?: number;
|
|
176
|
+
positionsCreated?: number;
|
|
177
|
+
personsLinked?: number;
|
|
178
|
+
appliedAt?: string;
|
|
179
|
+
};
|
|
180
|
+
state: 'draft' | 'confirmed' | 'discarded';
|
|
181
|
+
}
|
|
182
|
+
export type PeopleImportChangeset = ContentItem<PeopleImportChangesetData>;
|
|
133
183
|
//# sourceMappingURL=ct.types.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"ct.types.d.ts","sourceRoot":"","sources":["../../../../src/services/people/identity/ct.types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAE9D,0EAA0E;AAC1E,MAAM,WAAW,wBAAwB;IACvC,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,OAAO,GAAG,
|
|
1
|
+
{"version":3,"file":"ct.types.d.ts","sourceRoot":"","sources":["../../../../src/services/people/identity/ct.types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAE9D,0EAA0E;AAC1E,MAAM,WAAW,wBAAwB;IACvC,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,OAAO,GAAG,QAAQ,GAAG,kBAAkB,GAAG,MAAM,GAAG,cAAc,GAAG,OAAO,CAAC;IAC1F,YAAY,CAAC,EAAE,MAAM,CACnB,MAAM,EACN;QACE,OAAO,EAAE,WAAW,GAAG,aAAa,GAAG,QAAQ,GAAG,SAAS,CAAC;QAC5D,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,sBAAsB,CAAC,EAAE,MAAM,CAAC;QAChC,eAAe,CAAC,EAAE,MAAM,CAAC;KAC1B,CACF,CAAC;IACF,aAAa,CAAC,EAAE,wBAAwB,GAAG,mBAAmB,CAAC;IAC/D,WAAW,CAAC,EAAE;QACZ,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,kBAAkB,CAAC,EAAE,MAAM,CAAC;QAC5B,iBAAiB,CAAC,EAAE,OAAO,CAAC;KAC7B,CAAC;IACF,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B;;kCAE8B;IAC9B,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,gBAAgB,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAClD,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,6DAA6D;IAC7D,UAAU,CAAC,EAAE;QACX,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;IACF,KAAK,EAAE,OAAO,GAAG,QAAQ,GAAG,UAAU,GAAG,WAAW,CAAC;CACtD;AACD,MAAM,MAAM,oBAAoB,GAAG,WAAW,CAAC,wBAAwB,CAAC,CAAC;AAEzE;;QAEQ;AACR,MAAM,WAAW,0BAA0B;IACzC,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE;QACP,KAAK,EAAE,SAAS,GAAG,UAAU,GAAG,SAAS,GAAG,iBAAiB,GAAG,WAAW,CAAC;QAC5E,KAAK,CAAC,EAAE,OAAO,CAAC;KACjB,CAAC;IACF,MAAM,EAAE;QACN,IAAI,EAAE,SAAS,GAAG,UAAU,GAAG,WAAW,CAAC;QAC3C,GAAG,EAAE,MAAM,CAAC;QACZ,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC;IACF,MAAM,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5E,OAAO,CAAC,EAAE;QACR,KAAK,EAAE,MAAM,CAAC;QACd,GAAG,EAAE,MAAM,CAAC;QACZ,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC5B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,mBAAmB,CAAC,EAAE,OAAO,CAAC;KAC/B,CAAC;IACF,0EAA0E;IAC1E,aAAa,CAAC,EAAE,UAAU,GAAG,WAAW,GAAG,QAAQ,GAAG,aAAa,CAAC;IACpE,eAAe,CAAC,EAAE,UAAU,GAAG,qBAAqB,GAAG,cAAc,GAAG,IAAI,CAAC;IAC7E,eAAe,CAAC,EACd,WAAW,GAAG,2BAA2B,GAAG,mBAAmB,GAAG,QAAQ,GAAG,IAAI,CAAC;IACpF,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,KAAK,EACD,SAAS,GACT,cAAc,GACd,UAAU,GACV,WAAW,GACX,UAAU,GACV,WAAW,GACX,UAAU,GACV,QAAQ,GACR,UAAU,GACV,mBAAmB,GACnB,WAAW,GACX,YAAY,CAAC;CAClB;AACD,MAAM,MAAM,sBAAsB,GAAG,WAAW,CAAC,0BAA0B,CAAC,CAAC;AAE7E,oFAAoF;AACpF,MAAM,WAAW,yBAAyB;IACxC,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,aAAa,CAAC,EAAE,