@h-ai/iam 0.1.0-alpha.19 → 0.1.0-alpha.20

package/dist/index.js

@@ -753,6 +753,20 @@ var DbApiKeyRepository = class extends BaseReldbCrudRepository {
     );
   }
 };
+
+// src/iam-agreement.ts
+function buildAgreementDisplay(config, enabled) {
+  if (!enabled)
+    return void 0;
+  if (!config.userAgreementUrl && !config.privacyPolicyUrl)
+    return void 0;
+  return {
+    userAgreementUrl: config.userAgreementUrl,
+    privacyPolicyUrl: config.privacyPolicyUrl,
+    showOnRegister: config.showOnRegister,
+    showOnLogin: config.showOnLogin
+  };
+}
 var TABLE_NAME2 = "hai_iam_users";
 var USER_FIELDS = [
   {
@@ -1503,9 +1517,6 @@ function createOtpStrategy(config) {
   const registerConfig = config.registerConfig;
   const allowAutoRegister = registerConfig?.enabled ?? config.autoRegister ?? false;
   const defaultEnabled = registerConfig?.defaultEnabled ?? true;
-  function buildChallengeResult(expiresAt) {
-    return { expiresAt };
-  }
   const strategy = {
     type: "otp",
     name: "otp-strategy",
@@ -1633,7 +1644,7 @@ function createOtpStrategy(config) {
         iamM("iam_identifierTypeNotSupported")
       );
     }
-    const result = buildChallengeResult(expiresAt);
+    const result = { expiresAt };
     logger3.debug("OTP challenge sent", { identifier, expiresAt });
     return ok(result);
   }
@@ -1870,20 +1881,6 @@ function buildAuthnOperations(deps) {
   } = deps;
   const loginConfig = LoginConfigSchema.parse(config.login ?? {});
   const agreementConfig = AgreementConfigSchema.parse(config.agreements ?? {});
-  function buildAgreementDisplay() {
-    if (!agreementConfig.showOnLogin) {
-      return void 0;
-    }
-    if (!agreementConfig.userAgreementUrl && !agreementConfig.privacyPolicyUrl) {
-      return void 0;
-    }
-    return {
-      userAgreementUrl: agreementConfig.userAgreementUrl,
-      privacyPolicyUrl: agreementConfig.privacyPolicyUrl,
-      showOnRegister: agreementConfig.showOnRegister,
-      showOnLogin: agreementConfig.showOnLogin
-    };
-  }
   function loginDisabled(type) {
     if (!loginConfig[type]) {
       return err(
@@ -1960,7 +1957,7 @@ function buildAuthnOperations(deps) {
       tokens: tokenPair,
       roles: roleCodesResult.data,
       permissions: permCodesResult.data,
-      agreements: buildAgreementDisplay()
+      agreements: buildAgreementDisplay(agreementConfig, agreementConfig.showOnLogin)
     });
   }
   async function loginWithStrategy(type, credentials, strategy) {
@@ -4297,18 +4294,6 @@ function buildRegistrationOps(ctx) {
     }
     return ok(void 0);
   }
-  function buildAgreementDisplay() {
-    if (!agreementConfig.showOnRegister)
-      return void 0;
-    if (!agreementConfig.userAgreementUrl && !agreementConfig.privacyPolicyUrl)
-      return void 0;
-    return {
-      userAgreementUrl: agreementConfig.userAgreementUrl,
-      privacyPolicyUrl: agreementConfig.privacyPolicyUrl,
-      showOnRegister: agreementConfig.showOnRegister,
-      showOnLogin: agreementConfig.showOnLogin
-    };
-  }
   async function assignDefaultRole(userId) {
     if (!config.rbac?.defaultRole)
       return;
@@ -4363,7 +4348,7 @@ function buildRegistrationOps(ctx) {
       logger9.info("User registered", { userId: createdUser.id, username: options.username });
       return ok({
         user: toUser(createdUser),
-        agreements: buildAgreementDisplay()
+        agreements: buildAgreementDisplay(agreementConfig, agreementConfig.showOnRegister)
       });
     },
     validatePassword(password) {
@@ -4798,9 +4783,6 @@ function buildUserFunctions(deps) {
 
 // src/iam-main.ts
 var logger10 = core.logger.child({ module: "iam", scope: "main" });
-function sanitizeIamConfig(config) {
-  return core.sanitize.sanitizeSensitiveFields(config);
-}
 var initInProgress = false;
 var currentConfig = null;
 var currentAuth = null;
@@ -4953,7 +4935,7 @@ var iam = {
     return currentApiKey ?? notInitializedApiKey;
   },
   get config() {
-    return currentConfig ? sanitizeIamConfig(currentConfig) : null;
+    return currentConfig ? core.sanitize.sanitizeSensitiveFields(currentConfig) : null;
   },
   get isInitialized() {
     return currentConfig !== null;