@happyvertical/smrt-users 0.51.10 → 0.51.11

package/dist/index.js

@@ -1,4 +1,4 @@
-import { $ as RoleCollection, A as getConfiguredAncestorReadPolicy, At as TenantPermissionEffect, B as TenantCollection, C as decodeOidcTransaction, Ct as AccessRequestStatus, Dt as MembershipStatus, E as resolveOidcProviderConfig, Et as DEFAULT_TENANT_POLICY, G as RolePermissionCollection, H as MAX_TENANT_HIERARCHY_DEPTH, I as UserEmailKeyBackfillError, J as deriveOperationPermissionSlug, K as PermissionCatalogService, L as backfillUserEmailKeys, M as normalizeAncestorReadPolicy, Mt as UserStatus, N as OidcProvisioningError, Nt as UsersCliAuthRequest, O as ANCESTOR_READ_ACTION, Ot as OverrideEffect, P as UserCollection, Q as RolePermission, R as TenantPermissionOverrideCollection, S as OidcLoginService, St as generateSessionId, T as getUsersOidcConfig, Tt as DEFAULT_ROLE_SLUGS, U as Tenant, V as TenantHierarchyError, W as DEFAULT_ROLE_PERMISSION_PATTERNS, X as registerPermissionDefinitions, Y as normalizeOperationPermissionAction, Z as syncPermissionCatalog, _ as readMobileBearerToken, _t as normalizeEmail, a as TerminalAuthRateLimitError, at as MembershipCollection, b as PermissionResolver, bt as DEFAULT_SESSION_TTL, c as assertOperationPermission, ct as GroupRole, d as getCurrentSessionPermissionContext, dt as GroupCollection, et as Role, f as getRequestScopedDatabase, ft as Group, g as MobileAuthService, gt as isValidEmail, h as MobileAuthError, ht as User, i as TerminalAuthError, it as MembershipOverride, j as isAncestorReadableSlug, jt as TenantStatus, k as DEFAULT_ANCESTOR_READ_MAX_DEPTH, kt as SessionStatus, l as checkOperationPermission, lt as GroupMemberCollection, m as withSessionPermissionContext, mt as UsersCliAuthApproveLimit, n as DEFAULT_CLI_AUTH_REQUEST_TTL_SECONDS, nt as Permission, o as TerminalAuthService, ot as Membership, p as withPrincipalPermissionContext, pt as UsersCliAuthApproveLimitCollection, q as deriveOperationPermissionCollectionName, r as DEFAULT_CLI_SESSION_TTL_SECONDS, rt as MembershipOverrideCollection, s as OperationPermissionError, st as GroupRoleCollection, t as DEFAULT_CLI_AUTH_POLL_INTERVAL_SECONDS, tt as PermissionCollection, u as hasOperationPermission, ut as GroupMember, v as validateMobileRedirectUri, vt as UsersCliAuthRequestCollection, w as encodeOidcTransaction, wt as DEFAULT_ROLES, x as OidcLoginError, xt as Session, y as SessionService, yt as SessionCollection, z as TenantPermissionOverride } from "./chunks/TerminalAuthService-BlDTirYc.js";
+import { $ as RoleCollection, A as getConfiguredAncestorReadPolicy, At as TenantPermissionEffect, B as TenantCollection, C as decodeOidcTransaction, Ct as AccessRequestStatus, Dt as MembershipStatus, E as resolveOidcProviderConfig, Et as DEFAULT_TENANT_POLICY, G as RolePermissionCollection, H as MAX_TENANT_HIERARCHY_DEPTH, I as UserEmailKeyBackfillError, J as deriveOperationPermissionSlug, K as PermissionCatalogService, L as backfillUserEmailKeys, M as normalizeAncestorReadPolicy, Mt as UserStatus, N as OidcProvisioningError, Nt as UsersCliAuthRequest, O as ANCESTOR_READ_ACTION, Ot as OverrideEffect, P as UserCollection, Q as RolePermission, R as TenantPermissionOverrideCollection, S as OidcLoginService, St as generateSessionId, T as getUsersOidcConfig, Tt as