wBAAwB,GAAG,mBAAmB,CAAC;IAC/D,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,0BAA0B,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3C,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC,aAAa,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC/C,KAAK,EACD,OAAO,GACP,QAAQ,GACR,WAAW,GACX,UAAU,GACV,kBAAkB,GAClB,kBAAkB,GAClB,mBAAmB,GACnB,UAAU,GACV,kBAAkB,GAClB,0BAA0B,CAAC;CAChC;AACD,MAAM,MAAM,qBAAqB,GAAG,WAAW,CAAC,yBAAyB,CAAC,CAAC;AAE3E,kFAAkF;AAClF,MAAM,WAAW,sBAAsB;IACrC,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,WAAW,EACT,SAAS,GAAG,iBAAiB,GAAG,UAAU,GAAG,YAAY,GAAG,qBAAqB,GAAG,WAAW,CAAC;IAClG,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,UAAU,CAAC;IAC1C,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,GAAG,aAAa,CAAC;IAC9C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,KAAK,EACD,MAAM,GACN,cAAc,GACd,UAAU,GACV,oBAAoB,GACpB,WAAW,GACX,cAAc,GACd,aAAa,CAAC;CACnB;AACD,MAAM,MAAM,kBAAkB,GAAG,WAAW,CAAC,sBAAsB,CAAC,CAAC;AAErE;+DAC+D;AAC/D,MAAM,WAAW,yBAAyB;IACxC,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE;QACf,GAAG,EAAE,MAAM,CAAC;QACZ,cAAc,EAAE,MAAM,CAAC;QACvB,QAAQ,EAAE,MAAM,CAAC;KAClB,CAAC;IACF,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,KAAK,CAAC;QACjB,YAAY,EACV,SAAS,GAAG,KAAK,GAAG,eAAe,GAAG,oBAAoB,GAAG,sBAAsB,CAAC;QACtF,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;QACjB,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,MAAM,EAAE,SAAS,GAAG,KAAK,GAAG,WAAW,GAAG,MAAM,GAAG,QAAQ,GAAG,kBAAkB,CAAC;QACjF,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,sBAAsB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KAClD,CAAC,CAAC;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACzC,KAAK,EACD,OAAO,GACP,QAAQ,GACR,WAAW,GACX,WAAW,GACX,qBAAqB,GACrB,QAAQ,GACR,YAAY,GACZ,WAAW,CAAC;CACjB;AACD,MAAM,MAAM,qBAAqB,GAAG,WAAW,CAAC,yBAAyB,CAAC,CAAC;AAE3E;oEACoE;AACpE,MAAM,WAAW,yBAAyB;IACxC,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,QAAQ,GAAG,MAAM,CAAC;IAC3B,cAAc,CAAC,EAAE,KAAK,CAAC;QACrB,iBAAiB,EAAE,MAAM,CAAC;QAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;QACjB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;QAC1B,OAAO,CAAC,EAAE,OAAO,CAAC;KACnB,CAAC,CAAC;IACH,OAAO,CAAC,EAAE,KAAK,CAAC;QACd,iBAAiB,EAAE,MAAM,CAAC;QAC1B,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,EAAE,OAAO,GAAG,KAAK,GAAG,kBAAkB,CAAC;QAC9C,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;QACjB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;QAC1B,MAAM,EAAE,MAAM,GAAG,QAAQ,CAAC;KAC3B,CAAC,CAAC;IACH,UAAU,CAAC,EAAE,KAAK,CAAC;QACjB,iBAAiB,EAAE,MAAM,CAAC;QAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;QACjB,eAAe,EAAE,eAAe,GAAG,QAAQ,CAAC;KAC7C,CAAC,CAAC;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,KAAK,CAAC,EAAE;QACN,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;IACF,KAAK,EAAE,OAAO,GAAG,WAAW,GAAG,WAAW,CAAC;CAC5C;AACD,MAAM,MAAM,qBAAqB,GAAG,WAAW,CAAC,yBAAyB,CAAC,CAAC"}
|
|
@@ -7,8 +7,8 @@
|
|
|
7
7
|
* Also re-exports the projection read types (`provider_health` +
|
|
8
8
|
* `provisioning/queue`) for a single import path per domain.
|
|
9
9
|
*/
|
|
10
|
-
export type { PeopleProviderConfigData, PeopleProviderConfig, PeopleProvisioningItemData, PeopleProvisioningItem, PeopleExternalBindingData, PeopleExternalBinding, PeopleDriftFindingData, PeopleDriftFinding, PeopleDeprovisionPlanData, PeopleDeprovisionPlan, } from './ct.types';
|
|
11
|
-
export type { PeopleResolveDesiredParams, PeopleResolveDesiredOutput, PeopleRetryItemOutput, PeopleResolveManuallyParams, PeopleReleaseItemParams, PeopleResolveBindingParams, PeopleResolveBindingOutcome, PeopleMarkDeletedVerifiedParams, PeopleAcceptExceptionParams, PeopleAcceptExceptionOutput, PeopleEscalateParams, PeopleBuildPlanParams, PeopleBuildPlanOutput, IdentityActions, } from './actions';
|
|
10
|
+
export type { PeopleProviderConfigData, PeopleProviderConfig, PeopleProvisioningItemData, PeopleProvisioningItem, PeopleExternalBindingData, PeopleExternalBinding, PeopleDriftFindingData, PeopleDriftFinding, PeopleDeprovisionPlanData, PeopleDeprovisionPlan, PeopleImportChangesetData, PeopleImportChangeset, } from './ct.types';
|
|
11
|
+
export type { PeopleResolveDesiredParams, PeopleResolveDesiredOutput, PeopleRetryItemOutput, PeopleResolveManuallyParams, PeopleReleaseItemParams, PeopleResolveBindingParams, PeopleResolveBindingOutcome, PeopleMarkDeletedVerifiedParams, PeopleAcceptExceptionParams, PeopleAcceptExceptionOutput, PeopleEscalateParams, PeopleBuildPlanParams, PeopleBuildPlanOutput, PeopleRegisterProviderParams, PeopleRegisterProviderOutput, PeopleImportDirectoryOutput, PeopleConfigureSyncParams, PeopleApplyChangesetOutput, IdentityActions, } from './actions';
|
|
12
12
|
export { buildIdentityActions } from './actions';
|
|
13
|
-
export type { PeopleProviderHealth, PeopleProviderProbeHistoryEntry, PeopleProvisionQueue, PeopleProvisionQueueEntry, PeopleProvisionQueueQuery, } from './projections';
|
|
13
|
+
export type { PeopleProviderHealth, PeopleProviderProbeHistoryEntry, PeopleProviderType, PeopleProviderTypeCapability, PeopleProviderTypes, PeopleProvisionQueue, PeopleProvisionQueueEntry, PeopleProvisionQueueQuery, } from './projections';
|
|
14
14
|
//# sourceMappingURL=index.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/services/people/identity/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,YAAY,EACV,wBAAwB,EACxB,oBAAoB,EACpB,0BAA0B,EAC1B,sBAAsB,EACtB,yBAAyB,EACzB,qBAAqB,EACrB,sBAAsB,EACtB,kBAAkB,EAClB,yBAAyB,EACzB,qBAAqB,GACtB,MAAM,YAAY,CAAC;AAEpB,YAAY,EACV,0BAA0B,EAC1B,0BAA0B,EAC1B,qBAAqB,EACrB,2BAA2B,EAC3B,uBAAuB,EACvB,0BAA0B,EAC1B,2BAA2B,EAC3B,+BAA+B,EAC/B,2BAA2B,EAC3B,2BAA2B,EAC3B,oBAAoB,EACpB,qBAAqB,EACrB,qBAAqB,EACrB,eAAe,GAChB,MAAM,WAAW,CAAC;AAEnB,OAAO,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AAGjD,YAAY,EACV,oBAAoB,EACpB,+BAA+B,EAC/B,oBAAoB,EACpB,yBAAyB,EACzB,yBAAyB,GAC1B,MAAM,eAAe,CAAC"}
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/services/people/identity/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,YAAY,EACV,wBAAwB,EACxB,oBAAoB,EACpB,0BAA0B,EAC1B,sBAAsB,EACtB,yBAAyB,EACzB,qBAAqB,EACrB,sBAAsB,EACtB,kBAAkB,EAClB,yBAAyB,EACzB,qBAAqB,EACrB,yBAAyB,EACzB,qBAAqB,GACtB,MAAM,YAAY,CAAC;AAEpB,YAAY,EACV,0BAA0B,EAC1B,0BAA0B,EAC1B,qBAAqB,EACrB,2BAA2B,EAC3B,uBAAuB,EACvB,0BAA0B,EAC1B,2BAA2B,EAC3B,+BAA+B,EAC/B,2BAA2B,EAC3B,2BAA2B,EAC3B,oBAAoB,EACpB,qBAAqB,EACrB,qBAAqB,EACrB,4BAA4B,EAC5B,4BAA4B,EAC5B,2BAA2B,EAC3B,yBAAyB,EACzB,0BAA0B,EAC1B,eAAe,GAChB,MAAM,WAAW,CAAC;AAEnB,OAAO,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AAGjD,YAAY,EACV,oBAAoB,EACpB,+BAA+B,EAC/B,kBAAkB,EAClB,4BAA4B,EAC5B,mBAAmB,EACnB,oBAAoB,EACpB,yBAAyB,EACzB,yBAAyB,GAC1B,MAAM,eAAe,CAAC"}
|
|
@@ -1,4 +1,21 @@
|
|
|
1
1