DEFAULT_ROLE_SLUGS, U as Tenant, V as TenantHierarchyError, W as DEFAULT_ROLE_PERMISSION_PATTERNS, X as registerPermissionDefinitions, Y as normalizeOperationPermissionAction, Z as syncPermissionCatalog, _ as readMobileBearerToken, _t as normalizeEmail, a as TerminalAuthRateLimitError, at as MembershipCollection, b as PermissionResolver, bt as DEFAULT_SESSION_TTL, c as assertOperationPermission, ct as GroupRole, d as getCurrentSessionPermissionContext, dt as GroupCollection, et as Role, f as getRequestScopedDatabase, ft as Group, g as MobileAuthService, gt as isValidEmail, h as MobileAuthError, ht as User, i as TerminalAuthError, it as MembershipOverride, j as isAncestorReadableSlug, jt as TenantStatus, k as DEFAULT_ANCESTOR_READ_MAX_DEPTH, kt as SessionStatus, l as checkOperationPermission, lt as GroupMemberCollection, m as withSessionPermissionContext, mt as UsersCliAuthApproveLimit, n as DEFAULT_CLI_AUTH_REQUEST_TTL_SECONDS, nt as Permission, o as TerminalAuthService, ot as Membership, p as withPrincipalPermissionContext, pt as UsersCliAuthApproveLimitCollection, q as deriveOperationPermissionCollectionName, r as DEFAULT_CLI_SESSION_TTL_SECONDS, rt as MembershipOverrideCollection, s as OperationPermissionError, st as GroupRoleCollection, t as DEFAULT_CLI_AUTH_POLL_INTERVAL_SECONDS, tt as PermissionCollection, u as hasOperationPermission, ut as GroupMember, v as validateMobileRedirectUri, vt as UsersCliAuthRequestCollection, w as encodeOidcTransaction, wt as DEFAULT_ROLES, x as OidcLoginError, xt as Session, y as SessionService, yt as SessionCollection, z as TenantPermissionOverride } from "./chunks/TerminalAuthService-doav8gmc.js";
 import { ObjectRegistry, SmrtCollection, SmrtObject, field, findManifestEntryByQualifiedName, isUniqueViolationError, registerRetentionTask, smrt, unregisterRetentionTask } from "@happyvertical/smrt-core";
 import { PROFILE_EMAIL_KEY_BACKFILL_NAME, Person, ProfileCollection, ProfileTypeCollection, normalizeIdentityEmail } from "@happyvertical/smrt-profiles";
 import { createHash } from "node:crypto";
@@ -48,6 +48,7 @@ __decorateClass$2([field({
 })], UsersMagicLinkToken.prototype, "expiresAt", 2);
 UsersMagicLinkToken = __decorateClass$2([smrt({
 	tableName: "users_magic_link_tokens",
+	sensitive: true,
 	api: { include: [] },
 	mcp: { include: [] },
 	cli: { skipApiCheck: true }
@@ -1075,7 +1076,7 @@ var MagicLinkService = class MagicLinkService {
 	* The caller is responsible for emailing the token to the user.
 	*/
 	async generate(email) {
-		const { SignJWT } = await import("./chunks/TerminalAuthService-BlDTirYc.js").then((n) => n.D);
+		const { SignJWT } = await import("./chunks/TerminalAuthService-doav8gmc.js").then((n) => n.D);
 		const key = await this.getSigningKey();
 		const nonce = crypto.randomUUID();
 		const normalizedEmail = normalizeEmail(email);
@@ -1104,7 +1105,7 @@ var MagicLinkService = class MagicLinkService {
 	* @throws {MagicLinkError} If the token is invalid, expired, or already used
 	*/
 	async verify(token) {
-		const { jwtVerify, errors } = await import("./chunks/TerminalAuthService-BlDTirYc.js").then((n) => n.D);
+		const { jwtVerify, errors } = await import("./chunks/TerminalAuthService-doav8gmc.js").then((n) => n.D);
 		const key = await this.getSigningKey();
 		let payload;
 		try {