|
import { PeopleDeprovisionPlanData, PeopleDriftFindingData, PeopleExternalBindingData, PeopleProviderConfigData, PeopleProvisioningItemData } from './ct.types';
|
|
2
|
+
/** One connector-truth capability entry (PIP-004 Track C) — the
|
|
3
|
+
* register drawer pre-checks these read-only; downgrades only. */
|
|
4
|
+
export interface PeopleProviderTypeCapability {
|
|
5
|
+
support: 'supported' | 'unsupported' | 'manual' | 'partial';
|
|
6
|
+
executionMode?: string;
|
|
7
|
+
verificationCapability?: string;
|
|
8
|
+
knownLimitation?: string;
|
|
9
|
+
}
|
|
10
|
+
/** `GET /api/v1/people/providers/types` entry — every offered type
|
|
11
|
+
* resolves to a connector module (no fictional options). */
|
|
12
|
+
export interface PeopleProviderType {
|
|
13
|
+
providerType: PeopleProviderConfigData['providerType'];
|
|
14
|
+
capabilities: Record<string, PeopleProviderTypeCapability>;
|
|
15
|
+
}
|
|
16
|
+
export interface PeopleProviderTypes {
|
|
17
|
+
types: PeopleProviderType[];
|
|
18
|
+
}
|
|
2
19
|
/** Last 10 probe executions, newest first. Server-truncated. */
|
|
3
20
|
export interface PeopleProviderProbeHistoryEntry {
|
|
4
21
|
at: string;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"projections.d.ts","sourceRoot":"","sources":["../../../../src/services/people/identity/projections.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EACV,yBAAyB,EACzB,sBAAsB,EACtB,yBAAyB,EACzB,wBAAwB,EACxB,0BAA0B,EAC3B,MAAM,YAAY,CAAC;AAEpB,gEAAgE;AAChE,MAAM,WAAW,+BAA+B;IAC9C,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,WAAW,GAAG,QAAQ,GAAG,aAAa,CAAC;IAC/C,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED,oEAAoE;AACpE,MAAM,WAAW,oBAAoB;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,wBAAwB,CAAC,cAAc,CAAC,CAAC;IACvD,KAAK,EAAE,wBAAwB,CAAC,OAAO,CAAC,CAAC;IACzC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,UAAU,EAAE,WAAW,CAAC,wBAAwB,CAAC,YAAY,CAAC,CAAC,CAAC;IAChE,YAAY,EAAE,+BAA+B,EAAE,CAAC;IAChD,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,sBAAsB,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IAC7E,mBAAmB,EAAE,MAAM,CAAC;CAC7B;AAED,yDAAyD;AACzD,MAAM,WAAW,yBAAyB;IACxC,4BAA4B;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,qBAAqB;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,yBAAyB;IACzB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,kDAAkD;AAClD,MAAM,MAAM,yBAAyB,GACjC;IACE,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,0BAA0B,CAAC,OAAO,CAAC,CAAC;IAC3C,OAAO,EAAE,WAAW,CAAC,0BAA0B,CAAC,SAAS,CAAC,CAAC,CAAC;IAC5D,aAAa,EAAE,0BAA0B,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC;IAClE,eAAe,EAAE,0BAA0B,CAAC,iBAAiB,CAAC,CAAC;IAC/D,eAAe,EAAE,0BAA0B,CAAC,iBAAiB,CAAC,CAAC;IAC/D,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GACD;IACE,IAAI,EAAE,WAAW,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,WAAW,CACvB,WAAW,CAAC,yBAAyB,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,CAC7E,CAAC;IACF,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,WAAW,CAAC,WAAW,CAAC,yBAAyB,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC3F,iBAAiB,EAAE,MAAM,CAAC;IAC1B,sBAAsB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClD,GACD;IACE,IAAI,EAAE,SAAS,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,KAAK,EAAE,yBAAyB,CAAC,OAAO,CAAC,CAAC;CAC3C,CAAC;AAEN,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,yBAAyB,EAAE,CAAC;CACpC"}
|
|
1
|
+
{"version":3,"file":"projections.d.ts","sourceRoot":"","sources":["../../../../src/services/people/identity/projections.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EACV,yBAAyB,EACzB,sBAAsB,EACtB,yBAAyB,EACzB,wBAAwB,EACxB,0BAA0B,EAC3B,MAAM,YAAY,CAAC;AAEpB;mEACmE;AACnE,MAAM,WAAW,4BAA4B;IAC3C,OAAO,EAAE,WAAW,GAAG,aAAa,GAAG,QAAQ,GAAG,SAAS,CAAC;IAC5D,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;6DAC6D;AAC7D,MAAM,WAAW,kBAAkB;IACjC,YAAY,EAAE,wBAAwB,CAAC,cAAc,CAAC,CAAC;IACvD,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,4BAA4B,CAAC,CAAC;CAC5D;AAED,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,kBAAkB,EAAE,CAAC;CAC7B;AAED,gEAAgE;AAChE,MAAM,WAAW,+BAA+B;IAC9C,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,WAAW,GAAG,QAAQ,GAAG,aAAa,CAAC;IAC/C,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED,oEAAoE;AACpE,MAAM,WAAW,oBAAoB;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,wBAAwB,CAAC,cAAc,CAAC,CAAC;IACvD,KAAK,EAAE,wBAAwB,CAAC,OAAO,CAAC,CAAC;IACzC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,UAAU,EAAE,WAAW,CAAC,wBAAwB,CAAC,YAAY,CAAC,CAAC,CAAC;IAChE,YAAY,EAAE,+BAA+B,EAAE,CAAC;IAChD,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,sBAAsB,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IAC7E,mBAAmB,EAAE,MAAM,CAAC;CAC7B;AAED,yDAAyD;AACzD,MAAM,WAAW,yBAAyB;IACxC,4BAA4B;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,qBAAqB;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,yBAAyB;IACzB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,kDAAkD;AAClD,MAAM,MAAM,yBAAyB,GACjC;IACE,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,0BAA0B,CAAC,OAAO,CAAC,CAAC;IAC3C,OAAO,EAAE,WAAW,CAAC,0BAA0B,CAAC,SAAS,CAAC,CAAC,CAAC;IAC5D,aAAa,EAAE,0BAA0B,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC;IAClE,eAAe,EAAE,0BAA0B,CAAC,iBAAiB,CAAC,CAAC;IAC/D,eAAe,EAAE,0BAA0B,CAAC,iBAAiB,CAAC,CAAC;IAC/D,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GACD;IACE,IAAI,EAAE,WAAW,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,WAAW,CACvB,WAAW,CAAC,yBAAyB,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,CAC7E,CAAC;IACF,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,WAAW,CAAC,WAAW,CAAC,yBAAyB,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC3F,iBAAiB,EAAE,MAAM,CAAC;IAC1B,sBAAsB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClD,GACD;IACE,IAAI,EAAE,SAAS,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,KAAK,EAAE,yBAAyB,CAAC,OAAO,CAAC,CAAC;CAC3C,CAAC;AAEN,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,yBAAyB,EAAE,CAAC;CACpC"}
|
|
@@ -3,7 +3,7 @@ import { _invokeFactoryAction, _invokeRowAction } from './_invoke';
|
|
|
3
3
|
import { LegalAndOrgActions } from './legal/actions';
|
|
4
4
|
import { PeopleAccessAuditQuery, PeopleAccessAuditResult } from './perms/projections';
|
|
5
5
|
import { PermsActions } from './perms/actions';
|
|
6
|
-
import { PeopleProvisionQueue, PeopleProvisionQueueQuery, PeopleProviderHealth } from './identity/projections';
|
|
6
|
+
import { PeopleProvisionQueue, PeopleProvisionQueueQuery, PeopleProviderHealth, PeopleProviderTypes } from './identity/projections';
|
|
7
7
|
import { IdentityActions } from './identity/actions';
|
|
8
8
|
import { ProcessActions } from './process/actions';
|
|
9
9
|
import { IPeopleCopilotService } from './copilot';
|
|
@@ -24,6 +24,8 @@ export interface IPeopleServiceOptions {
|
|
|
24
24
|
export interface IPeopleService extends LegalAndOrgActions, PermsActions, IdentityActions, ProcessActions {
|
|
25
25
|
runAccessAudit(query: PeopleAccessAuditQuery): Promise<PeopleAccessAuditResult>;
|
|
26
26
|
getProviderHealth(key: string): Promise<PeopleProviderHealth>;
|
|
27
|
+
/** PIP-004 Track C — connector-truth provider catalog (register drawer). */
|
|
28
|
+
getProviderTypes(): Promise<PeopleProviderTypes>;
|
|
27
29
|
getProvisionQueue(query?: PeopleProvisionQueueQuery): Promise<PeopleProvisionQueue>;
|
|
28
30
|
readonly packOps: IPeoplePackOpsService;
|
|
29
31
|
readonly copilot: IPeopleCopilotService;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/services/people/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AACrC,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AACnE,OAAO,EAAqB,KAAK,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAC7E,OAAO,EAAE,KAAK,sBAAsB,EAAE,KAAK,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAChG,OAAO,EAAqB,KAAK,YAAY,EAAE,MAAM,iBAAiB,CAAC;AACvE,OAAO,EACL,KAAK,oBAAoB,EACzB,KAAK,yBAAyB,EAC9B,KAAK,oBAAoB,
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/services/people/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AACrC,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AACnE,OAAO,EAAqB,KAAK,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAC7E,OAAO,EAAE,KAAK,sBAAsB,EAAE,KAAK,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAChG,OAAO,EAAqB,KAAK,YAAY,EAAE,MAAM,iBAAiB,CAAC;AACvE,OAAO,EACL,KAAK,oBAAoB,EACzB,KAAK,yBAAyB,EAC9B,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,EACzB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAwB,KAAK,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAChF,OAAO,EAAuB,KAAK,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAC7E,OAAO,EAA8B,KAAK,qBAAqB,EAAE,MAAM,WAAW,CAAC;AACnF,OAAO,EAA8B,KAAK,qBAAqB,EAAE,MAAM,WAAW,CAAC;AACnF,OAAO,EAA6B,KAAK,oBAAoB,EAAE,MAAM,UAAU,CAAC;AAChF,OAAO,EAA8B,KAAK,qBAAqB,EAAE,MAAM,WAAW,CAAC;AAEnF,MAAM,WAAW,qBAAqB;IACpC,qDAAqD;IACrD,GAAG,EAAE,MAAM,CAAC;CACb;AAED;;;;;;GAMG;AACH,MAAM,WAAW,cACf,SAAQ,kBAAkB,EAAE,YAAY,EAAE,eAAe,EAAE,cAAc;IAEzE,cAAc,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;IAChF,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAC9D,4EAA4E;IAC5E,gBAAgB,IAAI,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACjD,iBAAiB,CAAC,KAAK,CAAC,EAAE,yBAAyB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAEpF,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAC;IAExC,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAC;IAExC,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;IAGtC,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAC;CACzC;AAMD,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,qBAAqB,GAAG,cAAc,CA8C/E;AAUD,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,CAAC"}
|
package/dist/stores/authz.d.ts
CHANGED
|
@@ -1,8 +1,8 @@
|
|
|
1
1
|
import { ICmsSDK } from '../core/sdk.type';
|
|
2
2
|
import { IPortalAccess } from '../services/authz';
|
|
3
3
|
/**
|
|
4
|
-
* Authz store —
|
|
5
|
-
*
|
|
4
|
+
* Authz store — authorization domain state (permissions, roles) with the
|
|
5
|
+
* canonical fetch-once cache.
|
|
6
6
|
*
|
|
7
7
|
* The call contract for every portal:
|
|
8
8
|
* - fetch on login success,
|
|
@@ -15,102 +15,88 @@ import { IPortalAccess } from '../services/authz';
|
|
|
15
15
|
* the auth store — silent sliding token rotation does NOT invalidate) and
|
|
16
16
|
* reset on logout, so a fresh login always re-resolves access.
|
|
17
17
|
*
|
|
18
|
-
*
|
|
19
|
-
*
|
|
20
|
-
* portal
|
|
18
|
+
* The endpoint (`GET /api/v1/authz/me/portals`) returns the caller's
|
|
19
|
+
* effective grants only — there is no access flag on the wire. Consumers
|
|
20
|
+
* gate their portal's access key themselves (e.g. `can('people:portal:access')`
|
|
21
|
+
* in the route middleware). Consumers branch on `errorCode` for the
|
|
22
|
+
* documented failures: `UNAUTHENTICATED` / `INVALID_TOKEN_AUDIENCE`
|
|
23
|
+
* (session unusable for this portal) and a legacy 403
|
|
24
|
+
* `PORTAL_ACCESS_DENIED` (still honoured for older backends).
|
|
21
25
|
*/
|
|
22
26
|
export declare const useAuthzStore: import('pinia').StoreDefinition<"cms-authz", Pick<{
|
|
23
|
-
portal: import('vue').Ref<string, string>;
|
|
24
27
|
portalAccess: import('vue').Ref<{
|
|
25
|
-
|
|
26
|
-
hasAccess: boolean;
|
|
28
|
+
userId: number | null;
|
|
27
29
|
permissions: string[];
|
|
28
30
|
roles: string[];
|
|
29
31
|
} | null, IPortalAccess | {
|
|
30
|
-
|
|
31
|
-
hasAccess: boolean;
|
|
32
|
+
userId: number | null;
|
|
32
33
|
permissions: string[];
|
|
33
34
|
roles: string[];
|
|
34
35
|
} | null>;
|
|
35
36
|
loaded: import('vue').Ref<boolean, boolean>;
|
|
36
37
|
isLoading: import('vue').Ref<boolean, boolean>;
|
|
37
38
|
errorCode: import('vue').Ref<string, string>;
|
|
38
|
-
hasAccess: import('vue').ComputedRef<boolean>;
|
|
39
39
|
permissions: import('vue').ComputedRef<string[]>;
|
|
40
40
|
roles: import('vue').ComputedRef<string[]>;
|
|
41
41
|
isSessionInvalid: import('vue').ComputedRef<boolean>;
|
|
42
42
|
isAccessDenied: import('vue').ComputedRef<boolean>;
|
|
43
43
|
setSdk: (instance: ICmsSDK) => void;
|
|
44
|
-
setPortal: (id: string) => void;
|
|
45
44
|
loadPortalAccess: (opts?: {
|
|
46
45
|
force?: boolean;
|
|
47
|
-
portal?: string;
|
|
48
46
|
}) => Promise<void>;
|
|
49
47
|
can: (permission: string) => boolean;
|
|
50
48
|
hasRole: (role: string) => boolean;
|
|
51
49
|
hasAnyPermission: (list: string[]) => boolean;
|
|
52
50
|
hasAllPermissions: (list: string[]) => boolean;
|
|
53
|
-
}, "
|
|
54
|
-
portal: import('vue').Ref<string, string>;
|
|
51
|
+
}, "portalAccess" | "loaded" | "errorCode" | "isLoading">, Pick<{
|
|
55
52
|
portalAccess: import('vue').Ref<{
|
|
56
|
-
|
|
57
|
-
hasAccess: boolean;
|
|
53
|
+
userId: number | null;
|
|
58
54
|
permissions: string[];
|
|
59
55
|
roles: string[];
|
|
60
56
|
} | null, IPortalAccess | {
|
|
61
|
-
|
|
62
|
-
hasAccess: boolean;
|
|
57
|
+
userId: number | null;
|
|
63
58
|
permissions: string[];
|
|
64
59
|
roles: string[];
|
|
65
60
|
} | null>;
|
|
66
61
|
loaded: import('vue').Ref<boolean, boolean>;
|
|
67
62
|
isLoading: import('vue').Ref<boolean, boolean>;
|
|
68
63
|
errorCode: import('vue').Ref<string, string>;
|
|
69
|
-
hasAccess: import('vue').ComputedRef<boolean>;
|
|
70
64
|
permissions: import('vue').ComputedRef<string[]>;
|
|
71
65
|
roles: import('vue').ComputedRef<string[]>;
|
|
72
66
|
isSessionInvalid: import('vue').ComputedRef<boolean>;
|
|
73
67
|
isAccessDenied: import('vue').ComputedRef<boolean>;
|
|
74
68
|
setSdk: (instance: ICmsSDK) => void;
|
|
75
|
-
setPortal: (id: string) => void;
|
|
76
69
|
loadPortalAccess: (opts?: {
|
|
77
70
|
force?: boolean;
|
|
78
|
-
portal?: string;
|
|
79
71
|
}) => Promise<void>;
|
|
80
72
|
can: (permission: string) => boolean;
|
|
81
73
|
hasRole: (role: string) => boolean;
|
|
82
74
|
hasAnyPermission: (list: string[]) => boolean;
|
|
83
75
|
hasAllPermissions: (list: string[]) => boolean;
|
|
84
|
-
}, "
|
|
85
|
-
portal: import('vue').Ref<string, string>;
|
|
76
|
+
}, "permissions" | "roles" | "isSessionInvalid" | "isAccessDenied">, Pick<{
|
|
86
77
|
portalAccess: import('vue').Ref<{
|
|
87
|
-
|
|
88
|
-
hasAccess: boolean;
|
|
78
|
+
userId: number | null;
|
|
89
79
|
permissions: string[];
|
|
90
80
|
roles: string[];
|
|
91
81
|
} | null, IPortalAccess | {
|
|
92
|
-
|
|
93
|
-
hasAccess: boolean;
|
|
82
|
+
userId: number | null;
|
|
94
83
|
permissions: string[];
|
|
95
84
|
roles: string[];
|
|
96
85
|
} | null>;
|
|
97
86
|
loaded: import('vue').Ref<boolean, boolean>;
|
|
98
87
|
isLoading: import('vue').Ref<boolean, boolean>;
|
|
99
88
|
errorCode: import('vue').Ref<string, string>;
|
|
100
|
-
hasAccess: import('vue').ComputedRef<boolean>;
|
|
101
89
|
permissions: import('vue').ComputedRef<string[]>;
|
|
102
90
|
roles: import('vue').ComputedRef<string[]>;
|
|
103
91
|
isSessionInvalid: import('vue').ComputedRef<boolean>;
|
|
104
92
|
isAccessDenied: import('vue').ComputedRef<boolean>;
|
|
105
93
|
setSdk: (instance: ICmsSDK) => void;
|
|
106
|
-
setPortal: (id: string) => void;
|
|
107
94
|
loadPortalAccess: (opts?: {
|
|
108
95
|
force?: boolean;
|
|
109
|
-
portal?: string;
|
|
110
96
|
}) => Promise<void>;
|
|
111
97
|
can: (permission: string) => boolean;
|
|
112
98
|
hasRole: (role: string) => boolean;
|
|
113
99
|
hasAnyPermission: (list: string[]) => boolean;
|
|
114
100
|
hasAllPermissions: (list: string[]) => boolean;
|
|
115
|
-
}, "setSdk" | "
|
|
101
|
+
}, "setSdk" | "loadPortalAccess" | "can" | "hasRole" | "hasAnyPermission" | "hasAllPermissions">>;
|
|
116
102
|
//# sourceMappingURL=authz.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"authz.d.ts","sourceRoot":"","sources":["../../src/stores/authz.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;
|
|
1
|
+
{"version":3,"file":"authz.d.ts","sourceRoot":"","sources":["../../src/stores/authz.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAIhD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAEvD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;uBAwDI,OAAO,KAAG,IAAI;8BAiBD;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,KAAG,OAAO,CAAC,IAAI,CAAC;sBAlCjD,MAAM,KAAG,OAAO;oBAKlB,MAAM,KAAG,OAAO;6BAEP,MAAM,EAAE,KAAG,OAAO;8BAKjB,MAAM,EAAE,KAAG,OAAO;;;;;;;;;;;;;;;;;;uBAKzB,OAAO,KAAG,IAAI;8BAiBD;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,KAAG,OAAO,CAAC,IAAI,CAAC;sBAlCjD,MAAM,KAAG,OAAO;oBAKlB,MAAM,KAAG,OAAO;6BAEP,MAAM,EAAE,KAAG,OAAO;8BAKjB,MAAM,EAAE,KAAG,OAAO;;;;;;;;;;;;;;;;;;uBAKzB,OAAO,KAAG,IAAI;8BAiBD;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,KAAG,OAAO,CAAC,IAAI,CAAC;sBAlCjD,MAAM,KAAG,OAAO;oBAKlB,MAAM,KAAG,OAAO;6BAEP,MAAM,EAAE,KAAG,OAAO;8BAKjB,MAAM,EAAE,KAAG,OAAO;iGAuGtD,CAAC"}
|
package/dist/stores/content.d.ts
CHANGED
|
@@ -4096,6 +4096,6 @@ export declare const useContentStore: import('pinia').StoreDefinition<"cms-conte
|
|
|
4096
4096
|
remove: (uuid: string) => Promise<void>;
|
|
4097
4097
|
fetchActions: (uuid: string) => Promise<ContentAction[]>;
|
|
4098
4098
|
invokeAction: (uuid: string, actionName: string, payload?: ActionInvokePayload) => Promise<ActionResponse>;
|
|
4099
|
-
}, "create" | "remove" | "setSdk" | "getByType" | "getActionsForType" | "fetchByType" | "fetchByUuids" | "fetchOne" | "
|
|
4099
|
+
}, "create" | "update" | "remove" | "setSdk" | "getByType" | "getActionsForType" | "fetchByType" | "fetchByUuids" | "fetchOne" | "fetchActions" | "invokeAction">>;
|
|
4100
4100
|
export {};
|
|
4101
4101
|
//# sourceMappingURL=content.d.ts.map
|